From nobody Mon Jan 2 07:15:15 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14CD012965D; Mon, 2 Jan 2017 07:15:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.622 X-Spam-Level: X-Spam-Status: No, score=-17.622 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RyuOCzhVUT4X; Mon, 2 Jan 2017 07:15:09 -0800 (PST) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 837EA129660; Mon, 2 Jan 2017 07:15:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=126620; q=dns/txt; s=iport; t=1483370109; x=1484579709; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=sDEhSCQ6s0CyjbKrCqoB6k2JOoieMV70/Q7YaGTZLY0=; b=JBsiI02Zmd2InWEAl6sNTZPMMofFSgJ2XTETMDcAcIwtK87/BIZuDW/E WVYDjz4Blomks17F1FRy6G8DqmAV0LQrbMGPROhv6+VvB6GbLs3ktRgLl nWlW3BITZ27QX6YH2xHcG2Bs+YJo9ShntN6deip4OQBBEs4vMmO0KuHoW c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C2BAASbmpY/5pdJa1VCRkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYMqDQEBAQEBH1+BDAeDSIoIlEOHe40gggUDHwuFeAIagUUVKhQ?= =?us-ascii?q?BAgEBAQEBAQFiKIRoAQEBAwEBARgBCBE6CwUHBAIBCBEEAQEBAgIjAwICAh8GC?= =?us-ascii?q?xQBCAgCBAENBQgWiDcDEAgOAq8lgiWHIg2DCQEBAQEBAQEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BARgFgQuFOoNbgQaCTjuBDwcDBgIBAgMtgm2CXQWaNRM1AYZTgxKDFkmDcIF+G?= =?us-ascii?q?IRwg0qGDod+gXWEO4QOAR84aEIug14FHBiBRnIBAYZaAQEkB4EDgQ0BAQE?= X-IronPort-AV: E=Sophos;i="5.33,432,1477958400"; d="scan'208";a="365855688" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Jan 2017 15:14:50 +0000 Received: from XCH-ALN-013.cisco.com (xch-aln-013.cisco.com [173.36.7.23]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id v02FEosO024551 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 2 Jan 2017 15:14:50 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-ALN-013.cisco.com (173.36.7.23) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 2 Jan 2017 09:14:49 -0600 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1210.000; Mon, 2 Jan 2017 09:14:49 -0600 From: "Tirumaleswar Reddy (tireddy)" To: Brandon Williams , Karl Stahl , "Pal Martinsen (palmarti)" Thread-Topic: SV: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery Thread-Index: AQHSTxkaN2BYgrSUakiGU6H6t4xJ+KEBz24AgANhBxCAF4kGgIAIrmYg Date: Mon, 2 Jan 2017 15:14:48 +0000 Message-ID: <03b17932e8824b5a9fd4a5d7c6baedc3@XCH-RCD-017.cisco.com> References: <012701d24112$ebca82e0$c35f88a0$@stahl@ingate.com> <521b142d7fd9482ca18102655d4ef4e6@XCH-RCD-017.cisco.com> <021701d2436e$4cee87d0$e6cb9770$@stahl@ingate.com> <03166323036f4cf187c0a67b9c183138@XCH-RCD-017.cisco.com> <034501d244e7$ad9ac060$08d04120$@stahl@ingate.com> <061301d248ea$12c01110$38403330$@stahl@ingate.com> <3cf392b265354926a46f8e70109df236@XCH-RCD-017.cisco.com> <065101d24958$64f42fc0$2edc8f40$@stahl@ingate.com> <7f4a0d29c1b844539a5d2b38ee699c38@XCH-RCD-017.cisco.com> <00a901d24c77$6a9b7d80$3fd27880$@stahl@ingate.com> <96701F1A-BE53-4A91-B0 FA-2BBAF7051651@cisco. com> <0726040555ad4275a2486f0aa8f9174d@XCH-RCD-017.cisco.com> <01d101d24f19$04a7fae0$0df7f0a0$@stahl@ingate.com> <5f464f75-5d00-a0b8-83cc-07e1b0f2ba25@akamai.com> <347f9a2f4d5e4970a17288e8ca33b882@XCH-RCD-017.cisco.com> <997ccf57-0634-c43e-22e2-a93f0ab75f5b@akamai.com> In-Reply-To: <997ccf57-0634-c43e-22e2-a93f0ab75f5b@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.82.178] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "Prashanth Patil \(praspati\)" , "tram-chairs@ietf.org" , "Dan Wing \(dan@danwing.org\)" , 'Spencer Dawkins at IETF' , "tram@ietf.org" Subject: Re: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jan 2017 15:15:14 -0000 SGkgQnJhbmRvbiwNCg0KUGxlYXNlIHNlZSBpbmxpbmUNCg0KPiAtLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KPiBGcm9tOiBCcmFuZG9uIFdpbGxpYW1zIFttYWlsdG86YnJhbmRvbi53aWxsaWFt c0Bha2FtYWkuY29tXQ0KPiBTZW50OiBXZWRuZXNkYXksIERlY2VtYmVyIDI4LCAyMDE2IDE6MTQg QU0NCj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29t PjsgS2FybCBTdGFobA0KPiA8a2FybC5zdGFobEBpbmdhdGUuY29tPjsgUGFsIE1hcnRpbnNlbiAo cGFsbWFydGkpIDxwYWxtYXJ0aUBjaXNjby5jb20+DQo+IENjOiBQcmFzaGFudGggUGF0aWwgKHBy YXNwYXRpKSA8cHJhc3BhdGlAY2lzY28uY29tPjsgdHJhbS1jaGFpcnNAaWV0Zi5vcmc7DQo+ICdE YW4gV2luZycgPGRhbkBkYW53aW5nLm9yZz47ICdTcGVuY2VyIERhd2tpbnMgYXQgSUVURicNCj4g PHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPjsgdHJhbUBpZXRmLm9yZw0KPiBTdWJqZWN0 OiBSZTogU1Y6IFt0cmFtXSBNYXliZSB3ZSBoYXZlIChEKVRMUyBjb25zZW5zdXM7IFdBUzogZHJh ZnQtaWV0Zi0NCj4gdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gDQo+IFRoZSBvcmlnaW5h bCBJIHJlc3BvbmRlZCB0byBkaWRuJ3QgaGF2ZSB0aGUgdHJhbSBsaXN0IENDZWQuIEFwb2xvZ2ll cyB0bw0KPiB0aG9zZSB3aG8gcmVjZWl2ZSBkdXBsaWNhdGVzLg0KPiANCj4gLS0NCj4gDQo+IEhp IFRpcnUsDQo+IA0KPiBTb3JyeSBhYm91dCB0aGUgZGVsYXllZCByZXNwb25zZS4NCj4gDQo+IEkg dW5kZXJzdGFuZCB0aGF0IHRoZSByZXF1aXJlbWVudHMgeW91IHByb3Bvc2UgYXJlIHRvIHByb3Rl Y3QgdGhlDQo+IGNsaWVudC4gTXkgcG9pbnQgaXMgdGhhdCB0aGUgY2xpZW50IG1pZ2h0IG5vdCBy ZXF1aXJlIHN1Y2ggcHJvdGVjdGlvbiBpbg0KPiBhbGwgY2FzZXMgYW5kIGl0IHNob3VsZCBiZSB1 cCB0byB0aGUgY2xpZW50IHRvIG1ha2UgdGhhdCBkZXRlcm1pbmF0aW9uLg0KPiBGb3IgZXhhbXBs ZSwgaWYgYm90aCB0aGUgY2xpZW50IGFuZCB0aGUgc2VydmVyIGFyZSBvbiBteSBob21lIG5ldHdv cmssIEkNCj4gZG9uJ3QgcmVhbGx5IG5lZWQgdGhlIHByb3RlY3Rpb24gdGhhdCAoRClUTFMgcHJv dmlkZXMuIA0KDQpZZXMsIHRoZXNlIGF0dGFja3MgbWF5IG5vdCBoYXBwZW4gaW4gYSBob21lIG5l dHdvcmsuIEJ1dCB3ZSBjYW5ub3QgZXhwZWN0IHRoZSByb2FtaW5nIGNsaWVudCB0byBrZWVwIGNo YW5naW5nIHRoZSBzZWN1cml0eSBwb3N0dXJlIGFzIHRoZSBkZXZpY2UgYXR0YWNoZXMgdG8gZGlm ZmVyZW50IG5ldHdvcmtzLiBBbiBhdmVyYWdlIHVzZXIgbWF5IG5vdCBiZSBldmVuIGF3YXJlIG9m IHRoZSBzZWN1cml0eSByaXNrcyB3aGVuIChEKVRMUyBpcyBkaXNhYmxlZC4gDQoNCldoYXQgaXMg dGhlIGRvd25zaWRlIGlmIChEKVRMUyBpcyBtYW5kYXRlZCA/IA0KDQo+IFRoZSBzZXJ2ZXIgbXVz dA0KPiBzdXBwb3J0IHdoYXRldmVyIHNlY3VyaXR5IHBvc3R1cmUgdGhlIGNsaWVudCByZXF1aXJl cywgYnV0IHRoZSBzZXJ2ZXINCj4gc2hvdWxkIG5vdCByZXF1aXJlIHRoZSBjbGllbnQgdG8gcHJv dGVjdCBpdHNlbGYgaW4gYSBwYXJ0aWN1bGFyIHdheS4NCg0KVGhlIFRVUk4gc2VydmVyIGJ5cGFz c2VzIHRoZSBFbnRlcnByaXNlIGZpcmV3YWxsIHNlY3VyaXR5IGFuZCBhbGxvd3MgdHJhZmZpYyBm cm9tIG91dHNpZGUgdG8gaW5zaWRlLiBBcyB5b3UgYWxyZWFkeSBrbm93LCBUVVJOIHBlcm1pc3Np b25zIG1pbWljIHRoZSBhZGRyZXNzLXJlc3RyaWN0ZWQgZmlsdGVyaW5nIG1lY2hhbmlzbSBvZiBO QVQsIGFuZCBpZiB0aGUgY2xpZW50IHdlcmUgdG8gY2hvb3NlIHNlY3VyaXR5IHBvc3R1cmUgdGhh dCBkb2VzIG5vdCBvZmZlciBhbnkgc2VjdXJpdHkgdG8gVFVSTiBtZXNzYWdlIChiZWNhdXNlIG9m IGJhZCB1c2VyIGNvbmZpZ3VyYXRpb24gb3IgYSBtYWx3YXJlIGNsaWVudCBvbiB0aGUgZW5kcG9p bnQpLCBpdCBqdXN0IHJlbmRlcnMgdGhlIGNsaWVudCB0byBiZWNvbWUgYSB2aWN0aW0gb2YgRERP UyBhdHRhY2sgKGFuIGF0dGFja2VyIGNhbiBzZW5kcyBmYWtlZCBwZXJtaXNzaW9ucyB0byB0aGUg VFVSTiBzZXJ2ZXIgdG8gbGF1bmNoIGF0dGFjayAoRE9TIG9yIERET1MpIG9uIHRoZSBUVVJOIGNs aWVudCBhbmQgaXQgbnVsbGlmaWVzIHRoZSBzZWN1cml0eSBiZW5lZml0cyBvZmZlcmVkIGJ5IENy ZWF0ZVBlcm1pc3Npb24pLg0KDQpJZiB0aGUgVFVSTiBzZXJ2ZXIgbWFuZGF0ZXMgKEQpVExTIHRo ZW4gdGhlIGFib3ZlIGF0dGFjayBpcyBub3QgcG9zc2libGUgYW5kIHdvdWxkIHByb3RlY3QgZXZl biBhIGNvbXByb21pc2VkL21pcy1jb25maWd1cmVkIGNsaWVudCBmcm9tIERET1MgYXR0YWNrcy4g SW4gc2hvcnQsIHdoeSB3b3VsZCBhbiBFbnRlcnByaXNlIG5ldHdvcmsgYWRtaW5pc3RyYXRvciB3 YW50IHRvIGNvbmZpZ3VyZSBUVVJOIHNlcnZlciB0byBiZSB1c2VkIGluIHRoaXMgbW9kZSBpbiB3 aGljaCBjbGllbnRzIGNhbiBiZSBzdWJqZWN0ZWQgdG8gRERPUyBhdHRhY2tzIGFuZCB0aGUgVFVS TiBzZXJ2ZXIgYW5kIEVudGVycHJpc2UgZmlyZXdhbGwgY2Fubm90IGRvIGFueXRoaW5nIHRvIHBy b3RlY3QgdGhlIGNsaWVudC4NCg0KPiANCj4gVGhpcyBpcyB0aGUgZm91bmRhdGlvbiBmb3IgbXkg cHJvcG9zZWQgZWRpdHMuDQoNCkkgdW5kZXJzdGFuZCwgSSBjYW4gYWRkIHRoZSBmb2xsb3dpbmcg bmV3IGxpbmVzOg0KDQpJbiBvcmRlciB0byBhbGxvdyB0aGUgVFVSTiBjbGllbnQgdG8gc2VsZWN0 IGZhbGxiYWNrIHRvIChEKVRMUyBhcyBkZXNjcmliZWQgYWJvdmUsIGEgVFVSTiBzZXJ2ZXIgdGhh dCBkb2VzIG5vdCByZXF1aXJlIGVpdGhlciBTVFVOIGxvbmcgdGVybSBhdXRoZW50aWNhdGlvbiBb UkZDNTM4OV0gb3IgU1RVTiBFeHRlbnNpb24gZm9yIFRoaXJkIFBhcnR5IEF1dGhvcml6YXRpb24g W1JGQzc2MzVdIE1VU1Qgc3VwcG9ydCAoRClUTFMuIFN1Y2ggYSBUVVJOIHNlcnZlciBNQVkgYWxs b3cgZmFsbGJhY2sgdG8gY2xlYXIgdGV4dCBidXQgZmFsbGJhY2sgdG8gY2xlYXIgdGV4dCBpcyBO T1QgUkVDT01NRU5ERUQNCmJlY2F1c2UgaXQgbWFrZXMgdGhlIGNsaWVudCBtb3JlIHN1c2NlcHRp YmxlIHRvIG1hbi1pbi10aGUtbWlkZGxlIGF0dGFja3MgYW5kIG9uLXBhdGggcGFja2V0IGluamVj dGlvbi4NCg0KLVRpcnUNCiANCj4gDQo+IC0tQnJhbmRvbg0KPiANCj4gT24gMTIvMTMvMjAxNiAx MjoxNCBBTSwgVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSB3cm90ZToNCj4gPiBIaSBCcmFu ZG9uLA0KPiA+DQo+ID4gVGhhbmtzIGZvciB0aGUgZmVlZGJhY2suIFBsZWFzZSBzZWUgaW5saW5l DQo+ID4NCj4gPj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPj4gRnJvbTogQnJhbmRv biBXaWxsaWFtcyBbbWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbV0NCj4gPj4gU2Vu dDogU2F0dXJkYXksIERlY2VtYmVyIDEwLCAyMDE2IDEwOjEzIFBNDQo+ID4+IFRvOiBLYXJsIFN0 YWhsIDxrYXJsLnN0YWhsQGluZ2F0ZS5jb20+OyBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkp DQo+ID4+IDx0aXJlZGR5QGNpc2NvLmNvbT47IFBhbCBNYXJ0aW5zZW4gKHBhbG1hcnRpKSA8cGFs bWFydGlAY2lzY28uY29tPg0KPiA+PiBDYzogUHJhc2hhbnRoIFBhdGlsIChwcmFzcGF0aSkgPHBy YXNwYXRpQGNpc2NvLmNvbT47IHRyYW0tY2hhaXJzQGlldGYub3JnOw0KPiA+PiAnRGFuIFdpbmcn IDxkYW5AZGFud2luZy5vcmc+OyAnU3BlbmNlciBEYXdraW5zIGF0IElFVEYnDQo+ID4+IDxzcGVu Y2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4NCj4gPj4gU3ViamVjdDogUmU6IFNWOiBbdHJhbV0g TWF5YmUgd2UgaGF2ZSAoRClUTFMgY29uc2Vuc3VzOyBXQVM6IGRyYWZ0LWlldGYtDQo+ID4+IHRy YW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+ID4+DQo+ID4+IEknbSBub3Qgc3VyZSB3ZSdyZSBx dWl0ZSBhdCBjb25zZW5zdXMgeWV0IEthcmwsIGJ1dCBJIHRoaW5rIHdlJ3JlIGNsb3NlLg0KPiA+ Pg0KPiA+PiBJIGFncmVlIHRoYXQgdGhlIHRleHQgeW91IHF1b3RlIGZyb20gdGhlIGRvYyBjb3Zl cnMgdGhlIGNsaWVudCBzaWRlDQo+ID4+IGNvbnNpZGVyYXRpb25zLCBhbmQgdGhhdCBmcmFtaW5n IGl0IGFzIHJlY29tbWVuZGF0aW9ucyByYXRoZXIgdGhhbg0KPiA+PiByZXF1aXJlbWVudHMgc3Rp bGwgbWFrZXMgc2Vuc2UuIEl0J3MgdXAgdG8gdGhlIGNsaWVudCB0byBkZWNpZGUgd2hpY2gNCj4g Pj4gc2VjdXJpdHkgZWxlbWVudHMgYXJlIHJlcXVpcmVkIGZvciB0aGUgYXBwbGljYXRpb24gdXNl IGNhc2UsIGFuZCB0aGF0DQo+ID4+IHRleHQgd2FzIGludGVuZGVkIHRvIHByb3ZpZGUgZ3VpZGFu Y2Ugd2l0aG91dCB0cnlpbmcgdG8gZm9yY2UgYSBzZWN1cml0eQ0KPiA+PiBwb3N0dXJlIHRoYXQg aXMgbW9yZSBjb21wbGljYXRlZCB0aGFuIHRoZSB1c2UgY2FzZSByZXF1aXJlcy4NCj4gPg0KPiA+ IFRoZSByZXF1aXJlbWVudHMgYXJlIHRvIHByb3RlY3QgdGhlIGNsaWVudCBmcm9tIHZhcmlvdXMg YXR0YWNrcy4NCj4gPg0KPiA+Pg0KPiA+PiBGb3IgdGhlIHNlcnZlciBzaWRlLCBpbiBvcmRlciB0 byBhbGxvdyB0aGUgY2xpZW50IHRvIGZhbGwgYmFjayB0bw0KPiA+PiAoRClUTFMsIHRoZSBUVVJO IHNlcnZlciBNVVNUIHN1cHBvcnQgKEQpVExTIGF0IGxlYXN0IGZvciBvcHBvcnR1bmlzdGljDQo+ ID4+IHByaXZhY3kuIFRoaXMgZG9lc24ndCBtZWFuIHRoYXQgdGhlIHNlcnZlciBoYXMgdG8gcmVx dWlyZSAoRClUTFMuIEl0IGNhbg0KPiA+PiBzdGlsbCBhbGxvdyBmYWxsYmFjayB0byBjbGVhcnRl eHQgaWYgdGhlIGNsaWVudCBzbyBjaG9vc2VzLg0KPiA+Pg0KPiA+PiBTbywgSSBhZ3JlZSB3aXRo IHlvdSBvbiByZXZlcnRpbmcgdGhlIE1VU1QgZm9yIHRoZSBjbGllbnQsIGFzIGxvbmcgYXMgd2UN Cj4gPj4gY29udGludWUgdG8gc3Ryb25nbHkgcmVjb21tZW5kIChEKVRMUyBhcyB0aGUgZmFsbGJh Y2suIElmIHdlIGRvIHRoYXQNCj4gPj4gdGhvdWdoLCBJIHRoaW5rIHdlIG5lZWQgdG8gbWFrZSBp dCBjbGVhciB0aGF0IGEgVFVSTiBzZXJ2ZXIgY29uZmlndXJlZA0KPiA+PiB0byBhbGxvdyBzZXNz aW9ucyB3aXRob3V0IFNUVU4gYXV0aCBNVVNUIHN1cHBvcnQgKEQpVExTIHNvIHRoYXQgdGhlDQo+ ID4+IGNsaWVudCBoYXMgdGhlIG9wdGlvbiBvZiAoRClUTFMgZmFsbGJhY2suDQo+ID4+DQo+ID4+ IEkgdGhpbmsgd2UgYXJlIGFncmVlaW5nIHRvIHRoaXMgY2hhbmdlLg0KPiA+Pg0KPiA+PiBPTEQ6 DQo+ID4+DQo+ID4+ICJBIFRVUk4gY2xpZW50IE1VU1QgdXNlIChEKVRMUyBpbiB0aGUgYWJzZW5j ZSBvZiAuLi4iDQo+ID4+DQo+ID4+IE5FVzoNCj4gPj4NCj4gPj4gIkEgVFVSTiBjbGllbnQgU0hP VUxEIHVzZSAoRClUTFMgaW4gdGhlIGFic2VuY2Ugb2YgLi4uIg0KPiA+Pg0KPiA+PiBBbmQgSSBh bSBwcm9wb3NpbmcgdGhlIGFkZGl0aW9uIG9mIHRoaXMgcGFyYWdyYXBoIGF0IHRoZSBlbmQgb2Yg dGhlDQo+ID4+IHNlY3Rpb24gOSwganVzdCBiZWZvcmUgc2VjdGlvbiA5LjEuDQo+ID4+DQo+ID4+ ICJJbiBvcmRlciB0byBhbGxvdyB0aGUgVFVSTiBjbGllbnQgdG8gc2VsZWN0IGZhbGxiYWNrIHRv IChEKVRMUyBhcw0KPiA+PiBkZXNjcmliZWQgYWJvdmUsIGEgVFVSTiBzZXJ2ZXIgdGhhdCBkb2Vz IG5vdCByZXF1aXJlIGVpdGhlciBTVFVOIGxvbmcNCj4gPj4gdGVybSBhdXRoZW50aWNhdGlvbiBb UkZDNTM4OV0gb3IgU1RVTiBFeHRlbnNpb24gZm9yIFRoaXJkIFBhcnR5DQo+ID4+IEF1dGhvcml6 YXRpb24gW1JGQzc2MzVdIE1VU1Qgc3VwcG9ydCAoRClUTFMuIFN1Y2ggYSBUVVJOIHNlcnZlciBN QVkNCj4gYWxzbw0KPiA+PiBhbGxvdyBmYWxsYmFjayB0byBjbGVhciB0ZXh0LiINCj4gPg0KPiA+ IFsxXSBJIGFncmVlIHdpdGggdGhlIGFib3ZlIHRleHQgZXhjZXB0IGZvciB0aGUgbGFzdCBsaW5l IGluIHRoZSBhYm92ZQ0KPiBwYXJhZ3JhcGguIElmIHRoZSBUVVJOIHNlcnZlciBhbGxvd3MgZmFs bGJhY2sgdG8gY2xlYXIgdGV4dCB0aGVuIHRoZSBhdHRhY2tlcg0KPiBjYW4gc3ViamVjdCB0aGUg VFVSTiBjbGllbnQgdG8gdmFyaW91cyBhdHRhY2tzLiBGb3IgZXhhbXBsZSwgYXR0YWNrZXIgc2Vu ZHMNCj4gZmFrZWQgcGVybWlzc2lvbnMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGxhdW5jaCBhdHRh Y2sgKERPUyBvciBERE9TKSBvbiB0aGUNCj4gVFVSTiBjbGllbnQgYW5kIGl0IG51bGxpZmllcyB0 aGUgc2VjdXJpdHkgYmVuZWZpdHMgb2ZmZXJlZCBieSBDcmVhdGVQZXJtaXNzaW9uLg0KPiBUaGUg dmljdGltIGluIHRoaXMgbW9kZSBpcyB0aGUgVFVSTiBjbGllbnQgYW5kIG5vdCB0aGUgVFVSTiBz ZXJ2ZXIsIGFuZCBoZW5jZQ0KPiBpdCBpcyBtb3JlIGltcG9ydGFudCBmb3IgdGhlIGNsaWVudCB0 byB1c2UgKEQpVExTIHRvIHByb3RlY3QgaXRzZWxmIGZyb20gYXR0YWNrcy4NCj4gPg0KPiA+IFdo ZW4gdGhlcmUgaXMgYSBwb3NzaWJpbGl0eSB0aGF0IGluIGNsZWFyIHRleHQgbW9kZSB0aGUgVFVS TiBjbGllbnRzIGNhbiBiZQ0KPiBzdWJqZWN0ZWQgdG8gdmFyaW91cyBhdHRhY2tzLCB3aHkgd291 bGQgYW4gVFVSTiBzZXJ2ZXIgYWRtaW5pc3RyYXRvciB3YW50IHRvDQo+IGFsbG93IGZhbGxiYWNr IHRvIGNsZWFyIHRleHQgID8NCj4gPg0KPiA+IFsyXSBBbmQgd2hhdCBwcm9ibGVtcyBkbyB5b3Ug c2VlIHdpdGggdGhlIGZvbGxvd2luZyBuZXcgcHJvcG9zZWQgdGV4dCA/DQo+ID4gIkluIHRoZSBh YnNlbmNlIG9mIFNUVU4gbG9uZy10ZXJtIGNyZWRlbnRpYWwgbWVjaGFuaXNtIFtSRkM1Mzg5XSBv ciBTVFVODQo+IEV4dGVuc2lvbiBmb3IgVGhpcmQtUGFydHkgQXV0aG9yaXphdGlvbiBbUkZDNzYz NV0sIGEgVFVSTiBjbGllbnQgTVVTVCB1c2UNCj4gKEQpVExTIGFuZCBpZiAoRClUTFMgYXV0aGVu dGljYXRpb24gdG8gdmFsaWRhdGUgdGhlIFRVUk4gc2VydmVyIGlkZW50aXR5IGlzIG5vdA0KPiBw b3NzaWJsZSB0aGVuIHRoZSBUVVJOIGNsaWVudCBNVVNUIGZhbGxiYWNrIHRvIGVuY3J5cHRpb24t b25seSAoRClUTFMuIg0KPiA+DQo+ID4gLVRpcnUNCj4gPg0KPiA+Pg0KPiA+PiAtLUJyYW5kb24N Cj4gPj4NCj4gPj4gT24gMTIvMDUvMjAxNiAxMTo1OSBBTSwgS2FybCBTdGFobCB3cm90ZToNCj4g Pj4+IEFsbCBJIHdhbnQgdG8gZG8gaW4gdGhlIChEKVRMUyBkaXNjdXNzaW9uIGlzIHRvIGRlbGV0 ZSB0aGUgc2VudGVuY2Ug4oCcQQ0KPiA+Pj4gVFVSTiBjbGllbnQgTVVTVCB1c2UgKEQpVExTIGlu IHRoZSBhYnNlbmNlIG9mIFNUVU4gbG9uZy10ZXJtIGNyZWRlbnRpYWwNCj4gPj4+IG1lY2hhbmlz bSBbUkZDNTM4OV0gb3IgU1RVTiBFeHRlbnNpb24gZm9yIFRoaXJkLVBhcnR5IEF1dGhvcml6YXRp b24NCj4gPj4+IFtSRkM3NjM1XS7igJ0gdW5kZXIgOS4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25z dGhhdCB3YXMgdGhyb3duLWludG8NCj4gPj4+IHZlcnNpb24gLTEwIGR1cmluZyB0aGUgZGlzY3Vz cy4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICoqV2UgbGVhdmUgYWxsIHRoZSByZXN0IHJl Z2FyZGluZyAoRClUTFMgYXMgaXQgaGFzIGJlZW4gc2luY2UgdmVyc2lvbiAtNw0KPiA+Pj4gb2Yg dGhpcyBkcmFmdC4qKg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiBC cmFuZG9uLA0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gSSBzZWUgdGhlcmUgYWxyZWFkeSBh cmUgdGhlIChnZW5lcmFsKSBTSE9VTEQgb3IgUkVDT01NRU5EIHRoYXQgeW91DQo+ID4+PiB3YW50 ZWQgKEkgZGlkIG5vdCBzdWdnZXN0IHRvIGNoYW5nZSB0aG9zZSDigJMgdGhleSBhcmUgdGhlcmUg c2luY2UgdmVyc2lvbg0KPiA+Pj4gLTcgSSBiZWxpZXZlKTog4oCcSXQgaXMgUkVDT01NRU5ERUQg dGhhdCB0aGUgVFVSTiBjbGllbnQgdXNlIG9uZSBvZiB0aGUNCj4gPj4+IGZvbGxvd2luZyB0ZWNo bmlxdWVzIHdpdGggKEQpVExTIHRvIHZhbGlkYXRlIHRoZSBUVVJOIHNlcnZlcjrigJ0gYW5kDQo+ IGZ1cnRoZXLigKYNCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gZm9y IFRpcnUsIHRoaXMgaXMgYWxyZWFkeSBpbiB0aGUgZHJhZnQgc2luY2UgLTcgYW5kIEkgYW0gbm90 IHN1Z2dlc3RpbmcNCj4gPj4+IHRvIGNoYW5nZSB0aGF0Og0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0K PiA+Pj4g4oCcICAgQW4gYXV0by1kaXNjb3ZlcmVkIFRVUk4gc2VydmVyIGlzIGNvbnNpZGVyZWQg dG8gYmUgb25seSBhcyB0cnVzdGVkIGFzDQo+ID4+Pg0KPiA+Pj4gICAgdGhlIHBhdGggYmV0d2Vl biB0aGUgY2xpZW50IGFuZCB0aGUgVFVSTiBzZXJ2ZXIuICBJbiBvcmRlciB0byBzYWZlbHkNCj4g Pj4+DQo+ID4+PiAgICB1c2UgYXV0by1kaXNjb3ZlcmVkIFRVUk4gc2VydmVycyBmb3Igc2Vzc2lv bnMgd2l0aCAnc3RyaWN0IHByaXZhY3knDQo+ID4+Pg0KPiA+Pj4gICAgcmVxdWlyZW1lbnRzLCB0 aGUgdXNlciBuZWVkcyB0byBiZSBhYmxlIHRvIGRlZmluZSBwcml2YWN5IGNyaXRlcmlhDQo+ID4+ Pg0KPiA+Pj4gICAgKGUuZy4gIGEgdHJ1c3RlZCBsaXN0IG9mIHNlcnZlcnMsIG5ldHdvcmtzLCBv ciBkb21haW5zKSB0aGF0IGFyZQ0KPiA+Pj4NCj4gPj4+ICAgIGNvbnNpZGVyZWQgYWNjZXB0YWJs ZSBmb3Igc3VjaCB0cmFmZmljLiAgQW55IGRpc2NvdmVyZWQgVFVSTiBzZXJ2ZXINCj4gPj4+DQo+ ID4+PiAgICBvdXRzaWRlIHRoZSBjcml0ZXJpYSBpcyBjb25zaWRlcmVkIHVudHJ1c3RlZCBhbmQg dGhlcmVmb3JlIE1VU1QgTk9UDQo+ID4+Pg0KPiA+Pj4gICAgYmUgdXNlZCBmb3IgcHJpdmFjeSBz ZW5zaXRpdmUgY29tbXVuaWNhdGlvbi4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgIElu IHNvbWUgYXV0by1kaXNjb3Zlcnkgc2NlbmFyaW9zLCBpdCBtaWdodCBub3QgYmUgcG9zc2libGUg Zm9yIHRoZQ0KPiA+Pj4NCj4gPj4+ICAgIFRVUk4gY2xpZW50IHRvIHVzZSAoRClUTFMgYXV0aGVu dGljYXRpb24gdG8gdmFsaWRhdGUgdGhlIFRVUk4gc2VydmVyLg0KPiA+Pj4NCj4gPj4+ICAgIEhv d2V2ZXIsIGZhbGwtYmFjayB0byBjbGVhciB0ZXh0IGluIHN1Y2ggY2FzZXMgY291bGQgbGVhdmUg dGhlIFRVUk4NCj4gPj4+DQo+ID4+PiAgICBjbGllbnQgb3BlbiB0byBvbi1wYXRoIGluamVjdGlv biBvZiBzcG9vZmVkIFRVUk4gbWVzc2FnZXMuICBJbnN0ZWFkLA0KPiA+Pj4NCj4gPj4+ICAgIHdp dGggYW4gZXhwbGljaXQgYWRtaW5pc3RyYXRvciBjaG9pY2UsIGEgVFVSTiBjbGllbnQgU0hPVUxE IGZhbGwtYmFjaw0KPiA+Pj4NCj4gPj4+ICAgIHRvIGVuY3J5cHRpb24tb25seSAoRClUTFMgd2hl biAoRClUTFMgYXV0aGVudGljYXRpb24gaXMgbm90DQo+ID4+Pg0KPiA+Pj4gICAgYXZhaWxhYmxl LiAgQW5vdGhlciByZWFzb24gdG8gZmFsbC1iYWNrIHRvIGVuY3J5cHRpb24tb25seSBpcyBmb3IN Cj4gPj4+DQo+ID4+PiAgICBwcml2YWN5LCB3aGljaCBpcyBhbmFsb2dvdXMgdG8gU01UUCBvcHBv cnR1bmlzdGljIGVuY3J5cHRpb24NCj4gPj4+DQo+ID4+PiAgICBbUkZDNzQzNV0gd2hlcmUgb25l IGRvZXMgbm90IHJlcXVpcmUgcHJpdmFjeSBidXQgb25lIGRlc2lyZXMgcHJpdmFjeQ0KPiA+Pj4N Cj4gPj4+ICAgIHdoZW4gcG9zc2libGUuDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICBJ dCBpcyBzdWdnZXN0ZWQgdGhhdCBhIFRVUk4gY2xpZW50IGF0dGVtcHQgKEQpVExTIHdpdGggYXV0 aGVudGljYXRpb24NCj4gPj4+DQo+ID4+PiAgICBhbmQgZW5jcnlwdGlvbiwgZmFsbGluZyBiYWNr IHRvIGVuY3J5cHRpb24tb25seSBpZiB0aGUgVFVSTiBzZXJ2ZXINCj4gPj4+DQo+ID4+PiAgICBj YW5ub3QgYmUgYXV0aGVudGljYXRlZCB2aWEgKEQpVExTLiAgQSBUVVJOIGNsaWVudCBjb3VsZCBm YWxsIGJhY2sgdG8NCj4gPj4+DQo+ID4+PiAgICBjbGVhciB0ZXh0LCB3aXRoIGFuIGV4cGxpY2l0 IGFkbWluaXN0cmF0b3IgY2hvaWNlLCBpZiBpdCBkb2VzIG5vdA0KPiA+Pj4NCj4gPj4+ICAgIHN1 cHBvcnQgdW5hdXRoZW50aWNhdGVkIChEKVRMUywgYnV0IGZhbGxiYWNrIHRvIGNsZWFyIHRleHQg aXMgTk9UDQo+ID4+Pg0KPiA+Pj4gICAgUkVDT01NRU5ERUQgYmVjYXVzZSBpdCBtYWtlcyB0aGUg Y2xpZW50IG1vcmUgc3VzY2VwdGlibGUgdG8gbWFuLQ0KPiBpbi0NCj4gPj4+DQo+ID4+PiAgICB0 aGUtbWlkZGxlIGF0dGFja3MgYW5kIG9uLXBhdGggcGFja2V0IGluamVjdGlvbi4NCj4gPj4+DQo+ ID4+PiDigJ0NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gKipUaXJ1 IOKAkyBCZWxvdyB5b3UgYXJlIHBvaW50aW5nIGF0IHRoZSAtMTAgdmVyc2lvbiBjaGFuZ2VzIHRo YXQgV0UgQVJFDQo+ID4+PiBkaXNjdXNzaW5nIGhlcmUuKioNCj4gPj4+DQo+ID4+Pg0KPiA+Pj4N Cj4gPj4+IFByYXNwYW50aCBwdXQgdGhlbSBvbiB0aGUgdGFibGUgYWdhaW4gYW5kIEkgYnJvdWdo dCB1cCB0aGF0IHRoZQ0KPiA+Pj4NCj4gPj4+IOKAnEEgVFVSTiBjbGllbnQgTVVTVCB1c2UgKEQp VExTIGluIHRoZSBhYnNlbmNlIG9mIFNUVU4gbG9uZy10ZXJtDQo+ID4+PiBjcmVkZW50aWFsIG1l Y2hhbmlzbSBbUkZDNTM4OV0gb3IgU1RVTiBFeHRlbnNpb24gZm9yIFRoaXJkLVBhcnR5DQo+ID4+ PiBBdXRob3JpemF0aW9uIFtSRkM3NjM1XS7igJ0NCj4gPj4+DQo+ID4+PiBtdXN0IGdvIGF3YXkg KGxlYXZlIHRoZSByZXN0KSwgc2luY2UgaXQgZWZmZWN0aXZlbHkgZm9yYmlkcyBUVVJOIHNlcnZl cnMNCj4gPj4+IHByb3ZpZGVkIGJ5IHRoZSBsb2NhbCBhbmQgYWNjZXNzIG5ldHdvcmsuDQo+ID4+ Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiBCcmFuZG9uIGhhZCBhZ3JlZWQgdGhhdCBNVVNUIHNob3Vs ZCBnbyBhd2F5LCB3aGVuIHlvdSBqdW1wZWQgaW4gd2l0aA0KPiA+PiB0aGUNCj4gPj4+IGF0dGFj a3MgYXJndW1lbnRzLCB3aGVuIHdlIHdlcmUgZGlzY3Vzc2luZyB3aGV0aGVyIHRoZXJlIHNob3Vs ZCBzdGlsbCBiZQ0KPiA+Pj4gYSBTSE9VTEQgb3IgUkVDT01NRU5ELiDigJMgVGhlbiB5b3UgZ290 IG1lIChhbmQgb3RoZXJzPykgbG9zdCwgYW5k4oCmLg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+ Pj4gU28gY2F0Y2ggdXAgZnJvbSBwb2ludCAoMSkgb2YgbXk6DQo+ID4+Pg0KPiA+Pj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDIyMTYuaHRt bA0KPiA+Pj4gPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRw cy0NCj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pg0KPiAyRGFyY2hpdmVfd2ViX3RyYW1f Y3VycmVudF9tc2cwMjIxNi5odG1sJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4gPj4gdzBGNGpw TjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4gTlNuc2d3YkJWVUphNG1aZm1FSUJY ZyZtPUxYYUgtDQo+ID4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9 TnRSWndybW4ySy0NCj4gPj4gV1VJX1FONWtfeUhsQU4tdXpob1FVOGJzMnlBX1JCUDgmZT0+DQo+ ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gQW5kIHlvdSBtYXkgbm90aWNlIHRoYXQg aW4NCj4gPj4+DQo+IGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvdHJhbS8z c3ZPOWRqRnhlWnlUdE5zZ3FRZjh6Q1RpVlkNCj4gPj4+IDxodHRwczovL3VybGRlZmVuc2UucHJv b2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+DQo+IDNBX19tYWlsYXJjaGl2ZS5pZXRm Lm9yZ19hcmNoX21zZ190cmFtXzNzdk85ZGpGeGVaeVR0TnNncVFmOHpDVGlWWSZkPQ0KPiA+PiBE Z01GYVEmYz05NlpiWlpjYU1GNHcwRjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ ID4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+PiBNVlFpMmxWYkVfczR1bHg0 aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPVNManlzd2RuLQ0KPiA+PiBvWl9hZXYwcFJ4RDNoNmM0 YUtiRVFaM2Nfa0w5X2NjSEdNJmU9Pg0KPiA+Pj4gdGhhdCB5b3UgcmVmZXJyZWQgdG8NCj4gPj4+ DQo+ID4+PiDigJxNYWtpbmcgU1RVTiBhdXRoZW50aWNhdGlvbiBPUFRJT05BTOKAnQ0KPiA+Pj4N Cj4gPj4+IGlzIEFMUkVBRFkgQ09NUEVOU0FURUQgZm9yIGJ5IOKAnElQIGFkZHJlc3MgYXV0aGVu dGljYXRpb27igJ0gKHRoZQ0KPiA+Pj4gZm91bmRhdGlvbiBvZiB0b2RheeKAmXMgSVAgdGVsZXBo b255IGF1dGhlbnRpY2F0aW9uKToNCj4gPj4+DQo+ID4+PiDigJxBIFRVUk4gc2VydmVyIGluIHN1 Y2ggY2FzZXMgbXVzdCBiZSBjb25maWd1cmVkIHRvIG9ubHkgcHJvY2VzcyBTVFVODQo+ID4+Pg0K PiA+Pj4gICAgcmVxdWVzdHMgZnJvbSB0aGUgdHJ1c3RlZCBsb2NhbCBuZXR3b3JrIG9yIHN1YnNj cmliZXJzIG9mIHRoZSBhY2Nlc3MNCj4gPj4+DQo+ID4+PiAgICBuZXR3b3JrLiBPcGVyYXRpb25h bCBtZWFzdXJlcyBtdXN0IGJlIHRha2VuIGluIG9yZGVyIHByb3RlY3QgdGhlDQo+ID4+Pg0KPiA+ Pj4gICAgVFVSTiBzZXJ2ZXI7IHNvbWUgb2YgdGhlc2UgbWVhc3VyZXMgaW5jbHVkZSwgYnV0IG5v dCBsaW1pdGVkIHRvLA0KPiA+Pj4NCj4gPj4+ICAgIGFjY2VzcyBjb250cm9sIGJ5IG1lYW5zIG9m IGFjY2Vzcy1saXN0cywgZmlyZXdhbGxzLCBzdWJzY3JpYmVyIHF1b3RhDQo+ID4+Pg0KPiA+Pj4g ICAgbGltaXRzLCBpbmdyZXNzIGZpbHRlcmluZyBldGMu4oCdDQo+ID4+Pg0KPiA+Pj4gd2hlcmUg 4oCdZmlyZXdhbGxz4oCdIHNwZWNpZmljYWxseSBhcHBsaWVzIHRvIFRVUk4gc2VydmVycyB0aGF0 IGxvY2FsIG9yDQo+ID4+PiBhY2Nlc3MgbmV0d29yayBwcm92aWRlcnMgYWxsb3cgb25seSB0aGVp ciBvd24gdXNlcnMgdG8gYWNjZXNzLg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gQW5kIEF1 dGhvcuKAmXM6IOKAnFBsZWFzZSByZWZlcg0KPiA+Pj4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnktDQo+IDEwI3NlY3Rpb24t DQo+ID4+IDkNCj4gPj4+IDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJs P3U9aHR0cHMtDQo+ID4+IDNBX190b29scy5pZXRmLm9yZ19odG1sX2RyYWZ0LTJEaWV0Zi0yRHRy YW0tMkR0dXJuLTJEc2VydmVyLQ0KPiAyRGRpc2NvdmVyeS0NCj4gPj4gMkQxMC0yM3NlY3Rpb24t MkQ5JmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZyPWJ3Wi0NCj4gPj4gbm5SR1dt Y0dLUkl1YWRxNi1OU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4NCj4gTVZRaTJs VmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1iMGZKMUFOcWhFOEMyQnJsbkdZM2lX DQo+ID4+IEN3VkVyMk9oWXlGbEVfX29PSHRTRSZlPT5mb3INCj4gPj4+IG1vcmUgZGV0YWlscy7i gJ0NCj4gPj4+DQo+ID4+PiBhbHJlYWR5IChzaW5jZSB2ZXJzaW9uIC03IEkgdGhpbmspIGluIGRl dGFpbCBkaXNjdXNzZXMgdGhlIChEKVRMUw0KPiA+Pj4gaW1wbGljYXRpb25zIGluIHRoaXMgY29u dGV4dCAodGhhdCB5b3UgYXJlIHJlZG9pbmcpLg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4g UGxlYXNlLCBhZ2FpbiwgbGV0IHVzIHN0YXkgd2l0aCB0aGUgY29uc2Vuc3VzIHNpbmNlIHZlcnNp b24gLTcgb2YgdGhpcw0KPiA+Pj4gZHJhZnQ6IE5vIChEKVRMUyBtYW5kYXRlLg0KPiA+Pj4NCj4g Pj4+DQo+ID4+Pg0KPiA+Pj4gVGhhbmtzLA0KPiA+Pj4NCj4gPj4+IEthcmwNCj4gPj4+DQo+ID4+ Pg0KPiA+Pj4NCj4gPj4+ICpGcsOlbjoqVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSBbbWFp bHRvOnRpcmVkZHlAY2lzY28uY29tXQ0KPiA+Pj4gKlNraWNrYXQ6KiBkZW4gNCBkZWNlbWJlciAy MDE2IDA4OjMzDQo+ID4+PiAqVGlsbDoqIFBhbCBNYXJ0aW5zZW4gKHBhbG1hcnRpKTsgS2FybCBT dGFobDsgdHJhbSBtYWlsaW5nIGxpc3QNCj4gPj4+ICpLb3BpYToqIEJyYW5kb24gV2lsbGlhbXM7 IFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkpOw0KPiA+Pj4gdHJhbS1jaGFpcnNAaWV0Zi5vcmcg PG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47IERhbiBXaW5nOyBTcGVuY2VyDQo+ID4+PiBE YXdraW5zIGF0IElFVEYNCj4gPj4+ICrDhG1uZToqIFJFOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFt LXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gUHJhc2hh bnRoIGhhcyBhbHJlYWR5IHN1bW1hcml6ZWQgdGhlIGNoYW5nZXMgZG9uZSB0byBkcmFmdCBkdXJp bmcgSVNFRw0KPiA+Pj4gcmV2aWV3IGluDQo+ID4+Pg0KPiBodHRwczovL21haWxhcmNoaXZlLmll dGYub3JnL2FyY2gvbXNnL3RyYW0vM3N2TzlkakZ4ZVp5VHROc2dxUWY4ekNUaVZZDQo+ID4+PiA8 aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+Pg0K PiAzQV9fbWFpbGFyY2hpdmUuaWV0Zi5vcmdfYXJjaF9tc2dfdHJhbV8zc3ZPOWRqRnhlWnlUdE5z Z3FRZjh6Q1RpVlkmZD0NCj4gPj4gRGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZyPWJ3 Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0N Cj4gPj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1TTGp5c3dkbi0N Cj4gPj4gb1pfYWV2MHBSeEQzaDZjNGFLYkVRWjNjX2tMOV9jY0hHTSZlPT4NCj4gPj4+DQo+ID4+ Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiBLYXJs4oCZcyBjb21tZW50IGlzIHRvIG5vdCBtYW5kYXRl IChEKVRMUywgYW5kIHdlIGRvbuKAmXQgYWdyZWUgd2l0aCBoaW0uDQo+ID4+Pg0KPiA+Pj4NCj4g Pj4+DQo+ID4+PiBSZXF1ZXN0IHlvdSwgV0cgbWVtYmVycywgV0cgY2hhaXJzIGFuZCBBRCB0byBz aGFyZSB0aGVpciB0aG91Z2h0cyBvbg0KPiA+Pj4gbWFuZGF0aW5nIHRoZSB1c2Ugb2YgKEQpVExT IHdoZW4gU1RVTiBhdXRoZW50aWNhdGlvbiBpcyBub3QgdXNlZCB0bw0KPiA+Pj4gaGFuZGxlIHRo ZSB0aHJlYXRzIGRpc2N1c3NlZCBpbiBSRkM1NzY2Lg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+ Pj4gLVRpcnUNCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICpGcm9tOipQYWwgTWFydGluc2Vu IChwYWxtYXJ0aSkNCj4gPj4+ICpTZW50OiogRnJpZGF5LCBEZWNlbWJlciAyLCAyMDE2IDExOjI3 IFBNDQo+ID4+PiAqVG86KiBLYXJsIFN0YWhsIDxrYXJsLnN0YWhsQGluZ2F0ZS5jb20gPG1haWx0 bzprYXJsLnN0YWhsQGluZ2F0ZS5jb20+PjsNCj4gPj4+IHRyYW0gbWFpbGluZyBsaXN0IDx0cmFt QGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4+DQo+ID4+PiAqQ2M6KiBUaXJ1bWFsZXN3 YXIgUmVkZHkgKHRpcmVkZHkpIDx0aXJlZGR5QGNpc2NvLmNvbQ0KPiA+Pj4gPG1haWx0bzp0aXJl ZGR5QGNpc2NvLmNvbT4+OyBCcmFuZG9uIFdpbGxpYW1zDQo+ID4+PiA8YnJhbmRvbi53aWxsaWFt c0Bha2FtYWkuY29tDQo+IDxtYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tPj47DQo+ ID4+PiBQcmFzaGFudGggUGF0aWwgKHByYXNwYXRpKSA8cHJhc3BhdGlAY2lzY28uY29tDQo+ID4+ PiA8bWFpbHRvOnByYXNwYXRpQGNpc2NvLmNvbT4+OyB0cmFtLWNoYWlyc0BpZXRmLm9yZw0KPiA+ Pj4gPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47IERhbiBXaW5nIDxkYW5AZGFud2luZy5v cmcNCj4gPj4+IDxtYWlsdG86ZGFuQGRhbndpbmcub3JnPj47IFNwZW5jZXIgRGF3a2lucyBhdCBJ RVRGDQo+ID4+PiA8c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20NCj4gPj4gPG1haWx0bzpz cGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+DQo+ID4+PiAqU3ViamVjdDoqIFJlOiBbdHJh bV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPiA+Pj4NCj4gPj4+DQo+ ID4+Pg0KPiA+Pj4gSGkgS2FybCAoYW5kIHRyYW1zdGVycyksDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ DQo+ID4+PiBJIGFtIHN5bXBhdGhldGljIHRvIHlvdXIgYXJndW1lbnRzIGJ1dCB0aGV5IG1pZ2h0 IGhhdmUgYmVlbiBsb3N0DQo+ID4+PiBzb21ld2hlcmUgaW4gdGhlIGVtYWlsIHRocmVhZCAoQSBt aXggb2YgcXVvdGluZywgcmVwZWF0aW5nIGFuZCBpbmxpbmUNCj4gPj4+IGNvbW1lbnRpbmcgaGF2 ZSBhdCBsZWFzdCBtYWRlIG15IGVtYWlsIGNsaWVudCBzb21ld2hhdCBjb25mdXNlZC4pDQo+ID4+ Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiBUaGUgYmVzdCB0aGluZyB5b3UgY2FuIGRvIGF0IHRoaXMg bW9tZW50IGlzIHRvIHByb3ZpZGUgdGV4dC4gSSBzdWdnZXN0DQo+ID4+PiB5b3Ugd3JpdGUgdXAg YSBkcmFmdCBhcyBhIGNvdW50ZXIgcHJvcG9zYWwgYW5kIHN1Ym1pdCBpdC4gSW4gdGhhdCB3YXkN Cj4gPj4+IHRoZSBXRyBtZW1iZXJzIGNhbiByZWFkIHRocm91Z2ggYW5kIGNvbW1lbnQuDQo+ID4+ Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiBJIGVuY291cmFnZSB0aGUgV0cgY2hhaXJzIHRvIGdpdmUg S2FybCBlbm91Z2ggdGltZSB0byB3cml0ZSB0aGlzIHVwLA0KPiA+Pj4gYmVmb3JlIHByb2dyZXNz aW5nIHRoZSBvdGhlciBkcmFmdC4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0K PiA+Pj4gLi0uDQo+ID4+Pg0KPiA+Pj4gUMOlbC1FcmlrDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ ID4+PiAgICAgT24gMiBEZWMgMjAxNiwgYXQgMDk6MzgsIEthcmwgU3RhaGwgPGthcmwuc3RhaGxA aW5nYXRlLmNvbQ0KPiA+Pj4gICAgIDxtYWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29tPj4gd3Jv dGU6DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgSGkgVGlydSwNCj4gPj4+DQo+ID4+ Pg0KPiA+Pj4NCj4gPj4+ICAgICBJIGFtIHRyeWluZyB0byBtYWtlIHRoZSBwb2ludCB0aGF0IHRo ZXJlIGlzIG5vIG9wdGlvbiBmb3IgdGhpcw0KPiA+Pj4gICAgIGRyYWZ0LCBzdXBwb3NlZCB0byBm dWxmaWxsOg0KPiA+Pj4NCj4gPj4+ICAgICAqW3RyYW1dIE1pbGVzdG9uZSAzOiBUVVJOIHNlcnZl ciBhdXRvLWRpc2NvdmVyeSBtZWNoYW5pc20gZm9yDQo+ID4+PiAgICAgZW50ZXJwcmlzZSBhbmQg SVNQcyoNCj4gPj4+DQo+ID4+PiAgICAgdG8gcmVzdWx0IGluOiDigJxXZSBmb3JiaWQgdXNhZ2Ug b2Ygc3VjaCAoeWVsbG93KSBuZXR3b3JrIHByb3ZpZGVkDQo+ID4+PiAgICAgVFVSTiBzZXJ2ZXJz ICh1c2UgZ3JheSBvciBncmF5aXNoIFRVUk4gc2VydmVycyBpbnN0ZWFkKeKAnSwgIHdoaWNoIGlz DQo+ID4+PiAgICAgdGhlIGNvbnNlcXVlbmNlIG9mIG1hbmRhdGluZyAoRClUTFMuDQo+ID4+Pg0K PiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgU2ltcGx5IGxlYXZlIHRoZSBjb25zZW5zdXMgc2luY2Ug dmVyc2lvbiAtNyBvZiB0aGlzIGRyYWZ0IGJ5DQo+ID4+PiAgICAgcmVtb3ZpbmcgdGhlIChEKVRM UyBtYW5kYXRpbmcgZm9yIFRVUk4gc2VydmVycyBwcm92aWRlZCBieSAgdGhlDQo+ID4+PiAgICAg bG9jYWwgb3IgYWNjZXNzIG5ldHdvcmsgdGhyb3duLWluIGR1cmluZyB0aGUgZGlzY3Vzcy4NCj4g Pj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICAvS2FybA0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0K PiA+Pj4gICAgIFBTOiBJIGJlbGlldmUgdGhlIGF0dGFjayBkaXNjdXNzaW9uIGJlbG93IGlzIGFs cmVhZHkgZG9uZSwgYW5kIHRoYXQNCj4gPj4+ICAgICB5b3UgYXJlIHdyb25nIGluIHRoaW5raW5n IHRoYXQgYXV0aGVudGljYXRpb24gd2hpY2ggcHJvdGVjdHMgYWdhaW5zdA0KPiA+Pj4gICAgIHNw b29mIGF0dGFja3MgY2FuIGJlIGV4Y2hhbmdlZCBmb3IgZW5jcnlwdGlvbiwgYW5kIHRoYXQgYW55 IG9mIHRoZXNlDQo+ID4+PiAgICAgdGhpbmdzIHByb3RlY3RzIGFnYWluc3QgRERPUyBhdHRhY2tz IC4gVGhlc2Ugc2VjdXJpdHkgdGhpbmdzIGFkZHJlc3MNCj4gPj4+ICAgICBkaWZmZXJlbnQgdGhp bmdzIGFuZCBhcmUgbm90IGludGVyY2hhbmdlYWJsZSwgbm9yIGFyZSB0aGV5IHVuaXZlcnNhbA0K PiA+Pj4gICAgIG1lYW5zIGFnYWluc3QgYXR0YWNrcyBvZiB2YXJpb3VzIGtpbmRzLg0KPiA+Pj4N Cj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIEFuZCB0aGUgb3V0Y29tZSBvZiBhbnkgc3VjaCBkaXNj dXNzaW9uIGRvZXNu4oCZdCBjaGFuZ2UgdGhlIGFib3ZlLg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0K PiA+Pj4gICAgIFBsZWFzZSBub3RlIChzb3JyeSB0byByZXBlYXQpICB0aGF0IGZvciB0aGUgcHVy cG9zZSBvZiBnZXR0aW5nIGENCj4gPj4+ICAgICBiZXR0ZXIgcGF0aCBmb3IgcmVhbC10aW1lIHRy YWZmaWMgdGhhbiB0aHJvdWdoIHRoZSBkZWZhdWx0IGdhdGV3YXkNCj4gPj4+ICAgICBwYXRoLCB3 ZSBjYW5ub3QgZXhwZWN0IHRvIGFsc28gZ2V0IGEgaGlnaGVyIHNlY3VyaXR5IG9yIHRydXN0IGxl dmVsLA0KPiA+Pj4gICAgIG5vciB0byByZXNvbHZlIGV2ZXJ5IHByb2JsZW0gaW4gdGhlIHdvcmxk Lg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgKkZyw6VuOiog VGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSBbbWFpbHRvOnRpcmVkZHlAY2lzY28uY29tXQ0K PiA+Pj4gICAgICpTa2lja2F0OiogZGVuIDI4IG5vdmVtYmVyIDIwMTYgMTA6NTMNCj4gPj4+ICAg ICAqVGlsbDoqIEthcmwgU3RhaGw7ICdCcmFuZG9uIFdpbGxpYW1zJzsgUHJhc2hhbnRoIFBhdGls DQo+ID4+PiAgICAgKHByYXNwYXRpKTsgdHJhbUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5v cmc+DQo+ID4+PiAgICAgKktvcGlhOiogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFt LWNoYWlyc0BpZXRmLm9yZz47ICdEYW4NCj4gPj4+ICAgICBXaW5nJzsgJ1NwZW5jZXIgRGF3a2lu cyBhdCBJRVRGJw0KPiA+Pj4gICAgICrDhG1uZToqIFJFOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFt LXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIEhp IEthcmwsDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgWWVzLCBJIGFtIGRpc2N1c3Np bmcgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IGxvY2FsIG9yIGFjY2Vzcw0KPiA+Pj4gICAgIG5l dHdvcmtzLCByZWZlcnJpbmcgdG8gaW5zaWRlIGF0dGFja3MgbGF1bmNoZWQgYnkgYXR0YWNrZXJz IGluc2lkZQ0KPiA+Pj4gICAgIHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yay4NCj4gPj4+DQo+ ID4+PiAgICAgYSlBbiBpbnNpZGUgYXR0YWNrZXIgc2VuZHMgZmFrZWQgcGVybWlzc2lvbnMgdG8g dGhlIFRVUk4gc2VydmVyIHRvDQo+ID4+PiAgICAgbGF1bmNoIGF0dGFjayAoRE9TIG9yIERET1Mp IG9uIHRoZSB2aWN0aW0gKFRVUk4gY2xpZW50KS4NCj4gPj4+DQo+ID4+PiAgICAgYilBbiBpbnNp ZGUgYXR0YWNrZXIgc2VuZHMgc3Bvb2ZlZCBUVVJOIHJlcXVlc3RzIHRvIHRoZSBUVVJOIHNlcnZl cg0KPiA+Pj4gICAgIHRvIGNsb3NlIGFsbG9jYXRpb25zLg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0K PiA+Pj4gICAgIEJvdGggYWJvdmUgYXR0YWNrcyBjYW4gYmUgcHJldmVudGVkIGJ5IHVzaW5nIG9w cG9ydHVuaXN0aWMNCj4gPj4+ICAgICBlbmNyeXB0aW9uIHdpdGggKEQpVExTLg0KPiA+Pj4NCj4g Pj4+DQo+ID4+Pg0KPiA+Pj4gICAgIC1UaXJ1DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAg ICAgKkZyb206KiB0cmFtIFttYWlsdG86dHJhbS1ib3VuY2VzQGlldGYub3JnXSAqT24gQmVoYWxm IE9mICpLYXJsIFN0YWhsDQo+ID4+PiAgICAgKlNlbnQ6KiBNb25kYXksIE5vdmVtYmVyIDI4LCAy MDE2IDI6NDkgUE0NCj4gPj4+ICAgICAqVG86KiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkp IDx0aXJlZGR5QGNpc2NvLmNvbQ0KPiA+Pj4gICAgIDxtYWlsdG86dGlyZWRkeUBjaXNjby5jb20+ PjsgJ0JyYW5kb24gV2lsbGlhbXMnDQo+ID4+PiAgICAgPGJyYW5kb24ud2lsbGlhbXNAYWthbWFp LmNvbQ0KPiA+PiA8bWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbT4+Ow0KPiA+Pj4g ICAgIFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkpIDxwcmFzcGF0aUBjaXNjby5jb20NCj4gPj4+ ICAgICA8bWFpbHRvOnByYXNwYXRpQGNpc2NvLmNvbT4+OyB0cmFtQGlldGYub3JnIDxtYWlsdG86 dHJhbUBpZXRmLm9yZz4NCj4gPj4+ICAgICAqQ2M6KiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFp bHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0RhbiBXaW5nJw0KPiA+Pj4gICAgIDxkYW5AZGFu d2luZy5vcmcgPG1haWx0bzpkYW5AZGFud2luZy5vcmc+PjsgJ1NwZW5jZXIgRGF3a2lucyBhdA0K PiA+Pj4gICAgIElFVEYnIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbQ0KPiA+Pj4gICAg IDxtYWlsdG86c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20+Pg0KPiA+Pj4gICAgICpTdWJq ZWN0OiogUmU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+ ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgSGkgVGlydSwNCj4gPj4+DQo+ID4+Pg0KPiA+ Pj4NCj4gPj4+ICAgICBOb3cgSSBkb27igJl0IGtub3cgd2hlcmUgeW91IGFyZSBhZ2Fpbi4NCj4g Pj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICBBcmUgeW91IGRpc2N1c3NpbmcgVFVSTiBzZXJ2 ZXJzIHByb3ZpZGVkIGJ5IHRoZSBsb2NhbCBvciBhY2Nlc3MNCj4gPj4+ICAgICBuZXR3b3JrICh0 aGUgeWVsbG93IFRVUk4gc2VydmVycyksIHRoYXQgYXJlIHJlbGVhc2VkIGZyb20NCj4gPj4+ICAg ICBhdXRoZW50aWNhdGlvbiAobm8gZGlzcHV0ZSB0aGVyZSksIGJ1dCBmb3Igd2hpY2ggKEQpVExT IG1hbmRhdGUgd2FzDQo+ID4+PiAgICAgdGhyb3duIGluLWR1cmluZyB0aGUgZGlzY3VzcyAobWFr aW5nIHRoZW0gZ3JheSk/IFRoYXQgaXMgdGhlDQo+ID4+PiAgICAgc2hvd3N0b3BwZXIgdGhhdCBt dXN0IGdvIGF3YXkuDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgU29tZSBjb21tZW50 cyBiZWxvdy4gSG9wZSB3ZSBhZ3JlZSAgdGhlIGJlbG93IGRvZXMgbm90IHJlbGF0ZSB0bw0KPiB0 aGUNCj4gPj4+ICAgICB5ZWxsb3cgVFVSTiBzZXJ2ZXIuDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ ID4+PiAgICAgL0thcmwNCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICAqRnLDpW46KiBU aXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIFttYWlsdG86dGlyZWRkeUBjaXNjby5jb21dDQo+ ID4+PiAgICAgKlNraWNrYXQ6KiBkZW4gMjggbm92ZW1iZXIgMjAxNiAwNDowMg0KPiA+Pj4gICAg ICpUaWxsOiogS2FybCBTdGFobDsgJ0JyYW5kb24gV2lsbGlhbXMnOyBQcmFzaGFudGggUGF0aWwN Cj4gPj4+ICAgICAocHJhc3BhdGkpOyB0cmFtQGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9y Zz4NCj4gPj4+ICAgICAqS29waWE6KiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0t Y2hhaXJzQGlldGYub3JnPjsgJ0Rhbg0KPiA+Pj4gICAgIFdpbmcnOyAnU3BlbmNlciBEYXdraW5z IGF0IElFVEYnDQo+ID4+PiAgICAgKsOEbW5lOiogUkU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0t dHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgSGkg S2FybCwNCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICBObywgSSBkb27igJl0IGFncmVl IHRoYXQgKEQpVExTIGlzIG5vdCBtYW5kYXRvcnkuIE9wcG9ydHVuaXN0aWMNCj4gPj4+ICAgICBl bmNyeXB0aW9uIGlzIG5vdCBuZXcuIEl04oCZcyBkaXNjdXNzZWQgaW4gUkZDNzQzNSwgYW5kIHVz ZWQgaW4gVENQDQo+ID4+PiAgICAgaW5jcmVhc2VkIHNlY3VyaXR5IChUQ1BJTkMgV0cpIGFuZCBE TlMgcHJpdmFjeSBleGNoYW5nZSAoRFBSSVZFDQo+IFdHKS4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4N Cj4gPj4+ICAgICBIb3cgZG8geW91IHByb3Bvc2UgdG8gaGFuZGxlIHRoZSBmb2xsb3dpbmcgcGFz c2l2ZSBhdHRhY2tzIHdpdGhvdXQNCj4gPj4+ICAgICAoRClUTFMgb3IgU1RVTiBhdXRoZW50aWNh dGlvbiA/DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgYSkgaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL3JmYzU3NjYjc2VjdGlvbi0xNy4yLjENCj4gPj4+ICAgICA8aHR0cHM6Ly91 cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+PiAzQV9fdG9vbHMu aWV0Zi5vcmdfaHRtbF9yZmM1NzY2LTIzc2VjdGlvbi0NCj4gPj4gMkQxNy4yLjEmZD1EZ01GYVEm Yz05NlpiWlpjYU1GNHcwRjRqcE42TFpnJnI9YndaLQ0KPiA+PiBublJHV21jR0tSSXVhZHE2LU5T bnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0aG5o RW9tWGhRSzd4UUVpa3pBdXBSOCZzPXlUVFlLZ29yMl9hakhlN0tQXzRCem5sDQo+ID4+IEcxRWFt dUl5X0s3YWswVTQwUmJNJmU9PiwNCj4gPj4+ICAgICB3aGVyZSBhdHRhY2tlciBzZW5kcyBmYWtl ZCBwZXJtaXNzaW9ucyB0byB0aGUgVFVSTiBzZXJ2ZXIgdG8gbGF1bmNoDQo+ID4+PiAgICAgYXR0 YWNrIChET1Mgb3IgRERPUykgb24gdGhlIHZpY3RpbSAoVFVSTiBjbGllbnQpLg0KPiA+Pj4NCj4g Pj4+ICAgICA+IFNpbmNlIHRoZSBfVFVSTiBzZXJ2ZXIgc2l0cyBvdXRzaWRlXyB0aGUgZmlyZXdh bGwsIGF0IGF0dGFja2VyIG91dHNpZGUNCj4gdGhlDQo+ID4+PiAgICAgZmlyZXdhbGwgY2FuIG5v dyBzZW5kIGENCj4gPj4+DQo+ID4+PiAgICAgLS0tIEEgVFVSTiBzZXJ2ZXIgcHJvdmlkZWQgYnkg bG9jYWwgb3IgYWNjZXNzIG5ldHdvcmssIHNoYWxsIG9ubHkgYmUNCj4gPj4+ICAgICBhY2Nlc3Np YmxlIGJ5IHVzZXJzIGluc2lkZSB0aGUgZmlyZXdhbGwuDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ ID4+PiAgICAgYikgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzU3NjYjc2VjdGlvbi0x Ny4zLjMNCj4gPj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3Vy bD91PWh0dHBzLQ0KPiA+PiAzQV9fdG9vbHMuaWV0Zi5vcmdfaHRtbF9yZmM1NzY2LTIzc2VjdGlv bi0NCj4gPj4gMkQxNy4zLjMmZD1EZ01GYVEmYz05NlpiWlpjYU1GNHcwRjRqcE42TFpnJnI9Ynda LQ0KPiA+PiBublJHV21jR0tSSXVhZHE2LU5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0K PiA+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPWVILQ0KPiA+PiB1 NWE2eXEwR3hUcUhGSk1Uc3NDSmVmY1hMck1HTFFkei03TUtfbDdjJmU9PiwNCj4gPj4+ICAgICBh dHRhY2tlciBzZW5kcyBzcG9vZmVkIFRVUk4gcmVxdWVzdHMgdG8gdGhlIFRVUk4gc2VydmVyIHRv IGNsb3NlDQo+ID4+PiAgICAgYWxsb2NhdGlvbnMuDQo+ID4+Pg0KPiA+Pj4gICAgIC0tLSBJIGRv buKAmXQgdGhpbmsgKEQpVExTIGhlbHBzIGlmIHlvdSBjYW4gc3Bvb2YgYW5kIGhhdmUgc3VjaA0K PiA+Pj4gICAgIGF0dGFja2VycyBpbnNpZGUgeW91ciBuZXR3b3JrLiAodGhhdCBwYXJhZ3JhcGgg c2F5czogIFRVUk4gcHJldmVudHMNCj4gPj4+ICAgICB0aGlzIGJ5IHJlcXVpcmluZyB0aGF0IHRo ZSBjcmVkZW50aWFscyB1c2Vk4oCdKSBtZWFuaW5nIGF1dGhlbnRpY2F0aW9uDQo+ID4+PiAgICAg KG5vdCBjZXJ0aWZpY2F0ZSBjaGVja2luZywgbm9yIGVuY3J5cHRpb24pLg0KPiA+Pj4NCj4gPj4+ DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgLVRpcnUNCj4gPj4+DQo+ID4+Pg0KPiA+ Pj4NCj4gPj4+ICAgICAqRnJvbToqIHRyYW0gW21haWx0bzp0cmFtLWJvdW5jZXNAaWV0Zi5vcmdd ICpPbiBCZWhhbGYgT2YgKkthcmwgU3RhaGwNCj4gPj4+ICAgICAqU2VudDoqIE1vbmRheSwgTm92 ZW1iZXIgMjgsIDIwMTYgMTozOSBBTQ0KPiA+Pj4gICAgICpUbzoqIFRpcnVtYWxlc3dhciBSZWRk eSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29tDQo+ID4+PiAgICAgPG1haWx0bzp0aXJlZGR5 QGNpc2NvLmNvbT4+OyAnQnJhbmRvbiBXaWxsaWFtcycNCj4gPj4+ICAgICA8YnJhbmRvbi53aWxs aWFtc0Bha2FtYWkuY29tDQo+ID4+IDxtYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29t Pj47DQo+ID4+PiAgICAgUHJhc2hhbnRoIFBhdGlsIChwcmFzcGF0aSkgPHByYXNwYXRpQGNpc2Nv LmNvbQ0KPiA+Pj4gICAgIDxtYWlsdG86cHJhc3BhdGlAY2lzY28uY29tPj47IHRyYW1AaWV0Zi5v cmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4gICAgICpDYzoqIHRyYW0tY2hhaXJzQGll dGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+OyAnRGFuIFdpbmcnDQo+ID4+PiAg ICAgPGRhbkBkYW53aW5nLm9yZyA8bWFpbHRvOmRhbkBkYW53aW5nLm9yZz4+OyAnU3BlbmNlciBE YXdraW5zIGF0DQo+ID4+PiAgICAgSUVURicgPHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29t DQo+ID4+PiAgICAgPG1haWx0bzpzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+DQo+ID4+ PiAgICAgKlN1YmplY3Q6KiBSZTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1k aXNjb3ZlcnkNCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICBIaSBUaXJ1LA0KPiA+Pj4N Cj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIFNvIHdlIGFncmVlIHRoYXQgdGhlIChEKVRMUyBtYW5k YXRlIHRocm93bi1pbiBkdXJpbmcgdGhlIGRpc2N1c3MNCj4gPj4+ICAgICAobWFraW5nIHllbGxv dyBUVVJOIHNlcnZlcnMgZ3JheSkgc2hhbGwgZ28gYXdheSBhbmQgd2UgYXJlIGJhY2sgdG8NCj4g Pj4+ICAgICB3aGF0IHdhcyBjb25zZW5zdXMgc2luY2UgdmVyc2lvbiAtNyBvZiB0aGUgZHJhZnQu IEkgdGhpbmsgdGhlDQo+ID4+PiAgICAgYXR0YWNrcyB5b3UgYXJlIGRpc2N1c3Npbmcgbm93IGhh dmUgYmVlbiBsaXN0ZWQgYWxyZWFkeSBhbmQgZm9yIFRVUk4NCj4gPj4+ICAgICBzZXJ2ZXJzIGlu IGEgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmsgKG5vIGNoYW5nZSBzaW5jZSB2ZXJzaW9uIC03KSwN Cj4gPj4+ICAgICB3ZSBzaG91bGQgbm90IGV4cGVjdCBhIGhpZ2hlciBzZWN1cml0eSBvciB0cnVz dCBsZXZlbCB3aGVuIHNlbmRpbmcNCj4gPj4+ICAgICBvdXIgcmVhbC10aW1lIHRyYWZmaWMgdGhy b3VnaCBhbm90aGVyIHBhdGggdGhhbiB0aGUgdGhyb3VnaCBkZWZhdWx0DQo+ID4+PiAgICAgZ2F0 ZXdheSwgYm90aCBwYXRocyBhcmUgcHJvdmlkZWQgYnkgdGhlIHNhbWUgbmV0d29yayBwcm92aWRl ci4NCj4gPj4+DQo+ID4+PiAgICAgKiAqDQo+ID4+Pg0KPiA+Pj4gICAgIElmIOKAnHByb3RlY3Rz IHRoZSBjbGllbnQgZnJvbSB2YXJpb3VzIGF0dGFja3MgZGlzY3Vzc2VkIGluIHByZXZpb3VzDQo+ ID4+PiAgICAgbWFpbHPigJ0gcmVsYXRlZCB0byBkaXNjb3Zlcnkgb2YgVFVSTiBzZXJ2ZXJzLCBy ZWFsbHkgaXMgcG9zc2libGUgYnkNCj4gPj4+ICAgICBpbnRyb2R1Y2luZyBzb21ldGhpbmcgKHdo eSByZW9wZW4gdGhhdCBub3c/KSwgd2UgaGF2ZSB0byBiZSBjYXJlZnVsDQo+ID4+PiAgICAgbm90 IHRvIG1ha2UgeWVsbG93IFRVUk4gc2VydmVycyBncmF5aXNoLCB3aGljaCBJIGFtIGFmcmFpZCBz ZWxmDQo+ID4+PiAgICAgc2lnbmVkIGNlcnRpZmljYXRlcyBtaWdodCBkbywgYW5kIGZ1cnRoZXIs IGRvZXMgdGhpcyBiZWxvbmcgaW4gYQ0KPiA+Pj4gICAgIGRpc2NvdmVyeSBkcmFmdCwgcmlza2lu ZyB0byBwaWNrIGEgZmlnaHQgd2l0aCB0aGUgV2ViUlRDIGJyb3dzZXINCj4gPj4+ICAgICBtYWtl cnMgc3VwcG9zZWQgdG8gdXNlIHRoaXMgc3BlY2lmaWNhdGlvbi4gV2Uga25vdyB0aGV5IGRvbuKA mXQgZmFuY3kNCj4gPj4+ICAgICBzZWxmIHNpZ25lZCBjZXJ0aWZpY2F0ZXPigKYNCj4gPj4+DQo+ ID4+PiAgICAgPGltYWdlMDAyLmpwZz4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICBJ c27igJl0IGl0IHNwZWNpZmljYXRpb25zIGZvciBzb21lIHNwZWNpZmljIHVzYWdlL2FwcGxpY2F0 aW9uIChsaWtlDQo+ID4+PiAgICAgdGhlIHJldHVybiBkcmFmdCBmb3IgV2ViUlRDIGJyb3dzZXJz KSB0aGF0IHNob3VsZCBjb25zaWRlciBzdWNoDQo+ID4+PiAgICAgdGhpbmdzIChub3QgdGhpcyBk cmFmdCksIHdpdGhvdXQgYW55IHJlY29tbWVuZGF0aW9uIGZyb20gdGhpcw0KPiA+Pj4gICAgIHNw ZWNpZmljYXRpb24/DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgL0thcmwNCj4gPj4+ DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICAqRnLDpW46KiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRp cmVkZHkpIFttYWlsdG86dGlyZWRkeUBjaXNjby5jb21dDQo+ID4+PiAgICAgKlNraWNrYXQ6KiBk ZW4gMjMgbm92ZW1iZXIgMjAxNiAwNDoxNQ0KPiA+Pj4gICAgICpUaWxsOiogS2FybCBTdGFobDsg J0JyYW5kb24gV2lsbGlhbXMnOyBQcmFzaGFudGggUGF0aWwNCj4gPj4+ICAgICAocHJhc3BhdGkp OyB0cmFtQGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+ICAgICAqS29waWE6 KiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0Rh bg0KPiA+Pj4gICAgIFdpbmcnOyAnU3BlbmNlciBEYXdraW5zIGF0IElFVEYnDQo+ID4+PiAgICAg KsOEbW5lOiogUkU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5 DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgSSBhbSBub3Qgc3VnZ2VzdGluZyB0aGF0 IGF1dGhlbnRpY2F0aW9uIGlzIG1hbmRhdG9yeSBmb3IgVFVSTg0KPiA+Pj4gICAgIHNlcnZlcnMg cHJvdmlkZWQgYnkgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmtzIHVzaW5nIChEKVRMUyBidXQgdXNl IG9mDQo+ID4+PiAgICAgKEQpVExTIFtLYXJsOiDigJx0aGVzZSBiZWNvbWUgZ3JheSBub3QgeWVs bG934oCdIG9yIGFyZSB5b3Ugc3VnZ2VzdGluZw0KPiA+Pj4gICAgIGNlcnRpZmljYXRlZCBzaWdu ZWQgYnkgdGhlIG5ldHdvcmsgcHJvdmlkZXJdDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAg ICAgW1RSXSBObywgdGhleSBhcmUgeWVsbG93IGFuZCBub3QgZ3JleTsgY2xpZW50cyB3aWxsIHVz ZSAoRClUTFMgYnV0DQo+ID4+PiAgICAgZG8gbm90IHZhbGlkYXRlIHRoZSBUVVJOIHNlcnZlciBj ZXJ0aWZpY2F0ZSAocmVmZXJyZWQgdG8gYXMNCj4gPj4+ICAgICBPcHBvcnR1bmlzdGljIHNlY3Vy aXR5IGluIHRoZSBkcmFmdCkuDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgW0thcmw6 IFNlZW1zIGxpa2UgeW91IGFyZSBzdWdnZXN0aW5nIHNlbGYgc2lnbmVkIGNlcnRpZmljYXRlcyB0 bw0KPiA+Pj4gICAgIGp1c3QgZ2V0IHRoZSBlbmNyeXB0aW9uIChhZ2FpbiDigJMgYWxzbyBkaXNj dXNzZWQpXQ0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIFtUUl0gWWVzLCB0aGF04oCZ cyBvbmUgcG9zc2libGUgb3B0aW9uIHRvIG1hbmRhdGUgKEQpVExTLiBDbGllbnQNCj4gPj4+ICAg ICBjYW5ub3QgdmFsaWRhdGUgdGhlIFRVUk4gc2VydmVyIGNlcnRpZmljYXRlIGJ1dCB1c2UgZW5j cnlwdGlvbi1vbmx5DQo+ID4+PiAgICAgKEQpVExTIGFuZCBwcm90ZWN0cyB0aGUgY2xpZW50IGZy b20gdmFyaW91cyBhdHRhY2tzIGRpc2N1c3NlZCBpbg0KPiA+Pj4gICAgIHByZXZpb3VzIG1haWxz Lg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIC1UaXJ1DQo+ID4+Pg0KPiA+Pj4NCj4g Pj4+DQo+ID4+PiAgICAgKkZyb206KiBLYXJsIFN0YWhsIFttYWlsdG86a2FybC5zdGFobEBpbmdh dGUuY29tXQ0KPiA+Pj4gICAgICpTZW50OiogVHVlc2RheSwgTm92ZW1iZXIgMjIsIDIwMTYgMTE6 MTIgUE0NCj4gPj4+ICAgICAqVG86KiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIDx0aXJl ZGR5QGNpc2NvLmNvbQ0KPiA+Pj4gICAgIDxtYWlsdG86dGlyZWRkeUBjaXNjby5jb20+PjsgJ0Jy YW5kb24gV2lsbGlhbXMnDQo+ID4+PiAgICAgPGJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbQ0K PiA+PiA8bWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbT4+Ow0KPiA+Pj4gICAgIFBy YXNoYW50aCBQYXRpbCAocHJhc3BhdGkpIDxwcmFzcGF0aUBjaXNjby5jb20NCj4gPj4+ICAgICA8 bWFpbHRvOnByYXNwYXRpQGNpc2NvLmNvbT4+OyB0cmFtQGlldGYub3JnIDxtYWlsdG86dHJhbUBp ZXRmLm9yZz4NCj4gPj4+ICAgICAqQ2M6KiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRy YW0tY2hhaXJzQGlldGYub3JnPjsgJ0RhbiBXaW5nJw0KPiA+Pj4gICAgIDxkYW5AZGFud2luZy5v cmcgPG1haWx0bzpkYW5AZGFud2luZy5vcmc+PjsgJ1NwZW5jZXIgRGF3a2lucyBhdA0KPiA+Pj4g ICAgIElFVEYnIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbQ0KPiA+Pj4gICAgIDxtYWls dG86c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20+Pg0KPiA+Pj4gICAgICpTdWJqZWN0Oiog U1Y6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+ID4+Pg0K PiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgSGkgVGlydSwNCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4g Pj4+ICAgICBQbGVhc2UgdW5kZXJzdGFuZCB0aGF0IGluIHRoaXMgY29udGV4dDoNCj4gPj4+DQo+ ID4+PiAgICAgLSBBdXRoZW50aWNhdGlvbiBpcyB0byBvbmx5IGFsbG93IGNlcnRhaW4gdXNlcnMg dG8gdXNlIHRoZSBUVVJODQo+ID4+PiAgICAgc2VydmVyIHJlc291cmNlDQo+ID4+Pg0KPiA+Pj4g ICAgIC0gQ2VydGlmaWNhdGUgY2hlY2tpbmcgYXMgd2hlbiB1c2luZyAoRClUTFMgaXMgdG8gYXNz dXJlIHRoZSB1c2VyIGlzDQo+ID4+PiAgICAgdXNpbmcgYSB0cnVzdGVkIFRVUk4gc2VydmVyIChh bmQgZnVydGhlciBpcyBzZXRzIHVwIGFuIGVuY3J5cHRlZA0KPiA+Pj4gICAgIGNoYW5uZWwpLg0K PiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIFRoZXNlIHRoaW5ncyBhcmUgbm90IGludGVy Y2hhbmdlYWJsZSBvciBkbyB0aGUgc2FtZSB0aGluZ3Mgb3INCj4gPj4+ICAgICBhY2hpZXZlcyB0 aGUgc2FtZSwgd2hpY2ggaGFzIGJlZW4gZGlzY3Vzc2VkIG92ZXIgYW5kIG92ZXIgYWdhaW4gaW4N Cj4gPj4+ICAgICB0aGlzIGRyYWZ0IGFscmVhZHkuDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+ PiAgICAgTGV0IGl0IHJlc3Qgd2l0aCB0aGF0IHdlIGNhbm5vdC9zaG91bGQgbm90IGV4cGVjdCBh IGhpZ2hlciB0cnVzdCBvcg0KPiA+Pj4gICAgIHNlY3VyaXR5IGxldmVsIHdoZW4gc2VuZGluZyBv dXIgcmVhbC10aW1lIHRyYWZmaWMgdGhyb3VnaCB0aGUgVFVSTg0KPiA+Pj4gICAgIHNlcnZlciBw YXRoLCB0aGFuIHRyb3VnaCB0aGUgZGVmYXVsdCBnYXRld2F5IHBhdGguIFlvdSBzaW1wbHkgaGF2 ZQ0KPiA+Pj4gICAgIHRvIHRydXN0IHRoZSBhY2Nlc3MgZnJvbSB0aGUgbmV0d29yayBwcm92aWRl ciB5b3Ugc2VsZWN0IHRvIGNvbm5lY3QNCj4gPj4+ICAgICB0bywgb3IgcmVmcmFpbiBmcm9tIHVz aW5nIGl0Lg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIFBsZWFzZSBhbHNvIHVuZGVy c3RhbmQgdGhhdCDigJx0aGUgZ3JheSBUVVJOIHNlcnZlcnPigJ0gYXJlIHByb3ZpZGVkIGJ5DQo+ ID4+PiAgICAgb3RoZXJzIHRoYW4gdGhlIGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrLCBhbmQgeW91 IGNob3NlIHRvIHRydXN0IHRoZW0NCj4gPj4+ICAgICB3aXRoIHlvdXIgcmVhbC10aW1lIHRyYWZm aWMgYmFzZWQgb24gY2hlY2tpbmcgdGhlaXIgY2VydGlmaWNhdGUgKFdobw0KPiA+Pj4gICAgIGNv bmZpZ3VyZXMgd2hpY2ggdG8gYWxsb3cgaW50byB0aGUgV2ViUlRDIGJyb3dzZXI/KS4NCj4gPj4+ DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICBJbiBhIHNwZWNpZmljYXRpb24gd2hpY2ggbWFpbiBw dXJwb3NlIGlzIHRvIGF1dG8gZGlzY292ZXIgVFVSTg0KPiA+Pj4gICAgIHNlcnZlcnMgcHJvdmlk ZWQgYnkgdGhlIGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrICjigJx0aGUgeWVsbG93IG9uZXPigJ0p LA0KPiA+Pj4gICAgIHlvdSBDQU5OT1QgTE9HSUNBTExZIGVuZCB1cCB3aXRoIHNheWluZyB5b3Ug TVVTVC9TSE9VTEQgb3IgYXJlDQo+ID4+PiAgICAgUkVDT01NRU5ERUQgdG8gdXNlIOKAnHRoZSBn cmF5IG9uZXPigJ0gaW5zdGVhZCwgcHJvdmlkZWQgYnkgc29tZQ0KPiA+Pj4gICAgIGF1dGhvcml0 eSBvciBCcmFuZG9uIG1heWJlICh3aGljaCBhcmUgbWVhbnQgZm9yIG90aGVyIHB1cnBvc2VzKS4N Cj4gPj4+ICAgICBUaGVuIHlvdSBoYXZlIG5vdCBkZWxpdmVyZWQgdGhlIHNwZWNpZmljYXRpb24g d2UgbmVlZCA9IFRoZQ0KPiBzaG93c3RvcHBlci4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ ICAgICAvS2FybA0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIFBTOiBTb21lIGNvbW1l bnRzIGJlbG93Lg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgICpGcsOlbjoqIFRpcnVt YWxlc3dhciBSZWRkeSAodGlyZWRkeSkgW21haWx0bzp0aXJlZGR5QGNpc2NvLmNvbV0NCj4gPj4+ ICAgICAqU2tpY2thdDoqIGRlbiAyMiBub3ZlbWJlciAyMDE2IDA0OjMxDQo+ID4+PiAgICAgKlRp bGw6KiBLYXJsIFN0YWhsOyAnQnJhbmRvbiBXaWxsaWFtcyc7IFByYXNoYW50aCBQYXRpbA0KPiA+ Pj4gICAgIChwcmFzcGF0aSk7IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0K PiA+Pj4gICAgICpLb3BpYToqIHRyYW0tY2hhaXJzQGlldGYub3JnIDxtYWlsdG86dHJhbS1jaGFp cnNAaWV0Zi5vcmc+OyAnRGFuDQo+ID4+PiAgICAgV2luZyc7ICdTcGVuY2VyIERhd2tpbnMgYXQg SUVURicNCj4gPj4+ICAgICAqw4RtbmU6KiBSRTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJu LXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICBIaSBLYXJs LA0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIEkgYW0gbm90IHN1Z2dlc3RpbmcgdGhh dCBhdXRoZW50aWNhdGlvbiBpcyBtYW5kYXRvcnkgZm9yIFRVUk4NCj4gPj4+ICAgICBzZXJ2ZXJz IHByb3ZpZGVkIGJ5IGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrcyB1c2luZyAoRClUTFMgYnV0IHVz ZSBvZg0KPiA+Pj4gICAgIChEKVRMUyBbS2FybDog4oCcdGhlc2UgYmVjb21lIGdyYXkgbm90IHll bGxvd+KAnSBvciBhcmUgeW91IHN1Z2dlc3RpbmcNCj4gPj4+ICAgICBjZXJ0aWZpY2F0ZWQgc2ln bmVkIGJ5IHRoZSBuZXR3b3JrIHByb3ZpZGVyXSB3aXRob3V0IGF1dGhlbnRpY2F0aW5nDQo+ID4+ PiAgICAgdGhlIFRVUk4gc2VydmVyIGlzIG1hbmRhdG9yeSB0byBhdm9pZCB2YXJpb3VzIGF0dGFj a3MgbGlzdGVkIGluDQo+ID4+PiAgICAgcHJldmlvdXMgbWFpbHMuDQo+ID4+Pg0KPiA+Pj4NCj4g Pj4+DQo+ID4+PiAgICAgSW4gc2hvcnQsIHRoZSBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgbG9j YWwgb3IgYWNjZXNzIG5ldHdvcmtzIG11c3QNCj4gPj4+ICAgICB1c2UgKEQpVExTIGJ1dCBpdOKA mXMgbm90IG1hbmRhdG9yeSBmb3IgdGhlc2UgVFVSTiBzZXJ2ZXJzIHRvIGdldA0KPiA+Pj4gICAg IGNlcnRpZmljYXRlcyBmcm9tIENBIG9yIGFueSBleHBsaWNpdCBjb25maWd1cmF0aW9uIGlzIHJl cXVpcmVkIG9uDQo+ID4+PiAgICAgdGhlIGNsaWVudCB0byB0cnVzdCB0aGUgVFVSTiBzZXJ2ZXIu IFtLYXJsOiBTZWVtcyBsaWtlIHlvdSBhcmUNCj4gPj4+ICAgICBzdWdnZXN0aW5nIHNlbGYgc2ln bmVkIGNlcnRpZmljYXRlcyB0byBqdXN0IGdldCB0aGUgZW5jcnlwdGlvbg0KPiA+Pj4gICAgIChh Z2FpbiDigJMgYWxzbyBkaXNjdXNzZWQpXQ0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAg IC1UaXJ1DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgKkZyb206KiBLYXJsIFN0YWhs IFttYWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29tXQ0KPiA+Pj4gICAgICpTZW50OiogTW9uZGF5 LCBOb3ZlbWJlciAyMSwgMjAxNiAyOjEwIEFNDQo+ID4+PiAgICAgKlRvOiogVGlydW1hbGVzd2Fy IFJlZGR5ICh0aXJlZGR5KSA8dGlyZWRkeUBjaXNjby5jb20NCj4gPj4+ICAgICA8bWFpbHRvOnRp cmVkZHlAY2lzY28uY29tPj47ICdCcmFuZG9uIFdpbGxpYW1zJw0KPiA+Pj4gICAgIDxicmFuZG9u LndpbGxpYW1zQGFrYW1haS5jb20NCj4gPj4gPG1haWx0bzpicmFuZG9uLndpbGxpYW1zQGFrYW1h aS5jb20+PjsNCj4gPj4+ICAgICBQcmFzaGFudGggUGF0aWwgKHByYXNwYXRpKSA8cHJhc3BhdGlA Y2lzY28uY29tDQo+ID4+PiAgICAgPG1haWx0bzpwcmFzcGF0aUBjaXNjby5jb20+PjsgdHJhbUBp ZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+ID4+PiAgICAgKkNjOiogdHJhbS1jaGFp cnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4gV2luZycNCj4g Pj4+ICAgICA8ZGFuQGRhbndpbmcub3JnIDxtYWlsdG86ZGFuQGRhbndpbmcub3JnPj47ICdTcGVu Y2VyIERhd2tpbnMgYXQNCj4gPj4+ICAgICBJRVRGJyA8c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFp bC5jb20NCj4gPj4+ICAgICA8bWFpbHRvOnNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPj4N Cj4gPj4+ICAgICAqU3ViamVjdDoqIFNWOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2Vy dmVyLWRpc2NvdmVyeQ0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIEhpIFRpcnUsDQo+ ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgVHJ5aW5nIHRvIGNsYXJpZnkgYXMgeW91IHJl cXVlc3Q6IEkgaGF2ZSBsb3N0IHRyYWNrIG9mIGluIHdoaWNoDQo+ID4+PiAgICAgY29udGV4dCB5 b3UgYXJlIHdoZW4geW91IGFyZSAiZGlzY3Vzc2luZyB2YXJpb3VzIGF0dGFja3MiIGFuZCB3aGF0 DQo+ID4+PiAgICAgeW91IG1lYW4gd2l0aCB0aGUgPz8gSSBtYXJrZWQgYmVsb3cuDQo+ID4+Pg0K PiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgTXkgY29uY2VybiB3YXMgd2hldGhlciB0aGlzIG1heSBh Z2FpbiBsZWFkIHRvIHRoYXQgV0UNCj4gPj4+ICAgICBIQVZFICpfTk9fKiBUVVJOIFNFUlZFUlMg aW4gdGhlIHllbGxvdyBhcmVhIGJlbG93IHJlc3VsdGluZyBmcm9tDQo+IHRoZQ0KPiA+Pj4gICAg IChEKVRMUyBtYW5kYXRpbmcgdGhhdCB3YXMgdGhyb3duLWluIGludG8gdmVyc2lvbiAtMTAgZHVy aW5nIHRoZQ0KPiA+Pj4gICAgIGRpc2N1c3MgKD10aGUgc2hvd3N0b3BwaW5nKSwgc2luY2UgVFVS TiBzZXJ2ZXJzIHdpdGgNCj4gPj4+ICAgICBjZXJ0aWZpY2F0ZXMgYXJlIE5PVCBwcm92aWRlZCBi eSB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmsgKHRob3NlDQo+ID4+PiAgICAgYXJlIHByb3Zp ZGVkIGJ5IHNvbWUgInRydXN0IGFuY2hvciBzdG9yZSBbUkZDNjAyNF0gYWxsb3dzIGEgVFVSTg0K PiA+Pj4gICAgIGNsaWVudCAuLi4iIG9yIGJ5ICJDZXJ0aWZpY2F0aW9uIGF1dGhvcml0aWVzIHRo YXQgaXNzdWUgVFVSTiBzZXJ2ZXINCj4gPj4+ICAgICBjZXJ0aWZpY2F0ZXMiIGV0Yy4uKQ0KPiA+ Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIDxpbWFnZTAwNC5wbmc+DQo+ID4+Pg0KPiA+Pj4N Cj4gPj4+DQo+ID4+PiAgICAgU28sIGp1c3QgbGV0IG1lIHJlc3Qgd2l0aCB0aGF0IHlvdXIgZGlz Y3Vzc2lvbiBkb2VzIG5vdCB0YWtlIGF3YXkNCj4gPj4+ICAgICB0aGUgYWxsb3dhbmNlIHRvIHVz ZSBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlIGxvY2FsIG9yIGFjY2Vzcw0KPiA+Pj4gICAg IG5ldHdvcmsgd2l0aG91dCBhdXRoZW50aWNhdGlvbiB0aGF0IHdhcyByZS1pbnRyb2R1Y2VkIGlu IHZlcnNpb24gLTcNCj4gPj4+ICAgICBvZiB0aGUgZHJhZnQgKGFmdGVyIGxvbmcgZGlzY3Vzc2lv bnMsIGluY2x1ZGluZyB3aXRoIHlvdSBUaXJ1KS4NCj4gPj4+ICAgICBSZW1lbWJlciwgX3Rob3Nl IHllbGxvdyBUVVJOIHNlcnZlcnMgd2VyZSB0aGUgcmVxdWlyZW1lbnQgb2YgdGhpcw0KPiA+Pj4g ICAgIGRyYWZ0IHRvIGF1dG8gZGlzY292ZXJfIHNvIHRoZXkgY2FuIGJlIHVzZWQgYnkgdGhlIFdl YlJUQyBicm93c2VycyDigJMNCj4gPj4+ICAgICBVc2FnZSBjYW5ub3QgYmUgZm9yYmlkZGVuIChv ciB1bi1yZWNvbW1lbmRlZCBhcyBCcmFuZG9uIHN1Z2dlc3RzLA0KPiA+Pj4gICAgIGFsdGhvdWdo IEJyYW5kb24gaXMgYWdyZWVpbmcgdG8gdGhhdCB0aGUgKEQpVExTIG1hbmRhdGUgbXVzdCB2YW5p c2gNCj4gPj4+ICAgICBmb3IgdGhlIHllbGxvdyBUVVJOIHNlcnZlcnMpLg0KPiA+Pj4NCj4gPj4+ DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgRlVSVEhFUiBKVVNUIFRPIFJFTUlORCBB VVRIT1JTIG9mIHdoYXQgaXMgbmVlZGVkIHRvIGJlIGFkZHJlc3Nlcw0KPiBpbg0KPiA+Pj4gICAg IHRoaXMgZHJhZnQ7IGl0IGlzIGZvdW5kIGluDQo+ID4+Pg0KPiA+Pj4gICAgIGh0dHBzOi8vd3d3 LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAyMjE2Lmh0bWwNCj4g Pj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBz LQ0KPiA+PiAzQV9fd3d3LmlldGYub3JnX21haWwtDQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJh bV9jdXJyZW50X21zZzAyMjE2Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+PiB3MEY0 anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+PiBOU25zZ3diQlZVSmE0bVpmbUVJ QlhnJm09TFhhSC0NCj4gPj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgm cz1OdFJad3JtbjJLLQ0KPiA+PiBXVUlfUU41a195SGxBTi11emhvUVU4YnMyeUFfUkJQOCZlPT4N Cj4gPj4+DQo+ID4+PiAgICAgYW5kIHRoZSBjb250cmFkaWN0aW9uIGluIHNlY3Rpb24gNy4yIGFz IHNhaWQgaW4NCj4gPj4+DQo+ID4+PiAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNo aXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDIyMjYuaHRtbA0KPiA+Pj4gICAgIDxodHRwczovL3Vy bGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+IDNBX193d3cuaWV0 Zi5vcmdfbWFpbC0NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJlbnRfbXNnMDIyMjYu aHRtbCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+IHcwRjRqcE42TFpnJnI9YndaLW5uUkdX bWNHS1JJdWFkcTYtDQo+ID4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pg0K PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPUV0aXVpVnQ1TW5qYnc5 V3NEdG1qaXUybA0KPiA+PiAtZHYxUm9IVnBkQWxUWHRnWklRJmU9Pg0KPiA+Pj4NCj4gPj4+ICAg ICB3aGlsZSB0aGlzIGRpc2N1c3Npb24gd2l0aCBBdXRob3IgVGlydSBhbmQgPuKAnEkgZG9uJ3Qg cnVuIGEgbG9jYWwNCj4gPj4+ICAgICBuZXR3b3JrIG9yIGFuIGFjY2VzcyBuZXR3b3JrIGFuZCB3 b3VsZCBub3QgZXhwZWN0IHRvIGRlcGxveSByZWxheXMNCj4gPj4+ICAgICBtZWFudCB0byBmdW5j dGlvbiBpbiB0aGF0IG1vZGXigJwgQnJhbmRvbiosIGhhcyBiZWVuIG9uIG1vcmUgb3IgbGVzcw0K PiA+Pj4gICAgIGRldmlhdGVkIHN1YmplY3RzLCBvciByZXBlYXRpbmcgd2hhdCB3ZSBhbHJlYWR5 IGhhdmUgYmVlbiB0aHJvdWdoDQo+ID4+PiAgICAgZWFybGllciAoUFM6IE5vdGljZSB0aGF0IEF1 dGhvciBQcmFzaGFudGggYWxyZWFkeSBsaXN0ZWQvZGlzY3Vzc2VkDQo+ID4+PiAgICAgdGhlIGF0 dGFjayBzdHVmZiBkdXJpbmcgdGhlIGRpc2N1c3MuIEkgZmVhcmVkIHlvdSB3ZXJlIHJlZG9pbmcg dGhhdC4pDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgL0thcmwNCj4gPj4+DQo+ID4+ Pg0KPiA+Pj4NCj4gPj4+ICAgICAqIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93 ZWIvdHJhbS9jdXJyZW50L21zZzAyMjE3Lmh0bWwNCj4gPj4+ICAgICA8aHR0cHM6Ly91cmxkZWZl bnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+PiAzQV9fd3d3LmlldGYub3Jn X21haWwtDQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAyMjE3Lmh0bWwm ZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tS SXVhZHE2LQ0KPiA+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4NCj4gTVZR aTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1nbHhQM292WVg3Q2Q0ZjEyeklJ TEpoYlRjDQo+ID4+IEVKMFZpcVZnSlF5U1FrSkhZUSZlPT4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4N Cj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgIC0tLS0tVXJzcHJ1bmdsaWd0IG1lZGRlbGFuZGUtLS0t LQ0KPiA+Pj4gICAgIEZyw6VuOiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIFttYWlsdG86 dGlyZWRkeUBjaXNjby5jb21dDQo+ID4+PiAgICAgU2tpY2thdDogZGVuIDE4IG5vdmVtYmVyIDIw MTYgMDQ6MDANCj4gPj4+ICAgICBUaWxsOiBLYXJsIFN0YWhsOyAnQnJhbmRvbiBXaWxsaWFtcyc7 IFByYXNoYW50aCBQYXRpbA0KPiA+Pj4gICAgIChwcmFzcGF0aSk7IHRyYW1AaWV0Zi5vcmcgPG1h aWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4gICAgIEtvcGlhOiB0cmFtLWNoYWlyc0BpZXRmLm9y ZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0Rhbg0KPiA+Pj4gICAgIFdpbmcnOyAn U3BlbmNlciBEYXdraW5zIGF0IElFVEYnDQo+ID4+PiAgICAgw4RtbmU6IFJFOiBbdHJhbV0gZHJh ZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0K PiA+Pj4gICAgIEhpIEthcmwsDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgSSBkb24n dCB1bmRlcnN0YW5kIHlvdXIgY29uY2VybnMsIHBsZWFzZSBjbGFyaWZ5LiBUaGUgZHJhZnQgbWFu ZGF0ZXMNCj4gPj4+ICAgICAoRClUTFMgYnV0IGRvZXMgbm90IG1hbmRhdGUgVFVSTiBzZXJ2ZXIg dmFsaWRhdGlvbi4NCj4gPj4+DQo+ID4+PiAgICAgV2UgYXJlIGRpc2N1c3NpbmcgdmFyaW91cyBh dHRhY2tzIHBvc3NiaWxlIGZvciB0aGUgV0cgdG8gZGVjaWRlIGlmDQo+ID4+PiAgICAgKEQpVExT IGlzIGEgTVVTVCBvciBTSE9VTEQuDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgLVRp cnUNCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gLS0tLS1P cmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPj4+DQo+ID4+PiAgICAgPiBGcm9tOiBLYXJsIFN0YWhs IFttYWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29tXQ0KPiA+Pj4NCj4gPj4+ICAgICA+IFNlbnQ6 IEZyaWRheSwgTm92ZW1iZXIgMTgsIDIwMTYgMjoxMSBBTQ0KPiA+Pj4NCj4gPj4+ICAgICA+IFRv OiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIDx0aXJlZGR5QGNpc2NvLmNvbQ0KPiA+PiA8 bWFpbHRvOnRpcmVkZHlAY2lzY28uY29tPj47ICdCcmFuZG9uIFdpbGxpYW1zJw0KPiA+Pj4NCj4g Pj4+ICAgICA+IDxicmFuZG9uLndpbGxpYW1zQGFrYW1haS5jb20NCj4gPj4gPG1haWx0bzpicmFu ZG9uLndpbGxpYW1zQGFrYW1haS5jb20+PjsNCj4gPj4+ICAgICBQcmFzaGFudGggUGF0aWwgKHBy YXNwYXRpKQ0KPiA+Pj4NCj4gPj4+ICAgICA+IDxwcmFzcGF0aUBjaXNjby5jb20gPG1haWx0bzpw cmFzcGF0aUBjaXNjby5jb20+PjsgdHJhbUBpZXRmLm9yZw0KPiA+Pj4gICAgIDxtYWlsdG86dHJh bUBpZXRmLm9yZz4NCj4gPj4+DQo+ID4+PiAgICAgPiBDYzogdHJhbS1jaGFpcnNAaWV0Zi5vcmcg PG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4gV2luZycNCj4gPj4+ICAgICA8ZGFu QGRhbndpbmcub3JnIDxtYWlsdG86ZGFuQGRhbndpbmcub3JnPj47ICdTcGVuY2VyIERhd2tpbnMN Cj4gPj4+DQo+ID4+PiAgICAgPiBhdCBJRVRGJyA8c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5j b20NCj4gPj4gPG1haWx0bzpzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+DQo+ID4+Pg0K PiA+Pj4gICAgID4gU3ViamVjdDogU1Y6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2 ZXItZGlzY292ZXJ5DQo+ID4+Pg0KPiA+Pj4gICAgID4NCj4gPj4+DQo+ID4+PiAgICAgPiBDb250 aW51aW5nIHRoZSB0aHJlYWQgb2YgdGhpcyBzdWJqZWN0IHdpdGggdGhlIHZpZXcgdGhhdCBpdCBz aG91bGQgYmUNCj4gPj4gYWJvdXQgdGhlDQo+ID4+Pg0KPiA+Pj4gICAgID4gTVVTVC9TSE9VTEQv UkVDT01NRU5EIGRpc2N1c3Npb24gcmVnYXJkaW5nIEQoVExTKSBmb3IgdGhlDQo+IFVTQUdFDQo+ ID4+IG9mDQo+ID4+Pg0KPiA+Pj4gICAgID4gYW4gYWxyZWFkeSBkaXNjb3ZlcmVkIFRVUk4gc2Vy dmVyLCB3aGljaCBtdXN0IGJlIHRvdGFsbHkNCj4gaW5kZXBlbmRlbnQNCj4gPj4gb2YgdGhlDQo+ ID4+Pg0KPiA+Pj4gICAgID4gbWV0aG9kIHVzZWQgZm9yIGRpc2NvdmVyeS4NCj4gPj4+DQo+ID4+ PiAgICAgPg0KPiA+Pj4NCj4gPj4+ICAgICA+IEkgY2FuJ3Qgc2F5IEkgdW5kZXJzdGFuZCB3aGVy ZSBCcmFuZG9uJ3MvVGlydSdzIGRpc2N1c3Npb24gZml0cyBpbiBhbmQNCj4gPj4gd2hldGhlcg0K PiA+Pj4NCj4gPj4+ICAgICA+IGFyZSByaWdodCB0aGluZ3MgYXJlIHNhaWQgYW5kIGFyZSBpbiB0 aGUgcmlnaHQgY29udGV4dDoNCj4gPj4+DQo+ID4+PiAgICAgPg0KPiA+Pj4NCj4gPj4+ICAgICA+ ID8/ID4gPiBUaGUgZHJhZnQgbWFuZGF0ZXMgKEQpVExTIGJ1dCBkb2VzIG5vdCBtYW5kYXRlIFRV Uk4gc2VydmVyDQo+ID4+Pg0KPiA+Pj4gICAgID4gdmFsaWRhdGlvbi4NCj4gPj4+DQo+ID4+PiAg ICAgPiA/PyAoRClUTFMgaGVscHMgYXZvaWQgdmFyaW91cyBhdHRhY2tzLCBsaWtlIGF0dGFja2Vy IHNlbmRpbmcgc3Bvb2ZlZA0KPiA+PiBUVVJODQo+ID4+Pg0KPiA+Pj4gICAgID4gbWVzc2FnZXMg Pz8gIFdlIHNob3VsZCBkaXNjdXNzIGFsbCBzdWNoIHBvc3NpYmxlIGF0dGFja3MsIGJlZm9yZSB3 ZQ0KPiA+PiBkZWNpZGUgdG8NCj4gPj4+DQo+ID4+PiAgICAgPiBnbyB3aXRoIE1VU1Qgb3IgU0hP VUxELg0KPiA+Pj4NCj4gPj4+ICAgICA+DQo+ID4+Pg0KPiA+Pj4gICAgID4gV2hlcmUgYXJlIHdl IGtub3c/DQo+ID4+Pg0KPiA+Pj4gICAgID4NCj4gPj4+DQo+ID4+PiAgICAgPiBQbGVhc2UsIGp1 c3Qga2VlcCB0aGUgY2xlYXJhbmNlIGZyb20gYXV0aGVudGljYXRpb24gYXMgaXQgd2FzIGZyb20N Cj4gPj4gdmVyc2lvbg0KPiA+Pj4NCj4gPj4+ICAgICA+IC0wNyBvZiB0aGUgZHJhZnQgYWxyZWFk eSwgdW50aWwgdGhlIEQoVExTKSBtYW5kYXRlIHdhcyB0aHJvd24gaW4NCj4gZHVyaW5nDQo+ID4+ IHRoZQ0KPiA+Pj4NCj4gPj4+ICAgICA+IERJU0NVU1MuDQo+ID4+Pg0KPiA+Pj4gICAgID4NCj4g Pj4+DQo+ID4+PiAgICAgPiBTaW1wbHksIGxvZ2ljYWxseToNCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+IFRVUk4gc2VydmVycyAqcHJvdmlkZWQgYnkqIChhbmQgbWFpbnRhaW5lZCBieT8pIHNvbWUg InRydXN0DQo+ID4+IGFuY2hvcg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gc3RvcmUgW1JGQzYw MjRdIGFsbG93cyBhIFRVUk4gY2xpZW50IC4uLiIgb3IgYnkgIkNlcnRpZmljYXRpb24NCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+IGF1dGhvcml0aWVzIHRoYXQgaXNzdWUgVFVSTiBzZXJ2ZXIgY2Vy dGlmaWNhdGVzIg0KPiA+Pj4NCj4gPj4+ICAgICA+IGFyZSBOT1QgdW5kZXIgdGhlIGNsZWFyYW5j ZSBkaXNjdXNzZWQsIHdoaWNoIGlzIGZvciAiVFVSTiBzZXJ2ZXJzDQo+ID4+ICpwcm92aWRlZA0K PiA+Pj4NCj4gPj4+ICAgICA+IGJ5KiB0aGUgbG9jYWwgbmV0d29yayBvciBieSB0aGUgYWNjZXNz IG5ldHdvcmsiLg0KPiA+Pj4NCj4gPj4+ICAgICA+IHNvIGEgU0hPVUxEIG9yIFJFQ09NTUVOREVE IG9mIEQoVExTKSBkb2VzIG5vdCBldmVuIGJlbG9uZw0KPiB1bmRlcg0KPiA+PiB0aGUNCj4gPj4+ DQo+ID4+PiAgICAgPiBjbGVhcmFuY2UgZGlzY3Vzc2VkLg0KPiA+Pj4NCj4gPj4+ICAgICA+DQo+ ID4+Pg0KPiA+Pj4gICAgID4NCj4gPj4+DQo+ID4+PiAgICAgPiBGVVJUSEVSLCBXaGVuIEkgcmVh ZDoNCj4gPj4+DQo+ID4+PiAgICAgPg0KPiA+Pj4NCj4gPj4+ICAgICA+IDcuMi4gIFJlY3Vyc2l2 ZWx5IEVuY2Fwc3VsYXRlZCBUVVJODQo+ID4+Pg0KPiA+Pj4gICAgID4NCj4gPj4+DQo+ID4+PiAg ICAgPiAgICBXZWJSVEMgZW5kcG9pbnRzIFNIT1VMRCB0cmVhdCBhbnkgVFVSTiBzZXJ2ZXIgZGlz Y292ZXJlZA0KPiB0aHJvdWdoDQo+ID4+IHRoZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ICAgIG1lY2hh bmlzbXMgZGVzY3JpYmVkIGluIHRoaXMgc3BlY2lmaWNhdGlvbiBhcyBhbiBlbnRlcnByaXNlL2dh dGV3YXkNCj4gPj4+DQo+ID4+PiAgICAgPiAgICBvciBhY2Nlc3MgbmV0d29yayBzZXJ2ZXIsIGlu IGFjY29yZGFuY2Ugd2l0aCBSZWN1cnNpdmVseQ0KPiBFbmNhcHN1bGF0ZWQNCj4gPj4+DQo+ID4+ PiAgICAgPiAgICBUVVJOIFtJLUQuaWV0Zi1ydGN3ZWItcmV0dXJuXS4NCj4gPj4+DQo+ID4+PiAg ICAgPg0KPiA+Pj4NCj4gPj4+ICAgICA+IElzbid0IHRoYXQgImFueSIgaW4gdG90YWwgY29udHJh ZGljdGlvbiB0byB0aGUgY2xlYXJhbmNlIGJlaW5nIGRpc2N1c3NlZD8NCj4gPj4+DQo+ID4+PiAg ICAgPiBJIHRob3VnaHQ6ICJlbnRlcnByaXNlL2dhdGV3YXkgb3IgYWNjZXNzIG5ldHdvcmsiIHdh cyB0aGUgc2FtZSBhcw0KPiB5b3VyDQo+ID4+Pg0KPiA+Pj4gICAgID4gImxvY2FsIG9yIGFjY2Vz cyBuZXR3b3JrIiBhbmQgdGhhdCBmb3IgT1RIRVIgZGlzY292ZXJlZCBUVVJOIHNlcnZlcnMNCj4g Pj4+DQo+ID4+PiAgICAgPiAob3V0c2lkZSB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmspLCBp dCBtdXN0IGJlIHRoZSBhcHBsaWNhdGlvbiB0aGF0DQo+ID4+IGluc3RydWN0cw0KPiA+Pj4NCj4g Pj4+ICAgICA+IHRoZSBUVVJOIGNsaWVudCBob3cgdG8gdXNlLg0KPiA+Pj4NCj4gPj4+ICAgICA+ DQo+ID4+Pg0KPiA+Pj4gICAgID4gSSBzdWdnZXN0IHRoZSA3LjIgc2VjdGlvbiBpcyByZXBsYWNl ZCB3aXRoIG15Og0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICg0KSAiRGVwbG95bWVudCBDb25z aWRlcmF0aW9ucyBmb3IgVFVSTiBTZXJ2ZXJzIFByb3ZpZGVkIGJ5DQo+IHRoZQ0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gPj4+IExvY2FsIG9yDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBBY2Nlc3Mg TmV0d29yayINCj4gPj4+DQo+ID4+PiAgICAgPg0KPiA+Pj4NCj4gPj4+ICAgICA+IHdoaWNoIG1l bnRpb25zIFJlY3Vyc2l2ZWx5IEVuY2Fwc3VsYXRlZCBUVVJOIFtJLUQuaWV0Zi1ydGN3ZWItDQo+ IHJldHVybl0uDQo+ID4+Pg0KPiA+Pj4gICAgID4gKHlvdSBjYW4gc3BlbGwgaXQgb3V0IGxpa2Ug dGhhdCkNCj4gPj4+DQo+ID4+PiAgICAgPg0KPiA+Pj4NCj4gPj4+ICAgICA+IC9LYXJsDQo+ID4+ Pg0KPiA+Pj4gICAgID4NCj4gPj4+DQo+ID4+PiAgICAgPiAtLS0tLVVyc3BydW5nbGlndCBtZWRk ZWxhbmRlLS0tLS0NCj4gPj4+DQo+ID4+PiAgICAgPiBGcsOlbjogVGlydW1hbGVzd2FyIFJlZGR5 ICh0aXJlZGR5KSBbbWFpbHRvOnRpcmVkZHlAY2lzY28uY29tXQ0KPiA+Pj4NCj4gPj4+ICAgICA+ IFNraWNrYXQ6IGRlbiAxNSBub3ZlbWJlciAyMDE2IDA1OjAxDQo+ID4+Pg0KPiA+Pj4gICAgID4g VGlsbDogQnJhbmRvbiBXaWxsaWFtczsgS2FybCBTdGFobDsgUHJhc2hhbnRoIFBhdGlsIChwcmFz cGF0aSk7DQo+ID4+IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4N Cj4gPj4+ICAgICA+IEtvcGlhOiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hh aXJzQGlldGYub3JnPjsgJ0Rhbg0KPiBXaW5nJzsNCj4gPj4+ICAgICAnU3BlbmNlciBEYXdraW5z IGF0IElFVEYnDQo+ID4+Pg0KPiA+Pj4gICAgID4gw4RtbmU6IFJFOiBbdHJhbV0gZHJhZnQtaWV0 Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPiA+Pj4NCj4gPj4+ICAgICA+DQo+ID4+Pg0K PiA+Pj4gICAgID4gSGkgQnJhbmRvbiwNCj4gPj4+DQo+ID4+PiAgICAgPg0KPiA+Pj4NCj4gPj4+ ICAgICA+IEkganVzdCBsaXN0ZWQgb25lIHBvc3NpYmxlIGF0dGFjaywgdGhlcmUgY291bGQgYmUg dmFyaW91cyBvdGhlciBhdHRhY2tzDQo+IGxpa2UNCj4gPj4gdGhlDQo+ID4+Pg0KPiA+Pj4gICAg ID4gb25lIGRpc2N1c3NlZCBpbiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNTc2NiNz ZWN0aW9uLTE3LjIuMQ0KPiA+Pj4gICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5j b20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+IDNBX190b29scy5pZXRmLm9yZ19odG1sX3JmYzU3NjYt MjNzZWN0aW9uLQ0KPiA+PiAyRDE3LjIuMSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGpwTjZM Wmcmcj1id1otDQo+ID4+IG5uUkdXbWNHS1JJdWFkcTYtTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZt PUxYYUgtDQo+ID4+DQo+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9 eVRUWUtnb3IyX2FqSGU3S1BfNEJ6bmwNCj4gPj4gRzFFYW11SXlfSzdhazBVNDBSYk0mZT0+LA0K PiA+Pj4NCj4gPj4+ICAgICA+IHdoZXJlIGF0dGFja2VyIHNlbmRzIGZha2VkIHBlcm1pc3Npb25z IHRvIHRoZSBUVVJOIHNlcnZlciB0byBsYXVuY2gNCj4gPj4gYXR0YWNrDQo+ID4+Pg0KPiA+Pj4g ICAgID4gKERPUyBvciBERE9TKSBvbiB0aGUgdmljdGltIChUVVJOIGNsaWVudCkuDQo+ID4+Pg0K PiA+Pj4gICAgID4NCj4gPj4+DQo+ID4+PiAgICAgPiBXZSBzaG91bGQgZGlzY3VzcyBhbGwgc3Vj aCBwb3NzaWJsZSBhdHRhY2tzLCBiZWZvcmUgd2UgZGVjaWRlIHRvIGdvDQo+IHdpdGgNCj4gPj4+ DQo+ID4+PiAgICAgPiBNVVNUIG9yIFNIT1VMRC4NCj4gPj4+DQo+ID4+PiAgICAgPg0KPiA+Pj4N Cj4gPj4+ICAgICA+IC1UaXJ1DQo+ID4+Pg0KPiA+Pj4gICAgID4NCj4gPj4+DQo+ID4+PiAgICAg PiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiBGcm9t OiB0cmFtIFttYWlsdG86dHJhbS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgQnJhbmRv bg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gV2lsbGlhbXMNCj4gPj4+DQo+ID4+PiAgICAgPiA+IFNl bnQ6IE1vbmRheSwgTm92ZW1iZXIgMTQsIDIwMTYgNzozMSBQTQ0KPiA+Pj4NCj4gPj4+ICAgICA+ ID4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29tDQo+ ID4+IDxtYWlsdG86dGlyZWRkeUBjaXNjby5jb20+PjsgS2FybCBTdGFobA0KPiA+Pj4NCj4gPj4+ ICAgICA+ID4gPGthcmwuc3RhaGxAaW5nYXRlLmNvbSA8bWFpbHRvOmthcmwuc3RhaGxAaW5nYXRl LmNvbT4+OyBQcmFzaGFudGgNCj4gPj4+ICAgICBQYXRpbCAocHJhc3BhdGkpDQo+ID4+Pg0KPiA+ Pj4gICAgID4gPiA8cHJhc3BhdGlAY2lzY28uY29tIDxtYWlsdG86cHJhc3BhdGlAY2lzY28uY29t Pj47IHRyYW1AaWV0Zi5vcmcNCj4gPj4+ICAgICA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+ID4+ Pg0KPiA+Pj4gICAgID4gPiBDYzogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNo YWlyc0BpZXRmLm9yZz47ICdEYW4gV2luZycNCj4gPj4+ICAgICA8ZGFuQGRhbndpbmcub3JnIDxt YWlsdG86ZGFuQGRhbndpbmcub3JnPj47ICdTcGVuY2VyDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiBE YXdraW5zIGF0IElFVEYnIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbQ0KPiA+PiA8bWFp bHRvOnNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ IFN1YmplY3Q6IFJlOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVy eQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ICsxIG9uIHRoZSBy YXRpb25hbGUuIEl0IG1ha2VzIGFsbW9zdCBubyBkaWZmZXJlbmNlIGhvdyB5b3Ugc2VjdXJlDQo+ IHRoZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmsgYXQgdGhl IGJvcmRlciwgaXQncyBzdGlsbCBwb3NzaWJsZSB0aGF0IHRoZXJlDQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiBhcmUNCj4gPj4+DQo+ID4+PiAgICAgPiBvbi1wYXRoDQo+ID4+Pg0KPiA+Pj4gICAgID4g PiBhZHZlcnNhcmllcywgYW5kIHVzaW5nIHNvbWUgdHlwZSBvZiBhdXRoZW50aWNhdGlvbiAoZWl0 aGVyIChEKVRMUyBvcg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gU1RVTikgaGVscHMgdG8gcHJvdGVj dCBhZ2FpbnN0IHRoZW0uDQo+ID4+Pg0KPiA+Pj4gICAgID4gPg0KPiA+Pj4NCj4gPj4+ICAgICA+ ID4gSSBzdGlsbCBhZ3JlZSB3aXRoIEthcmwgb24gZG93bmdyYWRpbmcgdGhlIE1VU1QgYmFjayB0 byBTSE9VTEQgb3INCj4gPj4+DQo+ID4+PiAgICAgPiA+IFJFQ09NTUVOREVELCBzaW5jZSBJIHRo aW5rIHRoZXJlJ3Mgcm9vbSBmb3IgZGlzYWdyZWVtZW50IGFib3V0DQo+ID4+IGhvdw0KPiA+Pj4N Cj4gPj4+ICAgICA+ID4gY3JpdGljYWwgaXQgaXMgdG8gbWl0aWdhdGUgYWdhaW5zdCB0aGF0IGF0 dGFjay4gRWFzZS1vZi11c2UgbWlnaHQgd2luDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiBvdXQNCj4g Pj4+DQo+ID4+PiAgICAgPiBmb3Igc29tZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gbmV0d29ya3Mg cHJvdmlkZWQgdGhleSBoYXZlIG90aGVyIHByb3RlY3Rpb24gbWVjaGFuaXNtcyBhdCBlaXRoZXIN Cj4gPj4gdGhlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiBuZXR3b3JrIG9yIGRhdGFsaW5rIGxheWVy LiBJIGRvbid0IHRoaW5rIGl0IHNob3VsZCBkcm9wIGJlbG93IHRoZQ0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gcmVjb21tZW5kYXRpb24gbGV2ZWwgdGhvdWdoLCBiZWNhdXNlIG1vc3QgbmV0d29yayB3 aWxsIG5vdCBoYXZlDQo+ID4+IHN1Y2gNCj4gPj4+DQo+ID4+PiAgICAgPiA+IG1lY2hhbmlzbXMg aW4gcGxhY2UuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gLS1C cmFuZG9uDQo+ID4+Pg0KPiA+Pj4gICAgID4gPg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gT24gMTEv MTQvMjAxNiAwNjozNiBBTSwgVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSB3cm90ZToNCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4gVGhlcmUgc2VlbXMgdG8gYmUgY29uZnVzaW9uIHdoeSAoRClU TFMgaXMgbWFuZGF0ZWQgaW4gdGhlIGRyYWZ0Lg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPg0KPiA+ Pj4NCj4gPj4+ICAgICA+ID4gPiBUaGUgZHJhZnQgbWFuZGF0ZXMgKEQpVExTIGJ1dCBkb2VzIG5v dCBtYW5kYXRlIFRVUk4gc2VydmVyDQo+ID4+IHZhbGlkYXRpb24uDQo+ID4+Pg0KPiA+Pj4gICAg ID4gSW4NCj4gPj4+DQo+ID4+PiAgICAgPiA+IHNjZW5hcmlvcyB3aGVyZSB0aGUgVFVSTiBjbGll bnQgY2Fubm90IHZhbGlkYXRlIHRoZSBUVVJOIHNlcnZlciwNCj4gPj4+DQo+ID4+PiAgICAgPiA+ IChEKVRMUyBoZWxwcyBhdm9pZCB2YXJpb3VzIGF0dGFja3MsIGxpa2UgYXR0YWNrZXIgc2VuZGlu ZyBzcG9vZmVkDQo+IFRVUk4NCj4gPj4+DQo+ID4+PiAgICAgPiA+IG1lc3NhZ2VzDQo+ID4+Pg0K PiA+Pj4gICAgID4gdG8NCj4gPj4+DQo+ID4+PiAgICAgPiA+IFRVUk4gY2xpZW50IGFuZCBzZXJ2 ZXIuIEZvciBleGFtcGxlLCB3aGVuIChEKVRMUyBpcyBub3QgdXNlZCwNCj4gYXR0YWNrZXINCj4g Pj4+DQo+ID4+PiAgICAgPiA+IGNhbiBzZW5kIHNwb29mZWQgVFVSTiByZXF1ZXN0cyB0byB0aGUg VFVSTiBzZXJ2ZXIgdG8gY2xvc2UNCj4gPj4gYWxsb2NhdGlvbnMuDQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+IFRoZSBhYm92ZSBhdHRhY2sgaXMgcG9zc2li bGUgd2hlbiBUVVJOIHNlcnZlcnMgYXJlIHByb3ZpZGVkIGJ5DQo+ID4+Pg0KPiA+Pj4gICAgID4g PiA+IGVpdGhlcg0KPiA+Pj4NCj4gPj4+ICAgICA+IGxvY2FsDQo+ID4+Pg0KPiA+Pj4gICAgID4g PiBvciBhY2Nlc3MgbmV0d29ya3MuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+DQo+ID4+Pg0KPiA+ Pj4gICAgID4gPiA+IC1UaXJ1DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+DQo+ID4+Pg0KPiA+Pj4g ICAgID4gPiA+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+Pj4NCj4gPj4+ICAgICA+ ID4gPj4gRnJvbTogdHJhbSBbbWFpbHRvOnRyYW0tYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxm IE9mIEthcmwNCj4gU3RhaGwNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IFNlbnQ6IE1vbmRheSwg Tm92ZW1iZXIgMTQsIDIwMTYgMTozOCBQTQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gVG86ICdC cmFuZG9uIFdpbGxpYW1zJyA8YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tDQo+ID4+IDxtYWls dG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tPj47DQo+ID4+PiAgICAgUHJhc2hhbnRoDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBQYXRpbA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gKHBy YXNwYXRpKSA8cHJhc3BhdGlAY2lzY28uY29tIDxtYWlsdG86cHJhc3BhdGlAY2lzY28uY29tPj47 DQo+ID4+IHRyYW1AaWV0Zi5vcmcNCj4gPj4+ICAgICA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBDYzogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0 cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4NCj4gV2luZycNCj4gPj4+ICAgICA8ZGFuQGRhbndp bmcub3JnIDxtYWlsdG86ZGFuQGRhbndpbmcub3JnPj47ICdTcGVuY2VyDQo+ID4+Pg0KPiA+Pj4g ICAgID4gPiA+PiBEYXdraW5zIGF0IElFVEYnIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNv bQ0KPiA+Pj4gICAgIDxtYWlsdG86c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20+PjsgVGly dW1hbGVzd2FyDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBSZWRkeQ0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gPj4gKHRpcmVkZHkpIDx0aXJlZGR5QGNpc2NvLmNvbSA8bWFpbHRvOnRpcmVkZHlAY2lz Y28uY29tPj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IFN1YmplY3Q6IFJlOiBbdHJhbV0gZHJh ZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IEhpIEJyYW5kb24sDQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gSW4gdGhpcyBkcmFmdCwgeW91IGhhdmUg YmVlbiBwdXNoaW5nIGZvciAidmFsaWRhdGlvbiIgb2YgdGhlDQo+ID4+Pg0KPiA+Pj4gICAgID4g PiA+PiBkaXNjb3ZlcmVkIFRVUk4gc2VydmVyIGJ5IHVzaW5nIERUTFMuIFRoZSB1c2UgY2FzZSBm b3IgdGhhdCBoYXMNCj4gbm90DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBiZWVuIHNwZWxsZWQg b3V0LCBidXQgdGhlIHVzZSBjYXNlIG9mICJUVVJOIHNlcnZlcnMgKnByb3ZpZGVkDQo+IGJ5Kg0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gdGhlIGxvY2FsIG5ldHdvcmsgb3IgYnkgdGhlIGFjY2Vz cyBuZXR3b3JrIiwgcmVhbGx5IG5lZWRzIHRvIGJlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBj bGFyaWZpZWQgaW4gdGhpcyBkcmFmdC4gRm9yIHRoaXMgdXNlIGNhc2UsIGNsZWFyYW5jZSBmcm9t DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBhdXRoZW50aWNhdGlvbiBhbmQgdmFsaWRhdGlvbiB3 YXMgbWFkZSBpbiB2ZXJzaW9uIC0wNyBvZiB0aGUNCj4gZHJhZnQNCj4gPj4+DQo+ID4+PiAgICAg PiBhbHJlYWR5Lg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+IFJlZ2FyZGluZyB5b3VyIGNvbW1lbnQgYmVsb3csIGl0IGlzIG5vdCBjbGVhciB3aGljaCB1 c2UgY2FzZQ0KPiBZT1UNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IE5PVyBhcmUgY29uc2lkZXJp bmcuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gRnVy dGhlciwgRElTQ09WRVJZIGFuZCBVU0FHRSBhcmUgbm90IHRoZSBzYW1lIGluIHRoaXMNCj4gZGlz Y3Vzc2lvbi4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IFlvdSBtaXggdGhhdCwgZXNwZWNpYWxs eSByZWdhcmRpbmcgdGhlIGFueWNhc3QgbWV0aG9kLiBObyBvbmUgaXMNCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+IHN1Z2dlc3RpbmcgdGhhdCB0aGUgVFVSTiBzZXJ2ZXIgaXMgVVNFRCB3aGVuIGFk ZHJlc3NlZCBieQ0KPiA+PiBhbnljYXN0Lg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gVGhlcmUg aXMgb25seSBPTkUgcGFja2V0IGFkZHJlc3NlZCBieSBhbnljYXN0IGFuZCBzZW50IHRvIHRoZQ0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gU1RVTi9UVVJOIHNlcnZlciBhbmQgdGhhdCBpcyBmb3Ig RElTQ09WRVJJTkcgaXQuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pg0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gPj4gU2VlIGZ1cnRoZXIgaW5saW5lIGJlbG93Lg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IFRoYW5rcywNCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+IEthcmwNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+ PiAtLS0tLVVyc3BydW5nbGlndCBtZWRkZWxhbmRlLS0tLS0NCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+IEZyw6VuOiBCcmFuZG9uIFdpbGxpYW1zIFttYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2Ft YWkuY29tXQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gU2tpY2thdDogZGVuIDExIG5vdmVtYmVy IDIwMTYgMTk6MDgNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IFRpbGw6IEthcmwgU3RhaGw7ICdQ cmFzaGFudGggUGF0aWwgKHByYXNwYXRpKSc7IHRyYW1AaWV0Zi5vcmcNCj4gPj4gPG1haWx0bzp0 cmFtQGlldGYub3JnPg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gS29waWE6IHRyYW0tY2hhaXJz QGlldGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+OyAnRGFuDQo+ID4+IFdpbmcn Ow0KPiA+Pj4gICAgICdTcGVuY2VyIERhd2tpbnMgYXQgSUVURic7DQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+PiAnVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KScNCj4gPj4+DQo+ID4+PiAgICAg PiA+ID4+IMOEbW5lOiBSZTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNj b3ZlcnkNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiAo MSkgSSBhZ3JlZSB3aXRoIEthcmwgdGhhdCB0aGUgTVVTVCBmb3IgKEQpVExTIG9yIFNUVU4gYXV0 aA0KPiBzaG91bGQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHJldmVydCB0byBhIFNIT1VMRCBv ciBhIFJFQ09NTUVOREVELCBnaXZlbiB0aGF0IG5ldHdvcmsNCj4gPj4gcGVyaW1ldGVyDQo+ID4+ Pg0KPiA+Pj4gICAgID4gPiA+PiBjb250cm9sIGlzIGNhbGxlZCBvdXQgd2l0aCBNVVNUIChub3Rl IHRoYXQgdGhlcmUgYXJlIGEgZmV3ICJtdXN0Ig0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gdG8g Ik1VU1QiIGVkaXRzIHJlcXVpcmVkIGluIHRoYXQgdGV4dCkuIEFsdGhvdWdoIEkgd291bGQgZGlz YWdyZWUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHdpdGggYW4gZW50ZXJwcmlzZSBuZXR3b3Jr IGFkbWluIHdobyBjaG9vc2VzIG5vdCB0byBkbyBvbmUgb2YNCj4gPj4gdGhvc2UNCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+IHR3byB0aGluZ3MgKHNlZSBteSBjb21tZW50cyBhYm91dCAoMykvKDQp IGJlbG93KSwgSSB0aGluayB0aGVyZSdzDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiByb29tIGZv ciBkaWZmZXJlbmNlIG9mIG9waW5pb24gdGhlcmUsIHNvIE1VU1QgaXMgdW5saWtlbHkgdG8gYmUN Cj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGNvbXBsaWVkDQo+ID4+Pg0KPiA+Pj4gICAgID4gd2l0 aA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gYW55d2F5Lg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4N Cj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IFtLYXJsXSBHb29kIHRoYXQgeW91IGFncmVlIHRoZSBN VVNUICh0aHJvd24taW4gZHVyaW5nIGRpc2N1c3MpDQo+ID4+IG11c3QNCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+IGdvIGF3YXksIGJ1dCBmb3IgdGhlIHVzZSBjYXNlIG9mICJUVVJOIHNlcnZlcnMg KnByb3ZpZGVkIGJ5KiB0aGUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGxvY2FsIG5ldHdvcmsg b3IgYnkgdGhlIGFjY2VzcyBuZXR3b3JrLiIgdGhlcmUgc2hvdWxkIG5vdCBldmVuDQo+IGJlDQo+ ID4+Pg0KPiA+Pj4gICAgID4gU0hPVUxEDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiBvciBSRUNPTU1F TkQuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBZb3VyIGFyZSByZWxhdGluZyB0byBUVVJOIHNl cnZlcnMgKnByb3ZpZGVkIGJ5KiAoYW5kIG1haW50YWluZWQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+IGJ5Pykgc29tZSAidHJ1c3QgYW5jaG9yIHN0b3JlIFtSRkM2MDI0XSBhbGxvd3MgYSBUVVJO IGNsaWVudCAuLi4iDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBvciBieSAiQ2VydGlmaWNhdGlv biBhdXRob3JpdGllcyB0aGF0IGlzc3VlIFRVUk4gc2VydmVyDQo+ID4+Pg0KPiA+Pj4gICAgID4g PiA+PiBjZXJ0aWZpY2F0ZXMiIHRoYXQgKnByb3ZpZGUgVFVSTiBzZXJ2ZXJzIHdpdGggdGhlaXIg Y2VydGlmaWNhdGVzDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBpbiogdGhhdCB5b3UgZXhwZWN0 IHRvIGJlIGRpc2NvdmVyZWQgYW5kIHdoZXJlIHRoZSBUVVJOIGNsaWVudA0KPiA+PiAodGhlDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBXZWJSVEMgYnJvd3NlcikgbXVzdCBiZSBlcXVpcHBlZCB0 byBhY2NlcHQgdGhvc2UgY2VydGlmaWNhdGVzLg0KPiA+PiBUaGF0DQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+PiBpcyBOT1QgRk9SICJ0aGUgVFVSTiBzZXJ2ZXJzICpwcm92aWRlZCBieSogdGhlIGxv Y2FsIG5ldHdvcmsgb3INCj4gPj4gYnkNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHRoZSBhY2Nl c3MgbmV0d29yayIgdGhhdA0KPiA+Pj4NCj4gPj4+ICAgICA+IGlzDQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiBiZWluZyBkaXNjdXNzZWQgaGVyZS4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+DQo+ID4+ Pg0KPiA+Pj4gICAgID4gPiA+Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gKDIpIEkgZGlzYWdy ZWUgd2l0aCBLYXJsIGFib3V0IGFueWNhc3QuIEEgc2VydmVyIHRoYXQgcHJvcGVybHkNCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+IHN1cHBvcnRzIGFueWNhc3QgW0thcmxdIFdoYXQgaXMgImEgc2Vy dmVyIHRoYXQgcHJvcGVybHkgc3VwcG9ydHMNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGFueWNh c3QiPyBJdCBpcyBjZXJ0YWlubHkgTk9UIEEgW1JGQzU3NjZdIFRVUk4gc2VydmVyIHRoYXQgaXMN Cj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHN1cHBvc2VkDQo+ID4+Pg0KPiA+Pj4gICAgID4gdG8N Cj4gPj4+DQo+ID4+PiAgICAgPiA+IGJlIGRpc2NvdmVyZWQgYnkgdGhpcyBkcmFmdC4NCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+IEFsc28gbm90aWNlIHRoYXQgd2UgYXJlIHRhbGtpbmcgYWJvdXQg b25lIGFueWNhc3QgcGFja2V0IEZPUg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gRElTQ09WRVJZ LCBOT1QgVVNBR0UgKHJlbGF5aW5nIHRyYWZmaWMpIHdpdGggYW55Y2FzdCBhZHJlc3NpbmcuDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiAoSSBhc2tlZCB0aGF0IHRoZSBjb25mdXNpbmcgInN1cHBv cnRzIGFueWNhc3QiIHN0YXRlbWVudCBpcw0KPiByZW1vdmVkDQo+ID4+Pg0KPiA+Pj4gICAgID4g PiA+PiBmcm9tIHRoZSBiZWdpbm5pbmcgb2YgdGhlIGRyYWZ0LikNCj4gPj4+DQo+ID4+PiAgICAg PiA+ID4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiB3aWxsIGluZGVlZCB0cmVhdCBpbmNvbWlu ZyByZXF1ZXN0cyBkaWZmZXJlbnRseSBkZXBlbmRpbmcgdXBvbg0KPiA+Pj4NCj4gPj4+ICAgICA+ ID4gPj4gd2hldGhlciB0aGV5IGFycml2ZSBvbiB0aGUgYW55Y2FzdCBhZGRyZXNzIG9yIHRoZSB1 bmljYXN0DQo+IGFkZHJlc3MuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBJIHN0cm9uZ2x5IGRp c2FncmVlIHdpdGggdGhlIGlkZWEgb2YgdXNpbmcgVHJ5IEFsdGVybmF0ZSBvbiB0aGUNCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+IGJpbmRpbmcgcmVxdWVzdCwgYmVjYXVzZSB5b3Ugd2FudCByZWRp cmVjdCBmb3IgdGhlIGxvbmctbGl2ZWQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGFsbG9jYXRl IHJlcXVlc3QsIG5vdCBmb3IgdGhlIHF1ZXJ5LXJlc3BvbnNlIGJpbmRpbmcgcmVxdWVzdC4NCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4+IFtLYXJsXSBXaXRoIGEgVFVSTiBzZXJ2ZXIgcHJvdmlkZWQg YnkgdGhlIGxvY2FsIG9yIGFjY2Vzcw0KPiBuZXR3b3JrLA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4gU1RVTiBpcyBOT1QgVVNFRCBmb3Igc2V0dGluZyB1cCBhbnkgYmluZGluZyBhbmQgbm8gc3Vi c2VxdWVudA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gdHJhZmZpYy4gVGhlIFNUVU4gYmluZGlu ZyByZXNwb25zZSAzMDAgVHJ5IEFsdGVybmF0ZSAoc3RhdGljYWxseQ0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gPj4gY29uZmlndXJlZCkgaW4gbXkgcHJvcG9zZWQgdGV4dCwgaXMgb25seSBhbiBpbmRp Y2F0aW9uIHVzZWQgYXQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IERJU0NPVkVSWSwgdGhhdCBh IG5ldHdvcmsgcHJvdmlkZWQgVFVSTiBzZXJ2ZXIgaXMgdGhlcmUgYW5kDQo+ID4+IHNob3VsZA0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gYmUgdXNlZCBhdCBpdHMgdW5pY2FzdCBhZGRyZXNzIHJl dmVhbGVkIGluIHRoZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gMzAwIHJlc3BvbnNlLiBUaGUg bG9uZy1saXZlZCBUVVJOIGFsbG9jYXRlIElTIFVTRUQgZm9yIHRoZQ0KPiB0cmFmZmljLg0KPiA+ Pj4NCj4gPj4+ICAgICA+ID4gPj4gVGhlIFNUVU4gc2VydmVyIHBvcnRpb24gb2YgdGhlIFRVUk4g c2VydmVyIHBhcmFsbGVsaW5nIHRoZQ0KPiBkZWZhdWx0DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+ PiBnYXRld2F5IHJvdXRlciBpcyBuZXZlciB1c2VkIGZvciBhbnkgYmluZGluZy4NCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBQYXJ0IG9mIG15IHJlYXNv biBmb3IgdGhpcyBpcyB0aGF0IGdvb2QgKGJ5IG15IGRlZmluaXRpb24pIFRVUk4NCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+IHNlcnZlciBkaXN0cmlidXRpb24gaXMgYnJvYWRlciB0aGFuIGlzIHJl YXNvbmFibGUgZm9yIGFueWNhc3QNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGFkZHJlc3MgbWFu YWdlbWVudCwgYW5kIGRldGVybWluaW5nIGEgcmVkaXJlY3QgYWRkcmVzcyB0byBiZQ0KPiA+Pj4N Cj4gPj4+ICAgICA+ID4gPj4gZGVsaXZlcmVkIGluY3JlYXNlcyB0aGUgY29zdCBvZiBoYW5kbGlu ZyB0aGUgU1RVTiBiaW5kIHJlcXVlc3QuIEl0DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBpcyBk ZXNpcmFibGUgZm9yIHRoYXQgY29zdCB0byBzY2FsZSB3aXRoIHRoZSBUVVJOIGFsbG9jYXRlIGxv YWQsDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBub3QgdGhlIFNUVU4gYmluZA0KPiA+Pj4NCj4g Pj4+ICAgICA+IGxvYWQuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBbS2FybF0gWW91IGp1c3Qg YWRkIGEgc3RhdGljIHJvdXRlIGluIHlvdSBhY2Nlc3Mgcm91dGVyIGZvciB0aGUNCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+IGFueWNhc3QgYWRkcmVzcyB0byBwb2ludCB0byB5b3VyIFRVUk4gc2Vy dmVyIQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IEkg ZG9uJ3Qgb3Bwb3NlIHN1cHBvcnRpbmcgYm90aCBpbiB0aGUgc3BlYyBpZiBzb21lb25lIHdhbnRz IHRvDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBwcm9wb3NlIGxhbmd1YWdlIGZvciB0aGF0LCBi dXQgaXQgd291bGQgYWRkIGJ1cmRlbiB0byBjbGllbnQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+ IGltcGxlbWVudGF0aW9ucyBiZWNhdXNlIHRoZXkgd291bGQgYmUgcmVxdWlyZWQgdG8gc3VwcG9y dA0KPiBib3RoDQo+ID4+IGV2ZW4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHRob3VnaCB0aGUg c2VydmVyIGNvdWxkIHVzZSBlaXRoZXIuIE9uIHRoZSBvdGhlciBoYW5kLCB0aGUNCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+IGN1cnJlbnRseSBkZWZpbmVkIG1ldGhvZCBzaG91bGRuJ3QgcmVxdWly ZSBjaGFuZ2VzIHRvIGNsaWVudHMgYXQNCj4gYWxsLg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4g W0thcmxdID8hIEJ1dCBpdCBkb2VzIG5vdCBmaW5kIFtSRkM1NzY2XSBUVVJOIHNlcnZlcnMuLi4N Cj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiAoMykvKDQp IEkgZGlzYWdyZWUgd2l0aCBLYXJsJ3MgYXNzZXNzbWVudCBvZiB0aGUgZGVwbG95bWVudA0KPiA+ Pj4NCj4gPj4+ICAgICA+ID4gPj4gY29uc2lkZXJhdGlvbnMsIGVzcGVjaWFsbHkgdGhlIGNvbmNs dXNpb24gdGhhdCBhbnljYXN0IGlzIHRoZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gYmV0dGVy IHBhdGggZm9yIGxvY2FsL2FjY2VzcyBuZXR3b3Jrcy4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+ IFtLYXJsXSBJZiB5b3UgbWVhbiB0cmFmZmljIHBhdGhzIChsaWtlIEkgZGlkKSwgInBhdGhzIiBh cmUgZm9yDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBVU0FHRSBhbmQgbm8gb25lIGlzIHN1Z2dl c3RpbmcgYW55Y2FzdCBmb3IgdGhhdC4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IEluZGVwZW5k ZW50IG9mIGhvdyBkaXNjb3ZlcmVkIChieSBhbnljYXN0IG9yIGFueSBvZiB0aGUgRE5TDQo+ID4+ Pg0KPiA+Pj4gICAgID4gPiA+PiBtZXRob2RzKSBBTEwgVVNBR0UgdGhyb3VnaCBwYXRocyBpcyBi eSB1bmljYXN0IGFkZHJlc3NpbmcuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pg0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gPj4gSXQgbWlnaHQgYmUgYmV0dGVyIGZvciB0aGUgc2VydmVyDQo+ID4+Pg0K PiA+Pj4gICAgID4gPiA+PiBpbXBsZW1lbnRlciwgYnV0IG5vdCBmb3IgdGhlIHRoZSBjbGllbnQs IGJlY2F1c2UgSSB0aGluayBpdCdzDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBwYXJ0aWN1bGFy bHkgZGlmZmljdWx0IGZvciBhIGNsaWVudCB0byBkZXRlcm1pbmUgd2hldGhlciBpdCdzDQo+ID4+ Pg0KPiA+Pj4gICAgID4gPiA+PiBuZXR3b3JrDQo+ID4+Pg0KPiA+Pj4gICAgID4gaXMNCj4gPj4+ DQo+ID4+PiAgICAgPiA+ICJzZWFsZWQiLg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gW0thcmxd IE5vLCBub3QgYXQgYWxsLiBCbG9ja2luZyBTVFVOIHBhY2tldHMgYXQgdGhlIGRlZmF1bHQgZ2F0 ZXdheQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gaXMgdGhlIHdheSB0byAibmV0d29yayB3aXNl IiBzZWFsIHRoZSBsb2NhbCBuZXR3b3JrIChhbmQgb25seQ0KPiBhbGxvdw0KPiA+Pj4NCj4gPj4+ ICAgICA+ID4gPj4gdGhlIHBhcmFsbGVsIFRVUk4gcGF0aCkhIFRoYXQgaXMgZWFzaWx5IGRldGVj dGVkIGJ5IGEgVFVSTiBjbGllbnQuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pg0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gPj4gVGhlIGNsaWVudCBoYXMgdG8gdHJ1c3QgdGhhdCB0aGUgbmV0d29yayBp cyBwcm9wZXJseSBzZWFsZWQsIHNpbmNlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBpdCdzIGRp ZmZpY3VsdCAoYXQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGxlYXN0KSBmb3IgdGhlIGNsaWVu dCB0byB2ZXJpZnkuIEFsc28sIEkgdGhpbmsgdGhhdCB0aGUgRE5TIGFuZA0KPiA+Pj4NCj4gPj4+ ICAgICA+ID4gPj4gREhDUCBtZXRob2RzIGFyZSBsaWtlbHkgdG8gYmUgZWFzaWVyIGZvciBlbnRl cnByaXNlIGFuZCBhY2Nlc3MNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IG5ldHdvcmtzIHRvIGlt cGxlbWVudCwgc2luY2UgdGhleSB3aWxsIGhhdmUgdGhlIG5lY2Vzc2FyeQ0KPiBzeXN0ZW1zDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBpbiBwbGFjZSBhbHJlYWR5LiBFdmVuIGEgaG9tZSBuZXR3 b3JrIGdhdGV3YXkgYXBwbGlhbmNlIHdpbGwNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGFscmVh ZHkgaGF2ZSBib3RoIGludGVncmF0ZSBETlMgYW5kIGludGVncmF0ZSBESENQLCBzbyBJIHN1c3Bl Y3QNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHRoYXQgYSBzbWFsbCBsb2NhbCBuZXR3b3JrIHdp bGwgaGF2ZSBhbiBlYXNpZXIgdGltZSB3aXRoIHRoZXNlIHRoYW4NCj4gPj4geW91DQo+ID4+Pg0K PiA+Pj4gICAgID4gc3VnZ2VzdCBhcyB3ZWxsLg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4NCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4+IFtLYXJsXSBTbyB5b3UgYWdyZWUgdGhhdCBmb3IgYSBUVVJO IHNlcnZlciBpbiBhIGxvY2FsIG5ldHdvcmssIGl0cw0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4g YWRkcmVzcyBzaGFsbCBvbmx5IGJlIGRlcGxveWVkIGluIGxvY2FsIEROUyAtIEkgdGhpbmsgdGhl IGRyYWZ0DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBzaG91bGQNCj4gPj4+DQo+ID4+PiAgICAg PiBzYXkNCj4gPj4+DQo+ID4+PiAgICAgPiA+IHRoYXQgYWxzby4NCj4gPj4+DQo+ID4+PiAgICAg PiA+ID4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBEZXNwaXRlIHRoZSBmYWN0IHRoYXQgSSBk aXNhZ3JlZSB3aXRoIHRoZSBhc3Nlc3NtZW50LCBJIGRvbid0IHJ1biBhDQo+ID4+Pg0KPiA+Pj4g ICAgID4gPiA+PiBsb2NhbCBuZXR3b3JrIG9yIGFuIGFjY2VzcyBuZXR3b3JrIGFuZCB3b3VsZCBu b3QgZXhwZWN0IHRvDQo+IGRlcGxveQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gcmVsYXlzIG1l YW50IHRvIGZ1bmN0aW9uIGluIHRoYXQgbW9kZSwgc28gSSB3aWxsIG5vdCBoYXZlIHN0cm9uZw0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gb2JqZWN0aW9ucyB0byBpbmNsdWRpbmcgdGhhdCBsYW5n dWFnZSBpZiB0aGVyZSBpcyBicm9hZCBzdXBwb3J0DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiB3 aXRoaW4NCj4gPj4+DQo+ID4+PiAgICAgPiB0aGUNCj4gPj4+DQo+ID4+PiAgICAgPiA+IFdHIGZv ciBLYXJsJ3MgZnJhbWluZy4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+DQo+ID4+Pg0KPiA+Pj4g ICAgID4gPiA+PiAtLUJyYW5kb24NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+DQo+ID4+Pg0KPiA+ Pj4gICAgID4gPiA+PiBPbiAxMS8xMC8yMDE2IDA1OjQ4IFBNLCBLYXJsIFN0YWhsIHdyb3RlOg0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICgxKSBUaGUgZG93bmdyYWRlIG9mIHRoZSBNVVNUIGxl dmVsIHJlcXVpcmVtZW50IGZvcg0KPiA+PiBhdXRoZW50aWNhdGlvbg0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gPj4+IGRlZmluZWQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGluIFtSRkM1NzY2XSB3 YXMgInJpZ2h0bHkiICh0byB1c2UgdGhlIHRlcm0gZnJvbSBiZWxvdykNCj4gaW50cm9kdWNlZA0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gYW5kIG1hZGUgT1BUSU9OQUwgZm9yIFRVUk4gc2VydmVy cyBwcm92aWRlZCBieSB0aGUgbG9jYWwgb3INCj4gPj4gYWNjZXNzDQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiBuZXR3b3JrLg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+Pj4gSE9XRVZFUiwgUHJhc2hhbnRoJ3M6ICJJIHRoaW5rIHdlIGNhbiBtYW5kYXRlIChE KVRMUyAqaWYqDQo+IFNUVU4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGF1dGhlbnRpY2F0aW9u IG9yIHRoaXJkLXBhcnR5IGF1dGhvcml6YXRpb24gaXMgbm90IHVzZWQuIiB0aHJvd24tDQo+IGlu DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBkdXJpbmcgdGhlIERJU0NVU1MsIG11c3QgYmUgZGVs ZXRlZCBmcm9tIHRoZSAtMTAgdmVyc2lvbiBvZiB0aGlzDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+ PiBkaXNjb3Zlcnkgc2luY2UgaXQgQkxPQ0tzIHRoZSB1c2FnZSBhbmQgZGVwbG95bWVudCBvZiBu ZXR3b3JrDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBwcm92aWRlZCBUVVJOIHNlcnZlcnMsIHdo aWNoIHdhcyB0aGUgbWFpbiBwdXJwb3NlIG9mIHRoaXMNCj4gPj4gZGlzY292ZXJ5DQo+ID4+Pg0K PiA+Pj4gICAgID4gPiA+PiBkcmFmdC4gKEFsc28sIEF1dGhvcnMncyBkaWQgbm90IGZvbGxvdyBC ZW4gQ2FtcGJlbGwnczogIkkgc2F3IGENCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGNvbW1lbnQg b24gbXkgRElTQ1VTUyBlbWFpbCB0aHJlYWQgZnJvbSBLYXJsIFN0YWhsLCBzdGF0aW5nDQo+IHRo YXQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IERUTFMgY291bGQgbm90IGJlIG1hbmRhdGVkLiBI YXMgdGhhdCBpbnB1dCBiZWVuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBjb25zaWRlcmVkPyIp DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBUaGUg dGhyb3duLWluIGFkZGl0aW9uIGluIHZlcnNpb24gLTEwIChub3Qgc2hvd24gaW4gZnVsbCBiZWxv dykNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBoaWdobGlnaHRzDQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+PiB0aGlzOg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+Pj4gICAgQSBUVVJOIGNsaWVudCBNVVNUIHVzZSAoRClUTFMgLi4uIGluIHRoZSBhYnNl bmNlIG9mIFNUVU4NCj4gbG9uZy0NCj4gPj4gdGVybQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ ICAgIGNyZWRlbnRpYWwgbWVjaGFuaXNtIFtSRkM1Mzg5XSBvciBTVFVOIEV4dGVuc2lvbiBmb3Ig VGhpcmQtDQo+ID4+IFBhcnR5DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAgQXV0aG9yaXph dGlvbiBbUkZDNzYzNV0uICAuLi4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gPj4+ICAgIG8gIEZvciBjZXJ0aWZpY2F0ZS1iYXNlZCBhdXRoZW50aWNhdGlv biwgYSBwcmUtcG9wdWxhdGVkIHRydXN0DQo+ID4+Pg0KPiA+Pj4gICAgID4gYW5jaG9yDQo+ID4+ Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAgICAgc3RvcmUgW1JGQzYwMjRdIGFsbG93cyBhIFRVUk4g Y2xpZW50IC4uLg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4g PiA+Pj4gICAgbyAgQ2VydGlmaWNhdGlvbiBhdXRob3JpdGllcyB0aGF0IGlzc3VlIFRVUk4gc2Vy dmVyIGNlcnRpZmljYXRlcw0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICAgICAgIC4uLg0KPiA+ Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAgbyAgRm9y IFRVUk4gc2VydmVycyB0aGF0IGRvbid0IGhhdmUgYSBjZXJ0aWZpY2F0ZSB0cnVzdCBjaGFpbg0K PiA+Pj4NCj4gPj4+ICAgICA+IChlLmcuLA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICAgICAg IGJlY2F1c2UgdGhleSBhcmUgb24gYSBob21lIG5ldHdvcmsgb3IgYSBjb3Jwb3JhdGUNCj4gbmV0 d29yayksDQo+ID4+IGENCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiAgICAgICBjb25maWd1cmVk IGxpc3Qgb2YgVFVSTiBzZXJ2ZXJzIGNhbiBjb250YWluIHRoZSBTdWJqZWN0DQo+ID4+Pg0KPiA+ Pj4gICAgID4gPiA+Pj4gUHVibGljDQo+ID4+Pg0KPiA+Pj4gICAgID4gS2V5DQo+ID4+Pg0KPiA+ Pj4gICAgID4gPiA+Pj4gICAgICAgSW5mbyAoU1BLSSkgZmluZ2VycHJpbnQgb2YgdGhlIFRVUk4g c2VydmVycy4uLiBldGMuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+PiBXaGF0IGRvZXMgdGhlIEF1dGhvcnMgaGF2ZSBpbiBtaW5kIC0gYSByZWd1bGF0 ZWQgbmV0d29yayBvZg0KPiA+PiBUVVJODQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gc2VydmVy cywNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHdoZW4gdGhlIHB1cnBvc2Ugd2FzIGZvciBldmVy eW9uZSB0byBiZSBhYmxlIHRvIHVzZSBnb29kDQo+IFdlYlJUQw0KPiA+Pj4NCj4gPj4+ICAgICA+ ID4gPj4gZXZlcnl3aGVyZSB5b3UgY2FuIHN1cmYsIGluY2x1ZGluZyBiZWhpbmQgeW91ciBob21l IEJlc3QgQnV5DQo+ID4+IGJvdWdodA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gV2lGaSByb3V0 ZXIgKHdoaWNoIHdlIGNhbiBob3BlLCBzb21lIGRheSwgd2lsbCBpbmNsdWRlIGEgZGVmYXVsdA0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gY29uZmlndXJlZCwgcmVhZHkgdG8gdXNlLCBUVVJOIHNl cnZlciBwYXRoIHBhcmFsbGVsaW5nIGl0cyBkZWZhdWx0DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+ PiBnYXRld2F5IHBhdGggKGkuZS4gdGhlIE5BVC9maXJld2FsbC9hY2Nlc3Mgcm91dGVyL2RlZmF1 bHQNCj4gZ2F0ZXdheSk/DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+PiBUaGlzIHNwZWNpZmljYXRpb24gc2hhbGwgKGF0IGxlYXN0KSBzcGVjaWZ5IGRp c2NvdmVyeSBvZiBuZXR3b3JrDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gcHJvdmlkZWQNCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4+IFRVUk4gc2VydmVycyB0byBhbGxvdyByZWFsLXRpbWUgY29t bXVuaWNhdGlvbiwgaW4gc2l0dWF0aW9ucw0KPiB3aGVyZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4gaXQgb3RoZXJ3aXNlIGlzIG5vdCBwb3NzaWJsZSBvciBiYWQ6DQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+Pj4gLSB0byBtZWV0IHRoZSBhdXRvIGNvbmZpZ3VyYXRpb24gb2YgUkZDIDc0NzggKFdl YiBSZWFsLVRpbWUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBDb21tdW5pY2F0aW9uDQo+ID4+ Pg0KPiA+Pj4gICAgID4gPiA+PiBVc2UgQ2FzZXMgYW5kIFJlcXVpcmVtZW50cykgMi4zLjUuMS4N Cj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiAtIHByb3ZpZGluZyBhIGRpc2NvdmVyeSBtZXRob2Qg c3VpdGFibGUgZm9yDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gZHJhZnQtaWV0Zi1ydGN3ZWIt cmV0dXJuLTAxDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+PiBUaGUgYWJvdmUgaGFzIGFscmVhZHkgYmVlbiBkaXNjdXNzZWQgbWFueSB0aW1lcyBpbiB0 aGlzIFdHOg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWwtDQo+ID4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMTMxOS5odG1sDQo+ID4+PiAg ICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4g Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pg0KPiAyRGFyY2hpdmVfd2ViX3RyYW1fY3Vy cmVudF9tc2cwMTMxOS5odG1sJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4gPj4gdzBGNGpwTjZM Wmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZt PUxYYUgtDQo+ID4+DQo+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9 T3NsMGRUeGlzTTg1WWhkSl9fMGlkbG0NCj4gPj4gRXVIWkRPOTR6ZUVUaDBLdVdPVWcmZT0+DQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4gPj4g YXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAxNzQyLmh0bWwNCj4gPj4+ICAgICA8aHR0cHM6 Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+PiAzQV9fd3d3 LmlldGYub3JnX21haWwtDQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAx NzQyLmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+PiB3MEY0anBONkxaZyZyPWJ3Wi1u blJHV21jR0tSSXVhZHE2LQ0KPiA+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4g Pj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1vdmtLcEFGdGFkbF90 Vy0NCj4gPj4gc0dFOWxLQmlkRmlKOUR3QXhyS3lDLUtnZEM2dyZlPT4NCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPiA+PiBhcmNoaXZlL3dlYi90 cmFtL2N1cnJlbnQvbXNnMDIxOTEuaHRtbA0KPiA+Pj4gICAgIDxodHRwczovL3VybGRlZmVuc2Uu cHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+IDNBX193d3cuaWV0Zi5vcmdfbWFp bC0NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJlbnRfbXNnMDIxOTEuaHRtbCZkPURn TUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+IHcwRjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFk cTYtDQo+ID4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pg0KPiBNVlFpMmxW YkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPTZxVG16cW5FVzVmV1JETnQ2SlQ5Ug0K PiA+PiBXdG5rS2VjT1VZRzhPeVB0QlZZOUVrJmU9Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gSnVzdCBhcyBjcmVkZW50aWFscyBmb3IgYXV0aGVu dGljYXRpb24gY2Fubm90IGJlIGV4cGVjdGVkIHRvIGJlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+ Pj4gYXZhaWxhYmxlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBmb3IgdGhpcyBnZW5lcmFsIHVz YWdlLCBub3IgY2FuIHdlIGltcG9zZSB0aGF0IGNlcnRpZmljYXRlcyBzaG91bGQNCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+IGJlDQo+ID4+Pg0KPiA+Pj4gICAgID4gdXNlZC4NCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+IEZvciB0aGUgbmV0d29yayBwcm92aWRlZCBUVVJOIHNlcnZlciwgd2Ugc2hv dWxkIG5vdC9tdXN0IG5vdA0KPiA+PiBleHBlY3QNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHNv bWUgaGlnaGVyIGxldmVsIG9mIHRydXN0IG9yIHNlY3VyaXR5IHdoZW4gdGhlIHJlYWwtdGltZSBt ZWRpYQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gZmxvd3MgdGhyb3VnaCB0aGUgVFVSTiBzZXJ2 ZXIgdGhhbiB3aGVuIGl0IGdvZXMgdGhyb3VnaCB0aGUNCj4gPj4gZGVmYXVsdA0KPiA+Pj4NCj4g Pj4+ICAgICA+IGdhdGV3YXkhDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+PiBUaGUgdXNlIG9mIChEKVRMUyBoYXMgYmVlbiBkaXNjdXNzZWQgaW50ZW5z aXZlbHkgaW4gdGhlIC0wNA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IHZlcnNpb24gb2YgdGhl DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBkcmFmdA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtDQo+ID4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVu dC9tc2cwMTgyMS5odG1sDQo+ID4+PiAgICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50 LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pg0K PiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9tc2cwMTgyMS5odG1sJmQ9RGdNRmFRJmM9OTZa YlpaY2FNRjQNCj4gPj4gdzBGNGpwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4g TlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+DQo+IE1WUWkybFZiRV9zNHVseDRo bmhFb21YaFFLN3hRRWlrekF1cFI4JnM9SkptNDljRTZWMTBpaXNxSHAzak5lU24NCj4gPj4gcUU3 d0h6RHRTckloc1FVOFN4M0EmZT0+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gYW5kIHdhcyBO T1QgbWFuZGF0ZWQgZm9yIHRoZSBUVVJOIHNlcnZlciBwcm92aWRlZCBieSB0aGUNCj4gbG9jYWwN Cj4gPj4gb3INCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBhY2Nlc3MNCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+IG5ldHdvcmsuIEl0IGNhbm5vdCBiZSB0aHJvd24taW4gbm93IGFnYWluIQ0KPiA+ Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gQW55IGFyZ3Vt ZW50cyBhZ2FpbnN0IGhhdmUgYmVlbiBvZiB0eXBlOiBXZSBuZWVkIHNlY3VyaXR5IGluDQo+ID4+ Pg0KPiA+Pj4gICAgID4gPiA+Pj4gaXRzZWxmDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gLQ0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gcHJvdGVjdCB0aGlzIGFuZCB0aGF0IC0gZG8gZXZlcnkg YXV0aGVudGljYXRpb24vdmFsaWRhdGlvbiBpbiB0aGUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+ IGJvb2sgKHdoZXRoZXIgbmVlZGVkIG9yIG5vdCkgZXRjLiwgd2hpY2ggb25seSBsZWFkcyB0byBy ZXNwb25zZXMNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGxpa2UgSSBoYWQgdG8gYnJpbmcgdXAg ZHVyaW5nIHRoZSBkaXNjdXNzOg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IFtLYXJsXSBEbyB5 b3UgdGhpbmsgd2UgbmVlZCB0byBkaXNjb3ZlciBUVVJOIHNlcnZlcnMgZm9yIHRoZQ0KPiA+Pj4N Cj4gPj4+ICAgICA+ID4gPj4+IHBsZWFzdXJlIG9mDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBk b2luZyAic2VjdXJpdHkgdGhhdCBkZWFsIGRpcmVjdGx5IHdpdGggVFVSTiBtZXNzYWdlcyIgaW4g aXRzZWxmLA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gYW5kIG5vdCBmb3Igd2hhdCB0aGV5IGFy ZSBzdXBwb3NlZCB0byBkbyAocmVsYXkgImFwcGxpY2F0aW9uDQo+IGRhdGEiKQ0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gPj4gYW5kIGRvIHlvdSBhbHNvIHRoaW5rIHRoYXQgaXMgd2h5IGEgbmV0d29y ayBwcm92aWRlciB3aWxsIGRlcGxveQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gc3VjaCBUVVJO DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiBzZXJ2ZXIgZm9yIGhpcyB1c2Vycz8NCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+IFBsZWFzZSBkbyBub3Qgc3RvcCB0aGUgcHVycG9zZSAoYnkgc3VjaCBwaHJh c2VzKSENCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiAoQWxzbywgZW5jcnlwdGlvbiBhbmQgcHJv dGVjdGlvbiBhZ2FpbnN0IG1hbi1pbi10aGUtbWlkZGxlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+ Pj4gYXR0YWNrcywgZm9yDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiB0aGUgcGF5bG9hZCAocmVh bC10aW1lIHRyYWZmaWMpIGFyZSBmb3IgdGhlIGVuZHBvaW50cyB0byBkbyAtIGxpa2UNCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+IHdpdGggV2ViUlRDLCBtYW5kYXRpbmcgRFRMUy1TUlRQIG1lZGlh IC0gaXQgc2hvdWxkIG5vdCBiZQ0KPiA+PiBleHBlY3RlZA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4gdG8gYmUgZG9uZSBieSBhIFRVUk4gc2VydmVyLCBlc3BlY2lhbGx5IHdoZW4gbm90IGFsd2F5 cyB1c2VkLikNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gKDIpIEFsc28gYXMgcG9pbnRlZCBvdXQgZHVy aW5nIHRoZSBESVNDVVNTDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbC0NCj4gPj4gYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAyMTQ0Lmh0bWwN Cj4gPj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0 dHBzLQ0KPiA+PiAzQV9fd3d3LmlldGYub3JnX21haWwtDQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJf dHJhbV9jdXJyZW50X21zZzAyMTQ0Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+PiB3 MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+PiBOU25zZ3diQlZVSmE0bVpm bUVJQlhnJm09TFhhSC0NCj4gPj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVw Ujgmcz1odGk4ODVGSDBJXy0NCj4gPj4gM3o3ZG9sZllDQWlhNEZYM2kxMnNVQ1dzR2VzTkQ2cyZl PT4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBhbmQgdHdvIHRpbWVzIGVhcmxpZXIgKGR1cmlu ZyBXRyBkaXNjdXNzaW9ucywgYnV0IG5vdCBhZGRyZXNzZWQNCj4gPj4gb3INCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+IHJlc3BvbmRlZCB0byBieSB0aGUgQXV0aG9ycyk6DQo+ID4+Pg0KPiA+Pj4g ICAgID4gPiA+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4gPj4gYXJjaGl2ZS93ZWIv dHJhbS9jdXJyZW50L21zZzAyMDgxLmh0bQ0KPiA+Pj4gICAgIDxodHRwczovL3VybGRlZmVuc2Uu cHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+IDNBX193d3cuaWV0Zi5vcmdfbWFp bC0NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJlbnRfbXNnMDIwODEuaHRtJmQ9RGdN RmFRJmM9OTZaYlpaY2FNRjR3DQo+ID4+IDBGNGpwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRx Ni0NCj4gPj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+IE1WUWkybFZiRV9z NHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9Zi0NCj4gPj4gR3pPVHNQbTg2TlVxekZYeWpB Z1B6NngtQmlBLWJ1TGhJRlB0OVFmRWcmZT0+IGwNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBh bmQgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4gPj4+ICAgICA8aHR0cHM6Ly91cmxkZWZl bnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+PiAzQV9fd3d3LmlldGYub3Jn X21haWwtDQo+ID4+IDJEJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZyPWJ3Wi0N Cj4gbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgt DQo+ID4+DQo+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9U2Ezand0 QTJURnROQUlBbmZUZW0zMnYNCj4gPj4gVzlqSWZjQmxzVXd4SUJlbGJsRHMmZT0+DQo+ID4+Pg0K PiA+Pj4gICAgID4gPiBhcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDE5NzYuaHRtbA0KPiA+ Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gVGhlIGFueWNh c3QgbWV0aG9kIGRvZXMgbm90IHdvcmsgd2l0aCBSRkM1NzY2IFRVUk4gc2VydmVycyENCj4gPj4g VGhhdA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IGhhcyBub3QNCj4gPj4+DQo+ID4+PiAgICAg PiA+ID4+IGJlZW4gYWRkcmVzc2VkIGF0IGFsbC4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IEEgVFVSTiBzZXJ2ZXIgZG9lc24ndCByZWFjdCBvbmUg d2F5IChhbnN3ZXJpbmcgMzAwIFRyeQ0KPiA+PiBBbHRlcm5hdGUpDQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+Pj4gd2hlbg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gYWRkcmVzc2VkIGJ5IGFuIGFu eWNhc3QgYWRkcmVzcyBhbmQgYW5vdGhlciB3YXkgKGFjY2VwdGluZyB0aGUNCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+IEFsbG9jYXRlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiByZXF1ZXN0KSB3 aGVuIGFkZHJlc3NlZCBieSBpdHMgdW5pY2FzdCBhZGRyZXNzLCBkb2VzIGl0Pw0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gQXV0aG9yJ3MgKGR1cmlu ZyB0aGUgRElTQ1VTUyk6ICJXZSBpbnRlbmQgdG8gYWRkIHRoZSBmb2xsb3dpbmcNCj4gdG8NCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4+PiBleHBsYWluDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBz ZXJ2ZXIgYmVoYXZpb3IgYSBsaXR0bGUgYmV0dGVyOg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ ICJBIFRVUk4gYW55Y2FzdCBzZXJ2ZXIgcGVyZm9ybXMgY2hlY2tzIDEgdG8gNyBkaXNjdXNzZWQg aW4NCj4gPj4gU2VjdGlvbg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IDYuMiBvZg0KPiA+Pj4N Cj4gPj4+ICAgICA+ID4gPj4gUkZDNTc2Ni4gSWYgYWxsIGNoZWNrcyBwYXNzLCB0aGUgVFVSTiBh bnljYXN0IHNlcnZlciBNVVNUDQo+IHJlc3BvbmQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHdp dGggYQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gMzAwIChUcnkgQWx0ZXJuYXRlKSBlcnJvciBh cyBkZXNjcmliZWQgaW4gW1JGQzU3NjZdOyINCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBkb2Vz IG5vdCBoZWxwIGFuZCBJIHJlc3BvbmRlZDogW0thcmxdIFRoYXQgbXVzdCBiZSBhbiB1cGRhdGUg b2YNCj4gPj4+DQo+ID4+PiAgICAgPiBSRkM1NzY2Lg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4g T3IgZG9lcyAiVFVSTiBhbnljYXN0IHNlcnZlciIgaW1wbHkgdGhhdCB0aGVyZSBBTFNPIGlzIGEg IlRVUk4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHVuaWNhc3Qgc2VydmVyIiBhdCB0aGUgc2Ft ZSBpbnRlcmZhY2UgYWNjZXB0aW5nIHRoZSBBbGxvY2F0ZQ0KPiA+PiByZXF1ZXN0Pw0KPiA+Pj4N Cj4gPj4+ICAgICA+ID4gPj4gV2hhdCBhcmUgdGhlc2UgdGhpbmdzPw0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gSSBoYXZlIHByb3Bvc2VkIHRoaXMg bW9kaWZpY2F0aW9uIG9mIHRoZSBhbnljYXN0IG1ldGhvZCwgd2hpY2gNCj4gaXMNCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+PiBiZXR0ZXINCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IChpbiBzZXZl cmFsIGFzcGVjdHMpIGFuZCBkb2Vzbid0IG5lZWQgdG8gdXBkYXRlIFJGQzU3NjY6DQo+ID4+Pg0K PiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiAiV2hlbiBhIGNsaWVu dCByZXF1aXJlcyBUVVJOIHNlcnZpY2VzLCBpdCBzZW5kcyBhIFNUVU4gYmluZGluZw0KPiA+Pj4N Cj4gPj4+ICAgICA+ID4gPj4+IHJlcXVlc3QgdG8NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHRo ZSBhc3NpZ25lZCBhbnljYXN0IGFkZHJlc3MuICBUaGUgU1RVTiBzZXJ2ZXINCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+PiByZXNwb25kcyB3aXRoIGEgMzAwIChUcnkgQWx0ZXJuYXRlKSBlcnJvciBh cyBkZXNjcmliZWQgaW4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBbUkZDNTM4OV07IFRoZQ0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gcmVzcG9uc2UgY29udGFpbnMgYSB1bmljYXN0IGFkZHJl c3MgaW4gdGhlIEFMVEVSTkFURS1TRVJWRVINCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGF0dHJp YnV0ZSwgd2hpY2ggdGhlIGNsaWVudCBjb21wYXJlcyB3aXRoIHRoZSBzb3VyY2UgYWRkcmVzcyBv Zg0KPiB0aGUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHJlc3BvbnNlIGFuZCBpZiB0aGUNCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4+PiBhZGRyZXNzZXMgYXJlIHRoZSBzYW1lLCBpdCBpcyBhbiBp bmRpY2F0aW9uIHRvIHVzZSB0aGUgVFVSTg0KPiBzZXJ2ZXINCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+PiBhdCB0aGF0DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBhZGRyZXNzLg0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gRm9yIHN1YnNlcXVlbnQg Y29tbXVuaWNhdGlvbiB3aXRoIHRoZSBUVVJOIHNlcnZlciwgdGhlIGNsaWVudA0KPiA+PiB1c2Vz DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gdGhhdA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4g cmVzcG9uZGluZyBzZXJ2ZXIncyB1bmljYXN0IGFkZHJlc3MuIg0KPiA+Pj4NCj4gPj4+ICAgICA+ ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gVGhlIHNlbnRlbmNlIGluIHRoZSAtMTAg ZHJhZnQgdW5kZXIgIjMgRGlzY292ZXJ5IFByb2NlZHVyZSI6DQo+ICJub3QNCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+PiBhbGwgVFVSTg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gc2VydmVycyBt YXkgc3VwcG9ydCBhbnljYXN0IiBjYW4gdGhlbiBiZSByZW1vdmVkLg0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+PiAoMykgSSBjYW5ub3Qgc2VlIHRoaXMgLTEwIGRyYWZ0IHRlbGxpbmcgd2hpY2ggZGlzY292 ZXJ5IG1ldGhvZA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IHRoYXQgaXMgZml0DQo+ID4+Pg0K PiA+Pj4gICAgID4gPiA+PiBmb3IgdGhlIFRVUk4gc2VydmVycyBwcm92aWRlZCBieSB0aGUgbG9j YWwgb3IgYWNjZXNzIG5ldHdvcmsgKHRoZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gbmV0d29y ayBwcm92aWRlZCBUVVJOIHNlcnZlcikuIEhvd2V2ZXIsIHRoZXJlIGFyZSBjb25mdXNpbmcNCj4g Pj4gY2xpZW50DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBiZWhhdmlvciByZWNvbW1lbmRhdGlv bnMsIGxpa2UgdGhlIHNlbnRlbmNlcyBpbiB0aGUgZHJhZnQgdW5kZXINCj4gIjMNCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+IERpc2NvdmVyeQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gUHJvY2Vk dXJlIjogIkZvciBiZXN0IHJlc3VsdHMsIGEgY2xpZW50IFNIT1VMRCBpbXBsZW1lbnQgYWxsDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBkaXNjb3ZlcnkgbWVjaGFuaXNtcyBkZXNjcmliZWQgYWJv dmUuIiBhbmQgdW5kZXIgIjENCj4gPj4gSW50cm9kdWN0aW9uIjoNCj4gPj4+DQo+ID4+PiAgICAg PiA+ID4+ICJ0aHJlZSBkaXNjb3ZlcnkgbWVjaGFuaXNtcywgc28gYXMgdG8gbWF4aW1pemUgb3Bw b3J0dW5pdHkgZm9yDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBkaXNjb3ZlcnksIGJhc2VkIG9u IHRoZSBuZXR3b3JrIGluIHdoaWNoIHRoZSBUVVJOIGNsaWVudCBmaW5kcw0KPiA+PiBpdHNlbGYu Ig0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gQSBu ZXR3b3JrIHByb3ZpZGVkIFRVUk4gc2VydmVyIGlzIG9ubHkgbWVhbnQgZm9yIHRoZSB1c2VycyBv bg0KPiB0aGUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBzcGVjaWZpYw0KPiA+Pj4NCj4gPj4+ ICAgICA+ID4gPj4gbmV0d29yayAtIG90aGVycyBzaG91bGQgbm90IGJlIGFibGUgdG8gdXNlIHN1 Y2ggVFVSTiBzZXJ2ZXIsIGFuZA0KPiBpdA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gd291bGQg dGhlbiBiZSBwcmVmZXJyZWQgdGhhdCBpdCBpcyBvbmx5IGFkdmVydGl6ZWQgYW5kIGRpc2NvdmVy ZWQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGF0IHRoYXQgbG9jYWwgbmV0d29yayAtIHdoaWNo IGlzIGJhZGx5IGRlc2NyaWJlZCBieSAibWF4aW1pemUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+ IG9wcG9ydHVuaXR5DQo+ID4+Pg0KPiA+Pj4gICAgID4gZm9yDQo+ID4+Pg0KPiA+Pj4gICAgID4g PiBkaXNjb3ZlcnkiLg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+Pj4gSWYgYSBETlMgbWV0aG9kIHdvdWxkIGJlIHVzZWQgdG8gZGlzY292ZXIgdGhlIG5l dHdvcmsNCj4gcHJvdmlkZWQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBUVVJODQo+ID4+Pg0K PiA+Pj4gICAgID4gPiA+PiBzZXJ2ZXIsIGl0cyBwcml2YXRlIGFkZHJlc3Mgc2hvdWxkIG9ubHkg YmUgY29uZmlndXJlZCBpbiBwcml2YXRlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiAobG9jYWwp IEROUyAod2UgZG9uJ3QgbGlrZSB0byBwdXQgb3VyIHByaXZhdGUgSVAgYWRkcmVzc2VzIGluDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBwdWJsaWMgRE5TKSwgYnV0IEkgc2VlIG5vIHN1Y2ggcmVj b21tZW5kYXRpb24uIEZ1cnRoZXIsIHRoZSBETlMNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IG1l dGhvZHMgYXJlIGNvbXBsZXggYW5kIGV4cGVuc2l2ZSB0byBkZXBsb3kgYW5kIG9uZSBvZiB0aGVt DQo+ID4+IGRlcGVuZHMNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IG9uIERIQ1AgdGhhdCBpcyBu b3QgYXZhaWxhYmxlIG9uIGFsbCBhY2Nlc3MgbmV0d29ya3MuIFRoYXQgbWFrZXMNCj4gKGENCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4+IHdvcmtpbmcpIGFueWNhc3QgZGlzY292ZXJ5IG1ldGhvZCB0 aGUgY2xlYXIgY2hvaWNlIGZvciBhIFRVUk4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHNlcnZl ciBwcm92aWRlZCBieQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gdGhlIGxvY2FsIG9yIGFjY2VzcyBu ZXR3b3JrLg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+ Pj4gTmV0d29yayBwcm92aWRlZCBUVVJOIHNlcnZlcnMgcGFyYWxsZWxpbmcgYQ0KPiBOQVQvZmly ZXdhbGwvYWNjZXNzDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiByb3V0ZXIvZGVmYXVsdCBnYXRl d2F5IGlzIGEgbmV3IGNvbmNlcHQgdGhhdCBjYW1lIHVwIGR1cmluZw0KPiA+PiBXZWJSVEMNCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4+IHN0YW5kYXJkaXphdGlvbiB3b3JrIHRvIGRlYWwgd2l0aCB0 cmF2ZXJzYWwgYW5kIHF1YWxpdHkgcHJvYmxlbXMNCj4gb2YNCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+IHJlYWwtdGltZSB0cmFmZmljLiBIb3dldmVyLCB0aGlzIGRyYWZ0IGdpdmUgbGl0dGxlIG9y IG5vIGd1aWRhbmNlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBmb3IgZGVwbG95bWVudCBhbmQg SSB0aGVyZWZvcmUgc3VnZ2VzdCB0aGF0IGEgc2VwYXJhdGUgc2VjdGlvbiBpcw0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gPj4gYWRkZWQsIHRoYXQgc3BlbGxzIG91dCB0aGUgZGVwbG95bWVudCBjb25z aWRlcmF0aW9ucyBmb3IgVFVSTg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gc2VydmVycyBwcm92 aWRlZCBieSB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmsgKHdoaWNoIG5vdyBpcw0KPiA+Pj4N Cj4gPj4+ICAgICA+ID4gPj4gbWlzc2luZywgYnV0IEkgcHJvcG9zZSB0aGUgZm9sbG93aW5nDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiB0ZXh0KToNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gKDQpICJE ZXBsb3ltZW50IENvbnNpZGVyYXRpb25zIGZvciBUVVJOIFNlcnZlcnMgUHJvdmlkZWQgYnkNCj4g dGhlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gTG9jYWwgb3INCj4gPj4+DQo+ID4+PiAgICAg PiA+ID4+IEFjY2VzcyBOZXR3b3JrIg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IChTdWdnZXN0 ZWQgdGV4dCBmb3IgYW4gYWRkaXRpb25hbCBzZWN0aW9uKQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gVGhlIGNvbmNlcHQgb2YgcGFyYWxsZWxpbmcg YSBOQVQvZmlyZXdhbGwvYWNjZXNzLXJvdXRlci9kZWZhdWx0DQo+ID4+Pg0KPiA+Pj4gICAgID4g PiA+Pj4gZ2F0ZXdheSBhdA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gdGhlIGxvY2FsIG9yIGFj Y2VzcyBuZXR3b3JrIHdpdGggYSBUVVJOIHNlcnZlciwgdG8gZGVhbCB3aXRoDQo+ID4+Pg0KPiA+ Pj4gICAgID4gPiA+PiB0cmF2ZXJzYWwgYW5kIHF1YWxpdHkgcHJvYmxlbXMgb2YgcmVhbC10aW1l IHRyYWZmaWMsIGlzIG5ldyBhbmQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGNhbWUgdXAgZHVy aW5nIHRoZSBXZWJSVEMgc3RhbmRhcmRpemF0aW9uIHdvcmsuDQo+ID4+Pg0KPiA+Pj4gICAgID4g PiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBTdWNoIG5ldHdvcmsgcHJvdmlkZWQgVFVS TiBzZXJ2ZXJzLCBvbmx5IGFjY2Vzc2libGUgYnkgdGhlDQo+IHVzZXJzDQo+ID4+Pg0KPiA+Pj4g ICAgID4gPiA+Pj4gb24gdGhlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBsb2NhbCBvciBhY2Nl c3MgbmV0d29yaywgbXVzdCBiZSBhdXRvbWF0aWNhbGx5IGRpc2NvdmVyZWQgYW5kDQo+IHVzZWQs DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiB3aXRob3V0IHNwZWNpZmljIGNvbmZpZ3VyYXRpb24g b3IgaGF2aW5nIGNyZWRlbnRpYWxzIGZvcg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gYXV0aGVu dGljYXRpb24gb3IgY2VydGlmaWNhdGVzIGZvciB2YWxpZGF0aW9uLCB0byBiZSB1c2VmdWwgZm9y IGUuZy4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGEgV2ViUlRDIGJyb3dzZXJzIHRvIGFsbG93 IHF1YWxpdHkgbWVkaWEgdHJhZmZpYyAiZXZlcnl3aGVyZQ0KPiB5b3UNCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+IGNhbg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gc3VyZiIuDQo+ID4+Pg0KPiA+Pj4g ICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBKdXN0IGFzIGZvciB0aGUgSW50 ZXJuZXQgYWNjZXNzIGl0c2VsZiwgdGhlIFRVUk4gc2VydmVyIGlzIG9mZmVyZWQNCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+PiBieSB0aGUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IG5ldHdvcmsg cHJvdmlkZXIgYW5kIHRoZXJlIGlzIG5vIGNoYW5nZSBpbiB0aGUgdHJ1c3Qgb3Igc2VjdXJpdHkN Cj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGxldmVsICh3aGljaCBzaG91bGQgbm90IGJlIGV4cGVj dGVkKSB3aGVuIHJlYWwtdGltZSB0cmFmZmljIGZsb3dzDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+ PiB0aHJvdWdoIHRoZSBUVVJOIHNlcnZlciBwYXRoLCB0aGFuIHRocm91Z2ggdGhlIGRlZmF1bHQg Z2F0ZXdheQ0KPiA+PiBwYXRoLg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gKFRoZSBwdXJwb3Nl IG9mIHRoZSBuZXR3b3JrIHByb3ZpZGVkIHR1cm4gc2VydmVyIGlzIHRvIGFsbG93DQo+ID4+Pg0K PiA+Pj4gICAgID4gPiA+PiB0cmF2ZXJzYWwgb2YgcmVhbC10aW1lIG1lZGlhIHRyYWZmaWMgaW4g ZW52aXJvbm1lbnRzIHdpdGgNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHJlc3RyaWN0aXZlIE5B VC9maXJld2FsbHMgY2xvc2VkIGZvciBVRFAgdHJhZmZpYyBhbmQvb3IgdG8gYWxsb3cNCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+IGJldHRlciBxdWFsaXR5IHRocm91Z2ggdGhlIG9mdGVuIGRhdGEg Y29uZ2VzdGVkIHJvdXRlciBhdCB0aGUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGRlZmF1bHQN Cj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGdhdGV3YXkuKQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gVGhlIGRpc2NvdmVyeSBvZiB0aGUgbmV0d29y ayBwcm92aWRlZCBUVVJOIHNlcnZlciBzaG91bGQgbWVldA0KPiA+PiB0aGUNCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+PiBhdXRvDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBjb25maWd1cmF0aW9u IG9mIFJGQyA3NDc4IChXZWIgUmVhbC1UaW1lIENvbW11bmljYXRpb24gVXNlDQo+ID4+IENhc2Vz DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBhbmQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IFJl cXVpcmVtZW50cykgMi4zLjUuMS4gYW5kIGRyYWZ0LWlldGYtcnRjd2ViLXJldHVybi0wMSBpcyBk ZWZpbmluZw0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gdGhlIFRVUk4gY2xpZW50IGJlaGF2aW9y IGZvciBXZWJSVEMgYnJvd3NlcnMuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+PiBGb3IgcXVhbGl0eSByZWFzb25zLCBhIHNlYWxlZCBuZXR3b3JrIGNv bmZpZ3VyYXRpb24gLSBpLmUuIHRoZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IG1lZGlhIGhh cw0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gdG8gZ28gdGhyb3VnaCB0aGUgVFVSTiBzZXJ2ZXIs IG5vdCB0aHJvdWdoIHRoZSBkZWZhdWx0IGdhdGV3YXkNCj4gKGJ5DQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+PiB1c2luZyBTVFVOIGluc3RlYWQgb2YgVFVSTikgLSBpcyB0aGUgdHlwaWNhbCBpbnRl bnRpb24gd2hlbiBhDQo+IFRVUk4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHNlcnZlciBpcyBk ZXBsb3llZCBpbiB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmsuIFRoZSBzZWFsZWQNCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+IGNvbmZpZ3VyYXRpb24gY2FuIGJlIGVuZm9yY2VkIGFuZCBzaWdu YWxlZCB0byB0aGUgVFVSTiBjbGllbnQgYnkNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHRoZSBu ZXR3b3JrIHByb3ZpZGVyIGJsb2NraW5nIFNUVU4gcGFja2V0cyBhdCB0aGUgZGVmYXVsdA0KPiBn YXRld2F5Lg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+ Pj4gQSBuZXR3b3JrIGNvbmZpZ3VyYXRpb24gZW5mb3JjaW5nIHNlYWxlZCBiZWhhdmlvciwgaGFz IHRoZQ0KPiBnb29kDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gZWZmZWN0IG9mDQo+ID4+Pg0K PiA+Pj4gICAgID4gPiA+PiBhbGxvd2luZyB0aGUgVFVSTiBjbGllbnQgKGUuZy4gYSBXZWJSVEMg YnJvd3NlcikgaW4gaXRzZWxmIHRvIGhhdmUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGENCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4+IG5vbi0gc2VhbGVkIGRlZmF1bHQgY29uZmlndXJhdGlvbi4g KGlldGYtcnRjd2ViLXJldHVybi0wMSBleHBsYWlucw0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4g dGhhdCBhIHNlYWxlZCBkZWZhdWx0IGNvbmZpZ3VyYXRpb24gaW4gdGhlIGJyb3dzZXIgaXRzZWxm LCB3b3VsZA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gcmVzdWx0IGluIHRoYXQgbWVkaWEgYmV0 d2VlbiBsb2NhbCBjbGllbnRzIHdvdWxkIGhhdmUgdG8gcGFzcyB0aGUNCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+IFRVUk4gc2VydmVyLCB3aGljaCBpcyBub3QNCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+IGRlc2lyYWJsZS4pDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+PiBUaGUgYWJvdmUgYXNzdW1lcyB0aGF0IHRoZSBUVVJOIGNsaWVudCB1c2luZyBh IFRVUk4gc2VydmVyIGluDQo+ID4+IHRoZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IGxvY2Fs IG9yDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBhY2Nlc3MgbmV0d29yayBzaGFsbCB1c2UgdW5l bmNyeXB0ZWQgU1RVTi9UVVJOIChvdmVyIFVEUCBmb3INCj4gPj4gYmVzdA0KPiA+Pj4NCj4gPj4+ ICAgICA+ID4gPj4gcXVhbGl0eSkgc28gdGhlIFNUVU4gY29va2llIGNhbiBiZSBkZXRlY3RlZCBh bmQgc3RvcHBlZCBpbiB0aGUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGRlZmF1bHQNCj4gPj4+ DQo+ID4+PiAgICAgPiA+IGdhdGV3YXkuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+PiBBIFRVUk4gc2VydmVyIGluY2x1ZGVkIGluIHRoZSByb3V0ZXIg YXQgdGhlIGRlZmF1bHQgZ2F0ZXdheSwNCj4gdGhhdA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4g aW50ZXJjZXB0cyBhbmQgcmVzcG9uZHMgdG8gYW4gYWxsb2NhdGUgcmVxdWVzdCwgc2hvdWxkICAg YmUNCj4gdHJlYXRlZA0KPiA+PiBhcw0KPiA+Pj4NCj4gPj4+ICAgICA+IGENCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+IGRpc2NvdmVyZWQgbmV0d29yayBwcm92aWRlZCBzZWFsZWQgVFVSTiBzZXJ2 ZXIgY29uZmlndXJhdGlvbg0KPiBieSBhDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBUVVJOIGNs aWVudCAod2l0aG91dCBoYXZpbmcgdG8gcmV2aWV3IGFueSAzMDAgVHJ5IEFsdGVybmF0ZQ0KPiA+ Pj4NCj4gPj4+ICAgICA+ID4gPj4gcmVzcG9uc2UgYXMgb3V0bGluZWQgaW4gYW55Y2FzdCBtZXRo b2QgZGVzY3JpcHRpb24pIGFsbG93aW5nIGZvcg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gdG9s ZXJhbnQgYW5kDQo+ID4+Pg0KPiA+Pj4gICAgID4gc2VjdXJlDQo+ID4+Pg0KPiA+Pj4gICAgID4g PiBkZXBsb3ltZW50Lg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+Pj4gQSB3ZWIgYXBwbGljYXRpb24gdGhhdCB3YW50cyB0byB0cnkgdGhlIGRlZmF1bHQg Z2F0ZXdheSBwYXRoDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gaW5zdGVhZCBvZg0KPiA+Pj4N Cj4gPj4+ICAgICA+ID4gPj4gdGhlIFRVUk4gc2VydmVyIHBhdGggKGluIHNwaXRlIG9mIGEgc2Vh bGVkIG5ldHdvcmsgY29uZmlndXJhdGlvbikNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGNhbiBz dWdnZXN0IGVuY3J5cHRlZCAoRClUTFMgU1RVTiBhbmQgVFVSTiBjYW5kaWRhdGVzIHRoYXQgd2ls bA0KPiA+PiBub3QNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGJlIGJsb2NrZWQgYnkgU1RVTiBj b29raWUgcmVjb2duaXRpb24gYXQgdGhlIGRlZmF1bHQgZ2F0ZXdheS4gSXQNCj4gaXMNCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+IHRoZW4gdXAgdG8gYXBwbGljYXRpb24ncyBUVVJOIGNsaWVudCB3 aGV0aGVyIHRvIHRyeSB0aGUgZGVmYXVsdA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gZ2F0ZXdh eQ0KPiA+Pj4NCj4gPj4+ICAgICA+IHBhdGguDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4+PiBBIGZ1cnRoZXIgYWR2YW50YWdlIG9mIGRldGVjdGluZyBh IHNlYWxlZCBuZXR3b3JrDQo+IGNvbmZpZ3VyYXRpb24sDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+ Pj4gaXMgdGhhdCBhDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBUVVJOIGNsaWVudCBjYW4gc2Vs ZWN0IHRvICpvbmx5IGluIGEgc2VhbGVkIG5ldHdvcmsNCj4gY29uZmlndXJhdGlvbioNCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+IGxvb2sgZm9yIGEgVFVSTiBzZXJ2ZXIgYnkgdGhlIGFueWNhc3Qg bWV0aG9kIGZvciBkaXNjb3ZlcnksIHRodXMNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGVsaW1p bmF0aW5nIHRoZSBsZWFrYWdlIHJpc2sgbWVudGlvbmVkIHVuZGVyIDkuMy4gRnVydGhlciwgdGhl cmUNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHdpbGwgYmUgbm8gcmlzayB0aGF0IGEgZmFyIGF3 YXkgVFVSTiBzZXJ2ZXIgd2lsbCBiZSBkaXNjb3ZlcmVkIGFuZA0KPiA+Pj4NCj4gPj4+ICAgICA+ ID4gPj4gdXNlZCBhbmQgdGhlcmUgd2lsbCBiZSBubyBuZWVkIGZvciB0aGUgVFRMIGxpbWl0YXRp b24gc3VnZ2VzdGVkDQo+ID4+IHVuZGVyIDkuMy4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IFRoZSBhbnljYXN0IGRpc2NvdmVyeSBtZXRob2QsIGNv bWJpbmVkIHdpdGggdGhlIGFib3ZlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gcmVjb21tZW5k YXRpb25zLA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gYWxsb3cgZm9yIGFuIGVhc3kgYW5kIHJv YnVzdCBkZXBsb3ltZW50IG9mIG5ldHdvcmsgcHJvdmlkZWQNCj4gVFVSTg0KPiA+Pj4NCj4gPj4+ ICAgICA+ID4gPj4gc2VydmVycywgZml0dGluZyBhbGwgdHlwZXMgb2YgbG9jYWwgYW5kIGFjY2Vz cyBuZXR3b3Jrcy4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ ID4gPj4+IFRoZSBETlMgYmFzZWQgbWV0aG9kcyBvZiB0aGlzIHNwZWNpZmljYXRpb24gYXJlIG1v cmUgY29tcGxleA0KPiA+PiBhbmQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBleHBlbnNpdmUN Cj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHRvIGRlcGxveSBhbmQgb25lIG9mIHRoZW0gZGVwZW5k cyBvbiBESENQIHRoYXQgaXMgbm90IGF2YWlsYWJsZQ0KPiBvbg0KPiA+Pj4NCj4gPj4+ICAgICA+ ID4gPj4gYWxsIGFjY2VzcyBuZXR3b3Jrcy4gSWYgYW55IG9mIHRoZSBETlMgYmFzZWQgbWV0aG9k cyBpcyB1c2VkIHRvDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBhZHZlcnRpemUgYW5kIGRpc2Nv dmVyIGEgVFVSTiBpbiB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmssIGl0cw0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gPj4gcHJpdmF0ZSBhZGRyZXNzZXMgc2hvdWxkIG9ubHkgYmUgY29uZmlndXJl ZCBpbiBwcml2YXRlIChsb2NhbCkgRE5TDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBhbmQgbm90 IGJlIHB1Ymxpc2hlZCBwdWJsaWNseSwgd2hpY2ggYWRkcyBmdXJ0aGVyIHRvIHRoZQ0KPiBjb21w bGV4aXR5DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBhbmQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ IGNvc3Qgb2YgZGVwbG95bWVudC4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gKDUpIE1vc3QgKGFsbD8p IG9mIHdoYXQgaXMgY29uc2lkZXJlZCBhbmQgc3VtbWVkIHVwIHVuZGVyICg0KQ0KPiA+PiAodGhl DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBzdWdnZXN0ZWQgYWRkaXRpb25hbCB0ZXh0KSwgaGFz IGJlZW4gYnJvdWdodCBmb3J3YXJkIG9uIHRoZQ0KPiBUUkFNDQo+ID4+IFdHDQo+ID4+Pg0KPiA+ Pj4gICAgID4gPiA+PiBsaXN0IGJlZm9yZSwgYnV0IG5vdCBicm91Z2h0IGludG8gdGhlIGN1cnJl bnQgLTEwIGRyYWZ0LCBzZWU6DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbC0NCj4gPj4gYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAwMTMyLmh0 bWwNCj4gPj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91 PWh0dHBzLQ0KPiA+PiAzQV9fd3d3LmlldGYub3JnX21haWwtDQo+ID4+DQo+IDJEYXJjaGl2ZV93 ZWJfdHJhbV9jdXJyZW50X21zZzAwMTMyLmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+ PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+PiBOU25zZ3diQlZVSmE0 bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6 QXVwUjgmcz1JNHRYX3ZRZC0NCj4gPj4gQU5WOGNCalBHbEhsRklWRVVaLTNsWW1WSTZHYkd0anh2 YyZlPT4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls LQ0KPiA+PiBhcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDAxMzguaHRtbA0KPiA+Pj4gICAg IDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+ IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJl bnRfbXNnMDAxMzguaHRtbCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+IHcwRjRqcE42TFpn JnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ID4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1M WGFILQ0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPUpK V1Z5UGhoVGJoVHBrY09tUVJkQg0KPiA+PiA0OWh4MmdPTU5LT0w3cU1UM2JxNjMwJmU9Pg0KPiA+ Pj4NCj4gPj4+ICAgICA+ID4gPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtDQo+ID4+IGFy Y2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMTcyMS5odG1sDQo+ID4+PiAgICAgPGh0dHBzOi8v dXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4gM0FfX3d3dy5p ZXRmLm9yZ19tYWlsLQ0KPiA+Pg0KPiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9tc2cwMTcy MS5odG1sJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4gPj4gdzBGNGpwTjZMWmcmcj1id1otbm5S R1dtY0dLUkl1YWRxNi0NCj4gPj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+ DQo+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9UW5iSk9zWUF2dURX cjlZeUVHc3hVDQo+ID4+IE92OFMxaGE4b3c5RG81VkRPcTZHczAmZT0+DQo+ID4+Pg0KPiA+Pj4g ICAgID4gPiA+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4gPj4gYXJjaGl2ZS93ZWIv dHJhbS9jdXJyZW50L21zZzAxNzQ1Lmh0bWwNCj4gPj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNl LnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+PiAzQV9fd3d3LmlldGYub3JnX21h aWwtDQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAxNzQ1Lmh0bWwmZD1E Z01GYVEmYz05NlpiWlpjYU1GNA0KPiA+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVh ZHE2LQ0KPiA+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4NCj4gTVZRaTJs VmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1kdUVEM1lSd19nUGlMd1BuakM3emdX DQo+ID4+IDBLYlFYcVFCak4tQkpDNGJ6bXQ0NCZlPT4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+ PiBUaGUgbGlua3MgZ2l2ZW4gdW5kZXIgKDEpIGFuZCAoMikgYWJvdmUNCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPiA+PiBhcmNoaXZlL3dlYi90 cmFtL2N1cnJlbnQvbXNnMDIxNTUuaHRtbA0KPiA+Pj4gICAgIDxodHRwczovL3VybGRlZmVuc2Uu cHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+IDNBX193d3cuaWV0Zi5vcmdfbWFp bC0NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJlbnRfbXNnMDIxNTUuaHRtbCZkPURn TUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+IHcwRjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFk cTYtDQo+ID4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+PiBNVlFpMmxWYkVf czR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPTVmeGp0UmYyTmR0OVItDQo+ID4+IFJEd1dw Z0cwZDdtY3RwVVQybFVacktHYVRoWjQwJmU9Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gL0thcmwNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gLS0tLS1V cnNwcnVuZ2xpZ3QgbWVkZGVsYW5kZS0tLS0tDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gRnLD pW46IHRyYW0gW21haWx0bzp0cmFtLWJvdW5jZXNAaWV0Zi5vcmddIEbDtnIgUHJhc2hhbnRoIFBh dGlsDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gKHByYXNwYXRpKQ0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gPj4+IFNraWNrYXQ6IGRlbiAyIG5vdmVtYmVyIDIwMTYgMjI6MTgNCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+PiBUaWxsOiB0cmFtQGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4N Cj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBLb3BpYTogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1h aWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47IERhbg0KPiA+PiBXaW5nOw0KPiA+Pj4gICAgIFNw ZW5jZXIgRGF3a2lucyBhdCBJRVRGOw0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gVGlydW1hbGVz d2FyIFJlZGR5ICh0aXJlZGR5KQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IMOEbW5lOiBbdHJh bV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gVGhlIFRVUk4gZGlzY292ZXJ5IGRy YWZ0IG9yaWdpbmFsbHkgc3VnZ2VzdGVkIHRoYXQgU1RVTg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4+IGF1dGhlbnRpY2F0aW9uIGJlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiByZWxheGVkIGFu ZCBtYWRlIE9QVElPTkFMIGZvciBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlDQo+IGxvY2Fs DQo+ID4+IG9yDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBhY2Nlc3MgbmV0d29yay4gVGhlIGlu dGVudGlvbiB3YXMgdG8gYWxsb3cgbmV3L2d1ZXN0IHVzZXJzICh3aG8NCj4gPj4gZG8NCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+IG5vdCBuZWNlc3NhcmlseSBwb3NzZXNzIGxvbmcgdGVybSBjcmVk ZW50aWFscyBmb3IgU1RVTg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gYXV0aGVudGljYXRpb24p IGluIHRoZSBuZXR3b3JrIHRvIGRpc2NvdmVyIGFuZCB1c2UgVFVSTiBzZXJ2aWNlcw0KPiA+Pj4N Cj4gPj4+ICAgICA+IG9mZmVyZWQNCj4gPj4+DQo+ID4+PiAgICAgPiA+IGJ5IHRoZSBuZXR3b3Jr Lg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IEJlbiBDYW1wYmVsbCByYWlzZWQgYW4gb2JqZWN0 aW9uIGR1cmluZyBJRVNHIGV2YWx1YXRpb24gdGhhdCB3ZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4+IGNsZWFybHkNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IGluZGljYXRlIHRoYXQgdGhpcyBp cyBhIGRvd25ncmFkZSBvZiBhIE1VU1QgbGV2ZWwgcmVxdWlyZW1lbnQNCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+IGRlZmluZWQgaW4gW1JGQzU3NjZdIGFuZCBleHBsYWluIGl0cyBjb25zZXF1ZW5j ZXMuIEl0IHdhcyBhbHNvDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiByaWdodGx5IHN1Z2dlc3Rl ZCB0aGF0IHdlIG1hbmRhdGUgdGhlIHVzZSBvZiAoRClUTFMgaW4gdGhlDQo+IGFic2VuY2UNCj4g Pj4+DQo+ID4+PiAgICAgPiA+ID4+IG9mIFNUVU4gYXV0aGVudGljYXRpb24gZm9yIHByb3RlY3Rp b24gYWdhaW5zdCBhIHZhcmlldHkgb2YgYXR0YWNrczsNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+ IHRoZSBkcmFmdCBub3cgbWFrZXMgaXQgYSBNVVNUIHRoYXQgVFVSTiBzZXJ2ZXJzIHVzZSAoRClU TFMgaW4NCj4gdGhlDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiBhYnNlbmNlIG9mIFNUVU4NCj4g Pj4+DQo+ID4+PiAgICAgPiA+IGF1dGhlbnRpY2F0aW9uLg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gVG8gcHV0IGl0IHNpbXBseSwgdGhlIGRyYWZ0 IG1hbmRhdGVzIHRoYXQgVFVSTiBzZXJ2ZXJzIGluIGEgbG9jYWwNCj4gPj4+DQo+ID4+PiAgICAg PiA+ID4+PiBvcg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gYWNjZXNzIG5ldHdvcmsgZG8gYXQg bGVhc3Qgb25lIG9mIChEKVRMUyBvciBTVFVOIGF1dGhlbnRpY2F0aW9uLg0KPiBJZg0KPiA+Pj4N Cj4gPj4+ICAgICA+ID4gPj4geW91IGhhdmUgYW4gb3BpbmlvbiBhYm91dCB0aGlzIGNoYW5nZSwg cGxlYXNlIGxldCB0aGUgd29ya2luZw0KPiBncm91cA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4g a25vdyBvbiB0aGUgbWFpbGluZyBsaXN0IGJlZm9yZSB0aGUgZW5kIG9mIElFVEYgOTcuDQo+ID4+ Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBTZWUgYmVsb3cg Zm9yIHNuaXBwZXRzIG9mIHdoYXQgY2hhbmdlZC4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IEV4Y2VycHQgZnJvbSBTZWN1cml0eSBDb25zaWRlcmF0 aW9ucyBvZg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2Vy dmVyLWRpc2NvdmVyeS0wOToNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4NCj4gPj4+ ICAgICA+ID4gPj4+ICAgICJVc2Ugb2YgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBO QVQgKFNUVU4pIFtSRkM1Mzg5XQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICAgIGF1dGhlbnRp Y2F0aW9uIGlzIE9QVElPTkFMIGZvciBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlDQo+ID4+ IGxvY2FsDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAgbmV0d29yayBvciBieSB0aGUgYWNj ZXNzIG5ldHdvcmsuICBBIG5ldHdvcmsgcHJvdmlkZWQgVFVSTg0KPiA+Pj4NCj4gPj4+ICAgICA+ ID4gPj4+IHNlcnZlcg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gTUFZDQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+Pj4gICAgYmUgY29uZmlndXJlZCB0byBhY2NlcHQgQWxsb2NhdGlvbiByZXF1ZXN0cyB3 aXRob3V0IFNUVU4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiAgICBhdXRoZW50aWNhdGlvbiwg YW5kIGEgVFVSTiBjbGllbnQgTUFZIGJlIGNvbmZpZ3VyZWQgdG8NCj4gYWNjZXB0DQo+ID4+Pg0K PiA+Pj4gICAgID4gPiA+Pj4gICAgQWxsb2NhdGlvbiBzdWNjZXNzIHJlc3BvbnNlcyB3aXRob3V0 IFNUVU4gYXV0aGVudGljYXRpb24NCj4gZnJvbQ0KPiA+PiBhDQo+ID4+Pg0KPiA+Pj4gICAgID4g PiA+Pj4gICAgbmV0d29yayBwcm92aWRlZCBUVVJOIHNlcnZlci4gIEluIG9yZGVyIHRvIHByb3Rl Y3QgYWdhaW5zdA0KPiBtYW4tDQo+ID4+IGluLQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICAg IHRoZS1taWRkbGUgYXR0YWNrcyB3aGVuIGFjY2VwdGluZyBhIFRVUk4gYWxsb2NhdGlvbiByZXNw b25zZQ0KPiA+Pj4NCj4gPj4+ICAgICA+IHdpdGhvdXQNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+ PiAgICBTVFVOIGF1dGhlbnRpY2F0aW9uLCBpdCBpcyBSRUNPTU1FTkRFRCB0aGF0IHRoZSBUVVJO DQo+IGNsaWVudA0KPiA+PiB1c2UNCj4gPj4+DQo+ID4+PiAgICAgPiBvbmUNCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+PiAgICBvZiB0aGUgZm9sbG93aW5nIHRlY2huaXF1ZXMgd2l0aCAoRClUTFMg dG8gdmFsaWRhdGUgdGhlIFRVUk4NCj4gPj4+DQo+ID4+PiAgICAgPiBzZXJ2ZXIiDQo+ID4+Pg0K PiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4NCj4gPj4+ ICAgICA+ID4gPj4+IFVwZGF0ZWQgdGV4dCBpbiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBvZg0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2Nv dmVyeS0xMDoNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4+ICAgICJVc2Ugb2YgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4p IFtSRkM1Mzg5XQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICAgIGF1dGhlbnRpY2F0aW9uIGlz IE9QVElPTkFMIGZvciBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlDQo+ID4+IGxvY2FsDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAgbmV0d29yayBvciBieSB0aGUgYWNjZXNzIG5ldHdv cmsuICBBIG5ldHdvcmsgcHJvdmlkZWQgVFVSTg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IHNl cnZlcg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gTUFZDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4g ICAgYmUgY29uZmlndXJlZCB0byBhY2NlcHQgQWxsb2NhdGlvbiByZXF1ZXN0cyB3aXRob3V0IFNU VU4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiAgICBhdXRoZW50aWNhdGlvbiwgYW5kIGEgVFVS TiBjbGllbnQgTUFZIGJlIGNvbmZpZ3VyZWQgdG8NCj4gYWNjZXB0DQo+ID4+Pg0KPiA+Pj4gICAg ID4gPiA+Pj4gICAgQWxsb2NhdGlvbiBzdWNjZXNzIHJlc3BvbnNlcyB3aXRob3V0IFNUVU4gYXV0 aGVudGljYXRpb24NCj4gZnJvbQ0KPiA+PiBhDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAg bmV0d29yayBwcm92aWRlZCBUVVJOIHNlcnZlci4NCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+Pg0K PiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICAgIE1ha2luZyBTVFVOIGF1dGhlbnRpY2F0aW9uIE9Q VElPTkFMIGlzIGEgZG93bmdyYWRlIG9mIGENCj4gPj4gTVVTVA0KPiA+Pj4NCj4gPj4+ICAgICA+ IGxldmVsDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAgcmVxdWlyZW1lbnQgZGVmaW5lZCBp biBbUkZDNTc2Nl0uICBUaGUgZG93bmdyYWRlIGFsbG93cw0KPiBUVVJODQo+ID4+Pg0KPiA+Pj4g ICAgID4gc2VydmVycw0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICAgIHByb3ZpZGVkIGJ5IGxv Y2FsIG9yIGFjY2VzcyBuZXR3b3JrIHRvIGFjY2VwdCBBbGxvY2F0aW9uDQo+IHJlcXVlc3RzDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAgZnJvbSBuZXcgYW5kL29yIGd1ZXN0IHVzZXJzIGlu IHRoZSBuZXR3b3JrIHdobyBkbyBub3QNCj4gPj4gbmVjZXNzYXJpbHkNCj4gPj4+DQo+ID4+PiAg ICAgPiA+ID4+PiAgICBwb3NzZXNzIGxvbmcgdGVybSBjcmVkZW50aWFscyBmb3IgU1RVTiBhdXRo ZW50aWNhdGlvbi4gIFRoZQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICAgIGludGVudGlvbiwg aW4gc3VjaCBkZXBsb3ltZW50cywgYmVpbmcgdG8gcHJvdmlkZSBUVVJODQo+IHNlcnZpY2VzDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gdG8NCj4gPj4+DQo+ID4+PiAgICAgPiBhbGwNCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+PiAgICB1c2VycyBpbiB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdv cmsuICBIb3dldmVyLCB0aGlzIG9wZW5zIHVwIGENCj4gPj4+DQo+ID4+PiAgICAgPiBUVVJODQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAgc2VydmVyIHRvIGEgdmFyaWV0eSBvZiBhdHRhY2tz IGRlc2NyaWJlZCBpbiBTZWN0aW9uIDE3IG9mDQo+ID4+Pg0KPiA+Pj4gICAgID4gW1JGQzU3NjZd Lg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ICAgIEEgVFVSTiBzZXJ2ZXIgaW4gc3VjaCBjYXNl cyBtdXN0IGJlIGNvbmZpZ3VyZWQgdG8gb25seQ0KPiBwcm9jZXNzDQo+ID4+IFNUVU4NCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+PiAgICByZXF1ZXN0cyBmcm9tIHRoZSB0cnVzdGVkIGxvY2FsIG5l dHdvcmsgb3Igc3Vic2NyaWJlcnMgb2YgdGhlDQo+ID4+Pg0KPiA+Pj4gICAgID4gYWNjZXNzDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAgbmV0d29yay4gIE9wZXJhdGlvbmFsIG1lYXN1cmVz IG11c3QgYmUgdGFrZW4gaW4gb3JkZXINCj4gcHJvdGVjdA0KPiA+PiB0aGUNCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+PiAgICBUVVJOIHNlcnZlcjsgc29tZSBvZiB0aGVzZSBtZWFzdXJlcyBpbmNs dWRlLCBidXQgbm90IGxpbWl0ZWQNCj4gdG8sDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAg YWNjZXNzIGNvbnRyb2wgYnkgbWVhbnMgb2YgYWNjZXNzLWxpc3RzLCBmaXJld2FsbHMsIHN1YnNj cmliZXINCj4gPj4+DQo+ID4+PiAgICAgPiBxdW90YQ0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+ ICAgIGxpbWl0cywgaW5ncmVzcyBmaWx0ZXJpbmcgZXRjLg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gICAgQSBUVVJOIGNsaWVudCBNVVNUIHVzZSAo RClUTFMgaW4gdGhlIGFic2VuY2Ugb2YgU1RVTiBsb25nLQ0KPiA+PiB0ZXJtDQo+ID4+Pg0KPiA+ Pj4gICAgID4gPiA+Pj4gICAgY3JlZGVudGlhbCBtZWNoYW5pc20gW1JGQzUzODldIG9yIFNUVU4g RXh0ZW5zaW9uIGZvciBUaGlyZC0NCj4gPj4gUGFydHkNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+ PiAgICBBdXRob3JpemF0aW9uIFtSRkM3NjM1XS4iDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4N Cj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+PiBQbGVhc2UgcmVmZXINCj4gPj4+DQo+ID4+PiAgICAg PiA+ID4+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRyYW0tdHVybi1z ZXJ2ZXItZGlzY292ZXJ5LQ0KPiAxDQo+ID4+PiAgICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9v ZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4gM0FfX3Rvb2xzLmlldGYub3JnX2h0bWxf ZHJhZnQtMkRpZXRmLTJEdHJhbS0yRHR1cm4tMkRzZXJ2ZXItDQo+IDJEZGlzY292ZXJ5LQ0KPiA+ PiAyRDEmZD1EZ01GYVEmYz05NlpiWlpjYU1GNHcwRjRqcE42TFpnJnI9YndaLQ0KPiA+PiBublJH V21jR0tSSXVhZHE2LU5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+PiBNVlFpMmxW YkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPS0tQi0NCj4gPj4ga0FwOURlMWY2SGhS S0xFdEQxYlZTMzNCcEcyUzVNWXpXQlFfWURJJmU9Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4g MCMNCj4gPj4+DQo+ID4+PiAgICAgPiA+ID4+IHNlY3Rpb24NCj4gPj4+DQo+ID4+PiAgICAgPiA+ ID4+IC05IGZvciBtb3JlIGRldGFpbHMuDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+PiBUaGFua3MsDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gQXV0 aG9ycw0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4g X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+DQo+ ID4+PiAgICAgPiA+ID4+PiB0cmFtIG1haWxpbmcgbGlzdA0KPiA+Pj4NCj4gPj4+ICAgICA+ID4g Pj4+IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vdHJhbQ0KPiA+ Pj4gICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMt DQo+ID4+DQo+IDNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb190cmFtJmQ9RGdNRmFR JmM9OTZaYlpaY2FNRjR3MEY0ag0KPiA+PiBwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0N Cj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+DQo+IE1WUWkybFZiRV9zNHVs eDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9YWhSbjFpZnhuT0FDclZGZ3hKOTkwODYNCj4gPj4g bkJ1QzYtY3o5SDdHS1lfMEVWOHMmZT0+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4NCj4gPj4+ DQo+ID4+PiAgICAgPiA+ID4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4+IHRyYW0gbWFpbGluZyBsaXN0DQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gdHJhbUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5v cmc+DQo+ID4+Pg0KPiA+Pj4gICAgID4gPiA+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby90cmFtDQo+ID4+PiAgICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50 LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4NCj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xp c3RpbmZvX3RyYW0mZD1EZ01GYVEmYz05NlpiWlpjYU1GNHcwRjRqDQo+ID4+IHBONkxaZyZyPWJ3 Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4g Pj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1haFJuMWlmeG5P QUNyVkZneEo5OTA4Ng0KPiA+PiBuQnVDNi1jejlIN0dLWV8wRVY4cyZlPT4NCj4gPj4+DQo+ID4+ PiAgICAgPiA+ID4+Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4gPj4NCj4gPj4+DQo+ID4+PiAgICAg PiA+ID4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ ID4+Pg0KPiA+Pj4gICAgID4gPiA+PiB0cmFtIG1haWxpbmcgbGlzdA0KPiA+Pj4NCj4gPj4+ICAg ICA+ID4gPj4gdHJhbUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+ID4+Pg0KPiA+ Pj4gICAgID4gPiA+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3RyYW0N Cj4gPj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0 dHBzLQ0KPiA+Pg0KPiAzQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9fdHJhbSZkPURn TUZhUSZjPTk2WmJaWmNhTUY0dzBGNGoNCj4gPj4gcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFk cTYtDQo+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pg0KPiBNVlFpMmxWYkVf czR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPWFoUm4xaWZ4bk9BQ3JWRmd4Sjk5MDg2DQo+ ID4+IG5CdUM2LWN6OUg3R0tZXzBFVjhzJmU9Pg0KPiA+Pj4NCj4gPj4+ICAgICA+ID4NCj4gPj4+ DQo+ID4+PiAgICAgPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQo+ID4+Pg0KPiA+Pj4gICAgID4gPiB0cmFtIG1haWxpbmcgbGlzdA0KPiA+Pj4NCj4g Pj4+ICAgICA+ID4gdHJhbUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+ID4+Pg0K PiA+Pj4gICAgID4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3RyYW0N Cj4gPj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0 dHBzLQ0KPiA+Pg0KPiAzQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9fdHJhbSZkPURn TUZhUSZjPTk2WmJaWmNhTUY0dzBGNGoNCj4gPj4gcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFk cTYtDQo+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pg0KPiBNVlFpMmxWYkVf czR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPWFoUm4xaWZ4bk9BQ3JWRmd4Sjk5MDg2DQo+ ID4+IG5CdUM2LWN6OUg3R0tZXzBFVjhzJmU9Pg0KPiA+Pj4NCj4gPj4+ICAgICBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+Pj4gICAgIHRyYW0gbWFp bGluZyBsaXN0DQo+ID4+PiAgICAgdHJhbUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+ DQo+ID4+PiAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtDQo+ ID4+PiAgICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRw cy0NCj4gPj4NCj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX3RyYW0mZD1EZ01G YVEmYz05NlpiWlpjYU1GNHcwRjRqDQo+ID4+IHBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2 LQ0KPiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4NCj4gTVZRaTJsVmJFX3M0 dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1haFJuMWlmeG5PQUNyVkZneEo5OTA4Ng0KPiA+ PiBuQnVDNi1jejlIN0dLWV8wRVY4cyZlPT4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4NCj4g Pj4gLS0NCj4gPj4gQnJhbmRvbiBXaWxsaWFtczsgQ2hpZWYgQXJjaGl0ZWN0DQo+ID4+IENsb3Vk IE5ldHdvcmtpbmc7IEFrYW1haSBUZWNobm9sb2dpZXMgSW5jLg0KPiANCj4gLS0NCj4gQnJhbmRv biBXaWxsaWFtczsgQ2hpZWYgQXJjaGl0ZWN0DQo+IENsb3VkIE5ldHdvcmtpbmc7IEFrYW1haSBU ZWNobm9sb2dpZXMgSW5jLg0K From nobody Mon Jan 2 11:14:36 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A96B112944A; Mon, 2 Jan 2017 11:14:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.622 X-Spam-Level: X-Spam-Status: No, score=-17.622 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GqYw7QdWogch; Mon, 2 Jan 2017 11:14:30 -0800 (PST) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4671C129454; Mon, 2 Jan 2017 11:14:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=121902; q=dns/txt; s=iport; t=1483384470; x=1484594070; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=uj9j9kUGLjfXDmcdypQf+x5VKOhAJ5/O+GqKztaCHVY=; b=fNCfkedLResZRAe/3GoCOBzwucFtZYJwT8/Zs4jHp/BHwDMws0WVL/QW WWKQUkRCeI+hW9kIY9AX0+aeN3XeyhbasljQjG5dlxD0/oDIbTCjupyKQ /M3ASw+HbwOUASOdyvgHNxwGze/FSjjfLSQhqgQNAHWNu3W5cvLaNa/Uy A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AlAgAqpWpY/4cNJK1UCRkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYMqDQEBAQEBH198EAeDSIoIlEOHe40gggUDHwuFeAIagUUVKhQ?