From nobody Mon Aug 3 14:11:25 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C8471A0277 for ; Mon, 3 Aug 2015 14:11:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -12.312 X-Spam-Level: X-Spam-Status: No, score=-12.312 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MKcC1y4AF089 for ; Mon, 3 Aug 2015 14:11:21 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E12D11A0195 for ; Mon, 3 Aug 2015 14:11:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1325; q=dns/txt; s=iport; t=1438636281; x=1439845881; h=from:content-transfer-encoding:subject:message-id:date: to:mime-version; bh=DHR3P5hZQWwJV6dvk+HWsmrYqkyrsOiQbvFnIh/REmE=; b=V/sJ6uYAIkebizhXLhd+1P6uwsrP46/GCKg+BPbBjh4ENK1xQtoT/Lg6 2r7l4SaTfAaf33ayEEmm4RzCv6WSk/YpyZzcB1jgWq2KJc6vPmXR5qsU9 nUmKEk68Pzbtndp6laaIt9Hn33ccGWYIxSdF3i3+hUOxFLGHE1Kg+Vj3v I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0A4AQD5179V/4MNJK1bGQEBgn8BU2mRQasbgQ0FSBsFCoJDhG86EgEBAQEBAQGBCoRkghmIJQ2lNqV0AQEIAQEBAQEBHI9zEgEBboIXTR2BFAWNQYc4hHuHUYhZkG8mhB0eMQGBDYE+AQEB X-IronPort-AV: E=Sophos;i="5.15,603,1432598400"; d="scan'208";a="175067152" Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-6.cisco.com with ESMTP; 03 Aug 2015 21:11:20 +0000 Received: from [10.24.245.199] ([10.24.245.199]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id t73LBJT6003868 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 3 Aug 2015 21:11:20 GMT From: =?utf-8?Q?=F0=9F=94=93Dan_Wing?= Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: Date: Mon, 3 Aug 2015 14:11:18 -0700 To: i2nsf@ietf.org Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\)) X-Mailer: Apple Mail (2.2102) Archived-At: Subject: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Aug 2015 21:11:24 -0000 Based on https://sites.google.com/site/interface2nsf/home that I am = looking at now, I have two questions, 1. "The primary goal of I2NSF is to define an information model, a set = of software interfaces and data models for controlling and monitoring = aspects of physical and virtual NSFs." Should that say "... and monitoring SECURITY aspects ...", as was in = Strassner's = http://www.ietf.org/mail-archive/web/i2nsf/current/msg00388.html? Even with the edit to become "security aspects", I am uncomfortable = where the line is drawn between a "security aspect" (in scope of i2nsf) = and "other aspects" (out of scope of i2nsf). For example, 'remediation' = is mentioned at the end of the same paragraph, and remediation could = involve sending a compromised host to a "remediation portal". Would = that steering of the user's traffic be a "security aspect" or an "other = aspect", and does that answer depend on if the function is accomplished = by reconfiguring network switches or if the function is internal to the = NSF itself. 2. There are two places where IANA registry is mentioned, once in = 'concrete work' and again in 'deliverables'. The text differs. Is this = two registries, or one registry? Can the charter text be clarified if = these are two registries or one? -d From nobody Wed Aug 5 05:05:24 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B5A21B29DA for ; Wed, 5 Aug 2015 05:05:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.701 X-Spam-Level: X-Spam-Status: No, score=-100.701 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z_jmnYDuI5b0 for ; Wed, 5 Aug 2015 05:05:20 -0700 (PDT) Received: from asmtp4.iomartmail.com (asmtp4.iomartmail.com [62.128.201.175]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CEF91A8A67 for ; Wed, 5 Aug 2015 05:05:19 -0700 (PDT) Received: from asmtp4.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp4.iomartmail.com (8.13.8/8.13.8) with ESMTP id t75C4IO6028502; Wed, 5 Aug 2015 13:04:18 +0100 Received: from 950129200 ([149.254.183.43]) (authenticated bits=0) by asmtp4.iomartmail.com (8.13.8/8.13.8) with ESMTP id t75C3GEV027275 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO); Wed, 5 Aug 2015 13:04:10 +0100 From: "Adrian Farrel" To: "'Linda Dunbar'" , , "'Kathleen Moriarty'" References: <4A95BA014132FF49AE685FAB4B9F17F657D077F2@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D077F2@dfweml701-chm> Date: Wed, 5 Aug 2015 13:03:17 +0100 Message-ID: <045401d0cf76$da323b40$8e96b1c0$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIVTzRZF5MbtTeCUTFuwF7StCAs2p10Pclw Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1576-8.0.0.1202-21726.004 X-TM-AS-Result: No--13.803-10.0-31-10 X-imss-scan-details: No--13.803-10.0-31-10 X-TMASE-MatchedRID: pS5owHKhBO3tvMVN/9JMylfS8E9vfq82IaLR+2xKRDLF7duWDXiFEtDv pyUuLSMVEqKQnEa9DF5h7p16tH28Ecvv/E6DXPQ/r51gSC67hpUtbE0XjeGxFP+/NJoRFMzeB8d pGrUBo1s32XynJCHScE8wlsWT1Q96lKHFFpLwOfWp4G6k2AuBh+RHTq4vQYq2xnKCr8I+aujESX yjSYrH75qjTyc2uYxKdntMKhuO1cJTr2eRGF1DipEbNXwHGDRxhpv/U79vzoFsmSfP7d/dpRJvG 7XMhpGkQb6l6UHEqqAnWCoISxMuTZ2OG7mkVUinCFaAixm5eU8ZKp0SZ4P+dYFN4EqoFGbyjOzq Y84zP0nj/b7UJdu+zJnvP45ofSsQgZi/ORh+nqAXKqR+w9a7UNMGD8JuBXZPiaBUxnizejfK3ui T72tP5OvA+kor9FM1/XS3Bhd73Y15Lk+fidJ+BJqrexa4CbEQH5Ww7mt8hA5kljqvtoNIdtGNy9 Y0ivtNQ6Ns5OmMCAXLty2ysbxmM4DVR1zNwvHusyNb+yeIRAofA3Rd93Bc90Ev/8MqJVzOYPQiy z5HBARKPFCJp0Gw4o5VQ7KWmfh6mSJH/IJbfE+HZXNSWjgdU5K5aaUH9kQVi/u9jYrv6ylh4Y/i 1VqWIJrDYsl48UpTEKIAB7YVtYxCFB88XbRv2UdAWPMBu8kQqUtSHIEdjlVZps+y1VXzqcX+rw9 BJFvk6WtIgsGQwh9tzk6y/gEpkEn4dMSWXlsdcFEiuPxHjsUjo8c0NkYYIh6njTSt2k4LA3M0+6 9OFa0SLhszjNs+XOlio9SM/hKmL3m5ejCdaFGeAiCmPx4NwIRgZNP+6bISxEHRux+uk8h+ICquN i0WJNL21o4eyc9e6Gy/+s6lucUOvVMXuc51ssBLdCJI8A8SftwZ3X11IV0= Archived-At: Cc: "'Romascanu, Dan \(Dan\)'" , joe@salowey.net Subject: Re: [I2nsf] Revised I2NSF charter with "Simple Service Layer" included in the scope X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Aug 2015 12:05:23 -0000 Hi Linda, I want to suggest some edits to the charter text. Using change markers = is somewhat hard in a text email, but I have done my best. OLD Network Security Function (NSF) is to ensure integrity, confidentiality = and availability of network communications, to detect unwanted activity, and = to block it or at least mitigate its effects. NEW A Network Security Function (NSF) is a function used to ensure = integrity, confidentiality, and availability of network communications, to detect = unwanted network activity, and to block or at least the mitigate effects of = unwanted activity. END NSFs are provided and consumed in increasingly diverse environments. = Users of NSFs could consume network security services hosted by one or more = providers, which may be their own enterprise, service providers, or a combination = of both.=20 OLD Likewise, service providers of NSFs may offer their customers network = security services that consist of multiple security products and/or functions = from different vendors. NEW Similarly, service providers may offer their customers network security = services that consist of multiple security products and/or functions from = different vendors. END NSFs may be provided by physical and/or virtualized infrastructure.=20 OLD Without standard interfaces to control and monitor the behavior of NSFs, = it has become virtually impossible for security service providers to automate = service offerings that utilize different security functions from multiple = vendors. NEW Without standard interfaces to control and monitor the behavior of NSFs, = it has become virtually impossible for providers of security services to = automate service offerings that utilize different security functions from = multiple vendors. END OLD The primary goal of I2NSF is to define an information model, a set of = software interfaces and data models for controlling and monitoring aspects of = physical and virtual NSFs. COMMENT I suggest we adopt the language used in existing charters to discuss = information models so that the WG is not obliged to produce an information model, = but can do if it considers it necessary. NEW The goal of I2NSF is to define a set of software interfaces and data = models for controlling and monitoring aspects of physical and virtual NSFs. If the = working group finds it necessary to work on an information model before the data = models, to help provide guidance and derive the data models, it may do so. The = working group will decide later whether the information model needs to be = published as an RFC. END Other aspects of NSFs, such as device or network provisioning and = configuration, are out of scope.=20 INSERT END Controlling and monitoring of NSFs should include the ability to = specify, query, monitor, and control the NSFs by one or more management entities. Since different security vendors support different features and functions on = their devices, I2NSF will focus on flow-based NSFs that provide treatment to packets/flows, such as IPS/IDS COMMENT need to expand "IPS/IDS" END , Web filtering, flow filtering, deep packet inspection, or pattern = matching and remediation.=20 OLD There are two layers of interfaces envisioned in the I2NSF approach: NEW I2NSF will specify interfaces at two functional levels for the control = and monitoring of network security functions: END OLD =95 The I2NSF Capability Layer specifies how to control and monitor NSFs = at a functional implementation level. That is, I2NSF will standardize a set = of interfaces by which a security controller can control and manage NSFs = may be invoked, operated, and monitored. (I2NSF will not at this stage specify = how to derive control and monitoring capabilities from higher level security = policies for the Capability Layer.) COMMENT Text about operation of the security controller to produce capabilities = for the Capability Layer moved to next bullet. NEW =95 The I2NSF Capability Layer specifies how to control and monitor NSFs = at a functional implementation level. I2NSF will standardize a set of = interfaces by which a security controller can invoke, operate, and monitor NSFs.=20 END OLD =95 The I2NSF Service Layer defines how clients=92 security policies may = be expressed and monitored to a security controller that uses the = capability layer to control and manage NSFs to implement these policies.=A0 Describing a = simple service layer modeled as closely as possible on the capability layer is = within scope.=A0 With this simple service layers, security controllers might = handle issues like multi-tenancy concerns, and choosing which of the available = NSFs to use for a given policy.=A0 Expressing policies in ways other than the = model used by the capability layer is out of scope. =A0However, I2NSF will provide = a forum for Informational drafts on data models, APIs, etc. that demonstrate how = more complex service layer policies and policies in other formats may be = translated to Capability Layer functions. NEW =95 The I2NSF Service Layer defines how clients=92 security policies may = be expressed a security controller that uses the capability layer to = control and manage NSFs to implement these policies. It also allows the client to = monitor those policies. I2NSF will not specify how a security controller maps = security service requests at the Service Layer to control and management actions = at the Capability Layer, but the development of a Simple Service Layer model = that is modelled as closely as possible on the Capability Layer is within scope. = Such a Simple Service Layer will enable a security controllers to handle issues = like multi-tenancy and the choice between available NSFs for a given policy. Expressing policies in ways other than the model used by the Capability = Layer is out of scope, however I2NSF will provide a forum for Informational = drafts on data models, APIs, etc. that demonstrate how more complex Service Layer = policies and formats may be translated to Capability Layer functions. END COMMENT The following list of tasks duplicates the deliverables. Merge the = content and include it below. DELETE The concrete work at the I2NSF Capability Layer includes development of =95 An information model that defines concepts required for = standardizing the control and monitoring of NSFs. =95 A set of YANG data models, derived from the above information model. =95 The capability registry (IANA) that enables the characteristics and = behavior of NSFs to be specified using a vendor-neutral vocabulary without = requiring the NSFs themselves to be standardized. The registry enables various = mechanisms, including policy rules, to be used to match monitor and control = functions to the needs of an application and/or environment. =95 Examining the existing secure communication mechanisms to identify = the appropriate ones for carrying the controlling and monitoring information = between the NSFs and their management entity (or entities). OLD Standard interfaces for monitoring and controlling the behavior of NSFs = are essential building blocks for Security Service Providers to automate the = use of different NSFs from multiple vendors by their Security management = entities. This work will leverage the existing protocols and data models defined by = I2RS, Netconf, and NETMOD. If extensions to these protocols are needed, = requirements will be developed by this WG, and the extensions will be developed in cooperation with the WGs responsible for the protocols. NEW Standard interfaces for monitoring and controlling the behavior of NSFs = are essential building blocks for providers of security service to automate = the use of different NSFs from multiple vendors. This work will leverage the = existing protocols and data models defined by the I2RS, NETCONF, and NETMOD = working groups. If extensions to these protocols or data models are needed, = requirements will be developed by this WG, and the extensions will be developed in cooperation with the WGs responsible for the protocols. END The I2NSF WG=92s deliverables include: OLD - Use cases, problem statement, gap analysis document [The WG will = decide if to proceed as RFC]. - Framework Document, presenting an overview of the use of NSFs and the = purpose of the models developed by the WG [The WG will decide if to proceed as = RFC]. - A single, unified, Information Model for controlling and monitoring = flow-based NSFs. - Corresponding YANG Data Models derived from the above Information = Model. - IANA registry consideration for flow-based NSFs controlling and = monitoring capabilities.[maybe merged into data models] NEW - A single document covering use cases, problem statement, and gap = analysis document. This document will initially be produced for reference as a = living list to track and record discussions: the WG may decide to not publish = this document as an RFC. - A framework document, presenting an overview of the use of NSFs and = the purpose of the models developed by the WG. This document will also be a reference text to guide the main work and the WG may decide to not = publish this document as an RFC. - If the working group considers it necessary, a single, unified, = Information Model to describe the control and monitoring of flow-based NSFs. - YANG data models for the control and monitoring of NSFs. - Requests to the IANA for the creation of a registry that enables the characteristics and behavior of NSFs to be specified using a = vendor-neutral vocabulary without requiring the NSFs themselves to be standardized. The registry enables various mechanisms, including policy rules, to be used = to match monitor and control functions to the needs of an application and/or = environment. - An examination of existing secure communication mechanisms to identify = the appropriate ones for carrying the controlling and monitoring information = between the NSFs and their management entities. This document may also be = produced as a working document that is not published as an RFC. END OLD The WG may additionally choose to develop additional documents to = describe requirements for extensions (if any) to existing protocols used by the = WG, and how the data models are used to monitor and control flow-based NSFs, and = to describe how to use I2RS, Netconf, and NETMOD to carry the content of = the data models. NEW The WG may additionally choose to develop documents to describe = requirements for extensions (if any) to existing protocols used by the WG, to explain how = the data models are used to monitor and control flow-based NSFs, and to = describe how to use I2RS and NETCONF to carry the content of the data models. These = documents may be published as Informational RFCs of may be working documents that = are discarded once they have triggered the necessary work. END DELETE [The WG may decide that the Use cases, Framework, and gap analysis are = simply reference documents during the lifetime of the WG and not to be = published as an RFC.] END OLD The WG will work closely with I2RS, Netconf and Netmod WGs. The WG will communicate with external SDOs like ETSI NFV and will encourage open = source code development related to the WG scope in organizations like ONF, = OpenStack, ODL, and OPNFV. NEW The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG = will communicate with external SDOs like ETSI NFV and will encourage open = source code development related to the WG scope in organizations like ONF, = OpenStack, ODL, and OPNFV. END COMMENT These milestones are ambiguous. Do we mean: - someone writes a document - the WG adopts a document - the WG males a publication request - the RFC is published? I think all that is needed is to add the clarity. END Suggested Milestones =A0 - Use Cases, problem statement, and gap analysis Document:=A0 = Charter time + 1 month =A0 - Framework: Charter time + 4 months to WG Document =A0 - Requirements for extensions to protocols:=A0 Charter time + 8 = months to WG document =A0 - Info model: Charter time + 8 months to WG Document =A0 - IANA registry consideration + 12 months to WG Document =A0 - All Early Drafts to IESG: 18 months [decision point =96 +10 months]=A0=20 =A0 - Data Models: Charter + 9 Months to WG Document =A0 - Applicability Statements: 10 months to WG Document =A0 - Data Models and Applicability Statements to IESG=A0 - 18 months From nobody Wed Aug 5 10:09:34 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92B341B324A for ; Wed, 5 Aug 2015 10:09:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1MEwwqLqzzPC for ; Wed, 5 Aug 2015 10:09:28 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8AD341B325B for ; Wed, 5 Aug 2015 10:09:06 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BVX07317; Wed, 05 Aug 2015 17:09:04 +0000 (GMT) Received: from DFWEML705-CHM.china.huawei.com (10.193.5.142) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 5 Aug 2015 18:09:04 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml705-chm ([10.193.5.142]) with mapi id 14.03.0235.001; Wed, 5 Aug 2015 10:08:57 -0700 From: Linda Dunbar To: "adrian@olddog.co.uk" , "i2nsf@ietf.org" , "'Kathleen Moriarty'" Thread-Topic: [I2nsf] Revised I2NSF charter with "Simple Service Layer" included in the scope Thread-Index: AdDJiOPCj8++am2iTmaZu3qO1mrSRQGKH8yAAAXIH9A= Date: Wed, 5 Aug 2015 17:08:57 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D09E5C@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D077F2@dfweml701-chm> <045401d0cf76$da323b40$8e96b1c0$@olddog.co.uk> In-Reply-To: <045401d0cf76$da323b40$8e96b1c0$@olddog.co.uk> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.212.244.32] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "'Romascanu, Dan \(Dan\)'" , "joe@salowey.net" Subject: Re: [I2nsf] Revised I2NSF charter with "Simple Service Layer" included in the scope X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Aug 2015 17:09:32 -0000 Adrian,=20 Thank you very much for the suggestions. All of them are great suggestions I have some questions/comments inserted below. The clean version is updated= in the i2nsf wiki: https://sites.google.com/site/interface2nsf/ Thanks,=20 Linda -----Original Message----- From: Adrian Farrel [mailto:adrian@olddog.co.uk]=20 Sent: Wednesday, August 05, 2015 7:03 AM To: Linda Dunbar; i2nsf@ietf.org; 'Kathleen Moriarty' Cc: 'Romascanu, Dan (Dan)'; joe@salowey.net Subject: RE: [I2nsf] Revised I2NSF charter with "Simple Service Layer" incl= uded in the scope Hi Linda, I want to suggest some edits to the charter text. Using change markers is s= omewhat hard in a text email, but I have done my best. OLD Network Security Function (NSF) is to ensure integrity, confidentiality and= availability of network communications, to detect unwanted activity, and t= o block it or at least mitigate its effects. NEW A Network Security Function (NSF) is a function used to ensure integrity, c= onfidentiality, and availability of network communications, to detect unwan= ted network activity, and to block or at least the mitigate effects of unwa= nted activity. END [Linda] That is very good suggestion.=20 NSFs are provided and consumed in increasingly diverse environments. Users = of NSFs could consume network security services hosted by one or more provi= ders, which may be their own enterprise, service providers, or a combinatio= n of both.=20 OLD Likewise, service providers of NSFs may offer their customers network secur= ity services that consist of multiple security products and/or functions fr= om different vendors. NEW Similarly, service providers may offer their customers network security ser= vices that consist of multiple security products and/or functions from diff= erent vendors. END [Linda] Instead of saying "The "network security services that consist of",= can we say "The network security services that are enforced by multiple se= curity products and/or functions from different vendors"?=20 NSFs may be provided by physical and/or virtualized infrastructure.=20 OLD Without standard interfaces to control and monitor the behavior of NSFs, it= has become virtually impossible for security service providers to automate= service offerings that utilize different security functions from multiple = vendors. NEW Without standard interfaces to control and monitor the behavior of NSFs, it= has become virtually impossible for providers of security services to auto= mate service offerings that utilize different security functions from multi= ple vendors. END [Linda] that is good with me.=20 OLD The primary goal of I2NSF is to define an information model, a set of softw= are interfaces and data models for controlling and monitoring aspects of ph= ysical and virtual NSFs. COMMENT I suggest we adopt the language used in existing charters to discuss inform= ation models so that the WG is not obliged to produce an information model,= but can do if it considers it necessary. NEW The goal of I2NSF is to define a set of software interfaces and data models= for controlling and monitoring aspects of physical and virtual NSFs. If th= e working group finds it necessary to work on an information model before t= he data models, to help provide guidance and derive the data models, it may= do so. The working group will decide later whether the information model n= eeds to be published as an RFC. END [Linda] good suggestion.=20 Other aspects of NSFs, such as device or network provisioning and configura= tion, are out of scope.=20 INSERT END Controlling and monitoring of NSFs should include the ability to specify, q= uery, monitor, and control the NSFs by one or more management entities. Sin= ce different security vendors support different features and functions on t= heir devices, I2NSF will focus on flow-based NSFs that provide treatment to= packets/flows, such as IPS/IDS COMMENT need to expand "IPS/IDS" END , Web filtering, flow filtering, deep packet inspection, or pattern matchin= g and remediation.=20 OLD There are two layers of interfaces envisioned in the I2NSF approach: NEW I2NSF will specify interfaces at two functional levels for the control and = monitoring of network security functions: END [Linda] agree.=20 OLD . The I2NSF Capability Layer specifies how to control and monitor NSFs at a= functional implementation level. That is, I2NSF will standardize a set of = interfaces by which a security controller can control and manage NSFs may b= e invoked, operated, and monitored. (I2NSF will not at this stage specify h= ow to derive control and monitoring capabilities from higher level security= policies for the Capability Layer.) COMMENT Text about operation of the se= curity controller to produce capabilities for the Capability Layer moved to= next bullet. NEW . The I2NSF Capability Layer specifies how to control and monitor NSFs at a= functional implementation level. I2NSF will standardize a set of interface= s by which a security controller can invoke, operate, and monitor NSFs.=20 END [Linda] so we don't need to emphasize that "(I2NSF will not at this stage s= pecify how to derive control and monitoring capabilities from higher level = security policies for the Capability Layer)"? OLD . The I2NSF Service Layer defines how clients' security policies may be exp= ressed and monitored to a security controller that uses the capability laye= r to control and manage NSFs to implement these policies.=A0 Describing a s= imple service layer modeled as closely as possible on the capability layer = is within scope.=A0 With this simple service layers, security controllers m= ight handle issues like multi-tenancy concerns, and choosing which of the a= vailable NSFs to use for a given policy.=A0 Expressing policies in ways oth= er than the model used by the capability layer is out of scope. =A0However,= I2NSF will provide a forum for Informational drafts on data models, APIs, = etc. that demonstrate how more complex service layer policies and policies = in other formats may be translated to Capability Layer functions. NEW . The I2NSF Service Layer defines how clients' security policies may be exp= ressed a security controller that uses the capability layer to control and = manage NSFs to implement these policies. It also allows the client to moni= tor those policies. I2NSF will not specify how a security controller maps s= ecurity service requests at the Service Layer to control and management act= ions at the Capability Layer, but the development of a Simple Service Layer= model that is modelled as closely as possible on the Capability Layer is w= ithin scope. Such a Simple Service Layer will enable a security controller= s to handle issues like multi-tenancy and the choice between available NSFs= for a given policy. Expressing policies in ways other than the model used by the Capability Lay= er is out of scope, however I2NSF will provide a forum for Informational dr= afts on data models, APIs, etc. that demonstrate how more complex Service L= ayer policies and formats may be translated to Capability Layer functions. END [Linda] do you mean " The I2NSF Service Layer defines how clients' security= policies may be expressed" to "a security controller"?=20 COMMENT The following list of tasks duplicates the deliverables. Merge the content = and include it below. DELETE The concrete work at the I2NSF Capability Layer includes development of . An information model that defines concepts required for standardizing the= control and monitoring of NSFs. . A set of YANG data models, derived from the above information model. . The capability registry (IANA) that enables the characteristics and behav= ior of NSFs to be specified using a vendor-neutral vocabulary without requi= ring the NSFs themselves to be standardized. The registry enables various m= echanisms, including policy rules, to be used to match monitor and control = functions to the needs of an application and/or environment. . Examining the existing secure communication mechanisms to identify the ap= propriate ones for carrying the controlling and monitoring information betw= een the NSFs and their management entity (or entities). [Linda] do you mean deleting all the bullets above? OLD Standard interfaces for monitoring and controlling the behavior of NSFs are= essential building blocks for Security Service Providers to automate the u= se of different NSFs from multiple vendors by their Security management ent= ities. This work will leverage the existing protocols and data models defin= ed by I2RS, Netconf, and NETMOD. If extensions to these protocols are neede= d, requirements will be developed by this WG, and the extensions will be de= veloped in cooperation with the WGs responsible for the protocols. NEW Standard interfaces for monitoring and controlling the behavior of NSFs are= essential building blocks for providers of security service to automate th= e use of different NSFs from multiple vendors. This work will leverage the = existing protocols and data models defined by the I2RS, NETCONF, and NETMOD= working groups. If extensions to these protocols or data models are needed= , requirements will be developed by this WG, and the extensions will be dev= eloped in cooperation with the WGs responsible for the protocols. END The I2NSF WG's deliverables include: OLD - Use cases, problem statement, gap analysis document [The WG will decide i= f to proceed as RFC]. - Framework Document, presenting an overview of the use of NSFs and the pur= pose of the models developed by the WG [The WG will decide if to proceed as= RFC]. - A single, unified, Information Model for controlling and monitoring flow-= based NSFs. - Corresponding YANG Data Models derived from the above Information Model. - IANA registry consideration for flow-based NSFs controlling and monitorin= g capabilities.[maybe merged into data models] NEW - A single document covering use cases, problem statement, and gap analysis= document. This document will initially be produced for reference as a livi= ng list to track and record discussions: the WG may decide to not publish t= his document as an RFC. [Linda] Is it important to be "one single document" to cover the 3 existing= drafts (use cases, problem statement, and gap analysis)?=20 - A framework document, presenting an overview of the use of NSFs and the p= urpose of the models developed by the WG. This document will also be a refe= rence text to guide the main work and the WG may decide to not publish this= document as an RFC. - If the working group considers it necessary, a single, unified, Informati= on Model to describe the control and monitoring of flow-based NSFs. - YANG data models for the control and monitoring of NSFs. - Requests to the IANA for the creation of a registry that enables the char= acteristics and behavior of NSFs to be specified using a vendor-neutral voc= abulary without requiring the NSFs themselves to be standardized. The regis= try enables various mechanisms, including policy rules, to be used to match= monitor and control functions to the needs of an application and/or enviro= nment. - An examination of existing secure communication mechanisms to identify th= e appropriate ones for carrying the controlling and monitoring information = between the NSFs and their management entities. This document may also be p= roduced as a working document that is not published as an RFC. END OLD The WG may additionally choose to develop additional documents to describe = requirements for extensions (if any) to existing protocols used by the WG, = and how the data models are used to monitor and control flow-based NSFs, an= d to describe how to use I2RS, Netconf, and NETMOD to carry the content of = the data models. NEW The WG may additionally choose to develop documents to describe requirement= s for extensions (if any) to existing protocols used by the WG, to explain = how the data models are used to monitor and control flow-based NSFs, and to= describe how to use I2RS and NETCONF to carry the content of the data mode= ls. These documents may be published as Informational RFCs of may be workin= g documents that are discarded once they have triggered the necessary work. END DELETE [The WG may decide that the Use cases, Framework, and gap analysis are simp= ly reference documents during the lifetime of the WG and not to be publishe= d as an RFC.] END OLD The WG will work closely with I2RS, Netconf and Netmod WGs. The WG will com= municate with external SDOs like ETSI NFV and will encourage open source co= de development related to the WG scope in organizations like ONF, OpenStack= , ODL, and OPNFV. NEW The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG wil= l communicate with external SDOs like ETSI NFV and will encourage open sour= ce code development related to the WG scope in organizations like ONF, Open= Stack, ODL, and OPNFV. END COMMENT These milestones are ambiguous. Do we mean: - someone writes a document - the WG adopts a document - the WG males a publication request - the RFC is published? I think all that is needed is to add the clarity. END Suggested Milestones =A0 - Use Cases, problem statement, and gap analysis Document:=A0 Charter t= ime + 1 month =A0 - Framework: Charter time + 4 months to WG Document =A0 - Requirements for extensions to protocols:=A0 Charter time + 8 months = to WG document =A0 - Info model: Charter time + 8 months to WG Document =A0 - IANA registry consideration + 12 months to WG Document =A0 - All Early Drafts to IESG: 18 months [decision point - +10 months]=A0=20 =A0 - Data Models: Charter + 9 Months to WG Document =A0 - Applicability Statements: 10 months to WG Document =A0 - Data Models and Applicability Statements to IESG=A0 - 18 months From nobody Wed Aug 5 10:09:50 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95E531A8773 for ; Wed, 5 Aug 2015 10:09:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UJiDlS63NiTl for ; Wed, 5 Aug 2015 10:09:36 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 219A31A8793 for ; Wed, 5 Aug 2015 10:09:12 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BZN44173; Wed, 05 Aug 2015 17:09:11 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 5 Aug 2015 18:09:10 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Wed, 5 Aug 2015 10:08:59 -0700 From: Linda Dunbar To: "dwing@cisco.com" , "i2nsf@ietf.org" Thread-Topic: [I2nsf] i2nsf charter feedback Thread-Index: AQHQzjD808+dxjcbZECO9Bste90+iZ39pUCw Date: Wed, 5 Aug 2015 17:08:58 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.212.244.32] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Aug 2015 17:09:42 -0000 RGFuLCANCg0KVGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGNvbW1lbnRzLiANCg0KQ2FuIHlv dSBjaGVjayB0aGUgbGF0ZXN0IHZlcnNpb24gb2YgdGhlIEkyTlNGIGNoYXJ0ZXIgYW5kIHNlZSBp ZiB5b3VyIGNvbmNlcm5zIGhhdmUgYmVlbiBhZGRyZXNzZWQ/IA0KDQpodHRwczovL3NpdGVzLmdv b2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNmLw0KDQpMaW5kYQ0KDQotLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KRnJvbTogSTJuc2YgW21haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSBP biBCZWhhbGYgT2YgPz9EYW4gV2luZw0KU2VudDogTW9uZGF5LCBBdWd1c3QgMDMsIDIwMTUgNDox MSBQTQ0KVG86IGkybnNmQGlldGYub3JnDQpTdWJqZWN0OiBbSTJuc2ZdIGkybnNmIGNoYXJ0ZXIg ZmVlZGJhY2sNCg0KQmFzZWQgb24gaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJm YWNlMm5zZi9ob21lIHRoYXQgSSBhbSBsb29raW5nIGF0IG5vdywgSSBoYXZlIHR3byBxdWVzdGlv bnMsDQoNCjEuICAiVGhlIHByaW1hcnkgZ29hbCBvZiBJMk5TRiBpcyB0byBkZWZpbmUgYW4gaW5m b3JtYXRpb24gbW9kZWwsIGEgc2V0IG9mIHNvZnR3YXJlIGludGVyZmFjZXMgYW5kIGRhdGEgbW9k ZWxzIGZvciBjb250cm9sbGluZyBhbmQgbW9uaXRvcmluZyBhc3BlY3RzIG9mIHBoeXNpY2FsIGFu ZCB2aXJ0dWFsIE5TRnMuIg0KDQpTaG91bGQgdGhhdCBzYXkgIi4uLiBhbmQgbW9uaXRvcmluZyBT RUNVUklUWSBhc3BlY3RzIC4uLiIsIGFzIHdhcyBpbiBTdHJhc3NuZXIncyBodHRwOi8vd3d3Lmll dGYub3JnL21haWwtYXJjaGl2ZS93ZWIvaTJuc2YvY3VycmVudC9tc2cwMDM4OC5odG1sPw0KDQpF dmVuIHdpdGggdGhlIGVkaXQgdG8gYmVjb21lICJzZWN1cml0eSBhc3BlY3RzIiwgSSBhbSB1bmNv bWZvcnRhYmxlIHdoZXJlIHRoZSBsaW5lIGlzIGRyYXduIGJldHdlZW4gYSAic2VjdXJpdHkgYXNw ZWN0IiAoaW4gc2NvcGUgb2YgaTJuc2YpIGFuZCAib3RoZXIgYXNwZWN0cyIgKG91dCBvZiBzY29w ZSBvZiBpMm5zZikuICBGb3IgZXhhbXBsZSwgJ3JlbWVkaWF0aW9uJyBpcyBtZW50aW9uZWQgYXQg dGhlIGVuZCBvZiB0aGUgc2FtZSBwYXJhZ3JhcGgsIGFuZCByZW1lZGlhdGlvbiBjb3VsZCBpbnZv bHZlIHNlbmRpbmcgYSBjb21wcm9taXNlZCBob3N0IHRvIGEgInJlbWVkaWF0aW9uIHBvcnRhbCIu ICBXb3VsZCB0aGF0IHN0ZWVyaW5nIG9mIHRoZSB1c2VyJ3MgdHJhZmZpYyBiZSBhICJzZWN1cml0 eSBhc3BlY3QiIG9yIGFuICJvdGhlciBhc3BlY3QiLCBhbmQgZG9lcyB0aGF0IGFuc3dlciBkZXBl bmQgb24gaWYgdGhlIGZ1bmN0aW9uIGlzIGFjY29tcGxpc2hlZCBieSByZWNvbmZpZ3VyaW5nIG5l dHdvcmsgc3dpdGNoZXMgb3IgaWYgdGhlIGZ1bmN0aW9uIGlzIGludGVybmFsIHRvIHRoZSBOU0Yg aXRzZWxmLg0KDQoNCjIuIFRoZXJlIGFyZSB0d28gcGxhY2VzIHdoZXJlIElBTkEgcmVnaXN0cnkg aXMgbWVudGlvbmVkLCBvbmNlIGluICdjb25jcmV0ZSB3b3JrJyBhbmQgYWdhaW4gaW4gJ2RlbGl2 ZXJhYmxlcycuICBUaGUgdGV4dCBkaWZmZXJzLiAgSXMgdGhpcyB0d28gcmVnaXN0cmllcywgb3Ig b25lIHJlZ2lzdHJ5PyAgQ2FuIHRoZSBjaGFydGVyIHRleHQgYmUgY2xhcmlmaWVkIGlmIHRoZXNl IGFyZSB0d28gcmVnaXN0cmllcyBvciBvbmU/DQoNCi1kDQoNCl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQpJMm5zZiBtYWlsaW5nIGxpc3QNCkkybnNmQGll dGYub3JnDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQo= From nobody Wed Aug 5 13:37:23 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BE051A88A0 for ; Wed, 5 Aug 2015 13:37:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A6S20TaXeaxc for ; Wed, 5 Aug 2015 13:37:21 -0700 (PDT) Received: from usevmg21.ericsson.net (usevmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B6C51A88CB for ; Wed, 5 Aug 2015 13:37:17 -0700 (PDT) X-AuditID: c6180641-f79556d0000002c8-ef-55c20b357656 Received: from EUSAAHC007.ericsson.se (Unknown_Domain [147.117.188.93]) by usevmg21.ericsson.net (Symantec Mail Security) with SMTP id D4.FD.00712.53B02C55; Wed, 5 Aug 2015 15:10:14 +0200 (CEST) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC007.ericsson.se ([147.117.188.93]) with mapi id 14.03.0210.002; Wed, 5 Aug 2015 16:37:16 -0400 From: Daniel Migault To: Linda Dunbar , "dwing@cisco.com" , "i2nsf@ietf.org" Thread-Topic: [I2nsf] i2nsf charter feedback Thread-Index: AQHQzjD4zJ4jKnCsJkaAXhnv3uxmOZ396YEA///dCBA= Date: Wed, 5 Aug 2015 20:37:15 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C11213E25A@eusaamb107.ericsson.se> References: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.10] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrLLMWRmVeSWpSXmKPExsUyuXRPrK4Z96FQg8tX2CwuXnvIZHHv7j9W i7stE5kcmD2m/N7I6tFy5C2rx5IlP5kCmKO4bFJSczLLUov07RK4Mn5ee8Ba8Ei4YlfbccYG xr/8XYwcHBICJhJ7vut3MXICmWISF+6tZwOxhQSOMkp0r1TqYuQCspcxSrz+/4kRJMEmYCTR dqifHcQWESiR2P7wGVhcWEBbYvaFnWwQcR2J+3tmM0HYVhLPD64Ai7MIqEjMP9oDFucV8JU4 8OMkK8SyconumRNYQGxOAVeJJV8+gtUzAh30/dQasHpmAXGJW0/mM0EcKiCxZM95ZghbVOLl 43+sELaSxKSl51gh6nUkFuz+xAZha0ssW/iaGWKvoMTJmU9YJjCKzkIydhaSlllIWmYhaVnA yLKKkaO0OLUsN93IcBMjMD6OSbA57mBc8MnyEKMAB6MSD++CvwdChVgTy4orcw8xSnOwKInz SvvlhQoJpCeWpGanphakFsUXleakFh9iZOLglGpgTP2ZY2yn5f/jvYHc41nb/I4IF81a7zJT V3CHI4e4dVL/wrLUl22iOYY5P3O3iFQ2rtjW69Dz5frr9x8UuMW/X3r37PNtjozM3B93TmmE td5luNDWq7nPKdf29MtV1zatseznclUW/7M5OCxtfo+ZeHeVB0/3c/6E7PSA/r7yLZ4zP3P8 uzJBiaU4I9FQi7moOBEA2fJQD3ACAAA= Archived-At: Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Aug 2015 20:37:22 -0000 Hi,=20 My comments are based on the charter at: https://sites.google.com/site/inte= rface2nsf/ Hope they help. BR,=20 Daniel A) I agree that configuration should be out of scope. I would add the follo= wing text. Controlling and monitoring [...] management entities.=20 ADDED TEXT: Unlike configuration of NSF, I2NSF provides facilities to chang= e and update the internal states of the NSF. Since different security [...]=20 B) OLD CHARTER TEXT "The I2NSF Capability Layer specifies how to control and monitor NSFs at a = functional implementation level. I2NSF will standardize a set of interfaces= by which a security controller can invoke, operate, and monitor NSFs." I think we should clarify functional implementation level. My understanding= is that the I2NSF Capability Layer should inform the tenants of the differ= ent available NSF as well as the various available associated options, prof= iles... C) OLD CHARTER TEXT "The I2NSF Service Layer defines how clients' security policies may be expr= essed to a security controller that uses the capability layer to control an= d manage NSFs to implement these policies. " Maybe we could write: "The I2NSF Service Layer defines how clients' security policies may be expr= essed to a security controller. The controller implements its policies acco= rding to the various a capabilities provided by the I2NSF Capability Layer.= " OLD CHARTER TEXT "It also allows the client to monitor those policies. I2NSF will not specif= y how a security controller maps security service requests at the Service L= ayer to control and management actions at the Capability Layer, but the dev= elopment of a Simple Service Layer model that is modeled as closely as poss= ible on the Capability Layer is within scope. Such a Simple Service Layer = will enable a security controller to handle issues like multi-tenancy and t= he choice between available NSFs for a given policy" This is not very clear to me what is in scope and is not. At least my under= standing is: I2NFS will not define how tenants' NSF requests at the Service Layer are de= clined in Capability Layer this is left to the controller which is implemen= tation dependent. Instead, I2NFS considers that tenants policies should be= based on information provided by the Capability Layer. I2NSF will provide = guidance based on a simple service to define a models that eases interactio= ns between the Service Layer and the Capability Layer. From nobody Wed Aug 5 18:02:47 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DF5F1B3565 for ; Wed, 5 Aug 2015 18:02:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.211 X-Spam-Level: X-Spam-Status: No, score=-14.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d4XCxWfbaGIg for ; Wed, 5 Aug 2015 18:02:44 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C07E1B356B for ; Wed, 5 Aug 2015 18:02:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2667; q=dns/txt; s=iport; t=1438822963; x=1440032563; h=mime-version:subject:from:in-reply-to:date:cc: content-transfer-encoding:message-id:references:to; bh=p9t4icTSf5VViAncgINHGCOyl3mecRlcXcIg1I5uYp0=; b=DSqs9uZ6K/dqQ+vSOcXmZXuCMZdvvDwwiPA6XNezhyiB8Qt17za8+GZI QRW4Qnu3UhjqbejRn8Ed0ktoaqWdI9BA43LuplpzoxumJRsj1n2vwF7aN S0SNMyIr1TFzIxnwBzu7NFFu4oVI5txl5tfD/4tnDJdUSoYhZ+/SCjgC2 A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BGAwDksMJV/5ldJa1bgxtUab0DCYF6CoJDgzYCgUw4FAEBAQEBAQGBCoQjAQEBAwEBAQE3NAsMBAsRBAEBAScHJx8JCAYTCYgdCA3NCQEBAQEBAQEBAQEBAQEBAQEBAQEBAReLT4QlEgEBHTMHBoMSgRQFjUSHPIR/h1eBR4cWiGeERINkJoQdHjEBgQ2BPgEBAQ X-IronPort-AV: E=Sophos;i="5.15,620,1432598400"; d="scan'208";a="16229667" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-7.cisco.com with ESMTP; 06 Aug 2015 01:02:42 +0000 Received: from [10.24.20.50] ([10.24.20.50]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t7612fQu022190 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 6 Aug 2015 01:02:42 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\)) From: =?utf-8?Q?=F0=9F=94=93Dan_Wing?= In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> Date: Wed, 5 Aug 2015 18:02:40 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <28E8A1A0-01ED-4F0C-800B-8893A0317DEC@cisco.com> References: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> To: Linda Dunbar X-Mailer: Apple Mail (2.2102) Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Aug 2015 01:02:46 -0000 On 05-Aug-2015 10:08 am, Linda Dunbar wrote: >=20 > Dan,=20 >=20 > Thank you very much for the comments.=20 >=20 > Can you check the latest version of the I2NSF charter and see if your = concerns have been addressed?=20 >=20 > https://sites.google.com/site/interface2nsf/ 1. No, it still says "controlling aspects" (second paragraph, first = sentence). It isn't clear what those aspects are. The word 'aspects' = only appears twice in the charter text. 2. Yes, the IANA stuff isn't duplicated now. Thanks. One other thing I just noticed, "one or more management entities." Is = i2nsf going to solve the database update and synchronization problem? = This seems complicated. That is, does i2nsf need to support multiple = management entities controlling a NSF, and does i2nsf need to tell those = other management entities of changes done by another entity? -d >=20 > Linda >=20 > -----Original Message----- > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of ??Dan Wing > Sent: Monday, August 03, 2015 4:11 PM > To: i2nsf@ietf.org > Subject: [I2nsf] i2nsf charter feedback >=20 > Based on https://sites.google.com/site/interface2nsf/home that I am = looking at now, I have two questions, >=20 > 1. "The primary goal of I2NSF is to define an information model, a = set of software interfaces and data models for controlling and = monitoring aspects of physical and virtual NSFs." >=20 > Should that say "... and monitoring SECURITY aspects ...", as was in = Strassner's = http://www.ietf.org/mail-archive/web/i2nsf/current/msg00388.html? >=20 > Even with the edit to become "security aspects", I am uncomfortable = where the line is drawn between a "security aspect" (in scope of i2nsf) = and "other aspects" (out of scope of i2nsf). For example, 'remediation' = is mentioned at the end of the same paragraph, and remediation could = involve sending a compromised host to a "remediation portal". Would = that steering of the user's traffic be a "security aspect" or an "other = aspect", and does that answer depend on if the function is accomplished = by reconfiguring network switches or if the function is internal to the = NSF itself. >=20 >=20 > 2. There are two places where IANA registry is mentioned, once in = 'concrete work' and again in 'deliverables'. The text differs. Is this = two registries, or one registry? Can the charter text be clarified if = these are two registries or one? >=20 > -d >=20 > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf From nobody Tue Aug 11 05:02:13 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA5F21A88B8 for ; Tue, 11 Aug 2015 05:02:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.909 X-Spam-Level: X-Spam-Status: No, score=-6.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qarCtKhlqumN for ; Tue, 11 Aug 2015 05:02:10 -0700 (PDT) Received: from de307622-de-outbound.net.avaya.com (de307622-de-outbound.net.avaya.com [198.152.71.100]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D2861A88B6 for ; Tue, 11 Aug 2015 05:02:09 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A2ABBQBBP8ZV/yYyC4dbGQSCMSEsVG+pbgaTP4IEhXkCgSY5EwEBAQEBAQF/C4QlAQEDEhteAQwJFVYmAQQbGogMAQynYYULoD4BCgEBARoEhh+KCi2DI4EUBZULAY4rhCWDCwyQeBcPg32CN4EEAQEB X-IPAS-Result: A2ABBQBBP8ZV/yYyC4dbGQSCMSEsVG+pbgaTP4IEhXkCgSY5EwEBAQEBAQF/C4QlAQEDEhteAQwJFVYmAQQbGogMAQynYYULoD4BCgEBARoEhh+KCi2DI4EUBZULAY4rhCWDCwyQeBcPg32CN4EEAQEB X-IronPort-AV: E=Sophos;i="5.15,634,1432612800"; d="scan'208,217";a="115132621" Received: from unknown (HELO p-us1-erheast-smtpauth.us1.avaya.com) ([135.11.50.38]) by de307622-de-outbound.net.avaya.com with ESMTP; 11 Aug 2015 08:02:07 -0400 X-OutboundMail_SMTP: 1 Received: from unknown (HELO AZ-FFEXHC02.global.avaya.com) ([135.64.58.12]) by p-us1-erheast-out.us1.avaya.com with ESMTP/TLS/AES128-SHA; 11 Aug 2015 08:02:07 -0400 Received: from AZ-FFEXMB04.global.avaya.com ([fe80::6db7:b0af:8480:c126]) by AZ-FFEXHC02.global.avaya.com ([135.64.58.12]) with mapi id 14.03.0174.001; Tue, 11 Aug 2015 14:02:06 +0200 From: "Romascanu, Dan (Dan)" To: "i2nsf@ietf.org" Thread-Topic: I2NSF BOF draft minutes now available Thread-Index: AdDULYjnCeJ8nsfBTV+LJVfxe/ThKw== Date: Tue, 11 Aug 2015 12:02:06 +0000 Message-ID: <9904FB1B0159DA42B0B887B7FA8119CA5CAF6364@AZ-FFEXMB04.global.avaya.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.64.58.47] Content-Type: multipart/alternative; boundary="_000_9904FB1B0159DA42B0B887B7FA8119CA5CAF6364AZFFEXMB04globa_" MIME-Version: 1.0 Archived-At: Subject: [I2nsf] I2NSF BOF draft minutes now available X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Aug 2015 12:02:11 -0000 --_000_9904FB1B0159DA42B0B887B7FA8119CA5CAF6364AZFFEXMB04globa_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, Joe consolidated the notes taken by Sue and Joe (thanks, all!) and made the= draft minutes available at https://www.ietf.org/proceedings/93/minutes/min= utes-93-i2nsf. Please read and let us know if anything important is missing= or was mis-represented. Regards, Dan --_000_9904FB1B0159DA42B0B887B7FA8119CA5CAF6364AZFFEXMB04globa_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

 

Joe consolidated the notes taken by Sue and Joe (tha= nks, all!) and made the draft minutes available at ht= tps://www.ietf.org/proceedings/93/minutes/minutes-93-i2nsf. Please read= and let us know if anything important is missing or was mis-represented.

 

Regards,

 

Dan

 

--_000_9904FB1B0159DA42B0B887B7FA8119CA5CAF6364AZFFEXMB04globa_-- From nobody Wed Aug 12 15:38:47 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3658D1ACEDF for ; Wed, 12 Aug 2015 15:38:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g8Kp9aTzbBzZ for ; Wed, 12 Aug 2015 15:38:44 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23CC51ACEE1 for ; Wed, 12 Aug 2015 15:37:35 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BZU71141; Wed, 12 Aug 2015 22:37:33 +0000 (GMT) Received: from DFWEML702-CHM.china.huawei.com (10.193.5.72) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 12 Aug 2015 23:37:32 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml702-chm ([10.193.5.72]) with mapi id 14.03.0235.001; Wed, 12 Aug 2015 15:37:20 -0700 From: Linda Dunbar To: "Romascanu, Dan (Dan)" , "i2nsf@ietf.org" Thread-Topic: I2NSF BOF draft minutes now available Thread-Index: AdDULYjnCeJ8nsfBTV+LJVfxe/ThKwBIaRoQ Date: Wed, 12 Aug 2015 22:37:19 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D0C2A4@dfweml701-chm> References: <9904FB1B0159DA42B0B887B7FA8119CA5CAF6364@AZ-FFEXMB04.global.avaya.com> In-Reply-To: <9904FB1B0159DA42B0B887B7FA8119CA5CAF6364@AZ-FFEXMB04.global.avaya.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.198] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D0C2A4dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [I2nsf] I2NSF BOF draft minutes now available X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Aug 2015 22:38:46 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D0C2A4dfweml701chm_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Dan, Thank you very much for chairing the I2NSF BOF and compiled the meeting min= utes. Just a minor correction: it is Da Cheng Zhang (Alibaba) that presented the = Capability Index topic. Linda From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Romascanu, Dan (Da= n) Sent: Tuesday, August 11, 2015 7:02 AM To: i2nsf@ietf.org Subject: [I2nsf] I2NSF BOF draft minutes now available Hi, Joe consolidated the notes taken by Sue and Joe (thanks, all!) and made the= draft minutes available at https://www.ietf.org/proceedings/93/minutes/min= utes-93-i2nsf. Please read and let us know if anything important is missing= or was mis-represented. Regards, Dan --_000_4A95BA014132FF49AE685FAB4B9F17F657D0C2A4dfweml701chm_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Dan,

 

Thank you very much fo= r chairing the I2NSF BOF and compiled the meeting minutes.

 

Just a minor correctio= n: it is Da Cheng Zhang (Alibaba) that presented the Capability Index topic= .

 

Linda

 

From: I2nsf [m= ailto:i2nsf-bounces@ietf.org] On Behalf Of Romascanu, Dan (Dan)
Sent: Tuesday, August 11, 2015 7:02 AM
To: i2nsf@ietf.org
Subject: [I2nsf] I2NSF BOF draft minutes now available

 

Hi,

 

Joe consolidated the notes taken by Sue and Joe (tha= nks, all!) and made the draft minutes available at ht= tps://www.ietf.org/proceedings/93/minutes/minutes-93-i2nsf. Please read= and let us know if anything important is missing or was mis-represented.

 

Regards,

 

Dan

 

--_000_4A95BA014132FF49AE685FAB4B9F17F657D0C2A4dfweml701chm_-- From nobody Thu Aug 13 01:45:46 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5A601B3781 for ; Thu, 13 Aug 2015 01:45:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.91 X-Spam-Level: X-Spam-Status: No, score=-6.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j3DDGBwLS2U0 for ; Thu, 13 Aug 2015 01:45:43 -0700 (PDT) Received: from p-us1-iereast-outbound.us1.avaya.com (p-us1-iereast-outbound.us1.avaya.com [135.11.29.13]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1AADA1B3784 for ; Thu, 13 Aug 2015 01:45:42 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A2AeAwA3Q8ZV/yYyC4dbGQEBAYJTLFRpBqluBpM2CYIEhXkCgSY4FAEBAQEBAQF/C4QjAQEBAQMSKDoFDAQCAQgNBAQBAQsUCQcyFAcBAQUDAgQOBQgaiAwBDKxpoDoBAQEBAQEBAQEBAQEBAQEBAQEBAQETBIYfhTKENwEBHzEHBoMSgRQFlQsBhQGJKocwjR6DZhcPg31vgQ46gQQBAQE X-IPAS-Result: A2AeAwA3Q8ZV/yYyC4dbGQEBAYJTLFRpBqluBpM2CYIEhXkCgSY4FAEBAQEBAQF/C4QjAQEBAQMSKDoFDAQCAQgNBAQBAQsUCQcyFAcBAQUDAgQOBQgaiAwBDKxpoDoBAQEBAQEBAQEBAQEBAQEBAQEBAQETBIYfhTKENwEBHzEHBoMSgRQFlQsBhQGJKocwjR6DZhcPg31vgQ46gQQBAQE X-IronPort-AV: E=Sophos;i="5.15,634,1432612800"; d="scan'208";a="135703285" Received: from unknown (HELO p-us1-erheast-smtpauth.us1.avaya.com) ([135.11.50.38]) by p-us1-iereast-outbound.us1.avaya.com with ESMTP; 13 Aug 2015 04:45:41 -0400 X-OutboundMail_SMTP: 1 Received: from unknown (HELO AZ-FFEXHC04.global.avaya.com) ([135.64.58.14]) by p-us1-erheast-out.us1.avaya.com with ESMTP/TLS/AES128-SHA; 13 Aug 2015 04:45:41 -0400 Received: from AZ-FFEXMB04.global.avaya.com ([fe80::6db7:b0af:8480:c126]) by AZ-FFEXHC04.global.avaya.com ([135.64.58.14]) with mapi id 14.03.0174.001; Thu, 13 Aug 2015 10:45:40 +0200 From: "Romascanu, Dan (Dan)" To: "i2nsf@ietf.org" Thread-Topic: [Sdn] new draft on SDN for DDoS mitigation Thread-Index: AQHQ1QEte5zztIXNB0GlPAL7BGuG0Z4Jnh5w Date: Thu, 13 Aug 2015 08:45:39 +0000 Message-ID: <9904FB1B0159DA42B0B887B7FA8119CA5CAF9ABD@AZ-FFEXMB04.global.avaya.com> References: <55CB473A.3010505@mti-systems.com> In-Reply-To: <55CB473A.3010505@mti-systems.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.64.58.47] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: Wesley Eddy Subject: [I2nsf] FW: [Sdn] new draft on SDN for DDoS mitigation X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Aug 2015 08:45:44 -0000 Hi, >From the SDNRG mail list.=20 This I-D is interesting, I believe - looks like another I2NSF use case.=20 Regards, Dan > -----Original Message----- > From: sdn [mailto:sdn-bounces@mail.ietf.org] On Behalf Of Wesley Eddy > Sent: Wednesday, August 12, 2015 4:17 PM > To: sdn@irtf.org > Cc: gclark mti-systems.com; Justin Dailey > Subject: [Sdn] new draft on SDN for DDoS mitigation >=20 > Hello, we wanted to make people aware of a new I-D that uses SDN (or more > specifically OpenFlow) as a tool to improve DDoS mitigation: > https://datatracker.ietf.org/doc/draft-eddy-sdnrg-customer-filters/ >=20 > The interesting part of this for SDNRG is probably the sub-controller con= cept, > which is how we allow OpenFlow to be used inter-domain (for customers to > control aspects of their ISP's network), and the three- stage organizatio= n of > flow tables. >=20 > The content is fairly specific to DDoS, but could be extended and general= ized > for other uses. >=20 > Much of the other interdomain SDN work has the ISPs setting up virtual > networks for each customer, or slice-based constructions, which are not > required by this sub-controller approach. It may be of interest as an > alternative construction with its own set of advantages and disadvantages= in > comparison to other interdomain SDN approaches. >=20 > We're eager to hear your comments, criticisms, and questions. >=20 > -- > Wes Eddy > MTI Systems >=20 From nobody Thu Aug 13 06:16:29 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 320A31A1BF8 for ; Thu, 13 Aug 2015 06:16:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.92 X-Spam-Level: X-Spam-Status: No, score=-4.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YybwmDYmUeKL for ; Thu, 13 Aug 2015 06:16:26 -0700 (PDT) Received: from de307622-de-outbound.net.avaya.com (de307622-de-outbound.net.avaya.com [198.152.71.100]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 051B21A1C04 for ; Thu, 13 Aug 2015 06:16:25 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A2ABBQBBP8ZV/yYyC4dbGQEBgjMhLFRpBoUnpEcGkz+CA4V6AoEmOhIBAQEBAQEBgQqEIwEBAQEDEhtcAgEIDQQEAQELHQcyFAkIAQEEARIIGogMAQysbKA+AQEBAQEBAQEBAQEBAQEBAQEBAQEBF4YfhTKEWC0KAYMYgRQFlQsBhQGJKkaDX4MLDJB4Fw+BYIIdbwEBgUaBBAEBAQ X-IPAS-Result: A2ABBQBBP8ZV/yYyC4dbGQEBgjMhLFRpBoUnpEcGkz+CA4V6AoEmOhIBAQEBAQEBgQqEIwEBAQEDEhtcAgEIDQQEAQELHQcyFAkIAQEEARIIGogMAQysbKA+AQEBAQEBAQEBAQEBAQEBAQEBAQEBF4YfhTKEWC0KAYMYgRQFlQsBhQGJKkaDX4MLDJB4Fw+BYIIdbwEBgUaBBAEBAQ X-IronPort-AV: E=Sophos;i="5.15,634,1432612800"; d="scan'208,217";a="115587225" Received: from unknown (HELO p-us1-erheast-smtpauth.us1.avaya.com) ([135.11.50.38]) by de307622-de-outbound.net.avaya.com with ESMTP; 13 Aug 2015 09:16:23 -0400 X-OutboundMail_SMTP: 1 Received: from unknown (HELO AZ-FFEXHC01.global.avaya.com) ([135.64.58.11]) by p-us1-erheast-out.us1.avaya.com with ESMTP/TLS/AES128-SHA; 13 Aug 2015 09:16:22 -0400 Received: from AZ-FFEXMB04.global.avaya.com ([fe80::6db7:b0af:8480:c126]) by AZ-FFEXHC01.global.avaya.com ([135.64.58.11]) with mapi id 14.03.0174.001; Thu, 13 Aug 2015 15:16:21 +0200 From: "Romascanu, Dan (Dan)" To: Linda Dunbar , "i2nsf@ietf.org" Thread-Topic: I2NSF BOF draft minutes now available Thread-Index: AdDULYjnCeJ8nsfBTV+LJVfxe/ThKwBIaRoQAB67xUA= Date: Thu, 13 Aug 2015 13:16:21 +0000 Message-ID: <9904FB1B0159DA42B0B887B7FA8119CA5CAF9F7F@AZ-FFEXMB04.global.avaya.com> References: <9904FB1B0159DA42B0B887B7FA8119CA5CAF6364@AZ-FFEXMB04.global.avaya.com> <4A95BA014132FF49AE685FAB4B9F17F657D0C2A4@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D0C2A4@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.64.58.47] Content-Type: multipart/alternative; boundary="_000_9904FB1B0159DA42B0B887B7FA8119CA5CAF9F7FAZFFEXMB04globa_" MIME-Version: 1.0 Archived-At: Subject: Re: [I2nsf] I2NSF BOF draft minutes now available X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Aug 2015 13:16:28 -0000 --_000_9904FB1B0159DA42B0B887B7FA8119CA5CAF9F7FAZFFEXMB04globa_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Linda, Actually Joe was the one who compiled the meeting minutes. Regards, Dan From: Linda Dunbar [mailto:linda.dunbar@huawei.com] Sent: Thursday, August 13, 2015 1:37 AM To: Romascanu, Dan (Dan); i2nsf@ietf.org Subject: RE: I2NSF BOF draft minutes now available Dan, Thank you very much for chairing the I2NSF BOF and compiled the meeting min= utes. Just a minor correction: it is Da Cheng Zhang (Alibaba) that presented the = Capability Index topic. Linda From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Romascanu, Dan (Da= n) Sent: Tuesday, August 11, 2015 7:02 AM To: i2nsf@ietf.org Subject: [I2nsf] I2NSF BOF draft minutes now available Hi, Joe consolidated the notes taken by Sue and Joe (thanks, all!) and made the= draft minutes available at https://www.ietf.org/proceedings/93/minutes/min= utes-93-i2nsf. Please read and let us know if anything important is missing= or was mis-represented. Regards, Dan --_000_9904FB1B0159DA42B0B887B7FA8119CA5CAF9F7FAZFFEXMB04globa_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Linda,

 

Actually Joe was the o= ne who compiled the meeting minutes.

 

Regards,

 

Dan<= /p>

 

 

From: Linda Du= nbar [mailto:linda.dunbar@huawei.com]
Sent: Thursday, August 13, 2015 1:37 AM
To: Romascanu, Dan (Dan); i2nsf@ietf.org
Subject: RE: I2NSF BOF draft minutes now available=

 

Dan,

 

Thank you very much fo= r chairing the I2NSF BOF and compiled the meeting minutes.

 

Just a minor correctio= n: it is Da Cheng Zhang (Alibaba) that presented the Capability Index topic= .

 

Linda

 

From: I2nsf [<= a href=3D"mailto:i2nsf-bounces@ietf.org">mailto:i2nsf-bounces@ietf.org] On Behalf Of Romascanu, Dan (Dan)
Sent: Tuesday, August 11, 2015 7:02 AM
To: i2nsf@ietf.org
Subject: [I2nsf] I2NSF BOF draft minutes now available

 

Hi,

 

Joe consolidated the notes taken by Sue and Joe (tha= nks, all!) and made the draft minutes available at https://www.ietf.org/proceedings/93/minutes/minutes-93-i2nsf. Please re= ad and let us know if anything important is missing or was mis-represented.

 

Regards,

 

Dan

 

--_000_9904FB1B0159DA42B0B887B7FA8119CA5CAF9F7FAZFFEXMB04globa_-- From nobody Thu Aug 13 08:50:40 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0FFF1A889B for ; Thu, 13 Aug 2015 08:50:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nBhkVgXGDNUv for ; Thu, 13 Aug 2015 08:50:35 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C07D1A88A4 for ; Thu, 13 Aug 2015 08:50:31 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BZV67719; Thu, 13 Aug 2015 15:50:29 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml402-hub.china.huawei.com (10.201.5.241) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 13 Aug 2015 16:50:28 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Thu, 13 Aug 2015 08:50:23 -0700 From: Linda Dunbar To: "dwing@cisco.com" Thread-Topic: [I2nsf] i2nsf charter feedback Thread-Index: AQHQzjD808+dxjcbZECO9Bste90+iZ39pUCwgAD65QCAC4FjwA== Date: Thu, 13 Aug 2015 15:50:23 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D0C820@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> <28E8A1A0-01ED-4F0C-800B-8893A0317DEC@cisco.com> In-Reply-To: <28E8A1A0-01ED-4F0C-800B-8893A0317DEC@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.198] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Aug 2015 15:50:38 -0000 RGFuLCANCg0KU29ycnkgZm9yIHRoZSBsYXRlIHJlc3BvbnNlLCBJIGp1c3QgY2FtZSBiYWNrIGZy b20gYSAyLXdlZWsgdmFjYXRpb24uIA0KDQpSZXBseSB0byB5b3VyIGNvbW1lbnRzIGFyZSBpbnNl cnRlZCBiZWxvdzoNCg0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogSTJuc2Yg W21haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgPz9EYW4gV2luZw0K U2VudDogV2VkbmVzZGF5LCBBdWd1c3QgMDUsIDIwMTUgODowMyBQTQ0KVG86IExpbmRhIER1bmJh cg0KQ2M6IGkybnNmQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0kybnNmXSBpMm5zZiBjaGFydGVy IGZlZWRiYWNrDQoNCg0KT24gMDUtQXVnLTIwMTUgMTA6MDggYW0sIExpbmRhIER1bmJhciA8bGlu ZGEuZHVuYmFyQGh1YXdlaS5jb20+IHdyb3RlOg0KPiANCj4gRGFuLCANCj4gDQo+IFRoYW5rIHlv dSB2ZXJ5IG11Y2ggZm9yIHRoZSBjb21tZW50cy4gDQo+IA0KPiBDYW4geW91IGNoZWNrIHRoZSBs YXRlc3QgdmVyc2lvbiBvZiB0aGUgSTJOU0YgY2hhcnRlciBhbmQgc2VlIGlmIHlvdXIgY29uY2Vy bnMgaGF2ZSBiZWVuIGFkZHJlc3NlZD8gDQo+IA0KPiBodHRwczovL3NpdGVzLmdvb2dsZS5jb20v c2l0ZS9pbnRlcmZhY2UybnNmLw0KDQoxLiBObywgaXQgc3RpbGwgc2F5cyAiY29udHJvbGxpbmcg YXNwZWN0cyIgKHNlY29uZCBwYXJhZ3JhcGgsIGZpcnN0IHNlbnRlbmNlKS4gIEl0IGlzbid0IGNs ZWFyIHdoYXQgdGhvc2UgYXNwZWN0cyBhcmUuICBUaGUgd29yZCAnYXNwZWN0cycgb25seSBhcHBl YXJzIHR3aWNlIGluIHRoZSBjaGFydGVyIHRleHQuDQoNCltMaW5kYV0gIkNvbnRyb2xsaW5nIGFz cGVjdHMiIGlzIHJlZmVycmluZyB0byAicnVsZXMgdG8gYmUgZW5mb3JjZWQgZm9yIHRyYWZmaWMg dHJhdmVyc2VkIHRocm91Z2ggdGhlIE5TRnMiLiBJdCBpcyBlbXBoYXNpemVkIGhlcmUgdG8gZGlm ZmVyZW50aWF0ZSBmcm9tICJkZXZpY2UgbGV2ZWwgY29uZmlndXJhdGlvbiIsIHN1Y2ggYXMgdGhl IGRldmljZSdzIG93biBuZXR3b3JrIGFkZHJlc3NlcywgdGltZXIsIHBvcnRzLCBldGMuIA0KDQoN CjIuIFllcywgdGhlIElBTkEgc3R1ZmYgaXNuJ3QgZHVwbGljYXRlZCBub3cuICBUaGFua3MuDQoN Cg0KT25lIG90aGVyIHRoaW5nIEkganVzdCBub3RpY2VkLCAib25lIG9yIG1vcmUgbWFuYWdlbWVu dCBlbnRpdGllcy4iICBJcyBpMm5zZiBnb2luZyB0byBzb2x2ZSB0aGUgZGF0YWJhc2UgdXBkYXRl IGFuZCBzeW5jaHJvbml6YXRpb24gcHJvYmxlbT8gIFRoaXMgc2VlbXMgY29tcGxpY2F0ZWQuICBU aGF0IGlzLCBkb2VzIGkybnNmIG5lZWQgdG8gc3VwcG9ydCBtdWx0aXBsZSBtYW5hZ2VtZW50IGVu dGl0aWVzIGNvbnRyb2xsaW5nIGEgTlNGLCBhbmQgZG9lcyBpMm5zZiBuZWVkIHRvIHRlbGwgdGhv c2Ugb3RoZXIgbWFuYWdlbWVudCBlbnRpdGllcyBvZiBjaGFuZ2VzIGRvbmUgYnkgYW5vdGhlciBl bnRpdHk/DQoNCltMaW5kYV0gTm8sICJEYXRhYmFzZSB1cGRhdGUgYW5kIHN5bmNocm9uaXphdGlv biIgaXMgZGVmaW5pdGVseSBvdXQgb2YgSTJOU0Ygc2NvcGUuIA0KIm9uZSBvciBtb3JlIG1hbmFn ZW1lbnQgZW50aXRpZXMiIGlzIHJlZmVycmluZyB0byB0aGF0IEkyTlNGIGFnZW50IENBTiBnZXQg cnVsZSByZXF1ZXN0cyBtb3JlIHRoYW4gb25lIGVudGl0aWVzIChvciBJMk5TRiBjbGllbnRzKS4g DQoNCkxldCBtZSBrbm93IGlmIHlvdSBoYXZlIG1vcmUgcXVlc3Rpb25zLiANCg0KLWQNCg0KDQo+ IA0KPiBMaW5kYQ0KPiANCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogSTJu c2YgW21haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgPz9EYW4gV2lu Zw0KPiBTZW50OiBNb25kYXksIEF1Z3VzdCAwMywgMjAxNSA0OjExIFBNDQo+IFRvOiBpMm5zZkBp ZXRmLm9yZw0KPiBTdWJqZWN0OiBbSTJuc2ZdIGkybnNmIGNoYXJ0ZXIgZmVlZGJhY2sNCj4gDQo+ IEJhc2VkIG9uIGh0dHBzOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaG9t ZSB0aGF0IEkgYW0gbG9va2luZyBhdCBub3csIEkgaGF2ZSB0d28gcXVlc3Rpb25zLA0KPiANCj4g MS4gICJUaGUgcHJpbWFyeSBnb2FsIG9mIEkyTlNGIGlzIHRvIGRlZmluZSBhbiBpbmZvcm1hdGlv biBtb2RlbCwgYSBzZXQgb2Ygc29mdHdhcmUgaW50ZXJmYWNlcyBhbmQgZGF0YSBtb2RlbHMgZm9y IGNvbnRyb2xsaW5nIGFuZCBtb25pdG9yaW5nIGFzcGVjdHMgb2YgcGh5c2ljYWwgYW5kIHZpcnR1 YWwgTlNGcy4iDQo+IA0KPiBTaG91bGQgdGhhdCBzYXkgIi4uLiBhbmQgbW9uaXRvcmluZyBTRUNV UklUWSBhc3BlY3RzIC4uLiIsIGFzIHdhcyBpbiBTdHJhc3NuZXIncyBodHRwOi8vd3d3LmlldGYu b3JnL21haWwtYXJjaGl2ZS93ZWIvaTJuc2YvY3VycmVudC9tc2cwMDM4OC5odG1sPw0KPiANCj4g RXZlbiB3aXRoIHRoZSBlZGl0IHRvIGJlY29tZSAic2VjdXJpdHkgYXNwZWN0cyIsIEkgYW0gdW5j b21mb3J0YWJsZSB3aGVyZSB0aGUgbGluZSBpcyBkcmF3biBiZXR3ZWVuIGEgInNlY3VyaXR5IGFz cGVjdCIgKGluIHNjb3BlIG9mIGkybnNmKSBhbmQgIm90aGVyIGFzcGVjdHMiIChvdXQgb2Ygc2Nv cGUgb2YgaTJuc2YpLiAgRm9yIGV4YW1wbGUsICdyZW1lZGlhdGlvbicgaXMgbWVudGlvbmVkIGF0 IHRoZSBlbmQgb2YgdGhlIHNhbWUgcGFyYWdyYXBoLCBhbmQgcmVtZWRpYXRpb24gY291bGQgaW52 b2x2ZSBzZW5kaW5nIGEgY29tcHJvbWlzZWQgaG9zdCB0byBhICJyZW1lZGlhdGlvbiBwb3J0YWwi LiAgV291bGQgdGhhdCBzdGVlcmluZyBvZiB0aGUgdXNlcidzIHRyYWZmaWMgYmUgYSAic2VjdXJp dHkgYXNwZWN0IiBvciBhbiAib3RoZXIgYXNwZWN0IiwgYW5kIGRvZXMgdGhhdCBhbnN3ZXIgZGVw ZW5kIG9uIGlmIHRoZSBmdW5jdGlvbiBpcyBhY2NvbXBsaXNoZWQgYnkgcmVjb25maWd1cmluZyBu ZXR3b3JrIHN3aXRjaGVzIG9yIGlmIHRoZSBmdW5jdGlvbiBpcyBpbnRlcm5hbCB0byB0aGUgTlNG IGl0c2VsZi4NCj4gDQo+IA0KPiAyLiBUaGVyZSBhcmUgdHdvIHBsYWNlcyB3aGVyZSBJQU5BIHJl Z2lzdHJ5IGlzIG1lbnRpb25lZCwgb25jZSBpbiAnY29uY3JldGUgd29yaycgYW5kIGFnYWluIGlu ICdkZWxpdmVyYWJsZXMnLiAgVGhlIHRleHQgZGlmZmVycy4gIElzIHRoaXMgdHdvIHJlZ2lzdHJp ZXMsIG9yIG9uZSByZWdpc3RyeT8gIENhbiB0aGUgY2hhcnRlciB0ZXh0IGJlIGNsYXJpZmllZCBp ZiB0aGVzZSBhcmUgdHdvIHJlZ2lzdHJpZXMgb3Igb25lPw0KPiANCj4gLWQNCj4gDQo+IF9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IEkybnNmIG1haWxp bmcgbGlzdA0KPiBJMm5zZkBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2kybnNmDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCkkybnNmIG1haWxpbmcgbGlzdA0KSTJuc2ZAaWV0Zi5vcmcNCmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YNCg== From nobody Thu Aug 13 09:48:07 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A415E1A1B14 for ; Thu, 13 Aug 2015 09:48:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zPH6EAVUWNAd for ; Thu, 13 Aug 2015 09:48:02 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A542C1A19F7 for ; Thu, 13 Aug 2015 09:48:01 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BZV71961; Thu, 13 Aug 2015 16:47:59 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 13 Aug 2015 17:47:59 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Thu, 13 Aug 2015 09:47:52 -0700 From: Linda Dunbar To: Daniel Migault , "dwing@cisco.com" , "i2nsf@ietf.org" Thread-Topic: [I2nsf] i2nsf charter feedback Thread-Index: AQHQzjD808+dxjcbZECO9Bste90+iZ39pUCwgACwvYCAC81gcA== Date: Thu, 13 Aug 2015 16:47:51 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D0C8BD@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> <2DD56D786E600F45AC6BDE7DA4E8A8C11213E25A@eusaamb107.ericsson.se> In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C11213E25A@eusaamb107.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.198] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D0C8BDdfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Aug 2015 16:48:06 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D0C8BDdfweml701chm_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Daniel, Thank you very much for the suggested charter text. Some questions and comments are inserted below: -----Original Message----- From: Daniel Migault [mailto:daniel.migault@ericsson.com] Sent: Wednesday, August 05, 2015 3:37 PM To: Linda Dunbar; dwing@cisco.com; i2nsf@ietf.org Subject: RE: [I2nsf] i2nsf charter feedback Hi, My comments are based on the charter at: https://sites.google.com/site/inte= rface2nsf/ Hope they help. BR, Daniel A) I agree that configuration should be out of scope. I would add the follo= wing text. Controlling and monitoring [...] management entities. ADDED TEXT: Unlike configuration of NSF, I2NSF provides facilities to chang= e and update the internal states of the NSF. Since different security [...] [Linda] The last sentence of the current charter already has the sentence: = " Other aspects of NSFs, such as device or network provisioning and configu= ration, are out of scope." Do you think it is enough? I am hesitated to put= "Internal States of the NSF" in the charter, because there could be many t= ypes of interpretations depending on the background of readers, e.g. "Inter= nal NSF memory states, Internal NSF ports states", etc. "Controlling aspect= s" is referring to "rules to be enforced for traffic traversed through the = NSFs". B) OLD CHARTER TEXT "The I2NSF Capability Layer specifies how to control and monitor NSFs at a = functional implementation level. I2NSF will standardize a set of interfaces= by which a security controller can invoke, operate, and monitor NSFs." I think we should clarify functional implementation level. My understanding= is that the I2NSF Capability Layer should inform the tenants of the differ= ent available NSF as well as the various available associated options, prof= iles... [Linda] The sentence "functional implementation" is the result of many roun= ds of debate. It is trying to emphasizing that the rules (for control and m= onitor) to NSFs have to be implementable by most NSFs. C) OLD CHARTER TEXT "The I2NSF Service Layer defines how clients' security policies may be expr= essed to a security controller that uses the capability layer to control an= d manage NSFs to implement these policies. " Maybe we could write: "The I2NSF Service Layer defines how clients' security policies may be expr= essed to a security controller. The controller implements its policies acco= rding to the various a capabilities provided by the I2NSF Capability Layer.= " [Linda] This suggestion is OK with me. I will ask Adrian since the wording = was proposed by him. OLD CHARTER TEXT "It also allows the client to monitor those policies. I2NSF will not specif= y how a security controller maps security service requests at the Service L= ayer to control and management actions at the Capability Layer, but the dev= elopment of a Simple Service Layer model that is modeled as closely as poss= ible on the Capability Layer is within scope. Such a Simple Service Layer = will enable a security controller to handle issues like multi-tenancy and t= he choice between available NSFs for a given policy" This is not very clear to me what is in scope and is not. [Linda] The statement is to say that - the translation mechanism/methods from Service Layer policies to Ca= pability layer comments is out of I2NSF scope, and - I2NSF will not specify abstract or sophisticated policies from clie= nts. Only simple service layer policies that model the "capability layer" c= ommands are in the scope of I2NSF. - At least my understanding is: I2NFS will not define how tenants' NSF requests at the Service Layer are de= clined in [Linda] "declined"??? Capability Layer this is left to the controller which is implementation de= pendent. Instead, I2NFS considers that tenants policies should be based on= information provided by the Capability Layer. I2NSF will provide guidance = based on a simple service to define a models that eases interactions betwee= n the Service Layer and the Capability Layer. [Linda] hope my explanation helps. Please let me know if you have more ques= tions. Thanks, Linda --_000_4A95BA014132FF49AE685FAB4B9F17F657D0C8BDdfweml701chm_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Daniel,
 
Thank you very much for the suggested charter text.
Some questions and comments are inserted below:
 
-----Original Message-----
From: Daniel Migault [mailto= :daniel.migault@ericsson.com]
Sent: Wednesday, August 05, 2015 3:37 PM
To: Linda Dunbar; dwing@cisco.com; i2nsf@ietf.org
Subject: RE: [I2nsf] i2nsf charter feedback
 
Hi,
 
My comments are based on the charter at: https://sites.google.com/site/interface2nsf/
 
Hope they help.
 
BR,
Daniel
 
A) I agree that configuration should be out of scope. I would add the = following text.
 
Controlling and monitoring [...] management entities.
ADDED TEXT: Unlike configuration of NSF, I2NSF provides facilities to = change and update the internal states of the NSF.
Since different security [...]
 
[Linda] The last sentence of the current charter already has the sente= nce: " Other aspects of NSFs, such as devic= e or network provisioning and configuration, are out of scope.” Do you think it is enough? I am hesitated to put “Internal States of the NSF” in the char= ter, because there could be many types of interpretations depending on the = background of readers, e.g. “Internal NSF memory states, Internal NSF ports states”, etc. "Controlling aspects&qu= ot; is referring to "rules to be enforced for traffic traversed throug= h the NSFs".
 
 
B)
OLD CHARTER TEXT
"The I2NSF Capability Layer specifies how to control and monitor = NSFs at a functional implementation level. I2NSF will standardize a set of = interfaces by which a security controller can invoke, operate, and monitor = NSFs."
 
I think we should clarify functional implementation level. My understa= nding is that the I2NSF Capability Layer should inform the tenants of the d= ifferent available NSF as well as the various available associated options,= profiles...
[Linda] The sentence “functional = implementation” is the r= esult of many rounds of debate. It is trying to emphasizing that the rules = (for control and monitor) to NSFs have to be implementable by most NSFs.
 
 
C)
OLD CHARTER TEXT
"The I2NSF Service Layer defines how clients' security policies m= ay be expressed to a security controller that uses the capability layer to = control and manage NSFs to implement these policies.  "
 
Maybe we could write:
"The I2NSF Service Layer defines how clients' security policies m= ay be expressed to a security controller. The controller implements its pol= icies according to the various a capabilities provided by the I2NSF Capabil= ity Layer."
 
[Linda] This suggestion is OK with me. I will ask Adrian since the wor= ding was proposed by him.
 
 
OLD CHARTER TEXT
"It also allows the client to monitor those policies. I2NSF will = not specify how a security controller maps security service requests at the= Service Layer to control and management actions at the Capability Layer, b= ut the development of a Simple Service Layer model that is modeled as closely as possible on the Capability Layer = is within scope.  Such a Simple Service Layer will enable a security c= ontroller to handle issues like multi-tenancy and the choice between availa= ble NSFs for a given policy"
 
This is not very clear to me what is in scope and is not.
 
[Linda] The statement is to say that
  • the translation mechanism/methods from Service Layer policies to Capabi= lity layer comments is out of I2NSF scope, and
  • I2NSF will not speci= fy abstract or sophisticated policies from clients. Only simple service lay= er policies that model the “capability layer” commands are in t= he scope of I2NSF.
  •  
 
At least my understanding is:
I2NFS will not define how tenants' NSF requests at the Service Layer a= re declined in
 
[Linda] “declined”???
Capability Layer this is left to the controller which is implementati= on dependent.  Instead, I2NFS considers that tenants policies should b= e based on information provided by the Capability Layer. I2NSF will provide= guidance based on a simple service to define a models that eases interactions between the Service Layer  and= the Capability Layer.
 
 
[Linda] hope my explanation helps. Please let me know if you have more= questions.
 
Thanks, Linda
 
 
 
 
 
 --_000_4A95BA014132FF49AE685FAB4B9F17F657D0C8BDdfweml701chm_-- From nobody Fri Aug 14 10:36:28 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98B811B2ABF for ; Fri, 14 Aug 2015 10:36:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.211 X-Spam-Level: X-Spam-Status: No, score=-14.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yGwE9C50K-H8 for ; Fri, 14 Aug 2015 10:36:25 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3AAA1B2ABE for ; Fri, 14 Aug 2015 10:36:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4275; q=dns/txt; s=iport; t=1439573785; x=1440783385; h=mime-version:subject:from:in-reply-to:date:cc: content-transfer-encoding:message-id:references:to; bh=aQs/oywQU4GK9TRj7sImi/0+7sAgYIjQ+VTyEdIdznI=; b=UoU406CrwklxP2JmuNITmtLjSjsCfNHk3wdh3A3mlpQSpWZy22BxCJD5 SRotqxE2MSwv2ZDT2LMGQeSU+wjt5Eun3GMq1cuDWxKqommNgKs4faWri vK2eczQx5dz+p2NgxEocVmSJ/7HODlrRM/vUvgzZInBL+Njs7GS7JUUcx A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CpAgAiJs5V/5pdJa1TCoMbVGm+CAEJgWsKgkODNgKBSjgUAQEBAQEBAYEKhCMBAQEDAQEBATc0CwUHBAsRBAEBAScHJx8JCAYTCYgdCA3QAwEBAQEBAQEBAQEBAQEBAQEBAQEBAReLU4QlBwsBAR0zBwaDEoEUBY1Ph0yFBIdogUqEK4J3iQuERoNnJoQdHjMBgQ2BPgEBAQ X-IronPort-AV: E=Sophos;i="5.15,678,1432598400"; d="scan'208";a="178158093" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-2.cisco.com with ESMTP; 14 Aug 2015 17:36:24 +0000 Received: from [10.24.90.103] ([10.24.90.103]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t7EHaNhh026433 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 14 Aug 2015 17:36:24 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\)) From: =?utf-8?Q?=F0=9F=94=93Dan_Wing?= In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D0C820@dfweml701-chm> Date: Fri, 14 Aug 2015 10:36:23 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <904ACD79-1E2E-40B5-9982-30C7345BF710@cisco.com> References: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> <28E8A1A0-01ED-4F0C-800B-8893A0317DEC@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D0C820@dfweml701-chm> To: Linda Dunbar X-Mailer: Apple Mail (2.2102) Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Aug 2015 17:36:27 -0000 On 13-Aug-2015 08:50 am, Linda Dunbar wrote: >=20 > Dan,=20 >=20 > Sorry for the late response, I just came back from a 2-week vacation.=20= >=20 > Reply to your comments are inserted below: >=20 >=20 > -----Original Message----- > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of ??Dan Wing > Sent: Wednesday, August 05, 2015 8:03 PM > To: Linda Dunbar > Cc: i2nsf@ietf.org > Subject: Re: [I2nsf] i2nsf charter feedback >=20 >=20 > On 05-Aug-2015 10:08 am, Linda Dunbar wrote: >>=20 >> Dan,=20 >>=20 >> Thank you very much for the comments.=20 >>=20 >> Can you check the latest version of the I2NSF charter and see if your = concerns have been addressed?=20 >>=20 >> https://sites.google.com/site/interface2nsf/ >=20 > 1. No, it still says "controlling aspects" (second paragraph, first = sentence). It isn't clear what those aspects are. The word 'aspects' = only appears twice in the charter text. >=20 > [Linda] "Controlling aspects" is referring to "rules to be enforced = for traffic traversed through the NSFs". > It is emphasized here to differentiate from "device level = configuration", such as the device's own network addresses, timer, = ports, etc.=20 Yes, I agree the last sentence in that paragraph which says: "Other aspects of NSFs, such as device or network provisioning and = configuration, are out of scope." declares what aspects are out of scope. But the charter text does not identify which aspects are *in scope*. > 2. Yes, the IANA stuff isn't duplicated now. Thanks. >=20 >=20 > One other thing I just noticed, "one or more management entities." Is = i2nsf going to solve the database update and synchronization problem? = This seems complicated. That is, does i2nsf need to support multiple = management entities controlling a NSF, and does i2nsf need to tell those = other management entities of changes done by another entity? >=20 > [Linda] No, "Database update and synchronization" is definitely out of = I2NSF scope.=20 > "one or more management entities" is referring to that I2NSF agent CAN = get rule requests more than one entities (or I2NSF clients).=20 Can the charter make that clearer, please? -d >=20 > Let me know if you have more questions.=20 >=20 > -d >=20 >=20 >>=20 >> Linda >>=20 >> -----Original Message----- >> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of ??Dan Wing >> Sent: Monday, August 03, 2015 4:11 PM >> To: i2nsf@ietf.org >> Subject: [I2nsf] i2nsf charter feedback >>=20 >> Based on https://sites.google.com/site/interface2nsf/home that I am = looking at now, I have two questions, >>=20 >> 1. "The primary goal of I2NSF is to define an information model, a = set of software interfaces and data models for controlling and = monitoring aspects of physical and virtual NSFs." >>=20 >> Should that say "... and monitoring SECURITY aspects ...", as was in = Strassner's = http://www.ietf.org/mail-archive/web/i2nsf/current/msg00388.html? >>=20 >> Even with the edit to become "security aspects", I am uncomfortable = where the line is drawn between a "security aspect" (in scope of i2nsf) = and "other aspects" (out of scope of i2nsf). For example, 'remediation' = is mentioned at the end of the same paragraph, and remediation could = involve sending a compromised host to a "remediation portal". Would = that steering of the user's traffic be a "security aspect" or an "other = aspect", and does that answer depend on if the function is accomplished = by reconfiguring network switches or if the function is internal to the = NSF itself. >>=20 >>=20 >> 2. There are two places where IANA registry is mentioned, once in = 'concrete work' and again in 'deliverables'. The text differs. Is this = two registries, or one registry? Can the charter text be clarified if = these are two registries or one? >>=20 >> -d >>=20 >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf >=20 >=20 > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf From nobody Sat Aug 15 10:56:00 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8139F1A21A8 for ; Sat, 15 Aug 2015 10:55:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.701 X-Spam-Level: X-Spam-Status: No, score=-100.701 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ErlIilGhfK6t for ; Sat, 15 Aug 2015 10:55:58 -0700 (PDT) Received: from asmtp1.iomartmail.com (asmtp1.iomartmail.com [62.128.201.248]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4F4F1A21A5 for ; Sat, 15 Aug 2015 10:55:57 -0700 (PDT) Received: from asmtp1.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp1.iomartmail.com (8.13.8/8.13.8) with ESMTP id t7FHtou9009784; Sat, 15 Aug 2015 18:55:50 +0100 Received: from 950129200 ([62.7.67.18]) (authenticated bits=0) by asmtp1.iomartmail.com (8.13.8/8.13.8) with ESMTP id t7FHtbq0009702 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO); Sat, 15 Aug 2015 18:55:47 +0100 From: "Adrian Farrel" To: "'Linda Dunbar'" , "'Daniel Migault'" , References: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> <2DD56D786E600F45AC6BDE7DA4E8A8C11213E25A@eusaamb107.ericsson.se> <4A95BA014132FF49AE685FAB4B9F17F657D0C8BD@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D0C8BD@dfweml701-chm> Date: Sat, 15 Aug 2015 18:55:39 +0100 Message-ID: <0b5401d0d783$a06cb1f0$e14615d0$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQLaZqs03LoF/ZcM7H5Y4Cnr0y0EJgG4L2H7AeWYRMUBpnCCPpvQF5rA Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1576-8.0.0.1202-21748.001 X-TM-AS-Result: No--5.996-10.0-31-10 X-imss-scan-details: No--5.996-10.0-31-10 X-TMASE-MatchedRID: lORh06tOiKg4HKI/yaqRm1fS8E9vfq82JPNIV6GF8mv24z7QfoL/CmZr dpqe46QCJwfoNpQi0Aw3LXzHrryidRgZ7Tcj60QbbCMnhMV5TW636GGfwjLoZZsoi2XrUn/JLJq 0kllJNetQSFbL1bvQASAHAopEd76vEhuP1t+uulsytsduEJFeWO4Pv7ax7vqzo46P2Ndnq/ouFm ciqdb75g== Archived-At: Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Aug 2015 17:55:59 -0000 Hi Daniel, Linda, >> C) >> OLD CHARTER TEXT >> "The I2NSF Service Layer defines how clients' security policies may = be=20 >> expressed to a security controller that uses the capability layer to = control >> and manage NSFs to implement these policies.=A0 " >> >> Maybe we could write: >> "The I2NSF Service Layer defines how clients' security policies may = be >> expressed to a security controller. The controller implements its = policies >> according to the various a capabilities provided by the I2NSF = Capability >> Layer." > > [Linda] This suggestion is OK with me. I will ask Adrian since the = wording > was proposed by him.=20 Thanks for checking. Daniel's proposal works for me. =A0 Cheers, Adrian From nobody Sun Aug 16 11:03:07 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC2731A88FD for ; Sun, 16 Aug 2015 11:03:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.277 X-Spam-Level: X-Spam-Status: No, score=-1.277 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22JAU2pDV1j1 for ; Sun, 16 Aug 2015 11:03:04 -0700 (PDT) Received: from mail-io0-x231.google.com (mail-io0-x231.google.com [IPv6:2607:f8b0:4001:c06::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 619AF1A89FD for ; Sun, 16 Aug 2015 11:02:56 -0700 (PDT) Received: by iods203 with SMTP id s203so129720616iod.0 for ; Sun, 16 Aug 2015 11:02:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=dTrI4pdKS93Tr6/oefUWJepAWnhL7vMwehFo5ePeu4o=; b=ywP/vxWubOpl/OaFwOehZjpFZioqPqdssDdeej77zaUQX15JXc7SzXHkg/SPV/N822 LL/fP1KkPqwGFPRi970BYUDi9lOb+dRgiWTkGkccjfoUniNZGdzzZIj0aMxkCR3sqdLc 3wLtfSj828HA/TZjoxhlpz7FKnnvpvJFU6l7EoW9Al1eI/E4D10YJ5NflCoDG5hby3BZ CemQSe03BITTum2rQMERI083IbYCF6GP3UdxgLfEo7Zc9UgYiln9+qlBkvEJYGIyoxJk 2eV05j+oEcpwaN4ngVUaXTX6SJNKQS9e3I5ehtPKdl5WIZabThO5C1we5aTHQax4zS4u DOCA== MIME-Version: 1.0 X-Received: by 10.107.37.134 with SMTP id l128mr51444226iol.92.1439748175878; Sun, 16 Aug 2015 11:02:55 -0700 (PDT) Sender: mglt.ietf@gmail.com Received: by 10.79.21.196 with HTTP; Sun, 16 Aug 2015 11:02:55 -0700 (PDT) In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D0C8BD@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> <2DD56D786E600F45AC6BDE7DA4E8A8C11213E25A@eusaamb107.ericsson.se> <4A95BA014132FF49AE685FAB4B9F17F657D0C8BD@dfweml701-chm> Date: Sun, 16 Aug 2015 14:02:55 -0400 X-Google-Sender-Auth: chJutRdrz6HC8WrvWZACYDedbKk Message-ID: From: Daniel Migault To: Linda Dunbar Content-Type: multipart/alternative; boundary=001a1140ea8696e26e051d717e39 Archived-At: Cc: "i2nsf@ietf.org" , "dwing@cisco.com" Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Aug 2015 18:03:06 -0000 --001a1140ea8696e26e051d717e39 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Linda, Thanks for the response and clarification. Please see my comments in line. BR, Daniel On Thu, Aug 13, 2015 at 12:47 PM, Linda Dunbar wrote: > Daniel, > > Thank you very much for the suggested charter text. > Some questions and comments are inserted below: > > -----Original Message----- > From: Daniel Migault [mailto:daniel.migault@ericsson.com > ] > Sent: Wednesday, August 05, 2015 3:37 PM > To: Linda Dunbar; dwing@cisco.com; i2nsf@ietf.org > Subject: RE: [I2nsf] i2nsf charter feedback > > Hi, > > My comments are based on the charter at: > https://sites.google.com/site/interface2nsf/ > > Hope they help. > > BR, > Daniel > > A) I agree that configuration should be out of scope. I would add the > following text. > > Controlling and monitoring [...] management entities. > ADDED TEXT: Unlike configuration of NSF, I2NSF provides facilities to > change and update the internal states of the NSF. > Since different security [...] > > [Linda] The last sentence of the current charter already has the sentence= : > " *Other aspects of NSFs, such as device or network provisioning and > configuration, are out of scope.**=E2=80=9D* Do you think it is enough? I= am > hesitated to put =E2=80=9CInternal States of the NSF=E2=80=9D in the char= ter, because there > could be many types of interpretations depending on the background of > readers, e.g. =E2=80=9CInternal NSF memory states, Internal NSF ports sta= tes=E2=80=9D, etc. > "Controlling aspects" is referring to "rules to be enforced for traffic > traversed through the NSFs". > > [Daniel] I have no strong opinion. If it does not clarify things, then we could leave it. > > B) > OLD CHARTER TEXT > "The I2NSF Capability Layer specifies how to control and monitor NSFs at = a > functional implementation level. I2NSF will standardize a set of interfac= es > by which a security controller can invoke, operate, and monitor NSFs." > > I think we should clarify functional implementation level. My > understanding is that the I2NSF Capability Layer should inform the tenant= s > of the different available NSF as well as the various available associate= d > options, profiles... > [Linda] The sentence =E2=80=9C*functional **implementation*=E2=80=9D is t= he result of > many rounds of debate. It is trying to emphasizing that the rules (for > control and monitor) to NSFs have to be implementable by most NSFs. > [Daniel] I find you sentence very clear. I think it would nice to add it in the charter to clarify what functional implementation means. > > > C) > OLD CHARTER TEXT > "The I2NSF Service Layer defines how clients' security policies may be > expressed to a security controller that uses the capability layer to > control and manage NSFs to implement these policies. " > > Maybe we could write: > "The I2NSF Service Layer defines how clients' security policies may be > expressed to a security controller. The controller implements its policie= s > according to the various a capabilities provided by the I2NSF Capability > Layer." > > [Linda] This suggestion is OK with me. I will ask Adrian since the wordin= g > was proposed by him. > > > OLD CHARTER TEXT > "It also allows the client to monitor those policies. I2NSF will not > specify how a security controller maps security service requests at the > Service Layer to control and management actions at the Capability Layer, > [Daniel] Maybe having two sentences. One for what is not in scope and another sentecne for what is in scope would be helpful. This shoudl be one sentence. The next one shoudl define what is in scope. Th ebullet you propose where much clearer to me. but the development of a Simple Service Layer model that is modeled as > closely as possible on the Capability Layer is within scope. Such a Simp= le > Service Layer will enable a security controller to handle issues like > multi-tenancy and the choice between available NSFs for a given policy" > > This is not very clear to me what is in scope and is not. > > [Linda] The statement is to say that > > - the translation mechanism/methods from Service Layer policies to > Capability layer comments is out of I2NSF scope, and > - I2NSF will not specify abstract or sophisticated policies from > clients. Only simple service layer policies that model the =E2=80=9Cca= pability > layer=E2=80=9D commands are in the scope of I2NSF. > - > > > At least my understanding is: > I2NFS will not define how tenants' NSF requests at the Service Layer are > declined in > > [Linda] =E2=80=9Cdeclined=E2=80=9D??? > [Daniel] I think I meant defined. bu the bullets were clear. Capability Layer this is left to the controller which is implementation > dependent. Instead, I2NFS considers that tenants policies should be base= d > on information provided by the Capability Layer. I2NSF will provide > guidance based on a simple service to define a models that eases > interactions between the Service Layer and the Capability Layer. > > > [Linda] hope my explanation helps. Please let me know if you have more > questions. > > Thanks, Linda > > > > > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > > --001a1140ea8696e26e051d717e39 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Linda,

Thanks for the resp= onse and clarification. Please see my comments in line.


BR= ,
Daniel

On Thu, Aug 13, 2015 at 12:47 PM, Linda Dunbar <<= a href=3D"mailto:linda.dunbar@huawei.com" target=3D"_blank">linda.dunbar@hu= awei.com> wrote:
Daniel,
=C2=A0
Thank you very much for the suggested charter text.
Some questions and comments are inserted below:
=C2=A0
-----Original Message-----
From: Daniel Migault [mailto:daniel.migault@ericsson.com]
Sent: Wednesday, August 05, 2015 3:37 PM
To: Linda Dunbar; dwin= g@cisco.com; i2nsf@= ietf.org
Subject: RE: [I2nsf] i2nsf charter feedback
=C2=A0
Hi,
=C2=A0
My comments are based on the charter at: https://sites.google.com/site= /interface2nsf/
=C2=A0
Hope they help.
=C2=A0
BR,
Daniel
=C2=A0
A) I agree that configuration should be out of scope. I would add the = following text.
=C2=A0
Controlling and monitoring [...] management entities.
ADDED TEXT: Unlike configuration of NSF, I2NSF provides facilities to = change and update the internal states of the NSF.
Since different security [...]
=C2=A0
[Linda] The last sentence of the current charter already has th= e sentence: " Other aspects of NSFs, such a= s device or network provisioning and configuration, are out of scope.=E2=80=9D Do you think it is enough? I am hesitated to put =E2=80=9CInternal States of the NSF=E2=80=9D in the = charter, because there could be many types of interpretations depending on = the background of readers, e.g. =E2=80=9CInternal NSF memory states, Internal NSF ports states=E2=80=9D, etc. "Controlling aspects&= quot; is referring to "rules to be enforced for traffic traversed thro= ugh the NSFs".
=C2=A0
[Daniel] I have no strong opinion. If it does not clarif= y things, then we could leave it. =C2=A0
=C2=A0
B)
OLD CHARTER TEXT
"The I2NSF Capability Layer specifies how to control and monitor = NSFs at a functional implementation level. I2NSF will standardize a set of = interfaces by which a security controller can invoke, operate, and monitor = NSFs."
=C2=A0
I think we should clarify functional implementation level. My understa= nding is that the I2NSF Capability Layer should inform the tenants of the d= ifferent available NSF as well as the various available associated options,= profiles...
[Linda] The sentence =E2=80=9Cfuncti= onal implementation=E2=80= =9D is the result of many rounds of debate. It is trying to emphasizing tha= t the rules (for control and monitor) to NSFs have to be implementable by most NSFs.

[D= aniel] I find you sentence very clear. I think it would nice to add it in t= he charter to clarify what functional implementation means. =C2=A0
=C2=A0
=C2=A0
C)
OLD CHARTER TEXT
"The I2NSF Service Layer defines how clients' security polici= es may be expressed to a security controller that uses the capability layer= to control and manage NSFs to implement these policies.=C2=A0 "
=C2=A0
Maybe we could write:
"The I2NSF Service Layer defines how clients' security polici= es may be expressed to a security controller. The controller implements its= policies according to the various a capabilities provided by the I2NSF Cap= ability Layer."
=C2=A0
[Linda] This suggestion is OK with me. I will ask Adrian since = the wording was proposed by him.
=C2=A0
=C2=A0
OLD CHARTER TEXT
"It also allows the client to monitor those policies. I2NSF will = not specify how a security controller maps security service requests at the= Service Layer to control and management actions at the Capability Layer,
=C2=A0
[Daniel] = Maybe having two sentences. One for what is not in scope and another sentec= ne for what is in scope would be helpful. This shoudl be one sentence. The = next one shoudl define what is in scope. Th ebullet you propose where much = clearer to me.

=
but the development of a Simple Service Layer model that is modeled as closely as possible on the Capability Layer = is within scope.=C2=A0 Such a Simple Service Layer will enable a security c= ontroller to handle issues like multi-tenancy and the choice between availa= ble NSFs for a given policy"
=C2=A0
This is not very clear to me what is in scope and is not.
=C2=A0
[Linda] The statement is to say that
  • the translation mechanism/methods from Service Layer policies to Capabi= lity layer comments is out of I2NSF scope, and
  • I2NSF will not speci= fy abstract or sophisticated policies from clients. Only simple service lay= er policies that model the =E2=80=9Ccapability layer=E2=80=9D commands are = in the scope of I2NSF.
  • =C2=A0
=C2=A0
At least my understanding is:
I2NFS will not define how tenants' NSF requests at the Service Lay= er are declined in
=C2=A0
[Linda] =E2=80=9Cdeclined=E2=80=9D???
=
[Daniel] I think I meant defined. bu the bullets were cle= ar.

Capability Layer this is left to the controller which is implementati= on dependent.=C2=A0 Instead, I2NFS considers that tenants policies should b= e based on information provided by the Capability Layer. I2NSF will provide= guidance based on a simple service to define a models that eases interactions between the Service Layer=C2=A0 and= the Capability Layer.
=C2=A0
=C2=A0
[Linda] hope my explanation helps. Please let me know if you ha= ve more questions.
=C2=A0
Thanks, Linda
=C2=A0
=C2=A0
=C2=A0
=C2=A0
=C2=A0

