From nobody Thu Oct 1 14:32:19 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 591081A899B for ; Thu, 1 Oct 2015 14:32:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mPswI7pQOIPa for ; Thu, 1 Oct 2015 14:32:15 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 421A11A8994 for ; Thu, 1 Oct 2015 14:32:15 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CBY84355; Thu, 01 Oct 2015 21:32:12 +0000 (GMT) Received: from DFWEML702-CHM.china.huawei.com (10.193.5.72) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 1 Oct 2015 22:32:12 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml702-chm ([10.193.5.72]) with mapi id 14.03.0235.001; Thu, 1 Oct 2015 14:32:00 -0700 From: Linda Dunbar To: "i2nsf@ietf.org" Thread-Topic: What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AdD8kJsQ5Rkc+aynSXudFPC41PBbhw== Date: Thu, 1 Oct 2015 21:32:00 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.138] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D66494dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2015 21:32:18 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D66494dfweml701chm_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I2NSF participants, https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-interface-im/ s= pecifies the structure for I2NSF capability layer rules. For the I2NSF simple service layer, what do people think of using OpenStack= 's Group Policy structure ? If using OpenStack Group-based Policy (GBP) structure, the I2NSF simple ser= vice layer can be expressed as * Policy Target Group (PTG). This is a group of Targets to which a t= raffic policy can be applied. A PTG may be mapped to a Neutron Subnet, a cl= ient virtual Subnet (i.e. with private address prefix), a subnet with publi= c address families, or any combination of them with logical operators (Logi= cal AND, OR, or NOT). A PTG references one or more Policy Rule Sets that it= consumes or provides. * Target. This is used by the application client to establish commun= ications over the network. A Target is mapped to a single Neutron Port, a p= hysical/logical ingress port, or a physical/logical egress port. * Policy Rule Set. A Policy Rule Set is used to determine how the tr= affic between a pair of Target Groups is to be treated. A Policy Rule Set c= onsists of one or more Policy Rules. * Policy Rule. A Policy Rule consists of a Traffic Classifier and a = set of Actions to be applied to the traffic. * Policy Classifier. A traffic classifier describes the traffic to w= hich a Policy Rule is to be applied. It is expressed as a direction, a list= of L4 ports, time range, and a protocol. * Policy Action. This is the action applied to the traffic that matc= hes the classifier. An action may be a simple ACL action (i.e. allow, deny,= mirroring), applying a well known statistics functions (e.g. X minutes cou= nt, Y hours court), applying client specified functions (with URL provided)= , or may refer to an ordered sequence of functions (i.e., a service chain). If you have concern of using OpenStack Group Based Policies, please let the= group know. Thanks, Linda --_000_4A95BA014132FF49AE685FAB4B9F17F657D66494dfweml701chm_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I2NSF participants,

 

https://datatracker.ietf.org/doc/draft-xi= a-i2nsf-capability-interface-im/ specifies the structure for I2NSF capa= bility layer rules.

 

For the I2NSF simple service layer, what do people t= hink of using OpenStack’s Group Policy structure ?

 

If using OpenStack Group-based Policy (GBP) structur= e, the I2NSF simple service layer can be expressed as

·        Policy Target Group (PTG). This is a group o= f Targets to which a traffic policy can be applied. A PTG may be mapped to = a Neutron Subnet, a client virtual Subnet (i.e. with private address prefix= ), a subnet with public address families, or any combination of them with logical operators (Logical AND, = OR, or NOT). A PTG references one or more Policy Rule Sets that it consumes= or provides.

·        Target. This is used by the application clie= nt to establish communications over the network. A Target is mapped to a si= ngle Neutron Port, a physical/logical ingress port, or a physical/logical e= gress port.

·        Policy Rule Set. A Policy Rule Set is used t= o determine how the traffic between a pair of Target Groups is to be treate= d. A Policy Rule Set consists of one or more Policy Rules.

·        Policy Rule. A Policy Rule consists of a Tra= ffic Classifier and a set of Actions to be applied to the traffic.

·        Policy Classifier. A traffic classifier desc= ribes the traffic to which a Policy Rule is to be applied. It is expressed = as a direction, a list of L4 ports, time range, and a protocol.

·        Policy Action. This is the action applied to= the traffic that matches the classifier. An action may be a simple ACL act= ion (i.e. allow, deny, mirroring), applying a well known statistics functio= ns (e.g. X minutes count, Y hours court), applying client specified functions (with URL provided), or may re= fer to an ordered sequence of functions (i.e., a service chain).

 

If you have concern of using OpenStack Group Based P= olicies, please let the group know.

 

Thanks, Linda

--_000_4A95BA014132FF49AE685FAB4B9F17F657D66494dfweml701chm_-- From nobody Thu Oct 1 15:41:19 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18AA91A8AF9 for ; Thu, 1 Oct 2015 15:41:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.711 X-Spam-Level: X-Spam-Status: No, score=-0.711 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ORo2y-PLzw8Z for ; Thu, 1 Oct 2015 15:41:14 -0700 (PDT) Received: from smtpjc.telefonica.com (smtpjc.telefonica.com [81.47.204.76]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0FBB81A8AEF for ; Thu, 1 Oct 2015 15:41:12 -0700 (PDT) Received: from smtpjc.telefonica.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 408CAE0214; Fri, 2 Oct 2015 00:41:10 +0200 (CEST) Received: from ESTGVMSP103.EUROPE.telefonica.corp (unknown [10.92.4.9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtpjc.telefonica.com (Postfix) with ESMTPS id 2C250E01E8; Fri, 2 Oct 2015 00:41:10 +0200 (CEST) Received: from emea01-db3-obe.outbound.protection.outlook.com (10.92.5.139) by tls.telefonica.com (10.92.6.50) with Microsoft SMTP Server (TLS) id 14.3.235.1; Fri, 2 Oct 2015 00:41:09 +0200 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) by DB4PR06MB0621.eurprd06.prod.outlook.com (10.161.13.139) with Microsoft SMTP Server (TLS) id 15.1.280.20; Thu, 1 Oct 2015 22:41:08 +0000 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) by DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) with mapi id 15.01.0286.019; Thu, 1 Oct 2015 22:41:07 +0000 From: DIEGO LOPEZ GARCIA To: Linda Dunbar Thread-Topic: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AdD8kJsQ5Rkc+aynSXudFPC41PBbhwACacoA Date: Thu, 1 Oct 2015 22:41:07 +0000 Message-ID: <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [80.24.208.53] x-microsoft-exchange-diagnostics: 1; DB4PR06MB0621; 5:rEPKE255amncdyxQVFSL5l2u94YbTW2mCOyQgXzbL1JV5FYTmgzxe7fCwhahjjWkrsZWNl46mEa1pVkjWflv381REwIgs5e1wcv7DrEe6Lnum6q2RBqjXIRqedYRuGlJ34WtfEJUo2N22FyuVyl8uA==; 24:VP5CkCBW6EV5pa70mo6jjFijJiaE08zu0yLw+rDMaVZaxKGKMJjldKrVbCx1klXZ5GFFEE/kJ0yRYE3qF+PlivCL3B0U4AMem66bDhuSz9k=; 20:VUnkelq0B1UCgyDwSWjTsNPxwvyUZUNkwL0/H4Oyps1gyaSrwJ9R53XfHmH71fD1Vtl4tPGqAiVJNXXCEfFU2g== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB4PR06MB0621; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(520078)(3002001); SRVR:DB4PR06MB0621; BCL:0; PCL:0; RULEID:; SRVR:DB4PR06MB0621; x-forefront-prvs: 0716E70AB6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(252514010)(164054003)(199003)(189002)(24454002)(40100003)(92566002)(81156007)(5008740100001)(102836002)(68736005)(82746002)(5002640100001)(15975445007)(77096005)(87936001)(2900100001)(2950100001)(122556002)(19580405001)(83716003)(77156002)(62966003)(19580395003)(76176999)(50986999)(36756003)(54356999)(5007970100001)(110136002)(46102003)(66066001)(4001540100001)(19617315012)(5001960100002)(105586002)(33656002)(106356001)(64706001)(97736004)(10400500002)(16236675004)(189998001)(86362001)(5001830100001)(5004730100002)(5001860100001)(101416001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DB4PR06MB0621; H:DB4PR06MB0624.eurprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_64E8BEC62EAC41AF9C729CBFF4A1D228telefonicacom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Oct 2015 22:41:07.4783 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR06MB0621 X-OriginatorOrg: telefonica.com X-TM-AS-MML: No Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2015 22:41:18 -0000 --_000_64E8BEC62EAC41AF9C729CBFF4A1D228telefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTGluZGEsDQoNCkkgYW0gbm90IGNvbXBsZXRlbHkgc3VyZSB0aGF0IHRoZSBjdXJyZW50IG5l dHdvcmtpbmcgbW9kZWwgb2YgT3BlblN0YWNrLCB0aGF0IGlzIHJlZmxlY3RlZCBpbiB0aGUgcnVs ZSB0YXJnZXRzIChlaXRoZXIgdGhlIFBURyBhbmQgdGhlIFRhcmdldCBpdHNlbGYpIGRvZXMgY292 ZXIgYWxsIHRoZSBwb3RlbnRpYWwgc2VtYW50aWNzIGZvciBnZW5lcmFsIHNlY3VyaXR5IGZ1bmN0 aW9ucy4gVGhlIHNhbWUgY29uY2VybiBhcHBsaWVzIHRvIFBvbGljeSBDbGFzc2lmaWVyLCBhcyB0 aGV5IHNlZW0gdmVyeSBtdWNoIGFzc29jaWF0ZWQgd2l0aCBhIHBhcnRpY3VsYXIgaW1wbGVtZW50 YXRpb24gbW9kZWwgYW5kLCB3aGF0IGlzIG1vcmUsIHdpdGggYSBsaW1pdGVkIG5ldHdvcmsgbW9k ZWwuDQoNCkJlIGdvb2RlLA0KDQoNCk9uIDEgT2N0IDIwMTUsIGF0IDIzOjMyICwgTGluZGEgRHVu YmFyIDxsaW5kYS5kdW5iYXJAaHVhd2VpLmNvbTxtYWlsdG86bGluZGEuZHVuYmFyQGh1YXdlaS5j b20+PiB3cm90ZToNCg0KSTJOU0YgcGFydGljaXBhbnRzLA0KDQpodHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC14aWEtaTJuc2YtY2FwYWJpbGl0eS1pbnRlcmZhY2UtaW0vIHNw ZWNpZmllcyB0aGUgc3RydWN0dXJlIGZvciBJMk5TRiBjYXBhYmlsaXR5IGxheWVyIHJ1bGVzLg0K DQpGb3IgdGhlIEkyTlNGIHNpbXBsZSBzZXJ2aWNlIGxheWVyLCB3aGF0IGRvIHBlb3BsZSB0aGlu ayBvZiB1c2luZyBPcGVuU3RhY2vigJlzIEdyb3VwIFBvbGljeSBzdHJ1Y3R1cmUgPw0KDQpJZiB1 c2luZyBPcGVuU3RhY2sgR3JvdXAtYmFzZWQgUG9saWN5IChHQlApIHN0cnVjdHVyZSwgdGhlIEky TlNGIHNpbXBsZSBzZXJ2aWNlIGxheWVyIGNhbiBiZSBleHByZXNzZWQgYXMNCuKAoiAgICAgICAg UG9saWN5IFRhcmdldCBHcm91cCAoUFRHKS4gVGhpcyBpcyBhIGdyb3VwIG9mIFRhcmdldHMgdG8g d2hpY2ggYSB0cmFmZmljIHBvbGljeSBjYW4gYmUgYXBwbGllZC4gQSBQVEcgbWF5IGJlIG1hcHBl ZCB0byBhIE5ldXRyb24gU3VibmV0LCBhIGNsaWVudCB2aXJ0dWFsIFN1Ym5ldCAoaS5lLiB3aXRo IHByaXZhdGUgYWRkcmVzcyBwcmVmaXgpLCBhIHN1Ym5ldCB3aXRoIHB1YmxpYyBhZGRyZXNzIGZh bWlsaWVzLCBvciBhbnkgY29tYmluYXRpb24gb2YgdGhlbSB3aXRoIGxvZ2ljYWwgb3BlcmF0b3Jz IChMb2dpY2FsIEFORCwgT1IsIG9yIE5PVCkuIEEgUFRHIHJlZmVyZW5jZXMgb25lIG9yIG1vcmUg UG9saWN5IFJ1bGUgU2V0cyB0aGF0IGl0IGNvbnN1bWVzIG9yIHByb3ZpZGVzLg0K4oCiICAgICAg ICBUYXJnZXQuIFRoaXMgaXMgdXNlZCBieSB0aGUgYXBwbGljYXRpb24gY2xpZW50IHRvIGVzdGFi bGlzaCBjb21tdW5pY2F0aW9ucyBvdmVyIHRoZSBuZXR3b3JrLiBBIFRhcmdldCBpcyBtYXBwZWQg dG8gYSBzaW5nbGUgTmV1dHJvbiBQb3J0LCBhIHBoeXNpY2FsL2xvZ2ljYWwgaW5ncmVzcyBwb3J0 LCBvciBhIHBoeXNpY2FsL2xvZ2ljYWwgZWdyZXNzIHBvcnQuDQrigKIgICAgICAgIFBvbGljeSBS dWxlIFNldC4gQSBQb2xpY3kgUnVsZSBTZXQgaXMgdXNlZCB0byBkZXRlcm1pbmUgaG93IHRoZSB0 cmFmZmljIGJldHdlZW4gYSBwYWlyIG9mIFRhcmdldCBHcm91cHMgaXMgdG8gYmUgdHJlYXRlZC4g QSBQb2xpY3kgUnVsZSBTZXQgY29uc2lzdHMgb2Ygb25lIG9yIG1vcmUgUG9saWN5IFJ1bGVzLg0K 4oCiICAgICAgICBQb2xpY3kgUnVsZS4gQSBQb2xpY3kgUnVsZSBjb25zaXN0cyBvZiBhIFRyYWZm aWMgQ2xhc3NpZmllciBhbmQgYSBzZXQgb2YgQWN0aW9ucyB0byBiZSBhcHBsaWVkIHRvIHRoZSB0 cmFmZmljLg0K4oCiICAgICAgICBQb2xpY3kgQ2xhc3NpZmllci4gQSB0cmFmZmljIGNsYXNzaWZp ZXIgZGVzY3JpYmVzIHRoZSB0cmFmZmljIHRvIHdoaWNoIGEgUG9saWN5IFJ1bGUgaXMgdG8gYmUg YXBwbGllZC4gSXQgaXMgZXhwcmVzc2VkIGFzIGEgZGlyZWN0aW9uLCBhIGxpc3Qgb2YgTDQgcG9y dHMsIHRpbWUgcmFuZ2UsIGFuZCBhIHByb3RvY29sLg0K4oCiICAgICAgICBQb2xpY3kgQWN0aW9u LiBUaGlzIGlzIHRoZSBhY3Rpb24gYXBwbGllZCB0byB0aGUgdHJhZmZpYyB0aGF0IG1hdGNoZXMg dGhlIGNsYXNzaWZpZXIuIEFuIGFjdGlvbiBtYXkgYmUgYSBzaW1wbGUgQUNMIGFjdGlvbiAoaS5l LiBhbGxvdywgZGVueSwgbWlycm9yaW5nKSwgYXBwbHlpbmcgYSB3ZWxsIGtub3duIHN0YXRpc3Rp Y3MgZnVuY3Rpb25zIChlLmcuIFggbWludXRlcyBjb3VudCwgWSBob3VycyBjb3VydCksIGFwcGx5 aW5nIGNsaWVudCBzcGVjaWZpZWQgZnVuY3Rpb25zICh3aXRoIFVSTCBwcm92aWRlZCksIG9yIG1h eSByZWZlciB0byBhbiBvcmRlcmVkIHNlcXVlbmNlIG9mIGZ1bmN0aW9ucyAoaS5lLiwgYSBzZXJ2 aWNlIGNoYWluKS4NCg0KSWYgeW91IGhhdmUgY29uY2VybiBvZiB1c2luZyBPcGVuU3RhY2sgR3Jv dXAgQmFzZWQgUG9saWNpZXMsIHBsZWFzZSBsZXQgdGhlIGdyb3VwIGtub3cuDQoNClRoYW5rcywg TGluZGENCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpJ Mm5zZiBtYWlsaW5nIGxpc3QNCkkybnNmQGlldGYub3JnPG1haWx0bzpJMm5zZkBpZXRmLm9yZz4N Cmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YNCg0KLS0NCiJFc3Rh IHZleiBubyBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVybm8iDQoNCkRyIERpZWdvIFIuIExvcGV6 DQpUZWxlZm9uaWNhIEkrRA0KaHR0cDovL3Blb3BsZS50aWQuZXMvZGllZ28ubG9wZXovDQoNCmUt bWFpbDogZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbQ0KVGVsOiAgICArMzQgOTEzIDEyOSAw NDENCk1vYmlsZTogKzM0IDY4MiAwNTEgMDkxDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KRXN0ZSBtZW5z YWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5h dGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRl bmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUg ZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEg bm90aWZpY2FkbyBkZSBxdWUgbGEgbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24g eS9vIGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0 dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2Fq ZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVu dGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uDQoNClRo ZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJpdmlsZWdl ZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRoZSB1c2Ug b2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9m IHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJl Ynkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwgZGlzdHJpYnV0aW9uIG9yIGNvcHlp bmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBo YXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4g UGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNl aXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Lg0KDQpF c3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBz ZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBv dSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlk YWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlv IGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGEgbGVpdHVyYSwgdXRpbGl6YcOnw6Nv LCBkaXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBw cm9pYmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVz dGEgbWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1l ZGlhdGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Oj bw0K --_000_64E8BEC62EAC41AF9C729CBFF4A1D228telefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: <89F98298FB343945B9ECBFD3F5DA6BE0@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgTGluZGEsDQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JIGFtIG5vdCBjb21wbGV0 ZWx5IHN1cmUgdGhhdCB0aGUgY3VycmVudCBuZXR3b3JraW5nIG1vZGVsIG9mIE9wZW5TdGFjaywg dGhhdCBpcyByZWZsZWN0ZWQgaW4gdGhlIHJ1bGUgdGFyZ2V0cyAoZWl0aGVyIHRoZSBQVEcgYW5k IHRoZSBUYXJnZXQgaXRzZWxmKSBkb2VzIGNvdmVyIGFsbCB0aGUgcG90ZW50aWFsIHNlbWFudGlj cyBmb3IgZ2VuZXJhbCBzZWN1cml0eSBmdW5jdGlvbnMuIFRoZSBzYW1lIGNvbmNlcm4gYXBwbGll cw0KIHRvIFBvbGljeSBDbGFzc2lmaWVyLCBhcyB0aGV5IHNlZW0gdmVyeSBtdWNoIGFzc29jaWF0 ZWQgd2l0aCBhIHBhcnRpY3VsYXIgaW1wbGVtZW50YXRpb24gbW9kZWwgYW5kLCB3aGF0IGlzIG1v cmUsIHdpdGggYSBsaW1pdGVkIG5ldHdvcmsgbW9kZWwuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5CZSBnb29kZSw8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2Pg0KPGJsb2Nr cXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIDEgT2N0IDIwMTUs IGF0IDIzOjMyICwgTGluZGEgRHVuYmFyICZsdDs8YSBocmVmPSJtYWlsdG86bGluZGEuZHVuYmFy QGh1YXdlaS5jb20iIGNsYXNzPSIiPmxpbmRhLmR1bmJhckBodWF3ZWkuY29tPC9hPiZndDsgd3Jv dGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSIgc3R5bGU9InBhZ2U6IFdvcmRTZWN0 aW9uMTsgZm9udC1mYW1pbHk6IEx1Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRv OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpJMk5TRiBwYXJ0aWNpcGFudHMsPHNwYW4gY2xhc3M9IkFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFw dDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xh c3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IiBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2Ry YWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5LWludGVyZmFjZS1pbS8iIHN0eWxlPSJjb2xvcjogcHVy cGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPmh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5LWludGVyZmFjZS1p bS88L2E+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPnNw ZWNpZmllcw0KIHRoZSBzdHJ1Y3R1cmUgZm9yIEkyTlNGIGNhcGFiaWxpdHkgbGF5ZXIgcnVsZXMu PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWls eTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KRm9yIHRoZSBJMk5TRiBzaW1wbGUg c2VydmljZSBsYXllciwgd2hhdCBkbyBwZW9wbGUgdGhpbmsgb2YgdXNpbmcgT3BlblN0YWNr4oCZ cyBHcm91cCBQb2xpY3kgc3RydWN0dXJlID88bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRp diBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZu YnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBm b250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9 IiI+DQpJZiB1c2luZyBPcGVuU3RhY2sgR3JvdXAtYmFzZWQgUG9saWN5IChHQlApIHN0cnVjdHVy ZSwgdGhlIEkyTlNGIHNpbXBsZSBzZXJ2aWNlIGxheWVyIGNhbiBiZSBleHByZXNzZWQgYXM8bzpw IGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAw MXB0IDAuNzVpbjsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsgdGV4dC1pbmRlbnQ6IC0wLjI1aW47IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTogU3ltYm9sOyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+wrc8c3BhbiBzdHlsZT0i Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgZm9udC1zaXplOiA3cHQ7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAn VGltZXMgTmV3IFJvbWFuJzsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj5Qb2xpY3kNCiBUYXJnZXQgR3JvdXAgKFBURykuIFRo aXMgaXMgYSBncm91cCBvZiBUYXJnZXRzIHRvIHdoaWNoIGEgdHJhZmZpYyBwb2xpY3kgY2FuIGJl IGFwcGxpZWQuIEEgUFRHIG1heSBiZSBtYXBwZWQgdG8gYSBOZXV0cm9uIFN1Ym5ldCwgYSBjbGll bnQgdmlydHVhbCBTdWJuZXQgKGkuZS4gd2l0aCBwcml2YXRlIGFkZHJlc3MgcHJlZml4KSwgYSBz dWJuZXQgd2l0aCBwdWJsaWMgYWRkcmVzcyBmYW1pbGllcywgb3IgYW55IGNvbWJpbmF0aW9uIG9m IHRoZW0NCiB3aXRoIGxvZ2ljYWwgb3BlcmF0b3JzIChMb2dpY2FsIEFORCwgT1IsIG9yIE5PVCku IEEgUFRHIHJlZmVyZW5jZXMgb25lIG9yIG1vcmUgUG9saWN5IFJ1bGUgU2V0cyB0aGF0IGl0IGNv bnN1bWVzIG9yIHByb3ZpZGVzLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQgMC43NWluOyBmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVudDogLTAuMjVpbjsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBTeW1ib2w7IiBjbGFzcz0iIj48c3BhbiBj bGFzcz0iIj7CtzxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6 IG5vcm1hbDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyIgY2xhc3M9IiI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPlRhcmdldC4N CiBUaGlzIGlzIHVzZWQgYnkgdGhlIGFwcGxpY2F0aW9uIGNsaWVudCB0byBlc3RhYmxpc2ggY29t bXVuaWNhdGlvbnMgb3ZlciB0aGUgbmV0d29yay4gQSBUYXJnZXQgaXMgbWFwcGVkIHRvIGEgc2lu Z2xlIE5ldXRyb24gUG9ydCwgYSBwaHlzaWNhbC9sb2dpY2FsIGluZ3Jlc3MgcG9ydCwgb3IgYSBw aHlzaWNhbC9sb2dpY2FsIGVncmVzcyBwb3J0LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQgMC43NWluOyBmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVudDogLTAuMjVp bjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBTeW1ib2w7IiBjbGFzcz0i Ij48c3BhbiBjbGFzcz0iIj7CtzxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGlu ZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyIgY2xhc3M9 IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9 IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFu PlBvbGljeQ0KIFJ1bGUgU2V0LiBBIFBvbGljeSBSdWxlIFNldCBpcyB1c2VkIHRvIGRldGVybWlu ZSBob3cgdGhlIHRyYWZmaWMgYmV0d2VlbiBhIHBhaXIgb2YgVGFyZ2V0IEdyb3VwcyBpcyB0byBi ZSB0cmVhdGVkLiBBIFBvbGljeSBSdWxlIFNldCBjb25zaXN0cyBvZiBvbmUgb3IgbW9yZSBQb2xp Y3kgUnVsZXMuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdCAwLjc1aW47IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IHRleHQtaW5kZW50OiAtMC4yNWluOyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6IFN5bWJvbDsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPsK3 PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBm b250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbic7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+UG9saWN5DQogUnVsZS4gQSBQ b2xpY3kgUnVsZSBjb25zaXN0cyBvZiBhIFRyYWZmaWMgQ2xhc3NpZmllciBhbmQgYSBzZXQgb2Yg QWN0aW9ucyB0byBiZSBhcHBsaWVkIHRvIHRoZSB0cmFmZmljLjxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQgMC43NWluOyBmb250 LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVu dDogLTAuMjVpbjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBTeW1ib2w7 IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj7CtzxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXNpemU6 IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4n OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNw YW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3Nw YW4+PC9zcGFuPlBvbGljeQ0KIENsYXNzaWZpZXIuIEEgdHJhZmZpYyBjbGFzc2lmaWVyIGRlc2Ny aWJlcyB0aGUgdHJhZmZpYyB0byB3aGljaCBhIFBvbGljeSBSdWxlIGlzIHRvIGJlIGFwcGxpZWQu IEl0IGlzIGV4cHJlc3NlZCBhcyBhIGRpcmVjdGlvbiwgYSBsaXN0IG9mIEw0IHBvcnRzLCB0aW1l IHJhbmdlLCBhbmQgYSBwcm90b2NvbC48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBz dHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0IDAuNzVpbjsgZm9udC1zaXplOiAxMXB0OyBm b250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgdGV4dC1pbmRlbnQ6IC0wLjI1aW47IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogU3ltYm9sOyIgY2xhc3M9IiI+PHNw YW4gY2xhc3M9IiI+wrc8c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9udC1zaXplOiA3cHQ7IGxpbmUtaGVp Z2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJzsiIGNsYXNzPSIiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj5Qb2xp Y3kNCiBBY3Rpb24uIFRoaXMgaXMgdGhlIGFjdGlvbiBhcHBsaWVkIHRvIHRoZSB0cmFmZmljIHRo YXQgbWF0Y2hlcyB0aGUgY2xhc3NpZmllci4gQW4gYWN0aW9uIG1heSBiZSBhIHNpbXBsZSBBQ0wg YWN0aW9uIChpLmUuIGFsbG93LCBkZW55LCBtaXJyb3JpbmcpLCBhcHBseWluZyBhIHdlbGwga25v d24gc3RhdGlzdGljcyBmdW5jdGlvbnMgKGUuZy4gWCBtaW51dGVzIGNvdW50LCBZIGhvdXJzIGNv dXJ0KSwgYXBwbHlpbmcgY2xpZW50IHNwZWNpZmllZCBmdW5jdGlvbnMNCiAod2l0aCBVUkwgcHJv dmlkZWQpLCBvciBtYXkgcmVmZXIgdG8gYW4gb3JkZXJlZCBzZXF1ZW5jZSBvZiBmdW5jdGlvbnMg KGkuZS4sIGEgc2VydmljZSBjaGFpbikuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJz cDs8L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIi Pg0KSWYgeW91IGhhdmUgY29uY2VybiBvZiB1c2luZyBPcGVuU3RhY2sgR3JvdXAgQmFzZWQgUG9s aWNpZXMsIHBsZWFzZSBsZXQgdGhlIGdyb3VwIGtub3cuPG86cCBjbGFzcz0iIj48L286cD48L2Rp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFz cz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAw MDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsi IGNsYXNzPSIiPg0KVGhhbmtzLCBMaW5kYTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6IEx1Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBh dXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6 IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+X19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX188L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogTHVjaWRh R3JhbmRlOyBmb250LXNpemU6IDExcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxp bmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEx1Y2lkYUdyYW5k ZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhl aWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93 czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+STJu c2YNCiBtYWlsaW5nIGxpc3Q8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogTHVjaWRhR3Jh bmRlOyBmb250LXNpemU6IDExcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUt aGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lk b3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyIgY2xhc3M9IiI+DQo8YSBocmVmPSJtYWlsdG86STJuc2ZAaWV0Zi5vcmciIHN0eWxlPSJj b2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsgZm9udC1mYW1pbHk6IEx1 Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiIGNsYXNzPSIiPkkybnNmQGlldGYub3JnPC9hPjxiciBzdHlsZT0iZm9udC1m YW1pbHk6IEx1Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQt ZGVjb3JhdGlvbjogdW5kZXJsaW5lOyBmb250LWZhbWlseTogTHVjaWRhR3JhbmRlOyBmb250LXNp emU6IDExcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVpZ2h0OiBub3Jt YWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9 IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZjwvYT48L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBhcHBsZS1jb250ZW50 LWVkaXRlZD0idHJ1ZSIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDAp OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTog c3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4N Ci0tPGJyIGNsYXNzPSIiPg0KJnF1b3Q7RXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIElu Zmllcm5vJnF1b3Q7PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KRHIgRGllZ28gUi4gTG9w ZXo8YnIgY2xhc3M9IiI+DQpUZWxlZm9uaWNhIEkmIzQzO0Q8YnIgY2xhc3M9IiI+DQo8YSBocmVm PSJodHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVnby5sb3Blei8iIGNsYXNzPSIiPmh0dHA6Ly9wZW9w bGUudGlkLmVzL2RpZWdvLmxvcGV6LzwvYT48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpl LW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb208YnIgY2xhc3M9IiI+DQpUZWw6ICZu YnNwOyAmbmJzcDsmIzQzOzM0IDkxMyAxMjkgMDQxPGJyIGNsYXNzPSIiPg0KTW9iaWxlOiAmIzQz OzM0IDY4MiAwNTEgMDkxPGJyIGNsYXNzPSIiPg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLTwvZGl2Pg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJy Pg0KPGhyPg0KPGZvbnQgZmFjZT0iQXJpYWwiIGNvbG9yPSJHcmF5IiBzaXplPSIxIj48YnI+DQpF c3RlIG1lbnNhamUgeSBzdXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNsdXNpdmFtZW50ZSBhIHN1 IGRlc3RpbmF0YXJpbywgcHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7NuIHByaXZpbGVnaWFkYSBv IGNvbmZpZGVuY2lhbCB5IGVzIHBhcmEgdXNvIGV4Y2x1c2l2byBkZSBsYSBwZXJzb25hIG8gZW50 aWRhZCBkZSBkZXN0aW5vLiBTaSBubyBlcyB1c3RlZC4gZWwgZGVzdGluYXRhcmlvIGluZGljYWRv LCBxdWVkYSBub3RpZmljYWRvIGRlIHF1ZSBsYQ0KIGxlY3R1cmEsIHV0aWxpemFjacOzbiwgZGl2 dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVkZSBlc3RhciBwcm9oaWJp ZGEgZW4gdmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBTaSBoYSByZWNpYmlkbyBl c3RlIG1lbnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5pcXVlIGlu bWVkaWF0YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVzdHJ1Y2Np w7NuLjxicj4NCjxicj4NClRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21p c3Npb24gaXMgcHJpdmlsZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVk IG9ubHkgZm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3Zl LiBJZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lw aWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwNCiBk aXN0cmlidXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0bHkg cHJvaGliaXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFuc21pc3Npb24gaW4gZXJy b3IsIGRvIG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVwbHkgdG8gdGhlIHNlbmRl ciB0aGF0IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlvbiBpbiBlcnJvciBhbmQg dGhlbiBkZWxldGUgaXQuPGJyPg0KPGJyPg0KRXN0YSBtZW5zYWdlbSBlIHNldXMgYW5leG9zIHNl IGRpcmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0w6FyaW8sIHBvZGUgY29udGVy IGluZm9ybWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFsIGUgw6kgcGFyYSB1c28g ZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZv c3NhIHNlbmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRpY2FkbywgZmljYSBub3RpZmljYWRvIGRl IHF1ZSBhDQogbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBkaXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEg c2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9pYmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lz bGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEgbWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ft b3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2 aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbzxicj4NCjwvZm9udD4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_64E8BEC62EAC41AF9C729CBFF4A1D228telefonicacom_-- From nobody Thu Oct 1 19:08:49 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BAC71A92FC for ; Thu, 1 Oct 2015 19:08:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DzocIUfj2eME for ; Thu, 1 Oct 2015 19:08:44 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C92D01A92F8 for ; Thu, 1 Oct 2015 19:08:43 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BYG73056; Fri, 02 Oct 2015 02:08:41 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Fri, 2 Oct 2015 03:08:41 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Thu, 1 Oct 2015 19:08:39 -0700 From: Linda Dunbar To: DIEGO LOPEZ GARCIA Thread-Topic: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AdD8kJsQ5Rkc+aynSXudFPC41PBbhwACacoAAAag2WA= Date: Fri, 2 Oct 2015 02:08:38 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D668FD@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> In-Reply-To: <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.129.255] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D668FDdfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Oct 2015 02:08:48 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D668FDdfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGllZ28sDQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIGV4cHJlc3NpbmcgdGhlIG9waW5pb24u DQoNClRoZSDigJxQb2xpY3kgQ2xhc3NpZmllcuKAnSBvZiB0aGUgT3BlblN0YWNrIEdyb3VwIEJh c2VkIFBvbGljeSBjYW4gYmUgbWFwcGVkIHRvIHRoZSDigJxPYmplY3TigJ0gaW4gdGhlIEkyTlNG IGNhcGFiaWxpdHkgbGF5ZXIgcnVsZSBzdHJ1Y3R1cmUgKFN1YmplY3QtT2JqZWN0LUFjdGlvbi1G dW5jdGlvbiksIHdoZXJlIOKAnE9iamVjdOKAnSByZWZlcnMgdG8gdGhlICBNYXRjaGluZyB2YWx1 ZXMgYmFzZWQgb24gY29udGV4dCwgZS5nLiBTdGF0ZSwgZGlyZWN0aW9uIG9mIHRoZSB0cmFmZmlj LCB0aW1lLCBnZW8tbG9jYXRpb24sIGV0Yy4uDQoNCkZvciBzdXJlLCB0aGUgY3VycmVudCDigJxQ b2xpY3kgQ2xhc3NpZmllcuKAnSBpcyBub3QgY29tcHJlaGVuc2l2ZSBlbm91Z2ggZm9yIGFsbCB0 aGUgY29udGV4dHVhbCB2YWx1ZXMvZXZlbnRzIHRoYXQgTlNGcyBjYW4gY29tcGFyZS4gIE1heWJl IEkyTlNGIGNhbiB1c2UgYSBkaWZmZXJlbnQgdGVybWlub2xvZ3kgdG8gYXZvaWQgdGhlIGNvbmZ1 c2lvbiBpbiB0aGUgaW5kdXN0cnksIGFzIHRoZSBPcGVuU3RhY2sgR3JvdXAgQmFzZWQgUG9saWN5 IChvciBXaW5kb3cgR3JvdXAgQmFzZWQgUG9saWN5KSAgYXJlIG5vdCBlbm91Z2ggdG8gZGVzY3Jp YmUgc2VydmljZSBsYXllciBzZWN1cml0eSBwb2xpY2llcyB0byBuZXR3b3Jrcy4gIEZvciBleGFt cGxlLCAodGhpbmtpbmcgbG91ZCksIHdlIGNhbiB1c2Ug4oCcUG9saWN5IOKAkyBDb250ZXh04oCd IGluc3RlYWQuDQoNCkxpbmRhDQoNCkZyb206IEkybnNmIFttYWlsdG86aTJuc2YtYm91bmNlc0Bp ZXRmLm9yZ10gT24gQmVoYWxmIE9mIERJRUdPIExPUEVaIEdBUkNJQQ0KU2VudDogVGh1cnNkYXks IE9jdG9iZXIgMDEsIDIwMTUgNTo0MSBQTQ0KVG86IExpbmRhIER1bmJhcg0KQ2M6IGkybnNmQGll dGYub3JnDQpTdWJqZWN0OiBSZTogW0kybnNmXSBXaGF0IGRvIHlvdSBwZW9wbGUgdGhpbmsgb2Yg dXNpbmcgT3BlblN0YWNrJ3MgR3JvdXAgQmFzZWQgUG9saWN5IHRvIGRlc2NyaWJlIEkyTlNGIFNl cnZpY2UgTGF5ZXIgUnVsZXM/DQoNCkhpIExpbmRhLA0KDQpJIGFtIG5vdCBjb21wbGV0ZWx5IHN1 cmUgdGhhdCB0aGUgY3VycmVudCBuZXR3b3JraW5nIG1vZGVsIG9mIE9wZW5TdGFjaywgdGhhdCBp cyByZWZsZWN0ZWQgaW4gdGhlIHJ1bGUgdGFyZ2V0cyAoZWl0aGVyIHRoZSBQVEcgYW5kIHRoZSBU YXJnZXQgaXRzZWxmKSBkb2VzIGNvdmVyIGFsbCB0aGUgcG90ZW50aWFsIHNlbWFudGljcyBmb3Ig Z2VuZXJhbCBzZWN1cml0eSBmdW5jdGlvbnMuIFRoZSBzYW1lIGNvbmNlcm4gYXBwbGllcyB0byBQ b2xpY3kgQ2xhc3NpZmllciwgYXMgdGhleSBzZWVtIHZlcnkgbXVjaCBhc3NvY2lhdGVkIHdpdGgg YSBwYXJ0aWN1bGFyIGltcGxlbWVudGF0aW9uIG1vZGVsIGFuZCwgd2hhdCBpcyBtb3JlLCB3aXRo IGEgbGltaXRlZCBuZXR3b3JrIG1vZGVsLg0KDQpCZSBnb29kZSwNCg0KDQpPbiAxIE9jdCAyMDE1 LCBhdCAyMzozMiAsIExpbmRhIER1bmJhciA8bGluZGEuZHVuYmFyQGh1YXdlaS5jb208bWFpbHRv OmxpbmRhLmR1bmJhckBodWF3ZWkuY29tPj4gd3JvdGU6DQoNCkkyTlNGIHBhcnRpY2lwYW50cywN Cg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQteGlhLWkybnNmLWNhcGFi aWxpdHktaW50ZXJmYWNlLWltLyBzcGVjaWZpZXMgdGhlIHN0cnVjdHVyZSBmb3IgSTJOU0YgY2Fw YWJpbGl0eSBsYXllciBydWxlcy4NCg0KRm9yIHRoZSBJMk5TRiBzaW1wbGUgc2VydmljZSBsYXll ciwgd2hhdCBkbyBwZW9wbGUgdGhpbmsgb2YgdXNpbmcgT3BlblN0YWNr4oCZcyBHcm91cCBQb2xp Y3kgc3RydWN0dXJlID8NCg0KSWYgdXNpbmcgT3BlblN0YWNrIEdyb3VwLWJhc2VkIFBvbGljeSAo R0JQKSBzdHJ1Y3R1cmUsIHRoZSBJMk5TRiBzaW1wbGUgc2VydmljZSBsYXllciBjYW4gYmUgZXhw cmVzc2VkIGFzDQrigKIgICAgICAgIFBvbGljeSBUYXJnZXQgR3JvdXAgKFBURykuIFRoaXMgaXMg YSBncm91cCBvZiBUYXJnZXRzIHRvIHdoaWNoIGEgdHJhZmZpYyBwb2xpY3kgY2FuIGJlIGFwcGxp ZWQuIEEgUFRHIG1heSBiZSBtYXBwZWQgdG8gYSBOZXV0cm9uIFN1Ym5ldCwgYSBjbGllbnQgdmly dHVhbCBTdWJuZXQgKGkuZS4gd2l0aCBwcml2YXRlIGFkZHJlc3MgcHJlZml4KSwgYSBzdWJuZXQg d2l0aCBwdWJsaWMgYWRkcmVzcyBmYW1pbGllcywgb3IgYW55IGNvbWJpbmF0aW9uIG9mIHRoZW0g d2l0aCBsb2dpY2FsIG9wZXJhdG9ycyAoTG9naWNhbCBBTkQsIE9SLCBvciBOT1QpLiBBIFBURyBy ZWZlcmVuY2VzIG9uZSBvciBtb3JlIFBvbGljeSBSdWxlIFNldHMgdGhhdCBpdCBjb25zdW1lcyBv ciBwcm92aWRlcy4NCuKAoiAgICAgICAgVGFyZ2V0LiBUaGlzIGlzIHVzZWQgYnkgdGhlIGFwcGxp Y2F0aW9uIGNsaWVudCB0byBlc3RhYmxpc2ggY29tbXVuaWNhdGlvbnMgb3ZlciB0aGUgbmV0d29y ay4gQSBUYXJnZXQgaXMgbWFwcGVkIHRvIGEgc2luZ2xlIE5ldXRyb24gUG9ydCwgYSBwaHlzaWNh bC9sb2dpY2FsIGluZ3Jlc3MgcG9ydCwgb3IgYSBwaHlzaWNhbC9sb2dpY2FsIGVncmVzcyBwb3J0 Lg0K4oCiICAgICAgICBQb2xpY3kgUnVsZSBTZXQuIEEgUG9saWN5IFJ1bGUgU2V0IGlzIHVzZWQg dG8gZGV0ZXJtaW5lIGhvdyB0aGUgdHJhZmZpYyBiZXR3ZWVuIGEgcGFpciBvZiBUYXJnZXQgR3Jv dXBzIGlzIHRvIGJlIHRyZWF0ZWQuIEEgUG9saWN5IFJ1bGUgU2V0IGNvbnNpc3RzIG9mIG9uZSBv ciBtb3JlIFBvbGljeSBSdWxlcy4NCuKAoiAgICAgICAgUG9saWN5IFJ1bGUuIEEgUG9saWN5IFJ1 bGUgY29uc2lzdHMgb2YgYSBUcmFmZmljIENsYXNzaWZpZXIgYW5kIGEgc2V0IG9mIEFjdGlvbnMg dG8gYmUgYXBwbGllZCB0byB0aGUgdHJhZmZpYy4NCuKAoiAgICAgICAgUG9saWN5IENsYXNzaWZp ZXIuIEEgdHJhZmZpYyBjbGFzc2lmaWVyIGRlc2NyaWJlcyB0aGUgdHJhZmZpYyB0byB3aGljaCBh IFBvbGljeSBSdWxlIGlzIHRvIGJlIGFwcGxpZWQuIEl0IGlzIGV4cHJlc3NlZCBhcyBhIGRpcmVj dGlvbiwgYSBsaXN0IG9mIEw0IHBvcnRzLCB0aW1lIHJhbmdlLCBhbmQgYSBwcm90b2NvbC4NCuKA oiAgICAgICAgUG9saWN5IEFjdGlvbi4gVGhpcyBpcyB0aGUgYWN0aW9uIGFwcGxpZWQgdG8gdGhl IHRyYWZmaWMgdGhhdCBtYXRjaGVzIHRoZSBjbGFzc2lmaWVyLiBBbiBhY3Rpb24gbWF5IGJlIGEg c2ltcGxlIEFDTCBhY3Rpb24gKGkuZS4gYWxsb3csIGRlbnksIG1pcnJvcmluZyksIGFwcGx5aW5n IGEgd2VsbCBrbm93biBzdGF0aXN0aWNzIGZ1bmN0aW9ucyAoZS5nLiBYIG1pbnV0ZXMgY291bnQs IFkgaG91cnMgY291cnQpLCBhcHBseWluZyBjbGllbnQgc3BlY2lmaWVkIGZ1bmN0aW9ucyAod2l0 aCBVUkwgcHJvdmlkZWQpLCBvciBtYXkgcmVmZXIgdG8gYW4gb3JkZXJlZCBzZXF1ZW5jZSBvZiBm dW5jdGlvbnMgKGkuZS4sIGEgc2VydmljZSBjaGFpbikuDQoNCklmIHlvdSBoYXZlIGNvbmNlcm4g b2YgdXNpbmcgT3BlblN0YWNrIEdyb3VwIEJhc2VkIFBvbGljaWVzLCBwbGVhc2UgbGV0IHRoZSBn cm91cCBrbm93Lg0KDQpUaGFua3MsIExpbmRhDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KSTJuc2YgbWFpbGluZyBsaXN0DQpJMm5zZkBpZXRmLm9yZzxt YWlsdG86STJuc2ZAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2kybnNmDQoNCi0tDQoiRXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5v Ig0KDQpEciBEaWVnbyBSLiBMb3Bleg0KVGVsZWZvbmljYSBJK0QNCmh0dHA6Ly9wZW9wbGUudGlk LmVzL2RpZWdvLmxvcGV6Lw0KDQplLW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb208 bWFpbHRvOmRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20+DQpUZWw6ICAgICszNCA5MTMgMTI5 IDA0MQ0KTW9iaWxlOiArMzQgNjgyIDA1MSAwOTENCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KDQpFc3RlIG1l bnNhamUgeSBzdXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNsdXNpdmFtZW50ZSBhIHN1IGRlc3Rp bmF0YXJpbywgcHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7NuIHByaXZpbGVnaWFkYSBvIGNvbmZp ZGVuY2lhbCB5IGVzIHBhcmEgdXNvIGV4Y2x1c2l2byBkZSBsYSBwZXJzb25hIG8gZW50aWRhZCBk ZSBkZXN0aW5vLiBTaSBubyBlcyB1c3RlZC4gZWwgZGVzdGluYXRhcmlvIGluZGljYWRvLCBxdWVk YSBub3RpZmljYWRvIGRlIHF1ZSBsYSBsZWN0dXJhLCB1dGlsaXphY2nDs24sIGRpdnVsZ2FjacOz biB5L28gY29waWEgc2luIGF1dG9yaXphY2nDs24gcHVlZGUgZXN0YXIgcHJvaGliaWRhIGVuIHZp cnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kgaGEgcmVjaWJpZG8gZXN0ZSBtZW5z YWplIHBvciBlcnJvciwgbGUgcm9nYW1vcyBxdWUgbm9zIGxvIGNvbXVuaXF1ZSBpbm1lZGlhdGFt ZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBhIHN1IGRlc3RydWNjacOzbi4NCg0K VGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlzc2lvbiBpcyBwcml2aWxl Z2VkIGFuZCBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgb25seSBmb3IgdGhlIHVz ZSBvZiB0aGUgaW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQgYWJvdmUuIElmIHRoZSByZWFkZXIg b2YgdGhpcyBtZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCB5b3UgYXJlIGhl cmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9uLCBkaXN0cmlidXRpb24gb3IgY29w eWluZyBvZiB0aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4gSWYgeW91 IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFuc21pc3Npb24gaW4gZXJyb3IsIGRvIG5vdCByZWFkIGl0 LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVwbHkgdG8gdGhlIHNlbmRlciB0aGF0IHlvdSBoYXZlIHJl Y2VpdmVkIHRoaXMgY29tbXVuaWNhdGlvbiBpbiBlcnJvciBhbmQgdGhlbiBkZWxldGUgaXQuDQoN CkVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4Y2x1c2l2YW1lbnRlIGFv IHNldSBkZXN0aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZvcm1hw6fDo28gcHJpdmlsZWdpYWRh IG91IGNvbmZpZGVuY2lhbCBlIMOpIHBhcmEgdXNvIGV4Y2x1c2l2byBkYSBwZXNzb2Egb3UgZW50 aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYSBzZW5ob3JpYSBvIGRlc3RpbmF0w6Fy aW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUgYSBsZWl0dXJhLCB1dGlsaXphw6fD o28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8OjbyBwb2RlIGVzdGFy IHByb2liaWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2VudGUuIFNlIHJlY2ViZXUg ZXN0YSBtZW5zYWdlbSBwb3IgZXJybywgcm9nYW1vcy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBp bWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZpYSBlIHByb2NlZGEgYSBzdWEgZGVzdHJ1acOn w6NvDQo= --_000_4A95BA014132FF49AE685FAB4B9F17F657D668FDdfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OlNpbVN1bjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiXEBTaW1TdW4iOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpMdWNpZGFHcmFuZGU7DQoJcGFub3NlLTE6MCAw IDAgMCAwIDAgMCAwIDAgMDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30N CmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5N c29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFncmFw aA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowaW47DQoJbWFyZ2luLXJp Z2h0OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsNCgltYXJnaW4tbGVmdDouNWluOw0KCW1hcmdp bi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0 eWxlLW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21z by1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUt dHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9u MQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47 fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmlu aXRpb25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1pZDo2OTQ2OTUzMTY7DQoJbXNvLWxpc3Qt dHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjEzNTA5OTM3MTYgLTk2Mzg2ODAx MiA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2 NzY5ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXN0YXJ0LWF0 OjE5Njc7DQoJbXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 OuKAkzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6Ljc1aW47DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZv bnQtZmFtaWx5OiJBcmlhbCIsInNhbnMtc2VyaWYiOw0KCW1zby1iaWRpLWZvbnQtZmFtaWx5OiJU aW1lcyBOZXcgUm9tYW4iO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtdGFiLXN0b3A6 MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxp c3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVs NQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxl dmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3Rv cDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA bGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0Kb2wNCgl7bWFyZ2lu LWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRt YXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4N CjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRh PSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJv ZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj5EaWVnbywNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhhbmsgeW91IHZlcnkg bXVjaCBmb3IgZXhwcmVzc2luZyB0aGUgb3Bpbmlvbi4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhlIOKAnFBvbGlj eSBDbGFzc2lmaWVy4oCdIG9mIHRoZSBPcGVuU3RhY2sgR3JvdXAgQmFzZWQgUG9saWN5IGNhbiBi ZSBtYXBwZWQgdG8gdGhlIOKAnE9iamVjdOKAnSBpbiB0aGUgSTJOU0YgY2FwYWJpbGl0eSBsYXll ciBydWxlIHN0cnVjdHVyZSAoU3ViamVjdC1PYmplY3QtQWN0aW9uLUZ1bmN0aW9uKSwNCiB3aGVy ZSDigJxPYmplY3TigJ0gcmVmZXJzIHRvIHRoZSAmbmJzcDtNYXRjaGluZyB2YWx1ZXMgYmFzZWQg b24gY29udGV4dCwgZS5nLiBTdGF0ZSwgZGlyZWN0aW9uIG9mIHRoZSB0cmFmZmljLCB0aW1lLCBn ZW8tbG9jYXRpb24sIGV0Yy4uDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkZvciBzdXJlLCB0aGUgY3VycmVudCDigJxQ b2xpY3kgQ2xhc3NpZmllcuKAnSBpcyBub3QgY29tcHJlaGVuc2l2ZSBlbm91Z2ggZm9yIGFsbCB0 aGUgY29udGV4dHVhbCB2YWx1ZXMvZXZlbnRzIHRoYXQgTlNGcyBjYW4gY29tcGFyZS4gJm5ic3A7 TWF5YmUgSTJOU0YgY2FuIHVzZSBhIGRpZmZlcmVudA0KIHRlcm1pbm9sb2d5IHRvIGF2b2lkIHRo ZSBjb25mdXNpb24gaW4gdGhlIGluZHVzdHJ5LCBhcyB0aGUgT3BlblN0YWNrIEdyb3VwIEJhc2Vk IFBvbGljeSAob3IgV2luZG93IEdyb3VwIEJhc2VkIFBvbGljeSkgJm5ic3A7YXJlIG5vdCBlbm91 Z2ggdG8gZGVzY3JpYmUgc2VydmljZSBsYXllciBzZWN1cml0eSBwb2xpY2llcyB0byBuZXR3b3Jr cy4gJm5ic3A7Rm9yIGV4YW1wbGUsICh0aGlua2luZyBsb3VkKSwgd2UgY2FuIHVzZSDigJxQb2xp Y3kg4oCTIENvbnRleHTigJ0gaW5zdGVhZC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+TGluZGE8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRk aW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPiBJMm5zZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhh bGYgT2YgPC9iPkRJRUdPIExPUEVaIEdBUkNJQTxicj4NCjxiPlNlbnQ6PC9iPiBUaHVyc2RheSwg T2N0b2JlciAwMSwgMjAxNSA1OjQxIFBNPGJyPg0KPGI+VG86PC9iPiBMaW5kYSBEdW5iYXI8YnI+ DQo8Yj5DYzo8L2I+IGkybnNmQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbSTJu c2ZdIFdoYXQgZG8geW91IHBlb3BsZSB0aGluayBvZiB1c2luZyBPcGVuU3RhY2sncyBHcm91cCBC YXNlZCBQb2xpY3kgdG8gZGVzY3JpYmUgSTJOU0YgU2VydmljZSBMYXllciBSdWxlcz88bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBMaW5kYSwgPG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGFtIG5vdCBjb21wbGV0 ZWx5IHN1cmUgdGhhdCB0aGUgY3VycmVudCBuZXR3b3JraW5nIG1vZGVsIG9mIE9wZW5TdGFjaywg dGhhdCBpcyByZWZsZWN0ZWQgaW4gdGhlIHJ1bGUgdGFyZ2V0cyAoZWl0aGVyIHRoZSBQVEcgYW5k IHRoZSBUYXJnZXQgaXRzZWxmKSBkb2VzIGNvdmVyIGFsbCB0aGUgcG90ZW50aWFsIHNlbWFudGlj cyBmb3IgZ2VuZXJhbCBzZWN1cml0eSBmdW5jdGlvbnMuIFRoZSBzYW1lIGNvbmNlcm4NCiBhcHBs aWVzIHRvIFBvbGljeSBDbGFzc2lmaWVyLCBhcyB0aGV5IHNlZW0gdmVyeSBtdWNoIGFzc29jaWF0 ZWQgd2l0aCBhIHBhcnRpY3VsYXIgaW1wbGVtZW50YXRpb24gbW9kZWwgYW5kLCB3aGF0IGlzIG1v cmUsIHdpdGggYSBsaW1pdGVkIG5ldHdvcmsgbW9kZWwuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJlIGdvb2RlLDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdp bi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+T24gMSBPY3QgMjAxNSwgYXQgMjM6MzIgLCBMaW5kYSBEdW5iYXIgJmx0OzxhIGhyZWY9 Im1haWx0bzpsaW5kYS5kdW5iYXJAaHVhd2VpLmNvbSI+bGluZGEuZHVuYmFyQGh1YXdlaS5jb208 L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+STJOU0YgcGFydGljaXBhbnRzLDxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDsiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+ PGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQteGlhLWkybnNm LWNhcGFiaWxpdHktaW50ZXJmYWNlLWltLyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQteGlhLWkybnNmLWNhcGFiaWxpdHkt aW50ZXJmYWNlLWltLzwvc3Bhbj48L2E+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPnNwZWNpZmllcw0KIHRoZSBzdHJ1Y3R1cmUgZm9yIEkyTlNGIGNhcGFi aWxpdHkgbGF5ZXIgcnVsZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mbmJzcDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZvciB0aGUgSTJOU0Ygc2ltcGxlIHNlcnZp Y2UgbGF5ZXIsIHdoYXQgZG8gcGVvcGxlIHRoaW5rIG9mIHVzaW5nIE9wZW5TdGFja+KAmXMgR3Jv dXAgUG9saWN5IHN0cnVjdHVyZSA/PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPklmIHVzaW5nIE9wZW5TdGFjayBHcm91 cC1iYXNlZCBQb2xpY3kgKEdCUCkgc3RydWN0dXJlLCB0aGUgSTJOU0Ygc2ltcGxlIHNlcnZpY2Ug bGF5ZXIgY2FuIGJlIGV4cHJlc3NlZCBhczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6Ljc1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InRleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6U3ltYm9sIj7Ctzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+UG9saWN5DQogVGFyZ2V0IEdyb3VwIChQVEcpLiBUaGlzIGlzIGEgZ3JvdXAg b2YgVGFyZ2V0cyB0byB3aGljaCBhIHRyYWZmaWMgcG9saWN5IGNhbiBiZSBhcHBsaWVkLiBBIFBU RyBtYXkgYmUgbWFwcGVkIHRvIGEgTmV1dHJvbiBTdWJuZXQsIGEgY2xpZW50IHZpcnR1YWwgU3Vi bmV0IChpLmUuIHdpdGggcHJpdmF0ZSBhZGRyZXNzIHByZWZpeCksIGEgc3VibmV0IHdpdGggcHVi bGljIGFkZHJlc3MgZmFtaWxpZXMsIG9yIGFueSBjb21iaW5hdGlvbiBvZiB0aGVtDQogd2l0aCBs b2dpY2FsIG9wZXJhdG9ycyAoTG9naWNhbCBBTkQsIE9SLCBvciBOT1QpLiBBIFBURyByZWZlcmVu Y2VzIG9uZSBvciBtb3JlIFBvbGljeSBSdWxlIFNldHMgdGhhdCBpdCBjb25zdW1lcyBvciBwcm92 aWRlcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi43NWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1 aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+wrc8 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPlRhcmdldC4N CiBUaGlzIGlzIHVzZWQgYnkgdGhlIGFwcGxpY2F0aW9uIGNsaWVudCB0byBlc3RhYmxpc2ggY29t bXVuaWNhdGlvbnMgb3ZlciB0aGUgbmV0d29yay4gQSBUYXJnZXQgaXMgbWFwcGVkIHRvIGEgc2lu Z2xlIE5ldXRyb24gUG9ydCwgYSBwaHlzaWNhbC9sb2dpY2FsIGluZ3Jlc3MgcG9ydCwgb3IgYSBw aHlzaWNhbC9sb2dpY2FsIGVncmVzcyBwb3J0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6Ljc1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9InRleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6U3ltYm9sIj7Ctzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90OyI+UG9saWN5DQogUnVsZSBTZXQuIEEgUG9saWN5IFJ1bGUgU2V0IGlzIHVz ZWQgdG8gZGV0ZXJtaW5lIGhvdyB0aGUgdHJhZmZpYyBiZXR3ZWVuIGEgcGFpciBvZiBUYXJnZXQg R3JvdXBzIGlzIHRvIGJlIHRyZWF0ZWQuIEEgUG9saWN5IFJ1bGUgU2V0IGNvbnNpc3RzIG9mIG9u ZSBvciBtb3JlIFBvbGljeSBSdWxlcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi43NWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJ0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OlN5bWJvbCI+wrc8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDsiPlBvbGljeQ0KIFJ1bGUuIEEgUG9saWN5IFJ1bGUgY29uc2lzdHMgb2YgYSBUcmFm ZmljIENsYXNzaWZpZXIgYW5kIGEgc2V0IG9mIEFjdGlvbnMgdG8gYmUgYXBwbGllZCB0byB0aGUg dHJhZmZpYy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bi1sZWZ0Oi43NWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDot LjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+ wrc8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPlBvbGlj eQ0KIENsYXNzaWZpZXIuIEEgdHJhZmZpYyBjbGFzc2lmaWVyIGRlc2NyaWJlcyB0aGUgdHJhZmZp YyB0byB3aGljaCBhIFBvbGljeSBSdWxlIGlzIHRvIGJlIGFwcGxpZWQuIEl0IGlzIGV4cHJlc3Nl ZCBhcyBhIGRpcmVjdGlvbiwgYSBsaXN0IG9mIEw0IHBvcnRzLCB0aW1lIHJhbmdlLCBhbmQgYSBw cm90b2NvbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bi1sZWZ0Oi43NWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDot LjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+ wrc8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPlBvbGlj eQ0KIEFjdGlvbi4gVGhpcyBpcyB0aGUgYWN0aW9uIGFwcGxpZWQgdG8gdGhlIHRyYWZmaWMgdGhh dCBtYXRjaGVzIHRoZSBjbGFzc2lmaWVyLiBBbiBhY3Rpb24gbWF5IGJlIGEgc2ltcGxlIEFDTCBh Y3Rpb24gKGkuZS4gYWxsb3csIGRlbnksIG1pcnJvcmluZyksIGFwcGx5aW5nIGEgd2VsbCBrbm93 biBzdGF0aXN0aWNzIGZ1bmN0aW9ucyAoZS5nLiBYIG1pbnV0ZXMgY291bnQsIFkgaG91cnMgY291 cnQpLCBhcHBseWluZyBjbGllbnQgc3BlY2lmaWVkIGZ1bmN0aW9ucw0KICh3aXRoIFVSTCBwcm92 aWRlZCksIG9yIG1heSByZWZlciB0byBhbiBvcmRlcmVkIHNlcXVlbmNlIG9mIGZ1bmN0aW9ucyAo aS5lLiwgYSBzZXJ2aWNlIGNoYWluKS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiZu YnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+SWYgeW91IGhhdmUgY29uY2VybiBv ZiB1c2luZyBPcGVuU3RhY2sgR3JvdXAgQmFzZWQgUG9saWNpZXMsIHBsZWFzZSBsZXQgdGhlIGdy b3VwIGtub3cuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mbmJzcDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDsiPlRoYW5rcywgTGluZGE8c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjYuNXB0O2ZvbnQt ZmFtaWx5OiZxdW90O0x1Y2lkYUdyYW5kZSZxdW90OywmcXVvdDtzZXJpZiZxdW90OyI+X19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpJMm5zZiBtYWls aW5nIGxpc3Q8YnI+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOkkybnNmQGlldGYub3JnIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjYuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0x1Y2lkYUdyYW5kZSZx dW90OywmcXVvdDtzZXJpZiZxdW90Oztjb2xvcjpwdXJwbGUiPkkybnNmQGlldGYub3JnPC9zcGFu PjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjYuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0x1Y2lk YUdyYW5kZSZxdW90OywmcXVvdDtzZXJpZiZxdW90OyI+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6Ni41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7THVjaWRhR3JhbmRlJnF1b3Q7LCZxdW90 O3NlcmlmJnF1b3Q7O2NvbG9yOnB1cnBsZSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9pMm5zZjwvc3Bhbj48L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpi bGFjayI+LS08YnI+DQomcXVvdDtFc3RhIHZleiBubyBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVy bm8mcXVvdDs8YnI+DQo8YnI+DQpEciBEaWVnbyBSLiBMb3Blejxicj4NClRlbGVmb25pY2EgSSYj NDM7RDxicj4NCjxhIGhyZWY9Imh0dHA6Ly9wZW9wbGUudGlkLmVzL2RpZWdvLmxvcGV6LyI+aHR0 cDovL3Blb3BsZS50aWQuZXMvZGllZ28ubG9wZXovPC9hPjxicj4NCjxicj4NCmUtbWFpbDogPGEg aHJlZj0ibWFpbHRvOmRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20iPmRpZWdvLnIubG9wZXpA dGVsZWZvbmljYS5jb208L2E+PGJyPg0KVGVsOiAmbmJzcDsgJm5ic3A7JiM0MzszNCA5MTMgMTI5 IDA0MTxicj4NCk1vYmlsZTogJiM0MzszNCA2ODIgMDUxIDA5MTxicj4NCi0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IGNs YXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+ DQo8aHIgc2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6Z3JheSI+PGJy Pg0KRXN0ZSBtZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUg YSBzdSBkZXN0aW5hdGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lh ZGEgbyBjb25maWRlbmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBv IGVudGlkYWQgZGUgZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRp Y2FkbywgcXVlZGEgbm90aWZpY2FkbyBkZSBxdWUgbGENCiBsZWN0dXJhLCB1dGlsaXphY2nDs24s IGRpdnVsZ2FjacOzbiB5L28gY29waWEgc2luIGF1dG9yaXphY2nDs24gcHVlZGUgZXN0YXIgcHJv aGliaWRhIGVuIHZpcnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kgaGEgcmVjaWJp ZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJvciwgbGUgcm9nYW1vcyBxdWUgbm9zIGxvIGNvbXVuaXF1 ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBhIHN1IGRlc3Ry dWNjacOzbi48YnI+DQo8YnI+DQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJh bnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRl bmRlZCBvbmx5IGZvciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlkdWFsIG9yIGVudGl0eSBuYW1lZCBh Ym92ZS4gSWYgdGhlIHJlYWRlciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCBy ZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24s DQogZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmlj dGx5IHByb2hpYml0ZWQuIElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGlu IGVycm9yLCBkbyBub3QgcmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBz ZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3Ig YW5kIHRoZW4gZGVsZXRlIGl0Ljxicj4NCjxicj4NCkVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhv cyBzZSBkaXJpZ2VtIGV4Y2x1c2l2YW1lbnRlIGFvIHNldSBkZXN0aW5hdMOhcmlvLCBwb2RlIGNv bnRlciBpbmZvcm1hw6fDo28gcHJpdmlsZWdpYWRhIG91IGNvbmZpZGVuY2lhbCBlIMOpIHBhcmEg dXNvIGV4Y2x1c2l2byBkYSBwZXNzb2Egb3UgZW50aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDD qSB2b3NzYSBzZW5ob3JpYSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2Fk byBkZSBxdWUgYQ0KIGxlaXR1cmEsIHV0aWxpemHDp8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8Oz cGlhIHNlbSBhdXRvcml6YcOnw6NvIHBvZGUgZXN0YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBs ZWdpc2xhw6fDo28gdmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCBy b2dhbW9zLWxoZSBxdWUgbm9zIG8gY29tdW5pcXVlIGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVz bWEgdmlhIGUgcHJvY2VkYSBhIHN1YSBkZXN0cnVpw6fDo288L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_4A95BA014132FF49AE685FAB4B9F17F657D668FDdfweml701chm_-- From nobody Thu Oct 1 22:18:15 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC33C1A1A1E for ; Thu, 1 Oct 2015 22:18:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ASg5GwJYmdcS for ; Thu, 1 Oct 2015 22:18:11 -0700 (PDT) Received: from pipi.pi.nu (pipi.pi.nu [83.168.239.141]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD4B81A1A17 for ; Thu, 1 Oct 2015 22:18:10 -0700 (PDT) Received: from [192.168.1.10] (unknown [112.205.86.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: loa@pi.nu) by pipi.pi.nu (Postfix) with ESMTPSA id D363618013BE; Fri, 2 Oct 2015 07:18:00 +0200 (CEST) To: DIEGO LOPEZ GARCIA , Linda Dunbar References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> From: Loa Andersson Message-ID: <560E137C.7030707@pi.nu> Date: Fri, 2 Oct 2015 13:17:48 +0800 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Oct 2015 05:18:14 -0000 Linda and Diego, This is said by someone that is not familiar with Open Stack or the Group Based Policy. I'm somewhat on the same page as Diego, at least in the same book. If we want to use OpenStack's Group Based Policy to describe I2NSF Service Layer Rules, the case for this has to be made much better. What are the pros and cons? Are there viable alternatives? /Loa On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: > Hi Linda, > > I am not completely sure that the current networking model of OpenStack, > that is reflected in the rule targets (either the PTG and the Target > itself) does cover all the potential semantics for general security > functions. The same concern applies to Policy Classifier, as they seem > very much associated with a particular implementation model and, what is > more, with a limited network model. > > Be goode, > > >> On 1 Oct 2015, at 23:32 , Linda Dunbar > > wrote: >> >> I2NSF participants, >> https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-interface-im/specifies >> the structure for I2NSF capability layer rules. >> For the I2NSF simple service layer, what do people think of using >> OpenStack’s Group Policy structure ? >> If using OpenStack Group-based Policy (GBP) structure, the I2NSF >> simple service layer can be expressed as >> ·Policy Target Group (PTG). This is a group of Targets to which a >> traffic policy can be applied. A PTG may be mapped to a Neutron >> Subnet, a client virtual Subnet (i.e. with private address prefix), a >> subnet with public address families, or any combination of them with >> logical operators (Logical AND, OR, or NOT). A PTG references one or >> more Policy Rule Sets that it consumes or provides. >> ·Target. This is used by the application client to establish >> communications over the network. A Target is mapped to a single >> Neutron Port, a physical/logical ingress port, or a physical/logical >> egress port. >> ·Policy Rule Set. A Policy Rule Set is used to determine how the >> traffic between a pair of Target Groups is to be treated. A Policy >> Rule Set consists of one or more Policy Rules. >> ·Policy Rule. A Policy Rule consists of a Traffic Classifier and a set >> of Actions to be applied to the traffic. >> ·Policy Classifier. A traffic classifier describes the traffic to >> which a Policy Rule is to be applied. It is expressed as a direction, >> a list of L4 ports, time range, and a protocol. >> ·Policy Action. This is the action applied to the traffic that matches >> the classifier. An action may be a simple ACL action (i.e. allow, >> deny, mirroring), applying a well known statistics functions (e.g. X >> minutes count, Y hours court), applying client specified functions >> (with URL provided), or may refer to an ordered sequence of functions >> (i.e., a service chain). >> If you have concern of using OpenStack Group Based Policies, please >> let the group know. >> Thanks, Linda >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf > > -- > "Esta vez no fallaremos, Doctor Infierno" > > Dr Diego R. Lopez > Telefonica I+D > http://people.tid.es/diego.lopez/ > > e-mail: diego.r.lopez@telefonica.com > Tel: +34 913 129 041 > Mobile: +34 682 051 091 > ---------------------------------- > > > ------------------------------------------------------------------------ > > Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, > puede contener información privilegiada o confidencial y es para uso > exclusivo de la persona o entidad de destino. Si no es usted. el > destinatario indicado, queda notificado de que la lectura, utilización, > divulgación y/o copia sin autorización puede estar prohibida en virtud > de la legislación vigente. Si ha recibido este mensaje por error, le > rogamos que nos lo comunique inmediatamente por esta misma vía y proceda > a su destrucción. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual or > entity named above. If the reader of this message is not the intended > recipient, you are hereby notified that any dissemination, distribution > or copying of this communication is strictly prohibited. If you have > received this transmission in error, do not read it. Please immediately > reply to the sender that you have received this communication in error > and then delete it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > destinatário, pode conter informação privilegiada ou confidencial e é > para uso exclusivo da pessoa ou entidade de destino. Se não é vossa > senhoria o destinatário indicado, fica notificado de que a leitura, > utilização, divulgação e/ou cópia sem autorização pode estar proibida em > virtude da legislação vigente. Se recebeu esta mensagem por erro, > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > proceda a sua destruição > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > From nobody Fri Oct 2 08:28:24 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18E571B2C21 for ; Fri, 2 Oct 2015 08:28:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pm7OUpqASB1t for ; Fri, 2 Oct 2015 08:28:17 -0700 (PDT) Received: from smtpjc.telefonica.com (smtpjc.telefonica.com [81.47.204.76]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D10931B2C1C for ; Fri, 2 Oct 2015 08:28:15 -0700 (PDT) Received: from smtpjc.telefonica.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 19AFE2F023E; Fri, 2 Oct 2015 17:28:13 +0200 (CEST) Received: from ESTGVMSP108.EUROPE.telefonica.corp (unknown [10.92.4.9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtpjc.telefonica.com (Postfix) with ESMTPS id EFF972F0093; Fri, 2 Oct 2015 17:28:12 +0200 (CEST) Received: from emea01-db3-obe.outbound.protection.outlook.com (10.92.5.139) by tls.telefonica.com (10.93.6.52) with Microsoft SMTP Server (TLS) id 14.3.235.1; Fri, 2 Oct 2015 17:28:12 +0200 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) by DB4PR06MB0623.eurprd06.prod.outlook.com (10.161.13.141) with Microsoft SMTP Server (TLS) id 15.1.286.20; Fri, 2 Oct 2015 15:28:09 +0000 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) by DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) with mapi id 15.01.0286.019; Fri, 2 Oct 2015 15:28:09 +0000 From: DIEGO LOPEZ GARCIA To: Linda Dunbar Thread-Topic: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AdD8kJsQ5Rkc+aynSXudFPC41PBbhwACacoAAAag2WAAHIpJgA== Date: Fri, 2 Oct 2015 15:28:09 +0000 Message-ID: <09BA9738-1535-492D-8245-4FAFBA565F51@telefonica.com> References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <4A95BA014132FF49AE685FAB4B9F17F657D668FD@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D668FD@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [62.14.114.194] x-microsoft-exchange-diagnostics: 1; DB4PR06MB0623; 5:IzXvui92KRh9B98NYP+0eAmuGbs7X7U7MSjjELer9JOISajvhECoggf3AHyK7WBVVTpvfJL3WU6bHtIXzdaOwfQeY6+JYVu9QL4Gv2zF1NqH09/64gddEvVImzlxsjyyXXQwTesHk0SEF6x/m4LgIA==; 24:OPxjRTkjNgFP1V2/0ZJE0rGfoaPe1/IpSPfQdRnfr+Pp4KyPXGMeKt3I4OUV5+4i+uiuZmmrXRCMzLnkj6AZdWjJHilteNHv9aZFJ7CuGDE=; 20:e8S6Mxt8dyPrLjArbnAdStLp6ZHn+bBWVQauK09sxTmyeTXdqdEA91CXMPwdVuh0uvAJMieZuFV3G3zE7m2XPw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB4PR06MB0623; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(520078)(8121501046)(3002001); SRVR:DB4PR06MB0623; BCL:0; PCL:0; RULEID:; SRVR:DB4PR06MB0623; x-forefront-prvs: 0717E25089 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(24454002)(40134004)(252514010)(45984002)(377454003)(199003)(25724002)(189002)(164054003)(105586002)(122556002)(5001830100001)(106356001)(87936001)(5001960100002)(189998001)(110136002)(10400500002)(5002640100001)(66066001)(64706001)(11100500001)(5004730100002)(2900100001)(2950100001)(36756003)(5007970100001)(92566002)(19617315012)(40100003)(46102003)(82746002)(19580395003)(19580405001)(86362001)(76176999)(33656002)(5001860100001)(50986999)(83716003)(101416001)(16236675004)(54356999)(81156007)(97736004)(62966003)(77156002)(4001540100001)(68736005)(15975445007)(102836002)(77096005)(5008740100001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DB4PR06MB0623; H:DB4PR06MB0624.eurprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_09BA97381535492D82454FAFBA565F51telefonicacom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Oct 2015 15:28:09.6520 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR06MB0623 X-OriginatorOrg: telefonica.com X-TM-AS-MML: No Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Oct 2015 15:28:22 -0000 --_000_09BA97381535492D82454FAFBA565F51telefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RXhhY3RseSwgTGluZGEsIHRoYXQgd2FzIG15IHBvaW50OiB0aGVyZSBhcmUgc2V2ZXJhbCBjb25z dHJ1Y3RzIHRoYXQgY291bGQgcmVhc29uYWJseSBtYXAgYnV0IHRoYXQgbmVlZCB0byBiZSBldm9s dmVkIChvciBjYW4gZW5kIHVwIGJlaW5nIGNvbXBsZXRlbHkgbWlzYWxpZ25lZCkgYW5kIHRoYXTi gJlzIHdoeSBJIHdvdWxkIHJlZnJhaW4gZnJvbSBkb2luZyBhIHN0cm9uZyBjb21taXRtZW50IHRv IE9wZW5TdGFjaywgb3Igd2hhdGV2ZXIgb3RoZXIgcHJvamVjdCBvciBmb3JtYXQsIHVubGVzczoN Cg0KMSkgVGhlcmUgaXMgYSBjbGVhciwgZGlyZWN0IGFuZCAoYWxtb3N0KSBjb21wbGV0ZSBtYXBw aW5nLCBhbmQNCjIpIEl0IGlzIGNsZWFyIHdlIGFyZSBpbiB0aGUgcG9zaXRpb24gb2YgaW5mbHVl bmNlIGlzIHRvIGEgcmVhc29uYWJsZSBleHRlbnQgKGJlY2F1c2UgaXMgdXNlZCBpbiBhbm90aGVy IElFVEYgV0csIGZvciBleGFtcGxlKQ0KDQpCZSBnb29kZSwNCg0KT24gMiBPY3QgMjAxNSwgYXQg MDQ6MDggLCBMaW5kYSBEdW5iYXIgPGxpbmRhLmR1bmJhckBodWF3ZWkuY29tPG1haWx0bzpsaW5k YS5kdW5iYXJAaHVhd2VpLmNvbT4+IHdyb3RlOg0KDQpEaWVnbywNCg0KVGhhbmsgeW91IHZlcnkg bXVjaCBmb3IgZXhwcmVzc2luZyB0aGUgb3Bpbmlvbi4NCg0KVGhlIOKAnFBvbGljeSBDbGFzc2lm aWVy4oCdIG9mIHRoZSBPcGVuU3RhY2sgR3JvdXAgQmFzZWQgUG9saWN5IGNhbiBiZSBtYXBwZWQg dG8gdGhlIOKAnE9iamVjdOKAnSBpbiB0aGUgSTJOU0YgY2FwYWJpbGl0eSBsYXllciBydWxlIHN0 cnVjdHVyZSAoU3ViamVjdC1PYmplY3QtQWN0aW9uLUZ1bmN0aW9uKSwgd2hlcmUg4oCcT2JqZWN0 4oCdIHJlZmVycyB0byB0aGUgIE1hdGNoaW5nIHZhbHVlcyBiYXNlZCBvbiBjb250ZXh0LCBlLmcu IFN0YXRlLCBkaXJlY3Rpb24gb2YgdGhlIHRyYWZmaWMsIHRpbWUsIGdlby1sb2NhdGlvbiwgZXRj Li4NCg0KRm9yIHN1cmUsIHRoZSBjdXJyZW50IOKAnFBvbGljeSBDbGFzc2lmaWVy4oCdIGlzIG5v dCBjb21wcmVoZW5zaXZlIGVub3VnaCBmb3IgYWxsIHRoZSBjb250ZXh0dWFsIHZhbHVlcy9ldmVu dHMgdGhhdCBOU0ZzIGNhbiBjb21wYXJlLiAgTWF5YmUgSTJOU0YgY2FuIHVzZSBhIGRpZmZlcmVu dCB0ZXJtaW5vbG9neSB0byBhdm9pZCB0aGUgY29uZnVzaW9uIGluIHRoZSBpbmR1c3RyeSwgYXMg dGhlIE9wZW5TdGFjayBHcm91cCBCYXNlZCBQb2xpY3kgKG9yIFdpbmRvdyBHcm91cCBCYXNlZCBQ b2xpY3kpICBhcmUgbm90IGVub3VnaCB0byBkZXNjcmliZSBzZXJ2aWNlIGxheWVyIHNlY3VyaXR5 IHBvbGljaWVzIHRvIG5ldHdvcmtzLiAgRm9yIGV4YW1wbGUsICh0aGlua2luZyBsb3VkKSwgd2Ug Y2FuIHVzZSDigJxQb2xpY3kg4oCTIENvbnRleHTigJ0gaW5zdGVhZC4NCg0KTGluZGENCg0KRnJv bTogSTJuc2YgW21haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgRElF R08gTE9QRVogR0FSQ0lBDQpTZW50OiBUaHVyc2RheSwgT2N0b2JlciAwMSwgMjAxNSA1OjQxIFBN DQpUbzogTGluZGEgRHVuYmFyDQpDYzogaTJuc2ZAaWV0Zi5vcmc8bWFpbHRvOmkybnNmQGlldGYu b3JnPg0KU3ViamVjdDogUmU6IFtJMm5zZl0gV2hhdCBkbyB5b3UgcGVvcGxlIHRoaW5rIG9mIHVz aW5nIE9wZW5TdGFjaydzIEdyb3VwIEJhc2VkIFBvbGljeSB0byBkZXNjcmliZSBJMk5TRiBTZXJ2 aWNlIExheWVyIFJ1bGVzPw0KDQpIaSBMaW5kYSwNCg0KSSBhbSBub3QgY29tcGxldGVseSBzdXJl IHRoYXQgdGhlIGN1cnJlbnQgbmV0d29ya2luZyBtb2RlbCBvZiBPcGVuU3RhY2ssIHRoYXQgaXMg cmVmbGVjdGVkIGluIHRoZSBydWxlIHRhcmdldHMgKGVpdGhlciB0aGUgUFRHIGFuZCB0aGUgVGFy Z2V0IGl0c2VsZikgZG9lcyBjb3ZlciBhbGwgdGhlIHBvdGVudGlhbCBzZW1hbnRpY3MgZm9yIGdl bmVyYWwgc2VjdXJpdHkgZnVuY3Rpb25zLiBUaGUgc2FtZSBjb25jZXJuIGFwcGxpZXMgdG8gUG9s aWN5IENsYXNzaWZpZXIsIGFzIHRoZXkgc2VlbSB2ZXJ5IG11Y2ggYXNzb2NpYXRlZCB3aXRoIGEg cGFydGljdWxhciBpbXBsZW1lbnRhdGlvbiBtb2RlbCBhbmQsIHdoYXQgaXMgbW9yZSwgd2l0aCBh IGxpbWl0ZWQgbmV0d29yayBtb2RlbC4NCg0KQmUgZ29vZGUsDQoNCg0KT24gMSBPY3QgMjAxNSwg YXQgMjM6MzIgLCBMaW5kYSBEdW5iYXIgPGxpbmRhLmR1bmJhckBodWF3ZWkuY29tPG1haWx0bzps aW5kYS5kdW5iYXJAaHVhd2VpLmNvbT4+IHdyb3RlOg0KDQpJMk5TRiBwYXJ0aWNpcGFudHMsDQoN Cmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhpYS1pMm5zZi1jYXBhYmls aXR5LWludGVyZmFjZS1pbS8gc3BlY2lmaWVzIHRoZSBzdHJ1Y3R1cmUgZm9yIEkyTlNGIGNhcGFi aWxpdHkgbGF5ZXIgcnVsZXMuDQoNCkZvciB0aGUgSTJOU0Ygc2ltcGxlIHNlcnZpY2UgbGF5ZXIs IHdoYXQgZG8gcGVvcGxlIHRoaW5rIG9mIHVzaW5nIE9wZW5TdGFja+KAmXMgR3JvdXAgUG9saWN5 IHN0cnVjdHVyZSA/DQoNCklmIHVzaW5nIE9wZW5TdGFjayBHcm91cC1iYXNlZCBQb2xpY3kgKEdC UCkgc3RydWN0dXJlLCB0aGUgSTJOU0Ygc2ltcGxlIHNlcnZpY2UgbGF5ZXIgY2FuIGJlIGV4cHJl c3NlZCBhcw0K4oCiICAgICAgICBQb2xpY3kgVGFyZ2V0IEdyb3VwIChQVEcpLiBUaGlzIGlzIGEg Z3JvdXAgb2YgVGFyZ2V0cyB0byB3aGljaCBhIHRyYWZmaWMgcG9saWN5IGNhbiBiZSBhcHBsaWVk LiBBIFBURyBtYXkgYmUgbWFwcGVkIHRvIGEgTmV1dHJvbiBTdWJuZXQsIGEgY2xpZW50IHZpcnR1 YWwgU3VibmV0IChpLmUuIHdpdGggcHJpdmF0ZSBhZGRyZXNzIHByZWZpeCksIGEgc3VibmV0IHdp dGggcHVibGljIGFkZHJlc3MgZmFtaWxpZXMsIG9yIGFueSBjb21iaW5hdGlvbiBvZiB0aGVtIHdp dGggbG9naWNhbCBvcGVyYXRvcnMgKExvZ2ljYWwgQU5ELCBPUiwgb3IgTk9UKS4gQSBQVEcgcmVm ZXJlbmNlcyBvbmUgb3IgbW9yZSBQb2xpY3kgUnVsZSBTZXRzIHRoYXQgaXQgY29uc3VtZXMgb3Ig cHJvdmlkZXMuDQrigKIgICAgICAgIFRhcmdldC4gVGhpcyBpcyB1c2VkIGJ5IHRoZSBhcHBsaWNh dGlvbiBjbGllbnQgdG8gZXN0YWJsaXNoIGNvbW11bmljYXRpb25zIG92ZXIgdGhlIG5ldHdvcmsu IEEgVGFyZ2V0IGlzIG1hcHBlZCB0byBhIHNpbmdsZSBOZXV0cm9uIFBvcnQsIGEgcGh5c2ljYWwv bG9naWNhbCBpbmdyZXNzIHBvcnQsIG9yIGEgcGh5c2ljYWwvbG9naWNhbCBlZ3Jlc3MgcG9ydC4N CuKAoiAgICAgICAgUG9saWN5IFJ1bGUgU2V0LiBBIFBvbGljeSBSdWxlIFNldCBpcyB1c2VkIHRv IGRldGVybWluZSBob3cgdGhlIHRyYWZmaWMgYmV0d2VlbiBhIHBhaXIgb2YgVGFyZ2V0IEdyb3Vw cyBpcyB0byBiZSB0cmVhdGVkLiBBIFBvbGljeSBSdWxlIFNldCBjb25zaXN0cyBvZiBvbmUgb3Ig bW9yZSBQb2xpY3kgUnVsZXMuDQrigKIgICAgICAgIFBvbGljeSBSdWxlLiBBIFBvbGljeSBSdWxl IGNvbnNpc3RzIG9mIGEgVHJhZmZpYyBDbGFzc2lmaWVyIGFuZCBhIHNldCBvZiBBY3Rpb25zIHRv IGJlIGFwcGxpZWQgdG8gdGhlIHRyYWZmaWMuDQrigKIgICAgICAgIFBvbGljeSBDbGFzc2lmaWVy LiBBIHRyYWZmaWMgY2xhc3NpZmllciBkZXNjcmliZXMgdGhlIHRyYWZmaWMgdG8gd2hpY2ggYSBQ b2xpY3kgUnVsZSBpcyB0byBiZSBhcHBsaWVkLiBJdCBpcyBleHByZXNzZWQgYXMgYSBkaXJlY3Rp b24sIGEgbGlzdCBvZiBMNCBwb3J0cywgdGltZSByYW5nZSwgYW5kIGEgcHJvdG9jb2wuDQrigKIg ICAgICAgIFBvbGljeSBBY3Rpb24uIFRoaXMgaXMgdGhlIGFjdGlvbiBhcHBsaWVkIHRvIHRoZSB0 cmFmZmljIHRoYXQgbWF0Y2hlcyB0aGUgY2xhc3NpZmllci4gQW4gYWN0aW9uIG1heSBiZSBhIHNp bXBsZSBBQ0wgYWN0aW9uIChpLmUuIGFsbG93LCBkZW55LCBtaXJyb3JpbmcpLCBhcHBseWluZyBh IHdlbGwga25vd24gc3RhdGlzdGljcyBmdW5jdGlvbnMgKGUuZy4gWCBtaW51dGVzIGNvdW50LCBZ IGhvdXJzIGNvdXJ0KSwgYXBwbHlpbmcgY2xpZW50IHNwZWNpZmllZCBmdW5jdGlvbnMgKHdpdGgg VVJMIHByb3ZpZGVkKSwgb3IgbWF5IHJlZmVyIHRvIGFuIG9yZGVyZWQgc2VxdWVuY2Ugb2YgZnVu Y3Rpb25zIChpLmUuLCBhIHNlcnZpY2UgY2hhaW4pLg0KDQpJZiB5b3UgaGF2ZSBjb25jZXJuIG9m IHVzaW5nIE9wZW5TdGFjayBHcm91cCBCYXNlZCBQb2xpY2llcywgcGxlYXNlIGxldCB0aGUgZ3Jv dXAga25vdy4NCg0KVGhhbmtzLCBMaW5kYQ0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCkkybnNmIG1haWxpbmcgbGlzdA0KSTJuc2ZAaWV0Zi5vcmc8bWFp bHRvOkkybnNmQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9pMm5zZg0KDQotLQ0KIkVzdGEgdmV6IG5vIGZhbGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyIN Cg0KRHIgRGllZ28gUi4gTG9wZXoNClRlbGVmb25pY2EgSStEDQpodHRwOi8vcGVvcGxlLnRpZC5l cy9kaWVnby5sb3Blei8NCg0KZS1tYWlsOiBkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPG1h aWx0bzpkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPg0KVGVsOiAgICArMzQgOTEzIDEyOSAw NDENCk1vYmlsZTogKzM0IDY4MiAwNTEgMDkxDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KRXN0ZSBtZW5z YWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5h dGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRl bmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUg ZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEg bm90aWZpY2FkbyBkZSBxdWUgbGEgbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24g eS9vIGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0 dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2Fq ZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVu dGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uDQoNClRo ZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJpdmlsZWdl ZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRoZSB1c2Ug b2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9m IHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJl Ynkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwgZGlzdHJpYnV0aW9uIG9yIGNvcHlp bmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBo YXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4g UGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNl aXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Lg0KDQpF c3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBz ZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBv dSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlk YWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlv IGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGEgbGVpdHVyYSwgdXRpbGl6YcOnw6Nv LCBkaXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBw cm9pYmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVz dGEgbWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1l ZGlhdGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Oj bw0KDQotLQ0KIkVzdGEgdmV6IG5vIGZhbGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyINCg0KRHIg RGllZ28gUi4gTG9wZXoNClRlbGVmb25pY2EgSStEDQpodHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVn by5sb3Blei8NCg0KZS1tYWlsOiBkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tDQpUZWw6ICAg ICszNCA5MTMgMTI5IDA0MQ0KTW9iaWxlOiArMzQgNjgyIDA1MSAwOTENCi0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KDQpFc3RlIG1lbnNhamUgeSBzdXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNsdXNpdmFtZW50 ZSBhIHN1IGRlc3RpbmF0YXJpbywgcHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7NuIHByaXZpbGVn aWFkYSBvIGNvbmZpZGVuY2lhbCB5IGVzIHBhcmEgdXNvIGV4Y2x1c2l2byBkZSBsYSBwZXJzb25h IG8gZW50aWRhZCBkZSBkZXN0aW5vLiBTaSBubyBlcyB1c3RlZC4gZWwgZGVzdGluYXRhcmlvIGlu ZGljYWRvLCBxdWVkYSBub3RpZmljYWRvIGRlIHF1ZSBsYSBsZWN0dXJhLCB1dGlsaXphY2nDs24s IGRpdnVsZ2FjacOzbiB5L28gY29waWEgc2luIGF1dG9yaXphY2nDs24gcHVlZGUgZXN0YXIgcHJv aGliaWRhIGVuIHZpcnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kgaGEgcmVjaWJp ZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJvciwgbGUgcm9nYW1vcyBxdWUgbm9zIGxvIGNvbXVuaXF1 ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBhIHN1IGRlc3Ry dWNjacOzbi4NCg0KVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlzc2lv biBpcyBwcml2aWxlZ2VkIGFuZCBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgb25s eSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQgYWJvdmUuIElm IHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9uLCBkaXN0cmli dXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0bHkgcHJvaGli aXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFuc21pc3Npb24gaW4gZXJyb3IsIGRv IG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVwbHkgdG8gdGhlIHNlbmRlciB0aGF0 IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlvbiBpbiBlcnJvciBhbmQgdGhlbiBk ZWxldGUgaXQuDQoNCkVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4Y2x1 c2l2YW1lbnRlIGFvIHNldSBkZXN0aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZvcm1hw6fDo28g cHJpdmlsZWdpYWRhIG91IGNvbmZpZGVuY2lhbCBlIMOpIHBhcmEgdXNvIGV4Y2x1c2l2byBkYSBw ZXNzb2Egb3UgZW50aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYSBzZW5ob3JpYSBv IGRlc3RpbmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUgYSBsZWl0dXJh LCB1dGlsaXphw6fDo28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8Oj byBwb2RlIGVzdGFyIHByb2liaWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2VudGUu IFNlIHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBwb3IgZXJybywgcm9nYW1vcy1saGUgcXVlIG5vcyBv IGNvbXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZpYSBlIHByb2NlZGEgYSBz dWEgZGVzdHJ1acOnw6NvDQo= --_000_09BA97381535492D82454FAFBA565F51telefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KRXhhY3RseSwgTGluZGEsIHRoYXQg d2FzIG15IHBvaW50OiB0aGVyZSBhcmUgc2V2ZXJhbCBjb25zdHJ1Y3RzIHRoYXQgY291bGQgcmVh c29uYWJseSBtYXAgYnV0IHRoYXQgbmVlZCB0byBiZSBldm9sdmVkIChvciBjYW4gZW5kIHVwIGJl aW5nIGNvbXBsZXRlbHkgbWlzYWxpZ25lZCkgYW5kIHRoYXTigJlzIHdoeSBJIHdvdWxkIHJlZnJh aW4gZnJvbSBkb2luZyBhIHN0cm9uZyBjb21taXRtZW50IHRvIE9wZW5TdGFjaywgb3Igd2hhdGV2 ZXIgb3RoZXIgcHJvamVjdA0KIG9yIGZvcm1hdCwgdW5sZXNzOg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+MSkgVGhlcmUgaXMgYSBjbGVhciwgZGly ZWN0IGFuZCAoYWxtb3N0KSBjb21wbGV0ZSBtYXBwaW5nLCBhbmQ8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+MikgSXQgaXMgY2xlYXIgd2UgYXJlIGluIHRoZSBwb3NpdGlvbiBvZiBpbmZsdWVuY2UgaXMg dG8gYSByZWFzb25hYmxlIGV4dGVudCAoYmVjYXVzZSBpcyB1c2VkIGluIGFub3RoZXIgSUVURiBX RywgZm9yIGV4YW1wbGUpPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj5CZSBnb29kZSw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPGRpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iIj5PbiAyIE9jdCAyMDE1LCBhdCAwNDowOCAsIExpbmRhIER1bmJhciAmbHQ7PGEgaHJlZj0i bWFpbHRvOmxpbmRhLmR1bmJhckBodWF3ZWkuY29tIiBjbGFzcz0iIj5saW5kYS5kdW5iYXJAaHVh d2VpLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5n ZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0 eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7IGZvbnQtZmFtaWx5OiBMdWNpZGFHcmFuZGU7IGZvbnQt c2l6ZTogMTFweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5v cm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxk aXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250 LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHls ZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29s b3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj5EaWVnbyw8bzpwIGNsYXNzPSIiPjwvbzpw Pjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJy aSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj4mbmJzcDs8 L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQt c2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmks IHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+VGhhbmsgeW91 IHZlcnkgbXVjaCBmb3IgZXhwcmVzc2luZyB0aGUgb3Bpbmlvbi48bzpwIGNsYXNzPSIiPjwvbzpw Pjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJy aSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj4mbmJzcDs8 L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQt c2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmks IHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+VGhlIOKAnFBv bGljeSBDbGFzc2lmaWVy4oCdIG9mIHRoZSBPcGVuU3RhY2sgR3JvdXAgQmFzZWQgUG9saWN5IGNh biBiZSBtYXBwZWQgdG8gdGhlIOKAnE9iamVjdOKAnSBpbiB0aGUgSTJOU0YgY2FwYWJpbGl0eSBs YXllciBydWxlIHN0cnVjdHVyZSAoU3ViamVjdC1PYmplY3QtQWN0aW9uLUZ1bmN0aW9uKSwNCiB3 aGVyZSDigJxPYmplY3TigJ0gcmVmZXJzIHRvIHRoZSAmbmJzcDtNYXRjaGluZyB2YWx1ZXMgYmFz ZWQgb24gY29udGV4dCwgZS5nLiBTdGF0ZSwgZGlyZWN0aW9uIG9mIHRoZSB0cmFmZmljLCB0aW1l LCBnZW8tbG9jYXRpb24sIGV0Yy4uPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNv bG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+Jm5ic3A7PC9zcGFuPjwvZGl2Pg0KPGRp diBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQt ZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxl PSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xv cjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPkZvciBzdXJlLCB0aGUgY3VycmVudCDigJxQ b2xpY3kgQ2xhc3NpZmllcuKAnSBpcyBub3QgY29tcHJlaGVuc2l2ZSBlbm91Z2ggZm9yIGFsbCB0 aGUgY29udGV4dHVhbCB2YWx1ZXMvZXZlbnRzIHRoYXQgTlNGcyBjYW4gY29tcGFyZS4gJm5ic3A7 TWF5YmUgSTJOU0YgY2FuIHVzZSBhIGRpZmZlcmVudA0KIHRlcm1pbm9sb2d5IHRvIGF2b2lkIHRo ZSBjb25mdXNpb24gaW4gdGhlIGluZHVzdHJ5LCBhcyB0aGUgT3BlblN0YWNrIEdyb3VwIEJhc2Vk IFBvbGljeSAob3IgV2luZG93IEdyb3VwIEJhc2VkIFBvbGljeSkgJm5ic3A7YXJlIG5vdCBlbm91 Z2ggdG8gZGVzY3JpYmUgc2VydmljZSBsYXllciBzZWN1cml0eSBwb2xpY2llcyB0byBuZXR3b3Jr cy4gJm5ic3A7Rm9yIGV4YW1wbGUsICh0aGlua2luZyBsb3VkKSwgd2UgY2FuIHVzZSDigJxQb2xp Y3kg4oCTIENvbnRleHTigJ0gaW5zdGVhZC48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj4mbmJzcDs8L3NwYW4+PC9kaXY+ DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsg Zm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+TGluZGE8bzpwIGNsYXNzPSIiPjwv bzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsg Zm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2Fs aWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj4mbmJz cDs8L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iYm9yZGVyLXN0eWxl OiBzb2xpZCBub25lIG5vbmU7IGJvcmRlci10b3AtY29sb3I6IHJnYigxODEsIDE5NiwgMjIzKTsg Ym9yZGVyLXRvcC13aWR0aDogMXB0OyBwYWRkaW5nOiAzcHQgMGluIDBpbjsiIGNsYXNzPSIiPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZv bnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxiIGNsYXNz PSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNh bnMtc2VyaWY7IiBjbGFzcz0iIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTogMTBwdDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPjxzcGFu IGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5JMm5zZiBbPGEgaHJl Zj0ibWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmciIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0 ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPm1haWx0bzppMm5zZi1ib3VuY2Vz QGlldGYub3JnPC9hPl08c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PGIgY2xhc3M9IiI+T24NCiBCZWhhbGYgT2Y8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPkRJRUdPIExPUEVaIEdBUkNJQTxiciBjbGFzcz0i Ij4NCjxiIGNsYXNzPSIiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj5UaHVyc2RheSwgT2N0b2JlciAwMSwgMjAxNSA1OjQxIFBNPGJyIGNs YXNzPSIiPg0KPGIgY2xhc3M9IiI+VG86PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj5MaW5kYSBEdW5iYXI8YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0i Ij5DYzo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PjxhIGhyZWY9Im1haWx0bzppMm5zZkBpZXRmLm9yZyIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRl eHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+aTJuc2ZAaWV0Zi5vcmc8L2E+PGJy IGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlJlOiBbSTJuc2ZdIFdoYXQgZG8geW91IHBlb3Bs ZSB0aGluayBvZiB1c2luZyBPcGVuU3RhY2sncyBHcm91cCBCYXNlZCBQb2xpY3kgdG8gZGVzY3Jp YmUgSTJOU0YgU2VydmljZSBMYXllciBSdWxlcz88bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAx cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJp ZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWls eTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQpIaSBMaW5kYSw8c3BhbiBj bGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48 L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4n LCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFw dDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlm OyIgY2xhc3M9IiI+DQpJIGFtIG5vdCBjb21wbGV0ZWx5IHN1cmUgdGhhdCB0aGUgY3VycmVudCBu ZXR3b3JraW5nIG1vZGVsIG9mIE9wZW5TdGFjaywgdGhhdCBpcyByZWZsZWN0ZWQgaW4gdGhlIHJ1 bGUgdGFyZ2V0cyAoZWl0aGVyIHRoZSBQVEcgYW5kIHRoZSBUYXJnZXQgaXRzZWxmKSBkb2VzIGNv dmVyIGFsbCB0aGUgcG90ZW50aWFsIHNlbWFudGljcyBmb3IgZ2VuZXJhbCBzZWN1cml0eSBmdW5j dGlvbnMuIFRoZSBzYW1lIGNvbmNlcm4gYXBwbGllcyB0byBQb2xpY3kgQ2xhc3NpZmllciwNCiBh cyB0aGV5IHNlZW0gdmVyeSBtdWNoIGFzc29jaWF0ZWQgd2l0aCBhIHBhcnRpY3VsYXIgaW1wbGVt ZW50YXRpb24gbW9kZWwgYW5kLCB3aGF0IGlzIG1vcmUsIHdpdGggYSBsaW1pdGVkIG5ldHdvcmsg bW9kZWwuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4N CjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBm b250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNs YXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBz dHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFt aWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCkJlIGdvb2RlLDxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJz cDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVz IE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpw PjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDogNXB0OyBtYXJnaW4tYm90dG9t OiA1cHQ7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcg Um9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KT24gMSBPY3QgMjAxNSwgYXQgMjM6MzIgLCBMaW5k YSBEdW5iYXIgJmx0OzxhIGhyZWY9Im1haWx0bzpsaW5kYS5kdW5iYXJAaHVhd2VpLmNvbSIgc3R5 bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+ bGluZGEuZHVuYmFyQGh1YXdlaS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwIGNsYXNzPSIiPjwvbzpw PjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNs YXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBm b250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxp YnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+STJOU0YgcGFydGljaXBhbnRzLDxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpw Pjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVz IE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPiZuYnNwOzxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZv bnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIg Y2xhc3M9IiI+PGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQt eGlhLWkybnNmLWNhcGFiaWxpdHktaW50ZXJmYWNlLWltLyIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7 IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImNvbG9y OiBwdXJwbGU7IiBjbGFzcz0iIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFm dC14aWEtaTJuc2YtY2FwYWJpbGl0eS1pbnRlcmZhY2UtaW0vPC9zcGFuPjwvYT48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+c3BlY2lmaWVzDQogdGhlIHN0 cnVjdHVyZSBmb3IgSTJOU0YgY2FwYWJpbGl0eSBsYXllciBydWxlcy48bzpwIGNsYXNzPSIiPjwv bzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1Rp bWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPiZuYnNw OzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFu IHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyIgY2xhc3M9IiI+Rm9yIHRoZSBJMk5TRiBzaW1wbGUgc2VydmljZSBsYXllciwgd2hhdCBkbyBw ZW9wbGUgdGhpbmsgb2YgdXNpbmcgT3BlblN0YWNr4oCZcyBHcm91cCBQb2xpY3kgc3RydWN0dXJl ID88bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7 IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBD YWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+SWYgdXNpbmcgT3BlblN0YWNrIEdyb3VwLWJh c2VkIFBvbGljeSAoR0JQKSBzdHJ1Y3R1cmUsIHRoZSBJMk5TRiBzaW1wbGUgc2VydmljZSBsYXll ciBjYW4gYmUgZXhwcmVzc2VkIGFzPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8 L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OiAwLjc1aW47IiBjbGFzcz0iIj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZh bWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyB0ZXh0LWluZGVudDogLTAuMjVpbjsiIGNs YXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IFN5bWJv bDsiIGNsYXNzPSIiPsK3PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDdwdDsiIGNsYXNz PSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFz cz0iIj5Qb2xpY3kgVGFyZ2V0IEdyb3VwDQogKFBURykuIFRoaXMgaXMgYSBncm91cCBvZiBUYXJn ZXRzIHRvIHdoaWNoIGEgdHJhZmZpYyBwb2xpY3kgY2FuIGJlIGFwcGxpZWQuIEEgUFRHIG1heSBi ZSBtYXBwZWQgdG8gYSBOZXV0cm9uIFN1Ym5ldCwgYSBjbGllbnQgdmlydHVhbCBTdWJuZXQgKGku ZS4gd2l0aCBwcml2YXRlIGFkZHJlc3MgcHJlZml4KSwgYSBzdWJuZXQgd2l0aCBwdWJsaWMgYWRk cmVzcyBmYW1pbGllcywgb3IgYW55IGNvbWJpbmF0aW9uIG9mIHRoZW0gd2l0aCBsb2dpY2FsDQog b3BlcmF0b3JzIChMb2dpY2FsIEFORCwgT1IsIG9yIE5PVCkuIEEgUFRHIHJlZmVyZW5jZXMgb25l IG9yIG1vcmUgUG9saWN5IFJ1bGUgU2V0cyB0aGF0IGl0IGNvbnN1bWVzIG9yIHByb3ZpZGVzLjxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJn aW4tbGVmdDogMC43NWluOyIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4n LCBzZXJpZjsgdGV4dC1pbmRlbnQ6IC0wLjI1aW47IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJm b250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBTeW1ib2w7IiBjbGFzcz0iIj7Ctzwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOiA3cHQ7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+VGFyZ2V0LiBUaGlzIGlzIHVz ZWQNCiBieSB0aGUgYXBwbGljYXRpb24gY2xpZW50IHRvIGVzdGFibGlzaCBjb21tdW5pY2F0aW9u cyBvdmVyIHRoZSBuZXR3b3JrLiBBIFRhcmdldCBpcyBtYXBwZWQgdG8gYSBzaW5nbGUgTmV1dHJv biBQb3J0LCBhIHBoeXNpY2FsL2xvZ2ljYWwgaW5ncmVzcyBwb3J0LCBvciBhIHBoeXNpY2FsL2xv Z2ljYWwgZWdyZXNzIHBvcnQuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8L2Rp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OiAwLjc1aW47IiBjbGFzcz0iIj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWls eTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyB0ZXh0LWluZGVudDogLTAuMjVpbjsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IFN5bWJvbDsi IGNsYXNzPSIiPsK3PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDdwdDsiIGNsYXNzPSIi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0i Ij5Qb2xpY3kgUnVsZSBTZXQuDQogQSBQb2xpY3kgUnVsZSBTZXQgaXMgdXNlZCB0byBkZXRlcm1p bmUgaG93IHRoZSB0cmFmZmljIGJldHdlZW4gYSBwYWlyIG9mIFRhcmdldCBHcm91cHMgaXMgdG8g YmUgdHJlYXRlZC4gQSBQb2xpY3kgUnVsZSBTZXQgY29uc2lzdHMgb2Ygb25lIG9yIG1vcmUgUG9s aWN5IFJ1bGVzLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW4tbGVmdDogMC43NWluOyIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1l cyBOZXcgUm9tYW4nLCBzZXJpZjsgdGV4dC1pbmRlbnQ6IC0wLjI1aW47IiBjbGFzcz0iIj4NCjxz cGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBTeW1ib2w7IiBjbGFzcz0i Ij7Ctzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiA3cHQ7IiBjbGFzcz0iIj4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+UG9saWN5 IFJ1bGUuIEEgUG9saWN5DQogUnVsZSBjb25zaXN0cyBvZiBhIFRyYWZmaWMgQ2xhc3NpZmllciBh bmQgYSBzZXQgb2YgQWN0aW9ucyB0byBiZSBhcHBsaWVkIHRvIHRoZSB0cmFmZmljLjxvOnAgY2xh c3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVm dDogMC43NWluOyIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAx cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJp ZjsgdGV4dC1pbmRlbnQ6IC0wLjI1aW47IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBTeW1ib2w7IiBjbGFzcz0iIj7Ctzwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOiA3cHQ7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5 OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+UG9saWN5IENsYXNzaWZpZXIuDQogQSB0 cmFmZmljIGNsYXNzaWZpZXIgZGVzY3JpYmVzIHRoZSB0cmFmZmljIHRvIHdoaWNoIGEgUG9saWN5 IFJ1bGUgaXMgdG8gYmUgYXBwbGllZC4gSXQgaXMgZXhwcmVzc2VkIGFzIGEgZGlyZWN0aW9uLCBh IGxpc3Qgb2YgTDQgcG9ydHMsIHRpbWUgcmFuZ2UsIGFuZCBhIHByb3RvY29sLjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDog MC43NWluOyIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsg dGV4dC1pbmRlbnQ6IC0wLjI1aW47IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBTeW1ib2w7IiBjbGFzcz0iIj7Ctzwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOiA3cHQ7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBD YWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+UG9saWN5IEFjdGlvbi4gVGhpcw0KIGlzIHRo ZSBhY3Rpb24gYXBwbGllZCB0byB0aGUgdHJhZmZpYyB0aGF0IG1hdGNoZXMgdGhlIGNsYXNzaWZp ZXIuIEFuIGFjdGlvbiBtYXkgYmUgYSBzaW1wbGUgQUNMIGFjdGlvbiAoaS5lLiBhbGxvdywgZGVu eSwgbWlycm9yaW5nKSwgYXBwbHlpbmcgYSB3ZWxsIGtub3duIHN0YXRpc3RpY3MgZnVuY3Rpb25z IChlLmcuIFggbWludXRlcyBjb3VudCwgWSBob3VycyBjb3VydCksIGFwcGx5aW5nIGNsaWVudCBz cGVjaWZpZWQgZnVuY3Rpb25zICh3aXRoDQogVVJMIHByb3ZpZGVkKSwgb3IgbWF5IHJlZmVyIHRv IGFuIG9yZGVyZWQgc2VxdWVuY2Ugb2YgZnVuY3Rpb25zIChpLmUuLCBhIHNlcnZpY2UgY2hhaW4p LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFu IHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyIgY2xhc3M9IiI+Jm5ic3A7PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsi IGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj5JZiB5b3UgaGF2ZSBjb25jZXJuIG9mIHVzaW5n IE9wZW5TdGFjayBHcm91cCBCYXNlZCBQb2xpY2llcywgcGxlYXNlIGxldCB0aGUgZ3JvdXAga25v dy48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7 IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBD YWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+VGhhbmtzLCBMaW5kYTxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwv c3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7 IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDYuNXB0OyBmb250LWZhbWlseTog THVjaWRhR3JhbmRlLCBzZXJpZjsiIGNsYXNzPSIiPl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0KSTJuc2YgbWFpbGluZyBsaXN0PGJy IGNsYXNzPSIiPg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpJMm5zZkBpZXRmLm9yZyIgc3R5bGU9 ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTogNi41cHQ7IGZvbnQtZmFtaWx5OiBMdWNpZGFHcmFuZGUsIHNl cmlmOyBjb2xvcjogcHVycGxlOyIgY2xhc3M9IiI+STJuc2ZAaWV0Zi5vcmc8L3NwYW4+PC9hPjxz cGFuIHN0eWxlPSJmb250LXNpemU6IDYuNXB0OyBmb250LWZhbWlseTogTHVjaWRhR3JhbmRlLCBz ZXJpZjsiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvc3Bhbj48YSBocmVmPSJodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsg dGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOiA2LjVwdDsgZm9udC1mYW1pbHk6IEx1Y2lkYUdyYW5kZSwgc2VyaWY7IGNvbG9yOiBwdXJw bGU7IiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNm PC9zcGFuPjwvYT48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9 IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQt c2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9IiIgY2xhc3M9IiI+LS08YnIgY2xhc3M9IiI+DQomcXVvdDtFc3Rh IHZleiBubyBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVybm8mcXVvdDs8YnIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQpEciBEaWVnbyBSLiBMb3BlejxiciBjbGFzcz0iIj4NClRlbGVmb25pY2Eg SSYjNDM7RDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHA6Ly9wZW9wbGUudGlkLmVzL2RpZWdv LmxvcGV6LyIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5l OyIgY2xhc3M9IiI+aHR0cDovL3Blb3BsZS50aWQuZXMvZGllZ28ubG9wZXovPC9hPjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCmUtbWFpbDo8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmRpZWdvLnIubG9wZXpAdGVsZWZv bmljYS5jb20iIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGlu ZTsiIGNsYXNzPSIiPmRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb208L2E+PGJyIGNsYXNzPSIi Pg0KVGVsOiAmbmJzcDsgJm5ic3A7JiM0MzszNCA5MTMgMTI5IDA0MTxiciBjbGFzcz0iIj4NCk1v YmlsZTogJiM0MzszNCA2ODIgMDUxIDA5MTxiciBjbGFzcz0iIj4NCi0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS08bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6 ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIi Pg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1m YW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0i Ij4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRl ciIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250 LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyB0ZXh0LWFsaWduOiBjZW50ZXI7Ij4N CjxociBzaXplPSIzIiB3aWR0aD0iMTAwJSIgYWxpZ249ImNlbnRlciIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOiA3LjVwdDsgZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlm OyBjb2xvcjogZ3JheTsiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCkVzdGUgbWVuc2FqZSB5IHN1 cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlvLCBw dWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFsIHkg ZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRpZGFkIGRlIGRlc3Rpbm8u IFNpIG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNh ZG8gZGUgcXVlIGxhDQogbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9vIGNv cGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQgZGUg bGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBwb3Ig ZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUgcG9y IGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uPGJyIGNsYXNzPSIi Pg0KPGJyIGNsYXNzPSIiPg0KVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRyYW5z bWlzc2lvbiBpcyBwcml2aWxlZ2VkIGFuZCBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5k ZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQgYWJv dmUuIElmIHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVj aXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9uLA0K IGRpc3RyaWJ1dGlvbiBvciBjb3B5aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlvbiBpcyBzdHJpY3Rs eSBwcm9oaWJpdGVkLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIHRyYW5zbWlzc2lvbiBpbiBl cnJvciwgZG8gbm90IHJlYWQgaXQuIFBsZWFzZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2Vu ZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFu ZCB0aGVuIGRlbGV0ZSBpdC48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpFc3RhIG1lbnNh Z2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUgZGVzdGlu YXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25maWRl bmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRlIGRl c3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGluZGljYWRv LCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGENCiBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRpdnVs Z2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8OjbyBwb2RlIGVzdGFyIHByb2liaWRh IGVtIHZpcnR1ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2VudGUuIFNlIHJlY2ViZXUgZXN0YSBtZW5z YWdlbSBwb3IgZXJybywgcm9nYW1vcy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1l bnRlIHBvciBlc3RhIG1lc21hIHZpYSBlIHByb2NlZGEgYSBzdWEgZGVzdHJ1acOnw6NvPC9zcGFu PjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNz PSIiPg0KPGRpdiBhcHBsZS1jb250ZW50LWVkaXRlZD0idHJ1ZSIgY2xhc3M9IiI+DQo8ZGl2IHN0 eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5z OiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13 b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXIt d2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCi0tPGJyIGNsYXNzPSIiPg0KJnF1b3Q7RXN0YSB2ZXog bm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5vJnF1b3Q7PGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KRHIgRGllZ28gUi4gTG9wZXo8YnIgY2xhc3M9IiI+DQpUZWxlZm9uaWNhIEkmIzQz O0Q8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVnby5sb3Bl ei8iIGNsYXNzPSIiPmh0dHA6Ly9wZW9wbGUudGlkLmVzL2RpZWdvLmxvcGV6LzwvYT48YnIgY2xh c3M9IiI+DQo8YnIgY2xhc3M9IiI+DQplLW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5j b208YnIgY2xhc3M9IiI+DQpUZWw6ICZuYnNwOyAmbmJzcDsmIzQzOzM0IDkxMyAxMjkgMDQxPGJy IGNsYXNzPSIiPg0KTW9iaWxlOiAmIzQzOzM0IDY4MiAwNTEgMDkxPGJyIGNsYXNzPSIiPg0KLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTwvZGl2Pg0KPC9kaXY+DQo8YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxicj4NCjxocj4NCjxmb250IGZhY2U9IkFyaWFsIiBjb2xvcj0iR3JheSIg c2l6ZT0iMSI+PGJyPg0KRXN0ZSBtZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhj bHVzaXZhbWVudGUgYSBzdSBkZXN0aW5hdGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOz biBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUg bGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3Rp bmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90aWZpY2FkbyBkZSBxdWUgbGENCiBsZWN0dXJhLCB1 dGlsaXphY2nDs24sIGRpdnVsZ2FjacOzbiB5L28gY29waWEgc2luIGF1dG9yaXphY2nDs24gcHVl ZGUgZXN0YXIgcHJvaGliaWRhIGVuIHZpcnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4g U2kgaGEgcmVjaWJpZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJvciwgbGUgcm9nYW1vcyBxdWUgbm9z IGxvIGNvbXVuaXF1ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2Vk YSBhIHN1IGRlc3RydWNjacOzbi48YnI+DQo8YnI+DQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVk IGluIHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZv cm1hdGlvbiBpbnRlbmRlZCBvbmx5IGZvciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlkdWFsIG9yIGVu dGl0eSBuYW1lZCBhYm92ZS4gSWYgdGhlIHJlYWRlciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRo ZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRp c3NlbWluYXRpb24sDQogZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0 aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJh bnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0ZWx5IHJl cGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRp b24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Ljxicj4NCjxicj4NCkVzdGEgbWVuc2FnZW0g ZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4Y2x1c2l2YW1lbnRlIGFvIHNldSBkZXN0aW5hdMOh cmlvLCBwb2RlIGNvbnRlciBpbmZvcm1hw6fDo28gcHJpdmlsZWdpYWRhIG91IGNvbmZpZGVuY2lh bCBlIMOpIHBhcmEgdXNvIGV4Y2x1c2l2byBkYSBwZXNzb2Egb3UgZW50aWRhZGUgZGUgZGVzdGlu by4gU2UgbsOjbyDDqSB2b3NzYSBzZW5ob3JpYSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNhZG8sIGZp Y2Egbm90aWZpY2FkbyBkZSBxdWUgYQ0KIGxlaXR1cmEsIHV0aWxpemHDp8OjbywgZGl2dWxnYcOn w6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6YcOnw6NvIHBvZGUgZXN0YXIgcHJvaWJpZGEgZW0g dmlydHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1lbnNhZ2Vt IHBvciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29tdW5pcXVlIGltZWRpYXRhbWVudGUg cG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJvY2VkYSBhIHN1YSBkZXN0cnVpw6fDo288YnI+DQo8L2Zv bnQ+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_09BA97381535492D82454FAFBA565F51telefonicacom_-- From nobody Mon Oct 5 14:46:13 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E66ED1A001D for ; Mon, 5 Oct 2015 14:46:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id opt9-_Gboxya for ; Mon, 5 Oct 2015 14:46:06 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 058861A0019 for ; Mon, 5 Oct 2015 14:46:02 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCC41019; Mon, 05 Oct 2015 21:46:00 +0000 (GMT) Received: from DFWEML703-CHM.china.huawei.com (10.193.5.130) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 5 Oct 2015 22:45:59 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml703-chm ([10.193.5.130]) with mapi id 14.03.0235.001; Mon, 5 Oct 2015 14:45:53 -0700 From: Linda Dunbar To: Loa Andersson , DIEGO LOPEZ GARCIA Thread-Topic: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AdD8kJsQ5Rkc+aynSXudFPC41PBbhwACacoAAByF3gAAqS/JgA== Date: Mon, 5 Oct 2015 21:45:53 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> In-Reply-To: <560E137C.7030707@pi.nu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.190] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D676D7dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2015 21:46:13 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D676D7dfweml701chm_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Thanks to Loa and Diego for the comments. Here are some pros and cons of using Open Stack Group Based Policy: Pros: * There are running codes (open sourced code) Cons: * The OpenStack's group based policy is very much Neutron port orient= ed. It is not straight forward for an environment that is not based on Open= Stack Neutron. * They are not designed for expressing rules to Flow-based NSF on how= to treat client/applications traffic. The current set is not complete, a = lot more need to be added. * There are other "Group Based Policy", e.g. Window's Group Policy, w= hich are quite different from the OpenStack's Group Based Policy. * May cause confusion in industry if calling "Group Based Policy" for= I2NSF Service Layer However, the notation of Groups, Target, Context and action do cover what i= s needed for clients/applications to express the rules on how their flows c= an be treated by the Flow-Based NSFs in networks. And they can be mapped t= o the Capability layer's Subject-Object-Action-Function" paradigm. To avoid the confusion, it might be better to avoid using the term "Group b= ased policy" (but inherent their concept only). For example, "group" can be represented by "Composite Endpoints/Targets" or= Endpoint Container (if using SUPA language), where an "Endpoint" can be a = subnet, a set of hosts or applications, etc. * Composite Endpoint (CEP). Logical combination of endpoint descrip= tor IDs, where descriptor can be subnet, set of hosts, or applications. o Endpoint Descriptor (EPD). Each endpoint descriptor has a type and = value that are used to partially identify the endpoint. The type of the End= point Descriptor may be a base networking identifier, such as an IP address= , or a user-defined type. The value may be a single value, a range of value= s, or a group of values. * Target. This is used by the application client to establish communi= cations over the network. A Target is mapped to a physical/logical ingress = port, or a physical/logical egress port. * Policy Rule Set. A Policy Rule Set is used to determine how the tra= ffic between a pair of Target Groups is to be treated. A Policy Rule Set co= nsists of one or more Policy Rules. o Policy Rule. A Policy Rule consists of a Policy context and a set o= f Actions to be applied to the traffic. * Policy Context. Context that describes when a Policy Rule is to be = applied. It is expressed as a direction, a list of L4 ports, time range, an= d a protocol. * Policy Action. This is the action applied to the traffic that match= es the classifier. An action may be a simple ACL action (i.e. allow, deny, = mirroring), applying a well known statistics functions (e.g. X minutes coun= t, Y hours court), applying client specified functions (with URL provided),= or may refer to an ordered sequence of functions (i.e., a service chain). Comments are greatly appreciated. Linda -----Original Message----- From: Loa Andersson [mailto:loa@pi.nu] Sent: Friday, October 02, 2015 12:18 AM To: DIEGO LOPEZ GARCIA; Linda Dunbar Cc: i2nsf@ietf.org Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Ba= sed Policy to describe I2NSF Service Layer Rules? Linda and Diego, This is said by someone that is not familiar with Open Stack or the Group B= ased Policy. I'm somewhat on the same page as Diego, at least in the same book. If we want to use OpenStack's Group Based Policy to describe I2NSF Service= Layer Rules, the case for this has to be made much better. What are the pros and cons? Are there viable alternatives? /Loa On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: > Hi Linda, > > I am not completely sure that the current networking model of > OpenStack, that is reflected in the rule targets (either the PTG and > the Target > itself) does cover all the potential semantics for general security > functions. The same concern applies to Policy Classifier, as they seem > very much associated with a particular implementation model and, what > is more, with a limited network model. > > Be goode, > > >> On 1 Oct 2015, at 23:32 , Linda Dunbar > > wrote: >> >> I2NSF participants, >> https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-interface >> -im/specifies the structure for I2NSF capability layer rules. >> For the I2NSF simple service layer, what do people think of using >> OpenStack's Group Policy structure ? >> If using OpenStack Group-based Policy (GBP) structure, the I2NSF >> simple service layer can be expressed as =B7Policy Target Group (PTG). >> This is a group of Targets to which a traffic policy can be applied. >> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet >> (i.e. with private address prefix), a subnet with public address >> families, or any combination of them with logical operators (Logical >> AND, OR, or NOT). A PTG references one or more Policy Rule Sets that >> it consumes or provides. >> =B7Target. This is used by the application client to establish >> communications over the network. A Target is mapped to a single >> Neutron Port, a physical/logical ingress port, or a physical/logical >> egress port. >> =B7Policy Rule Set. A Policy Rule Set is used to determine how the >> traffic between a pair of Target Groups is to be treated. A Policy >> Rule Set consists of one or more Policy Rules. >> =B7Policy Rule. A Policy Rule consists of a Traffic Classifier and a >> set of Actions to be applied to the traffic. >> =B7Policy Classifier. A traffic classifier describes the traffic to >> which a Policy Rule is to be applied. It is expressed as a direction, >> a list of L4 ports, time range, and a protocol. >> =B7Policy Action. This is the action applied to the traffic that >> matches the classifier. An action may be a simple ACL action (i.e. >> allow, deny, mirroring), applying a well known statistics functions >> (e.g. X minutes count, Y hours court), applying client specified >> functions (with URL provided), or may refer to an ordered sequence of >> functions (i.e., a service chain). >> If you have concern of using OpenStack Group Based Policies, please >> let the group know. >> Thanks, Linda >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf > > -- > "Esta vez no fallaremos, Doctor Infierno" > > Dr Diego R. Lopez > Telefonica I+D > http://people.tid.es/diego.lopez/ > > e-mail: diego.r.lopez@telefonica.com > Tel: +34 913 129 041 > Mobile: +34 682 051 091 > ---------------------------------- > > > ---------------------------------------------------------------------- > -- > > Este mensaje y sus adjuntos se dirigen exclusivamente a su > destinatario, puede contener informaci=F3n privilegiada o confidencial y > es para uso exclusivo de la persona o entidad de destino. Si no es > usted. el destinatario indicado, queda notificado de que la lectura, > utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede estar > prohibida en virtud de la legislaci=F3n vigente. Si ha recibido este > mensaje por error, le rogamos que nos lo comunique inmediatamente por > esta misma v=EDa y proceda a su destrucci=F3n. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual > or entity named above. If the reader of this message is not the > intended recipient, you are hereby notified that any dissemination, > distribution or copying of this communication is strictly prohibited. > If you have received this transmission in error, do not read it. > Please immediately reply to the sender that you have received this > communication in error and then delete it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confidencial e= =E9 > para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa > senhoria o destinat=E1rio indicado, fica notificado de que a leitura, > utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode esta= r proibida > em virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro, > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > proceda a sua destrui=E7=E3o > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > --_000_4A95BA014132FF49AE685FAB4B9F17F657D676D7dfweml701chm_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Thanks to Loa and Diego for the comments.
 
Here are some pros and cons of using Open Stack Group Based Policy:
 
Pros:
  • There are running codes (open sourced code)
 
Cons:
  • The OpenStack's group based policy is very much Neutron port oriented. = It is not straight forward for an environment that is not based on OpenStac= k Neutron.
  • They are not designed for expressing rules to Flow-base= d NSF on how to treat client/applications traffic. The current set is not c= omplete,  a lot more need to be added.
  • There are other "= Group Based Policy", e.g. Window's Group Policy, which are quite diffe= rent from the OpenStack’s Group Based Policy.
  • May cause conf= usion in industry if calling “Group Based Policy” for I2NSF Ser= vice Layer
 
 
However, the notation of Groups, Target, Context and action do cover w= hat is needed for clients/applications to express the rules on how their fl= ows can be treated by the Flow-Based NSFs in networks. And they can be map= ped to the Capability layer’s Subject-Object-Action-Function” paradigm.
 
To avoid the confusion, it might be better to avoid using the term = 220;Group based policy” (but inherent their concept only).
 
For example, “group” can be represented by “Composit= e Endpoints/Targets” or Endpoint Container (if using SUPA language), = where an “Endpoint” can be a subnet, a set of hosts or applicat= ions, etc.
 
 
  • Composite Endpoint (CEP). = Logical combination of endpoint descriptor IDs, where descriptor can be su= bnet, set of hosts, or applications.
 
  • Endpoint Descriptor (EPD). = Each endpoint descriptor has a type and value that are used to partially id= entify the endpoint. The type of the Endpoint Descriptor may be a base netw= orking identifier, such as an IP address, or a user-defined type. The value may be a single value, a range of values,= or a group of values.
 
  • Target. This is used by the= application client to establish communications over the network. A Target = is mapped to a physical/logical ingress port, or a physical/logical egress = port.
    •
 
  • Policy Rule Set. A Policy R= ule Set is used to determine how the traffic between a pair of Target Group= s is to be treated. A Policy Rule Set consists of one or more Policy Rules.=
  • Policy Rule. A Policy Rule = consists of a Policy context and a set of Actions to be applied to the traf= fic.
 
  • Policy Context. Context tha= t describes when a Policy Rule is to be applied. It is expressed as a direc= tion, a list of L4 ports, time range, and a protocol.
 
  • Policy Action. This is the = action applied to the traffic that matches the classifier. An action may be= a simple ACL action (i.e. allow, deny, mirroring), applying a well known s= tatistics functions (e.g. X minutes count, Y hours court), applying client specified functions (with URL provid= ed), or may refer to an ordered sequence of functions (i.e., a service chai= n).
    •
 
Comments are greatly appreciated.
 
Linda
-----Original Message-----
From: Loa Andersson [mailto:loa@pi.nu] Sent: Friday, October 02, 2015 12:18 AM
To: DIEGO LOPEZ GARCIA; Linda Dunbar
Cc: i2nsf@ietf.org
Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Ba= sed Policy to describe I2NSF Service Layer Rules?
 
Linda and Diego,
 
This is said by someone that is not familiar with Open Stack or the Gr= oup Based Policy.
 
I'm somewhat on the same page as Diego, at least in the same book.
 
If we want to use  OpenStack's Group Based Policy to describe I2N= SF Service Layer Rules, the case for this has to be made much better.
 
What are the pros and cons? Are there viable alternatives?
 