= =?us-ascii?q?BAgEBAQEBAQFiKIRoAQEBAwEBARgBCBE6CwUHBAIBCBEEAQEBAgIjAwICAh8GC?= =?us-ascii?q?xQBCAgCBA4FHog3AxAIDgKvCoIlhyINgwkBAQEBAQEBAQEBAQEBAQEBAQEBAQE?= =?us-ascii?q?YBYELhTqCAgiBUYEGgk47gQ8HAwYCAQIDFheCbS2CMAWaNRM1AYZTgxKDFkmDe?= =?us-ascii?q?YF1GIRwg0qGDod+gXWEO4QOAR84aEIuDgGDTwUcGIFGcgEBhloBASQHgQOBDQE?= =?us-ascii?q?BAQ?= X-IronPort-AV: E=Sophos;i="5.33,450,1477958400"; d="scan'208";a="366905691" Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 02 Jan 2017 19:14:25 +0000 Received: from XCH-RTP-014.cisco.com (xch-rtp-014.cisco.com [64.101.220.154]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v02JEPwP023068 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 2 Jan 2017 19:14:25 GMT Received: from xch-rtp-019.cisco.com (64.101.220.159) by XCH-RTP-014.cisco.com (64.101.220.154) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 2 Jan 2017 14:14:24 -0500 Received: from xch-rtp-019.cisco.com ([64.101.220.159]) by XCH-RTP-019.cisco.com ([64.101.220.159]) with mapi id 15.00.1210.000; Mon, 2 Jan 2017 14:14:23 -0500 From: "Pal Martinsen (palmarti)" To: "Tirumaleswar Reddy (tireddy)" Thread-Topic: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery Thread-Index: AQHSZSxt2HwARbHdVke3brJF46MEDA== Date: Mon, 2 Jan 2017 19:14:23 +0000 Message-ID: <415E9AE4-9CD3-4009-B267-5FB3BC8A339E@cisco.com> References: <012701d24112$ebca82e0$c35f88a0$@stahl@ingate.com> <521b142d7fd9482ca18102655d4ef4e6@XCH-RCD-017.cisco.com> <021701d2436e$4cee87d0$e6cb9770$@stahl@ingate.com> <03166323036f4cf187c0a67b9c183138@XCH-RCD-017.cisco.com> <034501d244e7$ad9ac060$08d04120$@stahl@ingate.com> <061301d248ea$12c01110$38403330$@stahl@ingate.com> <3cf392b265354926a46f8e70109df236@XCH-RCD-017.cisco.com> <065101d24958$64f42fc0$2edc8f40$@stahl@ingate.com> <7f4a0d29c1b844539a5d2b38ee699c38@XCH-RCD-017.cisco.com> <00a901d24c77$6a9b7d80$3fd27880$@stahl@ingate.com> <96701F1A-BE53-4A91-B0 FA-2BBAF7051651@cisco. com> <0726040555ad4275a2486f0aa8f9174d@XCH-RCD-017.cisco.com> <01d101d24f19$04a7fae0$0df7f0a0$@stahl@ingate.com> <5f464f75-5d00-a0b8-83cc-07e1b0f2ba25@akamai.com> <347f9a2f4d5e4970a17288e8ca33b882@XCH-RCD-017.cisco.com> <997ccf57-0634-c43e-22e2-a93f0ab75f5b@akamai.com> <03b17932e8824b5a9fd4a5d7c6baedc3@XCH-RCD-017.cisco.com> In-Reply-To: <03b17932e8824b5a9fd4a5d7c6baedc3@XCH-RCD-017.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.61.245.151] Content-Type: text/plain; charset="utf-8" Content-ID: <6328097F65A046449EE6B81D0C193B2B@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "Prashanth Patil \(praspati\)" , "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "Dan Wing \(dan@danwing.org\)" , Spencer Dawkins at IETF , Karl Stahl Subject: Re: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jan 2017 19:14:36 -0000 DQo+IE9uIDIgSmFuIDIwMTcsIGF0IDE2OjE0LCBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkp IDx0aXJlZGR5QGNpc2NvLmNvbT4gd3JvdGU6DQo+IA0KPiBIaSBCcmFuZG9uLA0KPiANCj4gUGxl YXNlIHNlZSBpbmxpbmUNCj4gDQo+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4gRnJv bTogQnJhbmRvbiBXaWxsaWFtcyBbbWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbV0N Cj4+IFNlbnQ6IFdlZG5lc2RheSwgRGVjZW1iZXIgMjgsIDIwMTYgMToxNCBBTQ0KPj4gVG86IFRp cnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29tPjsgS2FybCBTdGFo bA0KPj4gPGthcmwuc3RhaGxAaW5nYXRlLmNvbT47IFBhbCBNYXJ0aW5zZW4gKHBhbG1hcnRpKSA8 cGFsbWFydGlAY2lzY28uY29tPg0KPj4gQ2M6IFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkpIDxw cmFzcGF0aUBjaXNjby5jb20+OyB0cmFtLWNoYWlyc0BpZXRmLm9yZzsNCj4+ICdEYW4gV2luZycg PGRhbkBkYW53aW5nLm9yZz47ICdTcGVuY2VyIERhd2tpbnMgYXQgSUVURicNCj4+IDxzcGVuY2Vy ZGF3a2lucy5pZXRmQGdtYWlsLmNvbT47IHRyYW1AaWV0Zi5vcmcNCj4+IFN1YmplY3Q6IFJlOiBT VjogW3RyYW1dIE1heWJlIHdlIGhhdmUgKEQpVExTIGNvbnNlbnN1czsgV0FTOiBkcmFmdC1pZXRm LQ0KPj4gdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4+IA0KPj4gVGhlIG9yaWdpbmFsIEkg cmVzcG9uZGVkIHRvIGRpZG4ndCBoYXZlIHRoZSB0cmFtIGxpc3QgQ0NlZC4gQXBvbG9naWVzIHRv DQo+PiB0aG9zZSB3aG8gcmVjZWl2ZSBkdXBsaWNhdGVzLg0KPj4gDQo+PiAtLQ0KPj4gDQo+PiBI aSBUaXJ1LA0KPj4gDQo+PiBTb3JyeSBhYm91dCB0aGUgZGVsYXllZCByZXNwb25zZS4NCj4+IA0K Pj4gSSB1bmRlcnN0YW5kIHRoYXQgdGhlIHJlcXVpcmVtZW50cyB5b3UgcHJvcG9zZSBhcmUgdG8g cHJvdGVjdCB0aGUNCj4+IGNsaWVudC4gTXkgcG9pbnQgaXMgdGhhdCB0aGUgY2xpZW50IG1pZ2h0 IG5vdCByZXF1aXJlIHN1Y2ggcHJvdGVjdGlvbiBpbg0KPj4gYWxsIGNhc2VzIGFuZCBpdCBzaG91 bGQgYmUgdXAgdG8gdGhlIGNsaWVudCB0byBtYWtlIHRoYXQgZGV0ZXJtaW5hdGlvbi4NCj4+IEZv ciBleGFtcGxlLCBpZiBib3RoIHRoZSBjbGllbnQgYW5kIHRoZSBzZXJ2ZXIgYXJlIG9uIG15IGhv bWUgbmV0d29yaywgSQ0KPj4gZG9uJ3QgcmVhbGx5IG5lZWQgdGhlIHByb3RlY3Rpb24gdGhhdCAo RClUTFMgcHJvdmlkZXMuIA0KPiANCj4gWWVzLCB0aGVzZSBhdHRhY2tzIG1heSBub3QgaGFwcGVu IGluIGEgaG9tZSBuZXR3b3JrLiBCdXQgd2UgY2Fubm90IGV4cGVjdCB0aGUgcm9hbWluZyBjbGll bnQgdG8ga2VlcCBjaGFuZ2luZyB0aGUgc2VjdXJpdHkgcG9zdHVyZSBhcyB0aGUgZGV2aWNlIGF0 dGFjaGVzIHRvIGRpZmZlcmVudCBuZXR3b3Jrcy4gQW4gYXZlcmFnZSB1c2VyIG1heSBub3QgYmUg ZXZlbiBhd2FyZSBvZiB0aGUgc2VjdXJpdHkgcmlza3Mgd2hlbiAoRClUTFMgaXMgZGlzYWJsZWQu IA0KPiANCj4gV2hhdCBpcyB0aGUgZG93bnNpZGUgaWYgKEQpVExTIGlzIG1hbmRhdGVkID8gDQoN CkNhbiB0aGUgY2xpZW50IHVzZSAoRClUTFMgb25seSBkdXJpbmcgZGlzY292ZXJ5IGFuZCBhdXRo IHBoYXNlcz8NCg0KV2UgZG8gaGF2ZSBzb21lIGhhcmR3YXJlIHRoYXQgbWlnaHQgaGF2ZSBwcm9i bGVtcyBkb2luZyBib3RoIChEKURUTFMgYW5kIFNSVFAgb24gdGhlIGFtb3VudCBvZiBwYWNrZXRz IHRoZXkgYXJlIHByb2R1Y2luZy4gDQoNCi4tLg0KUMOlbC1FcmlrDQoNCj4gDQo+PiBUaGUgc2Vy dmVyIG11c3QNCj4+IHN1cHBvcnQgd2hhdGV2ZXIgc2VjdXJpdHkgcG9zdHVyZSB0aGUgY2xpZW50 IHJlcXVpcmVzLCBidXQgdGhlIHNlcnZlcg0KPj4gc2hvdWxkIG5vdCByZXF1aXJlIHRoZSBjbGll bnQgdG8gcHJvdGVjdCBpdHNlbGYgaW4gYSBwYXJ0aWN1bGFyIHdheS4NCj4gDQo+IFRoZSBUVVJO IHNlcnZlciBieXBhc3NlcyB0aGUgRW50ZXJwcmlzZSBmaXJld2FsbCBzZWN1cml0eSBhbmQgYWxs b3dzIHRyYWZmaWMgZnJvbSBvdXRzaWRlIHRvIGluc2lkZS4gQXMgeW91IGFscmVhZHkga25vdywg VFVSTiBwZXJtaXNzaW9ucyBtaW1pYyB0aGUgYWRkcmVzcy1yZXN0cmljdGVkIGZpbHRlcmluZyBt ZWNoYW5pc20gb2YgTkFULCBhbmQgaWYgdGhlIGNsaWVudCB3ZXJlIHRvIGNob29zZSBzZWN1cml0 eSBwb3N0dXJlIHRoYXQgZG9lcyBub3Qgb2ZmZXIgYW55IHNlY3VyaXR5IHRvIFRVUk4gbWVzc2Fn ZSAoYmVjYXVzZSBvZiBiYWQgdXNlciBjb25maWd1cmF0aW9uIG9yIGEgbWFsd2FyZSBjbGllbnQg b24gdGhlIGVuZHBvaW50KSwgaXQganVzdCByZW5kZXJzIHRoZSBjbGllbnQgdG8gYmVjb21lIGEg dmljdGltIG9mIERET1MgYXR0YWNrIChhbiBhdHRhY2tlciBjYW4gc2VuZHMgZmFrZWQgcGVybWlz c2lvbnMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGxhdW5jaCBhdHRhY2sgKERPUyBvciBERE9TKSBv biB0aGUgVFVSTiBjbGllbnQgYW5kIGl0IG51bGxpZmllcyB0aGUgc2VjdXJpdHkgYmVuZWZpdHMg b2ZmZXJlZCBieSBDcmVhdGVQZXJtaXNzaW9uKS4NCj4gDQo+IElmIHRoZSBUVVJOIHNlcnZlciBt YW5kYXRlcyAoRClUTFMgdGhlbiB0aGUgYWJvdmUgYXR0YWNrIGlzIG5vdCBwb3NzaWJsZSBhbmQg d291bGQgcHJvdGVjdCBldmVuIGEgY29tcHJvbWlzZWQvbWlzLWNvbmZpZ3VyZWQgY2xpZW50IGZy b20gRERPUyBhdHRhY2tzLiBJbiBzaG9ydCwgd2h5IHdvdWxkIGFuIEVudGVycHJpc2UgbmV0d29y ayBhZG1pbmlzdHJhdG9yIHdhbnQgdG8gY29uZmlndXJlIFRVUk4gc2VydmVyIHRvIGJlIHVzZWQg aW4gdGhpcyBtb2RlIGluIHdoaWNoIGNsaWVudHMgY2FuIGJlIHN1YmplY3RlZCB0byBERE9TIGF0 dGFja3MgYW5kIHRoZSBUVVJOIHNlcnZlciBhbmQgRW50ZXJwcmlzZSBmaXJld2FsbCBjYW5ub3Qg ZG8gYW55dGhpbmcgdG8gcHJvdGVjdCB0aGUgY2xpZW50Lg0KPiANCj4+IA0KPj4gVGhpcyBpcyB0 aGUgZm91bmRhdGlvbiBmb3IgbXkgcHJvcG9zZWQgZWRpdHMuDQo+IA0KPiBJIHVuZGVyc3RhbmQs IEkgY2FuIGFkZCB0aGUgZm9sbG93aW5nIG5ldyBsaW5lczoNCj4gDQo+IEluIG9yZGVyIHRvIGFs bG93IHRoZSBUVVJOIGNsaWVudCB0byBzZWxlY3QgZmFsbGJhY2sgdG8gKEQpVExTIGFzIGRlc2Ny aWJlZCBhYm92ZSwgYSBUVVJOIHNlcnZlciB0aGF0IGRvZXMgbm90IHJlcXVpcmUgZWl0aGVyIFNU VU4gbG9uZyB0ZXJtIGF1dGhlbnRpY2F0aW9uIFtSRkM1Mzg5XSBvciBTVFVOIEV4dGVuc2lvbiBm b3IgVGhpcmQgUGFydHkgQXV0aG9yaXphdGlvbiBbUkZDNzYzNV0gTVVTVCBzdXBwb3J0IChEKVRM Uy4gU3VjaCBhIFRVUk4gc2VydmVyIE1BWSBhbGxvdyBmYWxsYmFjayB0byBjbGVhciB0ZXh0IGJ1 dCBmYWxsYmFjayB0byBjbGVhciB0ZXh0IGlzIE5PVCBSRUNPTU1FTkRFRA0KPiBiZWNhdXNlIGl0 IG1ha2VzIHRoZSBjbGllbnQgbW9yZSBzdXNjZXB0aWJsZSB0byBtYW4taW4tdGhlLW1pZGRsZSBh dHRhY2tzIGFuZCBvbi1wYXRoIHBhY2tldCBpbmplY3Rpb24uDQo+IA0KPiAtVGlydQ0KPiANCj4+ IA0KPj4gLS1CcmFuZG9uDQo+PiANCj4+IE9uIDEyLzEzLzIwMTYgMTI6MTQgQU0sIFRpcnVtYWxl c3dhciBSZWRkeSAodGlyZWRkeSkgd3JvdGU6DQo+Pj4gSGkgQnJhbmRvbiwNCj4+PiANCj4+PiBU aGFua3MgZm9yIHRoZSBmZWVkYmFjay4gUGxlYXNlIHNlZSBpbmxpbmUNCj4+PiANCj4+Pj4gLS0t LS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4+Pj4gRnJvbTogQnJhbmRvbiBXaWxsaWFtcyBbbWFp bHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbV0NCj4+Pj4gU2VudDogU2F0dXJkYXksIERl Y2VtYmVyIDEwLCAyMDE2IDEwOjEzIFBNDQo+Pj4+IFRvOiBLYXJsIFN0YWhsIDxrYXJsLnN0YWhs QGluZ2F0ZS5jb20+OyBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpDQo+Pj4+IDx0aXJlZGR5 QGNpc2NvLmNvbT47IFBhbCBNYXJ0aW5zZW4gKHBhbG1hcnRpKSA8cGFsbWFydGlAY2lzY28uY29t Pg0KPj4+PiBDYzogUHJhc2hhbnRoIFBhdGlsIChwcmFzcGF0aSkgPHByYXNwYXRpQGNpc2NvLmNv bT47IHRyYW0tY2hhaXJzQGlldGYub3JnOw0KPj4+PiAnRGFuIFdpbmcnIDxkYW5AZGFud2luZy5v cmc+OyAnU3BlbmNlciBEYXdraW5zIGF0IElFVEYnDQo+Pj4+IDxzcGVuY2VyZGF3a2lucy5pZXRm QGdtYWlsLmNvbT4NCj4+Pj4gU3ViamVjdDogUmU6IFNWOiBbdHJhbV0gTWF5YmUgd2UgaGF2ZSAo RClUTFMgY29uc2Vuc3VzOyBXQVM6IGRyYWZ0LWlldGYtDQo+Pj4+IHRyYW0tdHVybi1zZXJ2ZXIt ZGlzY292ZXJ5DQo+Pj4+IA0KPj4+PiBJJ20gbm90IHN1cmUgd2UncmUgcXVpdGUgYXQgY29uc2Vu c3VzIHlldCBLYXJsLCBidXQgSSB0aGluayB3ZSdyZSBjbG9zZS4NCj4+Pj4gDQo+Pj4+IEkgYWdy ZWUgdGhhdCB0aGUgdGV4dCB5b3UgcXVvdGUgZnJvbSB0aGUgZG9jIGNvdmVycyB0aGUgY2xpZW50 IHNpZGUNCj4+Pj4gY29uc2lkZXJhdGlvbnMsIGFuZCB0aGF0IGZyYW1pbmcgaXQgYXMgcmVjb21t ZW5kYXRpb25zIHJhdGhlciB0aGFuDQo+Pj4+IHJlcXVpcmVtZW50cyBzdGlsbCBtYWtlcyBzZW5z ZS4gSXQncyB1cCB0byB0aGUgY2xpZW50IHRvIGRlY2lkZSB3aGljaA0KPj4+PiBzZWN1cml0eSBl bGVtZW50cyBhcmUgcmVxdWlyZWQgZm9yIHRoZSBhcHBsaWNhdGlvbiB1c2UgY2FzZSwgYW5kIHRo YXQNCj4+Pj4gdGV4dCB3YXMgaW50ZW5kZWQgdG8gcHJvdmlkZSBndWlkYW5jZSB3aXRob3V0IHRy eWluZyB0byBmb3JjZSBhIHNlY3VyaXR5DQo+Pj4+IHBvc3R1cmUgdGhhdCBpcyBtb3JlIGNvbXBs aWNhdGVkIHRoYW4gdGhlIHVzZSBjYXNlIHJlcXVpcmVzLg0KPj4+IA0KPj4+IFRoZSByZXF1aXJl bWVudHMgYXJlIHRvIHByb3RlY3QgdGhlIGNsaWVudCBmcm9tIHZhcmlvdXMgYXR0YWNrcy4NCj4+ PiANCj4+Pj4gDQo+Pj4+IEZvciB0aGUgc2VydmVyIHNpZGUsIGluIG9yZGVyIHRvIGFsbG93IHRo ZSBjbGllbnQgdG8gZmFsbCBiYWNrIHRvDQo+Pj4+IChEKVRMUywgdGhlIFRVUk4gc2VydmVyIE1V U1Qgc3VwcG9ydCAoRClUTFMgYXQgbGVhc3QgZm9yIG9wcG9ydHVuaXN0aWMNCj4+Pj4gcHJpdmFj eS4gVGhpcyBkb2Vzbid0IG1lYW4gdGhhdCB0aGUgc2VydmVyIGhhcyB0byByZXF1aXJlIChEKVRM Uy4gSXQgY2FuDQo+Pj4+IHN0aWxsIGFsbG93IGZhbGxiYWNrIHRvIGNsZWFydGV4dCBpZiB0aGUg Y2xpZW50IHNvIGNob29zZXMuDQo+Pj4+IA0KPj4+PiBTbywgSSBhZ3JlZSB3aXRoIHlvdSBvbiBy ZXZlcnRpbmcgdGhlIE1VU1QgZm9yIHRoZSBjbGllbnQsIGFzIGxvbmcgYXMgd2UNCj4+Pj4gY29u dGludWUgdG8gc3Ryb25nbHkgcmVjb21tZW5kIChEKVRMUyBhcyB0aGUgZmFsbGJhY2suIElmIHdl IGRvIHRoYXQNCj4+Pj4gdGhvdWdoLCBJIHRoaW5rIHdlIG5lZWQgdG8gbWFrZSBpdCBjbGVhciB0 aGF0IGEgVFVSTiBzZXJ2ZXIgY29uZmlndXJlZA0KPj4+PiB0byBhbGxvdyBzZXNzaW9ucyB3aXRo b3V0IFNUVU4gYXV0aCBNVVNUIHN1cHBvcnQgKEQpVExTIHNvIHRoYXQgdGhlDQo+Pj4+IGNsaWVu dCBoYXMgdGhlIG9wdGlvbiBvZiAoRClUTFMgZmFsbGJhY2suDQo+Pj4+IA0KPj4+PiBJIHRoaW5r IHdlIGFyZSBhZ3JlZWluZyB0byB0aGlzIGNoYW5nZS4NCj4+Pj4gDQo+Pj4+IE9MRDoNCj4+Pj4g DQo+Pj4+ICJBIFRVUk4gY2xpZW50IE1VU1QgdXNlIChEKVRMUyBpbiB0aGUgYWJzZW5jZSBvZiAu Li4iDQo+Pj4+IA0KPj4+PiBORVc6DQo+Pj4+IA0KPj4+PiAiQSBUVVJOIGNsaWVudCBTSE9VTEQg dXNlIChEKVRMUyBpbiB0aGUgYWJzZW5jZSBvZiAuLi4iDQo+Pj4+IA0KPj4+PiBBbmQgSSBhbSBw cm9wb3NpbmcgdGhlIGFkZGl0aW9uIG9mIHRoaXMgcGFyYWdyYXBoIGF0IHRoZSBlbmQgb2YgdGhl DQo+Pj4+IHNlY3Rpb24gOSwganVzdCBiZWZvcmUgc2VjdGlvbiA5LjEuDQo+Pj4+IA0KPj4+PiAi SW4gb3JkZXIgdG8gYWxsb3cgdGhlIFRVUk4gY2xpZW50IHRvIHNlbGVjdCBmYWxsYmFjayB0byAo RClUTFMgYXMNCj4+Pj4gZGVzY3JpYmVkIGFib3ZlLCBhIFRVUk4gc2VydmVyIHRoYXQgZG9lcyBu b3QgcmVxdWlyZSBlaXRoZXIgU1RVTiBsb25nDQo+Pj4+IHRlcm0gYXV0aGVudGljYXRpb24gW1JG QzUzODldIG9yIFNUVU4gRXh0ZW5zaW9uIGZvciBUaGlyZCBQYXJ0eQ0KPj4+PiBBdXRob3JpemF0 aW9uIFtSRkM3NjM1XSBNVVNUIHN1cHBvcnQgKEQpVExTLiBTdWNoIGEgVFVSTiBzZXJ2ZXIgTUFZ DQo+PiBhbHNvDQo+Pj4+IGFsbG93IGZhbGxiYWNrIHRvIGNsZWFyIHRleHQuIg0KPj4+IA0KPj4+ IFsxXSBJIGFncmVlIHdpdGggdGhlIGFib3ZlIHRleHQgZXhjZXB0IGZvciB0aGUgbGFzdCBsaW5l IGluIHRoZSBhYm92ZQ0KPj4gcGFyYWdyYXBoLiBJZiB0aGUgVFVSTiBzZXJ2ZXIgYWxsb3dzIGZh bGxiYWNrIHRvIGNsZWFyIHRleHQgdGhlbiB0aGUgYXR0YWNrZXINCj4+IGNhbiBzdWJqZWN0IHRo ZSBUVVJOIGNsaWVudCB0byB2YXJpb3VzIGF0dGFja3MuIEZvciBleGFtcGxlLCBhdHRhY2tlciBz ZW5kcw0KPj4gZmFrZWQgcGVybWlzc2lvbnMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGxhdW5jaCBh dHRhY2sgKERPUyBvciBERE9TKSBvbiB0aGUNCj4+IFRVUk4gY2xpZW50IGFuZCBpdCBudWxsaWZp ZXMgdGhlIHNlY3VyaXR5IGJlbmVmaXRzIG9mZmVyZWQgYnkgQ3JlYXRlUGVybWlzc2lvbi4NCj4+ IFRoZSB2aWN0aW0gaW4gdGhpcyBtb2RlIGlzIHRoZSBUVVJOIGNsaWVudCBhbmQgbm90IHRoZSBU VVJOIHNlcnZlciwgYW5kIGhlbmNlDQo+PiBpdCBpcyBtb3JlIGltcG9ydGFudCBmb3IgdGhlIGNs aWVudCB0byB1c2UgKEQpVExTIHRvIHByb3RlY3QgaXRzZWxmIGZyb20gYXR0YWNrcy4NCj4+PiAN Cj4+PiBXaGVuIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkgdGhhdCBpbiBjbGVhciB0ZXh0IG1vZGUg dGhlIFRVUk4gY2xpZW50cyBjYW4gYmUNCj4+IHN1YmplY3RlZCB0byB2YXJpb3VzIGF0dGFja3Ms IHdoeSB3b3VsZCBhbiBUVVJOIHNlcnZlciBhZG1pbmlzdHJhdG9yIHdhbnQgdG8NCj4+IGFsbG93 IGZhbGxiYWNrIHRvIGNsZWFyIHRleHQgID8NCj4+PiANCj4+PiBbMl0gQW5kIHdoYXQgcHJvYmxl bXMgZG8geW91IHNlZSB3aXRoIHRoZSBmb2xsb3dpbmcgbmV3IHByb3Bvc2VkIHRleHQgPw0KPj4+ ICJJbiB0aGUgYWJzZW5jZSBvZiBTVFVOIGxvbmctdGVybSBjcmVkZW50aWFsIG1lY2hhbmlzbSBb UkZDNTM4OV0gb3IgU1RVTg0KPj4gRXh0ZW5zaW9uIGZvciBUaGlyZC1QYXJ0eSBBdXRob3JpemF0 aW9uIFtSRkM3NjM1XSwgYSBUVVJOIGNsaWVudCBNVVNUIHVzZQ0KPj4gKEQpVExTIGFuZCBpZiAo RClUTFMgYXV0aGVudGljYXRpb24gdG8gdmFsaWRhdGUgdGhlIFRVUk4gc2VydmVyIGlkZW50aXR5 IGlzIG5vdA0KPj4gcG9zc2libGUgdGhlbiB0aGUgVFVSTiBjbGllbnQgTVVTVCBmYWxsYmFjayB0 byBlbmNyeXB0aW9uLW9ubHkgKEQpVExTLiINCj4+PiANCj4+PiAtVGlydQ0KPj4+IA0KPj4+PiAN Cj4+Pj4gLS1CcmFuZG9uDQo+Pj4+IA0KPj4+PiBPbiAxMi8wNS8yMDE2IDExOjU5IEFNLCBLYXJs IFN0YWhsIHdyb3RlOg0KPj4+Pj4gQWxsIEkgd2FudCB0byBkbyBpbiB0aGUgKEQpVExTIGRpc2N1 c3Npb24gaXMgdG8gZGVsZXRlIHRoZSBzZW50ZW5jZSDigJxBDQo+Pj4+PiBUVVJOIGNsaWVudCBN VVNUIHVzZSAoRClUTFMgaW4gdGhlIGFic2VuY2Ugb2YgU1RVTiBsb25nLXRlcm0gY3JlZGVudGlh bA0KPj4+Pj4gbWVjaGFuaXNtIFtSRkM1Mzg5XSBvciBTVFVOIEV4dGVuc2lvbiBmb3IgVGhpcmQt UGFydHkgQXV0aG9yaXphdGlvbg0KPj4+Pj4gW1JGQzc2MzVdLuKAnSB1bmRlciA5LiAgU2VjdXJp dHkgQ29uc2lkZXJhdGlvbnN0aGF0IHdhcyB0aHJvd24taW50bw0KPj4+Pj4gdmVyc2lvbiAtMTAg ZHVyaW5nIHRoZSBkaXNjdXNzLg0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gKipXZSBs ZWF2ZSBhbGwgdGhlIHJlc3QgcmVnYXJkaW5nIChEKVRMUyBhcyBpdCBoYXMgYmVlbiBzaW5jZSB2 ZXJzaW9uIC03DQo+Pj4+PiBvZiB0aGlzIGRyYWZ0LioqDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4g DQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gQnJhbmRvbiwNCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+IEkgc2VlIHRoZXJlIGFscmVhZHkgYXJlIHRoZSAoZ2VuZXJhbCkgU0hPVUxEIG9yIFJF Q09NTUVORCB0aGF0IHlvdQ0KPj4+Pj4gd2FudGVkIChJIGRpZCBub3Qgc3VnZ2VzdCB0byBjaGFu Z2UgdGhvc2Ug4oCTIHRoZXkgYXJlIHRoZXJlIHNpbmNlIHZlcnNpb24NCj4+Pj4+IC03IEkgYmVs aWV2ZSk6IOKAnEl0IGlzIFJFQ09NTUVOREVEIHRoYXQgdGhlIFRVUk4gY2xpZW50IHVzZSBvbmUg b2YgdGhlDQo+Pj4+PiBmb2xsb3dpbmcgdGVjaG5pcXVlcyB3aXRoIChEKVRMUyB0byB2YWxpZGF0 ZSB0aGUgVFVSTiBzZXJ2ZXI64oCdIGFuZA0KPj4gZnVydGhlcuKApg0KPj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IGZvciBUaXJ1LCB0aGlzIGlzIGFscmVhZHkg aW4gdGhlIGRyYWZ0IHNpbmNlIC03IGFuZCBJIGFtIG5vdCBzdWdnZXN0aW5nDQo+Pj4+PiB0byBj aGFuZ2UgdGhhdDoNCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IOKAnCAgIEFuIGF1dG8t ZGlzY292ZXJlZCBUVVJOIHNlcnZlciBpcyBjb25zaWRlcmVkIHRvIGJlIG9ubHkgYXMgdHJ1c3Rl ZCBhcw0KPj4+Pj4gDQo+Pj4+PiAgIHRoZSBwYXRoIGJldHdlZW4gdGhlIGNsaWVudCBhbmQgdGhl IFRVUk4gc2VydmVyLiAgSW4gb3JkZXIgdG8gc2FmZWx5DQo+Pj4+PiANCj4+Pj4+ICAgdXNlIGF1 dG8tZGlzY292ZXJlZCBUVVJOIHNlcnZlcnMgZm9yIHNlc3Npb25zIHdpdGggJ3N0cmljdCBwcml2 YWN5Jw0KPj4+Pj4gDQo+Pj4+PiAgIHJlcXVpcmVtZW50cywgdGhlIHVzZXIgbmVlZHMgdG8gYmUg YWJsZSB0byBkZWZpbmUgcHJpdmFjeSBjcml0ZXJpYQ0KPj4+Pj4gDQo+Pj4+PiAgIChlLmcuICBh IHRydXN0ZWQgbGlzdCBvZiBzZXJ2ZXJzLCBuZXR3b3Jrcywgb3IgZG9tYWlucykgdGhhdCBhcmUN Cj4+Pj4+IA0KPj4+Pj4gICBjb25zaWRlcmVkIGFjY2VwdGFibGUgZm9yIHN1Y2ggdHJhZmZpYy4g IEFueSBkaXNjb3ZlcmVkIFRVUk4gc2VydmVyDQo+Pj4+PiANCj4+Pj4+ICAgb3V0c2lkZSB0aGUg Y3JpdGVyaWEgaXMgY29uc2lkZXJlZCB1bnRydXN0ZWQgYW5kIHRoZXJlZm9yZSBNVVNUIE5PVA0K Pj4+Pj4gDQo+Pj4+PiAgIGJlIHVzZWQgZm9yIHByaXZhY3kgc2Vuc2l0aXZlIGNvbW11bmljYXRp b24uDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgIEluIHNvbWUgYXV0by1kaXNjb3Zl cnkgc2NlbmFyaW9zLCBpdCBtaWdodCBub3QgYmUgcG9zc2libGUgZm9yIHRoZQ0KPj4+Pj4gDQo+ Pj4+PiAgIFRVUk4gY2xpZW50IHRvIHVzZSAoRClUTFMgYXV0aGVudGljYXRpb24gdG8gdmFsaWRh dGUgdGhlIFRVUk4gc2VydmVyLg0KPj4+Pj4gDQo+Pj4+PiAgIEhvd2V2ZXIsIGZhbGwtYmFjayB0 byBjbGVhciB0ZXh0IGluIHN1Y2ggY2FzZXMgY291bGQgbGVhdmUgdGhlIFRVUk4NCj4+Pj4+IA0K Pj4+Pj4gICBjbGllbnQgb3BlbiB0byBvbi1wYXRoIGluamVjdGlvbiBvZiBzcG9vZmVkIFRVUk4g bWVzc2FnZXMuICBJbnN0ZWFkLA0KPj4+Pj4gDQo+Pj4+PiAgIHdpdGggYW4gZXhwbGljaXQgYWRt aW5pc3RyYXRvciBjaG9pY2UsIGEgVFVSTiBjbGllbnQgU0hPVUxEIGZhbGwtYmFjaw0KPj4+Pj4g DQo+Pj4+PiAgIHRvIGVuY3J5cHRpb24tb25seSAoRClUTFMgd2hlbiAoRClUTFMgYXV0aGVudGlj YXRpb24gaXMgbm90DQo+Pj4+PiANCj4+Pj4+ICAgYXZhaWxhYmxlLiAgQW5vdGhlciByZWFzb24g dG8gZmFsbC1iYWNrIHRvIGVuY3J5cHRpb24tb25seSBpcyBmb3INCj4+Pj4+IA0KPj4+Pj4gICBw cml2YWN5LCB3aGljaCBpcyBhbmFsb2dvdXMgdG8gU01UUCBvcHBvcnR1bmlzdGljIGVuY3J5cHRp b24NCj4+Pj4+IA0KPj4+Pj4gICBbUkZDNzQzNV0gd2hlcmUgb25lIGRvZXMgbm90IHJlcXVpcmUg cHJpdmFjeSBidXQgb25lIGRlc2lyZXMgcHJpdmFjeQ0KPj4+Pj4gDQo+Pj4+PiAgIHdoZW4gcG9z c2libGUuDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgIEl0IGlzIHN1Z2dlc3RlZCB0 aGF0IGEgVFVSTiBjbGllbnQgYXR0ZW1wdCAoRClUTFMgd2l0aCBhdXRoZW50aWNhdGlvbg0KPj4+ Pj4gDQo+Pj4+PiAgIGFuZCBlbmNyeXB0aW9uLCBmYWxsaW5nIGJhY2sgdG8gZW5jcnlwdGlvbi1v bmx5IGlmIHRoZSBUVVJOIHNlcnZlcg0KPj4+Pj4gDQo+Pj4+PiAgIGNhbm5vdCBiZSBhdXRoZW50 aWNhdGVkIHZpYSAoRClUTFMuICBBIFRVUk4gY2xpZW50IGNvdWxkIGZhbGwgYmFjayB0bw0KPj4+ Pj4gDQo+Pj4+PiAgIGNsZWFyIHRleHQsIHdpdGggYW4gZXhwbGljaXQgYWRtaW5pc3RyYXRvciBj aG9pY2UsIGlmIGl0IGRvZXMgbm90DQo+Pj4+PiANCj4+Pj4+ICAgc3VwcG9ydCB1bmF1dGhlbnRp Y2F0ZWQgKEQpVExTLCBidXQgZmFsbGJhY2sgdG8gY2xlYXIgdGV4dCBpcyBOT1QNCj4+Pj4+IA0K Pj4+Pj4gICBSRUNPTU1FTkRFRCBiZWNhdXNlIGl0IG1ha2VzIHRoZSBjbGllbnQgbW9yZSBzdXNj ZXB0aWJsZSB0byBtYW4tDQo+PiBpbi0NCj4+Pj4+IA0KPj4+Pj4gICB0aGUtbWlkZGxlIGF0dGFj a3MgYW5kIG9uLXBhdGggcGFja2V0IGluamVjdGlvbi4NCj4+Pj4+IA0KPj4+Pj4g4oCdDQo+Pj4+ PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gKipUaXJ1IOKAkyBCZWxv dyB5b3UgYXJlIHBvaW50aW5nIGF0IHRoZSAtMTAgdmVyc2lvbiBjaGFuZ2VzIHRoYXQgV0UgQVJF DQo+Pj4+PiBkaXNjdXNzaW5nIGhlcmUuKioNCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ IFByYXNwYW50aCBwdXQgdGhlbSBvbiB0aGUgdGFibGUgYWdhaW4gYW5kIEkgYnJvdWdodCB1cCB0 aGF0IHRoZQ0KPj4+Pj4gDQo+Pj4+PiDigJxBIFRVUk4gY2xpZW50IE1VU1QgdXNlIChEKVRMUyBp biB0aGUgYWJzZW5jZSBvZiBTVFVOIGxvbmctdGVybQ0KPj4+Pj4gY3JlZGVudGlhbCBtZWNoYW5p c20gW1JGQzUzODldIG9yIFNUVU4gRXh0ZW5zaW9uIGZvciBUaGlyZC1QYXJ0eQ0KPj4+Pj4gQXV0 aG9yaXphdGlvbiBbUkZDNzYzNV0u4oCdDQo+Pj4+PiANCj4+Pj4+IG11c3QgZ28gYXdheSAobGVh dmUgdGhlIHJlc3QpLCBzaW5jZSBpdCBlZmZlY3RpdmVseSBmb3JiaWRzIFRVUk4gc2VydmVycw0K Pj4+Pj4gcHJvdmlkZWQgYnkgdGhlIGxvY2FsIGFuZCBhY2Nlc3MgbmV0d29yay4NCj4+Pj4+IA0K Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IEJyYW5kb24gaGFkIGFncmVlZCB0aGF0IE1VU1Qgc2hvdWxk IGdvIGF3YXksIHdoZW4geW91IGp1bXBlZCBpbiB3aXRoDQo+Pj4+IHRoZQ0KPj4+Pj4gYXR0YWNr cyBhcmd1bWVudHMsIHdoZW4gd2Ugd2VyZSBkaXNjdXNzaW5nIHdoZXRoZXIgdGhlcmUgc2hvdWxk IHN0aWxsIGJlDQo+Pj4+PiBhIFNIT1VMRCBvciBSRUNPTU1FTkQuIOKAkyBUaGVuIHlvdSBnb3Qg bWUgKGFuZCBvdGhlcnM/KSBsb3N0LCBhbmTigKYuDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+ Pj4+PiBTbyBjYXRjaCB1cCBmcm9tIHBvaW50ICgxKSBvZiBteToNCj4+Pj4+IA0KPj4+Pj4gaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDIyMTYu aHRtbA0KPj4+Pj4gPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1o dHRwcy0NCj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4+Pj4gDQo+PiAyRGFyY2hpdmVfd2Vi X3RyYW1fY3VycmVudF9tc2cwMjIxNi5odG1sJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4+Pj4g dzBGNGpwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4+Pj4gTlNuc2d3YkJWVUphNG1a Zm1FSUJYZyZtPUxYYUgtDQo+Pj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1 cFI4JnM9TnRSWndybW4ySy0NCj4+Pj4gV1VJX1FONWtfeUhsQU4tdXpob1FVOGJzMnlBX1JCUDgm ZT0+DQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IEFuZCB5b3UgbWF5IG5v dGljZSB0aGF0IGluDQo+Pj4+PiANCj4+IGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJj aC9tc2cvdHJhbS8zc3ZPOWRqRnhlWnlUdE5zZ3FRZjh6Q1RpVlkNCj4+Pj4+IDxodHRwczovL3Vy bGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+Pj4+IA0KPj4gM0FfX21h aWxhcmNoaXZlLmlldGYub3JnX2FyY2hfbXNnX3RyYW1fM3N2TzlkakZ4ZVp5VHROc2dxUWY4ekNU aVZZJmQ9DQo+Pj4+IERnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGpwTjZMWmcmcj1id1otbm5SR1dt Y0dLUkl1YWRxNi0NCj4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+Pj4+IE1W UWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9U0xqeXN3ZG4tDQo+Pj4+IG9a X2FldjBwUnhEM2g2YzRhS2JFUVozY19rTDlfY2NIR00mZT0+DQo+Pj4+PiB0aGF0IHlvdSByZWZl cnJlZCB0bw0KPj4+Pj4gDQo+Pj4+PiDigJxNYWtpbmcgU1RVTiBhdXRoZW50aWNhdGlvbiBPUFRJ T05BTOKAnQ0KPj4+Pj4gDQo+Pj4+PiBpcyBBTFJFQURZIENPTVBFTlNBVEVEIGZvciBieSDigJxJ UCBhZGRyZXNzIGF1dGhlbnRpY2F0aW9u4oCdICh0aGUNCj4+Pj4+IGZvdW5kYXRpb24gb2YgdG9k YXnigJlzIElQIHRlbGVwaG9ueSBhdXRoZW50aWNhdGlvbik6DQo+Pj4+PiANCj4+Pj4+IOKAnEEg VFVSTiBzZXJ2ZXIgaW4gc3VjaCBjYXNlcyBtdXN0IGJlIGNvbmZpZ3VyZWQgdG8gb25seSBwcm9j ZXNzIFNUVU4NCj4+Pj4+IA0KPj4+Pj4gICByZXF1ZXN0cyBmcm9tIHRoZSB0cnVzdGVkIGxvY2Fs IG5ldHdvcmsgb3Igc3Vic2NyaWJlcnMgb2YgdGhlIGFjY2Vzcw0KPj4+Pj4gDQo+Pj4+PiAgIG5l dHdvcmsuIE9wZXJhdGlvbmFsIG1lYXN1cmVzIG11c3QgYmUgdGFrZW4gaW4gb3JkZXIgcHJvdGVj dCB0aGUNCj4+Pj4+IA0KPj4+Pj4gICBUVVJOIHNlcnZlcjsgc29tZSBvZiB0aGVzZSBtZWFzdXJl cyBpbmNsdWRlLCBidXQgbm90IGxpbWl0ZWQgdG8sDQo+Pj4+PiANCj4+Pj4+ICAgYWNjZXNzIGNv bnRyb2wgYnkgbWVhbnMgb2YgYWNjZXNzLWxpc3RzLCBmaXJld2FsbHMsIHN1YnNjcmliZXIgcXVv dGENCj4+Pj4+IA0KPj4+Pj4gICBsaW1pdHMsIGluZ3Jlc3MgZmlsdGVyaW5nIGV0Yy7igJ0NCj4+ Pj4+IA0KPj4+Pj4gd2hlcmUg4oCdZmlyZXdhbGxz4oCdIHNwZWNpZmljYWxseSBhcHBsaWVzIHRv IFRVUk4gc2VydmVycyB0aGF0IGxvY2FsIG9yDQo+Pj4+PiBhY2Nlc3MgbmV0d29yayBwcm92aWRl cnMgYWxsb3cgb25seSB0aGVpciBvd24gdXNlcnMgdG8gYWNjZXNzLg0KPj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4gQW5kIEF1dGhvcuKAmXM6IOKAnFBsZWFzZSByZWZlcg0KPj4+Pj4gaHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNj b3ZlcnktDQo+PiAxMCNzZWN0aW9uLQ0KPj4+PiA5DQo+Pj4+PiA8aHR0cHM6Ly91cmxkZWZlbnNl LnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPj4+PiAzQV9fdG9vbHMuaWV0Zi5vcmdf aHRtbF9kcmFmdC0yRGlldGYtMkR0cmFtLTJEdHVybi0yRHNlcnZlci0NCj4+IDJEZGlzY292ZXJ5 LQ0KPj4+PiAyRDEwLTIzc2VjdGlvbi0yRDkmZD1EZ01GYVEmYz05NlpiWlpjYU1GNHcwRjRqcE42 TFpnJnI9YndaLQ0KPj4+PiBublJHV21jR0tSSXVhZHE2LU5TbnNnd2JCVlVKYTRtWmZtRUlCWGcm bT1MWGFILQ0KPj4+PiANCj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4 JnM9YjBmSjFBTnFoRThDMkJybG5HWTNpVw0KPj4+PiBDd1ZFcjJPaFl5RmxFX19vT0h0U0UmZT0+ Zm9yDQo+Pj4+PiBtb3JlIGRldGFpbHMu4oCdDQo+Pj4+PiANCj4+Pj4+IGFscmVhZHkgKHNpbmNl IHZlcnNpb24gLTcgSSB0aGluaykgaW4gZGV0YWlsIGRpc2N1c3NlcyB0aGUgKEQpVExTDQo+Pj4+ PiBpbXBsaWNhdGlvbnMgaW4gdGhpcyBjb250ZXh0ICh0aGF0IHlvdSBhcmUgcmVkb2luZykuDQo+ Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiBQbGVhc2UsIGFnYWluLCBsZXQgdXMgc3RheSB3 aXRoIHRoZSBjb25zZW5zdXMgc2luY2UgdmVyc2lvbiAtNyBvZiB0aGlzDQo+Pj4+PiBkcmFmdDog Tm8gKEQpVExTIG1hbmRhdGUuDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiBUaGFua3Ms DQo+Pj4+PiANCj4+Pj4+IEthcmwNCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICpGcsOl bjoqVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSBbbWFpbHRvOnRpcmVkZHlAY2lzY28uY29t XQ0KPj4+Pj4gKlNraWNrYXQ6KiBkZW4gNCBkZWNlbWJlciAyMDE2IDA4OjMzDQo+Pj4+PiAqVGls bDoqIFBhbCBNYXJ0aW5zZW4gKHBhbG1hcnRpKTsgS2FybCBTdGFobDsgdHJhbSBtYWlsaW5nIGxp c3QNCj4+Pj4+ICpLb3BpYToqIEJyYW5kb24gV2lsbGlhbXM7IFByYXNoYW50aCBQYXRpbCAocHJh c3BhdGkpOw0KPj4+Pj4gdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0Bp ZXRmLm9yZz47IERhbiBXaW5nOyBTcGVuY2VyDQo+Pj4+PiBEYXdraW5zIGF0IElFVEYNCj4+Pj4+ ICrDhG1uZToqIFJFOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVy eQ0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gUHJhc2hhbnRoIGhhcyBhbHJlYWR5IHN1 bW1hcml6ZWQgdGhlIGNoYW5nZXMgZG9uZSB0byBkcmFmdCBkdXJpbmcgSVNFRw0KPj4+Pj4gcmV2 aWV3IGluDQo+Pj4+PiANCj4+IGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cv dHJhbS8zc3ZPOWRqRnhlWnlUdE5zZ3FRZjh6Q1RpVlkNCj4+Pj4+IDxodHRwczovL3VybGRlZmVu c2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+Pj4+IA0KPj4gM0FfX21haWxhcmNo aXZlLmlldGYub3JnX2FyY2hfbXNnX3RyYW1fM3N2TzlkakZ4ZVp5VHROc2dxUWY4ekNUaVZZJmQ9 DQo+Pj4+IERnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGpwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1 YWRxNi0NCj4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+Pj4+IE1WUWkybFZi RV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9U0xqeXN3ZG4tDQo+Pj4+IG9aX2FldjBw UnhEM2g2YzRhS2JFUVozY19rTDlfY2NIR00mZT0+DQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+ Pj4+PiANCj4+Pj4+IEthcmzigJlzIGNvbW1lbnQgaXMgdG8gbm90IG1hbmRhdGUgKEQpVExTLCBh bmQgd2UgZG9u4oCZdCBhZ3JlZSB3aXRoIGhpbS4NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+ Pj4+IFJlcXVlc3QgeW91LCBXRyBtZW1iZXJzLCBXRyBjaGFpcnMgYW5kIEFEIHRvIHNoYXJlIHRo ZWlyIHRob3VnaHRzIG9uDQo+Pj4+PiBtYW5kYXRpbmcgdGhlIHVzZSBvZiAoRClUTFMgd2hlbiBT VFVOIGF1dGhlbnRpY2F0aW9uIGlzIG5vdCB1c2VkIHRvDQo+Pj4+PiBoYW5kbGUgdGhlIHRocmVh dHMgZGlzY3Vzc2VkIGluIFJGQzU3NjYuDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAt VGlydQ0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gKkZyb206KlBhbCBNYXJ0aW5zZW4g KHBhbG1hcnRpKQ0KPj4+Pj4gKlNlbnQ6KiBGcmlkYXksIERlY2VtYmVyIDIsIDIwMTYgMTE6Mjcg UE0NCj4+Pj4+ICpUbzoqIEthcmwgU3RhaGwgPGthcmwuc3RhaGxAaW5nYXRlLmNvbSA8bWFpbHRv Omthcmwuc3RhaGxAaW5nYXRlLmNvbT4+Ow0KPj4+Pj4gdHJhbSBtYWlsaW5nIGxpc3QgPHRyYW1A aWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPj4NCj4+Pj4+ICpDYzoqIFRpcnVtYWxlc3dh ciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29tDQo+Pj4+PiA8bWFpbHRvOnRpcmVk ZHlAY2lzY28uY29tPj47IEJyYW5kb24gV2lsbGlhbXMNCj4+Pj4+IDxicmFuZG9uLndpbGxpYW1z QGFrYW1haS5jb20NCj4+IDxtYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tPj47DQo+ Pj4+PiBQcmFzaGFudGggUGF0aWwgKHByYXNwYXRpKSA8cHJhc3BhdGlAY2lzY28uY29tDQo+Pj4+ PiA8bWFpbHRvOnByYXNwYXRpQGNpc2NvLmNvbT4+OyB0cmFtLWNoYWlyc0BpZXRmLm9yZw0KPj4+ Pj4gPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47IERhbiBXaW5nIDxkYW5AZGFud2luZy5v cmcNCj4+Pj4+IDxtYWlsdG86ZGFuQGRhbndpbmcub3JnPj47IFNwZW5jZXIgRGF3a2lucyBhdCBJ RVRGDQo+Pj4+PiA8c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20NCj4+Pj4gPG1haWx0bzpz cGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+DQo+Pj4+PiAqU3ViamVjdDoqIFJlOiBbdHJh bV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4gSGkgS2FybCAoYW5kIHRyYW1zdGVycyksDQo+Pj4+PiANCj4+Pj4+IA0K Pj4+Pj4gDQo+Pj4+PiBJIGFtIHN5bXBhdGhldGljIHRvIHlvdXIgYXJndW1lbnRzIGJ1dCB0aGV5 IG1pZ2h0IGhhdmUgYmVlbiBsb3N0DQo+Pj4+PiBzb21ld2hlcmUgaW4gdGhlIGVtYWlsIHRocmVh ZCAoQSBtaXggb2YgcXVvdGluZywgcmVwZWF0aW5nIGFuZCBpbmxpbmUNCj4+Pj4+IGNvbW1lbnRp bmcgaGF2ZSBhdCBsZWFzdCBtYWRlIG15IGVtYWlsIGNsaWVudCBzb21ld2hhdCBjb25mdXNlZC4p DQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiBUaGUgYmVzdCB0aGluZyB5b3UgY2FuIGRv IGF0IHRoaXMgbW9tZW50IGlzIHRvIHByb3ZpZGUgdGV4dC4gSSBzdWdnZXN0DQo+Pj4+PiB5b3Ug d3JpdGUgdXAgYSBkcmFmdCBhcyBhIGNvdW50ZXIgcHJvcG9zYWwgYW5kIHN1Ym1pdCBpdC4gSW4g dGhhdCB3YXkNCj4+Pj4+IHRoZSBXRyBtZW1iZXJzIGNhbiByZWFkIHRocm91Z2ggYW5kIGNvbW1l bnQuDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiBJIGVuY291cmFnZSB0aGUgV0cgY2hh aXJzIHRvIGdpdmUgS2FybCBlbm91Z2ggdGltZSB0byB3cml0ZSB0aGlzIHVwLA0KPj4+Pj4gYmVm b3JlIHByb2dyZXNzaW5nIHRoZSBvdGhlciBkcmFmdC4NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAuLS4NCj4+Pj4+IA0KPj4+Pj4gUMOlbC1FcmlrDQo+Pj4+ PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBPbiAyIERlYyAyMDE2LCBhdCAwOTozOCwgS2Fy bCBTdGFobCA8a2FybC5zdGFobEBpbmdhdGUuY29tDQo+Pj4+PiAgICA8bWFpbHRvOmthcmwuc3Rh aGxAaW5nYXRlLmNvbT4+IHdyb3RlOg0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAg SGkgVGlydSwNCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIEkgYW0gdHJ5aW5nIHRv IG1ha2UgdGhlIHBvaW50IHRoYXQgdGhlcmUgaXMgbm8gb3B0aW9uIGZvciB0aGlzDQo+Pj4+PiAg ICBkcmFmdCwgc3VwcG9zZWQgdG8gZnVsZmlsbDoNCj4+Pj4+IA0KPj4+Pj4gICAgKlt0cmFtXSBN aWxlc3RvbmUgMzogVFVSTiBzZXJ2ZXIgYXV0by1kaXNjb3ZlcnkgbWVjaGFuaXNtIGZvcg0KPj4+ Pj4gICAgZW50ZXJwcmlzZSBhbmQgSVNQcyoNCj4+Pj4+IA0KPj4+Pj4gICAgdG8gcmVzdWx0IGlu OiDigJxXZSBmb3JiaWQgdXNhZ2Ugb2Ygc3VjaCAoeWVsbG93KSBuZXR3b3JrIHByb3ZpZGVkDQo+ Pj4+PiAgICBUVVJOIHNlcnZlcnMgKHVzZSBncmF5IG9yIGdyYXlpc2ggVFVSTiBzZXJ2ZXJzIGlu c3RlYWQp4oCdLCAgd2hpY2ggaXMNCj4+Pj4+ICAgIHRoZSBjb25zZXF1ZW5jZSBvZiBtYW5kYXRp bmcgKEQpVExTLg0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgU2ltcGx5IGxlYXZl IHRoZSBjb25zZW5zdXMgc2luY2UgdmVyc2lvbiAtNyBvZiB0aGlzIGRyYWZ0IGJ5DQo+Pj4+PiAg ICByZW1vdmluZyB0aGUgKEQpVExTIG1hbmRhdGluZyBmb3IgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVk IGJ5ICB0aGUNCj4+Pj4+ICAgIGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrIHRocm93bi1pbiBkdXJp bmcgdGhlIGRpc2N1c3MuDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICAvS2FybA0K Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgUFM6IEkgYmVsaWV2ZSB0aGUgYXR0YWNr IGRpc2N1c3Npb24gYmVsb3cgaXMgYWxyZWFkeSBkb25lLCBhbmQgdGhhdA0KPj4+Pj4gICAgeW91 IGFyZSB3cm9uZyBpbiB0aGlua2luZyB0aGF0IGF1dGhlbnRpY2F0aW9uIHdoaWNoIHByb3RlY3Rz IGFnYWluc3QNCj4+Pj4+ICAgIHNwb29mIGF0dGFja3MgY2FuIGJlIGV4Y2hhbmdlZCBmb3IgZW5j cnlwdGlvbiwgYW5kIHRoYXQgYW55IG9mIHRoZXNlDQo+Pj4+PiAgICB0aGluZ3MgcHJvdGVjdHMg YWdhaW5zdCBERE9TIGF0dGFja3MgLiBUaGVzZSBzZWN1cml0eSB0aGluZ3MgYWRkcmVzcw0KPj4+ Pj4gICAgZGlmZmVyZW50IHRoaW5ncyBhbmQgYXJlIG5vdCBpbnRlcmNoYW5nZWFibGUsIG5vciBh cmUgdGhleSB1bml2ZXJzYWwNCj4+Pj4+ICAgIG1lYW5zIGFnYWluc3QgYXR0YWNrcyBvZiB2YXJp b3VzIGtpbmRzLg0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgQW5kIHRoZSBvdXRj b21lIG9mIGFueSBzdWNoIGRpc2N1c3Npb24gZG9lc27igJl0IGNoYW5nZSB0aGUgYWJvdmUuDQo+ Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBQbGVhc2Ugbm90ZSAoc29ycnkgdG8gcmVw ZWF0KSAgdGhhdCBmb3IgdGhlIHB1cnBvc2Ugb2YgZ2V0dGluZyBhDQo+Pj4+PiAgICBiZXR0ZXIg cGF0aCBmb3IgcmVhbC10aW1lIHRyYWZmaWMgdGhhbiB0aHJvdWdoIHRoZSBkZWZhdWx0IGdhdGV3 YXkNCj4+Pj4+ICAgIHBhdGgsIHdlIGNhbm5vdCBleHBlY3QgdG8gYWxzbyBnZXQgYSBoaWdoZXIg c2VjdXJpdHkgb3IgdHJ1c3QgbGV2ZWwsDQo+Pj4+PiAgICBub3IgdG8gcmVzb2x2ZSBldmVyeSBw cm9ibGVtIGluIHRoZSB3b3JsZC4NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+ Pj4gDQo+Pj4+PiAgICAqRnLDpW46KiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIFttYWls dG86dGlyZWRkeUBjaXNjby5jb21dDQo+Pj4+PiAgICAqU2tpY2thdDoqIGRlbiAyOCBub3ZlbWJl ciAyMDE2IDEwOjUzDQo+Pj4+PiAgICAqVGlsbDoqIEthcmwgU3RhaGw7ICdCcmFuZG9uIFdpbGxp YW1zJzsgUHJhc2hhbnRoIFBhdGlsDQo+Pj4+PiAgICAocHJhc3BhdGkpOyB0cmFtQGlldGYub3Jn IDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4+Pj4+ICAgICpLb3BpYToqIHRyYW0tY2hhaXJzQGll dGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+OyAnRGFuDQo+Pj4+PiAgICBXaW5n JzsgJ1NwZW5jZXIgRGF3a2lucyBhdCBJRVRGJw0KPj4+Pj4gICAgKsOEbW5lOiogUkU6IFt0cmFt XSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+Pj4+PiANCj4+Pj4+IA0K Pj4+Pj4gDQo+Pj4+PiAgICBIaSBLYXJsLA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4g ICAgWWVzLCBJIGFtIGRpc2N1c3NpbmcgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IGxvY2FsIG9y IGFjY2Vzcw0KPj4+Pj4gICAgbmV0d29ya3MsIHJlZmVycmluZyB0byBpbnNpZGUgYXR0YWNrcyBs YXVuY2hlZCBieSBhdHRhY2tlcnMgaW5zaWRlDQo+Pj4+PiAgICB0aGUgbG9jYWwgb3IgYWNjZXNz IG5ldHdvcmsuDQo+Pj4+PiANCj4+Pj4+ICAgIGEpQW4gaW5zaWRlIGF0dGFja2VyIHNlbmRzIGZh a2VkIHBlcm1pc3Npb25zIHRvIHRoZSBUVVJOIHNlcnZlciB0bw0KPj4+Pj4gICAgbGF1bmNoIGF0 dGFjayAoRE9TIG9yIERET1MpIG9uIHRoZSB2aWN0aW0gKFRVUk4gY2xpZW50KS4NCj4+Pj4+IA0K Pj4+Pj4gICAgYilBbiBpbnNpZGUgYXR0YWNrZXIgc2VuZHMgc3Bvb2ZlZCBUVVJOIHJlcXVlc3Rz IHRvIHRoZSBUVVJOIHNlcnZlcg0KPj4+Pj4gICAgdG8gY2xvc2UgYWxsb2NhdGlvbnMuDQo+Pj4+ PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBCb3RoIGFib3ZlIGF0dGFja3MgY2FuIGJlIHBy ZXZlbnRlZCBieSB1c2luZyBvcHBvcnR1bmlzdGljDQo+Pj4+PiAgICBlbmNyeXB0aW9uIHdpdGgg KEQpVExTLg0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgLVRpcnUNCj4+Pj4+IA0K Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgICpGcm9tOiogdHJhbSBbbWFpbHRvOnRyYW0tYm91bmNl c0BpZXRmLm9yZ10gKk9uIEJlaGFsZiBPZiAqS2FybCBTdGFobA0KPj4+Pj4gICAgKlNlbnQ6KiBN b25kYXksIE5vdmVtYmVyIDI4LCAyMDE2IDI6NDkgUE0NCj4+Pj4+ICAgICpUbzoqIFRpcnVtYWxl c3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29tDQo+Pj4+PiAgICA8bWFpbHRv OnRpcmVkZHlAY2lzY28uY29tPj47ICdCcmFuZG9uIFdpbGxpYW1zJw0KPj4+Pj4gICAgPGJyYW5k b24ud2lsbGlhbXNAYWthbWFpLmNvbQ0KPj4+PiA8bWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWth bWFpLmNvbT4+Ow0KPj4+Pj4gICAgUHJhc2hhbnRoIFBhdGlsIChwcmFzcGF0aSkgPHByYXNwYXRp QGNpc2NvLmNvbQ0KPj4+Pj4gICAgPG1haWx0bzpwcmFzcGF0aUBjaXNjby5jb20+PjsgdHJhbUBp ZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+Pj4+PiAgICAqQ2M6KiB0cmFtLWNoYWly c0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0RhbiBXaW5nJw0KPj4+ Pj4gICAgPGRhbkBkYW53aW5nLm9yZyA8bWFpbHRvOmRhbkBkYW53aW5nLm9yZz4+OyAnU3BlbmNl ciBEYXdraW5zIGF0DQo+Pj4+PiAgICBJRVRGJyA8c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5j b20NCj4+Pj4+ICAgIDxtYWlsdG86c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20+Pg0KPj4+ Pj4gICAgKlN1YmplY3Q6KiBSZTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1k aXNjb3ZlcnkNCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIEhpIFRpcnUsDQo+Pj4+ PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBOb3cgSSBkb27igJl0IGtub3cgd2hlcmUgeW91 IGFyZSBhZ2Fpbi4NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIEFyZSB5b3UgZGlz Y3Vzc2luZyBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlIGxvY2FsIG9yIGFjY2Vzcw0KPj4+ Pj4gICAgbmV0d29yayAodGhlIHllbGxvdyBUVVJOIHNlcnZlcnMpLCB0aGF0IGFyZSByZWxlYXNl ZCBmcm9tDQo+Pj4+PiAgICBhdXRoZW50aWNhdGlvbiAobm8gZGlzcHV0ZSB0aGVyZSksIGJ1dCBm b3Igd2hpY2ggKEQpVExTIG1hbmRhdGUgd2FzDQo+Pj4+PiAgICB0aHJvd24gaW4tZHVyaW5nIHRo ZSBkaXNjdXNzIChtYWtpbmcgdGhlbSBncmF5KT8gVGhhdCBpcyB0aGUNCj4+Pj4+ICAgIHNob3dz dG9wcGVyIHRoYXQgbXVzdCBnbyBhd2F5Lg0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4g ICAgU29tZSBjb21tZW50cyBiZWxvdy4gSG9wZSB3ZSBhZ3JlZSAgdGhlIGJlbG93IGRvZXMgbm90 IHJlbGF0ZSB0bw0KPj4gdGhlDQo+Pj4+PiAgICB5ZWxsb3cgVFVSTiBzZXJ2ZXIuDQo+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICAvS2FybA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0K Pj4+Pj4gICAgKkZyw6VuOiogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSBbbWFpbHRvOnRp cmVkZHlAY2lzY28uY29tXQ0KPj4+Pj4gICAgKlNraWNrYXQ6KiBkZW4gMjggbm92ZW1iZXIgMjAx NiAwNDowMg0KPj4+Pj4gICAgKlRpbGw6KiBLYXJsIFN0YWhsOyAnQnJhbmRvbiBXaWxsaWFtcyc7 IFByYXNoYW50aCBQYXRpbA0KPj4+Pj4gICAgKHByYXNwYXRpKTsgdHJhbUBpZXRmLm9yZyA8bWFp bHRvOnRyYW1AaWV0Zi5vcmc+DQo+Pj4+PiAgICAqS29waWE6KiB0cmFtLWNoYWlyc0BpZXRmLm9y ZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0Rhbg0KPj4+Pj4gICAgV2luZyc7ICdT cGVuY2VyIERhd2tpbnMgYXQgSUVURicNCj4+Pj4+ICAgICrDhG1uZToqIFJFOiBbdHJhbV0gZHJh ZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ IA0KPj4+Pj4gICAgSGkgS2FybCwNCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIE5v LCBJIGRvbuKAmXQgYWdyZWUgdGhhdCAoRClUTFMgaXMgbm90IG1hbmRhdG9yeS4gT3Bwb3J0dW5p c3RpYw0KPj4+Pj4gICAgZW5jcnlwdGlvbiBpcyBub3QgbmV3LiBJdOKAmXMgZGlzY3Vzc2VkIGlu IFJGQzc0MzUsIGFuZCB1c2VkIGluIFRDUA0KPj4+Pj4gICAgaW5jcmVhc2VkIHNlY3VyaXR5IChU Q1BJTkMgV0cpIGFuZCBETlMgcHJpdmFjeSBleGNoYW5nZSAoRFBSSVZFDQo+PiBXRykuDQo+Pj4+ PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBIb3cgZG8geW91IHByb3Bvc2UgdG8gaGFuZGxl IHRoZSBmb2xsb3dpbmcgcGFzc2l2ZSBhdHRhY2tzIHdpdGhvdXQNCj4+Pj4+ICAgIChEKVRMUyBv ciBTVFVOIGF1dGhlbnRpY2F0aW9uID8NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAg IGEpIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM1NzY2I3NlY3Rpb24tMTcuMi4xDQo+ Pj4+PiAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBz LQ0KPj4+PiAzQV9fdG9vbHMuaWV0Zi5vcmdfaHRtbF9yZmM1NzY2LTIzc2VjdGlvbi0NCj4+Pj4g MkQxNy4yLjEmZD1EZ01GYVEmYz05NlpiWlpjYU1GNHcwRjRqcE42TFpnJnI9YndaLQ0KPj4+PiBu blJHV21jR0tSSXVhZHE2LU5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPj4+PiANCj4+ IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9eVRUWUtnb3IyX2FqSGU3 S1BfNEJ6bmwNCj4+Pj4gRzFFYW11SXlfSzdhazBVNDBSYk0mZT0+LA0KPj4+Pj4gICAgd2hlcmUg YXR0YWNrZXIgc2VuZHMgZmFrZWQgcGVybWlzc2lvbnMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGxh dW5jaA0KPj4+Pj4gICAgYXR0YWNrIChET1Mgb3IgRERPUykgb24gdGhlIHZpY3RpbSAoVFVSTiBj bGllbnQpLg0KPj4+Pj4gDQo+Pj4+Pj4gU2luY2UgdGhlIF9UVVJOIHNlcnZlciBzaXRzIG91dHNp ZGVfIHRoZSBmaXJld2FsbCwgYXQgYXR0YWNrZXIgb3V0c2lkZQ0KPj4gdGhlDQo+Pj4+PiAgICBm aXJld2FsbCBjYW4gbm93IHNlbmQgYQ0KPj4+Pj4gDQo+Pj4+PiAgICAtLS0gQSBUVVJOIHNlcnZl ciBwcm92aWRlZCBieSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yaywgc2hhbGwgb25seSBiZQ0KPj4+ Pj4gICAgYWNjZXNzaWJsZSBieSB1c2VycyBpbnNpZGUgdGhlIGZpcmV3YWxsLg0KPj4+Pj4gDQo+ Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgYikgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3Jm YzU3NjYjc2VjdGlvbi0xNy4zLjMNCj4+Pj4+ICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zw b2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+Pj4+IDNBX190b29scy5pZXRmLm9yZ19odG1sX3Jm YzU3NjYtMjNzZWN0aW9uLQ0KPj4+PiAyRDE3LjMuMyZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBG NGpwTjZMWmcmcj1id1otDQo+Pj4+IG5uUkdXbWNHS1JJdWFkcTYtTlNuc2d3YkJWVUphNG1aZm1F SUJYZyZtPUxYYUgtDQo+Pj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4 JnM9ZUgtDQo+Pj4+IHU1YTZ5cTBHeFRxSEZKTVRzc0NKZWZjWExyTUdMUWR6LTdNS19sN2MmZT0+ LA0KPj4+Pj4gICAgYXR0YWNrZXIgc2VuZHMgc3Bvb2ZlZCBUVVJOIHJlcXVlc3RzIHRvIHRoZSBU VVJOIHNlcnZlciB0byBjbG9zZQ0KPj4+Pj4gICAgYWxsb2NhdGlvbnMuDQo+Pj4+PiANCj4+Pj4+ ICAgIC0tLSBJIGRvbuKAmXQgdGhpbmsgKEQpVExTIGhlbHBzIGlmIHlvdSBjYW4gc3Bvb2YgYW5k IGhhdmUgc3VjaA0KPj4+Pj4gICAgYXR0YWNrZXJzIGluc2lkZSB5b3VyIG5ldHdvcmsuICh0aGF0 IHBhcmFncmFwaCBzYXlzOiAgVFVSTiBwcmV2ZW50cw0KPj4+Pj4gICAgdGhpcyBieSByZXF1aXJp bmcgdGhhdCB0aGUgY3JlZGVudGlhbHMgdXNlZOKAnSkgbWVhbmluZyBhdXRoZW50aWNhdGlvbg0K Pj4+Pj4gICAgKG5vdCBjZXJ0aWZpY2F0ZSBjaGVja2luZywgbm9yIGVuY3J5cHRpb24pLg0KPj4+ Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIC1UaXJ1DQo+Pj4+ PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICAqRnJvbToqIHRyYW0gW21haWx0bzp0cmFtLWJv dW5jZXNAaWV0Zi5vcmddICpPbiBCZWhhbGYgT2YgKkthcmwgU3RhaGwNCj4+Pj4+ICAgICpTZW50 OiogTW9uZGF5LCBOb3ZlbWJlciAyOCwgMjAxNiAxOjM5IEFNDQo+Pj4+PiAgICAqVG86KiBUaXJ1 bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIDx0aXJlZGR5QGNpc2NvLmNvbQ0KPj4+Pj4gICAgPG1h aWx0bzp0aXJlZGR5QGNpc2NvLmNvbT4+OyAnQnJhbmRvbiBXaWxsaWFtcycNCj4+Pj4+ICAgIDxi cmFuZG9uLndpbGxpYW1zQGFrYW1haS5jb20NCj4+Pj4gPG1haWx0bzpicmFuZG9uLndpbGxpYW1z QGFrYW1haS5jb20+PjsNCj4+Pj4+ICAgIFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkpIDxwcmFz cGF0aUBjaXNjby5jb20NCj4+Pj4+ICAgIDxtYWlsdG86cHJhc3BhdGlAY2lzY28uY29tPj47IHRy YW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPj4+Pj4gICAgKkNjOiogdHJhbS1j aGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4gV2luZycN Cj4+Pj4+ICAgIDxkYW5AZGFud2luZy5vcmcgPG1haWx0bzpkYW5AZGFud2luZy5vcmc+PjsgJ1Nw ZW5jZXIgRGF3a2lucyBhdA0KPj4+Pj4gICAgSUVURicgPHNwZW5jZXJkYXdraW5zLmlldGZAZ21h aWwuY29tDQo+Pj4+PiAgICA8bWFpbHRvOnNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPj4N Cj4+Pj4+ICAgICpTdWJqZWN0OiogUmU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2 ZXItZGlzY292ZXJ5DQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBIaSBUaXJ1LA0K Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgU28gd2UgYWdyZWUgdGhhdCB0aGUgKEQp VExTIG1hbmRhdGUgdGhyb3duLWluIGR1cmluZyB0aGUgZGlzY3Vzcw0KPj4+Pj4gICAgKG1ha2lu ZyB5ZWxsb3cgVFVSTiBzZXJ2ZXJzIGdyYXkpIHNoYWxsIGdvIGF3YXkgYW5kIHdlIGFyZSBiYWNr IHRvDQo+Pj4+PiAgICB3aGF0IHdhcyBjb25zZW5zdXMgc2luY2UgdmVyc2lvbiAtNyBvZiB0aGUg ZHJhZnQuIEkgdGhpbmsgdGhlDQo+Pj4+PiAgICBhdHRhY2tzIHlvdSBhcmUgZGlzY3Vzc2luZyBu b3cgaGF2ZSBiZWVuIGxpc3RlZCBhbHJlYWR5IGFuZCBmb3IgVFVSTg0KPj4+Pj4gICAgc2VydmVy cyBpbiBhIGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrIChubyBjaGFuZ2Ugc2luY2UgdmVyc2lvbiAt NyksDQo+Pj4+PiAgICB3ZSBzaG91bGQgbm90IGV4cGVjdCBhIGhpZ2hlciBzZWN1cml0eSBvciB0 cnVzdCBsZXZlbCB3aGVuIHNlbmRpbmcNCj4+Pj4+ICAgIG91ciByZWFsLXRpbWUgdHJhZmZpYyB0 aHJvdWdoIGFub3RoZXIgcGF0aCB0aGFuIHRoZSB0aHJvdWdoIGRlZmF1bHQNCj4+Pj4+ICAgIGdh dGV3YXksIGJvdGggcGF0aHMgYXJlIHByb3ZpZGVkIGJ5IHRoZSBzYW1lIG5ldHdvcmsgcHJvdmlk ZXIuDQo+Pj4+PiANCj4+Pj4+ICAgICogKg0KPj4+Pj4gDQo+Pj4+PiAgICBJZiDigJxwcm90ZWN0 cyB0aGUgY2xpZW50IGZyb20gdmFyaW91cyBhdHRhY2tzIGRpc2N1c3NlZCBpbiBwcmV2aW91cw0K Pj4+Pj4gICAgbWFpbHPigJ0gcmVsYXRlZCB0byBkaXNjb3Zlcnkgb2YgVFVSTiBzZXJ2ZXJzLCBy ZWFsbHkgaXMgcG9zc2libGUgYnkNCj4+Pj4+ICAgIGludHJvZHVjaW5nIHNvbWV0aGluZyAod2h5 IHJlb3BlbiB0aGF0IG5vdz8pLCB3ZSBoYXZlIHRvIGJlIGNhcmVmdWwNCj4+Pj4+ICAgIG5vdCB0 byBtYWtlIHllbGxvdyBUVVJOIHNlcnZlcnMgZ3JheWlzaCwgd2hpY2ggSSBhbSBhZnJhaWQgc2Vs Zg0KPj4+Pj4gICAgc2lnbmVkIGNlcnRpZmljYXRlcyBtaWdodCBkbywgYW5kIGZ1cnRoZXIsIGRv ZXMgdGhpcyBiZWxvbmcgaW4gYQ0KPj4+Pj4gICAgZGlzY292ZXJ5IGRyYWZ0LCByaXNraW5nIHRv IHBpY2sgYSBmaWdodCB3aXRoIHRoZSBXZWJSVEMgYnJvd3Nlcg0KPj4+Pj4gICAgbWFrZXJzIHN1 cHBvc2VkIHRvIHVzZSB0aGlzIHNwZWNpZmljYXRpb24uIFdlIGtub3cgdGhleSBkb27igJl0IGZh bmN5DQo+Pj4+PiAgICBzZWxmIHNpZ25lZCBjZXJ0aWZpY2F0ZXPigKYNCj4+Pj4+IA0KPj4+Pj4g ICAgPGltYWdlMDAyLmpwZz4NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIElzbuKA mXQgaXQgc3BlY2lmaWNhdGlvbnMgZm9yIHNvbWUgc3BlY2lmaWMgdXNhZ2UvYXBwbGljYXRpb24g KGxpa2UNCj4+Pj4+ICAgIHRoZSByZXR1cm4gZHJhZnQgZm9yIFdlYlJUQyBicm93c2VycykgdGhh dCBzaG91bGQgY29uc2lkZXIgc3VjaA0KPj4+Pj4gICAgdGhpbmdzIChub3QgdGhpcyBkcmFmdCks IHdpdGhvdXQgYW55IHJlY29tbWVuZGF0aW9uIGZyb20gdGhpcw0KPj4+Pj4gICAgc3BlY2lmaWNh dGlvbj8NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIC9LYXJsDQo+Pj4+PiANCj4+ Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICAqRnLDpW46KiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVk ZHkpIFttYWlsdG86dGlyZWRkeUBjaXNjby5jb21dDQo+Pj4+PiAgICAqU2tpY2thdDoqIGRlbiAy MyBub3ZlbWJlciAyMDE2IDA0OjE1DQo+Pj4+PiAgICAqVGlsbDoqIEthcmwgU3RhaGw7ICdCcmFu ZG9uIFdpbGxpYW1zJzsgUHJhc2hhbnRoIFBhdGlsDQo+Pj4+PiAgICAocHJhc3BhdGkpOyB0cmFt QGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4+Pj4+ICAgICpLb3BpYToqIHRyYW0t Y2hhaXJzQGlldGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+OyAnRGFuDQo+Pj4+ PiAgICBXaW5nJzsgJ1NwZW5jZXIgRGF3a2lucyBhdCBJRVRGJw0KPj4+Pj4gICAgKsOEbW5lOiog UkU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBJIGFtIG5vdCBzdWdnZXN0aW5nIHRoYXQgYXV0aGVu dGljYXRpb24gaXMgbWFuZGF0b3J5IGZvciBUVVJODQo+Pj4+PiAgICBzZXJ2ZXJzIHByb3ZpZGVk IGJ5IGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrcyB1c2luZyAoRClUTFMgYnV0IHVzZSBvZg0KPj4+ Pj4gICAgKEQpVExTIFtLYXJsOiDigJx0aGVzZSBiZWNvbWUgZ3JheSBub3QgeWVsbG934oCdIG9y IGFyZSB5b3Ugc3VnZ2VzdGluZw0KPj4+Pj4gICAgY2VydGlmaWNhdGVkIHNpZ25lZCBieSB0aGUg bmV0d29yayBwcm92aWRlcl0NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIFtUUl0g Tm8sIHRoZXkgYXJlIHllbGxvdyBhbmQgbm90IGdyZXk7IGNsaWVudHMgd2lsbCB1c2UgKEQpVExT IGJ1dA0KPj4+Pj4gICAgZG8gbm90IHZhbGlkYXRlIHRoZSBUVVJOIHNlcnZlciBjZXJ0aWZpY2F0 ZSAocmVmZXJyZWQgdG8gYXMNCj4+Pj4+ICAgIE9wcG9ydHVuaXN0aWMgc2VjdXJpdHkgaW4gdGhl IGRyYWZ0KS4NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIFtLYXJsOiBTZWVtcyBs aWtlIHlvdSBhcmUgc3VnZ2VzdGluZyBzZWxmIHNpZ25lZCBjZXJ0aWZpY2F0ZXMgdG8NCj4+Pj4+ ICAgIGp1c3QgZ2V0IHRoZSBlbmNyeXB0aW9uIChhZ2FpbiDigJMgYWxzbyBkaXNjdXNzZWQpXQ0K Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgW1RSXSBZZXMsIHRoYXTigJlzIG9uZSBw b3NzaWJsZSBvcHRpb24gdG8gbWFuZGF0ZSAoRClUTFMuIENsaWVudA0KPj4+Pj4gICAgY2Fubm90 IHZhbGlkYXRlIHRoZSBUVVJOIHNlcnZlciBjZXJ0aWZpY2F0ZSBidXQgdXNlIGVuY3J5cHRpb24t b25seQ0KPj4+Pj4gICAgKEQpVExTIGFuZCBwcm90ZWN0cyB0aGUgY2xpZW50IGZyb20gdmFyaW91 cyBhdHRhY2tzIGRpc2N1c3NlZCBpbg0KPj4+Pj4gICAgcHJldmlvdXMgbWFpbHMuDQo+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICAtVGlydQ0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0K Pj4+Pj4gICAgKkZyb206KiBLYXJsIFN0YWhsIFttYWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29t XQ0KPj4+Pj4gICAgKlNlbnQ6KiBUdWVzZGF5LCBOb3ZlbWJlciAyMiwgMjAxNiAxMToxMiBQTQ0K Pj4+Pj4gICAgKlRvOiogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSA8dGlyZWRkeUBjaXNj by5jb20NCj4+Pj4+ICAgIDxtYWlsdG86dGlyZWRkeUBjaXNjby5jb20+PjsgJ0JyYW5kb24gV2ls bGlhbXMnDQo+Pj4+PiAgICA8YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tDQo+Pj4+IDxtYWls dG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tPj47DQo+Pj4+PiAgICBQcmFzaGFudGggUGF0 aWwgKHByYXNwYXRpKSA8cHJhc3BhdGlAY2lzY28uY29tDQo+Pj4+PiAgICA8bWFpbHRvOnByYXNw YXRpQGNpc2NvLmNvbT4+OyB0cmFtQGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4+ Pj4+ICAgICpDYzoqIHRyYW0tY2hhaXJzQGlldGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0 Zi5vcmc+OyAnRGFuIFdpbmcnDQo+Pj4+PiAgICA8ZGFuQGRhbndpbmcub3JnIDxtYWlsdG86ZGFu QGRhbndpbmcub3JnPj47ICdTcGVuY2VyIERhd2tpbnMgYXQNCj4+Pj4+ICAgIElFVEYnIDxzcGVu Y2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbQ0KPj4+Pj4gICAgPG1haWx0bzpzcGVuY2VyZGF3a2lu cy5pZXRmQGdtYWlsLmNvbT4+DQo+Pj4+PiAgICAqU3ViamVjdDoqIFNWOiBbdHJhbV0gZHJhZnQt aWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0K Pj4+Pj4gICAgSGkgVGlydSwNCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIFBsZWFz ZSB1bmRlcnN0YW5kIHRoYXQgaW4gdGhpcyBjb250ZXh0Og0KPj4+Pj4gDQo+Pj4+PiAgICAtIEF1 dGhlbnRpY2F0aW9uIGlzIHRvIG9ubHkgYWxsb3cgY2VydGFpbiB1c2VycyB0byB1c2UgdGhlIFRV Uk4NCj4+Pj4+ICAgIHNlcnZlciByZXNvdXJjZQ0KPj4+Pj4gDQo+Pj4+PiAgICAtIENlcnRpZmlj YXRlIGNoZWNraW5nIGFzIHdoZW4gdXNpbmcgKEQpVExTIGlzIHRvIGFzc3VyZSB0aGUgdXNlciBp cw0KPj4+Pj4gICAgdXNpbmcgYSB0cnVzdGVkIFRVUk4gc2VydmVyIChhbmQgZnVydGhlciBpcyBz ZXRzIHVwIGFuIGVuY3J5cHRlZA0KPj4+Pj4gICAgY2hhbm5lbCkuDQo+Pj4+PiANCj4+Pj4+IA0K Pj4+Pj4gDQo+Pj4+PiAgICBUaGVzZSB0aGluZ3MgYXJlIG5vdCBpbnRlcmNoYW5nZWFibGUgb3Ig ZG8gdGhlIHNhbWUgdGhpbmdzIG9yDQo+Pj4+PiAgICBhY2hpZXZlcyB0aGUgc2FtZSwgd2hpY2gg aGFzIGJlZW4gZGlzY3Vzc2VkIG92ZXIgYW5kIG92ZXIgYWdhaW4gaW4NCj4+Pj4+ICAgIHRoaXMg ZHJhZnQgYWxyZWFkeS4NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIExldCBpdCBy ZXN0IHdpdGggdGhhdCB3ZSBjYW5ub3Qvc2hvdWxkIG5vdCBleHBlY3QgYSBoaWdoZXIgdHJ1c3Qg b3INCj4+Pj4+ICAgIHNlY3VyaXR5IGxldmVsIHdoZW4gc2VuZGluZyBvdXIgcmVhbC10aW1lIHRy YWZmaWMgdGhyb3VnaCB0aGUgVFVSTg0KPj4+Pj4gICAgc2VydmVyIHBhdGgsIHRoYW4gdHJvdWdo IHRoZSBkZWZhdWx0IGdhdGV3YXkgcGF0aC4gWW91IHNpbXBseSBoYXZlDQo+Pj4+PiAgICB0byB0 cnVzdCB0aGUgYWNjZXNzIGZyb20gdGhlIG5ldHdvcmsgcHJvdmlkZXIgeW91IHNlbGVjdCB0byBj b25uZWN0DQo+Pj4+PiAgICB0bywgb3IgcmVmcmFpbiBmcm9tIHVzaW5nIGl0Lg0KPj4+Pj4gDQo+ Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgUGxlYXNlIGFsc28gdW5kZXJzdGFuZCB0aGF0IOKAnHRo ZSBncmF5IFRVUk4gc2VydmVyc+KAnSBhcmUgcHJvdmlkZWQgYnkNCj4+Pj4+ICAgIG90aGVycyB0 aGFuIHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yaywgYW5kIHlvdSBjaG9zZSB0byB0cnVzdCB0 aGVtDQo+Pj4+PiAgICB3aXRoIHlvdXIgcmVhbC10aW1lIHRyYWZmaWMgYmFzZWQgb24gY2hlY2tp bmcgdGhlaXIgY2VydGlmaWNhdGUgKFdobw0KPj4+Pj4gICAgY29uZmlndXJlcyB3aGljaCB0byBh bGxvdyBpbnRvIHRoZSBXZWJSVEMgYnJvd3Nlcj8pLg0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0K Pj4+Pj4gICAgSW4gYSBzcGVjaWZpY2F0aW9uIHdoaWNoIG1haW4gcHVycG9zZSBpcyB0byBhdXRv IGRpc2NvdmVyIFRVUk4NCj4+Pj4+ICAgIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlIGxvY2FsIG9y IGFjY2VzcyBuZXR3b3JrICjigJx0aGUgeWVsbG93IG9uZXPigJ0pLA0KPj4+Pj4gICAgeW91IENB Tk5PVCBMT0dJQ0FMTFkgZW5kIHVwIHdpdGggc2F5aW5nIHlvdSBNVVNUL1NIT1VMRCBvciBhcmUN Cj4+Pj4+ICAgIFJFQ09NTUVOREVEIHRvIHVzZSDigJx0aGUgZ3JheSBvbmVz4oCdIGluc3RlYWQs IHByb3ZpZGVkIGJ5IHNvbWUNCj4+Pj4+ICAgIGF1dGhvcml0eSBvciBCcmFuZG9uIG1heWJlICh3 aGljaCBhcmUgbWVhbnQgZm9yIG90aGVyIHB1cnBvc2VzKS4NCj4+Pj4+ICAgIFRoZW4geW91IGhh dmUgbm90IGRlbGl2ZXJlZCB0aGUgc3BlY2lmaWNhdGlvbiB3ZSBuZWVkID0gVGhlDQo+PiBzaG93 c3RvcHBlci4NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIC9LYXJsDQo+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBQUzogU29tZSBjb21tZW50cyBiZWxvdy4NCj4+Pj4+ IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgICpGcsOlbjoqIFRpcnVtYWxlc3dhciBSZWRkeSAo dGlyZWRkeSkgW21haWx0bzp0aXJlZGR5QGNpc2NvLmNvbV0NCj4+Pj4+ICAgICpTa2lja2F0Oiog ZGVuIDIyIG5vdmVtYmVyIDIwMTYgMDQ6MzENCj4+Pj4+ICAgICpUaWxsOiogS2FybCBTdGFobDsg J0JyYW5kb24gV2lsbGlhbXMnOyBQcmFzaGFudGggUGF0aWwNCj4+Pj4+ICAgIChwcmFzcGF0aSk7 IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPj4+Pj4gICAgKktvcGlhOiog dHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4N Cj4+Pj4+ICAgIFdpbmcnOyAnU3BlbmNlciBEYXdraW5zIGF0IElFVEYnDQo+Pj4+PiAgICAqw4Rt bmU6KiBSRTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4+ Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIEhpIEthcmwsDQo+Pj4+PiANCj4+Pj4+IA0K Pj4+Pj4gDQo+Pj4+PiAgICBJIGFtIG5vdCBzdWdnZXN0aW5nIHRoYXQgYXV0aGVudGljYXRpb24g aXMgbWFuZGF0b3J5IGZvciBUVVJODQo+Pj4+PiAgICBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IGxvY2Fs IG9yIGFjY2VzcyBuZXR3b3JrcyB1c2luZyAoRClUTFMgYnV0IHVzZSBvZg0KPj4+Pj4gICAgKEQp VExTIFtLYXJsOiDigJx0aGVzZSBiZWNvbWUgZ3JheSBub3QgeWVsbG934oCdIG9yIGFyZSB5b3Ug c3VnZ2VzdGluZw0KPj4+Pj4gICAgY2VydGlmaWNhdGVkIHNpZ25lZCBieSB0aGUgbmV0d29yayBw cm92aWRlcl0gd2l0aG91dCBhdXRoZW50aWNhdGluZw0KPj4+Pj4gICAgdGhlIFRVUk4gc2VydmVy IGlzIG1hbmRhdG9yeSB0byBhdm9pZCB2YXJpb3VzIGF0dGFja3MgbGlzdGVkIGluDQo+Pj4+PiAg ICBwcmV2aW91cyBtYWlscy4NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgIEluIHNo b3J0LCB0aGUgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IGxvY2FsIG9yIGFjY2VzcyBuZXR3b3Jr cyBtdXN0DQo+Pj4+PiAgICB1c2UgKEQpVExTIGJ1dCBpdOKAmXMgbm90IG1hbmRhdG9yeSBmb3Ig dGhlc2UgVFVSTiBzZXJ2ZXJzIHRvIGdldA0KPj4+Pj4gICAgY2VydGlmaWNhdGVzIGZyb20gQ0Eg b3IgYW55IGV4cGxpY2l0IGNvbmZpZ3VyYXRpb24gaXMgcmVxdWlyZWQgb24NCj4+Pj4+ICAgIHRo ZSBjbGllbnQgdG8gdHJ1c3QgdGhlIFRVUk4gc2VydmVyLiBbS2FybDogU2VlbXMgbGlrZSB5b3Ug YXJlDQo+Pj4+PiAgICBzdWdnZXN0aW5nIHNlbGYgc2lnbmVkIGNlcnRpZmljYXRlcyB0byBqdXN0 IGdldCB0aGUgZW5jcnlwdGlvbg0KPj4+Pj4gICAgKGFnYWluIOKAkyBhbHNvIGRpc2N1c3NlZCld DQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICAtVGlydQ0KPj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4gICAgKkZyb206KiBLYXJsIFN0YWhsIFttYWlsdG86a2FybC5zdGFobEBp bmdhdGUuY29tXQ0KPj4+Pj4gICAgKlNlbnQ6KiBNb25kYXksIE5vdmVtYmVyIDIxLCAyMDE2IDI6 MTAgQU0NCj4+Pj4+ICAgICpUbzoqIFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVk ZHlAY2lzY28uY29tDQo+Pj4+PiAgICA8bWFpbHRvOnRpcmVkZHlAY2lzY28uY29tPj47ICdCcmFu ZG9uIFdpbGxpYW1zJw0KPj4+Pj4gICAgPGJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbQ0KPj4+ PiA8bWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbT4+Ow0KPj4+Pj4gICAgUHJhc2hh bnRoIFBhdGlsIChwcmFzcGF0aSkgPHByYXNwYXRpQGNpc2NvLmNvbQ0KPj4+Pj4gICAgPG1haWx0 bzpwcmFzcGF0aUBjaXNjby5jb20+PjsgdHJhbUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5v cmc+DQo+Pj4+PiAgICAqQ2M6KiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hh aXJzQGlldGYub3JnPjsgJ0RhbiBXaW5nJw0KPj4+Pj4gICAgPGRhbkBkYW53aW5nLm9yZyA8bWFp bHRvOmRhbkBkYW53aW5nLm9yZz4+OyAnU3BlbmNlciBEYXdraW5zIGF0DQo+Pj4+PiAgICBJRVRG JyA8c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20NCj4+Pj4+ICAgIDxtYWlsdG86c3BlbmNl cmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20+Pg0KPj4+Pj4gICAgKlN1YmplY3Q6KiBTVjogW3RyYW1d IGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4+Pj4+IA0KPj4+Pj4gDQo+ Pj4+PiANCj4+Pj4+ICAgIEhpIFRpcnUsDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAg ICBUcnlpbmcgdG8gY2xhcmlmeSBhcyB5b3UgcmVxdWVzdDogSSBoYXZlIGxvc3QgdHJhY2sgb2Yg aW4gd2hpY2gNCj4+Pj4+ICAgIGNvbnRleHQgeW91IGFyZSB3aGVuIHlvdSBhcmUgImRpc2N1c3Np bmcgdmFyaW91cyBhdHRhY2tzIiBhbmQgd2hhdA0KPj4+Pj4gICAgeW91IG1lYW4gd2l0aCB0aGUg Pz8gSSBtYXJrZWQgYmVsb3cuDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBNeSBj b25jZXJuIHdhcyB3aGV0aGVyIHRoaXMgbWF5IGFnYWluIGxlYWQgdG8gdGhhdCBXRQ0KPj4+Pj4g ICAgSEFWRSAqX05PXyogVFVSTiBTRVJWRVJTIGluIHRoZSB5ZWxsb3cgYXJlYSBiZWxvdyByZXN1 bHRpbmcgZnJvbQ0KPj4gdGhlDQo+Pj4+PiAgICAoRClUTFMgbWFuZGF0aW5nIHRoYXQgd2FzIHRo cm93bi1pbiBpbnRvIHZlcnNpb24gLTEwIGR1cmluZyB0aGUNCj4+Pj4+ICAgIGRpc2N1c3MgKD10 aGUgc2hvd3N0b3BwaW5nKSwgc2luY2UgVFVSTiBzZXJ2ZXJzIHdpdGgNCj4+Pj4+ICAgIGNlcnRp ZmljYXRlcyBhcmUgTk9UIHByb3ZpZGVkIGJ5IHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yayAo dGhvc2UNCj4+Pj4+ICAgIGFyZSBwcm92aWRlZCBieSBzb21lICJ0cnVzdCBhbmNob3Igc3RvcmUg W1JGQzYwMjRdIGFsbG93cyBhIFRVUk4NCj4+Pj4+ICAgIGNsaWVudCAuLi4iIG9yIGJ5ICJDZXJ0 aWZpY2F0aW9uIGF1dGhvcml0aWVzIHRoYXQgaXNzdWUgVFVSTiBzZXJ2ZXINCj4+Pj4+ICAgIGNl cnRpZmljYXRlcyIgZXRjLi4pDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICA8aW1h Z2UwMDQucG5nPg0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgU28sIGp1c3QgbGV0 IG1lIHJlc3Qgd2l0aCB0aGF0IHlvdXIgZGlzY3Vzc2lvbiBkb2VzIG5vdCB0YWtlIGF3YXkNCj4+ Pj4+ICAgIHRoZSBhbGxvd2FuY2UgdG8gdXNlIFRVUk4gc2VydmVycyBwcm92aWRlZCBieSB0aGUg bG9jYWwgb3IgYWNjZXNzDQo+Pj4+PiAgICBuZXR3b3JrIHdpdGhvdXQgYXV0aGVudGljYXRpb24g dGhhdCB3YXMgcmUtaW50cm9kdWNlZCBpbiB2ZXJzaW9uIC03DQo+Pj4+PiAgICBvZiB0aGUgZHJh ZnQgKGFmdGVyIGxvbmcgZGlzY3Vzc2lvbnMsIGluY2x1ZGluZyB3aXRoIHlvdSBUaXJ1KS4NCj4+ Pj4+ICAgIFJlbWVtYmVyLCBfdGhvc2UgeWVsbG93IFRVUk4gc2VydmVycyB3ZXJlIHRoZSByZXF1 aXJlbWVudCBvZiB0aGlzDQo+Pj4+PiAgICBkcmFmdCB0byBhdXRvIGRpc2NvdmVyXyBzbyB0aGV5 IGNhbiBiZSB1c2VkIGJ5IHRoZSBXZWJSVEMgYnJvd3NlcnMg4oCTDQo+Pj4+PiAgICBVc2FnZSBj YW5ub3QgYmUgZm9yYmlkZGVuIChvciB1bi1yZWNvbW1lbmRlZCBhcyBCcmFuZG9uIHN1Z2dlc3Rz LA0KPj4+Pj4gICAgYWx0aG91Z2ggQnJhbmRvbiBpcyBhZ3JlZWluZyB0byB0aGF0IHRoZSAoRClU TFMgbWFuZGF0ZSBtdXN0IHZhbmlzaA0KPj4+Pj4gICAgZm9yIHRoZSB5ZWxsb3cgVFVSTiBzZXJ2 ZXJzKS4NCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBG VVJUSEVSIEpVU1QgVE8gUkVNSU5EIEFVVEhPUlMgb2Ygd2hhdCBpcyBuZWVkZWQgdG8gYmUgYWRk cmVzc2VzDQo+PiBpbg0KPj4+Pj4gICAgdGhpcyBkcmFmdDsgaXQgaXMgZm91bmQgaW4NCj4+Pj4+ IA0KPj4+Pj4gICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi90cmFtL2N1 cnJlbnQvbXNnMDIyMTYuaHRtbA0KPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBv aW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPj4+ PiANCj4+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAyMjE2Lmh0bWwmZD1EZ01GYVEm Yz05NlpiWlpjYU1GNA0KPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0K Pj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4+Pj4gTVZRaTJsVmJFX3M0dWx4 NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1OdFJad3JtbjJLLQ0KPj4+PiBXVUlfUU41a195SGxB Ti11emhvUVU4YnMyeUFfUkJQOCZlPT4NCj4+Pj4+IA0KPj4+Pj4gICAgYW5kIHRoZSBjb250cmFk aWN0aW9uIGluIHNlY3Rpb24gNy4yIGFzIHNhaWQgaW4NCj4+Pj4+IA0KPj4+Pj4gICAgaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDIyMjYuaHRt bA0KPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1o dHRwcy0NCj4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPj4+PiANCj4+IDJEYXJjaGl2ZV93 ZWJfdHJhbV9jdXJyZW50X21zZzAyMjI2Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPj4+ PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPj4+PiBOU25zZ3diQlZVSmE0 bVpmbUVJQlhnJm09TFhhSC0NCj4+Pj4gDQo+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4 UUVpa3pBdXBSOCZzPUV0aXVpVnQ1TW5qYnc5V3NEdG1qaXUybA0KPj4+PiAtZHYxUm9IVnBkQWxU WHRnWklRJmU9Pg0KPj4+Pj4gDQo+Pj4+PiAgICB3aGlsZSB0aGlzIGRpc2N1c3Npb24gd2l0aCBB dXRob3IgVGlydSBhbmQgPuKAnEkgZG9uJ3QgcnVuIGEgbG9jYWwNCj4+Pj4+ICAgIG5ldHdvcmsg b3IgYW4gYWNjZXNzIG5ldHdvcmsgYW5kIHdvdWxkIG5vdCBleHBlY3QgdG8gZGVwbG95IHJlbGF5 cw0KPj4+Pj4gICAgbWVhbnQgdG8gZnVuY3Rpb24gaW4gdGhhdCBtb2Rl4oCcIEJyYW5kb24qLCBo YXMgYmVlbiBvbiBtb3JlIG9yIGxlc3MNCj4+Pj4+ICAgIGRldmlhdGVkIHN1YmplY3RzLCBvciBy ZXBlYXRpbmcgd2hhdCB3ZSBhbHJlYWR5IGhhdmUgYmVlbiB0aHJvdWdoDQo+Pj4+PiAgICBlYXJs aWVyIChQUzogTm90aWNlIHRoYXQgQXV0aG9yIFByYXNoYW50aCBhbHJlYWR5IGxpc3RlZC9kaXNj dXNzZWQNCj4+Pj4+ICAgIHRoZSBhdHRhY2sgc3R1ZmYgZHVyaW5nIHRoZSBkaXNjdXNzLiBJIGZl YXJlZCB5b3Ugd2VyZSByZWRvaW5nIHRoYXQuKQ0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+ Pj4gICAgL0thcmwNCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAgICogaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDIyMTcuaHRtbA0K Pj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRw cy0NCj4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPj4+PiANCj4+IDJEYXJjaGl2ZV93ZWJf dHJhbV9jdXJyZW50X21zZzAyMjE3Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPj4+PiB3 MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPj4+PiBOU25zZ3diQlZVSmE0bVpm bUVJQlhnJm09TFhhSC0NCj4+Pj4gDQo+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVp a3pBdXBSOCZzPWdseFAzb3ZZWDdDZDRmMTJ6SUlMSmhiVGMNCj4+Pj4gRUowVmlxVmdKUXlTUWtK SFlRJmU9Pg0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiANCj4+Pj4+ICAg IC0tLS0tVXJzcHJ1bmdsaWd0IG1lZGRlbGFuZGUtLS0tLQ0KPj4+Pj4gICAgRnLDpW46IFRpcnVt YWxlc3dhciBSZWRkeSAodGlyZWRkeSkgW21haWx0bzp0aXJlZGR5QGNpc2NvLmNvbV0NCj4+Pj4+ ICAgIFNraWNrYXQ6IGRlbiAxOCBub3ZlbWJlciAyMDE2IDA0OjAwDQo+Pj4+PiAgICBUaWxsOiBL YXJsIFN0YWhsOyAnQnJhbmRvbiBXaWxsaWFtcyc7IFByYXNoYW50aCBQYXRpbA0KPj4+Pj4gICAg KHByYXNwYXRpKTsgdHJhbUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+Pj4+PiAg ICBLb3BpYTogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9y Zz47ICdEYW4NCj4+Pj4+ICAgIFdpbmcnOyAnU3BlbmNlciBEYXdraW5zIGF0IElFVEYnDQo+Pj4+ PiAgICDDhG1uZTogUkU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292 ZXJ5DQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAgICBIaSBLYXJsLA0KPj4+Pj4gDQo+ Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgSSBkb24ndCB1bmRlcnN0YW5kIHlvdXIgY29uY2VybnMs IHBsZWFzZSBjbGFyaWZ5LiBUaGUgZHJhZnQgbWFuZGF0ZXMNCj4+Pj4+ICAgIChEKVRMUyBidXQg ZG9lcyBub3QgbWFuZGF0ZSBUVVJOIHNlcnZlciB2YWxpZGF0aW9uLg0KPj4+Pj4gDQo+Pj4+PiAg ICBXZSBhcmUgZGlzY3Vzc2luZyB2YXJpb3VzIGF0dGFja3MgcG9zc2JpbGUgZm9yIHRoZSBXRyB0 byBkZWNpZGUgaWYNCj4+Pj4+ICAgIChEKVRMUyBpcyBhIE1VU1Qgb3IgU0hPVUxELg0KPj4+Pj4g DQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4gICAgLVRpcnUNCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4+Pj4+ IA0KPj4+Pj4+IEZyb206IEthcmwgU3RhaGwgW21haWx0bzprYXJsLnN0YWhsQGluZ2F0ZS5jb21d DQo+Pj4+PiANCj4+Pj4+PiBTZW50OiBGcmlkYXksIE5vdmVtYmVyIDE4LCAyMDE2IDI6MTEgQU0N Cj4+Pj4+IA0KPj4+Pj4+IFRvOiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIDx0aXJlZGR5 QGNpc2NvLmNvbQ0KPj4+PiA8bWFpbHRvOnRpcmVkZHlAY2lzY28uY29tPj47ICdCcmFuZG9uIFdp bGxpYW1zJw0KPj4+Pj4gDQo+Pj4+Pj4gPGJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbQ0KPj4+ PiA8bWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbT4+Ow0KPj4+Pj4gICAgUHJhc2hh bnRoIFBhdGlsIChwcmFzcGF0aSkNCj4+Pj4+IA0KPj4+Pj4+IDxwcmFzcGF0aUBjaXNjby5jb20g PG1haWx0bzpwcmFzcGF0aUBjaXNjby5jb20+PjsgdHJhbUBpZXRmLm9yZw0KPj4+Pj4gICAgPG1h aWx0bzp0cmFtQGlldGYub3JnPg0KPj4+Pj4gDQo+Pj4+Pj4gQ2M6IHRyYW0tY2hhaXJzQGlldGYu b3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+OyAnRGFuIFdpbmcnDQo+Pj4+PiAgICA8 ZGFuQGRhbndpbmcub3JnIDxtYWlsdG86ZGFuQGRhbndpbmcub3JnPj47ICdTcGVuY2VyIERhd2tp bnMNCj4+Pj4+IA0KPj4+Pj4+IGF0IElFVEYnIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNv bQ0KPj4+PiA8bWFpbHRvOnNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPj4NCj4+Pj4+IA0K Pj4+Pj4+IFN1YmplY3Q6IFNWOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRp c2NvdmVyeQ0KPj4+Pj4gDQo+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+PiBDb250aW51aW5nIHRoZSB0 aHJlYWQgb2YgdGhpcyBzdWJqZWN0IHdpdGggdGhlIHZpZXcgdGhhdCBpdCBzaG91bGQgYmUNCj4+ Pj4gYWJvdXQgdGhlDQo+Pj4+PiANCj4+Pj4+PiBNVVNUL1NIT1VMRC9SRUNPTU1FTkQgZGlzY3Vz c2lvbiByZWdhcmRpbmcgRChUTFMpIGZvciB0aGUNCj4+IFVTQUdFDQo+Pj4+IG9mDQo+Pj4+PiAN Cj4+Pj4+PiBhbiBhbHJlYWR5IGRpc2NvdmVyZWQgVFVSTiBzZXJ2ZXIsIHdoaWNoIG11c3QgYmUg dG90YWxseQ0KPj4gaW5kZXBlbmRlbnQNCj4+Pj4gb2YgdGhlDQo+Pj4+PiANCj4+Pj4+PiBtZXRo b2QgdXNlZCBmb3IgZGlzY292ZXJ5Lg0KPj4+Pj4gDQo+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+PiBJ IGNhbid0IHNheSBJIHVuZGVyc3RhbmQgd2hlcmUgQnJhbmRvbidzL1RpcnUncyBkaXNjdXNzaW9u IGZpdHMgaW4gYW5kDQo+Pj4+IHdoZXRoZXINCj4+Pj4+IA0KPj4+Pj4+IGFyZSByaWdodCB0aGlu Z3MgYXJlIHNhaWQgYW5kIGFyZSBpbiB0aGUgcmlnaHQgY29udGV4dDoNCj4+Pj4+IA0KPj4+Pj4+ IA0KPj4+Pj4gDQo+Pj4+Pj4gPz8gPiA+IFRoZSBkcmFmdCBtYW5kYXRlcyAoRClUTFMgYnV0IGRv ZXMgbm90IG1hbmRhdGUgVFVSTiBzZXJ2ZXINCj4+Pj4+IA0KPj4+Pj4+IHZhbGlkYXRpb24uDQo+ Pj4+PiANCj4+Pj4+PiA/PyAoRClUTFMgaGVscHMgYXZvaWQgdmFyaW91cyBhdHRhY2tzLCBsaWtl IGF0dGFja2VyIHNlbmRpbmcgc3Bvb2ZlZA0KPj4+PiBUVVJODQo+Pj4+PiANCj4+Pj4+PiBtZXNz YWdlcyA/PyAgV2Ugc2hvdWxkIGRpc2N1c3MgYWxsIHN1Y2ggcG9zc2libGUgYXR0YWNrcywgYmVm b3JlIHdlDQo+Pj4+IGRlY2lkZSB0bw0KPj4+Pj4gDQo+Pj4+Pj4gZ28gd2l0aCBNVVNUIG9yIFNI T1VMRC4NCj4+Pj4+IA0KPj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4gV2hlcmUgYXJlIHdlIGtub3c/ DQo+Pj4+PiANCj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+IFBsZWFzZSwganVzdCBrZWVwIHRoZSBj bGVhcmFuY2UgZnJvbSBhdXRoZW50aWNhdGlvbiBhcyBpdCB3YXMgZnJvbQ0KPj4+PiB2ZXJzaW9u DQo+Pj4+PiANCj4+Pj4+PiAtMDcgb2YgdGhlIGRyYWZ0IGFscmVhZHksIHVudGlsIHRoZSBEKFRM UykgbWFuZGF0ZSB3YXMgdGhyb3duIGluDQo+PiBkdXJpbmcNCj4+Pj4gdGhlDQo+Pj4+PiANCj4+ Pj4+PiBESVNDVVNTLg0KPj4+Pj4gDQo+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+PiBTaW1wbHksIGxv Z2ljYWxseToNCj4+Pj4+IA0KPj4+Pj4+Pj4+IFRVUk4gc2VydmVycyAqcHJvdmlkZWQgYnkqIChh bmQgbWFpbnRhaW5lZCBieT8pIHNvbWUgInRydXN0DQo+Pj4+IGFuY2hvcg0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4gc3RvcmUgW1JGQzYwMjRdIGFsbG93cyBhIFRVUk4gY2xpZW50IC4uLiIgb3IgYnkgIkNl cnRpZmljYXRpb24NCj4+Pj4+IA0KPj4+Pj4+Pj4+IGF1dGhvcml0aWVzIHRoYXQgaXNzdWUgVFVS TiBzZXJ2ZXIgY2VydGlmaWNhdGVzIg0KPj4+Pj4gDQo+Pj4+Pj4gYXJlIE5PVCB1bmRlciB0aGUg Y2xlYXJhbmNlIGRpc2N1c3NlZCwgd2hpY2ggaXMgZm9yICJUVVJOIHNlcnZlcnMNCj4+Pj4gKnBy b3ZpZGVkDQo+Pj4+PiANCj4+Pj4+PiBieSogdGhlIGxvY2FsIG5ldHdvcmsgb3IgYnkgdGhlIGFj Y2VzcyBuZXR3b3JrIi4NCj4+Pj4+IA0KPj4+Pj4+IHNvIGEgU0hPVUxEIG9yIFJFQ09NTUVOREVE IG9mIEQoVExTKSBkb2VzIG5vdCBldmVuIGJlbG9uZw0KPj4gdW5kZXINCj4+Pj4gdGhlDQo+Pj4+ PiANCj4+Pj4+PiBjbGVhcmFuY2UgZGlzY3Vzc2VkLg0KPj4+Pj4gDQo+Pj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+IEZVUlRIRVIsIFdoZW4gSSByZWFkOg0KPj4+Pj4gDQo+ Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+PiA3LjIuICBSZWN1cnNpdmVseSBFbmNhcHN1bGF0ZWQgVFVS Tg0KPj4+Pj4gDQo+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+PiAgIFdlYlJUQyBlbmRwb2ludHMgU0hP VUxEIHRyZWF0IGFueSBUVVJOIHNlcnZlciBkaXNjb3ZlcmVkDQo+PiB0aHJvdWdoDQo+Pj4+IHRo ZQ0KPj4+Pj4gDQo+Pj4+Pj4gICBtZWNoYW5pc21zIGRlc2NyaWJlZCBpbiB0aGlzIHNwZWNpZmlj YXRpb24gYXMgYW4gZW50ZXJwcmlzZS9nYXRld2F5DQo+Pj4+PiANCj4+Pj4+PiAgIG9yIGFjY2Vz cyBuZXR3b3JrIHNlcnZlciwgaW4gYWNjb3JkYW5jZSB3aXRoIFJlY3Vyc2l2ZWx5DQo+PiBFbmNh cHN1bGF0ZWQNCj4+Pj4+IA0KPj4+Pj4+ICAgVFVSTiBbSS1ELmlldGYtcnRjd2ViLXJldHVybl0u DQo+Pj4+PiANCj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+IElzbid0IHRoYXQgImFueSIgaW4gdG90 YWwgY29udHJhZGljdGlvbiB0byB0aGUgY2xlYXJhbmNlIGJlaW5nIGRpc2N1c3NlZD8NCj4+Pj4+ IA0KPj4+Pj4+IEkgdGhvdWdodDogImVudGVycHJpc2UvZ2F0ZXdheSBvciBhY2Nlc3MgbmV0d29y ayIgd2FzIHRoZSBzYW1lIGFzDQo+PiB5b3VyDQo+Pj4+PiANCj4+Pj4+PiAibG9jYWwgb3IgYWNj ZXNzIG5ldHdvcmsiIGFuZCB0aGF0IGZvciBPVEhFUiBkaXNjb3ZlcmVkIFRVUk4gc2VydmVycw0K Pj4+Pj4gDQo+Pj4+Pj4gKG91dHNpZGUgdGhlIGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrKSwgaXQg bXVzdCBiZSB0aGUgYXBwbGljYXRpb24gdGhhdA0KPj4+PiBpbnN0cnVjdHMNCj4+Pj4+IA0KPj4+ Pj4+IHRoZSBUVVJOIGNsaWVudCBob3cgdG8gdXNlLg0KPj4+Pj4gDQo+Pj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+PiBJIHN1Z2dlc3QgdGhlIDcuMiBzZWN0aW9uIGlzIHJlcGxhY2VkIHdpdGggbXk6DQo+ Pj4+PiANCj4+Pj4+Pj4+Pj4gKDQpICJEZXBsb3ltZW50IENvbnNpZGVyYXRpb25zIGZvciBUVVJO IFNlcnZlcnMgUHJvdmlkZWQgYnkNCj4+IHRoZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IExvY2FsIG9y DQo+Pj4+PiANCj4+Pj4+Pj4+PiBBY2Nlc3MgTmV0d29yayINCj4+Pj4+IA0KPj4+Pj4+IA0KPj4+ Pj4gDQo+Pj4+Pj4gd2hpY2ggbWVudGlvbnMgUmVjdXJzaXZlbHkgRW5jYXBzdWxhdGVkIFRVUk4g W0ktRC5pZXRmLXJ0Y3dlYi0NCj4+IHJldHVybl0uDQo+Pj4+PiANCj4+Pj4+PiAoeW91IGNhbiBz cGVsbCBpdCBvdXQgbGlrZSB0aGF0KQ0KPj4+Pj4gDQo+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+PiAv S2FybA0KPj4+Pj4gDQo+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+PiAtLS0tLVVyc3BydW5nbGlndCBt ZWRkZWxhbmRlLS0tLS0NCj4+Pj4+IA0KPj4+Pj4+IEZyw6VuOiBUaXJ1bWFsZXN3YXIgUmVkZHkg KHRpcmVkZHkpIFttYWlsdG86dGlyZWRkeUBjaXNjby5jb21dDQo+Pj4+PiANCj4+Pj4+PiBTa2lj a2F0OiBkZW4gMTUgbm92ZW1iZXIgMjAxNiAwNTowMQ0KPj4+Pj4gDQo+Pj4+Pj4gVGlsbDogQnJh bmRvbiBXaWxsaWFtczsgS2FybCBTdGFobDsgUHJhc2hhbnRoIFBhdGlsIChwcmFzcGF0aSk7DQo+ Pj4+IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPj4+Pj4gDQo+Pj4+Pj4g S29waWE6IHRyYW0tY2hhaXJzQGlldGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+ OyAnRGFuDQo+PiBXaW5nJzsNCj4+Pj4+ICAgICdTcGVuY2VyIERhd2tpbnMgYXQgSUVURicNCj4+ Pj4+IA0KPj4+Pj4+IMOEbW5lOiBSRTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZl ci1kaXNjb3ZlcnkNCj4+Pj4+IA0KPj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4gSGkgQnJhbmRvbiwN Cj4+Pj4+IA0KPj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4gSSBqdXN0IGxpc3RlZCBvbmUgcG9zc2li bGUgYXR0YWNrLCB0aGVyZSBjb3VsZCBiZSB2YXJpb3VzIG90aGVyIGF0dGFja3MNCj4+IGxpa2UN Cj4+Pj4gdGhlDQo+Pj4+PiANCj4+Pj4+PiBvbmUgZGlzY3Vzc2VkIGluIGh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9yZmM1NzY2I3NlY3Rpb24tMTcuMi4xDQo+Pj4+PiAgICA8aHR0cHM6Ly91 cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPj4+PiAzQV9fdG9vbHMu aWV0Zi5vcmdfaHRtbF9yZmM1NzY2LTIzc2VjdGlvbi0NCj4+Pj4gMkQxNy4yLjEmZD1EZ01GYVEm Yz05NlpiWlpjYU1GNHcwRjRqcE42TFpnJnI9YndaLQ0KPj4+PiBublJHV21jR0tSSXVhZHE2LU5T bnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPj4+PiANCj4+IE1WUWkybFZiRV9zNHVseDRo bmhFb21YaFFLN3hRRWlrekF1cFI4JnM9eVRUWUtnb3IyX2FqSGU3S1BfNEJ6bmwNCj4+Pj4gRzFF YW11SXlfSzdhazBVNDBSYk0mZT0+LA0KPj4+Pj4gDQo+Pj4+Pj4gd2hlcmUgYXR0YWNrZXIgc2Vu ZHMgZmFrZWQgcGVybWlzc2lvbnMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGxhdW5jaA0KPj4+PiBh dHRhY2sNCj4+Pj4+IA0KPj4+Pj4+IChET1Mgb3IgRERPUykgb24gdGhlIHZpY3RpbSAoVFVSTiBj bGllbnQpLg0KPj4+Pj4gDQo+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+PiBXZSBzaG91bGQgZGlzY3Vz cyBhbGwgc3VjaCBwb3NzaWJsZSBhdHRhY2tzLCBiZWZvcmUgd2UgZGVjaWRlIHRvIGdvDQo+PiB3 aXRoDQo+Pj4+PiANCj4+Pj4+PiBNVVNUIG9yIFNIT1VMRC4NCj4+Pj4+IA0KPj4+Pj4+IA0KPj4+ Pj4gDQo+Pj4+Pj4gLVRpcnUNCj4+Pj4+IA0KPj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+IC0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+Pj4+PiANCj4+Pj4+Pj4gRnJvbTogdHJhbSBbbWFpbHRv OnRyYW0tYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEJyYW5kb24NCj4+Pj4+IA0KPj4+ Pj4+PiBXaWxsaWFtcw0KPj4+Pj4gDQo+Pj4+Pj4+IFNlbnQ6IE1vbmRheSwgTm92ZW1iZXIgMTQs IDIwMTYgNzozMSBQTQ0KPj4+Pj4gDQo+Pj4+Pj4+IFRvOiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRp cmVkZHkpIDx0aXJlZGR5QGNpc2NvLmNvbQ0KPj4+PiA8bWFpbHRvOnRpcmVkZHlAY2lzY28uY29t Pj47IEthcmwgU3RhaGwNCj4+Pj4+IA0KPj4+Pj4+PiA8a2FybC5zdGFobEBpbmdhdGUuY29tIDxt YWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29tPj47IFByYXNoYW50aA0KPj4+Pj4gICAgUGF0aWwg KHByYXNwYXRpKQ0KPj4+Pj4gDQo+Pj4+Pj4+IDxwcmFzcGF0aUBjaXNjby5jb20gPG1haWx0bzpw cmFzcGF0aUBjaXNjby5jb20+PjsgdHJhbUBpZXRmLm9yZw0KPj4+Pj4gICAgPG1haWx0bzp0cmFt QGlldGYub3JnPg0KPj4+Pj4gDQo+Pj4+Pj4+IENjOiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFp bHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0RhbiBXaW5nJw0KPj4+Pj4gICAgPGRhbkBkYW53 aW5nLm9yZyA8bWFpbHRvOmRhbkBkYW53aW5nLm9yZz4+OyAnU3BlbmNlcg0KPj4+Pj4gDQo+Pj4+ Pj4+IERhd2tpbnMgYXQgSUVURicgPHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tDQo+Pj4+ IDxtYWlsdG86c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20+Pg0KPj4+Pj4gDQo+Pj4+Pj4+ IFN1YmplY3Q6IFJlOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVy eQ0KPj4+Pj4gDQo+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+ICsxIG9uIHRoZSByYXRpb25hbGUu IEl0IG1ha2VzIGFsbW9zdCBubyBkaWZmZXJlbmNlIGhvdyB5b3Ugc2VjdXJlDQo+PiB0aGUNCj4+ Pj4+IA0KPj4+Pj4+PiBsb2NhbCBvciBhY2Nlc3MgbmV0d29yayBhdCB0aGUgYm9yZGVyLCBpdCdz IHN0aWxsIHBvc3NpYmxlIHRoYXQgdGhlcmUNCj4+Pj4+IA0KPj4+Pj4+PiBhcmUNCj4+Pj4+IA0K Pj4+Pj4+IG9uLXBhdGgNCj4+Pj4+IA0KPj4+Pj4+PiBhZHZlcnNhcmllcywgYW5kIHVzaW5nIHNv bWUgdHlwZSBvZiBhdXRoZW50aWNhdGlvbiAoZWl0aGVyIChEKVRMUyBvcg0KPj4+Pj4gDQo+Pj4+ Pj4+IFNUVU4pIGhlbHBzIHRvIHByb3RlY3QgYWdhaW5zdCB0aGVtLg0KPj4+Pj4gDQo+Pj4+Pj4+ IA0KPj4+Pj4gDQo+Pj4+Pj4+IEkgc3RpbGwgYWdyZWUgd2l0aCBLYXJsIG9uIGRvd25ncmFkaW5n IHRoZSBNVVNUIGJhY2sgdG8gU0hPVUxEIG9yDQo+Pj4+PiANCj4+Pj4+Pj4gUkVDT01NRU5ERUQs IHNpbmNlIEkgdGhpbmsgdGhlcmUncyByb29tIGZvciBkaXNhZ3JlZW1lbnQgYWJvdXQNCj4+Pj4g aG93DQo+Pj4+PiANCj4+Pj4+Pj4gY3JpdGljYWwgaXQgaXMgdG8gbWl0aWdhdGUgYWdhaW5zdCB0 aGF0IGF0dGFjay4gRWFzZS1vZi11c2UgbWlnaHQgd2luDQo+Pj4+PiANCj4+Pj4+Pj4gb3V0DQo+ Pj4+PiANCj4+Pj4+PiBmb3Igc29tZQ0KPj4+Pj4gDQo+Pj4+Pj4+IG5ldHdvcmtzIHByb3ZpZGVk IHRoZXkgaGF2ZSBvdGhlciBwcm90ZWN0aW9uIG1lY2hhbmlzbXMgYXQgZWl0aGVyDQo+Pj4+IHRo ZQ0KPj4+Pj4gDQo+Pj4+Pj4+IG5ldHdvcmsgb3IgZGF0YWxpbmsgbGF5ZXIuIEkgZG9uJ3QgdGhp bmsgaXQgc2hvdWxkIGRyb3AgYmVsb3cgdGhlDQo+Pj4+PiANCj4+Pj4+Pj4gcmVjb21tZW5kYXRp b24gbGV2ZWwgdGhvdWdoLCBiZWNhdXNlIG1vc3QgbmV0d29yayB3aWxsIG5vdCBoYXZlDQo+Pj4+ IHN1Y2gNCj4+Pj4+IA0KPj4+Pj4+PiBtZWNoYW5pc21zIGluIHBsYWNlLg0KPj4+Pj4gDQo+Pj4+ Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+IC0tQnJhbmRvbg0KPj4+Pj4gDQo+Pj4+Pj4+IA0KPj4+Pj4g DQo+Pj4+Pj4+IE9uIDExLzE0LzIwMTYgMDY6MzYgQU0sIFRpcnVtYWxlc3dhciBSZWRkeSAodGly ZWRkeSkgd3JvdGU6DQo+Pj4+PiANCj4+Pj4+Pj4+IFRoZXJlIHNlZW1zIHRvIGJlIGNvbmZ1c2lv biB3aHkgKEQpVExTIGlzIG1hbmRhdGVkIGluIHRoZSBkcmFmdC4NCj4+Pj4+IA0KPj4+Pj4+Pj4g DQo+Pj4+PiANCj4+Pj4+Pj4+IFRoZSBkcmFmdCBtYW5kYXRlcyAoRClUTFMgYnV0IGRvZXMgbm90 IG1hbmRhdGUgVFVSTiBzZXJ2ZXINCj4+Pj4gdmFsaWRhdGlvbi4NCj4+Pj4+IA0KPj4+Pj4+IElu DQo+Pj4+PiANCj4+Pj4+Pj4gc2NlbmFyaW9zIHdoZXJlIHRoZSBUVVJOIGNsaWVudCBjYW5ub3Qg dmFsaWRhdGUgdGhlIFRVUk4gc2VydmVyLA0KPj4+Pj4gDQo+Pj4+Pj4+IChEKVRMUyBoZWxwcyBh dm9pZCB2YXJpb3VzIGF0dGFja3MsIGxpa2UgYXR0YWNrZXIgc2VuZGluZyBzcG9vZmVkDQo+PiBU VVJODQo+Pj4+PiANCj4+Pj4+Pj4gbWVzc2FnZXMNCj4+Pj4+IA0KPj4+Pj4+IHRvDQo+Pj4+PiAN Cj4+Pj4+Pj4gVFVSTiBjbGllbnQgYW5kIHNlcnZlci4gRm9yIGV4YW1wbGUsIHdoZW4gKEQpVExT IGlzIG5vdCB1c2VkLA0KPj4gYXR0YWNrZXINCj4+Pj4+IA0KPj4+Pj4+PiBjYW4gc2VuZCBzcG9v ZmVkIFRVUk4gcmVxdWVzdHMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGNsb3NlDQo+Pj4+IGFsbG9j YXRpb25zLg0KPj4+Pj4gDQo+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4gVGhlIGFib3ZlIGF0 dGFjayBpcyBwb3NzaWJsZSB3aGVuIFRVUk4gc2VydmVycyBhcmUgcHJvdmlkZWQgYnkNCj4+Pj4+ IA0KPj4+Pj4+Pj4gZWl0aGVyDQo+Pj4+PiANCj4+Pj4+PiBsb2NhbA0KPj4+Pj4gDQo+Pj4+Pj4+ IG9yIGFjY2VzcyBuZXR3b3Jrcy4NCj4+Pj4+IA0KPj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+ IC1UaXJ1DQo+Pj4+PiANCj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCj4+Pj4+IA0KPj4+Pj4+Pj4+IEZyb206IHRyYW0gW21haWx0bzp0cmFt LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBLYXJsDQo+PiBTdGFobA0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4gU2VudDogTW9uZGF5LCBOb3ZlbWJlciAxNCwgMjAxNiAxOjM4IFBNDQo+Pj4+PiAN Cj4+Pj4+Pj4+PiBUbzogJ0JyYW5kb24gV2lsbGlhbXMnIDxicmFuZG9uLndpbGxpYW1zQGFrYW1h aS5jb20NCj4+Pj4gPG1haWx0bzpicmFuZG9uLndpbGxpYW1zQGFrYW1haS5jb20+PjsNCj4+Pj4+ ICAgIFByYXNoYW50aA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gUGF0aWwNCj4+Pj4+IA0KPj4+Pj4+Pj4+ IChwcmFzcGF0aSkgPHByYXNwYXRpQGNpc2NvLmNvbSA8bWFpbHRvOnByYXNwYXRpQGNpc2NvLmNv bT4+Ow0KPj4+PiB0cmFtQGlldGYub3JnDQo+Pj4+PiAgICA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+ DQo+Pj4+PiANCj4+Pj4+Pj4+PiBDYzogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFt LWNoYWlyc0BpZXRmLm9yZz47ICdEYW4NCj4+IFdpbmcnDQo+Pj4+PiAgICA8ZGFuQGRhbndpbmcu b3JnIDxtYWlsdG86ZGFuQGRhbndpbmcub3JnPj47ICdTcGVuY2VyDQo+Pj4+PiANCj4+Pj4+Pj4+ PiBEYXdraW5zIGF0IElFVEYnIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbQ0KPj4+Pj4g ICAgPG1haWx0bzpzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+OyBUaXJ1bWFsZXN3YXIN Cj4+Pj4+IA0KPj4+Pj4+Pj4+IFJlZGR5DQo+Pj4+PiANCj4+Pj4+Pj4+PiAodGlyZWRkeSkgPHRp cmVkZHlAY2lzY28uY29tIDxtYWlsdG86dGlyZWRkeUBjaXNjby5jb20+Pg0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4gU3ViamVjdDogUmU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlz Y292ZXJ5DQo+Pj4+PiANCj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+IEhpIEJyYW5kb24s DQo+Pj4+PiANCj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+IEluIHRoaXMgZHJhZnQsIHlv dSBoYXZlIGJlZW4gcHVzaGluZyBmb3IgInZhbGlkYXRpb24iIG9mIHRoZQ0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4gZGlzY292ZXJlZCBUVVJOIHNlcnZlciBieSB1c2luZyBEVExTLiBUaGUgdXNlIGNhc2Ug Zm9yIHRoYXQgaGFzDQo+PiBub3QNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGJlZW4gc3BlbGxlZCBvdXQs IGJ1dCB0aGUgdXNlIGNhc2Ugb2YgIlRVUk4gc2VydmVycyAqcHJvdmlkZWQNCj4+IGJ5Kg0KPj4+ Pj4gDQo+Pj4+Pj4+Pj4gdGhlIGxvY2FsIG5ldHdvcmsgb3IgYnkgdGhlIGFjY2VzcyBuZXR3b3Jr IiwgcmVhbGx5IG5lZWRzIHRvIGJlDQo+Pj4+PiANCj4+Pj4+Pj4+PiBjbGFyaWZpZWQgaW4gdGhp cyBkcmFmdC4gRm9yIHRoaXMgdXNlIGNhc2UsIGNsZWFyYW5jZSBmcm9tDQo+Pj4+PiANCj4+Pj4+ Pj4+PiBhdXRoZW50aWNhdGlvbiBhbmQgdmFsaWRhdGlvbiB3YXMgbWFkZSBpbiB2ZXJzaW9uIC0w NyBvZiB0aGUNCj4+IGRyYWZ0DQo+Pj4+PiANCj4+Pj4+PiBhbHJlYWR5Lg0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+PiBSZWdhcmRpbmcgeW91ciBjb21tZW50IGJlbG93LCBp dCBpcyBub3QgY2xlYXIgd2hpY2ggdXNlIGNhc2UNCj4+IFlPVQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4g Tk9XIGFyZSBjb25zaWRlcmluZy4NCj4+Pj4+IA0KPj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+ Pj4gRnVydGhlciwgRElTQ09WRVJZIGFuZCBVU0FHRSBhcmUgbm90IHRoZSBzYW1lIGluIHRoaXMN Cj4+IGRpc2N1c3Npb24uDQo+Pj4+PiANCj4+Pj4+Pj4+PiBZb3UgbWl4IHRoYXQsIGVzcGVjaWFs bHkgcmVnYXJkaW5nIHRoZSBhbnljYXN0IG1ldGhvZC4gTm8gb25lIGlzDQo+Pj4+PiANCj4+Pj4+ Pj4+PiBzdWdnZXN0aW5nIHRoYXQgdGhlIFRVUk4gc2VydmVyIGlzIFVTRUQgd2hlbiBhZGRyZXNz ZWQgYnkNCj4+Pj4gYW55Y2FzdC4NCj4+Pj4+IA0KPj4+Pj4+Pj4+IFRoZXJlIGlzIG9ubHkgT05F IHBhY2tldCBhZGRyZXNzZWQgYnkgYW55Y2FzdCBhbmQgc2VudCB0byB0aGUNCj4+Pj4+IA0KPj4+ Pj4+Pj4+IFNUVU4vVFVSTiBzZXJ2ZXIgYW5kIHRoYXQgaXMgZm9yIERJU0NPVkVSSU5HIGl0Lg0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+PiBTZWUgZnVydGhlciBpbmxpbmUg YmVsb3cuDQo+Pj4+PiANCj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+IFRoYW5rcywNCj4+ Pj4+IA0KPj4+Pj4+Pj4+IEthcmwNCj4+Pj4+IA0KPj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+ Pj4gLS0tLS1VcnNwcnVuZ2xpZ3QgbWVkZGVsYW5kZS0tLS0tDQo+Pj4+PiANCj4+Pj4+Pj4+PiBG csOlbjogQnJhbmRvbiBXaWxsaWFtcyBbbWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNv bV0NCj4+Pj4+IA0KPj4+Pj4+Pj4+IFNraWNrYXQ6IGRlbiAxMSBub3ZlbWJlciAyMDE2IDE5OjA4 DQo+Pj4+PiANCj4+Pj4+Pj4+PiBUaWxsOiBLYXJsIFN0YWhsOyAnUHJhc2hhbnRoIFBhdGlsIChw cmFzcGF0aSknOyB0cmFtQGlldGYub3JnDQo+Pj4+IDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4+ Pj4+IA0KPj4+Pj4+Pj4+IEtvcGlhOiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0t Y2hhaXJzQGlldGYub3JnPjsgJ0Rhbg0KPj4+PiBXaW5nJzsNCj4+Pj4+ICAgICdTcGVuY2VyIERh d2tpbnMgYXQgSUVURic7DQo+Pj4+PiANCj4+Pj4+Pj4+PiAnVGlydW1hbGVzd2FyIFJlZGR5ICh0 aXJlZGR5KScNCj4+Pj4+IA0KPj4+Pj4+Pj4+IMOEbW5lOiBSZTogW3RyYW1dIGRyYWZ0LWlldGYt dHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4+Pj4+IA0KPj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4gKDEpIEkgYWdyZWUgd2l0aCBLYXJsIHRoYXQgdGhlIE1VU1QgZm9yIChEKVRMUyBv ciBTVFVOIGF1dGgNCj4+IHNob3VsZA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gcmV2ZXJ0IHRvIGEgU0hP VUxEIG9yIGEgUkVDT01NRU5ERUQsIGdpdmVuIHRoYXQgbmV0d29yaw0KPj4+PiBwZXJpbWV0ZXIN Cj4+Pj4+IA0KPj4+Pj4+Pj4+IGNvbnRyb2wgaXMgY2FsbGVkIG91dCB3aXRoIE1VU1QgKG5vdGUg dGhhdCB0aGVyZSBhcmUgYSBmZXcgIm11c3QiDQo+Pj4+PiANCj4+Pj4+Pj4+PiB0byAiTVVTVCIg ZWRpdHMgcmVxdWlyZWQgaW4gdGhhdCB0ZXh0KS4gQWx0aG91Z2ggSSB3b3VsZCBkaXNhZ3JlZQ0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4gd2l0aCBhbiBlbnRlcnByaXNlIG5ldHdvcmsgYWRtaW4gd2hvIGNo b29zZXMgbm90IHRvIGRvIG9uZSBvZg0KPj4+PiB0aG9zZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gdHdv IHRoaW5ncyAoc2VlIG15IGNvbW1lbnRzIGFib3V0ICgzKS8oNCkgYmVsb3cpLCBJIHRoaW5rIHRo ZXJlJ3MNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHJvb20gZm9yIGRpZmZlcmVuY2Ugb2Ygb3BpbmlvbiB0 aGVyZSwgc28gTVVTVCBpcyB1bmxpa2VseSB0byBiZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gY29tcGxp ZWQNCj4+Pj4+IA0KPj4+Pj4+IHdpdGgNCj4+Pj4+IA0KPj4+Pj4+PiBhbnl3YXkuDQo+Pj4+PiAN Cj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+IFtLYXJsXSBHb29kIHRoYXQgeW91IGFncmVl IHRoZSBNVVNUICh0aHJvd24taW4gZHVyaW5nIGRpc2N1c3MpDQo+Pj4+IG11c3QNCj4+Pj4+IA0K Pj4+Pj4+Pj4+IGdvIGF3YXksIGJ1dCBmb3IgdGhlIHVzZSBjYXNlIG9mICJUVVJOIHNlcnZlcnMg KnByb3ZpZGVkIGJ5KiB0aGUNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGxvY2FsIG5ldHdvcmsgb3IgYnkg dGhlIGFjY2VzcyBuZXR3b3JrLiIgdGhlcmUgc2hvdWxkIG5vdCBldmVuDQo+PiBiZQ0KPj4+Pj4g DQo+Pj4+Pj4gU0hPVUxEDQo+Pj4+PiANCj4+Pj4+Pj4gb3IgUkVDT01NRU5ELg0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4gWW91ciBhcmUgcmVsYXRpbmcgdG8gVFVSTiBzZXJ2ZXJzICpwcm92aWRlZCBieSog KGFuZCBtYWludGFpbmVkDQo+Pj4+PiANCj4+Pj4+Pj4+PiBieT8pIHNvbWUgInRydXN0IGFuY2hv ciBzdG9yZSBbUkZDNjAyNF0gYWxsb3dzIGEgVFVSTiBjbGllbnQgLi4uIg0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4gb3IgYnkgIkNlcnRpZmljYXRpb24gYXV0aG9yaXRpZXMgdGhhdCBpc3N1ZSBUVVJOIHNl cnZlcg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gY2VydGlmaWNhdGVzIiB0aGF0ICpwcm92aWRlIFRVUk4g c2VydmVycyB3aXRoIHRoZWlyIGNlcnRpZmljYXRlcw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gaW4qIHRo YXQgeW91IGV4cGVjdCB0byBiZSBkaXNjb3ZlcmVkIGFuZCB3aGVyZSB0aGUgVFVSTiBjbGllbnQN Cj4+Pj4gKHRoZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gV2ViUlRDIGJyb3dzZXIpIG11c3QgYmUgZXF1 aXBwZWQgdG8gYWNjZXB0IHRob3NlIGNlcnRpZmljYXRlcy4NCj4+Pj4gVGhhdA0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4gaXMgTk9UIEZPUiAidGhlIFRVUk4gc2VydmVycyAqcHJvdmlkZWQgYnkqIHRoZSBs b2NhbCBuZXR3b3JrIG9yDQo+Pj4+IGJ5DQo+Pj4+PiANCj4+Pj4+Pj4+PiB0aGUgYWNjZXNzIG5l dHdvcmsiIHRoYXQNCj4+Pj4+IA0KPj4+Pj4+IGlzDQo+Pj4+PiANCj4+Pj4+Pj4gYmVpbmcgZGlz Y3Vzc2VkIGhlcmUuDQo+Pj4+PiANCj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+IA0KPj4+ Pj4gDQo+Pj4+Pj4+Pj4gKDIpIEkgZGlzYWdyZWUgd2l0aCBLYXJsIGFib3V0IGFueWNhc3QuIEEg c2VydmVyIHRoYXQgcHJvcGVybHkNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHN1cHBvcnRzIGFueWNhc3Qg W0thcmxdIFdoYXQgaXMgImEgc2VydmVyIHRoYXQgcHJvcGVybHkgc3VwcG9ydHMNCj4+Pj4+IA0K Pj4+Pj4+Pj4+IGFueWNhc3QiPyBJdCBpcyBjZXJ0YWlubHkgTk9UIEEgW1JGQzU3NjZdIFRVUk4g c2VydmVyIHRoYXQgaXMNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHN1cHBvc2VkDQo+Pj4+PiANCj4+Pj4+ PiB0bw0KPj4+Pj4gDQo+Pj4+Pj4+IGJlIGRpc2NvdmVyZWQgYnkgdGhpcyBkcmFmdC4NCj4+Pj4+ IA0KPj4+Pj4+Pj4+IEFsc28gbm90aWNlIHRoYXQgd2UgYXJlIHRhbGtpbmcgYWJvdXQgb25lIGFu eWNhc3QgcGFja2V0IEZPUg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gRElTQ09WRVJZLCBOT1QgVVNBR0Ug KHJlbGF5aW5nIHRyYWZmaWMpIHdpdGggYW55Y2FzdCBhZHJlc3NpbmcuDQo+Pj4+PiANCj4+Pj4+ Pj4+PiAoSSBhc2tlZCB0aGF0IHRoZSBjb25mdXNpbmcgInN1cHBvcnRzIGFueWNhc3QiIHN0YXRl bWVudCBpcw0KPj4gcmVtb3ZlZA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gZnJvbSB0aGUgYmVnaW5uaW5n IG9mIHRoZSBkcmFmdC4pDQo+Pj4+PiANCj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+IHdp bGwgaW5kZWVkIHRyZWF0IGluY29taW5nIHJlcXVlc3RzIGRpZmZlcmVudGx5IGRlcGVuZGluZyB1 cG9uDQo+Pj4+PiANCj4+Pj4+Pj4+PiB3aGV0aGVyIHRoZXkgYXJyaXZlIG9uIHRoZSBhbnljYXN0 IGFkZHJlc3Mgb3IgdGhlIHVuaWNhc3QNCj4+IGFkZHJlc3MuDQo+Pj4+PiANCj4+Pj4+Pj4+PiBJ IHN0cm9uZ2x5IGRpc2FncmVlIHdpdGggdGhlIGlkZWEgb2YgdXNpbmcgVHJ5IEFsdGVybmF0ZSBv biB0aGUNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGJpbmRpbmcgcmVxdWVzdCwgYmVjYXVzZSB5b3Ugd2Fu dCByZWRpcmVjdCBmb3IgdGhlIGxvbmctbGl2ZWQNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGFsbG9jYXRl IHJlcXVlc3QsIG5vdCBmb3IgdGhlIHF1ZXJ5LXJlc3BvbnNlIGJpbmRpbmcgcmVxdWVzdC4NCj4+ Pj4+IA0KPj4+Pj4+Pj4+IFtLYXJsXSBXaXRoIGEgVFVSTiBzZXJ2ZXIgcHJvdmlkZWQgYnkgdGhl IGxvY2FsIG9yIGFjY2Vzcw0KPj4gbmV0d29yaywNCj4+Pj4+IA0KPj4+Pj4+Pj4+IFNUVU4gaXMg Tk9UIFVTRUQgZm9yIHNldHRpbmcgdXAgYW55IGJpbmRpbmcgYW5kIG5vIHN1YnNlcXVlbnQNCj4+ Pj4+IA0KPj4+Pj4+Pj4+IHRyYWZmaWMuIFRoZSBTVFVOIGJpbmRpbmcgcmVzcG9uc2UgMzAwIFRy eSBBbHRlcm5hdGUgKHN0YXRpY2FsbHkNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGNvbmZpZ3VyZWQpIGlu IG15IHByb3Bvc2VkIHRleHQsIGlzIG9ubHkgYW4gaW5kaWNhdGlvbiB1c2VkIGF0DQo+Pj4+PiAN Cj4+Pj4+Pj4+PiBESVNDT1ZFUlksIHRoYXQgYSBuZXR3b3JrIHByb3ZpZGVkIFRVUk4gc2VydmVy IGlzIHRoZXJlIGFuZA0KPj4+PiBzaG91bGQNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGJlIHVzZWQgYXQg aXRzIHVuaWNhc3QgYWRkcmVzcyByZXZlYWxlZCBpbiB0aGUNCj4+Pj4+IA0KPj4+Pj4+Pj4+IDMw MCByZXNwb25zZS4gVGhlIGxvbmctbGl2ZWQgVFVSTiBhbGxvY2F0ZSBJUyBVU0VEIGZvciB0aGUN Cj4+IHRyYWZmaWMuDQo+Pj4+PiANCj4+Pj4+Pj4+PiBUaGUgU1RVTiBzZXJ2ZXIgcG9ydGlvbiBv ZiB0aGUgVFVSTiBzZXJ2ZXIgcGFyYWxsZWxpbmcgdGhlDQo+PiBkZWZhdWx0DQo+Pj4+PiANCj4+ Pj4+Pj4+PiBnYXRld2F5IHJvdXRlciBpcyBuZXZlciB1c2VkIGZvciBhbnkgYmluZGluZy4NCj4+ Pj4+IA0KPj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gUGFydCBvZiBteSByZWFzb24gZm9y IHRoaXMgaXMgdGhhdCBnb29kIChieSBteSBkZWZpbml0aW9uKSBUVVJODQo+Pj4+PiANCj4+Pj4+ Pj4+PiBzZXJ2ZXIgZGlzdHJpYnV0aW9uIGlzIGJyb2FkZXIgdGhhbiBpcyByZWFzb25hYmxlIGZv ciBhbnljYXN0DQo+Pj4+PiANCj4+Pj4+Pj4+PiBhZGRyZXNzIG1hbmFnZW1lbnQsIGFuZCBkZXRl cm1pbmluZyBhIHJlZGlyZWN0IGFkZHJlc3MgdG8gYmUNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGRlbGl2 ZXJlZCBpbmNyZWFzZXMgdGhlIGNvc3Qgb2YgaGFuZGxpbmcgdGhlIFNUVU4gYmluZCByZXF1ZXN0 LiBJdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gaXMgZGVzaXJhYmxlIGZvciB0aGF0IGNvc3QgdG8gc2Nh bGUgd2l0aCB0aGUgVFVSTiBhbGxvY2F0ZSBsb2FkLA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gbm90IHRo ZSBTVFVOIGJpbmQNCj4+Pj4+IA0KPj4+Pj4+IGxvYWQuDQo+Pj4+PiANCj4+Pj4+Pj4+PiBbS2Fy bF0gWW91IGp1c3QgYWRkIGEgc3RhdGljIHJvdXRlIGluIHlvdSBhY2Nlc3Mgcm91dGVyIGZvciB0 aGUNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGFueWNhc3QgYWRkcmVzcyB0byBwb2ludCB0byB5b3VyIFRV Uk4gc2VydmVyIQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+PiBJIGRvbid0 IG9wcG9zZSBzdXBwb3J0aW5nIGJvdGggaW4gdGhlIHNwZWMgaWYgc29tZW9uZSB3YW50cyB0bw0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4gcHJvcG9zZSBsYW5ndWFnZSBmb3IgdGhhdCwgYnV0IGl0IHdvdWxk IGFkZCBidXJkZW4gdG8gY2xpZW50DQo+Pj4+PiANCj4+Pj4+Pj4+PiBpbXBsZW1lbnRhdGlvbnMg YmVjYXVzZSB0aGV5IHdvdWxkIGJlIHJlcXVpcmVkIHRvIHN1cHBvcnQNCj4+IGJvdGgNCj4+Pj4g ZXZlbg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gdGhvdWdoIHRoZSBzZXJ2ZXIgY291bGQgdXNlIGVpdGhl ci4gT24gdGhlIG90aGVyIGhhbmQsIHRoZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gY3VycmVudGx5IGRl ZmluZWQgbWV0aG9kIHNob3VsZG4ndCByZXF1aXJlIGNoYW5nZXMgdG8gY2xpZW50cyBhdA0KPj4g YWxsLg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gW0thcmxdID8hIEJ1dCBpdCBkb2VzIG5vdCBmaW5kIFtS RkM1NzY2XSBUVVJOIHNlcnZlcnMuLi4NCj4+Pj4+IA0KPj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4gKDMpLyg0KSBJIGRpc2FncmVlIHdpdGggS2FybCdzIGFzc2Vzc21lbnQgb2YgdGhlIGRl cGxveW1lbnQNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGNvbnNpZGVyYXRpb25zLCBlc3BlY2lhbGx5IHRo ZSBjb25jbHVzaW9uIHRoYXQgYW55Y2FzdCBpcyB0aGUNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGJldHRl ciBwYXRoIGZvciBsb2NhbC9hY2Nlc3MgbmV0d29ya3MuDQo+Pj4+PiANCj4+Pj4+Pj4+PiBbS2Fy bF0gSWYgeW91IG1lYW4gdHJhZmZpYyBwYXRocyAobGlrZSBJIGRpZCksICJwYXRocyIgYXJlIGZv cg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gVVNBR0UgYW5kIG5vIG9uZSBpcyBzdWdnZXN0aW5nIGFueWNh c3QgZm9yIHRoYXQuDQo+Pj4+PiANCj4+Pj4+Pj4+PiBJbmRlcGVuZGVudCBvZiBob3cgZGlzY292 ZXJlZCAoYnkgYW55Y2FzdCBvciBhbnkgb2YgdGhlIEROUw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gbWV0 aG9kcykgQUxMIFVTQUdFIHRocm91Z2ggcGF0aHMgaXMgYnkgdW5pY2FzdCBhZGRyZXNzaW5nLg0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+PiBJdCBtaWdodCBiZSBiZXR0ZXIg Zm9yIHRoZSBzZXJ2ZXINCj4+Pj4+IA0KPj4+Pj4+Pj4+IGltcGxlbWVudGVyLCBidXQgbm90IGZv ciB0aGUgdGhlIGNsaWVudCwgYmVjYXVzZSBJIHRoaW5rIGl0J3MNCj4+Pj4+IA0KPj4+Pj4+Pj4+ IHBhcnRpY3VsYXJseSBkaWZmaWN1bHQgZm9yIGEgY2xpZW50IHRvIGRldGVybWluZSB3aGV0aGVy IGl0J3MNCj4+Pj4+IA0KPj4+Pj4+Pj4+IG5ldHdvcmsNCj4+Pj4+IA0KPj4+Pj4+IGlzDQo+Pj4+ PiANCj4+Pj4+Pj4gInNlYWxlZCIuDQo+Pj4+PiANCj4+Pj4+Pj4+PiBbS2FybF0gTm8sIG5vdCBh dCBhbGwuIEJsb2NraW5nIFNUVU4gcGFja2V0cyBhdCB0aGUgZGVmYXVsdCBnYXRld2F5DQo+Pj4+ PiANCj4+Pj4+Pj4+PiBpcyB0aGUgd2F5IHRvICJuZXR3b3JrIHdpc2UiIHNlYWwgdGhlIGxvY2Fs IG5ldHdvcmsgKGFuZCBvbmx5DQo+PiBhbGxvdw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gdGhlIHBhcmFs bGVsIFRVUk4gcGF0aCkhIFRoYXQgaXMgZWFzaWx5IGRldGVjdGVkIGJ5IGEgVFVSTiBjbGllbnQu DQo+Pj4+PiANCj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+IFRoZSBjbGllbnQgaGFzIHRv IHRydXN0IHRoYXQgdGhlIG5ldHdvcmsgaXMgcHJvcGVybHkgc2VhbGVkLCBzaW5jZQ0KPj4+Pj4g DQo+Pj4+Pj4+Pj4gaXQncyBkaWZmaWN1bHQgKGF0DQo+Pj4+PiANCj4+Pj4+Pj4+PiBsZWFzdCkg Zm9yIHRoZSBjbGllbnQgdG8gdmVyaWZ5LiBBbHNvLCBJIHRoaW5rIHRoYXQgdGhlIEROUyBhbmQN Cj4+Pj4+IA0KPj4+Pj4+Pj4+IERIQ1AgbWV0aG9kcyBhcmUgbGlrZWx5IHRvIGJlIGVhc2llciBm b3IgZW50ZXJwcmlzZSBhbmQgYWNjZXNzDQo+Pj4+PiANCj4+Pj4+Pj4+PiBuZXR3b3JrcyB0byBp bXBsZW1lbnQsIHNpbmNlIHRoZXkgd2lsbCBoYXZlIHRoZSBuZWNlc3NhcnkNCj4+IHN5c3RlbXMN Cj4+Pj4+IA0KPj4+Pj4+Pj4+IGluIHBsYWNlIGFscmVhZHkuIEV2ZW4gYSBob21lIG5ldHdvcmsg Z2F0ZXdheSBhcHBsaWFuY2Ugd2lsbA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gYWxyZWFkeSBoYXZlIGJv dGggaW50ZWdyYXRlIEROUyBhbmQgaW50ZWdyYXRlIERIQ1AsIHNvIEkgc3VzcGVjdA0KPj4+Pj4g DQo+Pj4+Pj4+Pj4gdGhhdCBhIHNtYWxsIGxvY2FsIG5ldHdvcmsgd2lsbCBoYXZlIGFuIGVhc2ll ciB0aW1lIHdpdGggdGhlc2UgdGhhbg0KPj4+PiB5b3UNCj4+Pj4+IA0KPj4+Pj4+IHN1Z2dlc3Qg YXMgd2VsbC4NCj4+Pj4+IA0KPj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gW0thcmxdIFNv IHlvdSBhZ3JlZSB0aGF0IGZvciBhIFRVUk4gc2VydmVyIGluIGEgbG9jYWwgbmV0d29yaywgaXRz DQo+Pj4+PiANCj4+Pj4+Pj4+PiBhZGRyZXNzIHNoYWxsIG9ubHkgYmUgZGVwbG95ZWQgaW4gbG9j YWwgRE5TIC0gSSB0aGluayB0aGUgZHJhZnQNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHNob3VsZA0KPj4+ Pj4gDQo+Pj4+Pj4gc2F5DQo+Pj4+PiANCj4+Pj4+Pj4gdGhhdCBhbHNvLg0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+PiBEZXNwaXRlIHRoZSBmYWN0IHRoYXQgSSBkaXNhZ3Jl ZSB3aXRoIHRoZSBhc3Nlc3NtZW50LCBJIGRvbid0IHJ1biBhDQo+Pj4+PiANCj4+Pj4+Pj4+PiBs b2NhbCBuZXR3b3JrIG9yIGFuIGFjY2VzcyBuZXR3b3JrIGFuZCB3b3VsZCBub3QgZXhwZWN0IHRv DQo+PiBkZXBsb3kNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHJlbGF5cyBtZWFudCB0byBmdW5jdGlvbiBp biB0aGF0IG1vZGUsIHNvIEkgd2lsbCBub3QgaGF2ZSBzdHJvbmcNCj4+Pj4+IA0KPj4+Pj4+Pj4+ IG9iamVjdGlvbnMgdG8gaW5jbHVkaW5nIHRoYXQgbGFuZ3VhZ2UgaWYgdGhlcmUgaXMgYnJvYWQg c3VwcG9ydA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gd2l0aGluDQo+Pj4+PiANCj4+Pj4+PiB0aGUNCj4+ Pj4+IA0KPj4+Pj4+PiBXRyBmb3IgS2FybCdzIGZyYW1pbmcuDQo+Pj4+PiANCj4+Pj4+Pj4+PiAN Cj4+Pj4+IA0KPj4+Pj4+Pj4+IC0tQnJhbmRvbg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+Pj4+PiBPbiAxMS8xMC8yMDE2IDA1OjQ4IFBNLCBLYXJsIFN0YWhsIHdyb3RlOg0KPj4+ Pj4gDQo+Pj4+Pj4+Pj4+ICgxKSBUaGUgZG93bmdyYWRlIG9mIHRoZSBNVVNUIGxldmVsIHJlcXVp cmVtZW50IGZvcg0KPj4+PiBhdXRoZW50aWNhdGlvbg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGRlZmlu ZWQNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGluIFtSRkM1NzY2XSB3YXMgInJpZ2h0bHkiICh0byB1c2Ug dGhlIHRlcm0gZnJvbSBiZWxvdykNCj4+IGludHJvZHVjZWQNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGFu ZCBtYWRlIE9QVElPTkFMIGZvciBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlIGxvY2FsIG9y DQo+Pj4+IGFjY2Vzcw0KPj4+Pj4gDQo+Pj4+Pj4+IG5ldHdvcmsuDQo+Pj4+PiANCj4+Pj4+Pj4+ Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gSE9XRVZFUiwgUHJhc2hhbnRoJ3M6ICJJIHRoaW5rIHdl IGNhbiBtYW5kYXRlIChEKVRMUyAqaWYqDQo+PiBTVFVODQo+Pj4+PiANCj4+Pj4+Pj4+PiBhdXRo ZW50aWNhdGlvbiBvciB0aGlyZC1wYXJ0eSBhdXRob3JpemF0aW9uIGlzIG5vdCB1c2VkLiIgdGhy b3duLQ0KPj4gaW4NCj4+Pj4+IA0KPj4+Pj4+Pj4+IGR1cmluZyB0aGUgRElTQ1VTUywgbXVzdCBi ZSBkZWxldGVkIGZyb20gdGhlIC0xMCB2ZXJzaW9uIG9mIHRoaXMNCj4+Pj4+IA0KPj4+Pj4+Pj4+ IGRpc2NvdmVyeSBzaW5jZSBpdCBCTE9DS3MgdGhlIHVzYWdlIGFuZCBkZXBsb3ltZW50IG9mIG5l dHdvcmsNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHByb3ZpZGVkIFRVUk4gc2VydmVycywgd2hpY2ggd2Fz IHRoZSBtYWluIHB1cnBvc2Ugb2YgdGhpcw0KPj4+PiBkaXNjb3ZlcnkNCj4+Pj4+IA0KPj4+Pj4+ Pj4+IGRyYWZ0LiAoQWxzbywgQXV0aG9ycydzIGRpZCBub3QgZm9sbG93IEJlbiBDYW1wYmVsbCdz OiAiSSBzYXcgYQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gY29tbWVudCBvbiBteSBESVNDVVNTIGVtYWls IHRocmVhZCBmcm9tIEthcmwgU3RhaGwsIHN0YXRpbmcNCj4+IHRoYXQNCj4+Pj4+IA0KPj4+Pj4+ Pj4+IERUTFMgY291bGQgbm90IGJlIG1hbmRhdGVkLiBIYXMgdGhhdCBpbnB1dCBiZWVuDQo+Pj4+ PiANCj4+Pj4+Pj4+PiBjb25zaWRlcmVkPyIpDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiAN Cj4+Pj4+Pj4+Pj4gVGhlIHRocm93bi1pbiBhZGRpdGlvbiBpbiB2ZXJzaW9uIC0xMCAobm90IHNo b3duIGluIGZ1bGwgYmVsb3cpDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gaGlnaGxpZ2h0cw0KPj4+Pj4g DQo+Pj4+Pj4+Pj4gdGhpczoNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+ PiAgIEEgVFVSTiBjbGllbnQgTVVTVCB1c2UgKEQpVExTIC4uLiBpbiB0aGUgYWJzZW5jZSBvZiBT VFVODQo+PiBsb25nLQ0KPj4+PiB0ZXJtDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gICBjcmVkZW50aWFs IG1lY2hhbmlzbSBbUkZDNTM4OV0gb3IgU1RVTiBFeHRlbnNpb24gZm9yIFRoaXJkLQ0KPj4+PiBQ YXJ0eQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgQXV0aG9yaXphdGlvbiBbUkZDNzYzNV0uICAuLi4N Cj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAgIG8gIEZvciBjZXJ0aWZp Y2F0ZS1iYXNlZCBhdXRoZW50aWNhdGlvbiwgYSBwcmUtcG9wdWxhdGVkIHRydXN0DQo+Pj4+PiAN Cj4+Pj4+PiBhbmNob3INCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAgICAgIHN0b3JlIFtSRkM2MDI0XSBh bGxvd3MgYSBUVVJOIGNsaWVudCAuLi4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+ Pj4+Pj4+PiAgIG8gIENlcnRpZmljYXRpb24gYXV0aG9yaXRpZXMgdGhhdCBpc3N1ZSBUVVJOIHNl cnZlciBjZXJ0aWZpY2F0ZXMNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAgICAgIC4uLg0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgbyAgRm9yIFRVUk4gc2VydmVycyB0aGF0 IGRvbid0IGhhdmUgYSBjZXJ0aWZpY2F0ZSB0cnVzdCBjaGFpbg0KPj4+Pj4gDQo+Pj4+Pj4gKGUu Zy4sDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gICAgICBiZWNhdXNlIHRoZXkgYXJlIG9uIGEgaG9tZSBu ZXR3b3JrIG9yIGEgY29ycG9yYXRlDQo+PiBuZXR3b3JrKSwNCj4+Pj4gYQ0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4+ICAgICAgY29uZmlndXJlZCBsaXN0IG9mIFRVUk4gc2VydmVycyBjYW4gY29udGFpbiB0 aGUgU3ViamVjdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IFB1YmxpYw0KPj4+Pj4gDQo+Pj4+Pj4gS2V5 DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gICAgICBJbmZvIChTUEtJKSBmaW5nZXJwcmludCBvZiB0aGUg VFVSTiBzZXJ2ZXJzLi4uIGV0Yy4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+ Pj4+PiBXaGF0IGRvZXMgdGhlIEF1dGhvcnMgaGF2ZSBpbiBtaW5kIC0gYSByZWd1bGF0ZWQgbmV0 d29yayBvZg0KPj4+PiBUVVJODQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gc2VydmVycywNCj4+Pj4+IA0K Pj4+Pj4+Pj4+IHdoZW4gdGhlIHB1cnBvc2Ugd2FzIGZvciBldmVyeW9uZSB0byBiZSBhYmxlIHRv IHVzZSBnb29kDQo+PiBXZWJSVEMNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGV2ZXJ5d2hlcmUgeW91IGNh biBzdXJmLCBpbmNsdWRpbmcgYmVoaW5kIHlvdXIgaG9tZSBCZXN0IEJ1eQ0KPj4+PiBib3VnaHQN Cj4+Pj4+IA0KPj4+Pj4+Pj4+IFdpRmkgcm91dGVyICh3aGljaCB3ZSBjYW4gaG9wZSwgc29tZSBk YXksIHdpbGwgaW5jbHVkZSBhIGRlZmF1bHQNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGNvbmZpZ3VyZWQs IHJlYWR5IHRvIHVzZSwgVFVSTiBzZXJ2ZXIgcGF0aCBwYXJhbGxlbGluZyBpdHMgZGVmYXVsdA0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4gZ2F0ZXdheSBwYXRoIChpLmUuIHRoZSBOQVQvZmlyZXdhbGwvYWNj ZXNzIHJvdXRlci9kZWZhdWx0DQo+PiBnYXRld2F5KT8NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+ Pj4+IA0KPj4+Pj4+Pj4+PiBUaGlzIHNwZWNpZmljYXRpb24gc2hhbGwgKGF0IGxlYXN0KSBzcGVj aWZ5IGRpc2NvdmVyeSBvZiBuZXR3b3JrDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gcHJvdmlkZWQNCj4+ Pj4+IA0KPj4+Pj4+Pj4+IFRVUk4gc2VydmVycyB0byBhbGxvdyByZWFsLXRpbWUgY29tbXVuaWNh dGlvbiwgaW4gc2l0dWF0aW9ucw0KPj4gd2hlcmUNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGl0IG90aGVy d2lzZSBpcyBub3QgcG9zc2libGUgb3IgYmFkOg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IC0gdG8gbWVl dCB0aGUgYXV0byBjb25maWd1cmF0aW9uIG9mIFJGQyA3NDc4IChXZWIgUmVhbC1UaW1lDQo+Pj4+ PiANCj4+Pj4+Pj4+Pj4gQ29tbXVuaWNhdGlvbg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gVXNlIENhc2Vz IGFuZCBSZXF1aXJlbWVudHMpIDIuMy41LjEuDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gLSBwcm92aWRp bmcgYSBkaXNjb3ZlcnkgbWV0aG9kIHN1aXRhYmxlIGZvcg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGRy YWZ0LWlldGYtcnRjd2ViLXJldHVybi0wMQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4+IFRoZSBhYm92ZSBoYXMgYWxyZWFkeSBiZWVuIGRpc2N1c3NlZCBtYW55IHRpbWVz IGluIHRoaXMgV0c6DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bC0NCj4+Pj4gYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAxMzE5Lmh0bWwNCj4+Pj4+ICAg IDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+Pj4+ IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4+Pj4gDQo+PiAyRGFyY2hpdmVfd2ViX3RyYW1fY3Vy cmVudF9tc2cwMTMxOS5odG1sJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4+Pj4gdzBGNGpwTjZM Wmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZt PUxYYUgtDQo+Pj4+IA0KPj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgm cz1Pc2wwZFR4aXNNODVZaGRKX18waWRsbQ0KPj4+PiBFdUhaRE85NHplRVRoMEt1V09VZyZlPT4N Cj4+Pj4+IA0KPj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPj4+PiBhcmNo aXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDE3NDIuaHRtbA0KPj4+Pj4gICAgPGh0dHBzOi8vdXJs ZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4+Pj4gM0FfX3d3dy5pZXRm Lm9yZ19tYWlsLQ0KPj4+PiANCj4+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAxNzQy Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJH V21jR0tSSXVhZHE2LQ0KPj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4+Pj4g TVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1vdmtLcEFGdGFkbF90Vy0N Cj4+Pj4gc0dFOWxLQmlkRmlKOUR3QXhyS3lDLUtnZEM2dyZlPT4NCj4+Pj4+IA0KPj4+Pj4+Pj4+ PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPj4+PiBhcmNoaXZlL3dlYi90cmFtL2N1cnJl bnQvbXNnMDIxOTEuaHRtbA0KPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50 LmNvbS92Mi91cmw/dT1odHRwcy0NCj4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPj4+PiAN Cj4+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAyMTkxLmh0bWwmZD1EZ01GYVEmYz05 NlpiWlpjYU1GNA0KPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPj4+ PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4+Pj4gDQo+PiBNVlFpMmxWYkVfczR1 bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPTZxVG16cW5FVzVmV1JETnQ2SlQ5Ug0KPj4+PiBX dG5rS2VjT1VZRzhPeVB0QlZZOUVrJmU9Pg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4+IEp1c3QgYXMgY3JlZGVudGlhbHMgZm9yIGF1dGhlbnRpY2F0aW9uIGNhbm5vdCBi ZSBleHBlY3RlZCB0byBiZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGF2YWlsYWJsZQ0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4gZm9yIHRoaXMgZ2VuZXJhbCB1c2FnZSwgbm9yIGNhbiB3ZSBpbXBvc2UgdGhhdCBj ZXJ0aWZpY2F0ZXMgc2hvdWxkDQo+Pj4+PiANCj4+Pj4+Pj4+PiBiZQ0KPj4+Pj4gDQo+Pj4+Pj4g dXNlZC4NCj4+Pj4+IA0KPj4+Pj4+Pj4+IEZvciB0aGUgbmV0d29yayBwcm92aWRlZCBUVVJOIHNl cnZlciwgd2Ugc2hvdWxkIG5vdC9tdXN0IG5vdA0KPj4+PiBleHBlY3QNCj4+Pj4+IA0KPj4+Pj4+ Pj4+IHNvbWUgaGlnaGVyIGxldmVsIG9mIHRydXN0IG9yIHNlY3VyaXR5IHdoZW4gdGhlIHJlYWwt dGltZSBtZWRpYQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gZmxvd3MgdGhyb3VnaCB0aGUgVFVSTiBzZXJ2 ZXIgdGhhbiB3aGVuIGl0IGdvZXMgdGhyb3VnaCB0aGUNCj4+Pj4gZGVmYXVsdA0KPj4+Pj4gDQo+ Pj4+Pj4gZ2F0ZXdheSENCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBU aGUgdXNlIG9mIChEKVRMUyBoYXMgYmVlbiBkaXNjdXNzZWQgaW50ZW5zaXZlbHkgaW4gdGhlIC0w NA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IHZlcnNpb24gb2YgdGhlDQo+Pj4+PiANCj4+Pj4+Pj4+PiBk cmFmdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtDQo+Pj4+ IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMTgyMS5odG1sDQo+Pj4+PiAgICA8aHR0cHM6 Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPj4+PiAzQV9fd3d3 LmlldGYub3JnX21haWwtDQo+Pj4+IA0KPj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJlbnRfbXNn MDE4MjEuaHRtbCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+Pj4+IHcwRjRqcE42TFpnJnI9Ynda LW5uUkdXbWNHS1JJdWFkcTYtDQo+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0K Pj4+PiANCj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9SkptNDlj RTZWMTBpaXNxSHAzak5lU24NCj4+Pj4gcUU3d0h6RHRTckloc1FVOFN4M0EmZT0+DQo+Pj4+PiAN Cj4+Pj4+Pj4+Pj4gYW5kIHdhcyBOT1QgbWFuZGF0ZWQgZm9yIHRoZSBUVVJOIHNlcnZlciBwcm92 aWRlZCBieSB0aGUNCj4+IGxvY2FsDQo+Pj4+IG9yDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gYWNjZXNz DQo+Pj4+PiANCj4+Pj4+Pj4+PiBuZXR3b3JrLiBJdCBjYW5ub3QgYmUgdGhyb3duLWluIG5vdyBh Z2FpbiENCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBBbnkgYXJndW1l bnRzIGFnYWluc3QgaGF2ZSBiZWVuIG9mIHR5cGU6IFdlIG5lZWQgc2VjdXJpdHkgaW4NCj4+Pj4+ IA0KPj4+Pj4+Pj4+PiBpdHNlbGYNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAtDQo+Pj4+PiANCj4+Pj4+ Pj4+PiBwcm90ZWN0IHRoaXMgYW5kIHRoYXQgLSBkbyBldmVyeSBhdXRoZW50aWNhdGlvbi92YWxp ZGF0aW9uIGluIHRoZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gYm9vayAod2hldGhlciBuZWVkZWQgb3Ig bm90KSBldGMuLCB3aGljaCBvbmx5IGxlYWRzIHRvIHJlc3BvbnNlcw0KPj4+Pj4gDQo+Pj4+Pj4+ Pj4gbGlrZSBJIGhhZCB0byBicmluZyB1cCBkdXJpbmcgdGhlIGRpc2N1c3M6DQo+Pj4+PiANCj4+ Pj4+Pj4+Pj4gW0thcmxdIERvIHlvdSB0aGluayB3ZSBuZWVkIHRvIGRpc2NvdmVyIFRVUk4gc2Vy dmVycyBmb3IgdGhlDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gcGxlYXN1cmUgb2YNCj4+Pj4+IA0KPj4+ Pj4+Pj4+IGRvaW5nICJzZWN1cml0eSB0aGF0IGRlYWwgZGlyZWN0bHkgd2l0aCBUVVJOIG1lc3Nh Z2VzIiBpbiBpdHNlbGYsDQo+Pj4+PiANCj4+Pj4+Pj4+PiBhbmQgbm90IGZvciB3aGF0IHRoZXkg YXJlIHN1cHBvc2VkIHRvIGRvIChyZWxheSAiYXBwbGljYXRpb24NCj4+IGRhdGEiKQ0KPj4+Pj4g DQo+Pj4+Pj4+Pj4gYW5kIGRvIHlvdSBhbHNvIHRoaW5rIHRoYXQgaXMgd2h5IGEgbmV0d29yayBw cm92aWRlciB3aWxsIGRlcGxveQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gc3VjaCBUVVJODQo+Pj4+PiAN Cj4+Pj4+Pj4gc2VydmVyIGZvciBoaXMgdXNlcnM/DQo+Pj4+PiANCj4+Pj4+Pj4+PiBQbGVhc2Ug ZG8gbm90IHN0b3AgdGhlIHB1cnBvc2UgKGJ5IHN1Y2ggcGhyYXNlcykhDQo+Pj4+PiANCj4+Pj4+ Pj4+Pj4gKEFsc28sIGVuY3J5cHRpb24gYW5kIHByb3RlY3Rpb24gYWdhaW5zdCBtYW4taW4tdGhl LW1pZGRsZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGF0dGFja3MsIGZvcg0KPj4+Pj4gDQo+Pj4+Pj4+ Pj4gdGhlIHBheWxvYWQgKHJlYWwtdGltZSB0cmFmZmljKSBhcmUgZm9yIHRoZSBlbmRwb2ludHMg dG8gZG8gLSBsaWtlDQo+Pj4+PiANCj4+Pj4+Pj4+PiB3aXRoIFdlYlJUQywgbWFuZGF0aW5nIERU TFMtU1JUUCBtZWRpYSAtIGl0IHNob3VsZCBub3QgYmUNCj4+Pj4gZXhwZWN0ZWQNCj4+Pj4+IA0K Pj4+Pj4+Pj4+IHRvIGJlIGRvbmUgYnkgYSBUVVJOIHNlcnZlciwgZXNwZWNpYWxseSB3aGVuIG5v dCBhbHdheXMgdXNlZC4pDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4g DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gKDIpIEFsc28gYXMgcG9pbnRlZCBvdXQgZHVyaW5nIHRoZSBE SVNDVVNTDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4+ Pj4gYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAyMTQ0Lmh0bWwNCj4+Pj4+ICAgIDxodHRw czovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+Pj4+IDNBX193 d3cuaWV0Zi5vcmdfbWFpbC0NCj4+Pj4gDQo+PiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9t c2cwMjE0NC5odG1sJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4+Pj4gdzBGNGpwTjZMWmcmcj1i d1otbm5SR1dtY0dLUkl1YWRxNi0NCj4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgt DQo+Pj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9aHRpODg1Rkgw SV8tDQo+Pj4+IDN6N2RvbGZZQ0FpYTRGWDNpMTJzVUNXc0dlc05ENnMmZT0+DQo+Pj4+PiANCj4+ Pj4+Pj4+Pj4gYW5kIHR3byB0aW1lcyBlYXJsaWVyIChkdXJpbmcgV0cgZGlzY3Vzc2lvbnMsIGJ1 dCBub3QgYWRkcmVzc2VkDQo+Pj4+IG9yDQo+Pj4+PiANCj4+Pj4+Pj4+PiByZXNwb25kZWQgdG8g YnkgdGhlIEF1dGhvcnMpOg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWwtDQo+Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMjA4MS5odG0NCj4+Pj4+ ICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ Pj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4+Pj4gDQo+PiAyRGFyY2hpdmVfd2ViX3RyYW1f Y3VycmVudF9tc2cwMjA4MS5odG0mZD1EZ01GYVEmYz05NlpiWlpjYU1GNHcNCj4+Pj4gMEY0anBO NkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhn Jm09TFhhSC0NCj4+Pj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1m LQ0KPj4+PiBHek9Uc1BtODZOVXF6Rlh5akFnUHo2eC1CaUEtYnVMaElGUHQ5UWZFZyZlPT4gbA0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4+IGFuZCBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPj4+Pj4g ICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4+ Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPj4+PiAyRCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0 dzBGNGpwTjZMWmcmcj1id1otDQo+PiBublJHV21jR0tSSXVhZHE2LQ0KPj4+PiBOU25zZ3diQlZV SmE0bVpmbUVJQlhnJm09TFhhSC0NCj4+Pj4gDQo+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhR Szd4UUVpa3pBdXBSOCZzPVNhM2p3dEEyVEZ0TkFJQW5mVGVtMzJ2DQo+Pj4+IFc5aklmY0Jsc1V3 eElCZWxibERzJmU9Pg0KPj4+Pj4gDQo+Pj4+Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9t c2cwMTk3Ni5odG1sDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gVGhl IGFueWNhc3QgbWV0aG9kIGRvZXMgbm90IHdvcmsgd2l0aCBSRkM1NzY2IFRVUk4gc2VydmVycyEN Cj4+Pj4gVGhhdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGhhcyBub3QNCj4+Pj4+IA0KPj4+Pj4+Pj4+ IGJlZW4gYWRkcmVzc2VkIGF0IGFsbC4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+ Pj4+Pj4+PiBBIFRVUk4gc2VydmVyIGRvZXNuJ3QgcmVhY3Qgb25lIHdheSAoYW5zd2VyaW5nIDMw MCBUcnkNCj4+Pj4gQWx0ZXJuYXRlKQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IHdoZW4NCj4+Pj4+IA0K Pj4+Pj4+Pj4+IGFkZHJlc3NlZCBieSBhbiBhbnljYXN0IGFkZHJlc3MgYW5kIGFub3RoZXIgd2F5 IChhY2NlcHRpbmcgdGhlDQo+Pj4+PiANCj4+Pj4+Pj4+PiBBbGxvY2F0ZQ0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4gcmVxdWVzdCkgd2hlbiBhZGRyZXNzZWQgYnkgaXRzIHVuaWNhc3QgYWRkcmVzcywgZG9l cyBpdD8NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBBdXRob3IncyAo ZHVyaW5nIHRoZSBESVNDVVNTKTogIldlIGludGVuZCB0byBhZGQgdGhlIGZvbGxvd2luZw0KPj4g dG8NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBleHBsYWluDQo+Pj4+PiANCj4+Pj4+Pj4+PiBzZXJ2ZXIg YmVoYXZpb3IgYSBsaXR0bGUgYmV0dGVyOg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICJBIFRVUk4gYW55 Y2FzdCBzZXJ2ZXIgcGVyZm9ybXMgY2hlY2tzIDEgdG8gNyBkaXNjdXNzZWQgaW4NCj4+Pj4gU2Vj dGlvbg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IDYuMiBvZg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gUkZDNTc2 Ni4gSWYgYWxsIGNoZWNrcyBwYXNzLCB0aGUgVFVSTiBhbnljYXN0IHNlcnZlciBNVVNUDQo+PiBy ZXNwb25kDQo+Pj4+PiANCj4+Pj4+Pj4+PiB3aXRoIGENCj4+Pj4+IA0KPj4+Pj4+Pj4+IDMwMCAo VHJ5IEFsdGVybmF0ZSkgZXJyb3IgYXMgZGVzY3JpYmVkIGluIFtSRkM1NzY2XTsiDQo+Pj4+PiAN Cj4+Pj4+Pj4+Pj4gZG9lcyBub3QgaGVscCBhbmQgSSByZXNwb25kZWQ6IFtLYXJsXSBUaGF0IG11 c3QgYmUgYW4gdXBkYXRlIG9mDQo+Pj4+PiANCj4+Pj4+PiBSRkM1NzY2Lg0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4gT3IgZG9lcyAiVFVSTiBhbnljYXN0IHNlcnZlciIgaW1wbHkgdGhhdCB0aGVyZSBBTFNP IGlzIGEgIlRVUk4NCj4+Pj4+IA0KPj4+Pj4+Pj4+IHVuaWNhc3Qgc2VydmVyIiBhdCB0aGUgc2Ft ZSBpbnRlcmZhY2UgYWNjZXB0aW5nIHRoZSBBbGxvY2F0ZQ0KPj4+PiByZXF1ZXN0Pw0KPj4+Pj4g DQo+Pj4+Pj4+Pj4gV2hhdCBhcmUgdGhlc2UgdGhpbmdzPw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4+IEkgaGF2ZSBwcm9wb3NlZCB0aGlzIG1vZGlmaWNhdGlvbiBvZiB0 aGUgYW55Y2FzdCBtZXRob2QsIHdoaWNoDQo+PiBpcw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGJldHRl cg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gKGluIHNldmVyYWwgYXNwZWN0cykgYW5kIGRvZXNuJ3QgbmVl ZCB0byB1cGRhdGUgUkZDNTc2NjoNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+ Pj4+PiAiV2hlbiBhIGNsaWVudCByZXF1aXJlcyBUVVJOIHNlcnZpY2VzLCBpdCBzZW5kcyBhIFNU VU4gYmluZGluZw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IHJlcXVlc3QgdG8NCj4+Pj4+IA0KPj4+Pj4+ Pj4+IHRoZSBhc3NpZ25lZCBhbnljYXN0IGFkZHJlc3MuICBUaGUgU1RVTiBzZXJ2ZXINCj4+Pj4+ IA0KPj4+Pj4+Pj4+PiByZXNwb25kcyB3aXRoIGEgMzAwIChUcnkgQWx0ZXJuYXRlKSBlcnJvciBh cyBkZXNjcmliZWQgaW4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBbUkZDNTM4OV07IFRoZQ0KPj4+Pj4g DQo+Pj4+Pj4+Pj4gcmVzcG9uc2UgY29udGFpbnMgYSB1bmljYXN0IGFkZHJlc3MgaW4gdGhlIEFM VEVSTkFURS1TRVJWRVINCj4+Pj4+IA0KPj4+Pj4+Pj4+IGF0dHJpYnV0ZSwgd2hpY2ggdGhlIGNs aWVudCBjb21wYXJlcyB3aXRoIHRoZSBzb3VyY2UgYWRkcmVzcyBvZg0KPj4gdGhlDQo+Pj4+PiAN Cj4+Pj4+Pj4+PiByZXNwb25zZSBhbmQgaWYgdGhlDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gYWRkcmVz c2VzIGFyZSB0aGUgc2FtZSwgaXQgaXMgYW4gaW5kaWNhdGlvbiB0byB1c2UgdGhlIFRVUk4NCj4+ IHNlcnZlcg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGF0IHRoYXQNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGFk ZHJlc3MuDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gRm9yIHN1YnNl cXVlbnQgY29tbXVuaWNhdGlvbiB3aXRoIHRoZSBUVVJOIHNlcnZlciwgdGhlIGNsaWVudA0KPj4+ PiB1c2VzDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gdGhhdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gcmVzcG9u ZGluZyBzZXJ2ZXIncyB1bmljYXN0IGFkZHJlc3MuIg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+ Pj4gDQo+Pj4+Pj4+Pj4+IFRoZSBzZW50ZW5jZSBpbiB0aGUgLTEwIGRyYWZ0IHVuZGVyICIzIERp c2NvdmVyeSBQcm9jZWR1cmUiOg0KPj4gIm5vdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGFsbCBUVVJO DQo+Pj4+PiANCj4+Pj4+Pj4+PiBzZXJ2ZXJzIG1heSBzdXBwb3J0IGFueWNhc3QiIGNhbiB0aGVu IGJlIHJlbW92ZWQuDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+ Pj4+PiANCj4+Pj4+Pj4+Pj4gKDMpIEkgY2Fubm90IHNlZSB0aGlzIC0xMCBkcmFmdCB0ZWxsaW5n IHdoaWNoIGRpc2NvdmVyeSBtZXRob2QNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiB0aGF0IGlzIGZpdA0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4gZm9yIHRoZSBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlIGxv Y2FsIG9yIGFjY2VzcyBuZXR3b3JrICh0aGUNCj4+Pj4+IA0KPj4+Pj4+Pj4+IG5ldHdvcmsgcHJv dmlkZWQgVFVSTiBzZXJ2ZXIpLiBIb3dldmVyLCB0aGVyZSBhcmUgY29uZnVzaW5nDQo+Pj4+IGNs aWVudA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gYmVoYXZpb3IgcmVjb21tZW5kYXRpb25zLCBsaWtlIHRo ZSBzZW50ZW5jZXMgaW4gdGhlIGRyYWZ0IHVuZGVyDQo+PiAiMw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4g RGlzY292ZXJ5DQo+Pj4+PiANCj4+Pj4+Pj4+PiBQcm9jZWR1cmUiOiAiRm9yIGJlc3QgcmVzdWx0 cywgYSBjbGllbnQgU0hPVUxEIGltcGxlbWVudCBhbGwNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGRpc2Nv dmVyeSBtZWNoYW5pc21zIGRlc2NyaWJlZCBhYm92ZS4iIGFuZCB1bmRlciAiMQ0KPj4+PiBJbnRy b2R1Y3Rpb24iOg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gInRocmVlIGRpc2NvdmVyeSBtZWNoYW5pc21z LCBzbyBhcyB0byBtYXhpbWl6ZSBvcHBvcnR1bml0eSBmb3INCj4+Pj4+IA0KPj4+Pj4+Pj4+IGRp c2NvdmVyeSwgYmFzZWQgb24gdGhlIG5ldHdvcmsgaW4gd2hpY2ggdGhlIFRVUk4gY2xpZW50IGZp bmRzDQo+Pj4+IGl0c2VsZi4iDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+ Pj4gQSBuZXR3b3JrIHByb3ZpZGVkIFRVUk4gc2VydmVyIGlzIG9ubHkgbWVhbnQgZm9yIHRoZSB1 c2VycyBvbg0KPj4gdGhlDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gc3BlY2lmaWMNCj4+Pj4+IA0KPj4+ Pj4+Pj4+IG5ldHdvcmsgLSBvdGhlcnMgc2hvdWxkIG5vdCBiZSBhYmxlIHRvIHVzZSBzdWNoIFRV Uk4gc2VydmVyLCBhbmQNCj4+IGl0DQo+Pj4+PiANCj4+Pj4+Pj4+PiB3b3VsZCB0aGVuIGJlIHBy ZWZlcnJlZCB0aGF0IGl0IGlzIG9ubHkgYWR2ZXJ0aXplZCBhbmQgZGlzY292ZXJlZA0KPj4+Pj4g DQo+Pj4+Pj4+Pj4gYXQgdGhhdCBsb2NhbCBuZXR3b3JrIC0gd2hpY2ggaXMgYmFkbHkgZGVzY3Jp YmVkIGJ5ICJtYXhpbWl6ZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gb3Bwb3J0dW5pdHkNCj4+Pj4+IA0K Pj4+Pj4+IGZvcg0KPj4+Pj4gDQo+Pj4+Pj4+IGRpc2NvdmVyeSIuDQo+Pj4+PiANCj4+Pj4+Pj4+ Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gSWYgYSBETlMgbWV0aG9kIHdvdWxkIGJlIHVzZWQgdG8g ZGlzY292ZXIgdGhlIG5ldHdvcmsNCj4+IHByb3ZpZGVkDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gVFVS Tg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gc2VydmVyLCBpdHMgcHJpdmF0ZSBhZGRyZXNzIHNob3VsZCBv bmx5IGJlIGNvbmZpZ3VyZWQgaW4gcHJpdmF0ZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gKGxvY2FsKSBE TlMgKHdlIGRvbid0IGxpa2UgdG8gcHV0IG91ciBwcml2YXRlIElQIGFkZHJlc3NlcyBpbg0KPj4+ Pj4gDQo+Pj4+Pj4+Pj4gcHVibGljIEROUyksIGJ1dCBJIHNlZSBubyBzdWNoIHJlY29tbWVuZGF0 aW9uLiBGdXJ0aGVyLCB0aGUgRE5TDQo+Pj4+PiANCj4+Pj4+Pj4+PiBtZXRob2RzIGFyZSBjb21w bGV4IGFuZCBleHBlbnNpdmUgdG8gZGVwbG95IGFuZCBvbmUgb2YgdGhlbQ0KPj4+PiBkZXBlbmRz DQo+Pj4+PiANCj4+Pj4+Pj4+PiBvbiBESENQIHRoYXQgaXMgbm90IGF2YWlsYWJsZSBvbiBhbGwg YWNjZXNzIG5ldHdvcmtzLiBUaGF0IG1ha2VzDQo+PiAoYQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gd29y a2luZykgYW55Y2FzdCBkaXNjb3ZlcnkgbWV0aG9kIHRoZSBjbGVhciBjaG9pY2UgZm9yIGEgVFVS Tg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gc2VydmVyIHByb3ZpZGVkIGJ5DQo+Pj4+PiANCj4+Pj4+Pj4g dGhlIGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrLg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4g DQo+Pj4+Pj4+Pj4+IE5ldHdvcmsgcHJvdmlkZWQgVFVSTiBzZXJ2ZXJzIHBhcmFsbGVsaW5nIGEN Cj4+IE5BVC9maXJld2FsbC9hY2Nlc3MNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHJvdXRlci9kZWZhdWx0 IGdhdGV3YXkgaXMgYSBuZXcgY29uY2VwdCB0aGF0IGNhbWUgdXAgZHVyaW5nDQo+Pj4+IFdlYlJU Qw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gc3RhbmRhcmRpemF0aW9uIHdvcmsgdG8gZGVhbCB3aXRoIHRy YXZlcnNhbCBhbmQgcXVhbGl0eSBwcm9ibGVtcw0KPj4gb2YNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHJl YWwtdGltZSB0cmFmZmljLiBIb3dldmVyLCB0aGlzIGRyYWZ0IGdpdmUgbGl0dGxlIG9yIG5vIGd1 aWRhbmNlDQo+Pj4+PiANCj4+Pj4+Pj4+PiBmb3IgZGVwbG95bWVudCBhbmQgSSB0aGVyZWZvcmUg c3VnZ2VzdCB0aGF0IGEgc2VwYXJhdGUgc2VjdGlvbiBpcw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gYWRk ZWQsIHRoYXQgc3BlbGxzIG91dCB0aGUgZGVwbG95bWVudCBjb25zaWRlcmF0aW9ucyBmb3IgVFVS Tg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gc2VydmVycyBwcm92aWRlZCBieSB0aGUgbG9jYWwgb3IgYWNj ZXNzIG5ldHdvcmsgKHdoaWNoIG5vdyBpcw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gbWlzc2luZywgYnV0 IEkgcHJvcG9zZSB0aGUgZm9sbG93aW5nDQo+Pj4+PiANCj4+Pj4+Pj4+PiB0ZXh0KToNCj4+Pj4+ IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAo NCkgIkRlcGxveW1lbnQgQ29uc2lkZXJhdGlvbnMgZm9yIFRVUk4gU2VydmVycyBQcm92aWRlZCBi eQ0KPj4gdGhlDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gTG9jYWwgb3INCj4+Pj4+IA0KPj4+Pj4+Pj4+ IEFjY2VzcyBOZXR3b3JrIg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IChTdWdnZXN0ZWQgdGV4dCBmb3Ig YW4gYWRkaXRpb25hbCBzZWN0aW9uKQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4+IFRoZSBjb25jZXB0IG9mIHBhcmFsbGVsaW5nIGEgTkFUL2ZpcmV3YWxsL2FjY2Vzcy1y b3V0ZXIvZGVmYXVsdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGdhdGV3YXkgYXQNCj4+Pj4+IA0KPj4+ Pj4+Pj4+IHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yayB3aXRoIGEgVFVSTiBzZXJ2ZXIsIHRv IGRlYWwgd2l0aA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gdHJhdmVyc2FsIGFuZCBxdWFsaXR5IHByb2Js ZW1zIG9mIHJlYWwtdGltZSB0cmFmZmljLCBpcyBuZXcgYW5kDQo+Pj4+PiANCj4+Pj4+Pj4+PiBj YW1lIHVwIGR1cmluZyB0aGUgV2ViUlRDIHN0YW5kYXJkaXphdGlvbiB3b3JrLg0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IFN1Y2ggbmV0d29yayBwcm92aWRlZCBUVVJO IHNlcnZlcnMsIG9ubHkgYWNjZXNzaWJsZSBieSB0aGUNCj4+IHVzZXJzDQo+Pj4+PiANCj4+Pj4+ Pj4+Pj4gb24gdGhlDQo+Pj4+PiANCj4+Pj4+Pj4+PiBsb2NhbCBvciBhY2Nlc3MgbmV0d29yaywg bXVzdCBiZSBhdXRvbWF0aWNhbGx5IGRpc2NvdmVyZWQgYW5kDQo+PiB1c2VkLA0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4gd2l0aG91dCBzcGVjaWZpYyBjb25maWd1cmF0aW9uIG9yIGhhdmluZyBjcmVkZW50 aWFscyBmb3INCj4+Pj4+IA0KPj4+Pj4+Pj4+IGF1dGhlbnRpY2F0aW9uIG9yIGNlcnRpZmljYXRl cyBmb3IgdmFsaWRhdGlvbiwgdG8gYmUgdXNlZnVsIGZvciBlLmcuDQo+Pj4+PiANCj4+Pj4+Pj4+ PiBhIFdlYlJUQyBicm93c2VycyB0byBhbGxvdyBxdWFsaXR5IG1lZGlhIHRyYWZmaWMgImV2ZXJ5 d2hlcmUNCj4+IHlvdQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gY2FuDQo+Pj4+PiANCj4+Pj4+Pj4gc3Vy ZiIuDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gSnVzdCBhcyBmb3Ig dGhlIEludGVybmV0IGFjY2VzcyBpdHNlbGYsIHRoZSBUVVJOIHNlcnZlciBpcyBvZmZlcmVkDQo+ Pj4+PiANCj4+Pj4+Pj4+Pj4gYnkgdGhlDQo+Pj4+PiANCj4+Pj4+Pj4+PiBuZXR3b3JrIHByb3Zp ZGVyIGFuZCB0aGVyZSBpcyBubyBjaGFuZ2UgaW4gdGhlIHRydXN0IG9yIHNlY3VyaXR5DQo+Pj4+ PiANCj4+Pj4+Pj4+PiBsZXZlbCAod2hpY2ggc2hvdWxkIG5vdCBiZSBleHBlY3RlZCkgd2hlbiBy ZWFsLXRpbWUgdHJhZmZpYyBmbG93cw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gdGhyb3VnaCB0aGUgVFVS TiBzZXJ2ZXIgcGF0aCwgdGhhbiB0aHJvdWdoIHRoZSBkZWZhdWx0IGdhdGV3YXkNCj4+Pj4gcGF0 aC4NCj4+Pj4+IA0KPj4+Pj4+Pj4+IChUaGUgcHVycG9zZSBvZiB0aGUgbmV0d29yayBwcm92aWRl