_______________________________________________
I2nsf mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf


--001a1140ea8696e26e051d717e39-- From nobody Mon Aug 17 09:56:43 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F4CE1A19FA for ; Mon, 17 Aug 2015 09:56:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DAkPryHV9Vrf for ; Mon, 17 Aug 2015 09:56:39 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7AC81A19F8 for ; Mon, 17 Aug 2015 09:56:38 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BWI91234; Mon, 17 Aug 2015 16:56:36 +0000 (GMT) Received: from DFWEML705-CHM.china.huawei.com (10.193.5.142) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 17 Aug 2015 17:56:34 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml705-chm ([10.193.5.142]) with mapi id 14.03.0235.001; Mon, 17 Aug 2015 09:56:22 -0700 From: Linda Dunbar To: "dwing@cisco.com" Thread-Topic: [I2nsf] i2nsf charter feedback Thread-Index: AQHQzjD808+dxjcbZECO9Bste90+iZ39pUCwgAD65QCAC4FjwIACJuiAgAQr3yA= Date: Mon, 17 Aug 2015 16:56:21 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D122B7@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> <28E8A1A0-01ED-4F0C-800B-8893A0317DEC@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D0C820@dfweml701-chm> <904ACD79-1E2E-40B5-9982-30C7345BF710@cisco.com> In-Reply-To: <904ACD79-1E2E-40B5-9982-30C7345BF710@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.159] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D122B7dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Aug 2015 16:56:41 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D122B7dfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGFuLA0KDQpUaGFua3MgZm9yIHlvdXIgY29tbWVudHMuIEkgaGF2ZSB1cGRhdGVkIHRoZSBjaGFy dGVyIHBlciB5b3VyIHN1Z2dlc3Rpb25zLCBhbmQgcG9zdGVkIHRvIHRoZSBJMk5TRiBXaWtpIHBh Z2U6IGh0dHBzOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaG9tZT9wbGk9 MQ0KDQoNClRoZSBjaGFydGVyIGNoYW5nZXMgYXJlIHJlaXRlcmF0ZWQgYmVsb3cgdG8gbWFrZSBp dCBlYXNpZXIgZm9yIHlvdXIgcmV2aWV3Og0KDQpMaW5kYQ0KDQotLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KRnJvbTog8J+Uk0RhbiBXaW5nIFttYWlsdG86ZHdpbmdAY2lzY28uY29tXQ0KU2Vu dDogRnJpZGF5LCBBdWd1c3QgMTQsIDIwMTUgMTI6MzYgUE0NCg0KPg0KPiAxLiBObywgaXQgc3Rp bGwgc2F5cyAiY29udHJvbGxpbmcgYXNwZWN0cyIgKHNlY29uZCBwYXJhZ3JhcGgsIGZpcnN0IHNl bnRlbmNlKS4gIEl0IGlzbid0IGNsZWFyIHdoYXQgdGhvc2UgYXNwZWN0cyBhcmUuICBUaGUgd29y ZCAnYXNwZWN0cycgb25seSBhcHBlYXJzIHR3aWNlIGluIHRoZSBjaGFydGVyIHRleHQuDQo+DQo+ IFtMaW5kYV0gIkNvbnRyb2xsaW5nIGFzcGVjdHMiIGlzIHJlZmVycmluZyB0byAicnVsZXMgdG8g YmUgZW5mb3JjZWQgZm9yIHRyYWZmaWMgdHJhdmVyc2VkIHRocm91Z2ggdGhlIE5TRnMiLg0KPiBJ dCBpcyBlbXBoYXNpemVkIGhlcmUgdG8gZGlmZmVyZW50aWF0ZSBmcm9tICJkZXZpY2UgbGV2ZWwg Y29uZmlndXJhdGlvbiIsIHN1Y2ggYXMgdGhlIGRldmljZSdzIG93biBuZXR3b3JrIGFkZHJlc3Nl cywgdGltZXIsIHBvcnRzLCBldGMuDQoNCg0KWWVzLCBJIGFncmVlIHRoZSBsYXN0IHNlbnRlbmNl IGluIHRoYXQgcGFyYWdyYXBoIHdoaWNoIHNheXM6DQogICJPdGhlciBhc3BlY3RzIG9mIE5TRnMs IHN1Y2ggYXMgZGV2aWNlIG9yIG5ldHdvcmsgcHJvdmlzaW9uaW5nIGFuZCBjb25maWd1cmF0aW9u LCBhcmUgb3V0IG9mIHNjb3BlLiINCmRlY2xhcmVzIHdoYXQgYXNwZWN0cyBhcmUgb3V0IG9mIHNj b3BlLg0KDQpCdXQgdGhlIGNoYXJ0ZXIgdGV4dCBkb2VzIG5vdCBpZGVudGlmeSB3aGljaCBhc3Bl Y3RzIGFyZSAqaW4gc2NvcGUqLg0KDQpbTGluZGFdIFRoYW5rcy4gSSBtb2RpZmllZCB0aGUgdGV4 dCBqdXN0IHRvIGVsYWJvcmF0ZSB0aGUgbWVhbmluZyBvZiAiY29udHJvbGxpbmcgYW5kIG1vbml0 b3JpbmcgYXNwZWN0cyI6DQoNCiAgICAgIENvbnRyb2xsaW5nIGFuZCBtb25pdG9yaW5nIGFzcGVj dHMgb2YgTlNGcyBpbmNsdWRlIHRoZSBhYmlsaXR5IHRvIHNwZWNpZnkgcnVsZXMsIHF1ZXJ5LCBh bmQgbW9uaXRvciB0byBOU0ZzIGJ5IG9uZSBvciBtb3JlIG1hbmFnZW1lbnQgZW50aXRpZXMuDQoN CiAgICAgIEFkZGVkIGEgbmV3IHBhcmFncmFwaCB0byBlbXBoYXNpemUgd2hhdCBpcyBpbiB0aGUg c2NvcGU6DQogICAgICAgICAgICDigKIgICBPbmx5IHRoZSBTaW1wbGUgU2VydmljZSBMYXllciBw b2xpY2llcyB0aGF0IGFyZSBtb2RlbGVkIGFzIGNsb3NlbHkgYXMgcG9zc2libGUgb24gdGhlIENh cGFiaWxpdHkgTGF5ZXIgYXJlIHdpdGhpbiB0aGUgc2NvcGUuICBTdWNoIGEgU2ltcGxlIFNlcnZp Y2UgTGF5ZXIgd2lsbCBlbmFibGUgYSBzZWN1cml0eSBjb250cm9sbGVyIHRvIGhhbmRsZSBpc3N1 ZXMgbGlrZSBtdWx0aS10ZW5hbmN5IGFuZCB0aGUgY2hvaWNlIGJldHdlZW4gYXZhaWxhYmxlIE5T RnMgZm9yIGEgZ2l2ZW4gcG9saWN5Lg0KICAgICAgICAgICAg4oCiICAgSTJOU0Ygd2lsbCBub3Qg c3BlY2lmeSBhYnN0cmFjdCBvciBzb3BoaXN0aWNhdGVkIHBvbGljaWVzIGZyb20gY2xpZW50cy4g RXhwcmVzc2luZyBwb2xpY2llcyBpbiB3YXlzIG90aGVyIHRoYW4gdGhlIG1vZGVsIHVzZWQgYnkg dGhlIENhcGFiaWxpdHkgTGF5ZXIgaXMgb3V0IG9mIHNjb3BlLg0KICAgICAgICAgICAg4oCiICAg VGhlIHRyYW5zbGF0aW9uIG1lY2hhbmlzbS9tZXRob2RzIGZyb20gU2VydmljZSBMYXllciBwb2xp Y2llcyB0byBDYXBhYmlsaXR5IGxheWVyIGNvbW1lbnRzIGFyZSBvdXQgb2YgSTJOU0Ygc2NvcGUu DQogICAgICAgICAgICDigKIgICBIb3dldmVyIEkyTlNGIHdpbGwgcHJvdmlkZSBhIGZvcnVtIGZv ciBJbmZvcm1hdGlvbmFsIGRyYWZ0cyBvbiBkYXRhIG1vZGVscywgQVBJcywgZXRjLiB0aGF0IGRl bW9uc3RyYXRlIGhvdyBtb3JlIGNvbXBsZXggU2VydmljZSBMYXllciBwb2xpY2llcyBhbmQgZm9y bWF0cyBtYXkgYmUgdHJhbnNsYXRlZCB0byBDYXBhYmlsaXR5IExheWVyIGZ1bmN0aW9ucy4NCg0K DQoNCj4gMi4gWWVzLCB0aGUgSUFOQSBzdHVmZiBpc24ndCBkdXBsaWNhdGVkIG5vdy4gIFRoYW5r cy4NCj4NCj4NCj4gT25lIG90aGVyIHRoaW5nIEkganVzdCBub3RpY2VkLCAib25lIG9yIG1vcmUg bWFuYWdlbWVudCBlbnRpdGllcy4iICBJcyBpMm5zZiBnb2luZyB0byBzb2x2ZSB0aGUgZGF0YWJh c2UgdXBkYXRlIGFuZCBzeW5jaHJvbml6YXRpb24gcHJvYmxlbT8gIFRoaXMgc2VlbXMgY29tcGxp Y2F0ZWQuICBUaGF0IGlzLCBkb2VzIGkybnNmIG5lZWQgdG8gc3VwcG9ydCBtdWx0aXBsZSBtYW5h Z2VtZW50IGVudGl0aWVzIGNvbnRyb2xsaW5nIGEgTlNGLCBhbmQgZG9lcyBpMm5zZiBuZWVkIHRv IHRlbGwgdGhvc2Ugb3RoZXIgbWFuYWdlbWVudCBlbnRpdGllcyBvZiBjaGFuZ2VzIGRvbmUgYnkg YW5vdGhlciBlbnRpdHk/DQo+DQo+IFtMaW5kYV0gTm8sICJEYXRhYmFzZSB1cGRhdGUgYW5kIHN5 bmNocm9uaXphdGlvbiIgaXMgZGVmaW5pdGVseSBvdXQgb2YgSTJOU0Ygc2NvcGUuDQo+ICJvbmUg b3IgbW9yZSBtYW5hZ2VtZW50IGVudGl0aWVzIiBpcyByZWZlcnJpbmcgdG8gdGhhdCBJMk5TRiBh Z2VudCBDQU4gZ2V0IHJ1bGUgcmVxdWVzdHMgbW9yZSB0aGFuIG9uZSBlbnRpdGllcyAob3IgSTJO U0YgY2xpZW50cykuDQoNCkNhbiB0aGUgY2hhcnRlciBtYWtlIHRoYXQgY2xlYXJlciwgcGxlYXNl Pw0KDQpbTGluZGFdIE9LLiBBZGRlZCB0aGUgZm9sbG93aW5nIHNlbnRlbmNlOg0KDQogICAgICBO b3RlOiB0aGUgRGF0YWJhc2UgdXBkYXRlIGFuZCBzeW5jaHJvbml6YXRpb24gYW1vbmcgbXVsdGlw bGUgbWFuYWdlbWVudCBlbnRpdGllcyBhcmUgb3V0IG9mIEkyTlNGIHNjb3BlDQoNClBsZWFzZSBs ZXQgbWUga25vdyBpZiB5b3UgaGF2ZSBmdXJ0aGVyIHF1ZXN0aW9ucyBvciBzdWdnZXN0aW9ucy4N Cg0KDQpMaW5kYQ0KDQoNCg== --_000_4A95BA014132FF49AE685FAB4B9F17F657D122B7dfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVu dD0iTWljcm9zb2Z0IEV4Y2hhbmdlIFNlcnZlciI+DQo8IS0tIGNvbnZlcnRlZCBmcm9tIHJ0ZiAt LT4NCjxzdHlsZT48IS0tIC5FbWFpbFF1b3RlIHsgbWFyZ2luLWxlZnQ6IDFwdDsgcGFkZGluZy1s ZWZ0OiA0cHQ7IGJvcmRlci1sZWZ0OiAjODAwMDAwIDJweCBzb2xpZDsgfSAtLT48L3N0eWxlPg0K PC9oZWFkPg0KPGJvZHk+DQo8Zm9udCBmYWNlPSJDb25zb2xhcyIgc2l6ZT0iMiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Ij4NCjxkaXY+RGFuLCA8L2Rpdj4NCjxkaXY+Jm5ic3A7PC9k aXY+DQo8ZGl2PlRoYW5rcyBmb3IgeW91ciBjb21tZW50cy4gSSBoYXZlIHVwZGF0ZWQgdGhlIGNo YXJ0ZXIgcGVyIHlvdXIgc3VnZ2VzdGlvbnMsIGFuZCBwb3N0ZWQgdG8gdGhlIEkyTlNGIFdpa2kg cGFnZTogPGEgaHJlZj0iaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNlMm5z Zi9ob21lP3BsaT0xIj48Zm9udCBjb2xvcj0iYmx1ZSI+PHU+aHR0cHM6Ly9zaXRlcy5nb29nbGUu Y29tL3NpdGUvaW50ZXJmYWNlMm5zZi9ob21lP3BsaT0xPC91PjwvZm9udD48L2E+PC9kaXY+DQo8 ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRp dj48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48L2Rpdj4NCjxkaXY+ VGhlIGNoYXJ0ZXIgY2hhbmdlcyBhcmUgcmVpdGVyYXRlZCBiZWxvdyB0byBtYWtlIGl0IGVhc2ll ciBmb3IgeW91ciByZXZpZXc6PC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21h biI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdj5MaW5kYTwvZGl2Pg0KPGRpdj48Zm9udCBmYWNl PSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48L2Rpdj4NCjxkaXY+LS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS08YnI+DQoNCkZyb206IPCflJNEYW4gV2luZyBbPGEgaHJlZj0ibWFpbHRv OmR3aW5nQGNpc2NvLmNvbSI+bWFpbHRvOmR3aW5nQGNpc2NvLmNvbTwvYT5dIDxicj4NCg0KU2Vu dDogRnJpZGF5LCBBdWd1c3QgMTQsIDIwMTUgMTI6MzYgUE08YnI+DQoNCjwvZGl2Pg0KPGRpdj4m Z3Q7IDwvZGl2Pg0KPGRpdj4mZ3Q7IDEuIE5vLCBpdCBzdGlsbCBzYXlzICZxdW90O2NvbnRyb2xs aW5nIGFzcGVjdHMmcXVvdDsgKHNlY29uZCBwYXJhZ3JhcGgsIGZpcnN0IHNlbnRlbmNlKS4mbmJz cDsgSXQgaXNuJ3QgY2xlYXIgd2hhdCB0aG9zZSBhc3BlY3RzIGFyZS4mbmJzcDsgVGhlIHdvcmQg J2FzcGVjdHMnIG9ubHkgYXBwZWFycyB0d2ljZSBpbiB0aGUgY2hhcnRlciB0ZXh0LjwvZGl2Pg0K PGRpdj4mZ3Q7IDwvZGl2Pg0KPGRpdj4mZ3Q7IFtMaW5kYV0gJnF1b3Q7Q29udHJvbGxpbmcgYXNw ZWN0cyZxdW90OyBpcyByZWZlcnJpbmcgdG8gJnF1b3Q7cnVsZXMgdG8gYmUgZW5mb3JjZWQgZm9y IHRyYWZmaWMgdHJhdmVyc2VkIHRocm91Z2ggdGhlIE5TRnMmcXVvdDsuPC9kaXY+DQo8ZGl2PiZn dDsgSXQgaXMgZW1waGFzaXplZCBoZXJlIHRvIGRpZmZlcmVudGlhdGUgZnJvbSAmcXVvdDtkZXZp Y2UgbGV2ZWwgY29uZmlndXJhdGlvbiZxdW90Oywgc3VjaCBhcyB0aGUgZGV2aWNlJ3Mgb3duIG5l dHdvcmsgYWRkcmVzc2VzLCB0aW1lciwgcG9ydHMsIGV0Yy4gPC9kaXY+DQo8ZGl2PiZuYnNwOzwv ZGl2Pg0KPGRpdj4mbmJzcDs8L2Rpdj4NCjxkaXY+WWVzLCBJIGFncmVlIHRoZSBsYXN0IHNlbnRl bmNlIGluIHRoYXQgcGFyYWdyYXBoIHdoaWNoIHNheXM6PC9kaXY+DQo8ZGl2PiZuYnNwOyAmcXVv dDtPdGhlciBhc3BlY3RzIG9mIE5TRnMsIHN1Y2ggYXMgZGV2aWNlIG9yIG5ldHdvcmsgcHJvdmlz aW9uaW5nIGFuZCBjb25maWd1cmF0aW9uLCBhcmUgb3V0IG9mIHNjb3BlLiZxdW90OzwvZGl2Pg0K PGRpdj5kZWNsYXJlcyB3aGF0IGFzcGVjdHMgYXJlIG91dCBvZiBzY29wZS48L2Rpdj4NCjxkaXY+ Jm5ic3A7PC9kaXY+DQo8ZGl2PkJ1dCB0aGUgY2hhcnRlciB0ZXh0IGRvZXMgbm90IGlkZW50aWZ5 IHdoaWNoIGFzcGVjdHMgYXJlICppbiBzY29wZSouPC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRp bWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdj5bTGluZGFdIFRoYW5rcy4g SSBtb2RpZmllZCB0aGUgdGV4dCBqdXN0IHRvIGVsYWJvcmF0ZSB0aGUgbWVhbmluZyBvZiAmcXVv dDtjb250cm9sbGluZyBhbmQgbW9uaXRvcmluZyBhc3BlY3RzJnF1b3Q7OjwvZGl2Pg0KPGRpdj4m bmJzcDs8L2Rpdj4NCjxkaXYgc3R5bGU9InBhZGRpbmctbGVmdDozNnB0OyI+PGZvbnQgZmFjZT0i Q2FsaWJyaSIgY29sb3I9IiMwMDcwQzAiPjxpPkNvbnRyb2xsaW5nIGFuZCBtb25pdG9yaW5nIGFz cGVjdHMgb2YgTlNGcyBpbmNsdWRlIHRoZSBhYmlsaXR5IHRvIHNwZWNpZnkgcnVsZXMsIHF1ZXJ5 LCBhbmQgbW9uaXRvciB0byBOU0ZzIGJ5IG9uZSBvciBtb3JlIG1hbmFnZW1lbnQgZW50aXRpZXMu PC9pPjwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJz cDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2IHN0eWxlPSJwYWRkaW5nLWxlZnQ6MzZwdDsiPjxmb250IGNv bG9yPSIjMDA3MEMwIj48aT5BZGRlZCA8L2k+PGk+YSBuZXcgcGFyYWdyYXBoIHRvIGVtcGhhc2l6 ZSB3aGF0IGlzIGluIHRoZSBzY29wZTo8L2k+PC9mb250PjwvZGl2Pg0KPGRpdiBzdHlsZT0icGFk ZGluZy1sZWZ0OjcycHQ7Ij48Zm9udCBjb2xvcj0iIzAwNzBDMCI+PGk+4oCiJm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE9ubHkgdGhlIFNpbXBsZSBTZXJ2aWNlIExheWVyIHBv bGljaWVzIHRoYXQgYXJlIG1vZGVsZWQgYXMgY2xvc2VseSBhcyBwb3NzaWJsZSBvbiB0aGUgQ2Fw YWJpbGl0eSBMYXllciBhcmUgd2l0aGluIHRoZSBzY29wZS4mbmJzcDsgU3VjaCBhIFNpbXBsZSBT ZXJ2aWNlIExheWVyIHdpbGwgZW5hYmxlIGEgc2VjdXJpdHkgY29udHJvbGxlciB0byBoYW5kbGUN Cmlzc3VlcyBsaWtlIG11bHRpLXRlbmFuY3kgYW5kIHRoZSBjaG9pY2UgYmV0d2VlbiBhdmFpbGFi bGUgTlNGcyBmb3IgYSBnaXZlbiBwb2xpY3kuPC9pPjwvZm9udD48L2Rpdj4NCjxkaXYgc3R5bGU9 InBhZGRpbmctbGVmdDo3MnB0OyI+PGZvbnQgY29sb3I9IiMwMDcwQzAiPjxpPuKAoiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBJMk5TRiB3aWxsIG5vdCBzcGVjaWZ5IGFic3Ry YWN0IG9yIHNvcGhpc3RpY2F0ZWQgcG9saWNpZXMgZnJvbSBjbGllbnRzLiBFeHByZXNzaW5nIHBv bGljaWVzIGluIHdheXMgb3RoZXIgdGhhbiB0aGUgbW9kZWwgdXNlZCBieSB0aGUgQ2FwYWJpbGl0 eSBMYXllciBpcyBvdXQgb2Ygc2NvcGUuIDwvaT48L2ZvbnQ+PC9kaXY+DQo8ZGl2IHN0eWxlPSJw YWRkaW5nLWxlZnQ6NzJwdDsiPjxmb250IGNvbG9yPSIjMDA3MEMwIj48aT7igKImbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVGhlIHRyYW5zbGF0aW9uIG1lY2hhbmlzbS9tZXRo b2RzIGZyb20gU2VydmljZSBMYXllciBwb2xpY2llcyB0byBDYXBhYmlsaXR5IGxheWVyIGNvbW1l bnRzIGFyZSBvdXQgb2YgSTJOU0Ygc2NvcGUuIDwvaT48L2ZvbnQ+PC9kaXY+DQo8ZGl2IHN0eWxl PSJwYWRkaW5nLWxlZnQ6NzJwdDsiPjxmb250IGNvbG9yPSIjMDA3MEMwIj48aT7igKImbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgSG93ZXZlciBJMk5TRiB3aWxsIHByb3ZpZGUg YSBmb3J1bSBmb3IgSW5mb3JtYXRpb25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQSXMsIGV0 Yy4gdGhhdCBkZW1vbnN0cmF0ZSBob3cgbW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5ZXIgcG9saWNp ZXMgYW5kIGZvcm1hdHMgbWF5IGJlIHRyYW5zbGF0ZWQgdG8gQ2FwYWJpbGl0eSBMYXllcg0KZnVu Y3Rpb25zLjwvaT48L2ZvbnQ+PC9kaXY+DQo8ZGl2IHN0eWxlPSJwYWRkaW5nLWxlZnQ6MzZwdDsi Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdj48 Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48L2Rpdj4NCjxkaXY+PGZv bnQgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2PiZndDsg Mi4gWWVzLCB0aGUgSUFOQSBzdHVmZiBpc24ndCBkdXBsaWNhdGVkIG5vdy4mbmJzcDsgVGhhbmtz LjwvZGl2Pg0KPGRpdj4mZ3Q7IDwvZGl2Pg0KPGRpdj4mZ3Q7IDwvZGl2Pg0KPGRpdj4mZ3Q7IE9u ZSBvdGhlciB0aGluZyBJIGp1c3Qgbm90aWNlZCwgJnF1b3Q7b25lIG9yIG1vcmUgbWFuYWdlbWVu dCBlbnRpdGllcy4mcXVvdDsmbmJzcDsgSXMgaTJuc2YgZ29pbmcgdG8gc29sdmUgdGhlIGRhdGFi YXNlIHVwZGF0ZSBhbmQgc3luY2hyb25pemF0aW9uIHByb2JsZW0/Jm5ic3A7IFRoaXMgc2VlbXMg Y29tcGxpY2F0ZWQuJm5ic3A7IFRoYXQgaXMsIGRvZXMgaTJuc2YgbmVlZCB0byBzdXBwb3J0IG11 bHRpcGxlIG1hbmFnZW1lbnQgZW50aXRpZXMgY29udHJvbGxpbmcgYSBOU0YsDQphbmQgZG9lcyBp Mm5zZiBuZWVkIHRvIHRlbGwgdGhvc2Ugb3RoZXIgbWFuYWdlbWVudCBlbnRpdGllcyBvZiBjaGFu Z2VzIGRvbmUgYnkgYW5vdGhlciBlbnRpdHk/PC9kaXY+DQo8ZGl2PiZndDsgPC9kaXY+DQo8ZGl2 PiZndDsgW0xpbmRhXSBObywgJnF1b3Q7RGF0YWJhc2UgdXBkYXRlIGFuZCBzeW5jaHJvbml6YXRp b24mcXVvdDsgaXMgZGVmaW5pdGVseSBvdXQgb2YgSTJOU0Ygc2NvcGUuIDwvZGl2Pg0KPGRpdj4m Z3Q7ICZxdW90O29uZSBvciBtb3JlIG1hbmFnZW1lbnQgZW50aXRpZXMmcXVvdDsgaXMgcmVmZXJy aW5nIHRvIHRoYXQgSTJOU0YgYWdlbnQgQ0FOIGdldCBydWxlIHJlcXVlc3RzIG1vcmUgdGhhbiBv bmUgZW50aXRpZXMgKG9yIEkyTlNGIGNsaWVudHMpLiA8L2Rpdj4NCjxkaXY+Jm5ic3A7PC9kaXY+ DQo8ZGl2PkNhbiB0aGUgY2hhcnRlciBtYWtlIHRoYXQgY2xlYXJlciwgcGxlYXNlPzwvZGl2Pg0K PGRpdj48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48L2Rpdj4NCjxk aXY+PGZvbnQgY29sb3I9IiMwMDcwQzAiPltMaW5kYV0gT0suIEFkZGVkIHRoZSBmb2xsb3dpbmcg c2VudGVuY2U6PC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4i PiZuYnNwOzwvZm9udD48L2Rpdj4NCjxkaXYgc3R5bGU9InBhZGRpbmctbGVmdDozNnB0OyI+PGZv bnQgZmFjZT0iQ2FsaWJyaSIgY29sb3I9IiMwMDcwQzAiPjxpPk5vdGU6IHRoZSBEYXRhYmFzZSB1 cGRhdGUgYW5kIHN5bmNocm9uaXphdGlvbiBhbW9uZyBtdWx0aXBsZSBtYW5hZ2VtZW50IGVudGl0 aWVzIGFyZSBvdXQgb2YgSTJOU0Ygc2NvcGU8L2k+PC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBm YWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgY29s b3I9IiMwMDcwQzAiPlBsZWFzZSBsZXQgbWUga25vdyBpZiB5b3UgaGF2ZSBmdXJ0aGVyIHF1ZXN0 aW9ucyBvciBzdWdnZXN0aW9ucy4gPC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBmYWNlPSJUaW1l cyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iVGltZXMg TmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2PkxpbmRhPC9kaXY+DQo8ZGl2Pjxm b250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdj48Zm9u dCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48L2Rpdj4NCjwvc3Bhbj48L2Zv bnQ+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_4A95BA014132FF49AE685FAB4B9F17F657D122B7dfweml701chm_-- From nobody Mon Aug 17 09:57:05 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F2C41A1A04 for ; Mon, 17 Aug 2015 09:57:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KbOuW6US5i5O for ; Mon, 17 Aug 2015 09:57:01 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CFC2D1A19FE for ; Mon, 17 Aug 2015 09:57:00 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BWI91263; Mon, 17 Aug 2015 16:56:59 +0000 (GMT) Received: from DFWEML702-CHM.china.huawei.com (10.193.5.72) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 17 Aug 2015 17:56:58 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml702-chm ([10.193.5.72]) with mapi id 14.03.0235.001; Mon, 17 Aug 2015 09:56:56 -0700 From: Linda Dunbar To: Daniel Migault Thread-Topic: [I2nsf] i2nsf charter feedback Thread-Index: AQHQzjD808+dxjcbZECO9Bste90+iZ39pUCwgACwvYCAC81gcIAFUSaAgAD1eQA= Date: Mon, 17 Aug 2015 16:56:55 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D122C5@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> <2DD56D786E600F45AC6BDE7DA4E8A8C11213E25A@eusaamb107.ericsson.se> <4A95BA014132FF49AE685FAB4B9F17F657D0C8BD@dfweml701-chm> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.159] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D122C5dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" , "dwing@cisco.com" Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Aug 2015 16:57:04 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D122C5dfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGFuaWVsLA0KDQpUaGFua3MgZm9yIHRoZSBmZWVkYmFjay4NCg0KSSBtYWRlIHRoZSBjaGFuZ2Vy cyBwZXIgeW91ciByZXF1ZXN0IHRvIHRoZSBXaWtpOiBodHRwczovL3NpdGVzLmdvb2dsZS5jb20v c2l0ZS9pbnRlcmZhY2UybnNmL2hvbWU/cGxpPTENCg0KDQpUaGUgY2hhbmdlcyBhcmUgYWxzbyBy ZWl0ZXJhdGVkIGJlbG93LCBqdXN0IHRvIG1ha2UgaXQgZWFzaWVyIGZvciB5b3VyIHJldmlldy4N Cg0KTGluZGENCg0KRnJvbTogbWdsdC5pZXRmQGdtYWlsLmNvbSBbbWFpbHRvOm1nbHQuaWV0ZkBn bWFpbC5jb21dIE9uIEJlaGFsZiBPZiBEYW5pZWwgTWlnYXVsdA0KU2VudDogU3VuZGF5LCBBdWd1 c3QgMTYsIDIwMTUgMTowMyBQTQ0KDQoNCkIpDQpPTEQgQ0hBUlRFUiBURVhUDQoiVGhlIEkyTlNG IENhcGFiaWxpdHkgTGF5ZXIgc3BlY2lmaWVzIGhvdyB0byBjb250cm9sIGFuZCBtb25pdG9yIE5T RnMgYXQgYSBmdW5jdGlvbmFsIGltcGxlbWVudGF0aW9uIGxldmVsLiBJMk5TRiB3aWxsIHN0YW5k YXJkaXplIGEgc2V0IG9mIGludGVyZmFjZXMgYnkgd2hpY2ggYSBzZWN1cml0eSBjb250cm9sbGVy IGNhbiBpbnZva2UsIG9wZXJhdGUsIGFuZCBtb25pdG9yIE5TRnMuIg0KDQpJIHRoaW5rIHdlIHNo b3VsZCBjbGFyaWZ5IGZ1bmN0aW9uYWwgaW1wbGVtZW50YXRpb24gbGV2ZWwuIE15IHVuZGVyc3Rh bmRpbmcgaXMgdGhhdCB0aGUgSTJOU0YgQ2FwYWJpbGl0eSBMYXllciBzaG91bGQgaW5mb3JtIHRo ZSB0ZW5hbnRzIG9mIHRoZSBkaWZmZXJlbnQgYXZhaWxhYmxlIE5TRiBhcyB3ZWxsIGFzIHRoZSB2 YXJpb3VzIGF2YWlsYWJsZSBhc3NvY2lhdGVkIG9wdGlvbnMsIHByb2ZpbGVzLi4uDQpbTGluZGFd IFRoZSBzZW50ZW5jZSDigJxmdW5jdGlvbmFsIGltcGxlbWVudGF0aW9u4oCdIGlzIHRoZSByZXN1 bHQgb2YgbWFueSByb3VuZHMgb2YgZGViYXRlLiBJdCBpcyB0cnlpbmcgdG8gZW1waGFzaXppbmcg dGhhdCB0aGUgcnVsZXMgKGZvciBjb250cm9sIGFuZCBtb25pdG9yKSB0byBOU0ZzIGhhdmUgdG8g YmUgaW1wbGVtZW50YWJsZSBieSBtb3N0IE5TRnMuDQoNCltEYW5pZWxdIEkgZmluZCB5b3Ugc2Vu dGVuY2UgdmVyeSBjbGVhci4gSSB0aGluayBpdCB3b3VsZCBuaWNlIHRvIGFkZCBpdCBpbiB0aGUg Y2hhcnRlciB0byBjbGFyaWZ5IHdoYXQgZnVuY3Rpb25hbCBpbXBsZW1lbnRhdGlvbiBtZWFucy4N Cg0KW0xpbmRhXSBHb29kIHN1Z2dlc3Rpb24uIEkgYWRkZWQgdGhlIGZvbGxvd2luZzoNCg0KIFRo ZSB0ZXJtIOKAnEZ1bmN0aW9uYWwgSW1wbGVtZW50YXRpb27igJ0gaXMgdXNlZCB0byBlbXBoYXNp emUgdGhhdCB0aGUgcnVsZXMgKGZvciBjb250cm9sIGFuZCBtb25pdG9yKSBvZiBOU0ZzIGhhdmUg dG8gYmUgaW1wbGVtZW50YWJsZSBieSBtb3N0IE5TRnMuDQoNCkMpDQpPTEQgQ0hBUlRFUiBURVhU DQoiVGhlIEkyTlNGIFNlcnZpY2UgTGF5ZXIgZGVmaW5lcyBob3cgY2xpZW50cycgc2VjdXJpdHkg cG9saWNpZXMgbWF5IGJlIGV4cHJlc3NlZCB0byBhIHNlY3VyaXR5IGNvbnRyb2xsZXIgdGhhdCB1 c2VzIHRoZSBjYXBhYmlsaXR5IGxheWVyIHRvIGNvbnRyb2wgYW5kIG1hbmFnZSBOU0ZzIHRvIGlt cGxlbWVudCB0aGVzZSBwb2xpY2llcy4gICINCg0KTWF5YmUgd2UgY291bGQgd3JpdGU6DQoiVGhl IEkyTlNGIFNlcnZpY2UgTGF5ZXIgZGVmaW5lcyBob3cgY2xpZW50cycgc2VjdXJpdHkgcG9saWNp ZXMgbWF5IGJlIGV4cHJlc3NlZCB0byBhIHNlY3VyaXR5IGNvbnRyb2xsZXIuIFRoZSBjb250cm9s bGVyIGltcGxlbWVudHMgaXRzIHBvbGljaWVzIGFjY29yZGluZyB0byB0aGUgdmFyaW91cyBhIGNh cGFiaWxpdGllcyBwcm92aWRlZCBieSB0aGUgSTJOU0YgQ2FwYWJpbGl0eSBMYXllci4iDQoNCg0K W0xpbmRhXSBDaGFuZ2VkIHRoZSB0ZXh0IHBlciB5b3VyIHN1Z2dlc3Rpb24uIFRoYW5rIHlvdS4N CuKAnFRoZSBJMk5TRiBTZXJ2aWNlIExheWVyIGRlZmluZXMgaG93IGNsaWVudHPigJkgc2VjdXJp dHkgcG9saWNpZXMgbWF5IGJlIGV4cHJlc3NlZCB0byBhIHNlY3VyaXR5IGNvbnRyb2xsZXIuIFRo ZSBjb250cm9sbGVyIGltcGxlbWVudHMgaXRzIHBvbGljaWVzIGFjY29yZGluZyB0byB0aGUgdmFy aW91cyBjYXBhYmlsaXRpZXMgcHJvdmlkZWQgYnkgdGhlIEkyTlNGIGNhcGFiaWxpdHkgTGF5ZXIu 4oCdDQoNCg0KT0xEIENIQVJURVIgVEVYVA0KIkl0IGFsc28gYWxsb3dzIHRoZSBjbGllbnQgdG8g bW9uaXRvciB0aG9zZSBwb2xpY2llcy4gSTJOU0Ygd2lsbCBub3Qgc3BlY2lmeSBob3cgYSBzZWN1 cml0eSBjb250cm9sbGVyIG1hcHMgc2VjdXJpdHkgc2VydmljZSByZXF1ZXN0cyBhdCB0aGUgU2Vy dmljZSBMYXllciB0byBjb250cm9sIGFuZCBtYW5hZ2VtZW50IGFjdGlvbnMgYXQgdGhlIENhcGFi aWxpdHkgTGF5ZXIsDQoNCltEYW5pZWxdIE1heWJlIGhhdmluZyB0d28gc2VudGVuY2VzLiBPbmUg Zm9yIHdoYXQgaXMgbm90IGluIHNjb3BlIGFuZCBhbm90aGVyIHNlbnRlY25lIGZvciB3aGF0IGlz IGluIHNjb3BlIHdvdWxkIGJlIGhlbHBmdWwuIFRoaXMgc2hvdWRsIGJlIG9uZSBzZW50ZW5jZS4g VGhlIG5leHQgb25lIHNob3VkbCBkZWZpbmUgd2hhdCBpcyBpbiBzY29wZS4gVGggZWJ1bGxldCB5 b3UgcHJvcG9zZSB3aGVyZSBtdWNoIGNsZWFyZXIgdG8gbWUuDQpidXQgdGhlIGRldmVsb3BtZW50 IG9mIGEgU2ltcGxlIFNlcnZpY2UgTGF5ZXIgbW9kZWwgdGhhdCBpcyBtb2RlbGVkIGFzIGNsb3Nl bHkgYXMgcG9zc2libGUgb24gdGhlIENhcGFiaWxpdHkgTGF5ZXIgaXMgd2l0aGluIHNjb3BlLiAg U3VjaCBhIFNpbXBsZSBTZXJ2aWNlIExheWVyIHdpbGwgZW5hYmxlIGEgc2VjdXJpdHkgY29udHJv bGxlciB0byBoYW5kbGUgaXNzdWVzIGxpa2UgbXVsdGktdGVuYW5jeSBhbmQgdGhlIGNob2ljZSBi ZXR3ZWVuIGF2YWlsYWJsZSBOU0ZzIGZvciBhIGdpdmVuIHBvbGljeSINCg0KVGhpcyBpcyBub3Qg dmVyeSBjbGVhciB0byBtZSB3aGF0IGlzIGluIHNjb3BlIGFuZCBpcyBub3QuDQoNCltMaW5kYV0g VGhlIHN0YXRlbWVudCBpcyB0byBzYXkgdGhhdA0KwrcgICAgICAgdGhlIHRyYW5zbGF0aW9uIG1l Y2hhbmlzbS9tZXRob2RzIGZyb20gU2VydmljZSBMYXllciBwb2xpY2llcyB0byBDYXBhYmlsaXR5 IGxheWVyIGNvbW1lbnRzIGlzIG91dCBvZiBJMk5TRiBzY29wZSwgYW5kDQrCtyAgICAgICBJMk5T RiB3aWxsIG5vdCBzcGVjaWZ5IGFic3RyYWN0IG9yIHNvcGhpc3RpY2F0ZWQgcG9saWNpZXMgZnJv bSBjbGllbnRzLiBPbmx5IHNpbXBsZSBzZXJ2aWNlIGxheWVyIHBvbGljaWVzIHRoYXQgbW9kZWwg dGhlIOKAnGNhcGFiaWxpdHkgbGF5ZXLigJ0gY29tbWFuZHMgYXJlIGluIHRoZSBzY29wZSBvZiBJ Mk5TRi4NCsK3DQoNCkF0IGxlYXN0IG15IHVuZGVyc3RhbmRpbmcgaXM6DQpJMk5GUyB3aWxsIG5v dCBkZWZpbmUgaG93IHRlbmFudHMnIE5TRiByZXF1ZXN0cyBhdCB0aGUgU2VydmljZSBMYXllciBh cmUgZGVjbGluZWQgaW4NCg0KW0xpbmRhXSBUaGFua3MuIEkgY2hhbmdlZCB0aGUgdGV4dCB0byB0 aGUgYnVsbGV0IGZvcm1hdC4gU2VlIGJlbG93Og0KDQpTaW5jZSB0aGVyZSBjb3VsZCBiZSBtYW55 IGRlcHRocyBvciB0eXBlcyBvZiBTZXJ2aWNlIExheWVyIHBvbGljaWVzLCB0byBtYWtlIEkyTlNG IGNoYXJ0ZXIgbW9yZSBmb2N1c2VkLCB0aGUgZm9sbG93aW5nIGJ1bGxldHMgZnVydGhlciBjbGFy aWZ5IHRoZSBzY29wZSBvZiBJMk5TRjoNCg0KwrcgICAgICAgT25seSB0aGUgU2ltcGxlIFNlcnZp Y2UgTGF5ZXIgcG9saWNpZXMgdGhhdCBhcmUgbW9kZWxlZCBhcyBjbG9zZWx5IGFzIHBvc3NpYmxl IG9uIHRoZSBDYXBhYmlsaXR5IExheWVyIGFyZSB3aXRoaW4gdGhlIHNjb3BlLiAgU3VjaCBhIFNp bXBsZSBTZXJ2aWNlIExheWVyIHdpbGwgZW5hYmxlIGEgc2VjdXJpdHkgY29udHJvbGxlciB0byBo YW5kbGUgaXNzdWVzIGxpa2UgbXVsdGktdGVuYW5jeSBhbmQgdGhlIGNob2ljZSBiZXR3ZWVuIGF2 YWlsYWJsZSBOU0ZzIGZvciBhIGdpdmVuIHBvbGljeS4NCg0KwrcgICAgICAgSTJOU0Ygd2lsbCBu b3Qgc3BlY2lmeSBhYnN0cmFjdCBvciBzb3BoaXN0aWNhdGVkIHBvbGljaWVzIGZyb20gY2xpZW50 cy4gRXhwcmVzc2luZyBwb2xpY2llcyBpbiB3YXlzIG90aGVyIHRoYW4gdGhlIG1vZGVsIHVzZWQg YnkgdGhlIENhcGFiaWxpdHkgTGF5ZXIgaXMgb3V0IG9mIHNjb3BlLg0KDQrCtyAgICAgICBUaGUg dHJhbnNsYXRpb24gbWVjaGFuaXNtL21ldGhvZHMgZnJvbSBTZXJ2aWNlIExheWVyIHBvbGljaWVz IHRvIENhcGFiaWxpdHkgbGF5ZXIgY29tbWVudHMgYXJlIG91dCBvZiBJMk5TRiBzY29wZS4NCg0K wrcgICAgICAgSG93ZXZlciBJMk5TRiB3aWxsIHByb3ZpZGUgYSBmb3J1bSBmb3IgSW5mb3JtYXRp b25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQSXMsIGV0Yy4gdGhhdCBkZW1vbnN0cmF0ZSBo b3cgbW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5ZXIgcG9saWNpZXMgYW5kIGZvcm1hdHMgbWF5IGJl IHRyYW5zbGF0ZWQgdG8gQ2FwYWJpbGl0eSBMYXllciBmdW5jdGlvbnMuDQoNCg0KDQpbTGluZGFd IGhvcGUgbXkgZXhwbGFuYXRpb24gaGVscHMuIFBsZWFzZSBsZXQgbWUga25vdyBpZiB5b3UgaGF2 ZSBtb3JlIHF1ZXN0aW9ucy4NCg0KVGhhbmtzLCBMaW5kYQ0KDQoNCg0KDQoNCg0KX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkkybnNmIG1haWxpbmcgbGlz dA0KSTJuc2ZAaWV0Zi5vcmc8bWFpbHRvOkkybnNmQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZg0KDQo= --_000_4A95BA014132FF49AE685FAB4B9F17F657D122C5dfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpTaW1TdW47DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpA Zm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1 IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBh bm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7 Zm9udC1mYW1pbHk6IlxAU2ltU3VuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q29uc29sYXM7DQoJcGFub3NlLTE6MiAxMSA2IDkg MiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5N c29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFu Iiwic2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvUGxh aW5UZXh0LCBsaS5Nc29QbGFpblRleHQsIGRpdi5Nc29QbGFpblRleHQNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFpbiBUZXh0IENoYXIiOw0KCW1hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC41cHQ7DQoJZm9udC1m YW1pbHk6Q29uc29sYXM7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNvQWNl dGF0ZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxvb24g VGV4dCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250 LXNpemU6OC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCnNwYW4u QmFsbG9vblRleHRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJCYWxsb29uIFRleHQgQ2hhciI7DQoJ bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRleHQiOw0K CWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0K CXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5QbGFpblRleHRDaGFyDQoJe21z by1zdHlsZS1uYW1lOiJQbGFpbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsN Cgltc28tc3R5bGUtbGluazoiUGxhaW4gVGV4dCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0K Lk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7fQ0KQHBhZ2UgV29y ZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBp biAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExp c3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjE1NDAzNjIxODI7DQoJ bXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjIxMzc4MzY4NzQg Njc2OTg2ODkgMTA2NzA5MzA4MCA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2 NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2lu LWxlZnQ6MzcuMHB0Ow0KCXRleHQtaW5kZW50Oi0xOS4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtc3RhcnQtYXQ6MDsNCgltc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6LTsNCgltc28tbGV2ZWwtdGFi LXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxl ZnQ6ODAuNXB0Ow0KCXRleHQtaW5kZW50Oi0yNi41cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjsNCgltc28tZmFyZWFzdC1mb250LWZhbWlseTpTaW1TdW47DQoJbXNvLWJp ZGktZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21z by1sZXZlbC10YWItc3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtdGFi LXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjIuNWlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC10YWItc3RvcDozLjBpbjsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGww OmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7 bXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC10 YWItc3RvcDo0LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjE3NTM0MzIxMDY7DQoJbXNv LWxpc3QtdGVtcGxhdGUtaWRzOi0xMTM1ODQ3MDUwO30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZh bWlseTpTeW1ib2w7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJv dHRvbTowaW47fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBl ZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0t LT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4N CjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1s PjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZs aW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5EYW5pZWws DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPlRoYW5rcyBmb3IgdGhlIGZlZWRiYWNrLg0KPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JIG1hZGUg dGhlIGNoYW5nZXJzIHBlciB5b3VyIHJlcXVlc3QgdG8gdGhlIFdpa2k6DQo8YSBocmVmPSJodHRw czovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNmL2hvbWU/cGxpPTEiPmh0dHBz Oi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaG9tZT9wbGk9MTwvYT48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGUgY2hhbmdlcyBh cmUgYWxzbyByZWl0ZXJhdGVkIGJlbG93LCBqdXN0IHRvIG1ha2UgaXQgZWFzaWVyIGZvciB5b3Vy IHJldmlldy4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+TGluZGE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206 PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IG1nbHQuaWV0ZkBnbWFpbC5j b20gW21haWx0bzptZ2x0LmlldGZAZ21haWwuY29tXQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5EYW5p ZWwgTWlnYXVsdDxicj4NCjxiPlNlbnQ6PC9iPiBTdW5kYXksIEF1Z3VzdCAxNiwgMjAxNSAxOjAz IFBNPGJyPg0KPGJyPg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29s aWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQu OHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Qik8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+T0xEIENIQVJURVIgVEVYVDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mcXVv dDtUaGUgSTJOU0YgQ2FwYWJpbGl0eSBMYXllciBzcGVjaWZpZXMgaG93IHRvIGNvbnRyb2wgYW5k IG1vbml0b3IgTlNGcyBhdCBhIGZ1bmN0aW9uYWwgaW1wbGVtZW50YXRpb24gbGV2ZWwuIEkyTlNG IHdpbGwgc3RhbmRhcmRpemUgYSBzZXQgb2YgaW50ZXJmYWNlcyBieSB3aGljaCBhIHNlY3VyaXR5 IGNvbnRyb2xsZXIgY2FuDQogaW52b2tlLCBvcGVyYXRlLCBhbmQgbW9uaXRvciBOU0ZzLiZxdW90 OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4m bmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cyI+SSB0aGluayB3ZSBzaG91bGQgY2xhcmlmeSBmdW5jdGlvbmFsIGltcGxlbWVudGF0aW9uIGxl dmVsLiBNeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgdGhlIEkyTlNGIENhcGFiaWxpdHkgTGF5ZXIg c2hvdWxkIGluZm9ybSB0aGUgdGVuYW50cyBvZiB0aGUgZGlmZmVyZW50IGF2YWlsYWJsZSBOU0Yg YXMgd2VsbCBhcyB0aGUgdmFyaW91cw0KIGF2YWlsYWJsZSBhc3NvY2lhdGVkIG9wdGlvbnMsIHBy b2ZpbGVzLi4uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPltMaW5kYV0gVGhlIHNlbnRlbmNlIOKAnDxpPjxzcGFuIHN0eWxlPSJjb2xvcjojMDA3 MEMwIj5mdW5jdGlvbmFsIGltcGxlbWVudGF0aW9uPC9zcGFuPjwvaT7igJ0gaXMgdGhlIHJlc3Vs dCBvZiBtYW55IHJvdW5kcyBvZiBkZWJhdGUuIEl0IGlzIHRyeWluZyB0byBlbXBoYXNpemluZyB0 aGF0IHRoZSBydWxlcyAoZm9yIGNvbnRyb2wNCiBhbmQgbW9uaXRvcikgdG8gTlNGcyBoYXZlIHRv IGJlIGltcGxlbWVudGFibGUgYnkgbW9zdCBOU0ZzLiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+W0RhbmllbF0gSSBmaW5kIHlvdSBzZW50ZW5jZSB2ZXJ5IGNsZWFyLiBJIHRoaW5rIGl0IHdv dWxkIG5pY2UgdG8gYWRkIGl0IGluIHRoZSBjaGFydGVyIHRvIGNsYXJpZnkgd2hhdCBmdW5jdGlv bmFsIGltcGxlbWVudGF0aW9uIG1lYW5zLiAmbmJzcDsNCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0ND QyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdp bi1yaWdodDowaW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBHb29kIHN1Z2dlc3Rpb24uIEkgYWRkZWQgdGhlIGZv bGxvd2luZzo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjI1LjFw dCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6IzAwNzBDMCI+Jm5ic3A7PC9z cGFuPjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMDA3MEMwIj5UaGUgdGVy bSDigJxGdW5jdGlvbmFsIEltcGxlbWVudGF0aW9u4oCdIGlzIHVzZWQgdG8gZW1waGFzaXplIHRo YXQgdGhlIHJ1bGVzDQogKGZvciBjb250cm9sIGFuZCBtb25pdG9yKSBvZiBOU0ZzIGhhdmUgdG8g YmUgaW1wbGVtZW50YWJsZSBieSBtb3N0IE5TRnMuPC9zcGFuPjwvaT48aT48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj48bzpw PjwvbzpwPjwvc3Bhbj48L2k+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPkMpPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPk9MRCBDSEFSVEVSIFRFWFQ8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+JnF1 b3Q7VGhlIEkyTlNGIFNlcnZpY2UgTGF5ZXIgZGVmaW5lcyBob3cgY2xpZW50cycgc2VjdXJpdHkg cG9saWNpZXMgbWF5IGJlIGV4cHJlc3NlZCB0byBhIHNlY3VyaXR5IGNvbnRyb2xsZXIgdGhhdCB1 c2VzIHRoZSBjYXBhYmlsaXR5IGxheWVyIHRvIGNvbnRyb2wgYW5kIG1hbmFnZSBOU0ZzIHRvIGlt cGxlbWVudCB0aGVzZSBwb2xpY2llcy4mbmJzcDsNCiAmcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPk1heWJlIHdlIGNvdWxkIHdy aXRlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFz Ij4mcXVvdDtUaGUgSTJOU0YgU2VydmljZSBMYXllciBkZWZpbmVzIGhvdyBjbGllbnRzJyBzZWN1 cml0eSBwb2xpY2llcyBtYXkgYmUgZXhwcmVzc2VkIHRvIGEgc2VjdXJpdHkgY29udHJvbGxlci4g VGhlIGNvbnRyb2xsZXIgaW1wbGVtZW50cyBpdHMgcG9saWNpZXMgYWNjb3JkaW5nIHRvIHRoZSB2 YXJpb3VzIGEgY2FwYWJpbGl0aWVzDQogcHJvdmlkZWQgYnkgdGhlIEkyTlNGIENhcGFiaWxpdHkg TGF5ZXIuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj5bTGluZGFdIENoYW5nZWQgdGhlIHRleHQgcGVyIHlvdXIgc3VnZ2VzdGlvbi4g VGhhbmsgeW91Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjI1LjFwdCI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPuKAnFRoZSBJMk5TRiBTZXJ2aWNlIExheWVyIGRlZmluZXMgaG93IGNs aWVudHPigJkgc2VjdXJpdHkgcG9saWNpZXMgbWF5IGJlIGV4cHJlc3NlZCB0byBhIHNlY3VyaXR5 IGNvbnRyb2xsZXIuIFRoZSBjb250cm9sbGVyIGltcGxlbWVudHMNCiBpdHMgcG9saWNpZXMgYWNj b3JkaW5nIHRvIHRoZSB2YXJpb3VzIGNhcGFiaWxpdGllcyBwcm92aWRlZCBieSB0aGUgSTJOU0Yg Y2FwYWJpbGl0eSBMYXllci7igJ08bzpwPjwvbzpwPjwvc3Bhbj48L2k+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQi PiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+T0xEIENIQVJURVIgVEVY VDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4m cXVvdDtJdCBhbHNvIGFsbG93cyB0aGUgY2xpZW50IHRvIG1vbml0b3IgdGhvc2UgcG9saWNpZXMu IEkyTlNGIHdpbGwgbm90IHNwZWNpZnkgaG93IGEgc2VjdXJpdHkgY29udHJvbGxlciBtYXBzIHNl Y3VyaXR5IHNlcnZpY2UgcmVxdWVzdHMgYXQgdGhlIFNlcnZpY2UgTGF5ZXIgdG8gY29udHJvbCBh bmQgbWFuYWdlbWVudCBhY3Rpb25zDQogYXQgdGhlIENhcGFiaWxpdHkgTGF5ZXIsPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+W0RhbmllbF0g TWF5YmUgaGF2aW5nIHR3byBzZW50ZW5jZXMuIE9uZSBmb3Igd2hhdCBpcyBub3QgaW4gc2NvcGUg YW5kIGFub3RoZXIgc2VudGVjbmUgZm9yIHdoYXQgaXMgaW4gc2NvcGUgd291bGQgYmUgaGVscGZ1 bC4gVGhpcyBzaG91ZGwgYmUgb25lIHNlbnRlbmNlLiBUaGUgbmV4dCBvbmUgc2hvdWRsIGRlZmlu ZSB3aGF0IGlzIGluIHNjb3BlLiBUaCBlYnVsbGV0DQogeW91IHByb3Bvc2Ugd2hlcmUgbXVjaCBj bGVhcmVyIHRvIG1lLiA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4g MGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPmJ1dCB0aGUgZGV2ZWxvcG1lbnQgb2YgYSBTaW1wbGUg U2VydmljZSBMYXllciBtb2RlbCB0aGF0IGlzIG1vZGVsZWQgYXMgY2xvc2VseSBhcyBwb3NzaWJs ZSBvbiB0aGUgQ2FwYWJpbGl0eSBMYXllciBpcyB3aXRoaW4gc2NvcGUuJm5ic3A7IFN1Y2ggYSBT aW1wbGUgU2VydmljZSBMYXllciB3aWxsIGVuYWJsZSBhIHNlY3VyaXR5DQogY29udHJvbGxlciB0 byBoYW5kbGUgaXNzdWVzIGxpa2UgbXVsdGktdGVuYW5jeSBhbmQgdGhlIGNob2ljZSBiZXR3ZWVu IGF2YWlsYWJsZSBOU0ZzIGZvciBhIGdpdmVuIHBvbGljeSZxdW90OzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+VGhpcyBpcyBub3QgdmVy eSBjbGVhciB0byBtZSB3aGF0IGlzIGluIHNjb3BlIGFuZCBpcyBub3QuDQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+W0xpbmRhXSBUaGUgc3RhdGVtZW50IGlzIHRvIHNh eSB0aGF0DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0bzttYXJnaW4tbGVmdDowaW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwxIGxldmVs MSBsZm8xIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8 c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFb ZW5kaWZdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFz Ij50aGUgdHJhbnNsYXRpb24gbWVjaGFuaXNtL21ldGhvZHMgZnJvbSBTZXJ2aWNlIExheWVyIHBv bGljaWVzIHRvIENhcGFiaWxpdHkgbGF5ZXIgY29tbWVudHMgaXMgb3V0IG9mIEkyTlNGIHNjb3Bl LCBhbmQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2lu LWxlZnQ6MGluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDEgbGZvMSI+DQo8 IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9 ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+STJOU0Ygd2ls bCBub3Qgc3BlY2lmeSBhYnN0cmFjdCBvciBzb3BoaXN0aWNhdGVkIHBvbGljaWVzIGZyb20gY2xp ZW50cy4gT25seSBzaW1wbGUgc2VydmljZSBsYXllciBwb2xpY2llcyB0aGF0IG1vZGVsIHRoZSDi gJxjYXBhYmlsaXR5IGxheWVy4oCdIGNvbW1hbmRzIGFyZSBpbiB0aGUgc2NvcGUgb2YgSTJOU0Yu DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxl ZnQ6MGluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDEgbGZvMSI+DQo8IVtp ZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZv bnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0 O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTpDb25zb2xhcyI+QXQgbGVhc3QgbXkgdW5kZXJzdGFuZGluZyBpczo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+STJORlMgd2lsbCBub3QgZGVm aW5lIGhvdyB0ZW5hbnRzJyBOU0YgcmVxdWVzdHMgYXQgdGhlIFNlcnZpY2UgTGF5ZXIgYXJlIGRl Y2xpbmVkIGluPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0Qi PltMaW5kYV0gVGhhbmtzLiBJIGNoYW5nZWQgdGhlIHRleHQgdG8gdGhlIGJ1bGxldCBmb3JtYXQu IFNlZSBiZWxvdzo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjI1aW4iPjxpPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzAwNzBDMCI+ U2luY2UgdGhlcmUgY291bGQgYmUgbWFueSBkZXB0aHMgb3IgdHlwZXMgb2YgU2VydmljZSBMYXll ciBwb2xpY2llcywgdG8gbWFrZSBJMk5TRiBjaGFydGVyIG1vcmUgZm9jdXNlZCwgdGhlIGZvbGxv d2luZyBidWxsZXRzIGZ1cnRoZXIgY2xhcmlmeQ0KIHRoZSBzY29wZSBvZiBJMk5TRjo8bzpwPjwv bzpwPjwvc3Bhbj48L2k+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjU1LjBwdDt0ZXh0LWluZGVudDotMTkuMHB0O21zby1saXN0OmwwIGxldmVsMSBsZm8y Ij4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpTeW1ib2w7 Y29sb3I6IzAwNzBDMCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHls ZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxp PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzAwNzBDMCI+T25seSB0aGUgU2ltcGxlIFNlcnZpY2UgTGF5ZXIg cG9saWNpZXMgdGhhdCBhcmUgbW9kZWxlZCBhcyBjbG9zZWx5IGFzIHBvc3NpYmxlIG9uIHRoZSBD YXBhYmlsaXR5IExheWVyIGFyZSB3aXRoaW4gdGhlIHNjb3BlLiZuYnNwOyBTdWNoIGEgU2ltcGxl IFNlcnZpY2UgTGF5ZXIgd2lsbCBlbmFibGUNCiBhIHNlY3VyaXR5IGNvbnRyb2xsZXIgdG8gaGFu ZGxlIGlzc3VlcyBsaWtlIG11bHRpLXRlbmFuY3kgYW5kIHRoZSBjaG9pY2UgYmV0d2VlbiBhdmFp bGFibGUgTlNGcyBmb3IgYSBnaXZlbiBwb2xpY3kuPG86cD48L286cD48L3NwYW4+PC9pPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tbGVmdDo1NS4wcHQ7dGV4dC1p bmRlbnQ6LTE5LjBwdDttc28tbGlzdDpsMCBsZXZlbDEgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExp c3RzXT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6U3ltYm9sO2NvbG9yOiMwMDcwQzAiPjxzcGFu IHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48aT48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMw MDcwQzAiPkkyTlNGIHdpbGwgbm90IHNwZWNpZnkgYWJzdHJhY3Qgb3Igc29waGlzdGljYXRlZCBw b2xpY2llcyBmcm9tIGNsaWVudHMuIEV4cHJlc3NpbmcgcG9saWNpZXMgaW4gd2F5cyBvdGhlciB0 aGFuIHRoZSBtb2RlbCB1c2VkIGJ5IHRoZSBDYXBhYmlsaXR5IExheWVyIGlzIG91dCBvZg0KIHNj b3BlLiA8bzpwPjwvbzpwPjwvc3Bhbj48L2k+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjU1LjBwdDt0ZXh0LWluZGVudDotMTkuMHB0O21zby1saXN0Omww IGxldmVsMSBsZm8yIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTpTeW1ib2w7Y29sb3I6IzAwNzBDMCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+ wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+ PCFbZW5kaWZdPjxpPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzAwNzBDMCI+VGhlIHRyYW5zbGF0aW9uIG1l Y2hhbmlzbS9tZXRob2RzIGZyb20gU2VydmljZSBMYXllciBwb2xpY2llcyB0byBDYXBhYmlsaXR5 IGxheWVyIGNvbW1lbnRzIGFyZSBvdXQgb2YgSTJOU0Ygc2NvcGUuDQo8bzpwPjwvbzpwPjwvc3Bh bj48L2k+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjU1 LjBwdDt0ZXh0LWluZGVudDotMTkuMHB0O21zby1saXN0OmwwIGxldmVsMSBsZm8yIj4NCjwhW2lm ICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpTeW1ib2w7Y29sb3I6IzAw NzBDMCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3 LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxpPjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzAwNzBDMCI+SG93ZXZlciBJMk5TRiB3aWxsIHByb3ZpZGUgYSBmb3J1bSBmb3Ig SW5mb3JtYXRpb25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQSXMsIGV0Yy4gdGhhdCBkZW1v bnN0cmF0ZSBob3cgbW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5ZXIgcG9saWNpZXMgYW5kIGZvcm1h dHMgbWF5DQogYmUgdHJhbnNsYXRlZCB0byBDYXBhYmlsaXR5IExheWVyIGZ1bmN0aW9ucy48bzpw PjwvbzpwPjwvc3Bhbj48L2k+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8YmxvY2tx dW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtw YWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDow aW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+W0xpbmRhXSBob3BlIG15IGV4cGxhbmF0aW9uIGhlbHBzLiBQ bGVhc2UgbGV0IG1lIGtub3cgaWYgeW91IGhhdmUgbW9yZSBxdWVzdGlvbnMuDQo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+VGhhbmtzLCBMaW5kYTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQi Pjxicj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJy Pg0KSTJuc2YgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOkkybnNmQGlldGYub3Jn Ij5JMm5zZkBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2kybnNmIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90 ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_4A95BA014132FF49AE685FAB4B9F17F657D122C5dfweml701chm_-- From nobody Mon Aug 17 19:32:49 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 970AC1B30EE for ; Mon, 17 Aug 2015 19:32:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.21 X-Spam-Level: X-Spam-Status: No, score=-14.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YduOlHG-Y4L6 for ; Mon, 17 Aug 2015 19:32:46 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 103961B30EF for ; Mon, 17 Aug 2015 19:32:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11844; q=dns/txt; s=iport; t=1439865166; x=1441074766; h=mime-version:subject:from:in-reply-to:date:cc:message-id: references:to; bh=pnVDtCWLlDasWER3A+TJRRxqPvfxz37Gp/Vfas1fjJo=; b=PCznEIAiAVxteQlIziUpkcfBp6pjnXJExhHWHBJC1pARPE5LWGs0tMG8 xv2/cx8HvE8o8o4QHwEmbSIx2uZggTejLq4sS4Gcw4T7pHwBJlg3LI49+ 8iXuvmSzWBkCDjtrMFXltQy6kK7oOuKBt2b15XTZMzbIYq8cTUM4kTKoI E=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DLAgASmNJV/4UNJK1TCoJOTVRpgyS6SwEJgXaFeQKBMjgUAQEBAQEBAYEKhCMBAQEDASMKTAUHBAkCFQECJwMCAkYRBhOIJggNnRidHZYtAQEBAQEBAQEBAQEBAQEBAQEBAQEBEwSLUoQsWQQHgmkvgRQBBJIRgwyFBIdogUqEK4J4iQ2ERoNnJoQZIjOCTAEBAQ X-IronPort-AV: E=Sophos;i="5.15,699,1432598400"; d="scan'208,217";a="179623350" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 18 Aug 2015 02:32:45 +0000 Received: from [10.89.13.196] ([10.89.13.196]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id t7I2Wi64002518 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 18 Aug 2015 02:32:44 GMT Content-Type: multipart/alternative; boundary="Apple-Mail=_4F75EF92-44AE-4C5F-A670-2FECBF241A6E" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: =?utf-8?Q?=F0=9F=94=93Dan_Wing?= In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D122B7@dfweml701-chm> Date: Mon, 17 Aug 2015 22:32:43 -0400 Message-Id: <109E1ECD-77A3-4B24-AFD5-A8DE8D7575E4@cisco.com> References: <4A95BA014132FF49AE685FAB4B9F17F657D09E63@dfweml701-chm> <28E8A1A0-01ED-4F0C-800B-8893A0317DEC@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D0C820@dfweml701-chm> <904ACD79-1E2E-40B5-9982-30C7345BF710@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D122B7@dfweml701-chm> To: Linda Dunbar X-Mailer: Apple Mail (2.2104) Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] i2nsf charter feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Aug 2015 02:32:48 -0000 --Apple-Mail=_4F75EF92-44AE-4C5F-A670-2FECBF241A6E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Thanks. -d On 17-Aug-2015 12:56 pm, Linda Dunbar wrote:=20= > Dan, > =20 > Thanks for your comments. I have updated the charter per your = suggestions, and posted to the I2NSF Wiki page: = https://sites.google.com/site/interface2nsf/home?pli=3D1 = > =20 > =20 > The charter changes are reiterated below to make it easier for your = review: > =20 > Linda > =20 > -----Original Message----- > From: =F0=9F=94=93Dan Wing [mailto:dwing@cisco.com = ]=20 > Sent: Friday, August 14, 2015 12:36 PM > > > > 1. No, it still says "controlling aspects" (second paragraph, first = sentence). It isn't clear what those aspects are. The word 'aspects' = only appears twice in the charter text. > > > > [Linda] "Controlling aspects" is referring to "rules to be enforced = for traffic traversed through the NSFs". > > It is emphasized here to differentiate from "device level = configuration", such as the device's own network addresses, timer, = ports, etc. > =20 > =20 > Yes, I agree the last sentence in that paragraph which says: > "Other aspects of NSFs, such as device or network provisioning and = configuration, are out of scope." > declares what aspects are out of scope. > =20 > But the charter text does not identify which aspects are *in scope*. > =20 > [Linda] Thanks. I modified the text just to elaborate the meaning of = "controlling and monitoring aspects": > =20 > Controlling and monitoring aspects of NSFs include the ability to = specify rules, query, and monitor to NSFs by one or more management = entities. > =20 > Added a new paragraph to emphasize what is in the scope: > =E2=80=A2 Only the Simple Service Layer policies that are = modeled as closely as possible on the Capability Layer are within the = scope. Such a Simple Service Layer will enable a security controller to = handle issues like multi-tenancy and the choice between available NSFs = for a given policy. > =E2=80=A2 I2NSF will not specify abstract or sophisticated = policies from clients. Expressing policies in ways other than the model = used by the Capability Layer is out of scope. > =E2=80=A2 The translation mechanism/methods from Service Layer = policies to Capability layer comments are out of I2NSF scope. > =E2=80=A2 However I2NSF will provide a forum for Informational = drafts on data models, APIs, etc. that demonstrate how more complex = Service Layer policies and formats may be translated to Capability Layer = functions. > =20 > =20 > =20 > > 2. Yes, the IANA stuff isn't duplicated now. Thanks. > > > > > > One other thing I just noticed, "one or more management entities." = Is i2nsf going to solve the database update and synchronization problem? = This seems complicated. That is, does i2nsf need to support multiple = management entities controlling a NSF, and does i2nsf need to tell those = other management entities of changes done by another entity? > > > > [Linda] No, "Database update and synchronization" is definitely out = of I2NSF scope. > > "one or more management entities" is referring to that I2NSF agent = CAN get rule requests more than one entities (or I2NSF clients). > =20 > Can the charter make that clearer, please? > =20 > [Linda] OK. Added the following sentence: > =20 > Note: the Database update and synchronization among multiple = management entities are out of I2NSF scope > =20 > Please let me know if you have further questions or suggestions. > =20 > =20 > Linda > =20 > =20 --Apple-Mail=_4F75EF92-44AE-4C5F-A670-2FECBF241A6E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Thanks.
-d

On = 17-Aug-2015 12:56 pm, Linda Dunbar <linda.dunbar@huawei.com> wrote:
=
Dan,
 
Thanks for your comments. I have updated the charter per = your suggestions, and posted to the I2NSF Wiki page: https://sites.google.com/site/interface2nsf/home?pli=3D1
 
 
The charter changes are reiterated below to make it = easier for your review:
 
Linda
 
-----Original Message-----
From: =F0=9F=94=93Dan Wing [mailto:dwing@cisco.com]
Sent: Friday, August 14, 2015 12:36 PM
>
> 1. No, it still says "controlling aspects" (second = paragraph, first sentence).  It isn't clear what those aspects = are.  The word 'aspects' only appears twice in the charter = text.
>
> [Linda] "Controlling aspects" is referring to = "rules to be enforced for traffic traversed through the NSFs".
> It is emphasized here to differentiate from "device = level configuration", such as the device's own network addresses, timer, = ports, etc.
 
 
Yes, I agree the last sentence in that paragraph which = says:
  "Other aspects of NSFs, such as device or network = provisioning and configuration, are out of scope."
declares what aspects are out of scope.
 
But the charter text does not identify which aspects are = *in scope*.
 
[Linda] Thanks. I modified the text just to elaborate = the meaning of "controlling and monitoring aspects":
 
Controlling and monitoring = aspects of NSFs include the ability to specify rules, query, and monitor = to NSFs by one or more management entities.
 
Added a new paragraph to = emphasize what is in the scope:
=E2=80=A2       = Only the Simple Service Layer policies that are modeled as closely as = possible on the Capability Layer are within the scope.  Such a = Simple Service Layer will enable a security controller to handle issues like multi-tenancy and the choice between available NSFs for a = given policy.
=E2=80=A2       = I2NSF will not specify abstract or sophisticated policies from clients. = Expressing policies in ways other than the model used by the Capability = Layer is out of scope.
=E2=80=A2       = The translation mechanism/methods from Service Layer policies to = Capability layer comments are out of I2NSF scope.
=E2=80=A2       = However I2NSF will provide a forum for Informational drafts on data = models, APIs, etc. that demonstrate how more complex Service Layer = policies and formats may be translated to Capability Layer functions.
 
 
 
> 2. Yes, the IANA stuff isn't duplicated now.  = Thanks.
>
>
> One other thing I just noticed, "one or more = management entities."  Is i2nsf going to solve the database update = and synchronization problem?  This seems complicated.  That = is, does i2nsf need to support multiple management entities controlling = a NSF, and does i2nsf need to tell those other management entities of changes = done by another entity?
>
> [Linda] No, "Database update and synchronization" = is definitely out of I2NSF scope.
> "one or more management entities" is referring to = that I2NSF agent CAN get rule requests more than one entities (or I2NSF = clients).
 
Can the charter make that clearer, please?
 
[Linda] OK. Added the = following sentence:
 
Note: the Database update and = synchronization among multiple management entities are out of I2NSF = scope
 
Please let me know if = you have further questions or suggestions.
 
 
Linda
 
 


= --Apple-Mail=_4F75EF92-44AE-4C5F-A670-2FECBF241A6E-- From nobody Tue Aug 18 13:31:12 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 123EF1A92EB for ; Tue, 18 Aug 2015 13:31:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E53SkqnAUpGo for ; Tue, 18 Aug 2015 13:31:09 -0700 (PDT) Received: from mail-ig0-x22a.google.com (mail-ig0-x22a.google.com [IPv6:2607:f8b0:4001:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90E451A92E5 for ; Tue, 18 Aug 2015 13:31:09 -0700 (PDT) Received: by igfj19 with SMTP id j19so92741627igf.0 for ; Tue, 18 Aug 2015 13:31:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=2OPq3cXQnuMSIBwJpAlSfUvGivMhFwRFEMBy00cVn9U=; b=ipjtnX9vicIyW+Auu+DyDK9ilNUIRsSdg466QIGy3pWv4JXZg/sGVOFFI8kx8yZLFI J0WWMKGZJ50ucrLbJXhGIfGJQaugKtY3oUpFh3nsqraqaAFA9LJuMZmylWSjNso1HVzD gLwhR1Esxr+B7fbK6WmhNjpLoA5SiHtqD3Ur6hqQ6WmaI8qVhuJf4P7eYsvytFTUTL01 JfZA7Au1+3j4f3elPZOQg3CZ1ClBKzKy18XzXyF10IandyyUvPbZVv8qWyRZf54gFSy0 uIdSdHGmwz1+X3Z13TJEW2OjbQNbv1saLVg887ubi1Lty6BeZOELrO8JS3ZyuVWKvgl6 bG3Q== MIME-Version: 1.0 X-Received: by 10.50.129.10 with SMTP id ns10mr25045219igb.90.1439929868966; Tue, 18 Aug 2015 13:31:08 -0700 (PDT) Received: by 10.36.149.3 with HTTP; Tue, 18 Aug 2015 13:31:08 -0700 (PDT) Date: Tue, 18 Aug 2015 15:31:08 -0500 Message-ID: From: Linda Dunbar To: i2nsf@ietf.org Content-Type: multipart/alternative; boundary=047d7b2e16315762eb051d9bcc68 Archived-At: Subject: [I2nsf] Updated I2NSF draft charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Aug 2015 20:31:11 -0000 --047d7b2e16315762eb051d9bcc68 Content-Type: text/plain; charset=UTF-8 Hi everyone, Thanks for the constructive discussions. I have made an updated draft charter posted at: https://sites.google.com/site/interface2nsf/home I think this captures all of the points raised on this list and during the BoF. Please shout if you think I have missed anything. Thanks, Linda --047d7b2e16315762eb051d9bcc68 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Hi everyone,

=C2=A0

Thanks for the co= nstructive discussions.

=C2=A0

I have made an = updated draft charter posted at: =C2=A0https://sites.google.com/site/interface2nsf/home

=C2=A0I think this captures all of the points raised on this list and during the BoF.

=C2=A0

Please shout if y= ou think I have missed anything.

=C2=A0

Thanks,

Linda

--047d7b2e16315762eb051d9bcc68-- From nobody Wed Aug 19 09:28:02 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 476DD1A00B0 for ; Wed, 19 Aug 2015 09:28:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.199 X-Spam-Level: X-Spam-Status: No, score=-101.199 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uGHZpKN4hx8d for ; Wed, 19 Aug 2015 09:27:59 -0700 (PDT) Received: from asmtp5.iomartmail.com (asmtp5.iomartmail.com [62.128.201.176]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7DA91A0277 for ; Wed, 19 Aug 2015 09:27:57 -0700 (PDT) Received: from asmtp5.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp5.iomartmail.com (8.13.8/8.13.8) with ESMTP id t7JGRtNL000497; Wed, 19 Aug 2015 17:27:55 +0100 Received: from 950129200 ([62.7.67.18]) (authenticated bits=0) by asmtp5.iomartmail.com (8.13.8/8.13.8) with ESMTP id t7JGRrQE000485 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO); Wed, 19 Aug 2015 17:27:54 +0100 From: "Adrian Farrel" To: "'Linda Dunbar'" , References: In-Reply-To: Date: Wed, 19 Aug 2015 17:27:53 +0100 Message-ID: <008301d0da9c$002a7440$007f5cc0$@olddog.co.uk> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0084_01D0DAA4.61F12630" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQI55CxzXC5rRijXvcTtWCifaT/JgJ1BatqA Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1576-8.0.0.1202-21756.002 X-TM-AS-Result: No--18.471-10.0-31-10 X-imss-scan-details: No--18.471-10.0-31-10 X-TMASE-MatchedRID: hNM2g97eec9bJCKOm3VRCaj5v7I4/SgYem0L3kwJxTd/PetdoyoEYJTL yJhPNN7CTZWdcxHMgGPY5KPiokD1Bm79evoIpeI3cVdapPIqr6izCE7rwQuz2mNKJBmpMGFCJKA bDfejtrbMy6K24fisq5JEUO2qIzlLwx0jRRxcQfNEmI7hO5CJ8gO7BC/l/zZYDTC5GcRFZyTVvu fGYnFzB/Ue3cF58v23nVTWWiNp+v8C5AMlEyiBEpg7zm2+7DuDUzUTOs47C9bgsBgWKZ+FTUmlX 2scVfeP7a7m7fE5C+HBtFDYGmaWKrRfRjDbtW6i5DjmdW0+qbGuwVTxTDkELrK2YHb/kidP/PEg L0tqyq50bnu2kHqixLMsPmSZxbpkE7JInT4wddoTjfkO3pb+WD0msIgSyun3H/Z71HJDNaFacyh B9L1arxJ3qw6ad/ljABhihvAhvAJIeNYTP8OmTPk3SjZMcZFkUlBh+kbitM8/DUc/B6QpkmRGSn UqeCO9OQRl+99vaMkMH4SsGvRsA1qvZZ9/gpIhj2iyfwmt0k9o4tOBMzo2OBfwoGaxTN/qp0IjH biBDza7oGYjY7/o7UHrI6vFzzG7l2F9+KxZd8fnlNKhb+fAfpUgSLx++MHya2q9UDkwpo85efiE AHGFZPJRA2JqAZKz2x/FmlC/aowdgkzSIS9hz5gjZJ0l7MH/tBERhmbbLKebv3qqFJEwSJWVCQx WVIeU1FpoVtODLHKeAiCmPx4NwGmRqNBHmBve1B0Hk1Q1KyIzqx6DtfVZtmWKAuw8W/IlRx4qP+ Mmth0gitMHEMltKMVJOBoe/NbRvgeEv6j8nEA= Archived-At: Subject: Re: [I2nsf] Updated I2NSF draft charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Aug 2015 16:28:02 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0084_01D0DAA4.61F12630 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Thanks Linda, =20 This is good work. =20 A typo - Para three line one s/and monitor to NSFs/and monitor NSFs/ =20 A little tidying on the milestones. I haven't changed any dates, just = clarified words and re-ordered. I have added "examination of existing = secure communication mechanisms" as a deliverable. OLD Use Cases, problem statement, and gap analysis Document: Charter time = + 1 month Framework: Charter time + 4 months to WG Document Requirements for extensions to protocols: Charter time + 8 months to = WG document Info model: Charter time + 8 months to WG Document IANA registry consideration + 12 months to WG Document All Early Drafts to IESG: 18 months [Decision point =E2=80=93 +10 months] =20 =20 Data Models: Charter + 9 Months to WG Document Applicability Statements: 10 months to WG Document Data Models and Applicability Statements to IESG - 18 months NEW Use Cases, problem statement, and gap analysis to WG Document: = Charter time + 1 month Framework to WG Document: Charter time + 4 months Requirements for extensions to protocols to WG Document: Charter time = + 8 months Examination of existing secure communication mechanisms to WG = Document: Charter time + 8 months Info model to WG Document (if desired): Charter time + 8 months Data Models to WG Document: Charter time + 9 Months WG decides whether to pursue certain drafts to RFC : Charter time + 10 = months - use cases, problem statement, and gap analysis document - framework document - information model - examination of existing secure communication mechanisms=20 Applicability Statements to WG Document: Charter time + 10 months=20 IANA registry consideration to WG Document: Charter time + 12 months=20 All Early Drafts to IESG for publication (if decided to proceed): = Charter time + 18 months - use cases, problem statement, and gap analysis document - framework document - information model - requirements for extensions to protocols - examination of existing secure communication mechanisms=20 Data Models and Applicability Statements to IESG for publication: = Charter time +18 months Working group re-charter or close: Charter time + 24 months END =20 =20 From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Linda Dunbar Sent: 18 August 2015 21:31 To: i2nsf@ietf.org Subject: [I2nsf] Updated I2NSF draft charter =20 Hi everyone, =20 Thanks for the constructive discussions. =20 I have made an updated draft charter posted at: = https://sites.google.com/site/interface2nsf/home=20 =20 I think this captures all of the points raised on this list and during = the BoF. =20 Please shout if you think I have missed anything. =20 Thanks, Linda ------=_NextPart_000_0084_01D0DAA4.61F12630 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Thanks = Linda,

 

This is good = work.

 

A typo - Para three line = one

s/and monitor to NSFs/and = monitor NSFs/

 

A little tidying on the = milestones. I haven't changed any dates, just clarified words and = re-ordered. I have added "examination of existing secure = communication mechanisms" as a deliverable.

OLD

=C2=A0 Use Cases, problem statement, = and gap analysis Document:=C2=A0 = Charter time + 1 month

=C2=A0 Framework: Charter time + 4 = months to WG Document

=C2=A0 Requirements for extensions to = protocols:=C2=A0 Charter time + = 8 months to WG document

=C2=A0 Info model: Charter time + 8 = months to WG Document

=C2=A0 IANA registry consideration + = 12 months to WG Document

=C2=A0 All Early Drafts to IESG: 18 = months

=C2=A0[Decision point =E2=80=93 +10 = months]=C2=A0 =

=C2=A0

=C2=A0=C2=A0Data Models: Charter + 9 = Months to WG Document

=C2=A0 Applicability Statements: 10 = months to WG Document

=C2=A0 Data Models and Applicability = Statements to IESG=C2=A0 - 18 = months

NEW

=C2=A0 Use Cases, problem statement, = and gap analysis to WG Document:=C2=A0 = Charter time + 1 month

=C2=A0 Framework to WG Document: = Charter time + 4 months

=C2=A0 Requirements for extensions to = protocols to WG Document:=C2=A0 = Charter time + 8 months

=C2=A0 Examination of existing secure = communication mechanisms =C2=A0to WG Document: Charter time + 8 = months

=C2=A0 Info model to WG Document (if = desired): Charter time + 8 months

=C2=A0 Data Models to WG Document: = Charter time + 9 Months

=C2=A0 WG decides whether to pursue = certain drafts to RFC : Charter time + 10 months

=C2=A0=C2=A0=C2=A0 - use cases, = problem statement, and gap analysis document

=C2=A0=C2=A0=C2=A0 - framework = document

=C2=A0=C2=A0=C2=A0 - information = model

=C2=A0=C2=A0=C2=A0 - examination of = existing secure communication mechanisms

=C2=A0=C2=A0Applicability Statements = to WG Document: Charter time + 10 months

=C2=A0=C2=A0IANA registry = consideration to WG Document: Charter time + 12 months =

=C2=A0=C2=A0All Early Drafts to IESG = for publication (if decided to proceed): Charter time + 18 = months

=C2=A0=C2=A0=C2=A0 - use cases, = problem statement, and gap analysis document

=C2=A0=C2=A0=C2=A0 - framework = document

=C2=A0=C2=A0=C2=A0 - information = model

=C2=A0=C2=A0=C2=A0 - requirements for = extensions to protocols

=C2=A0=C2=A0=C2=A0 - examination of = existing secure communication mechanisms

=C2=A0=C2=A0Data Models and = Applicability Statements to IESG for publication: Charter time +18 = months

=C2=A0 Working group re-charter or = close: Charter time + 24 months

END

 

 

From: I2nsf = [mailto:i2nsf-bounces@ietf.org] On Behalf Of Linda = Dunbar
Sent: 18 August 2015 21:31
To: = i2nsf@ietf.org
Subject: [I2nsf] Updated I2NSF draft = charter

 

Hi everyone,

 

Thanks for the constructive = discussions.

 

I have made an updated draft charter posted at: =  https://sites.g= oogle.com/site/interface2nsf/home =

 

 I think this captures all of the points raised = on this list and during the BoF.

 

Please shout if you think I have missed = anything.

 

Thanks,

Linda

------=_NextPart_000_0084_01D0DAA4.61F12630-- From nobody Wed Aug 19 16:06:52 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 500AD1A1A32 for ; Wed, 19 Aug 2015 16:06:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n13_0crVK0CC for ; Wed, 19 Aug 2015 16:06:48 -0700 (PDT) Received: from mail-io0-x241.google.com (mail-io0-x241.google.com [IPv6:2607:f8b0:4001:c06::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB9671A1A28 for ; Wed, 19 Aug 2015 16:06:47 -0700 (PDT) Received: by iodv127 with SMTP id v127so1933326iod.0 for ; Wed, 19 Aug 2015 16:06:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=KHGqcGCu6rR5lnPcZfzPJBdTqhMABaJp+ri5Om1emLA=; b=WK2ZJd2lany0c95dtQVdjsczw1lrXXiXOC4+7fOCLeoOi+mTKUp71t3aEUPdxKd8da puqr5aW4PSUG6AUL4/fACENpP6QA9U/++r6TnY3hshxysR6eMssHG7fI3oo5K9FAcRsk li7AxnpRS3oQC7VO4fOBcDP/o+Qi0ngFZ0tpTRS2RQgObt0g9L3LeqPbyfJE3wsKZDaR HiHjcQFu29dB07h21caBznTzm/GWoMVZ6e3OKIvjUDdQJ7bdGD5gN5aJeCdbpE53R/5w AZiGUULv47zxfBwT6i5f4lOzoz59HPQxSPdFUKppMF64rqLJR3I72XDThCibkSziLw+z oN7Q== MIME-Version: 1.0 X-Received: by 10.107.157.4 with SMTP id g4mr17691ioe.66.1440025607430; Wed, 19 Aug 2015 16:06:47 -0700 (PDT) Received: by 10.36.149.3 with HTTP; Wed, 19 Aug 2015 16:06:47 -0700 (PDT) In-Reply-To: <008301d0da9c$002a7440$007f5cc0$@olddog.co.uk> References: <008301d0da9c$002a7440$007f5cc0$@olddog.co.uk> Date: Wed, 19 Aug 2015 18:06:47 -0500 Message-ID: From: Linda Dunbar To: adrian@olddog.co.uk Content-Type: multipart/alternative; boundary=001a1141ba04cc6b7e051db2166e Archived-At: Cc: i2nsf@ietf.org Subject: Re: [I2nsf] Updated I2NSF draft charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Aug 2015 23:06:50 -0000 --001a1141ba04cc6b7e051db2166e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Adrian, Thank you very much for the good catch and tidying up the milestone. The charter on the I2NSF wiki page has been revised per your suggestion: https://sites.google.com/site/interface2nsf/home Cheers, Linda On Wed, Aug 19, 2015 at 11:27 AM, Adrian Farrel wrote= : > Thanks Linda, > > > > This is good work. > > > > A typo - Para three line one > > s/and monitor to NSFs/and monitor NSFs/ > > > > A little tidying on the milestones. I haven't changed any dates, just > clarified words and re-ordered. I have added "examination of existing > secure communication mechanisms" as a deliverable. > > OLD > > Use Cases, problem statement, and gap analysis Document: Charter time > + 1 month > > Framework: Charter time + 4 months to WG Document > > Requirements for extensions to protocols: Charter time + 8 months to > WG document > > Info model: Charter time + 8 months to WG Document > > IANA registry consideration + 12 months to WG Document > > All Early Drafts to IESG: 18 months > > [Decision point =E2=80=93 +10 months] > > > > Data Models: Charter + 9 Months to WG Document > > Applicability Statements: 10 months to WG Document > > Data Models and Applicability Statements to IESG - 18 months > > NEW > > Use Cases, problem statement, and gap analysis to WG Document: Charter > time + 1 month > > Framework to WG Document: Charter time + 4 months > > Requirements for extensions to protocols to WG Document: Charter time > + 8 months > > Examination of existing secure communication mechanisms to WG > Document: Charter time + 8 months > > Info model to WG Document (if desired): Charter time + 8 months > > Data Models to WG Document: Charter time + 9 Months > > WG decides whether to pursue certain drafts to RFC : Charter time + 10 > months > > - use cases, problem statement, and gap analysis document > > - framework document > > - information model > > - examination of existing secure communication mechanisms > > Applicability Statements to WG Document: Charter time + 10 months > > IANA registry consideration to WG Document: Charter time + 12 months > > All Early Drafts to IESG for publication (if decided to proceed): > Charter time + 18 months > > - use cases, problem statement, and gap analysis document > > - framework document > > - information model > > - requirements for extensions to protocols > > - examination of existing secure communication mechanisms > > Data Models and Applicability Statements to IESG for publication: > Charter time +18 months > > Working group re-charter or close: Charter time + 24 months > > END > > > > > > *From:* I2nsf [mailto:i2nsf-bounces@ietf.org] *On Behalf Of *Linda Dunbar > *Sent:* 18 August 2015 21:31 > *To:* i2nsf@ietf.org > *Subject:* [I2nsf] Updated I2NSF draft charter > > > > Hi everyone, > > > > Thanks for the constructive discussions. > > > > I have made an updated draft charter posted at: > https://sites.google.com/site/interface2nsf/home > > > > I think this captures all of the points raised on this list and during > the BoF. > > > > Please shout if you think I have missed anything. > > > > Thanks, > > Linda > --001a1141ba04cc6b7e051db2166e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Adrian,

Thank you very much= for the good catch and tidying up the milestone.

The charter on the=C2=A0I2NSF wiki page has been revised per your suggesti= on: https://si= tes.google.com/site/interface2nsf/home

Cheers,=

Linda

=
On Wed, Aug 19, 2015 at 11:27 AM, Adrian Farrel = <adrian@olddog.co.uk> wrote:

Thanks Linda,=

=C2=A0=

This = is good work.

=C2=A0

A typo - Para three line one

s/and monitor= to NSFs/and monitor NSFs/

<= span style=3D"color:rgb(31,73,125);font-family:"Calibri","sa= ns-serif";font-size:11pt">=C2=A0

A little tidying on the milestone= s. I haven't changed any dates, just clarified words and re-ordered. I = have added "examination of existing secure communication mechanisms&qu= ot; as a deliverable.

OLD

=C2=A0 Use Cases, problem st= atement, and gap analysis Document:=C2=A0 Charter time + 1 mon= th

=C2=A0 Framework: Charter time + 4 months to WG Documen= t

=C2=A0 Requirements for extensions to protocols:= =C2=A0 Charter time + 8 months to WG document

=C2=A0 Info model: Charter time + 8 months to WG Document

=C2=A0 IANA registry consideration + 12 months to WG Document

=C2=A0 <= /span>All Early Drafts to IESG: 18 months

=C2=A0[De= cision point =E2=80=93 +10 months]=C2=A0 =

=C2=A0

=C2=A0=C2=A0Data Models: Charter + 9 Months to WG Docu= ment

=C2=A0 Applicability Statements: 10 months to WG Docu= ment

=C2=A0 Data Models and Applicability Statements to IE= SG=C2=A0 - 18 months

NEW

=C2=A0 Use Case= s, problem statement, and gap analysis to WG Document:=C2=A0 C= harter time + 1 month

=C2=A0 Framework to WG Document: Cha= rter time + 4 months

=C2=A0 Requirements for extensions to= protocols to WG Document:=C2=A0 Charter time + 8 months

<= span>=C2=A0 Examination of existing secure communication mechanisms = =C2=A0to WG Document: Charter time + 8 months

=C2=A0= Info model to WG Document (if desired): Charter time + 8 months<= /u>

=C2=A0 Data Models to WG Document: Charter time + 9 Months=

=C2=A0=C2=A0=C2=A0 - use cases, p= roblem statement, and gap analysis document

=C2=A0=C2=A0=C2=A0 - framework document

=C2=A0=C2=A0=C2=A0 - information= model

=C2=A0=C2=A0=C2=A0 - examination of existing secure= communication mechanisms

<= span style=3D"color:rgb(31,73,125);font-family:"Calibri","sa= ns-serif";font-size:11pt">=C2=A0=C2=A0Applicability State= ments to WG Document: Charter time + 10 months

=C2=A0=C2=A0IANA registry consideration to WG Document: Charter time + 12 months <= /u>

=C2=A0=C2=A0All Early Drafts to IESG for publication (if deci= ded to proceed): Charter time + 18 months

=C2=A0=C2=A0=C2=A0 - use cases, problem statement, and gap analysis document=

=C2= =A0=C2=A0=C2=A0 - framework document

=C2=A0=C2=A0=C2=A0 - information model

=C2=A0=C2=A0=C2=A0 - requirements= for extensions to protocols

=C2=A0=C2=A0=C2=A0 - examinat= ion of existing secure communication mechanisms

=C2=A0=C2=A0Data Models and Applicability Statements to IESG for publication: Charte= r time +18 months

=C2=A0 Working group re-charter or close= : Charter time + 24 months

<= span style=3D"color:rgb(31,73,125);font-family:"Calibri","sa= ns-serif";font-size:11pt">END

=C2=A0

=C2=A0

From: I2nsf [mailto:i2nsf-bounces@ietf.org= ] On Behalf Of Linda Dunbar
Sent: 18 August 2015 21:31
= To: i2nsf@ietf.o= rg
Subject: [I2nsf] Updated I2NSF draft charter=

=C2=A0

Hi everyone,

=C2=A0<= u>

Thanks for the constructive discussions.

=C2=A0=

I have made an updated draft charter posted at: =C2=A0https://sites.google.com/site/interface2nsf/home =

=C2=A0

=C2=A0I think = this captures all of the points raised on this list and during the BoF.

=C2=A0

Please shout if you thi= nk I have missed anything.

=C2=A0=

Thanks,

Linda


--001a1141ba04cc6b7e051db2166e-- From nobody Thu Aug 20 08:04:40 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74F701ACE29 for ; Thu, 20 Aug 2015 08:04:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tzZ_vo6D_Y-9 for ; Thu, 20 Aug 2015 08:04:34 -0700 (PDT) Received: from mail-wi0-x22b.google.com (mail-wi0-x22b.google.com [IPv6:2a00:1450:400c:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 215911A88D5 for ; Thu, 20 Aug 2015 08:04:34 -0700 (PDT) Received: by wijp15 with SMTP id p15so18749677wij.0 for ; Thu, 20 Aug 2015 08:04:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=x0bRi4PEG0lVnxbtyz+77FTMHhDTqflkaE+B674cZnE=; b=P4KvJR3kj2wcUyXF+ARXLkmtnPvl6CUBOw1gq6cmlaPjl7uodiisdCYRPgaiDDuBQH 5YUTGexpGGhe1HEddYn/fe9eBWG+zSFXB2oEXovWj27KjrlgeoX1vIYybDVvBPH+vbPd yPnCqgEJgt0beqZdinlhQWKg7oU0osS8E20hhn0HXL71bGMMr8wuVu0c2MdON89cjCP1 3s3ZVeAiBVG7ezsUD3rGaEaDcinAgrKzBje5v8WLkXJM9tbfJTVejTjr2UsL9R1mQOv8 N02YGdmsBOy+hpLuCXpEoNgO+E+zoq5nASNL7+6JEGX1dffuqvIFU3i3sjzd3OzkBa0E Pknw== MIME-Version: 1.0 X-Received: by 10.180.74.229 with SMTP id x5mr13697725wiv.90.1440083072834; Thu, 20 Aug 2015 08:04:32 -0700 (PDT) Received: by 10.28.157.84 with HTTP; Thu, 20 Aug 2015 08:04:32 -0700 (PDT) In-Reply-To: References: Date: Thu, 20 Aug 2015 11:04:32 -0400 Message-ID: From: Kathleen Moriarty To: "i2nsf@ietf.org" Content-Type: text/plain; charset=UTF-8 Archived-At: Subject: [I2nsf] Fwd: Fw: important X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Aug 2015 15:04:38 -0000 In case it is not obvious, do not click on the link in this email blasted to a bunch of lists. ---------- Forwarded message ---------- From: Meetecho Team Date: Thu, Aug 20, 2015 at 12:56 AM Subject: [I2nsf] Fw: important To: edunext , Edward Crabbe , Federico Antognazza , gaia , "geir.horn" , grow , Harald Alvestrand , Henrik Levkowetz , history , history-chairs , Hosnieh Rafiee , Hosnieh Rafiee , httpauth , httpbis , Hugo St-Onge , i2nsf , i2rs , i2rs-chairs , iab-wcit , iab-wcit-chairs , icnrg , idr , ietf , ietf , int-area , ipfix , ipfix-chairs , ippm , ipsec , ipsec-chairs , ipsecme , isis , Jamal , Jana Iyengar , Jeremy , Joe Milton , Joern Krebs Hello! Important message, visit Meetecho Team _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://www.ietf.org/mailman/listinfo/i2nsf -- Best regards, Kathleen From nobody Mon Aug 24 15:01:18 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 296FF1B2AE4 for ; Mon, 24 Aug 2015 14:27:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.999 X-Spam-Level: X-Spam-Status: No, score=-101.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XajR8FFuRtvV for ; Mon, 24 Aug 2015 14:27:01 -0700 (PDT) Received: from mail-oi0-x22d.google.com (mail-oi0-x22d.google.com [IPv6:2607:f8b0:4003:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 59EFB1B320E for ; Mon, 24 Aug 2015 14:27:01 -0700 (PDT) Received: by oieu205 with SMTP id u205so18662628oie.0 for ; Mon, 24 Aug 2015 14:27:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:cc:content-type; bh=FVhOnKfPPKBdMNFjRzxyvbioUGpQVqIZvudFzpF29pk=; b=PQ1aIMv9E+4DPbjPNp/WKdRyN2mQsOuiQq4G/ec8uJkLQuzl0ZTY2HENubgsiRV+Vb 2p/WRMCqS4QDNtNJJJReoA2wiGHIFKsSzzZT0KP/zcBPVGyUP4XRPwkbkpjKEm0hjROE tZsUp8cM0Qyn7G7WJuU6PrZpDyd9WFhU9XjQ58J/PLuZTHhSNSilCX0b4B4Hlufx6sFb Kei5gn2Wa/vMQ6wriehAHUtx9bmgMGuzwmqSVAJMKEAnyxiH76VXIPV23eQNCA7uWck8 yozfM3t1GOcgmxxnI9AAq8N+n7qL6muj/MScCDaD/Tou0DNNsvNsrySxf4G7WVNCbtLK LCuQ== MIME-Version: 1.0 X-Received: by 10.202.211.65 with SMTP id k62mr22358941oig.34.1440451620608; Mon, 24 Aug 2015 14:27:00 -0700 (PDT) Received: by 10.60.176.138 with HTTP; Mon, 24 Aug 2015 14:27:00 -0700 (PDT) Date: Mon, 24 Aug 2015 17:27:00 -0400 Message-ID: From: Alia Atlas To: i2nsf@ietf.org Content-Type: multipart/alternative; boundary=001a113d23e0299f3e051e1547c1 Archived-At: X-Mailman-Approved-At: Mon, 24 Aug 2015 15:01:17 -0700 Cc: Kathleen Moriarty Subject: [I2nsf] comments on I2NSF charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Aug 2015 21:27:03 -0000 --001a113d23e0299f3e051e1547c1 Content-Type: text/plain; charset=UTF-8 I took a look at the charter at https://sites.google.com/site/interface2nsf/home . In general, this looks plausible. I do have a few comments. First, could you consider and add clarity around whether I2NSF is assuming single-headed control (as is common in network management systems or controllers) or is assuming multi-headed control (as I2RS does)? Second, I'd propose the following minor modification: Replace: "However, I2NSF will provide a forum for Informational drafts on data models, APIs, etc. that demonstrate how more complex Service Layer policies and formats may be translated to Capability Layer functions." With "However, I2NSF will provide a discussion forum for Informational drafts on data models, APIs, etc. that demonstrate how more complex Service Layer policies and formats may be translated to Capability Layer functions. Such documents would be pursued outside the WG." Otherwise, it looks reasonable. Thanks, Alia --001a113d23e0299f3e051e1547c1 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I took a look at the charter at=C2=A0https://sites.google.com/site/inte= rface2nsf/home=C2=A0.
In= general, this looks plausible.=C2=A0 I do have a few comments.
<= br>
First, could you consider and add clarity around whether I2NS= F is assuming single-headed control (as is common in network management sys= tems or controllers) or is assuming multi-headed control (as I2RS does)?

Second, I'd propose the following minor modifica= tion:

Replace:
"However, I2NSF will provide a forum for Informational drafts on data mo= dels, APIs, etc. that demonstrate how more complex Service Layer policies a= nd formats may be translated to Capability Layer functions."
With
"However, I2NSF wi= ll provide a discussion forum for Informational drafts on data models, APIs= , etc. that demonstrate how more complex Service Layer policies and formats= may be translated to Capability Layer functions.=C2=A0 Such documents woul= d be pursued outside the WG."

Otherwise, it looks reason= able.

Thanks,
Alia=
--001a113d23e0299f3e051e1547c1-- From nobody Mon Aug 24 15:25:07 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6FF3A1ACE91 for ; Mon, 24 Aug 2015 15:25:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mSrnNDS9cY3Z for ; Mon, 24 Aug 2015 15:25:04 -0700 (PDT) Received: from mail-ig0-x22a.google.com (mail-ig0-x22a.google.com [IPv6:2607:f8b0:4001:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F1591B2BC5 for ; Mon, 24 Aug 2015 15:25:04 -0700 (PDT) Received: by igui7 with SMTP id i7so72450597igu.1 for ; Mon, 24 Aug 2015 15:25:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=HKQU1V8UWg9QJqinhS4V5mGCP1qmuAGXWPikfA1FkfI=; b=lRE1gA7ExOq+zl5ZRZQDdZhToAIry9W9+qZJj6Q5MHRoDe3izFq4BwqebRNvHA1gRX BNhgfyM2SMIswnCsxDhoEXaiFnFt0sgLKHx/V+qJXbqCqbHFopgXCoGQYJ6+DD9vm2te FHsR7mAgCqRVWCZLGynUQ2WNAFzOLvt3Or6mdYRCi0ubyY5z9EK3CGi1cGrAlxbOTDiL d6OUQPPhD2rrM0R+6aSfnQQbJv3xpg5rqRU5tPOryngN5a45STtu2FKglgm5HNUUA9Yn S4K8xFhwx4WU1uC5IhpWPYXXqIJ4GuHQlmK4p5XhoPKFPWvzHCcfRkiXKcCtw9g5DxN1 /3eg== MIME-Version: 1.0 X-Received: by 10.50.117.36 with SMTP id kb4mr10301215igb.78.1440455103703; Mon, 24 Aug 2015 15:25:03 -0700 (PDT) Received: by 10.36.149.3 with HTTP; Mon, 24 Aug 2015 15:25:03 -0700 (PDT) In-Reply-To: References: Date: Mon, 24 Aug 2015 17:25:03 -0500 Message-ID: From: Linda Dunbar To: Alia Atlas Content-Type: multipart/alternative; boundary=089e0115ece2c57078051e161648 Archived-At: Cc: i2nsf@ietf.org, Kathleen Moriarty Subject: Re: [I2nsf] comments on I2NSF charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Aug 2015 22:25:06 -0000 --089e0115ece2c57078051e161648 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Thank Alia for the useful comment. IMHO, I2NSF should focus on Single-headed control first. With I2RS one step ahead in debating/specifying the proper mechanism to ensure the network integrity with multi-headed control, I2NSF can breathe a bit. I hope that I2NSF can borrow or simply refer to the multi-headed control mechanism defined by I2RS when it is finalized. Thank you for the suggested wording change. I like it. If I don=E2=80=99t h= ear any objection, I will change the wiki by tomorrow. Linda On Mon, Aug 24, 2015 at 4:27 PM, Alia Atlas wrote: > I took a look at the charter at > https://sites.google.com/site/interface2nsf/home . > In general, this looks plausible. I do have a few comments. > > First, could you consider and add clarity around whether I2NSF is assumin= g > single-headed control (as is common in network management systems or > controllers) or is assuming multi-headed control (as I2RS does)? > > Second, I'd propose the following minor modification: > > Replace: > "However, I2NSF will provide a forum for Informational drafts on data > models, APIs, etc. that demonstrate how more complex Service Layer polici= es > and formats may be translated to Capability Layer functions." > With > "However, I2NSF will provide a discussion forum for Informational drafts > on data models, APIs, etc. that demonstrate how more complex Service Laye= r > policies and formats may be translated to Capability Layer functions. Su= ch > documents would be pursued outside the WG." > > Otherwise, it looks reasonable. > > Thanks, > Alia > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > > --089e0115ece2c57078051e161648 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Than= k Alia for the useful comment.

=C2= =A0

IMHO= , I2NSF should focus on Single-headed control first.

=C2= =A0

With= I2RS one step ahead =C2=A0in debating/specifying the proper mechanism to ensure the network integrity wi= th multi-headed control, I2NSF can breathe a bit. I hope that I2NSF can borrow or simply re= fer to the multi-headed control mechanism defined by I2RS when it is finalized.

=C2= =A0

Than= k you for the suggested wording change. I like it. If I don=E2=80=99t hear any objection, I will change the wiki by tomorrow. =C2=A0

=C2= =A0

Lind= a


On M= on, Aug 24, 2015 at 4:27 PM, Alia Atlas <akatlas@gmail.com> = wrote:
I took a look at = the charter at=C2=A0https= ://sites.google.com/site/interface2nsf/home=C2=A0.
In general, this looks plausible.=C2=A0 I do have a few comm= ents.

First, could you consider and add clarity ar= ound whether I2NSF is assuming single-headed control (as is common in netwo= rk management systems or controllers) or is assuming multi-headed control (= as I2RS does)?

Second, I'd propose the followi= ng minor modification:

Replace:
"However, I2NSF will provide a forum for Informational = drafts on data models, APIs, etc. that demonstrate how more complex Service= Layer policies and formats may be translated to Capability Layer functions= ."
With
=
"H= owever, I2NSF will provide a discussion forum for Informational drafts on d= ata models, APIs, etc. that demonstrate how more complex Service Layer poli= cies and formats may be translated to Capability Layer functions.=C2=A0 Suc= h documents would be pursued outside the WG."

Otherwise,= it looks reasonable.

Thanks,
Alia

_______________________________________________
I2nsf mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf


--089e0115ece2c57078051e161648-- From nobody Mon Aug 24 20:44:19 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 258411A7020 for ; Mon, 24 Aug 2015 20:44:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.91 X-Spam-Level: X-Spam-Status: No, score=-3.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h-E06G1gAaWd for ; Mon, 24 Aug 2015 20:44:13 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF0341A6F3B for ; Mon, 24 Aug 2015 20:44:12 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CAJ36667; Tue, 25 Aug 2015 03:44:11 +0000 (GMT) Received: from SZXEMA412-HUB.china.huawei.com (10.82.72.71) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 25 Aug 2015 04:44:10 +0100 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.68]) by SZXEMA412-HUB.china.huawei.com ([10.82.72.71]) with mapi id 14.03.0235.001; Tue, 25 Aug 2015 11:44:06 +0800 From: "Xialiang (Frank)" To: Linda Dunbar , Alia Atlas Thread-Topic: [I2nsf] comments on I2NSF charter Thread-Index: AQHQ3rhrHYpoBV1beU2axZjIPHqBjZ4bM+OAgADYxnA= Date: Tue, 25 Aug 2015 03:44:05 +0000 Message-ID: References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.135.43.91] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F12AE6089ESZXEMA502MBSchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" , Kathleen Moriarty Subject: [I2nsf] =?utf-8?b?562U5aSNOiAgY29tbWVudHMgb24gSTJOU0YgY2hhcnRl?= =?utf-8?q?r?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Aug 2015 03:44:17 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F12AE6089ESZXEMA502MBSchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBhZ3JlZSB3aXRoIExpbmRhLCBzaW5nbGUtaGVhZGVkIGNvbnRyb2wgc2hvdWxkIGJlIG91ciBy ZWFzb25hYmxlIGFzc3VtcHRpb24gY3VycmVudGx5LiBJbiB0aGUgZnV0dXJlLCBmb2xsb3dpbmcg dGhlIHNwZWNpZmljYXRpb24gYWxyZWFkeSBpbiBJMlJTIHNob3VsZCBhbHNvIGJlIGZlYXNpYmxl Lg0KDQpBbm90aGVyIHBvaW50IEkgd2FudCB0byBtZW50aW9uIGlzIGFib3V0IHRoZSBOU0bigJlz IHJlcG9ydGluZyBpbnRlcmZhY2UuIFRoaXMgaW50ZXJmYWNlIG1heSBiZSBhIGxpdHRsZSBiaXQg Y29tcGxleCBzaW5jZSBpdCBuZWVkcyB0byByZXBvcnQgZGlmZmVyZW50IGtpbmRzIG9mIGluZm9y bWF0aW9uLCBzdWNoIGFzOiBhY3Rpb24gcmVzdWx0cyBvZiBzZWN1cml0eSBmdW5jdGlvbnMsIHN0 YXRpc3RpY3MgaW5mb3JtYXRpb24gb2YgdGhlIGZsb3dzIG9yIG5ldHdvcmssIHRoZSBzaGFyaW5n IHNlY3VyaXR5IGludGVsbGlnZW5jZXMsIGV0Yy4NCg0KQi5SLg0KRnJhbmsNCg0K5Y+R5Lu25Lq6 OiBJMm5zZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmddIOS7o+ihqCBMaW5kYSBEdW5i YXINCuWPkemAgeaXtumXtDogMjAxNeW5tDjmnIgyNeaXpSA2OjI1DQrmlLbku7bkuro6IEFsaWEg QXRsYXMNCuaKhOmAgTogaTJuc2ZAaWV0Zi5vcmc7IEthdGhsZWVuIE1vcmlhcnR5DQrkuLvpopg6 IFJlOiBbSTJuc2ZdIGNvbW1lbnRzIG9uIEkyTlNGIGNoYXJ0ZXINCg0KDQpUaGFuayBBbGlhIGZv ciB0aGUgdXNlZnVsIGNvbW1lbnQuDQoNCg0KDQpJTUhPLCBJMk5TRiBzaG91bGQgZm9jdXMgb24g U2luZ2xlLWhlYWRlZCBjb250cm9sIGZpcnN0Lg0KDQoNCg0KV2l0aCBJMlJTIG9uZSBzdGVwIGFo ZWFkICBpbiBkZWJhdGluZy9zcGVjaWZ5aW5nIHRoZSBwcm9wZXIgbWVjaGFuaXNtIHRvIGVuc3Vy ZSB0aGUgbmV0d29yayBpbnRlZ3JpdHkgd2l0aCBtdWx0aS1oZWFkZWQgY29udHJvbCwgSTJOU0Yg Y2FuIGJyZWF0aGUgYSBiaXQuIEkgaG9wZSB0aGF0IEkyTlNGIGNhbiBib3Jyb3cgb3Igc2ltcGx5 IHJlZmVyIHRvIHRoZSBtdWx0aS1oZWFkZWQgY29udHJvbCBtZWNoYW5pc20gZGVmaW5lZCBieSBJ MlJTIHdoZW4gaXQgaXMgZmluYWxpemVkLg0KDQoNCg0KVGhhbmsgeW91IGZvciB0aGUgc3VnZ2Vz dGVkIHdvcmRpbmcgY2hhbmdlLiBJIGxpa2UgaXQuIElmIEkgZG9u4oCZdCBoZWFyIGFueSBvYmpl Y3Rpb24sIEkgd2lsbCBjaGFuZ2UgdGhlIHdpa2kgYnkgdG9tb3Jyb3cuDQoNCg0KDQpMaW5kYQ0K DQpPbiBNb24sIEF1ZyAyNCwgMjAxNSBhdCA0OjI3IFBNLCBBbGlhIEF0bGFzIDxha2F0bGFzQGdt YWlsLmNvbTxtYWlsdG86YWthdGxhc0BnbWFpbC5jb20+PiB3cm90ZToNCkkgdG9vayBhIGxvb2sg YXQgdGhlIGNoYXJ0ZXIgYXQgaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNl Mm5zZi9ob21lIC4NCkluIGdlbmVyYWwsIHRoaXMgbG9va3MgcGxhdXNpYmxlLiAgSSBkbyBoYXZl IGEgZmV3IGNvbW1lbnRzLg0KDQpGaXJzdCwgY291bGQgeW91IGNvbnNpZGVyIGFuZCBhZGQgY2xh cml0eSBhcm91bmQgd2hldGhlciBJMk5TRiBpcyBhc3N1bWluZyBzaW5nbGUtaGVhZGVkIGNvbnRy b2wgKGFzIGlzIGNvbW1vbiBpbiBuZXR3b3JrIG1hbmFnZW1lbnQgc3lzdGVtcyBvciBjb250cm9s bGVycykgb3IgaXMgYXNzdW1pbmcgbXVsdGktaGVhZGVkIGNvbnRyb2wgKGFzIEkyUlMgZG9lcyk/ DQoNClNlY29uZCwgSSdkIHByb3Bvc2UgdGhlIGZvbGxvd2luZyBtaW5vciBtb2RpZmljYXRpb246 DQoNClJlcGxhY2U6DQoiSG93ZXZlciwgSTJOU0Ygd2lsbCBwcm92aWRlIGEgZm9ydW0gZm9yIElu Zm9ybWF0aW9uYWwgZHJhZnRzIG9uIGRhdGEgbW9kZWxzLCBBUElzLCBldGMuIHRoYXQgZGVtb25z dHJhdGUgaG93IG1vcmUgY29tcGxleCBTZXJ2aWNlIExheWVyIHBvbGljaWVzIGFuZCBmb3JtYXRz IG1heSBiZSB0cmFuc2xhdGVkIHRvIENhcGFiaWxpdHkgTGF5ZXIgZnVuY3Rpb25zLiINCldpdGgN CiJIb3dldmVyLCBJMk5TRiB3aWxsIHByb3ZpZGUgYSBkaXNjdXNzaW9uIGZvcnVtIGZvciBJbmZv cm1hdGlvbmFsIGRyYWZ0cyBvbiBkYXRhIG1vZGVscywgQVBJcywgZXRjLiB0aGF0IGRlbW9uc3Ry YXRlIGhvdyBtb3JlIGNvbXBsZXggU2VydmljZSBMYXllciBwb2xpY2llcyBhbmQgZm9ybWF0cyBt YXkgYmUgdHJhbnNsYXRlZCB0byBDYXBhYmlsaXR5IExheWVyIGZ1bmN0aW9ucy4gIFN1Y2ggZG9j dW1lbnRzIHdvdWxkIGJlIHB1cnN1ZWQgb3V0c2lkZSB0aGUgV0cuIg0KDQpPdGhlcndpc2UsIGl0 IGxvb2tzIHJlYXNvbmFibGUuDQoNClRoYW5rcywNCkFsaWENCg0KX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkkybnNmIG1haWxpbmcgbGlzdA0KSTJuc2ZA aWV0Zi5vcmc8bWFpbHRvOkkybnNmQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9pMm5zZg0KDQo= --_000_C02846B1344F344EB4FAA6FA7AF481F12AE6089ESZXEMA502MBSchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQOWui+S9kyI7DQoJ cGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0K cC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0K CW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5 OuWui+S9kzt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNp dGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsN Cgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmln aHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBjbTsN Cglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OuWui+S9kzt9DQpzcGFuLkVtYWlsU3R5 bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7 bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6 NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgOTAuMHB0IDcyLjBwdCA5MC4wcHQ7fQ0K ZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1h eD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9 IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9k eSBsYW5nPSJaSC1DTiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JIGFncmVlIHdpdGggTGluZGEsIHNp bmdsZS1oZWFkZWQgY29udHJvbCBzaG91bGQgYmUgb3VyIHJlYXNvbmFibGUgYXNzdW1wdGlvbiBj dXJyZW50bHkuIEluIHRoZSBmdXR1cmUsIGZvbGxvd2luZyB0aGUgc3BlY2lmaWNhdGlvbiBhbHJl YWR5IGluDQogSTJSUyBzaG91bGQgYWxzbyBiZSBmZWFzaWJsZS48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+QW5vdGhlciBwb2ludCBJIHdhbnQgdG8gbWVudGlvbiBpcyBhYm91 dCB0aGUgTlNG4oCZcyByZXBvcnRpbmcgaW50ZXJmYWNlLiBUaGlzIGludGVyZmFjZSBtYXkgYmUg YSBsaXR0bGUgYml0IGNvbXBsZXggc2luY2UgaXQgbmVlZHMgdG8gcmVwb3J0IGRpZmZlcmVudA0K IGtpbmRzIG9mIGluZm9ybWF0aW9uLCBzdWNoIGFzOiBhY3Rpb24gcmVzdWx0cyBvZiBzZWN1cml0 eSBmdW5jdGlvbnMsIHN0YXRpc3RpY3MgaW5mb3JtYXRpb24gb2YgdGhlIGZsb3dzIG9yIG5ldHdv cmssIHRoZSBzaGFyaW5nIHNlY3VyaXR5IGludGVsbGlnZW5jZXMsIGV0Yy48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Qi5SLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+RnJhbms8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20g MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0Ij7lj5Hku7bkuro8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L3NwYW4+PC9iPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+IEkybnNmIFttYWlsdG86aTJu c2YtYm91bmNlc0BpZXRmLm9yZ10NCjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdCI+5Luj6KGoIDwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0Ij5MaW5kYSBEdW5iYXI8YnI+DQo8L3NwYW4+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQiPuWPkemAgeaXtumXtDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvc3Bh bj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4gMjAxNTwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+5bm0PHNwYW4gbGFuZz0iRU4tVVMi Pjg8L3NwYW4+5pyIPHNwYW4gbGFuZz0iRU4tVVMiPjI1PC9zcGFuPuaXpTxzcGFuIGxhbmc9IkVO LVVTIj4gNjoyNTxicj4NCjwvc3Bhbj48Yj7mlLbku7bkuro8c3BhbiBsYW5nPSJFTi1VUyI+Ojwv c3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBBbGlhIEF0bGFzPGJyPg0KPC9zcGFuPjxiPuaK hOmAgTxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyI+IGky bnNmQGlldGYub3JnOyBLYXRobGVlbiBNb3JpYXJ0eTxicj4NCjwvc3Bhbj48Yj7kuLvpopg8c3Bh biBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBSZTogW0kybnNm XSBjb21tZW50cyBvbiBJMk5TRiBjaGFydGVyPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBzdHlsZT0ibWFyZ2luOjBjbTttYXJnaW4t Ym90dG9tOi4wMDAxcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+VGhhbmsgQWxpYSBmb3IgdGhlIHVzZWZ1bCBjb21tZW50Lg0KPC9zcGFu PjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBzdHlsZT0ibWFy Z2luOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBjbTttYXJnaW4t Ym90dG9tOi4wMDAxcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+SU1ITywgSTJOU0Ygc2hvdWxkIGZvY3VzIG9uIFNpbmdsZS1oZWFkZWQg Y29udHJvbCBmaXJzdC4NCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbjowY207bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNw Ozwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgc3R5 bGU9Im1hcmdpbjowY207bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPldpdGggSTJSUyBvbmUgc3RlcCBh aGVhZCAmbmJzcDtpbiBkZWJhdGluZy9zcGVjaWZ5aW5nIHRoZSBwcm9wZXIgbWVjaGFuaXNtIHRv IGVuc3VyZSB0aGUgbmV0d29yayBpbnRlZ3JpdHkgd2l0aCBtdWx0aS1oZWFkZWQNCiBjb250cm9s LCBJMk5TRiBjYW4gYnJlYXRoZSBhIGJpdC4gSSBob3BlIHRoYXQgSTJOU0YgY2FuIGJvcnJvdyBv ciBzaW1wbHkgcmVmZXIgdG8gdGhlIG11bHRpLWhlYWRlZCBjb250cm9sIG1lY2hhbmlzbSBkZWZp bmVkIGJ5IEkyUlMgd2hlbiBpdCBpcyBmaW5hbGl6ZWQuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBjbTttYXJnaW4tYm90 dG9tOi4wMDAxcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhh bmsgeW91IGZvciB0aGUgc3VnZ2VzdGVkIHdvcmRpbmcgY2hhbmdlLiBJIGxpa2UgaXQuIElmIEkg ZG9u4oCZdCBoZWFyIGFueSBvYmplY3Rpb24sIEkgd2lsbCBjaGFuZ2UgdGhlIHdpa2kgYnkgdG9t b3Jyb3cuDQogJm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7 PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBzdHls ZT0ibWFyZ2luOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+TGluZGE8L3NwYW4+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPk9uIE1v biwgQXVnIDI0LCAyMDE1IGF0IDQ6MjcgUE0sIEFsaWEgQXRsYXMgJmx0OzxhIGhyZWY9Im1haWx0 bzpha2F0bGFzQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmFrYXRsYXNAZ21haWwuY29tPC9h PiZndDsgd3JvdGU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5JIHRvb2sgYSBsb29rIGF0IHRoZSBjaGFydGVyIGF0 Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNlMm5z Zi9ob21lIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjVwdCI+aHR0 cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNlMm5zZi9ob21lPC9zcGFuPjwvYT4m bmJzcDsuPG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIj5JbiBnZW5lcmFsLCB0aGlzIGxvb2tzIHBsYXVzaWJsZS4mbmJz cDsgSSBkbyBoYXZlIGEgZmV3IGNvbW1lbnRzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyI+Rmlyc3QsIGNvdWxkIHlvdSBjb25zaWRlciBhbmQgYWRkIGNs YXJpdHkgYXJvdW5kIHdoZXRoZXIgSTJOU0YgaXMgYXNzdW1pbmcgc2luZ2xlLWhlYWRlZCBjb250 cm9sIChhcyBpcyBjb21tb24gaW4gbmV0d29yayBtYW5hZ2VtZW50IHN5c3RlbXMgb3IgY29udHJv bGxlcnMpIG9yIGlzIGFzc3VtaW5nIG11bHRpLWhlYWRlZCBjb250cm9sIChhcyBJMlJTIGRvZXMp PzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+U2Vjb25k LCBJJ2QgcHJvcG9zZSB0aGUgZm9sbG93aW5nIG1pbm9yIG1vZGlmaWNhdGlvbjo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPlJlcGxhY2U6PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiPiZxdW90Ozwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj5Ib3dldmVyLCBJMk5TRiB3aWxsIHByb3ZpZGUgYSBmb3J1 bSBmb3IgSW5mb3JtYXRpb25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQSXMsIGV0Yy4gdGhh dCBkZW1vbnN0cmF0ZSBob3cgbW9yZSBjb21wbGV4DQogU2VydmljZSBMYXllciBwb2xpY2llcyBh bmQgZm9ybWF0cyBtYXkgYmUgdHJhbnNsYXRlZCB0byBDYXBhYmlsaXR5IExheWVyIGZ1bmN0aW9u cy4mcXVvdDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6YmxhY2siPldpdGg8L3NwYW4+PHNwYW4gbGFuZz0i RU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 YmxhY2siPiZxdW90O0hvd2V2ZXIsIEkyTlNGIHdpbGwgcHJvdmlkZSBhIGRpc2N1c3Npb24gZm9y dW0gZm9yIEluZm9ybWF0aW9uYWwgZHJhZnRzIG9uIGRhdGEgbW9kZWxzLCBBUElzLCBldGMuIHRo YXQgZGVtb25zdHJhdGUgaG93IG1vcmUgY29tcGxleCBTZXJ2aWNlIExheWVyDQogcG9saWNpZXMg YW5kIGZvcm1hdHMgbWF5IGJlIHRyYW5zbGF0ZWQgdG8gQ2FwYWJpbGl0eSBMYXllciBmdW5jdGlv bnMuJm5ic3A7IFN1Y2ggZG9jdW1lbnRzIHdvdWxkIGJlIHB1cnN1ZWQgb3V0c2lkZSB0aGUgV0cu JnF1b3Q7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFj ayI+T3RoZXJ3aXNlLCBpdCBsb29rcyByZWFzb25hYmxlLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1V UyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6YmxhY2siPlRoYW5rcyw8L3NwYW4+PHNwYW4gbGFuZz0i RU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 YmxhY2siPkFsaWE8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJv dHRvbToxMi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj48YnI+DQpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCkkybnNmIG1haWxpbmcgbGlzdDxicj4N CjxhIGhyZWY9Im1haWx0bzpJMm5zZkBpZXRmLm9yZyI+STJuc2ZAaWV0Zi5vcmc8L2E+PGJyPg0K PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZiIgdGFy Z2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2Y8 L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_C02846B1344F344EB4FAA6FA7AF481F12AE6089ESZXEMA502MBSchi_-- From nobody Tue Aug 25 00:00:45 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C49DE1B2B10 for ; Tue, 25 Aug 2015 00:00:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 3.252 X-Spam-Level: *** X-Spam-Status: No, score=3.252 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, CHARSET_FARAWAY_HEADER=3.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, MIME_CHARSET_FARAWAY=2.45, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qf_mwAQ0RptF for ; Tue, 25 Aug 2015 00:00:41 -0700 (PDT) Received: from out4133-130.mail.aliyun.com (out4133-130.mail.aliyun.com [42.120.133.130]) by ietfa.amsl.com (Postfix) with ESMTP id E89781B2AB0 for ; Tue, 25 Aug 2015 00:00:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1440485994; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=IXPKkpYRWMIjsFqlLj/4KH2Na6JpjxP3ncxgBYZ7fbM=; b=xdx2C4PX/uENczWYOQNWYOR2qROCYOxnWT4wFQO/n4Ooo8j8SELlmHpT9X/pDRS/nMjNNOKF3DIDD0Qb3QAign5yFyE2/nK+qUvmnfB6gilC56QEOBpn/emJFMDwFM6o8Q9CRHC51kGiQ8gr6K01TQUggJGj9L8R+yzBZjBGr3A= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R861e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=e02c03290; MF=dacheng.zdc@alibaba-inc.com; NM=1; PH=DS; RN=5; SR=0; Received: from 10.62.54.174(mailfrom:dacheng.zdc@alibaba-inc.com ip:182.92.253.23) by smtp.aliyun-inc.com(127.0.0.1); Tue, 25 Aug 2015 14:59:47 +0800 User-Agent: Microsoft-MacOutlook/14.5.4.150722 Date: Tue, 25 Aug 2015 14:59:41 +0800 From: "Dacheng Zhang" To: "Xialiang (Frank)" , Linda Dunbar , Alia Atlas Message-ID: Thread-Topic: [I2nsf] =?GB2312?B?tPC4tA==?=: comments on I2NSF charter Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3523359587_4100843" Archived-At: Cc: "i2nsf@ietf.org" , Kathleen Moriarty Subject: Re: [I2nsf] =?gb2312?b?tPC4tDogIGNvbW1lbnRzIG9uIEkyTlNGIGNoYXJ0ZXI=?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Aug 2015 07:00:44 -0000 > ʼʹ MIME ʽʼĶʶ ˸ʽˣ޷ʶʼķֲ򲿷ݡ --B_3523359587_4100843 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable =A3=AB1. Addressing problems step by step is a good strategy. =B7=A2=BC=FE=C8=CB: I2nsf on behalf of "Xialiang (Frank)" =C8=D5=C6=DA: 2015=C4=EA8=D4=C225=C8=D5 =D0=C7=C6=DA=B6=FE =C9=CF=CE=E711:44 =D6=C1: Linda Dunbar , Alia Atlas =B3=AD=CB=CD: "i2nsf@ietf.org" , Kathleen Moriarty =D6=F7=CC=E2: [I2nsf] =B4=F0=B8=B4: comments on I2NSF charter I agree with Linda, single-headed control should be our reasonable assumption currently. In the future, following the specification already in I2RS should also be feasible. =20 Another point I want to mention is about the NSF=A1=AFs reporting interface. Th= is interface may be a little bit complex since it needs to report different kinds of information, such as: action results of security functions, statistics information of the flows or network, the sharing security intelligences, etc. =20 B.R. Frank =20 =B7=A2=BC=FE=C8=CB: I2nsf [mailto:i2nsf-bounces@ietf.org] =B4=FA=B1=ED Linda Dunbar =B7=A2=CB=CD=CA=B1=BC=E4: 2015=C4=EA8=D4=C225=C8=D5 6:25 =CA=D5=BC=FE=C8=CB: Alia Atlas =B3=AD=CB=CD: i2nsf@ietf.org; Kathleen Moriarty =D6=F7=CC=E2: Re: [I2nsf] comments on I2NSF charter =20 Thank Alia for the useful comment. =20 IMHO, I2NSF should focus on Single-headed control first. =20 With I2RS one step ahead in debating/specifying the proper mechanism to ensure the network integrity with multi-headed control, I2NSF can breathe a bit. I hope that I2NSF can borrow or simply refer to the multi-headed control mechanism defined by I2RS when it is finalized. =20 Thank you for the suggested wording change. I like it. If I don=A1=AFt hear any objection, I will change the wiki by tomorrow. =20 Linda =20 On Mon, Aug 24, 2015 at 4:27 PM, Alia Atlas wrote: I took a look at the charter at https://sites.google.com/site/interface2nsf/home . In general, this looks plausible. I do have a few comments. =20 First, could you consider and add clarity around whether I2NSF is assuming single-headed control (as is common in network management systems or controllers) or is assuming multi-headed control (as I2RS does)? =20 Second, I'd propose the following minor modification: =20 Replace: "However, I2NSF will provide a forum for Informational drafts on data models, APIs, etc. that demonstrate how more complex Service Layer policies and formats may be translated to Capability Layer functions." With "However, I2NSF will provide a discussion forum for Informational drafts on data models, APIs, etc. that demonstrate how more complex Service Layer policies and formats may be translated to Capability Layer functions. Such documents would be pursued outside the WG." =20 Otherwise, it looks reasonable. =20 Thanks, Alia _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://www.ietf.org/mailman/listinfo/i2nsf =20 _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://www.ietf.org/mailman/listinfo/i2nsf --B_3523359587_4100843 Content-type: text/html; charset="GB2312" Content-transfer-encoding: quoted-printable
=A3=AB1. Addressing problems step by= step is a good strategy. 

=B7=A2=BC=FE=C8=CB: I2nsf <i2nsf-= bounces@ietf.org> on behalf of "Xialiang (Frank)" <frank.xialiang@huawei.com>
=C8=D5=C6=DA: 2015=C4=EA8=D4=C225=C8=D5 =D0=C7=C6=DA=B6=FE =C9=CF=CE=E711:44
=D6=C1: Linda Dunbar <ietf.dunbar@gmail.com>, Alia Atlas <akatlas@gmail.com>
=B3=AD=CB=CD: "i2nsf@ietf.org" <<= a href=3D"mailto:i2nsf@ietf.org">i2nsf@ietf.org>, Kathleen Moriarty <= ;kathleen.moriarty.ietf@gm= ail.com>
=D6=F7=CC=E2: [I2nsf] =B4=F0=B8=B4= : comments on I2NSF charter

I agree with Linda, single-headed control should be our reasonable assum= ption currently. In the future, following the specification already in I2RS should also be feasible.

 

= Another point I want to mention is about the NS= F’s reporting interface. This interface may be a little bit complex si= nce it needs to report different kinds of information, such as: action results of security functions, stati= stics information of the flows or network, the sharing security intelligence= s, etc.

 

B.R.

Frank

 

=B7=A2=BC=FE=C8=CB: I2nsf [mailto:i2nsf-bounces@ietf.org] =B4=FA=B1=ED Linda Dunbar
=B7=A2=CB=CD=CA=B1=BC=E4: 2015=C4=EA8=D4=C225=C8=D5 6:25=CA=D5=BC=FE=C8=CB: Alia Atl= as
=B3=AD=CB=CD: i2nsf@ietf.org; Kathleen Moriarty
<= b>=D6=F7=CC=E2: Re: [I2nsf] comment= s on I2NSF charter

 

Thank Alia for the useful comme= nt.

 =

IMHO, I2NSF should focus on Single-headed control first.

 =

With I2RS one step ahead  in debating/specifying the p= roper mechanism to ensure the network integrity with multi-headed control, I2NSF can breathe a bit. I hope that I2NSF can borrow or simply r= efer to the multi-headed control mechanism defined by I2RS when it is finali= zed.

 

Thank you for the suggested wording change. I like it. I= f I don’t hear any objection, I will change the wiki by tomorrow.  

 

Linda

 =

On Mon, Aug 24, 2015 at 4:2= 7 PM, Alia Atlas <akat= las@gmail.com> wrote:

= I took a look at the charter at https://sites.google.com/site/interface2nsf/home .<= o:p>

In general= , this looks plausible.  I do have a few comments.

 =

First, could you cons= ider and add clarity around whether I2NSF is assuming single-headed control = (as is common in network management systems or controllers) or is assuming m= ulti-headed control (as I2RS does)?

 

Second, I'd propose the following minor m= odification:

 

Replace:

"However, I2NSF will provide a for= um for Informational drafts on data models, APIs, etc. that demonstrate how = more complex Service Layer policies and formats may be translated to Capability Layer f= unctions."

With

"However, I2NSF wi= ll provide a discussion forum for Informational drafts on data models, APIs,= etc. that demonstrate how more complex Service Layer policies and formats may be translated to Capability Layer functions. = ; Such documents would be pursued outside the WG."=

 

O= therwise, it looks reasonable.

 

Thanks,

Alia


_______________________________________________
I2nsf mailing list
I2nsf@ietf.orghttps= ://www.ietf.org/mailman/listinfo/i2nsf

 

_______________________________________________ I2nsf mailing list I2nsf@ietf.org https://www.ietf.org/= mailman/listinfo/i2nsf --B_3523359587_4100843-- From nobody Tue Aug 25 02:39:32 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C91C1B2CC6 for ; Tue, 25 Aug 2015 02:39:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mlbqfRjyTt83 for ; Tue, 25 Aug 2015 02:39:29 -0700 (PDT) Received: from smtpb1.bt.com (smtpb1.bt.com [62.7.242.141]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E9401B2C25 for ; Tue, 25 Aug 2015 02:39:28 -0700 (PDT) Received: from E07HT02-UKBR.domain1.systemhost.net (193.113.197.160) by EVMED05-UKBR.bt.com (10.216.161.37) with Microsoft SMTP Server (TLS) id 14.3.195.1; Tue, 25 Aug 2015 10:39:23 +0100 Received: from rew09926dag07b.domain1.systemhost.net (10.55.202.38) by E07HT02-UKBR.domain1.systemhost.net (193.113.197.160) with Microsoft SMTP Server (TLS) id 8.3.342.0; Tue, 25 Aug 2015 10:39:17 +0100 Received: from rew09926dag07c.domain1.systemhost.net (10.55.202.42) by rew09926dag07b.domain1.systemhost.net (10.55.202.38) with Microsoft SMTP Server (TLS) id 15.0.995.29; Tue, 25 Aug 2015 10:39:16 +0100 Received: from rew09926dag07c.domain1.systemhost.net ([fe80::e96b:c4cf:4f12:756c]) by rew09926dag07c.domain1.systemhost.net ([fe80::e96b:c4cf:4f12:756c%12]) with mapi id 15.00.0995.031; Tue, 25 Aug 2015 10:39:16 +0100 From: To: , Thread-Topic: [I2nsf] comments on I2NSF charter Thread-Index: AQHQ3rhqaXhuqwRYbEyRCwby5c0UKp4bqTyAgADLdbA= Date: Tue, 25 Aug 2015 09:39:15 +0000 Message-ID: <8d6235ed117a453984d379be84f8674f@rew09926dag07c.domain1.systemhost.net> References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.55.202.233] Content-Type: multipart/alternative; boundary="_000_8d6235ed117a453984d379be84f8674frew09926dag07cdomain1sy_" MIME-Version: 1.0 Archived-At: Cc: i2nsf@ietf.org, kathleen.moriarty.ietf@gmail.com Subject: Re: [I2nsf] comments on I2NSF charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Aug 2015 09:39:31 -0000 --_000_8d6235ed117a453984d379be84f8674frew09926dag07cdomain1sy_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBhZ3JlZSwgSSBkb27igJl0IHRoaW5rIGl04oCZcyBuZWNlc3NhcnkgdG8gY29uc2lkZXIgbXVs dGktaGVhZGVkIGNvbnRyb2wgYXQgdGhpcyBwb2ludCBhbmQgd291bGQgc3VwcG9ydCByZS11c2lu ZyB0aGUgZ29vZCB3b3JrIGkycnMgaXMgZG9pbmcgaWYvd2hlbiB3ZSBkbyByZXF1aXJlIGl0Lg0K DQpJIGFsc28gYWdyZWUgd2l0aCBBbGlh4oCZcyBzdWdnZXN0ZWQgd29yZGluZyBjaGFuZ2UgdG8g Zm9jdXMgdGhlIHNjb3BlLg0KDQpUaGFua3MsDQpKb2UNCg0KRnJvbTogSTJuc2YgW21haWx0bzpp Mm5zZi1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgTGluZGEgRHVuYmFyDQpTZW50OiAy NCBBdWd1c3QgMjAxNSAyMzoyNQ0KVG86IEFsaWEgQXRsYXMgPGFrYXRsYXNAZ21haWwuY29tPg0K Q2M6IGkybnNmQGlldGYub3JnOyBLYXRobGVlbiBNb3JpYXJ0eSA8a2F0aGxlZW4ubW9yaWFydHku aWV0ZkBnbWFpbC5jb20+DQpTdWJqZWN0OiBSZTogW0kybnNmXSBjb21tZW50cyBvbiBJMk5TRiBj aGFydGVyDQoNCg0KVGhhbmsgQWxpYSBmb3IgdGhlIHVzZWZ1bCBjb21tZW50Lg0KDQoNCg0KSU1I TywgSTJOU0Ygc2hvdWxkIGZvY3VzIG9uIFNpbmdsZS1oZWFkZWQgY29udHJvbCBmaXJzdC4NCg0K DQoNCldpdGggSTJSUyBvbmUgc3RlcCBhaGVhZCAgaW4gZGViYXRpbmcvc3BlY2lmeWluZyB0aGUg cHJvcGVyIG1lY2hhbmlzbSB0byBlbnN1cmUgdGhlIG5ldHdvcmsgaW50ZWdyaXR5IHdpdGggbXVs dGktaGVhZGVkIGNvbnRyb2wsIEkyTlNGIGNhbiBicmVhdGhlIGEgYml0LiBJIGhvcGUgdGhhdCBJ Mk5TRiBjYW4gYm9ycm93IG9yIHNpbXBseSByZWZlciB0byB0aGUgbXVsdGktaGVhZGVkIGNvbnRy b2wgbWVjaGFuaXNtIGRlZmluZWQgYnkgSTJSUyB3aGVuIGl0IGlzIGZpbmFsaXplZC4NCg0KDQoN ClRoYW5rIHlvdSBmb3IgdGhlIHN1Z2dlc3RlZCB3b3JkaW5nIGNoYW5nZS4gSSBsaWtlIGl0LiBJ ZiBJIGRvbuKAmXQgaGVhciBhbnkgb2JqZWN0aW9uLCBJIHdpbGwgY2hhbmdlIHRoZSB3aWtpIGJ5 IHRvbW9ycm93Lg0KDQoNCg0KTGluZGENCg0KT24gTW9uLCBBdWcgMjQsIDIwMTUgYXQgNDoyNyBQ TSwgQWxpYSBBdGxhcyA8YWthdGxhc0BnbWFpbC5jb208bWFpbHRvOmFrYXRsYXNAZ21haWwuY29t Pj4gd3JvdGU6DQpJIHRvb2sgYSBsb29rIGF0IHRoZSBjaGFydGVyIGF0IGh0dHBzOi8vc2l0ZXMu Z29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaG9tZSAuDQpJbiBnZW5lcmFsLCB0aGlzIGxv b2tzIHBsYXVzaWJsZS4gIEkgZG8gaGF2ZSBhIGZldyBjb21tZW50cy4NCg0KRmlyc3QsIGNvdWxk IHlvdSBjb25zaWRlciBhbmQgYWRkIGNsYXJpdHkgYXJvdW5kIHdoZXRoZXIgSTJOU0YgaXMgYXNz dW1pbmcgc2luZ2xlLWhlYWRlZCBjb250cm9sIChhcyBpcyBjb21tb24gaW4gbmV0d29yayBtYW5h Z2VtZW50IHN5c3RlbXMgb3IgY29udHJvbGxlcnMpIG9yIGlzIGFzc3VtaW5nIG11bHRpLWhlYWRl ZCBjb250cm9sIChhcyBJMlJTIGRvZXMpPw0KDQpTZWNvbmQsIEknZCBwcm9wb3NlIHRoZSBmb2xs b3dpbmcgbWlub3IgbW9kaWZpY2F0aW9uOg0KDQpSZXBsYWNlOg0KIkhvd2V2ZXIsIEkyTlNGIHdp bGwgcHJvdmlkZSBhIGZvcnVtIGZvciBJbmZvcm1hdGlvbmFsIGRyYWZ0cyBvbiBkYXRhIG1vZGVs cywgQVBJcywgZXRjLiB0aGF0IGRlbW9uc3RyYXRlIGhvdyBtb3JlIGNvbXBsZXggU2VydmljZSBM YXllciBwb2xpY2llcyBhbmQgZm9ybWF0cyBtYXkgYmUgdHJhbnNsYXRlZCB0byBDYXBhYmlsaXR5 IExheWVyIGZ1bmN0aW9ucy4iDQpXaXRoDQoiSG93ZXZlciwgSTJOU0Ygd2lsbCBwcm92aWRlIGEg ZGlzY3Vzc2lvbiBmb3J1bSBmb3IgSW5mb3JtYXRpb25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMs IEFQSXMsIGV0Yy4gdGhhdCBkZW1vbnN0cmF0ZSBob3cgbW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5 ZXIgcG9saWNpZXMgYW5kIGZvcm1hdHMgbWF5IGJlIHRyYW5zbGF0ZWQgdG8gQ2FwYWJpbGl0eSBM YXllciBmdW5jdGlvbnMuICBTdWNoIGRvY3VtZW50cyB3b3VsZCBiZSBwdXJzdWVkIG91dHNpZGUg dGhlIFdHLiINCg0KT3RoZXJ3aXNlLCBpdCBsb29rcyByZWFzb25hYmxlLg0KDQpUaGFua3MsDQpB bGlhDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpJ Mm5zZiBtYWlsaW5nIGxpc3QNCkkybnNmQGlldGYub3JnPG1haWx0bzpJMm5zZkBpZXRmLm9yZz4N Cmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YNCg0K --_000_8d6235ed117a453984d379be84f8674frew09926dag07cdomain1sy_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwDQoJe21zby1zdHlsZS1wcmlv cml0eTo5OTsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGNtOw0K CW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBjbTsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4u RW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1 bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KQHBhZ2UgV29yZFNl Y3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcy LjBwdCA3Mi4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQot LT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4 dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3Rl IG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpl eHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+ DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1HQiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+ DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkkgYWdy ZWUsIEkgZG9u4oCZdCB0aGluayBpdOKAmXMgbmVjZXNzYXJ5IHRvIGNvbnNpZGVyIG11bHRpLWhl YWRlZCBjb250cm9sIGF0IHRoaXMgcG9pbnQgYW5kIHdvdWxkIHN1cHBvcnQgcmUtdXNpbmcgdGhl IGdvb2Qgd29yayBpMnJzDQogaXMgZG9pbmcgaWYvd2hlbiB3ZSBkbyByZXF1aXJlIGl0LjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SSBhbHNvIGFncmVlIHdpdGggQWxp YeKAmXMgc3VnZ2VzdGVkIHdvcmRpbmcgY2hhbmdlIHRvIGZvY3VzIHRoZSBzY29wZS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPlRoYW5rcyw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+Sm9lPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Q7bXNvLWZh cmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzow Y20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8 L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBJMm5zZiBbbWFpbHRvOmky bnNmLWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkxpbmRhIER1bmJhcjxi cj4NCjxiPlNlbnQ6PC9iPiAyNCBBdWd1c3QgMjAxNSAyMzoyNTxicj4NCjxiPlRvOjwvYj4gQWxp YSBBdGxhcyAmbHQ7YWthdGxhc0BnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBpMm5zZkBp ZXRmLm9yZzsgS2F0aGxlZW4gTW9yaWFydHkgJmx0O2thdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21h aWwuY29tJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0kybnNmXSBjb21tZW50cyBvbiBJ Mk5TRiBjaGFydGVyPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIHN0eWxlPSJt YXJnaW46MGNtO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPlRoYW5rIEFsaWEgZm9yIHRoZSB1c2VmdWwgY29tbWVudC4NCjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46MGNtO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIHN0eWxlPSJtYXJnaW46MGNtO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPklNSE8sIEkyTlNGIHNob3VsZCBmb2N1cyBvbiBTaW5nbGUtaGVh ZGVkIGNvbnRyb2wgZmlyc3QuDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFy Z2luOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBjbTtt YXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5XaXRo IEkyUlMgb25lIHN0ZXAgYWhlYWQgJm5ic3A7aW4gZGViYXRpbmcvc3BlY2lmeWluZyB0aGUgcHJv cGVyIG1lY2hhbmlzbSB0byBlbnN1cmUgdGhlIG5ldHdvcmsgaW50ZWdyaXR5IHdpdGggbXVsdGkt aGVhZGVkIGNvbnRyb2wsIEkyTlNGDQogY2FuIGJyZWF0aGUgYSBiaXQuIEkgaG9wZSB0aGF0IEky TlNGIGNhbiBib3Jyb3cgb3Igc2ltcGx5IHJlZmVyIHRvIHRoZSBtdWx0aS1oZWFkZWQgY29udHJv bCBtZWNoYW5pc20gZGVmaW5lZCBieSBJMlJTIHdoZW4gaXQgaXMgZmluYWxpemVkLjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46MGNtO21hcmdpbi1ib3R0b206LjAwMDFw dCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46MGNtO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5rIHlvdSBmb3IgdGhlIHN1Z2dlc3RlZCB3b3Jk aW5nIGNoYW5nZS4gSSBsaWtlIGl0LiBJZiBJIGRvbuKAmXQgaGVhciBhbnkgb2JqZWN0aW9uLCBJ IHdpbGwgY2hhbmdlIHRoZSB3aWtpIGJ5IHRvbW9ycm93LiAmbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBzdHlsZT0ibWFyZ2luOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMUY0OTdEIj5MaW5kYTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPk9uIE1vbiwgQXVnIDI0LCAyMDE1IGF0IDQ6MjcgUE0sIEFsaWEg QXRsYXMgJmx0OzxhIGhyZWY9Im1haWx0bzpha2F0bGFzQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxh bmsiPmFrYXRsYXNAZ21haWwuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8Ymxv Y2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBw dDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdo dDowY20iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgdG9vayBhIGxvb2sgYXQgdGhl IGNoYXJ0ZXIgYXQmbmJzcDs8YSBocmVmPSJodHRwczovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9p bnRlcmZhY2UybnNmL2hvbWUiIHRhcmdldD0iX2JsYW5rIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuNXB0Ij5odHRwczovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNmL2hvbWU8 L3NwYW4+PC9hPiZuYnNwOy48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5JbiBnZW5lcmFsLCB0aGlzIGxvb2tzIHBsYXVzaWJsZS4mbmJzcDsgSSBkbyBoYXZlIGEg ZmV3IGNvbW1lbnRzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5GaXJzdCwgY291bGQgeW91IGNvbnNpZGVyIGFuZCBhZGQgY2xhcml0eSBhcm91 bmQgd2hldGhlciBJMk5TRiBpcyBhc3N1bWluZyBzaW5nbGUtaGVhZGVkIGNvbnRyb2wgKGFzIGlz IGNvbW1vbiBpbiBuZXR3b3JrIG1hbmFnZW1lbnQgc3lzdGVtcyBvciBjb250cm9sbGVycykgb3Ig aXMgYXNzdW1pbmcgbXVsdGktaGVhZGVkIGNvbnRyb2wgKGFzIEkyUlMgZG9lcyk/PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNlY29uZCwgSSdk IHByb3Bvc2UgdGhlIGZvbGxvd2luZyBtaW5vciBtb2RpZmljYXRpb246PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJlcGxhY2U6PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mcXVvdDs8c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6YmxhY2siPkhvd2V2ZXIsIEkyTlNGIHdpbGwgcHJvdmlkZSBhIGZvcnVt IGZvciBJbmZvcm1hdGlvbmFsIGRyYWZ0cyBvbiBkYXRhIG1vZGVscywgQVBJcywgZXRjLiB0aGF0 IGRlbW9uc3RyYXRlIGhvdyBtb3JlIGNvbXBsZXggU2VydmljZSBMYXllciBwb2xpY2llcyBhbmQg Zm9ybWF0cyBtYXkNCiBiZSB0cmFuc2xhdGVkIHRvIENhcGFiaWxpdHkgTGF5ZXIgZnVuY3Rpb25z LiZxdW90Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+V2l0aDwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjpibGFjayI+JnF1b3Q7SG93ZXZlciwgSTJOU0Ygd2lsbCBwcm92aWRlIGEgZGlz Y3Vzc2lvbiBmb3J1bSBmb3IgSW5mb3JtYXRpb25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQ SXMsIGV0Yy4gdGhhdCBkZW1vbnN0cmF0ZSBob3cgbW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5ZXIg cG9saWNpZXMgYW5kDQogZm9ybWF0cyBtYXkgYmUgdHJhbnNsYXRlZCB0byBDYXBhYmlsaXR5IExh eWVyIGZ1bmN0aW9ucy4mbmJzcDsgU3VjaCBkb2N1bWVudHMgd291bGQgYmUgcHVyc3VlZCBvdXRz aWRlIHRoZSBXRy4mcXVvdDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+T3RoZXJ3 aXNlLCBpdCBsb29rcyByZWFzb25hYmxlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNr Ij5UaGFua3MsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5BbGlhPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX188YnI+DQpJMm5zZiBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJt YWlsdG86STJuc2ZAaWV0Zi5vcmciPkkybnNmQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YiIHRhcmdldD0iX2JsYW5r Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmPC9hPjxvOnA+PC9v OnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRt bD4NCg== --_000_8d6235ed117a453984d379be84f8674frew09926dag07cdomain1sy_-- From nobody Tue Aug 25 08:22:11 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 979DC1B2AA8 for ; Tue, 25 Aug 2015 08:22:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.102 X-Spam-Level: X-Spam-Status: No, score=0.102 tagged_above=-999 required=5 tests=[BAYES_50=0.8, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I_k9ra0A2HqD for ; Tue, 25 Aug 2015 08:22:08 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B96481B305A for ; Tue, 25 Aug 2015 08:22:06 -0700 (PDT) Received: from omfedm05.si.francetelecom.fr (unknown [xx.xx.xx.1]) by omfedm14.si.francetelecom.fr (ESMTP service) with ESMTP id 1609722C182 for ; Tue, 25 Aug 2015 17:22:05 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.41]) by omfedm05.si.francetelecom.fr (ESMTP service) with ESMTP id EB1A635C074 for ; Tue, 25 Aug 2015 17:22:04 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM31.corporate.adroot.infra.ftgroup ([fe80::2cc9:4bac:7b7d:229d%19]) with mapi id 14.03.0248.002; Tue, 25 Aug 2015 17:22:04 +0200 From: To: "i2nsf@ietf.org" Thread-Topic: On multi-headed control Thread-Index: AdDfSTyGu/dc0ESSRHapXXkoVfau1Q== Date: Tue, 25 Aug 2015 15:22:04 +0000 Message-ID: <21041_1440516125_55DC881C_21041_2301_2_88132E969123D14D9BD844E1CD516EDE0F63C2D9@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.5] Content-Type: multipart/alternative; boundary="_000_88132E969123D14D9BD844E1CD516EDE0F63C2D9OPEXCLILMA3corp_" MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.8.25.144517 Archived-At: Subject: [I2nsf] On multi-headed control X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Aug 2015 15:22:10 -0000 --_000_88132E969123D14D9BD844E1CD516EDE0F63C2D9OPEXCLILMA3corp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, Like Linda and other people who previously expressed their opinion on this = list, I agree that multi-headed control shouldn't be the first priority of = i2nsf WG activities. Multi-headed control may be considered in the future, = possibly taking the opportunity of a re-chartering discussion if the WG is = formed (which I support). Cheers, Christian. _________________ ________ ______ ______ /_____________ /__ /_ _ / / / / / Christian Jacquenet - O= range /_________/ / / / / / / / / /__/ Tel: +33 2 99 12 43 82 = Cell: +33 6 73 67 73 53 / / /___/__/___/_____/_/__/____ "Soundin' a lot like a H= ouse Congressional, /__/ /__________________________/_ 'cause we're experimental= and professional." /_______________________________/ - Beer Drinkers and Hell = Raisers. ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. --_000_88132E969123D14D9BD844E1CD516EDE0F63C2D9OPEXCLILMA3corp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

 

Like Linda and other people who previously expressed their= opinion on this list, I agree that multi-headed control shouldn’t be= the first priority of i2nsf WG activities. Multi-headed control may be considered in the future, possibly taking the opportunity o= f a re-chartering discussion if the WG is formed (which I support).