/Loa
 
On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote:
> Hi Linda,
>
> I am not completely sure that the current networking model of
> OpenStack, that is reflected in the rule targets (either the PTG = and
> the Target
> itself) does cover all the potential semantics for general securi= ty
> functions. The same concern applies to Policy Classifier, as they= seem
> very much associated with a particular implementation model and, = what
> is more, with a limited network model.
>
> Be goode,
>
>
>> On 1 Oct 2015, at 23:32 , Linda Dunbar <linda.dunbar@huawe= i.com
>>
>> I2NSF participants,
>> -im/specifies the structure for I2NSF capability layer rules.=
>> For the I2NSF simple service layer, what do people think of u= sing
>> OpenStack’s Group Policy structure ?
>> If using OpenStack Group-based Policy (GBP) structure, the I2= NSF
>> simple service layer can be expressed as =B7Policy Target Gro= up (PTG).
>> This is a group of Targets to which a traffic policy can be a= pplied.
>> A PTG may be mapped to a Neutron Subnet, a client virtual Sub= net
>> (i.e. with private address prefix), a subnet with public addr= ess
>> families, or any combination of them with logical operators (= Logical
>> AND, OR, or NOT). A PTG references one or more Policy Rule Se= ts that
>> it consumes or provides.
>> =B7Target. This is used by the application client to establis= h
>> communications over the network. A Target is mapped to a sing= le
>> Neutron Port, a physical/logical ingress port, or a physical/= logical
>> egress port.
>> =B7Policy Rule Set. A Policy Rule Set is used to determine ho= w the
>> traffic between a pair of Target Groups is to be treated. A P= olicy
>> Rule Set consists of one or more Policy Rules.
>> =B7Policy Rule. A Policy Rule consists of a Traffic Classifie= r and a
>> set of Actions to be applied to the traffic.
>> =B7Policy Classifier. A traffic classifier describes the traf= fic to
>> which a Policy Rule is to be applied. It is expressed as a di= rection,
>> a list of L4 ports, time range, and a protocol.
>> =B7Policy Action. This is the action applied to the traffic t= hat
>> matches the classifier. An action may be a simple ACL action = (i.e.
>> allow, deny, mirroring), applying a well known statistics fun= ctions
>> (e.g. X minutes count, Y hours court), applying client specif= ied
>> functions (with URL provided), or may refer to an ordered seq= uence of
>> functions (i.e., a service chain).
>> If you have concern of using OpenStack Group Based Policies, = please
>> let the group know.
>> Thanks, Linda
>> _______________________________________________
>> I2nsf mailing list
>
> --
> "Esta vez no fallaremos, Doctor Infierno"
>
> Dr Diego R. Lopez
> Telefonica I+D
>
> Tel:    +34 913 129 041
> Mobile: +34 682 051 091
> ----------------------------------
>
>
> -----------------------------------------------------------------= -----
> --
>
> Este mensaje y sus adjuntos se dirigen exclusivamente a su
> destinatario, puede contener informaci=F3n privilegiada o confide= ncial y
> es para uso exclusivo de la persona o entidad de destino. Si no e= s
> usted. el destinatario indicado, queda notificado de que la lectu= ra,
> utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede e= star
> prohibida en virtud de la legislaci=F3n vigente. Si ha recibido e= ste
> mensaje por error, le rogamos que nos lo comunique inmediatamente= por
> esta misma v=EDa y proceda a su destrucci=F3n.
>
> The information contained in this transmission is privileged and =
> confidential information intended only for the use of the individ= ual
> or entity named above. If the reader of this message is not the <= /div>
> intended recipient, you are hereby notified that any disseminatio= n,
> distribution or copying of this communication is strictly prohibi= ted.
> If you have received this transmission in error, do not read it. =
> Please immediately reply to the sender that you have received thi= s
> communication in error and then delete it.
>
> Esta mensagem e seus anexos se dirigem exclusivamente ao seu
> destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confid= encial e =E9
> para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9= vossa
> senhoria o destinat=E1rio indicado, fica notificado de que a leit= ura,
> utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o p= ode estar proibida
> em virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem po= r erro,
> rogamos-lhe que nos o comunique imediatamente por esta mesma via = e
> proceda a sua destrui=E7=E3o
>
>
> _______________________________________________
> I2nsf mailing list
>
 
 --_000_4A95BA014132FF49AE685FAB4B9F17F657D676D7dfweml701chm_-- From nobody Tue Oct 6 01:57:20 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39D661A0366 for ; Tue, 6 Oct 2015 01:57:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2QyxOsfLMnyP for ; Tue, 6 Oct 2015 01:57:10 -0700 (PDT) Received: from pipi.pi.nu (pipi.pi.nu [83.168.239.141]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC5481A028A for ; Tue, 6 Oct 2015 01:57:09 -0700 (PDT) Received: from [192.168.1.10] (unknown [49.149.195.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: loa@pi.nu) by pipi.pi.nu (Postfix) with ESMTPSA id E456718013B2; Tue, 6 Oct 2015 10:57:05 +0200 (CEST) To: Linda Dunbar , DIEGO LOPEZ GARCIA References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> From: Loa Andersson Message-ID: <56138CCF.6020006@pi.nu> Date: Tue, 6 Oct 2015 16:56:47 +0800 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 08:57:17 -0000 Linda, How different is "endpoint" from "host" as it used in RFC 1122, RFC 1123 and RFC 5505? /Loa On 2015-10-06 05:45, Linda Dunbar wrote: > Thanks to Loa and Diego for the comments. > Here are some pros and cons of using Open Stack Group Based Policy: > Pros: > > * There are running codes (open sourced code) > > Cons: > > * The OpenStack's group based policy is very much Neutron port > oriented. It is not straight forward for an environment that is not > based on OpenStack Neutron. > * They are not designed for expressing rules to Flow-based NSF on how > to treat client/applications traffic. The current set is not > complete, a lot more need to be added. > * There are other "Group Based Policy", e.g. Window's Group Policy, > which are quite different from the OpenStack’s Group Based Policy. > * May cause confusion in industry if calling “Group Based Policy” for > I2NSF Service Layer > > However, the notation of Groups, Target, Context and action do cover > what is needed for clients/applications to express the rules on how > their flows can be treated by the Flow-Based NSFs in networks. And they > can be mapped to the Capability layer’s Subject-Object-Action-Function” > paradigm. > To avoid the confusion, it might be better to avoid using the term > “Group based policy” (but inherent their concept only). > For example, “group” can be represented by “Composite Endpoints/Targets” > or Endpoint Container (if using SUPA language), where an “Endpoint” can > be a subnet, a set of hosts or applications, etc. > > * Composite Endpoint (CEP). Logical combination of endpoint descriptor > IDs, where descriptor can be subnet, set of hosts, or applications. > > * Endpoint Descriptor (EPD). Each endpoint descriptor has a type and > value that are used to partially identify the endpoint. The type of > the Endpoint Descriptor may be a base networking identifier, such as > an IP address, or a user-defined type. The value may be a single > value, a range of values, or a group of values. > > * Target. This is used by the application client to establish > communications over the network. A Target is mapped to a > physical/logical ingress port, or a physical/logical egress port. > > * Policy Rule Set. A Policy Rule Set is used to determine how the > traffic between a pair of Target Groups is to be treated. A Policy > Rule Set consists of one or more Policy Rules. > > * Policy Rule. A Policy Rule consists of a Policy context and a set of > Actions to be applied to the traffic. > > * Policy Context. Context that describes when a Policy Rule is to be > applied. It is expressed as a direction, a list of L4 ports, time > range, and a protocol. > > * Policy Action. This is the action applied to the traffic that > matches the classifier. An action may be a simple ACL action (i.e. > allow, deny, mirroring), applying a well known statistics functions > (e.g. X minutes count, Y hours court), applying client specified > functions (with URL provided), or may refer to an ordered sequence > of functions (i.e., a service chain). > > Comments are greatly appreciated. > Linda > -----Original Message----- > From: Loa Andersson [mailto:loa@pi.nu] > Sent: Friday, October 02, 2015 12:18 AM > To: DIEGO LOPEZ GARCIA; Linda Dunbar > Cc: i2nsf@ietf.org > Subject: Re: [I2nsf] What do you people think of using OpenStack's Group > Based Policy to describe I2NSF Service Layer Rules? > Linda and Diego, > This is said by someone that is not familiar with Open Stack or the > Group Based Policy. > I'm somewhat on the same page as Diego, at least in the same book. > If we want to use OpenStack's Group Based Policy to describe I2NSF > Service Layer Rules, the case for this has to be made much better. > What are the pros and cons? Are there viable alternatives? > /Loa > On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: >> Hi Linda, >> >> I am not completely sure that the current networking model of >> OpenStack, that is reflected in the rule targets (either the PTG and >> the Target >> itself) does cover all the potential semantics for general security >> functions. The same concern applies to Policy Classifier, as they seem >> very much associated with a particular implementation model and, what >> is more, with a limited network model. >> >> Be goode, >> >> >>> On 1 Oct 2015, at 23:32 , Linda Dunbar >> > wrote: >>> >>> I2NSF participants, >>>https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-interface >>> -im/specifies the structure for I2NSF capability layer rules. >>> For the I2NSF simple service layer, what do people think of using >>> OpenStack’s Group Policy structure ? >>> If using OpenStack Group-based Policy (GBP) structure, the I2NSF >>> simple service layer can be expressed as ·Policy Target Group (PTG). >>> This is a group of Targets to which a traffic policy can be applied. >>> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet >>> (i.e. with private address prefix), a subnet with public address >>> families, or any combination of them with logical operators (Logical >>> AND, OR, or NOT). A PTG references one or more Policy Rule Sets that >>> it consumes or provides. >>> ·Target. This is used by the application client to establish >>> communications over the network. A Target is mapped to a single >>> Neutron Port, a physical/logical ingress port, or a physical/logical >>> egress port. >>> ·Policy Rule Set. A Policy Rule Set is used to determine how the >>> traffic between a pair of Target Groups is to be treated. A Policy >>> Rule Set consists of one or more Policy Rules. >>> ·Policy Rule. A Policy Rule consists of a Traffic Classifier and a >>> set of Actions to be applied to the traffic. >>> ·Policy Classifier. A traffic classifier describes the traffic to >>> which a Policy Rule is to be applied. It is expressed as a direction, >>> a list of L4 ports, time range, and a protocol. >>> ·Policy Action. This is the action applied to the traffic that >>> matches the classifier. An action may be a simple ACL action (i.e. >>> allow, deny, mirroring), applying a well known statistics functions >>> (e.g. X minutes count, Y hours court), applying client specified >>> functions (with URL provided), or may refer to an ordered sequence of >>> functions (i.e., a service chain). >>> If you have concern of using OpenStack Group Based Policies, please >>> let the group know. >>> Thanks, Linda >>> _______________________________________________ >>> I2nsf mailing list >>>I2nsf@ietf.org >>>https://www.ietf.org/mailman/listinfo/i2nsf >> >> -- >> "Esta vez no fallaremos, Doctor Infierno" >> >> Dr Diego R. Lopez >> Telefonica I+D >>http://people.tid.es/diego.lopez/ >> >> e-mail:diego.r.lopez@telefonica.com >> Tel: +34 913 129 041 >> Mobile: +34 682 051 091 >> ---------------------------------- >> >> >> ---------------------------------------------------------------------- >> -- >> >> Este mensaje y sus adjuntos se dirigen exclusivamente a su >> destinatario, puede contener información privilegiada o confidencial y >> es para uso exclusivo de la persona o entidad de destino. Si no es >> usted. el destinatario indicado, queda notificado de que la lectura, >> utilización, divulgación y/o copia sin autorización puede estar >> prohibida en virtud de la legislación vigente. Si ha recibido este >> mensaje por error, le rogamos que nos lo comunique inmediatamente por >> esta misma vía y proceda a su destrucción. >> >> The information contained in this transmission is privileged and >> confidential information intended only for the use of the individual >> or entity named above. If the reader of this message is not the >> intended recipient, you are hereby notified that any dissemination, >> distribution or copying of this communication is strictly prohibited. >> If you have received this transmission in error, do not read it. >> Please immediately reply to the sender that you have received this >> communication in error and then delete it. >> >> Esta mensagem e seus anexos se dirigem exclusivamente ao seu >> destinatário, pode conter informação privilegiada ou confidencial e é >> para uso exclusivo da pessoa ou entidade de destino. Se não é vossa >> senhoria o destinatário indicado, fica notificado de que a leitura, >> utilização, divulgação e/ou cópia sem autorização pode estar proibida >> em virtude da legislação vigente. Se recebeu esta mensagem por erro, >> rogamos-lhe que nos o comunique imediatamente por esta mesma via e >> proceda a sua destruição >> >> >> _______________________________________________ >> I2nsf mailing list >>I2nsf@ietf.org >>https://www.ietf.org/mailman/listinfo/i2nsf >> From nobody Tue Oct 6 04:07:27 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 585B11A8821 for ; Tue, 6 Oct 2015 04:07:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7XK2MABjKSwh for ; Tue, 6 Oct 2015 04:07:20 -0700 (PDT) Received: from smtpjc.telefonica.com (smtpjc.telefonica.com [81.47.204.76]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C19111A6FDD for ; Tue, 6 Oct 2015 04:07:17 -0700 (PDT) Received: from smtpjc.telefonica.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id B45F32F00C8; Tue, 6 Oct 2015 13:07:13 +0200 (CEST) Received: from ESTGVMSP111.EUROPE.telefonica.corp (unknown [10.92.4.9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtpjc.telefonica.com (Postfix) with ESMTPS id 04D7B2F0187; Tue, 6 Oct 2015 13:07:13 +0200 (CEST) Received: from emea01-am1-obe.outbound.protection.outlook.com (10.92.5.139) by tls.telefonica.com (10.92.6.54) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 6 Oct 2015 13:07:12 +0200 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) by DB4PR06MB0621.eurprd06.prod.outlook.com (10.161.13.139) with Microsoft SMTP Server (TLS) id 15.1.286.20; Tue, 6 Oct 2015 11:07:09 +0000 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) by DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) with mapi id 15.01.0286.019; Tue, 6 Oct 2015 11:07:09 +0000 From: DIEGO LOPEZ GARCIA To: Linda Dunbar Thread-Topic: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AdD8kJsQ5Rkc+aynSXudFPC41PBbhwACacoAAA3axgAAuWH3gAAb+5WA Date: Tue, 6 Oct 2015 11:07:08 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [176.84.212.96] x-microsoft-exchange-diagnostics: 1; DB4PR06MB0621; 5:yOsJRAKn3dJ/iJoOHgG8r6mWQ4Dk4DeWPT326Vh1KD1qC9jvU3cnh0VRGXpWYGbKR80qdV0OibVPwEPPmJ58z+dvqsMy414si4TUab7Tr8tE5JTtZYqPJL9/9FLSCFokgQ7mM7hlBFUxRAg5QNoN7A==; 24:O/e9XPvy8aOsfjQA+sOb5sjLZHTO27rNQGbMlDR3WJsHeW4EfvyzcLbivVbk7TOVqvD7qbQ6ePdlpEt4DReG5FhgVt1ioO2/g/wDADjCEHo=; 20:s0p0FAl8X0p5TKaFxAxKYvvn1RGKi0D1iG30PLDuKavwPcRVnulkb7CW7ymG4Vt03LQabnflcm5tr9hLvYrfcw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB4PR06MB0621; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(520078)(5005006)(3002001); SRVR:DB4PR06MB0621; BCL:0; PCL:0; RULEID:; SRVR:DB4PR06MB0621; x-forefront-prvs: 07215D0470 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(24454002)(377454003)(13464003)(189002)(199003)(377424004)(252514010)(164054003)(83716003)(110136002)(106356001)(5001960100002)(16236675004)(82746002)(5002640100001)(40100003)(11100500001)(46102003)(19580405001)(189998001)(19580395003)(5007970100001)(97736004)(101416001)(5008740100001)(76176999)(15975445007)(66066001)(2900100001)(77096005)(19617315012)(5004730100002)(81156007)(87936001)(64706001)(19273905006)(93886004)(36756003)(50986999)(92566002)(86362001)(54356999)(2950100001)(33656002)(122556002)(105586002)(10400500002)(102836002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DB4PR06MB0621; H:DB4PR06MB0624.eurprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_B984884E85884F18A2C521865BF7EA36telefonicacom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Oct 2015 11:07:08.8901 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR06MB0621 X-OriginatorOrg: telefonica.com X-TM-AS-MML: No Archived-At: Cc: "i2nsf@ietf.org" , Aldo Basile , Loa Andersson Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 11:07:26 -0000 --_000_B984884E85884F18A2C521865BF7EA36telefonicacom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi Linda, I have been talking about this with one of the policy experts in the SECURE= D project (Aldo Basile, I have put him in Cc: so you can identify him, thou= gh he is in the I2NSF list as well=85) and these are his comments: 8<=97 In my understanding, OpenStack Group Policies are a simplified yet generic = way to associate iptables-like rules, the syntax is very similar. It is network management rather then security management. You can express s= imple network policies (commands) and associate to network nodes and groups= . GBP is not a generic framework for expressing policies. Something is general (like the definition of rules as (classifier,action)) = but it requires several extensions that, in the end, when completed will le= ad to PCIM or SG17-like models. Thus, in my opinion, SG17/PCIM are certainly a better starting point, and a= lso easier to push SECURED results. "Policy Classifier" is another way to tell 'matching conditions' (as networ= king people likes the word classifier, for me a classifier is something mor= e intelligent). Conditions available on OpenStack Group Policies are now a very limited sub= set of l4 filtering (they don't even cover packet filters). However, the mo= del (condition,action) is general enough to cope with future needs (by addi= ng more classifiers). There is no way to categorize policies (thus no capabilities no easy link t= o NSF categorization for interoperability). Then, no resolution strategies, no default actions, no priorities, no other= sophisticated ways to express policies. 8<=97 I=92ll let Aldo to express his views in more detail, but my position is tha= t we should consider an existing general framework as starting point, and t= hat PCIM (see http://www.dmtf.org/standards/policy) is the most promising o= ne. Be goode, On 5 Oct 2015, at 23:45 , Linda Dunbar > wrote: Thanks to Loa and Diego for the comments. Here are some pros and cons of using Open Stack Group Based Policy: Pros: * There are running codes (open sourced code) Cons: * The OpenStack's group based policy is very much Neutron port oriented= . It is not straight forward for an environment that is not based on OpenSt= ack Neutron. * They are not designed for expressing rules to Flow-based NSF on how t= o treat client/applications traffic. The current set is not complete, a lo= t more need to be added. * There are other "Group Based Policy", e.g. Window's Group Policy, whi= ch are quite different from the OpenStack=92s Group Based Policy. * May cause confusion in industry if calling =93Group Based Policy=94 f= or I2NSF Service Layer However, the notation of Groups, Target, Context and action do cover what i= s needed for clients/applications to express the rules on how their flows c= an be treated by the Flow-Based NSFs in networks. And they can be mapped to= the Capability layer=92s Subject-Object-Action-Function=94 paradigm. To avoid the confusion, it might be better to avoid using the term =93Group= based policy=94 (but inherent their concept only). For example, =93group=94 can be represented by =93Composite Endpoints/Targe= ts=94 or Endpoint Container (if using SUPA language), where an =93Endpoint= =94 can be a subnet, a set of hosts or applications, etc. * Composite Endpoint (CEP). Logical combination of endpoint descriptor = IDs, where descriptor can be subnet, set of hosts, or applications. * Endpoint Descriptor (EPD). Each endpoint descriptor has a type and va= lue that are used to partially identify the endpoint. The type of the Endpo= int Descriptor may be a base networking identifier, such as an IP address, = or a user-defined type. The value may be a single value, a range of values,= or a group of values. * Target. This is used by the application client to establish communica= tions over the network. A Target is mapped to a physical/logical ingress po= rt, or a physical/logical egress port. * Policy Rule Set. A Policy Rule Set is used to determine how the traff= ic between a pair of Target Groups is to be treated. A Policy Rule Set cons= ists of one or more Policy Rules. * Policy Rule. A Policy Rule consists of a Policy context and a set of = Actions to be applied to the traffic. * Policy Context. Context that describes when a Policy Rule is to be ap= plied. It is expressed as a direction, a list of L4 ports, time range, and = a protocol. * Policy Action. This is the action applied to the traffic that matches= the classifier. An action may be a simple ACL action (i.e. allow, deny, mi= rroring), applying a well known statistics functions (e.g. X minutes count,= Y hours court), applying client specified functions (with URL provided), o= r may refer to an ordered sequence of functions (i.e., a service chain). Comments are greatly appreciated. Linda -----Original Message----- From: Loa Andersson [mailto:loa@pi.nu] Sent: Friday, October 02, 2015 12:18 AM To: DIEGO LOPEZ GARCIA; Linda Dunbar Cc: i2nsf@ietf.org Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Ba= sed Policy to describe I2NSF Service Layer Rules? Linda and Diego, This is said by someone that is not familiar with Open Stack or the Group B= ased Policy. I'm somewhat on the same page as Diego, at least in the same book. If we want to use OpenStack's Group Based Policy to describe I2NSF Service= Layer Rules, the case for this has to be made much better. What are the pros and cons? Are there viable alternatives? /Loa On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: > Hi Linda, > > I am not completely sure that the current networking model of > OpenStack, that is reflected in the rule targets (either the PTG and > the Target > itself) does cover all the potential semantics for general security > functions. The same concern applies to Policy Classifier, as they seem > very much associated with a particular implementation model and, what > is more, with a limited network model. > > Be goode, > > >> On 1 Oct 2015, at 23:32 , Linda Dunbar >> > wrote: >> >> I2NSF participants, >> https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-interface >> -im/specifies the structure for I2NSF capability layer rules. >> For the I2NSF simple service layer, what do people think of using >> OpenStack=92s Group Policy structure ? >> If using OpenStack Group-based Policy (GBP) structure, the I2NSF >> simple service layer can be expressed as =B7Policy Target Group (PTG). >> This is a group of Targets to which a traffic policy can be applied. >> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet >> (i.e. with private address prefix), a subnet with public address >> families, or any combination of them with logical operators (Logical >> AND, OR, or NOT). A PTG references one or more Policy Rule Sets that >> it consumes or provides. >> =B7Target. This is used by the application client to establish >> communications over the network. A Target is mapped to a single >> Neutron Port, a physical/logical ingress port, or a physical/logical >> egress port. >> =B7Policy Rule Set. A Policy Rule Set is used to determine how the >> traffic between a pair of Target Groups is to be treated. A Policy >> Rule Set consists of one or more Policy Rules. >> =B7Policy Rule. A Policy Rule consists of a Traffic Classifier and a >> set of Actions to be applied to the traffic. >> =B7Policy Classifier. A traffic classifier describes the traffic to >> which a Policy Rule is to be applied. It is expressed as a direction, >> a list of L4 ports, time range, and a protocol. >> =B7Policy Action. This is the action applied to the traffic that >> matches the classifier. An action may be a simple ACL action (i.e. >> allow, deny, mirroring), applying a well known statistics functions >> (e.g. X minutes count, Y hours court), applying client specified >> functions (with URL provided), or may refer to an ordered sequence of >> functions (i.e., a service chain). >> If you have concern of using OpenStack Group Based Policies, please >> let the group know. >> Thanks, Linda >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf > > -- > "Esta vez no fallaremos, Doctor Infierno" > > Dr Diego R. Lopez > Telefonica I+D > http://people.tid.es/diego.lopez/ > > e-mail: diego.r.lopez@telefonica.com > Tel: +34 913 129 041 > Mobile: +34 682 051 091 > ---------------------------------- > > > ---------------------------------------------------------------------- > -- > > Este mensaje y sus adjuntos se dirigen exclusivamente a su > destinatario, puede contener informaci=F3n privilegiada o confidencial y > es para uso exclusivo de la persona o entidad de destino. Si no es > usted. el destinatario indicado, queda notificado de que la lectura, > utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede estar > prohibida en virtud de la legislaci=F3n vigente. Si ha recibido este > mensaje por error, le rogamos que nos lo comunique inmediatamente por > esta misma v=EDa y proceda a su destrucci=F3n. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual > or entity named above. If the reader of this message is not the > intended recipient, you are hereby notified that any dissemination, > distribution or copying of this communication is strictly prohibited. > If you have received this transmission in error, do not read it. > Please immediately reply to the sender that you have received this > communication in error and then delete it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confidencial e= =E9 > para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa > senhoria o destinat=E1rio indicado, fica notificado de que a leitura, > utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode esta= r proibida > em virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro, > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > proceda a sua destrui=E7=E3o > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > -- "Esta vez no fallaremos, Doctor Infierno" Dr Diego R. Lopez Telefonica I+D http://people.tid.es/diego.lopez/ e-mail: diego.r.lopez@telefonica.com Tel: +34 913 129 041 Mobile: +34 682 051 091 ---------------------------------- ________________________________ Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, pu= ede contener informaci=F3n privilegiada o confidencial y es para uso exclus= ivo de la persona o entidad de destino. Si no es usted. el destinatario ind= icado, queda notificado de que la lectura, utilizaci=F3n, divulgaci=F3n y/o= copia sin autorizaci=F3n puede estar prohibida en virtud de la legislaci= =F3n vigente. Si ha recibido este mensaje por error, le rogamos que nos lo = comunique inmediatamente por esta misma v=EDa y proceda a su destrucci=F3n. The information contained in this transmission is privileged and confidenti= al information intended only for the use of the individual or entity named = above. If the reader of this message is not the intended recipient, you are= hereby notified that any dissemination, distribution or copying of this co= mmunication is strictly prohibited. If you have received this transmission = in error, do not read it. Please immediately reply to the sender that you h= ave received this communication in error and then delete it. Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinat=E1rio= , pode conter informa=E7=E3o privilegiada ou confidencial e =E9 para uso ex= clusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa senhoria o des= tinat=E1rio indicado, fica notificado de que a leitura, utiliza=E7=E3o, div= ulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode estar proibida em virtude= da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro, rogamos-lhe = que nos o comunique imediatamente por esta mesma via e proceda a sua destru= i=E7=E3o --_000_B984884E85884F18A2C521865BF7EA36telefonicacom_ Content-Type: text/html; charset="Windows-1252" Content-ID: Content-Transfer-Encoding: quoted-printable Hi Linda,

I have been talking about this with one of the policy exper= ts in the SECURED project (Aldo Basile, I have put him in Cc: so you can id= entify him, though he is in the I2NSF list as well=85) and these are his co= mments:

8<=97

In my under= standing, OpenStack Group Policies are a simplified yet generic way to asso= ciate iptables-like rules, the syntax is very similar.
It is network management ra= ther then security management. You can express simple network policies (com= mands) and associate to network nodes and groups.

GBP is not a generic framew= ork for expressing policies.
Something is general (like = the definition of rules as (classifier,action)) but it requires several ext= ensions that, in the end, when completed will lead to PCIM or SG17-like mod= els.

Thus, in my opinion, SG17/P= CIM are certainly a better starting point, and also easier to push SECURED = results.

"Policy Classifier&quo= t; is another way to tell 'matching conditions' (as networking people likes= the word classifier, for me a classifier is something more intelligent).

Conditions available on Ope= nStack Group Policies are now a very limited subset of l4 filtering (they d= on't even cover packet filters). However, the model (condition,action) is g= eneral enough to cope with future needs (by adding more classifiers).

There is no way to categori= ze policies (thus no capabilities no easy link to NSF categorization for in= teroperability).

Then, no resolution strateg= ies, no default actions, no priorities, no other sophisticated ways to expr= ess policies.

8<=97

I=92ll let Aldo to express his views in more detail, but my= position is that we should consider an existing general framework as start= ing point, and that PCIM (see http://www.dmtf= .org/standards/policy) is the most promising one.

Be goode,



On 5 Oct 2015, at 23:45 , Linda Dunbar <linda.dunbar@huawei.com> wrote= :

Thanks to Loa and Diego for the comments. 
 
Here are some pros and cons of using Open Stack Group Based= Policy:
 
Pros:
  • There are running codes (open sourced code) 
 
Cons:
  • The OpenStack's group based policy is very much Neutron port= oriented. It is not straight forward for an environment that is not based = on OpenStack Neutron. 
  • They are not designed for expressing rules to Flow-based N= SF on how to treat client/applications traffic. The current set is not comp= lete,  a lot more need to be added. 
  • There are other "Group Based Polic= y", e.g. Window's Group Policy, which are quite different from the Ope= nStack=92s Group Based Policy. <= /span>
  • May cause confusion in industry if calling =93Gro= up Based Policy=94 for I2NSF Service Layer
 
 
However, the notation of Groups, Target, Context and action= do cover what is needed for clients/applications to express the rules on h= ow their flows can be treated by the Flow-Based NSFs in networks. And they = can be mapped to the Capability layer=92s Subject-Object-Action-Function=94 paradigm. 
 
To avoid the confusion, it might be better to avoid using t= he term =93Group based policy=94 (but inherent their concept only). 
 
For example, =93group=94 can be represented by =93Composite= Endpoints/Targets=94 or Endpoint Container (if using SUPA language), where= an =93Endpoint=94 can be a subnet, a set of hosts or applications, etc. 
 
 
  • Composite End= point (CEP). Logical combination of endpoint descriptor IDs, where descript= or can be subnet, set of hosts, or applications. 
 
  • Endpoint Desc= riptor (EPD). Each endpoint descriptor has a type and value that are used t= o partially identify the endpoint. The type of the Endpoint Descriptor may = be a base networking identifier, such as an IP address, or a user-defined type. The value may be a single value,= a range of values, or a group of values. 
 
  • Target. This = is used by the application client to establish communications over the netw= ork. A Target is mapped to a physical/logical ingress port, or a physical/l= ogical egress port.
 
  • Policy Rule S= et. A Policy Rule Set is used to determine how the traffic between a pair o= f Target Groups is to be treated. A Policy Rule Set consists of one or more= Policy Rules. 
  • Policy Rule. = A Policy Rule consists of a Policy context and a set of Actions to be appli= ed to the traffic. 
 
  • Policy Contex= t. Context that describes when a Policy Rule is to be applied. It is expres= sed as a direction, a list of L4 ports, time range, and a protocol. 
 
  • Policy Action= . This is the action applied to the traffic that matches the classifier. An= action may be a simple ACL action (i.e. allow, deny, mirroring), applying = a well known statistics functions (e.g. X minutes count, Y hours court), applying client specified functions (with= URL provided), or may refer to an ordered sequence of functions (i.e., a s= ervice chain).
 
Comments are greatly appreciated. 
 
Linda 
-----Original Message-----
From: Loa Andersson [mailto:loa@pi.= nu] 
Sent: Friday, October 02, 2015 12:18 AM
To: DIEGO LOPEZ GARCIA; Linda Dunbar
Cc: i2nsf@ietf.org
Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Ba= sed Policy to describe I2NSF Service Layer Rules?
 
Linda and Diego,
 
This is said by someone that is not familiar with Open Stac= k or the Group Based Policy.
 
I'm somewhat on the same page as Diego, at least in the sam= e book.
 
If we want to use  OpenStack's Group Based Policy to d= escribe I2NSF Service Layer Rules, the case for this has to be made much be= tter.
 
What are the pros and cons? Are there viable alternatives?<= /div>
 
/Loa
 
On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote:
> Hi Linda,
>
> I am not completely sure that the current networking m= odel of 
> OpenStack, that is reflected in the rule targets (eith= er the PTG and 
> the Target
> itself) does cover all the potential semantics for gen= eral security 
> functions. The same concern applies to Policy Classifi= er, as they seem 
> very much associated with a particular implementation = model and, what 
> is more, with a limited network model.
>
> Be goode,
>
>
>> On 1 Oct 2015, at 23:32 , Linda Dunbar <linda.dunbar@huawei.com<= /div>
>> <mailto:linda.dunbar@huawei.com>> wrote:
>>
>> I2NSF participants,
>> = https://datatracker.ietf.org/doc/draft-xia-i2nsf-capabili= ty-interface
>> -im/specifies the structure for I2NSF capability l= ayer rules.
>> For the I2NSF simple service layer, what do people= think of using 
>> OpenStack=92s Group Policy structure ?
>> If using OpenStack Group-based Policy (GBP) struct= ure, the I2NSF 
>> simple service layer can be expressed as =B7Policy= Target Group (PTG). 
>> This is a group of Targets to which a traffic poli= cy can be applied. 
>> A PTG may be mapped to a Neutron Subnet, a client = virtual Subnet 
>> (i.e. with private address prefix), a subnet with = public address 
>> families, or any combination of them with logical = operators (Logical 
>> AND, OR, or NOT). A PTG references one or more Pol= icy Rule Sets that 
>> it consumes or provides.
>> =B7Target. This is used by the application client = to establish 
>> communications over the network. A Target is mappe= d to a single 
>> Neutron Port, a physical/logical ingress port, or = a physical/logical 
>> egress port.
>> =B7Policy Rule Set. A Policy Rule Set is used to d= etermine how the 
>> traffic between a pair of Target Groups is to be t= reated. A Policy 
>> Rule Set consists of one or more Policy Rules.
>> =B7Policy Rule. A Policy Rule consists of a Traffi= c Classifier and a 
>> set of Actions to be applied to the traffic.
>> =B7Policy Classifier. A traffic classifier describ= es the traffic to 
>> which a Policy Rule is to be applied. It is expres= sed as a direction, 
>> a list of L4 ports, time range, and a protocol.
>> =B7Policy Action. This is the action applied to th= e traffic that 
>> matches the classifier. An action may be a simple = ACL action (i.e. 
>> allow, deny, mirroring), applying a well known sta= tistics functions 
>> (e.g. X minutes count, Y hours court), applying cl= ient specified 
>> functions (with URL provided), or may refer to an = ordered sequence of 
>> functions (i.e., a service chain).
>> If you have concern of using OpenStack Group Based= Policies, please 
>> let the group know.
>> Thanks, Linda
>> _______________________________________________
>> I2nsf mailing list
>> = I2nsf@ietf.org <mailto:I2nsf@ietf.org> 
>> = https://= www.ietf.org/mailman/listinfo/i2nsf
>
> --
> "Esta vez no fallaremos, Doctor Infierno"
>
> Dr Diego R. Lopez
> Telefonica I+D
> http://people.tid.es/d= iego.lopez/
>
> e-mail: diego.r.lope= z@telefonica.com
> Tel:    +34 913 129 041
> Mobile: +34 682 051 091
> ----------------------------------
>
>
> ------------------------------------------------------= ----------------
> --
>
> Este mensaje y sus adjuntos se dirigen exclusivamente = a su 
> destinatario, puede contener informaci=F3n privilegiad= a o confidencial y 
> es para uso exclusivo de la persona o entidad de desti= no. Si no es 
> usted. el destinatario indicado, queda notificado de q= ue la lectura, 
> utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci= =F3n puede estar 
> prohibida en virtud de la legislaci=F3n vigente. Si ha= recibido este 
> mensaje por error, le rogamos que nos lo comunique inm= ediatamente por 
> esta misma v=EDa y proceda a su destrucci=F3n.
>
> The information contained in this transmission is priv= ileged and 
> confidential information intended only for the use of = the individual 
> or entity named above. If the reader of this message i= s not the 
> intended recipient, you are hereby notified that any d= issemination, 
> distribution or copying of this communication is stric= tly prohibited. 
> If you have received this transmission in error, do no= t read it. 
> Please immediately reply to the sender that you have r= eceived this 
> communication in error and then delete it.
>
> Esta mensagem e seus anexos se dirigem exclusivamente = ao seu 
> destinat=E1rio, pode conter informa=E7=E3o privilegiad= a ou confidencial e =E9 <= /div>
> para uso exclusivo da pessoa ou entidade de destino. S= e n=E3o =E9 vossa 
> senhoria o destinat=E1rio indicado, fica notificado de= que a leitura, 
> utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autori= za=E7=E3o pode estar proibida 
> em virtude da legisla=E7=E3o vigente. Se recebeu esta = mensagem por erro, 
> rogamos-lhe que nos o comunique imediatamente por esta= mesma via e 
> proceda a sua destrui=E7=E3o
>
>
> _______________________________________________
> I2nsf mailing list
> I2nsf@ietf.org
> https://www.= ietf.org/mailman/listinfo/i2nsf
>

--
"Esta vez no fallaremos, Doctor Infierno"

Dr Diego R. Lopez
Telefonica I+D
http://people.tid.= es/diego.lopez/

e-mail: diego.r.lopez@telefonica.com
Tel:    +34 913 129 041
Mobile: +34 682 051 091
----------------------------------



Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, pu= ede contener informaci=F3n privilegiada o confidencial y es para uso exclus= ivo de la persona o entidad de destino. Si no es usted. el destinatario ind= icado, queda notificado de que la lectura, utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede e= star prohibida en virtud de la legislaci=F3n vigente. Si ha recibido este m= ensaje por error, le rogamos que nos lo comunique inmediatamente por esta m= isma v=EDa y proceda a su destrucci=F3n.

The information contained in this transmission is privileged and confidenti= al information intended only for the use of the individual or entity named = above. If the reader of this message is not the intended recipient, you are= hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If y= ou have received this transmission in error, do not read it. Please immedia= tely reply to the sender that you have received this communication in error= and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinat=E1rio= , pode conter informa=E7=E3o privilegiada ou confidencial e =E9 para uso ex= clusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa senhoria o des= tinat=E1rio indicado, fica notificado de que a leitura, utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o p= ode estar proibida em virtude da legisla=E7=E3o vigente. Se recebeu esta me= nsagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mes= ma via e proceda a sua destrui=E7=E3o
 --_000_B984884E85884F18A2C521865BF7EA36telefonicacom_-- From nobody Tue Oct 6 08:57:07 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE7DC1ACD3B for ; Tue, 6 Oct 2015 08:57:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.209 X-Spam-Level: X-Spam-Status: No, score=-4.209 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DC_PNG_UNO_LARGO=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JcNZFbDd8c2n for ; Tue, 6 Oct 2015 08:56:55 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06AD61A1A9E for ; Tue, 6 Oct 2015 08:56:53 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCD40704; Tue, 06 Oct 2015 15:56:51 +0000 (GMT) Received: from DFWEML705-CHM.china.huawei.com (10.193.5.142) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 6 Oct 2015 16:56:50 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml705-chm ([10.193.5.142]) with mapi id 14.03.0235.001; Tue, 6 Oct 2015 08:56:47 -0700 From: Linda Dunbar To: DIEGO LOPEZ GARCIA Thread-Topic: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AdD8kJsQ5Rkc+aynSXudFPC41PBbhwACacoAAByF3gAAqS/JgAAsLekAAAV4c8A= Date: Tue, 6 Oct 2015 15:56:46 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D67E42@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.190] Content-Type: multipart/related; boundary="_004_4A95BA014132FF49AE685FAB4B9F17F657D67E42dfweml701chm_"; type="multipart/alternative" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" , Aldo Basile , Loa Andersson Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 15:57:06 -0000 --_004_4A95BA014132FF49AE685FAB4B9F17F657D67E42dfweml701chm_ Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D67E42dfweml701chm_" --_000_4A95BA014132FF49AE685FAB4B9F17F657D67E42dfweml701chm_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Diego: Thank you very much for relaying Aldo's comments. That is very usefu= l. Aldo: Can you suggest some references for the "Security Management"? Bear in mind that I2NSF is not to tackle the general policies (which belong= s to SUPA WG). I2NSF is to open a hole for clients/applications to inform to Flow-based NS= Fs to inform them the rules for treating traffic traversing through. Using PCIM (RFC3060 which the ITU-T X.1036 was based on) as a basis would b= e a good idea. However, RFC3060 was created for general network policies fo= r Directory Enabled Network, in some aspects more than what I2NSF needs, an= d in other aspects needs extension. Especially need extension on the Policy= Context (i.e. the directions, the time, and other contextual events that g= overns the policies to NSFs). E.g. [cid:image001.png@01D10025.B160DC00] From: DIEGO LOPEZ GARCIA [mailto:diego.r.lopez@telefonica.com] Sent: Tuesday, October 06, 2015 6:07 AM To: Linda Dunbar Cc: Loa Andersson; Aldo Basile; i2nsf@ietf.org Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Ba= sed Policy to describe I2NSF Service Layer Rules? Hi Linda, I have been talking about this with one of the policy experts in the SECURE= D project (Aldo Basile, I have put him in Cc: so you can identify him, thou= gh he is in the I2NSF list as well...) and these are his comments: 8<- In my understanding, OpenStack Group Policies are a simplified yet generic = way to associate iptables-like rules, the syntax is very similar. It is network management rather then security management. You can express s= imple network policies (commands) and associate to network nodes and groups= . GBP is not a generic framework for expressing policies. Something is general (like the definition of rules as (classifier,action)) = but it requires several extensions that, in the end, when completed will le= ad to PCIM or SG17-like models. Thus, in my opinion, SG17/PCIM are certainly a better starting point, and a= lso easier to push SECURED results. "Policy Classifier" is another way to tell 'matching conditions' (as networ= king people likes the word classifier, for me a classifier is something mor= e intelligent). Conditions available on OpenStack Group Policies are now a very limited sub= set of l4 filtering (they don't even cover packet filters). However, the mo= del (condition,action) is general enough to cope with future needs (by addi= ng more classifiers). There is no way to categorize policies (thus no capabilities no easy link t= o NSF categorization for interoperability). Then, no resolution strategies, no default actions, no priorities, no other= sophisticated ways to express policies. 8<- I'll let Aldo to express his views in more detail, but my position is that = we should consider an existing general framework as starting point, and tha= t PCIM (see http://www.dmtf.org/standards/policy) is the most promising one= . Be goode, On 5 Oct 2015, at 23:45 , Linda Dunbar > wrote: Thanks to Loa and Diego for the comments. Here are some pros and cons of using Open Stack Group Based Policy: Pros: =B7 There are running codes (open sourced code) Cons: =B7 The OpenStack's group based policy is very much Neutron port ori= ented. It is not straight forward for an environment that is not based on O= penStack Neutron. =B7 They are not designed for expressing rules to Flow-based NSF on = how to treat client/applications traffic. The current set is not complete, = a lot more need to be added. =B7 There are other "Group Based Policy", e.g. Window's Group Policy= , which are quite different from the OpenStack's Group Based Policy. =B7 May cause confusion in industry if calling "Group Based Policy" = for I2NSF Service Layer However, the notation of Groups, Target, Context and action do cover what i= s needed for clients/applications to express the rules on how their flows c= an be treated by the Flow-Based NSFs in networks. And they can be mapped to= the Capability layer's Subject-Object-Action-Function" paradigm. To avoid the confusion, it might be better to avoid using the term "Group b= ased policy" (but inherent their concept only). For example, "group" can be represented by "Composite Endpoints/Targets" or= Endpoint Container (if using SUPA language), where an "Endpoint" can be a = subnet, a set of hosts or applications, etc. =B7 Composite Endpoint (CEP). Logical combination of endpoint descri= ptor IDs, where descriptor can be subnet, set of hosts, or applications. =B7 Endpoint Descriptor (EPD). Each endpoint descriptor has a type a= nd value that are used to partially identify the endpoint. The type of the = Endpoint Descriptor may be a base networking identifier, such as an IP addr= ess, or a user-defined type. The value may be a single value, a range of va= lues, or a group of values. =B7 Target. This is used by the application client to establish comm= unications over the network. A Target is mapped to a physical/logical ingre= ss port, or a physical/logical egress port. =B7 Policy Rule Set. A Policy Rule Set is used to determine how the = traffic between a pair of Target Groups is to be treated. A Policy Rule Set= consists of one or more Policy Rules. =B7 Policy Rule. A Policy Rule consists of a Policy context and a se= t of Actions to be applied to the traffic. =B7 Policy Context. Context that describes when a Policy Rule is to = be applied. It is expressed as a direction, a list of L4 ports, time range,= and a protocol. =B7 Policy Action. This is the action applied to the traffic that ma= tches the classifier. An action may be a simple ACL action (i.e. allow, den= y, mirroring), applying a well known statistics functions (e.g. X minutes c= ount, Y hours court), applying client specified functions (with URL provide= d), or may refer to an ordered sequence of functions (i.e., a service chain= ). Comments are greatly appreciated. Linda -----Original Message----- From: Loa Andersson [mailto:loa@pi.nu] Sent: Friday, October 02, 2015 12:18 AM To: DIEGO LOPEZ GARCIA; Linda Dunbar Cc: i2nsf@ietf.org Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Ba= sed Policy to describe I2NSF Service Layer Rules? Linda and Diego, This is said by someone that is not familiar with Open Stack or the Group B= ased Policy. I'm somewhat on the same page as Diego, at least in the same book. If we want to use OpenStack's Group Based Policy to describe I2NSF Service= Layer Rules, the case for this has to be made much better. What are the pros and cons? Are there viable alternatives? /Loa On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: > Hi Linda, > > I am not completely sure that the current networking model of > OpenStack, that is reflected in the rule targets (either the PTG and > the Target > itself) does cover all the potential semantics for general security > functions. The same concern applies to Policy Classifier, as they seem > very much associated with a particular implementation model and, what > is more, with a limited network model. > > Be goode, > > >> On 1 Oct 2015, at 23:32 , Linda Dunbar >> > wrote: >> >> I2NSF participants, >> https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-interface >> -im/specifies the structure for I2NSF capability layer rules. >> For the I2NSF simple service layer, what do people think of using >> OpenStack's Group Policy structure ? >> If using OpenStack Group-based Policy (GBP) structure, the I2NSF >> simple service layer can be expressed as =B7Policy Target Group (PTG). >> This is a group of Targets to which a traffic policy can be applied. >> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet >> (i.e. with private address prefix), a subnet with public address >> families, or any combination of them with logical operators (Logical >> AND, OR, or NOT). A PTG references one or more Policy Rule Sets that >> it consumes or provides. >> =B7Target. This is used by the application client to establish >> communications over the network. A Target is mapped to a single >> Neutron Port, a physical/logical ingress port, or a physical/logical >> egress port. >> =B7Policy Rule Set. A Policy Rule Set is used to determine how the >> traffic between a pair of Target Groups is to be treated. A Policy >> Rule Set consists of one or more Policy Rules. >> =B7Policy Rule. A Policy Rule consists of a Traffic Classifier and a >> set of Actions to be applied to the traffic. >> =B7Policy Classifier. A traffic classifier describes the traffic to >> which a Policy Rule is to be applied. It is expressed as a direction, >> a list of L4 ports, time range, and a protocol. >> =B7Policy Action. This is the action applied to the traffic that >> matches the classifier. An action may be a simple ACL action (i.e. >> allow, deny, mirroring), applying a well known statistics functions >> (e.g. X minutes count, Y hours court), applying client specified >> functions (with URL provided), or may refer to an ordered sequence of >> functions (i.e., a service chain). >> If you have concern of using OpenStack Group Based Policies, please >> let the group know. >> Thanks, Linda >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf > > -- > "Esta vez no fallaremos, Doctor Infierno" > > Dr Diego R. Lopez > Telefonica I+D > http://people.tid.es/diego.lopez/ > > e-mail: diego.r.lopez@telefonica.com > Tel: +34 913 129 041 > Mobile: +34 682 051 091 > ---------------------------------- > > > ---------------------------------------------------------------------- > -- > > Este mensaje y sus adjuntos se dirigen exclusivamente a su > destinatario, puede contener informaci=F3n privilegiada o confidencial y > es para uso exclusivo de la persona o entidad de destino. Si no es > usted. el destinatario indicado, queda notificado de que la lectura, > utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede estar > prohibida en virtud de la legislaci=F3n vigente. Si ha recibido este > mensaje por error, le rogamos que nos lo comunique inmediatamente por > esta misma v=EDa y proceda a su destrucci=F3n. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual > or entity named above. If the reader of this message is not the > intended recipient, you are hereby notified that any dissemination, > distribution or copying of this communication is strictly prohibited. > If you have received this transmission in error, do not read it. > Please immediately reply to the sender that you have received this > communication in error and then delete it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confidencial e= =E9 > para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa > senhoria o destinat=E1rio indicado, fica notificado de que a leitura, > utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode esta= r proibida > em virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro, > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > proceda a sua destrui=E7=E3o > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > -- "Esta vez no fallaremos, Doctor Infierno" Dr Diego R. Lopez Telefonica I+D http://people.tid.es/diego.lopez/ e-mail: diego.r.lopez@telefonica.com Tel: +34 913 129 041 Mobile: +34 682 051 091 ---------------------------------- ________________________________ Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, pu= ede contener informaci=F3n privilegiada o confidencial y es para uso exclus= ivo de la persona o entidad de destino. Si no es usted. el destinatario ind= icado, queda notificado de que la lectura, utilizaci=F3n, divulgaci=F3n y/o= copia sin autorizaci=F3n puede estar prohibida en virtud de la legislaci= =F3n vigente. Si ha recibido este mensaje por error, le rogamos que nos lo = comunique inmediatamente por esta misma v=EDa y proceda a su destrucci=F3n. The information contained in this transmission is privileged and confidenti= al information intended only for the use of the individual or entity named = above. If the reader of this message is not the intended recipient, you are= hereby notified that any dissemination, distribution or copying of this co= mmunication is strictly prohibited. If you have received this transmission = in error, do not read it. Please immediately reply to the sender that you h= ave received this communication in error and then delete it. Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinat=E1rio= , pode conter informa=E7=E3o privilegiada ou confidencial e =E9 para uso ex= clusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa senhoria o des= tinat=E1rio indicado, fica notificado de que a leitura, utiliza=E7=E3o, div= ulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode estar proibida em virtude= da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro, rogamos-lhe = que nos o comunique imediatamente por esta mesma via e proceda a sua destru= i=E7=E3o --_000_4A95BA014132FF49AE685FAB4B9F17F657D67E42dfweml701chm_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Diego: Thank you very muc= h for relaying Aldo’s comments. That is very useful.

 <= /p>

 <= /p>

Aldo: Can you suggest som= e references for the “Security Management”?

 <= /p>

 <= /p>

Bear in mind that I2NSF i= s not to tackle the general policies (which belongs to SUPA WG).

I2NSF is to open a hole f= or clients/applications to inform to Flow-based NSFs to inform them the rul= es for treating traffic traversing through.

 <= /p>

Using PCIM (RFC3060 which= the ITU-T X.1036 was based on) as a basis would be a good idea. However, R= FC3060 was created for general network policies for Directory Enabled Network, in some aspects more than what I2NSF needs, and in other = aspects needs extension. Especially need extension on the Policy Context (i= .e. the directions, the time, and other contextual events that governs the = policies to NSFs). E.g.

 <= /p>

<= /span>

 <= /p>

 <= /p>

 <= /p>

From: DIEGO LO= PEZ GARCIA [mailto:diego.r.lopez@telefonica.com]
Sent: Tuesday, October 06, 2015 6:07 AM
To: Linda Dunbar
Cc: Loa Andersson; Aldo Basile; i2nsf@ietf.org
Subject: Re: [I2nsf] What do you people think of using OpenStack's G= roup Based Policy to describe I2NSF Service Layer Rules?<= /p>

 

Hi Linda,

 

I have been talking about this with one of the polic= y experts in the SECURED project (Aldo Basile, I have put him in Cc: so you= can identify him, though he is in the I2NSF list as well…) and these= are his comments:

 

8<—

 

In my understanding, OpenStack Group Policies are a simplified= yet generic way to associate iptables-like rules, the syntax is very simil= ar.
It is network management rather then security management. You can express s= imple network policies (commands) and associate to network nodes and groups= .

GBP is not a generic framework for expressing policies.
Something is general (like the definition of rules as (classifier,action)) = but it requires several extensions that, in the end, when completed will le= ad to PCIM or SG17-like models.

Thus, in my opinion, SG17/PCIM are certainly a better starting point, and a= lso easier to push SECURED results.

"Policy Classifier" is another way to tell 'matching conditions' = (as networking people likes the word classifier, for me a classifier is som= ething more intelligent).

Conditions available on OpenStack Group Policies are now a very limited sub= set of l4 filtering (they don't even cover packet filters). However, the mo= del (condition,action) is general enough to cope with future needs (by addi= ng more classifiers).

There is no way to categorize policies (thus no capabilities no easy link t= o NSF categorization for interoperability).

Then, no resolution strategies, no default actions, no priorities, no other= sophisticated ways to express policies.

 

8<—

 

I’ll let Aldo to express his views in more det= ail, but my position is that we should consider an existing general framewo= rk as starting point, and that PCIM (see http://www.dmtf.org/standa= rds/policy) is the most promising one.

 

Be goode,

 

 

 

On 5 Oct 2015, at 23:45 , Linda Dunbar <linda.dunbar@huawei.com> wrote:<= o:p>

 

Thanks to Loa and Diego for the comments. 

 

Here are some pros and cons of using Open Stack Group Based Policy:<= /o:p>

 

Pros:

=B7        There are running codes (open sourced code) 

 

Cons:

=B7        The OpenStack's group based policy is very much Neutron port orie= nted. It is not straight forward for an environment that is not based on Op= enStack Neutron. 

=B7        They are not designed for expressing rules to Flow-based NSF on h= ow to treat client/applications traffic. The current set is not complete,&n= bsp; a lot more need to be added.&nbs= p;

=B7        There are other "Group Based Policy", e.g. Window's Gro= up Policy, which are quite different from the OpenStack’s Group Based= Policy. 

=B7        May cause confusion in industry if calling “Group Based Pol= icy” for I2NSF Service Layer

 

 

However, the notation of Groups, Target, Context and action do cover what= is needed for clients/applications to express the rules on how their flows= can be treated by the Flow-Based NSFs in networks. And they can be mapped to the Capability layer’s Subjec= t-Object-Action-Function” paradigm. 

 

To avoid the confusion, it might be better to avoid using the term “= ;Group based policy” (but inherent their concept only). 

 

For example, “group” can be represented by “Composite E= ndpoints/Targets” or Endpoint Container (if using SUPA language), whe= re an “Endpoint” can be a subnet, a set of hosts or application= s, etc. <= /p>

 

 

=B7        Composite Endpoint (CEP). Logic= al combination of endpoint descriptor IDs, where descriptor can be subnet, = set of hosts, or applications. <= /span>

 

=B7        Endpoint Descriptor (EPD). Each= endpoint descriptor has a type and value that are used to partially identi= fy the endpoint. The type of the Endpoint Descriptor may be a base networking identifier, such as an IP address, or a user-defined = type. The value may be a single value, a range of values, or a group of val= ues. 

 

=B7        Target. This is used by the app= lication client to establish communications over the network. A Target is m= apped to a physical/logical ingress port, or a physical/logical egress port.<= o:p>

 

=B7        Policy Rule Set. A Policy Rule = Set is used to determine how the traffic between a pair of Target Groups is= to be treated. A Policy Rule Set consists of one or more Policy Rules. 

=B7        Policy Rule. A Policy Rule cons= ists of a Policy context and a set of Actions to be applied to the traffic.=  

 

=B7        Policy Context. Context that de= scribes when a Policy Rule is to be applied. It is expressed as a direction= , a list of L4 ports, time range, and a protocol. 

 

=B7        Policy Action. This is the acti= on applied to the traffic that matches the classifier. An action may be a s= imple ACL action (i.e. allow, deny, mirroring), applying a well known statistics functions (e.g. X minutes count, Y hours court), a= pplying client specified functions (with URL provided), or may refer to an = ordered sequence of functions (i.e., a service chain).

 

Comments are greatly appreciated.&n= bsp;

 

Linda 

-----Original Message-----
From: Loa Andersson [mailto:loa@pi.nu] 
Sent: Friday, October 02, 2015 12:18 AM
To: DIEGO LOPEZ GARCIA; Linda Dunbar
Cc: i2nsf@ietf.org
Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Ba= sed Policy to describe I2NSF Service Layer Rules?

 

Linda and Diego,

 

This is said by someone that is not familiar with Open Stack or the Group= Based Policy.

 

I'm somewhat on the same page as Diego, at least in the same book.

 

If we want to use  OpenStack's Group Based Policy to describe I2NSF = Service Layer Rules, the case for this has to be made much better.

 

What are the pros and cons? Are there viable alternatives?

 

/Loa

 

On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote:

> Hi Linda,

> 

> I am not completely sure that the current networking model of 

> OpenStack, that is reflected in the rule targets (either the PTG and=  

> the Target

> itself) does cover all the potential semantics for general security<= span class=3D"apple-converted-space"> 

> functions. The same concern applies to Policy Classifier, as they se= em 

> very much associated with a particular implementation model and, wha= t 

> is more, with a limited network model.

> 

> Be goode,

> 

> 

>> On 1 Oct 2015, at 23:32 , Linda Dunbar <linda.dunbar@huawei.com

>> 

>> I2NSF participants,

>> -im/specifies the structure for I2NSF capability layer rules.

>> For the I2NSF simple service layer, what do people think of usin= g 

>> OpenStack’s Group Policy structure ?

>> If using OpenStack Group-based Policy (GBP) structure, the I2NSF=  

>> simple service layer can be expressed as =B7Policy Target Group = (PTG). =

>> This is a group of Targets to which a traffic policy can be appl= ied. 

>> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet=  

>> (i.e. with private address prefix), a subnet with public address=  

>> families, or any combination of them with logical operators (Log= ical 

>> AND, OR, or NOT). A PTG references one or more Policy Rule Sets = that 

>> it consumes or provides.

>> =B7Target. This is used by the application client to establish 

>> communications over the network. A Target is mapped to a single<= span class=3D"apple-converted-space"> 

>> Neutron Port, a physical/logical ingress port, or a physical/log= ical 

>> egress port.

>> =B7Policy Rule Set. A Policy Rule Set is used to determine how t= he 

>> traffic between a pair of Target Groups is to be treated. A Poli= cy 

>> Rule Set consists of one or more Policy Rules.=

>> =B7Policy Rule. A Policy Rule consists of a Traffic Classifier a= nd a 

>> set of Actions to be applied to the traffic.

>> =B7Policy Classifier. A traffic classifier describes the traffic= to 

>> which a Policy Rule is to be applied. It is expressed as a direc= tion, <= /p>

>> a list of L4 ports, time range, and a protocol.

>> =B7Policy Action. This is the action applied to the traffic that=  

>> matches the classifier. An action may be a simple ACL action (i.= e. 

>> allow, deny, mirroring), applying a well known statistics functi= ons 

>> (e.g. X minutes count, Y hours court), applying client specified=  

>> functions (with URL provided), or may refer to an ordered sequen= ce of <= /p>

>> functions (i.e., a service chain).

>> If you have concern of using OpenStack Group Based Policies, ple= ase 

>> let the group know.

>> Thanks, Linda

>> _______________________________________________

>> I2nsf mailing list

> 

> --

> "Esta vez no fallaremos, Doctor Infierno"

> 

> Dr Diego R. Lopez

> Telefonica I+D

> 

> Tel:    +34 913 129 041

> Mobile: +34 682 051 091

> ----------------------------------

> 

> 

> --------------------------------------------------------------------= --

> --

> 

> Este mensaje y sus adjuntos se dirigen exclusivamente a su 

> destinatario, puede contener informaci=F3n privilegiada o confidenci= al y 

> es para uso exclusivo de la persona o entidad de destino. Si no es 

> usted. el destinatario indicado, queda notificado de que la lectura,=  

> utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede esta= r 

> prohibida en virtud de la legislaci=F3n vigente. Si ha recibido este=  

> mensaje por error, le rogamos que nos lo comunique inmediatamente po= r 

> esta misma v=EDa y proceda a su destrucci=F3n.

> 

> The information contained in this transmission is privileged and 

> confidential information intended only for the use of the individual=  

> or entity named above. If the reader of this message is not the 

> intended recipient, you are hereby notified that any dissemination,<= span class=3D"apple-converted-space"> 

> distribution or copying of this communication is strictly prohibited= . 

> If you have received this transmission in error, do not read it. 

> Please immediately reply to the sender that you have received this 

> communication in error and then delete it.

> 

> Esta mensagem e seus anexos se dirigem exclusivamente ao seu 

> destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confidenc= ial e =E9 

> para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9 vo= ssa 

> senhoria o destinat=E1rio indicado, fica notificado de que a leitura= , 

> utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode= estar proibida 

> em virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem por e= rro, 

> rogamos-lhe que nos o comunique imediatamente por esta mesma via e 

> proceda a sua destrui=E7=E3o

> 

> 

> _______________________________________________

> I2nsf mailing list

> 

 

--
"Esta vez no fallaremos, Doctor Infierno"

Dr Diego R. Lopez
Telefonica I+D
http://people.tid.es/diego.lo= pez/

e-mail: diego.r.lopez@telef= onica.com
Tel:    +34 913 129 041
Mobile: +34 682 051 091
----------------------------------

 

 


Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, pu= ede contener informaci=F3n privilegiada o confidencial y es para uso exclus= ivo de la persona o entidad de destino. Si no es usted. el destinatario ind= icado, queda notificado de que la lectura, utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede e= star prohibida en virtud de la legislaci=F3n vigente. Si ha recibido este m= ensaje por error, le rogamos que nos lo comunique inmediatamente por esta m= isma v=EDa y proceda a su destrucci=F3n.

The information contained in this transmission is privileged and confidenti= al information intended only for the use of the individual or entity named = above. If the reader of this message is not the intended recipient, you are= hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If y= ou have received this transmission in error, do not read it. Please immedia= tely reply to the sender that you have received this communication in error= and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinat=E1rio= , pode conter informa=E7=E3o privilegiada ou confidencial e =E9 para uso ex= clusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa senhoria o des= tinat=E1rio indicado, fica notificado de que a leitura, utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o p= ode estar proibida em virtude da legisla=E7=E3o vigente. Se recebeu esta me= nsagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mes= ma via e proceda a sua destrui=E7=E3o