ZCB0dXJuIHNlcnZlciBpcyB0byBhbGxvdw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gdHJhdmVyc2FsIG9m IHJlYWwtdGltZSBtZWRpYSB0cmFmZmljIGluIGVudmlyb25tZW50cyB3aXRoDQo+Pj4+PiANCj4+ Pj4+Pj4+PiByZXN0cmljdGl2ZSBOQVQvZmlyZXdhbGxzIGNsb3NlZCBmb3IgVURQIHRyYWZmaWMg YW5kL29yIHRvIGFsbG93DQo+Pj4+PiANCj4+Pj4+Pj4+PiBiZXR0ZXIgcXVhbGl0eSB0aHJvdWdo IHRoZSBvZnRlbiBkYXRhIGNvbmdlc3RlZCByb3V0ZXIgYXQgdGhlDQo+Pj4+PiANCj4+Pj4+Pj4+ PiBkZWZhdWx0DQo+Pj4+PiANCj4+Pj4+Pj4+PiBnYXRld2F5LikNCj4+Pj4+IA0KPj4+Pj4+Pj4+ PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBUaGUgZGlzY292ZXJ5IG9mIHRoZSBuZXR3b3JrIHByb3Zp ZGVkIFRVUk4gc2VydmVyIHNob3VsZCBtZWV0DQo+Pj4+IHRoZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ IGF1dG8NCj4+Pj4+IA0KPj4+Pj4+Pj4+IGNvbmZpZ3VyYXRpb24gb2YgUkZDIDc0NzggKFdlYiBS ZWFsLVRpbWUgQ29tbXVuaWNhdGlvbiBVc2UNCj4+Pj4gQ2FzZXMNCj4+Pj4+IA0KPj4+Pj4+Pj4+ IGFuZA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gUmVxdWlyZW1lbnRzKSAyLjMuNS4xLiBhbmQgZHJhZnQt aWV0Zi1ydGN3ZWItcmV0dXJuLTAxIGlzIGRlZmluaW5nDQo+Pj4+PiANCj4+Pj4+Pj4+PiB0aGUg VFVSTiBjbGllbnQgYmVoYXZpb3IgZm9yIFdlYlJUQyBicm93c2Vycy4NCj4+Pj4+IA0KPj4+Pj4+ Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBGb3IgcXVhbGl0eSByZWFzb25zLCBhIHNlYWxlZCBu ZXR3b3JrIGNvbmZpZ3VyYXRpb24gLSBpLmUuIHRoZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IG1lZGlh IGhhcw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gdG8gZ28gdGhyb3VnaCB0aGUgVFVSTiBzZXJ2ZXIsIG5v dCB0aHJvdWdoIHRoZSBkZWZhdWx0IGdhdGV3YXkNCj4+IChieQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4g dXNpbmcgU1RVTiBpbnN0ZWFkIG9mIFRVUk4pIC0gaXMgdGhlIHR5cGljYWwgaW50ZW50aW9uIHdo ZW4gYQ0KPj4gVFVSTg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gc2VydmVyIGlzIGRlcGxveWVkIGluIHRo ZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yay4gVGhlIHNlYWxlZA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4g Y29uZmlndXJhdGlvbiBjYW4gYmUgZW5mb3JjZWQgYW5kIHNpZ25hbGVkIHRvIHRoZSBUVVJOIGNs aWVudCBieQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gdGhlIG5ldHdvcmsgcHJvdmlkZXIgYmxvY2tpbmcg U1RVTiBwYWNrZXRzIGF0IHRoZSBkZWZhdWx0DQo+PiBnYXRld2F5Lg0KPj4+Pj4gDQo+Pj4+Pj4+ Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IEEgbmV0d29yayBjb25maWd1cmF0aW9uIGVuZm9yY2lu ZyBzZWFsZWQgYmVoYXZpb3IsIGhhcyB0aGUNCj4+IGdvb2QNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBl ZmZlY3Qgb2YNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGFsbG93aW5nIHRoZSBUVVJOIGNsaWVudCAoZS5n LiBhIFdlYlJUQyBicm93c2VyKSBpbiBpdHNlbGYgdG8gaGF2ZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4g YQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gbm9uLSBzZWFsZWQgZGVmYXVsdCBjb25maWd1cmF0aW9uLiAo aWV0Zi1ydGN3ZWItcmV0dXJuLTAxIGV4cGxhaW5zDQo+Pj4+PiANCj4+Pj4+Pj4+PiB0aGF0IGEg c2VhbGVkIGRlZmF1bHQgY29uZmlndXJhdGlvbiBpbiB0aGUgYnJvd3NlciBpdHNlbGYsIHdvdWxk DQo+Pj4+PiANCj4+Pj4+Pj4+PiByZXN1bHQgaW4gdGhhdCBtZWRpYSBiZXR3ZWVuIGxvY2FsIGNs aWVudHMgd291bGQgaGF2ZSB0byBwYXNzIHRoZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gVFVSTiBzZXJ2 ZXIsIHdoaWNoIGlzIG5vdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gZGVzaXJhYmxlLikNCj4+Pj4+IA0K Pj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBUaGUgYWJvdmUgYXNzdW1lcyB0aGF0IHRo ZSBUVVJOIGNsaWVudCB1c2luZyBhIFRVUk4gc2VydmVyIGluDQo+Pj4+IHRoZQ0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4+IGxvY2FsIG9yDQo+Pj4+PiANCj4+Pj4+Pj4+PiBhY2Nlc3MgbmV0d29yayBzaGFs bCB1c2UgdW5lbmNyeXB0ZWQgU1RVTi9UVVJOIChvdmVyIFVEUCBmb3INCj4+Pj4gYmVzdA0KPj4+ Pj4gDQo+Pj4+Pj4+Pj4gcXVhbGl0eSkgc28gdGhlIFNUVU4gY29va2llIGNhbiBiZSBkZXRlY3Rl ZCBhbmQgc3RvcHBlZCBpbiB0aGUNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGRlZmF1bHQNCj4+Pj4+IA0K Pj4+Pj4+PiBnYXRld2F5Lg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ IEEgVFVSTiBzZXJ2ZXIgaW5jbHVkZWQgaW4gdGhlIHJvdXRlciBhdCB0aGUgZGVmYXVsdCBnYXRl d2F5LA0KPj4gdGhhdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gaW50ZXJjZXB0cyBhbmQgcmVzcG9uZHMg dG8gYW4gYWxsb2NhdGUgcmVxdWVzdCwgc2hvdWxkICAgYmUNCj4+IHRyZWF0ZWQNCj4+Pj4gYXMN Cj4+Pj4+IA0KPj4+Pj4+IGENCj4+Pj4+IA0KPj4+Pj4+Pj4+IGRpc2NvdmVyZWQgbmV0d29yayBw cm92aWRlZCBzZWFsZWQgVFVSTiBzZXJ2ZXIgY29uZmlndXJhdGlvbg0KPj4gYnkgYQ0KPj4+Pj4g DQo+Pj4+Pj4+Pj4gVFVSTiBjbGllbnQgKHdpdGhvdXQgaGF2aW5nIHRvIHJldmlldyBhbnkgMzAw IFRyeSBBbHRlcm5hdGUNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHJlc3BvbnNlIGFzIG91dGxpbmVkIGlu IGFueWNhc3QgbWV0aG9kIGRlc2NyaXB0aW9uKSBhbGxvd2luZyBmb3INCj4+Pj4+IA0KPj4+Pj4+ Pj4+IHRvbGVyYW50IGFuZA0KPj4+Pj4gDQo+Pj4+Pj4gc2VjdXJlDQo+Pj4+PiANCj4+Pj4+Pj4g ZGVwbG95bWVudC4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBBIHdl YiBhcHBsaWNhdGlvbiB0aGF0IHdhbnRzIHRvIHRyeSB0aGUgZGVmYXVsdCBnYXRld2F5IHBhdGgN Cj4+Pj4+IA0KPj4+Pj4+Pj4+PiBpbnN0ZWFkIG9mDQo+Pj4+PiANCj4+Pj4+Pj4+PiB0aGUgVFVS TiBzZXJ2ZXIgcGF0aCAoaW4gc3BpdGUgb2YgYSBzZWFsZWQgbmV0d29yayBjb25maWd1cmF0aW9u KQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gY2FuIHN1Z2dlc3QgZW5jcnlwdGVkIChEKVRMUyBTVFVOIGFu ZCBUVVJOIGNhbmRpZGF0ZXMgdGhhdCB3aWxsDQo+Pj4+IG5vdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4g YmUgYmxvY2tlZCBieSBTVFVOIGNvb2tpZSByZWNvZ25pdGlvbiBhdCB0aGUgZGVmYXVsdCBnYXRl d2F5LiBJdA0KPj4gaXMNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHRoZW4gdXAgdG8gYXBwbGljYXRpb24n cyBUVVJOIGNsaWVudCB3aGV0aGVyIHRvIHRyeSB0aGUgZGVmYXVsdA0KPj4+Pj4gDQo+Pj4+Pj4+ Pj4gZ2F0ZXdheQ0KPj4+Pj4gDQo+Pj4+Pj4gcGF0aC4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+ Pj4+IA0KPj4+Pj4+Pj4+PiBBIGZ1cnRoZXIgYWR2YW50YWdlIG9mIGRldGVjdGluZyBhIHNlYWxl ZCBuZXR3b3JrDQo+PiBjb25maWd1cmF0aW9uLA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGlzIHRoYXQg YQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gVFVSTiBjbGllbnQgY2FuIHNlbGVjdCB0byAqb25seSBpbiBh IHNlYWxlZCBuZXR3b3JrDQo+PiBjb25maWd1cmF0aW9uKg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gbG9v ayBmb3IgYSBUVVJOIHNlcnZlciBieSB0aGUgYW55Y2FzdCBtZXRob2QgZm9yIGRpc2NvdmVyeSwg dGh1cw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gZWxpbWluYXRpbmcgdGhlIGxlYWthZ2UgcmlzayBtZW50 aW9uZWQgdW5kZXIgOS4zLiBGdXJ0aGVyLCB0aGVyZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gd2lsbCBi ZSBubyByaXNrIHRoYXQgYSBmYXIgYXdheSBUVVJOIHNlcnZlciB3aWxsIGJlIGRpc2NvdmVyZWQg YW5kDQo+Pj4+PiANCj4+Pj4+Pj4+PiB1c2VkIGFuZCB0aGVyZSB3aWxsIGJlIG5vIG5lZWQgZm9y IHRoZSBUVEwgbGltaXRhdGlvbiBzdWdnZXN0ZWQNCj4+Pj4gdW5kZXIgOS4zLg0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IFRoZSBhbnljYXN0IGRpc2NvdmVyeSBtZXRo b2QsIGNvbWJpbmVkIHdpdGggdGhlIGFib3ZlDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gcmVjb21tZW5k YXRpb25zLA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gYWxsb3cgZm9yIGFuIGVhc3kgYW5kIHJvYnVzdCBk ZXBsb3ltZW50IG9mIG5ldHdvcmsgcHJvdmlkZWQNCj4+IFRVUk4NCj4+Pj4+IA0KPj4+Pj4+Pj4+ IHNlcnZlcnMsIGZpdHRpbmcgYWxsIHR5cGVzIG9mIGxvY2FsIGFuZCBhY2Nlc3MgbmV0d29ya3Mu DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gVGhlIEROUyBiYXNlZCBt ZXRob2RzIG9mIHRoaXMgc3BlY2lmaWNhdGlvbiBhcmUgbW9yZSBjb21wbGV4DQo+Pj4+IGFuZA0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4+IGV4cGVuc2l2ZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gdG8gZGVwbG95 IGFuZCBvbmUgb2YgdGhlbSBkZXBlbmRzIG9uIERIQ1AgdGhhdCBpcyBub3QgYXZhaWxhYmxlDQo+ PiBvbg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gYWxsIGFjY2VzcyBuZXR3b3Jrcy4gSWYgYW55IG9mIHRo ZSBETlMgYmFzZWQgbWV0aG9kcyBpcyB1c2VkIHRvDQo+Pj4+PiANCj4+Pj4+Pj4+PiBhZHZlcnRp emUgYW5kIGRpc2NvdmVyIGEgVFVSTiBpbiB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmssIGl0 cw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gcHJpdmF0ZSBhZGRyZXNzZXMgc2hvdWxkIG9ubHkgYmUgY29u ZmlndXJlZCBpbiBwcml2YXRlIChsb2NhbCkgRE5TDQo+Pj4+PiANCj4+Pj4+Pj4+PiBhbmQgbm90 IGJlIHB1Ymxpc2hlZCBwdWJsaWNseSwgd2hpY2ggYWRkcyBmdXJ0aGVyIHRvIHRoZQ0KPj4gY29t cGxleGl0eQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gYW5kDQo+Pj4+PiANCj4+Pj4+Pj4gY29zdCBvZiBk ZXBsb3ltZW50Lg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+ Pj4gDQo+Pj4+Pj4+Pj4+ICg1KSBNb3N0IChhbGw/KSBvZiB3aGF0IGlzIGNvbnNpZGVyZWQgYW5k IHN1bW1lZCB1cCB1bmRlciAoNCkNCj4+Pj4gKHRoZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gc3VnZ2Vz dGVkIGFkZGl0aW9uYWwgdGV4dCksIGhhcyBiZWVuIGJyb3VnaHQgZm9yd2FyZCBvbiB0aGUNCj4+ IFRSQU0NCj4+Pj4gV0cNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGxpc3QgYmVmb3JlLCBidXQgbm90IGJy b3VnaHQgaW50byB0aGUgY3VycmVudCAtMTAgZHJhZnQsIHNlZToNCj4+Pj4+IA0KPj4+Pj4+Pj4+ PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPj4+PiBhcmNoaXZlL3dlYi90cmFtL2N1cnJl bnQvbXNnMDAxMzIuaHRtbA0KPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50 LmNvbS92Mi91cmw/dT1odHRwcy0NCj4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPj4+PiAN Cj4+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAwMTMyLmh0bWwmZD1EZ01GYVEmYz05 NlpiWlpjYU1GNA0KPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPj4+ PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4+Pj4gTVZRaTJsVmJFX3M0dWx4NGhu aEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1JNHRYX3ZRZC0NCj4+Pj4gQU5WOGNCalBHbEhsRklWRVVa LTNsWW1WSTZHYkd0anh2YyZlPT4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsLQ0KPj4+PiBhcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDAxMzguaHRtbA0K Pj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRw cy0NCj4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPj4+PiANCj4+IDJEYXJjaGl2ZV93ZWJf dHJhbV9jdXJyZW50X21zZzAwMTM4Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPj4+PiB3 MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPj4+PiBOU25zZ3diQlZVSmE0bVpm bUVJQlhnJm09TFhhSC0NCj4+Pj4gDQo+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVp a3pBdXBSOCZzPUpKV1Z5UGhoVGJoVHBrY09tUVJkQg0KPj4+PiA0OWh4MmdPTU5LT0w3cU1UM2Jx NjMwJmU9Pg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtDQo+ Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMTcyMS5odG1sDQo+Pj4+PiAgICA8aHR0 cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPj4+PiAzQV9f d3d3LmlldGYub3JnX21haWwtDQo+Pj4+IA0KPj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJlbnRf bXNnMDE3MjEuaHRtbCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+Pj4+IHcwRjRqcE42TFpnJnI9 YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFI LQ0KPj4+PiANCj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9UW5i Sk9zWUF2dURXcjlZeUVHc3hVDQo+Pj4+IE92OFMxaGE4b3c5RG81VkRPcTZHczAmZT0+DQo+Pj4+ PiANCj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4+Pj4gYXJjaGl2ZS93 ZWIvdHJhbS9jdXJyZW50L21zZzAxNzQ1Lmh0bWwNCj4+Pj4+ICAgIDxodHRwczovL3VybGRlZmVu c2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+Pj4+IDNBX193d3cuaWV0Zi5vcmdf bWFpbC0NCj4+Pj4gDQo+PiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9tc2cwMTc0NS5odG1s JmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4+Pj4gdzBGNGpwTjZMWmcmcj1id1otbm5SR1dtY0dL Ukl1YWRxNi0NCj4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+Pj4+IA0KPj4g TVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1kdUVEM1lSd19nUGlMd1Bu akM3emdXDQo+Pj4+IDBLYlFYcVFCak4tQkpDNGJ6bXQ0NCZlPT4NCj4+Pj4+IA0KPj4+Pj4+Pj4+ PiBUaGUgbGlua3MgZ2l2ZW4gdW5kZXIgKDEpIGFuZCAoMikgYWJvdmUNCj4+Pj4+IA0KPj4+Pj4+ Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPj4+PiBhcmNoaXZlL3dlYi90cmFtL2N1 cnJlbnQvbXNnMDIxNTUuaHRtbA0KPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBv aW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPj4+ PiANCj4+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAyMTU1Lmh0bWwmZD1EZ01GYVEm Yz05NlpiWlpjYU1GNA0KPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0K Pj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4+Pj4gTVZRaTJsVmJFX3M0dWx4 NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz01ZnhqdFJmMk5kdDlSLQ0KPj4+PiBSRHdXcGdHMGQ3 bWN0cFVUMmxVWnJLR2FUaFo0MCZlPT4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+ Pj4+Pj4+PiAvS2FybA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4+IC0tLS0tVXJzcHJ1bmdsaWd0IG1lZGRlbGFuZGUtLS0tLQ0KPj4+ Pj4gDQo+Pj4+Pj4+Pj4+IEZyw6VuOiB0cmFtIFttYWlsdG86dHJhbS1ib3VuY2VzQGlldGYub3Jn XSBGw7ZyIFByYXNoYW50aCBQYXRpbA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IChwcmFzcGF0aSkNCj4+ Pj4+IA0KPj4+Pj4+Pj4+PiBTa2lja2F0OiBkZW4gMiBub3ZlbWJlciAyMDE2IDIyOjE4DQo+Pj4+ PiANCj4+Pj4+Pj4+Pj4gVGlsbDogdHJhbUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+ DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gS29waWE6IHRyYW0tY2hhaXJzQGlldGYub3JnIDxtYWlsdG86 dHJhbS1jaGFpcnNAaWV0Zi5vcmc+OyBEYW4NCj4+Pj4gV2luZzsNCj4+Pj4+ICAgIFNwZW5jZXIg RGF3a2lucyBhdCBJRVRGOw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gVGlydW1hbGVzd2FyIFJlZGR5ICh0 aXJlZGR5KQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IMOEbW5lOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFt LXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4+IFRoZSBUVVJOIGRpc2NvdmVyeSBkcmFmdCBvcmlnaW5hbGx5IHN1Z2dlc3RlZCB0aGF0 IFNUVU4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBhdXRoZW50aWNhdGlvbiBiZQ0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4gcmVsYXhlZCBhbmQgbWFkZSBPUFRJT05BTCBmb3IgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVk IGJ5IHRoZQ0KPj4gbG9jYWwNCj4+Pj4gb3INCj4+Pj4+IA0KPj4+Pj4+Pj4+IGFjY2VzcyBuZXR3 b3JrLiBUaGUgaW50ZW50aW9uIHdhcyB0byBhbGxvdyBuZXcvZ3Vlc3QgdXNlcnMgKHdobw0KPj4+ PiBkbw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gbm90IG5lY2Vzc2FyaWx5IHBvc3Nlc3MgbG9uZyB0ZXJt IGNyZWRlbnRpYWxzIGZvciBTVFVODQo+Pj4+PiANCj4+Pj4+Pj4+PiBhdXRoZW50aWNhdGlvbikg aW4gdGhlIG5ldHdvcmsgdG8gZGlzY292ZXIgYW5kIHVzZSBUVVJOIHNlcnZpY2VzDQo+Pj4+PiAN Cj4+Pj4+PiBvZmZlcmVkDQo+Pj4+PiANCj4+Pj4+Pj4gYnkgdGhlIG5ldHdvcmsuDQo+Pj4+PiAN Cj4+Pj4+Pj4+Pj4gQmVuIENhbXBiZWxsIHJhaXNlZCBhbiBvYmplY3Rpb24gZHVyaW5nIElFU0cg ZXZhbHVhdGlvbiB0aGF0IHdlDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gY2xlYXJseQ0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4gaW5kaWNhdGUgdGhhdCB0aGlzIGlzIGEgZG93bmdyYWRlIG9mIGEgTVVTVCBsZXZl bCByZXF1aXJlbWVudA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gZGVmaW5lZCBpbiBbUkZDNTc2Nl0gYW5k IGV4cGxhaW4gaXRzIGNvbnNlcXVlbmNlcy4gSXQgd2FzIGFsc28NCj4+Pj4+IA0KPj4+Pj4+Pj4+ IHJpZ2h0bHkgc3VnZ2VzdGVkIHRoYXQgd2UgbWFuZGF0ZSB0aGUgdXNlIG9mIChEKVRMUyBpbiB0 aGUNCj4+IGFic2VuY2UNCj4+Pj4+IA0KPj4+Pj4+Pj4+IG9mIFNUVU4gYXV0aGVudGljYXRpb24g Zm9yIHByb3RlY3Rpb24gYWdhaW5zdCBhIHZhcmlldHkgb2YgYXR0YWNrczsNCj4+Pj4+IA0KPj4+ Pj4+Pj4+IHRoZSBkcmFmdCBub3cgbWFrZXMgaXQgYSBNVVNUIHRoYXQgVFVSTiBzZXJ2ZXJzIHVz ZSAoRClUTFMgaW4NCj4+IHRoZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gYWJzZW5jZSBvZiBTVFVODQo+ Pj4+PiANCj4+Pj4+Pj4gYXV0aGVudGljYXRpb24uDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+ PiANCj4+Pj4+Pj4+Pj4gVG8gcHV0IGl0IHNpbXBseSwgdGhlIGRyYWZ0IG1hbmRhdGVzIHRoYXQg VFVSTiBzZXJ2ZXJzIGluIGEgbG9jYWwNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBvcg0KPj4+Pj4gDQo+ Pj4+Pj4+Pj4gYWNjZXNzIG5ldHdvcmsgZG8gYXQgbGVhc3Qgb25lIG9mIChEKVRMUyBvciBTVFVO IGF1dGhlbnRpY2F0aW9uLg0KPj4gSWYNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHlvdSBoYXZlIGFuIG9w aW5pb24gYWJvdXQgdGhpcyBjaGFuZ2UsIHBsZWFzZSBsZXQgdGhlIHdvcmtpbmcNCj4+IGdyb3Vw DQo+Pj4+PiANCj4+Pj4+Pj4+PiBrbm93IG9uIHRoZSBtYWlsaW5nIGxpc3QgYmVmb3JlIHRoZSBl bmQgb2YgSUVURiA5Ny4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBT ZWUgYmVsb3cgZm9yIHNuaXBwZXRzIG9mIHdoYXQgY2hhbmdlZC4NCj4+Pj4+IA0KPj4+Pj4+Pj4+ PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBFeGNlcnB0IGZyb20gU2VjdXJpdHkgQ29uc2lkZXJhdGlv bnMgb2YNCj4+Pj4+IA0KPj4+Pj4+Pj4+IGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNj b3ZlcnktMDk6DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gICAiVXNl IG9mIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSBbUkZDNTM4OV0N Cj4+Pj4+IA0KPj4+Pj4+Pj4+PiAgIGF1dGhlbnRpY2F0aW9uIGlzIE9QVElPTkFMIGZvciBUVVJO IHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlDQo+Pj4+IGxvY2FsDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4g ICBuZXR3b3JrIG9yIGJ5IHRoZSBhY2Nlc3MgbmV0d29yay4gIEEgbmV0d29yayBwcm92aWRlZCBU VVJODQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gc2VydmVyDQo+Pj4+PiANCj4+Pj4+Pj4gTUFZDQo+Pj4+ PiANCj4+Pj4+Pj4+Pj4gICBiZSBjb25maWd1cmVkIHRvIGFjY2VwdCBBbGxvY2F0aW9uIHJlcXVl c3RzIHdpdGhvdXQgU1RVTg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgYXV0aGVudGljYXRpb24sIGFu ZCBhIFRVUk4gY2xpZW50IE1BWSBiZSBjb25maWd1cmVkIHRvDQo+PiBhY2NlcHQNCj4+Pj4+IA0K Pj4+Pj4+Pj4+PiAgIEFsbG9jYXRpb24gc3VjY2VzcyByZXNwb25zZXMgd2l0aG91dCBTVFVOIGF1 dGhlbnRpY2F0aW9uDQo+PiBmcm9tDQo+Pj4+IGENCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAgIG5ldHdv cmsgcHJvdmlkZWQgVFVSTiBzZXJ2ZXIuICBJbiBvcmRlciB0byBwcm90ZWN0IGFnYWluc3QNCj4+ IG1hbi0NCj4+Pj4gaW4tDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gICB0aGUtbWlkZGxlIGF0dGFja3Mg d2hlbiBhY2NlcHRpbmcgYSBUVVJOIGFsbG9jYXRpb24gcmVzcG9uc2UNCj4+Pj4+IA0KPj4+Pj4+ IHdpdGhvdXQNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAgIFNUVU4gYXV0aGVudGljYXRpb24sIGl0IGlz IFJFQ09NTUVOREVEIHRoYXQgdGhlIFRVUk4NCj4+IGNsaWVudA0KPj4+PiB1c2UNCj4+Pj4+IA0K Pj4+Pj4+IG9uZQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgb2YgdGhlIGZvbGxvd2luZyB0ZWNobmlx dWVzIHdpdGggKEQpVExTIHRvIHZhbGlkYXRlIHRoZSBUVVJODQo+Pj4+PiANCj4+Pj4+PiBzZXJ2 ZXIiDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+ Pj4+Pj4+Pj4gVXBkYXRlZCB0ZXh0IGluIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIG9mDQo+Pj4+ PiANCj4+Pj4+Pj4+PiBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5LTEwOg0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgIlVzZSBvZiBTZXNzaW9u IFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgW1JGQzUzODldDQo+Pj4+PiANCj4+ Pj4+Pj4+Pj4gICBhdXRoZW50aWNhdGlvbiBpcyBPUFRJT05BTCBmb3IgVFVSTiBzZXJ2ZXJzIHBy b3ZpZGVkIGJ5IHRoZQ0KPj4+PiBsb2NhbA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgbmV0d29yayBv ciBieSB0aGUgYWNjZXNzIG5ldHdvcmsuICBBIG5ldHdvcmsgcHJvdmlkZWQgVFVSTg0KPj4+Pj4g DQo+Pj4+Pj4+Pj4+IHNlcnZlcg0KPj4+Pj4gDQo+Pj4+Pj4+IE1BWQ0KPj4+Pj4gDQo+Pj4+Pj4+ Pj4+ICAgYmUgY29uZmlndXJlZCB0byBhY2NlcHQgQWxsb2NhdGlvbiByZXF1ZXN0cyB3aXRob3V0 IFNUVU4NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAgIGF1dGhlbnRpY2F0aW9uLCBhbmQgYSBUVVJOIGNs aWVudCBNQVkgYmUgY29uZmlndXJlZCB0bw0KPj4gYWNjZXB0DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4g ICBBbGxvY2F0aW9uIHN1Y2Nlc3MgcmVzcG9uc2VzIHdpdGhvdXQgU1RVTiBhdXRoZW50aWNhdGlv bg0KPj4gZnJvbQ0KPj4+PiBhDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gICBuZXR3b3JrIHByb3ZpZGVk IFRVUk4gc2VydmVyLg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAg TWFraW5nIFNUVU4gYXV0aGVudGljYXRpb24gT1BUSU9OQUwgaXMgYSBkb3duZ3JhZGUgb2YgYQ0K Pj4+PiBNVVNUDQo+Pj4+PiANCj4+Pj4+PiBsZXZlbA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgcmVx dWlyZW1lbnQgZGVmaW5lZCBpbiBbUkZDNTc2Nl0uICBUaGUgZG93bmdyYWRlIGFsbG93cw0KPj4g VFVSTg0KPj4+Pj4gDQo+Pj4+Pj4gc2VydmVycw0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgcHJvdmlk ZWQgYnkgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmsgdG8gYWNjZXB0IEFsbG9jYXRpb24NCj4+IHJl cXVlc3RzDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gICBmcm9tIG5ldyBhbmQvb3IgZ3Vlc3QgdXNlcnMg aW4gdGhlIG5ldHdvcmsgd2hvIGRvIG5vdA0KPj4+PiBuZWNlc3NhcmlseQ0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4+ICAgcG9zc2VzcyBsb25nIHRlcm0gY3JlZGVudGlhbHMgZm9yIFNUVU4gYXV0aGVudGlj YXRpb24uICBUaGUNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAgIGludGVudGlvbiwgaW4gc3VjaCBkZXBs b3ltZW50cywgYmVpbmcgdG8gcHJvdmlkZSBUVVJODQo+PiBzZXJ2aWNlcw0KPj4+Pj4gDQo+Pj4+ Pj4+Pj4+IHRvDQo+Pj4+PiANCj4+Pj4+PiBhbGwNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAgIHVzZXJz IGluIHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yay4gIEhvd2V2ZXIsIHRoaXMgb3BlbnMgdXAg YQ0KPj4+Pj4gDQo+Pj4+Pj4gVFVSTg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgc2VydmVyIHRvIGEg dmFyaWV0eSBvZiBhdHRhY2tzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDE3IG9mDQo+Pj4+PiANCj4+ Pj4+PiBbUkZDNTc2Nl0uDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gICBBIFRVUk4gc2VydmVyIGluIHN1 Y2ggY2FzZXMgbXVzdCBiZSBjb25maWd1cmVkIHRvIG9ubHkNCj4+IHByb2Nlc3MNCj4+Pj4gU1RV Tg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgcmVxdWVzdHMgZnJvbSB0aGUgdHJ1c3RlZCBsb2NhbCBu ZXR3b3JrIG9yIHN1YnNjcmliZXJzIG9mIHRoZQ0KPj4+Pj4gDQo+Pj4+Pj4gYWNjZXNzDQo+Pj4+ PiANCj4+Pj4+Pj4+Pj4gICBuZXR3b3JrLiAgT3BlcmF0aW9uYWwgbWVhc3VyZXMgbXVzdCBiZSB0 YWtlbiBpbiBvcmRlcg0KPj4gcHJvdGVjdA0KPj4+PiB0aGUNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAg IFRVUk4gc2VydmVyOyBzb21lIG9mIHRoZXNlIG1lYXN1cmVzIGluY2x1ZGUsIGJ1dCBub3QgbGlt aXRlZA0KPj4gdG8sDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gICBhY2Nlc3MgY29udHJvbCBieSBtZWFu cyBvZiBhY2Nlc3MtbGlzdHMsIGZpcmV3YWxscywgc3Vic2NyaWJlcg0KPj4+Pj4gDQo+Pj4+Pj4g cXVvdGENCj4+Pj4+IA0KPj4+Pj4+Pj4+PiAgIGxpbWl0cywgaW5ncmVzcyBmaWx0ZXJpbmcgZXRj Lg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgQSBUVVJOIGNsaWVu dCBNVVNUIHVzZSAoRClUTFMgaW4gdGhlIGFic2VuY2Ugb2YgU1RVTiBsb25nLQ0KPj4+PiB0ZXJt DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gICBjcmVkZW50aWFsIG1lY2hhbmlzbSBbUkZDNTM4OV0gb3Ig U1RVTiBFeHRlbnNpb24gZm9yIFRoaXJkLQ0KPj4+PiBQYXJ0eQ0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ ICAgQXV0aG9yaXphdGlvbiBbUkZDNzYzNV0uIg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4g DQo+Pj4+Pj4+Pj4+IFBsZWFzZSByZWZlcg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gaHR0cHM6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnktDQo+ PiAxDQo+Pj4+PiAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91 PWh0dHBzLQ0KPj4+PiAzQV9fdG9vbHMuaWV0Zi5vcmdfaHRtbF9kcmFmdC0yRGlldGYtMkR0cmFt LTJEdHVybi0yRHNlcnZlci0NCj4+IDJEZGlzY292ZXJ5LQ0KPj4+PiAyRDEmZD1EZ01GYVEmYz05 NlpiWlpjYU1GNHcwRjRqcE42TFpnJnI9YndaLQ0KPj4+PiBublJHV21jR0tSSXVhZHE2LU5TbnNn d2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPj4+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhR Szd4UUVpa3pBdXBSOCZzPS0tQi0NCj4+Pj4ga0FwOURlMWY2SGhSS0xFdEQxYlZTMzNCcEcyUzVN WXpXQlFfWURJJmU9Pg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gMCMNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHNl Y3Rpb24NCj4+Pj4+IA0KPj4+Pj4+Pj4+IC05IGZvciBtb3JlIGRldGFpbHMuDQo+Pj4+PiANCj4+ Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gVGhhbmtzLA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+ IEF1dGhvcnMNCj4+Pj4+IA0KPj4+Pj4+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+Pj4+PiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4+Pj4gDQo+Pj4+Pj4+ Pj4+IHRyYW0gbWFpbGluZyBsaXN0DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gdHJhbUBpZXRmLm9yZyA8 bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtDQo+Pj4+PiAgICA8aHR0cHM6Ly91cmxkZWZlbnNl LnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPj4+PiANCj4+IDNBX193d3cuaWV0Zi5v cmdfbWFpbG1hbl9saXN0aW5mb190cmFtJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0ag0KPj4+ PiBwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlC WGcmbT1MWGFILQ0KPj4+PiANCj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1 cFI4JnM9YWhSbjFpZnhuT0FDclZGZ3hKOTkwODYNCj4+Pj4gbkJ1QzYtY3o5SDdHS1lfMEVWOHMm ZT0+DQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+Pj4gX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+Pj4+IA0KPj4+Pj4+Pj4+PiB0 cmFtIG1haWxpbmcgbGlzdA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IHRyYW1AaWV0Zi5vcmcgPG1haWx0 bzp0cmFtQGlldGYub3JnPg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vdHJhbQ0KPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9v ZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4+Pj4gDQo+PiAzQV9fd3d3LmlldGYub3JnX21h aWxtYW5fbGlzdGluZm9fdHJhbSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGoNCj4+Pj4gcE42 TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09 TFhhSC0NCj4+Pj4gDQo+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZz PWFoUm4xaWZ4bk9BQ3JWRmd4Sjk5MDg2DQo+Pj4+IG5CdUM2LWN6OUg3R0tZXzBFVjhzJmU9Pg0K Pj4+Pj4gDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4+ PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4+Pj4g DQo+Pj4+Pj4+Pj4gdHJhbSBtYWlsaW5nIGxpc3QNCj4+Pj4+IA0KPj4+Pj4+Pj4+IHRyYW1AaWV0 Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPj4+Pj4gDQo+Pj4+Pj4+Pj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtDQo+Pj4+PiAgICA8aHR0cHM6Ly91cmxk ZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPj4+PiANCj4+IDNBX193d3cu aWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb190cmFtJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0 ag0KPj4+PiBwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4+IE5TbnNnd2JCVlVKYTRt WmZtRUlCWGcmbT1MWGFILQ0KPj4+PiANCj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hR RWlrekF1cFI4JnM9YWhSbjFpZnhuT0FDclZGZ3hKOTkwODYNCj4+Pj4gbkJ1QzYtY3o5SDdHS1lf MEVWOHMmZT0+DQo+Pj4+PiANCj4+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4+Pj4gX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+Pj4+IA0KPj4+Pj4+PiB0cmFt IG1haWxpbmcgbGlzdA0KPj4+Pj4gDQo+Pj4+Pj4+IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFt QGlldGYub3JnPg0KPj4+Pj4gDQo+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vdHJhbQ0KPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNv bS92Mi91cmw/dT1odHRwcy0NCj4+Pj4gDQo+PiAzQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlz dGluZm9fdHJhbSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGoNCj4+Pj4gcE42TFpnJnI9Ynda LW5uUkdXbWNHS1JJdWFkcTYtDQo+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4+ Pj4gDQo+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPWFoUm4xaWZ4 bk9BQ3JWRmd4Sjk5MDg2DQo+Pj4+IG5CdUM2LWN6OUg3R0tZXzBFVjhzJmU9Pg0KPj4+Pj4gDQo+ Pj4+PiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K Pj4+Pj4gICAgdHJhbSBtYWlsaW5nIGxpc3QNCj4+Pj4+ICAgIHRyYW1AaWV0Zi5vcmcgPG1haWx0 bzp0cmFtQGlldGYub3JnPg0KPj4+Pj4gICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby90cmFtDQo+Pj4+PiAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29t L3YyL3VybD91PWh0dHBzLQ0KPj4+PiANCj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0 aW5mb190cmFtJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0ag0KPj4+PiBwTjZMWmcmcj1id1ot bm5SR1dtY0dLUkl1YWRxNi0NCj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPj4+ PiANCj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9YWhSbjFpZnhu T0FDclZGZ3hKOTkwODYNCj4+Pj4gbkJ1QzYtY3o5SDdHS1lfMEVWOHMmZT0+DQo+Pj4+PiANCj4+ Pj4+IA0KPj4+Pj4gDQo+Pj4+IA0KPj4+PiAtLQ0KPj4+PiBCcmFuZG9uIFdpbGxpYW1zOyBDaGll ZiBBcmNoaXRlY3QNCj4+Pj4gQ2xvdWQgTmV0d29ya2luZzsgQWthbWFpIFRlY2hub2xvZ2llcyBJ bmMuDQo+PiANCj4+IC0tDQo+PiBCcmFuZG9uIFdpbGxpYW1zOyBDaGllZiBBcmNoaXRlY3QNCj4+ IENsb3VkIE5ldHdvcmtpbmc7IEFrYW1haSBUZWNobm9sb2dpZXMgSW5jLg0KDQo= From nobody Mon Jan 2 18:02:48 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A579F129521; Mon, 2 Jan 2017 18:02:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.622 X-Spam-Level: X-Spam-Status: No, score=-17.622 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8CkMOez9kP-y; Mon, 2 Jan 2017 18:02:42 -0800 (PST) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 344D212944F; Mon, 2 Jan 2017 18:02:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=129542; q=dns/txt; s=iport; t=1483408962; x=1484618562; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=U4SgIQETQ+GcQMGE6R7VyEOcI8ooFANXL+P0jUhqULM=; b=JtVVf5HvzcTVSMg8teUKHDU66+qrpEnq9gRnxjBW2nASaui+jhmhBvGD 1THIxgsuhrm/DnrABeilxsqPBl2Z3vZNPU+vB52Itkj2r75m+d3XsqziV yiveILWM33Hu+yTsz19IZJGesTXDlRy0KEdX6w8zNmbUSSQHB4n624mh5 g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CeAgB4BWtY/4wNJK1VCRkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYM3AQEBAQEfX3wQB41QlEWHe40gggUDHwuFeAIagUUVKhQBAgE?= =?us-ascii?q?BAQEBAQFiKIRoAQEBAwEBARgBCBE6CwUHBAIBCBEEAQEBAgIjAwICAh8GCxQBC?= =?us-ascii?q?AgCBA4FCBaINwMQCA4CrnuCJYckDYMJAQEBAQEBAQEBAQEBAQEBAQEBAQEBGAW?= =?us-ascii?q?BC4U6g1uBBoJOO4EPBwMGAgECAy2CbYJdBZo1EzUBhlODEoMWSYNwgX4YhHCDS?= =?us-ascii?q?oYOh36BdYQ7hA4BHzhoQi6DXgUcGIFGcgEBhigBASQHgQOBDQEBAQ?= X-IronPort-AV: E=Sophos;i="5.33,451,1477958400"; d="scan'208";a="366973041" Received: from alln-core-7.cisco.com ([173.36.13.140]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 03 Jan 2017 02:02:37 +0000 Received: from XCH-RCD-014.cisco.com (xch-rcd-014.cisco.com [173.37.102.24]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id v0322bmV006017 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 3 Jan 2017 02:02:37 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-RCD-014.cisco.com (173.37.102.24) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 2 Jan 2017 20:02:36 -0600 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1210.000; Mon, 2 Jan 2017 20:02:36 -0600 From: "Tirumaleswar Reddy (tireddy)" To: "Pal Martinsen (palmarti)" Thread-Topic: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery Thread-Index: AQHSZSxuKe4yaQWn+0W8/qAnAeYp2KEl+/WA Date: Tue, 3 Jan 2017 02:02:36 +0000 Message-ID: References: <012701d24112$ebca82e0$c35f88a0$@stahl@ingate.com> <521b142d7fd9482ca18102655d4ef4e6@XCH-RCD-017.cisco.com> <021701d2436e$4cee87d0$e6cb9770$@stahl@ingate.com> <03166323036f4cf187c0a67b9c183138@XCH-RCD-017.cisco.com> <034501d244e7$ad9ac060$08d04120$@stahl@ingate.com> <061301d248ea$12c01110$38403330$@stahl@ingate.com> <3cf392b265354926a46f8e70109df236@XCH-RCD-017.cisco.com> <065101d24958$64f42fc0$2edc8f40$@stahl@ingate.com> <7f4a0d29c1b844539a5d2b38ee699c38@XCH-RCD-017.cisco.com> <00a901d24c77$6a9b7d80$3fd27880$@stahl@ingate.com> <96701F1A-BE53-4A91-B0 FA-2BBAF7051651@cisco. com> <0726040555ad4275a2486f0aa8f9174d@XCH-RCD-017.cisco.com> <01d101d24f19$04a7fae0$0df7f0a0$@stahl@ingate.com> <5f464f75-5d00-a0b8-83cc-07e1b0f2ba25@akamai.com> <347f9a2f4d5e4970a17288e8ca33b882@XCH-RCD-017.cisco.com> <997ccf57-0634-c43e-22e2-a93f0ab75f5b@akamai.com> <03b17932e8824b5a9fd4a5d7c6baedc3@XCH-RCD-017.cisco.com> <415E9AE4-9CD3-4009-B267-5FB3BC8A339E@cisco.com> In-Reply-To: <415E9AE4-9CD3-4009-B267-5FB3BC8A339E@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.82.178] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "Prashanth Patil \(praspati\)" , "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "Dan Wing \(dan@danwing.org\)" , Spencer Dawkins at IETF , Karl Stahl Subject: Re: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jan 2017 02:02:48 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBQYWwgTWFydGluc2VuIChwYWxt YXJ0aSkNCj4gU2VudDogVHVlc2RheSwgSmFudWFyeSAzLCAyMDE3IDEyOjQ0IEFNDQo+IFRvOiBU aXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIDx0aXJlZGR5QGNpc2NvLmNvbT4NCj4gQ2M6IEJy YW5kb24gV2lsbGlhbXMgPGJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbT47IEthcmwgU3RhaGwN Cj4gPGthcmwuc3RhaGxAaW5nYXRlLmNvbT47IFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkpIDxw cmFzcGF0aUBjaXNjby5jb20+Ow0KPiB0cmFtLWNoYWlyc0BpZXRmLm9yZzsgU3BlbmNlciBEYXdr aW5zIGF0IElFVEYNCj4gPHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPjsgdHJhbUBpZXRm Lm9yZzsgRGFuIFdpbmcNCj4gKGRhbkBkYW53aW5nLm9yZykgPGRhbkBkYW53aW5nLm9yZz4NCj4g U3ViamVjdDogUmU6IFt0cmFtXSBNYXliZSB3ZSBoYXZlIChEKVRMUyBjb25zZW5zdXM7IFdBUzog ZHJhZnQtaWV0Zi10cmFtLQ0KPiB0dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gDQo+IA0KPiA+IE9u IDIgSmFuIDIwMTcsIGF0IDE2OjE0LCBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIDx0aXJl ZGR5QGNpc2NvLmNvbT4NCj4gd3JvdGU6DQo+ID4NCj4gPiBIaSBCcmFuZG9uLA0KPiA+DQo+ID4g UGxlYXNlIHNlZSBpbmxpbmUNCj4gPg0KPiA+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0K PiA+PiBGcm9tOiBCcmFuZG9uIFdpbGxpYW1zIFttYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2Ft YWkuY29tXQ0KPiA+PiBTZW50OiBXZWRuZXNkYXksIERlY2VtYmVyIDI4LCAyMDE2IDE6MTQgQU0N Cj4gPj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29t PjsgS2FybCBTdGFobA0KPiA+PiA8a2FybC5zdGFobEBpbmdhdGUuY29tPjsgUGFsIE1hcnRpbnNl biAocGFsbWFydGkpIDxwYWxtYXJ0aUBjaXNjby5jb20+DQo+ID4+IENjOiBQcmFzaGFudGggUGF0 aWwgKHByYXNwYXRpKSA8cHJhc3BhdGlAY2lzY28uY29tPjsgdHJhbS1jaGFpcnNAaWV0Zi5vcmc7 DQo+ID4+ICdEYW4gV2luZycgPGRhbkBkYW53aW5nLm9yZz47ICdTcGVuY2VyIERhd2tpbnMgYXQg SUVURicNCj4gPj4gPHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPjsgdHJhbUBpZXRmLm9y Zw0KPiA+PiBTdWJqZWN0OiBSZTogU1Y6IFt0cmFtXSBNYXliZSB3ZSBoYXZlIChEKVRMUyBjb25z ZW5zdXM7IFdBUzogZHJhZnQtaWV0Zi0NCj4gPj4gdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkN Cj4gPj4NCj4gPj4gVGhlIG9yaWdpbmFsIEkgcmVzcG9uZGVkIHRvIGRpZG4ndCBoYXZlIHRoZSB0 cmFtIGxpc3QgQ0NlZC4gQXBvbG9naWVzIHRvDQo+ID4+IHRob3NlIHdobyByZWNlaXZlIGR1cGxp Y2F0ZXMuDQo+ID4+DQo+ID4+IC0tDQo+ID4+DQo+ID4+IEhpIFRpcnUsDQo+ID4+DQo+ID4+IFNv cnJ5IGFib3V0IHRoZSBkZWxheWVkIHJlc3BvbnNlLg0KPiA+Pg0KPiA+PiBJIHVuZGVyc3RhbmQg dGhhdCB0aGUgcmVxdWlyZW1lbnRzIHlvdSBwcm9wb3NlIGFyZSB0byBwcm90ZWN0IHRoZQ0KPiA+ PiBjbGllbnQuIE15IHBvaW50IGlzIHRoYXQgdGhlIGNsaWVudCBtaWdodCBub3QgcmVxdWlyZSBz dWNoIHByb3RlY3Rpb24gaW4NCj4gPj4gYWxsIGNhc2VzIGFuZCBpdCBzaG91bGQgYmUgdXAgdG8g dGhlIGNsaWVudCB0byBtYWtlIHRoYXQgZGV0ZXJtaW5hdGlvbi4NCj4gPj4gRm9yIGV4YW1wbGUs IGlmIGJvdGggdGhlIGNsaWVudCBhbmQgdGhlIHNlcnZlciBhcmUgb24gbXkgaG9tZSBuZXR3b3Jr LCBJDQo+ID4+IGRvbid0IHJlYWxseSBuZWVkIHRoZSBwcm90ZWN0aW9uIHRoYXQgKEQpVExTIHBy b3ZpZGVzLg0KPiA+DQo+ID4gWWVzLCB0aGVzZSBhdHRhY2tzIG1heSBub3QgaGFwcGVuIGluIGEg aG9tZSBuZXR3b3JrLiBCdXQgd2UgY2Fubm90IGV4cGVjdA0KPiB0aGUgcm9hbWluZyBjbGllbnQg dG8ga2VlcCBjaGFuZ2luZyB0aGUgc2VjdXJpdHkgcG9zdHVyZSBhcyB0aGUgZGV2aWNlDQo+IGF0 dGFjaGVzIHRvIGRpZmZlcmVudCBuZXR3b3Jrcy4gQW4gYXZlcmFnZSB1c2VyIG1heSBub3QgYmUg ZXZlbiBhd2FyZSBvZiB0aGUNCj4gc2VjdXJpdHkgcmlza3Mgd2hlbiAoRClUTFMgaXMgZGlzYWJs ZWQuDQo+ID4NCj4gPiBXaGF0IGlzIHRoZSBkb3duc2lkZSBpZiAoRClUTFMgaXMgbWFuZGF0ZWQg Pw0KPiANCj4gQ2FuIHRoZSBjbGllbnQgdXNlIChEKVRMUyBvbmx5IGR1cmluZyBkaXNjb3Zlcnkg YW5kIGF1dGggcGhhc2VzPw0KDQpJIGRpZCBub3QgZ2V0IHRoZSBhYm92ZSBxdWVzdGlvbi4gKEQp VExTIGlzIG1hbmRhdGVkIG9ubHkgd2hlbiBTVFVOIGF1dGhlbnRpY2F0aW9uIGlzIG5vdCB1c2Vk Lg0KDQo+IA0KPiBXZSBkbyBoYXZlIHNvbWUgaGFyZHdhcmUgdGhhdCBtaWdodCBoYXZlIHByb2Js ZW1zIGRvaW5nIGJvdGggKEQpRFRMUyBhbmQNCj4gU1JUUCBvbiB0aGUgYW1vdW50IG9mIHBhY2tl dHMgdGhleSBhcmUgcHJvZHVjaW5nLg0KDQooRClUTFMgaXMgb25seSByZXF1aXJlZCB0byBwcm90 ZWN0IFRVUk4gbWVzc2FnZXMgZnJvbSB2YXJpb3VzIGF0dGFja3MgZGlzY3Vzc2VkIGluIFJGQzU3 NjYsIGF2b2lkaW5nIGRvdWJsZSBlbmNyeXB0aW9uIGZvciBTUlRQIHBhY2tldHMgd2lsbCBoZWxw IHNvbHZlIHRoZSBhYm92ZSBwcm9ibGVtLiBJdCdzIG5vdCBhIG5ldyBwcm9ibGVtLCBkcmFmdC1p ZXRmLXBlcmMtZG91YmxlLTAyIGFsc28gZGlzY3Vzc2VzIGRvdWJsZSBlbmNyeXB0aW9uIGZvciBo b3AtYnktaG9wIGFuZCBlbmQtdG8tZW5kIHNlY3VyaXR5Lg0KDQotVGlydSANCg0KPiANCj4gLi0u DQo+IFDDpWwtRXJpaw0KPiANCj4gPg0KPiA+PiBUaGUgc2VydmVyIG11c3QNCj4gPj4gc3VwcG9y dCB3aGF0ZXZlciBzZWN1cml0eSBwb3N0dXJlIHRoZSBjbGllbnQgcmVxdWlyZXMsIGJ1dCB0aGUg c2VydmVyDQo+ID4+IHNob3VsZCBub3QgcmVxdWlyZSB0aGUgY2xpZW50IHRvIHByb3RlY3QgaXRz ZWxmIGluIGEgcGFydGljdWxhciB3YXkuDQo+ID4NCj4gPiBUaGUgVFVSTiBzZXJ2ZXIgYnlwYXNz ZXMgdGhlIEVudGVycHJpc2UgZmlyZXdhbGwgc2VjdXJpdHkgYW5kIGFsbG93cyB0cmFmZmljDQo+ IGZyb20gb3V0c2lkZSB0byBpbnNpZGUuIEFzIHlvdSBhbHJlYWR5IGtub3csIFRVUk4gcGVybWlz c2lvbnMgbWltaWMgdGhlDQo+IGFkZHJlc3MtcmVzdHJpY3RlZCBmaWx0ZXJpbmcgbWVjaGFuaXNt IG9mIE5BVCwgYW5kIGlmIHRoZSBjbGllbnQgd2VyZSB0byBjaG9vc2UNCj4gc2VjdXJpdHkgcG9z dHVyZSB0aGF0IGRvZXMgbm90IG9mZmVyIGFueSBzZWN1cml0eSB0byBUVVJOIG1lc3NhZ2UgKGJl Y2F1c2Ugb2YNCj4gYmFkIHVzZXIgY29uZmlndXJhdGlvbiBvciBhIG1hbHdhcmUgY2xpZW50IG9u IHRoZSBlbmRwb2ludCksIGl0IGp1c3QgcmVuZGVycyB0aGUNCj4gY2xpZW50IHRvIGJlY29tZSBh IHZpY3RpbSBvZiBERE9TIGF0dGFjayAoYW4gYXR0YWNrZXIgY2FuIHNlbmRzIGZha2VkDQo+IHBl cm1pc3Npb25zIHRvIHRoZSBUVVJOIHNlcnZlciB0byBsYXVuY2ggYXR0YWNrIChET1Mgb3IgRERP Uykgb24gdGhlIFRVUk4NCj4gY2xpZW50IGFuZCBpdCBudWxsaWZpZXMgdGhlIHNlY3VyaXR5IGJl bmVmaXRzIG9mZmVyZWQgYnkgQ3JlYXRlUGVybWlzc2lvbikuDQo+ID4NCj4gPiBJZiB0aGUgVFVS TiBzZXJ2ZXIgbWFuZGF0ZXMgKEQpVExTIHRoZW4gdGhlIGFib3ZlIGF0dGFjayBpcyBub3QgcG9z c2libGUgYW5kDQo+IHdvdWxkIHByb3RlY3QgZXZlbiBhIGNvbXByb21pc2VkL21pcy1jb25maWd1 cmVkIGNsaWVudCBmcm9tIERET1MgYXR0YWNrcy4NCj4gSW4gc2hvcnQsIHdoeSB3b3VsZCBhbiBF bnRlcnByaXNlIG5ldHdvcmsgYWRtaW5pc3RyYXRvciB3YW50IHRvIGNvbmZpZ3VyZQ0KPiBUVVJO IHNlcnZlciB0byBiZSB1c2VkIGluIHRoaXMgbW9kZSBpbiB3aGljaCBjbGllbnRzIGNhbiBiZSBz dWJqZWN0ZWQgdG8NCj4gRERPUyBhdHRhY2tzIGFuZCB0aGUgVFVSTiBzZXJ2ZXIgYW5kIEVudGVy cHJpc2UgZmlyZXdhbGwgY2Fubm90IGRvIGFueXRoaW5nDQo+IHRvIHByb3RlY3QgdGhlIGNsaWVu dC4NCj4gPg0KPiA+Pg0KPiA+PiBUaGlzIGlzIHRoZSBmb3VuZGF0aW9uIGZvciBteSBwcm9wb3Nl ZCBlZGl0cy4NCj4gPg0KPiA+IEkgdW5kZXJzdGFuZCwgSSBjYW4gYWRkIHRoZSBmb2xsb3dpbmcg bmV3IGxpbmVzOg0KPiA+DQo+ID4gSW4gb3JkZXIgdG8gYWxsb3cgdGhlIFRVUk4gY2xpZW50IHRv IHNlbGVjdCBmYWxsYmFjayB0byAoRClUTFMgYXMgZGVzY3JpYmVkDQo+IGFib3ZlLCBhIFRVUk4g c2VydmVyIHRoYXQgZG9lcyBub3QgcmVxdWlyZSBlaXRoZXIgU1RVTiBsb25nIHRlcm0NCj4gYXV0 aGVudGljYXRpb24gW1JGQzUzODldIG9yIFNUVU4gRXh0ZW5zaW9uIGZvciBUaGlyZCBQYXJ0eSBB dXRob3JpemF0aW9uDQo+IFtSRkM3NjM1XSBNVVNUIHN1cHBvcnQgKEQpVExTLiBTdWNoIGEgVFVS TiBzZXJ2ZXIgTUFZIGFsbG93IGZhbGxiYWNrIHRvDQo+IGNsZWFyIHRleHQgYnV0IGZhbGxiYWNr IHRvIGNsZWFyIHRleHQgaXMgTk9UIFJFQ09NTUVOREVEDQo+ID4gYmVjYXVzZSBpdCBtYWtlcyB0 aGUgY2xpZW50IG1vcmUgc3VzY2VwdGlibGUgdG8gbWFuLWluLXRoZS1taWRkbGUgYXR0YWNrcw0K PiBhbmQgb24tcGF0aCBwYWNrZXQgaW5qZWN0aW9uLg0KPiA+DQo+ID4gLVRpcnUNCj4gPg0KPiA+ Pg0KPiA+PiAtLUJyYW5kb24NCj4gPj4NCj4gPj4gT24gMTIvMTMvMjAxNiAxMjoxNCBBTSwgVGly dW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSB3cm90ZToNCj4gPj4+IEhpIEJyYW5kb24sDQo+ID4+ Pg0KPiA+Pj4gVGhhbmtzIGZvciB0aGUgZmVlZGJhY2suIFBsZWFzZSBzZWUgaW5saW5lDQo+ID4+ Pg0KPiA+Pj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4+Pj4gRnJvbTogQnJhbmRv biBXaWxsaWFtcyBbbWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbV0NCj4gPj4+PiBT ZW50OiBTYXR1cmRheSwgRGVjZW1iZXIgMTAsIDIwMTYgMTA6MTMgUE0NCj4gPj4+PiBUbzogS2Fy bCBTdGFobCA8a2FybC5zdGFobEBpbmdhdGUuY29tPjsgVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJl ZGR5KQ0KPiA+Pj4+IDx0aXJlZGR5QGNpc2NvLmNvbT47IFBhbCBNYXJ0aW5zZW4gKHBhbG1hcnRp KSA8cGFsbWFydGlAY2lzY28uY29tPg0KPiA+Pj4+IENjOiBQcmFzaGFudGggUGF0aWwgKHByYXNw YXRpKSA8cHJhc3BhdGlAY2lzY28uY29tPjsgdHJhbS0NCj4gY2hhaXJzQGlldGYub3JnOw0KPiA+ Pj4+ICdEYW4gV2luZycgPGRhbkBkYW53aW5nLm9yZz47ICdTcGVuY2VyIERhd2tpbnMgYXQgSUVU RicNCj4gPj4+PiA8c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20+DQo+ID4+Pj4gU3ViamVj dDogUmU6IFNWOiBbdHJhbV0gTWF5YmUgd2UgaGF2ZSAoRClUTFMgY29uc2Vuc3VzOyBXQVM6IGRy YWZ0LWlldGYtDQo+ID4+Pj4gdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pg0KPiA+ Pj4+IEknbSBub3Qgc3VyZSB3ZSdyZSBxdWl0ZSBhdCBjb25zZW5zdXMgeWV0IEthcmwsIGJ1dCBJ IHRoaW5rIHdlJ3JlIGNsb3NlLg0KPiA+Pj4+DQo+ID4+Pj4gSSBhZ3JlZSB0aGF0IHRoZSB0ZXh0 IHlvdSBxdW90ZSBmcm9tIHRoZSBkb2MgY292ZXJzIHRoZSBjbGllbnQgc2lkZQ0KPiA+Pj4+IGNv bnNpZGVyYXRpb25zLCBhbmQgdGhhdCBmcmFtaW5nIGl0IGFzIHJlY29tbWVuZGF0aW9ucyByYXRo ZXIgdGhhbg0KPiA+Pj4+IHJlcXVpcmVtZW50cyBzdGlsbCBtYWtlcyBzZW5zZS4gSXQncyB1cCB0 byB0aGUgY2xpZW50IHRvIGRlY2lkZSB3aGljaA0KPiA+Pj4+IHNlY3VyaXR5IGVsZW1lbnRzIGFy ZSByZXF1aXJlZCBmb3IgdGhlIGFwcGxpY2F0aW9uIHVzZSBjYXNlLCBhbmQgdGhhdA0KPiA+Pj4+ IHRleHQgd2FzIGludGVuZGVkIHRvIHByb3ZpZGUgZ3VpZGFuY2Ugd2l0aG91dCB0cnlpbmcgdG8g Zm9yY2UgYSBzZWN1cml0eQ0KPiA+Pj4+IHBvc3R1cmUgdGhhdCBpcyBtb3JlIGNvbXBsaWNhdGVk IHRoYW4gdGhlIHVzZSBjYXNlIHJlcXVpcmVzLg0KPiA+Pj4NCj4gPj4+IFRoZSByZXF1aXJlbWVu dHMgYXJlIHRvIHByb3RlY3QgdGhlIGNsaWVudCBmcm9tIHZhcmlvdXMgYXR0YWNrcy4NCj4gPj4+ DQo+ID4+Pj4NCj4gPj4+PiBGb3IgdGhlIHNlcnZlciBzaWRlLCBpbiBvcmRlciB0byBhbGxvdyB0 aGUgY2xpZW50IHRvIGZhbGwgYmFjayB0bw0KPiA+Pj4+IChEKVRMUywgdGhlIFRVUk4gc2VydmVy IE1VU1Qgc3VwcG9ydCAoRClUTFMgYXQgbGVhc3QgZm9yIG9wcG9ydHVuaXN0aWMNCj4gPj4+PiBw cml2YWN5LiBUaGlzIGRvZXNuJ3QgbWVhbiB0aGF0IHRoZSBzZXJ2ZXIgaGFzIHRvIHJlcXVpcmUg KEQpVExTLiBJdCBjYW4NCj4gPj4+PiBzdGlsbCBhbGxvdyBmYWxsYmFjayB0byBjbGVhcnRleHQg aWYgdGhlIGNsaWVudCBzbyBjaG9vc2VzLg0KPiA+Pj4+DQo+ID4+Pj4gU28sIEkgYWdyZWUgd2l0 aCB5b3Ugb24gcmV2ZXJ0aW5nIHRoZSBNVVNUIGZvciB0aGUgY2xpZW50LCBhcyBsb25nIGFzIHdl DQo+ID4+Pj4gY29udGludWUgdG8gc3Ryb25nbHkgcmVjb21tZW5kIChEKVRMUyBhcyB0aGUgZmFs bGJhY2suIElmIHdlIGRvIHRoYXQNCj4gPj4+PiB0aG91Z2gsIEkgdGhpbmsgd2UgbmVlZCB0byBt YWtlIGl0IGNsZWFyIHRoYXQgYSBUVVJOIHNlcnZlciBjb25maWd1cmVkDQo+ID4+Pj4gdG8gYWxs b3cgc2Vzc2lvbnMgd2l0aG91dCBTVFVOIGF1dGggTVVTVCBzdXBwb3J0IChEKVRMUyBzbyB0aGF0 IHRoZQ0KPiA+Pj4+IGNsaWVudCBoYXMgdGhlIG9wdGlvbiBvZiAoRClUTFMgZmFsbGJhY2suDQo+ ID4+Pj4NCj4gPj4+PiBJIHRoaW5rIHdlIGFyZSBhZ3JlZWluZyB0byB0aGlzIGNoYW5nZS4NCj4g Pj4+Pg0KPiA+Pj4+IE9MRDoNCj4gPj4+Pg0KPiA+Pj4+ICJBIFRVUk4gY2xpZW50IE1VU1QgdXNl IChEKVRMUyBpbiB0aGUgYWJzZW5jZSBvZiAuLi4iDQo+ID4+Pj4NCj4gPj4+PiBORVc6DQo+ID4+ Pj4NCj4gPj4+PiAiQSBUVVJOIGNsaWVudCBTSE9VTEQgdXNlIChEKVRMUyBpbiB0aGUgYWJzZW5j ZSBvZiAuLi4iDQo+ID4+Pj4NCj4gPj4+PiBBbmQgSSBhbSBwcm9wb3NpbmcgdGhlIGFkZGl0aW9u IG9mIHRoaXMgcGFyYWdyYXBoIGF0IHRoZSBlbmQgb2YgdGhlDQo+ID4+Pj4gc2VjdGlvbiA5LCBq dXN0IGJlZm9yZSBzZWN0aW9uIDkuMS4NCj4gPj4+Pg0KPiA+Pj4+ICJJbiBvcmRlciB0byBhbGxv dyB0aGUgVFVSTiBjbGllbnQgdG8gc2VsZWN0IGZhbGxiYWNrIHRvIChEKVRMUyBhcw0KPiA+Pj4+ IGRlc2NyaWJlZCBhYm92ZSwgYSBUVVJOIHNlcnZlciB0aGF0IGRvZXMgbm90IHJlcXVpcmUgZWl0 aGVyIFNUVU4gbG9uZw0KPiA+Pj4+IHRlcm0gYXV0aGVudGljYXRpb24gW1JGQzUzODldIG9yIFNU VU4gRXh0ZW5zaW9uIGZvciBUaGlyZCBQYXJ0eQ0KPiA+Pj4+IEF1dGhvcml6YXRpb24gW1JGQzc2 MzVdIE1VU1Qgc3VwcG9ydCAoRClUTFMuIFN1Y2ggYSBUVVJOIHNlcnZlciBNQVkNCj4gPj4gYWxz bw0KPiA+Pj4+IGFsbG93IGZhbGxiYWNrIHRvIGNsZWFyIHRleHQuIg0KPiA+Pj4NCj4gPj4+IFsx XSBJIGFncmVlIHdpdGggdGhlIGFib3ZlIHRleHQgZXhjZXB0IGZvciB0aGUgbGFzdCBsaW5lIGlu IHRoZSBhYm92ZQ0KPiA+PiBwYXJhZ3JhcGguIElmIHRoZSBUVVJOIHNlcnZlciBhbGxvd3MgZmFs bGJhY2sgdG8gY2xlYXIgdGV4dCB0aGVuIHRoZSBhdHRhY2tlcg0KPiA+PiBjYW4gc3ViamVjdCB0 aGUgVFVSTiBjbGllbnQgdG8gdmFyaW91cyBhdHRhY2tzLiBGb3IgZXhhbXBsZSwgYXR0YWNrZXIg c2VuZHMNCj4gPj4gZmFrZWQgcGVybWlzc2lvbnMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGxhdW5j aCBhdHRhY2sgKERPUyBvciBERE9TKSBvbg0KPiB0aGUNCj4gPj4gVFVSTiBjbGllbnQgYW5kIGl0 IG51bGxpZmllcyB0aGUgc2VjdXJpdHkgYmVuZWZpdHMgb2ZmZXJlZCBieQ0KPiBDcmVhdGVQZXJt aXNzaW9uLg0KPiA+PiBUaGUgdmljdGltIGluIHRoaXMgbW9kZSBpcyB0aGUgVFVSTiBjbGllbnQg YW5kIG5vdCB0aGUgVFVSTiBzZXJ2ZXIsIGFuZA0KPiBoZW5jZQ0KPiA+PiBpdCBpcyBtb3JlIGlt cG9ydGFudCBmb3IgdGhlIGNsaWVudCB0byB1c2UgKEQpVExTIHRvIHByb3RlY3QgaXRzZWxmIGZy b20NCj4gYXR0YWNrcy4NCj4gPj4+DQo+ID4+PiBXaGVuIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkg dGhhdCBpbiBjbGVhciB0ZXh0IG1vZGUgdGhlIFRVUk4gY2xpZW50cyBjYW4gYmUNCj4gPj4gc3Vi amVjdGVkIHRvIHZhcmlvdXMgYXR0YWNrcywgd2h5IHdvdWxkIGFuIFRVUk4gc2VydmVyIGFkbWlu aXN0cmF0b3Igd2FudA0KPiB0bw0KPiA+PiBhbGxvdyBmYWxsYmFjayB0byBjbGVhciB0ZXh0ICA/ DQo+ID4+Pg0KPiA+Pj4gWzJdIEFuZCB3aGF0IHByb2JsZW1zIGRvIHlvdSBzZWUgd2l0aCB0aGUg Zm9sbG93aW5nIG5ldyBwcm9wb3NlZCB0ZXh0ID8NCj4gPj4+ICJJbiB0aGUgYWJzZW5jZSBvZiBT VFVOIGxvbmctdGVybSBjcmVkZW50aWFsIG1lY2hhbmlzbSBbUkZDNTM4OV0gb3INCj4gU1RVTg0K PiA+PiBFeHRlbnNpb24gZm9yIFRoaXJkLVBhcnR5IEF1dGhvcml6YXRpb24gW1JGQzc2MzVdLCBh IFRVUk4gY2xpZW50IE1VU1QgdXNlDQo+ID4+IChEKVRMUyBhbmQgaWYgKEQpVExTIGF1dGhlbnRp Y2F0aW9uIHRvIHZhbGlkYXRlIHRoZSBUVVJOIHNlcnZlciBpZGVudGl0eSBpcw0KPiBub3QNCj4g Pj4gcG9zc2libGUgdGhlbiB0aGUgVFVSTiBjbGllbnQgTVVTVCBmYWxsYmFjayB0byBlbmNyeXB0 aW9uLW9ubHkgKEQpVExTLiINCj4gPj4+DQo+ID4+PiAtVGlydQ0KPiA+Pj4NCj4gPj4+Pg0KPiA+ Pj4+IC0tQnJhbmRvbg0KPiA+Pj4+DQo+ID4+Pj4gT24gMTIvMDUvMjAxNiAxMTo1OSBBTSwgS2Fy bCBTdGFobCB3cm90ZToNCj4gPj4+Pj4gQWxsIEkgd2FudCB0byBkbyBpbiB0aGUgKEQpVExTIGRp c2N1c3Npb24gaXMgdG8gZGVsZXRlIHRoZSBzZW50ZW5jZSDigJxBDQo+ID4+Pj4+IFRVUk4gY2xp ZW50IE1VU1QgdXNlIChEKVRMUyBpbiB0aGUgYWJzZW5jZSBvZiBTVFVOIGxvbmctdGVybQ0KPiBj cmVkZW50aWFsDQo+ID4+Pj4+IG1lY2hhbmlzbSBbUkZDNTM4OV0gb3IgU1RVTiBFeHRlbnNpb24g Zm9yIFRoaXJkLVBhcnR5IEF1dGhvcml6YXRpb24NCj4gPj4+Pj4gW1JGQzc2MzVdLuKAnSB1bmRl ciA5LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnN0aGF0IHdhcyB0aHJvd24taW50bw0KPiA+Pj4+ PiB2ZXJzaW9uIC0xMCBkdXJpbmcgdGhlIGRpc2N1c3MuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+DQo+ID4+Pj4+ICoqV2UgbGVhdmUgYWxsIHRoZSByZXN0IHJlZ2FyZGluZyAoRClUTFMgYXMg aXQgaGFzIGJlZW4gc2luY2UgdmVyc2lvbiAtNw0KPiA+Pj4+PiBvZiB0aGlzIGRyYWZ0LioqDQo+ ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IEJyYW5k b24sDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IEkgc2VlIHRoZXJlIGFscmVh ZHkgYXJlIHRoZSAoZ2VuZXJhbCkgU0hPVUxEIG9yIFJFQ09NTUVORCB0aGF0IHlvdQ0KPiA+Pj4+ PiB3YW50ZWQgKEkgZGlkIG5vdCBzdWdnZXN0IHRvIGNoYW5nZSB0aG9zZSDigJMgdGhleSBhcmUg dGhlcmUgc2luY2UgdmVyc2lvbg0KPiA+Pj4+PiAtNyBJIGJlbGlldmUpOiDigJxJdCBpcyBSRUNP TU1FTkRFRCB0aGF0IHRoZSBUVVJOIGNsaWVudCB1c2Ugb25lIG9mIHRoZQ0KPiA+Pj4+PiBmb2xs b3dpbmcgdGVjaG5pcXVlcyB3aXRoIChEKVRMUyB0byB2YWxpZGF0ZSB0aGUgVFVSTiBzZXJ2ZXI6 4oCdIGFuZA0KPiA+PiBmdXJ0aGVy4oCmDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IGZvciBUaXJ1LCB0aGlzIGlzIGFscmVhZHkgaW4gdGhlIGRy YWZ0IHNpbmNlIC03IGFuZCBJIGFtIG5vdCBzdWdnZXN0aW5nDQo+ID4+Pj4+IHRvIGNoYW5nZSB0 aGF0Og0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiDigJwgICBBbiBhdXRvLWRp c2NvdmVyZWQgVFVSTiBzZXJ2ZXIgaXMgY29uc2lkZXJlZCB0byBiZSBvbmx5IGFzIHRydXN0ZWQN Cj4gYXMNCj4gPj4+Pj4NCj4gPj4+Pj4gICB0aGUgcGF0aCBiZXR3ZWVuIHRoZSBjbGllbnQgYW5k IHRoZSBUVVJOIHNlcnZlci4gIEluIG9yZGVyIHRvIHNhZmVseQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAg IHVzZSBhdXRvLWRpc2NvdmVyZWQgVFVSTiBzZXJ2ZXJzIGZvciBzZXNzaW9ucyB3aXRoICdzdHJp Y3QgcHJpdmFjeScNCj4gPj4+Pj4NCj4gPj4+Pj4gICByZXF1aXJlbWVudHMsIHRoZSB1c2VyIG5l ZWRzIHRvIGJlIGFibGUgdG8gZGVmaW5lIHByaXZhY3kgY3JpdGVyaWENCj4gPj4+Pj4NCj4gPj4+ Pj4gICAoZS5nLiAgYSB0cnVzdGVkIGxpc3Qgb2Ygc2VydmVycywgbmV0d29ya3MsIG9yIGRvbWFp bnMpIHRoYXQgYXJlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgY29uc2lkZXJlZCBhY2NlcHRhYmxlIGZv ciBzdWNoIHRyYWZmaWMuICBBbnkgZGlzY292ZXJlZCBUVVJOIHNlcnZlcg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgIG91dHNpZGUgdGhlIGNyaXRlcmlhIGlzIGNvbnNpZGVyZWQgdW50cnVzdGVkIGFuZCB0 aGVyZWZvcmUgTVVTVCBOT1QNCj4gPj4+Pj4NCj4gPj4+Pj4gICBiZSB1c2VkIGZvciBwcml2YWN5 IHNlbnNpdGl2ZSBjb21tdW5pY2F0aW9uLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgIEluIHNvbWUgYXV0by1kaXNjb3Zlcnkgc2NlbmFyaW9zLCBpdCBtaWdodCBub3QgYmUg cG9zc2libGUgZm9yIHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgIFRVUk4gY2xpZW50IHRvIHVzZSAo RClUTFMgYXV0aGVudGljYXRpb24gdG8gdmFsaWRhdGUgdGhlIFRVUk4gc2VydmVyLg0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgIEhvd2V2ZXIsIGZhbGwtYmFjayB0byBjbGVhciB0ZXh0IGluIHN1Y2ggY2Fz ZXMgY291bGQgbGVhdmUgdGhlIFRVUk4NCj4gPj4+Pj4NCj4gPj4+Pj4gICBjbGllbnQgb3BlbiB0 byBvbi1wYXRoIGluamVjdGlvbiBvZiBzcG9vZmVkIFRVUk4gbWVzc2FnZXMuICBJbnN0ZWFkLA0K PiA+Pj4+Pg0KPiA+Pj4+PiAgIHdpdGggYW4gZXhwbGljaXQgYWRtaW5pc3RyYXRvciBjaG9pY2Us IGEgVFVSTiBjbGllbnQgU0hPVUxEIGZhbGwtYmFjaw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgIHRvIGVu Y3J5cHRpb24tb25seSAoRClUTFMgd2hlbiAoRClUTFMgYXV0aGVudGljYXRpb24gaXMgbm90DQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgYXZhaWxhYmxlLiAgQW5vdGhlciByZWFzb24gdG8gZmFsbC1iYWNr IHRvIGVuY3J5cHRpb24tb25seSBpcyBmb3INCj4gPj4+Pj4NCj4gPj4+Pj4gICBwcml2YWN5LCB3 aGljaCBpcyBhbmFsb2dvdXMgdG8gU01UUCBvcHBvcnR1bmlzdGljIGVuY3J5cHRpb24NCj4gPj4+ Pj4NCj4gPj4+Pj4gICBbUkZDNzQzNV0gd2hlcmUgb25lIGRvZXMgbm90IHJlcXVpcmUgcHJpdmFj eSBidXQgb25lIGRlc2lyZXMgcHJpdmFjeQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgIHdoZW4gcG9zc2li bGUuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgSXQgaXMgc3VnZ2VzdGVk IHRoYXQgYSBUVVJOIGNsaWVudCBhdHRlbXB0IChEKVRMUyB3aXRoIGF1dGhlbnRpY2F0aW9uDQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgYW5kIGVuY3J5cHRpb24sIGZhbGxpbmcgYmFjayB0byBlbmNyeXB0 aW9uLW9ubHkgaWYgdGhlIFRVUk4gc2VydmVyDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgY2Fubm90IGJl IGF1dGhlbnRpY2F0ZWQgdmlhIChEKVRMUy4gIEEgVFVSTiBjbGllbnQgY291bGQgZmFsbCBiYWNr IHRvDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgY2xlYXIgdGV4dCwgd2l0aCBhbiBleHBsaWNpdCBhZG1p bmlzdHJhdG9yIGNob2ljZSwgaWYgaXQgZG9lcyBub3QNCj4gPj4+Pj4NCj4gPj4+Pj4gICBzdXBw b3J0IHVuYXV0aGVudGljYXRlZCAoRClUTFMsIGJ1dCBmYWxsYmFjayB0byBjbGVhciB0ZXh0IGlz IE5PVA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgIFJFQ09NTUVOREVEIGJlY2F1c2UgaXQgbWFrZXMgdGhl IGNsaWVudCBtb3JlIHN1c2NlcHRpYmxlIHRvIG1hbi0NCj4gPj4gaW4tDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgdGhlLW1pZGRsZSBhdHRhY2tzIGFuZCBvbi1wYXRoIHBhY2tldCBpbmplY3Rpb24uDQo+ ID4+Pj4+DQo+ID4+Pj4+IOKAnQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+Pg0KPiA+Pj4+PiAqKlRpcnUg4oCTIEJlbG93IHlvdSBhcmUgcG9pbnRpbmcgYXQgdGhl IC0xMCB2ZXJzaW9uIGNoYW5nZXMgdGhhdCBXRSBBUkUNCj4gPj4+Pj4gZGlzY3Vzc2luZyBoZXJl LioqDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IFByYXNwYW50aCBwdXQgdGhl bSBvbiB0aGUgdGFibGUgYWdhaW4gYW5kIEkgYnJvdWdodCB1cCB0aGF0IHRoZQ0KPiA+Pj4+Pg0K PiA+Pj4+PiDigJxBIFRVUk4gY2xpZW50IE1VU1QgdXNlIChEKVRMUyBpbiB0aGUgYWJzZW5jZSBv ZiBTVFVOIGxvbmctdGVybQ0KPiA+Pj4+PiBjcmVkZW50aWFsIG1lY2hhbmlzbSBbUkZDNTM4OV0g b3IgU1RVTiBFeHRlbnNpb24gZm9yIFRoaXJkLVBhcnR5DQo+ID4+Pj4+IEF1dGhvcml6YXRpb24g W1JGQzc2MzVdLuKAnQ0KPiA+Pj4+Pg0KPiA+Pj4+PiBtdXN0IGdvIGF3YXkgKGxlYXZlIHRoZSBy ZXN0KSwgc2luY2UgaXQgZWZmZWN0aXZlbHkgZm9yYmlkcyBUVVJOIHNlcnZlcnMNCj4gPj4+Pj4g cHJvdmlkZWQgYnkgdGhlIGxvY2FsIGFuZCBhY2Nlc3MgbmV0d29yay4NCj4gPj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gQnJhbmRvbiBoYWQgYWdyZWVkIHRoYXQgTVVTVCBzaG91bGQg Z28gYXdheSwgd2hlbiB5b3UganVtcGVkIGluDQo+IHdpdGgNCj4gPj4+PiB0aGUNCj4gPj4+Pj4g YXR0YWNrcyBhcmd1bWVudHMsIHdoZW4gd2Ugd2VyZSBkaXNjdXNzaW5nIHdoZXRoZXIgdGhlcmUg c2hvdWxkIHN0aWxsDQo+IGJlDQo+ID4+Pj4+IGEgU0hPVUxEIG9yIFJFQ09NTUVORC4g4oCTIFRo ZW4geW91IGdvdCBtZSAoYW5kIG90aGVycz8pIGxvc3QsDQo+IGFuZOKApi4NCj4gPj4+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gU28gY2F0Y2ggdXAgZnJvbSBwb2ludCAoMSkgb2YgbXk6 DQo+ID4+Pj4+DQo+ID4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIv dHJhbS9jdXJyZW50L21zZzAyMjE2Lmh0bWwNCj4gPj4+Pj4gPGh0dHBzOi8vdXJsZGVmZW5zZS5w cm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4gM0FfX3d3dy5pZXRmLm9yZ19tYWls LQ0KPiA+Pj4+DQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAyMjE2Lmh0 bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+Pj4+IHcwRjRqcE42TFpnJnI9YndaLW5uUkdX bWNHS1JJdWFkcTYtDQo+ID4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+ Pj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1OdFJad3JtbjJLLQ0K PiA+Pj4+IFdVSV9RTjVrX3lIbEFOLXV6aG9RVThiczJ5QV9SQlA4JmU9Pg0KPiA+Pj4+Pg0KPiA+ Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiBBbmQgeW91IG1heSBub3RpY2UgdGhhdCBp bg0KPiA+Pj4+Pg0KPiA+PiBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL3Ry YW0vM3N2TzlkakZ4ZVp5VHROc2dxUWY4ekNUaVZZDQo+ID4+Pj4+IDxodHRwczovL3VybGRlZmVu c2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4NCj4gPj4NCj4gM0FfX21h aWxhcmNoaXZlLmlldGYub3JnX2FyY2hfbXNnX3RyYW1fM3N2TzlkakZ4ZVp5VHROc2dxUWY4ekNU aVZZJmQ9DQo+ID4+Pj4gRGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZyPWJ3Wi1ublJH V21jR0tSSXVhZHE2LQ0KPiA+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+ Pj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9U0xqeXN3ZG4tDQo+ ID4+Pj4gb1pfYWV2MHBSeEQzaDZjNGFLYkVRWjNjX2tMOV9jY0hHTSZlPT4NCj4gPj4+Pj4gdGhh dCB5b3UgcmVmZXJyZWQgdG8NCj4gPj4+Pj4NCj4gPj4+Pj4g4oCcTWFraW5nIFNUVU4gYXV0aGVu dGljYXRpb24gT1BUSU9OQUzigJ0NCj4gPj4+Pj4NCj4gPj4+Pj4gaXMgQUxSRUFEWSBDT01QRU5T QVRFRCBmb3IgYnkg4oCcSVAgYWRkcmVzcyBhdXRoZW50aWNhdGlvbuKAnSAodGhlDQo+ID4+Pj4+ IGZvdW5kYXRpb24gb2YgdG9kYXnigJlzIElQIHRlbGVwaG9ueSBhdXRoZW50aWNhdGlvbik6DQo+ ID4+Pj4+DQo+ID4+Pj4+IOKAnEEgVFVSTiBzZXJ2ZXIgaW4gc3VjaCBjYXNlcyBtdXN0IGJlIGNv bmZpZ3VyZWQgdG8gb25seSBwcm9jZXNzIFNUVU4NCj4gPj4+Pj4NCj4gPj4+Pj4gICByZXF1ZXN0 cyBmcm9tIHRoZSB0cnVzdGVkIGxvY2FsIG5ldHdvcmsgb3Igc3Vic2NyaWJlcnMgb2YgdGhlIGFj Y2Vzcw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgIG5ldHdvcmsuIE9wZXJhdGlvbmFsIG1lYXN1cmVzIG11 c3QgYmUgdGFrZW4gaW4gb3JkZXIgcHJvdGVjdCB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4gICBUVVJO IHNlcnZlcjsgc29tZSBvZiB0aGVzZSBtZWFzdXJlcyBpbmNsdWRlLCBidXQgbm90IGxpbWl0ZWQg dG8sDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgYWNjZXNzIGNvbnRyb2wgYnkgbWVhbnMgb2YgYWNjZXNz LWxpc3RzLCBmaXJld2FsbHMsIHN1YnNjcmliZXIgcXVvdGENCj4gPj4+Pj4NCj4gPj4+Pj4gICBs aW1pdHMsIGluZ3Jlc3MgZmlsdGVyaW5nIGV0Yy7igJ0NCj4gPj4+Pj4NCj4gPj4+Pj4gd2hlcmUg 4oCdZmlyZXdhbGxz4oCdIHNwZWNpZmljYWxseSBhcHBsaWVzIHRvIFRVUk4gc2VydmVycyB0aGF0 IGxvY2FsIG9yDQo+ID4+Pj4+IGFjY2VzcyBuZXR3b3JrIHByb3ZpZGVycyBhbGxvdyBvbmx5IHRo ZWlyIG93biB1c2VycyB0byBhY2Nlc3MuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+IEFuZCBBdXRob3LigJlzOiDigJxQbGVhc2UgcmVmZXINCj4gPj4+Pj4gaHR0cHM6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnktDQo+ ID4+IDEwI3NlY3Rpb24tDQo+ID4+Pj4gOQ0KPiA+Pj4+PiA8aHR0cHM6Ly91cmxkZWZlbnNlLnBy b29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+Pj4+IDNBX190b29scy5pZXRmLm9yZ19o dG1sX2RyYWZ0LTJEaWV0Zi0yRHRyYW0tMkR0dXJuLTJEc2VydmVyLQ0KPiA+PiAyRGRpc2NvdmVy eS0NCj4gPj4+PiAyRDEwLTIzc2VjdGlvbi0yRDkmZD1EZ01GYVEmYz05NlpiWlpjYU1GNHcwRjRq cE42TFpnJnI9YndaLQ0KPiA+Pj4+IG5uUkdXbWNHS1JJdWFkcTYtTlNuc2d3YkJWVUphNG1aZm1F SUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3 eFFFaWt6QXVwUjgmcz1iMGZKMUFOcWhFOEMyQnJsbkdZM2lXDQo+ID4+Pj4gQ3dWRXIyT2hZeUZs RV9fb09IdFNFJmU9PmZvcg0KPiA+Pj4+PiBtb3JlIGRldGFpbHMu4oCdDQo+ID4+Pj4+DQo+ID4+ Pj4+IGFscmVhZHkgKHNpbmNlIHZlcnNpb24gLTcgSSB0aGluaykgaW4gZGV0YWlsIGRpc2N1c3Nl cyB0aGUgKEQpVExTDQo+ID4+Pj4+IGltcGxpY2F0aW9ucyBpbiB0aGlzIGNvbnRleHQgKHRoYXQg eW91IGFyZSByZWRvaW5nKS4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gUGxl YXNlLCBhZ2FpbiwgbGV0IHVzIHN0YXkgd2l0aCB0aGUgY29uc2Vuc3VzIHNpbmNlIHZlcnNpb24g LTcgb2YgdGhpcw0KPiA+Pj4+PiBkcmFmdDogTm8gKEQpVExTIG1hbmRhdGUuDQo+ID4+Pj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IFRoYW5rcywNCj4gPj4+Pj4NCj4gPj4+Pj4gS2FybA0K PiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAqRnLDpW46KlRpcnVtYWxlc3dhciBS ZWRkeSAodGlyZWRkeSkgW21haWx0bzp0aXJlZGR5QGNpc2NvLmNvbV0NCj4gPj4+Pj4gKlNraWNr YXQ6KiBkZW4gNCBkZWNlbWJlciAyMDE2IDA4OjMzDQo+ID4+Pj4+ICpUaWxsOiogUGFsIE1hcnRp bnNlbiAocGFsbWFydGkpOyBLYXJsIFN0YWhsOyB0cmFtIG1haWxpbmcgbGlzdA0KPiA+Pj4+PiAq S29waWE6KiBCcmFuZG9uIFdpbGxpYW1zOyBQcmFzaGFudGggUGF0aWwgKHByYXNwYXRpKTsNCj4g Pj4+Pj4gdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47 IERhbiBXaW5nOyBTcGVuY2VyDQo+ID4+Pj4+IERhd2tpbnMgYXQgSUVURg0KPiA+Pj4+PiAqw4Rt bmU6KiBSRTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4g Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gUHJhc2hhbnRoIGhhcyBhbHJlYWR5IHN1 bW1hcml6ZWQgdGhlIGNoYW5nZXMgZG9uZSB0byBkcmFmdCBkdXJpbmcNCj4gSVNFRw0KPiA+Pj4+ PiByZXZpZXcgaW4NCj4gPj4+Pj4NCj4gPj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9h cmNoL21zZy90cmFtLzNzdk85ZGpGeGVaeVR0TnNncVFmOHpDVGlWWQ0KPiA+Pj4+PiA8aHR0cHM6 Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+Pj4+DQo+ID4+ DQo+IDNBX19tYWlsYXJjaGl2ZS5pZXRmLm9yZ19hcmNoX21zZ190cmFtXzNzdk85ZGpGeGVaeVR0 TnNncVFmOHpDVGlWWSZkPQ0KPiA+Pj4+IERnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGpwTjZMWmcm cj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09 TFhhSC0NCj4gPj4+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPVNM anlzd2RuLQ0KPiA+Pj4+IG9aX2FldjBwUnhEM2g2YzRhS2JFUVozY19rTDlfY2NIR00mZT0+DQo+ ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IEthcmzigJlzIGNvbW1l bnQgaXMgdG8gbm90IG1hbmRhdGUgKEQpVExTLCBhbmQgd2UgZG9u4oCZdCBhZ3JlZSB3aXRoIGhp bS4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gUmVxdWVzdCB5b3UsIFdHIG1l bWJlcnMsIFdHIGNoYWlycyBhbmQgQUQgdG8gc2hhcmUgdGhlaXIgdGhvdWdodHMNCj4gb24NCj4g Pj4+Pj4gbWFuZGF0aW5nIHRoZSB1c2Ugb2YgKEQpVExTIHdoZW4gU1RVTiBhdXRoZW50aWNhdGlv biBpcyBub3QgdXNlZCB0bw0KPiA+Pj4+PiBoYW5kbGUgdGhlIHRocmVhdHMgZGlzY3Vzc2VkIGlu IFJGQzU3NjYuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IC1UaXJ1DQo+ID4+ Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICpGcm9tOipQYWwgTWFydGluc2VuIChwYWxt YXJ0aSkNCj4gPj4+Pj4gKlNlbnQ6KiBGcmlkYXksIERlY2VtYmVyIDIsIDIwMTYgMTE6MjcgUE0N Cj4gPj4+Pj4gKlRvOiogS2FybCBTdGFobCA8a2FybC5zdGFobEBpbmdhdGUuY29tDQo+IDxtYWls dG86a2FybC5zdGFobEBpbmdhdGUuY29tPj47DQo+ID4+Pj4+IHRyYW0gbWFpbGluZyBsaXN0IDx0 cmFtQGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4+DQo+ID4+Pj4+ICpDYzoqIFRpcnVt YWxlc3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29tDQo+ID4+Pj4+IDxtYWls dG86dGlyZWRkeUBjaXNjby5jb20+PjsgQnJhbmRvbiBXaWxsaWFtcw0KPiA+Pj4+PiA8YnJhbmRv bi53aWxsaWFtc0Bha2FtYWkuY29tDQo+ID4+IDxtYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2Ft YWkuY29tPj47DQo+ID4+Pj4+IFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkpIDxwcmFzcGF0aUBj aXNjby5jb20NCj4gPj4+Pj4gPG1haWx0bzpwcmFzcGF0aUBjaXNjby5jb20+PjsgdHJhbS1jaGFp cnNAaWV0Zi5vcmcNCj4gPj4+Pj4gPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47IERhbiBX aW5nIDxkYW5AZGFud2luZy5vcmcNCj4gPj4+Pj4gPG1haWx0bzpkYW5AZGFud2luZy5vcmc+Pjsg U3BlbmNlciBEYXdraW5zIGF0IElFVEYNCj4gPj4+Pj4gPHNwZW5jZXJkYXdraW5zLmlldGZAZ21h aWwuY29tDQo+ID4+Pj4gPG1haWx0bzpzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+DQo+ ID4+Pj4+ICpTdWJqZWN0OiogUmU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXIt ZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IEhpIEthcmwgKGFu ZCB0cmFtc3RlcnMpLA0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiBJIGFtIHN5 bXBhdGhldGljIHRvIHlvdXIgYXJndW1lbnRzIGJ1dCB0aGV5IG1pZ2h0IGhhdmUgYmVlbiBsb3N0 DQo+ID4+Pj4+IHNvbWV3aGVyZSBpbiB0aGUgZW1haWwgdGhyZWFkIChBIG1peCBvZiBxdW90aW5n LCByZXBlYXRpbmcgYW5kIGlubGluZQ0KPiA+Pj4+PiBjb21tZW50aW5nIGhhdmUgYXQgbGVhc3Qg bWFkZSBteSBlbWFpbCBjbGllbnQgc29tZXdoYXQgY29uZnVzZWQuKQ0KPiA+Pj4+Pg0KPiA+Pj4+ Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiBUaGUgYmVzdCB0aGluZyB5b3UgY2FuIGRvIGF0IHRoaXMgbW9t ZW50IGlzIHRvIHByb3ZpZGUgdGV4dC4gSSBzdWdnZXN0DQo+ID4+Pj4+IHlvdSB3cml0ZSB1cCBh IGRyYWZ0IGFzIGEgY291bnRlciBwcm9wb3NhbCBhbmQgc3VibWl0IGl0LiBJbiB0aGF0IHdheQ0K PiA+Pj4+PiB0aGUgV0cgbWVtYmVycyBjYW4gcmVhZCB0aHJvdWdoIGFuZCBjb21tZW50Lg0KPiA+ Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiBJIGVuY291cmFnZSB0aGUgV0cgY2hhaXJz IHRvIGdpdmUgS2FybCBlbm91Z2ggdGltZSB0byB3cml0ZSB0aGlzIHVwLA0KPiA+Pj4+PiBiZWZv cmUgcHJvZ3Jlc3NpbmcgdGhlIG90aGVyIGRyYWZ0Lg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAuLS4NCj4gPj4+Pj4NCj4gPj4+Pj4gUMOlbC1F cmlrDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIE9uIDIgRGVjIDIwMTYs IGF0IDA5OjM4LCBLYXJsIFN0YWhsIDxrYXJsLnN0YWhsQGluZ2F0ZS5jb20NCj4gPj4+Pj4gICAg PG1haWx0bzprYXJsLnN0YWhsQGluZ2F0ZS5jb20+PiB3cm90ZToNCj4gPj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgSGkgVGlydSwNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgSSBhbSB0cnlpbmcgdG8gbWFrZSB0aGUgcG9pbnQgdGhhdCB0aGVyZSBpcyBu byBvcHRpb24gZm9yIHRoaXMNCj4gPj4+Pj4gICAgZHJhZnQsIHN1cHBvc2VkIHRvIGZ1bGZpbGw6 DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICpbdHJhbV0gTWlsZXN0b25lIDM6IFRVUk4gc2VydmVyIGF1 dG8tZGlzY292ZXJ5IG1lY2hhbmlzbSBmb3INCj4gPj4+Pj4gICAgZW50ZXJwcmlzZSBhbmQgSVNQ cyoNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgdG8gcmVzdWx0IGluOiDigJxXZSBmb3JiaWQgdXNhZ2Ug b2Ygc3VjaCAoeWVsbG93KSBuZXR3b3JrIHByb3ZpZGVkDQo+ID4+Pj4+ICAgIFRVUk4gc2VydmVy cyAodXNlIGdyYXkgb3IgZ3JheWlzaCBUVVJOIHNlcnZlcnMgaW5zdGVhZCnigJ0sICB3aGljaCBp cw0KPiA+Pj4+PiAgICB0aGUgY29uc2VxdWVuY2Ugb2YgbWFuZGF0aW5nIChEKVRMUy4NCj4gPj4+ Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgU2ltcGx5IGxlYXZlIHRoZSBjb25zZW5z dXMgc2luY2UgdmVyc2lvbiAtNyBvZiB0aGlzIGRyYWZ0IGJ5DQo+ID4+Pj4+ICAgIHJlbW92aW5n IHRoZSAoRClUTFMgbWFuZGF0aW5nIGZvciBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgIHRoZQ0K PiA+Pj4+PiAgICBsb2NhbCBvciBhY2Nlc3MgbmV0d29yayB0aHJvd24taW4gZHVyaW5nIHRoZSBk aXNjdXNzLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAvS2FybA0KPiA+ Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBQUzogSSBiZWxpZXZlIHRoZSBhdHRh Y2sgZGlzY3Vzc2lvbiBiZWxvdyBpcyBhbHJlYWR5IGRvbmUsIGFuZCB0aGF0DQo+ID4+Pj4+ICAg IHlvdSBhcmUgd3JvbmcgaW4gdGhpbmtpbmcgdGhhdCBhdXRoZW50aWNhdGlvbiB3aGljaCBwcm90 ZWN0cyBhZ2FpbnN0DQo+ID4+Pj4+ICAgIHNwb29mIGF0dGFja3MgY2FuIGJlIGV4Y2hhbmdlZCBm b3IgZW5jcnlwdGlvbiwgYW5kIHRoYXQgYW55IG9mIHRoZXNlDQo+ID4+Pj4+ICAgIHRoaW5ncyBw cm90ZWN0cyBhZ2FpbnN0IERET1MgYXR0YWNrcyAuIFRoZXNlIHNlY3VyaXR5IHRoaW5ncyBhZGRy ZXNzDQo+ID4+Pj4+ICAgIGRpZmZlcmVudCB0aGluZ3MgYW5kIGFyZSBub3QgaW50ZXJjaGFuZ2Vh YmxlLCBub3IgYXJlIHRoZXkgdW5pdmVyc2FsDQo+ID4+Pj4+ICAgIG1lYW5zIGFnYWluc3QgYXR0 YWNrcyBvZiB2YXJpb3VzIGtpbmRzLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICBBbmQgdGhlIG91dGNvbWUgb2YgYW55IHN1Y2ggZGlzY3Vzc2lvbiBkb2VzbuKAmXQgY2hh bmdlIHRoZSBhYm92ZS4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgUGxl YXNlIG5vdGUgKHNvcnJ5IHRvIHJlcGVhdCkgIHRoYXQgZm9yIHRoZSBwdXJwb3NlIG9mIGdldHRp bmcgYQ0KPiA+Pj4+PiAgICBiZXR0ZXIgcGF0aCBmb3IgcmVhbC10aW1lIHRyYWZmaWMgdGhhbiB0 aHJvdWdoIHRoZSBkZWZhdWx0IGdhdGV3YXkNCj4gPj4+Pj4gICAgcGF0aCwgd2UgY2Fubm90IGV4 cGVjdCB0byBhbHNvIGdldCBhIGhpZ2hlciBzZWN1cml0eSBvciB0cnVzdCBsZXZlbCwNCj4gPj4+ Pj4gICAgbm9yIHRvIHJlc29sdmUgZXZlcnkgcHJvYmxlbSBpbiB0aGUgd29ybGQuDQo+ID4+Pj4+ DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICpGcsOlbjoq IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgW21haWx0bzp0aXJlZGR5QGNpc2NvLmNvbV0N Cj4gPj4+Pj4gICAgKlNraWNrYXQ6KiBkZW4gMjggbm92ZW1iZXIgMjAxNiAxMDo1Mw0KPiA+Pj4+ PiAgICAqVGlsbDoqIEthcmwgU3RhaGw7ICdCcmFuZG9uIFdpbGxpYW1zJzsgUHJhc2hhbnRoIFBh dGlsDQo+ID4+Pj4+ICAgIChwcmFzcGF0aSk7IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGll dGYub3JnPg0KPiA+Pj4+PiAgICAqS29waWE6KiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRv OnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0Rhbg0KPiA+Pj4+PiAgICBXaW5nJzsgJ1NwZW5jZXIg RGF3a2lucyBhdCBJRVRGJw0KPiA+Pj4+PiAgICAqw4RtbmU6KiBSRTogW3RyYW1dIGRyYWZ0LWll dGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgSGkgS2FybCwNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgWWVzLCBJIGFtIGRpc2N1c3NpbmcgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IGxvY2FsIG9y IGFjY2Vzcw0KPiA+Pj4+PiAgICBuZXR3b3JrcywgcmVmZXJyaW5nIHRvIGluc2lkZSBhdHRhY2tz IGxhdW5jaGVkIGJ5IGF0dGFja2VycyBpbnNpZGUNCj4gPj4+Pj4gICAgdGhlIGxvY2FsIG9yIGFj Y2VzcyBuZXR3b3JrLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBhKUFuIGluc2lkZSBhdHRhY2tlciBz ZW5kcyBmYWtlZCBwZXJtaXNzaW9ucyB0byB0aGUgVFVSTiBzZXJ2ZXIgdG8NCj4gPj4+Pj4gICAg bGF1bmNoIGF0dGFjayAoRE9TIG9yIERET1MpIG9uIHRoZSB2aWN0aW0gKFRVUk4gY2xpZW50KS4N Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgYilBbiBpbnNpZGUgYXR0YWNrZXIgc2VuZHMgc3Bvb2ZlZCBU VVJOIHJlcXVlc3RzIHRvIHRoZSBUVVJOIHNlcnZlcg0KPiA+Pj4+PiAgICB0byBjbG9zZSBhbGxv Y2F0aW9ucy4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgQm90aCBhYm92 ZSBhdHRhY2tzIGNhbiBiZSBwcmV2ZW50ZWQgYnkgdXNpbmcgb3Bwb3J0dW5pc3RpYw0KPiA+Pj4+ PiAgICBlbmNyeXB0aW9uIHdpdGggKEQpVExTLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAtVGlydQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAq RnJvbToqIHRyYW0gW21haWx0bzp0cmFtLWJvdW5jZXNAaWV0Zi5vcmddICpPbiBCZWhhbGYgT2Yg KkthcmwNCj4gU3RhaGwNCj4gPj4+Pj4gICAgKlNlbnQ6KiBNb25kYXksIE5vdmVtYmVyIDI4LCAy MDE2IDI6NDkgUE0NCj4gPj4+Pj4gICAgKlRvOiogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5 KSA8dGlyZWRkeUBjaXNjby5jb20NCj4gPj4+Pj4gICAgPG1haWx0bzp0aXJlZGR5QGNpc2NvLmNv bT4+OyAnQnJhbmRvbiBXaWxsaWFtcycNCj4gPj4+Pj4gICAgPGJyYW5kb24ud2lsbGlhbXNAYWth bWFpLmNvbQ0KPiA+Pj4+IDxtYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tPj47DQo+ ID4+Pj4+ICAgIFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkpIDxwcmFzcGF0aUBjaXNjby5jb20N Cj4gPj4+Pj4gICAgPG1haWx0bzpwcmFzcGF0aUBjaXNjby5jb20+PjsgdHJhbUBpZXRmLm9yZw0K PiA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+ID4+Pj4+ICAgICpDYzoqIHRyYW0tY2hhaXJzQGll dGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+OyAnRGFuIFdpbmcnDQo+ID4+Pj4+ ICAgIDxkYW5AZGFud2luZy5vcmcgPG1haWx0bzpkYW5AZGFud2luZy5vcmc+PjsgJ1NwZW5jZXIg RGF3a2lucyBhdA0KPiA+Pj4+PiAgICBJRVRGJyA8c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5j b20NCj4gPj4+Pj4gICAgPG1haWx0bzpzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+DQo+ ID4+Pj4+ICAgICpTdWJqZWN0OiogUmU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2 ZXItZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIEhpIFRp cnUsDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIE5vdyBJIGRvbuKAmXQg a25vdyB3aGVyZSB5b3UgYXJlIGFnYWluLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICBBcmUgeW91IGRpc2N1c3NpbmcgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IHRoZSBs b2NhbCBvciBhY2Nlc3MNCj4gPj4+Pj4gICAgbmV0d29yayAodGhlIHllbGxvdyBUVVJOIHNlcnZl cnMpLCB0aGF0IGFyZSByZWxlYXNlZCBmcm9tDQo+ID4+Pj4+ICAgIGF1dGhlbnRpY2F0aW9uIChu byBkaXNwdXRlIHRoZXJlKSwgYnV0IGZvciB3aGljaCAoRClUTFMgbWFuZGF0ZSB3YXMNCj4gPj4+ Pj4gICAgdGhyb3duIGluLWR1cmluZyB0aGUgZGlzY3VzcyAobWFraW5nIHRoZW0gZ3JheSk/IFRo YXQgaXMgdGhlDQo+ID4+Pj4+ICAgIHNob3dzdG9wcGVyIHRoYXQgbXVzdCBnbyBhd2F5Lg0KPiA+ Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBTb21lIGNvbW1lbnRzIGJlbG93LiBI b3BlIHdlIGFncmVlICB0aGUgYmVsb3cgZG9lcyBub3QgcmVsYXRlIHRvDQo+ID4+IHRoZQ0KPiA+ Pj4+PiAgICB5ZWxsb3cgVFVSTiBzZXJ2ZXIuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgIC9LYXJsDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICpG csOlbjoqIFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgW21haWx0bzp0aXJlZGR5QGNpc2Nv LmNvbV0NCj4gPj4+Pj4gICAgKlNraWNrYXQ6KiBkZW4gMjggbm92ZW1iZXIgMjAxNiAwNDowMg0K PiA+Pj4+PiAgICAqVGlsbDoqIEthcmwgU3RhaGw7ICdCcmFuZG9uIFdpbGxpYW1zJzsgUHJhc2hh bnRoIFBhdGlsDQo+ID4+Pj4+ICAgIChwcmFzcGF0aSk7IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0 cmFtQGlldGYub3JnPg0KPiA+Pj4+PiAgICAqS29waWE6KiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8 bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0Rhbg0KPiA+Pj4+PiAgICBXaW5nJzsgJ1Nw ZW5jZXIgRGF3a2lucyBhdCBJRVRGJw0KPiA+Pj4+PiAgICAqw4RtbmU6KiBSRTogW3RyYW1dIGRy YWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgSGkgS2FybCwNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4gICAgTm8sIEkgZG9u4oCZdCBhZ3JlZSB0aGF0IChEKVRMUyBpcyBub3QgbWFuZGF0b3J5 LiBPcHBvcnR1bmlzdGljDQo+ID4+Pj4+ICAgIGVuY3J5cHRpb24gaXMgbm90IG5ldy4gSXTigJlz IGRpc2N1c3NlZCBpbiBSRkM3NDM1LCBhbmQgdXNlZCBpbiBUQ1ANCj4gPj4+Pj4gICAgaW5jcmVh c2VkIHNlY3VyaXR5IChUQ1BJTkMgV0cpIGFuZCBETlMgcHJpdmFjeSBleGNoYW5nZSAoRFBSSVZF DQo+ID4+IFdHKS4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgSG93IGRv IHlvdSBwcm9wb3NlIHRvIGhhbmRsZSB0aGUgZm9sbG93aW5nIHBhc3NpdmUgYXR0YWNrcyB3aXRo b3V0DQo+ID4+Pj4+ICAgIChEKVRMUyBvciBTVFVOIGF1dGhlbnRpY2F0aW9uID8NCj4gPj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgYSkgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL3JmYzU3NjYjc2VjdGlvbi0xNy4yLjENCj4gPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5z ZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+PiAzQV9fdG9vbHMuaWV0Zi5v cmdfaHRtbF9yZmM1NzY2LTIzc2VjdGlvbi0NCj4gPj4+PiAyRDE3LjIuMSZkPURnTUZhUSZjPTk2 WmJaWmNhTUY0dzBGNGpwTjZMWmcmcj1id1otDQo+ID4+Pj4gbm5SR1dtY0dLUkl1YWRxNi1OU25z Z3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4+Pg0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1 bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPXlUVFlLZ29yMl9hakhlN0tQXzRCem5sDQo+ID4+ Pj4gRzFFYW11SXlfSzdhazBVNDBSYk0mZT0+LA0KPiA+Pj4+PiAgICB3aGVyZSBhdHRhY2tlciBz ZW5kcyBmYWtlZCBwZXJtaXNzaW9ucyB0byB0aGUgVFVSTiBzZXJ2ZXIgdG8gbGF1bmNoDQo+ID4+ Pj4+ICAgIGF0dGFjayAoRE9TIG9yIERET1MpIG9uIHRoZSB2aWN0aW0gKFRVUk4gY2xpZW50KS4N Cj4gPj4+Pj4NCj4gPj4+Pj4+IFNpbmNlIHRoZSBfVFVSTiBzZXJ2ZXIgc2l0cyBvdXRzaWRlXyB0 aGUgZmlyZXdhbGwsIGF0IGF0dGFja2VyIG91dHNpZGUNCj4gPj4gdGhlDQo+ID4+Pj4+ICAgIGZp cmV3YWxsIGNhbiBub3cgc2VuZCBhDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIC0tLSBBIFRVUk4gc2Vy dmVyIHByb3ZpZGVkIGJ5IGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrLCBzaGFsbCBvbmx5IGJlDQo+ ID4+Pj4+ICAgIGFjY2Vzc2libGUgYnkgdXNlcnMgaW5zaWRlIHRoZSBmaXJld2FsbC4NCj4gPj4+ Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgYikgaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL3JmYzU3NjYjc2VjdGlvbi0xNy4zLjMNCj4gPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVm ZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+PiAzQV9fdG9vbHMuaWV0 Zi5vcmdfaHRtbF9yZmM1NzY2LTIzc2VjdGlvbi0NCj4gPj4+PiAyRDE3LjMuMyZkPURnTUZhUSZj PTk2WmJaWmNhTUY0dzBGNGpwTjZMWmcmcj1id1otDQo+ID4+Pj4gbm5SR1dtY0dLUkl1YWRxNi1O U25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4+PiBNVlFpMmxWYkVfczR1bHg0aG5o RW9tWGhRSzd4UUVpa3pBdXBSOCZzPWVILQ0KPiA+Pj4+IHU1YTZ5cTBHeFRxSEZKTVRzc0NKZWZj WExyTUdMUWR6LTdNS19sN2MmZT0+LA0KPiA+Pj4+PiAgICBhdHRhY2tlciBzZW5kcyBzcG9vZmVk IFRVUk4gcmVxdWVzdHMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGNsb3NlDQo+ID4+Pj4+ICAgIGFs bG9jYXRpb25zLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAtLS0gSSBkb27igJl0IHRoaW5rIChEKVRM UyBoZWxwcyBpZiB5b3UgY2FuIHNwb29mIGFuZCBoYXZlIHN1Y2gNCj4gPj4+Pj4gICAgYXR0YWNr ZXJzIGluc2lkZSB5b3VyIG5ldHdvcmsuICh0aGF0IHBhcmFncmFwaCBzYXlzOiAgVFVSTiBwcmV2 ZW50cw0KPiA+Pj4+PiAgICB0aGlzIGJ5IHJlcXVpcmluZyB0aGF0IHRoZSBjcmVkZW50aWFscyB1 c2Vk4oCdKSBtZWFuaW5nIGF1dGhlbnRpY2F0aW9uDQo+ID4+Pj4+ICAgIChub3QgY2VydGlmaWNh dGUgY2hlY2tpbmcsIG5vciBlbmNyeXB0aW9uKS4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgLVRpcnUNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgKkZyb206KiB0cmFtIFttYWlsdG86dHJhbS1ib3VuY2VzQGlldGYu b3JnXSAqT24gQmVoYWxmIE9mICpLYXJsDQo+IFN0YWhsDQo+ID4+Pj4+ICAgICpTZW50OiogTW9u ZGF5LCBOb3ZlbWJlciAyOCwgMjAxNiAxOjM5IEFNDQo+ID4+Pj4+ICAgICpUbzoqIFRpcnVtYWxl c3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29tDQo+ID4+Pj4+ICAgIDxtYWls dG86dGlyZWRkeUBjaXNjby5jb20+PjsgJ0JyYW5kb24gV2lsbGlhbXMnDQo+ID4+Pj4+ICAgIDxi cmFuZG9uLndpbGxpYW1zQGFrYW1haS5jb20NCj4gPj4+PiA8bWFpbHRvOmJyYW5kb24ud2lsbGlh bXNAYWthbWFpLmNvbT4+Ow0KPiA+Pj4+PiAgICBQcmFzaGFudGggUGF0aWwgKHByYXNwYXRpKSA8 cHJhc3BhdGlAY2lzY28uY29tDQo+ID4+Pj4+ICAgIDxtYWlsdG86cHJhc3BhdGlAY2lzY28uY29t Pj47IHRyYW1AaWV0Zi5vcmcNCj4gPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+PiAgICAq Q2M6KiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsg J0RhbiBXaW5nJw0KPiA+Pj4+PiAgICA8ZGFuQGRhbndpbmcub3JnIDxtYWlsdG86ZGFuQGRhbndp bmcub3JnPj47ICdTcGVuY2VyIERhd2tpbnMgYXQNCj4gPj4+Pj4gICAgSUVURicgPHNwZW5jZXJk YXdraW5zLmlldGZAZ21haWwuY29tDQo+ID4+Pj4+ICAgIDxtYWlsdG86c3BlbmNlcmRhd2tpbnMu aWV0ZkBnbWFpbC5jb20+Pg0KPiA+Pj4+PiAgICAqU3ViamVjdDoqIFJlOiBbdHJhbV0gZHJhZnQt aWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICBIaSBUaXJ1LA0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICBTbyB3ZSBhZ3JlZSB0aGF0IHRoZSAoRClUTFMgbWFuZGF0ZSB0aHJvd24taW4gZHVyaW5n IHRoZSBkaXNjdXNzDQo+ID4+Pj4+ICAgIChtYWtpbmcgeWVsbG93IFRVUk4gc2VydmVycyBncmF5 KSBzaGFsbCBnbyBhd2F5IGFuZCB3ZSBhcmUgYmFjayB0bw0KPiA+Pj4+PiAgICB3aGF0IHdhcyBj b25zZW5zdXMgc2luY2UgdmVyc2lvbiAtNyBvZiB0aGUgZHJhZnQuIEkgdGhpbmsgdGhlDQo+ID4+ Pj4+ICAgIGF0dGFja3MgeW91IGFyZSBkaXNjdXNzaW5nIG5vdyBoYXZlIGJlZW4gbGlzdGVkIGFs cmVhZHkgYW5kIGZvciBUVVJODQo+ID4+Pj4+ICAgIHNlcnZlcnMgaW4gYSBsb2NhbCBvciBhY2Nl c3MgbmV0d29yayAobm8gY2hhbmdlIHNpbmNlIHZlcnNpb24gLTcpLA0KPiA+Pj4+PiAgICB3ZSBz aG91bGQgbm90IGV4cGVjdCBhIGhpZ2hlciBzZWN1cml0eSBvciB0cnVzdCBsZXZlbCB3aGVuIHNl bmRpbmcNCj4gPj4+Pj4gICAgb3VyIHJlYWwtdGltZSB0cmFmZmljIHRocm91Z2ggYW5vdGhlciBw YXRoIHRoYW4gdGhlIHRocm91Z2ggZGVmYXVsdA0KPiA+Pj4+PiAgICBnYXRld2F5LCBib3RoIHBh dGhzIGFyZSBwcm92aWRlZCBieSB0aGUgc2FtZSBuZXR3b3JrIHByb3ZpZGVyLg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAqICoNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgSWYg4oCccHJvdGVjdHMgdGhlIGNs aWVudCBmcm9tIHZhcmlvdXMgYXR0YWNrcyBkaXNjdXNzZWQgaW4gcHJldmlvdXMNCj4gPj4+Pj4g ICAgbWFpbHPigJ0gcmVsYXRlZCB0byBkaXNjb3Zlcnkgb2YgVFVSTiBzZXJ2ZXJzLCByZWFsbHkg aXMgcG9zc2libGUgYnkNCj4gPj4+Pj4gICAgaW50cm9kdWNpbmcgc29tZXRoaW5nICh3aHkgcmVv cGVuIHRoYXQgbm93PyksIHdlIGhhdmUgdG8gYmUgY2FyZWZ1bA0KPiA+Pj4+PiAgICBub3QgdG8g bWFrZSB5ZWxsb3cgVFVSTiBzZXJ2ZXJzIGdyYXlpc2gsIHdoaWNoIEkgYW0gYWZyYWlkIHNlbGYN Cj4gPj4+Pj4gICAgc2lnbmVkIGNlcnRpZmljYXRlcyBtaWdodCBkbywgYW5kIGZ1cnRoZXIsIGRv ZXMgdGhpcyBiZWxvbmcgaW4gYQ0KPiA+Pj4+PiAgICBkaXNjb3ZlcnkgZHJhZnQsIHJpc2tpbmcg dG8gcGljayBhIGZpZ2h0IHdpdGggdGhlIFdlYlJUQyBicm93c2VyDQo+ID4+Pj4+ICAgIG1ha2Vy cyBzdXBwb3NlZCB0byB1c2UgdGhpcyBzcGVjaWZpY2F0aW9uLiBXZSBrbm93IHRoZXkgZG9u4oCZ dCBmYW5jeQ0KPiA+Pj4+PiAgICBzZWxmIHNpZ25lZCBjZXJ0aWZpY2F0ZXPigKYNCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgPGltYWdlMDAyLmpwZz4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4gICAgSXNu4oCZdCBpdCBzcGVjaWZpY2F0aW9ucyBmb3Igc29tZSBzcGVjaWZpYyB1c2Fn ZS9hcHBsaWNhdGlvbiAobGlrZQ0KPiA+Pj4+PiAgICB0aGUgcmV0dXJuIGRyYWZ0IGZvciBXZWJS VEMgYnJvd3NlcnMpIHRoYXQgc2hvdWxkIGNvbnNpZGVyIHN1Y2gNCj4gPj4+Pj4gICAgdGhpbmdz IChub3QgdGhpcyBkcmFmdCksIHdpdGhvdXQgYW55IHJlY29tbWVuZGF0aW9uIGZyb20gdGhpcw0K PiA+Pj4+PiAgICBzcGVjaWZpY2F0aW9uPw0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAvS2FybA0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAqRnLD pW46KiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIFttYWlsdG86dGlyZWRkeUBjaXNjby5j b21dDQo+ID4+Pj4+ICAgICpTa2lja2F0OiogZGVuIDIzIG5vdmVtYmVyIDIwMTYgMDQ6MTUNCj4g Pj4+Pj4gICAgKlRpbGw6KiBLYXJsIFN0YWhsOyAnQnJhbmRvbiBXaWxsaWFtcyc7IFByYXNoYW50 aCBQYXRpbA0KPiA+Pj4+PiAgICAocHJhc3BhdGkpOyB0cmFtQGlldGYub3JnIDxtYWlsdG86dHJh bUBpZXRmLm9yZz4NCj4gPj4+Pj4gICAgKktvcGlhOiogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1h aWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4NCj4gPj4+Pj4gICAgV2luZyc7ICdTcGVu Y2VyIERhd2tpbnMgYXQgSUVURicNCj4gPj4+Pj4gICAgKsOEbW5lOiogUkU6IFt0cmFtXSBkcmFm dC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgIEkgYW0gbm90IHN1Z2dlc3RpbmcgdGhhdCBhdXRoZW50aWNhdGlvbiBp cyBtYW5kYXRvcnkgZm9yIFRVUk4NCj4gPj4+Pj4gICAgc2VydmVycyBwcm92aWRlZCBieSBsb2Nh bCBvciBhY2Nlc3MgbmV0d29ya3MgdXNpbmcgKEQpVExTIGJ1dCB1c2Ugb2YNCj4gPj4+Pj4gICAg KEQpVExTIFtLYXJsOiDigJx0aGVzZSBiZWNvbWUgZ3JheSBub3QgeWVsbG934oCdIG9yIGFyZSB5 b3Ugc3VnZ2VzdGluZw0KPiA+Pj4+PiAgICBjZXJ0aWZpY2F0ZWQgc2lnbmVkIGJ5IHRoZSBuZXR3 b3JrIHByb3ZpZGVyXQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBbVFJd IE5vLCB0aGV5IGFyZSB5ZWxsb3cgYW5kIG5vdCBncmV5OyBjbGllbnRzIHdpbGwgdXNlIChEKVRM UyBidXQNCj4gPj4+Pj4gICAgZG8gbm90IHZhbGlkYXRlIHRoZSBUVVJOIHNlcnZlciBjZXJ0aWZp Y2F0ZSAocmVmZXJyZWQgdG8gYXMNCj4gPj4+Pj4gICAgT3Bwb3J0dW5pc3RpYyBzZWN1cml0eSBp biB0aGUgZHJhZnQpLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBbS2Fy bDogU2VlbXMgbGlrZSB5b3UgYXJlIHN1Z2dlc3Rpbmcgc2VsZiBzaWduZWQgY2VydGlmaWNhdGVz IHRvDQo+ID4+Pj4+ICAgIGp1c3QgZ2V0IHRoZSBlbmNyeXB0aW9uIChhZ2FpbiDigJMgYWxzbyBk aXNjdXNzZWQpXQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBbVFJdIFll cywgdGhhdOKAmXMgb25lIHBvc3NpYmxlIG9wdGlvbiB0byBtYW5kYXRlIChEKVRMUy4gQ2xpZW50 DQo+ID4+Pj4+ICAgIGNhbm5vdCB2YWxpZGF0ZSB0aGUgVFVSTiBzZXJ2ZXIgY2VydGlmaWNhdGUg YnV0IHVzZSBlbmNyeXB0aW9uLW9ubHkNCj4gPj4+Pj4gICAgKEQpVExTIGFuZCBwcm90ZWN0cyB0 aGUgY2xpZW50IGZyb20gdmFyaW91cyBhdHRhY2tzIGRpc2N1c3NlZCBpbg0KPiA+Pj4+PiAgICBw cmV2aW91cyBtYWlscy4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgLVRp cnUNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgKkZyb206KiBLYXJsIFN0 YWhsIFttYWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29tXQ0KPiA+Pj4+PiAgICAqU2VudDoqIFR1 ZXNkYXksIE5vdmVtYmVyIDIyLCAyMDE2IDExOjEyIFBNDQo+ID4+Pj4+ICAgICpUbzoqIFRpcnVt YWxlc3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29tDQo+ID4+Pj4+ICAgIDxt YWlsdG86dGlyZWRkeUBjaXNjby5jb20+PjsgJ0JyYW5kb24gV2lsbGlhbXMnDQo+ID4+Pj4+ICAg IDxicmFuZG9uLndpbGxpYW1zQGFrYW1haS5jb20NCj4gPj4+PiA8bWFpbHRvOmJyYW5kb24ud2ls bGlhbXNAYWthbWFpLmNvbT4+Ow0KPiA+Pj4+PiAgICBQcmFzaGFudGggUGF0aWwgKHByYXNwYXRp KSA8cHJhc3BhdGlAY2lzY28uY29tDQo+ID4+Pj4+ICAgIDxtYWlsdG86cHJhc3BhdGlAY2lzY28u Y29tPj47IHRyYW1AaWV0Zi5vcmcNCj4gPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+PiAg ICAqQ2M6KiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3Jn PjsgJ0RhbiBXaW5nJw0KPiA+Pj4+PiAgICA8ZGFuQGRhbndpbmcub3JnIDxtYWlsdG86ZGFuQGRh bndpbmcub3JnPj47ICdTcGVuY2VyIERhd2tpbnMgYXQNCj4gPj4+Pj4gICAgSUVURicgPHNwZW5j ZXJkYXdraW5zLmlldGZAZ21haWwuY29tDQo+ID4+Pj4+ICAgIDxtYWlsdG86c3BlbmNlcmRhd2tp bnMuaWV0ZkBnbWFpbC5jb20+Pg0KPiA+Pj4+PiAgICAqU3ViamVjdDoqIFNWOiBbdHJhbV0gZHJh ZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICBIaSBUaXJ1LA0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICBQbGVhc2UgdW5kZXJzdGFuZCB0aGF0IGluIHRoaXMgY29udGV4dDoNCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgLSBBdXRoZW50aWNhdGlvbiBpcyB0byBvbmx5IGFsbG93IGNlcnRhaW4gdXNl cnMgdG8gdXNlIHRoZSBUVVJODQo+ID4+Pj4+ICAgIHNlcnZlciByZXNvdXJjZQ0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAtIENlcnRpZmljYXRlIGNoZWNraW5nIGFzIHdoZW4gdXNpbmcgKEQpVExTIGlz IHRvIGFzc3VyZSB0aGUgdXNlciBpcw0KPiA+Pj4+PiAgICB1c2luZyBhIHRydXN0ZWQgVFVSTiBz ZXJ2ZXIgKGFuZCBmdXJ0aGVyIGlzIHNldHMgdXAgYW4gZW5jcnlwdGVkDQo+ID4+Pj4+ICAgIGNo YW5uZWwpLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBUaGVzZSB0aGlu Z3MgYXJlIG5vdCBpbnRlcmNoYW5nZWFibGUgb3IgZG8gdGhlIHNhbWUgdGhpbmdzIG9yDQo+ID4+ Pj4+ICAgIGFjaGlldmVzIHRoZSBzYW1lLCB3aGljaCBoYXMgYmVlbiBkaXNjdXNzZWQgb3ZlciBh bmQgb3ZlciBhZ2FpbiBpbg0KPiA+Pj4+PiAgICB0aGlzIGRyYWZ0IGFscmVhZHkuDQo+ID4+Pj4+ DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIExldCBpdCByZXN0IHdpdGggdGhhdCB3ZSBj YW5ub3Qvc2hvdWxkIG5vdCBleHBlY3QgYSBoaWdoZXIgdHJ1c3Qgb3INCj4gPj4+Pj4gICAgc2Vj dXJpdHkgbGV2ZWwgd2hlbiBzZW5kaW5nIG91ciByZWFsLXRpbWUgdHJhZmZpYyB0aHJvdWdoIHRo ZSBUVVJODQo+ID4+Pj4+ICAgIHNlcnZlciBwYXRoLCB0aGFuIHRyb3VnaCB0aGUgZGVmYXVsdCBn YXRld2F5IHBhdGguIFlvdSBzaW1wbHkgaGF2ZQ0KPiA+Pj4+PiAgICB0byB0cnVzdCB0aGUgYWNj ZXNzIGZyb20gdGhlIG5ldHdvcmsgcHJvdmlkZXIgeW91IHNlbGVjdCB0byBjb25uZWN0DQo+ID4+ Pj4+ICAgIHRvLCBvciByZWZyYWluIGZyb20gdXNpbmcgaXQuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgIFBsZWFzZSBhbHNvIHVuZGVyc3RhbmQgdGhhdCDigJx0aGUgZ3Jh eSBUVVJOIHNlcnZlcnPigJ0gYXJlIHByb3ZpZGVkIGJ5DQo+ID4+Pj4+ICAgIG90aGVycyB0aGFu IHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yaywgYW5kIHlvdSBjaG9zZSB0byB0cnVzdCB0aGVt DQo+ID4+Pj4+ICAgIHdpdGggeW91ciByZWFsLXRpbWUgdHJhZmZpYyBiYXNlZCBvbiBjaGVja2lu ZyB0aGVpciBjZXJ0aWZpY2F0ZSAoV2hvDQo+ID4+Pj4+ICAgIGNvbmZpZ3VyZXMgd2hpY2ggdG8g YWxsb3cgaW50byB0aGUgV2ViUlRDIGJyb3dzZXI/KS4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgSW4gYSBzcGVjaWZpY2F0aW9uIHdoaWNoIG1haW4gcHVycG9zZSBpcyB0 byBhdXRvIGRpc2NvdmVyIFRVUk4NCj4gPj4+Pj4gICAgc2VydmVycyBwcm92aWRlZCBieSB0aGUg bG9jYWwgb3IgYWNjZXNzIG5ldHdvcmsgKOKAnHRoZSB5ZWxsb3cgb25lc+KAnSksDQo+ID4+Pj4+ ICAgIHlvdSBDQU5OT1QgTE9HSUNBTExZIGVuZCB1cCB3aXRoIHNheWluZyB5b3UgTVVTVC9TSE9V TEQgb3IgYXJlDQo+ID4+Pj4+ICAgIFJFQ09NTUVOREVEIHRvIHVzZSDigJx0aGUgZ3JheSBvbmVz 4oCdIGluc3RlYWQsIHByb3ZpZGVkIGJ5IHNvbWUNCj4gPj4+Pj4gICAgYXV0aG9yaXR5IG9yIEJy YW5kb24gbWF5YmUgKHdoaWNoIGFyZSBtZWFudCBmb3Igb3RoZXIgcHVycG9zZXMpLg0KPiA+Pj4+ PiAgICBUaGVuIHlvdSBoYXZlIG5vdCBkZWxpdmVyZWQgdGhlIHNwZWNpZmljYXRpb24gd2UgbmVl ZCA9IFRoZQ0KPiA+PiBzaG93c3RvcHBlci4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4gICAgL0thcmwNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgUFM6 IFNvbWUgY29tbWVudHMgYmVsb3cuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICpGcsOlbjoqIFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgW21haWx0bzp0aXJlZGR5 QGNpc2NvLmNvbV0NCj4gPj4+Pj4gICAgKlNraWNrYXQ6KiBkZW4gMjIgbm92ZW1iZXIgMjAxNiAw NDozMQ0KPiA+Pj4+PiAgICAqVGlsbDoqIEthcmwgU3RhaGw7ICdCcmFuZG9uIFdpbGxpYW1zJzsg UHJhc2hhbnRoIFBhdGlsDQo+ID4+Pj4+ICAgIChwcmFzcGF0aSk7IHRyYW1AaWV0Zi5vcmcgPG1h aWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+PiAgICAqS29waWE6KiB0cmFtLWNoYWlyc0BpZXRm Lm9yZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0Rhbg0KPiA+Pj4+PiAgICBXaW5n JzsgJ1NwZW5jZXIgRGF3a2lucyBhdCBJRVRGJw0KPiA+Pj4+PiAgICAqw4RtbmU6KiBSRTogW3Ry YW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgSGkgS2FybCwNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgSSBhbSBub3Qgc3VnZ2VzdGluZyB0aGF0IGF1dGhlbnRpY2F0aW9uIGlz IG1hbmRhdG9yeSBmb3IgVFVSTg0KPiA+Pj4+PiAgICBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IGxvY2Fs IG9yIGFjY2VzcyBuZXR3b3JrcyB1c2luZyAoRClUTFMgYnV0IHVzZSBvZg0KPiA+Pj4+PiAgICAo RClUTFMgW0thcmw6IOKAnHRoZXNlIGJlY29tZSBncmF5IG5vdCB5ZWxsb3figJ0gb3IgYXJlIHlv dSBzdWdnZXN0aW5nDQo+ID4+Pj4+ICAgIGNlcnRpZmljYXRlZCBzaWduZWQgYnkgdGhlIG5ldHdv cmsgcHJvdmlkZXJdIHdpdGhvdXQgYXV0aGVudGljYXRpbmcNCj4gPj4+Pj4gICAgdGhlIFRVUk4g c2VydmVyIGlzIG1hbmRhdG9yeSB0byBhdm9pZCB2YXJpb3VzIGF0dGFja3MgbGlzdGVkIGluDQo+ ID4+Pj4+ICAgIHByZXZpb3VzIG1haWxzLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICBJbiBzaG9ydCwgdGhlIFRVUk4gc2VydmVycyBwcm92aWRlZCBieSBsb2NhbCBvciBh Y2Nlc3MgbmV0d29ya3MgbXVzdA0KPiA+Pj4+PiAgICB1c2UgKEQpVExTIGJ1dCBpdOKAmXMgbm90 IG1hbmRhdG9yeSBmb3IgdGhlc2UgVFVSTiBzZXJ2ZXJzIHRvIGdldA0KPiA+Pj4+PiAgICBjZXJ0 aWZpY2F0ZXMgZnJvbSBDQSBvciBhbnkgZXhwbGljaXQgY29uZmlndXJhdGlvbiBpcyByZXF1aXJl ZCBvbg0KPiA+Pj4+PiAgICB0aGUgY2xpZW50IHRvIHRydXN0IHRoZSBUVVJOIHNlcnZlci4gW0th cmw6IFNlZW1zIGxpa2UgeW91IGFyZQ0KPiA+Pj4+PiAgICBzdWdnZXN0aW5nIHNlbGYgc2lnbmVk IGNlcnRpZmljYXRlcyB0byBqdXN0IGdldCB0aGUgZW5jcnlwdGlvbg0KPiA+Pj4+PiAgICAoYWdh aW4g4oCTIGFsc28gZGlzY3Vzc2VkKV0NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgLVRpcnUNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgKkZyb206 KiBLYXJsIFN0YWhsIFttYWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29tXQ0KPiA+Pj4+PiAgICAq U2VudDoqIE1vbmRheSwgTm92ZW1iZXIgMjEsIDIwMTYgMjoxMCBBTQ0KPiA+Pj4+PiAgICAqVG86 KiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIDx0aXJlZGR5QGNpc2NvLmNvbQ0KPiA+Pj4+ PiAgICA8bWFpbHRvOnRpcmVkZHlAY2lzY28uY29tPj47ICdCcmFuZG9uIFdpbGxpYW1zJw0KPiA+ Pj4+PiAgICA8YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tDQo+ID4+Pj4gPG1haWx0bzpicmFu ZG9uLndpbGxpYW1zQGFrYW1haS5jb20+PjsNCj4gPj4+Pj4gICAgUHJhc2hhbnRoIFBhdGlsIChw cmFzcGF0aSkgPHByYXNwYXRpQGNpc2NvLmNvbQ0KPiA+Pj4+PiAgICA8bWFpbHRvOnByYXNwYXRp QGNpc2NvLmNvbT4+OyB0cmFtQGlldGYub3JnDQo+IDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4g Pj4+Pj4gICAgKkNjOiogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0Bp ZXRmLm9yZz47ICdEYW4gV2luZycNCj4gPj4+Pj4gICAgPGRhbkBkYW53aW5nLm9yZyA8bWFpbHRv OmRhbkBkYW53aW5nLm9yZz4+OyAnU3BlbmNlciBEYXdraW5zIGF0DQo+ID4+Pj4+ICAgIElFVEYn IDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbQ0KPiA+Pj4+PiAgICA8bWFpbHRvOnNwZW5j ZXJkYXdraW5zLmlldGZAZ21haWwuY29tPj4NCj4gPj4+Pj4gICAgKlN1YmplY3Q6KiBTVjogW3Ry YW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgSGkgVGlydSwNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgVHJ5aW5nIHRvIGNsYXJpZnkgYXMgeW91IHJlcXVlc3Q6IEkgaGF2ZSBs b3N0IHRyYWNrIG9mIGluIHdoaWNoDQo+ID4+Pj4+ICAgIGNvbnRleHQgeW91IGFyZSB3aGVuIHlv dSBhcmUgImRpc2N1c3NpbmcgdmFyaW91cyBhdHRhY2tzIiBhbmQgd2hhdA0KPiA+Pj4+PiAgICB5 b3UgbWVhbiB3aXRoIHRoZSA/PyBJIG1hcmtlZCBiZWxvdy4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgTXkgY29uY2VybiB3YXMgd2hldGhlciB0aGlzIG1heSBhZ2FpbiBs ZWFkIHRvIHRoYXQgV0UNCj4gPj4+Pj4gICAgSEFWRSAqX05PXyogVFVSTiBTRVJWRVJTIGluIHRo ZSB5ZWxsb3cgYXJlYSBiZWxvdyByZXN1bHRpbmcgZnJvbQ0KPiA+PiB0aGUNCj4gPj4+Pj4gICAg KEQpVExTIG1hbmRhdGluZyB0aGF0IHdhcyB0aHJvd24taW4gaW50byB2ZXJzaW9uIC0xMCBkdXJp bmcgdGhlDQo+ID4+Pj4+ICAgIGRpc2N1c3MgKD10aGUgc2hvd3N0b3BwaW5nKSwgc2luY2UgVFVS TiBzZXJ2ZXJzIHdpdGgNCj4gPj4+Pj4gICAgY2VydGlmaWNhdGVzIGFyZSBOT1QgcHJvdmlkZWQg YnkgdGhlIGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrICh0aG9zZQ0KPiA+Pj4+PiAgICBhcmUgcHJv dmlkZWQgYnkgc29tZSAidHJ1c3QgYW5jaG9yIHN0b3JlIFtSRkM2MDI0XSBhbGxvd3MgYSBUVVJO DQo+ID4+Pj4+ICAgIGNsaWVudCAuLi4iIG9yIGJ5ICJDZXJ0aWZpY2F0aW9uIGF1dGhvcml0aWVz IHRoYXQgaXNzdWUgVFVSTiBzZXJ2ZXINCj4gPj4+Pj4gICAgY2VydGlmaWNhdGVzIiBldGMuLikN Cj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgPGltYWdlMDA0LnBuZz4NCj4g Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgU28sIGp1c3QgbGV0IG1lIHJlc3Qg d2l0aCB0aGF0IHlvdXIgZGlzY3Vzc2lvbiBkb2VzIG5vdCB0YWtlIGF3YXkNCj4gPj4+Pj4gICAg dGhlIGFsbG93YW5jZSB0byB1c2UgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IHRoZSBsb2NhbCBv ciBhY2Nlc3MNCj4gPj4+Pj4gICAgbmV0d29yayB3aXRob3V0IGF1dGhlbnRpY2F0aW9uIHRoYXQg d2FzIHJlLWludHJvZHVjZWQgaW4gdmVyc2lvbiAtNw0KPiA+Pj4+PiAgICBvZiB0aGUgZHJhZnQg KGFmdGVyIGxvbmcgZGlzY3Vzc2lvbnMsIGluY2x1ZGluZyB3aXRoIHlvdSBUaXJ1KS4NCj4gPj4+ Pj4gICAgUmVtZW1iZXIsIF90aG9zZSB5ZWxsb3cgVFVSTiBzZXJ2ZXJzIHdlcmUgdGhlIHJlcXVp cmVtZW50IG9mIHRoaXMNCj4gPj4+Pj4gICAgZHJhZnQgdG8gYXV0byBkaXNjb3Zlcl8gc28gdGhl eSBjYW4gYmUgdXNlZCBieSB0aGUgV2ViUlRDIGJyb3dzZXJzIOKAkw0KPiA+Pj4+PiAgICBVc2Fn ZSBjYW5ub3QgYmUgZm9yYmlkZGVuIChvciB1bi1yZWNvbW1lbmRlZCBhcyBCcmFuZG9uIHN1Z2dl c3RzLA0KPiA+Pj4+PiAgICBhbHRob3VnaCBCcmFuZG9uIGlzIGFncmVlaW5nIHRvIHRoYXQgdGhl IChEKVRMUyBtYW5kYXRlIG11c3QgdmFuaXNoDQo+ID4+Pj4+ICAgIGZvciB0aGUgeWVsbG93IFRV Uk4gc2VydmVycykuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgIEZVUlRIRVIgSlVTVCBUTyBSRU1JTkQgQVVUSE9SUyBvZiB3aGF0IGlzIG5l ZWRlZCB0byBiZQ0KPiBhZGRyZXNzZXMNCj4gPj4gaW4NCj4gPj4+Pj4gICAgdGhpcyBkcmFmdDsg aXQgaXMgZm91bmQgaW4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbC1hcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDIyMTYuaHRtbA0KPiA+Pj4+PiAgICA8 aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+Pj4+ IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4+Pg0KPiA+Pg0KPiAyRGFyY2hpdmVfd2ViX3Ry YW1fY3VycmVudF9tc2cwMjIxNi5odG1sJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4gPj4+PiB3 MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+Pj4+IE5TbnNnd2JCVlVKYTRt WmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlr ekF1cFI4JnM9TnRSWndybW4ySy0NCj4gPj4+PiBXVUlfUU41a195SGxBTi11emhvUVU4YnMyeUFf UkJQOCZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgYW5kIHRoZSBjb250cmFkaWN0aW9uIGluIHNl Y3Rpb24gNy4yIGFzIHNhaWQgaW4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDIyMjYuaHRtbA0KPiA+Pj4+ PiAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0K PiA+Pj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4+Pg0KPiA+Pg0KPiAyRGFyY2hpdmVf d2ViX3RyYW1fY3VycmVudF9tc2cwMjIyNi5odG1sJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4g Pj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+Pj4+IE5TbnNnd2JC VlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+DQo+ID4+DQo+IE1WUWkybFZiRV9zNHVseDRo bmhFb21YaFFLN3hRRWlrekF1cFI4JnM9RXRpdWlWdDVNbmpidzlXc0R0bWppdTJsDQo+ID4+Pj4g LWR2MVJvSFZwZEFsVFh0Z1pJUSZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgd2hpbGUgdGhpcyBk aXNjdXNzaW9uIHdpdGggQXV0aG9yIFRpcnUgYW5kID7igJxJIGRvbid0IHJ1biBhIGxvY2FsDQo+ ID4+Pj4+ICAgIG5ldHdvcmsgb3IgYW4gYWNjZXNzIG5ldHdvcmsgYW5kIHdvdWxkIG5vdCBleHBl Y3QgdG8gZGVwbG95IHJlbGF5cw0KPiA+Pj4+PiAgICBtZWFudCB0byBmdW5jdGlvbiBpbiB0aGF0 IG1vZGXigJwgQnJhbmRvbiosIGhhcyBiZWVuIG9uIG1vcmUgb3IgbGVzcw0KPiA+Pj4+PiAgICBk ZXZpYXRlZCBzdWJqZWN0cywgb3IgcmVwZWF0aW5nIHdoYXQgd2UgYWxyZWFkeSBoYXZlIGJlZW4g dGhyb3VnaA0KPiA+Pj4+PiAgICBlYXJsaWVyIChQUzogTm90aWNlIHRoYXQgQXV0aG9yIFByYXNo YW50aCBhbHJlYWR5IGxpc3RlZC9kaXNjdXNzZWQNCj4gPj4+Pj4gICAgdGhlIGF0dGFjayBzdHVm ZiBkdXJpbmcgdGhlIGRpc2N1c3MuIEkgZmVhcmVkIHlvdSB3ZXJlIHJlZG9pbmcgdGhhdC4pDQo+ ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIC9LYXJsDQo+ID4+Pj4+DQo+ID4+ Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICogaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4g YXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAyMjE3Lmh0bWwNCj4gPj4+Pj4gICAgPGh0dHBz Oi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+PiAzQV9f d3d3LmlldGYub3JnX21haWwtDQo+ID4+Pj4NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1 cnJlbnRfbXNnMDIyMTcuaHRtbCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+Pj4gdzBGNGpw TjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJ QlhnJm09TFhhSC0NCj4gPj4+Pg0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4 UUVpa3pBdXBSOCZzPWdseFAzb3ZZWDdDZDRmMTJ6SUlMSmhiVGMNCj4gPj4+PiBFSjBWaXFWZ0pR eVNRa0pIWVEmZT0+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgIC0tLS0tVXJzcHJ1bmdsaWd0IG1lZGRlbGFuZGUtLS0tLQ0KPiA+Pj4+PiAg ICBGcsOlbjogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSBbbWFpbHRvOnRpcmVkZHlAY2lz Y28uY29tXQ0KPiA+Pj4+PiAgICBTa2lja2F0OiBkZW4gMTggbm92ZW1iZXIgMjAxNiAwNDowMA0K PiA+Pj4+PiAgICBUaWxsOiBLYXJsIFN0YWhsOyAnQnJhbmRvbiBXaWxsaWFtcyc7IFByYXNoYW50 aCBQYXRpbA0KPiA+Pj4+PiAgICAocHJhc3BhdGkpOyB0cmFtQGlldGYub3JnIDxtYWlsdG86dHJh bUBpZXRmLm9yZz4NCj4gPj4+Pj4gICAgS29waWE6IHRyYW0tY2hhaXJzQGlldGYub3JnIDxtYWls dG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+OyAnRGFuDQo+ID4+Pj4+ICAgIFdpbmcnOyAnU3BlbmNl ciBEYXdraW5zIGF0IElFVEYnDQo+ID4+Pj4+ICAgIMOEbW5lOiBSRTogW3RyYW1dIGRyYWZ0LWll dGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgSGkgS2FybCwNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgSSBkb24ndCB1bmRlcnN0YW5kIHlvdXIgY29uY2VybnMsIHBsZWFzZSBjbGFyaWZ5LiBUaGUg ZHJhZnQgbWFuZGF0ZXMNCj4gPj4+Pj4gICAgKEQpVExTIGJ1dCBkb2VzIG5vdCBtYW5kYXRlIFRV Uk4gc2VydmVyIHZhbGlkYXRpb24uDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIFdlIGFyZSBkaXNjdXNz aW5nIHZhcmlvdXMgYXR0YWNrcyBwb3NzYmlsZSBmb3IgdGhlIFdHIHRvIGRlY2lkZSBpZg0KPiA+ Pj4+PiAgICAoRClUTFMgaXMgYSBNVVNUIG9yIFNIT1VMRC4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgLVRpcnUNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4+Pj4+ DQo+ID4+Pj4+PiBGcm9tOiBLYXJsIFN0YWhsIFttYWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29t XQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gU2VudDogRnJpZGF5LCBOb3ZlbWJlciAxOCwgMjAxNiAyOjEx IEFNDQo+ID4+Pj4+DQo+ID4+Pj4+PiBUbzogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSA8 dGlyZWRkeUBjaXNjby5jb20NCj4gPj4+PiA8bWFpbHRvOnRpcmVkZHlAY2lzY28uY29tPj47ICdC cmFuZG9uIFdpbGxpYW1zJw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gPGJyYW5kb24ud2lsbGlhbXNAYWth bWFpLmNvbQ0KPiA+Pj4+IDxtYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tPj47DQo+ ID4+Pj4+ICAgIFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkpDQo+ID4+Pj4+DQo+ID4+Pj4+PiA8 cHJhc3BhdGlAY2lzY28uY29tIDxtYWlsdG86cHJhc3BhdGlAY2lzY28uY29tPj47IHRyYW1AaWV0 Zi5vcmcNCj4gPj4+Pj4gICAgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4gQ2M6IHRyYW0tY2hhaXJzQGlldGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+ OyAnRGFuIFdpbmcnDQo+ID4+Pj4+ICAgIDxkYW5AZGFud2luZy5vcmcgPG1haWx0bzpkYW5AZGFu d2luZy5vcmc+PjsgJ1NwZW5jZXIgRGF3a2lucw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gYXQgSUVURicg PHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tDQo+ID4+Pj4gPG1haWx0bzpzcGVuY2VyZGF3 a2lucy5pZXRmQGdtYWlsLmNvbT4+DQo+ID4+Pj4+DQo+ID4+Pj4+PiBTdWJqZWN0OiBTVjogW3Ry YW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+ Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+PiBDb250aW51aW5nIHRoZSB0aHJlYWQgb2YgdGhpcyBzdWJq ZWN0IHdpdGggdGhlIHZpZXcgdGhhdCBpdCBzaG91bGQgYmUNCj4gPj4+PiBhYm91dCB0aGUNCj4g Pj4+Pj4NCj4gPj4+Pj4+IE1VU1QvU0hPVUxEL1JFQ09NTUVORCBkaXNjdXNzaW9uIHJlZ2FyZGlu ZyBEKFRMUykgZm9yIHRoZQ0KPiA+PiBVU0FHRQ0KPiA+Pj4+IG9mDQo+ID4+Pj4+DQo+ID4+Pj4+ PiBhbiBhbHJlYWR5IGRpc2NvdmVyZWQgVFVSTiBzZXJ2ZXIsIHdoaWNoIG11c3QgYmUgdG90YWxs eQ0KPiA+PiBpbmRlcGVuZGVudA0KPiA+Pj4+IG9mIHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gbWV0 aG9kIHVzZWQgZm9yIGRpc2NvdmVyeS4NCj4gPj4+Pj4NCj4gPj4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+PiBJIGNhbid0IHNheSBJIHVuZGVyc3RhbmQgd2hlcmUgQnJhbmRvbidzL1RpcnUncyBkaXNj dXNzaW9uIGZpdHMgaW4gYW5kDQo+ID4+Pj4gd2hldGhlcg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gYXJl IHJpZ2h0IHRoaW5ncyBhcmUgc2FpZCBhbmQgYXJlIGluIHRoZSByaWdodCBjb250ZXh0Og0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+ID8/ID4gPiBUaGUgZHJhZnQgbWFuZGF0 ZXMgKEQpVExTIGJ1dCBkb2VzIG5vdCBtYW5kYXRlIFRVUk4gc2VydmVyDQo+ID4+Pj4+DQo+ID4+ Pj4+PiB2YWxpZGF0aW9uLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gPz8gKEQpVExTIGhlbHBzIGF2b2lk IHZhcmlvdXMgYXR0YWNrcywgbGlrZSBhdHRhY2tlciBzZW5kaW5nIHNwb29mZWQNCj4gPj4+PiBU VVJODQo+ID4+Pj4+DQo+ID4+Pj4+PiBtZXNzYWdlcyA/PyAgV2Ugc2hvdWxkIGRpc2N1c3MgYWxs IHN1Y2ggcG9zc2libGUgYXR0YWNrcywgYmVmb3JlIHdlDQo+ID4+Pj4gZGVjaWRlIHRvDQo+ID4+ Pj4+DQo+ID4+Pj4+PiBnbyB3aXRoIE1VU1Qgb3IgU0hPVUxELg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4+IFdoZXJlIGFyZSB3ZSBrbm93Pw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4+IFBsZWFzZSwganVzdCBrZWVwIHRoZSBjbGVhcmFuY2UgZnJvbSBh dXRoZW50aWNhdGlvbiBhcyBpdCB3YXMgZnJvbQ0KPiA+Pj4+IHZlcnNpb24NCj4gPj4+Pj4NCj4g Pj4+Pj4+IC0wNyBvZiB0aGUgZHJhZnQgYWxyZWFkeSwgdW50aWwgdGhlIEQoVExTKSBtYW5kYXRl IHdhcyB0aHJvd24gaW4NCj4gPj4gZHVyaW5nDQo+ID4+Pj4gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ PiBESVNDVVNTLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+IFNpbXBseSwg bG9naWNhbGx5Og0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gVFVSTiBzZXJ2ZXJzICpwcm92aWRlZCBi eSogKGFuZCBtYWludGFpbmVkIGJ5Pykgc29tZSAidHJ1c3QNCj4gPj4+PiBhbmNob3INCj4gPj4+ Pj4NCj4gPj4+Pj4+Pj4+IHN0b3JlIFtSRkM2MDI0XSBhbGxvd3MgYSBUVVJOIGNsaWVudCAuLi4i IG9yIGJ5ICJDZXJ0aWZpY2F0aW9uDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBhdXRob3JpdGllcyB0 aGF0IGlzc3VlIFRVUk4gc2VydmVyIGNlcnRpZmljYXRlcyINCj4gPj4+Pj4NCj4gPj4+Pj4+IGFy ZSBOT1QgdW5kZXIgdGhlIGNsZWFyYW5jZSBkaXNjdXNzZWQsIHdoaWNoIGlzIGZvciAiVFVSTiBz ZXJ2ZXJzDQo+ID4+Pj4gKnByb3ZpZGVkDQo+ID4+Pj4+DQo+ID4+Pj4+PiBieSogdGhlIGxvY2Fs IG5ldHdvcmsgb3IgYnkgdGhlIGFjY2VzcyBuZXR3b3JrIi4NCj4gPj4+Pj4NCj4gPj4+Pj4+IHNv IGEgU0hPVUxEIG9yIFJFQ09NTUVOREVEIG9mIEQoVExTKSBkb2VzIG5vdCBldmVuIGJlbG9uZw0K PiA+PiB1bmRlcg0KPiA+Pj4+IHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gY2xlYXJhbmNlIGRpc2N1 c3NlZC4NCj4gPj4+Pj4NCj4gPj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+Pj4gRlVSVEhFUiwgV2hlbiBJIHJlYWQ6DQo+ID4+Pj4+DQo+ID4+Pj4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+Pj4gNy4yLiAgUmVjdXJzaXZlbHkgRW5jYXBzdWxhdGVkIFRVUk4NCj4gPj4+Pj4NCj4g Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+PiAgIFdlYlJUQyBlbmRwb2ludHMgU0hPVUxEIHRyZWF0 IGFueSBUVVJOIHNlcnZlciBkaXNjb3ZlcmVkDQo+ID4+IHRocm91Z2gNCj4gPj4+PiB0aGUNCj4g Pj4+Pj4NCj4gPj4+Pj4+ICAgbWVjaGFuaXNtcyBkZXNjcmliZWQgaW4gdGhpcyBzcGVjaWZpY2F0 aW9uIGFzIGFuIGVudGVycHJpc2UvZ2F0ZXdheQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gICBvciBhY2Nl c3MgbmV0d29yayBzZXJ2ZXIsIGluIGFjY29yZGFuY2Ugd2l0aCBSZWN1cnNpdmVseQ0KPiA+PiBF bmNhcHN1bGF0ZWQNCj4gPj4+Pj4NCj4gPj4+Pj4+ICAgVFVSTiBbSS1ELmlldGYtcnRjd2ViLXJl dHVybl0uDQo+ID4+Pj4+DQo+ID4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gSXNuJ3QgdGhhdCAi YW55IiBpbiB0b3RhbCBjb250cmFkaWN0aW9uIHRvIHRoZSBjbGVhcmFuY2UgYmVpbmcgZGlzY3Vz c2VkPw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gSSB0aG91Z2h0OiAiZW50ZXJwcmlzZS9nYXRld2F5IG9y IGFjY2VzcyBuZXR3b3JrIiB3YXMgdGhlIHNhbWUgYXMNCj4gPj4geW91cg0KPiA+Pj4+Pg0KPiA+ Pj4+Pj4gImxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrIiBhbmQgdGhhdCBmb3IgT1RIRVIgZGlzY292 ZXJlZCBUVVJOIHNlcnZlcnMNCj4gPj4+Pj4NCj4gPj4+Pj4+IChvdXRzaWRlIHRoZSBsb2NhbCBv ciBhY2Nlc3MgbmV0d29yayksIGl0IG11c3QgYmUgdGhlIGFwcGxpY2F0aW9uIHRoYXQNCj4gPj4+ PiBpbnN0cnVjdHMNCj4gPj4+Pj4NCj4gPj4+Pj4+IHRoZSBUVVJOIGNsaWVudCBob3cgdG8gdXNl Lg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+IEkgc3VnZ2VzdCB0aGUgNy4y IHNlY3Rpb24gaXMgcmVwbGFjZWQgd2l0aCBteToNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAoNCkg IkRlcGxveW1lbnQgQ29uc2lkZXJhdGlvbnMgZm9yIFRVUk4gU2VydmVycyBQcm92aWRlZCBieQ0K PiA+PiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBMb2NhbCBvcg0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4gQWNjZXNzIE5ldHdvcmsiDQo+ID4+Pj4+DQo+ID4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4gd2hpY2ggbWVudGlvbnMgUmVjdXJzaXZlbHkgRW5jYXBzdWxhdGVkIFRVUk4gW0ktRC5pZXRm LXJ0Y3dlYi0NCj4gPj4gcmV0dXJuXS4NCj4gPj4+Pj4NCj4gPj4+Pj4+ICh5b3UgY2FuIHNwZWxs IGl0IG91dCBsaWtlIHRoYXQpDQo+ID4+Pj4+DQo+ID4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4g L0thcmwNCj4gPj4+Pj4NCj4gPj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+PiAtLS0tLVVyc3BydW5n bGlndCBtZWRkZWxhbmRlLS0tLS0NCj4gPj4+Pj4NCj4gPj4+Pj4+IEZyw6VuOiBUaXJ1bWFsZXN3 YXIgUmVkZHkgKHRpcmVkZHkpIFttYWlsdG86dGlyZWRkeUBjaXNjby5jb21dDQo+ID4+Pj4+DQo+ ID4+Pj4+PiBTa2lja2F0OiBkZW4gMTUgbm92ZW1iZXIgMjAxNiAwNTowMQ0KPiA+Pj4+Pg0KPiA+ Pj4+Pj4gVGlsbDogQnJhbmRvbiBXaWxsaWFtczsgS2FybCBTdGFobDsgUHJhc2hhbnRoIFBhdGls IChwcmFzcGF0aSk7DQo+ID4+Pj4gdHJhbUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+ DQo+ID4+Pj4+DQo+ID4+Pj4+PiBLb3BpYTogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0 cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4NCj4gPj4gV2luZyc7DQo+ID4+Pj4+ICAgICdTcGVu Y2VyIERhd2tpbnMgYXQgSUVURicNCj4gPj4+Pj4NCj4gPj4+Pj4+IMOEbW5lOiBSRTogW3RyYW1d IGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4+ DQo+ID4+Pj4+DQo+ID4+Pj4+PiBIaSBCcmFuZG9uLA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4+IEkganVzdCBsaXN0ZWQgb25lIHBvc3NpYmxlIGF0dGFjaywgdGhlcmUgY291 bGQgYmUgdmFyaW91cyBvdGhlciBhdHRhY2tzDQo+ID4+IGxpa2UNCj4gPj4+PiB0aGUNCj4gPj4+ Pj4NCj4gPj4+Pj4+IG9uZSBkaXNjdXNzZWQgaW4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L3JmYzU3NjYjc2VjdGlvbi0xNy4yLjENCj4gPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5w cm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+PiAzQV9fdG9vbHMuaWV0Zi5vcmdf aHRtbF9yZmM1NzY2LTIzc2VjdGlvbi0NCj4gPj4+PiAyRDE3LjIuMSZkPURnTUZhUSZjPTk2WmJa WmNhTUY0dzBGNGpwTjZMWmcmcj1id1otDQo+ID4+Pj4gbm5SR1dtY0dLUkl1YWRxNi1OU25zZ3di QlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4+Pg0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0 aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPXlUVFlLZ29yMl9hakhlN0tQXzRCem5sDQo+ID4+Pj4g RzFFYW11SXlfSzdhazBVNDBSYk0mZT0+LA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gd2hlcmUgYXR0YWNr ZXIgc2VuZHMgZmFrZWQgcGVybWlzc2lvbnMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGxhdW5jaA0K PiA+Pj4+IGF0dGFjaw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gKERPUyBvciBERE9TKSBvbiB0aGUgdmlj dGltIChUVVJOIGNsaWVudCkuDQo+ID4+Pj4+DQo+ID4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4g V2Ugc2hvdWxkIGRpc2N1c3MgYWxsIHN1Y2ggcG9zc2libGUgYXR0YWNrcywgYmVmb3JlIHdlIGRl Y2lkZSB0byBnbw0KPiA+PiB3aXRoDQo+ID4+Pj4+DQo+ID4+Pj4+PiBNVVNUIG9yIFNIT1VMRC4N Cj4gPj4+Pj4NCj4gPj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+PiAtVGlydQ0KPiA+Pj4+Pg0KPiA+ Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+IEZyb206IHRyYW0gW21haWx0bzp0cmFtLWJvdW5jZXNAaWV0Zi5vcmdd IE9uIEJlaGFsZiBPZiBCcmFuZG9uDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4gV2lsbGlhbXMNCj4gPj4+ Pj4NCj4gPj4+Pj4+PiBTZW50OiBNb25kYXksIE5vdmVtYmVyIDE0LCAyMDE2IDc6MzEgUE0NCj4g Pj4+Pj4NCj4gPj4+Pj4+PiBUbzogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSA8dGlyZWRk eUBjaXNjby5jb20NCj4gPj4+PiA8bWFpbHRvOnRpcmVkZHlAY2lzY28uY29tPj47IEthcmwgU3Rh aGwNCj4gPj4+Pj4NCj4gPj4+Pj4+PiA8a2FybC5zdGFobEBpbmdhdGUuY29tIDxtYWlsdG86a2Fy bC5zdGFobEBpbmdhdGUuY29tPj47IFByYXNoYW50aA0KPiA+Pj4+PiAgICBQYXRpbCAocHJhc3Bh dGkpDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4gPHByYXNwYXRpQGNpc2NvLmNvbSA8bWFpbHRvOnByYXNw YXRpQGNpc2NvLmNvbT4+OyB0cmFtQGlldGYub3JnDQo+ID4+Pj4+ICAgIDxtYWlsdG86dHJhbUBp ZXRmLm9yZz4NCj4gPj4+Pj4NCj4gPj4+Pj4+PiBDYzogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1h aWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4gV2luZycNCj4gPj4+Pj4gICAgPGRhbkBk YW53aW5nLm9yZyA8bWFpbHRvOmRhbkBkYW53aW5nLm9yZz4+OyAnU3BlbmNlcg0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+IERhd2tpbnMgYXQgSUVURicgPHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29t DQo+ID4+Pj4gPG1haWx0bzpzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+DQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4gU3ViamVjdDogUmU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2 ZXItZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+PiArMSBv biB0aGUgcmF0aW9uYWxlLiBJdCBtYWtlcyBhbG1vc3Qgbm8gZGlmZmVyZW5jZSBob3cgeW91IHNl Y3VyZQ0KPiA+PiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4+PiBsb2NhbCBvciBhY2Nlc3MgbmV0d29y ayBhdCB0aGUgYm9yZGVyLCBpdCdzIHN0aWxsIHBvc3NpYmxlIHRoYXQgdGhlcmUNCj4gPj4+Pj4N Cj4gPj4+Pj4+PiBhcmUNCj4gPj4+Pj4NCj4gPj4+Pj4+IG9uLXBhdGgNCj4gPj4+Pj4NCj4gPj4+ Pj4+PiBhZHZlcnNhcmllcywgYW5kIHVzaW5nIHNvbWUgdHlwZSBvZiBhdXRoZW50aWNhdGlvbiAo ZWl0aGVyIChEKVRMUyBvcg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+IFNUVU4pIGhlbHBzIHRvIHByb3Rl Y3QgYWdhaW5zdCB0aGVtLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4g SSBzdGlsbCBhZ3JlZSB3aXRoIEthcmwgb24gZG93bmdyYWRpbmcgdGhlIE1VU1QgYmFjayB0byBT SE9VTEQgb3INCj4gPj4+Pj4NCj4gPj4+Pj4+PiBSRUNPTU1FTkRFRCwgc2luY2UgSSB0aGluayB0 aGVyZSdzIHJvb20gZm9yIGRpc2FncmVlbWVudCBhYm91dA0KPiA+Pj4+IGhvdw0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+IGNyaXRpY2FsIGl0IGlzIHRvIG1pdGlnYXRlIGFnYWluc3QgdGhhdCBhdHRhY2su IEVhc2Utb2YtdXNlIG1pZ2h0IHdpbg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+IG91dA0KPiA+Pj4+Pg0K PiA+Pj4+Pj4gZm9yIHNvbWUNCj4gPj4+Pj4NCj4gPj4+Pj4+PiBuZXR3b3JrcyBwcm92aWRlZCB0 aGV5IGhhdmUgb3RoZXIgcHJvdGVjdGlvbiBtZWNoYW5pc21zIGF0IGVpdGhlcg0KPiA+Pj4+IHRo ZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+IG5ldHdvcmsgb3IgZGF0YWxpbmsgbGF5ZXIuIEkgZG9uJ3Qg dGhpbmsgaXQgc2hvdWxkIGRyb3AgYmVsb3cgdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4gcmVjb21t ZW5kYXRpb24gbGV2ZWwgdGhvdWdoLCBiZWNhdXNlIG1vc3QgbmV0d29yayB3aWxsIG5vdCBoYXZl DQo+ID4+Pj4gc3VjaA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+IG1lY2hhbmlzbXMgaW4gcGxhY2UuDQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+PiAtLUJyYW5kb24NCj4gPj4+Pj4N Cj4gPj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+IE9uIDExLzE0LzIwMTYgMDY6MzYgQU0sIFRp cnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgd3JvdGU6DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+IFRo ZXJlIHNlZW1zIHRvIGJlIGNvbmZ1c2lvbiB3aHkgKEQpVExTIGlzIG1hbmRhdGVkIGluIHRoZSBk cmFmdC4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4gVGhlIGRyYWZ0 IG1hbmRhdGVzIChEKVRMUyBidXQgZG9lcyBub3QgbWFuZGF0ZSBUVVJOIHNlcnZlcg0KPiA+Pj4+ IHZhbGlkYXRpb24uDQo+ID4+Pj4+DQo+ID4+Pj4+PiBJbg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+IHNj ZW5hcmlvcyB3aGVyZSB0aGUgVFVSTiBjbGllbnQgY2Fubm90IHZhbGlkYXRlIHRoZSBUVVJOIHNl cnZlciwNCj4gPj4+Pj4NCj4gPj4+Pj4+PiAoRClUTFMgaGVscHMgYXZvaWQgdmFyaW91cyBhdHRh Y2tzLCBsaWtlIGF0dGFja2VyIHNlbmRpbmcgc3Bvb2ZlZA0KPiA+PiBUVVJODQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4gbWVzc2FnZXMNCj4gPj4+Pj4NCj4gPj4+Pj4+IHRvDQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4gVFVSTiBjbGllbnQgYW5kIHNlcnZlci4gRm9yIGV4YW1wbGUsIHdoZW4gKEQpVExTIGlzIG5v dCB1c2VkLA0KPiA+PiBhdHRhY2tlcg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+IGNhbiBzZW5kIHNwb29m ZWQgVFVSTiByZXF1ZXN0cyB0byB0aGUgVFVSTiBzZXJ2ZXIgdG8gY2xvc2UNCj4gPj4+PiBhbGxv Y2F0aW9ucy4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4gVGhlIGFi b3ZlIGF0dGFjayBpcyBwb3NzaWJsZSB3aGVuIFRVUk4gc2VydmVycyBhcmUgcHJvdmlkZWQgYnkN Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4gZWl0aGVyDQo+ID4+Pj4+DQo+ID4+Pj4+PiBsb2NhbA0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+IG9yIGFjY2VzcyBuZXR3b3Jrcy4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4gLVRpcnUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4+Pj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+PiBGcm9tOiB0cmFtIFttYWlsdG86dHJhbS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYg T2YgS2FybA0KPiA+PiBTdGFobA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gU2VudDogTW9uZGF5LCBO b3ZlbWJlciAxNCwgMjAxNiAxOjM4IFBNDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBUbzogJ0JyYW5k b24gV2lsbGlhbXMnIDxicmFuZG9uLndpbGxpYW1zQGFrYW1haS5jb20NCj4gPj4+PiA8bWFpbHRv OmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbT4+Ow0KPiA+Pj4+PiAgICBQcmFzaGFudGgNCj4g Pj4+Pj4NCj4gPj4+Pj4+Pj4+IFBhdGlsDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiAocHJhc3BhdGkp IDxwcmFzcGF0aUBjaXNjby5jb20gPG1haWx0bzpwcmFzcGF0aUBjaXNjby5jb20+PjsNCj4gPj4+ PiB0cmFtQGlldGYub3JnDQo+ID4+Pj4+ICAgIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+ Pj4NCj4gPj4+Pj4+Pj4+IENjOiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hh aXJzQGlldGYub3JnPjsgJ0Rhbg0KPiA+PiBXaW5nJw0KPiA+Pj4+PiAgICA8ZGFuQGRhbndpbmcu b3JnIDxtYWlsdG86ZGFuQGRhbndpbmcub3JnPj47ICdTcGVuY2VyDQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+PiBEYXdraW5zIGF0IElFVEYnIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbQ0KPiA+ Pj4+PiAgICA8bWFpbHRvOnNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPj47IFRpcnVtYWxl c3dhcg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gUmVkZHkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ICh0 aXJlZGR5KSA8dGlyZWRkeUBjaXNjby5jb20gPG1haWx0bzp0aXJlZGR5QGNpc2NvLmNvbT4+DQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBTdWJqZWN0OiBSZTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10 dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+Pj4+PiBIaSBCcmFuZG9uLA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+ Pj4+Pj4+IEluIHRoaXMgZHJhZnQsIHlvdSBoYXZlIGJlZW4gcHVzaGluZyBmb3IgInZhbGlkYXRp b24iIG9mIHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gZGlzY292ZXJlZCBUVVJOIHNlcnZlciBi eSB1c2luZyBEVExTLiBUaGUgdXNlIGNhc2UgZm9yIHRoYXQgaGFzDQo+ID4+IG5vdA0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4gYmVlbiBzcGVsbGVkIG91dCwgYnV0IHRoZSB1c2UgY2FzZSBvZiAiVFVS TiBzZXJ2ZXJzICpwcm92aWRlZA0KPiA+PiBieSoNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHRoZSBs b2NhbCBuZXR3b3JrIG9yIGJ5IHRoZSBhY2Nlc3MgbmV0d29yayIsIHJlYWxseSBuZWVkcyB0byBi ZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gY2xhcmlmaWVkIGluIHRoaXMgZHJhZnQuIEZvciB0aGlz IHVzZSBjYXNlLCBjbGVhcmFuY2UgZnJvbQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gYXV0aGVudGlj YXRpb24gYW5kIHZhbGlkYXRpb24gd2FzIG1hZGUgaW4gdmVyc2lvbiAtMDcgb2YgdGhlDQo+ID4+ IGRyYWZ0DQo+ID4+Pj4+DQo+ID4+Pj4+PiBhbHJlYWR5Lg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IFJlZ2FyZGluZyB5b3VyIGNvbW1lbnQgYmVsb3csIGl0IGlz IG5vdCBjbGVhciB3aGljaCB1c2UgY2FzZQ0KPiA+PiBZT1UNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ IE5PVyBhcmUgY29uc2lkZXJpbmcuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4gRnVydGhlciwgRElTQ09WRVJZIGFuZCBVU0FHRSBhcmUgbm90IHRoZSBzYW1lIGlu IHRoaXMNCj4gPj4gZGlzY3Vzc2lvbi4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IFlvdSBtaXggdGhh dCwgZXNwZWNpYWxseSByZWdhcmRpbmcgdGhlIGFueWNhc3QgbWV0aG9kLiBObyBvbmUgaXMNCj4g Pj4+Pj4NCj4gPj4+Pj4+Pj4+IHN1Z2dlc3RpbmcgdGhhdCB0aGUgVFVSTiBzZXJ2ZXIgaXMgVVNF RCB3aGVuIGFkZHJlc3NlZCBieQ0KPiA+Pj4+IGFueWNhc3QuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ PiBUaGVyZSBpcyBvbmx5IE9ORSBwYWNrZXQgYWRkcmVzc2VkIGJ5IGFueWNhc3QgYW5kIHNlbnQg dG8gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBTVFVOL1RVUk4gc2VydmVyIGFuZCB0aGF0IGlz IGZvciBESVNDT1ZFUklORyBpdC4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+Pj4+PiBTZWUgZnVydGhlciBpbmxpbmUgYmVsb3cuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pg0K PiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gVGhhbmtzLA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gS2FybA0K PiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IC0tLS0tVXJzcHJ1bmds aWd0IG1lZGRlbGFuZGUtLS0tLQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gRnLDpW46IEJyYW5kb24g V2lsbGlhbXMgW21haWx0bzpicmFuZG9uLndpbGxpYW1zQGFrYW1haS5jb21dDQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4+PiBTa2lja2F0OiBkZW4gMTEgbm92ZW1iZXIgMjAxNiAxOTowOA0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+Pj4gVGlsbDogS2FybCBTdGFobDsgJ1ByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkp JzsgdHJhbUBpZXRmLm9yZw0KPiA+Pj4+IDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+Pj4N Cj4gPj4+Pj4+Pj4+IEtvcGlhOiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hh aXJzQGlldGYub3JnPjsgJ0Rhbg0KPiA+Pj4+IFdpbmcnOw0KPiA+Pj4+PiAgICAnU3BlbmNlciBE YXdraW5zIGF0IElFVEYnOw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gJ1RpcnVtYWxlc3dhciBSZWRk eSAodGlyZWRkeSknDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiDDhG1uZTogUmU6IFt0cmFtXSBkcmFm dC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pg0K PiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gKDEpIEkgYWdyZWUgd2l0aCBLYXJsIHRoYXQgdGhlIE1VU1Qg Zm9yIChEKVRMUyBvciBTVFVOIGF1dGgNCj4gPj4gc2hvdWxkDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ PiByZXZlcnQgdG8gYSBTSE9VTEQgb3IgYSBSRUNPTU1FTkRFRCwgZ2l2ZW4gdGhhdCBuZXR3b3Jr DQo+ID4+Pj4gcGVyaW1ldGVyDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBjb250cm9sIGlzIGNhbGxl ZCBvdXQgd2l0aCBNVVNUIChub3RlIHRoYXQgdGhlcmUgYXJlIGEgZmV3ICJtdXN0Ig0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4gdG8gIk1VU1QiIGVkaXRzIHJlcXVpcmVkIGluIHRoYXQgdGV4dCkuIEFs dGhvdWdoIEkgd291bGQgZGlzYWdyZWUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHdpdGggYW4gZW50 ZXJwcmlzZSBuZXR3b3JrIGFkbWluIHdobyBjaG9vc2VzIG5vdCB0byBkbyBvbmUgb2YNCj4gPj4+ PiB0aG9zZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gdHdvIHRoaW5ncyAoc2VlIG15IGNvbW1lbnRz IGFib3V0ICgzKS8oNCkgYmVsb3cpLCBJIHRoaW5rIHRoZXJlJ3MNCj4gPj4+Pj4NCj4gPj4+Pj4+ Pj4+IHJvb20gZm9yIGRpZmZlcmVuY2Ugb2Ygb3BpbmlvbiB0aGVyZSwgc28gTVVTVCBpcyB1bmxp a2VseSB0byBiZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gY29tcGxpZWQNCj4gPj4+Pj4NCj4gPj4+ Pj4+IHdpdGgNCj4gPj4+Pj4NCj4gPj4+Pj4+PiBhbnl3YXkuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gW0thcmxdIEdvb2QgdGhhdCB5b3UgYWdyZWUgdGhlIE1V U1QgKHRocm93bi1pbiBkdXJpbmcgZGlzY3VzcykNCj4gPj4+PiBtdXN0DQo+ID4+Pj4+DQo+ID4+ Pj4+Pj4+PiBnbyBhd2F5LCBidXQgZm9yIHRoZSB1c2UgY2FzZSBvZiAiVFVSTiBzZXJ2ZXJzICpw cm92aWRlZCBieSogdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBsb2NhbCBuZXR3b3JrIG9yIGJ5 IHRoZSBhY2Nlc3MgbmV0d29yay4iIHRoZXJlIHNob3VsZCBub3QgZXZlbg0KPiA+PiBiZQ0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4gU0hPVUxEDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4gb3IgUkVDT01NRU5ELg0K PiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gWW91ciBhcmUgcmVsYXRpbmcgdG8gVFVSTiBzZXJ2ZXJzICpw cm92aWRlZCBieSogKGFuZCBtYWludGFpbmVkDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBieT8pIHNv bWUgInRydXN0IGFuY2hvciBzdG9yZSBbUkZDNjAyNF0gYWxsb3dzIGEgVFVSTiBjbGllbnQgLi4u Ig0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gb3IgYnkgIkNlcnRpZmljYXRpb24gYXV0aG9yaXRpZXMg dGhhdCBpc3N1ZSBUVVJOIHNlcnZlcg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gY2VydGlmaWNhdGVz IiB0aGF0ICpwcm92aWRlIFRVUk4gc2VydmVycyB3aXRoIHRoZWlyIGNlcnRpZmljYXRlcw0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4gaW4qIHRoYXQgeW91IGV4cGVjdCB0byBiZSBkaXNjb3ZlcmVkIGFu ZCB3aGVyZSB0aGUgVFVSTiBjbGllbnQNCj4gPj4+PiAodGhlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ PiBXZWJSVEMgYnJvd3NlcikgbXVzdCBiZSBlcXVpcHBlZCB0byBhY2NlcHQgdGhvc2UgY2VydGlm aWNhdGVzLg0KPiA+Pj4+IFRoYXQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGlzIE5PVCBGT1IgInRo ZSBUVVJOIHNlcnZlcnMgKnByb3ZpZGVkIGJ5KiB0aGUgbG9jYWwgbmV0d29yayBvcg0KPiA+Pj4+ IGJ5DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB0aGUgYWNjZXNzIG5ldHdvcmsiIHRoYXQNCj4gPj4+ Pj4NCj4gPj4+Pj4+IGlzDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4gYmVpbmcgZGlzY3Vzc2VkIGhlcmUu DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4+Pj4+ICgyKSBJIGRpc2FncmVlIHdpdGggS2FybCBhYm91dCBhbnljYXN0LiBBIHNlcnZl ciB0aGF0IHByb3Blcmx5DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBzdXBwb3J0cyBhbnljYXN0IFtL YXJsXSBXaGF0IGlzICJhIHNlcnZlciB0aGF0IHByb3Blcmx5IHN1cHBvcnRzDQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4+PiBhbnljYXN0Ij8gSXQgaXMgY2VydGFpbmx5IE5PVCBBIFtSRkM1NzY2XSBUVVJO IHNlcnZlciB0aGF0IGlzDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBzdXBwb3NlZA0KPiA+Pj4+Pg0K PiA+Pj4+Pj4gdG8NCj4gPj4+Pj4NCj4gPj4+Pj4+PiBiZSBkaXNjb3ZlcmVkIGJ5IHRoaXMgZHJh ZnQuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBBbHNvIG5vdGljZSB0aGF0IHdlIGFyZSB0YWxraW5n IGFib3V0IG9uZSBhbnljYXN0IHBhY2tldCBGT1INCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IERJU0NP VkVSWSwgTk9UIFVTQUdFIChyZWxheWluZyB0cmFmZmljKSB3aXRoIGFueWNhc3QgYWRyZXNzaW5n Lg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gKEkgYXNrZWQgdGhhdCB0aGUgY29uZnVzaW5nICJzdXBw b3J0cyBhbnljYXN0IiBzdGF0ZW1lbnQgaXMNCj4gPj4gcmVtb3ZlZA0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4gZnJvbSB0aGUgYmVnaW5uaW5nIG9mIHRoZSBkcmFmdC4pDQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gd2lsbCBpbmRlZWQgdHJlYXQgaW5jb21pbmcgcmVx dWVzdHMgZGlmZmVyZW50bHkgZGVwZW5kaW5nIHVwb24NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHdo ZXRoZXIgdGhleSBhcnJpdmUgb24gdGhlIGFueWNhc3QgYWRkcmVzcyBvciB0aGUgdW5pY2FzdA0K PiA+PiBhZGRyZXNzLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gSSBzdHJvbmdseSBkaXNhZ3JlZSB3 aXRoIHRoZSBpZGVhIG9mIHVzaW5nIFRyeSBBbHRlcm5hdGUgb24gdGhlDQo+ID4+Pj4+DQo+ID4+ Pj4+Pj4+PiBiaW5kaW5nIHJlcXVlc3QsIGJlY2F1c2UgeW91IHdhbnQgcmVkaXJlY3QgZm9yIHRo ZSBsb25nLWxpdmVkDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBhbGxvY2F0ZSByZXF1ZXN0LCBub3Qg Zm9yIHRoZSBxdWVyeS1yZXNwb25zZSBiaW5kaW5nIHJlcXVlc3QuDQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+PiBbS2FybF0gV2l0aCBhIFRVUk4gc2VydmVyIHByb3ZpZGVkIGJ5IHRoZSBsb2NhbCBvciBh Y2Nlc3MNCj4gPj4gbmV0d29yaywNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IFNUVU4gaXMgTk9UIFVT RUQgZm9yIHNldHRpbmcgdXAgYW55IGJpbmRpbmcgYW5kIG5vIHN1YnNlcXVlbnQNCj4gPj4+Pj4N Cj4gPj4+Pj4+Pj4+IHRyYWZmaWMuIFRoZSBTVFVOIGJpbmRpbmcgcmVzcG9uc2UgMzAwIFRyeSBB bHRlcm5hdGUgKHN0YXRpY2FsbHkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGNvbmZpZ3VyZWQpIGlu IG15IHByb3Bvc2VkIHRleHQsIGlzIG9ubHkgYW4gaW5kaWNhdGlvbiB1c2VkIGF0DQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+PiBESVNDT1ZFUlksIHRoYXQgYSBuZXR3b3JrIHByb3ZpZGVkIFRVUk4gc2Vy dmVyIGlzIHRoZXJlIGFuZA0KPiA+Pj4+IHNob3VsZA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gYmUg dXNlZCBhdCBpdHMgdW5pY2FzdCBhZGRyZXNzIHJldmVhbGVkIGluIHRoZQ0KPiA+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4gMzAwIHJlc3BvbnNlLiBUaGUgbG9uZy1saXZlZCBUVVJOIGFsbG9jYXRlIElTIFVT RUQgZm9yIHRoZQ0KPiA+PiB0cmFmZmljLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gVGhlIFNUVU4g c2VydmVyIHBvcnRpb24gb2YgdGhlIFRVUk4gc2VydmVyIHBhcmFsbGVsaW5nIHRoZQ0KPiA+PiBk ZWZhdWx0DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBnYXRld2F5IHJvdXRlciBpcyBuZXZlciB1c2Vk IGZvciBhbnkgYmluZGluZy4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+PiBQYXJ0IG9mIG15IHJlYXNvbiBmb3IgdGhpcyBpcyB0aGF0IGdvb2QgKGJ5IG15IGRlZmlu aXRpb24pIFRVUk4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHNlcnZlciBkaXN0cmlidXRpb24gaXMg YnJvYWRlciB0aGFuIGlzIHJlYXNvbmFibGUgZm9yIGFueWNhc3QNCj4gPj4+Pj4NCj4gPj4+Pj4+ Pj4+IGFkZHJlc3MgbWFuYWdlbWVudCwgYW5kIGRldGVybWluaW5nIGEgcmVkaXJlY3QgYWRkcmVz cyB0byBiZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gZGVsaXZlcmVkIGluY3JlYXNlcyB0aGUgY29z dCBvZiBoYW5kbGluZyB0aGUgU1RVTiBiaW5kIHJlcXVlc3QuIEl0DQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+PiBpcyBkZXNpcmFibGUgZm9yIHRoYXQgY29zdCB0byBzY2FsZSB3aXRoIHRoZSBUVVJOIGFs bG9jYXRlIGxvYWQsDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBub3QgdGhlIFNUVU4gYmluZA0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4gbG9hZC4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IFtLYXJsXSBZb3UganVz dCBhZGQgYSBzdGF0aWMgcm91dGUgaW4geW91IGFjY2VzcyByb3V0ZXIgZm9yIHRoZQ0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4gYW55Y2FzdCBhZGRyZXNzIHRvIHBvaW50IHRvIHlvdXIgVFVSTiBzZXJ2 ZXIhDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gSSBkb24ndCBv cHBvc2Ugc3VwcG9ydGluZyBib3RoIGluIHRoZSBzcGVjIGlmIHNvbWVvbmUgd2FudHMgdG8NCj4g Pj4+Pj4NCj4gPj4+Pj4+Pj4+IHByb3Bvc2UgbGFuZ3VhZ2UgZm9yIHRoYXQsIGJ1dCBpdCB3b3Vs ZCBhZGQgYnVyZGVuIHRvIGNsaWVudA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gaW1wbGVtZW50YXRp b25zIGJlY2F1c2UgdGhleSB3b3VsZCBiZSByZXF1aXJlZCB0byBzdXBwb3J0DQo+ID4+IGJvdGgN Cj4gPj4+PiBldmVuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB0aG91Z2ggdGhlIHNlcnZlciBjb3Vs ZCB1c2UgZWl0aGVyLiBPbiB0aGUgb3RoZXIgaGFuZCwgdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ PiBjdXJyZW50bHkgZGVmaW5lZCBtZXRob2Qgc2hvdWxkbid0IHJlcXVpcmUgY2hhbmdlcyB0byBj bGllbnRzIGF0DQo+ID4+IGFsbC4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IFtLYXJsXSA/ISBCdXQg aXQgZG9lcyBub3QgZmluZCBbUkZDNTc2Nl0gVFVSTiBzZXJ2ZXJzLi4uDQo+ID4+Pj4+DQo+ID4+ Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gKDMpLyg0KSBJIGRpc2FncmVlIHdpdGggS2Fy bCdzIGFzc2Vzc21lbnQgb2YgdGhlIGRlcGxveW1lbnQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGNv bnNpZGVyYXRpb25zLCBlc3BlY2lhbGx5IHRoZSBjb25jbHVzaW9uIHRoYXQgYW55Y2FzdCBpcyB0 aGUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGJldHRlciBwYXRoIGZvciBsb2NhbC9hY2Nlc3MgbmV0 d29ya3MuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBbS2FybF0gSWYgeW91IG1lYW4gdHJhZmZpYyBw YXRocyAobGlrZSBJIGRpZCksICJwYXRocyIgYXJlIGZvcg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4g VVNBR0UgYW5kIG5vIG9uZSBpcyBzdWdnZXN0aW5nIGFueWNhc3QgZm9yIHRoYXQuDQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+PiBJbmRlcGVuZGVudCBvZiBob3cgZGlzY292ZXJlZCAoYnkgYW55Y2FzdCBv ciBhbnkgb2YgdGhlIEROUw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gbWV0aG9kcykgQUxMIFVTQUdF IHRocm91Z2ggcGF0aHMgaXMgYnkgdW5pY2FzdCBhZGRyZXNzaW5nLg0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IEl0IG1pZ2h0IGJlIGJldHRlciBmb3IgdGhlIHNl cnZlcg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gaW1wbGVtZW50ZXIsIGJ1dCBub3QgZm9yIHRoZSB0 aGUgY2xpZW50LCBiZWNhdXNlIEkgdGhpbmsgaXQncw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gcGFy dGljdWxhcmx5IGRpZmZpY3VsdCBmb3IgYSBjbGllbnQgdG8gZGV0ZXJtaW5lIHdoZXRoZXIgaXQn cw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gbmV0d29yaw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gaXMNCj4g Pj4+Pj4NCj4gPj4+Pj4+PiAic2VhbGVkIi4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IFtLYXJsXSBO bywgbm90IGF0IGFsbC4gQmxvY2tpbmcgU1RVTiBwYWNrZXRzIGF0IHRoZSBkZWZhdWx0IGdhdGV3 YXkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGlzIHRoZSB3YXkgdG8gIm5ldHdvcmsgd2lzZSIgc2Vh bCB0aGUgbG9jYWwgbmV0d29yayAoYW5kIG9ubHkNCj4gPj4gYWxsb3cNCj4gPj4+Pj4NCj4gPj4+ Pj4+Pj4+IHRoZSBwYXJhbGxlbCBUVVJOIHBhdGgpISBUaGF0IGlzIGVhc2lseSBkZXRlY3RlZCBi eSBhIFRVUk4gY2xpZW50Lg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+ Pj4+IFRoZSBjbGllbnQgaGFzIHRvIHRydXN0IHRoYXQgdGhlIG5ldHdvcmsgaXMgcHJvcGVybHkg c2VhbGVkLCBzaW5jZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gaXQncyBkaWZmaWN1bHQgKGF0DQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBsZWFzdCkgZm9yIHRoZSBjbGllbnQgdG8gdmVyaWZ5LiBBbHNv LCBJIHRoaW5rIHRoYXQgdGhlIEROUyBhbmQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IERIQ1AgbWV0 aG9kcyBhcmUgbGlrZWx5IHRvIGJlIGVhc2llciBmb3IgZW50ZXJwcmlzZSBhbmQgYWNjZXNzDQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBuZXR3b3JrcyB0byBpbXBsZW1lbnQsIHNpbmNlIHRoZXkgd2ls bCBoYXZlIHRoZSBuZWNlc3NhcnkNCj4gPj4gc3lzdGVtcw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4g aW4gcGxhY2UgYWxyZWFkeS4gRXZlbiBhIGhvbWUgbmV0d29yayBnYXRld2F5IGFwcGxpYW5jZSB3 aWxsDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBhbHJlYWR5IGhhdmUgYm90aCBpbnRlZ3JhdGUgRE5T IGFuZCBpbnRlZ3JhdGUgREhDUCwgc28gSSBzdXNwZWN0DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB0 aGF0IGEgc21hbGwgbG9jYWwgbmV0d29yayB3aWxsIGhhdmUgYW4gZWFzaWVyIHRpbWUgd2l0aCB0 aGVzZSB0aGFuDQo+ID4+Pj4geW91DQo+ID4+Pj4+DQo+ID4+Pj4+PiBzdWdnZXN0IGFzIHdlbGwu DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gW0thcmxdIFNvIHlv dSBhZ3JlZSB0aGF0IGZvciBhIFRVUk4gc2VydmVyIGluIGEgbG9jYWwgbmV0d29yaywgaXRzDQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBhZGRyZXNzIHNoYWxsIG9ubHkgYmUgZGVwbG95ZWQgaW4gbG9j YWwgRE5TIC0gSSB0aGluayB0aGUgZHJhZnQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHNob3VsZA0K PiA+Pj4+Pg0KPiA+Pj4+Pj4gc2F5DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4gdGhhdCBhbHNvLg0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IERlc3BpdGUgdGhlIGZhY3Qg dGhhdCBJIGRpc2FncmVlIHdpdGggdGhlIGFzc2Vzc21lbnQsIEkgZG9uJ3QgcnVuIGENCj4gPj4+ Pj4NCj4gPj4+Pj4+Pj4+IGxvY2FsIG5ldHdvcmsgb3IgYW4gYWNjZXNzIG5ldHdvcmsgYW5kIHdv dWxkIG5vdCBleHBlY3QgdG8NCj4gPj4gZGVwbG95DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiByZWxh eXMgbWVhbnQgdG8gZnVuY3Rpb24gaW4gdGhhdCBtb2RlLCBzbyBJIHdpbGwgbm90IGhhdmUgc3Ry b25nDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBvYmplY3Rpb25zIHRvIGluY2x1ZGluZyB0aGF0IGxh bmd1YWdlIGlmIHRoZXJlIGlzIGJyb2FkIHN1cHBvcnQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHdp dGhpbg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4gV0cgZm9yIEth cmwncyBmcmFtaW5nLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ IC0tQnJhbmRvbg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IE9u IDExLzEwLzIwMTYgMDU6NDggUE0sIEthcmwgU3RhaGwgd3JvdGU6DQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+Pj4gKDEpIFRoZSBkb3duZ3JhZGUgb2YgdGhlIE1VU1QgbGV2ZWwgcmVxdWlyZW1lbnQgZm9y DQo+ID4+Pj4gYXV0aGVudGljYXRpb24NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBkZWZpbmVkDQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBpbiBbUkZDNTc2Nl0gd2FzICJyaWdodGx5IiAodG8gdXNlIHRo ZSB0ZXJtIGZyb20gYmVsb3cpDQo+ID4+IGludHJvZHVjZWQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ IGFuZCBtYWRlIE9QVElPTkFMIGZvciBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlIGxvY2Fs IG9yDQo+ID4+Pj4gYWNjZXNzDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4gbmV0d29yay4NCj4gPj4+Pj4N Cj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IEhPV0VWRVIsIFByYXNoYW50aCdz OiAiSSB0aGluayB3ZSBjYW4gbWFuZGF0ZSAoRClUTFMgKmlmKg0KPiA+PiBTVFVODQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+PiBhdXRoZW50aWNhdGlvbiBvciB0aGlyZC1wYXJ0eSBhdXRob3JpemF0aW9u IGlzIG5vdCB1c2VkLiIgdGhyb3duLQ0KPiA+PiBpbg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gZHVy aW5nIHRoZSBESVNDVVNTLCBtdXN0IGJlIGRlbGV0ZWQgZnJvbSB0aGUgLTEwIHZlcnNpb24gb2Yg dGhpcw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gZGlzY292ZXJ5IHNpbmNlIGl0IEJMT0NLcyB0aGUg dXNhZ2UgYW5kIGRlcGxveW1lbnQgb2YgbmV0d29yaw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gcHJv dmlkZWQgVFVSTiBzZXJ2ZXJzLCB3aGljaCB3YXMgdGhlIG1haW4gcHVycG9zZSBvZiB0aGlzDQo+ ID4+Pj4gZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBkcmFmdC4gKEFsc28sIEF1dGhv cnMncyBkaWQgbm90IGZvbGxvdyBCZW4gQ2FtcGJlbGwnczogIkkgc2F3IGENCj4gPj4+Pj4NCj4g Pj4+Pj4+Pj4+IGNvbW1lbnQgb24gbXkgRElTQ1VTUyBlbWFpbCB0aHJlYWQgZnJvbSBLYXJsIFN0 YWhsLCBzdGF0aW5nDQo+ID4+IHRoYXQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IERUTFMgY291bGQg bm90IGJlIG1hbmRhdGVkLiBIYXMgdGhhdCBpbnB1dCBiZWVuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ PiBjb25zaWRlcmVkPyIpDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+ Pj4+PiBUaGUgdGhyb3duLWluIGFkZGl0aW9uIGluIHZlcnNpb24gLTEwIChub3Qgc2hvd24gaW4g ZnVsbCBiZWxvdykNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBoaWdobGlnaHRzDQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4+PiB0aGlzOg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+Pj4gICBBIFRVUk4gY2xpZW50IE1VU1QgdXNlIChEKVRMUyAuLi4gaW4gdGhlIGFic2VuY2Ug b2YgU1RVTg0KPiA+PiBsb25nLQ0KPiA+Pj4+IHRlcm0NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAg IGNyZWRlbnRpYWwgbWVjaGFuaXNtIFtSRkM1Mzg5XSBvciBTVFVOIEV4dGVuc2lvbiBmb3IgVGhp cmQtDQo+ID4+Pj4gUGFydHkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIEF1dGhvcml6YXRpb24g W1JGQzc2MzVdLiAgLi4uDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+ Pj4+PiAgIG8gIEZvciBjZXJ0aWZpY2F0ZS1iYXNlZCBhdXRoZW50aWNhdGlvbiwgYSBwcmUtcG9w dWxhdGVkIHRydXN0DQo+ID4+Pj4+DQo+ID4+Pj4+PiBhbmNob3INCj4gPj4+Pj4NCj4gPj4+Pj4+ Pj4+PiAgICAgIHN0b3JlIFtSRkM2MDI0XSBhbGxvd3MgYSBUVVJOIGNsaWVudCAuLi4NCj4gPj4+ Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICAgbyAgQ2VydGlmaWNhdGlv biBhdXRob3JpdGllcyB0aGF0IGlzc3VlIFRVUk4gc2VydmVyIGNlcnRpZmljYXRlcw0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4+ICAgICAgLi4uDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4+Pj4+PiAgIG8gIEZvciBUVVJOIHNlcnZlcnMgdGhhdCBkb24ndCBoYXZlIGEgY2Vy dGlmaWNhdGUgdHJ1c3QgY2hhaW4NCj4gPj4+Pj4NCj4gPj4+Pj4+IChlLmcuLA0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+Pj4+ICAgICAgYmVjYXVzZSB0aGV5IGFyZSBvbiBhIGhvbWUgbmV0d29yayBvciBh IGNvcnBvcmF0ZQ0KPiA+PiBuZXR3b3JrKSwNCj4gPj4+PiBhDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ Pj4gICAgICBjb25maWd1cmVkIGxpc3Qgb2YgVFVSTiBzZXJ2ZXJzIGNhbiBjb250YWluIHRoZSBT dWJqZWN0DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gUHVibGljDQo+ID4+Pj4+DQo+ID4+Pj4+PiBL ZXkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgICAgIEluZm8gKFNQS0kpIGZpbmdlcnByaW50IG9m IHRoZSBUVVJOIHNlcnZlcnMuLi4gZXRjLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+Pj4gV2hhdCBkb2VzIHRoZSBBdXRob3JzIGhhdmUgaW4gbWluZCAtIGEgcmVn dWxhdGVkIG5ldHdvcmsgb2YNCj4gPj4+PiBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gc2Vy dmVycywNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHdoZW4gdGhlIHB1cnBvc2Ugd2FzIGZvciBldmVy eW9uZSB0byBiZSBhYmxlIHRvIHVzZSBnb29kDQo+ID4+IFdlYlJUQw0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4gZXZlcnl3aGVyZSB5b3UgY2FuIHN1cmYsIGluY2x1ZGluZyBiZWhpbmQgeW91ciBob21l IEJlc3QgQnV5DQo+ID4+Pj4gYm91Z2h0DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBXaUZpIHJvdXRl ciAod2hpY2ggd2UgY2FuIGhvcGUsIHNvbWUgZGF5LCB3aWxsIGluY2x1ZGUgYSBkZWZhdWx0DQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBjb25maWd1cmVkLCByZWFkeSB0byB1c2UsIFRVUk4gc2VydmVy IHBhdGggcGFyYWxsZWxpbmcgaXRzIGRlZmF1bHQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGdhdGV3 YXkgcGF0aCAoaS5lLiB0aGUgTkFUL2ZpcmV3YWxsL2FjY2VzcyByb3V0ZXIvZGVmYXVsdA0KPiA+ PiBnYXRld2F5KT8NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ IFRoaXMgc3BlY2lmaWNhdGlvbiBzaGFsbCAoYXQgbGVhc3QpIHNwZWNpZnkgZGlzY292ZXJ5IG9m IG5ldHdvcmsNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBwcm92aWRlZA0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4gVFVSTiBzZXJ2ZXJzIHRvIGFsbG93IHJlYWwtdGltZSBjb21tdW5pY2F0aW9uLCBpbiBz aXR1YXRpb25zDQo+ID4+IHdoZXJlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBpdCBvdGhlcndpc2Ug aXMgbm90IHBvc3NpYmxlIG9yIGJhZDoNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAtIHRvIG1lZXQg dGhlIGF1dG8gY29uZmlndXJhdGlvbiBvZiBSRkMgNzQ3OCAoV2ViIFJlYWwtVGltZQ0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4+IENvbW11bmljYXRpb24NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IFVzZSBD YXNlcyBhbmQgUmVxdWlyZW1lbnRzKSAyLjMuNS4xLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IC0g cHJvdmlkaW5nIGEgZGlzY292ZXJ5IG1ldGhvZCBzdWl0YWJsZSBmb3INCj4gPj4+Pj4NCj4gPj4+ Pj4+Pj4+PiBkcmFmdC1pZXRmLXJ0Y3dlYi1yZXR1cm4tMDENCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IFRoZSBhYm92ZSBoYXMgYWxyZWFkeSBiZWVuIGRpc2N1 c3NlZCBtYW55IHRpbWVzIGluIHRoaXMgV0c6DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4gPj4+PiBhcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNn MDEzMTkuaHRtbA0KPiA+Pj4+PiAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29t L3YyL3VybD91PWh0dHBzLQ0KPiA+Pj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4+Pg0K PiA+Pg0KPiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9tc2cwMTMxOS5odG1sJmQ9RGdNRmFR JmM9OTZaYlpaY2FNRjQNCj4gPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2 LQ0KPiA+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+DQo+ID4+DQo+ IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9T3NsMGRUeGlzTTg1WWhk Sl9fMGlkbG0NCj4gPj4+PiBFdUhaRE85NHplRVRoMEt1V09VZyZlPT4NCj4gPj4+Pj4NCj4gPj4+ Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPiA+Pj4+IGFyY2hpdmUvd2ViL3Ry YW0vY3VycmVudC9tc2cwMTc0Mi5odG1sDQo+ID4+Pj4+ICAgIDxodHRwczovL3VybGRlZmVuc2Uu cHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19t YWlsLQ0KPiA+Pj4+DQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAxNzQy Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+Pj4+IHcwRjRqcE42TFpnJnI9YndaLW5u UkdXbWNHS1JJdWFkcTYtDQo+ID4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ ID4+Pj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1vdmtLcEFGdGFk bF90Vy0NCj4gPj4+PiBzR0U5bEtCaWRGaUo5RHdBeHJLeUMtS2dkQzZ3JmU9Pg0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtDQo+ID4+Pj4gYXJjaGl2ZS93 ZWIvdHJhbS9jdXJyZW50L21zZzAyMTkxLmh0bWwNCj4gPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVm ZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+PiAzQV9fd3d3LmlldGYu b3JnX21haWwtDQo+ID4+Pj4NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJlbnRfbXNn MDIxOTEuaHRtbCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+Pj4gdzBGNGpwTjZMWmcmcj1i d1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhh SC0NCj4gPj4+Pg0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBS OCZzPTZxVG16cW5FVzVmV1JETnQ2SlQ5Ug0KPiA+Pj4+IFd0bmtLZWNPVVlHOE95UHRCVlk5RWsm ZT0+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBKdXN0IGFz IGNyZWRlbnRpYWxzIGZvciBhdXRoZW50aWNhdGlvbiBjYW5ub3QgYmUgZXhwZWN0ZWQgdG8gYmUN Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBhdmFpbGFibGUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGZv ciB0aGlzIGdlbmVyYWwgdXNhZ2UsIG5vciBjYW4gd2UgaW1wb3NlIHRoYXQgY2VydGlmaWNhdGVz IHNob3VsZA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gYmUNCj4gPj4+Pj4NCj4gPj4+Pj4+IHVzZWQu DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBGb3IgdGhlIG5ldHdvcmsgcHJvdmlkZWQgVFVSTiBzZXJ2 ZXIsIHdlIHNob3VsZCBub3QvbXVzdCBub3QNCj4gPj4+PiBleHBlY3QNCj4gPj4+Pj4NCj4gPj4+ Pj4+Pj4+IHNvbWUgaGlnaGVyIGxldmVsIG9mIHRydXN0IG9yIHNlY3VyaXR5IHdoZW4gdGhlIHJl YWwtdGltZSBtZWRpYQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gZmxvd3MgdGhyb3VnaCB0aGUgVFVS TiBzZXJ2ZXIgdGhhbiB3aGVuIGl0IGdvZXMgdGhyb3VnaCB0aGUNCj4gPj4+PiBkZWZhdWx0DQo+ ID4+Pj4+DQo+ID4+Pj4+PiBnYXRld2F5IQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+Pj4gVGhlIHVzZSBvZiAoRClUTFMgaGFzIGJlZW4gZGlzY3Vzc2VkIGludGVu c2l2ZWx5IGluIHRoZSAtMDQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiB2ZXJzaW9uIG9mIHRoZQ0K PiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gZHJhZnQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsLQ0KPiA+Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cw MTgyMS5odG1sDQo+ID4+Pj4+ICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20v djIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pj4+DQo+ ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAxODIxLmh0bWwmZD1EZ01GYVEm Yz05NlpiWlpjYU1GNA0KPiA+Pj4+IHcwRjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYt DQo+ID4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4g TVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1KSm00OWNFNlYxMGlpc3FI cDNqTmVTbg0KPiA+Pj4+IHFFN3dIekR0U3JJaHNRVThTeDNBJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4+IGFuZCB3YXMgTk9UIG1hbmRhdGVkIGZvciB0aGUgVFVSTiBzZXJ2ZXIgcHJvdmlkZWQg YnkgdGhlDQo+ID4+IGxvY2FsDQo+ID4+Pj4gb3INCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBhY2Nl c3MNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IG5ldHdvcmsuIEl0IGNhbm5vdCBiZSB0aHJvd24taW4g bm93IGFnYWluIQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4g QW55IGFyZ3VtZW50cyBhZ2FpbnN0IGhhdmUgYmVlbiBvZiB0eXBlOiBXZSBuZWVkIHNlY3VyaXR5 IGluDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gaXRzZWxmDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4g LQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gcHJvdGVjdCB0aGlzIGFuZCB0aGF0IC0gZG8gZXZlcnkg YXV0aGVudGljYXRpb24vdmFsaWRhdGlvbiBpbiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGJv b2sgKHdoZXRoZXIgbmVlZGVkIG9yIG5vdCkgZXRjLiwgd2hpY2ggb25seSBsZWFkcyB0byByZXNw b25zZXMNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGxpa2UgSSBoYWQgdG8gYnJpbmcgdXAgZHVyaW5n IHRoZSBkaXNjdXNzOg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IFtLYXJsXSBEbyB5b3UgdGhpbmsg d2UgbmVlZCB0byBkaXNjb3ZlciBUVVJOIHNlcnZlcnMgZm9yIHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4+IHBsZWFzdXJlIG9mDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBkb2luZyAic2VjdXJpdHkg dGhhdCBkZWFsIGRpcmVjdGx5IHdpdGggVFVSTiBtZXNzYWdlcyIgaW4gaXRzZWxmLA0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4gYW5kIG5vdCBmb3Igd2hhdCB0aGV5IGFyZSBzdXBwb3NlZCB0byBkbyAo cmVsYXkgImFwcGxpY2F0aW9uDQo+ID4+IGRhdGEiKQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gYW5k IGRvIHlvdSBhbHNvIHRoaW5rIHRoYXQgaXMgd2h5IGEgbmV0d29yayBwcm92aWRlciB3aWxsIGRl cGxveQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gc3VjaCBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+Pj4g c2VydmVyIGZvciBoaXMgdXNlcnM/DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBQbGVhc2UgZG8gbm90 IHN0b3AgdGhlIHB1cnBvc2UgKGJ5IHN1Y2ggcGhyYXNlcykhDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ Pj4gKEFsc28sIGVuY3J5cHRpb24gYW5kIHByb3RlY3Rpb24gYWdhaW5zdCBtYW4taW4tdGhlLW1p ZGRsZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IGF0dGFja3MsIGZvcg0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4gdGhlIHBheWxvYWQgKHJlYWwtdGltZSB0cmFmZmljKSBhcmUgZm9yIHRoZSBlbmRwb2lu dHMgdG8gZG8gLSBsaWtlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB3aXRoIFdlYlJUQywgbWFuZGF0 aW5nIERUTFMtU1JUUCBtZWRpYSAtIGl0IHNob3VsZCBub3QgYmUNCj4gPj4+PiBleHBlY3RlZA0K PiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gdG8gYmUgZG9uZSBieSBhIFRVUk4gc2VydmVyLCBlc3BlY2lh bGx5IHdoZW4gbm90IGFsd2F5cyB1c2VkLikNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gKDIpIEFsc28gYXMgcG9pbnRl ZCBvdXQgZHVyaW5nIHRoZSBESVNDVVNTDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbC0NCj4gPj4+PiBhcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDIx NDQuaHRtbA0KPiA+Pj4+PiAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3Yy L3VybD91PWh0dHBzLQ0KPiA+Pj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4+Pg0KPiA+ Pg0KPiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9tc2cwMjE0NC5odG1sJmQ9RGdNRmFRJmM9 OTZaYlpaY2FNRjQNCj4gPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0K PiA+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+IE1WUWkybFZiRV9z NHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9aHRpODg1RkgwSV8tDQo+ID4+Pj4gM3o3ZG9s ZllDQWlhNEZYM2kxMnNVQ1dzR2VzTkQ2cyZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBhbmQg dHdvIHRpbWVzIGVhcmxpZXIgKGR1cmluZyBXRyBkaXNjdXNzaW9ucywgYnV0IG5vdCBhZGRyZXNz ZWQNCj4gPj4+PiBvcg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gcmVzcG9uZGVkIHRvIGJ5IHRoZSBB dXRob3JzKToNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls LQ0KPiA+Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMjA4MS5odG0NCj4gPj4+Pj4g ICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4g Pj4+PiAzQV9fd3d3LmlldGYub3JnX21haWwtDQo+ID4+Pj4NCj4gPj4NCj4gMkRhcmNoaXZlX3dl Yl90cmFtX2N1cnJlbnRfbXNnMDIwODEuaHRtJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjR3DQo+ID4+ Pj4gMEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+Pj4+IE5TbnNnd2JCVlVK YTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hR RWlrekF1cFI4JnM9Zi0NCj4gPj4+PiBHek9Uc1BtODZOVXF6Rlh5akFnUHo2eC1CaUEtYnVMaElG UHQ5UWZFZyZlPT4gbA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IGFuZCBodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsLQ0KPiA+Pj4+PiAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29t L3YyL3VybD91PWh0dHBzLQ0KPiA+Pj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4+PiAy RCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGpwTjZMWmcmcj1id1otDQo+ID4+IG5uUkdXbWNH S1JJdWFkcTYtDQo+ID4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4N Cj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1TYTNqd3RB MlRGdE5BSUFuZlRlbTMydg0KPiA+Pj4+IFc5aklmY0Jsc1V3eElCZWxibERzJmU9Pg0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMTk3Ni5odG1sDQo+ID4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBUaGUgYW55Y2FzdCBtZXRo b2QgZG9lcyBub3Qgd29yayB3aXRoIFJGQzU3NjYgVFVSTiBzZXJ2ZXJzIQ0KPiA+Pj4+IFRoYXQN Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBoYXMgbm90DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBiZWVu IGFkZHJlc3NlZCBhdCBhbGwuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+ Pj4+Pj4+PiBBIFRVUk4gc2VydmVyIGRvZXNuJ3QgcmVhY3Qgb25lIHdheSAoYW5zd2VyaW5nIDMw MCBUcnkNCj4gPj4+PiBBbHRlcm5hdGUpDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gd2hlbg0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4gYWRkcmVzc2VkIGJ5IGFuIGFueWNhc3QgYWRkcmVzcyBhbmQgYW5v dGhlciB3YXkgKGFjY2VwdGluZyB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IEFsbG9jYXRlDQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiByZXF1ZXN0KSB3aGVuIGFkZHJlc3NlZCBieSBpdHMgdW5pY2Fz dCBhZGRyZXNzLCBkb2VzIGl0Pw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+Pj4+Pj4gQXV0aG9yJ3MgKGR1cmluZyB0aGUgRElTQ1VTUyk6ICJXZSBpbnRlbmQgdG8gYWRk IHRoZSBmb2xsb3dpbmcNCj4gPj4gdG8NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBleHBsYWluDQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBzZXJ2ZXIgYmVoYXZpb3IgYSBsaXR0bGUgYmV0dGVyOg0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICJBIFRVUk4gYW55Y2FzdCBzZXJ2ZXIgcGVyZm9ybXMgY2hlY2tz IDEgdG8gNyBkaXNjdXNzZWQgaW4NCj4gPj4+PiBTZWN0aW9uDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ Pj4gNi4yIG9mDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBSRkM1NzY2LiBJZiBhbGwgY2hlY2tzIHBh c3MsIHRoZSBUVVJOIGFueWNhc3Qgc2VydmVyIE1VU1QNCj4gPj4gcmVzcG9uZA0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+Pj4gd2l0aCBhDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiAzMDAgKFRyeSBBbHRlcm5h dGUpIGVycm9yIGFzIGRlc2NyaWJlZCBpbiBbUkZDNTc2Nl07Ig0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+IGRvZXMgbm90IGhlbHAgYW5kIEkgcmVzcG9uZGVkOiBbS2FybF0gVGhhdCBtdXN0IGJlIGFu IHVwZGF0ZSBvZg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gUkZDNTc2Ni4NCj4gPj4+Pj4NCj4gPj4+Pj4+ Pj4+IE9yIGRvZXMgIlRVUk4gYW55Y2FzdCBzZXJ2ZXIiIGltcGx5IHRoYXQgdGhlcmUgQUxTTyBp cyBhICJUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB1bmljYXN0IHNlcnZlciIgYXQgdGhlIHNh bWUgaW50ZXJmYWNlIGFjY2VwdGluZyB0aGUgQWxsb2NhdGUNCj4gPj4+PiByZXF1ZXN0Pw0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4gV2hhdCBhcmUgdGhlc2UgdGhpbmdzPw0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gSSBoYXZlIHByb3Bvc2VkIHRoaXMgbW9kaWZp Y2F0aW9uIG9mIHRoZSBhbnljYXN0IG1ldGhvZCwgd2hpY2gNCj4gPj4gaXMNCj4gPj4+Pj4NCj4g Pj4+Pj4+Pj4+PiBiZXR0ZXINCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IChpbiBzZXZlcmFsIGFzcGVj dHMpIGFuZCBkb2Vzbid0IG5lZWQgdG8gdXBkYXRlIFJGQzU3NjY6DQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAiV2hlbiBhIGNsaWVudCByZXF1aXJlcyBUVVJO IHNlcnZpY2VzLCBpdCBzZW5kcyBhIFNUVU4gYmluZGluZw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ IHJlcXVlc3QgdG8NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHRoZSBhc3NpZ25lZCBhbnljYXN0IGFk ZHJlc3MuICBUaGUgU1RVTiBzZXJ2ZXINCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiByZXNwb25kcyB3 aXRoIGEgMzAwIChUcnkgQWx0ZXJuYXRlKSBlcnJvciBhcyBkZXNjcmliZWQgaW4NCj4gPj4+Pj4N Cj4gPj4+Pj4+Pj4+PiBbUkZDNTM4OV07IFRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gcmVzcG9u c2UgY29udGFpbnMgYSB1bmljYXN0IGFkZHJlc3MgaW4gdGhlIEFMVEVSTkFURS1TRVJWRVINCj4g Pj4+Pj4NCj4gPj4+Pj4+Pj4+IGF0dHJpYnV0ZSwgd2hpY2ggdGhlIGNsaWVudCBjb21wYXJlcyB3 aXRoIHRoZSBzb3VyY2UgYWRkcmVzcyBvZg0KPiA+PiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ IHJlc3BvbnNlIGFuZCBpZiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBhZGRyZXNzZXMgYXJl IHRoZSBzYW1lLCBpdCBpcyBhbiBpbmRpY2F0aW9uIHRvIHVzZSB0aGUgVFVSTg0KPiA+PiBzZXJ2 ZXINCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBhdCB0aGF0DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBh ZGRyZXNzLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gRm9y IHN1YnNlcXVlbnQgY29tbXVuaWNhdGlvbiB3aXRoIHRoZSBUVVJOIHNlcnZlciwgdGhlIGNsaWVu dA0KPiA+Pj4+IHVzZXMNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiB0aGF0DQo+ID4+Pj4+DQo+ID4+ Pj4+Pj4+PiByZXNwb25kaW5nIHNlcnZlcidzIHVuaWNhc3QgYWRkcmVzcy4iDQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBUaGUgc2VudGVuY2UgaW4gdGhlIC0x MCBkcmFmdCB1bmRlciAiMyBEaXNjb3ZlcnkgUHJvY2VkdXJlIjoNCj4gPj4gIm5vdA0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4+IGFsbCBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBzZXJ2ZXJzIG1h eSBzdXBwb3J0IGFueWNhc3QiIGNhbiB0aGVuIGJlIHJlbW92ZWQuDQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICgzKSBJ IGNhbm5vdCBzZWUgdGhpcyAtMTAgZHJhZnQgdGVsbGluZyB3aGljaCBkaXNjb3ZlcnkgbWV0aG9k DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gdGhhdCBpcyBmaXQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ IGZvciB0aGUgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0 d29yayAodGhlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBuZXR3b3JrIHByb3ZpZGVkIFRVUk4gc2Vy dmVyKS4gSG93ZXZlciwgdGhlcmUgYXJlIGNvbmZ1c2luZw0KPiA+Pj4+IGNsaWVudA0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4gYmVoYXZpb3IgcmVjb21tZW5kYXRpb25zLCBsaWtlIHRoZSBzZW50ZW5j ZXMgaW4gdGhlIGRyYWZ0IHVuZGVyDQo+ID4+ICIzDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBEaXNj b3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IFByb2NlZHVyZSI6ICJGb3IgYmVzdCByZXN1bHRz LCBhIGNsaWVudCBTSE9VTEQgaW1wbGVtZW50IGFsbA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gZGlz Y292ZXJ5IG1lY2hhbmlzbXMgZGVzY3JpYmVkIGFib3ZlLiIgYW5kIHVuZGVyICIxDQo+ID4+Pj4g SW50cm9kdWN0aW9uIjoNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ICJ0aHJlZSBkaXNjb3ZlcnkgbWVj aGFuaXNtcywgc28gYXMgdG8gbWF4aW1pemUgb3Bwb3J0dW5pdHkgZm9yDQo+ID4+Pj4+DQo+ID4+ Pj4+Pj4+PiBkaXNjb3ZlcnksIGJhc2VkIG9uIHRoZSBuZXR3b3JrIGluIHdoaWNoIHRoZSBUVVJO IGNsaWVudCBmaW5kcw0KPiA+Pj4+IGl0c2VsZi4iDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4+Pj4+PiBBIG5ldHdvcmsgcHJvdmlkZWQgVFVSTiBzZXJ2ZXIgaXMgb25s eSBtZWFudCBmb3IgdGhlIHVzZXJzIG9uDQo+ID4+IHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ IHNwZWNpZmljDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBuZXR3b3JrIC0gb3RoZXJzIHNob3VsZCBu b3QgYmUgYWJsZSB0byB1c2Ugc3VjaCBUVVJOIHNlcnZlciwgYW5kDQo+ID4+IGl0DQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+PiB3b3VsZCB0aGVuIGJlIHByZWZlcnJlZCB0aGF0IGl0IGlzIG9ubHkgYWR2 ZXJ0aXplZCBhbmQgZGlzY292ZXJlZA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gYXQgdGhhdCBsb2Nh bCBuZXR3b3JrIC0gd2hpY2ggaXMgYmFkbHkgZGVzY3JpYmVkIGJ5ICJtYXhpbWl6ZQ0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4gb3Bwb3J0dW5pdHkNCj4gPj4+Pj4NCj4gPj4+Pj4+IGZvcg0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+IGRpc2NvdmVyeSIuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4+Pj4+PiBJZiBhIEROUyBtZXRob2Qgd291bGQgYmUgdXNlZCB0byBkaXNjb3ZlciB0 aGUgbmV0d29yaw0KPiA+PiBwcm92aWRlZA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IFRVUk4NCj4g Pj4+Pj4NCj4gPj4+Pj4+Pj4+IHNlcnZlciwgaXRzIHByaXZhdGUgYWRkcmVzcyBzaG91bGQgb25s eSBiZSBjb25maWd1cmVkIGluIHByaXZhdGUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IChsb2NhbCkg RE5TICh3ZSBkb24ndCBsaWtlIHRvIHB1dCBvdXIgcHJpdmF0ZSBJUCBhZGRyZXNzZXMgaW4NCj4g Pj4+Pj4NCj4gPj4+Pj4+Pj4+IHB1YmxpYyBETlMpLCBidXQgSSBzZWUgbm8gc3VjaCByZWNvbW1l bmRhdGlvbi4gRnVydGhlciwgdGhlIEROUw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gbWV0aG9kcyBh cmUgY29tcGxleCBhbmQgZXhwZW5zaXZlIHRvIGRlcGxveSBhbmQgb25lIG9mIHRoZW0NCj4gPj4+ PiBkZXBlbmRzDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBvbiBESENQIHRoYXQgaXMgbm90IGF2YWls YWJsZSBvbiBhbGwgYWNjZXNzIG5ldHdvcmtzLiBUaGF0IG1ha2VzDQo+ID4+IChhDQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+PiB3b3JraW5nKSBhbnljYXN0IGRpc2NvdmVyeSBtZXRob2QgdGhlIGNsZWFy IGNob2ljZSBmb3IgYSBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBzZXJ2ZXIgcHJvdmlkZWQg YnkNCj4gPj4+Pj4NCj4gPj4+Pj4+PiB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmsuDQo+ID4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBOZXR3b3JrIHByb3ZpZGVk IFRVUk4gc2VydmVycyBwYXJhbGxlbGluZyBhDQo+ID4+IE5BVC9maXJld2FsbC9hY2Nlc3MNCj4g Pj4+Pj4NCj4gPj4+Pj4+Pj4+IHJvdXRlci9kZWZhdWx0IGdhdGV3YXkgaXMgYSBuZXcgY29uY2Vw dCB0aGF0IGNhbWUgdXAgZHVyaW5nDQo+ID4+Pj4gV2ViUlRDDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ PiBzdGFuZGFyZGl6YXRpb24gd29yayB0byBkZWFsIHdpdGggdHJhdmVyc2FsIGFuZCBxdWFsaXR5 IHByb2JsZW1zDQo+ID4+IG9mDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiByZWFsLXRpbWUgdHJhZmZp Yy4gSG93ZXZlciwgdGhpcyBkcmFmdCBnaXZlIGxpdHRsZSBvciBubyBndWlkYW5jZQ0KPiA+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4gZm9yIGRlcGxveW1lbnQgYW5kIEkgdGhlcmVmb3JlIHN1Z2dlc3QgdGhh dCBhIHNlcGFyYXRlIHNlY3Rpb24gaXMNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGFkZGVkLCB0aGF0 IHNwZWxscyBvdXQgdGhlIGRlcGxveW1lbnQgY29uc2lkZXJhdGlvbnMgZm9yIFRVUk4NCj4gPj4+ Pj4NCj4gPj4+Pj4+Pj4+IHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlIGxvY2FsIG9yIGFjY2VzcyBu ZXR3b3JrICh3aGljaCBub3cgaXMNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IG1pc3NpbmcsIGJ1dCBJ IHByb3Bvc2UgdGhlIGZvbGxvd2luZw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gdGV4dCk6DQo+ID4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4+ICg0KSAiRGVwbG95bWVudCBDb25zaWRlcmF0aW9ucyBmb3IgVFVSTiBTZXJ2ZXJzIFBy b3ZpZGVkIGJ5DQo+ID4+IHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IExvY2FsIG9yDQo+ID4+ Pj4+DQo+ID4+Pj4+Pj4+PiBBY2Nlc3MgTmV0d29yayINCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAo U3VnZ2VzdGVkIHRleHQgZm9yIGFuIGFkZGl0aW9uYWwgc2VjdGlvbikNCj4gPj4+Pj4NCj4gPj4+ Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IFRoZSBjb25jZXB0IG9mIHBhcmFsbGVsaW5n IGEgTkFUL2ZpcmV3YWxsL2FjY2Vzcy1yb3V0ZXIvZGVmYXVsdA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+IGdhdGV3YXkgYXQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHRoZSBsb2NhbCBvciBhY2Nlc3Mg bmV0d29yayB3aXRoIGEgVFVSTiBzZXJ2ZXIsIHRvIGRlYWwgd2l0aA0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4gdHJhdmVyc2FsIGFuZCBxdWFsaXR5IHByb2JsZW1zIG9mIHJlYWwtdGltZSB0cmFmZmlj LCBpcyBuZXcgYW5kDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBjYW1lIHVwIGR1cmluZyB0aGUgV2Vi UlRDIHN0YW5kYXJkaXphdGlvbiB3b3JrLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+Pj4gU3VjaCBuZXR3b3JrIHByb3ZpZGVkIFRVUk4gc2VydmVycywgb25seSBh Y2Nlc3NpYmxlIGJ5IHRoZQ0KPiA+PiB1c2Vycw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IG9uIHRo ZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmssIG11c3QgYmUg YXV0b21hdGljYWxseSBkaXNjb3ZlcmVkIGFuZA0KPiA+PiB1c2VkLA0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4gd2l0aG91dCBzcGVjaWZpYyBjb25maWd1cmF0aW9uIG9yIGhhdmluZyBjcmVkZW50aWFs cyBmb3INCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGF1dGhlbnRpY2F0aW9uIG9yIGNlcnRpZmljYXRl cyBmb3IgdmFsaWRhdGlvbiwgdG8gYmUgdXNlZnVsIGZvciBlLmcuDQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+PiBhIFdlYlJUQyBicm93c2VycyB0byBhbGxvdyBxdWFsaXR5IG1lZGlhIHRyYWZmaWMgImV2 ZXJ5d2hlcmUNCj4gPj4geW91DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBjYW4NCj4gPj4+Pj4NCj4g Pj4+Pj4+PiBzdXJmIi4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+IEp1c3QgYXMgZm9yIHRoZSBJbnRlcm5ldCBhY2Nlc3MgaXRzZWxmLCB0aGUgVFVSTiBzZXJ2 ZXIgaXMgb2ZmZXJlZA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IGJ5IHRoZQ0KPiA+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4gbmV0d29yayBwcm92aWRlciBhbmQgdGhlcmUgaXMgbm8gY2hhbmdlIGluIHRoZSB0 cnVzdCBvciBzZWN1cml0eQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gbGV2ZWwgKHdoaWNoIHNob3Vs ZCBub3QgYmUgZXhwZWN0ZWQpIHdoZW4gcmVhbC10aW1lIHRyYWZmaWMgZmxvd3MNCj4gPj4+Pj4N Cj4gPj4+Pj4+Pj4+IHRocm91Z2ggdGhlIFRVUk4gc2VydmVyIHBhdGgsIHRoYW4gdGhyb3VnaCB0 aGUgZGVmYXVsdCBnYXRld2F5DQo+ID4+Pj4gcGF0aC4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IChU aGUgcHVycG9zZSBvZiB0aGUgbmV0d29yayBwcm92aWRlZCB0dXJuIHNlcnZlciBpcyB0byBhbGxv dw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gdHJhdmVyc2FsIG9mIHJlYWwtdGltZSBtZWRpYSB0cmFm ZmljIGluIGVudmlyb25tZW50cyB3aXRoDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiByZXN0cmljdGl2 ZSBOQVQvZmlyZXdhbGxzIGNsb3NlZCBmb3IgVURQIHRyYWZmaWMgYW5kL29yIHRvIGFsbG93DQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBiZXR0ZXIgcXVhbGl0eSB0aHJvdWdoIHRoZSBvZnRlbiBkYXRh IGNvbmdlc3RlZCByb3V0ZXIgYXQgdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBkZWZhdWx0DQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBnYXRld2F5LikNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IFRoZSBkaXNjb3Zlcnkgb2YgdGhlIG5ldHdvcmsgcHJvdmlkZWQg VFVSTiBzZXJ2ZXIgc2hvdWxkIG1lZXQNCj4gPj4+PiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ PiBhdXRvDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBjb25maWd1cmF0aW9uIG9mIFJGQyA3NDc4IChX ZWIgUmVhbC1UaW1lIENvbW11bmljYXRpb24gVXNlDQo+ID4+Pj4gQ2FzZXMNCj4gPj4+Pj4NCj4g Pj4+Pj4+Pj4+IGFuZA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gUmVxdWlyZW1lbnRzKSAyLjMuNS4x LiBhbmQgZHJhZnQtaWV0Zi1ydGN3ZWItcmV0dXJuLTAxIGlzIGRlZmluaW5nDQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4+PiB0aGUgVFVSTiBjbGllbnQgYmVoYXZpb3IgZm9yIFdlYlJUQyBicm93c2Vycy4N Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IEZvciBxdWFsaXR5 IHJlYXNvbnMsIGEgc2VhbGVkIG5ldHdvcmsgY29uZmlndXJhdGlvbiAtIGkuZS4gdGhlDQo+ID4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4gbWVkaWEgaGFzDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB0byBnbyB0 aHJvdWdoIHRoZSBUVVJOIHNlcnZlciwgbm90IHRocm91Z2ggdGhlIGRlZmF1bHQgZ2F0ZXdheQ0K PiA+PiAoYnkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHVzaW5nIFNUVU4gaW5zdGVhZCBvZiBUVVJO KSAtIGlzIHRoZSB0eXBpY2FsIGludGVudGlvbiB3aGVuIGENCj4gPj4gVFVSTg0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+Pj4gc2VydmVyIGlzIGRlcGxveWVkIGluIHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0 d29yay4gVGhlIHNlYWxlZA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gY29uZmlndXJhdGlvbiBjYW4g YmUgZW5mb3JjZWQgYW5kIHNpZ25hbGVkIHRvIHRoZSBUVVJOIGNsaWVudCBieQ0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+Pj4gdGhlIG5ldHdvcmsgcHJvdmlkZXIgYmxvY2tpbmcgU1RVTiBwYWNrZXRzIGF0 IHRoZSBkZWZhdWx0DQo+ID4+IGdhdGV3YXkuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4+Pj4+PiBBIG5ldHdvcmsgY29uZmlndXJhdGlvbiBlbmZvcmNpbmcgc2VhbGVk IGJlaGF2aW9yLCBoYXMgdGhlDQo+ID4+IGdvb2QNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBlZmZl Y3Qgb2YNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGFsbG93aW5nIHRoZSBUVVJOIGNsaWVudCAoZS5n LiBhIFdlYlJUQyBicm93c2VyKSBpbiBpdHNlbGYgdG8gaGF2ZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4gYQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gbm9uLSBzZWFsZWQgZGVmYXVsdCBjb25maWd1cmF0 aW9uLiAoaWV0Zi1ydGN3ZWItcmV0dXJuLTAxIGV4cGxhaW5zDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ PiB0aGF0IGEgc2VhbGVkIGRlZmF1bHQgY29uZmlndXJhdGlvbiBpbiB0aGUgYnJvd3NlciBpdHNl bGYsIHdvdWxkDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiByZXN1bHQgaW4gdGhhdCBtZWRpYSBiZXR3 ZWVuIGxvY2FsIGNsaWVudHMgd291bGQgaGF2ZSB0byBwYXNzIHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4gVFVSTiBzZXJ2ZXIsIHdoaWNoIGlzIG5vdA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gZGVz aXJhYmxlLikNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IFRo ZSBhYm92ZSBhc3N1bWVzIHRoYXQgdGhlIFRVUk4gY2xpZW50IHVzaW5nIGEgVFVSTiBzZXJ2ZXIg aW4NCj4gPj4+PiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBsb2NhbCBvcg0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+Pj4gYWNjZXNzIG5ldHdvcmsgc2hhbGwgdXNlIHVuZW5jcnlwdGVkIFNUVU4vVFVS TiAob3ZlciBVRFAgZm9yDQo+ID4+Pj4gYmVzdA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gcXVhbGl0 eSkgc28gdGhlIFNUVU4gY29va2llIGNhbiBiZSBkZXRlY3RlZCBhbmQgc3RvcHBlZCBpbiB0aGUN Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGRlZmF1bHQNCj4gPj4+Pj4NCj4gPj4+Pj4+PiBnYXRld2F5 Lg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gQSBUVVJOIHNl cnZlciBpbmNsdWRlZCBpbiB0aGUgcm91dGVyIGF0IHRoZSBkZWZhdWx0IGdhdGV3YXksDQo+ID4+ IHRoYXQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGludGVyY2VwdHMgYW5kIHJlc3BvbmRzIHRvIGFu IGFsbG9jYXRlIHJlcXVlc3QsIHNob3VsZCAgIGJlDQo+ID4+IHRyZWF0ZWQNCj4gPj4+PiBhcw0K PiA+Pj4+Pg0KPiA+Pj4+Pj4gYQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gZGlzY292ZXJlZCBuZXR3 b3JrIHByb3ZpZGVkIHNlYWxlZCBUVVJOIHNlcnZlciBjb25maWd1cmF0aW9uDQo+ID4+IGJ5IGEN Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IFRVUk4gY2xpZW50ICh3aXRob3V0IGhhdmluZyB0byByZXZp ZXcgYW55IDMwMCBUcnkgQWx0ZXJuYXRlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiByZXNwb25zZSBh cyBvdXRsaW5lZCBpbiBhbnljYXN0IG1ldGhvZCBkZXNjcmlwdGlvbikgYWxsb3dpbmcgZm9yDQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB0b2xlcmFudCBhbmQNCj4gPj4+Pj4NCj4gPj4+Pj4+IHNlY3Vy ZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+IGRlcGxveW1lbnQuDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBBIHdlYiBhcHBsaWNhdGlvbiB0aGF0IHdhbnRzIHRvIHRy eSB0aGUgZGVmYXVsdCBnYXRld2F5IHBhdGgNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBpbnN0ZWFk IG9mDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB0aGUgVFVSTiBzZXJ2ZXIgcGF0aCAoaW4gc3BpdGUg b2YgYSBzZWFsZWQgbmV0d29yayBjb25maWd1cmF0aW9uKQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4g Y2FuIHN1Z2dlc3QgZW5jcnlwdGVkIChEKVRMUyBTVFVOIGFuZCBUVVJOIGNhbmRpZGF0ZXMgdGhh dCB3aWxsDQo+ID4+Pj4gbm90DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBiZSBibG9ja2VkIGJ5IFNU VU4gY29va2llIHJlY29nbml0aW9uIGF0IHRoZSBkZWZhdWx0IGdhdGV3YXkuIEl0DQo+ID4+IGlz DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB0aGVuIHVwIHRvIGFwcGxpY2F0aW9uJ3MgVFVSTiBjbGll bnQgd2hldGhlciB0byB0cnkgdGhlIGRlZmF1bHQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGdhdGV3 YXkNCj4gPj4+Pj4NCj4gPj4+Pj4+IHBhdGguDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4+Pj4+PiBBIGZ1cnRoZXIgYWR2YW50YWdlIG9mIGRldGVjdGluZyBhIHNlYWxl ZCBuZXR3b3JrDQo+ID4+IGNvbmZpZ3VyYXRpb24sDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gaXMg dGhhdCBhDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBUVVJOIGNsaWVudCBjYW4gc2VsZWN0IHRvICpv bmx5IGluIGEgc2VhbGVkIG5ldHdvcmsNCj4gPj4gY29uZmlndXJhdGlvbioNCj4gPj4+Pj4NCj4g Pj4+Pj4+Pj4+IGxvb2sgZm9yIGEgVFVSTiBzZXJ2ZXIgYnkgdGhlIGFueWNhc3QgbWV0aG9kIGZv ciBkaXNjb3ZlcnksIHRodXMNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGVsaW1pbmF0aW5nIHRoZSBs ZWFrYWdlIHJpc2sgbWVudGlvbmVkIHVuZGVyIDkuMy4gRnVydGhlciwgdGhlcmUNCj4gPj4+Pj4N Cj4gPj4+Pj4+Pj4+IHdpbGwgYmUgbm8gcmlzayB0aGF0IGEgZmFyIGF3YXkgVFVSTiBzZXJ2ZXIg d2lsbCBiZSBkaXNjb3ZlcmVkIGFuZA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gdXNlZCBhbmQgdGhl cmUgd2lsbCBiZSBubyBuZWVkIGZvciB0aGUgVFRMIGxpbWl0YXRpb24gc3VnZ2VzdGVkDQo+ID4+ Pj4gdW5kZXIgOS4zLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ Pj4gVGhlIGFueWNhc3QgZGlzY292ZXJ5IG1ldGhvZCwgY29tYmluZWQgd2l0aCB0aGUgYWJvdmUN Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiByZWNvbW1lbmRhdGlvbnMsDQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+PiBhbGxvdyBmb3IgYW4gZWFzeSBhbmQgcm9idXN0IGRlcGxveW1lbnQgb2YgbmV0d29yayBw cm92aWRlZA0KPiA+PiBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBzZXJ2ZXJzLCBmaXR0aW5n IGFsbCB0eXBlcyBvZiBsb2NhbCBhbmQgYWNjZXNzIG5ldHdvcmtzLg0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gVGhlIEROUyBiYXNlZCBtZXRob2RzIG9mIHRo aXMgc3BlY2lmaWNhdGlvbiBhcmUgbW9yZSBjb21wbGV4DQo+ID4+Pj4gYW5kDQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4+Pj4gZXhwZW5zaXZlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB0byBkZXBsb3kgYW5k IG9uZSBvZiB0aGVtIGRlcGVuZHMgb24gREhDUCB0aGF0IGlzIG5vdCBhdmFpbGFibGUNCj4gPj4g b24NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGFsbCBhY2Nlc3MgbmV0d29ya3MuIElmIGFueSBvZiB0 aGUgRE5TIGJhc2VkIG1ldGhvZHMgaXMgdXNlZCB0bw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gYWR2 ZXJ0aXplIGFuZCBkaXNjb3ZlciBhIFRVUk4gaW4gdGhlIGxvY2FsIG9yIGFjY2VzcyBuZXR3b3Jr LCBpdHMNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IHByaXZhdGUgYWRkcmVzc2VzIHNob3VsZCBvbmx5 IGJlIGNvbmZpZ3VyZWQgaW4gcHJpdmF0ZSAobG9jYWwpIEROUw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4gYW5kIG5vdCBiZSBwdWJsaXNoZWQgcHVibGljbHksIHdoaWNoIGFkZHMgZnVydGhlciB0byB0 aGUNCj4gPj4gY29tcGxleGl0eQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gYW5kDQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4gY29zdCBvZiBkZXBsb3ltZW50Lg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAoNSkgTW9zdCAoYWxsPykg b2Ygd2hhdCBpcyBjb25zaWRlcmVkIGFuZCBzdW1tZWQgdXAgdW5kZXIgKDQpDQo+ID4+Pj4gKHRo ZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gc3VnZ2VzdGVkIGFkZGl0aW9uYWwgdGV4dCksIGhhcyBi ZWVuIGJyb3VnaHQgZm9yd2FyZCBvbiB0aGUNCj4gPj4gVFJBTQ0KPiA+Pj4+IFdHDQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+PiBsaXN0IGJlZm9yZSwgYnV0IG5vdCBicm91Z2h0IGludG8gdGhlIGN1cnJl bnQgLTEwIGRyYWZ0LCBzZWU6DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbC0NCj4gPj4+PiBhcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDAxMzIuaHRt bA0KPiA+Pj4+PiAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91 PWh0dHBzLQ0KPiA+Pj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4+Pg0KPiA+Pg0KPiAy RGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9tc2cwMDEzMi5odG1sJmQ9RGdNRmFRJmM9OTZaYlpa Y2FNRjQNCj4gPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+Pj4+ IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+IE1WUWkybFZiRV9zNHVseDRo bmhFb21YaFFLN3hRRWlrekF1cFI4JnM9STR0WF92UWQtDQo+ID4+Pj4gQU5WOGNCalBHbEhsRklW RVVaLTNsWW1WSTZHYkd0anh2YyZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsLQ0KPiA+Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMDEz OC5odG1sDQo+ID4+Pj4+ICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIv dXJsP3U9aHR0cHMtDQo+ID4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pj4+DQo+ID4+ DQo+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAwMTM4Lmh0bWwmZD1EZ01GYVEmYz05 NlpiWlpjYU1GNA0KPiA+Pj4+IHcwRjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ ID4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4gTVZR aTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1KSldWeVBoaFRiaFRwa2NPbVFS ZEINCj4gPj4+PiA0OWh4MmdPTU5LT0w3cU1UM2JxNjMwJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtDQo+ID4+Pj4gYXJjaGl2ZS93ZWIvdHJhbS9j dXJyZW50L21zZzAxNzIxLmh0bWwNCj4gPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9v ZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+PiAzQV9fd3d3LmlldGYub3JnX21haWwt DQo+ID4+Pj4NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJlbnRfbXNnMDE3MjEuaHRt bCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+Pj4gdzBGNGpwTjZMWmcmcj1id1otbm5SR1dt Y0dLUkl1YWRxNi0NCj4gPj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4+ Pg0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPVFuYkpP c1lBdnVEV3I5WXlFR3N4VQ0KPiA+Pj4+IE92OFMxaGE4b3c5RG81VkRPcTZHczAmZT0+DQo+ID4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4gPj4+PiBhcmNo aXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDE3NDUuaHRtbA0KPiA+Pj4+PiAgICA8aHR0cHM6Ly91 cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+Pj4+IDNBX193d3cu aWV0Zi5vcmdfbWFpbC0NCj4gPj4+Pg0KPiA+Pg0KPiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVu dF9tc2cwMTc0NS5odG1sJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4gPj4+PiB3MEY0anBONkxa ZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcm bT1MWGFILQ0KPiA+Pj4+DQo+ID4+DQo+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlr ekF1cFI4JnM9ZHVFRDNZUndfZ1BpTHdQbmpDN3pnVw0KPiA+Pj4+IDBLYlFYcVFCak4tQkpDNGJ6 bXQ0NCZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBUaGUgbGlua3MgZ2l2ZW4gdW5kZXIgKDEp IGFuZCAoMikgYWJvdmUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsLQ0KPiA+Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMjE1NS5odG1sDQo+ ID4+Pj4+ICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0 cHMtDQo+ID4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pj4+DQo+ID4+DQo+IDJEYXJj aGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAyMTU1Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1G NA0KPiA+Pj4+IHcwRjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ID4+Pj4gTlNu c2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVv bVhoUUs3eFFFaWt6QXVwUjgmcz01ZnhqdFJmMk5kdDlSLQ0KPiA+Pj4+IFJEd1dwZ0cwZDdtY3Rw VVQybFVacktHYVRoWjQwJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+Pj4+Pj4gL0thcmwNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gLS0tLS1VcnNwcnVuZ2xpZ3QgbWVkZGVsYW5kZS0t LS0tDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gRnLDpW46IHRyYW0gW21haWx0bzp0cmFtLWJvdW5j ZXNAaWV0Zi5vcmddIEbDtnIgUHJhc2hhbnRoIFBhdGlsDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4g KHByYXNwYXRpKQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IFNraWNrYXQ6IGRlbiAyIG5vdmVtYmVy IDIwMTYgMjI6MTgNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBUaWxsOiB0cmFtQGlldGYub3JnIDxt YWlsdG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBLb3BpYTogdHJhbS1j aGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47IERhbg0KPiA+Pj4+ IFdpbmc7DQo+ID4+Pj4+ICAgIFNwZW5jZXIgRGF3a2lucyBhdCBJRVRGOw0KPiA+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4gVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+IMOEbW5lOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVyeQ0K PiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gVGhlIFRVUk4gZGlz Y292ZXJ5IGRyYWZ0IG9yaWdpbmFsbHkgc3VnZ2VzdGVkIHRoYXQgU1RVTg0KPiA+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4+IGF1dGhlbnRpY2F0aW9uIGJlDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiByZWxheGVk IGFuZCBtYWRlIE9QVElPTkFMIGZvciBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlDQo+ID4+ IGxvY2FsDQo+ID4+Pj4gb3INCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGFjY2VzcyBuZXR3b3JrLiBU aGUgaW50ZW50aW9uIHdhcyB0byBhbGxvdyBuZXcvZ3Vlc3QgdXNlcnMgKHdobw0KPiA+Pj4+IGRv DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBub3QgbmVjZXNzYXJpbHkgcG9zc2VzcyBsb25nIHRlcm0g Y3JlZGVudGlhbHMgZm9yIFNUVU4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGF1dGhlbnRpY2F0aW9u KSBpbiB0aGUgbmV0d29yayB0byBkaXNjb3ZlciBhbmQgdXNlIFRVUk4gc2VydmljZXMNCj4gPj4+ Pj4NCj4gPj4+Pj4+IG9mZmVyZWQNCj4gPj4+Pj4NCj4gPj4+Pj4+PiBieSB0aGUgbmV0d29yay4N Cj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBCZW4gQ2FtcGJlbGwgcmFpc2VkIGFuIG9iamVjdGlvbiBk dXJpbmcgSUVTRyBldmFsdWF0aW9uIHRoYXQgd2UNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBjbGVh cmx5DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBpbmRpY2F0ZSB0aGF0IHRoaXMgaXMgYSBkb3duZ3Jh ZGUgb2YgYSBNVVNUIGxldmVsIHJlcXVpcmVtZW50DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBkZWZp bmVkIGluIFtSRkM1NzY2XSBhbmQgZXhwbGFpbiBpdHMgY29uc2VxdWVuY2VzLiBJdCB3YXMgYWxz bw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gcmlnaHRseSBzdWdnZXN0ZWQgdGhhdCB3ZSBtYW5kYXRl IHRoZSB1c2Ugb2YgKEQpVExTIGluIHRoZQ0KPiA+PiBhYnNlbmNlDQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+PiBvZiBTVFVOIGF1dGhlbnRpY2F0aW9uIGZvciBwcm90ZWN0aW9uIGFnYWluc3QgYSB2YXJp ZXR5IG9mIGF0dGFja3M7DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB0aGUgZHJhZnQgbm93IG1ha2Vz IGl0IGEgTVVTVCB0aGF0IFRVUk4gc2VydmVycyB1c2UgKEQpVExTIGluDQo+ID4+IHRoZQ0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4gYWJzZW5jZSBvZiBTVFVODQo+ID4+Pj4+DQo+ID4+Pj4+Pj4gYXV0 aGVudGljYXRpb24uDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ PiBUbyBwdXQgaXQgc2ltcGx5LCB0aGUgZHJhZnQgbWFuZGF0ZXMgdGhhdCBUVVJOIHNlcnZlcnMg aW4gYSBsb2NhbA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IG9yDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ PiBhY2Nlc3MgbmV0d29yayBkbyBhdCBsZWFzdCBvbmUgb2YgKEQpVExTIG9yIFNUVU4gYXV0aGVu dGljYXRpb24uDQo+ID4+IElmDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiB5b3UgaGF2ZSBhbiBvcGlu aW9uIGFib3V0IHRoaXMgY2hhbmdlLCBwbGVhc2UgbGV0IHRoZSB3b3JraW5nDQo+ID4+IGdyb3Vw DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBrbm93IG9uIHRoZSBtYWlsaW5nIGxpc3QgYmVmb3JlIHRo ZSBlbmQgb2YgSUVURiA5Ny4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4+IFNlZSBiZWxvdyBmb3Igc25pcHBldHMgb2Ygd2hhdCBjaGFuZ2VkLg0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gRXhjZXJwdCBmcm9tIFNlY3VyaXR5 IENvbnNpZGVyYXRpb25zIG9mDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBkcmFmdC1pZXRmLXRyYW0t dHVybi1zZXJ2ZXItZGlzY292ZXJ5LTA5Og0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+Pj4gICAiVXNlIG9mIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3Ig TkFUIChTVFVOKSBbUkZDNTM4OV0NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIGF1dGhlbnRpY2F0 aW9uIGlzIE9QVElPTkFMIGZvciBUVVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlDQo+ID4+Pj4g bG9jYWwNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIG5ldHdvcmsgb3IgYnkgdGhlIGFjY2VzcyBu ZXR3b3JrLiAgQSBuZXR3b3JrIHByb3ZpZGVkIFRVUk4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBz ZXJ2ZXINCj4gPj4+Pj4NCj4gPj4+Pj4+PiBNQVkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIGJl IGNvbmZpZ3VyZWQgdG8gYWNjZXB0IEFsbG9jYXRpb24gcmVxdWVzdHMgd2l0aG91dCBTVFVODQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gICBhdXRoZW50aWNhdGlvbiwgYW5kIGEgVFVSTiBjbGllbnQg TUFZIGJlIGNvbmZpZ3VyZWQgdG8NCj4gPj4gYWNjZXB0DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4g ICBBbGxvY2F0aW9uIHN1Y2Nlc3MgcmVzcG9uc2VzIHdpdGhvdXQgU1RVTiBhdXRoZW50aWNhdGlv bg0KPiA+PiBmcm9tDQo+ID4+Pj4gYQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICAgbmV0d29yayBw cm92aWRlZCBUVVJOIHNlcnZlci4gIEluIG9yZGVyIHRvIHByb3RlY3QgYWdhaW5zdA0KPiA+PiBt YW4tDQo+ID4+Pj4gaW4tDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gICB0aGUtbWlkZGxlIGF0dGFj a3Mgd2hlbiBhY2NlcHRpbmcgYSBUVVJOIGFsbG9jYXRpb24gcmVzcG9uc2UNCj4gPj4+Pj4NCj4g Pj4+Pj4+IHdpdGhvdXQNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIFNUVU4gYXV0aGVudGljYXRp b24sIGl0IGlzIFJFQ09NTUVOREVEIHRoYXQgdGhlIFRVUk4NCj4gPj4gY2xpZW50DQo+ID4+Pj4g dXNlDQo+ID4+Pj4+DQo+ID4+Pj4+PiBvbmUNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIG9mIHRo ZSBmb2xsb3dpbmcgdGVjaG5pcXVlcyB3aXRoIChEKVRMUyB0byB2YWxpZGF0ZSB0aGUgVFVSTg0K PiA+Pj4+Pg0KPiA+Pj4+Pj4gc2VydmVyIg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBVcGRhdGVkIHRleHQgaW4gU2Vj dXJpdHkgQ29uc2lkZXJhdGlvbnMgb2YNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+IGRyYWZ0LWlldGYt dHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnktMTA6DQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgICJVc2Ugb2YgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVz IGZvciBOQVQgKFNUVU4pIFtSRkM1Mzg5XQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICAgYXV0aGVu dGljYXRpb24gaXMgT1BUSU9OQUwgZm9yIFRVUk4gc2VydmVycyBwcm92aWRlZCBieSB0aGUNCj4g Pj4+PiBsb2NhbA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICAgbmV0d29yayBvciBieSB0aGUgYWNj ZXNzIG5ldHdvcmsuICBBIG5ldHdvcmsgcHJvdmlkZWQgVFVSTg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+IHNlcnZlcg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+IE1BWQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ ICAgYmUgY29uZmlndXJlZCB0byBhY2NlcHQgQWxsb2NhdGlvbiByZXF1ZXN0cyB3aXRob3V0IFNU VU4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIGF1dGhlbnRpY2F0aW9uLCBhbmQgYSBUVVJOIGNs aWVudCBNQVkgYmUgY29uZmlndXJlZCB0bw0KPiA+PiBhY2NlcHQNCj4gPj4+Pj4NCj4gPj4+Pj4+ Pj4+PiAgIEFsbG9jYXRpb24gc3VjY2VzcyByZXNwb25zZXMgd2l0aG91dCBTVFVOIGF1dGhlbnRp Y2F0aW9uDQo+ID4+IGZyb20NCj4gPj4+PiBhDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gICBuZXR3 b3JrIHByb3ZpZGVkIFRVUk4gc2VydmVyLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+Pj4+Pj4gICBNYWtpbmcgU1RVTiBhdXRoZW50aWNhdGlvbiBPUFRJT05BTCBpcyBh IGRvd25ncmFkZSBvZiBhDQo+ID4+Pj4gTVVTVA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gbGV2ZWwNCj4g Pj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIHJlcXVpcmVtZW50IGRlZmluZWQgaW4gW1JGQzU3NjZdLiAg VGhlIGRvd25ncmFkZSBhbGxvd3MNCj4gPj4gVFVSTg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gc2VydmVy cw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICAgcHJvdmlkZWQgYnkgbG9jYWwgb3IgYWNjZXNzIG5l dHdvcmsgdG8gYWNjZXB0IEFsbG9jYXRpb24NCj4gPj4gcmVxdWVzdHMNCj4gPj4+Pj4NCj4gPj4+ Pj4+Pj4+PiAgIGZyb20gbmV3IGFuZC9vciBndWVzdCB1c2VycyBpbiB0aGUgbmV0d29yayB3aG8g ZG8gbm90DQo+ID4+Pj4gbmVjZXNzYXJpbHkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIHBvc3Nl c3MgbG9uZyB0ZXJtIGNyZWRlbnRpYWxzIGZvciBTVFVOIGF1dGhlbnRpY2F0aW9uLiAgVGhlDQo+ ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gICBpbnRlbnRpb24sIGluIHN1Y2ggZGVwbG95bWVudHMsIGJl aW5nIHRvIHByb3ZpZGUgVFVSTg0KPiA+PiBzZXJ2aWNlcw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ IHRvDQo+ID4+Pj4+DQo+ID4+Pj4+PiBhbGwNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIHVzZXJz IGluIHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yay4gIEhvd2V2ZXIsIHRoaXMgb3BlbnMgdXAg YQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gVFVSTg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICAgc2VydmVy IHRvIGEgdmFyaWV0eSBvZiBhdHRhY2tzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDE3IG9mDQo+ID4+ Pj4+DQo+ID4+Pj4+PiBbUkZDNTc2Nl0uDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gICBBIFRVUk4g c2VydmVyIGluIHN1Y2ggY2FzZXMgbXVzdCBiZSBjb25maWd1cmVkIHRvIG9ubHkNCj4gPj4gcHJv Y2Vzcw0KPiA+Pj4+IFNUVU4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiAgIHJlcXVlc3RzIGZyb20g dGhlIHRydXN0ZWQgbG9jYWwgbmV0d29yayBvciBzdWJzY3JpYmVycyBvZiB0aGUNCj4gPj4+Pj4N Cj4gPj4+Pj4+IGFjY2Vzcw0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICAgbmV0d29yay4gIE9wZXJh dGlvbmFsIG1lYXN1cmVzIG11c3QgYmUgdGFrZW4gaW4gb3JkZXINCj4gPj4gcHJvdGVjdA0KPiA+ Pj4+IHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICAgVFVSTiBzZXJ2ZXI7IHNvbWUgb2YgdGhl c2UgbWVhc3VyZXMgaW5jbHVkZSwgYnV0IG5vdCBsaW1pdGVkDQo+ID4+IHRvLA0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+Pj4+ICAgYWNjZXNzIGNvbnRyb2wgYnkgbWVhbnMgb2YgYWNjZXNzLWxpc3RzLCBm aXJld2FsbHMsIHN1YnNjcmliZXINCj4gPj4+Pj4NCj4gPj4+Pj4+IHF1b3RhDQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4+Pj4gICBsaW1pdHMsIGluZ3Jlc3MgZmlsdGVyaW5nIGV0Yy4NCj4gPj4+Pj4NCj4g Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ICAgQSBUVVJOIGNsaWVudCBNVVNUIHVz ZSAoRClUTFMgaW4gdGhlIGFic2VuY2Ugb2YgU1RVTiBsb25nLQ0KPiA+Pj4+IHRlcm0NCj4gPj4+ Pj4NCj4gPj4+Pj4+Pj4+PiAgIGNyZWRlbnRpYWwgbWVjaGFuaXNtIFtSRkM1Mzg5XSBvciBTVFVO IEV4dGVuc2lvbiBmb3IgVGhpcmQtDQo+ID4+Pj4gUGFydHkNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ PiAgIEF1dGhvcml6YXRpb24gW1JGQzc2MzVdLiINCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IFBsZWFzZSByZWZlcg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gaHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNj b3ZlcnktDQo+ID4+IDENCj4gPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50 LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+PiAzQV9fdG9vbHMuaWV0Zi5vcmdfaHRtbF9kcmFm dC0yRGlldGYtMkR0cmFtLTJEdHVybi0yRHNlcnZlci0NCj4gPj4gMkRkaXNjb3ZlcnktDQo+ID4+ Pj4gMkQxJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZyPWJ3Wi0NCj4gPj4+PiBu blJHV21jR0tSSXVhZHE2LU5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+IE1W UWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9LS1CLQ0KPiA+Pj4+IGtBcDlE ZTFmNkhoUktMRXREMWJWUzMzQnBHMlM1TVl6V0JRX1lESSZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4+ Pj4+IDAjDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+PiBzZWN0aW9uDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+ PiAtOSBmb3IgbW9yZSBkZXRhaWxzLg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4+Pj4gVGhhbmtzLA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IEF1dGhvcnMNCj4gPj4+ Pj4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gdHJh bSBtYWlsaW5nIGxpc3QNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiB0cmFtQGlldGYub3JnIDxtYWls dG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3RyYW0NCj4gPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5z ZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+Pg0KPiA+Pg0KPiAzQV9fd3d3 LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9fdHJhbSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBG NGoNCj4gPj4+PiBwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4gTlNuc2d3YkJW VUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhu aEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1haFJuMWlmeG5PQUNyVkZneEo5OTA4Ng0KPiA+Pj4+IG5C dUM2LWN6OUg3R0tZXzBFVjhzJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ ID4+Pj4+Pj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+PiB0cmFtIG1haWxpbmcgbGlzdA0KPiA+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4+IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+Pg0K PiA+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vdHJhbQ0K PiA+Pj4+PiAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0 dHBzLQ0KPiA+Pj4+DQo+ID4+DQo+IDNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb190 cmFtJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0ag0KPiA+Pj4+IHBONkxaZyZyPWJ3Wi1ublJH V21jR0tSSXVhZHE2LQ0KPiA+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4+ Pg0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPWFoUm4x aWZ4bk9BQ3JWRmd4Sjk5MDg2DQo+ID4+Pj4gbkJ1QzYtY3o5SDdHS1lfMEVWOHMmZT0+DQo+ID4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ Pj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4gdHJhbSBtYWlsaW5nIGxpc3QNCj4gPj4+Pj4NCj4gPj4+Pj4+Pj4+ IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtDQo+ID4+Pj4+ICAg IDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+ Pj4NCj4gPj4NCj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX3RyYW0mZD1EZ01G YVEmYz05NlpiWlpjYU1GNHcwRjRqDQo+ID4+Pj4gcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFk cTYtDQo+ID4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+DQo+ID4+DQo+ IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9YWhSbjFpZnhuT0FDclZG Z3hKOTkwODYNCj4gPj4+PiBuQnVDNi1jejlIN0dLWV8wRVY4cyZlPT4NCj4gPj4+Pj4NCj4gPj4+ Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+ID4+Pj4+DQo+ID4+Pj4+Pj4gdHJhbSBtYWlsaW5nIGxpc3QNCj4g Pj4+Pj4NCj4gPj4+Pj4+PiB0cmFtQGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4g Pj4+Pj4NCj4gPj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Ry YW0NCj4gPj4+Pj4gICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/ dT1odHRwcy0NCj4gPj4+Pg0KPiA+Pg0KPiAzQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGlu Zm9fdHJhbSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGoNCj4gPj4+PiBwTjZMWmcmcj1id1ot bm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ ID4+Pj4NCj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1h aFJuMWlmeG5PQUNyVkZneEo5OTA4Ng0KPiA+Pj4+IG5CdUM2LWN6OUg3R0tZXzBFVjhzJmU9Pg0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KPiA+Pj4+PiAgICB0cmFtIG1haWxpbmcgbGlzdA0KPiA+Pj4+PiAgICB0cmFt QGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+Pj4gICAgaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtDQo+ID4+Pj4+ICAgIDxodHRwczovL3VybGRl ZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4NCj4gPj4NCj4gM0Ff X3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX3RyYW0mZD1EZ01GYVEmYz05NlpiWlpjYU1G NHcwRjRqDQo+ID4+Pj4gcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ID4+IE5TbnNn d2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+DQo+ID4+DQo+IE1WUWkybFZiRV9zNHVs eDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9YWhSbjFpZnhuT0FDclZGZ3hKOTkwODYNCj4gPj4+ PiBuQnVDNi1jejlIN0dLWV8wRVY4cyZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pg0KPiA+Pj4+IC0tDQo+ID4+Pj4gQnJhbmRvbiBXaWxsaWFtczsgQ2hpZWYgQXJjaGl0ZWN0 DQo+ID4+Pj4gQ2xvdWQgTmV0d29ya2luZzsgQWthbWFpIFRlY2hub2xvZ2llcyBJbmMuDQo+ID4+ DQo+ID4+IC0tDQo+ID4+IEJyYW5kb24gV2lsbGlhbXM7IENoaWVmIEFyY2hpdGVjdA0KPiA+PiBD bG91ZCBOZXR3b3JraW5nOyBBa2FtYWkgVGVjaG5vbG9naWVzIEluYy4NCg0K From nobody Wed Jan 4 04:57:39 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B24FD12955B; Wed, 4 Jan 2017 04:57:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.801 X-Spam-Level: X-Spam-Status: No, score=-5.801 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-3.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WTiIIjsni5cj; Wed, 4 Jan 2017 04:57:33 -0800 (PST) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [23.79.238.175]) by ietfa.amsl.com (Postfix) with ESMTP id 29170129450; Wed, 4 Jan 2017 04:57:33 -0800 (PST) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 5F83B433415; Wed, 4 Jan 2017 12:57:32 +0000 (GMT) Received: from prod-mail-relay11.akamai.com (prod-mail-relay11.akamai.com [172.27.118.250]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 3DA4F433404; Wed, 4 Jan 2017 12:57:32 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1483534652; bh=z8xz4Fj4Goo5L40BnSHIDZBql/0hBHXI8ockXAgaRL8=; l=88895; h=To:References:Cc:From:Date:In-Reply-To:From; b=p+szIjeBaQ1UKCseWP9WvOQzg/2uaFflZ2UAjHLH8cMjcjQvH9YNwGcE3Rwl/qlOx b9cACfHCsAea000c1/HqUnn8YJLtMBzJI47mcjVXgf0/GvMaYlBp5+sD5JypFVbMkz Ww0+HoX3maneadNPH6rjNSLFd7TX7mYsNtverWeI= Received: from [172.28.118.39] (bowill.kendall.corp.akamai.com [172.28.118.39]) by prod-mail-relay11.akamai.com (Postfix) with ESMTP id 315921FC88; Wed, 4 Jan 2017 12:57:32 +0000 (GMT) To: "Tirumaleswar Reddy (tireddy)" , Karl Stahl , "Pal Martinsen (palmarti)" References: <521b142d7fd9482ca18102655d4ef4e6@XCH-RCD-017.cisco.com> <021701d2436e$4cee87d0$e6cb9770$@stahl@ingate.com> <03166323036f4cf187c0a67b9c183138@XCH-RCD-017.cisco.com> <034501d244e7$ad9ac060$08d04120$@stahl@ingate.com> <061301d248ea$12c01110$38403330$@stahl@ingate.com> <3cf392b265354926a46f8e70109df236@XCH-RCD-017.cisco.com> <065101d24958$64f42fc0$2edc8f40$@stahl@ingate.com> <7f4a0d29c1b844539a5d2b38ee699c38@XCH-RCD-017.cisco.com> <00a901d24c77$6a9b7d80$3fd27880$@stahl@ingate.com> <96701F1A-BE53-4A91-B0 FA-2BBAF7051651@cisco. com> <0726040555ad4275a2486f0aa8f9174d@XCH-RCD-017.cisco.com> <01d101d24f19$04a7fae0$0df7f0a0$@stahl@ingate.com> <5f464f75-5d00-a0b8-83cc-07e1b0f2ba25@akamai.com> <347f9a2f4d5e4970a17288e8ca33b882@XCH-RCD-017.cisco.com> <997ccf57-0634-c43e-22e2-a93f0ab75f5b@akamai.com> <03b17932e8824b5a9fd4a5d7c6baedc3@XCH-RCD-017.cisco.com> From: Brandon Williams Message-ID: <31ce165e-a498-b024-7da2-e65413826504@akamai.com> Date: Wed, 4 Jan 2017 07:57:31 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: <03b17932e8824b5a9fd4a5d7c6baedc3@XCH-RCD-017.cisco.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: "Prashanth Patil \(praspati\)" , "tram-chairs@ietf.org" , "Dan Wing \(dan@danwing.org\)" , 'Spencer Dawkins at IETF' , "tram@ietf.org" Subject: Re: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Jan 2017 12:57:39 -0000 Hi Tiru, > > Yes, these attacks may not happen in a home network. But we cannot > expect the roaming client to keep changing the security posture as > the device attaches to different networks. An average user may not be > even aware of the security risks when (D)TLS is disabled. > > What is the downside if (D)TLS is mandated ? > I'd like to hear Karl's thoughts on that. I agree that unauthenticated (D)TLS would be the more reliable way to get the required mitigation, but if it is reasonable to say that some networks don't require it, why should we mandate the overhead of (D)TLS? > I understand, I can add the following new lines: > > In order to allow the TURN client to select fallback to (D)TLS as > described above, a TURN server that does not require either STUN long > term authentication [RFC5389] or STUN Extension for Third Party > Authorization [RFC7635] MUST support (D)TLS. Such a TURN server MAY > allow fallback to clear text but fallback to clear text is NOT > RECOMMENDED because it makes the client more susceptible to > man-in-the-middle attacks and on-path packet injection. > That looks fine to me, but my proposed edits were really an attempt to address Karl's concerns, so let's see if we hear from him. --Brandon On 01/02/2017 10:14 AM, Tirumaleswar Reddy (tireddy) wrote: > Hi Brandon, > > Please see inline > >> -----Original Message----- >> From: Brandon Williams [mailto:brandon.williams@akamai.com] >> Sent: Wednesday, December 28, 2016 1:14 AM >> To: Tirumaleswar Reddy (tireddy) ; Karl Stahl >> ; Pal Martinsen (palmarti) >> Cc: Prashanth Patil (praspati) ; tram-chairs@ietf.org; >> 'Dan Wing' ; 'Spencer Dawkins at IETF' >> ; tram@ietf.org >> Subject: Re: SV: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf- >> tram-turn-server-discovery >> >> The original I responded to didn't have the tram list CCed. Apologies to >> those who receive duplicates. >> >> -- >> >> Hi Tiru, >> >> Sorry about the delayed response. >> >> I understand that the requirements you propose are to protect the >> client. My point is that the client might not require such protection in >> all cases and it should be up to the client to make that determination. >> For example, if both the client and the server are on my home network, I >> don't really need the protection that (D)TLS provides. c >> The server must >> support whatever security posture the client requires, but the server >> should not require the client to protect itself in a particular way. > > The TURN server bypasses the Enterprise firewall security and allows traffic from outside to inside. As you already know, TURN permissions mimic the address-restricted filtering mechanism of NAT, and if the client were to choose security posture that does not offer any security to TURN message (because of bad user configuration or a malware client on the endpoint), it just renders the client to become a victim of DDOS attack (an attacker can sends faked permissions to the TURN server to launch attack (DOS or DDOS) on the TURN client and it nullifies the security benefits offered by CreatePermission). > > If the TURN server mandates (D)TLS then the above attack is not possible and would protect even a compromised/mis-configured client from DDOS attacks. In short, why would an Enterprise network administrator want to configure TURN server to be used in this mode in which clients can be subjected to DDOS attacks and the TURN server and Enterprise firewall cannot do anything to protect the client. > >> >> This is the foundation for my proposed edits. > c> > -Tiru > >> >> --Brandon >> >> On 12/13/2016 12:14 AM, Tirumaleswar Reddy (tireddy) wrote: >>> Hi Brandon, >>> >>> Thanks for the feedback. Please see inline >>> >>>> -----Original Message----- >>>> From: Brandon Williams [mailto:brandon.williams@akamai.com] >>>> Sent: Saturday, December 10, 2016 10:13 PM >>>> To: Karl Stahl ; Tirumaleswar Reddy (tireddy) >>>> ; Pal Martinsen (palmarti) >>>> Cc: Prashanth Patil (praspati) ; tram-chairs@ietf.org; >>>> 'Dan Wing' ; 'Spencer Dawkins at IETF' >>>> >>>> Subject: Re: SV: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf- >>>> tram-turn-server-discovery >>>> >>>> I'm not sure we're quite at consensus yet Karl, but I think we're close. >>>> >>>> I agree that the text you quote from the doc covers the client side >>>> considerations, and that framing it as recommendations rather than >>>> requirements still makes sense. It's up to the client to decide which >>>> security elements are required for the application use case, and that >>>> text was intended to provide guidance without trying to force a security >>>> posture that is more complicated than the use case requires. >>> >>> The requirements are to protect the client from various attacks. >>> >>>> >>>> For the server side, in order to allow the client to fall back to >>>> (D)TLS, the TURN server MUST support (D)TLS at least for opportunistic >>>> privacy. This doesn't mean that the server has to require (D)TLS. It can >>>> still allow fallback to cleartext if the client so chooses. >>>> >>>> So, I agree with you on reverting the MUST for the client, as long as we >>>> continue to strongly recommend (D)TLS as the fallback. If we do that >>>> though, I think we need to make it clear that a TURN server configured >>>> to allow sessions without STUN auth MUST support (D)TLS so that the >>>> client has the option of (D)TLS fallback. >>>> >>>> I think we are agreeing to this change. >>>> >>>> OLD: >>>> >>>> "A TURN client MUST use (D)TLS in the absence of ..." >>>> >>>> NEW: >>>> >>>> "A TURN client SHOULD use (D)TLS in the absence of ..." >>>> >>>> And I am proposing the addition of this paragraph at the end of the >>>> section 9, just before section 9.1. >>>> >>>> "In order to allow the TURN client to select fallback to (D)TLS as >>>> described above, a TURN server that does not require either STUN long >>>> term authentication [RFC5389] or STUN Extension for Third Party >>>> Authorization [RFC7635] MUST support (D)TLS. Such a TURN server MAY >> also >>>> allow fallback to clear text." >>> >>> [1] I agree with the above text except for the last line in the above >> paragraph. If the TURN server allows fallback to clear text then the attacker >> can subject the TURN client to various attacks. For example, attacker sends >> faked permissions to the TURN server to launch attack (DOS or DDOS) on the >> TURN client and it nullifies the security benefits offered by CreatePermission. >> The victim in this mode is the TURN client and not the TURN server, and hence >> it is more important for the client to use (D)TLS to protect itself from attacks. >>> >>> When there is a possibility that in clear text mode the TURN clients can be >> subjected to various attacks, why would an TURN server administrator want to >> allow fallback to clear text ? >>> >>> [2] And what problems do you see with the following new proposed text ? >>> "In the absence of STUN long-term credential mechanism [RFC5389] or STUN >> Extension for Third-Party Authorization [RFC7635], a TURN client MUST use >> (D)TLS and if (D)TLS authentication to validate the TURN server identity is not >> possible then the TURN client MUST fallback to encryption-only (D)TLS." >>> >>> -Tiru >>> >>>> >>>> --Brandon >>>> >>>> On 12/05/2016 11:59 AM, Karl Stahl wrote: >>>>> All I want to do in the (D)TLS discussion is to delete the sentence “A >>>>> TURN client MUST use (D)TLS in the absence of STUN long-term credential >>>>> mechanism [RFC5389] or STUN Extension for Third-Party Authorization >>>>> [RFC7635].” under 9. Security Considerationsthat was thrown-into >>>>> version -10 during the discuss. >>>>> >>>>> >>>>> >>>>> **We leave all the rest regarding (D)TLS as it has been since version -7 >>>>> of this draft.** >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> Brandon, >>>>> >>>>> >>>>> >>>>> I see there already are the (general) SHOULD or RECOMMEND that you >>>>> wanted (I did not suggest to change those – they are there since version >>>>> -7 I believe): “It is RECOMMENDED that the TURN client use one of the >>>>> following techniques with (D)TLS to validate the TURN server:” and >> further… >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> for Tiru, this is already in the draft since -7 and I am not suggesting >>>>> to change that: >>>>> >>>>> >>>>> >>>>> “ An auto-discovered TURN server is considered to be only as trusted as >>>>> >>>>> the path between the client and the TURN server. In order to safely >>>>> >>>>> use auto-discovered TURN servers for sessions with 'strict privacy' >>>>> >>>>> requirements, the user needs to be able to define privacy criteria >>>>> >>>>> (e.g. a trusted list of servers, networks, or domains) that are >>>>> >>>>> considered acceptable for such traffic. Any discovered TURN server >>>>> >>>>> outside the criteria is considered untrusted and therefore MUST NOT >>>>> >>>>> be used for privacy sensitive communication. >>>>> >>>>> >>>>> >>>>> In some auto-discovery scenarios, it might not be possible for the >>>>> >>>>> TURN client to use (D)TLS authentication to validate the TURN server. >>>>> >>>>> However, fall-back to clear text in such cases could leave the TURN >>>>> >>>>> client open to on-path injection of spoofed TURN messages. Instead, >>>>> >>>>> with an explicit administrator choice, a TURN client SHOULD fall-back >>>>> >>>>> to encryption-only (D)TLS when (D)TLS authentication is not >>>>> >>>>> available. Another reason to fall-back to encryption-only is for >>>>> >>>>> privacy, which is analogous to SMTP opportunistic encryption >>>>> >>>>> [RFC7435] where one does not require privacy but one desires privacy >>>>> >>>>> when possible. >>>>> >>>>> >>>>> >>>>> It is suggested that a TURN client attempt (D)TLS with authentication >>>>> >>>>> and encryption, falling back to encryption-only if the TURN server >>>>> >>>>> cannot be authenticated via (D)TLS. A TURN client could fall back to >>>>> >>>>> clear text, with an explicit administrator choice, if it does not >>>>> >>>>> support unauthenticated (D)TLS, but fallback to clear text is NOT >>>>> >>>>> RECOMMENDED because it makes the client more susceptible to man- >> in- >>>>> >>>>> the-middle attacks and on-path packet injection. >>>>> >>>>> ” >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> **Tiru – Below you are pointing at the -10 version changes that WE ARE >>>>> discussing here.** >>>>> >>>>> >>>>> >>>>> Praspanth put them on the table again and I brought up that the >>>>> >>>>> “A TURN client MUST use (D)TLS in the absence of STUN long-term >>>>> credential mechanism [RFC5389] or STUN Extension for Third-Party >>>>> Authorization [RFC7635].” >>>>> >>>>> must go away (leave the rest), since it effectively forbids TURN servers >>>>> provided by the local and access network. >>>>> >>>>> >>>>> >>>>> Brandon had agreed that MUST should go away, when you jumped in with >>>> the >>>>> attacks arguments, when we were discussing whether there should still be >>>>> a SHOULD or RECOMMEND. – Then you got me (and others?) lost, and…. >>>>> >>>>> >>>>> >>>>> So catch up from point (1) of my: >>>>> >>>>> https://www.ietf.org/mail-archive/web/tram/current/msg02216.html >>>>> > 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg02216.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=NtRZwrmn2K- >>>> WUI_QN5k_yHlAN-uzhoQU8bs2yA_RBP8&e=> >>>>> >>>>> >>>>> >>>>> >>>>> And you may notice that in >>>>> >> https://mailarchive.ietf.org/arch/msg/tram/3svO9djFxeZyTtNsgqQf8zCTiVY >>>>> >>> >> 3A__mailarchive.ietf.org_arch_msg_tram_3svO9djFxeZyTtNsgqQf8zCTiVY&d= >>>> DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=SLjyswdn- >>>> oZ_aev0pRxD3h6c4aKbEQZ3c_kL9_ccHGM&e=> >>>>> that you referred to >>>>> >>>>> “Making STUN authentication OPTIONAL” >>>>> >>>>> is ALREADY COMPENSATED for by “IP address authentication” (the >>>>> foundation of today’s IP telephony authentication): >>>>> >>>>> “A TURN server in such cases must be configured to only process STUN >>>>> >>>>> requests from the trusted local network or subscribers of the access >>>>> >>>>> network. Operational measures must be taken in order protect the >>>>> >>>>> TURN server; some of these measures include, but not limited to, >>>>> >>>>> access control by means of access-lists, firewalls, subscriber quota >>>>> >>>>> limits, ingress filtering etc.” >>>>> >>>>> where ”firewalls” specifically applies to TURN servers that local or >>>>> access network providers allow only their own users to access. >>>>> >>>>> >>>>> >>>>> And Author’s: “Please refer >>>>> https://tools.ietf.org/html/draft-ietf-tram-turn-server-discovery- >> 10#section- >>>> 9 >>>>> >>> 3A__tools.ietf.org_html_draft-2Dietf-2Dtram-2Dturn-2Dserver- >> 2Ddiscovery- >>>> 2D10-23section-2D9&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=b0fJ1ANqhE8C2BrlnGY3iW >>>> CwVEr2OhYyFlE__oOHtSE&e=>for >>>>> more details.” >>>>> >>>>> already (since version -7 I think) in detail discusses the (D)TLS >>>>> implications in this context (that you are redoing). >>>>> >>>>> >>>>> >>>>> Please, again, let us stay with the consensus since version -7 of this >>>>> draft: No (D)TLS mandate. >>>>> >>>>> >>>>> >>>>> Thanks, >>>>> >>>>> Karl >>>>> >>>>> >>>>> >>>>> *Från:*Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>> *Skickat:* den 4 december 2016 08:33 >>>>> *Till:* Pal Martinsen (palmarti); Karl Stahl; tram mailing list >>>>> *Kopia:* Brandon Williams; Prashanth Patil (praspati); >>>>> tram-chairs@ietf.org ; Dan Wing; Spencer >>>>> Dawkins at IETF >>>>> *Ämne:* RE: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> Prashanth has already summarized the changes done to draft during ISEG >>>>> review in >>>>> >> https://mailarchive.ietf.org/arch/msg/tram/3svO9djFxeZyTtNsgqQf8zCTiVY >>>>> >>> >> 3A__mailarchive.ietf.org_arch_msg_tram_3svO9djFxeZyTtNsgqQf8zCTiVY&d= >>>> DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=SLjyswdn- >>>> oZ_aev0pRxD3h6c4aKbEQZ3c_kL9_ccHGM&e=> >>>>> >>>>> >>>>> >>>>> >>>>> Karl’s comment is to not mandate (D)TLS, and we don’t agree with him. >>>>> >>>>> >>>>> >>>>> Request you, WG members, WG chairs and AD to share their thoughts on >>>>> mandating the use of (D)TLS when STUN authentication is not used to >>>>> handle the threats discussed in RFC5766. >>>>> >>>>> >>>>> >>>>> -Tiru >>>>> >>>>> >>>>> >>>>> *From:*Pal Martinsen (palmarti) >>>>> *Sent:* Friday, December 2, 2016 11:27 PM >>>>> *To:* Karl Stahl >; >>>>> tram mailing list > >>>>> *Cc:* Tirumaleswar Reddy (tireddy) >>>> >; Brandon Williams >>>>> > >; >>>>> Prashanth Patil (praspati) >>>> >; tram-chairs@ietf.org >>>>> ; Dan Wing >>>> >; Spencer Dawkins at IETF >>>>> >>> > >>>>> *Subject:* Re: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> Hi Karl (and tramsters), >>>>> >>>>> >>>>> >>>>> I am sympathetic to your arguments but they might have been lost >>>>> somewhere in the email thread (A mix of quoting, repeating and inline >>>>> commenting have at least made my email client somewhat confused.) >>>>> >>>>> >>>>> >>>>> The best thing you can do at this moment is to provide text. I suggest >>>>> you write up a draft as a counter proposal and submit it. In that way >>>>> the WG members can read through and comment. >>>>> >>>>> >>>>> >>>>> I encourage the WG chairs to give Karl enough time to write this up, >>>>> before progressing the other draft. >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> .-. >>>>> >>>>> Pål-Erik >>>>> >>>>> >>>>> >>>>> On 2 Dec 2016, at 09:38, Karl Stahl >>>> > wrote: >>>>> >>>>> >>>>> >>>>> Hi Tiru, >>>>> >>>>> >>>>> >>>>> I am trying to make the point that there is no option for this >>>>> draft, supposed to fulfill: >>>>> >>>>> *[tram] Milestone 3: TURN server auto-discovery mechanism for >>>>> enterprise and ISPs* >>>>> >>>>> to result in: “We forbid usage of such (yellow) network provided >>>>> TURN servers (use gray or grayish TURN servers instead)”, which is >>>>> the consequence of mandating (D)TLS. >>>>> >>>>> >>>>> >>>>> Simply leave the consensus since version -7 of this draft by >>>>> removing the (D)TLS mandating for TURN servers provided by the >>>>> local or access network thrown-in during the discuss. >>>>> >>>>> >>>>> >>>>> /Karl >>>>> >>>>> >>>>> >>>>> PS: I believe the attack discussion below is already done, and that >>>>> you are wrong in thinking that authentication which protects against >>>>> spoof attacks can be exchanged for encryption, and that any of these >>>>> things protects against DDOS attacks . These security things address >>>>> different things and are not interchangeable, nor are they universal >>>>> means against attacks of various kinds. >>>>> >>>>> >>>>> >>>>> And the outcome of any such discussion doesn’t change the above. >>>>> >>>>> >>>>> >>>>> Please note (sorry to repeat) that for the purpose of getting a >>>>> better path for real-time traffic than through the default gateway >>>>> path, we cannot expect to also get a higher security or trust level, >>>>> nor to resolve every problem in the world. >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> *Från:* Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>> *Skickat:* den 28 november 2016 10:53 >>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil >>>>> (praspati); tram@ietf.org >>>>> *Kopia:* tram-chairs@ietf.org ; 'Dan >>>>> Wing'; 'Spencer Dawkins at IETF' >>>>> *Ämne:* RE: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> Hi Karl, >>>>> >>>>> >>>>> >>>>> Yes, I am discussing TURN servers provided by local or access >>>>> networks, referring to inside attacks launched by attackers inside >>>>> the local or access network. >>>>> >>>>> a)An inside attacker sends faked permissions to the TURN server to >>>>> launch attack (DOS or DDOS) on the victim (TURN client). >>>>> >>>>> b)An inside attacker sends spoofed TURN requests to the TURN server >>>>> to close allocations. >>>>> >>>>> >>>>> >>>>> Both above attacks can be prevented by using opportunistic >>>>> encryption with (D)TLS. >>>>> >>>>> >>>>> >>>>> -Tiru >>>>> >>>>> >>>>> >>>>> *From:* tram [mailto:tram-bounces@ietf.org] *On Behalf Of *Karl Stahl >>>>> *Sent:* Monday, November 28, 2016 2:49 PM >>>>> *To:* Tirumaleswar Reddy (tireddy) >>>> >; 'Brandon Williams' >>>>> >>> >; >>>>> Prashanth Patil (praspati) >>>> >; tram@ietf.org >>>>> *Cc:* tram-chairs@ietf.org ; 'Dan Wing' >>>>> >; 'Spencer Dawkins at >>>>> IETF' >>>> > >>>>> *Subject:* Re: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> Hi Tiru, >>>>> >>>>> >>>>> >>>>> Now I don’t know where you are again. >>>>> >>>>> >>>>> >>>>> Are you discussing TURN servers provided by the local or access >>>>> network (the yellow TURN servers), that are released from >>>>> authentication (no dispute there), but for which (D)TLS mandate was >>>>> thrown in-during the discuss (making them gray)? That is the >>>>> showstopper that must go away. >>>>> >>>>> >>>>> >>>>> Some comments below. Hope we agree the below does not relate to >> the >>>>> yellow TURN server. >>>>> >>>>> >>>>> >>>>> /Karl >>>>> >>>>> >>>>> >>>>> *Från:* Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>> *Skickat:* den 28 november 2016 04:02 >>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil >>>>> (praspati); tram@ietf.org >>>>> *Kopia:* tram-chairs@ietf.org ; 'Dan >>>>> Wing'; 'Spencer Dawkins at IETF' >>>>> *Ämne:* RE: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> Hi Karl, >>>>> >>>>> >>>>> >>>>> No, I don’t agree that (D)TLS is not mandatory. Opportunistic >>>>> encryption is not new. It’s discussed in RFC7435, and used in TCP >>>>> increased security (TCPINC WG) and DNS privacy exchange (DPRIVE >> WG). >>>>> >>>>> >>>>> >>>>> How do you propose to handle the following passive attacks without >>>>> (D)TLS or STUN authentication ? >>>>> >>>>> >>>>> >>>>> a) https://tools.ietf.org/html/rfc5766#section-17.2.1 >>>>> >>> 3A__tools.ietf.org_html_rfc5766-23section- >>>> 2D17.2.1&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=yTTYKgor2_ajHe7KP_4Bznl >>>> G1EamuIy_K7ak0U40RbM&e=>, >>>>> where attacker sends faked permissions to the TURN server to launch >>>>> attack (DOS or DDOS) on the victim (TURN client). >>>>> >>>>> > Since the _TURN server sits outside_ the firewall, at attacker outside >> the >>>>> firewall can now send a >>>>> >>>>> --- A TURN server provided by local or access network, shall only be >>>>> accessible by users inside the firewall. >>>>> >>>>> >>>>> >>>>> b) https://tools.ietf.org/html/rfc5766#section-17.3.3 >>>>> >>> 3A__tools.ietf.org_html_rfc5766-23section- >>>> 2D17.3.3&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=eH- >>>> u5a6yq0GxTqHFJMTssCJefcXLrMGLQdz-7MK_l7c&e=>, >>>>> attacker sends spoofed TURN requests to the TURN server to close >>>>> allocations. >>>>> >>>>> --- I don’t think (D)TLS helps if you can spoof and have such >>>>> attackers inside your network. (that paragraph says: TURN prevents >>>>> this by requiring that the credentials used”) meaning authentication >>>>> (not certificate checking, nor encryption). >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> -Tiru >>>>> >>>>> >>>>> >>>>> *From:* tram [mailto:tram-bounces@ietf.org] *On Behalf Of *Karl Stahl >>>>> *Sent:* Monday, November 28, 2016 1:39 AM >>>>> *To:* Tirumaleswar Reddy (tireddy) >>>> >; 'Brandon Williams' >>>>> >>> >; >>>>> Prashanth Patil (praspati) >>>> >; tram@ietf.org >>>>> *Cc:* tram-chairs@ietf.org ; 'Dan Wing' >>>>> >; 'Spencer Dawkins at >>>>> IETF' >>>> > >>>>> *Subject:* Re: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> Hi Tiru, >>>>> >>>>> >>>>> >>>>> So we agree that the (D)TLS mandate thrown-in during the discuss >>>>> (making yellow TURN servers gray) shall go away and we are back to >>>>> what was consensus since version -7 of the draft. I think the >>>>> attacks you are discussing now have been listed already and for TURN >>>>> servers in a local or access network (no change since version -7), >>>>> we should not expect a higher security or trust level when sending >>>>> our real-time traffic through another path than the through default >>>>> gateway, both paths are provided by the same network provider. >>>>> >>>>> * * >>>>> >>>>> If “protects the client from various attacks discussed in previous >>>>> mails” related to discovery of TURN servers, really is possible by >>>>> introducing something (why reopen that now?), we have to be careful >>>>> not to make yellow TURN servers grayish, which I am afraid self >>>>> signed certificates might do, and further, does this belong in a >>>>> discovery draft, risking to pick a fight with the WebRTC browser >>>>> makers supposed to use this specification. We know they don’t fancy >>>>> self signed certificates… >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> Isn’t it specifications for some specific usage/application (like >>>>> the return draft for WebRTC browsers) that should consider such >>>>> things (not this draft), without any recommendation from this >>>>> specification? >>>>> >>>>> >>>>> >>>>> /Karl >>>>> >>>>> >>>>> >>>>> *Från:* Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>> *Skickat:* den 23 november 2016 04:15 >>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil >>>>> (praspati); tram@ietf.org >>>>> *Kopia:* tram-chairs@ietf.org ; 'Dan >>>>> Wing'; 'Spencer Dawkins at IETF' >>>>> *Ämne:* RE: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> I am not suggesting that authentication is mandatory for TURN >>>>> servers provided by local or access networks using (D)TLS but use of >>>>> (D)TLS [Karl: “these become gray not yellow” or are you suggesting >>>>> certificated signed by the network provider] >>>>> >>>>> >>>>> >>>>> [TR] No, they are yellow and not grey; clients will use (D)TLS but >>>>> do not validate the TURN server certificate (referred to as >>>>> Opportunistic security in the draft). >>>>> >>>>> >>>>> >>>>> [Karl: Seems like you are suggesting self signed certificates to >>>>> just get the encryption (again – also discussed)] >>>>> >>>>> >>>>> >>>>> [TR] Yes, that’s one possible option to mandate (D)TLS. Client >>>>> cannot validate the TURN server certificate but use encryption-only >>>>> (D)TLS and protects the client from various attacks discussed in >>>>> previous mails. >>>>> >>>>> >>>>> >>>>> -Tiru >>>>> >>>>> >>>>> >>>>> *From:* Karl Stahl [mailto:karl.stahl@ingate.com] >>>>> *Sent:* Tuesday, November 22, 2016 11:12 PM >>>>> *To:* Tirumaleswar Reddy (tireddy) >>>> >; 'Brandon Williams' >>>>> >>> >; >>>>> Prashanth Patil (praspati) >>>> >; tram@ietf.org >>>>> *Cc:* tram-chairs@ietf.org ; 'Dan Wing' >>>>> >; 'Spencer Dawkins at >>>>> IETF' >>>> > >>>>> *Subject:* SV: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> Hi Tiru, >>>>> >>>>> >>>>> >>>>> Please understand that in this context: >>>>> >>>>> - Authentication is to only allow certain users to use the TURN >>>>> server resource >>>>> >>>>> - Certificate checking as when using (D)TLS is to assure the user is >>>>> using a trusted TURN server (and further is sets up an encrypted >>>>> channel). >>>>> >>>>> >>>>> >>>>> These things are not interchangeable or do the same things or >>>>> achieves the same, which has been discussed over and over again in >>>>> this draft already. >>>>> >>>>> >>>>> >>>>> Let it rest with that we cannot/should not expect a higher trust or >>>>> security level when sending our real-time traffic through the TURN >>>>> server path, than trough the default gateway path. You simply have >>>>> to trust the access from the network provider you select to connect >>>>> to, or refrain from using it. >>>>> >>>>> >>>>> >>>>> Please also understand that “the gray TURN servers” are provided by >>>>> others than the local or access network, and you chose to trust them >>>>> with your real-time traffic based on checking their certificate (Who >>>>> configures which to allow into the WebRTC browser?). >>>>> >>>>> >>>>> >>>>> In a specification which main purpose is to auto discover TURN >>>>> servers provided by the local or access network (“the yellow ones”), >>>>> you CANNOT LOGICALLY end up with saying you MUST/SHOULD or are >>>>> RECOMMENDED to use “the gray ones” instead, provided by some >>>>> authority or Brandon maybe (which are meant for other purposes). >>>>> Then you have not delivered the specification we need = The >> showstopper. >>>>> >>>>> >>>>> >>>>> /Karl >>>>> >>>>> >>>>> >>>>> PS: Some comments below. >>>>> >>>>> >>>>> >>>>> *Från:* Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>> *Skickat:* den 22 november 2016 04:31 >>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil >>>>> (praspati); tram@ietf.org >>>>> *Kopia:* tram-chairs@ietf.org ; 'Dan >>>>> Wing'; 'Spencer Dawkins at IETF' >>>>> *Ämne:* RE: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> Hi Karl, >>>>> >>>>> >>>>> >>>>> I am not suggesting that authentication is mandatory for TURN >>>>> servers provided by local or access networks using (D)TLS but use of >>>>> (D)TLS [Karl: “these become gray not yellow” or are you suggesting >>>>> certificated signed by the network provider] without authenticating >>>>> the TURN server is mandatory to avoid various attacks listed in >>>>> previous mails. >>>>> >>>>> >>>>> >>>>> In short, the TURN servers provided by local or access networks must >>>>> use (D)TLS but it’s not mandatory for these TURN servers to get >>>>> certificates from CA or any explicit configuration is required on >>>>> the client to trust the TURN server. [Karl: Seems like you are >>>>> suggesting self signed certificates to just get the encryption >>>>> (again – also discussed)] >>>>> >>>>> >>>>> >>>>> -Tiru >>>>> >>>>> >>>>> >>>>> *From:* Karl Stahl [mailto:karl.stahl@ingate.com] >>>>> *Sent:* Monday, November 21, 2016 2:10 AM >>>>> *To:* Tirumaleswar Reddy (tireddy) >>>> >; 'Brandon Williams' >>>>> >>> >; >>>>> Prashanth Patil (praspati) >>>> >; tram@ietf.org >>>>> *Cc:* tram-chairs@ietf.org ; 'Dan Wing' >>>>> >; 'Spencer Dawkins at >>>>> IETF' >>>> > >>>>> *Subject:* SV: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> Hi Tiru, >>>>> >>>>> >>>>> >>>>> Trying to clarify as you request: I have lost track of in which >>>>> context you are when you are "discussing various attacks" and what >>>>> you mean with the ?? I marked below. >>>>> >>>>> >>>>> >>>>> My concern was whether this may again lead to that WE >>>>> HAVE *_NO_* TURN SERVERS in the yellow area below resulting from >> the >>>>> (D)TLS mandating that was thrown-in into version -10 during the >>>>> discuss (=the showstopping), since TURN servers with >>>>> certificates are NOT provided by the local or access network (those >>>>> are provided by some "trust anchor store [RFC6024] allows a TURN >>>>> client ..." or by "Certification authorities that issue TURN server >>>>> certificates" etc..) >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> So, just let me rest with that your discussion does not take away >>>>> the allowance to use TURN servers provided by the local or access >>>>> network without authentication that was re-introduced in version -7 >>>>> of the draft (after long discussions, including with you Tiru). >>>>> Remember, _those yellow TURN servers were the requirement of this >>>>> draft to auto discover_ so they can be used by the WebRTC browsers – >>>>> Usage cannot be forbidden (or un-recommended as Brandon suggests, >>>>> although Brandon is agreeing to that the (D)TLS mandate must vanish >>>>> for the yellow TURN servers). >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> FURTHER JUST TO REMIND AUTHORS of what is needed to be addresses >> in >>>>> this draft; it is found in >>>>> >>>>> https://www.ietf.org/mail-archive/web/tram/current/msg02216.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg02216.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=NtRZwrmn2K- >>>> WUI_QN5k_yHlAN-uzhoQU8bs2yA_RBP8&e=> >>>>> >>>>> and the contradiction in section 7.2 as said in >>>>> >>>>> https://www.ietf.org/mail-archive/web/tram/current/msg02226.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg02226.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=EtiuiVt5Mnjbw9WsDtmjiu2l >>>> -dv1RoHVpdAlTXtgZIQ&e=> >>>>> >>>>> while this discussion with Author Tiru and >“I don't run a local >>>>> network or an access network and would not expect to deploy relays >>>>> meant to function in that mode“ Brandon*, has been on more or less >>>>> deviated subjects, or repeating what we already have been through >>>>> earlier (PS: Notice that Author Prashanth already listed/discussed >>>>> the attack stuff during the discuss. I feared you were redoing that.) >>>>> >>>>> >>>>> >>>>> /Karl >>>>> >>>>> >>>>> >>>>> * https://www.ietf.org/mail-archive/web/tram/current/msg02217.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg02217.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=glxP3ovYX7Cd4f12zIILJhbTc >>>> EJ0ViqVgJQySQkJHYQ&e=> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> -----Ursprungligt meddelande----- >>>>> Från: Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>> Skickat: den 18 november 2016 04:00 >>>>> Till: Karl Stahl; 'Brandon Williams'; Prashanth Patil >>>>> (praspati); tram@ietf.org >>>>> Kopia: tram-chairs@ietf.org ; 'Dan >>>>> Wing'; 'Spencer Dawkins at IETF' >>>>> Ämne: RE: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> >>>>> >>>>> Hi Karl, >>>>> >>>>> >>>>> >>>>> I don't understand your concerns, please clarify. The draft mandates >>>>> (D)TLS but does not mandate TURN server validation. >>>>> >>>>> We are discussing various attacks possbile for the WG to decide if >>>>> (D)TLS is a MUST or SHOULD. >>>>> >>>>> >>>>> >>>>> -Tiru >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> > -----Original Message----- >>>>> >>>>> > From: Karl Stahl [mailto:karl.stahl@ingate.com] >>>>> >>>>> > Sent: Friday, November 18, 2016 2:11 AM >>>>> >>>>> > To: Tirumaleswar Reddy (tireddy) >>> >; 'Brandon Williams' >>>>> >>>>> > >>> >; >>>>> Prashanth Patil (praspati) >>>>> >>>>> > >; tram@ietf.org >>>>> >>>>> >>>>> > Cc: tram-chairs@ietf.org ; 'Dan Wing' >>>>> >; 'Spencer Dawkins >>>>> >>>>> > at IETF' >>> > >>>>> >>>>> > Subject: SV: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> > >>>>> >>>>> > Continuing the thread of this subject with the view that it should be >>>> about the >>>>> >>>>> > MUST/SHOULD/RECOMMEND discussion regarding D(TLS) for the >> USAGE >>>> of >>>>> >>>>> > an already discovered TURN server, which must be totally >> independent >>>> of the >>>>> >>>>> > method used for discovery. >>>>> >>>>> > >>>>> >>>>> > I can't say I understand where Brandon's/Tiru's discussion fits in and >>>> whether >>>>> >>>>> > are right things are said and are in the right context: >>>>> >>>>> > >>>>> >>>>> > ?? > > The draft mandates (D)TLS but does not mandate TURN server >>>>> >>>>> > validation. >>>>> >>>>> > ?? (D)TLS helps avoid various attacks, like attacker sending spoofed >>>> TURN >>>>> >>>>> > messages ?? We should discuss all such possible attacks, before we >>>> decide to >>>>> >>>>> > go with MUST or SHOULD. >>>>> >>>>> > >>>>> >>>>> > Where are we know? >>>>> >>>>> > >>>>> >>>>> > Please, just keep the clearance from authentication as it was from >>>> version >>>>> >>>>> > -07 of the draft already, until the D(TLS) mandate was thrown in >> during >>>> the >>>>> >>>>> > DISCUSS. >>>>> >>>>> > >>>>> >>>>> > Simply, logically: >>>>> >>>>> > > >> TURN servers *provided by* (and maintained by?) some "trust >>>> anchor >>>>> >>>>> > > >> store [RFC6024] allows a TURN client ..." or by "Certification >>>>> >>>>> > > >> authorities that issue TURN server certificates" >>>>> >>>>> > are NOT under the clearance discussed, which is for "TURN servers >>>> *provided >>>>> >>>>> > by* the local network or by the access network". >>>>> >>>>> > so a SHOULD or RECOMMENDED of D(TLS) does not even belong >> under >>>> the >>>>> >>>>> > clearance discussed. >>>>> >>>>> > >>>>> >>>>> > >>>>> >>>>> > FURTHER, When I read: >>>>> >>>>> > >>>>> >>>>> > 7.2. Recursively Encapsulated TURN >>>>> >>>>> > >>>>> >>>>> > WebRTC endpoints SHOULD treat any TURN server discovered >> through >>>> the >>>>> >>>>> > mechanisms described in this specification as an enterprise/gateway >>>>> >>>>> > or access network server, in accordance with Recursively >> Encapsulated >>>>> >>>>> > TURN [I-D.ietf-rtcweb-return]. >>>>> >>>>> > >>>>> >>>>> > Isn't that "any" in total contradiction to the clearance being discussed? >>>>> >>>>> > I thought: "enterprise/gateway or access network" was the same as >> your >>>>> >>>>> > "local or access network" and that for OTHER discovered TURN servers >>>>> >>>>> > (outside the local or access network), it must be the application that >>>> instructs >>>>> >>>>> > the TURN client how to use. >>>>> >>>>> > >>>>> >>>>> > I suggest the 7.2 section is replaced with my: >>>>> >>>>> > > >>> (4) "Deployment Considerations for TURN Servers Provided by >> the >>>>> >>>>> > > >>> Local or >>>>> >>>>> > > >> Access Network" >>>>> >>>>> > >>>>> >>>>> > which mentions Recursively Encapsulated TURN [I-D.ietf-rtcweb- >> return]. >>>>> >>>>> > (you can spell it out like that) >>>>> >>>>> > >>>>> >>>>> > /Karl >>>>> >>>>> > >>>>> >>>>> > -----Ursprungligt meddelande----- >>>>> >>>>> > Från: Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>> >>>>> > Skickat: den 15 november 2016 05:01 >>>>> >>>>> > Till: Brandon Williams; Karl Stahl; Prashanth Patil (praspati); >>>> tram@ietf.org >>>>> >>>>> > Kopia: tram-chairs@ietf.org ; 'Dan >> Wing'; >>>>> 'Spencer Dawkins at IETF' >>>>> >>>>> > Ämne: RE: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> > >>>>> >>>>> > Hi Brandon, >>>>> >>>>> > >>>>> >>>>> > I just listed one possible attack, there could be various other attacks >> like >>>> the >>>>> >>>>> > one discussed in https://tools.ietf.org/html/rfc5766#section-17.2.1 >>>>> >>> 3A__tools.ietf.org_html_rfc5766-23section- >>>> 2D17.2.1&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=yTTYKgor2_ajHe7KP_4Bznl >>>> G1EamuIy_K7ak0U40RbM&e=>, >>>>> >>>>> > where attacker sends faked permissions to the TURN server to launch >>>> attack >>>>> >>>>> > (DOS or DDOS) on the victim (TURN client). >>>>> >>>>> > >>>>> >>>>> > We should discuss all such possible attacks, before we decide to go >> with >>>>> >>>>> > MUST or SHOULD. >>>>> >>>>> > >>>>> >>>>> > -Tiru >>>>> >>>>> > >>>>> >>>>> > > -----Original Message----- >>>>> >>>>> > > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Brandon >>>>> >>>>> > > Williams >>>>> >>>>> > > Sent: Monday, November 14, 2016 7:31 PM >>>>> >>>>> > > To: Tirumaleswar Reddy (tireddy) >>> >; Karl Stahl >>>>> >>>>> > > >; Prashanth >>>>> Patil (praspati) >>>>> >>>>> > > >; tram@ietf.org >>>>> >>>>> >>>>> > > Cc: tram-chairs@ietf.org ; 'Dan Wing' >>>>> >; 'Spencer >>>>> >>>>> > > Dawkins at IETF' >>> > >>>>> >>>>> > > Subject: Re: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> > > >>>>> >>>>> > > +1 on the rationale. It makes almost no difference how you secure >> the >>>>> >>>>> > > local or access network at the border, it's still possible that there >>>>> >>>>> > > are >>>>> >>>>> > on-path >>>>> >>>>> > > adversaries, and using some type of authentication (either (D)TLS or >>>>> >>>>> > > STUN) helps to protect against them. >>>>> >>>>> > > >>>>> >>>>> > > I still agree with Karl on downgrading the MUST back to SHOULD or >>>>> >>>>> > > RECOMMENDED, since I think there's room for disagreement about >>>> how >>>>> >>>>> > > critical it is to mitigate against that attack. Ease-of-use might win >>>>> >>>>> > > out >>>>> >>>>> > for some >>>>> >>>>> > > networks provided they have other protection mechanisms at either >>>> the >>>>> >>>>> > > network or datalink layer. I don't think it should drop below the >>>>> >>>>> > > recommendation level though, because most network will not have >>>> such >>>>> >>>>> > > mechanisms in place. >>>>> >>>>> > > >>>>> >>>>> > > --Brandon >>>>> >>>>> > > >>>>> >>>>> > > On 11/14/2016 06:36 AM, Tirumaleswar Reddy (tireddy) wrote: >>>>> >>>>> > > > There seems to be confusion why (D)TLS is mandated in the draft. >>>>> >>>>> > > > >>>>> >>>>> > > > The draft mandates (D)TLS but does not mandate TURN server >>>> validation. >>>>> >>>>> > In >>>>> >>>>> > > scenarios where the TURN client cannot validate the TURN server, >>>>> >>>>> > > (D)TLS helps avoid various attacks, like attacker sending spoofed >> TURN >>>>> >>>>> > > messages >>>>> >>>>> > to >>>>> >>>>> > > TURN client and server. For example, when (D)TLS is not used, >> attacker >>>>> >>>>> > > can send spoofed TURN requests to the TURN server to close >>>> allocations. >>>>> >>>>> > > > >>>>> >>>>> > > > The above attack is possible when TURN servers are provided by >>>>> >>>>> > > > either >>>>> >>>>> > local >>>>> >>>>> > > or access networks. >>>>> >>>>> > > > >>>>> >>>>> > > > -Tiru >>>>> >>>>> > > > >>>>> >>>>> > > >> -----Original Message----- >>>>> >>>>> > > >> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Karl >> Stahl >>>>> >>>>> > > >> Sent: Monday, November 14, 2016 1:38 PM >>>>> >>>>> > > >> To: 'Brandon Williams' >>> >; >>>>> Prashanth >>>>> >>>>> > > >> Patil >>>>> >>>>> > > >> (praspati) >; >>>> tram@ietf.org >>>>> >>>>> >>>>> > > >> Cc: tram-chairs@ietf.org ; 'Dan >> Wing' >>>>> >; 'Spencer >>>>> >>>>> > > >> Dawkins at IETF' >>>> >; Tirumaleswar >>>>> >>>>> > > >> Reddy >>>>> >>>>> > > >> (tireddy) > >>>>> >>>>> > > >> Subject: Re: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> > > >> >>>>> >>>>> > > >> Hi Brandon, >>>>> >>>>> > > >> >>>>> >>>>> > > >> In this draft, you have been pushing for "validation" of the >>>>> >>>>> > > >> discovered TURN server by using DTLS. The use case for that has >> not >>>>> >>>>> > > >> been spelled out, but the use case of "TURN servers *provided >> by* >>>>> >>>>> > > >> the local network or by the access network", really needs to be >>>>> >>>>> > > >> clarified in this draft. For this use case, clearance from >>>>> >>>>> > > >> authentication and validation was made in version -07 of the >> draft >>>>> >>>>> > already. >>>>> >>>>> > > >> >>>>> >>>>> > > >> Regarding your comment below, it is not clear which use case >> YOU >>>>> >>>>> > > >> NOW are considering. >>>>> >>>>> > > >> >>>>> >>>>> > > >> Further, DISCOVERY and USAGE are not the same in this >> discussion. >>>>> >>>>> > > >> You mix that, especially regarding the anycast method. No one is >>>>> >>>>> > > >> suggesting that the TURN server is USED when addressed by >>>> anycast. >>>>> >>>>> > > >> There is only ONE packet addressed by anycast and sent to the >>>>> >>>>> > > >> STUN/TURN server and that is for DISCOVERING it. >>>>> >>>>> > > >> >>>>> >>>>> > > >> See further inline below. >>>>> >>>>> > > >> >>>>> >>>>> > > >> Thanks, >>>>> >>>>> > > >> Karl >>>>> >>>>> > > >> >>>>> >>>>> > > >> -----Ursprungligt meddelande----- >>>>> >>>>> > > >> Från: Brandon Williams [mailto:brandon.williams@akamai.com] >>>>> >>>>> > > >> Skickat: den 11 november 2016 19:08 >>>>> >>>>> > > >> Till: Karl Stahl; 'Prashanth Patil (praspati)'; tram@ietf.org >>>> >>>>> >>>>> > > >> Kopia: tram-chairs@ietf.org ; 'Dan >>>> Wing'; >>>>> 'Spencer Dawkins at IETF'; >>>>> >>>>> > > >> 'Tirumaleswar Reddy (tireddy)' >>>>> >>>>> > > >> Ämne: Re: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> > > >> >>>>> >>>>> > > >> (1) I agree with Karl that the MUST for (D)TLS or STUN auth >> should >>>>> >>>>> > > >> revert to a SHOULD or a RECOMMENDED, given that network >>>> perimeter >>>>> >>>>> > > >> control is called out with MUST (note that there are a few "must" >>>>> >>>>> > > >> to "MUST" edits required in that text). Although I would disagree >>>>> >>>>> > > >> with an enterprise network admin who chooses not to do one of >>>> those >>>>> >>>>> > > >> two things (see my comments about (3)/(4) below), I think there's >>>>> >>>>> > > >> room for difference of opinion there, so MUST is unlikely to be >>>>> >>>>> > > >> complied >>>>> >>>>> > with >>>>> >>>>> > > anyway. >>>>> >>>>> > > >> >>>>> >>>>> > > >> [Karl] Good that you agree the MUST (thrown-in during discuss) >>>> must >>>>> >>>>> > > >> go away, but for the use case of "TURN servers *provided by* the >>>>> >>>>> > > >> local network or by the access network." there should not even >> be >>>>> >>>>> > SHOULD >>>>> >>>>> > > or RECOMMEND. >>>>> >>>>> > > >> Your are relating to TURN servers *provided by* (and maintained >>>>> >>>>> > > >> by?) some "trust anchor store [RFC6024] allows a TURN client ..." >>>>> >>>>> > > >> or by "Certification authorities that issue TURN server >>>>> >>>>> > > >> certificates" that *provide TURN servers with their certificates >>>>> >>>>> > > >> in* that you expect to be discovered and where the TURN client >>>> (the >>>>> >>>>> > > >> WebRTC browser) must be equipped to accept those certificates. >>>> That >>>>> >>>>> > > >> is NOT FOR "the TURN servers *provided by* the local network or >>>> by >>>>> >>>>> > > >> the access network" that >>>>> >>>>> > is >>>>> >>>>> > > being discussed here. >>>>> >>>>> > > >> >>>>> >>>>> > > >> >>>>> >>>>> > > >> (2) I disagree with Karl about anycast. A server that properly >>>>> >>>>> > > >> supports anycast [Karl] What is "a server that properly supports >>>>> >>>>> > > >> anycast"? It is certainly NOT A [RFC5766] TURN server that is >>>>> >>>>> > > >> supposed >>>>> >>>>> > to >>>>> >>>>> > > be discovered by this draft. >>>>> >>>>> > > >> Also notice that we are talking about one anycast packet FOR >>>>> >>>>> > > >> DISCOVERY, NOT USAGE (relaying traffic) with anycast adressing. >>>>> >>>>> > > >> (I asked that the confusing "supports anycast" statement is >> removed >>>>> >>>>> > > >> from the beginning of the draft.) >>>>> >>>>> > > >> >>>>> >>>>> > > >> will indeed treat incoming requests differently depending upon >>>>> >>>>> > > >> whether they arrive on the anycast address or the unicast >> address. >>>>> >>>>> > > >> I strongly disagree with the idea of using Try Alternate on the >>>>> >>>>> > > >> binding request, because you want redirect for the long-lived >>>>> >>>>> > > >> allocate request, not for the query-response binding request. >>>>> >>>>> > > >> [Karl] With a TURN server provided by the local or access >> network, >>>>> >>>>> > > >> STUN is NOT USED for setting up any binding and no subsequent >>>>> >>>>> > > >> traffic. The STUN binding response 300 Try Alternate (statically >>>>> >>>>> > > >> configured) in my proposed text, is only an indication used at >>>>> >>>>> > > >> DISCOVERY, that a network provided TURN server is there and >>>> should >>>>> >>>>> > > >> be used at its unicast address revealed in the >>>>> >>>>> > > >> 300 response. The long-lived TURN allocate IS USED for the >> traffic. >>>>> >>>>> > > >> The STUN server portion of the TURN server paralleling the >> default >>>>> >>>>> > > >> gateway router is never used for any binding. >>>>> >>>>> > > >> >>>>> >>>>> > > >> Part of my reason for this is that good (by my definition) TURN >>>>> >>>>> > > >> server distribution is broader than is reasonable for anycast >>>>> >>>>> > > >> address management, and determining a redirect address to be >>>>> >>>>> > > >> delivered increases the cost of handling the STUN bind request. It >>>>> >>>>> > > >> is desirable for that cost to scale with the TURN allocate load, >>>>> >>>>> > > >> not the STUN bind >>>>> >>>>> > load. >>>>> >>>>> > > >> [Karl] You just add a static route in you access router for the >>>>> >>>>> > > >> anycast address to point to your TURN server! >>>>> >>>>> > > >> >>>>> >>>>> > > >> I don't oppose supporting both in the spec if someone wants to >>>>> >>>>> > > >> propose language for that, but it would add burden to client >>>>> >>>>> > > >> implementations because they would be required to support >> both >>>> even >>>>> >>>>> > > >> though the server could use either. On the other hand, the >>>>> >>>>> > > >> currently defined method shouldn't require changes to clients at >> all. >>>>> >>>>> > > >> [Karl] ?! But it does not find [RFC5766] TURN servers... >>>>> >>>>> > > >> >>>>> >>>>> > > >> (3)/(4) I disagree with Karl's assessment of the deployment >>>>> >>>>> > > >> considerations, especially the conclusion that anycast is the >>>>> >>>>> > > >> better path for local/access networks. >>>>> >>>>> > > >> [Karl] If you mean traffic paths (like I did), "paths" are for >>>>> >>>>> > > >> USAGE and no one is suggesting anycast for that. >>>>> >>>>> > > >> Independent of how discovered (by anycast or any of the DNS >>>>> >>>>> > > >> methods) ALL USAGE through paths is by unicast addressing. >>>>> >>>>> > > >> >>>>> >>>>> > > >> It might be better for the server >>>>> >>>>> > > >> implementer, but not for the the client, because I think it's >>>>> >>>>> > > >> particularly difficult for a client to determine whether it's >>>>> >>>>> > > >> network >>>>> >>>>> > is >>>>> >>>>> > > "sealed". >>>>> >>>>> > > >> [Karl] No, not at all. Blocking STUN packets at the default gateway >>>>> >>>>> > > >> is the way to "network wise" seal the local network (and only >> allow >>>>> >>>>> > > >> the parallel TURN path)! That is easily detected by a TURN client. >>>>> >>>>> > > >> >>>>> >>>>> > > >> The client has to trust that the network is properly sealed, since >>>>> >>>>> > > >> it's difficult (at >>>>> >>>>> > > >> least) for the client to verify. Also, I think that the DNS and >>>>> >>>>> > > >> DHCP methods are likely to be easier for enterprise and access >>>>> >>>>> > > >> networks to implement, since they will have the necessary >> systems >>>>> >>>>> > > >> in place already. Even a home network gateway appliance will >>>>> >>>>> > > >> already have both integrate DNS and integrate DHCP, so I suspect >>>>> >>>>> > > >> that a small local network will have an easier time with these than >>>> you >>>>> >>>>> > suggest as well. >>>>> >>>>> > > >> >>>>> >>>>> > > >> [Karl] So you agree that for a TURN server in a local network, its >>>>> >>>>> > > >> address shall only be deployed in local DNS - I think the draft >>>>> >>>>> > > >> should >>>>> >>>>> > say >>>>> >>>>> > > that also. >>>>> >>>>> > > >> >>>>> >>>>> > > >> Despite the fact that I disagree with the assessment, I don't run a >>>>> >>>>> > > >> local network or an access network and would not expect to >> deploy >>>>> >>>>> > > >> relays meant to function in that mode, so I will not have strong >>>>> >>>>> > > >> objections to including that language if there is broad support >>>>> >>>>> > > >> within >>>>> >>>>> > the >>>>> >>>>> > > WG for Karl's framing. >>>>> >>>>> > > >> >>>>> >>>>> > > >> --Brandon >>>>> >>>>> > > >> >>>>> >>>>> > > >> On 11/10/2016 05:48 PM, Karl Stahl wrote: >>>>> >>>>> > > >>> (1) The downgrade of the MUST level requirement for >>>> authentication >>>>> >>>>> > > >>> defined >>>>> >>>>> > > >> in [RFC5766] was "rightly" (to use the term from below) >> introduced >>>>> >>>>> > > >> and made OPTIONAL for TURN servers provided by the local or >>>> access >>>>> >>>>> > > network. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> HOWEVER, Prashanth's: "I think we can mandate (D)TLS *if* >> STUN >>>>> >>>>> > > >> authentication or third-party authorization is not used." thrown- >> in >>>>> >>>>> > > >> during the DISCUSS, must be deleted from the -10 version of this >>>>> >>>>> > > >> discovery since it BLOCKs the usage and deployment of network >>>>> >>>>> > > >> provided TURN servers, which was the main purpose of this >>>> discovery >>>>> >>>>> > > >> draft. (Also, Authors's did not follow Ben Campbell's: "I saw a >>>>> >>>>> > > >> comment on my DISCUSS email thread from Karl Stahl, stating >> that >>>>> >>>>> > > >> DTLS could not be mandated. Has that input been >>>>> >>>>> > > >> considered?") >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The thrown-in addition in version -10 (not shown in full below) >>>>> >>>>> > > >>> highlights >>>>> >>>>> > > >> this: >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> A TURN client MUST use (D)TLS ... in the absence of STUN >> long- >>>> term >>>>> >>>>> > > >>> credential mechanism [RFC5389] or STUN Extension for Third- >>>> Party >>>>> >>>>> > > >>> Authorization [RFC7635]. ... >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> o For certificate-based authentication, a pre-populated trust >>>>> >>>>> > anchor >>>>> >>>>> > > >>> store [RFC6024] allows a TURN client ... >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> o Certification authorities that issue TURN server certificates >>>>> >>>>> > > >>> ... >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> o For TURN servers that don't have a certificate trust chain >>>>> >>>>> > (e.g., >>>>> >>>>> > > >>> because they are on a home network or a corporate >> network), >>>> a >>>>> >>>>> > > >>> configured list of TURN servers can contain the Subject >>>>> >>>>> > > >>> Public >>>>> >>>>> > Key >>>>> >>>>> > > >>> Info (SPKI) fingerprint of the TURN servers... etc. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> What does the Authors have in mind - a regulated network of >>>> TURN >>>>> >>>>> > > >>> servers, >>>>> >>>>> > > >> when the purpose was for everyone to be able to use good >> WebRTC >>>>> >>>>> > > >> everywhere you can surf, including behind your home Best Buy >>>> bought >>>>> >>>>> > > >> WiFi router (which we can hope, some day, will include a default >>>>> >>>>> > > >> configured, ready to use, TURN server path paralleling its default >>>>> >>>>> > > >> gateway path (i.e. the NAT/firewall/access router/default >> gateway)? >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> This specification shall (at least) specify discovery of network >>>>> >>>>> > > >>> provided >>>>> >>>>> > > >> TURN servers to allow real-time communication, in situations >> where >>>>> >>>>> > > >> it otherwise is not possible or bad: >>>>> >>>>> > > >>> - to meet the auto configuration of RFC 7478 (Web Real-Time >>>>> >>>>> > > >>> Communication >>>>> >>>>> > > >> Use Cases and Requirements) 2.3.5.1. >>>>> >>>>> > > >>> - providing a discovery method suitable for >>>>> >>>>> > > >>> draft-ietf-rtcweb-return-01 >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The above has already been discussed many times in this WG: >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg01319.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg01319.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=Osl0dTxisM85YhdJ__0idlm >>>> EuHZDO94zeETh0KuWOUg&e=> >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg01742.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg01742.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ovkKpAFtadl_tW- >>>> sGE9lKBidFiJ9DwAxrKyC-KgdC6w&e=> >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg02191.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg02191.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=6qTmzqnEW5fWRDNt6JT9R >>>> WtnkKecOUYG8OyPtBVY9Ek&e=> >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Just as credentials for authentication cannot be expected to be >>>>> >>>>> > > >>> available >>>>> >>>>> > > >> for this general usage, nor can we impose that certificates should >>>>> >>>>> > > >> be >>>>> >>>>> > used. >>>>> >>>>> > > >> For the network provided TURN server, we should not/must not >>>> expect >>>>> >>>>> > > >> some higher level of trust or security when the real-time media >>>>> >>>>> > > >> flows through the TURN server than when it goes through the >>>> default >>>>> >>>>> > gateway! >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The use of (D)TLS has been discussed intensively in the -04 >>>>> >>>>> > > >>> version of the >>>>> >>>>> > > >> draft >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg01821.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg01821.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=JJm49cE6V10iisqHp3jNeSn >>>> qE7wHzDtSrIhsQU8Sx3A&e=> >>>>> >>>>> > > >>> and was NOT mandated for the TURN server provided by the >> local >>>> or >>>>> >>>>> > > >>> access >>>>> >>>>> > > >> network. It cannot be thrown-in now again! >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Any arguments against have been of type: We need security in >>>>> >>>>> > > >>> itself >>>>> >>>>> > > >>> - >>>>> >>>>> > > >> protect this and that - do every authentication/validation in the >>>>> >>>>> > > >> book (whether needed or not) etc., which only leads to responses >>>>> >>>>> > > >> like I had to bring up during the discuss: >>>>> >>>>> > > >>> [Karl] Do you think we need to discover TURN servers for the >>>>> >>>>> > > >>> pleasure of >>>>> >>>>> > > >> doing "security that deal directly with TURN messages" in itself, >>>>> >>>>> > > >> and not for what they are supposed to do (relay "application >> data") >>>>> >>>>> > > >> and do you also think that is why a network provider will deploy >>>>> >>>>> > > >> such TURN >>>>> >>>>> > > server for his users? >>>>> >>>>> > > >> Please do not stop the purpose (by such phrases)! >>>>> >>>>> > > >>> (Also, encryption and protection against man-in-the-middle >>>>> >>>>> > > >>> attacks, for >>>>> >>>>> > > >> the payload (real-time traffic) are for the endpoints to do - like >>>>> >>>>> > > >> with WebRTC, mandating DTLS-SRTP media - it should not be >>>> expected >>>>> >>>>> > > >> to be done by a TURN server, especially when not always used.) >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> (2) Also as pointed out during the DISCUSS >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg02144.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg02144.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=hti885FH0I_- >>>> 3z7dolfYCAia4FX3i12sUCWsGesND6s&e=> >>>>> >>>>> > > >>> and two times earlier (during WG discussions, but not addressed >>>> or >>>>> >>>>> > > >> responded to by the Authors): >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg02081.htm >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg02081.htm&d=DgMFaQ&c=96ZbZZcaMF4w >>>> 0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=f- >>>> GzOTsPm86NUqzFXyjAgPz6x-BiA-buLhIFPt9QfEg&e=> l >>>>> >>>>> > > >>> and https://www.ietf.org/mail- >>>>> >>> 3A__www.ietf.org_mail- >>>> 2D&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >> nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=Sa3jwtA2TFtNAIAnfTem32v >>>> W9jIfcBlsUwxIBelblDs&e=> >>>>> >>>>> > > archive/web/tram/current/msg01976.html >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The anycast method does not work with RFC5766 TURN servers! >>>> That >>>>> >>>>> > > >>> has not >>>>> >>>>> > > >> been addressed at all. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> A TURN server doesn't react one way (answering 300 Try >>>> Alternate) >>>>> >>>>> > > >>> when >>>>> >>>>> > > >> addressed by an anycast address and another way (accepting the >>>>> >>>>> > > >> Allocate >>>>> >>>>> > > >> request) when addressed by its unicast address, does it? >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Author's (during the DISCUSS): "We intend to add the following >> to >>>>> >>>>> > > >>> explain >>>>> >>>>> > > >> server behavior a little better: >>>>> >>>>> > > >>> "A TURN anycast server performs checks 1 to 7 discussed in >>>> Section >>>>> >>>>> > > >>> 6.2 of >>>>> >>>>> > > >> RFC5766. If all checks pass, the TURN anycast server MUST >> respond >>>>> >>>>> > > >> with a >>>>> >>>>> > > >> 300 (Try Alternate) error as described in [RFC5766];" >>>>> >>>>> > > >>> does not help and I responded: [Karl] That must be an update of >>>>> >>>>> > RFC5766. >>>>> >>>>> > > >> Or does "TURN anycast server" imply that there ALSO is a "TURN >>>>> >>>>> > > >> unicast server" at the same interface accepting the Allocate >>>> request? >>>>> >>>>> > > >> What are these things? >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> I have proposed this modification of the anycast method, which >> is >>>>> >>>>> > > >>> better >>>>> >>>>> > > >> (in several aspects) and doesn't need to update RFC5766: >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> "When a client requires TURN services, it sends a STUN binding >>>>> >>>>> > > >>> request to >>>>> >>>>> > > >> the assigned anycast address. The STUN server >>>>> >>>>> > > >>> responds with a 300 (Try Alternate) error as described in >>>>> >>>>> > > >>> [RFC5389]; The >>>>> >>>>> > > >> response contains a unicast address in the ALTERNATE-SERVER >>>>> >>>>> > > >> attribute, which the client compares with the source address of >> the >>>>> >>>>> > > >> response and if the >>>>> >>>>> > > >>> addresses are the same, it is an indication to use the TURN >> server >>>>> >>>>> > > >>> at that >>>>> >>>>> > > >> address. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> For subsequent communication with the TURN server, the client >>>> uses >>>>> >>>>> > > >>> that >>>>> >>>>> > > >> responding server's unicast address." >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The sentence in the -10 draft under "3 Discovery Procedure": >> "not >>>>> >>>>> > > >>> all TURN >>>>> >>>>> > > >> servers may support anycast" can then be removed. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> (3) I cannot see this -10 draft telling which discovery method >>>>> >>>>> > > >>> that is fit >>>>> >>>>> > > >> for the TURN servers provided by the local or access network (the >>>>> >>>>> > > >> network provided TURN server). However, there are confusing >>>> client >>>>> >>>>> > > >> behavior recommendations, like the sentences in the draft under >> "3 >>>>> >>>>> > > >> Discovery >>>>> >>>>> > > >> Procedure": "For best results, a client SHOULD implement all >>>>> >>>>> > > >> discovery mechanisms described above." and under "1 >>>> Introduction": >>>>> >>>>> > > >> "three discovery mechanisms, so as to maximize opportunity for >>>>> >>>>> > > >> discovery, based on the network in which the TURN client finds >>>> itself." >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> A network provided TURN server is only meant for the users on >> the >>>>> >>>>> > > >>> specific >>>>> >>>>> > > >> network - others should not be able to use such TURN server, and >> it >>>>> >>>>> > > >> would then be preferred that it is only advertized and discovered >>>>> >>>>> > > >> at that local network - which is badly described by "maximize >>>>> >>>>> > > >> opportunity >>>>> >>>>> > for >>>>> >>>>> > > discovery". >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> If a DNS method would be used to discover the network >> provided >>>>> >>>>> > > >>> TURN >>>>> >>>>> > > >> server, its private address should only be configured in private >>>>> >>>>> > > >> (local) DNS (we don't like to put our private IP addresses in >>>>> >>>>> > > >> public DNS), but I see no such recommendation. Further, the DNS >>>>> >>>>> > > >> methods are complex and expensive to deploy and one of them >>>> depends >>>>> >>>>> > > >> on DHCP that is not available on all access networks. That makes >> (a >>>>> >>>>> > > >> working) anycast discovery method the clear choice for a TURN >>>>> >>>>> > > >> server provided by >>>>> >>>>> > > the local or access network. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Network provided TURN servers paralleling a >> NAT/firewall/access >>>>> >>>>> > > >> router/default gateway is a new concept that came up during >>>> WebRTC >>>>> >>>>> > > >> standardization work to deal with traversal and quality problems >> of >>>>> >>>>> > > >> real-time traffic. However, this draft give little or no guidance >>>>> >>>>> > > >> for deployment and I therefore suggest that a separate section is >>>>> >>>>> > > >> added, that spells out the deployment considerations for TURN >>>>> >>>>> > > >> servers provided by the local or access network (which now is >>>>> >>>>> > > >> missing, but I propose the following >>>>> >>>>> > > >> text): >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> (4) "Deployment Considerations for TURN Servers Provided by >> the >>>>> >>>>> > > >>> Local or >>>>> >>>>> > > >> Access Network" >>>>> >>>>> > > >>> (Suggested text for an additional section) >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The concept of paralleling a NAT/firewall/access-router/default >>>>> >>>>> > > >>> gateway at >>>>> >>>>> > > >> the local or access network with a TURN server, to deal with >>>>> >>>>> > > >> traversal and quality problems of real-time traffic, is new and >>>>> >>>>> > > >> came up during the WebRTC standardization work. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Such network provided TURN servers, only accessible by the >> users >>>>> >>>>> > > >>> on the >>>>> >>>>> > > >> local or access network, must be automatically discovered and >> used, >>>>> >>>>> > > >> without specific configuration or having credentials for >>>>> >>>>> > > >> authentication or certificates for validation, to be useful for e.g. >>>>> >>>>> > > >> a WebRTC browsers to allow quality media traffic "everywhere >> you >>>>> >>>>> > > >> can >>>>> >>>>> > > surf". >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Just as for the Internet access itself, the TURN server is offered >>>>> >>>>> > > >>> by the >>>>> >>>>> > > >> network provider and there is no change in the trust or security >>>>> >>>>> > > >> level (which should not be expected) when real-time traffic flows >>>>> >>>>> > > >> through the TURN server path, than through the default gateway >>>> path. >>>>> >>>>> > > >> (The purpose of the network provided turn server is to allow >>>>> >>>>> > > >> traversal of real-time media traffic in environments with >>>>> >>>>> > > >> restrictive NAT/firewalls closed for UDP traffic and/or to allow >>>>> >>>>> > > >> better quality through the often data congested router at the >>>>> >>>>> > > >> default >>>>> >>>>> > > >> gateway.) >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The discovery of the network provided TURN server should meet >>>> the >>>>> >>>>> > > >>> auto >>>>> >>>>> > > >> configuration of RFC 7478 (Web Real-Time Communication Use >>>> Cases >>>>> >>>>> > > >> and >>>>> >>>>> > > >> Requirements) 2.3.5.1. and draft-ietf-rtcweb-return-01 is defining >>>>> >>>>> > > >> the TURN client behavior for WebRTC browsers. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> For quality reasons, a sealed network configuration - i.e. the >>>>> >>>>> > > >>> media has >>>>> >>>>> > > >> to go through the TURN server, not through the default gateway >> (by >>>>> >>>>> > > >> using STUN instead of TURN) - is the typical intention when a >> TURN >>>>> >>>>> > > >> server is deployed in the local or access network. The sealed >>>>> >>>>> > > >> configuration can be enforced and signaled to the TURN client by >>>>> >>>>> > > >> the network provider blocking STUN packets at the default >> gateway. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> A network configuration enforcing sealed behavior, has the >> good >>>>> >>>>> > > >>> effect of >>>>> >>>>> > > >> allowing the TURN client (e.g. a WebRTC browser) in itself to have >>>>> >>>>> > > >> a >>>>> >>>>> > > >> non- sealed default configuration. (ietf-rtcweb-return-01 explains >>>>> >>>>> > > >> that a sealed default configuration in the browser itself, would >>>>> >>>>> > > >> result in that media between local clients would have to pass the >>>>> >>>>> > > >> TURN server, which is not >>>>> >>>>> > > >> desirable.) >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The above assumes that the TURN client using a TURN server in >>>> the >>>>> >>>>> > > >>> local or >>>>> >>>>> > > >> access network shall use unencrypted STUN/TURN (over UDP for >>>> best >>>>> >>>>> > > >> quality) so the STUN cookie can be detected and stopped in the >>>>> >>>>> > > >> default >>>>> >>>>> > > gateway. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> A TURN server included in the router at the default gateway, >> that >>>>> >>>>> > > >> intercepts and responds to an allocate request, should be >> treated >>>> as >>>>> >>>>> > a >>>>> >>>>> > > >> discovered network provided sealed TURN server configuration >> by a >>>>> >>>>> > > >> TURN client (without having to review any 300 Try Alternate >>>>> >>>>> > > >> response as outlined in anycast method description) allowing for >>>>> >>>>> > > >> tolerant and >>>>> >>>>> > secure >>>>> >>>>> > > deployment. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> A web application that wants to try the default gateway path >>>>> >>>>> > > >>> instead of >>>>> >>>>> > > >> the TURN server path (in spite of a sealed network configuration) >>>>> >>>>> > > >> can suggest encrypted (D)TLS STUN and TURN candidates that will >>>> not >>>>> >>>>> > > >> be blocked by STUN cookie recognition at the default gateway. It >> is >>>>> >>>>> > > >> then up to application's TURN client whether to try the default >>>>> >>>>> > > >> gateway >>>>> >>>>> > path. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> A further advantage of detecting a sealed network >> configuration, >>>>> >>>>> > > >>> is that a >>>>> >>>>> > > >> TURN client can select to *only in a sealed network >> configuration* >>>>> >>>>> > > >> look for a TURN server by the anycast method for discovery, thus >>>>> >>>>> > > >> eliminating the leakage risk mentioned under 9.3. Further, there >>>>> >>>>> > > >> will be no risk that a far away TURN server will be discovered and >>>>> >>>>> > > >> used and there will be no need for the TTL limitation suggested >>>> under 9.3. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The anycast discovery method, combined with the above >>>>> >>>>> > > >>> recommendations, >>>>> >>>>> > > >> allow for an easy and robust deployment of network provided >> TURN >>>>> >>>>> > > >> servers, fitting all types of local and access networks. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The DNS based methods of this specification are more complex >>>> and >>>>> >>>>> > > >>> expensive >>>>> >>>>> > > >> to deploy and one of them depends on DHCP that is not available >> on >>>>> >>>>> > > >> all access networks. If any of the DNS based methods is used to >>>>> >>>>> > > >> advertize and discover a TURN in the local or access network, its >>>>> >>>>> > > >> private addresses should only be configured in private (local) DNS >>>>> >>>>> > > >> and not be published publicly, which adds further to the >> complexity >>>>> >>>>> > > >> and >>>>> >>>>> > > cost of deployment. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> (5) Most (all?) of what is considered and summed up under (4) >>>> (the >>>>> >>>>> > > >> suggested additional text), has been brought forward on the >> TRAM >>>> WG >>>>> >>>>> > > >> list before, but not brought into the current -10 draft, see: >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg00132.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg00132.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=I4tX_vQd- >>>> ANV8cBjPGlHlFIVEUZ-3lYmVI6GbGtjxvc&e=> >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg00138.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg00138.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=JJWVyPhhTbhTpkcOmQRdB >>>> 49hx2gOMNKOL7qMT3bq630&e=> >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg01721.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg01721.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=QnbJOsYAvuDWr9YyEGsxU >>>> Ov8S1ha8ow9Do5VDOq6Gs0&e=> >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg01745.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg01745.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=duED3YRw_gPiLwPnjC7zgW >>>> 0KbQXqQBjN-BJC4bzmt44&e=> >>>>> >>>>> > > >>> The links given under (1) and (2) above >>>>> >>>>> > > >>> https://www.ietf.org/mail- >>>> archive/web/tram/current/msg02155.html >>>>> >>> 3A__www.ietf.org_mail- >>>> >> 2Darchive_web_tram_current_msg02155.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=5fxjtRf2Ndt9R- >>>> RDwWpgG0d7mctpUT2lUZrKGaThZ40&e=> >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> /Karl >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> -----Ursprungligt meddelande----- >>>>> >>>>> > > >>> Från: tram [mailto:tram-bounces@ietf.org] För Prashanth Patil >>>>> >>>>> > > >>> (praspati) >>>>> >>>>> > > >>> Skickat: den 2 november 2016 22:18 >>>>> >>>>> > > >>> Till: tram@ietf.org >>>>> >>>>> > > >>> Kopia: tram-chairs@ietf.org ; Dan >>>> Wing; >>>>> Spencer Dawkins at IETF; >>>>> >>>>> > > >> Tirumaleswar Reddy (tireddy) >>>>> >>>>> > > >>> Ämne: [tram] draft-ietf-tram-turn-server-discovery >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> The TURN discovery draft originally suggested that STUN >>>>> >>>>> > > >>> authentication be >>>>> >>>>> > > >> relaxed and made OPTIONAL for TURN servers provided by the >> local >>>> or >>>>> >>>>> > > >> access network. The intention was to allow new/guest users (who >>>> do >>>>> >>>>> > > >> not necessarily possess long term credentials for STUN >>>>> >>>>> > > >> authentication) in the network to discover and use TURN services >>>>> >>>>> > offered >>>>> >>>>> > > by the network. >>>>> >>>>> > > >>> Ben Campbell raised an objection during IESG evaluation that we >>>>> >>>>> > > >>> clearly >>>>> >>>>> > > >> indicate that this is a downgrade of a MUST level requirement >>>>> >>>>> > > >> defined in [RFC5766] and explain its consequences. It was also >>>>> >>>>> > > >> rightly suggested that we mandate the use of (D)TLS in the >> absence >>>>> >>>>> > > >> of STUN authentication for protection against a variety of attacks; >>>>> >>>>> > > >> the draft now makes it a MUST that TURN servers use (D)TLS in >> the >>>>> >>>>> > > >> absence of STUN >>>>> >>>>> > > authentication. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> To put it simply, the draft mandates that TURN servers in a local >>>>> >>>>> > > >>> or >>>>> >>>>> > > >> access network do at least one of (D)TLS or STUN authentication. >> If >>>>> >>>>> > > >> you have an opinion about this change, please let the working >> group >>>>> >>>>> > > >> know on the mailing list before the end of IETF 97. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> See below for snippets of what changed. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Excerpt from Security Considerations of >>>>> >>>>> > > >> draft-ietf-tram-turn-server-discovery-09: >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> "Use of Session Traversal Utilities for NAT (STUN) [RFC5389] >>>>> >>>>> > > >>> authentication is OPTIONAL for TURN servers provided by the >>>> local >>>>> >>>>> > > >>> network or by the access network. A network provided TURN >>>>> >>>>> > > >>> server >>>>> >>>>> > > MAY >>>>> >>>>> > > >>> be configured to accept Allocation requests without STUN >>>>> >>>>> > > >>> authentication, and a TURN client MAY be configured to >> accept >>>>> >>>>> > > >>> Allocation success responses without STUN authentication >> from >>>> a >>>>> >>>>> > > >>> network provided TURN server. In order to protect against >> man- >>>> in- >>>>> >>>>> > > >>> the-middle attacks when accepting a TURN allocation response >>>>> >>>>> > without >>>>> >>>>> > > >>> STUN authentication, it is RECOMMENDED that the TURN >> client >>>> use >>>>> >>>>> > one >>>>> >>>>> > > >>> of the following techniques with (D)TLS to validate the TURN >>>>> >>>>> > server" >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Updated text in Security Considerations of >>>>> >>>>> > > >> draft-ietf-tram-turn-server-discovery-10: >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> "Use of Session Traversal Utilities for NAT (STUN) [RFC5389] >>>>> >>>>> > > >>> authentication is OPTIONAL for TURN servers provided by the >>>> local >>>>> >>>>> > > >>> network or by the access network. A network provided TURN >>>>> >>>>> > > >>> server >>>>> >>>>> > > MAY >>>>> >>>>> > > >>> be configured to accept Allocation requests without STUN >>>>> >>>>> > > >>> authentication, and a TURN client MAY be configured to >> accept >>>>> >>>>> > > >>> Allocation success responses without STUN authentication >> from >>>> a >>>>> >>>>> > > >>> network provided TURN server. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Making STUN authentication OPTIONAL is a downgrade of a >>>> MUST >>>>> >>>>> > level >>>>> >>>>> > > >>> requirement defined in [RFC5766]. The downgrade allows >> TURN >>>>> >>>>> > servers >>>>> >>>>> > > >>> provided by local or access network to accept Allocation >> requests >>>>> >>>>> > > >>> from new and/or guest users in the network who do not >>>> necessarily >>>>> >>>>> > > >>> possess long term credentials for STUN authentication. The >>>>> >>>>> > > >>> intention, in such deployments, being to provide TURN >> services >>>>> >>>>> > > >>> to >>>>> >>>>> > all >>>>> >>>>> > > >>> users in the local or access network. However, this opens up a >>>>> >>>>> > TURN >>>>> >>>>> > > >>> server to a variety of attacks described in Section 17 of >>>>> >>>>> > [RFC5766]. >>>>> >>>>> > > >>> A TURN server in such cases must be configured to only >> process >>>> STUN >>>>> >>>>> > > >>> requests from the trusted local network or subscribers of the >>>>> >>>>> > access >>>>> >>>>> > > >>> network. Operational measures must be taken in order >> protect >>>> the >>>>> >>>>> > > >>> TURN server; some of these measures include, but not limited >> to, >>>>> >>>>> > > >>> access control by means of access-lists, firewalls, subscriber >>>>> >>>>> > quota >>>>> >>>>> > > >>> limits, ingress filtering etc. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> A TURN client MUST use (D)TLS in the absence of STUN long- >>>> term >>>>> >>>>> > > >>> credential mechanism [RFC5389] or STUN Extension for Third- >>>> Party >>>>> >>>>> > > >>> Authorization [RFC7635]." >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Please refer >>>>> >>>>> > > >> https://tools.ietf.org/html/draft-ietf-tram-turn-server-discovery- >> 1 >>>>> >>> 3A__tools.ietf.org_html_draft-2Dietf-2Dtram-2Dturn-2Dserver- >> 2Ddiscovery- >>>> 2D1&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=--B- >>>> kAp9De1f6HhRKLEtD1bVS33BpG2S5MYzWBQ_YDI&e=> >>>>> >>>>> > > >> 0# >>>>> >>>>> > > >> section >>>>> >>>>> > > >> -9 for more details. >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> Thanks, >>>>> >>>>> > > >>> Authors >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> _______________________________________________ >>>>> >>>>> > > >>> tram mailing list >>>>> >>>>> > > >>> tram@ietf.org >>>>> >>>>> > > >>> https://www.ietf.org/mailman/listinfo/tram >>>>> >>> >> 3A__www.ietf.org_mailman_listinfo_tram&d=DgMFaQ&c=96ZbZZcaMF4w0F4j >>>> pN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ahRn1ifxnOACrVFgxJ99086 >>>> nBuC6-cz9H7GKY_0EV8s&e=> >>>>> >>>>> > > >>> >>>>> >>>>> > > >>> _______________________________________________ >>>>> >>>>> > > >>> tram mailing list >>>>> >>>>> > > >>> tram@ietf.org >>>>> >>>>> > > >>> https://www.ietf.org/mailman/listinfo/tram >>>>> >>> >> 3A__www.ietf.org_mailman_listinfo_tram&d=DgMFaQ&c=96ZbZZcaMF4w0F4j >>>> pN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ahRn1ifxnOACrVFgxJ99086 >>>> nBuC6-cz9H7GKY_0EV8s&e=> >>>>> >>>>> > > >>> >>>>> >>>>> > > >> >>>>> >>>>> > > >> _______________________________________________ >>>>> >>>>> > > >> tram mailing list >>>>> >>>>> > > >> tram@ietf.org >>>>> >>>>> > > >> https://www.ietf.org/mailman/listinfo/tram >>>>> >>> >> 3A__www.ietf.org_mailman_listinfo_tram&d=DgMFaQ&c=96ZbZZcaMF4w0F4j >>>> pN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ahRn1ifxnOACrVFgxJ99086 >>>> nBuC6-cz9H7GKY_0EV8s&e=> >>>>> >>>>> > > >>>>> >>>>> > > _______________________________________________ >>>>> >>>>> > > tram mailing list >>>>> >>>>> > > tram@ietf.org >>>>> >>>>> > > https://www.ietf.org/mailman/listinfo/tram >>>>> >>> >> 3A__www.ietf.org_mailman_listinfo_tram&d=DgMFaQ&c=96ZbZZcaMF4w0F4j >>>> pN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ahRn1ifxnOACrVFgxJ99086 >>>> nBuC6-cz9H7GKY_0EV8s&e=> >>>>> >>>>> _______________________________________________ >>>>> tram mailing list >>>>> tram@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/tram >>>>> >>> >> 3A__www.ietf.org_mailman_listinfo_tram&d=DgMFaQ&c=96ZbZZcaMF4w0F4j >>>> pN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>> >> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ahRn1ifxnOACrVFgxJ99086 >>>> nBuC6-cz9H7GKY_0EV8s&e=> >>>>> >>>>> >>>>> >>>> >>>> -- >>>> Brandon Williams; Chief Architect >>>> Cloud Networking; Akamai Technologies Inc. >> >> -- >> Brandon Williams; Chief Architect >> Cloud Networking; Akamai Technologies Inc. -- Brandon Williams; Chief Architect Cloud Networking; Akamai Technologies Inc. From nobody Wed Jan 4 05:07:35 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25E25129564; Wed, 4 Jan 2017 05:07:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.801 X-Spam-Level: X-Spam-Status: No, score=-5.801 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-3.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ipgXbe0JPK5; Wed, 4 Jan 2017 05:07:28 -0800 (PST) Received: from prod-mail-xrelay05.akamai.com (prod-mail-xrelay05.akamai.com [23.79.238.179]) by ietfa.amsl.com (Postfix) with ESMTP id 63D4A129450; Wed, 4 Jan 2017 05:07:28 -0800 (PST) Received: from prod-mail-xrelay05.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id B1D0343341B; Wed, 4 Jan 2017 13:07:27 +0000 (GMT) Received: from prod-mail-relay10.akamai.com (prod-mail-relay10.akamai.com [172.27.118.251]) by prod-mail-xrelay05.akamai.com (Postfix) with ESMTP id 8DC5C433415; Wed, 4 Jan 2017 13:07:27 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1483535247; bh=wl9FbQQfN/pGg1m9yKiIJHMwxht46lpm6y5zVLr9j2Y=; l=89808; h=To:References:Cc:From:Date:In-Reply-To:From; b=oTvD2ftGkqKL18Rt6CPjuZTpyH4BA2CXhCOrSVIX0onhXo7AUIWlBzPTLpG1zqSVf 2HRflZNHLIgXbUtDEKaQtZPOhBAbdwFtg0IYG2WlPXlLlJR9lTeKdFrT8xWeatnx9O 85PgjOW7QeHn0lonxwjLp3ZtY4o/BFf057xrINBg= Received: from [172.28.118.39] (bowill.kendall.corp.akamai.com [172.28.118.39]) by prod-mail-relay10.akamai.com (Postfix) with ESMTP id 80D771FC8C; Wed, 4 Jan 2017 13:07:27 +0000 (GMT) To: "Pal Martinsen (palmarti)" , "Tirumaleswar Reddy (tireddy)" References: <021701d2436e$4cee87d0$e6cb9770$@stahl@ingate.com> <03166323036f4cf187c0a67b9c183138@XCH-RCD-017.cisco.com> <034501d244e7$ad9ac060$08d04120$@stahl@ingate.com> <061301d248ea$12c01110$38403330$@stahl@ingate.com> <3cf392b265354926a46f8e70109df236@XCH-RCD-017.cisco.com> <065101d24958$64f42fc0$2edc8f40$@stahl@ingate.com> <7f4a0d29c1b844539a5d2b38ee699c38@XCH-RCD-017.cisco.com> <00a901d24c77$6a9b7d80$3fd27880$@stahl@ingate.com> <96701F1A-BE53-4A91-B0 FA-2BBAF7051651@cisco. com> <0726040555ad4275a2486f0aa8f9174d@XCH-RCD-017.cisco.com> <01d101d24f19$04a7fae0$0df7f0a0$@stahl@ingate.com> <5f464f75-5d00-a0b8-83cc-07e1b0f2ba25@akamai.com> <347f9a2f4d5e4970a17288e8ca33b882@XCH-RCD-017.cisco.com> <997ccf57-0634-c43e-22e2-a93f0ab75f5b@akamai.com> <03b17932e8824b5a9fd4a5d7c6baedc3@XCH-RCD-017.cisco.com> <415E9AE4-9CD3-4009-B267-5FB3BC8A339E@cisco.com> From: Brandon Williams Message-ID: <9c4fec92-3c6c-d0a8-0416-c9e49e857c45@akamai.com> Date: Wed, 4 Jan 2017 08:07:27 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: <415E9AE4-9CD3-4009-B267-5FB3BC8A339E@cisco.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: "Prashanth Patil \(praspati\)" , "tram-chairs@ietf.org" , "tram@ietf.org" , "Dan Wing \(dan@danwing.org\)" , Spencer Dawkins at IETF , Karl Stahl Subject: Re: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Jan 2017 13:07:33 -0000 On 01/02/2017 02:14 PM, Pal Martinsen (palmarti) wrote: > Can the client use (D)TLS only during discovery and auth phases? +1 (D)TLS would need to go beyond just discovery and auth, covering all control messages. --Brandon > >> On 2 Jan 2017, at 16:14, Tirumaleswar Reddy (tireddy) wrote: >> >> Hi Brandon, >> >> Please see inline >> >>> -----Original Message----- >>> From: Brandon Williams [mailto:brandon.williams@akamai.com] >>> Sent: Wednesday, December 28, 2016 1:14 AM >>> To: Tirumaleswar Reddy (tireddy) ; Karl Stahl >>> ; Pal Martinsen (palmarti) >>> Cc: Prashanth Patil (praspati) ; tram-chairs@ietf.org; >>> 'Dan Wing' ; 'Spencer Dawkins at IETF' >>> ; tram@ietf.org >>> Subject: Re: SV: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf- >>> tram-turn-server-discovery >>> >>> The original I responded to didn't have the tram list CCed. Apologies to >>> those who receive duplicates. >>> >>> -- >>> >>> Hi Tiru, >>> >>> Sorry about the delayed response. >>> >>> I understand that the requirements you propose are to protect the >>> client. My point is that the client might not require such protection in >>> all cases and it should be up to the client to make that determination. >>> For example, if both the client and the server are on my home network, I >>> don't really need the protection that (D)TLS provides. >> >> Yes, these attacks may not happen in a home network. But we cannot expect the roaming client to keep changing the security posture as the device attaches to different networks. An average user may not be even aware of the security risks when (D)TLS is disabled. >> >> What is the downside if (D)TLS is mandated ? > > Can the client use (D)TLS only during discovery and auth phases? > > We do have some hardware that might have problems doing both (D)DTLS and SRTP on the amount of packets they are producing. > > .-. > Pål-Erik > >> >>> The server must >>> support whatever security posture the client requires, but the server >>> should not require the client to protect itself in a particular way. >> >> The TURN server bypasses the Enterprise firewall security and allows traffic from outside to inside. As you already know, TURN permissions mimic the address-restricted filtering mechanism of NAT, and if the client were to choose security posture that does not offer any security to TURN message (because of bad user configuration or a malware client on the endpoint), it just renders the client to become a victim of DDOS attack (an attacker can sends faked permissions to the TURN server to launch attack (DOS or DDOS) on the TURN client and it nullifies the security benefits offered by CreatePermission). >> >> If the TURN server mandates (D)TLS then the above attack is not possible and would protect even a compromised/mis-configured client from DDOS attacks. In short, why would an Enterprise network administrator want to configure TURN server to be used in this mode in which clients can be subjected to DDOS attacks and the TURN server and Enterprise firewall cannot do anything to protect the client. >> >>> >>> This is the foundation for my proposed edits. >> >> I understand, I can add the following new lines: >> >> In order to allow the TURN client to select fallback to (D)TLS as described above, a TURN server that does not require either STUN long term authentication [RFC5389] or STUN Extension for Third Party Authorization [RFC7635] MUST support (D)TLS. Such a TURN server MAY allow fallback to clear text but fallback to clear text is NOT RECOMMENDED >> because it makes the client more susceptible to man-in-the-middle attacks and on-path packet injection. >> >> -Tiru >> >>> >>> --Brandon >>> >>> On 12/13/2016 12:14 AM, Tirumaleswar Reddy (tireddy) wrote: >>>> Hi Brandon, >>>> >>>> Thanks for the feedback. Please see inline >>>> >>>>> -----Original Message----- >>>>> From: Brandon Williams [mailto:brandon.williams@akamai.com] >>>>> Sent: Saturday, December 10, 2016 10:13 PM >>>>> To: Karl Stahl ; Tirumaleswar Reddy (tireddy) >>>>> ; Pal Martinsen (palmarti) >>>>> Cc: Prashanth Patil (praspati) ; tram-chairs@ietf.org; >>>>> 'Dan Wing' ; 'Spencer Dawkins at IETF' >>>>> >>>>> Subject: Re: SV: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf- >>>>> tram-turn-server-discovery >>>>> >>>>> I'm not sure we're quite at consensus yet Karl, but I think we're close. >>>>> >>>>> I agree that the text you quote from the doc covers the client side >>>>> considerations, and that framing it as recommendations rather than >>>>> requirements still makes sense. It's up to the client to decide which >>>>> security elements are required for the application use case, and that >>>>> text was intended to provide guidance without trying to force a security >>>>> posture that is more complicated than the use case requires. >>>> >>>> The requirements are to protect the client from various attacks. >>>> >>>>> >>>>> For the server side, in order to allow the client to fall back to >>>>> (D)TLS, the TURN server MUST support (D)TLS at least for opportunistic >>>>> privacy. This doesn't mean that the server has to require (D)TLS. It can >>>>> still allow fallback to cleartext if the client so chooses. >>>>> >>>>> So, I agree with you on reverting the MUST for the client, as long as we >>>>> continue to strongly recommend (D)TLS as the fallback. If we do that >>>>> though, I think we need to make it clear that a TURN server configured >>>>> to allow sessions without STUN auth MUST support (D)TLS so that the >>>>> client has the option of (D)TLS fallback. >>>>> >>>>> I think we are agreeing to this change. >>>>> >>>>> OLD: >>>>> >>>>> "A TURN client MUST use (D)TLS in the absence of ..." >>>>> >>>>> NEW: >>>>> >>>>> "A TURN client SHOULD use (D)TLS in the absence of ..." >>>>> >>>>> And I am proposing the addition of this paragraph at the end of the >>>>> section 9, just before section 9.1. >>>>> >>>>> "In order to allow the TURN client to select fallback to (D)TLS as >>>>> described above, a TURN server that does not require either STUN long >>>>> term authentication [RFC5389] or STUN Extension for Third Party >>>>> Authorization [RFC7635] MUST support (D)TLS. Such a TURN server MAY >>> also >>>>> allow fallback to clear text." >>>> >>>> [1] I agree with the above text except for the last line in the above >>> paragraph. If the TURN server allows fallback to clear text then the attacker >>> can subject the TURN client to various attacks. For example, attacker sends >>> faked permissions to the TURN server to launch attack (DOS or DDOS) on the >>> TURN client and it nullifies the security benefits offered by CreatePermission. >>> The victim in this mode is the TURN client and not the TURN server, and hence >>> it is more important for the client to use (D)TLS to protect itself from attacks. >>>> >>>> When there is a possibility that in clear text mode the TURN clients can be >>> subjected to various attacks, why would an TURN server administrator want to >>> allow fallback to clear text ? >>>> >>>> [2] And what problems do you see with the following new proposed text ? >>>> "In the absence of STUN long-term credential mechanism [RFC5389] or STUN >>> Extension for Third-Party Authorization [RFC7635], a TURN client MUST use >>> (D)TLS and if (D)TLS authentication to validate the TURN server identity is not >>> possible then the TURN client MUST fallback to encryption-only (D)TLS." >>>> >>>> -Tiru >>>> >>>>> >>>>> --Brandon >>>>> >>>>> On 12/05/2016 11:59 AM, Karl Stahl wrote: >>>>>> All I want to do in the (D)TLS discussion is to delete the sentence “A >>>>>> TURN client MUST use (D)TLS in the absence of STUN long-term credential >>>>>> mechanism [RFC5389] or STUN Extension for Third-Party Authorization >>>>>> [RFC7635].” under 9. Security Considerationsthat was thrown-into >>>>>> version -10 during the discuss. >>>>>> >>>>>> >>>>>> >>>>>> **We leave all the rest regarding (D)TLS as it has been since version -7 >>>>>> of this draft.** >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> Brandon, >>>>>> >>>>>> >>>>>> >>>>>> I see there already are the (general) SHOULD or RECOMMEND that you >>>>>> wanted (I did not suggest to change those – they are there since version >>>>>> -7 I believe): “It is RECOMMENDED that the TURN client use one of the >>>>>> following techniques with (D)TLS to validate the TURN server:” and >>> further… >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> for Tiru, this is already in the draft since -7 and I am not suggesting >>>>>> to change that: >>>>>> >>>>>> >>>>>> >>>>>> “ An auto-discovered TURN server is considered to be only as trusted as >>>>>> >>>>>> the path between the client and the TURN server. In order to safely >>>>>> >>>>>> use auto-discovered TURN servers for sessions with 'strict privacy' >>>>>> >>>>>> requirements, the user needs to be able to define privacy criteria >>>>>> >>>>>> (e.g. a trusted list of servers, networks, or domains) that are >>>>>> >>>>>> considered acceptable for such traffic. Any discovered TURN server >>>>>> >>>>>> outside the criteria is considered untrusted and therefore MUST NOT >>>>>> >>>>>> be used for privacy sensitive communication. >>>>>> >>>>>> >>>>>> >>>>>> In some auto-discovery scenarios, it might not be possible for the >>>>>> >>>>>> TURN client to use (D)TLS authentication to validate the TURN server. >>>>>> >>>>>> However, fall-back to clear text in such cases could leave the TURN >>>>>> >>>>>> client open to on-path injection of spoofed TURN messages. Instead, >>>>>> >>>>>> with an explicit administrator choice, a TURN client SHOULD fall-back >>>>>> >>>>>> to encryption-only (D)TLS when (D)TLS authentication is not >>>>>> >>>>>> available. Another reason to fall-back to encryption-only is for >>>>>> >>>>>> privacy, which is analogous to SMTP opportunistic encryption >>>>>> >>>>>> [RFC7435] where one does not require privacy but one desires privacy >>>>>> >>>>>> when possible. >>>>>> >>>>>> >>>>>> >>>>>> It is suggested that a TURN client attempt (D)TLS with authentication >>>>>> >>>>>> and encryption, falling back to encryption-only if the TURN server >>>>>> >>>>>> cannot be authenticated via (D)TLS. A TURN client could fall back to >>>>>> >>>>>> clear text, with an explicit administrator choice, if it does not >>>>>> >>>>>> support unauthenticated (D)TLS, but fallback to clear text is NOT >>>>>> >>>>>> RECOMMENDED because it makes the client more susceptible to man- >>> in- >>>>>> >>>>>> the-middle attacks and on-path packet injection. >>>>>> >>>>>> ” >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> **Tiru – Below you are pointing at the -10 version changes that WE ARE >>>>>> discussing here.** >>>>>> >>>>>> >>>>>> >>>>>> Praspanth put them on the table again and I brought up that the >>>>>> >>>>>> “A TURN client MUST use (D)TLS in the absence of STUN long-term >>>>>> credential mechanism [RFC5389] or STUN Extension for Third-Party >>>>>> Authorization [RFC7635].” >>>>>> >>>>>> must go away (leave the rest), since it effectively forbids TURN servers >>>>>> provided by the local and access network. >>>>>> >>>>>> >>>>>> >>>>>> Brandon had agreed that MUST should go away, when you jumped in with >>>>> the >>>>>> attacks arguments, when we were discussing whether there should still be >>>>>> a SHOULD or RECOMMEND. – Then you got me (and others?) lost, and…. >>>>>> >>>>>> >>>>>> >>>>>> So catch up from point (1) of my: >>>>>> >>>>>> https://www.ietf.org/mail-archive/web/tram/current/msg02216.html >>>>>> >> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg02216.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=NtRZwrmn2K- >>>>> WUI_QN5k_yHlAN-uzhoQU8bs2yA_RBP8&e=> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> And you may notice that in >>>>>> >>> https://mailarchive.ietf.org/arch/msg/tram/3svO9djFxeZyTtNsgqQf8zCTiVY >>>>>> >>>> >>> 3A__mailarchive.ietf.org_arch_msg_tram_3svO9djFxeZyTtNsgqQf8zCTiVY&d= >>>>> DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=SLjyswdn- >>>>> oZ_aev0pRxD3h6c4aKbEQZ3c_kL9_ccHGM&e=> >>>>>> that you referred to >>>>>> >>>>>> “Making STUN authentication OPTIONAL” >>>>>> >>>>>> is ALREADY COMPENSATED for by “IP address authentication” (the >>>>>> foundation of today’s IP telephony authentication): >>>>>> >>>>>> “A TURN server in such cases must be configured to only process STUN >>>>>> >>>>>> requests from the trusted local network or subscribers of the access >>>>>> >>>>>> network. Operational measures must be taken in order protect the >>>>>> >>>>>> TURN server; some of these measures include, but not limited to, >>>>>> >>>>>> access control by means of access-lists, firewalls, subscriber quota >>>>>> >>>>>> limits, ingress filtering etc.” >>>>>> >>>>>> where ”firewalls” specifically applies to TURN servers that local or >>>>>> access network providers allow only their own users to access. >>>>>> >>>>>> >>>>>> >>>>>> And Author’s: “Please refer >>>>>> https://tools.ietf.org/html/draft-ietf-tram-turn-server-discovery- >>> 10#section- >>>>> 9 >>>>>> >>>> 3A__tools.ietf.org_html_draft-2Dietf-2Dtram-2Dturn-2Dserver- >>> 2Ddiscovery- >>>>> 2D10-23section-2D9&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=b0fJ1ANqhE8C2BrlnGY3iW >>>>> CwVEr2OhYyFlE__oOHtSE&e=>for >>>>>> more details.” >>>>>> >>>>>> already (since version -7 I think) in detail discusses the (D)TLS >>>>>> implications in this context (that you are redoing). >>>>>> >>>>>> >>>>>> >>>>>> Please, again, let us stay with the consensus since version -7 of this >>>>>> draft: No (D)TLS mandate. >>>>>> >>>>>> >>>>>> >>>>>> Thanks, >>>>>> >>>>>> Karl >>>>>> >>>>>> >>>>>> >>>>>> *Från:*Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>>> *Skickat:* den 4 december 2016 08:33 >>>>>> *Till:* Pal Martinsen (palmarti); Karl Stahl; tram mailing list >>>>>> *Kopia:* Brandon Williams; Prashanth Patil (praspati); >>>>>> tram-chairs@ietf.org ; Dan Wing; Spencer >>>>>> Dawkins at IETF >>>>>> *Ämne:* RE: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> Prashanth has already summarized the changes done to draft during ISEG >>>>>> review in >>>>>> >>> https://mailarchive.ietf.org/arch/msg/tram/3svO9djFxeZyTtNsgqQf8zCTiVY >>>>>> >>>> >>> 3A__mailarchive.ietf.org_arch_msg_tram_3svO9djFxeZyTtNsgqQf8zCTiVY&d= >>>>> DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=SLjyswdn- >>>>> oZ_aev0pRxD3h6c4aKbEQZ3c_kL9_ccHGM&e=> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> Karl’s comment is to not mandate (D)TLS, and we don’t agree with him. >>>>>> >>>>>> >>>>>> >>>>>> Request you, WG members, WG chairs and AD to share their thoughts on >>>>>> mandating the use of (D)TLS when STUN authentication is not used to >>>>>> handle the threats discussed in RFC5766. >>>>>> >>>>>> >>>>>> >>>>>> -Tiru >>>>>> >>>>>> >>>>>> >>>>>> *From:*Pal Martinsen (palmarti) >>>>>> *Sent:* Friday, December 2, 2016 11:27 PM >>>>>> *To:* Karl Stahl >; >>>>>> tram mailing list > >>>>>> *Cc:* Tirumaleswar Reddy (tireddy) >>>>> >; Brandon Williams >>>>>> >> >; >>>>>> Prashanth Patil (praspati) >>>>> >; tram-chairs@ietf.org >>>>>> ; Dan Wing >>>>> >; Spencer Dawkins at IETF >>>>>> >>>> > >>>>>> *Subject:* Re: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> Hi Karl (and tramsters), >>>>>> >>>>>> >>>>>> >>>>>> I am sympathetic to your arguments but they might have been lost >>>>>> somewhere in the email thread (A mix of quoting, repeating and inline >>>>>> commenting have at least made my email client somewhat confused.) >>>>>> >>>>>> >>>>>> >>>>>> The best thing you can do at this moment is to provide text. I suggest >>>>>> you write up a draft as a counter proposal and submit it. In that way >>>>>> the WG members can read through and comment. >>>>>> >>>>>> >>>>>> >>>>>> I encourage the WG chairs to give Karl enough time to write this up, >>>>>> before progressing the other draft. >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> .-. >>>>>> >>>>>> Pål-Erik >>>>>> >>>>>> >>>>>> >>>>>> On 2 Dec 2016, at 09:38, Karl Stahl >>>>> > wrote: >>>>>> >>>>>> >>>>>> >>>>>> Hi Tiru, >>>>>> >>>>>> >>>>>> >>>>>> I am trying to make the point that there is no option for this >>>>>> draft, supposed to fulfill: >>>>>> >>>>>> *[tram] Milestone 3: TURN server auto-discovery mechanism for >>>>>> enterprise and ISPs* >>>>>> >>>>>> to result in: “We forbid usage of such (yellow) network provided >>>>>> TURN servers (use gray or grayish TURN servers instead)”, which is >>>>>> the consequence of mandating (D)TLS. >>>>>> >>>>>> >>>>>> >>>>>> Simply leave the consensus since version -7 of this draft by >>>>>> removing the (D)TLS mandating for TURN servers provided by the >>>>>> local or access network thrown-in during the discuss. >>>>>> >>>>>> >>>>>> >>>>>> /Karl >>>>>> >>>>>> >>>>>> >>>>>> PS: I believe the attack discussion below is already done, and that >>>>>> you are wrong in thinking that authentication which protects against >>>>>> spoof attacks can be exchanged for encryption, and that any of these >>>>>> things protects against DDOS attacks . These security things address >>>>>> different things and are not interchangeable, nor are they universal >>>>>> means against attacks of various kinds. >>>>>> >>>>>> >>>>>> >>>>>> And the outcome of any such discussion doesn’t change the above. >>>>>> >>>>>> >>>>>> >>>>>> Please note (sorry to repeat) that for the purpose of getting a >>>>>> better path for real-time traffic than through the default gateway >>>>>> path, we cannot expect to also get a higher security or trust level, >>>>>> nor to resolve every problem in the world. >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> *Från:* Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>>> *Skickat:* den 28 november 2016 10:53 >>>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil >>>>>> (praspati); tram@ietf.org >>>>>> *Kopia:* tram-chairs@ietf.org ; 'Dan >>>>>> Wing'; 'Spencer Dawkins at IETF' >>>>>> *Ämne:* RE: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> Hi Karl, >>>>>> >>>>>> >>>>>> >>>>>> Yes, I am discussing TURN servers provided by local or access >>>>>> networks, referring to inside attacks launched by attackers inside >>>>>> the local or access network. >>>>>> >>>>>> a)An inside attacker sends faked permissions to the TURN server to >>>>>> launch attack (DOS or DDOS) on the victim (TURN client). >>>>>> >>>>>> b)An inside attacker sends spoofed TURN requests to the TURN server >>>>>> to close allocations. >>>>>> >>>>>> >>>>>> >>>>>> Both above attacks can be prevented by using opportunistic >>>>>> encryption with (D)TLS. >>>>>> >>>>>> >>>>>> >>>>>> -Tiru >>>>>> >>>>>> >>>>>> >>>>>> *From:* tram [mailto:tram-bounces@ietf.org] *On Behalf Of *Karl Stahl >>>>>> *Sent:* Monday, November 28, 2016 2:49 PM >>>>>> *To:* Tirumaleswar Reddy (tireddy) >>>>> >; 'Brandon Williams' >>>>>> >>>> >; >>>>>> Prashanth Patil (praspati) >>>>> >; tram@ietf.org >>>>>> *Cc:* tram-chairs@ietf.org ; 'Dan Wing' >>>>>> >; 'Spencer Dawkins at >>>>>> IETF' >>>>> > >>>>>> *Subject:* Re: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> Hi Tiru, >>>>>> >>>>>> >>>>>> >>>>>> Now I don’t know where you are again. >>>>>> >>>>>> >>>>>> >>>>>> Are you discussing TURN servers provided by the local or access >>>>>> network (the yellow TURN servers), that are released from >>>>>> authentication (no dispute there), but for which (D)TLS mandate was >>>>>> thrown in-during the discuss (making them gray)? That is the >>>>>> showstopper that must go away. >>>>>> >>>>>> >>>>>> >>>>>> Some comments below. Hope we agree the below does not relate to >>> the >>>>>> yellow TURN server. >>>>>> >>>>>> >>>>>> >>>>>> /Karl >>>>>> >>>>>> >>>>>> >>>>>> *Från:* Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>>> *Skickat:* den 28 november 2016 04:02 >>>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil >>>>>> (praspati); tram@ietf.org >>>>>> *Kopia:* tram-chairs@ietf.org ; 'Dan >>>>>> Wing'; 'Spencer Dawkins at IETF' >>>>>> *Ämne:* RE: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> Hi Karl, >>>>>> >>>>>> >>>>>> >>>>>> No, I don’t agree that (D)TLS is not mandatory. Opportunistic >>>>>> encryption is not new. It’s discussed in RFC7435, and used in TCP >>>>>> increased security (TCPINC WG) and DNS privacy exchange (DPRIVE >>> WG). >>>>>> >>>>>> >>>>>> >>>>>> How do you propose to handle the following passive attacks without >>>>>> (D)TLS or STUN authentication ? >>>>>> >>>>>> >>>>>> >>>>>> a) https://tools.ietf.org/html/rfc5766#section-17.2.1 >>>>>> >>>> 3A__tools.ietf.org_html_rfc5766-23section- >>>>> 2D17.2.1&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=yTTYKgor2_ajHe7KP_4Bznl >>>>> G1EamuIy_K7ak0U40RbM&e=>, >>>>>> where attacker sends faked permissions to the TURN server to launch >>>>>> attack (DOS or DDOS) on the victim (TURN client). >>>>>> >>>>>>> Since the _TURN server sits outside_ the firewall, at attacker outside >>> the >>>>>> firewall can now send a >>>>>> >>>>>> --- A TURN server provided by local or access network, shall only be >>>>>> accessible by users inside the firewall. >>>>>> >>>>>> >>>>>> >>>>>> b) https://tools.ietf.org/html/rfc5766#section-17.3.3 >>>>>> >>>> 3A__tools.ietf.org_html_rfc5766-23section- >>>>> 2D17.3.3&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=eH- >>>>> u5a6yq0GxTqHFJMTssCJefcXLrMGLQdz-7MK_l7c&e=>, >>>>>> attacker sends spoofed TURN requests to the TURN server to close >>>>>> allocations. >>>>>> >>>>>> --- I don’t think (D)TLS helps if you can spoof and have such >>>>>> attackers inside your network. (that paragraph says: TURN prevents >>>>>> this by requiring that the credentials used”) meaning authentication >>>>>> (not certificate checking, nor encryption). >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> -Tiru >>>>>> >>>>>> >>>>>> >>>>>> *From:* tram [mailto:tram-bounces@ietf.org] *On Behalf Of *Karl Stahl >>>>>> *Sent:* Monday, November 28, 2016 1:39 AM >>>>>> *To:* Tirumaleswar Reddy (tireddy) >>>>> >; 'Brandon Williams' >>>>>> >>>> >; >>>>>> Prashanth Patil (praspati) >>>>> >; tram@ietf.org >>>>>> *Cc:* tram-chairs@ietf.org ; 'Dan Wing' >>>>>> >; 'Spencer Dawkins at >>>>>> IETF' >>>>> > >>>>>> *Subject:* Re: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> Hi Tiru, >>>>>> >>>>>> >>>>>> >>>>>> So we agree that the (D)TLS mandate thrown-in during the discuss >>>>>> (making yellow TURN servers gray) shall go away and we are back to >>>>>> what was consensus since version -7 of the draft. I think the >>>>>> attacks you are discussing now have been listed already and for TURN >>>>>> servers in a local or access network (no change since version -7), >>>>>> we should not expect a higher security or trust level when sending >>>>>> our real-time traffic through another path than the through default >>>>>> gateway, both paths are provided by the same network provider. >>>>>> >>>>>> * * >>>>>> >>>>>> If “protects the client from various attacks discussed in previous >>>>>> mails” related to discovery of TURN servers, really is possible by >>>>>> introducing something (why reopen that now?), we have to be careful >>>>>> not to make yellow TURN servers grayish, which I am afraid self >>>>>> signed certificates might do, and further, does this belong in a >>>>>> discovery draft, risking to pick a fight with the WebRTC browser >>>>>> makers supposed to use this specification. We know they don’t fancy >>>>>> self signed certificates… >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> Isn’t it specifications for some specific usage/application (like >>>>>> the return draft for WebRTC browsers) that should consider such >>>>>> things (not this draft), without any recommendation from this >>>>>> specification? >>>>>> >>>>>> >>>>>> >>>>>> /Karl >>>>>> >>>>>> >>>>>> >>>>>> *Från:* Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>>> *Skickat:* den 23 november 2016 04:15 >>>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil >>>>>> (praspati); tram@ietf.org >>>>>> *Kopia:* tram-chairs@ietf.org ; 'Dan >>>>>> Wing'; 'Spencer Dawkins at IETF' >>>>>> *Ämne:* RE: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> I am not suggesting that authentication is mandatory for TURN >>>>>> servers provided by local or access networks using (D)TLS but use of >>>>>> (D)TLS [Karl: “these become gray not yellow” or are you suggesting >>>>>> certificated signed by the network provider] >>>>>> >>>>>> >>>>>> >>>>>> [TR] No, they are yellow and not grey; clients will use (D)TLS but >>>>>> do not validate the TURN server certificate (referred to as >>>>>> Opportunistic security in the draft). >>>>>> >>>>>> >>>>>> >>>>>> [Karl: Seems like you are suggesting self signed certificates to >>>>>> just get the encryption (again – also discussed)] >>>>>> >>>>>> >>>>>> >>>>>> [TR] Yes, that’s one possible option to mandate (D)TLS. Client >>>>>> cannot validate the TURN server certificate but use encryption-only >>>>>> (D)TLS and protects the client from various attacks discussed in >>>>>> previous mails. >>>>>> >>>>>> >>>>>> >>>>>> -Tiru >>>>>> >>>>>> >>>>>> >>>>>> *From:* Karl Stahl [mailto:karl.stahl@ingate.com] >>>>>> *Sent:* Tuesday, November 22, 2016 11:12 PM >>>>>> *To:* Tirumaleswar Reddy (tireddy) >>>>> >; 'Brandon Williams' >>>>>> >>>> >; >>>>>> Prashanth Patil (praspati) >>>>> >; tram@ietf.org >>>>>> *Cc:* tram-chairs@ietf.org ; 'Dan Wing' >>>>>> >; 'Spencer Dawkins at >>>>>> IETF' >>>>> > >>>>>> *Subject:* SV: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> Hi Tiru, >>>>>> >>>>>> >>>>>> >>>>>> Please understand that in this context: >>>>>> >>>>>> - Authentication is to only allow certain users to use the TURN >>>>>> server resource >>>>>> >>>>>> - Certificate checking as when using (D)TLS is to assure the user is >>>>>> using a trusted TURN server (and further is sets up an encrypted >>>>>> channel). >>>>>> >>>>>> >>>>>> >>>>>> These things are not interchangeable or do the same things or >>>>>> achieves the same, which has been discussed over and over again in >>>>>> this draft already. >>>>>> >>>>>> >>>>>> >>>>>> Let it rest with that we cannot/should not expect a higher trust or >>>>>> security level when sending our real-time traffic through the TURN >>>>>> server path, than trough the default gateway path. You simply have >>>>>> to trust the access from the network provider you select to connect >>>>>> to, or refrain from using it. >>>>>> >>>>>> >>>>>> >>>>>> Please also understand that “the gray TURN servers” are provided by >>>>>> others than the local or access network, and you chose to trust them >>>>>> with your real-time traffic based on checking their certificate (Who >>>>>> configures which to allow into the WebRTC browser?). >>>>>> >>>>>> >>>>>> >>>>>> In a specification which main purpose is to auto discover TURN >>>>>> servers provided by the local or access network (“the yellow ones”), >>>>>> you CANNOT LOGICALLY end up with saying you MUST/SHOULD or are >>>>>> RECOMMENDED to use “the gray ones” instead, provided by some >>>>>> authority or Brandon maybe (which are meant for other purposes). >>>>>> Then you have not delivered the specification we need = The >>> showstopper. >>>>>> >>>>>> >>>>>> >>>>>> /Karl >>>>>> >>>>>> >>>>>> >>>>>> PS: Some comments below. >>>>>> >>>>>> >>>>>> >>>>>> *Från:* Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>>> *Skickat:* den 22 november 2016 04:31 >>>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil >>>>>> (praspati); tram@ietf.org >>>>>> *Kopia:* tram-chairs@ietf.org ; 'Dan >>>>>> Wing'; 'Spencer Dawkins at IETF' >>>>>> *Ämne:* RE: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> Hi Karl, >>>>>> >>>>>> >>>>>> >>>>>> I am not suggesting that authentication is mandatory for TURN >>>>>> servers provided by local or access networks using (D)TLS but use of >>>>>> (D)TLS [Karl: “these become gray not yellow” or are you suggesting >>>>>> certificated signed by the network provider] without authenticating >>>>>> the TURN server is mandatory to avoid various attacks listed in >>>>>> previous mails. >>>>>> >>>>>> >>>>>> >>>>>> In short, the TURN servers provided by local or access networks must >>>>>> use (D)TLS but it’s not mandatory for these TURN servers to get >>>>>> certificates from CA or any explicit configuration is required on >>>>>> the client to trust the TURN server. [Karl: Seems like you are >>>>>> suggesting self signed certificates to just get the encryption >>>>>> (again – also discussed)] >>>>>> >>>>>> >>>>>> >>>>>> -Tiru >>>>>> >>>>>> >>>>>> >>>>>> *From:* Karl Stahl [mailto:karl.stahl@ingate.com] >>>>>> *Sent:* Monday, November 21, 2016 2:10 AM >>>>>> *To:* Tirumaleswar Reddy (tireddy) >>>>> >; 'Brandon Williams' >>>>>> >>>> >; >>>>>> Prashanth Patil (praspati) >>>>> >; tram@ietf.org >>>>>> *Cc:* tram-chairs@ietf.org ; 'Dan Wing' >>>>>> >; 'Spencer Dawkins at >>>>>> IETF' >>>>> > >>>>>> *Subject:* SV: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> Hi Tiru, >>>>>> >>>>>> >>>>>> >>>>>> Trying to clarify as you request: I have lost track of in which >>>>>> context you are when you are "discussing various attacks" and what >>>>>> you mean with the ?? I marked below. >>>>>> >>>>>> >>>>>> >>>>>> My concern was whether this may again lead to that WE >>>>>> HAVE *_NO_* TURN SERVERS in the yellow area below resulting from >>> the >>>>>> (D)TLS mandating that was thrown-in into version -10 during the >>>>>> discuss (=the showstopping), since TURN servers with >>>>>> certificates are NOT provided by the local or access network (those >>>>>> are provided by some "trust anchor store [RFC6024] allows a TURN >>>>>> client ..." or by "Certification authorities that issue TURN server >>>>>> certificates" etc..) >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> So, just let me rest with that your discussion does not take away >>>>>> the allowance to use TURN servers provided by the local or access >>>>>> network without authentication that was re-introduced in version -7 >>>>>> of the draft (after long discussions, including with you Tiru). >>>>>> Remember, _those yellow TURN servers were the requirement of this >>>>>> draft to auto discover_ so they can be used by the WebRTC browsers – >>>>>> Usage cannot be forbidden (or un-recommended as Brandon suggests, >>>>>> although Brandon is agreeing to that the (D)TLS mandate must vanish >>>>>> for the yellow TURN servers). >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> FURTHER JUST TO REMIND AUTHORS of what is needed to be addresses >>> in >>>>>> this draft; it is found in >>>>>> >>>>>> https://www.ietf.org/mail-archive/web/tram/current/msg02216.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg02216.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=NtRZwrmn2K- >>>>> WUI_QN5k_yHlAN-uzhoQU8bs2yA_RBP8&e=> >>>>>> >>>>>> and the contradiction in section 7.2 as said in >>>>>> >>>>>> https://www.ietf.org/mail-archive/web/tram/current/msg02226.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg02226.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=EtiuiVt5Mnjbw9WsDtmjiu2l >>>>> -dv1RoHVpdAlTXtgZIQ&e=> >>>>>> >>>>>> while this discussion with Author Tiru and >“I don't run a local >>>>>> network or an access network and would not expect to deploy relays >>>>>> meant to function in that mode“ Brandon*, has been on more or less >>>>>> deviated subjects, or repeating what we already have been through >>>>>> earlier (PS: Notice that Author Prashanth already listed/discussed >>>>>> the attack stuff during the discuss. I feared you were redoing that.) >>>>>> >>>>>> >>>>>> >>>>>> /Karl >>>>>> >>>>>> >>>>>> >>>>>> * https://www.ietf.org/mail-archive/web/tram/current/msg02217.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg02217.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=glxP3ovYX7Cd4f12zIILJhbTc >>>>> EJ0ViqVgJQySQkJHYQ&e=> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> -----Ursprungligt meddelande----- >>>>>> Från: Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>>> Skickat: den 18 november 2016 04:00 >>>>>> Till: Karl Stahl; 'Brandon Williams'; Prashanth Patil >>>>>> (praspati); tram@ietf.org >>>>>> Kopia: tram-chairs@ietf.org ; 'Dan >>>>>> Wing'; 'Spencer Dawkins at IETF' >>>>>> Ämne: RE: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>> >>>>>> >>>>>> Hi Karl, >>>>>> >>>>>> >>>>>> >>>>>> I don't understand your concerns, please clarify. The draft mandates >>>>>> (D)TLS but does not mandate TURN server validation. >>>>>> >>>>>> We are discussing various attacks possbile for the WG to decide if >>>>>> (D)TLS is a MUST or SHOULD. >>>>>> >>>>>> >>>>>> >>>>>> -Tiru >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>>> -----Original Message----- >>>>>> >>>>>>> From: Karl Stahl [mailto:karl.stahl@ingate.com] >>>>>> >>>>>>> Sent: Friday, November 18, 2016 2:11 AM >>>>>> >>>>>>> To: Tirumaleswar Reddy (tireddy) >>>> >; 'Brandon Williams' >>>>>> >>>>>>> >>>> >; >>>>>> Prashanth Patil (praspati) >>>>>> >>>>>>> >; tram@ietf.org >>>>>> >>>>>> >>>>>>> Cc: tram-chairs@ietf.org ; 'Dan Wing' >>>>>> >; 'Spencer Dawkins >>>>>> >>>>>>> at IETF' >>>> > >>>>>> >>>>>>> Subject: SV: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>>> >>>>>> >>>>>>> Continuing the thread of this subject with the view that it should be >>>>> about the >>>>>> >>>>>>> MUST/SHOULD/RECOMMEND discussion regarding D(TLS) for the >>> USAGE >>>>> of >>>>>> >>>>>>> an already discovered TURN server, which must be totally >>> independent >>>>> of the >>>>>> >>>>>>> method used for discovery. >>>>>> >>>>>>> >>>>>> >>>>>>> I can't say I understand where Brandon's/Tiru's discussion fits in and >>>>> whether >>>>>> >>>>>>> are right things are said and are in the right context: >>>>>> >>>>>>> >>>>>> >>>>>>> ?? > > The draft mandates (D)TLS but does not mandate TURN server >>>>>> >>>>>>> validation. >>>>>> >>>>>>> ?? (D)TLS helps avoid various attacks, like attacker sending spoofed >>>>> TURN >>>>>> >>>>>>> messages ?? We should discuss all such possible attacks, before we >>>>> decide to >>>>>> >>>>>>> go with MUST or SHOULD. >>>>>> >>>>>>> >>>>>> >>>>>>> Where are we know? >>>>>> >>>>>>> >>>>>> >>>>>>> Please, just keep the clearance from authentication as it was from >>>>> version >>>>>> >>>>>>> -07 of the draft already, until the D(TLS) mandate was thrown in >>> during >>>>> the >>>>>> >>>>>>> DISCUSS. >>>>>> >>>>>>> >>>>>> >>>>>>> Simply, logically: >>>>>> >>>>>>>>>> TURN servers *provided by* (and maintained by?) some "trust >>>>> anchor >>>>>> >>>>>>>>>> store [RFC6024] allows a TURN client ..." or by "Certification >>>>>> >>>>>>>>>> authorities that issue TURN server certificates" >>>>>> >>>>>>> are NOT under the clearance discussed, which is for "TURN servers >>>>> *provided >>>>>> >>>>>>> by* the local network or by the access network". >>>>>> >>>>>>> so a SHOULD or RECOMMENDED of D(TLS) does not even belong >>> under >>>>> the >>>>>> >>>>>>> clearance discussed. >>>>>> >>>>>>> >>>>>> >>>>>>> >>>>>> >>>>>>> FURTHER, When I read: >>>>>> >>>>>>> >>>>>> >>>>>>> 7.2. Recursively Encapsulated TURN >>>>>> >>>>>>> >>>>>> >>>>>>> WebRTC endpoints SHOULD treat any TURN server discovered >>> through >>>>> the >>>>>> >>>>>>> mechanisms described in this specification as an enterprise/gateway >>>>>> >>>>>>> or access network server, in accordance with Recursively >>> Encapsulated >>>>>> >>>>>>> TURN [I-D.ietf-rtcweb-return]. >>>>>> >>>>>>> >>>>>> >>>>>>> Isn't that "any" in total contradiction to the clearance being discussed? >>>>>> >>>>>>> I thought: "enterprise/gateway or access network" was the same as >>> your >>>>>> >>>>>>> "local or access network" and that for OTHER discovered TURN servers >>>>>> >>>>>>> (outside the local or access network), it must be the application that >>>>> instructs >>>>>> >>>>>>> the TURN client how to use. >>>>>> >>>>>>> >>>>>> >>>>>>> I suggest the 7.2 section is replaced with my: >>>>>> >>>>>>>>>>> (4) "Deployment Considerations for TURN Servers Provided by >>> the >>>>>> >>>>>>>>>>> Local or >>>>>> >>>>>>>>>> Access Network" >>>>>> >>>>>>> >>>>>> >>>>>>> which mentions Recursively Encapsulated TURN [I-D.ietf-rtcweb- >>> return]. >>>>>> >>>>>>> (you can spell it out like that) >>>>>> >>>>>>> >>>>>> >>>>>>> /Karl >>>>>> >>>>>>> >>>>>> >>>>>>> -----Ursprungligt meddelande----- >>>>>> >>>>>>> Från: Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] >>>>>> >>>>>>> Skickat: den 15 november 2016 05:01 >>>>>> >>>>>>> Till: Brandon Williams; Karl Stahl; Prashanth Patil (praspati); >>>>> tram@ietf.org >>>>>> >>>>>>> Kopia: tram-chairs@ietf.org ; 'Dan >>> Wing'; >>>>>> 'Spencer Dawkins at IETF' >>>>>> >>>>>>> Ämne: RE: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>>> >>>>>> >>>>>>> Hi Brandon, >>>>>> >>>>>>> >>>>>> >>>>>>> I just listed one possible attack, there could be various other attacks >>> like >>>>> the >>>>>> >>>>>>> one discussed in https://tools.ietf.org/html/rfc5766#section-17.2.1 >>>>>> >>>> 3A__tools.ietf.org_html_rfc5766-23section- >>>>> 2D17.2.1&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=yTTYKgor2_ajHe7KP_4Bznl >>>>> G1EamuIy_K7ak0U40RbM&e=>, >>>>>> >>>>>>> where attacker sends faked permissions to the TURN server to launch >>>>> attack >>>>>> >>>>>>> (DOS or DDOS) on the victim (TURN client). >>>>>> >>>>>>> >>>>>> >>>>>>> We should discuss all such possible attacks, before we decide to go >>> with >>>>>> >>>>>>> MUST or SHOULD. >>>>>> >>>>>>> >>>>>> >>>>>>> -Tiru >>>>>> >>>>>>> >>>>>> >>>>>>>> -----Original Message----- >>>>>> >>>>>>>> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Brandon >>>>>> >>>>>>>> Williams >>>>>> >>>>>>>> Sent: Monday, November 14, 2016 7:31 PM >>>>>> >>>>>>>> To: Tirumaleswar Reddy (tireddy) >>>> >; Karl Stahl >>>>>> >>>>>>>> >; Prashanth >>>>>> Patil (praspati) >>>>>> >>>>>>>> >; tram@ietf.org >>>>>> >>>>>> >>>>>>>> Cc: tram-chairs@ietf.org ; 'Dan Wing' >>>>>> >; 'Spencer >>>>>> >>>>>>>> Dawkins at IETF' >>>> > >>>>>> >>>>>>>> Subject: Re: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>>>> >>>>>> >>>>>>>> +1 on the rationale. It makes almost no difference how you secure >>> the >>>>>> >>>>>>>> local or access network at the border, it's still possible that there >>>>>> >>>>>>>> are >>>>>> >>>>>>> on-path >>>>>> >>>>>>>> adversaries, and using some type of authentication (either (D)TLS or >>>>>> >>>>>>>> STUN) helps to protect against them. >>>>>> >>>>>>>> >>>>>> >>>>>>>> I still agree with Karl on downgrading the MUST back to SHOULD or >>>>>> >>>>>>>> RECOMMENDED, since I think there's room for disagreement about >>>>> how >>>>>> >>>>>>>> critical it is to mitigate against that attack. Ease-of-use might win >>>>>> >>>>>>>> out >>>>>> >>>>>>> for some >>>>>> >>>>>>>> networks provided they have other protection mechanisms at either >>>>> the >>>>>> >>>>>>>> network or datalink layer. I don't think it should drop below the >>>>>> >>>>>>>> recommendation level though, because most network will not have >>>>> such >>>>>> >>>>>>>> mechanisms in place. >>>>>> >>>>>>>> >>>>>> >>>>>>>> --Brandon >>>>>> >>>>>>>> >>>>>> >>>>>>>> On 11/14/2016 06:36 AM, Tirumaleswar Reddy (tireddy) wrote: >>>>>> >>>>>>>>> There seems to be confusion why (D)TLS is mandated in the draft. >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> The draft mandates (D)TLS but does not mandate TURN server >>>>> validation. >>>>>> >>>>>>> In >>>>>> >>>>>>>> scenarios where the TURN client cannot validate the TURN server, >>>>>> >>>>>>>> (D)TLS helps avoid various attacks, like attacker sending spoofed >>> TURN >>>>>> >>>>>>>> messages >>>>>> >>>>>>> to >>>>>> >>>>>>>> TURN client and server. For example, when (D)TLS is not used, >>> attacker >>>>>> >>>>>>>> can send spoofed TURN requests to the TURN server to close >>>>> allocations. >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> The above attack is possible when TURN servers are provided by >>>>>> >>>>>>>>> either >>>>>> >>>>>>> local >>>>>> >>>>>>>> or access networks. >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> -Tiru >>>>>> >>>>>>>>> >>>>>> >>>>>>>>>> -----Original Message----- >>>>>> >>>>>>>>>> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Karl >>> Stahl >>>>>> >>>>>>>>>> Sent: Monday, November 14, 2016 1:38 PM >>>>>> >>>>>>>>>> To: 'Brandon Williams' >>>> >; >>>>>> Prashanth >>>>>> >>>>>>>>>> Patil >>>>>> >>>>>>>>>> (praspati) >; >>>>> tram@ietf.org >>>>>> >>>>>> >>>>>>>>>> Cc: tram-chairs@ietf.org ; 'Dan >>> Wing' >>>>>> >; 'Spencer >>>>>> >>>>>>>>>> Dawkins at IETF' >>>>> >; Tirumaleswar >>>>>> >>>>>>>>>> Reddy >>>>>> >>>>>>>>>> (tireddy) > >>>>>> >>>>>>>>>> Subject: Re: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Hi Brandon, >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> In this draft, you have been pushing for "validation" of the >>>>>> >>>>>>>>>> discovered TURN server by using DTLS. The use case for that has >>> not >>>>>> >>>>>>>>>> been spelled out, but the use case of "TURN servers *provided >>> by* >>>>>> >>>>>>>>>> the local network or by the access network", really needs to be >>>>>> >>>>>>>>>> clarified in this draft. For this use case, clearance from >>>>>> >>>>>>>>>> authentication and validation was made in version -07 of the >>> draft >>>>>> >>>>>>> already. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Regarding your comment below, it is not clear which use case >>> YOU >>>>>> >>>>>>>>>> NOW are considering. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Further, DISCOVERY and USAGE are not the same in this >>> discussion. >>>>>> >>>>>>>>>> You mix that, especially regarding the anycast method. No one is >>>>>> >>>>>>>>>> suggesting that the TURN server is USED when addressed by >>>>> anycast. >>>>>> >>>>>>>>>> There is only ONE packet addressed by anycast and sent to the >>>>>> >>>>>>>>>> STUN/TURN server and that is for DISCOVERING it. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> See further inline below. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Thanks, >>>>>> >>>>>>>>>> Karl >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> -----Ursprungligt meddelande----- >>>>>> >>>>>>>>>> Från: Brandon Williams [mailto:brandon.williams@akamai.com] >>>>>> >>>>>>>>>> Skickat: den 11 november 2016 19:08 >>>>>> >>>>>>>>>> Till: Karl Stahl; 'Prashanth Patil (praspati)'; tram@ietf.org >>>>> >>>>>> >>>>>>>>>> Kopia: tram-chairs@ietf.org ; 'Dan >>>>> Wing'; >>>>>> 'Spencer Dawkins at IETF'; >>>>>> >>>>>>>>>> 'Tirumaleswar Reddy (tireddy)' >>>>>> >>>>>>>>>> Ämne: Re: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> (1) I agree with Karl that the MUST for (D)TLS or STUN auth >>> should >>>>>> >>>>>>>>>> revert to a SHOULD or a RECOMMENDED, given that network >>>>> perimeter >>>>>> >>>>>>>>>> control is called out with MUST (note that there are a few "must" >>>>>> >>>>>>>>>> to "MUST" edits required in that text). Although I would disagree >>>>>> >>>>>>>>>> with an enterprise network admin who chooses not to do one of >>>>> those >>>>>> >>>>>>>>>> two things (see my comments about (3)/(4) below), I think there's >>>>>> >>>>>>>>>> room for difference of opinion there, so MUST is unlikely to be >>>>>> >>>>>>>>>> complied >>>>>> >>>>>>> with >>>>>> >>>>>>>> anyway. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> [Karl] Good that you agree the MUST (thrown-in during discuss) >>>>> must >>>>>> >>>>>>>>>> go away, but for the use case of "TURN servers *provided by* the >>>>>> >>>>>>>>>> local network or by the access network." there should not even >>> be >>>>>> >>>>>>> SHOULD >>>>>> >>>>>>>> or RECOMMEND. >>>>>> >>>>>>>>>> Your are relating to TURN servers *provided by* (and maintained >>>>>> >>>>>>>>>> by?) some "trust anchor store [RFC6024] allows a TURN client ..." >>>>>> >>>>>>>>>> or by "Certification authorities that issue TURN server >>>>>> >>>>>>>>>> certificates" that *provide TURN servers with their certificates >>>>>> >>>>>>>>>> in* that you expect to be discovered and where the TURN client >>>>> (the >>>>>> >>>>>>>>>> WebRTC browser) must be equipped to accept those certificates. >>>>> That >>>>>> >>>>>>>>>> is NOT FOR "the TURN servers *provided by* the local network or >>>>> by >>>>>> >>>>>>>>>> the access network" that >>>>>> >>>>>>> is >>>>>> >>>>>>>> being discussed here. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> (2) I disagree with Karl about anycast. A server that properly >>>>>> >>>>>>>>>> supports anycast [Karl] What is "a server that properly supports >>>>>> >>>>>>>>>> anycast"? It is certainly NOT A [RFC5766] TURN server that is >>>>>> >>>>>>>>>> supposed >>>>>> >>>>>>> to >>>>>> >>>>>>>> be discovered by this draft. >>>>>> >>>>>>>>>> Also notice that we are talking about one anycast packet FOR >>>>>> >>>>>>>>>> DISCOVERY, NOT USAGE (relaying traffic) with anycast adressing. >>>>>> >>>>>>>>>> (I asked that the confusing "supports anycast" statement is >>> removed >>>>>> >>>>>>>>>> from the beginning of the draft.) >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> will indeed treat incoming requests differently depending upon >>>>>> >>>>>>>>>> whether they arrive on the anycast address or the unicast >>> address. >>>>>> >>>>>>>>>> I strongly disagree with the idea of using Try Alternate on the >>>>>> >>>>>>>>>> binding request, because you want redirect for the long-lived >>>>>> >>>>>>>>>> allocate request, not for the query-response binding request. >>>>>> >>>>>>>>>> [Karl] With a TURN server provided by the local or access >>> network, >>>>>> >>>>>>>>>> STUN is NOT USED for setting up any binding and no subsequent >>>>>> >>>>>>>>>> traffic. The STUN binding response 300 Try Alternate (statically >>>>>> >>>>>>>>>> configured) in my proposed text, is only an indication used at >>>>>> >>>>>>>>>> DISCOVERY, that a network provided TURN server is there and >>>>> should >>>>>> >>>>>>>>>> be used at its unicast address revealed in the >>>>>> >>>>>>>>>> 300 response. The long-lived TURN allocate IS USED for the >>> traffic. >>>>>> >>>>>>>>>> The STUN server portion of the TURN server paralleling the >>> default >>>>>> >>>>>>>>>> gateway router is never used for any binding. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Part of my reason for this is that good (by my definition) TURN >>>>>> >>>>>>>>>> server distribution is broader than is reasonable for anycast >>>>>> >>>>>>>>>> address management, and determining a redirect address to be >>>>>> >>>>>>>>>> delivered increases the cost of handling the STUN bind request. It >>>>>> >>>>>>>>>> is desirable for that cost to scale with the TURN allocate load, >>>>>> >>>>>>>>>> not the STUN bind >>>>>> >>>>>>> load. >>>>>> >>>>>>>>>> [Karl] You just add a static route in you access router for the >>>>>> >>>>>>>>>> anycast address to point to your TURN server! >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> I don't oppose supporting both in the spec if someone wants to >>>>>> >>>>>>>>>> propose language for that, but it would add burden to client >>>>>> >>>>>>>>>> implementations because they would be required to support >>> both >>>>> even >>>>>> >>>>>>>>>> though the server could use either. On the other hand, the >>>>>> >>>>>>>>>> currently defined method shouldn't require changes to clients at >>> all. >>>>>> >>>>>>>>>> [Karl] ?! But it does not find [RFC5766] TURN servers... >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> (3)/(4) I disagree with Karl's assessment of the deployment >>>>>> >>>>>>>>>> considerations, especially the conclusion that anycast is the >>>>>> >>>>>>>>>> better path for local/access networks. >>>>>> >>>>>>>>>> [Karl] If you mean traffic paths (like I did), "paths" are for >>>>>> >>>>>>>>>> USAGE and no one is suggesting anycast for that. >>>>>> >>>>>>>>>> Independent of how discovered (by anycast or any of the DNS >>>>>> >>>>>>>>>> methods) ALL USAGE through paths is by unicast addressing. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> It might be better for the server >>>>>> >>>>>>>>>> implementer, but not for the the client, because I think it's >>>>>> >>>>>>>>>> particularly difficult for a client to determine whether it's >>>>>> >>>>>>>>>> network >>>>>> >>>>>>> is >>>>>> >>>>>>>> "sealed". >>>>>> >>>>>>>>>> [Karl] No, not at all. Blocking STUN packets at the default gateway >>>>>> >>>>>>>>>> is the way to "network wise" seal the local network (and only >>> allow >>>>>> >>>>>>>>>> the parallel TURN path)! That is easily detected by a TURN client. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> The client has to trust that the network is properly sealed, since >>>>>> >>>>>>>>>> it's difficult (at >>>>>> >>>>>>>>>> least) for the client to verify. Also, I think that the DNS and >>>>>> >>>>>>>>>> DHCP methods are likely to be easier for enterprise and access >>>>>> >>>>>>>>>> networks to implement, since they will have the necessary >>> systems >>>>>> >>>>>>>>>> in place already. Even a home network gateway appliance will >>>>>> >>>>>>>>>> already have both integrate DNS and integrate DHCP, so I suspect >>>>>> >>>>>>>>>> that a small local network will have an easier time with these than >>>>> you >>>>>> >>>>>>> suggest as well. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> [Karl] So you agree that for a TURN server in a local network, its >>>>>> >>>>>>>>>> address shall only be deployed in local DNS - I think the draft >>>>>> >>>>>>>>>> should >>>>>> >>>>>>> say >>>>>> >>>>>>>> that also. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Despite the fact that I disagree with the assessment, I don't run a >>>>>> >>>>>>>>>> local network or an access network and would not expect to >>> deploy >>>>>> >>>>>>>>>> relays meant to function in that mode, so I will not have strong >>>>>> >>>>>>>>>> objections to including that language if there is broad support >>>>>> >>>>>>>>>> within >>>>>> >>>>>>> the >>>>>> >>>>>>>> WG for Karl's framing. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> --Brandon >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> On 11/10/2016 05:48 PM, Karl Stahl wrote: >>>>>> >>>>>>>>>>> (1) The downgrade of the MUST level requirement for >>>>> authentication >>>>>> >>>>>>>>>>> defined >>>>>> >>>>>>>>>> in [RFC5766] was "rightly" (to use the term from below) >>> introduced >>>>>> >>>>>>>>>> and made OPTIONAL for TURN servers provided by the local or >>>>> access >>>>>> >>>>>>>> network. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> HOWEVER, Prashanth's: "I think we can mandate (D)TLS *if* >>> STUN >>>>>> >>>>>>>>>> authentication or third-party authorization is not used." thrown- >>> in >>>>>> >>>>>>>>>> during the DISCUSS, must be deleted from the -10 version of this >>>>>> >>>>>>>>>> discovery since it BLOCKs the usage and deployment of network >>>>>> >>>>>>>>>> provided TURN servers, which was the main purpose of this >>>>> discovery >>>>>> >>>>>>>>>> draft. (Also, Authors's did not follow Ben Campbell's: "I saw a >>>>>> >>>>>>>>>> comment on my DISCUSS email thread from Karl Stahl, stating >>> that >>>>>> >>>>>>>>>> DTLS could not be mandated. Has that input been >>>>>> >>>>>>>>>> considered?") >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The thrown-in addition in version -10 (not shown in full below) >>>>>> >>>>>>>>>>> highlights >>>>>> >>>>>>>>>> this: >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> A TURN client MUST use (D)TLS ... in the absence of STUN >>> long- >>>>> term >>>>>> >>>>>>>>>>> credential mechanism [RFC5389] or STUN Extension for Third- >>>>> Party >>>>>> >>>>>>>>>>> Authorization [RFC7635]. ... >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> o For certificate-based authentication, a pre-populated trust >>>>>> >>>>>>> anchor >>>>>> >>>>>>>>>>> store [RFC6024] allows a TURN client ... >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> o Certification authorities that issue TURN server certificates >>>>>> >>>>>>>>>>> ... >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> o For TURN servers that don't have a certificate trust chain >>>>>> >>>>>>> (e.g., >>>>>> >>>>>>>>>>> because they are on a home network or a corporate >>> network), >>>>> a >>>>>> >>>>>>>>>>> configured list of TURN servers can contain the Subject >>>>>> >>>>>>>>>>> Public >>>>>> >>>>>>> Key >>>>>> >>>>>>>>>>> Info (SPKI) fingerprint of the TURN servers... etc. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> What does the Authors have in mind - a regulated network of >>>>> TURN >>>>>> >>>>>>>>>>> servers, >>>>>> >>>>>>>>>> when the purpose was for everyone to be able to use good >>> WebRTC >>>>>> >>>>>>>>>> everywhere you can surf, including behind your home Best Buy >>>>> bought >>>>>> >>>>>>>>>> WiFi router (which we can hope, some day, will include a default >>>>>> >>>>>>>>>> configured, ready to use, TURN server path paralleling its default >>>>>> >>>>>>>>>> gateway path (i.e. the NAT/firewall/access router/default >>> gateway)? >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> This specification shall (at least) specify discovery of network >>>>>> >>>>>>>>>>> provided >>>>>> >>>>>>>>>> TURN servers to allow real-time communication, in situations >>> where >>>>>> >>>>>>>>>> it otherwise is not possible or bad: >>>>>> >>>>>>>>>>> - to meet the auto configuration of RFC 7478 (Web Real-Time >>>>>> >>>>>>>>>>> Communication >>>>>> >>>>>>>>>> Use Cases and Requirements) 2.3.5.1. >>>>>> >>>>>>>>>>> - providing a discovery method suitable for >>>>>> >>>>>>>>>>> draft-ietf-rtcweb-return-01 >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The above has already been discussed many times in this WG: >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg01319.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg01319.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=Osl0dTxisM85YhdJ__0idlm >>>>> EuHZDO94zeETh0KuWOUg&e=> >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg01742.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg01742.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ovkKpAFtadl_tW- >>>>> sGE9lKBidFiJ9DwAxrKyC-KgdC6w&e=> >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg02191.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg02191.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=6qTmzqnEW5fWRDNt6JT9R >>>>> WtnkKecOUYG8OyPtBVY9Ek&e=> >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Just as credentials for authentication cannot be expected to be >>>>>> >>>>>>>>>>> available >>>>>> >>>>>>>>>> for this general usage, nor can we impose that certificates should >>>>>> >>>>>>>>>> be >>>>>> >>>>>>> used. >>>>>> >>>>>>>>>> For the network provided TURN server, we should not/must not >>>>> expect >>>>>> >>>>>>>>>> some higher level of trust or security when the real-time media >>>>>> >>>>>>>>>> flows through the TURN server than when it goes through the >>>>> default >>>>>> >>>>>>> gateway! >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The use of (D)TLS has been discussed intensively in the -04 >>>>>> >>>>>>>>>>> version of the >>>>>> >>>>>>>>>> draft >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg01821.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg01821.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=JJm49cE6V10iisqHp3jNeSn >>>>> qE7wHzDtSrIhsQU8Sx3A&e=> >>>>>> >>>>>>>>>>> and was NOT mandated for the TURN server provided by the >>> local >>>>> or >>>>>> >>>>>>>>>>> access >>>>>> >>>>>>>>>> network. It cannot be thrown-in now again! >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Any arguments against have been of type: We need security in >>>>>> >>>>>>>>>>> itself >>>>>> >>>>>>>>>>> - >>>>>> >>>>>>>>>> protect this and that - do every authentication/validation in the >>>>>> >>>>>>>>>> book (whether needed or not) etc., which only leads to responses >>>>>> >>>>>>>>>> like I had to bring up during the discuss: >>>>>> >>>>>>>>>>> [Karl] Do you think we need to discover TURN servers for the >>>>>> >>>>>>>>>>> pleasure of >>>>>> >>>>>>>>>> doing "security that deal directly with TURN messages" in itself, >>>>>> >>>>>>>>>> and not for what they are supposed to do (relay "application >>> data") >>>>>> >>>>>>>>>> and do you also think that is why a network provider will deploy >>>>>> >>>>>>>>>> such TURN >>>>>> >>>>>>>> server for his users? >>>>>> >>>>>>>>>> Please do not stop the purpose (by such phrases)! >>>>>> >>>>>>>>>>> (Also, encryption and protection against man-in-the-middle >>>>>> >>>>>>>>>>> attacks, for >>>>>> >>>>>>>>>> the payload (real-time traffic) are for the endpoints to do - like >>>>>> >>>>>>>>>> with WebRTC, mandating DTLS-SRTP media - it should not be >>>>> expected >>>>>> >>>>>>>>>> to be done by a TURN server, especially when not always used.) >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> (2) Also as pointed out during the DISCUSS >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg02144.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg02144.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=hti885FH0I_- >>>>> 3z7dolfYCAia4FX3i12sUCWsGesND6s&e=> >>>>>> >>>>>>>>>>> and two times earlier (during WG discussions, but not addressed >>>>> or >>>>>> >>>>>>>>>> responded to by the Authors): >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg02081.htm >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg02081.htm&d=DgMFaQ&c=96ZbZZcaMF4w >>>>> 0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=f- >>>>> GzOTsPm86NUqzFXyjAgPz6x-BiA-buLhIFPt9QfEg&e=> l >>>>>> >>>>>>>>>>> and https://www.ietf.org/mail- >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> 2D&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>> nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=Sa3jwtA2TFtNAIAnfTem32v >>>>> W9jIfcBlsUwxIBelblDs&e=> >>>>>> >>>>>>>> archive/web/tram/current/msg01976.html >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The anycast method does not work with RFC5766 TURN servers! >>>>> That >>>>>> >>>>>>>>>>> has not >>>>>> >>>>>>>>>> been addressed at all. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> A TURN server doesn't react one way (answering 300 Try >>>>> Alternate) >>>>>> >>>>>>>>>>> when >>>>>> >>>>>>>>>> addressed by an anycast address and another way (accepting the >>>>>> >>>>>>>>>> Allocate >>>>>> >>>>>>>>>> request) when addressed by its unicast address, does it? >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Author's (during the DISCUSS): "We intend to add the following >>> to >>>>>> >>>>>>>>>>> explain >>>>>> >>>>>>>>>> server behavior a little better: >>>>>> >>>>>>>>>>> "A TURN anycast server performs checks 1 to 7 discussed in >>>>> Section >>>>>> >>>>>>>>>>> 6.2 of >>>>>> >>>>>>>>>> RFC5766. If all checks pass, the TURN anycast server MUST >>> respond >>>>>> >>>>>>>>>> with a >>>>>> >>>>>>>>>> 300 (Try Alternate) error as described in [RFC5766];" >>>>>> >>>>>>>>>>> does not help and I responded: [Karl] That must be an update of >>>>>> >>>>>>> RFC5766. >>>>>> >>>>>>>>>> Or does "TURN anycast server" imply that there ALSO is a "TURN >>>>>> >>>>>>>>>> unicast server" at the same interface accepting the Allocate >>>>> request? >>>>>> >>>>>>>>>> What are these things? >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> I have proposed this modification of the anycast method, which >>> is >>>>>> >>>>>>>>>>> better >>>>>> >>>>>>>>>> (in several aspects) and doesn't need to update RFC5766: >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> "When a client requires TURN services, it sends a STUN binding >>>>>> >>>>>>>>>>> request to >>>>>> >>>>>>>>>> the assigned anycast address. The STUN server >>>>>> >>>>>>>>>>> responds with a 300 (Try Alternate) error as described in >>>>>> >>>>>>>>>>> [RFC5389]; The >>>>>> >>>>>>>>>> response contains a unicast address in the ALTERNATE-SERVER >>>>>> >>>>>>>>>> attribute, which the client compares with the source address of >>> the >>>>>> >>>>>>>>>> response and if the >>>>>> >>>>>>>>>>> addresses are the same, it is an indication to use the TURN >>> server >>>>>> >>>>>>>>>>> at that >>>>>> >>>>>>>>>> address. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> For subsequent communication with the TURN server, the client >>>>> uses >>>>>> >>>>>>>>>>> that >>>>>> >>>>>>>>>> responding server's unicast address." >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The sentence in the -10 draft under "3 Discovery Procedure": >>> "not >>>>>> >>>>>>>>>>> all TURN >>>>>> >>>>>>>>>> servers may support anycast" can then be removed. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> (3) I cannot see this -10 draft telling which discovery method >>>>>> >>>>>>>>>>> that is fit >>>>>> >>>>>>>>>> for the TURN servers provided by the local or access network (the >>>>>> >>>>>>>>>> network provided TURN server). However, there are confusing >>>>> client >>>>>> >>>>>>>>>> behavior recommendations, like the sentences in the draft under >>> "3 >>>>>> >>>>>>>>>> Discovery >>>>>> >>>>>>>>>> Procedure": "For best results, a client SHOULD implement all >>>>>> >>>>>>>>>> discovery mechanisms described above." and under "1 >>>>> Introduction": >>>>>> >>>>>>>>>> "three discovery mechanisms, so as to maximize opportunity for >>>>>> >>>>>>>>>> discovery, based on the network in which the TURN client finds >>>>> itself." >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> A network provided TURN server is only meant for the users on >>> the >>>>>> >>>>>>>>>>> specific >>>>>> >>>>>>>>>> network - others should not be able to use such TURN server, and >>> it >>>>>> >>>>>>>>>> would then be preferred that it is only advertized and discovered >>>>>> >>>>>>>>>> at that local network - which is badly described by "maximize >>>>>> >>>>>>>>>> opportunity >>>>>> >>>>>>> for >>>>>> >>>>>>>> discovery". >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> If a DNS method would be used to discover the network >>> provided >>>>>> >>>>>>>>>>> TURN >>>>>> >>>>>>>>>> server, its private address should only be configured in private >>>>>> >>>>>>>>>> (local) DNS (we don't like to put our private IP addresses in >>>>>> >>>>>>>>>> public DNS), but I see no such recommendation. Further, the DNS >>>>>> >>>>>>>>>> methods are complex and expensive to deploy and one of them >>>>> depends >>>>>> >>>>>>>>>> on DHCP that is not available on all access networks. That makes >>> (a >>>>>> >>>>>>>>>> working) anycast discovery method the clear choice for a TURN >>>>>> >>>>>>>>>> server provided by >>>>>> >>>>>>>> the local or access network. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Network provided TURN servers paralleling a >>> NAT/firewall/access >>>>>> >>>>>>>>>> router/default gateway is a new concept that came up during >>>>> WebRTC >>>>>> >>>>>>>>>> standardization work to deal with traversal and quality problems >>> of >>>>>> >>>>>>>>>> real-time traffic. However, this draft give little or no guidance >>>>>> >>>>>>>>>> for deployment and I therefore suggest that a separate section is >>>>>> >>>>>>>>>> added, that spells out the deployment considerations for TURN >>>>>> >>>>>>>>>> servers provided by the local or access network (which now is >>>>>> >>>>>>>>>> missing, but I propose the following >>>>>> >>>>>>>>>> text): >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> (4) "Deployment Considerations for TURN Servers Provided by >>> the >>>>>> >>>>>>>>>>> Local or >>>>>> >>>>>>>>>> Access Network" >>>>>> >>>>>>>>>>> (Suggested text for an additional section) >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The concept of paralleling a NAT/firewall/access-router/default >>>>>> >>>>>>>>>>> gateway at >>>>>> >>>>>>>>>> the local or access network with a TURN server, to deal with >>>>>> >>>>>>>>>> traversal and quality problems of real-time traffic, is new and >>>>>> >>>>>>>>>> came up during the WebRTC standardization work. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Such network provided TURN servers, only accessible by the >>> users >>>>>> >>>>>>>>>>> on the >>>>>> >>>>>>>>>> local or access network, must be automatically discovered and >>> used, >>>>>> >>>>>>>>>> without specific configuration or having credentials for >>>>>> >>>>>>>>>> authentication or certificates for validation, to be useful for e.g. >>>>>> >>>>>>>>>> a WebRTC browsers to allow quality media traffic "everywhere >>> you >>>>>> >>>>>>>>>> can >>>>>> >>>>>>>> surf". >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Just as for the Internet access itself, the TURN server is offered >>>>>> >>>>>>>>>>> by the >>>>>> >>>>>>>>>> network provider and there is no change in the trust or security >>>>>> >>>>>>>>>> level (which should not be expected) when real-time traffic flows >>>>>> >>>>>>>>>> through the TURN server path, than through the default gateway >>>>> path. >>>>>> >>>>>>>>>> (The purpose of the network provided turn server is to allow >>>>>> >>>>>>>>>> traversal of real-time media traffic in environments with >>>>>> >>>>>>>>>> restrictive NAT/firewalls closed for UDP traffic and/or to allow >>>>>> >>>>>>>>>> better quality through the often data congested router at the >>>>>> >>>>>>>>>> default >>>>>> >>>>>>>>>> gateway.) >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The discovery of the network provided TURN server should meet >>>>> the >>>>>> >>>>>>>>>>> auto >>>>>> >>>>>>>>>> configuration of RFC 7478 (Web Real-Time Communication Use >>>>> Cases >>>>>> >>>>>>>>>> and >>>>>> >>>>>>>>>> Requirements) 2.3.5.1. and draft-ietf-rtcweb-return-01 is defining >>>>>> >>>>>>>>>> the TURN client behavior for WebRTC browsers. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> For quality reasons, a sealed network configuration - i.e. the >>>>>> >>>>>>>>>>> media has >>>>>> >>>>>>>>>> to go through the TURN server, not through the default gateway >>> (by >>>>>> >>>>>>>>>> using STUN instead of TURN) - is the typical intention when a >>> TURN >>>>>> >>>>>>>>>> server is deployed in the local or access network. The sealed >>>>>> >>>>>>>>>> configuration can be enforced and signaled to the TURN client by >>>>>> >>>>>>>>>> the network provider blocking STUN packets at the default >>> gateway. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> A network configuration enforcing sealed behavior, has the >>> good >>>>>> >>>>>>>>>>> effect of >>>>>> >>>>>>>>>> allowing the TURN client (e.g. a WebRTC browser) in itself to have >>>>>> >>>>>>>>>> a >>>>>> >>>>>>>>>> non- sealed default configuration. (ietf-rtcweb-return-01 explains >>>>>> >>>>>>>>>> that a sealed default configuration in the browser itself, would >>>>>> >>>>>>>>>> result in that media between local clients would have to pass the >>>>>> >>>>>>>>>> TURN server, which is not >>>>>> >>>>>>>>>> desirable.) >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The above assumes that the TURN client using a TURN server in >>>>> the >>>>>> >>>>>>>>>>> local or >>>>>> >>>>>>>>>> access network shall use unencrypted STUN/TURN (over UDP for >>>>> best >>>>>> >>>>>>>>>> quality) so the STUN cookie can be detected and stopped in the >>>>>> >>>>>>>>>> default >>>>>> >>>>>>>> gateway. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> A TURN server included in the router at the default gateway, >>> that >>>>>> >>>>>>>>>> intercepts and responds to an allocate request, should be >>> treated >>>>> as >>>>>> >>>>>>> a >>>>>> >>>>>>>>>> discovered network provided sealed TURN server configuration >>> by a >>>>>> >>>>>>>>>> TURN client (without having to review any 300 Try Alternate >>>>>> >>>>>>>>>> response as outlined in anycast method description) allowing for >>>>>> >>>>>>>>>> tolerant and >>>>>> >>>>>>> secure >>>>>> >>>>>>>> deployment. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> A web application that wants to try the default gateway path >>>>>> >>>>>>>>>>> instead of >>>>>> >>>>>>>>>> the TURN server path (in spite of a sealed network configuration) >>>>>> >>>>>>>>>> can suggest encrypted (D)TLS STUN and TURN candidates that will >>>>> not >>>>>> >>>>>>>>>> be blocked by STUN cookie recognition at the default gateway. It >>> is >>>>>> >>>>>>>>>> then up to application's TURN client whether to try the default >>>>>> >>>>>>>>>> gateway >>>>>> >>>>>>> path. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> A further advantage of detecting a sealed network >>> configuration, >>>>>> >>>>>>>>>>> is that a >>>>>> >>>>>>>>>> TURN client can select to *only in a sealed network >>> configuration* >>>>>> >>>>>>>>>> look for a TURN server by the anycast method for discovery, thus >>>>>> >>>>>>>>>> eliminating the leakage risk mentioned under 9.3. Further, there >>>>>> >>>>>>>>>> will be no risk that a far away TURN server will be discovered and >>>>>> >>>>>>>>>> used and there will be no need for the TTL limitation suggested >>>>> under 9.3. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The anycast discovery method, combined with the above >>>>>> >>>>>>>>>>> recommendations, >>>>>> >>>>>>>>>> allow for an easy and robust deployment of network provided >>> TURN >>>>>> >>>>>>>>>> servers, fitting all types of local and access networks. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The DNS based methods of this specification are more complex >>>>> and >>>>>> >>>>>>>>>>> expensive >>>>>> >>>>>>>>>> to deploy and one of them depends on DHCP that is not available >>> on >>>>>> >>>>>>>>>> all access networks. If any of the DNS based methods is used to >>>>>> >>>>>>>>>> advertize and discover a TURN in the local or access network, its >>>>>> >>>>>>>>>> private addresses should only be configured in private (local) DNS >>>>>> >>>>>>>>>> and not be published publicly, which adds further to the >>> complexity >>>>>> >>>>>>>>>> and >>>>>> >>>>>>>> cost of deployment. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> (5) Most (all?) of what is considered and summed up under (4) >>>>> (the >>>>>> >>>>>>>>>> suggested additional text), has been brought forward on the >>> TRAM >>>>> WG >>>>>> >>>>>>>>>> list before, but not brought into the current -10 draft, see: >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg00132.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg00132.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=I4tX_vQd- >>>>> ANV8cBjPGlHlFIVEUZ-3lYmVI6GbGtjxvc&e=> >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg00138.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg00138.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=JJWVyPhhTbhTpkcOmQRdB >>>>> 49hx2gOMNKOL7qMT3bq630&e=> >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg01721.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg01721.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=QnbJOsYAvuDWr9YyEGsxU >>>>> Ov8S1ha8ow9Do5VDOq6Gs0&e=> >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg01745.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg01745.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=duED3YRw_gPiLwPnjC7zgW >>>>> 0KbQXqQBjN-BJC4bzmt44&e=> >>>>>> >>>>>>>>>>> The links given under (1) and (2) above >>>>>> >>>>>>>>>>> https://www.ietf.org/mail- >>>>> archive/web/tram/current/msg02155.html >>>>>> >>>> 3A__www.ietf.org_mail- >>>>> >>> 2Darchive_web_tram_current_msg02155.html&d=DgMFaQ&c=96ZbZZcaMF4 >>>>> w0F4jpN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>>>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=5fxjtRf2Ndt9R- >>>>> RDwWpgG0d7mctpUT2lUZrKGaThZ40&e=> >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> /Karl >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> -----Ursprungligt meddelande----- >>>>>> >>>>>>>>>>> Från: tram [mailto:tram-bounces@ietf.org] För Prashanth Patil >>>>>> >>>>>>>>>>> (praspati) >>>>>> >>>>>>>>>>> Skickat: den 2 november 2016 22:18 >>>>>> >>>>>>>>>>> Till: tram@ietf.org >>>>>> >>>>>>>>>>> Kopia: tram-chairs@ietf.org ; Dan >>>>> Wing; >>>>>> Spencer Dawkins at IETF; >>>>>> >>>>>>>>>> Tirumaleswar Reddy (tireddy) >>>>>> >>>>>>>>>>> Ämne: [tram] draft-ietf-tram-turn-server-discovery >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> The TURN discovery draft originally suggested that STUN >>>>>> >>>>>>>>>>> authentication be >>>>>> >>>>>>>>>> relaxed and made OPTIONAL for TURN servers provided by the >>> local >>>>> or >>>>>> >>>>>>>>>> access network. The intention was to allow new/guest users (who >>>>> do >>>>>> >>>>>>>>>> not necessarily possess long term credentials for STUN >>>>>> >>>>>>>>>> authentication) in the network to discover and use TURN services >>>>>> >>>>>>> offered >>>>>> >>>>>>>> by the network. >>>>>> >>>>>>>>>>> Ben Campbell raised an objection during IESG evaluation that we >>>>>> >>>>>>>>>>> clearly >>>>>> >>>>>>>>>> indicate that this is a downgrade of a MUST level requirement >>>>>> >>>>>>>>>> defined in [RFC5766] and explain its consequences. It was also >>>>>> >>>>>>>>>> rightly suggested that we mandate the use of (D)TLS in the >>> absence >>>>>> >>>>>>>>>> of STUN authentication for protection against a variety of attacks; >>>>>> >>>>>>>>>> the draft now makes it a MUST that TURN servers use (D)TLS in >>> the >>>>>> >>>>>>>>>> absence of STUN >>>>>> >>>>>>>> authentication. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> To put it simply, the draft mandates that TURN servers in a local >>>>>> >>>>>>>>>>> or >>>>>> >>>>>>>>>> access network do at least one of (D)TLS or STUN authentication. >>> If >>>>>> >>>>>>>>>> you have an opinion about this change, please let the working >>> group >>>>>> >>>>>>>>>> know on the mailing list before the end of IETF 97. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> See below for snippets of what changed. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Excerpt from Security Considerations of >>>>>> >>>>>>>>>> draft-ietf-tram-turn-server-discovery-09: >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> "Use of Session Traversal Utilities for NAT (STUN) [RFC5389] >>>>>> >>>>>>>>>>> authentication is OPTIONAL for TURN servers provided by the >>>>> local >>>>>> >>>>>>>>>>> network or by the access network. A network provided TURN >>>>>> >>>>>>>>>>> server >>>>>> >>>>>>>> MAY >>>>>> >>>>>>>>>>> be configured to accept Allocation requests without STUN >>>>>> >>>>>>>>>>> authentication, and a TURN client MAY be configured to >>> accept >>>>>> >>>>>>>>>>> Allocation success responses without STUN authentication >>> from >>>>> a >>>>>> >>>>>>>>>>> network provided TURN server. In order to protect against >>> man- >>>>> in- >>>>>> >>>>>>>>>>> the-middle attacks when accepting a TURN allocation response >>>>>> >>>>>>> without >>>>>> >>>>>>>>>>> STUN authentication, it is RECOMMENDED that the TURN >>> client >>>>> use >>>>>> >>>>>>> one >>>>>> >>>>>>>>>>> of the following techniques with (D)TLS to validate the TURN >>>>>> >>>>>>> server" >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Updated text in Security Considerations of >>>>>> >>>>>>>>>> draft-ietf-tram-turn-server-discovery-10: >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> "Use of Session Traversal Utilities for NAT (STUN) [RFC5389] >>>>>> >>>>>>>>>>> authentication is OPTIONAL for TURN servers provided by the >>>>> local >>>>>> >>>>>>>>>>> network or by the access network. A network provided TURN >>>>>> >>>>>>>>>>> server >>>>>> >>>>>>>> MAY >>>>>> >>>>>>>>>>> be configured to accept Allocation requests without STUN >>>>>> >>>>>>>>>>> authentication, and a TURN client MAY be configured to >>> accept >>>>>> >>>>>>>>>>> Allocation success responses without STUN authentication >>> from >>>>> a >>>>>> >>>>>>>>>>> network provided TURN server. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Making STUN authentication OPTIONAL is a downgrade of a >>>>> MUST >>>>>> >>>>>>> level >>>>>> >>>>>>>>>>> requirement defined in [RFC5766]. The downgrade allows >>> TURN >>>>>> >>>>>>> servers >>>>>> >>>>>>>>>>> provided by local or access network to accept Allocation >>> requests >>>>>> >>>>>>>>>>> from new and/or guest users in the network who do not >>>>> necessarily >>>>>> >>>>>>>>>>> possess long term credentials for STUN authentication. The >>>>>> >>>>>>>>>>> intention, in such deployments, being to provide TURN >>> services >>>>>> >>>>>>>>>>> to >>>>>> >>>>>>> all >>>>>> >>>>>>>>>>> users in the local or access network. However, this opens up a >>>>>> >>>>>>> TURN >>>>>> >>>>>>>>>>> server to a variety of attacks described in Section 17 of >>>>>> >>>>>>> [RFC5766]. >>>>>> >>>>>>>>>>> A TURN server in such cases must be configured to only >>> process >>>>> STUN >>>>>> >>>>>>>>>>> requests from the trusted local network or subscribers of the >>>>>> >>>>>>> access >>>>>> >>>>>>>>>>> network. Operational measures must be taken in order >>> protect >>>>> the >>>>>> >>>>>>>>>>> TURN server; some of these measures include, but not limited >>> to, >>>>>> >>>>>>>>>>> access control by means of access-lists, firewalls, subscriber >>>>>> >>>>>>> quota >>>>>> >>>>>>>>>>> limits, ingress filtering etc. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> A TURN client MUST use (D)TLS in the absence of STUN long- >>>>> term >>>>>> >>>>>>>>>>> credential mechanism [RFC5389] or STUN Extension for Third- >>>>> Party >>>>>> >>>>>>>>>>> Authorization [RFC7635]." >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Please refer >>>>>> >>>>>>>>>> https://tools.ietf.org/html/draft-ietf-tram-turn-server-discovery- >>> 1 >>>>>> >>>> 3A__tools.ietf.org_html_draft-2Dietf-2Dtram-2Dturn-2Dserver- >>> 2Ddiscovery- >>>>> 2D1&d=DgMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=bwZ- >>>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=--B- >>>>> kAp9De1f6HhRKLEtD1bVS33BpG2S5MYzWBQ_YDI&e=> >>>>>> >>>>>>>>>> 0# >>>>>> >>>>>>>>>> section >>>>>> >>>>>>>>>> -9 for more details. >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> Thanks, >>>>>> >>>>>>>>>>> Authors >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> _______________________________________________ >>>>>> >>>>>>>>>>> tram mailing list >>>>>> >>>>>>>>>>> tram@ietf.org >>>>>> >>>>>>>>>>> https://www.ietf.org/mailman/listinfo/tram >>>>>> >>>> >>> 3A__www.ietf.org_mailman_listinfo_tram&d=DgMFaQ&c=96ZbZZcaMF4w0F4j >>>>> pN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ahRn1ifxnOACrVFgxJ99086 >>>>> nBuC6-cz9H7GKY_0EV8s&e=> >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>>> _______________________________________________ >>>>>> >>>>>>>>>>> tram mailing list >>>>>> >>>>>>>>>>> tram@ietf.org >>>>>> >>>>>>>>>>> https://www.ietf.org/mailman/listinfo/tram >>>>>> >>>> >>> 3A__www.ietf.org_mailman_listinfo_tram&d=DgMFaQ&c=96ZbZZcaMF4w0F4j >>>>> pN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ahRn1ifxnOACrVFgxJ99086 >>>>> nBuC6-cz9H7GKY_0EV8s&e=> >>>>>> >>>>>>>>>>> >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> _______________________________________________ >>>>>> >>>>>>>>>> tram mailing list >>>>>> >>>>>>>>>> tram@ietf.org >>>>>> >>>>>>>>>> https://www.ietf.org/mailman/listinfo/tram >>>>>> >>>> >>> 3A__www.ietf.org_mailman_listinfo_tram&d=DgMFaQ&c=96ZbZZcaMF4w0F4j >>>>> pN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ahRn1ifxnOACrVFgxJ99086 >>>>> nBuC6-cz9H7GKY_0EV8s&e=> >>>>>> >>>>>>>> >>>>>> >>>>>>>> _______________________________________________ >>>>>> >>>>>>>> tram mailing list >>>>>> >>>>>>>> tram@ietf.org >>>>>> >>>>>>>> https://www.ietf.org/mailman/listinfo/tram >>>>>> >>>> >>> 3A__www.ietf.org_mailman_listinfo_tram&d=DgMFaQ&c=96ZbZZcaMF4w0F4j >>>>> pN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ahRn1ifxnOACrVFgxJ99086 >>>>> nBuC6-cz9H7GKY_0EV8s&e=> >>>>>> >>>>>> _______________________________________________ >>>>>> tram mailing list >>>>>> tram@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/tram >>>>>> >>>> >>> 3A__www.ietf.org_mailman_listinfo_tram&d=DgMFaQ&c=96ZbZZcaMF4w0F4j >>>>> pN6LZg&r=bwZ-nnRGWmcGKRIuadq6- >>> NSnsgwbBVUJa4mZfmEIBXg&m=LXaH- >>>>> >>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=ahRn1ifxnOACrVFgxJ99086 >>>>> nBuC6-cz9H7GKY_0EV8s&e=> >>>>>> >>>>>> >>>>>> >>>>> >>>>> -- >>>>> Brandon Williams; Chief Architect >>>>> Cloud Networking; Akamai Technologies Inc. >>> >>> -- >>> Brandon Williams; Chief Architect >>> Cloud Networking; Akamai Technologies Inc. > -- Brandon Williams; Chief Architect Cloud Networking; Akamai Technologies Inc. From nobody Wed Jan 4 05:31:36 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 655C0129586; Wed, 4 Jan 2017 05:31:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.622 X-Spam-Level: X-Spam-Status: No, score=-17.622 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qOc6e-Ilur-8; Wed, 4 Jan 2017 05:31:30 -0800 (PST) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2953B129580; Wed, 4 Jan 2017 05:31:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=138230; q=dns/txt; s=iport; t=1483536690; x=1484746290; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=FtTQTKlI3JaUaMT/U/qB7ctQ+UVb0JX2ZKJw70aAYEY=; b=MI4PA/+1CesN+iSxPVuB93ag+l0LpF6ZMmVvfErLZR256E15nSKMb7+d iKvx1qblfJZ8QqndgmbJz73I/rv/drmI8NNy0sAxYtGvAZNFCG7FZ355t CuOOcP4UcYtlGKXi6izA9lFpK0bQqfTVHmgpXLeivjh4LfUuUH2xvLZAG 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DPAQA2+GxY/4oNJK1VCRkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYM4AQEBAQEfX4EMB41QlEaHfo0kggUDHwuFeAIagTYVKhQBAgE?= =?us-ascii?q?BAQEBAQFjKIRoAQEBAwEBARgBCBE6CwwEAgEIEQQBAQECAiMDAgICHwYLFAEIC?= =?us-ascii?q?AIEAQ0FCBaINwMQCA4CrxaCJYdCDYJkAQEBAQEBAQEBAQEBAQEBAQEBAQEBGAW?= =?us-ascii?q?BC4U6g1uBBoJOO4EPBwMGAgECAy2CboJeBZo+EzgBhlWDEoMWSYNxgX8YhHCDS?= =?us-ascii?q?oYRh3+BdoQ7hA8BHzhoQy6DZAUcGIFGcgEBhXMBASQHgQOBDQEBAQ?= X-IronPort-AV: E=Sophos;i="5.33,459,1477958400"; d="scan'208";a="368318557" Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 04 Jan 2017 13:31:25 +0000 Received: from XCH-RCD-017.cisco.com (xch-rcd-017.cisco.com [173.37.102.27]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id v04DVOg2023335 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 4 Jan 2017 13:31:24 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-RCD-017.cisco.com (173.37.102.27) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 4 Jan 2017 07:31:23 -0600 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1210.000; Wed, 4 Jan 2017 07:31:23 -0600 From: "Tirumaleswar Reddy (tireddy)" To: Brandon Williams , Karl Stahl , "Pal Martinsen (palmarti)" Thread-Topic: SV: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery Thread-Index: AQHSTxkaN2BYgrSUakiGU6H6t4xJ+KEBz24AgANhBxCAF4kGgIAIrmYggANyuoD//51ssA== Date: Wed, 4 Jan 2017 13:31:23 +0000 Message-ID: <0b4d512c4e0e43c6bd87cd70888d9489@XCH-RCD-017.cisco.com> References: <521b142d7fd9482ca18102655d4ef4e6@XCH-RCD-017.cisco.com> <021701d2436e$4cee87d0$e6cb9770$@stahl@ingate.com> <03166323036f4cf187c0a67b9c183138@XCH-RCD-017.cisco.com> <034501d244e7$ad9ac060$08d04120$@stahl@ingate.com> <061301d248ea$12c01110$38403330$@stahl@ingate.com> <3cf392b265354926a46f8e70109df236@XCH-RCD-017.cisco.com> <065101d24958$64f42fc0$2edc8f40$@stahl@ingate.com> <7f4a0d29c1b844539a5d2b38ee699c38@XCH-RCD-017.cisco.com> <00a901d24c77$6a9b7d80$3fd27880$@stahl@ingate.com> <96701F1A-BE53-4A91-B0 FA-2BBAF7051651@cisco. com> <0726040555ad4275a2486f0aa8f9174d@XCH-RCD-017.cisco.com> <01d101d24f19$04a7fae0$0df7f0a0$@stahl@ingate.com> <5f464f75-5d00-a0b8-83cc-07e1b0f2ba25@akamai.com> <347f9a2f4d5e4970a17288e8ca33b882@XCH-RCD-017.cisco.com> <997ccf57-0634-c43e-22e2-a93f0ab75f5b@akamai.com> <03b17932e8824b5a9fd4a5d7c6baedc3@XCH-RCD-017.cisco.com> <31ce165e-a498-b024-7da2-e65413826504@akamai.com> In-Reply-To: <31ce165e-a498-b024-7da2-e65413826504@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.38.33] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "Prashanth Patil \(praspati\)" , "tram-chairs@ietf.org" , "Dan Wing \(dan@danwing.org\)" , 'Spencer Dawkins at IETF' , "tram@ietf.org" Subject: Re: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Jan 2017 13:31:35 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBCcmFuZG9uIFdpbGxpYW1zIFtt YWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tXQ0KPiBTZW50OiBXZWRuZXNkYXksIEph bnVhcnkgNCwgMjAxNyA2OjI4IFBNDQo+IFRvOiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkp IDx0aXJlZGR5QGNpc2NvLmNvbT47IEthcmwgU3RhaGwNCj4gPGthcmwuc3RhaGxAaW5nYXRlLmNv bT47IFBhbCBNYXJ0aW5zZW4gKHBhbG1hcnRpKSA8cGFsbWFydGlAY2lzY28uY29tPg0KPiBDYzog UHJhc2hhbnRoIFBhdGlsIChwcmFzcGF0aSkgPHByYXNwYXRpQGNpc2NvLmNvbT47IHRyYW0tY2hh aXJzQGlldGYub3JnOw0KPiAnU3BlbmNlciBEYXdraW5zIGF0IElFVEYnIDxzcGVuY2VyZGF3a2lu cy5pZXRmQGdtYWlsLmNvbT47IHRyYW1AaWV0Zi5vcmc7DQo+IERhbiBXaW5nIChkYW5AZGFud2lu Zy5vcmcpIDxkYW5AZGFud2luZy5vcmc+DQo+IFN1YmplY3Q6IFJlOiBTVjogW3RyYW1dIE1heWJl IHdlIGhhdmUgKEQpVExTIGNvbnNlbnN1czsgV0FTOiBkcmFmdC1pZXRmLQ0KPiB0cmFtLXR1cm4t c2VydmVyLWRpc2NvdmVyeQ0KPiANCj4gSGkgVGlydSwNCj4gDQo+ICA+DQo+ICA+IFllcywgdGhl c2UgYXR0YWNrcyBtYXkgbm90IGhhcHBlbiBpbiBhIGhvbWUgbmV0d29yay4gQnV0IHdlIGNhbm5v dA0KPiAgPiBleHBlY3QgdGhlIHJvYW1pbmcgY2xpZW50IHRvIGtlZXAgY2hhbmdpbmcgdGhlIHNl Y3VyaXR5IHBvc3R1cmUgYXMNCj4gID4gdGhlIGRldmljZSBhdHRhY2hlcyB0byBkaWZmZXJlbnQg bmV0d29ya3MuIEFuIGF2ZXJhZ2UgdXNlciBtYXkgbm90IGJlDQo+ICA+IGV2ZW4gYXdhcmUgb2Yg dGhlIHNlY3VyaXR5IHJpc2tzIHdoZW4gKEQpVExTIGlzIGRpc2FibGVkLg0KPiAgPg0KPiAgPiBX aGF0IGlzIHRoZSBkb3duc2lkZSBpZiAoRClUTFMgaXMgbWFuZGF0ZWQgPw0KPiAgPg0KPiANCj4g SSdkIGxpa2UgdG8gaGVhciBLYXJsJ3MgdGhvdWdodHMgb24gdGhhdC4gSSBhZ3JlZSB0aGF0IHVu YXV0aGVudGljYXRlZA0KPiAoRClUTFMgd291bGQgYmUgdGhlIG1vcmUgcmVsaWFibGUgd2F5IHRv IGdldCB0aGUgcmVxdWlyZWQgbWl0aWdhdGlvbiwNCj4gYnV0IGlmIGl0IGlzIHJlYXNvbmFibGUg dG8gc2F5IHRoYXQgc29tZSBuZXR3b3JrcyBkb24ndCByZXF1aXJlIGl0LCB3aHkNCj4gc2hvdWxk IHdlIG1hbmRhdGUgdGhlIG92ZXJoZWFkIG9mIChEKVRMUz8NCg0KUkZDNTc2NiBtYW5kYXRlcyBT VFVOIGF1dGhlbnRpY2F0aW9uIHRob3VnaCBpbiBzb21lIG5ldHdvcmtzIFRVUk4gY2xpZW50IGFu ZCBzZXJ2ZXIgbWF5IG5vdCBzdWZmZXIgdGhlIGF0dGFja3MgZGlzY3Vzc2VkIGluIHRoZSBhYm92 ZSBSRkMuIFRoaXMgZHJhZnQgaGFzIGFscmVhZHkgZG93bmdyYWRlZCBzZWN1cml0eSBieSBtYWtp bmcgVFVSTiBjbGllbnQgYW5kIHNlcnZlciBhdXRoZW50aWNhdGlvbiBvcHRpb25hbC4gRXZlbiBh IHNpbXBsZSBzcG9vZmVkIGF0dGFjayB0byBjbG9zZSB0aGUgYWxsb2NhdGlvbiBjYW5ub3QgYmUg ZGVmZW5kZWQgd2l0aG91dCAoRClUTFMuDQoNCkkgZG9uJ3QgdGhpbmsgcHJvdG9jb2xzIHNob3Vs ZCBtYWtlIHNlY3VyaXR5IG9wdGlvbmFsIGp1c3QgYmVjYXVzZSBpbiBzb21lIG5ldHdvcmtzIGF0 dGFja3MgbWF5IG5vdCBoYXBwZW4gIChqdXN0IGxpa2UgV2ViUlRDIG1hbmRhdGVzIFNSVFAgYnV0 IGluIG5ldHdvcmtzIHRoYXQgdXNlIE1BQ3NlYyBlbmNyeXB0aW5nIG1lZGlhIG1heSBub3QgYmUg cmVxdWlyZWQgd2hlbiBib3RoIHRoZSBwZWVycyBhcmUgaW4gdGhlIHNhbWUgbmV0d29yaykuIFRo ZXNlIGF0dGFja3MgbWF5IG5vdCBoYXBwZW4gdG9kYXkgYnV0IG1heSBoYXBwZW4gaW4gZnV0dXJl LCB0YXJnZXRlZCBhdHRhY2tzIGFyZSBpbmNyZWFzaW5nIGRheSBieSBkYXksIGFuZCBJIHNlZSBn cm93aW5nIG51bWJlciBvZiBpbnRlcm5hbCBhdHRhY2tzLiANCg0KLVRpcnUNCg0KPiANCj4gID4g SSB1bmRlcnN0YW5kLCBJIGNhbiBhZGQgdGhlIGZvbGxvd2luZyBuZXcgbGluZXM6DQo+ICA+DQo+ ICA+IEluIG9yZGVyIHRvIGFsbG93IHRoZSBUVVJOIGNsaWVudCB0byBzZWxlY3QgZmFsbGJhY2sg dG8gKEQpVExTIGFzDQo+ICA+IGRlc2NyaWJlZCBhYm92ZSwgYSBUVVJOIHNlcnZlciB0aGF0IGRv ZXMgbm90IHJlcXVpcmUgZWl0aGVyIFNUVU4gbG9uZw0KPiAgPiB0ZXJtIGF1dGhlbnRpY2F0aW9u IFtSRkM1Mzg5XSBvciBTVFVOIEV4dGVuc2lvbiBmb3IgVGhpcmQgUGFydHkNCj4gID4gQXV0aG9y aXphdGlvbiBbUkZDNzYzNV0gTVVTVCBzdXBwb3J0IChEKVRMUy4gU3VjaCBhIFRVUk4gc2VydmVy IE1BWQ0KPiAgPiBhbGxvdyBmYWxsYmFjayB0byBjbGVhciB0ZXh0IGJ1dCBmYWxsYmFjayB0byBj bGVhciB0ZXh0IGlzIE5PVA0KPiAgPiBSRUNPTU1FTkRFRCBiZWNhdXNlIGl0IG1ha2VzIHRoZSBj bGllbnQgbW9yZSBzdXNjZXB0aWJsZSB0bw0KPiAgPiBtYW4taW4tdGhlLW1pZGRsZSBhdHRhY2tz IGFuZCBvbi1wYXRoIHBhY2tldCBpbmplY3Rpb24uDQo+ICA+DQo+IA0KPiBUaGF0IGxvb2tzIGZp bmUgdG8gbWUsIGJ1dCBteSBwcm9wb3NlZCBlZGl0cyB3ZXJlIHJlYWxseSBhbiBhdHRlbXB0IHRv DQo+IGFkZHJlc3MgS2FybCdzIGNvbmNlcm5zLCBzbyBsZXQncyBzZWUgaWYgd2UgaGVhciBmcm9t IGhpbS4NCj4gDQo+IC0tQnJhbmRvbg0KPiANCj4gT24gMDEvMDIvMjAxNyAxMDoxNCBBTSwgVGly dW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSB3cm90ZToNCj4gPiBIaSBCcmFuZG9uLA0KPiA+DQo+ ID4gUGxlYXNlIHNlZSBpbmxpbmUNCj4gPg0KPiA+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0t LQ0KPiA+PiBGcm9tOiBCcmFuZG9uIFdpbGxpYW1zIFttYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bh a2FtYWkuY29tXQ0KPiA+PiBTZW50OiBXZWRuZXNkYXksIERlY2VtYmVyIDI4LCAyMDE2IDE6MTQg QU0NCj4gPj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28u Y29tPjsgS2FybCBTdGFobA0KPiA+PiA8a2FybC5zdGFobEBpbmdhdGUuY29tPjsgUGFsIE1hcnRp bnNlbiAocGFsbWFydGkpIDxwYWxtYXJ0aUBjaXNjby5jb20+DQo+ID4+IENjOiBQcmFzaGFudGgg UGF0aWwgKHByYXNwYXRpKSA8cHJhc3BhdGlAY2lzY28uY29tPjsgdHJhbS1jaGFpcnNAaWV0Zi5v cmc7DQo+ID4+ICdEYW4gV2luZycgPGRhbkBkYW53aW5nLm9yZz47ICdTcGVuY2VyIERhd2tpbnMg YXQgSUVURicNCj4gPj4gPHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPjsgdHJhbUBpZXRm Lm9yZw0KPiA+PiBTdWJqZWN0OiBSZTogU1Y6IFt0cmFtXSBNYXliZSB3ZSBoYXZlIChEKVRMUyBj b25zZW5zdXM7IFdBUzogZHJhZnQtaWV0Zi0NCj4gPj4gdHJhbS10dXJuLXNlcnZlci1kaXNjb3Zl cnkNCj4gPj4NCj4gPj4gVGhlIG9yaWdpbmFsIEkgcmVzcG9uZGVkIHRvIGRpZG4ndCBoYXZlIHRo ZSB0cmFtIGxpc3QgQ0NlZC4gQXBvbG9naWVzIHRvDQo+ID4+IHRob3NlIHdobyByZWNlaXZlIGR1 cGxpY2F0ZXMuDQo+ID4+DQo+ID4+IC0tDQo+ID4+DQo+ID4+IEhpIFRpcnUsDQo+ID4+DQo+ID4+ IFNvcnJ5IGFib3V0IHRoZSBkZWxheWVkIHJlc3BvbnNlLg0KPiA+Pg0KPiA+PiBJIHVuZGVyc3Rh bmQgdGhhdCB0aGUgcmVxdWlyZW1lbnRzIHlvdSBwcm9wb3NlIGFyZSB0byBwcm90ZWN0IHRoZQ0K PiA+PiBjbGllbnQuIE15IHBvaW50IGlzIHRoYXQgdGhlIGNsaWVudCBtaWdodCBub3QgcmVxdWly ZSBzdWNoIHByb3RlY3Rpb24gaW4NCj4gPj4gYWxsIGNhc2VzIGFuZCBpdCBzaG91bGQgYmUgdXAg dG8gdGhlIGNsaWVudCB0byBtYWtlIHRoYXQgZGV0ZXJtaW5hdGlvbi4NCj4gPj4gRm9yIGV4YW1w bGUsIGlmIGJvdGggdGhlIGNsaWVudCBhbmQgdGhlIHNlcnZlciBhcmUgb24gbXkgaG9tZSBuZXR3 b3JrLCBJDQo+ID4+IGRvbid0IHJlYWxseSBuZWVkIHRoZSBwcm90ZWN0aW9uIHRoYXQgKEQpVExT IHByb3ZpZGVzLg0KPiBjDQo+ID4+IFRoZSBzZXJ2ZXIgbXVzdA0KPiA+PiBzdXBwb3J0IHdoYXRl dmVyIHNlY3VyaXR5IHBvc3R1cmUgdGhlIGNsaWVudCByZXF1aXJlcywgYnV0IHRoZSBzZXJ2ZXIN Cj4gPj4gc2hvdWxkIG5vdCByZXF1aXJlIHRoZSBjbGllbnQgdG8gcHJvdGVjdCBpdHNlbGYgaW4g YSBwYXJ0aWN1bGFyIHdheS4NCj4gPg0KPiA+IFRoZSBUVVJOIHNlcnZlciBieXBhc3NlcyB0aGUg RW50ZXJwcmlzZSBmaXJld2FsbCBzZWN1cml0eSBhbmQgYWxsb3dzIHRyYWZmaWMNCj4gZnJvbSBv dXRzaWRlIHRvIGluc2lkZS4gQXMgeW91IGFscmVhZHkga25vdywgVFVSTiBwZXJtaXNzaW9ucyBt aW1pYyB0aGUNCj4gYWRkcmVzcy1yZXN0cmljdGVkIGZpbHRlcmluZyBtZWNoYW5pc20gb2YgTkFU LCBhbmQgaWYgdGhlIGNsaWVudCB3ZXJlIHRvIGNob29zZQ0KPiBzZWN1cml0eSBwb3N0dXJlIHRo YXQgZG9lcyBub3Qgb2ZmZXIgYW55IHNlY3VyaXR5IHRvIFRVUk4gbWVzc2FnZSAoYmVjYXVzZSBv Zg0KPiBiYWQgdXNlciBjb25maWd1cmF0aW9uIG9yIGEgbWFsd2FyZSBjbGllbnQgb24gdGhlIGVu ZHBvaW50KSwgaXQganVzdCByZW5kZXJzIHRoZQ0KPiBjbGllbnQgdG8gYmVjb21lIGEgdmljdGlt IG9mIERET1MgYXR0YWNrIChhbiBhdHRhY2tlciBjYW4gc2VuZHMgZmFrZWQNCj4gcGVybWlzc2lv bnMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGxhdW5jaCBhdHRhY2sgKERPUyBvciBERE9TKSBvbiB0 aGUgVFVSTg0KPiBjbGllbnQgYW5kIGl0IG51bGxpZmllcyB0aGUgc2VjdXJpdHkgYmVuZWZpdHMg b2ZmZXJlZCBieSBDcmVhdGVQZXJtaXNzaW9uKS4NCj4gPg0KPiA+IElmIHRoZSBUVVJOIHNlcnZl ciBtYW5kYXRlcyAoRClUTFMgdGhlbiB0aGUgYWJvdmUgYXR0YWNrIGlzIG5vdCBwb3NzaWJsZSBh bmQNCj4gd291bGQgcHJvdGVjdCBldmVuIGEgY29tcHJvbWlzZWQvbWlzLWNvbmZpZ3VyZWQgY2xp ZW50IGZyb20gRERPUyBhdHRhY2tzLg0KPiBJbiBzaG9ydCwgd2h5IHdvdWxkIGFuIEVudGVycHJp c2UgbmV0d29yayBhZG1pbmlzdHJhdG9yIHdhbnQgdG8gY29uZmlndXJlDQo+IFRVUk4gc2VydmVy IHRvIGJlIHVzZWQgaW4gdGhpcyBtb2RlIGluIHdoaWNoIGNsaWVudHMgY2FuIGJlIHN1YmplY3Rl ZCB0bw0KPiBERE9TIGF0dGFja3MgYW5kIHRoZSBUVVJOIHNlcnZlciBhbmQgRW50ZXJwcmlzZSBm aXJld2FsbCBjYW5ub3QgZG8gYW55dGhpbmcNCj4gdG8gcHJvdGVjdCB0aGUgY2xpZW50Lg0KPiA+ DQo+ID4+DQo+ID4+IFRoaXMgaXMgdGhlIGZvdW5kYXRpb24gZm9yIG15IHByb3Bvc2VkIGVkaXRz Lg0KPiA+DQo+IGM+DQo+ID4gLVRpcnUNCj4gPg0KPiA+Pg0KPiA+PiAtLUJyYW5kb24NCj4gPj4N Cj4gPj4gT24gMTIvMTMvMjAxNiAxMjoxNCBBTSwgVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5 KSB3cm90ZToNCj4gPj4+IEhpIEJyYW5kb24sDQo+ID4+Pg0KPiA+Pj4gVGhhbmtzIGZvciB0aGUg ZmVlZGJhY2suIFBsZWFzZSBzZWUgaW5saW5lDQo+ID4+Pg0KPiA+Pj4+IC0tLS0tT3JpZ2luYWwg TWVzc2FnZS0tLS0tDQo+ID4+Pj4gRnJvbTogQnJhbmRvbiBXaWxsaWFtcyBbbWFpbHRvOmJyYW5k b24ud2lsbGlhbXNAYWthbWFpLmNvbV0NCj4gPj4+PiBTZW50OiBTYXR1cmRheSwgRGVjZW1iZXIg MTAsIDIwMTYgMTA6MTMgUE0NCj4gPj4+PiBUbzogS2FybCBTdGFobCA8a2FybC5zdGFobEBpbmdh dGUuY29tPjsgVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KQ0KPiA+Pj4+IDx0aXJlZGR5QGNp c2NvLmNvbT47IFBhbCBNYXJ0aW5zZW4gKHBhbG1hcnRpKSA8cGFsbWFydGlAY2lzY28uY29tPg0K PiA+Pj4+IENjOiBQcmFzaGFudGggUGF0aWwgKHByYXNwYXRpKSA8cHJhc3BhdGlAY2lzY28uY29t PjsgdHJhbS0NCj4gY2hhaXJzQGlldGYub3JnOw0KPiA+Pj4+ICdEYW4gV2luZycgPGRhbkBkYW53 aW5nLm9yZz47ICdTcGVuY2VyIERhd2tpbnMgYXQgSUVURicNCj4gPj4+PiA8c3BlbmNlcmRhd2tp bnMuaWV0ZkBnbWFpbC5jb20+DQo+ID4+Pj4gU3ViamVjdDogUmU6IFNWOiBbdHJhbV0gTWF5YmUg d2UgaGF2ZSAoRClUTFMgY29uc2Vuc3VzOyBXQVM6IGRyYWZ0LWlldGYtDQo+ID4+Pj4gdHJhbS10 dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pg0KPiA+Pj4+IEknbSBub3Qgc3VyZSB3ZSdyZSBx dWl0ZSBhdCBjb25zZW5zdXMgeWV0IEthcmwsIGJ1dCBJIHRoaW5rIHdlJ3JlIGNsb3NlLg0KPiA+ Pj4+DQo+ID4+Pj4gSSBhZ3JlZSB0aGF0IHRoZSB0ZXh0IHlvdSBxdW90ZSBmcm9tIHRoZSBkb2Mg Y292ZXJzIHRoZSBjbGllbnQgc2lkZQ0KPiA+Pj4+IGNvbnNpZGVyYXRpb25zLCBhbmQgdGhhdCBm cmFtaW5nIGl0IGFzIHJlY29tbWVuZGF0aW9ucyByYXRoZXIgdGhhbg0KPiA+Pj4+IHJlcXVpcmVt ZW50cyBzdGlsbCBtYWtlcyBzZW5zZS4gSXQncyB1cCB0byB0aGUgY2xpZW50IHRvIGRlY2lkZSB3 aGljaA0KPiA+Pj4+IHNlY3VyaXR5IGVsZW1lbnRzIGFyZSByZXF1aXJlZCBmb3IgdGhlIGFwcGxp Y2F0aW9uIHVzZSBjYXNlLCBhbmQgdGhhdA0KPiA+Pj4+IHRleHQgd2FzIGludGVuZGVkIHRvIHBy b3ZpZGUgZ3VpZGFuY2Ugd2l0aG91dCB0cnlpbmcgdG8gZm9yY2UgYSBzZWN1cml0eQ0KPiA+Pj4+ IHBvc3R1cmUgdGhhdCBpcyBtb3JlIGNvbXBsaWNhdGVkIHRoYW4gdGhlIHVzZSBjYXNlIHJlcXVp cmVzLg0KPiA+Pj4NCj4gPj4+IFRoZSByZXF1aXJlbWVudHMgYXJlIHRvIHByb3RlY3QgdGhlIGNs aWVudCBmcm9tIHZhcmlvdXMgYXR0YWNrcy4NCj4gPj4+DQo+ID4+Pj4NCj4gPj4+PiBGb3IgdGhl IHNlcnZlciBzaWRlLCBpbiBvcmRlciB0byBhbGxvdyB0aGUgY2xpZW50IHRvIGZhbGwgYmFjayB0 bw0KPiA+Pj4+IChEKVRMUywgdGhlIFRVUk4gc2VydmVyIE1VU1Qgc3VwcG9ydCAoRClUTFMgYXQg bGVhc3QgZm9yIG9wcG9ydHVuaXN0aWMNCj4gPj4+PiBwcml2YWN5LiBUaGlzIGRvZXNuJ3QgbWVh biB0aGF0IHRoZSBzZXJ2ZXIgaGFzIHRvIHJlcXVpcmUgKEQpVExTLiBJdCBjYW4NCj4gPj4+PiBz dGlsbCBhbGxvdyBmYWxsYmFjayB0byBjbGVhcnRleHQgaWYgdGhlIGNsaWVudCBzbyBjaG9vc2Vz Lg0KPiA+Pj4+DQo+ID4+Pj4gU28sIEkgYWdyZWUgd2l0aCB5b3Ugb24gcmV2ZXJ0aW5nIHRoZSBN VVNUIGZvciB0aGUgY2xpZW50LCBhcyBsb25nIGFzIHdlDQo+ID4+Pj4gY29udGludWUgdG8gc3Ry b25nbHkgcmVjb21tZW5kIChEKVRMUyBhcyB0aGUgZmFsbGJhY2suIElmIHdlIGRvIHRoYXQNCj4g Pj4+PiB0aG91Z2gsIEkgdGhpbmsgd2UgbmVlZCB0byBtYWtlIGl0IGNsZWFyIHRoYXQgYSBUVVJO IHNlcnZlciBjb25maWd1cmVkDQo+ID4+Pj4gdG8gYWxsb3cgc2Vzc2lvbnMgd2l0aG91dCBTVFVO IGF1dGggTVVTVCBzdXBwb3J0IChEKVRMUyBzbyB0aGF0IHRoZQ0KPiA+Pj4+IGNsaWVudCBoYXMg dGhlIG9wdGlvbiBvZiAoRClUTFMgZmFsbGJhY2suDQo+ID4+Pj4NCj4gPj4+PiBJIHRoaW5rIHdl IGFyZSBhZ3JlZWluZyB0byB0aGlzIGNoYW5nZS4NCj4gPj4+Pg0KPiA+Pj4+IE9MRDoNCj4gPj4+ Pg0KPiA+Pj4+ICJBIFRVUk4gY2xpZW50IE1VU1QgdXNlIChEKVRMUyBpbiB0aGUgYWJzZW5jZSBv ZiAuLi4iDQo+ID4+Pj4NCj4gPj4+PiBORVc6DQo+ID4+Pj4NCj4gPj4+PiAiQSBUVVJOIGNsaWVu dCBTSE9VTEQgdXNlIChEKVRMUyBpbiB0aGUgYWJzZW5jZSBvZiAuLi4iDQo+ID4+Pj4NCj4gPj4+ PiBBbmQgSSBhbSBwcm9wb3NpbmcgdGhlIGFkZGl0aW9uIG9mIHRoaXMgcGFyYWdyYXBoIGF0IHRo ZSBlbmQgb2YgdGhlDQo+ID4+Pj4gc2VjdGlvbiA5LCBqdXN0IGJlZm9yZSBzZWN0aW9uIDkuMS4N Cj4gPj4+Pg0KPiA+Pj4+ICJJbiBvcmRlciB0byBhbGxvdyB0aGUgVFVSTiBjbGllbnQgdG8gc2Vs ZWN0IGZhbGxiYWNrIHRvIChEKVRMUyBhcw0KPiA+Pj4+IGRlc2NyaWJlZCBhYm92ZSwgYSBUVVJO IHNlcnZlciB0aGF0IGRvZXMgbm90IHJlcXVpcmUgZWl0aGVyIFNUVU4gbG9uZw0KPiA+Pj4+IHRl cm0gYXV0aGVudGljYXRpb24gW1JGQzUzODldIG9yIFNUVU4gRXh0ZW5zaW9uIGZvciBUaGlyZCBQ YXJ0eQ0KPiA+Pj4+IEF1dGhvcml6YXRpb24gW1JGQzc2MzVdIE1VU1Qgc3VwcG9ydCAoRClUTFMu IFN1Y2ggYSBUVVJOIHNlcnZlciBNQVkNCj4gPj4gYWxzbw0KPiA+Pj4+IGFsbG93IGZhbGxiYWNr IHRvIGNsZWFyIHRleHQuIg0KPiA+Pj4NCj4gPj4+IFsxXSBJIGFncmVlIHdpdGggdGhlIGFib3Zl IHRleHQgZXhjZXB0IGZvciB0aGUgbGFzdCBsaW5lIGluIHRoZSBhYm92ZQ0KPiA+PiBwYXJhZ3Jh cGguIElmIHRoZSBUVVJOIHNlcnZlciBhbGxvd3MgZmFsbGJhY2sgdG8gY2xlYXIgdGV4dCB0aGVu IHRoZSBhdHRhY2tlcg0KPiA+PiBjYW4gc3ViamVjdCB0aGUgVFVSTiBjbGllbnQgdG8gdmFyaW91 cyBhdHRhY2tzLiBGb3IgZXhhbXBsZSwgYXR0YWNrZXIgc2VuZHMNCj4gPj4gZmFrZWQgcGVybWlz c2lvbnMgdG8gdGhlIFRVUk4gc2VydmVyIHRvIGxhdW5jaCBhdHRhY2sgKERPUyBvciBERE9TKSBv bg0KPiB0aGUNCj4gPj4gVFVSTiBjbGllbnQgYW5kIGl0IG51bGxpZmllcyB0aGUgc2VjdXJpdHkg YmVuZWZpdHMgb2ZmZXJlZCBieQ0KPiBDcmVhdGVQZXJtaXNzaW9uLg0KPiA+PiBUaGUgdmljdGlt IGluIHRoaXMgbW9kZSBpcyB0aGUgVFVSTiBjbGllbnQgYW5kIG5vdCB0aGUgVFVSTiBzZXJ2ZXIs IGFuZA0KPiBoZW5jZQ0KPiA+PiBpdCBpcyBtb3JlIGltcG9ydGFudCBmb3IgdGhlIGNsaWVudCB0 byB1c2UgKEQpVExTIHRvIHByb3RlY3QgaXRzZWxmIGZyb20NCj4gYXR0YWNrcy4NCj4gPj4+DQo+ ID4+PiBXaGVuIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkgdGhhdCBpbiBjbGVhciB0ZXh0IG1vZGUg dGhlIFRVUk4gY2xpZW50cyBjYW4gYmUNCj4gPj4gc3ViamVjdGVkIHRvIHZhcmlvdXMgYXR0YWNr cywgd2h5IHdvdWxkIGFuIFRVUk4gc2VydmVyIGFkbWluaXN0cmF0b3Igd2FudA0KPiB0bw0KPiA+ PiBhbGxvdyBmYWxsYmFjayB0byBjbGVhciB0ZXh0ICA/DQo+ID4+Pg0KPiA+Pj4gWzJdIEFuZCB3 aGF0IHByb2JsZW1zIGRvIHlvdSBzZWUgd2l0aCB0aGUgZm9sbG93aW5nIG5ldyBwcm9wb3NlZCB0 ZXh0ID8NCj4gPj4+ICJJbiB0aGUgYWJzZW5jZSBvZiBTVFVOIGxvbmctdGVybSBjcmVkZW50aWFs IG1lY2hhbmlzbSBbUkZDNTM4OV0gb3INCj4gU1RVTg0KPiA+PiBFeHRlbnNpb24gZm9yIFRoaXJk LVBhcnR5IEF1dGhvcml6YXRpb24gW1JGQzc2MzVdLCBhIFRVUk4gY2xpZW50IE1VU1QgdXNlDQo+ ID4+IChEKVRMUyBhbmQgaWYgKEQpVExTIGF1dGhlbnRpY2F0aW9uIHRvIHZhbGlkYXRlIHRoZSBU VVJOIHNlcnZlciBpZGVudGl0eSBpcw0KPiBub3QNCj4gPj4gcG9zc2libGUgdGhlbiB0aGUgVFVS TiBjbGllbnQgTVVTVCBmYWxsYmFjayB0byBlbmNyeXB0aW9uLW9ubHkgKEQpVExTLiINCj4gPj4+ DQo+ID4+PiAtVGlydQ0KPiA+Pj4NCj4gPj4+Pg0KPiA+Pj4+IC0tQnJhbmRvbg0KPiA+Pj4+DQo+ ID4+Pj4gT24gMTIvMDUvMjAxNiAxMTo1OSBBTSwgS2FybCBTdGFobCB3cm90ZToNCj4gPj4+Pj4g QWxsIEkgd2FudCB0byBkbyBpbiB0aGUgKEQpVExTIGRpc2N1c3Npb24gaXMgdG8gZGVsZXRlIHRo ZSBzZW50ZW5jZSDigJxBDQo+ID4+Pj4+IFRVUk4gY2xpZW50IE1VU1QgdXNlIChEKVRMUyBpbiB0 aGUgYWJzZW5jZSBvZiBTVFVOIGxvbmctdGVybQ0KPiBjcmVkZW50aWFsDQo+ID4+Pj4+IG1lY2hh bmlzbSBbUkZDNTM4OV0gb3IgU1RVTiBFeHRlbnNpb24gZm9yIFRoaXJkLVBhcnR5IEF1dGhvcml6 YXRpb24NCj4gPj4+Pj4gW1JGQzc2MzVdLuKAnSB1bmRlciA5LiAgU2VjdXJpdHkgQ29uc2lkZXJh dGlvbnN0aGF0IHdhcyB0aHJvd24taW50bw0KPiA+Pj4+PiB2ZXJzaW9uIC0xMCBkdXJpbmcgdGhl IGRpc2N1c3MuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICoqV2UgbGVhdmUg YWxsIHRoZSByZXN0IHJlZ2FyZGluZyAoRClUTFMgYXMgaXQgaGFzIGJlZW4gc2luY2UgdmVyc2lv biAtNw0KPiA+Pj4+PiBvZiB0aGlzIGRyYWZ0LioqDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IEJyYW5kb24sDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+IEkgc2VlIHRoZXJlIGFscmVhZHkgYXJlIHRoZSAoZ2VuZXJhbCkgU0hP VUxEIG9yIFJFQ09NTUVORCB0aGF0IHlvdQ0KPiA+Pj4+PiB3YW50ZWQgKEkgZGlkIG5vdCBzdWdn ZXN0IHRvIGNoYW5nZSB0aG9zZSDigJMgdGhleSBhcmUgdGhlcmUgc2luY2UgdmVyc2lvbg0KPiA+ Pj4+PiAtNyBJIGJlbGlldmUpOiDigJxJdCBpcyBSRUNPTU1FTkRFRCB0aGF0IHRoZSBUVVJOIGNs aWVudCB1c2Ugb25lIG9mIHRoZQ0KPiA+Pj4+PiBmb2xsb3dpbmcgdGVjaG5pcXVlcyB3aXRoIChE KVRMUyB0byB2YWxpZGF0ZSB0aGUgVFVSTiBzZXJ2ZXI64oCdIGFuZA0KPiA+PiBmdXJ0aGVy4oCm DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IGZv ciBUaXJ1LCB0aGlzIGlzIGFscmVhZHkgaW4gdGhlIGRyYWZ0IHNpbmNlIC03IGFuZCBJIGFtIG5v dCBzdWdnZXN0aW5nDQo+ID4+Pj4+IHRvIGNoYW5nZSB0aGF0Og0KPiA+Pj4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+Pg0KPiA+Pj4+PiDigJwgICBBbiBhdXRvLWRpc2NvdmVyZWQgVFVSTiBzZXJ2ZXIgaXMg Y29uc2lkZXJlZCB0byBiZSBvbmx5IGFzIHRydXN0ZWQNCj4gYXMNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgdGhlIHBhdGggYmV0d2VlbiB0aGUgY2xpZW50IGFuZCB0aGUgVFVSTiBzZXJ2ZXIuICBJbiBv cmRlciB0byBzYWZlbHkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgdXNlIGF1dG8tZGlzY292ZXJlZCBU VVJOIHNlcnZlcnMgZm9yIHNlc3Npb25zIHdpdGggJ3N0cmljdCBwcml2YWN5Jw0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICByZXF1aXJlbWVudHMsIHRoZSB1c2VyIG5lZWRzIHRvIGJlIGFibGUgdG8gZGVm aW5lIHByaXZhY3kgY3JpdGVyaWENCj4gPj4+Pj4NCj4gPj4+Pj4gICAgKGUuZy4gIGEgdHJ1c3Rl ZCBsaXN0IG9mIHNlcnZlcnMsIG5ldHdvcmtzLCBvciBkb21haW5zKSB0aGF0IGFyZQ0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICBjb25zaWRlcmVkIGFjY2VwdGFibGUgZm9yIHN1Y2ggdHJhZmZpYy4gIEFu eSBkaXNjb3ZlcmVkIFRVUk4gc2VydmVyDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIG91dHNpZGUgdGhl IGNyaXRlcmlhIGlzIGNvbnNpZGVyZWQgdW50cnVzdGVkIGFuZCB0aGVyZWZvcmUgTVVTVCBOT1QN Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgYmUgdXNlZCBmb3IgcHJpdmFjeSBzZW5zaXRpdmUgY29tbXVu aWNhdGlvbi4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgSW4gc29tZSBh dXRvLWRpc2NvdmVyeSBzY2VuYXJpb3MsIGl0IG1pZ2h0IG5vdCBiZSBwb3NzaWJsZSBmb3IgdGhl DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIFRVUk4gY2xpZW50IHRvIHVzZSAoRClUTFMgYXV0aGVudGlj YXRpb24gdG8gdmFsaWRhdGUgdGhlIFRVUk4gc2VydmVyLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBI b3dldmVyLCBmYWxsLWJhY2sgdG8gY2xlYXIgdGV4dCBpbiBzdWNoIGNhc2VzIGNvdWxkIGxlYXZl IHRoZSBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIGNsaWVudCBvcGVuIHRvIG9uLXBhdGggaW5q ZWN0aW9uIG9mIHNwb29mZWQgVFVSTiBtZXNzYWdlcy4gIEluc3RlYWQsDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgIHdpdGggYW4gZXhwbGljaXQgYWRtaW5pc3RyYXRvciBjaG9pY2UsIGEgVFVSTiBjbGll bnQgU0hPVUxEIGZhbGwtYmFjaw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICB0byBlbmNyeXB0aW9uLW9u bHkgKEQpVExTIHdoZW4gKEQpVExTIGF1dGhlbnRpY2F0aW9uIGlzIG5vdA0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICBhdmFpbGFibGUuICBBbm90aGVyIHJlYXNvbiB0byBmYWxsLWJhY2sgdG8gZW5jcnlw dGlvbi1vbmx5IGlzIGZvcg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBwcml2YWN5LCB3aGljaCBpcyBh bmFsb2dvdXMgdG8gU01UUCBvcHBvcnR1bmlzdGljIGVuY3J5cHRpb24NCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgW1JGQzc0MzVdIHdoZXJlIG9uZSBkb2VzIG5vdCByZXF1aXJlIHByaXZhY3kgYnV0IG9u ZSBkZXNpcmVzIHByaXZhY3kNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgd2hlbiBwb3NzaWJsZS4NCj4g Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgSXQgaXMgc3VnZ2VzdGVkIHRoYXQg YSBUVVJOIGNsaWVudCBhdHRlbXB0IChEKVRMUyB3aXRoIGF1dGhlbnRpY2F0aW9uDQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgIGFuZCBlbmNyeXB0aW9uLCBmYWxsaW5nIGJhY2sgdG8gZW5jcnlwdGlvbi1v bmx5IGlmIHRoZSBUVVJOIHNlcnZlcg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBjYW5ub3QgYmUgYXV0 aGVudGljYXRlZCB2aWEgKEQpVExTLiAgQSBUVVJOIGNsaWVudCBjb3VsZCBmYWxsIGJhY2sgdG8N Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgY2xlYXIgdGV4dCwgd2l0aCBhbiBleHBsaWNpdCBhZG1pbmlz dHJhdG9yIGNob2ljZSwgaWYgaXQgZG9lcyBub3QNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgc3VwcG9y dCB1bmF1dGhlbnRpY2F0ZWQgKEQpVExTLCBidXQgZmFsbGJhY2sgdG8gY2xlYXIgdGV4dCBpcyBO T1QNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgUkVDT01NRU5ERUQgYmVjYXVzZSBpdCBtYWtlcyB0aGUg Y2xpZW50IG1vcmUgc3VzY2VwdGlibGUgdG8gbWFuLQ0KPiA+PiBpbi0NCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgdGhlLW1pZGRsZSBhdHRhY2tzIGFuZCBvbi1wYXRoIHBhY2tldCBpbmplY3Rpb24uDQo+ ID4+Pj4+DQo+ID4+Pj4+IOKAnQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+Pg0KPiA+Pj4+PiAqKlRpcnUg4oCTIEJlbG93IHlvdSBhcmUgcG9pbnRpbmcgYXQgdGhl IC0xMCB2ZXJzaW9uIGNoYW5nZXMgdGhhdCBXRSBBUkUNCj4gPj4+Pj4gZGlzY3Vzc2luZyBoZXJl LioqDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IFByYXNwYW50aCBwdXQgdGhl bSBvbiB0aGUgdGFibGUgYWdhaW4gYW5kIEkgYnJvdWdodCB1cCB0aGF0IHRoZQ0KPiA+Pj4+Pg0K PiA+Pj4+PiDigJxBIFRVUk4gY2xpZW50IE1VU1QgdXNlIChEKVRMUyBpbiB0aGUgYWJzZW5jZSBv ZiBTVFVOIGxvbmctdGVybQ0KPiA+Pj4+PiBjcmVkZW50aWFsIG1lY2hhbmlzbSBbUkZDNTM4OV0g b3IgU1RVTiBFeHRlbnNpb24gZm9yIFRoaXJkLVBhcnR5DQo+ID4+Pj4+IEF1dGhvcml6YXRpb24g W1JGQzc2MzVdLuKAnQ0KPiA+Pj4+Pg0KPiA+Pj4+PiBtdXN0IGdvIGF3YXkgKGxlYXZlIHRoZSBy ZXN0KSwgc2luY2UgaXQgZWZmZWN0aXZlbHkgZm9yYmlkcyBUVVJOIHNlcnZlcnMNCj4gPj4+Pj4g cHJvdmlkZWQgYnkgdGhlIGxvY2FsIGFuZCBhY2Nlc3MgbmV0d29yay4NCj4gPj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gQnJhbmRvbiBoYWQgYWdyZWVkIHRoYXQgTVVTVCBzaG91bGQg Z28gYXdheSwgd2hlbiB5b3UganVtcGVkIGluDQo+IHdpdGgNCj4gPj4+PiB0aGUNCj4gPj4+Pj4g YXR0YWNrcyBhcmd1bWVudHMsIHdoZW4gd2Ugd2VyZSBkaXNjdXNzaW5nIHdoZXRoZXIgdGhlcmUg c2hvdWxkIHN0aWxsDQo+IGJlDQo+ID4+Pj4+IGEgU0hPVUxEIG9yIFJFQ09NTUVORC4g4oCTIFRo ZW4geW91IGdvdCBtZSAoYW5kIG90aGVycz8pIGxvc3QsDQo+IGFuZOKApi4NCj4gPj4+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gU28gY2F0Y2ggdXAgZnJvbSBwb2ludCAoMSkgb2YgbXk6 DQo+ID4+Pj4+DQo+ID4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIv dHJhbS9jdXJyZW50L21zZzAyMjE2Lmh0bWwNCj4gPj4+Pj4gPGh0dHBzOi8vdXJsZGVmZW5zZS5w cm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4gM0FfX3d3dy5pZXRmLm9yZ19tYWls LQ0KPiA+Pj4+DQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAyMjE2Lmh0 bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+Pj4+IHcwRjRqcE42TFpnJnI9YndaLW5uUkdX bWNHS1JJdWFkcTYtDQo+ID4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+ Pj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1OdFJad3JtbjJLLQ0K PiA+Pj4+IFdVSV9RTjVrX3lIbEFOLXV6aG9RVThiczJ5QV9SQlA4JmU9Pg0KPiA+Pj4+Pg0KPiA+ Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiBBbmQgeW91IG1heSBub3RpY2UgdGhhdCBp bg0KPiA+Pj4+Pg0KPiA+PiBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL3Ry YW0vM3N2TzlkakZ4ZVp5VHROc2dxUWY4ekNUaVZZDQo+ID4+Pj4+IDxodHRwczovL3VybGRlZmVu c2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4NCj4gPj4NCj4gM0FfX21h aWxhcmNoaXZlLmlldGYub3JnX2FyY2hfbXNnX3RyYW1fM3N2TzlkakZ4ZVp5VHROc2dxUWY4ekNU aVZZJmQ9DQo+ID4+Pj4gRGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZyPWJ3Wi1ublJH V21jR0tSSXVhZHE2LQ0KPiA+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+ Pj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9U0xqeXN3ZG4tDQo+ ID4+Pj4gb1pfYWV2MHBSeEQzaDZjNGFLYkVRWjNjX2tMOV9jY0hHTSZlPT4NCj4gPj4+Pj4gdGhh dCB5b3UgcmVmZXJyZWQgdG8NCj4gPj4+Pj4NCj4gPj4+Pj4g4oCcTWFraW5nIFNUVU4gYXV0aGVu dGljYXRpb24gT1BUSU9OQUzigJ0NCj4gPj4+Pj4NCj4gPj4+Pj4gaXMgQUxSRUFEWSBDT01QRU5T QVRFRCBmb3IgYnkg4oCcSVAgYWRkcmVzcyBhdXRoZW50aWNhdGlvbuKAnSAodGhlDQo+ID4+Pj4+ IGZvdW5kYXRpb24gb2YgdG9kYXnigJlzIElQIHRlbGVwaG9ueSBhdXRoZW50aWNhdGlvbik6DQo+ ID4+Pj4+DQo+ID4+Pj4+IOKAnEEgVFVSTiBzZXJ2ZXIgaW4gc3VjaCBjYXNlcyBtdXN0IGJlIGNv bmZpZ3VyZWQgdG8gb25seSBwcm9jZXNzIFNUVU4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgcmVxdWVz dHMgZnJvbSB0aGUgdHJ1c3RlZCBsb2NhbCBuZXR3b3JrIG9yIHN1YnNjcmliZXJzIG9mIHRoZSBh Y2Nlc3MNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgbmV0d29yay4gT3BlcmF0aW9uYWwgbWVhc3VyZXMg bXVzdCBiZSB0YWtlbiBpbiBvcmRlciBwcm90ZWN0IHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICBU VVJOIHNlcnZlcjsgc29tZSBvZiB0aGVzZSBtZWFzdXJlcyBpbmNsdWRlLCBidXQgbm90IGxpbWl0 ZWQgdG8sDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIGFjY2VzcyBjb250cm9sIGJ5IG1lYW5zIG9mIGFj Y2Vzcy1saXN0cywgZmlyZXdhbGxzLCBzdWJzY3JpYmVyIHF1b3RhDQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgIGxpbWl0cywgaW5ncmVzcyBmaWx0ZXJpbmcgZXRjLuKAnQ0KPiA+Pj4+Pg0KPiA+Pj4+PiB3 aGVyZSDigJ1maXJld2FsbHPigJ0gc3BlY2lmaWNhbGx5IGFwcGxpZXMgdG8gVFVSTiBzZXJ2ZXJz IHRoYXQgbG9jYWwgb3INCj4gPj4+Pj4gYWNjZXNzIG5ldHdvcmsgcHJvdmlkZXJzIGFsbG93IG9u bHkgdGhlaXIgb3duIHVzZXJzIHRvIGFjY2Vzcy4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4gQW5kIEF1dGhvcuKAmXM6IOKAnFBsZWFzZSByZWZlcg0KPiA+Pj4+PiBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVy eS0NCj4gPj4gMTAjc2VjdGlvbi0NCj4gPj4+PiA5DQo+ID4+Pj4+IDxodHRwczovL3VybGRlZmVu c2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4gM0FfX3Rvb2xzLmlldGYu b3JnX2h0bWxfZHJhZnQtMkRpZXRmLTJEdHJhbS0yRHR1cm4tMkRzZXJ2ZXItDQo+ID4+IDJEZGlz Y292ZXJ5LQ0KPiA+Pj4+IDJEMTAtMjNzZWN0aW9uLTJEOSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0 dzBGNGpwTjZMWmcmcj1id1otDQo+ID4+Pj4gbm5SR1dtY0dLUkl1YWRxNi1OU25zZ3diQlZVSmE0 bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4+Pg0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0aG5oRW9t WGhRSzd4UUVpa3pBdXBSOCZzPWIwZkoxQU5xaEU4QzJCcmxuR1kzaVcNCj4gPj4+PiBDd1ZFcjJP aFl5RmxFX19vT0h0U0UmZT0+Zm9yDQo+ID4+Pj4+IG1vcmUgZGV0YWlscy7igJ0NCj4gPj4+Pj4N Cj4gPj4+Pj4gYWxyZWFkeSAoc2luY2UgdmVyc2lvbiAtNyBJIHRoaW5rKSBpbiBkZXRhaWwgZGlz Y3Vzc2VzIHRoZSAoRClUTFMNCj4gPj4+Pj4gaW1wbGljYXRpb25zIGluIHRoaXMgY29udGV4dCAo dGhhdCB5b3UgYXJlIHJlZG9pbmcpLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ PiBQbGVhc2UsIGFnYWluLCBsZXQgdXMgc3RheSB3aXRoIHRoZSBjb25zZW5zdXMgc2luY2UgdmVy c2lvbiAtNyBvZiB0aGlzDQo+ID4+Pj4+IGRyYWZ0OiBObyAoRClUTFMgbWFuZGF0ZS4NCj4gPj4+ Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gVGhhbmtzLA0KPiA+Pj4+Pg0KPiA+Pj4+PiBL YXJsDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICpGcsOlbjoqVGlydW1hbGVz d2FyIFJlZGR5ICh0aXJlZGR5KSBbbWFpbHRvOnRpcmVkZHlAY2lzY28uY29tXQ0KPiA+Pj4+PiAq U2tpY2thdDoqIGRlbiA0IGRlY2VtYmVyIDIwMTYgMDg6MzMNCj4gPj4+Pj4gKlRpbGw6KiBQYWwg TWFydGluc2VuIChwYWxtYXJ0aSk7IEthcmwgU3RhaGw7IHRyYW0gbWFpbGluZyBsaXN0DQo+ID4+ Pj4+ICpLb3BpYToqIEJyYW5kb24gV2lsbGlhbXM7IFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkp Ow0KPiA+Pj4+PiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYu b3JnPjsgRGFuIFdpbmc7IFNwZW5jZXINCj4gPj4+Pj4gRGF3a2lucyBhdCBJRVRGDQo+ID4+Pj4+ ICrDhG1uZToqIFJFOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVy eQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiBQcmFzaGFudGggaGFzIGFscmVh ZHkgc3VtbWFyaXplZCB0aGUgY2hhbmdlcyBkb25lIHRvIGRyYWZ0IGR1cmluZw0KPiBJU0VHDQo+ ID4+Pj4+IHJldmlldyBpbg0KPiA+Pj4+Pg0KPiA+PiBodHRwczovL21haWxhcmNoaXZlLmlldGYu b3JnL2FyY2gvbXNnL3RyYW0vM3N2TzlkakZ4ZVp5VHROc2dxUWY4ekNUaVZZDQo+ID4+Pj4+IDxo dHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4N Cj4gPj4NCj4gM0FfX21haWxhcmNoaXZlLmlldGYub3JnX2FyY2hfbXNnX3RyYW1fM3N2TzlkakZ4 ZVp5VHROc2dxUWY4ekNUaVZZJmQ9DQo+ID4+Pj4gRGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0anBO NkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlC WGcmbT1MWGFILQ0KPiA+Pj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4 JnM9U0xqeXN3ZG4tDQo+ID4+Pj4gb1pfYWV2MHBSeEQzaDZjNGFLYkVRWjNjX2tMOV9jY0hHTSZl PT4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gS2FybOKAmXMg Y29tbWVudCBpcyB0byBub3QgbWFuZGF0ZSAoRClUTFMsIGFuZCB3ZSBkb27igJl0IGFncmVlIHdp dGggaGltLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiBSZXF1ZXN0IHlvdSwg V0cgbWVtYmVycywgV0cgY2hhaXJzIGFuZCBBRCB0byBzaGFyZSB0aGVpciB0aG91Z2h0cw0KPiBv bg0KPiA+Pj4+PiBtYW5kYXRpbmcgdGhlIHVzZSBvZiAoRClUTFMgd2hlbiBTVFVOIGF1dGhlbnRp Y2F0aW9uIGlzIG5vdCB1c2VkIHRvDQo+ID4+Pj4+IGhhbmRsZSB0aGUgdGhyZWF0cyBkaXNjdXNz ZWQgaW4gUkZDNTc2Ni4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gLVRpcnUN Cj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gKkZyb206KlBhbCBNYXJ0aW5zZW4g KHBhbG1hcnRpKQ0KPiA+Pj4+PiAqU2VudDoqIEZyaWRheSwgRGVjZW1iZXIgMiwgMjAxNiAxMToy NyBQTQ0KPiA+Pj4+PiAqVG86KiBLYXJsIFN0YWhsIDxrYXJsLnN0YWhsQGluZ2F0ZS5jb20NCj4g PG1haWx0bzprYXJsLnN0YWhsQGluZ2F0ZS5jb20+PjsNCj4gPj4+Pj4gdHJhbSBtYWlsaW5nIGxp c3QgPHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPj4NCj4gPj4+Pj4gKkNjOiog VGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSA8dGlyZWRkeUBjaXNjby5jb20NCj4gPj4+Pj4g PG1haWx0bzp0aXJlZGR5QGNpc2NvLmNvbT4+OyBCcmFuZG9uIFdpbGxpYW1zDQo+ID4+Pj4+IDxi cmFuZG9uLndpbGxpYW1zQGFrYW1haS5jb20NCj4gPj4gPG1haWx0bzpicmFuZG9uLndpbGxpYW1z QGFrYW1haS5jb20+PjsNCj4gPj4+Pj4gUHJhc2hhbnRoIFBhdGlsIChwcmFzcGF0aSkgPHByYXNw YXRpQGNpc2NvLmNvbQ0KPiA+Pj4+PiA8bWFpbHRvOnByYXNwYXRpQGNpc2NvLmNvbT4+OyB0cmFt LWNoYWlyc0BpZXRmLm9yZw0KPiA+Pj4+PiA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsg RGFuIFdpbmcgPGRhbkBkYW53aW5nLm9yZw0KPiA+Pj4+PiA8bWFpbHRvOmRhbkBkYW53aW5nLm9y Zz4+OyBTcGVuY2VyIERhd2tpbnMgYXQgSUVURg0KPiA+Pj4+PiA8c3BlbmNlcmRhd2tpbnMuaWV0 ZkBnbWFpbC5jb20NCj4gPj4+PiA8bWFpbHRvOnNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29t Pj4NCj4gPj4+Pj4gKlN1YmplY3Q6KiBSZTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNl cnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gSGkgS2Fy bCAoYW5kIHRyYW1zdGVycyksDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IEkg YW0gc3ltcGF0aGV0aWMgdG8geW91ciBhcmd1bWVudHMgYnV0IHRoZXkgbWlnaHQgaGF2ZSBiZWVu IGxvc3QNCj4gPj4+Pj4gc29tZXdoZXJlIGluIHRoZSBlbWFpbCB0aHJlYWQgKEEgbWl4IG9mIHF1 b3RpbmcsIHJlcGVhdGluZyBhbmQgaW5saW5lDQo+ID4+Pj4+IGNvbW1lbnRpbmcgaGF2ZSBhdCBs ZWFzdCBtYWRlIG15IGVtYWlsIGNsaWVudCBzb21ld2hhdCBjb25mdXNlZC4pDQo+ID4+Pj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IFRoZSBiZXN0IHRoaW5nIHlvdSBjYW4gZG8gYXQgdGhp cyBtb21lbnQgaXMgdG8gcHJvdmlkZSB0ZXh0LiBJIHN1Z2dlc3QNCj4gPj4+Pj4geW91IHdyaXRl IHVwIGEgZHJhZnQgYXMgYSBjb3VudGVyIHByb3Bvc2FsIGFuZCBzdWJtaXQgaXQuIEluIHRoYXQg d2F5DQo+ID4+Pj4+IHRoZSBXRyBtZW1iZXJzIGNhbiByZWFkIHRocm91Z2ggYW5kIGNvbW1lbnQu DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IEkgZW5jb3VyYWdlIHRoZSBXRyBj aGFpcnMgdG8gZ2l2ZSBLYXJsIGVub3VnaCB0aW1lIHRvIHdyaXRlIHRoaXMgdXAsDQo+ID4+Pj4+ IGJlZm9yZSBwcm9ncmVzc2luZyB0aGUgb3RoZXIgZHJhZnQuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+IC4tLg0KPiA+Pj4+Pg0KPiA+Pj4+PiBQ w6VsLUVyaWsNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIE9uIDIgRGVj IDIwMTYsIGF0IDA5OjM4LCBLYXJsIFN0YWhsIDxrYXJsLnN0YWhsQGluZ2F0ZS5jb20NCj4gPj4+ Pj4gICAgIDxtYWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29tPj4gd3JvdGU6DQo+ID4+Pj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICBIaSBUaXJ1LA0KPiA+Pj4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgSSBhbSB0cnlpbmcgdG8gbWFrZSB0aGUgcG9pbnQgdGhhdCB0 aGVyZSBpcyBubyBvcHRpb24gZm9yIHRoaXMNCj4gPj4+Pj4gICAgIGRyYWZ0LCBzdXBwb3NlZCB0 byBmdWxmaWxsOg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgKlt0cmFtXSBNaWxlc3RvbmUgMzogVFVS TiBzZXJ2ZXIgYXV0by1kaXNjb3ZlcnkgbWVjaGFuaXNtIGZvcg0KPiA+Pj4+PiAgICAgZW50ZXJw cmlzZSBhbmQgSVNQcyoNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIHRvIHJlc3VsdCBpbjog4oCcV2Ug Zm9yYmlkIHVzYWdlIG9mIHN1Y2ggKHllbGxvdykgbmV0d29yayBwcm92aWRlZA0KPiA+Pj4+PiAg ICAgVFVSTiBzZXJ2ZXJzICh1c2UgZ3JheSBvciBncmF5aXNoIFRVUk4gc2VydmVycyBpbnN0ZWFk KeKAnSwgIHdoaWNoIGlzDQo+ID4+Pj4+ICAgICB0aGUgY29uc2VxdWVuY2Ugb2YgbWFuZGF0aW5n IChEKVRMUy4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIFNpbXBseSBs ZWF2ZSB0aGUgY29uc2Vuc3VzIHNpbmNlIHZlcnNpb24gLTcgb2YgdGhpcyBkcmFmdCBieQ0KPiA+ Pj4+PiAgICAgcmVtb3ZpbmcgdGhlIChEKVRMUyBtYW5kYXRpbmcgZm9yIFRVUk4gc2VydmVycyBw cm92aWRlZCBieSAgdGhlDQo+ID4+Pj4+ICAgICBsb2NhbCBvciBhY2Nlc3MgbmV0d29yayB0aHJv d24taW4gZHVyaW5nIHRoZSBkaXNjdXNzLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgL0thcmwNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIFBT OiBJIGJlbGlldmUgdGhlIGF0dGFjayBkaXNjdXNzaW9uIGJlbG93IGlzIGFscmVhZHkgZG9uZSwg YW5kIHRoYXQNCj4gPj4+Pj4gICAgIHlvdSBhcmUgd3JvbmcgaW4gdGhpbmtpbmcgdGhhdCBhdXRo ZW50aWNhdGlvbiB3aGljaCBwcm90ZWN0cyBhZ2FpbnN0DQo+ID4+Pj4+ICAgICBzcG9vZiBhdHRh Y2tzIGNhbiBiZSBleGNoYW5nZWQgZm9yIGVuY3J5cHRpb24sIGFuZCB0aGF0IGFueSBvZiB0aGVz ZQ0KPiA+Pj4+PiAgICAgdGhpbmdzIHByb3RlY3RzIGFnYWluc3QgRERPUyBhdHRhY2tzIC4gVGhl c2Ugc2VjdXJpdHkgdGhpbmdzIGFkZHJlc3MNCj4gPj4+Pj4gICAgIGRpZmZlcmVudCB0aGluZ3Mg YW5kIGFyZSBub3QgaW50ZXJjaGFuZ2VhYmxlLCBub3IgYXJlIHRoZXkgdW5pdmVyc2FsDQo+ID4+ Pj4+ICAgICBtZWFucyBhZ2FpbnN0IGF0dGFja3Mgb2YgdmFyaW91cyBraW5kcy4NCj4gPj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIEFuZCB0aGUgb3V0Y29tZSBvZiBhbnkgc3Vj aCBkaXNjdXNzaW9uIGRvZXNu4oCZdCBjaGFuZ2UgdGhlIGFib3ZlLg0KPiA+Pj4+Pg0KPiA+Pj4+ Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgUGxlYXNlIG5vdGUgKHNvcnJ5IHRvIHJlcGVhdCkgIHRo YXQgZm9yIHRoZSBwdXJwb3NlIG9mIGdldHRpbmcgYQ0KPiA+Pj4+PiAgICAgYmV0dGVyIHBhdGgg Zm9yIHJlYWwtdGltZSB0cmFmZmljIHRoYW4gdGhyb3VnaCB0aGUgZGVmYXVsdCBnYXRld2F5DQo+ ID4+Pj4+ICAgICBwYXRoLCB3ZSBjYW5ub3QgZXhwZWN0IHRvIGFsc28gZ2V0IGEgaGlnaGVyIHNl Y3VyaXR5IG9yIHRydXN0IGxldmVsLA0KPiA+Pj4+PiAgICAgbm9yIHRvIHJlc29sdmUgZXZlcnkg cHJvYmxlbSBpbiB0aGUgd29ybGQuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICAqRnLDpW46KiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVk ZHkpIFttYWlsdG86dGlyZWRkeUBjaXNjby5jb21dDQo+ID4+Pj4+ICAgICAqU2tpY2thdDoqIGRl biAyOCBub3ZlbWJlciAyMDE2IDEwOjUzDQo+ID4+Pj4+ICAgICAqVGlsbDoqIEthcmwgU3RhaGw7 ICdCcmFuZG9uIFdpbGxpYW1zJzsgUHJhc2hhbnRoIFBhdGlsDQo+ID4+Pj4+ICAgICAocHJhc3Bh dGkpOyB0cmFtQGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+Pj4gICAgICpL b3BpYToqIHRyYW0tY2hhaXJzQGlldGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+ OyAnRGFuDQo+ID4+Pj4+ICAgICBXaW5nJzsgJ1NwZW5jZXIgRGF3a2lucyBhdCBJRVRGJw0KPiA+ Pj4+PiAgICAgKsOEbW5lOiogUkU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXIt ZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICBIaSBLYXJs LA0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgWWVzLCBJIGFtIGRpc2N1 c3NpbmcgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IGxvY2FsIG9yIGFjY2Vzcw0KPiA+Pj4+PiAg ICAgbmV0d29ya3MsIHJlZmVycmluZyB0byBpbnNpZGUgYXR0YWNrcyBsYXVuY2hlZCBieSBhdHRh Y2tlcnMgaW5zaWRlDQo+ID4+Pj4+ICAgICB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmsuDQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgICBhKUFuIGluc2lkZSBhdHRhY2tlciBzZW5kcyBmYWtlZCBwZXJt aXNzaW9ucyB0byB0aGUgVFVSTiBzZXJ2ZXIgdG8NCj4gPj4+Pj4gICAgIGxhdW5jaCBhdHRhY2sg KERPUyBvciBERE9TKSBvbiB0aGUgdmljdGltIChUVVJOIGNsaWVudCkuDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICBiKUFuIGluc2lkZSBhdHRhY2tlciBzZW5kcyBzcG9vZmVkIFRVUk4gcmVxdWVzdHMg dG8gdGhlIFRVUk4gc2VydmVyDQo+ID4+Pj4+ICAgICB0byBjbG9zZSBhbGxvY2F0aW9ucy4NCj4g Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIEJvdGggYWJvdmUgYXR0YWNrcyBj YW4gYmUgcHJldmVudGVkIGJ5IHVzaW5nIG9wcG9ydHVuaXN0aWMNCj4gPj4+Pj4gICAgIGVuY3J5 cHRpb24gd2l0aCAoRClUTFMuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICAtVGlydQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgKkZyb206KiB0 cmFtIFttYWlsdG86dHJhbS1ib3VuY2VzQGlldGYub3JnXSAqT24gQmVoYWxmIE9mICpLYXJsDQo+ IFN0YWhsDQo+ID4+Pj4+ICAgICAqU2VudDoqIE1vbmRheSwgTm92ZW1iZXIgMjgsIDIwMTYgMjo0 OSBQTQ0KPiA+Pj4+PiAgICAgKlRvOiogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSA8dGly ZWRkeUBjaXNjby5jb20NCj4gPj4+Pj4gICAgIDxtYWlsdG86dGlyZWRkeUBjaXNjby5jb20+Pjsg J0JyYW5kb24gV2lsbGlhbXMnDQo+ID4+Pj4+ICAgICA8YnJhbmRvbi53aWxsaWFtc0Bha2FtYWku Y29tDQo+ID4+Pj4gPG1haWx0bzpicmFuZG9uLndpbGxpYW1zQGFrYW1haS5jb20+PjsNCj4gPj4+ Pj4gICAgIFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkpIDxwcmFzcGF0aUBjaXNjby5jb20NCj4g Pj4+Pj4gICAgIDxtYWlsdG86cHJhc3BhdGlAY2lzY28uY29tPj47IHRyYW1AaWV0Zi5vcmcNCj4g PG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+PiAgICAgKkNjOiogdHJhbS1jaGFpcnNAaWV0 Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4gV2luZycNCj4gPj4+Pj4g ICAgIDxkYW5AZGFud2luZy5vcmcgPG1haWx0bzpkYW5AZGFud2luZy5vcmc+PjsgJ1NwZW5jZXIg RGF3a2lucw0KPiBhdA0KPiA+Pj4+PiAgICAgSUVURicgPHNwZW5jZXJkYXdraW5zLmlldGZAZ21h aWwuY29tDQo+ID4+Pj4+ICAgICA8bWFpbHRvOnNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29t Pj4NCj4gPj4+Pj4gICAgICpTdWJqZWN0OiogUmU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVy bi1zZXJ2ZXItZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICBIaSBUaXJ1LA0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgTm93IEkg