 

Cheers,

 

Christian.

 

    _________________    ___= _____  ______  ______
   /_____________   /__ /_    _ / / = ;    / /     /   Christian Jac= quenet - Orange
      /_________/  /  /   /&nb= sp; /   /  /  / /  /__/    Tel: = 3;33 2 99 12 43 82 Cell: +33 6 73 67 73 53
            &nb= sp;  /  /  /___/__/___/_____/_/__/____   "Sou= ndin' a lot like a House Congressional,
            &nb= sp; /__/  /__________________________/_ 'cause we're experimental and = professional." 
            &nb= sp;   /_______________________________/ - Beer Drink= ers and Hell Raisers.

 

______________________________________________________________________=
___________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.
--_000_88132E969123D14D9BD844E1CD516EDE0F63C2D9OPEXCLILMA3corp_-- From nobody Tue Aug 25 09:04:48 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 519871B33FC for ; Tue, 25 Aug 2015 09:04:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3iL6-X6eNx4F for ; Tue, 25 Aug 2015 09:04:46 -0700 (PDT) Received: from mail-io0-x231.google.com (mail-io0-x231.google.com [IPv6:2607:f8b0:4001:c06::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E2C31B33C5 for ; Tue, 25 Aug 2015 09:04:46 -0700 (PDT) Received: by iodt126 with SMTP id t126so192645864iod.2 for ; Tue, 25 Aug 2015 09:04:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=RvtvjFKNbliXNrnt7Pn3P0wqLaH8zAlw2RDh32kkiYs=; b=Qio1CWjjN6hCaBU2YeqOKa1E0gokp+ytKtsmXmm6K6pbwTG8duXfNPMtuuLEvQNKNR R92UYJwXqeCPtuoCfaELIdFkokVgmbxl1PEbGuaECVj9jMc+r4K5rHRuhoc7dFhfthhi sgbTNqDJZOmv5Nmbgvyx8WjhW1+FB6YO6qPAbj9xoFsPfhZC/AAlSbswA5FuhsVTITf8 IeHoaOK1RYloftAUyFGvCTlez1yQIJplj1nN2esH9g54yGaRXuc5oIY5kqis7ZCkVUMK vJTJTaCAa+WDiz77MxL7D/Uy8K5OtZH2UNWEotfUHDCL5TO3wCofz8kUu2r2hWTN1biI ehqg== MIME-Version: 1.0 X-Received: by 10.107.128.83 with SMTP id b80mr25007405iod.84.1440518685642; Tue, 25 Aug 2015 09:04:45 -0700 (PDT) Received: by 10.36.149.3 with HTTP; Tue, 25 Aug 2015 09:04:45 -0700 (PDT) In-Reply-To: References: Date: Tue, 25 Aug 2015 11:04:45 -0500 Message-ID: From: Linda Dunbar To: Alia Atlas Content-Type: multipart/alternative; boundary=001a113de4a88cd82f051e24e4c9 Archived-At: Cc: i2nsf@ietf.org, Kathleen Moriarty Subject: Re: [I2nsf] comments on I2NSF charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Aug 2015 16:04:48 -0000 --001a113de4a88cd82f051e24e4c9 Content-Type: text/plain; charset=UTF-8 Alia, All the comments/replies (including operators) from the I2NSF mailing list support I2NSF focusing on the single headed control first and support your suggested changes. So I updated the I2NSF charter on the I2NSF wiki : https://sites.google.com/site/interface2nsf/home To make it easier for your review, here is the wording I changed for "single headed control": *"Controlling and monitoring aspects of NSFs include the ability to specify rules (by a single controller at the first phase), query, and monitor NSFs by one or more management entities. The initial phase of I2NSF will only consider one single controller that can specify or change rules to NSFs because multi-headed control requires the coordination to avoid potential conflict of rules. The NSFs can be monitored by multiple entities, but the Database update and synchronization among multiple management entities are out of the I2NSF scope."* Thank you very much. Linda On Mon, Aug 24, 2015 at 4:27 PM, Alia Atlas wrote: > I took a look at the charter at > https://sites.google.com/site/interface2nsf/home . > In general, this looks plausible. I do have a few comments. > > First, could you consider and add clarity around whether I2NSF is assuming > single-headed control (as is common in network management systems or > controllers) or is assuming multi-headed control (as I2RS does)? > > Second, I'd propose the following minor modification: > > Replace: > "However, I2NSF will provide a forum for Informational drafts on data > models, APIs, etc. that demonstrate how more complex Service Layer policies > and formats may be translated to Capability Layer functions." > With > "However, I2NSF will provide a discussion forum for Informational drafts > on data models, APIs, etc. that demonstrate how more complex Service Layer > policies and formats may be translated to Capability Layer functions. Such > documents would be pursued outside the WG." > > Otherwise, it looks reasonable. > > Thanks, > Alia > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > > --001a113de4a88cd82f051e24e4c9 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Alia,

All=C2=A0the comments= /replies=C2=A0(including operators) from the I2NSF mailing list support I2N= SF focusing on the single headed control first and support your suggested c= hanges.

So I updated the I2NSF charter on the I2N= SF wiki :

<= /div>
To make it easier for your review, here is the wording I changed = for "single headed control":

"Controlling and monitoring aspects of NSFs include the ability to specify rules (by a s= ingle controller at the first phase), query, and monitor NSFs by one or more management entities. =C2=A0The initial phase of I2NSF will only consider one single controller that can specify or chang= e rules to NSFs because multi-headed control requires the coordination=C2=A0to avoi= d=C2=A0potential conflict of rules. The NSFs can be monitored by multiple entities, but the Database update and synchronization among multiple management entities are = out of the I2NSF scope."

=C2=A0
Thank you very much.

Lin= da

On = Mon, Aug 24, 2015 at 4:27 PM, Alia Atlas <akatlas@gmail.com>= wrote:
I took a look at= the charter at=C2=A0http= s://sites.google.com/site/interface2nsf/home=C2=A0.
In general, this looks plausible.=C2=A0 I do have a few com= ments.

First, could you consider and add clarity a= round whether I2NSF is assuming single-headed control (as is common in netw= ork management systems or controllers) or is assuming multi-headed control = (as I2RS does)?

Second, I'd propose the follow= ing minor modification:

Replace:
"<= span style=3D"color:rgb(0,0,0);line-height:24px;font-family:Calibri,sans-se= rif;font-size:10.5pt">However, I2NSF will provide a forum for Informational= drafts on data models, APIs, etc. that demonstrate how more complex Servic= e Layer policies and formats may be translated to Capability Layer function= s."
With
"= However, I2NSF will provide a discussion forum for Informational drafts on = data models, APIs, etc. that demonstrate how more complex Service Layer pol= icies and formats may be translated to Capability Layer functions.=C2=A0 Su= ch documents would be pursued outside the WG."

Otherwise= , it looks reasonable.

<= /div>
Thanks,
Alia

_______________________________________________
I2nsf mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf


--001a113de4a88cd82f051e24e4c9-- From nobody Tue Aug 25 09:48:06 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D0771A8AF9 for ; Tue, 25 Aug 2015 09:45:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.999 X-Spam-Level: X-Spam-Status: No, score=-101.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g7vNWgMXmY9m for ; Tue, 25 Aug 2015 09:45:38 -0700 (PDT) Received: from mail-oi0-x22f.google.com (mail-oi0-x22f.google.com [IPv6:2607:f8b0:4003:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0CEC1A21BA for ; Tue, 25 Aug 2015 09:43:17 -0700 (PDT) Received: by oieu205 with SMTP id u205so33932142oie.0 for ; Tue, 25 Aug 2015 09:43:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=0d1hIlbLSKaAufKoVwb4lpeLbNLSkaia5KKoj86zp6I=; b=eAkWlsKgY5JqLRu4ddA2W/0YAxiIuMPUVItM6IhxmZLFApE5+uSatEHUkHrYnq9V6o FP7cBII8/yqvyK+ntzkOVubDPGf9fBzjfU9VKaMsPs2NNB2h8QTL5Xatmie1J0fFOZEJ Omvi8rm/xGOq8cbtL2gzVr0qCaaqOKgE5IZG/K05WnPHZ1V/HY7zPckODqXZBn9J9vsZ z7HRDpwSX6GKJqm2jgNb5ARkD7s+qhmyWerHlQEAnGSCZdfZAB/9KcXLrVbWVkJ/M9CC /6UB2FAOGZcuR6C/uFKzJvGhFT5doCjznRPm8IvWOp56foBj4YXccotsAnD8IW+pzb7X tx7Q== MIME-Version: 1.0 X-Received: by 10.202.175.143 with SMTP id y137mr26640701oie.22.1440520997070; Tue, 25 Aug 2015 09:43:17 -0700 (PDT) Received: by 10.60.176.138 with HTTP; Tue, 25 Aug 2015 09:43:16 -0700 (PDT) In-Reply-To: References: Date: Tue, 25 Aug 2015 12:43:16 -0400 Message-ID: From: Alia Atlas To: Linda Dunbar Content-Type: multipart/alternative; boundary=001a113ce89e526d7a051e256e9b Archived-At: X-Mailman-Approved-At: Tue, 25 Aug 2015 09:48:03 -0700 Cc: i2nsf@ietf.org, Kathleen Moriarty Subject: Re: [I2nsf] comments on I2NSF charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Aug 2015 16:45:40 -0000 --001a113ce89e526d7a051e256e9b Content-Type: text/plain; charset=UTF-8 Looks good - thank you! Alia On Tue, Aug 25, 2015 at 12:04 PM, Linda Dunbar wrote: > Alia, > > All the comments/replies (including operators) from the I2NSF mailing list > support I2NSF focusing on the single headed control first and support your > suggested changes. > > So I updated the I2NSF charter on the I2NSF wiki : > https://sites.google.com/site/interface2nsf/home > > To make it easier for your review, here is the wording I changed for > "single headed control": > > *"Controlling and monitoring aspects of NSFs include the ability to > specify rules (by a single controller at the first phase), query, and > monitor NSFs by one or more management entities. The initial phase of > I2NSF will only consider one single controller that can specify or change > rules to NSFs because multi-headed control requires the coordination to > avoid potential conflict of rules. The NSFs can be monitored by multiple > entities, but the Database update and synchronization among multiple > management entities are out of the I2NSF scope."* > > > > Thank you very much. > > Linda > > On Mon, Aug 24, 2015 at 4:27 PM, Alia Atlas wrote: > >> I took a look at the charter at >> https://sites.google.com/site/interface2nsf/home . >> In general, this looks plausible. I do have a few comments. >> >> First, could you consider and add clarity around whether I2NSF is >> assuming single-headed control (as is common in network management systems >> or controllers) or is assuming multi-headed control (as I2RS does)? >> >> Second, I'd propose the following minor modification: >> >> Replace: >> "However, I2NSF will provide a forum for Informational drafts on data >> models, APIs, etc. that demonstrate how more complex Service Layer policies >> and formats may be translated to Capability Layer functions." >> With >> "However, I2NSF will provide a discussion forum for Informational drafts >> on data models, APIs, etc. that demonstrate how more complex Service Layer >> policies and formats may be translated to Capability Layer functions. Such >> documents would be pursued outside the WG." >> >> Otherwise, it looks reasonable. >> >> Thanks, >> Alia >> >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf >> >> > --001a113ce89e526d7a051e256e9b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Looks good - thank you!

Alia

On Tue, Aug 25, = 2015 at 12:04 PM, Linda Dunbar <ietf.dunbar@gmail.com> w= rote:
Alia,
<= div>
All=C2=A0the comments/replies=C2=A0(including operators)= from the I2NSF mailing list support I2NSF focusing on the single headed co= ntrol first and support your suggested changes.

S= o I updated the I2NSF charter on the I2NSF wiki :

To make= it easier for your review, here is the wording I changed for "single = headed control":

"Controlling and monitoring aspects of NSFs include the ability to specify rules (by a s= ingle controller at the first phase), query, and monitor NSFs by one or more management entities. =C2=A0The initial phase of I2NSF will only consider one single controller that can specify or chang= e rules to NSFs because multi-headed control requires the coordination=C2=A0to avoi= d=C2=A0potential conflict of rules. The NSFs can be monitored by multiple entities, but the Database update and synchronization among multiple management entities are = out of the I2NSF scope."

=C2=A0
Thank you very much.
=

Linda
=

= On Mon, Aug 24, 2015 at 4:27 PM, Alia Atlas <akatlas@gmail.com> wrote:
I took a look at the charter at=C2=A0https://sites.google.com/site/interface2nsf/= home=C2=A0.
In general, this looks p= lausible.=C2=A0 I do have a few comments.

First, c= ould you consider and add clarity around whether I2NSF is assuming single-h= eaded control (as is common in network management systems or controllers) o= r is assuming multi-headed control (as I2RS does)?

Second, I'd propose the following minor modification:

Replace:
"However, I2NSF wil= l provide a forum for Informational drafts on data models, APIs, etc. that = demonstrate how more complex Service Layer policies and formats may be tran= slated to Capability Layer functions."
With
"However, I2NSF will provide a discussion= forum for Informational drafts on data models, APIs, etc. that demonstrate= how more complex Service Layer policies and formats may be translated to C= apability Layer functions.=C2=A0 Such documents would be pursued outside th= e WG."

Otherwise, it looks reasonable.
=
Thanks,=
Alia

__________________________________________= _____
I2nsf mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf



--001a113ce89e526d7a051e256e9b-- From nobody Tue Aug 25 14:15:35 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 643751B2A5D for ; Tue, 25 Aug 2015 14:15:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.054 X-Spam-Level: X-Spam-Status: No, score=-99.054 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gFkXjEZBT_E2 for ; Tue, 25 Aug 2015 14:15:32 -0700 (PDT) Received: from hickoryhill-consulting.com (hhc-web3.hickoryhill-consulting.com [64.9.205.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 401A41A901C for ; Tue, 25 Aug 2015 14:15:32 -0700 (PDT) X-Default-Received-SPF: pass (skip=forwardok (res=PASS)) x-ip-name=174.124.218.207; From: "Susan Hares" To: , , References: <8d6235ed117a453984d379be84f8674f@rew09926dag07c.domain1.systemhost.net> In-Reply-To: <8d6235ed117a453984d379be84f8674f@rew09926dag07c.domain1.systemhost.net> Date: Tue, 25 Aug 2015 17:15:26 -0400 Message-ID: <00f101d0df7b$2a3d5b60$7eb81220$@ndzh.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00F2_01D0DF59.A3302830" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQEyQn9yLZsYGff6zaU/sccKIL45LAKsZwx2AeCuh++fNgdEEA== Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: Cc: i2nsf@ietf.org, kathleen.moriarty.ietf@gmail.com Subject: Re: [I2nsf] comments on I2NSF charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Aug 2015 21:15:34 -0000 This is a multipart message in MIME format. ------=_NextPart_000_00F2_01D0DF59.A3302830 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Joe, Linda and all:=20 =20 I2RS considered multi-headed control in order to deal with the error = case of two I2RS clients trying to write to the same node in a data = model. =20 =20 We are in the midst of discussing in the I2RS finalizing of requirements = for I2RS revision to NETCONF can handle this error case. As long as you = realize where the problem is, you can make a lot of progress by focusing = on other issues before you come back to this point.=20 =20 Sue Hares=20 I2RS co-chair =20 From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of = joe.parrott@bt.com Sent: Tuesday, August 25, 2015 5:39 AM To: ietf.dunbar@gmail.com; akatlas@gmail.com Cc: i2nsf@ietf.org; kathleen.moriarty.ietf@gmail.com Subject: Re: [I2nsf] comments on I2NSF charter =20 I agree, I don=E2=80=99t think it=E2=80=99s necessary to consider = multi-headed control at this point and would support re-using the good = work i2rs is doing if/when we do require it. =20 I also agree with Alia=E2=80=99s suggested wording change to focus the = scope. =20 Thanks, Joe =20 From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Linda Dunbar Sent: 24 August 2015 23:25 To: Alia Atlas Cc: i2nsf@ietf.org; Kathleen Moriarty Subject: Re: [I2nsf] comments on I2NSF charter =20 Thank Alia for the useful comment.=20 =20 IMHO, I2NSF should focus on Single-headed control first.=20 =20 With I2RS one step ahead in debating/specifying the proper mechanism to = ensure the network integrity with multi-headed control, I2NSF can = breathe a bit. I hope that I2NSF can borrow or simply refer to the = multi-headed control mechanism defined by I2RS when it is finalized. =20 Thank you for the suggested wording change. I like it. If I = don=E2=80=99t hear any objection, I will change the wiki by tomorrow. =20 =20 Linda =20 On Mon, Aug 24, 2015 at 4:27 PM, Alia Atlas wrote: I took a look at the charter at = = https://sites.google.com/site/interface2nsf/home . In general, this looks plausible. I do have a few comments. =20 First, could you consider and add clarity around whether I2NSF is = assuming single-headed control (as is common in network management = systems or controllers) or is assuming multi-headed control (as I2RS = does)? =20 Second, I'd propose the following minor modification: =20 Replace: "However, I2NSF will provide a forum for Informational drafts on data = models, APIs, etc. that demonstrate how more complex Service Layer = policies and formats may be translated to Capability Layer functions." With "However, I2NSF will provide a discussion forum for Informational drafts = on data models, APIs, etc. that demonstrate how more complex Service = Layer policies and formats may be translated to Capability Layer = functions. Such documents would be pursued outside the WG." =20 Otherwise, it looks reasonable. =20 Thanks, Alia _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://www.ietf.org/mailman/listinfo/i2nsf =20 ------=_NextPart_000_00F2_01D0DF59.A3302830 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Joe, Linda and all:

 

I2RS considered multi-headed control in order to deal with the error = case of two I2RS clients trying to write to the same node in a data = model.=C2=A0

 

We are in the midst of discussing in the I2RS finalizing of = requirements for I2RS revision to NETCONF can handle this error case. As = long as you realize where the problem is, you can make a lot of progress = by focusing on other issues before you come back to this point. =

 

Sue Hares

I2RS co-chair

 

From:= = I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of = joe.parrott@bt.com
Sent: Tuesday, August 25, 2015 5:39 = AM
To: ietf.dunbar@gmail.com; akatlas@gmail.com
Cc: = i2nsf@ietf.org; kathleen.moriarty.ietf@gmail.com
Subject: Re: = [I2nsf] comments on I2NSF charter

 

I agree, I don=E2=80=99t think it=E2=80=99s necessary to consider = multi-headed control at this point and would support re-using the good = work i2rs is doing if/when we do require it.

 

I also agree with Alia=E2=80=99s suggested wording change to focus = the scope.

 

Thanks,

Joe

 

From: I2nsf [mailto:i2nsf-bounces@ietf.org]= On Behalf Of Linda Dunbar
Sent: 24 August 2015 = 23:25
To: Alia Atlas <akatlas@gmail.com>
Cc:= i2nsf@ietf.org; Kathleen Moriarty = <kathleen.moriarty.ietf@g= mail.com>
Subject: Re: [I2nsf] comments on I2NSF = charter

 

Thank Alia for the useful comment.

 

IMHO, I2NSF should focus on Single-headed control first.

 

With I2RS one step ahead  in debating/specifying the proper = mechanism to ensure the network integrity with multi-headed control, = I2NSF can breathe a bit. I hope that I2NSF can borrow or simply refer to = the multi-headed control mechanism defined by I2RS when it is = finalized.

 

Thank you for the suggested wording change. I like it. If I = don=E2=80=99t hear any objection, I will change the wiki by tomorrow. =  

 

Linda

 

On Mon, Aug 24, 2015 at 4:27 PM, = Alia Atlas <akatlas@gmail.com> = wrote:

I took a look at the = charter at https://sites.google.com/site/interface2nsf/hom= e .

In general, this looks plausible.  I do have a few = comments.

 

First, could you consider and add = clarity around whether I2NSF is assuming single-headed control (as is = common in network management systems or controllers) or is assuming = multi-headed control (as I2RS does)?

 

Second, I'd propose the following = minor modification:

 

Replace:

"However, I2NSF will provide a forum for Informational drafts on data = models, APIs, etc. that demonstrate how more complex Service Layer = policies and formats may be translated to Capability Layer = functions."

With

"However, I2NSF will provide a discussion forum for Informational = drafts on data models, APIs, etc. that demonstrate how more complex = Service Layer policies and formats may be translated to Capability Layer = functions.  Such documents would be pursued outside the = WG."

 

Otherwise, it looks reasonable.

 

Thanks,

Alia


_______________________________________________
I2nsf= mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf

 

------=_NextPart_000_00F2_01D0DF59.A3302830-- From nobody Tue Aug 25 18:20:02 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0BED1A8BBE for ; Tue, 25 Aug 2015 18:19:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.011 X-Spam-Level: X-Spam-Status: No, score=-7.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b9KIKfdCWirv for ; Tue, 25 Aug 2015 18:19:51 -0700 (PDT) Received: from mxe02.gs.com (mxe02.gs.com [199.99.47.104]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C25D81A8A42 for ; Tue, 25 Aug 2015 18:19:49 -0700 (PDT) Received: from pps.filterd (gsppabdp01sd.idz.gs.com [127.0.0.1]) by gsppabdp01sd.idz.gs.com (8.14.5/8.14.5) with SMTP id t7Q1FOBq012882; Tue, 25 Aug 2015 21:19:44 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gs.com; h=from : to : cc : date : subject : message-id : references : in-reply-to : content-type : mime-version; s=gs201505; bh=xBDrj4KhDQ+wfVAw8T7LFlSR95Mx7AB8b2oIMqpLOCg=; b=fGAY/4gZoaJZPsp8E2hTmOCyey0Q3Mrc3t5Ij+dZzJ1nEhu4b4qRziaVDbWlveoCf+k8 o/bmSeG4xjYzeXEtqXvzdQucXYp4h3uPO31dCKTVyZTGJ7GJmuQSD9Hazm7bWj9KRdPI OTudSOzHHmuq8rAP6cmVM3RDOUAS5xDWERqSBb0BjK/PtzoKfIPaArjwwD7aGcllyH89 F2HYsXSq7T0tMJt/ZkUXsJsJJKfXCKHW79iwd36khxtmkEp0BzpROHgFu3lyE6AF8p5o kjEPa+sO9hDMqIt2TFvPfINg6bF43MixE9V6a35k1pdkcwXtn3+3ltfoLtBpVtbbPX7h +g== Received: from gsppacdp02nd.inz.gs.com ([10.205.68.212]) by gsppabdp01sd.idz.gs.com with ESMTP id 1wh0v4976d-1; Tue, 25 Aug 2015 21:19:44 -0400 Received: from pps.filterd (gsppacdp02nd.inz.gs.com [127.0.0.1]) by gsppacdp02nd.inz.gs.com (8.14.5/8.14.5) with SMTP id t7Q1IAht022990; Tue, 25 Aug 2015 21:19:44 -0400 Received: from gshccdp13ex.firmwide.corp.gs.com (gshccdp13ex.firmwide.corp.gs.com [10.135.172.91]) by gsppacdp02nd.inz.gs.com with ESMTP id 1wgvg6b6fa-1; Tue, 25 Aug 2015 21:19:44 -0400 Received: from GSCMAMP19EX.firmwide.corp.gs.com ([139.172.38.36]) by gshccdp13ex.firmwide.corp.gs.com ([10.135.172.91]) with mapi; Tue, 25 Aug 2015 21:19:44 -0400 From: "Zarny, Myo" To: "'Susan Hares'" , "'joe.parrott@bt.com'" , "'ietf.dunbar@gmail.com'" , "'akatlas@gmail.com'" Date: Tue, 25 Aug 2015 21:19:42 -0400 Thread-Topic: [I2nsf] comments on I2NSF charter Thread-Index: AQEyQn9yLZsYGff6zaU/sccKIL45LAKsZwx2AeCuh++fNgdEEIAAQqRw Message-ID: References: <8d6235ed117a453984d379be84f8674f@rew09926dag07c.domain1.systemhost.net> <00f101d0df7b$2a3d5b60$7eb81220$@ndzh.com> In-Reply-To: <00f101d0df7b$2a3d5b60$7eb81220$@ndzh.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-retentionstamp: Firmwide Content-Type: multipart/alternative; boundary="_000_A3233753A4B65F43BCA1B64DA99A9C23073631B76AGSCMAMP19EXfi_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.14.151, 1.0.33, 0.0.0000 definitions=2015-08-25_09:2015-08-24,2015-08-25,1970-01-01 signatures=0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.14.151, 1.0.33, 0.0.0000 definitions=2015-08-25_09:2015-08-24,2015-08-25,1970-01-01 signatures=0 Archived-At: Cc: "'i2nsf@ietf.org'" , "'kathleen.moriarty.ietf@gmail.com'" Subject: Re: [I2nsf] comments on I2NSF charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2015 01:19:56 -0000 --_000_A3233753A4B65F43BCA1B64DA99A9C23073631B76AGSCMAMP19EXfi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBhZ3JlZS4gSnVzdCBhcyB3ZeKAmXZlIGNob3NlbiB0byBmb2N1cyBvbiB0aGUgQ2FwYWJpbGl0 eSBMYXllciBmaXJzdCwgd2Ugc2hvdWxkIGZvY3VzIG9uIHRoZSBzaW5nbGUtY29udHJvbGxlciB1 c2UgY2FzZSBmaXJzdC4gQW5kIHdl4oCZbGwgaGF2ZSB0aGUgYmVuZWZpdCBvZiBsZXZlcmFnaW5n IEkyUlPigJlzIHdvcmsgb24gbXVsdGktaGVhZGVkIGNvbnRyb2wgbGF0ZXIuIE9mIGNvdXJzZSB3 aGF0ZXZlciBzb2x1dGlvbiBJMk5TRiBjb21lcyB1cCBmb3IgdGhlIHNpbmdsZSBjb250cm9sbGVy IGNhc2UgbXVzdG7igJl0IHByZWNsdWRlIHRoZSBtdWx0aS1jb250cm9sbGVyIGNhc2UuDQoNCkZy b206IEkybnNmIFttYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIFN1 c2FuIEhhcmVzDQpTZW50OiAyNSBBdWd1c3QgMjAxNSA1OjE1IFBNDQpUbzogam9lLnBhcnJvdHRA YnQuY29tOyBpZXRmLmR1bmJhckBnbWFpbC5jb207IGFrYXRsYXNAZ21haWwuY29tDQpDYzogaTJu c2ZAaWV0Zi5vcmc7IGthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tDQpTdWJqZWN0OiBS ZTogW0kybnNmXSBjb21tZW50cyBvbiBJMk5TRiBjaGFydGVyDQoNCkpvZSwgTGluZGEgYW5kIGFs bDoNCg0KSTJSUyBjb25zaWRlcmVkIG11bHRpLWhlYWRlZCBjb250cm9sIGluIG9yZGVyIHRvIGRl YWwgd2l0aCB0aGUgZXJyb3IgY2FzZSBvZiB0d28gSTJSUyBjbGllbnRzIHRyeWluZyB0byB3cml0 ZSB0byB0aGUgc2FtZSBub2RlIGluIGEgZGF0YSBtb2RlbC4NCg0KV2UgYXJlIGluIHRoZSBtaWRz dCBvZiBkaXNjdXNzaW5nIGluIHRoZSBJMlJTIGZpbmFsaXppbmcgb2YgcmVxdWlyZW1lbnRzIGZv ciBJMlJTIHJldmlzaW9uIHRvIE5FVENPTkYgY2FuIGhhbmRsZSB0aGlzIGVycm9yIGNhc2UuIEFz IGxvbmcgYXMgeW91IHJlYWxpemUgd2hlcmUgdGhlIHByb2JsZW0gaXMsIHlvdSBjYW4gbWFrZSBh IGxvdCBvZiBwcm9ncmVzcyBieSBmb2N1c2luZyBvbiBvdGhlciBpc3N1ZXMgYmVmb3JlIHlvdSBj b21lIGJhY2sgdG8gdGhpcyBwb2ludC4NCg0KU3VlIEhhcmVzDQpJMlJTIGNvLWNoYWlyDQoNCkZy b206IEkybnNmIFttYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIGpv ZS5wYXJyb3R0QGJ0LmNvbTxtYWlsdG86am9lLnBhcnJvdHRAYnQuY29tPg0KU2VudDogVHVlc2Rh eSwgQXVndXN0IDI1LCAyMDE1IDU6MzkgQU0NClRvOiBpZXRmLmR1bmJhckBnbWFpbC5jb208bWFp bHRvOmlldGYuZHVuYmFyQGdtYWlsLmNvbT47IGFrYXRsYXNAZ21haWwuY29tPG1haWx0bzpha2F0 bGFzQGdtYWlsLmNvbT4NCkNjOiBpMm5zZkBpZXRmLm9yZzxtYWlsdG86aTJuc2ZAaWV0Zi5vcmc+ OyBrYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbTxtYWlsdG86a2F0aGxlZW4ubW9yaWFy dHkuaWV0ZkBnbWFpbC5jb20+DQpTdWJqZWN0OiBSZTogW0kybnNmXSBjb21tZW50cyBvbiBJMk5T RiBjaGFydGVyDQoNCkkgYWdyZWUsIEkgZG9u4oCZdCB0aGluayBpdOKAmXMgbmVjZXNzYXJ5IHRv IGNvbnNpZGVyIG11bHRpLWhlYWRlZCBjb250cm9sIGF0IHRoaXMgcG9pbnQgYW5kIHdvdWxkIHN1 cHBvcnQgcmUtdXNpbmcgdGhlIGdvb2Qgd29yayBpMnJzIGlzIGRvaW5nIGlmL3doZW4gd2UgZG8g cmVxdWlyZSBpdC4NCg0KSSBhbHNvIGFncmVlIHdpdGggQWxpYeKAmXMgc3VnZ2VzdGVkIHdvcmRp bmcgY2hhbmdlIHRvIGZvY3VzIHRoZSBzY29wZS4NCg0KVGhhbmtzLA0KSm9lDQoNCkZyb206IEky bnNmIFttYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIExpbmRhIER1 bmJhcg0KU2VudDogMjQgQXVndXN0IDIwMTUgMjM6MjUNClRvOiBBbGlhIEF0bGFzIDxha2F0bGFz QGdtYWlsLmNvbTxtYWlsdG86YWthdGxhc0BnbWFpbC5jb20+Pg0KQ2M6IGkybnNmQGlldGYub3Jn PG1haWx0bzppMm5zZkBpZXRmLm9yZz47IEthdGhsZWVuIE1vcmlhcnR5IDxrYXRobGVlbi5tb3Jp YXJ0eS5pZXRmQGdtYWlsLmNvbTxtYWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5j b20+Pg0KU3ViamVjdDogUmU6IFtJMm5zZl0gY29tbWVudHMgb24gSTJOU0YgY2hhcnRlcg0KDQoN ClRoYW5rIEFsaWEgZm9yIHRoZSB1c2VmdWwgY29tbWVudC4NCg0KDQoNCklNSE8sIEkyTlNGIHNo b3VsZCBmb2N1cyBvbiBTaW5nbGUtaGVhZGVkIGNvbnRyb2wgZmlyc3QuDQoNCg0KDQpXaXRoIEky UlMgb25lIHN0ZXAgYWhlYWQgIGluIGRlYmF0aW5nL3NwZWNpZnlpbmcgdGhlIHByb3BlciBtZWNo YW5pc20gdG8gZW5zdXJlIHRoZSBuZXR3b3JrIGludGVncml0eSB3aXRoIG11bHRpLWhlYWRlZCBj b250cm9sLCBJMk5TRiBjYW4gYnJlYXRoZSBhIGJpdC4gSSBob3BlIHRoYXQgSTJOU0YgY2FuIGJv cnJvdyBvciBzaW1wbHkgcmVmZXIgdG8gdGhlIG11bHRpLWhlYWRlZCBjb250cm9sIG1lY2hhbmlz bSBkZWZpbmVkIGJ5IEkyUlMgd2hlbiBpdCBpcyBmaW5hbGl6ZWQuDQoNCg0KDQpUaGFuayB5b3Ug Zm9yIHRoZSBzdWdnZXN0ZWQgd29yZGluZyBjaGFuZ2UuIEkgbGlrZSBpdC4gSWYgSSBkb27igJl0 IGhlYXIgYW55IG9iamVjdGlvbiwgSSB3aWxsIGNoYW5nZSB0aGUgd2lraSBieSB0b21vcnJvdy4N Cg0KDQoNCkxpbmRhDQoNCk9uIE1vbiwgQXVnIDI0LCAyMDE1IGF0IDQ6MjcgUE0sIEFsaWEgQXRs YXMgPGFrYXRsYXNAZ21haWwuY29tPG1haWx0bzpha2F0bGFzQGdtYWlsLmNvbT4+IHdyb3RlOg0K SSB0b29rIGEgbG9vayBhdCB0aGUgY2hhcnRlciBhdCBodHRwczovL3NpdGVzLmdvb2dsZS5jb20v c2l0ZS9pbnRlcmZhY2UybnNmL2hvbWUgLg0KSW4gZ2VuZXJhbCwgdGhpcyBsb29rcyBwbGF1c2li bGUuICBJIGRvIGhhdmUgYSBmZXcgY29tbWVudHMuDQoNCkZpcnN0LCBjb3VsZCB5b3UgY29uc2lk ZXIgYW5kIGFkZCBjbGFyaXR5IGFyb3VuZCB3aGV0aGVyIEkyTlNGIGlzIGFzc3VtaW5nIHNpbmds ZS1oZWFkZWQgY29udHJvbCAoYXMgaXMgY29tbW9uIGluIG5ldHdvcmsgbWFuYWdlbWVudCBzeXN0 ZW1zIG9yIGNvbnRyb2xsZXJzKSBvciBpcyBhc3N1bWluZyBtdWx0aS1oZWFkZWQgY29udHJvbCAo YXMgSTJSUyBkb2VzKT8NCg0KU2Vjb25kLCBJJ2QgcHJvcG9zZSB0aGUgZm9sbG93aW5nIG1pbm9y IG1vZGlmaWNhdGlvbjoNCg0KUmVwbGFjZToNCiJIb3dldmVyLCBJMk5TRiB3aWxsIHByb3ZpZGUg YSBmb3J1bSBmb3IgSW5mb3JtYXRpb25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQSXMsIGV0 Yy4gdGhhdCBkZW1vbnN0cmF0ZSBob3cgbW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5ZXIgcG9saWNp ZXMgYW5kIGZvcm1hdHMgbWF5IGJlIHRyYW5zbGF0ZWQgdG8gQ2FwYWJpbGl0eSBMYXllciBmdW5j dGlvbnMuIg0KV2l0aA0KIkhvd2V2ZXIsIEkyTlNGIHdpbGwgcHJvdmlkZSBhIGRpc2N1c3Npb24g Zm9ydW0gZm9yIEluZm9ybWF0aW9uYWwgZHJhZnRzIG9uIGRhdGEgbW9kZWxzLCBBUElzLCBldGMu IHRoYXQgZGVtb25zdHJhdGUgaG93IG1vcmUgY29tcGxleCBTZXJ2aWNlIExheWVyIHBvbGljaWVz IGFuZCBmb3JtYXRzIG1heSBiZSB0cmFuc2xhdGVkIHRvIENhcGFiaWxpdHkgTGF5ZXIgZnVuY3Rp b25zLiAgU3VjaCBkb2N1bWVudHMgd291bGQgYmUgcHVyc3VlZCBvdXRzaWRlIHRoZSBXRy4iDQoN Ck90aGVyd2lzZSwgaXQgbG9va3MgcmVhc29uYWJsZS4NCg0KVGhhbmtzLA0KQWxpYQ0KDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KSTJuc2YgbWFpbGlu ZyBsaXN0DQpJMm5zZkBpZXRmLm9yZzxtYWlsdG86STJuc2ZAaWV0Zi5vcmc+DQpodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQoNCg== --_000_A3233753A4B65F43BCA1B64DA99A9C23073631B76AGSCMAMP19EXfi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj1Db250ZW50LVR5cGUgY29udGVu dD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij48bWV0YSBuYW1lPUdlbmVyYXRvciBjb250ZW50 PSJNaWNyb3NvZnQgV29yZCAxNCAoZmlsdGVyZWQgbWVkaXVtKSI+PHN0eWxlPjwhLS0NCi8qIEZv bnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglw YW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5 OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1z b0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0 LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xs b3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQ0KcA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLW1h cmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250 LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCnAuTXNvQWNldGF0ZSwgbGkuTXNv QWNldGF0ZSwgZGl2Lk1zb0FjZXRhdGUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1z dHlsZS1saW5rOiJCYWxsb29uIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjguMHB0Ow0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJz YW5zLXNlcmlmIjt9DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0KCXttc28tc3R5bGUtbmFtZToiQmFs bG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7fQ0K c3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxT dHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp Iiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNh bnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxl LXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlv bjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGlu O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNw aWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBk YXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPjwvaGVhZD48Ym9k eSBsYW5nPUVOLVVTIGxpbms9Ymx1ZSB2bGluaz1wdXJwbGU+PGRpdiBjbGFzcz1Xb3JkU2VjdGlv bjE+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+SSBhZ3JlZS4gSnVz dCBhcyB3ZeKAmXZlIGNob3NlbiB0byBmb2N1cyBvbiB0aGUgQ2FwYWJpbGl0eSBMYXllciBmaXJz dCwgd2Ugc2hvdWxkIGZvY3VzIG9uIHRoZSBzaW5nbGUtY29udHJvbGxlciB1c2UgY2FzZSBmaXJz dC4gQW5kIHdl4oCZbGwgaGF2ZSB0aGUgYmVuZWZpdCBvZiBsZXZlcmFnaW5nIEkyUlPigJlzIHdv cmsgb24gbXVsdGktaGVhZGVkIGNvbnRyb2wgbGF0ZXIuIE9mIGNvdXJzZSB3aGF0ZXZlciBzb2x1 dGlvbiBJMk5TRiBjb21lcyB1cCBmb3IgdGhlIHNpbmdsZSBjb250cm9sbGVyIGNhc2UgbXVzdG7i gJl0IHByZWNsdWRlIHRoZSBtdWx0aS1jb250cm9sbGVyIGNhc2UuPG86cD48L286cD48L3NwYW4+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD48ZGl2PjxkaXYgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci10b3A6 c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluJz48cCBjbGFzcz1N c29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxiPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+RnJvbTo8L3NwYW4+ PC9iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJUYWhvbWEiLCJz YW5zLXNlcmlmIic+IEkybnNmIFttYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10gPGI+T24g QmVoYWxmIE9mIDwvYj5TdXNhbiBIYXJlczxicj48Yj5TZW50OjwvYj4gMjUgQXVndXN0IDIwMTUg NToxNSBQTTxicj48Yj5Ubzo8L2I+IGpvZS5wYXJyb3R0QGJ0LmNvbTsgaWV0Zi5kdW5iYXJAZ21h aWwuY29tOyBha2F0bGFzQGdtYWlsLmNvbTxicj48Yj5DYzo8L2I+IGkybnNmQGlldGYub3JnOyBr YXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbTxicj48Yj5TdWJqZWN0OjwvYj4gUmU6IFtJ Mm5zZl0gY29tbWVudHMgb24gSTJOU0YgY2hhcnRlcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48L2Rp dj48L2Rpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbWFyZ2luLWxlZnQ6LjVp bic+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5Kb2UsIExpbmRhIGFuZCBhbGw6IDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNz PU1zb05vcm1hbCBzdHlsZT0nbWFyZ2luLWxlZnQ6LjVpbic+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdE Jz5JMlJTIGNvbnNpZGVyZWQgbXVsdGktaGVhZGVkIGNvbnRyb2wgaW4gb3JkZXIgdG8gZGVhbCB3 aXRoIHRoZSBlcnJvciBjYXNlIG9mIHR3byBJMlJTIGNsaWVudHMgdHJ5aW5nIHRvIHdyaXRlIHRv IHRoZSBzYW1lIG5vZGUgaW4gYSBkYXRhIG1vZGVsLiZuYnNwOyA8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tbGVmdDouNWluJz48c3BhbiBzdHls ZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2Nv bG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+V2UgYXJl IGluIHRoZSBtaWRzdCBvZiBkaXNjdXNzaW5nIGluIHRoZSBJMlJTIGZpbmFsaXppbmcgb2YgcmVx dWlyZW1lbnRzIGZvciBJMlJTIHJldmlzaW9uIHRvIE5FVENPTkYgY2FuIGhhbmRsZSB0aGlzIGVy cm9yIGNhc2UuIEFzIGxvbmcgYXMgeW91IHJlYWxpemUgd2hlcmUgdGhlIHByb2JsZW0gaXMsIHlv dSBjYW4gbWFrZSBhIGxvdCBvZiBwcm9ncmVzcyBieSBmb2N1c2luZyBvbiBvdGhlciBpc3N1ZXMg YmVmb3JlIHlvdSBjb21lIGJhY2sgdG8gdGhpcyBwb2ludC4gPG86cD48L286cD48L3NwYW4+PC9w PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbWFyZ2luLWxlZnQ6LjVpbic+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xv cjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFs IHN0eWxlPSdtYXJnaW4tbGVmdDouNWluJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlN1ZSBIYXJl cyA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4t bGVmdDouNWluJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkkyUlMgY28tY2hhaXI8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tbGVmdDouNWluJz48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48ZGl2Pjxk aXYgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRk aW5nOjMuMHB0IDBpbiAwaW4gMGluJz48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1s ZWZ0Oi41aW4nPjxiPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJU YWhvbWEiLCJzYW5zLXNlcmlmIic+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+IEkybnNmIFs8YSBo cmVmPSJtYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOmkybnNmLWJvdW5jZXNA aWV0Zi5vcmc8L2E+XSA8Yj5PbiBCZWhhbGYgT2YgPC9iPjxhIGhyZWY9Im1haWx0bzpqb2UucGFy cm90dEBidC5jb20iPmpvZS5wYXJyb3R0QGJ0LmNvbTwvYT48YnI+PGI+U2VudDo8L2I+IFR1ZXNk YXksIEF1Z3VzdCAyNSwgMjAxNSA1OjM5IEFNPGJyPjxiPlRvOjwvYj4gPGEgaHJlZj0ibWFpbHRv OmlldGYuZHVuYmFyQGdtYWlsLmNvbSI+aWV0Zi5kdW5iYXJAZ21haWwuY29tPC9hPjsgPGEgaHJl Zj0ibWFpbHRvOmFrYXRsYXNAZ21haWwuY29tIj5ha2F0bGFzQGdtYWlsLmNvbTwvYT48YnI+PGI+ Q2M6PC9iPiA8YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmciPmkybnNmQGlldGYub3JnPC9h PjsgPGEgaHJlZj0ibWFpbHRvOmthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tIj5rYXRo bGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbTwvYT48YnI+PGI+U3ViamVjdDo8L2I+IFJlOiBb STJuc2ZdIGNvbW1lbnRzIG9uIEkyTlNGIGNoYXJ0ZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PC9k aXY+PC9kaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tbGVmdDouNWluJz48bzpw PiZuYnNwOzwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41 aW4nPjxzcGFuIGxhbmc9RU4tR0Igc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5JIGFncmVlLCBJIGRvbuKAmXQg dGhpbmsgaXTigJlzIG5lY2Vzc2FyeSB0byBjb25zaWRlciBtdWx0aS1oZWFkZWQgY29udHJvbCBh dCB0aGlzIHBvaW50IGFuZCB3b3VsZCBzdXBwb3J0IHJlLXVzaW5nIHRoZSBnb29kIHdvcmsgaTJy cyBpcyBkb2luZyBpZi93aGVuIHdlIGRvIHJlcXVpcmUgaXQuPG86cD48L286cD48L3NwYW4+PC9w PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbWFyZ2luLWxlZnQ6LjVpbic+PHNwYW4gbGFuZz1F Ti1HQiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFz cz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0Igc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz5JIGFsc28gYWdyZWUgd2l0aCBBbGlh4oCZcyBzdWdnZXN0ZWQgd29yZGlu ZyBjaGFuZ2UgdG8gZm9jdXMgdGhlIHNjb3BlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFz cz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0Igc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsIHN0eWxlPSdtYXJnaW4tbGVmdDouNWluJz48c3BhbiBsYW5nPUVOLUdCIHN0eWxlPSdmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFG NDk3RCc+VGhhbmtzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5 bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0Igc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5K b2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4t bGVmdDouNWluJz48c3BhbiBsYW5nPUVOLUdCIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPjxkaXYgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk IGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCc+PGRpdj48ZGl2IHN0eWxlPSdi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbic+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tbGVmdDouNWluJz48 Yj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNh bnMtc2VyaWYiJz5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIic+IEkybnNmIFs8YSBocmVmPSJtYWls dG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmc8 L2E+XSA8Yj5PbiBCZWhhbGYgT2YgPC9iPkxpbmRhIER1bmJhcjxicj48Yj5TZW50OjwvYj4gMjQg QXVndXN0IDIwMTUgMjM6MjU8YnI+PGI+VG86PC9iPiBBbGlhIEF0bGFzICZsdDs8YSBocmVmPSJt YWlsdG86YWthdGxhc0BnbWFpbC5jb20iPmFrYXRsYXNAZ21haWwuY29tPC9hPiZndDs8YnI+PGI+ Q2M6PC9iPiA8YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmciPmkybnNmQGlldGYub3JnPC9h PjsgS2F0aGxlZW4gTW9yaWFydHkgJmx0OzxhIGhyZWY9Im1haWx0bzprYXRobGVlbi5tb3JpYXJ0 eS5pZXRmQGdtYWlsLmNvbSI+a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb208L2E+Jmd0 Ozxicj48Yj5TdWJqZWN0OjwvYj4gUmU6IFtJMm5zZl0gY29tbWVudHMgb24gSTJOU0YgY2hhcnRl cjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48L2Rpdj48L2Rpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5 bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0I+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPjxkaXY+PHAgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJp Z2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDouNWluO21hcmdpbi1ib3R0b206 LjAwMDFwdCc+PHNwYW4gbGFuZz1FTi1HQiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlRoYW5rIEFsaWEgZm9y IHRoZSB1c2VmdWwgY29tbWVudC4gPC9zcGFuPjxzcGFuIGxhbmc9RU4tR0I+PG86cD48L286cD48 L3NwYW4+PC9wPjxwIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDow aW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9tOi4wMDAx cHQnPjxzcGFuIGxhbmc9RU4tR0Igc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PHNwYW4g bGFuZz1FTi1HQj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDou NWluO21hcmdpbi1ib3R0b206LjAwMDFwdCc+PHNwYW4gbGFuZz1FTi1HQiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPklNSE8sIEkyTlNGIHNob3VsZCBmb2N1cyBvbiBTaW5nbGUtaGVhZGVkIGNvbnRyb2wgZmly c3QuIDwvc3Bhbj48c3BhbiBsYW5nPUVOLUdCPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBzdHls ZT0nbXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206 MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Jz48c3BhbiBsYW5nPUVO LUdCIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9RU4tR0I+PG86cD48 L286cD48L3NwYW4+PC9wPjxwIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1y aWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9t Oi4wMDAxcHQnPjxzcGFuIGxhbmc9RU4tR0Igc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5XaXRoIEkyUlMgb25l IHN0ZXAgYWhlYWQgJm5ic3A7aW4gZGViYXRpbmcvc3BlY2lmeWluZyB0aGUgcHJvcGVyIG1lY2hh bmlzbSB0byBlbnN1cmUgdGhlIG5ldHdvcmsgaW50ZWdyaXR5IHdpdGggbXVsdGktaGVhZGVkIGNv bnRyb2wsIEkyTlNGIGNhbiBicmVhdGhlIGEgYml0LiBJIGhvcGUgdGhhdCBJMk5TRiBjYW4gYm9y cm93IG9yIHNpbXBseSByZWZlciB0byB0aGUgbXVsdGktaGVhZGVkIGNvbnRyb2wgbWVjaGFuaXNt IGRlZmluZWQgYnkgSTJSUyB3aGVuIGl0IGlzIGZpbmFsaXplZC48L3NwYW4+PHNwYW4gbGFuZz1F Ti1HQj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDow aW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDouNWluO21h cmdpbi1ib3R0b206LjAwMDFwdCc+PHNwYW4gbGFuZz1FTi1HQiBzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZu YnNwOzwvc3Bhbj48c3BhbiBsYW5nPUVOLUdCPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBzdHls ZT0nbXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206 MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Jz48c3BhbiBsYW5nPUVO LUdCIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7Y29sb3I6IzFGNDk3RCc+VGhhbmsgeW91IGZvciB0aGUgc3VnZ2VzdGVkIHdvcmRpbmcg Y2hhbmdlLiBJIGxpa2UgaXQuIElmIEkgZG9u4oCZdCBoZWFyIGFueSBvYmplY3Rpb24sIEkgd2ls bCBjaGFuZ2UgdGhlIHdpa2kgYnkgdG9tb3Jyb3cuICZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPUVO LUdCPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OjBp bjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0Oi41aW47bWFy Z2luLWJvdHRvbTouMDAwMXB0Jz48c3BhbiBsYW5nPUVOLUdCIHN0eWxlPSdmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5i c3A7PC9zcGFuPjxzcGFuIGxhbmc9RU4tR0I+PG86cD48L286cD48L3NwYW4+PC9wPjxwIHN0eWxl PSdtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTow aW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQnPjxzcGFuIGxhbmc9RU4t R0Igc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNl cmlmIjtjb2xvcjojMUY0OTdEJz5MaW5kYTwvc3Bhbj48c3BhbiBsYW5nPUVOLUdCPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbWFyZ2lu LWxlZnQ6LjVpbic+PHNwYW4gbGFuZz1FTi1HQj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxh bmc9RU4tR0I+T24gTW9uLCBBdWcgMjQsIDIwMTUgYXQgNDoyNyBQTSwgQWxpYSBBdGxhcyAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmFrYXRsYXNAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+YWthdGxh c0BnbWFpbC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PGJsb2NrcXVv dGUgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFk ZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo1LjBwdCc+PGRpdj48cCBjbGFzcz1Nc29O b3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0I+SSB0b29rIGEg bG9vayBhdCB0aGUgY2hhcnRlciBhdCZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vc2l0ZXMuZ29vZ2xl LmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaG9tZSIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxl PSdmb250LXNpemU6OS41cHQnPmh0dHBzOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFj ZTJuc2YvaG9tZTwvc3Bhbj48L2E+Jm5ic3A7LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48ZGl2Pjxw IGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbWFyZ2luLWxlZnQ6LjVpbic+PHNwYW4gbGFuZz1FTi1H Qj5JbiBnZW5lcmFsLCB0aGlzIGxvb2tzIHBsYXVzaWJsZS4mbmJzcDsgSSBkbyBoYXZlIGEgZmV3 IGNvbW1lbnRzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05v cm1hbCBzdHlsZT0nbWFyZ2luLWxlZnQ6LjVpbic+PHNwYW4gbGFuZz1FTi1HQj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21h cmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0I+Rmlyc3QsIGNvdWxkIHlvdSBjb25zaWRl ciBhbmQgYWRkIGNsYXJpdHkgYXJvdW5kIHdoZXRoZXIgSTJOU0YgaXMgYXNzdW1pbmcgc2luZ2xl LWhlYWRlZCBjb250cm9sIChhcyBpcyBjb21tb24gaW4gbmV0d29yayBtYW5hZ2VtZW50IHN5c3Rl bXMgb3IgY29udHJvbGxlcnMpIG9yIGlzIGFzc3VtaW5nIG11bHRpLWhlYWRlZCBjb250cm9sIChh cyBJMlJTIGRvZXMpPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1z b05vcm1hbCBzdHlsZT0nbWFyZ2luLWxlZnQ6LjVpbic+PHNwYW4gbGFuZz1FTi1HQj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9 J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0I+U2Vjb25kLCBJJ2QgcHJvcG9zZSB0 aGUgZm9sbG93aW5nIG1pbm9yIG1vZGlmaWNhdGlvbjo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PC9k aXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFu IGxhbmc9RU4tR0I+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjwvZGl2PjxkaXY+PHAgY2xh c3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tbGVmdDouNWluJz48c3BhbiBsYW5nPUVOLUdCPlJl cGxhY2U6PG86cD48L286cD48L3NwYW4+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFs IHN0eWxlPSdtYXJnaW4tbGVmdDouNWluJz48c3BhbiBsYW5nPUVOLUdCPiZxdW90Ozwvc3Bhbj48 c3BhbiBsYW5nPUVOLUdCIHN0eWxlPSdmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6YmxhY2snPkhvd2V2ZXIsIEkyTlNGIHdpbGwgcHJvdmlk ZSBhIGZvcnVtIGZvciBJbmZvcm1hdGlvbmFsIGRyYWZ0cyBvbiBkYXRhIG1vZGVscywgQVBJcywg ZXRjLiB0aGF0IGRlbW9uc3RyYXRlIGhvdyBtb3JlIGNvbXBsZXggU2VydmljZSBMYXllciBwb2xp Y2llcyBhbmQgZm9ybWF0cyBtYXkgYmUgdHJhbnNsYXRlZCB0byBDYXBhYmlsaXR5IExheWVyIGZ1 bmN0aW9ucy4mcXVvdDs8L3NwYW4+PHNwYW4gbGFuZz1FTi1HQj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4n PjxzcGFuIGxhbmc9RU4tR0Igc3R5bGU9J2ZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6IkNh bGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjpibGFjayc+V2l0aDwvc3Bhbj48c3BhbiBsYW5nPUVO LUdCPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBz dHlsZT0nbWFyZ2luLWxlZnQ6LjVpbic+PHNwYW4gbGFuZz1FTi1HQiBzdHlsZT0nZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOmJsYWNrJz4m cXVvdDtIb3dldmVyLCBJMk5TRiB3aWxsIHByb3ZpZGUgYSBkaXNjdXNzaW9uIGZvcnVtIGZvciBJ bmZvcm1hdGlvbmFsIGRyYWZ0cyBvbiBkYXRhIG1vZGVscywgQVBJcywgZXRjLiB0aGF0IGRlbW9u c3RyYXRlIGhvdyBtb3JlIGNvbXBsZXggU2VydmljZSBMYXllciBwb2xpY2llcyBhbmQgZm9ybWF0 cyBtYXkgYmUgdHJhbnNsYXRlZCB0byBDYXBhYmlsaXR5IExheWVyIGZ1bmN0aW9ucy4mbmJzcDsg U3VjaCBkb2N1bWVudHMgd291bGQgYmUgcHVyc3VlZCBvdXRzaWRlIHRoZSBXRy4mcXVvdDs8L3Nw YW4+PHNwYW4gbGFuZz1FTi1HQj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PC9kaXY+PGRpdj48cCBj bGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0I+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFs IHN0eWxlPSdtYXJnaW4tbGVmdDouNWluJz48c3BhbiBsYW5nPUVOLUdCIHN0eWxlPSdmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6YmxhY2sn Pk90aGVyd2lzZSwgaXQgbG9va3MgcmVhc29uYWJsZS48L3NwYW4+PHNwYW4gbGFuZz1FTi1HQj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9 J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0I+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tbGVmdDou NWluJz48c3BhbiBsYW5nPUVOLUdCIHN0eWxlPSdmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6YmxhY2snPlRoYW5rcyw8L3NwYW4+PHNwYW4g bGFuZz1FTi1HQj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29O b3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0Igc3R5bGU9J2Zv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjpi bGFjayc+QWxpYTwvc3Bhbj48c3BhbiBsYW5nPUVOLUdCPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48 L2Rpdj48L2Rpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDow aW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEyLjBwdDttYXJnaW4tbGVmdDouNWlu Jz48c3BhbiBsYW5nPUVOLUdCPjxicj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXzxicj5JMm5zZiBtYWlsaW5nIGxpc3Q8YnI+PGEgaHJlZj0ibWFpbHRvOkky bnNmQGlldGYub3JnIj5JMm5zZkBpZXRmLm9yZzwvYT48YnI+PGEgaHJlZj0iaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZiIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2Y8L2E+PG86cD48L286cD48L3NwYW4+ PC9wPjwvYmxvY2txdW90ZT48L2Rpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1s ZWZ0Oi41aW4nPjxzcGFuIGxhbmc9RU4tR0I+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjwv ZGl2PjwvZGl2PjwvZGl2PjwvYm9keT48L2h0bWw+ --_000_A3233753A4B65F43BCA1B64DA99A9C23073631B76AGSCMAMP19EXfi_-- From nobody Tue Aug 25 22:44:08 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB7FC1A8999 for ; Tue, 25 Aug 2015 22:44:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.978 X-Spam-Level: X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s3DaHSVbd6FN for ; Tue, 25 Aug 2015 22:44:05 -0700 (PDT) Received: from mail-lb0-f171.google.com (mail-lb0-f171.google.com [209.85.217.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14B1C1A8870 for ; Tue, 25 Aug 2015 22:44:05 -0700 (PDT) Received: by lbcbn3 with SMTP id bn3so112916333lbc.2 for ; Tue, 25 Aug 2015 22:44:03 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=Vg+aYy6Z396eG0CONxRAgJbR2Tph4gFxhvVNgipIRRw=; b=dbVfG9LaG9Q3dPMr0wq0ha7RnSVKLbophDo+SQYVJD/7OIRMl2qpTsRfr7Yg3WpiyG +ArxxoTagJCXiNZxv+9WSF3aNwsBz8xhlNRmVZqB29M5lAyKNA7KWOp0wWxLg4ClvhIK aFqXzDDU6Rdnx5W7Ab6QaXYHvTLJmrNYNAYYlPIO9MiLzP8TsTt3wm+iSD2TVNg9CqSp 405IqFyVkqwd2m5YaCLrj+Jk8Phe/c5LwToBSN+IIjDYmoa3nebmRlVBShg6ymsT1VcT ANcFpttsN7gI4gEYU8pVUNM/Cx/dxbIjPeXDSEtlQQg7Ho0Lq7C6H9XbUlOH2m0Pqrkq yBJg== X-Gm-Message-State: ALoCoQmbIdvOCN4jUHDwUlg41J+47eXTKzC9eyfZ8XYb/i9IHT8wQ7k9gxm1P7Y302MvbZN77YWt MIME-Version: 1.0 X-Received: by 10.152.120.234 with SMTP id lf10mr26544013lab.28.1440567843568; Tue, 25 Aug 2015 22:44:03 -0700 (PDT) Received: by 10.112.122.17 with HTTP; Tue, 25 Aug 2015 22:44:03 -0700 (PDT) Date: Tue, 25 Aug 2015 22:44:03 -0700 Message-ID: From: Joseph Salowey To: "i2nsf@ietf.org" Content-Type: multipart/alternative; boundary=089e0122832097514c051e305613 Archived-At: Subject: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2015 05:44:06 -0000 --089e0122832097514c051e305613 Content-Type: text/plain; charset=UTF-8 Thanks to everyone who has contributed towards developing the charter. I believe we are close to consensus so this is a consensus call for the I2NSF charter. The charter text is located at https://sites.google.com/site/interface2nsf/home. Please send comments on this charter to the I2NSF list by September 2, 2015. Thank you, Joe --089e0122832097514c051e305613 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Thanks to everyone who has contributed towards developing = the charter.=C2=A0 I believe we are close to consensus so this is a consens= us call for the I2NSF charter. =C2=A0 The charter text is located at=C2=A0<= a href=3D"https://sites.google.com/site/interface2nsf/home">https://sites.g= oogle.com/site/interface2nsf/home.=C2=A0 Please send comments on this c= harter to the I2NSF list by September 2, 2015.

Thank you= ,

Joe
--089e0122832097514c051e305613-- From nobody Wed Aug 26 11:10:03 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A7B31B2E2B for ; Wed, 26 Aug 2015 11:10:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4qMl1Ij6lOZm for ; Wed, 26 Aug 2015 11:09:59 -0700 (PDT) Received: from mail-io0-f175.google.com (mail-io0-f175.google.com [209.85.223.175]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3B2E1B2EE7 for ; Wed, 26 Aug 2015 11:09:58 -0700 (PDT) Received: by iods203 with SMTP id s203so29003624iod.0 for ; Wed, 26 Aug 2015 11:09:58 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=N8lBpkRB0LLMQSYZS10/Nqf0rnEQPIjF9MGUa+y546w=; b=aML3QhtV8TPP41yahl8GhMcqi2qWXUQakqwnL5rCtLFIcJJeGJvPXihkDRKw2Ijhdv Id8OeQN9BZwioU9vfvuNcU4bV3GoSxiJFs97wiMN2Cs0scJ1+9zs+m3ZHe7tRHuVoXMK jWK8SO9ngYWFADxjYJGE/mcO7bGdMnBWmmN8gmp+JZNs6skqlYIb+17elBXadgGAs0gy ojCQT8MlRuMX0v3zfed4pf6h1pDJNCC8craZSue1nZFFQ63Duer6jgGBhM9VHA8L0XGk Z0pUiW2YwYjWvSSeVTA10gL2vnJFq2cUNApCfctaikEvgnvJlWX+IMG2Msck+KeF6cQR DLhg== X-Gm-Message-State: ALoCoQlO8TcjcrtUrutN/t2XVjD38vn8Kstu4pxDxWk4wL+oaFJngf6vwNYVYazOsJYsc185ok7Z MIME-Version: 1.0 X-Received: by 10.107.11.32 with SMTP id v32mr5729676ioi.95.1440612598212; Wed, 26 Aug 2015 11:09:58 -0700 (PDT) Received: by 10.79.36.21 with HTTP; Wed, 26 Aug 2015 11:09:58 -0700 (PDT) In-Reply-To: References: Date: Wed, 26 Aug 2015 13:09:58 -0500 Message-ID: From: Shaibal Chakrabarty To: Alia Atlas Content-Type: multipart/alternative; boundary=001a113fb6e42d3382051e3ac24d Archived-At: Cc: "i2nsf@ietf.org" , Kathleen Moriarty Subject: Re: [I2nsf] comments on I2NSF charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2015 18:10:01 -0000 --001a113fb6e42d3382051e3ac24d Content-Type: text/plain; charset=UTF-8 Folks: Would highly recommend the consensus opinion of starting with single-headed control initially. regards, shaibal On Mon, Aug 24, 2015 at 4:27 PM, Alia Atlas wrote: > I took a look at the charter at > https://sites.google.com/site/interface2nsf/home . > In general, this looks plausible. I do have a few comments. > > First, could you consider and add clarity around whether I2NSF is assuming > single-headed control (as is common in network management systems or > controllers) or is assuming multi-headed control (as I2RS does)? > > Second, I'd propose the following minor modification: > > Replace: > "However, I2NSF will provide a forum for Informational drafts on data > models, APIs, etc. that demonstrate how more complex Service Layer policies > and formats may be translated to Capability Layer functions." > With > "However, I2NSF will provide a discussion forum for Informational drafts > on data models, APIs, etc. that demonstrate how more complex Service Layer > policies and formats may be translated to Capability Layer functions. Such > documents would be pursued outside the WG." > > Otherwise, it looks reasonable. > > Thanks, > Alia > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > > --001a113fb6e42d3382051e3ac24d Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Folks:

Would highly recommend the = consensus opinion of starting with single-headed control initially.
regards, shaibal

On Mon, Aug 24, 2015 at 4:27 PM, Alia Atlas = <akatlas@gmail.co= m> wrote:
= I took a look at the charter at=C2=A0https://sites.google.com/site/interface2nsf/home=C2=A0.
In general, this lo= oks plausible.=C2=A0 I do have a few comments.

Fir= st, could you consider and add clarity around whether I2NSF is assuming sin= gle-headed control (as is common in network management systems or controlle= rs) or is assuming multi-headed control (as I2RS does)?