--_000_4A95BA014132FF49AE685FAB4B9F17F657D67E42dfweml701chm_-- --_004_4A95BA014132FF49AE685FAB4B9F17F657D67E42dfweml701chm_ Content-Type: image/png; name="image001.png" Content-Description: image001.png Content-Disposition: inline; filename="image001.png"; size=90934; creation-date="Tue, 06 Oct 2015 15:56:46 GMT"; modification-date="Tue, 06 Oct 2015 15:56:46 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAkQAAAH/CAYAAAC2BcJxAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAO xAAADsQBlSsOGwAAABl0RVh0U29mdHdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAP+QSURBVHhe 7F0FYN3V9T5xd/fU3Z22VNBSKFDcGTBgg42xAftvjI0NBozh7u6lFK1Sd/c2tTSNu7v+v+8mr0tC JWnsJTl3C2ne+1377u+9+/2+c+45NjUookURUAQUAUVAEVAEFIFujIBtN567Tl0RUAQUAUVAEVAE FAGDgBIivREUAUVAEVAEFAFFoNsjoISo298CCoAioAgoAoqAIqAIKCHSe0ARUAQUAUVAEVAEuj0C Soi6/S2gACgCioAioAgoAoqAEiK9BxQBRUARUAQUAUWg2yNgo8fuO/YeyMjIkP3790tVVbXY2Nh0 7GA6ce/V1VUSGRUpvXv17sSz0KErAoqAIqAIdBQCSog6Cvm6fpcuXSoPPvSQlJSWiYO9A17VsFDN XhIQyby8PLnz13fIw3/9a7OrawVFQBFQBBQBRUAJUQffA/PmzZPvvv9ezjvvfGGMTI2T2fwFcXZ2 llWrV4mdrZ288PxzzW9AaygCioAioAh0ewSUEHXwLTBv3reSmZkpv4a6oeXMEVi5YqXMX7hA/vPU U2feiNZUBBQBRUAR6LYIqFO1FSx9eXm5FYyicw+htKy0c09AR68IKAKKgCLQoQgoIepQ+Gs7twYz Wa25rloqKirg4F11UlSaMtaa6mqprKxs13k1ZVxWsNQ6BEVAEVAEFAErRUAJkZUuTGsPa9OmjfLk 44/Lxx99JPHHjjVovqysTObO/VrS0tJl5YrlsmPH9pN2T/PeC889K2+/+YasWbNa8vPzf3Htzz// LHO++rK1p6DtKQKKgCKgCCgCbYaAEqI2g9a6Gi4qLJT4xHgpryiXN954TYqLi44P0M7OzpCkjPQM 6du3rwQFBZv3qqt/eeLNw91Ddu3YIWWlpbJl8yaZ/9OPv5hoLk58MZSAqjbWdQ/oaBQBRUARUARO joASom5yd/gFBMrQYcPl7MlTJD011RxT37Ztm2zdskVIiELDwqSsvEyKioqFp7ZKQXjWrV8rO7Zv l4T4eCkoKDCv0VenV+/eMmr0GPHz85eEhHjUKZJUtJmPNrOzsiQ4OEh8fH2lGma4QwcPyupVK2GK Uz+pbnKr6TQVAUVAEeiUCNg9itIpR95FBh0TE2PIxtixY9t0RmlpaUbRsbWzFR8fP6kor5C4o7Gy E2oPX6PZzMPDU7768nMzjpSUFMnMyJSjuGbjxo2SlZUpLs4uciw+QRITE+TggRgpLMiXmTMvkUIQ otWrVgl9h7Zs2Sxu7u6Sm5OLPsply9YtsmjhfOnXf6D4+/u32RwPHz4scXFxct6557ZZH9qwIqAI KAKKQNdFQBWirru2DWZma2srhTCbOTo6ymWXz5YVy5bKgAEDZNjwYfLzokXGkTogIED69O4DwpMI 5SdBpk6bKrOvuFIGDx4sa9eukbhjcdKnTx9xdHCQXbt2Sgb8iQYOGiTe3t4gWT7i4ekh9g6Owr7Y 3mIcg/eDUnTl1deKq5trN0Fap6kIKAKKgCLQGRFQQtQZV+0MxszTYx4eHjJt6nQJDAwAcXGAH1GJ +Hj7iAP+TYWoGgqPLcxnLFSHaCJjOpHRY8ZIVWWVHI09CtLkb0xj11x7nQSHhMpP8CFifapMJSWl ph2eMKuswk9lhbi5ucn48RNEk5KcwaJpFUVAEVAEFIF2Q0AJUbtB3bEdlZaWCOMdVYCksIwZO042 bFgvCVCDpsHMlJGeLseOHjVkJjQ0VMrhK/Tcs88KT6fRybpvv34gT16mbnFJibi4uMhFMy+WdWvX wjyWI8fglP3RB+/Lnp07JDkpWZycnGTKtGny0YcfyId43d7evmMB0N4VAUVAEVAEFIFTIKA+RB18 e7SHDxFPe9na2EqPHj3FH2Yxms0io6KQ6sLWqDwjR44SL0+avbwlPDwC/j79ZNCgweIBX6BRY0ZD 3bGBKpQvAwYOFE9PTwkKDpaISFwHkhQSGiK+vn7GZBYcEmyIVm+Y1Xr27CkjRo4Ud5xKoxN2//4D 2hRp9SFqU3i1cUVAEVAEujwCmrqjg5eYqTuSkpLk3nvvaZeRkBzRDNbUwoP3c778Asf1K+Saa641 Sk9z6je1n5Zet3DhQlm+YoWm7mgpkFpfEVAEFIFuioCazKxg4cFR2q00l8xUgggFBgXJqFGjja9Q c+u328S0I0VAEVAEFAFFoAUIKCFqAXitUZUnspydHFujqTZpgyRo6tRp5kSaNRcHmAG1KAKKgCKg CCgCZ4qAmszOFLlWqjd37jeI9XNUbr/jdnMSyxqjO1MVqlWx2lHKaga+dOD+af58xEDaoiazZuCm lyoCioAioAj8DwElRB18N/zn6aflmWeelRA4KtfSDeskHR0M0ym7Z6TtjMwMueH6G+Tp//zHmoeq Y1MEFAFFQBGwUgSUEHXwwjz/wgvy9ttvS7++/WrpUHs6FHXw3Furezt7Oxz7j5fp06cpIWotULUd RUARUAS6GQJKiDp4wb/99juTJuM3v7m7g0fSubtfhGjby5YvV5NZ515GHb0ioAgoAh2GgDpVdxj0 2nFrIkDndC2KgCKgCCgCisCZIqC7yJki10r1aCJj3i8tLUNAMWwZflpbEVAEFIHujoASou5+B+j8 FQFFQBFQBBQBRUCUEOlNoAgoAoqAIqAIKALdHgElRN3+FlAAFAFFQBFQBBQBRUAJkd4DioAioAgo AoqAItDtEVBC1O1vAQVAEVAEFAFFQBFQBJQQ6T2gCCgCioAioAgoAt0eASVE3f4WUAAUAUVAEVAE FAFFQAmR3gOKgCKgCCgCioAi0O0RUELU7W8BBUARUAQUAUVAEVAElBDpPaAIKAKKgCKgCCgC3R4B JURWcAtoHq6WL4KdnV3LG9EWFAFFQBFQBLotAkqIOnjpmcvMpoPH0DW6txFiqUURUAQUAUVAETgT BGywiegucibItVKdb775Rt56+20ZPXq0afGXy2EjznaOUllTKZXV3S8JrA3oorOdk5RXVwCDqhOS R2dnF9m0aZNERUXJKy+/1Eoro80oAoqAIqAIdCcElBB18Grv379fPvn0UykuLpbGZh+SAVsbW4kr TBBPR0/xc/IGKars4BG3X/ecfw3+F1eQIKFuQeJi5yJVIEW/KKD05RXlcsH558vMmTPbb4DakyKg CCgCikCXQUAJkZUvZQWUkdtX/kMu63GOzI4+x8pH2/rDyysvkBtW/E3+MPBaOTd8Qut3oC0qAoqA IqAIKAJAQH2IrPw22J6+T76IXSo/Hl1p5SNtm+FtTt0jPx1bK4vj17VNB9qqIqAIKAKKgCKghMjK 7wGYguYcWiQXBYyRlIIM2Zq628oH3LrDq66qlLlHfpbrwqbIkexjEp+f0rodaGuKgCKgCCgCikAd AqoQWfGtsDfrsKxP3y9PTbxfhvj0kjkgB92pbIE6FpsbL4+Nu1fCPUJlecKG7jR9nasioAgoAopA OyKghKgdwW5uV9/ELpMwj2Dp79dLLoo+W9ak7ZJjBd1HJfnm8GLp5R0lvfx6yLTQUbImdYdUQjXS oggoAoqAIqAItDYCSohaG9FWai+rOBcEaKdc1/Nc0+JZIcPF19lbFsataaUerLuZ+Nwk2ZJ5QK7o VetIfnb4WKmpqpIdGfute+A6OkVAEVAEFIFOiYASIitdtuLKEimuLJUAkCAWR3tH8XbylOySXCsd cesOq6iiWIoQeynA1c807OngJkU4cZdYktm6HWlrioAioAgoAooAEFBCZKW3QahHoAzx7SnfxK8y IzyQHSuHco/K+dGTrXTErTusPjCTRcBcaDldtxHmwrKaCjkrcEjrdqStKQKKgCKgCCgCSois9x6w s7GTq3udL1twsiyvNE++P7pcBnr3kJEBfa130K04Mntbe7mp1wWyLHGjFJYVyZKE9TIpYIgEuvm3 Yi/alCKgCCgCioAiUIuAKkRWfCdMDB4mvm6+8sK2j2UDiNHl0VPEBpGru0uZEjZKvJw95OXtH8m+ rCNQxyZ2l6nrPBUBRUARUATaGYHus7u2M7Ct0Z0D/Iau63m+vBDztVQjhcU5kWe1RrOdpg1PJw+Z FTVFntjzqfi7eMtAv96dZuw6UEVAEVAEFIHOhYASIitfr7NDR0qpg505ZeXi4Gzlo2394Z0bPl7s HJ2kX0Afk9dNiyKgCCgCioAi0BYI6A7TFqi2YptUidztXaSnb1Qrttp5mvJ395MAF19xAg5aFAFF QBFQBBSBtkJACVFbIdtK7VbX0FhWI1XVJ8jy3kp9WHMzVZg//1eD31oUAUVAEVAEFIG2QkAJUVsh q+0qAoqAIqAIKAKKQKdBwKYGpdOMthsONKM0VwbMu0HeOushmQ0H4+5WiqvKZMg318sDg66V3wy8 qrtNX+erCHQLBGqqoQOXlkpNeTn0cMFpWhuxc3MTG3v7BvOvrqiQ6uJiKMY1YtMIGRs7O7FlHduG z/k1ZWVSVVJS2279OmzDwcH0gw4b9oPrzXjwev132K+tk5PYubo27B2vV2Fc1Rg/x24pZnPFe3Yu LmLr3MgHFHOuKioyEfgbDKtunLbow9axoasAr61GnWrUbTx/zuFEmBFTju1E8xdgZu/ujvPmDTHj 3M38G2Fm5o8xGcwaFdMHsG6MJevYYe62wKDhRIEZ5481PWEdzh9YN8CGmBUWCu+XX8wfF3L9bbGm Z1qUEJ0pcu1UTwmREqJ2utW0G0WgXRHg5lm4Z4/krVkj5enpUrJvn1QmJ4stNrsabGqRTz8t3pMm NRhTzrJlkvC3v4lwE62/iYMo2Pv7S/Srr4prr14N6qR99JGkvvSSkDA12FzRhvOgQdLrlVfE3sur wXvxjz8uOd98YwhT/VKNMXtdeKH0ePLJBps4yUDsH/8oxZs2nbBO4K9/LaH33NOgrbLERIn93e+k PD6+IfGjRgEMwv7xD/G75JIGdQq2bZNj6IekqP78SRBIuqIxT/fhwxvUyfrhB0nCfEjM6hMPEhHH yEjp9frr4hgS0qBOEnDMfPfdE87FY8IE6fH88w0IHvuPe/hhyV+4UGwakThi5n/11RL+17826KMy L09if/97Kd29W6QxicHYQjDPgBtvbFCn5MgRib33XqnKyBCSOUth//YgzxFPPSWeUxoKB4ZEYgy/ ILEnuNuVELXrV0DzO1NCpISo+XeN1lAErB+Bgs2b5Qg2yvJjx6QamzW9BKkHcZsrxU+vzz+X4Guv bTCRVJCb2FtuEeoG9b0KqRaAIsmgLVvEc9SoBnWO/t//Scp//iPUWhqbQ2yCg2Xorl3iGBDQoM6+ WbMkD0SCdKh+HfbpdvbZMmj58gZKFDf3nWPGSNWhQw2UC46L6agD7r7bEI/6pWj/ftk9YoTYY7Ou 3wfrUDOKBLkJAWGqX7Lmz5eYmTOFWlPj+fO6XosXi8955zWok/jCCxJ///2/wIwXOUAd6rt9u7j2 bhjS5AAIXPY77/xi/hyn+5Ah0nfdulplqa6QdOyePl1KVq36RXBD1vG76irp+dVXDbApT0uTXSNH Sg1IcONCDIL//ncJ/+c/G7yVj3tm39ix5j5pvJa8byI/+0z8r7uuQR2SyCRg6XfBBeKPcTRWHetf rIToF0thXS8oIVJCZF13pI5GEWgdBIr27pU92ERroHa4DBggDoGBYo8fmpy4aQVDUXEfNqzh5rZ1 q6S/+aYxs9Q0UojsfHwk7IEHxCksrEGd7AULJPvLL6WmkUJElckJalLYn/4kdvU2d1ZOe/99yQfp aaxc0PzkPn68hP72tw3UFioQSSAepZjTL9QO1PG57DLxv+KKBuMqh8qR/MwzUpGaCibY0DRoA8Uj 4I47xGtiw2C0RTExRu2qoQmw/vxxPc1LVFVc+zbMZkAFLgPzoUJEE+DxUlkpDiCEYQ8+KA5Q1+qX jK+/llwQwsbjEszTdehQCfnDHxqY86jQpGJdCtev/yVmqOMNkhYIIlu/0PSV9NxzUgbV5xf9YGwk Nj5Q4+oXqmpJzz4rVTk5DRQiKmp2WN8g3DNuIJn1SzKI6CGslyPwCYIiFfHQQ7+Yr+X6ViFElRh8 QUGBsWs6QPry9PRseBPjvR1goYMgTyYlJ0loaJj4+dUm7TxZ2bVrpxQWFkkv3LBBQUGn/QQmg2Um JMRLSEgo6hXIwIGDTJ14yJGJCQky4ayzGth26zdYDLmzFPZSAupVTzotwge1DIvJeXFOjo2kwP1g +HytCuw4NSVZzp4y9YTjZH3iU1lRKbZ2tuKDD27jkgq2HBd7RIYNHyEu9WytSohqCdGDQ66Tu/td KXn5ecL77UT3WXZ2tsTFxUlffCEcOXJYIiOjToh1fexp3+b6cO1PVrZu3SLusE336z/gpNfwXinH F5+Tk7O4utbaytl2fn6+VFfBPwKn5Ly9vX/RD8fp5+cvqakpqOeGMUeesI8SfAHyHuW95gx7vHuj L3BWSsB9XlRUKP369T/pvX7aD5JeoAi0EwL0H8n87jvjW+KGvcER3/ONTVftNBTtpgsjkLdihVAl LNi40ahXAVAlaVrk/da4tMopMzL6bZClFi1aJC+98Lws+OmnBv2QVMz9eo6kgxGTGPDvU5UVYObr 1q6TZJCnN157VXKw0Z2u5IAxroOMRzJUBCLFUllZYTaR9PS0X+pr9Rrkke53335LYkBw6pdCMNgv v/hc5n0zVz547z0z9vplz55dsmvnDsynVDIzT56F3RZMftu2rTJ//k8y/6cf5YvPP/vFdFh/ORaO 5EzLiRDAkw3+vwI+BF/P+cpguGXzpgYXFmG9NuAJhRgWFhQagnK6snXLVtm6ZfMJL+N9WgHylQ85 PA/E5lQlITFBXnn5RdxvJccv4+fi2LE4+RxjnQO5+N133jaEpn7hfZGUlCS5uH/z0M/Jiq2tjSzG 52sLTAJvv/WmbNq08ReX7t69SzYDk/pOnaebv76vCHQUAvTpCLr+egm4/HKjaigZ6qiV6Nr9ek2d Kv1gfg0DKXIA+c7Cd3Hcn/8sldgvGpdWIUR8uuYTtLe3lwRAevv8s0+xKZWYp14SFKpBLi7OhqAM GzZcgiHTVUCupKpDMsENh0/9fFLfC8e6xYsWyjnnnCMzZ14s/QcOED4dZ2dnSVZWpolHwzYzMtIl q46EsG5ubq5xqgoICJT+kF9XLF8m8+bNg2IUItPRlg02lDSoMDk5teSKT+4ZcOTLysyCyuNkcoQ5 OTsZ0pMKCZObkyPUrtKSUhkLm+X+/ftk08YNZpNNgRrE4u8fgDHXSO/efWTa9HPNaxxnAdomESuk KlRZJaWYo7Ozi/j6+UpfPL1/i3FlgBxy3MSBm6QHnvi9oEIRS86PczXlRK70Xfv+PeHsLIchc3Oz xQ5rGRIaKgsghRO7JMioJMHeUN68fbwNIRg0aLC57yoqyg1Z5XrkF+Sb60la+DfLD9/Nk29A1i3F 3JcgKFy7zz79RDbjqWIM1p+KI+9PqpAlJcWmHcu9QuJkiz6PwH+gHP8mOec9wrZYJyMzQ4YMHgyy tu74fZuOe4/Fzc3dPCAMxHh79uxpXuN4eX+SkFfgM8N2ysrK8VqeREFBolq5EHOvxhj42eAP70sq Rw72tU6gvNf5mdCiCFgDAnTsLYWC2aA0OtllDePUMXRNBFx69JAe//63hMOsWQNSlP7hhxL/xBPm VGD9YvcoSmtAQAKRnZNlCEBeXq707tNHvsZGs3vXbhk0cKDQBObrFyAHDx6U8PBwoyh9hEHxqX7l qpXGTEQyMW/uXPNFf+XV1xizSL/+/aUYX/jfQ1ql2Y1qy9Kff4aCtFb2gTzRPLAJm9YikChuUtxg tm/fJquhthw8CAc3bJ4Zaelms/zkYyQJ3bdXfH19sRF+L2vXrJbNUAeGw+aYhb79QaY+xpjWrl1j xjkAxCoBm20ENqHD+JvmjJTkFFmyZDFMFh4GtnJsuEdjY+XAwQPiA5PIV199KbmYPwnPjh3bJTAo UDau32D6JEY0n3BjGz16jCxb+rPZMDeAaAXCqY9EjBv9ls1bzYYXGhgi7gHe8tLeOXJJxEQZ4B3d GkvVqdqoqKmS1/fPlbMCh8iYgIFy6NBBKSstkxD4CZCQuOIp89OPP4bKUrtO2VlZuAc8ZNHihTC1 BsvRo7FQlOYYkkR1ieuwZ89eQ5S4hvtj9qFusoybcJYxf1Jh+gaKIMn6siVLzEmO+PhjIFBl6LcU JOlTs44lUKGoVG3csEHycnIlMioa7e6WQPhAvPP227gHt5vxhYWFQ3ncJ1HRUSBJKdIHT8JzYZ+n Ga5nz14gM6WGeK+Dnd8EwMD9+iM2j52oHxt71JBjvs77lmTLDQ8exajDufn4+siyZUvx8FEkhw8f NKSb5MkfDyU/QYlkH3379BXnxsddO9UdoIPt7AgU7twph3FayJzQ4sOpEqHOvqSdcvy87zzgcF8D 4aQQVqgS8AbP888X54iI4/NpFYWIrZGMHNgfg4jK1XLppZebjWvGhTPwJV4KGX+z2NvZw7/C0Wwq e/fukb0wN11yySzx9PKWaiglh0FecrCx2MB33N7e7rgwwifeLRh4j+ho6dGjJ8jQUmw08JOAPwe/ +H/4/jtjlrjmmmuN8sTPGh28zoET1wx449vhb5oSSKgiQMR8vH3NpscOBsFb3sPD05jUSFQ83N1A 0PJBsvrhKdzD+GNwsyFxOmviJOMfwg33nHPPkUUL5kNxKMBrTmbu+7FhrV69WvpgA6IPi4eHh8Rj XPTrINlzdXMFMVqPzfJNuf6GGyUY9sudIG4kR7uw+VElcMHmvn37VklOSRIPT3fZhyOp9rbAQr9A /nfD2tgZ/6Ai3ANTcLySJPnCGTOMSrJ+3VpxAKmhDw/vm804Ast7cty48UbNswO5ocKTBuWSf5Mw cE2pysWAXNPfbMvmjXL57NkSAGJzHu7fs3GipAr3RlzcUVkO8jFjxkWG7G7atAHtJBvFkwSpCPcJ 18kL93MJ/k2F6sihA4bAU/HZj3FcevlsPCDsNApmHzwwfAelkMUVJCczMx2fmQOyCQRrBAg670E7 3LwkcdlQnIKDQ8ypljlzvpQ1eICYiXubbfPepTJEhaiivMKopIsWLjDk3NHBEe/XKlFaFIGOQICn j+gEW4zvwdKjR81xci2KQEciEA7Hc/8bbhB3nHBr7EzeaoTIHpsKn9BvwGZPxYVmjF44yjdo8BDJ yc0x5jI+3fqBxKSnpcLROV4mTpoo54G4TJt+Dp6u95gvdJoOaIaqX2LwFO8EkxuJRkZ6KjarABkM MuMPVSUh4RhIVol5AiehCAfbYx9O2CRISnx9/cxGRXLCv4ciRgM3uGhIaMOHjZCg4CBDhlhIbmhi 6w+y1RPO3LYgI87YMMePP8tsuinwaYqF4/OgQUOgZsGsgY2QmymJFsN3pcM0Eh4eYVQrbmh8Mv/x hx9NmzTLDYF3Pk0eMSBP3NzssWHR893Bwd5sbmwrBcpEGgjRpZfNlgk4YUCipJEz/3c3VCOFCZ3y L8DpAzpNH4IyFxYWataL5k+CReflvsD/6NEjRt2ZOm0a1rS/jIIqR/WFpIGEgSZTd9wTvGcOQQGk iakgv0CGDBkq5557rlEXPWCeYt1KKC9ct6ioKEPEqf5ERkQaFZFtUNXkl70bTJ9RUIt69Ig2cU9o 6qOJi+MdN26cbMcpGV+olWwzDZ8Dmk2pEFG5omN2Ij43PXr2kGl4kqapjiRtJ5TGaDwQOIHsDR8+ 0hD1OKhHLi6uRhHlfL29/+eof/BADIZSJbMuvdQQOy2KQEchwBNOmTjh5Yh7PhjxYxrHAuqocWm/ 3RcBBm4Mf+QRiYZfsCseTOuXViNEFnMQzQ4kJjSd7UZ8hwL4bdCMQF8IPsVSYeFTdG5uvjFz8Qt/ CMgNTw/RPDB12nQpw3XrYLZKh6mLvjvBIBSHDx2GGSMFJKuPVGLzoY8HN5DAwGBsIkl4st9izBxp KanGn4Q+F1QS+IRshw0wFKaoY4h3wc2Ep9by8/KNT4nxv4D5hP8uKirGGCvM0z7/zfe4YVlOzZFE 0WGX5hB//0CjeBXjuiK8RjJFpet7+KTQjMK5khglJsZLMPqmSkAl4PqbbpKffvzRKGgkTLt27JCj UB+y4DhO8wmVgIyMLHMyrhjzIDdsGCu1+97InLnlpBVJDc1lNLluh/mVjvdhkRFmffjD+4z3ChUU OrLvhPM7yQxJEE8SmnYA7uWzr5QZF10Ek26tc3w2VMpVUGDo0M97LA5PtVRoqCS64BQYzbS8H/r3 G2BIEf182FY57jfetxX4IYnlvcP2eI+SpHmCNLHQtLZr5y6sb6KEgUgbHzrce6zDk2NJuF/mwOxK MypPTPKHc+Rc+Vnp1buXTMZpxs8++wT+bSVmrlQ89+K4rwWbICilh6i4AhNeo0UR6BAE8DCQDnM2 PxOBt9/+iyCLHTIm7VQRAAIuEGvc8FDauLQKIaIfDJ9s6TtEUkNyQHPGGpia6PcwCA6pEVE9DEng BhAI/weqQmvx9ED1xh6MjUSoT98+5kmZJov3331HXnzhOaPmUC1hctMNG9aZzcvb08tsePSXGIyn eW4APA1WBULC16m4+MK/IhlEyQYqD01p58JWWIyNi+a7gTjiSTMXn9A5VpImKgBUCMLw1M9NhPNI AsGqqqo0TrYso0aNMcrUl19+IZPOngIyFnR8Q4yGQ+xFF800baTAJMN59OzVWyZPPts4TBOfJIyH PiRTzzlX9uzec9yXimYbzqW8vExGQMYbALyWLl0qrjDh2dnDiKiJTeFaU3urOoFEkuBy86eP2c23 /koOgiyTgIwYMVIKsG7xIL50ZKZpivcZTx/yaLsvnKxvRCwMrgGP52fDcZ2t0pfIA/cU1+Fs3LfL Yaai+hKBeyEW/mEkK3SIp1/bOpjlSKYHQ+3zQZtcb95v7K8H1pvXRoD00HRM0kyl1NPL8/gJMrZB xXQtfOBmQHWkSZbKFk3HVDxnXjwLZOYwTL02RlGdcNYEGTp0mJmvMb/h/p4161KEE/A1BKkC/fF0 JJVQ9sn+L7nkMnPKjibDE4V40G9ERaA9ECjBw0QuXBUc8f0XABOFFkXA2hFolThENAvkYWNgVnY+ SfPpnYVOwjxdRkWIT8okP1Rc6FPDUznZOPHFzYi+N3RSpVmKBIUlFuoOo5fSb4imJMupGyo9bItm tRo43FJl4dN5Jvw6+OTv4OhgToxxs6RqxSdrHtSiOsPTPyRlVKz4ZF+/GNMF1C2OkWTJ5Iqp+zfb ssR94YZDlYHOsiQxPEHG8XHDdoHvCp/K6dORh01zw4b1xqRCx3COn31wg6qCekYVin4uJJE0p7mB /LBtT+BHNY3X0zSTVZYn/RCHp7vnMntwMOIQDbjSqH8kqTRNWWIH0aeHpk0P+H3xPrQHrrUmWncT 94nxiWhWoiM+14AmNBIM+rPxnqHiSKXFFSTIDv5rJNU0NXE9eK/xviAZ4b3Ee5r3KFWi4rp7ur5J k/eK5Wi95T7ifUa/Jq4zC8dD0h0Kx3CuMz8LvGdt4DPEMfD0JA8B0N/owIGD8Fk71xBsKlIcB02/ lvuX9zPx4GeMjuJUZjknc8IMnx+2o0UR6AgEUj/4QA7+6lcSgAfc/jzY0ChfVkeMSftUBE6FQKsQ opZATHXm77DnzcaH5nyE1u4qZe3yVTBlbJA//OmPYufUMAppc+aYV1EsPedeLW9NeECuiJranKpd 4lomdx089zp5eNgtcnu/S894TqUFJfLqSy/KebjHho5uGMn0jBtt44rPP/uMIT933HlXG/ekzSsC rY/AIURaTkI+rAEgRkGNohS3fm/aoiLQcgQ6nBDxKZp+PVSK+PRrjeVwdpwcyDxcN7Raj56TOTqb sEF44qepkL+dEduIZr+TFUuYoV/k2EEFB5j7MqAQ3bj5Gfl62uPdNtv9wLnXyPn+w+T6aJg9K2sz MNcvp1oPsxz4odrINaGKx2PslrhGJ1sXZlYK9wiRYcEDjXrTEYWqlSMUTypeWhSBzoRAFdTXPcgO UAR/y6FI3umOOFwdWfgVzO8ADet2+lWwfL868Ih2dynMSMH7AxuDHmI6zaK/vvVjWXBkufTwCAdo DSMNn6yqLc1oIHg03ZzpMTFSr3L0l1iRK/8863cyKnBgd7k9j8+zvLpS/rTyP5KZlyZBTt5S1UT8 fwEUfdVgyqW58nQ+Wfa29nK4IFECfcLlzWmPmJARWhQBRaDpCFTA7HuEWclhEu6LKMEOjbLJN72l ll/5za5M+WJ7hjjBH/NMv4tbPorO1UIFaIGPi7383zkREuXDVLJdt2Qi9mEBolf74ji+EqImrPPz 6982/j4X9zm3yYTINGuhmmdItElVGYLIxdZB/Nz8xdGe+Zq7VyFfzy7KlvwKnrgDgz9DLJuzHvY2 9rI4YZ38lLxJvpj+uDg51Pr+aFEEFIGmIVADX71yBCJlTDgnhLXoKP8hfmf86dtY8XSxk+Fh7r8I 6dK02XS/q7h1zQORvGZEoMwafOq8o50dncNI+Jr38ssSiYC5SoiasJqvbHxPor0j5OJ+5zXhar2k KyCwIn6TvHXwe3lvyt/E2aFrPyF1hfXSOSgCJ0KgEodv/vbTUbl+VKAMDXVXkJqBwHMrEiXSx0mu HBbQjFqd79L4f/1L0v7xD4lEiIiOcY7oZJjVQJUoqzp9otBONi0d7ikQ4Hrz1KQWRUAR6LwI1Pp0 ihSWaYTs5q5iWWW1OQHb1YsdDq7wm74aPptKiLr6auv8FAFFQBFQBBQBReDECNSRPpp3lRDpTaII KAKKgCKgCCgC3RMBpl2qK0qIuuctoLNWBBQBRUARUAQUgXoIKCHS20ERUAQUAUWgVRGoRlyXcgTd rdZcegZX5tFkpHkt1o2AEiLrXh8dnSKgCCgCnQ6BfOSpPHj99ZKzZEmnG/uJBszE4Z988okkIOk2 y24EmzSJm5tY3nzzTdmzZ88pr965cyeSfh864TXM6LAfOQtZmMiZ6X+0tA4C9B0yBSEalBC1Dqba iiKgCCgCikAdAiUHDkgeElQX7trV6TEh+fgKgftISJgcnESIuRAtOQuZ95LF8tsyYcv7/JvJpy1/ M5/iicq3334r77//foO3eC1/tiPi94cffmj6YAR75tFk4Xv1Yyvz343H0ekXoK0nAAwZac5Gnarb GmltXxFQBBSB7oeADaLCkybwd2cvVIeoDD2CnJtTpkwx5CYpKcmoNK+//rohMWugiL300kuybNky 8/7bb79tfpaCFLIwITSTRJNMPfPMM7IWiabrF7bFZN6Mpm9J3Mzf/0KMnBdeeEF++OEH+RwRv995 5x3heJgFgYmh/4H4OYsWLTJNzZs3T1577TUzHr6npWkI+M6aJZHIueeNJNqqEDUNM71KEVAEFAFF oKkIWOLXdHAcm9aIotOjRw/hz2effSaurq7i4OBgSAhJ0s8//2zIDomQp6enbNmyRQ4fPizz58+X oKAgSUxMlIwMpA3BNVRv+D6JDuvVN7nRVObi4iKTJk2So0ePGpSXL18uISEhchZywvXv319Gjhwp g5ETjm3zGqpVfJ3mtJycHHN9VlaWUY9WrlzZ1JXq9te5DhokPrfdJi79+ikh6vZ3gwKgCCgCikAX RcDW1gZJsm1aFGTVzc1NfvWrXxki8+STTxrC4e3tbRDr3bu3TJ061RCTmTNnGvKTlpYmEUhXcvnl l5s69PkhkaIp66233pINGzYYMmRTjyyyTibyvy1YsMAQG5KnhQsXyuzZsw0hGjp0qEyYMMH8293d 3fRBUnbTTTeZPki0AgIC5Pzzz5eePXuaPrU0HwFViJqPmdZQBBQBRUARaEcE8osrZOmOVPlhY4L8 uKlpP/M3J8h3G+IlMasU6XfOfKuj+YkE5Xo4iacgPxtVGJIZvkbTFX2DSFL4uwyn6/ge/03SQ2WI 79HXp7y8XPr06WNMa08//bQhSSwkSlSMSIT27dtnTqORdFFxsvgKcQyWU2ps2w7Jw319fU1//LcH oi2z8N98Tf2IzuzmPPO75Mz665y1GNdbszh0zrVryah1zVuCntZVBFoNgX3xubJgS4IkZRVLQkZR k37icV18epEUl1eLXQtMdyQl33zzjbyMBKAXXHCBISJ0bCbpsDhXW0gIiQ9JCd9/7733xMvLS4YM GWJMWvQhomo0Z84ceRc+KxayQ38kXseTaF8jwWhubq4xx1122WXy7LPPGr8hKlE8uj8XmdnZb2ho qPFn+vvf/27qjho1yhAm9k/CdDLH7VZbkC7akN2jKF10bq02rZ05+8TX3Vv6evdstTa1IetGILEs TXYVxspV0eda90B1dIqAFSJQuG2bZMMRmI6qXvCLaWk5lJwvQd7OcuP0XjKmr3+Tfkb38Zex/QJk Z0qRRPk6I1HpmSVpppJD1Yek5+KLLzYEhOapXr16Gd+iqKgoQ5L8/PwkLCzMqDV0miZJGT58uAQG Bpr3SWpoSiMBonI0cOBAQ55IYIYNG2be4+s00bEdtk8THH2LaJajYuTs7GxMZ2yL7dJ/aPz48WY8 7IPj4evR0dHGh6klZU1snvi7OciAoFolqzuUDs92n5eXB494BKyC91trOMC15qLZ2NgaWfT9nV9I kFugzOp7nlRWM8y3dUkHHCOfPviBoMOftRd+AfBUBZ+u6tvRrWXcDnYOsiR+nXwVt0xeGP9Hk+2+ 2qy79RRzB2LdPfAl6Y0vaC2KgDUhkPLGG3LkN7+RyMcfl8iHH27x0FbuTpXcwnK5dEJks9rCR0T+ +lOsXDLIX87q4dmsumd6MR2pX3zxRfnnP/953Cx2pm11ZL0nf46XfoGuMnuof0cOo1377nBC9OCD D8l3P3wvPt4+/H63qkKVlWMqKC+E5Gonbo6uDWI+WMVgMcYK2KZpp37h+efMU4m1F57C+M1v7zFP N0544rEyfgmShrghlWVSVFEivs6eyPhMYmxdqHKM9CuYPn26PPfsM+bJUosiYC0IpH3wgcTeeadE /Oc/En7//S0eFglRTkG5XHZW8whRVXWNPDz/qMxqR0JEU5jlGD0VoM5augshKodfWCVO7dlDketQ QkSl4Lbb7xA3SJIjRoyQUkiS1lW4C9qIExQDqjDl1QyGZV06lh2c+uist2rVKrnnnnvknHOmWxeE JxgNT0T8+f/+IhfNmCHOkIOtzwGwBidT7MURP8UgRjWGsVnXujtCCTyA4HeJSYnyLnwMLE6VVr/4 OsBugUAJHnpy4CjsdfbZ4gbTUEtLZyJELZ2rtdTvLoQoGWpeBmJMBSA+VIcSItpkH/zz/8mtt9ws I0GItJw5Ai+88CJiVAySc2Gzt/ayceNGhMH/FE6KL1n7UK16fDExB+T5F56X/zz11PFjwFY9YB2c InCGCCghOkPgWlCtuxCiRKiYyf/3fxIGp/mOP2UG5aWyLgx5C9auW1ftjKcKquCTUz+0fbdewDOc fEVlBdS1GmPi06IIKAK/RMCi7TrZ64ekufeHgx3jN3X9Yommzt8drxA99GfEd7hOxo8bd8bI05xF uy3ttSez2fIYoiVmBB15GSL9VIVt0umXHv5NKfVzyFShLwc4ObMfmoM4Njo9t5UDMef2/PMvwOw4 vNMoRB8gL89LkCpb2wmcWHOdT3YfWMxzVVgXfkWe7j5oytpb1ri9/Xh2Ik/UK6+8Ks/89z84+eLd lKHqNYpAp0TgjBUifI//cd4RGRHhIZOiPaW8qjts8S1cYnwxUil5dW2yTOnlJVcOC2hhg9ZdPQmh DZIeeEDCkYalyxCirVu3yn4EtQoKCpThI0aao4eWQtPc3Llfm7DnRUXFOI3lI/369T/lKjHSZ0JC vLlmzJix5kjlqQpPFmxYv17GjB0rcXDQGgnnZvp15OXlCk1Ekyef3WRy1dzbRwnR/xBjCPxNmzaa E3eDBw8xR1nrl4UL50uAf6D44H3mHBqEsO2nKownQudvtnMyksUYI1u3bgEZPa+5S9ei65UQtQg+ rdyJEDhTQsQpPrcyWb7dk4UDEnhAVT7UpFUnb6zGQaJ/XxghI8Pdm1Sns17U5QgRF2I1nIq/+Pwz iURMiLLSEnno//5qYjaw0On4L39+UCZOmmzIkqOjg4SHN9wo6y/mqpUrJA+hABgH4uOPPpArr7xK Ro0ec8r1Php7RD7AyYqbbr4FQbEqJDg4xChM7h7ucjQ21hAwqkRtUZQQ/Q/VWGD96CMPy9jxEyQZ 8T7+8Mc/NSDHTzz+L+QHCpMrr77aBEBrTJgar8+uXTvlHYTb/8c///ULUsxItLm5eSBf3nL40GEZ gvD67VmUELUn2tpXRyLQEkJUUlEtGYUVUgW1SA1nTVtFnqp1dbSTAHcHnLJtWp3OelV9QtTxPkSt hCKPnfdGWPRLZ10qCfHxJqDVzp07ZRd+SESio3vgpFi1IUmenl6GJO3YsUMOHjwo2xBEzJK9mCrP nDlfmQBXDJzFU3AhoWEmw/CmTZtMBFJeu2fPbtmK01Lm9BnaOno0ThwdHOEXU4mgWuGyCflqXnju Wdm/dx/68zZj2LlzB/LYrDdHuOPi4mQdgncdiIlpJQS0GSLA9WVsngsvvFBSkpPkCIhqLBS7LUiE yLWKjIqWSqwR15HXVlRUmvtgF8xPO3ZslyNHjpg8QVQIeX06/r0Lr8fi1AwLzWN8j1FjFy1cIG+9 +bocOXxE/PyhIGJd2QbVotKyUqNY8t7ivWJ9J+n0flEEugcCLkjbEenjJD0QnDFaf5qEQQ8/Zwny 6PpkqPEnoEMjVdOpdsmSn01o8/Dw8BZ9OtNSUyUG5IL+OyQoPXv3kqTEJNkM8wnjyGRnZ4mHuwc2 xk1mcyJhSkX8gbVr10haehrMJ8UmQugPiImUhfcuvXy2CapFUxmT520GGWIfsUdjZfu2LbJ3NzfF ODPmzZs2mD5JxIJDQvE7ARtuEfpPxEbpLyuWLzUb5jaY9dLS0uUgxrl7924QojVyDMSIYdhp4jnT wvkwYWBISLBJ7GfthYRyB4jqDBy7b+04HQxfvx640jeI6xoREQWMj8oxENbU1BTjs0Qn/myYubj+ XEMSIJKedKw7CVEY1MP4Y0clOqqHIcw+MLEWw7w2fPgIWYTki0dxD5DIVtdUGb8wR0cn2bxxg4mp tG0b1hj9sO01q1dLBsYQE7NfImFya20/H45706bNSOh43nE11NrXXsfXPRAow3dhDrKy2+E71L4F 320WtI6lF0ppeZX0j9AgpN3jDmq/WRZABClYvFg8EYW8yyhEPGpTWFggviAgv4Kqs3vHTpip+hml 5+clS8yJJjrbVlSUg6ggJw425QnIHDz7iitMePW9ICh0yB0wYIDY2MEpt57T9Z7duyQBG+e5550n MXjqTwbRoTmt/4CBRoU6CgXirLMmgoT1Rh82wtM/DK0+YeJEGQS/pQKYZnZChaBydDbyz2zbvhV+ KWnSt29fo1qlQH3S0joIkKAwnpUjyMm9v/uD5IL4ONg7GNJNclwGMyZjH3n7eBuT2fp1a4xv2VXX XCtDET7/AMhLAQIekvykpCSba/phnUmAeH8dPHjA+CZdeNFFMhq+ZZPPnioDoCRmZWaBUKUbH7Kh Q4fJ/v37DclmWH8WEjAtikB3QSB35Uo5ctddkoUHCC2KgDUjUMOMCRhgDUSNrkOIYN6gojN58mTj F3L40EEphFoQBOdqZ6faE14kH9wcbW3tjGJkA/JCUxo3MBuQpY1QWej8bI9AjPQ/YaHyEw/zCB1n 6agdBZMLlQB/EC9fP1/TbklxiSFQdKJ2cnI2ztM0xZTALEMfPidXF/gk5RklIjQ0RCLQhh1IF3Pi 8Hr+W0vrIGBZ55EjR0rffn2Fx/vpy9UDBLZX7z4mH1ENFDWukZOzkxRD/avGfeELJZAElafPVq1a IYHIA3T48CGj3A0cOMjcN3FQmQrgW1aEOlT1auChWVCYDwXSxig0tYkVK8XHh/eFLe4je3HB63a4 3+w7ccTa1lkZbaU7IVAN/7oKJhtFaiYtioA1I+AIvuCOwzWOISFdhxDl5ubgBFmRIS4sY8aNNwn2 4pE1eGhdFOySklIphwrk7OIseXjyp48PT4DR/ygEYHBDCwDpGTd+nPwE0xn9fbZs2WxIUFlZuTmp FgxC4+vnb8wxGTB/sW52VpZ88P67sg++JVQV0tJSTVtUFw7B5MKTDeFhERKzfx/MZytkQP/+xnxS WFgEwlUhhRi3ltZBgJhXV1VLMU4TspDkxECt2bB+nfTGv00maig3NGmRLPn5B8ibOG65aOFCBDf0 MRHTnUGUSKKOwtRGJZA/7p4exswZEhosH338oSxatNCQ4bQUmsRiamNZ4z/ff/utbIJZdsCA/oY4 Z2M8VAyLQI61KALdBQGbugcAS4yX7jJvnWfnQ8D/qquk74oV4nfJJdJlfIi4AXr5+BgVh0pNCHx5 SFr8kQV4HMiRLVSY8PBICYWvUiicpAfBzHEMpq4xY8fhid4H/iWp0h8nwYKCg40prAQbYmZmJtSm SBCk8eKIXFFZ+HscTi/xNRcXV+Oc3advH5jH+pj6VJtC0a8XnHrDI8LFBYqVO/yWePJtODZaN5Cn IpAgtkefoqCgYImIjITfUYhRnM60qA/R/5Cjv5d/YJBRCanA8bQfHairQJImwkRKUxozQ1NN9PX1 k7G4N0iORuMUIVWhIvh+UUny9vYGKSqTSKyPK3zLqPLQn2wM4mXl5eYbB/4++KGCyHWl4z3XuIIx qOCndDZSFniC9NKHLAz3HDNPk3C1ZlEfotZEU9tqTQRaO9u9+hC15upoW/URsMH3tS32gy4TmLGl y/vGa68aReBuJBy1HNVvaZvtWV+P3bcO2m+9/hoUvhT5E4KFUvmz9qLH7q19hbrv+FLfflsOIblr FNLKRP75zy0GoiXH7lvcuTbQbRBQ5xUsdTQcr6dMndYpyVC3uVPbYaKR0dEyCcpOZyBD7QCHdqEI KAKKQLdCoEMJEeO80A/Do4Ofxi+ccZGMgBNuZy08Yk4TEM06naFw3RmXqbXTdrR07rwPzmnnaNMt GbOnh6c5GOBo36Ef45ZMQet2UQQcHeyMX52zk0OrzNAJ7ZlAX1oUgTZEoENTd9DU8/v7/iA9odDw 6DOdXDui2NQeuuuUHzeOnSEF5s2bJ5dedikCU87qCAib1SeDFT6FDMPXX3+9CWZpLch3pvuAsbWO HDks2xE/6fY//EMKKxyYh6dZ69Cci9uu5eaMQq/tDAhUObmI4xfviPvjD0nR7x+Wsjv/KHY43Xmm hIbfzjHJhRId4CqXjGtZvLrOgJ+OseMQ6FBCxGnfdtvt8v7775kTOczcraV5CFioXAVOq70GH5jf 3H138xrogKsPHDggsy67TA4fPCT2DvYmcreW5iHADPd06L7u2mvl+vv+LXEZFSBE1c1rpDlXd/Hw /c2BQq89NQKVrp7iP+dNGfDGv+TQDfdJym0PiAMOK7SEECXllMuEfn5y8dgwhV8RaDMEOpQQUSG6 93e/F1fEhBkyZLCUYVPX0jwEaHKkQrQYkTZvvPEGuRKBJq29MFXG3//xKJKhnmOIMOP5aGkeAnb2 dhKLqNp0An/91VdwotGteQ3o1YpAGyKQt3iRHMNnPPzPD4nvZZe3uKe1exHmJK9ULjurNtCpFkWg tRDI+/lnKfzyS3G/+eaOz3b/0J//T+64/TYTSVjLmSPw+utvSP/+/WTatGln3kg71WSakc+/+EJe fOGFduqxa3bD/Hk0PT791JPihTABWhQBa0GgGqEuyhGI1hEhLmxbwUd01Z5Uyc4vByGKtJYp6ji6 CAIJjz8u6Y88IsHYjzrcG5MOtswTpeXMEaBCxPg7/N0ZClUtmnuoEGo5cwQKkErEJI1Vc9aZg6g1 2wQBxnVxhm9oa5AhDlDN6m2yTNooELCFhYo7kQ1iDXY4Iaq92dVk0pI7s7Pi11nH3ZK1as26il9r oqltKQKKQHdFwPJMaRWEqLsugs5bEVAEFAFFoO0R4DN3FXwV9afpGLT9qlhfDx3qVM1Emw8iKvD1 118n45ESQcuZIaCRqs8Mt85eSyNVd/YV1PE3FYGWRKqevy9LvtqZKQ6I2aWlaQhUwhLv5+Yg908J kzAvx6ZV6qRXJT37rCQ98ICEI6elEqJOuoj1h62EqAss4hlMQQnRGYCmVTolAmdKiOiM8cd5R5DU 2UaGh7lJRZW6Z5zuBqgN5SLy475s+dWYILl4kN/pqnTq95UQderl++XglRB1sQVt4nSUEDURKL2s 3RGoqaiQShz0sINztS2cVVtazpQQVcJM9refjso1IwNlRJj15ydsKU6tWf/Z5QkS6essVw0LaM1m ra6t+oRIfYisbnl0QIqAIqAIdG4E8tavl8O33y65y5Z16ESMkQz/KSlvw6ClHTrDtuu8HGqaHSPA dvUCBzOjG+K3EqKuvtg6P0VAEVAE2hmBkr17JQvphAqRpkeLImDNCNQgBIzxkkIYGCVE1rxSOjZF QBFQBDohAjZ2tcld4bzTCUevQ+5OCPjMmCGRzz8vXlOnKiHqTguvc1UEFAFFoF0QsJhauoPJpV0A 1U7aCgG3ESPE7w9/EDdky1CFqK1Q1nYVAUVAEVAEFIFmIFBUVCT5+fnNqFF76b59++To0aPm38xa kIa0KVqaj4ASouZjpjUUAUVAEVAEuigCjADPfItvvPGGrFy5stmzLEEqqj179pgMDAkJCZKUlNTk NmJiYkzd+fPny2effSZ5eXmnrZuYmChvv/22rF692vS1adMmeeedd05bTy/4JQJWQYjsbK1iGJ32 /rAFfvzpTMXGxhbuBepf0JI1s7MFfpagIS1pSOsqAorAcQSKkZj2ueeekx9//FGOHTvWbGTS09Pl 1VdfFao9DD5MxaYphUQqNTXVfJc/9dRTsnTpUlm4cKFp41TlZ2RrHzt2rMyePVuys7OF7RQUFDSl S72mEQIdvosyOWVlZW1SUv5bf5qLAUKxI6lrLW6dI+gYn5xqx8txW/7d3Hl37+stn5ca4Ng5Vl2/ exWBzoFAaWmpeHt7yz//+U+56aab5PDhw/L999+bhNTffvutMUd99dVXRoX54Ycfjk/qww8/lH/9 618yD6frqPA88cQTEhcXd/x9Kk7vv/+++dui4rANqkgsJE78bnRwcJApU6bIiy++KOsRvoCk7Lvv vpP//ve/xjTG8iyiK8+dO9eY19577z1ZvHixcNw5OTnihLhPzs7O5roFCxYYcnY6UtU5VqbtR9mh kaq5kd/9m9+Ii4urDB82TBftDNabmeMrKipl7bo1ctedd8q0adPOoJX2rbINR3H/9sjf5YLzzzcf Xk1S2nz8+aV56NAhSUpOktdfe008PDya34jWUATaCIGUN9+Uw3ffLZH//rdE/fWvLe7lTAMzMnfZ w/OPyqxB/nJWD88mjYMKy4033mhUludx+igzM9OQD6o2f/rTn+Tee++VRx99VM477zxDQC655BLh 9zDVnAEDBhiFhvV47c6dO2XQoEEycOBAY9Lideeee64hKiRFbINK0p347t61a5cZnwuyr7/88sty O+I4LVmyRK655hrTFtu+5557jK8Q23V0dJRxSHn19NNPS0REhCFvb731lpyP79UtW7aYNr/55hvZ vXu3XHfddTJhwoQmzd9y0ZM/x0u/QFeZPdS/WfU688UdSogI3CeffiY7d+wQNze3zoxjh46dxNLe 3s7khOvTp2+HjqUpnScnJ8uHH36EL4JCjNuhKVX0mhMgwCfCvn37yA033GCIpRZFwFoQSIVqEfvr X0skNutwbOYtLSt2pUpRaYXMHBvR7KYeASG6sL+vTOzp1aS69Nu577775Oyzz5Yrr7xS+ABHxefx xx+XRx55xJAl+uz84x//kE8++URCQkIMSSE5mYqj2/x+o5pDUvTSSy9JVFSU0DfoqquuMu+RzPAB hhkGZuDI979BGnktyU/Pnj3Fy8vLvN6rVy/TH4nQ73//e/nLX/5i2vrjH/9o/k0/JypENPEFBwfL 6NGj5TU8HFFdopLUp08fo3KFh4cbcnTBBRc0af7djRBVwsxYmZIi9mFhHZvLjMBXIMR7aWkZVIJq w561NB8BKiz29vZmU+wMfjk0l5WXl+GnQte8+cttanDN+XnhmlMt0s/OGQKp1doEgeL9+yUbPjg+ UCvcoP63tFAhWrcvQ8b194eZvWmtcTuhQjQnpkDumhwqoyOapqJmZWXJ3/72N3n44YcNmVi1apUh KyQh//d//ye/BtGjeYxkhWYwkpQUbKhDhw6Vc845R2JjY+Wxxx4z5jGavfg+zV6XXXaZHDx40Pyb 6g6/sydPnmxMayRXexHMkr5A9CN68skn5cEHH5T+/fsbwvPnP//Z9B8YGCh///vf5Q84Jr5u3Tqz f7LvoKAg05aFENExu3fv3oYY3XrrreLr62v6bE7pLgpRyiuvSC7Iri8UQDtIf482B6TWvpYbuJOT o/li158zx4CbYmdxrObmTWVI1/vM19uCHT8/SoZa+1tJ22spAg4BAeI5caI4QrlojWKHTPXHMkok OatIMvNLJSPv9D+8LjWnRA7nV8vUvj4S7Nk0QkCTF32Dxo8fL/7+/oZI7AfBO3LkiFF36JZAMkI1 iCqNn5+fXHjhhcbPiNf169fPmKxyc3OFDtYkIyQr9Dsiubn88stl69at5vu6R48esmbNGqMC0TQ3 BLFwSHC2b99uiAw/2/T/YdscTwBwpTWFpjDWnzVrlhmLu7u7IV5r1641v2lOp6mNp86ocJEwcRzN KWti88QfGe8HBLk2p1qnuzYP6WWy4KPlDlNmhxOiToeeDlgRUAQUAUWgXRHwcnOUMX39ZGw/fxnX L6BJP2NxHa/flVIk0X7OEulT62h8ukKiQafqvn37Gudkmrf4m0SJZjGSFxIlmrf4HkkN/01CQ5MY TVYkJXS+HjVqlFFq+EOSEh0dbZQkPtDwGpq6SKio9JB48X0qRz4+PuZ9ywliT09PYwLjONg3lSaO wzJGjoGkh+OmqY3t8j2a1UniSNKoLjWndBdCVLBxoxTAKd0L5LLDfYias0B6rSJgDQjQ9m9RZviF 4+hIda4uhACPfEGq51Mdv/R4LQu/5HhKhfUsZk2+R/Mh36MfGF+nKay+2ZPv8/QJf/PLztIu2+TT piuyiWtRBBSBEyPAj+Nff4yVS5rhVN0RWFKRojpEQmQtpbuYzOpnu1eFyFruPh1Hp0EgOzsLwdN2 GzKyYf06CQ0NM6Rmy+bNIDO2kg2pfPWqlRKEp7TV8D9ISUkVfzwFLl22VErLSs1TXxr8BHbgyS0h Id6Endi0aaOR12tJjttxe/96SODff/8d3ktD2/ayBE8yziBarLd69Uo8RUYfP2LbaQDUgSoC7YQA w3osPZRrTktF+FjnwQM+BNEUxh9rcnvoNgoRQhtQIfK8+GJN3dFOn0vtpgshQPl6184d8vabbxiS wmOylMt/gJ0/7lgciNEm4z/Av0lw9sOxkcd2Dx86LMU4YnsIcvfWrVtw8mS/5Oflm6O7lNoPxBww f1MOt5TNIEpOkNInTT7btJNfkC/btm+TY0fjpAyHERLi47sQsjoVRaD7IUA/Ifr38KFKS8ci0OGB GTt2+tq7ItB8BBwdnWCT7y+bNqyXESNHGsdHOrUPHjLYmLcOwrGSPgMZ8CE4++wpkgg1Z/eunZKV nQnTWLXxF8jJyRY3EKmIyEjxhB9CIJ4OGa/E28fbKE2WYgM1KSkp0RAuVzdXmT79HOM7MAlHggsK Co1fgxZFQBFQBBSBliOghKjlGGoL3QwBStyFhUUSDFMZTV8s9O+Jgv3fFilJ7EGOqkF8nJ1djA+R P8hOXl6u9O3dR7Zu2SypaTCh+QfgvQoTboJqEp8O+4PoVMDPKDmpNnItC32HHBzsxRamuCoT1b0S 4flzDKEKjwiTvPzT5zrqZsuj07UCBMqheGZBIS09g9QXrT18bnLODrrVNRdXRzubbhMF3xLtX52q m3uX6PXdHoE4BGFbvnyZCciWAzLDwChUbFJT08QRZIgmrRRsCIMGDTZ+QQxA6ebmbhSeHMQ48YY8 zlMpy5CrKDAwSEaPGQNSlGPUn+2oS5PZNddca3CmWY5RaC+8aKZ8PedLE922Z89e8DFyEhdXFwlC /emIfaJFEbAmBNKRmDQOEZ3DEd8l9Le/7bChVeHh5YHvYmVclIeMj/IU/q3l1AhYogG+uiZFJkR7 yJXDAro0ZImIA5WKmFOhCKKphKhLL7VOri0QyMjIkBL4BtHclZiYIF9/+YXMmHmxhIaFm4jhaWnp cvBAjEycNNmEzac5jeYwxhbhUdrt27YiGq230BeJqg/D+hfA1BaA47SLFi2C6pRiTpxUIHAlTWID UJdHZtnXtm3bZRTMdFlw7E5HP2NxDJjtaFEErAmB5Ndfl1gQoUgEKIxEkMOOLE8tS5Qf9+VIoBtV ViVEp1sLEqJKwFRSZStPzgiXsZFd+/slDfnkchAt3BfESAnR6e4OfV8ROA0ChYUFOGLvbIhPUwoj 2TLk/vDhw39x+fyffpI5n38mDjjKT38kKkM33/qrEzZriVbdlD71GkWgPRFIRWqLQ0gXEYXov5GI styRJb+0ShLzygwZ0lwITVsJ8kYPZ3uJ8EJEbZjOunKpwvcsJHpB8CclRF15oXVu1otA/XhC9UfJ uEbFxUVSg2+kasj7rnC8dkMUWi2KQGdCwJoIUWfCTcfasQiop1nH4q+9d1METpaMlZFofX39xA/m MxOmX8lQN71DdNqKgCLQ3gioyay9Edf+FAFF4IwQ4Ak7JsBcuXKlieWUirAGzOH0178+jLQGvY+f iKHAv3zFCnnzjdeN0maDPFiWwiCYTNjJZJpMj1AXWNy8/RkcgZkjqjYK+f+GyH5HjBiJxJ5/MYE3 LXV4ApDJO5mLiicBLYV+u1Woc+FFF8kdt9/eYFw0gzK7OcdvX79OnSJ4G66fgbxYx0+9oNH4hAT5 N5yTs5GVm/1bCoMO8nQiE38OQwLV+nW2bt0mzz33rAnxYFtv/gz74OvrI/949J8SikMB9ev8BHPt Bx98YNoMQ+Zv4jRhwgRj2j0ZgT/ZQjZXIaqoqpFKzMcFp8FyiyvFCb/574KyKnHA+HlKrLi8Wlwc baGcimQXlZs8Wxx/dnGVFFdUmb9d606T5ZZU4sSniCfMPk0pGUUV8tHmVLljXIh4uZy8DsdYDgcb V4yjI0pZJSLbY2LM7WYppRXVZq6O9q0/JqrUL69OlnP6eMvgELeOmHK79qmEqF3h1s4UAUXgTBA4 fPiwvIRTIPSxSoxHUEpsDJZy57NfSf8J50hpUYGJCeXk5iFLP3xefnrjsRN25ezqLve9s0T8I3pJ RWmxiQ5s5+AkXz55n2xZ8MUJ64T0GiD3vPqjOMBXrKoSKVjsHaWyvEzeeeBaObp70wnrDJkC/6/H 38d1pSBm2NidXCU7OUFeu/diycusDdfQuJx7yx9l5t2PSElRviAmgzi5esiRbWvk9d9detIj0Df8 /XUZfdE1UoKgnSzObp6y6YdP5Isnf39SqH/3xnyJHjxWykoKa+NoObvKfOC17JOXjtfhsevg0HCZ Nn263HfffYZ0NTWScnMJ0bKDObItsVBuGxcsTBnB02CPXdRD/vpTnAzFRnz7+GB56ucEuXK4v2xN KJBvd2fKUxf3lBIQodu+ijVk6tlLImVyT29JLyiXvyBdx4AgN/nd2WHi1ASikF5YIc+uSJCHpkWI H4jVycr2RPS9J0sePi9SHOuR0zO5p8+kztydGTIo2E3610u4+vraZAn3cpJLBvudtskcEEVnrKuL Y12qodPU4Do8uiBOLh3sL6MjPU7bfme/QAlRZ19BHb8i0MUROAIydPNNN8q6DRtrZ+qCrN1uPoJd XMTJQ+ym/V5sgvqKVDBIJR6V8Xr1wWVSvfEz/F2Fn3pf/tUVCBoVKnbT/yA27v44TlOOKniyRsTx 6q1zpHrvAhFbKgT1JKKqcrEJGyp2U3F8nO+B3NT+rpSqte9KTRwIkV39TOrQLfCebd/pYjv+RspF IDcgcHZQNIpzpXrlq1KTGYs26m+8eB+bj+2oq8V28EUi5cW1c8VceG31CtQpyq4bW92C12AcIGZ2 k+8Um8hRqFMXpNPBBWPaLFXr3qmbX/35V4qNmy/mD7LkGwXMSjFVzNXeSar3LJDqbXNq515ehGNG IFhFGaazC86ZJl9+PVe8vIF7E0pzCdEX29JlcUyO/HNGtGwB4XlpVZL8/YIoeWVNkvRGYtaHzomU fy6Kkwv6+8pnW9PlooG+Mq23DxK3FoJAJcifpobLWT08jUr08uok2Z1cZMgVU3Z4u9jJKmRuj/R2 lihfZ4lJK4aqVCHR+He4t5NkQh2qhEKVVlguQ0A2qBZl4f2BIFRZIErbkgplAtp2B4lYeihHSEA+ uWGAUa22JxVJflm1nBXlLjmo4+PqIHmlFWIHTOmUvOoI04a4SYC7vem3AsRtWIj7cUfl+JxSySis xLW24oXrE3LKjhOPbSBfVAFH45RXHojMdoxjS3yBzBzoh37sZH96CTDwlr/9dNTM69cTQszKFJdX ybqjeTIiwoO3lCmcH1W4D7akSX5ptTw+I1IK4Gy+I7lQzgaJzCutlCQ4nvM6Ep+U/HJJzC2TEeHu sh/jjgROVOxWx+bLwGBX8XCyk7jsUilEX4OAk4dz0whWE26dDr1ECVGHwq+dKwKKwOkQ2IpQA1On TsWpO2zeIy4V6T0FtpAgEXfER7HBF7HlW998+eM/Fi5T3+7VuBNTBxcer1NX6WQHangd67BNi83M 8vtUdXix6aNR+yc9uEMyVf/6uk7M9fUNfPUmxHE16KPu73pmlV9gzD7YZuP5sw7JW0FmLRk6slZk xw8yYsq5suL7z5tsgkp54w2J/c1vJPI//5GIhx463RLL11A+lh3MlVeu7G2uvfurQ1CDAmTxgWzx d7WXCwb4ytxdmTIVmzcJz42jg+QqvP/Tviz5BnVfu7KvMbOxvAYSxfxl717bD2TIXr6DmrQoJtuQ o2l9feSfC+Okt78LFB4b+c2kUJmzPUOikOds3bF8uWtCqLy5LhkmMTvTx6L92bIL5GoGCNhlQ/xB rHLlnfUpaLs/4KuRp1ekyDy0//gF4RKbVSpDw9xlO5SuHiAoLIsO5MiQEFcZFuoujy48Juf395F7 JyH3Yd3JrYe+j5WD6UVSZWMvvQNcJDGrSJ67vJchSf/COEm6HodSRkVsJchVkKej3DImWDZhrIcz S8x4ObdQEJabMF6Snk9BeqhkjY32FF8QtLgsEGUsaxhUpO/35sjW5BL54OqeshakaX9aiVwN1e0Q 2pqzI1N8QB7vASZU65LzK+TBaeHy5LIEuRzq04H0YvlwU5rMHOQH85krcE4WB8zjmhGB5qcrlNY3 OnYFVHQOioAiYDUI7KiAr8vEu0XOuV9k+h9FosdB5QmvVWVs+WTKXR1qiQ02chv+m7+xA1DFOeHP iepQ9TlVHXxVmrbr+rH8hrnt5P2QcdSNyYyNahWVolPUMSyF19b9GHaEfs08oCidaD6GLDWqw2/2 k84fbdWfy/F/kyQBG/bjDbUhYoTI2VDFZj4iB6OukI935Db5nrBHMmM4HkkNfKmaU2yxbisO58Ef xgYkwo0xT6UXyEt2UaWUwIco2NNB7hgfAvNWoiECviBLy2IL5YZPDoBY1KpqVw0PFHcoGL+be0jS oHR8uydHjuZWyubEYonNKDHqxgMwjdH3ZiX6olkowMPJ+AbRHJeMOiRDx6CAfLU7R1KLqsyYWHiL mBVCHTus/T1nBcmlA71lI5SbUphxSVToW8Y+Pt2WIQn5lbIGqkpCbilUIgf51djgBsfYqbCc188H qgtUJDdHGRXuIRviCgzRIwkj6eNcd6cUyW9BVKhybY7Pl59i8iW5oMooXzX4n4X703fq461pkowx Lz2UB/XG1ahA+1KLZcYAP9R3kJuG+5jxf7Y9S5KhgBGDPKhFoyPcTX/boHrtSS2SUfjb1cne4JQA tYjq0BMX9zBmSqp50X4uZi2oJBG7zlry1q2TFISHKD5wQJO7dtZF1HErAt0Bgb3YCP71c7IU9Z0l MhzqEM1ENCdVloGbwNzFn18oJ3Uqh+X9X/yG2cyU+jIN/k1T2MnqwATWsE5dXb5+0jokQI36YCM0 oZ2sDtWZBspWnYxz0rlg/hbl6vgNwfljgzpVndNhRlMiTXAca5/JUuQeJY8vOCI7kgqadNvZubpC aKqWKsTbamqhqw/NON9DDbluZKAEejhKCZzge2LjzSupgqmn0jhU01fm7rNCoGhkmOt7waQ2Y6CP +LjVOkOTeLx+ZR9DUKgwkbMOD3OTu1AnFCqJm5MtyIe9TOrpJftBFAJxfSiIFlUbxiyiqkIFieTH HmTxkkG+ciuIDAsJGs1h9EviWL7fmy2LDhcZ3yrjvwRlx8XRXnpgTHT0Hg2T06+h4viB7LDdxg7b NEP1g8np/N7uckEfd/GFyY8mPJKOwVCV+kA1osmKjtRjYDobGAxyCNOcB+Zw7YgAuRSqFUSh4yJp EQgWl5ZmMJoMI30cJaPMTg7nw08M86O/WChiC3HsVJ8uhdpzJdohfx4AU1jfAFeM1R6KT5CsgMpG gkeVjeOh29FYRPtmO4zr1BdjGwkC5w4HcwaY7awlf/VqOfaXv0juqlVKiDrrIuq4FYGujgD39Lc3 pkk8NgSxxReuIRIkJp33abTTrZmFgEq5pMKs8sraEzuDN56XDU6qVeOEWwWSEjelVGFX5yb9IU56 rY3LNz4sseivpLzGqD081UW/ICoR62HqoZ9PEAgTT5718nWQ27H5U2FhIYkmESL5cIfCEeBmJ7A0 iZ+LLYiMDXx9KqUcnQ0F4eB1uSBb9Pfh6yQLVIbovFyKvoLh++PtZAOzXa2PDBWsnSnF8gFMRz/s yZA98GEK87CTYvgRjQx3k40plXIkr8aQOX8QC/zCOEG2QGio3jSOlE0CQ5+fEpC3YvzwVB3VG5q3 voRfFc19142sTZ3xNkx1C/fnoF207WorvvA7oomL9S2HDGjqC8Fk3exr4GjtIOuhNvk41kiUh40Z qzd8fWLge8QSDFx88HcgSFgZTh+SDJZADcoDDsHujpJWUCFx8HEqQfsewJFE/emlCfAzqiVGGfC5 4viJU2f+RPKRw3gN4nSp3aMoTblh9RpFQBFQBNoTgSSYGf4BdSgzF1/gJES/UELaczRN7AsqBnZb OEN3RW8EW0kDEZkFhcYPasepSgXS26TiCL8TUtUEXn11I9XrlzVJArxBSnxAYo7kVMDBt1wmwFGZ zrrcfP1gGkvKL5PZQ/1lJ4jREfjFPHJetCE9JFLD4LtjKSQtX+xINw7Hs4cGwIfHzfjyYM+X8fCr oZ/NKDgc+6DNGJjZaGKLhA9RJsxH9IXh+0UgJvw3Sc03u7KkL/yPwuCn44XxbIHpbW86nJ9BgKie uDvaYIweUHNcYUrKkkk93GUEFCk6G/+0L9uECqBzMkv9cfJvEiAeZye5C/dCtHsQpxD8vnxIAMx3 +eIGgvO7s8NNP8dATs6HUzlPfFGl+WFvFlQpL6P0RPu6GBLF6+mL9O3uLChljvA5cpKzkI8sGkoR yeUsKEp0zj4fZroQvEe/LJrp6AxOB3MqYwxVQBOfA1SwO+GonQmCxH5GhXkYM+U1UO8mYE0oZI4G jsSLTt31QwE08dNiFZflLFwoxVCJfG++WSNVW8WK6CAUAUXgFwjM3Zsn1324TyroTM3HUhY6ozYx tky7QlrnpD2ljxdO49jJYjjjcpNvaP5qgxEZlyn6GOH3qZzIW6Nr9mPjIB/eOkRuHn7q/FZFe/bI zsmTxbVvXxmMJMb2pwgwSpzmwc/nCBQhB/hO0R2lHGoJzVLcZI/7stfByQ2YT/UkGrDkGKLcQKHA m1SSXKAGEROavmg+o1XHmI1YpQ4u/qYJzKLcWPqrwMVOddcWQjUxsX9wHevS56gM7Ts72Bjo2S7/ zT7phN0n0MU4cLMO1ZsahjVgWxbf9/prcdyxvfZFy5+8nqoNB8rj/RxnBf6mbxUaNH5DVMd4Hcdl mT9vAQdcX1SG04T4g2OgKZBNsT5NdKUV9H+CKoL3igCgPcx9bJaF7RCvclxLYsm+KzFBzpx9cT6M d8R+2GYVxuIPk+N1cMwmMet0papK9t90kxTNnSu95s9XQtTpFlAHrAh0AwQYU+jB+QnyyvIs6R/u BH+JQOOoyiPQX21PN0+l5pvbWgoDQGI43/96iDnxc9az22rNGG2ZB6rO/9qwArPDcbNsQ0DocF2U K5MrNstDs4bKxZddcdLOKvPyZDcIUfmxYzJ0xw5x6dHjpNeSEL2/OcOYchzgeM4NnfMoxxpziSvx PqfK17lR25Pk4A3iy02bl5v7oa6YIIVmI68N9sh1MaQC7fDYO4kAj5ezcHMnUSDpInFgO1Rp2CH/ TbLhAFz5b5MLDa87oS3+NsQMvzkGvmcCS+JaLjv7sYyDBIrvk2zVHyf7Z19830KF2Bb/4vU8BcdC HFjXQtxqHbpryY6FuFjq8PpaIsNxgDYZEsax1LZV2y7mTJLDudWNiW+zDZMfkf8z86rtm0TIQhhr 67Ld2jYhcBm/rN/CuZwPAp2tVGRlya7x48WuvFz6L1+uhKizLaCOVxHoDgi88Nwz8q/X5uB02V3y 4V+ukln9a4PCpcKsMfLJzZICSd98g/MRnRsHyJLxLqW5yvKYzdctGyWcUM2BLe5WZi80j961daky GGdU7oq4jlGIeR2lCrYLhcC8x+vrnFbN36zL1zgG+F/wtTm/GSrhPs4y5cXttSdvSFL4m6SF/bJt 9sFxcmwWTsd2+O/a3bRW7bFEQ+a1ZqerHXatBy13sBrpAVPRP2f0kDfWJsm6g9kYU90YDYOo6wv+ LWaMfM2QqLr6fJ/9cTxNIW6OriIJO0Q+v1NuvO5a+fizz095K8Zcc42kf/WVDJw3T/wvu6w73LY6 x06GQMG2bbJn7FjxPecc6QuFqBNqXJ0McR2uIqAINBuBtTgKm3Nkk0wOtzFkaBGO+V7zwT4cYa49 kk0yEeXvLP3hGBtAj1mQBjrfRgc4SyROJfWE2cIL/h+8pgd8Kvg06w7/jyj4SETitV7w73Ag6TAE CcQC1w/AMW8fRinGY683/EsicS35A2O/hIHk8MuSZCcCJ4j64pi0P3w02C/VijD4UPRmm0bFqCfT QH3g03wfvNcXviL08WAdjplji0YfHJOxu4CoeMGXox+u4/j59E4n4GiYXzgvS98cJ+fAfhnF+abR gXIO/GVokuHTPOuzPxNJGeQqBIoV22M/wXia59h7BSFpMEgiXyMux48pnW6lGMSS/BEO06crLiNH Gq5ZgNM7WhQBa0QgZ9EiqIVwGh8zxjhVa2BGa1wlHZMi0M0RmH35pTLv2+/lxW/XyO2zJsrMl7fL SjiAevEINlIzTEOgvneu72dICaPy3vD2HhkJh9lXEIzPpS5Vw0YcGR7FdAMgCrPf24sYNo7y2lV9 jOmBpOqvCIr3AdJEXArH0deu62ciEf8M59sb394t1+CY9Q2IsXLx67vkWQTK48mdWz6OkY9uGWAc Y+kAvPxwrvzqnT0SiVgvn/xqIIL7wbEUbTPg3aVoo4JKD9Sh+xFx+eHzo4zo88HGFPnzZwfl/2b1 lJuRjoIOrAXw97jxw/2yEYH33rpxgFyFY9CM/fLnb4/IbpgIP7x1kHHuZXwcF/iqBCNmTjYcXf/w zWFzuupyOBozns35r+yQ6f185QFEdaYZ6L+Y27NIffHyTf2NM20RiBgdc+nfQnPTowj89yCufXz+ Uflmc5oISOApiyNyWSXtFPn0DrnqitnyFSJXn6rkb9okcX/9q4T94Q/id/HF3fyO1ulbGwLlqamy d9o0KY2JkWHIfeg6ZYoqRNa2SDoeRUAR+J9gEexpLzhFLbtAbmi+ykMQOB+Qk2cu721SHTBGy4U4 eXMFSAQTufaDGkRnVB7TZpA5qjM9oegwWrAr1JOeUHIYx8UN5qK7JobKAKRk+CeCzZE0HUTQPp5i OhenqFzBXnjyyAayC08A8QQPL2KcFuaNSgU5uQLXTsJpnRmIPtwfJGMTg+TV+XcYjQikZgKSYj56 YbQ5osxTTL+ZHCbDEPDOHWPpA3WGR7x7g+TdhaB7I3p4GTK0CkSrDHXvnRIuYRh7P1xXCJNcDMhR QnaZvL82Rfxx6mhST08TQI8WMAYUnIhUFkxxwcjEJDx/mB6BeDhO4g8FiGTwKMjQZNShYy1PITGg HslbCghmk0xm5sasVb/of3K64jFihAz48kslQ6cDSt/vEASqETTUFgFE3en8Dz8iFjWZdchSaKeK gCLQFAQsX1AM3Gx8a/DDgHojcYz5X4uOyeSnt8hekCIG52NhPqpb398nSw/kSjw2/Jvf3ysH8D5J AJ1mqaycC/+ex+bHGVPRFASmYzya/4MaM/XZrXIUBCUUx5GpsBSjr1L43xRCwaFiQxJAB9iXkcrg ri9ijOISAVPUBSBGVKMuhCP1MihMjAVj8W+aNSwApjwE0YNCNfut3SbWSxBO5cAtF6kY8mTifzYj dUS6OfJ8McbiCdLHnFfHkNOKp3eogCXguPldn+yXP31xQLYipQKTlzL+Cx2Dv0A8HJ6gehpjivZF PjKM74JXdsqdn8YYRYrH2HEQCMerM+Sq13bKAhwDd4aClltSYeL1/O7dPbIeRA4ZP5uyHM26xsbB QRwYsVqLImCFCDiHh0vvt96SiMeQBBpR1ZUQWeEi6ZAUAUWAh6ZqFYiVB/IE4WjkvnMjpTdintw1 Iwp+NvZww6k2iTwjoPi4QQ3iqXyeuklF/qWjSFVA95kMpHvYBgUkB7FzyA6MzzRMZWFIf+CPYHnG hxlkgidoSD7CoQixLZIKvhaMa5gPivFccA6pzue5RvZCjcmG2sMjyyQ+FTCLMY+WvzcC4oHQUCWy FB4f56mdEKhK4Qj6x1NNJrIw/sdj45EYP+fDOoXwXaKvU2+oUB8hQOEdIDVZUKJ4TPoYSNJFOGl3 J6ItU/0qBSEiR7TBfAgV4wKxW0ZlDsM4ePKHx6lrfc5toESVSWFuuTzw3RF5f1OqPDGzh4lyTMdr W5oY67k96f2nCHQXBNwGDhRvmMosRRWi7rLyOk9FoBMhYDHILDuYJ1mlNfJ3bOCr7huBDOjRsgGK xnqoK4/AN2fNg6MQdM4Zx/ELTBwUL0TudYEi4wGVhsH8qNZ4Qv2ggzHjtngyY/l9w+XP50XB/FQq i3dmIh1Fofz3st6y4v6RSOPgiJxYJZILcsJovd/fPdQks7TEoKFTtAdUFxf8JiGrRJTj75BMczzS Kqz98xg5H75NdHY2fA5E5BuoP0zh8MWvBskcHMlnRGaqUKX4PRYEb+2fRyNInq9JIPodfKSoIDHY 3Y1jgqQP5pWLFAl08CYJioQC5A/iM7GXtyFSjjx6Xhcj59/AJx6qEse58J7h8jp8ojKgJKUi2jD9 lOiHHg1T3WMX9zTmPRaa0ebeO1zOQ8JTwTy0KALdHQElRN39DtD5KwJWjADNRw/9mGQcmJlg8nOk M2AAv1fXJte+BhLwHJJf/gSfmFyoJqtAlEohnWyBaYmZyZnpjEkpYzOLQSpsjHmJpiLWpdNxPMjP 62iLvjQkFP9eEi/r8N4OvM4ovux/DtI4bDhWIEwashpk7BhICiMMLz6YI4n5pbL0cI7Mxym4VChR TPlA85kRXOAAvQf1/wtz1l74+jBB5yM/Irs5CJg7SBXTU8QgDcSPSOT56qokiUXU5BdXJUoC2meq BB+oVtnoZwXaz4MK9cGGVCQqzRRXELzVSG8Rk1FsfJk+3pIucSBZ647lyQto5yiyrq/H+39HX8kw t+3EGPbhpxRmQJrLqIYxAegqOHGbuDdG0WqeRFRfBWvO7VO0a5dkf/ddM3trTg96rSJwcgToN3Sq oqfM9O5RBBQBq0Pg8lkz5dsf5ovc8AGkjIHiWF1cFwgOxis6xzDAHExCNBGR5HCHtYUMYgeHmUr8 QY8YijQ8HM4kE1UgK3fhpBdVpb7/2ijlIBrlphLNRTB51QXbo69QbbweBL4zv+g3VBsAkF+lpq06 +sBj++yrmsH+8G9zDSP8MvBffUTxPttnKaNtD35M79w2WHxhkrsGp9hqoGwxiJ6JB1R3rQmKh3/T LEbjXgWNbCBFDBJ4PHgfXmO0YM6VJsZyJoZl1OS6yMZlJmBjbfA9tsNrqRRRLaPTNU13DOBX0TjS 88nuBp4yS9iKOER3y0UzLpSf5i9o1n1TVVIiB6+7TvKWLJFgnD4Lv/desffyalYberEicCYIVCHw YsY774idi4sE/OpXJ21CFaIzQVfrKAKKQJsi4OUNM44DnIeQJJQEpRzmrlKQGJ4ks5RybPh8zcgN 2NirscNXgHDwTxKTChIlFP7me4zRQz8jEqhyBlisi0hsiAqTVLItljr/pdo24KuDuvz38bbqIgCz Db7HQl8k8zcjFtf1e3yguITt88cSAphxEDkVHs0319eFCuDgeV0JxkLzGpWYcs6J3TBiMq7l++yr igEfGZIJYzPzqRN66F9k+jLzq61juZZ9FSPfGusYXIFhfUxPuahV0NtcA6TXRXfJ9Tfd0uz1r0Hs oqriYqnAT/Lf/iaHbrtN0j//XMrT05vdlrVUaJ6u1nqjPpN+m1KnKde03izOvKWmjrOyoEAyoUge +e1v5RgIeOqzz0opjtufrKhCdOZrojUVAUWgjRDYuHWH/ObjrbK9PAJJq+oCF7akLxCBvsGuMghB Cb/HSataQnD6o+Mt6fKkdTGWcdFe4giT2mqY+KwqBcmpJkxWVm0nl03oIXOvCz+jI8rF+/dLwpNP Svann5pglDY43eM+YYI4hYZKEDYsT/y7finYsEHSXnsN61VHJi1voq5jQICEPvigOOG0UP2S/cMP kgmiZZTE+muMNlz695ewP/1J7BrlVkvFaaM8pG4wkb7rF9TxxLHskLvvrlUT6wrVrmRsrkV795qA fv8jv3C+B06+V1wh/vipX8rT0iTpqaeE8W8a9MM0GGg78M47xQt91S/F+/ZJ0jPPSHVZWYO5sA/m hwu+/35xxZzql9xlyyTt3XdrX6o3fxtiBqxCH3hAHAMDG9RJA165339v5lKfbNgQs2HDJOy++8SW n8PjAFRJ0ksvSQFiTf1i/ujH8/zzJbiRElOZn2/Wvjwu7pfzR7t+N94ovjNmNBhXKa5N/M9/pAqp YOrjz/nb4hQj7xmP0aMb1Cncvl2S33xTagoLpSo7WwrWrpUq9M3V87nhBunx4ovieJLTj0qIGt7+ +pcioAhYAQI0dV3xaaL8sBFfnrY8JdZCMZvchykwqJwwGnVHFo6lLtWHVSaqPRU2sAVeNMxP5iJY pLMlI2gzsaRKlPree5L29ttSCkLBSMFc3d4ffijByDhev6S+/77EQUk6kcu3AzbvAdiQPRARu345 9pe/GOJxIhXBFTnVBoFk1ScEVOEOIrVIBgnBCebife65MnDBApzo+1/gyvKcHNk/caIUgOCdqE4w NupeL7/coLUiXLt/1CgpA5mqXyz1o155RcLuuafBe9lIJxEzc+Yv5sI6xKwPIi37gXzUL4kgakdB ehp/YljH3tNTBgEzt379GtQ5eMcdkgoSxRk2IET422XIEBmCbPD1zZtU+3bjdFbe+vUnJMY+V14p A+fMadBHWUqK7AC5qsjIaIAZx8U+Qx95RHr8618N6uRjrXaCJJNyNh4X/+710UcSjOSs9QvTxRxA 2hi2S12XODj16SNBuI+Cb7/dEOmTFbtHUU76rr6hCCgCikAHIFAEs84XW5LkCJyBzbfhCbedZg7M knusqdUs38CnEpKacs2J+qOJzGIma+p4rOE67DB9kPbjagS9pAnyTAqf7D2RP8oH0atdsUHaOjqK U1CQ+EFRcY6MbNBkBZ7wq6ASUAVyiYoSF7xvfvC3K8iFzyWXiIOvb8M62HirocY0uL6uDtUob6gQ ts61casspezoUbEBUXGJjv5fH3V1PKZOFS/81A9GWQMSV3bkCCy6OHHYqI5zRIR4XXCBuGN89UsN VB724+Dt3WBsvJ5teGMuLti46xeqKuXoxwUKWv35mDqDBonvpZeKY3Bww/mDcFQmJIhrfbzq5uKG FBXewJ3EqMH8cb2A5P1iLsDZfdIk8T7vPLNOxwtIJOdvCzXI9USYTZ8uXiCMDSeDeF6o4+jm1nAu dWvKdXED+apfSJ7LY2PFGYpWg/XE/J179RKfWbPEGf03xqwKKpwT6rgh4GLwb34jUaA5/rjWDn2f qqhCdCafaK2jCCgCbYpAPgjR1R8dkEU4PSb2JuJO6/R3PMlpE9qrCwSJXCAn7p4mJB5Xr/VUbrBZ mMfZOufsupTjtaYx4+eD//DfHEv96043JMv1fOS1mEKMGauurzrfp9YB6iStUCEa6itfQyFisMvW KNVweKXiQJLSwPxCqHAqqKqUiXzpL1UPIPzNa02deqYsjsf4KrFOY5MozSwgMIYMNXqPJiljlmrU FvslEbCtC9xXnxCwD/Z1wjq4vgGBMAODEzxIF8nUL+ZCp3zOpZ4KZarg2mr2w1x3jeePsdJJuHH/ BjOqUCeYPzEzdRrPH2vAfk44FxBYM//GdXA9165xHZqzbE6CGfswJ70atWUUL/TBYJ71C+dt5n8i zHio4kT3DDHDWrLOCdfuFDetEqLW+ERrG4qAItCqCLQZISLJIXGor25YNHvLDPg3HJqnIy3HCOQt e3t9iuSX4EucdSwEBg7N3ogJdNPYIHOMf9n+7FrFh3XpJE3ywn74Gh2vzRGvOgLBfzuAQPEUmNn1 6ggOCUbjsVjGxA2xzonaXGQhI5wPGzBO12izdTjKydeShGiIj3z9q8GtRoha9cbRxhSBFiDQ1h+f FgxNqyoCikB3RYBOpja2lsPzrYACCQNIyl+QV+xCBFo0vkQs9CvCMXjzm4UEg38jEvUYBEi8Y0Ko SfpqXqPfD8kOf+MYvwecoh+dES2XD0F7hpjUkqGLkMrjYwRinIYca7xuxkA/ee/mgRKNQIiT4Ez9 wPnREgRC8/isXjLvrqHyEa6djoCOZkxUnCwqlmXaaLuXn6u8jMS1c+4YItchoashUyBWtyAx7Vd3 DJYXru6LaNgwaSCqdZsVo9LYioOrBxzCdetoM5y14Q5DQO/qDoNeO1YEFIGTIWBHOZynd06mmDQX Om7m+P+lICsjkAfNEBsQCn+QlL6hbhJAMoGj7r4IWtg/zE164prFyEt295yDkglSE46M9qFI7eEF VagnIj2H4YeRsZkTrIwKkLHm4DeI1QyQmxtHB9WmxoDpbxja/xVIzDTkYBuAnGuzkDzWB2rRdSOD kHTWTWaBoD19aS/kRXOVIIyDaUCMGYzFOINXycQoD7luVKBMRbLYmxHF2qhOMDvchwSwk3t6y+/P DscJOkSgtqhOzcWnKdfTsR1H7/OSYyUlpfMelW/KVPWa7omAEqLuue46a0XAqhFYsexnObjkM5CB ApiqWu9UWB5MXyVUc2B+ivJ1kS9uHySbkXLjnRv6yxAQimdn95YF94yQb5Cy4/6p4XIziM3FIDCL fjccas4Q+esFkfLz74fLygdGyY3jQ0xbtGaZgt8ubvYm5UcelJ5e/s7wcbA3iVhZLkNbNsh1lkvz G5hOLsjS7786KLd+tA9jcZLLQdaW3D9CRkCZIjmrXwpwbQVIEPOa7UIUbqNI4W+aFnlKipGwjyGC d60DehsVB/je5CfImieul8cffaSNOtFmFYGOQ0AJUcdhrz0rAorACRDgBv/B26/L4S//DRNSJvxl mIm69UxBJgYRCMV1owNlKOISfbc70/gKvQCTVA8oOAuQSoN5wmgqm9rbWx6aHoHgiDWyLxVZ6JEk 9cXlCZKUUyozB/qaxK1MBmsKiM84qEDRaOP5lQnSB0laB0Z5wmpWLTkgQb0CXWR8D0+TpZ6F/80F cfp2Y6qkIPGqG/yK1hzIlXya5ywO0vSlZeJYTyckm6V6ZGPGG+SHiLv4m6INE8d+tycL3SMiNhSs VoSq4eqws+pyqcxLl5TkJL13FYEuh4ASoi63pDohRaBzI8DjzRU88VONEzyGO5zu+FXz5msEG5iW +oKwbEXm+vu/PSwZ8Bnyg7JDUsHEqcwFthuqC8lZJJKsztmZLn/98ajJE1YIH6JiNOICAsPDMsep Gur6uThID38XGQBTWE8Qo3BvnJzBFZuQ3+xgWoncMArmLnMwrLZWFfyFomBSC4ap7BBymf32jV2y D07aYGS1k4Jpj+O6aXywIT2xUIGegnltaKQHTG2+IElO8j3ym80AOfv3JT1ro05bCFrzYGna1XXx oFzqB+lrWk29ShGwegSUEFn9EukAFYHuh4Cd5fhxa0aTBlFg7Jzr4YtzF0hFGZSiAfANehIZ4Jnl /jDIhhN8ezYh0eu/FsQh5UWNuCGRaiKSyl462F/+eVG0/Bf17j8nQnrD34f5yagiMR8YHaHtcO0s mL1iQGjWIfErydP58A8KhoKTjCSs34PQ8FpPF1tDtNyg/NwLs9wHcLhmDrVsmL9ehFmuX31fIPAb Z6hFEWiDCVpJ1CZDhRoN5SkERM3NyVa+2J4h/QJcZBZ8lnqDjBn/qDYuZ5rctY2Hpc0rAi1CQAlR i+DTyoqAItApEKhzzk5CJvkhUGTuhhPyzyAtsTCBXTMiUJYdypGl+DsAUayDkXT1QZAe+gBtRpb7 19YlwzzlICPDPWQPVKNCOE5nwaxFAhWfWyrphYjFAuLiAn8hmsteWJEoL807Ip8hozyJEwWpHDhm LwEh2gRFKr2w0jhik2jNhH9SL1zzn6Xxpr3LEfDQj5G068xq9AnKLKuUH3Gs/zIQnn5BbrIBatMo KERbk4skCaa2eyaFyjoQpQTMbUI0Au61AyHqFGuug1QEmomAxiFqJmB6uSKgCLQ9AlfNvky+nved yM0fwUlmIJyM4VzdUtMZSEsQTpH5QslhJvn4vHL821584Qh9DOoLj7P/Hcfof9iWLrdMDpPbP42R xSAxhagXjtNoFahTCGfnEPwbaVcRm6jKZJkvgvktpxhB4EBewuDXkwHyUwrSxBNpHlBw6HhNESm9 oFxCofRwHmkgUSG41h2msTIoUQn5ZSbMUDTeT8F7fO34dPFPXhdhzG9i2neFkpVCMx+CRpLApRdV mhBEJVC9eCquTfK0Mdt90g6RT38tV195hXw55+u2vxG0B0WgHRFQQtSOYGtXioAi0DQErrv6Svli ztzWJUTsmvGG6jK9m+jSPK1FvxsoMqP7esvdIELOIBsJUG/+83O85GYjei8jVdfLVG/qs1jMeWQ7 PCpPtyCeDmPkagZhZF+WAI18k8EY+T5ZDfvmv03Mobr6dKTma/Qfahx12pyMo4d1vX7Zp2X8Jgo2 2mK/lrE0DeqmX1WPEF179VXy+ZdfNb2uXqkIdAIE1GTWCRZJh6gIdDcETHbztigkG64gOCQ5JBE4 Bm/+hsqyJaFQfv1JjNyBn7/MO4xj8RgDFCVzHa/ntSQb/Lflb75GEmLxrObf8C0yf/NaSx2SIRb+ bUnzYenbhXXQB8kO/32iFBxsyzJu1uNP/fHzb46p/ljaAr+6NtWHqA3B1aY7DAElRB0GvXasCCgC HYIAyUr9U/yWv0EwakBMSqnaWNJwWK470fWtMfgTjeVk7Ta+1nLdicbYGmM7URt1J9hKy6CcaVEE uhgCSoi62ILqdBSBroBAeTmO3bPUtP2JqeN4mQyTdXnO2iNRamdbKJOU1l4cvAIlICCws41ex6sI nBYBJUSnhUgvUAQUgfZG4Kyzp4rPkOkwOyHNRhWchFvqUN0aE6APDx2WLT5IJ2oTR+fFRKJuYqmv PDWuUt9vyPIer7fkYWtiF612WSUiYbuFyVkPfSR/f+yJVmtWG1IErAUBJUTWshI6DkVAETiOwJ33 3idjf/Ms/G184Excpxa1Nj4mTxhIjsXR+VTtw4wWhLg/l+IkWqg3UljwFNgJyrh+PjIZsYcsqc1q c5HVESmcCjveF0kN/y7GjyWxbP32QLp6I7hjOIJEHj9GXxe7aBiO1sNbqG0DMJ5ockYhchTvyH4S FoIAk1oUgS6GgBKiLragOh1FoCsg4Ih0HXYmZUfrRqlugA2IyBQQmCuQY8zE/SHH4W+LMsOL6U/E v6EMMRHrO9f1k9FI8yFMr0HFiO/zNwkOfv/l3Eh5GlnskWGj9j04ZvcJcZV/ze4jT1zVRybhJJsg SCOz2z+GvGn8YdRpJoFtED8IY7sMMYrOZlwhS14zjC0YR/nvRA41V5r02tGaeBw3mDArivKljJho UQS6GAJKiLrYgup0FIGugEBlZSUsZVSGTmVTauFMQTQuRsqLX40LqTWD1WVpdcaJMHueFKMKBFXE BSe4mCPsAGIV/QEBFzcnIbkqYhk50PEahb8dmMaDHAgkyMaGY8ZfaNMLJ8NeBhH6EwI93ovM9K9c 3Q/pPJzlkv6+8uD5UXI/8qQ9e3kv8UFMIk71OP0z1WvqOE99UljT8XEXWzN6eAuXUKsrAq2JgBKi 1kRT21IEFIFWRKAN1SGOEs0zd1kpAiuSediBkDxwboSs+uMI+e7uIdIL6TCuHh4oS5Dpfj4y3P9p ergMhUrUAxGsn7+6ryy6Z5j8YVqEfHbrIFmJLPUPgeAw22ox1B0GbiRzuRy5y8ZHe8nN7++Vi1/d IUEI6njZuCAh1fsJSWTn7Mgw0bEvQYTquXcOES8en6+LUn2itGS0WlXhP21IE1tx/bQpRaBzIaCB GTvXeuloT4NAYWGRbN68SbKyshA5uC72i6LWJAQYW8YBOcTGjRsnQUEd6yPCKESzP4mX79fFIuZO HXtp0iyacRHMYI9f0QfpMFzlqld2yOh+vvIdcoklIwUGE7quic0Vf5CV5PwKGR/lIbuRo4xmsz34 PTTU3USbXhubbwgVU2YEIyM9X2NesouRpLUC7b9000C5AGrQ6Cc2SgGcrXf9Y4IsO5xjUn/cjyCQ JDcPI2nsobQi+QeSs17+1m7JoW8RyNR950VJKgJEfrkxtTYGEV7riXHdC1XpHz/ESgHNVoxf1J4F JsCLRgbK17cORHJbfZ5uT+i1r7ZHQAlR22OsPbQjAgcOHJDf3nOvFBYXibubmzFhaDk9ArSCcGs9 Ehsrz/z3v3LlFVecvlIbXrFi9Rq598ONste2P4ImekPBacbJraaOq44QUfG54ektcv2MHvI0fHqm vrRDHgTpIJFJzC+FqaxE+gW6yPz9OXL9yACT0JU5zX779WGJRKoNuvNc1N9Hrh8bLKlIz5GJNBqX vgVCBGLz7PUDZPZQPxn+702SBwfqnX+fIF9sThVXpPS4fFigeDjbynsbUuWf3xyuJTdUiLgY8Cmy PkKEz1K5jVw2safMuz6iqSjrdYpAp0FACVGnWSodaFMQ2LFjp7z3/nty7TXXiJe3t1TBF0XL6RGw sbWF34ydPPvc8zJp8iS59eabT1+pja6gUsVcZnO//V7kpg9EQge3Ti6zxuMFIfoXCNDFSJr6+Pex EonEqQ/CZPbyqiQ4NPsb/50SqDJJSOD6yaZUk6T1wxv6SyaIDt/7dEs6zGGehizR9Bbp4yRJyI+W jXZnvL5LyvH7Ujhsf3LLAHlmcbwUIEnrHy+Ikhte2yVX4/USMCnmObsUztP3fHVI+vs5ySc7M6WE Dtr4sTpCZIeo3Tmp0idntTxxw2SQ5tltdAdos4pAxyCghKhjcNde2wiB7dt3yMKFC+WPf7xfnJyM rUVLMxD49xNPSnh4uNxy803NqNX6l86+9BKZ9/2PyGX2IZK7DmozQvSni6Llmct6Sy4crB9beEzO 6uEpVwz1lyQkW33q5wS5cXSg7Esplv1QhDyRGuNK+Pq8vzFNbhobJBFQhzYn5EsYfheBwPjC8Zpk KQtE6LJ39kg5TGRuMLl99+shcg5Pl6F8sT1dfv3WHnkGp9UKQKJ+3JEub944QL4GEboJfY357xZJ B6miQ/bJCNE9UK8e7QiTGXOZJW4V+exuufiiGfLDT/Nbf+G1RUWgAxFQI3AHgq9dtw0CFRUVUlbW RrFr2mbIVtNqRQU2Yysodsf9v9rQRwaZ7r/ekSmz4O9z8wf75IutqfIAcpjRj2cWFJ7lB7JNhvls EJvfnh0mQe6Och2Izhtrk+RXH++XK97dLXd+DhPtlwfksflxciPauPerg/IXkJUKmmphWiuCAnQ3 3qdP0cVv7pL75x6WQrhEv7QmWd5dlyzrjxXIrR/vkw83JMsNqE9iZslHxiSzDo18hGiec4PvTocd 9LKp9ctzcXGxgrtEh6AItC4CSohaF09trQsgQJNNdla2xMfHS3p6+i9mVFJSIsnJSVJSWiJ79+4W /n2qUlZeLocOHpKkpCThcfLTlcLCQnNtXm6uHD50CCe/a/2g8vLyJDEx8fjfp2tH3z8NAshKfyyz WH7Ymo6fNEnOLpM4HK3/dnOabDuYa3yB1h0tkJ5+zrIvtVi+3J4mO/B6PhSgLYdzZemuTDmK11fs yZLvt6TJ+gM5shmv7zyaX3sKzGSmFzkMJ+yftqXLT+iHTtJ0kN6XWCAxOL5fjis3oM1DuGbN/mwp 51H/uhQiVKkyGRnb8i0NFlQKVSk2u9RECWjLEE2nu3dsOoyRnW5k+r4icOYIKCE6c+y0ZhdFgF/2 u3bvkrfeeF2++3aerFuzpsFMU1JSZN68eZKVkSlrV6+W/Pz8kyJBtWrhgvmyadNGWcDfGzeeFrXU 1FT55OOP5OjRo7J921aoXaVSDlKVkZEhMTExSohOi2ATLyBrYRZ6ZLo3We0t2en5N47Hp4GM3Az1 5ndzDsn1H+6TpYdyReAnZBQcZpaHOcw4QfM367vhNb6OGEUNCq/h+5Y+SGYsGetJLFgHapKpbxHE 8P5X2zPk5yN5uNbEpTZO18kY04srEqXYRI1uQ/WsiRDqZYpAV0JACVFXWk2dS6sh4OXpiRNqVeLn 5ydffvGZVFZVmqP81Qje5+rqavqxxxH1yy6/0lxThfczMzPM+/XLimXLZO/uPXL57NkydOgwycnJ MYSGvy2lHKSpvspEc1FOdpb4+/vLRRdfIkdx8mvJ4kUSGRkhY8aMEVs4QBcXFxuSxFIFuaC0tFSJ 0pmufuMs8vWyx5fgmHlSVonkFTCfWqNS7zojCZ3qQOPp3mfTjeqXw6G7klGw6/EeWuLKcMxfz06e 6WJrPUXg5AgoIdK7QxE4AQJ29oxE7CC+vn7i7OIqu3fuki8+/0x+/OlHQ168vbwkISFevv32GxCh TNm+fbv8+OOPUIF+kk+h7lDNWbt2jSxbvlR69uhhSNTIkSNxgmuyiZM058svZcXy5bJy+TL5+1// Is8981+JgyK0c+dOWb5sKciWg+zft09WrFgmO3bskGU/L4XStEDWr18nhQUFshz1vpk71/T7wnPP yCsvvyTfzvtG17I1ESARoWpE9cYRv6nmkInwFJixWZ2k8D1e01LWQgWosQrEMfG4W13wxtacrral CHR3BJQQdfc7QOd/QgTs7ewlOSXZkJ6LL5klR44clgEDB0Lt2S1bQWicnJ3F0dFJ9uzeKVvwN317 Bg4cBGdTV9kIsxhJT/yxeLF3cBAfP1/TBxUlqjob1q2TQUOGyOpVq4Rxk5xcXUC6nGXdurUgP9sl JDRUvLw8paioCO3vEipG7h7u4gHVKh9+RIsWLRQXZxejSu0EIYqPi8P1XrJxw3qpqFONOvuy/k9p a2OzkCEYTPB6et8uYgpxTvwQgNGNZrGTEB43OGv7weTGa48XKE3Hc5LRcdqi/DBKNhO8luCH8g+J juVvk/iV7Od/hcP1g0nPGXGMWky4WnCTNFZCW9CUVlUErAYBJURWsxQ6EGtCgGYtnqQ559zzZdTo 0ZIJc9ngwUPE08NDUtNSDUnxhaksJDjUmNJIoMaOHStnTZgogwYNkuVLf5axiPjsCuKSmJBwfGpH 4CR9NPaITJw4UTxActzc3GX6OedCOZoCX6Q8E0hy4ABEAUY9XxApP19/ccU4fH19ZcSIkRIWEWH8 img+69mrF4hYPH73lGHDhtWSpEYmO2vCtDljOe60W8XTgm1IioC3D47L90PkafhY/49knMiMBnIS DjLEtB53IMGqIVGNzWa45mYcyf/qtsESzPxkOGXGL9n+YW7SCxGxEedEegW7ShBOrzH4YjCO7E9E gtlRPb3NLP3hZzShr4+M7OFlfvdEbCRDlNgPyJIX/Jc+uWUgAkGCZDMhbAcVZz1l1kHIa7dtiYAS orZEV9vutAhkZmVKbk6u+Ph4G2JUUlwiixctMkTI3z9AYo/EmhNoGfhxB0naunWLfD3nKxCUBDlr 4iSQpGwJCQmRUaNGybatW+EMvV8SoCJRWeLptBUweYWFRxiH6YMHYnBqLVkqKqskOSlRlsFkdvjw YaMwsf2qqir0d8SoSSm4zt3D05jRMuHU3bNXb0mBkpWWlgbSlinl8CXqCmXqtGkSMGQKJBmQChOl ug1IEZssqZJpICMvX9NXvOhgbcxdtdntzQ/TY/A1qjVIt5GJ1Byb4vIlPgdEzXIdFR+SE6bcwMm0 IBChERHuwmPzrO8AMvPG9f3lPcQb8ga5efzinnIVYh25wwT35nX9ZcE9w2UpcqXdMCZILkSy2YX3 Dpeffz9CFuD3RYP8cLwQvmJ1Jw3Z5OBgN5NSxBCl9i7Ids/iAOVTiyLQ1RCwexSlq01K59N9EeAJ rYMHD8r48eNbFJiRfjrOIC/9+g8w7bjBB2j//v3Sb0B/GT1mrBThaHwoCA99g86C2pOAI/pZICTT pp8j7u7u4uLqJn379pXoHj0NSYqDWYv+SIOHDoXK5GV8hYZA1QmA4zQ3FzpQR0D9Yd2DID40gfXu 01dCQ0OkD9rhUXz/gACoSp4yfPhwiTt2zDh60yeJ/kYkV56s07uPIV1nWlasXAkS6CPDMbaOLAMG DpCDPpNkVzpIim1Ds1GrjYuECCarEZEecs4AX/kEOcOKQYL6RXjI7Yg7NBnpOGJBfGzhx3PfeZEy FRGlI31dJB7H83ciWGMfkJ6bzgqF+cpOJvT2liuhDLmCDDEPWr8AV/lgU5rkIpWHA/yQ7jk7XEbj +uUHc2RcLy9Jzi1Hv55yw/hg+feCOCmEsnTruBCZtzMDQR6rTW60Z5bEyxrkPTsHCWaTcFy/GITM Gf5MN6POapw+234MpxtJ4tqzgLQH2RfJVeeNl3HjJ7Rnz9qXItDmCGik6jaHWDtoTwQYqfqHH36Q P/zhPvGEz01rFp4Mc3R0hJkLZoxGhcfrWUoREHItfIPCQW4Gw0+Ihe+lpKZIUGDQcZJGVcfHx9eQ rvqFpjqazpycnH/xXv3rLKfVaEprzfLoP/8pPUDiOjpSNef0twUJ8u/vDtYeS2+LQkIEAnQNcpD9 AYlUL3xpu8lU/xESlzIiNd9+G3nG8uDfMwupPGjOOpRRLN7ODohPlC99kbKDxGUB4gexMMp1DhSi 7cmFJgnsRW/uljjEGnJB3KHvfjNUzoMJ7OnlCeIPE92BjBKZ3NPLpAC59KnNMgpK0Mo/jpRrEPjx KEjYAlw/5B/rZWC4u3yBhLOzke5jW2ye+MDUtv6BUfLfZQnyLo7fm6Sv7VWoUiGX2V3Tw+SVWeFi 73jmxLu9hqz9KALNQUBNZs1BS6/t1ghQOTkRGSIoVHn4w2CKVG5oLrMUvh4ZEdlAsQoJgbJwAiWH vjNeXt6nJENsl2NpbTJkbYs7MNBJ7Ok83OYnqmyMVYwBF5mPbEofb3nwu1h5GqRjFojKjAF+8uPe LNmPjPR7U0okH75DE3t6GtPYrxCp+h2Qpkeh8tyHKNR2iBUUDtJSWc+cZYs1rUTAxR0gStOhJI2B IlWODl0cbCSfztRwECrDHEvpbwSbGBO/8nCZJ/yLdiNlyGwQqxgEY2R8I0bA3otgkLUBG9vAjHiq m8BY6KCohXsqGbK2D4uOp1UQUELUKjBqI9aCAGP00IxF5+eOKMwDxlNpfjCBdcZCfylLZOyOHv8E KC5RPkgRATNNW5YaEBIXeFT38HeVQJAc0ow0xB0qhFpUBVUkBRGjx0Z5yJ6kIvlsWxp4iA1iM4JE 4b3EvDLxQ0DF+6aEyw2jgsSNR/Trgk1bxkze4oD2P0YEbHsQJqpHBUgHciyrVAbj3+Fw6B4JM10F SNG62FxxsatNzcFTahUgUqnog++RAJWiz5dXJ8k2KE8mJEB7FozFH4RxTHhtHC4tikBXQ0BNZl1t Rbv5fDZs2ChvvPmmXHLJxcYZur03dyo8/KnBaa8OcHk949U340btzz7/Qi688AK54frrz7it1qpI keWeOQfljeWpiCYNYlTBFCmtiConDEfoy0YFyjd3DYVfT5l8gvQaJCk0Z5H0fLsnUzzhI1QAx+nP kZ6jFMrOu3CE3ogcZL39nSWiLsN9qJejxGbWEpxYBHJknamv7JSjiYXiBVPb4vtGyPNQnIbDBPbn cyPlzk9iJBFpQ76F83R6frl4wyz4PVSoG2AaOw/munl3DZY+j6yXKKQNef/WQXLd27tlB5y5/dDf j78dJi/BXPY5cqEJzG9tXkyaDpCvojK5YVKofATn8PYWp9p8jtqBIgAElBDpbdClEPjxp58QFfoK Q4QY90dL0xEgZoyTNBen5WYjsrY1lB2pJTL7uRVyND5JJBI+WTBH1p46sxCjk5mNTvc+v/3wA6LT DyTmzknhRukhKUnIKZVfwa+oEO99ChL0/OxekgOHZhc4MDuACSyOyZHVcXkSDpPWuchivwq+PUz8 GurtCM5QJRkgWU5QhN7bCKdqkB06Qt8OIrEK9Yqhdt07NVy+2Jwqe5OL5Ndw3qZilAXfo9eg/ByF 8tMbatF1o4PkeThVByKe0c0TQuQdvJcIouUGAvTguRGyCG2tRw40oUnRlNPh0Hg1m3I9ZSo6teOn rAJjcZBvfz1YJkAt06IIdEUElBB1xVXtxnMiIbryyivNiWQlRM27EWpwpLqsrNyED5h9+eXNq9yG V195xx9k7peIwn3J30SiRteSIkupwpF0pFhpUGxAEuxxXJ8koYZBEGtTnJywmMCMuFkYOJEcCn49 pjDJKtQgGxxvX3LvMJyqRwwgBFzcBcJyz/t7a/OVmdhAcD5yQF+2deSbjseWxKfMV1bNgIsYbymu Y7Rr3pgV6MMNDsmUWXhkn3XYFs1t7B+hGMwxfvRn3uM1rrieR935N0IFmLYQTb22LtquZLymRsUO 11vG1fg9YkbsGgKHNlHHZLTngOoIUdwWsYldK08++mf580WD2nCltWlFoGMRUELUsfhr762MAKNE v/X223LZZZcZX6L2Npm18nTarTlDA7CRf/zxJ3LeeedahcmMQyoHObjuqtnyzQ8L4EkeITLkEpE+ 03DyzKuWaNjUbeANLGkkGbXOymIPIkFiUBc/56SAWpyga4E4HveH/xyCuD/8KUN06fXxBca0Vmsz ol8P22YcIvj0WEhE3VvmGhuQJRI0tm8hSobAYXw2eK1+BhBjmaLigzqGj9SRM/NvBoHknPCaaavu fZPkta7OL1SiOjLWODO9qUMCdwJzWw1JEsbHeZVjTrHrRLZ+JZITL++++47cdtvt7XZPakeKQHsj oISovRHX/toUgZ3IObZkyRJ54IE/tWk/XbXx/zz9tAQFB8utN99sFVNkioiViI107733yj7kdjPF Eyf4HOHYC0LkPP134tDvbKkprw1IaePkJhVH1kvpkuexoReLhELRmHofMs0jwOGplKJTzZYKDQM0 koQYFafOTEVTEv2atnwusn9JbQskPywkPfZO4nLBA2LXYxzGUlT7OsZdeWCFlC57pVbpqp/fA3Vs PPzF5eJHxNY3Em1jTvTtQjtlW76S8o3oh+3XJzhVFWIb2l9cZjyMuQMT02atelW68nWp3L+0lhDW L1CG7PtOEedzgAuJIn9wTU1ZoZQs/K9UJ0MBc3KHMoUx5+FoP0oUIqO/+cbrcsGMmVZxX+ggFIG2 QEAJUVugqm12GAJtGYeowybVjh1bUxyi+tNmZO4nnnjCpETJzM45/tYdf39Rpl7xKyktIeHAaTE3 T1nzw2fy+l/v/F/1y5+uVZUspKS18AT5koNQUOY9gBZr41A1Lr/774cyYcYVUlxYYPiUM1K1LP3q HXnvsftPeD3jXP394yUS1W84LGfFxkHfCSlZPnvmYZn/MUjUCUpwRLT87cPF4u7lJ5UV5SaaejVU oFcfvEW2rVx4wjpDJ0yV+1+aYxTUahAxB5j98nOy5Om7ZknCkZjjdbyQXmYCIq8//PDDJt3M8ZQq rYWhtqMIWBECSoisaDF0KC1HQAlRyzC0VkLEWRUXF8vixYuRBHcdfJ3KTNyn2265WQYOGdpg0gdj 9smHH38qa9eskZUIkimTfyMy/lYoRFBc6lJgtAylutpVdhLuVCBRW56DQzbyoQ0cjHhDtf5NTLfi 5OQod915p/RC9PD6ZS8SAr//4Ue4tgoC0f+Ozleijj8Cbf7+9/eKtw8UrXplJdK5fPPd9+b6+qSE /fXu3Vt+d89v4PrTUAma89WXsmrNWhz5b3i4oKKiUiZMGCfXX39Dgz6qoaC9+dbbEnPgoMmfV4G2 RyOP34UXXije3t6tApk2oghYMwJKiKx5dXRszUZACVGzIWtQwZoJUXNntmD+fJl96SVS2neGyEVw yKbPUWMH7OY2arke/kROiCn0yg2D5Vz/PKRc8UBqlcAzbU3rKQKKgBUg0M6RvaxgxjoERUAR6BYI REZFiQdPc2XF1xGhkx01byYcPJUGn6J7pkXIraP8kK+ul5KhZkKolysC1oiAEiJrXBUdkyKgCLQY ASbI9Ua+OCnIxFH13IYOzGfSOp2ZeWqtvEYuGhEgf0P+MwZv1KIIKAJdAwElRF1jHXUWioAi0AgB EqKgkDA4H6WI5OK01Mli8jQFOXO6Cz/pcTKyp4c8d0Uf8WnPxKpNGaNeowgoAi1CQAlRi+DTyoqA ImCtCDAR7wXnny9u/SfjqDxOhJkI12dYHFE/YZfIwsfk2qBE6eePVCJaFAFFoEshoISoSy2nTkYR UAQsCPBE1m/v/Z1c+sdnELuIcX1OEM25KXA5gPwwHs+aN6AQ7ZX8mLVNqaXXKAKKQCdDQAlRJ1sw Ha4ioAg0HQFf/wCZMLhHbTTpBtGsm9iGHaJGMy3GmrdEUnZLHxxxn3HxZU2srJcpAopAZ0JACVFn Wi0dqyKgCDQbgWgv29qA0M0lRIz4jCCHsvULkT0/iSeCFDKS91kIUKhFEVAEuh4CSoi63prqjBQB RaAeAiEeTuLmVJcotcnI4PQYTWWHVops+MhEmX7woYfkcitKetvkqeiFioAi0CQElBA1CSa9qDMh wCz3TIGgpfkIELuuVngaLNAb94MlgWtTJmiP6xN3iKx81SQ5vf6GG+RPf2KKDi2KgCLQVRHQSNVd dWW76bwYqfqLL7+UO+/8NUwcHlaV7Z55o+zq4tZU4d9I22lVq0Qn5H8/8aQMGzZUbr3lFqsaW0sG U1JZI5d/eEgWbcPx+6bwZMYbssWFi5ADbc88GTt2jMyd+42Eh4e3ZBhaVxFQBKwcASVEVr5AOrzm IRATEyP3/u73UoUs6e7ubkhciUzeVlJscOzbLmyQSafFjOI1LYmL08pzIjmzAVmL2R8jT/z7cbnq qqtauYeOa64KGeB/9cEO+Xh1koiPDwbSBGciGwcZXrpZnLZ8BL+hZ2TKVCSH1aIIKAJdGgElRF16 ebvf5HJycmQ+clilpqWJPR1iraVAdHC2qZLv86MwIhuZ5XlMympsWzXXaEunSqJmb28nM2deLD16 RLe0Oaupv3jhArnj93+WhKApIhNuxvH7klOTohIkNe3tI29f11t8yjMkCqk5tCgCikDXR0AJUddf Y52hlSBAwnHhvAxDghZeESDqwNc+C/PNN3PliiuuFOl/ocilj8MnqBgi0QmUQ1owS6sk0NNRPr99 kEzvQzVJiyKgCHQXBPQ7ubustM6zwxHYlFQm65MLZXVCgayJP8MggR0+i843gPDwCHGzx1ddQUYt GaKPUIMChkrzZY29ODnYyiMzeygZ6nzLrCNWBFqMgBKiFkOoDSgCp0egGiecPtqTKwXFlVJaUSVz 9uXCv+n09fSKliPg7+8vIaHBiDadhrxmOY1ymoEM2TlBGSoQu9wkuWt6tNw9MbTlnWoLioAi0OkQ UELU6ZZMB9wZESgsqxbEB5Rhvg4yFD9ucOzNg6+KlrZHICAgQCKiEa26KKuWENnU8y2jMsS/N3wi Qdtek9sG2WkG+7ZfEu1BEbBKBJQQWeWy6KC6GgIujrby0CR/+c1AD/l1P3d5EP92c7Iip++uBni9 +Xgg/EJYOHKZ1cCZujgXClHd1x5NZ0zaGrNIZPtXUnxwtRSnHu3CSOjUFAFF4FQIKCHS+0MRaAcE HOxsxNvVTrxcan/83BE80t664hC1Awwd1kVkVHRt3wXptQ7Vhgy5iiTvFlmNpK01FXLtrXfK4GEj OmyM2rEioAh0LAJKiDoWf+29myFQAV+isqomxMHpZri09XTDI8Jrw2BmxyMIFEyVDiBD+fApWvYC fIuSZfr06fLYY48J1SQtioAi0D0RUELUPdddZ92BCKgu1P7g94APkTFQZsbiP1iBqgqRde8iPcd2 6dmzh/z3v/8VOl9rUQQUge6LgBKi7rv2OnNFoNsg0KtXT4kC8bHxwmkzmsy2fCmy8ztxdXGRJ5Cu ZOTIkd0GC52oIqAInBgBJUR6ZygCikCXR6BX717yzhffSs9LfyeSBVPZxq8w52p54IEH5Jprruny 89cJKgKKwOkR0EjVp8dIr1AEWg2Brw/USCU24mv76QmzVgO1GQ1NeDVGth1IlQmZX0u0TYa8/Prb 4uHp2YwW9FJFQBHoqggoIeqqK9tN55Wfny+LFi+WtLR0k5fLmgoz3a87VirMdD8p2gUpPGqsKpeZ yXkK95oLL7hAoqOjrQm6VhvLZe/uliBvN3lsqo842lSLt69fq7XdGRvat2+frFix0iT2tflFBO/O OKP2G3NlRaX0hvJ4zjnniIODQ/t1rD21GQJKiNoMWm24IxDYv3+/3HzLrVJcUiIe7u5SfaKcVR0x sFquIQ7YePivCoSptqazZsx2z6PoBw8ekFdfeUWuv+66DkKp7bolAV16OFcGBLpKmBeiU2uRZ597 Tp577gWJioqSSjqaa2kSAna2dpKRkQFC1Fu++Pwz8fb2blI9vci6EVBCZN3ro6NrJgI7d+6UDz/8 CH4hV4uXpxfSY1hXfgzDh1Bw+t6qCtUBqgQvvvSyTBg/QW6++UarGp8Opm0QICHi5n7xxRdLeZnm 12sqyvb29nLo8GH54ssv5blnnxFGQ9fS+RFQQtT511BnUA+B7dt3yMKFC+Es+yeVsc/gznjiyScl LCxcbrn5pjOorVU6GwLPgRD1699PZl40s7MNvcPHGx8fj9hVj8u///24BAYGdvh4dAAtR0BPmbUc Q23ByhCoqKiQEpjMtDQfgfLy8uZX0hqdFgEKleXlaio7kwUsKSm1KpP8mcxB6zREQAmR3hFdEgGL g2hKSrIcOnRQ8gsK2mWeycnJEhsbK4mJiXLs2DEpO4EZgtfExx+TzMxMc83pSnZ2NuZwSLKzsqSy 8vQJYRMSEiT+WLywn2NxccebPwKJPwWvaVEEmopAaWmJ7NyxQ1JTUo3P2/Zt28x9e7pSXFwsMftj GjyY8CGFqsqxY3EnvI/5Hn+y0H7skSOn60JycrLl4IED5nNB/7DTlcO4//m55OeDn1FLicNnhJ8x LYqAEiK9B7ocAiRDdnZ2smPHdtm8abP5cn3v7bfxJNz26scP338n69etk40bN8jKlSvk6zlfmS/5 +uXAgRjZvHmzFBUVSVbWqTcX1l23bq35Iv/ss88aEJyTLdzu3btl/fq1UliQL3l5uWZTKi4plpzc HMnSL/4ud783Z0J0BM4CgWhKIcnYuGEDfGUO4T7+UtJTU3F6M9Xct6crRYWF8snHHxrHY0uhP9/K lSvxs0o+x73Me7p+4YEI9ldYVCjpGcg5d4py9GisrFm9WpLxwPP6q69IQqPP2ImqbtuyWX7GCVSe RM3LzZUCPCSVV5RLDj4Tefl5p5uSvt8NEFBC1A0WubtN0dHRUeLijsoXn34q/fv3l/FwEvby9jJf gHl5eVCL8s0TJdUbKki5JAp4Ki3A66UgD3wCTk+v/UKmOYGkpaqqyny552RnSSo2Bl7LjYGvFdap T6WlpXIwJsYc9ycp69Wrt8QdPSqLFiwQmvEsG1FQUJC4IEKyl5cXTvdEm35q+y+AgpNi+i/EhpKC fn766Udxd3OXs86aKKxXgid2vmd5ouV82C6fyFnYT1lZqZSB/IVHRMI/ZACOVS+XdWvXSs9evYQB CkkMMzFuzqm8vMz8m/0Tk5YcveaGxzbY7okK36uGNznfP9k19etxfQqbsPla6tSGMUCcJ6ho9Z3p OUf2e7LCa/nDevWVhurqKvP3yRzzLe8T86Yod4aY1q1TUz6TFjyJgwUvy33b3MMCrEdyvWD+T7Ia RIL30OkK7+/NmzfJCETx7t2nD+6pMhk3frz4+PjgPiyV1LQUQyR4/7E93nNpuGd5LzG2UylIeFVV pcGG97abmxu6rJHIyAjZv2+PrF6xwtyLFtIUHh5uHmS8vH1k0KDBBnuSeI6DaqflM5KYmCDfzJ2L vHOeMnHiJPFDyhW2wz44FmKV3+hzQbxs0XZOThY+l73Q/iD54bvvZMO69dKjZ08JCQo24+TnnvW5 phyXKkenu0u61vt2j6J0rSnpbLozAiQrNEMxpAr/feVVV4szyMfgIUMkCU+kP/70gzEnOTo6yXff zpOlPy/BU+lG2bVrpyQnJsvOndtl3jdzZS02jSHDhsm2rVtk7tdfG9KTkAAzVFKyHD5yGIQrzihB vJZfwpGRUbJ8+XIoM2tk2PAR4gBS5urmKocPHsSRXJCxwiKzGTnhdT8/f/OUunvXLhCgJHMt29mF v9esWiV7oPCEhIbKD99+K0cOHTBz8MQG069fP5Ate1kAgrVp0wZxdnaWTz/5SFZhY+EmERkdJdu3 bsd81iMlhatUVJaD7OXK/B9/whNxHtSyjRISHGKUs6/n1s6JT9rPPvO07Ni5Q/qi/QMHDok7whUM x9ybW0jkqIrx6L6trS3m2TDGDzfi4uIioRkmNyfXbKwnKykpKbJi2TJjXikqKjbXcu6nIjVUFxjj KQPqAjdAzoMb5apVK8UX8YZIQk9UiNHSpT8bskLnWI6dJRnkdBXmcwDz4f1Sf7xVlVXmPdIsC0Fu PN/6fWVgo12OdaIJsxSElfeApZ8TjYnjX7hgvlRXVRtSTZLP+ZAcrMY9EhwcLE5OTQ8dQKI7H+T6 22++wRrHmPxt4eERsmH9ejOvAXhwaFw4Pt5bO7ZvlxtvvhmfI1f58ovPoTiWyqKFC4xCsxL3/K5d OyQN67Vv71758IP3jTo6fMQImMz2yUAQj71798j3331riD3VHxdnF3yOkkBkAqA4peGBYb4hSsEh IXgYyJBDMINVgJzY4tTjVzjFdQB/83OajM8Kx7oA1yfgM375FVeaZLxDhw4XO9wbS6D+bIYKRCL1 6Scfm8/w0aNxEt2jh2zEvb9i+TJzPL4K5Dg7J0e++foryQVxOgIFLDQ0DFisla/xWaf1Lf7YUXnm 6adl+/at0qdvvxMeq+fnfi3U23MRh6iW7Gnp7AioQtTZV1DH/wsE+OXPp7wgbBoWxcPB3kE24Ys6 OqqH+OBLceOGdfA/iJFp06abjXbQoCHiiA0mAwEde/fuI4OHDpU5+DImCTp7yhTZAd8JO7Th4uoK pSbY5MBivfFnnWX6WoSTbb6+vsiJNQpPl+VmQ6a/BTfJ3n36yWH4AE2dOs08nVOV4ubMZKI0aa1b s0YmTpok4Tjd1W9Af7NhkuyQSFGxsq8L+sb+jsYeNeSoD8ZIQlaBDb9Hj56GBHyDL3O2N3XaNKM+ cTNlGTR4sEzDl7afj5/Z3NLTM+T888+XXSBBNCd64kmbT+RJ2KRaohBxA13688+GIMz9ek4DPw2O g/iTLPn4+Ir7KbLK80n9zTdex7ztZSiIGcnq6ZQV9s2NNxVKAskGsdoCsySJZ2Rk9CnJA8nGYmzw But6pIsqwc+YD4n0px9/3MDUxBAF+/btN75gJCec08kKx/D+e+9JEMgWN+et27YaBeJUhfPZA4JM /zcSXUZr4D1IgheFoJnNIUOWfoh5Je5VKj22OGrPcirPG2JxzXXXG/L/xGOPSRlUIfZLnI5BgaXy SgVv0OChRn05BhJB0t6nb1+Qoo2GxPFeSExINPV2goiTSJL494B6GgjFMxuK6znnnSffzvtGEnH/ 8XMRDNKeAaLEBxsqQGER4VB6B8C8VSFO+FzwoSIfypQFA0cnR9kKIuSJ+fUFedmzexfGWGrGkpaa LPPxIJILAjRu7DhxxeeXn00+MPXAWkyaPEkiEIPpSOwR2bl9p1x44QwQuf24l/YaRZbrSlOblu6B gBKi7rHO3WqWfEJ0dnI2T5GVlbUbD1+jAyZJiyfiE+3BJuuLL7tBg4fgi7M/npbD8WXsbL4wx40b b4hOHDa70tIyGYMv0qievYykTlOAF374tN4PT9UTJ0407fFpkV+wfIKtMkTERoZAlbr7t781fcfH xcqo0aM5EOOzYA9y5YOxOGKch0ASwvCEeulll8mMmTMRPdnX+A2NHjNWKvHlbSED/L0dhMbDHU/F w4ZLKTZHEicG1fMGAToYsx9jLJcImMocHR3MXFzwVO/p5SkBIF/BIcF4Is5F4pAaGQEVi0/kpTDH 0GxHs0ENzUpNcE492c1EUyHxJfFLAzGhQkA/ESodNHd4+/qAwFUaFYCRfekMux7zpLLz85IlhihS DVmw4CeD+6RJk83Yxo0bZzZcEh7iQjMGyeD3MHlwc+W6UJVITU0xPiHcsAtAQt5+83WocDvM5k+C wbGsX7/OONVyk1++DKZEtMP6TlCAuBnTj4WqxLq1a4z5horRRViT5KQEOQBzKIktFQ2qSuHYqGnO oqmG60DixPb37Nkty6A40fxCR14qkTT9jBkzxphqGOeJxIZEj/MgaVizehWu+9aoISTEJE00hzJg FZUVzvmlF1+QIyCwJARcpxis92qoX7wuBmP7es4c9L8epOPEjvfFIC+9+/SWPjB/lcCcxVIXFuuE S0oix/v9yf/8x6zLsqVLEG8n0BAdxvgaO36cTMDnJDIyEgqJh/nMUVUlua/CfcjPQVJikvkM3nb7 HXIBjvaT1AzDNdffcIM5oUUz4gioSRxzLubImEi+fr64Q2sMIeqFwIcXnH+BzLzkEoMzFaARo0Yb QmkxVXMNqIrWoD2ayLOzcsxntG+/vkYpJdHnuPm54IMR1RyutSt+B0ClCgkJNeYxEkUqW974DFOJ Y/1QKLU0uWrpHgioyax7rHO3mSU3l4MwU02dOgVy9jpxA3GhWkITDDcVvm9nZ2s2STpWDsAGxSdC Ly9v+OykCJ1BuRFSlaEScwxEhqQiFZu1Lzb0GKhKx+JwegwbGtUUbgLcXGkGSsRGy5NcNIHxEdQd xIX+CvzSp0mKX7RUmKgaUcnhFzjHxE1gD55IScj4pb0fygN9MS686CJj3kivi4hLU10eTtbE4mmW ZsAakKWc7BxDQujsyjmkpqYZHymeCuITPp+eqZqQTNEplmOgSYLqSx42PG6IuWjTB2MqwTXZMGW5 ubudkcmMmzx9lWgGgVeOMSOSFGyF2ZG/+URPkkYiRL8sOniTRNA/ZNHC+cb8wad3kiMSuOnnnGvu Wwa9o/mMfmFr0T6Vr8VQ5NKgih0A6fLA5kxykJ9fAFNQT7P+JFAkN6FhYbIM5hZPYEPSkJGRhjox hsBSfaFKRhWATrk0GS5DP1u2bDKEqmevnoZw8Z6h+YZtZUHRIAlJxf1E3xWa0qgScQPlOtXOJwnm meVGoeT60uxEUw2VO94z/tiE165ZbdZoOcw4JGQ/L15ofMfiYMKkinMIc+D9RKJKB2P6QO0HIQwF cadjsCvua56U4r1LorZn9x4oGVtgIjoClaSvWef6haScSiHJO8k0fYE4lnWnMJmRJHAthkItzQRe PvDtKcI9wvs2OSlReqOfTfAxIqng/VdYWGA+N84wiVGl279vr0SALG3ftr2OnLsYhdAf68nUMGVl 5Ybgk0yyHh9KuC4kpyTENDNuAzHk54jEhIoZP7MXXzJLtsGUVYDPKs1+xJuKUQbw42fPxdXF3PPE n2tD7A/g/uD9ye8Bkjd+LujvR+JVifvJkGH4Nbm7e2It4V8FvPh5IJEmTjSDNy5qMut624oSoq63 pt16Rty8uPGdBxk+DF+wdArl0yS/bAdD2qc07o0NkCqGG75ovfElzy9QboqUyNNAio7iaZgb0eTJ ZxsH5WRsXHQsje4RbVQKbrZ+IEcMYMinTWcQGT71JsG/qAg+MpTqo6FscFPiZk4liuSExIlqBzcl Pj274cmfGwfNQvRT4Zd+mNl0s01f3NzpGL0PigM3p+joHpjDEEkH4ahAHiUqDiRDAVAxOKdRUJTo 2M2NNghqEMfnj/bps1EFosG/e0Dp8jbEKdVsjNyY+IQcFBSCsfobYsb3hw0b2uz7iE/qJEQc5yXY tLgJ0UwzYcIEY0ojMeXTf3hYBBxy00AEqmTmzIuNakKCuQtRxqk4FIKMcHzTYeZjoZLw2quMoH2W wYsbUU1NFZSbS0DuYqQYZPSssyaZdeTYbUB4qdSRVHIjOwJVhwSVm9606dMxxnXm/dHALxvEjESN /fXp28cc5R4JBYLqnaurG9o/aMwwMzBOmuCIFwkHfaVCgSfXlutJkyXJ0YUzZhizmLcPCBiIF33X SB5oGjoPSgcL78f3331Hpp97rlQDgyMgZj7wcbrgggtl7549xpF/+vRzMOQao6RRyaAiQ9IxZMhg QyqqsWHzfhkzdqwhiVVQYYgdN3GOKwTqX/1iIpHjh6QuDPUsplEqSifzIWJ9mpr4eXADFmdB+TEq IMhzSEiYuX9JZoKCAg35oL/XkcNHZMCAgTJg4ECYt5xk4MBBuPeqDCHuBYLJBwLeszQX83cxyAex P++88w2RIjFyx3xJYsLCwwzh42eRZkmSF34+qIjyPiYObJdrMgz3cmZGpiFsNOWRRPEzwc8015nr au4L9Gk+F+ifJjauGa8heQ8ODsVnPVGGgQBSmaLfGb9DaMKjT58SomZ/JXS6CkqIOt2S6YBPhQC/ XGl2IPHgFyWfIENDQ2r9frBh0qzFL1R+qfOLloSGZhl+OXOD4abMDeJcfEFzA+3Vq48hUyQn3Pj6 9OlrJP6e+ELmlzO/uCNBWvjUT1MEv5i5IfDJmF+63Hhs8UVMswKvDw4OMhstTTFUitgn+6YPD9Uh mnP4MxAbChUqtk+fJl7DcXND6YW/+UXNOXF+7Id+JfzN3Eo05Q0ZOsT0yXrcHHldJOpzbj2gWnEs xIIbDQlMADc1tLcUCokvriHBa26hSYaEaNall5q+SExpHouIoFIE1YjmHygbnIM5OQSiQJMMzXic 0xeffWpMhyOxgW2CD8pAYMINl0rO1i1bjckvEGPk0zudyLkmNDeSoBLnbGx6VBdIzNyhctFnhTjR cZybI00sxHs/iBqxJbmiEsN1OIZNn2ubDEJMgkRFjYoV61551VVm09yOMXDDpfmFTvLG7AL1kD5k vJ6nuPyANx18eU+99847xnmZ+G7auEnOgnmVShP9UzaCiNDXhljwtUxs7JGow7ka8gaHfBJfvsf2 qKztgFpCgkxTsIuLm6TAFNQf91oOVJMckEQv3CtUVXgijE7CJyq2jRK4nooQ0TQWERFh7hkSG/4m DrxPeO8QH5J/PkyEglRvgLmQ99tFSAPCzxWJoSdIMO9tfjb4cMDPEq+h8sIfPjiQbPA93hskVrzn qSLx3hwCYs57gg8TfBgZMWKkuY5j4frzc8R7mWsRhfs9HOPla7z//LGu/JxyfDSLk8jynqKpk/U5 Pn5O2Q/nwocQ3i/8nPHzzLY4NpLIE53AVIWoud8Q1n+9EiLrXyMdYTMQsJjMxsO/gRsbNz4+yVoK N1h+0VsKlRtL3CK+lgeziyEP+KJk4YbEzchS+MXLp0q2YflStzxt8zVuBHyqN0SoTm6vbce2rp3a 12mW40/9unx9E07D0EQ3ZMjQ4++xT24Slms5Zs6DxdKP5cQS3+MYHB1qx2d53zJPoxSgHudU34Ha slEyTgyVLcsps4ziLHl++yeSV5In/Xx7nHIlaPJZD3+gCDyBczMh2VkH0xBVBSo1dFCnUy39VxyB EVWVlTAnBeEJfPjw4cZHpDfUmMEw7dDURH8Zc+weBCgKjuP0zaGpkKSS/mA0b9Afi8RiC5RAnlwj TmkgX/SzYjgBkgn+Jp6ZUIMSMYZgbOg0n1AdyjZHxD2MmmRMjiAhXBe2S3x4CjAKTtncZOl0vwFm WA/4ZA0bOsw4pFMdpCJHsk2isgbz5aZPEsTYT9xw6QtGP5Y4nHjia2w/FOoHzat0EiZ5oTLnAL8v kjneeySElRVV4uvvB3PeMdM//XGouBHn4SOGm5NS3JRJeLOgjhhSiHFHoW9u6k0ppyJEbI/3DdUW y2em/j1tcUDnfFgKCgpNqAmSEUuxKFP8LFr+3eBzgbqWz5fl88T2LPczCS4d2Des32AURt4blvuW nwt+vo8fnKC5rO4koeUzffw93G9OMG/zs2lp33KNpV+OubZ+rWeVZbyWfzfGUwlRU+6wznWN5jLr XOuloz0NAttxUoSxe+6//w9nfBSWJ29O5WzalotAc0r9DaEt+zpR2//CaaLePXrJ9TdeLxtTd8nr Oz6XpIo8cYC6c2HkBLl78NUgM7VkrHHJhT8TnYjpUxLVM9q8fSjmgDnJ1Bf5sui7xA2fR6pp2uJT OR1nqYaVFJcYEjBl+jRj+qqCSXDfvn3GX4UmNTtsZLsQMZlP7ty0qBhwI6U6Q2UgHkSHvkUkYjTx UOVygJ9IBfxUqBzRgZzv07+J7VH5oTMyiSM3ypKyEuPLRSXAwdHeOH+TBNA3jCYTEhiWgzCDkcSQ cFCxoFqRi5AGVBx4Pf2hBkOFoKlp+/ZtMunss8XNw92Mg+EUWHfAgAHmBmPevWAoLnT0jYO5yQZI ueHEXyTmQLWJJh0qRTxZSDOXORGGehk4JUili8QyLy/f+D5R6bLEKDJKJFTRppTnn3/B+EpdOmtW Uy7vsGtIYOs/yHTYQOp1fBjmwaeeekqeeOLfmsvMGhakFcaghKgVQNQmrAcBZrtfuHCR/P73vztp 3BnrGa31jeSpJ5+Cjw/8Q6aFy8ubP5EpISPlgeE3y/asQ/Kfre9IX+9oeXDkrRLs0XrJLHm67f03 3jZKyYWXdYEko2Aua5evhinPRiZMmWR9i1xvRC+/8LJE9oyyekJkjSCSVD/xxFOa3NUaF+cMx6SE 6AyB02rWiQBPCf3xjw/AZ6G3MWecKkKxdc6gY0ZF1xJbG1uJ2bVfCmZ4S8j0XvJQz2vlwl5Tjg8o vSBTHtv8puzMOyR+noECn98GcWyoqtWaKBDduS7ADf+kkY5OwLB81EocdYWKBv2ryqGebIOaQr8b KiFUkFgsZjzWrf37f1EBLP2wPRNduq4fi6+HqVH/dY6Ul2FAtWMxFU4diMfMjroNI2DXDvq4C05d W3yP87P0x/YrEZ2ZTvA039H8aYkqXTt/c5L++PxYvxaV/43HMh8LuGzTXHd8DHV/19U7Ph8LrvXG exzsRv8wa+ViJ7HfIfzEhjKJ6B0FVUyTvJ4Mr8av86Qq43lRIXzn7bdOGLixqW3pddaDgBIi61kL HUkrIDAfUZxvuOFGmMtcxd7OvnYj0dIkBLgpl+YVi8sdCJo3JVoeH/QbOTd64nEfjZSiDHlq0zsy 99gSqbFB+o1Wwpb9OsDvqQrmwiomw+0oe2WTUDr9RZyPLUx8DItQDXJkrcXGzU7KVuaIyxc4IeeO hweYJ7U0DQGS1GKYeXmC8uOPPjS+TFo6PwJKiDr/GuoM6iGwdetW+eqrOXLbbbfBARXO1C0INNi9 gK1VKF564SXpP7i/OE8KlJe2firnhI6Ru4dcLXtyjsqT296X4d495N5hN+AoPwhMK2Jr4UBdhb6e VnyygpuLzsrvvvyWRPmFyIyLZpw0Z5sVDNXqhkBCdBhO9e+//4E8/Z+nzCk5LZ0fASVEnX8NdQb1 ENixY6csWrRI/vSnP54y95WCdmIEnnjySekZ1VOuvf4aWZ+4VZ7f9amkF2VJXk2ZzO4xXe4fer24 O/3v1J7i2LkReAU+RD369pKZCAKqpXkIMDzGv/71mPoQNQ82q75aU3dY9fLo4JqLgOWkzelyXzW3 3e5yPU/zlCLtAsuE8FHy2pSHZWrEOPm/obfII2PuVDLUxW6EsuoKE4JAS/MRoMlMzYzNx82aaygh subV0bEpAh2AQH0XHn83P3l0/G/lmv4zOmAk2qUioAgoAu2HgBKi9sNae1IEFAFFQBFQBBQBK0VA CZGVLowOSxFQBBQBRUARUATaDwElRO2HtfakCCgCioAioAgoAlaKgBIiK10YHZYioAgoAoqAIqAI tB8CSojaD2vtSRFQBBQBRUARUASsFAElRFa6MDosRUARUAQUAUVAEWg/BJQQtR/W2pMioAgoAoqA IqAIWCkCSoisdGF0WIqAIqAIKAKKgCLQfggoIWo/rLUnRUARUAQUAUVAEbBSBJQQWenC6LDOFIEa cUCmcRcXlzNtoFvXc3J0RA77rpJitVsvZZMnz8+LluYjwO8YW1vdQpuPnPXW0OSu1rs2OrIzQGD7 9u3y6aefyY033Sienp6awbuJGNoie7cNvtz/+8wzMnr0aLnt1lubWFMv68wIPP3003h4cJXZsy+X ktLS1p0KeLWdo73YOzlIWUGJSP2cMK3bU8taq6kRe2cHjLVunE1ozd7eXg4ePCgffPCBvPjCC5rt vgmYdYZLlBB1hlXSMTYZgcOHD8v9f3xAsnOyxd3NVZjsVUtTEOBuVSPJKany5BP/lksuvrgplfSa To7Ae++9Jy+/+qoEBQa2+sODbaWNVITbSUGErfhsrqz9LNpY3+eR4yztaS+lQSLeW6prcTjNOPnw kJOdIwMHDpCXXnzRPHxp6fwIKCHq/GuoM6iHQFFRkezctUtyc3PFTuXsZt0bNJU52DvIsGHDxN/f v1l19eLOiUBSUpLs2btXakACbKAStmZxtXWS99MXysK8LfJqxD3i4eQhVTVVrdlFq7TlauMsH2XO l6X52+SF8N+Li4OzgBadsm3SOmIWGhoKUjTQmOm1dH4ElBB1/jXUGSgCioAiYJUIXLb0IVmeuFmW XfKajPIdYJVj5KBuW/6wLEncJD/MfEmGW/E4rRbALjIw9QjrIgup01AEFAFFwJoQWJuyXYoK8uSy sEny3ZGV1jS0BmPZnLZHikpKZWbwBPl43096qMBqV6rtB6aEqO0x1h4UAUVAEeh2CHxxcJGMDRkq j4y4Q/ZnHZHM4myrxGBR3CoZFTBA7htxi6wBOTqUE2+V49RBtT0CSojaHmPtQRFQBBSBboXAsdxE icmJlUsiJ0pvvyiJcvGXNcnbrA6DnJJcjDNepoWPkwH+vaS3Z7gsPLbG6sapA2ofBJQQtQ/O2osi oAgoAt0GgRWpWyXE2VvGBg01cx4TMlwWpWyBI7J1nTJbm7pD/J08ZWTQYDPOi8LHy8KkjVJcVtxt 1kon+j8ElBDp3aAIKAKKgCLQqgjUIOhQBU951p1cc7azF8caGxy9P/XprVYdRBMaq0QoAMbgsq07 YGeHOq42dlJjheEBmjAdvaSFCCghaiGAWl0R6OoIVFRUyOLFi+SbuXMlNvbIL+LVpCQny4EDB6Sg oEC2bd0iVVUnPlqdn58vX375hfy8ZLGJSbN79y756ccfpKysrAGElZWVsmP7NhM6wVIyMjJkzepV UlqKAH8oRxBvavPmTQ3GsmfPbvn4o49kx44dDdqrwvHolStXyMKFCyQPbaalpUnM/v2nXTbOY9PG jZhz7PFrOe5VK1fK3LlfC2Necaz1S0pKiqxcsUIY/mErsCgpqR3vyUoysJsz5ytZ+vPPkp2dddox paL9TRs3SNyxo2h/6/HrExMTTH/WEnfr7KDhklaaB9+hw2aMP+Ok2aSgIWJrR8phPWVS8FDJLMs3 5j0zzqTNMjV4lLg5ulnPIHUk7YaAEqJ2g1o7UgQ6JwKMyhsHUrAWhGTu13MMialfMjMzZfu2Wv8Q J2fnk6YzcHd3l/1798n69etNzJuEhARJSk4SJyenBu2xP3vEQ6qvJpSDNH337TwQolryRCJB4mGC 6NUVEqvvvv0GrzUkZOvXrpW4o0clKTERJGqzSetihz5OV+ywee/fv0/279t7/FKOOxmxe9asWmWI 3Zuvv96AhJQUF8u338yVwsICcXN1O2VqB85/4YL50qNHD9kJErd+3drTDQnksVS+BTGtKK8QLy8v kKhsycrKEmfn2jQSrR1L6LQDOskFPX0ipY97iPwAf5zUgnQ5XJgCs9mwM22uzer5u/pJiJu/rIzf JMfyEiWhIEXOi57YZv1pw9aNgN2jKNY9RB2dIqAIdCQC3GRjjxwRV0T+9vb2loNQg8aMG29UHFdX V3EEoUkGsfHz84PpwdZcc+zYMUlJSTYkhIqMm5uLxMcniBtIUTY28IkTJ5nXPT29pBQqSll5mVRU VBoFKiszy6QRYXskDbyOfa9auRyGGFsJCQkxgfCSkhJl8JAhcujQIaH65IdgklRPpk6dDkJSaOqS /GzctFHy8/Lk+htvEmeMlYoXlZTiokLZh6CEefl5Ro0i0eH1CfHxIE4bEb05SHJy80zKCZIWpmog SSIpycf1w4aPkDVrVsvQ4cPlMMbAQMy+GPNavDZo4BDxBGEhFvHAggSuoCBf9uzZAyLjCSzi5eMP 3jcBMGdcNFOCg4Mx/gBDaPbu3QO83BEJORs4xkl6Wrp4+/jUqmq7dhryOXHiZPPaTz/+CGK4XEaO GmUIEsnltm1bpRjEzAUkidjExx8zdds7mjIJ7fdHV0hCUZp4OLrKtX0u7Mjb+KR906/ph2MrJTE/ RZwdXeSmfhdbDbG0SsC68KCUEHXhxdWpKQKthUBMzH45ejQW6ouIj4+vpGeky7p16yRm336Jjo6G clNqNv0FP/0o/gGBhijQpMTNfc+eXYjmO0h27twh/fv3N0pI/wEDpRLEJD09XTaCxBwB4cpEm19+ 8RkIiC0Uk+2GBG3dskV2gQSQWOzdtdts9rkgKRGREYbElFeUG3PTapixwsLD5CiUrIiICHn/3Xfk EAhMAYjSEJCm15GewhG5qqZMnWpMZ/v37cO4dsuK5ctBOuIlASanYyAOaWkp8vVXX8oqqE8FBYUS GBRoyFcGxrZ40WLZCjNdWFiYIYglMN95IGWDk6OTbNiwHqa6bcCiB8jRQUOMFkBJi+7RU5ZASTpw 4KBpYzVMdwOAxZLFiw3BumjmTAlBtGMfkBsqaCQ4e0HSaHoj8VyzZpUwPx/JYUxMjGyBwlUO8kgF bfHihUYdygVxsnOwB5ZpIHXJsnjhwuPmvO+++1Z279wlh9HXpMmTW+t2aFI7ke7B8smRRfJjwlp5 aPjN0tsrokn12vuiYFd/mXtooSxOXCe/G3yd9PXr2d5D0P6sBAElRFayEDoMRcCaEeDmTHIzbvwE 6dOnD/x/dssVV1whq1atwNM0VCFs6OFhobIHaVPooUpicNZZE0Aewo0q4u3tIwMGDDBKyw5s8PQB Imno16+fUWZSoSYFIJ+Wo6Oj3Hrb7VBmcsXP19coSnFxR8XfL0AyQZ5uuf12SYViRDmmHIQqMyNT QtBvWGiY8U85ePCA6ScD144aNRok7ohcevlsCQRJ++jD90377LO4pFiqq6qlb/9+Eoh+e2C8kVFR Eotx2dnayR133S1r166RACg4VL1INDhvFxdnY57aBzNar959ZMjQoUaNmTb9HNkMYkcVqBj+QyNH jzIkxB79UdEaP2EC0jyEmWvLysrF3QNKGYhMX4wlPDzcLD1J1kYQq5tuvlmWLFoont5eMnbsOODg J7EgozTHnTXxLKNg9R/Y35DQAGBIktkTY6Eitm71arn0ssuNIkTVatiw4SYVS0JCvAwfMcLMv72K g52D7IVvTkJhuvxz5B3i5NDQNNpe4zhdP44Y566cw7IjL07+PfYek7pDS/dEQH2Iuue666wVgWYh QLNWKDZ2KhrhUGBoNnJ0cjTKD4lISXGJMSfZgAzRobgc73vAHEaS4QK/okWLFogvNnb6uZAE/PjD 92ZzpmnLzh6nemBuqqqsQkJedxCOWj+kEkQPzs3JNQoM/YKqcBGVEt868xEdmnPoiIzXz7vwQrzn L0Voj87QNOVRYSLpyQLxOO+CC+S39/wO5qy1hpSQ9LAPmpjYH6+nEkSTFdWaiMhIGTx4sCEWpZgL iRUJ25VXX2NMbjRHXXX11TJi5CiQtxwzd2dkjSfZKS8vB7Y2xuzH+THRMHNeRQELmrXog9W3bz/x 9PCUPSCWLJwLTYC5aItmRPpGVVVWiA8w8wUpo8M6na4dHBylDETIx8dPokDiSArZH8fJ+djZwaiI NQiPiDS5/IgBCRlVO65Ze5ex3n1lNIIeerpYd/JTL2dP8caPl4tXe0Ok/VkRAkqIrGgxdCiKgLUi YE6O1R2hpt9LBTZhOjVTAQqDQkPfFpqEXOBITGXny88/Nw7DVSAkZ8NMRaJDkxDLoMFDpGevXoYk 7II5JxMnyEhSqHCUwjGa5MBigqO5iFnF+R5PbPF6Y2JCHyQJJC5LlyyR7+bR4brEEBWSK5KWyqpK Q7Z27dwpc+fMMcSNChcJhCFt+E3zE/vOg2mNzuEkFnFxceYEV89evcURZInzdgJ5e+/ttw2hKoDD dBXa5rX2aLO0uNT48QTA56gPiA4dwOmzVAUSRxK1DCY9nkojcRoxYqRxFg8KCoLv0EXw8Tlo/Jio uLm7exgCtGzZMhk1ZqyEBIcZ3yz6EhFzOmqvQD+5eblGCTsKRckZPk809VEBIpkbPHQ4VKaNhjSN m3CWpCSnGHzpY9URDtfuOK3l5mT9J7aYdNbGHk7p1voB1HG1CwKa3LVdYNZOFIHOiwDVCh495ymu vn37GiUlEc7SxjzVf4DZlOPh/Et/mkoQp5DgEBCHNcZRmGaaLfADor8QzUYsJCt0uqbvUSKITjo2 bDozc8Nm2zQh0SHbBYoLnbIrQJAsJCwTPjOjR48x5IcEJhKEaC3MRHSophrFEABUYYroVIw2Saxc oP4kgOTwPNpQmLhKYC7Lzy8w/VGlItkj16MpbD3MZKvg53PjzbfC12egIRLs3xVtbdqwAb5PA8QB dajkUOWhusSj8HthQqMC5A/HaB6B98YY8kHYwsMjjApUg/9NIEExx+Y3GjLEujtB1uj7QxOjwQPz PXLksDH3VcLJnOoSCxWs4uJCEKQUQ/iCggOpQRlTYk5uNpQuZ0PQSBS3bNoELCLhSxUpxzBvrk9R UbH07NnTmPzasyw8ulq+SVorb036v/bsttl9PbXtPfniwCJZefE74uXh8Yv6vEeILz8DJNJUEU9U +FmhUsfC63mP1X+N9yNZlzPW64T1eS+ivglfWaf6Wa6rhIKaBzLMvtl2Tk6O8a3jqcxTFfZfhjGT 1FvGxjlwLPy88XNSvxhVFO+xXc6Xc3BzOzWp5cMJMbI47lv6OeG40D4fbnjSk+PgGKjUcpw0I/Pz y9c6oigh6gjUtU9FoLMiwG9qy2N0/X+fZD4xOGb/IxyFb7rpJgkKDWn5rBnp2BJFr7mtkRGdRhNf uniJrMMx/b8+8ohRl5pcmtB2blaOfPf9t4bQDRpSGxmZpRJH6O3h8H28tGSOTR5w+1y4JG6dzElc ZfWE6LlNH8oLn70iz41/UELhnD94KE4JguBbCh3gueGTJKSmpsjkyWefEMBibPRLFi0yRH3EyJHG X44bPx37WVatWmnUu/POv+CE9UlEeFjB3d3N3CcWYmFic+GgwVGEjyBbmjhpklEVx44de1JyZumA DxU//7xEZl9xpXjUkT2ecly+bKnx/evRIxrm4aHH++I8eRCABL0a9yLNwfS7O1mhosqDD1SBSeZG 4cTjqU40kvjwUEEoDidwMgF4iAiGWZckifHCxuEE68kIZ1vftWoya2uEtX1F4AQIkEt0ph/LFBBs +Pi4LcSocTKG+n/TsfaCc88X/+CgBvNle2eUxAFkqH69ZrWBb7tTXc/3hvx/e1cBGHeRvV/c3VNP 3ahSp0ILLVr0cCl2HNwfv0OOw92dw12KtEChQqlRd29qcWncfTfZ//dNsiXZJG1kk+wmM8dek+xv 7JuZ33zz3pv3hp8i584+RwQbwcnqqT1+ZqJ1IiwMsAkaNmCo9Bs44C8MUaeZDB3PW0P4mtK3E9XX 0HftOefMY2wrziJP+CJyc4bTznwMo4MsW7pYlixeXE1WMWZMvM2XAuN/2mP1h5S0+jtjPSeltJej A1E6DWWiNDAjLU0RC6bc7JwTOgWl1HDv3t1KgkoyZPazlYYyDuOm4imnjJDDRw4pUjVq1EhIDqki Nh13hlrbL5f5Z0pD14GImfvCdlAiQ3cWlFR99cUXuJF5SLWvCmSIBIgqal5YILGjetfcX0sMKUGi bzJKdfr174c2HlTEhnXXbctfvsGIG6WolLL2ieqrJKW8Hcq/8xIApaHV9VXnqd2/E46hFb7UEiIr gKiL0Ag0FYHNqbvlw6O/SZmDES/fZkggmlqBjT3niuvgTgjbQNsge9gYXdBeF1xpL8WGY+32cqNx hSqAagJ6z+7syRkhMA7CU3VPv27yzfTHbbq7L+7/Sp55/3lZdfWnsmLVcjX25869QDnfnDp1mvK1 xQ2cmzy9nZ+Gvy1c8APmCtSnUGP1hHqyd1QfqETToOqsUK4k7rr7Hkhalit17/59+2G/NkEZytOV RHBoiPh4+cDjeLycccYZkg+VE23yLoEUh57WqQKmeowOQLtBhTx9xunyKVxJzMLlgXGwL6OLi93w A9YP5GzVihXKnm7o0GHKb9VZ55wr6SBQtOE7BTcMJ0BV+/6778gD/3lYeTNPgJRp1hlnygY4SJ01 a5a8/OLzMmfOWeIDUkMCd/Ellyj3DlS/8qIDVdG0GVyGm4+UFCXBnxilX8Xw47UZamRKtR5E2ZSe sX7eOqUkjL9Pnz5DYbELvrNmn3WWUgXTM/s+eKmfOesMpaZmIs5TIHXjDU26xqDvrhWQYJ2OftNL /U70lT7E5t1403HC1BYTSl+7bwtUdZkagUYQWBazRlZCjdDfu6d4mJw6/ce1EnY6RpO4V9lHX93Q XhdE43CvcrT62LBMYuHWBmXb4lxyrXJAgFc/Oaf7JBkcaNu+fTZm75M/N6+RPnkB4ghSTON4SjHC YQ9HVwhBwUHKWWZGeppsA2lwgxSDxvMeuMV3DJIj2moF4AZkQV6BjB0/ThYvWoS8kYpY8d/t27bA VixN2XFlZWWCsKSD8OTDPUQ6fs9W9nBbUS5dPNBexw8uF+gri8byvMHZFwb+dPT59JOPS0RYuLKz WwiP6CEhIcqGLhIXG4pAJugpnjZjtIUjuaCkh9KbbJAK3jQ8gDI3gQgFI18RXETw8oAv1Ggh+I42 SbzNSRcbtCsKhL8xtovt5b+0xaOk6+jRI+oCAAkbywoBuZs6bbp649GmaR3aU4HblrxkkYm8JG+0 CaIbCif8q+yoIDCLgBsK2t/xZioPTT16dJfF8GPGvlMixjz74bKDvsZ4OYN+xcIgaTa7qWiLTUZL iNoCVV2mRqARBL7Y8wOMiivkhpGXK0NbZSGrk0agMyPAkCI1hsa22s0XD0BC9L/n5IvpT8mEqVNg +7MdtmTr5JHHnpAH/nUfPLOPlyGQwBTCqzlvDXaDKmkGpBfcnKlKe+uN1+HTarCcd955yjXEM089 iZuGBXI9/GbRvcJXX32h3CDMOP10JR3x8/NXBsu8pXgQBGTw0KEyEp7PGWiWtkI00OcFgXyQlipI aeiPi/6lfl64AM5Lv5E77rpHqcFGwV6H0pdzzj9fSYUC4XqC0pz1a9fIWPiwygSRoSrwMELQDIAz 1H4D+sMnVwjIUolS6w1Em4fgosAyOCulZHQynHe++MLzMhISIEqXKJWh1CgZxOyBhx5WhIiOVn+H DRD9fZmgYjty5Kjcc999amip9nrumWfkLEiDqvBuo8PS/pAq9YVqbP5XX+LWpoecfe45cgxt9eMl jJpYgFSbRcGJ6Vtvvq6IX2S3HrCzOlM++vADZctEVfYfiKfYD77AGrO/ssbc0jZE1kBRl6ERaCoC 4D8OOA3h7Yh/4bcHYmX90Rh06jlg42SIS5dqntLiUkVegiENCoS6SHkLh20NCQ6lI7QjUhs47OhI ZuhLi3H5aEDsi3AscQg7Q/UYb2UNGToE3skPqrxLoLqiqwVKWqrVbtW3z+hg9ACICm860olmUhLs hvBOoJuJchja08dUGaRDlNrQeek2SHPoZHQkfF/RBQPbQANoHrB4I5FqWDrv5I0ydYML31PyQl9U bDfVwZvgJZ4SG0pd6COLKjCqxiiVikH7Kf0JCgoEOXKGusxYHQIG0iKSs59/+gmqq+1KWkWJGIkW 1XF0nEoDb7qwoJsHqoSPoqxjx1JQtxfsncqVf7AqYEAcGAg6HapF3uA0S4uiEWyZWLOdrvA7xtiD rNMb+ekzjD60LINAN/WV25zntMqsOWjpZzUCrURgT8YBMeIFNzrir1tGrSxSZ9cIaARaicDGpN2y buNqmRUxHtKaIVDNhAtjnFH6MxySG7orSMJtLdqAUag7ELY7VFlRDTV27FgYQDsp4+N+8BjORNsY uj2g6waGYuFmTtJBZ6VUo/WDSo6kgoRgOqRGVB0xRh09uSdAGuOEA1MZHJOSIJGBUe1F31ZUU9EB KX14MTAy/X4xBiBVZQxlYyYNybhFloPfKWliu+i+gW4f1sImKQ/lUBrDcDl0E0H3GCRylNqkI27e adOmKWJCJ6MkZ/SvRYK4HBKaQZAo0ai8CPZDlNqwvcQoCb6wSODoB4z48SZeHlRwgwYOVm4lSKro xX0gpFQkd2wny6RrCmLI9lKFyP5OmjRZGYDTHQfD5JD0UVJGUkW/Y8S1rZJWmbUVsrpcjUADCFBl VgGnfjeOulzjoxHQCNgIAi9u/kg+3/mLLDrrDemBTZgSFm7EDJMSCbVYMSQyRUXFSrJD43hu5vSh FQqyQSefjIlHo2kSBCbzLSsaFnOjJwHwgd0Nn2UMPNr+8O/8nmXRKJpx95S9D3zxsG7eMqMdDZ2A +kByxRtg2fBWzhAwzMc4gLy5SFUXfXtV30qjLyA/eRsqPLb7+nk3qLZQusU6C0EqwPSU3yo67PTA LbUw2CQxsT38MBYgDZnNt8XYJl7Xp8QsDI5G6ZPsEOx5aAxu9k/EAMJsAz2k098R1XckN16QrNGO yBUe1umolCF8KBky94kG6f5QH9IPWBkkSew3pWr8l0SKfaVkjX7F2E9i1ZZBijUhspEFqZvRNRDQ hKhrjLPupX0h8Nzuj2V+4irZed4XzW74D/CCToPkaxGDjpKajk4kX/+65y5lVzR79llWbQ5Vcq++ +oqMgVRs9uw5Vi3bFgrTNkS2MAq6DRoBjYBGQCPQcQjwfoOhSoyQnjQ3TYEh8iWXXmoTZIhtp6To zrvvVQ4OrZ3ofuDyK65s1DGltetr7/I0IWpvxHV9XRoBBxpTI2aSThoBjYDtIECv5A4IjOsE4+rm JtrgdJRn5YbaSjVb3379lHrK2onqQroOMDtPtHb5HV2eVpl19Ajo+q2KAPXlDXmQtWolLSzMGYaX C6IXiwE2AX8bdj5uXTA+UgsLa6NsZruFjggE2kZd0sWeAAHaanC9WNsJpb2Azig0bs7u8uT29+T7 +BWy+YLP4S4VtjhNlBSRINCeR68XexnxE7dTE6LOMY66FzUI0PDvlddeg8fURPjQcLUpXJzguTe9 KEsZPkb4hgkjbNtSot8QbpB333UXvOGeaktN021pIwToT+ajjz/BVWeXLrupuzm5ya7Mg5JUnCaz e04G0vAQ1oSTSllpOWxpRssd//d/9QKkttFw6WLbGAFNiNoYYF18+yKwd89euf/BB+ErI0rdRuDN DFtJFAYxtheTobI6RpI5TmqHt7Hm9sxviOF01513ynUwENWp8yPwwosvyurVaxAk9FQVH6urJXNs N08nd3GFz578CtzCasK6dMFNqsSEJHWD6ovPP1O3n3SyfwQ0IbL/MdQ9qIXAzp27ZBHc5t955/8p b7C1AwxqoBpHgCJ/fh57/HFcHY4CIbpGw9UFEHj5lVfUVfGLLrywC68V0qLmHU2oWj6EYKsvvPiC PAvPzKG4jq6T/SPQfAsy+++z7kEnR4AvK2f4rGDiz/pzcgzMNhC0idCpayFgHvOuu05gNdTM9wRn CHHTtkOda61oQtS5xlP3BghQKkRbGJ2aj4DGrfmY2XsOLUVt2QhyrTTF1qhlpetcHYGAJkQdgbqu 024QSEe8oUW//CJLFv+mvL3WTrydswQ2N3FxsSogIz+NJcYqWrhggYo+zRfpCgSIZPRmy8S//bTw x+N/ZtyjFSv+kGjEPGKi99jPP/tEubrXSSNgywiUwSPzH8t/VzGwOH8tideG9esRSX6TJGIur137 Z6OHGMbTWoz1t33bNlUGg5KuX7f2eHnbtm+TDYjRpZNGoLUIaELUWgR1/k6NAL2+7kV06uzsHHn1 5RcRyDD+eH/Nbvn5Qqe7fEZsbizx2bVr16pgiRS1HzlyqEGzBQaRdPfwPF6Mo6ODcqfPoIlMDAS5 hZsI4h3ppBGwZQSott69e4+aqyRFC378i+iz3YyHFZ8Qr9YNY11RbdVQcoMzwF07dyIq/EH1TD6i yHM9mp+n9+SDCA6qk0agtQhoQtRaBHX+To0Ana4NQxDD8RPGSwqkO7GI4kwCtGfPHhX8cQACHTL5 +/urwI4MnMiXNyVBPNGmIgAjo0v7Ih7QsOHDEMQxVZGifv0HiiOu4TPKM+MG7d+3TwVezMrKklOG j5AcxDNisEfGG2K5Cdg4tm3dqurq1au3inFEsnYAgSNz8awtJErM2O7EhAS0N8Hqt5YY1ZvkNAVB NimtYx2MAWWZYhG0ku4XGOspGc82lhhYMyMzAxtzsXqEATAZgsGcDiMqNwNwNiWVI9I3A1oy8jfr bkwNxQCcHG9ixfrTEa9JRVC3SOwjsTQnbvqcI8yv2orvKHVpKG9T2tsez/AQ0H9Af9xgG6eCh+7f t0dKSktkB+Y1x61nz15q3TD2Fec00xFIUhkNPfrAARUzi89xTYyFG4gi/GyO2dW3X185dPCQwpKX AHijNA4R0inRPXjwoIoLVlxSrNZHfg1m7dFnXYd9I6Cj3dv3+OnWWyCQhqCCh6F2moBAizxZtjY5 wnMtT598KZPI8MW9dfNm2QtCVIFN0AcvYr549+F3Rqg+gBf57l271Oa6euVKBE/0VKTIA6dgHoAP HNivAjjylFuIgJEroVKIPXpUliGS9JbNmyTmaAw21lQVFZuqspijRyQCAQ5/WrhA1qxaiSjcEdgE MiQiIlJtHl998QU2yVwZNXpMa7uq8q9es0Z53R05YkSzy+Nm/eknH0scSERmRqbCnwElm5tI9Ljx kfTVTqXYTN9+601FAvbt3Ss7du5AJPF90htj4uXtdfzRjz78AMQmR2FPQslglQ0lkqo34bOKEore uGm1cuUKXKPOUpHAmV5+6UVJRF8mIvr2yVIaSO/ChQtVMFBuzN0RWNMc+LJ23uXw+8NxZSwokp6l S5fI4MGDIfmrO1dJptlPRipn4rx+6YXnQaT7S3hEhOzZvVu+//67Vs/zjRs3qvEePGjQybrYou/j YuMkAySFAT37ou1cm4yyzjnPq+oG9DE2JlYRyXzMY7aH64VEdC/62AOkiarosWNPlT8RQDU8IlyR YUaCJyE8cGCfuiWXlZmFv2dhTVZgbuxRkdZ37Nguv/76K+ZiuoweM7ZF7T9RJrZjPVR1s2bObHCs rV6hLrDNEdASojaHWFdgzwjwFgk34lK8gC+/8ioYUVbJqDGjZdq06bADWq4iV3t7eUs3bLokKCRN V119jUyZcppMmz5DUlNSlLQgEBGchwwdjo2hSLbD5iEsLBSn5iBlE8QNuQc20Jtv+bvMveACdaLl NV5GmC4qKFS2FYwfdBO+j8FGUlVZpaQfjHx9zvnnST9IqWzBuJNYkRQxCjb7QZJCPMzSEG5W/L62 LRZP9GZpCn8mEVoFIrkFpJOJ/SRBYqI91cCBg4BNGNSKHqqeTORZB3sS5qNUjmno8OHiDEeDAwcO lBEjRx4nFIw0zrIomeHzlFpQikEJG9vAiOID+g9QGzjTqZBsEHvzp7y82k+PWWrBnym1IFl2AaEh 8brw4osx7tPVmLLtWTV2Z5w/7Luvn6/auJ1B9ijlCQ0JRflVkgMVEBMlKHxu9Jgx0h8EwgDMGDk8 FMRy5NgxirBVgkQMHDRQhqOfxKSkuKSOZMuW1hvnJXEYN348JJ19Zef2rXLuuecpSWpycpJ4Yhx5 QCDGK2FXN37ceJlz1lky5bSp6FcxpEDRivBwPfiDuP0BMslo6BGREepAUl5eAQzgbRrkm9ImL6zF YGAVC7s+1nvGmWfi2UhbgkS3xYYR0BIiGx4c3bTmI2BtCZHBaFC2CxMnTlSqq0OHDynJhZeXpxzG 33nqpVNb2vpw8+dpd/gpp4iPt7cEYcN99523JQT/Tpo8RRGcRT//BIPoBDkHmwKlSbkgNdyI6fV2 0OAh2KCdsAkchCQoXEl+MtMzpHvPHuplz8CKxagjB5sspQ/wpytzEM26W7dux68NNx+xujlaIyEi 4aGRLKUtB6MPKunQ78uWSQxUHySVWzZtls8+/USpG319QfZgQ0K7Km6MTEuXLJF9UAvtgUSAxDM4 OARqxDWK6JDAUCJACUwkNsNy1NUNkjOqIz083KUS3r+pUjQaKhUWJGEHID0i6XB3c5c1q1cpiUMy CCrbyfz8jqR0P6QMPbr3UCoaeimmSscFRIkquiw43nOCM838/DzVNk/Ydx2AxPD3pUsh3TAoSV9u Tq7y9EyyYjRWKvUN2/AnpG1U65GAffrxR8rwd9So0SDOh5WkkcQqDeq1OKhhSQZpK/Y58KEUhSoj xtei+mc/1D6cX3l5+bIMGCVAmjJw0GApBUFj3ynBXLpsqZL0kOQ1J7W1hIj9CIWUa+rUaZi3uYro Tp9xOg4KqeKGtnNOE6sSzAXOA6qoB6FvJD3EgernC+AjycXFVYqKiuTrr76Us88+F30+gMNFYfVh pHs35SCRdkh0mMhxVapFLEweJHgYccWatbZLCS0has5Ms49ntYTIPsZJt7KDEOApc/OGjcftdCKh qloN0f1WbL6nQUp07Fia2kipQnOBESnVZvf/+z6oc3YqQsANMATSILMB6BiI7gcNGQL7IUel9qEN xC6o2BIS46UYmwIlRvzQ43ZyUrJSPx3GprhxwwZsEEeUeqUM37tik+dG/Ogj/63ePG3AfxAlREac 9HPQrpiYo2ijq3hBbfXd/G8RDBJGs8CmEiSiW7fusgxEiTZTlHbQjmrjxvUyctRIJWUh+aOR+n4S RtrcYLP75aeFYoIkJQLqIrrRKy0pVeqVEcCXDjh3bN8OIjpCvv3mS5CYDBV53MvbB/ZeCbLgh++l T+8+0gdBKem5/CCkDsdApCgtGjoUdl0wWN8J9VtwSLXEiCSURISJv5OQZWVlK8nWaqgtqdp083BT RIS3nSipYH0sj/Zl3IzZN0qD2JcN69fi7/FqLvSHBIoqvkW//KRIXn9I9xxACChdpJqI7ToVUhIj 4t1xblDtxzlIEkmSNn7CRKkAhjEgUe4gE9vRb35nQN1myVYHLZV61VLqthvkNjU5RX1HqY4f1GQ/ YDy8IT10wxw+BOLMdhNfqrV4g/Kbb75Wh45+wCocKmJPz2p1KMe+Pw4l3TFH4uPi1Ycq6G24dcaD EEnwz1AtrwURJYFKPZYi/334P0od5wTsdNIInAwBLSE6GUL6e7tCwOoSohrVSiTE7hTt8wTOTSoo KBjGouPVrS8Sn3Ccgnth0x0xYqT4QhI0GjY9VHdUQtJBEuQNiRETX+ZU+1B6xM2SUamHDhsO1c4o 6d27N6RFfupvA6DuoZ3QuPETQBRGK8JDA9VBsPUIwKbCzX0ADLM9QDRGwN6HKiRrpNZIiEgIdoII zoRNxXD0yQGkj+3cDAJx5uw5UCO5KUd206bNkN17dis1x9UIEUJMV65YIVdfc61Eoe+bN21UtjNF RcXAZYRMgA0PJWvEmzi6gnwU47s+UX1k8qQpchSShNjYo0pdRcLiHxAIqUCwsoNKpnE71DQXXXKp DAYR9QPR2rhxg5I0nX32OUqStwfkk9e+L774EkVuqYqkwa8DqFd2Vg4IbZgaewb8PAYJE7G+9dbb lCqGUijalI2Feo3jzbEgqaM6NapvX6UK5fchoSFy2eWXq/YbDEb59uuvlS0QVXrxIG1ULVHSR5J0 6d8uUzY3Li7OSp1GAhwQ4K8kkTNOn4H5FqqkSyQUSUkJau5dAxzdgK83SGBznAW2pYSIfaEktRfm NSU+jJDes0cvSG6gdh41Sq2BAKwBrokIEJ9Ro0er5wZhfXCOp6YmIwRPP4kELkyekIoOGTpU4RYJ Us15w4sKlLZ1h4SPuMPfujpwTARxpNqREqSRqOtEN0Bbum60hKilyNluPk2IbHdsdMtagIC1CRHF 8HyhUw3CjYaSHm5cfPnyFMuXMu0bSF64aXLDI+HhZr8CmzxtQsbgxWzepPhiprqLv3PT79Gzp/rQ CJebGevh36n+YD3cDChpoBqKdTEf1QokU/wMGDDQamSIcLeGEFHl8+P336PtgVATleJW0X4Yu2Yo FdVRGIcTH6oDSSxoZJ4GycAR3CiiFICGttu3bYVKsEipU3JASvKhItoKMkVpEcumBIUqKKoNeaOL Y9AT2LF8qrkoWfPzD1DqK6oVaZeSDTUWMSMpqoC9CTfUHainAuqw6bDx4nepKckgSElyOojcF59+ qiQNVH/yZheJhx/Ue1u3bJb9e/eB2IRBUndIcpV6zAiJz0AVrJc2QlTpUd3DseNmSZVoMex7qPo6 jBtRrJtjSNXpb/BtNXnKFClA+ct++02p1UyQqNBGbMbpM5XqkaqfDZA0sS20p2FKxS3F8rJyEIkA OQzVmzOI8ioYg6u/AXfazzQntSUh4loh2TEbhhNrYkOSQzUx5zrnMo2rQyFF5ZohiQzBetq3b6+6 VTcBqmoSKSYePkiUmDj3uSZYPp/nGuTao8SNNkcsu/rmZz+rXK5oCFNNiJoz0+zjWa0ys49x0q1s IgJ86VKaQlWHNZKZyDTn1K3qxWmeL+PTsbk15l/FGu2zdhmOVL05tix8hzM2rBE4jefC3iYBkplQ bHZUoZ11zrnqNp4B9jWpUP+4gRCee/5cmQqV425seq4gnVdBOhQPfzXuHl5y1nnniZdfgEwHQSnC Rl+EW3yXw1DdiLEtgXqKErpIEEiXmluEQ4YNkykoKwUEaywkagMGDsYmHA7iJdIbEqq/wY4kHbeQ SkGCSGKHQhIxa845x6Ebg0133i23SDDIzin4zhPEzQOkJRx1jICkLwKbLkPx+kPKMxLfD4CUbhfI kX9gkBhQx0C4ZQgJD1OG1YYaD+nTMO5BILZ5IDKnw/h7PKRc5vZys77i+nkyFNJEbujuwMMbRCEM NlFjYXzMm1fsH4n1EEiQKiAa8gsKlAGQfOTAbsYXpKA/jKq90cbTQOoGgIQdgWQrspHbdCecIzUh K6w9j1he7TXT3DVACSwJKyVGtppo79fs94Ktdka3SyGgg7vqidCpEKA9zuLFS+Suu+48frLsVB1s 4848+fTT0gsn7GuvvNLqNS3H7bH1G9bJYw8/crxsXBAS86ms9s8NVc7vaT/UGF0rB3FwA2lqLC/r WQf11UFIpS6Fes0PROREz9b+joSIFNtcujkcaDmkOmyXRyNOBcvwvXsj3zUV4Nq40GORdah+de2v vP669IWqd+7c85vaHP1cDQIxuEDx7HPPyjNYMzq4a+eYFpoQdY5x1L2oQWDlylVyz733QpXRD3YD Hh16HZ2nR1u4Dt+UyaFOuvhv94GD8n/BAXJZvygpgv1KNQVpWqL9Bo7MtR7+K68LpE7rYLeTWZAv Zw8ZqkgNb8k54e/m+Gk0uiZe/LAsfk/nlSZQDjrBVFIGlH/c6SGfrWkf7ZWc8H0l72DT2MaiGZQa styfcdMsCGVMgVSpCs+ouvA7/0dVniPaw6yqZJajEqSOKJu/8xn1NNvB51EvE39Wlda0ST2Dm2Fs Fw25FS612su+sE9M6mfWaa6vVvuZX0GKB6rbh/KYTz1TXaaqh+1H3814nGzE+DzJ4zv7D8gyZ1eJ gkTK5uLY1fTvZH3piO+JOdWxNPj+8IP3lXpOJ/tHQBMi+x9D3YNaCPyyaJHMPV+fdls8KRxd5G1P F5lbXip5LS6kfka8aKQCKjUHJ2dxgq0P9pNmUK3WN6SGU4gBajZKc6pg80P60FUT8fBE9z+FivLx wqKuCkOr+3021MHzv/3m+KWJVheoC+hQBDQh6lD4deXWRuAPGDLfceed6mozDaKrjp/yrV1T5ypP CVRwIj8AT9n3BPnL5X16SSFsfqyVzKou1kO1T8OKLWvV1nA5bAPVTSRC1XKerpsofHGD9Ol/cOWw AFK4KNyYs+UwILY2UpQYpsM9QyjsyugZXUuIbG2EWtYeTYhahpvOZaMI0IboN0Sgv+22f4gXTr/2 orLqcDiVtstBnn3+efjs6S3XXnEF/P5YjxB1eP90A+oiQDUhPq+8+Va1h+0LL4BPKD3eTZ0mVJkx Zt5Lr7yibYiaCpodPKcJkR0Mkm5i0xHYtWs3jKoXy91336UkRDo1D4Enn3pKeuJm1nVtYFTdvJbo p9sDgZdhVN0f430+bvbp1DwEYhGn7Zlnn9GEqHmw2fTT+tq9TQ+PblxzEaBEiKJ/OoXTqfkIKMNa LSloPnD2mqMmVpu9Nr8j2813jJZAd+QIWL9uTYisj6kuUSOgEdAIaAQ0AhoBO0NAEyI7GzDdXI2A RkAjoBHQCGgErI+AJkTWx1SXqBHQCGgENAIaAY2AnSGgCZGdDZhurkZAI6AR0AhoBDQC1kdAEyLr Y6pL1AhoBDQCGgGNgEbAzhDQhMjOBkw3VyOgEdAIaAQ0AhoB6yOgCZH1MdUlagQ0AhoBjYBGQCNg ZwhoQmRnA6abqxHQCGgENAIaAY2A9RHQhMj6mOoSNQIaAY2ARkAjoBGwMwQ0IbKzAdPNPTkCjNGk U0sR0Ni1FDmdr2shoF8znW+8NSHqfGPaxXtkEicnJ/H09OziOLSs+y4uzogFz7jwOnUJBDDU7m5u XaKr1u4kYyXqw5e1Ue3Y8nRw147FX9duZQR2794tzzzzrJx22hTx9fPTEbybiC+jd5NIfv7553Ll lVfJvOuva2JO/Zg9I/Dcc89LbFysTJ82TcrLK+y5K+3adhdXF4mLi5Ot27bJxx9+KMHBwe1av66s bRDQhKhtcNWldhACKSkp8vwLL0pycrK44eSrZR3NGAgExq0oL5d/3XefTJw0sRkZ9aP2isCvv/0m H374kbh7uKMLWl3a1HGkuqy0pFRGjx4t9917j5ZINxU4G39OEyIbHyDdvOYhUFVVJWXY1I02HO3e bHsA/mFziVIiqgIcHbU23eYGpw0axHVSWlYmVZiMmg41H2AeulxdXbXqrPnQ2WQOTYhsclh0ozQC GgGNgEZAI6ARaE8E9DGwPdHWdWkEgMDG+ALZlVqksdAIaAQ0AhoBG0JAEyIbGgzdlK6BwM7kIjmQ VtI1Oqt7qRFoAwQqKiqktLRUlWyA2s9oNNaphX+jKpCppKTk+M3JkuJi9TcTVISVlZVSVvMMf2cq h7q9duLfc3JyJDU1tV49VM/zo1PnQcDpMaTO0x3dE42A7SOwJbFAPFycZHiEl+03VrdQI2CDCJCk bNu2FRcnXOVg9EEJj4hQJGfHju2w6XGT6AP7Zf++feLi4iJ/rlkDUlQseXl5smH9OgkOCpZ9+/dJ bGwMnotWZGrH9u3Iu0OKi4ukqLBYQkJCVK9VPVu3SmFhoSp/9erVQjIWFhYmC378QUJCQ8XLS69j G5wiLWqSlhC1CDadSSPQcgQcYVWtnbq1HD+dUyPg6+srqbhR+r933lUEhYbNCfHxsn7DeklISJAi SIIy0tMkDqTH3d1dNm3YKIt++RnEqFTS0tLk6NGjkpKSqqRMRw4fVJKitX/+qSRE+/bvlarKaslP fn6+eILw8DbZ0SNHJAb5kpISFXn64rPPcNOsWuKkU+dAQBOizjGOuhcaAY2ARqDLIMDbXd179JAD kPQMHTZM9TswKEj69+2vVGRRUf1k8JAhEhnZTcLCwyQrO0uOpaZAxVWppEjh4eEyZMhQGT1mDPIF S6/evWXCxIkyYsRIcXN3k+zcbFWms7MzJFDR8vvvy5SU6KyzzoK/Lhf5/rv5EoT6Skur1XI6dQ4E rH/LDGLFKrDsSjDvKkxM/mxODrjK6wrRpqOFZ9TKoiKpyMiojyjKcgTzd42MFAdcB66dDLm5YszG pLW8HgydrhMYvSsmvOUxnHUYwfgty4IyWZwDAsTFwrmWCWVVHDum+sK2104m5HGFuNQZzv/q/B26 63LkMfHadwNiALbLycKLchXKL0OeetdeqdfGgnQjZsChdjIWFIiBmDXQfweciNyImcV3BuBlhAgY K7peX5x9fKoxq9MZ+KVJT5dKvAgayuMSGCgueClY4kLMqqibb6BtrhA1O6GuOnlwwlOY0Q6gNma8 Csw5g3Y54ip47VSFEyDbVi9hzBzMcwbY1cEMInNjVlb9dmEsHTlngLPlmBkyM6US+RrEzN9fXGpE 68froS8fnEAr0T5L/PE2FvfIMHl3V5H4ezjLFaOqxfLsdzlsFGCk0OCccSFmFmJ54st6WKblmJnn DHGonTiOas5YzktihjnD/luuDc4XNWcs5z/XGecM1kA9zDAuRtRVb80gjwvWmbPFnGEf1PjTJsSy HuDJOurNGWBVAcwamjMcK86zenMG7yOFmWUihsBKrRnLOYP3hRFzoKH+O2Idc23W6z/mmBFzpqH+ 833R4JwBZlV4DzZUD99LzphrddYM5gzXmQlrx7J+WsMozLy9664ZvIuZh+87y3Wm5gzWmYPlu5lz hv3nuwi4ch46Yq7wOct3Un1g2+4vVHN9/tmnsm7tWrnxppulX//+iqBQ9VVWXgapkIdkZWaIP+ab l5e3bN60UQ5FH5Dpp8+S9VCbzZkzB8THQ6nSaAeUnZklPXv3kkmTJsvixb/J8OHDpUePnsr54gGo 3wYNGiyxMTFKgpSTmyNbN2+W5KQEufa6eXLhxZe0XUd1ye2KgNUJURnElSlvvCHF+/eLEYvPCS8U E1UEmHQm6HOjvvpKfMePr9PJrO+/lxQ4g+NztReqAya9AxbpgIULxb179zp5Ul54QTJef11tfnUS XpRuYP0Dv/uuDvEiuYm7/XbJ//nneouepM3/b3+TqNdeq7eBxlx1lRTv2lV38dMgD/VEPPSQRKLM 2qnk8GGJueIKMWLjqfNyRR7qoHu9954EYjHWTvmrVkncDTdUb261NwS8uByw6fRDX7yGDq2TJ/3j jyXlkUfEkS/wWhsciZjbgAHS/4cfhISldkp8+GHJRD4ni5ce++93xhkShe9qb4hVKOvodddJEXTw li8/5gm99VbpjjbUTtxwDl16qRjxInHAeB9PfKFiPLtj3IKvvLJOnmJ4lz582WXigA2rNvGg0aMB bR0M0bTfpEl18mRjHA/ecYfy/1HbfX4V6nDt1k2Gf/utuOPUVzslv/qqxL30kjizXbUwM2JT8Zsw QYahHkeLTeQIxjftp5/E2WKeGdD/cLR5AMqsnUjU9mEuFaBPThb950t85GP/ka9HXy5+jpVy+chq 77ZcM/suukjKMWfUeNYkzlmuiYFvvinB551Xd86sXy8Hrr1WEYLaGy/774RxH/bFF+J9yil18mR8 +aUcefBBNca1MeNc9hw0SIZ//bW4kODUSgkwMUz84IMGMQvCnBmM7+qMM/IexJzJWrGibv/xdxq6 dr/xRol6/PF664z9L4JKwqk2IcGcMQKDfk8+KREos846O3BA9mGeGbBhO9Yi+DyomLBhD0W7/OF9 uXbKWbpUDmLOcnOvjVklMCMZGv7NN+IeFVUnT8o770jcs88qL9515gz64ov3zHC8zyznzNF775W0 +fOr+1JrnrH/4RdeKAMwnrUT1+x+vDPyNm2qP2fQn9533y097rmnTp5yOB7di/6X4d/amHHOVKHO QZiXwairdirYuFH2A0eS6dqYVaEOEs5hmB/eo0bVnTPA5MgDDwg2CnEGAfSAVMYZhwB+vCCZCcNc d7I4FNYpoI1+SUpMVFKbMWNPVRKfN15+UZ598WUZjPdkRVm5bNy4QdkMnTJiBGyFYsUDc4LEpxjr 04DxHorn+D4moZo+Y4ZQjd2rV28lZVqzZrWceeZsJR3KBKmiZCgqqq+SFH311Zdy6rhxMn78BPlu /jcyffoMGX7KiDbqpS62vRGwusqsHHrd7LfflqJly6R8zx6pwMveAN2uERO4FAzbAMmGZarEicqA 7w01z/J5lQeLvRQbi5I2WCQj6jHQ8r/m2eP/4u+leFnyxVDnpcOXKzZpkjTLPDw1lWPRWCZuLoaD B8VoUY8R7eTplJ96fcEp1wBjPgPaXrse5ilHHyt52rZIlSCN6lliULs/SUlSgb5Q0maZDDhRGoiB BWbqb1i4SkJlkdRYNNB//s2I/ptvWhzPxpM7Nin20xIz4sjxqYcZJWTsP9tRuy+om2OmJDSWY4mT cdmhQ2JEf4+PPfKW4/cC6OwpDavXf5STD7zyUW4+nj3+QZuKQMYbmjOcm/noS708+FsxiCw3U8tU jP6rPLXr4M/ofxn+tUycdzwM5LOu2nnYTmJCSaCFFIRtLQLpzkfb6+Sp6Z+S0FjOGbzsCzBmCgOL /hdi3VHq2tCcUXVYYoZ2FWGeK2mDRSpj+Y1hhrGpJ6FCfmJZr/9sI+opw5jWwwxzpmjv3vr9Zzs5 JxqQHldiTRRgbfD7Ov3nnMGYUUJTb55Bqqz63hBmmLOU1NZbM+x7I5gVEzOL203MX4b3jOp/Azjz HVh/0WDOoKwG5wzq5rythxnnDMa5sTljaGCdVWIdEZsGMQOWShJskYi9wos4Y42m//GHJIMkxeLQ G/voow1Laev30Op/IXH522WXy8iRI2UO1FhTTpsqAf4B0hukpm+//jILZP38uRfIxImTFIE5c/Yc ueDCi2QaCMxVV10tuTm50hck50r8PGHCREWsuoHsFQCjBIzfe+++I6+/+ops27JFunWrPowPGDhQ rr9+nkybNl0ZVd90899lyNBqdZ1OnQOBFkmIKJKlhMIVUpvAM8+sg0QZFnwspD08gbritKVEvZQO UC2BU3bI1VeLe8+edfIUY2FnQwqkLj7W3izwsnHGaTfs+uvrqabyIFXJwynUUsQLCztx79tXQlGP pYQm88cfpXjnTqUeqJ1MeLn4YNEEzZ1b5++V+HsGTtrleLHVqYf9QT0BZ58tvhaSC76I0hEPSqnm ap92SdCQL+Tyy9VpvHbiSzITLxm1IVv0n2J59p8qgNqpAAs159dfq+uoLSGigSHE+MxjqZrLWbJE 8tetUyJvy/574sQUglNqnWCFaE86JC2lIFiWOBMzP5zAAyzGnxtx2qefqk2sIQlREE6tlqdQqouI s9qQLE77LCMMUjpLaU8JXuAZkJyx77UJBokg50w4TsJUg9ZO+TgN5vz+uzhaSIgo7XLv10/CIbmy lDhmYV4WQgxfT82L/vtizgRbzJkq4J+OkzY3xTpSNaqSKSG54Bz5uLKv+EJIZVaZcfMmZkZs2LXn jFlCFHrJJeIFe4jaiWQsHdIJSwkRf6fEIgzzX6lzaqUizP0sSLs4x+pIlThnICEJv+aaemqW3OXL Jc8sIaw1z4gZ50woJASWarYMzBmSQkupYiXq8T/ttHrvDBLCY598Uk0Wa0vVKO0AbsHnnis+Y8fW 6QvnVxokepxvdTDjGsJ7JgzrzMNC2lPKDZ1zhirCWuuMc8YJG2wE+s+5U2edQarCdaP6WCsPx9mt Tx+J4HvGQnqYvWiRcH1azjP23xfGuZaSG657Su9KQDDrzRmMZ+CsWeI3dWqddvH9ouYM1OC1MTs+ ZyBxowSnzpzBeywdUkATxq72mKk5BFVYOOcM5kGdOQOibp4zxE0dHmsOA84wbB6GdypVuvaW9u3b KxHhERJkYSaRjff31i2bZAtUYhWYF2PGjNUqMXsb3Fa0t9mEiBt+yosvSsrLL0vQxRfLQLz8am+i fLmUQ23CxWJpX9OKduqsGoFOg8C761LE38sFhKiueqrTdFB3pNMiQPJG4k5CygOMF9SylirTZJgy uOD9z0OZrV6n5JnWZKqqF6KGak1e1depayLQLJVZIfwxHMRpPRV2IFwY6mRmEZCJi8OdeuYO0Ct3 zSHUvbY7BPSde7sbMt3gagQoWaKRtycklt6wobIkQ7RtSsKB+cA//ynxsD9rSN1rC1hyCTYUr0+T IVsYnY5rQ5MJEcXmhyFSzYXKoYpqDEz4Xs88U/8mTcf1RdesEbALBNTLWEfStIux0o1sHgJUv3ng xpcRNl5Hn3hCeCnB0IANXPNK1U9rBNoHgSYRIurDY/7xDymFsaQX9PJRMKjr98or4t6rV/u0Utei EehMCNCbgpYSdaYR1X2pQYC2foNgD9Yb+wUlMEkwqYj997+FRvA6aQRsHYGT2hCR3R+GrVAOXJZ7 4QpjX1xDtbwCbeud7Gzt+3F3lqw8miduTp1fzOAIUQpfrBaaWbsdUjdnB9kQh9Adrk5ySqSXGCur Yyjp1HwEaHDtjjVw08Rw6RNY96JA80vTOayJAG1Jj2GviIFrkgo6SoS7h95wt2CpYrNmnbosjUBr ETgpIeKV58O4sVGI2waD4C/Ib/Lk1tap87cCAQM20JvnH1aO/aKC3OGnpfNuqHQD4Ar1LP2B1HMJ 0AoMOzIrR8vD2UngYUjKjbjt1JGNsfO6nUCWVxzKlktHBOJT7eRSJ9tCIAP2pgfvv18qIREdDM1C OEwtdNII2CoCJyVEbDivHVfAW2mQhUNBW+1UZ25XcUWVPLokXu6c1k16+Lt15q7qvmkETorA/G3w 8AxidMVofWPvpGB1wAO8iRYHldmx//1Pevz3v9LLwpFrBzRJV6kRaBSBJtkQ+eA2gSZDtjGLaHpC KUO5wSJkg200T7dCI9CuCJRgHWgD9XaFvFmVMXxKTzhw7PfuuxIJuyKdNAK2jECTCJEtd6Crtq3z Ksq66ojqfrcEAfpj78Ra45ZAYnN5eE0//Kab6sdws7mW6gZ1dQQ0IbKzGeACI1JnHIn50Ukj0NUR cK1ZD10dB91/jYBGoPUI1LMhYjybCngi9bAIr9H6quy/hHKjSYrKjUpl1RF0hAEISwyV8twfSXLN qWEyMMSjw4yqqbDzdHEUL9yW0kkjQAQqIarJL6tU4TbaY33wcPDplnTxdHWUy+D1uwJG6raSVMR5 J0fxcUeYlHZBw1Z6rtuhEbBfBOoRIsZhysB1yZ7PPVcvfo79drP1LS/Dy/ah3+JkX2qJegEjdn3r C21mCRQKgQ/JwfQS6R3oJn64adZRt8wqsff4uTvL8+f3ke5+2ri7mUPZKR//3/pU+XFvliLK7ZEo JY3JKhNnEKMoXLsv56S0kWQyOai1+dCsHjIlys9GWqWboRHQCJwIgTqEiAELD15wgeQhmGHv99+X yJtv1ujVIJCYWy7/XRIn144NU0SkA/iQEkvRmPr9jcdk7vBg6RkAItL+vEwhQuPuDzam4XZPiEzr 56/niUZA7l54VCb09pO+wfAJ1A7zknNw0f5scXN2lDMHBtiWryq0bUl0roR4u8itk+oG2e3qU4WB gfPg184J8c78Jk7s6nDo/tsQAnUIET1SR8+cKU4wghuCKNeeiACuUzUCsdll8i5OwM+d20fo/6Qj 00O/xcttkyOkewdfu39pVZKM7u4tp/evG1W+I7HRdXccAv+BBPXWyZHt6g7iy+3p4g217QU4INha +nlftqQVVsjfJ2pCVHtsinbvVvuMN3zaDfzhB3HUwVRtbep22fbUkW1nL1gghqIiCZw7V5MhiylB DkQReFE5dFYdmHjNmA79Sm3g2j2dRNKuSSeNABGgUKi910cp/HLZwlpoaAaUVCAAtp4a9RDgVXxn NzcpWrVKCnfu1AhpBGwGgeOEqCI7W/J++kkcMVEDzjvPZhqoG6IR0AhoBDQCnQcBTwR/9b/0UjHi Ak/BypWdp2O6J3aPwHFCxMCt5bGx4j12rPhqva5ND2xnietl0yDrxtkNAu1grmQ3WNhFQyFV9ps9 W5wQkqfwzz+lsqzMLpqtG9n5EThOiIp27JBKBOTznT5dnDw9O3/P7bWHePtX4DYNrzbrpBHo6ggY oMbmdX+d7AsBL0Q/cO/dW8oQI9MA7YROGgFbQOA4ISoGIeKlVe+RI22hXboNjSBA3yvT+/lJgIeL xkgj0OkQ2HMwSRJSm75BnhLhJYND9QHO3iaCa1CQuAwaJMb0dCmDdkInjYAtIFBNiHAN0rB3rzi5 uopbVJQttMsu27A7Oknuf/4Hefz1n+Q/Ly2QZ99dLMcy8qzaFxKiSxDZO9TnL0J04EiKPPHGL/LV z5uktKzCqvXpwjQC1kCA64Dr4bn/LZaE5KxGi/z0x/WyYdsRyS8slU07j0rlSXwL0cfP2J4+dcrb eyhJHn9jkfy4ZLsYKzv2EoQ1sOuMZTg4OYn3pEmQ7lUJbzfrpBGwBQSqCRF0uaH/93/SHdGI3TUh avG4uLo4S4CflyxZvUf2gBzxZ2d4q7VW+m3lbtkdnVinuI07jsqiP3aJn4+nFBWXy879db+3Vt26 HI1AaxBYsT5aVm08IN4ebvLtr1skOS23weKcYF/i4uwk2bmFsnFHDAhN85wtrt50UNZvPYK15ykZ 2QWyeWdMk5u9dM1eWQcy1tS0c3+C/PT79qY+rp+zQMBzxAjh27F82zYxgRjppBHoaASqd2uw9ZBr rpEeDz4oLv7+Hd0mu61/cL8IeeDWs+Ss6afItRdPlFuvnCYhQb6Sm18sB2OOSXmFUfWtBFKcouIy ycgqON7XxNQciU3KkiPxGZJXUKL+noJNgy91pgqDUb5fvFUWrdgtxaXVUqCycoN899tWGTm0l9w5 b5bccsVU6dsLIQzwbAmeycwpVP8ysT6WbT5xFxSVHm8PfzYYKyFdMqDscmxWOXByp+0y7HYi2mDD 8wqKZdakIfLP62Zi3hlk2Z/7qtcC5ueh2DQxYv5Vv4ocpQo2QZFhAXLO6SNAjqpfUVm5RZJKaStt 6DC/zYlrwLyuCjHHuUZGDe0td6CeG/82RXp1r/ZPdCwjX7jGmFg+53lufokkH6smZlwXv+LA8QPy s5zqPHmSlpmvfuaao9SKiVJYrpdNO2Pl8wUbjz9jg7DbdJPc4efODXZElTk5YoS7F500Ah2NQB3x BcWYOrUeAb6gi0rKVUHZeUUyf9EWuffp+fIdTsZMb3++Uu556luhxIcv50TYTDz7zmKZe/Mbcv19 H8neQymSjL+99MFSee3j5dXkJrv6xPzNr1tl94FqKdDeQ8kS5OctU8cNUL874HQdFuyr/j7v3x/J B9+sxgu/mtx888sWufOJb3BKP6ieZdnra07Dz779qxyJS0e7VshXCzeiLb/JDpx+ddIIWAsBEh2z zyofLzcJDvBWRf+weIvc9t/PZdnaaoLEOezq4iRHE9IxZzeLo6OjFGMtvfDeYnn9498lLStfflq2 Q6KPpqrn/1i3X47Gp6mfDxxOUURqxJAe6ndXVxfpHh6oDiRPv/WLPPjCD+qQQcLz4PPfy6c/rJVH Xl0oMQkZ+FsppK8psmDZTtm8K06RnNdQ30sfLFNr+cDhZPng69VKxfPLHztRTg7WWar8seGg/LB0 h7Vg6lLlePTqJX0+/VTCH35YmWvopBHoaASsp8/p6J7YaP0kMjMmDZaPnp+HF2iSxCZmSHxSpnpJ XzhnjOQVlshnP66Tmy6bIlPG9pdLzx4ro4f1kj+3HJbbr54hp57SS35ft0/CQvzk3Jkj5dYrTsMJ uKfqLdVyZbgZ6OHuKgvxIn8LRIsvfJ62N20/KmecNkz69AyRrbtjQbwq5al7LpDdBxMlCSSJkqdC SIaY+DtJHA1aqfa78W+nyc/Ld0pBkb4Oa6PTyu6a5e7mKn9iTn44/091CJg2fqCab5S8vPbIlXII ElSSHTdXZ0WcKI2JASkimSfp6dsjRK6+YJL6nZLP6KPHMD9LoSJOkOBAX4UHDwJl5RXi7vaXfR0F nTx4nDV9uFx/yWT5/c+9SkK1fV+CDB/YXS6aPVq+/Gmj+Hh7yOkTB8rfIdWdMCpKVm+KlhsuPU1m TBgoS9fskcH9IsXTw1UdbsoR4DkiNECmjOkrl50zRq48f5zdjYctNJg+7/ymTRP/GTPE0R3hXnTS CHQwApoQtfEADOobIQV4uX/8/TpZvfmwEt1Hhvsr4uPv6ymVIC+FhWXSLTxAQoO8caL1FwNUAgt+ 3ymfLtgAorND9uFFT1skP7y0Q/HyJwFiCvT3wsvfGRtMlaTiRLsAz36+YL06VVPdcOopfZQ9Bu0i fH08FNHKzSuW/ThJ+3p7ijNO4kzeXu4qNlkQyhs2qBs2ih5Q8aVJFjYenTQC1kCAEqLkY3mKsM89 Y7Sa+2tB+l1BgEhMKLWhlNINZIbKWmca3Xq6g+AYZT2I1JD+kTJ8UHcQEX+ZOLqfmvM0zibRolSU KQDz1xXzvXaiSm3zrhgZhjk9dngf2Ye5T7I1oE+EjBneWwZBzU2VHUman4+7RIT4Yv0IbIN2y2dY fz8s3SY7QJ64RkbiIPIJpEpUjZO4eXi6ij9s9wJhK6iTRkAjYP8IaELUxmO4fU88bs0cVbYRfIlS JcATsFONetIHRGXogG7y8vtL1el3/MgotTlQNO8CY3faQ8ydNVq1shQvd8VcatKYYb3lWHq+xCRm Qpo0XR79v/MkHZIfnmC50ZiTozLsrrYJ8oRRKwkVpUiUBjHVNlxl+7jZRIb61TlptzFMuvhOjkBJ SZlcMmekPHrnXOnXO0z1lsSd842Jc5KSndq2a5yxDpi3TrhZaY6Bwe8HRrOmEE4AAGMaSURBVIXL gSOpiqhMHTfwOHIjBvVQ5dHeyJwoMWI9nP8mU5UiNk74XZWJVAHJKA8NrItSUkqUqmBPZKw04q6J kzocXDxnrHqW35M4peJQY86r/YF18omru9elENCEqA2Gm0bTZkPPw7BvqMSL+MZLYeAZGahITUmp Af9WGzvnF5TC70qO9OgWJGfNGCE9IoPUifO804fL7KlD5KKzxuBU7Kee7dUtUFJxwi6BQShTD5Q3 oG8Y1AD7oF7IlCNQMVCKREJDdQJf3kwTR/WFmqFI2Q+FBPrIyCE9ZeTgHspodNueONkL1QU3BarI qF7bvCtWBvUNV8/qpBGwBgLlhko1J2unCaP7QjpaKn9uPigBvl4yKCpCciDBpMEyr8vzIgAlRqed OhA2PKmyEwQoCfPfy9NNrQmqlbtHBB4vsjfUarQh+h23xQ5D6sMbmLzMMGXsANkE+7s/Nx+ClKi3 Il/5uLjAQwcPAzSwNmGt9EH+dEhaDYgVeOGZo+TMKUPkEqy/3j2ClQ0f7ZruvuFMlF2truuFNUvy lNQMv0nWwFKXoRHQCLQNAooQVcTFSTE8hlZpF+pWQblP9xAJh80P00zcrMmBvdDH36+VYZAEUc3V E0TGTDb4rxdE73+sPyQLYZzJa/N84c+cPFRdp5/3r4+VjQPTaacOUMbOR3FbjImn4Zsvm64MVB96 8Uel5poHuwd/EKq+PUPxRDUhouqMKojXP1kBg9OeUA14KHukPdHJSm0xc/JgcXd3ET+oMXjz5mcY jXITcqlRqVkFFF1Il0YgEqqunpF1I9KPwlykWuypt35VKjEfb3fpAYIThPnsC0mOWZI0Y+JgdUPs m183i3uN5DM8BKplEKew4L9IO9XKF501ViqMRnn41Z9hB3RIlXHm1GGyCtfxF6/eC4nSICWJGtAn XB0CvCAxHQgiRkHVVNg1HYbabj/8es2ZNhxr8oDc8O9PYHy9HlKnQkhNA9S64aGFlxUooWX6HTZO OmkENAL2j4ADRL6mpIsvltw1a6TfunXiBe+hOtVHID6nTF7/M0Uem91L/Dz+Ukc1hBVvhZlVZPye JMOAl7QvpDfOuEZswGmZ31NlRfsi3maZjRdwPgysN2w/Iv+5/XxFRrIh+ueJmUQlNMhHqRPScVWf hMZsR8TyeQ2Zthksn5uJESdcGo6SWJkTb+pko6zusFVydKxWF9BGiO2gsShVeLc/8oVcdu44ZdMR HOBTWzvX4JR49o9EmdjbF56z/fWU0QjIQ7/FyTVjw2RwWH3P0ZyPlFjWnreEjGslI6dAeuA2GOci f+cacXRwrDOHeQmhAuvGbC/0C4z+j+J22D03za6HPK/Fp2VWrxMeQJi4brh+eFChmov1eGHes02U 2nKtcFXQFYYnDigkalx7vCXKdUW/RlSnUe1NuyQeRvgzDzs8d5jrqd2Yb3bg9lp5pdwyMULPDo2A RsAOEFBbY1lurpQhnox2jmWdESPB4MvSnPgyDYU/Ip5MKanhpmC236FhczjE/8vW7odNRKKMHxEl jjX2DSQ3/fuEKTLExJcwX+iWmwrLorifzzNxQ6lNhvg3/k7JlJkM8W/BkE7ReaQbrifzdF0C0uSG 9lBqVctUyTqg6FK6NAKcY5bzloBwrfTuFqzIkPl3zmfLOcx5aiZDJDb0azRpTL8GMWU9faDmqk1S mNcstaUNnzcJkLLlc6z+uaakUDxHMsTE/P0hYWJetsm8prmOzT9Tvd0QGerSg92MztNLddrnn0tF RrXUWyeNQEcioN5CDvQBQQNHZXyoU3si4ImX9yVnnarshnphY5g97RRl9NkR6cbLpkoUHDvqpBGw ZQQoqRmNywa8jKCTfSOQ+cknknjDDVKyX6sd7XskO0frO2bn7RzYWa0XPGH+89rT5Qr4M6ktwWmo AqrelsNmIQeifGun6RMG4dqxv7WL1eVpBKyKANfIMFzB94GdkU72jYBDaak4Md4c/KnppBHoaAQ0 IeroEWhm/bwBsxTO5WgPpJNGQCOgEbBrBOBaRF396CCpuF1jpxtvdQQ0IWoGpLSrsWKs1mbU/Nej DH7JK8J/eSNqUTFWyVRjm22VsnQh9o8A56STnhTHB5JrVSeNgEbAfhDQhKiJY8VTTCWIiDn4Nu0Y 2vvDpvKGjAsDYNbEXm3vNpjrY1sqKk2qPTppBIiAEZPS7FiRs6Irf8wzQq8PvTY0AvaDgANeYKYj c+ZI9vLlMhyGbfrafcODV1BeJTf/ECeeLg7i5wpvzh3AA+hxmteXNy1eIcMnnyrBYSFirBX5uz2n HW/CHUgrllfnRsnQMI/2rFrXZaMI3LEgRuLgnqKbrwuckdpoI9upWZSUHUgvk5snhCpXBDo1jEDs TTdJzkcfST/sP/6zZmmYNAIdioAiREcRYC/nzz9lyL594j10aKMNoiM0xgGqdqnf9dLe9HKJzS4V xw5CgFeE6WNl4Q/LZfrp46R79zAV96wjUiUkQ0GeLjKxl5dSk3TF+dARuNtCnVz/HHPG8ap9CWDv sRLZllSEuVB1PCSHLbS3LdpAzeCJDkWUDLnB8ePp/fwk3FdHcm9sDDQhaovZqctsKQKKEKX885+S v3Gj9Pn+e/GIimqwLIrCv/p1q/wMt/hgBHCc1tIq7TMfzQF8XJ0QPBJ0qINOvw4AnaEGNm9DsEoE YWUwy0qzDq8DYCUM+aVGMQKQLjYdOgBt26mSqmN3FxeZd8FEmTlugO00TLfE7hAgIcqGhKi/lhDZ 3dh1xgYrQiTFiB+E64/OAQHiUBN01LKzefCi/Pcnv5U9R48ptU1XTR3EhRTc5kCY2Qgb4I+QBc7Y lDrSRkGToK65Cigd4tz725lj5LFbzuz00iDLUU7OKpaDyQUya6T2QN3aFRB79dVS+NVX0nPpUgmY Xd/reGvL1/k1As1BoJoQNSFlwe/NdY98hejQFTJn0iCIyp2Qq0lZm1C6fqQpCJAQMXzBEsQam4i4 ZmEMQ4AAlTppBNoLAXp5zkRImV/XRcvZpw2Xp287q8sRouikfFl/IF1umq2lY62dd+lvvSXFy5ZJ 6FNPifeIEa0tTufXCLQKgSYTouz8Irnyoc8lFOEhvnjq2lZVqjO3HAGGV/nPiwvk1qtmSM/uQS0v SOfUCLQQgZjkTPkbgp6eMWmoPHv72V2OEB1MzpcN0Rlywxn9W4igzmZGoAqaCSM+Lr6+4gCfRDpp BDoSgWZdu6eKpAo2K7Rj0aljECirqMR1d3zgsVonjUBHIFBRYVTX67uyylRfI7DOzHP08BDXwEBN hqwDpy6llQg0ixCxLuVbpGlatlY2TWdvCAFiX/3R+GgEOgYBvf47Bnddq0ZAI9C2CDSbELVtc3Tp J0PA09VR3OADyMNFD93JsNLfawQ0AhoBjYBGoKkINMuG6CrYEAX6espnT14jLvCxYUspHg7hvt6W LiWGqpMGSG1uuymMgS9GOGR0lBw4aEQownZRF7DeIDdHKUb8sjJU6oh4PxXlBlny43KZePp4CY8I xrV7tsZ2EokaPVjzanZHJSp0AzFWBrShyNj1VDsVUGnP6B8gswcGtMkQHIhJlasf/kJmTx4mz3RR G6KN0Zky74x+zcY3JqtUvt2ZJaW4HGGPrksMEE33DnCXa8aEiifckOikEehMCCgxQ/a770ocfBFV pKXZbd/Wx8HQMb5AvNzgKwgSFBcrfjyw8EvKjbJ2X7qKI+aOTd+a5TdWFl84Ww5lSk5BubANFAp5 ubvINRdOlB5hfoIutks7mtJXNzSO17EX7MmUtMJyNQ5NydcWz3ij7t0x2ZKYUaRe2m1Rh62WSdwz iwzy3c4MFUpDJ9tCYNmhXNmSWCA+7vY3L92cIZnGQXjRvmw5Cge1OmkEOhsCSkJ0aNIkyYVjxmEn 8FTNW2a2LCH6ZEuaIipXjAptkzEqLIaH6I2Jcu1MOK50aD911Y9r42TK4FAJC/Zqk35Zu9DHlsbL VWPCpH9Ix4bzWLIlSXqFesmQ3oHW7qLNl0dp6dtrU+Xxs3qDEFp/rmoJUb60VEL0yupk6RngJpeM CLH5edRYA5/5I1Gm9fWXyX18W92HKrhxMRkMQuNqBx3xvtV46gJah4B6Wzr6+Kirs405ZWxdFe2T m5Glyyra7vZbKVRx5VBdlUBl1p6pHCqfItwss4dENRkxKgNWHZ3YjuJy+8DN2liVYL7A7B5r2tol 6/JaiwDVZBVY0/acjFCJI4qQVVLae+9J9AUXSAkO4zppBDoageppzTdnJ3h7tuVrpnbk7vYcNHO9 7VlnS+vqKIwaaq894dZSvBvL15brwLJOs/d0a/ehM5fXnuPTFjhas/2lW7dK6R9/2LW5RltgrMvs GASsxPM7pvG6Vo2ARqDjEHC2lpig47qga+5gBBwQAoabkFaXdfBA6OoVApoQ6YmgEdAINBMBXFqA ge1+3DZ77avV8vrXq/Hvqnqfl75YIZ8t2izZecXNLF8/3mUQgGbCmhKnLoOb7mibIKAJUZvAqgvV CHRuBFxx2+hwfJq8Nf9PefPbP/Hv2nqf93/cIG99t07W7ozp3GDo3mkENAKdAgFNiDrFMOpOaATa F4HKqkrx93aTUQMjZPTASPVv7c+Ywd0kKjJAhfnJztcSImuNjhEhe7Zt2yabN2+W9evXS35+vmRm ZkphYaG1qtDlaAS6LALVhIgR03XU9C47CXTHNQLNQYD3L+iGYtSgHvL+f6+S9x+5svrfOp8r5cYL JkoZHIlqW6PmoHviZytwTf3bb7+VK6+8Up544glJT0+XlJQUyc3NtV4luiSNQBdFQBEiU1lZtedl TYq66DTQ3dYINA+BKngsdkV08gB4rvf38VT/1v74eXuIt6ebjrnXPFhP+rSnp6c89thjcvrpp8sj jzwi/fv3l1JGi4dx8rp162Tx4sWyf/9+WblypfyB21tMJFHffPON7Ny586Tld8QD2oaoI1DXdTaE gCJE4XffLT1feklcw8M1ShoBjYBG4KQI8ABVeZIDlMHYNf1AnRS8Vj7g7e0tvr6+4u/vr/zHLViw QI4ePSoffPCB7N69W/2+Z88eWb58uWRkZEh8fLz6ftmyZVJUVNTK2q2cHSpAFQBEH8atDKwuriUI KELke+GFEn7vveISaL9efbuy35mWDHxb5WEkdH3iayt0m15u20ak79oeHzHFVZialiRXuCpo7frg 2DKGoQEenpmcIamrAqEICAiQ888/X3r06CEX4p3uA4e7lBZ9+eWXsnbtWjlw4IAUF9uWPZejm5uS bjmgDzppBDoagU5jVO3l7Svevn5thqenp7u4u7mLm5teuI2B7IxNwtsvQLy97SPMSJtNlg4u2MvL C2shQBhoty0Sy3dy8xBHZ5e2KN7my3RGEMG8YoMcTMqXQ8lN/xzGs8dyyxCTsGVkqjFgGPSZieo0 V1dXCQkJUWSI5KekpET9e/nll8vjjz8uwcHBNoVv0A03SNiHH4rH0KE21S7dmK6JQJtEu09NTZUN GzZIQUGBitDe1skZVaxLKBHGspza2xNBLa1cowlhICqdJbbQTy6f2ktOHXMKKmj7frEXX62KlfED g6VfZPPjBlF8TtE5T5JtPQ58xfPkuzC6QMZ385Aefi4CD/9WTUr6hA9f9hMnTpTu3bs3Wv7CDQnS LchTxg1s35hR0dHRsmXLFnWCb2vMG+o8A/4eK0Qg4vgSuWCojzhb2c+LE9ZzamYefA6tlPPmTJf3 nrmr2v6wgfTL6t3y7zd+kwfnzZTrzhtv1bnQkYUlZhbLG78eEW9XBxiMN53cOGGFbM1xkGundpcL hrVcGs81cNNNN8k//vEPGTt2rNx1111yzjnnyM8//yy33Xab7EMYjGnTpsnTTz8tZ511lgQFBam/ RUZGyowZM3Coc2sVfI8vS5DZgwJkQq/mv5NaVbHOrBFoYwTahBDRgO/+++9XoluKQ9tWfA8vpwBJ vZbwfxRnW3kfhn67Ulx9Q+RYZbhM7Fkl/3v3TXFycm3joakuvjWE6Pbbb5dff/1VoqKilEi9PRIP vxwDJquPA8ok0UhISJCnnnpKrrvuOpsjRPfdd5/Mnz9f+vXr126Y1wbBvA5I13lAsPYYODs5SXFZ hWzdsUfOmjVNfvppoVLZdCVCRKnQ2v0ZctV0Bnpu3qp6Z12qRPi5yZVjWh6Emu/T77//XiYhKDcP BSRCgwcPVuox/i0tLU369u2rbIiGDRum5uLzzz+vjK//9a9/QYLr3bxGWzytCVGr4NOZbRiBNiFE 1FmvWrVKHn74YRAHpzbfGKp1+tUow+2J1cOy8RBY4egudzz9ufR0iJd33n4DrubbR3XWGkJ0N4zl e/XqJVdccYV6GbZlMm+8cGCsJEMcE2uHxzPHzXrmmWdkwoQJMm/ePJsjRCShvPlDFUUZbm+2dzLj zjmrxgENaOaefcImu7k6y+HEXLnyjqdliH+BLF60QFygSu5KhIiqsk2HMuX6Wf2aPbxv/JksQV6u clUrCFGzK63JQCJljdhzmhC1dAR0PltHoE0IEf1kUF3z7LPP2nr/m9w+ylcuv/cdiTTFyGsvvQCN mbob0eapNYTowQcflFNPPVUuuuiiNm9ne1Zgvm58zTXX2BwhovqC6goatXbWFJdeLLOuul/6uCTK kp/mgxB5dC1CBAnRxuhMmXdG8wnRa2uSJcS7YwiRteajJkTWQlKXY2sIKLmKEc69Sg8flqqaWwut bSRPIuXl5Uq90VmSAUftKqjOqHqythqirTBiW23tVok1+trW0q7WtJFz35bb15q+mfNWVJRLlbHi L93oCQqllNDVpX2kqdbomy5DI6AR6LoIOHJzP3bPPRIza5aUxsV1XSQ6ac+tISK3NWg6Y59sDWNr tcfBwSRxKdmyIzpJtu5PaPCzeV+8xKZk2c1Bw1rY6HI0AhoB20JAXQAtw62w4qQkMcFJlk4aAY2A RsAaCDg6OOIupkl+XbtP7nx5odz9ys8Nf17+SR59Z7GkpOdZo1qbL8PJ2sZ17dzjlvpgaqiZhbt2 ScYPP4ghK6ude6Gr0wjUR6DaFJnXMHGd1qEdrsi3dhDKcafe2MIbU8xrsPZd8NZ2yA7zUy1UZoD6 sAW6Q7pt5Di09c1DO4S1yU2uBPDlwL8lLjCZt8xA/JtcXcsfxGmLB65yhI4oLChCANL6H3pOLikt k+j4dFznz295XXaS0wj8SzB2FXgPcR3Y46eUa99Kl1Yz4YMo/tprpQQ35HTSCHQ0Asqo+sicOZLD K5qYlF6DBjXYpuz8Irnqoc8lEDGLPnvyGnFxbtyomNfut27dKi+++KK6ZVY77U8rQQwkB4n0dZOV R/Mlo6hCpvf1k75BDd9U2RhfCAJkkil9fNWtpQ82HhN/Dxe5dGTzHYy9uTZFuuHK60WnND9vOTaQ q+55E0bVsfL6Ky+BPNq+UTVdHwwfPlyuvvrqOmNQgRfxjpRiGRjqIUXlVbI6Jl/cMCZzBgaIr3v9 fh1IK5ZlRwpkdKSnTMNY5Zca5XVgeekpITI43LNZczi3xCivwrD0+nHhEtXImJ+swH//+9+qX7Zo VH3nnXfK+PHjVfBNy7Q9uVjyyiplWhT8A0E2m5xfITtTS2VyTy8J9HKWg5llkoq/TYvyxq3J6rPK tqRCWYPxmdzbTyb09lF/i80ulS+2Zco/JkdIqHfznCNy/X23K0Pumd5D/BoY65Nhz+8PJeXInGse kL7ux2TJz981alS9aM1euevF7+WKs8bKGeMHI/J9fZtCXuP/ccVOWb09Rj5+7CoZO6RnU5rQoc8c bIVR9Ueb0+X9TWnSJ8ClRQeKjuw4ya3R5CCZcEr53iX9ZHBY89Z+Q22Pvf56yfvsM4lCWBH/M8/s yO7pujUC7eRdsBbQ3+/Nld8OFkhMZok8vzpNFu7Nlv8sSZBjBTDStEg5JQa5Y1GCvPhn2nGp0Nbk UtmaXD8eT5mx7pGXJy/LtDWxUPYdK1F/LsfzPC3XTvy9PQ7OHT3vCssr5bX1mXIIG/CSQ3ny7sYM +XhLurwGklNlgQk36CeXJ8kuEKhEeNll4ul2+ZEiiav53dwfA/LWhp14GukHoVYqrqiUVUfyhMSI qaSi/jiRAHe6BOee/9uMm0nz4+RIRnX4hK93Zsq1Xx6VjQnVkpG3N2TI7T/GS3JeNc6bEwvkroUx suRAtizckymlkOww5ZVVye9HCyUTh4naiXO6NnSUhlpK4jILDQp/kmImc5mW68A6+JukAtKEgb3C ZNrY/jJz/KB6H/69V2Sweq4rpItOCZIXz+sjN46PkFsm2tfnZrT37xPD5ZW5UdIvuOGbhc0eQ4Yd YSY70E40u286g90h0D7ulmvBUlRmkOJyo+SXGcXbySjPndMLbvDL5TX459gQX6Ce/GVfjsRmlcm6 2HwpKsbmUGVU/oWY/N0cZXdKoTy2LFGi06vJzaL92fLEH8lyANeBmeZjo7nthyOy5mie+n3ZwTz5 79JEyYVkI9zXBXVXynMrkuSjzWmKFO2DBOR9SJ7oNM1oQazsbkSb2OA84MpNMaOgVKb38ZR/TY+U Jfuz5AOcXmOySiUPWC2JzpUF2Ii9XR3llfN7H/edQsMzT2cTJA2ZkBSlHhf7v70uTd5YdwxSJ6MU YHyf/SNR/r0oTlLycOMQ4/fuhnR5a/0x8UB5PpBO7AbJ+u+SeFmLceZGvgrj9cLKJPkV49nZUiVO 1kbczipGKAVKikhWDmHeuThUQOJWKST0mfkl8CpeLlsSqufx/4BXzwB3+fyqQXITNiPHGtsTd0jz HEyV8g6wJJEli08rKJfnV6bIp5AcMRJ9Ym653L8oVp5ZngjSWanG87kVyTiAZEqwl4uSUC3G+HId HcVaK8SY/QLcn8LzJL/WSmzyyciOAbaLVo5mYa3mW72cAA9nmRrlK2dAGjtrgP19zkS7x3b3Fpdm eOi2Ooi6QI1AGyHQ7oSIcXwYYskJC4oSewM2ZXeo39Jxcn1/Y6qkFxlwcs6AJKdIEnPK5IZxERLi 41brhVmlpEl/xhbK1zsyZXtSgfy6L1tKyw3y1p+pQqlSCaJsl2CDoYpsG75/ZU2KHAR5isurgLrO UT7bgk0bxIyEaTXUdlsSirBZpKi8XeGgQtG3G/DnBusGj5ZOuAlUDr8Cvu4uwCNPfoVEIjqjVOaD 8MRhY80qrpR316fKn8CKiUaVtGHhpvvdrmyodPIUcYrLLpFdyYXy1fYMRYrgBk5trh9sOiZLo3Pk YxDQI5mlUlBhgmqoTD7bekxc0Y4PN6VLPNRAn23NlC+2ZjTpOncbrYc2K5amaySWE3t7Szzm9ZGM EmwqIpOhPnMBweH87BfkJvPGhcoeqLVIYGJyyuWKMWESCTVv/xAPpdZk4hri/I3NLpdPt2bJVqjV vtqWIYX429IDWbIcUr8ikCB3VLDsUK58vxu44vuf9+fIoaxyLj7ZkVyAg0SmGsf3NhxTa+oFEKqV h/MQjqLNYNAFawQ0AhoBm0Wg3QmRinmFzcELL+vYPKM8tCRR+gR7ym2TIpSx5+ojueLv7gjDwypJ A0ny93SGnZERJ9hqkToED3LB8GB5ck4PSS4wyK/ReRKfbxBfNyeJyabUwwRbmED5G+yECqGOWQrp UJCno3zwt34Iu+GjpBVLDuZiE3LEKV3kMDZono5H9/CSh87o2eIo1jY7widsmEm84Hn4p3158s7G NIQTCJPzhgZCnVkmO0FsorBB08aDbDQXZPGFVclKssfTvDN2zftP7yGXjghS5PTX6HwxKE+4JjkI MhXp5y5/GxEsp0X5KYx/x7heOiJQXrsgSsJh97ItqQgbeRHswZwRe8sgqdiQiyqMMm98uFwA26TO ljjvOd9Gd/OBqssA6Uy29Ib0J9gTkb7x3U5IPSsgJguFbd3h7ArJhp0G3Qv4uv/lw+fbXVnywOJE 4FmC8A/u8szZvWRsD09ZBRujVTEFilxyDR0C/iRQ9IY8BDZeO6Bi3pZSIg+e3g1j1h0HEQc1ZiRU fh5YhzmlIFgw0oal7EOzesiIyNaFduhsY2ft/lAlXGanBtVst74QYe0ZocuzFQSqCRFCDDjQ4WA7 OVKE9kBob8IX+IXDg+QBvKTH9PCRQJCfBXuypFcAJEIQ1Sw4UCDPLk+QtXjhb4AURyVsEl4gP/54 kfP6ah42agfIIobixf+fM3sqI+1nfk+QdKgQvCGKoi2Rl6uTMiD1wQm9+kVkQtBLwek7RBEA3pgK Qnku5vgftjI6bdgOs5UO7YFCfFzkdhjoXjs2VEZ19wERrYC6Mk+Gh3tB3WGUSb285IGZPaEGq4Ik r0JJlpyBFdVelCqVo4xiSOgYSHTu0CC5dXKk/ACpxMebj0E1Y4IEELhDAhWIzZ/jwD2+CASXarQw 1H3PtAi1gRsh2QuFcXFnTOq2FeZed8xtGqZ+si1bRnSD8TTWQHkNiflqe6a8vCZVdqUWq2e93d1g R1So4KAaLKekEsTRqOawGwgp8fcBmJQG8eYPVWk3glDOReDQt/9MkZ/3ZilJINcJVZJBUJUFgoAy yCjzUJ01DOvmnmndlRoTy0SC4UVZp7ZDYENcvlz15UG57utD+PBf+/pc9cVB+T/YtZGw66QR6GwI KMeMHgj+543ggI6tjILcFHBKQUZoP8ENkSqE67AJc1OkGqaHv7t8vzNH+gR6QL/uD/uinjJ9QCDs ftyUOkFxN+SlIW4xbkcVQfUyLNxDkF3dHuuBD0X/e2Cb4e3hKlmlVUrKkQQJ0jOwn+BNKUokBoa6 SwA2hz6B7mqD5uZDaVJXSewpeKSyn8orNahN8SxEr+YGyZtfecBtY1yRTMLNvpHYtJdD7fIqbIW6 IYI9ca4Ak6EEj0SSqh1K2wYDUw9syMwfAHK5HdKfLGzgzvBSnA8iNTjMTRYdyJHnoJaJzqiQfiBA Eb6u+FSPG0kTx7OkE7tFyAXWHpCMdvNzlTTMySEgnCSK0ZCgHYT924Mze8izZ/cUTyeT7EktkbP7 