ZG9u4oCZdCBrbm93IHdoZXJlIHlvdSBhcmUgYWdhaW4uDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICBBcmUgeW91IGRpc2N1c3NpbmcgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVk IGJ5IHRoZSBsb2NhbCBvciBhY2Nlc3MNCj4gPj4+Pj4gICAgIG5ldHdvcmsgKHRoZSB5ZWxsb3cg VFVSTiBzZXJ2ZXJzKSwgdGhhdCBhcmUgcmVsZWFzZWQgZnJvbQ0KPiA+Pj4+PiAgICAgYXV0aGVu dGljYXRpb24gKG5vIGRpc3B1dGUgdGhlcmUpLCBidXQgZm9yIHdoaWNoIChEKVRMUyBtYW5kYXRl IHdhcw0KPiA+Pj4+PiAgICAgdGhyb3duIGluLWR1cmluZyB0aGUgZGlzY3VzcyAobWFraW5nIHRo ZW0gZ3JheSk/IFRoYXQgaXMgdGhlDQo+ID4+Pj4+ICAgICBzaG93c3RvcHBlciB0aGF0IG11c3Qg Z28gYXdheS4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIFNvbWUgY29t bWVudHMgYmVsb3cuIEhvcGUgd2UgYWdyZWUgIHRoZSBiZWxvdyBkb2VzIG5vdCByZWxhdGUgdG8N Cj4gPj4gdGhlDQo+ID4+Pj4+ICAgICB5ZWxsb3cgVFVSTiBzZXJ2ZXIuDQo+ID4+Pj4+DQo+ID4+ Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICAvS2FybA0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgKkZyw6VuOiogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSBbbWFp bHRvOnRpcmVkZHlAY2lzY28uY29tXQ0KPiA+Pj4+PiAgICAgKlNraWNrYXQ6KiBkZW4gMjggbm92 ZW1iZXIgMjAxNiAwNDowMg0KPiA+Pj4+PiAgICAgKlRpbGw6KiBLYXJsIFN0YWhsOyAnQnJhbmRv biBXaWxsaWFtcyc7IFByYXNoYW50aCBQYXRpbA0KPiA+Pj4+PiAgICAgKHByYXNwYXRpKTsgdHJh bUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+ID4+Pj4+ICAgICAqS29waWE6KiB0 cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0Rhbg0K PiA+Pj4+PiAgICAgV2luZyc7ICdTcGVuY2VyIERhd2tpbnMgYXQgSUVURicNCj4gPj4+Pj4gICAg ICrDhG1uZToqIFJFOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2NvdmVy eQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgSGkgS2FybCwNCj4gPj4+ Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIE5vLCBJIGRvbuKAmXQgYWdyZWUgdGhh dCAoRClUTFMgaXMgbm90IG1hbmRhdG9yeS4gT3Bwb3J0dW5pc3RpYw0KPiA+Pj4+PiAgICAgZW5j cnlwdGlvbiBpcyBub3QgbmV3LiBJdOKAmXMgZGlzY3Vzc2VkIGluIFJGQzc0MzUsIGFuZCB1c2Vk IGluIFRDUA0KPiA+Pj4+PiAgICAgaW5jcmVhc2VkIHNlY3VyaXR5IChUQ1BJTkMgV0cpIGFuZCBE TlMgcHJpdmFjeSBleGNoYW5nZSAoRFBSSVZFDQo+ID4+IFdHKS4NCj4gPj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgIEhvdyBkbyB5b3UgcHJvcG9zZSB0byBoYW5kbGUgdGhlIGZv bGxvd2luZyBwYXNzaXZlIGF0dGFja3Mgd2l0aG91dA0KPiA+Pj4+PiAgICAgKEQpVExTIG9yIFNU VU4gYXV0aGVudGljYXRpb24gPw0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgYSkgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzU3NjYjc2VjdGlvbi0xNy4yLjEN Cj4gPj4+Pj4gICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9 aHR0cHMtDQo+ID4+Pj4gM0FfX3Rvb2xzLmlldGYub3JnX2h0bWxfcmZjNTc2Ni0yM3NlY3Rpb24t DQo+ID4+Pj4gMkQxNy4yLjEmZD1EZ01GYVEmYz05NlpiWlpjYU1GNHcwRjRqcE42TFpnJnI9Ynda LQ0KPiA+Pj4+IG5uUkdXbWNHS1JJdWFkcTYtTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgt DQo+ID4+Pj4NCj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgm cz15VFRZS2dvcjJfYWpIZTdLUF80QnpubA0KPiA+Pj4+IEcxRWFtdUl5X0s3YWswVTQwUmJNJmU9 PiwNCj4gPj4+Pj4gICAgIHdoZXJlIGF0dGFja2VyIHNlbmRzIGZha2VkIHBlcm1pc3Npb25zIHRv IHRoZSBUVVJOIHNlcnZlciB0byBsYXVuY2gNCj4gPj4+Pj4gICAgIGF0dGFjayAoRE9TIG9yIERE T1MpIG9uIHRoZSB2aWN0aW0gKFRVUk4gY2xpZW50KS4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4g U2luY2UgdGhlIF9UVVJOIHNlcnZlciBzaXRzIG91dHNpZGVfIHRoZSBmaXJld2FsbCwgYXQgYXR0 YWNrZXIgb3V0c2lkZQ0KPiA+PiB0aGUNCj4gPj4+Pj4gICAgIGZpcmV3YWxsIGNhbiBub3cgc2Vu ZCBhDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICAtLS0gQSBUVVJOIHNlcnZlciBwcm92aWRlZCBieSBs b2NhbCBvciBhY2Nlc3MgbmV0d29yaywgc2hhbGwgb25seSBiZQ0KPiA+Pj4+PiAgICAgYWNjZXNz aWJsZSBieSB1c2VycyBpbnNpZGUgdGhlIGZpcmV3YWxsLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgYikgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzU3NjYj c2VjdGlvbi0xNy4zLjMNCj4gPj4+Pj4gICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2lu dC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4gM0FfX3Rvb2xzLmlldGYub3JnX2h0bWxfcmZj NTc2Ni0yM3NlY3Rpb24tDQo+ID4+Pj4gMkQxNy4zLjMmZD1EZ01GYVEmYz05NlpiWlpjYU1GNHcw RjRqcE42TFpnJnI9YndaLQ0KPiA+Pj4+IG5uUkdXbWNHS1JJdWFkcTYtTlNuc2d3YkJWVUphNG1a Zm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6 QXVwUjgmcz1lSC0NCj4gPj4+PiB1NWE2eXEwR3hUcUhGSk1Uc3NDSmVmY1hMck1HTFFkei03TUtf bDdjJmU9PiwNCj4gPj4+Pj4gICAgIGF0dGFja2VyIHNlbmRzIHNwb29mZWQgVFVSTiByZXF1ZXN0 cyB0byB0aGUgVFVSTiBzZXJ2ZXIgdG8gY2xvc2UNCj4gPj4+Pj4gICAgIGFsbG9jYXRpb25zLg0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgLS0tIEkgZG9u4oCZdCB0aGluayAoRClUTFMgaGVscHMgaWYg eW91IGNhbiBzcG9vZiBhbmQgaGF2ZSBzdWNoDQo+ID4+Pj4+ICAgICBhdHRhY2tlcnMgaW5zaWRl IHlvdXIgbmV0d29yay4gKHRoYXQgcGFyYWdyYXBoIHNheXM6ICBUVVJOIHByZXZlbnRzDQo+ID4+ Pj4+ICAgICB0aGlzIGJ5IHJlcXVpcmluZyB0aGF0IHRoZSBjcmVkZW50aWFscyB1c2Vk4oCdKSBt ZWFuaW5nIGF1dGhlbnRpY2F0aW9uDQo+ID4+Pj4+ICAgICAobm90IGNlcnRpZmljYXRlIGNoZWNr aW5nLCBub3IgZW5jcnlwdGlvbikuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICAtVGlydQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgKkZyb206KiB0cmFtIFttYWlsdG86dHJhbS1ib3VuY2VzQGlldGYub3JnXSAq T24gQmVoYWxmIE9mICpLYXJsDQo+IFN0YWhsDQo+ID4+Pj4+ICAgICAqU2VudDoqIE1vbmRheSwg Tm92ZW1iZXIgMjgsIDIwMTYgMTozOSBBTQ0KPiA+Pj4+PiAgICAgKlRvOiogVGlydW1hbGVzd2Fy IFJlZGR5ICh0aXJlZGR5KSA8dGlyZWRkeUBjaXNjby5jb20NCj4gPj4+Pj4gICAgIDxtYWlsdG86 dGlyZWRkeUBjaXNjby5jb20+PjsgJ0JyYW5kb24gV2lsbGlhbXMnDQo+ID4+Pj4+ICAgICA8YnJh bmRvbi53aWxsaWFtc0Bha2FtYWkuY29tDQo+ID4+Pj4gPG1haWx0bzpicmFuZG9uLndpbGxpYW1z QGFrYW1haS5jb20+PjsNCj4gPj4+Pj4gICAgIFByYXNoYW50aCBQYXRpbCAocHJhc3BhdGkpIDxw cmFzcGF0aUBjaXNjby5jb20NCj4gPj4+Pj4gICAgIDxtYWlsdG86cHJhc3BhdGlAY2lzY28uY29t Pj47IHRyYW1AaWV0Zi5vcmcNCj4gPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+PiAgICAg KkNjOiogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47 ICdEYW4gV2luZycNCj4gPj4+Pj4gICAgIDxkYW5AZGFud2luZy5vcmcgPG1haWx0bzpkYW5AZGFu d2luZy5vcmc+PjsgJ1NwZW5jZXIgRGF3a2lucw0KPiBhdA0KPiA+Pj4+PiAgICAgSUVURicgPHNw ZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tDQo+ID4+Pj4+ICAgICA8bWFpbHRvOnNwZW5jZXJk YXdraW5zLmlldGZAZ21haWwuY29tPj4NCj4gPj4+Pj4gICAgICpTdWJqZWN0OiogUmU6IFt0cmFt XSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICBIaSBUaXJ1LA0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgU28gd2UgYWdyZWUgdGhhdCB0aGUgKEQpVExTIG1hbmRhdGUgdGhyb3du LWluIGR1cmluZyB0aGUgZGlzY3Vzcw0KPiA+Pj4+PiAgICAgKG1ha2luZyB5ZWxsb3cgVFVSTiBz ZXJ2ZXJzIGdyYXkpIHNoYWxsIGdvIGF3YXkgYW5kIHdlIGFyZSBiYWNrIHRvDQo+ID4+Pj4+ICAg ICB3aGF0IHdhcyBjb25zZW5zdXMgc2luY2UgdmVyc2lvbiAtNyBvZiB0aGUgZHJhZnQuIEkgdGhp bmsgdGhlDQo+ID4+Pj4+ICAgICBhdHRhY2tzIHlvdSBhcmUgZGlzY3Vzc2luZyBub3cgaGF2ZSBi ZWVuIGxpc3RlZCBhbHJlYWR5IGFuZCBmb3IgVFVSTg0KPiA+Pj4+PiAgICAgc2VydmVycyBpbiBh IGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrIChubyBjaGFuZ2Ugc2luY2UgdmVyc2lvbiAtNyksDQo+ ID4+Pj4+ICAgICB3ZSBzaG91bGQgbm90IGV4cGVjdCBhIGhpZ2hlciBzZWN1cml0eSBvciB0cnVz dCBsZXZlbCB3aGVuIHNlbmRpbmcNCj4gPj4+Pj4gICAgIG91ciByZWFsLXRpbWUgdHJhZmZpYyB0 aHJvdWdoIGFub3RoZXIgcGF0aCB0aGFuIHRoZSB0aHJvdWdoIGRlZmF1bHQNCj4gPj4+Pj4gICAg IGdhdGV3YXksIGJvdGggcGF0aHMgYXJlIHByb3ZpZGVkIGJ5IHRoZSBzYW1lIG5ldHdvcmsgcHJv dmlkZXIuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICAqICoNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIElm IOKAnHByb3RlY3RzIHRoZSBjbGllbnQgZnJvbSB2YXJpb3VzIGF0dGFja3MgZGlzY3Vzc2VkIGlu IHByZXZpb3VzDQo+ID4+Pj4+ICAgICBtYWlsc+KAnSByZWxhdGVkIHRvIGRpc2NvdmVyeSBvZiBU VVJOIHNlcnZlcnMsIHJlYWxseSBpcyBwb3NzaWJsZSBieQ0KPiA+Pj4+PiAgICAgaW50cm9kdWNp bmcgc29tZXRoaW5nICh3aHkgcmVvcGVuIHRoYXQgbm93PyksIHdlIGhhdmUgdG8gYmUgY2FyZWZ1 bA0KPiA+Pj4+PiAgICAgbm90IHRvIG1ha2UgeWVsbG93IFRVUk4gc2VydmVycyBncmF5aXNoLCB3 aGljaCBJIGFtIGFmcmFpZCBzZWxmDQo+ID4+Pj4+ICAgICBzaWduZWQgY2VydGlmaWNhdGVzIG1p Z2h0IGRvLCBhbmQgZnVydGhlciwgZG9lcyB0aGlzIGJlbG9uZyBpbiBhDQo+ID4+Pj4+ICAgICBk aXNjb3ZlcnkgZHJhZnQsIHJpc2tpbmcgdG8gcGljayBhIGZpZ2h0IHdpdGggdGhlIFdlYlJUQyBi cm93c2VyDQo+ID4+Pj4+ICAgICBtYWtlcnMgc3VwcG9zZWQgdG8gdXNlIHRoaXMgc3BlY2lmaWNh dGlvbi4gV2Uga25vdyB0aGV5IGRvbuKAmXQgZmFuY3kNCj4gPj4+Pj4gICAgIHNlbGYgc2lnbmVk IGNlcnRpZmljYXRlc+KApg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPGltYWdlMDAyLmpwZz4NCj4g Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIElzbuKAmXQgaXQgc3BlY2lmaWNh dGlvbnMgZm9yIHNvbWUgc3BlY2lmaWMgdXNhZ2UvYXBwbGljYXRpb24gKGxpa2UNCj4gPj4+Pj4g ICAgIHRoZSByZXR1cm4gZHJhZnQgZm9yIFdlYlJUQyBicm93c2VycykgdGhhdCBzaG91bGQgY29u c2lkZXIgc3VjaA0KPiA+Pj4+PiAgICAgdGhpbmdzIChub3QgdGhpcyBkcmFmdCksIHdpdGhvdXQg YW55IHJlY29tbWVuZGF0aW9uIGZyb20gdGhpcw0KPiA+Pj4+PiAgICAgc3BlY2lmaWNhdGlvbj8N Cj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIC9LYXJsDQo+ID4+Pj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICAqRnLDpW46KiBUaXJ1bWFsZXN3YXIgUmVkZHkg KHRpcmVkZHkpIFttYWlsdG86dGlyZWRkeUBjaXNjby5jb21dDQo+ID4+Pj4+ICAgICAqU2tpY2th dDoqIGRlbiAyMyBub3ZlbWJlciAyMDE2IDA0OjE1DQo+ID4+Pj4+ICAgICAqVGlsbDoqIEthcmwg U3RhaGw7ICdCcmFuZG9uIFdpbGxpYW1zJzsgUHJhc2hhbnRoIFBhdGlsDQo+ID4+Pj4+ICAgICAo cHJhc3BhdGkpOyB0cmFtQGlldGYub3JnIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+Pj4g ICAgICpLb3BpYToqIHRyYW0tY2hhaXJzQGlldGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0 Zi5vcmc+OyAnRGFuDQo+ID4+Pj4+ICAgICBXaW5nJzsgJ1NwZW5jZXIgRGF3a2lucyBhdCBJRVRG Jw0KPiA+Pj4+PiAgICAgKsOEbW5lOiogUkU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1z ZXJ2ZXItZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICBJ IGFtIG5vdCBzdWdnZXN0aW5nIHRoYXQgYXV0aGVudGljYXRpb24gaXMgbWFuZGF0b3J5IGZvciBU VVJODQo+ID4+Pj4+ICAgICBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IGxvY2FsIG9yIGFjY2VzcyBuZXR3 b3JrcyB1c2luZyAoRClUTFMgYnV0IHVzZSBvZg0KPiA+Pj4+PiAgICAgKEQpVExTIFtLYXJsOiDi gJx0aGVzZSBiZWNvbWUgZ3JheSBub3QgeWVsbG934oCdIG9yIGFyZSB5b3Ugc3VnZ2VzdGluZw0K PiA+Pj4+PiAgICAgY2VydGlmaWNhdGVkIHNpZ25lZCBieSB0aGUgbmV0d29yayBwcm92aWRlcl0N Cj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIFtUUl0gTm8sIHRoZXkgYXJl IHllbGxvdyBhbmQgbm90IGdyZXk7IGNsaWVudHMgd2lsbCB1c2UgKEQpVExTIGJ1dA0KPiA+Pj4+ PiAgICAgZG8gbm90IHZhbGlkYXRlIHRoZSBUVVJOIHNlcnZlciBjZXJ0aWZpY2F0ZSAocmVmZXJy ZWQgdG8gYXMNCj4gPj4+Pj4gICAgIE9wcG9ydHVuaXN0aWMgc2VjdXJpdHkgaW4gdGhlIGRyYWZ0 KS4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIFtLYXJsOiBTZWVtcyBs aWtlIHlvdSBhcmUgc3VnZ2VzdGluZyBzZWxmIHNpZ25lZCBjZXJ0aWZpY2F0ZXMgdG8NCj4gPj4+ Pj4gICAgIGp1c3QgZ2V0IHRoZSBlbmNyeXB0aW9uIChhZ2FpbiDigJMgYWxzbyBkaXNjdXNzZWQp XQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgW1RSXSBZZXMsIHRoYXTi gJlzIG9uZSBwb3NzaWJsZSBvcHRpb24gdG8gbWFuZGF0ZSAoRClUTFMuIENsaWVudA0KPiA+Pj4+ PiAgICAgY2Fubm90IHZhbGlkYXRlIHRoZSBUVVJOIHNlcnZlciBjZXJ0aWZpY2F0ZSBidXQgdXNl IGVuY3J5cHRpb24tb25seQ0KPiA+Pj4+PiAgICAgKEQpVExTIGFuZCBwcm90ZWN0cyB0aGUgY2xp ZW50IGZyb20gdmFyaW91cyBhdHRhY2tzIGRpc2N1c3NlZCBpbg0KPiA+Pj4+PiAgICAgcHJldmlv dXMgbWFpbHMuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICAtVGlydQ0K PiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgKkZyb206KiBLYXJsIFN0YWhs IFttYWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29tXQ0KPiA+Pj4+PiAgICAgKlNlbnQ6KiBUdWVz ZGF5LCBOb3ZlbWJlciAyMiwgMjAxNiAxMToxMiBQTQ0KPiA+Pj4+PiAgICAgKlRvOiogVGlydW1h bGVzd2FyIFJlZGR5ICh0aXJlZGR5KSA8dGlyZWRkeUBjaXNjby5jb20NCj4gPj4+Pj4gICAgIDxt YWlsdG86dGlyZWRkeUBjaXNjby5jb20+PjsgJ0JyYW5kb24gV2lsbGlhbXMnDQo+ID4+Pj4+ICAg ICA8YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tDQo+ID4+Pj4gPG1haWx0bzpicmFuZG9uLndp bGxpYW1zQGFrYW1haS5jb20+PjsNCj4gPj4+Pj4gICAgIFByYXNoYW50aCBQYXRpbCAocHJhc3Bh dGkpIDxwcmFzcGF0aUBjaXNjby5jb20NCj4gPj4+Pj4gICAgIDxtYWlsdG86cHJhc3BhdGlAY2lz Y28uY29tPj47IHRyYW1AaWV0Zi5vcmcNCj4gPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+ PiAgICAgKkNjOiogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0cmFtLWNoYWlyc0BpZXRm Lm9yZz47ICdEYW4gV2luZycNCj4gPj4+Pj4gICAgIDxkYW5AZGFud2luZy5vcmcgPG1haWx0bzpk YW5AZGFud2luZy5vcmc+PjsgJ1NwZW5jZXIgRGF3a2lucw0KPiBhdA0KPiA+Pj4+PiAgICAgSUVU RicgPHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tDQo+ID4+Pj4+ICAgICA8bWFpbHRvOnNw ZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPj4NCj4gPj4+Pj4gICAgICpTdWJqZWN0OiogU1Y6 IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+ID4+Pj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICBIaSBUaXJ1LA0KPiA+Pj4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgUGxlYXNlIHVuZGVyc3RhbmQgdGhhdCBpbiB0aGlzIGNvbnRl eHQ6DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICAtIEF1dGhlbnRpY2F0aW9uIGlzIHRvIG9ubHkgYWxs b3cgY2VydGFpbiB1c2VycyB0byB1c2UgdGhlIFRVUk4NCj4gPj4+Pj4gICAgIHNlcnZlciByZXNv dXJjZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgLSBDZXJ0aWZpY2F0ZSBjaGVja2luZyBhcyB3aGVu IHVzaW5nIChEKVRMUyBpcyB0byBhc3N1cmUgdGhlIHVzZXIgaXMNCj4gPj4+Pj4gICAgIHVzaW5n IGEgdHJ1c3RlZCBUVVJOIHNlcnZlciAoYW5kIGZ1cnRoZXIgaXMgc2V0cyB1cCBhbiBlbmNyeXB0 ZWQNCj4gPj4+Pj4gICAgIGNoYW5uZWwpLg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgVGhlc2UgdGhpbmdzIGFyZSBub3QgaW50ZXJjaGFuZ2VhYmxlIG9yIGRvIHRoZSBz YW1lIHRoaW5ncyBvcg0KPiA+Pj4+PiAgICAgYWNoaWV2ZXMgdGhlIHNhbWUsIHdoaWNoIGhhcyBi ZWVuIGRpc2N1c3NlZCBvdmVyIGFuZCBvdmVyIGFnYWluIGluDQo+ID4+Pj4+ICAgICB0aGlzIGRy YWZ0IGFscmVhZHkuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICBMZXQg aXQgcmVzdCB3aXRoIHRoYXQgd2UgY2Fubm90L3Nob3VsZCBub3QgZXhwZWN0IGEgaGlnaGVyIHRy dXN0IG9yDQo+ID4+Pj4+ICAgICBzZWN1cml0eSBsZXZlbCB3aGVuIHNlbmRpbmcgb3VyIHJlYWwt dGltZSB0cmFmZmljIHRocm91Z2ggdGhlIFRVUk4NCj4gPj4+Pj4gICAgIHNlcnZlciBwYXRoLCB0 aGFuIHRyb3VnaCB0aGUgZGVmYXVsdCBnYXRld2F5IHBhdGguIFlvdSBzaW1wbHkgaGF2ZQ0KPiA+ Pj4+PiAgICAgdG8gdHJ1c3QgdGhlIGFjY2VzcyBmcm9tIHRoZSBuZXR3b3JrIHByb3ZpZGVyIHlv dSBzZWxlY3QgdG8gY29ubmVjdA0KPiA+Pj4+PiAgICAgdG8sIG9yIHJlZnJhaW4gZnJvbSB1c2lu ZyBpdC4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIFBsZWFzZSBhbHNv IHVuZGVyc3RhbmQgdGhhdCDigJx0aGUgZ3JheSBUVVJOIHNlcnZlcnPigJ0gYXJlIHByb3ZpZGVk IGJ5DQo+ID4+Pj4+ICAgICBvdGhlcnMgdGhhbiB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmss IGFuZCB5b3UgY2hvc2UgdG8gdHJ1c3QgdGhlbQ0KPiA+Pj4+PiAgICAgd2l0aCB5b3VyIHJlYWwt dGltZSB0cmFmZmljIGJhc2VkIG9uIGNoZWNraW5nIHRoZWlyIGNlcnRpZmljYXRlIChXaG8NCj4g Pj4+Pj4gICAgIGNvbmZpZ3VyZXMgd2hpY2ggdG8gYWxsb3cgaW50byB0aGUgV2ViUlRDIGJyb3dz ZXI/KS4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIEluIGEgc3BlY2lm aWNhdGlvbiB3aGljaCBtYWluIHB1cnBvc2UgaXMgdG8gYXV0byBkaXNjb3ZlciBUVVJODQo+ID4+ Pj4+ICAgICBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yayAo 4oCcdGhlIHllbGxvdyBvbmVz4oCdKSwNCj4gPj4+Pj4gICAgIHlvdSBDQU5OT1QgTE9HSUNBTExZ IGVuZCB1cCB3aXRoIHNheWluZyB5b3UgTVVTVC9TSE9VTEQgb3INCj4gYXJlDQo+ID4+Pj4+ICAg ICBSRUNPTU1FTkRFRCB0byB1c2Ug4oCcdGhlIGdyYXkgb25lc+KAnSBpbnN0ZWFkLCBwcm92aWRl ZCBieSBzb21lDQo+ID4+Pj4+ICAgICBhdXRob3JpdHkgb3IgQnJhbmRvbiBtYXliZSAod2hpY2gg YXJlIG1lYW50IGZvciBvdGhlciBwdXJwb3NlcykuDQo+ID4+Pj4+ICAgICBUaGVuIHlvdSBoYXZl IG5vdCBkZWxpdmVyZWQgdGhlIHNwZWNpZmljYXRpb24gd2UgbmVlZCA9IFRoZQ0KPiA+PiBzaG93 c3RvcHBlci4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIC9LYXJsDQo+ ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICBQUzogU29tZSBjb21tZW50cyBi ZWxvdy4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgICpGcsOlbjoqIFRp cnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgW21haWx0bzp0aXJlZGR5QGNpc2NvLmNvbV0NCj4g Pj4+Pj4gICAgICpTa2lja2F0OiogZGVuIDIyIG5vdmVtYmVyIDIwMTYgMDQ6MzENCj4gPj4+Pj4g ICAgICpUaWxsOiogS2FybCBTdGFobDsgJ0JyYW5kb24gV2lsbGlhbXMnOyBQcmFzaGFudGggUGF0 aWwNCj4gPj4+Pj4gICAgIChwcmFzcGF0aSk7IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGll dGYub3JnPg0KPiA+Pj4+PiAgICAgKktvcGlhOiogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0 bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4NCj4gPj4+Pj4gICAgIFdpbmcnOyAnU3BlbmNl ciBEYXdraW5zIGF0IElFVEYnDQo+ID4+Pj4+ICAgICAqw4RtbmU6KiBSRTogW3RyYW1dIGRyYWZ0 LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgIEhpIEthcmwsDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICBJIGFtIG5vdCBzdWdnZXN0aW5nIHRoYXQgYXV0aGVudGljYXRpb24gaXMgbWFuZGF0 b3J5IGZvciBUVVJODQo+ID4+Pj4+ICAgICBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IGxvY2FsIG9yIGFj Y2VzcyBuZXR3b3JrcyB1c2luZyAoRClUTFMgYnV0IHVzZSBvZg0KPiA+Pj4+PiAgICAgKEQpVExT IFtLYXJsOiDigJx0aGVzZSBiZWNvbWUgZ3JheSBub3QgeWVsbG934oCdIG9yIGFyZSB5b3Ugc3Vn Z2VzdGluZw0KPiA+Pj4+PiAgICAgY2VydGlmaWNhdGVkIHNpZ25lZCBieSB0aGUgbmV0d29yayBw cm92aWRlcl0gd2l0aG91dCBhdXRoZW50aWNhdGluZw0KPiA+Pj4+PiAgICAgdGhlIFRVUk4gc2Vy dmVyIGlzIG1hbmRhdG9yeSB0byBhdm9pZCB2YXJpb3VzIGF0dGFja3MgbGlzdGVkIGluDQo+ID4+ Pj4+ICAgICBwcmV2aW91cyBtYWlscy4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgIEluIHNob3J0LCB0aGUgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IGxvY2FsIG9yIGFj Y2VzcyBuZXR3b3JrcyBtdXN0DQo+ID4+Pj4+ICAgICB1c2UgKEQpVExTIGJ1dCBpdOKAmXMgbm90 IG1hbmRhdG9yeSBmb3IgdGhlc2UgVFVSTiBzZXJ2ZXJzIHRvIGdldA0KPiA+Pj4+PiAgICAgY2Vy dGlmaWNhdGVzIGZyb20gQ0Egb3IgYW55IGV4cGxpY2l0IGNvbmZpZ3VyYXRpb24gaXMgcmVxdWly ZWQgb24NCj4gPj4+Pj4gICAgIHRoZSBjbGllbnQgdG8gdHJ1c3QgdGhlIFRVUk4gc2VydmVyLiBb S2FybDogU2VlbXMgbGlrZSB5b3UgYXJlDQo+ID4+Pj4+ICAgICBzdWdnZXN0aW5nIHNlbGYgc2ln bmVkIGNlcnRpZmljYXRlcyB0byBqdXN0IGdldCB0aGUgZW5jcnlwdGlvbg0KPiA+Pj4+PiAgICAg KGFnYWluIOKAkyBhbHNvIGRpc2N1c3NlZCldDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICAtVGlydQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg KkZyb206KiBLYXJsIFN0YWhsIFttYWlsdG86a2FybC5zdGFobEBpbmdhdGUuY29tXQ0KPiA+Pj4+ PiAgICAgKlNlbnQ6KiBNb25kYXksIE5vdmVtYmVyIDIxLCAyMDE2IDI6MTAgQU0NCj4gPj4+Pj4g ICAgICpUbzoqIFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgPHRpcmVkZHlAY2lzY28uY29t DQo+ID4+Pj4+ICAgICA8bWFpbHRvOnRpcmVkZHlAY2lzY28uY29tPj47ICdCcmFuZG9uIFdpbGxp YW1zJw0KPiA+Pj4+PiAgICAgPGJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbQ0KPiA+Pj4+IDxt YWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tPj47DQo+ID4+Pj4+ICAgICBQcmFzaGFu dGggUGF0aWwgKHByYXNwYXRpKSA8cHJhc3BhdGlAY2lzY28uY29tDQo+ID4+Pj4+ICAgICA8bWFp bHRvOnByYXNwYXRpQGNpc2NvLmNvbT4+OyB0cmFtQGlldGYub3JnDQo+IDxtYWlsdG86dHJhbUBp ZXRmLm9yZz4NCj4gPj4+Pj4gICAgICpDYzoqIHRyYW0tY2hhaXJzQGlldGYub3JnIDxtYWlsdG86 dHJhbS1jaGFpcnNAaWV0Zi5vcmc+OyAnRGFuIFdpbmcnDQo+ID4+Pj4+ICAgICA8ZGFuQGRhbndp bmcub3JnIDxtYWlsdG86ZGFuQGRhbndpbmcub3JnPj47ICdTcGVuY2VyIERhd2tpbnMNCj4gYXQN Cj4gPj4+Pj4gICAgIElFVEYnIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbQ0KPiA+Pj4+ PiAgICAgPG1haWx0bzpzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+DQo+ID4+Pj4+ICAg ICAqU3ViamVjdDoqIFNWOiBbdHJhbV0gZHJhZnQtaWV0Zi10cmFtLXR1cm4tc2VydmVyLWRpc2Nv dmVyeQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgSGkgVGlydSwNCj4g Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIFRyeWluZyB0byBjbGFyaWZ5IGFz IHlvdSByZXF1ZXN0OiBJIGhhdmUgbG9zdCB0cmFjayBvZiBpbiB3aGljaA0KPiA+Pj4+PiAgICAg Y29udGV4dCB5b3UgYXJlIHdoZW4geW91IGFyZSAiZGlzY3Vzc2luZyB2YXJpb3VzIGF0dGFja3Mi IGFuZCB3aGF0DQo+ID4+Pj4+ICAgICB5b3UgbWVhbiB3aXRoIHRoZSA/PyBJIG1hcmtlZCBiZWxv dy4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIE15IGNvbmNlcm4gd2Fz IHdoZXRoZXIgdGhpcyBtYXkgYWdhaW4gbGVhZCB0byB0aGF0IFdFDQo+ID4+Pj4+ICAgICBIQVZF ICpfTk9fKiBUVVJOIFNFUlZFUlMgaW4gdGhlIHllbGxvdyBhcmVhIGJlbG93IHJlc3VsdGluZyBm cm9tDQo+ID4+IHRoZQ0KPiA+Pj4+PiAgICAgKEQpVExTIG1hbmRhdGluZyB0aGF0IHdhcyB0aHJv d24taW4gaW50byB2ZXJzaW9uIC0xMCBkdXJpbmcgdGhlDQo+ID4+Pj4+ICAgICBkaXNjdXNzICg9 dGhlIHNob3dzdG9wcGluZyksIHNpbmNlIFRVUk4gc2VydmVycyB3aXRoDQo+ID4+Pj4+ICAgICBj ZXJ0aWZpY2F0ZXMgYXJlIE5PVCBwcm92aWRlZCBieSB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdv cmsgKHRob3NlDQo+ID4+Pj4+ICAgICBhcmUgcHJvdmlkZWQgYnkgc29tZSAidHJ1c3QgYW5jaG9y IHN0b3JlIFtSRkM2MDI0XSBhbGxvd3MgYSBUVVJODQo+ID4+Pj4+ICAgICBjbGllbnQgLi4uIiBv ciBieSAiQ2VydGlmaWNhdGlvbiBhdXRob3JpdGllcyB0aGF0IGlzc3VlIFRVUk4gc2VydmVyDQo+ ID4+Pj4+ICAgICBjZXJ0aWZpY2F0ZXMiIGV0Yy4uKQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPGltYWdlMDA0LnBuZz4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgIFNvLCBqdXN0IGxldCBtZSByZXN0IHdpdGggdGhhdCB5b3VyIGRpc2N1c3Np b24gZG9lcyBub3QgdGFrZSBhd2F5DQo+ID4+Pj4+ICAgICB0aGUgYWxsb3dhbmNlIHRvIHVzZSBU VVJOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlIGxvY2FsIG9yIGFjY2Vzcw0KPiA+Pj4+PiAgICAg bmV0d29yayB3aXRob3V0IGF1dGhlbnRpY2F0aW9uIHRoYXQgd2FzIHJlLWludHJvZHVjZWQgaW4g dmVyc2lvbiAtNw0KPiA+Pj4+PiAgICAgb2YgdGhlIGRyYWZ0IChhZnRlciBsb25nIGRpc2N1c3Np b25zLCBpbmNsdWRpbmcgd2l0aCB5b3UgVGlydSkuDQo+ID4+Pj4+ICAgICBSZW1lbWJlciwgX3Ro b3NlIHllbGxvdyBUVVJOIHNlcnZlcnMgd2VyZSB0aGUgcmVxdWlyZW1lbnQgb2YgdGhpcw0KPiA+ Pj4+PiAgICAgZHJhZnQgdG8gYXV0byBkaXNjb3Zlcl8gc28gdGhleSBjYW4gYmUgdXNlZCBieSB0 aGUgV2ViUlRDIGJyb3dzZXJzDQo+IOKAkw0KPiA+Pj4+PiAgICAgVXNhZ2UgY2Fubm90IGJlIGZv cmJpZGRlbiAob3IgdW4tcmVjb21tZW5kZWQgYXMgQnJhbmRvbg0KPiBzdWdnZXN0cywNCj4gPj4+ Pj4gICAgIGFsdGhvdWdoIEJyYW5kb24gaXMgYWdyZWVpbmcgdG8gdGhhdCB0aGUgKEQpVExTIG1h bmRhdGUgbXVzdCB2YW5pc2gNCj4gPj4+Pj4gICAgIGZvciB0aGUgeWVsbG93IFRVUk4gc2VydmVy cykuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICBGVVJUSEVSIEpVU1QgVE8gUkVNSU5EIEFVVEhPUlMgb2Ygd2hhdCBpcyBuZWVkZWQgdG8g YmUNCj4gYWRkcmVzc2VzDQo+ID4+IGluDQo+ID4+Pj4+ICAgICB0aGlzIGRyYWZ0OyBpdCBpcyBm b3VuZCBpbg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1h cmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDIyMTYuaHRtbA0KPiA+Pj4+PiAgICAgPGh0dHBz Oi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+PiAzQV9f d3d3LmlldGYub3JnX21haWwtDQo+ID4+Pj4NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1 cnJlbnRfbXNnMDIyMTYuaHRtbCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+Pj4gdzBGNGpw TjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJ QlhnJm09TFhhSC0NCj4gPj4+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBS OCZzPU50Ulp3cm1uMkstDQo+ID4+Pj4gV1VJX1FONWtfeUhsQU4tdXpob1FVOGJzMnlBX1JCUDgm ZT0+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICBhbmQgdGhlIGNvbnRyYWRpY3Rpb24gaW4gc2VjdGlv biA3LjIgYXMgc2FpZCBpbg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbC1hcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDIyMjYuaHRtbA0KPiA+Pj4+PiAg ICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4g Pj4+PiAzQV9fd3d3LmlldGYub3JnX21haWwtDQo+ID4+Pj4NCj4gPj4NCj4gMkRhcmNoaXZlX3dl Yl90cmFtX2N1cnJlbnRfbXNnMDIyMjYuaHRtbCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+ Pj4gdzBGNGpwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4+PiBOU25zZ3diQlZV SmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4+Pg0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0aG5o RW9tWGhRSzd4UUVpa3pBdXBSOCZzPUV0aXVpVnQ1TW5qYnc5V3NEdG1qaXUybA0KPiA+Pj4+IC1k djFSb0hWcGRBbFRYdGdaSVEmZT0+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICB3aGlsZSB0aGlzIGRp c2N1c3Npb24gd2l0aCBBdXRob3IgVGlydSBhbmQgPuKAnEkgZG9uJ3QgcnVuIGEgbG9jYWwNCj4g Pj4+Pj4gICAgIG5ldHdvcmsgb3IgYW4gYWNjZXNzIG5ldHdvcmsgYW5kIHdvdWxkIG5vdCBleHBl Y3QgdG8gZGVwbG95IHJlbGF5cw0KPiA+Pj4+PiAgICAgbWVhbnQgdG8gZnVuY3Rpb24gaW4gdGhh dCBtb2Rl4oCcIEJyYW5kb24qLCBoYXMgYmVlbiBvbiBtb3JlIG9yIGxlc3MNCj4gPj4+Pj4gICAg IGRldmlhdGVkIHN1YmplY3RzLCBvciByZXBlYXRpbmcgd2hhdCB3ZSBhbHJlYWR5IGhhdmUgYmVl biB0aHJvdWdoDQo+ID4+Pj4+ICAgICBlYXJsaWVyIChQUzogTm90aWNlIHRoYXQgQXV0aG9yIFBy YXNoYW50aCBhbHJlYWR5IGxpc3RlZC9kaXNjdXNzZWQNCj4gPj4+Pj4gICAgIHRoZSBhdHRhY2sg c3R1ZmYgZHVyaW5nIHRoZSBkaXNjdXNzLiBJIGZlYXJlZCB5b3Ugd2VyZSByZWRvaW5nIHRoYXQu KQ0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgL0thcmwNCj4gPj4+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgICogaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bC0NCj4gYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAyMjE3Lmh0bWwNCj4gPj4+Pj4gICAg IDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+ Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pj4+DQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJf dHJhbV9jdXJyZW50X21zZzAyMjE3Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+Pj4+ IHcwRjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ID4+Pj4gTlNuc2d3YkJWVUph NG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVv bVhoUUs3eFFFaWt6QXVwUjgmcz1nbHhQM292WVg3Q2Q0ZjEyeklJTEpoYlRjDQo+ID4+Pj4gRUow VmlxVmdKUXlTUWtKSFlRJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgLS0tLS1VcnNwcnVuZ2xpZ3QgbWVkZGVsYW5kZS0tLS0tDQo+ ID4+Pj4+ICAgICBGcsOlbjogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSBbbWFpbHRvOnRp cmVkZHlAY2lzY28uY29tXQ0KPiA+Pj4+PiAgICAgU2tpY2thdDogZGVuIDE4IG5vdmVtYmVyIDIw MTYgMDQ6MDANCj4gPj4+Pj4gICAgIFRpbGw6IEthcmwgU3RhaGw7ICdCcmFuZG9uIFdpbGxpYW1z JzsgUHJhc2hhbnRoIFBhdGlsDQo+ID4+Pj4+ICAgICAocHJhc3BhdGkpOyB0cmFtQGlldGYub3Jn IDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+Pj4gICAgIEtvcGlhOiB0cmFtLWNoYWlyc0Bp ZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0Rhbg0KPiA+Pj4+PiAgICAg V2luZyc7ICdTcGVuY2VyIERhd2tpbnMgYXQgSUVURicNCj4gPj4+Pj4gICAgIMOEbW5lOiBSRTog W3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgIEhpIEthcmwsDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgICBJIGRvbid0IHVuZGVyc3RhbmQgeW91ciBjb25jZXJucywgcGxl YXNlIGNsYXJpZnkuIFRoZSBkcmFmdCBtYW5kYXRlcw0KPiA+Pj4+PiAgICAgKEQpVExTIGJ1dCBk b2VzIG5vdCBtYW5kYXRlIFRVUk4gc2VydmVyIHZhbGlkYXRpb24uDQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICBXZSBhcmUgZGlzY3Vzc2luZyB2YXJpb3VzIGF0dGFja3MgcG9zc2JpbGUgZm9yIHRoZSBX RyB0byBkZWNpZGUgaWYNCj4gPj4+Pj4gICAgIChEKVRMUyBpcyBhIE1VU1Qgb3IgU0hPVUxELg0K PiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgLVRpcnUNCj4gPj4+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gRnJvbTogS2FybCBTdGFo bCBbbWFpbHRvOmthcmwuc3RhaGxAaW5nYXRlLmNvbV0NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4g U2VudDogRnJpZGF5LCBOb3ZlbWJlciAxOCwgMjAxNiAyOjExIEFNDQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICA+IFRvOiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIDx0aXJlZGR5QGNpc2NvLmNv bQ0KPiA+Pj4+IDxtYWlsdG86dGlyZWRkeUBjaXNjby5jb20+PjsgJ0JyYW5kb24gV2lsbGlhbXMn DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IDxicmFuZG9uLndpbGxpYW1zQGFrYW1haS5jb20NCj4g Pj4+PiA8bWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbT4+Ow0KPiA+Pj4+PiAgICAg UHJhc2hhbnRoIFBhdGlsIChwcmFzcGF0aSkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPHByYXNw YXRpQGNpc2NvLmNvbSA8bWFpbHRvOnByYXNwYXRpQGNpc2NvLmNvbT4+Ow0KPiB0cmFtQGlldGYu b3JnDQo+ID4+Pj4+ICAgICA8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICA+IENjOiB0cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYu b3JnPjsgJ0RhbiBXaW5nJw0KPiA+Pj4+PiAgICAgPGRhbkBkYW53aW5nLm9yZyA8bWFpbHRvOmRh bkBkYW53aW5nLm9yZz4+OyAnU3BlbmNlciBEYXdraW5zDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ IGF0IElFVEYnIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbQ0KPiA+Pj4+IDxtYWlsdG86 c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBT dWJqZWN0OiBTVjogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkN Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gQ29udGludWlu ZyB0aGUgdGhyZWFkIG9mIHRoaXMgc3ViamVjdCB3aXRoIHRoZSB2aWV3IHRoYXQgaXQgc2hvdWxk IGJlDQo+ID4+Pj4gYWJvdXQgdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IE1VU1QvU0hPVUxE L1JFQ09NTUVORCBkaXNjdXNzaW9uIHJlZ2FyZGluZyBEKFRMUykgZm9yIHRoZQ0KPiA+PiBVU0FH RQ0KPiA+Pj4+IG9mDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IGFuIGFscmVhZHkgZGlzY292ZXJl ZCBUVVJOIHNlcnZlciwgd2hpY2ggbXVzdCBiZSB0b3RhbGx5DQo+ID4+IGluZGVwZW5kZW50DQo+ ID4+Pj4gb2YgdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IG1ldGhvZCB1c2VkIGZvciBkaXNj b3ZlcnkuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IEkg Y2FuJ3Qgc2F5IEkgdW5kZXJzdGFuZCB3aGVyZSBCcmFuZG9uJ3MvVGlydSdzIGRpc2N1c3Npb24g Zml0cyBpbiBhbmQNCj4gPj4+PiB3aGV0aGVyDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IGFyZSBy aWdodCB0aGluZ3MgYXJlIHNhaWQgYW5kIGFyZSBpbiB0aGUgcmlnaHQgY29udGV4dDoNCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPz8gPiA+IFRoZSBkcmFm dCBtYW5kYXRlcyAoRClUTFMgYnV0IGRvZXMgbm90IG1hbmRhdGUgVFVSTg0KPiBzZXJ2ZXINCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gdmFsaWRhdGlvbi4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4g Pz8gKEQpVExTIGhlbHBzIGF2b2lkIHZhcmlvdXMgYXR0YWNrcywgbGlrZSBhdHRhY2tlciBzZW5k aW5nIHNwb29mZWQNCj4gPj4+PiBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IG1lc3NhZ2Vz ID8/ICBXZSBzaG91bGQgZGlzY3VzcyBhbGwgc3VjaCBwb3NzaWJsZSBhdHRhY2tzLCBiZWZvcmUg d2UNCj4gPj4+PiBkZWNpZGUgdG8NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gZ28gd2l0aCBNVVNU IG9yIFNIT1VMRC4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gV2hlcmUgYXJlIHdlIGtub3c/DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+DQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+IFBsZWFzZSwganVzdCBrZWVwIHRoZSBjbGVhcmFuY2UgZnJvbSBhdXRoZW50 aWNhdGlvbiBhcyBpdCB3YXMgZnJvbQ0KPiA+Pj4+IHZlcnNpb24NCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gLTA3IG9mIHRoZSBkcmFmdCBhbHJlYWR5LCB1bnRpbCB0aGUgRChUTFMpIG1hbmRhdGUg d2FzIHRocm93biBpbg0KPiA+PiBkdXJpbmcNCj4gPj4+PiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gRElTQ1VTUy4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4NCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gU2ltcGx5LCBsb2dpY2FsbHk6DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gVFVS TiBzZXJ2ZXJzICpwcm92aWRlZCBieSogKGFuZCBtYWludGFpbmVkIGJ5Pykgc29tZSAidHJ1c3QN Cj4gPj4+PiBhbmNob3INCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBzdG9yZSBbUkZDNjAy NF0gYWxsb3dzIGEgVFVSTiBjbGllbnQgLi4uIiBvciBieSAiQ2VydGlmaWNhdGlvbg0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGF1dGhvcml0aWVzIHRoYXQgaXNzdWUgVFVSTiBzZXJ2ZXIg Y2VydGlmaWNhdGVzIg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBhcmUgTk9UIHVuZGVyIHRoZSBj bGVhcmFuY2UgZGlzY3Vzc2VkLCB3aGljaCBpcyBmb3IgIlRVUk4gc2VydmVycw0KPiA+Pj4+ICpw cm92aWRlZA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBieSogdGhlIGxvY2FsIG5ldHdvcmsgb3Ig YnkgdGhlIGFjY2VzcyBuZXR3b3JrIi4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gc28gYSBTSE9V TEQgb3IgUkVDT01NRU5ERUQgb2YgRChUTFMpIGRvZXMgbm90IGV2ZW4gYmVsb25nDQo+ID4+IHVu ZGVyDQo+ID4+Pj4gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IGNsZWFyYW5jZSBkaXNjdXNz ZWQuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+DQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+IEZVUlRIRVIsIFdoZW4gSSByZWFkOg0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA3LjIuICBSZWN1cnNpdmVseSBFbmNhcHN1 bGF0ZWQgVFVSTg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiAgICBXZWJSVEMgZW5kcG9pbnRzIFNIT1VMRCB0cmVhdCBhbnkgVFVSTiBzZXJ2ZXIgZGlzY292 ZXJlZA0KPiA+PiB0aHJvdWdoDQo+ID4+Pj4gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ICAg IG1lY2hhbmlzbXMgZGVzY3JpYmVkIGluIHRoaXMgc3BlY2lmaWNhdGlvbiBhcyBhbg0KPiBlbnRl cnByaXNlL2dhdGV3YXkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gICAgb3IgYWNjZXNzIG5ldHdv cmsgc2VydmVyLCBpbiBhY2NvcmRhbmNlIHdpdGggUmVjdXJzaXZlbHkNCj4gPj4gRW5jYXBzdWxh dGVkDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ICAgIFRVUk4gW0ktRC5pZXRmLXJ0Y3dlYi1yZXR1 cm5dLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBJc24n dCB0aGF0ICJhbnkiIGluIHRvdGFsIGNvbnRyYWRpY3Rpb24gdG8gdGhlIGNsZWFyYW5jZSBiZWlu Zw0KPiBkaXNjdXNzZWQ/DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IEkgdGhvdWdodDogImVudGVy cHJpc2UvZ2F0ZXdheSBvciBhY2Nlc3MgbmV0d29yayIgd2FzIHRoZSBzYW1lIGFzDQo+ID4+IHlv dXINCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gImxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrIiBhbmQg dGhhdCBmb3IgT1RIRVIgZGlzY292ZXJlZCBUVVJODQo+IHNlcnZlcnMNCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gKG91dHNpZGUgdGhlIGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrKSwgaXQgbXVzdCBi ZSB0aGUgYXBwbGljYXRpb24gdGhhdA0KPiA+Pj4+IGluc3RydWN0cw0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPiB0aGUgVFVSTiBjbGllbnQgaG93IHRvIHVzZS4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gSSBzdWdnZXN0IHRoZSA3LjIgc2VjdGlvbiBpcyBy ZXBsYWNlZCB3aXRoIG15Og0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiAoNCkgIkRlcGxv eW1lbnQgQ29uc2lkZXJhdGlvbnMgZm9yIFRVUk4gU2VydmVycyBQcm92aWRlZCBieQ0KPiA+PiB0 aGUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gTG9jYWwgb3INCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+PiBBY2Nlc3MgTmV0d29yayINCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4NCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gd2hpY2ggbWVudGlvbnMgUmVjdXJzaXZlbHkgRW5jYXBzdWxh dGVkIFRVUk4gW0ktRC5pZXRmLXJ0Y3dlYi0NCj4gPj4gcmV0dXJuXS4NCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gKHlvdSBjYW4gc3BlbGwgaXQgb3V0IGxpa2UgdGhhdCkNCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gL0thcmwNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gLS0tLS1VcnNwcnVuZ2xpZ3QgbWVkZGVsYW5k ZS0tLS0tDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IEZyw6VuOiBUaXJ1bWFsZXN3YXIgUmVkZHkg KHRpcmVkZHkpIFttYWlsdG86dGlyZWRkeUBjaXNjby5jb21dDQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+IFNraWNrYXQ6IGRlbiAxNSBub3ZlbWJlciAyMDE2IDA1OjAxDQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICA+IFRpbGw6IEJyYW5kb24gV2lsbGlhbXM7IEthcmwgU3RhaGw7IFByYXNoYW50aCBQYXRp bCAocHJhc3BhdGkpOw0KPiA+Pj4+IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3Jn Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBLb3BpYTogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1h aWx0bzp0cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4NCj4gPj4gV2luZyc7DQo+ID4+Pj4+ICAg ICAnU3BlbmNlciBEYXdraW5zIGF0IElFVEYnDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IMOEbW5l OiBSRTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gSGkgQnJhbmRvbiwNCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gSSBqdXN0IGxpc3Rl ZCBvbmUgcG9zc2libGUgYXR0YWNrLCB0aGVyZSBjb3VsZCBiZSB2YXJpb3VzIG90aGVyIGF0dGFj a3MNCj4gPj4gbGlrZQ0KPiA+Pj4+IHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBvbmUgZGlz Y3Vzc2VkIGluIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM1NzY2I3NlY3Rpb24tMTcu Mi4xDQo+ID4+Pj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3Vy bD91PWh0dHBzLQ0KPiA+Pj4+IDNBX190b29scy5pZXRmLm9yZ19odG1sX3JmYzU3NjYtMjNzZWN0 aW9uLQ0KPiA+Pj4+IDJEMTcuMi4xJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZy PWJ3Wi0NCj4gPj4+PiBublJHV21jR0tSSXVhZHE2LU5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1M WGFILQ0KPiA+Pj4+DQo+ID4+DQo+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1 cFI4JnM9eVRUWUtnb3IyX2FqSGU3S1BfNEJ6bmwNCj4gPj4+PiBHMUVhbXVJeV9LN2FrMFU0MFJi TSZlPT4sDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IHdoZXJlIGF0dGFja2VyIHNlbmRzIGZha2Vk IHBlcm1pc3Npb25zIHRvIHRoZSBUVVJOIHNlcnZlciB0bw0KPiBsYXVuY2gNCj4gPj4+PiBhdHRh Y2sNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gKERPUyBvciBERE9TKSBvbiB0aGUgdmljdGltIChU VVJOIGNsaWVudCkuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+IFdlIHNob3VsZCBkaXNjdXNzIGFsbCBzdWNoIHBvc3NpYmxlIGF0dGFja3MsIGJlZm9yZSB3 ZSBkZWNpZGUgdG8gZ28NCj4gPj4gd2l0aA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBNVVNUIG9y IFNIT1VMRC4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4g LVRpcnUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiAt LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+IEZyb206 IHRyYW0gW21haWx0bzp0cmFtLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBCcmFuZG9u DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gV2lsbGlhbXMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiBTZW50OiBNb25kYXksIE5vdmVtYmVyIDE0LCAyMDE2IDc6MzEgUE0NCj4gPj4+Pj4NCj4g Pj4+Pj4gICAgID4gPiBUbzogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSA8dGlyZWRkeUBj aXNjby5jb20NCj4gPj4+PiA8bWFpbHRvOnRpcmVkZHlAY2lzY28uY29tPj47IEthcmwgU3RhaGwN Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA8a2FybC5zdGFobEBpbmdhdGUuY29tIDxtYWlsdG86 a2FybC5zdGFobEBpbmdhdGUuY29tPj47DQo+IFByYXNoYW50aA0KPiA+Pj4+PiAgICAgUGF0aWwg KHByYXNwYXRpKQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+IDxwcmFzcGF0aUBjaXNjby5jb20g PG1haWx0bzpwcmFzcGF0aUBjaXNjby5jb20+PjsNCj4gdHJhbUBpZXRmLm9yZw0KPiA+Pj4+PiAg ICAgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+IENjOiB0 cmFtLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnRyYW0tY2hhaXJzQGlldGYub3JnPjsgJ0Rhbg0K PiBXaW5nJw0KPiA+Pj4+PiAgICAgPGRhbkBkYW53aW5nLm9yZyA8bWFpbHRvOmRhbkBkYW53aW5n Lm9yZz4+OyAnU3BlbmNlcg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+IERhd2tpbnMgYXQgSUVU RicgPHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tDQo+ID4+Pj4gPG1haWx0bzpzcGVuY2Vy ZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gU3ViamVj dDogUmU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiArMSBvbiB0aGUg cmF0aW9uYWxlLiBJdCBtYWtlcyBhbG1vc3Qgbm8gZGlmZmVyZW5jZSBob3cgeW91IHNlY3VyZQ0K PiA+PiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiBsb2NhbCBvciBhY2Nlc3MgbmV0d29y ayBhdCB0aGUgYm9yZGVyLCBpdCdzIHN0aWxsIHBvc3NpYmxlIHRoYXQgdGhlcmUNCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiBhcmUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gb24tcGF0aA0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+IGFkdmVyc2FyaWVzLCBhbmQgdXNpbmcgc29tZSB0eXBlIG9m IGF1dGhlbnRpY2F0aW9uIChlaXRoZXIgKEQpVExTDQo+IG9yDQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gU1RVTikgaGVscHMgdG8gcHJvdGVjdCBhZ2FpbnN0IHRoZW0uDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiBJIHN0aWxsIGFncmVlIHdpdGgg S2FybCBvbiBkb3duZ3JhZGluZyB0aGUgTVVTVCBiYWNrIHRvIFNIT1VMRA0KPiBvcg0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+IFJFQ09NTUVOREVELCBzaW5jZSBJIHRoaW5rIHRoZXJlJ3Mgcm9v bSBmb3IgZGlzYWdyZWVtZW50DQo+IGFib3V0DQo+ID4+Pj4gaG93DQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICA+ID4gY3JpdGljYWwgaXQgaXMgdG8gbWl0aWdhdGUgYWdhaW5zdCB0aGF0IGF0dGFjay4g RWFzZS1vZi11c2UgbWlnaHQgd2luDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gb3V0DQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+IGZvciBzb21lDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gbmV0 d29ya3MgcHJvdmlkZWQgdGhleSBoYXZlIG90aGVyIHByb3RlY3Rpb24gbWVjaGFuaXNtcyBhdA0K PiBlaXRoZXINCj4gPj4+PiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiBuZXR3b3JrIG9y IGRhdGFsaW5rIGxheWVyLiBJIGRvbid0IHRoaW5rIGl0IHNob3VsZCBkcm9wIGJlbG93IHRoZQ0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+IHJlY29tbWVuZGF0aW9uIGxldmVsIHRob3VnaCwgYmVj YXVzZSBtb3N0IG5ldHdvcmsgd2lsbCBub3QNCj4gaGF2ZQ0KPiA+Pj4+IHN1Y2gNCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiBtZWNoYW5pc21zIGluIHBsYWNlLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gLS1CcmFuZG9uDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiBPbiAxMS8xNC8yMDE2IDA2OjM2 IEFNLCBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIHdyb3RlOg0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPiA+ID4gVGhlcmUgc2VlbXMgdG8gYmUgY29uZnVzaW9uIHdoeSAoRClUTFMgaXMgbWFu ZGF0ZWQgaW4gdGhlDQo+IGRyYWZ0Lg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+IFRoZSBkcmFmdCBtYW5kYXRlcyAoRClUTFMgYnV0IGRvZXMg bm90IG1hbmRhdGUgVFVSTiBzZXJ2ZXINCj4gPj4+PiB2YWxpZGF0aW9uLg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgPiBJbg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+IHNjZW5hcmlvcyB3aGVyZSB0 aGUgVFVSTiBjbGllbnQgY2Fubm90IHZhbGlkYXRlIHRoZSBUVVJOIHNlcnZlciwNCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiAoRClUTFMgaGVscHMgYXZvaWQgdmFyaW91cyBhdHRhY2tzLCBsaWtl IGF0dGFja2VyIHNlbmRpbmcgc3Bvb2ZlZA0KPiA+PiBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gbWVzc2FnZXMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gdG8NCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiBUVVJOIGNsaWVudCBhbmQgc2VydmVyLiBGb3IgZXhhbXBsZSwgd2hlbiAoRClU TFMgaXMgbm90IHVzZWQsDQo+ID4+IGF0dGFja2VyDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Y2FuIHNlbmQgc3Bvb2ZlZCBUVVJOIHJlcXVlc3RzIHRvIHRoZSBUVVJOIHNlcnZlciB0byBjbG9z ZQ0KPiA+Pj4+IGFsbG9jYXRpb25zLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+IFRoZSBhYm92ZSBhdHRhY2sgaXMgcG9zc2libGUgd2hlbiBU VVJOIHNlcnZlcnMgYXJlIHByb3ZpZGVkIGJ5DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPiBl aXRoZXINCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gbG9jYWwNCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiBvciBhY2Nlc3MgbmV0d29ya3MuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4gLVRpcnUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+ DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBGcm9tOiB0cmFtIFttYWlsdG86dHJhbS1ib3Vu Y2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgS2FybA0KPiA+PiBTdGFobA0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgPiA+ID4+IFNlbnQ6IE1vbmRheSwgTm92ZW1iZXIgMTQsIDIwMTYgMTozOCBQTQ0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFRvOiAnQnJhbmRvbiBXaWxsaWFtcycgPGJyYW5k b24ud2lsbGlhbXNAYWthbWFpLmNvbQ0KPiA+Pj4+IDxtYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bh a2FtYWkuY29tPj47DQo+ID4+Pj4+ICAgICBQcmFzaGFudGgNCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiA+PiBQYXRpbA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IChwcmFzcGF0aSkgPHBy YXNwYXRpQGNpc2NvLmNvbQ0KPiA8bWFpbHRvOnByYXNwYXRpQGNpc2NvLmNvbT4+Ow0KPiA+Pj4+ IHRyYW1AaWV0Zi5vcmcNCj4gPj4+Pj4gICAgIDxtYWlsdG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBDYzogdHJhbS1jaGFpcnNAaWV0Zi5vcmcgPG1haWx0bzp0 cmFtLWNoYWlyc0BpZXRmLm9yZz47ICdEYW4NCj4gPj4gV2luZycNCj4gPj4+Pj4gICAgIDxkYW5A ZGFud2luZy5vcmcgPG1haWx0bzpkYW5AZGFud2luZy5vcmc+PjsgJ1NwZW5jZXINCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiA+PiBEYXdraW5zIGF0IElFVEYnIDxzcGVuY2VyZGF3a2lucy5pZXRm QGdtYWlsLmNvbQ0KPiA+Pj4+PiAgICAgPG1haWx0bzpzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWls LmNvbT4+OyBUaXJ1bWFsZXN3YXINCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBSZWRkeQ0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ICh0aXJlZGR5KSA8dGlyZWRkeUBjaXNjby5jb20g PG1haWx0bzp0aXJlZGR5QGNpc2NvLmNvbT4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4g U3ViamVjdDogUmU6IFt0cmFtXSBkcmFmdC1pZXRmLXRyYW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5 DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+ PiBIaSBCcmFuZG9uLA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+DQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4gPj4gSW4gdGhpcyBkcmFmdCwgeW91IGhhdmUgYmVlbiBwdXNoaW5nIGZvciAi dmFsaWRhdGlvbiIgb2YgdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gZGlzY292ZXJl ZCBUVVJOIHNlcnZlciBieSB1c2luZyBEVExTLiBUaGUgdXNlIGNhc2UgZm9yIHRoYXQNCj4gaGFz DQo+ID4+IG5vdA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGJlZW4gc3BlbGxlZCBvdXQs IGJ1dCB0aGUgdXNlIGNhc2Ugb2YgIlRVUk4gc2VydmVycyAqcHJvdmlkZWQNCj4gPj4gYnkqDQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gdGhlIGxvY2FsIG5ldHdvcmsgb3IgYnkgdGhlIGFj Y2VzcyBuZXR3b3JrIiwgcmVhbGx5IG5lZWRzIHRvIGJlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4gY2xhcmlmaWVkIGluIHRoaXMgZHJhZnQuIEZvciB0aGlzIHVzZSBjYXNlLCBjbGVhcmFu Y2UgZnJvbQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGF1dGhlbnRpY2F0aW9uIGFuZCB2 YWxpZGF0aW9uIHdhcyBtYWRlIGluIHZlcnNpb24gLTA3IG9mIHRoZQ0KPiA+PiBkcmFmdA0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiBhbHJlYWR5Lg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gUmVnYXJkaW5nIHlvdXIgY29tbWVudCBiZWxv dywgaXQgaXMgbm90IGNsZWFyIHdoaWNoIHVzZSBjYXNlDQo+ID4+IFlPVQ0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgPiA+ID4+IE5PVyBhcmUgY29uc2lkZXJpbmcuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBGdXJ0aGVyLCBESVNDT1ZFUlkg YW5kIFVTQUdFIGFyZSBub3QgdGhlIHNhbWUgaW4gdGhpcw0KPiA+PiBkaXNjdXNzaW9uLg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFlvdSBtaXggdGhhdCwgZXNwZWNpYWxseSByZWdhcmRp bmcgdGhlIGFueWNhc3QgbWV0aG9kLiBObyBvbmUNCj4gaXMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiA+PiBzdWdnZXN0aW5nIHRoYXQgdGhlIFRVUk4gc2VydmVyIGlzIFVTRUQgd2hlbiBhZGRy ZXNzZWQgYnkNCj4gPj4+PiBhbnljYXN0Lg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFRo ZXJlIGlzIG9ubHkgT05FIHBhY2tldCBhZGRyZXNzZWQgYnkgYW55Y2FzdCBhbmQgc2VudCB0byB0 aGUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBTVFVOL1RVUk4gc2VydmVyIGFuZCB0aGF0 IGlzIGZvciBESVNDT1ZFUklORyBpdC4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFNlZSBmdXJ0aGVyIGlubGluZSBiZWxvdy4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFRoYW5r cywNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBLYXJsDQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiAtLS0tLVVyc3BydW5nbGlndCBt ZWRkZWxhbmRlLS0tLS0NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBGcsOlbjogQnJhbmRv biBXaWxsaWFtcw0KPiBbbWFpbHRvOmJyYW5kb24ud2lsbGlhbXNAYWthbWFpLmNvbV0NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBTa2lja2F0OiBkZW4gMTEgbm92ZW1iZXIgMjAxNiAxOTow OA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFRpbGw6IEthcmwgU3RhaGw7ICdQcmFzaGFu dGggUGF0aWwgKHByYXNwYXRpKSc7IHRyYW1AaWV0Zi5vcmcNCj4gPj4+PiA8bWFpbHRvOnRyYW1A aWV0Zi5vcmc+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gS29waWE6IHRyYW0tY2hhaXJz QGlldGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+Ow0KPiAnRGFuDQo+ID4+Pj4g V2luZyc7DQo+ID4+Pj4+ICAgICAnU3BlbmNlciBEYXdraW5zIGF0IElFVEYnOw0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+ID4+ICdUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpJw0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IMOEbW5lOiBSZTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10 dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pg0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ICgxKSBJIGFncmVlIHdpdGggS2FybCB0aGF0IHRoZSBNVVNU IGZvciAoRClUTFMgb3IgU1RVTiBhdXRoDQo+ID4+IHNob3VsZA0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+ID4+IHJldmVydCB0byBhIFNIT1VMRCBvciBhIFJFQ09NTUVOREVELCBnaXZlbiB0aGF0 IG5ldHdvcmsNCj4gPj4+PiBwZXJpbWV0ZXINCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBj b250cm9sIGlzIGNhbGxlZCBvdXQgd2l0aCBNVVNUIChub3RlIHRoYXQgdGhlcmUgYXJlIGEgZmV3 DQo+ICJtdXN0Ig0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHRvICJNVVNUIiBlZGl0cyBy ZXF1aXJlZCBpbiB0aGF0IHRleHQpLiBBbHRob3VnaCBJIHdvdWxkDQo+IGRpc2FncmVlDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gd2l0aCBhbiBlbnRlcnByaXNlIG5ldHdvcmsgYWRtaW4g d2hvIGNob29zZXMgbm90IHRvIGRvIG9uZQ0KPiBvZg0KPiA+Pj4+IHRob3NlDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gPj4gdHdvIHRoaW5ncyAoc2VlIG15IGNvbW1lbnRzIGFib3V0ICgzKS8o NCkgYmVsb3cpLCBJIHRoaW5rDQo+IHRoZXJlJ3MNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+ PiByb29tIGZvciBkaWZmZXJlbmNlIG9mIG9waW5pb24gdGhlcmUsIHNvIE1VU1QgaXMgdW5saWtl bHkgdG8gYmUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBjb21wbGllZA0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiB3aXRoDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gYW55d2F5Lg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gW0th cmxdIEdvb2QgdGhhdCB5b3UgYWdyZWUgdGhlIE1VU1QgKHRocm93bi1pbiBkdXJpbmcNCj4gZGlz Y3VzcykNCj4gPj4+PiBtdXN0DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gZ28gYXdheSwg YnV0IGZvciB0aGUgdXNlIGNhc2Ugb2YgIlRVUk4gc2VydmVycyAqcHJvdmlkZWQgYnkqDQo+IHRo ZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGxvY2FsIG5ldHdvcmsgb3IgYnkgdGhlIGFj Y2VzcyBuZXR3b3JrLiIgdGhlcmUgc2hvdWxkIG5vdCBldmVuDQo+ID4+IGJlDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+IFNIT1VMRA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+IG9yIFJFQ09NTUVO RC4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBZb3VyIGFyZSByZWxhdGluZyB0byBUVVJO IHNlcnZlcnMgKnByb3ZpZGVkIGJ5KiAoYW5kDQo+IG1haW50YWluZWQNCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+PiBieT8pIHNvbWUgInRydXN0IGFuY2hvciBzdG9yZSBbUkZDNjAyNF0gYWxs b3dzIGEgVFVSTiBjbGllbnQNCj4gLi4uIg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IG9y IGJ5ICJDZXJ0aWZpY2F0aW9uIGF1dGhvcml0aWVzIHRoYXQgaXNzdWUgVFVSTiBzZXJ2ZXINCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBjZXJ0aWZpY2F0ZXMiIHRoYXQgKnByb3ZpZGUgVFVS TiBzZXJ2ZXJzIHdpdGggdGhlaXIgY2VydGlmaWNhdGVzDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4gaW4qIHRoYXQgeW91IGV4cGVjdCB0byBiZSBkaXNjb3ZlcmVkIGFuZCB3aGVyZSB0aGUg VFVSTg0KPiBjbGllbnQNCj4gPj4+PiAodGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4g V2ViUlRDIGJyb3dzZXIpIG11c3QgYmUgZXF1aXBwZWQgdG8gYWNjZXB0IHRob3NlDQo+IGNlcnRp ZmljYXRlcy4NCj4gPj4+PiBUaGF0DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gaXMgTk9U IEZPUiAidGhlIFRVUk4gc2VydmVycyAqcHJvdmlkZWQgYnkqIHRoZSBsb2NhbCBuZXR3b3JrDQo+ IG9yDQo+ID4+Pj4gYnkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiB0aGUgYWNjZXNzIG5l dHdvcmsiIHRoYXQNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gaXMNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiBiZWluZyBkaXNjdXNzZWQgaGVyZS4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+ Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4gKDIpIEkgZGlzYWdyZWUgd2l0aCBLYXJsIGFib3V0IGFueWNhc3QuIEEgc2VydmVyIHRoYXQg cHJvcGVybHkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBzdXBwb3J0cyBhbnljYXN0IFtL YXJsXSBXaGF0IGlzICJhIHNlcnZlciB0aGF0IHByb3Blcmx5IHN1cHBvcnRzDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gPj4gYW55Y2FzdCI/IEl0IGlzIGNlcnRhaW5seSBOT1QgQSBbUkZDNTc2 Nl0gVFVSTiBzZXJ2ZXIgdGhhdCBpcw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHN1cHBv c2VkDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IHRvDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g YmUgZGlzY292ZXJlZCBieSB0aGlzIGRyYWZ0Lg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ IEFsc28gbm90aWNlIHRoYXQgd2UgYXJlIHRhbGtpbmcgYWJvdXQgb25lIGFueWNhc3QgcGFja2V0 IEZPUg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IERJU0NPVkVSWSwgTk9UIFVTQUdFIChy ZWxheWluZyB0cmFmZmljKSB3aXRoIGFueWNhc3QNCj4gYWRyZXNzaW5nLg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgPiA+ID4+IChJIGFza2VkIHRoYXQgdGhlIGNvbmZ1c2luZyAic3VwcG9ydHMgYW55 Y2FzdCIgc3RhdGVtZW50IGlzDQo+ID4+IHJlbW92ZWQNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4g PiA+PiBmcm9tIHRoZSBiZWdpbm5pbmcgb2YgdGhlIGRyYWZ0LikNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHdpbGwgaW5kZWVkIHRyZWF0 IGluY29taW5nIHJlcXVlc3RzIGRpZmZlcmVudGx5IGRlcGVuZGluZyB1cG9uDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gPj4gd2hldGhlciB0aGV5IGFycml2ZSBvbiB0aGUgYW55Y2FzdCBhZGRy ZXNzIG9yIHRoZSB1bmljYXN0DQo+ID4+IGFkZHJlc3MuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4gSSBzdHJvbmdseSBkaXNhZ3JlZSB3aXRoIHRoZSBpZGVhIG9mIHVzaW5nIFRyeSBBbHRl cm5hdGUgb24gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gYmluZGluZyByZXF1ZXN0 LCBiZWNhdXNlIHlvdSB3YW50IHJlZGlyZWN0IGZvciB0aGUgbG9uZy1saXZlZA0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+ID4+IGFsbG9jYXRlIHJlcXVlc3QsIG5vdCBmb3IgdGhlIHF1ZXJ5LXJl c3BvbnNlIGJpbmRpbmcgcmVxdWVzdC4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBbS2Fy bF0gV2l0aCBhIFRVUk4gc2VydmVyIHByb3ZpZGVkIGJ5IHRoZSBsb2NhbCBvciBhY2Nlc3MNCj4g Pj4gbmV0d29yaywNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBTVFVOIGlzIE5PVCBVU0VE IGZvciBzZXR0aW5nIHVwIGFueSBiaW5kaW5nIGFuZCBubw0KPiBzdWJzZXF1ZW50DQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4gdHJhZmZpYy4gVGhlIFNUVU4gYmluZGluZyByZXNwb25zZSAz MDAgVHJ5IEFsdGVybmF0ZSAoc3RhdGljYWxseQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ IGNvbmZpZ3VyZWQpIGluIG15IHByb3Bvc2VkIHRleHQsIGlzIG9ubHkgYW4gaW5kaWNhdGlvbiB1 c2VkIGF0DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gRElTQ09WRVJZLCB0aGF0IGEgbmV0 d29yayBwcm92aWRlZCBUVVJOIHNlcnZlciBpcyB0aGVyZSBhbmQNCj4gPj4+PiBzaG91bGQNCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBiZSB1c2VkIGF0IGl0cyB1bmljYXN0IGFkZHJlc3Mg cmV2ZWFsZWQgaW4gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gMzAwIHJlc3BvbnNl LiBUaGUgbG9uZy1saXZlZCBUVVJOIGFsbG9jYXRlIElTIFVTRUQgZm9yIHRoZQ0KPiA+PiB0cmFm ZmljLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFRoZSBTVFVOIHNlcnZlciBwb3J0aW9u IG9mIHRoZSBUVVJOIHNlcnZlciBwYXJhbGxlbGluZyB0aGUNCj4gPj4gZGVmYXVsdA0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGdhdGV3YXkgcm91dGVyIGlzIG5ldmVyIHVzZWQgZm9yIGFu eSBiaW5kaW5nLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+DQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICA+ID4gPj4gUGFydCBvZiBteSByZWFzb24gZm9yIHRoaXMgaXMgdGhhdCBnb29kIChieSBt eSBkZWZpbml0aW9uKSBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gc2VydmVyIGRp c3RyaWJ1dGlvbiBpcyBicm9hZGVyIHRoYW4gaXMgcmVhc29uYWJsZSBmb3IgYW55Y2FzdA0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGFkZHJlc3MgbWFuYWdlbWVudCwgYW5kIGRldGVybWlu aW5nIGEgcmVkaXJlY3QgYWRkcmVzcyB0byBiZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ IGRlbGl2ZXJlZCBpbmNyZWFzZXMgdGhlIGNvc3Qgb2YgaGFuZGxpbmcgdGhlIFNUVU4gYmluZCBy ZXF1ZXN0Lg0KPiBJdA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGlzIGRlc2lyYWJsZSBm b3IgdGhhdCBjb3N0IHRvIHNjYWxlIHdpdGggdGhlIFRVUk4gYWxsb2NhdGUgbG9hZCwNCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBub3QgdGhlIFNUVU4gYmluZA0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPiBsb2FkLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFtLYXJsXSBZb3UganVz dCBhZGQgYSBzdGF0aWMgcm91dGUgaW4geW91IGFjY2VzcyByb3V0ZXIgZm9yIHRoZQ0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGFueWNhc3QgYWRkcmVzcyB0byBwb2ludCB0byB5b3VyIFRV Uk4gc2VydmVyIQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+DQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICA+ID4gPj4gSSBkb24ndCBvcHBvc2Ugc3VwcG9ydGluZyBib3RoIGluIHRoZSBzcGVjIGlm IHNvbWVvbmUgd2FudHMgdG8NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBwcm9wb3NlIGxh bmd1YWdlIGZvciB0aGF0LCBidXQgaXQgd291bGQgYWRkIGJ1cmRlbiB0byBjbGllbnQNCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBpbXBsZW1lbnRhdGlvbnMgYmVjYXVzZSB0aGV5IHdvdWxk IGJlIHJlcXVpcmVkIHRvIHN1cHBvcnQNCj4gPj4gYm90aA0KPiA+Pj4+IGV2ZW4NCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiA+PiB0aG91Z2ggdGhlIHNlcnZlciBjb3VsZCB1c2UgZWl0aGVyLiBP biB0aGUgb3RoZXIgaGFuZCwgdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gY3VycmVu dGx5IGRlZmluZWQgbWV0aG9kIHNob3VsZG4ndCByZXF1aXJlIGNoYW5nZXMgdG8gY2xpZW50cw0K PiBhdA0KPiA+PiBhbGwuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gW0thcmxdID8hIEJ1 dCBpdCBkb2VzIG5vdCBmaW5kIFtSRkM1NzY2XSBUVVJOIHNlcnZlcnMuLi4NCj4gPj4+Pj4NCj4g Pj4+Pj4gICAgID4gPiA+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ICgzKS8oNCkgSSBk aXNhZ3JlZSB3aXRoIEthcmwncyBhc3Nlc3NtZW50IG9mIHRoZSBkZXBsb3ltZW50DQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4gY29uc2lkZXJhdGlvbnMsIGVzcGVjaWFsbHkgdGhlIGNvbmNs dXNpb24gdGhhdCBhbnljYXN0IGlzIHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGJl dHRlciBwYXRoIGZvciBsb2NhbC9hY2Nlc3MgbmV0d29ya3MuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4gW0thcmxdIElmIHlvdSBtZWFuIHRyYWZmaWMgcGF0aHMgKGxpa2UgSSBkaWQpLCAi cGF0aHMiIGFyZSBmb3INCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBVU0FHRSBhbmQgbm8g b25lIGlzIHN1Z2dlc3RpbmcgYW55Y2FzdCBmb3IgdGhhdC4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiA+PiBJbmRlcGVuZGVudCBvZiBob3cgZGlzY292ZXJlZCAoYnkgYW55Y2FzdCBvciBhbnkg b2YgdGhlIEROUw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IG1ldGhvZHMpIEFMTCBVU0FH RSB0aHJvdWdoIHBhdGhzIGlzIGJ5IHVuaWNhc3QgYWRkcmVzc2luZy4NCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IEl0IG1pZ2h0IGJlIGJl dHRlciBmb3IgdGhlIHNlcnZlcg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGltcGxlbWVu dGVyLCBidXQgbm90IGZvciB0aGUgdGhlIGNsaWVudCwgYmVjYXVzZSBJIHRoaW5rIGl0J3MNCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBwYXJ0aWN1bGFybHkgZGlmZmljdWx0IGZvciBhIGNs aWVudCB0byBkZXRlcm1pbmUgd2hldGhlciBpdCdzDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4gbmV0d29yaw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBpcw0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+ICJzZWFsZWQiLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFtLYXJsXSBObywg bm90IGF0IGFsbC4gQmxvY2tpbmcgU1RVTiBwYWNrZXRzIGF0IHRoZSBkZWZhdWx0DQo+IGdhdGV3 YXkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBpcyB0aGUgd2F5IHRvICJuZXR3b3JrIHdp c2UiIHNlYWwgdGhlIGxvY2FsIG5ldHdvcmsgKGFuZCBvbmx5DQo+ID4+IGFsbG93DQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4gdGhlIHBhcmFsbGVsIFRVUk4gcGF0aCkhIFRoYXQgaXMgZWFz aWx5IGRldGVjdGVkIGJ5IGEgVFVSTg0KPiBjbGllbnQuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBUaGUgY2xpZW50IGhhcyB0byB0cnVz dCB0aGF0IHRoZSBuZXR3b3JrIGlzIHByb3Blcmx5IHNlYWxlZCwNCj4gc2luY2UNCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiA+PiBpdCdzIGRpZmZpY3VsdCAoYXQNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+PiBsZWFzdCkgZm9yIHRoZSBjbGllbnQgdG8gdmVyaWZ5LiBBbHNvLCBJIHRoaW5r IHRoYXQgdGhlIEROUyBhbmQNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBESENQIG1ldGhv ZHMgYXJlIGxpa2VseSB0byBiZSBlYXNpZXIgZm9yIGVudGVycHJpc2UgYW5kIGFjY2Vzcw0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IG5ldHdvcmtzIHRvIGltcGxlbWVudCwgc2luY2UgdGhl eSB3aWxsIGhhdmUgdGhlIG5lY2Vzc2FyeQ0KPiA+PiBzeXN0ZW1zDQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICA+ID4gPj4gaW4gcGxhY2UgYWxyZWFkeS4gRXZlbiBhIGhvbWUgbmV0d29yayBnYXRld2F5 IGFwcGxpYW5jZSB3aWxsDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gYWxyZWFkeSBoYXZl IGJvdGggaW50ZWdyYXRlIEROUyBhbmQgaW50ZWdyYXRlIERIQ1AsIHNvIEkNCj4gc3VzcGVjdA0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHRoYXQgYSBzbWFsbCBsb2NhbCBuZXR3b3JrIHdp bGwgaGF2ZSBhbiBlYXNpZXIgdGltZSB3aXRoIHRoZXNlDQo+IHRoYW4NCj4gPj4+PiB5b3UNCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gc3VnZ2VzdCBhcyB3ZWxsLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+ID4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gW0thcmxdIFNvIHlvdSBhZ3Jl ZSB0aGF0IGZvciBhIFRVUk4gc2VydmVyIGluIGEgbG9jYWwgbmV0d29yaywNCj4gaXRzDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gYWRkcmVzcyBzaGFsbCBvbmx5IGJlIGRlcGxveWVkIGlu IGxvY2FsIEROUyAtIEkgdGhpbmsgdGhlIGRyYWZ0DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4gc2hvdWxkDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IHNheQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+IHRoYXQgYWxzby4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+ID4+IERlc3BpdGUgdGhlIGZhY3QgdGhhdCBJIGRpc2FncmVlIHdpdGgg dGhlIGFzc2Vzc21lbnQsIEkgZG9uJ3QgcnVuDQo+IGENCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4g PiA+PiBsb2NhbCBuZXR3b3JrIG9yIGFuIGFjY2VzcyBuZXR3b3JrIGFuZCB3b3VsZCBub3QgZXhw ZWN0IHRvDQo+ID4+IGRlcGxveQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHJlbGF5cyBt ZWFudCB0byBmdW5jdGlvbiBpbiB0aGF0IG1vZGUsIHNvIEkgd2lsbCBub3QgaGF2ZSBzdHJvbmcN Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBvYmplY3Rpb25zIHRvIGluY2x1ZGluZyB0aGF0 IGxhbmd1YWdlIGlmIHRoZXJlIGlzIGJyb2FkIHN1cHBvcnQNCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiA+PiB3aXRoaW4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gdGhlDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4gV0cgZm9yIEthcmwncyBmcmFtaW5nLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+ID4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gLS1CcmFuZG9uDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gPj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBPbiAxMS8xMC8y MDE2IDA1OjQ4IFBNLCBLYXJsIFN0YWhsIHdyb3RlOg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ ID4+PiAoMSkgVGhlIGRvd25ncmFkZSBvZiB0aGUgTVVTVCBsZXZlbCByZXF1aXJlbWVudCBmb3IN Cj4gPj4+PiBhdXRoZW50aWNhdGlvbg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBkZWZp bmVkDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gaW4gW1JGQzU3NjZdIHdhcyAicmlnaHRs eSIgKHRvIHVzZSB0aGUgdGVybSBmcm9tIGJlbG93KQ0KPiA+PiBpbnRyb2R1Y2VkDQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4gYW5kIG1hZGUgT1BUSU9OQUwgZm9yIFRVUk4gc2VydmVycyBw cm92aWRlZCBieSB0aGUgbG9jYWwgb3INCj4gPj4+PiBhY2Nlc3MNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiBuZXR3b3JrLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+ID4+PiBIT1dFVkVSLCBQcmFzaGFudGgnczogIkkgdGhpbmsgd2UgY2Fu IG1hbmRhdGUgKEQpVExTICppZioNCj4gPj4gU1RVTg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ ID4+IGF1dGhlbnRpY2F0aW9uIG9yIHRoaXJkLXBhcnR5IGF1dGhvcml6YXRpb24gaXMgbm90IHVz ZWQuIg0KPiB0aHJvd24tDQo+ID4+IGluDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gZHVy aW5nIHRoZSBESVNDVVNTLCBtdXN0IGJlIGRlbGV0ZWQgZnJvbSB0aGUgLTEwIHZlcnNpb24gb2YN Cj4gdGhpcw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGRpc2NvdmVyeSBzaW5jZSBpdCBC TE9DS3MgdGhlIHVzYWdlIGFuZCBkZXBsb3ltZW50IG9mDQo+IG5ldHdvcmsNCj4gPj4+Pj4NCj4g Pj4+Pj4gICAgID4gPiA+PiBwcm92aWRlZCBUVVJOIHNlcnZlcnMsIHdoaWNoIHdhcyB0aGUgbWFp biBwdXJwb3NlIG9mIHRoaXMNCj4gPj4+PiBkaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiA+PiBkcmFmdC4gKEFsc28sIEF1dGhvcnMncyBkaWQgbm90IGZvbGxvdyBCZW4gQ2FtcGJl bGwnczogIkkgc2F3IGENCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBjb21tZW50IG9uIG15 IERJU0NVU1MgZW1haWwgdGhyZWFkIGZyb20gS2FybCBTdGFobCwgc3RhdGluZw0KPiA+PiB0aGF0 DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gRFRMUyBjb3VsZCBub3QgYmUgbWFuZGF0ZWQu IEhhcyB0aGF0IGlucHV0IGJlZW4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBjb25zaWRl cmVkPyIpDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4+IFRoZSB0aHJvd24taW4gYWRkaXRpb24gaW4gdmVyc2lvbiAtMTAgKG5vdCBzaG93 biBpbiBmdWxsDQo+IGJlbG93KQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBoaWdobGln aHRzDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gdGhpczoNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gICAgQSBUVVJOIGNsaWVu dCBNVVNUIHVzZSAoRClUTFMgLi4uIGluIHRoZSBhYnNlbmNlIG9mIFNUVU4NCj4gPj4gbG9uZy0N Cj4gPj4+PiB0ZXJtDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgIGNyZWRlbnRpYWwg bWVjaGFuaXNtIFtSRkM1Mzg5XSBvciBTVFVOIEV4dGVuc2lvbiBmb3INCj4gVGhpcmQtDQo+ID4+ Pj4gUGFydHkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gICAgQXV0aG9yaXphdGlvbiBb UkZDNzYzNV0uICAuLi4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4gICAgID4gPiA+Pj4gICAgbyAgRm9yIGNlcnRpZmljYXRlLWJhc2VkIGF1dGhlbnRpY2F0 aW9uLCBhIHByZS1wb3B1bGF0ZWQNCj4gdHJ1c3QNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gYW5j aG9yDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgICAgIHN0b3JlIFtSRkM2MDI0XSBh bGxvd3MgYSBUVVJOIGNsaWVudCAuLi4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gICAgbyAgQ2VydGlmaWNhdGlvbiBhdXRob3JpdGll cyB0aGF0IGlzc3VlIFRVUk4gc2VydmVyDQo+IGNlcnRpZmljYXRlcw0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPiA+ID4+PiAgICAgICAuLi4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gICAgbyAgRm9yIFRVUk4gc2VydmVycyB0aGF0IGRv bid0IGhhdmUgYSBjZXJ0aWZpY2F0ZSB0cnVzdCBjaGFpbg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiAoZS5nLiwNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gICAgICAgYmVjYXVzZSB0aGV5 IGFyZSBvbiBhIGhvbWUgbmV0d29yayBvciBhIGNvcnBvcmF0ZQ0KPiA+PiBuZXR3b3JrKSwNCj4g Pj4+PiBhDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgICAgIGNvbmZpZ3VyZWQgbGlz dCBvZiBUVVJOIHNlcnZlcnMgY2FuIGNvbnRhaW4gdGhlIFN1YmplY3QNCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+Pj4gUHVibGljDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IEtleQ0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiAgICAgICBJbmZvIChTUEtJKSBmaW5nZXJwcmludCBvZiB0 aGUgVFVSTiBzZXJ2ZXJzLi4uIGV0Yy4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gV2hhdCBkb2VzIHRoZSBBdXRob3JzIGhhdmUgaW4g bWluZCAtIGEgcmVndWxhdGVkIG5ldHdvcmsgb2YNCj4gPj4+PiBUVVJODQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4gPj4+IHNlcnZlcnMsDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gd2hl biB0aGUgcHVycG9zZSB3YXMgZm9yIGV2ZXJ5b25lIHRvIGJlIGFibGUgdG8gdXNlIGdvb2QNCj4g Pj4gV2ViUlRDDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gZXZlcnl3aGVyZSB5b3UgY2Fu IHN1cmYsIGluY2x1ZGluZyBiZWhpbmQgeW91ciBob21lIEJlc3QgQnV5DQo+ID4+Pj4gYm91Z2h0 DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gV2lGaSByb3V0ZXIgKHdoaWNoIHdlIGNhbiBo b3BlLCBzb21lIGRheSwgd2lsbCBpbmNsdWRlIGENCj4gZGVmYXVsdA0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPiA+ID4+IGNvbmZpZ3VyZWQsIHJlYWR5IHRvIHVzZSwgVFVSTiBzZXJ2ZXIgcGF0aCBw YXJhbGxlbGluZyBpdHMNCj4gZGVmYXVsdA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGdh dGV3YXkgcGF0aCAoaS5lLiB0aGUgTkFUL2ZpcmV3YWxsL2FjY2VzcyByb3V0ZXIvZGVmYXVsdA0K PiA+PiBnYXRld2F5KT8NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4gICAgID4gPiA+Pj4gVGhpcyBzcGVjaWZpY2F0aW9uIHNoYWxsIChhdCBsZWFzdCkgc3Bl Y2lmeSBkaXNjb3Zlcnkgb2YgbmV0d29yaw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBw cm92aWRlZA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFRVUk4gc2VydmVycyB0byBhbGxv dyByZWFsLXRpbWUgY29tbXVuaWNhdGlvbiwgaW4gc2l0dWF0aW9ucw0KPiA+PiB3aGVyZQ0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGl0IG90aGVyd2lzZSBpcyBub3QgcG9zc2libGUgb3Ig YmFkOg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiAtIHRvIG1lZXQgdGhlIGF1dG8gY29u ZmlndXJhdGlvbiBvZiBSRkMgNzQ3OCAoV2ViIFJlYWwtVGltZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+ID4+PiBDb21tdW5pY2F0aW9uDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gVXNl IENhc2VzIGFuZCBSZXF1aXJlbWVudHMpIDIuMy41LjEuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4+IC0gcHJvdmlkaW5nIGEgZGlzY292ZXJ5IG1ldGhvZCBzdWl0YWJsZSBmb3INCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gZHJhZnQtaWV0Zi1ydGN3ZWItcmV0dXJuLTAxDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IFRo ZSBhYm92ZSBoYXMgYWxyZWFkeSBiZWVuIGRpc2N1c3NlZCBtYW55IHRpbWVzIGluIHRoaXMgV0c6 DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwt DQo+ID4+Pj4gYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAxMzE5Lmh0bWwNCj4gPj4+Pj4g ICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ ID4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pj4+DQo+ID4+DQo+IDJEYXJjaGl2ZV93 ZWJfdHJhbV9jdXJyZW50X21zZzAxMzE5Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+ Pj4+IHcwRjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ID4+Pj4gTlNuc2d3YkJW VUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhu aEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1Pc2wwZFR4aXNNODVZaGRKX18waWRsbQ0KPiA+Pj4+IEV1 SFpETzk0emVFVGgwS3VXT1VnJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPiA+Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9t c2cwMTc0Mi5odG1sDQo+ID4+Pj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQu Y29tL3YyL3VybD91PWh0dHBzLQ0KPiA+Pj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4+ Pg0KPiA+Pg0KPiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9tc2cwMTc0Mi5odG1sJmQ9RGdN RmFRJmM9OTZaYlpaY2FNRjQNCj4gPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVh ZHE2LQ0KPiA+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+IE1WUWky bFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9b3ZrS3BBRnRhZGxfdFctDQo+ID4+ Pj4gc0dFOWxLQmlkRmlKOUR3QXhyS3lDLUtnZEM2dyZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiA+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4gPj4+PiBhcmNoaXZlL3dlYi90 cmFtL2N1cnJlbnQvbXNnMDIxOTEuaHRtbA0KPiA+Pj4+PiAgICAgPGh0dHBzOi8vdXJsZGVmZW5z ZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+PiAzQV9fd3d3LmlldGYub3Jn X21haWwtDQo+ID4+Pj4NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJlbnRfbXNnMDIx OTEuaHRtbCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+Pj4gdzBGNGpwTjZMWmcmcj1id1ot bm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0N Cj4gPj4+Pg0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZz PTZxVG16cW5FVzVmV1JETnQ2SlQ5Ug0KPiA+Pj4+IFd0bmtLZWNPVVlHOE95UHRCVlk5RWsmZT0+ DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4+IEp1c3QgYXMgY3JlZGVudGlhbHMgZm9yIGF1dGhlbnRpY2F0aW9uIGNhbm5vdCBiZSBleHBl Y3RlZCB0bw0KPiBiZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBhdmFpbGFibGUNCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBmb3IgdGhpcyBnZW5lcmFsIHVzYWdlLCBub3IgY2Fu IHdlIGltcG9zZSB0aGF0IGNlcnRpZmljYXRlcw0KPiBzaG91bGQNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+PiBiZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiB1c2VkLg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgPiA+ID4+IEZvciB0aGUgbmV0d29yayBwcm92aWRlZCBUVVJOIHNlcnZlciwgd2Ug c2hvdWxkIG5vdC9tdXN0DQo+IG5vdA0KPiA+Pj4+IGV4cGVjdA0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+ID4+IHNvbWUgaGlnaGVyIGxldmVsIG9mIHRydXN0IG9yIHNlY3VyaXR5IHdoZW4gdGhl IHJlYWwtdGltZSBtZWRpYQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGZsb3dzIHRocm91 Z2ggdGhlIFRVUk4gc2VydmVyIHRoYW4gd2hlbiBpdCBnb2VzIHRocm91Z2ggdGhlDQo+ID4+Pj4g ZGVmYXVsdA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBnYXRld2F5IQ0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPiA+ID4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBUaGUgdXNlIG9mIChE KVRMUyBoYXMgYmVlbiBkaXNjdXNzZWQgaW50ZW5zaXZlbHkgaW4gdGhlIC0wNA0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+ID4+PiB2ZXJzaW9uIG9mIHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+ID4+IGRyYWZ0DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IGh0dHBzOi8vd3d3Lmll dGYub3JnL21haWwtDQo+ID4+Pj4gYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAxODIxLmh0 bWwNCj4gPj4+Pj4gICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJs P3U9aHR0cHMtDQo+ID4+Pj4gM0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pj4+DQo+ID4+DQo+ IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJyZW50X21zZzAxODIxLmh0bWwmZD1EZ01GYVEmYz05Nlpi WlpjYU1GNA0KPiA+Pj4+IHcwRjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ID4+ Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4gTVZRaTJs VmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1KSm00OWNFNlYxMGlpc3FIcDNqTmVT bg0KPiA+Pj4+IHFFN3dIekR0U3JJaHNRVThTeDNBJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+ID4+PiBhbmQgd2FzIE5PVCBtYW5kYXRlZCBmb3IgdGhlIFRVUk4gc2VydmVyIHByb3ZpZGVk IGJ5IHRoZQ0KPiA+PiBsb2NhbA0KPiA+Pj4+IG9yDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4+IGFjY2Vzcw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IG5ldHdvcmsuIEl0IGNhbm5v dCBiZSB0aHJvd24taW4gbm93IGFnYWluIQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+Pg0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBBbnkgYXJndW1lbnRzIGFnYWluc3QgaGF2ZSBi ZWVuIG9mIHR5cGU6IFdlIG5lZWQgc2VjdXJpdHkNCj4gaW4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiA+Pj4gaXRzZWxmDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IC0NCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiA+PiBwcm90ZWN0IHRoaXMgYW5kIHRoYXQgLSBkbyBldmVyeSBhdXRo ZW50aWNhdGlvbi92YWxpZGF0aW9uIGluIHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ IGJvb2sgKHdoZXRoZXIgbmVlZGVkIG9yIG5vdCkgZXRjLiwgd2hpY2ggb25seSBsZWFkcyB0bw0K PiByZXNwb25zZXMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBsaWtlIEkgaGFkIHRvIGJy aW5nIHVwIGR1cmluZyB0aGUgZGlzY3VzczoNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4g W0thcmxdIERvIHlvdSB0aGluayB3ZSBuZWVkIHRvIGRpc2NvdmVyIFRVUk4gc2VydmVycyBmb3Ig dGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IHBsZWFzdXJlIG9mDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gPj4gZG9pbmcgInNlY3VyaXR5IHRoYXQgZGVhbCBkaXJlY3RseSB3aXRo IFRVUk4gbWVzc2FnZXMiIGluIGl0c2VsZiwNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBh bmQgbm90IGZvciB3aGF0IHRoZXkgYXJlIHN1cHBvc2VkIHRvIGRvIChyZWxheSAiYXBwbGljYXRp b24NCj4gPj4gZGF0YSIpDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gYW5kIGRvIHlvdSBh bHNvIHRoaW5rIHRoYXQgaXMgd2h5IGEgbmV0d29yayBwcm92aWRlciB3aWxsDQo+IGRlcGxveQ0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHN1Y2ggVFVSTg0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+IHNlcnZlciBmb3IgaGlzIHVzZXJzPw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ IFBsZWFzZSBkbyBub3Qgc3RvcCB0aGUgcHVycG9zZSAoYnkgc3VjaCBwaHJhc2VzKSENCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gKEFsc28sIGVuY3J5cHRpb24gYW5kIHByb3RlY3Rpb24g YWdhaW5zdCBtYW4taW4tdGhlLW1pZGRsZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBh dHRhY2tzLCBmb3INCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiB0aGUgcGF5bG9hZCAocmVh bC10aW1lIHRyYWZmaWMpIGFyZSBmb3IgdGhlIGVuZHBvaW50cyB0byBkbyAtIGxpa2UNCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiB3aXRoIFdlYlJUQywgbWFuZGF0aW5nIERUTFMtU1JUUCBt ZWRpYSAtIGl0IHNob3VsZCBub3QgYmUNCj4gPj4+PiBleHBlY3RlZA0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPiA+ID4+IHRvIGJlIGRvbmUgYnkgYSBUVVJOIHNlcnZlciwgZXNwZWNpYWxseSB3aGVu IG5vdCBhbHdheXMgdXNlZC4pDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICgyKSBB bHNvIGFzIHBvaW50ZWQgb3V0IGR1cmluZyB0aGUgRElTQ1VTUw0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPiA+Pj4+IGFyY2hpdmUvd2Vi L3RyYW0vY3VycmVudC9tc2cwMjE0NC5odG1sDQo+ID4+Pj4+ICAgICA8aHR0cHM6Ly91cmxkZWZl bnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLQ0KPiA+Pj4+IDNBX193d3cuaWV0Zi5v cmdfbWFpbC0NCj4gPj4+Pg0KPiA+Pg0KPiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9tc2cw MjE0NC5odG1sJmQ9RGdNRmFRJmM9OTZaYlpaY2FNRjQNCj4gPj4+PiB3MEY0anBONkxaZyZyPWJ3 Wi1ublJHV21jR0tSSXVhZHE2LQ0KPiA+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFI LQ0KPiA+Pj4+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9aHRpODg1 RkgwSV8tDQo+ID4+Pj4gM3o3ZG9sZllDQWlhNEZYM2kxMnNVQ1dzR2VzTkQ2cyZlPT4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gYW5kIHR3byB0aW1lcyBlYXJsaWVyIChkdXJpbmcgV0cg ZGlzY3Vzc2lvbnMsIGJ1dCBub3QNCj4gYWRkcmVzc2VkDQo+ID4+Pj4gb3INCj4gPj4+Pj4NCj4g Pj4+Pj4gICAgID4gPiA+PiByZXNwb25kZWQgdG8gYnkgdGhlIEF1dGhvcnMpOg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLQ0KPiA+Pj4+IGFy Y2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMjA4MS5odG0NCj4gPj4+Pj4gICAgIDxodHRwczov L3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4gM0FfX3d3 dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pj4+DQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJhbV9jdXJy ZW50X21zZzAyMDgxLmh0bSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dw0KPiA+Pj4+IDBGNGpwTjZM Wmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhn Jm09TFhhSC0NCj4gPj4+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZz PWYtDQo+ID4+Pj4gR3pPVHNQbTg2TlVxekZYeWpBZ1B6NngtQmlBLWJ1TGhJRlB0OVFmRWcmZT0+ IGwNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gYW5kIGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWwtDQo+ID4+Pj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3Yy L3VybD91PWh0dHBzLQ0KPiA+Pj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4+PiAyRCZk PURnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGpwTjZMWmcmcj1id1otDQo+ID4+IG5uUkdXbWNHS1JJ dWFkcTYtDQo+ID4+Pj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4g Pj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1TYTNqd3RBMlRG dE5BSUFuZlRlbTMydg0KPiA+Pj4+IFc5aklmY0Jsc1V3eElCZWxibERzJmU9Pg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMTk3Ni5odG1sDQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ IFRoZSBhbnljYXN0IG1ldGhvZCBkb2VzIG5vdCB3b3JrIHdpdGggUkZDNTc2NiBUVVJODQo+IHNl cnZlcnMhDQo+ID4+Pj4gVGhhdA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBoYXMgbm90 DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gYmVlbiBhZGRyZXNzZWQgYXQgYWxsLg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBB IFRVUk4gc2VydmVyIGRvZXNuJ3QgcmVhY3Qgb25lIHdheSAoYW5zd2VyaW5nIDMwMCBUcnkNCj4g Pj4+PiBBbHRlcm5hdGUpDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IHdoZW4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBhZGRyZXNzZWQgYnkgYW4gYW55Y2FzdCBhZGRyZXNzIGFu ZCBhbm90aGVyIHdheSAoYWNjZXB0aW5nDQo+IHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ ID4+IEFsbG9jYXRlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gcmVxdWVzdCkgd2hlbiBh ZGRyZXNzZWQgYnkgaXRzIHVuaWNhc3QgYWRkcmVzcywgZG9lcyBpdD8NCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gQXV0aG9yJ3MgKGR1 cmluZyB0aGUgRElTQ1VTUyk6ICJXZSBpbnRlbmQgdG8gYWRkIHRoZQ0KPiBmb2xsb3dpbmcNCj4g Pj4gdG8NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gZXhwbGFpbg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgPiA+ID4+IHNlcnZlciBiZWhhdmlvciBhIGxpdHRsZSBiZXR0ZXI6DQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICJBIFRVUk4gYW55Y2FzdCBzZXJ2ZXIgcGVyZm9ybXMgY2hl Y2tzIDEgdG8gNyBkaXNjdXNzZWQgaW4NCj4gPj4+PiBTZWN0aW9uDQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICA+ID4gPj4+IDYuMiBvZg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFJGQzU3NjYu IElmIGFsbCBjaGVja3MgcGFzcywgdGhlIFRVUk4gYW55Y2FzdCBzZXJ2ZXIgTVVTVA0KPiA+PiBy ZXNwb25kDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gd2l0aCBhDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4gPj4gMzAwIChUcnkgQWx0ZXJuYXRlKSBlcnJvciBhcyBkZXNjcmliZWQgaW4g W1JGQzU3NjZdOyINCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gZG9lcyBub3QgaGVscCBh bmQgSSByZXNwb25kZWQ6IFtLYXJsXSBUaGF0IG11c3QgYmUgYW4gdXBkYXRlDQo+IG9mDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+IFJGQzU3NjYuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4g T3IgZG9lcyAiVFVSTiBhbnljYXN0IHNlcnZlciIgaW1wbHkgdGhhdCB0aGVyZSBBTFNPIGlzIGEN Cj4gIlRVUk4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiB1bmljYXN0IHNlcnZlciIgYXQg dGhlIHNhbWUgaW50ZXJmYWNlIGFjY2VwdGluZyB0aGUgQWxsb2NhdGUNCj4gPj4+PiByZXF1ZXN0 Pw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IFdoYXQgYXJlIHRoZXNlIHRoaW5ncz8NCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4g SSBoYXZlIHByb3Bvc2VkIHRoaXMgbW9kaWZpY2F0aW9uIG9mIHRoZSBhbnljYXN0IG1ldGhvZCwN Cj4gd2hpY2gNCj4gPj4gaXMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gYmV0dGVyDQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gKGluIHNldmVyYWwgYXNwZWN0cykgYW5kIGRvZXNu J3QgbmVlZCB0byB1cGRhdGUgUkZDNTc2NjoNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gIldoZW4gYSBjbGllbnQgcmVxdWlyZXMgVFVS TiBzZXJ2aWNlcywgaXQgc2VuZHMgYSBTVFVODQo+IGJpbmRpbmcNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+Pj4gcmVxdWVzdCB0bw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHRoZSBh c3NpZ25lZCBhbnljYXN0IGFkZHJlc3MuICBUaGUgU1RVTiBzZXJ2ZXINCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+Pj4gcmVzcG9uZHMgd2l0aCBhIDMwMCAoVHJ5IEFsdGVybmF0ZSkgZXJyb3Ig YXMgZGVzY3JpYmVkIGluDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IFtSRkM1Mzg5XTsg VGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gcmVzcG9uc2UgY29udGFpbnMgYSB1bmlj YXN0IGFkZHJlc3MgaW4gdGhlIEFMVEVSTkFURS1TRVJWRVINCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiA+PiBhdHRyaWJ1dGUsIHdoaWNoIHRoZSBjbGllbnQgY29tcGFyZXMgd2l0aCB0aGUgc291 cmNlIGFkZHJlc3Mgb2YNCj4gPj4gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gcmVz cG9uc2UgYW5kIGlmIHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBhZGRyZXNzZXMg YXJlIHRoZSBzYW1lLCBpdCBpcyBhbiBpbmRpY2F0aW9uIHRvIHVzZSB0aGUgVFVSTg0KPiA+PiBz ZXJ2ZXINCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gYXQgdGhhdA0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgPiA+ID4+IGFkZHJlc3MuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IEZvciBzdWJzZXF1ZW50IGNvbW11bmljYXRpb24g d2l0aCB0aGUgVFVSTiBzZXJ2ZXIsIHRoZQ0KPiBjbGllbnQNCj4gPj4+PiB1c2VzDQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4+IHRoYXQNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBy ZXNwb25kaW5nIHNlcnZlcidzIHVuaWNhc3QgYWRkcmVzcy4iDQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IFRoZSBzZW50ZW5jZSBpbiB0 aGUgLTEwIGRyYWZ0IHVuZGVyICIzIERpc2NvdmVyeSBQcm9jZWR1cmUiOg0KPiA+PiAibm90DQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IGFsbCBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4gc2VydmVycyBtYXkgc3VwcG9ydCBhbnljYXN0IiBjYW4gdGhlbiBiZSByZW1vdmVk Lg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ ID4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiAoMykgSSBjYW5ub3Qgc2VlIHRoaXMg LTEwIGRyYWZ0IHRlbGxpbmcgd2hpY2ggZGlzY292ZXJ5IG1ldGhvZA0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPiA+ID4+PiB0aGF0IGlzIGZpdA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGZv ciB0aGUgVFVSTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29y aw0KPiAodGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gbmV0d29yayBwcm92aWRlZCBU VVJOIHNlcnZlcikuIEhvd2V2ZXIsIHRoZXJlIGFyZSBjb25mdXNpbmcNCj4gPj4+PiBjbGllbnQN Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBiZWhhdmlvciByZWNvbW1lbmRhdGlvbnMsIGxp a2UgdGhlIHNlbnRlbmNlcyBpbiB0aGUgZHJhZnQNCj4gdW5kZXINCj4gPj4gIjMNCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiA+PiBEaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+ PiBQcm9jZWR1cmUiOiAiRm9yIGJlc3QgcmVzdWx0cywgYSBjbGllbnQgU0hPVUxEIGltcGxlbWVu dCBhbGwNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBkaXNjb3ZlcnkgbWVjaGFuaXNtcyBk ZXNjcmliZWQgYWJvdmUuIiBhbmQgdW5kZXIgIjENCj4gPj4+PiBJbnRyb2R1Y3Rpb24iOg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ICJ0aHJlZSBkaXNjb3ZlcnkgbWVjaGFuaXNtcywgc28g YXMgdG8gbWF4aW1pemUgb3Bwb3J0dW5pdHkNCj4gZm9yDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4gZGlzY292ZXJ5LCBiYXNlZCBvbiB0aGUgbmV0d29yayBpbiB3aGljaCB0aGUgVFVSTiBj bGllbnQgZmluZHMNCj4gPj4+PiBpdHNlbGYuIg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBBIG5ldHdvcmsgcHJvdmlkZWQgVFVSTiBz ZXJ2ZXIgaXMgb25seSBtZWFudCBmb3IgdGhlIHVzZXJzDQo+IG9uDQo+ID4+IHRoZQ0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBzcGVjaWZpYw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ ID4+IG5ldHdvcmsgLSBvdGhlcnMgc2hvdWxkIG5vdCBiZSBhYmxlIHRvIHVzZSBzdWNoIFRVUk4g c2VydmVyLA0KPiBhbmQNCj4gPj4gaXQNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiB3b3Vs ZCB0aGVuIGJlIHByZWZlcnJlZCB0aGF0IGl0IGlzIG9ubHkgYWR2ZXJ0aXplZCBhbmQNCj4gZGlz Y292ZXJlZA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGF0IHRoYXQgbG9jYWwgbmV0d29y ayAtIHdoaWNoIGlzIGJhZGx5IGRlc2NyaWJlZCBieSAibWF4aW1pemUNCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+PiBvcHBvcnR1bml0eQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBmb3INCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiBkaXNjb3ZlcnkiLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+ID4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBJZiBhIEROUyBtZXRob2Qgd291 bGQgYmUgdXNlZCB0byBkaXNjb3ZlciB0aGUgbmV0d29yaw0KPiA+PiBwcm92aWRlZA0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4g c2VydmVyLCBpdHMgcHJpdmF0ZSBhZGRyZXNzIHNob3VsZCBvbmx5IGJlIGNvbmZpZ3VyZWQgaW4g cHJpdmF0ZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IChsb2NhbCkgRE5TICh3ZSBkb24n dCBsaWtlIHRvIHB1dCBvdXIgcHJpdmF0ZSBJUCBhZGRyZXNzZXMgaW4NCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+PiBwdWJsaWMgRE5TKSwgYnV0IEkgc2VlIG5vIHN1Y2ggcmVjb21tZW5kYXRp b24uIEZ1cnRoZXIsIHRoZQ0KPiBETlMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBtZXRo b2RzIGFyZSBjb21wbGV4IGFuZCBleHBlbnNpdmUgdG8gZGVwbG95IGFuZCBvbmUgb2YNCj4gdGhl bQ0KPiA+Pj4+IGRlcGVuZHMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBvbiBESENQIHRo YXQgaXMgbm90IGF2YWlsYWJsZSBvbiBhbGwgYWNjZXNzIG5ldHdvcmtzLiBUaGF0DQo+IG1ha2Vz DQo+ID4+IChhDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gd29ya2luZykgYW55Y2FzdCBk aXNjb3ZlcnkgbWV0aG9kIHRoZSBjbGVhciBjaG9pY2UgZm9yIGEgVFVSTg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgPiA+ID4+IHNlcnZlciBwcm92aWRlZCBieQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+IHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yay4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4g PiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gTmV0d29yayBwcm92aWRlZCBUVVJO IHNlcnZlcnMgcGFyYWxsZWxpbmcgYQ0KPiA+PiBOQVQvZmlyZXdhbGwvYWNjZXNzDQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4gcm91dGVyL2RlZmF1bHQgZ2F0ZXdheSBpcyBhIG5ldyBjb25j ZXB0IHRoYXQgY2FtZSB1cCBkdXJpbmcNCj4gPj4+PiBXZWJSVEMNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+PiBzdGFuZGFyZGl6YXRpb24gd29yayB0byBkZWFsIHdpdGggdHJhdmVyc2FsIGFu ZCBxdWFsaXR5DQo+IHByb2JsZW1zDQo+ID4+IG9mDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4gcmVhbC10aW1lIHRyYWZmaWMuIEhvd2V2ZXIsIHRoaXMgZHJhZnQgZ2l2ZSBsaXR0bGUgb3Ig bm8gZ3VpZGFuY2UNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBmb3IgZGVwbG95bWVudCBh bmQgSSB0aGVyZWZvcmUgc3VnZ2VzdCB0aGF0IGEgc2VwYXJhdGUgc2VjdGlvbg0KPiBpcw0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGFkZGVkLCB0aGF0IHNwZWxscyBvdXQgdGhlIGRlcGxv eW1lbnQgY29uc2lkZXJhdGlvbnMgZm9yIFRVUk4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+ PiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IHRoZSBsb2NhbCBvciBhY2Nlc3MgbmV0d29yayAod2hpY2gg bm93IGlzDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gbWlzc2luZywgYnV0IEkgcHJvcG9z ZSB0aGUgZm9sbG93aW5nDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gdGV4dCk6DQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICg0KSAiRGVwbG95bWVudCBDb25zaWRlcmF0aW9u cyBmb3IgVFVSTiBTZXJ2ZXJzIFByb3ZpZGVkIGJ5DQo+ID4+IHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPiA+ID4+PiBMb2NhbCBvcg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IEFjY2Vz cyBOZXR3b3JrIg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiAoU3VnZ2VzdGVkIHRleHQg Zm9yIGFuIGFkZGl0aW9uYWwgc2VjdGlvbikNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4N Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gVGhlIGNvbmNlcHQgb2YgcGFyYWxsZWxpbmcg YSBOQVQvZmlyZXdhbGwvYWNjZXNzLQ0KPiByb3V0ZXIvZGVmYXVsdA0KPiA+Pj4+Pg0KPiA+Pj4+ PiAgICAgPiA+ID4+PiBnYXRld2F5IGF0DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gdGhl IGxvY2FsIG9yIGFjY2VzcyBuZXR3b3JrIHdpdGggYSBUVVJOIHNlcnZlciwgdG8gZGVhbCB3aXRo DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gdHJhdmVyc2FsIGFuZCBxdWFsaXR5IHByb2Js ZW1zIG9mIHJlYWwtdGltZSB0cmFmZmljLCBpcyBuZXcgYW5kDQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4gY2FtZSB1cCBkdXJpbmcgdGhlIFdlYlJUQyBzdGFuZGFyZGl6YXRpb24gd29yay4N Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+ Pj4gU3VjaCBuZXR3b3JrIHByb3ZpZGVkIFRVUk4gc2VydmVycywgb25seSBhY2Nlc3NpYmxlIGJ5 IHRoZQ0KPiA+PiB1c2Vycw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBvbiB0aGUNCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBsb2NhbCBvciBhY2Nlc3MgbmV0d29yaywgbXVzdCBi ZSBhdXRvbWF0aWNhbGx5IGRpc2NvdmVyZWQgYW5kDQo+ID4+IHVzZWQsDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4gPj4gd2l0aG91dCBzcGVjaWZpYyBjb25maWd1cmF0aW9uIG9yIGhhdmluZyBj cmVkZW50aWFscyBmb3INCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBhdXRoZW50aWNhdGlv biBvciBjZXJ0aWZpY2F0ZXMgZm9yIHZhbGlkYXRpb24sIHRvIGJlIHVzZWZ1bCBmb3INCj4gZS5n Lg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGEgV2ViUlRDIGJyb3dzZXJzIHRvIGFsbG93 IHF1YWxpdHkgbWVkaWEgdHJhZmZpYyAiZXZlcnl3aGVyZQ0KPiA+PiB5b3UNCj4gPj4+Pj4NCj4g Pj4+Pj4gICAgID4gPiA+PiBjYW4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiBzdXJmIi4NCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4g SnVzdCBhcyBmb3IgdGhlIEludGVybmV0IGFjY2VzcyBpdHNlbGYsIHRoZSBUVVJOIHNlcnZlciBp cw0KPiBvZmZlcmVkDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IGJ5IHRoZQ0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IG5ldHdvcmsgcHJvdmlkZXIgYW5kIHRoZXJlIGlzIG5vIGNo YW5nZSBpbiB0aGUgdHJ1c3Qgb3Igc2VjdXJpdHkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+ PiBsZXZlbCAod2hpY2ggc2hvdWxkIG5vdCBiZSBleHBlY3RlZCkgd2hlbiByZWFsLXRpbWUgdHJh ZmZpYw0KPiBmbG93cw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHRocm91Z2ggdGhlIFRV Uk4gc2VydmVyIHBhdGgsIHRoYW4gdGhyb3VnaCB0aGUgZGVmYXVsdA0KPiBnYXRld2F5DQo+ID4+ Pj4gcGF0aC4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiAoVGhlIHB1cnBvc2Ugb2YgdGhl IG5ldHdvcmsgcHJvdmlkZWQgdHVybiBzZXJ2ZXIgaXMgdG8gYWxsb3cNCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+PiB0cmF2ZXJzYWwgb2YgcmVhbC10aW1lIG1lZGlhIHRyYWZmaWMgaW4gZW52 aXJvbm1lbnRzIHdpdGgNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiByZXN0cmljdGl2ZSBO QVQvZmlyZXdhbGxzIGNsb3NlZCBmb3IgVURQIHRyYWZmaWMgYW5kL29yIHRvIGFsbG93DQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gYmV0dGVyIHF1YWxpdHkgdGhyb3VnaCB0aGUgb2Z0ZW4g ZGF0YSBjb25nZXN0ZWQgcm91dGVyIGF0IHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ IGRlZmF1bHQNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBnYXRld2F5LikNCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gVGhlIGRp c2NvdmVyeSBvZiB0aGUgbmV0d29yayBwcm92aWRlZCBUVVJOIHNlcnZlciBzaG91bGQNCj4gbWVl dA0KPiA+Pj4+IHRoZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBhdXRvDQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4gY29uZmlndXJhdGlvbiBvZiBSRkMgNzQ3OCAoV2ViIFJlYWwt VGltZSBDb21tdW5pY2F0aW9uIFVzZQ0KPiA+Pj4+IENhc2VzDQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4gYW5kDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gUmVxdWlyZW1lbnRzKSAy LjMuNS4xLiBhbmQgZHJhZnQtaWV0Zi1ydGN3ZWItcmV0dXJuLTAxIGlzDQo+IGRlZmluaW5nDQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gdGhlIFRVUk4gY2xpZW50IGJlaGF2aW9yIGZvciBX ZWJSVEMgYnJvd3NlcnMuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gPj4+IEZvciBxdWFsaXR5IHJlYXNvbnMsIGEgc2VhbGVkIG5ldHdvcmsg Y29uZmlndXJhdGlvbiAtIGkuZS4gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IG1l ZGlhIGhhcw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHRvIGdvIHRocm91Z2ggdGhlIFRV Uk4gc2VydmVyLCBub3QgdGhyb3VnaCB0aGUgZGVmYXVsdA0KPiBnYXRld2F5DQo+ID4+IChieQ0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHVzaW5nIFNUVU4gaW5zdGVhZCBvZiBUVVJOKSAt IGlzIHRoZSB0eXBpY2FsIGludGVudGlvbiB3aGVuIGENCj4gPj4gVFVSTg0KPiA+Pj4+Pg0KPiA+ Pj4+PiAgICAgPiA+ID4+IHNlcnZlciBpcyBkZXBsb3llZCBpbiB0aGUgbG9jYWwgb3IgYWNjZXNz IG5ldHdvcmsuIFRoZSBzZWFsZWQNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBjb25maWd1 cmF0aW9uIGNhbiBiZSBlbmZvcmNlZCBhbmQgc2lnbmFsZWQgdG8gdGhlIFRVUk4gY2xpZW50DQo+ IGJ5DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gdGhlIG5ldHdvcmsgcHJvdmlkZXIgYmxv Y2tpbmcgU1RVTiBwYWNrZXRzIGF0IHRoZSBkZWZhdWx0DQo+ID4+IGdhdGV3YXkuDQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IEEgbmV0 d29yayBjb25maWd1cmF0aW9uIGVuZm9yY2luZyBzZWFsZWQgYmVoYXZpb3IsIGhhcyB0aGUNCj4g Pj4gZ29vZA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBlZmZlY3Qgb2YNCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiA+PiBhbGxvd2luZyB0aGUgVFVSTiBjbGllbnQgKGUuZy4gYSBXZWJS VEMgYnJvd3NlcikgaW4gaXRzZWxmIHRvDQo+IGhhdmUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4g PiA+PiBhDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gbm9uLSBzZWFsZWQgZGVmYXVsdCBj b25maWd1cmF0aW9uLiAoaWV0Zi1ydGN3ZWItcmV0dXJuLTAxDQo+IGV4cGxhaW5zDQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4gdGhhdCBhIHNlYWxlZCBkZWZhdWx0IGNvbmZpZ3VyYXRpb24g aW4gdGhlIGJyb3dzZXIgaXRzZWxmLCB3b3VsZA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ IHJlc3VsdCBpbiB0aGF0IG1lZGlhIGJldHdlZW4gbG9jYWwgY2xpZW50cyB3b3VsZCBoYXZlIHRv IHBhc3MNCj4gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gVFVSTiBzZXJ2ZXIsIHdo aWNoIGlzIG5vdA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGRlc2lyYWJsZS4pDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IFRo ZSBhYm92ZSBhc3N1bWVzIHRoYXQgdGhlIFRVUk4gY2xpZW50IHVzaW5nIGEgVFVSTiBzZXJ2ZXIN Cj4gaW4NCj4gPj4+PiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gbG9jYWwgb3IN Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBhY2Nlc3MgbmV0d29yayBzaGFsbCB1c2UgdW5l bmNyeXB0ZWQgU1RVTi9UVVJOIChvdmVyIFVEUA0KPiBmb3INCj4gPj4+PiBiZXN0DQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4gcXVhbGl0eSkgc28gdGhlIFNUVU4gY29va2llIGNhbiBiZSBk ZXRlY3RlZCBhbmQgc3RvcHBlZCBpbiB0aGUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBk ZWZhdWx0DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gZ2F0ZXdheS4NCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gQSBUVVJOIHNlcnZl ciBpbmNsdWRlZCBpbiB0aGUgcm91dGVyIGF0IHRoZSBkZWZhdWx0IGdhdGV3YXksDQo+ID4+IHRo YXQNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBpbnRlcmNlcHRzIGFuZCByZXNwb25kcyB0 byBhbiBhbGxvY2F0ZSByZXF1ZXN0LCBzaG91bGQgICBiZQ0KPiA+PiB0cmVhdGVkDQo+ID4+Pj4g YXMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gYQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ IGRpc2NvdmVyZWQgbmV0d29yayBwcm92aWRlZCBzZWFsZWQgVFVSTiBzZXJ2ZXIgY29uZmlndXJh dGlvbg0KPiA+PiBieSBhDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gVFVSTiBjbGllbnQg KHdpdGhvdXQgaGF2aW5nIHRvIHJldmlldyBhbnkgMzAwIFRyeSBBbHRlcm5hdGUNCj4gPj4+Pj4N Cj4gPj4+Pj4gICAgID4gPiA+PiByZXNwb25zZSBhcyBvdXRsaW5lZCBpbiBhbnljYXN0IG1ldGhv ZCBkZXNjcmlwdGlvbikgYWxsb3dpbmcNCj4gZm9yDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4gdG9sZXJhbnQgYW5kDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IHNlY3VyZQ0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+IGRlcGxveW1lbnQuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IEEgd2ViIGFwcGxpY2F0aW9uIHRoYXQgd2Fu dHMgdG8gdHJ5IHRoZSBkZWZhdWx0IGdhdGV3YXkgcGF0aA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+ID4+PiBpbnN0ZWFkIG9mDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gdGhlIFRVUk4g c2VydmVyIHBhdGggKGluIHNwaXRlIG9mIGEgc2VhbGVkIG5ldHdvcmsNCj4gY29uZmlndXJhdGlv bikNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBjYW4gc3VnZ2VzdCBlbmNyeXB0ZWQgKEQp VExTIFNUVU4gYW5kIFRVUk4gY2FuZGlkYXRlcyB0aGF0DQo+IHdpbGwNCj4gPj4+PiBub3QNCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBiZSBibG9ja2VkIGJ5IFNUVU4gY29va2llIHJlY29n bml0aW9uIGF0IHRoZSBkZWZhdWx0IGdhdGV3YXkuDQo+IEl0DQo+ID4+IGlzDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gPj4gdGhlbiB1cCB0byBhcHBsaWNhdGlvbidzIFRVUk4gY2xpZW50IHdo ZXRoZXIgdG8gdHJ5IHRoZSBkZWZhdWx0DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gZ2F0 ZXdheQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBwYXRoLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+ID4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBBIGZ1cnRoZXIgYWR2YW50YWdl IG9mIGRldGVjdGluZyBhIHNlYWxlZCBuZXR3b3JrDQo+ID4+IGNvbmZpZ3VyYXRpb24sDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IGlzIHRoYXQgYQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+ID4+IFRVUk4gY2xpZW50IGNhbiBzZWxlY3QgdG8gKm9ubHkgaW4gYSBzZWFsZWQgbmV0d29y aw0KPiA+PiBjb25maWd1cmF0aW9uKg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGxvb2sg Zm9yIGEgVFVSTiBzZXJ2ZXIgYnkgdGhlIGFueWNhc3QgbWV0aG9kIGZvciBkaXNjb3ZlcnksDQo+ IHRodXMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBlbGltaW5hdGluZyB0aGUgbGVha2Fn ZSByaXNrIG1lbnRpb25lZCB1bmRlciA5LjMuIEZ1cnRoZXIsDQo+IHRoZXJlDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gPj4gd2lsbCBiZSBubyByaXNrIHRoYXQgYSBmYXIgYXdheSBUVVJOIHNl cnZlciB3aWxsIGJlIGRpc2NvdmVyZWQNCj4gYW5kDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4gdXNlZCBhbmQgdGhlcmUgd2lsbCBiZSBubyBuZWVkIGZvciB0aGUgVFRMIGxpbWl0YXRpb24g c3VnZ2VzdGVkDQo+ID4+Pj4gdW5kZXIgOS4zLg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBUaGUgYW55Y2FzdCBkaXNjb3ZlcnkgbWV0 aG9kLCBjb21iaW5lZCB3aXRoIHRoZSBhYm92ZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ PiByZWNvbW1lbmRhdGlvbnMsDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gYWxsb3cgZm9y IGFuIGVhc3kgYW5kIHJvYnVzdCBkZXBsb3ltZW50IG9mIG5ldHdvcmsgcHJvdmlkZWQNCj4gPj4g VFVSTg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHNlcnZlcnMsIGZpdHRpbmcgYWxsIHR5 cGVzIG9mIGxvY2FsIGFuZCBhY2Nlc3MgbmV0d29ya3MuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IFRoZSBETlMgYmFzZWQgbWV0aG9k cyBvZiB0aGlzIHNwZWNpZmljYXRpb24gYXJlIG1vcmUNCj4gY29tcGxleA0KPiA+Pj4+IGFuZA0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBleHBlbnNpdmUNCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+PiB0byBkZXBsb3kgYW5kIG9uZSBvZiB0aGVtIGRlcGVuZHMgb24gREhDUCB0aGF0 IGlzIG5vdA0KPiBhdmFpbGFibGUNCj4gPj4gb24NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+ PiBhbGwgYWNjZXNzIG5ldHdvcmtzLiBJZiBhbnkgb2YgdGhlIEROUyBiYXNlZCBtZXRob2RzIGlz IHVzZWQgdG8NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBhZHZlcnRpemUgYW5kIGRpc2Nv dmVyIGEgVFVSTiBpbiB0aGUgbG9jYWwgb3IgYWNjZXNzIG5ldHdvcmssDQo+IGl0cw0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHByaXZhdGUgYWRkcmVzc2VzIHNob3VsZCBvbmx5IGJlIGNv bmZpZ3VyZWQgaW4gcHJpdmF0ZSAobG9jYWwpDQo+IEROUw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+ID4+IGFuZCBub3QgYmUgcHVibGlzaGVkIHB1YmxpY2x5LCB3aGljaCBhZGRzIGZ1cnRoZXIg dG8gdGhlDQo+ID4+IGNvbXBsZXhpdHkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBhbmQN Cj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiBjb3N0IG9mIGRlcGxveW1lbnQuDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICg1KSBNb3N0IChhbGw/KSBvZiB3aGF0IGlzIGNvbnNpZGVy ZWQgYW5kIHN1bW1lZCB1cCB1bmRlcg0KPiAoNCkNCj4gPj4+PiAodGhlDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4gPj4gc3VnZ2VzdGVkIGFkZGl0aW9uYWwgdGV4dCksIGhhcyBiZWVuIGJyb3Vn aHQgZm9yd2FyZCBvbiB0aGUNCj4gPj4gVFJBTQ0KPiA+Pj4+IFdHDQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICA+ID4gPj4gbGlzdCBiZWZvcmUsIGJ1dCBub3QgYnJvdWdodCBpbnRvIHRoZSBjdXJyZW50 IC0xMCBkcmFmdCwgc2VlOg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsLQ0KPiA+Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMDEz Mi5odG1sDQo+ID4+Pj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3Yy L3VybD91PWh0dHBzLQ0KPiA+Pj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4+Pg0KPiA+ Pg0KPiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9tc2cwMDEzMi5odG1sJmQ9RGdNRmFRJmM9 OTZaYlpaY2FNRjQNCj4gPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0K PiA+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+IE1WUWkybFZiRV9z NHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9STR0WF92UWQtDQo+ID4+Pj4gQU5WOGNCalBH bEhsRklWRVVaLTNsWW1WSTZHYkd0anh2YyZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+ Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC0NCj4gPj4+PiBhcmNoaXZlL3dlYi90cmFtL2N1 cnJlbnQvbXNnMDAxMzguaHRtbA0KPiA+Pj4+PiAgICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9v ZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+PiAzQV9fd3d3LmlldGYub3JnX21haWwt DQo+ID4+Pj4NCj4gPj4NCj4gMkRhcmNoaXZlX3dlYl90cmFtX2N1cnJlbnRfbXNnMDAxMzguaHRt bCZkPURnTUZhUSZjPTk2WmJaWmNhTUY0DQo+ID4+Pj4gdzBGNGpwTjZMWmcmcj1id1otbm5SR1dt Y0dLUkl1YWRxNi0NCj4gPj4+PiBOU25zZ3diQlZVSmE0bVpmbUVJQlhnJm09TFhhSC0NCj4gPj4+ Pg0KPiA+Pg0KPiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBSOCZzPUpKV1Z5 UGhoVGJoVHBrY09tUVJkQg0KPiA+Pj4+IDQ5aHgyZ09NTktPTDdxTVQzYnE2MzAmZT0+DQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtDQo+ID4+ Pj4gYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAxNzIxLmh0bWwNCj4gPj4+Pj4gICAgIDxo dHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4g M0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pj4+DQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJh bV9jdXJyZW50X21zZzAxNzIxLmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+Pj4+IHcw RjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ID4+Pj4gTlNuc2d3YkJWVUphNG1a Zm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVho UUs3eFFFaWt6QXVwUjgmcz1RbmJKT3NZQXZ1RFdyOVl5RUdzeFUNCj4gPj4+PiBPdjhTMWhhOG93 OURvNVZET3E2R3MwJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsLQ0KPiA+Pj4+IGFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMTc0 NS5odG1sDQo+ID4+Pj4+ICAgICA8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3Yy L3VybD91PWh0dHBzLQ0KPiA+Pj4+IDNBX193d3cuaWV0Zi5vcmdfbWFpbC0NCj4gPj4+Pg0KPiA+ Pg0KPiAyRGFyY2hpdmVfd2ViX3RyYW1fY3VycmVudF9tc2cwMTc0NS5odG1sJmQ9RGdNRmFRJmM9 OTZaYlpaY2FNRjQNCj4gPj4+PiB3MEY0anBONkxaZyZyPWJ3Wi1ublJHV21jR0tSSXVhZHE2LQ0K PiA+Pj4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcmbT1MWGFILQ0KPiA+Pj4+DQo+ID4+DQo+IE1W UWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlrekF1cFI4JnM9ZHVFRDNZUndfZ1BpTHdQbmpD N3pnVw0KPiA+Pj4+IDBLYlFYcVFCak4tQkpDNGJ6bXQ0NCZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+Pj4gVGhlIGxpbmtzIGdpdmVuIHVuZGVyICgxKSBhbmQgKDIpIGFib3ZlDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtDQo+ID4+ Pj4gYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAyMTU1Lmh0bWwNCj4gPj4+Pj4gICAgIDxo dHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4g M0FfX3d3dy5pZXRmLm9yZ19tYWlsLQ0KPiA+Pj4+DQo+ID4+DQo+IDJEYXJjaGl2ZV93ZWJfdHJh bV9jdXJyZW50X21zZzAyMTU1Lmh0bWwmZD1EZ01GYVEmYz05NlpiWlpjYU1GNA0KPiA+Pj4+IHcw RjRqcE42TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ID4+Pj4gTlNuc2d3YkJWVUphNG1a Zm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6 QXVwUjgmcz01ZnhqdFJmMk5kdDlSLQ0KPiA+Pj4+IFJEd1dwZ0cwZDdtY3RwVVQybFVacktHYVRo WjQwJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+ID4+PiAvS2FybA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiAtLS0tLVVy c3BydW5nbGlndCBtZWRkZWxhbmRlLS0tLS0NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4g RnLDpW46IHRyYW0gW21haWx0bzp0cmFtLWJvdW5jZXNAaWV0Zi5vcmddIEbDtnIgUHJhc2hhbnRo DQo+IFBhdGlsDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IChwcmFzcGF0aSkNCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gU2tpY2thdDogZGVuIDIgbm92ZW1iZXIgMjAxNiAyMjox OA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBUaWxsOiB0cmFtQGlldGYub3JnIDxtYWls dG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gS29waWE6IHRy YW0tY2hhaXJzQGlldGYub3JnIDxtYWlsdG86dHJhbS1jaGFpcnNAaWV0Zi5vcmc+Ow0KPiBEYW4N Cj4gPj4+PiBXaW5nOw0KPiA+Pj4+PiAgICAgU3BlbmNlciBEYXdraW5zIGF0IElFVEY7DQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KQ0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiDDhG1uZTogW3RyYW1dIGRyYWZ0LWlldGYtdHJhbS10 dXJuLXNlcnZlci1kaXNjb3ZlcnkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gVGhlIFRVUk4gZGlzY292ZXJ5IGRyYWZ0IG9yaWdpbmFs bHkgc3VnZ2VzdGVkIHRoYXQgU1RVTg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBhdXRo ZW50aWNhdGlvbiBiZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IHJlbGF4ZWQgYW5kIG1h ZGUgT1BUSU9OQUwgZm9yIFRVUk4gc2VydmVycyBwcm92aWRlZCBieSB0aGUNCj4gPj4gbG9jYWwN Cj4gPj4+PiBvcg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGFjY2VzcyBuZXR3b3JrLiBU aGUgaW50ZW50aW9uIHdhcyB0byBhbGxvdyBuZXcvZ3Vlc3QgdXNlcnMNCj4gKHdobw0KPiA+Pj4+ IGRvDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gbm90IG5lY2Vzc2FyaWx5IHBvc3Nlc3Mg bG9uZyB0ZXJtIGNyZWRlbnRpYWxzIGZvciBTVFVODQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4gYXV0aGVudGljYXRpb24pIGluIHRoZSBuZXR3b3JrIHRvIGRpc2NvdmVyIGFuZCB1c2UgVFVS Tg0KPiBzZXJ2aWNlcw0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBvZmZlcmVkDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gYnkgdGhlIG5ldHdvcmsuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4+IEJlbiBDYW1wYmVsbCByYWlzZWQgYW4gb2JqZWN0aW9uIGR1cmluZyBJRVNHIGV2YWx1YXRp b24gdGhhdA0KPiB3ZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBjbGVhcmx5DQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gaW5kaWNhdGUgdGhhdCB0aGlzIGlzIGEgZG93bmdyYWRl IG9mIGEgTVVTVCBsZXZlbCByZXF1aXJlbWVudA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ IGRlZmluZWQgaW4gW1JGQzU3NjZdIGFuZCBleHBsYWluIGl0cyBjb25zZXF1ZW5jZXMuIEl0IHdh cyBhbHNvDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gcmlnaHRseSBzdWdnZXN0ZWQgdGhh dCB3ZSBtYW5kYXRlIHRoZSB1c2Ugb2YgKEQpVExTIGluIHRoZQ0KPiA+PiBhYnNlbmNlDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gb2YgU1RVTiBhdXRoZW50aWNhdGlvbiBmb3IgcHJvdGVj dGlvbiBhZ2FpbnN0IGEgdmFyaWV0eSBvZg0KPiBhdHRhY2tzOw0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+ID4+IHRoZSBkcmFmdCBub3cgbWFrZXMgaXQgYSBNVVNUIHRoYXQgVFVSTiBzZXJ2ZXJz IHVzZSAoRClUTFMgaW4NCj4gPj4gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gYWJz ZW5jZSBvZiBTVFVODQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gYXV0aGVudGljYXRpb24uDQo+ ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ IFRvIHB1dCBpdCBzaW1wbHksIHRoZSBkcmFmdCBtYW5kYXRlcyB0aGF0IFRVUk4gc2VydmVycyBp biBhDQo+IGxvY2FsDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IG9yDQo+ID4+Pj4+DQo+ ID4+Pj4+ICAgICA+ID4gPj4gYWNjZXNzIG5ldHdvcmsgZG8gYXQgbGVhc3Qgb25lIG9mIChEKVRM UyBvciBTVFVODQo+IGF1dGhlbnRpY2F0aW9uLg0KPiA+PiBJZg0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+ID4+IHlvdSBoYXZlIGFuIG9waW5pb24gYWJvdXQgdGhpcyBjaGFuZ2UsIHBsZWFzZSBs ZXQgdGhlIHdvcmtpbmcNCj4gPj4gZ3JvdXANCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBr bm93IG9uIHRoZSBtYWlsaW5nIGxpc3QgYmVmb3JlIHRoZSBlbmQgb2YgSUVURiA5Ny4NCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gU2Vl IGJlbG93IGZvciBzbmlwcGV0cyBvZiB3aGF0IGNoYW5nZWQuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IEV4Y2VycHQgZnJvbSBTZWN1 cml0eSBDb25zaWRlcmF0aW9ucyBvZg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+IGRyYWZ0 LWlldGYtdHJhbS10dXJuLXNlcnZlci1kaXNjb3ZlcnktMDk6DQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgICJVc2Ugb2YgU2Vzc2lv biBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIFtSRkM1Mzg5XQ0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+ID4+PiAgICBhdXRoZW50aWNhdGlvbiBpcyBPUFRJT05BTCBmb3IgVFVS TiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5DQo+IHRoZQ0KPiA+Pj4+IGxvY2FsDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4gPj4+ICAgIG5ldHdvcmsgb3IgYnkgdGhlIGFjY2VzcyBuZXR3b3JrLiAgQSBu ZXR3b3JrIHByb3ZpZGVkDQo+IFRVUk4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gc2Vy dmVyDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gTUFZDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4+ICAgIGJlIGNvbmZpZ3VyZWQgdG8gYWNjZXB0IEFsbG9jYXRpb24gcmVxdWVzdHMgd2l0 aG91dCBTVFVODQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgIGF1dGhlbnRpY2F0aW9u LCBhbmQgYSBUVVJOIGNsaWVudCBNQVkgYmUgY29uZmlndXJlZCB0bw0KPiA+PiBhY2NlcHQNCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gICAgQWxsb2NhdGlvbiBzdWNjZXNzIHJlc3BvbnNl cyB3aXRob3V0IFNUVU4gYXV0aGVudGljYXRpb24NCj4gPj4gZnJvbQ0KPiA+Pj4+IGENCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gICAgbmV0d29yayBwcm92aWRlZCBUVVJOIHNlcnZlci4g IEluIG9yZGVyIHRvIHByb3RlY3QgYWdhaW5zdA0KPiA+PiBtYW4tDQo+ID4+Pj4gaW4tDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgIHRoZS1taWRkbGUgYXR0YWNrcyB3aGVuIGFjY2Vw dGluZyBhIFRVUk4gYWxsb2NhdGlvbg0KPiByZXNwb25zZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiB3aXRob3V0DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgIFNUVU4gYXV0aGVudGlj YXRpb24sIGl0IGlzIFJFQ09NTUVOREVEIHRoYXQgdGhlIFRVUk4NCj4gPj4gY2xpZW50DQo+ID4+ Pj4gdXNlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IG9uZQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+ID4+PiAgICBvZiB0aGUgZm9sbG93aW5nIHRlY2huaXF1ZXMgd2l0aCAoRClUTFMgdG8gdmFs aWRhdGUgdGhlIFRVUk4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gc2VydmVyIg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBVcGRhdGVkIHRleHQgaW4gU2VjdXJpdHkgQ29uc2lkZXJh dGlvbnMgb2YNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+PiBkcmFmdC1pZXRmLXRyYW0tdHVy bi1zZXJ2ZXItZGlzY292ZXJ5LTEwOg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+Pg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiAgICAiVXNlIG9mIFNlc3Npb24gVHJhdmVyc2FsIFV0 aWxpdGllcyBmb3IgTkFUIChTVFVOKSBbUkZDNTM4OV0NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4g PiA+Pj4gICAgYXV0aGVudGljYXRpb24gaXMgT1BUSU9OQUwgZm9yIFRVUk4gc2VydmVycyBwcm92 aWRlZCBieQ0KPiB0aGUNCj4gPj4+PiBsb2NhbA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ PiAgICBuZXR3b3JrIG9yIGJ5IHRoZSBhY2Nlc3MgbmV0d29yay4gIEEgbmV0d29yayBwcm92aWRl ZA0KPiBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IHNlcnZlcg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+IE1BWQ0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiAgICBiZSBj b25maWd1cmVkIHRvIGFjY2VwdCBBbGxvY2F0aW9uIHJlcXVlc3RzIHdpdGhvdXQgU1RVTg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiAgICBhdXRoZW50aWNhdGlvbiwgYW5kIGEgVFVSTiBj bGllbnQgTUFZIGJlIGNvbmZpZ3VyZWQgdG8NCj4gPj4gYWNjZXB0DQo+ID4+Pj4+DQo+ID4+Pj4+ ICAgICA+ID4gPj4+ICAgIEFsbG9jYXRpb24gc3VjY2VzcyByZXNwb25zZXMgd2l0aG91dCBTVFVO IGF1dGhlbnRpY2F0aW9uDQo+ID4+IGZyb20NCj4gPj4+PiBhDQo+ID4+Pj4+DQo+ID4+Pj4+ICAg ICA+ID4gPj4+ICAgIG5ldHdvcmsgcHJvdmlkZWQgVFVSTiBzZXJ2ZXIuDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgIE1ha2luZyBT VFVOIGF1dGhlbnRpY2F0aW9uIE9QVElPTkFMIGlzIGEgZG93bmdyYWRlIG9mIGENCj4gPj4+PiBN VVNUDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IGxldmVsDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4+ICAgIHJlcXVpcmVtZW50IGRlZmluZWQgaW4gW1JGQzU3NjZdLiAgVGhlIGRvd25ncmFk ZSBhbGxvd3MNCj4gPj4gVFVSTg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBzZXJ2ZXJzDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgIHByb3ZpZGVkIGJ5IGxvY2FsIG9yIGFjY2VzcyBu ZXR3b3JrIHRvIGFjY2VwdCBBbGxvY2F0aW9uDQo+ID4+IHJlcXVlc3RzDQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4gPj4+ICAgIGZyb20gbmV3IGFuZC9vciBndWVzdCB1c2VycyBpbiB0aGUgbmV0 d29yayB3aG8gZG8gbm90DQo+ID4+Pj4gbmVjZXNzYXJpbHkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiA+Pj4gICAgcG9zc2VzcyBsb25nIHRlcm0gY3JlZGVudGlhbHMgZm9yIFNUVU4gYXV0aGVu dGljYXRpb24uICBUaGUNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gICAgaW50ZW50aW9u LCBpbiBzdWNoIGRlcGxveW1lbnRzLCBiZWluZyB0byBwcm92aWRlIFRVUk4NCj4gPj4gc2Vydmlj ZXMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gdG8NCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gYWxsDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgIHVzZXJzIGluIHRoZSBsb2Nh bCBvciBhY2Nlc3MgbmV0d29yay4gIEhvd2V2ZXIsIHRoaXMgb3BlbnMNCj4gdXAgYQ0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiBUVVJODQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgIHNl cnZlciB0byBhIHZhcmlldHkgb2YgYXR0YWNrcyBkZXNjcmliZWQgaW4gU2VjdGlvbiAxNyBvZg0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiBbUkZDNTc2Nl0uDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4+ICAgIEEgVFVSTiBzZXJ2ZXIgaW4gc3VjaCBjYXNlcyBtdXN0IGJlIGNvbmZpZ3VyZWQg dG8gb25seQ0KPiA+PiBwcm9jZXNzDQo+ID4+Pj4gU1RVTg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg PiA+ID4+PiAgICByZXF1ZXN0cyBmcm9tIHRoZSB0cnVzdGVkIGxvY2FsIG5ldHdvcmsgb3Igc3Vi c2NyaWJlcnMgb2YNCj4gdGhlDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+IGFjY2Vzcw0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiAgICBuZXR3b3JrLiAgT3BlcmF0aW9uYWwgbWVhc3VyZXMg bXVzdCBiZSB0YWtlbiBpbiBvcmRlcg0KPiA+PiBwcm90ZWN0DQo+ID4+Pj4gdGhlDQo+ID4+Pj4+ DQo+ID4+Pj4+ICAgICA+ID4gPj4+ICAgIFRVUk4gc2VydmVyOyBzb21lIG9mIHRoZXNlIG1lYXN1 cmVzIGluY2x1ZGUsIGJ1dCBub3QNCj4gbGltaXRlZA0KPiA+PiB0bywNCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+Pj4gICAgYWNjZXNzIGNvbnRyb2wgYnkgbWVhbnMgb2YgYWNjZXNzLWxpc3Rz LCBmaXJld2FsbHMsIHN1YnNjcmliZXINCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gcXVvdGENCj4g Pj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gICAgbGltaXRzLCBpbmdyZXNzIGZpbHRlcmluZyBl dGMuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ ID4gPj4+ICAgIEEgVFVSTiBjbGllbnQgTVVTVCB1c2UgKEQpVExTIGluIHRoZSBhYnNlbmNlIG9m IFNUVU4NCj4gbG9uZy0NCj4gPj4+PiB0ZXJtDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+ ICAgIGNyZWRlbnRpYWwgbWVjaGFuaXNtIFtSRkM1Mzg5XSBvciBTVFVOIEV4dGVuc2lvbiBmb3IN Cj4gVGhpcmQtDQo+ID4+Pj4gUGFydHkNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gICAg QXV0aG9yaXphdGlvbiBbUkZDNzYzNV0uIg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+Pg0K PiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBQbGVhc2UgcmVmZXINCj4gPj4+Pj4NCj4gPj4+ Pj4gICAgID4gPiA+PiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi10cmFt LXR1cm4tc2VydmVyLQ0KPiBkaXNjb3ZlcnktDQo+ID4+IDENCj4gPj4+Pj4gICAgIDxodHRwczov L3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4gM0FfX3Rv b2xzLmlldGYub3JnX2h0bWxfZHJhZnQtMkRpZXRmLTJEdHJhbS0yRHR1cm4tMkRzZXJ2ZXItDQo+ ID4+IDJEZGlzY292ZXJ5LQ0KPiA+Pj4+IDJEMSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGpw TjZMWmcmcj1id1otDQo+ID4+Pj4gbm5SR1dtY0dLUkl1YWRxNi1OU25zZ3diQlZVSmE0bVpmbUVJ QlhnJm09TFhhSC0NCj4gPj4+PiBNVlFpMmxWYkVfczR1bHg0aG5oRW9tWGhRSzd4UUVpa3pBdXBS OCZzPS0tQi0NCj4gPj4+PiBrQXA5RGUxZjZIaFJLTEV0RDFiVlMzM0JwRzJTNU1ZeldCUV9ZREkm ZT0+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gMCMNCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiA+PiBzZWN0aW9uDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gLTkgZm9yIG1vcmUg ZGV0YWlscy4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+Pj4gVGhhbmtzLA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBBdXRob3Jz DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4g Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+ Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IHRyYW0gbWFpbGluZyBsaXN0DQo+ID4+Pj4+DQo+ID4+ Pj4+ICAgICA+ID4gPj4+IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+ Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL3RyYW0NCj4gPj4+Pj4gICAgIDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5j b20vdjIvdXJsP3U9aHR0cHMtDQo+ID4+Pj4NCj4gPj4NCj4gM0FfX3d3dy5pZXRmLm9yZ19tYWls bWFuX2xpc3RpbmZvX3RyYW0mZD1EZ01GYVEmYz05NlpiWlpjYU1GNHcwRjRqDQo+ID4+Pj4gcE42 TFpnJnI9YndaLW5uUkdXbWNHS1JJdWFkcTYtDQo+ID4+IE5TbnNnd2JCVlVKYTRtWmZtRUlCWGcm bT1MWGFILQ0KPiA+Pj4+DQo+ID4+DQo+IE1WUWkybFZiRV9zNHVseDRobmhFb21YaFFLN3hRRWlr ekF1cFI4JnM9YWhSbjFpZnhuT0FDclZGZ3hKOTkwODYNCj4gPj4+PiBuQnVDNi1jejlIN0dLWV8w RVY4cyZlPT4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4NCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gdHJhbSBtYWlsaW5nIGxpc3QNCj4gPj4+ Pj4NCj4gPj4+Pj4gICAgID4gPiA+Pj4gdHJhbUBpZXRmLm9yZyA8bWFpbHRvOnRyYW1AaWV0Zi5v cmc+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vdHJhbQ0KPiA+Pj4+PiAgICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9v ZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+Pg0KPiA+Pg0KPiAzQV9fd3d3LmlldGYu b3JnX21haWxtYW5fbGlzdGluZm9fdHJhbSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGoNCj4g Pj4+PiBwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4gTlNuc2d3YkJWVUphNG1a Zm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVho UUs3eFFFaWt6QXVwUjgmcz1haFJuMWlmeG5PQUNyVkZneEo5OTA4Ng0KPiA+Pj4+IG5CdUM2LWN6 OUg3R0tZXzBFVjhzJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+Pg0KPiA+Pj4+Pg0K PiA+Pj4+PiAgICAgPiA+ID4+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gPj4gX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4NCj4gPj4+Pj4g ICAgID4gPiA+PiB0cmFtIG1haWxpbmcgbGlzdA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+ID4+ IHRyYW1AaWV0Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgPiA+ID4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vdHJhbQ0KPiA+ Pj4+PiAgICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRw cy0NCj4gPj4+Pg0KPiA+Pg0KPiAzQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9fdHJh bSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGoNCj4gPj4+PiBwTjZMWmcmcj1id1otbm5SR1dt Y0dLUkl1YWRxNi0NCj4gPj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4N Cj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1haFJuMWlm eG5PQUNyVkZneEo5OTA4Ng0KPiA+Pj4+IG5CdUM2LWN6OUg3R0tZXzBFVjhzJmU9Pg0KPiA+Pj4+ Pg0KPiA+Pj4+PiAgICAgPiA+DQo+ID4+Pj4+DQo+ID4+Pj4+ICAgICA+ID4gX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4NCj4gPj4+Pj4gICAg ID4gPiB0cmFtIG1haWxpbmcgbGlzdA0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+IHRyYW1AaWV0 Zi5vcmcgPG1haWx0bzp0cmFtQGlldGYub3JnPg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAgPiA+IGh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vdHJhbQ0KPiA+Pj4+PiAgICAgPGh0 dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+Pg0K PiA+Pg0KPiAzQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9fdHJhbSZkPURnTUZhUSZj PTk2WmJaWmNhTUY0dzBGNGoNCj4gPj4+PiBwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0N Cj4gPj4gTlNuc2d3YkJWVUphNG1aZm1FSUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4gTVZR aTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3eFFFaWt6QXVwUjgmcz1haFJuMWlmeG5PQUNyVkZneEo5 OTA4Ng0KPiA+Pj4+IG5CdUM2LWN6OUg3R0tZXzBFVjhzJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+PiAg ICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+ Pj4gICAgIHRyYW0gbWFpbGluZyBsaXN0DQo+ID4+Pj4+ICAgICB0cmFtQGlldGYub3JnIDxtYWls dG86dHJhbUBpZXRmLm9yZz4NCj4gPj4+Pj4gICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vdHJhbQ0KPiA+Pj4+PiAgICAgPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBv aW50LmNvbS92Mi91cmw/dT1odHRwcy0NCj4gPj4+Pg0KPiA+Pg0KPiAzQV9fd3d3LmlldGYub3Jn X21haWxtYW5fbGlzdGluZm9fdHJhbSZkPURnTUZhUSZjPTk2WmJaWmNhTUY0dzBGNGoNCj4gPj4+ PiBwTjZMWmcmcj1id1otbm5SR1dtY0dLUkl1YWRxNi0NCj4gPj4gTlNuc2d3YkJWVUphNG1aZm1F SUJYZyZtPUxYYUgtDQo+ID4+Pj4NCj4gPj4NCj4gTVZRaTJsVmJFX3M0dWx4NGhuaEVvbVhoUUs3 eFFFaWt6QXVwUjgmcz1haFJuMWlmeG5PQUNyVkZneEo5OTA4Ng0KPiA+Pj4+IG5CdUM2LWN6OUg3 R0tZXzBFVjhzJmU9Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+Pg0KPiA+Pj4+DQo+ID4+Pj4g LS0NCj4gPj4+PiBCcmFuZG9uIFdpbGxpYW1zOyBDaGllZiBBcmNoaXRlY3QNCj4gPj4+PiBDbG91 ZCBOZXR3b3JraW5nOyBBa2FtYWkgVGVjaG5vbG9naWVzIEluYy4NCj4gPj4NCj4gPj4gLS0NCj4g Pj4gQnJhbmRvbiBXaWxsaWFtczsgQ2hpZWYgQXJjaGl0ZWN0DQo+ID4+IENsb3VkIE5ldHdvcmtp bmc7IEFrYW1haSBUZWNobm9sb2dpZXMgSW5jLg0KPiANCj4gLS0NCj4gQnJhbmRvbiBXaWxsaWFt czsgQ2hpZWYgQXJjaGl0ZWN0DQo+IENsb3VkIE5ldHdvcmtpbmc7IEFrYW1haSBUZWNobm9sb2dp ZXMgSW5jLg0K From nobody Sun Jan 8 15:11:27 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC3FE1295D2 for ; Sun, 8 Jan 2017 15:11:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.99 X-Spam-Level: ** X-Spam-Status: No, score=2.99 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RDNS_NONE=0.793, SPF_HELO_SOFTFAIL=0.732, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QMejQMFdOzie for ; Sun, 8 Jan 2017 15:11:25 -0800 (PST) Received: from implementers.org (unknown [92.243.22.217]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 548201200A0 for ; Sun, 8 Jan 2017 15:11:25 -0800 (PST) Received: from [IPv6:2601:648:8300:77bf:64ae:65fc:9544:526a] (unknown [IPv6:2601:648:8300:77bf:64ae:65fc:9544:526a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "Marc Petit-Huguenin", Issuer "implementers.org" (verified OK)) by implementers.org (Postfix) with ESMTPS id E7022AE7A0; Mon, 9 Jan 2017 00:11:22 +0100 (CET) To: Simon Perreault , tram@ietf.org References: <9939727e-4eb3-379f-8b6a-79fa57045c72@jive.com> From: Marc Petit-Huguenin Message-ID: <2a70d497-5a98-706e-346e-e0d157c02026@acm.org> Date: Sun, 8 Jan 2017 15:11:11 -0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="AJUUV5pwj8vqKkMGiEWd3lgsONw1rpdOB" Archived-At: Subject: Re: [tram] Review of draft-ietf-tram-stun-pmtud-03 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Jan 2017 23:11:27 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --AJUUV5pwj8vqKkMGiEWd3lgsONw1rpdOB Content-Type: multipart/mixed; boundary="jadE90lEnbngemwS6B6n6I20al4nPHW72"; protected-headers="v1" From: Marc Petit-Huguenin To: Simon Perreault , tram@ietf.org Message-ID: <2a70d497-5a98-706e-346e-e0d157c02026@acm.org> Subject: Re: [tram] Review of draft-ietf-tram-stun-pmtud-03 References: <9939727e-4eb3-379f-8b6a-79fa57045c72@jive.com> In-Reply-To: --jadE90lEnbngemwS6B6n6I20al4nPHW72 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 12/14/2016 03:42 AM, Marc Petit-Huguenin wrote: > Hi Simon, >=20 > Thanks for the review. >=20 > On 12/13/2016 01:08 PM, Simon Perreault wrote: >> Just one question about this part: >>=20 >>> 4.2.3. Receiving a Probe Indication and Report Request >>>=20 >>> A server supporting this specification will keep the identifiers >>> of all packets received in a chronologically ordered list. The >>> same identifier can appear multiple times in the list because of=20 >>> retransmissions. The maximum size of this list is calculated >>> such that when the list is added to the Report Response, the >>> total size of the packet does not exceed the unknown Path MTU, as >>> defined in [RFC5389] Section 7.1. Older identifiers are removed >>> when new identifiers are added to a list that is already full. >>=20 >> Is there only one global list, or one per client? If one per >> client, how does the server associate packets to clients? >>=20 >=20 > One per client. The way the STUN transaction/indications will be > associated with the protocol packets will have to be defined for each > protocol, and we will add some text explaining that. That said there > is maybe a need to carry an additional opaque identifier in the Probe > Indication/Report Request to make that association easier, e.g. when > a combination of IP address, port and transport is not enough to > differentiate two different clients for a specific protocol > destination. >=20 I re-read RFC 4821, and I think that section 5.2 covers nicely what to do= in that case. I do not think that an additional opaque identifier to co= rrelate the probe packet sand the protocol packets is necessary. So can you please have a look at that section and let me know if that is = your understanding too? Meanwhile, I'll add a reference to section 5.2 of RFC 4821 in section 4.2= =2E3 of the draft. Thanks. --=20 Marc Petit-Huguenin Email: marc@petit-huguenin.org Blog: https://marc.petit-huguenin.org Profile: https://www.linkedin.com/in/petithug --jadE90lEnbngemwS6B6n6I20al4nPHW72-- --AJUUV5pwj8vqKkMGiEWd3lgsONw1rpdOB Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEBSI+IuCHU8MsI1GjKcRFldZqfsQFAlhyxxkACgkQKcRFldZq fsTXAQ/7BhKtGHfsZ5CqDEjVAlZfAqYq5qPVGceebOIBxREOQ80D9ep2m8xetgGL HfVCRFkfYX9MmjlH+58ugX1YVSy/V6GE+ds/Ed4qQkzioAfdXR6WEhA90oEE4z4R b10jconnmKa6ERGUbBThTqticis8w9kGTRs2onj/65X2DOa6UofPrxz8Bxsz5YPR 8/E5we6boXSP/xiVLa1BknaCgSoxTXk/T4chm04eHAixi+VCYwm8WLFNCvx8Plz7 oNaFCB+s9pb1qKA9btEO4xoOHSjhbbQyskVciVmqY8yR69+DiPRWUIZm+YgE0uzI h71LYWF+MBEOKl19IR75e2+ixMwcvHSrMLP4OaCAaNBe8hoogx1i1xZuGeN+ohjV o739/3TXfBYzcZmLXFKusJrquiD9+jyYLMijQtmsb4QJ0BK02o0sqxqfr+bVqyxb IH0DxE3Of1WrOpP5PpQ/+GgX1MDGxbs09X6O71EL4/PqSGt1dURbavMYLBw3/Vs9 AHR340S9hJ7xwbDMq3dbJeCBmlnbZHDSDrxlx2sDXE3M8Y/RoMaLQjv5pCncMHhU +1+p2zXoDBQvJZBhYC5Pi6Ekl4vXHOopwFLHeVCqbYdlPl1d33V5WloaEXYylSuW BRdWVR5/w/GOc071JQZa9YPHYap31cgt/q0XF5peuTTeNxMsZE8= =P8bE -----END PGP SIGNATURE----- --AJUUV5pwj8vqKkMGiEWd3lgsONw1rpdOB-- From nobody Tue Jan 10 02:53:05 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B68061299FA for ; Tue, 10 Jan 2017 02:53:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.011 X-Spam-Level: X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MSGID_MULTIPLE_AT=1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ingate.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ocdjOYffi4Tx for ; Tue, 10 Jan 2017 02:53:01 -0800 (PST) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0082.outbound.protection.outlook.com [104.47.2.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 83DD4128BA2 for ; Tue, 10 Jan 2017 02:53:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ingate.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=TnoEpPy1kHQfx6pfCmK5+XidEJ/ntrus0jFPKWg81Is=; b=qRr+/Fj+fEvxgcAwb9PSL/7I5KK2WY8BX0stXAfKoX8gNNG1C+RTwuhKmebT/rc/aNmhrFLMk4yf2SirTsSAf4/L7vJ7Y3SXHT9lZxOFaG7j04BEhFB8VhfIO7+pf26W4zQreSOaO8jclZPRlqQkWKOhkbJaJIjR2SIHC4W4rco= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=karl@ingate.com; Received: from Kallei7 (90.227.80.227) by HE1PR01MB1836.eurprd01.prod.exchangelabs.com (10.165.228.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.829.7; Tue, 10 Jan 2017 10:52:55 +0000 From: "Karl Stahl" To: "'Tirumaleswar Reddy \(tireddy\)'" , References: <148178262581.16804.850767988678945437.idtracker@ietfa.amsl.com> In-Reply-To: Date: Tue, 10 Jan 2017 11:52:53 +0100 Message-ID: <011a01d26b2f$b47f4400$1d7dcc00$@stahl@ingate.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AQHSVprpPjss43PSK0SdCByM2/QvVqEIiOUggCiB8PA= Content-Language: sv X-Originating-IP: [90.227.80.227] X-ClientProxiedBy: HE1P192CA0021.EURP192.PROD.OUTLOOK.COM (10.171.121.159) To HE1PR01MB1836.eurprd01.prod.exchangelabs.com (10.165.228.26) X-MS-Office365-Filtering-Correlation-Id: a596738f-aad9-4480-2816-08d43946d586 X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:HE1PR01MB1836; X-Microsoft-Exchange-Diagnostics: 1; HE1PR01MB1836; 3:VqM0I2G8SYDMZqRZ/Z/IKp7tldq0EFoP/JJwNGInBXdXLryHD87k7lBoWn4LGg9HXjWgNmssfwjLrv18l7iJgNK3wgqoXAk5pKMM4Ak1pRc+8vn9imrpU018VrpvLszAU8PEoN4enyPhckNPQ4tIWqsb22KvjbUkduk1XCXkLH1vgf3WO46Z+WmYEXG50R1yM1XZ+qawfHnPXWR4Hirv2zvR22W3q4TKa6CcfmrVdHD/90Pk92wq00L+Ryd5Lb0W2OMVkJO/cSNYh+C9tukGTw== X-Microsoft-Exchange-Diagnostics: 1; HE1PR01MB1836; 25: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 X-Microsoft-Exchange-Diagnostics: 1; HE1PR01MB1836; 31:yr6/rhWU09LdEIVoJC+jfiwDt8oW44PomVk5cFEMHCAakTeT/PLXMRnURCyoDHIuGpYk8SknIeQ0eTi1p48wnn6FiVCtINcqGGouHdFLKz7T0dgouzql3h4GXIulHPagHGv7pTJPKHJb9+lx0OWMpiFBDcCWV7xbmPDMdBYEXe13UrBOPGHjaekMVyNfcHH0Dm/BTfxWMqimWV55b3PAlTaVnBFnuZWOB4QorobufGGLGndHeBqONRYXrd7zfM1PzZ4iO9D+IbUWF4j/BWa54cZPAj2SQq4wZSSxH2XNm0VHjI2cT5xz4Zgj2eRxiOsy X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(158342451672863)(120809045254105)(192374486261705)(100405760836317); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6041248)(20161123560025)(20161123558021)(20161123555025)(20161123562025)(20161123564025)(6072148); SRVR:HE1PR01MB1836; BCL:0; PCL:0; RULEID:; SRVR:HE1PR01MB1836; X-Microsoft-Exchange-Diagnostics: 1; HE1PR01MB1836; 4:yMMxMTosWYUchdx9/jI0EKIDBkjhMqAAUbuO4CGXNVYu5x2xTOgTIgeXRbz8yN1/RZfiZPBiS1QY8hniaGAhPAnXfBNimaYtSwua59Mvhc92QhSfXvl9crO6uZSnH2dS4XJIh6+DnZ+fyS+GdbuvhJSLNi1H+r+0p45EJsUsab9/Hi8I198EzNk9sZytWSCUMAXE9JSCKK0Rt87A65nlgGUJ38CAP25zGDoscHPr7+etoK7Nc5kQoZ3aqShZz2/LVHvlqdMhTezXPYRDhNPYlkjMZ/9zr/6Xa7z9nXExVgYdU8Tkf6IYKal9rS6AW1bHn5Bc+hQS3Go6usTS+TEiai9j7bYz4sg8oZJb7DlTJG4g6KRl2STMvZUBoBAp7HkIGjD76bNpCglshj+Sj76GdB2HT7SYzL0LDrXd3ENK1+WvO/XlY6+xXnDX/9iWy8VQ/5h0NlZvjqrZY97OPUA4m3uz9FPj7uhhsXkIMiFDuVlKk2hmspggKa1fXbIgz7ncmk237xAofnZww1xRFyEyR6aaYYgO1YXEv/65lmVuBX7XxOLFVbwuDUuwIj4Yxa+dLS3P2QzC5UXYmPMoKYaFFcXN2wIwMRsydbliq+CbNZH9cX4sGScLPjx2JhxfrSswUjgDmX1N0BUQ5MFWjCbg55RuPHcUfP8EYIVnvziAtf8br5TkG0GQefSM/9T2NpcGxR7m9s1fWzbjoDKYvq8ygSCmDQo2gbtXLFsKM9WLVMUmkMAndMIZQjGu2VABTlMr X-Forefront-PRVS: 01834E39B7 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(4630300001)(6009001)(7916002)(39450400003)(13464003)(377454003)(38534002)(377424004)(189002)(199003)(76176999)(97736004)(66066001)(23756003)(33646002)(36756003)(50986999)(47776003)(230783001)(4001150100001)(2950100002)(9686003)(6306002)(61793004)(5001770100001)(2906002)(101416001)(68736007)(1420700001)(50466002)(8746002)(14726001)(81156014)(81166006)(25786008)(50226002)(44736005)(8676002)(6496003)(6486002)(38730400001)(189998001)(5660300001)(105586002)(84116002)(106356001)(106116001)(42186005)(305945005)(61296003)(7736002)(96836002)(92566002)(3846002)(6116002)(102836003)(107886002)(2101003); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR01MB1836; H:Kallei7; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Received-SPF: None (protection.outlook.com: ingate.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; HE1PR01MB1836; 23:EQ0AJp2NlThO0qE78y8OmyGl1AHe3dSczCyKGqF?= =?iso-8859-1?Q?EBLfCOMf03MraW7wkYxxym4jMFfYFsMTidE9a4YEP4yT/7W6FzA9IQ9aum?= =?iso-8859-1?Q?xY8+W7WuhXfufzRhaiC9aM2dVW1m8dT9HmDFECb3nksgAqEKWnItdVxSvj?= =?iso-8859-1?Q?18/8poGyGV42G2FJ5hMnq+hIZyfIsr4XYsF2XfIkZTwXe6MUxOQfKOlilz?= =?iso-8859-1?Q?ZIGpaVwzOR70jlO0OkbzGP7lgZLAOrYr22nrebfbvRN9FOdqo/6HgqdEGy?= =?iso-8859-1?Q?GBiDH8Q6ieg3u+sTQjw1NFdWN/yhN4ms2vIaNHthBy6t+uSGQlM1wYL0oU?= =?iso-8859-1?Q?yT+2hqxiQ/8hQFWba0324yz/BYzZh/l8nngdDTkduU3spDnMLUvmrsgbrj?= =?iso-8859-1?Q?EIt7HySFOO6PWSP/scauGCEXlYepRkadUK8QHw71h+tKPrEKWbjMc/wv95?= =?iso-8859-1?Q?3gj88pSzQYhfOXfXhI8FCVlmnUf1Qpqn5qr+tVmFZ324ZjOJYbFuM99AP/?= =?iso-8859-1?Q?WNcIdqJDKvNcGucK5iJK324rv7hyY6qU+YusaganMzJG92NPGxSTErmEoV?= =?iso-8859-1?Q?B82PEmf8u/QT6wDhVVxTJuVxF7lx0CjvfG0rM14NlaRjJpWgvSjXMF0RyP?= =?iso-8859-1?Q?rum7ocm1OPrZuuQLCYCaqzIy1x8TMFAP2wh48hIW3PDJG6Mr86OGcfIZzf?= =?iso-8859-1?Q?8rGB6NsBSD0KiCtUL4UDWS2ESXi+0FUs1lPtWieo1W/E3gnx/KktAID1xf?= =?iso-8859-1?Q?OH/aKPbnyLarc60zPdPlQ6XODkxyIDTMzuxmiQScuVn82Gb+y5AwIA7VS1?= =?iso-8859-1?Q?8yI+iXG2GnF4ilR6GeR+aal83zBLYVc/iGG/RuFzi+EFUm9JgVg8BAcKs+?= =?iso-8859-1?Q?ZbrAa9/8C7o3305kNZn/OhhXwHv3uB75+plnvboedreT4269amtUDqkn/g?= =?iso-8859-1?Q?EH0jYWl8ZylhlHhmPMtij3aTX48leNPG6cfRe6WSDqRmjHmMzc8OfbjC1S?= =?iso-8859-1?Q?BERA/YiNQ2ws/lKarpVxrKYTR/c+eNMrYkVl1o8LlY64moKcS7OQO8wTQ+?