--001a113fb6e42d3382051e3ac24d-- From nobody Wed Aug 26 12:28:50 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CD6C1A8034 for ; Wed, 26 Aug 2015 12:28:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ba_sGkNm7fTZ for ; Wed, 26 Aug 2015 12:28:47 -0700 (PDT) Received: from mail-wi0-x22f.google.com (mail-wi0-x22f.google.com [IPv6:2a00:1450:400c:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE4451A1E0B for ; Wed, 26 Aug 2015 12:28:46 -0700 (PDT) Received: by wijn1 with SMTP id n1so34393121wij.0 for ; Wed, 26 Aug 2015 12:28:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=s9ASluHp3FqXSM5iy3uEo6BH2SZOEJ430PNIT9wPSpk=; b=NNu4wMf5kiTAgU0wI6hPTzVzVk2GpEbYwXOtLeEtAtCY2oRdZSR8tKqRq49I0mEZE3 RBRr7dx41A97SBDBA3YxDskpKItttg6VL1mQUAJLG5qeTSxD68GwbfkP/I8cKw/CMSfG FdUhCg6b9wqyOESwvoycpPhT/Snk/pTQUV3mYyYQJ9ltKHk4EYWerA228JYdZXklOYI2 nt3bxV1UfrOUpVadmBKdSv3SuyLAEErjCSd9r+o+Jcof6PhpiC0/+th1hEnICNo6Q6BH oXK8CnWxOZEeOKsAqlaleYbfD3kZVOsFNf590bhyA54liZQvKNq2J/qRyw7YlSwU1SZD 0s4Q== MIME-Version: 1.0 X-Received: by 10.180.81.70 with SMTP id y6mr5888857wix.36.1440617325375; Wed, 26 Aug 2015 12:28:45 -0700 (PDT) Received: by 10.28.157.84 with HTTP; Wed, 26 Aug 2015 12:28:45 -0700 (PDT) In-Reply-To: References: Date: Wed, 26 Aug 2015 15:28:45 -0400 Message-ID: From: Kathleen Moriarty To: Joseph Salowey Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2015 19:28:49 -0000 I have a few editorial changes in the following text that does not change the meaning of the charter text: A Network Security Function (NSF) is a function used to ensure integrity, confidentiality, and availability of network communications, to detect unwanted network activity, and to block or at least the mitigate effects of unwanted activity. NSFs are provided and consumed in increasingly diverse environments. Users of NSFs could consume network security services hosted by one or more providers, which may be their own enterprise, service providers, or a combination of both. Similarly, service providers may offer their customers network security services that are enforced by multiple security products and/or functions from different vendors. NSFs may be provided by physical and/or virtualized infrastructure. Without standard interfaces to control and monitor the behavior of NSFs, it has become virtually impossible for providers of security services to automate service offerings that utilize different security functions from multiple vendors. The goal of I2NSF is to define a set of software interfaces and data models for controlling and monitoring aspects of physical and virtual NSFs. If the working group finds it necessary to work on an information model before the data models, to help provide guidance and derive the data models, it may do so. The working group will decide later whether the information model needs to be published as an RFC. Other aspects of NSFs, such as device or network provisioning and configuration, are out of scope. Controlling and monitoring aspects of NSFs include the ability to specify rules (by a single controller at the first phase), query, and monitor NSFs by one or more management entities. The initial phase of I2NSF will only consider one single controller that can specify or change rules to NSFs because multi-headed control requires the coordination to avoid potential conflict of rules. The NSFs can be monitored by multiple entities, but the database update and synchronization among multiple management entities are out of scope for I2NSF. As there are many different security vendors supporting different features and functions on their devices, I2NSF will focus on flow-based NSFs that provide treatment to packets/flows, such as Intrusion Protection/Detection System (IPS/IDS), Web filtering, flow filtering, deep packet inspection, or pattern matching and remediation. I2NSF will specify interfaces at two functional levels for the control and monitoring of network security functions: The I2NSF Capability Layer specifies how to control and monitor NSFs at a functional implementation level. The term =E2=80=9CFunctional Implementation=E2=80=9D is used to emphasize that the rules (for control an= d monitor) of NSFs have to be implementable by most NSFs. I2NSF will standardize a set of interfaces by which a security controller can invoke, operate, and monitor NSFs. The I2NSF Service Layer defines how clients=E2=80=99 security policies may = be expressed to a security controller. The controller implements its policies according to the various capabilities provided by the I2NSF capability Layer. The I2NSF Service Layer also allows the client to monitor the client specific policies. Since there could be many depths or types of Service Layer policies, the following bullets further clarify the scope of I2NSF: o Only the Simple Service Layer policies that are modeled as closely as possible on the Capability Layer are within the scope. Such a Simple Service Layer will enable a security controller to handle issues like multi-tenancy and the choice between available NSFs for a given policy. o I2NSF will not specify abstract or sophisticated policies from clients. Expressing policies in ways other than the model used by the Capability Layer is out of scope. o The translation mechanism/methods from Service Layer policies to Capability layer comments are out of scope for I2NSF. However, I2NSF will provide a discussion forum for Informational drafts on data models, APIs, etc. that demonstrate how more complex Service Layer policies and formats may be translated to Capability Layer functions. Such documents would be pursued outside the WG. Standard interfaces for monitoring and controlling the behavior of NSFs are essential building blocks for providers of security service to automate the use of different NSFs from multiple vendors. This work will leverage the existing protocols and data models defined by the I2RS, NETCONF, and NETMOD working groups. If extensions to these protocols or data models are needed, requirements will be developed by this WG, and the extensions will be developed in cooperation with the WGs responsible for the protocols. The I2NSF WG=E2=80=99s deliverables include: o A single document covering use cases, problem statement, and gap analysis document. This document will initially be produced for reference as a living list to track and record discussions: the WG may decide to not publish this document as an RFC. o A framework document, presenting an overview of the use of NSFs and the purpose of the models developed by the WG. This document will also be a reference text to guide the main work and the WG may decide to not publish this document as an RFC. o If the working group considers it necessary, a single, unified, Information Model to describe the control and monitoring of flow-based NSFs. o YANG data models for the control and monitoring of NSFs. o Requests to the IANA for the creation of a registry that enables the characteristics and behavior of NSFs to be specified using a vendor-neutral vocabulary without requiring the NSFs themselves to be standardized. The registry enables various mechanisms, including policy rules, to be used to match monitor and control functions to the needs of an application and/or environment. An examination of existing secure communication mechanisms to identify the appropriate ones for carrying the controlling and monitoring information between the NSFs and their management entities. This document may also be produced as a working document that is not published as an RFC. The WG may additionally choose to develop documents to describe requirements for extensions (if any) to existing protocols used by the WG, to explain how the data models are used to monitor and control flow-based NSFs, and to describe how to use I2RS and NETCONF to carry the content of the data models. These documents may be published as Informational RFCs of may be working documents that are discarded once they have triggered the necessary work. The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG will communicate with external SDOs like ETSI NFV and will encourage open source code development related to the WG scope in organizations like ONF, OpenStack, ODL, and OPNFV. On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey wrote: > Thanks to everyone who has contributed towards developing the charter. I > believe we are close to consensus so this is a consensus call for the I2N= SF > charter. The charter text is located at > https://sites.google.com/site/interface2nsf/home. Please send comments o= n > this charter to the I2NSF list by September 2, 2015. > > Thank you, > > Joe > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > --=20 Best regards, Kathleen From nobody Wed Aug 26 14:38:23 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5AB8B1ACE1A for ; Wed, 26 Aug 2015 14:38:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3guyUR6LuBd2 for ; Wed, 26 Aug 2015 14:38:19 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F0261AC3FE for ; Wed, 26 Aug 2015 14:38:18 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BWU45880; Wed, 26 Aug 2015 21:38:17 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 26 Aug 2015 22:38:16 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Wed, 26 Aug 2015 14:38:13 -0700 From: Linda Dunbar To: Kathleen Moriarty , Joseph Salowey Thread-Topic: [I2nsf] Consensus call on I2NSF Charter Thread-Index: AQHQ38JC8Hlj8uHTckqihpoxsIKx6J4fIKyA//+uYfA= Date: Wed, 26 Aug 2015 21:38:12 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.236] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2015 21:38:22 -0000 S2F0aGxlZW4sIA0KDQpUaGFuayB5b3UgdmVyeSBtdWNoIGZvciB0aGUgZWRpdG9yaWFsIGNoYW5n ZXMuIFRoZSBjaGFydGVyIGRlc2NyaXB0aW9uIG9uIHRoZSBJMk5TRiBXaWtpIGhhcyBiZWVuIHVw ZGF0ZWQgdG8gcmVmbGVjdCB5b3VyIHN1Z2dlc3RlZCBjaGFuZ2VzOiBodHRwczovL3NpdGVzLmdv b2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNmL2hvbWUNCg0KDQpMaW5kYQ0KDQoNCi0tLS0tT3Jp Z2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBJMm5zZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0 Zi5vcmddIE9uIEJlaGFsZiBPZiBLYXRobGVlbiBNb3JpYXJ0eQ0KU2VudDogV2VkbmVzZGF5LCBB dWd1c3QgMjYsIDIwMTUgMjoyOSBQTQ0KVG86IEpvc2VwaCBTYWxvd2V5DQpDYzogaTJuc2ZAaWV0 Zi5vcmcNClN1YmplY3Q6IFJlOiBbSTJuc2ZdIENvbnNlbnN1cyBjYWxsIG9uIEkyTlNGIENoYXJ0 ZXINCg0KSSBoYXZlIGEgZmV3IGVkaXRvcmlhbCBjaGFuZ2VzIGluIHRoZSBmb2xsb3dpbmcgdGV4 dCB0aGF0IGRvZXMgbm90IGNoYW5nZSB0aGUgbWVhbmluZyBvZiB0aGUgY2hhcnRlciB0ZXh0Og0K DQpBIE5ldHdvcmsgU2VjdXJpdHkgRnVuY3Rpb24gKE5TRikgaXMgYSBmdW5jdGlvbiB1c2VkIHRv IGVuc3VyZSBpbnRlZ3JpdHksIGNvbmZpZGVudGlhbGl0eSwgYW5kIGF2YWlsYWJpbGl0eSBvZiBu ZXR3b3JrIGNvbW11bmljYXRpb25zLCB0byBkZXRlY3QgdW53YW50ZWQgbmV0d29yayBhY3Rpdml0 eSwgYW5kIHRvIGJsb2NrIG9yIGF0IGxlYXN0IHRoZSBtaXRpZ2F0ZSBlZmZlY3RzIG9mIHVud2Fu dGVkIGFjdGl2aXR5LiBOU0ZzIGFyZSBwcm92aWRlZCBhbmQgY29uc3VtZWQgaW4gaW5jcmVhc2lu Z2x5IGRpdmVyc2UgZW52aXJvbm1lbnRzLiBVc2VycyBvZiBOU0ZzIGNvdWxkIGNvbnN1bWUgbmV0 d29yayBzZWN1cml0eSBzZXJ2aWNlcyBob3N0ZWQgYnkgb25lIG9yIG1vcmUgcHJvdmlkZXJzLCB3 aGljaCBtYXkgYmUgdGhlaXIgb3duIGVudGVycHJpc2UsIHNlcnZpY2UgcHJvdmlkZXJzLCBvciBh IGNvbWJpbmF0aW9uIG9mIGJvdGguICBTaW1pbGFybHksIHNlcnZpY2UgcHJvdmlkZXJzIG1heSBv ZmZlciB0aGVpciBjdXN0b21lcnMgbmV0d29yayBzZWN1cml0eSBzZXJ2aWNlcyB0aGF0IGFyZSBl bmZvcmNlZCBieSBtdWx0aXBsZSBzZWN1cml0eSBwcm9kdWN0cyBhbmQvb3IgZnVuY3Rpb25zIGZy b20gZGlmZmVyZW50IHZlbmRvcnMuIE5TRnMgbWF5IGJlIHByb3ZpZGVkIGJ5IHBoeXNpY2FsIGFu ZC9vciB2aXJ0dWFsaXplZCBpbmZyYXN0cnVjdHVyZS4gV2l0aG91dCBzdGFuZGFyZCBpbnRlcmZh Y2VzIHRvIGNvbnRyb2wgYW5kIG1vbml0b3IgdGhlIGJlaGF2aW9yIG9mIE5TRnMsIGl0IGhhcyBi ZWNvbWUgdmlydHVhbGx5IGltcG9zc2libGUgZm9yIHByb3ZpZGVycyBvZiBzZWN1cml0eSBzZXJ2 aWNlcyB0byBhdXRvbWF0ZSBzZXJ2aWNlIG9mZmVyaW5ncyB0aGF0IHV0aWxpemUgZGlmZmVyZW50 IHNlY3VyaXR5IGZ1bmN0aW9ucyBmcm9tIG11bHRpcGxlIHZlbmRvcnMuDQoNClRoZSBnb2FsIG9m IEkyTlNGIGlzIHRvIGRlZmluZSBhIHNldCBvZiBzb2Z0d2FyZSBpbnRlcmZhY2VzIGFuZCBkYXRh IG1vZGVscyBmb3IgY29udHJvbGxpbmcgYW5kIG1vbml0b3JpbmcgYXNwZWN0cyBvZiBwaHlzaWNh bCBhbmQgdmlydHVhbCBOU0ZzLiBJZiB0aGUgd29ya2luZyBncm91cCBmaW5kcyBpdCBuZWNlc3Nh cnkgdG8gd29yayBvbiBhbiBpbmZvcm1hdGlvbiBtb2RlbCBiZWZvcmUgdGhlIGRhdGEgbW9kZWxz LCB0byBoZWxwIHByb3ZpZGUgZ3VpZGFuY2UgYW5kIGRlcml2ZSB0aGUgZGF0YSBtb2RlbHMsIGl0 IG1heSBkbyBzby4gVGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCBkZWNpZGUgbGF0ZXIgd2hldGhlciB0 aGUgaW5mb3JtYXRpb24gbW9kZWwgbmVlZHMgdG8gYmUgcHVibGlzaGVkIGFzIGFuIFJGQy4NCk90 aGVyIGFzcGVjdHMgb2YgTlNGcywgc3VjaCBhcyBkZXZpY2Ugb3IgbmV0d29yayBwcm92aXNpb25p bmcgYW5kIGNvbmZpZ3VyYXRpb24sIGFyZSBvdXQgb2Ygc2NvcGUuDQoNCkNvbnRyb2xsaW5nIGFu ZCBtb25pdG9yaW5nIGFzcGVjdHMgb2YgTlNGcyBpbmNsdWRlIHRoZSBhYmlsaXR5IHRvIHNwZWNp ZnkgcnVsZXMgKGJ5IGEgc2luZ2xlIGNvbnRyb2xsZXIgYXQgdGhlIGZpcnN0IHBoYXNlKSwgcXVl cnksIGFuZCBtb25pdG9yIE5TRnMgYnkgb25lIG9yIG1vcmUgbWFuYWdlbWVudCBlbnRpdGllcy4g IFRoZSBpbml0aWFsIHBoYXNlIG9mIEkyTlNGIHdpbGwgb25seSBjb25zaWRlciBvbmUgc2luZ2xl IGNvbnRyb2xsZXIgdGhhdCBjYW4gc3BlY2lmeSBvciBjaGFuZ2UgcnVsZXMgdG8gTlNGcyBiZWNh dXNlIG11bHRpLWhlYWRlZCBjb250cm9sIHJlcXVpcmVzIHRoZSBjb29yZGluYXRpb24gdG8gYXZv aWQgcG90ZW50aWFsIGNvbmZsaWN0IG9mIHJ1bGVzLiBUaGUgTlNGcyBjYW4gYmUgbW9uaXRvcmVk IGJ5IG11bHRpcGxlIGVudGl0aWVzLCBidXQgdGhlIGRhdGFiYXNlIHVwZGF0ZSBhbmQgc3luY2hy b25pemF0aW9uIGFtb25nIG11bHRpcGxlIG1hbmFnZW1lbnQgZW50aXRpZXMgYXJlIG91dCBvZiBz Y29wZSBmb3IgSTJOU0YuIEFzIHRoZXJlIGFyZSBtYW55IGRpZmZlcmVudCBzZWN1cml0eSB2ZW5k b3JzIHN1cHBvcnRpbmcgZGlmZmVyZW50IGZlYXR1cmVzIGFuZCBmdW5jdGlvbnMgb24gdGhlaXIg ZGV2aWNlcywgSTJOU0Ygd2lsbCBmb2N1cyBvbiBmbG93LWJhc2VkIE5TRnMgdGhhdCBwcm92aWRl IHRyZWF0bWVudCB0byBwYWNrZXRzL2Zsb3dzLCBzdWNoIGFzIEludHJ1c2lvbiBQcm90ZWN0aW9u L0RldGVjdGlvbiBTeXN0ZW0gKElQUy9JRFMpLCBXZWIgZmlsdGVyaW5nLCBmbG93IGZpbHRlcmlu ZywgZGVlcCBwYWNrZXQgaW5zcGVjdGlvbiwgb3IgcGF0dGVybiBtYXRjaGluZyBhbmQgcmVtZWRp YXRpb24uDQoNCkkyTlNGIHdpbGwgc3BlY2lmeSBpbnRlcmZhY2VzIGF0IHR3byBmdW5jdGlvbmFs IGxldmVscyBmb3IgdGhlIGNvbnRyb2wgYW5kIG1vbml0b3Jpbmcgb2YgbmV0d29yayBzZWN1cml0 eSBmdW5jdGlvbnM6DQoNClRoZSBJMk5TRiBDYXBhYmlsaXR5IExheWVyIHNwZWNpZmllcyBob3cg dG8gY29udHJvbCBhbmQgbW9uaXRvciBOU0ZzIGF0IGEgZnVuY3Rpb25hbCBpbXBsZW1lbnRhdGlv biBsZXZlbC4gIFRoZSB0ZXJtIOKAnEZ1bmN0aW9uYWwgSW1wbGVtZW50YXRpb27igJ0gaXMgdXNl ZCB0byBlbXBoYXNpemUgdGhhdCB0aGUgcnVsZXMgKGZvciBjb250cm9sIGFuZA0KbW9uaXRvcikg b2YgTlNGcyBoYXZlIHRvIGJlIGltcGxlbWVudGFibGUgYnkgbW9zdCBOU0ZzLiBJMk5TRiB3aWxs IHN0YW5kYXJkaXplIGEgc2V0IG9mIGludGVyZmFjZXMgYnkgd2hpY2ggYSBzZWN1cml0eSBjb250 cm9sbGVyIGNhbiBpbnZva2UsIG9wZXJhdGUsIGFuZCBtb25pdG9yIE5TRnMuDQoNClRoZSBJMk5T RiBTZXJ2aWNlIExheWVyIGRlZmluZXMgaG93IGNsaWVudHPigJkgc2VjdXJpdHkgcG9saWNpZXMg bWF5IGJlIGV4cHJlc3NlZCB0byBhIHNlY3VyaXR5IGNvbnRyb2xsZXIuIFRoZSBjb250cm9sbGVy IGltcGxlbWVudHMgaXRzIHBvbGljaWVzIGFjY29yZGluZyB0byB0aGUgdmFyaW91cyBjYXBhYmls aXRpZXMgcHJvdmlkZWQgYnkgdGhlIEkyTlNGIGNhcGFiaWxpdHkgTGF5ZXIuICBUaGUgSTJOU0Yg U2VydmljZSBMYXllciBhbHNvIGFsbG93cyB0aGUgY2xpZW50IHRvIG1vbml0b3IgdGhlIGNsaWVu dCBzcGVjaWZpYyBwb2xpY2llcy4NCg0KU2luY2UgdGhlcmUgY291bGQgYmUgbWFueSBkZXB0aHMg b3IgdHlwZXMgb2YgU2VydmljZSBMYXllciBwb2xpY2llcywgdGhlIGZvbGxvd2luZyBidWxsZXRz IGZ1cnRoZXIgY2xhcmlmeSB0aGUgc2NvcGUgb2YgSTJOU0Y6DQogICAgbyBPbmx5IHRoZSBTaW1w bGUgU2VydmljZSBMYXllciBwb2xpY2llcyB0aGF0IGFyZSBtb2RlbGVkIGFzIGNsb3NlbHkgYXMg cG9zc2libGUgb24gdGhlIENhcGFiaWxpdHkgTGF5ZXIgYXJlIHdpdGhpbiB0aGUgc2NvcGUuDQpT dWNoIGEgU2ltcGxlIFNlcnZpY2UgTGF5ZXIgd2lsbCBlbmFibGUgYSBzZWN1cml0eSBjb250cm9s bGVyIHRvIGhhbmRsZSBpc3N1ZXMgbGlrZSBtdWx0aS10ZW5hbmN5IGFuZCB0aGUgY2hvaWNlIGJl dHdlZW4gYXZhaWxhYmxlIE5TRnMgZm9yIGEgZ2l2ZW4gcG9saWN5Lg0KICAgIG8gSTJOU0Ygd2ls bCBub3Qgc3BlY2lmeSBhYnN0cmFjdCBvciBzb3BoaXN0aWNhdGVkIHBvbGljaWVzIGZyb20gY2xp ZW50cy4gRXhwcmVzc2luZyBwb2xpY2llcyBpbiB3YXlzIG90aGVyIHRoYW4gdGhlIG1vZGVsIHVz ZWQgYnkgdGhlIENhcGFiaWxpdHkgTGF5ZXIgaXMgb3V0IG9mIHNjb3BlLg0KICAgIG8gVGhlIHRy YW5zbGF0aW9uIG1lY2hhbmlzbS9tZXRob2RzIGZyb20gU2VydmljZSBMYXllciBwb2xpY2llcyB0 byBDYXBhYmlsaXR5IGxheWVyIGNvbW1lbnRzIGFyZSBvdXQgb2Ygc2NvcGUgZm9yIEkyTlNGLg0K SG93ZXZlciwgSTJOU0Ygd2lsbCBwcm92aWRlIGEgZGlzY3Vzc2lvbiBmb3J1bSBmb3IgSW5mb3Jt YXRpb25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQSXMsIGV0Yy4gdGhhdCBkZW1vbnN0cmF0 ZSBob3cgbW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5ZXIgcG9saWNpZXMgYW5kIGZvcm1hdHMgbWF5 IGJlIHRyYW5zbGF0ZWQgdG8gQ2FwYWJpbGl0eSBMYXllciBmdW5jdGlvbnMuICBTdWNoIGRvY3Vt ZW50cyB3b3VsZCBiZSBwdXJzdWVkIG91dHNpZGUgdGhlIFdHLg0KDQpTdGFuZGFyZCBpbnRlcmZh Y2VzIGZvciBtb25pdG9yaW5nIGFuZCBjb250cm9sbGluZyB0aGUgYmVoYXZpb3Igb2YgTlNGcyBh cmUgZXNzZW50aWFsIGJ1aWxkaW5nIGJsb2NrcyBmb3IgcHJvdmlkZXJzIG9mIHNlY3VyaXR5IHNl cnZpY2UgdG8gYXV0b21hdGUgdGhlIHVzZSBvZiBkaWZmZXJlbnQgTlNGcyBmcm9tIG11bHRpcGxl IHZlbmRvcnMuIFRoaXMgd29yayB3aWxsIGxldmVyYWdlIHRoZSBleGlzdGluZyBwcm90b2NvbHMg YW5kIGRhdGEgbW9kZWxzIGRlZmluZWQgYnkgdGhlIEkyUlMsIE5FVENPTkYsIGFuZCBORVRNT0Qg d29ya2luZyBncm91cHMuIElmIGV4dGVuc2lvbnMgdG8gdGhlc2UgcHJvdG9jb2xzIG9yIGRhdGEg bW9kZWxzIGFyZSBuZWVkZWQsIHJlcXVpcmVtZW50cyB3aWxsIGJlIGRldmVsb3BlZCBieSB0aGlz IFdHLCBhbmQgdGhlIGV4dGVuc2lvbnMgd2lsbCBiZSBkZXZlbG9wZWQgaW4gY29vcGVyYXRpb24g d2l0aCB0aGUgV0dzIHJlc3BvbnNpYmxlIGZvciB0aGUgcHJvdG9jb2xzLg0KDQpUaGUgSTJOU0Yg V0figJlzIGRlbGl2ZXJhYmxlcyBpbmNsdWRlOg0KDQogICAgbyBBIHNpbmdsZSBkb2N1bWVudCBj b3ZlcmluZyB1c2UgY2FzZXMsIHByb2JsZW0gc3RhdGVtZW50LCBhbmQgZ2FwIGFuYWx5c2lzIGRv Y3VtZW50LiBUaGlzIGRvY3VtZW50IHdpbGwgaW5pdGlhbGx5IGJlIHByb2R1Y2VkIGZvciByZWZl cmVuY2UgYXMgYSBsaXZpbmcgbGlzdCB0byB0cmFjayBhbmQgcmVjb3JkIGRpc2N1c3Npb25zOiB0 aGUgV0cgbWF5IGRlY2lkZSB0byBub3QgcHVibGlzaCB0aGlzIGRvY3VtZW50IGFzIGFuIFJGQy4N CiAgICBvIEEgZnJhbWV3b3JrIGRvY3VtZW50LCBwcmVzZW50aW5nIGFuIG92ZXJ2aWV3IG9mIHRo ZSB1c2Ugb2YgTlNGcyBhbmQgdGhlIHB1cnBvc2Ugb2YgdGhlIG1vZGVscyBkZXZlbG9wZWQgYnkg dGhlIFdHLiBUaGlzIGRvY3VtZW50IHdpbGwgYWxzbyBiZSBhIHJlZmVyZW5jZSB0ZXh0IHRvIGd1 aWRlIHRoZSBtYWluIHdvcmsgYW5kIHRoZSBXRyBtYXkgZGVjaWRlIHRvIG5vdCBwdWJsaXNoIHRo aXMgZG9jdW1lbnQgYXMgYW4gUkZDLg0KICAgIG8gSWYgdGhlIHdvcmtpbmcgZ3JvdXAgY29uc2lk ZXJzIGl0IG5lY2Vzc2FyeSwgYSBzaW5nbGUsIHVuaWZpZWQsIEluZm9ybWF0aW9uIE1vZGVsIHRv IGRlc2NyaWJlIHRoZSBjb250cm9sIGFuZCBtb25pdG9yaW5nIG9mIGZsb3ctYmFzZWQgTlNGcy4N CiAgICBvIFlBTkcgZGF0YSBtb2RlbHMgZm9yIHRoZSBjb250cm9sIGFuZCBtb25pdG9yaW5nIG9m IE5TRnMuDQogICAgbyBSZXF1ZXN0cyB0byB0aGUgSUFOQSBmb3IgdGhlIGNyZWF0aW9uIG9mIGEg cmVnaXN0cnkgdGhhdCBlbmFibGVzIHRoZSBjaGFyYWN0ZXJpc3RpY3MgYW5kIGJlaGF2aW9yIG9m IE5TRnMgdG8gYmUgc3BlY2lmaWVkIHVzaW5nIGEgdmVuZG9yLW5ldXRyYWwgdm9jYWJ1bGFyeSB3 aXRob3V0IHJlcXVpcmluZyB0aGUgTlNGcyB0aGVtc2VsdmVzIHRvIGJlIHN0YW5kYXJkaXplZC4g VGhlIHJlZ2lzdHJ5IGVuYWJsZXMgdmFyaW91cyBtZWNoYW5pc21zLCBpbmNsdWRpbmcgcG9saWN5 IHJ1bGVzLCB0byBiZSB1c2VkIHRvIG1hdGNoIG1vbml0b3IgYW5kIGNvbnRyb2wgZnVuY3Rpb25z IHRvIHRoZSBuZWVkcyBvZiBhbiBhcHBsaWNhdGlvbiBhbmQvb3IgZW52aXJvbm1lbnQuDQpBbiBl eGFtaW5hdGlvbiBvZiBleGlzdGluZyBzZWN1cmUgY29tbXVuaWNhdGlvbiBtZWNoYW5pc21zIHRv IGlkZW50aWZ5IHRoZSBhcHByb3ByaWF0ZSBvbmVzIGZvciBjYXJyeWluZyB0aGUgY29udHJvbGxp bmcgYW5kIG1vbml0b3JpbmcgaW5mb3JtYXRpb24gYmV0d2VlbiB0aGUgTlNGcyBhbmQgdGhlaXIg bWFuYWdlbWVudCBlbnRpdGllcy4gVGhpcyBkb2N1bWVudCBtYXkgYWxzbyBiZSBwcm9kdWNlZCBh cyBhIHdvcmtpbmcgZG9jdW1lbnQgdGhhdCBpcyBub3QgcHVibGlzaGVkIGFzIGFuIFJGQy4NCg0K VGhlIFdHIG1heSBhZGRpdGlvbmFsbHkgY2hvb3NlIHRvIGRldmVsb3AgZG9jdW1lbnRzIHRvIGRl c2NyaWJlIHJlcXVpcmVtZW50cyBmb3IgZXh0ZW5zaW9ucyAoaWYgYW55KSB0byBleGlzdGluZyBw cm90b2NvbHMgdXNlZCBieSB0aGUgV0csIHRvIGV4cGxhaW4gaG93IHRoZSBkYXRhIG1vZGVscyBh cmUgdXNlZCB0byBtb25pdG9yIGFuZCBjb250cm9sIGZsb3ctYmFzZWQgTlNGcywgYW5kIHRvIGRl c2NyaWJlIGhvdyB0byB1c2UgSTJSUyBhbmQgTkVUQ09ORiB0byBjYXJyeSB0aGUgY29udGVudCBv ZiB0aGUgZGF0YSBtb2RlbHMuIFRoZXNlIGRvY3VtZW50cyBtYXkgYmUgcHVibGlzaGVkIGFzIElu Zm9ybWF0aW9uYWwgUkZDcyBvZiBtYXkgYmUgd29ya2luZyBkb2N1bWVudHMgdGhhdCBhcmUgZGlz Y2FyZGVkIG9uY2UgdGhleSBoYXZlIHRyaWdnZXJlZCB0aGUgbmVjZXNzYXJ5IHdvcmsuDQoNClRo ZSBXRyB3aWxsIHdvcmsgY2xvc2VseSB3aXRoIHRoZSBJMlJTLCBORVRDT05GLCBhbmQgTkVUTU9E IFdHcy4gVGhlIFdHIHdpbGwgY29tbXVuaWNhdGUgd2l0aCBleHRlcm5hbCBTRE9zIGxpa2UgRVRT SSBORlYgYW5kIHdpbGwgZW5jb3VyYWdlIG9wZW4gc291cmNlIGNvZGUgZGV2ZWxvcG1lbnQgcmVs YXRlZCB0byB0aGUgV0cgc2NvcGUgaW4gb3JnYW5pemF0aW9ucyBsaWtlIE9ORiwgT3BlblN0YWNr LCBPREwsIGFuZCBPUE5GVi4NCg0KDQpPbiBXZWQsIEF1ZyAyNiwgMjAxNSBhdCAxOjQ0IEFNLCBK b3NlcGggU2Fsb3dleSA8am9lQHNhbG93ZXkubmV0PiB3cm90ZToNCj4gVGhhbmtzIHRvIGV2ZXJ5 b25lIHdobyBoYXMgY29udHJpYnV0ZWQgdG93YXJkcyBkZXZlbG9waW5nIHRoZSBjaGFydGVyLiAg DQo+IEkgYmVsaWV2ZSB3ZSBhcmUgY2xvc2UgdG8gY29uc2Vuc3VzIHNvIHRoaXMgaXMgYSBjb25z ZW5zdXMgY2FsbCBmb3IgdGhlIEkyTlNGDQo+IGNoYXJ0ZXIuICAgVGhlIGNoYXJ0ZXIgdGV4dCBp cyBsb2NhdGVkIGF0DQo+IGh0dHBzOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJu c2YvaG9tZS4gIFBsZWFzZSBzZW5kIA0KPiBjb21tZW50cyBvbiB0aGlzIGNoYXJ0ZXIgdG8gdGhl IEkyTlNGIGxpc3QgYnkgU2VwdGVtYmVyIDIsIDIwMTUuDQo+DQo+IFRoYW5rIHlvdSwNCj4NCj4g Sm9lDQo+DQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQo+IEkybnNmIG1haWxpbmcgbGlzdA0KPiBJMm5zZkBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQo+DQoNCg0KDQotLSANCg0KQmVzdCByZWdh cmRzLA0KS2F0aGxlZW4NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCkkybnNmIG1haWxpbmcgbGlzdA0KSTJuc2ZAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YNCg== From nobody Wed Aug 26 15:46:09 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB0C81B3505 for ; Wed, 26 Aug 2015 15:46:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z_7ZdUuQMHKw for ; Wed, 26 Aug 2015 15:46:01 -0700 (PDT) Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 102891B351B for ; Wed, 26 Aug 2015 15:45:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11660; q=dns/txt; s=iport; t=1440629155; x=1441838755; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=Q7BVypalMZJIVBMBgmkZlDtNSkqjllT0UUSxxN1MFOo=; b=eW0Oej4dzJRgsDQHcTI31U02madw713++KxaaDM4mvV1FQCCeYwETe4J XZS1KjzokUk3indA4yUQ5ycRw3t7RD+QlFh9cmMLrEqAT8OCWM0GPgzoD 1bQWNFyq1xlylBGDwnKIX5I7WHTNVNkDOhhl1HCysSKorNXqCKxjHStGC c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0C+AgBZQN5V/5ldJa1TCoMbVGmDI6ZlBQGBCZJiAQmBbgqCQ4M4AoE2OBQBAQEBAQEBgQqEIwEBAQQBAQEaBhUzAwQCBAEMBAsRBAEBAQICBRYIAwICCQMCAQIBFR8JCAYBDAYCAQGIKg20FpUHAQEBAQEBAQEBAQEBAQEBAQEBAQEBEwSBIoUDhTaEJgcFJTMHBoJjgUMBBJU5hQaHbIFKhDKCe4kzhEmDayaEGyIzgQaBRwEBAQ X-IronPort-AV: E=Sophos;i="5.17,419,1437436800"; d="scan'208";a="21910701" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-9.cisco.com with ESMTP; 26 Aug 2015 22:45:54 +0000 Received: from [10.98.149.195] (bxb-fandreas-8812.cisco.com [10.98.149.195]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t7QMjrCW026370; Wed, 26 Aug 2015 22:45:53 GMT To: Linda Dunbar , Kathleen Moriarty , Joseph Salowey References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> From: Flemming Andreasen Message-ID: <55DE41BB.3000801@cisco.com> Date: Wed, 26 Aug 2015 18:46:19 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2015 22:46:08 -0000 Apologies for joining the discussion late - just got back from PTO. In=20 any case, please find some additional comments on the proposed charter=20 below (some more substantial than others): - The first paragraph starts out by defining what an NSF is, and we can=20 argue about some of the points in there for various security functions=20 (e.g. I may want to detect normal network behavior to establish a=20 baseline, which does not seem to be covered by the current definition).=20 I don't think that will be a productive discussion though, nor is it=20 necessary. Instead, I'd suggest we are not overly prescriptive, but=20 rather view these as possible NSF features, and supplement them with=20 some actual product examples (e.g. FW, NGFW, IPS, etc.). Similarly,=20 since we limit our scope to "flow-based NSFs", we may want to make that=20 clear here. An example of a security function that would *not* be in=20 scope may be helpful too. - The third paragraph says that "The NSFs can be monitored by multiple=20 entities..."; does this imply a 1:N (direct) monitoring relationship ?=20 If so, that seems to get to a design decision that may be premature. - The charter seems to operate with the notion of a "security=20 controller" that interacts with the "NSF". If I understand correctly,=20 the security controller implements the "Service Layer" and the NSF=20 implements the "Capability Layer". Furthermore, we have "clients" that=20 interact with the security controller to implement policies (by=20 leveraging the service layer). If so, it would be good to clarify this=20 taxonomy earlier in the charter. If not, then I probably need some=20 clarifications in the text. - In the definition of the "Capability Layer", there is a statement=20 about "rules...of NSFs have to be implementable by most NSFs". Do you=20 mean all NSFs or NSFs of a given type (I assume we have different types=20 of NSFs) ? - Policies are labeled as "simple" or "abstract or sophisticated"=20 without further definition; I'm not sure where we draw that line or how=20 to do that in the charter; maybe clarifying that part needs to be a=20 deliverable ? - A number of deliverables may not be published as an RFC; why not (they = seem to set the stage for several other deliverables and hence are=20 relevant for consumers of the information and data models later on) ? - The part about I2NSF providing a "discussion forum for Informational=20 drafts on.....[more complex Service Layer policies]..." is confusing to=20 me. The work seems to be pursued outside the WG, so there are no=20 deliverables and presumably no agenda time will be allocated either.=20 It's also not clear to me that we can/should state that such documents=20 would be Informational. We may decide that we need some procedures for=20 how to define such documents, have designated experts, a directorate,=20 etc. to review them etc. I'm guessing this is all a bit premature=20 though, but again, we may want to note that as an issue in the charter=20 that the WG needs to resolve at some point. Nits: - first paragraph: s/the mitigate/mitigate the/ - second last paragraph: s/RFCs of/RFCs or Thanks -- Flemming On 8/26/15 5:38 PM, Linda Dunbar wrote: > Kathleen, > > Thank you very much for the editorial changes. The charter description = on the I2NSF Wiki has been updated to reflect your suggested changes: htt= ps://sites.google.com/site/interface2nsf/home > > > Linda > > > -----Original Message----- > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen Moria= rty > Sent: Wednesday, August 26, 2015 2:29 PM > To: Joseph Salowey > Cc: i2nsf@ietf.org > Subject: Re: [I2nsf] Consensus call on I2NSF Charter > > I have a few editorial changes in the following text that does not chan= ge the meaning of the charter text: > > A Network Security Function (NSF) is a function used to ensure integrit= y, confidentiality, and availability of network communications, to detect= unwanted network activity, and to block or at least the mitigate effects= of unwanted activity. NSFs are provided and consumed in increasingly div= erse environments. Users of NSFs could consume network security services = hosted by one or more providers, which may be their own enterprise, servi= ce providers, or a combination of both. Similarly, service providers may= offer their customers network security services that are enforced by mul= tiple security products and/or functions from different vendors. NSFs may= be provided by physical and/or virtualized infrastructure. Without stand= ard interfaces to control and monitor the behavior of NSFs, it has become= virtually impossible for providers of security services to automate serv= ice offerings that utilize different security functions from multiple ven= dors. > > The goal of I2NSF is to define a set of software interfaces and data mo= dels for controlling and monitoring aspects of physical and virtual NSFs.= If the working group finds it necessary to work on an information model = before the data models, to help provide guidance and derive the data mode= ls, it may do so. The working group will decide later whether the informa= tion model needs to be published as an RFC. > Other aspects of NSFs, such as device or network provisioning and confi= guration, are out of scope. > > Controlling and monitoring aspects of NSFs include the ability to speci= fy rules (by a single controller at the first phase), query, and monitor = NSFs by one or more management entities. The initial phase of I2NSF will= only consider one single controller that can specify or change rules to = NSFs because multi-headed control requires the coordination to avoid pote= ntial conflict of rules. The NSFs can be monitored by multiple entities, = but the database update and synchronization among multiple management ent= ities are out of scope for I2NSF. As there are many different security ve= ndors supporting different features and functions on their devices, I2NSF= will focus on flow-based NSFs that provide treatment to packets/flows, s= uch as Intrusion Protection/Detection System (IPS/IDS), Web filtering, fl= ow filtering, deep packet inspection, or pattern matching and remediation= =2E > > I2NSF will specify interfaces at two functional levels for the control = and monitoring of network security functions: > > The I2NSF Capability Layer specifies how to control and monitor NSFs at= a functional implementation level. The term =E2=80=9CFunctional Impleme= ntation=E2=80=9D is used to emphasize that the rules (for control and > monitor) of NSFs have to be implementable by most NSFs. I2NSF will stan= dardize a set of interfaces by which a security controller can invoke, op= erate, and monitor NSFs. > > The I2NSF Service Layer defines how clients=E2=80=99 security policies = may be expressed to a security controller. The controller implements its = policies according to the various capabilities provided by the I2NSF capa= bility Layer. The I2NSF Service Layer also allows the client to monitor = the client specific policies. > > Since there could be many depths or types of Service Layer policies, th= e following bullets further clarify the scope of I2NSF: > o Only the Simple Service Layer policies that are modeled as close= ly as possible on the Capability Layer are within the scope. > Such a Simple Service Layer will enable a security controller to handle= issues like multi-tenancy and the choice between available NSFs for a gi= ven policy. > o I2NSF will not specify abstract or sophisticated policies from c= lients. Expressing policies in ways other than the model used by the Capa= bility Layer is out of scope. > o The translation mechanism/methods from Service Layer policies to= Capability layer comments are out of scope for I2NSF. > However, I2NSF will provide a discussion forum for Informational drafts= on data models, APIs, etc. that demonstrate how more complex Service Lay= er policies and formats may be translated to Capability Layer functions. = Such documents would be pursued outside the WG. > > Standard interfaces for monitoring and controlling the behavior of NSFs= are essential building blocks for providers of security service to autom= ate the use of different NSFs from multiple vendors. This work will lever= age the existing protocols and data models defined by the I2RS, NETCONF, = and NETMOD working groups. If extensions to these protocols or data model= s are needed, requirements will be developed by this WG, and the extensio= ns will be developed in cooperation with the WGs responsible for the prot= ocols. > > The I2NSF WG=E2=80=99s deliverables include: > > o A single document covering use cases, problem statement, and gap= analysis document. This document will initially be produced for referenc= e as a living list to track and record discussions: the WG may decide to = not publish this document as an RFC. > o A framework document, presenting an overview of the use of NSFs = and the purpose of the models developed by the WG. This document will als= o be a reference text to guide the main work and the WG may decide to not= publish this document as an RFC. > o If the working group considers it necessary, a single, unified, = Information Model to describe the control and monitoring of flow-based NS= Fs. > o YANG data models for the control and monitoring of NSFs. > o Requests to the IANA for the creation of a registry that enables= the characteristics and behavior of NSFs to be specified using a vendor-= neutral vocabulary without requiring the NSFs themselves to be standardiz= ed. The registry enables various mechanisms, including policy rules, to b= e used to match monitor and control functions to the needs of an applicat= ion and/or environment. > An examination of existing secure communication mechanisms to identify = the appropriate ones for carrying the controlling and monitoring informat= ion between the NSFs and their management entities. This document may als= o be produced as a working document that is not published as an RFC. > > The WG may additionally choose to develop documents to describe require= ments for extensions (if any) to existing protocols used by the WG, to ex= plain how the data models are used to monitor and control flow-based NSFs= , and to describe how to use I2RS and NETCONF to carry the content of the= data models. These documents may be published as Informational RFCs of m= ay be working documents that are discarded once they have triggered the n= ecessary work. > > The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG= will communicate with external SDOs like ETSI NFV and will encourage ope= n source code development related to the WG scope in organizations like O= NF, OpenStack, ODL, and OPNFV. > > > On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey wrote= : >> Thanks to everyone who has contributed towards developing the charter.= >> I believe we are close to consensus so this is a consensus call for th= e I2NSF >> charter. The charter text is located at >> https://sites.google.com/site/interface2nsf/home. Please send >> comments on this charter to the I2NSF list by September 2, 2015. >> >> Thank you, >> >> Joe >> >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf >> > > From nobody Wed Aug 26 16:31:34 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC46D1B3451 for ; Wed, 26 Aug 2015 16:31:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bjHW8JPGfe0X for ; Wed, 26 Aug 2015 16:31:27 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E9811B3439 for ; Wed, 26 Aug 2015 16:31:26 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CAL66608; Wed, 26 Aug 2015 23:31:24 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 27 Aug 2015 00:31:24 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Wed, 26 Aug 2015 16:31:15 -0700 From: Linda Dunbar To: Flemming Andreasen , Kathleen Moriarty , Joseph Salowey Thread-Topic: [I2nsf] Consensus call on I2NSF Charter Thread-Index: AQHQ38JC8Hlj8uHTckqihpoxsIKx6J4fIKyA//+uYfCAAIjTgP//jF/Q Date: Wed, 26 Aug 2015 23:31:14 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D19B03@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> In-Reply-To: <55DE41BB.3000801@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.236] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D19B03dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2015 23:31:34 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D19B03dfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RmxlbW1pbmcsDQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBkZXRhaWxlZCBjb21tZW50 cy4gVGhhbmsgeW91IGZvciBjYXRjaGluZyB0aG9zZSB0eXBvcyAoY29ycmVjdGVkIG9uIHRoZSBJ Mk5TRiB3aWtpIG5vdykuIFdlIHJlYWxseSBuZWVkIHRoZSBmcmVzaCBzZXQgb2YgZXllcyB0byBs b29rIGF0IGl0Lg0KDQpZb3Ugc3RhdGVkOg0KLSBUaGUgdGhpcmQgcGFyYWdyYXBoIHNheXMgdGhh dCAiVGhlIE5TRnMgY2FuIGJlIG1vbml0b3JlZCBieSBtdWx0aXBsZSBlbnRpdGllcy4uLiI7IGRv ZXMgdGhpcyBpbXBseSBhIDE6TiAoZGlyZWN0KSBtb25pdG9yaW5nIHJlbGF0aW9uc2hpcCA/DQpJ ZiBzbywgdGhhdCBzZWVtcyB0byBnZXQgdG8gYSBkZXNpZ24gZGVjaXNpb24gdGhhdCBtYXkgYmUg cHJlbWF0dXJlLg0KDQpbTGluZGFdIFRoZSBpbnRlbnQgaXMgdG8gZGVzY3JpYmUgYSBzY2VuYXJp byB0aGF0IGEgTlNGIG1heSBzZW5kIGRpZmZlcmVudCBvdXRwdXRzIHRvIGRpZmZlcmVudCBlbnRp dGllcy4gIEZvciBleGFtcGxlLCBzb21lIHN0YXRpc3RpY3MgcmVwb3J0IHRvIOKAnEFuYWx5dGlj cyBzeXN0ZW3igJ0sIOKAnHJ1bGUgcXVlcnnigJ0gdG8gbWFuYWdlbWVudCBlbnRpdHkuIENhbiB5 b3Ugc3VnZ2VzdCBhIGJldHRlciB3b3JkaW5nIGZvciB0aGlzPw0KDQoNCk90aGVyIFJlcGxpZXMg YXJlIGluc2VydGVkIGJlbG93Og0KDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZy b206IEZsZW1taW5nIEFuZHJlYXNlbiBbbWFpbHRvOmZhbmRyZWFzQGNpc2NvLmNvbV0NClNlbnQ6 IFdlZG5lc2RheSwgQXVndXN0IDI2LCAyMDE1IDU6NDYgUE0NClRvOiBMaW5kYSBEdW5iYXI7IEth dGhsZWVuIE1vcmlhcnR5OyBKb3NlcGggU2Fsb3dleQ0KQ2M6IGkybnNmQGlldGYub3JnDQpTdWJq ZWN0OiBSZTogW0kybnNmXSBDb25zZW5zdXMgY2FsbCBvbiBJMk5TRiBDaGFydGVyDQoNCkFwb2xv Z2llcyBmb3Igam9pbmluZyB0aGUgZGlzY3Vzc2lvbiBsYXRlIC0ganVzdCBnb3QgYmFjayBmcm9t IFBUTy4gSW4gYW55IGNhc2UsIHBsZWFzZSBmaW5kIHNvbWUgYWRkaXRpb25hbCBjb21tZW50cyBv biB0aGUgcHJvcG9zZWQgY2hhcnRlciBiZWxvdyAoc29tZSBtb3JlIHN1YnN0YW50aWFsIHRoYW4g b3RoZXJzKToNCg0KLSBUaGUgZmlyc3QgcGFyYWdyYXBoIHN0YXJ0cyBvdXQgYnkgZGVmaW5pbmcg d2hhdCBhbiBOU0YgaXMsIGFuZCB3ZSBjYW4gYXJndWUgYWJvdXQgc29tZSBvZiB0aGUgcG9pbnRz IGluIHRoZXJlIGZvciB2YXJpb3VzIHNlY3VyaXR5IGZ1bmN0aW9ucyAoZS5nLiBJIG1heSB3YW50 IHRvIGRldGVjdCBub3JtYWwgbmV0d29yayBiZWhhdmlvciB0byBlc3RhYmxpc2ggYSBiYXNlbGlu ZSwgd2hpY2ggZG9lcyBub3Qgc2VlbSB0byBiZSBjb3ZlcmVkIGJ5IHRoZSBjdXJyZW50IGRlZmlu aXRpb24pLg0KW0xpbmRhXSBPdmVyIHRoZSBjb3Vyc2Ugb2YgSTJOU0YgKGFib3V0IGEgeWVhciks ICB3ZSBoYXZlIGdvbmUgdGhyb3VnaCBhIGxvbmcgZGViYXRlIG9uIHdoYXQgTlNGcyBzaG91bGQg YmUgY29uc2lkZXJlZCBieSBJRVRGIEkyTlNGLiBBcyB0aGUgcmVzdWx0IG9mIHRoZSBsb25nIGRl YmF0ZSwgd2UgdXNlIHRoZSBkZWZpbml0aW9uIHRvIGNsYXNzaWZ5IGEgc2V0IG9mIGZ1bmN0aW9u cyB0byBiZSBjb25zaWRlcmVkIGZvciBJRVRGIEkyTlNGICh0aGVuIGZ1cnRoZXIgbmFycm93aW5n IGRvd24gdG8gRmxvdy1iYXNlZCBOU0ZzKS4NClRoZSBmdW5jdGlvbiB5b3UgZGVzY3JpYmVkLCBp LmUuIGRldGVjdGluZyBub3JtYWwgbmV0d29yayBiZWhhdmlvciB0byBlc3RhYmxpc2ggYSBiYXNl bGluZSBpcyBub3QgaW4gdGhlIHNjb3BlIG9mIEkyTlNGLCBldmVuIHRob3VnaCB0aGlzIGZ1bmN0 aW9uIGNhbiBhbHNvIGJlICJwcm92aWRlZCBhbmQgY29uc3VtZWQgaW4gaW5jcmVhc2luZ2x5IGRp dmVyc2UgZW52aXJvbm1lbnRzIi4NCg0KDQpJIGRvbid0IHRoaW5rIHRoYXQgd2lsbCBiZSBhIHBy b2R1Y3RpdmUgZGlzY3Vzc2lvbiB0aG91Z2gsIG5vciBpcyBpdCBuZWNlc3NhcnkuIEluc3RlYWQs IEknZCBzdWdnZXN0IHdlIGFyZSBub3Qgb3Zlcmx5IHByZXNjcmlwdGl2ZSwgYnV0IHJhdGhlciB2 aWV3IHRoZXNlIGFzIHBvc3NpYmxlIE5TRiBmZWF0dXJlcywgYW5kIHN1cHBsZW1lbnQgdGhlbSB3 aXRoIHNvbWUgYWN0dWFsIHByb2R1Y3QgZXhhbXBsZXMgKGUuZy4gRlcsIE5HRlcsIElQUywgZXRj LikuIFNpbWlsYXJseSwgc2luY2Ugd2UgbGltaXQgb3VyIHNjb3BlIHRvICJmbG93LWJhc2VkIE5T RnMiLCB3ZSBtYXkgd2FudCB0byBtYWtlIHRoYXQgY2xlYXIgaGVyZS4gQW4gZXhhbXBsZSBvZiBh IHNlY3VyaXR5IGZ1bmN0aW9uIHRoYXQgd291bGQgKm5vdCogYmUgaW4gc2NvcGUgbWF5IGJlIGhl bHBmdWwgdG9vLg0KDQpbTGluZGFdIEFsbCB0aGUgTlNGcyBpbiBJMk5TRiBjb250ZXh0IGFyZSDi gJxmZWF0dXJlc+KAnSwgd2hvc2UgZm9ybSBmYWN0b3IgY2FuIGJlIHByb3ZpZGVkIHBoeXNpY2Fs IGJveCBvciB2aXJ0dWFsaXplZCBmb3JtYXQuIFNvbWUgZm9ybSBmYWN0b3JzLCBpLmUuIGRldmlj ZXMgb3IgVk0sIGNhbiBwcm92aWRlIG11bHRpcGxlIOKAnGZ1bmN0aW9uc+KAnS4gICBEbyB5b3Ug dGhpbmsgdGhlIHNlbnRlbmNlcyBpbiB0aGUgdGhpcmQgcGFyYWdyYXBoIGlzIGdvb2QgZW5vdWdo IHRvIGRlc2NyaWJlIHdoYXQgeW91IHdhbnQ/DQoNCiAgICAgIOKAnEkyTlNGIHdpbGwgZm9jdXMg b24gZmxvdy1iYXNlZCBOU0ZzIHRoYXQgcHJvdmlkZSB0cmVhdG1lbnQgdG8gcGFja2V0cy9mbG93 cywgc3VjaCBhcyBJbnRydXNpb24gUHJvdGVjdGlvbi9EZXRlY3Rpb24gU3lzdGVtIChJUFMvSURT KSwgV2ViIGZpbHRlcmluZywgZmxvdyBmaWx0ZXJpbmcsIGRlZXAgcGFja2V0IGluc3BlY3Rpb24s IG9yIHBhdHRlcm4gbWF0Y2hpbmcgYW5kIHJlbWVkaWF0aW9uLuKAnQ0KDQoNCg0KDQotIFRoZSBj aGFydGVyIHNlZW1zIHRvIG9wZXJhdGUgd2l0aCB0aGUgbm90aW9uIG9mIGEgInNlY3VyaXR5IGNv bnRyb2xsZXIiIHRoYXQgaW50ZXJhY3RzIHdpdGggdGhlICJOU0YiLiBJZiBJIHVuZGVyc3RhbmQg Y29ycmVjdGx5LCB0aGUgc2VjdXJpdHkgY29udHJvbGxlciBpbXBsZW1lbnRzIHRoZSAiU2Vydmlj ZSBMYXllciIgYW5kIHRoZSBOU0YgaW1wbGVtZW50cyB0aGUgIkNhcGFiaWxpdHkgTGF5ZXIiLiBG dXJ0aGVybW9yZSwgd2UgaGF2ZSAiY2xpZW50cyIgdGhhdCBpbnRlcmFjdCB3aXRoIHRoZSBzZWN1 cml0eSBjb250cm9sbGVyIHRvIGltcGxlbWVudCBwb2xpY2llcyAoYnkgbGV2ZXJhZ2luZyB0aGUg c2VydmljZSBsYXllcikuIElmIHNvLCBpdCB3b3VsZCBiZSBnb29kIHRvIGNsYXJpZnkgdGhpcyB0 YXhvbm9teSBlYXJsaWVyIGluIHRoZSBjaGFydGVyLiBJZiBub3QsIHRoZW4gSSBwcm9iYWJseSBu ZWVkIHNvbWUgY2xhcmlmaWNhdGlvbnMgaW4gdGhlIHRleHQuDQoNCltMaW5kYV0g4oCcU2VjdXJp dHkgY29udHJvbGxlcuKAnSBpcyBhIGNvbmNlcHR1YWwgZW50aXR5LCBtZWFuaW5nIGFuIGVudGl0 eSB0byBzZW5kIGltcGxlbWVudGFibGUgcnVsZXMgKGNhcGFiaWxpdHkgbGF5ZXIpIHRvIHRoZSBO U0ZzLiBUaGVyZSBjb3VsZCBiZSBtdWx0aXBsZSBvZiB0aGVtLCBlYWNoIHJlc3BvbnNpYmxlIGZv ciBvbmUgdHlwZSBvZiBOU0YgKGkuZS4gbWFuYWdpbmcgdGhlIGluc3RhbmNlcyBvZiB0aGUgTlNG cykuDQpJMk5TRiBpbmNsdWRlcyDigJxTaW1wbGUgU2VydmljZSBMYXllcuKAnSB0aGF0IG1vZGVs cyBjbG9zZWx5IHRvIHRoZSDigJxDYXBhYmlsaXR5IExheWVy4oCdLiBGb3IgZXhhbXBsZTogY2xp ZW50IGNhbiBzcGVjaWZ5IHRoZSBydWxlcyB3aXRob3V0IHNwZWNpZnkgd2hpY2ggaW5zdGFuY2Vz IG9mIHRoZSBOU0YuIFRoZSDigJxDb250cm9sbGVy4oCdIG1hbmFnZSB0aGUgaW5zdGFuY2VzLCBh cyBkZXNjcmliZWQgYnkgVGhlIGZpZ3VyZSBpbiBJMk5TRiBGcmFtZXdvcmsgZG9jdW1lbnQ6DQoN CiArIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtICsgICsgLSAtIC0gLSAtIC0gLSAtIC0g LSAtIC0gLSAtIC0gKw0KIHwgIE5TRi1BICArLS0tLS0tLS0tLS0tLS0rICAgICAgfCAgfCAgTlNG LUIgICstLS0tLS0tLS0tLS0tLSsgICAgICB8DQogfCAgICAgICAgIHwgICAgQ29udHJvbGxlcnwg ICAgICB8ICB8ICAgICAgICAgfCAgICBDb250cm9sbGVyfCAgICAgIHwNCiB8ICAgICAgICAgKy0t LS0tLS0tLS0tLS0tKyAgICAgIHwgIHwgICAgICAgICArLS0tLS0tLS0tLS0tLS0rICAgICAgfA0K IHwgKyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtICsgfCAgfCArIC0gLSAtIC0gLSAtIC0gLSAt IC0gLSAtIC0gKyB8DQogfCB8Ky0tLS0tLS0tLSsgICAgICstLS0tLS0tLS0rfCB8ICB8IHwrLS0t LS0tLS0tKyAgICAgKy0tLS0tLS0tLSt8IHwNCiB8IHx8IE5TRi1BIzEgfCAuLi4gfCAgTlNGLUEj bnx8IHwgIHwgfHwgIE5TRi1CIzF8IC4uLiB8ICBOU0YtQiNtfHwgfA0KIHwgfCstLS0tLS0tLS0r ICAgICArLS0tLS0tLS0tK3wgfCAgfCB8Ky0tLS0tLS0tLSsgICAgICstLS0tLS0tLS0rfCB8DQog fCB8ICAgICAgICAgTlNGLUEgY2x1c3RlciAgICAgfCB8ICB8IHwgICAgICAgICAgTlNGLUIgY2x1 c3RlciAgICB8IHwNCiB8ICsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSArIHwgIHwgKyAtIC0g LSAtIC0gLSAtIC0gLSAtIC0gLSAtICsgfA0KICsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAt IC0gKyAgKyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSArDQoNCg0KLSBJbiB0aGUgZGVm aW5pdGlvbiBvZiB0aGUgIkNhcGFiaWxpdHkgTGF5ZXIiLCB0aGVyZSBpcyBhIHN0YXRlbWVudCBh Ym91dCAicnVsZXMuLi5vZiBOU0ZzIGhhdmUgdG8gYmUgaW1wbGVtZW50YWJsZSBieSBtb3N0IE5T RnMiLiBEbyB5b3UgbWVhbiBhbGwgTlNGcyBvciBOU0ZzIG9mIGEgZ2l2ZW4gdHlwZSAoSSBhc3N1 bWUgd2UgaGF2ZSBkaWZmZXJlbnQgdHlwZXMgb2YgTlNGcykgPw0KW0xpbmRhXSB5ZXMuDQoNCi0g UG9saWNpZXMgYXJlIGxhYmVsZWQgYXMgInNpbXBsZSIgb3IgImFic3RyYWN0IG9yIHNvcGhpc3Rp Y2F0ZWQiDQp3aXRob3V0IGZ1cnRoZXIgZGVmaW5pdGlvbjsgSSdtIG5vdCBzdXJlIHdoZXJlIHdl IGRyYXcgdGhhdCBsaW5lIG9yIGhvdyB0byBkbyB0aGF0IGluIHRoZSBjaGFydGVyOyBtYXliZSBj bGFyaWZ5aW5nIHRoYXQgcGFydCBuZWVkcyB0byBiZSBhIGRlbGl2ZXJhYmxlID8NCltMaW5kYV0g 4oCcc2ltcGxl4oCdIG1lYW5zIHRoYXQgdGhleSBjYW4gYmUgZGlyZWN0bHkgdHJhbnNsYXRlZCB0 byBjYXBhYmlsaXR5IGxheWVyIHJ1bGVzIHdpdGggc2ltcGxlIG1hcHBpbmcsIGUuZy4gd2l0aG91 dCBleHBsaWNpdCBzdGF0aW5nIHdoaWNoIGluc3RhbnRpYXRpb24sIG1heSBoYXZlIGN1c3RvbWVy IElEIHRoYXQgY2FuIGJlIHRyYW5zbGF0ZWQgdG8gc29tZSB0YWdzIGNhcnJpZWQgYnkgcGFja2V0 cw0KDQotIEEgbnVtYmVyIG9mIGRlbGl2ZXJhYmxlcyBtYXkgbm90IGJlIHB1Ymxpc2hlZCBhcyBh biBSRkM7IHdoeSBub3QgKHRoZXkgc2VlbSB0byBzZXQgdGhlIHN0YWdlIGZvciBzZXZlcmFsIG90 aGVyIGRlbGl2ZXJhYmxlcyBhbmQgaGVuY2UgYXJlIHJlbGV2YW50IGZvciBjb25zdW1lcnMgb2Yg dGhlIGluZm9ybWF0aW9uIGFuZCBkYXRhIG1vZGVscyBsYXRlciBvbikgPw0KDQpbTGluZGFdIFRo ZSBXRyBncm91cCBtYXkgZGVjaWRlIHRvIHB1Ymxpc2ggdGhlbSBhcyBSRkMgb3Igbm90IGxhdGVy LiBCdXQgdGhlIGNoYXJ0ZXIgZG9lc27igJl0IHNwZWNpZnkgd2hpY2ggd2F5LiBUaGF0IGlzIGhv dyBJRVNHIHdhbnRlZC4NCg0KLSBUaGUgcGFydCBhYm91dCBJMk5TRiBwcm92aWRpbmcgYSAiZGlz Y3Vzc2lvbiBmb3J1bSBmb3IgSW5mb3JtYXRpb25hbCBkcmFmdHMgb24uLi4uLlttb3JlIGNvbXBs ZXggU2VydmljZSBMYXllciBwb2xpY2llc10uLi4iIGlzIGNvbmZ1c2luZyB0byBtZS4gVGhlIHdv cmsgc2VlbXMgdG8gYmUgcHVyc3VlZCBvdXRzaWRlIHRoZSBXRywgc28gdGhlcmUgYXJlIG5vIGRl bGl2ZXJhYmxlcyBhbmQgcHJlc3VtYWJseSBubyBhZ2VuZGEgdGltZSB3aWxsIGJlIGFsbG9jYXRl ZCBlaXRoZXIuDQpbTGluZGFdIHRoaXMgaXMgdG8gYWRkcmVzcyB0aGUgaW5mb3JtYXRpb24gZG9j dW1lbnRzIHRoYXQgZGVzY3JpYmUgdGhlIEkyTlNGIGRlbW8sIG9wZW4gc291cmNlIG9yIGludGVy b3BlcmFiaWxpdHkgaW5pdGlhdGl2ZXMgdGhhdCBhcmUgY29uZHVjdGVkIG91dHNpZGUgdGhlIFdH LiBFLmcgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQteGllLWkybnNmLWRl bW8tb3V0bGluZS1kZXNpZ24vDQoNCg0KDQpJdCdzIGFsc28gbm90IGNsZWFyIHRvIG1lIHRoYXQg d2UgY2FuL3Nob3VsZCBzdGF0ZSB0aGF0IHN1Y2ggZG9jdW1lbnRzIHdvdWxkIGJlIEluZm9ybWF0 aW9uYWwuIFdlIG1heSBkZWNpZGUgdGhhdCB3ZSBuZWVkIHNvbWUgcHJvY2VkdXJlcyBmb3IgaG93 IHRvIGRlZmluZSBzdWNoIGRvY3VtZW50cywgaGF2ZSBkZXNpZ25hdGVkIGV4cGVydHMsIGEgZGly ZWN0b3JhdGUsIGV0Yy4gdG8gcmV2aWV3IHRoZW0gZXRjLiBJJ20gZ3Vlc3NpbmcgdGhpcyBpcyBh bGwgYSBiaXQgcHJlbWF0dXJlIHRob3VnaCwgYnV0IGFnYWluLCB3ZSBtYXkgd2FudCB0byBub3Rl IHRoYXQgYXMgYW4gaXNzdWUgaW4gdGhlIGNoYXJ0ZXIgdGhhdCB0aGUgV0cgbmVlZHMgdG8gcmVz b2x2ZSBhdCBzb21lIHBvaW50Lg0KDQpbTGluZGFdIEFncmVlIHdpdGggeW91LiBJIHdpbGwgc2Vl IGhvdyBBRCB3YW50cyB0byBhZGRyZXNzIHRoaXMgc3VnZ2VzdGlvbiAuDQoNCg0KTml0czoNCi0g Zmlyc3QgcGFyYWdyYXBoOg0Kcy90aGUgbWl0aWdhdGUvbWl0aWdhdGUgdGhlLw0KDQotIHNlY29u ZCBsYXN0IHBhcmFncmFwaDoNCnMvUkZDcyBvZi9SRkNzIG9yDQoNCltMaW5kYV0gVGhhbmsgeW91 IGZvciB0aGUgY2F0Y2guIFRoZXkgYXJlIGNvcnJlY3RlZCBvbiB0aGUgSTJOU0Ygd2lraSBub3cu DQoNClRoYW5rcw0KDQotLSBGbGVtbWluZw0KDQoNCk9uIDgvMjYvMTUgNTozOCBQTSwgTGluZGEg RHVuYmFyIHdyb3RlOg0KPiBLYXRobGVlbiwNCj4NCj4gVGhhbmsgeW91IHZlcnkgbXVjaCBmb3Ig dGhlIGVkaXRvcmlhbCBjaGFuZ2VzLiBUaGUgY2hhcnRlciBkZXNjcmlwdGlvbg0KPiBvbiB0aGUg STJOU0YgV2lraSBoYXMgYmVlbiB1cGRhdGVkIHRvIHJlZmxlY3QgeW91ciBzdWdnZXN0ZWQgY2hh bmdlczoNCj4gaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNlMm5zZi9ob21l DQo+DQo+DQo+IExpbmRhDQo+DQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZy b206IEkybnNmIFttYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEth dGhsZWVuDQo+IE1vcmlhcnR5DQo+IFNlbnQ6IFdlZG5lc2RheSwgQXVndXN0IDI2LCAyMDE1IDI6 MjkgUE0NCj4gVG86IEpvc2VwaCBTYWxvd2V5DQo+IENjOiBpMm5zZkBpZXRmLm9yZzxtYWlsdG86 aTJuc2ZAaWV0Zi5vcmc+DQo+IFN1YmplY3Q6IFJlOiBbSTJuc2ZdIENvbnNlbnN1cyBjYWxsIG9u IEkyTlNGIENoYXJ0ZXINCj4NCj4gSSBoYXZlIGEgZmV3IGVkaXRvcmlhbCBjaGFuZ2VzIGluIHRo ZSBmb2xsb3dpbmcgdGV4dCB0aGF0IGRvZXMgbm90IGNoYW5nZSB0aGUgbWVhbmluZyBvZiB0aGUg Y2hhcnRlciB0ZXh0Og0KPg0KPiBBIE5ldHdvcmsgU2VjdXJpdHkgRnVuY3Rpb24gKE5TRikgaXMg YSBmdW5jdGlvbiB1c2VkIHRvIGVuc3VyZSBpbnRlZ3JpdHksIGNvbmZpZGVudGlhbGl0eSwgYW5k IGF2YWlsYWJpbGl0eSBvZiBuZXR3b3JrIGNvbW11bmljYXRpb25zLCB0byBkZXRlY3QgdW53YW50 ZWQgbmV0d29yayBhY3Rpdml0eSwgYW5kIHRvIGJsb2NrIG9yIGF0IGxlYXN0IHRoZSBtaXRpZ2F0 ZSBlZmZlY3RzIG9mIHVud2FudGVkIGFjdGl2aXR5LiBOU0ZzIGFyZSBwcm92aWRlZCBhbmQgY29u c3VtZWQgaW4gaW5jcmVhc2luZ2x5IGRpdmVyc2UgZW52aXJvbm1lbnRzLiBVc2VycyBvZiBOU0Zz IGNvdWxkIGNvbnN1bWUgbmV0d29yayBzZWN1cml0eSBzZXJ2aWNlcyBob3N0ZWQgYnkgb25lIG9y IG1vcmUgcHJvdmlkZXJzLCB3aGljaCBtYXkgYmUgdGhlaXIgb3duIGVudGVycHJpc2UsIHNlcnZp Y2UgcHJvdmlkZXJzLCBvciBhIGNvbWJpbmF0aW9uIG9mIGJvdGguICBTaW1pbGFybHksIHNlcnZp Y2UgcHJvdmlkZXJzIG1heSBvZmZlciB0aGVpciBjdXN0b21lcnMgbmV0d29yayBzZWN1cml0eSBz ZXJ2aWNlcyB0aGF0IGFyZSBlbmZvcmNlZCBieSBtdWx0aXBsZSBzZWN1cml0eSBwcm9kdWN0cyBh bmQvb3IgZnVuY3Rpb25zIGZyb20gZGlmZmVyZW50IHZlbmRvcnMuIE5TRnMgbWF5IGJlIHByb3Zp ZGVkIGJ5IHBoeXNpY2FsIGFuZC9vciB2aXJ0dWFsaXplZCBpbmZyYXN0cnVjdHVyZS4gV2l0aG91 dCBzdGFuZGFyZCBpbnRlcmZhY2VzIHRvIGNvbnRyb2wgYW5kIG1vbml0b3IgdGhlIGJlaGF2aW9y IG9mIE5TRnMsIGl0IGhhcyBiZWNvbWUgdmlydHVhbGx5IGltcG9zc2libGUgZm9yIHByb3ZpZGVy cyBvZiBzZWN1cml0eSBzZXJ2aWNlcyB0byBhdXRvbWF0ZSBzZXJ2aWNlIG9mZmVyaW5ncyB0aGF0 IHV0aWxpemUgZGlmZmVyZW50IHNlY3VyaXR5IGZ1bmN0aW9ucyBmcm9tIG11bHRpcGxlIHZlbmRv cnMuDQo+DQo+IFRoZSBnb2FsIG9mIEkyTlNGIGlzIHRvIGRlZmluZSBhIHNldCBvZiBzb2Z0d2Fy ZSBpbnRlcmZhY2VzIGFuZCBkYXRhIG1vZGVscyBmb3IgY29udHJvbGxpbmcgYW5kIG1vbml0b3Jp bmcgYXNwZWN0cyBvZiBwaHlzaWNhbCBhbmQgdmlydHVhbCBOU0ZzLiBJZiB0aGUgd29ya2luZyBn cm91cCBmaW5kcyBpdCBuZWNlc3NhcnkgdG8gd29yayBvbiBhbiBpbmZvcm1hdGlvbiBtb2RlbCBi ZWZvcmUgdGhlIGRhdGEgbW9kZWxzLCB0byBoZWxwIHByb3ZpZGUgZ3VpZGFuY2UgYW5kIGRlcml2 ZSB0aGUgZGF0YSBtb2RlbHMsIGl0IG1heSBkbyBzby4gVGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCBk ZWNpZGUgbGF0ZXIgd2hldGhlciB0aGUgaW5mb3JtYXRpb24gbW9kZWwgbmVlZHMgdG8gYmUgcHVi bGlzaGVkIGFzIGFuIFJGQy4NCj4gT3RoZXIgYXNwZWN0cyBvZiBOU0ZzLCBzdWNoIGFzIGRldmlj ZSBvciBuZXR3b3JrIHByb3Zpc2lvbmluZyBhbmQgY29uZmlndXJhdGlvbiwgYXJlIG91dCBvZiBz Y29wZS4NCj4NCj4gQ29udHJvbGxpbmcgYW5kIG1vbml0b3JpbmcgYXNwZWN0cyBvZiBOU0ZzIGlu Y2x1ZGUgdGhlIGFiaWxpdHkgdG8gc3BlY2lmeSBydWxlcyAoYnkgYSBzaW5nbGUgY29udHJvbGxl ciBhdCB0aGUgZmlyc3QgcGhhc2UpLCBxdWVyeSwgYW5kIG1vbml0b3IgTlNGcyBieSBvbmUgb3Ig bW9yZSBtYW5hZ2VtZW50IGVudGl0aWVzLiAgVGhlIGluaXRpYWwgcGhhc2Ugb2YgSTJOU0Ygd2ls bCBvbmx5IGNvbnNpZGVyIG9uZSBzaW5nbGUgY29udHJvbGxlciB0aGF0IGNhbiBzcGVjaWZ5IG9y IGNoYW5nZSBydWxlcyB0byBOU0ZzIGJlY2F1c2UgbXVsdGktaGVhZGVkIGNvbnRyb2wgcmVxdWly ZXMgdGhlIGNvb3JkaW5hdGlvbiB0byBhdm9pZCBwb3RlbnRpYWwgY29uZmxpY3Qgb2YgcnVsZXMu IFRoZSBOU0ZzIGNhbiBiZSBtb25pdG9yZWQgYnkgbXVsdGlwbGUgZW50aXRpZXMsIGJ1dCB0aGUg ZGF0YWJhc2UgdXBkYXRlIGFuZCBzeW5jaHJvbml6YXRpb24gYW1vbmcgbXVsdGlwbGUgbWFuYWdl bWVudCBlbnRpdGllcyBhcmUgb3V0IG9mIHNjb3BlIGZvciBJMk5TRi4gQXMgdGhlcmUgYXJlIG1h bnkgZGlmZmVyZW50IHNlY3VyaXR5IHZlbmRvcnMgc3VwcG9ydGluZyBkaWZmZXJlbnQgZmVhdHVy ZXMgYW5kIGZ1bmN0aW9ucyBvbiB0aGVpciBkZXZpY2VzLCBJMk5TRiB3aWxsIGZvY3VzIG9uIGZs b3ctYmFzZWQgTlNGcyB0aGF0IHByb3ZpZGUgdHJlYXRtZW50IHRvIHBhY2tldHMvZmxvd3MsIHN1 Y2ggYXMgSW50cnVzaW9uIFByb3RlY3Rpb24vRGV0ZWN0aW9uIFN5c3RlbSAoSVBTL0lEUyksIFdl YiBmaWx0ZXJpbmcsIGZsb3cgZmlsdGVyaW5nLCBkZWVwIHBhY2tldCBpbnNwZWN0aW9uLCBvciBw YXR0ZXJuIG1hdGNoaW5nIGFuZCByZW1lZGlhdGlvbi4NCj4NCj4gSTJOU0Ygd2lsbCBzcGVjaWZ5 IGludGVyZmFjZXMgYXQgdHdvIGZ1bmN0aW9uYWwgbGV2ZWxzIGZvciB0aGUgY29udHJvbCBhbmQg bW9uaXRvcmluZyBvZiBuZXR3b3JrIHNlY3VyaXR5IGZ1bmN0aW9uczoNCj4NCj4gVGhlIEkyTlNG IENhcGFiaWxpdHkgTGF5ZXIgc3BlY2lmaWVzIGhvdyB0byBjb250cm9sIGFuZCBtb25pdG9yIE5T RnMNCj4gYXQgYSBmdW5jdGlvbmFsIGltcGxlbWVudGF0aW9uIGxldmVsLiAgVGhlIHRlcm0g4oCc RnVuY3Rpb25hbA0KPiBJbXBsZW1lbnRhdGlvbuKAnSBpcyB1c2VkIHRvIGVtcGhhc2l6ZSB0aGF0 IHRoZSBydWxlcyAoZm9yIGNvbnRyb2wgYW5kDQo+IG1vbml0b3IpIG9mIE5TRnMgaGF2ZSB0byBi ZSBpbXBsZW1lbnRhYmxlIGJ5IG1vc3QgTlNGcy4gSTJOU0Ygd2lsbCBzdGFuZGFyZGl6ZSBhIHNl dCBvZiBpbnRlcmZhY2VzIGJ5IHdoaWNoIGEgc2VjdXJpdHkgY29udHJvbGxlciBjYW4gaW52b2tl LCBvcGVyYXRlLCBhbmQgbW9uaXRvciBOU0ZzLg0KPg0KPiBUaGUgSTJOU0YgU2VydmljZSBMYXll ciBkZWZpbmVzIGhvdyBjbGllbnRz4oCZIHNlY3VyaXR5IHBvbGljaWVzIG1heSBiZSBleHByZXNz ZWQgdG8gYSBzZWN1cml0eSBjb250cm9sbGVyLiBUaGUgY29udHJvbGxlciBpbXBsZW1lbnRzIGl0 cyBwb2xpY2llcyBhY2NvcmRpbmcgdG8gdGhlIHZhcmlvdXMgY2FwYWJpbGl0aWVzIHByb3ZpZGVk IGJ5IHRoZSBJMk5TRiBjYXBhYmlsaXR5IExheWVyLiAgVGhlIEkyTlNGIFNlcnZpY2UgTGF5ZXIg YWxzbyBhbGxvd3MgdGhlIGNsaWVudCB0byBtb25pdG9yIHRoZSBjbGllbnQgc3BlY2lmaWMgcG9s aWNpZXMuDQo+DQo+IFNpbmNlIHRoZXJlIGNvdWxkIGJlIG1hbnkgZGVwdGhzIG9yIHR5cGVzIG9m IFNlcnZpY2UgTGF5ZXIgcG9saWNpZXMsIHRoZSBmb2xsb3dpbmcgYnVsbGV0cyBmdXJ0aGVyIGNs YXJpZnkgdGhlIHNjb3BlIG9mIEkyTlNGOg0KPiAgICAgIG8gT25seSB0aGUgU2ltcGxlIFNlcnZp Y2UgTGF5ZXIgcG9saWNpZXMgdGhhdCBhcmUgbW9kZWxlZCBhcyBjbG9zZWx5IGFzIHBvc3NpYmxl IG9uIHRoZSBDYXBhYmlsaXR5IExheWVyIGFyZSB3aXRoaW4gdGhlIHNjb3BlLg0KPiBTdWNoIGEg U2ltcGxlIFNlcnZpY2UgTGF5ZXIgd2lsbCBlbmFibGUgYSBzZWN1cml0eSBjb250cm9sbGVyIHRv IGhhbmRsZSBpc3N1ZXMgbGlrZSBtdWx0aS10ZW5hbmN5IGFuZCB0aGUgY2hvaWNlIGJldHdlZW4g YXZhaWxhYmxlIE5TRnMgZm9yIGEgZ2l2ZW4gcG9saWN5Lg0KPiAgICAgIG8gSTJOU0Ygd2lsbCBu b3Qgc3BlY2lmeSBhYnN0cmFjdCBvciBzb3BoaXN0aWNhdGVkIHBvbGljaWVzIGZyb20gY2xpZW50 cy4gRXhwcmVzc2luZyBwb2xpY2llcyBpbiB3YXlzIG90aGVyIHRoYW4gdGhlIG1vZGVsIHVzZWQg YnkgdGhlIENhcGFiaWxpdHkgTGF5ZXIgaXMgb3V0IG9mIHNjb3BlLg0KPiAgICAgIG8gVGhlIHRy YW5zbGF0aW9uIG1lY2hhbmlzbS9tZXRob2RzIGZyb20gU2VydmljZSBMYXllciBwb2xpY2llcyB0 byBDYXBhYmlsaXR5IGxheWVyIGNvbW1lbnRzIGFyZSBvdXQgb2Ygc2NvcGUgZm9yIEkyTlNGLg0K PiBIb3dldmVyLCBJMk5TRiB3aWxsIHByb3ZpZGUgYSBkaXNjdXNzaW9uIGZvcnVtIGZvciBJbmZv cm1hdGlvbmFsIGRyYWZ0cyBvbiBkYXRhIG1vZGVscywgQVBJcywgZXRjLiB0aGF0IGRlbW9uc3Ry YXRlIGhvdyBtb3JlIGNvbXBsZXggU2VydmljZSBMYXllciBwb2xpY2llcyBhbmQgZm9ybWF0cyBt YXkgYmUgdHJhbnNsYXRlZCB0byBDYXBhYmlsaXR5IExheWVyIGZ1bmN0aW9ucy4gIFN1Y2ggZG9j dW1lbnRzIHdvdWxkIGJlIHB1cnN1ZWQgb3V0c2lkZSB0aGUgV0cuDQo+DQo+IFN0YW5kYXJkIGlu dGVyZmFjZXMgZm9yIG1vbml0b3JpbmcgYW5kIGNvbnRyb2xsaW5nIHRoZSBiZWhhdmlvciBvZiBO U0ZzIGFyZSBlc3NlbnRpYWwgYnVpbGRpbmcgYmxvY2tzIGZvciBwcm92aWRlcnMgb2Ygc2VjdXJp dHkgc2VydmljZSB0byBhdXRvbWF0ZSB0aGUgdXNlIG9mIGRpZmZlcmVudCBOU0ZzIGZyb20gbXVs dGlwbGUgdmVuZG9ycy4gVGhpcyB3b3JrIHdpbGwgbGV2ZXJhZ2UgdGhlIGV4aXN0aW5nIHByb3Rv Y29scyBhbmQgZGF0YSBtb2RlbHMgZGVmaW5lZCBieSB0aGUgSTJSUywgTkVUQ09ORiwgYW5kIE5F VE1PRCB3b3JraW5nIGdyb3Vwcy4gSWYgZXh0ZW5zaW9ucyB0byB0aGVzZSBwcm90b2NvbHMgb3Ig ZGF0YSBtb2RlbHMgYXJlIG5lZWRlZCwgcmVxdWlyZW1lbnRzIHdpbGwgYmUgZGV2ZWxvcGVkIGJ5 IHRoaXMgV0csIGFuZCB0aGUgZXh0ZW5zaW9ucyB3aWxsIGJlIGRldmVsb3BlZCBpbiBjb29wZXJh dGlvbiB3aXRoIHRoZSBXR3MgcmVzcG9uc2libGUgZm9yIHRoZSBwcm90b2NvbHMuDQo+DQo+IFRo ZSBJMk5TRiBXR+KAmXMgZGVsaXZlcmFibGVzIGluY2x1ZGU6DQo+DQo+ICAgICAgbyBBIHNpbmds ZSBkb2N1bWVudCBjb3ZlcmluZyB1c2UgY2FzZXMsIHByb2JsZW0gc3RhdGVtZW50LCBhbmQgZ2Fw IGFuYWx5c2lzIGRvY3VtZW50LiBUaGlzIGRvY3VtZW50IHdpbGwgaW5pdGlhbGx5IGJlIHByb2R1 Y2VkIGZvciByZWZlcmVuY2UgYXMgYSBsaXZpbmcgbGlzdCB0byB0cmFjayBhbmQgcmVjb3JkIGRp c2N1c3Npb25zOiB0aGUgV0cgbWF5IGRlY2lkZSB0byBub3QgcHVibGlzaCB0aGlzIGRvY3VtZW50 IGFzIGFuIFJGQy4NCj4gICAgICBvIEEgZnJhbWV3b3JrIGRvY3VtZW50LCBwcmVzZW50aW5nIGFu IG92ZXJ2aWV3IG9mIHRoZSB1c2Ugb2YgTlNGcyBhbmQgdGhlIHB1cnBvc2Ugb2YgdGhlIG1vZGVs cyBkZXZlbG9wZWQgYnkgdGhlIFdHLiBUaGlzIGRvY3VtZW50IHdpbGwgYWxzbyBiZSBhIHJlZmVy ZW5jZSB0ZXh0IHRvIGd1aWRlIHRoZSBtYWluIHdvcmsgYW5kIHRoZSBXRyBtYXkgZGVjaWRlIHRv IG5vdCBwdWJsaXNoIHRoaXMgZG9jdW1lbnQgYXMgYW4gUkZDLg0KPiAgICAgIG8gSWYgdGhlIHdv cmtpbmcgZ3JvdXAgY29uc2lkZXJzIGl0IG5lY2Vzc2FyeSwgYSBzaW5nbGUsIHVuaWZpZWQsIElu Zm9ybWF0aW9uIE1vZGVsIHRvIGRlc2NyaWJlIHRoZSBjb250cm9sIGFuZCBtb25pdG9yaW5nIG9m IGZsb3ctYmFzZWQgTlNGcy4NCj4gICAgICBvIFlBTkcgZGF0YSBtb2RlbHMgZm9yIHRoZSBjb250 cm9sIGFuZCBtb25pdG9yaW5nIG9mIE5TRnMuDQo+ICAgICAgbyBSZXF1ZXN0cyB0byB0aGUgSUFO QSBmb3IgdGhlIGNyZWF0aW9uIG9mIGEgcmVnaXN0cnkgdGhhdCBlbmFibGVzIHRoZSBjaGFyYWN0 ZXJpc3RpY3MgYW5kIGJlaGF2aW9yIG9mIE5TRnMgdG8gYmUgc3BlY2lmaWVkIHVzaW5nIGEgdmVu ZG9yLW5ldXRyYWwgdm9jYWJ1bGFyeSB3aXRob3V0IHJlcXVpcmluZyB0aGUgTlNGcyB0aGVtc2Vs dmVzIHRvIGJlIHN0YW5kYXJkaXplZC4gVGhlIHJlZ2lzdHJ5IGVuYWJsZXMgdmFyaW91cyBtZWNo YW5pc21zLCBpbmNsdWRpbmcgcG9saWN5IHJ1bGVzLCB0byBiZSB1c2VkIHRvIG1hdGNoIG1vbml0 b3IgYW5kIGNvbnRyb2wgZnVuY3Rpb25zIHRvIHRoZSBuZWVkcyBvZiBhbiBhcHBsaWNhdGlvbiBh bmQvb3IgZW52aXJvbm1lbnQuDQo+IEFuIGV4YW1pbmF0aW9uIG9mIGV4aXN0aW5nIHNlY3VyZSBj b21tdW5pY2F0aW9uIG1lY2hhbmlzbXMgdG8gaWRlbnRpZnkgdGhlIGFwcHJvcHJpYXRlIG9uZXMg Zm9yIGNhcnJ5aW5nIHRoZSBjb250cm9sbGluZyBhbmQgbW9uaXRvcmluZyBpbmZvcm1hdGlvbiBi ZXR3ZWVuIHRoZSBOU0ZzIGFuZCB0aGVpciBtYW5hZ2VtZW50IGVudGl0aWVzLiBUaGlzIGRvY3Vt ZW50IG1heSBhbHNvIGJlIHByb2R1Y2VkIGFzIGEgd29ya2luZyBkb2N1bWVudCB0aGF0IGlzIG5v dCBwdWJsaXNoZWQgYXMgYW4gUkZDLg0KPg0KPiBUaGUgV0cgbWF5IGFkZGl0aW9uYWxseSBjaG9v c2UgdG8gZGV2ZWxvcCBkb2N1bWVudHMgdG8gZGVzY3JpYmUgcmVxdWlyZW1lbnRzIGZvciBleHRl bnNpb25zIChpZiBhbnkpIHRvIGV4aXN0aW5nIHByb3RvY29scyB1c2VkIGJ5IHRoZSBXRywgdG8g ZXhwbGFpbiBob3cgdGhlIGRhdGEgbW9kZWxzIGFyZSB1c2VkIHRvIG1vbml0b3IgYW5kIGNvbnRy b2wgZmxvdy1iYXNlZCBOU0ZzLCBhbmQgdG8gZGVzY3JpYmUgaG93IHRvIHVzZSBJMlJTIGFuZCBO RVRDT05GIHRvIGNhcnJ5IHRoZSBjb250ZW50IG9mIHRoZSBkYXRhIG1vZGVscy4gVGhlc2UgZG9j dW1lbnRzIG1heSBiZSBwdWJsaXNoZWQgYXMgSW5mb3JtYXRpb25hbCBSRkNzIG9mIG1heSBiZSB3 b3JraW5nIGRvY3VtZW50cyB0aGF0IGFyZSBkaXNjYXJkZWQgb25jZSB0aGV5IGhhdmUgdHJpZ2dl cmVkIHRoZSBuZWNlc3Nhcnkgd29yay4NCj4NCj4gVGhlIFdHIHdpbGwgd29yayBjbG9zZWx5IHdp dGggdGhlIEkyUlMsIE5FVENPTkYsIGFuZCBORVRNT0QgV0dzLiBUaGUgV0cgd2lsbCBjb21tdW5p Y2F0ZSB3aXRoIGV4dGVybmFsIFNET3MgbGlrZSBFVFNJIE5GViBhbmQgd2lsbCBlbmNvdXJhZ2Ug b3BlbiBzb3VyY2UgY29kZSBkZXZlbG9wbWVudCByZWxhdGVkIHRvIHRoZSBXRyBzY29wZSBpbiBv cmdhbml6YXRpb25zIGxpa2UgT05GLCBPcGVuU3RhY2ssIE9ETCwgYW5kIE9QTkZWLg0KPg0KPg0K PiBPbiBXZWQsIEF1ZyAyNiwgMjAxNSBhdCAxOjQ0IEFNLCBKb3NlcGggU2Fsb3dleSA8am9lQHNh bG93ZXkubmV0PG1haWx0bzpqb2VAc2Fsb3dleS5uZXQ+PiB3cm90ZToNCj4+IFRoYW5rcyB0byBl dmVyeW9uZSB3aG8gaGFzIGNvbnRyaWJ1dGVkIHRvd2FyZHMgZGV2ZWxvcGluZyB0aGUgY2hhcnRl ci4NCj4+IEkgYmVsaWV2ZSB3ZSBhcmUgY2xvc2UgdG8gY29uc2Vuc3VzIHNvIHRoaXMgaXMgYSBj b25zZW5zdXMgY2FsbCBmb3IgdGhlIEkyTlNGDQo+PiBjaGFydGVyLiAgIFRoZSBjaGFydGVyIHRl eHQgaXMgbG9jYXRlZCBhdA0KPj4gaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJm YWNlMm5zZi9ob21lLiAgUGxlYXNlIHNlbmQNCj4+IGNvbW1lbnRzIG9uIHRoaXMgY2hhcnRlciB0 byB0aGUgSTJOU0YgbGlzdCBieSBTZXB0ZW1iZXIgMiwgMjAxNS4NCj4+DQo+PiBUaGFuayB5b3Us DQo+Pg0KPj4gSm9lDQo+Pg0KPj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCj4+IEkybnNmIG1haWxpbmcgbGlzdA0KPj4gSTJuc2ZAaWV0Zi5vcmc8bWFp bHRvOkkybnNmQGlldGYub3JnPg0KPj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9pMm5zZg0KPj4NCj4NCj4NCg0KDQoNCg== --_000_4A95BA014132FF49AE685FAB4B9F17F657D19B03dfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVu dD0iTWljcm9zb2Z0IEV4Y2hhbmdlIFNlcnZlciI+DQo8IS0tIGNvbnZlcnRlZCBmcm9tIHJ0ZiAt LT4NCjxzdHlsZT48IS0tIC5FbWFpbFF1b3RlIHsgbWFyZ2luLWxlZnQ6IDFwdDsgcGFkZGluZy1s ZWZ0OiA0cHQ7IGJvcmRlci1sZWZ0OiAjODAwMDAwIDJweCBzb2xpZDsgfSAtLT48L3N0eWxlPg0K PC9oZWFkPg0KPGJvZHk+DQo8Zm9udCBmYWNlPSJDb25zb2xhcyIgc2l6ZT0iMiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Ij4NCjxkaXY+RmxlbW1pbmcsIDwvZGl2Pg0KPGRpdj4mbmJz cDs8L2Rpdj4NCjxkaXY+VGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGRldGFpbGVkIGNvbW1l bnRzLiBUaGFuayB5b3UgZm9yIGNhdGNoaW5nIHRob3NlIHR5cG9zIChjb3JyZWN0ZWQgb24gdGhl IEkyTlNGIHdpa2kgbm93KS4gV2UgcmVhbGx5IG5lZWQgdGhlIGZyZXNoIHNldCBvZiBleWVzIHRv IGxvb2sgYXQgaXQuIDwvZGl2Pg0KPGRpdj48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZu YnNwOzwvZm9udD48L2Rpdj4NCjxkaXY+WW91IHN0YXRlZDogPC9kaXY+DQo8ZGl2Pi0gVGhlIHRo aXJkIHBhcmFncmFwaCBzYXlzIHRoYXQgJnF1b3Q7VGhlIE5TRnMgY2FuIGJlIG1vbml0b3JlZCBi eSBtdWx0aXBsZSBlbnRpdGllcy4uLiZxdW90OzsgZG9lcyB0aGlzIGltcGx5IGEgMTpOIChkaXJl Y3QpIG1vbml0b3JpbmcgcmVsYXRpb25zaGlwID8gPC9kaXY+DQo8ZGl2PklmIHNvLCB0aGF0IHNl ZW1zIHRvIGdldCB0byBhIGRlc2lnbiBkZWNpc2lvbiB0aGF0IG1heSBiZSBwcmVtYXR1cmUuPC9k aXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2 Pg0KPGRpdj48Zm9udCBjb2xvcj0iIzAwNzBDMCI+W0xpbmRhXSBUaGUgaW50ZW50IGlzIHRvIGRl c2NyaWJlIGEgc2NlbmFyaW8gdGhhdCBhIE5TRiBtYXkgc2VuZCBkaWZmZXJlbnQgb3V0cHV0cyB0 byBkaWZmZXJlbnQgZW50aXRpZXMuICBGb3IgZXhhbXBsZSwgc29tZSBzdGF0aXN0aWNzIHJlcG9y dCB0byDigJxBbmFseXRpY3Mgc3lzdGVt4oCdLCDigJxydWxlIHF1ZXJ54oCdIHRvIG1hbmFnZW1l bnQgZW50aXR5LiBDYW4geW91IHN1Z2dlc3QgYSBiZXR0ZXIgd29yZGluZw0KZm9yIHRoaXM/IDwv Zm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2Zv bnQ+PC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250 PjwvZGl2Pg0KPGRpdj5PdGhlciBSZXBsaWVzIGFyZSBpbnNlcnRlZCBiZWxvdzo8L2Rpdj4NCjxk aXY+Jm5ic3A7PC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7 PC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwv Zm9udD48L2Rpdj4NCjxkaXY+LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS08YnI+DQoNCkZyb206 IEZsZW1taW5nIEFuZHJlYXNlbiBbPGEgaHJlZj0ibWFpbHRvOmZhbmRyZWFzQGNpc2NvLmNvbSI+ bWFpbHRvOmZhbmRyZWFzQGNpc2NvLmNvbTwvYT5dDQo8YnI+DQoNClNlbnQ6IFdlZG5lc2RheSwg QXVndXN0IDI2LCAyMDE1IDU6NDYgUE08YnI+DQoNClRvOiBMaW5kYSBEdW5iYXI7IEthdGhsZWVu IE1vcmlhcnR5OyBKb3NlcGggU2Fsb3dleTxicj4NCg0KQ2M6IGkybnNmQGlldGYub3JnPGJyPg0K DQpTdWJqZWN0OiBSZTogW0kybnNmXSBDb25zZW5zdXMgY2FsbCBvbiBJMk5TRiBDaGFydGVyPC9k aXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2 Pg0KPGRpdj5BcG9sb2dpZXMgZm9yIGpvaW5pbmcgdGhlIGRpc2N1c3Npb24gbGF0ZSAtIGp1c3Qg Z290IGJhY2sgZnJvbSBQVE8uIEluIGFueSBjYXNlLCBwbGVhc2UgZmluZCBzb21lIGFkZGl0aW9u YWwgY29tbWVudHMgb24gdGhlIHByb3Bvc2VkIGNoYXJ0ZXIgYmVsb3cgKHNvbWUgbW9yZSBzdWJz dGFudGlhbCB0aGFuIG90aGVycyk6PC9kaXY+DQo8ZGl2PiZuYnNwOzwvZGl2Pg0KPGRpdj4tIFRo ZSBmaXJzdCBwYXJhZ3JhcGggc3RhcnRzIG91dCBieSBkZWZpbmluZyB3aGF0IGFuIE5TRiBpcywg YW5kIHdlIGNhbiBhcmd1ZSBhYm91dCBzb21lIG9mIHRoZSBwb2ludHMgaW4gdGhlcmUgZm9yIHZh cmlvdXMgc2VjdXJpdHkgZnVuY3Rpb25zIChlLmcuIEkgbWF5IHdhbnQgdG8gZGV0ZWN0IG5vcm1h bCBuZXR3b3JrIGJlaGF2aW9yIHRvIGVzdGFibGlzaCBhIGJhc2VsaW5lLCB3aGljaCBkb2VzIG5v dCBzZWVtIHRvIGJlIGNvdmVyZWQNCmJ5IHRoZSBjdXJyZW50IGRlZmluaXRpb24pLiA8L2Rpdj4N CjxkaXY+PGZvbnQgY29sb3I9IiMwMDcwQzAiPltMaW5kYV0gT3ZlciB0aGUgY291cnNlIG9mIEky TlNGIChhYm91dCBhIHllYXIpLCAgd2UgaGF2ZSBnb25lIHRocm91Z2ggYSBsb25nIGRlYmF0ZSBv biB3aGF0IE5TRnMgc2hvdWxkIGJlIGNvbnNpZGVyZWQgYnkgSUVURiBJMk5TRi4gQXMgdGhlIHJl c3VsdCBvZiB0aGUgbG9uZyBkZWJhdGUsIHdlIHVzZSB0aGUgZGVmaW5pdGlvbiB0byBjbGFzc2lm eSBhIHNldCBvZiBmdW5jdGlvbnMgdG8gYmUgY29uc2lkZXJlZA0KZm9yIElFVEYgSTJOU0YgKHRo ZW4gZnVydGhlciBuYXJyb3dpbmcgZG93biB0byBGbG93LWJhc2VkIE5TRnMpLiAgPC9mb250Pjwv ZGl2Pg0KPGRpdj48Zm9udCBjb2xvcj0iIzAwNzBDMCI+VGhlIGZ1bmN0aW9uIHlvdSBkZXNjcmli ZWQsIGkuZS4gZGV0ZWN0aW5nIG5vcm1hbCBuZXR3b3JrIGJlaGF2aW9yIHRvIGVzdGFibGlzaCBh IGJhc2VsaW5lIGlzIG5vdCBpbiB0aGUgc2NvcGUgb2YgSTJOU0YsIGV2ZW4gdGhvdWdoIHRoaXMg ZnVuY3Rpb24gY2FuIGFsc28gYmUgJnF1b3Q7cHJvdmlkZWQgYW5kIGNvbnN1bWVkIGluIGluY3Jl YXNpbmdseSBkaXZlcnNlIGVudmlyb25tZW50cyZxdW90Oy4gPC9mb250PjwvZGl2Pg0KPGRpdj48 Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48L2Rpdj4NCjxkaXY+PGZv bnQgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2PkkgZG9u J3QgdGhpbmsgdGhhdCB3aWxsIGJlIGEgcHJvZHVjdGl2ZSBkaXNjdXNzaW9uIHRob3VnaCwgbm9y IGlzIGl0IG5lY2Vzc2FyeS4gSW5zdGVhZCwgSSdkIHN1Z2dlc3Qgd2UgYXJlIG5vdCBvdmVybHkg cHJlc2NyaXB0aXZlLCBidXQgcmF0aGVyIHZpZXcgdGhlc2UgYXMgcG9zc2libGUgTlNGIGZlYXR1 cmVzLCBhbmQgc3VwcGxlbWVudCB0aGVtIHdpdGggc29tZSBhY3R1YWwgcHJvZHVjdCBleGFtcGxl cyAoZS5nLiBGVywgTkdGVywgSVBTLA0KZXRjLikuIFNpbWlsYXJseSwgc2luY2Ugd2UgbGltaXQg b3VyIHNjb3BlIHRvICZxdW90O2Zsb3ctYmFzZWQgTlNGcyZxdW90Oywgd2UgbWF5IHdhbnQgdG8g bWFrZSB0aGF0IGNsZWFyIGhlcmUuIEFuIGV4YW1wbGUgb2YgYSBzZWN1cml0eSBmdW5jdGlvbiB0 aGF0IHdvdWxkICpub3QqIGJlIGluIHNjb3BlIG1heSBiZSBoZWxwZnVsIHRvby48L2Rpdj4NCjxk aXY+PGZvbnQgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2 Pjxmb250IGNvbG9yPSIjMDA3MEMwIj5bTGluZGFdIEFsbCB0aGUgTlNGcyBpbiBJMk5TRiBjb250 ZXh0IGFyZSDigJxmZWF0dXJlc+KAnSwgd2hvc2UgZm9ybSBmYWN0b3IgY2FuIGJlIHByb3ZpZGVk IHBoeXNpY2FsIGJveCBvciB2aXJ0dWFsaXplZCBmb3JtYXQuIFNvbWUgZm9ybSBmYWN0b3JzLCBp LmUuIGRldmljZXMgb3IgVk0sIGNhbiBwcm92aWRlIG11bHRpcGxlIOKAnGZ1bmN0aW9uc+KAnS4g ICBEbyB5b3UgdGhpbmsgdGhlIHNlbnRlbmNlcyBpbiB0aGUNCnRoaXJkIHBhcmFncmFwaCBpcyBn b29kIGVub3VnaCB0byBkZXNjcmliZSB3aGF0IHlvdSB3YW50PyA8L2ZvbnQ+PC9kaXY+DQo8ZGl2 Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdiBz dHlsZT0icGFkZGluZy1sZWZ0OjM2cHQ7Ij48Zm9udCBmYWNlPSJDYWxpYnJpIiBzaXplPSIyIiBj b2xvcj0iIzAwNzBDMCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMXB0OyI+PGk+4oCcPC9pPjxp PkkyTlNGIHdpbGwgZm9jdXMgb24gZmxvdy1iYXNlZCBOU0ZzIHRoYXQgcHJvdmlkZSB0cmVhdG1l bnQgdG8gcGFja2V0cy9mbG93cywgc3VjaCBhcyBJbnRydXNpb24gUHJvdGVjdGlvbi9EZXRlY3Rp b24gU3lzdGVtIChJUFMvSURTKSwgV2ViDQpmaWx0ZXJpbmcsIGZsb3cgZmlsdGVyaW5nLCBkZWVw IHBhY2tldCBpbnNwZWN0aW9uLCBvciBwYXR0ZXJuIG1hdGNoaW5nIGFuZCByZW1lZGlhdGlvbi48 L2k+PGk+4oCdPC9pPjxpPiA8L2k+PC9zcGFuPjwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFj ZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9 IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBmYWNlPSJU aW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iVGlt ZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2Pi0gVGhlIGNoYXJ0ZXIgc2Vl bXMgdG8gb3BlcmF0ZSB3aXRoIHRoZSBub3Rpb24gb2YgYSAmcXVvdDtzZWN1cml0eSBjb250cm9s bGVyJnF1b3Q7IHRoYXQgaW50ZXJhY3RzIHdpdGggdGhlICZxdW90O05TRiZxdW90Oy4gSWYgSSB1 bmRlcnN0YW5kIGNvcnJlY3RseSwgdGhlIHNlY3VyaXR5IGNvbnRyb2xsZXIgaW1wbGVtZW50cyB0 aGUgJnF1b3Q7U2VydmljZSBMYXllciZxdW90OyBhbmQgdGhlIE5TRiBpbXBsZW1lbnRzIHRoZSAm cXVvdDtDYXBhYmlsaXR5IExheWVyJnF1b3Q7LiBGdXJ0aGVybW9yZSwgd2UgaGF2ZQ0KJnF1b3Q7 Y2xpZW50cyZxdW90OyB0aGF0IGludGVyYWN0IHdpdGggdGhlIHNlY3VyaXR5IGNvbnRyb2xsZXIg dG8gaW1wbGVtZW50IHBvbGljaWVzIChieSBsZXZlcmFnaW5nIHRoZSBzZXJ2aWNlIGxheWVyKS4g SWYgc28sIGl0IHdvdWxkIGJlIGdvb2QgdG8gY2xhcmlmeSB0aGlzIHRheG9ub215IGVhcmxpZXIg aW4gdGhlIGNoYXJ0ZXIuIElmIG5vdCwgdGhlbiBJIHByb2JhYmx5IG5lZWQgc29tZSBjbGFyaWZp Y2F0aW9ucyBpbiB0aGUgdGV4dC48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iVGltZXMgTmV3IFJv bWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2Pjxmb250IGNvbG9yPSIjMDA3MEMwIj5bTGlu ZGFdIOKAnFNlY3VyaXR5IGNvbnRyb2xsZXLigJ0gaXMgYSBjb25jZXB0dWFsIGVudGl0eSwgbWVh bmluZyBhbiBlbnRpdHkgdG8gc2VuZCBpbXBsZW1lbnRhYmxlIHJ1bGVzIChjYXBhYmlsaXR5IGxh eWVyKSB0byB0aGUgTlNGcy4gVGhlcmUgY291bGQgYmUgbXVsdGlwbGUgb2YgdGhlbSwgZWFjaCBy ZXNwb25zaWJsZSBmb3Igb25lIHR5cGUgb2YgTlNGIChpLmUuIG1hbmFnaW5nIHRoZSBpbnN0YW5j ZXMNCm9mIHRoZSBOU0ZzKS4gPC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBjb2xvcj0iIzAwNzBD MCI+STJOU0YgaW5jbHVkZXMg4oCcU2ltcGxlIFNlcnZpY2UgTGF5ZXLigJ0gdGhhdCBtb2RlbHMg Y2xvc2VseSB0byB0aGUg4oCcQ2FwYWJpbGl0eSBMYXllcuKAnS4gRm9yIGV4YW1wbGU6IGNsaWVu dCBjYW4gc3BlY2lmeSB0aGUgcnVsZXMgd2l0aG91dCBzcGVjaWZ5IHdoaWNoIGluc3RhbmNlcyBv ZiB0aGUgTlNGLiBUaGUg4oCcQ29udHJvbGxlcuKAnSBtYW5hZ2UgdGhlIGluc3RhbmNlcywgYXMg ZGVzY3JpYmVkIGJ5IFRoZQ0KZmlndXJlIGluIEkyTlNGIEZyYW1ld29yayBkb2N1bWVudDo8L2Zv bnQ+PC9kaXY+DQo8ZGl2Pjxmb250IGNvbG9yPSIjMDA3MEMwIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+ DQo8ZGl2Pjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzaXplPSIyIiBjb2xvcj0iIzAwNzBDMCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0OyI+ICYjNDM7IC0gLSAtIC0gLSAtIC0gLSAtIC0g LSAtIC0gLSAtICYjNDM7Jm5ic3A7ICYjNDM7IC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAt ICYjNDM7PC9zcGFuPjwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iQ291cmllciBOZXci IHNpemU9IjIiIGNvbG9yPSIjMDA3MEMwIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Ij4g fCZuYnNwOyBOU0YtQSZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyB8Jm5ic3A7IE5TRi1CJm5ic3A7ICYjNDM7LS0tLS0t LS0tLS0tLS0mIzQzOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PC9zcGFuPjwvZm9u dD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHNpemU9IjIiIGNvbG9yPSIj MDA3MEMwIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Ij4gfCZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7ICBDb250cm9sbGVy fCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyAgQ29udHJvbGxl cnwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDwvc3Bhbj48L2ZvbnQ+PC9kaXY+DQo8 ZGl2Pjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzaXplPSIyIiBjb2xvcj0iIzAwNzBDMCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0OyI+IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS0tLS0tLS0tLS0tLSYjNDM7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfDwvc3Bhbj48L2ZvbnQ+PC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9 IkNvdXJpZXIgTmV3IiBzaXplPSIyIiBjb2xvcj0iIzAwNzBDMCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMHB0OyI+IHwgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAmIzQzOyB8Jm5i c3A7IHwgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAmIzQzOyB8PC9zcGFuPjwvZm9u dD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHNpemU9IjIiIGNvbG9yPSIj MDA3MEMwIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Ij4gfCB8JiM0MzstLS0tLS0tLS0m IzQzOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLSYjNDM7fCB8Jm5ic3A7 IHwgfCYjNDM7LS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS0t LS0tLS0mIzQzO3wgfDwvc3Bhbj48L2ZvbnQ+PC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9IkNvdXJp ZXIgTmV3IiBzaXplPSIyIiBjb2xvcj0iIzAwNzBDMCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MHB0OyI+IHwgfHwgTlNGLUEjMSB8IC4uLiB8Jm5ic3A7IE5TRi1BI258fCB8Jm5ic3A7IHwgfHwm bmJzcDsgTlNGLUIjMXwgLi4uIHwmbmJzcDsgTlNGLUIjbXx8IHw8L3NwYW4+PC9mb250PjwvZGl2 Pg0KPGRpdj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc2l6ZT0iMiIgY29sb3I9IiMwMDcwQzAi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDsiPiB8IHwmIzQzOy0tLS0tLS0tLSYjNDM7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0tJiM0Mzt8IHwmbmJzcDsgfCB8JiM0 MzstLS0tLS0tLS0mIzQzOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLSYj NDM7fCB8PC9zcGFuPjwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iQ291cmllciBOZXci IHNpemU9IjIiIGNvbG9yPSIjMDA3MEMwIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Ij4g fCB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE5TRi1B IGNsdXN0ZXImbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCB8Jm5ic3A7IHwgfCZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBOU0YtQiBjbHVzdGVy Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgfDwvc3Bhbj48L2ZvbnQ+PC9kaXY+DQo8ZGl2Pjxmb250IGZh Y2U9IkNvdXJpZXIgTmV3IiBzaXplPSIyIiBjb2xvcj0iIzAwNzBDMCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMHB0OyI+IHwgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAmIzQzOyB8 Jm5ic3A7IHwgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAmIzQzOyB8PC9zcGFuPjwv Zm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHNpemU9IjIiIGNvbG9y PSIjMDA3MEMwIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Ij4gJiM0MzsgLSAtIC0gLSAt IC0gLSAtIC0gLSAtIC0gLSAtIC0gJiM0MzsmbmJzcDsgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0g LSAtIC0gLSAtIC0gJiM0Mzs8L3NwYW4+PC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBmYWNlPSJU aW1lcyBOZXcgUm9tYW4iIGNvbG9yPSIjMDA3MEMwIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2 Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdj4t IEluIHRoZSBkZWZpbml0aW9uIG9mIHRoZSAmcXVvdDtDYXBhYmlsaXR5IExheWVyJnF1b3Q7LCB0 aGVyZSBpcyBhIHN0YXRlbWVudCBhYm91dCAmcXVvdDtydWxlcy4uLm9mIE5TRnMgaGF2ZSB0byBi ZSBpbXBsZW1lbnRhYmxlIGJ5IG1vc3QgTlNGcyZxdW90Oy4gRG8geW91IG1lYW4gYWxsIE5TRnMg b3IgTlNGcyBvZiBhIGdpdmVuIHR5cGUgKEkgYXNzdW1lIHdlIGhhdmUgZGlmZmVyZW50IHR5cGVz IG9mIE5TRnMpID88L2Rpdj4NCjxkaXY+PGZvbnQgY29sb3I9IiMwMDcwQzAiPltMaW5kYV0geWVz LiA8L2ZvbnQ+PC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7 PC9mb250PjwvZGl2Pg0KPGRpdj4tIFBvbGljaWVzIGFyZSBsYWJlbGVkIGFzICZxdW90O3NpbXBs ZSZxdW90OyBvciAmcXVvdDthYnN0cmFjdCBvciBzb3BoaXN0aWNhdGVkJnF1b3Q7IDwvZGl2Pg0K PGRpdj53aXRob3V0IGZ1cnRoZXIgZGVmaW5pdGlvbjsgSSdtIG5vdCBzdXJlIHdoZXJlIHdlIGRy YXcgdGhhdCBsaW5lIG9yIGhvdyB0byBkbyB0aGF0IGluIHRoZSBjaGFydGVyOyBtYXliZSBjbGFy aWZ5aW5nIHRoYXQgcGFydCBuZWVkcyB0byBiZSBhIGRlbGl2ZXJhYmxlID88L2Rpdj4NCjxkaXY+ PGZvbnQgY29sb3I9IiMwMDcwQzAiPltMaW5kYV0g4oCcc2ltcGxl4oCdIG1lYW5zIHRoYXQgdGhl eSBjYW4gYmUgZGlyZWN0bHkgdHJhbnNsYXRlZCB0byBjYXBhYmlsaXR5IGxheWVyIHJ1bGVzIHdp dGggc2ltcGxlIG1hcHBpbmcsIGUuZy4gd2l0aG91dCBleHBsaWNpdCBzdGF0aW5nIHdoaWNoIGlu c3RhbnRpYXRpb24sIG1heSBoYXZlIGN1c3RvbWVyIElEIHRoYXQgY2FuIGJlIHRyYW5zbGF0ZWQg dG8gc29tZSB0YWdzIGNhcnJpZWQgYnkgcGFja2V0czwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQg ZmFjZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2Pi0gQSBudW1i ZXIgb2YgZGVsaXZlcmFibGVzIG1heSBub3QgYmUgcHVibGlzaGVkIGFzIGFuIFJGQzsgd2h5IG5v dCAodGhleSBzZWVtIHRvIHNldCB0aGUgc3RhZ2UgZm9yIHNldmVyYWwgb3RoZXIgZGVsaXZlcmFi bGVzIGFuZCBoZW5jZSBhcmUgcmVsZXZhbnQgZm9yIGNvbnN1bWVycyBvZiB0aGUgaW5mb3JtYXRp b24gYW5kIGRhdGEgbW9kZWxzIGxhdGVyIG9uKSA/PC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRp bWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBjb2xvcj0iIzAw NzBDMCI+W0xpbmRhXSBUaGUgV0cgZ3JvdXAgbWF5IGRlY2lkZSB0byBwdWJsaXNoIHRoZW0gYXMg UkZDIG9yIG5vdCBsYXRlci4gQnV0IHRoZSBjaGFydGVyIGRvZXNu4oCZdCBzcGVjaWZ5IHdoaWNo IHdheS4gVGhhdCBpcyBob3cgSUVTRyB3YW50ZWQuIDwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQg ZmFjZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2Pi0gVGhlIHBh cnQgYWJvdXQgSTJOU0YgcHJvdmlkaW5nIGEgJnF1b3Q7ZGlzY3Vzc2lvbiBmb3J1bSBmb3IgSW5m b3JtYXRpb25hbCBkcmFmdHMgb24uLi4uLlttb3JlIGNvbXBsZXggU2VydmljZSBMYXllciBwb2xp Y2llc10uLi4mcXVvdDsgaXMgY29uZnVzaW5nIHRvIG1lLiBUaGUgd29yayBzZWVtcyB0byBiZSBw dXJzdWVkIG91dHNpZGUgdGhlIFdHLCBzbyB0aGVyZSBhcmUgbm8gZGVsaXZlcmFibGVzIGFuZCBw cmVzdW1hYmx5IG5vIGFnZW5kYSB0aW1lIHdpbGwNCmJlIGFsbG9jYXRlZCBlaXRoZXIuIDwvZGl2 Pg0KPGRpdj48Zm9udCBjb2xvcj0iIzAwNzBDMCI+W0xpbmRhXSB0aGlzIGlzIHRvIGFkZHJlc3Mg dGhlIGluZm9ybWF0aW9uIGRvY3VtZW50cyB0aGF0IGRlc2NyaWJlIHRoZSBJMk5TRiBkZW1vLCBv cGVuIHNvdXJjZSBvciBpbnRlcm9wZXJhYmlsaXR5IGluaXRpYXRpdmVzIHRoYXQgYXJlIGNvbmR1 Y3RlZCBvdXRzaWRlIHRoZSBXRy4gRS5nIDxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0 Zi5vcmcvZG9jL2RyYWZ0LXhpZS1pMm5zZi1kZW1vLW91dGxpbmUtZGVzaWduLyI+PGZvbnQgY29s b3I9ImJsdWUiPjx1Pmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhpZS1p Mm5zZi1kZW1vLW91dGxpbmUtZGVzaWduLzwvdT48L2ZvbnQ+PC9hPjwvZm9udD48L2Rpdj4NCjxk aXY+Jm5ic3A7PC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7 PC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwv Zm9udD48L2Rpdj4NCjxkaXY+SXQncyBhbHNvIG5vdCBjbGVhciB0byBtZSB0aGF0IHdlIGNhbi9z aG91bGQgc3RhdGUgdGhhdCBzdWNoIGRvY3VtZW50cyB3b3VsZCBiZSBJbmZvcm1hdGlvbmFsLiBX ZSBtYXkgZGVjaWRlIHRoYXQgd2UgbmVlZCBzb21lIHByb2NlZHVyZXMgZm9yIGhvdyB0byBkZWZp bmUgc3VjaCBkb2N1bWVudHMsIGhhdmUgZGVzaWduYXRlZCBleHBlcnRzLCBhIGRpcmVjdG9yYXRl LCBldGMuIHRvIHJldmlldyB0aGVtIGV0Yy4gSSdtIGd1ZXNzaW5nIHRoaXMNCmlzIGFsbCBhIGJp dCBwcmVtYXR1cmUgdGhvdWdoLCBidXQgYWdhaW4sIHdlIG1heSB3YW50IHRvIG5vdGUgdGhhdCBh cyBhbiBpc3N1ZSBpbiB0aGUgY2hhcnRlciB0aGF0IHRoZSBXRyBuZWVkcyB0byByZXNvbHZlIGF0 IHNvbWUgcG9pbnQuPC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5i c3A7PC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBjb2xvcj0iIzAwNzBDMCI+W0xpbmRhXSBBZ3Jl ZSB3aXRoIHlvdS4gSSB3aWxsIHNlZSBob3cgQUQgd2FudHMgdG8gYWRkcmVzcyB0aGlzIHN1Z2dl c3Rpb24gLiA8L2ZvbnQ+PC9kaXY+DQo8ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+ Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdj48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZu YnNwOzwvZm9udD48L2Rpdj4NCjxkaXY+Tml0czo8L2Rpdj4NCjxkaXY+LSBmaXJzdCBwYXJhZ3Jh cGg6PC9kaXY+DQo8ZGl2PnMvdGhlIG1pdGlnYXRlL21pdGlnYXRlIHRoZS88L2Rpdj4NCjxkaXY+ Jm5ic3A7PC9kaXY+DQo8ZGl2Pi0gc2Vjb25kIGxhc3QgcGFyYWdyYXBoOjwvZGl2Pg0KPGRpdj5z L1JGQ3Mgb2YvUkZDcyBvcjwvZGl2Pg0KPGRpdj48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4i PiZuYnNwOzwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgY29sb3I9IiMwMDcwQzAiPltMaW5kYV0g VGhhbmsgeW91IGZvciB0aGUgY2F0Y2guIFRoZXkgYXJlIGNvcnJlY3RlZCBvbiB0aGUgSTJOU0Yg d2lraSBub3cuIDwvZm9udD48L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iVGltZXMgTmV3IFJvbWFu Ij4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2PlRoYW5rczwvZGl2Pg0KPGRpdj4mbmJzcDs8L2Rp dj4NCjxkaXY+LS0gRmxlbW1pbmc8L2Rpdj4NCjxkaXY+Jm5ic3A7PC9kaXY+DQo8ZGl2PiZuYnNw OzwvZGl2Pg0KPGRpdj5PbiA4LzI2LzE1IDU6MzggUE0sIExpbmRhIER1bmJhciB3cm90ZTo8L2Rp dj4NCjxkaXY+Jmd0OyBLYXRobGVlbiw8L2Rpdj4NCjxkaXY+Jmd0OzwvZGl2Pg0KPGRpdj4mZ3Q7 IFRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBlZGl0b3JpYWwgY2hhbmdlcy4gVGhlIGNoYXJ0 ZXIgZGVzY3JpcHRpb24gPC9kaXY+DQo8ZGl2PiZndDsgb24gdGhlIEkyTlNGIFdpa2kgaGFzIGJl ZW4gdXBkYXRlZCB0byByZWZsZWN0IHlvdXIgc3VnZ2VzdGVkIGNoYW5nZXM6IDwvZGl2Pg0KPGRp dj4mZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJu c2YvaG9tZSI+aHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNlMm5zZi9ob21l PC9hPjwvZGl2Pg0KPGRpdj4mZ3Q7PC9kaXY+DQo8ZGl2PiZndDs8L2Rpdj4NCjxkaXY+Jmd0OyBM aW5kYTwvZGl2Pg0KPGRpdj4mZ3Q7PC9kaXY+DQo8ZGl2PiZndDs8L2Rpdj4NCjxkaXY+Jmd0OyAt LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTwvZGl2Pg0KPGRpdj4mZ3Q7IEZyb206IEkybnNmIFs8 YSBocmVmPSJtYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOmkybnNmLWJvdW5j ZXNAaWV0Zi5vcmc8L2E+XSBPbiBCZWhhbGYgT2YgS2F0aGxlZW4gPC9kaXY+DQo8ZGl2PiZndDsg TW9yaWFydHk8L2Rpdj4NCjxkaXY+Jmd0OyBTZW50OiBXZWRuZXNkYXksIEF1Z3VzdCAyNiwgMjAx NSAyOjI5IFBNPC9kaXY+DQo8ZGl2PiZndDsgVG86IEpvc2VwaCBTYWxvd2V5PC9kaXY+DQo8ZGl2 PiZndDsgQ2M6IDxhIGhyZWY9Im1haWx0bzppMm5zZkBpZXRmLm9yZyI+aTJuc2ZAaWV0Zi5vcmc8 L2E+PC9kaXY+DQo8ZGl2PiZndDsgU3ViamVjdDogUmU6IFtJMm5zZl0gQ29uc2Vuc3VzIGNhbGwg b24gSTJOU0YgQ2hhcnRlcjwvZGl2Pg0KPGRpdj4mZ3Q7PC9kaXY+DQo8ZGl2PiZndDsgSSBoYXZl IGEgZmV3IGVkaXRvcmlhbCBjaGFuZ2VzIGluIHRoZSBmb2xsb3dpbmcgdGV4dCB0aGF0IGRvZXMg bm90IGNoYW5nZSB0aGUgbWVhbmluZyBvZiB0aGUgY2hhcnRlciB0ZXh0OjwvZGl2Pg0KPGRpdj4m Z3Q7PC9kaXY+DQo8ZGl2PiZndDsgQSBOZXR3b3JrIFNlY3VyaXR5IEZ1bmN0aW9uIChOU0YpIGlz IGEgZnVuY3Rpb24gdXNlZCB0byBlbnN1cmUgaW50ZWdyaXR5LCBjb25maWRlbnRpYWxpdHksIGFu ZCBhdmFpbGFiaWxpdHkgb2YgbmV0d29yayBjb21tdW5pY2F0aW9ucywgdG8gZGV0ZWN0IHVud2Fu dGVkIG5ldHdvcmsgYWN0aXZpdHksIGFuZCB0byBibG9jayBvciBhdCBsZWFzdCB0aGUgbWl0aWdh dGUgZWZmZWN0cyBvZiB1bndhbnRlZCBhY3Rpdml0eS4gTlNGcyBhcmUgcHJvdmlkZWQNCmFuZCBj b25zdW1lZCBpbiBpbmNyZWFzaW5nbHkgZGl2ZXJzZSBlbnZpcm9ubWVudHMuIFVzZXJzIG9mIE5T RnMgY291bGQgY29uc3VtZSBuZXR3b3JrIHNlY3VyaXR5IHNlcnZpY2VzIGhvc3RlZCBieSBvbmUg b3IgbW9yZSBwcm92aWRlcnMsIHdoaWNoIG1heSBiZSB0aGVpciBvd24gZW50ZXJwcmlzZSwgc2Vy dmljZSBwcm92aWRlcnMsIG9yIGEgY29tYmluYXRpb24gb2YgYm90aC4mbmJzcDsgU2ltaWxhcmx5 LCBzZXJ2aWNlIHByb3ZpZGVycyBtYXkgb2ZmZXINCnRoZWlyIGN1c3RvbWVycyBuZXR3b3JrIHNl Y3VyaXR5IHNlcnZpY2VzIHRoYXQgYXJlIGVuZm9yY2VkIGJ5IG11bHRpcGxlIHNlY3VyaXR5IHBy b2R1Y3RzIGFuZC9vciBmdW5jdGlvbnMgZnJvbSBkaWZmZXJlbnQgdmVuZG9ycy4gTlNGcyBtYXkg YmUgcHJvdmlkZWQgYnkgcGh5c2ljYWwgYW5kL29yIHZpcnR1YWxpemVkIGluZnJhc3RydWN0dXJl LiBXaXRob3V0IHN0YW5kYXJkIGludGVyZmFjZXMgdG8gY29udHJvbCBhbmQgbW9uaXRvciB0aGUg YmVoYXZpb3INCm9mIE5TRnMsIGl0IGhhcyBiZWNvbWUgdmlydHVhbGx5IGltcG9zc2libGUgZm9y IHByb3ZpZGVycyBvZiBzZWN1cml0eSBzZXJ2aWNlcyB0byBhdXRvbWF0ZSBzZXJ2aWNlIG9mZmVy aW5ncyB0aGF0IHV0aWxpemUgZGlmZmVyZW50IHNlY3VyaXR5IGZ1bmN0aW9ucyBmcm9tIG11bHRp cGxlIHZlbmRvcnMuPC9kaXY+DQo8ZGl2PiZndDs8L2Rpdj4NCjxkaXY+Jmd0OyBUaGUgZ29hbCBv ZiBJMk5TRiBpcyB0byBkZWZpbmUgYSBzZXQgb2Ygc29mdHdhcmUgaW50ZXJmYWNlcyBhbmQgZGF0 YSBtb2RlbHMgZm9yIGNvbnRyb2xsaW5nIGFuZCBtb25pdG9yaW5nIGFzcGVjdHMgb2YgcGh5c2lj YWwgYW5kIHZpcnR1YWwgTlNGcy4gSWYgdGhlIHdvcmtpbmcgZ3JvdXAgZmluZHMgaXQgbmVjZXNz YXJ5IHRvIHdvcmsgb24gYW4gaW5mb3JtYXRpb24gbW9kZWwgYmVmb3JlIHRoZSBkYXRhIG1vZGVs cywgdG8gaGVscCBwcm92aWRlDQpndWlkYW5jZSBhbmQgZGVyaXZlIHRoZSBkYXRhIG1vZGVscywg aXQgbWF5IGRvIHNvLiBUaGUgd29ya2luZyBncm91cCB3aWxsIGRlY2lkZSBsYXRlciB3aGV0aGVy IHRoZSBpbmZvcm1hdGlvbiBtb2RlbCBuZWVkcyB0byBiZSBwdWJsaXNoZWQgYXMgYW4gUkZDLjwv ZGl2Pg0KPGRpdj4mZ3Q7IE90aGVyIGFzcGVjdHMgb2YgTlNGcywgc3VjaCBhcyBkZXZpY2Ugb3Ig bmV0d29yayBwcm92aXNpb25pbmcgYW5kIGNvbmZpZ3VyYXRpb24sIGFyZSBvdXQgb2Ygc2NvcGUu PC9kaXY+DQo8ZGl2PiZndDs8L2Rpdj4NCjxkaXY+Jmd0OyBDb250cm9sbGluZyBhbmQgbW9uaXRv cmluZyBhc3BlY3RzIG9mIE5TRnMgaW5jbHVkZSB0aGUgYWJpbGl0eSB0byBzcGVjaWZ5IHJ1bGVz IChieSBhIHNpbmdsZSBjb250cm9sbGVyIGF0IHRoZSBmaXJzdCBwaGFzZSksIHF1ZXJ5LCBhbmQg bW9uaXRvciBOU0ZzIGJ5IG9uZSBvciBtb3JlIG1hbmFnZW1lbnQgZW50aXRpZXMuJm5ic3A7IFRo ZSBpbml0aWFsIHBoYXNlIG9mIEkyTlNGIHdpbGwgb25seSBjb25zaWRlciBvbmUgc2luZ2xlIGNv bnRyb2xsZXINCnRoYXQgY2FuIHNwZWNpZnkgb3IgY2hhbmdlIHJ1bGVzIHRvIE5TRnMgYmVjYXVz ZSBtdWx0aS1oZWFkZWQgY29udHJvbCByZXF1aXJlcyB0aGUgY29vcmRpbmF0aW9uIHRvIGF2b2lk IHBvdGVudGlhbCBjb25mbGljdCBvZiBydWxlcy4gVGhlIE5TRnMgY2FuIGJlIG1vbml0b3JlZCBi eSBtdWx0aXBsZSBlbnRpdGllcywgYnV0IHRoZSBkYXRhYmFzZSB1cGRhdGUgYW5kIHN5bmNocm9u aXphdGlvbiBhbW9uZyBtdWx0aXBsZSBtYW5hZ2VtZW50IGVudGl0aWVzDQphcmUgb3V0IG9mIHNj b3BlIGZvciBJMk5TRi4gQXMgdGhlcmUgYXJlIG1hbnkgZGlmZmVyZW50IHNlY3VyaXR5IHZlbmRv cnMgc3VwcG9ydGluZyBkaWZmZXJlbnQgZmVhdHVyZXMgYW5kIGZ1bmN0aW9ucyBvbiB0aGVpciBk ZXZpY2VzLCBJMk5TRiB3aWxsIGZvY3VzIG9uIGZsb3ctYmFzZWQgTlNGcyB0aGF0IHByb3ZpZGUg dHJlYXRtZW50IHRvIHBhY2tldHMvZmxvd3MsIHN1Y2ggYXMgSW50cnVzaW9uIFByb3RlY3Rpb24v RGV0ZWN0aW9uIFN5c3RlbQ0KKElQUy9JRFMpLCBXZWIgZmlsdGVyaW5nLCBmbG93IGZpbHRlcmlu ZywgZGVlcCBwYWNrZXQgaW5zcGVjdGlvbiwgb3IgcGF0dGVybiBtYXRjaGluZyBhbmQgcmVtZWRp YXRpb24uPC9kaXY+DQo8ZGl2PiZndDs8L2Rpdj4NCjxkaXY+Jmd0OyBJMk5TRiB3aWxsIHNwZWNp ZnkgaW50ZXJmYWNlcyBhdCB0d28gZnVuY3Rpb25hbCBsZXZlbHMgZm9yIHRoZSBjb250cm9sIGFu ZCBtb25pdG9yaW5nIG9mIG5ldHdvcmsgc2VjdXJpdHkgZnVuY3Rpb25zOjwvZGl2Pg0KPGRpdj4m Z3Q7PC9kaXY+DQo8ZGl2PiZndDsgVGhlIEkyTlNGIENhcGFiaWxpdHkgTGF5ZXIgc3BlY2lmaWVz IGhvdyB0byBjb250cm9sIGFuZCBtb25pdG9yIE5TRnMgPC9kaXY+DQo8ZGl2PiZndDsgYXQgYSBm dW5jdGlvbmFsIGltcGxlbWVudGF0aW9uIGxldmVsLiZuYnNwOyBUaGUgdGVybSDigJxGdW5jdGlv bmFsIDwvZGl2Pg0KPGRpdj4mZ3Q7IEltcGxlbWVudGF0aW9u4oCdIGlzIHVzZWQgdG8gZW1waGFz aXplIHRoYXQgdGhlIHJ1bGVzIChmb3IgY29udHJvbCBhbmQ8L2Rpdj4NCjxkaXY+Jmd0OyBtb25p dG9yKSBvZiBOU0ZzIGhhdmUgdG8gYmUgaW1wbGVtZW50YWJsZSBieSBtb3N0IE5TRnMuIEkyTlNG IHdpbGwgc3RhbmRhcmRpemUgYSBzZXQgb2YgaW50ZXJmYWNlcyBieSB3aGljaCBhIHNlY3VyaXR5 IGNvbnRyb2xsZXIgY2FuIGludm9rZSwgb3BlcmF0ZSwgYW5kIG1vbml0b3IgTlNGcy48L2Rpdj4N CjxkaXY+Jmd0OzwvZGl2Pg0KPGRpdj4mZ3Q7IFRoZSBJMk5TRiBTZXJ2aWNlIExheWVyIGRlZmlu ZXMgaG93IGNsaWVudHPigJkgc2VjdXJpdHkgcG9saWNpZXMgbWF5IGJlIGV4cHJlc3NlZCB0byBh IHNlY3VyaXR5IGNvbnRyb2xsZXIuIFRoZSBjb250cm9sbGVyIGltcGxlbWVudHMgaXRzIHBvbGlj aWVzIGFjY29yZGluZyB0byB0aGUgdmFyaW91cyBjYXBhYmlsaXRpZXMgcHJvdmlkZWQgYnkgdGhl IEkyTlNGIGNhcGFiaWxpdHkgTGF5ZXIuJm5ic3A7IFRoZSBJMk5TRiBTZXJ2aWNlIExheWVyIGFs c28NCmFsbG93cyB0aGUgY2xpZW50IHRvIG1vbml0b3IgdGhlIGNsaWVudCBzcGVjaWZpYyBwb2xp Y2llcy48L2Rpdj4NCjxkaXY+Jmd0OzwvZGl2Pg0KPGRpdj4mZ3Q7IFNpbmNlIHRoZXJlIGNvdWxk IGJlIG1hbnkgZGVwdGhzIG9yIHR5cGVzIG9mIFNlcnZpY2UgTGF5ZXIgcG9saWNpZXMsIHRoZSBm b2xsb3dpbmcgYnVsbGV0cyBmdXJ0aGVyIGNsYXJpZnkgdGhlIHNjb3BlIG9mIEkyTlNGOjwvZGl2 Pg0KPGRpdj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IG8gT25seSB0aGUgU2lt cGxlIFNlcnZpY2UgTGF5ZXIgcG9saWNpZXMgdGhhdCBhcmUgbW9kZWxlZCBhcyBjbG9zZWx5IGFz IHBvc3NpYmxlIG9uIHRoZSBDYXBhYmlsaXR5IExheWVyIGFyZSB3aXRoaW4gdGhlIHNjb3BlLjwv ZGl2Pg0KPGRpdj4mZ3Q7IFN1Y2ggYSBTaW1wbGUgU2VydmljZSBMYXllciB3aWxsIGVuYWJsZSBh IHNlY3VyaXR5IGNvbnRyb2xsZXIgdG8gaGFuZGxlIGlzc3VlcyBsaWtlIG11bHRpLXRlbmFuY3kg YW5kIHRoZSBjaG9pY2UgYmV0d2VlbiBhdmFpbGFibGUgTlNGcyBmb3IgYSBnaXZlbiBwb2xpY3ku PC9kaXY+DQo8ZGl2PiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbyBJMk5TRiB3 aWxsIG5vdCBzcGVjaWZ5IGFic3RyYWN0IG9yIHNvcGhpc3RpY2F0ZWQgcG9saWNpZXMgZnJvbSBj bGllbnRzLiBFeHByZXNzaW5nIHBvbGljaWVzIGluIHdheXMgb3RoZXIgdGhhbiB0aGUgbW9kZWwg dXNlZCBieSB0aGUgQ2FwYWJpbGl0eSBMYXllciBpcyBvdXQgb2Ygc2NvcGUuPC9kaXY+DQo8ZGl2 PiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbyBUaGUgdHJhbnNsYXRpb24gbWVj aGFuaXNtL21ldGhvZHMgZnJvbSBTZXJ2aWNlIExheWVyIHBvbGljaWVzIHRvIENhcGFiaWxpdHkg bGF5ZXIgY29tbWVudHMgYXJlIG91dCBvZiBzY29wZSBmb3IgSTJOU0YuPC9kaXY+DQo8ZGl2PiZn dDsgSG93ZXZlciwgSTJOU0Ygd2lsbCBwcm92aWRlIGEgZGlzY3Vzc2lvbiBmb3J1bSBmb3IgSW5m b3JtYXRpb25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQSXMsIGV0Yy4gdGhhdCBkZW1vbnN0 cmF0ZSBob3cgbW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5ZXIgcG9saWNpZXMgYW5kIGZvcm1hdHMg bWF5IGJlIHRyYW5zbGF0ZWQgdG8gQ2FwYWJpbGl0eSBMYXllciBmdW5jdGlvbnMuJm5ic3A7IFN1 Y2ggZG9jdW1lbnRzIHdvdWxkIGJlIHB1cnN1ZWQNCm91dHNpZGUgdGhlIFdHLjwvZGl2Pg0KPGRp dj4mZ3Q7PC9kaXY+DQo8ZGl2PiZndDsgU3RhbmRhcmQgaW50ZXJmYWNlcyBmb3IgbW9uaXRvcmlu ZyBhbmQgY29udHJvbGxpbmcgdGhlIGJlaGF2aW9yIG9mIE5TRnMgYXJlIGVzc2VudGlhbCBidWls ZGluZyBibG9ja3MgZm9yIHByb3ZpZGVycyBvZiBzZWN1cml0eSBzZXJ2aWNlIHRvIGF1dG9tYXRl IHRoZSB1c2Ugb2YgZGlmZmVyZW50IE5TRnMgZnJvbSBtdWx0aXBsZSB2ZW5kb3JzLiBUaGlzIHdv cmsgd2lsbCBsZXZlcmFnZSB0aGUgZXhpc3RpbmcgcHJvdG9jb2xzIGFuZCBkYXRhDQptb2RlbHMg ZGVmaW5lZCBieSB0aGUgSTJSUywgTkVUQ09ORiwgYW5kIE5FVE1PRCB3b3JraW5nIGdyb3Vwcy4g SWYgZXh0ZW5zaW9ucyB0byB0aGVzZSBwcm90b2NvbHMgb3IgZGF0YSBtb2RlbHMgYXJlIG5lZWRl ZCwgcmVxdWlyZW1lbnRzIHdpbGwgYmUgZGV2ZWxvcGVkIGJ5IHRoaXMgV0csIGFuZCB0aGUgZXh0 ZW5zaW9ucyB3aWxsIGJlIGRldmVsb3BlZCBpbiBjb29wZXJhdGlvbiB3aXRoIHRoZSBXR3MgcmVz cG9uc2libGUgZm9yIHRoZSBwcm90b2NvbHMuPC9kaXY+DQo8ZGl2PiZndDs8L2Rpdj4NCjxkaXY+ Jmd0OyBUaGUgSTJOU0YgV0figJlzIGRlbGl2ZXJhYmxlcyBpbmNsdWRlOjwvZGl2Pg0KPGRpdj4m Z3Q7PC9kaXY+DQo8ZGl2PiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbyBBIHNp bmdsZSBkb2N1bWVudCBjb3ZlcmluZyB1c2UgY2FzZXMsIHByb2JsZW0gc3RhdGVtZW50LCBhbmQg Z2FwIGFuYWx5c2lzIGRvY3VtZW50LiBUaGlzIGRvY3VtZW50IHdpbGwgaW5pdGlhbGx5IGJlIHBy b2R1Y2VkIGZvciByZWZlcmVuY2UgYXMgYSBsaXZpbmcgbGlzdCB0byB0cmFjayBhbmQgcmVjb3Jk IGRpc2N1c3Npb25zOiB0aGUgV0cgbWF5IGRlY2lkZSB0byBub3QgcHVibGlzaCB0aGlzIGRvY3Vt ZW50IGFzIGFuIFJGQy48L2Rpdj4NCjxkaXY+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBvIEEgZnJhbWV3b3JrIGRvY3VtZW50LCBwcmVzZW50aW5nIGFuIG92ZXJ2aWV3IG9mIHRo ZSB1c2Ugb2YgTlNGcyBhbmQgdGhlIHB1cnBvc2Ugb2YgdGhlIG1vZGVscyBkZXZlbG9wZWQgYnkg dGhlIFdHLiBUaGlzIGRvY3VtZW50IHdpbGwgYWxzbyBiZSBhIHJlZmVyZW5jZSB0ZXh0IHRvIGd1 aWRlIHRoZSBtYWluIHdvcmsgYW5kIHRoZSBXRyBtYXkgZGVjaWRlIHRvIG5vdCBwdWJsaXNoIHRo aXMgZG9jdW1lbnQgYXMgYW4gUkZDLjwvZGl2Pg0KPGRpdj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IG8gSWYgdGhlIHdvcmtpbmcgZ3JvdXAgY29uc2lkZXJzIGl0IG5lY2Vzc2Fy eSwgYSBzaW5nbGUsIHVuaWZpZWQsIEluZm9ybWF0aW9uIE1vZGVsIHRvIGRlc2NyaWJlIHRoZSBj b250cm9sIGFuZCBtb25pdG9yaW5nIG9mIGZsb3ctYmFzZWQgTlNGcy48L2Rpdj4NCjxkaXY+Jmd0 OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBvIFlBTkcgZGF0YSBtb2RlbHMgZm9yIHRo ZSBjb250cm9sIGFuZCBtb25pdG9yaW5nIG9mIE5TRnMuPC9kaXY+DQo8ZGl2PiZndDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbyBSZXF1ZXN0cyB0byB0aGUgSUFOQSBmb3IgdGhlIGNy ZWF0aW9uIG9mIGEgcmVnaXN0cnkgdGhhdCBlbmFibGVzIHRoZSBjaGFyYWN0ZXJpc3RpY3MgYW5k IGJlaGF2aW9yIG9mIE5TRnMgdG8gYmUgc3BlY2lmaWVkIHVzaW5nIGEgdmVuZG9yLW5ldXRyYWwg dm9jYWJ1bGFyeSB3aXRob3V0IHJlcXVpcmluZyB0aGUgTlNGcyB0aGVtc2VsdmVzIHRvIGJlIHN0 YW5kYXJkaXplZC4gVGhlIHJlZ2lzdHJ5IGVuYWJsZXMgdmFyaW91cw0KbWVjaGFuaXNtcywgaW5j bHVkaW5nIHBvbGljeSBydWxlcywgdG8gYmUgdXNlZCB0byBtYXRjaCBtb25pdG9yIGFuZCBjb250 cm9sIGZ1bmN0aW9ucyB0byB0aGUgbmVlZHMgb2YgYW4gYXBwbGljYXRpb24gYW5kL29yIGVudmly b25tZW50LjwvZGl2Pg0KPGRpdj4mZ3Q7IEFuIGV4YW1pbmF0aW9uIG9mIGV4aXN0aW5nIHNlY3Vy ZSBjb21tdW5pY2F0aW9uIG1lY2hhbmlzbXMgdG8gaWRlbnRpZnkgdGhlIGFwcHJvcHJpYXRlIG9u ZXMgZm9yIGNhcnJ5aW5nIHRoZSBjb250cm9sbGluZyBhbmQgbW9uaXRvcmluZyBpbmZvcm1hdGlv biBiZXR3ZWVuIHRoZSBOU0ZzIGFuZCB0aGVpciBtYW5hZ2VtZW50IGVudGl0aWVzLiBUaGlzIGRv Y3VtZW50IG1heSBhbHNvIGJlIHByb2R1Y2VkIGFzIGEgd29ya2luZyBkb2N1bWVudA0KdGhhdCBp cyBub3QgcHVibGlzaGVkIGFzIGFuIFJGQy48L2Rpdj4NCjxkaXY+Jmd0OzwvZGl2Pg0KPGRpdj4m Z3Q7IFRoZSBXRyBtYXkgYWRkaXRpb25hbGx5IGNob29zZSB0byBkZXZlbG9wIGRvY3VtZW50cyB0 byBkZXNjcmliZSByZXF1aXJlbWVudHMgZm9yIGV4dGVuc2lvbnMgKGlmIGFueSkgdG8gZXhpc3Rp bmcgcHJvdG9jb2xzIHVzZWQgYnkgdGhlIFdHLCB0byBleHBsYWluIGhvdyB0aGUgZGF0YSBtb2Rl bHMgYXJlIHVzZWQgdG8gbW9uaXRvciBhbmQgY29udHJvbCBmbG93LWJhc2VkIE5TRnMsIGFuZCB0 byBkZXNjcmliZSBob3cgdG8gdXNlIEkyUlMNCmFuZCBORVRDT05GIHRvIGNhcnJ5IHRoZSBjb250 ZW50IG9mIHRoZSBkYXRhIG1vZGVscy4gVGhlc2UgZG9jdW1lbnRzIG1heSBiZSBwdWJsaXNoZWQg YXMgSW5mb3JtYXRpb25hbCBSRkNzIG9mIG1heSBiZSB3b3JraW5nIGRvY3VtZW50cyB0aGF0IGFy ZSBkaXNjYXJkZWQgb25jZSB0aGV5IGhhdmUgdHJpZ2dlcmVkIHRoZSBuZWNlc3Nhcnkgd29yay48 L2Rpdj4NCjxkaXY+Jmd0OzwvZGl2Pg0KPGRpdj4mZ3Q7IFRoZSBXRyB3aWxsIHdvcmsgY2xvc2Vs eSB3aXRoIHRoZSBJMlJTLCBORVRDT05GLCBhbmQgTkVUTU9EIFdHcy4gVGhlIFdHIHdpbGwgY29t bXVuaWNhdGUgd2l0aCBleHRlcm5hbCBTRE9zIGxpa2UgRVRTSSBORlYgYW5kIHdpbGwgZW5jb3Vy YWdlIG9wZW4gc291cmNlIGNvZGUgZGV2ZWxvcG1lbnQgcmVsYXRlZCB0byB0aGUgV0cgc2NvcGUg aW4gb3JnYW5pemF0aW9ucyBsaWtlIE9ORiwgT3BlblN0YWNrLCBPREwsIGFuZCBPUE5GVi48L2Rp dj4NCjxkaXY+Jmd0OzwvZGl2Pg0KPGRpdj4mZ3Q7PC9kaXY+DQo8ZGl2PiZndDsgT24gV2VkLCBB dWcgMjYsIDIwMTUgYXQgMTo0NCBBTSwgSm9zZXBoIFNhbG93ZXkgJmx0OzxhIGhyZWY9Im1haWx0 bzpqb2VAc2Fsb3dleS5uZXQiPmpvZUBzYWxvd2V5Lm5ldDwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0K PGRpdj4mZ3Q7Jmd0OyBUaGFua3MgdG8gZXZlcnlvbmUgd2hvIGhhcyBjb250cmlidXRlZCB0b3dh cmRzIGRldmVsb3BpbmcgdGhlIGNoYXJ0ZXIuPC9kaXY+DQo8ZGl2PiZndDsmZ3Q7IEkgYmVsaWV2 ZSB3ZSBhcmUgY2xvc2UgdG8gY29uc2Vuc3VzIHNvIHRoaXMgaXMgYSBjb25zZW5zdXMgY2FsbCBm b3IgdGhlIEkyTlNGPC9kaXY+DQo8ZGl2PiZndDsmZ3Q7IGNoYXJ0ZXIuJm5ic3A7Jm5ic3A7IFRo ZSBjaGFydGVyIHRleHQgaXMgbG9jYXRlZCBhdDwvZGl2Pg0KPGRpdj4mZ3Q7Jmd0OyA8YSBocmVm PSJodHRwczovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNmL2hvbWUiPmh0dHBz Oi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaG9tZTwvYT4uJm5ic3A7IFBs ZWFzZSBzZW5kIDwvZGl2Pg0KPGRpdj4mZ3Q7Jmd0OyBjb21tZW50cyBvbiB0aGlzIGNoYXJ0ZXIg dG8gdGhlIEkyTlNGIGxpc3QgYnkgU2VwdGVtYmVyIDIsIDIwMTUuPC9kaXY+DQo8ZGl2PiZndDsm Z3Q7PC9kaXY+DQo8ZGl2PiZndDsmZ3Q7IFRoYW5rIHlvdSw8L2Rpdj4NCjxkaXY+Jmd0OyZndDs8 L2Rpdj4NCjxkaXY+Jmd0OyZndDsgSm9lPC9kaXY+DQo8ZGl2PiZndDsmZ3Q7PC9kaXY+DQo8ZGl2 PiZndDsmZ3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f PC9kaXY+DQo8ZGl2PiZndDsmZ3Q7IEkybnNmIG1haWxpbmcgbGlzdDwvZGl2Pg0KPGRpdj4mZ3Q7 Jmd0OyA8YSBocmVmPSJtYWlsdG86STJuc2ZAaWV0Zi5vcmciPkkybnNmQGlldGYub3JnPC9hPjwv ZGl2Pg0KPGRpdj4mZ3Q7Jmd0OyA8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2kybnNmIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2ky bnNmPC9hPjwvZGl2Pg0KPGRpdj4mZ3Q7Jmd0OzwvZGl2Pg0KPGRpdj4mZ3Q7PC9kaXY+DQo8ZGl2 PiZndDs8L2Rpdj4NCjxkaXY+Jm5ic3A7PC9kaXY+DQo8ZGl2PiZuYnNwOzwvZGl2Pg0KPGRpdj48 Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48L2Rpdj4NCjwvc3Bhbj48 L2ZvbnQ+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_4A95BA014132FF49AE685FAB4B9F17F657D19B03dfweml701chm_-- From nobody Wed Aug 26 16:35:04 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB3E91B33A3 for ; Wed, 26 Aug 2015 16:35:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iFvCnp2lm_IF for ; Wed, 26 Aug 2015 16:35:00 -0700 (PDT) Received: from mail-qg0-x22d.google.com (mail-qg0-x22d.google.com [IPv6:2607:f8b0:400d:c04::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C8461B3362 for ; Wed, 26 Aug 2015 16:35:00 -0700 (PDT) Received: by qgj62 with SMTP id 62so1790812qgj.2 for ; Wed, 26 Aug 2015 16:34:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=jX8rax375G2i0Zv74gZCLKKimo7amLNOB+OfpUf4nkg=; b=d6sQwY1uBAN4h/jh4ixcUgMol+cCg7PX1l6YnkUQhBYnHzppHp/Hiy3Wp/J8AOVRJP Ap0ULL89L6Weup1DWUamXe8tz6JDUz6IIHY7VBE1SXXn9aBtfsLYWp1zkwurt9frC8lN e7XrGork0lG7/e2CGz0Y/PpyVHhtFl+164/+mmxk+CP7J9OQjX1RgQAcst23THqD5ABO a3yBMolaqGbNrbFiZk64fvseGt0fkuI1s+ytGv1SA/85DZzXssS/Aa/j5l8L3TSgcU17 tJ0Z7EhUQovlGPp1cU4JGynR1dASGBtXP70XSWbJhbDZXaO8Pvul85ZZ3yYJbX2bdeR9 uatw== X-Received: by 10.140.152.144 with SMTP id 138mr2064943qhy.19.1440632099620; Wed, 26 Aug 2015 16:34:59 -0700 (PDT) Received: from [192.168.1.3] (209-6-114-252.c3-0.arl-ubr1.sbo-arl.ma.cable.rcn.com. [209.6.114.252]) by smtp.gmail.com with ESMTPSA id 70sm180544qhd.40.2015.08.26.16.34.58 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 26 Aug 2015 16:34:58 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (12H143) In-Reply-To: <55DE41BB.3000801@cisco.com> Date: Wed, 26 Aug 2015 19:34:57 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <0E93B5AF-38DC-48FD-A69F-7DD7956A3F59@gmail.com> References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> To: Flemming Andreasen Archived-At: Cc: "i2nsf@ietf.org" , Joseph Salowey , Linda Dunbar Subject: Re: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2015 23:35:04 -0000 Thanks for the additional comments. I have some comments inline. Sent from my iPhone > On Aug 26, 2015, at 6:46 PM, Flemming Andreasen wrote= : >=20 > Apologies for joining the discussion late - just got back from PTO. In any= case, please find some additional comments on the proposed charter below (s= ome more substantial than others): >=20 > - The first paragraph starts out by defining what an NSF is, and we can ar= gue about some of the points in there for various security functions (e.g. I= may want to detect normal network behavior to establish a baseline, which d= oes not seem to be covered by the current definition). I don't think that wi= ll be a productive discussion though, nor is it necessary. Instead, I'd sugg= est we are not overly prescriptive, but rather view these as possible NSF fe= atures, and supplement them with some actual product examples (e.g. FW, NGFW= , IPS, etc.). Similarly, since we limit our scope to "flow-based NSFs", we m= ay want to make that clear here. An example of a security function that woul= d *not* be in scope may be helpful too. I believe these points are well covered in the full charter already. If you= have text that you think clarifies these points without restating them, tha= t would be helpful. >=20 > - The third paragraph says that "The NSFs can be monitored by multiple ent= ities..."; does this imply a 1:N (direct) monitoring relationship ? If so, t= hat seems to get to a design decision that may be premature. I think we should leave that alone and don't think it necessarily implies a 1= :N relationship. >=20 > - The charter seems to operate with the notion of a "security controller" t= hat interacts with the "NSF". If I understand correctly, the security contro= ller implements the "Service Layer" and the NSF implements the "Capability L= ayer". Furthermore, we have "clients" that interact with the security contro= ller to implement policies (by leveraging the service layer). If so, it woul= d be good to clarify this taxonomy earlier in the charter. If not, then I pr= obably need some clarifications in the text. What specific text would you propose? I think the point is already clear, b= ut if you have proposed text, that may be more helpful to see your point cle= arly. >=20 > - In the definition of the "Capability Layer", there is a statement about "= rules...of NSFs have to be implementable by most NSFs". Do you mean all NSFs= or NSFs of a given type (I assume we have different types of NSFs) ? There is already a list of possible NSF device types in the charter. Is add= itional text needed to make this point more clear? I read it as pretty clea= r already, but seeing a proposal might help. >=20 > - Policies are labeled as "simple" or "abstract or sophisticated" without f= urther definition; I'm not sure where we draw that line or how to do that in= the charter; maybe clarifying that part needs to be a deliverable ? I think that's too much detail for an already very detailed charter. >=20 > - A number of deliverables may not be published as an RFC; why not (they s= eem to set the stage for several other deliverables and hence are relevant f= or consumers of the information and data models later on) ? >=20 This is a decision the WG can make and is typical for IETF WGs to revisit th= ese decisions. If you'd like them published, please make that known when th= is assessment is made. > - The part about I2NSF providing a "discussion forum for Informational dra= fts on.....[more complex Service Layer policies]..." is confusing to me. The= work seems to be pursued outside the WG, so there are no deliverables and p= resumably no agenda time will be allocated either. It's also not clear to me= that we can/should state that such documents would be Informational. We may= decide that we need some procedures for how to define such documents, have d= esignated experts, a directorate, etc. to review them etc. I'm guessing this= is all a bit premature though, but again, we may want to note that as an is= sue in the charter that the WG needs to resolve at some point. This leaves open some leeway to avoid the need to re charter if work fits in= to the existing charter, but is not an existing milestone. This can be deci= ded with the area director without lots of extra process. >=20 >=20 > Nits: > - first paragraph: > s/the mitigate/mitigate the/ >=20 > - second last paragraph: > s/RFCs of/RFCs or >=20 >=20 > Thanks Thank you for the detailed review. Kathleen=20 >=20 > -- Flemming >=20 >=20 >> On 8/26/15 5:38 PM, Linda Dunbar wrote: >> Kathleen, >>=20 >> Thank you very much for the editorial changes. The charter description on= the I2NSF Wiki has been updated to reflect your suggested changes: https://= sites.google.com/site/interface2nsf/home >>=20 >>=20 >> Linda >>=20 >>=20 >> -----Original Message----- >> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen Moriart= y >> Sent: Wednesday, August 26, 2015 2:29 PM >> To: Joseph Salowey >> Cc: i2nsf@ietf.org >> Subject: Re: [I2nsf] Consensus call on I2NSF Charter >>=20 >> I have a few editorial changes in the following text that does not change= the meaning of the charter text: >>=20 >> A Network Security Function (NSF) is a function used to ensure integrity,= confidentiality, and availability of network communications, to detect unwa= nted network activity, and to block or at least the mitigate effects of unwa= nted activity. NSFs are provided and consumed in increasingly diverse enviro= nments. Users of NSFs could consume network security services hosted by one o= r more providers, which may be their own enterprise, service providers, or a= combination of both. Similarly, service providers may offer their customer= s network security services that are enforced by multiple security products a= nd/or functions from different vendors. NSFs may be provided by physical and= /or virtualized infrastructure. Without standard interfaces to control and m= onitor the behavior of NSFs, it has become virtually impossible for provider= s of security services to automate service offerings that utilize different s= ecurity functions from multiple vendors. >>=20 >> The goal of I2NSF is to define a set of software interfaces and data mode= ls for controlling and monitoring aspects of physical and virtual NSFs. If t= he working group finds it necessary to work on an information model before t= he data models, to help provide guidance and derive the data models, it may d= o so. The working group will decide later whether the information model need= s to be published as an RFC. >> Other aspects of NSFs, such as device or network provisioning and configu= ration, are out of scope. >>=20 >> Controlling and monitoring aspects of NSFs include the ability to specify= rules (by a single controller at the first phase), query, and monitor NSFs b= y one or more management entities. The initial phase of I2NSF will only con= sider one single controller that can specify or change rules to NSFs because= multi-headed control requires the coordination to avoid potential conflict o= f rules. The NSFs can be monitored by multiple entities, but the database up= date and synchronization among multiple management entities are out of scope= for I2NSF. As there are many different security vendors supporting differen= t features and functions on their devices, I2NSF will focus on flow-based NS= Fs that provide treatment to packets/flows, such as Intrusion Protection/Det= ection System (IPS/IDS), Web filtering, flow filtering, deep packet inspecti= on, or pattern matching and remediation. >>=20 >> I2NSF will specify interfaces at two functional levels for the control an= d monitoring of network security functions: >>=20 >> The I2NSF Capability Layer specifies how to control and monitor NSFs at a= functional implementation level. The term =E2=80=9CFunctional Implementati= on=E2=80=9D is used to emphasize that the rules (for control and >> monitor) of NSFs have to be implementable by most NSFs. I2NSF will standa= rdize a set of interfaces by which a security controller can invoke, operate= , and monitor NSFs. >>=20 >> The I2NSF Service Layer defines how clients=E2=80=99 security policies ma= y be expressed to a security controller. The controller implements its polic= ies according to the various capabilities provided by the I2NSF capability L= ayer. The I2NSF Service Layer also allows the client to monitor the client s= pecific policies. >>=20 >> Since there could be many depths or types of Service Layer policies, the f= ollowing bullets further clarify the scope of I2NSF: >> o Only the Simple Service Layer policies that are modeled as closely a= s possible on the Capability Layer are within the scope. >> Such a Simple Service Layer will enable a security controller to handle i= ssues like multi-tenancy and the choice between available NSFs for a given p= olicy. >> o I2NSF will not specify abstract or sophisticated policies from clie= nts. Expressing policies in ways other than the model used by the Capability= Layer is out of scope. >> o The translation mechanism/methods from Service Layer policies to Ca= pability layer comments are out of scope for I2NSF. >> However, I2NSF will provide a discussion forum for Informational drafts o= n data models, APIs, etc. that demonstrate how more complex Service Layer po= licies and formats may be translated to Capability Layer functions. Such do= cuments would be pursued outside the WG. >>=20 >> Standard interfaces for monitoring and controlling the behavior of NSFs a= re essential building blocks for providers of security service to automate t= he use of different NSFs from multiple vendors. This work will leverage the e= xisting protocols and data models defined by the I2RS, NETCONF, and NETMOD w= orking groups. If extensions to these protocols or data models are needed, r= equirements will be developed by this WG, and the extensions will be develop= ed in cooperation with the WGs responsible for the protocols. >>=20 >> The I2NSF WG=E2=80=99s deliverables include: >>=20 >> o A single document covering use cases, problem statement, and gap an= alysis document. This document will initially be produced for reference as a= living list to track and record discussions: the WG may decide to not publi= sh this document as an RFC. >> o A framework document, presenting an overview of the use of NSFs and= the purpose of the models developed by the WG. This document will also be a= reference text to guide the main work and the WG may decide to not publish t= his document as an RFC. >> o If the working group considers it necessary, a single, unified, Inf= ormation Model to describe the control and monitoring of flow-based NSFs. >> o YANG data models for the control and monitoring of NSFs. >> o Requests to the IANA for the creation of a registry that enables th= e characteristics and behavior of NSFs to be specified using a vendor-neutra= l vocabulary without requiring the NSFs themselves to be standardized. The r= egistry enables various mechanisms, including policy rules, to be used to ma= tch monitor and control functions to the needs of an application and/or envi= ronment. >> An examination of existing secure communication mechanisms to identify th= e appropriate ones for carrying the controlling and monitoring information b= etween the NSFs and their management entities. This document may also be pro= duced as a working document that is not published as an RFC. >>=20 >> The WG may additionally choose to develop documents to describe requireme= nts for extensions (if any) to existing protocols used by the WG, to explain= how the data models are used to monitor and control flow-based NSFs, and to= describe how to use I2RS and NETCONF to carry the content of the data model= s. These documents may be published as Informational RFCs of may be working d= ocuments that are discarded once they have triggered the necessary work. >>=20 >> The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG w= ill communicate with external SDOs like ETSI NFV and will encourage open sou= rce code development related to the WG scope in organizations like ONF, Open= Stack, ODL, and OPNFV. >>=20 >>=20 >>> On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey wrote:= >>> Thanks to everyone who has contributed towards developing the charter. >>> I believe we are close to consensus so this is a consensus call for the I= 2NSF >>> charter. The charter text is located at >>> https://sites.google.com/site/interface2nsf/home. Please send >>> comments on this charter to the I2NSF list by September 2, 2015. >>>=20 >>> Thank you, >>>=20 >>> Joe >>>=20 >>> _______________________________________________ >>> I2nsf mailing list >>> I2nsf@ietf.org >>> https://www.ietf.org/mailman/listinfo/i2nsf >=20 >=20 From nobody Wed Aug 26 19:00:18 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 832791B3882 for ; Wed, 26 Aug 2015 19:00:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -12.21 X-Spam-Level: X-Spam-Status: No, score=-12.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MANGLED_NAIL=2.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 58mQfui_veX4 for ; Wed, 26 Aug 2015 19:00:10 -0700 (PDT) Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38F881B387F for ; Wed, 26 Aug 2015 19:00:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=48567; q=dns/txt; s=iport; t=1440640810; x=1441850410; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to; bh=PvCOpkCQ34hwYjwPTXdiWiGM6z/3yF/jEmLchosxIQ8=; b=ZlG6ppNnJmmBXoUf6inYPxLkOEL8lW0Ot9maZFUBO95uwkudrSJEiLBq 9bpTKP1LkFHkhed/ceKpP0yaRVJ2IQ5yhYHjcetXzQr2rdHmMlrQIJJvo vjr/P4rLOG3pluMuHVbXf+DQ8WbCXiSMeRccOZcnu7OaeGBf3+s33csoh I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DXAwAJbt5V/5BdJa1TCoJOTVRpgyOmWgEBAQEBAQUBgQmJW4kGAQmBVRkBCYIeJYM4AoE2OBQBAQEBAQEBgQqEIwEBAQMBAQEBFwECBgo6BAMEAgQBBQcECQIRBAEBAQkWAQEGAwICCQMCAQIBFR8JCAYBDAYCAQGIIggNlmidHZUAAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4YlhTaEJgcFWAcGgmOBQwWHKop6gxiFBodsgUpGg2yCe4kzhEmDayaEGyIzgQaBRwEBAQ X-IronPort-AV: E=Sophos; i="5.17,420,1437436800"; d="scan'208,217"; a="21941666" Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-9.cisco.com with ESMTP; 27 Aug 2015 02:00:07 +0000 Received: from [10.98.149.195] (bxb-fandreas-8812.cisco.com [10.98.149.195]) by rcdn-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id t7R206Af000499; Thu, 27 Aug 2015 02:00:07 GMT To: Linda Dunbar , Kathleen Moriarty , Joseph Salowey References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D19B03@dfweml701-chm> From: Flemming Andreasen Message-ID: <55DE6F40.3080604@cisco.com> Date: Wed, 26 Aug 2015 22:00:32 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D19B03@dfweml701-chm> Content-Type: multipart/alternative; boundary="------------030102030808050001090001" Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 02:00:16 -0000 This is a multi-part message in MIME format. --------------030102030808050001090001 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit On 8/26/15 7:31 PM, Linda Dunbar wrote: > Flemming, > Thank you very much for the detailed comments. Thank you for catching > those typos (corrected on the I2NSF wiki now). We really need the > fresh set of eyes to look at it. > You stated: > - The third paragraph says that "The NSFs can be monitored by multiple > entities..."; does this imply a 1:N (direct) monitoring relationship ? > If so, that seems to get to a design decision that may be premature. > [Linda] The intent is to describe a scenario that a NSF may send > different outputs to different entities. For example, some statistics > report to “Analytics system”, “rule query” to management entity. Can > you suggest a better wording for this? I see. I'm not sure I would get into that level of detail in the charter, but since you introduce the notion of "features and functions", you could for example say "The NSFs may contain a multitude of features and functions, each of which can be monitored by a different entity" or something like that. > Other Replies are inserted below: > -----Original Message----- > From: Flemming Andreasen [mailto:fandreas@cisco.com] > Sent: Wednesday, August 26, 2015 5:46 PM > To: Linda Dunbar; Kathleen Moriarty; Joseph Salowey > Cc: i2nsf@ietf.org > Subject: Re: [I2nsf] Consensus call on I2NSF Charter > Apologies for joining the discussion late - just got back from PTO. In > any case, please find some additional comments on the proposed charter > below (some more substantial than others): > - The first paragraph starts out by defining what an NSF is, and we > can argue about some of the points in there for various security > functions (e.g. I may want to detect normal network behavior to > establish a baseline, which does not seem to be covered by the current > definition). > [Linda] Over the course of I2NSF (about a year), we have gone through > a long debate on what NSFs should be considered by IETF I2NSF. As the > result of the long debate, we use the definition to classify a set of > functions to be considered for IETF I2NSF (then further narrowing down > to Flow-based NSFs). > The function you described, i.e. detecting normal network behavior to > establish a baseline is not in the scope of I2NSF, even though this > function can also be "provided and consumed in increasingly diverse > environments". Ok - the part about "detect unwanted network activity" is fairly broad though, and I'm not sure how you detect unwanted activity without looking at all activity (which is what triggered my original question). > I don't think that will be a productive discussion though, nor is it > necessary. Instead, I'd suggest we are not overly prescriptive, but > rather view these as possible NSF features, and supplement them with > some actual product examples (e.g. FW, NGFW, IPS, etc.). Similarly, > since we limit our scope to "flow-based NSFs", we may want to make > that clear here. An example of a security function that would *not* be > in scope may be helpful too. > [Linda] All the NSFs in I2NSF context are “features”, whose form > factor can be provided physical box or virtualized format. Some form > factors, i.e. devices or VM, can provide multiple “functions”. Do you > think the sentences in the third paragraph is good enough to describe > what you want? > /“//I2NSF will focus on flow-based NSFs that provide treatment to > packets/flows, such as Intrusion Protection/Detection System > (IPS/IDS), Web filtering, flow filtering, deep packet inspection, or > pattern matching and remediation.//”/// The examples here are clear; I'm less clear on what else might be in scope. For example, would a DDoS detection and mitigation system be in scope (keeping in mind it may use a combination of packet inspection and telemetry-based detection and mitigation and that establishing a "normal" baseline is often part of the operation) ? > - The charter seems to operate with the notion of a "security > controller" that interacts with the "NSF". If I understand correctly, > the security controller implements the "Service Layer" and the NSF > implements the "Capability Layer". Furthermore, we have "clients" that > interact with the security controller to implement policies (by > leveraging the service layer). If so, it would be good to clarify this > taxonomy earlier in the charter. If not, then I probably need some > clarifications in the text. > [Linda] “Security controller” is a conceptual entity, meaning an > entity to send implementable rules (capability layer) to the NSFs. > There could be multiple of them, each responsible for one type of NSF > (i.e. managing the instances of the NSFs). > I2NSF includes “Simple Service Layer” that models closely to the > “Capability Layer”. For example: client can specify the rules without > specify which instances of the NSF. The “Controller” manage the > instances, as described by The figure in I2NSF Framework document: > + - - - - - - - - - - - - - - - + + - - - - - - - - - - - - - - - + > | NSF-A +--------------+ | | NSF-B +--------------+ | > | | Controller| | | | Controller| | > | +--------------+ | | +--------------+ | > | + - - - - - - - - - - - - - + | | + - - - - - - - - - - - - - + | > | |+---------+ +---------+| | | |+---------+ +---------+| | > | || NSF-A#1 | ... | NSF-A#n|| | | || NSF-B#1| ... | NSF-B#m|| | > | |+---------+ +---------+| | | |+---------+ +---------+| | > | | NSF-A cluster | | | | NSF-B cluster | | > | + - - - - - - - - - - - - - + | | + - - - - - - - - - - - - - + | > + - - - - - - - - - - - - - - - + + - - - - - - - - - - - - - - - + Ok - this basic framework seems to be foundational to the structure of the work the group is doing. If so, I think it would be helpful to outline it (verbally) in the charter. > - In the definition of the "Capability Layer", there is a statement > about "rules...of NSFs have to be implementable by most NSFs". Do you > mean all NSFs or NSFs of a given type (I assume we have different > types of NSFs) ? > [Linda] yes. > - Policies are labeled as "simple" or "abstract or sophisticated" > without further definition; I'm not sure where we draw that line or > how to do that in the charter; maybe clarifying that part needs to be > a deliverable ? > [Linda] “simple” means that they can be directly translated to > capability layer rules with simple mapping, e.g. without explicit > stating which instantiation, may have customer ID that can be > translated to some tags carried by packets Ok - if that's the definition we want to use, can we clarify it in the charter ? > - A number of deliverables may not be published as an RFC; why not > (they seem to set the stage for several other deliverables and hence > are relevant for consumers of the information and data models later on) ? > [Linda] The WG group may decide to publish them as RFC or not later. > But the charter doesn’t specify which way. That is how IESG wanted. Ok. > - The part about I2NSF providing a "discussion forum for Informational > drafts on.....[more complex Service Layer policies]..." is confusing > to me. The work seems to be pursued outside the WG, so there are no > deliverables and presumably no agenda time will be allocated either. > [Linda] this is to address the information documents that describe the > I2NSF demo, open source or interoperability initiatives that are > conducted outside the WG. E.g > _https://datatracker.ietf.org/doc/draft-xie-i2nsf-demo-outline-design/_ Ok - thanks for the pointer, however from a WG point of view, I'm not clear on what it means to have a discussion forum and what, if anything, the WG will do with it (e.g. discuss such drafts as part of meetings, etc) ? > It's also not clear to me that we can/should state that such documents > would be Informational. We may decide that we need some procedures for > how to define such documents, have designated experts, a directorate, > etc. to review them etc. I'm guessing this is all a bit premature > though, but again, we may want to note that as an issue in the charter > that the WG needs to resolve at some point. > [Linda] Agree with you. I will see how AD wants to address this > suggestion . Ok > Nits: > - first paragraph: > s/the mitigate/mitigate the/ > - second last paragraph: > s/RFCs of/RFCs or > [Linda] Thank you for the catch. They are corrected on the I2NSF wiki > now. Thanks for the quick response and updates. -- Flemming > Thanks > -- Flemming > On 8/26/15 5:38 PM, Linda Dunbar wrote: > > Kathleen, > > > > Thank you very much for the editorial changes. The charter description > > on the I2NSF Wiki has been updated to reflect your suggested changes: > >https://sites.google.com/site/interface2nsf/home > > > > > > Linda > > > > > > -----Original Message----- > > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen > > Moriarty > > Sent: Wednesday, August 26, 2015 2:29 PM > > To: Joseph Salowey > > Cc:i2nsf@ietf.org > > Subject: Re: [I2nsf] Consensus call on I2NSF Charter > > > > I have a few editorial changes in the following text that does not change the meaning of the charter text: > > > > A Network Security Function (NSF) is a function used to ensure integrity, confidentiality, and availability of network > communications, to detect unwanted network activity, and to block or > at least the mitigate effects of unwanted activity. NSFs are provided > and consumed in increasingly diverse environments. Users of NSFs could > consume network security services hosted by one or more providers, > which may be their own enterprise, service providers, or a combination > of both. Similarly, service providers may offer their customers > network security services that are enforced by multiple security > products and/or functions from different vendors. NSFs may be provided > by physical and/or virtualized infrastructure. Without standard > interfaces to control and monitor the behavior of NSFs, it has become > virtually impossible for providers of security services to automate > service offerings that utilize different security functions from > multiple vendors. > > > > The goal of I2NSF is to define a set of software interfaces and data models for controlling and monitoring aspects of > physical and virtual NSFs. If the working group finds it necessary to > work on an information model before the data models, to help provide > guidance and derive the data models, it may do so. The working group > will decide later whether the information model needs to be published > as an RFC. > > Other aspects of NSFs, such as device or network provisioning and configuration, are out of scope. > > > > Controlling and monitoring aspects of NSFs include the ability to specify rules (by a single controller at the first > phase), query, and monitor NSFs by one or more management entities. > The initial phase of I2NSF will only consider one single controller > that can specify or change rules to NSFs because multi-headed control > requires the coordination to avoid potential conflict of rules. The > NSFs can be monitored by multiple entities, but the database update > and synchronization among multiple management entities are out of > scope for I2NSF. As there are many different security vendors > supporting different features and functions on their devices, I2NSF > will focus on flow-based NSFs that provide treatment to packets/flows, > such as Intrusion Protection/Detection System (IPS/IDS), Web > filtering, flow filtering, deep packet inspection, or pattern matching > and remediation. > > > > I2NSF will specify interfaces at two functional levels for the control and monitoring of network security functions: > > > > The I2NSF Capability Layer specifies how to control and monitor NSFs > > at a functional implementation level. The term “Functional > > Implementation” is used to emphasize that the rules (for control and > > monitor) of NSFs have to be implementable by most NSFs. I2NSF will standardize a set of interfaces by which a security > controller can invoke, operate, and monitor NSFs. > > > > The I2NSF Service Layer defines how clients’ security policies may be expressed to a security controller. The > controller implements its policies according to the various > capabilities provided by the I2NSF capability Layer. The I2NSF > Service Layer also allows the client to monitor the client specific > policies. > > > > Since there could be many depths or types of Service Layer policies, the following bullets further clarify the scope of I2NSF: > > o Only the Simple Service Layer policies that are modeled as closely as possible on the Capability Layer are within > the scope. > > Such a Simple Service Layer will enable a security controller to handle issues like multi-tenancy and the choice between > available NSFs for a given policy. > > o I2NSF will not specify abstract or sophisticated policies from clients. Expressing policies in ways > other than the model used by the Capability Layer is out of scope. > > o The translation mechanism/methods from Service Layer policies to Capability layer comments are out of scope > for I2NSF. > > However, I2NSF will provide a discussion forum for Informational drafts on data models, APIs, etc. that demonstrate how > more complex Service Layer policies and formats may be translated to > Capability Layer functions. Such documents would be pursued outside > the WG. > > > > Standard interfaces for monitoring and controlling the behavior of NSFs are essential building blocks for providers of > security service to automate the use of different NSFs from multiple > vendors. This work will leverage the existing protocols and data > models defined by the I2RS, NETCONF, and NETMOD working groups. If > extensions to these protocols or data models are needed, requirements > will be developed by this WG, and the extensions will be developed in > cooperation with the WGs responsible for the protocols. > > > > The I2NSF WG’s deliverables include: > > > > o A single document covering use cases, problem statement, and gap analysis document. This document will initially be > produced for reference as a living list to track and record > discussions: the WG may decide to not publish this document as an RFC. > > o A framework document, presenting an overview of the use of NSFs and the purpose of the models developed by the WG. > This document will also be a reference text to guide the main work and > the WG may decide to not publish this document as an RFC. > > o If the working group considers it necessary, a single, unified, Information Model to describe the control and > monitoring of flow-based NSFs. > > o YANG data models for the control and monitoring of NSFs. > > o Requests to the IANA for the creation of a registry that enables the characteristics and behavior of NSFs to be > specified using a vendor-neutral vocabulary without requiring the NSFs > themselves to be standardized. The registry enables various > mechanisms, including policy rules, to be used to match monitor and > control functions to the needs of an application and/or environment. > > An examination of existing secure communication mechanisms to identify the appropriate ones for carrying the > controlling and monitoring information between the NSFs and their > management entities. This document may also be produced as a working > document that is not published as an RFC. > > > > The WG may additionally choose to develop documents to describe requirements for extensions (if any) to existing > protocols used by the WG, to explain how the data models are used to > monitor and control flow-based NSFs, and to describe how to use I2RS > and NETCONF to carry the content of the data models. These documents > may be published as Informational RFCs of may be working documents > that are discarded once they have triggered the necessary work. > > > > The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG will communicate with external SDOs like ETSI NFV > and will encourage open source code development related to the WG > scope in organizations like ONF, OpenStack, ODL, and OPNFV. > > > > > > On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey > wrote: > >> Thanks to everyone who has contributed towards developing the charter. > >> I believe we are close to consensus so this is a consensus call for the I2NSF > >> charter. The charter text is located at > >>https://sites.google.com/site/interface2nsf/home. Please send > >> comments on this charter to the I2NSF list by September 2, 2015. > >> > >> Thank you, > >> > >> Joe > >> > >> _______________________________________________ > >> I2nsf mailing list > >>I2nsf@ietf.org > >>https://www.ietf.org/mailman/listinfo/i2nsf > >> > > > > --------------030102030808050001090001 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

On 8/26/15 7:31 PM, Linda Dunbar wrote:
Flemming,
 
Thank you very much for the detailed comments. Thank you for catching those typos (corrected on the I2NSF wiki now). We really need the fresh set of eyes to look at it.
 
You stated:
- The third paragraph says that "The NSFs can be monitored by multiple entities..."; does this imply a 1:N (direct) monitoring relationship ?
If so, that seems to get to a design decision that may be premature.
 
[Linda] The intent is to describe a scenario that a NSF may send different outputs to different entities. For example, some statistics report to “Analytics system”, “rule query” to management entity. Can you suggest a better wording for this?
 
I see. I'm not sure I would get into that level of detail in the charter, but since you introduce the notion of "features and functions", you could for example say

"The NSFs may contain a multitude of features and functions, each of which can be monitored by a different entity"

or something like that.


 
Other Replies are inserted below:
 
 
 
-----Original Message-----
From: Flemming Andreasen [mailto:fandreas@cisco.com]
Sent: Wednesday, August 26, 2015 5:46 PM
To: Linda Dunbar; Kathleen Moriarty; Joseph Salowey
Cc: i2nsf@ietf.org
Subject: Re: [I2nsf] Consensus call on I2NSF Charter
 
Apologies for joining the discussion late - just got back from PTO. In any case, please find some additional comments on the proposed charter below (some more substantial than others):
 
- The first paragraph starts out by defining what an NSF is, and we can argue about some of the points in there for various security functions (e.g. I may want to detect normal network behavior to establish a baseline, which does not seem to be covered by the current definition).
[Linda] Over the course of I2NSF (about a year), we have gone through a long debate on what NSFs should be considered by IETF I2NSF. As the result of the long debate, we use the definition to classify a set of functions to be considered for IETF I2NSF (then further narrowing down to Flow-based NSFs).
The function you described, i.e. detecting normal network behavior to establish a baseline is not in the scope of I2NSF, even though this function can also be "provided and consumed in increasingly diverse environments".
 
Ok - the part about "detect unwanted network activity" is fairly broad though, and I'm not sure how you detect unwanted activity without looking at all activity (which is what triggered my original question).

 
I don't think that will be a productive discussion though, nor is it necessary. Instead, I'd suggest we are not overly prescriptive, but rather view these as possible NSF features, and supplement them with some actual product examples (e.g. FW, NGFW, IPS, etc.). Similarly, since we limit our scope to "flow-based NSFs", we may want to make that clear here. An example of a security function that would *not* be in scope may be helpful too.
 
[Linda] All the NSFs in I2NSF context are “features”, whose form factor can be provided physical box or virtualized format. Some form factors, i.e. devices or VM, can provide multiple “functions”. Do you think the sentences in the third paragraph is good enough to describe what you want?
 
“I2NSF will focus on flow-based NSFs that provide treatment to packets/flows, such as Intrusion Protection/Detection System (IPS/IDS), Web filtering, flow filtering, deep packet inspection, or pattern matching and remediation.”
 
 
The examples here are clear; I'm less clear on what else might be in scope. For example, would a DDoS detection and mitigation system be in scope (keeping in mind it may use a combination of packet inspection and telemetry-based detection and mitigation and that establishing a "normal" baseline is often part of the operation) ?

 
 
- The charter seems to operate with the notion of a "security controller" that interacts with the "NSF". If I understand correctly, the security controller implements the "Service Layer" and the NSF implements the "Capability Layer". Furthermore, we have "clients" that interact with the security controller to implement policies (by leveraging the service layer). If so, it would be good to clarify this taxonomy earlier in the charter. If not, then I probably need some clarifications in the text.
 
[Linda] “Security controller” is a conceptual entity, meaning an entity to send implementable rules (capability layer) to the NSFs. There could be multiple of them, each responsible for one type of NSF (i.e. managing the instances of the NSFs).
I2NSF includes “Simple Service Layer” that models closely to the “Capability Layer”. For example: client can specify the rules without specify which instances of the NSF. The “Controller” manage the instances, as described by The figure in I2NSF Framework document:
 
+ - - - - - - - - - - - - - - - +  + - - - - - - - - - - - - - - - +
|  NSF-A  +--------------+      |  |  NSF-B  +--------------+      |
|         |   Controller|      |  |         |   Controller|      |
|         +--------------+      |  |         +--------------+      |
| + - - - - - - - - - - - - - + |  | + - - - - - - - - - - - - - + |
| |+---------+     +---------+| |  | |+---------+     +---------+| |
| || NSF-A#1 | ... |  NSF-A#n|| |  | ||  NSF-B#1| ... |  NSF-B#m|| |
| |+---------+     +---------+| |  | |+---------+     +---------+| |
| |         NSF-A cluster     | |  | |          NSF-B cluster    | |
| + - - - - - - - - - - - - - + |  | + - - - - - - - - - - - - - + |
+ - - - - - - - - - - - - - - - +  + - - - - - - - - - - - - - - - +
 
Ok - this basic framework seems to be foundational to the structure of the work the group is doing. If so, I think it would be helpful to outline it (verbally) in the charter.