e0EllglVVjLUkFlyGaRx71zYW3pifRBb2oDlwf4o0NMVtzTdxAf2dX3wryfW1caEArXOjIr+OEh3 Hyd5D1LAN2DnlVFSJYNC3CGJdYGNkoeEcwEh5WNNNnQZoausi/bo5+aEQonwccUtyzC5Zqx9fa49 NQwq3TB1yzQWal+dNAKdDQFlyxjxyivS748/xKNPnzbvHwnMQLyMQ0BIJvXyOW4szYonR/nL+SPD ZFgEriFDWnT+kAC547QIuWlcMPJU32oY281TXf8OgLSBZZ07NBgbi7eyE1oJ+5dxPX1l5oAg2YPb ZOOgIpve1x9qG3+ctIvldFxnHo0N/nrYJW1NKlYbRAbUF1QRTO3j1+Z9t5UKXCHdodSHxrW8ej8U OJqTG4jJHEh55gwNAVF1lfOHBSmiuj25RP55WqSStvFK+Ol9fRU56h3oKsNw/fa6UyOU/dersOOK gT0Q1TXebs6SA/ujScD2EqjBvNxccIOqHCpNXxiW+snZgwPlA1xDJlGiGvUMkGDOjc6YSDY5N3v6 u8KFhA+uzIeojXECbIq6wdB/Yi9fuRk3eC6EOvjG8WHq9te8U0NlZl8v+XxblmSDwQZBeuYN0hOM tTGrnzdUwS6K2IzAeqAbgw2JRcrQugDqr79DBU3SREnSOKyzy0eFSBrGB7IirAkfOQdjPCjUU15a nYrLDIU4GDjjb4GIs9U5JXS2NKemwnXFWYMC5ZwhQXb1OXtwEN63QUoabzV/bgg6TZM17RTYlmZo F24L/RA1JWXlFZpm3/a26YoHPjFBjXLCLF9//bUJkdYxx+s/B6mCCYacJlzHNuG2mQmqgOMJfzJB lA9Thtp/qzIxjznxZ0Ml8uMhGO6qPxdCbHQ0s8QEaYf6HRuCCZIiE27XqN/5L1RpqpwKY/XfcLXZ lJBThrKq8LcqE07GJ+xTGb6++K43TP93512mqsoT978peDb1mS9XxpiOpOQ39fE6z8Ffj+mLL76o l5f4FsPYimNATKBuqfMMsYDzuON/yweuxNOcmL8UmHK8yoCneXzS8AzI0PHfMworTFlFBvxejW1O scEEWyT8Xo0fDOpNuNFmwvVxNeYsh206WfrXv/5l+vzzz0/42IL18abNBzNOVpTVv7/jjjtMX331 VYPlch5yrrGPXANM7DP/XnuOlwNTSFDV96UYJ85Tjpc5MT/xN48Dy2RKqpnTZgyPFZSrNWH+HupO rA3j8bq4fmDkbiqA2FaVhbZU1l58jaBzMDHb1HvazaaZs881VZSVNIrhL6t3m3rMfsj04YL1J8T5 2Y+XmQZf+KQJoT2sPh5tUWB0Up7p49+PtKjoV1cnmb7clt6ivLaS6bGl8aaN8S17J1n2IfWll0yH ZswwFW7fbivd0+3owgi0u1E1JRC86UUVmSekDdX3ZqoTxVVesPup7dle3YTC87UlGM6QUNAugtIK Jp6a+8IvBk+5TFQdUA3gwetsSPyXEimWY7YTonSjJ+w5eP2YV0hpz9RVEvH1hOqGY0BMqK6qnYiF R62/0bDXrFbhc8zvDkw5XrylZh4fqj6joIY0/x4C42lKNcy3owIg2aDKklILJmfUQxUbJVUsk/ms GRbA1saT85BzjX3kGmBin/n32nOcEjwvqL2YeFOM85TjZU7MT/zN42C+At29Zk6bMQyHBIprwvw9 nTj6wP7OXBfXT79gd2WLpMpCW8xX+20NO92ezolA6C23SK+vvxYvOFrVSSPQ0Qi0OyHq6A7r+jUC GgGNgEbANhBw8vERt/BwcXBpnsd122i9bkVnQ6DNCBGkbp0NK7vsT2cbB3vojz200S4ns260RkAj oBFoQwTahBDRf4obbqxZxjFrw360edEuUCnQFQA/9pLYVg8PK7nYt5FOm+eWjTSnXjPYPnf3zmkY bu6si4urODrhRG/nUdttdQ7pdmkENAIdg4AK7tqUqpsT3BVGpbJ27Vp5/PHHFYFoYhVNaUaHPMP3 vsHBRf7+yEfSwyFB3n7zVQR3bZ/bOF+tipXxA4OlX6Rvs/t+zz33yIABA+Syyy5DSAj79xtCssG5 9OSTT8qYMWPkegSGbCwt3JAg3YI8ZdzA9nXy+M9//lOGDRvWaTC3xJf+p44k58ml/3hMBnrnyuJF P5wguOseuf3Z+fLo38+RGy+c1OhYPffJ7/L5oi3y+VPXdvrgrq8hsHEIfD3xFmZLU1FRkSxYsEDN s9GjR8vu3bulZ8+eEhAQUKdI/j00NFQiIiJaWlWD+R5fliCz4aZjAm5G6qQR6EwIKEKU++mnUnLk iIQgUrcrFlBDqbmEiJHWuRm7QDdcBaeP9pwYN8rFJ1TiSwJkXLcK+fD9d8XJuX0c2LWGEP3973+X 5cuXy8CBA+H0sDqYqj0nkmv24/Dhw4ps33DDDTZHiBjt/qeffpKhQ4d2ChJqCbALDOKL4E9p7cbt cs7MKfLTLwvhtbxh+49FazQhssSvtYSovLxccItXYmNjpX///nLRRReptXDeeefJ5MmThd9znVBK ed9998mpp56qyDnfwTwUUXLf2qQJUWsR1PltFQFFiA5hIeVt2CBD9+0Tb7zIW0uI4uPjZeXKlZKf n29XKqbGBskR4ShKK10loTxYrjitu0yeNAHagvZRnbWGEG3atEm2bdumSASlK50h8cXu6+srM2bM kKioKJsjRDt37lTSUXuXijYGrBscbR7Lypd35q+RuWfPlA9e+Fejc0sTovootpYQ5ebmKgkpiXdk ZKTs2rVLrrzyShkyZIhQOvn9998radFpp50m9957rzqQfvDBB+o9/N1338lNN90k3bt3b9WrwJqE iNERGDLGASGCHOzIHKFVAOrMNouAIkRHZs+WHEgShh04IF6DBrWaENlsb1vRMEQCkZ+ghrlyRi9p H2VZdWNbQ4ha0V27z9pRKjO7B64JHUjIKJTz73pPTh/bX169Z26jOTQhsj4hItH+8ccfJS4uTq66 6irx9vaWefPmybRp02Tu3LmyD4daqsp4CDp06JCSDvM5Ho42b96sVM3XXXddE0a58UesSYiOgazl LVkivUDyPBs5jLeqsTqzRqAZCFSLOSg96CQShGb0vVmPlpWVK3F0eU2Q2WZl1g9rBDoRAqXFxVJZ UQbvwvZvl9aSYaHVJX1otSTR/1STjDYbKZyS3osvvlgRnUcffVQqIWEhyTnjjDOUZMjZ2Vkopdyz Z49SqVGVRhL15ptvKjWbrZkvlECaWrhwoVSkpLQETp1HI2BVBNpH72PVJndMYXypqBdZ02zQO6aR ulaNQDsgoNSBah20Zmtvh4a2URXucJqZkFUqCzckyi+bEuXnJn4Wb06SPYgxR2ebLU08lKWnp8v5 55+v7IQoKaKRdUVFhezfv19iYmLkmWeekZCQEDl27JiUIjQGSdTMmTNl/vz5SppkS4n+hxQaWl1m S8PSZduiCVGXHXrdcY2ARqAlCNCbdzlizaXnleJTJhlN/KTllkopglK39qVL9dfDDz8sw+HdeTCC cvfq1Uvef/99pSYjWf3999+lpKREff8pLsxQijRlyhT5z3/+I0ugnrKpxJujNtUg3ZiujEBr12ZX xk73XSOgEeiCCCCOnPRHgNNbzx4oN88Z0OTPDXh2XH9/BO6tbDFqvCU2btw4ZUR99tlnKz9jl156 qUyfPl169+4ts2bNUrd7aWBNY+vZsA/lJQTmGQT7UMur+S1uiM6oEeiECGhC1AkHVXdJI6ARaFsE KlvoSQTBpFvdMN4uI9kx3xYLDAxUpMjf31/ZFtGeiNft+XfaG4UjNEZQUJDceuutMmHChFbXrwvQ CHRWBKoJ0XGbgM7aTd0vjYBGQCOgEdAIaAQ0Ao0joAiRCbdGSIroE0InjYBGQCOgEdAIaAQ0Al0N AUWIQv7xD4n873/FLSysq/W/yf2lEM1Y2f7mf5UQseuLbU0epuMPVlWZpEoD13zgdA6NQHsigEO4 cmBg59EM2hMyXVfbIaAIUQAcd/V44glxCQ5uu5rsvGSEcBIfD+d29/jshTpb6vPEziFvVfM93JzF rRXXm1tVuc6sETgBAm7OLfNhZCugusIHk7XOGo7wUO2Gj752byuj27XboY2qmzj+AQjIePbY7q3y IdLEquo8dvqICIlEkFKdmofA5CGhMrC7X/My6ac1Am2MgAFS5n1pJRKdXiK7U4rs6rMntUj2pBZL XE5ZtVTHCing2msl5I03xAO35nTSCHQ0Am0S7b6jO6Xr1whoBNoOgejYY3Lpvz6UWeMHyWv/vrTR inTojvrQ/Lw/R15bmyq+iP/T/gr41s8JIy7Jubs6yetz+0iPAPfWF6hL0AjYEAKaENnQYOimaATs AQFNiPJlY3SmzDujX7OHywjbtpwSo1SAWdhjtCSqyrxAiPw9YT7Q7N7rDBoB20ZAq8xse3x06zQC GoFOhICzo4OEertId3836eZnfx+2O0CToU40I3VXaiOgCZGeDxoBjYBGQCOgEdAIdHkElMqsKitL KhAg0K17d3FAtOSGUnZ+kVz10OcS6Ospnz15jbg4tzxAYZdHXQOgEbBjBLTKrOUqszLEQIvJLpMy qMzs8TRKP9uBkBD1hv2QPar87HjZ6aa3AwKKECVdf73krV8vfRH4z7Nfw3pxWydEjOq8a9cuSUtL U1fj+bGFxGCLbAvd7Y8YMUJcXV2b1SxGsd62bZuKcG1L/WpqJ9h/J1yrPeWUU1QQSmuk2NhYFdmb QSttZZxb0y9ixA/jUo0ZM0ZFKrflpAlRywnRwr1Z8uqaFAn2crE7P1l8o1aAETnjffbmRVHSUxtV 2/Iy1W1rAQKKEB1BYMDcNWtkyL594j10qF1KiA4dOqTi+5AYMaYPN0tbSCQDOTk5apP7/vvvVVyh 5qSEhASZO3eu6o+3tzf8l7U+FlJz6m/ts86QOMbHx8uNN94oT8DXlTXSPffcI/Pnz1cEy1bGuTX9 IqkjIUpMTJTnnntOrrvuutYU1+Z5NSFqOSF6aVWSOMGO6G8jQ6QSBtb2lHjGxPFOXl+TLJeMCJaJ vVvv1qI4OlrK8Y7zHT9enAMC7AkO3dZOiEA1IZozR7KXL5fhOHV7ISJyQ8nWJUSUGDz88MMqyjOD HhqNRpsYLkqE9oFofvHFF/Lmm29Kt27dmtWu3bt3y0MPPaT6xmCNttKvpnaC0bm//vpryczMVP23 RrrppptURO8LL7xQKEGz90RCROL80ksvqYjk9957r013SROilhOi10AmusEw+dIRti0FPNEEfHp5 opze3x+EyLfV8zTu7rsl65NPZMAvv4jf1KmtLk8XoBFoFQIkRIdnzzZtcnQ0FUVH89cGU1ZeoWn2 bW+brnjgE1OFwdjocx31xYEDB0w333yzKSsrq6Oa0Gi9hw8fNmETN6WkpDS7bTt27DBde+21Jki+ mp3XVjJ8++23prvuustqzbnttttMP//8s9XKs5WCnnnmGdMrr7xiK81ptB0HYlJNQy96wnTn89+d sK2/rN5t6jH7IdOHC9af8LlnP15mGnzhk6at+xNsvu9sYHRSnunj34+0qK2vrk4yfbktvUV5bSXT Y0vjTRvj863SnBi827ZB8JS7bJlVytOFaARag4A92vU1SgApLSiCcbitpbKyMjEYDC1qFqUH7FdJ SUmL8ttCpmIGD7Zyomq0syXOk85gE9XZxkX3pw0RcHGpdlDp2Km2ojYETBfdlgh0ulnYGTcUe++T vbe/LRegLlsjoBHQCGgEbAOBTkeIbANW3QqNgEZAI6AR0AhoBOwJAU2I7Gm0mtBWhgbQqekIlMAv jPm2TzHuFFdZK4x305ugn9QI1EOg9u1J2ES06nYpb6ayDJ00AhqBEyOgCJEJtgtYcWKysyvdzRlc bnxrE4olo7B5tjwFZUbZmVwopch/OLNMvt+dJb8fylWxiGwhlVZUyve7MmURgkYeKyiXDzYek43x BfLOuhRJL2z+DayCskrZjYjW5ehfdGapzN+VJcsP54mh0jb6eyLMc0oM8sv+bPkNnx/2ZMnWxMIT DtGWhAK5d1G8it7NoJsvrk6RxQdy5NOtaZoY2cLk7oJtIBF67LHH5JprrpHFixcrBAoLC2UN3KLQ xqypiW5IFi1apB5ft26d8s+mk0ZAI3ASQsRzgweugnvBp4sDDNw6a9qWWCBXfhMvP2PDa046mlUq z6w8BrJRIe9uSJO31qfJC6tT5ck/khRp6MhkgDTo8WUJ8sLKJMHNFdmeVCiL9mXDE26pVFRiZGsO hfSK21jallwk34L0mFMsyMHL6zIlDf3938YM+WhLpvCa7WOop6P7ezKs00AAXwGpueH7OBCdBFl8 MO94lqoayVltCdq3OzOktNwggR7O8unmYxLg7iguTg5SBBLsWOPYs7bE6NcD2fLLvr+wMhfe2OHb CPy1xOlko6a/r40Ayc/27dtlOnzDJSUlydatW8Xd3V2CgoLUxYyMjAzlr4oSH14gOXLkSB1fXHRa ys/GjRuVqw8+y7yenp4qz9GjRyU3N1dVWVBQoIjSsWPHjjeB7jHo6sOeL3HoGaURaCkCcBEmEvHK K9Jv5Urx7N27peXYfL59aSXiUFEim+PzFU9IyC2TPw5BKrAqWZYezJVSqEvWxuTJh5vT5O11qSAU 1SSCxCK9oFS52j+WXyoXDQuQZ87uKb9CorAM+ToyURL08/5cefqc3vLCeX2UfxNu+L5uznJKpLf4 YqOPTi+Wp5YnKakROcHGuAIlUXpxVYrklxrlt+h8eWFNmuxOqZamVGAXzygoU/1OySmVK0cFybPn 9pZfDuTJyqP5Hdndk9bdN8hDXjo/SvoEusm/p0fKLRPC1Ji+ByK7KbFIDhwrln/9EgtSk636TgmS n5uTxGMuRKeXiA9+HhjqKYNCvVRdP0Ia+NiyRMksMijsPtmSrubGmqN58sfhXKVqWxeXL1tAtjcn FMpnWzPkjbXHlPSw1FAp/0O9729MkxJI8XTSCDQFAfoZi4qKEvramjFjhsDthlDas2rVKtm5c6fy UfXll18qaVE0nBq+/fbbyms7E9x6KF9W33zzjWzZskVWr14tP/zwgyyHjzk6h01NTZUXXnjhuOTp /fffF7h5kE/gB4h5SYxYHstITk5uSnNb/wz6QTWFyUYc6ba+Q7oEe0ZAqcycw8LEHYuws0qIisqN koRN777pEVJUagDBqVAb4KOQeqyOKZS3NmTI3rRiSBeSlerpw61Z2PCqN39Gp/Z0doDEQMQd/4bA 5f64Hj4yMtJDtkIi05FpU2KxDInwljMHBkivQHdEz3aHF1yI2KH2+nBTqmxD+77cloEN2SgfQpUW D+nP59sz5ZOt6VD9ZcsChBEw4AWcWVgux2pUiczvjjB1FJCAVyFukZNM7OUr43v5yY4U61+ftyZ+ bs6OMiLSS3r4u8robl4S4euKMAmp8iGITKmxUpLzyyWz2ChvrU2VVYrcOUoc5kUicCmBH8+UAqPs gMTsy+3psgkE8oNNx6AmLZcEfE9JD0lzbmklcCiSN/5MEUqkPtsCMpnK35Plx72ZwP2Y/AYp5EKo 7KLTimRdbL4ioDp1LgRaGhnoZPnMbjYovaEj1j179iiyQklPdna2kgrBL5lSo1GllpeXp4gPVW2/ /vqrXHbZZXLHHXfIrFmz5PLLL5err75aESpKm/gcHdfSCSilSJQO0REonZyuWLFChT6iO4tXX31V +vbt2y4D5jZ4sLiPHi3O6KtOGoGORqBLGFUn51XATqRchoR7SW65SWKhUqoyOYiHm6u8fVFvJSXY iU2urMpB7p3WTc4a5A+iVKDGBlHRzJon9a9Z/cRYRB1tR1RQXiVBXoyNVh23DRGxav4VSIoE0rBC 2YBPd393icsrl0Rs/oUVJrl4RKjcPC5YdkEqNKa7l8wZ4Ccz+1e7zaf6p7b5JW2nmIJBjEgIbD0V QxpTDilXEdpqhJQr3+AgN44Pkxl9/WRsTx+5YwpDp1RJRlGFjO7hJVP7+MmZgwJlYJAriKWfuEJl VlheKQv2ZELK5iWfXN4P88ZTEeNReH4WsLpqTJi4gnwpqRsgGRbuDUJZoebOtWNCZHF0tizclwtC WU2kqZbUqXMhQPVTJeYXpYRN/Si17Ulsm1kuw93Qwz39j4XhsOrl5SX0+M40bNgw5Ymf0pylS5eK n5+fDAapoIpr06ZN6nsfHx/1oaosNDRUqctIsKiKY0xBEis4i1XfjRo1SoUEiouLk6nwFH3qqaeq 2InNsVdqzciG/uMf0mfBAvFCu3TSCHQ0Al2DEOUbsHkVy2NLEmRjYqkcySrHBicS4u0KaYKbeLo4 QMVhEh93FwQsdFM2JRVQedRJfJHhw2eZDmWUSqRf8wK1WnuwQ7ycZT9UgWaVDF/QbCZb6I4OFkEy xOja7tiVb5sUKf1DPPHyrpJQbxcVXNLRgcPvIF6u1bYzlol/8QVZZNp/rERJXOwlse3cXNi3vkG0 nxAl1dkJcuKJv5Gs4D9xw3i6OTuJM/rviq6S+JDs5EHKFoB54OHiiOerMWAZrhChEb9TIrxgwJ4u /oj8HRXkrgJe9gTxDAdGvK1WBNypvpyJEAdXjAy1F9h0O5uAgKersxxKLZHXfj4gb/0SLW828fPO omjZiAsZzN9YooSIjkxpK0QV2YQJExSxIeGhOs1MVEiEGLuRBtiUBrnA/nPIkCHKpoi2RpQYwWu/ kiBR6kPSM3z4cPU9f+6HIN6UMpF0mT8kXpMnT5YFICi0I2qP5ALJkAfsVx1rCF971Knr0Ag0hkCX IETLDmXLqG6e8s+pkXL2ID9ZFQM7Imxu8Vkl8uyKZEnMr5CBIR6SW1wu78HmY8XRAukPWxImAwhE ISQxJBoQHMCWJleeWZEkGSUmparqyDQ9yhsSryp59Pdk+WZnlhzBLTgeQivwMsyFarAHolFHgLQN hoSDG7gXNn/2BRpEbNiVys7FGRv8puQypSpiqgQwJSCHTOzvwr058iRskLKgKprZr/Wxi9oaL5Ig tt9QQw6LcamwDPZgRejM77D58gbpNZic0DeTFECaVAw8qA7LQ/8oWaLheBHI0JAwL/kTUsKPoG4j 6WRyAoFcebRQsoorZBziOK2PLQaB9oCtliNUclVKNbdgX46M7OYjA4JdFemcgOd6wKZJp86DAG9c BoIUj+obJCOjApv8GYFnI7EmjSewlyFZob3PPyA5SU9PVwSF0iEGrCZh4b9MvWHvSQI0b948+eqr r5ThNYNAv/feeypA8GiooXjdHmFzJDIyUn1Irp5++mkJQBBVEiIPDw8liaIEiZIoErA777xT2TDx e500Al0NgU5PiLjZ0Qbo1knhcvmoULl/RqR093OTArACqlcW7s2W6X19ZHiEp5TjVL8kOgcqNJGL hlfrtP1gUDO2JwyU8e+Ynn6y61iZbIMx7mOze8hgbJodmUbAcPqh6WGqzd/hphjbOK2vPzZpdxnT zRvqnQA5A6TtddjMfLsrA+TOJBN6ekmkr7OEQTrWN9gD6h538YMkZAOMjpn8UcbISE8lGRrZ3VvW wgh7N9SJT8zuLoPCqkmiLSdKukbBvisIkhuetsd395AIbF4+7s5yyagQ2ZJUrIhiH9hcDUF/ekO6 Q7uO8VCn+eGZMB9XGdfLW64YHarsxT4CQab9EdNZUK3xx+0oYyQIZriPo5IOUa1K1diS6DyoO5xk HlR010CtdgBSxOdgvE7bLZ06DwJUlYfDTu30EeEy7ZRwmd7Ez2nDw6Uf3zMncGFB8vPyyy/Lf//7 XxW8mCSIKrLbb79dqbT+/ve/Hwdy4sSJcv/998uUKVPU32gLRKPrCy64QKnDHnzwQZk9e7Yg9p/0 6dNH+vfvL/fcc49MmzZNPX/LLbcodRvL4TX/XpDUIOagqoP5ddIIdDkEmhoIzR6Cu1533XWmhIS6 ASKh3zcVQB9m5A9M+AdSANNn2zJMs947YDqUUQz3S1Wmo5mlpolv7jH9eiBLPW9OOA2aCsqQH88U Q6yQCCOk7OK/vm8KfjCMNLFtLQnuilOb6YorrjBB799IVVUm2EShXWWqHyB56F8l2lodgJd93Xus 2JScV86uq78b8LcyiFAKa57JKDKYMmv6ZMR3BaVGlGVS3+M2nimnmf21bOjHH39s9eCuDBjbUGIf OX4VwIAJV+hN6KpKkIiZ4JLAlI/vzRjxb9V5qnExIB+M0NXz7HdsVslfcwd/SwGOxHh7YqFpwqs7 TYchKswqqjCNfXm76YfdmccxZX5idyC9WNXblPTII4+YYNDalEc79Bkd3FUHd7VWcNcOnci6co2A BQJKQlQAnXEaTiUGGNudLPHUTTWLrSUntMkJAQIt28aTO6UDTsrBABL+oeHsIKjELoAUaADsatgn XlG/cHiQjO3hq543J9qU+OC6lROeoe0JbzAFQvrQnNRY25pSBvvjiDawjIaTg5J20BaK/fCEzQvt XMx2L+zrMKjMukF1RgT4d9rL8EaWd41tDG2Rgmv65ITvfCAlotSE3/dEuQHN7K9lO9l29sFaiePc GB6shePnUoOXFyRdtBdjol1VFLDyxfdmjPi36jzVuBBvD5dqmyH2uw+u8h+fO/gb7caIcRmkbX8b HQa7LA9xx/OXQPo4AbfxzJgyP7EbjHnGOpqS2C9r4tSUOlvyTONzsSWl6TwaAY2ARsA2EHCktUjG G29I8n33SflJvJmaL0hUGIww8KvCle1Km/jQbsaANtHqmW3irY+TtW0UVEW3nBp8/Dl/Nwe5Y3K4 BMI538nyNud7ZdMDWx2aOze1bebymReSLTVTiHlT+tWctrXHs5wzvF0DIq760pp5w/xsM9WglfiZ ZbdHHxqqYxRUH7dNCkN/KsUFq+ge2KeFeTm1uD0cW/aL+DB1VL9OVi/Hks8oxqyTRqC1CGDOKx9E OrRIa5HU+a2AgAMlRoehZ875/XcZDkdfXvBL0VCCykzmPfaN5OUXy/B+YTjJOjZ6g9Qc3by9XpnO Lq6SkRIv21f/JOPPuEz8Q8Kl0njiEB3qfhUaSIfOTGwrJQF84VvzcrmLi5ukJcfIzj9/lklzrhLf gJCTts2MP/uVlngE/fpZpl1wo3j6+CEviZ99JGLq4u4pu9ctluz0RJl2/g1477U8RIyDIyRXKHPV gvclImqIDB07AzdkOsY+hwIvypagXGv13OF6cXSCHddiGMd6+WAOXyrlJbZ5Vd8RErSiojLZuCdO Zk8eIq/ed0mjk3HRmj1y+7Pz5dG/nyM3Xjip0eee++R3+XzRFvn8qWtl7JCeNj+5Dybny8boTJl3 RvMNj19bk6xut141xn5tdOgdf/agACURbW1KhzftfDgF7v7AA+I5cGBri9P5NQKtQkARoiNz5kgO vJkOg8fTxghRXmGJ3PLUd7IvJk3KcVWz4UTjUhPUFbihhCvfJWXNj6XVkt44YDMxFiIMQ9IWCRg0 U5w8AhCXrQnEwXxHvSWVNjGPoyP8FRWkSd7RP8U7apo4uOMl0pS2kaQ54UZUXoqUJm+VoOHniqML r4/bkddj4OsEQliYsFVKcpLFd9Ds6nFp6WkQt7xIHvKjl4p3WD/x6jZCqirbZ441ONzWmj8kRCB7 udErpNLBCfNkipgMHUP0Tjat2WVnOParwqn+6nPGywt3X6gJ0clAq/X9q3D+StceF48IaUYu23r0 uRWJMhWXNybhBmVrU8x110n2559L/2XLJODMM1tbnM6vEWgVAk0mRFR5fL98p2yLThZXMp4GHIw5 w1YiIwexeA4kSkSQjwyKCq+OsnwSZ2St6gFf0Lg6mpYUI2uXzlenaz//pkthWlv3yfI7gxBkpMTK zrWLZdZF88Q/6OTSK3OZ7Fdq/CFZu2S+TD3vevGA9KCqsglE72SNasfvXSkh2rBMCnLSZPbfbgUh gvqwJq5Yc5vhAKkkpXq/ff2WhPboL0NGnyaGivLmFmN7z6NTTs4usn7pt+IfEChTz7lCyoqrr/rb YlKqPRCi86YOl9PHNX6q1xKi+qP3MgjRjuRi+KfyU64hrJlYGswc4V4DfrTgTsLaiWuPS3cxbrU+ cmZP2Fv6tLqK2BtvlNyPP5a+0FD4n3FGq8vTBWgEWoNAkwmRuRJFcBpJPL2TDN389Pdy4bQh8t9b zmpN25qVl3F9rrziCgkODpKQkGColmxDkuLk4izHEEOovLxCFi78ScLC6Sm56SkuNkbOh38RXr0N 8PNVtjP2lFxcXeD5druce955iJH0slWa/o9bb5W1a/+UEfBuS2d1dp+w0VAVuGnLVnnggQflVvSv MyRNiOqP4takIhUTjwcDs2mBtcaaBvnFJRWSkVkkPbsHQOrYcmFsY21iwOJQbzfYzEVIINxStDbF ImZbzkcfST9oKPzhYFInjUBHItBsQnSyxu44mCQ3PTm/hhCdfbLHrfZ9QUG+/ATCkZiYoGL12Eoi geQnqm8/ufiiC8XVzb1ZTSsrK4VztfmIRZSoVBX2llT/0egzz5ytwgJYI23YsF4FuySJsPamYo32 taQMOtFzg3M9+p7pi7nSGZImRO0/islZxbJ8R4pcM6u/8rpu60kTIlsfoa7VPqsTom2QEN3y9Hcy d+pgZUypk0ZAI9A1EdCEqP3HPQnSoSXbUuSWs+zDQFkTovafI7rGxhGodpCi7Hysq8/WoGsENAIa AY1A+yLgAZ9p/SJha9hCO732ba2uTSNgWwhUEyIEDnSkaqMz2GPYFr66NRoBjYBGoN0QCPJxl+nD I+zCwWe7gaIr0gg0EQFFiIKvv17CEOPGNcR+r4I2sb/6MY2ARkAj0KkR4C1Au0m4rUhLpxNd1rGb vuiG2j0CihAF4OpjT4TucEXEY500AhoBjYBGwD4RyCwok5W7jtmNyowbEGJpK1Kkk0agoxFoWpCl jm6lrl8joBHQCGgETopAcZlBDh8raGvXbydtR1Mf8IerlKDnnhMP7aW6qZDp59oQAU2I2hBcXbRG QCOgEWhPBBzhC861icGE27NdjdXlD+/UEfffL249bT9kiy3gpdvQtgi0CSGiPtjV2f585rQt1Lp0 jUDXQsDD3bVrddgGeuvr6Soj+wR2Gv9cNgCpbkIXQkD5IbJmf7fuT5A7XlwoA3oEyNlThtbc6G+k CqU41tpja+Kvy9II2AICLpBS7DmcIl8v3iYP3Him3HTh5EabZW/BXaOT8mX9gQy5aXZ/W4Bat0Ej oBGwEgJWJ0Sb9yXIfa//Ijm5BQir0Hj4DLqVd4J4twLPnOg5K/VTF6MR0Ai0MwIukBIbjFXywA1n yi0XT+k0hOhwSoFsPZwlV82IamdET16dEaF9yioqxduj9WE1Tl6bfkIj0LkQUISoKj9fKktLxTk4 WBycnVvVw+SMPHni/WWSlJEvTo24jme4hZKSUikoLBE3V2fhadKqYqpW9UBn1ghoBFqNABY0nQMy EPSDN82WmeMGdRpCVFJulIJig4QHerQaJmsXcCynRDYdzJS5E3sK7Yl00ghoBJqOgCJESX//u+Rv 2CB9f/5ZPKJaf+pJzy6QotIKFZncMvFPPDku+nOfvP71Krn7qhly3rRTxGDoBEE6m467flIj0OkR oLNkZydHCQ3yETcEOW4s2ZvKzJYHLi69UH7bmiL/OHtgowdSW26/bptGoCMRUITo8NSpkrt2rQzd t0+8hw5tl/YsXLlH7nt1obx8z1y5YMbIdqlTV6IR0AjYHgKaEFlvTBIzimT5rlS5HsFdG5PQW6+2 1pdUGhcn5amp4jN8uDj5+ra+QF2CRqAVCKhbZg6engJf7+LQjtHUyyERogTJYGjczqgV/dJZNQIa AY1Al0MgwMdNJg4KbVA6b4tgpL/9thydO1eK9+61xebpNnUxBNrk2n0Xw1B3VyOgEdAI2AQCPjCm HtLT327sh6oyM8UhO1sqi4ttAj/diK6NgCZEXXv8de81AhqBToRAhaFKMvPK7OeSiouLaqsDrx3r pBHoYAT0LOzgAdDVawQ0AhoBayGQkV8qv+9MtZtYZtbqty5HI2ANBDQhsgaKugyNgEZAI2ADCNDv U25xuQ20RDdBI2B/CGhCZH9jplusEdAIaAQaRIBuDmhHpJNGQCPQfAQUITKVl4upqoqe1Jpfgs6h EdAIaAQ0AjaBQLCfm8wYHg6japtojm6ERsCuEFCEyDUwUNyDguBFrXVeqlvSczpp1EkjoBHougg4 w92H9lRvnfH3gOf/nqHe9hPcFb5X1Nhrr9rWmQC6lFYhoBwzGmJjxYDwHe5Dhoijm1urCmxq5m+X 7ZBH3v1V7r16hsyZPATxzLR0qqnY6ec0Ap0FAWcciD74cb38tHqvfPrE1TJ2SM/O0rUO6Ucpwopk 5JdJzxAvuyBFsddcI5lffikDVqyQgNNP7xDMdKUaATMCVg/u2lRov166XZ75eJkEeLuJh6uLVJn0 GbGp2OnnNAKdBQEV17DUIOU4EL3z4KUybljvztK1DulHYmaxrICn6mtn9rMLT9XJTzwhed99J70+ /lh8xo3rEMx0pRqBOoTIkJAguevWifepp4rngAHtgs6SDdHy2HtLEZnZCNOlKtEq73aBXVeiEbAp BHgOcoLKzB8Ho7fvv1iG9ou0qfbZW2MYy2zx1mS59exBdkGIjAUFYsjKEteICHHysL1gufY2/rq9 rUNASYiyP/xQ9t98s0S9+aZ0/+c/W1diE3PnItL9hl1xKgisPcTcaWK39GMaAY1AMxGoxIHIz8td po7pJ57urs3MrR+vjUBKdrGs3Zcul57WR79X9dTQCDQTgWpC9NFHsvemm6TP009Lr4ceamYR+nGN gEZAI6ARsAUEKhAbsgAqyCBfdy11t4UB0W2wKwTULTOX4GDV6ErElNFJI6AR0AhoBOwTAVcXJwnW ZMg+B0+3usMRqCZE0N/SlVdFTEyHN0g3QCOgEdAIaARahkAhpEP7E/MEgv+WFaBzaQS6MAKKELn3 7i3uPXpI8b59Up6S0oXh0F3XCGgENAL2i0BWQZms3nMMt3bttw+65RqBjkJAESKH0FDxHDNGyuCP qPTgwY5qi65XI6AR0AhoBFqBgKebs/QK8W5FCe2TlZERKmCiYTIY2qdCXYtGoAkIHI9l5jF8uBKz Fh861IRs+hGNgEZAI6ARsDUEaD80fUS4zd8wqywpkZS775aEe+8V/qyTRsAWEDhOiLwhIWIQjfzf f9es3RZGRrdBI6AR0Ag0EwG6MPF2t/3grmXx8ZL7ww+S/8cfUlVR0cxe6sc1Am2DwF+E6JRTxMnX Vyri4qSyrKxtatOlagQ0AhoBjUCXRyAPB++y0lLxnjZNnH18ujweGgDbQOA4IXIND5ewe+6R7o89 Js7etq+Dtg34dCs6KwJGWKX+diBbjmRWi/O3JhXJx1uzJKuo+jR7NKtEvt6eLvmlRvX79sRC2XOs WP1sQBiK+btzZMnBXPV7Fcr6/VCOvL42Vd5Zn4Yy/zpwVODZr7ZnyuLonFZBuT2pULYkFDarjNwS g/ywK0MyiuzfjsNQaZIVh3MlPru0WRjoh9sfAXqnzvnxR+UnyWfqVHGAp3KdNAK2gMBxQuQIt+m9 HnlEgi+8UEcetoWR0W3oUAQKyyrlHz8clc0gGX/GFsiFnx2WG79LkkeXJEg5nN99si1LrvoyDptw nmrnVzsy5Je9Wernt9Ymy3XfJcq8H1NkT0qh5OIq9N2/pshdC9Pl9t+yZH1cdR7ejH7zz2T13I0L UmVbYkGL+/zTnkz5aW9ms/IfyCiTu5dmSkwN6WtWZis+vBdE8ofdGa0qsaSiUt7bkCo7U4paVY7O 3PYIFGzeLCWbNonnsGHipwO6tj3guoYmI3CcEKkcCLSok0ZAIwApD6Q6JQaTOGCFFCKC+D2nhcm/ p/rL/IOlsj+9RDKLq8QNN3oWH8hSgYldnR3E3cUREiSDfLkjU56YGSzPzQ6Xoooqycbfiqpc5YEz gmXZ9T3kjIEBCuKUgnI8myEvzAnFs2GQNlUeh74AhIwBT5ko/eDPRtzM4cZfWF4plTV+Zsrwd37/ t1EhctWY0OP5C8uqJVfmxN+L0I/aif0zObmKs1PddU+JEetgKjWgTnyYKoFJMfpjTnko01BZ/XsF /uXP/JjbbX6uDPkLatpDyZv5Z+Zh+eti8+WTzenH/858rJ99ZWKeMpBQJss+5EDKlQspnYerk9w1 rZuM7+17vH2U3hmBjbntpTVlFKNs7aenzlRo119yv/8ecwnhWi64QNzCwtq1bl2ZRuBECNQlRBor jYBGQCHAs4ETVkcpCMBZgwLkHmy2swf6i4+jQbxdHUFIRKb081MEICWvXLzgIdgRmRyRp8DgqPzA XD82WCb18RMjfibp6B/kKuO6e0iEb3W8LvKQnJJqEnHd2BCZMaCaKG2ABOmMD47IdfNjEYbBKPvT iuXen2Pk9h9j5cNNafLs8gSox6qlSY8tiQOhyJO1CaXyZ3y1yu7nfTky+38HoJ47pn4/mlkq53x8 WM775LBEp1c/wwT7W7QBpK8myAOJx5dbEQfr0wNKOpZXYlRqqKeXJ6rn1xzNk/8ujlM/L4cKcNq7 R+T2hfFCtd+2xCK5+6dYuXH+Ufl5718e74+B9F09P07O/PCI7IBajwTmzoUxkgjMftiVKc+gL7/u z5YVh4rlmm+qHcNGpxXJOZ/GyMVfxEhqfpkk5JbJfYvi8GyinPvhQVkSXa2K3JtaLHctOCqvrEoC 6ayQ+XvzJT6nXH33yZZ0mfHufrnv13hFuijxu39RrLy4MknO/zBavt2lvfIfnwjt+ANvMecvXizO Xl4SdN557VizrkojcHIENCE6OUb6iS6MACUJJDpMP+7Jksk9PaRfsKeSHg0K95ZR3bzkz5h8cQa7 ILEJ9HSRu06LlJfXpMrN849gIzaKJ6QXxvIyuW3hMRnxTpKSiDCRGN09vbs880eS3PTtISURyS42 yAsrksXHzVEOZZTKu+tTlLTkk135siauSMJ83SQJZGJjPMmFUZZDZUdSsyfLJOuTKiQuq1ieXZEo eERWxhQosvbK6iRlp1FW6SAvgxBYSnDMw0up1HaonK4aHQoyVCEvgGiE+bgqIpRRaIDqMB+SMYMi KK+sTpFIfLcpvkC+2pampDvvbM6WHakl4ulWbRNCidIbUAkm4nl3Zyf0M1FhSUxfXJkof4BsRQV5 iBeed3d1lgAvF4XXi6uSxREkMgv9e211slCi82N0iXyyNQN9N8gHm44pidSba1PEC/nmDApUUrw/ 4kEeoQZcG5Mnz69MhsTOVb7bnS2fbTkmLmCfP+zLk3c3pktKoVHe25gmeTX2X114erdr101Go6S+ +qqUwfmv37nniveoUe1av65MI3AyBE5IiIzFxfrG2ckQ1N93agQcasjQapCC3SAL98zoCSmQg1Lj kASd2ssXdkYFkgWiYCZOt08Ok48v6ytrEkEc/kxXRtXOIAQjI13knH5uEuJtjujuIHdNjZRPr+gv f8QWwej6mByGPc+hrHKZ0cdV+gc6y4aEYiWBCfJ2l4/+FiWXjQyWUyK95QCkRlthcxQV6CHje/mh jkrxBrHYAuPvEE8nWfd/g+XtC6NgMF0h62EHdVoPVzk1wkW2JpcIjanNiVSPV7WZAjyd5bbJkRLu 5yoF5SZZeSRPRnf3EX8PJ/ycC2lNuSJL0VAZxuVVyKy+LiBFTii/GCrGKgn1cpLvrxkg5wyulnSR cKyOKZSRoc4yqYez7DpWpqQ1t0+JBKmBQTpI27zx4XLe0CA5d6iXfHJpH5AtkD1Im07D8yOQbzPa Wwqi6OPlIc+f31e+uKq35IOsFZVXSd9gDzkEvNygqowAUXQDiyIVWwSJ0zmD/WTNbQNlHqR0C/YX gMBCzWislAdndpcF8/pLVSU2ZzZAp3ZDgM4YjRmwFXNxkZB588QB/+qkEbAlBBolRBWZmZIAx1lZ n31mS+3VbdEItCsCHthsKeF4FVKW26dEgCBU38CkZUoppERjQBhKQVg2g5x4QpVGuxVutNzkzxka LL/HlULqUSEuru7y4OmR8s4F3WVwmKcqI72wQj07d1iwnDssVH49lK+kN7SWoT3R2B7esIvprlRr pCwhXtVEano/f2U3s+JQrgyP9AIhcII0plrNZ8QPaDIkTE6QnjgqaQy/I2HrGeAm/wYh8K3xU6Os a5CJZIo9yoTtEG/OxeeUSXmN7Q3VhqPQx9/2ZylbopHdvJXkh+Y4bMOM/n5yy6QIlFGtAmQbzSSS akPaOlHCRcnZg7N6QOLkokiRr7vz8TrYN76ImI+mUZWom/ZJA0M95N+n9xA3Z0f1fU9/dxAwd6gf HVUZd0zthvr95T+/xcmO5CLYEVW/ziip8wQmLniOeamyZFscTFXSw99VukEyx3GtMSlq1/nUlStz dHWVnrjF3BtSogDcLtNJI2BrCDRKiIp27pSMDz6QlGeflaIDB2yt3bo9GoG2RQAbaBl2UhKK+Xty 5ZeDJfLd/hK59Nsk2MIUqI2WKi6qeoZFeMn6I/mQEDkqqciNUJWd++Eh+W1fplwwwANEyVmKQZ64 iddOGSBE8749LOd+dFiWwjh7LqQaA0M8pZu3kxzKrpRDeU6Sb4Q9EthGMSQiZpIyMNRdEvIr5aMd eTKuZzVBg7ZLSU2Gh3tJdGaFnP52tPzjxxjxBxEZFuYhR3Or5GCOkyTlU4VXLRFyhqotI79E7liU JrcvOiZbE/Llp31Z4g4iEY420BhaEbC+fvJ7bAkIC/4OMtE70F2CPRwgyTLJ4RxnKatyAuFAG4GH uY3MR8nSiAgPSSyolOgcR0krcwbRM8h3OzPlHkjGKhG24SfczIv0dZHfY0pwEy9Ruvm5yCD070gO 2pvrLBll6H9lpRRXggSBLFLSQxxpIH0A9lCTe/uhTpEEqAYrqhyUbdcESO0+xS3ACz45Ih9vyZAL BvsocpgPqRdtu5mfeOpwX227hBoq3Qv+7iJvv114q1knjYCtIdAoIfIZOVJ8cCWyMCFBYu+8U8qP VRto6qQR6AoIUNozs6+PBEGN5OnijI3aTRk7b4DNTF5plUzr6SZjQquXzyUjguV0qIn83J2ku78b NmQfOYjNmhvx/00Oh7rLTUYHV4lPDREx4zcg1FM9ewhGxJcM88ezERKBev4FqUhsdpnMh9HxTqiM vHCbbWI3Zwn0qK6PEp5zhgRCTeQiw0HGmLp5VMqgQAc5pZuP3AmykV5UBnLkKX1go8PyisAEvkV5 m2qMsZknChKjSSg3GrZKG+Ly8ay7XD4qFC4FMkFKPOVKqMeYKAXz8XBTEiamoWFe6kbXblyX/w5l 8to8JUDT+3iLj/tfrxRKaP4FFaOvh4vqywbYPcVllSki8n+Q7pw+wB+2UAVyag9fSMM8JQfqvUBI mB6Y2VOyYT80H8RpE9R9VIkNCXFTxuy0RRoY4qHIVhIkd/9dGi9nDPDDJ0D6+lRKnwBXufCUELkM t+42J5fJBcMC5aYJEZAwOchQYEXJFCVMAyB98oadlk4aAY2ARsCMgANOwI0elPLWr5eYSy+VMpCh oCuukH7vvivOfn4aPY1Al0CAV73doXqhvRCNnaHQUVKgYG/aPpiUmoj2REyUWLhiozXb4+RBEuIP ImBORWUGEBuXBj1bUGriV+tZ5qGRMiUugZ6ukEY5QKJhVMSodqLKKsCj+m+lFUa10ZOEMFmWSWlW Psr0QRm0NTreLohXipDXDfkCQGqY0mBAHQ7VVu1nLsHNswdm9lDqOnOiNIz9DoExNOumSs2T+jqL RBUWVXbeqJuqvCLUyTZUX+OvVCSFWBNLYsjEvxMDYkj1Vj5EYCScTOwLDdWZaHPUAySUw1AIjH1q ha2gUXYwCK050XbK3EdKmqhW00kjoBHQCJgROCEh4kOZ330ncTfdJIbCQgm77Tbp8/zz4qQ9WesZ 1MkRoEHxRkgnuL+T8tCAmomnB+Xbpsauh5s6f3bBfXvay9CAmhs7n+d3DX1fG7p6z+JL2gKR2FTb BKFMXtvnLTYysJrjC4kXP7xtxb/xWr+yv6lVP4kc21PdProEoL0Q7X9qCqlpN7vGv7AsJ1TKclW7 a1ISSMf3cJx45egwpTLjd7T34c0tcxtZN7kM/TfV0UWhbLadZbJuulbic+wX/2bOz7JqY2tubzWG LKPaHxET8/FnGrHzOf7M54gZ/6VfKD7Des3fEQOSLYUJGwtiGwRp1NWjgo/bHnXyKd3u3cvHgdqY mytBuFGmk0bAHhA4KSFiJ1LefFPiEJXYBJ1/yLXXStQLL4irdqhlD+Or29hCBH5DKI3fYbTsAelM V0/0U0Snk7ztZnYIad+YgBRWOUqkn7v8Y2LocWmTfffJtlqf/csvEn/ffVKFuJhDEcDVc8AA22qg bo1GoAEEmkSIqFVLwO2AlCeeEDd/fxmyZYt49u+vAdUIaAQ0AhoBjcBxBBinjAfo9FdekYqcHPHo 00cG/fqreA0ZolHSCNg8Ak0iROxFFSITJz3zjFSVl0tv/OvgXNeeweZ7qhuoEdAIaAQ0AtZHAAdm Y36+FO3bJykgQrkLFyo3CZ6jR0vvF18U/xkzdFgo66OuS2wDBJpMiFi3CddfqyoqxMniyiRJUhlu o9Hg2iUkBOp5fXujDcZKF6kR0AhoBGwOAWNRkSQ+9JBkffGFlOfliSO8ogdddZX0evRR8YiKsrn2 6gZpBBpDoFmEqLFCCnftkiPXXSfu3buLx9Ch4hYZKc5BQcpI0hHkKBAxa5x8/wq6yHJK9++Xgo0b YS1ZV9JE9+6uIFUBZ59dz5NpEZ4vximEnk5rJ9o2efTrJ348idRK9Iyav2yZchVfT6KFPN5jx4qX hfv4qhJ48v3tNzFA9MtwB8cTTkEOKM93+nRx79u3Tj0GOLHMRXwe1lf7GhF/d0Zb/ebMUUSxdiqN iZGCVavq9x+kk2pJv7POEkfPagd+5lS0Y4cUbdsmDnBwVqefwMyzRw/xmTWrbpvxUN6KFVIWG1vf KyzyeGGsvCdOrFsW6s9ZtEiM2Yj1VKv/KoQF+uMzYYIa49qJYnLmMYEYq2BeNYl5nGH46jtzprii fbVTeWqqGhuzc8Djedh/xDnymT1bnAOqPR6bU0l0tBTAUFONS+1AxMjjDnyZx9Gt+mq4ORVs2CCl 9KNlMc8c0H++rL0xZ8yOBM15cpculYrk5Dp51FxGPV5wR+E1ZkydOnhIyIXNBE/JlphxdntPnizu FjYUBqgT8qBKoI8dyznjgjnDsXSNiKhTT1lcnJozJvbdov+uWF++mGdOPj518hRjbRZjzpgsMHMg zijf58wzxdECm4I1a6TsyBGpwt/NFlTm/nugHz6nnVZvzuRh/lfQC7HFnHHCnPHCOvMcMaJOnkrM mfwlS8QAb/i15wwtw2nY7c111rt3nTwVmDMFy5erwKB1+s91hnH3xZpxCQysN2eK8d6oRJm1x5n9 5/zyP+ecenOmiNHY8Z6pQl9qW5AxD+exPzCrnTjPC2AnU56YWI3zXwuAXibFE753fMaNq9t/SNwL OM8wD2pjxv7zPeM9ZYp4DhxYJ48Ba7IQa8YAuxxLzNg3f4y/a3h4nTzl8fFSuHo1nFNWG8IfT6jD Ce+XgPPPV//WTiW7d6s5U4m1XDsPD8RueMcHYJ3VTkb0JRbv61zU44oI9mG4hBN28831yq2TSf+i EbBFBHjtvrWpZNky004IkLbXfHbhX/6+DZ8DPj4mU1JSvSoKXn/dBGpj4rO7a334e+ywYSYQo3p5 Mm+9tc6z5nzMk3LJJQ12I2nKlHp1mPPlPvpo/Tw5OaYjkZENtovtLfnmm3p5KnfsMO236AfrYLsO u7qaqvC9ZSr69tsG28U88b17m0xZWfXyZDz8sMK1Nl7mn1NnzGiw//Hnn18vD+vYi0828GwoRQ8Y UK8O5gGtMBW8+mr9LImJpl3o554GxvIw/lb222/18pSsWGHage8ayhMXGGiqio6ulycbc8YyD9vF MpJOOcVkKiyslyfxppsaHcu0uXMb7P8RzJmG2hWNenL+/e/6eUpLTQciIhSmlnP5EP5W+NFH9fIY 9u1Tz1vWw/wxLi6m8rVr66+Z775Tz1vm4e+xmLMNrbP0//63wXZxLidOmNBg/xOxlizXJnHmHE+9 +uoG88QA/4byELPsp55qcM4cCgio1zb2n3mKfvyxXp7SlSvVd5bzn/0/6OFhMuzdWy9P7ltvqXlb +z3Dn9nWI336mExFRfXypN1+e6N54mfObLD/yWecofCxrIdjnPrPf9bPk5triu/fX/Xf8h3Iv+W+ 9179ObN7tykG79OG+k8MStevr5en+IcfTEcaqWO/r6/JlJFRHzOM18EG8vB9vn/kyAb7X/T116as 554zVcXGNvi9/qNGwB4QsIpuy3HQIAl86inxuOYaccHpoQonQsHfHPCpgvF1OU7jlqkcV/er8L2p gY8RJ0MjT0EWqYJSpwaeZzlG3HqzdKjEk7sRJ7qG8vBvFQ34VKpgHkiAGqun3N29XrtK8ZfG+lKJ U15JA0y4HCfaxtplhCEi22GZDJAcNZbH0K2bVFJCY5GMkAI02v/g4HqYVeK0VwX8G+oP/8Zxs0yl GF8T+mlZD5/np6yBmEVlkD402n9I+0ooBbBIrJt5GmqbsWdPqWig/5WQHDU2lhXAppISGotUWTNn LOvh7xUWUitm5Ym9CnOmUcwsTuDMw9nd6FwGlmUNqJ0rMPca638l6uc41JszaG9DedSaQT8NkIjW 6z+kDI31xdDA7VJKCCpPMGcaWmelwL0S74ZGMbOQ9CnMMGcaXWeQXNV/Y8CVAKSNjdVRCQlhQ3PG gPdMY3mMWGeW75lK4M711+j7DOXVm8t8zwCzxtZAOdptmdi/SvSz0TwNzBm+ZyobeWeqdzMk5Zap AtLGRvuCNWPIyqqbBdInD/irC7r/fnHAu0snjYC9ImAVlZm9dl63WyOgEdAIaAQ0AhoBjQAR+H93 haYcYnPx1wAAAABJRU5ErkJggg== --_004_4A95BA014132FF49AE685FAB4B9F17F657D67E42dfweml701chm_-- From nobody Tue Oct 6 09:10:17 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5449D1ACD6A for ; Tue, 6 Oct 2015 09:10:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7DBJE9OG6_-K for ; Tue, 6 Oct 2015 09:10:13 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CCE81ACD50 for ; Tue, 6 Oct 2015 09:10:12 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCD41820; Tue, 06 Oct 2015 16:10:11 +0000 (GMT) Received: from DFWEML705-CHM.china.huawei.com (10.193.5.142) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 6 Oct 2015 17:10:10 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml705-chm ([10.193.5.142]) with mapi id 14.03.0235.001; Tue, 6 Oct 2015 09:10:06 -0700 From: Linda Dunbar To: Loa Andersson , DIEGO LOPEZ GARCIA Thread-Topic: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AdD8kJsQ5Rkc+aynSXudFPC41PBbhwACacoAAByF3gAAqS/JgAAnoH6AAABHPLA= Date: Tue, 6 Oct 2015 16:10:05 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D67E79@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> <56138CCF.6020006@pi.nu> In-Reply-To: <56138CCF.6020006@pi.nu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.190] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 16:10:16 -0000 Loa,=20 The "Composite Endpoint" in the context includes the group of hosts used by= RFC1122/1123/5505, group of applications, types of applications, user defi= ned types, or specific client traffic.=20 Agree with you that the terminology "End point" (taken from one of the prop= osals to OpenStack) doesn't represent the concept well. Do you have better = suggestions?=20 Linda=20 -----Original Message----- From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Loa Andersson Sent: Tuesday, October 06, 2015 3:57 AM To: Linda Dunbar; DIEGO LOPEZ GARCIA Cc: i2nsf@ietf.org Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Ba= sed Policy to describe I2NSF Service Layer Rules? Linda, How different is "endpoint" from "host" as it used in RFC 1122, RFC 1123 an= d RFC 5505? /Loa On 2015-10-06 05:45, Linda Dunbar wrote: > Thanks to Loa and Diego for the comments. > Here are some pros and cons of using Open Stack Group Based Policy: > Pros: > > * There are running codes (open sourced code) > > Cons: > > * The OpenStack's group based policy is very much Neutron port > oriented. It is not straight forward for an environment that is not > based on OpenStack Neutron. > * They are not designed for expressing rules to Flow-based NSF on how > to treat client/applications traffic. The current set is not > complete, a lot more need to be added. > * There are other "Group Based Policy", e.g. Window's Group Policy, > which are quite different from the OpenStack's Group Based Policy. > * May cause confusion in industry if calling "Group Based Policy" for > I2NSF Service Layer > > However, the notation of Groups, Target, Context and action do cover=20 > what is needed for clients/applications to express the rules on how=20 > their flows can be treated by the Flow-Based NSFs in networks. And=20 > they can be mapped to the Capability layer's Subject-Object-Action-Functi= on" > paradigm. > To avoid the confusion, it might be better to avoid using the term=20 > "Group based policy" (but inherent their concept only). > For example, "group" can be represented by "Composite Endpoints/Targets" > or Endpoint Container (if using SUPA language), where an "Endpoint"=20 > can be a subnet, a set of hosts or applications, etc. > > * Composite Endpoint (CEP). Logical combination of endpoint descriptor > IDs, where descriptor can be subnet, set of hosts, or applications. > > * Endpoint Descriptor (EPD). Each endpoint descriptor has a type and > value that are used to partially identify the endpoint. The type of > the Endpoint Descriptor may be a base networking identifier, such as > an IP address, or a user-defined type. The value may be a single > value, a range of values, or a group of values. > > * Target. This is used by the application client to establish > communications over the network. A Target is mapped to a > physical/logical ingress port, or a physical/logical egress port. > > * Policy Rule Set. A Policy Rule Set is used to determine how the > traffic between a pair of Target Groups is to be treated. A Policy > Rule Set consists of one or more Policy Rules. > > * Policy Rule. A Policy Rule consists of a Policy context and a set of > Actions to be applied to the traffic. > > * Policy Context. Context that describes when a Policy Rule is to be > applied. It is expressed as a direction, a list of L4 ports, time > range, and a protocol. > > * Policy Action. This is the action applied to the traffic that > matches the classifier. An action may be a simple ACL action (i.e. > allow, deny, mirroring), applying a well known statistics functions > (e.g. X minutes count, Y hours court), applying client specified > functions (with URL provided), or may refer to an ordered sequence > of functions (i.e., a service chain). > > Comments are greatly appreciated. > Linda > -----Original Message----- > From: Loa Andersson [mailto:loa@pi.nu] > Sent: Friday, October 02, 2015 12:18 AM > To: DIEGO LOPEZ GARCIA; Linda Dunbar > Cc: i2nsf@ietf.org > Subject: Re: [I2nsf] What do you people think of using OpenStack's=20 > Group Based Policy to describe I2NSF Service Layer Rules? > Linda and Diego, > This is said by someone that is not familiar with Open Stack or the=20 > Group Based Policy. > I'm somewhat on the same page as Diego, at least in the same book. > If we want to use OpenStack's Group Based Policy to describe I2NSF=20 > Service Layer Rules, the case for this has to be made much better. > What are the pros and cons? Are there viable alternatives? > /Loa > On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: >> Hi Linda, >> >> I am not completely sure that the current networking model of=20 >> OpenStack, that is reflected in the rule targets (either the PTG and=20 >> the Target >> itself) does cover all the potential semantics for general security=20 >> functions. The same concern applies to Policy Classifier, as they=20 >> seem very much associated with a particular implementation model and,=20 >> what is more, with a limited network model. >> >> Be goode, >> >> >>> On 1 Oct 2015, at 23:32 , Linda Dunbar >> > wrote: >>> >>> I2NSF participants, >>>https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-interface >>> -im/specifies the structure for I2NSF capability layer rules. >>> For the I2NSF simple service layer, what do people think of using =20 >>>OpenStack's Group Policy structure ? >>> If using OpenStack Group-based Policy (GBP) structure, the I2NSF =20 >>>simple service layer can be expressed as =B7Policy Target Group (PTG). >>> This is a group of Targets to which a traffic policy can be applied. >>> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet =20 >>>(i.e. with private address prefix), a subnet with public address =20 >>>families, or any combination of them with logical operators (Logical =20 >>>AND, OR, or NOT). A PTG references one or more Policy Rule Sets that =20 >>>it consumes or provides. >>> =B7Target. This is used by the application client to establish =20 >>>communications over the network. A Target is mapped to a single =20 >>>Neutron Port, a physical/logical ingress port, or a physical/logical =20 >>>egress port. >>> =B7Policy Rule Set. A Policy Rule Set is used to determine how the =20 >>>traffic between a pair of Target Groups is to be treated. A Policy =20 >>>Rule Set consists of one or more Policy Rules. >>> =B7Policy Rule. A Policy Rule consists of a Traffic Classifier and a =20 >>>set of Actions to be applied to the traffic. >>> =B7Policy Classifier. A traffic classifier describes the traffic to =20 >>>which a Policy Rule is to be applied. It is expressed as a direction, =20 >>>a list of L4 ports, time range, and a protocol. >>> =B7Policy Action. This is the action applied to the traffic that =20 >>>matches the classifier. An action may be a simple ACL action (i.e. >>> allow, deny, mirroring), applying a well known statistics functions =20 >>>(e.g. X minutes count, Y hours court), applying client specified =20 >>>functions (with URL provided), or may refer to an ordered sequence of =20 >>>functions (i.e., a service chain). >>> If you have concern of using OpenStack Group Based Policies, please =20 >>>let the group know. >>> Thanks, Linda >>> _______________________________________________ >>> I2nsf mailing list >>>I2nsf@ietf.org =20 >>>https://www.ietf.org/mailman/listinfo/i2nsf >> >> -- >> "Esta vez no fallaremos, Doctor Infierno" >> >> Dr Diego R. Lopez >> Telefonica I+D >>http://people.tid.es/diego.lopez/ >> >> e-mail:diego.r.lopez@telefonica.com >> Tel: +34 913 129 041 >> Mobile: +34 682 051 091 >> ---------------------------------- >> >> >> --------------------------------------------------------------------- >> - >> -- >> >> Este mensaje y sus adjuntos se dirigen exclusivamente a su=20 >> destinatario, puede contener informaci=F3n privilegiada o confidencial=20 >> y es para uso exclusivo de la persona o entidad de destino. Si no es=20 >> usted. el destinatario indicado, queda notificado de que la lectura,=20 >> utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede estar=20 >> prohibida en virtud de la legislaci=F3n vigente. Si ha recibido este=20 >> mensaje por error, le rogamos que nos lo comunique inmediatamente por=20 >> esta misma v=EDa y proceda a su destrucci=F3n. >> >> The information contained in this transmission is privileged and=20 >> confidential information intended only for the use of the individual=20 >> or entity named above. If the reader of this message is not the=20 >> intended recipient, you are hereby notified that any dissemination,=20 >> distribution or copying of this communication is strictly prohibited. >> If you have received this transmission in error, do not read it. >> Please immediately reply to the sender that you have received this=20 >> communication in error and then delete it. >> >> Esta mensagem e seus anexos se dirigem exclusivamente ao seu=20 >> destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confidencial = e =E9=20 >> para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa= =20 >> senhoria o destinat=E1rio indicado, fica notificado de que a leitura,=20 >> utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode est= ar proibida=20 >> em virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro,= =20 >> rogamos-lhe que nos o comunique imediatamente por esta mesma via e=20 >> proceda a sua destrui=E7=E3o >> >> >> _______________________________________________ >> I2nsf mailing list >>I2nsf@ietf.org =20 >>https://www.ietf.org/mailman/listinfo/i2nsf >> _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://www.ietf.org/mailman/listinfo/i2nsf From nobody Tue Oct 6 09:29:00 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5B681ACDD2 for ; Tue, 6 Oct 2015 09:28:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T-BQeeDuWRmQ for ; Tue, 6 Oct 2015 09:28:57 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0EFF1ACDDC for ; Tue, 6 Oct 2015 09:28:56 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BYK99262; Tue, 06 Oct 2015 16:28:55 +0000 (GMT) Received: from DFWEML704-CHM.china.huawei.com (10.193.5.141) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 6 Oct 2015 17:28:53 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml704-chm ([10.193.5.141]) with mapi id 14.03.0235.001; Tue, 6 Oct 2015 09:28:50 -0700 From: Linda Dunbar To: "i2nsf@ietf.org" Thread-Topic: IETF 94 - I2NSF Meeting slot request Thread-Index: AQHRAFQU41T2kpeVt0iqEcmt15OZkw== Date: Tue, 6 Oct 2015 16:28:49 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D67EF4@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.190] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [I2nsf] IETF 94 - I2NSF Meeting slot request X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 16:29:00 -0000 Hi, We will have our first I2NSF WG meeting at IETF 94 (Yokohama). As per the preliminary agenda, I2NSF WG is scheduled to meet on Tue (Nov 3)= 0900-1130 Morning Session in Room 302. This email is to solicit slot requests to present in the WG session. Please provide=20 * Name of the draft * Short description of why you think the item needs to be discussed in the = meeting Kindly note that, priority will be given to Requests related to the WG char= tered items. Please do reply to this email with your requests. cheers -Linda and Adrian _______________________________________________ From nobody Tue Oct 6 11:20:21 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD4AE1AD0C6 for ; Tue, 6 Oct 2015 11:20:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pcy2Zo_nack4 for ; Tue, 6 Oct 2015 11:20:16 -0700 (PDT) Received: from pipi.pi.nu (pipi.pi.nu [83.168.239.141]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1AEA51AD0B8 for ; Tue, 6 Oct 2015 11:20:16 -0700 (PDT) Received: from [192.168.1.10] (unknown [49.149.195.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: loa@pi.nu) by pipi.pi.nu (Postfix) with ESMTPSA id DE85718013DA; Tue, 6 Oct 2015 20:20:12 +0200 (CEST) To: Linda Dunbar , DIEGO LOPEZ GARCIA References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> <56138CCF.6020006@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D67E79@dfweml701-chm> From: Loa Andersson Message-ID: <561410C9.8020904@pi.nu> Date: Wed, 7 Oct 2015 02:19:53 +0800 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D67E79@dfweml701-chm> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 18:20:20 -0000 Linda, While I understand (somewhat) where you are going e.g. with group of applications, types of applications, etc. The fact that those applications or functions may reside in one or more "hosts" seem to have very small impact on the model. If they are end-points they are hosts, right? We were over all that in the L2VPN work, maybe time to re-read. /Loa On 2015-10-07 00:10, Linda Dunbar wrote: > Loa, > > The "Composite Endpoint" in the context includes the group of hosts used by RFC1122/1123/5505, group of applications, types of applications, user defined types, or specific client traffic. > > Agree with you that the terminology "End point" (taken from one of the proposals to OpenStack) doesn't represent the concept well. Do you have better suggestions? > > Linda > > > -----Original Message----- > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Loa Andersson > Sent: Tuesday, October 06, 2015 3:57 AM > To: Linda Dunbar; DIEGO LOPEZ GARCIA > Cc: i2nsf@ietf.org > Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? > > Linda, > > How different is "endpoint" from "host" as it used in RFC 1122, RFC 1123 and RFC 5505? > > /Loa > > On 2015-10-06 05:45, Linda Dunbar wrote: >> Thanks to Loa and Diego for the comments. >> Here are some pros and cons of using Open Stack Group Based Policy: >> Pros: >> >> * There are running codes (open sourced code) >> >> Cons: >> >> * The OpenStack's group based policy is very much Neutron port >> oriented. It is not straight forward for an environment that is not >> based on OpenStack Neutron. >> * They are not designed for expressing rules to Flow-based NSF on how >> to treat client/applications traffic. The current set is not >> complete, a lot more need to be added. >> * There are other "Group Based Policy", e.g. Window's Group Policy, >> which are quite different from the OpenStack's Group Based Policy. >> * May cause confusion in industry if calling "Group Based Policy" for >> I2NSF Service Layer >> >> However, the notation of Groups, Target, Context and action do cover >> what is needed for clients/applications to express the rules on how >> their flows can be treated by the Flow-Based NSFs in networks. And >> they can be mapped to the Capability layer's Subject-Object-Action-Function" >> paradigm. >> To avoid the confusion, it might be better to avoid using the term >> "Group based policy" (but inherent their concept only). >> For example, "group" can be represented by "Composite Endpoints/Targets" >> or Endpoint Container (if using SUPA language), where an "Endpoint" >> can be a subnet, a set of hosts or applications, etc. >> >> * Composite Endpoint (CEP). Logical combination of endpoint descriptor >> IDs, where descriptor can be subnet, set of hosts, or applications. >> >> * Endpoint Descriptor (EPD). Each endpoint descriptor has a type and >> value that are used to partially identify the endpoint. The type of >> the Endpoint Descriptor may be a base networking identifier, such as >> an IP address, or a user-defined type. The value may be a single >> value, a range of values, or a group of values. >> >> * Target. This is used by the application client to establish >> communications over the network. A Target is mapped to a >> physical/logical ingress port, or a physical/logical egress port. >> >> * Policy Rule Set. A Policy Rule Set is used to determine how the >> traffic between a pair of Target Groups is to be treated. A Policy >> Rule Set consists of one or more Policy Rules. >> >> * Policy Rule. A Policy Rule consists of a Policy context and a set of >> Actions to be applied to the traffic. >> >> * Policy Context. Context that describes when a Policy Rule is to be >> applied. It is expressed as a direction, a list of L4 ports, time >> range, and a protocol. >> >> * Policy Action. This is the action applied to the traffic that >> matches the classifier. An action may be a simple ACL action (i.e. >> allow, deny, mirroring), applying a well known statistics functions >> (e.g. X minutes count, Y hours court), applying client specified >> functions (with URL provided), or may refer to an ordered sequence >> of functions (i.e., a service chain). >> >> Comments are greatly appreciated. >> Linda >> -----Original Message----- >> From: Loa Andersson [mailto:loa@pi.nu] >> Sent: Friday, October 02, 2015 12:18 AM >> To: DIEGO LOPEZ GARCIA; Linda Dunbar >> Cc: i2nsf@ietf.org >> Subject: Re: [I2nsf] What do you people think of using OpenStack's >> Group Based Policy to describe I2NSF Service Layer Rules? >> Linda and Diego, >> This is said by someone that is not familiar with Open Stack or the >> Group Based Policy. >> I'm somewhat on the same page as Diego, at least in the same book. >> If we want to use OpenStack's Group Based Policy to describe I2NSF >> Service Layer Rules, the case for this has to be made much better. >> What are the pros and cons? Are there viable alternatives? >> /Loa >> On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: >>> Hi Linda, >>> >>> I am not completely sure that the current networking model of >>> OpenStack, that is reflected in the rule targets (either the PTG and >>> the Target >>> itself) does cover all the potential semantics for general security >>> functions. The same concern applies to Policy Classifier, as they >>> seem very much associated with a particular implementation model and, >>> what is more, with a limited network model. >>> >>> Be goode, >>> >>> >>>> On 1 Oct 2015, at 23:32 , Linda Dunbar >>> > wrote: >>>> >>>> I2NSF participants, >>>> https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-interface >>>> -im/specifies the structure for I2NSF capability layer rules. >>>> For the I2NSF simple service layer, what do people think of using >>>> OpenStack's Group Policy structure ? >>>> If using OpenStack Group-based Policy (GBP) structure, the I2NSF >>>> simple service layer can be expressed as ·Policy Target Group (PTG). >>>> This is a group of Targets to which a traffic policy can be applied. >>>> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet >>>> (i.e. with private address prefix), a subnet with public address >>>> families, or any combination of them with logical operators (Logical >>>> AND, OR, or NOT). A PTG references one or more Policy Rule Sets that >>>> it consumes or provides. >>>> ·Target. This is used by the application client to establish >>>> communications over the network. A Target is mapped to a single >>>> Neutron Port, a physical/logical ingress port, or a physical/logical >>>> egress port. >>>> ·Policy Rule Set. A Policy Rule Set is used to determine how the >>>> traffic between a pair of Target Groups is to be treated. A Policy >>>> Rule Set consists of one or more Policy Rules. >>>> ·Policy Rule. A Policy Rule consists of a Traffic Classifier and a >>>> set of Actions to be applied to the traffic. >>>> ·Policy Classifier. A traffic classifier describes the traffic to >>>> which a Policy Rule is to be applied. It is expressed as a direction, >>>> a list of L4 ports, time range, and a protocol. >>>> ·Policy Action. This is the action applied to the traffic that >>>> matches the classifier. An action may be a simple ACL action (i.e. >>>> allow, deny, mirroring), applying a well known statistics functions >>>> (e.g. X minutes count, Y hours court), applying client specified >>>> functions (with URL provided), or may refer to an ordered sequence of >>>> functions (i.e., a service chain). >>>> If you have concern of using OpenStack Group Based Policies, please >>>> let the group know. >>>> Thanks, Linda >>>> _______________________________________________ >>>> I2nsf mailing list >>>> I2nsf@ietf.org >>>> https://www.ietf.org/mailman/listinfo/i2nsf >>> >>> -- >>> "Esta vez no fallaremos, Doctor Infierno" >>> >>> Dr Diego R. Lopez >>> Telefonica I+D >>> http://people.tid.es/diego.lopez/ >>> >>> e-mail:diego.r.lopez@telefonica.com >>> Tel: +34 913 129 041 >>> Mobile: +34 682 051 091 >>> ---------------------------------- >>> >>> >>> --------------------------------------------------------------------- >>> - >>> -- >>> >>> Este mensaje y sus adjuntos se dirigen exclusivamente a su >>> destinatario, puede contener información privilegiada o confidencial >>> y es para uso exclusivo de la persona o entidad de destino. Si no es >>> usted. el destinatario indicado, queda notificado de que la lectura, >>> utilización, divulgación y/o copia sin autorización puede estar >>> prohibida en virtud de la legislación vigente. Si ha recibido este >>> mensaje por error, le rogamos que nos lo comunique inmediatamente por >>> esta misma vía y proceda a su destrucción. >>> >>> The information contained in this transmission is privileged and >>> confidential information intended only for the use of the individual >>> or entity named above. If the reader of this message is not the >>> intended recipient, you are hereby notified that any dissemination, >>> distribution or copying of this communication is strictly prohibited. >>> If you have received this transmission in error, do not read it. >>> Please immediately reply to the sender that you have received this >>> communication in error and then delete it. >>> >>> Esta mensagem e seus anexos se dirigem exclusivamente ao seu >>> destinatário, pode conter informação privilegiada ou confidencial e é >>> para uso exclusivo da pessoa ou entidade de destino. Se não é vossa >>> senhoria o destinatário indicado, fica notificado de que a leitura, >>> utilização, divulgação e/ou cópia sem autorização pode estar proibida >>> em virtude da legislação vigente. Se recebeu esta mensagem por erro, >>> rogamos-lhe que nos o comunique imediatamente por esta mesma via e >>> proceda a sua destruição >>> >>> >>> _______________________________________________ >>> I2nsf mailing list >>> I2nsf@ietf.org >>> https://www.ietf.org/mailman/listinfo/i2nsf >>> > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > From nobody Tue Oct 6 21:10:27 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3A5A1A88A9 for ; Tue, 6 Oct 2015 21:10:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.911 X-Spam-Level: X-Spam-Status: No, score=-3.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UXPxye33Vjkk for ; Tue, 6 Oct 2015 21:10:22 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 495D91A88B4 for ; Tue, 6 Oct 2015 21:10:21 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCD80619; Wed, 07 Oct 2015 04:10:17 +0000 (GMT) Received: from NKGEML403-HUB.china.huawei.com (10.98.56.34) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 7 Oct 2015 05:10:14 +0100 Received: from NKGEML509-MBS.china.huawei.com ([169.254.2.4]) by nkgeml403-hub.china.huawei.com ([10.98.56.34]) with mapi id 14.03.0235.001; Wed, 7 Oct 2015 12:10:05 +0800 From: Youjianjie To: Loa Andersson , Linda Dunbar , "DIEGO LOPEZ GARCIA" Thread-Topic: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AQHRABUOk+lQOL9wfk2Oxf7DO6U+rJ5eHKaAgAAkRICAAShQIA== Date: Wed, 7 Oct 2015 04:10:05 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> <56138CCF.6020006@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D67E79@dfweml701-chm> <561410C9.8020904@pi.nu> In-Reply-To: <561410C9.8020904@pi.nu> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.46.12.236] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: [I2nsf] =?utf-8?b?562U5aSNOiAgV2hhdCBkbyB5b3UgcGVvcGxlIHRoaW5r?= =?utf-8?q?_of_using_OpenStack=27s_Group_Based_Policy_to_describe_I2NSF_Se?= =?utf-8?q?rvice_Layer_Rules=3F?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 04:10:25 -0000 SGkgYWxsLA0KDQpTaW5jZSB3ZSdyZSB0YWxraW5nIGFib3V0IGdyb3VwIGJhc2VkIHBvbGljeSwg SSdtIGdvaW5nIHRvIHN1Ym1pdCBhbiBpbnRlcm5ldC1kcmFmdCBhYm91dCAnVXNlci1ncm91cCBi YXNlZCBNZWNoYW5pc20gZm9yIFNlcnZpY2UgTGF5ZXInIHRvIHRoaXMgSUVURiBtZWV0aW5nLiBU aGUgbWFpbiBpZGVhIGlzIGFzIGZvbGxvd3M6DQoNClRoZSBkcmFmdCBkaXNjdXNzZXMgZW50ZXJw cmlzZSB1c2UgY2FzZSBhbmQgcmVxdWlyZW1lbnRzIGZvciB1c2VyLWdyb3VwIGJhc2VkIHNlY3Vy aXR5IHBvbGljeSB0aGF0IGFsbG93cyB1c2VycyB0byBlbmpveSB0aGUgY29uc2lzdGVudCBwb2xp Y3kgYW5kIGV4cGVyaWVuY2Ugb24gdGhlIGVudGlyZSBuZXR3b3JrIHJlZ2FyZGxlc3Mgb2YgdXNl ciBvciByZXNvdXJjZSBsb2NhdGlvbi4gQSBVc2VyLWdyb3VwIEF3YXJlIFBvbGljeSBDb250cm9s IChVQVBDKSBpcyBwcm9wb3NlZCB0byBkZWNvdXBsZSB1c2VycyBmcm9tIElQIGFkZHJlc3NlcyBv ciBWTEFOcyBzbyB0aGF0IHVzZXJzIGNhbiBtb3ZlIGFuZCByZW1haW4gY29ubmVjdGVkIHdpdGgg dW5pZmllZCBwb2xpY2llcy4NCg0KVGhlIFVBUEMgaXMgYmFzZWQgb24gbG9naWNhbCBncm91cHMs IHdoaWNoIGFyZSBkZWNvdXBsZWQgZnJvbSBJUCBhZGRyZXNzZXMsIHNvIG9ubHkgdGhlIHJlbGF0 aW9uc2hpcCBiZXR3ZWVuIHR3byBsb2dpY2FsIGdyb3VwcyBuZWVkcyB0byBiZSBjb25zaWRlcmVk IHdoZW4gcGxhbm5pbmcgZ3JvdXAgcG9saWNpZXMuIE9uIHRoZSBjb250cm9sbGVyLCB0aGUgYWRt aW5pc3RyYXRvciBjYW4gdXNlIGEgcG9saWN5IG1hdHJpeCB0byBjb25maWd1cmUgdXNlciBncm91 cCBwb2xpY2llcy4gRm9yIGV4YW1wbGUsIHRoZSBmb2xsb3dpbmcgdGFibGUgc2hvd3MgdGhlIGlu dGVyLWdyb3VwIHBvbGljaWVzLg0KDQogICAgICAgICAgICAgICAgICAgICAgRGVzdGluYXRpb24g R3JvdXANCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQ0KU291cmNlIEdyb3VwCSBXb3JrZmxvdyBTZXJ2ZXIgCVImRCBSZXNvdXJj ZSBTZXJ2ZXIgCVNhbGVzIFJlc291cmNlIFNlcnZlciANCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KUiZEIGdyb3VwIAkgICAg UGVybWl0IAkgICAgIFBlcm1pdCAJICAgICAgICAgICAgICBEZW55DQpTYWxlcyBncm91cCAJICAg IFBlcm1pdCAJICAgICBEZW55IAkgICAgICAgICAgICAgIFBlcm1pdA0KVklQIHVzZXIgZ3JvdXAg CVBlcm1pdCAJICAgICBQZXJtaXQgCSAgICAgICAgICAgICAgUGVybWl0DQoNCg0KUGxlYXNlIGxl dCBtZSBrbm93IGlmIHlvdSBoYXZlIGFueSBjb21tZW50cy4NCg0KVGhhbmtzLA0KSmlhbmppZQ0K DQoNCj4gLS0tLS3pgq7ku7bljp/ku7YtLS0tLQ0KPiDlj5Hku7bkuro6IEkybnNmIFttYWlsdG86 aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10g5Luj6KGoIExvYSBBbmRlcnNzb24NCj4g5Y+R6YCB5pe2 6Ze0OiAyMDE15bm0MTDmnIg35pelIDI6MjANCj4g5pS25Lu25Lq6OiBMaW5kYSBEdW5iYXI7IERJ RUdPIExPUEVaIEdBUkNJQQ0KPiDmioTpgIE6IGkybnNmQGlldGYub3JnDQo+IOS4u+mimDogUmU6 IFtJMm5zZl0gV2hhdCBkbyB5b3UgcGVvcGxlIHRoaW5rIG9mIHVzaW5nIE9wZW5TdGFjaydzIEdy b3VwIEJhc2VkDQo+IFBvbGljeSB0byBkZXNjcmliZSBJMk5TRiBTZXJ2aWNlIExheWVyIFJ1bGVz Pw0KPiANCj4gTGluZGEsDQo+IA0KPiBXaGlsZSBJIHVuZGVyc3RhbmQgKHNvbWV3aGF0KSB3aGVy ZSB5b3UgYXJlIGdvaW5nIGUuZy4gd2l0aCBncm91cCBvZg0KPiBhcHBsaWNhdGlvbnMsIHR5cGVz IG9mIGFwcGxpY2F0aW9ucywgZXRjLiBUaGUgZmFjdCB0aGF0IHRob3NlIGFwcGxpY2F0aW9ucyBv cg0KPiBmdW5jdGlvbnMgbWF5IHJlc2lkZSBpbiBvbmUgb3IgbW9yZSAiaG9zdHMiIHNlZW0gdG8g aGF2ZSB2ZXJ5IHNtYWxsIGltcGFjdCBvbg0KPiB0aGUgbW9kZWwuIElmIHRoZXkgYXJlIGVuZC1w b2ludHMgdGhleSBhcmUgaG9zdHMsIHJpZ2h0Pw0KPiANCj4gV2Ugd2VyZSBvdmVyIGFsbCB0aGF0 IGluIHRoZSBMMlZQTiB3b3JrLCBtYXliZSB0aW1lIHRvIHJlLXJlYWQuDQo+IA0KPiAvTG9hDQo+ IA0KPiBPbiAyMDE1LTEwLTA3IDAwOjEwLCBMaW5kYSBEdW5iYXIgd3JvdGU6DQo+ID4gTG9hLA0K PiA+DQo+ID4gVGhlICJDb21wb3NpdGUgRW5kcG9pbnQiIGluIHRoZSBjb250ZXh0IGluY2x1ZGVz IHRoZSBncm91cCBvZiBob3N0cyB1c2VkIGJ5DQo+IFJGQzExMjIvMTEyMy81NTA1LCBncm91cCBv ZiBhcHBsaWNhdGlvbnMsIHR5cGVzIG9mIGFwcGxpY2F0aW9ucywgdXNlciBkZWZpbmVkDQo+IHR5 cGVzLCBvciBzcGVjaWZpYyBjbGllbnQgdHJhZmZpYy4NCj4gPg0KPiA+IEFncmVlIHdpdGggeW91 IHRoYXQgdGhlIHRlcm1pbm9sb2d5ICJFbmQgcG9pbnQiICh0YWtlbiBmcm9tIG9uZSBvZiB0aGUN Cj4gcHJvcG9zYWxzIHRvIE9wZW5TdGFjaykgZG9lc24ndCByZXByZXNlbnQgdGhlIGNvbmNlcHQg d2VsbC4gRG8geW91IGhhdmUNCj4gYmV0dGVyIHN1Z2dlc3Rpb25zPw0KPiA+DQo+ID4gTGluZGEN Cj4gPg0KPiA+DQo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBJMm5z ZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBMb2EgQW5kZXJz c29uDQo+ID4gU2VudDogVHVlc2RheSwgT2N0b2JlciAwNiwgMjAxNSAzOjU3IEFNDQo+ID4gVG86 IExpbmRhIER1bmJhcjsgRElFR08gTE9QRVogR0FSQ0lBDQo+ID4gQ2M6IGkybnNmQGlldGYub3Jn DQo+ID4gU3ViamVjdDogUmU6IFtJMm5zZl0gV2hhdCBkbyB5b3UgcGVvcGxlIHRoaW5rIG9mIHVz aW5nIE9wZW5TdGFjaydzIEdyb3VwDQo+IEJhc2VkIFBvbGljeSB0byBkZXNjcmliZSBJMk5TRiBT ZXJ2aWNlIExheWVyIFJ1bGVzPw0KPiA+DQo+ID4gTGluZGEsDQo+ID4NCj4gPiBIb3cgZGlmZmVy ZW50IGlzICJlbmRwb2ludCIgZnJvbSAiaG9zdCIgYXMgaXQgdXNlZCBpbiBSRkMgMTEyMiwgUkZD IDExMjMgYW5kDQo+IFJGQyA1NTA1Pw0KPiA+DQo+ID4gL0xvYQ0KPiA+DQo+ID4gT24gMjAxNS0x MC0wNiAwNTo0NSwgTGluZGEgRHVuYmFyIHdyb3RlOg0KPiA+PiBUaGFua3MgdG8gTG9hIGFuZCBE aWVnbyBmb3IgdGhlIGNvbW1lbnRzLg0KPiA+PiBIZXJlIGFyZSBzb21lIHByb3MgYW5kIGNvbnMg b2YgdXNpbmcgT3BlbiBTdGFjayBHcm91cCBCYXNlZCBQb2xpY3k6DQo+ID4+IFByb3M6DQo+ID4+ DQo+ID4+ICAgICogVGhlcmUgYXJlIHJ1bm5pbmcgY29kZXMgKG9wZW4gc291cmNlZCBjb2RlKQ0K PiA+Pg0KPiA+PiBDb25zOg0KPiA+Pg0KPiA+PiAgICAqIFRoZSBPcGVuU3RhY2sncyBncm91cCBi YXNlZCBwb2xpY3kgaXMgdmVyeSBtdWNoIE5ldXRyb24gcG9ydA0KPiA+PiAgICAgIG9yaWVudGVk LiBJdCBpcyBub3Qgc3RyYWlnaHQgZm9yd2FyZCBmb3IgYW4gZW52aXJvbm1lbnQgdGhhdCBpcyBu b3QNCj4gPj4gICAgICBiYXNlZCBvbiBPcGVuU3RhY2sgTmV1dHJvbi4NCj4gPj4gICAgKiBUaGV5 IGFyZSBub3QgZGVzaWduZWQgZm9yIGV4cHJlc3NpbmcgcnVsZXMgdG8gRmxvdy1iYXNlZCBOU0Yg b24gaG93DQo+ID4+ICAgICAgdG8gdHJlYXQgY2xpZW50L2FwcGxpY2F0aW9ucyB0cmFmZmljLiBU aGUgY3VycmVudCBzZXQgaXMgbm90DQo+ID4+ICAgICAgY29tcGxldGUsICBhIGxvdCBtb3JlIG5l ZWQgdG8gYmUgYWRkZWQuDQo+ID4+ICAgICogVGhlcmUgYXJlIG90aGVyICJHcm91cCBCYXNlZCBQ b2xpY3kiLCBlLmcuIFdpbmRvdydzIEdyb3VwIFBvbGljeSwNCj4gPj4gICAgICB3aGljaCBhcmUg cXVpdGUgZGlmZmVyZW50IGZyb20gdGhlIE9wZW5TdGFjaydzIEdyb3VwIEJhc2VkIFBvbGljeS4N Cj4gPj4gICAgKiBNYXkgY2F1c2UgY29uZnVzaW9uIGluIGluZHVzdHJ5IGlmIGNhbGxpbmcgIkdy b3VwIEJhc2VkIFBvbGljeSIgZm9yDQo+ID4+ICAgICAgSTJOU0YgU2VydmljZSBMYXllcg0KPiA+ Pg0KPiA+PiBIb3dldmVyLCB0aGUgbm90YXRpb24gb2YgR3JvdXBzLCBUYXJnZXQsIENvbnRleHQg YW5kIGFjdGlvbiBkbyBjb3Zlcg0KPiA+PiB3aGF0IGlzIG5lZWRlZCBmb3IgY2xpZW50cy9hcHBs aWNhdGlvbnMgdG8gZXhwcmVzcyB0aGUgcnVsZXMgb24gaG93DQo+ID4+IHRoZWlyIGZsb3dzIGNh biBiZSB0cmVhdGVkIGJ5IHRoZSBGbG93LUJhc2VkIE5TRnMgaW4gbmV0d29ya3MuIEFuZA0KPiA+ PiB0aGV5IGNhbiBiZSBtYXBwZWQgdG8gdGhlIENhcGFiaWxpdHkgbGF5ZXIncw0KPiBTdWJqZWN0 LU9iamVjdC1BY3Rpb24tRnVuY3Rpb24iDQo+ID4+IHBhcmFkaWdtLg0KPiA+PiBUbyBhdm9pZCB0 aGUgY29uZnVzaW9uLCBpdCBtaWdodCBiZSBiZXR0ZXIgdG8gYXZvaWQgdXNpbmcgdGhlIHRlcm0N Cj4gPj4gIkdyb3VwIGJhc2VkIHBvbGljeSIgKGJ1dCBpbmhlcmVudCB0aGVpciBjb25jZXB0IG9u bHkpLg0KPiA+PiBGb3IgZXhhbXBsZSwgImdyb3VwIiBjYW4gYmUgcmVwcmVzZW50ZWQgYnkgIkNv bXBvc2l0ZQ0KPiBFbmRwb2ludHMvVGFyZ2V0cyINCj4gPj4gb3IgRW5kcG9pbnQgQ29udGFpbmVy IChpZiB1c2luZyBTVVBBIGxhbmd1YWdlKSwgd2hlcmUgYW4gIkVuZHBvaW50Ig0KPiA+PiBjYW4g YmUgYSBzdWJuZXQsIGEgc2V0IG9mIGhvc3RzIG9yIGFwcGxpY2F0aW9ucywgZXRjLg0KPiA+Pg0K PiA+PiAgICAqIENvbXBvc2l0ZSBFbmRwb2ludCAoQ0VQKS4gTG9naWNhbCBjb21iaW5hdGlvbiBv ZiBlbmRwb2ludCBkZXNjcmlwdG9yDQo+ID4+ICAgICAgSURzLCB3aGVyZSBkZXNjcmlwdG9yIGNh biBiZSBzdWJuZXQsIHNldCBvZiBob3N0cywgb3IgYXBwbGljYXRpb25zLg0KPiA+Pg0KPiA+PiAg ICAqIEVuZHBvaW50IERlc2NyaXB0b3IgKEVQRCkuIEVhY2ggZW5kcG9pbnQgZGVzY3JpcHRvciBo YXMgYSB0eXBlIGFuZA0KPiA+PiAgICAgIHZhbHVlIHRoYXQgYXJlIHVzZWQgdG8gcGFydGlhbGx5 IGlkZW50aWZ5IHRoZSBlbmRwb2ludC4gVGhlIHR5cGUgb2YNCj4gPj4gICAgICB0aGUgRW5kcG9p bnQgRGVzY3JpcHRvciBtYXkgYmUgYSBiYXNlIG5ldHdvcmtpbmcgaWRlbnRpZmllciwgc3VjaCBh cw0KPiA+PiAgICAgIGFuIElQIGFkZHJlc3MsIG9yIGEgdXNlci1kZWZpbmVkIHR5cGUuIFRoZSB2 YWx1ZSBtYXkgYmUgYSBzaW5nbGUNCj4gPj4gICAgICB2YWx1ZSwgYSByYW5nZSBvZiB2YWx1ZXMs IG9yIGEgZ3JvdXAgb2YgdmFsdWVzLg0KPiA+Pg0KPiA+PiAgICAqIFRhcmdldC4gVGhpcyBpcyB1 c2VkIGJ5IHRoZSBhcHBsaWNhdGlvbiBjbGllbnQgdG8gZXN0YWJsaXNoDQo+ID4+ICAgICAgY29t bXVuaWNhdGlvbnMgb3ZlciB0aGUgbmV0d29yay4gQSBUYXJnZXQgaXMgbWFwcGVkIHRvIGENCj4g Pj4gICAgICBwaHlzaWNhbC9sb2dpY2FsIGluZ3Jlc3MgcG9ydCwgb3IgYSBwaHlzaWNhbC9sb2dp Y2FsIGVncmVzcyBwb3J0Lg0KPiA+Pg0KPiA+PiAgICAqIFBvbGljeSBSdWxlIFNldC4gQSBQb2xp Y3kgUnVsZSBTZXQgaXMgdXNlZCB0byBkZXRlcm1pbmUgaG93IHRoZQ0KPiA+PiAgICAgIHRyYWZm aWMgYmV0d2VlbiBhIHBhaXIgb2YgVGFyZ2V0IEdyb3VwcyBpcyB0byBiZSB0cmVhdGVkLiBBIFBv bGljeQ0KPiA+PiAgICAgIFJ1bGUgU2V0IGNvbnNpc3RzIG9mIG9uZSBvciBtb3JlIFBvbGljeSBS dWxlcy4NCj4gPj4NCj4gPj4gICAgKiBQb2xpY3kgUnVsZS4gQSBQb2xpY3kgUnVsZSBjb25zaXN0 cyBvZiBhIFBvbGljeSBjb250ZXh0IGFuZCBhIHNldCBvZg0KPiA+PiAgICAgIEFjdGlvbnMgdG8g YmUgYXBwbGllZCB0byB0aGUgdHJhZmZpYy4NCj4gPj4NCj4gPj4gICAgKiBQb2xpY3kgQ29udGV4 dC4gQ29udGV4dCB0aGF0IGRlc2NyaWJlcyB3aGVuIGEgUG9saWN5IFJ1bGUgaXMgdG8gYmUNCj4g Pj4gICAgICBhcHBsaWVkLiBJdCBpcyBleHByZXNzZWQgYXMgYSBkaXJlY3Rpb24sIGEgbGlzdCBv ZiBMNCBwb3J0cywgdGltZQ0KPiA+PiAgICAgIHJhbmdlLCBhbmQgYSBwcm90b2NvbC4NCj4gPj4N Cj4gPj4gICAgKiBQb2xpY3kgQWN0aW9uLiBUaGlzIGlzIHRoZSBhY3Rpb24gYXBwbGllZCB0byB0 aGUgdHJhZmZpYyB0aGF0DQo+ID4+ICAgICAgbWF0Y2hlcyB0aGUgY2xhc3NpZmllci4gQW4gYWN0 aW9uIG1heSBiZSBhIHNpbXBsZSBBQ0wgYWN0aW9uIChpLmUuDQo+ID4+ICAgICAgYWxsb3csIGRl bnksIG1pcnJvcmluZyksIGFwcGx5aW5nIGEgd2VsbCBrbm93biBzdGF0aXN0aWNzIGZ1bmN0aW9u cw0KPiA+PiAgICAgIChlLmcuIFggbWludXRlcyBjb3VudCwgWSBob3VycyBjb3VydCksIGFwcGx5 aW5nIGNsaWVudCBzcGVjaWZpZWQNCj4gPj4gICAgICBmdW5jdGlvbnMgKHdpdGggVVJMIHByb3Zp ZGVkKSwgb3IgbWF5IHJlZmVyIHRvIGFuIG9yZGVyZWQgc2VxdWVuY2UNCj4gPj4gICAgICBvZiBm dW5jdGlvbnMgKGkuZS4sIGEgc2VydmljZSBjaGFpbikuDQo+ID4+DQo+ID4+IENvbW1lbnRzIGFy ZSBncmVhdGx5IGFwcHJlY2lhdGVkLg0KPiA+PiBMaW5kYQ0KPiA+PiAtLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KPiA+PiBGcm9tOiBMb2EgQW5kZXJzc29uIFttYWlsdG86bG9hQHBpLm51XQ0K PiA+PiBTZW50OiBGcmlkYXksIE9jdG9iZXIgMDIsIDIwMTUgMTI6MTggQU0NCj4gPj4gVG86IERJ RUdPIExPUEVaIEdBUkNJQTsgTGluZGEgRHVuYmFyDQo+ID4+IENjOiBpMm5zZkBpZXRmLm9yZw0K PiA+PiBTdWJqZWN0OiBSZTogW0kybnNmXSBXaGF0IGRvIHlvdSBwZW9wbGUgdGhpbmsgb2YgdXNp bmcgT3BlblN0YWNrJ3MNCj4gPj4gR3JvdXAgQmFzZWQgUG9saWN5IHRvIGRlc2NyaWJlIEkyTlNG IFNlcnZpY2UgTGF5ZXIgUnVsZXM/DQo+ID4+IExpbmRhIGFuZCBEaWVnbywNCj4gPj4gVGhpcyBp cyBzYWlkIGJ5IHNvbWVvbmUgdGhhdCBpcyBub3QgZmFtaWxpYXIgd2l0aCBPcGVuIFN0YWNrIG9y IHRoZQ0KPiA+PiBHcm91cCBCYXNlZCBQb2xpY3kuDQo+ID4+IEknbSBzb21ld2hhdCBvbiB0aGUg c2FtZSBwYWdlIGFzIERpZWdvLCBhdCBsZWFzdCBpbiB0aGUgc2FtZSBib29rLg0KPiA+PiBJZiB3 ZSB3YW50IHRvIHVzZSAgT3BlblN0YWNrJ3MgR3JvdXAgQmFzZWQgUG9saWN5IHRvIGRlc2NyaWJl IEkyTlNGDQo+ID4+IFNlcnZpY2UgTGF5ZXIgUnVsZXMsIHRoZSBjYXNlIGZvciB0aGlzIGhhcyB0 byBiZSBtYWRlIG11Y2ggYmV0dGVyLg0KPiA+PiBXaGF0IGFyZSB0aGUgcHJvcyBhbmQgY29ucz8g QXJlIHRoZXJlIHZpYWJsZSBhbHRlcm5hdGl2ZXM/DQo+ID4+IC9Mb2ENCj4gPj4gT24gMjAxNS0x MC0wMiAwNjo0MSwgRElFR08gTE9QRVogR0FSQ0lBIHdyb3RlOg0KPiA+Pj4gSGkgTGluZGEsDQo+ ID4+Pg0KPiA+Pj4gSSBhbSBub3QgY29tcGxldGVseSBzdXJlIHRoYXQgdGhlIGN1cnJlbnQgbmV0 d29ya2luZyBtb2RlbCBvZg0KPiA+Pj4gT3BlblN0YWNrLCB0aGF0IGlzIHJlZmxlY3RlZCBpbiB0 aGUgcnVsZSB0YXJnZXRzIChlaXRoZXIgdGhlIFBURyBhbmQNCj4gPj4+IHRoZSBUYXJnZXQNCj4g Pj4+IGl0c2VsZikgZG9lcyBjb3ZlciBhbGwgdGhlIHBvdGVudGlhbCBzZW1hbnRpY3MgZm9yIGdl bmVyYWwgc2VjdXJpdHkNCj4gPj4+IGZ1bmN0aW9ucy4gVGhlIHNhbWUgY29uY2VybiBhcHBsaWVz IHRvIFBvbGljeSBDbGFzc2lmaWVyLCBhcyB0aGV5DQo+ID4+PiBzZWVtIHZlcnkgbXVjaCBhc3Nv Y2lhdGVkIHdpdGggYSBwYXJ0aWN1bGFyIGltcGxlbWVudGF0aW9uIG1vZGVsDQo+ID4+PiBhbmQs IHdoYXQgaXMgbW9yZSwgd2l0aCBhIGxpbWl0ZWQgbmV0d29yayBtb2RlbC4NCj4gPj4+DQo+ID4+ PiBCZSBnb29kZSwNCj4gPj4+DQo+ID4+Pg0KPiA+Pj4+IE9uIDEgT2N0IDIwMTUsIGF0IDIzOjMy ICwgTGluZGEgRHVuYmFyIDxsaW5kYS5kdW5iYXJAaHVhd2VpLmNvbQ0KPiA+Pj4+IDxtYWlsdG86 bGluZGEuZHVuYmFyQGh1YXdlaS5jb20+PiB3cm90ZToNCj4gPj4+Pg0KPiA+Pj4+IEkyTlNGIHBh cnRpY2lwYW50cywNCj4gPj4+PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFm dC14aWEtaTJuc2YtY2FwYWJpbGl0eS1pbnRlcmZhDQo+ID4+Pj4gY2UgLWltL3NwZWNpZmllcyB0 aGUgc3RydWN0dXJlIGZvciBJMk5TRiBjYXBhYmlsaXR5IGxheWVyIHJ1bGVzLg0KPiA+Pj4+IEZv ciB0aGUgSTJOU0Ygc2ltcGxlIHNlcnZpY2UgbGF5ZXIsIHdoYXQgZG8gcGVvcGxlIHRoaW5rIG9m IHVzaW5nDQo+ID4+Pj4gT3BlblN0YWNrJ3MgR3JvdXAgUG9saWN5IHN0cnVjdHVyZSA/DQo+ID4+ Pj4gSWYgdXNpbmcgT3BlblN0YWNrIEdyb3VwLWJhc2VkIFBvbGljeSAoR0JQKSBzdHJ1Y3R1cmUs IHRoZSBJMk5TRg0KPiA+Pj4+IHNpbXBsZSBzZXJ2aWNlIGxheWVyIGNhbiBiZSBleHByZXNzZWQg YXMgwrdQb2xpY3kgVGFyZ2V0IEdyb3VwIChQVEcpLg0KPiA+Pj4+IFRoaXMgaXMgYSBncm91cCBv ZiBUYXJnZXRzIHRvIHdoaWNoIGEgdHJhZmZpYyBwb2xpY3kgY2FuIGJlIGFwcGxpZWQuDQo+ID4+ Pj4gQSBQVEcgbWF5IGJlIG1hcHBlZCB0byBhIE5ldXRyb24gU3VibmV0LCBhIGNsaWVudCB2aXJ0 dWFsIFN1Ym5ldA0KPiA+Pj4+IChpLmUuIHdpdGggcHJpdmF0ZSBhZGRyZXNzIHByZWZpeCksIGEg c3VibmV0IHdpdGggcHVibGljIGFkZHJlc3MNCj4gPj4+PiBmYW1pbGllcywgb3IgYW55IGNvbWJp bmF0aW9uIG9mIHRoZW0gd2l0aCBsb2dpY2FsIG9wZXJhdG9ycw0KPiA+Pj4+IChMb2dpY2FsIEFO RCwgT1IsIG9yIE5PVCkuIEEgUFRHIHJlZmVyZW5jZXMgb25lIG9yIG1vcmUgUG9saWN5IFJ1bGUN Cj4gPj4+PiBTZXRzIHRoYXQgaXQgY29uc3VtZXMgb3IgcHJvdmlkZXMuDQo+ID4+Pj4gwrdUYXJn ZXQuIFRoaXMgaXMgdXNlZCBieSB0aGUgYXBwbGljYXRpb24gY2xpZW50IHRvIGVzdGFibGlzaA0K PiA+Pj4+IGNvbW11bmljYXRpb25zIG92ZXIgdGhlIG5ldHdvcmsuIEEgVGFyZ2V0IGlzIG1hcHBl ZCB0byBhIHNpbmdsZQ0KPiA+Pj4+IE5ldXRyb24gUG9ydCwgYSBwaHlzaWNhbC9sb2dpY2FsIGlu Z3Jlc3MgcG9ydCwgb3IgYQ0KPiA+Pj4+IHBoeXNpY2FsL2xvZ2ljYWwgZWdyZXNzIHBvcnQuDQo+ ID4+Pj4gwrdQb2xpY3kgUnVsZSBTZXQuIEEgUG9saWN5IFJ1bGUgU2V0IGlzIHVzZWQgdG8gZGV0 ZXJtaW5lIGhvdyB0aGUNCj4gPj4+PiB0cmFmZmljIGJldHdlZW4gYSBwYWlyIG9mIFRhcmdldCBH cm91cHMgaXMgdG8gYmUgdHJlYXRlZC4gQSBQb2xpY3kNCj4gPj4+PiBSdWxlIFNldCBjb25zaXN0 cyBvZiBvbmUgb3IgbW9yZSBQb2xpY3kgUnVsZXMuDQo+ID4+Pj4gwrdQb2xpY3kgUnVsZS4gQSBQ b2xpY3kgUnVsZSBjb25zaXN0cyBvZiBhIFRyYWZmaWMgQ2xhc3NpZmllciBhbmQgYQ0KPiA+Pj4+ IHNldCBvZiBBY3Rpb25zIHRvIGJlIGFwcGxpZWQgdG8gdGhlIHRyYWZmaWMuDQo+ID4+Pj4gwrdQ b2xpY3kgQ2xhc3NpZmllci4gQSB0cmFmZmljIGNsYXNzaWZpZXIgZGVzY3JpYmVzIHRoZSB0cmFm ZmljIHRvDQo+ID4+Pj4gd2hpY2ggYSBQb2xpY3kgUnVsZSBpcyB0byBiZSBhcHBsaWVkLiBJdCBp cyBleHByZXNzZWQgYXMgYQ0KPiA+Pj4+IGRpcmVjdGlvbiwgYSBsaXN0IG9mIEw0IHBvcnRzLCB0 aW1lIHJhbmdlLCBhbmQgYSBwcm90b2NvbC4NCj4gPj4+PiDCt1BvbGljeSBBY3Rpb24uIFRoaXMg aXMgdGhlIGFjdGlvbiBhcHBsaWVkIHRvIHRoZSB0cmFmZmljIHRoYXQNCj4gPj4+PiBtYXRjaGVz IHRoZSBjbGFzc2lmaWVyLiBBbiBhY3Rpb24gbWF5IGJlIGEgc2ltcGxlIEFDTCBhY3Rpb24gKGku ZS4NCj4gPj4+PiBhbGxvdywgZGVueSwgbWlycm9yaW5nKSwgYXBwbHlpbmcgYSB3ZWxsIGtub3du IHN0YXRpc3RpY3MgZnVuY3Rpb25zDQo+ID4+Pj4gKGUuZy4gWCBtaW51dGVzIGNvdW50LCBZIGhv dXJzIGNvdXJ0KSwgYXBwbHlpbmcgY2xpZW50IHNwZWNpZmllZA0KPiA+Pj4+IGZ1bmN0aW9ucyAo d2l0aCBVUkwgcHJvdmlkZWQpLCBvciBtYXkgcmVmZXIgdG8gYW4gb3JkZXJlZCBzZXF1ZW5jZQ0K PiA+Pj4+IG9mIGZ1bmN0aW9ucyAoaS5lLiwgYSBzZXJ2aWNlIGNoYWluKS4NCj4gPj4+PiBJZiB5 b3UgaGF2ZSBjb25jZXJuIG9mIHVzaW5nIE9wZW5TdGFjayBHcm91cCBCYXNlZCBQb2xpY2llcywg cGxlYXNlDQo+ID4+Pj4gbGV0IHRoZSBncm91cCBrbm93Lg0KPiA+Pj4+IFRoYW5rcywgTGluZGEN Cj4gPj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K PiA+Pj4+IEkybnNmIG1haWxpbmcgbGlzdA0KPiA+Pj4+IEkybnNmQGlldGYub3JnIDxtYWlsdG86 STJuc2ZAaWV0Zi5vcmc+IDxtYWlsdG86STJuc2ZAaWV0Zi5vcmc+DQo+ID4+Pj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZg0KPiA+Pj4NCj4gPj4+IC0tDQo+ID4+ PiAiRXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5vIg0KPiA+Pj4NCj4gPj4+ IERyIERpZWdvIFIuIExvcGV6DQo+ID4+PiBUZWxlZm9uaWNhIEkrRA0KPiA+Pj4gaHR0cDovL3Bl b3BsZS50aWQuZXMvZGllZ28ubG9wZXovDQo+ID4+Pg0KPiA+Pj4gZS1tYWlsOmRpZWdvLnIubG9w ZXpAdGVsZWZvbmljYS5jb20NCj4gPG1haWx0bzpkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29t Pg0KPiA+Pj4gVGVsOiAgICArMzQgOTEzIDEyOSAwNDENCj4gPj4+IE1vYmlsZTogKzM0IDY4MiAw NTEgMDkxDQo+ID4+PiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4+Pg0K PiA+Pj4NCj4gPj4+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4+PiAtDQo+ID4+PiAtDQo+ID4+PiAtLQ0KPiA+ Pj4NCj4gPj4+IEVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2 YW1lbnRlIGEgc3UNCj4gPj4+IGRlc3RpbmF0YXJpbywgcHVlZGUgY29udGVuZXIgaW5mb3JtYWNp w7NuIHByaXZpbGVnaWFkYSBvIGNvbmZpZGVuY2lhbA0KPiA+Pj4geSBlcyBwYXJhIHVzbyBleGNs dXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGluby4gU2kgbm8gZXMNCj4gPj4+ IHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVl IGxhIGxlY3R1cmEsDQo+ID4+PiB1dGlsaXphY2nDs24sIGRpdnVsZ2FjacOzbiB5L28gY29waWEg c2luIGF1dG9yaXphY2nDs24gcHVlZGUgZXN0YXINCj4gPj4+IHByb2hpYmlkYSBlbiB2aXJ0dWQg ZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUNCj4gPj4+IG1l bnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5pcXVlIGlubWVkaWF0 YW1lbnRlDQo+ID4+PiBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBhIHN1IGRlc3RydWNj acOzbi4NCj4gPj4+DQo+ID4+PiBUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJh bnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kDQo+ID4+PiBjb25maWRlbnRpYWwgaW5mb3JtYXRp b24gaW50ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVhbA0KPiA+Pj4gb3Ig ZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3Qg dGhlDQo+ID4+PiBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRo YXQgYW55IGRpc3NlbWluYXRpb24sDQo+ID4+PiBkaXN0cmlidXRpb24gb3IgY29weWluZyBvZiB0 aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4NCj4gPj4+IElmIHlvdSBo YXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4N Cj4gPj4+IFBsZWFzZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRoYXQgeW91IGhh dmUgcmVjZWl2ZWQgdGhpcw0KPiA+Pj4gY29tbXVuaWNhdGlvbiBpbiBlcnJvciBhbmQgdGhlbiBk ZWxldGUgaXQuDQo+ID4+Pg0KPiA+Pj4gRXN0YSBtZW5zYWdlbSBlIHNldXMgYW5leG9zIHNlIGRp cmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1DQo+ID4+PiBkZXN0aW5hdMOhcmlvLCBwb2RlIGNv bnRlciBpbmZvcm1hw6fDo28gcHJpdmlsZWdpYWRhIG91IGNvbmZpZGVuY2lhbCBlDQo+ID4+PiDD qSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRlIGRlc3Rpbm8uIFNl IG7Do28gw6kNCj4gPj4+IHZvc3NhIHNlbmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRpY2Fkbywg ZmljYSBub3RpZmljYWRvIGRlIHF1ZSBhDQo+ID4+PiBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRp dnVsZ2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8OjbyBwb2RlDQo+ID4+PiBlc3Rh ciBwcm9pYmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1 IGVzdGENCj4gPj4+IG1lbnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29t dW5pcXVlIGltZWRpYXRhbWVudGUgcG9yDQo+ID4+PiBlc3RhIG1lc21hIHZpYSBlIHByb2NlZGEg YSBzdWEgZGVzdHJ1acOnw6NvDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+PiBJMm5zZiBtYWlsaW5nIGxpc3QN Cj4gPj4+IEkybnNmQGlldGYub3JnIDxtYWlsdG86STJuc2ZAaWV0Zi5vcmc+DQo+ID4+PiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQo+ID4+Pg0KPiA+DQo+ID4g X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiBJMm5z ZiBtYWlsaW5nIGxpc3QNCj4gPiBJMm5zZkBpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YNCj4gPg0KPiA+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gSTJuc2YgbWFpbGluZyBsaXN0DQo+ID4g STJuc2ZAaWV0Zi5vcmcNCj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2kybnNmDQo+ID4NCj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQo+IEkybnNmIG1haWxpbmcgbGlzdA0KPiBJMm5zZkBpZXRmLm9yZw0KPiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQo= From nobody Tue Oct 6 21:19:24 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AF281A88CA for ; Tue, 6 Oct 2015 21:19:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.078 X-Spam-Level: ** X-Spam-Status: No, score=2.078 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, CHARSET_FARAWAY_HEADER=3.2, CN_BODY_35=0.339, MIME_8BIT_HEADER=0.3, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ER4cx4L698ar for ; Tue, 6 Oct 2015 21:19:21 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 018011A88C9 for ; Tue, 6 Oct 2015 21:19:20 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BYL35652; Wed, 07 Oct 2015 04:19:19 +0000 (GMT) Received: from NKGEML406-HUB.china.huawei.com (10.98.56.37) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 7 Oct 2015 05:19:18 +0100 Received: from NKGEML509-MBS.china.huawei.com ([169.254.2.4]) by nkgeml406-hub.china.huawei.com ([10.98.56.37]) with mapi id 14.03.0235.001; Wed, 7 Oct 2015 12:19:10 +0800 From: Youjianjie To: Linda Dunbar , "i2nsf@ietf.org" Thread-Topic: IETF 94 - I2NSF Meeting slot request Thread-Index: AQHRAFQU41T2kpeVt0iqEcmt15OZk55fa5JA Date: Wed, 7 Oct 2015 04:19:10 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657D67EF4@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D67EF4@dfweml701-chm> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.46.12.236] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [I2nsf] =?gb2312?b?tPC4tDogSUVURiA5NCAtIEkyTlNGIE1lZXRpbmcgc2xv?= =?gb2312?b?dCByZXF1ZXN0?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 04:19:22 -0000 SGkgTGluZGEsDQoNCk1heSBJIGhhdmUgYSAxMG1pbiBzbG90IHRvIHByZXNlbnQ6IFVzZXItZ3Jv dXAgYmFzZWQgTWVjaGFuaXNtIGZvciBTZXJ2aWNlIExheWVyPw0KVGhlIGRvY3VtZW50IGRpc2N1 c3NlcyBlbnRlcnByaXNlIHVzZSBjYXNlIGFuZCByZXF1aXJlbWVudHMgZm9yIHVzZXItZ3JvdXAg YmFzZWQgc2VjdXJpdHkgcG9saWN5IHRoYXQgYWxsb3dzIHVzZXJzIHRvIGVuam95IHRoZSBjb25z aXN0ZW50IHBvbGljeSBhbmQgZXhwZXJpZW5jZSBvbiB0aGUgZW50aXJlIG5ldHdvcmsgcmVnYXJk bGVzcyBvZiB1c2VyIG9yIHJlc291cmNlIGxvY2F0aW9uLg0KVGhpcyB0b3BpYyBpcyBhbiBpbXBv cnRhbnQgcGFydCBvZiBpMm5zZiBXRywgaGF2aW5nIGJlZW4gZGlzY3Vzc2VkIHF1aXRlIGEgbG90 IG9uIHRoZSBtYWlsaW5nIGxpc3QuIFdlJ2QgbGlrZSB0byBwcm92aWRlIG91ciB0aG91Z2h0cyBm b3IgZGlzY3Vzc2lvbi4gDQoNClRoYW5rcywNCkppYW5qaWUNCg0KPiAtLS0tLdPKvP7Urbz+LS0t LS0NCj4gt6K8/sjLOiBJMm5zZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmddILT6se0g TGluZGEgRHVuYmFyDQo+ILeiy83KsbzkOiAyMDE1xOoxMNTCN8jVIDA6MjkNCj4gytW8/sjLOiBp Mm5zZkBpZXRmLm9yZw0KPiDW98ziOiBbSTJuc2ZdIElFVEYgOTQgLSBJMk5TRiBNZWV0aW5nIHNs b3QgcmVxdWVzdA0KPiANCj4gDQo+IEhpLA0KPiANCj4gV2Ugd2lsbCBoYXZlIG91ciBmaXJzdCBJ Mk5TRiBXRyBtZWV0aW5nIGF0IElFVEYgOTQgKFlva29oYW1hKS4NCj4gDQo+IEFzIHBlciB0aGUg cHJlbGltaW5hcnkgYWdlbmRhLCBJMk5TRiBXRyBpcyBzY2hlZHVsZWQgdG8gbWVldCBvbiBUdWUg KE5vdiAzKQ0KPiAwOTAwLTExMzAgTW9ybmluZyBTZXNzaW9uIGluIFJvb20gMzAyLg0KPiANCj4g VGhpcyBlbWFpbCBpcyB0byBzb2xpY2l0IHNsb3QgcmVxdWVzdHMgdG8gcHJlc2VudCBpbiB0aGUg V0cgc2Vzc2lvbi4NCj4gUGxlYXNlIHByb3ZpZGUNCj4gDQo+ICogTmFtZSBvZiB0aGUgZHJhZnQN Cj4gKiBTaG9ydCBkZXNjcmlwdGlvbiBvZiB3aHkgeW91IHRoaW5rIHRoZSBpdGVtIG5lZWRzIHRv IGJlIGRpc2N1c3NlZCBpbiB0aGUNCj4gbWVldGluZw0KPiANCj4gDQo+IEtpbmRseSBub3RlIHRo YXQsIHByaW9yaXR5IHdpbGwgYmUgZ2l2ZW4gdG8gUmVxdWVzdHMgcmVsYXRlZCB0byB0aGUgV0cg Y2hhcnRlcmVkDQo+IGl0ZW1zLg0KPiANCj4gUGxlYXNlIGRvIHJlcGx5IHRvIHRoaXMgZW1haWwg d2l0aCB5b3VyIHJlcXVlc3RzLg0KPiANCj4gY2hlZXJzDQo+IC1MaW5kYSBhbmQgQWRyaWFuDQo+ IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IA0KPiBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBJMm5zZiBt YWlsaW5nIGxpc3QNCj4gSTJuc2ZAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9pMm5zZg0K From nobody Thu Oct 8 00:27:21 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B60F1B3268 for ; Thu, 8 Oct 2015 00:27:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.91 X-Spam-Level: X-Spam-Status: No, score=-3.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X4dwp8o_tNtY for ; Thu, 8 Oct 2015 00:27:11 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7EEDF1B3266 for ; Thu, 8 Oct 2015 00:27:09 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BYN05208; Thu, 08 Oct 2015 07:27:07 +0000 (GMT) Received: from SZXEMA411-HUB.china.huawei.com (10.82.72.70) by lhreml402-hub.china.huawei.com (10.201.5.241) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 8 Oct 2015 08:27:06 +0100 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.77]) by szxema411-hub.china.huawei.com ([10.82.72.70]) with mapi id 14.03.0235.001; Thu, 8 Oct 2015 15:26:55 +0800 From: "Xialiang (Frank)" To: DIEGO LOPEZ GARCIA , Linda Dunbar Thread-Topic: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AdD8kJsQ5Rkc+aynSXudFPC41PBbhwACacoA///ouQCABcsQgIAA394A//yap2A= Date: Thu, 8 Oct 2015 07:26:54 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.135.43.91] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F12AE8B8BCSZXEMA502MBSchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" , Aldo Basile , Loa Andersson Subject: [I2nsf] =?utf-8?b?562U5aSNOiAgV2hhdCBkbyB5b3UgcGVvcGxlIHRoaW5r?= =?utf-8?q?_of_using_OpenStack=27s_Group_Based_Policy_to_describe_I2NSF_Se?= =?utf-8?q?rvice_Layer_Rules=3F?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 07:27:17 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F12AE8B8BCSZXEMA502MBSchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgYWxsLA0KTXkgdW5kZXJzdGFuZGluZyBpcyB0aGF0IFBDSU0vU0cxNyBpcyBtYWlubHkgcmVs YXRlZCB0byB0aGUgc3ludGF4IG9mIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCwgYW5kIGlzIHBvc3Np YmxlIHRvIGJlIGEgc3RhcnRpbmcgcG9pbnQuDQpJbiBhZGRpdGlvbiwgdGhlIG90aGVyIGltcG9y dGFudCBwb2ludCB3ZSBuZWVkIHRvIGNvbnNpZGVyIGlzIHRoZSBzZW1hbnRpYyBhc3BlY3RzIG9m IHRoZSBpbmZvcm1hdGlvbiBtb2RlbDogd2hpY2ggY29udGVudHMgY2FuIGJlIGluIHRoZSBzZWN1 cml0eSBydWxlIGFuZCBpbiB3aGljaCB3YXkgdGhleSBhcmUgY2F0ZWdvcml6ZWQgYW5kIG9yZ2Fu aXplZD8NClRoZXJlIGFyZSBtYW55IHBvc3NpYmxlIHdheXMsIHN1Y2ggYXM6IOKAnDVXMUjigJ0s IOKAnHN1YmplY3Qtb2JqZWN0LWFjdGlvbi1mdW5jdGlvbuKAnSwgaGllcmFyY2hpY2FsIHByb2Nl c3NpbmcsIG9yIGNvbWJpbmF0aW9uIG9mIHRoZW0uDQoNCkNvbW1lbnRzIGFyZSBncmVhdGx5IGFw cHJlY2lhdGVkIQ0KDQpCLlIuDQpGcmFuaw0KDQrlj5Hku7bkuro6IEkybnNmIFttYWlsdG86aTJu c2YtYm91bmNlc0BpZXRmLm9yZ10g5Luj6KGoIERJRUdPIExPUEVaIEdBUkNJQQ0K5Y+R6YCB5pe2 6Ze0OiAyMDE15bm0MTDmnIg25pelIDE5OjA3DQrmlLbku7bkuro6IExpbmRhIER1bmJhcg0K5oqE 6YCBOiBpMm5zZkBpZXRmLm9yZzsgQWxkbyBCYXNpbGU7IExvYSBBbmRlcnNzb24NCuS4u+mimDog UmU6IFtJMm5zZl0gV2hhdCBkbyB5b3UgcGVvcGxlIHRoaW5rIG9mIHVzaW5nIE9wZW5TdGFjaydz IEdyb3VwIEJhc2VkIFBvbGljeSB0byBkZXNjcmliZSBJMk5TRiBTZXJ2aWNlIExheWVyIFJ1bGVz Pw0KDQpIaSBMaW5kYSwNCg0KSSBoYXZlIGJlZW4gdGFsa2luZyBhYm91dCB0aGlzIHdpdGggb25l IG9mIHRoZSBwb2xpY3kgZXhwZXJ0cyBpbiB0aGUgU0VDVVJFRCBwcm9qZWN0IChBbGRvIEJhc2ls ZSwgSSBoYXZlIHB1dCBoaW0gaW4gQ2M6IHNvIHlvdSBjYW4gaWRlbnRpZnkgaGltLCB0aG91Z2gg aGUgaXMgaW4gdGhlIEkyTlNGIGxpc3QgYXMgd2VsbOKApikgYW5kIHRoZXNlIGFyZSBoaXMgY29t bWVudHM6DQoNCjg84oCUDQoNCkluIG15IHVuZGVyc3RhbmRpbmcsIE9wZW5TdGFjayBHcm91cCBQ b2xpY2llcyBhcmUgYSBzaW1wbGlmaWVkIHlldCBnZW5lcmljIHdheSB0byBhc3NvY2lhdGUgaXB0 YWJsZXMtbGlrZSBydWxlcywgdGhlIHN5bnRheCBpcyB2ZXJ5IHNpbWlsYXIuDQpJdCBpcyBuZXR3 b3JrIG1hbmFnZW1lbnQgcmF0aGVyIHRoZW4gc2VjdXJpdHkgbWFuYWdlbWVudC4gWW91IGNhbiBl eHByZXNzIHNpbXBsZSBuZXR3b3JrIHBvbGljaWVzIChjb21tYW5kcykgYW5kIGFzc29jaWF0ZSB0 byBuZXR3b3JrIG5vZGVzIGFuZCBncm91cHMuDQoNCkdCUCBpcyBub3QgYSBnZW5lcmljIGZyYW1l d29yayBmb3IgZXhwcmVzc2luZyBwb2xpY2llcy4NClNvbWV0aGluZyBpcyBnZW5lcmFsIChsaWtl IHRoZSBkZWZpbml0aW9uIG9mIHJ1bGVzIGFzIChjbGFzc2lmaWVyLGFjdGlvbikpIGJ1dCBpdCBy ZXF1aXJlcyBzZXZlcmFsIGV4dGVuc2lvbnMgdGhhdCwgaW4gdGhlIGVuZCwgd2hlbiBjb21wbGV0 ZWQgd2lsbCBsZWFkIHRvIFBDSU0gb3IgU0cxNy1saWtlIG1vZGVscy4NCg0KVGh1cywgaW4gbXkg b3BpbmlvbiwgU0cxNy9QQ0lNIGFyZSBjZXJ0YWlubHkgYSBiZXR0ZXIgc3RhcnRpbmcgcG9pbnQs IGFuZCBhbHNvIGVhc2llciB0byBwdXNoIFNFQ1VSRUQgcmVzdWx0cy4NCg0KIlBvbGljeSBDbGFz c2lmaWVyIiBpcyBhbm90aGVyIHdheSB0byB0ZWxsICdtYXRjaGluZyBjb25kaXRpb25zJyAoYXMg bmV0d29ya2luZyBwZW9wbGUgbGlrZXMgdGhlIHdvcmQgY2xhc3NpZmllciwgZm9yIG1lIGEgY2xh c3NpZmllciBpcyBzb21ldGhpbmcgbW9yZSBpbnRlbGxpZ2VudCkuDQoNCkNvbmRpdGlvbnMgYXZh aWxhYmxlIG9uIE9wZW5TdGFjayBHcm91cCBQb2xpY2llcyBhcmUgbm93IGEgdmVyeSBsaW1pdGVk IHN1YnNldCBvZiBsNCBmaWx0ZXJpbmcgKHRoZXkgZG9uJ3QgZXZlbiBjb3ZlciBwYWNrZXQgZmls dGVycykuIEhvd2V2ZXIsIHRoZSBtb2RlbCAoY29uZGl0aW9uLGFjdGlvbikgaXMgZ2VuZXJhbCBl bm91Z2ggdG8gY29wZSB3aXRoIGZ1dHVyZSBuZWVkcyAoYnkgYWRkaW5nIG1vcmUgY2xhc3NpZmll cnMpLg0KDQpUaGVyZSBpcyBubyB3YXkgdG8gY2F0ZWdvcml6ZSBwb2xpY2llcyAodGh1cyBubyBj YXBhYmlsaXRpZXMgbm8gZWFzeSBsaW5rIHRvIE5TRiBjYXRlZ29yaXphdGlvbiBmb3IgaW50ZXJv cGVyYWJpbGl0eSkuDQoNClRoZW4sIG5vIHJlc29sdXRpb24gc3RyYXRlZ2llcywgbm8gZGVmYXVs dCBhY3Rpb25zLCBubyBwcmlvcml0aWVzLCBubyBvdGhlciBzb3BoaXN0aWNhdGVkIHdheXMgdG8g ZXhwcmVzcyBwb2xpY2llcy4NCg0KODzigJQNCg0KSeKAmWxsIGxldCBBbGRvIHRvIGV4cHJlc3Mg aGlzIHZpZXdzIGluIG1vcmUgZGV0YWlsLCBidXQgbXkgcG9zaXRpb24gaXMgdGhhdCB3ZSBzaG91 bGQgY29uc2lkZXIgYW4gZXhpc3RpbmcgZ2VuZXJhbCBmcmFtZXdvcmsgYXMgc3RhcnRpbmcgcG9p bnQsIGFuZCB0aGF0IFBDSU0gKHNlZSBodHRwOi8vd3d3LmRtdGYub3JnL3N0YW5kYXJkcy9wb2xp Y3kpIGlzIHRoZSBtb3N0IHByb21pc2luZyBvbmUuDQoNCkJlIGdvb2RlLA0KDQoNCg0KT24gNSBP Y3QgMjAxNSwgYXQgMjM6NDUgLCBMaW5kYSBEdW5iYXIgPGxpbmRhLmR1bmJhckBodWF3ZWkuY29t PG1haWx0bzpsaW5kYS5kdW5iYXJAaHVhd2VpLmNvbT4+IHdyb3RlOg0KDQpUaGFua3MgdG8gTG9h IGFuZCBEaWVnbyBmb3IgdGhlIGNvbW1lbnRzLg0KDQpIZXJlIGFyZSBzb21lIHByb3MgYW5kIGNv bnMgb2YgdXNpbmcgT3BlbiBTdGFjayBHcm91cCBCYXNlZCBQb2xpY3k6DQoNClByb3M6DQrCtyAg ICAgICAgIFRoZXJlIGFyZSBydW5uaW5nIGNvZGVzIChvcGVuIHNvdXJjZWQgY29kZSkNCg0KQ29u czoNCsK3ICAgICAgICAgVGhlIE9wZW5TdGFjaydzIGdyb3VwIGJhc2VkIHBvbGljeSBpcyB2ZXJ5 IG11Y2ggTmV1dHJvbiBwb3J0IG9yaWVudGVkLiBJdCBpcyBub3Qgc3RyYWlnaHQgZm9yd2FyZCBm b3IgYW4gZW52aXJvbm1lbnQgdGhhdCBpcyBub3QgYmFzZWQgb24gT3BlblN0YWNrIE5ldXRyb24u DQrCtyAgICAgICAgIFRoZXkgYXJlIG5vdCBkZXNpZ25lZCBmb3IgZXhwcmVzc2luZyBydWxlcyB0 byBGbG93LWJhc2VkIE5TRiBvbiBob3cgdG8gdHJlYXQgY2xpZW50L2FwcGxpY2F0aW9ucyB0cmFm ZmljLiBUaGUgY3VycmVudCBzZXQgaXMgbm90IGNvbXBsZXRlLCAgYSBsb3QgbW9yZSBuZWVkIHRv IGJlIGFkZGVkLg0KwrcgICAgICAgICBUaGVyZSBhcmUgb3RoZXIgIkdyb3VwIEJhc2VkIFBvbGlj eSIsIGUuZy4gV2luZG93J3MgR3JvdXAgUG9saWN5LCB3aGljaCBhcmUgcXVpdGUgZGlmZmVyZW50 IGZyb20gdGhlIE9wZW5TdGFja+KAmXMgR3JvdXAgQmFzZWQgUG9saWN5Lg0KwrcgICAgICAgICBN YXkgY2F1c2UgY29uZnVzaW9uIGluIGluZHVzdHJ5IGlmIGNhbGxpbmcg4oCcR3JvdXAgQmFzZWQg UG9saWN54oCdIGZvciBJMk5TRiBTZXJ2aWNlIExheWVyDQoNCg0KSG93ZXZlciwgdGhlIG5vdGF0 aW9uIG9mIEdyb3VwcywgVGFyZ2V0LCBDb250ZXh0IGFuZCBhY3Rpb24gZG8gY292ZXIgd2hhdCBp cyBuZWVkZWQgZm9yIGNsaWVudHMvYXBwbGljYXRpb25zIHRvIGV4cHJlc3MgdGhlIHJ1bGVzIG9u IGhvdyB0aGVpciBmbG93cyBjYW4gYmUgdHJlYXRlZCBieSB0aGUgRmxvdy1CYXNlZCBOU0ZzIGlu IG5ldHdvcmtzLiBBbmQgdGhleSBjYW4gYmUgbWFwcGVkIHRvIHRoZSBDYXBhYmlsaXR5IGxheWVy 4oCZcyBTdWJqZWN0LU9iamVjdC1BY3Rpb24tRnVuY3Rpb27igJ0gcGFyYWRpZ20uDQoNClRvIGF2 b2lkIHRoZSBjb25mdXNpb24sIGl0IG1pZ2h0IGJlIGJldHRlciB0byBhdm9pZCB1c2luZyB0aGUg dGVybSDigJxHcm91cCBiYXNlZCBwb2xpY3nigJ0gKGJ1dCBpbmhlcmVudCB0aGVpciBjb25jZXB0 IG9ubHkpLg0KDQpGb3IgZXhhbXBsZSwg4oCcZ3JvdXDigJ0gY2FuIGJlIHJlcHJlc2VudGVkIGJ5 IOKAnENvbXBvc2l0ZSBFbmRwb2ludHMvVGFyZ2V0c+KAnSBvciBFbmRwb2ludCBDb250YWluZXIg KGlmIHVzaW5nIFNVUEEgbGFuZ3VhZ2UpLCB3aGVyZSBhbiDigJxFbmRwb2ludOKAnSBjYW4gYmUg YSBzdWJuZXQsIGEgc2V0IG9mIGhvc3RzIG9yIGFwcGxpY2F0aW9ucywgZXRjLg0KDQoNCsK3ICAg ICAgICAgQ29tcG9zaXRlIEVuZHBvaW50IChDRVApLiBMb2dpY2FsIGNvbWJpbmF0aW9uIG9mIGVu ZHBvaW50IGRlc2NyaXB0b3IgSURzLCB3aGVyZSBkZXNjcmlwdG9yIGNhbiBiZSBzdWJuZXQsIHNl dCBvZiBob3N0cywgb3IgYXBwbGljYXRpb25zLg0KDQrCtyAgICAgICAgIEVuZHBvaW50IERlc2Ny aXB0b3IgKEVQRCkuIEVhY2ggZW5kcG9pbnQgZGVzY3JpcHRvciBoYXMgYSB0eXBlIGFuZCB2YWx1 ZSB0aGF0IGFyZSB1c2VkIHRvIHBhcnRpYWxseSBpZGVudGlmeSB0aGUgZW5kcG9pbnQuIFRoZSB0 eXBlIG9mIHRoZSBFbmRwb2ludCBEZXNjcmlwdG9yIG1heSBiZSBhIGJhc2UgbmV0d29ya2luZyBp ZGVudGlmaWVyLCBzdWNoIGFzIGFuIElQIGFkZHJlc3MsIG9yIGEgdXNlci1kZWZpbmVkIHR5cGUu IFRoZSB2YWx1ZSBtYXkgYmUgYSBzaW5nbGUgdmFsdWUsIGEgcmFuZ2Ugb2YgdmFsdWVzLCBvciBh IGdyb3VwIG9mIHZhbHVlcy4NCg0KwrcgICAgICAgICBUYXJnZXQuIFRoaXMgaXMgdXNlZCBieSB0 aGUgYXBwbGljYXRpb24gY2xpZW50IHRvIGVzdGFibGlzaCBjb21tdW5pY2F0aW9ucyBvdmVyIHRo ZSBuZXR3b3JrLiBBIFRhcmdldCBpcyBtYXBwZWQgdG8gYSBwaHlzaWNhbC9sb2dpY2FsIGluZ3Jl c3MgcG9ydCwgb3IgYSBwaHlzaWNhbC9sb2dpY2FsIGVncmVzcyBwb3J0Lg0KDQrCtyAgICAgICAg IFBvbGljeSBSdWxlIFNldC4gQSBQb2xpY3kgUnVsZSBTZXQgaXMgdXNlZCB0byBkZXRlcm1pbmUg aG93IHRoZSB0cmFmZmljIGJldHdlZW4gYSBwYWlyIG9mIFRhcmdldCBHcm91cHMgaXMgdG8gYmUg dHJlYXRlZC4gQSBQb2xpY3kgUnVsZSBTZXQgY29uc2lzdHMgb2Ygb25lIG9yIG1vcmUgUG9saWN5 IFJ1bGVzLg0KwrcgICAgICAgICBQb2xpY3kgUnVsZS4gQSBQb2xpY3kgUnVsZSBjb25zaXN0cyBv ZiBhIFBvbGljeSBjb250ZXh0IGFuZCBhIHNldCBvZiBBY3Rpb25zIHRvIGJlIGFwcGxpZWQgdG8g dGhlIHRyYWZmaWMuDQoNCsK3ICAgICAgICAgUG9saWN5IENvbnRleHQuIENvbnRleHQgdGhhdCBk ZXNjcmliZXMgd2hlbiBhIFBvbGljeSBSdWxlIGlzIHRvIGJlIGFwcGxpZWQuIEl0IGlzIGV4cHJl c3NlZCBhcyBhIGRpcmVjdGlvbiwgYSBsaXN0IG9mIEw0IHBvcnRzLCB0aW1lIHJhbmdlLCBhbmQg YSBwcm90b2NvbC4NCg0KwrcgICAgICAgICBQb2xpY3kgQWN0aW9uLiBUaGlzIGlzIHRoZSBhY3Rp b24gYXBwbGllZCB0byB0aGUgdHJhZmZpYyB0aGF0IG1hdGNoZXMgdGhlIGNsYXNzaWZpZXIuIEFu IGFjdGlvbiBtYXkgYmUgYSBzaW1wbGUgQUNMIGFjdGlvbiAoaS5lLiBhbGxvdywgZGVueSwgbWly cm9yaW5nKSwgYXBwbHlpbmcgYSB3ZWxsIGtub3duIHN0YXRpc3RpY3MgZnVuY3Rpb25zIChlLmcu IFggbWludXRlcyBjb3VudCwgWSBob3VycyBjb3VydCksIGFwcGx5aW5nIGNsaWVudCBzcGVjaWZp ZWQgZnVuY3Rpb25zICh3aXRoIFVSTCBwcm92aWRlZCksIG9yIG1heSByZWZlciB0byBhbiBvcmRl cmVkIHNlcXVlbmNlIG9mIGZ1bmN0aW9ucyAoaS5lLiwgYSBzZXJ2aWNlIGNoYWluKS4NCg0KQ29t bWVudHMgYXJlIGdyZWF0bHkgYXBwcmVjaWF0ZWQuDQoNCkxpbmRhDQotLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KRnJvbTogTG9hIEFuZGVyc3NvbiBbbWFpbHRvOmxvYUBwaS5udV0NClNlbnQ6 IEZyaWRheSwgT2N0b2JlciAwMiwgMjAxNSAxMjoxOCBBTQ0KVG86IERJRUdPIExPUEVaIEdBUkNJ QTsgTGluZGEgRHVuYmFyDQpDYzogaTJuc2ZAaWV0Zi5vcmc8bWFpbHRvOmkybnNmQGlldGYub3Jn Pg0KU3ViamVjdDogUmU6IFtJMm5zZl0gV2hhdCBkbyB5b3UgcGVvcGxlIHRoaW5rIG9mIHVzaW5n IE9wZW5TdGFjaydzIEdyb3VwIEJhc2VkIFBvbGljeSB0byBkZXNjcmliZSBJMk5TRiBTZXJ2aWNl IExheWVyIFJ1bGVzPw0KDQpMaW5kYSBhbmQgRGllZ28sDQoNClRoaXMgaXMgc2FpZCBieSBzb21l b25lIHRoYXQgaXMgbm90IGZhbWlsaWFyIHdpdGggT3BlbiBTdGFjayBvciB0aGUgR3JvdXAgQmFz ZWQgUG9saWN5Lg0KDQpJJ20gc29tZXdoYXQgb24gdGhlIHNhbWUgcGFnZSBhcyBEaWVnbywgYXQg bGVhc3QgaW4gdGhlIHNhbWUgYm9vay4NCg0KSWYgd2Ugd2FudCB0byB1c2UgIE9wZW5TdGFjaydz IEdyb3VwIEJhc2VkIFBvbGljeSB0byBkZXNjcmliZSBJMk5TRiBTZXJ2aWNlIExheWVyIFJ1bGVz LCB0aGUgY2FzZSBmb3IgdGhpcyBoYXMgdG8gYmUgbWFkZSBtdWNoIGJldHRlci4NCg0KV2hhdCBh cmUgdGhlIHByb3MgYW5kIGNvbnM/IEFyZSB0aGVyZSB2aWFibGUgYWx0ZXJuYXRpdmVzPw0KDQov TG9hDQoNCk9uIDIwMTUtMTAtMDIgMDY6NDEsIERJRUdPIExPUEVaIEdBUkNJQSB3cm90ZToNCj4g SGkgTGluZGEsDQo+DQo+IEkgYW0gbm90IGNvbXBsZXRlbHkgc3VyZSB0aGF0IHRoZSBjdXJyZW50 IG5ldHdvcmtpbmcgbW9kZWwgb2YNCj4gT3BlblN0YWNrLCB0aGF0IGlzIHJlZmxlY3RlZCBpbiB0 aGUgcnVsZSB0YXJnZXRzIChlaXRoZXIgdGhlIFBURyBhbmQNCj4gdGhlIFRhcmdldA0KPiBpdHNl bGYpIGRvZXMgY292ZXIgYWxsIHRoZSBwb3RlbnRpYWwgc2VtYW50aWNzIGZvciBnZW5lcmFsIHNl Y3VyaXR5DQo+IGZ1bmN0aW9ucy4gVGhlIHNhbWUgY29uY2VybiBhcHBsaWVzIHRvIFBvbGljeSBD bGFzc2lmaWVyLCBhcyB0aGV5IHNlZW0NCj4gdmVyeSBtdWNoIGFzc29jaWF0ZWQgd2l0aCBhIHBh cnRpY3VsYXIgaW1wbGVtZW50YXRpb24gbW9kZWwgYW5kLCB3aGF0DQo+IGlzIG1vcmUsIHdpdGgg YSBsaW1pdGVkIG5ldHdvcmsgbW9kZWwuDQo+DQo+IEJlIGdvb2RlLA0KPg0KPg0KPj4gT24gMSBP Y3QgMjAxNSwgYXQgMjM6MzIgLCBMaW5kYSBEdW5iYXIgPGxpbmRhLmR1bmJhckBodWF3ZWkuY29t PG1haWx0bzpsaW5kYS5kdW5iYXJAaHVhd2VpLmNvbT4NCj4+IDxtYWlsdG86bGluZGEuZHVuYmFy QGh1YXdlaS5jb20+PiB3cm90ZToNCj4+DQo+PiBJMk5TRiBwYXJ0aWNpcGFudHMsDQo+PiBodHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC14aWEtaTJuc2YtY2FwYWJpbGl0eS1p bnRlcmZhY2UNCj4+IC1pbS9zcGVjaWZpZXMgdGhlIHN0cnVjdHVyZSBmb3IgSTJOU0YgY2FwYWJp bGl0eSBsYXllciBydWxlcy4NCj4+IEZvciB0aGUgSTJOU0Ygc2ltcGxlIHNlcnZpY2UgbGF5ZXIs IHdoYXQgZG8gcGVvcGxlIHRoaW5rIG9mIHVzaW5nDQo+PiBPcGVuU3RhY2vigJlzIEdyb3VwIFBv bGljeSBzdHJ1Y3R1cmUgPw0KPj4gSWYgdXNpbmcgT3BlblN0YWNrIEdyb3VwLWJhc2VkIFBvbGlj eSAoR0JQKSBzdHJ1Y3R1cmUsIHRoZSBJMk5TRg0KPj4gc2ltcGxlIHNlcnZpY2UgbGF5ZXIgY2Fu IGJlIGV4cHJlc3NlZCBhcyDCt1BvbGljeSBUYXJnZXQgR3JvdXAgKFBURykuDQo+PiBUaGlzIGlz IGEgZ3JvdXAgb2YgVGFyZ2V0cyB0byB3aGljaCBhIHRyYWZmaWMgcG9saWN5IGNhbiBiZSBhcHBs aWVkLg0KPj4gQSBQVEcgbWF5IGJlIG1hcHBlZCB0byBhIE5ldXRyb24gU3VibmV0LCBhIGNsaWVu dCB2aXJ0dWFsIFN1Ym5ldA0KPj4gKGkuZS4gd2l0aCBwcml2YXRlIGFkZHJlc3MgcHJlZml4KSwg YSBzdWJuZXQgd2l0aCBwdWJsaWMgYWRkcmVzcw0KPj4gZmFtaWxpZXMsIG9yIGFueSBjb21iaW5h dGlvbiBvZiB0aGVtIHdpdGggbG9naWNhbCBvcGVyYXRvcnMgKExvZ2ljYWwNCj4+IEFORCwgT1Is IG9yIE5PVCkuIEEgUFRHIHJlZmVyZW5jZXMgb25lIG9yIG1vcmUgUG9saWN5IFJ1bGUgU2V0cyB0 aGF0DQo+PiBpdCBjb25zdW1lcyBvciBwcm92aWRlcy4NCj4+IMK3VGFyZ2V0LiBUaGlzIGlzIHVz ZWQgYnkgdGhlIGFwcGxpY2F0aW9uIGNsaWVudCB0byBlc3RhYmxpc2gNCj4+IGNvbW11bmljYXRp b25zIG92ZXIgdGhlIG5ldHdvcmsuIEEgVGFyZ2V0IGlzIG1hcHBlZCB0byBhIHNpbmdsZQ0KPj4g TmV1dHJvbiBQb3J0LCBhIHBoeXNpY2FsL2xvZ2ljYWwgaW5ncmVzcyBwb3J0LCBvciBhIHBoeXNp Y2FsL2xvZ2ljYWwNCj4+IGVncmVzcyBwb3J0Lg0KPj4gwrdQb2xpY3kgUnVsZSBTZXQuIEEgUG9s aWN5IFJ1bGUgU2V0IGlzIHVzZWQgdG8gZGV0ZXJtaW5lIGhvdyB0aGUNCj4+IHRyYWZmaWMgYmV0 d2VlbiBhIHBhaXIgb2YgVGFyZ2V0IEdyb3VwcyBpcyB0byBiZSB0cmVhdGVkLiBBIFBvbGljeQ0K Pj4gUnVsZSBTZXQgY29uc2lzdHMgb2Ygb25lIG9yIG1vcmUgUG9saWN5IFJ1bGVzLg0KPj4gwrdQ b2xpY3kgUnVsZS4gQSBQb2xpY3kgUnVsZSBjb25zaXN0cyBvZiBhIFRyYWZmaWMgQ2xhc3NpZmll ciBhbmQgYQ0KPj4gc2V0IG9mIEFjdGlvbnMgdG8gYmUgYXBwbGllZCB0byB0aGUgdHJhZmZpYy4N Cj4+IMK3UG9saWN5IENsYXNzaWZpZXIuIEEgdHJhZmZpYyBjbGFzc2lmaWVyIGRlc2NyaWJlcyB0 aGUgdHJhZmZpYyB0bw0KPj4gd2hpY2ggYSBQb2xpY3kgUnVsZSBpcyB0byBiZSBhcHBsaWVkLiBJ dCBpcyBleHByZXNzZWQgYXMgYSBkaXJlY3Rpb24sDQo+PiBhIGxpc3Qgb2YgTDQgcG9ydHMsIHRp bWUgcmFuZ2UsIGFuZCBhIHByb3RvY29sLg0KPj4gwrdQb2xpY3kgQWN0aW9uLiBUaGlzIGlzIHRo ZSBhY3Rpb24gYXBwbGllZCB0byB0aGUgdHJhZmZpYyB0aGF0DQo+PiBtYXRjaGVzIHRoZSBjbGFz c2lmaWVyLiBBbiBhY3Rpb24gbWF5IGJlIGEgc2ltcGxlIEFDTCBhY3Rpb24gKGkuZS4NCj4+IGFs bG93LCBkZW55LCBtaXJyb3JpbmcpLCBhcHBseWluZyBhIHdlbGwga25vd24gc3RhdGlzdGljcyBm dW5jdGlvbnMNCj4+IChlLmcuIFggbWludXRlcyBjb3VudCwgWSBob3VycyBjb3VydCksIGFwcGx5 aW5nIGNsaWVudCBzcGVjaWZpZWQNCj4+IGZ1bmN0aW9ucyAod2l0aCBVUkwgcHJvdmlkZWQpLCBv ciBtYXkgcmVmZXIgdG8gYW4gb3JkZXJlZCBzZXF1ZW5jZSBvZg0KPj4gZnVuY3Rpb25zIChpLmUu LCBhIHNlcnZpY2UgY2hhaW4pLg0KPj4gSWYgeW91IGhhdmUgY29uY2VybiBvZiB1c2luZyBPcGVu U3RhY2sgR3JvdXAgQmFzZWQgUG9saWNpZXMsIHBsZWFzZQ0KPj4gbGV0IHRoZSBncm91cCBrbm93 Lg0KPj4gVGhhbmtzLCBMaW5kYQ0KPj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4+IEkybnNmIG1haWxpbmcgbGlzdA0KPj4gSTJuc2ZAaWV0Zi5vcmc8 bWFpbHRvOkkybnNmQGlldGYub3JnPiA8bWFpbHRvOkkybnNmQGlldGYub3JnPg0KPj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZg0KPg0KPiAtLQ0KPiAiRXN0YSB2 ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5vIg0KPg0KPiBEciBEaWVnbyBSLiBMb3Bl eg0KPiBUZWxlZm9uaWNhIEkrRA0KPiBodHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVnby5sb3Blei8N Cj4NCj4gZS1tYWlsOiBkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPG1haWx0bzpkaWVnby5y LmxvcGV6QHRlbGVmb25pY2EuY29tPg0KPiBUZWw6ICAgICszNCA5MTMgMTI5IDA0MQ0KPiBNb2Jp bGU6ICszNCA2ODIgMDUxIDA5MQ0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQo+DQo+DQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gLS0NCj4NCj4gRXN0ZSBtZW5zYWplIHkgc3VzIGFk anVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdQ0KPiBkZXN0aW5hdGFyaW8sIHB1 ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNpYWwgeQ0K PiBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGlu by4gU2kgbm8gZXMNCj4gdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90 aWZpY2FkbyBkZSBxdWUgbGEgbGVjdHVyYSwNCj4gdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24g eS9vIGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyDQo+IHByb2hpYmlkYSBlbiB2 aXJ0dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUNCj4g bWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRp YXRhbWVudGUgcG9yDQo+IGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nD s24uDQo+DQo+IFRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24g aXMgcHJpdmlsZWdlZCBhbmQNCj4gY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9u bHkgZm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwNCj4gb3IgZW50aXR5IG5hbWVkIGFib3Zl LiBJZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlDQo+IGludGVuZGVkIHJl Y2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwN Cj4gZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmlj dGx5IHByb2hpYml0ZWQuDQo+IElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9u IGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4NCj4gUGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRv IHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzDQo+IGNvbW11bmljYXRpb24g aW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Lg0KPg0KPiBFc3RhIG1lbnNhZ2VtIGUgc2V1cyBh bmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUNCj4gZGVzdGluYXTDoXJpbywg cG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25maWRlbmNpYWwgZSDD qQ0KPiBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRlIGRlc3Rpbm8u IFNlIG7Do28gw6kgdm9zc2ENCj4gc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGluZGljYWRvLCBm aWNhIG5vdGlmaWNhZG8gZGUgcXVlIGEgbGVpdHVyYSwNCj4gdXRpbGl6YcOnw6NvLCBkaXZ1bGdh w6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9pYmlkYQ0K PiBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEgbWVu c2FnZW0gcG9yIGVycm8sDQo+IHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlh dGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZQ0KPiBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Oj bw0KPg0KPg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KPiBJMm5zZiBtYWlsaW5nIGxpc3QNCj4gSTJuc2ZAaWV0Zi5vcmc8bWFpbHRvOkkybnNmQGll dGYub3JnPg0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQo+ DQoNCi0tDQoiRXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5vIg0KDQpEciBE aWVnbyBSLiBMb3Bleg0KVGVsZWZvbmljYSBJK0QNCmh0dHA6Ly9wZW9wbGUudGlkLmVzL2RpZWdv LmxvcGV6Lw0KDQplLW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb208bWFpbHRvOmRp ZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20+DQpUZWw6ICAgICszNCA5MTMgMTI5IDA0MQ0KTW9i aWxlOiArMzQgNjgyIDA1MSAwOTENCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0N Cg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KDQpFc3RlIG1lbnNhamUgeSBz dXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNsdXNpdmFtZW50ZSBhIHN1IGRlc3RpbmF0YXJpbywg cHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7NuIHByaXZpbGVnaWFkYSBvIGNvbmZpZGVuY2lhbCB5 IGVzIHBhcmEgdXNvIGV4Y2x1c2l2byBkZSBsYSBwZXJzb25hIG8gZW50aWRhZCBkZSBkZXN0aW5v LiBTaSBubyBlcyB1c3RlZC4gZWwgZGVzdGluYXRhcmlvIGluZGljYWRvLCBxdWVkYSBub3RpZmlj YWRvIGRlIHF1ZSBsYSBsZWN0dXJhLCB1dGlsaXphY2nDs24sIGRpdnVsZ2FjacOzbiB5L28gY29w aWEgc2luIGF1dG9yaXphY2nDs24gcHVlZGUgZXN0YXIgcHJvaGliaWRhIGVuIHZpcnR1ZCBkZSBs YSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kgaGEgcmVjaWJpZG8gZXN0ZSBtZW5zYWplIHBvciBl cnJvciwgbGUgcm9nYW1vcyBxdWUgbm9zIGxvIGNvbXVuaXF1ZSBpbm1lZGlhdGFtZW50ZSBwb3Ig ZXN0YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBhIHN1IGRlc3RydWNjacOzbi4NCg0KVGhlIGluZm9y bWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlzc2lvbiBpcyBwcml2aWxlZ2VkIGFuZCBj b25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUg aW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQgYWJvdmUuIElmIHRoZSByZWFkZXIgb2YgdGhpcyBt ZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3Rp ZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9uLCBkaXN0cmlidXRpb24gb3IgY29weWluZyBvZiB0 aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4gSWYgeW91IGhhdmUgcmVj ZWl2ZWQgdGhpcyB0cmFuc21pc3Npb24gaW4gZXJyb3IsIGRvIG5vdCByZWFkIGl0LiBQbGVhc2Ug aW1tZWRpYXRlbHkgcmVwbHkgdG8gdGhlIHNlbmRlciB0aGF0IHlvdSBoYXZlIHJlY2VpdmVkIHRo aXMgY29tbXVuaWNhdGlvbiBpbiBlcnJvciBhbmQgdGhlbiBkZWxldGUgaXQuDQoNCkVzdGEgbWVu c2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4Y2x1c2l2YW1lbnRlIGFvIHNldSBkZXN0 aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZvcm1hw6fDo28gcHJpdmlsZWdpYWRhIG91IGNvbmZp ZGVuY2lhbCBlIMOpIHBhcmEgdXNvIGV4Y2x1c2l2byBkYSBwZXNzb2Egb3UgZW50aWRhZGUgZGUg ZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYSBzZW5ob3JpYSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNh ZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUgYSBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRpdnVs Z2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8OjbyBwb2RlIGVzdGFyIHByb2liaWRh IGVtIHZpcnR1ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2VudGUuIFNlIHJlY2ViZXUgZXN0YSBtZW5z YWdlbSBwb3IgZXJybywgcm9nYW1vcy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1l bnRlIHBvciBlc3RhIG1lc21hIHZpYSBlIHByb2NlZGEgYSBzdWEgZGVzdHJ1acOnw6NvDQo= --_000_C02846B1344F344EB4FAA6FA7AF481F12AE8B8BCSZXEMA502MBSchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OldpbmdkaW5nczsNCglwYW5vc2UtMTo1IDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk65a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAg MyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsN CglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1p bHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJcQOWui+S9kyI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEg MTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEg NiA5IDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkJvb2sgQW50aXF1 YSI7DQoJcGFub3NlLTE6MiA0IDYgMiA1IDMgNSAzIDMgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt ZmFtaWx5Ok1vbmFjbzsNCglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAwO30NCi8qIFN0eWxl IERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFs DQoJe21hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4w cHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjt9DQphOmxpbmssIHNw YW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0K CXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlu a0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4 dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUsIGRp di5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi 5om55rOo5qGG5paH5pysIENoYXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZTo5LjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwi c2VyaWYiO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1lOmFw cGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkNoYXINCgl7bXNvLXN0eWxlLW5hbWU6IuaJueaz qOahhuaWh+acrCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxp bms65om55rOo5qGG5paH5pysOw0KCWZvbnQtZmFtaWx5OuWui+S9kzt9DQpzcGFuLkVtYWlsU3R5 bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7 bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBX b3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA5MC4w cHQgNzIuMHB0IDkwLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjUyODEw MTU5NDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTExNjUzMDExOTg7fQ0KQGxpc3QgbDA6bGV2 ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv grc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMQ0KCXttc28tbGlzdC1pZDo2MTQ5 NDg1OTY7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjE5NzA2MzYzNjt9DQpAbGlzdCBsMTpsZXZl bDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MzYuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4w cHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwyDQoJe21zby1saXN0LWlkOjczMTc3 NzQ3MDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTY5MjgyNjI0MDt9DQpAbGlzdCBsMjpsZXZl bDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MzYuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4w cHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwzDQoJe21zby1saXN0LWlkOjc1MDgx MTE0NzsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6OTkwMzA4MDA4O30NCkBsaXN0IGwzOmxldmVs MQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3 Ow0KCW1zby1sZXZlbC10YWItc3RvcDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDQNCgl7bXNvLWxpc3QtaWQ6MTA3NjQz NTYyMTsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTExOTIxOTU4MDg7fQ0KQGxpc3QgbDQ6bGV2 ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv grc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsNQ0KCXttc28tbGlzdC1pZDoxMTE1 OTc5MDk0Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczo2MDMyMzc4OTA7fQ0KQGxpc3QgbDU6bGV2 ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv grc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsNg0KCXttc28tbGlzdC1pZDoxNDYx NTM1ODQ0Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotOTY5ODg1MTUwO30NCkBsaXN0IGw2Omxl dmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEw LjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDcNCgl7bXNvLWxpc3QtaWQ6MTU2 MDYzNDQwOTsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTE1NDM5NjY1ODI7fQ0KQGxpc3QgbDc6 bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsOA0KCXttc28tbGlzdC1pZDox ODQ1MTIxNjM5Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMjgxNDgzNTE2O30NCkBsaXN0IGw4 OmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXpl OjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207 fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+ DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5 b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9v OnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iWkgt Q04iIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24x Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SGkgYWxsLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+TXkgdW5kZXJzdGFuZGluZyBpcyB0aGF0IFBDSU0vU0cxNyBpcyBt YWlubHkgcmVsYXRlZCB0byB0aGUgc3ludGF4IG9mIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCwgYW5k IGlzIHBvc3NpYmxlIHRvIGJlIGEgc3RhcnRpbmcgcG9pbnQuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JbiBhZGRpdGlvbiwgdGhlIG90aGVyIGltcG9ydGFudCBw b2ludCB3ZSBuZWVkIHRvIGNvbnNpZGVyIGlzIHRoZSBzZW1hbnRpYyBhc3BlY3RzIG9mIHRoZSBp bmZvcm1hdGlvbiBtb2RlbDogd2hpY2ggY29udGVudHMgY2FuIGJlIGluIHRoZSBzZWN1cml0eQ0K IHJ1bGUgYW5kIGluIHdoaWNoIHdheSB0aGV5IGFyZSBjYXRlZ29yaXplZCBhbmQgb3JnYW5pemVk PzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhlcmUgYXJlIG1h bnkgcG9zc2libGUgd2F5cywgc3VjaCBhczog4oCcNVcxSOKAnSwg4oCcc3ViamVjdC1vYmplY3Qt YWN0aW9uLWZ1bmN0aW9u4oCdLCBoaWVyYXJjaGljYWwgcHJvY2Vzc2luZywgb3IgY29tYmluYXRp b24gb2YgdGhlbS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Q29tbWVudHMg YXJlIGdyZWF0bHkgYXBwcmVjaWF0ZWQhPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPkIuUi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkZyYW5r PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRv cDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk65a6L5L2TIj7lj5Hku7bkuro8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L3NwYW4+PC9i PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTrl rovkvZMiPiBJMm5zZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmddDQo8L3NwYW4+PGI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk65a6L5L2TIj7ku6Pooagg PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk65a6L5L2TIj5ESUVHTyBMT1BFWiBHQVJDSUE8YnI+DQo8L3NwYW4+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk65a6L5L2TIj7lj5HpgIHml7bpl7Q8 c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTrlrovkvZMiPiAyMDE1PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OuWui+S9kyI+5bm0PHNwYW4g bGFuZz0iRU4tVVMiPjEwPC9zcGFuPuaciDxzcGFuIGxhbmc9IkVOLVVTIj42PC9zcGFuPuaXpTxz cGFuIGxhbmc9IkVOLVVTIj4NCiAxOTowNzxicj4NCjwvc3Bhbj48Yj7mlLbku7bkuro8c3BhbiBs YW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBMaW5kYSBEdW5iYXI8 YnI+DQo8L3NwYW4+PGI+5oqE6YCBPHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9iPjxzcGFu IGxhbmc9IkVOLVVTIj4gaTJuc2ZAaWV0Zi5vcmc7IEFsZG8gQmFzaWxlOyBMb2EgQW5kZXJzc29u PGJyPg0KPC9zcGFuPjxiPuS4u+mimDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvYj48c3Bh biBsYW5nPSJFTi1VUyI+IFJlOiBbSTJuc2ZdIFdoYXQgZG8geW91IHBlb3BsZSB0aGluayBvZiB1 c2luZyBPcGVuU3RhY2sncyBHcm91cCBCYXNlZCBQb2xpY3kgdG8gZGVzY3JpYmUgSTJOU0YgU2Vy dmljZSBMYXllciBSdWxlcz88bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyI+SGkgTGluZGEsIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkkg aGF2ZSBiZWVuIHRhbGtpbmcgYWJvdXQgdGhpcyB3aXRoIG9uZSBvZiB0aGUgcG9saWN5IGV4cGVy dHMgaW4gdGhlIFNFQ1VSRUQgcHJvamVjdCAoQWxkbyBCYXNpbGUsIEkgaGF2ZSBwdXQgaGltIGlu IENjOiBzbyB5b3UgY2FuIGlkZW50aWZ5IGhpbSwgdGhvdWdoIGhlIGlzIGluIHRoZSBJMk5TRiBs aXN0IGFzIHdlbGzigKYpIGFuZCB0aGVzZSBhcmUgaGlzIGNvbW1lbnRzOjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+OCZsdDvigJQ8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O01vbmFjbyZxdW90OywmcXVvdDtzZXJpZiZxdW90OyI+SW4gbXkgdW5kZXJzdGFuZGlu ZywgT3BlblN0YWNrIEdyb3VwIFBvbGljaWVzIGFyZSBhIHNpbXBsaWZpZWQgeWV0IGdlbmVyaWMg d2F5IHRvIGFzc29jaWF0ZSBpcHRhYmxlcy1saWtlIHJ1bGVzLCB0aGUgc3ludGF4IGlzIHZlcnkg c2ltaWxhci48YnI+DQpJdCBpcyBuZXR3b3JrIG1hbmFnZW1lbnQgcmF0aGVyIHRoZW4gc2VjdXJp dHkgbWFuYWdlbWVudC4gWW91IGNhbiBleHByZXNzIHNpbXBsZSBuZXR3b3JrIHBvbGljaWVzIChj b21tYW5kcykgYW5kIGFzc29jaWF0ZSB0byBuZXR3b3JrIG5vZGVzIGFuZCBncm91cHMuPGJyPg0K PGJyPg0KR0JQIGlzIG5vdCBhIGdlbmVyaWMgZnJhbWV3b3JrIGZvciBleHByZXNzaW5nIHBvbGlj aWVzLjxicj4NClNvbWV0aGluZyBpcyBnZW5lcmFsIChsaWtlIHRoZSBkZWZpbml0aW9uIG9mIHJ1 bGVzIGFzIChjbGFzc2lmaWVyLGFjdGlvbikpIGJ1dCBpdCByZXF1aXJlcyBzZXZlcmFsIGV4dGVu c2lvbnMgdGhhdCwgaW4gdGhlIGVuZCwgd2hlbiBjb21wbGV0ZWQgd2lsbCBsZWFkIHRvIFBDSU0g b3IgU0cxNy1saWtlIG1vZGVscy48YnI+DQo8YnI+DQpUaHVzLCBpbiBteSBvcGluaW9uLCBTRzE3 L1BDSU0gYXJlIGNlcnRhaW5seSBhIGJldHRlciBzdGFydGluZyBwb2ludCwgYW5kIGFsc28gZWFz aWVyIHRvIHB1c2ggU0VDVVJFRCByZXN1bHRzLjxicj4NCjxicj4NCiZxdW90O1BvbGljeSBDbGFz c2lmaWVyJnF1b3Q7IGlzIGFub3RoZXIgd2F5IHRvIHRlbGwgJ21hdGNoaW5nIGNvbmRpdGlvbnMn IChhcyBuZXR3b3JraW5nIHBlb3BsZSBsaWtlcyB0aGUgd29yZCBjbGFzc2lmaWVyLCBmb3IgbWUg YSBjbGFzc2lmaWVyIGlzIHNvbWV0aGluZyBtb3JlIGludGVsbGlnZW50KS48YnI+DQo8YnI+DQpD b25kaXRpb25zIGF2YWlsYWJsZSBvbiBPcGVuU3RhY2sgR3JvdXAgUG9saWNpZXMgYXJlIG5vdyBh IHZlcnkgbGltaXRlZCBzdWJzZXQgb2YgbDQgZmlsdGVyaW5nICh0aGV5IGRvbid0IGV2ZW4gY292 ZXIgcGFja2V0IGZpbHRlcnMpLiBIb3dldmVyLCB0aGUgbW9kZWwgKGNvbmRpdGlvbixhY3Rpb24p IGlzIGdlbmVyYWwgZW5vdWdoIHRvIGNvcGUgd2l0aCBmdXR1cmUgbmVlZHMgKGJ5IGFkZGluZyBt b3JlIGNsYXNzaWZpZXJzKS48YnI+DQo8YnI+DQpUaGVyZSBpcyBubyB3YXkgdG8gY2F0ZWdvcml6 ZSBwb2xpY2llcyAodGh1cyBubyBjYXBhYmlsaXRpZXMgbm8gZWFzeSBsaW5rIHRvIE5TRiBjYXRl Z29yaXphdGlvbiBmb3IgaW50ZXJvcGVyYWJpbGl0eSkuPGJyPg0KPGJyPg0KVGhlbiwgbm8gcmVz b2x1dGlvbiBzdHJhdGVnaWVzLCBubyBkZWZhdWx0IGFjdGlvbnMsIG5vIHByaW9yaXRpZXMsIG5v IG90aGVyIHNvcGhpc3RpY2F0ZWQgd2F5cyB0byBleHByZXNzIHBvbGljaWVzLjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIj44Jmx0O+KAlDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+SeKAmWxsIGxldCBBbGRvIHRvIGV4cHJlc3MgaGlzIHZp ZXdzIGluIG1vcmUgZGV0YWlsLCBidXQgbXkgcG9zaXRpb24gaXMgdGhhdCB3ZSBzaG91bGQgY29u c2lkZXIgYW4gZXhpc3RpbmcgZ2VuZXJhbCBmcmFtZXdvcmsgYXMgc3RhcnRpbmcgcG9pbnQsIGFu ZCB0aGF0IFBDSU0gKHNlZQ0KPGEgaHJlZj0iaHR0cDovL3d3dy5kbXRmLm9yZy9zdGFuZGFyZHMv cG9saWN5Ij5odHRwOi8vd3d3LmRtdGYub3JnL3N0YW5kYXJkcy9wb2xpY3k8L2E+KSBpcyB0aGUg bW9zdCBwcm9taXNpbmcgb25lLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyI+QmUgZ29vZGUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIj5PbiA1IE9jdCAyMDE1LCBhdCAyMzo0NSAsIExpbmRhIER1bmJhciAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmxpbmRhLmR1bmJhckBodWF3ZWkuY29tIj5saW5kYS5kdW5iYXJAaHVh