= =?iso-8859-1?Q?F8TxkUVw/c1PRuqxKo3Xp7sG4GGw3vxAxJgkfOqRJE0o3pWyNf4XiDv64V?= =?iso-8859-1?Q?81Wpbb/7YT57shjpX5NbWcMTHcuvKAyaoi7+3o85WlTuo4pMuUdqgFaDc5?= =?iso-8859-1?Q?lMvPlhMRkECkZfo/0x27uLXGpSSs/00KpUgzoEA7nubdtkr8DfmNS/CZB8?= =?iso-8859-1?Q?L2QsZq0aaEvIj+tSX3/7FktMpIsHeim4LeNQoIcReckWcCzoNRPsOXS3fm?= =?iso-8859-1?Q?71xzgaQhGax0HytOJetkuZgIXIwUc9xiGf7Njm+IJoOyRyDC6OoisEmlDp?= =?iso-8859-1?Q?11iFqSo11DLcys+8h1GRkeBQt81xiKUUFkliFMaeZTWAWzqoEnClzizNjy?= =?iso-8859-1?Q?pA36+QThw8+aB4U3WV4htGv+ShEVG3ZUlsL?= X-Microsoft-Exchange-Diagnostics: 1; HE1PR01MB1836; 6:+dQjPt1DS8aXZxQJog2pax+bESG//4hjZuh9K0IoZhCaWbv5KsGFvxvMSxyfN8erMuDLDT0G+RgOgGgRiU3WdTdVhPk91LsM3hWAks2oSOYDBQGwNiYkxp8FVlcf2MkoaVasLMPQXNrM4yFGwLOy7rGUCHRMUYM54i5T5XHzx+qxED6DwIbsBAGyAPoZOB4r96oe+D3aYUE5o2v8HAjJiUhLWG7BIL+QMlmjuqCufA18ZkLhrNv/USc3hhgVgzz1PendznfbnvwSq4e7Pd8X2jpfNdId4nuBbmGeyJIwU71bVFs8JRzGcAwfgngrTvZaZ9lDQETKT44rsNikDhCzV4P3hpT0VqqSB7q1c7KlQgj0EtaR+iy8z5SCs6yeVdR+CM50KnRglrfthbcX8fqndxjSDHdpkCBDMwN30p8R1l4=; 5:pejT0qYMQ1+w4K2DwA8gOEbgjaa9mFNOygVURG2nWzUq4IlAyyR9e/NmgM61J3Px7uJbMiVS82KR34B0bw41mdMpP6J6mNdPFDW8cpOgUdS+pxY2cyexB/zjnBtaZha9glq144ekoSt7y+1aGdOVqyGmGq5JJGgb8RfaCDM1Nzo=; 24:PBPs6ZVgGmsqccfj4gql5dRXJioiw2YVqS3UHty9BWkcTQaxqbNwA7hhZ7pQg1uvujyPoumkzWZ1P7STO4JgWKsfHoriOqYlSj3wgqbRsVE= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; HE1PR01MB1836; 7:XEabZJHbPLuzAbdRHlrCaw2aoRe29x1STm8J5pE8jK+wll3aa2zaY7Z51lfes2q/evYH2TJFZlg2TCx5za81YiqtQXgpY00+vHAVjBQ5avQOOxkeJO8GVc5CiISlpojfp10+ZIVAJKPqEbQNFIhzm2q8r2nL7GT/8O3rZAKT6SbxV+xj70f3mDPzcZcjyNf7sif/Dak0WyB8vR8BVNTaQY3MUBlJbjwlmLdGMDl12fw3jhGe1nZqXnEopnuwrkHw88IWm2+R7zC+c2SCTFaMuF4teICMBvXbuRXBCOZxy3I3izPFuhaTvuXeExJfr94Yte1l6t626JxH+rMfn/6eQgddrYuJkqKdToA71MILhgJ/y3SdyMf8CX5tmaA89jWlxVLAM3qCFvbzKYyrcEqXiyJXtvGl60pjEtbwRzn/+P/e9yL00pNSMoACcXX8hbDbXYb9jodoQusClp8vmcJqIw== X-OriginatorOrg: ingate.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Jan 2017 10:52:55.6923 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR01MB1836 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-turn-server-discovery-11.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Jan 2017 10:53:04 -0000 Hi Tiru, You said> This revision addresses comments received from Ben during ISEG review --- Not really - The (D)TLS mandating was Author's idea to throw into version -10 during the discuss and remains in this version -11, breaking = the consensus text since version -7. --- And do you remember Ben's: Fr=E5n: tram [mailto:tram-bounces@ietf.org] F=F6r Ben Campbell Skickat: den 11 oktober 2016 23:08 Till: Tirumaleswar Reddy Kopia: Prashanth Patil; tram-chairs@ietf.org; tram@ietf.org; draft-ietf-tram-turn-server-discovery@ietf.org; Simon Perreault; The = IESG =C4mne: Re: [tram] Ben Campbell's Discuss on draft-ietf-tram-turn-server-discovery-09: (with DISCUSS and COMMENT) ... "I saw a comment on my DISCUSS email thread from Karl Stahl, stating = that DTLS could not be mandated. Has that input been considered? (I don't = have an opinion; I just want to make sure people noticed the comment.)" Let's get this done in connection with next email "[tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery" thread, in = the connection with the technical discussion you brought up again. I have another question relating to what Author's have in mind regarding = the "explicit administrator choice" in the text under 9 Security = Considerations: "In some auto-discovery scenarios, it might not be possible for the TURN client to use (D)TLS authentication to validate the TURN server. However, fall-back to clear text in such cases could leave the TURN client open to on-path injection of spoofed TURN messages. A TURN client could fall back to encryption-only (D)TLS when (D)TLS authentication is not available, but MUST NOT fall back without explicit administrator choice. Another reason to fall-back to encryption-only is for privacy, which is analogous to SMTP opportunistic encryption [RFC7435] where one does not require privacy but one desires privacy when possible. A TURN client could fall back to clear text if it does not support unauthenticated (D)TLS, but MUST NOT fall back without explicit administrator choice. Fallback to clear text is NOT RECOMMENDED because it makes the client more susceptible to man-in-the-middle attacks and on-path packet injection." If this should be applicable to TURN servers provided by the local or = access network, do you mean - There is some (static) configuration to be done e.g. in the WebRTC = browser OR - The network administrator stands behind the WebRTC browser user and = pushes some button on the screen that the TURN client somehow puts as a choice = on the user's screen OR - ??? And should whatever is meant happen at the enterprise LAN and also at = the Internet Caf=E9 and at the Airport free WiFi?=20 Now that Author's in this -11 draft have put in these two MUST NOT = instead of SHOULD, such text cannot be ignored anymore. And please understand: This is a DISCOVERY draft - We simply cannot have MUST statements relating to the USAGE of TURN servers. That must be left = to other drafts, understanding the use case and requirements, like the = RETURN draft for WebRTC TURN clients usage of the discovered TURN server. More technical in next email... And if we can agree on what is said there, cannot all of this (which is = very hard to understand, even if I try) be removed? /Karl -----Ursprungligt meddelande----- Fr=E5n: tram [mailto:tram-bounces@ietf.org] F=F6r Tirumaleswar Reddy = (tireddy) Skickat: den 15 december 2016 07:19 Till: tram@ietf.org =C4mne: Re: [tram] I-D Action: = draft-ietf-tram-turn-server-discovery-11.txt This revision addresses comments received from Ben during ISEG review. -Tiru > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Thursday, December 15, 2016 11:47 AM > To: i-d-announce@ietf.org > Cc: tram@ietf.org > Subject: [tram] I-D Action: = draft-ietf-tram-turn-server-discovery-11.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the TURN Revised and Modernized of the = IETF. >=20 > Title : TURN Server Auto Discovery > Authors : Prashanth Patil > Tirumaleswar Reddy > Dan Wing > Filename : draft-ietf-tram-turn-server-discovery-11.txt > Pages : 15 > Date : 2016-12-14 >=20 > Abstract: > Current Traversal Using Relays around NAT (TURN) server discovery > mechanisms are relatively static and limited to explicit > configuration. These are usually under the administrative control = of > the application or TURN service provider, and not the enterprise, > ISP, or the network in which the client is located. Enterprises = and > ISPs wishing to provide their own TURN servers need auto discovery > mechanisms that a TURN client could use with no or minimal > configuration. This document describes three such mechanisms for > TURN server discovery. >=20 > This draft updates [RFC5766] to relax the requirement for mutual > authentication in certain cases. >=20 >=20 > The IETF datatracker status page for this draft is: > = https://datatracker.ietf.org/doc/draft-ietf-tram-turn-server-discovery/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-tram-turn-server-discovery-11 >=20 > A diff from the previous version is available at: > = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-tram-turn-server-discovery= -11 >=20 >=20 > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram _______________________________________________ tram mailing list tram@ietf.org https://www.ietf.org/mailman/listinfo/tram From nobody Tue Jan 10 03:00:15 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FB24129AAE; Tue, 10 Jan 2017 03:00:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.021 X-Spam-Level: X-Spam-Status: No, score=-1.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MSGID_MULTIPLE_AT=1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ingate.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0iLRahiMi5Zj; Tue, 10 Jan 2017 03:00:05 -0800 (PST) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50055.outbound.protection.outlook.com [40.107.5.55]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1ABFF128BA2; Tue, 10 Jan 2017 03:00:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ingate.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=+DwTgqREdP4+pZ0eyuYxUVfEOPqAGQBCAhT81Y0njjU=; b=vUt59vr74nxDm3pzizcM0Ep+G3DGuHK3iLX5K7odbBelaBLLykrhvzK42jzBErlVif0d2ASe4WpgJW5KToXCv0Wx850cESCcXlw7zmmAm9bWiIVFGRi6GeBXMfXpqYMOtJNhNwP1w6bSH7rX0w9BHTPnZ7Gs+1J9KUjChLS4MoQ= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=karl@ingate.com; Received: from Kallei7 (90.227.80.227) by VI1PR01MB1838.eurprd01.prod.exchangelabs.com (10.166.40.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.829.7; Tue, 10 Jan 2017 10:59:58 +0000 From: "Karl Stahl" To: "'Tirumaleswar Reddy \(tireddy\)'" , "'Brandon Williams'" , "'Pal Martinsen \(palmarti\)'" References: <521b142d7fd9482ca18102655d4ef4e6@XCH-RCD-017.cisco.com> <021701d2436e$4cee87d0$e6cb9770$@stahl@ingate.com> <03166323036f4cf187c0a67b9c183138@XCH-RCD-017.cisco.com> <034501d244e7$ad9ac060$08d04120$@stahl@ingate.com> <061301d248ea$12c01110$38403330$@stahl@ingate.com> <3cf392b265354926a46f8e70109df236@XCH-RCD-017.cisco.com> <065101d24958$64f42fc0$2edc8f40$@stahl@ingate.com> <7f4a0d29c1b844539a5d2b38ee699c38@XCH-RCD-017.cisco.com> <00a901d24c77$6a9b7d80$3fd27880$@stahl@ingate.com> <96701F1A-BE53-4A91-B0 FA-2BBAF7051651@cisco. com> <0726040555ad4275a2486f0aa8f9174d@XCH-RCD-017.cisco.com> <01d101d24f19$04a7fae0$0df7f0a0$@stahl@ingate.com> <5f464f75-5d00-a0b8-83cc-07e1b0f2ba25@akamai.com> <347f9a2f4d5e4970a17288e8ca33b882@XCH-RCD-017.cisco.com> <997ccf57-0634-c43e-22e2-a93f0ab75f5b@akamai.com> <03b17932e8824b5a9fd4a5d7c6baedc3@XCH-RCD-017.cisco.com> <31ce165e-a498-b024-7da2 -e65413826504@ akamai.com> <0b4d512c4e0e43c6bd87cd70888d9489@XCH-RCD-017.cisco.com> In-Reply-To: <0b4d512c4e0e43c6bd87cd70888d9489@XCH-RCD-017.cisco.com> Date: Tue, 10 Jan 2017 11:59:58 +0100 Message-ID: <011e01d26b30$b1277100$13765300$@stahl@ingate.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AQHSTxkaN2BYgrSUakiGU6H6t4xJ+KEBz24AgANhBxCAF4kGgIAIrmYggANyuoD//51ssIAIKUwQ Content-Language: sv X-Originating-IP: [90.227.80.227] X-ClientProxiedBy: AM4PR0501CA0020.eurprd05.prod.outlook.com (10.167.83.158) To VI1PR01MB1838.eurprd01.prod.exchangelabs.com (10.166.40.24) X-MS-Office365-Filtering-Correlation-Id: cca99a0f-99d0-4071-1f5f-08d43947d213 X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:VI1PR01MB1838; X-Microsoft-Exchange-Diagnostics: 1; VI1PR01MB1838; 3:U6ZUQ3F7Jp+0S/myE7xO6KqeYt9MBriaA/4J6isQAEhL0TO8cwvh1uuJRD2Hm7w9mghzLGpOaSsvGtqS9ZK+yrlWDqytZzbL35nTyW5IQFN/nNtsrr4BdhHl4q6PB/oZwLmvJiEobnwxcnRZF+Qqum80o/HlRC2wFt0HPRNiAOuZCyKfbcY+0Hk34cON2HU7Qj65m2bRQ79U2FicyJsY7/lc2XX/CPsVwoaepT2LihRLld+3UNipNm2uqo+3Gvu6ehvB1xmuEwyCKsJ6H/OnQA==; 25:0duQPTjQLbpgGloI2VCiWjNcvHSanx7ypEZpdapoCdL9cmqoUjtN0Mnkep/TC13ifjFb1k+3TnkVwvQBSvB8i/GfD5Xod9zlisDiTMS7Ibmb3yfkqvYzuSqzX5NQB7YrfPl2ItIkM9RrP4ngrqVxe66yduaw3GRFzYKkNBdSPPl5R62qEr/AfpQRo7nSXz+4EV2kP2KEl2ZMeXavXlvsejNOlHM83huLHcq4/nM970Q2Dp/K2M614rDEVxnFm6B4whbUdJaAWhH8oP/ve7nI1+Wd/tzzulf5+BNvKyuJH0B8TlU7x0hnqONKUhMW5DsY9UpBEijCxMV9s9GZLbr096EkY1+LY4B758ovgR1S7N97sNcGsKNMv4wh++9Uh9ZLrTrO9GM/qwhCQMAkDr3fLM4JDJjMbL3csL2OCPYPzIMnNzAhC+mMGrOojEGWUdMWSWsxRUHHnweSuEZbgkOZ9w== X-Microsoft-Exchange-Diagnostics: 1; VI1PR01MB1838; 31:A8hPl7e3qexKmqjRjFFOMYvxrj3vhxI+ufkJAEFY7sogIvwzkYKlJYiZyEpVLIIkoptHxH1Xvz+bJYBqFvP8AOpIVSis5pF3PTYzBGWWl6rS8/pmz6Gty/Ei4XSM9O7R0VAqtHljV8syzB758vX3weNClbGo7y2qNI2s0ej21Z5t6LT9dW6KJHgdCWHrf2hDGXj+HgCcWwMvpkjqJvHuTJAr8mUYl1Apkd3h5s3eyj/bRQ91owOJwGQfqh0c1SYjl6DBQw7P9EXiz0vU4njlpg== X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(158342451672863)(10436049006162)(192374486261705)(131327999870524)(100405760836317)(95692535739014)(21532816269658)(17755550239193); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6041248)(20161123562025)(20161123555025)(20161123564025)(20161123560025)(6072148); SRVR:VI1PR01MB1838; BCL:0; PCL:0; RULEID:; SRVR:VI1PR01MB1838; X-Microsoft-Exchange-Diagnostics: 1; VI1PR01MB1838; 4:uFqohxrSfl3BDD3azwbw4sdzHpJSaAt8sNZelpBfPJmncvJ85R1EwfuYbj+AUXft92iotCpo6NCZ1ceswIotdi610X6jerzPpa0Iubc71JUm38XiT+85Wc3Jp7UbZKw9ZVCpeeX3e/ELHAKvs/oWKPgru38gRTwVQu7dm+ASawVVxNwrsEUAW1Zne0hnpb5e2JP59lsGzMNoW4186dOYW+AUJ4MLbd1UYWqABSkKR18XnRiQz/PHZrNl0nboaQHNDFLKGWXZBDSmArPWiDumxqY3rmZx0ObfJ19xC58Lsndntqo1SU0Z2VgzFCoXphmepmUUDZE4rtEkefg6pgT09rEMZRvbXTLXfYsEV7YeGIsuSWh9zKIOf97ArzVcVFDHiuSfmKrT2gJhuDLrmY6o6rMVJCEvUqD6G0jpFnROyN9ZBxtUl6knyf7X3++Ob89s78mka+55+cixooLeN37md3njP2FmjyWpO3YJMuGfJfYuYbF92HqxUCw9Ax6vCm9Z3Nc8bJmCtUWHtieN+YP/BRK+g+ndGCQ4sfIdpl0fuSMxPFhEgpd+KPm5wtf+yvrywhPONfudbonixMYRtF8CrKmwg0IO5ufLj41d7hcvKAAD2xUWE7HHDO/cnm8YTSpNmw4GRLey75HEquBoC6cjdUuwbaaUZw0cyooTPbgpiv+f9gfeUK237OF6mVRmT1D/E6P6UouH7Sdy1Pp+FEy+Dq+xvkBlhGDHLMkj0+j65fq/HdG04wKF6J9REqcrn53lwDl4Sf1FYDopSoGO3o8CtmrYW9te2ZQtlScNLv+rQPoHTQubN+9dYZbfIwHRD/LbOTsNuyEzQQn3YxNkEmHwD25SFiAVMuppods2x0RPVYU= X-Forefront-PRVS: 01834E39B7 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(4630300001)(6009001)(7916002)(39450400003)(38534002)(24454002)(199003)(51914003)(13464003)(189002)(51444003)(377454003)(551544002)(42186005)(76176999)(36756003)(50986999)(47776003)(66066001)(7416002)(33646002)(93886004)(568814002)(105586002)(50226002)(61296003)(561944003)(8676002)(68736007)(81166006)(8746002)(7736002)(96836002)(81156014)(305945005)(106356001)(2950100002)(106116001)(230783001)(5660300001)(6496003)(44736005)(6486002)(25786008)(38730400001)(5001770100001)(39060400001)(1420700001)(189998001)(50466002)(97736004)(92566002)(2906002)(4326007)(6116002)(3846002)(101416001)(54906002)(6306002)(14726001)(102836003)(23676002)(575784001)(9686003)(5890100001)(84116002)(61793004)(11771545001)(559001)(569005); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR01MB1838; H:Kallei7; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Received-SPF: None (protection.outlook.com: ingate.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtWSTFQUjAxTUIxODM4OzIzOlI1NGo2Sm5FVjhlTjMvUzRvNkdKNnNodGlP?= =?utf-8?B?L1Nsam5RMzZzWmcrK2F0blNxYjZUb1Z5cmFHZDhia09OMExSY3dES3cwL3pt?= =?utf-8?B?aWFVck5EYlRvL0hJSUU4eTFXVlZ5eTBwVHR6dnE5OUI1ZXNoR3NUSFJKTzRI?= =?utf-8?B?aGRmWW1rWGFwSzA1djF5RVA0eWhVdUxPVGRFQkljV2w5YmJoMzRNWTIyVUpp?= =?utf-8?B?eG43SlJZM21aN20yTXN5eWxoejAxbk1YK2M0bUJNd0F6Nno2MHZ5QkJsQlNN?= =?utf-8?B?a3lMbldzRVdySnFrQmtEQlJ6ODE5Ry9vcHlUaVZRUkxBNjJXdERaRkVhYkdS?= =?utf-8?B?bTJ3ZVVkbGtLanVWWmNYR3dpRkZiOFpud0orbzdDTWNocHUxTmUzV1NVWGxR?= =?utf-8?B?NUFkR0JsdXd5aUhSV01wWTJDRldVTVB4USszZGV1SXRiUVZOZDhPRHNkSWZ3?= =?utf-8?B?WWNTdEpOVWlXUmpPMXlUaHVZR1JOZGhPWmpFcDJIUnlFcmhSTzMxNkR4aFlq?= =?utf-8?B?K2ZHVVh1c1BJdFV5ZDFGM2d2U2xVL25xQlU2d1lGZGdZV1N4NUJoVVE4K1NF?= =?utf-8?B?NExhREVXL21nUC9ucXd5QUxXSVd5L3g5NXE2LzEyVE9jbXhFTXd3d2hndUtp?= =?utf-8?B?RmhIcjNuQzlBSEpTbDhITnJreXdPQzJVMy9pK0ROTGhjTENGL2l3ZVkrNSt6?= =?utf-8?B?QVJZbXFpMlA2eUtlSGN3T3NaalZ6bE5DeGNKa014V1ppeHV4TUpFVm5CM2ZO?= =?utf-8?B?UTlSSzBKT2NtTDFmbjY5YURjMzMvZVBFTHc4dEUwMWFhMTNkSHF4dXBLdXNS?= =?utf-8?B?MVp6QVU4ZGlFN2I2MW9ZK1J0QUs2WUJQSk1xYit6YVh2azh3eExKbWticE1T?= =?utf-8?B?cGNKS1hsd0dUY25jOTVDWTJEbVZEellRYlJSaTI4RDVSeXFJL2RlbmV0bko5?= =?utf-8?B?TWJvWFgrcUJWeWE1VVFjSGtPVnQxaEN1Qi9pY3dyYXNzNTBhMEZON0YzQzFY?= =?utf-8?B?aGJnajRReU93NEFlTjM5YVllS1p6YWtCVC9oT3F0MklmbnlOanVkQTRRclFz?= =?utf-8?B?ZFdlOS9wZ1ZpZitKVVczeDF6QTV0ampsTFlxYXZuY2tGVkJqYndWbFhmbkRw?= =?utf-8?B?SFpYNkdGL2FEKzU3MlhIRDRrb3lKNm83Vjdtbm91T01ZaE5US2JINWJxNFdL?= =?utf-8?B?cSsxbFdNSFBhL01FcWJVOWlrYU9FZE1pa3dSTml3UU1pbmZSancyWlBpWnUw?= =?utf-8?B?S01rdFRKemF2VzQ3azd3aXlsejRwdVJhZGg0cHpYMVliVXFoa243UnFNamtY?= =?utf-8?B?YVdNUjhoY20rVUZrVXRrSFhIRDE1RlRpSzhaTWREUklrM1NKTmtaZWptODdT?= =?utf-8?B?MEFxU3RFUTlvVFpteWZXdHNoTktZR1BWV0hYV3BSYUxNV1dGSkZ5cS92TWdm?= =?utf-8?B?UWs4R1R3a2VUVUVwcDh3NGEwam5yZERYMTg1R2Y0Slp3UVZjcnJNRmd6N1RX?= =?utf-8?B?TWFGN3dFK21WbEpiSnI0YjVjUFRRUEUvdkdwRGkzR2dSazk3Vkh1MVAzNEhW?= =?utf-8?B?L2h6WUROUUhhb3d1b0hKQloxYTVWaUlremt1dEVuZDUvMmhQNUdWT2RHMjJC?= =?utf-8?B?MldyOG1rU2hjZDRJeGhnUzZLV2hsQ05lTnYvN21KRUZwMkF2clBlclluOVNo?= =?utf-8?B?SGVnUWNhYU50djhmZWNVeld3UGFWSDZxOFR6Umt3K1VUWC9PRm5ubTRHUmlC?= =?utf-8?B?L0lraVEzZnBacHFsMlhBd01TRFJEajRURFF4RDljS0xvYVgzYWlNUDF5UktV?= =?utf-8?B?a2FDbkxYU3Z6OFJaTVFjM25pRzlVZEZwdkhUTWtFRysvdkljSllGalpOelQy?= =?utf-8?B?cXJLWTNCTk9FYWNRaktHbFdId1RPQ1hmeTRqenNmTkdiZUZxZ1R2NkoyZzRu?= =?utf-8?B?YjBPNTBWQlZqbllkZ09yMENIOEg5Vk5YV0RLVWpzalZtek1VVFpyS3YrMmhU?= =?utf-8?B?Z0Q4eXp5NXpSQTFVbGtOK1lSSUhYYVpmeVJkb2E4SmNNMjY4NGl1cjZXL0NE?= =?utf-8?B?NjkwdW1qMThwWVRiM0tFRjBiVTdjcjVjSkFHWXZiTHp3K2NJNUo3U1p2a2lH?= =?utf-8?B?ZnkyMGFpSmpCZFFCSmZwdzNCT1czUGRFeDlEVWR0T1k4M1NlZ1NwUE9QOHRj?= =?utf-8?B?L1A5VEtmVkphdVBwVE5SL2lIZEtlV1pnSTBrQ2VFRFNaRmV1T21ZOG9nT1ZY?= =?utf-8?Q?Rjj1iGEibx6m3cBONV?= X-Microsoft-Exchange-Diagnostics: 1; VI1PR01MB1838; 6:FexL4hzP8CUQfybK2Q3rGgN/pwnj/Ojxs2Ht6zF4uGCdruGPRh1p/EMhqQa4n4D7PNS4JFE2cviXhc/A5Ayj5MIShzIQDXnL+3/AjYE4wWFCUnuTdcWe5A/XloIlUCU9tRs3h2Yq72YiuxT2vGjw9LWuslLyO+TJ4Pt5T5x+Cyn9yYr/Ha+53aZmJDza5Oocv/Z/i8Jb4rgyTpnoYkBDzul5pDMhSoURjpvxnzV0cV9lNYMSICJTvib+k/+on0OHbRiO/Jlir/0bPQLDda6huthMYX5R689A7haXsWuO7W/ufwRxELAsqFK7BY/+ymuyehlgpEJZR5Z4K58mT9FychgHsJll9/5T0FYa2NIp2VKa2Llzp8Je9xSNQotVxwnCTUto218IS3OvcTcplT7mMxhJeFMLS/7S/aQ6qlggRoM=; 5:VTeLEqbga/+1y2Jyx6HP9aZvYR1TXK4y/UKw9NQOC+FLiD/ifwyXLf0XKqYIfDuXKk7VD9VpDSXzOmrUIX2xxPKFkV4nx83MEi/lo5ndpicWKZi+TO+EnZp1lBN2P9oqQPYu3//rCyijDOrJPN7nZLUhEb4FkD7m/TFRHd/cX7E=; 24:qTusAHTvL6azkDLbnNuLpQ/O8bU7LsuAS3rrJMsV38SJ4h3CuLvmf4GsYHG7YlevIjkxBu6wmk2C5P9PgDZtK8WQfEMNucQVUomUQspv0AU= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; VI1PR01MB1838; 7:QojPxlOu8MBSRY/nj9YrUm3tE9pKpqPrdsyIZJSwm23GnN4r0abTDbTlcLp7vJYWkhgeazUkHaAYFB4E8Dw7eixeaWhIS4QUHIaZyTdEuMNG5Mo18UmRHqQpuKdpwXI7kPuO/CNRKcuHlKYFjzJJLQCMuwfQWI+LEPwYInXELrIhWKBWMghU3nAYuEWxfWLBoPHZR3T6P3LPkr2n20DMZiOEVvVH4NxOz7RfR9NPbbV3nDkF85yK2rm/5dvZDKiUvOMkLDifofr3u4dqeOcAN2UmGlItP9aQSAcSp3HeIzgTvEgfabPBZ5VdThlVB2QNk3OmS2++kBVBXSdnWY9+2UmgRZ262K0E4rrziqJekzUmDOKOu/xN4eDYJ4irCNzwVKTo53qo1R0ThL7G2umUUNBOOjq7g9NDr9L0mL9HQStfpIv1S9kj6+XE3MI2lZrlCXnibxtVPzvle3fnxvhuMw== X-OriginatorOrg: ingate.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Jan 2017 10:59:58.7084 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR01MB1838 Archived-At: Cc: "'Prashanth Patil \(praspati\)'" , tram-chairs@ietf.org, 'Dan Wing' , 'Spencer Dawkins at IETF' , tram@ietf.org Subject: Re: [tram] Maybe we have (D)TLS consensus; WAS: draft-ietf-tram-turn-server-discovery X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Jan 2017 11:00:11 -0000 Hi Brandon, Tiru, P=C3=A5l-Erik, I've read up on your discussions during Christmas and want to convey the = following (hoping we now better can understand each other's points and = get to a good consensus and text for this draft to hopefully become an = RFC soon. Further down I will point out relevant things that Oleg = Moskalenko suggested already in March 2014, but I think none of us fully = understood at that time.=20 I still mean this DISCOVERY draft cannot mandate (no MUST requirements) = USAGE of TURN servers. See just sent email about the version -11 text = also. Your technical points first though: [P=C3=A5l-Erik +Brandon] > Can the client use (D)TLS only during = discovery and auth phases? --- NOT at all possible for the DISCOVERY phase. Neither DHCP, DNS, nor = anycast can use (D)TLS - There is not even any such option for the = discovery phase, is there? Discovery just gives as an IP address to the TURN server. It is with usage of the TURN server that the transport method (here UDP = versus (D)TLS) comes in. (And notice, for application provided TURN servers, there is no (D)TLS = mandate.) [Tiru] > What is the downside if (D)TLS is mandated ? [Brandon] > I'd like to hear Karl's thoughts on that. I agree that = unauthenticated=20 (D)TLS would be the more reliable way to get the required mitigation,=20 but if it is reasonable to say that some networks don't require it, why=20 should we mandate the overhead of (D)TLS? [P=C3=A5l-Erik] > We do have some hardware that might have problems = doing both (D)DTLS and SRTP on the amount of packets they are producing. (--- Hope we are clear that Tiru's MUST (D)TLS request now is only for = self signed certificates, since "Trust Anchors" for a TURN servers = provided by the local or access network do not exist (or rather is the = network administrator himself).=20 First: --- I have earlier pointed out that self signed certificates are = not liked by our WebRTC Browser making friends that we hope will use = this discovery draft... Second: --- The "S" in (D)TLS (and in TLS, HTTPS, WSS also) is very CPU = power hungry. (Self experienced details: Using RSA of SSL-init with 2048 = bit certificates takes about 25ms for one x86 3GHz CPU, limiting = initializing such to only 40 per second.) This comes from the = "Validation" and the (extra) encryption initialization that we are not = really interested in here. Actually, such CPU hunger increases DOS/DDOS = risks.)=20 --- Also see: (D)TLS ... "is like 100 or 1000 times more = calculation-heavy than sending thousands similar initial ALLOCATION = requests" from Oleg's discussion of this in 2014: = https://www.ietf.org/mail-archive/web/tram/current/msg00453.html=20 Third: --- What Tiru wants, as I understand it (and I don't disagree), = is to limit the spoofing (and maybe DOS, DDOS) attack risks (when you = don=E2=80=99t have password authentication), in case you have ATTACKERS = ON YOUR LOCAL OR ACCESS network. However, that is better achieved by = CONTINUING doing AUTHENTICATION, DUMMY or "bogus authentication" (by the = TURN server accepting password=3Duser) as Oleg suggested 2014: = https://www.ietf.org/mail-archive/web/tram/current/msg00427.html=20 --- The (main) technical background, I simply would say, is that an = attacker can spoof (if the network access allows the attacker to show = someone else's source IP address) if a TURN Allocation is set up by just = one single UDP packet, but an attacker CANNOT SPOOF if more packets are = needed (as with (D)TLS or any Authentication) (packets then also have to = go back to the spoofer - which fails). It is not the validation, = encryption nor double encryption (of (D)TLS) that we want. --- Oleg's "bogus authentication" also opens up for a valuable feature: What about signaling in the realm if there is any cost for the user = associated with using network provided TURN server, by having realms = like: FreeToUse, 3xCost, 3xCostButFreeVoice? (GoGo WiFi or similar can = be expected to take more of our minutes or Gigs for providing a pipe for = a videoconference e.g. and the TURN client/application/user may be = interested to know.) I am NOT meaning this should be specified in this = discovery draft though, but we could SUGGEST such an idea for other = drafts to take it further. =20 [In this context, this by Brandon should also be considered]=20 My point is that the client might not require such protection in=20 all cases and it should be up to the client to make that determination.=20 For example, if both the client and the server are on my home network, I = don't really need the protection that (D)TLS provides. The server must=20 support whatever security posture the client requires, but the server=20 should not require the client to protect itself in a particular way. Isn't the above sufficient to agree on a text where we totally remove = the thrown-in (D)TLS mandate (that is in versions -10 and -11 of the = draft), and RECOMMENDS (no MUST) that when spoof attack risks exist, = TURN servers in the local or access not using STUN authentication SHOULD = use STUN dummy authentication? (Notice the logic in putting a form of STUN authentication back (after = spelling out the Authentication downgrade that caused this discussion) = and that there already is "IP authentication" in the draft through the = text: "Making STUN authentication OPTIONAL is a downgrade of a MUST = level... measures must be taken in order protect the TURN server; some of these measures include, but not limited to, access control by means of access-lists, firewalls, subscriber quota limits, ingress filtering etc." (The Firewall only allowing local = users to use the discovered TURN server, is IP address Authentication.) (D)TLS with self signed certificates is CPU hungry, complex and = (consider just sent email) hard to understand how to use. Should it even = be mentioned as an alternative?=20 If Brandon's fallback mechanism requirements should be in the text, it = can be written without any MUST (since it also relates to usage, not to = discovery). /Karl =20 -----Ursprungligt meddelande----- Fr=C3=A5n: Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com]=20 Skickat: den 4 januari 2017 14:31 Till: Brandon Williams; Karl Stahl; Pal Martinsen (palmarti) Kopia: Prashanth Patil (praspati); tram-chairs@ietf.org; 'Spencer = Dawkins at IETF'; tram@ietf.org; Dan Wing (dan@danwing.org) =C3=84mne: RE: SV: [tram] Maybe we have (D)TLS consensus; WAS: = draft-ietf-tram-turn-server-discovery > -----Original Message----- > From: Brandon Williams [mailto:brandon.williams@akamai.com] > Sent: Wednesday, January 4, 2017 6:28 PM > To: Tirumaleswar Reddy (tireddy) ; Karl Stahl > ; Pal Martinsen (palmarti) > Cc: Prashanth Patil (praspati) ; = tram-chairs@ietf.org; > 'Spencer Dawkins at IETF' ; = tram@ietf.org; > Dan Wing (dan@danwing.org) > Subject: Re: SV: [tram] Maybe we have (D)TLS consensus; WAS: = draft-ietf- > tram-turn-server-discovery >=20 > Hi Tiru, >=20 > > > > Yes, these attacks may not happen in a home network. But we cannot > > expect the roaming client to keep changing the security posture as > > the device attaches to different networks. An average user may not = be > > even aware of the security risks when (D)TLS is disabled. > > > > What is the downside if (D)TLS is mandated ? > > >=20 > I'd like to hear Karl's thoughts on that. I agree that unauthenticated > (D)TLS would be the more reliable way to get the required mitigation, > but if it is reasonable to say that some networks don't require it, = why > should we mandate the overhead of (D)TLS? RFC5766 mandates STUN authentication though in some networks TURN client = and server may not suffer the attacks discussed in the above RFC. This = draft has already downgraded security by making TURN client and server = authentication optional. Even a simple spoofed attack to close the = allocation cannot be defended without (D)TLS. I don't think protocols should make security optional just because in = some networks attacks may not happen (just like WebRTC mandates SRTP = but in networks that use MACsec encrypting media may not be required = when both the peers are in the same network). These attacks may not = happen today but may happen in future, targeted attacks are increasing = day by day, and I see growing number of internal attacks.=20 -Tiru >=20 > > I understand, I can add the following new lines: > > > > In order to allow the TURN client to select fallback to (D)TLS as > > described above, a TURN server that does not require either STUN = long > > term authentication [RFC5389] or STUN Extension for Third Party > > Authorization [RFC7635] MUST support (D)TLS. Such a TURN server MAY > > allow fallback to clear text but fallback to clear text is NOT > > RECOMMENDED because it makes the client more susceptible to > > man-in-the-middle attacks and on-path packet injection. > > >=20 > That looks fine to me, but my proposed edits were really an attempt to > address Karl's concerns, so let's see if we hear from him. >=20 > --Brandon >=20 > On 01/02/2017 10:14 AM, Tirumaleswar Reddy (tireddy) wrote: > > Hi Brandon, > > > > Please see inline > > > >> -----Original Message----- > >> From: Brandon Williams [mailto:brandon.williams@akamai.com] > >> Sent: Wednesday, December 28, 2016 1:14 AM > >> To: Tirumaleswar Reddy (tireddy) ; Karl Stahl > >> ; Pal Martinsen (palmarti) = > >> Cc: Prashanth Patil (praspati) ; = tram-chairs@ietf.org; > >> 'Dan Wing' ; 'Spencer Dawkins at IETF' > >> ; tram@ietf.org > >> Subject: Re: SV: [tram] Maybe we have (D)TLS consensus; WAS: = draft-ietf- > >> tram-turn-server-discovery > >> > >> The original I responded to didn't have the tram list CCed. = Apologies to > >> those who receive duplicates. > >> > >> -- > >> > >> Hi Tiru, > >> > >> Sorry about the delayed response. > >> > >> I understand that the requirements you propose are to protect the > >> client. My point is that the client might not require such = protection in > >> all cases and it should be up to the client to make that = determination. > >> For example, if both the client and the server are on my home = network, I > >> don't really need the protection that (D)TLS provides. > c > >> The server must > >> support whatever security posture the client requires, but the = server > >> should not require the client to protect itself in a particular = way. > > > > The TURN server bypasses the Enterprise firewall security and allows = traffic > from outside to inside. As you already know, TURN permissions mimic = the > address-restricted filtering mechanism of NAT, and if the client were = to choose > security posture that does not offer any security to TURN message = (because of > bad user configuration or a malware client on the endpoint), it just = renders the > client to become a victim of DDOS attack (an attacker can sends faked > permissions to the TURN server to launch attack (DOS or DDOS) on the = TURN > client and it nullifies the security benefits offered by = CreatePermission). > > > > If the TURN server mandates (D)TLS then the above attack is not = possible and > would protect even a compromised/mis-configured client from DDOS = attacks. > In short, why would an Enterprise network administrator want to = configure > TURN server to be used in this mode in which clients can be subjected = to > DDOS attacks and the TURN server and Enterprise firewall cannot do = anything > to protect the client. > > > >> > >> This is the foundation for my proposed edits. > > > c> > > -Tiru > > > >> > >> --Brandon > >> > >> On 12/13/2016 12:14 AM, Tirumaleswar Reddy (tireddy) wrote: > >>> Hi Brandon, > >>> > >>> Thanks for the feedback. Please see inline > >>> > >>>> -----Original Message----- > >>>> From: Brandon Williams [mailto:brandon.williams@akamai.com] > >>>> Sent: Saturday, December 10, 2016 10:13 PM > >>>> To: Karl Stahl ; Tirumaleswar Reddy = (tireddy) > >>>> ; Pal Martinsen (palmarti) = > >>>> Cc: Prashanth Patil (praspati) ; tram- > chairs@ietf.org; > >>>> 'Dan Wing' ; 'Spencer Dawkins at IETF' > >>>> > >>>> Subject: Re: SV: [tram] Maybe we have (D)TLS consensus; WAS: = draft-ietf- > >>>> tram-turn-server-discovery > >>>> > >>>> I'm not sure we're quite at consensus yet Karl, but I think we're = close. > >>>> > >>>> I agree that the text you quote from the doc covers the client = side > >>>> considerations, and that framing it as recommendations rather = than > >>>> requirements still makes sense. It's up to the client to decide = which > >>>> security elements are required for the application use case, and = that > >>>> text was intended to provide guidance without trying to force a = security > >>>> posture that is more complicated than the use case requires. > >>> > >>> The requirements are to protect the client from various attacks. > >>> > >>>> > >>>> For the server side, in order to allow the client to fall back to > >>>> (D)TLS, the TURN server MUST support (D)TLS at least for = opportunistic > >>>> privacy. This doesn't mean that the server has to require (D)TLS. = It can > >>>> still allow fallback to cleartext if the client so chooses. > >>>> > >>>> So, I agree with you on reverting the MUST for the client, as = long as we > >>>> continue to strongly recommend (D)TLS as the fallback. If we do = that > >>>> though, I think we need to make it clear that a TURN server = configured > >>>> to allow sessions without STUN auth MUST support (D)TLS so that = the > >>>> client has the option of (D)TLS fallback. > >>>> > >>>> I think we are agreeing to this change. > >>>> > >>>> OLD: > >>>> > >>>> "A TURN client MUST use (D)TLS in the absence of ..." > >>>> > >>>> NEW: > >>>> > >>>> "A TURN client SHOULD use (D)TLS in the absence of ..." > >>>> > >>>> And I am proposing the addition of this paragraph at the end of = the > >>>> section 9, just before section 9.1. > >>>> > >>>> "In order to allow the TURN client to select fallback to (D)TLS = as > >>>> described above, a TURN server that does not require either STUN = long > >>>> term authentication [RFC5389] or STUN Extension for Third Party > >>>> Authorization [RFC7635] MUST support (D)TLS. Such a TURN server = MAY > >> also > >>>> allow fallback to clear text." > >>> > >>> [1] I agree with the above text except for the last line in the = above > >> paragraph. If the TURN server allows fallback to clear text then = the attacker > >> can subject the TURN client to various attacks. For example, = attacker sends > >> faked permissions to the TURN server to launch attack (DOS or DDOS) = on > the > >> TURN client and it nullifies the security benefits offered by > CreatePermission. > >> The victim in this mode is the TURN client and not the TURN server, = and > hence > >> it is more important for the client to use (D)TLS to protect itself = from > attacks. > >>> > >>> When there is a possibility that in clear text mode the TURN = clients can be > >> subjected to various attacks, why would an TURN server = administrator want > to > >> allow fallback to clear text ? > >>> > >>> [2] And what problems do you see with the following new proposed = text ? > >>> "In the absence of STUN long-term credential mechanism [RFC5389] = or > STUN > >> Extension for Third-Party Authorization [RFC7635], a TURN client = MUST use > >> (D)TLS and if (D)TLS authentication to validate the TURN server = identity is > not > >> possible then the TURN client MUST fallback to encryption-only = (D)TLS." > >>> > >>> -Tiru > >>> > >>>> > >>>> --Brandon > >>>> > >>>> On 12/05/2016 11:59 AM, Karl Stahl wrote: > >>>>> All I want to do in the (D)TLS discussion is to delete the = sentence =E2=80=9CA > >>>>> TURN client MUST use (D)TLS in the absence of STUN long-term > credential > >>>>> mechanism [RFC5389] or STUN Extension for Third-Party = Authorization > >>>>> [RFC7635].=E2=80=9D under 9. Security Considerationsthat was = thrown-into > >>>>> version -10 during the discuss. > >>>>> > >>>>> > >>>>> > >>>>> **We leave all the rest regarding (D)TLS as it has been since = version -7 > >>>>> of this draft.** > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> Brandon, > >>>>> > >>>>> > >>>>> > >>>>> I see there already are the (general) SHOULD or RECOMMEND that = you > >>>>> wanted (I did not suggest to change those =E2=80=93 they are = there since version > >>>>> -7 I believe): =E2=80=9CIt is RECOMMENDED that the TURN client = use one of the > >>>>> following techniques with (D)TLS to validate the TURN = server:=E2=80=9D and > >> further=E2=80=A6 > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> for Tiru, this is already in the draft since -7 and I am not = suggesting > >>>>> to change that: > >>>>> > >>>>> > >>>>> > >>>>> =E2=80=9C An auto-discovered TURN server is considered to be = only as trusted > as > >>>>> > >>>>> the path between the client and the TURN server. In order to = safely > >>>>> > >>>>> use auto-discovered TURN servers for sessions with 'strict = privacy' > >>>>> > >>>>> requirements, the user needs to be able to define privacy = criteria > >>>>> > >>>>> (e.g. a trusted list of servers, networks, or domains) that = are > >>>>> > >>>>> considered acceptable for such traffic. Any discovered TURN = server > >>>>> > >>>>> outside the criteria is considered untrusted and therefore = MUST NOT > >>>>> > >>>>> be used for privacy sensitive communication. > >>>>> > >>>>> > >>>>> > >>>>> In some auto-discovery scenarios, it might not be possible = for the > >>>>> > >>>>> TURN client to use (D)TLS authentication to validate the TURN = server. > >>>>> > >>>>> However, fall-back to clear text in such cases could leave = the TURN > >>>>> > >>>>> client open to on-path injection of spoofed TURN messages. = Instead, > >>>>> > >>>>> with an explicit administrator choice, a TURN client SHOULD = fall-back > >>>>> > >>>>> to encryption-only (D)TLS when (D)TLS authentication is not > >>>>> > >>>>> available. Another reason to fall-back to encryption-only is = for > >>>>> > >>>>> privacy, which is analogous to SMTP opportunistic encryption > >>>>> > >>>>> [RFC7435] where one does not require privacy but one desires = privacy > >>>>> > >>>>> when possible. > >>>>> > >>>>> > >>>>> > >>>>> It is suggested that a TURN client attempt (D)TLS with = authentication > >>>>> > >>>>> and encryption, falling back to encryption-only if the TURN = server > >>>>> > >>>>> cannot be authenticated via (D)TLS. A TURN client could fall = back to > >>>>> > >>>>> clear text, with an explicit administrator choice, if it does = not > >>>>> > >>>>> support unauthenticated (D)TLS, but fallback to clear text is = NOT > >>>>> > >>>>> RECOMMENDED because it makes the client more susceptible to = man- > >> in- > >>>>> > >>>>> the-middle attacks and on-path packet injection. > >>>>> > >>>>> =E2=80=9D > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> **Tiru =E2=80=93 Below you are pointing at the -10 version = changes that WE ARE > >>>>> discussing here.** > >>>>> > >>>>> > >>>>> > >>>>> Praspanth put them on the table again and I brought up that the > >>>>> > >>>>> =E2=80=9CA TURN client MUST use (D)TLS in the absence of STUN = long-term > >>>>> credential mechanism [RFC5389] or STUN Extension for Third-Party > >>>>> Authorization [RFC7635].=E2=80=9D > >>>>> > >>>>> must go away (leave the rest), since it effectively forbids TURN = servers > >>>>> provided by the local and access network. > >>>>> > >>>>> > >>>>> > >>>>> Brandon had agreed that MUST should go away, when you jumped in > with > >>>> the > >>>>> attacks arguments, when we were discussing whether there should = still > be > >>>>> a SHOULD or RECOMMEND. =E2=80=93 Then you got me (and others?) = lost, > and=E2=80=A6. > >>>>> > >>>>> > >>>>> > >>>>> So catch up from point (1) of my: > >>>>> > >>>>> https://www.ietf.org/mail-archive/web/tram/current/msg02216.html > >>>>> >> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg02216.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DNtRZwrmn2K- > >>>> WUI_QN5k_yHlAN-uzhoQU8bs2yA_RBP8&e=3D> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> And you may notice that in > >>>>> > >> = https://mailarchive.ietf.org/arch/msg/tram/3svO9djFxeZyTtNsgqQf8zCTiVY > >>>>> >>>> > >> > = 3A__mailarchive.ietf.org_arch_msg_tram_3svO9djFxeZyTtNsgqQf8zCTiVY&d=3D > >>>> DgMFaQ&c=3D96ZbZZcaMF4w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DSLjyswdn- > >>>> oZ_aev0pRxD3h6c4aKbEQZ3c_kL9_ccHGM&e=3D> > >>>>> that you referred to > >>>>> > >>>>> =E2=80=9CMaking STUN authentication OPTIONAL=E2=80=9D > >>>>> > >>>>> is ALREADY COMPENSATED for by =E2=80=9CIP address = authentication=E2=80=9D (the > >>>>> foundation of today=E2=80=99s IP telephony authentication): > >>>>> > >>>>> =E2=80=9CA TURN server in such cases must be configured to only = process STUN > >>>>> > >>>>> requests from the trusted local network or subscribers of the = access > >>>>> > >>>>> network. Operational measures must be taken in order protect = the > >>>>> > >>>>> TURN server; some of these measures include, but not limited = to, > >>>>> > >>>>> access control by means of access-lists, firewalls, = subscriber quota > >>>>> > >>>>> limits, ingress filtering etc.=E2=80=9D > >>>>> > >>>>> where =E2=80=9Dfirewalls=E2=80=9D specifically applies to TURN = servers that local or > >>>>> access network providers allow only their own users to access. > >>>>> > >>>>> > >>>>> > >>>>> And Author=E2=80=99s: =E2=80=9CPlease refer > >>>>> = https://tools.ietf.org/html/draft-ietf-tram-turn-server-discovery- > >> 10#section- > >>>> 9 > >>>>> >>>> 3A__tools.ietf.org_html_draft-2Dietf-2Dtram-2Dturn-2Dserver- > >> 2Ddiscovery- > >>>> 2D10-23section-2D9&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4jpN6LZg&r=3DbwZ- > >>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3Db0fJ1ANqhE8C2BrlnGY3iW > >>>> CwVEr2OhYyFlE__oOHtSE&e=3D>for > >>>>> more details.=E2=80=9D > >>>>> > >>>>> already (since version -7 I think) in detail discusses the = (D)TLS > >>>>> implications in this context (that you are redoing). > >>>>> > >>>>> > >>>>> > >>>>> Please, again, let us stay with the consensus since version -7 = of this > >>>>> draft: No (D)TLS mandate. > >>>>> > >>>>> > >>>>> > >>>>> Thanks, > >>>>> > >>>>> Karl > >>>>> > >>>>> > >>>>> > >>>>> *Fr=C3=A5n:*Tirumaleswar Reddy (tireddy) = [mailto:tireddy@cisco.com] > >>>>> *Skickat:* den 4 december 2016 08:33 > >>>>> *Till:* Pal Martinsen (palmarti); Karl Stahl; tram mailing list > >>>>> *Kopia:* Brandon Williams; Prashanth Patil (praspati); > >>>>> tram-chairs@ietf.org ; Dan Wing; = Spencer > >>>>> Dawkins at IETF > >>>>> *=C3=84mne:* RE: [tram] draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> Prashanth has already summarized the changes done to draft = during > ISEG > >>>>> review in > >>>>> > >> = https://mailarchive.ietf.org/arch/msg/tram/3svO9djFxeZyTtNsgqQf8zCTiVY > >>>>> >>>> > >> > = 3A__mailarchive.ietf.org_arch_msg_tram_3svO9djFxeZyTtNsgqQf8zCTiVY&d=3D > >>>> DgMFaQ&c=3D96ZbZZcaMF4w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DSLjyswdn- > >>>> oZ_aev0pRxD3h6c4aKbEQZ3c_kL9_ccHGM&e=3D> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> Karl=E2=80=99s comment is to not mandate (D)TLS, and we = don=E2=80=99t agree with him. > >>>>> > >>>>> > >>>>> > >>>>> Request you, WG members, WG chairs and AD to share their = thoughts > on > >>>>> mandating the use of (D)TLS when STUN authentication is not used = to > >>>>> handle the threats discussed in RFC5766. > >>>>> > >>>>> > >>>>> > >>>>> -Tiru > >>>>> > >>>>> > >>>>> > >>>>> *From:*Pal Martinsen (palmarti) > >>>>> *Sent:* Friday, December 2, 2016 11:27 PM > >>>>> *To:* Karl Stahl >; > >>>>> tram mailing list > > >>>>> *Cc:* Tirumaleswar Reddy (tireddy) >>>>> >; Brandon Williams > >>>>> >> >; > >>>>> Prashanth Patil (praspati) >>>>> >; tram-chairs@ietf.org > >>>>> ; Dan Wing >>>>> >; Spencer Dawkins at IETF > >>>>> >>>> > > >>>>> *Subject:* Re: [tram] draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> Hi Karl (and tramsters), > >>>>> > >>>>> > >>>>> > >>>>> I am sympathetic to your arguments but they might have been lost > >>>>> somewhere in the email thread (A mix of quoting, repeating and = inline > >>>>> commenting have at least made my email client somewhat = confused.) > >>>>> > >>>>> > >>>>> > >>>>> The best thing you can do at this moment is to provide text. I = suggest > >>>>> you write up a draft as a counter proposal and submit it. In = that way > >>>>> the WG members can read through and comment. > >>>>> > >>>>> > >>>>> > >>>>> I encourage the WG chairs to give Karl enough time to write this = up, > >>>>> before progressing the other draft. > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> .-. > >>>>> > >>>>> P=C3=A5l-Erik > >>>>> > >>>>> > >>>>> > >>>>> On 2 Dec 2016, at 09:38, Karl Stahl >>>>> > wrote: > >>>>> > >>>>> > >>>>> > >>>>> Hi Tiru, > >>>>> > >>>>> > >>>>> > >>>>> I am trying to make the point that there is no option for = this > >>>>> draft, supposed to fulfill: > >>>>> > >>>>> *[tram] Milestone 3: TURN server auto-discovery mechanism = for > >>>>> enterprise and ISPs* > >>>>> > >>>>> to result in: =E2=80=9CWe forbid usage of such (yellow) = network provided > >>>>> TURN servers (use gray or grayish TURN servers = instead)=E2=80=9D, which is > >>>>> the consequence of mandating (D)TLS. > >>>>> > >>>>> > >>>>> > >>>>> Simply leave the consensus since version -7 of this draft by > >>>>> removing the (D)TLS mandating for TURN servers provided by = the > >>>>> local or access network thrown-in during the discuss. > >>>>> > >>>>> > >>>>> > >>>>> /Karl > >>>>> > >>>>> > >>>>> > >>>>> PS: I believe the attack discussion below is already done, = and that > >>>>> you are wrong in thinking that authentication which protects = against > >>>>> spoof attacks can be exchanged for encryption, and that any = of these > >>>>> things protects against DDOS attacks . These security things = address > >>>>> different things and are not interchangeable, nor are they = universal > >>>>> means against attacks of various kinds. > >>>>> > >>>>> > >>>>> > >>>>> And the outcome of any such discussion doesn=E2=80=99t = change the above. > >>>>> > >>>>> > >>>>> > >>>>> Please note (sorry to repeat) that for the purpose of = getting a > >>>>> better path for real-time traffic than through the default = gateway > >>>>> path, we cannot expect to also get a higher security or = trust level, > >>>>> nor to resolve every problem in the world. > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> *Fr=C3=A5n:* Tirumaleswar Reddy (tireddy) = [mailto:tireddy@cisco.com] > >>>>> *Skickat:* den 28 november 2016 10:53 > >>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil > >>>>> (praspati); tram@ietf.org > >>>>> *Kopia:* tram-chairs@ietf.org ; = 'Dan > >>>>> Wing'; 'Spencer Dawkins at IETF' > >>>>> *=C3=84mne:* RE: [tram] = draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> Hi Karl, > >>>>> > >>>>> > >>>>> > >>>>> Yes, I am discussing TURN servers provided by local or = access > >>>>> networks, referring to inside attacks launched by attackers = inside > >>>>> the local or access network. > >>>>> > >>>>> a)An inside attacker sends faked permissions to the TURN = server to > >>>>> launch attack (DOS or DDOS) on the victim (TURN client). > >>>>> > >>>>> b)An inside attacker sends spoofed TURN requests to the TURN = server > >>>>> to close allocations. > >>>>> > >>>>> > >>>>> > >>>>> Both above attacks can be prevented by using opportunistic > >>>>> encryption with (D)TLS. > >>>>> > >>>>> > >>>>> > >>>>> -Tiru > >>>>> > >>>>> > >>>>> > >>>>> *From:* tram [mailto:tram-bounces@ietf.org] *On Behalf Of = *Karl > Stahl > >>>>> *Sent:* Monday, November 28, 2016 2:49 PM > >>>>> *To:* Tirumaleswar Reddy (tireddy) >>>>> >; 'Brandon Williams' > >>>>> >>>> >; > >>>>> Prashanth Patil (praspati) >>>>> >; tram@ietf.org > > >>>>> *Cc:* tram-chairs@ietf.org ; = 'Dan Wing' > >>>>> >; 'Spencer Dawkins > at > >>>>> IETF' >>>>> > > >>>>> *Subject:* Re: [tram] draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> Hi Tiru, > >>>>> > >>>>> > >>>>> > >>>>> Now I don=E2=80=99t know where you are again. > >>>>> > >>>>> > >>>>> > >>>>> Are you discussing TURN servers provided by the local or = access > >>>>> network (the yellow TURN servers), that are released from > >>>>> authentication (no dispute there), but for which (D)TLS = mandate was > >>>>> thrown in-during the discuss (making them gray)? That is the > >>>>> showstopper that must go away. > >>>>> > >>>>> > >>>>> > >>>>> Some comments below. Hope we agree the below does not = relate to > >> the > >>>>> yellow TURN server. > >>>>> > >>>>> > >>>>> > >>>>> /Karl > >>>>> > >>>>> > >>>>> > >>>>> *Fr=C3=A5n:* Tirumaleswar Reddy (tireddy) = [mailto:tireddy@cisco.com] > >>>>> *Skickat:* den 28 november 2016 04:02 > >>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil > >>>>> (praspati); tram@ietf.org > >>>>> *Kopia:* tram-chairs@ietf.org ; = 'Dan > >>>>> Wing'; 'Spencer Dawkins at IETF' > >>>>> *=C3=84mne:* RE: [tram] = draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> Hi Karl, > >>>>> > >>>>> > >>>>> > >>>>> No, I don=E2=80=99t agree that (D)TLS is not mandatory. = Opportunistic > >>>>> encryption is not new. It=E2=80=99s discussed in RFC7435, = and used in TCP > >>>>> increased security (TCPINC WG) and DNS privacy exchange = (DPRIVE > >> WG). > >>>>> > >>>>> > >>>>> > >>>>> How do you propose to handle the following passive attacks = without > >>>>> (D)TLS or STUN authentication ? > >>>>> > >>>>> > >>>>> > >>>>> a) https://tools.ietf.org/html/rfc5766#section-17.2.1 > >>>>> >>>> 3A__tools.ietf.org_html_rfc5766-23section- > >>>> 2D17.2.1&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4jpN6LZg&r=3DbwZ- > >>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DyTTYKgor2_ajHe7KP_4Bznl > >>>> G1EamuIy_K7ak0U40RbM&e=3D>, > >>>>> where attacker sends faked permissions to the TURN server to = launch > >>>>> attack (DOS or DDOS) on the victim (TURN client). > >>>>> > >>>>> > Since the _TURN server sits outside_ the firewall, at = attacker outside > >> the > >>>>> firewall can now send a > >>>>> > >>>>> --- A TURN server provided by local or access network, shall = only be > >>>>> accessible by users inside the firewall. > >>>>> > >>>>> > >>>>> > >>>>> b) https://tools.ietf.org/html/rfc5766#section-17.3.3 > >>>>> >>>> 3A__tools.ietf.org_html_rfc5766-23section- > >>>> 2D17.3.3&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4jpN6LZg&r=3DbwZ- > >>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DeH- > >>>> u5a6yq0GxTqHFJMTssCJefcXLrMGLQdz-7MK_l7c&e=3D>, > >>>>> attacker sends spoofed TURN requests to the TURN server to = close > >>>>> allocations. > >>>>> > >>>>> --- I don=E2=80=99t think (D)TLS helps if you can spoof and = have such > >>>>> attackers inside your network. (that paragraph says: TURN = prevents > >>>>> this by requiring that the credentials used=E2=80=9D) = meaning authentication > >>>>> (not certificate checking, nor encryption). > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> -Tiru > >>>>> > >>>>> > >>>>> > >>>>> *From:* tram [mailto:tram-bounces@ietf.org] *On Behalf Of = *Karl > Stahl > >>>>> *Sent:* Monday, November 28, 2016 1:39 AM > >>>>> *To:* Tirumaleswar Reddy (tireddy) >>>>> >; 'Brandon Williams' > >>>>> >>>> >; > >>>>> Prashanth Patil (praspati) >>>>> >; tram@ietf.org > > >>>>> *Cc:* tram-chairs@ietf.org ; = 'Dan Wing' > >>>>> >; 'Spencer Dawkins > at > >>>>> IETF' >>>>> > > >>>>> *Subject:* Re: [tram] draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> Hi Tiru, > >>>>> > >>>>> > >>>>> > >>>>> So we agree that the (D)TLS mandate thrown-in during the = discuss > >>>>> (making yellow TURN servers gray) shall go away and we are = back to > >>>>> what was consensus since version -7 of the draft. I think = the > >>>>> attacks you are discussing now have been listed already and = for TURN > >>>>> servers in a local or access network (no change since = version -7), > >>>>> we should not expect a higher security or trust level when = sending > >>>>> our real-time traffic through another path than the through = default > >>>>> gateway, both paths are provided by the same network = provider. > >>>>> > >>>>> * * > >>>>> > >>>>> If =E2=80=9Cprotects the client from various attacks = discussed in previous > >>>>> mails=E2=80=9D related to discovery of TURN servers, really = is possible by > >>>>> introducing something (why reopen that now?), we have to be = careful > >>>>> not to make yellow TURN servers grayish, which I am afraid = self > >>>>> signed certificates might do, and further, does this belong = in a > >>>>> discovery draft, risking to pick a fight with the WebRTC = browser > >>>>> makers supposed to use this specification. We know they = don=E2=80=99t fancy > >>>>> self signed certificates=E2=80=A6 > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> Isn=E2=80=99t it specifications for some specific = usage/application (like > >>>>> the return draft for WebRTC browsers) that should consider = such > >>>>> things (not this draft), without any recommendation from = this > >>>>> specification? > >>>>> > >>>>> > >>>>> > >>>>> /Karl > >>>>> > >>>>> > >>>>> > >>>>> *Fr=C3=A5n:* Tirumaleswar Reddy (tireddy) = [mailto:tireddy@cisco.com] > >>>>> *Skickat:* den 23 november 2016 04:15 > >>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil > >>>>> (praspati); tram@ietf.org > >>>>> *Kopia:* tram-chairs@ietf.org ; = 'Dan > >>>>> Wing'; 'Spencer Dawkins at IETF' > >>>>> *=C3=84mne:* RE: [tram] = draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> I am not suggesting that authentication is mandatory for = TURN > >>>>> servers provided by local or access networks using (D)TLS = but use of > >>>>> (D)TLS [Karl: =E2=80=9Cthese become gray not yellow=E2=80=9D = or are you suggesting > >>>>> certificated signed by the network provider] > >>>>> > >>>>> > >>>>> > >>>>> [TR] No, they are yellow and not grey; clients will use = (D)TLS but > >>>>> do not validate the TURN server certificate (referred to as > >>>>> Opportunistic security in the draft). > >>>>> > >>>>> > >>>>> > >>>>> [Karl: Seems like you are suggesting self signed = certificates to > >>>>> just get the encryption (again =E2=80=93 also discussed)] > >>>>> > >>>>> > >>>>> > >>>>> [TR] Yes, that=E2=80=99s one possible option to mandate = (D)TLS. Client > >>>>> cannot validate the TURN server certificate but use = encryption-only > >>>>> (D)TLS and protects the client from various attacks = discussed in > >>>>> previous mails. > >>>>> > >>>>> > >>>>> > >>>>> -Tiru > >>>>> > >>>>> > >>>>> > >>>>> *From:* Karl Stahl [mailto:karl.stahl@ingate.com] > >>>>> *Sent:* Tuesday, November 22, 2016 11:12 PM > >>>>> *To:* Tirumaleswar Reddy (tireddy) >>>>> >; 'Brandon Williams' > >>>>> >>>> >; > >>>>> Prashanth Patil (praspati) >>>>> >; tram@ietf.org > > >>>>> *Cc:* tram-chairs@ietf.org ; = 'Dan Wing' > >>>>> >; 'Spencer Dawkins > at > >>>>> IETF' >>>>> > > >>>>> *Subject:* SV: [tram] draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> Hi Tiru, > >>>>> > >>>>> > >>>>> > >>>>> Please understand that in this context: > >>>>> > >>>>> - Authentication is to only allow certain users to use the = TURN > >>>>> server resource > >>>>> > >>>>> - Certificate checking as when using (D)TLS is to assure the = user is > >>>>> using a trusted TURN server (and further is sets up an = encrypted > >>>>> channel). > >>>>> > >>>>> > >>>>> > >>>>> These things are not interchangeable or do the same things = or > >>>>> achieves the same, which has been discussed over and over = again in > >>>>> this draft already. > >>>>> > >>>>> > >>>>> > >>>>> Let it rest with that we cannot/should not expect a higher = trust or > >>>>> security level when sending our real-time traffic through = the TURN > >>>>> server path, than trough the default gateway path. You = simply have > >>>>> to trust the access from the network provider you select to = connect > >>>>> to, or refrain from using it. > >>>>> > >>>>> > >>>>> > >>>>> Please also understand that =E2=80=9Cthe gray TURN = servers=E2=80=9D are provided by > >>>>> others than the local or access network, and you chose to = trust them > >>>>> with your real-time traffic based on checking their = certificate (Who > >>>>> configures which to allow into the WebRTC browser?). > >>>>> > >>>>> > >>>>> > >>>>> In a specification which main purpose is to auto discover = TURN > >>>>> servers provided by the local or access network = (=E2=80=9Cthe yellow ones=E2=80=9D), > >>>>> you CANNOT LOGICALLY end up with saying you MUST/SHOULD or > are > >>>>> RECOMMENDED to use =E2=80=9Cthe gray ones=E2=80=9D instead, = provided by some > >>>>> authority or Brandon maybe (which are meant for other = purposes). > >>>>> Then you have not delivered the specification we need =3D = The > >> showstopper. > >>>>> > >>>>> > >>>>> > >>>>> /Karl > >>>>> > >>>>> > >>>>> > >>>>> PS: Some comments below. > >>>>> > >>>>> > >>>>> > >>>>> *Fr=C3=A5n:* Tirumaleswar Reddy (tireddy) = [mailto:tireddy@cisco.com] > >>>>> *Skickat:* den 22 november 2016 04:31 > >>>>> *Till:* Karl Stahl; 'Brandon Williams'; Prashanth Patil > >>>>> (praspati); tram@ietf.org > >>>>> *Kopia:* tram-chairs@ietf.org ; = 'Dan > >>>>> Wing'; 'Spencer Dawkins at IETF' > >>>>> *=C3=84mne:* RE: [tram] = draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> Hi Karl, > >>>>> > >>>>> > >>>>> > >>>>> I am not suggesting that authentication is mandatory for = TURN > >>>>> servers provided by local or access networks using (D)TLS = but use of > >>>>> (D)TLS [Karl: =E2=80=9Cthese become gray not yellow=E2=80=9D = or are you suggesting > >>>>> certificated signed by the network provider] without = authenticating > >>>>> the TURN server is mandatory to avoid various attacks listed = in > >>>>> previous mails. > >>>>> > >>>>> > >>>>> > >>>>> In short, the TURN servers provided by local or access = networks must > >>>>> use (D)TLS but it=E2=80=99s not mandatory for these TURN = servers to get > >>>>> certificates from CA or any explicit configuration is = required on > >>>>> the client to trust the TURN server. [Karl: Seems like you = are > >>>>> suggesting self signed certificates to just get the = encryption > >>>>> (again =E2=80=93 also discussed)] > >>>>> > >>>>> > >>>>> > >>>>> -Tiru > >>>>> > >>>>> > >>>>> > >>>>> *From:* Karl Stahl [mailto:karl.stahl@ingate.com] > >>>>> *Sent:* Monday, November 21, 2016 2:10 AM > >>>>> *To:* Tirumaleswar Reddy (tireddy) >>>>> >; 'Brandon Williams' > >>>>> >>>> >; > >>>>> Prashanth Patil (praspati) >>>>> >; tram@ietf.org > > >>>>> *Cc:* tram-chairs@ietf.org ; = 'Dan Wing' > >>>>> >; 'Spencer Dawkins > at > >>>>> IETF' >>>>> > > >>>>> *Subject:* SV: [tram] draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> Hi Tiru, > >>>>> > >>>>> > >>>>> > >>>>> Trying to clarify as you request: I have lost track of in = which > >>>>> context you are when you are "discussing various attacks" = and what > >>>>> you mean with the ?? I marked below. > >>>>> > >>>>> > >>>>> > >>>>> My concern was whether this may again lead to that WE > >>>>> HAVE *_NO_* TURN SERVERS in the yellow area below resulting = from > >> the > >>>>> (D)TLS mandating that was thrown-in into version -10 during = the > >>>>> discuss (=3Dthe showstopping), since TURN servers with > >>>>> certificates are NOT provided by the local or access network = (those > >>>>> are provided by some "trust anchor store [RFC6024] allows a = TURN > >>>>> client ..." or by "Certification authorities that issue TURN = server > >>>>> certificates" etc..) > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> So, just let me rest with that your discussion does not take = away > >>>>> the allowance to use TURN servers provided by the local or = access > >>>>> network without authentication that was re-introduced in = version -7 > >>>>> of the draft (after long discussions, including with you = Tiru). > >>>>> Remember, _those yellow TURN servers were the requirement of = this > >>>>> draft to auto discover_ so they can be used by the WebRTC = browsers > =E2=80=93 > >>>>> Usage cannot be forbidden (or un-recommended as Brandon > suggests, > >>>>> although Brandon is agreeing to that the (D)TLS mandate must = vanish > >>>>> for the yellow TURN servers). > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> FURTHER JUST TO REMIND AUTHORS of what is needed to be > addresses > >> in > >>>>> this draft; it is found in > >>>>> > >>>>> = https://www.ietf.org/mail-archive/web/tram/current/msg02216.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg02216.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DNtRZwrmn2K- > >>>> WUI_QN5k_yHlAN-uzhoQU8bs2yA_RBP8&e=3D> > >>>>> > >>>>> and the contradiction in section 7.2 as said in > >>>>> > >>>>> = https://www.ietf.org/mail-archive/web/tram/current/msg02226.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg02226.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DEtiuiVt5Mnjbw9WsDtmjiu2l > >>>> -dv1RoHVpdAlTXtgZIQ&e=3D> > >>>>> > >>>>> while this discussion with Author Tiru and >=E2=80=9CI don't = run a local > >>>>> network or an access network and would not expect to deploy = relays > >>>>> meant to function in that mode=E2=80=9C Brandon*, has been = on more or less > >>>>> deviated subjects, or repeating what we already have been = through > >>>>> earlier (PS: Notice that Author Prashanth already = listed/discussed > >>>>> the attack stuff during the discuss. I feared you were = redoing that.) > >>>>> > >>>>> > >>>>> > >>>>> /Karl > >>>>> > >>>>> > >>>>> > >>>>> * https://www.ietf.org/mail- > archive/web/tram/current/msg02217.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg02217.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DglxP3ovYX7Cd4f12zIILJhbTc > >>>> EJ0ViqVgJQySQkJHYQ&e=3D> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> -----Ursprungligt meddelande----- > >>>>> Fr=C3=A5n: Tirumaleswar Reddy (tireddy) = [mailto:tireddy@cisco.com] > >>>>> Skickat: den 18 november 2016 04:00 > >>>>> Till: Karl Stahl; 'Brandon Williams'; Prashanth Patil > >>>>> (praspati); tram@ietf.org > >>>>> Kopia: tram-chairs@ietf.org ; = 'Dan > >>>>> Wing'; 'Spencer Dawkins at IETF' > >>>>> =C3=84mne: RE: [tram] draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > >>>>> > >>>>> Hi Karl, > >>>>> > >>>>> > >>>>> > >>>>> I don't understand your concerns, please clarify. The draft = mandates > >>>>> (D)TLS but does not mandate TURN server validation. > >>>>> > >>>>> We are discussing various attacks possbile for the WG to = decide if > >>>>> (D)TLS is a MUST or SHOULD. > >>>>> > >>>>> > >>>>> > >>>>> -Tiru > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > -----Original Message----- > >>>>> > >>>>> > From: Karl Stahl [mailto:karl.stahl@ingate.com] > >>>>> > >>>>> > Sent: Friday, November 18, 2016 2:11 AM > >>>>> > >>>>> > To: Tirumaleswar Reddy (tireddy) >>>> >; 'Brandon Williams' > >>>>> > >>>>> > >>>> >; > >>>>> Prashanth Patil (praspati) > >>>>> > >>>>> > >; > tram@ietf.org > >>>>> > >>>>> > >>>>> > Cc: tram-chairs@ietf.org ; = 'Dan Wing' > >>>>> >; 'Spencer Dawkins > >>>>> > >>>>> > at IETF' >>>> > > >>>>> > >>>>> > Subject: SV: [tram] draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > > >>>>> > >>>>> > Continuing the thread of this subject with the view that = it should be > >>>> about the > >>>>> > >>>>> > MUST/SHOULD/RECOMMEND discussion regarding D(TLS) for the > >> USAGE > >>>> of > >>>>> > >>>>> > an already discovered TURN server, which must be totally > >> independent > >>>> of the > >>>>> > >>>>> > method used for discovery. > >>>>> > >>>>> > > >>>>> > >>>>> > I can't say I understand where Brandon's/Tiru's discussion = fits in and > >>>> whether > >>>>> > >>>>> > are right things are said and are in the right context: > >>>>> > >>>>> > > >>>>> > >>>>> > ?? > > The draft mandates (D)TLS but does not mandate TURN > server > >>>>> > >>>>> > validation. > >>>>> > >>>>> > ?? (D)TLS helps avoid various attacks, like attacker = sending spoofed > >>>> TURN > >>>>> > >>>>> > messages ?? We should discuss all such possible attacks, = before we > >>>> decide to > >>>>> > >>>>> > go with MUST or SHOULD. > >>>>> > >>>>> > > >>>>> > >>>>> > Where are we know? > >>>>> > >>>>> > > >>>>> > >>>>> > Please, just keep the clearance from authentication as it = was from > >>>> version > >>>>> > >>>>> > -07 of the draft already, until the D(TLS) mandate was = thrown in > >> during > >>>> the > >>>>> > >>>>> > DISCUSS. > >>>>> > >>>>> > > >>>>> > >>>>> > Simply, logically: > >>>>> > >>>>> > > >> TURN servers *provided by* (and maintained by?) some = "trust > >>>> anchor > >>>>> > >>>>> > > >> store [RFC6024] allows a TURN client ..." or by = "Certification > >>>>> > >>>>> > > >> authorities that issue TURN server certificates" > >>>>> > >>>>> > are NOT under the clearance discussed, which is for "TURN = servers > >>>> *provided > >>>>> > >>>>> > by* the local network or by the access network". > >>>>> > >>>>> > so a SHOULD or RECOMMENDED of D(TLS) does not even belong > >> under > >>>> the > >>>>> > >>>>> > clearance discussed. > >>>>> > >>>>> > > >>>>> > >>>>> > > >>>>> > >>>>> > FURTHER, When I read: > >>>>> > >>>>> > > >>>>> > >>>>> > 7.2. Recursively Encapsulated TURN > >>>>> > >>>>> > > >>>>> > >>>>> > WebRTC endpoints SHOULD treat any TURN server = discovered > >> through > >>>> the > >>>>> > >>>>> > mechanisms described in this specification as an > enterprise/gateway > >>>>> > >>>>> > or access network server, in accordance with = Recursively > >> Encapsulated > >>>>> > >>>>> > TURN [I-D.ietf-rtcweb-return]. > >>>>> > >>>>> > > >>>>> > >>>>> > Isn't that "any" in total contradiction to the clearance = being > discussed? > >>>>> > >>>>> > I thought: "enterprise/gateway or access network" was the = same as > >> your > >>>>> > >>>>> > "local or access network" and that for OTHER discovered = TURN > servers > >>>>> > >>>>> > (outside the local or access network), it must be the = application that > >>>> instructs > >>>>> > >>>>> > the TURN client how to use. > >>>>> > >>>>> > > >>>>> > >>>>> > I suggest the 7.2 section is replaced with my: > >>>>> > >>>>> > > >>> (4) "Deployment Considerations for TURN Servers = Provided by > >> the > >>>>> > >>>>> > > >>> Local or > >>>>> > >>>>> > > >> Access Network" > >>>>> > >>>>> > > >>>>> > >>>>> > which mentions Recursively Encapsulated TURN = [I-D.ietf-rtcweb- > >> return]. > >>>>> > >>>>> > (you can spell it out like that) > >>>>> > >>>>> > > >>>>> > >>>>> > /Karl > >>>>> > >>>>> > > >>>>> > >>>>> > -----Ursprungligt meddelande----- > >>>>> > >>>>> > Fr=C3=A5n: Tirumaleswar Reddy (tireddy) = [mailto:tireddy@cisco.com] > >>>>> > >>>>> > Skickat: den 15 november 2016 05:01 > >>>>> > >>>>> > Till: Brandon Williams; Karl Stahl; Prashanth Patil = (praspati); > >>>> tram@ietf.org > >>>>> > >>>>> > Kopia: tram-chairs@ietf.org ; = 'Dan > >> Wing'; > >>>>> 'Spencer Dawkins at IETF' > >>>>> > >>>>> > =C3=84mne: RE: [tram] = draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > > >>>>> > >>>>> > Hi Brandon, > >>>>> > >>>>> > > >>>>> > >>>>> > I just listed one possible attack, there could be various = other attacks > >> like > >>>> the > >>>>> > >>>>> > one discussed in = https://tools.ietf.org/html/rfc5766#section-17.2.1 > >>>>> >>>> 3A__tools.ietf.org_html_rfc5766-23section- > >>>> 2D17.2.1&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4jpN6LZg&r=3DbwZ- > >>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DyTTYKgor2_ajHe7KP_4Bznl > >>>> G1EamuIy_K7ak0U40RbM&e=3D>, > >>>>> > >>>>> > where attacker sends faked permissions to the TURN server = to > launch > >>>> attack > >>>>> > >>>>> > (DOS or DDOS) on the victim (TURN client). > >>>>> > >>>>> > > >>>>> > >>>>> > We should discuss all such possible attacks, before we = decide to go > >> with > >>>>> > >>>>> > MUST or SHOULD. > >>>>> > >>>>> > > >>>>> > >>>>> > -Tiru > >>>>> > >>>>> > > >>>>> > >>>>> > > -----Original Message----- > >>>>> > >>>>> > > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of = Brandon > >>>>> > >>>>> > > Williams > >>>>> > >>>>> > > Sent: Monday, November 14, 2016 7:31 PM > >>>>> > >>>>> > > To: Tirumaleswar Reddy (tireddy) >>>> >; Karl Stahl > >>>>> > >>>>> > > >; > Prashanth > >>>>> Patil (praspati) > >>>>> > >>>>> > > >; > tram@ietf.org > >>>>> > >>>>> > >>>>> > > Cc: tram-chairs@ietf.org ; = 'Dan > Wing' > >>>>> >; 'Spencer > >>>>> > >>>>> > > Dawkins at IETF' >>>> > > >>>>> > >>>>> > > Subject: Re: [tram] = draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > > > >>>>> > >>>>> > > +1 on the rationale. It makes almost no difference how = you secure > >> the > >>>>> > >>>>> > > local or access network at the border, it's still = possible that there > >>>>> > >>>>> > > are > >>>>> > >>>>> > on-path > >>>>> > >>>>> > > adversaries, and using some type of authentication = (either (D)TLS > or > >>>>> > >>>>> > > STUN) helps to protect against them. > >>>>> > >>>>> > > > >>>>> > >>>>> > > I still agree with Karl on downgrading the MUST back to = SHOULD > or > >>>>> > >>>>> > > RECOMMENDED, since I think there's room for disagreement > about > >>>> how > >>>>> > >>>>> > > critical it is to mitigate against that attack. = Ease-of-use might win > >>>>> > >>>>> > > out > >>>>> > >>>>> > for some > >>>>> > >>>>> > > networks provided they have other protection mechanisms = at > either > >>>> the > >>>>> > >>>>> > > network or datalink layer. I don't think it should drop = below the > >>>>> > >>>>> > > recommendation level though, because most network will = not > have > >>>> such > >>>>> > >>>>> > > mechanisms in place. > >>>>> > >>>>> > > > >>>>> > >>>>> > > --Brandon > >>>>> > >>>>> > > > >>>>> > >>>>> > > On 11/14/2016 06:36 AM, Tirumaleswar Reddy (tireddy) = wrote: > >>>>> > >>>>> > > > There seems to be confusion why (D)TLS is mandated in = the > draft. > >>>>> > >>>>> > > > > >>>>> > >>>>> > > > The draft mandates (D)TLS but does not mandate TURN = server > >>>> validation. > >>>>> > >>>>> > In > >>>>> > >>>>> > > scenarios where the TURN client cannot validate the TURN = server, > >>>>> > >>>>> > > (D)TLS helps avoid various attacks, like attacker = sending spoofed > >> TURN > >>>>> > >>>>> > > messages > >>>>> > >>>>> > to > >>>>> > >>>>> > > TURN client and server. For example, when (D)TLS is not = used, > >> attacker > >>>>> > >>>>> > > can send spoofed TURN requests to the TURN server to = close > >>>> allocations. > >>>>> > >>>>> > > > > >>>>> > >>>>> > > > The above attack is possible when TURN servers are = provided by > >>>>> > >>>>> > > > either > >>>>> > >>>>> > local > >>>>> > >>>>> > > or access networks. > >>>>> > >>>>> > > > > >>>>> > >>>>> > > > -Tiru > >>>>> > >>>>> > > > > >>>>> > >>>>> > > >> -----Original Message----- > >>>>> > >>>>> > > >> From: tram [mailto:tram-bounces@ietf.org] On Behalf = Of Karl > >> Stahl > >>>>> > >>>>> > > >> Sent: Monday, November 14, 2016 1:38 PM > >>>>> > >>>>> > > >> To: 'Brandon Williams' >>>> >; > >>>>> Prashanth > >>>>> > >>>>> > > >> Patil > >>>>> > >>>>> > > >> (praspati) >; > >>>> tram@ietf.org > >>>>> > >>>>> > >>>>> > > >> Cc: tram-chairs@ietf.org = ; 'Dan > >> Wing' > >>>>> >; 'Spencer > >>>>> > >>>>> > > >> Dawkins at IETF' >>>>> >; Tirumaleswar > >>>>> > >>>>> > > >> Reddy > >>>>> > >>>>> > > >> (tireddy) > > >>>>> > >>>>> > > >> Subject: Re: [tram] = draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> Hi Brandon, > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> In this draft, you have been pushing for "validation" = of the > >>>>> > >>>>> > > >> discovered TURN server by using DTLS. The use case = for that > has > >> not > >>>>> > >>>>> > > >> been spelled out, but the use case of "TURN servers = *provided > >> by* > >>>>> > >>>>> > > >> the local network or by the access network", really = needs to be > >>>>> > >>>>> > > >> clarified in this draft. For this use case, clearance = from > >>>>> > >>>>> > > >> authentication and validation was made in version -07 = of the > >> draft > >>>>> > >>>>> > already. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> Regarding your comment below, it is not clear which = use case > >> YOU > >>>>> > >>>>> > > >> NOW are considering. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> Further, DISCOVERY and USAGE are not the same in this > >> discussion. > >>>>> > >>>>> > > >> You mix that, especially regarding the anycast = method. No one > is > >>>>> > >>>>> > > >> suggesting that the TURN server is USED when = addressed by > >>>> anycast. > >>>>> > >>>>> > > >> There is only ONE packet addressed by anycast and = sent to the > >>>>> > >>>>> > > >> STUN/TURN server and that is for DISCOVERING it. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> See further inline below. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> Thanks, > >>>>> > >>>>> > > >> Karl > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> -----Ursprungligt meddelande----- > >>>>> > >>>>> > > >> Fr=C3=A5n: Brandon Williams > [mailto:brandon.williams@akamai.com] > >>>>> > >>>>> > > >> Skickat: den 11 november 2016 19:08 > >>>>> > >>>>> > > >> Till: Karl Stahl; 'Prashanth Patil (praspati)'; = tram@ietf.org > >>>> > >>>>> > >>>>> > > >> Kopia: tram-chairs@ietf.org = ; > 'Dan > >>>> Wing'; > >>>>> 'Spencer Dawkins at IETF'; > >>>>> > >>>>> > > >> 'Tirumaleswar Reddy (tireddy)' > >>>>> > >>>>> > > >> =C3=84mne: Re: [tram] = draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> (1) I agree with Karl that the MUST for (D)TLS or = STUN auth > >> should > >>>>> > >>>>> > > >> revert to a SHOULD or a RECOMMENDED, given that = network > >>>> perimeter > >>>>> > >>>>> > > >> control is called out with MUST (note that there are = a few > "must" > >>>>> > >>>>> > > >> to "MUST" edits required in that text). Although I = would > disagree > >>>>> > >>>>> > > >> with an enterprise network admin who chooses not to = do one > of > >>>> those > >>>>> > >>>>> > > >> two things (see my comments about (3)/(4) below), I = think > there's > >>>>> > >>>>> > > >> room for difference of opinion there, so MUST is = unlikely to be > >>>>> > >>>>> > > >> complied > >>>>> > >>>>> > with > >>>>> > >>>>> > > anyway. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> [Karl] Good that you agree the MUST (thrown-in during > discuss) > >>>> must > >>>>> > >>>>> > > >> go away, but for the use case of "TURN servers = *provided by* > the > >>>>> > >>>>> > > >> local network or by the access network." there should = not even > >> be > >>>>> > >>>>> > SHOULD > >>>>> > >>>>> > > or RECOMMEND. > >>>>> > >>>>> > > >> Your are relating to TURN servers *provided by* (and > maintained > >>>>> > >>>>> > > >> by?) some "trust anchor store [RFC6024] allows a TURN = client > ..." > >>>>> > >>>>> > > >> or by "Certification authorities that issue TURN = server > >>>>> > >>>>> > > >> certificates" that *provide TURN servers with their = certificates > >>>>> > >>>>> > > >> in* that you expect to be discovered and where the = TURN > client > >>>> (the > >>>>> > >>>>> > > >> WebRTC browser) must be equipped to accept those > certificates. > >>>> That > >>>>> > >>>>> > > >> is NOT FOR "the TURN servers *provided by* the local = network > or > >>>> by > >>>>> > >>>>> > > >> the access network" that > >>>>> > >>>>> > is > >>>>> > >>>>> > > being discussed here. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> (2) I disagree with Karl about anycast. A server that = properly > >>>>> > >>>>> > > >> supports anycast [Karl] What is "a server that = properly supports > >>>>> > >>>>> > > >> anycast"? It is certainly NOT A [RFC5766] TURN server = that is > >>>>> > >>>>> > > >> supposed > >>>>> > >>>>> > to > >>>>> > >>>>> > > be discovered by this draft. > >>>>> > >>>>> > > >> Also notice that we are talking about one anycast = packet FOR > >>>>> > >>>>> > > >> DISCOVERY, NOT USAGE (relaying traffic) with anycast > adressing. > >>>>> > >>>>> > > >> (I asked that the confusing "supports anycast" = statement is > >> removed > >>>>> > >>>>> > > >> from the beginning of the draft.) > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> will indeed treat incoming requests differently = depending upon > >>>>> > >>>>> > > >> whether they arrive on the anycast address or the = unicast > >> address. > >>>>> > >>>>> > > >> I strongly disagree with the idea of using Try = Alternate on the > >>>>> > >>>>> > > >> binding request, because you want redirect for the = long-lived > >>>>> > >>>>> > > >> allocate request, not for the query-response binding = request. > >>>>> > >>>>> > > >> [Karl] With a TURN server provided by the local or = access > >> network, > >>>>> > >>>>> > > >> STUN is NOT USED for setting up any binding and no > subsequent > >>>>> > >>>>> > > >> traffic. The STUN binding response 300 Try Alternate = (statically > >>>>> > >>>>> > > >> configured) in my proposed text, is only an = indication used at > >>>>> > >>>>> > > >> DISCOVERY, that a network provided TURN server is = there and > >>>> should > >>>>> > >>>>> > > >> be used at its unicast address revealed in the > >>>>> > >>>>> > > >> 300 response. The long-lived TURN allocate IS USED = for the > >> traffic. > >>>>> > >>>>> > > >> The STUN server portion of the TURN server = paralleling the > >> default > >>>>> > >>>>> > > >> gateway router is never used for any binding. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> Part of my reason for this is that good (by my = definition) TURN > >>>>> > >>>>> > > >> server distribution is broader than is reasonable for = anycast > >>>>> > >>>>> > > >> address management, and determining a redirect = address to be > >>>>> > >>>>> > > >> delivered increases the cost of handling the STUN = bind request. > It > >>>>> > >>>>> > > >> is desirable for that cost to scale with the TURN = allocate load, > >>>>> > >>>>> > > >> not the STUN bind > >>>>> > >>>>> > load. > >>>>> > >>>>> > > >> [Karl] You just add a static route in you access = router for the > >>>>> > >>>>> > > >> anycast address to point to your TURN server! > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> I don't oppose supporting both in the spec if someone = wants to > >>>>> > >>>>> > > >> propose language for that, but it would add burden to = client > >>>>> > >>>>> > > >> implementations because they would be required to = support > >> both > >>>> even > >>>>> > >>>>> > > >> though the server could use either. On the other = hand, the > >>>>> > >>>>> > > >> currently defined method shouldn't require changes to = clients > at > >> all. > >>>>> > >>>>> > > >> [Karl] ?! But it does not find [RFC5766] TURN = servers... > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> (3)/(4) I disagree with Karl's assessment of the = deployment > >>>>> > >>>>> > > >> considerations, especially the conclusion that = anycast is the > >>>>> > >>>>> > > >> better path for local/access networks. > >>>>> > >>>>> > > >> [Karl] If you mean traffic paths (like I did), = "paths" are for > >>>>> > >>>>> > > >> USAGE and no one is suggesting anycast for that. > >>>>> > >>>>> > > >> Independent of how discovered (by anycast or any of = the DNS > >>>>> > >>>>> > > >> methods) ALL USAGE through paths is by unicast = addressing. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> It might be better for the server > >>>>> > >>>>> > > >> implementer, but not for the the client, because I = think it's > >>>>> > >>>>> > > >> particularly difficult for a client to determine = whether it's > >>>>> > >>>>> > > >> network > >>>>> > >>>>> > is > >>>>> > >>>>> > > "sealed". > >>>>> > >>>>> > > >> [Karl] No, not at all. Blocking STUN packets at the = default > gateway > >>>>> > >>>>> > > >> is the way to "network wise" seal the local network = (and only > >> allow > >>>>> > >>>>> > > >> the parallel TURN path)! That is easily detected by a = TURN > client. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> The client has to trust that the network is properly = sealed, > since > >>>>> > >>>>> > > >> it's difficult (at > >>>>> > >>>>> > > >> least) for the client to verify. Also, I think that = the DNS and > >>>>> > >>>>> > > >> DHCP methods are likely to be easier for enterprise = and access > >>>>> > >>>>> > > >> networks to implement, since they will have the = necessary > >> systems > >>>>> > >>>>> > > >> in place already. Even a home network gateway = appliance will > >>>>> > >>>>> > > >> already have both integrate DNS and integrate DHCP, = so I > suspect > >>>>> > >>>>> > > >> that a small local network will have an easier time = with these > than > >>>> you > >>>>> > >>>>> > suggest as well. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> [Karl] So you agree that for a TURN server in a local = network, > its > >>>>> > >>>>> > > >> address shall only be deployed in local DNS - I think = the draft > >>>>> > >>>>> > > >> should > >>>>> > >>>>> > say > >>>>> > >>>>> > > that also. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> Despite the fact that I disagree with the assessment, = I don't run > a > >>>>> > >>>>> > > >> local network or an access network and would not = expect to > >> deploy > >>>>> > >>>>> > > >> relays meant to function in that mode, so I will not = have strong > >>>>> > >>>>> > > >> objections to including that language if there is = broad support > >>>>> > >>>>> > > >> within > >>>>> > >>>>> > the > >>>>> > >>>>> > > WG for Karl's framing. > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> --Brandon > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> On 11/10/2016 05:48 PM, Karl Stahl wrote: > >>>>> > >>>>> > > >>> (1) The downgrade of the MUST level requirement for > >>>> authentication > >>>>> > >>>>> > > >>> defined > >>>>> > >>>>> > > >> in [RFC5766] was "rightly" (to use the term from = below) > >> introduced > >>>>> > >>>>> > > >> and made OPTIONAL for TURN servers provided by the = local or > >>>> access > >>>>> > >>>>> > > network. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> HOWEVER, Prashanth's: "I think we can mandate (D)TLS = *if* > >> STUN > >>>>> > >>>>> > > >> authentication or third-party authorization is not = used." > thrown- > >> in > >>>>> > >>>>> > > >> during the DISCUSS, must be deleted from the -10 = version of > this > >>>>> > >>>>> > > >> discovery since it BLOCKs the usage and deployment of > network > >>>>> > >>>>> > > >> provided TURN servers, which was the main purpose of = this > >>>> discovery > >>>>> > >>>>> > > >> draft. (Also, Authors's did not follow Ben = Campbell's: "I saw a > >>>>> > >>>>> > > >> comment on my DISCUSS email thread from Karl Stahl, = stating > >> that > >>>>> > >>>>> > > >> DTLS could not be mandated. Has that input been > >>>>> > >>>>> > > >> considered?") > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The thrown-in addition in version -10 (not shown in = full > below) > >>>>> > >>>>> > > >>> highlights > >>>>> > >>>>> > > >> this: > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> A TURN client MUST use (D)TLS ... in the absence = of STUN > >> long- > >>>> term > >>>>> > >>>>> > > >>> credential mechanism [RFC5389] or STUN Extension = for > Third- > >>>> Party > >>>>> > >>>>> > > >>> Authorization [RFC7635]. ... > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> o For certificate-based authentication, a = pre-populated > trust > >>>>> > >>>>> > anchor > >>>>> > >>>>> > > >>> store [RFC6024] allows a TURN client ... > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> o Certification authorities that issue TURN = server > certificates > >>>>> > >>>>> > > >>> ... > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> o For TURN servers that don't have a certificate = trust chain > >>>>> > >>>>> > (e.g., > >>>>> > >>>>> > > >>> because they are on a home network or a = corporate > >> network), > >>>> a > >>>>> > >>>>> > > >>> configured list of TURN servers can contain = the Subject > >>>>> > >>>>> > > >>> Public > >>>>> > >>>>> > Key > >>>>> > >>>>> > > >>> Info (SPKI) fingerprint of the TURN servers... = etc. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> What does the Authors have in mind - a regulated = network of > >>>> TURN > >>>>> > >>>>> > > >>> servers, > >>>>> > >>>>> > > >> when the purpose was for everyone to be able to use = good > >> WebRTC > >>>>> > >>>>> > > >> everywhere you can surf, including behind your home = Best Buy > >>>> bought > >>>>> > >>>>> > > >> WiFi router (which we can hope, some day, will = include a > default > >>>>> > >>>>> > > >> configured, ready to use, TURN server path = paralleling its > default > >>>>> > >>>>> > > >> gateway path (i.e. the NAT/firewall/access = router/default > >> gateway)? > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> This specification shall (at least) specify = discovery of network > >>>>> > >>>>> > > >>> provided > >>>>> > >>>>> > > >> TURN servers to allow real-time communication, in = situations > >> where > >>>>> > >>>>> > > >> it otherwise is not possible or bad: > >>>>> > >>>>> > > >>> - to meet the auto configuration of RFC 7478 (Web = Real-Time > >>>>> > >>>>> > > >>> Communication > >>>>> > >>>>> > > >> Use Cases and Requirements) 2.3.5.1. > >>>>> > >>>>> > > >>> - providing a discovery method suitable for > >>>>> > >>>>> > > >>> draft-ietf-rtcweb-return-01 > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The above has already been discussed many times in = this WG: > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg01319.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg01319.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DOsl0dTxisM85YhdJ__0idlm > >>>> EuHZDO94zeETh0KuWOUg&e=3D> > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg01742.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg01742.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DovkKpAFtadl_tW- > >>>> sGE9lKBidFiJ9DwAxrKyC-KgdC6w&e=3D> > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg02191.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg02191.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3D6qTmzqnEW5fWRDNt6JT9R > >>>> WtnkKecOUYG8OyPtBVY9Ek&e=3D> > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Just as credentials for authentication cannot be = expected to > be > >>>>> > >>>>> > > >>> available > >>>>> > >>>>> > > >> for this general usage, nor can we impose that = certificates > should > >>>>> > >>>>> > > >> be > >>>>> > >>>>> > used. > >>>>> > >>>>> > > >> For the network provided TURN server, we should = not/must > not > >>>> expect > >>>>> > >>>>> > > >> some higher level of trust or security when the = real-time media > >>>>> > >>>>> > > >> flows through the TURN server than when it goes = through the > >>>> default > >>>>> > >>>>> > gateway! > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The use of (D)TLS has been discussed intensively in = the -04 > >>>>> > >>>>> > > >>> version of the > >>>>> > >>>>> > > >> draft > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg01821.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg01821.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DJJm49cE6V10iisqHp3jNeSn > >>>> qE7wHzDtSrIhsQU8Sx3A&e=3D> > >>>>> > >>>>> > > >>> and was NOT mandated for the TURN server provided by = the > >> local > >>>> or > >>>>> > >>>>> > > >>> access > >>>>> > >>>>> > > >> network. It cannot be thrown-in now again! > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Any arguments against have been of type: We need = security > in > >>>>> > >>>>> > > >>> itself > >>>>> > >>>>> > > >>> - > >>>>> > >>>>> > > >> protect this and that - do every = authentication/validation in the > >>>>> > >>>>> > > >> book (whether needed or not) etc., which only leads = to > responses > >>>>> > >>>>> > > >> like I had to bring up during the discuss: > >>>>> > >>>>> > > >>> [Karl] Do you think we need to discover TURN servers = for the > >>>>> > >>>>> > > >>> pleasure of > >>>>> > >>>>> > > >> doing "security that deal directly with TURN = messages" in itself, > >>>>> > >>>>> > > >> and not for what they are supposed to do (relay = "application > >> data") > >>>>> > >>>>> > > >> and do you also think that is why a network provider = will > deploy > >>>>> > >>>>> > > >> such TURN > >>>>> > >>>>> > > server for his users? > >>>>> > >>>>> > > >> Please do not stop the purpose (by such phrases)! > >>>>> > >>>>> > > >>> (Also, encryption and protection against = man-in-the-middle > >>>>> > >>>>> > > >>> attacks, for > >>>>> > >>>>> > > >> the payload (real-time traffic) are for the endpoints = to do - like > >>>>> > >>>>> > > >> with WebRTC, mandating DTLS-SRTP media - it should = not be > >>>> expected > >>>>> > >>>>> > > >> to be done by a TURN server, especially when not = always used.) > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> (2) Also as pointed out during the DISCUSS > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg02144.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg02144.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3Dhti885FH0I_- > >>>> 3z7dolfYCAia4FX3i12sUCWsGesND6s&e=3D> > >>>>> > >>>>> > > >>> and two times earlier (during WG discussions, but = not > addressed > >>>> or > >>>>> > >>>>> > > >> responded to by the Authors): > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg02081.htm > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg02081.htm&d=3DDgMFaQ&c=3D96ZbZZcaMF4w > >>>> 0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3Df- > >>>> GzOTsPm86NUqzFXyjAgPz6x-BiA-buLhIFPt9QfEg&e=3D> l > >>>>> > >>>>> > > >>> and https://www.ietf.org/mail- > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> 2D&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4jpN6LZg&r=3DbwZ- > >> nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DSa3jwtA2TFtNAIAnfTem32v > >>>> W9jIfcBlsUwxIBelblDs&e=3D> > >>>>> > >>>>> > > archive/web/tram/current/msg01976.html > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The anycast method does not work with RFC5766 TURN > servers! > >>>> That > >>>>> > >>>>> > > >>> has not > >>>>> > >>>>> > > >> been addressed at all. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> A TURN server doesn't react one way (answering 300 = Try > >>>> Alternate) > >>>>> > >>>>> > > >>> when > >>>>> > >>>>> > > >> addressed by an anycast address and another way = (accepting > the > >>>>> > >>>>> > > >> Allocate > >>>>> > >>>>> > > >> request) when addressed by its unicast address, does = it? > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Author's (during the DISCUSS): "We intend to add the > following > >> to > >>>>> > >>>>> > > >>> explain > >>>>> > >>>>> > > >> server behavior a little better: > >>>>> > >>>>> > > >>> "A TURN anycast server performs checks 1 to 7 = discussed in > >>>> Section > >>>>> > >>>>> > > >>> 6.2 of > >>>>> > >>>>> > > >> RFC5766. If all checks pass, the TURN anycast server = MUST > >> respond > >>>>> > >>>>> > > >> with a > >>>>> > >>>>> > > >> 300 (Try Alternate) error as described in [RFC5766];" > >>>>> > >>>>> > > >>> does not help and I responded: [Karl] That must be = an update > of > >>>>> > >>>>> > RFC5766. > >>>>> > >>>>> > > >> Or does "TURN anycast server" imply that there ALSO = is a > "TURN > >>>>> > >>>>> > > >> unicast server" at the same interface accepting the = Allocate > >>>> request? > >>>>> > >>>>> > > >> What are these things? > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> I have proposed this modification of the anycast = method, > which > >> is > >>>>> > >>>>> > > >>> better > >>>>> > >>>>> > > >> (in several aspects) and doesn't need to update = RFC5766: > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> "When a client requires TURN services, it sends a = STUN > binding > >>>>> > >>>>> > > >>> request to > >>>>> > >>>>> > > >> the assigned anycast address. The STUN server > >>>>> > >>>>> > > >>> responds with a 300 (Try Alternate) error as = described in > >>>>> > >>>>> > > >>> [RFC5389]; The > >>>>> > >>>>> > > >> response contains a unicast address in the = ALTERNATE-SERVER > >>>>> > >>>>> > > >> attribute, which the client compares with the source = address of > >> the > >>>>> > >>>>> > > >> response and if the > >>>>> > >>>>> > > >>> addresses are the same, it is an indication to use = the TURN > >> server > >>>>> > >>>>> > > >>> at that > >>>>> > >>>>> > > >> address. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> For subsequent communication with the TURN server, = the > client > >>>> uses > >>>>> > >>>>> > > >>> that > >>>>> > >>>>> > > >> responding server's unicast address." > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The sentence in the -10 draft under "3 Discovery = Procedure": > >> "not > >>>>> > >>>>> > > >>> all TURN > >>>>> > >>>>> > > >> servers may support anycast" can then be removed. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> (3) I cannot see this -10 draft telling which = discovery method > >>>>> > >>>>> > > >>> that is fit > >>>>> > >>>>> > > >> for the TURN servers provided by the local or access = network > (the > >>>>> > >>>>> > > >> network provided TURN server). However, there are = confusing > >>>> client > >>>>> > >>>>> > > >> behavior recommendations, like the sentences in the = draft > under > >> "3 > >>>>> > >>>>> > > >> Discovery > >>>>> > >>>>> > > >> Procedure": "For best results, a client SHOULD = implement all > >>>>> > >>>>> > > >> discovery mechanisms described above." and under "1 > >>>> Introduction": > >>>>> > >>>>> > > >> "three discovery mechanisms, so as to maximize = opportunity > for > >>>>> > >>>>> > > >> discovery, based on the network in which the TURN = client finds > >>>> itself." > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> A network provided TURN server is only meant for the = users > on > >> the > >>>>> > >>>>> > > >>> specific > >>>>> > >>>>> > > >> network - others should not be able to use such TURN = server, > and > >> it > >>>>> > >>>>> > > >> would then be preferred that it is only advertized = and > discovered > >>>>> > >>>>> > > >> at that local network - which is badly described by = "maximize > >>>>> > >>>>> > > >> opportunity > >>>>> > >>>>> > for > >>>>> > >>>>> > > discovery". > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> If a DNS method would be used to discover the = network > >> provided > >>>>> > >>>>> > > >>> TURN > >>>>> > >>>>> > > >> server, its private address should only be configured = in private > >>>>> > >>>>> > > >> (local) DNS (we don't like to put our private IP = addresses in > >>>>> > >>>>> > > >> public DNS), but I see no such recommendation. = Further, the > DNS > >>>>> > >>>>> > > >> methods are complex and expensive to deploy and one = of > them > >>>> depends > >>>>> > >>>>> > > >> on DHCP that is not available on all access networks. = That > makes > >> (a > >>>>> > >>>>> > > >> working) anycast discovery method the clear choice = for a TURN > >>>>> > >>>>> > > >> server provided by > >>>>> > >>>>> > > the local or access network. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Network provided TURN servers paralleling a > >> NAT/firewall/access > >>>>> > >>>>> > > >> router/default gateway is a new concept that came up = during > >>>> WebRTC > >>>>> > >>>>> > > >> standardization work to deal with traversal and = quality > problems > >> of > >>>>> > >>>>> > > >> real-time traffic. However, this draft give little or = no guidance > >>>>> > >>>>> > > >> for deployment and I therefore suggest that a = separate section > is > >>>>> > >>>>> > > >> added, that spells out the deployment considerations = for TURN > >>>>> > >>>>> > > >> servers provided by the local or access network = (which now is > >>>>> > >>>>> > > >> missing, but I propose the following > >>>>> > >>>>> > > >> text): > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> (4) "Deployment Considerations for TURN Servers = Provided by > >> the > >>>>> > >>>>> > > >>> Local or > >>>>> > >>>>> > > >> Access Network" > >>>>> > >>>>> > > >>> (Suggested text for an additional section) > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The concept of paralleling a NAT/firewall/access- > router/default > >>>>> > >>>>> > > >>> gateway at > >>>>> > >>>>> > > >> the local or access network with a TURN server, to = deal with > >>>>> > >>>>> > > >> traversal and quality problems of real-time traffic, = is new and > >>>>> > >>>>> > > >> came up during the WebRTC standardization work. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Such network provided TURN servers, only accessible = by the > >> users > >>>>> > >>>>> > > >>> on the > >>>>> > >>>>> > > >> local or access network, must be automatically = discovered and > >> used, > >>>>> > >>>>> > > >> without specific configuration or having credentials = for > >>>>> > >>>>> > > >> authentication or certificates for validation, to be = useful for > e.g. > >>>>> > >>>>> > > >> a WebRTC browsers to allow quality media traffic = "everywhere > >> you > >>>>> > >>>>> > > >> can > >>>>> > >>>>> > > surf". > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Just as for the Internet access itself, the TURN = server is > offered > >>>>> > >>>>> > > >>> by the > >>>>> > >>>>> > > >> network provider and there is no change in the trust = or security > >>>>> > >>>>> > > >> level (which should not be expected) when real-time = traffic > flows > >>>>> > >>>>> > > >> through the TURN server path, than through the = default > gateway > >>>> path. > >>>>> > >>>>> > > >> (The purpose of the network provided turn server is = to allow > >>>>> > >>>>> > > >> traversal of real-time media traffic in environments = with > >>>>> > >>>>> > > >> restrictive NAT/firewalls closed for UDP traffic = and/or to allow > >>>>> > >>>>> > > >> better quality through the often data congested = router at the > >>>>> > >>>>> > > >> default > >>>>> > >>>>> > > >> gateway.) > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The discovery of the network provided TURN server = should > meet > >>>> the > >>>>> > >>>>> > > >>> auto > >>>>> > >>>>> > > >> configuration of RFC 7478 (Web Real-Time = Communication Use > >>>> Cases > >>>>> > >>>>> > > >> and > >>>>> > >>>>> > > >> Requirements) 2.3.5.1. and = draft-ietf-rtcweb-return-01 is > defining > >>>>> > >>>>> > > >> the TURN client behavior for WebRTC browsers. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> For quality reasons, a sealed network configuration = - i.e. the > >>>>> > >>>>> > > >>> media has > >>>>> > >>>>> > > >> to go through the TURN server, not through the = default > gateway > >> (by > >>>>> > >>>>> > > >> using STUN instead of TURN) - is the typical = intention when a > >> TURN > >>>>> > >>>>> > > >> server is deployed in the local or access network. = The sealed > >>>>> > >>>>> > > >> configuration can be enforced and signaled to the = TURN client > by > >>>>> > >>>>> > > >> the network provider blocking STUN packets at the = default > >> gateway. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> A network configuration enforcing sealed behavior, = has the > >> good > >>>>> > >>>>> > > >>> effect of > >>>>> > >>>>> > > >> allowing the TURN client (e.g. a WebRTC browser) in = itself to > have > >>>>> > >>>>> > > >> a > >>>>> > >>>>> > > >> non- sealed default configuration. = (ietf-rtcweb-return-01 > explains > >>>>> > >>>>> > > >> that a sealed default configuration in the browser = itself, would > >>>>> > >>>>> > > >> result in that media between local clients would have = to pass > the > >>>>> > >>>>> > > >> TURN server, which is not > >>>>> > >>>>> > > >> desirable.) > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The above assumes that the TURN client using a TURN = server > in > >>>> the > >>>>> > >>>>> > > >>> local or > >>>>> > >>>>> > > >> access network shall use unencrypted STUN/TURN (over = UDP > for > >>>> best > >>>>> > >>>>> > > >> quality) so the STUN cookie can be detected and = stopped in the > >>>>> > >>>>> > > >> default > >>>>> > >>>>> > > gateway. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> A TURN server included in the router at the default = gateway, > >> that > >>>>> > >>>>> > > >> intercepts and responds to an allocate request, = should be > >> treated > >>>> as > >>>>> > >>>>> > a > >>>>> > >>>>> > > >> discovered network provided sealed TURN server = configuration > >> by a > >>>>> > >>>>> > > >> TURN client (without having to review any 300 Try = Alternate > >>>>> > >>>>> > > >> response as outlined in anycast method description) = allowing > for > >>>>> > >>>>> > > >> tolerant and > >>>>> > >>>>> > secure > >>>>> > >>>>> > > deployment. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> A web application that wants to try the default = gateway path > >>>>> > >>>>> > > >>> instead of > >>>>> > >>>>> > > >> the TURN server path (in spite of a sealed network > configuration) > >>>>> > >>>>> > > >> can suggest encrypted (D)TLS STUN and TURN candidates = that > will > >>>> not > >>>>> > >>>>> > > >> be blocked by STUN cookie recognition at the default = gateway. > It > >> is > >>>>> > >>>>> > > >> then up to application's TURN client whether to try = the default > >>>>> > >>>>> > > >> gateway > >>>>> > >>>>> > path. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> A further advantage of detecting a sealed network > >> configuration, > >>>>> > >>>>> > > >>> is that a > >>>>> > >>>>> > > >> TURN client can select to *only in a sealed network > >> configuration* > >>>>> > >>>>> > > >> look for a TURN server by the anycast method for = discovery, > thus > >>>>> > >>>>> > > >> eliminating the leakage risk mentioned under 9.3. = Further, > there > >>>>> > >>>>> > > >> will be no risk that a far away TURN server will be = discovered > and > >>>>> > >>>>> > > >> used and there will be no need for the TTL limitation = suggested > >>>> under 9.3. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The anycast discovery method, combined with the = above > >>>>> > >>>>> > > >>> recommendations, > >>>>> > >>>>> > > >> allow for an easy and robust deployment of network = provided > >> TURN > >>>>> > >>>>> > > >> servers, fitting all types of local and access = networks. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The DNS based methods of this specification are more > complex > >>>> and > >>>>> > >>>>> > > >>> expensive > >>>>> > >>>>> > > >> to deploy and one of them depends on DHCP that is not > available > >> on > >>>>> > >>>>> > > >> all access networks. If any of the DNS based methods = is used to > >>>>> > >>>>> > > >> advertize and discover a TURN in the local or access = network, > its > >>>>> > >>>>> > > >> private addresses should only be configured in = private (local) > DNS > >>>>> > >>>>> > > >> and not be published publicly, which adds further to = the > >> complexity > >>>>> > >>>>> > > >> and > >>>>> > >>>>> > > cost of deployment. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> (5) Most (all?) of what is considered and summed up = under > (4) > >>>> (the > >>>>> > >>>>> > > >> suggested additional text), has been brought forward = on the > >> TRAM > >>>> WG > >>>>> > >>>>> > > >> list before, but not brought into the current -10 = draft, see: > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg00132.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg00132.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DI4tX_vQd- > >>>> ANV8cBjPGlHlFIVEUZ-3lYmVI6GbGtjxvc&e=3D> > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg00138.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg00138.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DJJWVyPhhTbhTpkcOmQRdB > >>>> 49hx2gOMNKOL7qMT3bq630&e=3D> > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg01721.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg01721.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DQnbJOsYAvuDWr9YyEGsxU > >>>> Ov8S1ha8ow9Do5VDOq6Gs0&e=3D> > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg01745.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg01745.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DduED3YRw_gPiLwPnjC7zgW > >>>> 0KbQXqQBjN-BJC4bzmt44&e=3D> > >>>>> > >>>>> > > >>> The links given under (1) and (2) above > >>>>> > >>>>> > > >>> https://www.ietf.org/mail- > >>>> archive/web/tram/current/msg02155.html > >>>>> >>>> 3A__www.ietf.org_mail- > >>>> > >> > 2Darchive_web_tram_current_msg02155.html&d=3DDgMFaQ&c=3D96ZbZZcaMF4 > >>>> w0F4jpN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >>>> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3D5fxjtRf2Ndt9R- > >>>> RDwWpgG0d7mctpUT2lUZrKGaThZ40&e=3D> > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> /Karl > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> -----Ursprungligt meddelande----- > >>>>> > >>>>> > > >>> Fr=C3=A5n: tram [mailto:tram-bounces@ietf.org] = F=C3=B6r Prashanth > Patil > >>>>> > >>>>> > > >>> (praspati) > >>>>> > >>>>> > > >>> Skickat: den 2 november 2016 22:18 > >>>>> > >>>>> > > >>> Till: tram@ietf.org > >>>>> > >>>>> > > >>> Kopia: tram-chairs@ietf.org = ; > Dan > >>>> Wing; > >>>>> Spencer Dawkins at IETF; > >>>>> > >>>>> > > >> Tirumaleswar Reddy (tireddy) > >>>>> > >>>>> > > >>> =C3=84mne: [tram] = draft-ietf-tram-turn-server-discovery > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> The TURN discovery draft originally suggested that = STUN > >>>>> > >>>>> > > >>> authentication be > >>>>> > >>>>> > > >> relaxed and made OPTIONAL for TURN servers provided = by the > >> local > >>>> or > >>>>> > >>>>> > > >> access network. The intention was to allow new/guest = users > (who > >>>> do > >>>>> > >>>>> > > >> not necessarily possess long term credentials for = STUN > >>>>> > >>>>> > > >> authentication) in the network to discover and use = TURN > services > >>>>> > >>>>> > offered > >>>>> > >>>>> > > by the network. > >>>>> > >>>>> > > >>> Ben Campbell raised an objection during IESG = evaluation that > we > >>>>> > >>>>> > > >>> clearly > >>>>> > >>>>> > > >> indicate that this is a downgrade of a MUST level = requirement > >>>>> > >>>>> > > >> defined in [RFC5766] and explain its consequences. It = was also > >>>>> > >>>>> > > >> rightly suggested that we mandate the use of (D)TLS = in the > >> absence > >>>>> > >>>>> > > >> of STUN authentication for protection against a = variety of > attacks; > >>>>> > >>>>> > > >> the draft now makes it a MUST that TURN servers use = (D)TLS in > >> the > >>>>> > >>>>> > > >> absence of STUN > >>>>> > >>>>> > > authentication. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> To put it simply, the draft mandates that TURN = servers in a > local > >>>>> > >>>>> > > >>> or > >>>>> > >>>>> > > >> access network do at least one of (D)TLS or STUN > authentication. > >> If > >>>>> > >>>>> > > >> you have an opinion about this change, please let the = working > >> group > >>>>> > >>>>> > > >> know on the mailing list before the end of IETF 97. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> See below for snippets of what changed. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Excerpt from Security Considerations of > >>>>> > >>>>> > > >> draft-ietf-tram-turn-server-discovery-09: > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> "Use of Session Traversal Utilities for NAT = (STUN) [RFC5389] > >>>>> > >>>>> > > >>> authentication is OPTIONAL for TURN servers = provided by > the > >>>> local > >>>>> > >>>>> > > >>> network or by the access network. A network = provided > TURN > >>>>> > >>>>> > > >>> server > >>>>> > >>>>> > > MAY > >>>>> > >>>>> > > >>> be configured to accept Allocation requests = without STUN > >>>>> > >>>>> > > >>> authentication, and a TURN client MAY be = configured to > >> accept > >>>>> > >>>>> > > >>> Allocation success responses without STUN = authentication > >> from > >>>> a > >>>>> > >>>>> > > >>> network provided TURN server. In order to = protect against > >> man- > >>>> in- > >>>>> > >>>>> > > >>> the-middle attacks when accepting a TURN = allocation > response > >>>>> > >>>>> > without > >>>>> > >>>>> > > >>> STUN authentication, it is RECOMMENDED that the = TURN > >> client > >>>> use > >>>>> > >>>>> > one > >>>>> > >>>>> > > >>> of the following techniques with (D)TLS to = validate the TURN > >>>>> > >>>>> > server" > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Updated text in Security Considerations of > >>>>> > >>>>> > > >> draft-ietf-tram-turn-server-discovery-10: > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> "Use of Session Traversal Utilities for NAT = (STUN) [RFC5389] > >>>>> > >>>>> > > >>> authentication is OPTIONAL for TURN servers = provided by > the > >>>> local > >>>>> > >>>>> > > >>> network or by the access network. A network = provided > TURN > >>>>> > >>>>> > > >>> server > >>>>> > >>>>> > > MAY > >>>>> > >>>>> > > >>> be configured to accept Allocation requests = without STUN > >>>>> > >>>>> > > >>> authentication, and a TURN client MAY be = configured to > >> accept > >>>>> > >>>>> > > >>> Allocation success responses without STUN = authentication > >> from > >>>> a > >>>>> > >>>>> > > >>> network provided TURN server. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Making STUN authentication OPTIONAL is a = downgrade of a > >>>> MUST > >>>>> > >>>>> > level > >>>>> > >>>>> > > >>> requirement defined in [RFC5766]. The downgrade = allows > >> TURN > >>>>> > >>>>> > servers > >>>>> > >>>>> > > >>> provided by local or access network to accept = Allocation > >> requests > >>>>> > >>>>> > > >>> from new and/or guest users in the network who do = not > >>>> necessarily > >>>>> > >>>>> > > >>> possess long term credentials for STUN = authentication. The > >>>>> > >>>>> > > >>> intention, in such deployments, being to provide = TURN > >> services > >>>>> > >>>>> > > >>> to > >>>>> > >>>>> > all > >>>>> > >>>>> > > >>> users in the local or access network. However, = this opens > up a > >>>>> > >>>>> > TURN > >>>>> > >>>>> > > >>> server to a variety of attacks described in = Section 17 of > >>>>> > >>>>> > [RFC5766]. > >>>>> > >>>>> > > >>> A TURN server in such cases must be configured to = only > >> process > >>>> STUN > >>>>> > >>>>> > > >>> requests from the trusted local network or = subscribers of > the > >>>>> > >>>>> > access > >>>>> > >>>>> > > >>> network. Operational measures must be taken in = order > >> protect > >>>> the > >>>>> > >>>>> > > >>> TURN server; some of these measures include, but = not > limited > >> to, > >>>>> > >>>>> > > >>> access control by means of access-lists, = firewalls, subscriber > >>>>> > >>>>> > quota > >>>>> > >>>>> > > >>> limits, ingress filtering etc. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> A TURN client MUST use (D)TLS in the absence of = STUN > long- > >>>> term > >>>>> > >>>>> > > >>> credential mechanism [RFC5389] or STUN Extension = for > Third- > >>>> Party > >>>>> > >>>>> > > >>> Authorization [RFC7635]." > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Please refer > >>>>> > >>>>> > > >> = https://tools.ietf.org/html/draft-ietf-tram-turn-server- > discovery- > >> 1 > >>>>> >>>> 3A__tools.ietf.org_html_draft-2Dietf-2Dtram-2Dturn-2Dserver- > >> 2Ddiscovery- > >>>> 2D1&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4jpN6LZg&r=3DbwZ- > >>>> nnRGWmcGKRIuadq6-NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3D--B- > >>>> kAp9De1f6HhRKLEtD1bVS33BpG2S5MYzWBQ_YDI&e=3D> > >>>>> > >>>>> > > >> 0# > >>>>> > >>>>> > > >> section > >>>>> > >>>>> > > >> -9 for more details. > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> Thanks, > >>>>> > >>>>> > > >>> Authors > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> _______________________________________________ > >>>>> > >>>>> > > >>> tram mailing list > >>>>> > >>>>> > > >>> tram@ietf.org > >>>>> > >>>>> > > >>> https://www.ietf.org/mailman/listinfo/tram > >>>>> >>>> > >> > 3A__www.ietf.org_mailman_listinfo_tram&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4j > >>>> pN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DahRn1ifxnOACrVFgxJ99086 > >>>> nBuC6-cz9H7GKY_0EV8s&e=3D> > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >>> _______________________________________________ > >>>>> > >>>>> > > >>> tram mailing list > >>>>> > >>>>> > > >>> tram@ietf.org > >>>>> > >>>>> > > >>> https://www.ietf.org/mailman/listinfo/tram > >>>>> >>>> > >> > 3A__www.ietf.org_mailman_listinfo_tram&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4j > >>>> pN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DahRn1ifxnOACrVFgxJ99086 > >>>> nBuC6-cz9H7GKY_0EV8s&e=3D> > >>>>> > >>>>> > > >>> > >>>>> > >>>>> > > >> > >>>>> > >>>>> > > >> _______________________________________________ > >>>>> > >>>>> > > >> tram mailing list > >>>>> > >>>>> > > >> tram@ietf.org > >>>>> > >>>>> > > >> https://www.ietf.org/mailman/listinfo/tram > >>>>> >>>> > >> > 3A__www.ietf.org_mailman_listinfo_tram&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4j > >>>> pN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DahRn1ifxnOACrVFgxJ99086 > >>>> nBuC6-cz9H7GKY_0EV8s&e=3D> > >>>>> > >>>>> > > > >>>>> > >>>>> > > _______________________________________________ > >>>>> > >>>>> > > tram mailing list > >>>>> > >>>>> > > tram@ietf.org > >>>>> > >>>>> > > https://www.ietf.org/mailman/listinfo/tram > >>>>> >>>> > >> > 3A__www.ietf.org_mailman_listinfo_tram&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4j > >>>> pN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DahRn1ifxnOACrVFgxJ99086 > >>>> nBuC6-cz9H7GKY_0EV8s&e=3D> > >>>>> > >>>>> _______________________________________________ > >>>>> tram mailing list > >>>>> tram@ietf.org > >>>>> https://www.ietf.org/mailman/listinfo/tram > >>>>> >>>> > >> > 3A__www.ietf.org_mailman_listinfo_tram&d=3DDgMFaQ&c=3D96ZbZZcaMF4w0F4j > >>>> pN6LZg&r=3DbwZ-nnRGWmcGKRIuadq6- > >> NSnsgwbBVUJa4mZfmEIBXg&m=3DLXaH- > >>>> > >> > MVQi2lVbE_s4ulx4hnhEomXhQK7xQEikzAupR8&s=3DahRn1ifxnOACrVFgxJ99086 > >>>> nBuC6-cz9H7GKY_0EV8s&e=3D> > >>>>> > >>>>> > >>>>> > >>>> > >>>> -- > >>>> Brandon Williams; Chief Architect > >>>> Cloud Networking; Akamai Technologies Inc. > >> > >> -- > >> Brandon Williams; Chief Architect > >> Cloud Networking; Akamai Technologies Inc. >=20 > -- > Brandon Williams; Chief Architect > Cloud Networking; Akamai Technologies Inc. From nobody Thu Jan 12 19:57:48 2017 Return-Path: X-Original-To: tram@ietf.org Delivered-To: tram@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DD9C129972; Thu, 12 Jan 2017 19:57:43 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.40.3 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148427986357.3020.7793783112924549744.idtracker@ietfa.amsl.com> Date: Thu, 12 Jan 2017 19:57:43 -0800 Archived-At: Cc: tram@ietf.org Subject: [tram] I-D Action: draft-ietf-tram-turn-server-discovery-12.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jan 2017 03:57:43 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TURN Revised and Modernized of the IETF. Title : TURN Server Auto Discovery Authors : Prashanth Patil Tirumaleswar Reddy Dan Wing Filename : draft-ietf-tram-turn-server-discovery-12.txt Pages : 16 Date : 2017-01-12 Abstract: Current Traversal Using Relays around NAT (TURN) server discovery mechanisms are relatively static and limited to explicit configuration. These are usually under the administrative control of the application or TURN service provider, and not the enterprise, ISP, or the network in which the client is located. Enterprises and ISPs wishing to provide their own TURN servers need auto discovery mechanisms that a TURN client could use with no or minimal configuration. This document describes three such mechanisms for TURN server discovery. This draft updates [RFC5766] to relax the requirement for mutual authentication in certain cases. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-turn-server-discovery/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-tram-turn-server-discovery-12 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tram-turn-server-discovery-12 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Jan 12 19:59:51 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 097331299AF for ; Thu, 12 Jan 2017 19:59:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.721 X-Spam-Level: X-Spam-Status: No, score=-17.721 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.199, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wxVBuhE27biy for ; Thu, 12 Jan 2017 19:59:46 -0800 (PST) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E8CD1299A9 for ; Thu, 12 Jan 2017 19:59:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2397; q=dns/txt; s=iport; t=1484279986; x=1485489586; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=tlX/vEMYrHILwNy/geuphGoZ1bIS8hEfvogfGP1r4Kc=; b=CxUi9lVhBBPSrhLYzmvGfjsAG8zsHIHrGz3Ml4SkW5QHZSW73WgbWPYv XAuzAZ4lhvh4kH3+HAf9nbJgShfmWUnpMBW+qn5YsNvTFsQn0Su+pBg4S IzKH5I7ZsGdk6/njM+vjRx2IIq2hkWMhkA+SFjUBBDch1od8t7GLGC5kf 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AUAQBhUHhY/5hdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgz8BAQEBAR9fgQkHjVGSFJUrgg0fDYV2AoIIPxQBAgEBAQEBAQF?= =?us-ascii?q?jHQuEaQEBAQQBATg0FwQCAQgRBAEBHwkHJwsUCQgCBBMIiHgOslaKDgEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAR2GRYRhgwmBGQ6FegWbLAGGW4pyggBRhD2JaJJjAR8?= =?us-ascii?q?4gUQVGCKGL3OGKYEwgQ0BAQE?= X-IronPort-AV: E=Sophos;i="5.33,220,1477958400"; d="scan'208";a="370248287" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 13 Jan 2017 03:59:35 +0000 Received: from XCH-RCD-020.cisco.com (xch-rcd-020.cisco.com [173.37.102.30]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id v0D3xZRr010792 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Fri, 13 Jan 2017 03:59:35 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-RCD-020.cisco.com (173.37.102.30) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 12 Jan 2017 21:59:35 -0600 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1210.000; Thu, 12 Jan 2017 21:59:35 -0600 From: "Tirumaleswar Reddy (tireddy)" To: "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-turn-server-discovery-12.txt Thread-Index: AQHSbVE745AQY+EJAkeNyRjXn1tSz6E1x/uw Date: Fri, 13 Jan 2017 03:59:35 +0000 Message-ID: References: <148427986357.3020.7793783112924549744.idtracker@ietfa.amsl.com> In-Reply-To: <148427986357.3020.7793783112924549744.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.86.163] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-turn-server-discovery-12.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jan 2017 03:59:48 -0000 This revision addresses comments from Brandon.=20 -Tiru > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Friday, January 13, 2017 9:28 AM > To: i-d-announce@ietf.org > Cc: tram@ietf.org > Subject: [tram] I-D Action: draft-ietf-tram-turn-server-discovery-12.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts direct= ories. > This draft is a work item of the TURN Revised and Modernized of the IETF. >=20 > Title : TURN Server Auto Discovery > Authors : Prashanth Patil > Tirumaleswar Reddy > Dan Wing > Filename : draft-ietf-tram-turn-server-discovery-12.txt > Pages : 16 > Date : 2017-01-12 >=20 > Abstract: > Current Traversal Using Relays around NAT (TURN) server discovery > mechanisms are relatively static and limited to explicit > configuration. These are usually under the administrative control of > the application or TURN service provider, and not the enterprise, > ISP, or the network in which the client is located. Enterprises and > ISPs wishing to provide their own TURN servers need auto discovery > mechanisms that a TURN client could use with no or minimal > configuration. This document describes three such mechanisms for > TURN server discovery. >=20 > This draft updates [RFC5766] to relax the requirement for mutual > authentication in certain cases. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-tram-turn-server-discovery/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-tram-turn-server-discovery-12 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-tram-turn-server-discovery= -12 >=20 >=20 > Please note that it may take a couple of minutes from the time of submiss= ion > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Sun Jan 15 19:29:52 2017 Return-Path: X-Original-To: tram@ietf.org Delivered-To: tram@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4900C12944B; Sun, 15 Jan 2017 19:29:51 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Meeting Session Request Tool\"" To: X-Test-IDTracker: no X-IETF-IDTracker: 6.40.3 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148453739126.3303.8312304364896748519.idtracker@ietfa.amsl.com> Date: Sun, 15 Jan 2017 19:29:51 -0800 Archived-At: Cc: sperreault@jive.com, spencerdawkins.ietf@gmail.com, tram@ietf.org, tram-chairs@ietf.org Subject: [tram] tram - New Meeting Session Request for IETF 98 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Jan 2017 03:29:51 -0000 A new meeting session request has just been submitted by Simon Perreault, a Chair of the tram working group. --------------------------------------------------------- Working Group Name: TURN Revised and Modernized Area Name: Transport Area Session Requester: Simon Perreault Number of Sessions: 1 Length of Session(s): 1.5 Hours Number of Attendees: 30 Conflicts to Avoid: First Priority: avtcore avtext rtcweb mmusic dispatch ice modern perc sipbrandy sipcore stir Second Priority: payload codec netvc Special Requests: --------------------------------------------------------- From nobody Wed Jan 18 03:45:34 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22D2012948A for ; Wed, 18 Jan 2017 03:45:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K_9v8NK9DCFG for ; Wed, 18 Jan 2017 03:45:30 -0800 (PST) Received: from linzer.ki.iif.hu (linzer.ki.iif.hu [IPv6:2001:738:0:600:216:3eff:fe02:b1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F58C12941E for ; Wed, 18 Jan 2017 03:45:30 -0800 (PST) Received: from cirkusz.lvs.iif.hu (cirkusz.lvs.iif.hu [193.225.14.182]) by linzer.ki.iif.hu (Postfix) with ESMTP id 956384060ED; Wed, 18 Jan 2017 12:45:28 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at cirkusz.lvs.iif.hu Received: from linzer.ki.iif.hu ([IPv6:::ffff:193.224.163.7]) by cirkusz.lvs.iif.hu (cirkusz.lvs.iif.hu [::ffff:193.225.14.72]) (amavisd-new, port 10024) with ESMTP id 2exKZNzO3mDO; Wed, 18 Jan 2017 12:45:27 +0100 (CET) Received: from [IPv6:2001:738:0:401:8476:a736:d2fd:5b66] (unknown [IPv6:2001:738:0:401:8476:a736:d2fd:5b66]) by linzer.ki.iif.hu (Postfix) with ESMTPSA id 493334060DF; Wed, 18 Jan 2017 12:45:25 +0100 (CET) From: =?UTF-8?B?TcOpc3rDoXJvcyBNaWjDoWx5?= To: Oleg Moskalenko , juberti@webrtc.org, deadbeef@webrtc.org, hcornflower@appear.in, tram@ietf.org Message-ID: Date: Wed, 18 Jan 2017 12:45:26 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="------------71C184EB71E5FC56585EC3E1" Archived-At: Subject: [tram] stun-origin status==? Is it dead? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jan 2017 11:45:33 -0000 This is a multi-part message in MIME format. --------------71C184EB71E5FC56585EC3E1 Content-Type: text/plain; charset=iso-8859-2 Content-Transfer-Encoding: 7bit Hi, I am planning to build a multi realm TURN service that would use multi realm feature in coturn. But I sadly realized that there was some for me not very clear IETF concerns and somehow writing draft-ietf-tram-stun-origin has been stopped.. I am wondering what is the WG position about this draft status and future? I need this multi domain to avoid server duplication: * I need to use multi realm to reuse TURN servers and separate user credential domains, to avoid TURN server duplication for every realm in every region. * If this origin way could not be fixed then then I don't see any way to make a multi realm TURN service. (coTURN name is based on this feature AFAIK.) * If we don't send any information from client side that could be use on coTURN side to identify user credential realm than coTRUN multidomain feature could not be used at all.. :( I am wondering if you know what was the main concern about in IESG/IETF tram? And if this is final or not? Could it be somehow work it out? Why is it a show stopper concern? Is it possible to make any workaround to make it possible to send any realm related info to to turn server ? I read the connected tram list mails and the ballot , but still not clear for me the main concern, and the actual status. (The hardest concern was I think Stephen Farrell concerns, but I feel it could be addressed.) Unfortunately I saw all WebRTC browsers stopped implementing it. * https://bugzilla.mozilla.org/show_bug.cgi?id=1123722 * https://bugs.chromium.org/p/webrtc/issues/detail?id=4091#c10 All in all I would like to know the reasons behind Justin statement: This feature is dead. We should plan to remove the code when convenient. I would like to turn it back if possible and find a way to make multi realm TURN work. Any comments would be highly appreciated! Thanks, Misi --------------71C184EB71E5FC56585EC3E1 Content-Type: text/html; charset=iso-8859-2 Content-Transfer-Encoding: 7bit