 
- In the definition of the "Capability Layer", there is a statement about "rules...of NSFs have to be implementable by most NSFs". Do you mean all NSFs or NSFs of a given type (I assume we have different types of NSFs) ?
[Linda] yes.
 
- Policies are labeled as "simple" or "abstract or sophisticated"
without further definition; I'm not sure where we draw that line or how to do that in the charter; maybe clarifying that part needs to be a deliverable ?
[Linda] “simple” means that they can be directly translated to capability layer rules with simple mapping, e.g. without explicit stating which instantiation, may have customer ID that can be translated to some tags carried by packets
 
Ok - if that's the definition we want to use, can we clarify it in the charter ?

- A number of deliverables may not be published as an RFC; why not (they seem to set the stage for several other deliverables and hence are relevant for consumers of the information and data models later on) ?
 
[Linda] The WG group may decide to publish them as RFC or not later. But the charter doesn’t specify which way. That is how IESG wanted.
 
Ok.
- The part about I2NSF providing a "discussion forum for Informational drafts on.....[more complex Service Layer policies]..." is confusing to me. The work seems to be pursued outside the WG, so there are no deliverables and presumably no agenda time will be allocated either.
[Linda] this is to address the information documents that describe the I2NSF demo, open source or interoperability initiatives that are conducted outside the WG. E.g https://datatracker.ietf.org/doc/draft-xie-i2nsf-demo-outline-design/
 
Ok - thanks for the pointer, however from a WG point of view, I'm not clear on what it means to have a discussion forum and what, if anything, the WG will do with it (e.g. discuss such drafts as part of meetings, etc) ?

 
 
It's also not clear to me that we can/should state that such documents would be Informational. We may decide that we need some procedures for how to define such documents, have designated experts, a directorate, etc. to review them etc. I'm guessing this is all a bit premature though, but again, we may want to note that as an issue in the charter that the WG needs to resolve at some point.
 
[Linda] Agree with you. I will see how AD wants to address this suggestion .
Ok
 
 
Nits:
- first paragraph:
s/the mitigate/mitigate the/
 
- second last paragraph:
s/RFCs of/RFCs or
 
[Linda] Thank you for the catch. They are corrected on the I2NSF wiki now.
 
Thanks for the quick response and updates.

-- Flemming

Thanks
 
-- Flemming
 
 
On 8/26/15 5:38 PM, Linda Dunbar wrote:
> Kathleen,
>
> Thank you very much for the editorial changes. The charter description
> on the I2NSF Wiki has been updated to reflect your suggested changes:
>
>
> Linda
>
>
> -----Original Message-----
> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen
> Moriarty
> Sent: Wednesday, August 26, 2015 2:29 PM
> To: Joseph Salowey
> Subject: Re: [I2nsf] Consensus call on I2NSF Charter
>
> I have a few editorial changes in the following text that does not change the meaning of the charter text:
>
> A Network Security Function (NSF) is a function used to ensure integrity, confidentiality, and availability of network communications, to detect unwanted network activity, and to block or at least the mitigate effects of unwanted activity. NSFs are provided and consumed in increasingly diverse environments. Users of NSFs could consume network security services hosted by one or more providers, which may be their own enterprise, service providers, or a combination of both.  Similarly, service providers may offer their customers network security services that are enforced by multiple security products and/or functions from different vendors. NSFs may be provided by physical and/or virtualized infrastructure. Without standard interfaces to control and monitor the behavior of NSFs, it has become virtually impossible for providers of security services to automate service offerings that utilize different security functions from multiple vendors.
>
> The goal of I2NSF is to define a set of software interfaces and data models for controlling and monitoring aspects of physical and virtual NSFs. If the working group finds it necessary to work on an information model before the data models, to help provide guidance and derive the data models, it may do so. The working group will decide later whether the information model needs to be published as an RFC.
> Other aspects of NSFs, such as device or network provisioning and configuration, are out of scope.
>
> Controlling and monitoring aspects of NSFs include the ability to specify rules (by a single controller at the first phase), query, and monitor NSFs by one or more management entities.  The initial phase of I2NSF will only consider one single controller that can specify or change rules to NSFs because multi-headed control requires the coordination to avoid potential conflict of rules. The NSFs can be monitored by multiple entities, but the database update and synchronization among multiple management entities are out of scope for I2NSF. As there are many different security vendors supporting different features and functions on their devices, I2NSF will focus on flow-based NSFs that provide treatment to packets/flows, such as Intrusion Protection/Detection System (IPS/IDS), Web filtering, flow filtering, deep packet inspection, or pattern matching and remediation.
>
> I2NSF will specify interfaces at two functional levels for the control and monitoring of network security functions:
>
> The I2NSF Capability Layer specifies how to control and monitor NSFs
> at a functional implementation level.  The term “Functional
> Implementation” is used to emphasize that the rules (for control and
> monitor) of NSFs have to be implementable by most NSFs. I2NSF will standardize a set of interfaces by which a security controller can invoke, operate, and monitor NSFs.
>
> The I2NSF Service Layer defines how clients’ security policies may be expressed to a security controller. The controller implements its policies according to the various capabilities provided by the I2NSF capability Layer.  The I2NSF Service Layer also allows the client to monitor the client specific policies.
>
> Since there could be many depths or types of Service Layer policies, the following bullets further clarify the scope of I2NSF:
>      o Only the Simple Service Layer policies that are modeled as closely as possible on the Capability Layer are within the scope.
> Such a Simple Service Layer will enable a security controller to handle issues like multi-tenancy and the choice between available NSFs for a given policy.
>      o I2NSF will not specify abstract or sophisticated policies from clients. Expressing policies in ways other than the model used by the Capability Layer is out of scope.
>      o The translation mechanism/methods from Service Layer policies to Capability layer comments are out of scope for I2NSF.
> However, I2NSF will provide a discussion forum for Informational drafts on data models, APIs, etc. that demonstrate how more complex Service Layer policies and formats may be translated to Capability Layer functions.  Such documents would be pursued outside the WG.
>
> Standard interfaces for monitoring and controlling the behavior of NSFs are essential building blocks for providers of security service to automate the use of different NSFs from multiple vendors. This work will leverage the existing protocols and data models defined by the I2RS, NETCONF, and NETMOD working groups. If extensions to these protocols or data models are needed, requirements will be developed by this WG, and the extensions will be developed in cooperation with the WGs responsible for the protocols.
>
> The I2NSF WG’s deliverables include:
>
>      o A single document covering use cases, problem statement, and gap analysis document. This document will initially be produced for reference as a living list to track and record discussions: the WG may decide to not publish this document as an RFC.
>      o A framework document, presenting an overview of the use of NSFs and the purpose of the models developed by the WG. This document will also be a reference text to guide the main work and the WG may decide to not publish this document as an RFC.
>      o If the working group considers it necessary, a single, unified, Information Model to describe the control and monitoring of flow-based NSFs.
>      o YANG data models for the control and monitoring of NSFs.
>      o Requests to the IANA for the creation of a registry that enables the characteristics and behavior of NSFs to be specified using a vendor-neutral vocabulary without requiring the NSFs themselves to be standardized. The registry enables various mechanisms, including policy rules, to be used to match monitor and control functions to the needs of an application and/or environment.
> An examination of existing secure communication mechanisms to identify the appropriate ones for carrying the controlling and monitoring information between the NSFs and their management entities. This document may also be produced as a working document that is not published as an RFC.
>
> The WG may additionally choose to develop documents to describe requirements for extensions (if any) to existing protocols used by the WG, to explain how the data models are used to monitor and control flow-based NSFs, and to describe how to use I2RS and NETCONF to carry the content of the data models. These documents may be published as Informational RFCs of may be working documents that are discarded once they have triggered the necessary work.
>
> The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG will communicate with external SDOs like ETSI NFV and will encourage open source code development related to the WG scope in organizations like ONF, OpenStack, ODL, and OPNFV.
>
>
> On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey <joe@salowey.net> wrote:
>> Thanks to everyone who has contributed towards developing the charter.
>> I believe we are close to consensus so this is a consensus call for the I2NSF
>> charter.   The charter text is located at
>> comments on this charter to the I2NSF list by September 2, 2015.
>>
>> Thank you,
>>
>> Joe
>>
>> _______________________________________________
>> I2nsf mailing list
>>
>
>
 
 
 

--------------030102030808050001090001-- From nobody Wed Aug 26 19:22:22 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C1D61B2A01 for ; Wed, 26 Aug 2015 19:22:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TEDh_hbSnjNm for ; Wed, 26 Aug 2015 19:22:16 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29B4D1B323C for ; Wed, 26 Aug 2015 19:22:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=14172; q=dns/txt; s=iport; t=1440642136; x=1441851736; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=YBeCJthpZfpBcUzFBa/lfHBtW3F6q5lMzumHCEa/VmU=; b=aZw7DtLN9ACrR5Yrt+bsqATHUboIYfEFMMgkSOSki5dedr+1i6PA/kO8 K0Jv5DvwrhY4ADYtvFImjMtNwjv0q1Do9TEpcySG9PmGE8cN+pP30UYzY y0c15x0hdhF7fCwT9SfXsiQFyzbw98+W6BSlXYmnwfCCORkuYg6UNIruE 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DTAwA6c95V/4MNJK1TCoMbVGmDI6ZaAQEBAQEBBQGBCZJhAQmBbgqCQ4M4AoE2OBQBAQEBAQEBgQqEIwEBAQMBAQEBGgYVMwMEAgQBBQcECxEEAQEBAgIFFggDAgIJAwIBAgEVHwkIBg0GAgEBiCIIDbQGlQIBAQEBAQEBAQEBAQEBAQEBAQEBAQETBIEihQOFNoQmBwUlMwcGgmOBQwEEkiSDGIUGh2yBSoQygnsjiRCESYNrJoQbIjOBBoFHAQEB X-IronPort-AV: E=Sophos;i="5.17,420,1437436800"; d="scan'208";a="182312516" Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-4.cisco.com with ESMTP; 27 Aug 2015 02:22:14 +0000 Received: from [10.98.149.195] (bxb-fandreas-8812.cisco.com [10.98.149.195]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id t7R2MDil026445; Thu, 27 Aug 2015 02:22:13 GMT To: Kathleen Moriarty References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> <0E93B5AF-38DC-48FD-A69F-7DD7956A3F59@gmail.com> From: Flemming Andreasen Message-ID: <55DE746F.9070802@cisco.com> Date: Wed, 26 Aug 2015 22:22:39 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <0E93B5AF-38DC-48FD-A69F-7DD7956A3F59@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "i2nsf@ietf.org" , Joseph Salowey , Linda Dunbar Subject: Re: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 02:22:20 -0000 On 8/26/15 7:34 PM, Kathleen Moriarty wrote: > Thanks for the additional comments. I have some comments inline. > > Sent from my iPhone > >> On Aug 26, 2015, at 6:46 PM, Flemming Andreasen w= rote: >> >> Apologies for joining the discussion late - just got back from PTO. In= any case, please find some additional comments on the proposed charter b= elow (some more substantial than others): >> >> - The first paragraph starts out by defining what an NSF is, and we ca= n argue about some of the points in there for various security functions = (e.g. I may want to detect normal network behavior to establish a baselin= e, which does not seem to be covered by the current definition). I don't = think that will be a productive discussion though, nor is it necessary. I= nstead, I'd suggest we are not overly prescriptive, but rather view these= as possible NSF features, and supplement them with some actual product e= xamples (e.g. FW, NGFW, IPS, etc.). Similarly, since we limit our scope t= o "flow-based NSFs", we may want to make that clear here. An example of a= security function that would *not* be in scope may be helpful too. > I believe these points are well covered in the full charter already. I= f you have text that you think clarifies these points without restating t= hem, that would be helpful. I don't - I have trouble determining where to draw the line between=20 security functions in scope and out of scope and was hoping for further=20 clarification to help with that. >> - The third paragraph says that "The NSFs can be monitored by multiple= entities..."; does this imply a 1:N (direct) monitoring relationship ? I= f so, that seems to get to a design decision that may be premature. > I think we should leave that alone and don't think it necessarily impli= es a 1:N relationship. >> - The charter seems to operate with the notion of a "security controll= er" that interacts with the "NSF". If I understand correctly, the securit= y controller implements the "Service Layer" and the NSF implements the "C= apability Layer". Furthermore, we have "clients" that interact with the s= ecurity controller to implement policies (by leveraging the service layer= ). If so, it would be good to clarify this taxonomy earlier in the charte= r. If not, then I probably need some clarifications in the text. > What specific text would you propose? I think the point is already cle= ar, but if you have proposed text, that may be more helpful to see your p= oint clearly. Assuming the above understanding is correct, then something along the=20 lines of: In I2NSF, a client that wants to provision security policies to NSFs=20 does so by interacting with a security controller. The client leverages=20 the I2NSF Service Layer interface to the security controller, which in=20 turn interacts with one or more NSFs through the I2NSF Capability Layer=20 interface. >> - In the definition of the "Capability Layer", there is a statement ab= out "rules...of NSFs have to be implementable by most NSFs". Do you mean = all NSFs or NSFs of a given type (I assume we have different types of NSF= s) ? > There is already a list of possible NSF device types in the charter. I= s additional text needed to make this point more clear? I read it as pre= tty clear already, but seeing a proposal might help. Assuming it applies to given type of NSF, then I would simply qualify it = that way, so it becomes: "rules...of NSFs have to be implementable by most NSFs of a given type"=20 - not a big deal though. >> - Policies are labeled as "simple" or "abstract or sophisticated" with= out further definition; I'm not sure where we draw that line or how to do= that in the charter; maybe clarifying that part needs to be a deliverabl= e ? > I think that's too much detail for an already very detailed charter. Agreed, so I would suggest it becomes one of the tasks of the WGs to=20 define that. >> - A number of deliverables may not be published as an RFC; why not (th= ey seem to set the stage for several other deliverables and hence are rel= evant for consumers of the information and data models later on) ? >> > This is a decision the WG can make and is typical for IETF WGs to revis= it these decisions. If you'd like them published, please make that known= when this assessment is made. Ok. > >> - The part about I2NSF providing a "discussion forum for Informational= drafts on.....[more complex Service Layer policies]..." is confusing to = me. The work seems to be pursued outside the WG, so there are no delivera= bles and presumably no agenda time will be allocated either. It's also no= t clear to me that we can/should state that such documents would be Infor= mational. We may decide that we need some procedures for how to define su= ch documents, have designated experts, a directorate, etc. to review them= etc. I'm guessing this is all a bit premature though, but again, we may = want to note that as an issue in the charter that the WG needs to resolve= at some point. > This leaves open some leeway to avoid the need to re charter if work fi= ts into the existing charter, but is not an existing milestone. This can= be decided with the area director without lots of extra process. Ok. >> >> Nits: >> - first paragraph: >> s/the mitigate/mitigate the/ >> >> - second last paragraph: >> s/RFCs of/RFCs or >> >> >> Thanks > Thank you for the detailed review. Thanks for the quick response. -- Flemming > Kathleen > >> -- Flemming >> >> >>> On 8/26/15 5:38 PM, Linda Dunbar wrote: >>> Kathleen, >>> >>> Thank you very much for the editorial changes. The charter descriptio= n on the I2NSF Wiki has been updated to reflect your suggested changes: h= ttps://sites.google.com/site/interface2nsf/home >>> >>> >>> Linda >>> >>> >>> -----Original Message----- >>> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen Mor= iarty >>> Sent: Wednesday, August 26, 2015 2:29 PM >>> To: Joseph Salowey >>> Cc: i2nsf@ietf.org >>> Subject: Re: [I2nsf] Consensus call on I2NSF Charter >>> >>> I have a few editorial changes in the following text that does not ch= ange the meaning of the charter text: >>> >>> A Network Security Function (NSF) is a function used to ensure integr= ity, confidentiality, and availability of network communications, to dete= ct unwanted network activity, and to block or at least the mitigate effec= ts of unwanted activity. NSFs are provided and consumed in increasingly d= iverse environments. Users of NSFs could consume network security service= s hosted by one or more providers, which may be their own enterprise, ser= vice providers, or a combination of both. Similarly, service providers m= ay offer their customers network security services that are enforced by m= ultiple security products and/or functions from different vendors. NSFs m= ay be provided by physical and/or virtualized infrastructure. Without sta= ndard interfaces to control and monitor the behavior of NSFs, it has beco= me virtually impossible for providers of security services to automate se= rvice offerings that utilize different security functions from multiple v= endors. >>> >>> The goal of I2NSF is to define a set of software interfaces and data = models for controlling and monitoring aspects of physical and virtual NSF= s. If the working group finds it necessary to work on an information mode= l before the data models, to help provide guidance and derive the data mo= dels, it may do so. The working group will decide later whether the infor= mation model needs to be published as an RFC. >>> Other aspects of NSFs, such as device or network provisioning and con= figuration, are out of scope. >>> >>> Controlling and monitoring aspects of NSFs include the ability to spe= cify rules (by a single controller at the first phase), query, and monito= r NSFs by one or more management entities. The initial phase of I2NSF wi= ll only consider one single controller that can specify or change rules t= o NSFs because multi-headed control requires the coordination to avoid po= tential conflict of rules. The NSFs can be monitored by multiple entities= , but the database update and synchronization among multiple management e= ntities are out of scope for I2NSF. As there are many different security = vendors supporting different features and functions on their devices, I2N= SF will focus on flow-based NSFs that provide treatment to packets/flows,= such as Intrusion Protection/Detection System (IPS/IDS), Web filtering, = flow filtering, deep packet inspection, or pattern matching and remediati= on. >>> >>> I2NSF will specify interfaces at two functional levels for the contro= l and monitoring of network security functions: >>> >>> The I2NSF Capability Layer specifies how to control and monitor NSFs = at a functional implementation level. The term =E2=80=9CFunctional Imple= mentation=E2=80=9D is used to emphasize that the rules (for control and >>> monitor) of NSFs have to be implementable by most NSFs. I2NSF will st= andardize a set of interfaces by which a security controller can invoke, = operate, and monitor NSFs. >>> >>> The I2NSF Service Layer defines how clients=E2=80=99 security policie= s may be expressed to a security controller. The controller implements it= s policies according to the various capabilities provided by the I2NSF ca= pability Layer. The I2NSF Service Layer also allows the client to monito= r the client specific policies. >>> >>> Since there could be many depths or types of Service Layer policies, = the following bullets further clarify the scope of I2NSF: >>> o Only the Simple Service Layer policies that are modeled as clo= sely as possible on the Capability Layer are within the scope. >>> Such a Simple Service Layer will enable a security controller to hand= le issues like multi-tenancy and the choice between available NSFs for a = given policy. >>> o I2NSF will not specify abstract or sophisticated policies from= clients. Expressing policies in ways other than the model used by the Ca= pability Layer is out of scope. >>> o The translation mechanism/methods from Service Layer policies = to Capability layer comments are out of scope for I2NSF. >>> However, I2NSF will provide a discussion forum for Informational draf= ts on data models, APIs, etc. that demonstrate how more complex Service L= ayer policies and formats may be translated to Capability Layer functions= =2E Such documents would be pursued outside the WG. >>> >>> Standard interfaces for monitoring and controlling the behavior of NS= Fs are essential building blocks for providers of security service to aut= omate the use of different NSFs from multiple vendors. This work will lev= erage the existing protocols and data models defined by the I2RS, NETCONF= , and NETMOD working groups. If extensions to these protocols or data mod= els are needed, requirements will be developed by this WG, and the extens= ions will be developed in cooperation with the WGs responsible for the pr= otocols. >>> >>> The I2NSF WG=E2=80=99s deliverables include: >>> >>> o A single document covering use cases, problem statement, and g= ap analysis document. This document will initially be produced for refere= nce as a living list to track and record discussions: the WG may decide t= o not publish this document as an RFC. >>> o A framework document, presenting an overview of the use of NSF= s and the purpose of the models developed by the WG. This document will a= lso be a reference text to guide the main work and the WG may decide to n= ot publish this document as an RFC. >>> o If the working group considers it necessary, a single, unified= , Information Model to describe the control and monitoring of flow-based = NSFs. >>> o YANG data models for the control and monitoring of NSFs. >>> o Requests to the IANA for the creation of a registry that enabl= es the characteristics and behavior of NSFs to be specified using a vendo= r-neutral vocabulary without requiring the NSFs themselves to be standard= ized. The registry enables various mechanisms, including policy rules, to= be used to match monitor and control functions to the needs of an applic= ation and/or environment. >>> An examination of existing secure communication mechanisms to identif= y the appropriate ones for carrying the controlling and monitoring inform= ation between the NSFs and their management entities. This document may a= lso be produced as a working document that is not published as an RFC. >>> >>> The WG may additionally choose to develop documents to describe requi= rements for extensions (if any) to existing protocols used by the WG, to = explain how the data models are used to monitor and control flow-based NS= Fs, and to describe how to use I2RS and NETCONF to carry the content of t= he data models. These documents may be published as Informational RFCs of= may be working documents that are discarded once they have triggered the= necessary work. >>> >>> The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The = WG will communicate with external SDOs like ETSI NFV and will encourage o= pen source code development related to the WG scope in organizations like= ONF, OpenStack, ODL, and OPNFV. >>> >>> >>>> On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey wr= ote: >>>> Thanks to everyone who has contributed towards developing the charte= r. >>>> I believe we are close to consensus so this is a consensus call for = the I2NSF >>>> charter. The charter text is located at >>>> https://sites.google.com/site/interface2nsf/home. Please send >>>> comments on this charter to the I2NSF list by September 2, 2015. >>>> >>>> Thank you, >>>> >>>> Joe >>>> >>>> _______________________________________________ >>>> I2nsf mailing list >>>> I2nsf@ietf.org >>>> https://www.ietf.org/mailman/listinfo/i2nsf >> > . > From nobody Wed Aug 26 19:33:15 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD04B1A8AF5 for ; Wed, 26 Aug 2015 19:33:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CjC4Q9kxVNdW for ; Wed, 26 Aug 2015 19:33:10 -0700 (PDT) Received: from mail-qk0-x236.google.com (mail-qk0-x236.google.com [IPv6:2607:f8b0:400d:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F8881B33C3 for ; Wed, 26 Aug 2015 19:33:10 -0700 (PDT) Received: by qkda128 with SMTP id a128so3438957qkd.3 for ; Wed, 26 Aug 2015 19:33:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=gCroE5m0D+uCSQQnNvoIh/ztaOPPAaL6lzkCdF0vht4=; b=uK6nEYnY5OBBfYlZtsPM8vy/KEW/TAwFloUghcaAsxeg5YarF68sRWvbqkz0pQLweD 49EiSl7hGUgkJUi+vKZVpRt7eDxffd5DGm4T6pcjRCtgNgF7C2GbIPukjHIy4pqI4Ura IvgEdEzQvmllE1/ucBLlAL90QJS9+sxPna90vqZOhSlQha7W1suaklyn2raOZoYDbiOm HfS94zRQOcw9VcH0xTV4UItD1+fIum2eQhj15OQMF3RAkaXtXMuh89NUQDUKDLM5F6/D SEncfpfo77dWnD1EOaZuKGNh3r52Oa7lYUsfmxVmAj78yn7FOG3eqVUOEVGMvg5QhTBy ATmw== X-Received: by 10.55.197.138 with SMTP id k10mr3312255qkl.20.1440642789658; Wed, 26 Aug 2015 19:33:09 -0700 (PDT) Received: from [192.168.1.3] (209-6-114-252.c3-0.arl-ubr1.sbo-arl.ma.cable.rcn.com. [209.6.114.252]) by smtp.gmail.com with ESMTPSA id 93sm452815qgm.45.2015.08.26.19.33.08 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 26 Aug 2015 19:33:09 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (12H143) In-Reply-To: <55DE746F.9070802@cisco.com> Date: Wed, 26 Aug 2015 22:33:08 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <6D678FB0-B37F-40CB-87AA-B307EDA229D8@gmail.com> References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> <0E93B5AF-38DC-48FD-A69F-7DD7956A3F59@gmail.com> <55DE746F.9070802@cisco.com> To: Flemming Andreasen Archived-At: Cc: "i2nsf@ietf.org" , Joseph Salowey , Linda Dunbar Subject: Re: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 02:33:13 -0000 Hi Flemming, Thanks for the quick responses so we can resolve this quickly. Sent from my iPhone > On Aug 26, 2015, at 10:22 PM, Flemming Andreasen wrot= e: >=20 >=20 >=20 >> On 8/26/15 7:34 PM, Kathleen Moriarty wrote: >> Thanks for the additional comments. I have some comments inline. >>=20 >> Sent from my iPhone >>=20 >>> On Aug 26, 2015, at 6:46 PM, Flemming Andreasen wro= te: >>>=20 >>> Apologies for joining the discussion late - just got back from PTO. In a= ny case, please find some additional comments on the proposed charter below (= some more substantial than others): >>>=20 >>> - The first paragraph starts out by defining what an NSF is, and we can a= rgue about some of the points in there for various security functions (e.g. I= may want to detect normal network behavior to establish a baseline, which d= oes not seem to be covered by the current definition). I don't think that wi= ll be a productive discussion though, nor is it necessary. Instead, I'd sugg= est we are not overly prescriptive, but rather view these as possible NSF fe= atures, and supplement them with some actual product examples (e.g. FW, NGFW= , IPS, etc.). Similarly, since we limit our scope to "flow-based NSFs", we m= ay want to make that clear here. An example of a security function that woul= d *not* be in scope may be helpful too. >> I believe these points are well covered in the full charter already. If y= ou have text that you think clarifies these points without restating them, t= hat would be helpful. > I don't - I have trouble determining where to draw the line between securi= ty functions in scope and out of scope and was hoping for further clarificat= ion to help with that. Ah, I believe this has been discussed and Linda can summarize. >>> - The third paragraph says that "The NSFs can be monitored by multiple e= ntities..."; does this imply a 1:N (direct) monitoring relationship ? If so,= that seems to get to a design decision that may be premature. >> I think we should leave that alone and don't think it necessarily implies= a 1:N relationship. >>> - The charter seems to operate with the notion of a "security controller= " that interacts with the "NSF". If I understand correctly, the security con= troller implements the "Service Layer" and the NSF implements the "Capabilit= y Layer". Furthermore, we have "clients" that interact with the security con= troller to implement policies (by leveraging the service layer). If so, it w= ould be good to clarify this taxonomy earlier in the charter. If not, then I= probably need some clarifications in the text. >> What specific text would you propose? I think the point is already clear= , but if you have proposed text, that may be more helpful to see your point c= learly. > Assuming the above understanding is correct, then something along the line= s of: >=20 > In I2NSF, a client that wants to provision security policies to NSFs does s= o by interacting with a security controller. The client leverages the I2NSF S= ervice Layer interface to the security controller, which in turn interacts w= ith one or more NSFs through the I2NSF Capability Layer interface. >=20 >=20 This is a bit too detailed for the charter in my opinion. Of others think t= his is helpful, please speak up. This should be clear in the framework draf= t though. Thanks for proposed text. >>> - In the definition of the "Capability Layer", there is a statement abou= t "rules...of NSFs have to be implementable by most NSFs". Do you mean all N= SFs or NSFs of a given type (I assume we have different types of NSFs) ? >> There is already a list of possible NSF device types in the charter. Is a= dditional text needed to make this point more clear? I read it as pretty cl= ear already, but seeing a proposal might help. > Assuming it applies to given type of NSF, then I would simply qualify it t= hat way, so it becomes: >=20 > "rules...of NSFs have to be implementable by most NSFs of a given type" - n= ot a big deal though. Ok, since this isn't a big deal, let's leave it as-is. >=20 >=20 >>> - Policies are labeled as "simple" or "abstract or sophisticated" withou= t further definition; I'm not sure where we draw that line or how to do that= in the charter; maybe clarifying that part needs to be a deliverable ? >> I think that's too much detail for an already very detailed charter. > Agreed, so I would suggest it becomes one of the tasks of the WGs to defin= e that. Ok, we're good here. Thanks, Kathleen=20 >>> - A number of deliverables may not be published as an RFC; why not (they= seem to set the stage for several other deliverables and hence are relevant= for consumers of the information and data models later on) ? >> This is a decision the WG can make and is typical for IETF WGs to revisit= these decisions. If you'd like them published, please make that known when= this assessment is made. > Ok. >>=20 >>> - The part about I2NSF providing a "discussion forum for Informational d= rafts on.....[more complex Service Layer policies]..." is confusing to me. T= he work seems to be pursued outside the WG, so there are no deliverables and= presumably no agenda time will be allocated either. It's also not clear to m= e that we can/should state that such documents would be Informational. We ma= y decide that we need some procedures for how to define such documents, have= designated experts, a directorate, etc. to review them etc. I'm guessing th= is is all a bit premature though, but again, we may want to note that as an i= ssue in the charter that the WG needs to resolve at some point. >> This leaves open some leeway to avoid the need to re charter if work fits= into the existing charter, but is not an existing milestone. This can be d= ecided with the area director without lots of extra process. > Ok. >>>=20 >>> Nits: >>> - first paragraph: >>> s/the mitigate/mitigate the/ >>>=20 >>> - second last paragraph: >>> s/RFCs of/RFCs or >>>=20 >>>=20 >>> Thanks >> Thank you for the detailed review. >=20 > Thanks for the quick response. >=20 > -- Flemming >=20 >> Kathleen >>=20 >>> -- Flemming >>>=20 >>>=20 >>>> On 8/26/15 5:38 PM, Linda Dunbar wrote: >>>> Kathleen, >>>>=20 >>>> Thank you very much for the editorial changes. The charter description o= n the I2NSF Wiki has been updated to reflect your suggested changes: https:/= /sites.google.com/site/interface2nsf/home >>>>=20 >>>>=20 >>>> Linda >>>>=20 >>>>=20 >>>> -----Original Message----- >>>> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen Moria= rty >>>> Sent: Wednesday, August 26, 2015 2:29 PM >>>> To: Joseph Salowey >>>> Cc: i2nsf@ietf.org >>>> Subject: Re: [I2nsf] Consensus call on I2NSF Charter >>>>=20 >>>> I have a few editorial changes in the following text that does not chan= ge the meaning of the charter text: >>>>=20 >>>> A Network Security Function (NSF) is a function used to ensure integrit= y, confidentiality, and availability of network communications, to detect un= wanted network activity, and to block or at least the mitigate effects of un= wanted activity. NSFs are provided and consumed in increasingly diverse envi= ronments. Users of NSFs could consume network security services hosted by on= e or more providers, which may be their own enterprise, service providers, o= r a combination of both. Similarly, service providers may offer their custo= mers network security services that are enforced by multiple security produc= ts and/or functions from different vendors. NSFs may be provided by physical= and/or virtualized infrastructure. Without standard interfaces to control a= nd monitor the behavior of NSFs, it has become virtually impossible for prov= iders of security services to automate service offerings that utilize differ= ent security functions from multiple vendors. >>>>=20 >>>> The goal of I2NSF is to define a set of software interfaces and data mo= dels for controlling and monitoring aspects of physical and virtual NSFs. If= the working group finds it necessary to work on an information model before= the data models, to help provide guidance and derive the data models, it ma= y do so. The working group will decide later whether the information model n= eeds to be published as an RFC. >>>> Other aspects of NSFs, such as device or network provisioning and confi= guration, are out of scope. >>>>=20 >>>> Controlling and monitoring aspects of NSFs include the ability to speci= fy rules (by a single controller at the first phase), query, and monitor NSFs= by one or more management entities. The initial phase of I2NSF will only c= onsider one single controller that can specify or change rules to NSFs becau= se multi-headed control requires the coordination to avoid potential conflic= t of rules. The NSFs can be monitored by multiple entities, but the database= update and synchronization among multiple management entities are out of sc= ope for I2NSF. As there are many different security vendors supporting diffe= rent features and functions on their devices, I2NSF will focus on flow-based= NSFs that provide treatment to packets/flows, such as Intrusion Protection/= Detection System (IPS/IDS), Web filtering, flow filtering, deep packet inspe= ction, or pattern matching and remediation. >>>>=20 >>>> I2NSF will specify interfaces at two functional levels for the control a= nd monitoring of network security functions: >>>>=20 >>>> The I2NSF Capability Layer specifies how to control and monitor NSFs at= a functional implementation level. The term =E2=80=9CFunctional Implementa= tion=E2=80=9D is used to emphasize that the rules (for control and >>>> monitor) of NSFs have to be implementable by most NSFs. I2NSF will stan= dardize a set of interfaces by which a security controller can invoke, opera= te, and monitor NSFs. >>>>=20 >>>> The I2NSF Service Layer defines how clients=E2=80=99 security policies m= ay be expressed to a security controller. The controller implements its poli= cies according to the various capabilities provided by the I2NSF capability L= ayer. The I2NSF Service Layer also allows the client to monitor the client s= pecific policies. >>>>=20 >>>> Since there could be many depths or types of Service Layer policies, th= e following bullets further clarify the scope of I2NSF: >>>> o Only the Simple Service Layer policies that are modeled as closel= y as possible on the Capability Layer are within the scope. >>>> Such a Simple Service Layer will enable a security controller to handle= issues like multi-tenancy and the choice between available NSFs for a given= policy. >>>> o I2NSF will not specify abstract or sophisticated policies from cl= ients. Expressing policies in ways other than the model used by the Capabili= ty Layer is out of scope. >>>> o The translation mechanism/methods from Service Layer policies to C= apability layer comments are out of scope for I2NSF. >>>> However, I2NSF will provide a discussion forum for Informational drafts= on data models, APIs, etc. that demonstrate how more complex Service Layer p= olicies and formats may be translated to Capability Layer functions. Such d= ocuments would be pursued outside the WG. >>>>=20 >>>> Standard interfaces for monitoring and controlling the behavior of NSFs= are essential building blocks for providers of security service to automate= the use of different NSFs from multiple vendors. This work will leverage th= e existing protocols and data models defined by the I2RS, NETCONF, and NETMO= D working groups. If extensions to these protocols or data models are needed= , requirements will be developed by this WG, and the extensions will be deve= loped in cooperation with the WGs responsible for the protocols. >>>>=20 >>>> The I2NSF WG=E2=80=99s deliverables include: >>>>=20 >>>> o A single document covering use cases, problem statement, and gap a= nalysis document. This document will initially be produced for reference as a= living list to track and record discussions: the WG may decide to not publi= sh this document as an RFC. >>>> o A framework document, presenting an overview of the use of NSFs a= nd the purpose of the models developed by the WG. This document will also be= a reference text to guide the main work and the WG may decide to not publis= h this document as an RFC. >>>> o If the working group considers it necessary, a single, unified, I= nformation Model to describe the control and monitoring of flow-based NSFs. >>>> o YANG data models for the control and monitoring of NSFs. >>>> o Requests to the IANA for the creation of a registry that enables t= he characteristics and behavior of NSFs to be specified using a vendor-neutr= al vocabulary without requiring the NSFs themselves to be standardized. The r= egistry enables various mechanisms, including policy rules, to be used to ma= tch monitor and control functions to the needs of an application and/or envi= ronment. >>>> An examination of existing secure communication mechanisms to identify t= he appropriate ones for carrying the controlling and monitoring information b= etween the NSFs and their management entities. This document may also be pro= duced as a working document that is not published as an RFC. >>>>=20 >>>> The WG may additionally choose to develop documents to describe require= ments for extensions (if any) to existing protocols used by the WG, to expla= in how the data models are used to monitor and control flow-based NSFs, and t= o describe how to use I2RS and NETCONF to carry the content of the data mode= ls. These documents may be published as Informational RFCs of may be working= documents that are discarded once they have triggered the necessary work. >>>>=20 >>>> The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG= will communicate with external SDOs like ETSI NFV and will encourage open s= ource code development related to the WG scope in organizations like ONF, Op= enStack, ODL, and OPNFV. >>>>=20 >>>>=20 >>>>> On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey wrot= e: >>>>> Thanks to everyone who has contributed towards developing the charter.= >>>>> I believe we are close to consensus so this is a consensus call for th= e I2NSF >>>>> charter. The charter text is located at >>>>> https://sites.google.com/site/interface2nsf/home. Please send >>>>> comments on this charter to the I2NSF list by September 2, 2015. >>>>>=20 >>>>> Thank you, >>>>>=20 >>>>> Joe >>>>>=20 >>>>> _______________________________________________ >>>>> I2nsf mailing list >>>>> I2nsf@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/i2nsf >> . >=20 >=20 From nobody Thu Aug 27 05:26:33 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE7071B33BA for ; Thu, 27 Aug 2015 05:26:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 44xOeEnUICtA for ; Thu, 27 Aug 2015 05:26:31 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 600DD1B32FD for ; Thu, 27 Aug 2015 05:26:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1967; q=dns/txt; s=iport; t=1440678391; x=1441887991; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=YCfO0YIxiQVycSocb/hZnqiUYYMV5GhaBbd21IFaCtE=; b=fTJrnSxE5qgi/mswPzAuOhg09tNXl5WugvY3jJ3cAj+7l82KaKAgrTP5 BMKP8hCHxcoOV1eh30AKW49rHniD5lXk8KU2YaBh8ZdCYu8UDMXqjP5mI a+fT1sV50H2NR4n/73NkUsy7agh6lRXvxGUUpbJ3mA1xw+/7JIMNML1cQ c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0D+BQB7Ad9V/5ldJa1dgxuEYKZbBgUBgQqSbYdzAoEzOhIBAQEBAQEBgQqEJAEBBCMVOgYBEAsYAgIFFgsCAgkDAgECAUUGDQgBAYgqsyiVEAEBAQEBAQEBAQEBAQEBAQEBG4EihQWFOoULB4JpgUMBBJU9jHOBSoQygnuNfoNrJoQbIoMAAQEB X-IronPort-AV: E=Sophos;i="5.17,422,1437436800"; d="scan'208";a="27758520" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 27 Aug 2015 12:26:30 +0000 Received: from [10.98.149.195] (bxb-fandreas-8812.cisco.com [10.98.149.195]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t7RCQTFW005492; Thu, 27 Aug 2015 12:26:30 GMT To: Kathleen Moriarty References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> <0E93B5AF-38DC-48FD-A69F-7DD7956A3F59@gmail.com> <55DE746F.9070802@cisco.com> <6D678FB0-B37F-40CB-87AA-B307EDA229D8@gmail.com> From: Flemming Andreasen Message-ID: <55DF020F.3010804@cisco.com> Date: Thu, 27 Aug 2015 08:26:55 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <6D678FB0-B37F-40CB-87AA-B307EDA229D8@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: "i2nsf@ietf.org" , Joseph Salowey , Linda Dunbar Subject: Re: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 12:26:32 -0000 On 8/26/15 10:33 PM, Kathleen Moriarty wrote: > >>>> - The third paragraph says that "The NSFs can be monitored by multiple entities..."; does this imply a 1:N (direct) monitoring relationship ? If so, that seems to get to a design decision that may be premature. >>> I think we should leave that alone and don't think it necessarily implies a 1:N relationship. >>>> - The charter seems to operate with the notion of a "security controller" that interacts with the "NSF". If I understand correctly, the security controller implements the "Service Layer" and the NSF implements the "Capability Layer". Furthermore, we have "clients" that interact with the security controller to implement policies (by leveraging the service layer). If so, it would be good to clarify this taxonomy earlier in the charter. If not, then I probably need some clarifications in the text. >>> What specific text would you propose? I think the point is already clear, but if you have proposed text, that may be more helpful to see your point clearly. >> Assuming the above understanding is correct, then something along the lines of: >> >> In I2NSF, a client that wants to provision security policies to NSFs does so by interacting with a security controller. The client leverages the I2NSF Service Layer interface to the security controller, which in turn interacts with one or more NSFs through the I2NSF Capability Layer interface. >> >> > This is a bit too detailed for the charter in my opinion. Of others think this is helpful, please speak up. This should be clear in the framework draft though. The framework draft is an individual draft that may or may not be adopted by the WG in its current form. If the above baseline is assumed by I2NSF, then I think it would be useful to capture that as part of the charter. If the baseline requires further WG discussion, then obviously we should not put it in the charter at this point. Thanks -- Flemming From nobody Thu Aug 27 09:30:02 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 935D51B2F04 for ; Thu, 27 Aug 2015 09:30:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fhRawHIJXOdH for ; Thu, 27 Aug 2015 09:29:55 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 849B21B2BF1 for ; Thu, 27 Aug 2015 09:29:53 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CAM61079; Thu, 27 Aug 2015 16:29:51 +0000 (GMT) Received: from DFWEML705-CHM.china.huawei.com (10.193.5.142) by lhreml402-hub.china.huawei.com (10.201.5.241) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 27 Aug 2015 17:29:50 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml705-chm ([10.193.5.142]) with mapi id 14.03.0235.001; Thu, 27 Aug 2015 09:29:45 -0700 From: Linda Dunbar To: Flemming Andreasen , Kathleen Moriarty , Joseph Salowey Thread-Topic: Further clarification and explanations to I2NSF charter has been added to the I2NSF Wiki Q&A (was RE: [I2nsf] Consensus call on I2NSF Charter Thread-Index: AQHQ38JC8Hlj8uHTckqihpoxsIKx6J4fIKyA//+uYfCAAIjTgP//jF/QgACp5ACAAHx5IA== Date: Thu, 27 Aug 2015 16:29:44 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D1A09B@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D19B03@dfweml701-chm> <55DE6F40.3080604@cisco.com> In-Reply-To: <55DE6F40.3080604@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.236] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D1A09Bdfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: [I2nsf] Further clarification and explanations to I2NSF charter has been added to the I2NSF Wiki Q&A (was RE: Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 16:30:01 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D1A09Bdfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RmxlbW1pbmcsDQoNCkkgaGF2ZSB1cGRhdGVkIHRoZSBRJkEgb24gdGhlIEkyTlNGIFdpa2kgdG8g Y2xhcmlmeSB0aGUgcXVlc3Rpb25zIHlvdSBoYXZlOiAgaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29t L3NpdGUvaW50ZXJmYWNlMm5zZi9pMm5zZi1xLWEvaTJuc2ZxYQ0KDQpIb3BlIGl0IGhlbHBzLiBQ bGVhc2UgbGV0IG1lIGtub3cgaWYgeW91IGhhdmUgbW9yZSBxdWVzdGlvbnMgb3Igc3VnZ2VzdGlv bnMgZm9yIEkyTlNGIGNoYXJ0ZXIuDQoNClRoYW5rcywNCkxpbmRhDQpGcm9tOiBGbGVtbWluZyBB bmRyZWFzZW4gW21haWx0bzpmYW5kcmVhc0BjaXNjby5jb21dDQpTZW50OiBXZWRuZXNkYXksIEF1 Z3VzdCAyNiwgMjAxNSA5OjAxIFBNDQpUbzogTGluZGEgRHVuYmFyOyBLYXRobGVlbiBNb3JpYXJ0 eTsgSm9zZXBoIFNhbG93ZXkNCkNjOiBpMm5zZkBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtJMm5z Zl0gQ29uc2Vuc3VzIGNhbGwgb24gSTJOU0YgQ2hhcnRlcg0KDQoNCk9uIDgvMjYvMTUgNzozMSBQ TSwgTGluZGEgRHVuYmFyIHdyb3RlOg0KRmxlbW1pbmcsDQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2gg Zm9yIHRoZSBkZXRhaWxlZCBjb21tZW50cy4gVGhhbmsgeW91IGZvciBjYXRjaGluZyB0aG9zZSB0 eXBvcyAoY29ycmVjdGVkIG9uIHRoZSBJMk5TRiB3aWtpIG5vdykuIFdlIHJlYWxseSBuZWVkIHRo ZSBmcmVzaCBzZXQgb2YgZXllcyB0byBsb29rIGF0IGl0Lg0KDQpZb3Ugc3RhdGVkOg0KLSBUaGUg dGhpcmQgcGFyYWdyYXBoIHNheXMgdGhhdCAiVGhlIE5TRnMgY2FuIGJlIG1vbml0b3JlZCBieSBt dWx0aXBsZSBlbnRpdGllcy4uLiI7IGRvZXMgdGhpcyBpbXBseSBhIDE6TiAoZGlyZWN0KSBtb25p dG9yaW5nIHJlbGF0aW9uc2hpcCA/DQpJZiBzbywgdGhhdCBzZWVtcyB0byBnZXQgdG8gYSBkZXNp Z24gZGVjaXNpb24gdGhhdCBtYXkgYmUgcHJlbWF0dXJlLg0KDQpbTGluZGFdIFRoZSBpbnRlbnQg aXMgdG8gZGVzY3JpYmUgYSBzY2VuYXJpbyB0aGF0IGEgTlNGIG1heSBzZW5kIGRpZmZlcmVudCBv dXRwdXRzIHRvIGRpZmZlcmVudCBlbnRpdGllcy4gRm9yIGV4YW1wbGUsIHNvbWUgc3RhdGlzdGlj cyByZXBvcnQgdG8g4oCcQW5hbHl0aWNzIHN5c3RlbeKAnSwg4oCccnVsZSBxdWVyeeKAnSB0byBt YW5hZ2VtZW50IGVudGl0eS4gQ2FuIHlvdSBzdWdnZXN0IGEgYmV0dGVyIHdvcmRpbmcgZm9yIHRo aXM/DQoNCkkgc2VlLiBJJ20gbm90IHN1cmUgSSB3b3VsZCBnZXQgaW50byB0aGF0IGxldmVsIG9m IGRldGFpbCBpbiB0aGUgY2hhcnRlciwgYnV0IHNpbmNlIHlvdSBpbnRyb2R1Y2UgdGhlIG5vdGlv biBvZiAiZmVhdHVyZXMgYW5kIGZ1bmN0aW9ucyIsIHlvdSBjb3VsZCBmb3IgZXhhbXBsZSBzYXkN Cg0KIlRoZSBOU0ZzIG1heSBjb250YWluIGEgbXVsdGl0dWRlIG9mIGZlYXR1cmVzIGFuZCBmdW5j dGlvbnMsIGVhY2ggb2Ygd2hpY2ggY2FuIGJlIG1vbml0b3JlZCBieSBhIGRpZmZlcmVudCBlbnRp dHkiDQoNCm9yIHNvbWV0aGluZyBsaWtlIHRoYXQuDQoNCg0KDQoNCk90aGVyIFJlcGxpZXMgYXJl IGluc2VydGVkIGJlbG93Og0KDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206 IEZsZW1taW5nIEFuZHJlYXNlbiBbbWFpbHRvOmZhbmRyZWFzQGNpc2NvLmNvbV0NClNlbnQ6IFdl ZG5lc2RheSwgQXVndXN0IDI2LCAyMDE1IDU6NDYgUE0NClRvOiBMaW5kYSBEdW5iYXI7IEthdGhs ZWVuIE1vcmlhcnR5OyBKb3NlcGggU2Fsb3dleQ0KQ2M6IGkybnNmQGlldGYub3JnPG1haWx0bzpp Mm5zZkBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbSTJuc2ZdIENvbnNlbnN1cyBjYWxsIG9uIEky TlNGIENoYXJ0ZXINCg0KQXBvbG9naWVzIGZvciBqb2luaW5nIHRoZSBkaXNjdXNzaW9uIGxhdGUg LSBqdXN0IGdvdCBiYWNrIGZyb20gUFRPLiBJbiBhbnkgY2FzZSwgcGxlYXNlIGZpbmQgc29tZSBh ZGRpdGlvbmFsIGNvbW1lbnRzIG9uIHRoZSBwcm9wb3NlZCBjaGFydGVyIGJlbG93IChzb21lIG1v cmUgc3Vic3RhbnRpYWwgdGhhbiBvdGhlcnMpOg0KDQotIFRoZSBmaXJzdCBwYXJhZ3JhcGggc3Rh cnRzIG91dCBieSBkZWZpbmluZyB3aGF0IGFuIE5TRiBpcywgYW5kIHdlIGNhbiBhcmd1ZSBhYm91 dCBzb21lIG9mIHRoZSBwb2ludHMgaW4gdGhlcmUgZm9yIHZhcmlvdXMgc2VjdXJpdHkgZnVuY3Rp b25zIChlLmcuIEkgbWF5IHdhbnQgdG8gZGV0ZWN0IG5vcm1hbCBuZXR3b3JrIGJlaGF2aW9yIHRv IGVzdGFibGlzaCBhIGJhc2VsaW5lLCB3aGljaCBkb2VzIG5vdCBzZWVtIHRvIGJlIGNvdmVyZWQg YnkgdGhlIGN1cnJlbnQgZGVmaW5pdGlvbikuDQpbTGluZGFdIE92ZXIgdGhlIGNvdXJzZSBvZiBJ Mk5TRiAoYWJvdXQgYSB5ZWFyKSwgd2UgaGF2ZSBnb25lIHRocm91Z2ggYSBsb25nIGRlYmF0ZSBv biB3aGF0IE5TRnMgc2hvdWxkIGJlIGNvbnNpZGVyZWQgYnkgSUVURiBJMk5TRi4gQXMgdGhlIHJl c3VsdCBvZiB0aGUgbG9uZyBkZWJhdGUsIHdlIHVzZSB0aGUgZGVmaW5pdGlvbiB0byBjbGFzc2lm eSBhIHNldCBvZiBmdW5jdGlvbnMgdG8gYmUgY29uc2lkZXJlZCBmb3IgSUVURiBJMk5TRiAodGhl biBmdXJ0aGVyIG5hcnJvd2luZyBkb3duIHRvIEZsb3ctYmFzZWQgTlNGcykuDQpUaGUgZnVuY3Rp b24geW91IGRlc2NyaWJlZCwgaS5lLiBkZXRlY3Rpbmcgbm9ybWFsIG5ldHdvcmsgYmVoYXZpb3Ig dG8gZXN0YWJsaXNoIGEgYmFzZWxpbmUgaXMgbm90IGluIHRoZSBzY29wZSBvZiBJMk5TRiwgZXZl biB0aG91Z2ggdGhpcyBmdW5jdGlvbiBjYW4gYWxzbyBiZSAicHJvdmlkZWQgYW5kIGNvbnN1bWVk IGluIGluY3JlYXNpbmdseSBkaXZlcnNlIGVudmlyb25tZW50cyIuDQoNCk9rIC0gdGhlIHBhcnQg YWJvdXQgImRldGVjdCB1bndhbnRlZCBuZXR3b3JrIGFjdGl2aXR5IiBpcyBmYWlybHkgYnJvYWQg dGhvdWdoLCBhbmQgSSdtIG5vdCBzdXJlIGhvdyB5b3UgZGV0ZWN0IHVud2FudGVkIGFjdGl2aXR5 IHdpdGhvdXQgbG9va2luZyBhdCBhbGwgYWN0aXZpdHkgKHdoaWNoIGlzIHdoYXQgdHJpZ2dlcmVk IG15IG9yaWdpbmFsIHF1ZXN0aW9uKS4NCg0KDQoNCkkgZG9uJ3QgdGhpbmsgdGhhdCB3aWxsIGJl IGEgcHJvZHVjdGl2ZSBkaXNjdXNzaW9uIHRob3VnaCwgbm9yIGlzIGl0IG5lY2Vzc2FyeS4gSW5z dGVhZCwgSSdkIHN1Z2dlc3Qgd2UgYXJlIG5vdCBvdmVybHkgcHJlc2NyaXB0aXZlLCBidXQgcmF0 aGVyIHZpZXcgdGhlc2UgYXMgcG9zc2libGUgTlNGIGZlYXR1cmVzLCBhbmQgc3VwcGxlbWVudCB0 aGVtIHdpdGggc29tZSBhY3R1YWwgcHJvZHVjdCBleGFtcGxlcyAoZS5nLiBGVywgTkdGVywgSVBT LCBldGMuKS4gU2ltaWxhcmx5LCBzaW5jZSB3ZSBsaW1pdCBvdXIgc2NvcGUgdG8gImZsb3ctYmFz ZWQgTlNGcyIsIHdlIG1heSB3YW50IHRvIG1ha2UgdGhhdCBjbGVhciBoZXJlLiBBbiBleGFtcGxl IG9mIGEgc2VjdXJpdHkgZnVuY3Rpb24gdGhhdCB3b3VsZCAqbm90KiBiZSBpbiBzY29wZSBtYXkg YmUgaGVscGZ1bCB0b28uDQoNCltMaW5kYV0gQWxsIHRoZSBOU0ZzIGluIEkyTlNGIGNvbnRleHQg YXJlIOKAnGZlYXR1cmVz4oCdLCB3aG9zZSBmb3JtIGZhY3RvciBjYW4gYmUgcHJvdmlkZWQgcGh5 c2ljYWwgYm94IG9yIHZpcnR1YWxpemVkIGZvcm1hdC4gU29tZSBmb3JtIGZhY3RvcnMsIGkuZS4g ZGV2aWNlcyBvciBWTSwgY2FuIHByb3ZpZGUgbXVsdGlwbGUg4oCcZnVuY3Rpb25z4oCdLiBEbyB5 b3UgdGhpbmsgdGhlIHNlbnRlbmNlcyBpbiB0aGUgdGhpcmQgcGFyYWdyYXBoIGlzIGdvb2QgZW5v dWdoIHRvIGRlc2NyaWJlIHdoYXQgeW91IHdhbnQ/DQoNCuKAnEkyTlNGIHdpbGwgZm9jdXMgb24g Zmxvdy1iYXNlZCBOU0ZzIHRoYXQgcHJvdmlkZSB0cmVhdG1lbnQgdG8gcGFja2V0cy9mbG93cywg c3VjaCBhcyBJbnRydXNpb24gUHJvdGVjdGlvbi9EZXRlY3Rpb24gU3lzdGVtIChJUFMvSURTKSwg V2ViIGZpbHRlcmluZywgZmxvdyBmaWx0ZXJpbmcsIGRlZXAgcGFja2V0IGluc3BlY3Rpb24sIG9y IHBhdHRlcm4gbWF0Y2hpbmcgYW5kIHJlbWVkaWF0aW9uLuKAnQ0KDQoNClRoZSBleGFtcGxlcyBo ZXJlIGFyZSBjbGVhcjsgSSdtIGxlc3MgY2xlYXIgb24gd2hhdCBlbHNlIG1pZ2h0IGJlIGluIHNj b3BlLiBGb3IgZXhhbXBsZSwgd291bGQgYSBERG9TIGRldGVjdGlvbiBhbmQgbWl0aWdhdGlvbiBz eXN0ZW0gYmUgaW4gc2NvcGUgKGtlZXBpbmcgaW4gbWluZCBpdCBtYXkgdXNlIGEgY29tYmluYXRp b24gb2YgcGFja2V0IGluc3BlY3Rpb24gYW5kIHRlbGVtZXRyeS1iYXNlZCBkZXRlY3Rpb24gYW5k IG1pdGlnYXRpb24gYW5kIHRoYXQgZXN0YWJsaXNoaW5nIGEgIm5vcm1hbCIgYmFzZWxpbmUgaXMg b2Z0ZW4gcGFydCBvZiB0aGUgb3BlcmF0aW9uKSA/DQoNCg0KDQoNCi0gVGhlIGNoYXJ0ZXIgc2Vl bXMgdG8gb3BlcmF0ZSB3aXRoIHRoZSBub3Rpb24gb2YgYSAic2VjdXJpdHkgY29udHJvbGxlciIg dGhhdCBpbnRlcmFjdHMgd2l0aCB0aGUgIk5TRiIuIElmIEkgdW5kZXJzdGFuZCBjb3JyZWN0bHks IHRoZSBzZWN1cml0eSBjb250cm9sbGVyIGltcGxlbWVudHMgdGhlICJTZXJ2aWNlIExheWVyIiBh bmQgdGhlIE5TRiBpbXBsZW1lbnRzIHRoZSAiQ2FwYWJpbGl0eSBMYXllciIuIEZ1cnRoZXJtb3Jl LCB3ZSBoYXZlICJjbGllbnRzIiB0aGF0IGludGVyYWN0IHdpdGggdGhlIHNlY3VyaXR5IGNvbnRy b2xsZXIgdG8gaW1wbGVtZW50IHBvbGljaWVzIChieSBsZXZlcmFnaW5nIHRoZSBzZXJ2aWNlIGxh eWVyKS4gSWYgc28sIGl0IHdvdWxkIGJlIGdvb2QgdG8gY2xhcmlmeSB0aGlzIHRheG9ub215IGVh cmxpZXIgaW4gdGhlIGNoYXJ0ZXIuIElmIG5vdCwgdGhlbiBJIHByb2JhYmx5IG5lZWQgc29tZSBj bGFyaWZpY2F0aW9ucyBpbiB0aGUgdGV4dC4NCg0KW0xpbmRhXSDigJxTZWN1cml0eSBjb250cm9s bGVy4oCdIGlzIGEgY29uY2VwdHVhbCBlbnRpdHksIG1lYW5pbmcgYW4gZW50aXR5IHRvIHNlbmQg aW1wbGVtZW50YWJsZSBydWxlcyAoY2FwYWJpbGl0eSBsYXllcikgdG8gdGhlIE5TRnMuIFRoZXJl IGNvdWxkIGJlIG11bHRpcGxlIG9mIHRoZW0sIGVhY2ggcmVzcG9uc2libGUgZm9yIG9uZSB0eXBl IG9mIE5TRiAoaS5lLiBtYW5hZ2luZyB0aGUgaW5zdGFuY2VzIG9mIHRoZSBOU0ZzKS4NCkkyTlNG IGluY2x1ZGVzIOKAnFNpbXBsZSBTZXJ2aWNlIExheWVy4oCdIHRoYXQgbW9kZWxzIGNsb3NlbHkg dG8gdGhlIOKAnENhcGFiaWxpdHkgTGF5ZXLigJ0uIEZvciBleGFtcGxlOiBjbGllbnQgY2FuIHNw ZWNpZnkgdGhlIHJ1bGVzIHdpdGhvdXQgc3BlY2lmeSB3aGljaCBpbnN0YW5jZXMgb2YgdGhlIE5T Ri4gVGhlIOKAnENvbnRyb2xsZXLigJ0gbWFuYWdlIHRoZSBpbnN0YW5jZXMsIGFzIGRlc2NyaWJl ZCBieSBUaGUgZmlndXJlIGluIEkyTlNGIEZyYW1ld29yayBkb2N1bWVudDoNCg0KKyAtIC0gLSAt IC0gLSAtIC0gLSAtIC0gLSAtIC0gLSArICArIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAt ICsNCnwgIE5TRi1BICArLS0tLS0tLS0tLS0tLS0rICAgICAgfCAgfCAgTlNGLUIgICstLS0tLS0t LS0tLS0tLSsgICAgICB8DQp8ICAgICAgICAgfCAgIENvbnRyb2xsZXJ8ICAgICAgfCAgfCAgICAg ICAgIHwgICBDb250cm9sbGVyfCAgICAgIHwNCnwgICAgICAgICArLS0tLS0tLS0tLS0tLS0rICAg ICAgfCAgfCAgICAgICAgICstLS0tLS0tLS0tLS0tLSsgICAgICB8DQp8ICsgLSAtIC0gLSAtIC0g LSAtIC0gLSAtIC0gLSArIHwgIHwgKyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtICsgfA0KfCB8 Ky0tLS0tLS0tLSsgICAgICstLS0tLS0tLS0rfCB8ICB8IHwrLS0tLS0tLS0tKyAgICAgKy0tLS0t LS0tLSt8IHwNCnwgfHwgTlNGLUEjMSB8IC4uLiB8ICBOU0YtQSNufHwgfCAgfCB8fCAgTlNGLUIj MXwgLi4uIHwgIE5TRi1CI218fCB8DQp8IHwrLS0tLS0tLS0tKyAgICAgKy0tLS0tLS0tLSt8IHwg IHwgfCstLS0tLS0tLS0rICAgICArLS0tLS0tLS0tK3wgfA0KfCB8ICAgICAgICAgTlNGLUEgY2x1 c3RlciAgICAgfCB8ICB8IHwgICAgICAgICAgTlNGLUIgY2x1c3RlciAgICB8IHwNCnwgKyAtIC0g LSAtIC0gLSAtIC0gLSAtIC0gLSAtICsgfCAgfCArIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0g KyB8DQorIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtICsgICsgLSAtIC0gLSAtIC0gLSAt IC0gLSAtIC0gLSAtIC0gKw0KDQpPayAtIHRoaXMgYmFzaWMgZnJhbWV3b3JrIHNlZW1zIHRvIGJl IGZvdW5kYXRpb25hbCB0byB0aGUgc3RydWN0dXJlIG9mIHRoZSB3b3JrIHRoZSBncm91cCBpcyBk b2luZy4gSWYgc28sIEkgdGhpbmsgaXQgd291bGQgYmUgaGVscGZ1bCB0byBvdXRsaW5lIGl0ICh2 ZXJiYWxseSkgaW4gdGhlIGNoYXJ0ZXIuDQoNCg0KDQotIEluIHRoZSBkZWZpbml0aW9uIG9mIHRo ZSAiQ2FwYWJpbGl0eSBMYXllciIsIHRoZXJlIGlzIGEgc3RhdGVtZW50IGFib3V0ICJydWxlcy4u Lm9mIE5TRnMgaGF2ZSB0byBiZSBpbXBsZW1lbnRhYmxlIGJ5IG1vc3QgTlNGcyIuIERvIHlvdSBt ZWFuIGFsbCBOU0ZzIG9yIE5TRnMgb2YgYSBnaXZlbiB0eXBlIChJIGFzc3VtZSB3ZSBoYXZlIGRp ZmZlcmVudCB0eXBlcyBvZiBOU0ZzKSA/DQpbTGluZGFdIHllcy4NCg0KLSBQb2xpY2llcyBhcmUg bGFiZWxlZCBhcyAic2ltcGxlIiBvciAiYWJzdHJhY3Qgb3Igc29waGlzdGljYXRlZCINCndpdGhv dXQgZnVydGhlciBkZWZpbml0aW9uOyBJJ20gbm90IHN1cmUgd2hlcmUgd2UgZHJhdyB0aGF0IGxp bmUgb3IgaG93IHRvIGRvIHRoYXQgaW4gdGhlIGNoYXJ0ZXI7IG1heWJlIGNsYXJpZnlpbmcgdGhh dCBwYXJ0IG5lZWRzIHRvIGJlIGEgZGVsaXZlcmFibGUgPw0KW0xpbmRhXSDigJxzaW1wbGXigJ0g bWVhbnMgdGhhdCB0aGV5IGNhbiBiZSBkaXJlY3RseSB0cmFuc2xhdGVkIHRvIGNhcGFiaWxpdHkg bGF5ZXIgcnVsZXMgd2l0aCBzaW1wbGUgbWFwcGluZywgZS5nLiB3aXRob3V0IGV4cGxpY2l0IHN0 YXRpbmcgd2hpY2ggaW5zdGFudGlhdGlvbiwgbWF5IGhhdmUgY3VzdG9tZXIgSUQgdGhhdCBjYW4g YmUgdHJhbnNsYXRlZCB0byBzb21lIHRhZ3MgY2FycmllZCBieSBwYWNrZXRzDQoNCk9rIC0gaWYg dGhhdCdzIHRoZSBkZWZpbml0aW9uIHdlIHdhbnQgdG8gdXNlLCBjYW4gd2UgY2xhcmlmeSBpdCBp biB0aGUgY2hhcnRlciA/DQoNCg0KLSBBIG51bWJlciBvZiBkZWxpdmVyYWJsZXMgbWF5IG5vdCBi ZSBwdWJsaXNoZWQgYXMgYW4gUkZDOyB3aHkgbm90ICh0aGV5IHNlZW0gdG8gc2V0IHRoZSBzdGFn ZSBmb3Igc2V2ZXJhbCBvdGhlciBkZWxpdmVyYWJsZXMgYW5kIGhlbmNlIGFyZSByZWxldmFudCBm b3IgY29uc3VtZXJzIG9mIHRoZSBpbmZvcm1hdGlvbiBhbmQgZGF0YSBtb2RlbHMgbGF0ZXIgb24p ID8NCg0KW0xpbmRhXSBUaGUgV0cgZ3JvdXAgbWF5IGRlY2lkZSB0byBwdWJsaXNoIHRoZW0gYXMg UkZDIG9yIG5vdCBsYXRlci4gQnV0IHRoZSBjaGFydGVyIGRvZXNu4oCZdCBzcGVjaWZ5IHdoaWNo IHdheS4gVGhhdCBpcyBob3cgSUVTRyB3YW50ZWQuDQoNCk9rLg0KDQotIFRoZSBwYXJ0IGFib3V0 IEkyTlNGIHByb3ZpZGluZyBhICJkaXNjdXNzaW9uIGZvcnVtIGZvciBJbmZvcm1hdGlvbmFsIGRy YWZ0cyBvbi4uLi4uW21vcmUgY29tcGxleCBTZXJ2aWNlIExheWVyIHBvbGljaWVzXS4uLiIgaXMg Y29uZnVzaW5nIHRvIG1lLiBUaGUgd29yayBzZWVtcyB0byBiZSBwdXJzdWVkIG91dHNpZGUgdGhl IFdHLCBzbyB0aGVyZSBhcmUgbm8gZGVsaXZlcmFibGVzIGFuZCBwcmVzdW1hYmx5IG5vIGFnZW5k YSB0aW1lIHdpbGwgYmUgYWxsb2NhdGVkIGVpdGhlci4NCltMaW5kYV0gdGhpcyBpcyB0byBhZGRy ZXNzIHRoZSBpbmZvcm1hdGlvbiBkb2N1bWVudHMgdGhhdCBkZXNjcmliZSB0aGUgSTJOU0YgZGVt bywgb3BlbiBzb3VyY2Ugb3IgaW50ZXJvcGVyYWJpbGl0eSBpbml0aWF0aXZlcyB0aGF0IGFyZSBj b25kdWN0ZWQgb3V0c2lkZSB0aGUgV0cuIEUuZyBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L2RvYy9kcmFmdC14aWUtaTJuc2YtZGVtby1vdXRsaW5lLWRlc2lnbi8NCg0KT2sgLSB0aGFua3Mg Zm9yIHRoZSBwb2ludGVyLCBob3dldmVyIGZyb20gYSBXRyBwb2ludCBvZiB2aWV3LCBJJ20gbm90 IGNsZWFyIG9uIHdoYXQgaXQgbWVhbnMgdG8gaGF2ZSBhIGRpc2N1c3Npb24gZm9ydW0gYW5kIHdo YXQsIGlmIGFueXRoaW5nLCB0aGUgV0cgd2lsbCBkbyB3aXRoIGl0IChlLmcuIGRpc2N1c3Mgc3Vj aCBkcmFmdHMgYXMgcGFydCBvZiBtZWV0aW5ncywgZXRjKSA/DQoNCg0KDQoNCkl0J3MgYWxzbyBu b3QgY2xlYXIgdG8gbWUgdGhhdCB3ZSBjYW4vc2hvdWxkIHN0YXRlIHRoYXQgc3VjaCBkb2N1bWVu dHMgd291bGQgYmUgSW5mb3JtYXRpb25hbC4gV2UgbWF5IGRlY2lkZSB0aGF0IHdlIG5lZWQgc29t ZSBwcm9jZWR1cmVzIGZvciBob3cgdG8gZGVmaW5lIHN1Y2ggZG9jdW1lbnRzLCBoYXZlIGRlc2ln bmF0ZWQgZXhwZXJ0cywgYSBkaXJlY3RvcmF0ZSwgZXRjLiB0byByZXZpZXcgdGhlbSBldGMuIEkn bSBndWVzc2luZyB0aGlzIGlzIGFsbCBhIGJpdCBwcmVtYXR1cmUgdGhvdWdoLCBidXQgYWdhaW4s IHdlIG1heSB3YW50IHRvIG5vdGUgdGhhdCBhcyBhbiBpc3N1ZSBpbiB0aGUgY2hhcnRlciB0aGF0 IHRoZSBXRyBuZWVkcyB0byByZXNvbHZlIGF0IHNvbWUgcG9pbnQuDQoNCltMaW5kYV0gQWdyZWUg d2l0aCB5b3UuIEkgd2lsbCBzZWUgaG93IEFEIHdhbnRzIHRvIGFkZHJlc3MgdGhpcyBzdWdnZXN0 aW9uIC4NCk9rDQoNCg0KDQpOaXRzOg0KLSBmaXJzdCBwYXJhZ3JhcGg6DQpzL3RoZSBtaXRpZ2F0 ZS9taXRpZ2F0ZSB0aGUvDQoNCi0gc2Vjb25kIGxhc3QgcGFyYWdyYXBoOg0Kcy9SRkNzIG9mL1JG Q3Mgb3INCg0KW0xpbmRhXSBUaGFuayB5b3UgZm9yIHRoZSBjYXRjaC4gVGhleSBhcmUgY29ycmVj dGVkIG9uIHRoZSBJMk5TRiB3aWtpIG5vdy4NCg0KVGhhbmtzIGZvciB0aGUgcXVpY2sgcmVzcG9u c2UgYW5kIHVwZGF0ZXMuDQoNCi0tIEZsZW1taW5nDQoNCg0KVGhhbmtzDQoNCi0tIEZsZW1taW5n DQoNCg0KT24gOC8yNi8xNSA1OjM4IFBNLCBMaW5kYSBEdW5iYXIgd3JvdGU6DQo+IEthdGhsZWVu LA0KPg0KPiBUaGFuayB5b3UgdmVyeSBtdWNoIGZvciB0aGUgZWRpdG9yaWFsIGNoYW5nZXMuIFRo ZSBjaGFydGVyIGRlc2NyaXB0aW9uDQo+IG9uIHRoZSBJMk5TRiBXaWtpIGhhcyBiZWVuIHVwZGF0 ZWQgdG8gcmVmbGVjdCB5b3VyIHN1Z2dlc3RlZCBjaGFuZ2VzOg0KPiBodHRwczovL3NpdGVzLmdv b2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNmL2hvbWUNCj4NCj4NCj4gTGluZGENCj4NCj4NCj4g LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogSTJuc2YgW21haWx0bzppMm5zZi1i b3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgS2F0aGxlZW4NCj4gTW9yaWFydHkNCj4gU2Vu dDogV2VkbmVzZGF5LCBBdWd1c3QgMjYsIDIwMTUgMjoyOSBQTQ0KPiBUbzogSm9zZXBoIFNhbG93 ZXkNCj4gQ2M6IGkybnNmQGlldGYub3JnPG1haWx0bzppMm5zZkBpZXRmLm9yZz4NCj4gU3ViamVj dDogUmU6IFtJMm5zZl0gQ29uc2Vuc3VzIGNhbGwgb24gSTJOU0YgQ2hhcnRlcg0KPg0KPiBJIGhh dmUgYSBmZXcgZWRpdG9yaWFsIGNoYW5nZXMgaW4gdGhlIGZvbGxvd2luZyB0ZXh0IHRoYXQgZG9l cyBub3QgY2hhbmdlIHRoZSBtZWFuaW5nIG9mIHRoZSBjaGFydGVyIHRleHQ6DQo+DQo+IEEgTmV0 d29yayBTZWN1cml0eSBGdW5jdGlvbiAoTlNGKSBpcyBhIGZ1bmN0aW9uIHVzZWQgdG8gZW5zdXJl IGludGVncml0eSwgY29uZmlkZW50aWFsaXR5LCBhbmQgYXZhaWxhYmlsaXR5IG9mIG5ldHdvcmsg Y29tbXVuaWNhdGlvbnMsIHRvIGRldGVjdCB1bndhbnRlZCBuZXR3b3JrIGFjdGl2aXR5LCBhbmQg dG8gYmxvY2sgb3IgYXQgbGVhc3QgdGhlIG1pdGlnYXRlIGVmZmVjdHMgb2YgdW53YW50ZWQgYWN0 aXZpdHkuIE5TRnMgYXJlIHByb3ZpZGVkIGFuZCBjb25zdW1lZCBpbiBpbmNyZWFzaW5nbHkgZGl2 ZXJzZSBlbnZpcm9ubWVudHMuIFVzZXJzIG9mIE5TRnMgY291bGQgY29uc3VtZSBuZXR3b3JrIHNl Y3VyaXR5IHNlcnZpY2VzIGhvc3RlZCBieSBvbmUgb3IgbW9yZSBwcm92aWRlcnMsIHdoaWNoIG1h eSBiZSB0aGVpciBvd24gZW50ZXJwcmlzZSwgc2VydmljZSBwcm92aWRlcnMsIG9yIGEgY29tYmlu YXRpb24gb2YgYm90aC4gIFNpbWlsYXJseSwgc2VydmljZSBwcm92aWRlcnMgbWF5IG9mZmVyIHRo ZWlyIGN1c3RvbWVycyBuZXR3b3JrIHNlY3VyaXR5IHNlcnZpY2VzIHRoYXQgYXJlIGVuZm9yY2Vk IGJ5IG11bHRpcGxlIHNlY3VyaXR5IHByb2R1Y3RzIGFuZC9vciBmdW5jdGlvbnMgZnJvbSBkaWZm ZXJlbnQgdmVuZG9ycy4gTlNGcyBtYXkgYmUgcHJvdmlkZWQgYnkgcGh5c2ljYWwgYW5kL29yIHZp cnR1YWxpemVkIGluZnJhc3RydWN0dXJlLiBXaXRob3V0IHN0YW5kYXJkIGludGVyZmFjZXMgdG8g Y29udHJvbCBhbmQgbW9uaXRvciB0aGUgYmVoYXZpb3Igb2YgTlNGcywgaXQgaGFzIGJlY29tZSB2 aXJ0dWFsbHkgaW1wb3NzaWJsZSBmb3IgcHJvdmlkZXJzIG9mIHNlY3VyaXR5IHNlcnZpY2VzIHRv IGF1dG9tYXRlIHNlcnZpY2Ugb2ZmZXJpbmdzIHRoYXQgdXRpbGl6ZSBkaWZmZXJlbnQgc2VjdXJp dHkgZnVuY3Rpb25zIGZyb20gbXVsdGlwbGUgdmVuZG9ycy4NCj4NCj4gVGhlIGdvYWwgb2YgSTJO U0YgaXMgdG8gZGVmaW5lIGEgc2V0IG9mIHNvZnR3YXJlIGludGVyZmFjZXMgYW5kIGRhdGEgbW9k ZWxzIGZvciBjb250cm9sbGluZyBhbmQgbW9uaXRvcmluZyBhc3BlY3RzIG9mIHBoeXNpY2FsIGFu ZCB2aXJ0dWFsIE5TRnMuIElmIHRoZSB3b3JraW5nIGdyb3VwIGZpbmRzIGl0IG5lY2Vzc2FyeSB0 byB3b3JrIG9uIGFuIGluZm9ybWF0aW9uIG1vZGVsIGJlZm9yZSB0aGUgZGF0YSBtb2RlbHMsIHRv IGhlbHAgcHJvdmlkZSBndWlkYW5jZSBhbmQgZGVyaXZlIHRoZSBkYXRhIG1vZGVscywgaXQgbWF5 IGRvIHNvLiBUaGUgd29ya2luZyBncm91cCB3aWxsIGRlY2lkZSBsYXRlciB3aGV0aGVyIHRoZSBp bmZvcm1hdGlvbiBtb2RlbCBuZWVkcyB0byBiZSBwdWJsaXNoZWQgYXMgYW4gUkZDLg0KPiBPdGhl ciBhc3BlY3RzIG9mIE5TRnMsIHN1Y2ggYXMgZGV2aWNlIG9yIG5ldHdvcmsgcHJvdmlzaW9uaW5n IGFuZCBjb25maWd1cmF0aW9uLCBhcmUgb3V0IG9mIHNjb3BlLg0KPg0KPiBDb250cm9sbGluZyBh bmQgbW9uaXRvcmluZyBhc3BlY3RzIG9mIE5TRnMgaW5jbHVkZSB0aGUgYWJpbGl0eSB0byBzcGVj aWZ5IHJ1bGVzIChieSBhIHNpbmdsZSBjb250cm9sbGVyIGF0IHRoZSBmaXJzdCBwaGFzZSksIHF1 ZXJ5LCBhbmQgbW9uaXRvciBOU0ZzIGJ5IG9uZSBvciBtb3JlIG1hbmFnZW1lbnQgZW50aXRpZXMu ICBUaGUgaW5pdGlhbCBwaGFzZSBvZiBJMk5TRiB3aWxsIG9ubHkgY29uc2lkZXIgb25lIHNpbmds ZSBjb250cm9sbGVyIHRoYXQgY2FuIHNwZWNpZnkgb3IgY2hhbmdlIHJ1bGVzIHRvIE5TRnMgYmVj YXVzZSBtdWx0aS1oZWFkZWQgY29udHJvbCByZXF1aXJlcyB0aGUgY29vcmRpbmF0aW9uIHRvIGF2 b2lkIHBvdGVudGlhbCBjb25mbGljdCBvZiBydWxlcy4gVGhlIE5TRnMgY2FuIGJlIG1vbml0b3Jl ZCBieSBtdWx0aXBsZSBlbnRpdGllcywgYnV0IHRoZSBkYXRhYmFzZSB1cGRhdGUgYW5kIHN5bmNo cm9uaXphdGlvbiBhbW9uZyBtdWx0aXBsZSBtYW5hZ2VtZW50IGVudGl0aWVzIGFyZSBvdXQgb2Yg c2NvcGUgZm9yIEkyTlNGLiBBcyB0aGVyZSBhcmUgbWFueSBkaWZmZXJlbnQgc2VjdXJpdHkgdmVu ZG9ycyBzdXBwb3J0aW5nIGRpZmZlcmVudCBmZWF0dXJlcyBhbmQgZnVuY3Rpb25zIG9uIHRoZWly IGRldmljZXMsIEkyTlNGIHdpbGwgZm9jdXMgb24gZmxvdy1iYXNlZCBOU0ZzIHRoYXQgcHJvdmlk ZSB0cmVhdG1lbnQgdG8gcGFja2V0cy9mbG93cywgc3VjaCBhcyBJbnRydXNpb24gUHJvdGVjdGlv bi9EZXRlY3Rpb24gU3lzdGVtIChJUFMvSURTKSwgV2ViIGZpbHRlcmluZywgZmxvdyBmaWx0ZXJp bmcsIGRlZXAgcGFja2V0IGluc3BlY3Rpb24sIG9yIHBhdHRlcm4gbWF0Y2hpbmcgYW5kIHJlbWVk aWF0aW9uLg0KPg0KPiBJMk5TRiB3aWxsIHNwZWNpZnkgaW50ZXJmYWNlcyBhdCB0d28gZnVuY3Rp b25hbCBsZXZlbHMgZm9yIHRoZSBjb250cm9sIGFuZCBtb25pdG9yaW5nIG9mIG5ldHdvcmsgc2Vj dXJpdHkgZnVuY3Rpb25zOg0KPg0KPiBUaGUgSTJOU0YgQ2FwYWJpbGl0eSBMYXllciBzcGVjaWZp ZXMgaG93IHRvIGNvbnRyb2wgYW5kIG1vbml0b3IgTlNGcw0KPiBhdCBhIGZ1bmN0aW9uYWwgaW1w bGVtZW50YXRpb24gbGV2ZWwuICBUaGUgdGVybSDigJxGdW5jdGlvbmFsDQo+IEltcGxlbWVudGF0 aW9u4oCdIGlzIHVzZWQgdG8gZW1waGFzaXplIHRoYXQgdGhlIHJ1bGVzIChmb3IgY29udHJvbCBh bmQNCj4gbW9uaXRvcikgb2YgTlNGcyBoYXZlIHRvIGJlIGltcGxlbWVudGFibGUgYnkgbW9zdCBO U0ZzLiBJMk5TRiB3aWxsIHN0YW5kYXJkaXplIGEgc2V0IG9mIGludGVyZmFjZXMgYnkgd2hpY2gg YSBzZWN1cml0eSBjb250cm9sbGVyIGNhbiBpbnZva2UsIG9wZXJhdGUsIGFuZCBtb25pdG9yIE5T RnMuDQo+DQo+IFRoZSBJMk5TRiBTZXJ2aWNlIExheWVyIGRlZmluZXMgaG93IGNsaWVudHPigJkg c2VjdXJpdHkgcG9saWNpZXMgbWF5IGJlIGV4cHJlc3NlZCB0byBhIHNlY3VyaXR5IGNvbnRyb2xs ZXIuIFRoZSBjb250cm9sbGVyIGltcGxlbWVudHMgaXRzIHBvbGljaWVzIGFjY29yZGluZyB0byB0 aGUgdmFyaW91cyBjYXBhYmlsaXRpZXMgcHJvdmlkZWQgYnkgdGhlIEkyTlNGIGNhcGFiaWxpdHkg TGF5ZXIuICBUaGUgSTJOU0YgU2VydmljZSBMYXllciBhbHNvIGFsbG93cyB0aGUgY2xpZW50IHRv IG1vbml0b3IgdGhlIGNsaWVudCBzcGVjaWZpYyBwb2xpY2llcy4NCj4NCj4gU2luY2UgdGhlcmUg Y291bGQgYmUgbWFueSBkZXB0aHMgb3IgdHlwZXMgb2YgU2VydmljZSBMYXllciBwb2xpY2llcywg dGhlIGZvbGxvd2luZyBidWxsZXRzIGZ1cnRoZXIgY2xhcmlmeSB0aGUgc2NvcGUgb2YgSTJOU0Y6 DQo+ICAgICAgbyBPbmx5IHRoZSBTaW1wbGUgU2VydmljZSBMYXllciBwb2xpY2llcyB0aGF0IGFy ZSBtb2RlbGVkIGFzIGNsb3NlbHkgYXMgcG9zc2libGUgb24gdGhlIENhcGFiaWxpdHkgTGF5ZXIg YXJlIHdpdGhpbiB0aGUgc2NvcGUuDQo+IFN1Y2ggYSBTaW1wbGUgU2VydmljZSBMYXllciB3aWxs IGVuYWJsZSBhIHNlY3VyaXR5IGNvbnRyb2xsZXIgdG8gaGFuZGxlIGlzc3VlcyBsaWtlIG11bHRp LXRlbmFuY3kgYW5kIHRoZSBjaG9pY2UgYmV0d2VlbiBhdmFpbGFibGUgTlNGcyBmb3IgYSBnaXZl biBwb2xpY3kuDQo+ICAgICAgbyBJMk5TRiB3aWxsIG5vdCBzcGVjaWZ5IGFic3RyYWN0IG9yIHNv cGhpc3RpY2F0ZWQgcG9saWNpZXMgZnJvbSBjbGllbnRzLiBFeHByZXNzaW5nIHBvbGljaWVzIGlu IHdheXMgb3RoZXIgdGhhbiB0aGUgbW9kZWwgdXNlZCBieSB0aGUgQ2FwYWJpbGl0eSBMYXllciBp cyBvdXQgb2Ygc2NvcGUuDQo+ICAgICAgbyBUaGUgdHJhbnNsYXRpb24gbWVjaGFuaXNtL21ldGhv ZHMgZnJvbSBTZXJ2aWNlIExheWVyIHBvbGljaWVzIHRvIENhcGFiaWxpdHkgbGF5ZXIgY29tbWVu dHMgYXJlIG91dCBvZiBzY29wZSBmb3IgSTJOU0YuDQo+IEhvd2V2ZXIsIEkyTlNGIHdpbGwgcHJv dmlkZSBhIGRpc2N1c3Npb24gZm9ydW0gZm9yIEluZm9ybWF0aW9uYWwgZHJhZnRzIG9uIGRhdGEg bW9kZWxzLCBBUElzLCBldGMuIHRoYXQgZGVtb25zdHJhdGUgaG93IG1vcmUgY29tcGxleCBTZXJ2 aWNlIExheWVyIHBvbGljaWVzIGFuZCBmb3JtYXRzIG1heSBiZSB0cmFuc2xhdGVkIHRvIENhcGFi aWxpdHkgTGF5ZXIgZnVuY3Rpb25zLiAgU3VjaCBkb2N1bWVudHMgd291bGQgYmUgcHVyc3VlZCBv dXRzaWRlIHRoZSBXRy4NCj4NCj4gU3RhbmRhcmQgaW50ZXJmYWNlcyBmb3IgbW9uaXRvcmluZyBh bmQgY29udHJvbGxpbmcgdGhlIGJlaGF2aW9yIG9mIE5TRnMgYXJlIGVzc2VudGlhbCBidWlsZGlu ZyBibG9ja3MgZm9yIHByb3ZpZGVycyBvZiBzZWN1cml0eSBzZXJ2aWNlIHRvIGF1dG9tYXRlIHRo ZSB1c2Ugb2YgZGlmZmVyZW50IE5TRnMgZnJvbSBtdWx0aXBsZSB2ZW5kb3JzLiBUaGlzIHdvcmsg d2lsbCBsZXZlcmFnZSB0aGUgZXhpc3RpbmcgcHJvdG9jb2xzIGFuZCBkYXRhIG1vZGVscyBkZWZp bmVkIGJ5IHRoZSBJMlJTLCBORVRDT05GLCBhbmQgTkVUTU9EIHdvcmtpbmcgZ3JvdXBzLiBJZiBl eHRlbnNpb25zIHRvIHRoZXNlIHByb3RvY29scyBvciBkYXRhIG1vZGVscyBhcmUgbmVlZGVkLCBy ZXF1aXJlbWVudHMgd2lsbCBiZSBkZXZlbG9wZWQgYnkgdGhpcyBXRywgYW5kIHRoZSBleHRlbnNp b25zIHdpbGwgYmUgZGV2ZWxvcGVkIGluIGNvb3BlcmF0aW9uIHdpdGggdGhlIFdHcyByZXNwb25z aWJsZSBmb3IgdGhlIHByb3RvY29scy4NCj4NCj4gVGhlIEkyTlNGIFdH4oCZcyBkZWxpdmVyYWJs ZXMgaW5jbHVkZToNCj4NCj4gICAgICBvIEEgc2luZ2xlIGRvY3VtZW50IGNvdmVyaW5nIHVzZSBj YXNlcywgcHJvYmxlbSBzdGF0ZW1lbnQsIGFuZCBnYXAgYW5hbHlzaXMgZG9jdW1lbnQuIFRoaXMg ZG9jdW1lbnQgd2lsbCBpbml0aWFsbHkgYmUgcHJvZHVjZWQgZm9yIHJlZmVyZW5jZSBhcyBhIGxp dmluZyBsaXN0IHRvIHRyYWNrIGFuZCByZWNvcmQgZGlzY3Vzc2lvbnM6IHRoZSBXRyBtYXkgZGVj aWRlIHRvIG5vdCBwdWJsaXNoIHRoaXMgZG9jdW1lbnQgYXMgYW4gUkZDLg0KPiAgICAgIG8gQSBm cmFtZXdvcmsgZG9jdW1lbnQsIHByZXNlbnRpbmcgYW4gb3ZlcnZpZXcgb2YgdGhlIHVzZSBvZiBO U0ZzIGFuZCB0aGUgcHVycG9zZSBvZiB0aGUgbW9kZWxzIGRldmVsb3BlZCBieSB0aGUgV0cuIFRo aXMgZG9jdW1lbnQgd2lsbCBhbHNvIGJlIGEgcmVmZXJlbmNlIHRleHQgdG8gZ3VpZGUgdGhlIG1h aW4gd29yayBhbmQgdGhlIFdHIG1heSBkZWNpZGUgdG8gbm90IHB1Ymxpc2ggdGhpcyBkb2N1bWVu dCBhcyBhbiBSRkMuDQo+ICAgICAgbyBJZiB0aGUgd29ya2luZyBncm91cCBjb25zaWRlcnMgaXQg bmVjZXNzYXJ5LCBhIHNpbmdsZSwgdW5pZmllZCwgSW5mb3JtYXRpb24gTW9kZWwgdG8gZGVzY3Jp YmUgdGhlIGNvbnRyb2wgYW5kIG1vbml0b3Jpbmcgb2YgZmxvdy1iYXNlZCBOU0ZzLg0KPiAgICAg IG8gWUFORyBkYXRhIG1vZGVscyBmb3IgdGhlIGNvbnRyb2wgYW5kIG1vbml0b3Jpbmcgb2YgTlNG cy4NCj4gICAgICBvIFJlcXVlc3RzIHRvIHRoZSBJQU5BIGZvciB0aGUgY3JlYXRpb24gb2YgYSBy ZWdpc3RyeSB0aGF0IGVuYWJsZXMgdGhlIGNoYXJhY3RlcmlzdGljcyBhbmQgYmVoYXZpb3Igb2Yg TlNGcyB0byBiZSBzcGVjaWZpZWQgdXNpbmcgYSB2ZW5kb3ItbmV1dHJhbCB2b2NhYnVsYXJ5IHdp dGhvdXQgcmVxdWlyaW5nIHRoZSBOU0ZzIHRoZW1zZWx2ZXMgdG8gYmUgc3RhbmRhcmRpemVkLiBU aGUgcmVnaXN0cnkgZW5hYmxlcyB2YXJpb3VzIG1lY2hhbmlzbXMsIGluY2x1ZGluZyBwb2xpY3kg cnVsZXMsIHRvIGJlIHVzZWQgdG8gbWF0Y2ggbW9uaXRvciBhbmQgY29udHJvbCBmdW5jdGlvbnMg dG8gdGhlIG5lZWRzIG9mIGFuIGFwcGxpY2F0aW9uIGFuZC9vciBlbnZpcm9ubWVudC4NCj4gQW4g ZXhhbWluYXRpb24gb2YgZXhpc3Rpbmcgc2VjdXJlIGNvbW11bmljYXRpb24gbWVjaGFuaXNtcyB0 byBpZGVudGlmeSB0aGUgYXBwcm9wcmlhdGUgb25lcyBmb3IgY2FycnlpbmcgdGhlIGNvbnRyb2xs aW5nIGFuZCBtb25pdG9yaW5nIGluZm9ybWF0aW9uIGJldHdlZW4gdGhlIE5TRnMgYW5kIHRoZWly IG1hbmFnZW1lbnQgZW50aXRpZXMuIFRoaXMgZG9jdW1lbnQgbWF5IGFsc28gYmUgcHJvZHVjZWQg YXMgYSB3b3JraW5nIGRvY3VtZW50IHRoYXQgaXMgbm90IHB1Ymxpc2hlZCBhcyBhbiBSRkMuDQo+ DQo+IFRoZSBXRyBtYXkgYWRkaXRpb25hbGx5IGNob29zZSB0byBkZXZlbG9wIGRvY3VtZW50cyB0 byBkZXNjcmliZSByZXF1aXJlbWVudHMgZm9yIGV4dGVuc2lvbnMgKGlmIGFueSkgdG8gZXhpc3Rp bmcgcHJvdG9jb2xzIHVzZWQgYnkgdGhlIFdHLCB0byBleHBsYWluIGhvdyB0aGUgZGF0YSBtb2Rl bHMgYXJlIHVzZWQgdG8gbW9uaXRvciBhbmQgY29udHJvbCBmbG93LWJhc2VkIE5TRnMsIGFuZCB0 byBkZXNjcmliZSBob3cgdG8gdXNlIEkyUlMgYW5kIE5FVENPTkYgdG8gY2FycnkgdGhlIGNvbnRl bnQgb2YgdGhlIGRhdGEgbW9kZWxzLiBUaGVzZSBkb2N1bWVudHMgbWF5IGJlIHB1Ymxpc2hlZCBh cyBJbmZvcm1hdGlvbmFsIFJGQ3Mgb2YgbWF5IGJlIHdvcmtpbmcgZG9jdW1lbnRzIHRoYXQgYXJl IGRpc2NhcmRlZCBvbmNlIHRoZXkgaGF2ZSB0cmlnZ2VyZWQgdGhlIG5lY2Vzc2FyeSB3b3JrLg0K Pg0KPiBUaGUgV0cgd2lsbCB3b3JrIGNsb3NlbHkgd2l0aCB0aGUgSTJSUywgTkVUQ09ORiwgYW5k IE5FVE1PRCBXR3MuIFRoZSBXRyB3aWxsIGNvbW11bmljYXRlIHdpdGggZXh0ZXJuYWwgU0RPcyBs aWtlIEVUU0kgTkZWIGFuZCB3aWxsIGVuY291cmFnZSBvcGVuIHNvdXJjZSBjb2RlIGRldmVsb3Bt ZW50IHJlbGF0ZWQgdG8gdGhlIFdHIHNjb3BlIGluIG9yZ2FuaXphdGlvbnMgbGlrZSBPTkYsIE9w ZW5TdGFjaywgT0RMLCBhbmQgT1BORlYuDQo+DQo+DQo+IE9uIFdlZCwgQXVnIDI2LCAyMDE1IGF0 IDE6NDQgQU0sIEpvc2VwaCBTYWxvd2V5IDxqb2VAc2Fsb3dleS5uZXQ8bWFpbHRvOmpvZUBzYWxv d2V5Lm5ldD4+IHdyb3RlOg0KPj4gVGhhbmtzIHRvIGV2ZXJ5b25lIHdobyBoYXMgY29udHJpYnV0 ZWQgdG93YXJkcyBkZXZlbG9waW5nIHRoZSBjaGFydGVyLg0KPj4gSSBiZWxpZXZlIHdlIGFyZSBj bG9zZSB0byBjb25zZW5zdXMgc28gdGhpcyBpcyBhIGNvbnNlbnN1cyBjYWxsIGZvciB0aGUgSTJO U0YNCj4+IGNoYXJ0ZXIuICAgVGhlIGNoYXJ0ZXIgdGV4dCBpcyBsb2NhdGVkIGF0DQo+PiBodHRw czovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNmL2hvbWUuICBQbGVhc2Ugc2Vu ZA0KPj4gY29tbWVudHMgb24gdGhpcyBjaGFydGVyIHRvIHRoZSBJMk5TRiBsaXN0IGJ5IFNlcHRl bWJlciAyLCAyMDE1Lg0KPj4NCj4+IFRoYW5rIHlvdSwNCj4+DQo+PiBKb2UNCj4+DQo+PiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gSTJuc2YgbWFp bGluZyBsaXN0DQo+PiBJMm5zZkBpZXRmLm9yZzxtYWlsdG86STJuc2ZAaWV0Zi5vcmc+DQo+PiBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQo+Pg0KPg0KPg0KDQoN Cg0KDQo= --_000_4A95BA014132FF49AE685FAB4B9F17F657D1A09Bdfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 U2ltU3VuOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5v c2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QFNpbVN1biI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30N Ci8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYu TXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQt c2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjsNCglj b2xvcjpibGFjazt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlv cml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2 aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0Fj ZXRhdGUsIGxpLk1zb0FjZXRhdGUsIGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47 DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWls eToiVGFob21hIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6YmxhY2s7fQ0KcC5lbWFpbHF1b3RlLCBs aS5lbWFpbHF1b3RlLCBkaXYuZW1haWxxdW90ZQ0KCXttc28tc3R5bGUtbmFtZTplbWFpbHF1b3Rl Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MS4wcHQ7DQoJYm9yZGVyOm5vbmU7 DQoJcGFkZGluZzowaW47DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMg TmV3IFJvbWFuIiwic2VyaWYiOw0KCWNvbG9yOmJsYWNrO30NCnNwYW4uQmFsbG9vblRleHRDaGFy DQoJe21zby1zdHlsZS1uYW1lOiJCYWxsb29uIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRleHQiOw0KCWZvbnQtZmFtaWx5OiJU YWhvbWEiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjpibGFjazt9DQpzcGFuLkVtYWlsU3R5bGUyMA0K CXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2Vj dGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEu MGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHls ZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQi IHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+ PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0 IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFk Pg0KPGJvZHkgYmdjb2xvcj0id2hpdGUiIGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0i cHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+RmxlbW1pbmcsDQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPkkgaGF2ZSB1cGRhdGVkIHRoZSBRJmFtcDtBIG9uIHRoZSBJMk5TRiBXaWtpIHRv IGNsYXJpZnkgdGhlIHF1ZXN0aW9ucyB5b3UgaGF2ZTogJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9z aXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNlMm5zZi9pMm5zZi1xLWEvaTJuc2ZxYSI+aHR0 cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNlMm5zZi9pMm5zZi1xLWEvaTJuc2Zx YTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPkhvcGUgaXQgaGVscHMuIFBsZWFzZSBsZXQgbWUga25vdyBpZiB5b3Ug aGF2ZSBtb3JlIHF1ZXN0aW9ucyBvciBzdWdnZXN0aW9ucyBmb3IgSTJOU0YgY2hhcnRlci4NCjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+VGhhbmtzLA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkxpbmRhDQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 d2luZG93dGV4dCI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOndpbmRvd3RleHQiPiBGbGVtbWluZyBBbmRyZWFzZW4gW21haWx0bzpmYW5kcmVhc0BjaXNj by5jb21dDQo8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBBdWd1c3QgMjYsIDIwMTUgOTow MSBQTTxicj4NCjxiPlRvOjwvYj4gTGluZGEgRHVuYmFyOyBLYXRobGVlbiBNb3JpYXJ0eTsgSm9z ZXBoIFNhbG93ZXk8YnI+DQo8Yj5DYzo8L2I+IGkybnNmQGlldGYub3JnPGJyPg0KPGI+U3ViamVj dDo8L2I+IFJlOiBbSTJuc2ZdIENvbnNlbnN1cyBjYWxsIG9uIEkyTlNGIENoYXJ0ZXI8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJv dHRvbToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPk9uIDgvMjYvMTUgNzozMSBQTSwgTGluZGEgRHVuYmFyIHdyb3RlOjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t Ym90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+RmxlbW1pbmcsDQo8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPlRoYW5r IHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBkZXRhaWxlZCBjb21tZW50cy4gVGhhbmsgeW91IGZvciBj YXRjaGluZyB0aG9zZSB0eXBvcyAoY29ycmVjdGVkIG9uIHRoZSBJMk5TRiB3aWtpIG5vdykuIFdl IHJlYWxseSBuZWVkIHRoZSBmcmVzaCBzZXQgb2YgZXllcyB0byBsb29rIGF0IGl0Lg0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPllvdSBzdGF0ZWQ6DQo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+LSBUaGUgdGhpcmQg cGFyYWdyYXBoIHNheXMgdGhhdCAmcXVvdDtUaGUgTlNGcyBjYW4gYmUgbW9uaXRvcmVkIGJ5IG11 bHRpcGxlIGVudGl0aWVzLi4uJnF1b3Q7OyBkb2VzIHRoaXMgaW1wbHkgYSAxOk4gKGRpcmVjdCkg bW9uaXRvcmluZyByZWxhdGlvbnNoaXAgPw0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPklmIHNvLCB0aGF0IHNlZW1zIHRvIGdldCB0byBhIGRl c2lnbiBkZWNpc2lvbiB0aGF0IG1heSBiZSBwcmVtYXR1cmUuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzAwNzBDMCI+W0xpbmRhXSBUaGUgaW50ZW50IGlzIHRv IGRlc2NyaWJlIGEgc2NlbmFyaW8gdGhhdCBhIE5TRiBtYXkgc2VuZCBkaWZmZXJlbnQgb3V0cHV0 cyB0byBkaWZmZXJlbnQgZW50aXRpZXMuIEZvciBleGFtcGxlLCBzb21lIHN0YXRpc3RpY3MgcmVw b3J0IHRvIOKAnEFuYWx5dGljcyBzeXN0ZW3igJ0sIOKAnHJ1bGUNCiBxdWVyeeKAnSB0byBtYW5h Z2VtZW50IGVudGl0eS4gQ2FuIHlvdSBzdWdnZXN0IGEgYmV0dGVyIHdvcmRpbmcgZm9yIHRoaXM/ IDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J IHNlZS4gSSdtIG5vdCBzdXJlIEkgd291bGQgZ2V0IGludG8gdGhhdCBsZXZlbCBvZiBkZXRhaWwg aW4gdGhlIGNoYXJ0ZXIsIGJ1dCBzaW5jZSB5b3UgaW50cm9kdWNlIHRoZSBub3Rpb24gb2YgJnF1 b3Q7ZmVhdHVyZXMgYW5kIGZ1bmN0aW9ucyZxdW90OywgeW91IGNvdWxkIGZvciBleGFtcGxlIHNh eQ0KPGJyPg0KPGJyPg0KJnF1b3Q7VGhlIE5TRnMgbWF5IGNvbnRhaW4gYSBtdWx0aXR1ZGUgb2Yg ZmVhdHVyZXMgYW5kIGZ1bmN0aW9ucywgZWFjaCBvZiB3aGljaCBjYW4gYmUgbW9uaXRvcmVkIGJ5 IGEgZGlmZmVyZW50IGVudGl0eSZxdW90Ow0KPGJyPg0KPGJyPg0Kb3Igc29tZXRoaW5nIGxpa2Ug dGhhdC4gPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPk90 aGVyIFJlcGxpZXMgYXJlIGluc2VydGVkIGJlbG93OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5i c3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cyI+LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS08YnI+DQpGcm9tOiBGbGVtbWluZyBBbmRyZWFz ZW4gWzxhIGhyZWY9Im1haWx0bzpmYW5kcmVhc0BjaXNjby5jb20iPm1haWx0bzpmYW5kcmVhc0Bj aXNjby5jb208L2E+XQ0KPGJyPg0KU2VudDogV2VkbmVzZGF5LCBBdWd1c3QgMjYsIDIwMTUgNTo0 NiBQTTxicj4NClRvOiBMaW5kYSBEdW5iYXI7IEthdGhsZWVuIE1vcmlhcnR5OyBKb3NlcGggU2Fs b3dleTxicj4NCkNjOiA8YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmciPmkybnNmQGlldGYu b3JnPC9hPjxicj4NClN1YmplY3Q6IFJlOiBbSTJuc2ZdIENvbnNlbnN1cyBjYWxsIG9uIEkyTlNG IENoYXJ0ZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+QXBvbG9naWVz IGZvciBqb2luaW5nIHRoZSBkaXNjdXNzaW9uIGxhdGUgLSBqdXN0IGdvdCBiYWNrIGZyb20gUFRP LiBJbiBhbnkgY2FzZSwgcGxlYXNlIGZpbmQgc29tZSBhZGRpdGlvbmFsIGNvbW1lbnRzIG9uIHRo ZSBwcm9wb3NlZCBjaGFydGVyIGJlbG93IChzb21lIG1vcmUgc3Vic3RhbnRpYWwgdGhhbiBvdGhl cnMpOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFz Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25z b2xhcyI+LSBUaGUgZmlyc3QgcGFyYWdyYXBoIHN0YXJ0cyBvdXQgYnkgZGVmaW5pbmcgd2hhdCBh biBOU0YgaXMsIGFuZCB3ZSBjYW4gYXJndWUgYWJvdXQgc29tZSBvZiB0aGUgcG9pbnRzIGluIHRo ZXJlIGZvciB2YXJpb3VzIHNlY3VyaXR5IGZ1bmN0aW9ucyAoZS5nLiBJIG1heSB3YW50IHRvIGRl dGVjdCBub3JtYWwgbmV0d29yaw0KIGJlaGF2aW9yIHRvIGVzdGFibGlzaCBhIGJhc2VsaW5lLCB3 aGljaCBkb2VzIG5vdCBzZWVtIHRvIGJlIGNvdmVyZWQgYnkgdGhlIGN1cnJlbnQgZGVmaW5pdGlv bikuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cztjb2xvcjojMDA3MEMwIj5bTGluZGFdIE92ZXIgdGhlIGNvdXJzZSBvZiBJMk5TRiAoYWJvdXQg YSB5ZWFyKSwgd2UgaGF2ZSBnb25lIHRocm91Z2ggYSBsb25nIGRlYmF0ZSBvbiB3aGF0IE5TRnMg c2hvdWxkIGJlIGNvbnNpZGVyZWQgYnkgSUVURiBJMk5TRi4gQXMgdGhlIHJlc3VsdCBvZiB0aGUg bG9uZyBkZWJhdGUsIHdlDQogdXNlIHRoZSBkZWZpbml0aW9uIHRvIGNsYXNzaWZ5IGEgc2V0IG9m IGZ1bmN0aW9ucyB0byBiZSBjb25zaWRlcmVkIGZvciBJRVRGIEkyTlNGICh0aGVuIGZ1cnRoZXIg bmFycm93aW5nIGRvd24gdG8gRmxvdy1iYXNlZCBOU0ZzKS4NCjwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzAwNzBDMCI+VGhlIGZ1 bmN0aW9uIHlvdSBkZXNjcmliZWQsIGkuZS4gZGV0ZWN0aW5nIG5vcm1hbCBuZXR3b3JrIGJlaGF2 aW9yIHRvIGVzdGFibGlzaCBhIGJhc2VsaW5lIGlzIG5vdCBpbiB0aGUgc2NvcGUgb2YgSTJOU0Ys IGV2ZW4gdGhvdWdoIHRoaXMgZnVuY3Rpb24gY2FuIGFsc28gYmUgJnF1b3Q7cHJvdmlkZWQgYW5k DQogY29uc3VtZWQgaW4gaW5jcmVhc2luZ2x5IGRpdmVyc2UgZW52aXJvbm1lbnRzJnF1b3Q7LiA8 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T2sgLSB0aGUgcGFydCBhYm91 dCAmcXVvdDtkZXRlY3QgdW53YW50ZWQgbmV0d29yayBhY3Rpdml0eSZxdW90OyBpcyBmYWlybHkg YnJvYWQgdGhvdWdoLCBhbmQgSSdtIG5vdCBzdXJlIGhvdyB5b3UgZGV0ZWN0IHVud2FudGVkIGFj dGl2aXR5IHdpdGhvdXQgbG9va2luZyBhdCBhbGwgYWN0aXZpdHkgKHdoaWNoIGlzIHdoYXQgdHJp Z2dlcmVkIG15IG9yaWdpbmFsIHF1ZXN0aW9uKS4NCjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OkNvbnNvbGFzIj5JIGRvbid0IHRoaW5rIHRoYXQgd2lsbCBiZSBhIHByb2R1Y3RpdmUg ZGlzY3Vzc2lvbiB0aG91Z2gsIG5vciBpcyBpdCBuZWNlc3NhcnkuIEluc3RlYWQsIEknZCBzdWdn ZXN0IHdlIGFyZSBub3Qgb3Zlcmx5IHByZXNjcmlwdGl2ZSwgYnV0IHJhdGhlciB2aWV3IHRoZXNl IGFzIHBvc3NpYmxlIE5TRiBmZWF0dXJlcywgYW5kDQogc3VwcGxlbWVudCB0aGVtIHdpdGggc29t ZSBhY3R1YWwgcHJvZHVjdCBleGFtcGxlcyAoZS5nLiBGVywgTkdGVywgSVBTLCBldGMuKS4gU2lt aWxhcmx5LCBzaW5jZSB3ZSBsaW1pdCBvdXIgc2NvcGUgdG8gJnF1b3Q7Zmxvdy1iYXNlZCBOU0Zz JnF1b3Q7LCB3ZSBtYXkgd2FudCB0byBtYWtlIHRoYXQgY2xlYXIgaGVyZS4gQW4gZXhhbXBsZSBv ZiBhIHNlY3VyaXR5IGZ1bmN0aW9uIHRoYXQgd291bGQgKm5vdCogYmUgaW4gc2NvcGUgbWF5IGJl IGhlbHBmdWwgdG9vLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9y OiMwMDcwQzAiPltMaW5kYV0gQWxsIHRoZSBOU0ZzIGluIEkyTlNGIGNvbnRleHQgYXJlIOKAnGZl YXR1cmVz4oCdLCB3aG9zZSBmb3JtIGZhY3RvciBjYW4gYmUgcHJvdmlkZWQgcGh5c2ljYWwgYm94 IG9yIHZpcnR1YWxpemVkIGZvcm1hdC4gU29tZSBmb3JtIGZhY3RvcnMsIGkuZS4gZGV2aWNlcyBv ciBWTSwgY2FuIHByb3ZpZGUNCiBtdWx0aXBsZSDigJxmdW5jdGlvbnPigJ0uIERvIHlvdSB0aGlu ayB0aGUgc2VudGVuY2VzIGluIHRoZSB0aGlyZCBwYXJhZ3JhcGggaXMgZ29vZCBlbm91Z2ggdG8g ZGVzY3JpYmUgd2hhdCB5b3Ugd2FudD8NCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMwMDcw QzAiPuKAnEkyTlNGIHdpbGwgZm9jdXMgb24gZmxvdy1iYXNlZCBOU0ZzIHRoYXQgcHJvdmlkZSB0 cmVhdG1lbnQgdG8gcGFja2V0cy9mbG93cywgc3VjaCBhcyBJbnRydXNpb24gUHJvdGVjdGlvbi9E ZXRlY3Rpb24gU3lzdGVtIChJUFMvSURTKSwgV2ViIGZpbHRlcmluZywgZmxvdw0KIGZpbHRlcmlu ZywgZGVlcCBwYWNrZXQgaW5zcGVjdGlvbiwgb3IgcGF0dGVybiBtYXRjaGluZyBhbmQgcmVtZWRp YXRpb24u4oCdIDwvc3Bhbj4NCjwvaT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNw Ozwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgZXhhbXBsZXMgaGVy ZSBhcmUgY2xlYXI7IEknbSBsZXNzIGNsZWFyIG9uIHdoYXQgZWxzZSBtaWdodCBiZSBpbiBzY29w ZS4gRm9yIGV4YW1wbGUsIHdvdWxkIGEgRERvUyBkZXRlY3Rpb24gYW5kIG1pdGlnYXRpb24gc3lz dGVtIGJlIGluIHNjb3BlIChrZWVwaW5nIGluIG1pbmQgaXQgbWF5IHVzZSBhIGNvbWJpbmF0aW9u IG9mIHBhY2tldCBpbnNwZWN0aW9uIGFuZCB0ZWxlbWV0cnktYmFzZWQgZGV0ZWN0aW9uDQogYW5k IG1pdGlnYXRpb24gYW5kIHRoYXQgZXN0YWJsaXNoaW5nIGEgJnF1b3Q7bm9ybWFsJnF1b3Q7IGJh c2VsaW5lIGlzIG9mdGVuIHBhcnQgb2YgdGhlIG9wZXJhdGlvbikgPw0KPGJyPg0KPGJyPg0KPGJy Pg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXMiPi0gVGhlIGNoYXJ0ZXIgc2VlbXMgdG8gb3BlcmF0ZSB3aXRoIHRoZSBub3Rp b24gb2YgYSAmcXVvdDtzZWN1cml0eSBjb250cm9sbGVyJnF1b3Q7IHRoYXQgaW50ZXJhY3RzIHdp dGggdGhlICZxdW90O05TRiZxdW90Oy4gSWYgSSB1bmRlcnN0YW5kIGNvcnJlY3RseSwgdGhlIHNl Y3VyaXR5IGNvbnRyb2xsZXIgaW1wbGVtZW50cyB0aGUgJnF1b3Q7U2VydmljZSBMYXllciZxdW90 Ow0KIGFuZCB0aGUgTlNGIGltcGxlbWVudHMgdGhlICZxdW90O0NhcGFiaWxpdHkgTGF5ZXImcXVv dDsuIEZ1cnRoZXJtb3JlLCB3ZSBoYXZlICZxdW90O2NsaWVudHMmcXVvdDsgdGhhdCBpbnRlcmFj dCB3aXRoIHRoZSBzZWN1cml0eSBjb250cm9sbGVyIHRvIGltcGxlbWVudCBwb2xpY2llcyAoYnkg bGV2ZXJhZ2luZyB0aGUgc2VydmljZSBsYXllcikuIElmIHNvLCBpdCB3b3VsZCBiZSBnb29kIHRv IGNsYXJpZnkgdGhpcyB0YXhvbm9teSBlYXJsaWVyIGluIHRoZSBjaGFydGVyLiBJZiBub3QsDQog dGhlbiBJIHByb2JhYmx5IG5lZWQgc29tZSBjbGFyaWZpY2F0aW9ucyBpbiB0aGUgdGV4dC48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj5bTGluZGFd IOKAnFNlY3VyaXR5IGNvbnRyb2xsZXLigJ0gaXMgYSBjb25jZXB0dWFsIGVudGl0eSwgbWVhbmlu ZyBhbiBlbnRpdHkgdG8gc2VuZCBpbXBsZW1lbnRhYmxlIHJ1bGVzIChjYXBhYmlsaXR5IGxheWVy KSB0byB0aGUgTlNGcy4gVGhlcmUgY291bGQgYmUgbXVsdGlwbGUgb2YgdGhlbSwgZWFjaA0KIHJl c3BvbnNpYmxlIGZvciBvbmUgdHlwZSBvZiBOU0YgKGkuZS4gbWFuYWdpbmcgdGhlIGluc3RhbmNl cyBvZiB0aGUgTlNGcykuIDwvc3Bhbj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj5JMk5TRiBpbmNsdWRlcyDigJxTaW1wbGUg U2VydmljZSBMYXllcuKAnSB0aGF0IG1vZGVscyBjbG9zZWx5IHRvIHRoZSDigJxDYXBhYmlsaXR5 IExheWVy4oCdLiBGb3IgZXhhbXBsZTogY2xpZW50IGNhbiBzcGVjaWZ5IHRoZSBydWxlcyB3aXRo b3V0IHNwZWNpZnkgd2hpY2ggaW5zdGFuY2VzIG9mIHRoZSBOU0YuDQogVGhlIOKAnENvbnRyb2xs ZXLigJ0gbWFuYWdlIHRoZSBpbnN0YW5jZXMsIGFzIGRlc2NyaWJlZCBieSBUaGUgZmlndXJlIGlu IEkyTlNGIEZyYW1ld29yayBkb2N1bWVudDo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMDcwQzAiPiZuYnNwOzwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6IzAwNzBDMCI+JiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gJiM0 MzsmbmJzcDsgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gJiM0Mzs8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOiMwMDcwQzAiPnwmbmJzcDsgTlNGLUEmbmJzcDsgJiM0MzstLS0tLS0tLS0t LS0tLSYjNDM7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsgfCZuYnNwOyBO U0YtQiZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzAwNzBDMCI+fCZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IENvbnRyb2xsZXJ8 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IENvbnRyb2xsZXJ8 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMwMDcw QzAiPnwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0 MzstLS0tLS0tLS0tLS0tLSYjNDM7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJz cDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQz Oy0tLS0tLS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6IzAwNzBDMCI+fCAmIzQzOyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAt ICYjNDM7IHwmbmJzcDsgfCAmIzQzOyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtICYjNDM7IHw8 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOiMwMDcwQzAiPnwgfCYjNDM7LS0tLS0tLS0tJiM0MzsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS0tLS0tLS0mIzQzO3wgfCZuYnNwOyB8IHwmIzQzOy0t LS0tLS0tLSYjNDM7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0tJiM0Mzt8 IHw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29s YXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMwMDcwQzAiPnwgfHwgTlNGLUEjMSB8IC4uLiB8Jm5ic3A7 IE5TRi1BI258fCB8Jm5ic3A7IHwgfHwmbmJzcDsgTlNGLUIjMXwgLi4uIHwmbmJzcDsgTlNGLUIj bXx8IHw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMwMDcwQzAiPnwgfCYjNDM7LS0tLS0tLS0tJiM0Mzsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS0tLS0tLS0mIzQzO3wgfCZuYnNwOyB8IHwm IzQzOy0tLS0tLS0tLSYjNDM7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0t JiM0Mzt8IHw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMwMDcwQzAiPnwgfCZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBOU0YtQSBjbHVzdGVyJm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IHwgfCZuYnNwOyB8IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgTlNGLUIgY2x1c3RlciZuYnNwOyZuYnNwOyZuYnNwOyB8 IHw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29s YXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMwMDcwQzAiPnwgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0g LSAtIC0gLSAmIzQzOyB8Jm5ic3A7IHwgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAm IzQzOyB8PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNv bnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMDA3MEMwIj4mIzQzOyAtIC0gLSAtIC0gLSAtIC0g LSAtIC0gLSAtIC0gLSAmIzQzOyZuYnNwOyAmIzQzOyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAt IC0gLSAmIzQzOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6IzAwNzBD MCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPk9rIC0gdGhpcyBiYXNpYyBmcmFtZXdvcmsgc2VlbXMgdG8gYmUgZm91bmRhdGlvbmFs IHRvIHRoZSBzdHJ1Y3R1cmUgb2YgdGhlIHdvcmsgdGhlIGdyb3VwIGlzIGRvaW5nLiBJZiBzbywg SSB0aGluayBpdCB3b3VsZCBiZSBoZWxwZnVsIHRvIG91dGxpbmUgaXQgKHZlcmJhbGx5KSBpbiB0 aGUgY2hhcnRlci4NCjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4t IEluIHRoZSBkZWZpbml0aW9uIG9mIHRoZSAmcXVvdDtDYXBhYmlsaXR5IExheWVyJnF1b3Q7LCB0 aGVyZSBpcyBhIHN0YXRlbWVudCBhYm91dCAmcXVvdDtydWxlcy4uLm9mIE5TRnMgaGF2ZSB0byBi ZSBpbXBsZW1lbnRhYmxlIGJ5IG1vc3QgTlNGcyZxdW90Oy4gRG8geW91IG1lYW4gYWxsIE5TRnMg b3IgTlNGcyBvZiBhIGdpdmVuIHR5cGUgKEkgYXNzdW1lDQogd2UgaGF2ZSBkaWZmZXJlbnQgdHlw ZXMgb2YgTlNGcykgPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzO2NvbG9yOiMwMDcwQzAiPltMaW5kYV0geWVzLg0KPC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTpDb25zb2xhcyI+LSBQb2xpY2llcyBhcmUgbGFiZWxlZCBhcyAmcXVvdDtz aW1wbGUmcXVvdDsgb3IgJnF1b3Q7YWJzdHJhY3Qgb3Igc29waGlzdGljYXRlZCZxdW90Ow0KPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPndpdGhv dXQgZnVydGhlciBkZWZpbml0aW9uOyBJJ20gbm90IHN1cmUgd2hlcmUgd2UgZHJhdyB0aGF0IGxp bmUgb3IgaG93IHRvIGRvIHRoYXQgaW4gdGhlIGNoYXJ0ZXI7IG1heWJlIGNsYXJpZnlpbmcgdGhh dCBwYXJ0IG5lZWRzIHRvIGJlIGEgZGVsaXZlcmFibGUgPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMDcwQzAiPltMaW5kYV0g4oCc c2ltcGxl4oCdIG1lYW5zIHRoYXQgdGhleSBjYW4gYmUgZGlyZWN0bHkgdHJhbnNsYXRlZCB0byBj YXBhYmlsaXR5IGxheWVyIHJ1bGVzIHdpdGggc2ltcGxlIG1hcHBpbmcsIGUuZy4gd2l0aG91dCBl eHBsaWNpdCBzdGF0aW5nIHdoaWNoIGluc3RhbnRpYXRpb24sIG1heSBoYXZlIGN1c3RvbWVyDQog SUQgdGhhdCBjYW4gYmUgdHJhbnNsYXRlZCB0byBzb21lIHRhZ3MgY2FycmllZCBieSBwYWNrZXRz PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFz Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9rIC0gaWYgdGhhdCdzIHRo ZSBkZWZpbml0aW9uIHdlIHdhbnQgdG8gdXNlLCBjYW4gd2UgY2xhcmlmeSBpdCBpbiB0aGUgY2hh cnRlciA/PGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPi0gQSBudW1iZXIgb2YgZGVsaXZlcmFibGVzIG1heSBub3QgYmUgcHVibGlzaGVkIGFz IGFuIFJGQzsgd2h5IG5vdCAodGhleSBzZWVtIHRvIHNldCB0aGUgc3RhZ2UgZm9yIHNldmVyYWwg b3RoZXIgZGVsaXZlcmFibGVzIGFuZCBoZW5jZSBhcmUgcmVsZXZhbnQgZm9yIGNvbnN1bWVycyBv ZiB0aGUgaW5mb3JtYXRpb24gYW5kDQogZGF0YSBtb2RlbHMgbGF0ZXIgb24pID88bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj5bTGluZGFdIFRoZSBX RyBncm91cCBtYXkgZGVjaWRlIHRvIHB1Ymxpc2ggdGhlbSBhcyBSRkMgb3Igbm90IGxhdGVyLiBC dXQgdGhlIGNoYXJ0ZXIgZG9lc27igJl0IHNwZWNpZnkgd2hpY2ggd2F5LiBUaGF0IGlzIGhvdyBJ RVNHIHdhbnRlZC4NCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Pay4g PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPi0gVGhl IHBhcnQgYWJvdXQgSTJOU0YgcHJvdmlkaW5nIGEgJnF1b3Q7ZGlzY3Vzc2lvbiBmb3J1bSBmb3Ig SW5mb3JtYXRpb25hbCBkcmFmdHMgb24uLi4uLlttb3JlIGNvbXBsZXggU2VydmljZSBMYXllciBw b2xpY2llc10uLi4mcXVvdDsgaXMgY29uZnVzaW5nIHRvIG1lLiBUaGUgd29yayBzZWVtcyB0byBi ZSBwdXJzdWVkIG91dHNpZGUNCiB0aGUgV0csIHNvIHRoZXJlIGFyZSBubyBkZWxpdmVyYWJsZXMg YW5kIHByZXN1bWFibHkgbm8gYWdlbmRhIHRpbWUgd2lsbCBiZSBhbGxvY2F0ZWQgZWl0aGVyLg0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29s b3I6IzAwNzBDMCI+W0xpbmRhXSB0aGlzIGlzIHRvIGFkZHJlc3MgdGhlIGluZm9ybWF0aW9uIGRv Y3VtZW50cyB0aGF0IGRlc2NyaWJlIHRoZSBJMk5TRiBkZW1vLCBvcGVuIHNvdXJjZSBvciBpbnRl cm9wZXJhYmlsaXR5IGluaXRpYXRpdmVzIHRoYXQgYXJlIGNvbmR1Y3RlZCBvdXRzaWRlIHRoZSBX Ry4gRS5nDQo8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC14 aWUtaTJuc2YtZGVtby1vdXRsaW5lLWRlc2lnbi8iPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvZG9jL2RyYWZ0LXhpZS1pMm5zZi1kZW1vLW91dGxpbmUtZGVzaWduLzwvYT48L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJzcDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9rIC0gdGhh bmtzIGZvciB0aGUgcG9pbnRlciwgaG93ZXZlciBmcm9tIGEgV0cgcG9pbnQgb2YgdmlldywgSSdt IG5vdCBjbGVhciBvbiB3aGF0IGl0IG1lYW5zIHRvIGhhdmUgYSBkaXNjdXNzaW9uIGZvcnVtIGFu ZCB3aGF0LCBpZiBhbnl0aGluZywgdGhlIFdHIHdpbGwgZG8gd2l0aCBpdCAoZS5nLiBkaXNjdXNz IHN1Y2ggZHJhZnRzIGFzIHBhcnQgb2YgbWVldGluZ3MsIGV0YykgPw0KPGJyPg0KPGJyPg0KPGJy Pg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXMiPkl0J3MgYWxzbyBub3QgY2xlYXIgdG8gbWUgdGhhdCB3ZSBjYW4vc2hvdWxk IHN0YXRlIHRoYXQgc3VjaCBkb2N1bWVudHMgd291bGQgYmUgSW5mb3JtYXRpb25hbC4gV2UgbWF5 IGRlY2lkZSB0aGF0IHdlIG5lZWQgc29tZSBwcm9jZWR1cmVzIGZvciBob3cgdG8gZGVmaW5lIHN1 Y2ggZG9jdW1lbnRzLCBoYXZlIGRlc2lnbmF0ZWQNCiBleHBlcnRzLCBhIGRpcmVjdG9yYXRlLCBl dGMuIHRvIHJldmlldyB0aGVtIGV0Yy4gSSdtIGd1ZXNzaW5nIHRoaXMgaXMgYWxsIGEgYml0IHBy ZW1hdHVyZSB0aG91Z2gsIGJ1dCBhZ2Fpbiwgd2UgbWF5IHdhbnQgdG8gbm90ZSB0aGF0IGFzIGFu IGlzc3VlIGluIHRoZSBjaGFydGVyIHRoYXQgdGhlIFdHIG5lZWRzIHRvIHJlc29sdmUgYXQgc29t ZSBwb2ludC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3 MEMwIj5bTGluZGFdIEFncmVlIHdpdGggeW91LiBJIHdpbGwgc2VlIGhvdyBBRCB3YW50cyB0byBh ZGRyZXNzIHRoaXMgc3VnZ2VzdGlvbiAuDQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T2s8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+ Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNv bnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Tml0czo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+LSBmaXJz dCBwYXJhZ3JhcGg6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPnMvdGhlIG1pdGlnYXRlL21pdGlnYXRlIHRoZS88bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPi0gc2Vjb25kIGxhc3QgcGFy YWdyYXBoOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzIj5zL1JGQ3Mgb2YvUkZDcyBvcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4m bmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzO2NvbG9yOiMwMDcwQzAiPltMaW5kYV0gVGhhbmsgeW91IGZvciB0aGUgY2F0Y2guIFRoZXkg YXJlIGNvcnJlY3RlZCBvbiB0aGUgSTJOU0Ygd2lraSBub3cuDQo8L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzIGZvciB0aGUgcXVpY2sgcmVzcG9uc2UgYW5kIHVw ZGF0ZXMuIDxicj4NCjxicj4NCi0tIEZsZW1taW5nIDxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj5UaGFua3M8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPi0tIEZsZW1taW5nPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZuYnNwOzxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ T24gOC8yNi8xNSA1OjM4IFBNLCBMaW5kYSBEdW5iYXIgd3JvdGU6PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgS2F0aGxlZW4sPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ Jmd0OyBUaGFuayB5b3UgdmVyeSBtdWNoIGZvciB0aGUgZWRpdG9yaWFsIGNoYW5nZXMuIFRoZSBj aGFydGVyIGRlc2NyaXB0aW9uDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBvbiB0aGUgSTJOU0YgV2lraSBoYXMgYmVlbiB1cGRhdGVk IHRvIHJlZmxlY3QgeW91ciBzdWdnZXN0ZWQgY2hhbmdlczoNCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IDxhIGhyZWY9Imh0dHBzOi8v c2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaG9tZSI+DQpodHRwczovL3NpdGVz Lmdvb2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNmL2hvbWU8L2E+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OzxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7 IExpbmRhPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29s YXMiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTpDb25zb2xhcyI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgRnJv bTogSTJuc2YgWzxhIGhyZWY9Im1haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86 aTJuc2YtYm91bmNlc0BpZXRmLm9yZzwvYT5dIE9uIEJlaGFsZiBPZiBLYXRobGVlbg0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgTW9y aWFydHk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cyI+Jmd0OyBTZW50OiBXZWRuZXNkYXksIEF1Z3VzdCAyNiwgMjAxNSAyOjI5IFBNPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgVG86IEpv c2VwaCBTYWxvd2V5PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPiZndDsgQ2M6IDxhIGhyZWY9Im1haWx0bzppMm5zZkBpZXRmLm9yZyI+DQppMm5z ZkBpZXRmLm9yZzwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTpDb25zb2xhcyI+Jmd0OyBTdWJqZWN0OiBSZTogW0kybnNmXSBDb25zZW5zdXMgY2FsbCBvbiBJ Mk5TRiBDaGFydGVyPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBJIGhhdmUgYSBmZXcgZWRpdG9yaWFsIGNoYW5nZXMgaW4g dGhlIGZvbGxvd2luZyB0ZXh0IHRoYXQgZG9lcyBub3QgY2hhbmdlIHRoZSBtZWFuaW5nIG9mIHRo ZSBjaGFydGVyIHRleHQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBBIE5ldHdvcmsgU2VjdXJpdHkgRnVuY3Rpb24gKE5T RikgaXMgYSBmdW5jdGlvbiB1c2VkIHRvIGVuc3VyZSBpbnRlZ3JpdHksIGNvbmZpZGVudGlhbGl0 eSwgYW5kIGF2YWlsYWJpbGl0eSBvZiBuZXR3b3JrIGNvbW11bmljYXRpb25zLCB0byBkZXRlY3Qg dW53YW50ZWQgbmV0d29yayBhY3Rpdml0eSwgYW5kIHRvIGJsb2NrDQogb3IgYXQgbGVhc3QgdGhl IG1pdGlnYXRlIGVmZmVjdHMgb2YgdW53YW50ZWQgYWN0aXZpdHkuIE5TRnMgYXJlIHByb3ZpZGVk IGFuZCBjb25zdW1lZCBpbiBpbmNyZWFzaW5nbHkgZGl2ZXJzZSBlbnZpcm9ubWVudHMuIFVzZXJz IG9mIE5TRnMgY291bGQgY29uc3VtZSBuZXR3b3JrIHNlY3VyaXR5IHNlcnZpY2VzIGhvc3RlZCBi eSBvbmUgb3IgbW9yZSBwcm92aWRlcnMsIHdoaWNoIG1heSBiZSB0aGVpciBvd24gZW50ZXJwcmlz ZSwgc2VydmljZSBwcm92aWRlcnMsDQogb3IgYSBjb21iaW5hdGlvbiBvZiBib3RoLiZuYnNwOyBT aW1pbGFybHksIHNlcnZpY2UgcHJvdmlkZXJzIG1heSBvZmZlciB0aGVpciBjdXN0b21lcnMgbmV0 d29yayBzZWN1cml0eSBzZXJ2aWNlcyB0aGF0IGFyZSBlbmZvcmNlZCBieSBtdWx0aXBsZSBzZWN1 cml0eSBwcm9kdWN0cyBhbmQvb3IgZnVuY3Rpb25zIGZyb20gZGlmZmVyZW50IHZlbmRvcnMuIE5T RnMgbWF5IGJlIHByb3ZpZGVkIGJ5IHBoeXNpY2FsIGFuZC9vciB2aXJ0dWFsaXplZCBpbmZyYXN0 cnVjdHVyZS4NCiBXaXRob3V0IHN0YW5kYXJkIGludGVyZmFjZXMgdG8gY29udHJvbCBhbmQgbW9u aXRvciB0aGUgYmVoYXZpb3Igb2YgTlNGcywgaXQgaGFzIGJlY29tZSB2aXJ0dWFsbHkgaW1wb3Nz aWJsZSBmb3IgcHJvdmlkZXJzIG9mIHNlY3VyaXR5IHNlcnZpY2VzIHRvIGF1dG9tYXRlIHNlcnZp Y2Ugb2ZmZXJpbmdzIHRoYXQgdXRpbGl6ZSBkaWZmZXJlbnQgc2VjdXJpdHkgZnVuY3Rpb25zIGZy b20gbXVsdGlwbGUgdmVuZG9ycy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFRoZSBnb2FsIG9mIEkyTlNGIGlzIHRvIGRl ZmluZSBhIHNldCBvZiBzb2Z0d2FyZSBpbnRlcmZhY2VzIGFuZCBkYXRhIG1vZGVscyBmb3IgY29u dHJvbGxpbmcgYW5kIG1vbml0b3JpbmcgYXNwZWN0cyBvZiBwaHlzaWNhbCBhbmQgdmlydHVhbCBO U0ZzLiBJZiB0aGUgd29ya2luZyBncm91cCBmaW5kcyBpdCBuZWNlc3NhcnkNCiB0byB3b3JrIG9u IGFuIGluZm9ybWF0aW9uIG1vZGVsIGJlZm9yZSB0aGUgZGF0YSBtb2RlbHMsIHRvIGhlbHAgcHJv dmlkZSBndWlkYW5jZSBhbmQgZGVyaXZlIHRoZSBkYXRhIG1vZGVscywgaXQgbWF5IGRvIHNvLiBU aGUgd29ya2luZyBncm91cCB3aWxsIGRlY2lkZSBsYXRlciB3aGV0aGVyIHRoZSBpbmZvcm1hdGlv biBtb2RlbCBuZWVkcyB0byBiZSBwdWJsaXNoZWQgYXMgYW4gUkZDLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IE90aGVyIGFzcGVjdHMg b2YgTlNGcywgc3VjaCBhcyBkZXZpY2Ugb3IgbmV0d29yayBwcm92aXNpb25pbmcgYW5kIGNvbmZp Z3VyYXRpb24sIGFyZSBvdXQgb2Ygc2NvcGUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBDb250cm9sbGluZyBhbmQgbW9u aXRvcmluZyBhc3BlY3RzIG9mIE5TRnMgaW5jbHVkZSB0aGUgYWJpbGl0eSB0byBzcGVjaWZ5IHJ1 bGVzIChieSBhIHNpbmdsZSBjb250cm9sbGVyIGF0IHRoZSBmaXJzdCBwaGFzZSksIHF1ZXJ5LCBh bmQgbW9uaXRvciBOU0ZzIGJ5IG9uZSBvciBtb3JlIG1hbmFnZW1lbnQgZW50aXRpZXMuJm5ic3A7 DQogVGhlIGluaXRpYWwgcGhhc2Ugb2YgSTJOU0Ygd2lsbCBvbmx5IGNvbnNpZGVyIG9uZSBzaW5n bGUgY29udHJvbGxlciB0aGF0IGNhbiBzcGVjaWZ5IG9yIGNoYW5nZSBydWxlcyB0byBOU0ZzIGJl Y2F1c2UgbXVsdGktaGVhZGVkIGNvbnRyb2wgcmVxdWlyZXMgdGhlIGNvb3JkaW5hdGlvbiB0byBh dm9pZCBwb3RlbnRpYWwgY29uZmxpY3Qgb2YgcnVsZXMuIFRoZSBOU0ZzIGNhbiBiZSBtb25pdG9y ZWQgYnkgbXVsdGlwbGUgZW50aXRpZXMsIGJ1dCB0aGUNCiBkYXRhYmFzZSB1cGRhdGUgYW5kIHN5 bmNocm9uaXphdGlvbiBhbW9uZyBtdWx0aXBsZSBtYW5hZ2VtZW50IGVudGl0aWVzIGFyZSBvdXQg b2Ygc2NvcGUgZm9yIEkyTlNGLiBBcyB0aGVyZSBhcmUgbWFueSBkaWZmZXJlbnQgc2VjdXJpdHkg dmVuZG9ycyBzdXBwb3J0aW5nIGRpZmZlcmVudCBmZWF0dXJlcyBhbmQgZnVuY3Rpb25zIG9uIHRo ZWlyIGRldmljZXMsIEkyTlNGIHdpbGwgZm9jdXMgb24gZmxvdy1iYXNlZCBOU0ZzIHRoYXQgcHJv dmlkZSB0cmVhdG1lbnQNCiB0byBwYWNrZXRzL2Zsb3dzLCBzdWNoIGFzIEludHJ1c2lvbiBQcm90 ZWN0aW9uL0RldGVjdGlvbiBTeXN0ZW0gKElQUy9JRFMpLCBXZWIgZmlsdGVyaW5nLCBmbG93IGZp bHRlcmluZywgZGVlcCBwYWNrZXQgaW5zcGVjdGlvbiwgb3IgcGF0dGVybiBtYXRjaGluZyBhbmQg cmVtZWRpYXRpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBJMk5TRiB3aWxsIHNwZWNpZnkgaW50ZXJmYWNlcyBhdCB0 d28gZnVuY3Rpb25hbCBsZXZlbHMgZm9yIHRoZSBjb250cm9sIGFuZCBtb25pdG9yaW5nIG9mIG5l dHdvcmsgc2VjdXJpdHkgZnVuY3Rpb25zOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgVGhlIEkyTlNGIENhcGFiaWxpdHkg TGF5ZXIgc3BlY2lmaWVzIGhvdyB0byBjb250cm9sIGFuZCBtb25pdG9yIE5TRnMNCjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IGF0IGEg ZnVuY3Rpb25hbCBpbXBsZW1lbnRhdGlvbiBsZXZlbC4mbmJzcDsgVGhlIHRlcm0g4oCcRnVuY3Rp b25hbA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29s YXMiPiZndDsgSW1wbGVtZW50YXRpb27igJ0gaXMgdXNlZCB0byBlbXBoYXNpemUgdGhhdCB0aGUg cnVsZXMgKGZvciBjb250cm9sIGFuZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IG1vbml0b3IpIG9mIE5TRnMgaGF2ZSB0byBiZSBpbXBs ZW1lbnRhYmxlIGJ5IG1vc3QgTlNGcy4gSTJOU0Ygd2lsbCBzdGFuZGFyZGl6ZSBhIHNldCBvZiBp bnRlcmZhY2VzIGJ5IHdoaWNoIGEgc2VjdXJpdHkgY29udHJvbGxlciBjYW4gaW52b2tlLCBvcGVy YXRlLCBhbmQgbW9uaXRvciBOU0ZzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgVGhlIEkyTlNGIFNlcnZpY2UgTGF5ZXIg ZGVmaW5lcyBob3cgY2xpZW50c+KAmSBzZWN1cml0eSBwb2xpY2llcyBtYXkgYmUgZXhwcmVzc2Vk IHRvIGEgc2VjdXJpdHkgY29udHJvbGxlci4gVGhlIGNvbnRyb2xsZXIgaW1wbGVtZW50cyBpdHMg cG9saWNpZXMgYWNjb3JkaW5nIHRvIHRoZSB2YXJpb3VzIGNhcGFiaWxpdGllcw0KIHByb3ZpZGVk IGJ5IHRoZSBJMk5TRiBjYXBhYmlsaXR5IExheWVyLiZuYnNwOyBUaGUgSTJOU0YgU2VydmljZSBM YXllciBhbHNvIGFsbG93cyB0aGUgY2xpZW50IHRvIG1vbml0b3IgdGhlIGNsaWVudCBzcGVjaWZp YyBwb2xpY2llcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpD b25zb2xhcyI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFNpbmNlIHRoZXJlIGNvdWxkIGJlIG1hbnkgZGVwdGhzIG9y IHR5cGVzIG9mIFNlcnZpY2UgTGF5ZXIgcG9saWNpZXMsIHRoZSBmb2xsb3dpbmcgYnVsbGV0cyBm dXJ0aGVyIGNsYXJpZnkgdGhlIHNjb3BlIG9mIEkyTlNGOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IG8gT25seSB0aGUgU2ltcGxlIFNlcnZpY2UgTGF5ZXIgcG9saWNpZXMgdGhhdCBh cmUgbW9kZWxlZCBhcyBjbG9zZWx5IGFzIHBvc3NpYmxlIG9uIHRoZSBDYXBhYmlsaXR5IExheWVy IGFyZSB3aXRoaW4gdGhlIHNjb3BlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFN1Y2ggYSBTaW1wbGUgU2VydmljZSBMYXllciB3aWxs IGVuYWJsZSBhIHNlY3VyaXR5IGNvbnRyb2xsZXIgdG8gaGFuZGxlIGlzc3VlcyBsaWtlIG11bHRp LXRlbmFuY3kgYW5kIHRoZSBjaG9pY2UgYmV0d2VlbiBhdmFpbGFibGUgTlNGcyBmb3IgYSBnaXZl biBwb2xpY3kuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbyBJMk5TRiB3aWxsIG5v dCBzcGVjaWZ5IGFic3RyYWN0IG9yIHNvcGhpc3RpY2F0ZWQgcG9saWNpZXMgZnJvbSBjbGllbnRz LiBFeHByZXNzaW5nIHBvbGljaWVzIGluIHdheXMgb3RoZXIgdGhhbiB0aGUgbW9kZWwgdXNlZCBi eSB0aGUgQ2FwYWJpbGl0eSBMYXllciBpcyBvdXQgb2Ygc2NvcGUuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgbyBUaGUgdHJhbnNsYXRpb24gbWVjaGFuaXNtL21ldGhvZHMgZnJvbSBT ZXJ2aWNlIExheWVyIHBvbGljaWVzIHRvIENhcGFiaWxpdHkgbGF5ZXIgY29tbWVudHMgYXJlIG91 dCBvZiBzY29wZSBmb3IgSTJOU0YuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsgSG93ZXZlciwgSTJOU0Ygd2lsbCBwcm92aWRlIGEgZGlz Y3Vzc2lvbiBmb3J1bSBmb3IgSW5mb3JtYXRpb25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQ SXMsIGV0Yy4gdGhhdCBkZW1vbnN0cmF0ZSBob3cgbW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5ZXIg cG9saWNpZXMgYW5kIGZvcm1hdHMgbWF5IGJlIHRyYW5zbGF0ZWQNCiB0byBDYXBhYmlsaXR5IExh eWVyIGZ1bmN0aW9ucy4mbmJzcDsgU3VjaCBkb2N1bWVudHMgd291bGQgYmUgcHVyc3VlZCBvdXRz aWRlIHRoZSBXRy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpD b25zb2xhcyI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFN0YW5kYXJkIGludGVyZmFjZXMgZm9yIG1vbml0b3Jpbmcg YW5kIGNvbnRyb2xsaW5nIHRoZSBiZWhhdmlvciBvZiBOU0ZzIGFyZSBlc3NlbnRpYWwgYnVpbGRp bmcgYmxvY2tzIGZvciBwcm92aWRlcnMgb2Ygc2VjdXJpdHkgc2VydmljZSB0byBhdXRvbWF0ZSB0 aGUgdXNlIG9mIGRpZmZlcmVudCBOU0ZzIGZyb20gbXVsdGlwbGUNCiB2ZW5kb3JzLiBUaGlzIHdv cmsgd2lsbCBsZXZlcmFnZSB0aGUgZXhpc3RpbmcgcHJvdG9jb2xzIGFuZCBkYXRhIG1vZGVscyBk ZWZpbmVkIGJ5IHRoZSBJMlJTLCBORVRDT05GLCBhbmQgTkVUTU9EIHdvcmtpbmcgZ3JvdXBzLiBJ ZiBleHRlbnNpb25zIHRvIHRoZXNlIHByb3RvY29scyBvciBkYXRhIG1vZGVscyBhcmUgbmVlZGVk LCByZXF1aXJlbWVudHMgd2lsbCBiZSBkZXZlbG9wZWQgYnkgdGhpcyBXRywgYW5kIHRoZSBleHRl bnNpb25zIHdpbGwNCiBiZSBkZXZlbG9wZWQgaW4gY29vcGVyYXRpb24gd2l0aCB0aGUgV0dzIHJl c3BvbnNpYmxlIGZvciB0aGUgcHJvdG9jb2xzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgVGhlIEkyTlNGIFdH4oCZcyBk ZWxpdmVyYWJsZXMgaW5jbHVkZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IG8gQSBzaW5nbGUgZG9jdW1lbnQgY292ZXJpbmcgdXNlIGNhc2VzLCBwcm9ibGVtIHN0YXRl bWVudCwgYW5kIGdhcCBhbmFseXNpcyBkb2N1bWVudC4gVGhpcyBkb2N1bWVudCB3aWxsIGluaXRp YWxseSBiZSBwcm9kdWNlZCBmb3IgcmVmZXJlbmNlIGFzIGEgbGl2aW5nIGxpc3QgdG8gdHJhY2sg YW5kIHJlY29yZA0KIGRpc2N1c3Npb25zOiB0aGUgV0cgbWF5IGRlY2lkZSB0byBub3QgcHVibGlz aCB0aGlzIGRvY3VtZW50IGFzIGFuIFJGQy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBvIEEgZnJhbWV3b3JrIGRvY3VtZW50LCBwcmVzZW50aW5nIGFuIG92ZXJ2aWV3IG9mIHRoZSB1 c2Ugb2YgTlNGcyBhbmQgdGhlIHB1cnBvc2Ugb2YgdGhlIG1vZGVscyBkZXZlbG9wZWQgYnkgdGhl IFdHLiBUaGlzIGRvY3VtZW50IHdpbGwgYWxzbyBiZSBhIHJlZmVyZW5jZSB0ZXh0IHRvIGd1aWRl IHRoZSBtYWluDQogd29yayBhbmQgdGhlIFdHIG1heSBkZWNpZGUgdG8gbm90IHB1Ymxpc2ggdGhp cyBkb2N1bWVudCBhcyBhbiBSRkMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbyBJ ZiB0aGUgd29ya2luZyBncm91cCBjb25zaWRlcnMgaXQgbmVjZXNzYXJ5LCBhIHNpbmdsZSwgdW5p ZmllZCwgSW5mb3JtYXRpb24gTW9kZWwgdG8gZGVzY3JpYmUgdGhlIGNvbnRyb2wgYW5kIG1vbml0 b3Jpbmcgb2YgZmxvdy1iYXNlZCBOU0ZzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IG8gWUFORyBkYXRhIG1vZGVscyBmb3IgdGhlIGNvbnRyb2wgYW5kIG1vbml0b3Jpbmcgb2YgTlNG cy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBvIFJlcXVlc3RzIHRvIHRoZSBJQU5B IGZvciB0aGUgY3JlYXRpb24gb2YgYSByZWdpc3RyeSB0aGF0IGVuYWJsZXMgdGhlIGNoYXJhY3Rl cmlzdGljcyBhbmQgYmVoYXZpb3Igb2YgTlNGcyB0byBiZSBzcGVjaWZpZWQgdXNpbmcgYSB2ZW5k b3ItbmV1dHJhbCB2b2NhYnVsYXJ5IHdpdGhvdXQgcmVxdWlyaW5nIHRoZQ0KIE5TRnMgdGhlbXNl bHZlcyB0byBiZSBzdGFuZGFyZGl6ZWQuIFRoZSByZWdpc3RyeSBlbmFibGVzIHZhcmlvdXMgbWVj aGFuaXNtcywgaW5jbHVkaW5nIHBvbGljeSBydWxlcywgdG8gYmUgdXNlZCB0byBtYXRjaCBtb25p dG9yIGFuZCBjb250cm9sIGZ1bmN0aW9ucyB0byB0aGUgbmVlZHMgb2YgYW4gYXBwbGljYXRpb24g YW5kL29yIGVudmlyb25tZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IEFuIGV4YW1pbmF0aW9uIG9mIGV4aXN0aW5nIHNlY3VyZSBj b21tdW5pY2F0aW9uIG1lY2hhbmlzbXMgdG8gaWRlbnRpZnkgdGhlIGFwcHJvcHJpYXRlIG9uZXMg Zm9yIGNhcnJ5aW5nIHRoZSBjb250cm9sbGluZyBhbmQgbW9uaXRvcmluZyBpbmZvcm1hdGlvbiBi ZXR3ZWVuIHRoZSBOU0ZzIGFuZCB0aGVpciBtYW5hZ2VtZW50DQogZW50aXRpZXMuIFRoaXMgZG9j dW1lbnQgbWF5IGFsc28gYmUgcHJvZHVjZWQgYXMgYSB3b3JraW5nIGRvY3VtZW50IHRoYXQgaXMg bm90IHB1Ymxpc2hlZCBhcyBhbiBSRkMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBUaGUgV0cgbWF5IGFkZGl0aW9uYWxs eSBjaG9vc2UgdG8gZGV2ZWxvcCBkb2N1bWVudHMgdG8gZGVzY3JpYmUgcmVxdWlyZW1lbnRzIGZv ciBleHRlbnNpb25zIChpZiBhbnkpIHRvIGV4aXN0aW5nIHByb3RvY29scyB1c2VkIGJ5IHRoZSBX RywgdG8gZXhwbGFpbiBob3cgdGhlIGRhdGEgbW9kZWxzIGFyZSB1c2VkIHRvDQogbW9uaXRvciBh bmQgY29udHJvbCBmbG93LWJhc2VkIE5TRnMsIGFuZCB0byBkZXNjcmliZSBob3cgdG8gdXNlIEky UlMgYW5kIE5FVENPTkYgdG8gY2FycnkgdGhlIGNvbnRlbnQgb2YgdGhlIGRhdGEgbW9kZWxzLiBU aGVzZSBkb2N1bWVudHMgbWF5IGJlIHB1Ymxpc2hlZCBhcyBJbmZvcm1hdGlvbmFsIFJGQ3Mgb2Yg bWF5IGJlIHdvcmtpbmcgZG9jdW1lbnRzIHRoYXQgYXJlIGRpc2NhcmRlZCBvbmNlIHRoZXkgaGF2 ZSB0cmlnZ2VyZWQgdGhlIG5lY2Vzc2FyeQ0KIHdvcmsuPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBUaGUgV0cgd2lsbCB3 b3JrIGNsb3NlbHkgd2l0aCB0aGUgSTJSUywgTkVUQ09ORiwgYW5kIE5FVE1PRCBXR3MuIFRoZSBX RyB3aWxsIGNvbW11bmljYXRlIHdpdGggZXh0ZXJuYWwgU0RPcyBsaWtlIEVUU0kgTkZWIGFuZCB3 aWxsIGVuY291cmFnZSBvcGVuIHNvdXJjZSBjb2RlIGRldmVsb3BtZW50IHJlbGF0ZWQgdG8gdGhl DQogV0cgc2NvcGUgaW4gb3JnYW5pemF0aW9ucyBsaWtlIE9ORiwgT3BlblN0YWNrLCBPREwsIGFu ZCBPUE5GVi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25z b2xhcyI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgT24gV2VkLCBBdWcgMjYsIDIwMTUgYXQgMTo0NCBB TSwgSm9zZXBoIFNhbG93ZXkgJmx0OzxhIGhyZWY9Im1haWx0bzpqb2VAc2Fsb3dleS5uZXQiPmpv ZUBzYWxvd2V5Lm5ldDwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyBUaGFua3MgdG8gZXZlcnlvbmUgd2hv IGhhcyBjb250cmlidXRlZCB0b3dhcmRzIGRldmVsb3BpbmcgdGhlIGNoYXJ0ZXIuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IEkg YmVsaWV2ZSB3ZSBhcmUgY2xvc2UgdG8gY29uc2Vuc3VzIHNvIHRoaXMgaXMgYSBjb25zZW5zdXMg Y2FsbCBmb3IgdGhlIEkyTlNGPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IGNoYXJ0ZXIuJm5ic3A7Jm5ic3A7IFRoZSBjaGFydGVy IHRleHQgaXMgbG9jYXRlZCBhdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyA8YSBocmVmPSJodHRwczovL3NpdGVzLmdvb2dsZS5j b20vc2l0ZS9pbnRlcmZhY2UybnNmL2hvbWUiPg0KaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3Np dGUvaW50ZXJmYWNlMm5zZi9ob21lPC9hPi4mbmJzcDsgUGxlYXNlIHNlbmQgPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IGNvbW1l bnRzIG9uIHRoaXMgY2hhcnRlciB0byB0aGUgSTJOU0YgbGlzdCBieSBTZXB0ZW1iZXIgMiwgMjAx NS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTpDb25zb2xhcyI+Jmd0OyZndDsgVGhhbmsgeW91LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyBKb2U8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZn dDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25z b2xhcyI+Jmd0OyZndDsgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX188bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cyI+Jmd0OyZndDsgSTJuc2YgbWFpbGluZyBsaXN0PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IDxhIGhyZWY9Im1haWx0bzpJMm5z ZkBpZXRmLm9yZyI+DQpJMm5zZkBpZXRmLm9yZzwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgPGEgaHJlZj0iaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZiI+DQpodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_4A95BA014132FF49AE685FAB4B9F17F657D1A09Bdfweml701chm_-- From nobody Thu Aug 27 12:52:29 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 836BE1ACCEF for ; Thu, 27 Aug 2015 12:52:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -12.21 X-Spam-Level: X-Spam-Status: No, score=-12.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MANGLED_NAIL=2.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hSqtWTEULFQI for ; Thu, 27 Aug 2015 12:52:22 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B14C61A8AEA for ; Thu, 27 Aug 2015 12:52:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=79793; q=dns/txt; s=iport; t=1440705141; x=1441914741; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to; bh=LMH7o4GUB1lMJNhT2Ko9uY1alyzH32Xuq9JuaNTZGDs=; b=QoihJgRDF7le/BlIri08ZDGR/GpPddEnA0ZY17wV2XHkvtb/I84CSgAO +NsZ37DbFbsu50PcFkcOgdRv9KGhp2Ht0ldAShdDqTOsJrF8F+ezY02GQ f6LuHyWj1dWgBdRD061p92Dbh68EJrGUNYKuj9Yq/gRIy9ZvEtvS8gBbK 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DQBQDCad9V/5RdJa1UCoJOTVRpqgIBAQEFAYEKkm+BVRkBCYIeJYM4AoE2ORMBAQEBAQEBgQqEIwEBAQMBAQEBFwECBgo6BAMEAgQBBQcECQIRBAEBAQkWAQECBAMCAgkDAgECARUfCQgGAQwGAgEBiCIIDZVTnR2UegEBAQEBAQEBAQEBAQEBAQEBAQEBARMEhieFOoQnBwVYBgEGgmOBQwEEhyqKe4MYhQaHbYFKhDKCe4k2hEmDayaCQYFaIjOBBoFHAQEB X-IronPort-AV: E=Sophos; i="5.17,423,1437436800"; d="scan'208,217"; a="27895003" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 27 Aug 2015 19:52:18 +0000 Received: from [10.98.149.195] (bxb-fandreas-8812.cisco.com [10.98.149.195]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t7RJqHVf002215; Thu, 27 Aug 2015 19:52:17 GMT To: Linda Dunbar , Kathleen Moriarty , Joseph Salowey References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D19B03@dfweml701-chm> <55DE6F40.3080604@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D1A09B@dfweml701-chm> From: Flemming Andreasen Message-ID: <55DF6A8A.8090407@cisco.com> Date: Thu, 27 Aug 2015 15:52:42 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D1A09B@dfweml701-chm> Content-Type: multipart/alternative; boundary="------------040202090901010209080409" Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Further clarification and explanations to I2NSF charter has been added to the I2NSF Wiki Q&A (was RE: Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 19:52:28 -0000 This is a multi-part message in MIME format. --------------040202090901010209080409 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Thanks Linda Taking a quick look at the Wiki: - I noticed that your definition of an NSF explicitly prohibits any packet modification such as NAT or MAC rewrite; this will exclude a large portion of current NSFs (e.g. it's commonly used by FWs and ADCs) - is that intentional ? - You mention that "logging" is out of scope, yet in other places you refer to reporting, analytics, etc., and the charter talks about monitoring. Can you clarify ? Also, a couple of my questions below still seem to be open, but there is a parallel exchange with Kathleen on some of those, so maybe we can resolve them there. Cheers -- Flemming On 8/27/15 12:29 PM, Linda Dunbar wrote: > > Flemming, > > I have updated the Q&A on the I2NSF Wiki to clarify the questions you > have: https://sites.google.com/site/interface2nsf/i2nsf-q-a/i2nsfqa > > Hope it helps. Please let me know if you have more questions or > suggestions for I2NSF charter. > > Thanks, > > Linda > > *From:*Flemming Andreasen [mailto:fandreas@cisco.com] > *Sent:* Wednesday, August 26, 2015 9:01 PM > *To:* Linda Dunbar; Kathleen Moriarty; Joseph Salowey > *Cc:* i2nsf@ietf.org > *Subject:* Re: [I2nsf] Consensus call on I2NSF Charter > > On 8/26/15 7:31 PM, Linda Dunbar wrote: > > Flemming, > > Thank you very much for the detailed comments. Thank you for > catching those typos (corrected on the I2NSF wiki now). We really > need the fresh set of eyes to look at it. > > You stated: > > - The third paragraph says that "The NSFs can be monitored by > multiple entities..."; does this imply a 1:N (direct) monitoring > relationship ? > > If so, that seems to get to a design decision that may be premature. > > [Linda] The intent is to describe a scenario that a NSF may send > different outputs to different entities. For example, some > statistics report to “Analytics system”, “rule query” to > management entity. Can you suggest a better wording for this? > > I see. I'm not sure I would get into that level of detail in the > charter, but since you introduce the notion of "features and > functions", you could for example say > > "The NSFs may contain a multitude of features and functions, each of > which can be monitored by a different entity" > > or something like that. > > > > Other Replies are inserted below: > > -----Original Message----- > From: Flemming Andreasen [mailto:fandreas@cisco.com] > Sent: Wednesday, August 26, 2015 5:46 PM > To: Linda Dunbar; Kathleen Moriarty; Joseph Salowey > Cc: i2nsf@ietf.org > Subject: Re: [I2nsf] Consensus call on I2NSF Charter > > Apologies for joining the discussion late - just got back from PTO. In > any case, please find some additional comments on the proposed charter > below (some more substantial than others): > > - The first paragraph starts out by defining what an NSF is, and we > can argue about some of the points in there for various security > functions (e.g. I may want to detect normal network behavior to > establish a baseline, which does not seem to be covered by the current > definition). > > [Linda] Over the course of I2NSF (about a year), we have gone through > a long debate on what NSFs should be considered by IETF I2NSF. As the > result of the long debate, we use the definition to classify a set of > functions to be considered for IETF I2NSF (then further narrowing down > to Flow-based NSFs). > > The function you described, i.e. detecting normal network behavior to > establish a baseline is not in the scope of I2NSF, even though this > function can also be "provided and consumed in increasingly diverse > environments". > > Ok - the part about "detect unwanted network activity" is fairly broad > though, and I'm not sure how you detect unwanted activity without > looking at all activity (which is what triggered my original question). > > > I don't think that will be a productive discussion though, nor is it > necessary. Instead, I'd suggest we are not overly prescriptive, but > rather view these as possible NSF features, and supplement them with > some actual product examples (e.g. FW, NGFW, IPS, etc.). Similarly, > since we limit our scope to "flow-based NSFs", we may want to make > that clear here. An example of a security function that would *not* be > in scope may be helpful too. > > [Linda] All the NSFs in I2NSF context are “features”, whose form > factor can be provided physical box or virtualized format. Some form > factors, i.e. devices or VM, can provide multiple “functions”. Do you > think the sentences in the third paragraph is good enough to describe > what you want? > > /“I2NSF will focus on flow-based NSFs that provide treatment to > packets/flows, such as Intrusion Protection/Detection System > (IPS/IDS), Web filtering, flow filtering, deep packet inspection, or > pattern matching and remediation.” / > > The examples here are clear; I'm less clear on what else might be in > scope. For example, would a DDoS detection and mitigation system be in > scope (keeping in mind it may use a combination of packet inspection > and telemetry-based detection and mitigation and that establishing a > "normal" baseline is often part of the operation) ? > > > - The charter seems to operate with the notion of a "security > controller" that interacts with the "NSF". If I understand correctly, > the security controller implements the "Service Layer" and the NSF > implements the "Capability Layer". Furthermore, we have "clients" that > interact with the security controller to implement policies (by > leveraging the service layer). If so, it would be good to clarify this > taxonomy earlier in the charter. If not, then I probably need some > clarifications in the text. > > [Linda] “Security controller” is a conceptual entity, meaning an > entity to send implementable rules (capability layer) to the NSFs. > There could be multiple of them, each responsible for one type of NSF > (i.e. managing the instances of the NSFs). > > I2NSF includes “Simple Service Layer” that models closely to the > “Capability Layer”. For example: client can specify the rules without > specify which instances of the NSF. The “Controller” manage the > instances, as described by The figure in I2NSF Framework document: > > + - - - - - - - - - - - - - - - + + - - - - - - - - - - - - - - - + > > | NSF-A +--------------+ | | NSF-B +--------------+ | > > | | Controller| | | | Controller| | > > | +--------------+ | | +--------------+ | > > | + - - - - - - - - - - - - - + | | + - - - - - - - - - - - - - + | > > | |+---------+ +---------+| | | |+---------+ +---------+| | > > | || NSF-A#1 | ... | NSF-A#n|| | | || NSF-B#1| ... | NSF-B#m|| | > > | |+---------+ +---------+| | | |+---------+ +---------+| | > > | | NSF-A cluster | | | | NSF-B cluster | | > > | + - - - - - - - - - - - - - + | | + - - - - - - - - - - - - - + | > > + - - - - - - - - - - - - - - - + + - - - - - - - - - - - - - - - + > > Ok - this basic framework seems to be foundational to the structure of > the work the group is doing. If so, I think it would be helpful to > outline it (verbally) in the charter. > > > - In the definition of the "Capability Layer", there is a statement > about "rules...of NSFs have to be implementable by most NSFs". Do you > mean all NSFs or NSFs of a given type (I assume we have different > types of NSFs) ? > > [Linda] yes. > > - Policies are labeled as "simple" or "abstract or sophisticated" > > without further definition; I'm not sure where we draw that line or > how to do that in the charter; maybe clarifying that part needs to be > a deliverable ? > > [Linda] “simple” means that they can be directly translated to > capability layer rules with simple mapping, e.g. without explicit > stating which instantiation, may have customer ID that can be > translated to some tags carried by packets > > Ok - if that's the definition we want to use, can we clarify it in the > charter ? > > > - A number of deliverables may not be published as an RFC; why not > (they seem to set the stage for several other deliverables and hence > are relevant for consumers of the information and data models later on) ? > > [Linda] The WG group may decide to publish them as RFC or not later. > But the charter doesn’t specify which way. That is how IESG wanted. > > Ok. > > - The part about I2NSF providing a "discussion forum for Informational > drafts on.....[more complex Service Layer policies]..." is confusing > to me. The work seems to be pursued outside the WG, so there are no > deliverables and presumably no agenda time will be allocated either. > > [Linda] this is to address the information documents that describe the > I2NSF demo, open source or interoperability initiatives that are > conducted outside the WG. E.g > https://datatracker.ietf.org/doc/draft-xie-i2nsf-demo-outline-design/ > > Ok - thanks for the pointer, however from a WG point of view, I'm not > clear on what it means to have a discussion forum and what, if > anything, the WG will do with it (e.g. discuss such drafts as part of > meetings, etc) ? > > > It's also not clear to me that we can/should state that such documents > would be Informational. We may decide that we need some procedures for > how to define such documents, have designated experts, a directorate, > etc. to review them etc. I'm guessing this is all a bit premature > though, but again, we may want to note that as an issue in the charter > that the WG needs to resolve at some point. > > [Linda] Agree with you. I will see how AD wants to address this > suggestion . > > Ok > > Nits: > > - first paragraph: > > s/the mitigate/mitigate the/ > > - second last paragraph: > > s/RFCs of/RFCs or > > [Linda] Thank you for the catch. They are corrected on the I2NSF wiki > now. > > Thanks for the quick response and updates. > > -- Flemming > > > Thanks > > -- Flemming > > On 8/26/15 5:38 PM, Linda Dunbar wrote: > > > Kathleen, > > > > > > Thank you very much for the editorial changes. The charter description > > > on the I2NSF Wiki has been updated to reflect your suggested changes: > > >https://sites.google.com/site/interface2nsf/home > > > > > > > > > > Linda > > > > > > > > > -----Original Message----- > > > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen > > > Moriarty > > > Sent: Wednesday, August 26, 2015 2:29 PM > > > To: Joseph Salowey > > > Cc:i2nsf@ietf.org > > > Subject: Re: [I2nsf] Consensus call on I2NSF Charter > > > > > > I have a few editorial changes in the following text that does not change > the meaning of the charter text: > > > > > > A Network Security Function (NSF) is a function used to ensure > integrity, confidentiality, and availability of network > communications, to detect unwanted network activity, and to block or > at least the mitigate effects of unwanted activity. NSFs are provided > and consumed in increasingly diverse environments. Users of NSFs could > consume network security services hosted by one or more providers, > which may be their own enterprise, service providers, or a combination > of both. Similarly, service providers may offer their customers > network security services that are enforced by multiple security > products and/or functions from different vendors. NSFs may be provided > by physical and/or virtualized infrastructure. Without standard > interfaces to control and monitor the behavior of NSFs, it has become > virtually impossible for providers of security services to automate > service offerings that utilize different security functions from > multiple vendors. > > > > > > The goal of I2NSF is to define a set of software interfaces and data > models for controlling and monitoring aspects of physical and virtual > NSFs. If the working group finds it necessary to work on an > information model before the data models, to help provide guidance and > derive the data models, it may do so. The working group will decide > later whether the information model needs to be published as an RFC. > > > Other aspects of NSFs, such as device or network provisioning and > configuration, are out of scope. > > > > > > Controlling and monitoring aspects of NSFs include the ability to > specify rules (by a single controller at the first phase), query, and > monitor NSFs by one or more management entities. The initial phase of > I2NSF will only consider one single controller that can specify or > change rules to NSFs because multi-headed control requires the > coordination to avoid potential conflict of rules. The NSFs can be > monitored by multiple entities, but the database update and > synchronization among multiple management entities are out of scope > for I2NSF. As there are many different security vendors supporting > different features and functions on their devices, I2NSF will focus on > flow-based NSFs that provide treatment to packets/flows, such as > Intrusion Protection/Detection System (IPS/IDS), Web filtering, flow > filtering, deep packet inspection, or pattern matching and remediation. > > > > > > I2NSF will specify interfaces at two functional levels for the control and > monitoring of network security functions: > > > > > > The I2NSF Capability Layer specifies how to control and monitor NSFs > > > at a functional implementation level. The term “Functional > > > Implementation” is used to emphasize that the rules (for control and > > > monitor) of NSFs have to be implementable by most NSFs. I2NSF will > standardize a set of interfaces by which a security controller can > invoke, operate, and monitor NSFs. > > > > > > The I2NSF Service Layer defines how clients’ security policies may be > expressed to a security controller. The controller implements its > policies according to the various capabilities provided by the I2NSF > capability Layer. The I2NSF Service Layer also allows the client to > monitor the client specific policies. > > > > > > Since there could be many depths or types of Service Layer policies, the > following bullets further clarify the scope of I2NSF: > > > o Only the Simple Service Layer policies that are modeled as closely as > possible on the Capability Layer are within the scope. > > > Such a Simple Service Layer will enable a security controller to handle > issues like multi-tenancy and the choice between available NSFs for a > given policy. > > > o I2NSF will not specify abstract or sophisticated policies from > clients. Expressing policies in ways other than the model used by the > Capability Layer is out of scope. > > > o The translation mechanism/methods from Service Layer policies to > Capability layer comments are out of scope for I2NSF. > > > However, I2NSF will provide a discussion forum for Informational > drafts on data models, APIs, etc. that demonstrate how more complex > Service Layer policies and formats may be translated to Capability > Layer functions. Such documents would be pursued outside the WG. > > > > > > Standard interfaces for monitoring and controlling the behavior of > NSFs are essential building blocks for providers of security service > to automate the use of different NSFs from multiple vendors. This work > will leverage the existing protocols and data models defined by the > I2RS, NETCONF, and NETMOD working groups. If extensions to these > protocols or data models are needed, requirements will be developed by > this WG, and the extensions will be developed in cooperation with the > WGs responsible for the protocols. > > > > > > The I2NSF WG’s deliverables include: > > > > > > o A single document covering use cases, problem statement, and gap > analysis document. This document will initially be produced for > reference as a living list to track and record discussions: the WG may > decide to not publish this document as an RFC. > > > o A framework document, presenting an overview of the use of NSFs and > the purpose of the models developed by the WG. This document will also > be a reference text to guide the main work and the WG may decide to > not publish this document as an RFC. > > > o If the working group considers it necessary, a single, unified, > Information Model to describe the control and monitoring of flow-based > NSFs. > > > o YANG data models for the control and monitoring of NSFs. > > > o Requests to the IANA for the creation of a registry that enables the > characteristics and behavior of NSFs to be specified using a > vendor-neutral vocabulary without requiring the NSFs themselves to be > standardized. The registry enables various mechanisms, including > policy rules, to be used to match monitor and control functions to the > needs of an application and/or environment. > > > An examination of existing secure communication mechanisms to identify > the appropriate ones for carrying the controlling and monitoring > information between the NSFs and their management entities. This > document may also be produced as a working document that is not > published as an RFC. > > > > > > The WG may additionally choose to develop documents to describe requirements > for extensions (if any) to existing protocols used by the WG, to > explain how the data models are used to monitor and control flow-based > NSFs, and to describe how to use I2RS and NETCONF to carry the content > of the data models. These documents may be published as Informational > RFCs of may be working documents that are discarded once they have > triggered the necessary work. > > > > > > The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG will > communicate with external SDOs like ETSI NFV and will encourage open > source code development related to the WG scope in organizations like > ONF, OpenStack, ODL, and OPNFV. > > > > > > > > > On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey > wrote: > > >> Thanks to everyone who has contributed towards developing the charter. > > >> I believe we are close to consensus so this is a consensus call for the > I2NSF > > >> charter. The charter text is located at > > >>https://sites.google.com/site/interface2nsf/home > . Please send > > >> comments on this charter to the I2NSF list by September 2, 2015. > > >> > > >> Thank you, > > >> > > >> Joe > > >> > > >> _______________________________________________ > > >> I2nsf mailing list > > >>I2nsf@ietf.org > > >>https://www.ietf.org/mailman/listinfo/i2nsf > > > >> > > > > > > > --------------040202090901010209080409 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit Thanks Linda