d2VpLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj5UaGFu a3MgdG8gTG9hIGFuZCBEaWVnbyBmb3IgdGhlIGNvbW1lbnRzLjxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+SGVyZSBh cmUgc29tZSBwcm9zIGFuZCBjb25zIG9mIHVzaW5nIE9wZW4gU3RhY2sgR3JvdXAgQmFzZWQgUG9s aWN5OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7 PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj5Qcm9zOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjBjbTt0ZXh0LWluZGVudDot MTguMHB0O21zby1saXN0OmwzIGxldmVsMSBsZm8xIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1i b2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4w cHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPlRoZXJlIGFyZSBydW5uaW5nIGNvZGVzIChvcGVuIHNvdXJjZWQgY29kZSk8c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj5D b25zOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv O21hcmdpbi1sZWZ0OjBjbTt0ZXh0LWluZGVudDotMTguMHB0O21zby1saXN0OmwwIGxldmVsMSBs Zm8yIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJ Z25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwv c3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPlRoZSBPcGVuU3RhY2sncyBncm91 cCBiYXNlZCBwb2xpY3kgaXMgdmVyeSBtdWNoIE5ldXRyb24gcG9ydCBvcmllbnRlZC4gSXQgaXMg bm90IHN0cmFpZ2h0IGZvcndhcmQgZm9yIGFuIGVudmlyb25tZW50IHRoYXQgaXMgbm90IGJhc2Vk IG9uIE9wZW5TdGFjayBOZXV0cm9uLjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87bWFyZ2luLWxlZnQ6MGNtO3RleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwx IGxmbzIiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0 Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0K PC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+VGhleSBhcmUgbm90IGRlc2ln bmVkIGZvciBleHByZXNzaW5nIHJ1bGVzIHRvIEZsb3ctYmFzZWQgTlNGIG9uIGhvdyB0byB0cmVh dCBjbGllbnQvYXBwbGljYXRpb25zIHRyYWZmaWMuIFRoZSBjdXJyZW50IHNldCBpcyBub3QgY29t cGxldGUsJm5ic3A7IGEgbG90IG1vcmUgbmVlZCB0byBiZQ0KIGFkZGVkLjxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MGNtO3RleHQtaW5kZW50Oi0xOC4w cHQ7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzIiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+ PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAm cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cyI+VGhlcmUgYXJlIG90aGVyICZxdW90O0dyb3VwIEJhc2VkIFBvbGljeSZxdW90OywgZS5nLiBX aW5kb3cncyBHcm91cCBQb2xpY3ksIHdoaWNoIGFyZSBxdWl0ZSBkaWZmZXJlbnQgZnJvbSB0aGUg T3BlblN0YWNr4oCZcyBHcm91cCBCYXNlZCBQb2xpY3kuPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDowY207dGV4dC1pbmRlbnQ6LTE4LjBwdDttc28tbGlz dDpsMCBsZXZlbDEgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48c3BhbiBzdHls ZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVz IE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj5NYXkgY2F1 c2UgY29uZnVzaW9uIGluIGluZHVzdHJ5IGlmIGNhbGxpbmcg4oCcR3JvdXAgQmFzZWQgUG9saWN5 4oCdIGZvciBJMk5TRiBTZXJ2aWNlIExheWVyPG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPkhvd2V2 ZXIsIHRoZSBub3RhdGlvbiBvZiBHcm91cHMsIFRhcmdldCwgQ29udGV4dCBhbmQgYWN0aW9uIGRv IGNvdmVyIHdoYXQgaXMgbmVlZGVkIGZvciBjbGllbnRzL2FwcGxpY2F0aW9ucyB0byBleHByZXNz IHRoZSBydWxlcyBvbiBob3cgdGhlaXIgZmxvd3MgY2FuIGJlIHRyZWF0ZWQgYnkgdGhlDQogRmxv dy1CYXNlZCBOU0ZzIGluIG5ldHdvcmtzLiBBbmQgdGhleSBjYW4gYmUgbWFwcGVkIHRvIHRoZSBD YXBhYmlsaXR5IGxheWVy4oCZcyBTdWJqZWN0LU9iamVjdC1BY3Rpb24tRnVuY3Rpb27igJ0gcGFy YWRpZ20uPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpD b25zb2xhcyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj5UbyBhdm9pZCB0aGUgY29uZnVzaW9uLCBpdCBtaWdo dCBiZSBiZXR0ZXIgdG8gYXZvaWQgdXNpbmcgdGhlIHRlcm0g4oCcR3JvdXAgYmFzZWQgcG9saWN5 4oCdIChidXQgaW5oZXJlbnQgdGhlaXIgY29uY2VwdCBvbmx5KS48c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJzcDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PkZvciBleGFtcGxlLCDigJxncm91cOKAnSBjYW4gYmUgcmVwcmVzZW50ZWQgYnkg4oCcQ29tcG9z aXRlIEVuZHBvaW50cy9UYXJnZXRz4oCdIG9yIEVuZHBvaW50IENvbnRhaW5lciAoaWYgdXNpbmcg U1VQQSBsYW5ndWFnZSksIHdoZXJlIGFuIOKAnEVuZHBvaW504oCdIGNhbiBiZSBhIHN1Ym5ldCwg YSBzZXQgb2YgaG9zdHMNCiBvciBhcHBsaWNhdGlvbnMsIGV0Yy48c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDo0LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206NC4w cHQ7bWFyZ2luLWxlZnQ6MGNtO3RleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDggbGV2ZWwx IGxmbzMiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0 Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0K PC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtCb29rIEFudGlxdWEmcXVvdDssJnF1 b3Q7c2VyaWYmcXVvdDsiPkNvbXBvc2l0ZSBFbmRwb2ludCAoQ0VQKS4gTG9naWNhbCBjb21iaW5h dGlvbiBvZiBlbmRwb2ludCBkZXNjcmlwdG9yIElEcywgd2hlcmUgZGVzY3JpcHRvciBjYW4gYmUg c3VibmV0LCBzZXQgb2YgaG9zdHMsIG9yIGFwcGxpY2F0aW9ucy48c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OjQuMHB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbTo0LjBwdDtt YXJnaW4tbGVmdDowY207dGV4dC1pbmRlbnQ6LTE4LjBwdDttc28tbGlzdDpsMSBsZXZlbDEgbGZv NCI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdu b3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3Nw YW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2sgQW50aXF1YSZxdW90OywmcXVvdDtz ZXJpZiZxdW90OyI+RW5kcG9pbnQgRGVzY3JpcHRvciAoRVBEKS4gRWFjaCBlbmRwb2ludCBkZXNj cmlwdG9yIGhhcyBhIHR5cGUgYW5kIHZhbHVlIHRoYXQgYXJlIHVzZWQgdG8gcGFydGlhbGx5IGlk ZW50aWZ5IHRoZSBlbmRwb2ludC4gVGhlIHR5cGUgb2YgdGhlIEVuZHBvaW50DQogRGVzY3JpcHRv ciBtYXkgYmUgYSBiYXNlIG5ldHdvcmtpbmcgaWRlbnRpZmllciwgc3VjaCBhcyBhbiBJUCBhZGRy ZXNzLCBvciBhIHVzZXItZGVmaW5lZCB0eXBlLiBUaGUgdmFsdWUgbWF5IGJlIGEgc2luZ2xlIHZh bHVlLCBhIHJhbmdlIG9mIHZhbHVlcywgb3IgYSBncm91cCBvZiB2YWx1ZXMuPHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9Im1hcmdpbi10b3A6NC4wcHQ7bWFyZ2luLWJv dHRvbTo0LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDo0LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206NC4wcHQ7bWFyZ2lu LWxlZnQ6MGNtO3RleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDQgbGV2ZWwxIGxmbzUiPg0K PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+ wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwv c3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtCb29rIEFudGlxdWEmcXVvdDssJnF1b3Q7c2VyaWYm cXVvdDsiPlRhcmdldC4gVGhpcyBpcyB1c2VkIGJ5IHRoZSBhcHBsaWNhdGlvbiBjbGllbnQgdG8g ZXN0YWJsaXNoIGNvbW11bmljYXRpb25zIG92ZXIgdGhlIG5ldHdvcmsuIEEgVGFyZ2V0IGlzIG1h cHBlZCB0byBhIHBoeXNpY2FsL2xvZ2ljYWwgaW5ncmVzcyBwb3J0LA0KIG9yIGEgcGh5c2ljYWwv bG9naWNhbCBlZ3Jlc3MgcG9ydC48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOjQuMHB0O21hcmdpbi1ib3R0b206NC4wcHQiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6NC4wcHQ7bWFy Z2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjQuMHB0O21hcmdpbi1sZWZ0OjBjbTt0ZXh0LWlu ZGVudDotMTguMHB0O21zby1saXN0Omw3IGxldmVsMSBsZm82Ij4NCjwhW2lmICFzdXBwb3J0TGlz dHNdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZv bnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2Vu ZGlmXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Qm9vayBBbnRpcXVhJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7Ij5Qb2xpY3kgUnVs ZSBTZXQuIEEgUG9saWN5IFJ1bGUgU2V0IGlzIHVzZWQgdG8gZGV0ZXJtaW5lIGhvdyB0aGUgdHJh ZmZpYyBiZXR3ZWVuIGEgcGFpciBvZiBUYXJnZXQgR3JvdXBzIGlzIHRvIGJlIHRyZWF0ZWQuIEEg UG9saWN5IFJ1bGUgU2V0IGNvbnNpc3RzDQogb2Ygb25lIG9yIG1vcmUgUG9saWN5IFJ1bGVzLjxz cGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OjQuMHB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbTo0 LjBwdDttYXJnaW4tbGVmdDowY207dGV4dC1pbmRlbnQ6LTE4LjBwdDttc28tbGlzdDpsNSBsZXZl bDEgbGZvNyI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48c3BhbiBzdHlsZT0ibXNvLWxp c3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2sgQW50aXF1YSZxdW90Oywm cXVvdDtzZXJpZiZxdW90OyI+UG9saWN5IFJ1bGUuIEEgUG9saWN5IFJ1bGUgY29uc2lzdHMgb2Yg YSBQb2xpY3kgY29udGV4dCBhbmQgYSBzZXQgb2YgQWN0aW9ucyB0byBiZSBhcHBsaWVkIHRvIHRo ZSB0cmFmZmljLjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJtYXJn aW4tdG9wOjQuMHB0O21hcmdpbi1ib3R0b206NC4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNv bnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6NC4wcHQ7bWFyZ2luLXJpZ2h0OjBjbTttYXJn aW4tYm90dG9tOjQuMHB0O21hcmdpbi1sZWZ0OjBjbTt0ZXh0LWluZGVudDotMTguMHB0O21zby1s aXN0OmwyIGxldmVsMSBsZm84Ij4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0 eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9vayBBbnRp cXVhJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7Ij5Qb2xpY3kgQ29udGV4dC4gQ29udGV4dCB0aGF0 IGRlc2NyaWJlcyB3aGVuIGEgUG9saWN5IFJ1bGUgaXMgdG8gYmUgYXBwbGllZC4gSXQgaXMgZXhw cmVzc2VkIGFzIGEgZGlyZWN0aW9uLCBhIGxpc3Qgb2YgTDQgcG9ydHMsIHRpbWUgcmFuZ2UsIGFu ZCBhIHByb3RvY29sLjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tdG9wOjQuMHB0O21hcmdpbi1ib3R0b206NC4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3Nw YW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6NC4wcHQ7bWFyZ2luLXJpZ2h0OjBjbTtt YXJnaW4tYm90dG9tOjQuMHB0O21hcmdpbi1sZWZ0OjBjbTt0ZXh0LWluZGVudDotMTguMHB0O21z by1saXN0Omw2IGxldmVsMSBsZm85Ij4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFu IHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9vayBB bnRpcXVhJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7Ij5Qb2xpY3kgQWN0aW9uLiBUaGlzIGlzIHRo ZSBhY3Rpb24gYXBwbGllZCB0byB0aGUgdHJhZmZpYyB0aGF0IG1hdGNoZXMgdGhlIGNsYXNzaWZp ZXIuIEFuIGFjdGlvbiBtYXkgYmUgYSBzaW1wbGUgQUNMIGFjdGlvbiAoaS5lLiBhbGxvdywgZGVu eSwgbWlycm9yaW5nKSwNCiBhcHBseWluZyBhIHdlbGwga25vd24gc3RhdGlzdGljcyBmdW5jdGlv bnMgKGUuZy4gWCBtaW51dGVzIGNvdW50LCBZIGhvdXJzIGNvdXJ0KSwgYXBwbHlpbmcgY2xpZW50 IHNwZWNpZmllZCBmdW5jdGlvbnMgKHdpdGggVVJMIHByb3ZpZGVkKSwgb3IgbWF5IHJlZmVyIHRv IGFuIG9yZGVyZWQgc2VxdWVuY2Ugb2YgZnVuY3Rpb25zIChpLmUuLCBhIHNlcnZpY2UgY2hhaW4p Ljwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZu YnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Q29tbWVudHMgYXJlIGdyZWF0bHkgYXBwcmVj aWF0ZWQuPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpD b25zb2xhcyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj5MaW5kYTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t LS0tPGJyPg0KRnJvbTogTG9hIEFuZGVyc3NvbiBbPGEgaHJlZj0ibWFpbHRvOmxvYUBwaS5udSI+ bWFpbHRvOmxvYUBwaS5udTwvYT5dPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjxicj4NClNlbnQ6IEZyaWRheSwgT2N0b2JlciAwMiwgMjAxNSAxMjoxOCBB TTxicj4NClRvOiBESUVHTyBMT1BFWiBHQVJDSUE7IExpbmRhIER1bmJhcjxicj4NCkNjOjxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWls dG86aTJuc2ZAaWV0Zi5vcmciPmkybnNmQGlldGYub3JnPC9hPjxicj4NClN1YmplY3Q6IFJlOiBb STJuc2ZdIFdoYXQgZG8geW91IHBlb3BsZSB0aGluayBvZiB1c2luZyBPcGVuU3RhY2sncyBHcm91 cCBCYXNlZCBQb2xpY3kgdG8gZGVzY3JpYmUgSTJOU0YgU2VydmljZSBMYXllciBSdWxlcz88bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29u c29sYXMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+TGluZGEgYW5kIERpZWdvLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzIj5UaGlzIGlzIHNhaWQgYnkgc29tZW9uZSB0aGF0IGlzIG5vdCBmYW1pbGlhciB3aXRoIE9w ZW4gU3RhY2sgb3IgdGhlIEdyb3VwIEJhc2VkIFBvbGljeS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25z b2xhcyI+SSdtIHNvbWV3aGF0IG9uIHRoZSBzYW1lIHBhZ2UgYXMgRGllZ28sIGF0IGxlYXN0IGlu IHRoZSBzYW1lIGJvb2suPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPklmIHdlIHdhbnQgdG8g dXNlJm5ic3A7IE9wZW5TdGFjaydzIEdyb3VwIEJhc2VkIFBvbGljeSB0byBkZXNjcmliZSBJMk5T RiBTZXJ2aWNlIExheWVyIFJ1bGVzLCB0aGUgY2FzZSBmb3IgdGhpcyBoYXMgdG8gYmUgbWFkZSBt dWNoIGJldHRlci48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+V2hhdCBhcmUgdGhlIHByb3Mg YW5kIGNvbnM/IEFyZSB0aGVyZSB2aWFibGUgYWx0ZXJuYXRpdmVzPzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jm5ic3A7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzIj4vTG9hPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPk9uIDIwMTUtMTAtMDIg MDY6NDEsIERJRUdPIExPUEVaIEdBUkNJQSB3cm90ZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgSGkgTGluZGEs PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IEkgYW0gbm90IGNvbXBsZXRlbHkg c3VyZSB0aGF0IHRoZSBjdXJyZW50IG5ldHdvcmtpbmcgbW9kZWwgb2Y8c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IE9wZW5TdGFj aywgdGhhdCBpcyByZWZsZWN0ZWQgaW4gdGhlIHJ1bGUgdGFyZ2V0cyAoZWl0aGVyIHRoZSBQVEcg YW5kPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25z b2xhcyI+Jmd0OyB0aGUgVGFyZ2V0PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IGl0c2VsZikgZG9lcyBjb3ZlciBh bGwgdGhlIHBvdGVudGlhbCBzZW1hbnRpY3MgZm9yIGdlbmVyYWwgc2VjdXJpdHk8c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IGZ1 bmN0aW9ucy4gVGhlIHNhbWUgY29uY2VybiBhcHBsaWVzIHRvIFBvbGljeSBDbGFzc2lmaWVyLCBh cyB0aGV5IHNlZW08c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzIj4mZ3Q7IHZlcnkgbXVjaCBhc3NvY2lhdGVkIHdpdGggYSBwYXJ0aWN1bGFy IGltcGxlbWVudGF0aW9uIG1vZGVsIGFuZCwgd2hhdDxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgaXMgbW9yZSwgd2l0aCBhIGxp bWl0ZWQgbmV0d29yayBtb2RlbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsg QmUgZ29vZGUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzIj4mZ3Q7Jmd0OyBPbiAxIE9jdCAyMDE1LCBhdCAyMzozMiAsIExpbmRhIER1bmJhciAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmxpbmRhLmR1bmJhckBodWF3ZWkuY29tIj5saW5kYS5kdW5iYXJAaHVh d2VpLmNvbTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86bGluZGEu ZHVuYmFyQGh1YXdlaS5jb20iPm1haWx0bzpsaW5kYS5kdW5iYXJAaHVhd2VpLmNvbTwvYT4mZ3Q7 Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyBJ Mk5TRiBwYXJ0aWNpcGFudHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJodHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC14aWEtaTJuc2YtY2FwYWJpbGl0eS1pbnRlcmZhY2UiPmh0dHBz Oi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5LWlu dGVyZmFjZTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IC1pbS9zcGVjaWZpZXMgdGhlIHN0cnVjdHVy ZSBmb3IgSTJOU0YgY2FwYWJpbGl0eSBsYXllciBydWxlcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IEZv ciB0aGUgSTJOU0Ygc2ltcGxlIHNlcnZpY2UgbGF5ZXIsIHdoYXQgZG8gcGVvcGxlIHRoaW5rIG9m IHVzaW5nPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpD b25zb2xhcyI+Jmd0OyZndDsgT3BlblN0YWNr4oCZcyBHcm91cCBQb2xpY3kgc3RydWN0dXJlID88 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPiZndDsmZ3Q7IElmIHVzaW5nIE9wZW5TdGFjayBHcm91cC1iYXNlZCBQb2xpY3kg KEdCUCkgc3RydWN0dXJlLCB0aGUgSTJOU0Y8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyBzaW1wbGUgc2VydmljZSBsYXll ciBjYW4gYmUgZXhwcmVzc2VkIGFzIMK3UG9saWN5IFRhcmdldCBHcm91cCAoUFRHKS48c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7 Jmd0OyBUaGlzIGlzIGEgZ3JvdXAgb2YgVGFyZ2V0cyB0byB3aGljaCBhIHRyYWZmaWMgcG9saWN5 IGNhbiBiZSBhcHBsaWVkLjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IEEgUFRHIG1heSBiZSBtYXBwZWQgdG8gYSBOZXV0 cm9uIFN1Ym5ldCwgYSBjbGllbnQgdmlydHVhbCBTdWJuZXQ8c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyAoaS5lLiB3aXRo IHByaXZhdGUgYWRkcmVzcyBwcmVmaXgpLCBhIHN1Ym5ldCB3aXRoIHB1YmxpYyBhZGRyZXNzPHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ Jmd0OyZndDsgZmFtaWxpZXMsIG9yIGFueSBjb21iaW5hdGlvbiBvZiB0aGVtIHdpdGggbG9naWNh bCBvcGVyYXRvcnMgKExvZ2ljYWw8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyBBTkQsIE9SLCBvciBOT1QpLiBBIFBURyBy ZWZlcmVuY2VzIG9uZSBvciBtb3JlIFBvbGljeSBSdWxlIFNldHMgdGhhdDxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IGl0 IGNvbnN1bWVzIG9yIHByb3ZpZGVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgwrdUYXJnZXQuIFRoaXMg aXMgdXNlZCBieSB0aGUgYXBwbGljYXRpb24gY2xpZW50IHRvIGVzdGFibGlzaDxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7 IGNvbW11bmljYXRpb25zIG92ZXIgdGhlIG5ldHdvcmsuIEEgVGFyZ2V0IGlzIG1hcHBlZCB0byBh IHNpbmdsZTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPiZndDsmZ3Q7IE5ldXRyb24gUG9ydCwgYSBwaHlzaWNhbC9sb2dpY2FsIGluZ3Jl c3MgcG9ydCwgb3IgYSBwaHlzaWNhbC9sb2dpY2FsPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgZWdyZXNzIHBvcnQuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNv bnNvbGFzIj4mZ3Q7Jmd0OyDCt1BvbGljeSBSdWxlIFNldC4gQSBQb2xpY3kgUnVsZSBTZXQgaXMg dXNlZCB0byBkZXRlcm1pbmUgaG93IHRoZTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IHRyYWZmaWMgYmV0d2VlbiBhIHBh aXIgb2YgVGFyZ2V0IEdyb3VwcyBpcyB0byBiZSB0cmVhdGVkLiBBIFBvbGljeTxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7 IFJ1bGUgU2V0IGNvbnNpc3RzIG9mIG9uZSBvciBtb3JlIFBvbGljeSBSdWxlcy48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PiZndDsmZ3Q7IMK3UG9saWN5IFJ1bGUuIEEgUG9saWN5IFJ1bGUgY29uc2lzdHMgb2YgYSBUcmFm ZmljIENsYXNzaWZpZXIgYW5kIGE8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyBzZXQgb2YgQWN0aW9ucyB0byBiZSBhcHBs aWVkIHRvIHRoZSB0cmFmZmljLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgwrdQb2xpY3kgQ2xhc3NpZmll ci4gQSB0cmFmZmljIGNsYXNzaWZpZXIgZGVzY3JpYmVzIHRoZSB0cmFmZmljIHRvPHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZn dDsgd2hpY2ggYSBQb2xpY3kgUnVsZSBpcyB0byBiZSBhcHBsaWVkLiBJdCBpcyBleHByZXNzZWQg YXMgYSBkaXJlY3Rpb24sPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgYSBsaXN0IG9mIEw0IHBvcnRzLCB0aW1lIHJhbmdl LCBhbmQgYSBwcm90b2NvbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IMK3UG9saWN5IEFjdGlvbi4gVGhp cyBpcyB0aGUgYWN0aW9uIGFwcGxpZWQgdG8gdGhlIHRyYWZmaWMgdGhhdDxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IG1h dGNoZXMgdGhlIGNsYXNzaWZpZXIuIEFuIGFjdGlvbiBtYXkgYmUgYSBzaW1wbGUgQUNMIGFjdGlv biAoaS5lLjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPiZndDsmZ3Q7IGFsbG93LCBkZW55LCBtaXJyb3JpbmcpLCBhcHBseWluZyBhIHdl bGwga25vd24gc3RhdGlzdGljcyBmdW5jdGlvbnM8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7Jmd0OyAoZS5nLiBYIG1pbnV0ZXMg Y291bnQsIFkgaG91cnMgY291cnQpLCBhcHBseWluZyBjbGllbnQgc3BlY2lmaWVkPHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZn dDsgZnVuY3Rpb25zICh3aXRoIFVSTCBwcm92aWRlZCksIG9yIG1heSByZWZlciB0byBhbiBvcmRl cmVkIHNlcXVlbmNlIG9mPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDsgZnVuY3Rpb25zIChpLmUuLCBhIHNlcnZpY2UgY2hh aW4pLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTpDb25zb2xhcyI+Jmd0OyZndDsgSWYgeW91IGhhdmUgY29uY2VybiBvZiB1c2luZyBPcGVu U3RhY2sgR3JvdXAgQmFzZWQgUG9saWNpZXMsIHBsZWFzZTxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IGxldCB0aGUgZ3Jv dXAga25vdy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7IFRoYW5rcywgTGluZGE8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsm Z3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzIj4mZ3Q7Jmd0OyBJMm5zZiBtYWlsaW5nIGxpc3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsmZ3Q7PHNwYW4g Y2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0 bzpJMm5zZkBpZXRmLm9yZyI+STJuc2ZAaWV0Zi5vcmc8L2E+PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPiZsdDs8YSBocmVmPSJtYWlsdG86STJuc2ZAaWV0 Zi5vcmciPm1haWx0bzpJMm5zZkBpZXRmLm9yZzwvYT4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyZndDs8c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9pMm5zZjwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PiZndDsgLS08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsgJnF1b3Q7RXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9j dG9yIEluZmllcm5vJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IERy IERpZWdvIFIuIExvcGV6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFRlbGVmb25pY2EgSSYjNDM7RDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xh cyI+Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 YSBocmVmPSJodHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVnby5sb3Blei8iPmh0dHA6Ly9wZW9wbGUu dGlkLmVzL2RpZWdvLmxvcGV6LzwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZn dDsgZS1tYWlsOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48YSBocmVmPSJtYWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbSI+ZGllZ28uci5s b3BlekB0ZWxlZm9uaWNhLmNvbTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgVGVsOiZuYnNwOyZuYnNwOyZu YnNwOyAmIzQzOzM0IDkxMyAxMjkgMDQxPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IE1vYmlsZTogJiM0MzszNCA2 ODIgMDUxIDA5MTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4m Z3Q7IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgLS08bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXMiPiZndDsgRXN0ZSBtZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhj bHVzaXZhbWVudGUgYSBzdTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsgZGVzdGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZv cm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFsIHk8c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IGVzIHBhcmEgdXNv IGV4Y2x1c2l2byBkZSBsYSBwZXJzb25hIG8gZW50aWRhZCBkZSBkZXN0aW5vLiBTaSBubyBlczxz cGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMi PiZndDsgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90aWZpY2FkbyBk ZSBxdWUgbGEgbGVjdHVyYSw8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IHV0aWxpemFjacOzbiwgZGl2dWxnYWNpw7NuIHkvbyBj b3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVkZSBlc3RhcjxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgcHJvaGliaWRhIGVuIHZp cnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kgaGEgcmVjaWJpZG8gZXN0ZTxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZn dDsgbWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5t ZWRpYXRhbWVudGUgcG9yPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVz dHJ1Y2Npw7NuLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBUaGUgaW5mb3Jt YXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kPHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+ Jmd0OyBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBv ZiB0aGUgaW5kaXZpZHVhbDxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVh ZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBpbnRlbmRlZCByZWNpcGllbnQs IHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24sPHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBk aXN0cmlidXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0bHkg cHJvaGliaXRlZC48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzIj4mZ3Q7IElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9u IGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7IFBsZWFzZSBpbW1lZGlhdGVseSByZXBs eSB0byB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQgdGhpczxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgY29tbXVu aWNhdGlvbiBpbiBlcnJvciBhbmQgdGhlbiBkZWxldGUgaXQuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzIj4mZ3Q7PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzIj4mZ3Q7IEVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4 Y2x1c2l2YW1lbnRlIGFvIHNldTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5m b3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25maWRlbmNpYWwgZSDDqTxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgcGFyYSB1 c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5vLiBTZSBuw6NvIMOp IHZvc3NhPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpD b25zb2xhcyI+Jmd0OyBzZW5ob3JpYSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Egbm90 aWZpY2FkbyBkZSBxdWUgYSBsZWl0dXJhLDxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDsgdXRpbGl6YcOnw6NvLCBkaXZ1bGdhw6fD o28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9pYmlkYTxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZn dDsgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1l bnNhZ2VtIHBvciBlcnJvLDxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXMiPiZndDsgcm9nYW1vcy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBp bWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZpYSBlPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OyBwcm9jZWRhIGEgc3VhIGRl c3RydWnDp8OjbzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpDb25zb2xhcyI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25zb2xhcyI+Jmd0OzxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpDb25z b2xhcyI+Jmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f XzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTpDb25zb2xhcyI+Jmd0OyBJMm5zZiBtYWlsaW5nIGxpc3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRv OkkybnNmQGlldGYub3JnIj5JMm5zZkBpZXRmLm9yZzwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0iaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZiI+aHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZjwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXMiPiZndDs8bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImNvbG9yOmJsYWNrIj4tLTxicj4NCiZxdW90O0VzdGEgdmV6IG5vIGZh bGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyZxdW90Ozxicj4NCjxicj4NCkRyIERpZWdvIFIuIExv cGV6PGJyPg0KVGVsZWZvbmljYSBJJiM0MztEPGJyPg0KPGEgaHJlZj0iaHR0cDovL3Blb3BsZS50 aWQuZXMvZGllZ28ubG9wZXovIj5odHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVnby5sb3Blei88L2E+ PGJyPg0KPGJyPg0KZS1tYWlsOiA8YSBocmVmPSJtYWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9u aWNhLmNvbSI+ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbTwvYT48YnI+DQpUZWw6ICZuYnNw OyAmbmJzcDsmIzQzOzM0IDkxMyAxMjkgMDQxPGJyPg0KTW9iaWxlOiAmIzQzOzM0IDY4MiAwNTEg MDkxPGJyPg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHlsZT0idGV4dC1hbGln bjpjZW50ZXIiPjxzcGFuIGxhbmc9IkVOLVVTIj4NCjxociBzaXplPSIyIiB3aWR0aD0iMTAwJSIg YWxpZ249ImNlbnRlciI+DQo8L3NwYW4+PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseTomcXVvdDtB cmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmdyYXkiPjxicj4NCkVzdGUg bWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVz dGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29u ZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRpZGFk IGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1 ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhDQogbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdh Y2nDs24geS9vIGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBl biB2aXJ0dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUg bWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRp YXRhbWVudGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24u PGJyPg0KPGJyPg0KVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlzc2lv biBpcyBwcml2aWxlZ2VkIGFuZCBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgb25s eSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQgYWJvdmUuIElm IHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9uLA0KIGRpc3Ry aWJ1dGlvbiBvciBjb3B5aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlvbiBpcyBzdHJpY3RseSBwcm9o aWJpdGVkLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIHRyYW5zbWlzc2lvbiBpbiBlcnJvciwg ZG8gbm90IHJlYWQgaXQuIFBsZWFzZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRo YXQgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFuZCB0aGVu IGRlbGV0ZSBpdC48YnI+DQo8YnI+DQpFc3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGly aWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5m b3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNs dXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Eg c2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVl IGENCiBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBzZW0g YXV0b3JpemHDp8OjbyBwb2RlIGVzdGFyIHByb2liaWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNsYcOn w6NvIHZpZ2VudGUuIFNlIHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBwb3IgZXJybywgcm9nYW1vcy1s aGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZpYSBl IHByb2NlZGEgYSBzdWEgZGVzdHJ1acOnw6NvPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_C02846B1344F344EB4FAA6FA7AF481F12AE8B8BCSZXEMA502MBSchi_-- From nobody Thu Oct 8 08:07:34 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BBC31A8732 for ; Thu, 8 Oct 2015 08:07:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.331 X-Spam-Level: X-Spam-Status: No, score=-2.331 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p5ufTTzhQF3Y for ; Thu, 8 Oct 2015 08:07:28 -0700 (PDT) Received: from fm2nodo5.polito.it (fm2nodo5.polito.it [130.192.180.14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68C1E1A710C for ; Thu, 8 Oct 2015 08:07:28 -0700 (PDT) Received: from polito.it (frontmail1.polito.it [130.192.180.41]) by fm2nodo5.polito.it with ESMTP id t98F6rZR006619-t98F6rZT006619 (version=TLSv1.0 cipher=AES128-SHA bits=128 verify=CAFAIL); Thu, 8 Oct 2015 17:06:53 +0200 X-AttachExt: p7s X-ExtScanner: Niversoft's FindAttachments (free) Received: from [151.33.118.4] (account d011649@polito.it HELO [192.168.1.3]) by polito.it (CommuniGate Pro SMTP 6.1.5) with ESMTPSA id 97404956; Thu, 08 Oct 2015 17:06:46 +0200 To: Linda Dunbar , DIEGO LOPEZ GARCIA References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> <4A95BA014132FF49AE685FAB4B9F17F657D67E42@dfweml701-chm> From: Aldo Basile Message-ID: <56168676.70707@polito.it> Date: Thu, 8 Oct 2015 17:06:30 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D67E42@dfweml701-chm> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms050400030109090902020503" X-FEAS-SYSTEM-WL: 130.192.180.41 Archived-At: Cc: "i2nsf@ietf.org" , Loa Andersson Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 15:07:32 -0000 This is a cryptographically signed message in MIME format. --------------ms050400030109090902020503 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable Dear Linda, first of all sorry for the very late reply, and thanks Diego for=20 introducing me (and presenting me as a 'policy expert'). I admit there is not a lot of good literature on Security Management (I=20 assume Policy-based Security Management or Policy-Based Network Security = Management, which is a relatively narrow field). I'm listing here some=20 works but I'm sure you already know all of them. 1) Most of the works start from the Strassner definition of Policy-based = Network Management (PBNM). Strassner introduced the idea of 'policy=20 continuum' and developed the DEN-ng architecture. Here a set of links to Strassner's papers: http://citeseerx.ist.psu.edu/viewdoc/download?doi=3D10.1.1.495.4361&rep=3D= rep1&type=3Dpdf http://ieeexplore.ieee.org/xpl/login.jsp?tp=3D&arnumber=3D1015622&url=3Dh= ttp%3A%2F%2Fieeexplore.ieee.org%2Fxpls%2Fabs_all.jsp%3Farnumber%3D1015622= He also published a book (which I didn't read): http://dl.acm.org/citation.cfm?id=3D1206794 2) Then, I know this work from an IBM fellow that tries to map and=20 organize PBNM concepts on the security field http://researchweb.watson.ibm.com/people/d/dverma/papers/NetMgmtPolicy.pd= f 3) Then there are the RFC3198 and the PCIM series (RFC 3060, now RFC 3460= ). No recent works though. Apparently, this research field has moved from=20 academia to industry. Please let me know if you further details or if I didn't interpret=20 correctly the "Security Management" field. Regards, Aldo On 06/10/2015 17:56, Linda Dunbar wrote: > Diego: Thank you very much for relaying Aldo=92s comments. That is very= > useful. > > Aldo: Can you suggest some references for the =93Security Management=94= ? > > Bear in mind that I2NSF is not to tackle the general policies (which > belongs to SUPA WG). > > I2NSF is to open a hole for clients/applications to inform to Flow-base= d > NSFs to inform them the rules for treating traffic traversing through. > > Using PCIM (RFC3060 which the ITU-T X.1036 was based on) as a basis > would be a good idea. However, RFC3060 was created for general network > policies for Directory Enabled Network, in some aspects more than what > I2NSF needs, and in other aspects needs extension. Especially need > extension on the Policy Context (i.e. the directions, the time, and > other contextual events that governs the policies to NSFs). E.g. > > *From:*DIEGO LOPEZ GARCIA [mailto:diego.r.lopez@telefonica.com] > *Sent:* Tuesday, October 06, 2015 6:07 AM > *To:* Linda Dunbar > *Cc:* Loa Andersson; Aldo Basile; i2nsf@ietf.org > *Subject:* Re: [I2nsf] What do you people think of using OpenStack's > Group Based Policy to describe I2NSF Service Layer Rules? > > Hi Linda, > > I have been talking about this with one of the policy experts in the > SECURED project (Aldo Basile, I have put him in Cc: so you can identify= > him, though he is in the I2NSF list as well=85) and these are his comme= nts: > > 8<=97 > > In my understanding, OpenStack Group Policies are a simplified yet > generic way to associate iptables-like rules, the syntax is very > similar. > It is network management rather then security management. You can > express simple network policies (commands) and associate to network= > nodes and groups. > > GBP is not a generic framework for expressing policies. > Something is general (like the definition of rules as > (classifier,action)) but it requires several extensions that, in th= e > end, when completed will lead to PCIM or SG17-like models. > > Thus, in my opinion, SG17/PCIM are certainly a better starting > point, and also easier to push SECURED results. > > "Policy Classifier" is another way to tell 'matching conditions' (a= s > networking people likes the word classifier, for me a classifier is= > something more intelligent). > > Conditions available on OpenStack Group Policies are now a very > limited subset of l4 filtering (they don't even cover packet > filters). However, the model (condition,action) is general enough t= o > cope with future needs (by adding more classifiers). > > There is no way to categorize policies (thus no capabilities no eas= y > link to NSF categorization for interoperability). > > Then, no resolution strategies, no default actions, no priorities, > no other sophisticated ways to express policies. > > 8<=97 > > I=92ll let Aldo to express his views in more detail, but my position is= > that we should consider an existing general framework as starting point= , > and that PCIM (see http://www.dmtf.org/standards/policy) is the most > promising one. > > Be goode, > > On 5 Oct 2015, at 23:45 , Linda Dunbar > wrote: > > Thanks to Loa and Diego for the comments. > > Here are some pros and cons of using Open Stack Group Based Policy:= > > Pros: > > =B7There are running codes (open sourced code) > > Cons: > > =B7The OpenStack's group based policy is very much Neutron port > oriented. It is not straight forward for an environment that is not= > based on OpenStack Neutron. > > =B7They are not designed for expressing rules to Flow-based NSF on = how > to treat client/applications traffic. The current set is not > complete, a lot more need to be added. > > =B7There are other "Group Based Policy", e.g. Window's Group Policy= , > which are quite different from the OpenStack=92s Group Based Policy= =2E > > =B7May cause confusion in industry if calling =93Group Based Policy= =94 for > I2NSF Service Layer > > However, the notation of Groups, Target, Context and action do cove= r > what is needed for clients/applications to express the rules on how= > their flows can be treated by the Flow-Based NSFs in networks. And > they can be mapped to the Capability layer=92s > Subject-Object-Action-Function=94 paradigm. > > To avoid the confusion, it might be better to avoid using the term > =93Group based policy=94 (but inherent their concept only). > > For example, =93group=94 can be represented by =93Composite > Endpoints/Targets=94 or Endpoint Container (if using SUPA language)= , > where an =93Endpoint=94 can be a subnet, a set of hosts or applicat= ions, > etc. > > =B7Composite Endpoint (CEP). Logical combination of endpoint > descriptor IDs, where descriptor can be subnet, set of hosts, or > applications. > > =B7Endpoint Descriptor (EPD). Each endpoint descriptor has a type a= nd > value that are used to partially identify the endpoint. The type of= > the Endpoint Descriptor may be a base networking identifier, such a= s > an IP address, or a user-defined type. The value may be a single > value, a range of values, or a group of values. > > =B7Target. This is used by the application client to establish > communications over the network. A Target is mapped to a > physical/logical ingress port, or a physical/logical egress port. > > =B7Policy Rule Set. A Policy Rule Set is used to determine how the > traffic between a pair of Target Groups is to be treated. A Policy > Rule Set consists of one or more Policy Rules. > > =B7Policy Rule. A Policy Rule consists of a Policy context and a se= t > of Actions to be applied to the traffic. > > =B7Policy Context. Context that describes when a Policy Rule is to = be > applied. It is expressed as a direction, a list of L4 ports, time > range, and a protocol. > > =B7Policy Action. This is the action applied to the traffic that > matches the classifier. An action may be a simple ACL action (i.e. > allow, deny, mirroring), applying a well known statistics functions= > (e.g. X minutes count, Y hours court), applying client specified > functions (with URL provided), or may refer to an ordered sequence > of functions (i.e., a service chain). > > Comments are greatly appreciated. > > Linda > > -----Original Message----- > From: Loa Andersson [mailto:loa@pi.nu] > Sent: Friday, October 02, 2015 12:18 AM > To: DIEGO LOPEZ GARCIA; Linda Dunbar > Cc:i2nsf@ietf.org > Subject: Re: [I2nsf] What do you people think of using OpenStack's > Group Based Policy to describe I2NSF Service Layer Rules? > > Linda and Diego, > > This is said by someone that is not familiar with Open Stack or the= > Group Based Policy. > > I'm somewhat on the same page as Diego, at least in the same book. > > If we want to use OpenStack's Group Based Policy to describe I2NSF= > Service Layer Rules, the case for this has to be made much better. > > What are the pros and cons? Are there viable alternatives? > > /Loa > > On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: > > > Hi Linda, > > > > > > I am not completely sure that the current networking model of > > > OpenStack, that is reflected in the rule targets (either the PTG = and > > > the Target > > > itself) does cover all the potential semantics for general securi= ty > > > functions. The same concern applies to Policy Classifier, as they= seem > > > very much associated with a particular implementation model and, = what > > > is more, with a limited network model. > > > > > > Be goode, > > > > > > > > >> On 1 Oct 2015, at 23:32 , Linda Dunbar > > >> > wrote: > > >> > > >> I2NSF participants, > > >>https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-inter= face > > >> -im/specifies the structure for I2NSF capability layer rules. > > >> For the I2NSF simple service layer, what do people think of usin= g > > >> OpenStack=92s Group Policy structure ? > > >> If using OpenStack Group-based Policy (GBP) structure, the I2NSF= > > >> simple service layer can be expressed as =B7Policy Target Group = (PTG). > > >> This is a group of Targets to which a traffic policy can be appl= ied. > > >> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet= > > >> (i.e. with private address prefix), a subnet with public address= > > >> families, or any combination of them with logical operators (Log= ical > > >> AND, OR, or NOT). A PTG references one or more Policy Rule Sets = that > > >> it consumes or provides. > > >> =B7Target. This is used by the application client to establish > > >> communications over the network. A Target is mapped to a single > > >> Neutron Port, a physical/logical ingress port, or a physical/log= ical > > >> egress port. > > >> =B7Policy Rule Set. A Policy Rule Set is used to determine how t= he > > >> traffic between a pair of Target Groups is to be treated. A Poli= cy > > >> Rule Set consists of one or more Policy Rules. > > >> =B7Policy Rule. A Policy Rule consists of a Traffic Classifier a= nd a > > >> set of Actions to be applied to the traffic. > > >> =B7Policy Classifier. A traffic classifier describes the traffic= to > > >> which a Policy Rule is to be applied. It is expressed as a direc= tion, > > >> a list of L4 ports, time range, and a protocol. > > >> =B7Policy Action. This is the action applied to the traffic that= > > >> matches the classifier. An action may be a simple ACL action (i.= e. > > >> allow, deny, mirroring), applying a well known statistics functi= ons > > >> (e.g. X minutes count, Y hours court), applying client specified= > > >> functions (with URL provided), or may refer to an ordered sequen= ce of > > >> functions (i.e., a service chain). > > >> If you have concern of using OpenStack Group Based Policies, ple= ase > > >> let the group know. > > >> Thanks, Linda > > >> _______________________________________________ > > >> I2nsf mailing list > > >>I2nsf@ietf.org > > >>https://www.ietf.org/mailman/listinfo/i2nsf > > > > > > -- > > > "Esta vez no fallaremos, Doctor Infierno" > > > > > > Dr Diego R. Lopez > > > Telefonica I+D > > >http://people.tid.es/diego.lopez/ > > > > > > e-mail:diego.r.lopez@telefonica.com > > > Tel: +34 913 129 041 > > > Mobile: +34 682 051 091 > > > ---------------------------------- > > > > > > > > > -----------------------------------------------------------------= ----- > > > -- > > > > > > Este mensaje y sus adjuntos se dirigen exclusivamente a su > > > destinatario, puede contener informaci=F3n privilegiada o confide= ncial y > > > es para uso exclusivo de la persona o entidad de destino. Si no e= s > > > usted. el destinatario indicado, queda notificado de que la lectu= ra, > > > utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede e= star > > > prohibida en virtud de la legislaci=F3n vigente. Si ha recibido e= ste > > > mensaje por error, le rogamos que nos lo comunique inmediatamente= por > > > esta misma v=EDa y proceda a su destrucci=F3n. > > > > > > The information contained in this transmission is privileged and > > > confidential information intended only for the use of the individ= ual > > > or entity named above. If the reader of this message is not the > > > intended recipient, you are hereby notified that any disseminatio= n, > > > distribution or copying of this communication is strictly prohibi= ted. > > > If you have received this transmission in error, do not read it. > > > Please immediately reply to the sender that you have received thi= s > > > communication in error and then delete it. > > > > > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > > > destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confid= encial e =E9 > > > para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9= vossa > > > senhoria o destinat=E1rio indicado, fica notificado de que a leit= ura, > > > utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o p= ode estar proibida > > > em virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem po= r erro, > > > rogamos-lhe que nos o comunique imediatamente por esta mesma via = e > > > proceda a sua destrui=E7=E3o > > > > > > > > > _______________________________________________ > > > I2nsf mailing list > > >I2nsf@ietf.org > > >https://www.ietf.org/mailman/listinfo/i2nsf > > > > > -- > "Esta vez no fallaremos, Doctor Infierno" > > Dr Diego R. Lopez > Telefonica I+D > http://people.tid.es/diego.lopez/ > > e-mail: diego.r.lopez@telefonica.com > Tel: +34 913 129 041 > Mobile: +34 682 051 091 > ---------------------------------- > > -----------------------------------------------------------------------= - > > > Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario= , > puede contener informaci=F3n privilegiada o confidencial y es para uso > exclusivo de la persona o entidad de destino. Si no es usted. el > destinatario indicado, queda notificado de que la lectura, utilizaci=F3= n, > divulgaci=F3n y/o copia sin autorizaci=F3n puede estar prohibida en vir= tud > de la legislaci=F3n vigente. Si ha recibido este mensaje por error, le > rogamos que nos lo comunique inmediatamente por esta misma v=EDa y proc= eda > a su destrucci=F3n. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual or= > entity named above. If the reader of this message is not the intended > recipient, you are hereby notified that any dissemination, distribution= > or copying of this communication is strictly prohibited. If you have > received this transmission in error, do not read it. Please immediately= > reply to the sender that you have received this communication in error > and then delete it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confidencial= e =E9 > para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa= > senhoria o destinat=E1rio indicado, fica notificado de que a leitura, > utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode es= tar proibida em > virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro, > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > proceda a sua destrui=E7=E3o > > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > --------------ms050400030109090902020503 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DtkwggR4MIIDYKADAgECAgECMA0GCSqGSIb3DQEBBQUAMEMxEDAOBgNVBAoTB0V1cm9QS0kx FTATBgNVBAsTDEV1cm9QS0kgcm9vdDEYMBYGA1UEAxMPRXVyb1BLSSByb290IENBMB4XDTEw MTIxODEzNDY0N1oXDTIwMTIzMTIzNTk1OVowVDELMAkGA1UEBhMCSVQxEDAOBgNVBAoTB0V1 cm9QS0kxFjAUBgNVBAsTDUV1cm9QS0kgSXRhbHkxGzAZBgNVBAMTEkV1cm9QS0kgSXRhbGlh biBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJfEyV1trtaj8Z9P5ciATbx9 UuSwTN0pCxaDRz0sfE2Ymfn+5yl3pzdodOyoSEEZsnEJ9xUKlVM5vH7lesyvCXttCb6f4rC/ 3z3D0G7uRtfomh+7lP/RbquzABS/j3fkriRkhFdEZu4xDSN+uPap2S2b18sOE6NpKkAZQlCS 8Un8ou+KyKqhA1+Xopgn/givJlPYLczmWQgodMoRVNyB0doIsqWrIp0g7LOTzvi21S4eFejT FOaGcdrceRSmnmCSIVEahS8UVTJX9hBm3uCzrgJWr9RmbfLnWaIh/2/g/Y+4W3epzR7po0vJ wt4Ze2Mm8RYMDJ6UT3N0AyjBo+Mn+iECAwEAAaOCAWQwggFgMA8GA1UdEwEB/wQFMAMBAf8w DgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTQdeU/68q6a5ZRfCClmL3zZ9O0SjAfBgNVHSME GDAWgBTwcRwoM1i3xca1w79RdahQ9JzSNDBJBgNVHSAEQjBAMD4GCisGAQQBqQcBAQIwMDAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcHMvMS4yLzBxBggrBgEF BQcBAQRlMGMwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmV1cm9wa2kub3JnMDwGCCsGAQUF BzAChjBodHRwOi8vd3d3LmV1cm9wa2kub3JnL2NhL2NlcnRzL2V1cm9wa2lfcm9vdC5jZXIw PwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcmwvZXVyb3Br aV9yb290LmNybDANBgkqhkiG9w0BAQUFAAOCAQEAhDLeMx/dP2whwGb7ITa6sI6JUQZ3H9DQ ApdTGfz6iLIOiZeeoUt/XE9kYgcFp23IC1+wQzsfY6wRWKStF4lscqDSlNnw4yyaVYkogY3B k8pE7QxNXIlgsFk4IMnbDCamCon/pxMGPV8ruBwVxFjp4PctlbububbB10CixAgbzcDFNvLE YUCJCV8V/iCAIs/w3MYk1NsAz/TfoCMXBrfn7ik69ImKdVOrdxwtyHs7vOx9A3xxCd5XCAc5 24mMC5Cenj+KQbh+dczXRIQAkEFbBEVrc8ytQv+NRT4FbqhS0FL1E2zkPTNtGdK4yyrWd/K8 Pa1s3h2GtamUiD8Mdj0MMzCCBPMwggPboAMCAQICAQEwDQYJKoZIhvcNAQEFBQAwVDELMAkG A1UEBhMCSVQxEDAOBgNVBAoTB0V1cm9QS0kxFjAUBgNVBAsTDUV1cm9QS0kgSXRhbHkxGzAZ BgNVBAMTEkV1cm9QS0kgSXRhbGlhbiBDQTAeFw0xMDEyMTgxMzU4MjJaFw0yMDEyMzEyMzU5 NTlaMGUxCzAJBgNVBAYTAklUMR4wHAYDVQQKExVQb2xpdGVjbmljbyBkaSBUb3Jpbm8xNjA0 BgNVBAMTLVBvbGl0ZWNuaWNvIGRpIFRvcmlubyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhpj5X8VQEnxMEjxZAwHADWcxXc/Tuf CqQhBypLMJx+aowv9Qfr96jrXwpD/OKl6cz3Bmv0s/4oP5+ode2bWFXsVEKWR3J8vCusF1Nv tPI16g8t5numZ+JGZqC3ZpvUTNsODUxb+M5L4T2zNtO4GqZlgDhB9QOKq+71LeKp+R3q5cIX tSBPWYiH6EPbzQJQdxcbh3d9d+rxmtW1W4LmGqjBL2YGTezsbagbsHmSMX4Djw7TyuFR9qkB NhLLiHizz0AdNqW95XY+/5GzTZak7k5FGxwwzR/sN6Q/Sj1xHcWNw+ROo1aUtf5k5jVQaScH DjixGbqLQFf/2fItHfCRMMcCAwEAAaOCAb0wggG5MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMB0GA1UdDgQWBBTNm1tbnup2IcQQaOjSLTfbHy/I5DAfBgNVHSMEGDAWgBTQ deU/68q6a5ZRfCClmL3zZ9O0SjCBkQYDVR0gBIGJMIGGMD4GCisGAQQBqQcBAQIwMDAuBggr BgEFBQcCARYiaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcHMvMS4yLzBEBgorBgEEAakH AgECMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuaXRhbHkuZXVyb3BraS5vcmcvY2EvY3Bz LzEuMi8wfgYIKwYBBQUHAQEEcjBwMCkGCCsGAQUFBzABhh1odHRwOi8vb2NzcC5pdGFseS5l dXJvcGtpLm9yZzBDBggrBgEFBQcwAoY3aHR0cDovL3d3dy5pdGFseS5ldXJvcGtpLm9yZy9j YS9jZXJ0cy9ldXJvcGtpX2l0YWx5LmNlcjBCBgNVHR8EOzA5MDegNaAzhjFodHRwOi8vd3d3 Lml0YWx5LmV1cm9wa2kub3JnL2NhL2NybC9pdGFseV9jcmwuY3JsMA0GCSqGSIb3DQEBBQUA A4IBAQBTVJWIUBlbjxFQTkjRLgvNPt03m2NIhgCt+SIIFuC4rhB10VqHisAW68hXxHEfFZ06 LxeMLn3oGnPriWQdpPkC7MAt87iSyIG6Ofd1vN0oUhuWgiYqDKEOV/WX3fo9QXyFf8wEcoaK xL4Au3aBnwVcRt6gJkBGG6J6LYc+FCVpXdxnd85sKaqTTCxtiTtwSVjqwLp/Ulj1USzhP/dj 6v40zAei5LHtCjSUwWzRz1M8nTsz1LTwOybzA582+i/fIVVaiqMZicNwtrFfzTpf7bk30unZ 2cqWbLUWjldCUloD+DwKnD7XtDeNIfKuA/0XYOT+xHFJJYGai+e3MlAgkK6PMIIFYjCCBEqg AwIBAgICAsUwDQYJKoZIhvcNAQEFBQAwZTELMAkGA1UEBhMCSVQxHjAcBgNVBAoTFVBvbGl0 ZWNuaWNvIGRpIFRvcmlubzE2MDQGA1UEAxMtUG9saXRlY25pY28gZGkgVG9yaW5vIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MB4XDTEwMTIyMTE0NDgzM1oXDTE1MTIzMTIzNTk1OVowYDEL MAkGA1UEBhMCSVQxHjAcBgNVBAoTFVBvbGl0ZWNuaWNvIGRpIFRvcmlubzEYMBYGA1UEAxMP Q2F0YWxkbyAgQmFzaWxlMRcwFQYKCZImiZPyLGQBARMHZDAxMTY0OTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKtDe6utdQqaz2Cx3T1e6kmwNFj7uqF+4H+f5/vMLcMyK1sZ whhEgUgGbwX5zYwRk+c6E2WIbY1Sm1U0CUr/Epe0qwA5BtobqftIFryKwuxh7aF8gftNvaqo AqAMhO8BgqKjWFu4gypu6nB/JHMTSaetA3Zz0U4EI1kqIXmHZq430in17glcHbPKw9TKz8Lb l/huh1hKKcgPFIA65HEKzqnXKFIADatuu20OLQOaNIIcXZSIxwSgJQIcg9XFy/SoVnfgNcmm D3cJk9NRW3GnOBCV5xqdpN7hjrsUZ9rOnbBysefco+v3dGMwbJlibkgpsVEDHAGVhjW2LePy qSC2el0CAwEAAaOCAh8wggIbMA4GA1UdDwEB/wQEAwID+DAnBgNVHSUEIDAeBggrBgEFBQcD AgYIKwYBBQUHAwMGCCsGAQUFBwMEMCMGA1UdEQQcMBqBGGNhdGFsZG8uYmFzaWxlQHBvbGl0 by5pdDAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQx26UQpK+ZJUAFyKM3DLiN9yVSqjAfBgNV HSMEGDAWgBTNm1tbnup2IcQQaOjSLTfbHy/I5DCBywYDVR0gBIHDMIHAMD4GCisGAQQBqQcB AQIwMDAuBggrBgEFBQcCARYiaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcHMvMS4yLzBE BgorBgEEAakHAgECMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuaXRhbHkuZXVyb3BraS5v cmcvY2EvY3BzLzEuMi8wOAYKKwYBBAGVYgECAjAqMCgGCCsGAQUFBwIBFhxodHRwOi8vY2Eu cG9saXRvLml0L2Nwcy8yLjIvMGYGCCsGAQUFBwEBBFowWDAhBggrBgEFBQcwAYYVaHR0cDov L29jc3AucG9saXRvLml0MDMGCCsGAQUFBzAChidodHRwOi8vY2EucG9saXRvLml0L2NlcnRz L3BvbGl0b19jYS5jZXIwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NhLnBvbGl0by5pdC9j cmwvcG9saXRvX2NybC5jcmwwDQYJKoZIhvcNAQEFBQADggEBAAkZAW4SXyW/USqZffb1YdPd JFDlROWulMYv51+oO7r8uAN4iR/9J4/a4/I84xknlZY/0uu8gGInW6VdXqQHnmWyx2YjK8ar 7UJAJiZjGrPUztW0mOqfnb6BmBIJs0pf+JROi0L2pV85NTw3K74q4DDrlque3C1p7+zvflDw JDQ5M/NGB0AjQZthG16x1+r/SjFd4vyWg7v8rWsS1TCe4dDzhn4GGdpJG1skPT2AflBCouJP mSnge6f2QFNmS4w406wYRgFql8bv9n6k4rQF5v/KBmRWjOo8xNkLkjAtv0jMGAOydo6+yy8f Y+2flcI5oqfCLaI6KJVywWb4CXxd68ExggNrMIIDZwIBATBrMGUxCzAJBgNVBAYTAklUMR4w HAYDVQQKExVQb2xpdGVjbmljbyBkaSBUb3Jpbm8xNjA0BgNVBAMTLVBvbGl0ZWNuaWNvIGRp IFRvcmlubyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQICAsUwDQYJYIZIAWUDBAIBBQCgggHR MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTAwODE1MDYz MFowLwYJKoZIhvcNAQkEMSIEINfbFaGkCgYsreaJtecV2x9cnN6GAn3Qe+sjo0M7XD2KMGwG CSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAO BggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgw egYJKwYBBAGCNxAEMW0wazBlMQswCQYDVQQGEwJJVDEeMBwGA1UEChMVUG9saXRlY25pY28g ZGkgVG9yaW5vMTYwNAYDVQQDEy1Qb2xpdGVjbmljbyBkaSBUb3Jpbm8gQ2VydGlmaWNhdGlv biBBdXRob3JpdHkCAgLFMHwGCyqGSIb3DQEJEAILMW2gazBlMQswCQYDVQQGEwJJVDEeMBwG A1UEChMVUG9saXRlY25pY28gZGkgVG9yaW5vMTYwNAYDVQQDEy1Qb2xpdGVjbmljbyBkaSBU b3Jpbm8gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCAgLFMA0GCSqGSIb3DQEBAQUABIIBAB3g cmvCZbDBvDJsMy0ubKGN36jXaiZYwE4ksiSme7wu6lk0VIHA8P60LrajbyyzNYJOBRvhj/1w FW2A+VoULudblQasIWVX/euuYKhJQcSGGHwPX+X9LGKc+8lMzyqMfmgnMDlb16JUmx3J0yEl CBC/xyBSxwiDVhwXHM5Ed9TN3l4LLO9Fn1M5+FeOJeaegJc2LFQn4T1yQc117KRHa9EB0N0+ h/O03gRfu3VFQ1aP/JU6Ys3PUQrxgEDJ4DNTxeCaEJyRyiZx6CyI7rQeeailRBkwtNAoZgxq 0HDViYqL1wamydyByi6PCHJ5Uz9hg6wsW8WSpFNn1m8J+SHDT58AAAAAAAA= --------------ms050400030109090902020503-- From nobody Thu Oct 8 08:18:03 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E24821A6F8E for ; Thu, 8 Oct 2015 08:18:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.031 X-Spam-Level: X-Spam-Status: No, score=-2.031 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 82PbgA912D6E for ; Thu, 8 Oct 2015 08:17:57 -0700 (PDT) Received: from fm2nodo1.polito.it (fm2nodo1.polito.it [130.192.180.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B90731A898B for ; Thu, 8 Oct 2015 08:17:56 -0700 (PDT) Received: from polito.it (frontmail2.polito.it [130.192.180.42]) by fm2nodo1.polito.it with ESMTP id t98FHic6014097-t98FHic8014097 (version=TLSv1.0 cipher=AES128-SHA bits=128 verify=CAFAIL); Thu, 8 Oct 2015 17:17:44 +0200 X-AttachExt: p7s X-ExtScanner: Niversoft's FindAttachments (free) Received: from [151.33.118.4] (account d011649@polito.it HELO [192.168.1.3]) by polito.it (CommuniGate Pro SMTP 6.1.5) with ESMTPSA id 39454820; Thu, 08 Oct 2015 17:17:32 +0200 To: "Xialiang (Frank)" , DIEGO LOPEZ GARCIA , Linda Dunbar References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> From: Aldo Basile Message-ID: <561688F7.10406@polito.it> Date: Thu, 8 Oct 2015 17:17:11 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms050602060708090803060208" X-FEAS-SYSTEM-WL: 130.192.180.42 Archived-At: Cc: "i2nsf@ietf.org" , Loa Andersson Subject: Re: [I2nsf] =?utf-8?b?562U5aSNOiBXaGF0IGRvIHlvdSBwZW9wbGUgdGhpbmsg?= =?utf-8?q?of_using_OpenStack=27s_Group_Based_Policy_to_describe_I2NSF_Ser?= =?utf-8?q?vice_Layer_Rules=3F?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 15:18:01 -0000 This is a cryptographically signed message in MIME format. --------------ms050602060708090803060208 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable Dear all, my 2 cents... in a long boring email... I agree on the Frank Xialiang comment on the need for a clear=20 specification of the semantics. However, semantics must is a meta-layer=20 built on the syntax. In my opinion, PCIM is more than enough to express the syntax of network = level policies (while it is not flexible enough for general policies).=20 So PCIM can be a valid starting point. Moreover, on paper, PCIM has been = designed also to cope with event-based architectures, which are often=20 needed for sophisticated management. After several analyses, I pushed to adopt it in three of the projects=20 where I worked and in the end we were satisfied by its flexibility and=20 expressiveness. There is one more thing to consider, as PCIM is part of CIM, it is=20 possible to borrow, from that incredibly huge framework, classes and=20 associations to describe NSFs and their parts (extensions will be=20 certainly needed, but all network components are almost there). As far as I remember, the CIM parts about virtualization are not mature=20 enough (I checked a couple of years ago). Thus, in a previous project=20 we decided to borrow concepts from libvirt. [I don't know if this can be interesting to I2NSF, I imagine it is a=20 completely different scenario] Unfortunately, PCIM is not perfect and in my opinion it has some=20 inconsistency, probably due to difficulties in reconciling the needs=20 from different vendors (my favourite example is the introduction of the=20 FilterEntry/FilterList classes). --- After having read (guess) all the I2NSF-related drafts, I like the idea=20 of using a Subject-Object-Function-Action paradigm to add the needed=20 semantics (draft-lopez-i2nsf-packet-00). Because, in the end (but correct me if I'm wrong), some of the core=20 problems I2NSF wants to address are: 1) determining what an NSF can do for implementing my security=20 requirements, and 2) generating a configuration that NSFs can properly consume. "Software interfaces and data models for controlling and monitoring=20 aspects of physical and virtual NSFs" could be built on top of the=20 results to achieve these two points. Thus, in my understanding, - an Action determines what an NSFs can do for me (in a packets-based=20 paradigm) - Subjects (which are named 'Match' in the Xie draft) are in my=20 understanding stateless conditions (available in the rules to select the = packets to which actions apply). - Objects are stateful conditions (at all ISO/OSI stack layers) - Functions are NSF specific properties. I'm not sure how Functions=20 relate to Subjects, Objects, and Actions (if they may be one of the=20 three aspects or a separate concepts). In case Functions may also be All these concepts can be mapped (with limited effort) on PCIM.=20 PolicyVariables can be associated to functionality to characterize 'what = an NSF can do for me', thus semantics and NSF identification with a sort = of capability matching. The same consideration applies to the Xie proposal=20 (draft-xia-i2nsf-capability-interface-im-02), the proposed "Overall=20 Information Model for I2NSF Capability Interface" seems to me easily=20 mappable on PCIM conditions and actions (again, with limited effort). By following your discussions, I'll also try to better understand what=20 you exactly mean with "Context" and its relations to stateful conditions = and their verification. I don't remember (by heart, but I need to check) some standards to=20 describe this information. That is, I don't remember any other=20 (network-level) security standard/format/language properly covering=20 stateful data management and relations with packet matching. As you noticed, I tend to write to much and I tend to invade spaces that = are not mine with absolute judgments and suggestions. So, just take it=20 my personal opinion as I really don't want to affect any decision in=20 this working group. I only hope I can be useful in providing you information, as I had to=20 deal with similar problems in the past. Regards, Aldo On 08/10/2015 09:26, Xialiang (Frank) wrote: > Hi all, > > My understanding is that PCIM/SG17 is mainly related to the syntax of > the information model, and is possible to be a starting point. > > In addition, the other important point we need to consider is the > semantic aspects of the information model: which contents can be in the= > security rule and in which way they are categorized and organized? > > There are many possible ways, such as: =E2=80=9C5W1H=E2=80=9D, > =E2=80=9Csubject-object-action-function=E2=80=9D, hierarchical processi= ng, or > combination of them. > > Comments are greatly appreciated! > > B.R. > > Frank > > *=E5=8F=91=E4=BB=B6=E4=BA=BA:*I2nsf [mailto:i2nsf-bounces@ietf.org] *=E4= =BB=A3=E8=A1=A8 *DIEGO LOPEZ GARCIA > *=E5=8F=91=E9=80=81=E6=97=B6=E9=97=B4:*2015=E5=B9=B410=E6=9C=886=E6=97=A5= 19:07 > *=E6=94=B6=E4=BB=B6=E4=BA=BA:*Linda Dunbar > *=E6=8A=84=E9=80=81:*i2nsf@ietf.org; Aldo Basile; Loa Andersson > *=E4=B8=BB=E9=A2=98:*Re: [I2nsf] What do you people think of using Open= Stack's Group > Based Policy to describe I2NSF Service Layer Rules? > > Hi Linda, > > I have been talking about this with one of the policy experts in the > SECURED project (Aldo Basile, I have put him in Cc: so you can identify= > him, though he is in the I2NSF list as well=E2=80=A6) and these are his= comments: > > 8<=E2=80=94 > > In my understanding, OpenStack Group Policies are a simplified yet > generic way to associate iptables-like rules, the syntax is very > similar. > It is network management rather then security management. You can > express simple network policies (commands) and associate to network= > nodes and groups. > > GBP is not a generic framework for expressing policies. > Something is general (like the definition of rules as > (classifier,action)) but it requires several extensions that, in th= e > end, when completed will lead to PCIM or SG17-like models. > > Thus, in my opinion, SG17/PCIM are certainly a better starting > point, and also easier to push SECURED results. > > "Policy Classifier" is another way to tell 'matching conditions' (a= s > networking people likes the word classifier, for me a classifier is= > something more intelligent). > > Conditions available on OpenStack Group Policies are now a very > limited subset of l4 filtering (they don't even cover packet > filters). However, the model (condition,action) is general enough t= o > cope with future needs (by adding more classifiers). > > There is no way to categorize policies (thus no capabilities no eas= y > link to NSF categorization for interoperability). > > Then, no resolution strategies, no default actions, no priorities, > no other sophisticated ways to express policies. > > 8<=E2=80=94 > > I=E2=80=99ll let Aldo to express his views in more detail, but my posit= ion is > that we should consider an existing general framework as starting point= , > and that PCIM (see http://www.dmtf.org/standards/policy) is the most > promising one. > > Be goode, > > On 5 Oct 2015, at 23:45 , Linda Dunbar > wrote: > > Thanks to Loa and Diego for the comments. > > Here are some pros and cons of using Open Stack Group Based Policy:= > > Pros: > > =C2=B7There are running codes (open sourced code) > > Cons: > > =C2=B7The OpenStack's group based policy is very much Neutron port > oriented. It is not straight forward for an environment that is not= > based on OpenStack Neutron. > > =C2=B7They are not designed for expressing rules to Flow-based NSF = on how > to treat client/applications traffic. The current set is not > complete, a lot more need to be added. > > =C2=B7There are other "Group Based Policy", e.g. Window's Group Pol= icy, > which are quite different from the OpenStack=E2=80=99s Group Based = Policy. > > =C2=B7May cause confusion in industry if calling =E2=80=9CGroup Bas= ed Policy=E2=80=9D for > I2NSF Service Layer > > However, the notation of Groups, Target, Context and action do cove= r > what is needed for clients/applications to express the rules on how= > their flows can be treated by the Flow-Based NSFs in networks. And > they can be mapped to the Capability layer=E2=80=99s > Subject-Object-Action-Function=E2=80=9D paradigm. > > To avoid the confusion, it might be better to avoid using the term > =E2=80=9CGroup based policy=E2=80=9D (but inherent their concept on= ly). > > For example, =E2=80=9Cgroup=E2=80=9D can be represented by =E2=80=9C= Composite > Endpoints/Targets=E2=80=9D or Endpoint Container (if using SUPA lan= guage), > where an =E2=80=9CEndpoint=E2=80=9D can be a subnet, a set of hosts= or applications, > etc. > > =C2=B7Composite Endpoint (CEP). Logical combination of endpoint > descriptor IDs, where descriptor can be subnet, set of hosts, or > applications. > > =C2=B7Endpoint Descriptor (EPD). Each endpoint descriptor has a typ= e and > value that are used to partially identify the endpoint. The type of= > the Endpoint Descriptor may be a base networking identifier, such a= s > an IP address, or a user-defined type. The value may be a single > value, a range of values, or a group of values. > > =C2=B7Target. This is used by the application client to establish > communications over the network. A Target is mapped to a > physical/logical ingress port, or a physical/logical egress port. > > =C2=B7Policy Rule Set. A Policy Rule Set is used to determine how t= he > traffic between a pair of Target Groups is to be treated. A Policy > Rule Set consists of one or more Policy Rules. > > =C2=B7Policy Rule. A Policy Rule consists of a Policy context and a= set > of Actions to be applied to the traffic. > > =C2=B7Policy Context. Context that describes when a Policy Rule is = to be > applied. It is expressed as a direction, a list of L4 ports, time > range, and a protocol. > > =C2=B7Policy Action. This is the action applied to the traffic that= > matches the classifier. An action may be a simple ACL action (i.e. > allow, deny, mirroring), applying a well known statistics functions= > (e.g. X minutes count, Y hours court), applying client specified > functions (with URL provided), or may refer to an ordered sequence > of functions (i.e., a service chain). > > Comments are greatly appreciated. > > Linda > > -----Original Message----- > From: Loa Andersson [mailto:loa@pi.nu] > Sent: Friday, October 02, 2015 12:18 AM > To: DIEGO LOPEZ GARCIA; Linda Dunbar > Cc:i2nsf@ietf.org > Subject: Re: [I2nsf] What do you people think of using OpenStack's > Group Based Policy to describe I2NSF Service Layer Rules? > > Linda and Diego, > > This is said by someone that is not familiar with Open Stack or the= > Group Based Policy. > > I'm somewhat on the same page as Diego, at least in the same book. > > If we want to use OpenStack's Group Based Policy to describe I2NSF= > Service Layer Rules, the case for this has to be made much better. > > What are the pros and cons? Are there viable alternatives? > > /Loa > > On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: > > > Hi Linda, > > > > > > I am not completely sure that the current networking model of > > > OpenStack, that is reflected in the rule targets (either the PTG = and > > > the Target > > > itself) does cover all the potential semantics for general securi= ty > > > functions. The same concern applies to Policy Classifier, as they= seem > > > very much associated with a particular implementation model and, = what > > > is more, with a limited network model. > > > > > > Be goode, > > > > > > > > >> On 1 Oct 2015, at 23:32 , Linda Dunbar > > >> > wrote: > > >> > > >> I2NSF participants, > > >>https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-inter= face > > >> -im/specifies the structure for I2NSF capability layer rules. > > >> For the I2NSF simple service layer, what do people think of usin= g > > >> OpenStack=E2=80=99s Group Policy structure ? > > >> If using OpenStack Group-based Policy (GBP) structure, the I2NSF= > > >> simple service layer can be expressed as =C2=B7Policy Target Gro= up (PTG). > > >> This is a group of Targets to which a traffic policy can be appl= ied. > > >> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet= > > >> (i.e. with private address prefix), a subnet with public address= > > >> families, or any combination of them with logical operators (Log= ical > > >> AND, OR, or NOT). A PTG references one or more Policy Rule Sets = that > > >> it consumes or provides. > > >> =C2=B7Target. This is used by the application client to establis= h > > >> communications over the network. A Target is mapped to a single > > >> Neutron Port, a physical/logical ingress port, or a physical/log= ical > > >> egress port. > > >> =C2=B7Policy Rule Set. A Policy Rule Set is used to determine ho= w the > > >> traffic between a pair of Target Groups is to be treated. A Poli= cy > > >> Rule Set consists of one or more Policy Rules. > > >> =C2=B7Policy Rule. A Policy Rule consists of a Traffic Classifie= r and a > > >> set of Actions to be applied to the traffic. > > >> =C2=B7Policy Classifier. A traffic classifier describes the traf= fic to > > >> which a Policy Rule is to be applied. It is expressed as a direc= tion, > > >> a list of L4 ports, time range, and a protocol. > > >> =C2=B7Policy Action. This is the action applied to the traffic t= hat > > >> matches the classifier. An action may be a simple ACL action (i.= e. > > >> allow, deny, mirroring), applying a well known statistics functi= ons > > >> (e.g. X minutes count, Y hours court), applying client specified= > > >> functions (with URL provided), or may refer to an ordered sequen= ce of > > >> functions (i.e., a service chain). > > >> If you have concern of using OpenStack Group Based Policies, ple= ase > > >> let the group know. > > >> Thanks, Linda > > >> _______________________________________________ > > >> I2nsf mailing list > > >>I2nsf@ietf.org > > >>https://www.ietf.org/mailman/listinfo/i2nsf > > > > > > -- > > > "Esta vez no fallaremos, Doctor Infierno" > > > > > > Dr Diego R. Lopez > > > Telefonica I+D > > >http://people.tid.es/diego.lopez/ > > > > > > e-mail:diego.r.lopez@telefonica.com > > > Tel: +34 913 129 041 > > > Mobile: +34 682 051 091 > > > ---------------------------------- > > > > > > > > > -----------------------------------------------------------------= ----- > > > -- > > > > > > Este mensaje y sus adjuntos se dirigen exclusivamente a su > > > destinatario, puede contener informaci=C3=B3n privilegiada o conf= idencial y > > > es para uso exclusivo de la persona o entidad de destino. Si no e= s > > > usted. el destinatario indicado, queda notificado de que la lectu= ra, > > > utilizaci=C3=B3n, divulgaci=C3=B3n y/o copia sin autorizaci=C3=B3= n puede estar > > > prohibida en virtud de la legislaci=C3=B3n vigente. Si ha recibid= o este > > > mensaje por error, le rogamos que nos lo comunique inmediatamente= por > > > esta misma v=C3=ADa y proceda a su destrucci=C3=B3n. > > > > > > The information contained in this transmission is privileged and > > > confidential information intended only for the use of the individ= ual > > > or entity named above. If the reader of this message is not the > > > intended recipient, you are hereby notified that any disseminatio= n, > > > distribution or copying of this communication is strictly prohibi= ted. > > > If you have received this transmission in error, do not read it. > > > Please immediately reply to the sender that you have received thi= s > > > communication in error and then delete it. > > > > > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > > > destinat=C3=A1rio, pode conter informa=C3=A7=C3=A3o privilegiada = ou confidencial e =C3=A9 > > > para uso exclusivo da pessoa ou entidade de destino. Se n=C3=A3o = =C3=A9 vossa > > > senhoria o destinat=C3=A1rio indicado, fica notificado de que a l= eitura, > > > utiliza=C3=A7=C3=A3o, divulga=C3=A7=C3=A3o e/ou c=C3=B3pia sem au= toriza=C3=A7=C3=A3o pode estar proibida > > > em virtude da legisla=C3=A7=C3=A3o vigente. Se recebeu esta mensa= gem por erro, > > > rogamos-lhe que nos o comunique imediatamente por esta mesma via = e > > > proceda a sua destrui=C3=A7=C3=A3o > > > > > > > > > _______________________________________________ > > > I2nsf mailing list > > >I2nsf@ietf.org > > >https://www.ietf.org/mailman/listinfo/i2nsf > > > > > -- > "Esta vez no fallaremos, Doctor Infierno" > > Dr Diego R. Lopez > Telefonica I+D > http://people.tid.es/diego.lopez/ > > e-mail: diego.r.lopez@telefonica.com > Tel: +34 913 129 041 > Mobile: +34 682 051 091 > ---------------------------------- > > -----------------------------------------------------------------------= - > > > Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario= , > puede contener informaci=C3=B3n privilegiada o confidencial y es para u= so > exclusivo de la persona o entidad de destino. Si no es usted. el > destinatario indicado, queda notificado de que la lectura, utilizaci=C3= =B3n, > divulgaci=C3=B3n y/o copia sin autorizaci=C3=B3n puede estar prohibida = en virtud > de la legislaci=C3=B3n vigente. Si ha recibido este mensaje por error, = le > rogamos que nos lo comunique inmediatamente por esta misma v=C3=ADa y p= roceda > a su destrucci=C3=B3n. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual or= > entity named above. If the reader of this message is not the intended > recipient, you are hereby notified that any dissemination, distribution= > or copying of this communication is strictly prohibited. If you have > received this transmission in error, do not read it. Please immediately= > reply to the sender that you have received this communication in error > and then delete it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > destinat=C3=A1rio, pode conter informa=C3=A7=C3=A3o privilegiada ou con= fidencial e =C3=A9 > para uso exclusivo da pessoa ou entidade de destino. Se n=C3=A3o =C3=A9= vossa > senhoria o destinat=C3=A1rio indicado, fica notificado de que a leitura= , > utiliza=C3=A7=C3=A3o, divulga=C3=A7=C3=A3o e/ou c=C3=B3pia sem autoriza= =C3=A7=C3=A3o pode estar proibida em > virtude da legisla=C3=A7=C3=A3o vigente. Se recebeu esta mensagem por e= rro, > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > proceda a sua destrui=C3=A7=C3=A3o > > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > --------------ms050602060708090803060208 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DtkwggR4MIIDYKADAgECAgECMA0GCSqGSIb3DQEBBQUAMEMxEDAOBgNVBAoTB0V1cm9QS0kx FTATBgNVBAsTDEV1cm9QS0kgcm9vdDEYMBYGA1UEAxMPRXVyb1BLSSByb290IENBMB4XDTEw MTIxODEzNDY0N1oXDTIwMTIzMTIzNTk1OVowVDELMAkGA1UEBhMCSVQxEDAOBgNVBAoTB0V1 cm9QS0kxFjAUBgNVBAsTDUV1cm9QS0kgSXRhbHkxGzAZBgNVBAMTEkV1cm9QS0kgSXRhbGlh biBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJfEyV1trtaj8Z9P5ciATbx9 UuSwTN0pCxaDRz0sfE2Ymfn+5yl3pzdodOyoSEEZsnEJ9xUKlVM5vH7lesyvCXttCb6f4rC/ 3z3D0G7uRtfomh+7lP/RbquzABS/j3fkriRkhFdEZu4xDSN+uPap2S2b18sOE6NpKkAZQlCS 8Un8ou+KyKqhA1+Xopgn/givJlPYLczmWQgodMoRVNyB0doIsqWrIp0g7LOTzvi21S4eFejT FOaGcdrceRSmnmCSIVEahS8UVTJX9hBm3uCzrgJWr9RmbfLnWaIh/2/g/Y+4W3epzR7po0vJ wt4Ze2Mm8RYMDJ6UT3N0AyjBo+Mn+iECAwEAAaOCAWQwggFgMA8GA1UdEwEB/wQFMAMBAf8w DgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTQdeU/68q6a5ZRfCClmL3zZ9O0SjAfBgNVHSME GDAWgBTwcRwoM1i3xca1w79RdahQ9JzSNDBJBgNVHSAEQjBAMD4GCisGAQQBqQcBAQIwMDAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcHMvMS4yLzBxBggrBgEF BQcBAQRlMGMwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmV1cm9wa2kub3JnMDwGCCsGAQUF BzAChjBodHRwOi8vd3d3LmV1cm9wa2kub3JnL2NhL2NlcnRzL2V1cm9wa2lfcm9vdC5jZXIw PwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcmwvZXVyb3Br aV9yb290LmNybDANBgkqhkiG9w0BAQUFAAOCAQEAhDLeMx/dP2whwGb7ITa6sI6JUQZ3H9DQ ApdTGfz6iLIOiZeeoUt/XE9kYgcFp23IC1+wQzsfY6wRWKStF4lscqDSlNnw4yyaVYkogY3B k8pE7QxNXIlgsFk4IMnbDCamCon/pxMGPV8ruBwVxFjp4PctlbububbB10CixAgbzcDFNvLE YUCJCV8V/iCAIs/w3MYk1NsAz/TfoCMXBrfn7ik69ImKdVOrdxwtyHs7vOx9A3xxCd5XCAc5 24mMC5Cenj+KQbh+dczXRIQAkEFbBEVrc8ytQv+NRT4FbqhS0FL1E2zkPTNtGdK4yyrWd/K8 Pa1s3h2GtamUiD8Mdj0MMzCCBPMwggPboAMCAQICAQEwDQYJKoZIhvcNAQEFBQAwVDELMAkG A1UEBhMCSVQxEDAOBgNVBAoTB0V1cm9QS0kxFjAUBgNVBAsTDUV1cm9QS0kgSXRhbHkxGzAZ BgNVBAMTEkV1cm9QS0kgSXRhbGlhbiBDQTAeFw0xMDEyMTgxMzU4MjJaFw0yMDEyMzEyMzU5 NTlaMGUxCzAJBgNVBAYTAklUMR4wHAYDVQQKExVQb2xpdGVjbmljbyBkaSBUb3Jpbm8xNjA0 BgNVBAMTLVBvbGl0ZWNuaWNvIGRpIFRvcmlubyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhpj5X8VQEnxMEjxZAwHADWcxXc/Tuf CqQhBypLMJx+aowv9Qfr96jrXwpD/OKl6cz3Bmv0s/4oP5+ode2bWFXsVEKWR3J8vCusF1Nv tPI16g8t5numZ+JGZqC3ZpvUTNsODUxb+M5L4T2zNtO4GqZlgDhB9QOKq+71LeKp+R3q5cIX tSBPWYiH6EPbzQJQdxcbh3d9d+rxmtW1W4LmGqjBL2YGTezsbagbsHmSMX4Djw7TyuFR9qkB NhLLiHizz0AdNqW95XY+/5GzTZak7k5FGxwwzR/sN6Q/Sj1xHcWNw+ROo1aUtf5k5jVQaScH DjixGbqLQFf/2fItHfCRMMcCAwEAAaOCAb0wggG5MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMB0GA1UdDgQWBBTNm1tbnup2IcQQaOjSLTfbHy/I5DAfBgNVHSMEGDAWgBTQ deU/68q6a5ZRfCClmL3zZ9O0SjCBkQYDVR0gBIGJMIGGMD4GCisGAQQBqQcBAQIwMDAuBggr BgEFBQcCARYiaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcHMvMS4yLzBEBgorBgEEAakH AgECMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuaXRhbHkuZXVyb3BraS5vcmcvY2EvY3Bz LzEuMi8wfgYIKwYBBQUHAQEEcjBwMCkGCCsGAQUFBzABhh1odHRwOi8vb2NzcC5pdGFseS5l dXJvcGtpLm9yZzBDBggrBgEFBQcwAoY3aHR0cDovL3d3dy5pdGFseS5ldXJvcGtpLm9yZy9j YS9jZXJ0cy9ldXJvcGtpX2l0YWx5LmNlcjBCBgNVHR8EOzA5MDegNaAzhjFodHRwOi8vd3d3 Lml0YWx5LmV1cm9wa2kub3JnL2NhL2NybC9pdGFseV9jcmwuY3JsMA0GCSqGSIb3DQEBBQUA A4IBAQBTVJWIUBlbjxFQTkjRLgvNPt03m2NIhgCt+SIIFuC4rhB10VqHisAW68hXxHEfFZ06 LxeMLn3oGnPriWQdpPkC7MAt87iSyIG6Ofd1vN0oUhuWgiYqDKEOV/WX3fo9QXyFf8wEcoaK xL4Au3aBnwVcRt6gJkBGG6J6LYc+FCVpXdxnd85sKaqTTCxtiTtwSVjqwLp/Ulj1USzhP/dj 6v40zAei5LHtCjSUwWzRz1M8nTsz1LTwOybzA582+i/fIVVaiqMZicNwtrFfzTpf7bk30unZ 2cqWbLUWjldCUloD+DwKnD7XtDeNIfKuA/0XYOT+xHFJJYGai+e3MlAgkK6PMIIFYjCCBEqg AwIBAgICAsUwDQYJKoZIhvcNAQEFBQAwZTELMAkGA1UEBhMCSVQxHjAcBgNVBAoTFVBvbGl0 ZWNuaWNvIGRpIFRvcmlubzE2MDQGA1UEAxMtUG9saXRlY25pY28gZGkgVG9yaW5vIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MB4XDTEwMTIyMTE0NDgzM1oXDTE1MTIzMTIzNTk1OVowYDEL MAkGA1UEBhMCSVQxHjAcBgNVBAoTFVBvbGl0ZWNuaWNvIGRpIFRvcmlubzEYMBYGA1UEAxMP Q2F0YWxkbyAgQmFzaWxlMRcwFQYKCZImiZPyLGQBARMHZDAxMTY0OTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKtDe6utdQqaz2Cx3T1e6kmwNFj7uqF+4H+f5/vMLcMyK1sZ whhEgUgGbwX5zYwRk+c6E2WIbY1Sm1U0CUr/Epe0qwA5BtobqftIFryKwuxh7aF8gftNvaqo AqAMhO8BgqKjWFu4gypu6nB/JHMTSaetA3Zz0U4EI1kqIXmHZq430in17glcHbPKw9TKz8Lb l/huh1hKKcgPFIA65HEKzqnXKFIADatuu20OLQOaNIIcXZSIxwSgJQIcg9XFy/SoVnfgNcmm D3cJk9NRW3GnOBCV5xqdpN7hjrsUZ9rOnbBysefco+v3dGMwbJlibkgpsVEDHAGVhjW2LePy qSC2el0CAwEAAaOCAh8wggIbMA4GA1UdDwEB/wQEAwID+DAnBgNVHSUEIDAeBggrBgEFBQcD AgYIKwYBBQUHAwMGCCsGAQUFBwMEMCMGA1UdEQQcMBqBGGNhdGFsZG8uYmFzaWxlQHBvbGl0 by5pdDAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQx26UQpK+ZJUAFyKM3DLiN9yVSqjAfBgNV HSMEGDAWgBTNm1tbnup2IcQQaOjSLTfbHy/I5DCBywYDVR0gBIHDMIHAMD4GCisGAQQBqQcB AQIwMDAuBggrBgEFBQcCARYiaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcHMvMS4yLzBE BgorBgEEAakHAgECMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuaXRhbHkuZXVyb3BraS5v cmcvY2EvY3BzLzEuMi8wOAYKKwYBBAGVYgECAjAqMCgGCCsGAQUFBwIBFhxodHRwOi8vY2Eu cG9saXRvLml0L2Nwcy8yLjIvMGYGCCsGAQUFBwEBBFowWDAhBggrBgEFBQcwAYYVaHR0cDov L29jc3AucG9saXRvLml0MDMGCCsGAQUFBzAChidodHRwOi8vY2EucG9saXRvLml0L2NlcnRz L3BvbGl0b19jYS5jZXIwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NhLnBvbGl0by5pdC9j cmwvcG9saXRvX2NybC5jcmwwDQYJKoZIhvcNAQEFBQADggEBAAkZAW4SXyW/USqZffb1YdPd JFDlROWulMYv51+oO7r8uAN4iR/9J4/a4/I84xknlZY/0uu8gGInW6VdXqQHnmWyx2YjK8ar 7UJAJiZjGrPUztW0mOqfnb6BmBIJs0pf+JROi0L2pV85NTw3K74q4DDrlque3C1p7+zvflDw JDQ5M/NGB0AjQZthG16x1+r/SjFd4vyWg7v8rWsS1TCe4dDzhn4GGdpJG1skPT2AflBCouJP mSnge6f2QFNmS4w406wYRgFql8bv9n6k4rQF5v/KBmRWjOo8xNkLkjAtv0jMGAOydo6+yy8f Y+2flcI5oqfCLaI6KJVywWb4CXxd68ExggNrMIIDZwIBATBrMGUxCzAJBgNVBAYTAklUMR4w HAYDVQQKExVQb2xpdGVjbmljbyBkaSBUb3Jpbm8xNjA0BgNVBAMTLVBvbGl0ZWNuaWNvIGRp IFRvcmlubyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQICAsUwDQYJYIZIAWUDBAIBBQCgggHR MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTAwODE1MTcx MVowLwYJKoZIhvcNAQkEMSIEIN1Ki+BGgpb1obJe4DUHuGLK3q/Cs7Kdj8+2AUsiMog5MGwG CSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAO BggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgw egYJKwYBBAGCNxAEMW0wazBlMQswCQYDVQQGEwJJVDEeMBwGA1UEChMVUG9saXRlY25pY28g ZGkgVG9yaW5vMTYwNAYDVQQDEy1Qb2xpdGVjbmljbyBkaSBUb3Jpbm8gQ2VydGlmaWNhdGlv biBBdXRob3JpdHkCAgLFMHwGCyqGSIb3DQEJEAILMW2gazBlMQswCQYDVQQGEwJJVDEeMBwG A1UEChMVUG9saXRlY25pY28gZGkgVG9yaW5vMTYwNAYDVQQDEy1Qb2xpdGVjbmljbyBkaSBU b3Jpbm8gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCAgLFMA0GCSqGSIb3DQEBAQUABIIBAHF4 B0Tfm3TDQLKfy2/e2ibnf2lGUbb7pHQI8xMGt5KHLKDqKyAnTQnnLbjacpewYvr3bxUTlCtH twx9xQITIKKLML9DBN6pwpal2btBHJSq0WJU1aWNCvOrx9QeYmL0adymEbepU2HHKrkgHH6O Zo8SBOH2iDpCiYQ+eFKfijvKvUdkn6sl5sH0GEDHSPOC9O2Rre1OGV+DtefHB1IdTTF2ip4R XM3J7KaUCXVyWZhSBzpoybbVvgTFw64iRKlefvVJlFx13qOd6FZTFcbYMsPgNha0NoNjPy8J ICdO0J3XkoyCSVM8PB0wKSuWKupBSqR5e2eutKsN45BWe46C4qoAAAAAAAA= --------------ms050602060708090803060208-- From nobody Thu Oct 8 23:41:29 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A16D11B35E7 for ; Thu, 8 Oct 2015 23:41:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.61 X-Spam-Level: X-Spam-Status: No, score=-1.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6ZJ_aARHFSIo for ; Thu, 8 Oct 2015 23:41:25 -0700 (PDT) Received: from pipi.pi.nu (pipi.pi.nu [83.168.239.141]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EBB251B35E5 for ; Thu, 8 Oct 2015 23:41:24 -0700 (PDT) Received: from [192.168.1.10] (unknown [49.149.195.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: loa@pi.nu) by pipi.pi.nu (Postfix) with ESMTPSA id 397D518013B2; Fri, 9 Oct 2015 08:41:19 +0200 (CEST) To: Aldo Basile , "Xialiang (Frank)" , DIEGO LOPEZ GARCIA , Linda Dunbar References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> <561688F7.10406@polito.it> From: Loa Andersson Message-ID: <56176189.8090107@pi.nu> Date: Fri, 9 Oct 2015 14:41:13 +0800 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <561688F7.10406@polito.it> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] =?utf-8?b?562U5aSNOiBXaGF0IGRvIHlvdSBwZW9wbGUgdGhpbmsg?= =?utf-8?q?of_using_OpenStack=27s_Group_Based_Policy_to_describe_I2NSF_Ser?= =?utf-8?q?vice_Layer_Rules=3F?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2015 06:41:28 -0000 Aldo, PCIM is a "in house product", right? SO if we have something that is "more than enough" it is hard to why that should not be used. /Loa On 2015-10-08 23:17, Aldo Basile wrote: > Dear all, > > my 2 cents... in a long boring email... > > I agree on the Frank Xialiang comment on the need for a clear > specification of the semantics. However, semantics must is a meta-layer > built on the syntax. > > In my opinion, PCIM is more than enough to express the syntax of network > level policies (while it is not flexible enough for general policies). > So PCIM can be a valid starting point. Moreover, on paper, PCIM has been > designed also to cope with event-based architectures, which are often > needed for sophisticated management. > > After several analyses, I pushed to adopt it in three of the projects > where I worked and in the end we were satisfied by its flexibility and > expressiveness. > > There is one more thing to consider, as PCIM is part of CIM, it is > possible to borrow, from that incredibly huge framework, classes and > associations to describe NSFs and their parts (extensions will be > certainly needed, but all network components are almost there). > As far as I remember, the CIM parts about virtualization are not mature > enough (I checked a couple of years ago). Thus, in a previous project we > decided to borrow concepts from libvirt. > [I don't know if this can be interesting to I2NSF, I imagine it is a > completely different scenario] > > Unfortunately, PCIM is not perfect and in my opinion it has some > inconsistency, probably due to difficulties in reconciling the needs > from different vendors (my favourite example is the introduction of the > FilterEntry/FilterList classes). > > --- > After having read (guess) all the I2NSF-related drafts, I like the idea > of using a Subject-Object-Function-Action paradigm to add the needed > semantics (draft-lopez-i2nsf-packet-00). > > Because, in the end (but correct me if I'm wrong), some of the core > problems I2NSF wants to address are: > 1) determining what an NSF can do for implementing my security > requirements, and > 2) generating a configuration that NSFs can properly consume. > "Software interfaces and data models for controlling and monitoring > aspects of physical and virtual NSFs" could be built on top of the > results to achieve these two points. > > Thus, in my understanding, > - an Action determines what an NSFs can do for me (in a packets-based > paradigm) > - Subjects (which are named 'Match' in the Xie draft) are in my > understanding stateless conditions (available in the rules to select the > packets to which actions apply). > - Objects are stateful conditions (at all ISO/OSI stack layers) > - Functions are NSF specific properties. I'm not sure how Functions > relate to Subjects, Objects, and Actions (if they may be one of the > three aspects or a separate concepts). In case Functions may also be > > All these concepts can be mapped (with limited effort) on PCIM. > PolicyVariables can be associated to functionality to characterize 'what > an NSF can do for me', thus semantics and NSF identification with a sort > of capability matching. > > The same consideration applies to the Xie proposal > (draft-xia-i2nsf-capability-interface-im-02), the proposed "Overall > Information Model for I2NSF Capability Interface" seems to me easily > mappable on PCIM conditions and actions (again, with limited effort). > > By following your discussions, I'll also try to better understand what > you exactly mean with "Context" and its relations to stateful conditions > and their verification. > I don't remember (by heart, but I need to check) some standards to > describe this information. That is, I don't remember any other > (network-level) security standard/format/language properly covering > stateful data management and relations with packet matching. > > As you noticed, I tend to write to much and I tend to invade spaces that > are not mine with absolute judgments and suggestions. So, just take it > my personal opinion as I really don't want to affect any decision in > this working group. > I only hope I can be useful in providing you information, as I had to > deal with similar problems in the past. > > Regards, > Aldo > > > > > > On 08/10/2015 09:26, Xialiang (Frank) wrote: >> Hi all, >> >> My understanding is that PCIM/SG17 is mainly related to the syntax of >> the information model, and is possible to be a starting point. >> >> In addition, the other important point we need to consider is the >> semantic aspects of the information model: which contents can be in the >> security rule and in which way they are categorized and organized? >> >> There are many possible ways, such as: “5W1Hâ€, >> “subject-object-action-functionâ€, hierarchical processing, or >> combination of them. >> >> Comments are greatly appreciated! >> >> B.R. >> >> Frank >> >> *å‘件人:*I2nsf [mailto:i2nsf-bounces@ietf.org] *代表 *DIEGO LOPEZ GARCIA >> *å‘é€æ—¶é—´:*2015å¹´10月6æ—¥19:07 >> *收件人:*Linda Dunbar >> *抄é€:*i2nsf@ietf.org; Aldo Basile; Loa Andersson >> *主题:*Re: [I2nsf] What do you people think of using OpenStack's Group >> Based Policy to describe I2NSF Service Layer Rules? >> >> Hi Linda, >> >> I have been talking about this with one of the policy experts in the >> SECURED project (Aldo Basile, I have put him in Cc: so you can identify >> him, though he is in the I2NSF list as well…) and these are his comments: >> >> 8<— >> >> In my understanding, OpenStack Group Policies are a simplified yet >> generic way to associate iptables-like rules, the syntax is very >> similar. >> It is network management rather then security management. You can >> express simple network policies (commands) and associate to network >> nodes and groups. >> >> GBP is not a generic framework for expressing policies. >> Something is general (like the definition of rules as >> (classifier,action)) but it requires several extensions that, in the >> end, when completed will lead to PCIM or SG17-like models. >> >> Thus, in my opinion, SG17/PCIM are certainly a better starting >> point, and also easier to push SECURED results. >> >> "Policy Classifier" is another way to tell 'matching conditions' (as >> networking people likes the word classifier, for me a classifier is >> something more intelligent). >> >> Conditions available on OpenStack Group Policies are now a very >> limited subset of l4 filtering (they don't even cover packet >> filters). However, the model (condition,action) is general enough to >> cope with future needs (by adding more classifiers). >> >> There is no way to categorize policies (thus no capabilities no easy >> link to NSF categorization for interoperability). >> >> Then, no resolution strategies, no default actions, no priorities, >> no other sophisticated ways to express policies. >> >> 8<— >> >> I’ll let Aldo to express his views in more detail, but my position is >> that we should consider an existing general framework as starting point, >> and that PCIM (see http://www.dmtf.org/standards/policy) is the most >> promising one. >> >> Be goode, >> >> On 5 Oct 2015, at 23:45 , Linda Dunbar > > wrote: >> >> Thanks to Loa and Diego for the comments. >> >> Here are some pros and cons of using Open Stack Group Based Policy: >> >> Pros: >> >> ·There are running codes (open sourced code) >> >> Cons: >> >> ·The OpenStack's group based policy is very much Neutron port >> oriented. It is not straight forward for an environment that is not >> based on OpenStack Neutron. >> >> ·They are not designed for expressing rules to Flow-based NSF on how >> to treat client/applications traffic. The current set is not >> complete, a lot more need to be added. >> >> ·There are other "Group Based Policy", e.g. Window's Group Policy, >> which are quite different from the OpenStack’s Group Based Policy. >> >> ·May cause confusion in industry if calling “Group Based Policy†for >> I2NSF Service Layer >> >> However, the notation of Groups, Target, Context and action do cover >> what is needed for clients/applications to express the rules on how >> their flows can be treated by the Flow-Based NSFs in networks. And >> they can be mapped to the Capability layer’s >> Subject-Object-Action-Function†paradigm. >> >> To avoid the confusion, it might be better to avoid using the term >> “Group based policy†(but inherent their concept only). >> >> For example, “group†can be represented by “Composite >> Endpoints/Targets†or Endpoint Container (if using SUPA language), >> where an “Endpoint†can be a subnet, a set of hosts or applications, >> etc. >> >> ·Composite Endpoint (CEP). Logical combination of endpoint >> descriptor IDs, where descriptor can be subnet, set of hosts, or >> applications. >> >> ·Endpoint Descriptor (EPD). Each endpoint descriptor has a type and >> value that are used to partially identify the endpoint. The type of >> the Endpoint Descriptor may be a base networking identifier, such as >> an IP address, or a user-defined type. The value may be a single >> value, a range of values, or a group of values. >> >> ·Target. This is used by the application client to establish >> communications over the network. A Target is mapped to a >> physical/logical ingress port, or a physical/logical egress port. >> >> ·Policy Rule Set. A Policy Rule Set is used to determine how the >> traffic between a pair of Target Groups is to be treated. A Policy >> Rule Set consists of one or more Policy Rules. >> >> ·Policy Rule. A Policy Rule consists of a Policy context and a set >> of Actions to be applied to the traffic. >> >> ·Policy Context. Context that describes when a Policy Rule is to be >> applied. It is expressed as a direction, a list of L4 ports, time >> range, and a protocol. >> >> ·Policy Action. This is the action applied to the traffic that >> matches the classifier. An action may be a simple ACL action (i.e. >> allow, deny, mirroring), applying a well known statistics functions >> (e.g. X minutes count, Y hours court), applying client specified >> functions (with URL provided), or may refer to an ordered sequence >> of functions (i.e., a service chain). >> >> Comments are greatly appreciated. >> >> Linda >> >> -----Original Message----- >> From: Loa Andersson [mailto:loa@pi.nu] >> Sent: Friday, October 02, 2015 12:18 AM >> To: DIEGO LOPEZ GARCIA; Linda Dunbar >> Cc:i2nsf@ietf.org >> Subject: Re: [I2nsf] What do you people think of using OpenStack's >> Group Based Policy to describe I2NSF Service Layer Rules? >> >> Linda and Diego, >> >> This is said by someone that is not familiar with Open Stack or the >> Group Based Policy. >> >> I'm somewhat on the same page as Diego, at least in the same book. >> >> If we want to use OpenStack's Group Based Policy to describe I2NSF >> Service Layer Rules, the case for this has to be made much better. >> >> What are the pros and cons? Are there viable alternatives? >> >> /Loa >> >> On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: >> >> > Hi Linda, >> >> > >> >> > I am not completely sure that the current networking model of >> >> > OpenStack, that is reflected in the rule targets (either the PTG >> and >> >> > the Target >> >> > itself) does cover all the potential semantics for general security >> >> > functions. The same concern applies to Policy Classifier, as >> they seem >> >> > very much associated with a particular implementation model and, >> what >> >> > is more, with a limited network model. >> >> > >> >> > Be goode, >> >> > >> >> > >> >> >> On 1 Oct 2015, at 23:32 , Linda Dunbar > >> >> >> > wrote: >> >> >> >> >> >> I2NSF participants, >> >> >> >>https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-interface >> >> >> -im/specifies the structure for I2NSF capability layer rules. >> >> >> For the I2NSF simple service layer, what do people think of using >> >> >> OpenStack’s Group Policy structure ? >> >> >> If using OpenStack Group-based Policy (GBP) structure, the I2NSF >> >> >> simple service layer can be expressed as ·Policy Target Group >> (PTG). >> >> >> This is a group of Targets to which a traffic policy can be >> applied. >> >> >> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet >> >> >> (i.e. with private address prefix), a subnet with public address >> >> >> families, or any combination of them with logical operators >> (Logical >> >> >> AND, OR, or NOT). A PTG references one or more Policy Rule Sets >> that >> >> >> it consumes or provides. >> >> >> ·Target. This is used by the application client to establish >> >> >> communications over the network. A Target is mapped to a single >> >> >> Neutron Port, a physical/logical ingress port, or a >> physical/logical >> >> >> egress port. >> >> >> ·Policy Rule Set. A Policy Rule Set is used to determine how the >> >> >> traffic between a pair of Target Groups is to be treated. A Policy >> >> >> Rule Set consists of one or more Policy Rules. >> >> >> ·Policy Rule. A Policy Rule consists of a Traffic Classifier and a >> >> >> set of Actions to be applied to the traffic. >> >> >> ·Policy Classifier. A traffic classifier describes the traffic to >> >> >> which a Policy Rule is to be applied. It is expressed as a >> direction, >> >> >> a list of L4 ports, time range, and a protocol. >> >> >> ·Policy Action. This is the action applied to the traffic that >> >> >> matches the classifier. An action may be a simple ACL action (i.e. >> >> >> allow, deny, mirroring), applying a well known statistics >> functions >> >> >> (e.g. X minutes count, Y hours court), applying client specified >> >> >> functions (with URL provided), or may refer to an ordered >> sequence of >> >> >> functions (i.e., a service chain). >> >> >> If you have concern of using OpenStack Group Based Policies, >> please >> >> >> let the group know. >> >> >> Thanks, Linda >> >> >> _______________________________________________ >> >> >> I2nsf mailing list >> >> >>I2nsf@ietf.org >> >> >>https://www.ietf.org/mailman/listinfo/i2nsf >> >> > >> >> > -- >> >> > "Esta vez no fallaremos, Doctor Infierno" >> >> > >> >> > Dr Diego R. Lopez >> >> > Telefonica I+D >> >> >http://people.tid.es/diego.lopez/ >> >> > >> >> > e-mail:diego.r.lopez@telefonica.com >> >> >> > Tel: +34 913 129 041 >> >> > Mobile: +34 682 051 091 >> >> > ---------------------------------- >> >> > >> >> > >> >> > >> ---------------------------------------------------------------------- >> >> > -- >> >> > >> >> > Este mensaje y sus adjuntos se dirigen exclusivamente a su >> >> > destinatario, puede contener información privilegiada o >> confidencial y >> >> > es para uso exclusivo de la persona o entidad de destino. Si no es >> >> > usted. el destinatario indicado, queda notificado de que la >> lectura, >> >> > utilización, divulgación y/o copia sin autorización puede estar >> >> > prohibida en virtud de la legislación vigente. Si ha recibido este >> >> > mensaje por error, le rogamos que nos lo comunique >> inmediatamente por >> >> > esta misma vía y proceda a su destrucción. >> >> > >> >> > The information contained in this transmission is privileged and >> >> > confidential information intended only for the use of the >> individual >> >> > or entity named above. If the reader of this message is not the >> >> > intended recipient, you are hereby notified that any dissemination, >> >> > distribution or copying of this communication is strictly >> prohibited. >> >> > If you have received this transmission in error, do not read it. >> >> > Please immediately reply to the sender that you have received this >> >> > communication in error and then delete it. >> >> > >> >> > Esta mensagem e seus anexos se dirigem exclusivamente ao seu >> >> > destinatário, pode conter informação privilegiada ou >> confidencial e é >> >> > para uso exclusivo da pessoa ou entidade de destino. Se não é vossa >> >> > senhoria o destinatário indicado, fica notificado de que a leitura, >> >> > utilização, divulgação e/ou cópia sem autorização pode estar >> proibida >> >> > em virtude da legislação vigente. Se recebeu esta mensagem por >> erro, >> >> > rogamos-lhe que nos o comunique imediatamente por esta mesma via e >> >> > proceda a sua destruição >> >> > >> >> > >> >> > _______________________________________________ >> >> > I2nsf mailing list >> >> >I2nsf@ietf.org >> >> >https://www.ietf.org/mailman/listinfo/i2nsf >> >> > >> >> -- >> "Esta vez no fallaremos, Doctor Infierno" >> >> Dr Diego R. Lopez >> Telefonica I+D >> http://people.tid.es/diego.lopez/ >> >> e-mail: diego.r.lopez@telefonica.com >> >> Tel: +34 913 129 041 >> Mobile: +34 682 051 091 >> ---------------------------------- >> >> ------------------------------------------------------------------------ >> >> >> Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, >> puede contener información privilegiada o confidencial y es para uso >> exclusivo de la persona o entidad de destino. Si no es usted. el >> destinatario indicado, queda notificado de que la lectura, utilización, >> divulgación y/o copia sin autorización puede estar prohibida en virtud >> de la legislación vigente. Si ha recibido este mensaje por error, le >> rogamos que nos lo comunique inmediatamente por esta misma vía y proceda >> a su destrucción. >> >> The information contained in this transmission is privileged and >> confidential information intended only for the use of the individual or >> entity named above. If the reader of this message is not the intended >> recipient, you are hereby notified that any dissemination, distribution >> or copying of this communication is strictly prohibited. If you have >> received this transmission in error, do not read it. Please immediately >> reply to the sender that you have received this communication in error >> and then delete it. >> >> Esta mensagem e seus anexos se dirigem exclusivamente ao seu >> destinatário, pode conter informação privilegiada ou confidencial e é >> para uso exclusivo da pessoa ou entidade de destino. Se não é vossa >> senhoria o destinatário indicado, fica notificado de que a leitura, >> utilização, divulgação e/ou cópia sem autorização pode estar proibida em >> virtude da legislação vigente. Se recebeu esta mensagem por erro, >> rogamos-lhe que nos o comunique imediatamente por esta mesma via e >> proceda a sua destruição >> >> >> >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf >> > > > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > From nobody Sat Oct 10 11:02:54 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA9DB1A90B5 for ; Sat, 10 Oct 2015 11:02:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QUs3T03fr1mg for ; Sat, 10 Oct 2015 11:02:52 -0700 (PDT) Received: from mail-yk0-x232.google.com (mail-yk0-x232.google.com [IPv6:2607:f8b0:4002:c07::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68D671A90B8 for ; Sat, 10 Oct 2015 11:02:51 -0700 (PDT) Received: by ykdg206 with SMTP id g206so105235349ykd.1 for ; Sat, 10 Oct 2015 11:02:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=opImLRf6P6KOD5CiVeIaK7K0w9brb4JELbDrgzjOz+0=; b=sNImqkZqKQ4AjDIV9w3Z58hQ/hNWYxjigmAYVAgV0C83oIy3TNvpR9qNwIv4bDivRS xxVROdBEkdafQr4/Xz3WsQJMNHafzJRChSjWZzrqqRnEpH2u3RtEi9UO5dfo66yBy1uO Be9HwE1xFRgBMl7ARpkTKi0m8Yzbaj9xM4w8taIWkdz7ZOR/fFlqMl3THYSCNv5hgMDT GkBx1fR8dGV3uHQLcWR6dIoFV2FivV9IwjeqHkmrsR8M7o5Zu5SV/7u3qXW1Nqc46cKN bQyRlrGGnBgU9m1BbTiVNqusPfr8LNPysg1No8kZgYctrJ7A5HK2Fbq7xkC5Tmqv7E+9 8qtA== MIME-Version: 1.0 X-Received: by 10.13.216.133 with SMTP id a127mr9623351ywe.129.1444500170715; Sat, 10 Oct 2015 11:02:50 -0700 (PDT) Received: by 10.129.109.142 with HTTP; Sat, 10 Oct 2015 11:02:50 -0700 (PDT) In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D67EF4@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D67EF4@dfweml701-chm> Date: Sun, 11 Oct 2015 03:02:50 +0900 Message-ID: From: "Mr. Jaehoon Paul Jeong" To: Linda Dunbar Content-Type: multipart/alternative; boundary=001a114e474a8dbd750521c3e7fa Archived-At: Cc: Mahdi Daghmehchi , Jinyong Kim , Geumhwan David Cho , Myung-Ki Shin , "i2nsf@ietf.org" , Jung-Soo Park , "Prof. Hyoungshick Kim" Subject: Re: [I2nsf] IETF 94 - I2NSF Meeting slot request X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Oct 2015 18:02:53 -0000 --001a114e474a8dbd750521c3e7fa Content-Type: text/plain; charset=UTF-8 Hi Linda, Could I present the following draft in 5 minutes? Software-Defined Networking Based Security Services using Interface to Network Security Functions (https://tools.ietf.org/html/draft-jeong-i2nsf-sdn-security-services-03) This document describes a framework, objectives, requirements, and use cases for security services based on Software-Defined Networking (SDN) using a common Interface to Network Security Functions (I2NSF). We would like to present how this work can complement other uses cases in I2NSF and next steps along the milestone of I2NSF. Thanks. Paul On Wed, Oct 7, 2015 at 1:28 AM, Linda Dunbar wrote: > > Hi, > > We will have our first I2NSF WG meeting at IETF 94 (Yokohama). > > As per the preliminary agenda, I2NSF WG is scheduled to meet on Tue (Nov > 3) 0900-1130 Morning Session in Room 302. > > This email is to solicit slot requests to present in the WG session. > Please provide > > * Name of the draft > * Short description of why you think the item needs to be discussed in the > meeting > > > Kindly note that, priority will be given to Requests related to the WG > chartered items. > > Please do reply to this email with your requests. > > cheers > -Linda and Adrian > _______________________________________________ > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > -- =========================== Mr. Jaehoon (Paul) Jeong, Ph.D. Assistant Professor Department of Software Sungkyunkwan University Office: +82-31-299-4957 Email: jaehoon.paul@gmail.com, pauljeong@skku.edu Personal Homepage: http://cpslab.skku.edu/people-jaehoon-jeong.php --001a114e474a8dbd750521c3e7fa Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Linda,
Could I present the followin= g draft in 5 minutes?

Software-Defined Networking = Based Security Services using Interface to Network Security Functions
=

This document describes a framework= , objectives, requirements, and
use cases for security services b= ased on Software-Defined Networking
(SDN) using a common Interfac= e to Network Security Functions (I2NSF).

We would = like to present how this work can complement other uses cases=C2=A0
in I2NSF and next steps along the milestone of I2NSF.

Thanks.

Paul

On Wed, Oct 7, 2015 at 1:28 AM= , Linda Dunbar <linda.dunbar@huawei.com> wrote:

Hi,

We will have our first I2NSF WG meeting at IETF 94 (Yokohama).

As per the preliminary agenda, I2NSF WG is scheduled to meet on Tue (Nov 3)= 0900-1130 Morning Session in Room 302.

This email is to solicit slot requests to present in the WG session.
Please provide

* Name of the draft
* Short description of why you think the item needs to be discussed in the = meeting


Kindly note that, priority will be given to Requests related to the WG char= tered items.

Please do reply to this email with your requests.

cheers
-Linda and Adrian
_______________________________________________

_______________________________________________
I2nsf mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf



--
=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Mr. J= aehoon (Paul) Jeong, Ph.D.
Assistant Professor
Department of Software=
Sungkyunkwan University
Office: +82-31-299-4957
Email: jaehoon.paul@gmail.com,=C2=A0pauljeong@skku.edu
Personal Homepage: http://cpslab.skku.edu/people-jaehoon-jeong.php
<= /div>
--001a114e474a8dbd750521c3e7fa-- From nobody Sat Oct 10 13:37:10 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44C751B480D for ; Sat, 10 Oct 2015 13:37:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.211 X-Spam-Level: X-Spam-Status: No, score=-1.211 tagged_above=-999 required=5 tests=[BAYES_50=0.8, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id umYXkqz5uWuS for ; Sat, 10 Oct 2015 13:37:04 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7D7B1B480C for ; Sat, 10 Oct 2015 13:37:03 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCJ63327; Sat, 10 Oct 2015 20:37:01 +0000 (GMT) Received: from DFWEML704-CHM.china.huawei.com (10.193.5.141) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.235.1; Sat, 10 Oct 2015 21:36:58 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml704-chm ([10.193.5.141]) with mapi id 14.03.0235.001; Sat, 10 Oct 2015 13:36:50 -0700 From: Linda Dunbar To: Aldo Basile , "Xialiang (Frank)" , DIEGO LOPEZ GARCIA , Linda Dunbar Thread-Topic: =?utf-8?B?W0kybnNmXSDnrZTlpI06IFdoYXQgZG8geW91IHBlb3BsZSB0aGluayBvZiB1?= =?utf-8?B?c2luZyBPcGVuU3RhY2sncyBHcm91cCBCYXNlZCBQb2xpY3kgdG8gZGVzY3Jp?= =?utf-8?Q?be_I2NSF_Service_Layer_Rules=3F?= Thread-Index: AQHRAdyLeJLW0mF4fU+RslZ+bNo4gJ5k5Ikg Date: Sat, 10 Oct 2015 20:36:49 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D69E7F@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> <561688F7.10406@polito.it> In-Reply-To: <561688F7.10406@polito.it> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.212.244.199] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" , Loa Andersson Subject: Re: [I2nsf] =?utf-8?b?562U5aSNOiBXaGF0IGRvIHlvdSBwZW9wbGUgdGhpbmsg?= =?utf-8?q?of_using_OpenStack=27s_Group_Based_Policy_to_describe_I2NSF_Ser?= =?utf-8?q?vice_Layer_Rules=3F?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Oct 2015 20:37:09 -0000 QWxkbywgDQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBkZXRhaWxlZCBhbmFseXNpcy4g SG9wZSBzb21lIG9mIHlvdXIgaW4tZGVwdGggYW5hbHlzaXMgY2FuIGJlIGNhcHR1cmVkIGluIEky TlNGIGRyYWZ0cywgc28gdGhhdCB3ZSB3b24ndCBmb3JnZXQuICANCg0KSnVzdCBhIGNvbW1lbnQs IHRoZSAiQ29udGV4dCIgdXNlZCBieSBDYXBhYmlsaXR5IEluZm9ybWF0aW9uIG1vZGVsIGluY2x1 ZGVzIHRoZSAiU3RhdGUiLiANCg0KSSB3aWxsIGxldCBKb2huIFN0cmFzc25lciB0byBjb21tZW50 IG9uIGhvdyB0byB0cmltIFBNSUMgZm9yIEkyTlNGIHB1cnBvc2UgYW5kIHdoYXQgdG8gYWRkLiAN Cg0KTGluZGENCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEFsZG8gQmFzaWxl IFttYWlsdG86Y2F0YWxkby5iYXNpbGVAcG9saXRvLml0XSANClNlbnQ6IFRodXJzZGF5LCBPY3Rv YmVyIDA4LCAyMDE1IDEwOjE3IEFNDQpUbzogWGlhbGlhbmcgKEZyYW5rKTsgRElFR08gTE9QRVog R0FSQ0lBOyBMaW5kYSBEdW5iYXINCkNjOiBpMm5zZkBpZXRmLm9yZzsgTG9hIEFuZGVyc3Nvbg0K U3ViamVjdDogUmU6IFtJMm5zZl0g562U5aSNOiBXaGF0IGRvIHlvdSBwZW9wbGUgdGhpbmsgb2Yg dXNpbmcgT3BlblN0YWNrJ3MgR3JvdXAgQmFzZWQgUG9saWN5IHRvIGRlc2NyaWJlIEkyTlNGIFNl cnZpY2UgTGF5ZXIgUnVsZXM/DQoNCkRlYXIgYWxsLA0KDQpteSAyIGNlbnRzLi4uIGluIGEgbG9u ZyBib3JpbmcgZW1haWwuLi4NCg0KSSBhZ3JlZSBvbiB0aGUgRnJhbmsgWGlhbGlhbmcgY29tbWVu dCBvbiB0aGUgbmVlZCBmb3IgYSBjbGVhciANCnNwZWNpZmljYXRpb24gb2YgdGhlIHNlbWFudGlj cy4gSG93ZXZlciwgc2VtYW50aWNzIG11c3QgaXMgYSBtZXRhLWxheWVyIA0KYnVpbHQgb24gdGhl IHN5bnRheC4NCg0KSW4gbXkgb3BpbmlvbiwgUENJTSBpcyBtb3JlIHRoYW4gZW5vdWdoIHRvIGV4 cHJlc3MgdGhlIHN5bnRheCBvZiBuZXR3b3JrIA0KbGV2ZWwgcG9saWNpZXMgKHdoaWxlIGl0IGlz IG5vdCBmbGV4aWJsZSBlbm91Z2ggZm9yIGdlbmVyYWwgcG9saWNpZXMpLiANClNvIFBDSU0gY2Fu IGJlIGEgdmFsaWQgc3RhcnRpbmcgcG9pbnQuIE1vcmVvdmVyLCBvbiBwYXBlciwgUENJTSBoYXMg YmVlbiANCmRlc2lnbmVkIGFsc28gdG8gY29wZSB3aXRoIGV2ZW50LWJhc2VkIGFyY2hpdGVjdHVy ZXMsIHdoaWNoIGFyZSBvZnRlbiANCm5lZWRlZCBmb3Igc29waGlzdGljYXRlZCBtYW5hZ2VtZW50 Lg0KDQpBZnRlciBzZXZlcmFsIGFuYWx5c2VzLCBJIHB1c2hlZCB0byBhZG9wdCBpdCBpbiB0aHJl ZSBvZiB0aGUgcHJvamVjdHMgDQp3aGVyZSBJIHdvcmtlZCBhbmQgaW4gdGhlIGVuZCB3ZSB3ZXJl IHNhdGlzZmllZCBieSBpdHMgZmxleGliaWxpdHkgYW5kIA0KZXhwcmVzc2l2ZW5lc3MuDQoNClRo ZXJlIGlzIG9uZSBtb3JlIHRoaW5nIHRvIGNvbnNpZGVyLCBhcyBQQ0lNIGlzIHBhcnQgb2YgQ0lN LCBpdCBpcyANCnBvc3NpYmxlIHRvIGJvcnJvdywgZnJvbSB0aGF0IGluY3JlZGlibHkgaHVnZSBm cmFtZXdvcmssIGNsYXNzZXMgYW5kIA0KYXNzb2NpYXRpb25zIHRvIGRlc2NyaWJlIE5TRnMgYW5k IHRoZWlyIHBhcnRzIChleHRlbnNpb25zIHdpbGwgYmUgDQpjZXJ0YWlubHkgbmVlZGVkLCBidXQg YWxsIG5ldHdvcmsgY29tcG9uZW50cyBhcmUgYWxtb3N0IHRoZXJlKS4NCkFzIGZhciBhcyBJIHJl bWVtYmVyLCB0aGUgQ0lNIHBhcnRzIGFib3V0IHZpcnR1YWxpemF0aW9uIGFyZSBub3QgbWF0dXJl IA0KZW5vdWdoIChJIGNoZWNrZWQgYSBjb3VwbGUgb2YgeWVhcnMgYWdvKS4gVGh1cywgaW4gYSBw cmV2aW91cyBwcm9qZWN0IA0Kd2UgZGVjaWRlZCB0byBib3Jyb3cgY29uY2VwdHMgZnJvbSBsaWJ2 aXJ0Lg0KW0kgZG9uJ3Qga25vdyBpZiB0aGlzIGNhbiBiZSBpbnRlcmVzdGluZyB0byBJMk5TRiwg SSBpbWFnaW5lIGl0IGlzIGEgDQpjb21wbGV0ZWx5IGRpZmZlcmVudCBzY2VuYXJpb10NCg0KVW5m b3J0dW5hdGVseSwgUENJTSBpcyBub3QgcGVyZmVjdCBhbmQgaW4gbXkgb3BpbmlvbiBpdCBoYXMg c29tZSANCmluY29uc2lzdGVuY3ksIHByb2JhYmx5IGR1ZSB0byBkaWZmaWN1bHRpZXMgaW4gcmVj b25jaWxpbmcgdGhlIG5lZWRzIA0KZnJvbSBkaWZmZXJlbnQgdmVuZG9ycyAobXkgZmF2b3VyaXRl IGV4YW1wbGUgaXMgdGhlIGludHJvZHVjdGlvbiBvZiB0aGUgDQpGaWx0ZXJFbnRyeS9GaWx0ZXJM aXN0IGNsYXNzZXMpLg0KDQotLS0NCkFmdGVyIGhhdmluZyByZWFkIChndWVzcykgYWxsIHRoZSBJ Mk5TRi1yZWxhdGVkIGRyYWZ0cywgSSBsaWtlIHRoZSBpZGVhIA0Kb2YgdXNpbmcgYSBTdWJqZWN0 LU9iamVjdC1GdW5jdGlvbi1BY3Rpb24gcGFyYWRpZ20gdG8gYWRkIHRoZSBuZWVkZWQgDQpzZW1h bnRpY3MgKGRyYWZ0LWxvcGV6LWkybnNmLXBhY2tldC0wMCkuDQoNCkJlY2F1c2UsIGluIHRoZSBl bmQgKGJ1dCBjb3JyZWN0IG1lIGlmIEknbSB3cm9uZyksIHNvbWUgb2YgdGhlIGNvcmUgDQpwcm9i bGVtcyBJMk5TRiB3YW50cyB0byBhZGRyZXNzIGFyZToNCjEpIGRldGVybWluaW5nIHdoYXQgYW4g TlNGIGNhbiBkbyBmb3IgaW1wbGVtZW50aW5nIG15IHNlY3VyaXR5IA0KcmVxdWlyZW1lbnRzLCBh bmQNCjIpIGdlbmVyYXRpbmcgYSBjb25maWd1cmF0aW9uIHRoYXQgTlNGcyBjYW4gcHJvcGVybHkg Y29uc3VtZS4NCiJTb2Z0d2FyZSBpbnRlcmZhY2VzIGFuZCBkYXRhIG1vZGVscyBmb3IgY29udHJv bGxpbmcgYW5kIG1vbml0b3JpbmcgDQphc3BlY3RzIG9mIHBoeXNpY2FsIGFuZCB2aXJ0dWFsIE5T RnMiIGNvdWxkIGJlIGJ1aWx0IG9uIHRvcCBvZiB0aGUgDQpyZXN1bHRzIHRvIGFjaGlldmUgdGhl c2UgdHdvIHBvaW50cy4NCg0KVGh1cywgaW4gbXkgdW5kZXJzdGFuZGluZywNCi0gYW4gQWN0aW9u IGRldGVybWluZXMgd2hhdCBhbiBOU0ZzIGNhbiBkbyBmb3IgbWUgKGluIGEgcGFja2V0cy1iYXNl ZCANCnBhcmFkaWdtKQ0KLSBTdWJqZWN0cyAod2hpY2ggYXJlIG5hbWVkICdNYXRjaCcgaW4gdGhl IFhpZSBkcmFmdCkgYXJlIGluIG15IA0KdW5kZXJzdGFuZGluZyBzdGF0ZWxlc3MgY29uZGl0aW9u cyAoYXZhaWxhYmxlIGluIHRoZSBydWxlcyB0byBzZWxlY3QgdGhlIA0KcGFja2V0cyB0byB3aGlj aCBhY3Rpb25zIGFwcGx5KS4NCi0gT2JqZWN0cyBhcmUgc3RhdGVmdWwgY29uZGl0aW9ucyAoYXQg YWxsIElTTy9PU0kgc3RhY2sgbGF5ZXJzKQ0KLSBGdW5jdGlvbnMgYXJlIE5TRiBzcGVjaWZpYyBw cm9wZXJ0aWVzLiBJJ20gbm90IHN1cmUgaG93IEZ1bmN0aW9ucyANCnJlbGF0ZSB0byBTdWJqZWN0 cywgT2JqZWN0cywgYW5kIEFjdGlvbnMgKGlmIHRoZXkgbWF5IGJlIG9uZSBvZiB0aGUgDQp0aHJl ZSBhc3BlY3RzIG9yIGEgc2VwYXJhdGUgY29uY2VwdHMpLiBJbiBjYXNlIEZ1bmN0aW9ucyBtYXkg YWxzbyBiZQ0KDQpBbGwgdGhlc2UgY29uY2VwdHMgY2FuIGJlIG1hcHBlZCAod2l0aCBsaW1pdGVk IGVmZm9ydCkgb24gUENJTS4gDQpQb2xpY3lWYXJpYWJsZXMgY2FuIGJlIGFzc29jaWF0ZWQgdG8g ZnVuY3Rpb25hbGl0eSB0byBjaGFyYWN0ZXJpemUgJ3doYXQgDQphbiBOU0YgY2FuIGRvIGZvciBt ZScsIHRodXMgc2VtYW50aWNzIGFuZCBOU0YgaWRlbnRpZmljYXRpb24gd2l0aCBhIHNvcnQgDQpv ZiBjYXBhYmlsaXR5IG1hdGNoaW5nLg0KDQpUaGUgc2FtZSBjb25zaWRlcmF0aW9uIGFwcGxpZXMg dG8gdGhlIFhpZSBwcm9wb3NhbCANCihkcmFmdC14aWEtaTJuc2YtY2FwYWJpbGl0eS1pbnRlcmZh Y2UtaW0tMDIpLCB0aGUgcHJvcG9zZWQgIk92ZXJhbGwgDQpJbmZvcm1hdGlvbiBNb2RlbCBmb3Ig STJOU0YgQ2FwYWJpbGl0eSBJbnRlcmZhY2UiIHNlZW1zIHRvIG1lIGVhc2lseSANCm1hcHBhYmxl IG9uIFBDSU0gY29uZGl0aW9ucyBhbmQgYWN0aW9ucyAoYWdhaW4sIHdpdGggbGltaXRlZCBlZmZv cnQpLg0KDQpCeSBmb2xsb3dpbmcgeW91ciBkaXNjdXNzaW9ucywgSSdsbCBhbHNvIHRyeSB0byBi ZXR0ZXIgdW5kZXJzdGFuZCB3aGF0IA0KeW91IGV4YWN0bHkgbWVhbiB3aXRoICJDb250ZXh0IiBh bmQgaXRzIHJlbGF0aW9ucyB0byBzdGF0ZWZ1bCBjb25kaXRpb25zIA0KYW5kIHRoZWlyIHZlcmlm aWNhdGlvbi4NCkkgZG9uJ3QgcmVtZW1iZXIgKGJ5IGhlYXJ0LCBidXQgSSBuZWVkIHRvIGNoZWNr KSBzb21lIHN0YW5kYXJkcyB0byANCmRlc2NyaWJlIHRoaXMgaW5mb3JtYXRpb24uIFRoYXQgaXMs IEkgZG9uJ3QgcmVtZW1iZXIgYW55IG90aGVyIA0KKG5ldHdvcmstbGV2ZWwpIHNlY3VyaXR5IHN0 YW5kYXJkL2Zvcm1hdC9sYW5ndWFnZSBwcm9wZXJseSBjb3ZlcmluZyANCnN0YXRlZnVsIGRhdGEg bWFuYWdlbWVudCBhbmQgcmVsYXRpb25zIHdpdGggcGFja2V0IG1hdGNoaW5nLg0KDQpBcyB5b3Ug bm90aWNlZCwgSSB0ZW5kIHRvIHdyaXRlIHRvIG11Y2ggYW5kIEkgdGVuZCB0byBpbnZhZGUgc3Bh Y2VzIHRoYXQgDQphcmUgbm90IG1pbmUgd2l0aCBhYnNvbHV0ZSBqdWRnbWVudHMgYW5kIHN1Z2dl c3Rpb25zLiBTbywganVzdCB0YWtlIGl0IA0KbXkgcGVyc29uYWwgb3BpbmlvbiBhcyBJIHJlYWxs eSBkb24ndCB3YW50IHRvIGFmZmVjdCBhbnkgZGVjaXNpb24gaW4gDQp0aGlzIHdvcmtpbmcgZ3Jv dXAuDQpJIG9ubHkgaG9wZSBJIGNhbiBiZSB1c2VmdWwgaW4gcHJvdmlkaW5nIHlvdSBpbmZvcm1h dGlvbiwgYXMgSSBoYWQgdG8gDQpkZWFsIHdpdGggc2ltaWxhciBwcm9ibGVtcyBpbiB0aGUgcGFz dC4NCg0KUmVnYXJkcywNCkFsZG8NCg0KDQoNCg0KDQpPbiAwOC8xMC8yMDE1IDA5OjI2LCBYaWFs aWFuZyAoRnJhbmspIHdyb3RlOg0KPiBIaSBhbGwsDQo+DQo+IE15IHVuZGVyc3RhbmRpbmcgaXMg dGhhdCBQQ0lNL1NHMTcgaXMgbWFpbmx5IHJlbGF0ZWQgdG8gdGhlIHN5bnRheCBvZg0KPiB0aGUg aW5mb3JtYXRpb24gbW9kZWwsIGFuZCBpcyBwb3NzaWJsZSB0byBiZSBhIHN0YXJ0aW5nIHBvaW50 Lg0KPg0KPiBJbiBhZGRpdGlvbiwgdGhlIG90aGVyIGltcG9ydGFudCBwb2ludCB3ZSBuZWVkIHRv IGNvbnNpZGVyIGlzIHRoZQ0KPiBzZW1hbnRpYyBhc3BlY3RzIG9mIHRoZSBpbmZvcm1hdGlvbiBt b2RlbDogd2hpY2ggY29udGVudHMgY2FuIGJlIGluIHRoZQ0KPiBzZWN1cml0eSBydWxlIGFuZCBp biB3aGljaCB3YXkgdGhleSBhcmUgY2F0ZWdvcml6ZWQgYW5kIG9yZ2FuaXplZD8NCj4NCj4gVGhl cmUgYXJlIG1hbnkgcG9zc2libGUgd2F5cywgc3VjaCBhczog4oCcNVcxSOKAnSwNCj4g4oCcc3Vi amVjdC1vYmplY3QtYWN0aW9uLWZ1bmN0aW9u4oCdLCBoaWVyYXJjaGljYWwgcHJvY2Vzc2luZywg b3INCj4gY29tYmluYXRpb24gb2YgdGhlbS4NCj4NCj4gQ29tbWVudHMgYXJlIGdyZWF0bHkgYXBw cmVjaWF0ZWQhDQo+DQo+IEIuUi4NCj4NCj4gRnJhbmsNCj4NCj4gKuWPkeS7tuS6ujoqSTJuc2Yg W21haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSAq5Luj6KGoICpESUVHTyBMT1BFWiBHQVJD SUENCj4gKuWPkemAgeaXtumXtDoqMjAxNeW5tDEw5pyINuaXpTE5OjA3DQo+ICrmlLbku7bkuro6 KkxpbmRhIER1bmJhcg0KPiAq5oqE6YCBOippMm5zZkBpZXRmLm9yZzsgQWxkbyBCYXNpbGU7IExv YSBBbmRlcnNzb24NCj4gKuS4u+mimDoqUmU6IFtJMm5zZl0gV2hhdCBkbyB5b3UgcGVvcGxlIHRo aW5rIG9mIHVzaW5nIE9wZW5TdGFjaydzIEdyb3VwDQo+IEJhc2VkIFBvbGljeSB0byBkZXNjcmli ZSBJMk5TRiBTZXJ2aWNlIExheWVyIFJ1bGVzPw0KPg0KPiBIaSBMaW5kYSwNCj4NCj4gSSBoYXZl IGJlZW4gdGFsa2luZyBhYm91dCB0aGlzIHdpdGggb25lIG9mIHRoZSBwb2xpY3kgZXhwZXJ0cyBp biB0aGUNCj4gU0VDVVJFRCBwcm9qZWN0IChBbGRvIEJhc2lsZSwgSSBoYXZlIHB1dCBoaW0gaW4g Q2M6IHNvIHlvdSBjYW4gaWRlbnRpZnkNCj4gaGltLCB0aG91Z2ggaGUgaXMgaW4gdGhlIEkyTlNG IGxpc3QgYXMgd2VsbOKApikgYW5kIHRoZXNlIGFyZSBoaXMgY29tbWVudHM6DQo+DQo+IDg84oCU DQo+DQo+ICAgICBJbiBteSB1bmRlcnN0YW5kaW5nLCBPcGVuU3RhY2sgR3JvdXAgUG9saWNpZXMg YXJlIGEgc2ltcGxpZmllZCB5ZXQNCj4gICAgIGdlbmVyaWMgd2F5IHRvIGFzc29jaWF0ZSBpcHRh Ymxlcy1saWtlIHJ1bGVzLCB0aGUgc3ludGF4IGlzIHZlcnkNCj4gICAgIHNpbWlsYXIuDQo+ICAg ICBJdCBpcyBuZXR3b3JrIG1hbmFnZW1lbnQgcmF0aGVyIHRoZW4gc2VjdXJpdHkgbWFuYWdlbWVu dC4gWW91IGNhbg0KPiAgICAgZXhwcmVzcyBzaW1wbGUgbmV0d29yayBwb2xpY2llcyAoY29tbWFu ZHMpIGFuZCBhc3NvY2lhdGUgdG8gbmV0d29yaw0KPiAgICAgbm9kZXMgYW5kIGdyb3Vwcy4NCj4N Cj4gICAgIEdCUCBpcyBub3QgYSBnZW5lcmljIGZyYW1ld29yayBmb3IgZXhwcmVzc2luZyBwb2xp Y2llcy4NCj4gICAgIFNvbWV0aGluZyBpcyBnZW5lcmFsIChsaWtlIHRoZSBkZWZpbml0aW9uIG9m IHJ1bGVzIGFzDQo+ICAgICAoY2xhc3NpZmllcixhY3Rpb24pKSBidXQgaXQgcmVxdWlyZXMgc2V2 ZXJhbCBleHRlbnNpb25zIHRoYXQsIGluIHRoZQ0KPiAgICAgZW5kLCB3aGVuIGNvbXBsZXRlZCB3 aWxsIGxlYWQgdG8gUENJTSBvciBTRzE3LWxpa2UgbW9kZWxzLg0KPg0KPiAgICAgVGh1cywgaW4g bXkgb3BpbmlvbiwgU0cxNy9QQ0lNIGFyZSBjZXJ0YWlubHkgYSBiZXR0ZXIgc3RhcnRpbmcNCj4g ICAgIHBvaW50LCBhbmQgYWxzbyBlYXNpZXIgdG8gcHVzaCBTRUNVUkVEIHJlc3VsdHMuDQo+DQo+ ICAgICAiUG9saWN5IENsYXNzaWZpZXIiIGlzIGFub3RoZXIgd2F5IHRvIHRlbGwgJ21hdGNoaW5n IGNvbmRpdGlvbnMnIChhcw0KPiAgICAgbmV0d29ya2luZyBwZW9wbGUgbGlrZXMgdGhlIHdvcmQg Y2xhc3NpZmllciwgZm9yIG1lIGEgY2xhc3NpZmllciBpcw0KPiAgICAgc29tZXRoaW5nIG1vcmUg aW50ZWxsaWdlbnQpLg0KPg0KPiAgICAgQ29uZGl0aW9ucyBhdmFpbGFibGUgb24gT3BlblN0YWNr IEdyb3VwIFBvbGljaWVzIGFyZSBub3cgYSB2ZXJ5DQo+ICAgICBsaW1pdGVkIHN1YnNldCBvZiBs NCBmaWx0ZXJpbmcgKHRoZXkgZG9uJ3QgZXZlbiBjb3ZlciBwYWNrZXQNCj4gICAgIGZpbHRlcnMp LiBIb3dldmVyLCB0aGUgbW9kZWwgKGNvbmRpdGlvbixhY3Rpb24pIGlzIGdlbmVyYWwgZW5vdWdo IHRvDQo+ICAgICBjb3BlIHdpdGggZnV0dXJlIG5lZWRzIChieSBhZGRpbmcgbW9yZSBjbGFzc2lm aWVycykuDQo+DQo+ICAgICBUaGVyZSBpcyBubyB3YXkgdG8gY2F0ZWdvcml6ZSBwb2xpY2llcyAo dGh1cyBubyBjYXBhYmlsaXRpZXMgbm8gZWFzeQ0KPiAgICAgbGluayB0byBOU0YgY2F0ZWdvcml6 YXRpb24gZm9yIGludGVyb3BlcmFiaWxpdHkpLg0KPg0KPiAgICAgVGhlbiwgbm8gcmVzb2x1dGlv biBzdHJhdGVnaWVzLCBubyBkZWZhdWx0IGFjdGlvbnMsIG5vIHByaW9yaXRpZXMsDQo+ICAgICBu byBvdGhlciBzb3BoaXN0aWNhdGVkIHdheXMgdG8gZXhwcmVzcyBwb2xpY2llcy4NCj4NCj4gODzi gJQNCj4NCj4gSeKAmWxsIGxldCBBbGRvIHRvIGV4cHJlc3MgaGlzIHZpZXdzIGluIG1vcmUgZGV0 YWlsLCBidXQgbXkgcG9zaXRpb24gaXMNCj4gdGhhdCB3ZSBzaG91bGQgY29uc2lkZXIgYW4gZXhp c3RpbmcgZ2VuZXJhbCBmcmFtZXdvcmsgYXMgc3RhcnRpbmcgcG9pbnQsDQo+IGFuZCB0aGF0IFBD SU0gKHNlZSBodHRwOi8vd3d3LmRtdGYub3JnL3N0YW5kYXJkcy9wb2xpY3kpIGlzIHRoZSBtb3N0 DQo+IHByb21pc2luZyBvbmUuDQo+DQo+IEJlIGdvb2RlLA0KPg0KPiAgICAgT24gNSBPY3QgMjAx NSwgYXQgMjM6NDUgLCBMaW5kYSBEdW5iYXIgPGxpbmRhLmR1bmJhckBodWF3ZWkuY29tDQo+ICAg ICA8bWFpbHRvOmxpbmRhLmR1bmJhckBodWF3ZWkuY29tPj4gd3JvdGU6DQo+DQo+ICAgICBUaGFu a3MgdG8gTG9hIGFuZCBEaWVnbyBmb3IgdGhlIGNvbW1lbnRzLg0KPg0KPiAgICAgSGVyZSBhcmUg c29tZSBwcm9zIGFuZCBjb25zIG9mIHVzaW5nIE9wZW4gU3RhY2sgR3JvdXAgQmFzZWQgUG9saWN5 Og0KPg0KPiAgICAgUHJvczoNCj4NCj4gICAgIMK3VGhlcmUgYXJlIHJ1bm5pbmcgY29kZXMgKG9w ZW4gc291cmNlZCBjb2RlKQ0KPg0KPiAgICAgQ29uczoNCj4NCj4gICAgIMK3VGhlIE9wZW5TdGFj aydzIGdyb3VwIGJhc2VkIHBvbGljeSBpcyB2ZXJ5IG11Y2ggTmV1dHJvbiBwb3J0DQo+ICAgICBv cmllbnRlZC4gSXQgaXMgbm90IHN0cmFpZ2h0IGZvcndhcmQgZm9yIGFuIGVudmlyb25tZW50IHRo YXQgaXMgbm90DQo+ICAgICBiYXNlZCBvbiBPcGVuU3RhY2sgTmV1dHJvbi4NCj4NCj4gICAgIMK3 VGhleSBhcmUgbm90IGRlc2lnbmVkIGZvciBleHByZXNzaW5nIHJ1bGVzIHRvIEZsb3ctYmFzZWQg TlNGIG9uIGhvdw0KPiAgICAgdG8gdHJlYXQgY2xpZW50L2FwcGxpY2F0aW9ucyB0cmFmZmljLiBU aGUgY3VycmVudCBzZXQgaXMgbm90DQo+ICAgICBjb21wbGV0ZSwgIGEgbG90IG1vcmUgbmVlZCB0 byBiZSBhZGRlZC4NCj4NCj4gICAgIMK3VGhlcmUgYXJlIG90aGVyICJHcm91cCBCYXNlZCBQb2xp Y3kiLCBlLmcuIFdpbmRvdydzIEdyb3VwIFBvbGljeSwNCj4gICAgIHdoaWNoIGFyZSBxdWl0ZSBk aWZmZXJlbnQgZnJvbSB0aGUgT3BlblN0YWNr4oCZcyBHcm91cCBCYXNlZCBQb2xpY3kuDQo+DQo+ ICAgICDCt01heSBjYXVzZSBjb25mdXNpb24gaW4gaW5kdXN0cnkgaWYgY2FsbGluZyDigJxHcm91 cCBCYXNlZCBQb2xpY3nigJ0gZm9yDQo+ICAgICBJMk5TRiBTZXJ2aWNlIExheWVyDQo+DQo+ICAg ICBIb3dldmVyLCB0aGUgbm90YXRpb24gb2YgR3JvdXBzLCBUYXJnZXQsIENvbnRleHQgYW5kIGFj dGlvbiBkbyBjb3Zlcg0KPiAgICAgd2hhdCBpcyBuZWVkZWQgZm9yIGNsaWVudHMvYXBwbGljYXRp b25zIHRvIGV4cHJlc3MgdGhlIHJ1bGVzIG9uIGhvdw0KPiAgICAgdGhlaXIgZmxvd3MgY2FuIGJl IHRyZWF0ZWQgYnkgdGhlIEZsb3ctQmFzZWQgTlNGcyBpbiBuZXR3b3Jrcy4gQW5kDQo+ICAgICB0 aGV5IGNhbiBiZSBtYXBwZWQgdG8gdGhlIENhcGFiaWxpdHkgbGF5ZXLigJlzDQo+ICAgICBTdWJq ZWN0LU9iamVjdC1BY3Rpb24tRnVuY3Rpb27igJ0gcGFyYWRpZ20uDQo+DQo+ICAgICBUbyBhdm9p ZCB0aGUgY29uZnVzaW9uLCBpdCBtaWdodCBiZSBiZXR0ZXIgdG8gYXZvaWQgdXNpbmcgdGhlIHRl cm0NCj4gICAgIOKAnEdyb3VwIGJhc2VkIHBvbGljeeKAnSAoYnV0IGluaGVyZW50IHRoZWlyIGNv bmNlcHQgb25seSkuDQo+DQo+ICAgICBGb3IgZXhhbXBsZSwg4oCcZ3JvdXDigJ0gY2FuIGJlIHJl cHJlc2VudGVkIGJ5IOKAnENvbXBvc2l0ZQ0KPiAgICAgRW5kcG9pbnRzL1RhcmdldHPigJ0gb3Ig RW5kcG9pbnQgQ29udGFpbmVyIChpZiB1c2luZyBTVVBBIGxhbmd1YWdlKSwNCj4gICAgIHdoZXJl IGFuIOKAnEVuZHBvaW504oCdIGNhbiBiZSBhIHN1Ym5ldCwgYSBzZXQgb2YgaG9zdHMgb3IgYXBw bGljYXRpb25zLA0KPiAgICAgZXRjLg0KPg0KPiAgICAgwrdDb21wb3NpdGUgRW5kcG9pbnQgKENF UCkuIExvZ2ljYWwgY29tYmluYXRpb24gb2YgZW5kcG9pbnQNCj4gICAgIGRlc2NyaXB0b3IgSURz LCB3aGVyZSBkZXNjcmlwdG9yIGNhbiBiZSBzdWJuZXQsIHNldCBvZiBob3N0cywgb3INCj4gICAg IGFwcGxpY2F0aW9ucy4NCj4NCj4gICAgIMK3RW5kcG9pbnQgRGVzY3JpcHRvciAoRVBEKS4gRWFj aCBlbmRwb2ludCBkZXNjcmlwdG9yIGhhcyBhIHR5cGUgYW5kDQo+ICAgICB2YWx1ZSB0aGF0IGFy ZSB1c2VkIHRvIHBhcnRpYWxseSBpZGVudGlmeSB0aGUgZW5kcG9pbnQuIFRoZSB0eXBlIG9mDQo+ ICAgICB0aGUgRW5kcG9pbnQgRGVzY3JpcHRvciBtYXkgYmUgYSBiYXNlIG5ldHdvcmtpbmcgaWRl bnRpZmllciwgc3VjaCBhcw0KPiAgICAgYW4gSVAgYWRkcmVzcywgb3IgYSB1c2VyLWRlZmluZWQg dHlwZS4gVGhlIHZhbHVlIG1heSBiZSBhIHNpbmdsZQ0KPiAgICAgdmFsdWUsIGEgcmFuZ2Ugb2Yg dmFsdWVzLCBvciBhIGdyb3VwIG9mIHZhbHVlcy4NCj4NCj4gICAgIMK3VGFyZ2V0LiBUaGlzIGlz IHVzZWQgYnkgdGhlIGFwcGxpY2F0aW9uIGNsaWVudCB0byBlc3RhYmxpc2gNCj4gICAgIGNvbW11 bmljYXRpb25zIG92ZXIgdGhlIG5ldHdvcmsuIEEgVGFyZ2V0IGlzIG1hcHBlZCB0byBhDQo+ICAg ICBwaHlzaWNhbC9sb2dpY2FsIGluZ3Jlc3MgcG9ydCwgb3IgYSBwaHlzaWNhbC9sb2dpY2FsIGVn cmVzcyBwb3J0Lg0KPg0KPiAgICAgwrdQb2xpY3kgUnVsZSBTZXQuIEEgUG9saWN5IFJ1bGUgU2V0 IGlzIHVzZWQgdG8gZGV0ZXJtaW5lIGhvdyB0aGUNCj4gICAgIHRyYWZmaWMgYmV0d2VlbiBhIHBh aXIgb2YgVGFyZ2V0IEdyb3VwcyBpcyB0byBiZSB0cmVhdGVkLiBBIFBvbGljeQ0KPiAgICAgUnVs ZSBTZXQgY29uc2lzdHMgb2Ygb25lIG9yIG1vcmUgUG9saWN5IFJ1bGVzLg0KPg0KPiAgICAgwrdQ b2xpY3kgUnVsZS4gQSBQb2xpY3kgUnVsZSBjb25zaXN0cyBvZiBhIFBvbGljeSBjb250ZXh0IGFu ZCBhIHNldA0KPiAgICAgb2YgQWN0aW9ucyB0byBiZSBhcHBsaWVkIHRvIHRoZSB0cmFmZmljLg0K Pg0KPiAgICAgwrdQb2xpY3kgQ29udGV4dC4gQ29udGV4dCB0aGF0IGRlc2NyaWJlcyB3aGVuIGEg UG9saWN5IFJ1bGUgaXMgdG8gYmUNCj4gICAgIGFwcGxpZWQuIEl0IGlzIGV4cHJlc3NlZCBhcyBh IGRpcmVjdGlvbiwgYSBsaXN0IG9mIEw0IHBvcnRzLCB0aW1lDQo+ICAgICByYW5nZSwgYW5kIGEg cHJvdG9jb2wuDQo+DQo+ICAgICDCt1BvbGljeSBBY3Rpb24uIFRoaXMgaXMgdGhlIGFjdGlvbiBh cHBsaWVkIHRvIHRoZSB0cmFmZmljIHRoYXQNCj4gICAgIG1hdGNoZXMgdGhlIGNsYXNzaWZpZXIu IEFuIGFjdGlvbiBtYXkgYmUgYSBzaW1wbGUgQUNMIGFjdGlvbiAoaS5lLg0KPiAgICAgYWxsb3cs IGRlbnksIG1pcnJvcmluZyksIGFwcGx5aW5nIGEgd2VsbCBrbm93biBzdGF0aXN0aWNzIGZ1bmN0 aW9ucw0KPiAgICAgKGUuZy4gWCBtaW51dGVzIGNvdW50LCBZIGhvdXJzIGNvdXJ0KSwgYXBwbHlp bmcgY2xpZW50IHNwZWNpZmllZA0KPiAgICAgZnVuY3Rpb25zICh3aXRoIFVSTCBwcm92aWRlZCks IG9yIG1heSByZWZlciB0byBhbiBvcmRlcmVkIHNlcXVlbmNlDQo+ICAgICBvZiBmdW5jdGlvbnMg KGkuZS4sIGEgc2VydmljZSBjaGFpbikuDQo+DQo+ICAgICBDb21tZW50cyBhcmUgZ3JlYXRseSBh cHByZWNpYXRlZC4NCj4NCj4gICAgIExpbmRhDQo+DQo+ICAgICAtLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KPiAgICAgRnJvbTogTG9hIEFuZGVyc3NvbiBbbWFpbHRvOmxvYUBwaS5udV0NCj4g ICAgIFNlbnQ6IEZyaWRheSwgT2N0b2JlciAwMiwgMjAxNSAxMjoxOCBBTQ0KPiAgICAgVG86IERJ RUdPIExPUEVaIEdBUkNJQTsgTGluZGEgRHVuYmFyDQo+ICAgICBDYzppMm5zZkBpZXRmLm9yZyA8 bWFpbHRvOmkybnNmQGlldGYub3JnPg0KPiAgICAgU3ViamVjdDogUmU6IFtJMm5zZl0gV2hhdCBk byB5b3UgcGVvcGxlIHRoaW5rIG9mIHVzaW5nIE9wZW5TdGFjaydzDQo+ICAgICBHcm91cCBCYXNl ZCBQb2xpY3kgdG8gZGVzY3JpYmUgSTJOU0YgU2VydmljZSBMYXllciBSdWxlcz8NCj4NCj4gICAg IExpbmRhIGFuZCBEaWVnbywNCj4NCj4gICAgIFRoaXMgaXMgc2FpZCBieSBzb21lb25lIHRoYXQg aXMgbm90IGZhbWlsaWFyIHdpdGggT3BlbiBTdGFjayBvciB0aGUNCj4gICAgIEdyb3VwIEJhc2Vk IFBvbGljeS4NCj4NCj4gICAgIEknbSBzb21ld2hhdCBvbiB0aGUgc2FtZSBwYWdlIGFzIERpZWdv LCBhdCBsZWFzdCBpbiB0aGUgc2FtZSBib29rLg0KPg0KPiAgICAgSWYgd2Ugd2FudCB0byB1c2Ug IE9wZW5TdGFjaydzIEdyb3VwIEJhc2VkIFBvbGljeSB0byBkZXNjcmliZSBJMk5TRg0KPiAgICAg U2VydmljZSBMYXllciBSdWxlcywgdGhlIGNhc2UgZm9yIHRoaXMgaGFzIHRvIGJlIG1hZGUgbXVj aCBiZXR0ZXIuDQo+DQo+ICAgICBXaGF0IGFyZSB0aGUgcHJvcyBhbmQgY29ucz8gQXJlIHRoZXJl IHZpYWJsZSBhbHRlcm5hdGl2ZXM/DQo+DQo+ICAgICAvTG9hDQo+DQo+ICAgICBPbiAyMDE1LTEw LTAyIDA2OjQxLCBESUVHTyBMT1BFWiBHQVJDSUEgd3JvdGU6DQo+DQo+ICAgICA+IEhpIExpbmRh LA0KPg0KPiAgICAgPg0KPg0KPiAgICAgPiBJIGFtIG5vdCBjb21wbGV0ZWx5IHN1cmUgdGhhdCB0 aGUgY3VycmVudCBuZXR3b3JraW5nIG1vZGVsIG9mDQo+DQo+ICAgICA+IE9wZW5TdGFjaywgdGhh dCBpcyByZWZsZWN0ZWQgaW4gdGhlIHJ1bGUgdGFyZ2V0cyAoZWl0aGVyIHRoZSBQVEcgYW5kDQo+ DQo+ICAgICA+IHRoZSBUYXJnZXQNCj4NCj4gICAgID4gaXRzZWxmKSBkb2VzIGNvdmVyIGFsbCB0 aGUgcG90ZW50aWFsIHNlbWFudGljcyBmb3IgZ2VuZXJhbCBzZWN1cml0eQ0KPg0KPiAgICAgPiBm dW5jdGlvbnMuIFRoZSBzYW1lIGNvbmNlcm4gYXBwbGllcyB0byBQb2xpY3kgQ2xhc3NpZmllciwg YXMgdGhleSBzZWVtDQo+DQo+ICAgICA+IHZlcnkgbXVjaCBhc3NvY2lhdGVkIHdpdGggYSBwYXJ0 aWN1bGFyIGltcGxlbWVudGF0aW9uIG1vZGVsIGFuZCwgd2hhdA0KPg0KPiAgICAgPiBpcyBtb3Jl LCB3aXRoIGEgbGltaXRlZCBuZXR3b3JrIG1vZGVsLg0KPg0KPiAgICAgPg0KPg0KPiAgICAgPiBC ZSBnb29kZSwNCj4NCj4gICAgID4NCj4NCj4gICAgID4NCj4NCj4gICAgID4+IE9uIDEgT2N0IDIw MTUsIGF0IDIzOjMyICwgTGluZGEgRHVuYmFyIDxsaW5kYS5kdW5iYXJAaHVhd2VpLmNvbSA8bWFp bHRvOmxpbmRhLmR1bmJhckBodWF3ZWkuY29tPg0KPg0KPiAgICAgPj4gPG1haWx0bzpsaW5kYS5k dW5iYXJAaHVhd2VpLmNvbT4+IHdyb3RlOg0KPg0KPiAgICAgPj4NCj4NCj4gICAgID4+IEkyTlNG IHBhcnRpY2lwYW50cywNCj4NCj4gICAgID4+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9k b2MvZHJhZnQteGlhLWkybnNmLWNhcGFiaWxpdHktaW50ZXJmYWNlDQo+DQo+ICAgICA+PiAtaW0v c3BlY2lmaWVzIHRoZSBzdHJ1Y3R1cmUgZm9yIEkyTlNGIGNhcGFiaWxpdHkgbGF5ZXIgcnVsZXMu DQo+DQo+ICAgICA+PiBGb3IgdGhlIEkyTlNGIHNpbXBsZSBzZXJ2aWNlIGxheWVyLCB3aGF0IGRv IHBlb3BsZSB0aGluayBvZiB1c2luZw0KPg0KPiAgICAgPj4gT3BlblN0YWNr4oCZcyBHcm91cCBQ b2xpY3kgc3RydWN0dXJlID8NCj4NCj4gICAgID4+IElmIHVzaW5nIE9wZW5TdGFjayBHcm91cC1i YXNlZCBQb2xpY3kgKEdCUCkgc3RydWN0dXJlLCB0aGUgSTJOU0YNCj4NCj4gICAgID4+IHNpbXBs ZSBzZXJ2aWNlIGxheWVyIGNhbiBiZSBleHByZXNzZWQgYXMgwrdQb2xpY3kgVGFyZ2V0IEdyb3Vw IChQVEcpLg0KPg0KPiAgICAgPj4gVGhpcyBpcyBhIGdyb3VwIG9mIFRhcmdldHMgdG8gd2hpY2gg YSB0cmFmZmljIHBvbGljeSBjYW4gYmUgYXBwbGllZC4NCj4NCj4gICAgID4+IEEgUFRHIG1heSBi ZSBtYXBwZWQgdG8gYSBOZXV0cm9uIFN1Ym5ldCwgYSBjbGllbnQgdmlydHVhbCBTdWJuZXQNCj4N Cj4gICAgID4+IChpLmUuIHdpdGggcHJpdmF0ZSBhZGRyZXNzIHByZWZpeCksIGEgc3VibmV0IHdp dGggcHVibGljIGFkZHJlc3MNCj4NCj4gICAgID4+IGZhbWlsaWVzLCBvciBhbnkgY29tYmluYXRp b24gb2YgdGhlbSB3aXRoIGxvZ2ljYWwgb3BlcmF0b3JzIChMb2dpY2FsDQo+DQo+ICAgICA+PiBB TkQsIE9SLCBvciBOT1QpLiBBIFBURyByZWZlcmVuY2VzIG9uZSBvciBtb3JlIFBvbGljeSBSdWxl IFNldHMgdGhhdA0KPg0KPiAgICAgPj4gaXQgY29uc3VtZXMgb3IgcHJvdmlkZXMuDQo+DQo+ICAg ICA+PiDCt1RhcmdldC4gVGhpcyBpcyB1c2VkIGJ5IHRoZSBhcHBsaWNhdGlvbiBjbGllbnQgdG8g ZXN0YWJsaXNoDQo+DQo+ICAgICA+PiBjb21tdW5pY2F0aW9ucyBvdmVyIHRoZSBuZXR3b3JrLiBB IFRhcmdldCBpcyBtYXBwZWQgdG8gYSBzaW5nbGUNCj4NCj4gICAgID4+IE5ldXRyb24gUG9ydCwg YSBwaHlzaWNhbC9sb2dpY2FsIGluZ3Jlc3MgcG9ydCwgb3IgYSBwaHlzaWNhbC9sb2dpY2FsDQo+ DQo+ICAgICA+PiBlZ3Jlc3MgcG9ydC4NCj4NCj4gICAgID4+IMK3UG9saWN5IFJ1bGUgU2V0LiBB IFBvbGljeSBSdWxlIFNldCBpcyB1c2VkIHRvIGRldGVybWluZSBob3cgdGhlDQo+DQo+ICAgICA+ PiB0cmFmZmljIGJldHdlZW4gYSBwYWlyIG9mIFRhcmdldCBHcm91cHMgaXMgdG8gYmUgdHJlYXRl ZC4gQSBQb2xpY3kNCj4NCj4gICAgID4+IFJ1bGUgU2V0IGNvbnNpc3RzIG9mIG9uZSBvciBtb3Jl IFBvbGljeSBSdWxlcy4NCj4NCj4gICAgID4+IMK3UG9saWN5IFJ1bGUuIEEgUG9saWN5IFJ1bGUg Y29uc2lzdHMgb2YgYSBUcmFmZmljIENsYXNzaWZpZXIgYW5kIGENCj4NCj4gICAgID4+IHNldCBv ZiBBY3Rpb25zIHRvIGJlIGFwcGxpZWQgdG8gdGhlIHRyYWZmaWMuDQo+DQo+ICAgICA+PiDCt1Bv bGljeSBDbGFzc2lmaWVyLiBBIHRyYWZmaWMgY2xhc3NpZmllciBkZXNjcmliZXMgdGhlIHRyYWZm aWMgdG8NCj4NCj4gICAgID4+IHdoaWNoIGEgUG9saWN5IFJ1bGUgaXMgdG8gYmUgYXBwbGllZC4g SXQgaXMgZXhwcmVzc2VkIGFzIGEgZGlyZWN0aW9uLA0KPg0KPiAgICAgPj4gYSBsaXN0IG9mIEw0 IHBvcnRzLCB0aW1lIHJhbmdlLCBhbmQgYSBwcm90b2NvbC4NCj4NCj4gICAgID4+IMK3UG9saWN5 IEFjdGlvbi4gVGhpcyBpcyB0aGUgYWN0aW9uIGFwcGxpZWQgdG8gdGhlIHRyYWZmaWMgdGhhdA0K Pg0KPiAgICAgPj4gbWF0Y2hlcyB0aGUgY2xhc3NpZmllci4gQW4gYWN0aW9uIG1heSBiZSBhIHNp bXBsZSBBQ0wgYWN0aW9uIChpLmUuDQo+DQo+ICAgICA+PiBhbGxvdywgZGVueSwgbWlycm9yaW5n KSwgYXBwbHlpbmcgYSB3ZWxsIGtub3duIHN0YXRpc3RpY3MgZnVuY3Rpb25zDQo+DQo+ICAgICA+ PiAoZS5nLiBYIG1pbnV0ZXMgY291bnQsIFkgaG91cnMgY291cnQpLCBhcHBseWluZyBjbGllbnQg c3BlY2lmaWVkDQo+DQo+ICAgICA+PiBmdW5jdGlvbnMgKHdpdGggVVJMIHByb3ZpZGVkKSwgb3Ig bWF5IHJlZmVyIHRvIGFuIG9yZGVyZWQgc2VxdWVuY2Ugb2YNCj4NCj4gICAgID4+IGZ1bmN0aW9u cyAoaS5lLiwgYSBzZXJ2aWNlIGNoYWluKS4NCj4NCj4gICAgID4+IElmIHlvdSBoYXZlIGNvbmNl cm4gb2YgdXNpbmcgT3BlblN0YWNrIEdyb3VwIEJhc2VkIFBvbGljaWVzLCBwbGVhc2UNCj4NCj4g ICAgID4+IGxldCB0aGUgZ3JvdXAga25vdy4NCj4NCj4gICAgID4+IFRoYW5rcywgTGluZGENCj4N Cj4gICAgID4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQo+DQo+ICAgICA+PiBJMm5zZiBtYWlsaW5nIGxpc3QNCj4NCj4gICAgID4+STJuc2ZAaWV0Zi5v cmcgPG1haWx0bzpJMm5zZkBpZXRmLm9yZz48bWFpbHRvOkkybnNmQGlldGYub3JnPg0KPg0KPiAg ICAgPj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQo+DQo+ICAg ICA+DQo+DQo+ICAgICA+IC0tDQo+DQo+ICAgICA+ICJFc3RhIHZleiBubyBmYWxsYXJlbW9zLCBE b2N0b3IgSW5maWVybm8iDQo+DQo+ICAgICA+DQo+DQo+ICAgICA+IERyIERpZWdvIFIuIExvcGV6 DQo+DQo+ICAgICA+IFRlbGVmb25pY2EgSStEDQo+DQo+ICAgICA+aHR0cDovL3Blb3BsZS50aWQu ZXMvZGllZ28ubG9wZXovDQo+DQo+ICAgICA+DQo+DQo+ICAgICA+IGUtbWFpbDpkaWVnby5yLmxv cGV6QHRlbGVmb25pY2EuY29tIDxtYWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbT4N Cj4NCj4gICAgID4gVGVsOiAgICArMzQgOTEzIDEyOSAwNDENCj4NCj4gICAgID4gTW9iaWxlOiAr MzQgNjgyIDA1MSAwOTENCj4NCj4gICAgID4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLQ0KPg0KPiAgICAgPg0KPg0KPiAgICAgPg0KPg0KPiAgICAgPiAtLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ DQo+ICAgICA+IC0tDQo+DQo+ICAgICA+DQo+DQo+ICAgICA+IEVzdGUgbWVuc2FqZSB5IHN1cyBh ZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UNCj4NCj4gICAgID4gZGVzdGlu YXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29uZmlk ZW5jaWFsIHkNCj4NCj4gICAgID4gZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEg byBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVzDQo+DQo+ICAgICA+IHVzdGVkLiBlbCBkZXN0 aW5hdGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhIGxlY3R1cmEsDQo+ DQo+ICAgICA+IHV0aWxpemFjacOzbiwgZGl2dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4gYXV0b3Jp emFjacOzbiBwdWVkZSBlc3Rhcg0KPg0KPiAgICAgPiBwcm9oaWJpZGEgZW4gdmlydHVkIGRlIGxh IGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBTaSBoYSByZWNpYmlkbyBlc3RlDQo+DQo+ICAgICA+IG1l bnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5pcXVlIGlubWVkaWF0 YW1lbnRlIHBvcg0KPg0KPiAgICAgPiBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVz dHJ1Y2Npw7NuLg0KPg0KPiAgICAgPg0KPg0KPiAgICAgPiBUaGUgaW5mb3JtYXRpb24gY29udGFp bmVkIGluIHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kDQo+DQo+ICAgICA+IGNv bmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBvbmx5IGZvciB0aGUgdXNlIG9mIHRoZSBp bmRpdmlkdWFsDQo+DQo+ICAgICA+IG9yIGVudGl0eSBuYW1lZCBhYm92ZS4gSWYgdGhlIHJlYWRl ciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRoZQ0KPg0KPiAgICAgPiBpbnRlbmRlZCByZWNpcGll bnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24sDQo+DQo+ ICAgICA+IGRpc3RyaWJ1dGlvbiBvciBjb3B5aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlvbiBpcyBz dHJpY3RseSBwcm9oaWJpdGVkLg0KPg0KPiAgICAgPiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlz IHRyYW5zbWlzc2lvbiBpbiBlcnJvciwgZG8gbm90IHJlYWQgaXQuDQo+DQo+ICAgICA+IFBsZWFz ZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQg dGhpcw0KPg0KPiAgICAgPiBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFuZCB0aGVuIGRlbGV0ZSBp dC4NCj4NCj4gICAgID4NCj4NCj4gICAgID4gRXN0YSBtZW5zYWdlbSBlIHNldXMgYW5leG9zIHNl IGRpcmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1DQo+DQo+ICAgICA+IGRlc3RpbmF0w6FyaW8s IHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFsIGUg w6kNCj4NCj4gICAgID4gcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBk ZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZvc3NhDQo+DQo+ICAgICA+IHNlbmhvcmlhIG8gZGVzdGlu YXTDoXJpbyBpbmRpY2FkbywgZmljYSBub3RpZmljYWRvIGRlIHF1ZSBhIGxlaXR1cmEsDQo+DQo+ ICAgICA+IHV0aWxpemHDp8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6 YcOnw6NvIHBvZGUgZXN0YXIgcHJvaWJpZGENCj4NCj4gICAgID4gZW0gdmlydHVkZSBkYSBsZWdp c2xhw6fDo28gdmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLA0KPg0K PiAgICAgPiByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29tdW5pcXVlIGltZWRpYXRhbWVudGUgcG9y IGVzdGEgbWVzbWEgdmlhIGUNCj4NCj4gICAgID4gcHJvY2VkYSBhIHN1YSBkZXN0cnVpw6fDo28N Cj4NCj4gICAgID4NCj4NCj4gICAgID4NCj4NCj4gICAgID4gX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCj4NCj4gICAgID4gSTJuc2YgbWFpbGluZyBsaXN0 DQo+DQo+ICAgICA+STJuc2ZAaWV0Zi5vcmcgPG1haWx0bzpJMm5zZkBpZXRmLm9yZz4NCj4NCj4g ICAgID5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQo+DQo+ICAg ICA+DQo+DQo+IC0tDQo+ICJFc3RhIHZleiBubyBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVybm8i DQo+DQo+IERyIERpZWdvIFIuIExvcGV6DQo+IFRlbGVmb25pY2EgSStEDQo+IGh0dHA6Ly9wZW9w bGUudGlkLmVzL2RpZWdvLmxvcGV6Lw0KPg0KPiBlLW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZv bmljYS5jb20gPG1haWx0bzpkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPg0KPiBUZWw6ICAg ICszNCA5MTMgMTI5IDA0MQ0KPiBNb2JpbGU6ICszNCA2ODIgMDUxIDA5MQ0KPiAtLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+DQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPg0KPg0KPiBF c3RlIG1lbnNhamUgeSBzdXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNsdXNpdmFtZW50ZSBhIHN1 IGRlc3RpbmF0YXJpbywNCj4gcHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7NuIHByaXZpbGVnaWFk YSBvIGNvbmZpZGVuY2lhbCB5IGVzIHBhcmEgdXNvDQo+IGV4Y2x1c2l2byBkZSBsYSBwZXJzb25h IG8gZW50aWRhZCBkZSBkZXN0aW5vLiBTaSBubyBlcyB1c3RlZC4gZWwNCj4gZGVzdGluYXRhcmlv IGluZGljYWRvLCBxdWVkYSBub3RpZmljYWRvIGRlIHF1ZSBsYSBsZWN0dXJhLCB1dGlsaXphY2nD s24sDQo+IGRpdnVsZ2FjacOzbiB5L28gY29waWEgc2luIGF1dG9yaXphY2nDs24gcHVlZGUgZXN0 YXIgcHJvaGliaWRhIGVuIHZpcnR1ZA0KPiBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kg aGEgcmVjaWJpZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJvciwgbGUNCj4gcm9nYW1vcyBxdWUgbm9z IGxvIGNvbXVuaXF1ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2Vk YQ0KPiBhIHN1IGRlc3RydWNjacOzbi4NCj4NCj4gVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBp biB0aGlzIHRyYW5zbWlzc2lvbiBpcyBwcml2aWxlZ2VkIGFuZA0KPiBjb25maWRlbnRpYWwgaW5m b3JtYXRpb24gaW50ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVhbCBvcg0K PiBlbnRpdHkgbmFtZWQgYWJvdmUuIElmIHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlzIG5v dCB0aGUgaW50ZW5kZWQNCj4gcmVjaXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0 IGFueSBkaXNzZW1pbmF0aW9uLCBkaXN0cmlidXRpb24NCj4gb3IgY29weWluZyBvZiB0aGlzIGNv bW11bmljYXRpb24gaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4gSWYgeW91IGhhdmUNCj4gcmVjZWl2 ZWQgdGhpcyB0cmFuc21pc3Npb24gaW4gZXJyb3IsIGRvIG5vdCByZWFkIGl0LiBQbGVhc2UgaW1t ZWRpYXRlbHkNCj4gcmVwbHkgdG8gdGhlIHNlbmRlciB0aGF0IHlvdSBoYXZlIHJlY2VpdmVkIHRo aXMgY29tbXVuaWNhdGlvbiBpbiBlcnJvcg0KPiBhbmQgdGhlbiBkZWxldGUgaXQuDQo+DQo+IEVz dGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4Y2x1c2l2YW1lbnRlIGFvIHNl dQ0KPiBkZXN0aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZvcm1hw6fDo28gcHJpdmlsZWdpYWRh IG91IGNvbmZpZGVuY2lhbCBlIMOpDQo+IHBhcmEgdXNvIGV4Y2x1c2l2byBkYSBwZXNzb2Egb3Ug ZW50aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYQ0KPiBzZW5ob3JpYSBvIGRlc3Rp bmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUgYSBsZWl0dXJhLA0KPiB1 dGlsaXphw6fDo28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8OjbyBw b2RlIGVzdGFyIHByb2liaWRhIGVtDQo+IHZpcnR1ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2VudGUu IFNlIHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBwb3IgZXJybywNCj4gcm9nYW1vcy1saGUgcXVlIG5v cyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZpYSBlDQo+IHByb2Nl ZGEgYSBzdWEgZGVzdHJ1acOnw6NvDQo+DQo+DQo+DQo+IF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQo+IEkybnNmIG1haWxpbmcgbGlzdA0KPiBJMm5zZkBp ZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQo+ DQoNCg0K From nobody Sat Oct 10 13:37:18 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08E891B4816 for ; Sat, 10 Oct 2015 13:37:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SfE7vtQIvjtk for ; Sat, 10 Oct 2015 13:37:12 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 88ACE1B480C for ; Sat, 10 Oct 2015 13:37:09 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BYQ60968; Sat, 10 Oct 2015 20:37:07 +0000 (GMT) Received: from DFWEML703-CHM.china.huawei.com (10.193.5.130) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Sat, 10 Oct 2015 21:37:06 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml703-chm ([10.193.5.130]) with mapi id 14.03.0235.001; Sat, 10 Oct 2015 13:36:51 -0700 From: Linda Dunbar To: Aldo Basile , Linda Dunbar , DIEGO LOPEZ GARCIA Thread-Topic: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? Thread-Index: AdD8kJsQ5Rkc+aynSXudFPC41PBbhwACacoAAByF3gAAqS/JgAAsLekAAAV4c8AAZ3jdAABYCpig Date: Sat, 10 Oct 2015 20:36:51 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D69E88@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D66494@dfweml701-chm> <64E8BEC6-2EAC-41AF-9C72-9CBFF4A1D228@telefonica.com> <560E137C.7030707@pi.nu> <4A95BA014132FF49AE685FAB4B9F17F657D676D7@dfweml701-chm> <4A95BA014132FF49AE685FAB4B9F17F657D67E42@dfweml701-chm> <56168676.70707@polito.it> In-Reply-To: <56168676.70707@polito.it> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.212.244.199] Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" , Loa Andersson Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Based Policy to describe I2NSF Service Layer Rules? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Oct 2015 20:37:16 -0000 Aldo,=20 Thank you very much for the links. They are very helpful.=20 Linda -----Original Message----- From: Aldo Basile [mailto:cataldo.basile@polito.it]=20 Sent: Thursday, October 08, 2015 10:07 AM To: Linda Dunbar; DIEGO LOPEZ GARCIA Cc: i2nsf@ietf.org; Loa Andersson Subject: Re: [I2nsf] What do you people think of using OpenStack's Group Ba= sed Policy to describe I2NSF Service Layer Rules? Dear Linda, first of all sorry for the very late reply, and thanks Diego for=20 introducing me (and presenting me as a 'policy expert'). I admit there is not a lot of good literature on Security Management (I=20 assume Policy-based Security Management or Policy-Based Network Security=20 Management, which is a relatively narrow field). I'm listing here some=20 works but I'm sure you already know all of them. 1) Most of the works start from the Strassner definition of Policy-based=20 Network Management (PBNM). Strassner introduced the idea of 'policy=20 continuum' and developed the DEN-ng architecture. Here a set of links to Strassner's papers: http://citeseerx.ist.psu.edu/viewdoc/download?doi=3D10.1.1.495.4361&rep=3Dr= ep1&type=3Dpdf http://ieeexplore.ieee.org/xpl/login.jsp?tp=3D&arnumber=3D1015622&url=3Dhtt= p%3A%2F%2Fieeexplore.ieee.org%2Fxpls%2Fabs_all.jsp%3Farnumber%3D1015622 He also published a book (which I didn't read): http://dl.acm.org/citation.cfm?id=3D1206794 2) Then, I know this work from an IBM fellow that tries to map and=20 organize PBNM concepts on the security field http://researchweb.watson.ibm.com/people/d/dverma/papers/NetMgmtPolicy.pdf 3) Then there are the RFC3198 and the PCIM series (RFC 3060, now RFC 3460). No recent works though. Apparently, this research field has moved from=20 academia to industry. Please let me know if you further details or if I didn't interpret=20 correctly the "Security Management" field. Regards, Aldo On 06/10/2015 17:56, Linda Dunbar wrote: > Diego: Thank you very much for relaying Aldo=92s comments. That is very > useful. > > Aldo: Can you suggest some references for the =93Security Management=94? > > Bear in mind that I2NSF is not to tackle the general policies (which > belongs to SUPA WG). > > I2NSF is to open a hole for clients/applications to inform to Flow-based > NSFs to inform them the rules for treating traffic traversing through. > > Using PCIM (RFC3060 which the ITU-T X.1036 was based on) as a basis > would be a good idea. However, RFC3060 was created for general network > policies for Directory Enabled Network, in some aspects more than what > I2NSF needs, and in other aspects needs extension. Especially need > extension on the Policy Context (i.e. the directions, the time, and > other contextual events that governs the policies to NSFs). E.g. > > *From:*DIEGO LOPEZ GARCIA [mailto:diego.r.lopez@telefonica.com] > *Sent:* Tuesday, October 06, 2015 6:07 AM > *To:* Linda Dunbar > *Cc:* Loa Andersson; Aldo Basile; i2nsf@ietf.org > *Subject:* Re: [I2nsf] What do you people think of using OpenStack's > Group Based Policy to describe I2NSF Service Layer Rules? > > Hi Linda, > > I have been talking about this with one of the policy experts in the > SECURED project (Aldo Basile, I have put him in Cc: so you can identify > him, though he is in the I2NSF list as well=85) and these are his comment= s: > > 8<=97 > > In my understanding, OpenStack Group Policies are a simplified yet > generic way to associate iptables-like rules, the syntax is very > similar. > It is network management rather then security management. You can > express simple network policies (commands) and associate to network > nodes and groups. > > GBP is not a generic framework for expressing policies. > Something is general (like the definition of rules as > (classifier,action)) but it requires several extensions that, in the > end, when completed will lead to PCIM or SG17-like models. > > Thus, in my opinion, SG17/PCIM are certainly a better starting > point, and also easier to push SECURED results. > > "Policy Classifier" is another way to tell 'matching conditions' (as > networking people likes the word classifier, for me a classifier is > something more intelligent). > > Conditions available on OpenStack Group Policies are now a very > limited subset of l4 filtering (they don't even cover packet > filters). However, the model (condition,action) is general enough to > cope with future needs (by adding more classifiers). > > There is no way to categorize policies (thus no capabilities no easy > link to NSF categorization for interoperability). > > Then, no resolution strategies, no default actions, no priorities, > no other sophisticated ways to express policies. > > 8<=97 > > I=92ll let Aldo to express his views in more detail, but my position is > that we should consider an existing general framework as starting point, > and that PCIM (see http://www.dmtf.org/standards/policy) is the most > promising one. > > Be goode, > > On 5 Oct 2015, at 23:45 , Linda Dunbar > wrote: > > Thanks to Loa and Diego for the comments. > > Here are some pros and cons of using Open Stack Group Based Policy: > > Pros: > > =B7There are running codes (open sourced code) > > Cons: > > =B7The OpenStack's group based policy is very much Neutron port > oriented. It is not straight forward for an environment that is not > based on OpenStack Neutron. > > =B7They are not designed for expressing rules to Flow-based NSF on ho= w > to treat client/applications traffic. The current set is not > complete, a lot more need to be added. > > =B7There are other "Group Based Policy", e.g. Window's Group Policy, > which are quite different from the OpenStack=92s Group Based Policy. > > =B7May cause confusion in industry if calling =93Group Based Policy= =94 for > I2NSF Service Layer > > However, the notation of Groups, Target, Context and action do cover > what is needed for clients/applications to express the rules on how > their flows can be treated by the Flow-Based NSFs in networks. And > they can be mapped to the Capability layer=92s > Subject-Object-Action-Function=94 paradigm. > > To avoid the confusion, it might be better to avoid using the term > =93Group based policy=94 (but inherent their concept only). > > For example, =93group=94 can be represented by =93Composite > Endpoints/Targets=94 or Endpoint Container (if using SUPA language), > where an =93Endpoint=94 can be a subnet, a set of hosts or applicatio= ns, > etc. > > =B7Composite Endpoint (CEP). Logical combination of endpoint > descriptor IDs, where descriptor can be subnet, set of hosts, or > applications. > > =B7Endpoint Descriptor (EPD). Each endpoint descriptor has a type and > value that are used to partially identify the endpoint. The type of > the Endpoint Descriptor may be a base networking identifier, such as > an IP address, or a user-defined type. The value may be a single > value, a range of values, or a group of values. > > =B7Target. This is used by the application client to establish > communications over the network. A Target is mapped to a > physical/logical ingress port, or a physical/logical egress port. > > =B7Policy Rule Set. A Policy Rule Set is used to determine how the > traffic between a pair of Target Groups is to be treated. A Policy > Rule Set consists of one or more Policy Rules. > > =B7Policy Rule. A Policy Rule consists of a Policy context and a set > of Actions to be applied to the traffic. > > =B7Policy Context. Context that describes when a Policy Rule is to be > applied. It is expressed as a direction, a list of L4 ports, time > range, and a protocol. > > =B7Policy Action. This is the action applied to the traffic that > matches the classifier. An action may be a simple ACL action (i.e. > allow, deny, mirroring), applying a well known statistics functions > (e.g. X minutes count, Y hours court), applying client specified > functions (with URL provided), or may refer to an ordered sequence > of functions (i.e., a service chain). > > Comments are greatly appreciated. > > Linda > > -----Original Message----- > From: Loa Andersson [mailto:loa@pi.nu] > Sent: Friday, October 02, 2015 12:18 AM > To: DIEGO LOPEZ GARCIA; Linda Dunbar > Cc:i2nsf@ietf.org > Subject: Re: [I2nsf] What do you people think of using OpenStack's > Group Based Policy to describe I2NSF Service Layer Rules? > > Linda and Diego, > > This is said by someone that is not familiar with Open Stack or the > Group Based Policy. > > I'm somewhat on the same page as Diego, at least in the same book. > > If we want to use OpenStack's Group Based Policy to describe I2NSF > Service Layer Rules, the case for this has to be made much better. > > What are the pros and cons? Are there viable alternatives? > > /Loa > > On 2015-10-02 06:41, DIEGO LOPEZ GARCIA wrote: > > > Hi Linda, > > > > > > I am not completely sure that the current networking model of > > > OpenStack, that is reflected in the rule targets (either the PTG an= d > > > the Target > > > itself) does cover all the potential semantics for general security > > > functions. The same concern applies to Policy Classifier, as they s= eem > > > very much associated with a particular implementation model and, wh= at > > > is more, with a limited network model. > > > > > > Be goode, > > > > > > > > >> On 1 Oct 2015, at 23:32 , Linda Dunbar > > >> > wrote: > > >> > > >> I2NSF participants, > > >>https://datatracker.ietf.org/doc/draft-xia-i2nsf-capability-interfa= ce > > >> -im/specifies the structure for I2NSF capability layer rules. > > >> For the I2NSF simple service layer, what do people think of using > > >> OpenStack=92s Group Policy structure ? > > >> If using OpenStack Group-based Policy (GBP) structure, the I2NSF > > >> simple service layer can be expressed as =B7Policy Target Group (P= TG). > > >> This is a group of Targets to which a traffic policy can be applie= d. > > >> A PTG may be mapped to a Neutron Subnet, a client virtual Subnet > > >> (i.e. with private address prefix), a subnet with public address > > >> families, or any combination of them with logical operators (Logic= al > > >> AND, OR, or NOT). A PTG references one or more Policy Rule Sets th= at > > >> it consumes or provides. > > >> =B7Target. This is used by the application client to establish > > >> communications over the network. A Target is mapped to a single > > >> Neutron Port, a physical/logical ingress port, or a physical/logic= al > > >> egress port. > > >> =B7Policy Rule Set. A Policy Rule Set is used to determine how the > > >> traffic between a pair of Target Groups is to be treated. A Policy > > >> Rule Set consists of one or more Policy Rules. > > >> =B7Policy Rule. A Policy Rule consists of a Traffic Classifier and= a > > >> set of Actions to be applied to the traffic. > > >> =B7Policy Classifier. A traffic classifier describes the traffic t= o > > >> which a Policy Rule is to be applied. It is expressed as a directi= on, > > >> a list of L4 ports, time range, and a protocol. > > >> =B7Policy Action. This is the action applied to the traffic that > > >> matches the classifier. An action may be a simple ACL action (i.e. > > >> allow, deny, mirroring), applying a well known statistics function= s > > >> (e.g. X minutes count, Y hours court), applying client specified > > >> functions (with URL provided), or may refer to an ordered sequence= of > > >> functions (i.e., a service chain). > > >> If you have concern of using OpenStack Group Based Policies, pleas= e > > >> let the group know. > > >> Thanks, Linda > > >> _______________________________________________ > > >> I2nsf mailing list > > >>I2nsf@ietf.org > > >>https://www.ietf.org/mailman/listinfo/i2nsf > > > > > > -- > > > "Esta vez no fallaremos, Doctor Infierno" > > > > > > Dr Diego R. Lopez > > > Telefonica I+D > > >http://people.tid.es/diego.lopez/ > > > > > > e-mail:diego.r.lopez@telefonica.com > > > Tel: +34 913 129 041 > > > Mobile: +34 682 051 091 > > > ---------------------------------- > > > > > > > > > -------------------------------------------------------------------= --- > > > -- > > > > > > Este mensaje y sus adjuntos se dirigen exclusivamente a su > > > destinatario, puede contener informaci=F3n privilegiada o confidenc= ial y > > > es para uso exclusivo de la persona o entidad de destino. Si no es > > > usted. el destinatario indicado, queda notificado de que la lectura= , > > > utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede est= ar > > > prohibida en virtud de la legislaci=F3n vigente. Si ha recibido est= e > > > mensaje por error, le rogamos que nos lo comunique inmediatamente p= or > > > esta misma v=EDa y proceda a su destrucci=F3n. > > > > > > The information contained in this transmission is privileged and > > > confidential information intended only for the use of the individua= l > > > or entity named above. If the reader of this message is not the > > > intended recipient, you are hereby notified that any dissemination, > > > distribution or copying of this communication is strictly prohibite= d. > > > If you have received this transmission in error, do not read it. > > > Please immediately reply to the sender that you have received this > > > communication in error and then delete it. > > > > > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > > > destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confiden= cial e =E9 > > > para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9 v= ossa > > > senhoria o destinat=E1rio indicado, fica notificado de que a leitur= a, > > > utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pod= e estar proibida > > > em virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem por = erro, > > > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > > > proceda a sua destrui=E7=E3o > > > > > > > > > _______________________________________________ > > > I2nsf mailing list > > >I2nsf@ietf.org > > >https://www.ietf.org/mailman/listinfo/i2nsf > > > > > -- > "Esta vez no fallaremos, Doctor Infierno" > > Dr Diego R. Lopez > Telefonica I+D > http://people.tid.es/diego.lopez/ > > e-mail: diego.r.lopez@telefonica.com > Tel: +34 913 129 041 > Mobile: +34 682 051 091 > ---------------------------------- > > ------------------------------------------------------------------------ > > > Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, > puede contener informaci=F3n privilegiada o confidencial y es para uso > exclusivo de la persona o entidad de destino. Si no es usted. el > destinatario indicado, queda notificado de que la lectura, utilizaci=F3n, > divulgaci=F3n y/o copia sin autorizaci=F3n puede estar prohibida en virtu= d > de la legislaci=F3n vigente. Si ha recibido este mensaje por error, le > rogamos que nos lo comunique inmediatamente por esta misma v=EDa y proced= a > a su destrucci=F3n. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual or > entity named above. If the reader of this message is not the intended > recipient, you are hereby notified that any dissemination, distribution > or copying of this communication is strictly prohibited. If you have > received this transmission in error, do not read it. Please immediately > reply to the sender that you have received this communication in error > and then delete it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confidencial e= =E9 > para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa > senhoria o destinat=E1rio indicado, fica notificado de que a leitura, > utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode esta= r proibida em > virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro, > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > proceda a sua destrui=E7=E3o > > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > From nobody Wed Oct 14 14:58:52 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B15321A8A76 for ; Wed, 14 Oct 2015 14:58:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.701 X-Spam-Level: X-Spam-Status: No, score=-100.701 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3R9FRxDDXmaq for ; Wed, 14 Oct 2015 14:58:48 -0700 (PDT) Received: from asmtp2.iomartmail.com (asmtp2.iomartmail.com [62.128.201.249]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F36F1A8A72 for ; Wed, 14 Oct 2015 14:58:47 -0700 (PDT) Received: from asmtp2.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp2.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9ELwdfC008332; Wed, 14 Oct 2015 22:58:39 +0100 Received: from 950129200 ([66.129.246.4]) (authenticated bits=0) by asmtp2.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9ELwZ5D008320 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO); Wed, 14 Oct 2015 22:58:38 +0100 From: "Adrian Farrel" To: Date: Wed, 14 Oct 2015 22:58:32 +0100 Message-ID: <003301d106cb$79a613f0$6cf23bd0$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdEGytiub8UZ+qKxRqOHGgPaJUVyag== Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-21880.003 X-TM-AS-Result: No--7.791-10.0-31-10 X-imss-scan-details: No--7.791-10.0-31-10 X-TMASE-MatchedRID: VassfZx9nB1iWV0DQ85LUoBXdkxWsrDIlnrMq7Sriu02t9SD70TDbV72 1f1Z1L9KKvYE+bXrZ8zNf0peb0lymLtaoC6wda2MtjOSnnzCBb7urwUTtj+IjbrtDe4+j0ojPlt D2JnJF3qU8j4U/DNH5m2K2jEL9n9FjsTZ4o/KHRNLp8AlDq8z4qtuGpKPnsvlFTIyfyTa0AyY0w WQws9v2gzdH1y+1xvOKfHkPQsPb3TD+BfC7JVLE+YAh37ZsBDCfS0Ip2eEHny+qryzYw2E8H8ow SQ57rVIUEhWy9W70AEgBwKKRHe+r4JPfoU7XZtpQ0+DNaFNagoe4ZeisGvBqYEpPyOzsQiPq5Jo iPcrC2w= Archived-At: Cc: 'Linda Dunbar' Subject: [I2nsf] Preparing for Yokohama X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 21:58:50 -0000 Hi, As Linda previous noted, we are scheduled to meet in Yokohama. The final agenda (https://datatracker.ietf.org/meeting/94/agenda.html) shows... Tuesday, November 3, 2015 (JST) 9:00-11:30 Tuesday Morning session I Room 302 sec i2nsf Interface to Network Security Functions (Please note the change in day from the draft agenda!) Linda and I will work on an agenda and we will probably be knocking on a few doors to find people who can help us work towards our early milestones. In the meantime, we would love to line up some happy helpers: - Jabber scribe Particularly valuable for remote participants Not a hard job See RFC 7649 - Minute-takers We don't need verbatim minutes (the audio recording is archived) It is helpful to have a record of the main points and any decisions made The chairs and WG will edit what you write Please look into your souls and volunteer for these essential tasks. Thanks, Linda and Adrian From nobody Wed Oct 14 18:17:57 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C89A11B29CB for ; Wed, 14 Oct 2015 18:17:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qI9ZCQXo_YMY for ; Wed, 14 Oct 2015 18:17:54 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB86F1A92FE for ; Wed, 14 Oct 2015 18:17:52 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCO31618; Thu, 15 Oct 2015 01:17:51 +0000 (GMT) Received: from SZXEMA412-HUB.china.huawei.com (10.82.72.71) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 15 Oct 2015 02:17:50 +0100 Received: from SZXEMA512-MBX.china.huawei.com ([169.254.7.231]) by SZXEMA412-HUB.china.huawei.com ([10.82.72.71]) with mapi id 14.03.0235.001; Thu, 15 Oct 2015 09:17:37 +0800 From: "Zhouqian (Cathy)" To: "adrian@olddog.co.uk" , "i2nsf@ietf.org" Thread-Topic: [I2nsf] Preparing for Yokohama Thread-Index: AdEGytiub8UZ+qKxRqOHGgPaJUVyagAG9lTw Date: Thu, 15 Oct 2015 01:17:37 +0000 Message-ID: References: <003301d106cb$79a613f0$6cf23bd0$@olddog.co.uk> In-Reply-To: <003301d106cb$79a613f0$6cf23bd0$@olddog.co.uk> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.66.77.95] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: Linda Dunbar Subject: Re: [I2nsf] Preparing for Yokohama X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 01:17:56 -0000 Hi Adrian, I volunteer for the minute taker. Best Regards, Cathy Zhou > -----Original Message----- > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Adrian Farrel > Sent: Thursday, October 15, 2015 5:59 AM > To: i2nsf@ietf.org > Cc: Linda Dunbar > Subject: [I2nsf] Preparing for Yokohama >=20 > Hi, >=20 > As Linda previous noted, we are scheduled to meet in Yokohama. >=20 > The final agenda (https://datatracker.ietf.org/meeting/94/agenda.html) > shows... >=20 > Tuesday, November 3, 2015 (JST) > 9:00-11:30 Tuesday Morning session I > Room 302 sec i2nsf Interface to Network Security Functions >=20 > (Please note the change in day from the draft agenda!) >=20 >=20 > Linda and I will work on an agenda and we will probably be knocking on a = few > doors to find people who can help us work towards our early milestones. >=20 > In the meantime, we would love to line up some happy helpers: > - Jabber scribe > Particularly valuable for remote participants > Not a hard job > See RFC 7649 > - Minute-takers > We don't need verbatim minutes (the audio recording is archived) > It is helpful to have a record of the main points and any decisions mad= e > The chairs and WG will edit what you write >=20 > Please look into your souls and volunteer for these essential tasks. >=20 > Thanks, > Linda and Adrian >=20 > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf From nobody Wed Oct 14 18:52:55 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1571B1B2BA8 for ; Wed, 14 Oct 2015 18:52:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.054 X-Spam-Level: X-Spam-Status: No, score=-99.054 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F2lCIsmn8QqR for ; Wed, 14 Oct 2015 18:52:52 -0700 (PDT) Received: from hickoryhill-consulting.com (hhc-web3.hickoryhill-consulting.com [64.9.205.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1214A1B2A7D for ; Wed, 14 Oct 2015 18:52:52 -0700 (PDT) X-Default-Received-SPF: pass (skip=forwardok (res=PASS)) x-ip-name=195.53.52.170; From: "Susan Hares" To: , References: <003301d106cb$79a613f0$6cf23bd0$@olddog.co.uk> In-Reply-To: <003301d106cb$79a613f0$6cf23bd0$@olddog.co.uk> Date: Wed, 14 Oct 2015 21:52:41 -0400 Message-ID: <00b601d106ec$2e3d68c0$8ab83a40$@ndzh.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00B7_01D106CA.A72E39C0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQHjkLsZ6GG5IwClN4O0C8hnnfXjW55GtsXQ Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: Cc: 'Linda Dunbar' Subject: Re: [I2nsf] Preparing for Yokohama X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 01:52:54 -0000 This is a multipart message in MIME format. ------=_NextPart_000_00B7_01D106CA.A72E39C0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Adrian and Linda: I will take minutes at I2NSF. Sue Hares -----Original Message----- From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Adrian Farrel Sent: Wednesday, October 14, 2015 5:59 PM To: i2nsf@ietf.org Cc: 'Linda Dunbar' Subject: [I2nsf] Preparing for Yokohama Hi, As Linda previous noted, we are scheduled to meet in Yokohama. The final agenda ( https://datatracker.ietf.org/meeting/94/agenda.html) shows... Tuesday, November 3, 2015 (JST) 9:00-11:30 Tuesday Morning session I Room 302 sec i2nsf Interface to Network Security Functions (Please note the change in day from the draft agenda!) Linda and I will work on an agenda and we will probably be knocking on a few doors to find people who can help us work towards our early milestones. In the meantime, we would love to line up some happy helpers: - Jabber scribe Particularly valuable for remote participants Not a hard job See RFC 7649 - Minute-takers We don't need verbatim minutes (the audio recording is archived) It is helpful to have a record of the main points and any decisions made The chairs and WG will edit what you write Please look into your souls and volunteer for these essential tasks. Thanks, Linda and Adrian _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://www.ietf.org/mailman/listinfo/i2nsf ------=_NextPart_000_00B7_01D106CA.A72E39C0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Adrian = and Linda:

 

I will = take minutes at I2NSF.

 

Sue = Hares

 

-----Original Message-----
From: I2nsf = [mailto:i2nsf-bounces@ietf.org] On Behalf Of Adrian Farrel
Sent: = Wednesday, October 14, 2015 5:59 PM
To: i2nsf@ietf.org
Cc: 'Linda = Dunbar'
Subject: [I2nsf] Preparing for Yokohama

 

Hi,

 

As = Linda previous noted, we are scheduled to meet in = Yokohama.

 

The final agenda (https://datatracker.ietf.= org/meeting/94/agenda.html) shows...

 

Tuesday, November 3, 2015 (JST)

9:00-11:30 Tuesday Morning session = I

Room 302  sec i2nsf  = Interface to Network Security Functions

 

(Please note the change in day from the draft = agenda!)

 

 

Linda = and I will work on an agenda and we will probably be knocking on a few = doors to find people who can help us work towards our early = milestones.

 

In the = meantime, we would love to line up some happy helpers:

- Jabber scribe

  Particularly valuable for remote = participants

  Not a hard = job

  See RFC = 7649

- = Minute-takers

  We don't need = verbatim minutes (the audio recording is archived)

  It is helpful to have a record of the main = points and any decisions made

  The chairs and WG will edit what you = write

 

Please look into your souls and volunteer for these = essential tasks.

 

Thanks,

Linda = and Adrian

 

_______________________________________________=

I2nsf mailing list

I2nsf@ietf.org=

https://www.ietf.org/mail= man/listinfo/i2nsf

------=_NextPart_000_00B7_01D106CA.A72E39C0-- From nobody Wed Oct 14 22:45:25 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 554A81B3090 for ; Wed, 14 Oct 2015 22:45:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.272 X-Spam-Level: X-Spam-Status: No, score=-100.272 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, HTML_MESSAGE=0.001, MIME_HTML_MOSTLY=0.428, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VfbZkrqATU3j for ; Wed, 14 Oct 2015 22:45:21 -0700 (PDT) Received: from asmtp4.iomartmail.com (asmtp4.iomartmail.com [62.128.201.175]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE3121B3091 for ; Wed, 14 Oct 2015 22:45:20 -0700 (PDT) Received: from asmtp4.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp4.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9F5jCwH029316; Thu, 15 Oct 2015 06:45:12 +0100 Received: from 950129200 (ip-64-134-230-185.public.wayport.net [64.134.230.185]) (authenticated bits=0) by asmtp4.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9F5j8sB029293 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO); Thu, 15 Oct 2015 06:45:10 +0100 From: "Adrian Farrel" To: "'Susan Hares'" , "'Zhouqian \(Cathy\)'" References: <003301d106cb$79a613f0$6cf23bd0$@olddog.co.uk> <00b601d106ec$2e3d68c0$8ab83a40$@ndzh.com> In-Reply-To: <00b601d106ec$2e3d68c0$8ab83a40$@ndzh.com> Date: Thu, 15 Oct 2015 06:45:05 +0100 Message-ID: <00a601d1070c$a6c16830$f4443890$@olddog.co.uk> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00A7_01D10715.0885D030" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQHjkLsZ6GG5IwClN4O0C8hnnfXjWwEBT8Arnj7tCOA= Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-21880.005 X-TM-AS-Result: No--16.906-10.0-31-10 X-imss-scan-details: No--16.906-10.0-31-10 X-TMASE-MatchedRID: 0dFPYP4mu5SnykMun0J1wumc4/pDEQa231asM/gsp2nHtB+yzAhXFcEa uLbH4aQclbuU0VRkgxHbWjfFUhEL88NYV73vYBFQjtK7dC6UBnkUqWKocoJo6esoDDE6CvPdp4W cmyqBbFxC3bjvSDu959+suYAg9ZWJMxvA4OPLCf7yFS9/ikjYMJE8wIBxuXjSoCR/e+JqW6uoE5 C4E7U4IF6pdoSHMJdrEx8v+o5aYx0+IBpBKMCCmTbN0t/c2qF2FNsHrIiF8rsVvvd4qkb1+1Q+C F9xoc5LnE2RogVHfH2sEFKef8ZUxqf50/sZyNUduIwLnB3Aqp13Bf9JIqsoeA8YwboCQc88CE7s epEW6CvRM7el56AWz57jobRLBotGT+Zs2lM+sEAQ9/tMNQ4ait5EdUpA6Nu/DC/Vm90If4WtEJi 9sK8Vj1lPF7QujbckKoWa7+H+3DtKFG+TxTvQSZ4CIKY/Hg3AaZGo0EeYG96+qryzYw2E8H2PYb DNMTe9eSC65CityAytNrKfOgqV/M+2RU6zNDuSdIWbPuyYGbou/UX553j2MX7cGd19dSFd Archived-At: Cc: i2nsf@ietf.org, 'Linda Dunbar' Subject: Re: [I2nsf] Preparing for Yokohama X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 05:45:23 -0000 This is a multipart message in MIME format. ------=_NextPart_000_00A7_01D10715.0885D030 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Cathy and Sue, Perfect, thanks. Cheers, Adrian ------=_NextPart_000_00A7_01D10715.0885D030 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Cathy and = Sue,

 

Perfect, thanks. =

 

Cheers,

Adrian

------=_NextPart_000_00A7_01D10715.0885D030-- From nobody Thu Oct 15 03:19:18 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 059A01ACD85 for ; Thu, 15 Oct 2015 03:19:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X6gVMSCuud0a for ; Thu, 15 Oct 2015 03:19:13 -0700 (PDT) Received: from smtpjc.telefonica.com (smtpjc.telefonica.com [81.47.204.76]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 903C71ACD7A for ; Thu, 15 Oct 2015 03:19:12 -0700 (PDT) Received: from smtpjc.telefonica.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 9C8181B8341; Thu, 15 Oct 2015 12:19:09 +0200 (CEST) Received: from ESTGVMSP114.EUROPE.telefonica.corp (unknown [10.92.4.9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtpjc.telefonica.com (Postfix) with ESMTPS id 7FE0C1B830F; Thu, 15 Oct 2015 12:19:09 +0200 (CEST) Received: from emea01-db3-obe.outbound.protection.outlook.com (10.92.5.139) by tls.telefonica.com (10.93.6.55) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 15 Oct 2015 12:19:08 +0200 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) by DB4PR06MB0623.eurprd06.prod.outlook.com (10.161.13.141) with Microsoft SMTP Server (TLS) id 15.1.293.16; Thu, 15 Oct 2015 10:19:07 +0000 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) by DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) with mapi id 15.01.0293.007; Thu, 15 Oct 2015 10:19:07 +0000 From: DIEGO LOPEZ GARCIA To: "adrian@olddog.co.uk" Thread-Topic: [I2nsf] Preparing for Yokohama Thread-Index: AdEGytiub8UZ+qKxRqOHGgPaJUVyagAIVR6AAAgd0YAACZIzAA== Date: Thu, 15 Oct 2015 10:19:07 +0000 Message-ID: <7369455B-B70B-4C32-A1B4-E60F9487E65A@telefonica.com> References: <003301d106cb$79a613f0$6cf23bd0$@olddog.co.uk> <00b601d106ec$2e3d68c0$8ab83a40$@ndzh.com> <00a601d1070c$a6c16830$f4443890$@olddog.co.uk> In-Reply-To: <00a601d1070c$a6c16830$f4443890$@olddog.co.uk> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [88.26.207.77] x-microsoft-exchange-diagnostics: 1; DB4PR06MB0623; 5:dcTALftNpfQWARiu6+GzyPen/WiLsBdW8CLBjW2Nog4QKn25A+M4ux/M6ypafGxP+ZoxHbfY6s2BA4BiBZS2HhIrL+f5tpPtub3plhqMA6AY8+jc9n1qN8UjdvHJ6JAXBObtUGXxKqQm9PBzsmPjeQ==; 24:k2MQOk8SfblyFQ+xpaBZ7eJ/w73+4Vnc/kSUOgC6q0PKyghckTg+2a6T3iOpq21Q/lj+hdZXri69k89aMZwTfMdweHE0ibJ6IegCLCGuG/c=; 20:Bfk94HXtxKr+T6QaMNYJ6iEH2ewp9mIu1lpMmtHgC8p63voRrLRCm7xfG8k+QvDwZvlgOZO5XzEhxjGo6G4oVg== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB4PR06MB0623; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(194684443706082)(40392960112811); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(520078)(3002001); SRVR:DB4PR06MB0623; BCL:0; PCL:0; RULEID:; SRVR:DB4PR06MB0623; x-forefront-prvs: 0730093765 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(189002)(252514010)(199003)(24454002)(5008740100001)(5004730100002)(54356999)(86362001)(19580405001)(36756003)(40100003)(11100500001)(76176999)(46102003)(2501003)(2950100001)(92566002)(19617315012)(2351001)(66066001)(2900100001)(64706001)(5007970100001)(101416001)(77096005)(82746002)(97736004)(189998001)(122556002)(81156007)(105586002)(50986999)(16236675004)(5001960100002)(106356001)(5002640100001)(10400500002)(110136002)(102836002)(33656002)(87936001)(83716003)(15975445007)(19580395003)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DB4PR06MB0623; H:DB4PR06MB0624.eurprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_7369455BB70B4C32A1B4E60F9487E65Atelefonicacom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Oct 2015 10:19:07.2623 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR06MB0623 X-OriginatorOrg: telefonica.com X-TM-AS-MML: No Archived-At: Cc: "i2nsf@ietf.org" , "Zhouqian \(Cathy\)" , Susan Hares , Linda Dunbar Subject: Re: [I2nsf] Preparing for Yokohama X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 10:19:17 -0000 --_000_7369455BB70B4C32A1B4E60F9487E65Atelefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Tm90IHN1cmUgaWYgQ2F0aHkgaGFzIHZvbHVudGVlcmVkIGZvciBhY3RpbmcgYXMgSmFiYmVyIHNj cmliZS4gSWYgbm90LCBjb3VudCBtZSBpbuKApg0KDQpPbiAxNSBPY3QgMjAxNSwgYXQgMDc6NDUg LCBBZHJpYW4gRmFycmVsIDxhZHJpYW5Ab2xkZG9nLmNvLnVrPG1haWx0bzphZHJpYW5Ab2xkZG9n LmNvLnVrPj4gd3JvdGU6DQoNCkNhdGh5IGFuZCBTdWUsDQoNClBlcmZlY3QsIHRoYW5rcy4NCg0K Q2hlZXJzLA0KQWRyaWFuDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KSTJuc2YgbWFpbGluZyBsaXN0DQpJMm5zZkBpZXRmLm9yZzxtYWlsdG86STJuc2ZA aWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQoN Ci0tDQoiRXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5vIg0KDQpEciBEaWVn byBSLiBMb3Bleg0KVGVsZWZvbmljYSBJK0QNCmh0dHA6Ly9wZW9wbGUudGlkLmVzL2RpZWdvLmxv cGV6Lw0KDQplLW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20NClRlbDogICAgKzM0 IDkxMyAxMjkgMDQxDQpNb2JpbGU6ICszNCA2ODIgMDUxIDA5MQ0KLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLQ0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQoN CkVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEg c3UgZGVzdGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRh IG8gY29uZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEgbyBl bnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNh ZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhIGxlY3R1cmEsIHV0aWxpemFjacOzbiwgZGl2 dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVkZSBlc3RhciBwcm9oaWJp ZGEgZW4gdmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBTaSBoYSByZWNpYmlkbyBl c3RlIG1lbnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5pcXVlIGlu bWVkaWF0YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVzdHJ1Y2Np w7NuLg0KDQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJhbnNtaXNzaW9uIGlz IHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBvbmx5IGZv ciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlkdWFsIG9yIGVudGl0eSBuYW1lZCBhYm92ZS4gSWYgdGhl IHJlYWRlciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlv dSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24sIGRpc3RyaWJ1dGlv biBvciBjb3B5aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlvbiBpcyBzdHJpY3RseSBwcm9oaWJpdGVk LiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIHRyYW5zbWlzc2lvbiBpbiBlcnJvciwgZG8gbm90 IHJlYWQgaXQuIFBsZWFzZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRoYXQgeW91 IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFuZCB0aGVuIGRlbGV0 ZSBpdC4NCg0KRXN0YSBtZW5zYWdlbSBlIHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhjbHVzaXZh bWVudGUgYW8gc2V1IGRlc3RpbmF0w6FyaW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBwcml2 aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFsIGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBlc3Nv YSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlhIG8gZGVz dGluYXTDoXJpbyBpbmRpY2FkbywgZmljYSBub3RpZmljYWRvIGRlIHF1ZSBhIGxlaXR1cmEsIHV0 aWxpemHDp8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6YcOnw6NvIHBv ZGUgZXN0YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50ZS4gU2Ug cmVjZWJldSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29t dW5pcXVlIGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJvY2VkYSBhIHN1YSBk ZXN0cnVpw6fDo28NCg== --_000_7369455BB70B4C32A1B4E60F9487E65Atelefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: <9F52C6CF5FFE3B4CA3B15A4DDB958DBF@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KTm90IHN1cmUgaWYgQ2F0aHkgaGFz IHZvbHVudGVlcmVkIGZvciBhY3RpbmcgYXMgSmFiYmVyIHNjcmliZS4gSWYgbm90LCBjb3VudCBt ZSBpbuKApg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUg dHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIDE1IE9jdCAyMDE1LCBhdCAw Nzo0NSAsIEFkcmlhbiBGYXJyZWwgJmx0OzxhIGhyZWY9Im1haWx0bzphZHJpYW5Ab2xkZG9nLmNv LnVrIiBjbGFzcz0iIj5hZHJpYW5Ab2xkZG9nLmNvLnVrPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8 YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IldvcmRTZWN0aW9uMSIgc3R5bGU9InBhZ2U6IFdvcmRTZWN0aW9uMTsgZm9udC1m YW1pbHk6IEx1Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAw MXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0i Ij5DYXRoeSBhbmQgU3VlLDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBz dHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFt aWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY29sb3I6 IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj4mbmJzcDs8L3NwYW4+PC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjb2xvcjog cmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPlBlcmZlY3QsIHRoYW5rcy48c3BhbiBjbGFzcz0i QXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48 L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4N CjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPiZuYnNwOzwv c3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+Q2hlZXJzLDxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20g MGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5z LXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7 IiBjbGFzcz0iIj5BZHJpYW48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2 Pg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBMdWNpZGFHcmFuZGU7IGZvbnQtc2l6ZTogMTFw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3Jw aGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6 IEx1Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBMdWNp ZGFHcmFuZGU7IGZvbnQtc2l6ZTogMTFweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg bGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNz PSIiPkkybnNmDQogbWFpbGluZyBsaXN0PC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEx1 Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFpbHRvOkkybnNmQGlldGYub3JnIiBz dHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IGZvbnQtZmFt aWx5OiBMdWNpZGFHcmFuZGU7IGZvbnQtc2l6ZTogMTFweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj5JMm5zZkBpZXRmLm9yZzwvYT48YnIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBMdWNpZGFHcmFuZGU7IGZvbnQtc2l6ZTogMTFweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YiIHN0eWxlPSJjb2xvcjogcHVycGxl OyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsgZm9udC1mYW1pbHk6IEx1Y2lkYUdyYW5kZTsg Zm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdo dDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czog YXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi IGNsYXNzPSIiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2Y8L2E+ PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXYgYXBwbGUt Y29udGVudC1lZGl0ZWQ9InRydWUiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iY29sb3I6IHJnYigw LCAwLCAwKTsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNw LW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xh c3M9IiI+DQotLTxiciBjbGFzcz0iIj4NCiZxdW90O0VzdGEgdmV6IG5vIGZhbGxhcmVtb3MsIERv Y3RvciBJbmZpZXJubyZxdW90OzxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkRyIERpZWdv IFIuIExvcGV6PGJyIGNsYXNzPSIiPg0KVGVsZWZvbmljYSBJJiM0MztEPGJyIGNsYXNzPSIiPg0K PGEgaHJlZj0iaHR0cDovL3Blb3BsZS50aWQuZXMvZGllZ28ubG9wZXovIiBjbGFzcz0iIj5odHRw Oi8vcGVvcGxlLnRpZC5lcy9kaWVnby5sb3Blei88L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KZS1tYWlsOiBkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPGJyIGNsYXNzPSIiPg0K VGVsOiAmbmJzcDsgJm5ic3A7JiM0MzszNCA5MTMgMTI5IDA0MTxiciBjbGFzcz0iIj4NCk1vYmls ZTogJiM0MzszNCA2ODIgMDUxIDA5MTxiciBjbGFzcz0iIj4NCi0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS08L2Rpdj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YnI+ DQo8aHI+DQo8Zm9udCBmYWNlPSJBcmlhbCIgY29sb3I9IkdyYXkiIHNpemU9IjEiPjxicj4NCkVz dGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3Ug ZGVzdGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRhIG8g Y29uZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRp ZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8s IHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhDQogbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1 bGdhY2nDs24geS9vIGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlk YSBlbiB2aXJ0dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVz dGUgbWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5t ZWRpYXRhbWVudGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nD s24uPGJyPg0KPGJyPg0KVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlz c2lvbiBpcyBwcml2aWxlZ2VkIGFuZCBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQg b25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQgYWJvdmUu IElmIHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBp ZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9uLA0KIGRp c3RyaWJ1dGlvbiBvciBjb3B5aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlvbiBpcyBzdHJpY3RseSBw cm9oaWJpdGVkLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIHRyYW5zbWlzc2lvbiBpbiBlcnJv ciwgZG8gbm90IHJlYWQgaXQuIFBsZWFzZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2VuZGVy IHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFuZCB0 aGVuIGRlbGV0ZSBpdC48YnI+DQo8YnI+DQpFc3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2Ug ZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIg aW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBl eGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9z c2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUg cXVlIGENCiBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBz ZW0gYXV0b3JpemHDp8OjbyBwb2RlIGVzdGFyIHByb2liaWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNs YcOnw6NvIHZpZ2VudGUuIFNlIHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBwb3IgZXJybywgcm9nYW1v cy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZp YSBlIHByb2NlZGEgYSBzdWEgZGVzdHJ1acOnw6NvPGJyPg0KPC9mb250Pg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_7369455BB70B4C32A1B4E60F9487E65Atelefonicacom_-- From nobody Fri Oct 16 20:55:10 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 006811B328B for ; Fri, 16 Oct 2015 20:55:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.899 X-Spam-Level: X-Spam-Status: No, score=-99.899 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yXOTqyE8V9Qm for ; Fri, 16 Oct 2015 20:55:07 -0700 (PDT) Received: from asmtp1.iomartmail.com (asmtp1.iomartmail.com [62.128.201.248]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF8551B3273 for ; Fri, 16 Oct 2015 20:55:05 -0700 (PDT) Received: from asmtp1.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp1.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9H3noWv019628; Sat, 17 Oct 2015 04:49:50 +0100 Received: from 950129200 (ip-64-134-230-185.public.wayport.net [64.134.230.185]) (authenticated bits=0) by asmtp1.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9H3nkRD019613 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO); Sat, 17 Oct 2015 04:49:48 +0100 From: "Adrian Farrel" To: "'DIEGO LOPEZ GARCIA'" References: <003301d106cb$79a613f0$6cf23bd0$@olddog.co.uk> <00b601d106ec$2e3d68c0$8ab83a40$@ndzh.com> <00a601d1070c$a6c16830$f4443890$@olddog.co.uk> <7369455B-B70B-4C32-A1B4-E60F9487E65A@telefonica.com> In-Reply-To: <7369455B-B70B-4C32-A1B4-E60F9487E65A@telefonica.com> Date: Sat, 17 Oct 2015 04:49:46 +0100 Message-ID: <007f01d1088e$dfb849f0$9f28ddd0$@olddog.co.uk> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0080_01D10897.417FBF30" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQHjkLsZ6GG5IwClN4O0C8hnnfXjWwEBT8ArAeIggg4CH5AnpJ4h47nQ Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-21884.004 X-TM-AS-Result: No--19.722-10.0-31-10 X-imss-scan-details: No--19.722-10.0-31-10 X-TMASE-MatchedRID: H0/uSqZo4D6nykMun0J1wixnoxrvBxBLgRFo1u4eKoXfUZT83lbkEJRW 6398OQ0I8kJKPvReuFUPALdO5jTW8VvQ2lxoUSXg4h8r8l3l4ebw32IpICSC53oYTZAvota5mUs pxG5jCj422uoEm245foFaNaPuEIbSaWbbDm4LdIZ3vIzA7XyIiCEF1RdqrHVdtdx2lXHjF1Ii/B 2gujrEHzB6EdCmNDGVVbEDP0uzojXyTBeqcpWTVlRe8joruKtpIFb2VdwQdkDROhK+RFWo5lthO gNFYwZakNCK/RB7QjECSHHGjA3FAhfyTevQtfkQkdcpJKX5Jwr8BlbXy+O/WnKuL8SC59l3YCow KSvpI+95QzetarMsxEgF6uuiHQ769Z8q6rO+Ih6Ycl4BgqVyk3cF/0kiqyh4DxjBugJBzzyS21K Kzy8r6Vufq15/CWkZUEOyUIStraMh3ud9DyO68BIMDPFEv6Uxf6/Md8Lb2l8no0smd1GLZADH+S ZFBrRqJIPFmqDDlsqSU848M/hs6Ei8wUMZL0vv7spMO3HwKCD8Xh935PYSDpd9j+WYn72G89EK+ xictMteLYq/LangxG5zP/FSQ4TN8SfOLQ+4zH+eAiCmPx4NwGmRqNBHmBve1B0Hk1Q1KyLSaSmF 5VCjdI6HM5rqDwqtPSJy1Bgszvrro01lj/rMbSkCFWZQK7DkhpRA6bOrql3H4gAsYIus9g== Archived-At: Cc: i2nsf@ietf.org, "'Zhouqian \(Cathy\)'" , 'Susan Hares' , 'Linda Dunbar' Subject: Re: [I2nsf] Preparing for Yokohama X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Oct 2015 03:55:10 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0080_01D10897.417FBF30 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Thanks Diego. =20 Cathy volunteered for minutes, so you are stuck with jabber. Appreciate = it a lot. =20 Adrian -- Read my latest... Tales from the Wood - Eighteen new fairy tales http://www.feedaread.com/books/Tales-from-the-Wood-9781786100924.aspx http://www.amazon.co.uk/Tales-Wood-Adrian-Farrel/dp/1786100924 Or buy from me direct. =20 From: DIEGO LOPEZ GARCIA [mailto:diego.r.lopez@telefonica.com]=20 Sent: 15 October 2015 11:19 To: adrian@olddog.co.uk Cc: Susan Hares; Zhouqian (Cathy); i2nsf@ietf.org; Linda Dunbar Subject: Re: [I2nsf] Preparing for Yokohama =20 Not sure if Cathy has volunteered for acting as Jabber scribe. If not, = count me in=E2=80=A6=20 ------=_NextPart_000_0080_01D10897.417FBF30 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Thanks = Diego.

 

Cathy volunteered for minutes, = so you are stuck with jabber. Appreciate it a = lot.

 

Adrian

--

Read my = latest...

Tales from the Wood - Eighteen = new fairy tales

http://www.feedaread.com/books/Tal= es-from-the-Wood-9781786100924.aspx

http://www.amazon.co.uk/Tales-Wood= -Adrian-Farrel/dp/1786100924

Or buy from me = direct.

 

From: DIEGO LOPEZ = GARCIA [mailto:diego.r.lopez@telefonica.com]
Sent: 15 October = 2015 11:19
To: adrian@olddog.co.uk
Cc: Susan Hares; = Zhouqian (Cathy); i2nsf@ietf.org; Linda Dunbar
Subject: Re: = [I2nsf] Preparing for Yokohama

 

Not sure if Cathy = has volunteered for acting as Jabber scribe. If not, count me = in=E2=80=A6

------=_NextPart_000_0080_01D10897.417FBF30-- From nobody Sun Oct 18 17:29:30 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47A771B2A72 for ; Sun, 18 Oct 2015 17:29:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.054 X-Spam-Level: X-Spam-Status: No, score=-99.054 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5ZkNUBoXgzej for ; Sun, 18 Oct 2015 17:29:27 -0700 (PDT) Received: from hickoryhill-consulting.com (hhc-web3.hickoryhill-consulting.com [64.9.205.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE2941B2A6D for ; Sun, 18 Oct 2015 17:29:26 -0700 (PDT) X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=74.43.47.139; From: "Susan Hares" To: Date: Sun, 18 Oct 2015 20:29:17 -0400 Message-ID: <00e601d10a05$30e6a070$92b3e150$@ndzh.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00E7_01D109E3.A9D68710" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdEKBN8GpCI1rmoxRFiU/p32PpgfhQ== Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: Cc: adrian@olddog.co.uk, 'Linda Dunbar' Subject: [I2nsf] Combined Use Case and Gap Analysis document X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 00:29:29 -0000 This is a multipart message in MIME format. ------=_NextPart_000_00E7_01D109E3.A9D68710 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi all: I've combined the I2NSF Use case work and gap analysis work into one document for consideration. Due to the limitation of five authors in a Working Group draft, I have selected 5 authors for this first submission. I will work with the chairs to select the appropriate authors for this combined draft. Please suggest limitation or areas of the draft I should trim. Sue Hares ------------------ A new version of I-D, draft-hares-i2nsf-use-case-gap-analysis-00.txt has been successfully submitted by Susan Hares and posted to the IETF repository. Name: draft-hares-i2nsf-use-case-gap-analysis Revision: 00 Title: Analysis of Use Cases and Gaps in Technology for I2NSF Document date: 2015-10-18 Group: Individual Submission Pages: 55 URL: https://www.ietf.org/internet-drafts/draft-hares-i2nsf-use-case-gap-analysis -00.txt Status: https://datatracker.ietf.org/doc/draft-hares-i2nsf-use-case-gap-analysis/ Htmlized: https://tools.ietf.org/html/draft-hares-i2nsf-use-case-gap-analysis-00 Abstract: This document provides a summary of the I2NSF use cases plus a summary of the stat of the art in industries and IETF work which is relevant to the Interface to Network Security Function (I2NSF). The I2NSF focus is to define data models and interfaces in order to control and monitor the physical and virtual aspects of network security functions. The use cases are organized in two basic scenarios. In the access network scenario, mobile and residential users access NSF capabilities using their network service provider infrastructure. In the data center scenario customers manage NSFs hosted in the data center infrastructure. ------=_NextPart_000_00E7_01D109E3.A9D68710 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all: =

 

I’ve combined the I2NSF Use case work and gap = analysis work into one document for consideration.  Due to the = limitation of five authors in a Working Group draft, I have selected 5 = authors for this first submission.  I will work with the chairs to = select the appropriate authors for this combined draft. =

 

Please suggest limitation or areas of the draft I = should trim.

 

 

Sue = Hares

 

------------------

 

A new = version of I-D, = draft-hares-i2nsf-use-case-gap-analysis-00.txt

has been successfully submitted by Susan Hares and = posted to the IETF repository.

 

Name:        = ;          = draft-hares-i2nsf-use-case-gap-analysis

Revision:       &= nbsp;      00

Title:       &nbs= p;            = ;  Analysis of Use Cases and Gaps in Technology for = I2NSF

Document = date:           &n= bsp;   2015-10-18

Group:       &nbs= p;          Individual = Submission

Pages:       &nbs= p;           = 55

URL:        =     https://www.ietf.org/internet-drafts/draft-hares-i2ns= f-use-case-gap-analysis-00.txt

Status:       &nb= sp; https://datatracker.ietf.org/doc/draft-hares-i2nsf-use-case-gap= -analysis/

Htmlized:       https://tools.ietf.org/html/draft-hares-i2nsf-use-case-gap-analysi= s-00

 

 

Abstract:

   This document provides a summary of = the I2NSF use cases plus a

   summary of the stat of the art in = industries and IETF work which is

   relevant to the Interface to Network = Security Function (I2NSF).  The

   I2NSF focus is to define data models = and interfaces in order to

   control and monitor the physical and = virtual aspects of network

   security functions.  The use = cases are organized in two basic

   scenarios.  In the access network = scenario, mobile and residential

   users access NSF capabilities using = their network service provider

   infrastructure.  In the data = center scenario customers manage NSFs

   hosted in the data center = infrastructure.

 

------=_NextPart_000_00E7_01D109E3.A9D68710-- From nobody Sun Oct 18 18:52:49 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF52D1B2B4A for ; Sun, 18 Oct 2015 18:52:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.911 X-Spam-Level: X-Spam-Status: No, score=-3.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NUbD4WsJlP9x for ; Sun, 18 Oct 2015 18:52:45 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8070F1A1A16 for ; Sun, 18 Oct 2015 18:52:45 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCS15631; Mon, 19 Oct 2015 01:52:43 +0000 (GMT) Received: from SZXEMA414-HUB.china.huawei.com (10.82.72.73) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 19 Oct 2015 02:52:43 +0100 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.77]) by SZXEMA414-HUB.china.huawei.com ([10.82.72.73]) with mapi id 14.03.0235.001; Mon, 19 Oct 2015 09:52:38 +0800 From: "Xialiang (Frank)" To: "i2nsf@ietf.org" Thread-Topic: New Version Notification for draft-xia-i2nsf-capability-interface-im-04.txt Thread-Index: AQHRCg+W88Za7B3DI0exKdSM/pq9FJ5yCyyw Date: Mon, 19 Oct 2015 01:52:37 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.135.43.91] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [I2nsf] =?utf-8?b?6L2s5Y+ROiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24g?= =?utf-8?q?for_draft-xia-i2nsf-capability-interface-im-04=2Etxt?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 01:52:48 -0000 SGkgYWxsLA0KV2Ugc3VibWl0IGEgbGF0ZXN0IHZlcnNpb24gb2YgSTJOU0YgY2FwYWJpbGl0eSBp bnRlcmZhY2UgSU0gZHJhZnQuIEluIHRoaXMgZHJhZnQsIHRoZSBtYWluIGNoYW5nZXMgaW5jbHVk ZToNCjEuICBJbnRyb2R1Y2UgYSBzZWN1cml0eSBjYXBhYmlsaXR5IGNhdGVnb3J5Ow0KMi4gIFJl c3RydWN0dXJlIHRoZSBkcmFmdCB0byBtYWtlIGl0IG1vcmUgY2xlYXI7DQozLiAgSW1wcm92ZSB0 aGUgbmV0d29yayBzZWN1cml0eSBjb250cm9sIElNOw0KNC4gIEFkZCBuZXcgc2VjdXJpdHkgY2Fw YWJpbGl0aWVzOiBjb250ZW50IHNlY3VyaXR5IGNvbnRyb2wgYW5kIGF0dGFjayBtaXRpZ2F0aW9u IGNvbnRyb2w7DQo1LiAgRWRpdG9yaWFsIGNoYW5nZXMuDQoNCllvdXIgY29tbWVudHMgYXJlIGdy ZWF0bHkgYXBwcmVjaWF0ZWQhDQoNCkIuUi4NCkZyYW5rDQoNCi0tLS0t6YKu5Lu25Y6f5Lu2LS0t LS0NCuWPkeS7tuS6ujogaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIFttYWlsdG86aW50ZXJuZXQt ZHJhZnRzQGlldGYub3JnXSANCuWPkemAgeaXtumXtDogMjAxNeW5tDEw5pyIMTnml6UgOTo0NA0K 5pS25Lu25Lq6OiBlbG9wZXpAZm9ydGluZXQuY29tOyBEYWNoZW5nIFpoYW5nOyBEYUNoZW5nIFpo YW5nOyBYaWFsaWFuZyAoRnJhbmspOyBOaWNvbGFzIEJvdXRob3JzOyBFZHdhcmQgTG9wZXo7IE5p Y29sYXMgQk9VVEhPUlM7IFhpYWxpYW5nIChGcmFuaykNCuS4u+mimDogTmV3IFZlcnNpb24gTm90 aWZpY2F0aW9uIGZvciBkcmFmdC14aWEtaTJuc2YtY2FwYWJpbGl0eS1pbnRlcmZhY2UtaW0tMDQu dHh0DQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5 LWludGVyZmFjZS1pbS0wNC50eHQNCmhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkg TGlhbmcgWGlhIGFuZCBwb3N0ZWQgdG8gdGhlIElFVEYgcmVwb3NpdG9yeS4NCg0KTmFtZToJCWRy YWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5LWludGVyZmFjZS1pbQ0KUmV2aXNpb246CTA0DQpUaXRs ZToJCUluZm9ybWF0aW9uIE1vZGVsIG9mIEludGVyZmFjZSB0byBOZXR3b3JrIFNlY3VyaXR5IEZ1 bmN0aW9ucyBDYXBhYmlsaXR5IEludGVyZmFjZQ0KRG9jdW1lbnQgZGF0ZToJMjAxNS0xMC0xOQ0K R3JvdXA6CQlJbmRpdmlkdWFsIFN1Ym1pc3Npb24NClBhZ2VzOgkJMjMNClVSTDogICAgICAgICAg ICBodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJhZnQteGlhLWkybnNmLWNh cGFiaWxpdHktaW50ZXJmYWNlLWltLTA0LnR4dA0KU3RhdHVzOiAgICAgICAgIGh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5LWludGVyZmFj ZS1pbS8NCkh0bWxpemVkOiAgICAgICBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt eGlhLWkybnNmLWNhcGFiaWxpdHktaW50ZXJmYWNlLWltLTA0DQpEaWZmOiAgICAgICAgICAgaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5 LWludGVyZmFjZS1pbS0wNA0KDQpBYnN0cmFjdDoNCiAgIFRoaXMgZHJhZnQgaXMgZm9jdXNlZCBv biB0aGUgY2FwYWJpbGl0eSBpbnRlcmZhY2Ugb2YgTlNGcyAoTmV0d29yaw0KICAgU2VjdXJpdHkg RnVuY3Rpb25zKSBhbmQgcHJvcG9zZXMgaXRzIGluZm9ybWF0aW9uIG1vZGVsIGZvcg0KICAgY29u dHJvbGxpbmcgdGhlIHZhcmlvdXMgbmV0d29yayBzZWN1cml0eSBmdW5jdGlvbnMuDQoNCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICANCg0KDQpQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEg Y291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uIHVudGlsIHRoZSBo dG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcu DQoNClRoZSBJRVRGIFNlY3JldGFyaWF0DQoNCg== From nobody Sun Oct 18 18:57:57 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 725551A0018 for ; Sun, 18 Oct 2015 18:57:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pzP1oKQ2aKYv for ; Sun, 18 Oct 2015 18:57:54 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 605241A0013 for ; Sun, 18 Oct 2015 18:57:53 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCS15911; Mon, 19 Oct 2015 01:57:51 +0000 (GMT) Received: from SZXEMA411-HUB.china.huawei.com (10.82.72.70) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 19 Oct 2015 02:57:51 +0100 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.77]) by szxema411-hub.china.huawei.com ([10.82.72.70]) with mapi id 14.03.0235.001; Mon, 19 Oct 2015 09:57:37 +0800 From: "Xialiang (Frank)" To: "adrian@olddog.co.uk" , Linda Dunbar Thread-Topic: Presentation slot request: Thread-Index: AdEKEX7wUUG6qBXeRoO3COCFqp2iGg== Date: Mon, 19 Oct 2015 01:57:36 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.135.43.91] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F12AE8DDBFSZXEMA502MBSchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: [I2nsf] Presentation slot request: X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 01:57:55 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F12AE8DDBFSZXEMA502MBSchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi I2NSF Chairs: I want to request a 15 minutes time slot for presenting the following draft= : draft-xia-i2nsf-capability-interface-im-04 This draft is focused on the capability interface of NSFs (Network Security= Functions) and proposes its information model for controlling the various = network security functions. Thanks! B.R. Frank --_000_C02846B1344F344EB4FAA6FA7AF481F12AE8DDBFSZXEMA502MBSchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi I2NSF Chairs:

I want to request a 15 minutes = time slot for presenting the following draft:

 

draft-xia-i2nsf-capability-i= nterface-im-04

This draft is focused on the= capability interface of NSFs (Network Security Functions) and proposes its= information model for controlling the various network security functions.<= o:p>

 

Thanks!

 

B.R.