Taking a quick look at the Wiki:
- I noticed that your definition of an NSF explicitly prohibits any packet modification such as NAT or MAC rewrite; this will exclude a large portion of current NSFs (e.g. it's commonly used by FWs and ADCs) - is that intentional ?

- You mention that "logging" is out of scope, yet in other places you refer to reporting, analytics, etc., and the charter talks about monitoring. Can you clarify ?


Also, a couple of my questions below still seem to be open, but there is a parallel exchange with Kathleen on some of those, so maybe we can resolve them there.

Cheers

-- Flemming


On 8/27/15 12:29 PM, Linda Dunbar wrote:

Flemming,

 

I have updated the Q&A on the I2NSF Wiki to clarify the questions you have:  https://sites.google.com/site/interface2nsf/i2nsf-q-a/i2nsfqa

 

Hope it helps. Please let me know if you have more questions or suggestions for I2NSF charter.

 

Thanks,

Linda

From: Flemming Andreasen [mailto:fandreas@cisco.com]
Sent: Wednesday, August 26, 2015 9:01 PM
To: Linda Dunbar; Kathleen Moriarty; Joseph Salowey
Cc: i2nsf@ietf.org
Subject: Re: [I2nsf] Consensus call on I2NSF Charter

 

 

On 8/26/15 7:31 PM, Linda Dunbar wrote:

Flemming,

 

Thank you very much for the detailed comments. Thank you for catching those typos (corrected on the I2NSF wiki now). We really need the fresh set of eyes to look at it.

 

You stated:

- The third paragraph says that "The NSFs can be monitored by multiple entities..."; does this imply a 1:N (direct) monitoring relationship ?

If so, that seems to get to a design decision that may be premature.

 

[Linda] The intent is to describe a scenario that a NSF may send different outputs to different entities. For example, some statistics report to “Analytics system”, “rule query” to management entity. Can you suggest a better wording for this?

 

I see. I'm not sure I would get into that level of detail in the charter, but since you introduce the notion of "features and functions", you could for example say

"The NSFs may contain a multitude of features and functions, each of which can be monitored by a different entity"

or something like that.



 

Other Replies are inserted below:

 

 

 

-----Original Message-----
From: Flemming Andreasen [mailto:fandreas@cisco.com]
Sent: Wednesday, August 26, 2015 5:46 PM
To: Linda Dunbar; Kathleen Moriarty; Joseph Salowey
Cc: i2nsf@ietf.org
Subject: Re: [I2nsf] Consensus call on I2NSF Charter

 

Apologies for joining the discussion late - just got back from PTO. In any case, please find some additional comments on the proposed charter below (some more substantial than others):

 

- The first paragraph starts out by defining what an NSF is, and we can argue about some of the points in there for various security functions (e.g. I may want to detect normal network behavior to establish a baseline, which does not seem to be covered by the current definition).

[Linda] Over the course of I2NSF (about a year), we have gone through a long debate on what NSFs should be considered by IETF I2NSF. As the result of the long debate, we use the definition to classify a set of functions to be considered for IETF I2NSF (then further narrowing down to Flow-based NSFs).

The function you described, i.e. detecting normal network behavior to establish a baseline is not in the scope of I2NSF, even though this function can also be "provided and consumed in increasingly diverse environments".

 

Ok - the part about "detect unwanted network activity" is fairly broad though, and I'm not sure how you detect unwanted activity without looking at all activity (which is what triggered my original question).


 

I don't think that will be a productive discussion though, nor is it necessary. Instead, I'd suggest we are not overly prescriptive, but rather view these as possible NSF features, and supplement them with some actual product examples (e.g. FW, NGFW, IPS, etc.). Similarly, since we limit our scope to "flow-based NSFs", we may want to make that clear here. An example of a security function that would *not* be in scope may be helpful too.

 

[Linda] All the NSFs in I2NSF context are “features”, whose form factor can be provided physical box or virtualized format. Some form factors, i.e. devices or VM, can provide multiple “functions”. Do you think the sentences in the third paragraph is good enough to describe what you want?

 

“I2NSF will focus on flow-based NSFs that provide treatment to packets/flows, such as Intrusion Protection/Detection System (IPS/IDS), Web filtering, flow filtering, deep packet inspection, or pattern matching and remediation.”

 

 

The examples here are clear; I'm less clear on what else might be in scope. For example, would a DDoS detection and mitigation system be in scope (keeping in mind it may use a combination of packet inspection and telemetry-based detection and mitigation and that establishing a "normal" baseline is often part of the operation) ?


 

 

- The charter seems to operate with the notion of a "security controller" that interacts with the "NSF". If I understand correctly, the security controller implements the "Service Layer" and the NSF implements the "Capability Layer". Furthermore, we have "clients" that interact with the security controller to implement policies (by leveraging the service layer). If so, it would be good to clarify this taxonomy earlier in the charter. If not, then I probably need some clarifications in the text.

 

[Linda] “Security controller” is a conceptual entity, meaning an entity to send implementable rules (capability layer) to the NSFs. There could be multiple of them, each responsible for one type of NSF (i.e. managing the instances of the NSFs).

I2NSF includes “Simple Service Layer” that models closely to the “Capability Layer”. For example: client can specify the rules without specify which instances of the NSF. The “Controller” manage the instances, as described by The figure in I2NSF Framework document:

 

+ - - - - - - - - - - - - - - - +  + - - - - - - - - - - - - - - - +

|  NSF-A  +--------------+      |  |  NSF-B  +--------------+      |

|         |   Controller|      |  |         |   Controller|      |

|         +--------------+      |  |         +--------------+      |

| + - - - - - - - - - - - - - + |  | + - - - - - - - - - - - - - + |

| |+---------+     +---------+| |  | |+---------+     +---------+| |

| || NSF-A#1 | ... |  NSF-A#n|| |  | ||  NSF-B#1| ... |  NSF-B#m|| |

| |+---------+     +---------+| |  | |+---------+     +---------+| |

| |         NSF-A cluster     | |  | |          NSF-B cluster    | |

| + - - - - - - - - - - - - - + |  | + - - - - - - - - - - - - - + |

+ - - - - - - - - - - - - - - - +  + - - - - - - - - - - - - - - - +

 

Ok - this basic framework seems to be foundational to the structure of the work the group is doing. If so, I think it would be helpful to outline it (verbally) in the charter.


 

- In the definition of the "Capability Layer", there is a statement about "rules...of NSFs have to be implementable by most NSFs". Do you mean all NSFs or NSFs of a given type (I assume we have different types of NSFs) ?

[Linda] yes.

 

- Policies are labeled as "simple" or "abstract or sophisticated"

without further definition; I'm not sure where we draw that line or how to do that in the charter; maybe clarifying that part needs to be a deliverable ?

[Linda] “simple” means that they can be directly translated to capability layer rules with simple mapping, e.g. without explicit stating which instantiation, may have customer ID that can be translated to some tags carried by packets

 

Ok - if that's the definition we want to use, can we clarify it in the charter ?


- A number of deliverables may not be published as an RFC; why not (they seem to set the stage for several other deliverables and hence are relevant for consumers of the information and data models later on) ?

 

[Linda] The WG group may decide to publish them as RFC or not later. But the charter doesn’t specify which way. That is how IESG wanted.

 

Ok.

- The part about I2NSF providing a "discussion forum for Informational drafts on.....[more complex Service Layer policies]..." is confusing to me. The work seems to be pursued outside the WG, so there are no deliverables and presumably no agenda time will be allocated either.

[Linda] this is to address the information documents that describe the I2NSF demo, open source or interoperability initiatives that are conducted outside the WG. E.g https://datatracker.ietf.org/doc/draft-xie-i2nsf-demo-outline-design/

 

Ok - thanks for the pointer, however from a WG point of view, I'm not clear on what it means to have a discussion forum and what, if anything, the WG will do with it (e.g. discuss such drafts as part of meetings, etc) ?


 

 

It's also not clear to me that we can/should state that such documents would be Informational. We may decide that we need some procedures for how to define such documents, have designated experts, a directorate, etc. to review them etc. I'm guessing this is all a bit premature though, but again, we may want to note that as an issue in the charter that the WG needs to resolve at some point.

 

[Linda] Agree with you. I will see how AD wants to address this suggestion .

Ok

 

 

Nits:

- first paragraph:

s/the mitigate/mitigate the/

 

- second last paragraph:

s/RFCs of/RFCs or

 

[Linda] Thank you for the catch. They are corrected on the I2NSF wiki now.

 

Thanks for the quick response and updates.

-- Flemming


Thanks

 

-- Flemming

 

 

On 8/26/15 5:38 PM, Linda Dunbar wrote:

> Kathleen,

> 

> Thank you very much for the editorial changes. The charter description

> on the I2NSF Wiki has been updated to reflect your suggested changes:

> 

> 

> Linda

> 

> 

> -----Original Message-----

> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen

> Moriarty

> Sent: Wednesday, August 26, 2015 2:29 PM

> To: Joseph Salowey

> Subject: Re: [I2nsf] Consensus call on I2NSF Charter

> 

> I have a few editorial changes in the following text that does not change the meaning of the charter text:

> 

> A Network Security Function (NSF) is a function used to ensure integrity, confidentiality, and availability of network communications, to detect unwanted network activity, and to block or at least the mitigate effects of unwanted activity. NSFs are provided and consumed in increasingly diverse environments. Users of NSFs could consume network security services hosted by one or more providers, which may be their own enterprise, service providers, or a combination of both.  Similarly, service providers may offer their customers network security services that are enforced by multiple security products and/or functions from different vendors. NSFs may be provided by physical and/or virtualized infrastructure. Without standard interfaces to control and monitor the behavior of NSFs, it has become virtually impossible for providers of security services to automate service offerings that utilize different security functions from multiple vendors.

> 

> The goal of I2NSF is to define a set of software interfaces and data models for controlling and monitoring aspects of physical and virtual NSFs. If the working group finds it necessary to work on an information model before the data models, to help provide guidance and derive the data models, it may do so. The working group will decide later whether the information model needs to be published as an RFC.

> Other aspects of NSFs, such as device or network provisioning and configuration, are out of scope.

> 

> Controlling and monitoring aspects of NSFs include the ability to specify rules (by a single controller at the first phase), query, and monitor NSFs by one or more management entities.  The initial phase of I2NSF will only consider one single controller that can specify or change rules to NSFs because multi-headed control requires the coordination to avoid potential conflict of rules. The NSFs can be monitored by multiple entities, but the database update and synchronization among multiple management entities are out of scope for I2NSF. As there are many different security vendors supporting different features and functions on their devices, I2NSF will focus on flow-based NSFs that provide treatment to packets/flows, such as Intrusion Protection/Detection System (IPS/IDS), Web filtering, flow filtering, deep packet inspection, or pattern matching and remediation.

> 

> I2NSF will specify interfaces at two functional levels for the control and monitoring of network security functions:

> 

> The I2NSF Capability Layer specifies how to control and monitor NSFs

> at a functional implementation level.  The term “Functional

> Implementation” is used to emphasize that the rules (for control and

> monitor) of NSFs have to be implementable by most NSFs. I2NSF will standardize a set of interfaces by which a security controller can invoke, operate, and monitor NSFs.

> 

> The I2NSF Service Layer defines how clients’ security policies may be expressed to a security controller. The controller implements its policies according to the various capabilities provided by the I2NSF capability Layer.  The I2NSF Service Layer also allows the client to monitor the client specific policies.

> 

> Since there could be many depths or types of Service Layer policies, the following bullets further clarify the scope of I2NSF:

>      o Only the Simple Service Layer policies that are modeled as closely as possible on the Capability Layer are within the scope.

> Such a Simple Service Layer will enable a security controller to handle issues like multi-tenancy and the choice between available NSFs for a given policy.

>      o I2NSF will not specify abstract or sophisticated policies from clients. Expressing policies in ways other than the model used by the Capability Layer is out of scope.

>      o The translation mechanism/methods from Service Layer policies to Capability layer comments are out of scope for I2NSF.

> However, I2NSF will provide a discussion forum for Informational drafts on data models, APIs, etc. that demonstrate how more complex Service Layer policies and formats may be translated to Capability Layer functions.  Such documents would be pursued outside the WG.

> 

> Standard interfaces for monitoring and controlling the behavior of NSFs are essential building blocks for providers of security service to automate the use of different NSFs from multiple vendors. This work will leverage the existing protocols and data models defined by the I2RS, NETCONF, and NETMOD working groups. If extensions to these protocols or data models are needed, requirements will be developed by this WG, and the extensions will be developed in cooperation with the WGs responsible for the protocols.

> 

> The I2NSF WG’s deliverables include:

> 

>      o A single document covering use cases, problem statement, and gap analysis document. This document will initially be produced for reference as a living list to track and record discussions: the WG may decide to not publish this document as an RFC.

>      o A framework document, presenting an overview of the use of NSFs and the purpose of the models developed by the WG. This document will also be a reference text to guide the main work and the WG may decide to not publish this document as an RFC.

>      o If the working group considers it necessary, a single, unified, Information Model to describe the control and monitoring of flow-based NSFs.

>      o YANG data models for the control and monitoring of NSFs.

>      o Requests to the IANA for the creation of a registry that enables the characteristics and behavior of NSFs to be specified using a vendor-neutral vocabulary without requiring the NSFs themselves to be standardized. The registry enables various mechanisms, including policy rules, to be used to match monitor and control functions to the needs of an application and/or environment.

> An examination of existing secure communication mechanisms to identify the appropriate ones for carrying the controlling and monitoring information between the NSFs and their management entities. This document may also be produced as a working document that is not published as an RFC.

> 

> The WG may additionally choose to develop documents to describe requirements for extensions (if any) to existing protocols used by the WG, to explain how the data models are used to monitor and control flow-based NSFs, and to describe how to use I2RS and NETCONF to carry the content of the data models. These documents may be published as Informational RFCs of may be working documents that are discarded once they have triggered the necessary work.

> 

> The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG will communicate with external SDOs like ETSI NFV and will encourage open source code development related to the WG scope in organizations like ONF, OpenStack, ODL, and OPNFV.

> 

> 

> On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey <joe@salowey.net> wrote:

>> Thanks to everyone who has contributed towards developing the charter.

>> I believe we are close to consensus so this is a consensus call for the I2NSF

>> charter.   The charter text is located at

>> comments on this charter to the I2NSF list by September 2, 2015.

>> 

>> Thank you,

>> 

>> Joe

>> 

>> _______________________________________________

>> I2nsf mailing list

>> 

> 

> 

 

 

 

 