Frank

--_000_C02846B1344F344EB4FAA6FA7AF481F12AE8DDBFSZXEMA502MBSchi_-- From nobody Sun Oct 18 23:23:54 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5E6E1A1BF3 for ; Sun, 18 Oct 2015 23:23:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wUeRWIO0iRGx for ; Sun, 18 Oct 2015 23:23:50 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A717D1A1A52 for ; Sun, 18 Oct 2015 23:23:49 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BYY90411; Mon, 19 Oct 2015 06:23:47 +0000 (GMT) Received: from NKGEML401-HUB.china.huawei.com (10.98.56.32) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 19 Oct 2015 07:23:46 +0100 Received: from NKGEML509-MBS.china.huawei.com ([169.254.2.4]) by nkgeml401-hub.china.huawei.com ([10.98.56.32]) with mapi id 14.03.0235.001; Mon, 19 Oct 2015 14:23:40 +0800 From: Youjianjie To: "i2nsf@ietf.org" Thread-Topic: New Version Notification for draft-you-i2nsf-user-group-based-policy-00.txt Thread-Index: AQHRCjVueRQUyKTx8EOBmkIYns8UTJ5yWAXQ Date: Mon, 19 Oct 2015 06:23:39 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.79.106] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [I2nsf] Fwd: New Version Notification for draft-you-i2nsf-user-group-based-policy-00.txt X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 06:23:53 -0000 RGVhciBhbGwsDQoNCldlJ3ZlIGp1c3QgcG9zdGVkIGEgZHJhZnQgYWJvdXQgVXNlci1ncm91cC1i YXNlZCBTZWN1cml0eSBQb2xpY3kgZm9yIFNlcnZpY2UgTGF5ZXIuIFRoaXMgZHJhZnQgaXMgcmVs YXRlZCB0byB0aGUgR3JvdXAgQmFzZWQgUG9saWN5IGRpc2N1c3Npb24gb24gdGhlIG1haWxpbmcg bGlzdCByZWNlbnRseS4gDQpDb3VsZCB5b3UgcGxlYXNlIHJldmlldyBhbmQgY29tbWVudD8gDQoN ClRoYW5rcywNCnRoZSBhdXRob3JzDQoNCi0tLS0t6YKu5Lu25Y6f5Lu2LS0tLS0NCuWPkeS7tuS6 ujogaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIFttYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYu b3JnXSANCuWPkemAgeaXtumXtDogMjAxNeW5tDEw5pyIMTnml6UgMTQ6MTQNCuaUtuS7tuS6ujog TGl5aXpob3U7IE1vaGFtZWQgQm91Y2FkYWlyOyBDaHJpc3RpYW4gSmFjcXVlbmV0OyBZb3VqaWFu amllOyBNb2hhbWVkIEJvdWNhZGFpcjsgTXlvIFphcm55OyBDaHJpc3RpYW4gSmFjcXVlbmV0OyBN eW8gWmFybnk7IExpeWl6aG91OyBZb3VqaWFuamllOyBTdW1hbmRyYSBNYWplZTsgU3VtYW5kcmEg TWFqZWUNCuS4u+mimDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC15b3UtaTJu c2YtdXNlci1ncm91cC1iYXNlZC1wb2xpY3ktMDAudHh0DQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJ LUQsIGRyYWZ0LXlvdS1pMm5zZi11c2VyLWdyb3VwLWJhc2VkLXBvbGljeS0wMC50eHQNCmhhcyBi ZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgSmlhbmppZSBZb3UgYW5kIHBvc3RlZCB0byB0 aGUgSUVURiByZXBvc2l0b3J5Lg0KDQpOYW1lOgkJZHJhZnQteW91LWkybnNmLXVzZXItZ3JvdXAt YmFzZWQtcG9saWN5DQpSZXZpc2lvbjoJMDANClRpdGxlOgkJVXNlci1ncm91cC1iYXNlZCBTZWN1 cml0eSBQb2xpY3kgZm9yIFNlcnZpY2UgTGF5ZXINCkRvY3VtZW50IGRhdGU6CTIwMTUtMTAtMTgN Ckdyb3VwOgkJSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQpQYWdlczoJCTE1DQpVUkw6ICAgICAgICAg ICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LXlvdS1pMm5zZi11 c2VyLWdyb3VwLWJhc2VkLXBvbGljeS0wMC50eHQNClN0YXR1czogICAgICAgICBodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC15b3UtaTJuc2YtdXNlci1ncm91cC1iYXNlZC1w b2xpY3kvDQpIdG1saXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0 LXlvdS1pMm5zZi11c2VyLWdyb3VwLWJhc2VkLXBvbGljeS0wMA0KDQoNCkFic3RyYWN0Og0KICAg VGhpcyBkcmFmdCBkaXNjdXNzZXMgdGhlIFVzZXItZ3JvdXAgQXdhcmUgUG9saWN5IENvbnRyb2wg KFVBUEMpDQogICBmcmFtZXdvcmsgdGhhdCBmYWNpbGl0YXRlcyBjb25zaXN0ZW50IGVuZm9yY2Vt ZW50IG9mIHNlY3VyaXR5DQogICBwb2xpY2llcyBiYXNlZCBvbiB1c2VyIGdyb3VwIGlkZW50aXR5 LiAgVGhlIGZyYW1ld29yayBjYWxscyBmb3I6ICgxKQ0KICAgYSB1c2VyLWdyb3VwIGlkZW50aWZp ZXIgZGVyaXZlZCBmcm9tIHByZWRlZmluZWQgcG9saWN5IGNyaXRlcmlhDQogICAoZS5nLiwgc291 cmNlIElQLCB0aW1lLW9mLWRheSwgZGV2aWNlIGNlcnRpZmljYXRlLCBldGMuKSBmb3Igc2VjdXJp dHkNCiAgIHBvbGljeSBlbmZvcmNlbWVudDsgKDIpIGEgbG9naWNhbCBwb2xpY3kgc2VydmVyIHRo YXQgbWFpbnRhaW5zIHVzZXItDQogICBncm91cCBpZGVudGlmaWNhdGlvbiBwb2xpY2llcyBhcyB3 ZWxsIGFzIGludGVyLXVzZXItZ3JvdXAgcGVybWlzc2lvbg0KICAgcG9saWNpZXM7IGFuZCAoMykg YSBsb2dpY2FsIHNlY3VyaXR5IGNvbnRyb2xsZXIgcmVzcG9uc2libGUgZm9yDQogICBtYW5hZ2lu ZyBOZXR3b3JrIFNlY3VyaXR5IEZ1bmN0aW9ucyAoTlNGcyksIGFuZCBpbXBsZW1lbnRpbmcNCiAg IG5lY2Vzc2FyeSBwb2xpY2llcyBvbiB0aGVtLiAgVGhlIGRvY3VtZW50IGRpc2N1c3NlcyBrZXkg bm9ydGhib3VuZA0KICAgQVBJcyBvZiB0aGUgZnJhbWV3b3JrIHRoYXQgZmFsbCB3aXRoaW4gdGhl IHNjb3BlIG9mIHRoZSBJMk5TRiBTZXJ2aWNlDQogICBMYXllci4NCg0KDQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgDQoNCg0KUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBv ZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbiB1bnRpbCB0aGUgaHRtbGl6ZWQg dmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KDQpUaGUg SUVURiBTZWNyZXRhcmlhdA0KDQo= From nobody Mon Oct 19 00:37:28 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20DA81A21A3 for ; Mon, 19 Oct 2015 00:37:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D9nCluj_kjlQ for ; Mon, 19 Oct 2015 00:37:14 -0700 (PDT) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0120.outbound.protection.outlook.com [207.46.100.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BA8A01A6FB0 for ; Mon, 19 Oct 2015 00:37:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=lorPOtObyUW+TUlP2YDrI/EPtro2guqoRxxNYeb/vx0=; b=SPVfkJuIRGu14TnEhxgzc+lpqGr8bJNnHl536o1YzrT3P7EwVX0RCfM5hP0xy5WmfQD57rMr4FZj2hR3kYfDMDzFOI0UTmTCXoTsF2+1hKvbN14I8gdT6O+619Azt0Z+iexSxOBgegUx/Guf374ZEK1XdBUQbYnta0FEUGqxlVs= Received: from DM2PR0301MB0704.namprd03.prod.outlook.com (10.160.97.12) by DM2PR0301MB0704.namprd03.prod.outlook.com (10.160.97.12) with Microsoft SMTP Server (TLS) id 15.1.293.16; Mon, 19 Oct 2015 07:37:12 +0000 Received: from DM2PR0301MB0704.namprd03.prod.outlook.com ([10.160.97.12]) by DM2PR0301MB0704.namprd03.prod.outlook.com ([10.160.97.12]) with mapi id 15.01.0293.007; Mon, 19 Oct 2015 07:37:12 +0000 From: Luyuan Fang To: "Xialiang (Frank)" , "i2nsf@ietf.org" Thread-Topic: New Version Notification for draft-xia-i2nsf-capability-interface-im-04.txt Thread-Index: AQHRCg+W88Za7B3DI0exKdSM/pq9FJ5yCyywgABJf6A= Date: Mon, 19 Oct 2015 07:37:10 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=lufang@microsoft.com; x-originating-ip: [73.157.113.72] x-microsoft-exchange-diagnostics: 1; DM2PR0301MB0704; 5:bbf02tgYG03sXPhpXa8a4gZFdFmeTY8w6sKF5ghrfbmW4snXPNqW1YVf46E+t3ocy4OssT465n3YNs8V92LIS8FJgxFVXPisSEI2av/oaj/LPZPatv///h4dsLY1N+ePHLK50bOT0b2K8nLMhnciFg==; 24:62wuGsuuZDDK2PC94B9f4rktwbNfwbkgRnSu0J+oJTlA9WbMrcFUT+xOnG+Zp88ZQcMtcAResyP2QSdPVM0vKtzDyA7a5+wCo0Z67yZAIIo=; 20:UpaNoE4RP6vE0TrpLoWkzDb/UKQAQHokqYZXLujIWxkAThIxZzRkctDxhJXdm7qDbYgkAHDWJIEzDBQmB41jJw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR0301MB0704; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(189930954265078); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(61426024)(61427024); SRVR:DM2PR0301MB0704; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0301MB0704; x-forefront-prvs: 07349BFAD2 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(13464003)(199003)(53754006)(377454003)(189002)(377424004)(164054003)(5008740100001)(8990500004)(99286002)(66066001)(122556002)(101416001)(50986999)(5005710100001)(76176999)(10290500002)(86612001)(54356999)(4001150100001)(97736004)(5007970100001)(40100003)(11100500001)(5004730100002)(10400500002)(46102003)(81156007)(575784001)(2501003)(76576001)(5001770100001)(86362001)(92566002)(74316001)(19580395003)(19580405001)(33656002)(107886002)(87936001)(77096005)(10090500001)(5001960100002)(106116001)(5003600100002)(106356001)(102836002)(105586002)(64706001)(5002640100001)(2950100001)(2900100001)(230783001)(15975445007)(189998001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0301MB0704; H:DM2PR0301MB0704.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Oct 2015 07:37:11.0106 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0301MB0704 Archived-At: Subject: Re: [I2nsf] New Version Notification for draft-xia-i2nsf-capability-interface-im-04.txt X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 07:37:17 -0000 SGkgRnJhbmssDQoNClZlcnkgZ29vZCB3b3JrLg0KDQpTb21lIHF1aWNrIGNvbW1lbnRzIG9uIElQ djYgLSB0aGVyZSBhcmUgbW9yZSBuZWVkIHRvIGJlIGNvbnNpZGVyZWQvYWRkZWQsIGxpa2UgaW4g dGFibGUgMSBhbmQgb3RoZXIgcGxhY2VzLg0KDQpGb3IgZXhhbXBsZSwgSUNNUHY2IChuZXh0IGhl YWRlciA1OCkgaXMgdmVyeSBkaWZmZXJlbnQgaW4gdjYgdGhhbiBJQ01QIGZvciB2NC4gV2UgbXVz dCBkaXN0aW5ndWlzaCBlYWNoIG1zZyB0eXBlIHVuZGVyIGhlYWRlciA1OC4gU3VjaCBhcywNCgkt IE1zZyB0eXBlIDEyOCwxMjk6IEVjaG8gUmVxdWVzdC9SZXBseQ0KCS0gTXNnIHR5cGUgMTMwIC0g MTMyOiBNTEQNCgktIE1zZyB0eXBlIDEzMyAtIDEzNzogTkQgKFJTLCBSQSwgTlMsIE5BLCBSRCku IA0KDQpXaGVuIHdlIGltcGxlbWVudCBmaWx0ZXJpbmcgcnVsZXMsIHdlIG11c3QgbG9vayB0aGUg djYgbmV4dCBoZWFkZXIgdmFsdWUgYW5kIHRoZW4gdGhlIG1lc3NhZ2UgdHlwZSwgdG8gZGVjaWRl IG9uIHRoZSBhY3Rpb24sIGp1c3QgYmFzaWMgdjYgaGVhZGVyLCBvciB0aGUgbmV4dCBoZWFkZXIg NTggaXMgbm90IGdvb2QgZW5vdWdoLg0KDQpESENQdjYgYWxzbyBoYXMgaXRzIHVuaXF1ZSBzZWN1 cml0eSBpc3N1ZXMuIEFuZCB0aGUgdXNlIG9mIGxpbmstbG9jYWwgY2FycmllcyBpdHMgc2VjdXJp dHkgcmlza3MuDQpUaGVzZSBhcmUgdmVyeSBpbXBvcnRhbnQgd2hlbiB3ZSBpbXBsZW1lbnQgaXB2 NiBzZWN1cml0eSBpbiBvdXIgQ2xvdWQsIERhdGEgQ2VudGVycy4gSXQgd291bGQgYmUgdmVyeSBp bXBvcnRhbnQgaW4gb3RoZXIgbmV0d29ya3MgdG9vLg0KDQpJIGNhbiBzZW5kIHlvdSBzb21lIHN1 Z2dlc3RlZCB0ZXh0IGZvciBJUHY2IHNlY3VyaXR5IGxhdGVyLCBhbmQgd2UgY2FuIGRpc2N1c3Mg aXQuDQoNClRoYW5rcywNCkx1eXVhbg0KDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N CkZyb206IEkybnNmIFttYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9m IFhpYWxpYW5nIChGcmFuaykNClNlbnQ6IFN1bmRheSwgT2N0b2JlciAxOCwgMjAxNSA2OjUzIFBN DQpUbzogaTJuc2ZAaWV0Zi5vcmcNClN1YmplY3Q6IFtJMm5zZl0g6L2s5Y+ROiBOZXcgVmVyc2lv biBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5LWludGVyZmFjZS1p bS0wNC50eHQNCg0KSGkgYWxsLA0KV2Ugc3VibWl0IGEgbGF0ZXN0IHZlcnNpb24gb2YgSTJOU0Yg Y2FwYWJpbGl0eSBpbnRlcmZhY2UgSU0gZHJhZnQuIEluIHRoaXMgZHJhZnQsIHRoZSBtYWluIGNo YW5nZXMgaW5jbHVkZToNCjEuICBJbnRyb2R1Y2UgYSBzZWN1cml0eSBjYXBhYmlsaXR5IGNhdGVn b3J5OyAyLiAgUmVzdHJ1Y3R1cmUgdGhlIGRyYWZ0IHRvIG1ha2UgaXQgbW9yZSBjbGVhcjsgMy4g IEltcHJvdmUgdGhlIG5ldHdvcmsgc2VjdXJpdHkgY29udHJvbCBJTTsgNC4gIEFkZCBuZXcgc2Vj dXJpdHkgY2FwYWJpbGl0aWVzOiBjb250ZW50IHNlY3VyaXR5IGNvbnRyb2wgYW5kIGF0dGFjayBt aXRpZ2F0aW9uIGNvbnRyb2w7IDUuICBFZGl0b3JpYWwgY2hhbmdlcy4NCg0KWW91ciBjb21tZW50 cyBhcmUgZ3JlYXRseSBhcHByZWNpYXRlZCENCg0KQi5SLg0KRnJhbmsNCg0KLS0tLS3pgq7ku7bl jp/ku7YtLS0tLQ0K5Y+R5Lu25Lq6OiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmcgW21haWx0bzpp bnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmddDQrlj5HpgIHml7bpl7Q6IDIwMTXlubQxMOaciDE55pel IDk6NDQNCuaUtuS7tuS6ujogZWxvcGV6QGZvcnRpbmV0LmNvbTsgRGFjaGVuZyBaaGFuZzsgRGFD aGVuZyBaaGFuZzsgWGlhbGlhbmcgKEZyYW5rKTsgTmljb2xhcyBCb3V0aG9yczsgRWR3YXJkIExv cGV6OyBOaWNvbGFzIEJPVVRIT1JTOyBYaWFsaWFuZyAoRnJhbmspDQrkuLvpopg6IE5ldyBWZXJz aW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQteGlhLWkybnNmLWNhcGFiaWxpdHktaW50ZXJmYWNl LWltLTA0LnR4dA0KDQoNCkEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC14aWEtaTJuc2YtY2Fw YWJpbGl0eS1pbnRlcmZhY2UtaW0tMDQudHh0DQpoYXMgYmVlbiBzdWNjZXNzZnVsbHkgc3VibWl0 dGVkIGJ5IExpYW5nIFhpYSBhbmQgcG9zdGVkIHRvIHRoZSBJRVRGIHJlcG9zaXRvcnkuDQoNCk5h bWU6CQlkcmFmdC14aWEtaTJuc2YtY2FwYWJpbGl0eS1pbnRlcmZhY2UtaW0NClJldmlzaW9uOgkw NA0KVGl0bGU6CQlJbmZvcm1hdGlvbiBNb2RlbCBvZiBJbnRlcmZhY2UgdG8gTmV0d29yayBTZWN1 cml0eSBGdW5jdGlvbnMgQ2FwYWJpbGl0eSBJbnRlcmZhY2UNCkRvY3VtZW50IGRhdGU6CTIwMTUt MTAtMTkNCkdyb3VwOgkJSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQpQYWdlczoJCTIzDQpVUkw6ICAg ICAgICAgICAgaHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91 cmw9aHR0cHMlM2ElMmYlMmZ3d3cuaWV0Zi5vcmclMmZpbnRlcm5ldC1kcmFmdHMlMmZkcmFmdC14 aWEtaTJuc2YtY2FwYWJpbGl0eS1pbnRlcmZhY2UtaW0tMDQudHh0JmRhdGE9MDElN2MwMSU3Y2x1 ZmFuZyU0MG1pY3Jvc29mdC5jb20lN2NiYzkxYTMyNjJjZGE0ZjRiZDYyNjA4ZDJkODI3ZmY2ZiU3 YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZzZGF0YT1yJTJmQyUyZkxEOHIw YXRBbFN2T0FZQmpHUCUyYnY4N2tIWUNRNmpWMGNrS3J0dDRNJTNkDQpTdGF0dXM6ICAgICAgICAg aHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMl M2ElMmYlMmZkYXRhdHJhY2tlci5pZXRmLm9yZyUyZmRvYyUyZmRyYWZ0LXhpYS1pMm5zZi1jYXBh YmlsaXR5LWludGVyZmFjZS1pbSUyZiZkYXRhPTAxJTdjMDElN2NsdWZhbmclNDBtaWNyb3NvZnQu Y29tJTdjYmM5MWEzMjYyY2RhNGY0YmQ2MjYwOGQyZDgyN2ZmNmYlN2M3MmY5ODhiZjg2ZjE0MWFm OTFhYjJkN2NkMDExZGI0NyU3YzEmc2RhdGE9WllYbTZVZW10eG80OUU0M2NVRDFxbDFpTm8yQVFT ZTBiRVVuYjBWVWJlTSUzZA0KSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vbmEwMS5zYWZlbGlua3Mu cHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNhJTJmJTJmdG9vbHMuaWV0Zi5vcmcl MmZodG1sJTJmZHJhZnQteGlhLWkybnNmLWNhcGFiaWxpdHktaW50ZXJmYWNlLWltLTA0JmRhdGE9 MDElN2MwMSU3Y2x1ZmFuZyU0MG1pY3Jvc29mdC5jb20lN2NiYzkxYTMyNjJjZGE0ZjRiZDYyNjA4 ZDJkODI3ZmY2ZiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZzZGF0YT1t cm96VWxSS1ZDSXMlMmZjQ3JKdnJZckcwY3hYcXNpVEZxYzlIQkglMmZmOWp2SSUzZA0KRGlmZjog ICAgICAgICAgIGh0dHBzOi8vbmEwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/ dXJsPWh0dHBzJTNhJTJmJTJmd3d3LmlldGYub3JnJTJmcmZjZGlmZiUzZnVybDIlM2RkcmFmdC14 aWEtaTJuc2YtY2FwYWJpbGl0eS1pbnRlcmZhY2UtaW0tMDQmZGF0YT0wMSU3YzAxJTdjbHVmYW5n JTQwbWljcm9zb2Z0LmNvbSU3Y2JjOTFhMzI2MmNkYTRmNGJkNjI2MDhkMmQ4MjdmZjZmJTdjNzJm OTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN2MxJnNkYXRhPW00VUdROTUzT0N3eXZjZFJD eEJvdmx0eiUyYnVXWEhxYXpKU3RhVkUzSGdiNCUzZA0KDQpBYnN0cmFjdDoNCiAgIFRoaXMgZHJh ZnQgaXMgZm9jdXNlZCBvbiB0aGUgY2FwYWJpbGl0eSBpbnRlcmZhY2Ugb2YgTlNGcyAoTmV0d29y aw0KICAgU2VjdXJpdHkgRnVuY3Rpb25zKSBhbmQgcHJvcG9zZXMgaXRzIGluZm9ybWF0aW9uIG1v ZGVsIGZvcg0KICAgY29udHJvbGxpbmcgdGhlIHZhcmlvdXMgbmV0d29yayBzZWN1cml0eSBmdW5j dGlvbnMuDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICANCg0KDQpQbGVhc2Ugbm90ZSB0aGF0 IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNz aW9uIHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQg dG9vbHMuaWV0Zi5vcmcuDQoNClRoZSBJRVRGIFNlY3JldGFyaWF0DQoNCl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpJMm5zZiBtYWlsaW5nIGxpc3QNCkky bnNmQGlldGYub3JnDQpodHRwczovL25hMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5j b20vP3VybD1odHRwcyUzYSUyZiUyZnd3dy5pZXRmLm9yZyUyZm1haWxtYW4lMmZsaXN0aW5mbyUy ZmkybnNmJTBhJmRhdGE9MDElN2MwMSU3Y2x1ZmFuZyU0MG1pY3Jvc29mdC5jb20lN2NiYzkxYTMy NjJjZGE0ZjRiZDYyNjA4ZDJkODI3ZmY2ZiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFk YjQ3JTdjMSZzZGF0YT1OdkwlMmZjaUNYaGF2NUdZcG45UElBdUNzU29EUUtEcmptNVNqV1pVQ09x OTAlM2QNCg== From nobody Mon Oct 19 01:23:01 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A2841A7025 for ; Mon, 19 Oct 2015 01:23:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.911 X-Spam-Level: X-Spam-Status: No, score=-3.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a8V2gsHlh-0M for ; Mon, 19 Oct 2015 01:22:58 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7155F1A7023 for ; Mon, 19 Oct 2015 01:22:57 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCS51668; Mon, 19 Oct 2015 08:22:55 +0000 (GMT) Received: from SZXEMA412-HUB.china.huawei.com (10.82.72.71) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 19 Oct 2015 09:22:28 +0100 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.77]) by SZXEMA412-HUB.china.huawei.com ([10.82.72.71]) with mapi id 14.03.0235.001; Mon, 19 Oct 2015 16:18:44 +0800 From: "Xialiang (Frank)" To: Luyuan Fang Thread-Topic: New Version Notification for draft-xia-i2nsf-capability-interface-im-04.txt Thread-Index: AQHRCg+W88Za7B3DI0exKdSM/pq9FJ5yCyywgABJf6CAACJyIA== Date: Mon, 19 Oct 2015 08:18:44 +0000 Message-ID: References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.135.43.91] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" Subject: [I2nsf] =?utf-8?b?562U5aSNOiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24g?= =?utf-8?q?for_draft-xia-i2nsf-capability-interface-im-04=2Etxt?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 08:23:00 -0000 SGkgTHV5dWFuLA0KSSBhbSBpbnRlcmVzdGVkIHdpdGggdGhvc2UgeW91IG1lbnRpb25lZC4NClBs ZWFzZSBzaGFyZSB3aXRoIHVzfn4NCg0KQi5SLg0KRnJhbmsNCg0KLS0tLS3pgq7ku7bljp/ku7Yt LS0tLQ0K5Y+R5Lu25Lq6OiBMdXl1YW4gRmFuZyBbbWFpbHRvOmx1ZmFuZ0BtaWNyb3NvZnQuY29t XSANCuWPkemAgeaXtumXtDogMjAxNeW5tDEw5pyIMTnml6UgMTU6MzcNCuaUtuS7tuS6ujogWGlh bGlhbmcgKEZyYW5rKTsgaTJuc2ZAaWV0Zi5vcmcNCuS4u+mimDogUkU6IE5ldyBWZXJzaW9uIE5v dGlmaWNhdGlvbiBmb3IgZHJhZnQteGlhLWkybnNmLWNhcGFiaWxpdHktaW50ZXJmYWNlLWltLTA0 LnR4dA0KDQpIaSBGcmFuaywNCg0KVmVyeSBnb29kIHdvcmsuDQoNClNvbWUgcXVpY2sgY29tbWVu dHMgb24gSVB2NiAtIHRoZXJlIGFyZSBtb3JlIG5lZWQgdG8gYmUgY29uc2lkZXJlZC9hZGRlZCwg bGlrZSBpbiB0YWJsZSAxIGFuZCBvdGhlciBwbGFjZXMuDQoNCkZvciBleGFtcGxlLCBJQ01QdjYg KG5leHQgaGVhZGVyIDU4KSBpcyB2ZXJ5IGRpZmZlcmVudCBpbiB2NiB0aGFuIElDTVAgZm9yIHY0 LiBXZSBtdXN0IGRpc3Rpbmd1aXNoIGVhY2ggbXNnIHR5cGUgdW5kZXIgaGVhZGVyIDU4LiBTdWNo IGFzLA0KCS0gTXNnIHR5cGUgMTI4LDEyOTogRWNobyBSZXF1ZXN0L1JlcGx5DQoJLSBNc2cgdHlw ZSAxMzAgLSAxMzI6IE1MRA0KCS0gTXNnIHR5cGUgMTMzIC0gMTM3OiBORCAoUlMsIFJBLCBOUywg TkEsIFJEKS4gDQoNCldoZW4gd2UgaW1wbGVtZW50IGZpbHRlcmluZyBydWxlcywgd2UgbXVzdCBs b29rIHRoZSB2NiBuZXh0IGhlYWRlciB2YWx1ZSBhbmQgdGhlbiB0aGUgbWVzc2FnZSB0eXBlLCB0 byBkZWNpZGUgb24gdGhlIGFjdGlvbiwganVzdCBiYXNpYyB2NiBoZWFkZXIsIG9yIHRoZSBuZXh0 IGhlYWRlciA1OCBpcyBub3QgZ29vZCBlbm91Z2guDQoNCkRIQ1B2NiBhbHNvIGhhcyBpdHMgdW5p cXVlIHNlY3VyaXR5IGlzc3Vlcy4gQW5kIHRoZSB1c2Ugb2YgbGluay1sb2NhbCBjYXJyaWVzIGl0 cyBzZWN1cml0eSByaXNrcy4NClRoZXNlIGFyZSB2ZXJ5IGltcG9ydGFudCB3aGVuIHdlIGltcGxl bWVudCBpcHY2IHNlY3VyaXR5IGluIG91ciBDbG91ZCwgRGF0YSBDZW50ZXJzLiBJdCB3b3VsZCBi ZSB2ZXJ5IGltcG9ydGFudCBpbiBvdGhlciBuZXR3b3JrcyB0b28uDQoNCkkgY2FuIHNlbmQgeW91 IHNvbWUgc3VnZ2VzdGVkIHRleHQgZm9yIElQdjYgc2VjdXJpdHkgbGF0ZXIsIGFuZCB3ZSBjYW4g ZGlzY3VzcyBpdC4NCg0KVGhhbmtzLA0KTHV5dWFuDQoNCg0KDQotLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KRnJvbTogSTJuc2YgW21haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSBPbiBC ZWhhbGYgT2YgWGlhbGlhbmcgKEZyYW5rKQ0KU2VudDogU3VuZGF5LCBPY3RvYmVyIDE4LCAyMDE1 IDY6NTMgUE0NClRvOiBpMm5zZkBpZXRmLm9yZw0KU3ViamVjdDogW0kybnNmXSDovazlj5E6IE5l dyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQteGlhLWkybnNmLWNhcGFiaWxpdHktaW50 ZXJmYWNlLWltLTA0LnR4dA0KDQpIaSBhbGwsDQpXZSBzdWJtaXQgYSBsYXRlc3QgdmVyc2lvbiBv ZiBJMk5TRiBjYXBhYmlsaXR5IGludGVyZmFjZSBJTSBkcmFmdC4gSW4gdGhpcyBkcmFmdCwgdGhl IG1haW4gY2hhbmdlcyBpbmNsdWRlOg0KMS4gIEludHJvZHVjZSBhIHNlY3VyaXR5IGNhcGFiaWxp dHkgY2F0ZWdvcnk7IDIuICBSZXN0cnVjdHVyZSB0aGUgZHJhZnQgdG8gbWFrZSBpdCBtb3JlIGNs ZWFyOyAzLiAgSW1wcm92ZSB0aGUgbmV0d29yayBzZWN1cml0eSBjb250cm9sIElNOyA0LiAgQWRk IG5ldyBzZWN1cml0eSBjYXBhYmlsaXRpZXM6IGNvbnRlbnQgc2VjdXJpdHkgY29udHJvbCBhbmQg YXR0YWNrIG1pdGlnYXRpb24gY29udHJvbDsgNS4gIEVkaXRvcmlhbCBjaGFuZ2VzLg0KDQpZb3Vy IGNvbW1lbnRzIGFyZSBncmVhdGx5IGFwcHJlY2lhdGVkIQ0KDQpCLlIuDQpGcmFuaw0KDQotLS0t LemCruS7tuWOn+S7ti0tLS0tDQrlj5Hku7bkuro6IGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyBb bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZ10NCuWPkemAgeaXtumXtDogMjAxNeW5tDEw 5pyIMTnml6UgOTo0NA0K5pS25Lu25Lq6OiBlbG9wZXpAZm9ydGluZXQuY29tOyBEYWNoZW5nIFpo YW5nOyBEYUNoZW5nIFpoYW5nOyBYaWFsaWFuZyAoRnJhbmspOyBOaWNvbGFzIEJvdXRob3JzOyBF ZHdhcmQgTG9wZXo7IE5pY29sYXMgQk9VVEhPUlM7IFhpYWxpYW5nIChGcmFuaykNCuS4u+mimDog TmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC14aWEtaTJuc2YtY2FwYWJpbGl0eS1p bnRlcmZhY2UtaW0tMDQudHh0DQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LXhpYS1p Mm5zZi1jYXBhYmlsaXR5LWludGVyZmFjZS1pbS0wNC50eHQNCmhhcyBiZWVuIHN1Y2Nlc3NmdWxs eSBzdWJtaXR0ZWQgYnkgTGlhbmcgWGlhIGFuZCBwb3N0ZWQgdG8gdGhlIElFVEYgcmVwb3NpdG9y eS4NCg0KTmFtZToJCWRyYWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5LWludGVyZmFjZS1pbQ0KUmV2 aXNpb246CTA0DQpUaXRsZToJCUluZm9ybWF0aW9uIE1vZGVsIG9mIEludGVyZmFjZSB0byBOZXR3 b3JrIFNlY3VyaXR5IEZ1bmN0aW9ucyBDYXBhYmlsaXR5IEludGVyZmFjZQ0KRG9jdW1lbnQgZGF0 ZToJMjAxNS0xMC0xOQ0KR3JvdXA6CQlJbmRpdmlkdWFsIFN1Ym1pc3Npb24NClBhZ2VzOgkJMjMN ClVSTDogICAgICAgICAgICBodHRwczovL25hMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9v ay5jb20vP3VybD1odHRwcyUzYSUyZiUyZnd3dy5pZXRmLm9yZyUyZmludGVybmV0LWRyYWZ0cyUy ZmRyYWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5LWludGVyZmFjZS1pbS0wNC50eHQmZGF0YT0wMSU3 YzAxJTdjbHVmYW5nJTQwbWljcm9zb2Z0LmNvbSU3Y2JjOTFhMzI2MmNkYTRmNGJkNjI2MDhkMmQ4 MjdmZjZmJTdjNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN2MxJnNkYXRhPXIlMmZD JTJmTEQ4cjBhdEFsU3ZPQVlCakdQJTJidjg3a0hZQ1E2alYwY2tLcnR0NE0lM2QNClN0YXR1czog ICAgICAgICBodHRwczovL25hMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3Vy bD1odHRwcyUzYSUyZiUyZmRhdGF0cmFja2VyLmlldGYub3JnJTJmZG9jJTJmZHJhZnQteGlhLWky bnNmLWNhcGFiaWxpdHktaW50ZXJmYWNlLWltJTJmJmRhdGE9MDElN2MwMSU3Y2x1ZmFuZyU0MG1p Y3Jvc29mdC5jb20lN2NiYzkxYTMyNjJjZGE0ZjRiZDYyNjA4ZDJkODI3ZmY2ZiU3YzcyZjk4OGJm ODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZzZGF0YT1aWVhtNlVlbXR4bzQ5RTQzY1VEMXFs MWlObzJBUVNlMGJFVW5iMFZVYmVNJTNkDQpIdG1saXplZDogICAgICAgaHR0cHM6Ly9uYTAxLnNh ZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM2ElMmYlMmZ0b29scy5p ZXRmLm9yZyUyZmh0bWwlMmZkcmFmdC14aWEtaTJuc2YtY2FwYWJpbGl0eS1pbnRlcmZhY2UtaW0t MDQmZGF0YT0wMSU3YzAxJTdjbHVmYW5nJTQwbWljcm9zb2Z0LmNvbSU3Y2JjOTFhMzI2MmNkYTRm NGJkNjI2MDhkMmQ4MjdmZjZmJTdjNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN2Mx JnNkYXRhPW1yb3pVbFJLVkNJcyUyZmNDckp2cllyRzBjeFhxc2lURnFjOUhCSCUyZmY5anZJJTNk DQpEaWZmOiAgICAgICAgICAgaHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxv b2suY29tLz91cmw9aHR0cHMlM2ElMmYlMmZ3d3cuaWV0Zi5vcmclMmZyZmNkaWZmJTNmdXJsMiUz ZGRyYWZ0LXhpYS1pMm5zZi1jYXBhYmlsaXR5LWludGVyZmFjZS1pbS0wNCZkYXRhPTAxJTdjMDEl N2NsdWZhbmclNDBtaWNyb3NvZnQuY29tJTdjYmM5MWEzMjYyY2RhNGY0YmQ2MjYwOGQyZDgyN2Zm NmYlN2M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3YzEmc2RhdGE9bTRVR1E5NTNP Q3d5dmNkUkN4Qm92bHR6JTJidVdYSHFhekpTdGFWRTNIZ2I0JTNkDQoNCkFic3RyYWN0Og0KICAg VGhpcyBkcmFmdCBpcyBmb2N1c2VkIG9uIHRoZSBjYXBhYmlsaXR5IGludGVyZmFjZSBvZiBOU0Zz IChOZXR3b3JrDQogICBTZWN1cml0eSBGdW5jdGlvbnMpIGFuZCBwcm9wb3NlcyBpdHMgaW5mb3Jt YXRpb24gbW9kZWwgZm9yDQogICBjb250cm9sbGluZyB0aGUgdmFyaW91cyBuZXR3b3JrIHNlY3Vy aXR5IGZ1bmN0aW9ucy4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KDQoNClBsZWFzZSBu b3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9m IHN1Ym1pc3Npb24gdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWls YWJsZSBhdCB0b29scy5pZXRmLm9yZy4NCg0KVGhlIElFVEYgU2VjcmV0YXJpYXQNCg0KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkkybnNmIG1haWxpbmcg bGlzdA0KSTJuc2ZAaWV0Zi5vcmcNCmh0dHBzOi8vbmEwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5v dXRsb29rLmNvbS8/dXJsPWh0dHBzJTNhJTJmJTJmd3d3LmlldGYub3JnJTJmbWFpbG1hbiUyZmxp c3RpbmZvJTJmaTJuc2YlMGEmZGF0YT0wMSU3YzAxJTdjbHVmYW5nJTQwbWljcm9zb2Z0LmNvbSU3 Y2JjOTFhMzI2MmNkYTRmNGJkNjI2MDhkMmQ4MjdmZjZmJTdjNzJmOTg4YmY4NmYxNDFhZjkxYWIy ZDdjZDAxMWRiNDclN2MxJnNkYXRhPU52TCUyZmNpQ1hoYXY1R1lwbjlQSUF1Q3NTb0RRS0Ryam01 U2pXWlVDT3E5MCUzZA0K From nobody Mon Oct 19 07:35:49 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 101811A914D for ; Mon, 19 Oct 2015 07:35:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dMzLqnXAwCbJ for ; Mon, 19 Oct 2015 07:35:44 -0700 (PDT) Received: from smtptc.telefonica.com (smtptc.telefonica.com [195.76.34.108]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 781BD1A9101 for ; Mon, 19 Oct 2015 07:35:43 -0700 (PDT) Received: from smtptc.telefonica.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 527B23702B8; Mon, 19 Oct 2015 16:35:40 +0200 (CEST) Received: from ESTGVMSP108.EUROPE.telefonica.corp (unknown [10.92.4.9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtptc.telefonica.com (Postfix) with ESMTPS id 3C0C237041E; Mon, 19 Oct 2015 16:35:40 +0200 (CEST) Received: from emea01-am1-obe.outbound.protection.outlook.com (10.92.5.139) by tls.telefonica.com (10.93.6.52) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 19 Oct 2015 16:35:40 +0200 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) by DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) with Microsoft SMTP Server (TLS) id 15.1.300.14; Mon, 19 Oct 2015 14:34:38 +0000 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) by DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) with mapi id 15.01.0300.010; Mon, 19 Oct 2015 14:34:38 +0000 From: DIEGO LOPEZ GARCIA To: Susan Hares Thread-Topic: [I2nsf] Combined Use Case and Gap Analysis document Thread-Index: AdEKBN8GpCI1rmoxRFiU/p32PpgfhQAdmiiA Date: Mon, 19 Oct 2015 14:34:38 +0000 Message-ID: References: <00e601d10a05$30e6a070$92b3e150$@ndzh.com> In-Reply-To: <00e601d10a05$30e6a070$92b3e150$@ndzh.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [83.51.58.239] x-microsoft-exchange-diagnostics: 1; DB4PR06MB0624; 5:gHQPsicNSW8kXx/92KFd+CH3j4iMxguHZtrZx6s9updeXbOtzT4wpWXXHQbLeeBie2/CsyDklem+BltInzxC5sBB5l8wXDw+quInJ+/W1gmCw7M4dUDJWZGb8Rx4L3ITFzDiR1y6KGvheR7Hh6Vpnw==; 24:IeL+i/29W0FiDrK/CfbGtEuutQUd1JEENKBw1bu+Iprm6UPRYRZGSJevWmfftiUXG9iiAF7DybaS8/eIS3TKdpDYeOMLj3tjAxz+ORbdsCE=; 20:aSOVKC5iuDpasmBWmKBLaJvia3yUx5TzZSPdHoURjhMJ+30nzWGgAGBnwgYtYVmujZuBhrXbVJuTnCnGBSvlVg== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB4PR06MB0624; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(194684443706082)(40392960112811); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(520078)(3002001); SRVR:DB4PR06MB0624; BCL:0; PCL:0; RULEID:; SRVR:DB4PR06MB0624; x-forefront-prvs: 07349BFAD2 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377424004)(189002)(53754006)(24454002)(252514010)(199003)(46102003)(105586002)(50986999)(10400500002)(102836002)(15975445007)(77096005)(86362001)(33656002)(5002640100001)(16236675004)(19617315012)(83716003)(5001960100002)(110136002)(189998001)(97736004)(122556002)(66066001)(92566002)(64706001)(106356001)(76176999)(82746002)(4001150100001)(19580395003)(54356999)(36756003)(2900100001)(19580405001)(5004730100002)(40100003)(101416001)(81156007)(5007970100001)(87936001)(11100500001)(5008740100001)(2950100001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DB4PR06MB0624; H:DB4PR06MB0624.eurprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_A4A879807177491D9E8CBD85F1D09DB9telefonicacom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Oct 2015 14:34:38.1679 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR06MB0624 X-OriginatorOrg: telefonica.com X-TM-AS-MML: No Archived-At: Cc: "i2nsf@ietf.org" , "adrian@olddog.co.uk" , Linda Dunbar Subject: Re: [I2nsf] Combined Use Case and Gap Analysis document X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 14:35:48 -0000 --_000_A4A879807177491D9E8CBD85F1D09DB9telefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB0aGlzIFN1ZSEgSXQgbG9va3MgbGlrZSBhIHJlYWxseSBzbWFydCBtb3ZlIHRv LiBJIGhvcGUgd2XigJlsbCBoYXZlIHRoZSBvcHBvcnR1bml0eSB0byBjaGF0IGFib3V0IGl0IGlu IFlva29oYW1hLg0KDQpCZSBnb29kZSwNCg0KT24gMTkgT2N0IDIwMTUsIGF0IDAyOjI5ICwgU3Vz YW4gSGFyZXMgPHNoYXJlc0BuZHpoLmNvbTxtYWlsdG86c2hhcmVzQG5kemguY29tPj4gd3JvdGU6 DQoNCkhpIGFsbDoNCg0KSeKAmXZlIGNvbWJpbmVkIHRoZSBJMk5TRiBVc2UgY2FzZSB3b3JrIGFu ZCBnYXAgYW5hbHlzaXMgd29yayBpbnRvIG9uZSBkb2N1bWVudCBmb3IgY29uc2lkZXJhdGlvbi4g IER1ZSB0byB0aGUgbGltaXRhdGlvbiBvZiBmaXZlIGF1dGhvcnMgaW4gYSBXb3JraW5nIEdyb3Vw IGRyYWZ0LCBJIGhhdmUgc2VsZWN0ZWQgNSBhdXRob3JzIGZvciB0aGlzIGZpcnN0IHN1Ym1pc3Np b24uICBJIHdpbGwgd29yayB3aXRoIHRoZSBjaGFpcnMgdG8gc2VsZWN0IHRoZSBhcHByb3ByaWF0 ZSBhdXRob3JzIGZvciB0aGlzIGNvbWJpbmVkIGRyYWZ0Lg0KDQpQbGVhc2Ugc3VnZ2VzdCBsaW1p dGF0aW9uIG9yIGFyZWFzIG9mIHRoZSBkcmFmdCBJIHNob3VsZCB0cmltLg0KDQoNClN1ZSBIYXJl cw0KDQotLS0tLS0tLS0tLS0tLS0tLS0NCg0KQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LWhh cmVzLWkybnNmLXVzZS1jYXNlLWdhcC1hbmFseXNpcy0wMC50eHQNCmhhcyBiZWVuIHN1Y2Nlc3Nm dWxseSBzdWJtaXR0ZWQgYnkgU3VzYW4gSGFyZXMgYW5kIHBvc3RlZCB0byB0aGUgSUVURiByZXBv c2l0b3J5Lg0KDQpOYW1lOiAgICAgICAgICAgICAgICAgIGRyYWZ0LWhhcmVzLWkybnNmLXVzZS1j YXNlLWdhcC1hbmFseXNpcw0KUmV2aXNpb246ICAgICAgICAgICAgICAwMA0KVGl0bGU6ICAgICAg ICAgICAgICAgICAgICAgIEFuYWx5c2lzIG9mIFVzZSBDYXNlcyBhbmQgR2FwcyBpbiBUZWNobm9s b2d5IGZvciBJMk5TRg0KRG9jdW1lbnQgZGF0ZTogICAgICAgICAgICAgICAyMDE1LTEwLTE4DQpH cm91cDogICAgICAgICAgICAgICAgICBJbmRpdmlkdWFsIFN1Ym1pc3Npb24NClBhZ2VzOiAgICAg ICAgICAgICAgICAgICA1NQ0KVVJMOiAgICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL2lu dGVybmV0LWRyYWZ0cy9kcmFmdC1oYXJlcy1pMm5zZi11c2UtY2FzZS1nYXAtYW5hbHlzaXMtMDAu dHh0DQpTdGF0dXM6ICAgICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJh ZnQtaGFyZXMtaTJuc2YtdXNlLWNhc2UtZ2FwLWFuYWx5c2lzLw0KSHRtbGl6ZWQ6ICAgICAgIGh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1oYXJlcy1pMm5zZi11c2UtY2FzZS1nYXAt YW5hbHlzaXMtMDANCg0KDQpBYnN0cmFjdDoNCiAgIFRoaXMgZG9jdW1lbnQgcHJvdmlkZXMgYSBz dW1tYXJ5IG9mIHRoZSBJMk5TRiB1c2UgY2FzZXMgcGx1cyBhDQogICBzdW1tYXJ5IG9mIHRoZSBz dGF0IG9mIHRoZSBhcnQgaW4gaW5kdXN0cmllcyBhbmQgSUVURiB3b3JrIHdoaWNoIGlzDQogICBy ZWxldmFudCB0byB0aGUgSW50ZXJmYWNlIHRvIE5ldHdvcmsgU2VjdXJpdHkgRnVuY3Rpb24gKEky TlNGKS4gIFRoZQ0KICAgSTJOU0YgZm9jdXMgaXMgdG8gZGVmaW5lIGRhdGEgbW9kZWxzIGFuZCBp bnRlcmZhY2VzIGluIG9yZGVyIHRvDQogICBjb250cm9sIGFuZCBtb25pdG9yIHRoZSBwaHlzaWNh bCBhbmQgdmlydHVhbCBhc3BlY3RzIG9mIG5ldHdvcmsNCiAgIHNlY3VyaXR5IGZ1bmN0aW9ucy4g IFRoZSB1c2UgY2FzZXMgYXJlIG9yZ2FuaXplZCBpbiB0d28gYmFzaWMNCiAgIHNjZW5hcmlvcy4g IEluIHRoZSBhY2Nlc3MgbmV0d29yayBzY2VuYXJpbywgbW9iaWxlIGFuZCByZXNpZGVudGlhbA0K ICAgdXNlcnMgYWNjZXNzIE5TRiBjYXBhYmlsaXRpZXMgdXNpbmcgdGhlaXIgbmV0d29yayBzZXJ2 aWNlIHByb3ZpZGVyDQogICBpbmZyYXN0cnVjdHVyZS4gIEluIHRoZSBkYXRhIGNlbnRlciBzY2Vu YXJpbyBjdXN0b21lcnMgbWFuYWdlIE5TRnMNCiAgIGhvc3RlZCBpbiB0aGUgZGF0YSBjZW50ZXIg aW5mcmFzdHJ1Y3R1cmUuDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQpJMm5zZiBtYWlsaW5nIGxpc3QNCkkybnNmQGlldGYub3JnPG1haWx0bzpJMm5z ZkBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YN Cg0KLS0NCiJFc3RhIHZleiBubyBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVybm8iDQoNCkRyIERp ZWdvIFIuIExvcGV6DQpUZWxlZm9uaWNhIEkrRA0KaHR0cDovL3Blb3BsZS50aWQuZXMvZGllZ28u bG9wZXovDQoNCmUtbWFpbDogZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbQ0KVGVsOiAgICAr MzQgOTEzIDEyOSAwNDENCk1vYmlsZTogKzM0IDY4MiAwNTEgMDkxDQotLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N Cg0KRXN0ZSBtZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUg YSBzdSBkZXN0aW5hdGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lh ZGEgbyBjb25maWRlbmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBv IGVudGlkYWQgZGUgZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRp Y2FkbywgcXVlZGEgbm90aWZpY2FkbyBkZSBxdWUgbGEgbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBk aXZ1bGdhY2nDs24geS9vIGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hp YmlkYSBlbiB2aXJ0dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRv IGVzdGUgbWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUg aW5tZWRpYXRhbWVudGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVj Y2nDs24uDQoNClRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24g aXMgcHJpdmlsZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkg Zm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0 aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwg eW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwgZGlzdHJpYnV0 aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0 ZWQuIElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBu b3QgcmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5 b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVs ZXRlIGl0Lg0KDQpFc3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNp dmFtZW50ZSBhbyBzZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHBy aXZpbGVnaWFkYSBvdSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVz c29hIG91IGVudGlkYWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBk ZXN0aW5hdMOhcmlvIGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGEgbGVpdHVyYSwg dXRpbGl6YcOnw6NvLCBkaXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28g cG9kZSBlc3RhciBwcm9pYmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBT ZSByZWNlYmV1IGVzdGEgbWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBj b211bmlxdWUgaW1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3Vh IGRlc3RydWnDp8Ojbw0K --_000_A4A879807177491D9E8CBD85F1D09DB9telefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KVGhhbmtzIGZvciB0aGlzIFN1ZSEg SXQgbG9va3MgbGlrZSBhIHJlYWxseSBzbWFydCBtb3ZlIHRvLiBJIGhvcGUgd2XigJlsbCBoYXZl IHRoZSBvcHBvcnR1bml0eSB0byBjaGF0IGFib3V0IGl0IGluIFlva29oYW1hLg0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+QmUgZ29vZGUsPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gMTkgT2N0IDIwMTUsIGF0IDAyOjI5ICwg U3VzYW4gSGFyZXMgJmx0OzxhIGhyZWY9Im1haWx0bzpzaGFyZXNAbmR6aC5jb20iIGNsYXNzPSIi PnNoYXJlc0BuZHpoLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1p bnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2Vj dGlvbjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7IGZvbnQtZmFtaWx5OiBMdWNpZGFHcmFu ZGU7IGZvbnQtc2l6ZTogMTFweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1o ZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRv d3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KSGkgYWxs OjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNs YXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xh c3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxp YnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpJ4oCZdmUgY29tYmluZWQgdGhlIEkyTlNGIFVz ZSBjYXNlIHdvcmsgYW5kIGdhcCBhbmFseXNpcyB3b3JrIGludG8gb25lIGRvY3VtZW50IGZvciBj b25zaWRlcmF0aW9uLiZuYnNwOyBEdWUgdG8gdGhlIGxpbWl0YXRpb24gb2YgZml2ZSBhdXRob3Jz IGluIGEgV29ya2luZyBHcm91cCBkcmFmdCwgSSBoYXZlIHNlbGVjdGVkIDUgYXV0aG9ycyBmb3Ig dGhpcyBmaXJzdCBzdWJtaXNzaW9uLiZuYnNwOyBJIHdpbGwgd29yayB3aXRoIHRoZSBjaGFpcnMg dG8gc2VsZWN0IHRoZQ0KIGFwcHJvcHJpYXRlIGF1dGhvcnMgZm9yIHRoaXMgY29tYmluZWQgZHJh ZnQuPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAx cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBj bGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NClBsZWFzZSBzdWdnZXN0IGxpbWl0YXRpb24g b3IgYXJlYXMgb2YgdGhlIGRyYWZ0IEkgc2hvdWxkIHRyaW0uPHNwYW4gY2xhc3M9IkFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+ Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFz cz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NClN1ZSBIYXJlczxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTog MTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAg Y2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IiBjbGFzcz0iIj4NCi0tLS0tLS0tLS0tLS0tLS0tLTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFw dDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xh c3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IiBjbGFzcz0iIj4NCkEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1oYXJlcy1pMm5zZi11c2Ut Y2FzZS1nYXAtYW5hbHlzaXMtMDAudHh0PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KaGFzIGJlZW4gc3VjY2Vzc2Z1 bGx5IHN1Ym1pdHRlZCBieSBTdXNhbiBIYXJlcyBhbmQgcG9zdGVkIHRvIHRoZSBJRVRGIHJlcG9z aXRvcnkuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGlu IDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250 LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KTmFtZTombmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZHJhZnQtaGFyZXMtaTJuc2YtdXNl LWNhc2UtZ2FwLWFuYWx5c2lzPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KUmV2aXNpb246Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IDAwPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KVGl0bGU6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEFuYWx5c2lzIG9mIFVz ZSBDYXNlcyBhbmQgR2FwcyBpbiBUZWNobm9sb2d5IGZvciBJMk5TRjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCkRv Y3VtZW50IGRhdGU6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDIwMTUtMTAtMTg8bzpwIGNs YXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xh c3M9IiI+DQpHcm91cDombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgSW5kaXZpZHVhbCBTdWJtaXNzaW9uPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KUGFnZXM6Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDU1PG86cCBjbGFzcz0iIj48 L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K VVJMOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJhZnQt aGFyZXMtaTJuc2YtdXNlLWNhc2UtZ2FwLWFuYWx5c2lzLTAwLnR4dCIgc3R5bGU9ImNvbG9yOiBw dXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+aHR0cHM6Ly93d3cu aWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LWhhcmVzLWkybnNmLXVzZS1jYXNlLWdhcC1h bmFseXNpcy0wMC50eHQ8L2E+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KU3RhdHVzOiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC1oYXJlcy1pMm5zZi11c2UtY2FzZS1nYXAtYW5hbHlzaXMvIiBzdHlsZT0i Y29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5odHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1oYXJlcy1pMm5zZi11c2UtY2FzZS1n YXAtYW5hbHlzaXMvPC9hPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCkh0bWxpemVkOiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaGFy ZXMtaTJuc2YtdXNlLWNhc2UtZ2FwLWFuYWx5c2lzLTAwIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsg dGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5odHRwczovL3Rvb2xzLmlldGYu b3JnL2h0bWwvZHJhZnQtaGFyZXMtaTJuc2YtdXNlLWNhc2UtZ2FwLWFuYWx5c2lzLTAwPC9hPjxv OnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9v OnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCkFi c3RyYWN0OjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyBUaGlzIGRvY3VtZW50IHByb3ZpZGVz IGEgc3VtbWFyeSBvZiB0aGUgSTJOU0YgdXNlIGNhc2VzIHBsdXMgYTxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZu YnNwOyZuYnNwOyBzdW1tYXJ5IG9mIHRoZSBzdGF0IG9mIHRoZSBhcnQgaW4gaW5kdXN0cmllcyBh bmQgSUVURiB3b3JrIHdoaWNoIGlzPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWls eTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7IHJlbGV2YW50 IHRvIHRoZSBJbnRlcmZhY2UgdG8gTmV0d29yayBTZWN1cml0eSBGdW5jdGlvbiAoSTJOU0YpLiZu YnNwOyBUaGU8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsgSTJOU0YgZm9jdXMgaXMgdG8gZGVm aW5lIGRhdGEgbW9kZWxzIGFuZCBpbnRlcmZhY2VzIGluIG9yZGVyIHRvPG86cCBjbGFzcz0iIj48 L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K Jm5ic3A7Jm5ic3A7IGNvbnRyb2wgYW5kIG1vbml0b3IgdGhlIHBoeXNpY2FsIGFuZCB2aXJ0dWFs IGFzcGVjdHMgb2YgbmV0d29yazxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyBzZWN1cml0eSBm dW5jdGlvbnMuJm5ic3A7IFRoZSB1c2UgY2FzZXMgYXJlIG9yZ2FuaXplZCBpbiB0d28gYmFzaWM8 bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAu MDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsgc2NlbmFyaW9zLiZuYnNwOyBJbiB0aGUgYWNjZXNz IG5ldHdvcmsgc2NlbmFyaW8sIG1vYmlsZSBhbmQgcmVzaWRlbnRpYWw8bzpwIGNsYXNzPSIiPjwv bzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQom bmJzcDsmbmJzcDsgdXNlcnMgYWNjZXNzIE5TRiBjYXBhYmlsaXRpZXMgdXNpbmcgdGhlaXIgbmV0 d29yayBzZXJ2aWNlIHByb3ZpZGVyPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWls eTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7IGluZnJhc3Ry dWN0dXJlLiZuYnNwOyBJbiB0aGUgZGF0YSBjZW50ZXIgc2NlbmFyaW8gY3VzdG9tZXJzIG1hbmFn ZSBOU0ZzPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGlu IDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7IGhvc3RlZCBpbiB0aGUgZGF0YSBjZW50 ZXIgaW5mcmFzdHJ1Y3R1cmUuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286 cD48L2Rpdj4NCjwvZGl2Pg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBMdWNpZGFHcmFuZGU7 IGZvbnQtc2l6ZTogMTFweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWln aHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6 IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPC9zcGFuPjxiciBzdHls ZT0iZm9udC1mYW1pbHk6IEx1Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiBMdWNpZGFHcmFuZGU7IGZvbnQtc2l6ZTogMTFweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWlt cG9ydGFudDsiIGNsYXNzPSIiPkkybnNmDQogbWFpbGluZyBsaXN0PC9zcGFuPjxiciBzdHlsZT0i Zm9udC1mYW1pbHk6IEx1Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFpbHRvOkky bnNmQGlldGYub3JnIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRl cmxpbmU7IGZvbnQtZmFtaWx5OiBMdWNpZGFHcmFuZGU7IGZvbnQtc2l6ZTogMTFweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0 bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj5JMm5zZkBpZXRmLm9y ZzwvYT48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBMdWNpZGFHcmFuZGU7IGZvbnQtc2l6ZTogMTFw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3Jw aGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxh IGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YiIHN0eWxl PSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsgZm9udC1mYW1pbHk6 IEx1Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vaTJuc2Y8L2E+PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0i Ij4NCjxkaXYgYXBwbGUtY29udGVudC1lZGl0ZWQ9InRydWUiIGNsYXNzPSIiPg0KPGRpdiBzdHls ZT0iY29sb3I6IHJnYigwLCAwLCAwKTsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczog YXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdvcmQtd3JhcDogYnJlYWstd29y ZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJlYWs6IGFmdGVyLXdo aXRlLXNwYWNlOyIgY2xhc3M9IiI+DQotLTxiciBjbGFzcz0iIj4NCiZxdW90O0VzdGEgdmV6IG5v IGZhbGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyZxdW90OzxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCkRyIERpZWdvIFIuIExvcGV6PGJyIGNsYXNzPSIiPg0KVGVsZWZvbmljYSBJJiM0MztE PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0cDovL3Blb3BsZS50aWQuZXMvZGllZ28ubG9wZXov IiBjbGFzcz0iIj5odHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVnby5sb3Blei88L2E+PGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KZS1tYWlsOiBkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29t PGJyIGNsYXNzPSIiPg0KVGVsOiAmbmJzcDsgJm5ic3A7JiM0MzszNCA5MTMgMTI5IDA0MTxiciBj bGFzcz0iIj4NCk1vYmlsZTogJiM0MzszNCA2ODIgMDUxIDA5MTxiciBjbGFzcz0iIj4NCi0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08L2Rpdj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8YnI+DQo8aHI+DQo8Zm9udCBmYWNlPSJBcmlhbCIgY29sb3I9IkdyYXkiIHNp emU9IjEiPjxicj4NCkVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1 c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24g cHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxh IHBlcnNvbmEgbyBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5h dGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhDQogbGVjdHVyYSwgdXRp bGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9vIGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRl IGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNp IGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBs byBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEg YSBzdSBkZXN0cnVjY2nDs24uPGJyPg0KPGJyPg0KVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBp biB0aGlzIHRyYW5zbWlzc2lvbiBpcyBwcml2aWxlZ2VkIGFuZCBjb25maWRlbnRpYWwgaW5mb3Jt YXRpb24gaW50ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVhbCBvciBlbnRp dHkgbmFtZWQgYWJvdmUuIElmIHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlzIG5vdCB0aGUg aW50ZW5kZWQgcmVjaXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNz ZW1pbmF0aW9uLA0KIGRpc3RyaWJ1dGlvbiBvciBjb3B5aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlv biBpcyBzdHJpY3RseSBwcm9oaWJpdGVkLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIHRyYW5z bWlzc2lvbiBpbiBlcnJvciwgZG8gbm90IHJlYWQgaXQuIFBsZWFzZSBpbW1lZGlhdGVseSByZXBs eSB0byB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9u IGluIGVycm9yIGFuZCB0aGVuIGRlbGV0ZSBpdC48YnI+DQo8YnI+DQpFc3RhIG1lbnNhZ2VtIGUg c2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUgZGVzdGluYXTDoXJp bywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25maWRlbmNpYWwg ZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRlIGRlc3Rpbm8u IFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGluZGljYWRvLCBmaWNh IG5vdGlmaWNhZG8gZGUgcXVlIGENCiBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRpdnVsZ2HDp8Oj byBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8OjbyBwb2RlIGVzdGFyIHByb2liaWRhIGVtIHZp cnR1ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2VudGUuIFNlIHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBw b3IgZXJybywgcm9nYW1vcy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBv ciBlc3RhIG1lc21hIHZpYSBlIHByb2NlZGEgYSBzdWEgZGVzdHJ1acOnw6NvPGJyPg0KPC9mb250 Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_A4A879807177491D9E8CBD85F1D09DB9telefonicacom_-- From nobody Mon Oct 19 07:36:48 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C6921A9152 for ; Mon, 19 Oct 2015 07:36:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j82bgu0K_bTU for ; Mon, 19 Oct 2015 07:36:45 -0700 (PDT) Received: from smtpjc.telefonica.com (smtpjc.telefonica.com [81.47.204.76]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 667451A914D for ; Mon, 19 Oct 2015 07:36:42 -0700 (PDT) Received: from smtpjc.telefonica.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id B8CF12F01F1; Mon, 19 Oct 2015 16:36:39 +0200 (CEST) Received: from ESTGVMSP114.EUROPE.telefonica.corp (unknown [10.92.4.9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtpjc.telefonica.com (Postfix) with ESMTPS id 951A02F033A; Mon, 19 Oct 2015 16:36:39 +0200 (CEST) Received: from emea01-am1-obe.outbound.protection.outlook.com (10.92.5.139) by tls.telefonica.com (10.93.6.55) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 19 Oct 2015 16:36:38 +0200 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) by DB4PR06MB0621.eurprd06.prod.outlook.com (10.161.13.139) with Microsoft SMTP Server (TLS) id 15.1.300.14; Mon, 19 Oct 2015 14:36:36 +0000 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) by DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) with mapi id 15.01.0300.010; Mon, 19 Oct 2015 14:36:36 +0000 From: DIEGO LOPEZ GARCIA To: "adrian@olddog.co.uk" , Linda Dunbar Thread-Topic: [I2nsf] Preparing for Yokohama Thread-Index: AdEGytiub8UZ+qKxRqOHGgPaJUVyagAIVR6AAAgd0YAACZIzAABW+/8AAHssWQA= Date: Mon, 19 Oct 2015 14:36:36 +0000 Message-ID: References: <003301d106cb$79a613f0$6cf23bd0$@olddog.co.uk> <00b601d106ec$2e3d68c0$8ab83a40$@ndzh.com> <00a601d1070c$a6c16830$f4443890$@olddog.co.uk> <7369455B-B70B-4C32-A1B4-E60F9487E65A@telefonica.com> <007f01d1088e$dfb849f0$9f28ddd0$@olddog.co.uk> In-Reply-To: <007f01d1088e$dfb849f0$9f28ddd0$@olddog.co.uk> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [83.51.58.239] x-microsoft-exchange-diagnostics: 1; DB4PR06MB0621; 5:gmWvTXArSaVNutuISS4iDNxkc/VEw7U3ikCcvRhoCp9+y4Db18PCdjBSGXi4MMfzmzryKgw80vTg8BPBE8xdvqfF2KP5dmkD7tFvp9sfElq9oNkssWsxoo/7T3/seFOrZtol8teD7n4meBdkhuBKBQ==; 24:xMeS3ImUWevs56vJeQDaO4t3bte6IOzLJCfDylqsYacPHhUrsCDYdxHtMECAkAk+f2EQEy27ZxpS5PR7V+KW3NHqHSZxfsqz7Nx8zmSf58g=; 20:2w5p+5yUjPu7Yy7VBXuRyX3CkjnuTKdQ7hAEovEIVUtdzFMNscSI0RF2droDfj+mSl3uNa/5pygEIJYWXbGoCA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB4PR06MB0621; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(194684443706082)(40392960112811); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(520078)(3002001); SRVR:DB4PR06MB0621; BCL:0; PCL:0; RULEID:; SRVR:DB4PR06MB0621; x-forefront-prvs: 07349BFAD2 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(189002)(107245004)(24454002)(252514010)(199003)(46102003)(76176999)(189998001)(5002640100001)(50986999)(54356999)(5001960100002)(36756003)(2501003)(105586002)(19617315012)(93886004)(16236675004)(33656002)(106356001)(102836002)(122556002)(82746002)(40100003)(15975445007)(77096005)(5007970100001)(2900100001)(2950100001)(5008740100001)(5004730100002)(81156007)(97736004)(5001770100001)(11100500001)(83716003)(10400500002)(5001920100001)(19580405001)(19580395003)(64706001)(87936001)(86362001)(101416001)(92566002)(66066001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DB4PR06MB0621; H:DB4PR06MB0624.eurprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_D0220497F71C4FF5B2E2BDB7C76A8F62telefonicacom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Oct 2015 14:36:36.8101 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR06MB0621 X-OriginatorOrg: telefonica.com X-TM-AS-MML: No Archived-At: Cc: "i2nsf@ietf.org" , "Zhouqian \(Cathy\)" , Susan Hares Subject: Re: [I2nsf] Preparing for Yokohama X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 14:36:47 -0000 --_000_D0220497F71C4FF5B2E2BDB7C76A8F62telefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWRyaWFuLA0KDQpIYXBweSB0byBoZWxwISBJIGhvcGUgaXQgd2lsbCBub3QgaW50ZXJmZXJl IHdpdGggdGhlIHNsb3Qgb2YgMTUgbWludXRlcyBJIHdhbnRlZCB0byByZXF1ZXN0IHRvIGludHJv ZHVjZSBhIGRyYWZ0IG9uIHZOU0YgYXR0ZXN0YXRpb24gSSB3aWxsIHVwbG9hZCBpbiBhIGNvdXBs ZSBvZiBob3Vycy4NCg0KQmUgZ29vZGUsDQoNCk9uIDE3IE9jdCAyMDE1LCBhdCAwNTo0OSAsIEFk cmlhbiBGYXJyZWwgPGFkcmlhbkBvbGRkb2cuY28udWs8bWFpbHRvOmFkcmlhbkBvbGRkb2cuY28u dWs+PiB3cm90ZToNCg0KVGhhbmtzIERpZWdvLg0KDQpDYXRoeSB2b2x1bnRlZXJlZCBmb3IgbWlu dXRlcywgc28geW91IGFyZSBzdHVjayB3aXRoIGphYmJlci4gQXBwcmVjaWF0ZSBpdCBhIGxvdC4N Cg0KQWRyaWFuDQotLQ0KUmVhZCBteSBsYXRlc3QuLi4NClRhbGVzIGZyb20gdGhlIFdvb2QgLSBF aWdodGVlbiBuZXcgZmFpcnkgdGFsZXMNCmh0dHA6Ly93d3cuZmVlZGFyZWFkLmNvbS9ib29rcy9U YWxlcy1mcm9tLXRoZS1Xb29kLTk3ODE3ODYxMDA5MjQuYXNweA0KaHR0cDovL3d3dy5hbWF6b24u Y28udWsvVGFsZXMtV29vZC1BZHJpYW4tRmFycmVsL2RwLzE3ODYxMDA5MjQNCk9yIGJ1eSBmcm9t IG1lIGRpcmVjdC4NCg0KRnJvbTogRElFR08gTE9QRVogR0FSQ0lBIFttYWlsdG86ZGllZ28uci5s b3BlekB0ZWxlZm9uaWNhLmNvbV0NClNlbnQ6IDE1IE9jdG9iZXIgMjAxNSAxMToxOQ0KVG86IGFk cmlhbkBvbGRkb2cuY28udWs8bWFpbHRvOmFkcmlhbkBvbGRkb2cuY28udWs+DQpDYzogU3VzYW4g SGFyZXM7IFpob3VxaWFuIChDYXRoeSk7IGkybnNmQGlldGYub3JnPG1haWx0bzppMm5zZkBpZXRm Lm9yZz47IExpbmRhIER1bmJhcg0KU3ViamVjdDogUmU6IFtJMm5zZl0gUHJlcGFyaW5nIGZvciBZ b2tvaGFtYQ0KDQpOb3Qgc3VyZSBpZiBDYXRoeSBoYXMgdm9sdW50ZWVyZWQgZm9yIGFjdGluZyBh cyBKYWJiZXIgc2NyaWJlLiBJZiBub3QsIGNvdW50IG1lIGlu4oCmDQoNCi0tDQoiRXN0YSB2ZXog bm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5vIg0KDQpEciBEaWVnbyBSLiBMb3Bleg0KVGVs ZWZvbmljYSBJK0QNCmh0dHA6Ly9wZW9wbGUudGlkLmVzL2RpZWdvLmxvcGV6Lw0KDQplLW1haWw6 IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20NClRlbDogICAgKzM0IDkxMyAxMjkgMDQxDQpN b2JpbGU6ICszNCA2ODIgMDUxIDA5MQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQ0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQoNCkVzdGUgbWVuc2FqZSB5 IHN1cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlv LCBwdWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFs IHkgZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRpZGFkIGRlIGRlc3Rp bm8uIFNpIG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlm aWNhZG8gZGUgcXVlIGxhIGxlY3R1cmEsIHV0aWxpemFjacOzbiwgZGl2dWxnYWNpw7NuIHkvbyBj b3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVkZSBlc3RhciBwcm9oaWJpZGEgZW4gdmlydHVkIGRl IGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBTaSBoYSByZWNpYmlkbyBlc3RlIG1lbnNhamUgcG9y IGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5pcXVlIGlubWVkaWF0YW1lbnRlIHBv ciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVzdHJ1Y2Npw7NuLg0KDQpUaGUgaW5m b3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5k IGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBvbmx5IGZvciB0aGUgdXNlIG9mIHRo ZSBpbmRpdmlkdWFsIG9yIGVudGl0eSBuYW1lZCBhYm92ZS4gSWYgdGhlIHJlYWRlciBvZiB0aGlz IG1lc3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5v dGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24sIGRpc3RyaWJ1dGlvbiBvciBjb3B5aW5nIG9m IHRoaXMgY29tbXVuaWNhdGlvbiBpcyBzdHJpY3RseSBwcm9oaWJpdGVkLiBJZiB5b3UgaGF2ZSBy ZWNlaXZlZCB0aGlzIHRyYW5zbWlzc2lvbiBpbiBlcnJvciwgZG8gbm90IHJlYWQgaXQuIFBsZWFz ZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQg dGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFuZCB0aGVuIGRlbGV0ZSBpdC4NCg0KRXN0YSBt ZW5zYWdlbSBlIHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRl c3RpbmF0w6FyaW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29u ZmlkZW5jaWFsIGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBk ZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRp Y2FkbywgZmljYSBub3RpZmljYWRvIGRlIHF1ZSBhIGxlaXR1cmEsIHV0aWxpemHDp8OjbywgZGl2 dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6YcOnw6NvIHBvZGUgZXN0YXIgcHJvaWJp ZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1l bnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29tdW5pcXVlIGltZWRpYXRh bWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJvY2VkYSBhIHN1YSBkZXN0cnVpw6fDo28NCg== --_000_D0220497F71C4FF5B2E2BDB7C76A8F62telefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: <65CE5887A4741A40B9F26BD67A33A8E9@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgQWRyaWFuLA0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SGFwcHkgdG8gaGVscCEg SSBob3BlIGl0IHdpbGwgbm90IGludGVyZmVyZSB3aXRoIHRoZSBzbG90IG9mIDE1IG1pbnV0ZXMg SSB3YW50ZWQgdG8gcmVxdWVzdCB0byBpbnRyb2R1Y2UgYSBkcmFmdCBvbiB2TlNGIGF0dGVzdGF0 aW9uIEkgd2lsbCB1cGxvYWQgaW4gYSBjb3VwbGUgb2YgaG91cnMuPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5CZSBnb29kZSw8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+Jm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdj4NCjxibG9j a3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiAxNyBPY3QgMjAx NSwgYXQgMDU6NDkgLCBBZHJpYW4gRmFycmVsICZsdDs8YSBocmVmPSJtYWlsdG86YWRyaWFuQG9s ZGRvZy5jby51ayIgY2xhc3M9IiI+YWRyaWFuQG9sZGRvZy5jby51azwvYT4mZ3Q7IHdyb3RlOjwv ZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7 IGZvbnQtZmFtaWx5OiBMdWNpZGFHcmFuZGU7IGZvbnQtc2l6ZTogMTFweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBj bSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21h bicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250 LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBj bGFzcz0iIj5UaGFua3MgRGllZ28uPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNv bG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+Jm5ic3A7PC9zcGFuPjwvZGl2Pg0KPGRp diBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQt ZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxl PSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xv cjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPkNhdGh5IHZvbHVudGVlcmVkIGZvciBtaW51 dGVzLCBzbyB5b3UgYXJlIHN0dWNrIHdpdGggamFiYmVyLiBBcHByZWNpYXRlIGl0IGEgbG90Ljxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20g MGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJv bWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsi IGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBj bSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21h bicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250 LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBj bGFzcz0iIj5BZHJpYW48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWls eTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9u dC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJn YigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj4tLTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwv ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEy cHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxz cGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNl cmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPlJlYWQgbXkgbGF0ZXN0Li4u PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBj bSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcg Um9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsg Zm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUp OyIgY2xhc3M9IiI+VGFsZXMgZnJvbSB0aGUgV29vZCAtIEVpZ2h0ZWVuIG5ldyBmYWlyeSB0YWxl czxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw Y20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3 IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7 IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1 KTsiIGNsYXNzPSIiPjxhIGhyZWY9Imh0dHA6Ly93d3cuZmVlZGFyZWFkLmNvbS9ib29rcy9UYWxl cy1mcm9tLXRoZS1Xb29kLTk3ODE3ODYxMDA5MjQuYXNweCIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7 IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+aHR0cDovL3d3dy5mZWVkYXJl YWQuY29tL2Jvb2tzL1RhbGVzLWZyb20tdGhlLVdvb2QtOTc4MTc4NjEwMDkyNC5hc3B4PC9hPjxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20g MGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJv bWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsi IGNsYXNzPSIiPjxhIGhyZWY9Imh0dHA6Ly93d3cuYW1hem9uLmNvLnVrL1RhbGVzLVdvb2QtQWRy aWFuLUZhcnJlbC9kcC8xNzg2MTAwOTI0IiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNv cmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5odHRwOi8vd3d3LmFtYXpvbi5jby51ay9UYWxl cy1Xb29kLUFkcmlhbi1GYXJyZWwvZHAvMTc4NjEwMDkyNDwvYT48bzpwIGNsYXNzPSIiPjwvbzpw Pjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJy aSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj5PciBidXkg ZnJvbSBtZSBkaXJlY3QuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiBy Z2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+Jm5ic3A7PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyLXN0eWxlOiBub25lIG5vbmUgbm9uZSBzb2xpZDsgYm9yZGVyLWxlZnQtY29sb3I6 IGJsdWU7IGJvcmRlci1sZWZ0LXdpZHRoOiAxLjVwdDsgcGFkZGluZzogMGNtIDBjbSAwY20gNHB0 OyIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iYm9yZGVyLXN0eWxlOiBz b2xpZCBub25lIG5vbmU7IGJvcmRlci10b3AtY29sb3I6IHJnYigxODEsIDE5NiwgMjIzKTsgYm9y ZGVyLXRvcC13aWR0aDogMXB0OyBwYWRkaW5nOiAzcHQgMGNtIDBjbTsiIGNsYXNzPSIiPg0KPGRp diBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQt ZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxiIGNsYXNzPSIi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTog VGFob21hLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogVGFob21hLCBzYW5z LXNlcmlmOyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPkRJRUdPIExPUEVaIEdBUkNJQQ0KIFs8YSBocmVmPSJtYWlsdG86ZGllZ28uci5s b3BlekB0ZWxlZm9uaWNhLmNvbSIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlv bjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+bWFpbHRvOmRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5j b208L2E+XTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5TZW50OjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+MTUgT2N0b2JlciAyMDE1IDExOjE5PGJyIGNsYXNz PSIiPg0KPGIgY2xhc3M9IiI+VG86PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86YWRyaWFuQG9sZGRvZy5jby51ayIgc3R5 bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+ YWRyaWFuQG9sZGRvZy5jby51azwvYT48YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5DYzo8L2I+ PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlN1c2FuIEhh cmVzOyBaaG91cWlhbiAoQ2F0aHkpOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmciIHN0eWxlPSJjb2xv cjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPmkybnNmQGll dGYub3JnPC9hPjsgTGluZGEgRHVuYmFyPGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+U3ViamVj dDo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlJl OiBbSTJuc2ZdIFByZXBhcmluZyBmb3IgWW9rb2hhbWE8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bh bj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBz ZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZh bWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0i Ij5Ob3Qgc3VyZSBpZiBDYXRoeSBoYXMgdm9sdW50ZWVyZWQgZm9yIGFjdGluZyBhcyBKYWJiZXIg c2NyaWJlLiBJZiBub3QsIGNvdW50IG1lIGlu4oCmPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBhcHBsZS1jb250 ZW50LWVkaXRlZD0idHJ1ZSIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAs IDApOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9k ZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0i Ij4NCi0tPGJyIGNsYXNzPSIiPg0KJnF1b3Q7RXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9y IEluZmllcm5vJnF1b3Q7PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KRHIgRGllZ28gUi4g TG9wZXo8YnIgY2xhc3M9IiI+DQpUZWxlZm9uaWNhIEkmIzQzO0Q8YnIgY2xhc3M9IiI+DQo8YSBo cmVmPSJodHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVnby5sb3Blei8iIGNsYXNzPSIiPmh0dHA6Ly9w ZW9wbGUudGlkLmVzL2RpZWdvLmxvcGV6LzwvYT48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+ DQplLW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb208YnIgY2xhc3M9IiI+DQpUZWw6 ICZuYnNwOyAmbmJzcDsmIzQzOzM0IDkxMyAxMjkgMDQxPGJyIGNsYXNzPSIiPg0KTW9iaWxlOiAm IzQzOzM0IDY4MiAwNTEgMDkxPGJyIGNsYXNzPSIiPg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLTwvZGl2Pg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxicj4NCjxo cj4NCjxmb250IGZhY2U9IkFyaWFsIiBjb2xvcj0iR3JheSIgc2l6ZT0iMSI+PGJyPg0KRXN0ZSBt ZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0 aW5hdGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25m aWRlbmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQg ZGUgZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVl ZGEgbm90aWZpY2FkbyBkZSBxdWUgbGENCiBsZWN0dXJhLCB1dGlsaXphY2nDs24sIGRpdnVsZ2Fj acOzbiB5L28gY29waWEgc2luIGF1dG9yaXphY2nDs24gcHVlZGUgZXN0YXIgcHJvaGliaWRhIGVu IHZpcnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kgaGEgcmVjaWJpZG8gZXN0ZSBt ZW5zYWplIHBvciBlcnJvciwgbGUgcm9nYW1vcyBxdWUgbm9zIGxvIGNvbXVuaXF1ZSBpbm1lZGlh dGFtZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBhIHN1IGRlc3RydWNjacOzbi48 YnI+DQo8YnI+DQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJhbnNtaXNzaW9u IGlzIHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBvbmx5 IGZvciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlkdWFsIG9yIGVudGl0eSBuYW1lZCBhYm92ZS4gSWYg dGhlIHJlYWRlciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQs IHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24sDQogZGlzdHJp YnV0aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hp Yml0ZWQuIElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBk byBub3QgcmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhh dCB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4g ZGVsZXRlIGl0Ljxicj4NCjxicj4NCkVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJp Z2VtIGV4Y2x1c2l2YW1lbnRlIGFvIHNldSBkZXN0aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZv cm1hw6fDo28gcHJpdmlsZWdpYWRhIG91IGNvbmZpZGVuY2lhbCBlIMOpIHBhcmEgdXNvIGV4Y2x1 c2l2byBkYSBwZXNzb2Egb3UgZW50aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYSBz ZW5ob3JpYSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUg YQ0KIGxlaXR1cmEsIHV0aWxpemHDp8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBh dXRvcml6YcOnw6NvIHBvZGUgZXN0YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fD o28gdmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxo ZSBxdWUgbm9zIG8gY29tdW5pcXVlIGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUg cHJvY2VkYSBhIHN1YSBkZXN0cnVpw6fDo288YnI+DQo8L2ZvbnQ+DQo8L2JvZHk+DQo8L2h0bWw+ DQo= --_000_D0220497F71C4FF5B2E2BDB7C76A8F62telefonicacom_-- From nobody Mon Oct 19 10:05:01 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CB2C1A8AD4 for ; Mon, 19 Oct 2015 10:04:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.9 X-Spam-Level: X-Spam-Status: No, score=-99.9 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E8aIY5jvd53g for ; Mon, 19 Oct 2015 10:04:57 -0700 (PDT) Received: from asmtp4.iomartmail.com (asmtp4.iomartmail.com [62.128.201.175]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DF191A8A89 for ; Mon, 19 Oct 2015 10:04:56 -0700 (PDT) Received: from asmtp4.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp4.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9JH4sKF023350 for ; Mon, 19 Oct 2015 18:04:54 +0100 Received: from 950129200 (dsl-sp-81-140-15-32.in-addr.broadbandscope.com [81.140.15.32]) (authenticated bits=0) by asmtp4.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9JH4sUV023339 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Mon, 19 Oct 2015 18:04:54 +0100 From: "Adrian Farrel" To: Date: Mon, 19 Oct 2015 18:04:55 +0100 Message-ID: <02d401d10a90$478bd5d0$d6a38170$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdEKkBvFo7TNDeDmTAS82a1Yy2XUYA== Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-21890.001 X-TM-AS-Result: No-0.500-10.0-31-10 X-imss-scan-details: No-0.500-10.0-31-10 X-TMASE-MatchedRID: DPIzF4wRfrA5f9Xw/xqKXVsKO+9Zlb5JQxkZg8URpWDY5lqpESljGwtu KBGekqUpbGVEmIfjf3uzmhF+beTAI1OalEP0yEB5S+w20JCv3c5lofas3B2mhk6QC9IbVmI1uet 5r9Bdhvd06cjxY8Ylm1csa0AGV/SbwvwdumFAO/g= Archived-At: Subject: [I2nsf] Draft agenda coming soon X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 17:04:59 -0000 Linda and I are just working on the last bits Adrian From nobody Mon Oct 19 12:28:37 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 661271B2C44 for ; Mon, 19 Oct 2015 12:28:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tHb6HAhNpm73 for ; Mon, 19 Oct 2015 12:28:11 -0700 (PDT) Received: from smtptc.telefonica.com (smtptc.telefonica.com [195.76.34.108]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 201431B2C9E for ; Mon, 19 Oct 2015 12:27:29 -0700 (PDT) Received: from smtptc.telefonica.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 993C8370539; Mon, 19 Oct 2015 21:27:27 +0200 (CEST) Received: from ESTGVMSP105.EUROPE.telefonica.corp (unknown [10.92.4.9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtptc.telefonica.com (Postfix) with ESMTPS id 7A55537030B; Mon, 19 Oct 2015 21:27:27 +0200 (CEST) Received: from emea01-am1-obe.outbound.protection.outlook.com (10.92.5.139) by tls.telefonica.com (10.92.6.51) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 19 Oct 2015 21:27:26 +0200 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) by DB4PR06MB0622.eurprd06.prod.outlook.com (10.161.13.140) with Microsoft SMTP Server (TLS) id 15.1.300.14; Mon, 19 Oct 2015 19:27:25 +0000 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) by DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) with mapi id 15.01.0300.010; Mon, 19 Oct 2015 19:27:25 +0000 From: DIEGO LOPEZ GARCIA To: Linda Dunbar Thread-Topic: [I2nsf] IETF 94 - I2NSF Meeting slot request Thread-Index: AQHRAFQU41T2kpeVt0iqEcmt15OZk55zR7WA Date: Mon, 19 Oct 2015 19:27:25 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657D67EF4@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D67EF4@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [83.51.58.239] x-microsoft-exchange-diagnostics: 1; DB4PR06MB0622; 5:gtDr73Nli2TiztxNQp4C9/XPKIvmWcrPQXbruRwUTeNPg0JZk0WAbcVAtN1jVuw9iQf6CDiCAerscBnzRORK9RYL7sEz5oWsWonr5j9B6oP2qIqCqxq3+XG0YIbhx8yKfgU+AmI2g33CRDDvdmEtgg==; 24:5XVOB8SbYWEbyQDmtsjWWIyyZ8LU4wQ71hJGj7V7p73PLKupW6tuIU0V5jhfXAdCdiUGPHpcR/dhOlsALSxevc11rlemcAdSbyqTuYPtYYA=; 20:FsMUMQ8QfiqQzpiNZAqFRhi3XVj1hlnSmsSR7+cdf/DdlWfHFPGK2mLtv+GOuEGFgaRuQRrpmlT3b3jDLmQ2cg== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB4PR06MB0622; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(194684443706082)(40392960112811); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(520078)(8121501046)(3002001); SRVR:DB4PR06MB0622; BCL:0; PCL:0; RULEID:; SRVR:DB4PR06MB0622; x-forefront-prvs: 07349BFAD2 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(252514010)(24454002)(189002)(199003)(102836002)(77096005)(15975445007)(97736004)(46102003)(5008740100001)(36756003)(10400500002)(86362001)(5001960100002)(5002640100001)(2900100001)(110136002)(16236675004)(2950100001)(82746002)(40100003)(189998001)(122556002)(66066001)(83716003)(105586002)(106116001)(64706001)(87936001)(106356001)(81156007)(5007970100001)(19580405001)(11100500001)(54356999)(19617315012)(33656002)(50986999)(92566002)(19580395003)(76176999)(5004730100002)(101416001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DB4PR06MB0622; H:DB4PR06MB0624.eurprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_FF9B7366203C4565A2DFDA527BE12ADAtelefonicacom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Oct 2015 19:27:25.4997 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR06MB0622 X-OriginatorOrg: telefonica.com X-TM-AS-MML: No Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] IETF 94 - I2NSF Meeting slot request X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 19:28:15 -0000 --_000_FF9B7366203C4565A2DFDA527BE12ADAtelefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNClRoaXMgaXMgYSBmb3JtYWwgcmVxdWVzdCBmb3IgcHJlc2VudGluZyBkcmFmdC1wYXN0 b3ItaTJuc2Ytdm5zZi1hdHRlc3RhdGlvbi0wMCwgYSBuZXcgZHJhZnQgd2UgaGF2ZSBzdWJtaXR0 ZWQgb24gdGhlIGF0dGVzdGF0aW9uIHByb2NlZHVyZXMgZm9yIHZOU0YuIEnigJlkIG5lZWQgMTAt MTUgbWludXRlcyB0byBpbnRyb2R1Y2UgdGhlIHByb2JsZW0gYXJvdW5kIHZOU0YgYXR0ZXN0YXRp b24gYW5kIGhvdyB0aGUgU2VjdXJpdHkgQ29udHJvbGxlciBjYW4gcGxheSBhIGtleSByb2xlIGZv ciBhZGRyZXNzaW5nIGl0Lg0KDQpCZSBnb29kZSwNCg0KT24gNiBPY3QgMjAxNSwgYXQgMTg6Mjgg LCBMaW5kYSBEdW5iYXIgPGxpbmRhLmR1bmJhckBodWF3ZWkuY29tPG1haWx0bzpsaW5kYS5kdW5i YXJAaHVhd2VpLmNvbT4+IHdyb3RlOg0KDQoNCkhpLA0KDQpXZSB3aWxsIGhhdmUgb3VyIGZpcnN0 IEkyTlNGIFdHIG1lZXRpbmcgYXQgSUVURiA5NCAoWW9rb2hhbWEpLg0KDQpBcyBwZXIgdGhlIHBy ZWxpbWluYXJ5IGFnZW5kYSwgSTJOU0YgV0cgaXMgc2NoZWR1bGVkIHRvIG1lZXQgb24gVHVlIChO b3YgMykgMDkwMC0xMTMwIE1vcm5pbmcgU2Vzc2lvbiBpbiBSb29tIDMwMi4NCg0KVGhpcyBlbWFp bCBpcyB0byBzb2xpY2l0IHNsb3QgcmVxdWVzdHMgdG8gcHJlc2VudCBpbiB0aGUgV0cgc2Vzc2lv bi4NClBsZWFzZSBwcm92aWRlDQoNCiogTmFtZSBvZiB0aGUgZHJhZnQNCiogU2hvcnQgZGVzY3Jp cHRpb24gb2Ygd2h5IHlvdSB0aGluayB0aGUgaXRlbSBuZWVkcyB0byBiZSBkaXNjdXNzZWQgaW4g dGhlIG1lZXRpbmcNCg0KDQpLaW5kbHkgbm90ZSB0aGF0LCBwcmlvcml0eSB3aWxsIGJlIGdpdmVu IHRvIFJlcXVlc3RzIHJlbGF0ZWQgdG8gdGhlIFdHIGNoYXJ0ZXJlZCBpdGVtcy4NCg0KUGxlYXNl IGRvIHJlcGx5IHRvIHRoaXMgZW1haWwgd2l0aCB5b3VyIHJlcXVlc3RzLg0KDQpjaGVlcnMNCi1M aW5kYSBhbmQgQWRyaWFuDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KSTJuc2YgbWFpbGluZyBsaXN0DQpJMm5zZkBpZXRmLm9yZzxtYWlsdG86STJuc2ZAaWV0Zi5v cmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2kybnNmDQoNCi0tDQoi RXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5vIg0KDQpEciBEaWVnbyBSLiBM b3Bleg0KVGVsZWZvbmljYSBJK0QNCmh0dHA6Ly9wZW9wbGUudGlkLmVzL2RpZWdvLmxvcGV6Lw0K DQplLW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20NClRlbDogICAgKzM0IDkxMyAx MjkgMDQxDQpNb2JpbGU6ICszNCA2ODIgMDUxIDA5MQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQoNCkVzdGUg bWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVz dGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29u ZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRpZGFk IGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1 ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhIGxlY3R1cmEsIHV0aWxpemFjacOzbiwgZGl2dWxnYWNp w7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVkZSBlc3RhciBwcm9oaWJpZGEgZW4g dmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBTaSBoYSByZWNpYmlkbyBlc3RlIG1l bnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5pcXVlIGlubWVkaWF0 YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVzdHJ1Y2Npw7NuLg0K DQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZp bGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBvbmx5IGZvciB0aGUg dXNlIG9mIHRoZSBpbmRpdmlkdWFsIG9yIGVudGl0eSBuYW1lZCBhYm92ZS4gSWYgdGhlIHJlYWRl ciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUg aGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24sIGRpc3RyaWJ1dGlvbiBvciBj b3B5aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlvbiBpcyBzdHJpY3RseSBwcm9oaWJpdGVkLiBJZiB5 b3UgaGF2ZSByZWNlaXZlZCB0aGlzIHRyYW5zbWlzc2lvbiBpbiBlcnJvciwgZG8gbm90IHJlYWQg aXQuIFBsZWFzZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUg cmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFuZCB0aGVuIGRlbGV0ZSBpdC4N Cg0KRXN0YSBtZW5zYWdlbSBlIHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhjbHVzaXZhbWVudGUg YW8gc2V1IGRlc3RpbmF0w6FyaW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBwcml2aWxlZ2lh ZGEgb3UgY29uZmlkZW5jaWFsIGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBl bnRpZGFkZSBkZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlhIG8gZGVzdGluYXTD oXJpbyBpbmRpY2FkbywgZmljYSBub3RpZmljYWRvIGRlIHF1ZSBhIGxlaXR1cmEsIHV0aWxpemHD p8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6YcOnw6NvIHBvZGUgZXN0 YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50ZS4gU2UgcmVjZWJl dSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29tdW5pcXVl IGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJvY2VkYSBhIHN1YSBkZXN0cnVp w6fDo28NCg== --_000_FF9B7366203C4565A2DFDA527BE12ADAtelefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: <03F97D108FFEBF4AB8E0C17D99704BF7@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGksDQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGlzIGlzIGEgZm9ybWFsIHJlcXVl c3QgZm9yIHByZXNlbnRpbmcmbmJzcDtkcmFmdC1wYXN0b3ItaTJuc2Ytdm5zZi1hdHRlc3RhdGlv bi0wMCwgYSBuZXcgZHJhZnQgd2UgaGF2ZSBzdWJtaXR0ZWQgb24gdGhlIGF0dGVzdGF0aW9uIHBy b2NlZHVyZXMgZm9yIHZOU0YuIEnigJlkIG5lZWQgMTAtMTUgbWludXRlcyB0byBpbnRyb2R1Y2Ug dGhlIHByb2JsZW0gYXJvdW5kIHZOU0YgYXR0ZXN0YXRpb24gYW5kIGhvdyB0aGUgU2VjdXJpdHkN CiBDb250cm9sbGVyIGNhbiBwbGF5IGEga2V5IHJvbGUgZm9yIGFkZHJlc3NpbmcgaXQuPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5CZSBn b29kZSw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iIj5PbiA2IE9jdCAyMDE1LCBhdCAxODoyOCAsIExpbmRhIER1bmJhciAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmxpbmRhLmR1bmJhckBodWF3ZWkuY29tIiBjbGFzcz0iIj5saW5kYS5kdW5iYXJA aHVhd2VpLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNo YW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KSGksPGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KV2Ugd2lsbCBoYXZlIG91ciBmaXJzdCBJMk5TRiBXRyBtZWV0 aW5nIGF0IElFVEYgOTQgKFlva29oYW1hKS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpB cyBwZXIgdGhlIHByZWxpbWluYXJ5IGFnZW5kYSwgSTJOU0YgV0cgaXMgc2NoZWR1bGVkIHRvIG1l ZXQgb24gVHVlIChOb3YgMykgMDkwMC0xMTMwIE1vcm5pbmcgU2Vzc2lvbiBpbiBSb29tIDMwMi48 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGlzIGVtYWlsIGlzIHRvIHNvbGljaXQgc2xv dCByZXF1ZXN0cyB0byBwcmVzZW50IGluIHRoZSBXRyBzZXNzaW9uLjxiciBjbGFzcz0iIj4NClBs ZWFzZSBwcm92aWRlIDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiogTmFtZSBvZiB0aGUg ZHJhZnQ8YnIgY2xhc3M9IiI+DQoqIFNob3J0IGRlc2NyaXB0aW9uIG9mIHdoeSB5b3UgdGhpbmsg dGhlIGl0ZW0gbmVlZHMgdG8gYmUgZGlzY3Vzc2VkIGluIHRoZSBtZWV0aW5nPGJyIGNsYXNzPSIi Pg0KPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KS2luZGx5IG5vdGUgdGhhdCwgcHJpb3Jp dHkgd2lsbCBiZSBnaXZlbiB0byBSZXF1ZXN0cyByZWxhdGVkIHRvIHRoZSBXRyBjaGFydGVyZWQg aXRlbXMuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KUGxlYXNlIGRvIHJlcGx5IHRvIHRo aXMgZW1haWwgd2l0aCB5b3VyIHJlcXVlc3RzLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N CmNoZWVyczxiciBjbGFzcz0iIj4NCi1MaW5kYSBhbmQgQWRyaWFuPGJyIGNsYXNzPSIiPg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXzxiciBjbGFzcz0iIj4NCkkybnNmIG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxh IGhyZWY9Im1haWx0bzpJMm5zZkBpZXRmLm9yZyIgY2xhc3M9IiI+STJuc2ZAaWV0Zi5vcmc8L2E+ PGJyIGNsYXNzPSIiPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5z ZjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9 IiI+DQo8ZGl2IGFwcGxlLWNvbnRlbnQtZWRpdGVkPSJ0cnVlIiBjbGFzcz0iIj4NCjxkaXYgc3R5 bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6 IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB3b3JkLXdyYXA6IGJyZWFrLXdv cmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJyZWFrOiBhZnRlci13 aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KLS08YnIgY2xhc3M9IiI+DQomcXVvdDtFc3RhIHZleiBu byBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVybm8mcXVvdDs8YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQpEciBEaWVnbyBSLiBMb3BlejxiciBjbGFzcz0iIj4NClRlbGVmb25pY2EgSSYjNDM7 RDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHA6Ly9wZW9wbGUudGlkLmVzL2RpZWdvLmxvcGV6 LyIgY2xhc3M9IiI+aHR0cDovL3Blb3BsZS50aWQuZXMvZGllZ28ubG9wZXovPC9hPjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCmUtbWFpbDogZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNv bTxiciBjbGFzcz0iIj4NClRlbDogJm5ic3A7ICZuYnNwOyYjNDM7MzQgOTEzIDEyOSAwNDE8YnIg Y2xhc3M9IiI+DQpNb2JpbGU6ICYjNDM7MzQgNjgyIDA1MSAwOTE8YnIgY2xhc3M9IiI+DQotLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPC9kaXY+DQo8L2Rpdj4NCjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGJyPg0KPGhyPg0KPGZvbnQgZmFjZT0iQXJpYWwiIGNvbG9yPSJHcmF5IiBz aXplPSIxIj48YnI+DQpFc3RlIG1lbnNhamUgeSBzdXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNs dXNpdmFtZW50ZSBhIHN1IGRlc3RpbmF0YXJpbywgcHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7Nu IHByaXZpbGVnaWFkYSBvIGNvbmZpZGVuY2lhbCB5IGVzIHBhcmEgdXNvIGV4Y2x1c2l2byBkZSBs YSBwZXJzb25hIG8gZW50aWRhZCBkZSBkZXN0aW5vLiBTaSBubyBlcyB1c3RlZC4gZWwgZGVzdGlu YXRhcmlvIGluZGljYWRvLCBxdWVkYSBub3RpZmljYWRvIGRlIHF1ZSBsYQ0KIGxlY3R1cmEsIHV0 aWxpemFjacOzbiwgZGl2dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVk ZSBlc3RhciBwcm9oaWJpZGEgZW4gdmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBT aSBoYSByZWNpYmlkbyBlc3RlIG1lbnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3Mg bG8gY29tdW5pcXVlIGlubWVkaWF0YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRh IGEgc3UgZGVzdHJ1Y2Npw7NuLjxicj4NCjxicj4NClRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQg aW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJpdmlsZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9y bWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50 aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhl IGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlz c2VtaW5hdGlvbiwNCiBkaXN0cmlidXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11bmljYXRp b24gaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFu c21pc3Npb24gaW4gZXJyb3IsIGRvIG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVw bHkgdG8gdGhlIHNlbmRlciB0aGF0IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlv biBpbiBlcnJvciBhbmQgdGhlbiBkZWxldGUgaXQuPGJyPg0KPGJyPg0KRXN0YSBtZW5zYWdlbSBl IHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0w6Fy aW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFs IGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5v LiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRpY2FkbywgZmlj YSBub3RpZmljYWRvIGRlIHF1ZSBhDQogbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBkaXZ1bGdhw6fD o28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9pYmlkYSBlbSB2 aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEgbWVuc2FnZW0g cG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlhdGFtZW50ZSBw b3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbzxicj4NCjwvZm9u dD4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_FF9B7366203C4565A2DFDA527BE12ADAtelefonicacom_-- From nobody Mon Oct 19 20:01:31 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAD361B29F6 for ; Mon, 19 Oct 2015 20:01:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5hRiIgqwsOxZ for ; Mon, 19 Oct 2015 20:01:27 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5A311B2A08 for ; Mon, 19 Oct 2015 20:01:26 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCT53895; Tue, 20 Oct 2015 03:01:25 +0000 (GMT) Received: from SZXEMA413-HUB.china.huawei.com (10.82.72.72) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 20 Oct 2015 04:01:24 +0100 Received: from SZXEMA512-MBX.china.huawei.com ([169.254.7.231]) by SZXEMA413-HUB.china.huawei.com ([10.82.72.72]) with mapi id 14.03.0235.001; Tue, 20 Oct 2015 11:01:15 +0800 From: "Zhouqian (Cathy)" To: Linda Dunbar , "i2nsf@ietf.org" Thread-Topic: IETF 94 - I2NSF Meeting slot request Thread-Index: AQHRAFQU41T2kpeVt0iqEcmt15OZk55zvY8A Date: Tue, 20 Oct 2015 03:01:14 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657D67EF4@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D67EF4@dfweml701-chm> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.66.77.95] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [I2nsf] IETF 94 - I2NSF Meeting slot request X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Oct 2015 03:01:28 -0000 Dear Chairs, I'd like to request a 5-10 min slot to present the new document: draft-zhou= -i2nsf-capability-interface-monitoring, which describes the monitoring aspe= cts of the capability interface.=20 As specified in the i2nsf charter, the working group may consider to work o= n the information model to describe the control and monitoring of the flow-= based NSFs if necessary. This document aims to define the monitoring aspect= s of the work. The network security mechanism would be more efficient if th= e Security Controller could monitor, analyze and investigate the abnormal e= vents and finally produce security reports to the security administrators. = The security controller should be able to collect the traffic and session i= nformation related to the network performance from the NSF, in order to mak= e necessary actions, e.g., traffic cleaning or sampling adjustment.=20 To the folks in the mailing list: your comments are welcome and appreciated= . Best Regards, Cathy Zhou > -----Original Message----- > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > Sent: Monday, October 19, 2015 5:03 PM > To: Xiongjie (Emma); Zhouqian (Cathy); Xialiang (Frank); Xiongjie (Emma); > Mohamed Boucadair; Zhouqian (Cathy); Mohamed Boucadair; Xialiang (Frank) > Subject: New Version Notification for > draft-zhou-i2nsf-capability-interface-monitoring-00.txt >=20 >=20 > A new version of I-D, draft-zhou-i2nsf-capability-interface-monitoring-00= .txt > has been successfully submitted by Cathy Zhou and posted to the IETF > repository. >=20 > Name: draft-zhou-i2nsf-capability-interface-monitoring > Revision: 00 > Title: The Capability Interface for Monitoring Network Security > Functions (NSF) in I2NSF > Document date: 2015-10-19 > Group: Individual Submission > Pages: 7 > URL: > https://www.ietf.org/internet-drafts/draft-zhou-i2nsf-capability-interfac= e-moni > toring-00.txt > Status: > https://datatracker.ietf.org/doc/draft-zhou-i2nsf-capability-interface-mo= nitorin > g/ > Htmlized: > https://tools.ietf.org/html/draft-zhou-i2nsf-capability-interface-monitor= ing-00 >=20 >=20 > Abstract: > This document focuses on the monitoring aspects of the flow-based > Network Security Functions (NSFs). The NSF Capability interface > between the Service Provider's management system (or Security > Controller) and the NSFs is meant to enforce the required monitoring > capability. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of submiss= ion > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat > -----Original Message----- > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Linda Dunbar > Sent: Wednesday, October 07, 2015 12:29 AM > To: i2nsf@ietf.org > Subject: [I2nsf] IETF 94 - I2NSF Meeting slot request >=20 >=20 > Hi, >=20 > We will have our first I2NSF WG meeting at IETF 94 (Yokohama). >=20 > As per the preliminary agenda, I2NSF WG is scheduled to meet on Tue (Nov = 3) > 0900-1130 Morning Session in Room 302. >=20 > This email is to solicit slot requests to present in the WG session. > Please provide >=20 > * Name of the draft > * Short description of why you think the item needs to be discussed in th= e > meeting >=20 >=20 > Kindly note that, priority will be given to Requests related to the WG ch= artered > items. >=20 > Please do reply to this email with your requests. >=20 > cheers > -Linda and Adrian > _______________________________________________ >=20 > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf From nobody Mon Oct 19 23:53:53 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C4161A1BE7 for ; Mon, 19 Oct 2015 23:53:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kzznjLLFWrTO for ; Mon, 19 Oct 2015 23:53:47 -0700 (PDT) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0147.outbound.protection.outlook.com [65.55.169.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EEA461A1BE4 for ; Mon, 19 Oct 2015 23:53:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=2m9NN5u2VOucfma+OKJF2HhhO8h4RSt8w0fAYMfPQjU=; b=QBIcMyAzPCbMC1UIMpK9i36Tvvh5qj8zO6vN1hFI+A/Ddo1OogCZgtZbXmlBsCGXEMTdgoa9eLamb4RxLvLaecd9MvQ15c/PBxhlkzZvzOAHwR+UtuWLgLyIhobZRWURvqTrhtJdazUVg6bPAs/a3Knb+oM8h4K3/GXtvsmrVvU= Received: from BY2PR0301MB0693.namprd03.prod.outlook.com (10.160.63.148) by BY2PR0301MB0696.namprd03.prod.outlook.com (10.160.63.150) with Microsoft SMTP Server (TLS) id 15.1.300.14; Tue, 20 Oct 2015 06:53:44 +0000 Received: from BY2PR0301MB0693.namprd03.prod.outlook.com ([10.160.63.148]) by BY2PR0301MB0693.namprd03.prod.outlook.com ([10.160.63.148]) with mapi id 15.01.0300.010; Tue, 20 Oct 2015 06:53:44 +0000 From: Luyuan Fang To: "adrian@olddog.co.uk" , Linda Dunbar , "i2nsf@ietf.org" Thread-Topic: [I2nsf] Draft agenda coming soon Thread-Index: AdEKkBvFo7TNDeDmTAS82a1Yy2XUYAAadLGw Date: Tue, 20 Oct 2015 06:53:43 +0000 Message-ID: References: <02d401d10a90$478bd5d0$d6a38170$@olddog.co.uk> In-Reply-To: <02d401d10a90$478bd5d0$d6a38170$@olddog.co.uk> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=lufang@microsoft.com; x-originating-ip: [73.157.113.72] x-microsoft-exchange-diagnostics: 1; BY2PR0301MB0696; 5:VlHbBfz2rTLSdu5URkATHOWCNLl5hUKhBikDg+bc4uU6NAzlvJhd11pnivplF773g2VgjcdKP43XwcG7sE4mEdkMlHYUpUfn2vWGepzIwrPHnk0BmAkKApn1dzrHWxQKx1Jy7jLUrCFRKq1aWdpYEQ==; 24:viR7ufFFi5+O6d+6sSShh/EJ5SDrocVn3SEWR38xybzQk7SRunp4FrBfMr1aCz+D8aX5fHYWQDKJx7cR1AKo72k/OocvA0MjmRKRe5qcZcU=; 20:p+pFfvgN9UaAXXqy/mL0vwnNtM6tLi8z0nGMmpI1zV211l//8UQOIkVCZZBR53SwZ+DH0SGHEIwFFx2OIWUsCg== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR0301MB0696; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(189930954265078); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(61426024)(61427024); SRVR:BY2PR0301MB0696; BCL:0; PCL:0; RULEID:; SRVR:BY2PR0301MB0696; x-forefront-prvs: 073515755F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(189002)(13464003)(164054003)(377454003)(199003)(99936001)(46102003)(5004730100002)(107886002)(189998001)(15975445007)(5001960100002)(2501003)(76576001)(10090500001)(5002640100001)(76176999)(50986999)(122556002)(77096005)(33656002)(40100003)(102836002)(2950100001)(5007970100001)(5003600100002)(106356001)(5008740100001)(74316001)(2900100001)(5001770100001)(5001920100001)(8990500004)(92566002)(81156007)(64706001)(11100500001)(19580405001)(105586002)(87936001)(97736004)(5005710100001)(10400500002)(19580395003)(10290500002)(101416001)(54356999)(575784001)(86362001)(99286002)(5890100001)(86612001)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR0301MB0696; H:BY2PR0301MB0693.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/mixed; boundary="_002_BY2PR0301MB069323152CEF301AC9CAC8A4D6390BY2PR0301MB0693_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Oct 2015 06:53:43.4192 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR0301MB0696 Archived-At: Subject: Re: [I2nsf] Draft agenda coming soon X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Oct 2015 06:53:51 -0000 --_002_BY2PR0301MB069323152CEF301AC9CAC8A4D6390BY2PR0301MB0693_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Linda and Adrian, I'd like to request a 10 min slot to present draft-fang-i2nsf-inter-cloud-d= dos-mitigation-api. I attached our draft here. We encountered some system/connection glitch, th= e draft did not upload appropriately in time, we are still trying to fix th= e issue. At the meantime, we'd like to ask for folks in the WG to review the draft a= nd gather feedbacks. The draft is intended to define an Inter-Cloud DDoS Mitigation Abstract Lay= er and corresponding standardized APIs to enable the exchange of real time = automated information to enable DDoS mitigation across Cloud Service Provid= ers and Network Service Providers. As cloud provider, our Inter-cloud conn= ections with network providers are facing growing DDoS attacks. Unlike DDoS= mitigation within our own cloud networks, Inter-cloud attacks can often be= harder to detect and take longer to mitigate due to lack of full visibilit= y and automated tools when crossing the admin boundaries, and the impact to= these large inter-connection links can be substantial. Define and develop = standard common APIs to support coordinated mitigation on Inter-Cloud conne= ctions is urgently needed. We are still working to fill the specifications,= plan to upload a new version when submission reopens at IETF 94. Thanks, Luyuan -----Original Message----- From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Adrian Farrel Sent: Monday, October 19, 2015 10:05 AM To: i2nsf@ietf.org Subject: [I2nsf] Draft agenda coming soon Linda and I are just working on the last bits Adrian _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://na01.safelinks.protection.outlook.com/?url=3Dhttps%3a%2f%2fwww.ietf= .org%2fmailman%2flistinfo%2fi2nsf&data=3D01%7c01%7clufang%40microsoft.com%7= cfed5d393ff2242f7b17008d2d8a777cb%7c72f988bf86f141af91ab2d7cd011db47%7c1&sd= ata=3DSynb5QuiaiLgf4xsZyoSPK8ppF2fU3ysskbLn0lSIRo%3d --_002_BY2PR0301MB069323152CEF301AC9CAC8A4D6390BY2PR0301MB0693_ Content-Type: text/plain; name="draft-fang-i2nsf-inter-cloud-ddos-mitigation-api-00.txt" Content-Description: draft-fang-i2nsf-inter-cloud-ddos-mitigation-api-00.txt Content-Disposition: attachment; filename="draft-fang-i2nsf-inter-cloud-ddos-mitigation-api-00.txt"; size=13552; creation-date="Tue, 20 Oct 2015 00:43:49 GMT"; modification-date="Tue, 20 Oct 2015 00:39:16 GMT" Content-Transfer-Encoding: base64 IA0KDQoNCg0KSU5URVJORVQtRFJBRlQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIEx1eXVhbiBGYW5nDQpJbnRlbmRlZCBTdGF0dXM6IFN0YW5kYXJkcyBUcmFj ayAgICAgICAgICAgICAgICAgICAgICAgICAgIERlZXBhayBCYW5zYWwNCkV4cGlyZXM6IEFwcmls IDIxLCAyMDE2ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1pY3Jvc29m dA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMTksIDIwMTUNCg0KICAgICAgICAgICAgICAgICAg ICBJbnRlci1DbG91ZCBERG9TIE1pdGlnYXRpb24gQVBJDQogICAgICAgICAgZHJhZnQtZmFuZy1p Mm5zZi1pbnRlci1jbG91ZC1kZG9zLW1pdGlnYXRpb24tYXBpLTAwDQoNCkFic3RyYWN0DQoNCiAg IFRoaXMgZG9jdW1lbnQgZGVmaW5lcyBhbiBJbnRlci1DbG91ZCBERG9TIE1pdGlnYXRpb24gQWJz dHJhY3QgTGF5ZXINCiAgIGFuZCBjb3JyZXNwb25kaW5nIHN0YW5kYXJkaXplZCBBUElzIHRvIGVu YWJsZSB0aGUgZXhjaGFuZ2Ugb2YgcmVhbA0KICAgdGltZSBhdXRvbWF0ZWQgaW5mb3JtYXRpb24g dG8gZW5hYmxlIEREb1MgbWl0aWdhdGlvbiBhY3Jvc3MgQ2xvdWQNCiAgIFNlcnZpY2UgUHJvdmlk ZXJzIGFuZCBOZXR3b3JrIFNlcnZpY2UgUHJvdmlkZXJzLg0KDQpTdGF0dXMgb2YgdGhpcyBNZW1v DQoNCiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVkIHRvIElFVEYgaW4gZnVsbCBj b25mb3JtYW5jZSB3aXRoIHRoZQ0KICAgcHJvdmlzaW9ucyBvZiBCQ1AgNzggYW5kIEJDUCA3OS4N Cg0KICAgSW50ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJu ZXQgRW5naW5lZXJpbmcNCiAgIFRhc2sgRm9yY2UgKElFVEYpLCBpdHMgYXJlYXMsIGFuZCBpdHMg d29ya2luZyBncm91cHMuICBOb3RlIHRoYXQNCiAgIG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0 cmlidXRlIHdvcmtpbmcgZG9jdW1lbnRzIGFzDQogICBJbnRlcm5ldC1EcmFmdHMuDQoNCiAgIElu dGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Yg c2l4IG1vbnRocw0KICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVk IGJ5IG90aGVyIGRvY3VtZW50cyBhdCBhbnkNCiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRl IHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlDQogICBtYXRlcmlhbCBvciB0byBj aXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBpbiBwcm9ncmVzcy4iDQoNCiAgIFRoZSBsaXN0 IG9mIGN1cnJlbnQgSW50ZXJuZXQtRHJhZnRzIGNhbiBiZSBhY2Nlc3NlZCBhdA0KICAgaHR0cDov L3d3dy5pZXRmLm9yZy8xaWQtYWJzdHJhY3RzLmh0bWwNCg0KICAgVGhlIGxpc3Qgb2YgSW50ZXJu ZXQtRHJhZnQgU2hhZG93IERpcmVjdG9yaWVzIGNhbiBiZSBhY2Nlc3NlZCBhdA0KICAgaHR0cDov L3d3dy5pZXRmLm9yZy9zaGFkb3cuaHRtbA0KDQpDb3B5cmlnaHQgTm90aWNlDQoNCiAgIENvcHly aWdodCAoYykgMjAxNSBJRVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBpZGVudGlmaWVkIGFzIHRo ZQ0KICAgZG9jdW1lbnQgYXV0aG9ycy4gQWxsIHJpZ2h0cyByZXNlcnZlZC4NCg0KICAgVGhpcyBk b2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3QncyBMZWdhbA0K ICAgUHJvdmlzaW9ucyBSZWxhdGluZyB0byBJRVRGIERvY3VtZW50cw0KICAgKGh0dHA6Ly90cnVz dGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mDQogICBw dWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50 cw0KICAgY2FyZWZ1bGx5LCBhcyB0aGV5IGRlc2NyaWJlIHlvdXIgcmlnaHRzIGFuZCByZXN0cmlj dGlvbnMgd2l0aCByZXNwZWN0DQogICB0byB0aGlzIGRvY3VtZW50LiBDb2RlIENvbXBvbmVudHMg ZXh0cmFjdGVkIGZyb20gdGhpcyBkb2N1bWVudCBtdXN0DQogDQoNCg0KRmFuZyBldCBhbC4gICAg ICAgICAgICAgRXhwaXJlcyA8QXByaWwgMjEsIDIwMTY+ICAgICAgICAgICAgICAgIFtQYWdlIDFd DQoMDQpJTlRFUk5FVCBEUkFGVCAgICAgIEludGVyLUNsb3VkIEREb1MgTWl0aWdhdGlvbiBBUEkg ICAgIE9jdG9iZXIgMTksIDIwMTUNCg0KDQogICBpbmNsdWRlIFNpbXBsaWZpZWQgQlNEIExpY2Vu c2UgdGV4dCBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA0LmUgb2YNCiAgIHRoZSBUcnVzdCBMZWdh bCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0aG91dCB3YXJyYW50eSBhcw0KICAgZGVz Y3JpYmVkIGluIHRoZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlLg0KDQoNClRhYmxlIG9mIENvbnRl bnRzDQoNCiAgIDEuIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgMw0KICAgICAxLjEuIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAzDQogICAyLiBQcm9ibGVtIFN0 YXRlbWVudCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQN CiAgIDMuIEludGVyLUNsb3VkIEREb1MgTWl0aWdhdGlvbiBMYXllciAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgNQ0KICAgNC4gIEludGVyLUNsb3VkIEREb1MgTWl0aWdhdGlvbiBBUEkg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2DQogICA1LiAgU2VjdXJpdHkgQ29uc2lk ZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDcNCiAgIDYu ICBJQU5BIENvbnNpZGVyYXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgNw0KICAgNy4gIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3DQogICAgIDcuMSAgTm9ybWF0aXZlIFJlZmVyZW5j ZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDcNCiAgICAgNy4yICBJ bmZvcm1hdGl2ZSBSZWZlcmVuY2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgNw0KICAgQXV0aG9ycycgQWRkcmVzc2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICA3DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQogDQoNCg0KRmFuZyBldCBhbC4gICAgICAgICAgICAg RXhwaXJlcyA8QXByaWwgMjEsIDIwMTY+ICAgICAgICAgICAgICAgIFtQYWdlIDJdDQoMDQpJTlRF Uk5FVCBEUkFGVCAgICAgIEludGVyLUNsb3VkIEREb1MgTWl0aWdhdGlvbiBBUEkgICAgIE9jdG9i ZXIgMTksIDIwMTUNCg0KDQoxLiBJbnRyb2R1Y3Rpb24NCg0KICAgVGhlIHJlY2VudCBncm93dGgg aW4gdm9sdW1lIGFuZCBzY2FsZSBvZiBEaXN0cmlidXRlZCBEZW5pYWwgb2YNCiAgIFNlcnZpY2Ug KEREb1MpIGF0dGFja3MsIHBhcnRpY3VsYXJseSBpdHMgaW1wYWN0IG9uIHRoZSBsYXJnZSBwaXBl cyBvZg0KICAgSW50ZXItQ2xvdWQsIEludGVyLVByb3ZpZGVyIGNvbm5lY3Rpb25zLCBjYWxscyBm b3IgbWVjaGFuaXNtcyB0bw0KICAgZW5hYmxlIEREb1MgbWl0aWdhdGlvbiBhY3Jvc3MgQ2xvdWQg U2VydmljZSBQcm92aWRlcnMgKENTUHMpIGFuZA0KICAgTmV0d29yayBTZXJ2aWNlIFByb3ZpZGVy cyAoTlNQcykuIFRoZXNlIG1lY2hhbmlzbXMgcmVxdWlyZSB0byBkZWZpbmUNCiAgIGFuIEludGVy LUNsb3VkIEREb1MgTWl0aWdhdGlvbiBBYnN0cmFjdCBMYXllciB3aXRoIGNvcnJlc3BvbmRpbmcN CiAgIHN0YW5kYXJkaXplZCBBUElzIHRvIGFsbG93IHJlYWwgdGltZSwgYXV0b21hdGVkIGluZm9y bWF0aW9uIGV4Y2hhbmdlDQogICBhbW9uZyBDU1BzIGFuZCBOU1BzLCBhbmQgYWNoaWV2ZSByYXBp ZCBwcm90ZWN0aXZlIHJlc3BvbnNlIGFuZA0KICAgZWZmZWN0aXZlIEludGVyIENsb3VkL0ludGVy IFByb3ZpZGVyIEREb1MgYXR0YWNrIG1pdGlnYXRpb24uIFRoZSBuZWVkDQogICBmb3Igc3VjaCBz dGFuZGFyZCBJbnRlci1DbG91ZCBERG9TIE1pdGlnYXRpb24gQVBJcyBpcyBzdHJvbmcgYW5kDQog ICB1cmdlbnQuDQoNCiAgIFRoaXMgZG9jdW1lbnQgZGVmaW5lcyB0aGUgSW50ZXItQ2xvdWQgRERv UyBNaXRpZ2F0aW9uIEFic3RyYWN0IExheWVyDQogICBhbmQgQVBJcy4gDQoNCiAgIFRoaXMgZG9j dW1lbnQgZm9jdXNlcyBvbiBJbnRlci1DbG91ZCwgSW50ZXItUHJvdmlkZXIgYXV0b21hdGVkDQog ICBleGNoYW5nZSBvZiBERG9TIE1pdGlnYXRpb24gaW5mb3JtYXRpb24sIGFsdGhvdWdoIHNpbWls YXIgQVBJcyBjb3VsZA0KICAgYmUgdXNlZCB3aXRoaW4gZWFjaCBjbG91ZCBmb3IgaGFuZGxpbmcg bWFsaWNpb3VzIHRyYWZmaWMuDQoNCjEuMS4gVGVybWlub2xvZ3kNCg0KICAgVGhlIGtleSB3b3Jk cyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLA0K ICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJFQ09NTUVOREVEIiwgIk1BWSIsIGFuZCAiT1BU SU9OQUwiIGluIHRoaXMNCiAgIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNj cmliZWQgaW4gUkZDIDIxMTkgW1JGQzIxMTldLg0KDQogICBUaGlzIGRvY3VtZW50IHVzZXMgdGhl IHRlcm1pbm9sb2d5IGRlZmluZWQgaW4NCiAgIFtJLUQuZHJhZnQtaGFyZXMtaTJuc2YtdXNlLWNh c2UtZ2FwLWFuYWx5c2lzXS4NCg0KICAgSW4gYWRkaXRpb24sIHRoaXMgZG9jdW1lbnQgdXNlcyB0 aGUgZm9sbG93aW5nIHRlcm1zLg0KDQogICBUZXJtICAgICAgICAgICAgICBEZWZpbml0aW9uDQog ICAtLS0tLS0tLS0tLSAgICAgICAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQ0KICAgQkdQICAgICAgICAgICAgICAgQm9yZGVyIEdhdGV3YXkgUHJvdG9j b2wNCiAgIENTUCAgICAgICAgICAgICAgIENsb3VkIFNlcnZpY2UgUHJvdmlkZXINCiAgIERDICAg ICAgICAgICAgICAgIERhdGEgQ2VudGVyIA0KICAgRENJICAgICAgICAgICAgICAgRGF0YSBDZW50 ZXIgSW50ZXJjb25uZWN0DQogICBERG9TICAgICAgICAgICAgICBEaXN0cmlidXRlZCBEZW5pYWwg b2YgU2VydmljZQ0KICAgRExDICAgICAgICAgICAgICAgRGlzcnVwdGlvbiBMaWZlIEN5Y2xlDQog ICBJbnRlci1DbG91ZCAgICAgICBUaGUgaW50ZXJjb25uZWN0aW9uIGJldHdlZW4gdGhlIGNsb3Vk IG9mIGRpZmZlcmVudCANCiAgICAgICAgICAgICAgICAgICAgIHByb3ZpZGVycw0KICAgTlNQICAg ICAgICAgICAgICAgTmV0d29yayBTZXJ2aWNlIFByb3ZpZGVyDQogICBTRE4gICAgICAgICAgICAg ICBTb2Z0d2FyZSBEZWZpbmVkIE5ldHdvcmsNCiAgIFNWUiAgICAgICAgICAgICAgIFNlcnZlcg0K DQoNCg0KIA0KDQoNCkZhbmcgZXQgYWwuICAgICAgICAgICAgIEV4cGlyZXMgPEFwcmlsIDIxLCAy MDE2PiAgICAgICAgICAgICAgICBbUGFnZSAzXQ0KDA0KSU5URVJORVQgRFJBRlQgICAgICBJbnRl ci1DbG91ZCBERG9TIE1pdGlnYXRpb24gQVBJICAgICBPY3RvYmVyIDE5LCAyMDE1DQoNCg0KMi4g UHJvYmxlbSBTdGF0ZW1lbnQNCg0KICAgQWxvbmcgd2l0aCB0aGUgcmFwaWQgZ3Jvd3RoIG9mIGNs b3VkIHNlcnZpY2VzLCB0aGUgbGFyZ2UgcGlwZXMgb2YNCiAgIEludGVyLUNsb3VkLCBJbnRlci1Q cm92aWRlciBjb25uZWN0aW9ucyBhcmUgaW5jcmVhc2luZ2x5IHRoZSBzdWJqZWN0DQogICBvZiBE RG9TIGF0dGFja3MuIFNpbmNlIHRoZXNlIGNvbm5lY3Rpb25zIGFyZSBiZXR3ZWVuIGNsb3VkcyBv Zg0KICAgZGlmZmVyZW50IHByb3ZpZGVycywgaW1wbGVtZW50aW5nIG1lY2hhbmlzbSB0byBhY2hp ZXZlIHJhcGlkDQogICBwcm90ZWN0aXZlIHJlc3BvbnNlIGluIGNhc2Ugb2YgYXR0YWNrIGlzIGNo YWxsZW5naW5nLiBXaGlsZSB3aXRoaW4NCiAgIGl0cyBvd24gY2xvdWQgZWFjaCBwcm92aWRlciBt YXkgYmUgYWJsZSB0byBwcm90ZWN0IGVmZmVjdGl2ZWx5IGl0cw0KICAgbmV0d29yayB1c2luZyB2 YXJpb3VzIEREb1MgcHJvdGVjdGlvbiB0ZWNobmlxdWVzLCBmb3IgdGhlIEludGVyLQ0KICAgQ2xv dWQvSW50ZXItUHJvdmlkZXIgbGlua3MsIGVhY2ggcHJvdmlkZXIgZG9lcyBub3QgaGF2ZSBmdWxs DQogICB2aXNpYmlsaXR5IG9mIHRoZSBhdHRhY2ssIGFuZCB0aGVyZWZvcmUgcmVzcG9uc2UgdGlt ZXMgbWF5IGJlIGxvbmdlciwNCiAgIGNvdW50ZXItbWVhc3VyZXMgbWF5IGJlIGxlc3MgZWZmZWN0 aXZlLCBhbmQgdGhlcmVmb3JlIHRoZSBzZXZlcml0eQ0KICAgYW5kIGltcGFjdCBvZiB0aGUgYXR0 YWNrcyBtYXkgYmUgdmVyeSBzaWduaWZpY2FudC4gDQoNCiAgIExhcmdlIEREb1MgYXR0YWNrcyB0 YXJnZXRpbmcgdGhlIEludGVyLUNsb3VkLCBJbnRlci1Qcm92aWRlciBsaW5rcw0KICAgbWF5IGNv bnN1bWUgdGhlIGF2YWlsYWJsZSBiYW5kd2lkdGggb3IgdGhlIHJvdXRlci9zd2l0Y2gvc2VydmVy DQogICByZXNvdXJjZXMgd2l0aGluIHRlbnMgb2Ygc2Vjb25kcy4gV2hpbGUgdGhlIGF0dGFjayBp cyBvbiwgbGVnaXRpbWF0ZQ0KICAgdHJhZmZpYyBpcyBwcmV2ZW50ZWQgZnJvbSBiZWluZyBmb3J3 YXJkZWQgb3ZlciB0aGUgc2F0dXJhdGVkIGxpbmtzLg0KICAgV2l0aCBzYXR1cmF0ZWQgSW50ZXIt Q2xvdWQsIEludGVyLVByb3ZpZGVyIGxpbmtzLCBldmVuIGlmIHdpdGhpbiBlYWNoDQogICBjbG91 ZCB0aGUgRERvUyBtaXRpZ2F0aW9uIG1heSBiZSB3b3JraW5nIGVmZmVjdGl2ZWx5LCBpdCBjYW4g cXVpY2tseQ0KICAgYmUgcmVuZGVyZWQgaXJyZWxldmFudC4gDQoNCiAgIFRvZGF5LCBleGNoYW5n ZSBvZiBERG9TIGF0dGFjayBpbmZvcm1hdGlvbiBhbmQgbWl0aWdhdGlvbiBzdHJhdGVneQ0KICAg YW1vbmcgcHJvdmlkZXJzIGlzIGxhcmdlbHkgbWFudWFsIGFuZCB0eXBpY2FsbHkgcmVsaWVzIG9u IGN1c3RvbWl6ZWQNCiAgIG9wZXJhdGlvbiBwcm9jZXNzZXMgZXN0YWJsaXNoZWQgYWQgaG9jIGJl dHdlZW4gZWFjaCBwcm92aWRlci4gQmVjYXVzZQ0KICAgb2YgbGFyZ2VseSBtYW51YWwgZXNjYWxh dGlvbiBwcm9jZWR1cmVzLCBwcm92aWRlcnMnIHJlYWN0aW9uIHRpbWVzIHRvDQogICBERG9TIGF0 dGFja3MgdG8gSW50ZXItQ2xvdWQsIEludGVyLVByb3ZpZGVyIGxpbmtzIHRlbmRzIHRvIGJlIHNs b3cNCiAgIChpdCBjYW4gZWFzaWx5IHRha2UgdGVucyBvZiBtaW51dGVzIGlmIG5vdCBob3VycyB0 byBwdXQgZWZmZWN0aXZlDQogICBtaXRpZ2F0aW9uIG1lYXN1cmVzIGluIHBsYWNlKSBjb21wYXJl ZCB0byBJbnRyYS1DbG91ZCBERG9TDQogICBtaXRpZ2F0aW9uLCBhbmQgdGh1cyB0aGUgZGFtYWdl IGNhdXNlZCBieSBzdWNoIGF0dGFja3MgY2FuIGJlDQogICBzdWJzdGFudGlhbC4gVGhlIHJlYWN0 aW9uIHRpbWUgbWF5IGV4Y2VlZCB0aGUgRGlzcnVwdGlvbiBMaWZlIEN5Y2xlDQogICAoRExDKSBv ZiB0aGUgYXR0YWNrLg0KDQogICBTb3BoaXN0aWNhdGVkIGFuZCBkZXRlcm1pbmVkIG1hbGljaW91 cyBhdHRhY2tlcnMgYXJlIGFibGUgdG8gcXVpY2tseQ0KICAgbGVhcm4gdGhlIGludGVuZGVkIElu dGVyLUNsb3VkIEludGVyLVByb3ZpZGVyIGxpbmsgY2FwYWJpbGl0aWVzIGFuZA0KICAgbGltaXRh dGlvbnMgdGhyb3VnaCBwcm9iaW5nLiBUaGlzIGluY2x1ZGVzIGJhbmR3aWR0aCBjYXBhY2l0eSwN CiAgIHNhdHVyYXRpb24gcmVzaXN0YW5jZSwgYW5kIEREb1MgYWJzb3JwdGlvbiByZXNpbGllbmNl IG9mIHRoZSBsaW5rLg0KICAgVGhlIGF0dGFja2VyIGlzIGFsc28gYWJsZSB0byBsZWFybiB0aGUg RERvUyBjb3VudGVybWVhc3VyZXMgYW5kIHRoZWlyDQogICByZXNwb25zZSB0aW1lcywgZnJvbSB3 aGljaCB0aGUgYXR0YWNrZXIgY2FuIGluZmVyIHRoZSBETEMgdGhhdCBjYW4gYmUNCiAgIGV4YWN0 ZWQgdG93YXJkIHRoZSBpbnRlbmRlZCB0YXJnZXQuIFRoZSBETEMgaXMgbWVhc3VyZWQgYnkgdGhl DQogICBhc3NhaWxhbnQgZnJvbSB0aGUgdGltZSB0aGUgYXR0YWNrIGlzIGluaXRpYXRlZCB0byB0 aGUgdGltZSB0aGUNCiAgIG1pdGlnYXRpb24gcmVzcG9uc2UgYmVjb21lcyBldmlkZW50LiBBbiBh dHRhY2tlciBjYW4gdGhlbiB1c2UgdGhpcw0KICAgaW5mb3JtYXRpb24gdG8gZGVzaWduIHRoZSBh dHRhY2tzIGluIHN1Y2ggYSB3YXkgdGhhdCB0aGUgY3VycmVudCBhbmQNCiAgIHN1YnNlcXVlbnQg YXR0YWNrcyBpbmZsaWN0IHRoZSBtb3N0IGhhcm0uDQoNCiAgIEluIG9yZGVyIHRvIGFjaGlldmUg cmFwaWQgcHJvdGVjdGl2ZSByZXNwb25zZSwgdGhlIGV4Y2hhbmdlIG9mIEREb1MNCiAgIG1pdGln YXRpb24gaW5mb3JtYXRpb24gYmV0d2VlbiBwcm92aWRlcnMgbXVzdCBiZSBlbmFibGVkIGluIHJl YWwgdGltZQ0KICAgYW5kIGluIGFuIGF1dG9tYXRlZCwgc3RhbmRhcmRpemVkIGZhc2hpb24uIA0K IA0KDQoNCkZhbmcgZXQgYWwuICAgICAgICAgICAgIEV4cGlyZXMgPEFwcmlsIDIxLCAyMDE2PiAg ICAgICAgICAgICAgICBbUGFnZSA0XQ0KDA0KSU5URVJORVQgRFJBRlQgICAgICBJbnRlci1DbG91 ZCBERG9TIE1pdGlnYXRpb24gQVBJICAgICBPY3RvYmVyIDE5LCAyMDE1DQoNCg0KMy4gSW50ZXIt Q2xvdWQgRERvUyBNaXRpZ2F0aW9uIExheWVyDQoNCiAgIFRoZSBJbnRlci1DbG91ZCBERG9TIE1p dGlnYXRpb24gTGF5ZXIgYW5kIGl0cyBjb3JyZXNwb25kaW5nDQogICBzdGFuZGFyZGl6ZWQsIHNl Y3VyZSBJbnRlci1DbG91ZCBERG9TIE1pdGlnYXRpb24gQVBJcyBpcyBpbGx1c3RyYXRlZA0KICAg aW4gRmlndXJlIDEuDQoNCg0KDQogICAgICAgICAgICAgIC4tLS0tLS4gICAgICAgICAgICAgICAg ICAgICAuLS0tLS0uDQogICAgICAgICAgICAgKCAgICAgICAnKSAgICAgICAgICAgICAgICAgICgg ICAgICAgJykNCiAgICAgICAgIC4tLSguICAgICAgICcuLS0tLiAgICAgICAgICAuLS0oLiAgICAg ICAnLi0tLS4NCiAgICAgICAgKCAgICAgJyAgICAgICcgICAgICkgICAgICAgICggICAgICcgICAg ICAnICAgICApDQogICAgICAgKCAgICBOZXR3b3JrIFNQIDEgICAgKSAgICAgICggICAgTmV0d29y ayBTUCAyICAgICkNCiAgICAgICAgKC4gICAgICAgICAgICAgICAgLikgICAgICAgICguICAgICAg ICAgICAgICAgIC4pDQogICAgICAgICAoICAgICAoICAgICAgICAuKSAgICAgICAgICAgKCAgICAg KCAgICAgICAgLikNCiAgICAgICAgICAgJy0tJyAnLScnLS0tJyAgICAgICAgICAgICAgICctLScg Jy0nJy0tLScNCiAgICAgICAgICAgICAgICB8fCAgICAgICAgICAgICAgICAgICAgICAgICAgIHx8 DQogICAgICAgICAgICAgICBfX19fICAgICAgICAgICAgICAgICAgICAgICAgIF9fX18NCiAgICAg ICAgICAgICAgIC0tLS0gU2VjdXJlIEFQSSAgICAgICAgICAgICAgLS0tLSBTZWN1cmUgQVBJDQog ICAgICAgICAgICAgICAgfHwgICAgICAgICAgICAgICAgICAgICAgICAgICB8fCAgICAgIA0KICAg ICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsgICAg ICAgICAgICANCiAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8ICAgICAgICAgICAgDQogICAgICAgIHwgIEludGVyLUNsb3VkIEREb1MgTWl0aWdh dGlvbiBBYnN0cmFjdCBMYXllciAgfCAgICAgICAgICAgIA0KICAgICAgICB8ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICANCiAgICAgICAg Ky0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rDQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICB8fA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICBf X19fDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tLS0gIFNlY3VyZSBBUEkNCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHx8DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg Li0tLS0tLg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgKCAgICAgICAnKQ0KICAgICAgICAg ICAgICAgICAgICAgICAuLS0oLiAgICAgICAnLi0tLS4NCiAgICAgICAgICAgICAgICAgICAgICAo ICAgICAnICAgICAgJyAgICAgKQ0KICAgICAgICAgICAgICAgICAgICAgKCAgICBDbG91ZCBTUCBB ICAgICAgKQ0KICAgICAgICAgICAgICAgICAgICAgICguICAgICAgICAgICAgICAgIC4pDQogICAg ICAgICAgICAgICAgICAgICAgICggICAgICggICAgICAgIC4pDQogICAgICAgICAgICAgICAgICAg ICAgICAgJy0tJyAnLScnLS0tJyAgDQoNCiAgICAgICAgICBGaWd1cmUgMS4gSW50ZXItQ2xvdWQg RERvUyBNaXRpZ2F0aW9uIEFic3RyYWN0IExheWVyIGFuZCBBUElzLg0KDQogICBUb2RheSB0aGVy ZSBpcyBubyBhY2NlcHRlZCBpbmR1c3RyeSBjb21tb24gRERvUyBNaXRpZ2F0aW9uIExheWVyIHRo YXQNCiAgIGNhbiBiZSB1c2VkIHRvIHJlZHVjZSB0aGUgcmVhY3Rpb24gdGltZSBhbmQgaW5jcmVh c2UgdGhlDQogICBlZmZlY3RpdmVuZXNzIG9mIG1pdGlnYXRpb24gaW4gY2FzZSBvZiBhdHRhY2su IA0KDQogICBUaGUgSW50ZXItQ2xvdWQgRERvUyBNaXRpZ2F0aW9uIEFic3RyYWN0IExheWVyIHBy b3ZpZGVzIHN0YW5kYXJkaXplZA0KICAgc2VjdXJlIEFQSXMgdGhhdCBjYW4gYmUgdXNlZCBieSBl YWNoIHByb3ZpZGVyIHRvIHByb2dyYW1tYXRpY2FsbHkNCiAgIGluaXRpYXRlIHJlYWwgdGltZSBp bmZvcm1hdGlvbiBleGNoYW5nZXMgdG8gb3RoZXIgcHJvdmlkZXJzIHRvDQogICBwcm92aWRlIHZp c2liaWxpdHkgb2YgdGhlIGF0dGFjayBhbmQgY29vcmRpbmF0ZSBERG9TIG1pdGlnYXRpb24NCiAN Cg0KDQpGYW5nIGV0IGFsLiAgICAgICAgICAgICBFeHBpcmVzIDxBcHJpbCAyMSwgMjAxNj4gICAg ICAgICAgICAgICAgW1BhZ2UgNV0NCgwNCklOVEVSTkVUIERSQUZUICAgICAgSW50ZXItQ2xvdWQg RERvUyBNaXRpZ2F0aW9uIEFQSSAgICAgT2N0b2JlciAxOSwgMjAxNQ0KDQoNCiAgIG1lY2hhbmlz bXMsIEV4Y2hhbmdlZCBpbmZvcm1hdGlvbiBtYXkgaW5jbHVkZSBzaWduYXR1cmVzIGFuZCBmb3Jl bnNpYw0KICAgb2YgdGhlIGF0dGFjaywgdGltZXN0YW1wcywgYW5kIGJsYWNrLWhvbGluZyBjb3Vu dGVybWVhc3VyZXMuICANCg0KICAgVGhlIEludGVyLUNsb3VkIEREb1MgTWl0aWdhdGlvbiBBYnN0 cmFjdCBMYXllciBwcm92aWRlcyBjb3JyZXNwb25kaW5nDQogICBBUEkgY2FsbHMgdG8gZXhjaGFu Z2UgbWl0aWdhdGlvbiBpbmZvcm1hdGlvbiBvbiB0aGUgZm9sbG93aW5nIGFyZWFzLg0KDQogICBE RG9TIFByb3RlY3Rpb24gVHlwZXM6DQoNCiAgICAgICAgIG8gIFRDUCBmbG9vZCByYXRlIGxpbWl0 aW5nIA0KDQogICAgICAgICBvICBVRFAgZmxvb2QgcmF0ZSBsaW1pdGluZyANCg0KICAgICAgICAg byAgVENQIFNZTi5BQ0svUlNUIGZsb29kIHByb3RlY3Rpb24gYW5kIGF1dGhlbnRpY2F0aW9uIA0K DQogICAgICAgICBvICBNYXhpbXVtIGNvbmN1cnJlbnQgY29ubmVjdGlvbnMgcGVyIGludGVydmFs IHJhdGUgbGltaXRpbmcgDQoNCiAgICAgICAgIG8gIE1heGltdW0gbnVtYmVyIG9mIG5ldyBjb25u ZWN0aW9ucyBhbGxvd2VkIHBlciBpbnRlcnZhbCByYXRlDQogICAgICAgICAgICBsaW1pdGluZw0K DQogICAgICAgICBvICBNYXhpbXVtIGZyYWdtZW50IHBhY2tldHMgYWxsb3dlZCBwZXIgaW50ZXJ2 YWwgcmF0ZSBsaW1pdGluZw0KDQogICAgICAgICBvICBNYXhpbXVtIG51bWJlciBvZiBwYWNrZXRz IGFsbG93ZWQgcGVyIGludGVydmFsIHJhdGUNCiAgICAgICAgICAgIGxpbWl0aW5nDQoNCiAgICAg ICAgIG8gIEJsYWNrLWhvbGluZyANCg0KICAgQkdQIFNpZ25hbGluZyBhbmQgTWl0aWdhdGlvbg0K DQogICAgICAgICBvICBCR1AgLzI0IHJvdXRlIGFkdmVydGlzZW1lbnQgd2l0aCBjb21tdW5pdHkg c3RyaW5nIG9wdGlvbiANCg0KICAgICAgICAgbyAgTWl0aWdhdGlvbiBzdXBwb3J0IGZvciAvMzIg d2l0aCB0eXBlIGFuZCByYXRlIGxpbWl0DQogICAgICAgICAgICB0aHJlc2hvbGRzDQoNCiAgICAg ICAgIG8gIC8zMiByZW1vdmFsIGZyb20gbWl0aWdhdGlvbiANCg0KICAgICAgICAgbyAgQkdQIHN1 cHBvcnQgZm9yIC8yNCByZW1vdmFsIA0KDQogICBBdHRhY2sgTGlmZWN5Y2xlIE1vbml0b3Jpbmcg YW5kIFJlcG9ydGluZw0KDQogICAgICAgICBvICBWb2x1bWUgYW5kIHNjYWxlIG9mIHRoZSBhdHRh Y2ssIHNpZ25hdHVyZXMsIGZvcmVuc2ljIA0KDQogICAgICAgICBvICBUaW1lc3RhbXBzIA0KDQoN CjQuICBJbnRlci1DbG91ZCBERG9TIE1pdGlnYXRpb24gQVBJDQoNCiAgICAgICAgICAgIFRCRC4N Cg0KIA0KDQoNCkZhbmcgZXQgYWwuICAgICAgICAgICAgIEV4cGlyZXMgPEFwcmlsIDIxLCAyMDE2 PiAgICAgICAgICAgICAgICBbUGFnZSA2XQ0KDA0KSU5URVJORVQgRFJBRlQgICAgICBJbnRlci1D bG91ZCBERG9TIE1pdGlnYXRpb24gQVBJICAgICBPY3RvYmVyIDE5LCAyMDE1DQoNCg0KNS4gIFNl Y3VyaXR5IENvbnNpZGVyYXRpb25zDQoNCiAgICAgICAgICAgIFRCRC4NCg0KNi4gIElBTkEgQ29u c2lkZXJhdGlvbnMNCg0KICAgICAgICAgICAgVEJELg0KDQo3LiAgUmVmZXJlbmNlcw0KDQo3LjEg IE5vcm1hdGl2ZSBSZWZlcmVuY2VzDQoNCiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkg d29yZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlDQogICAgICAgICAgICAgIFJlcXVpcmVt ZW50IExldmVscyIsIEJDUCAxNCwgUkZDIDIxMTksIE1hcmNoIDE5OTcuDQoNCg0KNy4yICBJbmZv cm1hdGl2ZSBSZWZlcmVuY2VzDQoNCiAgIFtJLUQuZHJhZnQtaGFyZXMtaTJuc2YtdXNlLWNhc2Ut Z2FwLWFuYWx5c2lzXSAgUy4gSGFyZXMgZXQgYWwuLA0KICAgICAgICAgICAgICAiQW5hbHlzaXMg b2YgVXNlIENhc2VzIGFuZCBHYXBzIGluIFRlY2hub2xvZ3kgZm9yIEkyTlNGDQogICAgICAgICAg ICAgICIsZHJhZnQtaGFyZXMtaTJuc2YtdXNlLWNhc2UtZ2FwLWFuYWx5c2lzLTAwICh3b3JrIGlu DQogICAgICAgICAgICAgIHByb2dyZXNzKSwgT2N0b2JlciAyMDE1Lg0KDQoNCkF1dGhvcnMnIEFk ZHJlc3Nlcw0KDQogICBMdXl1YW4gRmFuZw0KICAgTWljcm9zb2Z0DQogICAxNTU5MCBORSAzMXN0 IFN0DQogICBSZWRtb25kLCBXQSA5ODA1Mg0KICAgRW1haWw6IGx1ZmFuZ0BtaWNyb3NvZnQuY29t DQoNCiAgIERlZXBhayBCYW5zYWwNCiAgIE1pY3Jvc29mdA0KICAgMTU1OTAgTkUgMzFzdCBTdA0K ICAgUmVkbW9uZCwgV0EgOTgwNTINCiAgIEVtYWlsOiBkYmFuc2FsQG1pY3Jvc29mdC5jb20NCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpGYW5nIGV0IGFsLiAgICAgICAgICAgICBFeHBpcmVz IDxBcHJpbCAyMSwgMjAxNj4gICAgICAgICAgICAgICAgW1BhZ2UgN10NCg== --_002_BY2PR0301MB069323152CEF301AC9CAC8A4D6390BY2PR0301MB0693_-- From nobody Tue Oct 20 15:55:29 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D07C1A8AAE for ; Tue, 20 Oct 2015 15:55:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wY__IHjpBoPM for ; Tue, 20 Oct 2015 15:55:15 -0700 (PDT) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0125.outbound.protection.outlook.com [65.55.169.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7962F1A8A29 for ; Tue, 20 Oct 2015 15:55:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=lnf99u9SYHtK0D3BH7Tbi08ZWrSEYNL3HvC/+YGOYkk=; b=hHzik0akl+RWiYV/RfUhms8wszjqCjME4D1t+ru45exPgxyzm4hC5pUz9jAbb3SF3sEZm+ELDfdXsj59rLDmuGUEai8+LFGVAmGZuBjpHDq9D5jQMQqypTEeEDfJs2Nf49s3Zga1g42/UPI0Md7VTQdmY47mwqeT16x+wjSGSnk= Received: from BY2PR0301MB0693.namprd03.prod.outlook.com (10.160.63.148) by BY2PR0301MB0694.namprd03.prod.outlook.com (10.160.63.149) with Microsoft SMTP Server (TLS) id 15.1.300.14; Tue, 20 Oct 2015 22:55:12 +0000 Received: from BY2PR0301MB0693.namprd03.prod.outlook.com ([10.160.63.148]) by BY2PR0301MB0693.namprd03.prod.outlook.com ([10.160.63.148]) with mapi id 15.01.0300.010; Tue, 20 Oct 2015 22:55:12 +0000 From: Luyuan Fang To: "adrian@olddog.co.uk" , Linda Dunbar , "i2nsf@ietf.org" Thread-Topic: [I2nsf] Draft agenda coming soon Thread-Index: AdEKkBvFo7TNDeDmTAS82a1Yy2XUYAAadLGwACQQ5JA= Date: Tue, 20 Oct 2015 22:55:12 +0000 Message-ID: References: <02d401d10a90$478bd5d0$d6a38170$@olddog.co.uk> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=lufang@microsoft.com; x-originating-ip: [2001:4898:80e8:6::725] x-microsoft-exchange-diagnostics: 1; BY2PR0301MB0694; 5:8dlvzghK3l25NiwFMh0VOwhqUc/JnW1XWRUonKPw8f430thhBN5rBfSGTLAuCsOTiCVeNdFLsjl39Ovme4ggp7RulmdD3pUeY521t5ebvEfHS7qJgAS06P4BGbRNqfMHeqtZ3uIOpcuQ1AKLOdbW8Q==; 24:HhrP1O1uYtjUpgV3PA2kzMG0YlC5m3o6KQFYeJgDn2sAPBKPmSM3UpbvROSMNQif3JMjngBP5gsFYXnd7ASJPHhJw3MRC+q2j4MQPAGSqjA=; 20:OjIkh3bZUYTnMZ69fYNECA+4bTK6Cs6M9GDHpLeDK+KSkb0j4oD7u6xUpnPhYdOCNPPgXHMbbRs6Pem1DDrkyQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR0301MB0694; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(189930954265078); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(8121501046)(520078)(5005006)(3002001)(61426024)(61427024); SRVR:BY2PR0301MB0694; BCL:0; PCL:0; RULEID:; SRVR:BY2PR0301MB0694; x-forefront-prvs: 073515755F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(164054003)(199003)(189002)(13464003)(377454003)(10290500002)(40100003)(99286002)(5007970100001)(122556002)(8990500004)(575784001)(106356001)(5005710100001)(86362001)(189998001)(5003600100002)(107886002)(5002640100001)(86612001)(10090500001)(46102003)(5001960100002)(5008740100001)(105586002)(10400500002)(19580405001)(102836002)(54356999)(76176999)(64706001)(15975445007)(50986999)(33656002)(5004730100002)(74316001)(77096005)(87936001)(2900100001)(19580395003)(76576001)(101416001)(11100500001)(5890100001)(5001920100001)(81156007)(2501003)(5001770100001)(97736004)(92566002)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR0301MB0694; H:BY2PR0301MB0693.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Oct 2015 22:55:12.4869 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR0301MB0694 Archived-At: Subject: Re: [I2nsf] Draft agenda coming soon X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Oct 2015 22:55:25 -0000 The draft now is posted at https://www.ietf.org/id/draft-fang-i2nsf-inter-cloud-ddos-mitigation-api-00= .txt Thanks, Luyuan -----Original Message----- From: Luyuan Fang=20 Sent: Monday, October 19, 2015 11:54 PM To: 'adrian@olddog.co.uk' ; 'Linda Dunbar' ; i2nsf@ietf.org Subject: RE: [I2nsf] Draft agenda coming soon Hi Linda and Adrian, I'd like to request a 10 min slot to present draft-fang-i2nsf-inter-cloud-d= dos-mitigation-api. I attached our draft here. We encountered some system/connection glitch, th= e draft did not upload appropriately in time, we are still trying to fix th= e issue. At the meantime, we'd like to ask for folks in the WG to review the draft a= nd gather feedbacks. The draft is intended to define an Inter-Cloud DDoS Mitigation Abstract Lay= er and corresponding standardized APIs to enable the exchange of real time = automated information to enable DDoS mitigation across Cloud Service Provid= ers and Network Service Providers. As cloud provider, our Inter-cloud conn= ections with network providers are facing growing DDoS attacks. Unlike DDoS= mitigation within our own cloud networks, Inter-cloud attacks can often be= harder to detect and take longer to mitigate due to lack of full visibilit= y and automated tools when crossing the admin boundaries, and the impact to= these large inter-connection links can be substantial. Define and develop = standard common APIs to support coordinated mitigation on Inter-Cloud conne= ctions is urgently needed. We are still working to fill the specifications,= plan to upload a new version when submission reopens at IETF 94. Thanks, Luyuan -----Original Message----- From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Adrian Farrel Sent: Monday, October 19, 2015 10:05 AM To: i2nsf@ietf.org Subject: [I2nsf] Draft agenda coming soon Linda and I are just working on the last bits Adrian _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://na01.safelinks.protection.outlook.com/?url=3Dhttps%3a%2f%2fwww.ietf= .org%2fmailman%2flistinfo%2fi2nsf&data=3D01%7c01%7clufang%40microsoft.com%7= cfed5d393ff2242f7b17008d2d8a777cb%7c72f988bf86f141af91ab2d7cd011db47%7c1&sd= ata=3DSynb5QuiaiLgf4xsZyoSPK8ppF2fU3ysskbLn0lSIRo%3d From nobody Wed Oct 21 02:15:24 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 131EE1A0267 for ; Wed, 21 Oct 2015 02:15:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.312 X-Spam-Level: X-Spam-Status: No, score=-2.312 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZS4WNvw3nfZn for ; Wed, 21 Oct 2015 02:15:19 -0700 (PDT) Received: from xenon24.um.es (xenon24.um.es [155.54.212.164]) by ietfa.amsl.com (Postfix) with ESMTP id 9305D1A0264 for ; Wed, 21 Oct 2015 02:15:17 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by xenon24.um.es (Postfix) with ESMTP id CF922286D; Wed, 21 Oct 2015 11:15:13 +0200 (CEST) X-Virus-Scanned: by antispam in UMU at xenon24.um.es Received: from xenon24.um.es ([127.0.0.1]) by localhost (xenon24.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id aTw3W3sve4ed; Wed, 21 Oct 2015 11:15:13 +0200 (CEST) Received: from inf-205-216.inf.um.es (inf-205-216.inf.um.es [155.54.205.216]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: rafa) by xenon24.um.es (Postfix) with ESMTPSA id A7DDA288E; Wed, 21 Oct 2015 11:15:10 +0200 (CEST) From: Rafa Marin Lopez Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Wed, 21 Oct 2015 11:15:10 +0200 Message-Id: To: sdn@irtf.org, i2nsf@ietf.org Mime-Version: 1.0 (Mac OS X Mail 9.0 \(3094\)) X-Mailer: Apple Mail (2.3094) Archived-At: Cc: Gabriel Lopez , Alejandro Abad UM , Rafa Marin Lopez Subject: [I2nsf] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Oct 2015 09:15:23 -0000 Dear all: You may find a new update about Software-Defined Networking (SDN)-based = IPsec Flow Protection in this link: = https://tools.ietf.org/id/draft-abad-sdnrg-sdn-ipsec-flow-protection-01.tx= t We have added some minor modifications and a section to explain the = relationship with I2NSF work. Comments are really welcome. Best Regards. ------------------------------------------------------- Rafael Marin Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- From nobody Wed Oct 21 15:43:55 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A68781B3321 for ; Wed, 21 Oct 2015 15:43:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YR0_tx-pQY24 for ; Wed, 21 Oct 2015 15:43:52 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B814C1B3320 for ; Wed, 21 Oct 2015 15:43:50 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CCW13041; Wed, 21 Oct 2015 22:43:49 +0000 (GMT) Received: from DFWEML703-CHM.china.huawei.com (10.193.5.130) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 21 Oct 2015 23:43:47 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml703-chm ([10.193.5.130]) with mapi id 14.03.0235.001; Wed, 21 Oct 2015 15:43:41 -0700 From: Linda Dunbar To: Rafa Marin Lopez , "sdn@irtf.org" , "i2nsf@ietf.org" Thread-Topic: [I2nsf] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection Thread-Index: AQHRC+EPdOyopARHkkmGFGA4dOdSzZ52iqFw Date: Wed, 21 Oct 2015 22:43:40 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.236] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: Gabriel Lopez , Alejandro Abad UM Subject: Re: [I2nsf] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Oct 2015 22:43:54 -0000 Rafa,=20 Thank you very much for sharing the draft.=20 Can you elaborate what kind of IPSec policies that Apps can give to "SDN Co= ntroller"?=20 I am not an expert on IPSec, so pardon me if my question is not correct: i= f client needs "protected IPsec traffic", can them simply establish two par= allel IPSec tunnels?=20 What is your goal? Only to give use cases for IPSec policy? Or do you plan= to dive in one step further to define the semantics of the polices or rule= s for IPSec? =20 Thanks, Linda=20 -----Original Message----- From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Rafa Marin Lopez Sent: Wednesday, October 21, 2015 4:15 AM To: sdn@irtf.org; i2nsf@ietf.org Cc: Gabriel Lopez; Alejandro Abad UM; Rafa Marin Lopez Subject: [I2nsf] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection Dear all: You may find a new update about Software-Defined Networking (SDN)-based IPs= ec Flow Protection in this link: https://tools.ietf.org/id/draft-abad-sdnrg-sdn-ipsec-flow-protection-01.txt We have added some minor modifications and a section to explain the relatio= nship with I2NSF work. Comments are really welcome. Best Regards. ------------------------------------------------------- Rafael Marin Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer= Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://www.ietf.org/mailman/listinfo/i2nsf From nobody Thu Oct 22 01:20:26 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B20A31B2F49 for ; Thu, 22 Oct 2015 01:20:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xyfxlWPfWT53 for ; Thu, 22 Oct 2015 01:20:04 -0700 (PDT) Received: from xenon23.um.es (xenon23.um.es [155.54.212.163]) by ietfa.amsl.com (Postfix) with ESMTP id 113271B2F3B for ; Thu, 22 Oct 2015 01:20:04 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by xenon23.um.es (Postfix) with ESMTP id 66F97366D; Thu, 22 Oct 2015 10:20:02 +0200 (CEST) X-Virus-Scanned: by antispam in UMU at xenon23.um.es Received: from xenon23.um.es ([127.0.0.1]) by localhost (xenon23.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id xOfPJ+2OvEmf; Thu, 22 Oct 2015 10:20:02 +0200 (CEST) Received: from eduroam_um-7-128.inf.um.es (eduroam_um-7-128.inf.um.es [155.54.7.128]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: rafa) by xenon23.um.es (Postfix) with ESMTPSA id F14C16E0; Thu, 22 Oct 2015 10:19:58 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.0 \(3094\)) From: Rafa Marin Lopez In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> Date: Thu, 22 Oct 2015 10:19:57 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <89725C38-5C24-44B2-9957-BAD267993F92@um.es> References: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> To: Linda Dunbar X-Mailer: Apple Mail (2.3094) Archived-At: Cc: "i2nsf@ietf.org" , Gabriel Lopez , "sdn@irtf.org" , Alejandro Abad UM , Rafa Marin Lopez Subject: Re: [I2nsf] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 08:20:07 -0000 Dear Linda: First of all, thanks for commenting on our draft. > El 22 oct 2015, a las 0:43, Linda Dunbar = escribi=C3=B3: >=20 > Rafa,=20 >=20 > Thank you very much for sharing the draft.=20 >=20 > Can you elaborate what kind of IPSec policies that Apps can give to = "SDN Controller=E2=80=9D?=20 > I am not an expert on IPSec, so pardon me if my question is not = correct: if client needs "protected IPsec traffic", can them simply = establish two parallel IPSec tunnels?=20 Any question is good. So, thank you. Let me try to clarify. When you = want to establish an IPsec protected tunnel you have to configure = rules/policies to determine what kind of traffic you want to protect.=20 Imagine you have* : =20 Network A(172.16.1.0/24) =E2=80=94 GW_A = (192.168.1.100/24)-Internet-(192.168.2.100/24) GW_B - (172.16.2.0/24) = Network_B With ipsec-tools in Linux you define the following policies to protect = traffic between both networks with a tunnel. Administrators of both = networks have to configure this in both GW_A and GW_B : spdadd 172.16.1.0/24 172.16.2.0/24 any -P out ipsec esp/tunnel/192.168.1.100-192.168.2.100/require; spdadd 172.16.2.0/24 172.16.1.0/24 any -P in ipsec esp/tunnel/192.168.2.100-192.168.1.100/require; *See the detailed example in Fig. 5 in = http://www.ipsec-howto.org/x304.html Moreover it has to specify other parameters such as credentials to be = used to establish IKE SA, cryptographic algorithms etc=E2=80=A6 >=20 > What is your goal? Only to give use cases for IPSec policy? Our goal is to automatize the management of IPsec security associations = so that administrators do not have add those rules in each device. The = general idea stemmed from the following principle: To establish an IPsec security association you run first IKE to = negotiate the IPsec SA (control plane). Once it is established some = parameters are configured in the kernel of the network devices, so they = can process the IP packets with IPsec before forwarding (data plane). So = for us, there is a clear separation between these two planes. Additionally, please think that IPsec uses packet filtering (and = cryptography). In this sense we consider that a NSF can perform this = task. Thus, some interface as those to be defined in I2NSF may be = required. Btw, you can find a YANG model for ipsec in the following = link: https://tools.ietf.org/html/draft-tran-ipecme-yang-ipsec-00 > Or do you plan to dive in one step further to define the semantics of = the polices or rules for IPSec? =20 If I understand correctly your question I will say the semantics and = rules for IPsec are already there as shown in the example. Another thing = to consider is to define through an application a more general rule such = as =E2=80=9CI want to protect traffic against eavesdropping between = these two networks" that is finally translated in more specific IPsec = policies We hope this clarify your doubts. In any case, if you have any other = question do not hesitate to ask.=20 Best Regards. >=20 > Thanks, Linda=20 >=20 > -----Original Message----- > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Rafa Marin = Lopez > Sent: Wednesday, October 21, 2015 4:15 AM > To: sdn@irtf.org; i2nsf@ietf.org > Cc: Gabriel Lopez; Alejandro Abad UM; Rafa Marin Lopez > Subject: [I2nsf] New update of = draft-abad-sdnrg-sdn-ipsec-flow-protection >=20 > Dear all: >=20 > You may find a new update about Software-Defined Networking = (SDN)-based IPsec Flow Protection in this link: >=20 > = https://tools.ietf.org/id/draft-abad-sdnrg-sdn-ipsec-flow-protection-01.tx= t >=20 > We have added some minor modifications and a section to explain the = relationship with I2NSF work. >=20 > Comments are really welcome. >=20 > Best Regards. >=20 > ------------------------------------------------------- > Rafael Marin Lopez, PhD > Dept. Information and Communications Engineering (DIIC) Faculty of = Computer Science-University of Murcia > 30100 Murcia - Spain > Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es > ------------------------------------------------------- >=20 >=20 >=20 >=20 > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf ------------------------------------------------------- Rafael Marin Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- From nobody Thu Oct 22 01:31:59 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BC3F1A19F8 for ; Thu, 22 Oct 2015 01:31:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id byRWH7a9Puho for ; Thu, 22 Oct 2015 01:31:55 -0700 (PDT) Received: from xenon23.um.es (xenon23.um.es [155.54.212.163]) by ietfa.amsl.com (Postfix) with ESMTP id C20981A8945 for ; Thu, 22 Oct 2015 01:31:54 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by xenon23.um.es (Postfix) with ESMTP id 0FE2F36ED; Thu, 22 Oct 2015 10:31:54 +0200 (CEST) X-Virus-Scanned: by antispam in UMU at xenon23.um.es Received: from xenon23.um.es ([127.0.0.1]) by localhost (xenon23.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 24fOUt3UM9RK; Thu, 22 Oct 2015 10:31:53 +0200 (CEST) Received: from [192.168.1.3] (16.Red-83-37-40.dynamicIP.rima-tde.net [83.37.40.16]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: gabilm) by xenon23.um.es (Postfix) with ESMTPSA id 7DFE9366A; Thu, 22 Oct 2015 10:31:50 +0200 (CEST) Mime-Version: 1.0 (Mac OS X Mail 9.0 \(3094\)) Content-Type: multipart/signed; boundary="Apple-Mail=_90DCC732-93F9-47FD-93EC-1E1737200F88"; protocol="application/pgp-signature"; micalg=pgp-sha256 X-Pgp-Agent: GPGMail 2.6b2 From: Gabriel Lopez In-Reply-To: <89725C38-5C24-44B2-9957-BAD267993F92@um.es> Date: Thu, 22 Oct 2015 10:31:48 +0200 Message-Id: <160732AF-02A9-48FB-BF91-94412A1688C0@um.es> References: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> <89725C38-5C24-44B2-9957-BAD267993F92@um.es> To: Rafa Marin Lopez X-Mailer: Apple Mail (2.3094) Archived-At: Cc: "i2nsf@ietf.org" , "sdn@irtf.org" , Alejandro Abad UM , Linda Dunbar Subject: Re: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 08:31:58 -0000 --Apple-Mail=_90DCC732-93F9-47FD-93EC-1E1737200F88 Content-Type: multipart/alternative; boundary="Apple-Mail=_664D6299-A7F6-471E-BB19-9000CF52641F" --Apple-Mail=_664D6299-A7F6-471E-BB19-9000CF52641F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi, Thanks for the review. Please, note that the draft also include IKE policies. As described in Rafa=E2=80=99s response, IKE allows two peers to = dynamically negotiate the cryptography material for IPSec in a secure = way. An example of IKE policies could be: ike { proposal proposal-1 { authentication-method pre-shared-keys; dh-group group1; authentication-algorithm sha1; encryption-algorithm 3des-cbc; lifetime-seconds 1000; } proposal proposal-2 { authentication-method pre-shared-keys; dh-group group2; authentication-algorithm md5; encryption-algorithm des-cbc; lifetime-seconds 10000; } Best regards, Gabi. > El 22 oct 2015, a las 10:19, Rafa Marin Lopez escribi=C3=B3= : >=20 > Dear Linda: >=20 > First of all, thanks for commenting on our draft. >=20 >> El 22 oct 2015, a las 0:43, Linda Dunbar > escribi=C3=B3: >>=20 >> Rafa, >>=20 >> Thank you very much for sharing the draft. >>=20 >> Can you elaborate what kind of IPSec policies that Apps can give to = "SDN Controller=E2=80=9D? >> I am not an expert on IPSec, so pardon me if my question is not = correct: if client needs "protected IPsec traffic", can them simply = establish two parallel IPSec tunnels? >=20 > Any question is good. So, thank you. Let me try to clarify. When you = want to establish an IPsec protected tunnel you have to configure = rules/policies to determine what kind of traffic you want to protect. >=20 > Imagine you have* : >=20 > Network A(172.16.1.0/24) =E2=80=94 GW_A = (192.168.1.100/24)-Internet-(192.168.2.100/24) GW_B - (172.16.2.0/24) = Network_B >=20 > With ipsec-tools in Linux you define the following policies to protect = traffic between both networks with a tunnel. Administrators of both = networks have to configure this in both GW_A and GW_B : >=20 > spdadd 172.16.1.0/24 172.16.2.0/24 any -P out ipsec > esp/tunnel/192.168.1.100-192.168.2.100/require; >=20 > spdadd 172.16.2.0/24 172.16.1.0/24 any -P in ipsec > esp/tunnel/192.168.2.100-192.168.1.100/require; >=20 > *See the detailed example in Fig. 5 in = http://www.ipsec-howto.org/x304.html = >=20 > Moreover it has to specify other parameters such as credentials to be = used to establish IKE SA, cryptographic algorithms etc=E2=80=A6 >=20 >>=20 >> What is your goal? Only to give use cases for IPSec policy? >=20 > Our goal is to automatize the management of IPsec security = associations so that administrators do not have add those rules in each = device. The general idea stemmed from the following principle: >=20 > To establish an IPsec security association you run first IKE to = negotiate the IPsec SA (control plane). Once it is established some = parameters are configured in the kernel of the network devices, so they = can process the IP packets with IPsec before forwarding (data plane). So = for us, there is a clear separation between these two planes. >=20 > Additionally, please think that IPsec uses packet filtering (and = cryptography). In this sense we consider that a NSF can perform this = task. Thus, some interface as those to be defined in I2NSF may be = required. Btw, you can find a YANG model for ipsec in the following = link: >=20 > https://tools.ietf.org/html/draft-tran-ipecme-yang-ipsec-00 = >=20 >=20 >> Or do you plan to dive in one step further to define the semantics of = the polices or rules for IPSec? >=20 > If I understand correctly your question I will say the semantics and = rules for IPsec are already there as shown in the example. Another thing = to consider is to define through an application a more general rule such = as =E2=80=9CI want to protect traffic against eavesdropping between = these two networks" that is finally translated in more specific IPsec = policies >=20 > We hope this clarify your doubts. In any case, if you have any other = question do not hesitate to ask. >=20 > Best Regards. >>=20 >> Thanks, Linda >>=20 >> -----Original Message----- >> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Rafa Marin = Lopez >> Sent: Wednesday, October 21, 2015 4:15 AM >> To: sdn@irtf.org; i2nsf@ietf.org >> Cc: Gabriel Lopez; Alejandro Abad UM; Rafa Marin Lopez >> Subject: [I2nsf] New update of = draft-abad-sdnrg-sdn-ipsec-flow-protection >>=20 >> Dear all: >>=20 >> You may find a new update about Software-Defined Networking = (SDN)-based IPsec Flow Protection in this link: >>=20 >> = https://tools.ietf.org/id/draft-abad-sdnrg-sdn-ipsec-flow-protection-01.tx= t >>=20 >> We have added some minor modifications and a section to explain the = relationship with I2NSF work. >>=20 >> Comments are really welcome. >>=20 >> Best Regards. >>=20 >> ------------------------------------------------------- >> Rafael Marin Lopez, PhD >> Dept. Information and Communications Engineering (DIIC) Faculty of = Computer Science-University of Murcia >> 30100 Murcia - Spain >> Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es >> ------------------------------------------------------- >>=20 >>=20 >>=20 >>=20 >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf >=20 > ------------------------------------------------------- > Rafael Marin Lopez, PhD > Dept. Information and Communications Engineering (DIIC) > Faculty of Computer Science-University of Murcia > 30100 Murcia - Spain > Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es = > ------------------------------------------------------- >=20 >=20 >=20 >=20 > _______________________________________________ > sdn mailing list > sdn@irtf.org > https://www.irtf.org/mailman/listinfo/sdn = ----------------------------------------------------------- Gabriel L=C3=B3pez Mill=C3=A1n Departamento de Ingenier=C3=ADa de la Informaci=C3=B3n y las = Comunicaciones University of Murcia Spain Tel: +34 868888504 Fax: +34 868884151 email: gabilm@um.es --Apple-Mail=_664D6299-A7F6-471E-BB19-9000CF52641F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