--------------040202090901010209080409-- From nobody Thu Aug 27 13:27:59 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45C211ACEAF for ; Thu, 27 Aug 2015 13:27:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AZrJPS_1PVHm for ; Thu, 27 Aug 2015 13:27:49 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C45341A8AA1 for ; Thu, 27 Aug 2015 13:27:47 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CAM74273; Thu, 27 Aug 2015 20:27:45 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml402-hub.china.huawei.com (10.201.5.241) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 27 Aug 2015 21:27:23 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Thu, 27 Aug 2015 13:27:11 -0700 From: Linda Dunbar To: Flemming Andreasen , Kathleen Moriarty , Joseph Salowey Thread-Topic: Further clarification and explanations to I2NSF charter has been added to the I2NSF Wiki Q&A (was RE: [I2nsf] Consensus call on I2NSF Charter Thread-Index: AQHQ38JC8Hlj8uHTckqihpoxsIKx6J4fIKyA//+uYfCAAIjTgP//jF/QgACp5ACAAHx5IIAArxYA//+RA6A= Date: Thu, 27 Aug 2015 20:27:10 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D1A2CD@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D19B03@dfweml701-chm> <55DE6F40.3080604@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D1A09B@dfweml701-chm> <55DF6A8A.8090407@cisco.com> In-Reply-To: <55DF6A8A.8090407@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.236] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D1A2CDdfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Further clarification and explanations to I2NSF charter has been added to the I2NSF Wiki Q&A (was RE: Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 20:27:56 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D1A2CDdfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RmxlbW1pbmcsDQoNCkNvbW1lbnRzIGFyZSBpbnNlcnRlZCBiZWxvdzoNCg0KDQpGcm9tOiBGbGVt bWluZyBBbmRyZWFzZW4gW21haWx0bzpmYW5kcmVhc0BjaXNjby5jb21dDQpTZW50OiBUaHVyc2Rh eSwgQXVndXN0IDI3LCAyMDE1IDI6NTMgUE0NClRvOiBMaW5kYSBEdW5iYXI7IEthdGhsZWVuIE1v cmlhcnR5OyBKb3NlcGggU2Fsb3dleQ0KQ2M6IGkybnNmQGlldGYub3JnDQpTdWJqZWN0OiBSZTog RnVydGhlciBjbGFyaWZpY2F0aW9uIGFuZCBleHBsYW5hdGlvbnMgdG8gSTJOU0YgY2hhcnRlciBo YXMgYmVlbiBhZGRlZCB0byB0aGUgSTJOU0YgV2lraSBRJkEgKHdhcyBSRTogW0kybnNmXSBDb25z ZW5zdXMgY2FsbCBvbiBJMk5TRiBDaGFydGVyDQoNClRoYW5rcyBMaW5kYQ0KDQpUYWtpbmcgYSBx dWljayBsb29rIGF0IHRoZSBXaWtpOg0KLSBJIG5vdGljZWQgdGhhdCB5b3VyIGRlZmluaXRpb24g b2YgYW4gTlNGIGV4cGxpY2l0bHkgcHJvaGliaXRzIGFueSBwYWNrZXQgbW9kaWZpY2F0aW9uIHN1 Y2ggYXMgTkFUIG9yIE1BQyByZXdyaXRlOyB0aGlzIHdpbGwgZXhjbHVkZSBhIGxhcmdlIHBvcnRp b24gb2YgY3VycmVudCBOU0ZzIChlLmcuIGl0J3MgY29tbW9ubHkgdXNlZCBieSBGV3MgYW5kIEFE Q3MpIC0gaXMgdGhhdCBpbnRlbnRpb25hbCA/DQoNCltMaW5kYV0gVGhpcyBpcyBub3QgbXkgaW50 ZW50aW9uLiBJIGRvbuKAmXQgcmVtZW1iZXIgd2hvIHB1dCB0aGUgbGFzdCBjbGF1c2UgaW4gKGku ZS4gd2l0aG91dCBtb2RpZmljYXRpb24gdG8gdGhlIHBhY2tldCBkdWUgdG8gdGhlIGluc3BlY3Rp b24gcHJvY2VzcyAoTUFDIHJld3JpdGVzLCBUVEwgZGVjcmVtZW50IGFjdGlvbjsgZXZlbiBOQVQg d291bGQgYmUgb3V0c2lkZSB0aGUgaW5zcGVjdGlvbiBwcm9jZXNzKS4uIEkgY2FuIHB1bGwgdGhl IG1haWxpbmcgbGlzdCBpZiBpdCBvayB0byByZW1vdmUgdGhlIGxhc3QgY2xhdXNlLg0KDQoNCg0K LSBZb3UgbWVudGlvbiB0aGF0ICJsb2dnaW5nIiBpcyBvdXQgb2Ygc2NvcGUsIHlldCBpbiBvdGhl ciBwbGFjZXMgeW91IHJlZmVyIHRvIHJlcG9ydGluZywgYW5hbHl0aWNzLCBldGMuLCBhbmQgdGhl IGNoYXJ0ZXIgdGFsa3MgYWJvdXQgbW9uaXRvcmluZy4gQ2FuIHlvdSBjbGFyaWZ5ID8NCltMaW5k YV0gWWVzLCDigJxsb2dnaW5n4oCdIGlzIHJlZmVycmluZyB0byBhbmFseXRpY3MsIHN1Y2ggYWxn b3JpdGhtcywgYmVuY2htYXJrLCBldGMuDQoNCkFsc28sIGEgY291cGxlIG9mIG15IHF1ZXN0aW9u cyBiZWxvdyBzdGlsbCBzZWVtIHRvIGJlIG9wZW4sIGJ1dCB0aGVyZSBpcyBhIHBhcmFsbGVsIGV4 Y2hhbmdlIHdpdGggS2F0aGxlZW4gb24gc29tZSBvZiB0aG9zZSwgc28gbWF5YmUgd2UgY2FuIHJl c29sdmUgdGhlbSB0aGVyZS4NCltMaW5kYV0gZG8geW91IG1lYW4gdGhlIHF1ZXN0aW9ucyBsaWtl IOKAnHdoeSBmcmFtZXdvcmssIHVzZSBjYXNlcyBtYXkgbm90IGJlIHB1Ymxpc2hlZCBhcyBSRkNz 4oCdPyBDYW4geW91IGhlbHAgbWUgb3V0IHdpdGggdGhlIHF1ZXN0aW9ucz8NCg0KDQpDaGVlcnMN Cg0KLS0gRmxlbW1pbmcNCg0KT24gOC8yNy8xNSAxMjoyOSBQTSwgTGluZGEgRHVuYmFyIHdyb3Rl Og0KRmxlbW1pbmcsDQoNCkkgaGF2ZSB1cGRhdGVkIHRoZSBRJkEgb24gdGhlIEkyTlNGIFdpa2kg dG8gY2xhcmlmeSB0aGUgcXVlc3Rpb25zIHlvdSBoYXZlOiAgaHR0cHM6Ly9zaXRlcy5nb29nbGUu Y29tL3NpdGUvaW50ZXJmYWNlMm5zZi9pMm5zZi1xLWEvaTJuc2ZxYQ0KDQpIb3BlIGl0IGhlbHBz LiBQbGVhc2UgbGV0IG1lIGtub3cgaWYgeW91IGhhdmUgbW9yZSBxdWVzdGlvbnMgb3Igc3VnZ2Vz dGlvbnMgZm9yIEkyTlNGIGNoYXJ0ZXIuDQoNClRoYW5rcywNCkxpbmRhDQpGcm9tOiBGbGVtbWlu ZyBBbmRyZWFzZW4gW21haWx0bzpmYW5kcmVhc0BjaXNjby5jb21dDQpTZW50OiBXZWRuZXNkYXks IEF1Z3VzdCAyNiwgMjAxNSA5OjAxIFBNDQpUbzogTGluZGEgRHVuYmFyOyBLYXRobGVlbiBNb3Jp YXJ0eTsgSm9zZXBoIFNhbG93ZXkNCkNjOiBpMm5zZkBpZXRmLm9yZzxtYWlsdG86aTJuc2ZAaWV0 Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0kybnNmXSBDb25zZW5zdXMgY2FsbCBvbiBJMk5TRiBDaGFy dGVyDQoNCg0KT24gOC8yNi8xNSA3OjMxIFBNLCBMaW5kYSBEdW5iYXIgd3JvdGU6DQpGbGVtbWlu ZywNCg0KVGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGRldGFpbGVkIGNvbW1lbnRzLiBUaGFu ayB5b3UgZm9yIGNhdGNoaW5nIHRob3NlIHR5cG9zIChjb3JyZWN0ZWQgb24gdGhlIEkyTlNGIHdp a2kgbm93KS4gV2UgcmVhbGx5IG5lZWQgdGhlIGZyZXNoIHNldCBvZiBleWVzIHRvIGxvb2sgYXQg aXQuDQoNCllvdSBzdGF0ZWQ6DQotIFRoZSB0aGlyZCBwYXJhZ3JhcGggc2F5cyB0aGF0ICJUaGUg TlNGcyBjYW4gYmUgbW9uaXRvcmVkIGJ5IG11bHRpcGxlIGVudGl0aWVzLi4uIjsgZG9lcyB0aGlz IGltcGx5IGEgMTpOIChkaXJlY3QpIG1vbml0b3JpbmcgcmVsYXRpb25zaGlwID8NCklmIHNvLCB0 aGF0IHNlZW1zIHRvIGdldCB0byBhIGRlc2lnbiBkZWNpc2lvbiB0aGF0IG1heSBiZSBwcmVtYXR1 cmUuDQoNCltMaW5kYV0gVGhlIGludGVudCBpcyB0byBkZXNjcmliZSBhIHNjZW5hcmlvIHRoYXQg YSBOU0YgbWF5IHNlbmQgZGlmZmVyZW50IG91dHB1dHMgdG8gZGlmZmVyZW50IGVudGl0aWVzLiBG b3IgZXhhbXBsZSwgc29tZSBzdGF0aXN0aWNzIHJlcG9ydCB0byDigJxBbmFseXRpY3Mgc3lzdGVt 4oCdLCDigJxydWxlIHF1ZXJ54oCdIHRvIG1hbmFnZW1lbnQgZW50aXR5LiBDYW4geW91IHN1Z2dl c3QgYSBiZXR0ZXIgd29yZGluZyBmb3IgdGhpcz8NCg0KSSBzZWUuIEknbSBub3Qgc3VyZSBJIHdv dWxkIGdldCBpbnRvIHRoYXQgbGV2ZWwgb2YgZGV0YWlsIGluIHRoZSBjaGFydGVyLCBidXQgc2lu Y2UgeW91IGludHJvZHVjZSB0aGUgbm90aW9uIG9mICJmZWF0dXJlcyBhbmQgZnVuY3Rpb25zIiwg eW91IGNvdWxkIGZvciBleGFtcGxlIHNheQ0KDQoiVGhlIE5TRnMgbWF5IGNvbnRhaW4gYSBtdWx0 aXR1ZGUgb2YgZmVhdHVyZXMgYW5kIGZ1bmN0aW9ucywgZWFjaCBvZiB3aGljaCBjYW4gYmUgbW9u aXRvcmVkIGJ5IGEgZGlmZmVyZW50IGVudGl0eSINCg0Kb3Igc29tZXRoaW5nIGxpa2UgdGhhdC4N Cg0KDQoNCg0KDQpPdGhlciBSZXBsaWVzIGFyZSBpbnNlcnRlZCBiZWxvdzoNCg0KDQoNCi0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBGbGVtbWluZyBBbmRyZWFzZW4gW21haWx0bzpm YW5kcmVhc0BjaXNjby5jb21dDQpTZW50OiBXZWRuZXNkYXksIEF1Z3VzdCAyNiwgMjAxNSA1OjQ2 IFBNDQpUbzogTGluZGEgRHVuYmFyOyBLYXRobGVlbiBNb3JpYXJ0eTsgSm9zZXBoIFNhbG93ZXkN CkNjOiBpMm5zZkBpZXRmLm9yZzxtYWlsdG86aTJuc2ZAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTog W0kybnNmXSBDb25zZW5zdXMgY2FsbCBvbiBJMk5TRiBDaGFydGVyDQoNCkFwb2xvZ2llcyBmb3Ig am9pbmluZyB0aGUgZGlzY3Vzc2lvbiBsYXRlIC0ganVzdCBnb3QgYmFjayBmcm9tIFBUTy4gSW4g YW55IGNhc2UsIHBsZWFzZSBmaW5kIHNvbWUgYWRkaXRpb25hbCBjb21tZW50cyBvbiB0aGUgcHJv cG9zZWQgY2hhcnRlciBiZWxvdyAoc29tZSBtb3JlIHN1YnN0YW50aWFsIHRoYW4gb3RoZXJzKToN Cg0KLSBUaGUgZmlyc3QgcGFyYWdyYXBoIHN0YXJ0cyBvdXQgYnkgZGVmaW5pbmcgd2hhdCBhbiBO U0YgaXMsIGFuZCB3ZSBjYW4gYXJndWUgYWJvdXQgc29tZSBvZiB0aGUgcG9pbnRzIGluIHRoZXJl IGZvciB2YXJpb3VzIHNlY3VyaXR5IGZ1bmN0aW9ucyAoZS5nLiBJIG1heSB3YW50IHRvIGRldGVj dCBub3JtYWwgbmV0d29yayBiZWhhdmlvciB0byBlc3RhYmxpc2ggYSBiYXNlbGluZSwgd2hpY2gg ZG9lcyBub3Qgc2VlbSB0byBiZSBjb3ZlcmVkIGJ5IHRoZSBjdXJyZW50IGRlZmluaXRpb24pLg0K W0xpbmRhXSBPdmVyIHRoZSBjb3Vyc2Ugb2YgSTJOU0YgKGFib3V0IGEgeWVhciksIHdlIGhhdmUg Z29uZSB0aHJvdWdoIGEgbG9uZyBkZWJhdGUgb24gd2hhdCBOU0ZzIHNob3VsZCBiZSBjb25zaWRl cmVkIGJ5IElFVEYgSTJOU0YuIEFzIHRoZSByZXN1bHQgb2YgdGhlIGxvbmcgZGViYXRlLCB3ZSB1 c2UgdGhlIGRlZmluaXRpb24gdG8gY2xhc3NpZnkgYSBzZXQgb2YgZnVuY3Rpb25zIHRvIGJlIGNv bnNpZGVyZWQgZm9yIElFVEYgSTJOU0YgKHRoZW4gZnVydGhlciBuYXJyb3dpbmcgZG93biB0byBG bG93LWJhc2VkIE5TRnMpLg0KVGhlIGZ1bmN0aW9uIHlvdSBkZXNjcmliZWQsIGkuZS4gZGV0ZWN0 aW5nIG5vcm1hbCBuZXR3b3JrIGJlaGF2aW9yIHRvIGVzdGFibGlzaCBhIGJhc2VsaW5lIGlzIG5v dCBpbiB0aGUgc2NvcGUgb2YgSTJOU0YsIGV2ZW4gdGhvdWdoIHRoaXMgZnVuY3Rpb24gY2FuIGFs c28gYmUgInByb3ZpZGVkIGFuZCBjb25zdW1lZCBpbiBpbmNyZWFzaW5nbHkgZGl2ZXJzZSBlbnZp cm9ubWVudHMiLg0KDQpPayAtIHRoZSBwYXJ0IGFib3V0ICJkZXRlY3QgdW53YW50ZWQgbmV0d29y ayBhY3Rpdml0eSIgaXMgZmFpcmx5IGJyb2FkIHRob3VnaCwgYW5kIEknbSBub3Qgc3VyZSBob3cg eW91IGRldGVjdCB1bndhbnRlZCBhY3Rpdml0eSB3aXRob3V0IGxvb2tpbmcgYXQgYWxsIGFjdGl2 aXR5ICh3aGljaCBpcyB3aGF0IHRyaWdnZXJlZCBteSBvcmlnaW5hbCBxdWVzdGlvbikuDQoNCg0K DQoNCkkgZG9uJ3QgdGhpbmsgdGhhdCB3aWxsIGJlIGEgcHJvZHVjdGl2ZSBkaXNjdXNzaW9uIHRo b3VnaCwgbm9yIGlzIGl0IG5lY2Vzc2FyeS4gSW5zdGVhZCwgSSdkIHN1Z2dlc3Qgd2UgYXJlIG5v dCBvdmVybHkgcHJlc2NyaXB0aXZlLCBidXQgcmF0aGVyIHZpZXcgdGhlc2UgYXMgcG9zc2libGUg TlNGIGZlYXR1cmVzLCBhbmQgc3VwcGxlbWVudCB0aGVtIHdpdGggc29tZSBhY3R1YWwgcHJvZHVj dCBleGFtcGxlcyAoZS5nLiBGVywgTkdGVywgSVBTLCBldGMuKS4gU2ltaWxhcmx5LCBzaW5jZSB3 ZSBsaW1pdCBvdXIgc2NvcGUgdG8gImZsb3ctYmFzZWQgTlNGcyIsIHdlIG1heSB3YW50IHRvIG1h a2UgdGhhdCBjbGVhciBoZXJlLiBBbiBleGFtcGxlIG9mIGEgc2VjdXJpdHkgZnVuY3Rpb24gdGhh dCB3b3VsZCAqbm90KiBiZSBpbiBzY29wZSBtYXkgYmUgaGVscGZ1bCB0b28uDQoNCltMaW5kYV0g QWxsIHRoZSBOU0ZzIGluIEkyTlNGIGNvbnRleHQgYXJlIOKAnGZlYXR1cmVz4oCdLCB3aG9zZSBm b3JtIGZhY3RvciBjYW4gYmUgcHJvdmlkZWQgcGh5c2ljYWwgYm94IG9yIHZpcnR1YWxpemVkIGZv cm1hdC4gU29tZSBmb3JtIGZhY3RvcnMsIGkuZS4gZGV2aWNlcyBvciBWTSwgY2FuIHByb3ZpZGUg bXVsdGlwbGUg4oCcZnVuY3Rpb25z4oCdLiBEbyB5b3UgdGhpbmsgdGhlIHNlbnRlbmNlcyBpbiB0 aGUgdGhpcmQgcGFyYWdyYXBoIGlzIGdvb2QgZW5vdWdoIHRvIGRlc2NyaWJlIHdoYXQgeW91IHdh bnQ/DQoNCuKAnEkyTlNGIHdpbGwgZm9jdXMgb24gZmxvdy1iYXNlZCBOU0ZzIHRoYXQgcHJvdmlk ZSB0cmVhdG1lbnQgdG8gcGFja2V0cy9mbG93cywgc3VjaCBhcyBJbnRydXNpb24gUHJvdGVjdGlv bi9EZXRlY3Rpb24gU3lzdGVtIChJUFMvSURTKSwgV2ViIGZpbHRlcmluZywgZmxvdyBmaWx0ZXJp bmcsIGRlZXAgcGFja2V0IGluc3BlY3Rpb24sIG9yIHBhdHRlcm4gbWF0Y2hpbmcgYW5kIHJlbWVk aWF0aW9uLuKAnQ0KDQoNClRoZSBleGFtcGxlcyBoZXJlIGFyZSBjbGVhcjsgSSdtIGxlc3MgY2xl YXIgb24gd2hhdCBlbHNlIG1pZ2h0IGJlIGluIHNjb3BlLiBGb3IgZXhhbXBsZSwgd291bGQgYSBE RG9TIGRldGVjdGlvbiBhbmQgbWl0aWdhdGlvbiBzeXN0ZW0gYmUgaW4gc2NvcGUgKGtlZXBpbmcg aW4gbWluZCBpdCBtYXkgdXNlIGEgY29tYmluYXRpb24gb2YgcGFja2V0IGluc3BlY3Rpb24gYW5k IHRlbGVtZXRyeS1iYXNlZCBkZXRlY3Rpb24gYW5kIG1pdGlnYXRpb24gYW5kIHRoYXQgZXN0YWJs aXNoaW5nIGEgIm5vcm1hbCIgYmFzZWxpbmUgaXMgb2Z0ZW4gcGFydCBvZiB0aGUgb3BlcmF0aW9u KSA/DQoNCg0KDQoNCg0KLSBUaGUgY2hhcnRlciBzZWVtcyB0byBvcGVyYXRlIHdpdGggdGhlIG5v dGlvbiBvZiBhICJzZWN1cml0eSBjb250cm9sbGVyIiB0aGF0IGludGVyYWN0cyB3aXRoIHRoZSAi TlNGIi4gSWYgSSB1bmRlcnN0YW5kIGNvcnJlY3RseSwgdGhlIHNlY3VyaXR5IGNvbnRyb2xsZXIg aW1wbGVtZW50cyB0aGUgIlNlcnZpY2UgTGF5ZXIiIGFuZCB0aGUgTlNGIGltcGxlbWVudHMgdGhl ICJDYXBhYmlsaXR5IExheWVyIi4gRnVydGhlcm1vcmUsIHdlIGhhdmUgImNsaWVudHMiIHRoYXQg aW50ZXJhY3Qgd2l0aCB0aGUgc2VjdXJpdHkgY29udHJvbGxlciB0byBpbXBsZW1lbnQgcG9saWNp ZXMgKGJ5IGxldmVyYWdpbmcgdGhlIHNlcnZpY2UgbGF5ZXIpLiBJZiBzbywgaXQgd291bGQgYmUg Z29vZCB0byBjbGFyaWZ5IHRoaXMgdGF4b25vbXkgZWFybGllciBpbiB0aGUgY2hhcnRlci4gSWYg bm90LCB0aGVuIEkgcHJvYmFibHkgbmVlZCBzb21lIGNsYXJpZmljYXRpb25zIGluIHRoZSB0ZXh0 Lg0KDQpbTGluZGFdIOKAnFNlY3VyaXR5IGNvbnRyb2xsZXLigJ0gaXMgYSBjb25jZXB0dWFsIGVu dGl0eSwgbWVhbmluZyBhbiBlbnRpdHkgdG8gc2VuZCBpbXBsZW1lbnRhYmxlIHJ1bGVzIChjYXBh YmlsaXR5IGxheWVyKSB0byB0aGUgTlNGcy4gVGhlcmUgY291bGQgYmUgbXVsdGlwbGUgb2YgdGhl bSwgZWFjaCByZXNwb25zaWJsZSBmb3Igb25lIHR5cGUgb2YgTlNGIChpLmUuIG1hbmFnaW5nIHRo ZSBpbnN0YW5jZXMgb2YgdGhlIE5TRnMpLg0KSTJOU0YgaW5jbHVkZXMg4oCcU2ltcGxlIFNlcnZp Y2UgTGF5ZXLigJ0gdGhhdCBtb2RlbHMgY2xvc2VseSB0byB0aGUg4oCcQ2FwYWJpbGl0eSBMYXll cuKAnS4gRm9yIGV4YW1wbGU6IGNsaWVudCBjYW4gc3BlY2lmeSB0aGUgcnVsZXMgd2l0aG91dCBz cGVjaWZ5IHdoaWNoIGluc3RhbmNlcyBvZiB0aGUgTlNGLiBUaGUg4oCcQ29udHJvbGxlcuKAnSBt YW5hZ2UgdGhlIGluc3RhbmNlcywgYXMgZGVzY3JpYmVkIGJ5IFRoZSBmaWd1cmUgaW4gSTJOU0Yg RnJhbWV3b3JrIGRvY3VtZW50Og0KDQorIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtICsg ICsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gKw0KfCAgTlNGLUEgICstLS0tLS0tLS0t LS0tLSsgICAgICB8ICB8ICBOU0YtQiAgKy0tLS0tLS0tLS0tLS0tKyAgICAgIHwNCnwgICAgICAg ICB8ICAgQ29udHJvbGxlcnwgICAgICB8ICB8ICAgICAgICAgfCAgIENvbnRyb2xsZXJ8ICAgICAg fA0KfCAgICAgICAgICstLS0tLS0tLS0tLS0tLSsgICAgICB8ICB8ICAgICAgICAgKy0tLS0tLS0t LS0tLS0tKyAgICAgIHwNCnwgKyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtICsgfCAgfCArIC0g LSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gKyB8DQp8IHwrLS0tLS0tLS0tKyAgICAgKy0tLS0tLS0t LSt8IHwgIHwgfCstLS0tLS0tLS0rICAgICArLS0tLS0tLS0tK3wgfA0KfCB8fCBOU0YtQSMxIHwg Li4uIHwgIE5TRi1BI258fCB8ICB8IHx8ICBOU0YtQiMxfCAuLi4gfCAgTlNGLUIjbXx8IHwNCnwg fCstLS0tLS0tLS0rICAgICArLS0tLS0tLS0tK3wgfCAgfCB8Ky0tLS0tLS0tLSsgICAgICstLS0t LS0tLS0rfCB8DQp8IHwgICAgICAgICBOU0YtQSBjbHVzdGVyICAgICB8IHwgIHwgfCAgICAgICAg ICBOU0YtQiBjbHVzdGVyICAgIHwgfA0KfCArIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gKyB8 ICB8ICsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSArIHwNCisgLSAtIC0gLSAtIC0gLSAtIC0g LSAtIC0gLSAtIC0gKyAgKyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSArDQoNCk9rIC0g dGhpcyBiYXNpYyBmcmFtZXdvcmsgc2VlbXMgdG8gYmUgZm91bmRhdGlvbmFsIHRvIHRoZSBzdHJ1 Y3R1cmUgb2YgdGhlIHdvcmsgdGhlIGdyb3VwIGlzIGRvaW5nLiBJZiBzbywgSSB0aGluayBpdCB3 b3VsZCBiZSBoZWxwZnVsIHRvIG91dGxpbmUgaXQgKHZlcmJhbGx5KSBpbiB0aGUgY2hhcnRlci4N Cg0KDQoNCg0KLSBJbiB0aGUgZGVmaW5pdGlvbiBvZiB0aGUgIkNhcGFiaWxpdHkgTGF5ZXIiLCB0 aGVyZSBpcyBhIHN0YXRlbWVudCBhYm91dCAicnVsZXMuLi5vZiBOU0ZzIGhhdmUgdG8gYmUgaW1w bGVtZW50YWJsZSBieSBtb3N0IE5TRnMiLiBEbyB5b3UgbWVhbiBhbGwgTlNGcyBvciBOU0ZzIG9m IGEgZ2l2ZW4gdHlwZSAoSSBhc3N1bWUgd2UgaGF2ZSBkaWZmZXJlbnQgdHlwZXMgb2YgTlNGcykg Pw0KW0xpbmRhXSB5ZXMuDQoNCi0gUG9saWNpZXMgYXJlIGxhYmVsZWQgYXMgInNpbXBsZSIgb3Ig ImFic3RyYWN0IG9yIHNvcGhpc3RpY2F0ZWQiDQp3aXRob3V0IGZ1cnRoZXIgZGVmaW5pdGlvbjsg SSdtIG5vdCBzdXJlIHdoZXJlIHdlIGRyYXcgdGhhdCBsaW5lIG9yIGhvdyB0byBkbyB0aGF0IGlu IHRoZSBjaGFydGVyOyBtYXliZSBjbGFyaWZ5aW5nIHRoYXQgcGFydCBuZWVkcyB0byBiZSBhIGRl bGl2ZXJhYmxlID8NCltMaW5kYV0g4oCcc2ltcGxl4oCdIG1lYW5zIHRoYXQgdGhleSBjYW4gYmUg ZGlyZWN0bHkgdHJhbnNsYXRlZCB0byBjYXBhYmlsaXR5IGxheWVyIHJ1bGVzIHdpdGggc2ltcGxl IG1hcHBpbmcsIGUuZy4gd2l0aG91dCBleHBsaWNpdCBzdGF0aW5nIHdoaWNoIGluc3RhbnRpYXRp b24sIG1heSBoYXZlIGN1c3RvbWVyIElEIHRoYXQgY2FuIGJlIHRyYW5zbGF0ZWQgdG8gc29tZSB0 YWdzIGNhcnJpZWQgYnkgcGFja2V0cw0KDQpPayAtIGlmIHRoYXQncyB0aGUgZGVmaW5pdGlvbiB3 ZSB3YW50IHRvIHVzZSwgY2FuIHdlIGNsYXJpZnkgaXQgaW4gdGhlIGNoYXJ0ZXIgPw0KDQoNCg0K LSBBIG51bWJlciBvZiBkZWxpdmVyYWJsZXMgbWF5IG5vdCBiZSBwdWJsaXNoZWQgYXMgYW4gUkZD OyB3aHkgbm90ICh0aGV5IHNlZW0gdG8gc2V0IHRoZSBzdGFnZSBmb3Igc2V2ZXJhbCBvdGhlciBk ZWxpdmVyYWJsZXMgYW5kIGhlbmNlIGFyZSByZWxldmFudCBmb3IgY29uc3VtZXJzIG9mIHRoZSBp bmZvcm1hdGlvbiBhbmQgZGF0YSBtb2RlbHMgbGF0ZXIgb24pID8NCg0KW0xpbmRhXSBUaGUgV0cg Z3JvdXAgbWF5IGRlY2lkZSB0byBwdWJsaXNoIHRoZW0gYXMgUkZDIG9yIG5vdCBsYXRlci4gQnV0 IHRoZSBjaGFydGVyIGRvZXNu4oCZdCBzcGVjaWZ5IHdoaWNoIHdheS4gVGhhdCBpcyBob3cgSUVT RyB3YW50ZWQuDQoNCk9rLg0KDQoNCi0gVGhlIHBhcnQgYWJvdXQgSTJOU0YgcHJvdmlkaW5nIGEg ImRpc2N1c3Npb24gZm9ydW0gZm9yIEluZm9ybWF0aW9uYWwgZHJhZnRzIG9uLi4uLi5bbW9yZSBj b21wbGV4IFNlcnZpY2UgTGF5ZXIgcG9saWNpZXNdLi4uIiBpcyBjb25mdXNpbmcgdG8gbWUuIFRo ZSB3b3JrIHNlZW1zIHRvIGJlIHB1cnN1ZWQgb3V0c2lkZSB0aGUgV0csIHNvIHRoZXJlIGFyZSBu byBkZWxpdmVyYWJsZXMgYW5kIHByZXN1bWFibHkgbm8gYWdlbmRhIHRpbWUgd2lsbCBiZSBhbGxv Y2F0ZWQgZWl0aGVyLg0KW0xpbmRhXSB0aGlzIGlzIHRvIGFkZHJlc3MgdGhlIGluZm9ybWF0aW9u IGRvY3VtZW50cyB0aGF0IGRlc2NyaWJlIHRoZSBJMk5TRiBkZW1vLCBvcGVuIHNvdXJjZSBvciBp bnRlcm9wZXJhYmlsaXR5IGluaXRpYXRpdmVzIHRoYXQgYXJlIGNvbmR1Y3RlZCBvdXRzaWRlIHRo ZSBXRy4gRS5nIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhpZS1pMm5z Zi1kZW1vLW91dGxpbmUtZGVzaWduLw0KDQpPayAtIHRoYW5rcyBmb3IgdGhlIHBvaW50ZXIsIGhv d2V2ZXIgZnJvbSBhIFdHIHBvaW50IG9mIHZpZXcsIEknbSBub3QgY2xlYXIgb24gd2hhdCBpdCBt ZWFucyB0byBoYXZlIGEgZGlzY3Vzc2lvbiBmb3J1bSBhbmQgd2hhdCwgaWYgYW55dGhpbmcsIHRo ZSBXRyB3aWxsIGRvIHdpdGggaXQgKGUuZy4gZGlzY3VzcyBzdWNoIGRyYWZ0cyBhcyBwYXJ0IG9m IG1lZXRpbmdzLCBldGMpID8NCg0KDQoNCg0KDQpJdCdzIGFsc28gbm90IGNsZWFyIHRvIG1lIHRo YXQgd2UgY2FuL3Nob3VsZCBzdGF0ZSB0aGF0IHN1Y2ggZG9jdW1lbnRzIHdvdWxkIGJlIEluZm9y bWF0aW9uYWwuIFdlIG1heSBkZWNpZGUgdGhhdCB3ZSBuZWVkIHNvbWUgcHJvY2VkdXJlcyBmb3Ig aG93IHRvIGRlZmluZSBzdWNoIGRvY3VtZW50cywgaGF2ZSBkZXNpZ25hdGVkIGV4cGVydHMsIGEg ZGlyZWN0b3JhdGUsIGV0Yy4gdG8gcmV2aWV3IHRoZW0gZXRjLiBJJ20gZ3Vlc3NpbmcgdGhpcyBp cyBhbGwgYSBiaXQgcHJlbWF0dXJlIHRob3VnaCwgYnV0IGFnYWluLCB3ZSBtYXkgd2FudCB0byBu b3RlIHRoYXQgYXMgYW4gaXNzdWUgaW4gdGhlIGNoYXJ0ZXIgdGhhdCB0aGUgV0cgbmVlZHMgdG8g cmVzb2x2ZSBhdCBzb21lIHBvaW50Lg0KDQpbTGluZGFdIEFncmVlIHdpdGggeW91LiBJIHdpbGwg c2VlIGhvdyBBRCB3YW50cyB0byBhZGRyZXNzIHRoaXMgc3VnZ2VzdGlvbiAuDQpPaw0KDQoNCg0K DQpOaXRzOg0KLSBmaXJzdCBwYXJhZ3JhcGg6DQpzL3RoZSBtaXRpZ2F0ZS9taXRpZ2F0ZSB0aGUv DQoNCi0gc2Vjb25kIGxhc3QgcGFyYWdyYXBoOg0Kcy9SRkNzIG9mL1JGQ3Mgb3INCg0KW0xpbmRh XSBUaGFuayB5b3UgZm9yIHRoZSBjYXRjaC4gVGhleSBhcmUgY29ycmVjdGVkIG9uIHRoZSBJMk5T RiB3aWtpIG5vdy4NCg0KVGhhbmtzIGZvciB0aGUgcXVpY2sgcmVzcG9uc2UgYW5kIHVwZGF0ZXMu DQoNCi0tIEZsZW1taW5nDQoNCg0KDQpUaGFua3MNCg0KLS0gRmxlbW1pbmcNCg0KDQpPbiA4LzI2 LzE1IDU6MzggUE0sIExpbmRhIER1bmJhciB3cm90ZToNCj4gS2F0aGxlZW4sDQo+DQo+IFRoYW5r IHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBlZGl0b3JpYWwgY2hhbmdlcy4gVGhlIGNoYXJ0ZXIgZGVz Y3JpcHRpb24NCj4gb24gdGhlIEkyTlNGIFdpa2kgaGFzIGJlZW4gdXBkYXRlZCB0byByZWZsZWN0 IHlvdXIgc3VnZ2VzdGVkIGNoYW5nZXM6DQo+IGh0dHBzOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRl L2ludGVyZmFjZTJuc2YvaG9tZQ0KPg0KPg0KPiBMaW5kYQ0KPg0KPg0KPiAtLS0tLU9yaWdpbmFs IE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBJMm5zZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5v cmddIE9uIEJlaGFsZiBPZiBLYXRobGVlbg0KPiBNb3JpYXJ0eQ0KPiBTZW50OiBXZWRuZXNkYXks IEF1Z3VzdCAyNiwgMjAxNSAyOjI5IFBNDQo+IFRvOiBKb3NlcGggU2Fsb3dleQ0KPiBDYzogaTJu c2ZAaWV0Zi5vcmc8bWFpbHRvOmkybnNmQGlldGYub3JnPg0KPiBTdWJqZWN0OiBSZTogW0kybnNm XSBDb25zZW5zdXMgY2FsbCBvbiBJMk5TRiBDaGFydGVyDQo+DQo+IEkgaGF2ZSBhIGZldyBlZGl0 b3JpYWwgY2hhbmdlcyBpbiB0aGUgZm9sbG93aW5nIHRleHQgdGhhdCBkb2VzIG5vdCBjaGFuZ2Ug dGhlIG1lYW5pbmcgb2YgdGhlIGNoYXJ0ZXIgdGV4dDoNCj4NCj4gQSBOZXR3b3JrIFNlY3VyaXR5 IEZ1bmN0aW9uIChOU0YpIGlzIGEgZnVuY3Rpb24gdXNlZCB0byBlbnN1cmUgaW50ZWdyaXR5LCBj b25maWRlbnRpYWxpdHksIGFuZCBhdmFpbGFiaWxpdHkgb2YgbmV0d29yayBjb21tdW5pY2F0aW9u cywgdG8gZGV0ZWN0IHVud2FudGVkIG5ldHdvcmsgYWN0aXZpdHksIGFuZCB0byBibG9jayBvciBh dCBsZWFzdCB0aGUgbWl0aWdhdGUgZWZmZWN0cyBvZiB1bndhbnRlZCBhY3Rpdml0eS4gTlNGcyBh cmUgcHJvdmlkZWQgYW5kIGNvbnN1bWVkIGluIGluY3JlYXNpbmdseSBkaXZlcnNlIGVudmlyb25t ZW50cy4gVXNlcnMgb2YgTlNGcyBjb3VsZCBjb25zdW1lIG5ldHdvcmsgc2VjdXJpdHkgc2Vydmlj ZXMgaG9zdGVkIGJ5IG9uZSBvciBtb3JlIHByb3ZpZGVycywgd2hpY2ggbWF5IGJlIHRoZWlyIG93 biBlbnRlcnByaXNlLCBzZXJ2aWNlIHByb3ZpZGVycywgb3IgYSBjb21iaW5hdGlvbiBvZiBib3Ro LiAgU2ltaWxhcmx5LCBzZXJ2aWNlIHByb3ZpZGVycyBtYXkgb2ZmZXIgdGhlaXIgY3VzdG9tZXJz IG5ldHdvcmsgc2VjdXJpdHkgc2VydmljZXMgdGhhdCBhcmUgZW5mb3JjZWQgYnkgbXVsdGlwbGUg c2VjdXJpdHkgcHJvZHVjdHMgYW5kL29yIGZ1bmN0aW9ucyBmcm9tIGRpZmZlcmVudCB2ZW5kb3Jz LiBOU0ZzIG1heSBiZSBwcm92aWRlZCBieSBwaHlzaWNhbCBhbmQvb3IgdmlydHVhbGl6ZWQgaW5m cmFzdHJ1Y3R1cmUuIFdpdGhvdXQgc3RhbmRhcmQgaW50ZXJmYWNlcyB0byBjb250cm9sIGFuZCBt b25pdG9yIHRoZSBiZWhhdmlvciBvZiBOU0ZzLCBpdCBoYXMgYmVjb21lIHZpcnR1YWxseSBpbXBv c3NpYmxlIGZvciBwcm92aWRlcnMgb2Ygc2VjdXJpdHkgc2VydmljZXMgdG8gYXV0b21hdGUgc2Vy dmljZSBvZmZlcmluZ3MgdGhhdCB1dGlsaXplIGRpZmZlcmVudCBzZWN1cml0eSBmdW5jdGlvbnMg ZnJvbSBtdWx0aXBsZSB2ZW5kb3JzLg0KPg0KPiBUaGUgZ29hbCBvZiBJMk5TRiBpcyB0byBkZWZp bmUgYSBzZXQgb2Ygc29mdHdhcmUgaW50ZXJmYWNlcyBhbmQgZGF0YSBtb2RlbHMgZm9yIGNvbnRy b2xsaW5nIGFuZCBtb25pdG9yaW5nIGFzcGVjdHMgb2YgcGh5c2ljYWwgYW5kIHZpcnR1YWwgTlNG cy4gSWYgdGhlIHdvcmtpbmcgZ3JvdXAgZmluZHMgaXQgbmVjZXNzYXJ5IHRvIHdvcmsgb24gYW4g aW5mb3JtYXRpb24gbW9kZWwgYmVmb3JlIHRoZSBkYXRhIG1vZGVscywgdG8gaGVscCBwcm92aWRl IGd1aWRhbmNlIGFuZCBkZXJpdmUgdGhlIGRhdGEgbW9kZWxzLCBpdCBtYXkgZG8gc28uIFRoZSB3 b3JraW5nIGdyb3VwIHdpbGwgZGVjaWRlIGxhdGVyIHdoZXRoZXIgdGhlIGluZm9ybWF0aW9uIG1v ZGVsIG5lZWRzIHRvIGJlIHB1Ymxpc2hlZCBhcyBhbiBSRkMuDQo+IE90aGVyIGFzcGVjdHMgb2Yg TlNGcywgc3VjaCBhcyBkZXZpY2Ugb3IgbmV0d29yayBwcm92aXNpb25pbmcgYW5kIGNvbmZpZ3Vy YXRpb24sIGFyZSBvdXQgb2Ygc2NvcGUuDQo+DQo+IENvbnRyb2xsaW5nIGFuZCBtb25pdG9yaW5n IGFzcGVjdHMgb2YgTlNGcyBpbmNsdWRlIHRoZSBhYmlsaXR5IHRvIHNwZWNpZnkgcnVsZXMgKGJ5 IGEgc2luZ2xlIGNvbnRyb2xsZXIgYXQgdGhlIGZpcnN0IHBoYXNlKSwgcXVlcnksIGFuZCBtb25p dG9yIE5TRnMgYnkgb25lIG9yIG1vcmUgbWFuYWdlbWVudCBlbnRpdGllcy4gIFRoZSBpbml0aWFs IHBoYXNlIG9mIEkyTlNGIHdpbGwgb25seSBjb25zaWRlciBvbmUgc2luZ2xlIGNvbnRyb2xsZXIg dGhhdCBjYW4gc3BlY2lmeSBvciBjaGFuZ2UgcnVsZXMgdG8gTlNGcyBiZWNhdXNlIG11bHRpLWhl YWRlZCBjb250cm9sIHJlcXVpcmVzIHRoZSBjb29yZGluYXRpb24gdG8gYXZvaWQgcG90ZW50aWFs IGNvbmZsaWN0IG9mIHJ1bGVzLiBUaGUgTlNGcyBjYW4gYmUgbW9uaXRvcmVkIGJ5IG11bHRpcGxl IGVudGl0aWVzLCBidXQgdGhlIGRhdGFiYXNlIHVwZGF0ZSBhbmQgc3luY2hyb25pemF0aW9uIGFt b25nIG11bHRpcGxlIG1hbmFnZW1lbnQgZW50aXRpZXMgYXJlIG91dCBvZiBzY29wZSBmb3IgSTJO U0YuIEFzIHRoZXJlIGFyZSBtYW55IGRpZmZlcmVudCBzZWN1cml0eSB2ZW5kb3JzIHN1cHBvcnRp bmcgZGlmZmVyZW50IGZlYXR1cmVzIGFuZCBmdW5jdGlvbnMgb24gdGhlaXIgZGV2aWNlcywgSTJO U0Ygd2lsbCBmb2N1cyBvbiBmbG93LWJhc2VkIE5TRnMgdGhhdCBwcm92aWRlIHRyZWF0bWVudCB0 byBwYWNrZXRzL2Zsb3dzLCBzdWNoIGFzIEludHJ1c2lvbiBQcm90ZWN0aW9uL0RldGVjdGlvbiBT eXN0ZW0gKElQUy9JRFMpLCBXZWIgZmlsdGVyaW5nLCBmbG93IGZpbHRlcmluZywgZGVlcCBwYWNr ZXQgaW5zcGVjdGlvbiwgb3IgcGF0dGVybiBtYXRjaGluZyBhbmQgcmVtZWRpYXRpb24uDQo+DQo+ IEkyTlNGIHdpbGwgc3BlY2lmeSBpbnRlcmZhY2VzIGF0IHR3byBmdW5jdGlvbmFsIGxldmVscyBm b3IgdGhlIGNvbnRyb2wgYW5kIG1vbml0b3Jpbmcgb2YgbmV0d29yayBzZWN1cml0eSBmdW5jdGlv bnM6DQo+DQo+IFRoZSBJMk5TRiBDYXBhYmlsaXR5IExheWVyIHNwZWNpZmllcyBob3cgdG8gY29u dHJvbCBhbmQgbW9uaXRvciBOU0ZzDQo+IGF0IGEgZnVuY3Rpb25hbCBpbXBsZW1lbnRhdGlvbiBs ZXZlbC4gIFRoZSB0ZXJtIOKAnEZ1bmN0aW9uYWwNCj4gSW1wbGVtZW50YXRpb27igJ0gaXMgdXNl ZCB0byBlbXBoYXNpemUgdGhhdCB0aGUgcnVsZXMgKGZvciBjb250cm9sIGFuZA0KPiBtb25pdG9y KSBvZiBOU0ZzIGhhdmUgdG8gYmUgaW1wbGVtZW50YWJsZSBieSBtb3N0IE5TRnMuIEkyTlNGIHdp bGwgc3RhbmRhcmRpemUgYSBzZXQgb2YgaW50ZXJmYWNlcyBieSB3aGljaCBhIHNlY3VyaXR5IGNv bnRyb2xsZXIgY2FuIGludm9rZSwgb3BlcmF0ZSwgYW5kIG1vbml0b3IgTlNGcy4NCj4NCj4gVGhl IEkyTlNGIFNlcnZpY2UgTGF5ZXIgZGVmaW5lcyBob3cgY2xpZW50c+KAmSBzZWN1cml0eSBwb2xp Y2llcyBtYXkgYmUgZXhwcmVzc2VkIHRvIGEgc2VjdXJpdHkgY29udHJvbGxlci4gVGhlIGNvbnRy b2xsZXIgaW1wbGVtZW50cyBpdHMgcG9saWNpZXMgYWNjb3JkaW5nIHRvIHRoZSB2YXJpb3VzIGNh cGFiaWxpdGllcyBwcm92aWRlZCBieSB0aGUgSTJOU0YgY2FwYWJpbGl0eSBMYXllci4gIFRoZSBJ Mk5TRiBTZXJ2aWNlIExheWVyIGFsc28gYWxsb3dzIHRoZSBjbGllbnQgdG8gbW9uaXRvciB0aGUg Y2xpZW50IHNwZWNpZmljIHBvbGljaWVzLg0KPg0KPiBTaW5jZSB0aGVyZSBjb3VsZCBiZSBtYW55 IGRlcHRocyBvciB0eXBlcyBvZiBTZXJ2aWNlIExheWVyIHBvbGljaWVzLCB0aGUgZm9sbG93aW5n IGJ1bGxldHMgZnVydGhlciBjbGFyaWZ5IHRoZSBzY29wZSBvZiBJMk5TRjoNCj4gICAgICBvIE9u bHkgdGhlIFNpbXBsZSBTZXJ2aWNlIExheWVyIHBvbGljaWVzIHRoYXQgYXJlIG1vZGVsZWQgYXMg Y2xvc2VseSBhcyBwb3NzaWJsZSBvbiB0aGUgQ2FwYWJpbGl0eSBMYXllciBhcmUgd2l0aGluIHRo ZSBzY29wZS4NCj4gU3VjaCBhIFNpbXBsZSBTZXJ2aWNlIExheWVyIHdpbGwgZW5hYmxlIGEgc2Vj dXJpdHkgY29udHJvbGxlciB0byBoYW5kbGUgaXNzdWVzIGxpa2UgbXVsdGktdGVuYW5jeSBhbmQg dGhlIGNob2ljZSBiZXR3ZWVuIGF2YWlsYWJsZSBOU0ZzIGZvciBhIGdpdmVuIHBvbGljeS4NCj4g ICAgICBvIEkyTlNGIHdpbGwgbm90IHNwZWNpZnkgYWJzdHJhY3Qgb3Igc29waGlzdGljYXRlZCBw b2xpY2llcyBmcm9tIGNsaWVudHMuIEV4cHJlc3NpbmcgcG9saWNpZXMgaW4gd2F5cyBvdGhlciB0 aGFuIHRoZSBtb2RlbCB1c2VkIGJ5IHRoZSBDYXBhYmlsaXR5IExheWVyIGlzIG91dCBvZiBzY29w ZS4NCj4gICAgICBvIFRoZSB0cmFuc2xhdGlvbiBtZWNoYW5pc20vbWV0aG9kcyBmcm9tIFNlcnZp Y2UgTGF5ZXIgcG9saWNpZXMgdG8gQ2FwYWJpbGl0eSBsYXllciBjb21tZW50cyBhcmUgb3V0IG9m IHNjb3BlIGZvciBJMk5TRi4NCj4gSG93ZXZlciwgSTJOU0Ygd2lsbCBwcm92aWRlIGEgZGlzY3Vz c2lvbiBmb3J1bSBmb3IgSW5mb3JtYXRpb25hbCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQSXMs IGV0Yy4gdGhhdCBkZW1vbnN0cmF0ZSBob3cgbW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5ZXIgcG9s aWNpZXMgYW5kIGZvcm1hdHMgbWF5IGJlIHRyYW5zbGF0ZWQgdG8gQ2FwYWJpbGl0eSBMYXllciBm dW5jdGlvbnMuICBTdWNoIGRvY3VtZW50cyB3b3VsZCBiZSBwdXJzdWVkIG91dHNpZGUgdGhlIFdH Lg0KPg0KPiBTdGFuZGFyZCBpbnRlcmZhY2VzIGZvciBtb25pdG9yaW5nIGFuZCBjb250cm9sbGlu ZyB0aGUgYmVoYXZpb3Igb2YgTlNGcyBhcmUgZXNzZW50aWFsIGJ1aWxkaW5nIGJsb2NrcyBmb3Ig cHJvdmlkZXJzIG9mIHNlY3VyaXR5IHNlcnZpY2UgdG8gYXV0b21hdGUgdGhlIHVzZSBvZiBkaWZm ZXJlbnQgTlNGcyBmcm9tIG11bHRpcGxlIHZlbmRvcnMuIFRoaXMgd29yayB3aWxsIGxldmVyYWdl IHRoZSBleGlzdGluZyBwcm90b2NvbHMgYW5kIGRhdGEgbW9kZWxzIGRlZmluZWQgYnkgdGhlIEky UlMsIE5FVENPTkYsIGFuZCBORVRNT0Qgd29ya2luZyBncm91cHMuIElmIGV4dGVuc2lvbnMgdG8g dGhlc2UgcHJvdG9jb2xzIG9yIGRhdGEgbW9kZWxzIGFyZSBuZWVkZWQsIHJlcXVpcmVtZW50cyB3 aWxsIGJlIGRldmVsb3BlZCBieSB0aGlzIFdHLCBhbmQgdGhlIGV4dGVuc2lvbnMgd2lsbCBiZSBk ZXZlbG9wZWQgaW4gY29vcGVyYXRpb24gd2l0aCB0aGUgV0dzIHJlc3BvbnNpYmxlIGZvciB0aGUg cHJvdG9jb2xzLg0KPg0KPiBUaGUgSTJOU0YgV0figJlzIGRlbGl2ZXJhYmxlcyBpbmNsdWRlOg0K Pg0KPiAgICAgIG8gQSBzaW5nbGUgZG9jdW1lbnQgY292ZXJpbmcgdXNlIGNhc2VzLCBwcm9ibGVt IHN0YXRlbWVudCwgYW5kIGdhcCBhbmFseXNpcyBkb2N1bWVudC4gVGhpcyBkb2N1bWVudCB3aWxs IGluaXRpYWxseSBiZSBwcm9kdWNlZCBmb3IgcmVmZXJlbmNlIGFzIGEgbGl2aW5nIGxpc3QgdG8g dHJhY2sgYW5kIHJlY29yZCBkaXNjdXNzaW9uczogdGhlIFdHIG1heSBkZWNpZGUgdG8gbm90IHB1 Ymxpc2ggdGhpcyBkb2N1bWVudCBhcyBhbiBSRkMuDQo+ICAgICAgbyBBIGZyYW1ld29yayBkb2N1 bWVudCwgcHJlc2VudGluZyBhbiBvdmVydmlldyBvZiB0aGUgdXNlIG9mIE5TRnMgYW5kIHRoZSBw dXJwb3NlIG9mIHRoZSBtb2RlbHMgZGV2ZWxvcGVkIGJ5IHRoZSBXRy4gVGhpcyBkb2N1bWVudCB3 aWxsIGFsc28gYmUgYSByZWZlcmVuY2UgdGV4dCB0byBndWlkZSB0aGUgbWFpbiB3b3JrIGFuZCB0 aGUgV0cgbWF5IGRlY2lkZSB0byBub3QgcHVibGlzaCB0aGlzIGRvY3VtZW50IGFzIGFuIFJGQy4N Cj4gICAgICBvIElmIHRoZSB3b3JraW5nIGdyb3VwIGNvbnNpZGVycyBpdCBuZWNlc3NhcnksIGEg c2luZ2xlLCB1bmlmaWVkLCBJbmZvcm1hdGlvbiBNb2RlbCB0byBkZXNjcmliZSB0aGUgY29udHJv bCBhbmQgbW9uaXRvcmluZyBvZiBmbG93LWJhc2VkIE5TRnMuDQo+ICAgICAgbyBZQU5HIGRhdGEg bW9kZWxzIGZvciB0aGUgY29udHJvbCBhbmQgbW9uaXRvcmluZyBvZiBOU0ZzLg0KPiAgICAgIG8g UmVxdWVzdHMgdG8gdGhlIElBTkEgZm9yIHRoZSBjcmVhdGlvbiBvZiBhIHJlZ2lzdHJ5IHRoYXQg ZW5hYmxlcyB0aGUgY2hhcmFjdGVyaXN0aWNzIGFuZCBiZWhhdmlvciBvZiBOU0ZzIHRvIGJlIHNw ZWNpZmllZCB1c2luZyBhIHZlbmRvci1uZXV0cmFsIHZvY2FidWxhcnkgd2l0aG91dCByZXF1aXJp bmcgdGhlIE5TRnMgdGhlbXNlbHZlcyB0byBiZSBzdGFuZGFyZGl6ZWQuIFRoZSByZWdpc3RyeSBl bmFibGVzIHZhcmlvdXMgbWVjaGFuaXNtcywgaW5jbHVkaW5nIHBvbGljeSBydWxlcywgdG8gYmUg dXNlZCB0byBtYXRjaCBtb25pdG9yIGFuZCBjb250cm9sIGZ1bmN0aW9ucyB0byB0aGUgbmVlZHMg b2YgYW4gYXBwbGljYXRpb24gYW5kL29yIGVudmlyb25tZW50Lg0KPiBBbiBleGFtaW5hdGlvbiBv ZiBleGlzdGluZyBzZWN1cmUgY29tbXVuaWNhdGlvbiBtZWNoYW5pc21zIHRvIGlkZW50aWZ5IHRo ZSBhcHByb3ByaWF0ZSBvbmVzIGZvciBjYXJyeWluZyB0aGUgY29udHJvbGxpbmcgYW5kIG1vbml0 b3JpbmcgaW5mb3JtYXRpb24gYmV0d2VlbiB0aGUgTlNGcyBhbmQgdGhlaXIgbWFuYWdlbWVudCBl bnRpdGllcy4gVGhpcyBkb2N1bWVudCBtYXkgYWxzbyBiZSBwcm9kdWNlZCBhcyBhIHdvcmtpbmcg ZG9jdW1lbnQgdGhhdCBpcyBub3QgcHVibGlzaGVkIGFzIGFuIFJGQy4NCj4NCj4gVGhlIFdHIG1h eSBhZGRpdGlvbmFsbHkgY2hvb3NlIHRvIGRldmVsb3AgZG9jdW1lbnRzIHRvIGRlc2NyaWJlIHJl cXVpcmVtZW50cyBmb3IgZXh0ZW5zaW9ucyAoaWYgYW55KSB0byBleGlzdGluZyBwcm90b2NvbHMg dXNlZCBieSB0aGUgV0csIHRvIGV4cGxhaW4gaG93IHRoZSBkYXRhIG1vZGVscyBhcmUgdXNlZCB0 byBtb25pdG9yIGFuZCBjb250cm9sIGZsb3ctYmFzZWQgTlNGcywgYW5kIHRvIGRlc2NyaWJlIGhv dyB0byB1c2UgSTJSUyBhbmQgTkVUQ09ORiB0byBjYXJyeSB0aGUgY29udGVudCBvZiB0aGUgZGF0 YSBtb2RlbHMuIFRoZXNlIGRvY3VtZW50cyBtYXkgYmUgcHVibGlzaGVkIGFzIEluZm9ybWF0aW9u YWwgUkZDcyBvZiBtYXkgYmUgd29ya2luZyBkb2N1bWVudHMgdGhhdCBhcmUgZGlzY2FyZGVkIG9u Y2UgdGhleSBoYXZlIHRyaWdnZXJlZCB0aGUgbmVjZXNzYXJ5IHdvcmsuDQo+DQo+IFRoZSBXRyB3 aWxsIHdvcmsgY2xvc2VseSB3aXRoIHRoZSBJMlJTLCBORVRDT05GLCBhbmQgTkVUTU9EIFdHcy4g VGhlIFdHIHdpbGwgY29tbXVuaWNhdGUgd2l0aCBleHRlcm5hbCBTRE9zIGxpa2UgRVRTSSBORlYg YW5kIHdpbGwgZW5jb3VyYWdlIG9wZW4gc291cmNlIGNvZGUgZGV2ZWxvcG1lbnQgcmVsYXRlZCB0 byB0aGUgV0cgc2NvcGUgaW4gb3JnYW5pemF0aW9ucyBsaWtlIE9ORiwgT3BlblN0YWNrLCBPREws IGFuZCBPUE5GVi4NCj4NCj4NCj4gT24gV2VkLCBBdWcgMjYsIDIwMTUgYXQgMTo0NCBBTSwgSm9z ZXBoIFNhbG93ZXkgPGpvZUBzYWxvd2V5Lm5ldDxtYWlsdG86am9lQHNhbG93ZXkubmV0Pj4gd3Jv dGU6DQo+PiBUaGFua3MgdG8gZXZlcnlvbmUgd2hvIGhhcyBjb250cmlidXRlZCB0b3dhcmRzIGRl dmVsb3BpbmcgdGhlIGNoYXJ0ZXIuDQo+PiBJIGJlbGlldmUgd2UgYXJlIGNsb3NlIHRvIGNvbnNl bnN1cyBzbyB0aGlzIGlzIGEgY29uc2Vuc3VzIGNhbGwgZm9yIHRoZSBJMk5TRg0KPj4gY2hhcnRl ci4gICBUaGUgY2hhcnRlciB0ZXh0IGlzIGxvY2F0ZWQgYXQNCj4+IGh0dHBzOi8vc2l0ZXMuZ29v Z2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaG9tZS4gIFBsZWFzZSBzZW5kDQo+PiBjb21tZW50 cyBvbiB0aGlzIGNoYXJ0ZXIgdG8gdGhlIEkyTlNGIGxpc3QgYnkgU2VwdGVtYmVyIDIsIDIwMTUu DQo+Pg0KPj4gVGhhbmsgeW91LA0KPj4NCj4+IEpvZQ0KPj4NCj4+IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+PiBJMm5zZiBtYWlsaW5nIGxpc3QNCj4+ IEkybnNmQGlldGYub3JnPG1haWx0bzpJMm5zZkBpZXRmLm9yZz4NCj4+IGh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YNCj4+DQo+DQo+DQoNCg0KDQoNCg0K --_000_4A95BA014132FF49AE685FAB4B9F17F657D1A2CDdfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 U2ltU3VuOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5v c2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QFNpbVN1biI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IFw7Y29sb3JcOlwjMDA3MEMw IjsNCglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAwO30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjsNCgljb2xvcjpibGFjazt9DQphOmxpbmss IHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVy bGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUs IGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJp ZiI7DQoJY29sb3I6YmxhY2s7fQ0Kc3Bhbi5CYWxsb29uVGV4dENoYXINCgl7bXNvLXN0eWxlLW5h bWU6IkJhbGxvb24gVGV4dCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0 eWxlLWxpbms6IkJhbGxvb24gVGV4dCI7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2Vy aWYiOw0KCWNvbG9yOmJsYWNrO30NCnAuZW1haWxxdW90ZSwgbGkuZW1haWxxdW90ZSwgZGl2LmVt YWlscXVvdGUNCgl7bXNvLXN0eWxlLW5hbWU6ZW1haWxxdW90ZTsNCgltc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ow0KCW1hcmdpbi1sZWZ0OjEuMHB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6 IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjsNCgljb2xvcjpibGFjazt9DQpzcGFuLkVtYWlsU3R5 bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24x DQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9 DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlk bWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+ DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0 YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxi b2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBs ZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkZsZW1taW5nLA0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj5Db21tZW50cyBhcmUgaW5zZXJ0ZWQgYmVsb3c6PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRv cDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6d2luZG93 dGV4dCI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOndp bmRvd3RleHQiPiBGbGVtbWluZyBBbmRyZWFzZW4gW21haWx0bzpmYW5kcmVhc0BjaXNjby5jb21d DQo8YnI+DQo8Yj5TZW50OjwvYj4gVGh1cnNkYXksIEF1Z3VzdCAyNywgMjAxNSAyOjUzIFBNPGJy Pg0KPGI+VG86PC9iPiBMaW5kYSBEdW5iYXI7IEthdGhsZWVuIE1vcmlhcnR5OyBKb3NlcGggU2Fs b3dleTxicj4NCjxiPkNjOjwvYj4gaTJuc2ZAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4g UmU6IEZ1cnRoZXIgY2xhcmlmaWNhdGlvbiBhbmQgZXhwbGFuYXRpb25zIHRvIEkyTlNGIGNoYXJ0 ZXIgaGFzIGJlZW4gYWRkZWQgdG8gdGhlIEkyTlNGIFdpa2kgUSZhbXA7QSAod2FzIFJFOiBbSTJu c2ZdIENvbnNlbnN1cyBjYWxsIG9uIEkyTlNGIENoYXJ0ZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPlRo YW5rcyBMaW5kYTxicj4NCjxicj4NClRha2luZyBhIHF1aWNrIGxvb2sgYXQgdGhlIFdpa2k6PGJy Pg0KLSBJIG5vdGljZWQgdGhhdCB5b3VyIGRlZmluaXRpb24gb2YgYW4gTlNGIGV4cGxpY2l0bHkg cHJvaGliaXRzIGFueSBwYWNrZXQgbW9kaWZpY2F0aW9uIHN1Y2ggYXMgTkFUIG9yIE1BQyByZXdy aXRlOyB0aGlzIHdpbGwgZXhjbHVkZSBhIGxhcmdlIHBvcnRpb24gb2YgY3VycmVudCBOU0ZzIChl LmcuIGl0J3MgY29tbW9ubHkgdXNlZCBieSBGV3MgYW5kIEFEQ3MpIC0gaXMgdGhhdCBpbnRlbnRp b25hbCA/DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIu MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBU aGlzIGlzIG5vdCBteSBpbnRlbnRpb24uIEkgZG9u4oCZdCByZW1lbWJlciB3aG8gcHV0IHRoZSBs YXN0IGNsYXVzZSBpbiAoaS5lLg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPndpdGhvdXQgbW9kaWZpY2F0 aW9uIHRvIHRoZSBwYWNrZXQgZHVlIHRvIHRoZSBpbnNwZWN0aW9uIHByb2Nlc3MgKE1BQyByZXdy aXRlcywgVFRMIGRlY3JlbWVudCBhY3Rpb247IGV2ZW4gTkFUIHdvdWxkIGJlIG91dHNpZGUgdGhl IGluc3BlY3Rpb24gcHJvY2VzcykuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj4uDQogSSBjYW4gcHVsbCB0aGUgbWFpbGluZyBsaXN0IGlmIGl0IG9rIHRv IHJlbW92ZSB0aGUgbGFzdCBjbGF1c2UuIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0K PGJyPg0KLSBZb3UgbWVudGlvbiB0aGF0ICZxdW90O2xvZ2dpbmcmcXVvdDsgaXMgb3V0IG9mIHNj b3BlLCB5ZXQgaW4gb3RoZXIgcGxhY2VzIHlvdSByZWZlciB0byByZXBvcnRpbmcsIGFuYWx5dGlj cywgZXRjLiwgYW5kIHRoZSBjaGFydGVyIHRhbGtzIGFib3V0IG1vbml0b3JpbmcuIENhbiB5b3Ug Y2xhcmlmeSA/DQo8YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0xpbmRhXSBZZXMs IOKAnGxvZ2dpbmfigJ0gaXMgcmVmZXJyaW5nIHRvIGFuYWx5dGljcywgc3VjaCBhbGdvcml0aG1z LCBiZW5jaG1hcmssIGV0Yy4NCjwvc3Bhbj48YnI+DQo8YnI+DQpBbHNvLCBhIGNvdXBsZSBvZiBt eSBxdWVzdGlvbnMgYmVsb3cgc3RpbGwgc2VlbSB0byBiZSBvcGVuLCBidXQgdGhlcmUgaXMgYSBw YXJhbGxlbCBleGNoYW5nZSB3aXRoIEthdGhsZWVuIG9uIHNvbWUgb2YgdGhvc2UsIHNvIG1heWJl IHdlIGNhbiByZXNvbHZlIHRoZW0gdGhlcmUuPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t Ym90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PltMaW5kYV0gZG8geW91IG1lYW4gdGhlIHF1ZXN0aW9ucyBsaWtlIOKAnHdoeSBmcmFtZXdvcmss IHVzZSBjYXNlcyBtYXkgbm90IGJlIHB1Ymxpc2hlZCBhcyBSRkNz4oCdPyBDYW4geW91IGhlbHAg bWUgb3V0IHdpdGggdGhlIHF1ZXN0aW9ucz8NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KPGJyPg0K Q2hlZXJzPGJyPg0KPGJyPg0KLS0gRmxlbW1pbmc8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiA4LzI3LzE1IDEyOjI5IFBNLCBMaW5kYSBE dW5iYXIgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJt YXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkZsZW1taW5nLA0K PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj5JIGhhdmUgdXBkYXRlZCB0aGUgUSZhbXA7QSBvbiB0aGUgSTJOU0YgV2lraSB0 byBjbGFyaWZ5IHRoZSBxdWVzdGlvbnMgeW91IGhhdmU6ICZuYnNwOzxhIGhyZWY9Imh0dHBzOi8v c2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaTJuc2YtcS1hL2kybnNmcWEiPmh0 dHBzOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaTJuc2YtcS1hL2kybnNm cWE8L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj5Ib3BlIGl0IGhlbHBzLiBQbGVhc2UgbGV0IG1lIGtub3cgaWYgeW91 IGhhdmUgbW9yZSBxdWVzdGlvbnMgb3Igc3VnZ2VzdGlvbnMgZm9yIEkyTlNGIGNoYXJ0ZXIuDQo8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPlRoYW5rcywNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5MaW5kYQ0K PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OndpbmRvd3RleHQiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjp3aW5kb3d0ZXh0Ij4gRmxlbW1pbmcgQW5kcmVhc2VuIFs8YSBocmVmPSJtYWlsdG86ZmFu ZHJlYXNAY2lzY28uY29tIj5tYWlsdG86ZmFuZHJlYXNAY2lzY28uY29tPC9hPl0NCjxicj4NCjxi PlNlbnQ6PC9iPiBXZWRuZXNkYXksIEF1Z3VzdCAyNiwgMjAxNSA5OjAxIFBNPGJyPg0KPGI+VG86 PC9iPiBMaW5kYSBEdW5iYXI7IEthdGhsZWVuIE1vcmlhcnR5OyBKb3NlcGggU2Fsb3dleTxicj4N CjxiPkNjOjwvYj4gPGEgaHJlZj0ibWFpbHRvOmkybnNmQGlldGYub3JnIj5pMm5zZkBpZXRmLm9y ZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtJMm5zZl0gQ29uc2Vuc3VzIGNhbGwgb24g STJOU0YgQ2hhcnRlcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gOC8yNi8xNSA3OjMxIFBNLCBMaW5kYSBEdW5i YXIgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFz Ij5GbGVtbWluZywNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTpDb25zb2xhcyI+VGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGRldGFpbGVkIGNvbW1l bnRzLiBUaGFuayB5b3UgZm9yIGNhdGNoaW5nIHRob3NlIHR5cG9zIChjb3JyZWN0ZWQgb24gdGhl IEkyTlNGIHdpa2kgbm93KS4gV2UgcmVhbGx5IG5lZWQgdGhlIGZyZXNoIHNldCBvZiBleWVzIHRv IGxvb2sgYXQgaXQuDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPllvdSBz dGF0ZWQ6DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25z b2xhcyI+LSBUaGUgdGhpcmQgcGFyYWdyYXBoIHNheXMgdGhhdCAmcXVvdDtUaGUgTlNGcyBjYW4g YmUgbW9uaXRvcmVkIGJ5IG11bHRpcGxlIGVudGl0aWVzLi4uJnF1b3Q7OyBkb2VzIHRoaXMgaW1w bHkgYSAxOk4gKGRpcmVjdCkgbW9uaXRvcmluZyByZWxhdGlvbnNoaXAgPw0KPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPklmIHNvLCB0aGF0IHNl ZW1zIHRvIGdldCB0byBhIGRlc2lnbiBkZWNpc2lvbiB0aGF0IG1heSBiZSBwcmVtYXR1cmUuPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMDcwQzAiPltMaW5kYV0g VGhlIGludGVudCBpcyB0byBkZXNjcmliZSBhIHNjZW5hcmlvIHRoYXQgYSBOU0YgbWF5IHNlbmQg ZGlmZmVyZW50IG91dHB1dHMgdG8gZGlmZmVyZW50IGVudGl0aWVzLiBGb3IgZXhhbXBsZSwgc29t ZSBzdGF0aXN0aWNzIHJlcG9ydCB0byDigJxBbmFseXRpY3Mgc3lzdGVt4oCdLCDigJxydWxlDQog cXVlcnnigJ0gdG8gbWFuYWdlbWVudCBlbnRpdHkuIENhbiB5b3Ugc3VnZ2VzdCBhIGJldHRlciB3 b3JkaW5nIGZvciB0aGlzPyA8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5JIHNlZS4gSSdtIG5vdCBzdXJlIEkgd291bGQgZ2V0IGludG8gdGhhdCBsZXZl bCBvZiBkZXRhaWwgaW4gdGhlIGNoYXJ0ZXIsIGJ1dCBzaW5jZSB5b3UgaW50cm9kdWNlIHRoZSBu b3Rpb24gb2YgJnF1b3Q7ZmVhdHVyZXMgYW5kIGZ1bmN0aW9ucyZxdW90OywgeW91IGNvdWxkIGZv ciBleGFtcGxlIHNheQ0KPGJyPg0KPGJyPg0KJnF1b3Q7VGhlIE5TRnMgbWF5IGNvbnRhaW4gYSBt dWx0aXR1ZGUgb2YgZmVhdHVyZXMgYW5kIGZ1bmN0aW9ucywgZWFjaCBvZiB3aGljaCBjYW4gYmUg bW9uaXRvcmVkIGJ5IGEgZGlmZmVyZW50IGVudGl0eSZxdW90Ow0KPGJyPg0KPGJyPg0Kb3Igc29t ZXRoaW5nIGxpa2UgdGhhdC4gPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzIj5PdGhlciBSZXBsaWVzIGFyZSBpbnNlcnRlZCBiZWxvdzo8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTpDb25zb2xhcyI+LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS08YnI+DQpGcm9tOiBGbGVt bWluZyBBbmRyZWFzZW4gWzxhIGhyZWY9Im1haWx0bzpmYW5kcmVhc0BjaXNjby5jb20iPm1haWx0 bzpmYW5kcmVhc0BjaXNjby5jb208L2E+XQ0KPGJyPg0KU2VudDogV2VkbmVzZGF5LCBBdWd1c3Qg MjYsIDIwMTUgNTo0NiBQTTxicj4NClRvOiBMaW5kYSBEdW5iYXI7IEthdGhsZWVuIE1vcmlhcnR5 OyBKb3NlcGggU2Fsb3dleTxicj4NCkNjOiA8YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmci PmkybnNmQGlldGYub3JnPC9hPjxicj4NClN1YmplY3Q6IFJlOiBbSTJuc2ZdIENvbnNlbnN1cyBj YWxsIG9uIEkyTlNGIENoYXJ0ZXI8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PkFwb2xvZ2llcyBmb3Igam9pbmluZyB0aGUgZGlzY3Vzc2lvbiBsYXRlIC0ganVzdCBnb3QgYmFj ayBmcm9tIFBUTy4gSW4gYW55IGNhc2UsIHBsZWFzZSBmaW5kIHNvbWUgYWRkaXRpb25hbCBjb21t ZW50cyBvbiB0aGUgcHJvcG9zZWQgY2hhcnRlciBiZWxvdyAoc29tZSBtb3JlIHN1YnN0YW50aWFs IHRoYW4gb3RoZXJzKTo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTpDb25zb2xhcyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6Q29uc29sYXMiPi0gVGhlIGZpcnN0IHBhcmFncmFwaCBzdGFydHMgb3V0IGJ5IGRlZmlu aW5nIHdoYXQgYW4gTlNGIGlzLCBhbmQgd2UgY2FuIGFyZ3VlIGFib3V0IHNvbWUgb2YgdGhlIHBv aW50cyBpbiB0aGVyZSBmb3IgdmFyaW91cyBzZWN1cml0eSBmdW5jdGlvbnMgKGUuZy4gSSBtYXkg d2FudCB0byBkZXRlY3Qgbm9ybWFsIG5ldHdvcmsNCiBiZWhhdmlvciB0byBlc3RhYmxpc2ggYSBi YXNlbGluZSwgd2hpY2ggZG9lcyBub3Qgc2VlbSB0byBiZSBjb3ZlcmVkIGJ5IHRoZSBjdXJyZW50 IGRlZmluaXRpb24pLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXM7Y29sb3I6IzAwNzBDMCI+W0xpbmRhXSBPdmVyIHRoZSBjb3Vyc2Ugb2YgSTJO U0YgKGFib3V0IGEgeWVhciksIHdlIGhhdmUgZ29uZSB0aHJvdWdoIGEgbG9uZyBkZWJhdGUgb24g d2hhdCBOU0ZzIHNob3VsZCBiZSBjb25zaWRlcmVkIGJ5IElFVEYgSTJOU0YuIEFzIHRoZSByZXN1 bHQgb2YgdGhlIGxvbmcgZGViYXRlLCB3ZQ0KIHVzZSB0aGUgZGVmaW5pdGlvbiB0byBjbGFzc2lm eSBhIHNldCBvZiBmdW5jdGlvbnMgdG8gYmUgY29uc2lkZXJlZCBmb3IgSUVURiBJMk5TRiAodGhl biBmdXJ0aGVyIG5hcnJvd2luZyBkb3duIHRvIEZsb3ctYmFzZWQgTlNGcykuDQo8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMw Ij5UaGUgZnVuY3Rpb24geW91IGRlc2NyaWJlZCwgaS5lLiBkZXRlY3Rpbmcgbm9ybWFsIG5ldHdv cmsgYmVoYXZpb3IgdG8gZXN0YWJsaXNoIGEgYmFzZWxpbmUgaXMgbm90IGluIHRoZSBzY29wZSBv ZiBJMk5TRiwgZXZlbiB0aG91Z2ggdGhpcyBmdW5jdGlvbiBjYW4gYWxzbyBiZSAmcXVvdDtwcm92 aWRlZCBhbmQNCiBjb25zdW1lZCBpbiBpbmNyZWFzaW5nbHkgZGl2ZXJzZSBlbnZpcm9ubWVudHMm cXVvdDsuIDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9rIC0gdGhlIHBhcnQg YWJvdXQgJnF1b3Q7ZGV0ZWN0IHVud2FudGVkIG5ldHdvcmsgYWN0aXZpdHkmcXVvdDsgaXMgZmFp cmx5IGJyb2FkIHRob3VnaCwgYW5kIEknbSBub3Qgc3VyZSBob3cgeW91IGRldGVjdCB1bndhbnRl ZCBhY3Rpdml0eSB3aXRob3V0IGxvb2tpbmcgYXQgYWxsIGFjdGl2aXR5ICh3aGljaCBpcyB3aGF0 IHRyaWdnZXJlZCBteSBvcmlnaW5hbCBxdWVzdGlvbikuDQo8YnI+DQo8YnI+DQo8YnI+DQo8YnI+ DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPkkgZG9uJ3QgdGhpbmsgdGhhdCB3aWxsIGJlIGEgcHJv ZHVjdGl2ZSBkaXNjdXNzaW9uIHRob3VnaCwgbm9yIGlzIGl0IG5lY2Vzc2FyeS4gSW5zdGVhZCwg SSdkIHN1Z2dlc3Qgd2UgYXJlIG5vdCBvdmVybHkgcHJlc2NyaXB0aXZlLCBidXQgcmF0aGVyIHZp ZXcgdGhlc2UgYXMgcG9zc2libGUgTlNGIGZlYXR1cmVzLCBhbmQNCiBzdXBwbGVtZW50IHRoZW0g d2l0aCBzb21lIGFjdHVhbCBwcm9kdWN0IGV4YW1wbGVzIChlLmcuIEZXLCBOR0ZXLCBJUFMsIGV0 Yy4pLiBTaW1pbGFybHksIHNpbmNlIHdlIGxpbWl0IG91ciBzY29wZSB0byAmcXVvdDtmbG93LWJh c2VkIE5TRnMmcXVvdDssIHdlIG1heSB3YW50IHRvIG1ha2UgdGhhdCBjbGVhciBoZXJlLiBBbiBl eGFtcGxlIG9mIGEgc2VjdXJpdHkgZnVuY3Rpb24gdGhhdCB3b3VsZCAqbm90KiBiZSBpbiBzY29w ZSBtYXkgYmUgaGVscGZ1bCB0b28uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFz O2NvbG9yOiMwMDcwQzAiPltMaW5kYV0gQWxsIHRoZSBOU0ZzIGluIEkyTlNGIGNvbnRleHQgYXJl IOKAnGZlYXR1cmVz4oCdLCB3aG9zZSBmb3JtIGZhY3RvciBjYW4gYmUgcHJvdmlkZWQgcGh5c2lj YWwgYm94IG9yIHZpcnR1YWxpemVkIGZvcm1hdC4gU29tZSBmb3JtIGZhY3RvcnMsIGkuZS4gZGV2 aWNlcyBvciBWTSwgY2FuIHByb3ZpZGUNCiBtdWx0aXBsZSDigJxmdW5jdGlvbnPigJ0uIERvIHlv dSB0aGluayB0aGUgc2VudGVuY2VzIGluIHRoZSB0aGlyZCBwYXJhZ3JhcGggaXMgZ29vZCBlbm91 Z2ggdG8gZGVzY3JpYmUgd2hhdCB5b3Ugd2FudD8NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzAw NzBDMCI+4oCcSTJOU0Ygd2lsbCBmb2N1cyBvbiBmbG93LWJhc2VkIE5TRnMgdGhhdCBwcm92aWRl IHRyZWF0bWVudCB0byBwYWNrZXRzL2Zsb3dzLCBzdWNoIGFzIEludHJ1c2lvbiBQcm90ZWN0aW9u L0RldGVjdGlvbiBTeXN0ZW0gKElQUy9JRFMpLCBXZWIgZmlsdGVyaW5nLCBmbG93DQogZmlsdGVy aW5nLCBkZWVwIHBhY2tldCBpbnNwZWN0aW9uLCBvciBwYXR0ZXJuIG1hdGNoaW5nIGFuZCByZW1l ZGlhdGlvbi7igJ0gPC9zcGFuPg0KPC9pPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBleGFtcGxlcyBoZXJlIGFy ZSBjbGVhcjsgSSdtIGxlc3MgY2xlYXIgb24gd2hhdCBlbHNlIG1pZ2h0IGJlIGluIHNjb3BlLiBG b3IgZXhhbXBsZSwgd291bGQgYSBERG9TIGRldGVjdGlvbiBhbmQgbWl0aWdhdGlvbiBzeXN0ZW0g YmUgaW4gc2NvcGUgKGtlZXBpbmcgaW4gbWluZCBpdCBtYXkgdXNlIGEgY29tYmluYXRpb24gb2Yg cGFja2V0IGluc3BlY3Rpb24gYW5kIHRlbGVtZXRyeS1iYXNlZCBkZXRlY3Rpb24NCiBhbmQgbWl0 aWdhdGlvbiBhbmQgdGhhdCBlc3RhYmxpc2hpbmcgYSAmcXVvdDtub3JtYWwmcXVvdDsgYmFzZWxp bmUgaXMgb2Z0ZW4gcGFydCBvZiB0aGUgb3BlcmF0aW9uKSA/DQo8YnI+DQo8YnI+DQo8YnI+DQo8 YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzIj4tIFRoZSBjaGFydGVyIHNlZW1zIHRvIG9wZXJhdGUgd2l0aCB0aGUgbm90aW9u IG9mIGEgJnF1b3Q7c2VjdXJpdHkgY29udHJvbGxlciZxdW90OyB0aGF0IGludGVyYWN0cyB3aXRo IHRoZSAmcXVvdDtOU0YmcXVvdDsuIElmIEkgdW5kZXJzdGFuZCBjb3JyZWN0bHksIHRoZSBzZWN1 cml0eSBjb250cm9sbGVyIGltcGxlbWVudHMgdGhlICZxdW90O1NlcnZpY2UgTGF5ZXImcXVvdDsN CiBhbmQgdGhlIE5TRiBpbXBsZW1lbnRzIHRoZSAmcXVvdDtDYXBhYmlsaXR5IExheWVyJnF1b3Q7 LiBGdXJ0aGVybW9yZSwgd2UgaGF2ZSAmcXVvdDtjbGllbnRzJnF1b3Q7IHRoYXQgaW50ZXJhY3Qg d2l0aCB0aGUgc2VjdXJpdHkgY29udHJvbGxlciB0byBpbXBsZW1lbnQgcG9saWNpZXMgKGJ5IGxl dmVyYWdpbmcgdGhlIHNlcnZpY2UgbGF5ZXIpLiBJZiBzbywgaXQgd291bGQgYmUgZ29vZCB0byBj bGFyaWZ5IHRoaXMgdGF4b25vbXkgZWFybGllciBpbiB0aGUgY2hhcnRlci4gSWYgbm90LA0KIHRo ZW4gSSBwcm9iYWJseSBuZWVkIHNvbWUgY2xhcmlmaWNhdGlvbnMgaW4gdGhlIHRleHQuPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMDcwQzAiPltMaW5kYV0g4oCc U2VjdXJpdHkgY29udHJvbGxlcuKAnSBpcyBhIGNvbmNlcHR1YWwgZW50aXR5LCBtZWFuaW5nIGFu IGVudGl0eSB0byBzZW5kIGltcGxlbWVudGFibGUgcnVsZXMgKGNhcGFiaWxpdHkgbGF5ZXIpIHRv IHRoZSBOU0ZzLiBUaGVyZSBjb3VsZCBiZSBtdWx0aXBsZSBvZiB0aGVtLCBlYWNoDQogcmVzcG9u c2libGUgZm9yIG9uZSB0eXBlIG9mIE5TRiAoaS5lLiBtYW5hZ2luZyB0aGUgaW5zdGFuY2VzIG9m IHRoZSBOU0ZzKS4gPC9zcGFuPg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj5JMk5TRiBpbmNsdWRlcyDigJxTaW1wbGUgU2Vydmlj ZSBMYXllcuKAnSB0aGF0IG1vZGVscyBjbG9zZWx5IHRvIHRoZSDigJxDYXBhYmlsaXR5IExheWVy 4oCdLiBGb3IgZXhhbXBsZTogY2xpZW50IGNhbiBzcGVjaWZ5IHRoZSBydWxlcyB3aXRob3V0IHNw ZWNpZnkgd2hpY2ggaW5zdGFuY2VzIG9mIHRoZSBOU0YuDQogVGhlIOKAnENvbnRyb2xsZXLigJ0g bWFuYWdlIHRoZSBpbnN0YW5jZXMsIGFzIGRlc2NyaWJlZCBieSBUaGUgZmlndXJlIGluIEkyTlNG IEZyYW1ld29yayBkb2N1bWVudDo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyA7Y29sb3I6IzAwNzBD MCZxdW90OywmcXVvdDtzZXJpZiZxdW90OyI+JiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0g LSAtIC0gJiM0MzsmbmJzcDsgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gJiM0 Mzs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyA7Y29sb3I6IzAwNzBDMCZxdW90OywmcXVvdDtzZXJpZiZxdW90OyI+fCZuYnNwOyBO U0YtQSZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfCZuYnNwOyB8Jm5ic3A7IE5TRi1CJm5ic3A7ICYjNDM7LS0tLS0tLS0tLS0tLS0m IzQzOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcgO2NvbG9yOiMwMDcwQzAm cXVvdDssJnF1b3Q7c2VyaWYmcXVvdDsiPnwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyBDb250cm9sbGVyfCZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyBDb250cm9sbGVyfCZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyB8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcgO2NvbG9yOiMwMDcwQzAmcXVvdDssJnF1b3Q7c2VyaWYm cXVvdDsiPnwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg JiM0MzstLS0tLS0tLS0tLS0tLSYjNDM7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwm bmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAm IzQzOy0tLS0tLS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3IDtjb2xvcjojMDA3MEMwJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7Ij58ICYjNDM7IC0gLSAt IC0gLSAtIC0gLSAtIC0gLSAtIC0gJiM0MzsgfCZuYnNwOyB8ICYjNDM7IC0gLSAtIC0gLSAtIC0g LSAtIC0gLSAtIC0gJiM0MzsgfDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3IDtjb2xvcjojMDA3MEMwJnF1b3Q7LCZxdW90O3Nlcmlm JnF1b3Q7Ij58IHwmIzQzOy0tLS0tLS0tLSYjNDM7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYj NDM7LS0tLS0tLS0tJiM0Mzt8IHwmbmJzcDsgfCB8JiM0MzstLS0tLS0tLS0mIzQzOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLSYjNDM7fCB8PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcgO2NvbG9yOiMwMDcw QzAmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDsiPnwgfHwgTlNGLUEjMSB8IC4uLiB8Jm5ic3A7IE5T Ri1BI258fCB8Jm5ic3A7IHwgfHwmbmJzcDsgTlNGLUIjMXwgLi4uIHwmbmJzcDsgTlNGLUIjbXx8 IHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyA7Y29sb3I6IzAwNzBDMCZxdW90OywmcXVvdDtzZXJpZiZxdW90OyI+fCB8JiM0Mzst LS0tLS0tLS0mIzQzOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLSYjNDM7 fCB8Jm5ic3A7IHwgfCYjNDM7LS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg JiM0MzstLS0tLS0tLS0mIzQzO3wgfDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3IDtjb2xvcjojMDA3MEMwJnF1b3Q7LCZxdW90O3Nl cmlmJnF1b3Q7Ij58IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgTlNGLUEgY2x1c3RlciZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IHwmbmJzcDsgfCB8 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE5T Ri1CIGNsdXN0ZXImbmJzcDsmbmJzcDsmbmJzcDsgfCB8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcgO2NvbG9yOiMwMDcwQzAmcXVv dDssJnF1b3Q7c2VyaWYmcXVvdDsiPnwgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAm IzQzOyB8Jm5ic3A7IHwgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAmIzQzOyB8PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcgO2NvbG9yOiMwMDcwQzAmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDsiPiYjNDM7IC0gLSAtIC0g LSAtIC0gLSAtIC0gLSAtIC0gLSAtICYjNDM7Jm5ic3A7ICYjNDM7IC0gLSAtIC0gLSAtIC0gLSAt IC0gLSAtIC0gLSAtICYjNDM7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6 IzAwNzBDMCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5PayAtIHRoaXMgYmFzaWMgZnJhbWV3b3JrIHNlZW1zIHRvIGJlIGZvdW5kYXRp b25hbCB0byB0aGUgc3RydWN0dXJlIG9mIHRoZSB3b3JrIHRoZSBncm91cCBpcyBkb2luZy4gSWYg c28sIEkgdGhpbmsgaXQgd291bGQgYmUgaGVscGZ1bCB0byBvdXRsaW5lIGl0ICh2ZXJiYWxseSkg aW4gdGhlIGNoYXJ0ZXIuDQo8YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPi0gSW4gdGhlIGRlZmluaXRpb24gb2YgdGhlICZxdW90O0NhcGFiaWxpdHkgTGF5ZXIm cXVvdDssIHRoZXJlIGlzIGEgc3RhdGVtZW50IGFib3V0ICZxdW90O3J1bGVzLi4ub2YgTlNGcyBo YXZlIHRvIGJlIGltcGxlbWVudGFibGUgYnkgbW9zdCBOU0ZzJnF1b3Q7LiBEbyB5b3UgbWVhbiBh bGwgTlNGcyBvciBOU0ZzIG9mIGEgZ2l2ZW4gdHlwZSAoSSBhc3N1bWUNCiB3ZSBoYXZlIGRpZmZl cmVudCB0eXBlcyBvZiBOU0ZzKSA/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzAwNzBDMCI+W0xpbmRhXSB5ZXMuDQo8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPi0gUG9saWNpZXMgYXJlIGxhYmVsZWQgYXMgJnF1 b3Q7c2ltcGxlJnF1b3Q7IG9yICZxdW90O2Fic3RyYWN0IG9yIHNvcGhpc3RpY2F0ZWQmcXVvdDsN Cjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj53 aXRob3V0IGZ1cnRoZXIgZGVmaW5pdGlvbjsgSSdtIG5vdCBzdXJlIHdoZXJlIHdlIGRyYXcgdGhh dCBsaW5lIG9yIGhvdyB0byBkbyB0aGF0IGluIHRoZSBjaGFydGVyOyBtYXliZSBjbGFyaWZ5aW5n IHRoYXQgcGFydCBuZWVkcyB0byBiZSBhIGRlbGl2ZXJhYmxlID88L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj5bTGluZGFd IOKAnHNpbXBsZeKAnSBtZWFucyB0aGF0IHRoZXkgY2FuIGJlIGRpcmVjdGx5IHRyYW5zbGF0ZWQg dG8gY2FwYWJpbGl0eSBsYXllciBydWxlcyB3aXRoIHNpbXBsZSBtYXBwaW5nLCBlLmcuIHdpdGhv dXQgZXhwbGljaXQgc3RhdGluZyB3aGljaCBpbnN0YW50aWF0aW9uLCBtYXkgaGF2ZSBjdXN0b21l cg0KIElEIHRoYXQgY2FuIGJlIHRyYW5zbGF0ZWQgdG8gc29tZSB0YWdzIGNhcnJpZWQgYnkgcGFj a2V0czwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9rIC0gaWYgdGhhdCdzIHRo ZSBkZWZpbml0aW9uIHdlIHdhbnQgdG8gdXNlLCBjYW4gd2UgY2xhcmlmeSBpdCBpbiB0aGUgY2hh cnRlciA/PGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXMiPi0gQSBudW1iZXIgb2YgZGVsaXZlcmFibGVzIG1heSBub3QgYmUgcHVibGlz aGVkIGFzIGFuIFJGQzsgd2h5IG5vdCAodGhleSBzZWVtIHRvIHNldCB0aGUgc3RhZ2UgZm9yIHNl dmVyYWwgb3RoZXIgZGVsaXZlcmFibGVzIGFuZCBoZW5jZSBhcmUgcmVsZXZhbnQgZm9yIGNvbnN1 bWVycyBvZiB0aGUgaW5mb3JtYXRpb24gYW5kDQogZGF0YSBtb2RlbHMgbGF0ZXIgb24pID88L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzAwNzBDMCI+W0xpbmRhXSBU aGUgV0cgZ3JvdXAgbWF5IGRlY2lkZSB0byBwdWJsaXNoIHRoZW0gYXMgUkZDIG9yIG5vdCBsYXRl ci4gQnV0IHRoZSBjaGFydGVyIGRvZXNu4oCZdCBzcGVjaWZ5IHdoaWNoIHdheS4gVGhhdCBpcyBo b3cgSUVTRyB3YW50ZWQuDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Pay4g PGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi Pi0gVGhlIHBhcnQgYWJvdXQgSTJOU0YgcHJvdmlkaW5nIGEgJnF1b3Q7ZGlzY3Vzc2lvbiBmb3J1 bSBmb3IgSW5mb3JtYXRpb25hbCBkcmFmdHMgb24uLi4uLlttb3JlIGNvbXBsZXggU2VydmljZSBM YXllciBwb2xpY2llc10uLi4mcXVvdDsgaXMgY29uZnVzaW5nIHRvIG1lLiBUaGUgd29yayBzZWVt cyB0byBiZSBwdXJzdWVkIG91dHNpZGUNCiB0aGUgV0csIHNvIHRoZXJlIGFyZSBubyBkZWxpdmVy YWJsZXMgYW5kIHByZXN1bWFibHkgbm8gYWdlbmRhIHRpbWUgd2lsbCBiZSBhbGxvY2F0ZWQgZWl0 aGVyLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29s YXM7Y29sb3I6IzAwNzBDMCI+W0xpbmRhXSB0aGlzIGlzIHRvIGFkZHJlc3MgdGhlIGluZm9ybWF0 aW9uIGRvY3VtZW50cyB0aGF0IGRlc2NyaWJlIHRoZSBJMk5TRiBkZW1vLCBvcGVuIHNvdXJjZSBv ciBpbnRlcm9wZXJhYmlsaXR5IGluaXRpYXRpdmVzIHRoYXQgYXJlIGNvbmR1Y3RlZCBvdXRzaWRl IHRoZSBXRy4gRS5nDQo8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9k cmFmdC14aWUtaTJuc2YtZGVtby1vdXRsaW5lLWRlc2lnbi8iPmh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2RyYWZ0LXhpZS1pMm5zZi1kZW1vLW91dGxpbmUtZGVzaWduLzwvYT48L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PayAt IHRoYW5rcyBmb3IgdGhlIHBvaW50ZXIsIGhvd2V2ZXIgZnJvbSBhIFdHIHBvaW50IG9mIHZpZXcs IEknbSBub3QgY2xlYXIgb24gd2hhdCBpdCBtZWFucyB0byBoYXZlIGEgZGlzY3Vzc2lvbiBmb3J1 bSBhbmQgd2hhdCwgaWYgYW55dGhpbmcsIHRoZSBXRyB3aWxsIGRvIHdpdGggaXQgKGUuZy4gZGlz Y3VzcyBzdWNoIGRyYWZ0cyBhcyBwYXJ0IG9mIG1lZXRpbmdzLCBldGMpID8NCjxicj4NCjxicj4N Cjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPkl0J3MgYWxzbyBub3QgY2xlYXIgdG8gbWUgdGhhdCB3ZSBjYW4v c2hvdWxkIHN0YXRlIHRoYXQgc3VjaCBkb2N1bWVudHMgd291bGQgYmUgSW5mb3JtYXRpb25hbC4g V2UgbWF5IGRlY2lkZSB0aGF0IHdlIG5lZWQgc29tZSBwcm9jZWR1cmVzIGZvciBob3cgdG8gZGVm aW5lIHN1Y2ggZG9jdW1lbnRzLCBoYXZlIGRlc2lnbmF0ZWQNCiBleHBlcnRzLCBhIGRpcmVjdG9y YXRlLCBldGMuIHRvIHJldmlldyB0aGVtIGV0Yy4gSSdtIGd1ZXNzaW5nIHRoaXMgaXMgYWxsIGEg Yml0IHByZW1hdHVyZSB0aG91Z2gsIGJ1dCBhZ2Fpbiwgd2UgbWF5IHdhbnQgdG8gbm90ZSB0aGF0 IGFzIGFuIGlzc3VlIGluIHRoZSBjaGFydGVyIHRoYXQgdGhlIFdHIG5lZWRzIHRvIHJlc29sdmUg YXQgc29tZSBwb2ludC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6 IzAwNzBDMCI+W0xpbmRhXSBBZ3JlZSB3aXRoIHlvdS4gSSB3aWxsIHNlZSBob3cgQUQgd2FudHMg dG8gYWRkcmVzcyB0aGlzIHN1Z2dlc3Rpb24gLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Pazxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPk5pdHM6 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPi0g Zmlyc3QgcGFyYWdyYXBoOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzIj5zL3RoZSBtaXRpZ2F0ZS9taXRpZ2F0ZSB0aGUvPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4tIHNlY29uZCBsYXN0 IHBhcmFncmFwaDo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpD b25zb2xhcyI+cy9SRkNzIG9mL1JGQ3Mgb3I8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXM7Y29sb3I6IzAwNzBDMCI+W0xpbmRhXSBUaGFuayB5b3UgZm9yIHRoZSBjYXRjaC4gVGhl eSBhcmUgY29ycmVjdGVkIG9uIHRoZSBJMk5TRiB3aWtpIG5vdy4NCjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyBmb3IgdGhlIHF1aWNrIHJlc3BvbnNlIGFuZCB1cGRh dGVzLiA8YnI+DQo8YnI+DQotLSBGbGVtbWluZyA8YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8bzpw PjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+VGhhbmtzPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4tLSBGbGVtbWluZzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29s YXMiPk9uIDgvMjYvMTUgNTozOCBQTSwgTGluZGEgRHVuYmFyIHdyb3RlOjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IEthdGhsZWVuLDwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7 Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29s YXMiPiZndDsgVGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGVkaXRvcmlhbCBjaGFuZ2VzLiBU aGUgY2hhcnRlciBkZXNjcmlwdGlvbg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgb24gdGhlIEkyTlNGIFdpa2kgaGFzIGJlZW4gdXBk YXRlZCB0byByZWZsZWN0IHlvdXIgc3VnZ2VzdGVkIGNoYW5nZXM6DQo8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyA8YSBocmVmPSJodHRw czovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNmL2hvbWUiPg0KaHR0cHM6Ly9z aXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNlMm5zZi9ob21lPC9hPjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ Jmd0OyBMaW5kYTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNv bnNvbGFzIj4mZ3Q7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7 IEZyb206IEkybnNmIFs8YSBocmVmPSJtYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZyI+bWFp bHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBPbiBCZWhhbGYgT2YgS2F0aGxlZW4NCjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7 IE1vcmlhcnR5PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPiZndDsgU2VudDogV2VkbmVzZGF5LCBBdWd1c3QgMjYsIDIwMTUgMjoyOSBQTTwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFRv OiBKb3NlcGggU2Fsb3dleTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzIj4mZ3Q7IENjOiA8YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmciPg0K aTJuc2ZAaWV0Zi5vcmc8L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6Q29uc29sYXMiPiZndDsgU3ViamVjdDogUmU6IFtJMm5zZl0gQ29uc2Vuc3VzIGNhbGwg b24gSTJOU0YgQ2hhcnRlcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgSSBoYXZlIGEgZmV3IGVkaXRvcmlhbCBjaGFuZ2Vz IGluIHRoZSBmb2xsb3dpbmcgdGV4dCB0aGF0IGRvZXMgbm90IGNoYW5nZSB0aGUgbWVhbmluZyBv ZiB0aGUgY2hhcnRlciB0ZXh0Ojwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgQSBOZXR3b3JrIFNlY3VyaXR5IEZ1bmN0aW9u IChOU0YpIGlzIGEgZnVuY3Rpb24gdXNlZCB0byBlbnN1cmUgaW50ZWdyaXR5LCBjb25maWRlbnRp YWxpdHksIGFuZCBhdmFpbGFiaWxpdHkgb2YgbmV0d29yayBjb21tdW5pY2F0aW9ucywgdG8gZGV0 ZWN0IHVud2FudGVkIG5ldHdvcmsgYWN0aXZpdHksIGFuZCB0byBibG9jaw0KIG9yIGF0IGxlYXN0 IHRoZSBtaXRpZ2F0ZSBlZmZlY3RzIG9mIHVud2FudGVkIGFjdGl2aXR5LiBOU0ZzIGFyZSBwcm92 aWRlZCBhbmQgY29uc3VtZWQgaW4gaW5jcmVhc2luZ2x5IGRpdmVyc2UgZW52aXJvbm1lbnRzLiBV c2VycyBvZiBOU0ZzIGNvdWxkIGNvbnN1bWUgbmV0d29yayBzZWN1cml0eSBzZXJ2aWNlcyBob3N0 ZWQgYnkgb25lIG9yIG1vcmUgcHJvdmlkZXJzLCB3aGljaCBtYXkgYmUgdGhlaXIgb3duIGVudGVy cHJpc2UsIHNlcnZpY2UgcHJvdmlkZXJzLA0KIG9yIGEgY29tYmluYXRpb24gb2YgYm90aC4mbmJz cDsgU2ltaWxhcmx5LCBzZXJ2aWNlIHByb3ZpZGVycyBtYXkgb2ZmZXIgdGhlaXIgY3VzdG9tZXJz IG5ldHdvcmsgc2VjdXJpdHkgc2VydmljZXMgdGhhdCBhcmUgZW5mb3JjZWQgYnkgbXVsdGlwbGUg c2VjdXJpdHkgcHJvZHVjdHMgYW5kL29yIGZ1bmN0aW9ucyBmcm9tIGRpZmZlcmVudCB2ZW5kb3Jz LiBOU0ZzIG1heSBiZSBwcm92aWRlZCBieSBwaHlzaWNhbCBhbmQvb3IgdmlydHVhbGl6ZWQgaW5m cmFzdHJ1Y3R1cmUuDQogV2l0aG91dCBzdGFuZGFyZCBpbnRlcmZhY2VzIHRvIGNvbnRyb2wgYW5k IG1vbml0b3IgdGhlIGJlaGF2aW9yIG9mIE5TRnMsIGl0IGhhcyBiZWNvbWUgdmlydHVhbGx5IGlt cG9zc2libGUgZm9yIHByb3ZpZGVycyBvZiBzZWN1cml0eSBzZXJ2aWNlcyB0byBhdXRvbWF0ZSBz ZXJ2aWNlIG9mZmVyaW5ncyB0aGF0IHV0aWxpemUgZGlmZmVyZW50IHNlY3VyaXR5IGZ1bmN0aW9u cyBmcm9tIG11bHRpcGxlIHZlbmRvcnMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBUaGUgZ29hbCBvZiBJMk5TRiBpcyB0 byBkZWZpbmUgYSBzZXQgb2Ygc29mdHdhcmUgaW50ZXJmYWNlcyBhbmQgZGF0YSBtb2RlbHMgZm9y IGNvbnRyb2xsaW5nIGFuZCBtb25pdG9yaW5nIGFzcGVjdHMgb2YgcGh5c2ljYWwgYW5kIHZpcnR1 YWwgTlNGcy4gSWYgdGhlIHdvcmtpbmcgZ3JvdXAgZmluZHMgaXQgbmVjZXNzYXJ5DQogdG8gd29y ayBvbiBhbiBpbmZvcm1hdGlvbiBtb2RlbCBiZWZvcmUgdGhlIGRhdGEgbW9kZWxzLCB0byBoZWxw IHByb3ZpZGUgZ3VpZGFuY2UgYW5kIGRlcml2ZSB0aGUgZGF0YSBtb2RlbHMsIGl0IG1heSBkbyBz by4gVGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCBkZWNpZGUgbGF0ZXIgd2hldGhlciB0aGUgaW5mb3Jt YXRpb24gbW9kZWwgbmVlZHMgdG8gYmUgcHVibGlzaGVkIGFzIGFuIFJGQy48L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBPdGhlciBhc3Bl Y3RzIG9mIE5TRnMsIHN1Y2ggYXMgZGV2aWNlIG9yIG5ldHdvcmsgcHJvdmlzaW9uaW5nIGFuZCBj b25maWd1cmF0aW9uLCBhcmUgb3V0IG9mIHNjb3BlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgQ29udHJvbGxpbmcgYW5k IG1vbml0b3JpbmcgYXNwZWN0cyBvZiBOU0ZzIGluY2x1ZGUgdGhlIGFiaWxpdHkgdG8gc3BlY2lm eSBydWxlcyAoYnkgYSBzaW5nbGUgY29udHJvbGxlciBhdCB0aGUgZmlyc3QgcGhhc2UpLCBxdWVy eSwgYW5kIG1vbml0b3IgTlNGcyBieSBvbmUgb3IgbW9yZSBtYW5hZ2VtZW50IGVudGl0aWVzLiZu YnNwOw0KIFRoZSBpbml0aWFsIHBoYXNlIG9mIEkyTlNGIHdpbGwgb25seSBjb25zaWRlciBvbmUg c2luZ2xlIGNvbnRyb2xsZXIgdGhhdCBjYW4gc3BlY2lmeSBvciBjaGFuZ2UgcnVsZXMgdG8gTlNG cyBiZWNhdXNlIG11bHRpLWhlYWRlZCBjb250cm9sIHJlcXVpcmVzIHRoZSBjb29yZGluYXRpb24g dG8gYXZvaWQgcG90ZW50aWFsIGNvbmZsaWN0IG9mIHJ1bGVzLiBUaGUgTlNGcyBjYW4gYmUgbW9u aXRvcmVkIGJ5IG11bHRpcGxlIGVudGl0aWVzLCBidXQgdGhlDQogZGF0YWJhc2UgdXBkYXRlIGFu ZCBzeW5jaHJvbml6YXRpb24gYW1vbmcgbXVsdGlwbGUgbWFuYWdlbWVudCBlbnRpdGllcyBhcmUg b3V0IG9mIHNjb3BlIGZvciBJMk5TRi4gQXMgdGhlcmUgYXJlIG1hbnkgZGlmZmVyZW50IHNlY3Vy aXR5IHZlbmRvcnMgc3VwcG9ydGluZyBkaWZmZXJlbnQgZmVhdHVyZXMgYW5kIGZ1bmN0aW9ucyBv biB0aGVpciBkZXZpY2VzLCBJMk5TRiB3aWxsIGZvY3VzIG9uIGZsb3ctYmFzZWQgTlNGcyB0aGF0 IHByb3ZpZGUgdHJlYXRtZW50DQogdG8gcGFja2V0cy9mbG93cywgc3VjaCBhcyBJbnRydXNpb24g UHJvdGVjdGlvbi9EZXRlY3Rpb24gU3lzdGVtIChJUFMvSURTKSwgV2ViIGZpbHRlcmluZywgZmxv dyBmaWx0ZXJpbmcsIGRlZXAgcGFja2V0IGluc3BlY3Rpb24sIG9yIHBhdHRlcm4gbWF0Y2hpbmcg YW5kIHJlbWVkaWF0aW9uLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgSTJOU0Ygd2lsbCBzcGVjaWZ5IGludGVyZmFjZXMg YXQgdHdvIGZ1bmN0aW9uYWwgbGV2ZWxzIGZvciB0aGUgY29udHJvbCBhbmQgbW9uaXRvcmluZyBv ZiBuZXR3b3JrIHNlY3VyaXR5IGZ1bmN0aW9uczo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFRoZSBJMk5TRiBDYXBhYmls aXR5IExheWVyIHNwZWNpZmllcyBob3cgdG8gY29udHJvbCBhbmQgbW9uaXRvciBOU0ZzDQo8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBh dCBhIGZ1bmN0aW9uYWwgaW1wbGVtZW50YXRpb24gbGV2ZWwuJm5ic3A7IFRoZSB0ZXJtIOKAnEZ1 bmN0aW9uYWwNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNv bnNvbGFzIj4mZ3Q7IEltcGxlbWVudGF0aW9u4oCdIGlzIHVzZWQgdG8gZW1waGFzaXplIHRoYXQg dGhlIHJ1bGVzIChmb3IgY29udHJvbCBhbmQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBtb25pdG9yKSBvZiBOU0ZzIGhhdmUgdG8gYmUg aW1wbGVtZW50YWJsZSBieSBtb3N0IE5TRnMuIEkyTlNGIHdpbGwgc3RhbmRhcmRpemUgYSBzZXQg b2YgaW50ZXJmYWNlcyBieSB3aGljaCBhIHNlY3VyaXR5IGNvbnRyb2xsZXIgY2FuIGludm9rZSwg b3BlcmF0ZSwgYW5kIG1vbml0b3IgTlNGcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFRoZSBJMk5TRiBTZXJ2aWNlIExh eWVyIGRlZmluZXMgaG93IGNsaWVudHPigJkgc2VjdXJpdHkgcG9saWNpZXMgbWF5IGJlIGV4cHJl c3NlZCB0byBhIHNlY3VyaXR5IGNvbnRyb2xsZXIuIFRoZSBjb250cm9sbGVyIGltcGxlbWVudHMg aXRzIHBvbGljaWVzIGFjY29yZGluZyB0byB0aGUgdmFyaW91cyBjYXBhYmlsaXRpZXMNCiBwcm92 aWRlZCBieSB0aGUgSTJOU0YgY2FwYWJpbGl0eSBMYXllci4mbmJzcDsgVGhlIEkyTlNGIFNlcnZp Y2UgTGF5ZXIgYWxzbyBhbGxvd3MgdGhlIGNsaWVudCB0byBtb25pdG9yIHRoZSBjbGllbnQgc3Bl Y2lmaWMgcG9saWNpZXMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBTaW5jZSB0aGVyZSBjb3VsZCBiZSBtYW55IGRlcHRo cyBvciB0eXBlcyBvZiBTZXJ2aWNlIExheWVyIHBvbGljaWVzLCB0aGUgZm9sbG93aW5nIGJ1bGxl dHMgZnVydGhlciBjbGFyaWZ5IHRoZSBzY29wZSBvZiBJMk5TRjo8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBvIE9ubHkgdGhlIFNpbXBsZSBTZXJ2aWNlIExheWVyIHBvbGljaWVzIHRo YXQgYXJlIG1vZGVsZWQgYXMgY2xvc2VseSBhcyBwb3NzaWJsZSBvbiB0aGUgQ2FwYWJpbGl0eSBM YXllciBhcmUgd2l0aGluIHRoZSBzY29wZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBTdWNoIGEgU2ltcGxlIFNlcnZpY2UgTGF5ZXIg d2lsbCBlbmFibGUgYSBzZWN1cml0eSBjb250cm9sbGVyIHRvIGhhbmRsZSBpc3N1ZXMgbGlrZSBt dWx0aS10ZW5hbmN5IGFuZCB0aGUgY2hvaWNlIGJldHdlZW4gYXZhaWxhYmxlIE5TRnMgZm9yIGEg Z2l2ZW4gcG9saWN5Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IG8gSTJOU0Ygd2ls bCBub3Qgc3BlY2lmeSBhYnN0cmFjdCBvciBzb3BoaXN0aWNhdGVkIHBvbGljaWVzIGZyb20gY2xp ZW50cy4gRXhwcmVzc2luZyBwb2xpY2llcyBpbiB3YXlzIG90aGVyIHRoYW4gdGhlIG1vZGVsIHVz ZWQgYnkgdGhlIENhcGFiaWxpdHkgTGF5ZXIgaXMgb3V0IG9mIHNjb3BlLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IG8gVGhlIHRyYW5zbGF0aW9uIG1lY2hhbmlzbS9tZXRob2RzIGZy b20gU2VydmljZSBMYXllciBwb2xpY2llcyB0byBDYXBhYmlsaXR5IGxheWVyIGNvbW1lbnRzIGFy ZSBvdXQgb2Ygc2NvcGUgZm9yIEkyTlNGLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IEhvd2V2ZXIsIEkyTlNGIHdpbGwgcHJvdmlkZSBh IGRpc2N1c3Npb24gZm9ydW0gZm9yIEluZm9ybWF0aW9uYWwgZHJhZnRzIG9uIGRhdGEgbW9kZWxz LCBBUElzLCBldGMuIHRoYXQgZGVtb25zdHJhdGUgaG93IG1vcmUgY29tcGxleCBTZXJ2aWNlIExh eWVyIHBvbGljaWVzIGFuZCBmb3JtYXRzIG1heSBiZSB0cmFuc2xhdGVkDQogdG8gQ2FwYWJpbGl0 eSBMYXllciBmdW5jdGlvbnMuJm5ic3A7IFN1Y2ggZG9jdW1lbnRzIHdvdWxkIGJlIHB1cnN1ZWQg b3V0c2lkZSB0aGUgV0cuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBTdGFuZGFyZCBpbnRlcmZhY2VzIGZvciBtb25pdG9y aW5nIGFuZCBjb250cm9sbGluZyB0aGUgYmVoYXZpb3Igb2YgTlNGcyBhcmUgZXNzZW50aWFsIGJ1 aWxkaW5nIGJsb2NrcyBmb3IgcHJvdmlkZXJzIG9mIHNlY3VyaXR5IHNlcnZpY2UgdG8gYXV0b21h dGUgdGhlIHVzZSBvZiBkaWZmZXJlbnQgTlNGcyBmcm9tIG11bHRpcGxlDQogdmVuZG9ycy4gVGhp cyB3b3JrIHdpbGwgbGV2ZXJhZ2UgdGhlIGV4aXN0aW5nIHByb3RvY29scyBhbmQgZGF0YSBtb2Rl bHMgZGVmaW5lZCBieSB0aGUgSTJSUywgTkVUQ09ORiwgYW5kIE5FVE1PRCB3b3JraW5nIGdyb3Vw cy4gSWYgZXh0ZW5zaW9ucyB0byB0aGVzZSBwcm90b2NvbHMgb3IgZGF0YSBtb2RlbHMgYXJlIG5l ZWRlZCwgcmVxdWlyZW1lbnRzIHdpbGwgYmUgZGV2ZWxvcGVkIGJ5IHRoaXMgV0csIGFuZCB0aGUg ZXh0ZW5zaW9ucyB3aWxsDQogYmUgZGV2ZWxvcGVkIGluIGNvb3BlcmF0aW9uIHdpdGggdGhlIFdH cyByZXNwb25zaWJsZSBmb3IgdGhlIHByb3RvY29scy48L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFRoZSBJMk5TRiBXR+KA mXMgZGVsaXZlcmFibGVzIGluY2x1ZGU6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBvIEEgc2luZ2xlIGRvY3VtZW50IGNvdmVyaW5nIHVzZSBjYXNlcywgcHJvYmxlbSBz dGF0ZW1lbnQsIGFuZCBnYXAgYW5hbHlzaXMgZG9jdW1lbnQuIFRoaXMgZG9jdW1lbnQgd2lsbCBp bml0aWFsbHkgYmUgcHJvZHVjZWQgZm9yIHJlZmVyZW5jZSBhcyBhIGxpdmluZyBsaXN0IHRvIHRy YWNrIGFuZCByZWNvcmQNCiBkaXNjdXNzaW9uczogdGhlIFdHIG1heSBkZWNpZGUgdG8gbm90IHB1 Ymxpc2ggdGhpcyBkb2N1bWVudCBhcyBhbiBSRkMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgbyBBIGZyYW1ld29yayBkb2N1bWVudCwgcHJlc2VudGluZyBhbiBvdmVydmlldyBvZiB0 aGUgdXNlIG9mIE5TRnMgYW5kIHRoZSBwdXJwb3NlIG9mIHRoZSBtb2RlbHMgZGV2ZWxvcGVkIGJ5 IHRoZSBXRy4gVGhpcyBkb2N1bWVudCB3aWxsIGFsc28gYmUgYSByZWZlcmVuY2UgdGV4dCB0byBn dWlkZSB0aGUgbWFpbg0KIHdvcmsgYW5kIHRoZSBXRyBtYXkgZGVjaWRlIHRvIG5vdCBwdWJsaXNo IHRoaXMgZG9jdW1lbnQgYXMgYW4gUkZDLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IG8gSWYgdGhlIHdvcmtpbmcgZ3JvdXAgY29uc2lkZXJzIGl0IG5lY2Vzc2FyeSwgYSBzaW5nbGUs IHVuaWZpZWQsIEluZm9ybWF0aW9uIE1vZGVsIHRvIGRlc2NyaWJlIHRoZSBjb250cm9sIGFuZCBt b25pdG9yaW5nIG9mIGZsb3ctYmFzZWQgTlNGcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBvIFlBTkcgZGF0YSBtb2RlbHMgZm9yIHRoZSBjb250cm9sIGFuZCBtb25pdG9yaW5nIG9m IE5TRnMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29s YXMiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbyBSZXF1ZXN0cyB0byB0aGUg SUFOQSBmb3IgdGhlIGNyZWF0aW9uIG9mIGEgcmVnaXN0cnkgdGhhdCBlbmFibGVzIHRoZSBjaGFy YWN0ZXJpc3RpY3MgYW5kIGJlaGF2aW9yIG9mIE5TRnMgdG8gYmUgc3BlY2lmaWVkIHVzaW5nIGEg dmVuZG9yLW5ldXRyYWwgdm9jYWJ1bGFyeSB3aXRob3V0IHJlcXVpcmluZyB0aGUNCiBOU0ZzIHRo ZW1zZWx2ZXMgdG8gYmUgc3RhbmRhcmRpemVkLiBUaGUgcmVnaXN0cnkgZW5hYmxlcyB2YXJpb3Vz IG1lY2hhbmlzbXMsIGluY2x1ZGluZyBwb2xpY3kgcnVsZXMsIHRvIGJlIHVzZWQgdG8gbWF0Y2gg bW9uaXRvciBhbmQgY29udHJvbCBmdW5jdGlvbnMgdG8gdGhlIG5lZWRzIG9mIGFuIGFwcGxpY2F0 aW9uIGFuZC9vciBlbnZpcm9ubWVudC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBBbiBleGFtaW5hdGlvbiBvZiBleGlzdGluZyBzZWN1 cmUgY29tbXVuaWNhdGlvbiBtZWNoYW5pc21zIHRvIGlkZW50aWZ5IHRoZSBhcHByb3ByaWF0ZSBv bmVzIGZvciBjYXJyeWluZyB0aGUgY29udHJvbGxpbmcgYW5kIG1vbml0b3JpbmcgaW5mb3JtYXRp b24gYmV0d2VlbiB0aGUgTlNGcyBhbmQgdGhlaXIgbWFuYWdlbWVudA0KIGVudGl0aWVzLiBUaGlz IGRvY3VtZW50IG1heSBhbHNvIGJlIHByb2R1Y2VkIGFzIGEgd29ya2luZyBkb2N1bWVudCB0aGF0 IGlzIG5vdCBwdWJsaXNoZWQgYXMgYW4gUkZDLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgVGhlIFdHIG1heSBhZGRpdGlv bmFsbHkgY2hvb3NlIHRvIGRldmVsb3AgZG9jdW1lbnRzIHRvIGRlc2NyaWJlIHJlcXVpcmVtZW50 cyBmb3IgZXh0ZW5zaW9ucyAoaWYgYW55KSB0byBleGlzdGluZyBwcm90b2NvbHMgdXNlZCBieSB0 aGUgV0csIHRvIGV4cGxhaW4gaG93IHRoZSBkYXRhIG1vZGVscyBhcmUgdXNlZCB0bw0KIG1vbml0 b3IgYW5kIGNvbnRyb2wgZmxvdy1iYXNlZCBOU0ZzLCBhbmQgdG8gZGVzY3JpYmUgaG93IHRvIHVz ZSBJMlJTIGFuZCBORVRDT05GIHRvIGNhcnJ5IHRoZSBjb250ZW50IG9mIHRoZSBkYXRhIG1vZGVs cy4gVGhlc2UgZG9jdW1lbnRzIG1heSBiZSBwdWJsaXNoZWQgYXMgSW5mb3JtYXRpb25hbCBSRkNz IG9mIG1heSBiZSB3b3JraW5nIGRvY3VtZW50cyB0aGF0IGFyZSBkaXNjYXJkZWQgb25jZSB0aGV5 IGhhdmUgdHJpZ2dlcmVkIHRoZSBuZWNlc3NhcnkNCiB3b3JrLjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgVGhlIFdHIHdp bGwgd29yayBjbG9zZWx5IHdpdGggdGhlIEkyUlMsIE5FVENPTkYsIGFuZCBORVRNT0QgV0dzLiBU aGUgV0cgd2lsbCBjb21tdW5pY2F0ZSB3aXRoIGV4dGVybmFsIFNET3MgbGlrZSBFVFNJIE5GViBh bmQgd2lsbCBlbmNvdXJhZ2Ugb3BlbiBzb3VyY2UgY29kZSBkZXZlbG9wbWVudCByZWxhdGVkIHRv IHRoZQ0KIFdHIHNjb3BlIGluIG9yZ2FuaXphdGlvbnMgbGlrZSBPTkYsIE9wZW5TdGFjaywgT0RM LCBhbmQgT1BORlYuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IE9uIFdlZCwgQXVnIDI2LCAyMDE1IGF0IDE6 NDQgQU0sIEpvc2VwaCBTYWxvd2V5ICZsdDs8YSBocmVmPSJtYWlsdG86am9lQHNhbG93ZXkubmV0 Ij5qb2VAc2Fsb3dleS5uZXQ8L2E+Jmd0OyB3cm90ZTo8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgVGhhbmtzIHRvIGV2ZXJ5b25l IHdobyBoYXMgY29udHJpYnV0ZWQgdG93YXJkcyBkZXZlbG9waW5nIHRoZSBjaGFydGVyLjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0 OyBJIGJlbGlldmUgd2UgYXJlIGNsb3NlIHRvIGNvbnNlbnN1cyBzbyB0aGlzIGlzIGEgY29uc2Vu c3VzIGNhbGwgZm9yIHRoZSBJMk5TRjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyBjaGFydGVyLiZuYnNwOyZuYnNwOyBUaGUgY2hh cnRlciB0ZXh0IGlzIGxvY2F0ZWQgYXQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgPGEgaHJlZj0iaHR0cHM6Ly9zaXRlcy5nb29n bGUuY29tL3NpdGUvaW50ZXJmYWNlMm5zZi9ob21lIj4NCmh0dHBzOi8vc2l0ZXMuZ29vZ2xlLmNv bS9zaXRlL2ludGVyZmFjZTJuc2YvaG9tZTwvYT4uJm5ic3A7IFBsZWFzZSBzZW5kIDwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyBj b21tZW50cyBvbiB0aGlzIGNoYXJ0ZXIgdG8gdGhlIEkyTlNGIGxpc3QgYnkgU2VwdGVtYmVyIDIs IDIwMTUuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29s YXMiPiZndDsmZ3Q7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IFRoYW5rIHlvdSw8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsmbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgSm9l PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZn dDsmZ3Q7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPiZndDsmZ3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPiZndDsmZ3Q7IEkybnNmIG1haWxpbmcgbGlzdDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyA8YSBocmVmPSJtYWlsdG86 STJuc2ZAaWV0Zi5vcmciPg0KSTJuc2ZAaWV0Zi5vcmc8L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IDxhIGhyZWY9Imh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YiPg0KaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZjwvYT48L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsmbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_4A95BA014132FF49AE685FAB4B9F17F657D1A2CDdfweml701chm_-- From nobody Thu Aug 27 13:43:01 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC5481A21B8 for ; Thu, 27 Aug 2015 13:42:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wucKjb15nwRi for ; Thu, 27 Aug 2015 13:42:51 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F3511A009D for ; Thu, 27 Aug 2015 13:42:49 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BWV54833; Thu, 27 Aug 2015 20:42:48 +0000 (GMT) Received: from DFWEML705-CHM.china.huawei.com (10.193.5.142) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 27 Aug 2015 21:42:47 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml705-chm ([10.193.5.142]) with mapi id 14.03.0235.001; Thu, 27 Aug 2015 13:42:45 -0700 From: Linda Dunbar To: Flemming Andreasen , Joseph Salowey Thread-Topic: Question about the wording used in I2NSF Q&A WIKI for NSF examples Thread-Index: AQHQ4QjtJCsP7Z+uV0Wa1ciF7GcJrw== Date: Thu, 27 Aug 2015 20:42:44 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D1A2FD@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D19B03@dfweml701-chm> <55DE6F40.3080604@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D1A09B@dfweml701-chm> <55DF6A8A.8090407@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.236] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D1A2FDdfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: [I2nsf] Question about the wording used in I2NSF Q&A WIKI for NSF examples X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 20:43:00 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D1A2FDdfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T3ZlciB0aGUgY291cnNlIG9mIEkyTlNGIHByb2Nlc3MsIG1hbnkgcGVvcGxlIGhhdmUgYXNrZWQg dmVyeSBnb29kIHF1ZXN0aW9ucyBhYm91dCB2YXJpb3VzIGFzcGVjdHMgb2YgSTJOU0Ygb24gdGhl IG1haWxpbmcgbGlzdCwgYW5kIG1hbnkgcGVvcGxlIGhhdmUgZ2l2ZW4gZ29vZCBhbnN3ZXJzIHRv IHRoZSBxdWVzdGlvbnMuIFRob3NlIGdvb2QgcXVlc3Rpb25zIGFuZCBhbnN3ZXJzIGhhdmUgYmVl biBjYXB0dXJlZCBpbiBJMk5TRiBRJkEgV2lraTogaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3Np dGUvaW50ZXJmYWNlMm5zZi9pMm5zZi1xLWEvaTJuc2ZxYQ0KDQpEb2VzIGFueW9uZSByZW1lbWJl ciB3aHkgd2UgaGFkIHRoaXMgY2xhdXNlIGZvciAgdGhlIGV4YW1wbGVzIG9mIE5TRnMNCg0KRmxv dy1iYXNlZCBzZWN1cml0eSBhbHNvIG1lYW5zIHRoYXQgcGFja2V0cyBhcmUgaW5zcGVjdGVkIGlu IHRoZSBvcmRlciB0aGV5IGFyZSByZWNlaXZlZCwgYW5kIHdpdGhvdXQgbW9kaWZpY2F0aW9uIHRv IHRoZSBwYWNrZXQgZHVlIHRvIHRoZSBpbnNwZWN0aW9uIHByb2Nlc3MgKE1BQyByZXdyaXRlcywg VFRMIGRlY3JlbWVudCBhY3Rpb247IGV2ZW4gTkFUIHdvdWxkIGJlIG91dHNpZGUgdGhlIGluc3Bl Y3Rpb24gcHJvY2VzcykuDQoNCk1heWJlIHRoZSBwaHJhc2Ug4oCcd2l0aG91dCDigKbigJ0gc2hv dWxkIGFjdHVhbGx5IGJlIOKAnHdpdGggc29tZSBOU0ZzIG1ha2luZyBtb2RpZmljYXRpb24gdG8g dGhlIHBhY2tldHMgZHVlIHRvIC4u4oCdPyAgKHRoZSBsYXRlc3QgV2lraSBoYXMgcmVtb3ZlZCB0 aGUgbGFzdCBjbGF1c2UpLg0KDQpMaW5kYQ0KDQoNCkZyb206IExpbmRhIER1bmJhcg0KU2VudDog VGh1cnNkYXksIEF1Z3VzdCAyNywgMjAxNSAzOjI3IFBNDQpUbzogJ0ZsZW1taW5nIEFuZHJlYXNl bic7IEthdGhsZWVuIE1vcmlhcnR5OyBKb3NlcGggU2Fsb3dleQ0KQ2M6IGkybnNmQGlldGYub3Jn DQpTdWJqZWN0OiBSRTogRnVydGhlciBjbGFyaWZpY2F0aW9uIGFuZCBleHBsYW5hdGlvbnMgdG8g STJOU0YgY2hhcnRlciBoYXMgYmVlbiBhZGRlZCB0byB0aGUgSTJOU0YgV2lraSBRJkEgKHdhcyBS RTogW0kybnNmXSBDb25zZW5zdXMgY2FsbCBvbiBJMk5TRiBDaGFydGVyDQoNCkZsZW1taW5nLA0K DQpDb21tZW50cyBhcmUgaW5zZXJ0ZWQgYmVsb3c6DQoNCg0KRnJvbTogRmxlbW1pbmcgQW5kcmVh c2VuIFttYWlsdG86ZmFuZHJlYXNAY2lzY28uY29tXQ0KU2VudDogVGh1cnNkYXksIEF1Z3VzdCAy NywgMjAxNSAyOjUzIFBNDQpUbzogTGluZGEgRHVuYmFyOyBLYXRobGVlbiBNb3JpYXJ0eTsgSm9z ZXBoIFNhbG93ZXkNCkNjOiBpMm5zZkBpZXRmLm9yZzxtYWlsdG86aTJuc2ZAaWV0Zi5vcmc+DQpT dWJqZWN0OiBSZTogRnVydGhlciBjbGFyaWZpY2F0aW9uIGFuZCBleHBsYW5hdGlvbnMgdG8gSTJO U0YgY2hhcnRlciBoYXMgYmVlbiBhZGRlZCB0byB0aGUgSTJOU0YgV2lraSBRJkEgKHdhcyBSRTog W0kybnNmXSBDb25zZW5zdXMgY2FsbCBvbiBJMk5TRiBDaGFydGVyDQoNClRoYW5rcyBMaW5kYQ0K DQpUYWtpbmcgYSBxdWljayBsb29rIGF0IHRoZSBXaWtpOg0KLSBJIG5vdGljZWQgdGhhdCB5b3Vy IGRlZmluaXRpb24gb2YgYW4gTlNGIGV4cGxpY2l0bHkgcHJvaGliaXRzIGFueSBwYWNrZXQgbW9k aWZpY2F0aW9uIHN1Y2ggYXMgTkFUIG9yIE1BQyByZXdyaXRlOyB0aGlzIHdpbGwgZXhjbHVkZSBh IGxhcmdlIHBvcnRpb24gb2YgY3VycmVudCBOU0ZzIChlLmcuIGl0J3MgY29tbW9ubHkgdXNlZCBi eSBGV3MgYW5kIEFEQ3MpIC0gaXMgdGhhdCBpbnRlbnRpb25hbCA/DQoNCltMaW5kYV0gVGhpcyBp cyBub3QgbXkgaW50ZW50aW9uLiBJIGRvbuKAmXQgcmVtZW1iZXIgd2hvIHB1dCB0aGUgbGFzdCBj bGF1c2UgaW4gKGkuZS4gd2l0aG91dCBtb2RpZmljYXRpb24gdG8gdGhlIHBhY2tldCBkdWUgdG8g dGhlIGluc3BlY3Rpb24gcHJvY2VzcyAoTUFDIHJld3JpdGVzLCBUVEwgZGVjcmVtZW50IGFjdGlv bjsgZXZlbiBOQVQgd291bGQgYmUgb3V0c2lkZSB0aGUgaW5zcGVjdGlvbiBwcm9jZXNzKS4uIEkg Y2FuIHB1bGwgdGhlIG1haWxpbmcgbGlzdCBpZiBpdCBvayB0byByZW1vdmUgdGhlIGxhc3QgY2xh dXNlLg0KDQoNCg0KLSBZb3UgbWVudGlvbiB0aGF0ICJsb2dnaW5nIiBpcyBvdXQgb2Ygc2NvcGUs IHlldCBpbiBvdGhlciBwbGFjZXMgeW91IHJlZmVyIHRvIHJlcG9ydGluZywgYW5hbHl0aWNzLCBl dGMuLCBhbmQgdGhlIGNoYXJ0ZXIgdGFsa3MgYWJvdXQgbW9uaXRvcmluZy4gQ2FuIHlvdSBjbGFy aWZ5ID8NCltMaW5kYV0gWWVzLCDigJxsb2dnaW5n4oCdIGlzIHJlZmVycmluZyB0byBhbmFseXRp Y3MsIHN1Y2ggYWxnb3JpdGhtcywgYmVuY2htYXJrLCBldGMuDQoNCkFsc28sIGEgY291cGxlIG9m IG15IHF1ZXN0aW9ucyBiZWxvdyBzdGlsbCBzZWVtIHRvIGJlIG9wZW4sIGJ1dCB0aGVyZSBpcyBh IHBhcmFsbGVsIGV4Y2hhbmdlIHdpdGggS2F0aGxlZW4gb24gc29tZSBvZiB0aG9zZSwgc28gbWF5 YmUgd2UgY2FuIHJlc29sdmUgdGhlbSB0aGVyZS4NCltMaW5kYV0gZG8geW91IG1lYW4gdGhlIHF1 ZXN0aW9ucyBsaWtlIOKAnHdoeSBmcmFtZXdvcmssIHVzZSBjYXNlcyBtYXkgbm90IGJlIHB1Ymxp c2hlZCBhcyBSRkNz4oCdPyBDYW4geW91IGhlbHAgbWUgb3V0IHdpdGggdGhlIHF1ZXN0aW9ucz8N Cg0KDQpDaGVlcnMNCg0KLS0gRmxlbW1pbmcNCk9uIDgvMjcvMTUgMTI6MjkgUE0sIExpbmRhIER1 bmJhciB3cm90ZToNCkZsZW1taW5nLA0KDQpJIGhhdmUgdXBkYXRlZCB0aGUgUSZBIG9uIHRoZSBJ Mk5TRiBXaWtpIHRvIGNsYXJpZnkgdGhlIHF1ZXN0aW9ucyB5b3UgaGF2ZTogIGh0dHBzOi8vc2l0 ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaTJuc2YtcS1hL2kybnNmcWENCg0KSG9w ZSBpdCBoZWxwcy4gUGxlYXNlIGxldCBtZSBrbm93IGlmIHlvdSBoYXZlIG1vcmUgcXVlc3Rpb25z IG9yIHN1Z2dlc3Rpb25zIGZvciBJMk5TRiBjaGFydGVyLg0KDQpUaGFua3MsDQpMaW5kYQ0KRnJv bTogRmxlbW1pbmcgQW5kcmVhc2VuIFttYWlsdG86ZmFuZHJlYXNAY2lzY28uY29tXQ0KU2VudDog V2VkbmVzZGF5LCBBdWd1c3QgMjYsIDIwMTUgOTowMSBQTQ0KVG86IExpbmRhIER1bmJhcjsgS2F0 aGxlZW4gTW9yaWFydHk7IEpvc2VwaCBTYWxvd2V5DQpDYzogaTJuc2ZAaWV0Zi5vcmc8bWFpbHRv OmkybnNmQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtJMm5zZl0gQ29uc2Vuc3VzIGNhbGwgb24g STJOU0YgQ2hhcnRlcg0KDQoNCk9uIDgvMjYvMTUgNzozMSBQTSwgTGluZGEgRHVuYmFyIHdyb3Rl Og0KRmxlbW1pbmcsDQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBkZXRhaWxlZCBjb21t ZW50cy4gVGhhbmsgeW91IGZvciBjYXRjaGluZyB0aG9zZSB0eXBvcyAoY29ycmVjdGVkIG9uIHRo ZSBJMk5TRiB3aWtpIG5vdykuIFdlIHJlYWxseSBuZWVkIHRoZSBmcmVzaCBzZXQgb2YgZXllcyB0 byBsb29rIGF0IGl0Lg0KDQpZb3Ugc3RhdGVkOg0KLSBUaGUgdGhpcmQgcGFyYWdyYXBoIHNheXMg dGhhdCAiVGhlIE5TRnMgY2FuIGJlIG1vbml0b3JlZCBieSBtdWx0aXBsZSBlbnRpdGllcy4uLiI7 IGRvZXMgdGhpcyBpbXBseSBhIDE6TiAoZGlyZWN0KSBtb25pdG9yaW5nIHJlbGF0aW9uc2hpcCA/ DQpJZiBzbywgdGhhdCBzZWVtcyB0byBnZXQgdG8gYSBkZXNpZ24gZGVjaXNpb24gdGhhdCBtYXkg YmUgcHJlbWF0dXJlLg0KDQpbTGluZGFdIFRoZSBpbnRlbnQgaXMgdG8gZGVzY3JpYmUgYSBzY2Vu YXJpbyB0aGF0IGEgTlNGIG1heSBzZW5kIGRpZmZlcmVudCBvdXRwdXRzIHRvIGRpZmZlcmVudCBl bnRpdGllcy4gRm9yIGV4YW1wbGUsIHNvbWUgc3RhdGlzdGljcyByZXBvcnQgdG8g4oCcQW5hbHl0 aWNzIHN5c3RlbeKAnSwg4oCccnVsZSBxdWVyeeKAnSB0byBtYW5hZ2VtZW50IGVudGl0eS4gQ2Fu IHlvdSBzdWdnZXN0IGEgYmV0dGVyIHdvcmRpbmcgZm9yIHRoaXM/DQoNCkkgc2VlLiBJJ20gbm90 IHN1cmUgSSB3b3VsZCBnZXQgaW50byB0aGF0IGxldmVsIG9mIGRldGFpbCBpbiB0aGUgY2hhcnRl ciwgYnV0IHNpbmNlIHlvdSBpbnRyb2R1Y2UgdGhlIG5vdGlvbiBvZiAiZmVhdHVyZXMgYW5kIGZ1 bmN0aW9ucyIsIHlvdSBjb3VsZCBmb3IgZXhhbXBsZSBzYXkNCg0KIlRoZSBOU0ZzIG1heSBjb250 YWluIGEgbXVsdGl0dWRlIG9mIGZlYXR1cmVzIGFuZCBmdW5jdGlvbnMsIGVhY2ggb2Ygd2hpY2gg Y2FuIGJlIG1vbml0b3JlZCBieSBhIGRpZmZlcmVudCBlbnRpdHkiDQoNCm9yIHNvbWV0aGluZyBs aWtlIHRoYXQuDQoNCg0KDQoNCk90aGVyIFJlcGxpZXMgYXJlIGluc2VydGVkIGJlbG93Og0KDQoN Cg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEZsZW1taW5nIEFuZHJlYXNlbiBb bWFpbHRvOmZhbmRyZWFzQGNpc2NvLmNvbV0NClNlbnQ6IFdlZG5lc2RheSwgQXVndXN0IDI2LCAy MDE1IDU6NDYgUE0NClRvOiBMaW5kYSBEdW5iYXI7IEthdGhsZWVuIE1vcmlhcnR5OyBKb3NlcGgg U2Fsb3dleQ0KQ2M6IGkybnNmQGlldGYub3JnPG1haWx0bzppMm5zZkBpZXRmLm9yZz4NClN1Ympl Y3Q6IFJlOiBbSTJuc2ZdIENvbnNlbnN1cyBjYWxsIG9uIEkyTlNGIENoYXJ0ZXINCg0KQXBvbG9n aWVzIGZvciBqb2luaW5nIHRoZSBkaXNjdXNzaW9uIGxhdGUgLSBqdXN0IGdvdCBiYWNrIGZyb20g UFRPLiBJbiBhbnkgY2FzZSwgcGxlYXNlIGZpbmQgc29tZSBhZGRpdGlvbmFsIGNvbW1lbnRzIG9u IHRoZSBwcm9wb3NlZCBjaGFydGVyIGJlbG93IChzb21lIG1vcmUgc3Vic3RhbnRpYWwgdGhhbiBv dGhlcnMpOg0KDQotIFRoZSBmaXJzdCBwYXJhZ3JhcGggc3RhcnRzIG91dCBieSBkZWZpbmluZyB3 aGF0IGFuIE5TRiBpcywgYW5kIHdlIGNhbiBhcmd1ZSBhYm91dCBzb21lIG9mIHRoZSBwb2ludHMg aW4gdGhlcmUgZm9yIHZhcmlvdXMgc2VjdXJpdHkgZnVuY3Rpb25zIChlLmcuIEkgbWF5IHdhbnQg dG8gZGV0ZWN0IG5vcm1hbCBuZXR3b3JrIGJlaGF2aW9yIHRvIGVzdGFibGlzaCBhIGJhc2VsaW5l LCB3aGljaCBkb2VzIG5vdCBzZWVtIHRvIGJlIGNvdmVyZWQgYnkgdGhlIGN1cnJlbnQgZGVmaW5p dGlvbikuDQpbTGluZGFdIE92ZXIgdGhlIGNvdXJzZSBvZiBJMk5TRiAoYWJvdXQgYSB5ZWFyKSwg d2UgaGF2ZSBnb25lIHRocm91Z2ggYSBsb25nIGRlYmF0ZSBvbiB3aGF0IE5TRnMgc2hvdWxkIGJl IGNvbnNpZGVyZWQgYnkgSUVURiBJMk5TRi4gQXMgdGhlIHJlc3VsdCBvZiB0aGUgbG9uZyBkZWJh dGUsIHdlIHVzZSB0aGUgZGVmaW5pdGlvbiB0byBjbGFzc2lmeSBhIHNldCBvZiBmdW5jdGlvbnMg dG8gYmUgY29uc2lkZXJlZCBmb3IgSUVURiBJMk5TRiAodGhlbiBmdXJ0aGVyIG5hcnJvd2luZyBk b3duIHRvIEZsb3ctYmFzZWQgTlNGcykuDQpUaGUgZnVuY3Rpb24geW91IGRlc2NyaWJlZCwgaS5l LiBkZXRlY3Rpbmcgbm9ybWFsIG5ldHdvcmsgYmVoYXZpb3IgdG8gZXN0YWJsaXNoIGEgYmFzZWxp bmUgaXMgbm90IGluIHRoZSBzY29wZSBvZiBJMk5TRiwgZXZlbiB0aG91Z2ggdGhpcyBmdW5jdGlv biBjYW4gYWxzbyBiZSAicHJvdmlkZWQgYW5kIGNvbnN1bWVkIGluIGluY3JlYXNpbmdseSBkaXZl cnNlIGVudmlyb25tZW50cyIuDQoNCk9rIC0gdGhlIHBhcnQgYWJvdXQgImRldGVjdCB1bndhbnRl ZCBuZXR3b3JrIGFjdGl2aXR5IiBpcyBmYWlybHkgYnJvYWQgdGhvdWdoLCBhbmQgSSdtIG5vdCBz dXJlIGhvdyB5b3UgZGV0ZWN0IHVud2FudGVkIGFjdGl2aXR5IHdpdGhvdXQgbG9va2luZyBhdCBh bGwgYWN0aXZpdHkgKHdoaWNoIGlzIHdoYXQgdHJpZ2dlcmVkIG15IG9yaWdpbmFsIHF1ZXN0aW9u KS4NCg0KDQoNCkkgZG9uJ3QgdGhpbmsgdGhhdCB3aWxsIGJlIGEgcHJvZHVjdGl2ZSBkaXNjdXNz aW9uIHRob3VnaCwgbm9yIGlzIGl0IG5lY2Vzc2FyeS4gSW5zdGVhZCwgSSdkIHN1Z2dlc3Qgd2Ug YXJlIG5vdCBvdmVybHkgcHJlc2NyaXB0aXZlLCBidXQgcmF0aGVyIHZpZXcgdGhlc2UgYXMgcG9z c2libGUgTlNGIGZlYXR1cmVzLCBhbmQgc3VwcGxlbWVudCB0aGVtIHdpdGggc29tZSBhY3R1YWwg cHJvZHVjdCBleGFtcGxlcyAoZS5nLiBGVywgTkdGVywgSVBTLCBldGMuKS4gU2ltaWxhcmx5LCBz aW5jZSB3ZSBsaW1pdCBvdXIgc2NvcGUgdG8gImZsb3ctYmFzZWQgTlNGcyIsIHdlIG1heSB3YW50 IHRvIG1ha2UgdGhhdCBjbGVhciBoZXJlLiBBbiBleGFtcGxlIG9mIGEgc2VjdXJpdHkgZnVuY3Rp b24gdGhhdCB3b3VsZCAqbm90KiBiZSBpbiBzY29wZSBtYXkgYmUgaGVscGZ1bCB0b28uDQoNCltM aW5kYV0gQWxsIHRoZSBOU0ZzIGluIEkyTlNGIGNvbnRleHQgYXJlIOKAnGZlYXR1cmVz4oCdLCB3 aG9zZSBmb3JtIGZhY3RvciBjYW4gYmUgcHJvdmlkZWQgcGh5c2ljYWwgYm94IG9yIHZpcnR1YWxp emVkIGZvcm1hdC4gU29tZSBmb3JtIGZhY3RvcnMsIGkuZS4gZGV2aWNlcyBvciBWTSwgY2FuIHBy b3ZpZGUgbXVsdGlwbGUg4oCcZnVuY3Rpb25z4oCdLiBEbyB5b3UgdGhpbmsgdGhlIHNlbnRlbmNl cyBpbiB0aGUgdGhpcmQgcGFyYWdyYXBoIGlzIGdvb2QgZW5vdWdoIHRvIGRlc2NyaWJlIHdoYXQg eW91IHdhbnQ/DQoNCuKAnEkyTlNGIHdpbGwgZm9jdXMgb24gZmxvdy1iYXNlZCBOU0ZzIHRoYXQg cHJvdmlkZSB0cmVhdG1lbnQgdG8gcGFja2V0cy9mbG93cywgc3VjaCBhcyBJbnRydXNpb24gUHJv dGVjdGlvbi9EZXRlY3Rpb24gU3lzdGVtIChJUFMvSURTKSwgV2ViIGZpbHRlcmluZywgZmxvdyBm aWx0ZXJpbmcsIGRlZXAgcGFja2V0IGluc3BlY3Rpb24sIG9yIHBhdHRlcm4gbWF0Y2hpbmcgYW5k IHJlbWVkaWF0aW9uLuKAnQ0KDQoNClRoZSBleGFtcGxlcyBoZXJlIGFyZSBjbGVhcjsgSSdtIGxl c3MgY2xlYXIgb24gd2hhdCBlbHNlIG1pZ2h0IGJlIGluIHNjb3BlLiBGb3IgZXhhbXBsZSwgd291 bGQgYSBERG9TIGRldGVjdGlvbiBhbmQgbWl0aWdhdGlvbiBzeXN0ZW0gYmUgaW4gc2NvcGUgKGtl ZXBpbmcgaW4gbWluZCBpdCBtYXkgdXNlIGEgY29tYmluYXRpb24gb2YgcGFja2V0IGluc3BlY3Rp b24gYW5kIHRlbGVtZXRyeS1iYXNlZCBkZXRlY3Rpb24gYW5kIG1pdGlnYXRpb24gYW5kIHRoYXQg ZXN0YWJsaXNoaW5nIGEgIm5vcm1hbCIgYmFzZWxpbmUgaXMgb2Z0ZW4gcGFydCBvZiB0aGUgb3Bl cmF0aW9uKSA/DQoNCg0KDQoNCi0gVGhlIGNoYXJ0ZXIgc2VlbXMgdG8gb3BlcmF0ZSB3aXRoIHRo ZSBub3Rpb24gb2YgYSAic2VjdXJpdHkgY29udHJvbGxlciIgdGhhdCBpbnRlcmFjdHMgd2l0aCB0 aGUgIk5TRiIuIElmIEkgdW5kZXJzdGFuZCBjb3JyZWN0bHksIHRoZSBzZWN1cml0eSBjb250cm9s bGVyIGltcGxlbWVudHMgdGhlICJTZXJ2aWNlIExheWVyIiBhbmQgdGhlIE5TRiBpbXBsZW1lbnRz IHRoZSAiQ2FwYWJpbGl0eSBMYXllciIuIEZ1cnRoZXJtb3JlLCB3ZSBoYXZlICJjbGllbnRzIiB0 aGF0IGludGVyYWN0IHdpdGggdGhlIHNlY3VyaXR5IGNvbnRyb2xsZXIgdG8gaW1wbGVtZW50IHBv bGljaWVzIChieSBsZXZlcmFnaW5nIHRoZSBzZXJ2aWNlIGxheWVyKS4gSWYgc28sIGl0IHdvdWxk IGJlIGdvb2QgdG8gY2xhcmlmeSB0aGlzIHRheG9ub215IGVhcmxpZXIgaW4gdGhlIGNoYXJ0ZXIu IElmIG5vdCwgdGhlbiBJIHByb2JhYmx5IG5lZWQgc29tZSBjbGFyaWZpY2F0aW9ucyBpbiB0aGUg dGV4dC4NCg0KW0xpbmRhXSDigJxTZWN1cml0eSBjb250cm9sbGVy4oCdIGlzIGEgY29uY2VwdHVh bCBlbnRpdHksIG1lYW5pbmcgYW4gZW50aXR5IHRvIHNlbmQgaW1wbGVtZW50YWJsZSBydWxlcyAo Y2FwYWJpbGl0eSBsYXllcikgdG8gdGhlIE5TRnMuIFRoZXJlIGNvdWxkIGJlIG11bHRpcGxlIG9m IHRoZW0sIGVhY2ggcmVzcG9uc2libGUgZm9yIG9uZSB0eXBlIG9mIE5TRiAoaS5lLiBtYW5hZ2lu ZyB0aGUgaW5zdGFuY2VzIG9mIHRoZSBOU0ZzKS4NCkkyTlNGIGluY2x1ZGVzIOKAnFNpbXBsZSBT ZXJ2aWNlIExheWVy4oCdIHRoYXQgbW9kZWxzIGNsb3NlbHkgdG8gdGhlIOKAnENhcGFiaWxpdHkg TGF5ZXLigJ0uIEZvciBleGFtcGxlOiBjbGllbnQgY2FuIHNwZWNpZnkgdGhlIHJ1bGVzIHdpdGhv dXQgc3BlY2lmeSB3aGljaCBpbnN0YW5jZXMgb2YgdGhlIE5TRi4gVGhlIOKAnENvbnRyb2xsZXLi gJ0gbWFuYWdlIHRoZSBpbnN0YW5jZXMsIGFzIGRlc2NyaWJlZCBieSBUaGUgZmlndXJlIGluIEky TlNGIEZyYW1ld29yayBkb2N1bWVudDoNCg0KKyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0g LSArICArIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtICsNCnwgIE5TRi1BICArLS0tLS0t LS0tLS0tLS0rICAgICAgfCAgfCAgTlNGLUIgICstLS0tLS0tLS0tLS0tLSsgICAgICB8DQp8ICAg ICAgICAgfCAgIENvbnRyb2xsZXJ8ICAgICAgfCAgfCAgICAgICAgIHwgICBDb250cm9sbGVyfCAg ICAgIHwNCnwgICAgICAgICArLS0tLS0tLS0tLS0tLS0rICAgICAgfCAgfCAgICAgICAgICstLS0t LS0tLS0tLS0tLSsgICAgICB8DQp8ICsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSArIHwgIHwg KyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtICsgfA0KfCB8Ky0tLS0tLS0tLSsgICAgICstLS0t LS0tLS0rfCB8ICB8IHwrLS0tLS0tLS0tKyAgICAgKy0tLS0tLS0tLSt8IHwNCnwgfHwgTlNGLUEj MSB8IC4uLiB8ICBOU0YtQSNufHwgfCAgfCB8fCAgTlNGLUIjMXwgLi4uIHwgIE5TRi1CI218fCB8 DQp8IHwrLS0tLS0tLS0tKyAgICAgKy0tLS0tLS0tLSt8IHwgIHwgfCstLS0tLS0tLS0rICAgICAr LS0tLS0tLS0tK3wgfA0KfCB8ICAgICAgICAgTlNGLUEgY2x1c3RlciAgICAgfCB8ICB8IHwgICAg ICAgICAgTlNGLUIgY2x1c3RlciAgICB8IHwNCnwgKyAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAt ICsgfCAgfCArIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gKyB8DQorIC0gLSAtIC0gLSAtIC0g LSAtIC0gLSAtIC0gLSAtICsgICsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gKw0KDQpP ayAtIHRoaXMgYmFzaWMgZnJhbWV3b3JrIHNlZW1zIHRvIGJlIGZvdW5kYXRpb25hbCB0byB0aGUg c3RydWN0dXJlIG9mIHRoZSB3b3JrIHRoZSBncm91cCBpcyBkb2luZy4gSWYgc28sIEkgdGhpbmsg aXQgd291bGQgYmUgaGVscGZ1bCB0byBvdXRsaW5lIGl0ICh2ZXJiYWxseSkgaW4gdGhlIGNoYXJ0 ZXIuDQoNCg0KDQotIEluIHRoZSBkZWZpbml0aW9uIG9mIHRoZSAiQ2FwYWJpbGl0eSBMYXllciIs IHRoZXJlIGlzIGEgc3RhdGVtZW50IGFib3V0ICJydWxlcy4uLm9mIE5TRnMgaGF2ZSB0byBiZSBp bXBsZW1lbnRhYmxlIGJ5IG1vc3QgTlNGcyIuIERvIHlvdSBtZWFuIGFsbCBOU0ZzIG9yIE5TRnMg b2YgYSBnaXZlbiB0eXBlIChJIGFzc3VtZSB3ZSBoYXZlIGRpZmZlcmVudCB0eXBlcyBvZiBOU0Zz KSA/DQpbTGluZGFdIHllcy4NCg0KLSBQb2xpY2llcyBhcmUgbGFiZWxlZCBhcyAic2ltcGxlIiBv ciAiYWJzdHJhY3Qgb3Igc29waGlzdGljYXRlZCINCndpdGhvdXQgZnVydGhlciBkZWZpbml0aW9u OyBJJ20gbm90IHN1cmUgd2hlcmUgd2UgZHJhdyB0aGF0IGxpbmUgb3IgaG93IHRvIGRvIHRoYXQg aW4gdGhlIGNoYXJ0ZXI7IG1heWJlIGNsYXJpZnlpbmcgdGhhdCBwYXJ0IG5lZWRzIHRvIGJlIGEg ZGVsaXZlcmFibGUgPw0KW0xpbmRhXSDigJxzaW1wbGXigJ0gbWVhbnMgdGhhdCB0aGV5IGNhbiBi ZSBkaXJlY3RseSB0cmFuc2xhdGVkIHRvIGNhcGFiaWxpdHkgbGF5ZXIgcnVsZXMgd2l0aCBzaW1w bGUgbWFwcGluZywgZS5nLiB3aXRob3V0IGV4cGxpY2l0IHN0YXRpbmcgd2hpY2ggaW5zdGFudGlh dGlvbiwgbWF5IGhhdmUgY3VzdG9tZXIgSUQgdGhhdCBjYW4gYmUgdHJhbnNsYXRlZCB0byBzb21l IHRhZ3MgY2FycmllZCBieSBwYWNrZXRzDQoNCk9rIC0gaWYgdGhhdCdzIHRoZSBkZWZpbml0aW9u IHdlIHdhbnQgdG8gdXNlLCBjYW4gd2UgY2xhcmlmeSBpdCBpbiB0aGUgY2hhcnRlciA/DQoNCg0K LSBBIG51bWJlciBvZiBkZWxpdmVyYWJsZXMgbWF5IG5vdCBiZSBwdWJsaXNoZWQgYXMgYW4gUkZD OyB3aHkgbm90ICh0aGV5IHNlZW0gdG8gc2V0IHRoZSBzdGFnZSBmb3Igc2V2ZXJhbCBvdGhlciBk ZWxpdmVyYWJsZXMgYW5kIGhlbmNlIGFyZSByZWxldmFudCBmb3IgY29uc3VtZXJzIG9mIHRoZSBp bmZvcm1hdGlvbiBhbmQgZGF0YSBtb2RlbHMgbGF0ZXIgb24pID8NCg0KW0xpbmRhXSBUaGUgV0cg Z3JvdXAgbWF5IGRlY2lkZSB0byBwdWJsaXNoIHRoZW0gYXMgUkZDIG9yIG5vdCBsYXRlci4gQnV0 IHRoZSBjaGFydGVyIGRvZXNu4oCZdCBzcGVjaWZ5IHdoaWNoIHdheS4gVGhhdCBpcyBob3cgSUVT RyB3YW50ZWQuDQoNCk9rLg0KDQotIFRoZSBwYXJ0IGFib3V0IEkyTlNGIHByb3ZpZGluZyBhICJk aXNjdXNzaW9uIGZvcnVtIGZvciBJbmZvcm1hdGlvbmFsIGRyYWZ0cyBvbi4uLi4uW21vcmUgY29t cGxleCBTZXJ2aWNlIExheWVyIHBvbGljaWVzXS4uLiIgaXMgY29uZnVzaW5nIHRvIG1lLiBUaGUg d29yayBzZWVtcyB0byBiZSBwdXJzdWVkIG91dHNpZGUgdGhlIFdHLCBzbyB0aGVyZSBhcmUgbm8g ZGVsaXZlcmFibGVzIGFuZCBwcmVzdW1hYmx5IG5vIGFnZW5kYSB0aW1lIHdpbGwgYmUgYWxsb2Nh dGVkIGVpdGhlci4NCltMaW5kYV0gdGhpcyBpcyB0byBhZGRyZXNzIHRoZSBpbmZvcm1hdGlvbiBk b2N1bWVudHMgdGhhdCBkZXNjcmliZSB0aGUgSTJOU0YgZGVtbywgb3BlbiBzb3VyY2Ugb3IgaW50 ZXJvcGVyYWJpbGl0eSBpbml0aWF0aXZlcyB0aGF0IGFyZSBjb25kdWN0ZWQgb3V0c2lkZSB0aGUg V0cuIEUuZyBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC14aWUtaTJuc2Yt ZGVtby1vdXRsaW5lLWRlc2lnbi8NCg0KT2sgLSB0aGFua3MgZm9yIHRoZSBwb2ludGVyLCBob3dl dmVyIGZyb20gYSBXRyBwb2ludCBvZiB2aWV3LCBJJ20gbm90IGNsZWFyIG9uIHdoYXQgaXQgbWVh bnMgdG8gaGF2ZSBhIGRpc2N1c3Npb24gZm9ydW0gYW5kIHdoYXQsIGlmIGFueXRoaW5nLCB0aGUg V0cgd2lsbCBkbyB3aXRoIGl0IChlLmcuIGRpc2N1c3Mgc3VjaCBkcmFmdHMgYXMgcGFydCBvZiBt ZWV0aW5ncywgZXRjKSA/DQoNCg0KDQoNCkl0J3MgYWxzbyBub3QgY2xlYXIgdG8gbWUgdGhhdCB3 ZSBjYW4vc2hvdWxkIHN0YXRlIHRoYXQgc3VjaCBkb2N1bWVudHMgd291bGQgYmUgSW5mb3JtYXRp b25hbC4gV2UgbWF5IGRlY2lkZSB0aGF0IHdlIG5lZWQgc29tZSBwcm9jZWR1cmVzIGZvciBob3cg dG8gZGVmaW5lIHN1Y2ggZG9jdW1lbnRzLCBoYXZlIGRlc2lnbmF0ZWQgZXhwZXJ0cywgYSBkaXJl Y3RvcmF0ZSwgZXRjLiB0byByZXZpZXcgdGhlbSBldGMuIEknbSBndWVzc2luZyB0aGlzIGlzIGFs bCBhIGJpdCBwcmVtYXR1cmUgdGhvdWdoLCBidXQgYWdhaW4sIHdlIG1heSB3YW50IHRvIG5vdGUg dGhhdCBhcyBhbiBpc3N1ZSBpbiB0aGUgY2hhcnRlciB0aGF0IHRoZSBXRyBuZWVkcyB0byByZXNv bHZlIGF0IHNvbWUgcG9pbnQuDQoNCltMaW5kYV0gQWdyZWUgd2l0aCB5b3UuIEkgd2lsbCBzZWUg aG93IEFEIHdhbnRzIHRvIGFkZHJlc3MgdGhpcyBzdWdnZXN0aW9uIC4NCk9rDQoNCg0KDQpOaXRz Og0KLSBmaXJzdCBwYXJhZ3JhcGg6DQpzL3RoZSBtaXRpZ2F0ZS9taXRpZ2F0ZSB0aGUvDQoNCi0g c2Vjb25kIGxhc3QgcGFyYWdyYXBoOg0Kcy9SRkNzIG9mL1JGQ3Mgb3INCg0KW0xpbmRhXSBUaGFu ayB5b3UgZm9yIHRoZSBjYXRjaC4gVGhleSBhcmUgY29ycmVjdGVkIG9uIHRoZSBJMk5TRiB3aWtp IG5vdy4NCg0KVGhhbmtzIGZvciB0aGUgcXVpY2sgcmVzcG9uc2UgYW5kIHVwZGF0ZXMuDQoNCi0t IEZsZW1taW5nDQoNCg0KVGhhbmtzDQoNCi0tIEZsZW1taW5nDQoNCg0KT24gOC8yNi8xNSA1OjM4 IFBNLCBMaW5kYSBEdW5iYXIgd3JvdGU6DQo+IEthdGhsZWVuLA0KPg0KPiBUaGFuayB5b3UgdmVy eSBtdWNoIGZvciB0aGUgZWRpdG9yaWFsIGNoYW5nZXMuIFRoZSBjaGFydGVyIGRlc2NyaXB0aW9u DQo+IG9uIHRoZSBJMk5TRiBXaWtpIGhhcyBiZWVuIHVwZGF0ZWQgdG8gcmVmbGVjdCB5b3VyIHN1 Z2dlc3RlZCBjaGFuZ2VzOg0KPiBodHRwczovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9pbnRlcmZh Y2UybnNmL2hvbWUNCj4NCj4NCj4gTGluZGENCj4NCj4NCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS0NCj4gRnJvbTogSTJuc2YgW21haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSBPbiBC ZWhhbGYgT2YgS2F0aGxlZW4NCj4gTW9yaWFydHkNCj4gU2VudDogV2VkbmVzZGF5LCBBdWd1c3Qg MjYsIDIwMTUgMjoyOSBQTQ0KPiBUbzogSm9zZXBoIFNhbG93ZXkNCj4gQ2M6IGkybnNmQGlldGYu b3JnPG1haWx0bzppMm5zZkBpZXRmLm9yZz4NCj4gU3ViamVjdDogUmU6IFtJMm5zZl0gQ29uc2Vu c3VzIGNhbGwgb24gSTJOU0YgQ2hhcnRlcg0KPg0KPiBJIGhhdmUgYSBmZXcgZWRpdG9yaWFsIGNo YW5nZXMgaW4gdGhlIGZvbGxvd2luZyB0ZXh0IHRoYXQgZG9lcyBub3QgY2hhbmdlIHRoZSBtZWFu aW5nIG9mIHRoZSBjaGFydGVyIHRleHQ6DQo+DQo+IEEgTmV0d29yayBTZWN1cml0eSBGdW5jdGlv biAoTlNGKSBpcyBhIGZ1bmN0aW9uIHVzZWQgdG8gZW5zdXJlIGludGVncml0eSwgY29uZmlkZW50 aWFsaXR5LCBhbmQgYXZhaWxhYmlsaXR5IG9mIG5ldHdvcmsgY29tbXVuaWNhdGlvbnMsIHRvIGRl dGVjdCB1bndhbnRlZCBuZXR3b3JrIGFjdGl2aXR5LCBhbmQgdG8gYmxvY2sgb3IgYXQgbGVhc3Qg dGhlIG1pdGlnYXRlIGVmZmVjdHMgb2YgdW53YW50ZWQgYWN0aXZpdHkuIE5TRnMgYXJlIHByb3Zp ZGVkIGFuZCBjb25zdW1lZCBpbiBpbmNyZWFzaW5nbHkgZGl2ZXJzZSBlbnZpcm9ubWVudHMuIFVz ZXJzIG9mIE5TRnMgY291bGQgY29uc3VtZSBuZXR3b3JrIHNlY3VyaXR5IHNlcnZpY2VzIGhvc3Rl ZCBieSBvbmUgb3IgbW9yZSBwcm92aWRlcnMsIHdoaWNoIG1heSBiZSB0aGVpciBvd24gZW50ZXJw cmlzZSwgc2VydmljZSBwcm92aWRlcnMsIG9yIGEgY29tYmluYXRpb24gb2YgYm90aC4gIFNpbWls YXJseSwgc2VydmljZSBwcm92aWRlcnMgbWF5IG9mZmVyIHRoZWlyIGN1c3RvbWVycyBuZXR3b3Jr IHNlY3VyaXR5IHNlcnZpY2VzIHRoYXQgYXJlIGVuZm9yY2VkIGJ5IG11bHRpcGxlIHNlY3VyaXR5 IHByb2R1Y3RzIGFuZC9vciBmdW5jdGlvbnMgZnJvbSBkaWZmZXJlbnQgdmVuZG9ycy4gTlNGcyBt YXkgYmUgcHJvdmlkZWQgYnkgcGh5c2ljYWwgYW5kL29yIHZpcnR1YWxpemVkIGluZnJhc3RydWN0 dXJlLiBXaXRob3V0IHN0YW5kYXJkIGludGVyZmFjZXMgdG8gY29udHJvbCBhbmQgbW9uaXRvciB0 aGUgYmVoYXZpb3Igb2YgTlNGcywgaXQgaGFzIGJlY29tZSB2aXJ0dWFsbHkgaW1wb3NzaWJsZSBm b3IgcHJvdmlkZXJzIG9mIHNlY3VyaXR5IHNlcnZpY2VzIHRvIGF1dG9tYXRlIHNlcnZpY2Ugb2Zm ZXJpbmdzIHRoYXQgdXRpbGl6ZSBkaWZmZXJlbnQgc2VjdXJpdHkgZnVuY3Rpb25zIGZyb20gbXVs dGlwbGUgdmVuZG9ycy4NCj4NCj4gVGhlIGdvYWwgb2YgSTJOU0YgaXMgdG8gZGVmaW5lIGEgc2V0 IG9mIHNvZnR3YXJlIGludGVyZmFjZXMgYW5kIGRhdGEgbW9kZWxzIGZvciBjb250cm9sbGluZyBh bmQgbW9uaXRvcmluZyBhc3BlY3RzIG9mIHBoeXNpY2FsIGFuZCB2aXJ0dWFsIE5TRnMuIElmIHRo ZSB3b3JraW5nIGdyb3VwIGZpbmRzIGl0IG5lY2Vzc2FyeSB0byB3b3JrIG9uIGFuIGluZm9ybWF0 aW9uIG1vZGVsIGJlZm9yZSB0aGUgZGF0YSBtb2RlbHMsIHRvIGhlbHAgcHJvdmlkZSBndWlkYW5j ZSBhbmQgZGVyaXZlIHRoZSBkYXRhIG1vZGVscywgaXQgbWF5IGRvIHNvLiBUaGUgd29ya2luZyBn cm91cCB3aWxsIGRlY2lkZSBsYXRlciB3aGV0aGVyIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCBuZWVk cyB0byBiZSBwdWJsaXNoZWQgYXMgYW4gUkZDLg0KPiBPdGhlciBhc3BlY3RzIG9mIE5TRnMsIHN1 Y2ggYXMgZGV2aWNlIG9yIG5ldHdvcmsgcHJvdmlzaW9uaW5nIGFuZCBjb25maWd1cmF0aW9uLCBh cmUgb3V0IG9mIHNjb3BlLg0KPg0KPiBDb250cm9sbGluZyBhbmQgbW9uaXRvcmluZyBhc3BlY3Rz IG9mIE5TRnMgaW5jbHVkZSB0aGUgYWJpbGl0eSB0byBzcGVjaWZ5IHJ1bGVzIChieSBhIHNpbmds ZSBjb250cm9sbGVyIGF0IHRoZSBmaXJzdCBwaGFzZSksIHF1ZXJ5LCBhbmQgbW9uaXRvciBOU0Zz IGJ5IG9uZSBvciBtb3JlIG1hbmFnZW1lbnQgZW50aXRpZXMuICBUaGUgaW5pdGlhbCBwaGFzZSBv ZiBJMk5TRiB3aWxsIG9ubHkgY29uc2lkZXIgb25lIHNpbmdsZSBjb250cm9sbGVyIHRoYXQgY2Fu IHNwZWNpZnkgb3IgY2hhbmdlIHJ1bGVzIHRvIE5TRnMgYmVjYXVzZSBtdWx0aS1oZWFkZWQgY29u dHJvbCByZXF1aXJlcyB0aGUgY29vcmRpbmF0aW9uIHRvIGF2b2lkIHBvdGVudGlhbCBjb25mbGlj dCBvZiBydWxlcy4gVGhlIE5TRnMgY2FuIGJlIG1vbml0b3JlZCBieSBtdWx0aXBsZSBlbnRpdGll cywgYnV0IHRoZSBkYXRhYmFzZSB1cGRhdGUgYW5kIHN5bmNocm9uaXphdGlvbiBhbW9uZyBtdWx0 aXBsZSBtYW5hZ2VtZW50IGVudGl0aWVzIGFyZSBvdXQgb2Ygc2NvcGUgZm9yIEkyTlNGLiBBcyB0 aGVyZSBhcmUgbWFueSBkaWZmZXJlbnQgc2VjdXJpdHkgdmVuZG9ycyBzdXBwb3J0aW5nIGRpZmZl cmVudCBmZWF0dXJlcyBhbmQgZnVuY3Rpb25zIG9uIHRoZWlyIGRldmljZXMsIEkyTlNGIHdpbGwg Zm9jdXMgb24gZmxvdy1iYXNlZCBOU0ZzIHRoYXQgcHJvdmlkZSB0cmVhdG1lbnQgdG8gcGFja2V0 cy9mbG93cywgc3VjaCBhcyBJbnRydXNpb24gUHJvdGVjdGlvbi9EZXRlY3Rpb24gU3lzdGVtIChJ UFMvSURTKSwgV2ViIGZpbHRlcmluZywgZmxvdyBmaWx0ZXJpbmcsIGRlZXAgcGFja2V0IGluc3Bl Y3Rpb24sIG9yIHBhdHRlcm4gbWF0Y2hpbmcgYW5kIHJlbWVkaWF0aW9uLg0KPg0KPiBJMk5TRiB3 aWxsIHNwZWNpZnkgaW50ZXJmYWNlcyBhdCB0d28gZnVuY3Rpb25hbCBsZXZlbHMgZm9yIHRoZSBj b250cm9sIGFuZCBtb25pdG9yaW5nIG9mIG5ldHdvcmsgc2VjdXJpdHkgZnVuY3Rpb25zOg0KPg0K PiBUaGUgSTJOU0YgQ2FwYWJpbGl0eSBMYXllciBzcGVjaWZpZXMgaG93IHRvIGNvbnRyb2wgYW5k IG1vbml0b3IgTlNGcw0KPiBhdCBhIGZ1bmN0aW9uYWwgaW1wbGVtZW50YXRpb24gbGV2ZWwuICBU aGUgdGVybSDigJxGdW5jdGlvbmFsDQo+IEltcGxlbWVudGF0aW9u4oCdIGlzIHVzZWQgdG8gZW1w aGFzaXplIHRoYXQgdGhlIHJ1bGVzIChmb3IgY29udHJvbCBhbmQNCj4gbW9uaXRvcikgb2YgTlNG cyBoYXZlIHRvIGJlIGltcGxlbWVudGFibGUgYnkgbW9zdCBOU0ZzLiBJMk5TRiB3aWxsIHN0YW5k YXJkaXplIGEgc2V0IG9mIGludGVyZmFjZXMgYnkgd2hpY2ggYSBzZWN1cml0eSBjb250cm9sbGVy IGNhbiBpbnZva2UsIG9wZXJhdGUsIGFuZCBtb25pdG9yIE5TRnMuDQo+DQo+IFRoZSBJMk5TRiBT ZXJ2aWNlIExheWVyIGRlZmluZXMgaG93IGNsaWVudHPigJkgc2VjdXJpdHkgcG9saWNpZXMgbWF5 IGJlIGV4cHJlc3NlZCB0byBhIHNlY3VyaXR5IGNvbnRyb2xsZXIuIFRoZSBjb250cm9sbGVyIGlt cGxlbWVudHMgaXRzIHBvbGljaWVzIGFjY29yZGluZyB0byB0aGUgdmFyaW91cyBjYXBhYmlsaXRp ZXMgcHJvdmlkZWQgYnkgdGhlIEkyTlNGIGNhcGFiaWxpdHkgTGF5ZXIuICBUaGUgSTJOU0YgU2Vy dmljZSBMYXllciBhbHNvIGFsbG93cyB0aGUgY2xpZW50IHRvIG1vbml0b3IgdGhlIGNsaWVudCBz cGVjaWZpYyBwb2xpY2llcy4NCj4NCj4gU2luY2UgdGhlcmUgY291bGQgYmUgbWFueSBkZXB0aHMg b3IgdHlwZXMgb2YgU2VydmljZSBMYXllciBwb2xpY2llcywgdGhlIGZvbGxvd2luZyBidWxsZXRz IGZ1cnRoZXIgY2xhcmlmeSB0aGUgc2NvcGUgb2YgSTJOU0Y6DQo+ICAgICAgbyBPbmx5IHRoZSBT aW1wbGUgU2VydmljZSBMYXllciBwb2xpY2llcyB0aGF0IGFyZSBtb2RlbGVkIGFzIGNsb3NlbHkg YXMgcG9zc2libGUgb24gdGhlIENhcGFiaWxpdHkgTGF5ZXIgYXJlIHdpdGhpbiB0aGUgc2NvcGUu DQo+IFN1Y2ggYSBTaW1wbGUgU2VydmljZSBMYXllciB3aWxsIGVuYWJsZSBhIHNlY3VyaXR5IGNv bnRyb2xsZXIgdG8gaGFuZGxlIGlzc3VlcyBsaWtlIG11bHRpLXRlbmFuY3kgYW5kIHRoZSBjaG9p Y2UgYmV0d2VlbiBhdmFpbGFibGUgTlNGcyBmb3IgYSBnaXZlbiBwb2xpY3kuDQo+ICAgICAgbyBJ Mk5TRiB3aWxsIG5vdCBzcGVjaWZ5IGFic3RyYWN0IG9yIHNvcGhpc3RpY2F0ZWQgcG9saWNpZXMg ZnJvbSBjbGllbnRzLiBFeHByZXNzaW5nIHBvbGljaWVzIGluIHdheXMgb3RoZXIgdGhhbiB0aGUg bW9kZWwgdXNlZCBieSB0aGUgQ2FwYWJpbGl0eSBMYXllciBpcyBvdXQgb2Ygc2NvcGUuDQo+ICAg ICAgbyBUaGUgdHJhbnNsYXRpb24gbWVjaGFuaXNtL21ldGhvZHMgZnJvbSBTZXJ2aWNlIExheWVy IHBvbGljaWVzIHRvIENhcGFiaWxpdHkgbGF5ZXIgY29tbWVudHMgYXJlIG91dCBvZiBzY29wZSBm b3IgSTJOU0YuDQo+IEhvd2V2ZXIsIEkyTlNGIHdpbGwgcHJvdmlkZSBhIGRpc2N1c3Npb24gZm9y dW0gZm9yIEluZm9ybWF0aW9uYWwgZHJhZnRzIG9uIGRhdGEgbW9kZWxzLCBBUElzLCBldGMuIHRo YXQgZGVtb25zdHJhdGUgaG93IG1vcmUgY29tcGxleCBTZXJ2aWNlIExheWVyIHBvbGljaWVzIGFu ZCBmb3JtYXRzIG1heSBiZSB0cmFuc2xhdGVkIHRvIENhcGFiaWxpdHkgTGF5ZXIgZnVuY3Rpb25z LiAgU3VjaCBkb2N1bWVudHMgd291bGQgYmUgcHVyc3VlZCBvdXRzaWRlIHRoZSBXRy4NCj4NCj4g U3RhbmRhcmQgaW50ZXJmYWNlcyBmb3IgbW9uaXRvcmluZyBhbmQgY29udHJvbGxpbmcgdGhlIGJl aGF2aW9yIG9mIE5TRnMgYXJlIGVzc2VudGlhbCBidWlsZGluZyBibG9ja3MgZm9yIHByb3ZpZGVy cyBvZiBzZWN1cml0eSBzZXJ2aWNlIHRvIGF1dG9tYXRlIHRoZSB1c2Ugb2YgZGlmZmVyZW50IE5T RnMgZnJvbSBtdWx0aXBsZSB2ZW5kb3JzLiBUaGlzIHdvcmsgd2lsbCBsZXZlcmFnZSB0aGUgZXhp c3RpbmcgcHJvdG9jb2xzIGFuZCBkYXRhIG1vZGVscyBkZWZpbmVkIGJ5IHRoZSBJMlJTLCBORVRD T05GLCBhbmQgTkVUTU9EIHdvcmtpbmcgZ3JvdXBzLiBJZiBleHRlbnNpb25zIHRvIHRoZXNlIHBy b3RvY29scyBvciBkYXRhIG1vZGVscyBhcmUgbmVlZGVkLCByZXF1aXJlbWVudHMgd2lsbCBiZSBk ZXZlbG9wZWQgYnkgdGhpcyBXRywgYW5kIHRoZSBleHRlbnNpb25zIHdpbGwgYmUgZGV2ZWxvcGVk IGluIGNvb3BlcmF0aW9uIHdpdGggdGhlIFdHcyByZXNwb25zaWJsZSBmb3IgdGhlIHByb3RvY29s cy4NCj4NCj4gVGhlIEkyTlNGIFdH4oCZcyBkZWxpdmVyYWJsZXMgaW5jbHVkZToNCj4NCj4gICAg ICBvIEEgc2luZ2xlIGRvY3VtZW50IGNvdmVyaW5nIHVzZSBjYXNlcywgcHJvYmxlbSBzdGF0ZW1l bnQsIGFuZCBnYXAgYW5hbHlzaXMgZG9jdW1lbnQuIFRoaXMgZG9jdW1lbnQgd2lsbCBpbml0aWFs bHkgYmUgcHJvZHVjZWQgZm9yIHJlZmVyZW5jZSBhcyBhIGxpdmluZyBsaXN0IHRvIHRyYWNrIGFu ZCByZWNvcmQgZGlzY3Vzc2lvbnM6IHRoZSBXRyBtYXkgZGVjaWRlIHRvIG5vdCBwdWJsaXNoIHRo aXMgZG9jdW1lbnQgYXMgYW4gUkZDLg0KPiAgICAgIG8gQSBmcmFtZXdvcmsgZG9jdW1lbnQsIHBy ZXNlbnRpbmcgYW4gb3ZlcnZpZXcgb2YgdGhlIHVzZSBvZiBOU0ZzIGFuZCB0aGUgcHVycG9zZSBv ZiB0aGUgbW9kZWxzIGRldmVsb3BlZCBieSB0aGUgV0cuIFRoaXMgZG9jdW1lbnQgd2lsbCBhbHNv IGJlIGEgcmVmZXJlbmNlIHRleHQgdG8gZ3VpZGUgdGhlIG1haW4gd29yayBhbmQgdGhlIFdHIG1h eSBkZWNpZGUgdG8gbm90IHB1Ymxpc2ggdGhpcyBkb2N1bWVudCBhcyBhbiBSRkMuDQo+ICAgICAg byBJZiB0aGUgd29ya2luZyBncm91cCBjb25zaWRlcnMgaXQgbmVjZXNzYXJ5LCBhIHNpbmdsZSwg dW5pZmllZCwgSW5mb3JtYXRpb24gTW9kZWwgdG8gZGVzY3JpYmUgdGhlIGNvbnRyb2wgYW5kIG1v bml0b3Jpbmcgb2YgZmxvdy1iYXNlZCBOU0ZzLg0KPiAgICAgIG8gWUFORyBkYXRhIG1vZGVscyBm b3IgdGhlIGNvbnRyb2wgYW5kIG1vbml0b3Jpbmcgb2YgTlNGcy4NCj4gICAgICBvIFJlcXVlc3Rz IHRvIHRoZSBJQU5BIGZvciB0aGUgY3JlYXRpb24gb2YgYSByZWdpc3RyeSB0aGF0IGVuYWJsZXMg dGhlIGNoYXJhY3RlcmlzdGljcyBhbmQgYmVoYXZpb3Igb2YgTlNGcyB0byBiZSBzcGVjaWZpZWQg dXNpbmcgYSB2ZW5kb3ItbmV1dHJhbCB2b2NhYnVsYXJ5IHdpdGhvdXQgcmVxdWlyaW5nIHRoZSBO U0ZzIHRoZW1zZWx2ZXMgdG8gYmUgc3RhbmRhcmRpemVkLiBUaGUgcmVnaXN0cnkgZW5hYmxlcyB2 YXJpb3VzIG1lY2hhbmlzbXMsIGluY2x1ZGluZyBwb2xpY3kgcnVsZXMsIHRvIGJlIHVzZWQgdG8g bWF0Y2ggbW9uaXRvciBhbmQgY29udHJvbCBmdW5jdGlvbnMgdG8gdGhlIG5lZWRzIG9mIGFuIGFw cGxpY2F0aW9uIGFuZC9vciBlbnZpcm9ubWVudC4NCj4gQW4gZXhhbWluYXRpb24gb2YgZXhpc3Rp bmcgc2VjdXJlIGNvbW11bmljYXRpb24gbWVjaGFuaXNtcyB0byBpZGVudGlmeSB0aGUgYXBwcm9w cmlhdGUgb25lcyBmb3IgY2FycnlpbmcgdGhlIGNvbnRyb2xsaW5nIGFuZCBtb25pdG9yaW5nIGlu Zm9ybWF0aW9uIGJldHdlZW4gdGhlIE5TRnMgYW5kIHRoZWlyIG1hbmFnZW1lbnQgZW50aXRpZXMu IFRoaXMgZG9jdW1lbnQgbWF5IGFsc28gYmUgcHJvZHVjZWQgYXMgYSB3b3JraW5nIGRvY3VtZW50 IHRoYXQgaXMgbm90IHB1Ymxpc2hlZCBhcyBhbiBSRkMuDQo+DQo+IFRoZSBXRyBtYXkgYWRkaXRp b25hbGx5IGNob29zZSB0byBkZXZlbG9wIGRvY3VtZW50cyB0byBkZXNjcmliZSByZXF1aXJlbWVu dHMgZm9yIGV4dGVuc2lvbnMgKGlmIGFueSkgdG8gZXhpc3RpbmcgcHJvdG9jb2xzIHVzZWQgYnkg dGhlIFdHLCB0byBleHBsYWluIGhvdyB0aGUgZGF0YSBtb2RlbHMgYXJlIHVzZWQgdG8gbW9uaXRv ciBhbmQgY29udHJvbCBmbG93LWJhc2VkIE5TRnMsIGFuZCB0byBkZXNjcmliZSBob3cgdG8gdXNl IEkyUlMgYW5kIE5FVENPTkYgdG8gY2FycnkgdGhlIGNvbnRlbnQgb2YgdGhlIGRhdGEgbW9kZWxz LiBUaGVzZSBkb2N1bWVudHMgbWF5IGJlIHB1Ymxpc2hlZCBhcyBJbmZvcm1hdGlvbmFsIFJGQ3Mg b2YgbWF5IGJlIHdvcmtpbmcgZG9jdW1lbnRzIHRoYXQgYXJlIGRpc2NhcmRlZCBvbmNlIHRoZXkg aGF2ZSB0cmlnZ2VyZWQgdGhlIG5lY2Vzc2FyeSB3b3JrLg0KPg0KPiBUaGUgV0cgd2lsbCB3b3Jr IGNsb3NlbHkgd2l0aCB0aGUgSTJSUywgTkVUQ09ORiwgYW5kIE5FVE1PRCBXR3MuIFRoZSBXRyB3 aWxsIGNvbW11bmljYXRlIHdpdGggZXh0ZXJuYWwgU0RPcyBsaWtlIEVUU0kgTkZWIGFuZCB3aWxs IGVuY291cmFnZSBvcGVuIHNvdXJjZSBjb2RlIGRldmVsb3BtZW50IHJlbGF0ZWQgdG8gdGhlIFdH IHNjb3BlIGluIG9yZ2FuaXphdGlvbnMgbGlrZSBPTkYsIE9wZW5TdGFjaywgT0RMLCBhbmQgT1BO RlYuDQo+DQo+DQo+IE9uIFdlZCwgQXVnIDI2LCAyMDE1IGF0IDE6NDQgQU0sIEpvc2VwaCBTYWxv d2V5IDxqb2VAc2Fsb3dleS5uZXQ8bWFpbHRvOmpvZUBzYWxvd2V5Lm5ldD4+IHdyb3RlOg0KPj4g VGhhbmtzIHRvIGV2ZXJ5b25lIHdobyBoYXMgY29udHJpYnV0ZWQgdG93YXJkcyBkZXZlbG9waW5n IHRoZSBjaGFydGVyLg0KPj4gSSBiZWxpZXZlIHdlIGFyZSBjbG9zZSB0byBjb25zZW5zdXMgc28g dGhpcyBpcyBhIGNvbnNlbnN1cyBjYWxsIGZvciB0aGUgSTJOU0YNCj4+IGNoYXJ0ZXIuICAgVGhl IGNoYXJ0ZXIgdGV4dCBpcyBsb2NhdGVkIGF0DQo+PiBodHRwczovL3NpdGVzLmdvb2dsZS5jb20v c2l0ZS9pbnRlcmZhY2UybnNmL2hvbWUuICBQbGVhc2Ugc2VuZA0KPj4gY29tbWVudHMgb24gdGhp cyBjaGFydGVyIHRvIHRoZSBJMk5TRiBsaXN0IGJ5IFNlcHRlbWJlciAyLCAyMDE1Lg0KPj4NCj4+ IFRoYW5rIHlvdSwNCj4+DQo+PiBKb2UNCj4+DQo+PiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KPj4gSTJuc2YgbWFpbGluZyBsaXN0DQo+PiBJMm5zZkBp ZXRmLm9yZzxtYWlsdG86STJuc2ZAaWV0Zi5vcmc+DQo+PiBodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2kybnNmDQo+Pg0KPg0KPg0KDQoNCg0KDQoNCg== --_000_4A95BA014132FF49AE685FAB4B9F17F657D1A2FDdfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 U2ltU3VuOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5v c2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QFNpbVN1biI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IFw7Y29sb3JcOlwjMDA3MEMw IjsNCglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAwO30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjsNCgljb2xvcjpibGFjazt9DQphOmxpbmss IHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVy bGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUs IGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJp ZiI7DQoJY29sb3I6YmxhY2s7fQ0Kc3Bhbi5CYWxsb29uVGV4dENoYXINCgl7bXNvLXN0eWxlLW5h bWU6IkJhbGxvb24gVGV4dCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0 eWxlLWxpbms6IkJhbGxvb24gVGV4dCI7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2Vy aWYiOw0KCWNvbG9yOmJsYWNrO30NCnAuZW1haWxxdW90ZSwgbGkuZW1haWxxdW90ZSwgZGl2LmVt YWlscXVvdGUNCgl7bXNvLXN0eWxlLW5hbWU6ZW1haWxxdW90ZTsNCgltc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ow0KCW1hcmdpbi1sZWZ0OjEuMHB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6 IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjsNCgljb2xvcjpibGFjazt9DQpzcGFuLkVtYWlsU3R5 bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm IjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBl OnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJ Y29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQt b25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjgu NWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRT ZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1z byA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIg Lz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVs YXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8 L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9y PSJ3aGl0ZSIgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBj bGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5PdmVyIHRoZSBjb3Vyc2Ugb2YgSTJOU0YgcHJv Y2VzcywgbWFueSBwZW9wbGUgaGF2ZSBhc2tlZCB2ZXJ5IGdvb2QgcXVlc3Rpb25zIGFib3V0IHZh cmlvdXMgYXNwZWN0cyBvZiBJMk5TRiBvbiB0aGUgbWFpbGluZyBsaXN0LCBhbmQgbWFueSBwZW9w bGUgaGF2ZSBnaXZlbg0KIGdvb2QgYW5zd2VycyB0byB0aGUgcXVlc3Rpb25zLiBUaG9zZSBnb29k IHF1ZXN0aW9ucyBhbmQgYW5zd2VycyBoYXZlIGJlZW4gY2FwdHVyZWQgaW4gSTJOU0YgUSZhbXA7 QSBXaWtpOg0KPGEgaHJlZj0iaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNl Mm5zZi9pMm5zZi1xLWEvaTJuc2ZxYSI+aHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50 ZXJmYWNlMm5zZi9pMm5zZi1xLWEvaTJuc2ZxYTwvYT4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+RG9lcyBhbnlvbmUg cmVtZW1iZXIgd2h5IHdlIGhhZCB0aGlzIGNsYXVzZSBmb3IgJm5ic3A7dGhlIGV4YW1wbGVzIG9m IE5TRnMNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206NS4wcHQ7bWFyZ2luLWxlZnQ6LjVp biI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7Ij5GbG93LWJhc2VkIHNlY3VyaXR5IGFsc28gbWVhbnMgdGhhdCBwYWNr ZXRzIGFyZSBpbnNwZWN0ZWQgaW4gdGhlIG9yZGVyIHRoZXkgYXJlIHJlY2VpdmVkLCBhbmQgd2l0 aG91dCBtb2RpZmljYXRpb24gdG8gdGhlIHBhY2tldCBkdWUgdG8gdGhlIGluc3BlY3Rpb24gcHJv Y2VzcyAoTUFDIHJld3JpdGVzLCBUVEwgZGVjcmVtZW50IGFjdGlvbjsgZXZlbiBOQVQgd291bGQN CiBiZSBvdXRzaWRlIHRoZSBpbnNwZWN0aW9uIHByb2Nlc3MpLjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj5NYXliZSB0aGUgcGhyYXNlIOKAnHdpdGhvdXQg4oCm4oCdIHNob3Vs ZCBhY3R1YWxseSBiZSDigJx3aXRoIHNvbWUgTlNGcyBtYWtpbmcgbW9kaWZpY2F0aW9uIHRvIHRo ZSBwYWNrZXRzIGR1ZSB0byAuLuKAnT8gJm5ic3A7KHRoZSBsYXRlc3QgV2lraSBoYXMgcmVtb3Zl ZCB0aGUgbGFzdCBjbGF1c2UpLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PkxpbmRhDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjp3aW5kb3d0ZXh0Ij5Gcm9tOjwvc3Bhbj48L2I+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6d2luZG93dGV4dCI+IExpbmRhIER1bmJhcg0K PGJyPg0KPGI+U2VudDo8L2I+IFRodXJzZGF5LCBBdWd1c3QgMjcsIDIwMTUgMzoyNyBQTTxicj4N CjxiPlRvOjwvYj4gJ0ZsZW1taW5nIEFuZHJlYXNlbic7IEthdGhsZWVuIE1vcmlhcnR5OyBKb3Nl cGggU2Fsb3dleTxicj4NCjxiPkNjOjwvYj4gaTJuc2ZAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0 OjwvYj4gUkU6IEZ1cnRoZXIgY2xhcmlmaWNhdGlvbiBhbmQgZXhwbGFuYXRpb25zIHRvIEkyTlNG IGNoYXJ0ZXIgaGFzIGJlZW4gYWRkZWQgdG8gdGhlIEkyTlNGIFdpa2kgUSZhbXA7QSAod2FzIFJF OiBbSTJuc2ZdIENvbnNlbnN1cyBjYWxsIG9uIEkyTlNGIENoYXJ0ZXI8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+RmxlbW1pbmcsDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkNvbW1lbnRzIGFyZSBpbnNl cnRlZCBiZWxvdzo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7 cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjp3aW5kb3d0ZXh0Ij5Gcm9tOjwvc3Bhbj48L2I+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6d2luZG93dGV4dCI+IEZsZW1taW5nIEFu ZHJlYXNlbiBbPGEgaHJlZj0ibWFpbHRvOmZhbmRyZWFzQGNpc2NvLmNvbSI+bWFpbHRvOmZhbmRy ZWFzQGNpc2NvLmNvbTwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4gVGh1cnNkYXksIEF1Z3VzdCAy NywgMjAxNSAyOjUzIFBNPGJyPg0KPGI+VG86PC9iPiBMaW5kYSBEdW5iYXI7IEthdGhsZWVuIE1v cmlhcnR5OyBKb3NlcGggU2Fsb3dleTxicj4NCjxiPkNjOjwvYj4gPGEgaHJlZj0ibWFpbHRvOmky bnNmQGlldGYub3JnIj5pMm5zZkBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6 IEZ1cnRoZXIgY2xhcmlmaWNhdGlvbiBhbmQgZXhwbGFuYXRpb25zIHRvIEkyTlNGIGNoYXJ0ZXIg aGFzIGJlZW4gYWRkZWQgdG8gdGhlIEkyTlNGIFdpa2kgUSZhbXA7QSAod2FzIFJFOiBbSTJuc2Zd IENvbnNlbnN1cyBjYWxsIG9uIEkyTlNGIENoYXJ0ZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPlRoYW5r cyBMaW5kYTxicj4NCjxicj4NClRha2luZyBhIHF1aWNrIGxvb2sgYXQgdGhlIFdpa2k6PGJyPg0K LSBJIG5vdGljZWQgdGhhdCB5b3VyIGRlZmluaXRpb24gb2YgYW4gTlNGIGV4cGxpY2l0bHkgcHJv aGliaXRzIGFueSBwYWNrZXQgbW9kaWZpY2F0aW9uIHN1Y2ggYXMgTkFUIG9yIE1BQyByZXdyaXRl OyB0aGlzIHdpbGwgZXhjbHVkZSBhIGxhcmdlIHBvcnRpb24gb2YgY3VycmVudCBOU0ZzIChlLmcu IGl0J3MgY29tbW9ubHkgdXNlZCBieSBGV3MgYW5kIEFEQ3MpIC0gaXMgdGhhdCBpbnRlbnRpb25h bCA/DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBUaGlz IGlzIG5vdCBteSBpbnRlbnRpb24uIEkgZG9u4oCZdCByZW1lbWJlciB3aG8gcHV0IHRoZSBsYXN0 IGNsYXVzZSBpbiAoaS5lLg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPndpdGhvdXQgbW9kaWZpY2F0aW9u IHRvIHRoZSBwYWNrZXQgZHVlIHRvIHRoZSBpbnNwZWN0aW9uIHByb2Nlc3MgKE1BQyByZXdyaXRl cywgVFRMIGRlY3JlbWVudCBhY3Rpb247IGV2ZW4gTkFUIHdvdWxkIGJlIG91dHNpZGUgdGhlIGlu c3BlY3Rpb24gcHJvY2VzcykuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj4uDQogSSBjYW4gcHVsbCB0aGUgbWFpbGluZyBsaXN0IGlmIGl0IG9rIHRvIHJl bW92ZSB0aGUgbGFzdCBjbGF1c2UuIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KPGJy Pg0KLSBZb3UgbWVudGlvbiB0aGF0ICZxdW90O2xvZ2dpbmcmcXVvdDsgaXMgb3V0IG9mIHNjb3Bl LCB5ZXQgaW4gb3RoZXIgcGxhY2VzIHlvdSByZWZlciB0byByZXBvcnRpbmcsIGFuYWx5dGljcywg ZXRjLiwgYW5kIHRoZSBjaGFydGVyIHRhbGtzIGFib3V0IG1vbml0b3JpbmcuIENhbiB5b3UgY2xh cmlmeSA/DQo8YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0xpbmRhXSBZZXMsIOKA nGxvZ2dpbmfigJ0gaXMgcmVmZXJyaW5nIHRvIGFuYWx5dGljcywgc3VjaCBhbGdvcml0aG1zLCBi ZW5jaG1hcmssIGV0Yy4NCjwvc3Bhbj48YnI+DQo8YnI+DQpBbHNvLCBhIGNvdXBsZSBvZiBteSBx dWVzdGlvbnMgYmVsb3cgc3RpbGwgc2VlbSB0byBiZSBvcGVuLCBidXQgdGhlcmUgaXMgYSBwYXJh bGxlbCBleGNoYW5nZSB3aXRoIEthdGhsZWVuIG9uIHNvbWUgb2YgdGhvc2UsIHNvIG1heWJlIHdl IGNhbiByZXNvbHZlIHRoZW0gdGhlcmUuPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltM aW5kYV0gZG8geW91IG1lYW4gdGhlIHF1ZXN0aW9ucyBsaWtlIOKAnHdoeSBmcmFtZXdvcmssIHVz ZSBjYXNlcyBtYXkgbm90IGJlIHB1Ymxpc2hlZCBhcyBSRkNz4oCdPyBDYW4geW91IGhlbHAgbWUg b3V0IHdpdGggdGhlIHF1ZXN0aW9ucz8NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KPGJyPg0KQ2hl ZXJzPGJyPg0KPGJyPg0KLS0gRmxlbW1pbmc8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5PbiA4LzI3LzE1IDEyOjI5IFBNLCBMaW5kYSBEdW5iYXIgd3JvdGU6PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkZsZW1taW5nLA0KPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JIGhh dmUgdXBkYXRlZCB0aGUgUSZhbXA7QSBvbiB0aGUgSTJOU0YgV2lraSB0byBjbGFyaWZ5IHRoZSBx dWVzdGlvbnMgeW91IGhhdmU6ICZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vc2l0ZXMuZ29vZ2xlLmNv bS9zaXRlL2ludGVyZmFjZTJuc2YvaTJuc2YtcS1hL2kybnNmcWEiPmh0dHBzOi8vc2l0ZXMuZ29v Z2xlLmNvbS9zaXRlL2ludGVyZmFjZTJuc2YvaTJuc2YtcS1hL2kybnNmcWE8L2E+PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij5Ib3BlIGl0IGhlbHBzLiBQbGVhc2UgbGV0IG1lIGtub3cgaWYgeW91IGhhdmUgbW9yZSBxdWVz dGlvbnMgb3Igc3VnZ2VzdGlvbnMgZm9yIEkyTlNGIGNoYXJ0ZXIuDQo8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlRoYW5r cywNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5MaW5kYQ0KPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOndpbmRvd3RleHQiPkZy b206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjp3aW5kb3d0ZXh0 Ij4gRmxlbW1pbmcgQW5kcmVhc2VuIFs8YSBocmVmPSJtYWlsdG86ZmFuZHJlYXNAY2lzY28uY29t Ij5tYWlsdG86ZmFuZHJlYXNAY2lzY28uY29tPC9hPl0NCjxicj4NCjxiPlNlbnQ6PC9iPiBXZWRu ZXNkYXksIEF1Z3VzdCAyNiwgMjAxNSA5OjAxIFBNPGJyPg0KPGI+VG86PC9iPiBMaW5kYSBEdW5i YXI7IEthdGhsZWVuIE1vcmlhcnR5OyBKb3NlcGggU2Fsb3dleTxicj4NCjxiPkNjOjwvYj4gPGEg aHJlZj0ibWFpbHRvOmkybnNmQGlldGYub3JnIj5pMm5zZkBpZXRmLm9yZzwvYT48YnI+DQo8Yj5T dWJqZWN0OjwvYj4gUmU6IFtJMm5zZl0gQ29uc2Vuc3VzIGNhbGwgb24gSTJOU0YgQ2hhcnRlcjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tYm90dG9tOjEyLjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+T24gOC8yNi8xNSA3OjMxIFBNLCBMaW5kYSBEdW5iYXIgd3JvdGU6PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21h cmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj5GbGVtbWluZywNCjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ VGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGRldGFpbGVkIGNvbW1lbnRzLiBUaGFuayB5b3Ug Zm9yIGNhdGNoaW5nIHRob3NlIHR5cG9zIChjb3JyZWN0ZWQgb24gdGhlIEkyTlNGIHdpa2kgbm93 KS4gV2UgcmVhbGx5IG5lZWQgdGhlIGZyZXNoIHNldCBvZiBleWVzIHRvIGxvb2sgYXQgaXQuDQo8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPllvdSBzdGF0ZWQ6DQo8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+LSBUaGUgdGhp cmQgcGFyYWdyYXBoIHNheXMgdGhhdCAmcXVvdDtUaGUgTlNGcyBjYW4gYmUgbW9uaXRvcmVkIGJ5 IG11bHRpcGxlIGVudGl0aWVzLi4uJnF1b3Q7OyBkb2VzIHRoaXMgaW1wbHkgYSAxOk4gKGRpcmVj dCkgbW9uaXRvcmluZyByZWxhdGlvbnNoaXAgPw0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPklmIHNvLCB0aGF0IHNlZW1zIHRvIGdldCB0byBh IGRlc2lnbiBkZWNpc2lvbiB0aGF0IG1heSBiZSBwcmVtYXR1cmUuPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMDcwQzAiPltMaW5kYV0gVGhlIGludGVudCBpcyB0 byBkZXNjcmliZSBhIHNjZW5hcmlvIHRoYXQgYSBOU0YgbWF5IHNlbmQgZGlmZmVyZW50IG91dHB1 dHMgdG8gZGlmZmVyZW50IGVudGl0aWVzLiBGb3IgZXhhbXBsZSwgc29tZSBzdGF0aXN0aWNzIHJl cG9ydCB0byDigJxBbmFseXRpY3Mgc3lzdGVt4oCdLCDigJxydWxlDQogcXVlcnnigJ0gdG8gbWFu YWdlbWVudCBlbnRpdHkuIENhbiB5b3Ugc3VnZ2VzdCBhIGJldHRlciB3b3JkaW5nIGZvciB0aGlz PyA8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPkkgc2VlLiBJJ20gbm90IHN1cmUgSSB3b3VsZCBnZXQg aW50byB0aGF0IGxldmVsIG9mIGRldGFpbCBpbiB0aGUgY2hhcnRlciwgYnV0IHNpbmNlIHlvdSBp bnRyb2R1Y2UgdGhlIG5vdGlvbiBvZiAmcXVvdDtmZWF0dXJlcyBhbmQgZnVuY3Rpb25zJnF1b3Q7 LCB5b3UgY291bGQgZm9yIGV4YW1wbGUgc2F5DQo8YnI+DQo8YnI+DQomcXVvdDtUaGUgTlNGcyBt YXkgY29udGFpbiBhIG11bHRpdHVkZSBvZiBmZWF0dXJlcyBhbmQgZnVuY3Rpb25zLCBlYWNoIG9m IHdoaWNoIGNhbiBiZSBtb25pdG9yZWQgYnkgYSBkaWZmZXJlbnQgZW50aXR5JnF1b3Q7DQo8YnI+ DQo8YnI+DQpvciBzb21ldGhpbmcgbGlrZSB0aGF0LiA8YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8 bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPk90aGVyIFJlcGxpZXMgYXJlIGluc2VydGVkIGJlbG93Ojwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4tLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTxicj4NCkZy b206IEZsZW1taW5nIEFuZHJlYXNlbiBbPGEgaHJlZj0ibWFpbHRvOmZhbmRyZWFzQGNpc2NvLmNv bSI+bWFpbHRvOmZhbmRyZWFzQGNpc2NvLmNvbTwvYT5dDQo8YnI+DQpTZW50OiBXZWRuZXNkYXks IEF1Z3VzdCAyNiwgMjAxNSA1OjQ2IFBNPGJyPg0KVG86IExpbmRhIER1bmJhcjsgS2F0aGxlZW4g TW9yaWFydHk7IEpvc2VwaCBTYWxvd2V5PGJyPg0KQ2M6IDxhIGhyZWY9Im1haWx0bzppMm5zZkBp ZXRmLm9yZyI+aTJuc2ZAaWV0Zi5vcmc8L2E+PGJyPg0KU3ViamVjdDogUmU6IFtJMm5zZl0gQ29u c2Vuc3VzIGNhbGwgb24gSTJOU0YgQ2hhcnRlcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpD b25zb2xhcyI+QXBvbG9naWVzIGZvciBqb2luaW5nIHRoZSBkaXNjdXNzaW9uIGxhdGUgLSBqdXN0 IGdvdCBiYWNrIGZyb20gUFRPLiBJbiBhbnkgY2FzZSwgcGxlYXNlIGZpbmQgc29tZSBhZGRpdGlv bmFsIGNvbW1lbnRzIG9uIHRoZSBwcm9wb3NlZCBjaGFydGVyIGJlbG93IChzb21lIG1vcmUgc3Vi c3RhbnRpYWwgdGhhbiBvdGhlcnMpOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTpDb25zb2xhcyI+LSBUaGUgZmlyc3QgcGFyYWdyYXBoIHN0YXJ0cyBvdXQg YnkgZGVmaW5pbmcgd2hhdCBhbiBOU0YgaXMsIGFuZCB3ZSBjYW4gYXJndWUgYWJvdXQgc29tZSBv ZiB0aGUgcG9pbnRzIGluIHRoZXJlIGZvciB2YXJpb3VzIHNlY3VyaXR5IGZ1bmN0aW9ucyAoZS5n LiBJIG1heSB3YW50IHRvIGRldGVjdCBub3JtYWwgbmV0d29yaw0KIGJlaGF2aW9yIHRvIGVzdGFi bGlzaCBhIGJhc2VsaW5lLCB3aGljaCBkb2VzIG5vdCBzZWVtIHRvIGJlIGNvdmVyZWQgYnkgdGhl IGN1cnJlbnQgZGVmaW5pdGlvbikuDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj5bTGluZGFdIE92ZXIgdGhlIGNvdXJz ZSBvZiBJMk5TRiAoYWJvdXQgYSB5ZWFyKSwgd2UgaGF2ZSBnb25lIHRocm91Z2ggYSBsb25nIGRl YmF0ZSBvbiB3aGF0IE5TRnMgc2hvdWxkIGJlIGNvbnNpZGVyZWQgYnkgSUVURiBJMk5TRi4gQXMg dGhlIHJlc3VsdCBvZiB0aGUgbG9uZyBkZWJhdGUsIHdlDQogdXNlIHRoZSBkZWZpbml0aW9uIHRv IGNsYXNzaWZ5IGEgc2V0IG9mIGZ1bmN0aW9ucyB0byBiZSBjb25zaWRlcmVkIGZvciBJRVRGIEky TlNGICh0aGVuIGZ1cnRoZXIgbmFycm93aW5nIGRvd24gdG8gRmxvdy1iYXNlZCBOU0ZzKS4NCjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9y OiMwMDcwQzAiPlRoZSBmdW5jdGlvbiB5b3UgZGVzY3JpYmVkLCBpLmUuIGRldGVjdGluZyBub3Jt YWwgbmV0d29yayBiZWhhdmlvciB0byBlc3RhYmxpc2ggYSBiYXNlbGluZSBpcyBub3QgaW4gdGhl IHNjb3BlIG9mIEkyTlNGLCBldmVuIHRob3VnaCB0aGlzIGZ1bmN0aW9uIGNhbiBhbHNvIGJlICZx dW90O3Byb3ZpZGVkIGFuZA0KIGNvbnN1bWVkIGluIGluY3JlYXNpbmdseSBkaXZlcnNlIGVudmly b25tZW50cyZxdW90Oy4gPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5PayAtIHRoZSBwYXJ0IGFib3V0ICZxdW90O2RldGVjdCB1 bndhbnRlZCBuZXR3b3JrIGFjdGl2aXR5JnF1b3Q7IGlzIGZhaXJseSBicm9hZCB0aG91Z2gsIGFu ZCBJJ20gbm90IHN1cmUgaG93IHlvdSBkZXRlY3QgdW53YW50ZWQgYWN0aXZpdHkgd2l0aG91dCBs b29raW5nIGF0IGFsbCBhY3Rpdml0eSAod2hpY2ggaXMgd2hhdCB0cmlnZ2VyZWQgbXkgb3JpZ2lu YWwgcXVlc3Rpb24pLg0KPGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj5J IGRvbid0IHRoaW5rIHRoYXQgd2lsbCBiZSBhIHByb2R1Y3RpdmUgZGlzY3Vzc2lvbiB0aG91Z2gs IG5vciBpcyBpdCBuZWNlc3NhcnkuIEluc3RlYWQsIEknZCBzdWdnZXN0IHdlIGFyZSBub3Qgb3Zl cmx5IHByZXNjcmlwdGl2ZSwgYnV0IHJhdGhlciB2aWV3IHRoZXNlIGFzIHBvc3NpYmxlIE5TRiBm ZWF0dXJlcywgYW5kDQogc3VwcGxlbWVudCB0aGVtIHdpdGggc29tZSBhY3R1YWwgcHJvZHVjdCBl eGFtcGxlcyAoZS5nLiBGVywgTkdGVywgSVBTLCBldGMuKS4gU2ltaWxhcmx5LCBzaW5jZSB3ZSBs aW1pdCBvdXIgc2NvcGUgdG8gJnF1b3Q7Zmxvdy1iYXNlZCBOU0ZzJnF1b3Q7LCB3ZSBtYXkgd2Fu dCB0byBtYWtlIHRoYXQgY2xlYXIgaGVyZS4gQW4gZXhhbXBsZSBvZiBhIHNlY3VyaXR5IGZ1bmN0 aW9uIHRoYXQgd291bGQgKm5vdCogYmUgaW4gc2NvcGUgbWF5IGJlIGhlbHBmdWwgdG9vLjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj5bTGluZGFdIEFs bCB0aGUgTlNGcyBpbiBJMk5TRiBjb250ZXh0IGFyZSDigJxmZWF0dXJlc+KAnSwgd2hvc2UgZm9y bSBmYWN0b3IgY2FuIGJlIHByb3ZpZGVkIHBoeXNpY2FsIGJveCBvciB2aXJ0dWFsaXplZCBmb3Jt YXQuIFNvbWUgZm9ybSBmYWN0b3JzLCBpLmUuIGRldmljZXMgb3IgVk0sIGNhbiBwcm92aWRlDQog bXVsdGlwbGUg4oCcZnVuY3Rpb25z4oCdLiBEbyB5b3UgdGhpbmsgdGhlIHNlbnRlbmNlcyBpbiB0 aGUgdGhpcmQgcGFyYWdyYXBoIGlzIGdvb2QgZW5vdWdoIHRvIGRlc2NyaWJlIHdoYXQgeW91IHdh bnQ/DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGk+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMwMDcwQzAiPuKAnEkyTlNGIHdpbGwgZm9jdXMg b24gZmxvdy1iYXNlZCBOU0ZzIHRoYXQgcHJvdmlkZSB0cmVhdG1lbnQgdG8gcGFja2V0cy9mbG93 cywgc3VjaCBhcyBJbnRydXNpb24gUHJvdGVjdGlvbi9EZXRlY3Rpb24gU3lzdGVtIChJUFMvSURT KSwgV2ViIGZpbHRlcmluZywgZmxvdw0KIGZpbHRlcmluZywgZGVlcCBwYWNrZXQgaW5zcGVjdGlv biwgb3IgcGF0dGVybiBtYXRjaGluZyBhbmQgcmVtZWRpYXRpb24u4oCdIDwvc3Bhbj4NCjwvaT48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPlRoZSBleGFtcGxlcyBoZXJl IGFyZSBjbGVhcjsgSSdtIGxlc3MgY2xlYXIgb24gd2hhdCBlbHNlIG1pZ2h0IGJlIGluIHNjb3Bl LiBGb3IgZXhhbXBsZSwgd291bGQgYSBERG9TIGRldGVjdGlvbiBhbmQgbWl0aWdhdGlvbiBzeXN0 ZW0gYmUgaW4gc2NvcGUgKGtlZXBpbmcgaW4gbWluZCBpdCBtYXkgdXNlIGEgY29tYmluYXRpb24g b2YgcGFja2V0IGluc3BlY3Rpb24NCiBhbmQgdGVsZW1ldHJ5LWJhc2VkIGRldGVjdGlvbiBhbmQg bWl0aWdhdGlvbiBhbmQgdGhhdCBlc3RhYmxpc2hpbmcgYSAmcXVvdDtub3JtYWwmcXVvdDsgYmFz ZWxpbmUgaXMgb2Z0ZW4gcGFydCBvZiB0aGUgb3BlcmF0aW9uKSA/DQo8YnI+DQo8YnI+DQo8YnI+ DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNv bnNvbGFzIj4tIFRoZSBjaGFydGVyIHNlZW1zIHRvIG9wZXJhdGUgd2l0aCB0aGUgbm90aW9uIG9m IGEgJnF1b3Q7c2VjdXJpdHkgY29udHJvbGxlciZxdW90OyB0aGF0IGludGVyYWN0cyB3aXRoIHRo ZSAmcXVvdDtOU0YmcXVvdDsuIElmIEkgdW5kZXJzdGFuZCBjb3JyZWN0bHksIHRoZSBzZWN1cml0 eSBjb250cm9sbGVyIGltcGxlbWVudHMgdGhlICZxdW90O1NlcnZpY2UgTGF5ZXImcXVvdDsNCiBh bmQgdGhlIE5TRiBpbXBsZW1lbnRzIHRoZSAmcXVvdDtDYXBhYmlsaXR5IExheWVyJnF1b3Q7LiBG dXJ0aGVybW9yZSwgd2UgaGF2ZSAmcXVvdDtjbGllbnRzJnF1b3Q7IHRoYXQgaW50ZXJhY3Qgd2l0 aCB0aGUgc2VjdXJpdHkgY29udHJvbGxlciB0byBpbXBsZW1lbnQgcG9saWNpZXMgKGJ5IGxldmVy YWdpbmcgdGhlIHNlcnZpY2UgbGF5ZXIpLiBJZiBzbywgaXQgd291bGQgYmUgZ29vZCB0byBjbGFy aWZ5IHRoaXMgdGF4b25vbXkgZWFybGllciBpbiB0aGUgY2hhcnRlci4gSWYgbm90LA0KIHRoZW4g SSBwcm9iYWJseSBuZWVkIHNvbWUgY2xhcmlmaWNhdGlvbnMgaW4gdGhlIHRleHQuPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMDcwQzAiPltMaW5kYV0g4oCcU2Vj dXJpdHkgY29udHJvbGxlcuKAnSBpcyBhIGNvbmNlcHR1YWwgZW50aXR5LCBtZWFuaW5nIGFuIGVu dGl0eSB0byBzZW5kIGltcGxlbWVudGFibGUgcnVsZXMgKGNhcGFiaWxpdHkgbGF5ZXIpIHRvIHRo ZSBOU0ZzLiBUaGVyZSBjb3VsZCBiZSBtdWx0aXBsZSBvZiB0aGVtLCBlYWNoDQogcmVzcG9uc2li bGUgZm9yIG9uZSB0eXBlIG9mIE5TRiAoaS5lLiBtYW5hZ2luZyB0aGUgaW5zdGFuY2VzIG9mIHRo ZSBOU0ZzKS4gPC9zcGFuPg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpD b25zb2xhcztjb2xvcjojMDA3MEMwIj5JMk5TRiBpbmNsdWRlcyDigJxTaW1wbGUgU2VydmljZSBM YXllcuKAnSB0aGF0IG1vZGVscyBjbG9zZWx5IHRvIHRoZSDigJxDYXBhYmlsaXR5IExheWVy4oCd LiBGb3IgZXhhbXBsZTogY2xpZW50IGNhbiBzcGVjaWZ5IHRoZSBydWxlcyB3aXRob3V0IHNwZWNp Znkgd2hpY2ggaW5zdGFuY2VzIG9mIHRoZSBOU0YuDQogVGhlIOKAnENvbnRyb2xsZXLigJ0gbWFu YWdlIHRoZSBpbnN0YW5jZXMsIGFzIGRlc2NyaWJlZCBieSBUaGUgZmlndXJlIGluIEkyTlNGIEZy YW1ld29yayBkb2N1bWVudDo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyA7Y29sb3I6IzAwNzBDMCZx dW90OywmcXVvdDtzZXJpZiZxdW90OyI+JiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAt IC0gJiM0MzsmbmJzcDsgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gJiM0Mzs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyA7Y29sb3I6IzAwNzBDMCZxdW90OywmcXVvdDtzZXJpZiZxdW90OyI+fCZuYnNwOyBOU0Yt QSZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfCZuYnNwOyB8Jm5ic3A7IE5TRi1CJm5ic3A7ICYjNDM7LS0tLS0tLS0tLS0tLS0mIzQz OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcgO2NvbG9yOiMwMDcwQzAmcXVv dDssJnF1b3Q7c2VyaWYmcXVvdDsiPnwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyBDb250cm9sbGVyfCZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB8Jm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyBDb250cm9sbGVyfCZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcgO2NvbG9yOiMwMDcwQzAmcXVvdDssJnF1b3Q7c2VyaWYmcXVv dDsiPnwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0 MzstLS0tLS0tLS0tLS0tLSYjNDM7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJz cDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQz Oy0tLS0tLS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 IDtjb2xvcjojMDA3MEMwJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7Ij58ICYjNDM7IC0gLSAtIC0g LSAtIC0gLSAtIC0gLSAtIC0gJiM0MzsgfCZuYnNwOyB8ICYjNDM7IC0gLSAtIC0gLSAtIC0gLSAt IC0gLSAtIC0gJiM0MzsgfDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3IDtjb2xvcjojMDA3MEMwJnF1b3Q7LCZxdW90O3NlcmlmJnF1 b3Q7Ij58IHwmIzQzOy0tLS0tLS0tLSYjNDM7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7 LS0tLS0tLS0tJiM0Mzt8IHwmbmJzcDsgfCB8JiM0MzstLS0tLS0tLS0mIzQzOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLSYjNDM7fCB8PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcgO2NvbG9yOiMwMDcwQzAm cXVvdDssJnF1b3Q7c2VyaWYmcXVvdDsiPnwgfHwgTlNGLUEjMSB8IC4uLiB8Jm5ic3A7IE5TRi1B I258fCB8Jm5ic3A7IHwgfHwmbmJzcDsgTlNGLUIjMXwgLi4uIHwmbmJzcDsgTlNGLUIjbXx8IHw8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyA7Y29sb3I6IzAwNzBDMCZxdW90OywmcXVvdDtzZXJpZiZxdW90OyI+fCB8JiM0MzstLS0t LS0tLS0mIzQzOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLSYjNDM7fCB8 Jm5ic3A7IHwgfCYjNDM7LS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0 MzstLS0tLS0tLS0mIzQzO3wgfDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3IDtjb2xvcjojMDA3MEMwJnF1b3Q7LCZxdW90O3Nlcmlm JnF1b3Q7Ij58IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgTlNGLUEgY2x1c3RlciZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IHwmbmJzcDsgfCB8Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE5TRi1C IGNsdXN0ZXImbmJzcDsmbmJzcDsmbmJzcDsgfCB8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcgO2NvbG9yOiMwMDcwQzAmcXVvdDss JnF1b3Q7c2VyaWYmcXVvdDsiPnwgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAmIzQz OyB8Jm5ic3A7IHwgJiM0MzsgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAmIzQzOyB8PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcg O2NvbG9yOiMwMDcwQzAmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDsiPiYjNDM7IC0gLSAtIC0gLSAt IC0gLSAtIC0gLSAtIC0gLSAtICYjNDM7Jm5ic3A7ICYjNDM7IC0gLSAtIC0gLSAtIC0gLSAtIC0g LSAtIC0gLSAtICYjNDM7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6IzAw NzBDMCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPk9rIC0gdGhpcyBiYXNpYyBmcmFt ZXdvcmsgc2VlbXMgdG8gYmUgZm91bmRhdGlvbmFsIHRvIHRoZSBzdHJ1Y3R1cmUgb2YgdGhlIHdv cmsgdGhlIGdyb3VwIGlzIGRvaW5nLiBJZiBzbywgSSB0aGluayBpdCB3b3VsZCBiZSBoZWxwZnVs IHRvIG91dGxpbmUgaXQgKHZlcmJhbGx5KSBpbiB0aGUgY2hhcnRlci4NCjxicj4NCjxicj4NCjxi cj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+LSBJbiB0aGUgZGVmaW5pdGlvbiBvZiB0aGUgJnF1 b3Q7Q2FwYWJpbGl0eSBMYXllciZxdW90OywgdGhlcmUgaXMgYSBzdGF0ZW1lbnQgYWJvdXQgJnF1 b3Q7cnVsZXMuLi5vZiBOU0ZzIGhhdmUgdG8gYmUgaW1wbGVtZW50YWJsZSBieSBtb3N0IE5TRnMm cXVvdDsuIERvIHlvdSBtZWFuIGFsbCBOU0ZzIG9yIE5TRnMgb2YgYSBnaXZlbiB0eXBlIChJIGFz c3VtZQ0KIHdlIGhhdmUgZGlmZmVyZW50IHR5cGVzIG9mIE5TRnMpID88L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA3MEMwIj5bTGlu ZGFdIHllcy4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+LSBQb2xpY2ll cyBhcmUgbGFiZWxlZCBhcyAmcXVvdDtzaW1wbGUmcXVvdDsgb3IgJnF1b3Q7YWJzdHJhY3Qgb3Ig c29waGlzdGljYXRlZCZxdW90Ow0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPndpdGhvdXQgZnVydGhlciBkZWZpbml0aW9uOyBJJ20gbm90IHN1 cmUgd2hlcmUgd2UgZHJhdyB0aGF0IGxpbmUgb3IgaG93IHRvIGRvIHRoYXQgaW4gdGhlIGNoYXJ0 ZXI7IG1heWJlIGNsYXJpZnlpbmcgdGhhdCBwYXJ0IG5lZWRzIHRvIGJlIGEgZGVsaXZlcmFibGUg Pzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2Nv bG9yOiMwMDcwQzAiPltMaW5kYV0g4oCcc2ltcGxl4oCdIG1lYW5zIHRoYXQgdGhleSBjYW4gYmUg ZGlyZWN0bHkgdHJhbnNsYXRlZCB0byBjYXBhYmlsaXR5IGxheWVyIHJ1bGVzIHdpdGggc2ltcGxl IG1hcHBpbmcsIGUuZy4gd2l0aG91dCBleHBsaWNpdCBzdGF0aW5nIHdoaWNoIGluc3RhbnRpYXRp b24sIG1heSBoYXZlIGN1c3RvbWVyDQogSUQgdGhhdCBjYW4gYmUgdHJhbnNsYXRlZCB0byBzb21l IHRhZ3MgY2FycmllZCBieSBwYWNrZXRzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5PayAtIGlmIHRoYXQncyB0aGUgZGVmaW5p dGlvbiB3ZSB3YW50IHRvIHVzZSwgY2FuIHdlIGNsYXJpZnkgaXQgaW4gdGhlIGNoYXJ0ZXIgPzxi cj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4t IEEgbnVtYmVyIG9mIGRlbGl2ZXJhYmxlcyBtYXkgbm90IGJlIHB1Ymxpc2hlZCBhcyBhbiBSRkM7 IHdoeSBub3QgKHRoZXkgc2VlbSB0byBzZXQgdGhlIHN0YWdlIGZvciBzZXZlcmFsIG90aGVyIGRl bGl2ZXJhYmxlcyBhbmQgaGVuY2UgYXJlIHJlbGV2YW50IGZvciBjb25zdW1lcnMgb2YgdGhlIGlu Zm9ybWF0aW9uIGFuZA0KIGRhdGEgbW9kZWxzIGxhdGVyIG9uKSA/PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMDcwQzAiPltMaW5kYV0gVGhlIFdHIGdyb3VwIG1h eSBkZWNpZGUgdG8gcHVibGlzaCB0aGVtIGFzIFJGQyBvciBub3QgbGF0ZXIuIEJ1dCB0aGUgY2hh cnRlciBkb2VzbuKAmXQgc3BlY2lmeSB3aGljaCB3YXkuIFRoYXQgaXMgaG93IElFU0cgd2FudGVk Lg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0 b206MTIuMHB0Ij5Pay4gPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPi0gVGhlIHBhcnQgYWJvdXQgSTJOU0YgcHJvdmlkaW5nIGEgJnF1b3Q7ZGlzY3Vz c2lvbiBmb3J1bSBmb3IgSW5mb3JtYXRpb25hbCBkcmFmdHMgb24uLi4uLlttb3JlIGNvbXBsZXgg U2VydmljZSBMYXllciBwb2xpY2llc10uLi4mcXVvdDsgaXMgY29uZnVzaW5nIHRvIG1lLiBUaGUg d29yayBzZWVtcyB0byBiZSBwdXJzdWVkIG91dHNpZGUNCiB0aGUgV0csIHNvIHRoZXJlIGFyZSBu byBkZWxpdmVyYWJsZXMgYW5kIHByZXN1bWFibHkgbm8gYWdlbmRhIHRpbWUgd2lsbCBiZSBhbGxv Y2F0ZWQgZWl0aGVyLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXM7Y29sb3I6IzAwNzBDMCI+W0xpbmRhXSB0aGlzIGlzIHRvIGFkZHJlc3MgdGhl IGluZm9ybWF0aW9uIGRvY3VtZW50cyB0aGF0IGRlc2NyaWJlIHRoZSBJMk5TRiBkZW1vLCBvcGVu IHNvdXJjZSBvciBpbnRlcm9wZXJhYmlsaXR5IGluaXRpYXRpdmVzIHRoYXQgYXJlIGNvbmR1Y3Rl ZCBvdXRzaWRlIHRoZSBXRy4gRS5nDQo8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC14aWUtaTJuc2YtZGVtby1vdXRsaW5lLWRlc2lnbi8iPmh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhpZS1pMm5zZi1kZW1vLW91dGxpbmUtZGVzaWdu LzwvYT48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPk9rIC0gdGhhbmtzIGZvciB0aGUgcG9p bnRlciwgaG93ZXZlciBmcm9tIGEgV0cgcG9pbnQgb2YgdmlldywgSSdtIG5vdCBjbGVhciBvbiB3 aGF0IGl0IG1lYW5zIHRvIGhhdmUgYSBkaXNjdXNzaW9uIGZvcnVtIGFuZCB3aGF0LCBpZiBhbnl0 aGluZywgdGhlIFdHIHdpbGwgZG8gd2l0aCBpdCAoZS5nLiBkaXNjdXNzIHN1Y2ggZHJhZnRzIGFz IHBhcnQgb2YgbWVldGluZ3MsDQogZXRjKSA/IDxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPkl0J3Mg YWxzbyBub3QgY2xlYXIgdG8gbWUgdGhhdCB3ZSBjYW4vc2hvdWxkIHN0YXRlIHRoYXQgc3VjaCBk b2N1bWVudHMgd291bGQgYmUgSW5mb3JtYXRpb25hbC4gV2UgbWF5IGRlY2lkZSB0aGF0IHdlIG5l ZWQgc29tZSBwcm9jZWR1cmVzIGZvciBob3cgdG8gZGVmaW5lIHN1Y2ggZG9jdW1lbnRzLCBoYXZl IGRlc2lnbmF0ZWQNCiBleHBlcnRzLCBhIGRpcmVjdG9yYXRlLCBldGMuIHRvIHJldmlldyB0aGVt IGV0Yy4gSSdtIGd1ZXNzaW5nIHRoaXMgaXMgYWxsIGEgYml0IHByZW1hdHVyZSB0aG91Z2gsIGJ1 dCBhZ2Fpbiwgd2UgbWF5IHdhbnQgdG8gbm90ZSB0aGF0IGFzIGFuIGlzc3VlIGluIHRoZSBjaGFy dGVyIHRoYXQgdGhlIFdHIG5lZWRzIHRvIHJlc29sdmUgYXQgc29tZSBwb2ludC48L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzAwNzBDMCI+W0xpbmRhXSBBZ3JlZSB3 aXRoIHlvdS4gSSB3aWxsIHNlZSBob3cgQUQgd2FudHMgdG8gYWRkcmVzcyB0aGlzIHN1Z2dlc3Rp b24gLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPk9rPGJyPg0KPGJyPg0KPG86cD48L286cD48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Tml0czo8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+LSBm aXJzdCBwYXJhZ3JhcGg6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXMiPnMvdGhlIG1pdGlnYXRlL21pdGlnYXRlIHRoZS88L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPi0gc2Vjb25kIGxhc3Qg cGFyYWdyYXBoOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNv bnNvbGFzIj5zL1JGQ3Mgb2YvUkZDcyBvcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25z b2xhcztjb2xvcjojMDA3MEMwIj5bTGluZGFdIFRoYW5rIHlvdSBmb3IgdGhlIGNhdGNoLiBUaGV5 IGFyZSBjb3JyZWN0ZWQgb24gdGhlIEkyTlNGIHdpa2kgbm93Lg0KPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5UaGFua3MgZm9y IHRoZSBxdWljayByZXNwb25zZSBhbmQgdXBkYXRlcy4NCjxicj4NCjxicj4NCi0tIEZsZW1taW5n IDxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFz Ij5UaGFua3M8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25z b2xhcyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPi0tIEZsZW1taW5nPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+T24gOC8yNi8xNSA1OjM4IFBNLCBMaW5kYSBEdW5i YXIgd3JvdGU6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPiZndDsgS2F0aGxlZW4sPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBUaGFuayB5b3UgdmVyeSBtdWNoIGZvciB0 aGUgZWRpdG9yaWFsIGNoYW5nZXMuIFRoZSBjaGFydGVyIGRlc2NyaXB0aW9uDQo8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBvbiB0aGUg STJOU0YgV2lraSBoYXMgYmVlbiB1cGRhdGVkIHRvIHJlZmxlY3QgeW91ciBzdWdnZXN0ZWQgY2hh bmdlczoNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzIj4mZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2ludGVyZmFj ZTJuc2YvaG9tZSI+DQpodHRwczovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNm L2hvbWU8L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IExpbmRhPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IC0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsgRnJvbTogSTJuc2YgWzxhIGhyZWY9Im1haWx0bzppMm5z Zi1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZzwvYT5dIE9u IEJlaGFsZiBPZiBLYXRobGVlbg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsgTW9yaWFydHk8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBTZW50OiBXZWRuZXNkYXksIEF1Z3Vz dCAyNiwgMjAxNSAyOjI5IFBNPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6Q29uc29sYXMiPiZndDsgVG86IEpvc2VwaCBTYWxvd2V5PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgQ2M6IDxhIGhyZWY9Im1h aWx0bzppMm5zZkBpZXRmLm9yZyI+DQppMm5zZkBpZXRmLm9yZzwvYT48L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBTdWJqZWN0OiBSZTog W0kybnNmXSBDb25zZW5zdXMgY2FsbCBvbiBJMk5TRiBDaGFydGVyPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBJIGhhdmUg YSBmZXcgZWRpdG9yaWFsIGNoYW5nZXMgaW4gdGhlIGZvbGxvd2luZyB0ZXh0IHRoYXQgZG9lcyBu b3QgY2hhbmdlIHRoZSBtZWFuaW5nIG9mIHRoZSBjaGFydGVyIHRleHQ6PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBBIE5l dHdvcmsgU2VjdXJpdHkgRnVuY3Rpb24gKE5TRikgaXMgYSBmdW5jdGlvbiB1c2VkIHRvIGVuc3Vy ZSBpbnRlZ3JpdHksIGNvbmZpZGVudGlhbGl0eSwgYW5kIGF2YWlsYWJpbGl0eSBvZiBuZXR3b3Jr IGNvbW11bmljYXRpb25zLCB0byBkZXRlY3QgdW53YW50ZWQgbmV0d29yayBhY3Rpdml0eSwgYW5k IHRvIGJsb2NrDQogb3IgYXQgbGVhc3QgdGhlIG1pdGlnYXRlIGVmZmVjdHMgb2YgdW53YW50ZWQg YWN0aXZpdHkuIE5TRnMgYXJlIHByb3ZpZGVkIGFuZCBjb25zdW1lZCBpbiBpbmNyZWFzaW5nbHkg ZGl2ZXJzZSBlbnZpcm9ubWVudHMuIFVzZXJzIG9mIE5TRnMgY291bGQgY29uc3VtZSBuZXR3b3Jr IHNlY3VyaXR5IHNlcnZpY2VzIGhvc3RlZCBieSBvbmUgb3IgbW9yZSBwcm92aWRlcnMsIHdoaWNo IG1heSBiZSB0aGVpciBvd24gZW50ZXJwcmlzZSwgc2VydmljZSBwcm92aWRlcnMsDQogb3IgYSBj b21iaW5hdGlvbiBvZiBib3RoLiZuYnNwOyBTaW1pbGFybHksIHNlcnZpY2UgcHJvdmlkZXJzIG1h eSBvZmZlciB0aGVpciBjdXN0b21lcnMgbmV0d29yayBzZWN1cml0eSBzZXJ2aWNlcyB0aGF0IGFy ZSBlbmZvcmNlZCBieSBtdWx0aXBsZSBzZWN1cml0eSBwcm9kdWN0cyBhbmQvb3IgZnVuY3Rpb25z IGZyb20gZGlmZmVyZW50IHZlbmRvcnMuIE5TRnMgbWF5IGJlIHByb3ZpZGVkIGJ5IHBoeXNpY2Fs IGFuZC9vciB2aXJ0dWFsaXplZCBpbmZyYXN0cnVjdHVyZS4NCiBXaXRob3V0IHN0YW5kYXJkIGlu dGVyZmFjZXMgdG8gY29udHJvbCBhbmQgbW9uaXRvciB0aGUgYmVoYXZpb3Igb2YgTlNGcywgaXQg aGFzIGJlY29tZSB2aXJ0dWFsbHkgaW1wb3NzaWJsZSBmb3IgcHJvdmlkZXJzIG9mIHNlY3VyaXR5 IHNlcnZpY2VzIHRvIGF1dG9tYXRlIHNlcnZpY2Ugb2ZmZXJpbmdzIHRoYXQgdXRpbGl6ZSBkaWZm ZXJlbnQgc2VjdXJpdHkgZnVuY3Rpb25zIGZyb20gbXVsdGlwbGUgdmVuZG9ycy48L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7 IFRoZSBnb2FsIG9mIEkyTlNGIGlzIHRvIGRlZmluZSBhIHNldCBvZiBzb2Z0d2FyZSBpbnRlcmZh Y2VzIGFuZCBkYXRhIG1vZGVscyBmb3IgY29udHJvbGxpbmcgYW5kIG1vbml0b3JpbmcgYXNwZWN0 cyBvZiBwaHlzaWNhbCBhbmQgdmlydHVhbCBOU0ZzLiBJZiB0aGUgd29ya2luZyBncm91cCBmaW5k cyBpdCBuZWNlc3NhcnkNCiB0byB3b3JrIG9uIGFuIGluZm9ybWF0aW9uIG1vZGVsIGJlZm9yZSB0 aGUgZGF0YSBtb2RlbHMsIHRvIGhlbHAgcHJvdmlkZSBndWlkYW5jZSBhbmQgZGVyaXZlIHRoZSBk YXRhIG1vZGVscywgaXQgbWF5IGRvIHNvLiBUaGUgd29ya2luZyBncm91cCB3aWxsIGRlY2lkZSBs YXRlciB3aGV0aGVyIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCBuZWVkcyB0byBiZSBwdWJsaXNoZWQg YXMgYW4gUkZDLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNv bnNvbGFzIj4mZ3Q7IE90aGVyIGFzcGVjdHMgb2YgTlNGcywgc3VjaCBhcyBkZXZpY2Ugb3IgbmV0 d29yayBwcm92aXNpb25pbmcgYW5kIGNvbmZpZ3VyYXRpb24sIGFyZSBvdXQgb2Ygc2NvcGUuPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsm bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cyI+Jmd0OyBDb250cm9sbGluZyBhbmQgbW9uaXRvcmluZyBhc3BlY3RzIG9mIE5TRnMgaW5jbHVk ZSB0aGUgYWJpbGl0eSB0byBzcGVjaWZ5IHJ1bGVzIChieSBhIHNpbmdsZSBjb250cm9sbGVyIGF0 IHRoZSBmaXJzdCBwaGFzZSksIHF1ZXJ5LCBhbmQgbW9uaXRvciBOU0ZzIGJ5IG9uZSBvciBtb3Jl IG1hbmFnZW1lbnQgZW50aXRpZXMuJm5ic3A7DQogVGhlIGluaXRpYWwgcGhhc2Ugb2YgSTJOU0Yg d2lsbCBvbmx5IGNvbnNpZGVyIG9uZSBzaW5nbGUgY29udHJvbGxlciB0aGF0IGNhbiBzcGVjaWZ5 IG9yIGNoYW5nZSBydWxlcyB0byBOU0ZzIGJlY2F1c2UgbXVsdGktaGVhZGVkIGNvbnRyb2wgcmVx dWlyZXMgdGhlIGNvb3JkaW5hdGlvbiB0byBhdm9pZCBwb3RlbnRpYWwgY29uZmxpY3Qgb2YgcnVs ZXMuIFRoZSBOU0ZzIGNhbiBiZSBtb25pdG9yZWQgYnkgbXVsdGlwbGUgZW50aXRpZXMsIGJ1dCB0 aGUNCiBkYXRhYmFzZSB1cGRhdGUgYW5kIHN5bmNocm9uaXphdGlvbiBhbW9uZyBtdWx0aXBsZSBt YW5hZ2VtZW50IGVudGl0aWVzIGFyZSBvdXQgb2Ygc2NvcGUgZm9yIEkyTlNGLiBBcyB0aGVyZSBh cmUgbWFueSBkaWZmZXJlbnQgc2VjdXJpdHkgdmVuZG9ycyBzdXBwb3J0aW5nIGRpZmZlcmVudCBm ZWF0dXJlcyBhbmQgZnVuY3Rpb25zIG9uIHRoZWlyIGRldmljZXMsIEkyTlNGIHdpbGwgZm9jdXMg b24gZmxvdy1iYXNlZCBOU0ZzIHRoYXQgcHJvdmlkZSB0cmVhdG1lbnQNCiB0byBwYWNrZXRzL2Zs b3dzLCBzdWNoIGFzIEludHJ1c2lvbiBQcm90ZWN0aW9uL0RldGVjdGlvbiBTeXN0ZW0gKElQUy9J RFMpLCBXZWIgZmlsdGVyaW5nLCBmbG93IGZpbHRlcmluZywgZGVlcCBwYWNrZXQgaW5zcGVjdGlv biwgb3IgcGF0dGVybiBtYXRjaGluZyBhbmQgcmVtZWRpYXRpb24uPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBJMk5TRiB3 aWxsIHNwZWNpZnkgaW50ZXJmYWNlcyBhdCB0d28gZnVuY3Rpb25hbCBsZXZlbHMgZm9yIHRoZSBj b250cm9sIGFuZCBtb25pdG9yaW5nIG9mIG5ldHdvcmsgc2VjdXJpdHkgZnVuY3Rpb25zOjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PiZndDsgVGhlIEkyTlNGIENhcGFiaWxpdHkgTGF5ZXIgc3BlY2lmaWVzIGhvdyB0byBjb250cm9s IGFuZCBtb25pdG9yIE5TRnMNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IGF0IGEgZnVuY3Rpb25hbCBpbXBsZW1lbnRhdGlvbiBsZXZl bC4mbmJzcDsgVGhlIHRlcm0g4oCcRnVuY3Rpb25hbA0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgSW1wbGVtZW50YXRpb27igJ0gaXMg dXNlZCB0byBlbXBoYXNpemUgdGhhdCB0aGUgcnVsZXMgKGZvciBjb250cm9sIGFuZDwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IG1vbml0 b3IpIG9mIE5TRnMgaGF2ZSB0byBiZSBpbXBsZW1lbnRhYmxlIGJ5IG1vc3QgTlNGcy4gSTJOU0Yg d2lsbCBzdGFuZGFyZGl6ZSBhIHNldCBvZiBpbnRlcmZhY2VzIGJ5IHdoaWNoIGEgc2VjdXJpdHkg Y29udHJvbGxlciBjYW4gaW52b2tlLCBvcGVyYXRlLCBhbmQgbW9uaXRvciBOU0ZzLjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZn dDsgVGhlIEkyTlNGIFNlcnZpY2UgTGF5ZXIgZGVmaW5lcyBob3cgY2xpZW50c+KAmSBzZWN1cml0 eSBwb2xpY2llcyBtYXkgYmUgZXhwcmVzc2VkIHRvIGEgc2VjdXJpdHkgY29udHJvbGxlci4gVGhl IGNvbnRyb2xsZXIgaW1wbGVtZW50cyBpdHMgcG9saWNpZXMgYWNjb3JkaW5nIHRvIHRoZSB2YXJp b3VzIGNhcGFiaWxpdGllcw0KIHByb3ZpZGVkIGJ5IHRoZSBJMk5TRiBjYXBhYmlsaXR5IExheWVy LiZuYnNwOyBUaGUgSTJOU0YgU2VydmljZSBMYXllciBhbHNvIGFsbG93cyB0aGUgY2xpZW50IHRv IG1vbml0b3IgdGhlIGNsaWVudCBzcGVjaWZpYyBwb2xpY2llcy48L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFNpbmNlIHRo ZXJlIGNvdWxkIGJlIG1hbnkgZGVwdGhzIG9yIHR5cGVzIG9mIFNlcnZpY2UgTGF5ZXIgcG9saWNp ZXMsIHRoZSBmb2xsb3dpbmcgYnVsbGV0cyBmdXJ0aGVyIGNsYXJpZnkgdGhlIHNjb3BlIG9mIEky TlNGOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFz Ij4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IG8gT25seSB0aGUgU2ltcGxlIFNl cnZpY2UgTGF5ZXIgcG9saWNpZXMgdGhhdCBhcmUgbW9kZWxlZCBhcyBjbG9zZWx5IGFzIHBvc3Np YmxlIG9uIHRoZSBDYXBhYmlsaXR5IExheWVyIGFyZSB3aXRoaW4gdGhlIHNjb3BlLjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFN1Y2gg YSBTaW1wbGUgU2VydmljZSBMYXllciB3aWxsIGVuYWJsZSBhIHNlY3VyaXR5IGNvbnRyb2xsZXIg dG8gaGFuZGxlIGlzc3VlcyBsaWtlIG11bHRpLXRlbmFuY3kgYW5kIHRoZSBjaG9pY2UgYmV0d2Vl biBhdmFpbGFibGUgTlNGcyBmb3IgYSBnaXZlbiBwb2xpY3kuPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgbyBJMk5TRiB3aWxsIG5vdCBzcGVjaWZ5IGFic3RyYWN0IG9yIHNvcGhpc3Rp Y2F0ZWQgcG9saWNpZXMgZnJvbSBjbGllbnRzLiBFeHByZXNzaW5nIHBvbGljaWVzIGluIHdheXMg b3RoZXIgdGhhbiB0aGUgbW9kZWwgdXNlZCBieSB0aGUgQ2FwYWJpbGl0eSBMYXllciBpcyBvdXQg b2Ygc2NvcGUuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbyBUaGUgdHJhbnNsYXRp b24gbWVjaGFuaXNtL21ldGhvZHMgZnJvbSBTZXJ2aWNlIExheWVyIHBvbGljaWVzIHRvIENhcGFi aWxpdHkgbGF5ZXIgY29tbWVudHMgYXJlIG91dCBvZiBzY29wZSBmb3IgSTJOU0YuPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgSG93ZXZl ciwgSTJOU0Ygd2lsbCBwcm92aWRlIGEgZGlzY3Vzc2lvbiBmb3J1bSBmb3IgSW5mb3JtYXRpb25h bCBkcmFmdHMgb24gZGF0YSBtb2RlbHMsIEFQSXMsIGV0Yy4gdGhhdCBkZW1vbnN0cmF0ZSBob3cg bW9yZSBjb21wbGV4IFNlcnZpY2UgTGF5ZXIgcG9saWNpZXMgYW5kIGZvcm1hdHMgbWF5IGJlIHRy YW5zbGF0ZWQNCiB0byBDYXBhYmlsaXR5IExheWVyIGZ1bmN0aW9ucy4mbmJzcDsgU3VjaCBkb2N1 bWVudHMgd291bGQgYmUgcHVyc3VlZCBvdXRzaWRlIHRoZSBXRy48L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFN0YW5kYXJk IGludGVyZmFjZXMgZm9yIG1vbml0b3JpbmcgYW5kIGNvbnRyb2xsaW5nIHRoZSBiZWhhdmlvciBv ZiBOU0ZzIGFyZSBlc3NlbnRpYWwgYnVpbGRpbmcgYmxvY2tzIGZvciBwcm92aWRlcnMgb2Ygc2Vj dXJpdHkgc2VydmljZSB0byBhdXRvbWF0ZSB0aGUgdXNlIG9mIGRpZmZlcmVudCBOU0ZzIGZyb20g bXVsdGlwbGUNCiB2ZW5kb3JzLiBUaGlzIHdvcmsgd2lsbCBsZXZlcmFnZSB0aGUgZXhpc3Rpbmcg cHJvdG9jb2xzIGFuZCBkYXRhIG1vZGVscyBkZWZpbmVkIGJ5IHRoZSBJMlJTLCBORVRDT05GLCBh bmQgTkVUTU9EIHdvcmtpbmcgZ3JvdXBzLiBJZiBleHRlbnNpb25zIHRvIHRoZXNlIHByb3RvY29s cyBvciBkYXRhIG1vZGVscyBhcmUgbmVlZGVkLCByZXF1aXJlbWVudHMgd2lsbCBiZSBkZXZlbG9w ZWQgYnkgdGhpcyBXRywgYW5kIHRoZSBleHRlbnNpb25zIHdpbGwNCiBiZSBkZXZlbG9wZWQgaW4g Y29vcGVyYXRpb24gd2l0aCB0aGUgV0dzIHJlc3BvbnNpYmxlIGZvciB0aGUgcHJvdG9jb2xzLjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7 Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29s YXMiPiZndDsgVGhlIEkyTlNGIFdH4oCZcyBkZWxpdmVyYWJsZXMgaW5jbHVkZTo8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IG8gQSBzaW5nbGUgZG9jdW1lbnQgY292ZXJp bmcgdXNlIGNhc2VzLCBwcm9ibGVtIHN0YXRlbWVudCwgYW5kIGdhcCBhbmFseXNpcyBkb2N1bWVu dC4gVGhpcyBkb2N1bWVudCB3aWxsIGluaXRpYWxseSBiZSBwcm9kdWNlZCBmb3IgcmVmZXJlbmNl IGFzIGEgbGl2aW5nIGxpc3QgdG8gdHJhY2sgYW5kIHJlY29yZA0KIGRpc2N1c3Npb25zOiB0aGUg V0cgbWF5IGRlY2lkZSB0byBub3QgcHVibGlzaCB0aGlzIGRvY3VtZW50IGFzIGFuIFJGQy48L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBvIEEgZnJhbWV3b3JrIGRvY3VtZW50LCBwcmVz ZW50aW5nIGFuIG92ZXJ2aWV3IG9mIHRoZSB1c2Ugb2YgTlNGcyBhbmQgdGhlIHB1cnBvc2Ugb2Yg dGhlIG1vZGVscyBkZXZlbG9wZWQgYnkgdGhlIFdHLiBUaGlzIGRvY3VtZW50IHdpbGwgYWxzbyBi ZSBhIHJlZmVyZW5jZSB0ZXh0IHRvIGd1aWRlIHRoZSBtYWluDQogd29yayBhbmQgdGhlIFdHIG1h eSBkZWNpZGUgdG8gbm90IHB1Ymxpc2ggdGhpcyBkb2N1bWVudCBhcyBhbiBSRkMuPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbyBJZiB0aGUgd29ya2luZyBncm91cCBjb25zaWRlcnMg aXQgbmVjZXNzYXJ5LCBhIHNpbmdsZSwgdW5pZmllZCwgSW5mb3JtYXRpb24gTW9kZWwgdG8gZGVz Y3JpYmUgdGhlIGNvbnRyb2wgYW5kIG1vbml0b3Jpbmcgb2YgZmxvdy1iYXNlZCBOU0ZzLjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IG8gWUFORyBkYXRhIG1vZGVscyBmb3IgdGhlIGNv bnRyb2wgYW5kIG1vbml0b3Jpbmcgb2YgTlNGcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBvIFJlcXVlc3RzIHRvIHRoZSBJQU5BIGZvciB0aGUgY3JlYXRpb24gb2YgYSByZWdpc3Ry eSB0aGF0IGVuYWJsZXMgdGhlIGNoYXJhY3RlcmlzdGljcyBhbmQgYmVoYXZpb3Igb2YgTlNGcyB0 byBiZSBzcGVjaWZpZWQgdXNpbmcgYSB2ZW5kb3ItbmV1dHJhbCB2b2NhYnVsYXJ5IHdpdGhvdXQg cmVxdWlyaW5nIHRoZQ0KIE5TRnMgdGhlbXNlbHZlcyB0byBiZSBzdGFuZGFyZGl6ZWQuIFRoZSBy ZWdpc3RyeSBlbmFibGVzIHZhcmlvdXMgbWVjaGFuaXNtcywgaW5jbHVkaW5nIHBvbGljeSBydWxl cywgdG8gYmUgdXNlZCB0byBtYXRjaCBtb25pdG9yIGFuZCBjb250cm9sIGZ1bmN0aW9ucyB0byB0 aGUgbmVlZHMgb2YgYW4gYXBwbGljYXRpb24gYW5kL29yIGVudmlyb25tZW50Ljwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IEFuIGV4YW1p bmF0aW9uIG9mIGV4aXN0aW5nIHNlY3VyZSBjb21tdW5pY2F0aW9uIG1lY2hhbmlzbXMgdG8gaWRl bnRpZnkgdGhlIGFwcHJvcHJpYXRlIG9uZXMgZm9yIGNhcnJ5aW5nIHRoZSBjb250cm9sbGluZyBh bmQgbW9uaXRvcmluZyBpbmZvcm1hdGlvbiBiZXR3ZWVuIHRoZSBOU0ZzIGFuZCB0aGVpciBtYW5h Z2VtZW50DQogZW50aXRpZXMuIFRoaXMgZG9jdW1lbnQgbWF5IGFsc28gYmUgcHJvZHVjZWQgYXMg YSB3b3JraW5nIGRvY3VtZW50IHRoYXQgaXMgbm90IHB1Ymxpc2hlZCBhcyBhbiBSRkMuPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ Jmd0OyBUaGUgV0cgbWF5IGFkZGl0aW9uYWxseSBjaG9vc2UgdG8gZGV2ZWxvcCBkb2N1bWVudHMg dG8gZGVzY3JpYmUgcmVxdWlyZW1lbnRzIGZvciBleHRlbnNpb25zIChpZiBhbnkpIHRvIGV4aXN0 aW5nIHByb3RvY29scyB1c2VkIGJ5IHRoZSBXRywgdG8gZXhwbGFpbiBob3cgdGhlIGRhdGEgbW9k ZWxzIGFyZSB1c2VkIHRvDQogbW9uaXRvciBhbmQgY29udHJvbCBmbG93LWJhc2VkIE5TRnMsIGFu ZCB0byBkZXNjcmliZSBob3cgdG8gdXNlIEkyUlMgYW5kIE5FVENPTkYgdG8gY2FycnkgdGhlIGNv bnRlbnQgb2YgdGhlIGRhdGEgbW9kZWxzLiBUaGVzZSBkb2N1bWVudHMgbWF5IGJlIHB1Ymxpc2hl ZCBhcyBJbmZvcm1hdGlvbmFsIFJGQ3Mgb2YgbWF5IGJlIHdvcmtpbmcgZG9jdW1lbnRzIHRoYXQg YXJlIGRpc2NhcmRlZCBvbmNlIHRoZXkgaGF2ZSB0cmlnZ2VyZWQgdGhlIG5lY2Vzc2FyeQ0KIHdv cmsuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpD b25zb2xhcyI+Jmd0OyBUaGUgV0cgd2lsbCB3b3JrIGNsb3NlbHkgd2l0aCB0aGUgSTJSUywgTkVU Q09ORiwgYW5kIE5FVE1PRCBXR3MuIFRoZSBXRyB3aWxsIGNvbW11bmljYXRlIHdpdGggZXh0ZXJu YWwgU0RPcyBsaWtlIEVUU0kgTkZWIGFuZCB3aWxsIGVuY291cmFnZSBvcGVuIHNvdXJjZSBjb2Rl IGRldmVsb3BtZW50IHJlbGF0ZWQgdG8gdGhlDQogV0cgc2NvcGUgaW4gb3JnYW5pemF0aW9ucyBs aWtlIE9ORiwgT3BlblN0YWNrLCBPREwsIGFuZCBPUE5GVi48L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgT24g V2VkLCBBdWcgMjYsIDIwMTUgYXQgMTo0NCBBTSwgSm9zZXBoIFNhbG93ZXkgJmx0OzxhIGhyZWY9 Im1haWx0bzpqb2VAc2Fsb3dleS5uZXQiPmpvZUBzYWxvd2V5Lm5ldDwvYT4mZ3Q7IHdyb3RlOjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7 Jmd0OyBUaGFua3MgdG8gZXZlcnlvbmUgd2hvIGhhcyBjb250cmlidXRlZCB0b3dhcmRzIGRldmVs b3BpbmcgdGhlIGNoYXJ0ZXIuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IEkgYmVsaWV2ZSB3ZSBhcmUgY2xvc2UgdG8gY29uc2Vu c3VzIHNvIHRoaXMgaXMgYSBjb25zZW5zdXMgY2FsbCBmb3IgdGhlIEkyTlNGPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IGNoYXJ0 ZXIuJm5ic3A7Jm5ic3A7IFRoZSBjaGFydGVyIHRleHQgaXMgbG9jYXRlZCBhdDwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyA8YSBo cmVmPSJodHRwczovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9pbnRlcmZhY2UybnNmL2hvbWUiPg0K aHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaW50ZXJmYWNlMm5zZi9ob21lPC9hPi4mbmJz cDsgUGxlYXNlIHNlbmQgPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6Q29uc29sYXMiPiZndDsmZ3Q7IGNvbW1lbnRzIG9uIHRoaXMgY2hhcnRlciB0byB0aGUgSTJO U0YgbGlzdCBieSBTZXB0ZW1iZXIgMiwgMjAxNS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsmbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgVGhhbmsgeW91 LDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4m Z3Q7Jmd0OyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzIj4mZ3Q7Jmd0OyBKb2U8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgSTJuc2YgbWFpbGluZyBsaXN0 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZn dDsmZ3Q7IDxhIGhyZWY9Im1haWx0bzpJMm5zZkBpZXRmLm9yZyI+DQpJMm5zZkBpZXRmLm9yZzwv YT48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ Jmd0OyZndDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9p Mm5zZiI+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmPC9hPjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7 Jmd0OyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNv bnNvbGFzIj4mZ3Q7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6Q29uc29sYXMiPiZndDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_4A95BA014132FF49AE685FAB4B9F17F657D1A2FDdfweml701chm_-- From nobody Thu Aug 27 15:13:16 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4A1D1ACCE9 for ; Thu, 27 Aug 2015 15:13:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -12.21 X-Spam-Level: X-Spam-Status: No, score=-12.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MANGLED_NAIL=2.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8cxM0aettUJ5 for ; Thu, 27 Aug 2015 15:13:04 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20AB81A0169 for ; Thu, 27 Aug 2015 15:13:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=88522; q=dns/txt; s=iport; t=1440713584; x=1441923184; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to; bh=oxNGbgjsoWcGAc4KhbnP23uV2J4y4Em+A0Cpc0sjNd4=; b=M+Ih/8Aqqq3ixBvzgDkwLWnMvWegLOKFqDKZjBhWWJHgU4Q3D/k+WBqG R51vzJpPPKi9yGUQUFkThlOFSh/NULTzmY7kAzTINsoVxHMNfDIFCzDMa lTo0BiH8OurdAKIcITiS/yPJbxWuJA9MewaQyKeIdwzXdEmu4iQ0kPj4J o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DQBQATit9V/4gNJK1UCoJOTVRpqgMBAQEFAYEKkm+BVRkBCYIeJYM4AoE9ORMBAQEBAQEBgQqEIwEBAQMBAQEBFwECBgo6BAMEAgQBBQcECQIRBAEBAQkWAQECBAMCAgkDAgECARUfCQgGAQwGAgEBiCIIDZQtnR2UcwEBAQEBAQEBAQEBAQEBAQEBAQEBARMEhieFOoQnBwVYBgEGgmOBQwWHKop7gxiFBodtgUqEMoJ7iTaESYNrJoJBgVoiM4EGgUcBAQE X-IronPort-AV: E=Sophos;i="5.17,423,1437436800"; d="scan'208,217";a="182872557" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 27 Aug 2015 22:13:02 +0000 Received: from [10.98.149.195] (bxb-fandreas-8812.cisco.com [10.98.149.195]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t7RMD0rY013872; Thu, 27 Aug 2015 22:13:00 GMT To: Linda Dunbar , Kathleen Moriarty , Joseph Salowey References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D19B03@dfweml701-chm> <55DE6F40.3080604@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D1A09B@dfweml701-chm> <55DF6A8A.8090407@cisco.com> <4A95BA014132FF49AE685FAB4B9F17F657D1A2CD@dfweml701-chm> From: Flemming Andreasen Message-ID: <55DF8B85.5070403@cisco.com> Date: Thu, 27 Aug 2015 18:13:25 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D1A2CD@dfweml701-chm> Content-Type: multipart/alternative; boundary="------------030704000708090301090003" Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Further clarification and explanations to I2NSF charter has been added to the I2NSF Wiki Q&A (was RE: Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 22:13:14 -0000 This is a multi-part message in MIME format. --------------030704000708090301090003 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit On 8/27/15 4:27 PM, Linda Dunbar wrote: > > Flemming, > > Comments are inserted below: > > *From:*Flemming Andreasen [mailto:fandreas@cisco.com] > *Sent:* Thursday, August 27, 2015 2:53 PM > *To:* Linda Dunbar; Kathleen Moriarty; Joseph Salowey > *Cc:* i2nsf@ietf.org > *Subject:* Re: Further clarification and explanations to I2NSF charter > has been added to the I2NSF Wiki Q&A (was RE: [I2nsf] Consensus call > on I2NSF Charter > > Thanks Linda > > Taking a quick look at the Wiki: > - I noticed that your definition of an NSF explicitly prohibits any > packet modification such as NAT or MAC rewrite; this will exclude a > large portion of current NSFs (e.g. it's commonly used by FWs and > ADCs) - is that intentional ? > > [Linda] This is not my intention. I don’t remember who put the last > clause in (i.e. without modification to the packet due to the > inspection process (MAC rewrites, TTL decrement action; even NAT would > be outside the inspection process).. I can pull the mailing list if it > ok to remove the last clause. > > > > - You mention that "logging" is out of scope, yet in other places you > refer to reporting, analytics, etc., and the charter talks about > monitoring. Can you clarify ? > [Linda] Yes, “logging” is referring to analytics, such algorithms, > benchmark, etc. > Ok - we should probably change the Q&A on logging then. > Also, a couple of my questions below still seem to be open, but there > is a parallel exchange with Kathleen on some of those, so maybe we can > resolve them there. > > [Linda] do you mean the questions like “why framework, use cases may > not be published as RFCs”? Can you help me out with the questions? > > I believe Kathleen clarified the RFC publication part. The main one I'm still not clear on is the types of NSFs that are in/out of scope. Providing an exact definition of those is not easy though, since the lines are often blurred (per my DDoS example in the e-mail below). What may work better is simply listing the ones that are explicitly known to be in scope (which the current charter text essentially does), but leave it open for further WG discussion as to what other ones (if any) may be in scope as well (perhaps with a phased approach with additional milestones added for those later on). The other ones were mainly around calling out the basic framework (client/security controller/NSF and the layers between them) as part of the charter and clarification of simple vs abstract/sophisticated policies. With the current charter text, they are both open to interpretation (and hence further debate and subsequent speficiation) IMO, but maybe that's not a bad thing and the WG should indeed spend more time on that once it's formed ? Thanks -- Flemming > > Cheers > > -- Flemming > > On 8/27/15 12:29 PM, Linda Dunbar wrote: > > Flemming, > > I have updated the Q&A on the I2NSF Wiki to clarify the questions > you have: > https://sites.google.com/site/interface2nsf/i2nsf-q-a/i2nsfqa > > Hope it helps. Please let me know if you have more questions or > suggestions for I2NSF charter. > > Thanks, > > Linda > > *From:*Flemming Andreasen [mailto:fandreas@cisco.com] > *Sent:* Wednesday, August 26, 2015 9:01 PM > *To:* Linda Dunbar; Kathleen Moriarty; Joseph Salowey > *Cc:* i2nsf@ietf.org > *Subject:* Re: [I2nsf] Consensus call on I2NSF Charter > > On 8/26/15 7:31 PM, Linda Dunbar wrote: > > Flemming, > > Thank you very much for the detailed comments. Thank you for > catching those typos (corrected on the I2NSF wiki now). We > really need the fresh set of eyes to look at it. > > You stated: > > - The third paragraph says that "The NSFs can be monitored by > multiple entities..."; does this imply a 1:N (direct) > monitoring relationship ? > > If so, that seems to get to a design decision that may be > premature. > > [Linda] The intent is to describe a scenario that a NSF may > send different outputs to different entities. For example, > some statistics report to “Analytics system”, “rule query” to > management entity. Can you suggest a better wording for this? > > I see. I'm not sure I would get into that level of detail in the > charter, but since you introduce the notion of "features and > functions", you could for example say > > "The NSFs may contain a multitude of features and functions, each > of which can be monitored by a different entity" > > or something like that. > > > > > Other Replies are inserted below: > > -----Original Message----- > From: Flemming Andreasen [mailto:fandreas@cisco.com] > Sent: Wednesday, August 26, 2015 5:46 PM > To: Linda Dunbar; Kathleen Moriarty; Joseph Salowey > Cc: i2nsf@ietf.org > Subject: Re: [I2nsf] Consensus call on I2NSF Charter > > Apologies for joining the discussion late - just got back from > PTO. In any case, please find some additional comments on the > proposed charter below (some more substantial than others): > > - The first paragraph starts out by defining what an NSF is, and > we can argue about some of the points in there for various > security functions (e.g. I may want to detect normal network > behavior to establish a baseline, which does not seem to be > covered by the current definition). > > [Linda] Over the course of I2NSF (about a year), we have gone > through a long debate on what NSFs should be considered by IETF > I2NSF. As the result of the long debate, we use the definition to > classify a set of functions to be considered for IETF I2NSF (then > further narrowing down to Flow-based NSFs). > > The function you described, i.e. detecting normal network behavior > to establish a baseline is not in the scope of I2NSF, even though > this function can also be "provided and consumed in increasingly > diverse environments". > > Ok - the part about "detect unwanted network activity" is fairly > broad though, and I'm not sure how you detect unwanted activity > without looking at all activity (which is what triggered my > original question). > > > > I don't think that will be a productive discussion though, nor is > it necessary. Instead, I'd suggest we are not overly prescriptive, > but rather view these as possible NSF features, and supplement > them with some actual product examples (e.g. FW, NGFW, IPS, etc.). > Similarly, since we limit our scope to "flow-based NSFs", we may > want to make that clear here. An example of a security function > that would *not* be in scope may be helpful too. > > [Linda] All the NSFs in I2NSF context are “features”, whose form > factor can be provided physical box or virtualized format. Some > form factors, i.e. devices or VM, can provide multiple > “functions”. Do you think the sentences in the third paragraph is > good enough to describe what you want? > > /“I2NSF will focus on flow-based NSFs that provide treatment to > packets/flows, such as Intrusion Protection/Detection System > (IPS/IDS), Web filtering, flow filtering, deep packet inspection, > or pattern matching and remediation.” / > > The examples here are clear; I'm less clear on what else might be > in scope. For example, would a DDoS detection and mitigation > system be in scope (keeping in mind it may use a combination of > packet inspection and telemetry-based detection and mitigation and > that establishing a "normal" baseline is often part of the > operation) ? > > > > - The charter seems to operate with the notion of a "security > controller" that interacts with the "NSF". If I understand > correctly, the security controller implements the "Service Layer" > and the NSF implements the "Capability Layer". Furthermore, we > have "clients" that interact with the security controller to > implement policies (by leveraging the service layer). If so, it > would be good to clarify this taxonomy earlier in the charter. If > not, then I probably need some clarifications in the text. > > [Linda] “Security controller” is a conceptual entity, meaning an > entity to send implementable rules (capability layer) to the NSFs. > There could be multiple of them, each responsible for one type of > NSF (i.e. managing the instances of the NSFs). > > I2NSF includes “Simple Service Layer” that models closely to the > “Capability Layer”. For example: client can specify the rules > without specify which instances of the NSF. The “Controller” > manage the instances, as described by The figure in I2NSF > Framework document: > > + - - - - - - - - - - - - - - - + + - - - - - - - - - - - - - - - + > > | NSF-A +--------------+ | | NSF-B +--------------+ | > > | | Controller| | | | Controller| | > > | +--------------+ | | +--------------+ | > > | + - - - - - - - - - - - - - + | | + - - - - - - - - - - - - - + | > > | |+---------+ +---------+| | | |+---------+ +---------+| | > > | || NSF-A#1 | ... | NSF-A#n|| | | || NSF-B#1| ... | NSF-B#m|| | > > | |+---------+ +---------+| | | |+---------+ +---------+| | > > | | NSF-A cluster | | | | NSF-B cluster | | > > | + - - - - - - - - - - - - - + | | + - - - - - - - - - - - - - + | > > + - - - - - - - - - - - - - - - + + - - - - - - - - - - - - - - - + > > Ok - this basic framework seems to be foundational to the > structure of the work the group is doing. If so, I think it would > be helpful to outline it (verbally) in the charter. > > > > - In the definition of the "Capability Layer", there is a > statement about "rules...of NSFs have to be implementable by most > NSFs". Do you mean all NSFs or NSFs of a given type (I assume we > have different types of NSFs) ? > > [Linda] yes. > > - Policies are labeled as "simple" or "abstract or sophisticated" > > without further definition; I'm not sure where we draw that line > or how to do that in the charter; maybe clarifying that part needs > to be a deliverable ? > > [Linda] “simple” means that they can be directly translated to > capability layer rules with simple mapping, e.g. without explicit > stating which instantiation, may have customer ID that can be > translated to some tags carried by packets > > Ok - if that's the definition we want to use, can we clarify it in > the charter ? > > > > - A number of deliverables may not be published as an RFC; why not > (they seem to set the stage for several other deliverables and > hence are relevant for consumers of the information and data > models later on) ? > > [Linda] The WG group may decide to publish them as RFC or not > later. But the charter doesn’t specify which way. That is how IESG > wanted. > > Ok. > > > - The part about I2NSF providing a "discussion forum for > Informational drafts on.....[more complex Service Layer > policies]..." is confusing to me. The work seems to be pursued > outside the WG, so there are no deliverables and presumably no > agenda time will be allocated either. > > [Linda] this is to address the information documents that describe > the I2NSF demo, open source or interoperability initiatives that > are conducted outside the WG. E.g > https://datatracker.ietf.org/doc/draft-xie-i2nsf-demo-outline-design/ > > Ok - thanks for the pointer, however from a WG point of view, I'm > not clear on what it means to have a discussion forum and what, if > anything, the WG will do with it (e.g. discuss such drafts as part > of meetings, etc) ? > > > > It's also not clear to me that we can/should state that such > documents would be Informational. We may decide that we need some > procedures for how to define such documents, have designated > experts, a directorate, etc. to review them etc. I'm guessing this > is all a bit premature though, but again, we may want to note that > as an issue in the charter that the WG needs to resolve at some point. > > [Linda] Agree with you. I will see how AD wants to address this > suggestion . > > Ok > > > Nits: > > - first paragraph: > > s/the mitigate/mitigate the/ > > - second last paragraph: > > s/RFCs of/RFCs or > > [Linda] Thank you for the catch. They are corrected on the I2NSF > wiki now. > > Thanks for the quick response and updates. > > -- Flemming > > > > Thanks > > -- Flemming > > On 8/26/15 5:38 PM, Linda Dunbar wrote: > > > Kathleen, > > > > > > Thank you very much for the editorial changes. The charter description > > > on the I2NSF Wiki has been updated to reflect your suggested changes: > > >https://sites.google.com/site/interface2nsf/home > > > > > > > > > > Linda > > > > > > > > > -----Original Message----- > > > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen > > > Moriarty > > > Sent: Wednesday, August 26, 2015 2:29 PM > > > To: Joseph Salowey > > > Cc:i2nsf@ietf.org > > > Subject: Re: [I2nsf] Consensus call on I2NSF Charter > > > > > > I have a few editorial changes in the following text that does not > change the meaning of the charter text: > > > > > > A Network Security Function (NSF) is a function used to ensure > integrity, confidentiality, and availability of network > communications, to detect unwanted network activity, and to block > or at least the mitigate effects of unwanted activity. NSFs are > provided and consumed in increasingly diverse environments. Users > of NSFs could consume network security services hosted by one or > more providers, which may be their own enterprise, service > providers, or a combination of both. Similarly, service providers > may offer their customers network security services that are > enforced by multiple security products and/or functions from > different vendors. NSFs may be provided by physical and/or > virtualized infrastructure. Without standard interfaces to control > and monitor the behavior of NSFs, it has become virtually > impossible for providers of security services to automate service > offerings that utilize different security functions from multiple > vendors. > > > > > > The goal of I2NSF is to define a set of software interfaces and data > models for controlling and monitoring aspects of physical and > virtual NSFs. If the working group finds it necessary to work on > an information model before the data models, to help provide > guidance and derive the data models, it may do so. The working > group will decide later whether the information model needs to be > published as an RFC. > > > Other aspects of NSFs, such as device or network provisioning and > configuration, are out of scope. > > > > > > Controlling and monitoring aspects of NSFs include the ability to > specify rules (by a single controller at the first phase), query, > and monitor NSFs by one or more management entities. The initial > phase of I2NSF will only consider one single controller that can > specify or change rules to NSFs because multi-headed control > requires the coordination to avoid potential conflict of rules. > The NSFs can be monitored by multiple entities, but the database > update and synchronization among multiple management entities are > out of scope for I2NSF. As there are many different security > vendors supporting different features and functions on their > devices, I2NSF will focus on flow-based NSFs that provide > treatment to packets/flows, such as Intrusion Protection/Detection > System (IPS/IDS), Web filtering, flow filtering, deep packet > inspection, or pattern matching and remediation. > > > > > > I2NSF will specify interfaces at two functional levels for the control > and monitoring of network security functions: > > > > > > The I2NSF Capability Layer specifies how to control and monitor NSFs > > > at a functional implementation level. The term “Functional > > > Implementation” is used to emphasize that the rules (for control and > > > monitor) of NSFs have to be implementable by most NSFs. I2NSF > will standardize a set of interfaces by which a security > controller can invoke, operate, and monitor NSFs. > > > > > > The I2NSF Service Layer defines how clients’ security policies may be > expressed to a security controller. The controller implements its > policies according to the various capabilities provided by the > I2NSF capability Layer. The I2NSF Service Layer also allows the > client to monitor the client specific policies. > > > > > > Since there could be many depths or types of Service Layer policies, > the following bullets further clarify the scope of I2NSF: > > >o Only the Simple Service Layer policies that are modeled as > closely as possible on the Capability Layer are within the scope. > > > Such a Simple Service Layer will enable a security controller to > handle issues like multi-tenancy and the choice between available > NSFs for a given policy. > > >o I2NSF will not specify abstract or sophisticated policies from > clients. Expressing policies in ways other than the model used by > the Capability Layer is out of scope. > > >o The translation mechanism/methods from Service Layer policies to > Capability layer comments are out of scope for I2NSF. > > > However, I2NSF will provide a discussion forum for Informational > drafts on data models, APIs, etc. that demonstrate how more > complex Service Layer policies and formats may be translated to > Capability Layer functions. Such documents would be pursued > outside the WG. > > > > > > Standard interfaces for monitoring and controlling the behavior > of NSFs are essential building blocks for providers of security > service to automate the use of different NSFs from multiple > vendors. This work will leverage the existing protocols and data > models defined by the I2RS, NETCONF, and NETMOD working groups. If > extensions to these protocols or data models are needed, > requirements will be developed by this WG, and the extensions will > be developed in cooperation with the WGs responsible for the > protocols. > > > > > > The I2NSF WG’s deliverables include: > > > > > >o A single document covering use cases, problem statement, and gap > analysis document. This document will initially be produced for > reference as a living list to track and record discussions: the WG > may decide to not publish this document as an RFC. > > >o A framework document, presenting an overview of the use of NSFs > and the purpose of the models developed by the WG. This document > will also be a reference text to guide the main work and the WG > may decide to not publish this document as an RFC. > > >o If the working group considers it necessary, a single, unified, > Information Model to describe the control and monitoring of > flow-based NSFs. > > >o YANG data models for the control and monitoring of NSFs. > > >o Requests to the IANA for the creation of a registry that enables > the characteristics and behavior of NSFs to be specified using a > vendor-neutral vocabulary without requiring the NSFs themselves to > be standardized. The registry enables various mechanisms, > including policy rules, to be used to match monitor and control > functions to the needs of an application and/or environment. > > > An examination of existing secure communication mechanisms to > identify the appropriate ones for carrying the controlling and > monitoring information between the NSFs and their management > entities. This document may also be produced as a working document > that is not published as an RFC. > > > > > > The WG may additionally choose to develop documents to describe > requirements for extensions (if any) to existing protocols used by > the WG, to explain how the data models are used to monitor and > control flow-based NSFs, and to describe how to use I2RS and > NETCONF to carry the content of the data models. These documents > may be published as Informational RFCs of may be working documents > that are discarded once they have triggered the necessary work. > > > > > > The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The > WG will communicate with external SDOs like ETSI NFV and will > encourage open source code development related to the WG scope in > organizations like ONF, OpenStack, ODL, and OPNFV. > > > > > > > > > On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey > wrote: > > >> Thanks to everyone who has contributed towards developing the > charter. > > >> I believe we are close to consensus so this is a consensus call for > the I2NSF > > >> charter. The charter text is located at > > >>https://sites.google.com/site/interface2nsf/home > . Please send > > >> comments on this charter to the I2NSF list by September 2, 2015. > > >> > > >> Thank you, > > >> > > >> Joe > > >> > > >> _______________________________________________ > > >> I2nsf mailing list > > >>I2nsf@ietf.org > > >>https://www.ietf.org/mailman/listinfo/i2nsf > > > >> > > > > > > > --------------030704000708090301090003 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