Hi,

Thanks for the review.

Please, note that the draft also = include IKE policies.

As described in Rafa=E2=80=99s response, IKE allows two peers = to dynamically negotiate the cryptography material for IPSec in a secure = way.
An example of IKE policies could be:

ike {
proposal = proposal-1 {
authentication-method = pre-shared-keys;
dh-group group1;
= authentication-algorithm sha1;
= encryption-algorithm 3des-cbc;
= lifetime-seconds 1000;
}
proposal = proposal-2 {
authentication-method = pre-shared-keys;
dh-group group2;
= authentication-algorithm md5;
= encryption-algorithm des-cbc;
= lifetime-seconds 10000;
}

Best regards, Gabi.


El 22 oct 2015, a las 10:19, = Rafa Marin Lopez <rafa@um.es> escribi=C3=B3:

Dear Linda:

First of all, thanks for commenting on our = draft.

El 22 oct 2015, a las 0:43, = Linda Dunbar <linda.dunbar@huawei.com> escribi=C3=B3:

Rafa, 

Thank you very much for sharing the draft. 

Can you elaborate what kind of IPSec policies that Apps can = give to "SDN Controller=E2=80=9D? 
I am not an = expert on IPSec, so pardon me if my question is not correct:  if = client needs "protected IPsec traffic", can them simply establish two = parallel IPSec tunnels? 

Any question is good. So, thank you. Let me try = to clarify. When you want to establish an IPsec protected tunnel you = have to configure rules/policies to determine what kind of traffic you = want to protect. 

Imagine you have* :  

Network A(172.16.1.0/24) =E2=80=94 GW_A = (192.168.1.100/24)-Internet-(192.168.2.100/24) GW_B - (172.16.2.0/24) = Network_B

With ipsec-tools in Linux = you define the following policies to protect traffic between both = networks with a tunnel. Administrators of both networks have to = configure this in both GW_A and GW_B :

spdadd 172.16.1.0/24 172.16.2.0/24 any -P out = ipsec
          esp= /tunnel/192.168.1.100-192.168.2.100/require;

spdadd 172.16.2.0/24 172.16.1.0/24 any -P = in ipsec
          esp= /tunnel/192.168.2.100-192.168.1.100/require;

*See the detailed example in Fig. 5 = in http://www.ipsec-howto.org/x304.html

Moreover it has to specify other = parameters such as credentials to be used to establish IKE SA, = cryptographic algorithms etc=E2=80=A6


What is your goal? Only to give use cases for IPSec = policy?

Our goal is to automatize the management of = IPsec security associations so that administrators do not have add those = rules in each device. The general idea stemmed from the following = principle:

To establish an IPsec = security association you run first IKE to negotiate the IPsec SA = (control plane). Once it is established some parameters are configured = in the kernel of the network devices, so they can process the IP packets = with IPsec before forwarding (data plane). So for us, there is a clear = separation between these two planes.

Additionally, please think that IPsec uses = packet filtering (and cryptography). In this sense we consider that a = NSF can perform this task. Thus, some interface as those to be defined = in I2NSF may be required. Btw, you can find a YANG model for ipsec in = the following link:

https://tools.ietf.org/html/draft-tran-ipecme-yang-ipsec-00=


Or do you = plan to dive in one step further to define the semantics of the polices = or rules for IPSec?  

If I understand correctly = your question I will say the semantics and rules for IPsec are already = there as shown in the example. Another thing to consider is to define = through an application a more general rule such as =E2=80=9CI want to = protect traffic against eavesdropping between these two networks" that = is finally translated in more specific IPsec policies

We hope this clarify your doubts. In any = case, if you have any other question do not hesitate to ask. 

Best Regards.

Thanks, = Linda 
-----Original Message-----
From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Rafa Marin = Lopez
Sent: Wednesday, October 21, 2015 4:15 AM
To: sdn@irtf.org; i2nsf@ietf.org
Cc: Gabriel Lopez; Alejandro = Abad UM; Rafa Marin Lopez
Subject: [I2nsf] New update of = draft-abad-sdnrg-sdn-ipsec-flow-protection

Dear all:

You may find a new = update about Software-Defined Networking (SDN)-based IPsec Flow = Protection in this link:

https://tools.ietf.org/id/draft-abad-sdnrg-sdn-ipsec-flow-prote= ction-01.txt

We have added some minor = modifications and a section to explain the relationship with I2NSF = work.

Comments are really welcome.

Best Regards.

-------------------------------------------------------
Rafael Marin Lopez, PhD
Dept. Information and = Communications Engineering (DIIC) Faculty of Computer Science-University = of Murcia
30100 Murcia - Spain
Telf: = +34868888501 Fax: +34868884151 e-mail: rafa@um.es
-------------------------------------------------------




_______________________________________________
I2nsf mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf

-------------------------------------------------------<= br style=3D"font-family: Helvetica; font-size: 12px; font-style: normal; = font-variant: normal; font-weight: normal; letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px;" class=3D"">Rafael Marin Lopez, = PhD
Dept. Information and Communications Engineering = (DIIC)
Faculty of Computer Science-University of = Murcia
30100 Murcia - Spain
Telf: +34868888501 Fax: = +34868884151 e-mail: rafa@um.es
-------------------------------------------------------<= br style=3D"font-family: Helvetica; font-size: 12px; font-style: normal; = font-variant: normal; font-weight: normal; letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px;" class=3D"">



_______________________________________________
sdn mailing list
sdn@irtf.org
https://www.irtf.org/mailman/listinfo/sdn



-----------------------------------------------------------
Gabriel L=C3=B3pez Mill=C3=A1n
Departamento de = Ingenier=C3=ADa de la Informaci=C3=B3n y las Comunicaciones
University of Murcia
Spain
Tel: = +34 868888504
Fax: +34 868884151
email: gabilm@um.es




= --Apple-Mail=_664D6299-A7F6-471E-BB19-9000CF52641F-- --Apple-Mail=_90DCC732-93F9-47FD-93EC-1E1737200F88 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJWKJ70AAoJEMUYqoSNEZFT11UIAKOJAiQgCTSM/NHgOiEkEVtf DDDsLZGYvkBc8QY9nKPw7s4k5vllmP01sQ0kFr31g1AT0ZCBsmzS60GBAayvWeVm TWueyqHrSRbjNKeaTh7F1GmfnxeGs9QWRLcNBNxd63bNuwumTUisKZOJw8v+h3/w 9ePR+GHzXDMOT+F5J8eWJM/IVjkDIJuXAgGozv+jVjvlmRITE6iha8YzqpUH7mPY lj/ZxZ/eeiKC7aBSfwEeQ/HXzDXxdihTsG6pJl006VHowpzkXCddqgJS9k0A3nJr AgQrxryfmEz2y/U30eWQQFlVbXfQiirXmz0cGL7FKLIDHcsP+WecQVW+MclzU2w= =ihk4 -----END PGP SIGNATURE----- --Apple-Mail=_90DCC732-93F9-47FD-93EC-1E1737200F88-- From nobody Thu Oct 22 13:06:43 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6334A1B3F76 for ; Thu, 22 Oct 2015 13:06:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A3YwoCQXHsb9 for ; Thu, 22 Oct 2015 13:06:37 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C78161B3F74 for ; Thu, 22 Oct 2015 13:06:35 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BZE05754; Thu, 22 Oct 2015 20:06:33 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 22 Oct 2015 21:06:31 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Thu, 22 Oct 2015 13:06:25 -0700 From: Linda Dunbar To: Gabriel Lopez , Rafa Marin Lopez Thread-Topic: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection Thread-Index: AQHRDKQmzKrIC/qIy0W+y47uFrSOGJ537v3A Date: Thu, 22 Oct 2015 20:06:25 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D7208A@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> <89725C38-5C24-44B2-9957-BAD267993F92@um.es> <160732AF-02A9-48FB-BF91-94412A1688C0@um.es> In-Reply-To: <160732AF-02A9-48FB-BF91-94412A1688C0@um.es> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.236] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D7208Adfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "i2nsf@ietf.org" , "sdn@irtf.org" , Alejandro Abad UM Subject: Re: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 20:06:41 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D7208Adfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmFmYSBhbmQgR2FiaSwNCg0KVGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGV4cGxhbmF0aW9u LiBUaGF0IGlzIHZlcnkgaGVscGZ1bC4NCg0KQmFzZWQgb24geW91ciBleHBsYW5hdGlvbiwgIHRo ZSBDYXBhYmlsaXR5IExheWVyIGludGVyZmFjZSBmb3IgSVBTZWMgaGFzIGJlZW4gZGVmaW5lZCBi dXQgdGhlcmUgaXMgbmVlZCBmb3IgdGhlIFNlcnZpY2UgTGF5ZXIgcnVsZXMgZm9yIElQU2VjLiBU aGUgc2VydmljZSBsYXllciBJUFNlYyBydWxlcyBjYW4gYmUgYXBwbGllZCB0byBtYW55IHBhaXJz IG9mIElQc2VjIHR1bm5lbHMsIHNvIHRoYXQgYWRtaW5pc3RyYXRvcnMgZG9u4oCZdCBuZWVkIHRv IG1hbnVhbGx5IHNldHVwIGVhY2ggb25lLiBJcyBteSB1bmRlcnN0YW5kaW5nIGNvcnJlY3Q/DQoN CklzIGl0IHRydWUgdGhhdCB0aGUgSUtFIHBvbGljaWVzIGNhbiBiZSB1dGlsaXplZCBiZXR3ZWVu IFNlY3VyaXR5IENvbnRyb2xsZXIgYW5kIENsaWVudCBmb3IgdGhlIFNlcnZpY2UgTGF5ZXIgaW50 ZXJmYWNlPw0KDQpUaGFua3MsIExpbmRhDQoNCkZyb206IEkybnNmIFttYWlsdG86aTJuc2YtYm91 bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEdhYnJpZWwgTG9wZXoNClNlbnQ6IFRodXJzZGF5 LCBPY3RvYmVyIDIyLCAyMDE1IDM6MzIgQU0NClRvOiBSYWZhIE1hcmluIExvcGV6DQpDYzogaTJu c2ZAaWV0Zi5vcmc7IHNkbkBpcnRmLm9yZzsgQWxlamFuZHJvIEFiYWQgVU07IExpbmRhIER1bmJh cg0KU3ViamVjdDogUmU6IFtJMm5zZl0gW1Nkbl0gTmV3IHVwZGF0ZSBvZiBkcmFmdC1hYmFkLXNk bnJnLXNkbi1pcHNlYy1mbG93LXByb3RlY3Rpb24NCg0KDQpIaSwNCg0KVGhhbmtzIGZvciB0aGUg cmV2aWV3Lg0KDQpQbGVhc2UsIG5vdGUgdGhhdCB0aGUgZHJhZnQgYWxzbyBpbmNsdWRlIElLRSBw b2xpY2llcy4NCg0KQXMgZGVzY3JpYmVkIGluIFJhZmHigJlzIHJlc3BvbnNlLCBJS0UgYWxsb3dz IHR3byBwZWVycyB0byBkeW5hbWljYWxseSBuZWdvdGlhdGUgdGhlIGNyeXB0b2dyYXBoeSBtYXRl cmlhbCBmb3IgSVBTZWMgaW4gYSBzZWN1cmUgd2F5Lg0KQW4gZXhhbXBsZSBvZiBJS0UgcG9saWNp ZXMgY291bGQgYmU6DQoNCmlrZSB7DQogICAgICAgICAgICBwcm9wb3NhbCBwcm9wb3NhbC0xIHsN CiAgICAgICAgICAgICAgICAgICAgICAgIGF1dGhlbnRpY2F0aW9uLW1ldGhvZCBwcmUtc2hhcmVk LWtleXM7DQogICAgICAgICAgICAgICAgICAgICAgICBkaC1ncm91cCBncm91cDE7DQogICAgICAg ICAgICAgICAgICAgICAgICBhdXRoZW50aWNhdGlvbi1hbGdvcml0aG0gc2hhMTsNCiAgICAgICAg ICAgICAgICAgICAgICAgIGVuY3J5cHRpb24tYWxnb3JpdGhtIDNkZXMtY2JjOw0KICAgICAgICAg ICAgICAgICAgICAgICAgbGlmZXRpbWUtc2Vjb25kcyAxMDAwOw0KICAgICAgICAgICAgfQ0KICAg ICAgICAgICAgcHJvcG9zYWwgcHJvcG9zYWwtMiB7DQogICAgICAgICAgICAgICAgICAgICAgICBh dXRoZW50aWNhdGlvbi1tZXRob2QgcHJlLXNoYXJlZC1rZXlzOw0KICAgICAgICAgICAgICAgICAg ICAgICAgZGgtZ3JvdXAgZ3JvdXAyOw0KICAgICAgICAgICAgICAgICAgICAgICAgYXV0aGVudGlj YXRpb24tYWxnb3JpdGhtIG1kNTsNCiAgICAgICAgICAgICAgICAgICAgICAgIGVuY3J5cHRpb24t YWxnb3JpdGhtIGRlcy1jYmM7DQogICAgICAgICAgICAgICAgICAgICAgICBsaWZldGltZS1zZWNv bmRzIDEwMDAwOw0KfQ0KDQpCZXN0IHJlZ2FyZHMsIEdhYmkuDQoNCg0KRWwgMjIgb2N0IDIwMTUs IGEgbGFzIDEwOjE5LCBSYWZhIE1hcmluIExvcGV6IDxyYWZhQHVtLmVzPG1haWx0bzpyYWZhQHVt LmVzPj4gZXNjcmliacOzOg0KDQpEZWFyIExpbmRhOg0KDQpGaXJzdCBvZiBhbGwsIHRoYW5rcyBm b3IgY29tbWVudGluZyBvbiBvdXIgZHJhZnQuDQoNCg0KRWwgMjIgb2N0IDIwMTUsIGEgbGFzIDA6 NDMsIExpbmRhIER1bmJhciA8bGluZGEuZHVuYmFyQGh1YXdlaS5jb208bWFpbHRvOmxpbmRhLmR1 bmJhckBodWF3ZWkuY29tPj4gZXNjcmliacOzOg0KDQpSYWZhLA0KDQpUaGFuayB5b3UgdmVyeSBt dWNoIGZvciBzaGFyaW5nIHRoZSBkcmFmdC4NCg0KQ2FuIHlvdSBlbGFib3JhdGUgd2hhdCBraW5k IG9mIElQU2VjIHBvbGljaWVzIHRoYXQgQXBwcyBjYW4gZ2l2ZSB0byAiU0ROIENvbnRyb2xsZXLi gJ0/DQpJIGFtIG5vdCBhbiBleHBlcnQgb24gSVBTZWMsIHNvIHBhcmRvbiBtZSBpZiBteSBxdWVz dGlvbiBpcyBub3QgY29ycmVjdDogIGlmIGNsaWVudCBuZWVkcyAicHJvdGVjdGVkIElQc2VjIHRy YWZmaWMiLCBjYW4gdGhlbSBzaW1wbHkgZXN0YWJsaXNoIHR3byBwYXJhbGxlbCBJUFNlYyB0dW5u ZWxzPw0KDQpBbnkgcXVlc3Rpb24gaXMgZ29vZC4gU28sIHRoYW5rIHlvdS4gTGV0IG1lIHRyeSB0 byBjbGFyaWZ5LiBXaGVuIHlvdSB3YW50IHRvIGVzdGFibGlzaCBhbiBJUHNlYyBwcm90ZWN0ZWQg dHVubmVsIHlvdSBoYXZlIHRvIGNvbmZpZ3VyZSBydWxlcy9wb2xpY2llcyB0byBkZXRlcm1pbmUg d2hhdCBraW5kIG9mIHRyYWZmaWMgeW91IHdhbnQgdG8gcHJvdGVjdC4NCg0KSW1hZ2luZSB5b3Ug aGF2ZSogOg0KDQpOZXR3b3JrIEEoMTcyLjE2LjEuMC8yNCkg4oCUIEdXX0EgKDE5Mi4xNjguMS4x MDAvMjQpLUludGVybmV0LSgxOTIuMTY4LjIuMTAwLzI0KSBHV19CIC0gKDE3Mi4xNi4yLjAvMjQp IE5ldHdvcmtfQg0KDQpXaXRoIGlwc2VjLXRvb2xzIGluIExpbnV4IHlvdSBkZWZpbmUgdGhlIGZv bGxvd2luZyBwb2xpY2llcyB0byBwcm90ZWN0IHRyYWZmaWMgYmV0d2VlbiBib3RoIG5ldHdvcmtz IHdpdGggYSB0dW5uZWwuIEFkbWluaXN0cmF0b3JzIG9mIGJvdGggbmV0d29ya3MgaGF2ZSB0byBj b25maWd1cmUgdGhpcyBpbiBib3RoIEdXX0EgYW5kIEdXX0IgOg0KDQpzcGRhZGQgMTcyLjE2LjEu MC8yNCAxNzIuMTYuMi4wLzI0IGFueSAtUCBvdXQgaXBzZWMNCiAgICAgICAgICBlc3AvdHVubmVs LzE5Mi4xNjguMS4xMDAtMTkyLjE2OC4yLjEwMC9yZXF1aXJlOw0KDQpzcGRhZGQgMTcyLjE2LjIu MC8yNCAxNzIuMTYuMS4wLzI0IGFueSAtUCBpbiBpcHNlYw0KICAgICAgICAgIGVzcC90dW5uZWwv MTkyLjE2OC4yLjEwMC0xOTIuMTY4LjEuMTAwL3JlcXVpcmU7DQoNCipTZWUgdGhlIGRldGFpbGVk IGV4YW1wbGUgaW4gRmlnLiA1IGluIGh0dHA6Ly93d3cuaXBzZWMtaG93dG8ub3JnL3gzMDQuaHRt bA0KDQpNb3Jlb3ZlciBpdCBoYXMgdG8gc3BlY2lmeSBvdGhlciBwYXJhbWV0ZXJzIHN1Y2ggYXMg Y3JlZGVudGlhbHMgdG8gYmUgdXNlZCB0byBlc3RhYmxpc2ggSUtFIFNBLCBjcnlwdG9ncmFwaGlj IGFsZ29yaXRobXMgZXRj4oCmDQoNCg0KDQpXaGF0IGlzIHlvdXIgZ29hbD8gT25seSB0byBnaXZl IHVzZSBjYXNlcyBmb3IgSVBTZWMgcG9saWN5Pw0KDQpPdXIgZ29hbCBpcyB0byBhdXRvbWF0aXpl IHRoZSBtYW5hZ2VtZW50IG9mIElQc2VjIHNlY3VyaXR5IGFzc29jaWF0aW9ucyBzbyB0aGF0IGFk bWluaXN0cmF0b3JzIGRvIG5vdCBoYXZlIGFkZCB0aG9zZSBydWxlcyBpbiBlYWNoIGRldmljZS4g VGhlIGdlbmVyYWwgaWRlYSBzdGVtbWVkIGZyb20gdGhlIGZvbGxvd2luZyBwcmluY2lwbGU6DQoN ClRvIGVzdGFibGlzaCBhbiBJUHNlYyBzZWN1cml0eSBhc3NvY2lhdGlvbiB5b3UgcnVuIGZpcnN0 IElLRSB0byBuZWdvdGlhdGUgdGhlIElQc2VjIFNBIChjb250cm9sIHBsYW5lKS4gT25jZSBpdCBp cyBlc3RhYmxpc2hlZCBzb21lIHBhcmFtZXRlcnMgYXJlIGNvbmZpZ3VyZWQgaW4gdGhlIGtlcm5l bCBvZiB0aGUgbmV0d29yayBkZXZpY2VzLCBzbyB0aGV5IGNhbiBwcm9jZXNzIHRoZSBJUCBwYWNr ZXRzIHdpdGggSVBzZWMgYmVmb3JlIGZvcndhcmRpbmcgKGRhdGEgcGxhbmUpLiBTbyBmb3IgdXMs IHRoZXJlIGlzIGEgY2xlYXIgc2VwYXJhdGlvbiBiZXR3ZWVuIHRoZXNlIHR3byBwbGFuZXMuDQoN CkFkZGl0aW9uYWxseSwgcGxlYXNlIHRoaW5rIHRoYXQgSVBzZWMgdXNlcyBwYWNrZXQgZmlsdGVy aW5nIChhbmQgY3J5cHRvZ3JhcGh5KS4gSW4gdGhpcyBzZW5zZSB3ZSBjb25zaWRlciB0aGF0IGEg TlNGIGNhbiBwZXJmb3JtIHRoaXMgdGFzay4gVGh1cywgc29tZSBpbnRlcmZhY2UgYXMgdGhvc2Ug dG8gYmUgZGVmaW5lZCBpbiBJMk5TRiBtYXkgYmUgcmVxdWlyZWQuIEJ0dywgeW91IGNhbiBmaW5k IGEgWUFORyBtb2RlbCBmb3IgaXBzZWMgaW4gdGhlIGZvbGxvd2luZyBsaW5rOg0KDQpodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtdHJhbi1pcGVjbWUteWFuZy1pcHNlYy0wMA0KDQoN Cg0KT3IgZG8geW91IHBsYW4gdG8gZGl2ZSBpbiBvbmUgc3RlcCBmdXJ0aGVyIHRvIGRlZmluZSB0 aGUgc2VtYW50aWNzIG9mIHRoZSBwb2xpY2VzIG9yIHJ1bGVzIGZvciBJUFNlYz8NCg0KSWYgSSB1 bmRlcnN0YW5kIGNvcnJlY3RseSB5b3VyIHF1ZXN0aW9uIEkgd2lsbCBzYXkgdGhlIHNlbWFudGlj cyBhbmQgcnVsZXMgZm9yIElQc2VjIGFyZSBhbHJlYWR5IHRoZXJlIGFzIHNob3duIGluIHRoZSBl eGFtcGxlLiBBbm90aGVyIHRoaW5nIHRvIGNvbnNpZGVyIGlzIHRvIGRlZmluZSB0aHJvdWdoIGFu IGFwcGxpY2F0aW9uIGEgbW9yZSBnZW5lcmFsIHJ1bGUgc3VjaCBhcyDigJxJIHdhbnQgdG8gcHJv dGVjdCB0cmFmZmljIGFnYWluc3QgZWF2ZXNkcm9wcGluZyBiZXR3ZWVuIHRoZXNlIHR3byBuZXR3 b3JrcyIgdGhhdCBpcyBmaW5hbGx5IHRyYW5zbGF0ZWQgaW4gbW9yZSBzcGVjaWZpYyBJUHNlYyBw b2xpY2llcw0KDQpXZSBob3BlIHRoaXMgY2xhcmlmeSB5b3VyIGRvdWJ0cy4gSW4gYW55IGNhc2Us IGlmIHlvdSBoYXZlIGFueSBvdGhlciBxdWVzdGlvbiBkbyBub3QgaGVzaXRhdGUgdG8gYXNrLg0K DQpCZXN0IFJlZ2FyZHMuDQoNCg0KVGhhbmtzLCBMaW5kYQ0KDQotLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KRnJvbTogSTJuc2YgW21haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSBPbiBC ZWhhbGYgT2YgUmFmYSBNYXJpbiBMb3Bleg0KU2VudDogV2VkbmVzZGF5LCBPY3RvYmVyIDIxLCAy MDE1IDQ6MTUgQU0NClRvOiBzZG5AaXJ0Zi5vcmc8bWFpbHRvOnNkbkBpcnRmLm9yZz47IGkybnNm QGlldGYub3JnPG1haWx0bzppMm5zZkBpZXRmLm9yZz4NCkNjOiBHYWJyaWVsIExvcGV6OyBBbGVq YW5kcm8gQWJhZCBVTTsgUmFmYSBNYXJpbiBMb3Bleg0KU3ViamVjdDogW0kybnNmXSBOZXcgdXBk YXRlIG9mIGRyYWZ0LWFiYWQtc2Rucmctc2RuLWlwc2VjLWZsb3ctcHJvdGVjdGlvbg0KDQpEZWFy IGFsbDoNCg0KWW91IG1heSBmaW5kIGEgbmV3IHVwZGF0ZSBhYm91dCBTb2Z0d2FyZS1EZWZpbmVk IE5ldHdvcmtpbmcgKFNETiktYmFzZWQgSVBzZWMgRmxvdyBQcm90ZWN0aW9uIGluIHRoaXMgbGlu azoNCg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9pZC9kcmFmdC1hYmFkLXNkbnJnLXNkbi1pcHNl Yy1mbG93LXByb3RlY3Rpb24tMDEudHh0DQoNCldlIGhhdmUgYWRkZWQgc29tZSBtaW5vciBtb2Rp ZmljYXRpb25zIGFuZCBhIHNlY3Rpb24gdG8gZXhwbGFpbiB0aGUgcmVsYXRpb25zaGlwIHdpdGgg STJOU0Ygd29yay4NCg0KQ29tbWVudHMgYXJlIHJlYWxseSB3ZWxjb21lLg0KDQpCZXN0IFJlZ2Fy ZHMuDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0NClJhZmFlbCBNYXJpbiBMb3BleiwgUGhEDQpEZXB0LiBJbmZvcm1hdGlvbiBhbmQgQ29t bXVuaWNhdGlvbnMgRW5naW5lZXJpbmcgKERJSUMpIEZhY3VsdHkgb2YgQ29tcHV0ZXIgU2NpZW5j ZS1Vbml2ZXJzaXR5IG9mIE11cmNpYQ0KMzAxMDAgTXVyY2lhIC0gU3BhaW4NClRlbGY6ICszNDg2 ODg4ODUwMSBGYXg6ICszNDg2ODg4NDE1MSBlLW1haWw6IHJhZmFAdW0uZXM8bWFpbHRvOnJhZmFA dW0uZXM+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQoNCg0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQpJMm5zZiBtYWlsaW5nIGxpc3QNCkkybnNmQGlldGYub3JnPG1haWx0bzpJMm5zZkBp ZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YNCg0K LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0K UmFmYWVsIE1hcmluIExvcGV6LCBQaEQNCkRlcHQuIEluZm9ybWF0aW9uIGFuZCBDb21tdW5pY2F0 aW9ucyBFbmdpbmVlcmluZyAoRElJQykNCkZhY3VsdHkgb2YgQ29tcHV0ZXIgU2NpZW5jZS1Vbml2 ZXJzaXR5IG9mIE11cmNpYQ0KMzAxMDAgTXVyY2lhIC0gU3BhaW4NClRlbGY6ICszNDg2ODg4ODUw MSBGYXg6ICszNDg2ODg4NDE1MSBlLW1haWw6IHJhZmFAdW0uZXM8bWFpbHRvOnJhZmFAdW0uZXM+ DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQoNCg0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQpzZG4gbWFpbGluZyBsaXN0DQpzZG5AaXJ0Zi5vcmc8bWFpbHRvOnNkbkBpcnRmLm9yZz4NCmh0 dHBzOi8vd3d3LmlydGYub3JnL21haWxtYW4vbGlzdGluZm8vc2RuDQoNCg0KLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkdhYnJpZWwg TMOzcGV6IE1pbGzDoW4NCkRlcGFydGFtZW50byBkZSBJbmdlbmllcsOtYSBkZSBsYSBJbmZvcm1h Y2nDs24geSBsYXMgQ29tdW5pY2FjaW9uZXMNClVuaXZlcnNpdHkgb2YgTXVyY2lhDQpTcGFpbg0K VGVsOiArMzQgODY4ODg4NTA0DQpGYXg6ICszNCA4Njg4ODQxNTENCmVtYWlsOiBnYWJpbG1AdW0u ZXM8bWFpbHRvOmdhYmlsbUB1bS5lcz4NCg0KDQoNCg== --_000_4A95BA014132FF49AE685FAB4B9F17F657D7208Adfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6U2ltU3VuOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQg NSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglw YW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5 OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OiJcQFNpbVN1biI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9 DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2 Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250 LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0K YTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29s b3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5N c29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVy cGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29B Y2V0YXRlLCBkaXYuTXNvQWNldGF0ZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0 eWxlLWxpbms6IkJhbGxvb24gVGV4dCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6OC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNh bnMtc2VyaWYiO30NCnNwYW4uYXBwbGUtdGFiLXNwYW4NCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUt dGFiLXNwYW47fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0eWxlLW5hbWU6 YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uQmFsbG9vblRleHRDaGFyDQoJe21zby1zdHls ZS1uYW1lOiJCYWxsb29uIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1z by1zdHlsZS1saW5rOiJCYWxsb29uIFRleHQiOw0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5z LXNlcmlmIjt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1y ZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5 N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9u dC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47 DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7 cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4N CjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48 IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0 PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5 b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9 ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij5SYWZhIGFuZCBHYWJpLA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFuayB5b3UgdmVyeSBtdWNoIGZvciB0aGUg ZXhwbGFuYXRpb24uIFRoYXQgaXMgdmVyeSBoZWxwZnVsLg0KPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5CYXNlZCBvbiB5 b3VyIGV4cGxhbmF0aW9uLCAmbmJzcDt0aGUgQ2FwYWJpbGl0eSBMYXllciBpbnRlcmZhY2UgZm9y IElQU2VjIGhhcyBiZWVuIGRlZmluZWQgYnV0IHRoZXJlIGlzIG5lZWQgZm9yIHRoZSBTZXJ2aWNl IExheWVyIHJ1bGVzIGZvciBJUFNlYy4gVGhlIHNlcnZpY2UgbGF5ZXINCiBJUFNlYyBydWxlcyBj YW4gYmUgYXBwbGllZCB0byBtYW55IHBhaXJzIG9mIElQc2VjIHR1bm5lbHMsIHNvIHRoYXQgYWRt aW5pc3RyYXRvcnMgZG9u4oCZdCBuZWVkIHRvIG1hbnVhbGx5IHNldHVwIGVhY2ggb25lLiBJcyBt eSB1bmRlcnN0YW5kaW5nIGNvcnJlY3Q/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JcyBpdCB0cnVlIHRoYXQgdGhlIElL RSBwb2xpY2llcyBjYW4gYmUgdXRpbGl6ZWQgYmV0d2VlbiBTZWN1cml0eSBDb250cm9sbGVyIGFu ZCBDbGllbnQgZm9yIHRoZSBTZXJ2aWNlIExheWVyIGludGVyZmFjZT88bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlRoYW5r cywgTGluZGENCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpz b2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwv Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IEkybnNmIFttYWlsdG86aTJuc2YtYm91bmNl c0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+R2FicmllbCBMb3Blejxicj4NCjxiPlNl bnQ6PC9iPiBUaHVyc2RheSwgT2N0b2JlciAyMiwgMjAxNSAzOjMyIEFNPGJyPg0KPGI+VG86PC9i PiBSYWZhIE1hcmluIExvcGV6PGJyPg0KPGI+Q2M6PC9iPiBpMm5zZkBpZXRmLm9yZzsgc2RuQGly dGYub3JnOyBBbGVqYW5kcm8gQWJhZCBVTTsgTGluZGEgRHVuYmFyPGJyPg0KPGI+U3ViamVjdDo8 L2I+IFJlOiBbSTJuc2ZdIFtTZG5dIE5ldyB1cGRhdGUgb2YgZHJhZnQtYWJhZC1zZG5yZy1zZG4t aXBzZWMtZmxvdy1wcm90ZWN0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+SGksPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyBmb3IgdGhlIHJldmlldy48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UGxlYXNlLCBub3RlIHRo YXQgdGhlIGRyYWZ0IGFsc28gaW5jbHVkZSBJS0UgcG9saWNpZXMuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFzIGRlc2NyaWJlZCBpbiBSYWZh 4oCZcyByZXNwb25zZSwgSUtFIGFsbG93cyB0d28gcGVlcnMgdG8gZHluYW1pY2FsbHkgbmVnb3Rp YXRlIHRoZSBjcnlwdG9ncmFwaHkgbWF0ZXJpYWwgZm9yIElQU2VjIGluIGEgc2VjdXJlIHdheS48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFuIGV4 YW1wbGUgb2YgSUtFIHBvbGljaWVzIGNvdWxkIGJlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5pa2Ugezxicj4NCjxzcGFuIGNsYXNzPSJhcHBs ZS10YWItc3BhbiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwvc3Bhbj5wcm9wb3NhbCBwcm9wb3NhbC0xIHs8YnI+DQo8 c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3Nw YW4+YXV0aGVudGljYXRpb24tbWV0aG9kIHByZS1zaGFyZWQta2V5czs8YnI+DQo8c3BhbiBjbGFz cz0iYXBwbGUtdGFiLXNwYW4iPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3NwYW4+ZGgtZ3Jv dXAgZ3JvdXAxOzxicj4NCjxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3BhbiI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IDwvc3Bhbj5hdXRoZW50aWNhdGlvbi1hbGdvcml0aG0gc2hhMTs8YnI+DQo8 c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3Nw YW4+ZW5jcnlwdGlvbi1hbGdvcml0aG0gM2Rlcy1jYmM7PGJyPg0KPHNwYW4gY2xhc3M9ImFwcGxl LXRhYi1zcGFuIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9zcGFuPmxpZmV0aW1lLXNlY29u ZHMgMTAwMDs8YnI+DQo8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3Nw YW4+fTxicj4NCjxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3BhbiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwvc3Bhbj5w cm9wb3NhbCBwcm9wb3NhbC0yIHs8YnI+DQo8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3NwYW4+YXV0aGVudGljYXRpb24tbWV0aG9kIHByZS1z aGFyZWQta2V5czs8YnI+DQo8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyA8L3NwYW4+ZGgtZ3JvdXAgZ3JvdXAyOzxicj4NCjxzcGFuIGNsYXNzPSJh cHBsZS10YWItc3BhbiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwvc3Bhbj5hdXRoZW50aWNh dGlvbi1hbGdvcml0aG0gbWQ1Ozxicj4NCjxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3BhbiI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwvc3Bhbj5lbmNyeXB0aW9uLWFsZ29yaXRobSBkZXMtY2Jj Ozxicj4NCjxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3BhbiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IDwvc3Bhbj5saWZldGltZS1zZWNvbmRzIDEwMDAwOzxicj4NCn08bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QmVzdCByZWdhcmRzLCBHYWJp LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkVsIDIy IG9jdCAyMDE1LCBhIGxhcyAxMDoxOSwgUmFmYSBNYXJpbiBMb3BleiAmbHQ7PGEgaHJlZj0ibWFp bHRvOnJhZmFAdW0uZXMiPnJhZmFAdW0uZXM8L2E+Jmd0OyBlc2NyaWJpw7M6PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsi PkRlYXIgTGluZGE6PGJyPg0KPGJyPg0KRmlyc3Qgb2YgYWxsLCB0aGFua3MgZm9yIGNvbW1lbnRp bmcgb24gb3VyIGRyYWZ0Ljxicj4NCjxiciBzdHlsZT0ib3JwaGFuczogYXV0bzt0ZXh0LWFsaWdu OnN0YXJ0O3dpZG93czogYXV0bzstd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7d29yZC1z cGFjaW5nOjBweCI+DQo8YnI+DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hl bHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5FbCAyMiBvY3QgMjAxNSwgYSBs YXMgMDo0MywgTGluZGEgRHVuYmFyICZsdDs8YSBocmVmPSJtYWlsdG86bGluZGEuZHVuYmFyQGh1 YXdlaS5jb20iPmxpbmRhLmR1bmJhckBodWF3ZWkuY29tPC9hPiZndDsgZXNjcmliacOzOjxicj4N Cjxicj4NClJhZmEsPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjxicj4NCjxicj4NClRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHNoYXJpbmcgdGhlIGRyYWZ0 LjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8 YnI+DQpDYW4geW91IGVsYWJvcmF0ZSB3aGF0IGtpbmQgb2YgSVBTZWMgcG9saWNpZXMgdGhhdCBB cHBzIGNhbiBnaXZlIHRvICZxdW90O1NETiBDb250cm9sbGVy4oCdPzxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQpJIGFtIG5vdCBhbiBleHBlcnQg b24gSVBTZWMsIHNvIHBhcmRvbiBtZSBpZiBteSBxdWVzdGlvbiBpcyBub3QgY29ycmVjdDogJm5i c3A7aWYgY2xpZW50IG5lZWRzICZxdW90O3Byb3RlY3RlZCBJUHNlYyB0cmFmZmljJnF1b3Q7LCBj YW4gdGhlbSBzaW1wbHkgZXN0YWJsaXNoIHR3byBwYXJhbGxlbCBJUFNlYyB0dW5uZWxzPzxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij48YnI+DQpBbnkgcXVlc3Rpb24gaXMgZ29vZC4gU28sIHRoYW5rIHlvdS4gTGV0IG1lIHRy eSB0byBjbGFyaWZ5LiBXaGVuIHlvdSB3YW50IHRvIGVzdGFibGlzaCBhbiBJUHNlYyBwcm90ZWN0 ZWQgdHVubmVsIHlvdSBoYXZlIHRvIGNvbmZpZ3VyZSBydWxlcy9wb2xpY2llcyB0byBkZXRlcm1p bmUgd2hhdCBraW5kIG9mIHRyYWZmaWMgeW91IHdhbnQgdG8gcHJvdGVjdC48c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KPGJyPg0KSW1hZ2luZSB5 b3UgaGF2ZSogOiAmbmJzcDs8YnI+DQo8YnI+DQpOZXR3b3JrIEEoMTcyLjE2LjEuMC8yNCkg4oCU IEdXX0EgKDE5Mi4xNjguMS4xMDAvMjQpLUludGVybmV0LSgxOTIuMTY4LjIuMTAwLzI0KSBHV19C IC0gKDE3Mi4xNi4yLjAvMjQpIE5ldHdvcmtfQjxicj4NCjxicj4NCldpdGggaXBzZWMtdG9vbHMg aW4gTGludXggeW91IGRlZmluZSB0aGUgZm9sbG93aW5nIHBvbGljaWVzIHRvIHByb3RlY3QgdHJh ZmZpYyBiZXR3ZWVuIGJvdGggbmV0d29ya3Mgd2l0aCBhIHR1bm5lbC4gQWRtaW5pc3RyYXRvcnMg b2YgYm90aCBuZXR3b3JrcyBoYXZlIHRvIGNvbmZpZ3VyZSB0aGlzIGluIGJvdGggR1dfQSBhbmQg R1dfQiA6PGJyPg0KPGJyPg0Kc3BkYWRkIDE3Mi4xNi4xLjAvMjQgMTcyLjE2LjIuMC8yNCBhbnkg LVAgb3V0IGlwc2VjPGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ZXNwL3R1bm5lbC8xOTIuMTY4LjEuMTAwLTE5Mi4xNjguMi4x MDAvcmVxdWlyZTs8YnI+DQo8YnI+DQpzcGRhZGQgMTcyLjE2LjIuMC8yNCAxNzIuMTYuMS4wLzI0 IGFueSAtUCBpbiBpcHNlYzxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO2VzcC90dW5uZWwvMTkyLjE2OC4yLjEwMC0xOTIuMTY4 LjEuMTAwL3JlcXVpcmU7PGJyPg0KPGJyPg0KKlNlZSB0aGUgZGV0YWlsZWQgZXhhbXBsZSBpbiBG aWcuIDUgaW48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PC9zcGFuPjxhIGhyZWY9Imh0dHA6Ly93d3cuaXBzZWMtaG93dG8ub3JnL3gzMDQuaHRtbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+aHR0cDovL3d3dy5pcHNlYy1ob3d0by5vcmcveDMw NC5odG1sPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48YnI+DQo8YnI+ DQpNb3Jlb3ZlciBpdCBoYXMgdG8gc3BlY2lmeSBvdGhlciBwYXJhbWV0ZXJzIHN1Y2ggYXMgY3Jl ZGVudGlhbHMgdG8gYmUgdXNlZCB0byBlc3RhYmxpc2ggSUtFIFNBLCBjcnlwdG9ncmFwaGljIGFs Z29yaXRobXMgZXRj4oCmPGJyPg0KPGJyIHN0eWxlPSJvcnBoYW5zOiBhdXRvO3RleHQtYWxpZ246 c3RhcnQ7d2lkb3dzOiBhdXRvOy13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDt3b3JkLXNw YWNpbmc6MHB4Ij4NCjxicj4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxicj4NCldoYXQgaXMgeW91ciBn b2FsPyBPbmx5IHRvIGdpdmUgdXNlIGNhc2VzIGZvciBJUFNlYyBwb2xpY3k/PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3 LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+PGJyPg0KT3VyIGdvYWwgaXMgdG8gYXV0b21hdGl6ZSB0aGUgbWFuYWdlbWVudCBvZiBJ UHNlYyBzZWN1cml0eSBhc3NvY2lhdGlvbnMgc28gdGhhdCBhZG1pbmlzdHJhdG9ycyBkbyBub3Qg aGF2ZSBhZGQgdGhvc2UgcnVsZXMgaW4gZWFjaCBkZXZpY2UuIFRoZSBnZW5lcmFsIGlkZWEgc3Rl bW1lZCBmcm9tIHRoZSBmb2xsb3dpbmcgcHJpbmNpcGxlOjxicj4NCjxicj4NClRvIGVzdGFibGlz aCBhbiBJUHNlYyBzZWN1cml0eSBhc3NvY2lhdGlvbiB5b3UgcnVuIGZpcnN0IElLRSB0byBuZWdv dGlhdGUgdGhlIElQc2VjIFNBIChjb250cm9sIHBsYW5lKS4gT25jZSBpdCBpcyBlc3RhYmxpc2hl ZCBzb21lIHBhcmFtZXRlcnMgYXJlIGNvbmZpZ3VyZWQgaW4gdGhlIGtlcm5lbCBvZiB0aGUgbmV0 d29yayBkZXZpY2VzLCBzbyB0aGV5IGNhbiBwcm9jZXNzIHRoZSBJUCBwYWNrZXRzIHdpdGggSVBz ZWMgYmVmb3JlIGZvcndhcmRpbmcNCiAoZGF0YSBwbGFuZSkuIFNvIGZvciB1cywgdGhlcmUgaXMg YSBjbGVhciBzZXBhcmF0aW9uIGJldHdlZW4gdGhlc2UgdHdvIHBsYW5lcy48YnI+DQo8YnI+DQpB ZGRpdGlvbmFsbHksIHBsZWFzZSB0aGluayB0aGF0IElQc2VjIHVzZXMgcGFja2V0IGZpbHRlcmlu ZyAoYW5kIGNyeXB0b2dyYXBoeSkuIEluIHRoaXMgc2Vuc2Ugd2UgY29uc2lkZXIgdGhhdCBhIE5T RiBjYW4gcGVyZm9ybSB0aGlzIHRhc2suIFRodXMsIHNvbWUgaW50ZXJmYWNlIGFzIHRob3NlIHRv IGJlIGRlZmluZWQgaW4gSTJOU0YgbWF5IGJlIHJlcXVpcmVkLiBCdHcsIHlvdSBjYW4gZmluZCBh IFlBTkcgbW9kZWwgZm9yIGlwc2VjIGluIHRoZQ0KIGZvbGxvd2luZyBsaW5rOjxicj4NCjxicj4N Cjwvc3Bhbj48YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtdHJhbi1p cGVjbWUteWFuZy1pcHNlYy0wMCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZh bWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+aHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXRyYW4taXBlY21lLXlhbmctaXBzZWMtMDA8L3Nw YW4+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxicj4NCjxicj4NCjxiciBzdHls ZT0ib3JwaGFuczogYXV0bzt0ZXh0LWFsaWduOnN0YXJ0O3dpZG93czogYXV0bzstd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7d29yZC1zcGFjaW5nOjBweCI+DQo8YnI+DQo8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij5PciBkbyB5b3UgcGxhbiB0byBkaXZlIGluIG9uZSBzdGVwIGZ1cnRoZXIgdG8gZGVm aW5lIHRoZSBzZW1hbnRpY3Mgb2YgdGhlIHBvbGljZXMgb3IgcnVsZXMgZm9yIElQU2VjPyAmbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij48YnI+DQpJZiBJIHVuZGVyc3RhbmQgY29ycmVjdGx5IHlvdXIg cXVlc3Rpb24gSSB3aWxsIHNheSB0aGUgc2VtYW50aWNzIGFuZCBydWxlcyBmb3IgSVBzZWMgYXJl IGFscmVhZHkgdGhlcmUgYXMgc2hvd24gaW4gdGhlIGV4YW1wbGUuIEFub3RoZXIgdGhpbmcgdG8g Y29uc2lkZXIgaXMgdG8gZGVmaW5lIHRocm91Z2ggYW4gYXBwbGljYXRpb24gYSBtb3JlIGdlbmVy YWwgcnVsZSBzdWNoIGFzIOKAnEkgd2FudCB0byBwcm90ZWN0IHRyYWZmaWMgYWdhaW5zdCBlYXZl c2Ryb3BwaW5nDQogYmV0d2VlbiB0aGVzZSB0d28gbmV0d29ya3MmcXVvdDsgdGhhdCBpcyBmaW5h bGx5IHRyYW5zbGF0ZWQgaW4gbW9yZSBzcGVjaWZpYyBJUHNlYyBwb2xpY2llczxicj4NCjxicj4N CldlIGhvcGUgdGhpcyBjbGFyaWZ5IHlvdXIgZG91YnRzLiBJbiBhbnkgY2FzZSwgaWYgeW91IGhh dmUgYW55IG90aGVyIHF1ZXN0aW9uIGRvIG5vdCBoZXNpdGF0ZSB0byBhc2suPHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCjxicj4NCkJlc3QgUmVn YXJkcy48YnIgc3R5bGU9Im9ycGhhbnM6IGF1dG87dGV4dC1hbGlnbjpzdGFydDt3aWRvd3M6IGF1 dG87LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4O3dvcmQtc3BhY2luZzowcHgiPg0KPGJy Pg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+PGJyPg0KVGhhbmtzLCBMaW5kYTxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8YnI+DQotLS0tLU9yaWdpbmFs IE1lc3NhZ2UtLS0tLTxicj4NCkZyb206IEkybnNmIFs8YSBocmVmPSJtYWlsdG86aTJuc2YtYm91 bmNlc0BpZXRmLm9yZyI+bWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBPbiBCZWhh bGYgT2YgUmFmYSBNYXJpbiBMb3Blejxicj4NClNlbnQ6IFdlZG5lc2RheSwgT2N0b2JlciAyMSwg MjAxNSA0OjE1IEFNPGJyPg0KVG86IDxhIGhyZWY9Im1haWx0bzpzZG5AaXJ0Zi5vcmciPnNkbkBp cnRmLm9yZzwvYT47IDxhIGhyZWY9Im1haWx0bzppMm5zZkBpZXRmLm9yZyI+DQppMm5zZkBpZXRm Lm9yZzwvYT48YnI+DQpDYzogR2FicmllbCBMb3BlejsgQWxlamFuZHJvIEFiYWQgVU07IFJhZmEg TWFyaW4gTG9wZXo8YnI+DQpTdWJqZWN0OiBbSTJuc2ZdIE5ldyB1cGRhdGUgb2YgZHJhZnQtYWJh ZC1zZG5yZy1zZG4taXBzZWMtZmxvdy1wcm90ZWN0aW9uPGJyPg0KPGJyPg0KRGVhciBhbGw6PGJy Pg0KPGJyPg0KWW91IG1heSBmaW5kIGEgbmV3IHVwZGF0ZSBhYm91dCBTb2Z0d2FyZS1EZWZpbmVk IE5ldHdvcmtpbmcgKFNETiktYmFzZWQgSVBzZWMgRmxvdyBQcm90ZWN0aW9uIGluIHRoaXMgbGlu azo8YnI+DQo8YnI+DQo8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2lkL2RyYWZ0LWFi YWQtc2Rucmctc2RuLWlwc2VjLWZsb3ctcHJvdGVjdGlvbi0wMS50eHQiPmh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaWQvZHJhZnQtYWJhZC1zZG5yZy1zZG4taXBzZWMtZmxvdy1wcm90ZWN0aW9uLTAx LnR4dDwvYT48YnI+DQo8YnI+DQpXZSBoYXZlIGFkZGVkIHNvbWUgbWlub3IgbW9kaWZpY2F0aW9u cyBhbmQgYSBzZWN0aW9uIHRvIGV4cGxhaW4gdGhlIHJlbGF0aW9uc2hpcCB3aXRoIEkyTlNGIHdv cmsuPGJyPg0KPGJyPg0KQ29tbWVudHMgYXJlIHJlYWxseSB3ZWxjb21lLjxicj4NCjxicj4NCkJl c3QgUmVnYXJkcy48YnI+DQo8YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KUmFmYWVsIE1hcmluIExvcGV6LCBQaEQ8YnI+DQpE ZXB0LiBJbmZvcm1hdGlvbiBhbmQgQ29tbXVuaWNhdGlvbnMgRW5naW5lZXJpbmcgKERJSUMpIEZh Y3VsdHkgb2YgQ29tcHV0ZXIgU2NpZW5jZS1Vbml2ZXJzaXR5IG9mIE11cmNpYTxicj4NCjMwMTAw IE11cmNpYSAtIFNwYWluPGJyPg0KVGVsZjogJiM0MzszNDg2ODg4ODUwMSBGYXg6ICYjNDM7MzQ4 Njg4ODQxNTEgZS1tYWlsOiA8YSBocmVmPSJtYWlsdG86cmFmYUB1bS5lcyI+cmFmYUB1bS5lczwv YT48YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpJMm5zZiBtYWlsaW5nIGxpc3Q8YnI+DQo8 YSBocmVmPSJtYWlsdG86STJuc2ZAaWV0Zi5vcmciPkkybnNmQGlldGYub3JnPC9hPjxicj4NCjxh IGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YiPmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2Y8L2E+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBw dDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 OyI+PGJyPg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLTxicj4NClJhZmFlbCBNYXJpbiBMb3BleiwgUGhEPGJyPg0KRGVwdC4gSW5mb3JtYXRp b24gYW5kIENvbW11bmljYXRpb25zIEVuZ2luZWVyaW5nIChESUlDKTxicj4NCkZhY3VsdHkgb2Yg Q29tcHV0ZXIgU2NpZW5jZS1Vbml2ZXJzaXR5IG9mIE11cmNpYTxicj4NCjMwMTAwIE11cmNpYSAt IFNwYWluPGJyPg0KVGVsZjogJiM0MzszNDg2ODg4ODUwMSBGYXg6ICYjNDM7MzQ4Njg4ODQxNTEg ZS1tYWlsOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnJhZmFAdW0uZXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPnJhZmFAdW0uZXM8L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsi Pjxicj4NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS08YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQpfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCnNkbiBtYWlsaW5nIGxpc3Q8YnI+DQo8L3Nw YW4+PGEgaHJlZj0ibWFpbHRvOnNkbkBpcnRmLm9yZyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3 LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+c2RuQGlydGYub3JnPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij48YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaXJ0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9zZG4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPmh0dHBzOi8vd3d3LmlydGYu b3JnL21haWxtYW4vbGlzdGluZm8vc2RuPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZh bWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpi bGFjayI+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS08YnI+DQpHYWJyaWVsIEzDs3BleiBNaWxsw6FuPGJyPg0KRGVwYXJ0YW1lbnRvIGRl IEluZ2VuaWVyw61hIGRlIGxhIEluZm9ybWFjacOzbiB5IGxhcyBDb211bmljYWNpb25lczxicj4N ClVuaXZlcnNpdHkgb2YgTXVyY2lhPGJyPg0KU3BhaW48YnI+DQpUZWw6ICYjNDM7MzQgODY4ODg4 NTA0PGJyPg0KRmF4OiAmIzQzOzM0IDg2ODg4NDE1MTxicj4NCmVtYWlsOiZuYnNwOzxhIGhyZWY9 Im1haWx0bzpnYWJpbG1AdW0uZXMiPmdhYmlsbUB1bS5lczwvYT48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206 MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_4A95BA014132FF49AE685FAB4B9F17F657D7208Adfweml701chm_-- From nobody Thu Oct 22 14:54:39 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 232EB1ACE35 for ; Thu, 22 Oct 2015 14:54:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eG1XA84tNrov for ; Thu, 22 Oct 2015 14:54:34 -0700 (PDT) Received: from xenon23.um.es (xenon23.um.es [155.54.212.163]) by ietfa.amsl.com (Postfix) with ESMTP id 7CE3D1ACE31 for ; Thu, 22 Oct 2015 14:54:34 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by xenon23.um.es (Postfix) with ESMTP id 0A56270A2; Thu, 22 Oct 2015 23:54:33 +0200 (CEST) X-Virus-Scanned: by antispam in UMU at xenon23.um.es Received: from xenon23.um.es ([127.0.0.1]) by localhost (xenon23.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id BOxkUwGoSI4l; Thu, 22 Oct 2015 23:54:22 +0200 (CEST) Received: from [192.168.1.40] (67.Red-88-23-6.staticIP.rima-tde.net [88.23.6.67]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: rafa) by xenon23.um.es (Postfix) with ESMTPSA id 6C8817088; Thu, 22 Oct 2015 23:54:18 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.0 \(3094\)) From: Rafa Marin Lopez In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D7208A@dfweml701-chm> Date: Thu, 22 Oct 2015 23:54:17 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> <89725C38-5C24-44B2-9957-BAD267993F92@um.es> <160732AF-02A9-48FB-BF91-94412A1688C0@um.es> <4A95BA014132FF49AE685FAB4B9F17F657D7208A@dfweml701-chm> To: Linda Dunbar X-Mailer: Apple Mail (2.3094) Archived-At: Cc: "i2nsf@ietf.org" , Gabriel Lopez , "sdn@irtf.org" , Alejandro Abad UM , Rafa Marin Lopez Subject: Re: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 21:54:38 -0000 Hi Linda: > El 22 oct 2015, a las 22:06, Linda Dunbar = escribi=C3=B3: >=20 > Rafa and Gabi, > =20 > Thank you very much for the explanation. That is very helpful. > =20 > Based on your explanation, the Capability Layer interface for IPSec = has been defined If you are referring to the YANG model with IPsec then we have a good = step with draft-wang-ipsecme-ipsec-yang > but there is need for the Service Layer rules for IPSec. The service = layer IPSec rules can be applied to many pairs of IPsec tunnels, so that = administrators don=E2=80=99t need to manually setup each one. Is my = understanding correct? Right, that is also our understanding.=20 > =20 > Is it true that the IKE policies can be utilized between Security = Controller and Client for the Service Layer interface? Yes, that might be a possibility, though we understand a deeper analysis = is required. Best Regards. > =20 > Thanks, Linda > =20 > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Gabriel Lopez > Sent: Thursday, October 22, 2015 3:32 AM > To: Rafa Marin Lopez > Cc: i2nsf@ietf.org; sdn@irtf.org; Alejandro Abad UM; Linda Dunbar > Subject: Re: [I2nsf] [Sdn] New update of = draft-abad-sdnrg-sdn-ipsec-flow-protection > =20 > =20 > Hi, > =20 > Thanks for the review. > =20 > Please, note that the draft also include IKE policies. > =20 > As described in Rafa=E2=80=99s response, IKE allows two peers to = dynamically negotiate the cryptography material for IPSec in a secure = way. > An example of IKE policies could be: > =20 > ike { > proposal proposal-1 { > authentication-method pre-shared-keys; > dh-group group1; > authentication-algorithm sha1; > encryption-algorithm 3des-cbc; > lifetime-seconds 1000; > } > proposal proposal-2 { > authentication-method pre-shared-keys; > dh-group group2; > authentication-algorithm md5; > encryption-algorithm des-cbc; > lifetime-seconds 10000; > } > =20 > Best regards, Gabi. > =20 > =20 > El 22 oct 2015, a las 10:19, Rafa Marin Lopez escribi=C3=B3= : > =20 > Dear Linda: >=20 > First of all, thanks for commenting on our draft. >=20 >=20 > El 22 oct 2015, a las 0:43, Linda Dunbar = escribi=C3=B3: >=20 > Rafa,=20 >=20 > Thank you very much for sharing the draft.=20 >=20 > Can you elaborate what kind of IPSec policies that Apps can give to = "SDN Controller=E2=80=9D?=20 > I am not an expert on IPSec, so pardon me if my question is not = correct: if client needs "protected IPsec traffic", can them simply = establish two parallel IPSec tunnels?=20 >=20 > Any question is good. So, thank you. Let me try to clarify. When you = want to establish an IPsec protected tunnel you have to configure = rules/policies to determine what kind of traffic you want to protect.=20 >=20 > Imagine you have* : =20 >=20 > Network A(172.16.1.0/24) =E2=80=94 GW_A = (192.168.1.100/24)-Internet-(192.168.2.100/24) GW_B - (172.16.2.0/24) = Network_B >=20 > With ipsec-tools in Linux you define the following policies to protect = traffic between both networks with a tunnel. Administrators of both = networks have to configure this in both GW_A and GW_B : >=20 > spdadd 172.16.1.0/24 172.16.2.0/24 any -P out ipsec > esp/tunnel/192.168.1.100-192.168.2.100/require; >=20 > spdadd 172.16.2.0/24 172.16.1.0/24 any -P in ipsec > esp/tunnel/192.168.2.100-192.168.1.100/require; >=20 > *See the detailed example in Fig. 5 in = http://www.ipsec-howto.org/x304.html >=20 > Moreover it has to specify other parameters such as credentials to be = used to establish IKE SA, cryptographic algorithms etc=E2=80=A6 >=20 >=20 >=20 > What is your goal? Only to give use cases for IPSec policy? >=20 > Our goal is to automatize the management of IPsec security = associations so that administrators do not have add those rules in each = device. The general idea stemmed from the following principle: >=20 > To establish an IPsec security association you run first IKE to = negotiate the IPsec SA (control plane). Once it is established some = parameters are configured in the kernel of the network devices, so they = can process the IP packets with IPsec before forwarding (data plane). So = for us, there is a clear separation between these two planes. >=20 > Additionally, please think that IPsec uses packet filtering (and = cryptography). In this sense we consider that a NSF can perform this = task. Thus, some interface as those to be defined in I2NSF may be = required. Btw, you can find a YANG model for ipsec in the following = link: >=20 > https://tools.ietf.org/html/draft-tran-ipecme-yang-ipsec-00 >=20 >=20 >=20 > Or do you plan to dive in one step further to define the semantics of = the polices or rules for IPSec? =20 >=20 > If I understand correctly your question I will say the semantics and = rules for IPsec are already there as shown in the example. Another thing = to consider is to define through an application a more general rule such = as =E2=80=9CI want to protect traffic against eavesdropping between = these two networks" that is finally translated in more specific IPsec = policies >=20 > We hope this clarify your doubts. In any case, if you have any other = question do not hesitate to ask.=20 >=20 > Best Regards. >=20 >=20 > Thanks, Linda=20 >=20 > -----Original Message----- > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Rafa Marin = Lopez > Sent: Wednesday, October 21, 2015 4:15 AM > To: sdn@irtf.org; i2nsf@ietf.org > Cc: Gabriel Lopez; Alejandro Abad UM; Rafa Marin Lopez > Subject: [I2nsf] New update of = draft-abad-sdnrg-sdn-ipsec-flow-protection >=20 > Dear all: >=20 > You may find a new update about Software-Defined Networking = (SDN)-based IPsec Flow Protection in this link: >=20 > = https://tools.ietf.org/id/draft-abad-sdnrg-sdn-ipsec-flow-protection-01.tx= t >=20 > We have added some minor modifications and a section to explain the = relationship with I2NSF work. >=20 > Comments are really welcome. >=20 > Best Regards. >=20 > ------------------------------------------------------- > Rafael Marin Lopez, PhD > Dept. Information and Communications Engineering (DIIC) Faculty of = Computer Science-University of Murcia > 30100 Murcia - Spain > Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es > ------------------------------------------------------- >=20 >=20 >=20 >=20 > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf >=20 > ------------------------------------------------------- > Rafael Marin Lopez, PhD > Dept. Information and Communications Engineering (DIIC) > Faculty of Computer Science-University of Murcia > 30100 Murcia - Spain > Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es > ------------------------------------------------------- >=20 >=20 >=20 >=20 > _______________________________________________ > sdn mailing list > sdn@irtf.org > https://www.irtf.org/mailman/listinfo/sdn > =20 > =20 >=20 > ----------------------------------------------------------- > Gabriel L=C3=B3pez Mill=C3=A1n > Departamento de Ingenier=C3=ADa de la Informaci=C3=B3n y las = Comunicaciones > University of Murcia > Spain > Tel: +34 868888504 > Fax: +34 868884151 > email: gabilm@um.es ------------------------------------------------------- Rafael Marin Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- From nobody Thu Oct 22 19:20:32 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D61A1B30D7 for ; Thu, 22 Oct 2015 19:20:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.45 X-Spam-Level: X-Spam-Status: No, score=0.45 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7i_pw6LS9qMD for ; Thu, 22 Oct 2015 19:20:23 -0700 (PDT) Received: from out4133-18.mail.aliyun.com (out4133-18.mail.aliyun.com [42.120.133.18]) by ietfa.amsl.com (Postfix) with ESMTP id 621ED1B30D3 for ; Thu, 22 Oct 2015 19:20:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1445566821; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=r8WQyns2bnbJ+p0agSZb8yf1O0fNryBYJqAVcSUymlw=; b=JrIPMikr8SBGlgn9FWZOTZmSrDx0oIBQzcdudY5gbNOtXXxOukv4lZRq/rHUarstwE5F3iGTr/ap593VP92dMU8T6w0CWuWPauM4iQyG2Ye+u7AqwWYvBsZghuowp+WjqVwW3wyGIs9rcx7Oy7Oy2W8rSnhmhD9AaeaEDFNktN8= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R151e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=e02c03282; MF=dacheng.zdc@alibaba-inc.com; NM=1; PH=DS; RN=8; SR=0; Received: from 10.62.53.193(mailfrom:dacheng.zdc@alibaba-inc.com ip:182.92.253.23) by smtp.aliyun-inc.com(127.0.0.1); Fri, 23 Oct 2015 10:20:17 +0800 User-Agent: Microsoft-MacOutlook/14.5.7.151005 Date: Fri, 23 Oct 2015 10:20:14 +0800 From: "Dacheng Zhang" To: Rafa Marin Lopez , Linda Dunbar Message-ID: Thread-Topic: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection References: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> <89725C38-5C24-44B2-9957-BAD267993F92@um.es> <160732AF-02A9-48FB-BF91-94412A1688C0@um.es> <4A95BA014132FF49AE685FAB4B9F17F657D7208A@dfweml701-chm> In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Archived-At: Cc: Sam Hartman , "sdn@irtf.org" , Alejandro Abad UM , "i2nsf@ietf.org" , Gabriel Lopez , Mahesh Jethanandani Subject: Re: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2015 02:20:30 -0000 Hi,=20 Maybe this work is not really considered in the current agenda. But I think it is very interesting. Also, I am thinking whether the similar idea can be used to mange the policies of securing routing protocols. We used to specify a key table specification for different routing protocols. At that time, someone mentioned it could be a good idea to use controllers to deploy keys for routing protocols, so that we don=A1=AFt have to extend IKEv2 to negotiate them.=20 Thoughts? Cheers Dacheng =D4=DA 15-10-23 =C9=CF=CE=E75:54=A3=AC "I2nsf on behalf of Rafa Marin Lopez" =D0=B4=C8=EB: >Hi Linda: > >> El 22 oct 2015, a las 22:06, Linda Dunbar >>escribi=A8=AE: >>=20 >> Rafa and Gabi, >> =20 >> Thank you very much for the explanation. That is very helpful. >> =20 >> Based on your explanation, the Capability Layer interface for IPSec >>has been defined > >If you are referring to the YANG model with IPsec then we have a good >step with draft-wang-ipsecme-ipsec-yang > >> but there is need for the Service Layer rules for IPSec. The service >>layer IPSec rules can be applied to many pairs of IPsec tunnels, so that >>administrators don=A1=AFt need to manually setup each one. Is my >>understanding correct? > >Right, that is also our understanding. > >> =20 >> Is it true that the IKE policies can be utilized between Security >>Controller and Client for the Service Layer interface? > >Yes, that might be a possibility, though we understand a deeper analysis >is required. > >Best Regards. > >> =20 >> Thanks, Linda >> =20 >> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Gabriel Lopez >> Sent: Thursday, October 22, 2015 3:32 AM >> To: Rafa Marin Lopez >> Cc: i2nsf@ietf.org; sdn@irtf.org; Alejandro Abad UM; Linda Dunbar >> Subject: Re: [I2nsf] [Sdn] New update of >>draft-abad-sdnrg-sdn-ipsec-flow-protection >> =20 >> =20 >> Hi, >> =20 >> Thanks for the review. >> =20 >> Please, note that the draft also include IKE policies. >> =20 >> As described in Rafa=A1=AFs response, IKE allows two peers to dynamically >>negotiate the cryptography material for IPSec in a secure way. >> An example of IKE policies could be: >> =20 >> ike { >> proposal proposal-1 { >> authentication-method pre-shared-keys; >> dh-group group1; >> authentication-algorithm sha1; >> encryption-algorithm 3des-cbc; >> lifetime-seconds 1000; >> } >> proposal proposal-2 { >> authentication-method pre-shared-keys; >> dh-group group2; >> authentication-algorithm md5; >> encryption-algorithm des-cbc; >> lifetime-seconds 10000; >> } >> =20 >> Best regards, Gabi. >> =20 >> =20 >> El 22 oct 2015, a las 10:19, Rafa Marin Lopez escribi=A8=AE: >> =20 >> Dear Linda: >>=20 >> First of all, thanks for commenting on our draft. >>=20 >>=20 >> El 22 oct 2015, a las 0:43, Linda Dunbar >>escribi=A8=AE: >>=20 >> Rafa,=20 >>=20 >> Thank you very much for sharing the draft. >>=20 >> Can you elaborate what kind of IPSec policies that Apps can give to >>"SDN Controller=A1=B1? >> I am not an expert on IPSec, so pardon me if my question is not >>correct: if client needs "protected IPsec traffic", can them simply >>establish two parallel IPSec tunnels? >>=20 >> Any question is good. So, thank you. Let me try to clarify. When you >>want to establish an IPsec protected tunnel you have to configure >>rules/policies to determine what kind of traffic you want to protect. >>=20 >> Imagine you have* : >>=20 >> Network A(172.16.1.0/24) =A1=AA GW_A >>(192.168.1.100/24)-Internet-(192.168.2.100/24) GW_B - (172.16.2.0/24) >>Network_B >>=20 >> With ipsec-tools in Linux you define the following policies to protect >>traffic between both networks with a tunnel. Administrators of both >>networks have to configure this in both GW_A and GW_B : >>=20 >> spdadd 172.16.1.0/24 172.16.2.0/24 any -P out ipsec >> esp/tunnel/192.168.1.100-192.168.2.100/require; >>=20 >> spdadd 172.16.2.0/24 172.16.1.0/24 any -P in ipsec >> esp/tunnel/192.168.2.100-192.168.1.100/require; >>=20 >> *See the detailed example in Fig. 5 in >>http://www.ipsec-howto.org/x304.html >>=20 >> Moreover it has to specify other parameters such as credentials to be >>used to establish IKE SA, cryptographic algorithms etc=A1=AD >>=20 >>=20 >>=20 >> What is your goal? Only to give use cases for IPSec policy? >>=20 >> Our goal is to automatize the management of IPsec security associations >>so that administrators do not have add those rules in each device. The >>general idea stemmed from the following principle: >>=20 >> To establish an IPsec security association you run first IKE to >>negotiate the IPsec SA (control plane). Once it is established some >>parameters are configured in the kernel of the network devices, so they >>can process the IP packets with IPsec before forwarding (data plane). So >>for us, there is a clear separation between these two planes. >>=20 >> Additionally, please think that IPsec uses packet filtering (and >>cryptography). In this sense we consider that a NSF can perform this >>task. Thus, some interface as those to be defined in I2NSF may be >>required. Btw, you can find a YANG model for ipsec in the following link: >>=20 >> https://tools.ietf.org/html/draft-tran-ipecme-yang-ipsec-00 >>=20 >>=20 >>=20 >> Or do you plan to dive in one step further to define the semantics of >>the polices or rules for IPSec? >>=20 >> If I understand correctly your question I will say the semantics and >>rules for IPsec are already there as shown in the example. Another thing >>to consider is to define through an application a more general rule such >>as =A1=B0I want to protect traffic against eavesdropping between these two >>networks" that is finally translated in more specific IPsec policies >>=20 >> We hope this clarify your doubts. In any case, if you have any other >>question do not hesitate to ask. >>=20 >> Best Regards. >>=20 >>=20 >> Thanks, Linda=20 >>=20 >> -----Original Message----- >> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Rafa Marin >>Lopez >> Sent: Wednesday, October 21, 2015 4:15 AM >> To: sdn@irtf.org; i2nsf@ietf.org >> Cc: Gabriel Lopez; Alejandro Abad UM; Rafa Marin Lopez >> Subject: [I2nsf] New update of >>draft-abad-sdnrg-sdn-ipsec-flow-protection >>=20 >> Dear all: >>=20 >> You may find a new update about Software-Defined Networking (SDN)-based >>IPsec Flow Protection in this link: >>=20 >>=20 >>https://tools.ietf.org/id/draft-abad-sdnrg-sdn-ipsec-flow-protection-01.t >>xt >>=20 >> We have added some minor modifications and a section to explain the >>relationship with I2NSF work. >>=20 >> Comments are really welcome. >>=20 >> Best Regards. >>=20 >> ------------------------------------------------------- >> Rafael Marin Lopez, PhD >> Dept. Information and Communications Engineering (DIIC) Faculty of >>Computer Science-University of Murcia >> 30100 Murcia - Spain >> Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es >> ------------------------------------------------------- >>=20 >>=20 >>=20 >>=20 >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf >>=20 >> ------------------------------------------------------- >> Rafael Marin Lopez, PhD >> Dept. Information and Communications Engineering (DIIC) >> Faculty of Computer Science-University of Murcia >> 30100 Murcia - Spain >> Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es >> ------------------------------------------------------- >>=20 >>=20 >>=20 >>=20 >> _______________________________________________ >> sdn mailing list >> sdn@irtf.org >> https://www.irtf.org/mailman/listinfo/sdn >> =20 >> =20 >>=20 >> ----------------------------------------------------------- >> Gabriel L=A8=AEpez Mill=A8=A2n >> Departamento de Ingenier=A8=AAa de la Informaci=A8=AEn y las Comunicaciones >> University of Murcia >> Spain >> Tel: +34 868888504 >> Fax: +34 868884151 >> email: gabilm@um.es > >------------------------------------------------------- >Rafael Marin Lopez, PhD >Dept. Information and Communications Engineering (DIIC) >Faculty of Computer Science-University of Murcia >30100 Murcia - Spain >Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es >------------------------------------------------------- > > > > >_______________________________________________ >I2nsf mailing list >I2nsf@ietf.org >https://www.ietf.org/mailman/listinfo/i2nsf From nobody Fri Oct 23 02:58:08 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3645E1B33F6 for ; Fri, 23 Oct 2015 02:58:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.76 X-Spam-Level: X-Spam-Status: No, score=-1.76 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eLCprBguPFe1 for ; Fri, 23 Oct 2015 02:58:01 -0700 (PDT) Received: from xenon21.um.es (xenon21.um.es [155.54.212.161]) by ietfa.amsl.com (Postfix) with ESMTP id 16DE91B2F34 for ; Fri, 23 Oct 2015 02:58:01 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by xenon21.um.es (Postfix) with ESMTP id 0310A40521; Fri, 23 Oct 2015 11:58:00 +0200 (CEST) X-Virus-Scanned: by antispam in UMU at xenon21.um.es Received: from xenon21.um.es ([127.0.0.1]) by localhost (xenon21.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 4sWI0IUYCELV; Fri, 23 Oct 2015 11:57:59 +0200 (CEST) Received: from eduroam_um-7-160.inf.um.es (eduroam_um-7-160.inf.um.es [155.54.7.160]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: gabilm) by xenon21.um.es (Postfix) with ESMTPSA id CA7073FD54; Fri, 23 Oct 2015 11:57:53 +0200 (CEST) Mime-Version: 1.0 (Mac OS X Mail 9.0 \(3094\)) Content-Type: multipart/signed; boundary="Apple-Mail=_F67A2683-9731-4F49-99F1-D6BB0C65A83D"; protocol="application/pgp-signature"; micalg=pgp-sha256 X-Pgp-Agent: GPGMail 2.6b2 From: Gabriel Lopez In-Reply-To: Date: Fri, 23 Oct 2015 11:57:51 +0200 Message-Id: References: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> <89725C38-5C24-44B2-9957-BAD267993F92@um.es> <160732AF-02A9-48FB-BF91-94412A1688C0@um.es> <4A95BA014132FF49AE685FAB4B9F17F657D7208A@dfweml701-chm> To: Dacheng Zhang X-Mailer: Apple Mail (2.3094) Archived-At: Cc: Sam Hartman , "sdn@irtf.org" , Alejandro Abad UM , "i2nsf@ietf.org" , Linda Dunbar , Rafa Marin Lopez , Mahesh Jethanandani Subject: Re: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2015 09:58:06 -0000 --Apple-Mail=_F67A2683-9731-4F49-99F1-D6BB0C65A83D Content-Type: multipart/alternative; boundary="Apple-Mail=_7342DEE8-2477-451F-8B0A-0A018D495361" --Apple-Mail=_7342DEE8-2477-451F-8B0A-0A018D495361 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=gb2312 Hi Dacheng, > El 23 oct 2015, a las 4:20, Dacheng Zhang = escribi=A8=AE: >=20 > Hi, >=20 > Maybe this work is not really considered in the current agenda. But I > think it is very interesting. Also, I am thinking whether the similar = idea > can be used to mange the policies of securing routing protocols. I=A1=AFm not an expert on security routing protocols, but I think the = idea es basically the same: to provide key material to the peers = (router, ipsec peer, etc.). > We used > to specify a key table specification for different routing protocols. = At > that time, someone mentioned it could be a good idea to use = controllers to > deploy keys for routing protocols, so that we don=A1=AFt have to = extend IKEv2 > to negotiate them. >=20 > Thoughts? It would depend on how routers trust each other. In our example, an = IPSec peer could be provisioned with cryptographic keys from the = controller (in the case peers belong to the same domain) or they could = make use of IKE to dynamically negotiate these keys. Best regards, Gabi. >=20 > Cheers >=20 > Dacheng >=20 > =D4=DA 15-10-23 =C9=CF=CE=E75:54=A3=AC "I2nsf on behalf of Rafa Marin = Lopez" > =D0=B4=C8=EB: >=20 >> Hi Linda: >>=20 >>> El 22 oct 2015, a las 22:06, Linda Dunbar >>> escribi=A8=AE: >>>=20 >>> Rafa and Gabi, >>>=20 >>> Thank you very much for the explanation. That is very helpful. >>>=20 >>> Based on your explanation, the Capability Layer interface for IPSec >>> has been defined >>=20 >> If you are referring to the YANG model with IPsec then we have a good >> step with draft-wang-ipsecme-ipsec-yang >>=20 >>> but there is need for the Service Layer rules for IPSec. The service >>> layer IPSec rules can be applied to many pairs of IPsec tunnels, so = that >>> administrators don=A1=AFt need to manually setup each one. Is my >>> understanding correct? >>=20 >> Right, that is also our understanding. >>=20 >>>=20 >>> Is it true that the IKE policies can be utilized between Security >>> Controller and Client for the Service Layer interface? >>=20 >> Yes, that might be a possibility, though we understand a deeper = analysis >> is required. >>=20 >> Best Regards. >>=20 >>>=20 >>> Thanks, Linda >>>=20 >>> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Gabriel = Lopez >>> Sent: Thursday, October 22, 2015 3:32 AM >>> To: Rafa Marin Lopez >>> Cc: i2nsf@ietf.org; sdn@irtf.org; Alejandro Abad UM; Linda Dunbar >>> Subject: Re: [I2nsf] [Sdn] New update of >>> draft-abad-sdnrg-sdn-ipsec-flow-protection >>>=20 >>>=20 >>> Hi, >>>=20 >>> Thanks for the review. >>>=20 >>> Please, note that the draft also include IKE policies. >>>=20 >>> As described in Rafa=A1=AFs response, IKE allows two peers to = dynamically >>> negotiate the cryptography material for IPSec in a secure way. >>> An example of IKE policies could be: >>>=20 >>> ike { >>> proposal proposal-1 { >>> authentication-method pre-shared-keys; >>> dh-group group1; >>> authentication-algorithm sha1; >>> encryption-algorithm 3des-cbc; >>> lifetime-seconds 1000; >>> } >>> proposal proposal-2 { >>> authentication-method pre-shared-keys; >>> dh-group group2; >>> authentication-algorithm md5; >>> encryption-algorithm des-cbc; >>> lifetime-seconds 10000; >>> } >>>=20 >>> Best regards, Gabi. >>>=20 >>>=20 >>> El 22 oct 2015, a las 10:19, Rafa Marin Lopez = escribi=A8=AE: >>>=20 >>> Dear Linda: >>>=20 >>> First of all, thanks for commenting on our draft. >>>=20 >>>=20 >>> El 22 oct 2015, a las 0:43, Linda Dunbar >>> escribi=A8=AE: >>>=20 >>> Rafa, >>>=20 >>> Thank you very much for sharing the draft. >>>=20 >>> Can you elaborate what kind of IPSec policies that Apps can give to >>> "SDN Controller=A1=B1? >>> I am not an expert on IPSec, so pardon me if my question is not >>> correct: if client needs "protected IPsec traffic", can them simply >>> establish two parallel IPSec tunnels? >>>=20 >>> Any question is good. So, thank you. Let me try to clarify. When you >>> want to establish an IPsec protected tunnel you have to configure >>> rules/policies to determine what kind of traffic you want to = protect. >>>=20 >>> Imagine you have* : >>>=20 >>> Network A(172.16.1.0/24) =A1=AA GW_A >>> (192.168.1.100/24)-Internet-(192.168.2.100/24) GW_B - = (172.16.2.0/24) >>> Network_B >>>=20 >>> With ipsec-tools in Linux you define the following policies to = protect >>> traffic between both networks with a tunnel. Administrators of both >>> networks have to configure this in both GW_A and GW_B : >>>=20 >>> spdadd 172.16.1.0/24 172.16.2.0/24 any -P out ipsec >>> esp/tunnel/192.168.1.100-192.168.2.100/require; >>>=20 >>> spdadd 172.16.2.0/24 172.16.1.0/24 any -P in ipsec >>> esp/tunnel/192.168.2.100-192.168.1.100/require; >>>=20 >>> *See the detailed example in Fig. 5 in >>> http://www.ipsec-howto.org/x304.html >>>=20 >>> Moreover it has to specify other parameters such as credentials to = be >>> used to establish IKE SA, cryptographic algorithms etc=A1=AD >>>=20 >>>=20 >>>=20 >>> What is your goal? Only to give use cases for IPSec policy? >>>=20 >>> Our goal is to automatize the management of IPsec security = associations >>> so that administrators do not have add those rules in each device. = The >>> general idea stemmed from the following principle: >>>=20 >>> To establish an IPsec security association you run first IKE to >>> negotiate the IPsec SA (control plane). Once it is established some >>> parameters are configured in the kernel of the network devices, so = they >>> can process the IP packets with IPsec before forwarding (data = plane). So >>> for us, there is a clear separation between these two planes. >>>=20 >>> Additionally, please think that IPsec uses packet filtering (and >>> cryptography). In this sense we consider that a NSF can perform this >>> task. Thus, some interface as those to be defined in I2NSF may be >>> required. Btw, you can find a YANG model for ipsec in the following = link: >>>=20 >>> https://tools.ietf.org/html/draft-tran-ipecme-yang-ipsec-00 >>>=20 >>>=20 >>>=20 >>> Or do you plan to dive in one step further to define the semantics = of >>> the polices or rules for IPSec? >>>=20 >>> If I understand correctly your question I will say the semantics and >>> rules for IPsec are already there as shown in the example. Another = thing >>> to consider is to define through an application a more general rule = such >>> as =A1=B0I want to protect traffic against eavesdropping between = these two >>> networks" that is finally translated in more specific IPsec policies >>>=20 >>> We hope this clarify your doubts. In any case, if you have any other >>> question do not hesitate to ask. >>>=20 >>> Best Regards. >>>=20 >>>=20 >>> Thanks, Linda >>>=20 >>> -----Original Message----- >>> From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Rafa Marin >>> Lopez >>> Sent: Wednesday, October 21, 2015 4:15 AM >>> To: sdn@irtf.org; i2nsf@ietf.org >>> Cc: Gabriel Lopez; Alejandro Abad UM; Rafa Marin Lopez >>> Subject: [I2nsf] New update of >>> draft-abad-sdnrg-sdn-ipsec-flow-protection >>>=20 >>> Dear all: >>>=20 >>> You may find a new update about Software-Defined Networking = (SDN)-based >>> IPsec Flow Protection in this link: >>>=20 >>>=20 >>> = https://tools.ietf.org/id/draft-abad-sdnrg-sdn-ipsec-flow-protection-01.t >>> xt >>>=20 >>> We have added some minor modifications and a section to explain the >>> relationship with I2NSF work. >>>=20 >>> Comments are really welcome. >>>=20 >>> Best Regards. >>>=20 >>> ------------------------------------------------------- >>> Rafael Marin Lopez, PhD >>> Dept. Information and Communications Engineering (DIIC) Faculty of >>> Computer Science-University of Murcia >>> 30100 Murcia - Spain >>> Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es >>> ------------------------------------------------------- >>>=20 >>>=20 >>>=20 >>>=20 >>> _______________________________________________ >>> I2nsf mailing list >>> I2nsf@ietf.org >>> https://www.ietf.org/mailman/listinfo/i2nsf >>>=20 >>> ------------------------------------------------------- >>> Rafael Marin Lopez, PhD >>> Dept. Information and Communications Engineering (DIIC) >>> Faculty of Computer Science-University of Murcia >>> 30100 Murcia - Spain >>> Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es >>> ------------------------------------------------------- >>>=20 >>>=20 >>>=20 >>>=20 >>> _______________________________________________ >>> sdn mailing list >>> sdn@irtf.org >>> https://www.irtf.org/mailman/listinfo/sdn >>>=20 >>>=20 >>>=20 >>> ----------------------------------------------------------- >>> Gabriel L=A8=AEpez Mill=A8=A2n >>> Departamento de Ingenier=A8=AAa de la Informaci=A8=AEn y las = Comunicaciones >>> University of Murcia >>> Spain >>> Tel: +34 868888504 >>> Fax: +34 868884151 >>> email: gabilm@um.es >>=20 >> ------------------------------------------------------- >> Rafael Marin Lopez, PhD >> Dept. Information and Communications Engineering (DIIC) >> Faculty of Computer Science-University of Murcia >> 30100 Murcia - Spain >> Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es >> ------------------------------------------------------- >>=20 >>=20 >>=20 >>=20 >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf >=20 >=20 ----------------------------------------------------------- Gabriel L=A8=AEpez Mill=A8=A2n Departamento de Ingenier=A8=AAa de la Informaci=A8=AEn y las = Comunicaciones University of Murcia Spain Tel: +34 868888504 Fax: +34 868884151 email: gabilm@um.es --Apple-Mail=_7342DEE8-2477-451F-8B0A-0A018D495361 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=gb2312
Hi Dacheng,


El 23 oct 2015, a las 4:20, Dacheng Zhang = <dacheng.zdc@alibaba-inc.com> escribi=A8=AE:

Hi, =

Maybe this work is not really considered = in the current agenda. But I
think it is very interesting. = Also, I am thinking whether the similar idea
can be used = to mange the policies of securing routing protocols. =

I=A1=AFm not an = expert on security routing protocols, but I think the idea es basically = the same: to provide key material to the peers (router,  ipsec = peer, etc.). 

We used
to = specify a key table specification for different routing protocols. At
that time, someone mentioned it could be a good idea to use = controllers to
deploy keys for routing protocols, so that = we don=A1=AFt have to extend IKEv2
to negotiate them.



Thoughts?

It= would depend on how routers trust each other. In our example, an IPSec = peer could be provisioned with cryptographic keys from the controller = (in the case peers belong to the same domain) or they could make use of = IKE to dynamically negotiate these keys.

Best regards, Gabi.


Cheers

Dacheng

=D4=DA 15-10-23 =C9=CF=CE=E75:54=A3=AC "I2nsf = on behalf of Rafa Marin Lopez"
<i2nsf-bounces@ietf.org on behalf of rafa@um.es> =D0=B4=C8=EB:

Hi = Linda:

El 22 oct 2015, a las 22:06, Linda Dunbar <linda.dunbar@huawei.com>
escribi=A8=AE:
Rafa and Gabi,

Thank you very much for the explanation. That is very = helpful.

Based on your explanation, =  the Capability Layer interface for IPSec
has been = defined

If you are referring = to the YANG model with IPsec then we have a good
step with = draft-wang-ipsecme-ipsec-yang

but there is need for the Service Layer rules = for IPSec. The service
layer IPSec rules can be applied to = many pairs of IPsec tunnels, so that
administrators don=A1=AF= t need to manually setup each one. Is my
understanding = correct?

Right, that is also = our understanding.


Is it true that the IKE policies can be = utilized between Security
Controller and Client for the = Service Layer interface?

Yes, = that might be a possibility, though we understand a deeper analysis
is required.

Best Regards.


Thanks, Linda

From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Gabriel = Lopez
Sent: Thursday, October 22, 2015 3:32 AM
To: Rafa Marin Lopez
Cc: i2nsf@ietf.org; sdn@irtf.org; Alejandro Abad = UM; Linda Dunbar
Subject: Re: [I2nsf] [Sdn] New update = of
draft-abad-sdnrg-sdn-ipsec-flow-protection


Hi,

Thanks for the review.

Please, = note that the draft also include IKE policies.

As described in Rafa=A1=AFs response, IKE allows two peers to = dynamically
negotiate the cryptography material for IPSec = in a secure way.
An example of IKE policies could be:

ike {
=            proposal= proposal-1 {
=             &n= bsp;          authentica= tion-method pre-shared-keys;
=             &n= bsp;          dh-group = group1;
=             &n= bsp;          authentica= tion-algorithm sha1;
=             &n= bsp;          encryption= -algorithm 3des-cbc;
=             &n= bsp;          lifetime-s= econds 1000;
=            }
=            proposal= proposal-2 {
=             &n= bsp;          authentica= tion-method pre-shared-keys;
=             &n= bsp;          dh-group = group2;
=             &n= bsp;          authentica= tion-algorithm md5;
=             &n= bsp;          encryption= -algorithm des-cbc;
=             &n= bsp;          lifetime-s= econds 10000;
}

Best regards, = Gabi.


El 22 oct 2015, a las = 10:19, Rafa Marin Lopez <rafa@um.es> escribi=A8=AE:

Dear Linda:

First of all, thanks = for commenting on our draft.


El 22 oct 2015, a las 0:43, Linda Dunbar <linda.dunbar@huawei.com>
escribi=A8=AE:
Rafa,

Thank you = very much for sharing the draft.

Can you = elaborate what kind of IPSec policies that Apps can give to
"SDN Controller=A1=B1?
I am not an expert on = IPSec, so pardon me if my question is not
correct: =  if client needs "protected IPsec traffic", can them simply
establish two parallel IPSec tunnels?

Any question is good. So, thank you. Let me try to clarify. = When you
want to establish an IPsec protected tunnel you = have to configure
rules/policies to determine what kind of = traffic you want to protect.

Imagine you = have* :

Network A(172.16.1.0/24) =A1=AA = GW_A
(192.168.1.100/24)-Internet-(192.168.2.100/24) GW_B - = (172.16.2.0/24)
Network_B

With = ipsec-tools in Linux you define the following policies to protect
traffic between both networks with a tunnel. Administrators = of both
networks have to configure this in both GW_A and = GW_B :

spdadd 172.16.1.0/24 172.16.2.0/24 = any -P out ipsec
=          esp/tunnel/192.168.1= .100-192.168.2.100/require;

spdadd = 172.16.2.0/24 172.16.1.0/24 any -P in ipsec
=          esp/tunnel/192.168.2= .100-192.168.1.100/require;

*See the = detailed example in Fig. 5 in
http://www.ipsec-howto.org/x304.html

Moreover it has to specify other parameters such as = credentials to be
used to establish IKE SA, cryptographic = algorithms etc=A1=AD



What is your goal? Only to give use cases for IPSec = policy?

Our goal is to automatize the = management of IPsec security associations
so that = administrators do not have add those rules in each device. The
general idea stemmed from the following principle:

To establish an IPsec security association you = run first IKE to
negotiate the IPsec SA (control plane). = Once it is established some
parameters are configured in = the kernel of the network devices, so they
can process the = IP packets with IPsec before forwarding (data plane). So
for= us, there is a clear separation between these two planes.

Additionally, please think that IPsec uses = packet filtering (and
cryptography). In this sense we = consider that a NSF can perform this
task. Thus, some = interface as those to be defined in I2NSF may be
required. = Btw, you can find a YANG model for ipsec in the following link:

https://tools.ietf.org/html/draft-tran-ipecme-yang-ipsec-00



Or do you plan = to dive in one step further to define the semantics of
the = polices or rules for IPSec?

If I understand = correctly your question I will say the semantics and
rules = for IPsec are already there as shown in the example. Another thing
to consider is to define through an application a more = general rule such
as =A1=B0I want to protect traffic = against eavesdropping between these two
networks" that is = finally translated in more specific IPsec policies

We hope this clarify your doubts. In any case, if you have = any other
question do not hesitate to ask.
Best Regards.


Thanks, Linda

-----Original = Message-----
From: I2nsf [mailto:i2nsf-bounces@ietf.org] = On Behalf Of Rafa Marin
Lopez
Sent: = Wednesday, October 21, 2015 4:15 AM
To: sdn@irtf.org; = i2nsf@ietf.org
Cc: Gabriel Lopez; Alejandro Abad UM; Rafa = Marin Lopez
Subject: [I2nsf] New update of
draft-abad-sdnrg-sdn-ipsec-flow-protection

Dear all:

You may find a new = update about Software-Defined Networking (SDN)-based
IPsec = Flow Protection in this link:


https://tools.ietf.org/id/draft-abad-sdnrg-sdn-ipsec-flow-prote= ction-01.t
xt

We have added = some minor modifications and a section to explain the
relationship with I2NSF work.

Comments are really welcome.

Best = Regards.

-------------------------------------------------------
Rafael Marin Lopez, PhD
Dept. Information and = Communications Engineering (DIIC) Faculty of
Computer = Science-University of Murcia
30100 Murcia - Spain
Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es
-------------------------------------------------------




_______________________________________________
I2nsf mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf

-------------------------------------------------------
Rafael Marin Lopez, PhD
Dept. Information and = Communications Engineering (DIIC)
Faculty of Computer = Science-University of Murcia
30100 Murcia - Spain
Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es
-------------------------------------------------------




_______________________________________________
sdn mailing list
sdn@irtf.org
https://www.irtf.org/mailman/listinfo/sdn



-----------------------------------------------------------
Gabriel L=A8=AEpez Mill=A8=A2n
Departamento de = Ingenier=A8=AAa de la Informaci=A8=AEn y las Comunicaciones
University of Murcia
Spain
Tel: = +34 868888504
Fax: +34 868884151
email: = gabilm@um.es

-------------------------------------------------------
Rafael Marin Lopez, PhD
Dept. Information and = Communications Engineering (DIIC)
Faculty of Computer = Science-University of Murcia
30100 Murcia - Spain
Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es
-------------------------------------------------------




_______________________________________________
I2nsf mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf





-----------------------------------------------------------
Gabriel L=A8=AEpez Mill=A8=A2n
Departamento de = Ingenier=A8=AAa de la Informaci=A8=AEn y las Comunicaciones
University of Murcia
Spain
Tel: = +34 868888504
Fax: +34 868884151
email: gabilm@um.es




= --Apple-Mail=_7342DEE8-2477-451F-8B0A-0A018D495361-- --Apple-Mail=_F67A2683-9731-4F49-99F1-D6BB0C65A83D Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJWKgSgAAoJEMUYqoSNEZFTLOkIAIh5SB/P60YXeGFTmcw6MnzZ OUsYD4wcgN/bTxdP1PMbYU/Jqx+KVXfhWuIlHH7ESWmyJdijgSBB1595CoOlYVdd zKpS72wn/LQHLgvGRvfJB46bz6BFMJDBNyD//+YM4NPD1IdzdGoxzEpJ8mjer8wQ D9orTo+ro5LIdJn9j4Yb9Zb3dj568Yqrae7Tdw3JM7S9lWkMnwY8KQDdetOWJLIa PkM4fVFR42Z/7Rppp9ypBgwKvYGgcUH4vOAXNJnG9Rqc/8XbYUZAxB4H3dpZj2tI jBC2d9Zv2vRJRahEJQCGuhWm0GUlYJ7h7Qbh6X2MoJtaSjTCg2hT2sJxAnag7SE= =y3Ft -----END PGP SIGNATURE----- --Apple-Mail=_F67A2683-9731-4F49-99F1-D6BB0C65A83D-- From nobody Sat Oct 24 01:38:18 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 790561B2CF6 for ; Sat, 24 Oct 2015 01:38:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.9 X-Spam-Level: X-Spam-Status: No, score=-99.9 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mVMNfpw3dBSi for ; Sat, 24 Oct 2015 01:38:14 -0700 (PDT) Received: from asmtp5.iomartmail.com (asmtp5.iomartmail.com [62.128.201.176]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C3851A898A for ; Sat, 24 Oct 2015 01:38:14 -0700 (PDT) Received: from asmtp5.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp5.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9O8cBqp021316 for ; Sat, 24 Oct 2015 09:38:11 +0100 Received: from 950129200 ([62.173.23.104]) (authenticated bits=0) by asmtp5.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9O8cAaj021298 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sat, 24 Oct 2015 09:38:11 +0100 From: "Adrian Farrel" To: Date: Sat, 24 Oct 2015 09:38:10 +0100 Message-ID: <01ef01d10e37$512feae0$f38fc0a0$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdEON08wJAtLUUJrTqWetNH6rJL36Q== Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-21898.006 X-TM-AS-Result: No--11.430-10.0-31-10 X-imss-scan-details: No--11.430-10.0-31-10 X-TMASE-MatchedRID: GDE3Z+tCY2S0YC3nbjbPMSe1T5r1VA3II5K4Cd+0ao8cvwPYmXKyH6yq cSRToWuMxuJa+E+WYCHOQk7nJHB58Qp2iRVeF6F2ZxB5txVUACYZKp0SZ4P+dWecrqZc3vabqJl o5lQZWaoGpqMkr/bSB3KK9aIT121Ag9rU75/tZ028coKUcaOOvfYZvKtWh9m3cPDElbD+F/IREL oZ7eyaYwlLjq18QxiDJ3h63cr2wP/xoFpSGnAM9YLF0pkDuo/MlwdGrOYUgZMKXKtfi06bFKPFj JEFr+olfeZdJ1Xsorg65tgsJWcFUSAHAopEd76vxivXHsxFpLBe4VCSiIPGDgCk/xFKJnJmklX8 qBU2D9zWp4kxyExdGA== Archived-At: Subject: [I2nsf] Draft agenda uploaded for I2NSF X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Oct 2015 08:38:16 -0000 Hi, Linda and I have put together a draft agenda. https://www.ietf.org/proceedings/94/minutes/minutes-94-i2nsf We have tried to focus on the immediate deliverables for the working group while also giving space for other agenda requests that we have received. Our thinking is that we have made a commitment to deliver some things quite soon and we need to be sure to make progress on them, but once we know that work is moving, we can take the time to discuss new drafts. That means that some of you have not received as much time on the agenda as you would like. Our recommendation is that you focus on your primary message - don't run through the details of your draft (we can all read it off line), but try to sell the idea to us and tell us what input you want from the working group. Please look at the agenda and let us know if you have any issues. If you are named as a presenter, please (very big "please") get you slides to the chairs in good time before the meeting. In practice, this means before the end of the working day on Sunday 1st so that we can post the slides to the IETF site. This is both a courtesy to your co-workers in the WG and essential to ensure that you get the full amount of your slot without wasting time trying to find slides or swap computers. If you think you would benefit from the chairs reviewing your slides in advance then please get them to us even sooner. Thanks, Linda and Adrian From nobody Sat Oct 24 02:44:35 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 684C21B2E15 for ; Sat, 24 Oct 2015 02:44:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.6 X-Spam-Level: X-Spam-Status: No, score=-102.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5aj1WAroHWQU for ; Sat, 24 Oct 2015 02:44:32 -0700 (PDT) Received: from asmtp5.iomartmail.com (asmtp5.iomartmail.com [62.128.201.176]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DBB071B2E13 for ; Sat, 24 Oct 2015 02:44:31 -0700 (PDT) Received: from asmtp5.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp5.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9O9iTXH017143 for ; Sat, 24 Oct 2015 10:44:30 +0100 Received: from 950129200 ([62.173.23.104]) (authenticated bits=0) by asmtp5.iomartmail.com (8.13.8/8.13.8) with ESMTP id t9O9iLY0017109 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sat, 24 Oct 2015 10:44:26 +0100 From: "Adrian Farrel" To: References: <01ef01d10e37$512feae0$f38fc0a0$@olddog.co.uk> In-Reply-To: <01ef01d10e37$512feae0$f38fc0a0$@olddog.co.uk> Date: Sat, 24 Oct 2015 10:44:20 +0100 Message-ID: <01f901d10e40$930ccb00$b9266100$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQFHFxQChOWxrwd7BJ77Xgl53fuJRJ+OUtOQ Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-21898.006 X-TM-AS-Result: No--20.078-10.0-31-10 X-imss-scan-details: No--20.078-10.0-31-10 X-TMASE-MatchedRID: eVEkOcJu0F4K++B6MLRnDJ1U1lojafr/g3XZcphu4kvadW4iYSMjUae7 nmhJA6kzJmLqKu2yqdmKD1fqdCaaf4ZMzyqfAL0kStpI+4+KLgA7UrmIzxDooLrtDe4+j0ojPoG axP+tEGP/yQoWXMJIGLP/4HqQGU8qBxIED8tgOKG4jAucHcCqndZKsq3DGpal30xSgZEFQrIWnS lwXxTNeIGQ1zvVj20V+XHh/yCLC/BoCzhkC2XxT+33Pr0vZA7n+LidURF+DB1gOcGYycfRsKmu1 NQ3qDz7/nFiArWieIQIJuanIFvMg+WXLoZt2RgW79CfFUfU61sS12tj9Zvd88zvOkSymob/Olt9 1MBw1ebi8zVgXoAltlwtzewu2M637Tc/WGKLaySx5amWK2anSPoLR4+zsDTtAqYBE3k9Mpw= Archived-At: Subject: Re: [I2nsf] Draft agenda uploaded for I2NSF X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Oct 2015 09:44:34 -0000 That's crazy! Try https://www.ietf.org/proceedings/94/agenda/agenda-94-i2nsf Adrian > -----Original Message----- > From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Adrian Farrel > Sent: 24 October 2015 09:38 > To: i2nsf@ietf.org > Subject: [I2nsf] Draft agenda uploaded for I2NSF > > Hi, > > Linda and I have put together a draft agenda. > https://www.ietf.org/proceedings/94/minutes/minutes-94-i2nsf > > We have tried to focus on the immediate deliverables for the working group > while > also giving space for other agenda requests that we have received. Our thinking > is that we have made a commitment to deliver some things quite soon and we > need > to be sure to make progress on them, but once we know that work is moving, we > can take the time to discuss new drafts. > > That means that some of you have not received as much time on the agenda as > you > would like. Our recommendation is that you focus on your primary message - > don't > run through the details of your draft (we can all read it off line), but try to > sell the idea to us and tell us what input you want from the working group. > > Please look at the agenda and let us know if you have any issues. > > If you are named as a presenter, please (very big "please") get you slides to > the chairs in good time before the meeting. In practice, this means before the > end of the working day on Sunday 1st so that we can post the slides to the IETF > site. This is both a courtesy to your co-workers in the WG and essential to > ensure that you get the full amount of your slot without wasting time trying to > find slides or swap computers. > > If you think you would benefit from the chairs reviewing your slides in advance > then please get them to us even sooner. > > Thanks, > Linda and Adrian > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf From nobody Sat Oct 31 08:01:39 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AA051A0191 for ; Fri, 23 Oct 2015 06:46:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R76zbsoK-Cpc for ; Fri, 23 Oct 2015 06:46:05 -0700 (PDT) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BE2A1A017E for ; Fri, 23 Oct 2015 06:46:05 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.painless-security.com (Postfix) with ESMTP id 376D820802; Fri, 23 Oct 2015 09:44:13 -0400 (EDT) Received: from mail.painless-security.com ([127.0.0.1]) by localhost (mail.suchdamage.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HTUH2N8tb1UA; Fri, 23 Oct 2015 09:44:12 -0400 (EDT) Received: from carter-zimmerman.suchdamage.org (c-50-136-30-120.hsd1.ma.comcast.net [50.136.30.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS; Fri, 23 Oct 2015 09:44:12 -0400 (EDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id A685A88CA5; Fri, 23 Oct 2015 09:45:57 -0400 (EDT) From: Sam Hartman To: Gabriel Lopez References: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> <89725C38-5C24-44B2-9957-BAD267993F92@um.es> <160732AF-02A9-48FB-BF91-94412A1688C0@um.es> <4A95BA014132FF49AE685FAB4B9F17F657D7208A@dfweml701-chm> Date: Fri, 23 Oct 2015 09:45:57 -0400 In-Reply-To: (Gabriel Lopez's message of "Fri, 23 Oct 2015 11:57:51 +0200") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain Archived-At: X-Mailman-Approved-At: Sat, 31 Oct 2015 08:01:37 -0700 Cc: "sdn@irtf.org" , mark@painless-security.com, Alejandro Abad UM , "i2nsf@ietf.org" , Linda Dunbar , margaret@painless-security.com, Rafa Marin Lopez , Mahesh Jethanandani , Dacheng Zhang Subject: Re: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2015 13:46:06 -0000 This does seem interesting even if if beyond the scope of I2NSF. Are you going to be in Japan? I will not, but margaret and Mark from Painless Security will be. From nobody Sat Oct 31 08:01:41 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91F9F1A038D for ; Fri, 23 Oct 2015 07:15:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4hqZxxgbq086 for ; Fri, 23 Oct 2015 07:14:59 -0700 (PDT) Received: from xenon21.um.es (xenon21.um.es [155.54.212.161]) by ietfa.amsl.com (Postfix) with ESMTP id B666B1A0383 for ; Fri, 23 Oct 2015 07:14:59 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by xenon21.um.es (Postfix) with ESMTP id 8747040551; Fri, 23 Oct 2015 16:14:57 +0200 (CEST) X-Virus-Scanned: by antispam in UMU at xenon21.um.es Received: from xenon21.um.es ([127.0.0.1]) by localhost (xenon21.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id rJAdXZ8sKSrW; Fri, 23 Oct 2015 16:14:57 +0200 (CEST) Received: from inf-205-216.inf.um.es (inf-205-216.inf.um.es [155.54.205.216]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: rafa) by xenon21.um.es (Postfix) with ESMTPSA id C25C640550; Fri, 23 Oct 2015 16:14:49 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.0 \(3094\)) From: Rafa Marin Lopez In-Reply-To: Date: Fri, 23 Oct 2015 16:14:47 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> <89725C38-5C24-44B2-9957-BAD267993F92@um.es> <160732AF-02A9-48FB-BF91-94412A1688C0@um.es> <4A95BA014132FF49AE685FAB4B9F17F657D7208A@dfweml701-chm> To: Sam Hartman X-Mailer: Apple Mail (2.3094) Archived-At: X-Mailman-Approved-At: Sat, 31 Oct 2015 08:01:37 -0700 Cc: "sdn@irtf.org" , mark@painless-security.com, Alejandro Abad UM , "i2nsf@ietf.org" , Gabriel Lopez , Linda Dunbar , margaret@painless-security.com, Rafa Marin Lopez , Mahesh Jethanandani , Dacheng Zhang Subject: Re: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2015 14:15:01 -0000 Hi Sam: Thanks for your interest in the document. Unfortunately we won=E2=80=99t = go this time. In any case we can prepare a call to discuss if you want.=20= Definitely one of the possible tasks of the security controller may be = key distribution, which is, in our opinion, very interesting. Best Regards > El 23 oct 2015, a las 15:45, Sam Hartman = escribi=C3=B3: >=20 > This does seem interesting even if if beyond the scope of I2NSF. > Are you going to be in Japan? > I will not, but margaret and Mark from Painless Security will be. ------------------------------------------------------- Rafael Marin Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- From nobody Sat Oct 31 08:01:42 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E62B1B32A5 for ; Mon, 26 Oct 2015 18:42:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.451 X-Spam-Level: X-Spam-Status: No, score=0.451 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_CHARSET_FARAWAY=2.45, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K4qAOzH2XPnG for ; Mon, 26 Oct 2015 18:42:27 -0700 (PDT) Received: from out4133-2.mail.aliyun.com (out4133-2.mail.aliyun.com [42.120.133.2]) by ietfa.amsl.com (Postfix) with ESMTP id C16451B32A4 for ; Mon, 26 Oct 2015 18:42:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1445910145; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=TLpO0sm+IKsUsGCsH+NbYZaGQN+m66vgHoL85AyhZkk=; b=h/DF7OXm4H2I/Gq/7eX63BpRVg+o04K9GDMMij/6u3V9QpiFceQXcc9YayOSCExIjaCGyrCD3EAADGZ+dn6pQM1/67dFA4huN50r6qlzxZ2oRUqcoKo4bh2xDeE1ejqog2wLh5ql/jT4WJhDJ5UiImUAhPDKIQR0eS9up6POl4w= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R131e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=e02c03273; MF=dacheng.zdc@alibaba-inc.com; NM=1; PH=DS; RN=11; SR=0; Received: from 10.62.55.32(mailfrom:dacheng.zdc@alibaba-inc.com ip:182.92.253.23) by smtp.aliyun-inc.com(127.0.0.1); Tue, 27 Oct 2015 09:42:22 +0800 User-Agent: Microsoft-MacOutlook/14.5.7.151005 Date: Tue, 27 Oct 2015 09:42:17 +0800 From: "Dacheng Zhang" To: Sam Hartman , Gabriel Lopez , Mingui Zhang Message-ID: Thread-Topic: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection References: <4A95BA014132FF49AE685FAB4B9F17F657D71571@dfweml701-chm> <89725C38-5C24-44B2-9957-BAD267993F92@um.es> <160732AF-02A9-48FB-BF91-94412A1688C0@um.es> <4A95BA014132FF49AE685FAB4B9F17F657D7208A@dfweml701-chm> In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Archived-At: X-Mailman-Approved-At: Sat, 31 Oct 2015 08:01:36 -0700 Cc: "sdn@irtf.org" , mark@painless-security.com, Alejandro Abad UM , "i2nsf@ietf.org" , Linda Dunbar , margaret@painless-security.com, Rafa Marin Lopez , Mahesh Jethanandani Subject: Re: [I2nsf] [Sdn] New update of draft-abad-sdnrg-sdn-ipsec-flow-protection X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2015 01:42:28 -0000 I will not go to Japan this time. But I plan to attend the next IETF meeting. Linda plans to visit China before the meeting=A3=AC so I will try to get a chance to discuss with her about this. I think my friends from Huawei may be also interested in this topic. ^_^ =D4=DA 15-10-23 =CF=C2=CE=E79:45=A3=AC "Sam Hartman" =D0=B4=C8=EB: >This does seem interesting even if if beyond the scope of I2NSF. >Are you going to be in Japan? >I will not, but margaret and Mark from Painless Security will be. From nobody Sat Oct 31 20:55:35 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A21C1B59C3 for ; Sat, 31 Oct 2015 20:55:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.6 X-Spam-Level: X-Spam-Status: No, score=-102.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t3ABRuOEeaxw for ; Sat, 31 Oct 2015 20:55:32 -0700 (PDT) Received: from asmtp4.iomartmail.com (asmtp4.iomartmail.com [62.128.201.175]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD2181B59CC for ; Sat, 31 Oct 2015 20:55:31 -0700 (PDT) Received: from asmtp4.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp4.iomartmail.com (8.13.8/8.13.8) with ESMTP id tA13tT4R027215 for ; Sun, 1 Nov 2015 03:55:29 GMT Received: from 950129200 (dhcp-86-45.meeting.ietf94.jp [133.93.86.45]) (authenticated bits=0) by asmtp4.iomartmail.com (8.13.8/8.13.8) with ESMTP id tA13tQuT027193 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sun, 1 Nov 2015 03:55:28 GMT From: "Adrian Farrel" To: References: <20151101030818.29117.14633.idtracker@ietfa.amsl.com> In-Reply-To: <20151101030818.29117.14633.idtracker@ietfa.amsl.com> Date: Sun, 1 Nov 2015 03:55:24 -0000 Message-ID: <008e01d11459$25d7ce80$71876b80$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQFFMTiFEyziZIvLKTZ3VFpa33Vzrp+eTnrg Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-21914.004 X-TM-AS-Result: No--11.799-10.0-31-10 X-imss-scan-details: No--11.799-10.0-31-10 X-TMASE-MatchedRID: g0JMQ1zl4zfcbx1g09+8GbxygpRxo469t3aeg7g/usAutoY2UtFqGKnE 52MLoE7e7rYjKjSGs+3Ri4mCIuNUJnAfiwYMiqEZAEgqTc4LS4SRRVVeGPlPXxHfiujuTbedeZ3 7blWRCzM/GSSIrQ4/X1QOLYUL5EPciNCj8jDazVKpRKRclM3X8w2AVSpm3nkD/RM/+SKR6qfX6X zuWIU292hgagzZAm1UhL6MANw66tFxzwb0rKc346ZCFtxq3n99ZPNV6PmLhchsnKw3bbHJccHM7 omNQ6mPlGgtNSIUugzcFPFR1xoqQr9ZdlL8eonaVnRXm1iHN1bEQdG7H66TyH4gKq42LRYkp4F9 fpA7LYwT4tVk2XY0wx7w5ACdpbI8l4LeSTwuJrF+3BndfXUhXQ== Archived-At: Subject: [I2nsf] FW: NomCom 2015 - Second Request for feedback X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 03:55:34 -0000 Please! > -----Original Message----- > From: IETF-Announce [mailto:ietf-announce-bounces@ietf.org] On Behalf = Of > NomCom Chair 2015 > Sent: 01 November 2015 03:08 > To: IETF Announcement List > Cc: ietf@ietf.org > Subject: NomCom 2015 - Second Request for feedback >=20 > The 2015-16 Nominating Committee has collected a list of willing > candidates for the positions outlined below. You can see the list > at: https://datatracker.ietf.org/nomcom/2015/feedback/ >=20 > You may provide feedback using the web form there; it is secure. > All feedback goes into the datatracker using asymmetric encryption, > which is decrypted by the nomcom members as they read it. So your > feedback can not be seen by the secretariat, the tools people, or any = of the > management. >=20 > Your feedback through the web form is not anonymous as you need a = login to > provide it. >=20 > You may also provide feedback by emailing nomcom15@ietf.org, which = enters > the same system through email; it is as non-anonymous as email is, but = I do have > to sort it out. A separate email per candidate is easier to deal = with. >=20 > If you want to give truly anonymous feedback, please contact one of = the > NomCom members that you trust directly, and ask him/her to relay the > feedback anonymously to the NomCom. >=20 > Here in Yokohama, you can find Nomcom members by looking for the = orange > dots. >=20 > We are also accessible in room 314 at the Yokohama Nomcom office = hours: >=20 > - Tuesday at 12:45 > - Wednesday at 13:30 >=20 > Feedback is more useful to us the earlier it comes, since we can ask > the candidates about issues raised in feedback if we have it this = week. >=20 > The positions to be filled are those currently held by: >=20 > IAB > - Mary Barnes > - Joe Hildebrand > - Ted Hardie > - Erik Nordmark > - Brian Trammell > - Marc Blanchet >=20 > IESG > - Alissa Cooper (ART) > - Barry Leiba (ART) > - Brian Haberman (Internet) (*) > - Benoit Claise (Operations and Management) > - Alia Atlas (Routing) > - Kathleen Moriarty (Security) > - Martin Stiemerling (Transport) (*) >=20 > Harald Alvestrand, Nomcom chair 2015 > nomcom-chair-2015@ietf.org, hta+nomcom@alvestrand.no