On 8/27/15 4:27 PM, Linda Dunbar wrote:

Flemming,

 

Comments are inserted below:

 

 

From: Flemming Andreasen [mailto:fandreas@cisco.com]
Sent: Thursday, August 27, 2015 2:53 PM
To: Linda Dunbar; Kathleen Moriarty; Joseph Salowey
Cc: i2nsf@ietf.org
Subject: Re: Further clarification and explanations to I2NSF charter has been added to the I2NSF Wiki Q&A (was RE: [I2nsf] Consensus call on I2NSF Charter

 

Thanks Linda

Taking a quick look at the Wiki:
- I noticed that your definition of an NSF explicitly prohibits any packet modification such as NAT or MAC rewrite; this will exclude a large portion of current NSFs (e.g. it's commonly used by FWs and ADCs) - is that intentional ?

 

[Linda] This is not my intention. I don’t remember who put the last clause in (i.e. without modification to the packet due to the inspection process (MAC rewrites, TTL decrement action; even NAT would be outside the inspection process).. I can pull the mailing list if it ok to remove the last clause.

 



- You mention that "logging" is out of scope, yet in other places you refer to reporting, analytics, etc., and the charter talks about monitoring. Can you clarify ?
[Linda] Yes, “logging” is referring to analytics, such algorithms, benchmark, etc.

Ok - we should probably change the Q&A on logging then.

Also, a couple of my questions below still seem to be open, but there is a parallel exchange with Kathleen on some of those, so maybe we can resolve them there.

[Linda] do you mean the questions like “why framework, use cases may not be published as RFCs”? Can you help me out with the questions?


I believe Kathleen clarified the RFC publication part.

The main one I'm still not clear on is the types of NSFs that are in/out of scope. Providing an exact definition of those is not easy though, since the lines are often blurred (per my DDoS example in the e-mail below). What may work better is simply listing the ones that are explicitly known to be in scope (which the current charter text essentially does), but leave it open for further WG discussion as to what other ones (if any) may be in scope as well (perhaps with a phased approach with additional milestones added for those later on).

The other ones were mainly around calling out the basic framework (client/security controller/NSF and the layers between them) as part of the charter and clarification of simple vs abstract/sophisticated policies. With the current charter text, they are both open to interpretation (and hence further debate and subsequent speficiation) IMO, but maybe that's not a bad thing and the WG should indeed spend more time on that once it's formed ?

Thanks

-- Flemming


Cheers

-- Flemming

On 8/27/15 12:29 PM, Linda Dunbar wrote:

Flemming,

 

I have updated the Q&A on the I2NSF Wiki to clarify the questions you have:  https://sites.google.com/site/interface2nsf/i2nsf-q-a/i2nsfqa

 

Hope it helps. Please let me know if you have more questions or suggestions for I2NSF charter.

 

Thanks,

Linda

From: Flemming Andreasen [mailto:fandreas@cisco.com]
Sent: Wednesday, August 26, 2015 9:01 PM
To: Linda Dunbar; Kathleen Moriarty; Joseph Salowey
Cc: i2nsf@ietf.org
Subject: Re: [I2nsf] Consensus call on I2NSF Charter

 

 

On 8/26/15 7:31 PM, Linda Dunbar wrote:

Flemming,

 

Thank you very much for the detailed comments. Thank you for catching those typos (corrected on the I2NSF wiki now). We really need the fresh set of eyes to look at it.

 

You stated:

- The third paragraph says that "The NSFs can be monitored by multiple entities..."; does this imply a 1:N (direct) monitoring relationship ?

If so, that seems to get to a design decision that may be premature.

 

[Linda] The intent is to describe a scenario that a NSF may send different outputs to different entities. For example, some statistics report to “Analytics system”, “rule query” to management entity. Can you suggest a better wording for this?

 

I see. I'm not sure I would get into that level of detail in the charter, but since you introduce the notion of "features and functions", you could for example say

"The NSFs may contain a multitude of features and functions, each of which can be monitored by a different entity"

or something like that.




 

Other Replies are inserted below:

 

 

 

-----Original Message-----
From: Flemming Andreasen [mailto:fandreas@cisco.com]
Sent: Wednesday, August 26, 2015 5:46 PM
To: Linda Dunbar; Kathleen Moriarty; Joseph Salowey
Cc: i2nsf@ietf.org
Subject: Re: [I2nsf] Consensus call on I2NSF Charter

 

Apologies for joining the discussion late - just got back from PTO. In any case, please find some additional comments on the proposed charter below (some more substantial than others):

 

- The first paragraph starts out by defining what an NSF is, and we can argue about some of the points in there for various security functions (e.g. I may want to detect normal network behavior to establish a baseline, which does not seem to be covered by the current definition).

[Linda] Over the course of I2NSF (about a year), we have gone through a long debate on what NSFs should be considered by IETF I2NSF. As the result of the long debate, we use the definition to classify a set of functions to be considered for IETF I2NSF (then further narrowing down to Flow-based NSFs).

The function you described, i.e. detecting normal network behavior to establish a baseline is not in the scope of I2NSF, even though this function can also be "provided and consumed in increasingly diverse environments".

 

Ok - the part about "detect unwanted network activity" is fairly broad though, and I'm not sure how you detect unwanted activity without looking at all activity (which is what triggered my original question).



 

I don't think that will be a productive discussion though, nor is it necessary. Instead, I'd suggest we are not overly prescriptive, but rather view these as possible NSF features, and supplement them with some actual product examples (e.g. FW, NGFW, IPS, etc.). Similarly, since we limit our scope to "flow-based NSFs", we may want to make that clear here. An example of a security function that would *not* be in scope may be helpful too.

 

[Linda] All the NSFs in I2NSF context are “features”, whose form factor can be provided physical box or virtualized format. Some form factors, i.e. devices or VM, can provide multiple “functions”. Do you think the sentences in the third paragraph is good enough to describe what you want?

 

“I2NSF will focus on flow-based NSFs that provide treatment to packets/flows, such as Intrusion Protection/Detection System (IPS/IDS), Web filtering, flow filtering, deep packet inspection, or pattern matching and remediation.”

 

 

The examples here are clear; I'm less clear on what else might be in scope. For example, would a DDoS detection and mitigation system be in scope (keeping in mind it may use a combination of packet inspection and telemetry-based detection and mitigation and that establishing a "normal" baseline is often part of the operation) ?



 

 

- The charter seems to operate with the notion of a "security controller" that interacts with the "NSF". If I understand correctly, the security controller implements the "Service Layer" and the NSF implements the "Capability Layer". Furthermore, we have "clients" that interact with the security controller to implement policies (by leveraging the service layer). If so, it would be good to clarify this taxonomy earlier in the charter. If not, then I probably need some clarifications in the text.

 

[Linda] “Security controller” is a conceptual entity, meaning an entity to send implementable rules (capability layer) to the NSFs. There could be multiple of them, each responsible for one type of NSF (i.e. managing the instances of the NSFs).

I2NSF includes “Simple Service Layer” that models closely to the “Capability Layer”. For example: client can specify the rules without specify which instances of the NSF. The “Controller” manage the instances, as described by The figure in I2NSF Framework document:

 

+ - - - - - - - - - - - - - - - +  + - - - - - - - - - - - - - - - +

|  NSF-A  +--------------+      |  |  NSF-B  +--------------+      |

|         |   Controller|      |  |         |   Controller|      |

|         +--------------+      |  |         +--------------+      |

| + - - - - - - - - - - - - - + |  | + - - - - - - - - - - - - - + |

| |+---------+     +---------+| |  | |+---------+     +---------+| |

| || NSF-A#1 | ... |  NSF-A#n|| |  | ||  NSF-B#1| ... |  NSF-B#m|| |

| |+---------+     +---------+| |  | |+---------+     +---------+| |

| |         NSF-A cluster     | |  | |          NSF-B cluster    | |

| + - - - - - - - - - - - - - + |  | + - - - - - - - - - - - - - + |

+ - - - - - - - - - - - - - - - +  + - - - - - - - - - - - - - - - +

 

Ok - this basic framework seems to be foundational to the structure of the work the group is doing. If so, I think it would be helpful to outline it (verbally) in the charter.



 

- In the definition of the "Capability Layer", there is a statement about "rules...of NSFs have to be implementable by most NSFs". Do you mean all NSFs or NSFs of a given type (I assume we have different types of NSFs) ?

[Linda] yes.

 

- Policies are labeled as "simple" or "abstract or sophisticated"

without further definition; I'm not sure where we draw that line or how to do that in the charter; maybe clarifying that part needs to be a deliverable ?

[Linda] “simple” means that they can be directly translated to capability layer rules with simple mapping, e.g. without explicit stating which instantiation, may have customer ID that can be translated to some tags carried by packets

 

Ok - if that's the definition we want to use, can we clarify it in the charter ?



- A number of deliverables may not be published as an RFC; why not (they seem to set the stage for several other deliverables and hence are relevant for consumers of the information and data models later on) ?

 

[Linda] The WG group may decide to publish them as RFC or not later. But the charter doesn’t specify which way. That is how IESG wanted.

 

Ok.


- The part about I2NSF providing a "discussion forum for Informational drafts on.....[more complex Service Layer policies]..." is confusing to me. The work seems to be pursued outside the WG, so there are no deliverables and presumably no agenda time will be allocated either.

[Linda] this is to address the information documents that describe the I2NSF demo, open source or interoperability initiatives that are conducted outside the WG. E.g https://datatracker.ietf.org/doc/draft-xie-i2nsf-demo-outline-design/

 

Ok - thanks for the pointer, however from a WG point of view, I'm not clear on what it means to have a discussion forum and what, if anything, the WG will do with it (e.g. discuss such drafts as part of meetings, etc) ?



 

 

It's also not clear to me that we can/should state that such documents would be Informational. We may decide that we need some procedures for how to define such documents, have designated experts, a directorate, etc. to review them etc. I'm guessing this is all a bit premature though, but again, we may want to note that as an issue in the charter that the WG needs to resolve at some point.

 

[Linda] Agree with you. I will see how AD wants to address this suggestion .

Ok


 

 

Nits:

- first paragraph:

s/the mitigate/mitigate the/

 

- second last paragraph:

s/RFCs of/RFCs or

 

[Linda] Thank you for the catch. They are corrected on the I2NSF wiki now.

 

Thanks for the quick response and updates.

-- Flemming



Thanks

 

-- Flemming

 

 

On 8/26/15 5:38 PM, Linda Dunbar wrote:

> Kathleen,

> 

> Thank you very much for the editorial changes. The charter description

> on the I2NSF Wiki has been updated to reflect your suggested changes:

> 

> 

> Linda

> 

> 

> -----Original Message-----

> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen

> Moriarty

> Sent: Wednesday, August 26, 2015 2:29 PM

> To: Joseph Salowey

> Subject: Re: [I2nsf] Consensus call on I2NSF Charter

> 

> I have a few editorial changes in the following text that does not change the meaning of the charter text:

> 

> A Network Security Function (NSF) is a function used to ensure integrity, confidentiality, and availability of network communications, to detect unwanted network activity, and to block or at least the mitigate effects of unwanted activity. NSFs are provided and consumed in increasingly diverse environments. Users of NSFs could consume network security services hosted by one or more providers, which may be their own enterprise, service providers, or a combination of both.  Similarly, service providers may offer their customers network security services that are enforced by multiple security products and/or functions from different vendors. NSFs may be provided by physical and/or virtualized infrastructure. Without standard interfaces to control and monitor the behavior of NSFs, it has become virtually impossible for providers of security services to automate service offerings that utilize different security functions from multiple vendors.

> 

> The goal of I2NSF is to define a set of software interfaces and data models for controlling and monitoring aspects of physical and virtual NSFs. If the working group finds it necessary to work on an information model before the data models, to help provide guidance and derive the data models, it may do so. The working group will decide later whether the information model needs to be published as an RFC.

> Other aspects of NSFs, such as device or network provisioning and configuration, are out of scope.

> 

> Controlling and monitoring aspects of NSFs include the ability to specify rules (by a single controller at the first phase), query, and monitor NSFs by one or more management entities.  The initial phase of I2NSF will only consider one single controller that can specify or change rules to NSFs because multi-headed control requires the coordination to avoid potential conflict of rules. The NSFs can be monitored by multiple entities, but the database update and synchronization among multiple management entities are out of scope for I2NSF. As there are many different security vendors supporting different features and functions on their devices, I2NSF will focus on flow-based NSFs that provide treatment to packets/flows, such as Intrusion Protection/Detection System (IPS/IDS), Web filtering, flow filtering, deep packet inspection, or pattern matching and remediation.

> 

> I2NSF will specify interfaces at two functional levels for the control and monitoring of network security functions:

> 

> The I2NSF Capability Layer specifies how to control and monitor NSFs

> at a functional implementation level.  The term “Functional

> Implementation” is used to emphasize that the rules (for control and

> monitor) of NSFs have to be implementable by most NSFs. I2NSF will standardize a set of interfaces by which a security controller can invoke, operate, and monitor NSFs.

> 

> The I2NSF Service Layer defines how clients’ security policies may be expressed to a security controller. The controller implements its policies according to the various capabilities provided by the I2NSF capability Layer.  The I2NSF Service Layer also allows the client to monitor the client specific policies.

> 

> Since there could be many depths or types of Service Layer policies, the following bullets further clarify the scope of I2NSF:

>      o Only the Simple Service Layer policies that are modeled as closely as possible on the Capability Layer are within the scope.

> Such a Simple Service Layer will enable a security controller to handle issues like multi-tenancy and the choice between available NSFs for a given policy.

>      o I2NSF will not specify abstract or sophisticated policies from clients. Expressing policies in ways other than the model used by the Capability Layer is out of scope.

>      o The translation mechanism/methods from Service Layer policies to Capability layer comments are out of scope for I2NSF.

> However, I2NSF will provide a discussion forum for Informational drafts on data models, APIs, etc. that demonstrate how more complex Service Layer policies and formats may be translated to Capability Layer functions.  Such documents would be pursued outside the WG.

> 

> Standard interfaces for monitoring and controlling the behavior of NSFs are essential building blocks for providers of security service to automate the use of different NSFs from multiple vendors. This work will leverage the existing protocols and data models defined by the I2RS, NETCONF, and NETMOD working groups. If extensions to these protocols or data models are needed, requirements will be developed by this WG, and the extensions will be developed in cooperation with the WGs responsible for the protocols.

> 

> The I2NSF WG’s deliverables include:

> 

>      o A single document covering use cases, problem statement, and gap analysis document. This document will initially be produced for reference as a living list to track and record discussions: the WG may decide to not publish this document as an RFC.

>      o A framework document, presenting an overview of the use of NSFs and the purpose of the models developed by the WG. This document will also be a reference text to guide the main work and the WG may decide to not publish this document as an RFC.

>      o If the working group considers it necessary, a single, unified, Information Model to describe the control and monitoring of flow-based NSFs.

>      o YANG data models for the control and monitoring of NSFs.

>      o Requests to the IANA for the creation of a registry that enables the characteristics and behavior of NSFs to be specified using a vendor-neutral vocabulary without requiring the NSFs themselves to be standardized. The registry enables various mechanisms, including policy rules, to be used to match monitor and control functions to the needs of an application and/or environment.

> An examination of existing secure communication mechanisms to identify the appropriate ones for carrying the controlling and monitoring information between the NSFs and their management entities. This document may also be produced as a working document that is not published as an RFC.

> 

> The WG may additionally choose to develop documents to describe requirements for extensions (if any) to existing protocols used by the WG, to explain how the data models are used to monitor and control flow-based NSFs, and to describe how to use I2RS and NETCONF to carry the content of the data models. These documents may be published as Informational RFCs of may be working documents that are discarded once they have triggered the necessary work.

> 

> The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. The WG will communicate with external SDOs like ETSI NFV and will encourage open source code development related to the WG scope in organizations like ONF, OpenStack, ODL, and OPNFV.

> 

> 

> On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey <joe@salowey.net> wrote:

>> Thanks to everyone who has contributed towards developing the charter.

>> I believe we are close to consensus so this is a consensus call for the I2NSF

>> charter.   The charter text is located at

>> comments on this charter to the I2NSF list by September 2, 2015.

>> 

>> Thank you,

>> 

>> Joe

>> 

>> _______________________________________________

>> I2nsf mailing list

>> 

> 

> 

 

 

 

 

 


--------------030704000708090301090003-- From nobody Sun Aug 30 10:24:08 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 970CF1A0271 for ; Sun, 30 Aug 2015 10:24:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -93.965 X-Spam-Level: X-Spam-Status: No, score=-93.965 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FH_HELO_EQ_D_D_D_D=1.597, HELO_DYNAMIC_IPADDR=1.951, HELO_EQ_DE=0.35, HELO_MISMATCH_DE=1.448, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 47gxa-CXzOvv for ; Sun, 30 Aug 2015 10:24:05 -0700 (PDT) Received: from lvps5-35-241-16.dedicated.hosteurope.de (www.gondrom.org [5.35.241.16]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79FB21A0145 for ; Sun, 30 Aug 2015 10:24:04 -0700 (PDT) Received: from [192.168.178.32] (x5ce38d6d.dyn.telefonica.de [92.227.141.109]) by lvps5-35-241-16.dedicated.hosteurope.de (Postfix) with ESMTPSA id A239D6348E; Sun, 30 Aug 2015 19:24:01 +0200 (CEST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=gondrom.org; b=YomW525uB+CcQ17GPSih0dAwguzhKgDv3iZ2tXzfLFFWYVNSbsqMaiAA4N27hUePABSG+sXjK9z8DAaydHt5Ebyq56XSuRKowQymV64yiuduJRKPJCCRDiW706opXsH2BrpW9kbyQEfSt5bgdpQJYcVAtYeDyxlfo6gw5FrVnec=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject:References:In-Reply-To:Content-Type:Content-Transfer-Encoding; Message-ID: <55E33C30.7080303@gondrom.org> Date: Sun, 30 Aug 2015 19:24:00 +0200 From: Tobias Gondrom User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: kathleen.moriarty.ietf@gmail.com, fandreas@cisco.com References: <4A95BA014132FF49AE685FAB4B9F17F657D19A74@dfweml701-chm> <55DE41BB.3000801@cisco.com> <0E93B5AF-38DC-48FD-A69F-7DD7956A3F59@gmail.com> <55DE746F.9070802@cisco.com> <6D678FB0-B37F-40CB-87AA-B307EDA229D8@gmail.com> In-Reply-To: <6D678FB0-B37F-40CB-87AA-B307EDA229D8@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Archived-At: Cc: i2nsf@ietf.org, joe@salowey.net, linda.dunbar@huawei.com Subject: Re: [I2nsf] Consensus call on I2NSF Charter X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Aug 2015 17:24:07 -0000 I agree. Some comments inline. Best, Tobias On 27/08/15 04:33, Kathleen Moriarty wrote: > Hi Flemming, > > Thanks for the quick responses so we can resolve this quickly. > > Sent from my iPhone > >> On Aug 26, 2015, at 10:22 PM, Flemming Andreasen = wrote: >> >> >> >>> On 8/26/15 7:34 PM, Kathleen Moriarty wrote: >>> Thanks for the additional comments. I have some comments inline. >>> >>> Sent from my iPhone >>> >>>> On Aug 26, 2015, at 6:46 PM, Flemming Andreasen = wrote: >>>> >>>> Apologies for joining the discussion late - just got back from PTO. = In any case, please find some additional comments on the proposed charter= below (some more substantial than others): >>>> >>>> - The first paragraph starts out by defining what an NSF is, and we = can argue about some of the points in there for various security function= s (e.g. I may want to detect normal network behavior to establish a basel= ine, which does not seem to be covered by the current definition). I don'= t think that will be a productive discussion though, nor is it necessary.= Instead, I'd suggest we are not overly prescriptive, but rather view the= se as possible NSF features, and supplement them with some actual product= examples (e.g. FW, NGFW, IPS, etc.). Similarly, since we limit our scope= to "flow-based NSFs", we may want to make that clear here. An example of= a security function that would *not* be in scope may be helpful too. >>> I believe these points are well covered in the full charter already. = If you have text that you think clarifies these points without restating= them, that would be helpful. >> I don't - I have trouble determining where to draw the line between se= curity functions in scope and out of scope and was hoping for further cla= rification to help with that. > Ah, I believe this has been discussed and Linda can summarize. > >>>> - The third paragraph says that "The NSFs can be monitored by multip= le entities..."; does this imply a 1:N (direct) monitoring relationship ?= If so, that seems to get to a design decision that may be premature. >>> I think we should leave that alone and don't think it necessarily imp= lies a 1:N relationship. >>>> - The charter seems to operate with the notion of a "security contro= ller" that interacts with the "NSF". If I understand correctly, the secur= ity controller implements the "Service Layer" and the NSF implements the = "Capability Layer". Furthermore, we have "clients" that interact with the= security controller to implement policies (by leveraging the service lay= er). If so, it would be good to clarify this taxonomy earlier in the char= ter. If not, then I probably need some clarifications in the text. >>> What specific text would you propose? I think the point is already c= lear, but if you have proposed text, that may be more helpful to see your= point clearly. >> Assuming the above understanding is correct, then something along the = lines of: >> >> In I2NSF, a client that wants to provision security policies to NSFs d= oes so by interacting with a security controller. The client leverages th= e I2NSF Service Layer interface to the security controller, which in turn= interacts with one or more NSFs through the I2NSF Capability Layer inter= face. >> >> > This is a bit too detailed for the charter in my opinion. Of others th= ink this is helpful, please speak up. This should be clear in the framew= ork draft though. I agree that this does not need to go into the charter. It should be=20 discussed in a draft. > > Thanks for proposed text. > > >>>> - In the definition of the "Capability Layer", there is a statement = about "rules...of NSFs have to be implementable by most NSFs". Do you mea= n all NSFs or NSFs of a given type (I assume we have different types of N= SFs) ? >>> There is already a list of possible NSF device types in the charter. = Is additional text needed to make this point more clear? I read it as p= retty clear already, but seeing a proposal might help. >> Assuming it applies to given type of NSF, then I would simply qualify = it that way, so it becomes: >> >> "rules...of NSFs have to be implementable by most NSFs of a given type= " - not a big deal though. > Ok, since this isn't a big deal, let's leave it as-is. Yes, just leave as-is. >> >>>> - Policies are labeled as "simple" or "abstract or sophisticated" wi= thout further definition; I'm not sure where we draw that line or how to = do that in the charter; maybe clarifying that part needs to be a delivera= ble ? >>> I think that's too much detail for an already very detailed charter. >> Agreed, so I would suggest it becomes one of the tasks of the WGs to d= efine that. > Ok, we're good here. Agree. Best regards and looking forward to I2NSF. Tobias > > Thanks, > Kathleen > >>>> - A number of deliverables may not be published as an RFC; why not (= they seem to set the stage for several other deliverables and hence are r= elevant for consumers of the information and data models later on) ? >>> This is a decision the WG can make and is typical for IETF WGs to rev= isit these decisions. If you'd like them published, please make that kno= wn when this assessment is made. >> Ok. >>>> - The part about I2NSF providing a "discussion forum for Information= al drafts on.....[more complex Service Layer policies]..." is confusing t= o me. The work seems to be pursued outside the WG, so there are no delive= rables and presumably no agenda time will be allocated either. It's also = not clear to me that we can/should state that such documents would be Inf= ormational. We may decide that we need some procedures for how to define = such documents, have designated experts, a directorate, etc. to review th= em etc. I'm guessing this is all a bit premature though, but again, we ma= y want to note that as an issue in the charter that the WG needs to resol= ve at some point. >>> This leaves open some leeway to avoid the need to re charter if work = fits into the existing charter, but is not an existing milestone. This c= an be decided with the area director without lots of extra process. >> Ok. >>>> Nits: >>>> - first paragraph: >>>> s/the mitigate/mitigate the/ >>>> >>>> - second last paragraph: >>>> s/RFCs of/RFCs or >>>> >>>> >>>> Thanks >>> Thank you for the detailed review. >> Thanks for the quick response. >> >> -- Flemming >> >>> Kathleen >>> >>>> -- Flemming >>>> >>>> >>>>> On 8/26/15 5:38 PM, Linda Dunbar wrote: >>>>> Kathleen, >>>>> >>>>> Thank you very much for the editorial changes. The charter descript= ion on the I2NSF Wiki has been updated to reflect your suggested changes:= https://sites.google.com/site/interface2nsf/home >>>>> >>>>> >>>>> Linda >>>>> >>>>> >>>>> -----Original Message----- >>>>> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Kathleen M= oriarty >>>>> Sent: Wednesday, August 26, 2015 2:29 PM >>>>> To: Joseph Salowey >>>>> Cc: i2nsf@ietf.org >>>>> Subject: Re: [I2nsf] Consensus call on I2NSF Charter >>>>> >>>>> I have a few editorial changes in the following text that does not = change the meaning of the charter text: >>>>> >>>>> A Network Security Function (NSF) is a function used to ensure inte= grity, confidentiality, and availability of network communications, to de= tect unwanted network activity, and to block or at least the mitigate eff= ects of unwanted activity. NSFs are provided and consumed in increasingly= diverse environments. Users of NSFs could consume network security servi= ces hosted by one or more providers, which may be their own enterprise, s= ervice providers, or a combination of both. Similarly, service providers= may offer their customers network security services that are enforced by= multiple security products and/or functions from different vendors. NSFs= may be provided by physical and/or virtualized infrastructure. Without s= tandard interfaces to control and monitor the behavior of NSFs, it has be= come virtually impossible for providers of security services to automate = service offerings that utilize different security functions from multiple= vendors. >>>>> >>>>> The goal of I2NSF is to define a set of software interfaces and dat= a models for controlling and monitoring aspects of physical and virtual N= SFs. If the working group finds it necessary to work on an information mo= del before the data models, to help provide guidance and derive the data = models, it may do so. The working group will decide later whether the inf= ormation model needs to be published as an RFC. >>>>> Other aspects of NSFs, such as device or network provisioning and c= onfiguration, are out of scope. >>>>> >>>>> Controlling and monitoring aspects of NSFs include the ability to s= pecify rules (by a single controller at the first phase), query, and moni= tor NSFs by one or more management entities. The initial phase of I2NSF = will only consider one single controller that can specify or change rules= to NSFs because multi-headed control requires the coordination to avoid = potential conflict of rules. The NSFs can be monitored by multiple entiti= es, but the database update and synchronization among multiple management= entities are out of scope for I2NSF. As there are many different securit= y vendors supporting different features and functions on their devices, I= 2NSF will focus on flow-based NSFs that provide treatment to packets/flow= s, such as Intrusion Protection/Detection System (IPS/IDS), Web filtering= , flow filtering, deep packet inspection, or pattern matching and remedia= tion. >>>>> >>>>> I2NSF will specify interfaces at two functional levels for the cont= rol and monitoring of network security functions: >>>>> >>>>> The I2NSF Capability Layer specifies how to control and monitor NSF= s at a functional implementation level. The term =E2=80=9CFunctional Imp= lementation=E2=80=9D is used to emphasize that the rules (for control and= >>>>> monitor) of NSFs have to be implementable by most NSFs. I2NSF will = standardize a set of interfaces by which a security controller can invoke= , operate, and monitor NSFs. >>>>> >>>>> The I2NSF Service Layer defines how clients=E2=80=99 security polic= ies may be expressed to a security controller. The controller implements = its policies according to the various capabilities provided by the I2NSF = capability Layer. The I2NSF Service Layer also allows the client to moni= tor the client specific policies. >>>>> >>>>> Since there could be many depths or types of Service Layer policies= , the following bullets further clarify the scope of I2NSF: >>>>> o Only the Simple Service Layer policies that are modeled as c= losely as possible on the Capability Layer are within the scope. >>>>> Such a Simple Service Layer will enable a security controller to ha= ndle issues like multi-tenancy and the choice between available NSFs for = a given policy. >>>>> o I2NSF will not specify abstract or sophisticated policies fr= om clients. Expressing policies in ways other than the model used by the = Capability Layer is out of scope. >>>>> o The translation mechanism/methods from Service Layer policie= s to Capability layer comments are out of scope for I2NSF. >>>>> However, I2NSF will provide a discussion forum for Informational dr= afts on data models, APIs, etc. that demonstrate how more complex Service= Layer policies and formats may be translated to Capability Layer functio= ns. Such documents would be pursued outside the WG. >>>>> >>>>> Standard interfaces for monitoring and controlling the behavior of = NSFs are essential building blocks for providers of security service to a= utomate the use of different NSFs from multiple vendors. This work will l= everage the existing protocols and data models defined by the I2RS, NETCO= NF, and NETMOD working groups. If extensions to these protocols or data m= odels are needed, requirements will be developed by this WG, and the exte= nsions will be developed in cooperation with the WGs responsible for the = protocols. >>>>> >>>>> The I2NSF WG=E2=80=99s deliverables include: >>>>> >>>>> o A single document covering use cases, problem statement, and= gap analysis document. This document will initially be produced for refe= rence as a living list to track and record discussions: the WG may decide= to not publish this document as an RFC. >>>>> o A framework document, presenting an overview of the use of N= SFs and the purpose of the models developed by the WG. This document will= also be a reference text to guide the main work and the WG may decide to= not publish this document as an RFC. >>>>> o If the working group considers it necessary, a single, unifi= ed, Information Model to describe the control and monitoring of flow-base= d NSFs. >>>>> o YANG data models for the control and monitoring of NSFs. >>>>> o Requests to the IANA for the creation of a registry that ena= bles the characteristics and behavior of NSFs to be specified using a ven= dor-neutral vocabulary without requiring the NSFs themselves to be standa= rdized. The registry enables various mechanisms, including policy rules, = to be used to match monitor and control functions to the needs of an appl= ication and/or environment. >>>>> An examination of existing secure communication mechanisms to ident= ify the appropriate ones for carrying the controlling and monitoring info= rmation between the NSFs and their management entities. This document may= also be produced as a working document that is not published as an RFC. >>>>> >>>>> The WG may additionally choose to develop documents to describe req= uirements for extensions (if any) to existing protocols used by the WG, t= o explain how the data models are used to monitor and control flow-based = NSFs, and to describe how to use I2RS and NETCONF to carry the content of= the data models. These documents may be published as Informational RFCs = of may be working documents that are discarded once they have triggered t= he necessary work. >>>>> >>>>> The WG will work closely with the I2RS, NETCONF, and NETMOD WGs. Th= e WG will communicate with external SDOs like ETSI NFV and will encourage= open source code development related to the WG scope in organizations li= ke ONF, OpenStack, ODL, and OPNFV. >>>>> >>>>> >>>>>> On Wed, Aug 26, 2015 at 1:44 AM, Joseph Salowey = wrote: >>>>>> Thanks to everyone who has contributed towards developing the char= ter. >>>>>> I believe we are close to consensus so this is a consensus call fo= r the I2NSF >>>>>> charter. The charter text is located at >>>>>> https://sites.google.com/site/interface2nsf/home. Please send >>>>>> comments on this charter to the I2NSF list by September 2, 2015. >>>>>> >>>>>> Thank you, >>>>>> >>>>>> Joe >>>>>> >>>>>> _______________________________________________ >>>>>> I2nsf mailing list >>>>>> I2nsf@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/i2nsf >>> . >> > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf From nobody Mon Aug 31 07:47:59 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 392D11A1BF4; Sat, 29 Aug 2015 09:03:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xC1gmpapumpC; Sat, 29 Aug 2015 09:03:44 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E02B31A0372; Sat, 29 Aug 2015 09:03:44 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Barry Leiba" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.4.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150829160344.17066.54212.idtracker@ietfa.amsl.com> Date: Sat, 29 Aug 2015 09:03:44 -0700 Archived-At: X-Mailman-Approved-At: Mon, 31 Aug 2015 07:47:58 -0700 Cc: i2nsf@ietf.org Subject: [I2nsf] Barry Leiba's No Objection on charter-ietf-i2nsf-00-01: (with COMMENT) X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 29 Aug 2015 16:03:46 -0000 Barry Leiba has entered the following ballot position for charter-ietf-i2nsf-00-01: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-i2nsf/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- The substance of the charter seems fine to me. I just have some editorial comments. In the first sentence, I think you mean to change "and" to "or" -- that is, one NSF does at least one of the things listed, not all of them. In the second sentence, I don't know what it means for a *function* to be "consumed". Can you find better wording than "consumed" for this? Please fix the artifact of MS Word's "smart quoting" that's resulted in invalid characters ("???Functional Implementation???", "clients??? security policies", and "The I2NSF WG???s deliverables"). What are "Capability layer comments"? (It's the "comments" part that I don't follow (so I guess it's good that translating to them is out of scope).) We need a blank line after the bullet list (after the "Capability layer comments" sentence), or else the "However" sentence needs to be merged into the bullet. (I'm thinking you mean the latter.) I always prefer that "working group" be spelled out, so I suggest a global change of "WG" to "working group", but take that as Barry's preference and do as you like with it. On "Working group re-charter or close: Charter time + 24 months", I'm generally not thrilled with that sort of statement. If what you want to do is set a time limit, I think something more clear and explicit would be better. Something like, "The working group must have the above deliverables completed within 24 months. The responsible AD will close the working group at that time if they are not completed or close to completion. The working group may be closed earlier if substantial progress is not being made." If something like that isn't what's meant, then what *is* meant? From nobody Mon Aug 31 13:36:57 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 161F61B6014; Mon, 31 Aug 2015 13:36:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ADmXAOLmUYQx; Mon, 31 Aug 2015 13:36:52 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18FAA1B6012; Mon, 31 Aug 2015 13:36:51 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CAQ82902; Mon, 31 Aug 2015 20:36:50 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 31 Aug 2015 21:36:50 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Mon, 31 Aug 2015 13:36:40 -0700 From: Linda Dunbar To: Barry Leiba , The IESG Thread-Topic: [I2nsf] Barry Leiba's No Objection on charter-ietf-i2nsf-00-01: (with COMMENT) Thread-Index: AQHQ4/wRYuUNNu87Mk6LMtnM50euYp4mhCXw Date: Mon, 31 Aug 2015 20:36:40 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D1C44C@dfweml701-chm> References: <20150829160344.17066.54212.idtracker@ietfa.amsl.com> In-Reply-To: <20150829160344.17066.54212.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.192] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Barry Leiba's No Objection on charter-ietf-i2nsf-00-01: (with COMMENT) X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Aug 2015 20:36:55 -0000 Barry,=20 Thank you very much for the comments. Reply are inserted below: -----Original Message----- From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Barry Leiba Sent: Saturday, August 29, 2015 11:04 AM To: The IESG Cc: i2nsf@ietf.org Subject: [I2nsf] Barry Leiba's No Objection on charter-ietf-i2nsf-00-01: (w= ith COMMENT) Barry Leiba has entered the following ballot position for charter-ietf-i2nsf-00-01: No Objection When responding, please keep the subject line intact and reply to all email= addresses included in the To and CC lines. (Feel free to cut this introduc= tory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-i2nsf/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- The substance of the charter seems fine to me. I just have some editorial = comments. In the first sentence, I think you mean to change "and" to "or" -- that is,= one NSF does at least one of the things listed, not all of them. [Linda] very good catch. You are correct. I've changed it in the I2NSF Wiki= .=20 In the second sentence, I don't know what it means for a *function* to be "= consumed". Can you find better wording than "consumed" for this? [Linda] The intent is to describe "NSF" being used (or utilized), and NSFs = becoming a resource that is available for consumption to build a security s= ervice How about changing to the following wording?=20 "NSFs are provide and utilized in increasingly diverse environment. Users = could consume network security services enforced by NSFs hosted by one or m= ore providers, which may be their own enterprise, service providers, or a c= ombination of both." =20 Please fix the artifact of MS Word's "smart quoting" that's resulted in inv= alid characters ("???Functional Implementation???", "clients??? security policies", and "The I2NSF WG???s deliverables"). [Linda] I don't see the "???...???" at this link anymore. https://datatra= cker.ietf.org/wg/i2nsf/charter/.=20 What are "Capability layer comments"? (It's the "comments" part that I don= 't follow (so I guess it's good that translating to them is out of scope).) [Linda] It is supposed to be "Capability layer commands"=20 We need a blank line after the bullet list (after the "Capability layer com= ments" sentence), or else the "However" sentence needs to be merged into th= e bullet. (I'm thinking you mean the latter.) [Linda] the paragraph starting with "However..." is intended to be next bul= let because it continues the further clarification of the "Service Layer".= =20 I always prefer that "working group" be spelled out, so I suggest a global = change of "WG" to "working group", but take that as Barry's preference and = do as you like with it. [Linda] OK.=20 On "Working group re-charter or close: Charter time + 24 months", I'm gener= ally not thrilled with that sort of statement. If what you want to do is s= et a time limit, I think something more clear and explicit would be better.= Something like, "The working group must have the above deliverables compl= eted within 24 months. The responsible AD will close the working group at = that time if they are not completed or close to completion. The working gr= oup may be closed earlier if substantial progress is not being made." If s= omething like that isn't what's meant, then what *is* meant? [Linda] I will let Kathleen decide on this change then.=20 Thank you very much.=20 Linda _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://www.ietf.org/mailman/listinfo/i2nsf From nobody Mon Aug 31 14:40:38 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED7191B65AC; Mon, 31 Aug 2015 14:40:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R1WhVlKDL7tN; Mon, 31 Aug 2015 14:40:30 -0700 (PDT) Received: from mail-wi0-x22a.google.com (mail-wi0-x22a.google.com [IPv6:2a00:1450:400c:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 339261B3781; Mon, 31 Aug 2015 14:39:22 -0700 (PDT) Received: by wicjd9 with SMTP id jd9so13159383wic.1; Mon, 31 Aug 2015 14:39:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=hP04KVjMhJ647fYRWhpPOYDbHQSZtOaiDKnLiocDM0E=; b=Q/pPy6vyiYTU8vumVHoJgUMj6ZMIeTYfEFoqA0s62yaRFtFTTGijQNMnu/8kzN92wW l3jkkM9P6bwjIZ+2roxs61wIf1VG9Y63dOqW/jYtdi/iKMBF+4Vf2I61GgsEY6aaFrgE Ap8EapNy6ymRPFoYKHjJkFxN/sJbIffNHwjpPkD7gJgIILu9eFE1dpVveJ28raIHNiL/ Zb4Cv4jtorIP92AI6pw9NucTVMbntKXQDwSrGeAgNO06PDHHx8FpSKMMd/DeY4IHoi8P qarSalrmCVzmZ49OLwddQzsMg9IH1/uQPeni+0c54Di7VnvrKC3Up7wA9+6zw0BW27Dr Ey3w== MIME-Version: 1.0 X-Received: by 10.194.2.9 with SMTP id 9mr28573934wjq.95.1441057160808; Mon, 31 Aug 2015 14:39:20 -0700 (PDT) Received: by 10.28.157.84 with HTTP; Mon, 31 Aug 2015 14:39:20 -0700 (PDT) In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D1C44C@dfweml701-chm> References: <20150829160344.17066.54212.idtracker@ietfa.amsl.com> <4A95BA014132FF49AE685FAB4B9F17F657D1C44C@dfweml701-chm> Date: Mon, 31 Aug 2015 17:39:20 -0400 Message-ID: From: Kathleen Moriarty To: Linda Dunbar Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "i2nsf@ietf.org" , Barry Leiba , The IESG Subject: Re: [I2nsf] Barry Leiba's No Objection on charter-ietf-i2nsf-00-01: (with COMMENT) X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Aug 2015 21:40:33 -0000 Thanks for the comments Barry and to Linda for the quick response. Updates have been made as agreed. On Mon, Aug 31, 2015 at 4:36 PM, Linda Dunbar wro= te: > Barry, > > Thank you very much for the comments. Reply are inserted below: > > -----Original Message----- > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Barry Leiba > Sent: Saturday, August 29, 2015 11:04 AM > To: The IESG > Cc: i2nsf@ietf.org > Subject: [I2nsf] Barry Leiba's No Objection on charter-ietf-i2nsf-00-01: = (with COMMENT) > > Barry Leiba has entered the following ballot position for > charter-ietf-i2nsf-00-01: No Objection > > When responding, please keep the subject line intact and reply to all ema= il addresses included in the To and CC lines. (Feel free to cut this introd= uctory paragraph, however.) > > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/charter-ietf-i2nsf/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > The substance of the charter seems fine to me. I just have some editoria= l comments. > > In the first sentence, I think you mean to change "and" to "or" -- that i= s, one NSF does at least one of the things listed, not all of them. > [Linda] very good catch. You are correct. I've changed it in the I2NSF Wi= ki. > > > In the second sentence, I don't know what it means for a *function* to be= "consumed". Can you find better wording than "consumed" for this? > [Linda] The intent is to describe "NSF" being used (or utilized), and NSF= s becoming a resource that is available for consumption to build a security= service > > How about changing to the following wording? > > "NSFs are provide and utilized in increasingly diverse environment. User= s could consume network security services enforced by NSFs hosted by one or= more providers, which may be their own enterprise, service providers, or a= combination of both." > > > > > Please fix the artifact of MS Word's "smart quoting" that's resulted in i= nvalid characters ("???Functional Implementation???", "clients??? > security policies", and "The I2NSF WG???s deliverables"). > [Linda] I don't see the "???...???" at this link anymore. https://datat= racker.ietf.org/wg/i2nsf/charter/. > > > What are "Capability layer comments"? (It's the "comments" part that I d= on't follow (so I guess it's good that translating to them is out of > scope).) > > [Linda] It is supposed to be "Capability layer commands" > > > We need a blank line after the bullet list (after the "Capability layer c= omments" sentence), or else the "However" sentence needs to be merged into = the bullet. (I'm thinking you mean the latter.) > > [Linda] the paragraph starting with "However..." is intended to be next b= ullet because it continues the further clarification of the "Service Layer"= . > > > I always prefer that "working group" be spelled out, so I suggest a globa= l change of "WG" to "working group", but take that as Barry's preference an= d do as you like with it. > [Linda] OK. > > > On "Working group re-charter or close: Charter time + 24 months", I'm gen= erally not thrilled with that sort of statement. If what you want to do is= set a time limit, I think something more clear and explicit would be bette= r. Something like, "The working group must have the above deliverables com= pleted within 24 months. The responsible AD will close the working group a= t that time if they are not completed or close to completion. The working = group may be closed earlier if substantial progress is not being made." If= something like that isn't what's meant, then what *is* meant? > > [Linda] I will let Kathleen decide on this change then. > > Thank you very much. > > Linda > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf --=20 Best regards, Kathleen