Hi,

I am planning to build a multi realm TURN service that would use multi realm feature in coturn.

But I sadly realized that there was some for me not very clear IETF concerns and somehow writing draft-ietf-tram-stun-origin has been stopped..

I am wondering what is the WG position about this draft status and future?

I need this multi domain to avoid server duplication:

  • I need to use multi realm to reuse TURN servers and separate user credential domains, to avoid TURN server duplication for every realm in every region.
  • If this origin way could not be fixed then then I don't see any way to make a multi realm TURN service.
    (coTURN name is based on this feature AFAIK.)
  • If we don't send any information from client side that could be use on coTURN side to identify user credential realm than coTRUN multidomain feature could not be used at all.. :(

I am wondering if you know what was the main concern about in IESG/IETF tram?

And if this is final or not? Could it be somehow work it out?

Why is it a show stopper concern?

Is it possible to make any workaround to make it possible to send any realm related info to to turn server ?

I read the connected tram list mails and the ballot, but still not clear for me the main concern, and the actual status.

(The hardest concern was I think Stephen Farrell concerns, but I feel it could be addressed.)

Unfortunately I saw all WebRTC browsers stopped implementing it.

All in all I would like to know the reasons behind Justin statement:

This feature is dead. We should plan to remove the code when convenient.
I would like to turn it back if possible and find a way to make multi realm TURN work.

Any comments would be highly appreciated!

Thanks,
Misi
--------------71C184EB71E5FC56585EC3E1-- From nobody Wed Jan 18 05:39:57 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD55D1296D3 for ; Wed, 18 Jan 2017 05:39:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ov-CMeJ15RX7 for ; Wed, 18 Jan 2017 05:39:55 -0800 (PST) Received: from mail-wm0-x22b.google.com (mail-wm0-x22b.google.com [IPv6:2a00:1450:400c:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7B811296D2 for ; Wed, 18 Jan 2017 05:39:54 -0800 (PST) Received: by mail-wm0-x22b.google.com with SMTP id r144so25535312wme.1 for ; Wed, 18 Jan 2017 05:39:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=YhRLh/f+hrmCX5wxKu/215IpBf7FU/NHYCLC33rGBDk=; b=HaEvxUIdken7nAnAuUkyUgM98Ry2I7X55ukHbIvNiA4eslmKqnp5Zzn2yiJ2D1MwLi B6HdUCb5W1YhCnIkM21WRKzlQDbKhQVX38QZWbs2rSMxpaVjP7tL7D1j7lKVoWUvxJ2B w4PZ/W2X/6DzN3jmytmRl8xbBoDhelUSgjsjTnM1vaNBuBWGEFKgINKglErHeO/4v6xx n0NahEigD1yrRDguKt6bd+p5JJS1V+5TjSAJ+nIVOVjZWoHUXBSprVRxXZz9GRM44/eN 465rO4F1fXk1vWkLckMt2jsuBATaMAYf47eucx1In2b3I7g9ZFepSDNcHRJMRNunqDdp R3fw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=YhRLh/f+hrmCX5wxKu/215IpBf7FU/NHYCLC33rGBDk=; b=r9jDdgr6s/H+FMfLWpzKLrgzCPZSnRhNvDyCbdQTDlNIJc3QzPRRpulXSOUmejuc2l 0Pgc2cFEMCB+gB6HtC1AIqMjdIzcIGcU5V2TQOIXrrM/15uEOH+U9Pmlu5zMsD2GGG+I 93WS3tl9f+kauD3AmeXP9xt9cixWhvWiojb2m0Xd6oSzz7v0z/sy058QzYzIGsuBpAPn NCClQoCtlBwDW/PkXdqhrWVMni62tep2Xn/oczT1ghdRq5npcDkhrR3c4E7abJHXgAK5 9gycB/NDBEAzTKXiuYtDQ3SpKQtUqlSlQbc43TawfSXFQuGDY9s0z+ObATDb3Rxs2Jcx VEyQ== X-Gm-Message-State: AIkVDXLLqZgBNdD9bSTAA+/JyfZtt61aYiF3aoxtvkvo+vAV6117aNxWTTsWtwVPWIAhin3soTjbzgGv0jt5wA== X-Received: by 10.28.11.135 with SMTP id 129mr15567815wml.111.1484746793091; Wed, 18 Jan 2017 05:39:53 -0800 (PST) MIME-Version: 1.0 Received: by 10.80.171.8 with HTTP; Wed, 18 Jan 2017 05:39:52 -0800 (PST) In-Reply-To: References: From: Alan Johnston Date: Wed, 18 Jan 2017 05:39:52 -0800 Message-ID: To: =?UTF-8?B?TcOpc3rDoXJvcyBNaWjDoWx5?= Content-Type: multipart/alternative; boundary=001a1144514e2f063305465e8d5d Archived-At: Cc: hcornflower@appear.in, deadbeef@webrtc.org, Oleg Moskalenko , juberti@webrtc.org, "tram@ietf.org" Subject: Re: [tram] stun-origin status==? Is it dead? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jan 2017 13:39:57 -0000 --001a1144514e2f063305465e8d5d Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Misi, Yes, it is dead. While the mechanism is convenient, it leaks too much meta-data so the working group abandoned the effort. - Alan - On Wed, Jan 18, 2017 at 3:45 AM, M=C3=A9sz=C3=A1ros Mih=C3=A1ly wrote: > Hi, > > I am planning to build a multi realm TURN service that would use multi > realm feature in coturn. > > But I sadly realized that there was some for me not very clear IETF > concerns and somehow writing draft-ietf-tram-stun-origin has been stopped= .. > > I am wondering what is the WG position about this draft status and future= ? > > I need this multi domain to avoid server duplication: > > - I need to use multi realm to reuse TURN servers and separate user > credential domains, to avoid TURN server duplication for every realm i= n > every region. > - If this origin way could not be fixed then then I don't see any way > to make a multi realm TURN service. > (coTURN name is based on this feature AFAIK.) > - If we don't send any information from client side that could be use > on coTURN side to identify user credential realm than coTRUN multidoma= in > feature could not be used at all.. :( > > I am wondering if you know what was the main concern about in IESG/IETF > tram? > > And if this is final or not? Could it be somehow work it out? > > Why is it a show stopper concern? > > Is it possible to make any workaround to make it possible to send any > realm related info to to turn server ? > > I read the connected tram list mails and the ballot > , > but still not clear for me the main concern, and the actual status. > > (The hardest concern was I think Stephen Farrell concerns, but I feel it > could be addressed.) > > Unfortunately I saw all WebRTC browsers stopped implementing it. > > - https://bugzilla.mozilla.org/show_bug.cgi?id=3D1123722 > - https://bugs.chromium.org/p/webrtc/issues/detail?id=3D4091#c10 > > All in all I would like to know the reasons behind Justin statement: > > This feature is dead. We should plan to remove the code when convenient. > > I would like to turn it back if possible and find a way to make multi > realm TURN work. > > Any comments would be highly appreciated! > > Thanks, > Misi > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > > --001a1144514e2f063305465e8d5d Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Misi,

Yes, it is dead.=C2=A0 While t= he mechanism is convenient, it leaks too much meta-data so the working grou= p abandoned the effort.

- Alan -

On Wed, Jan 18, 2017 at= 3:45 AM, M=C3=A9sz=C3=A1ros Mih=C3=A1ly <misi@niif.hu> wrote:
=20 =20 =20

Hi,

I am planning to build a multi realm TURN service that would use multi realm feature in coturn.

But I sadly realized that there was some for me not very clear IETF concerns and somehow writing draft-ietf-tram-stun-origin has been stopped..

I am wondering what is the WG position about this draft status and future?

I need this multi domain to avoid server duplication:

  • I need to use multi realm to reuse TURN servers and separate user credential domains, to avoid TURN server duplication for every realm in every region.
  • If this origin way could not be fixed then then I don't see any way to make a multi realm TURN service.
    (coTURN name is based on this feature AFAIK.)
  • If we don't send any information from client side that could be use on coTURN side to identify user credential realm than coTRUN multidomain feature could not be used at all.. :(

I am wondering if you know what was the main concern about in IESG/IETF tram?

And if this is final or not? Could it be somehow work it out?

Why is it a show stopper concern?

Is it possible to make any workaround to make it possible to send any realm related info to to turn server ?

I read the connected tram list mails and the ballot, but still not clear for me the main concern, and the actual status.

(The hardest concern was I think Stephen Farrell concerns, but I feel it could be addressed.)

Unfortunately I saw all WebRTC browsers stopped implementing it.

All in all I would like to know the reasons behind Justin statement:

This feature is dead. W=
e should plan to remove the code when convenient.
I would like to turn it back if possible and find a way to make multi realm TURN work.

Any comments would be highly appreciated!

Thanks,
Misi

_______________________________________________
tram mailing list
tram@ietf.org
https://www.ietf.org/mailman/listinfo/tram


--001a1144514e2f063305465e8d5d-- From nobody Wed Jan 18 06:49:12 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D7F0129466 for ; Wed, 18 Jan 2017 06:49:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HlYoBrYDxj89 for ; Wed, 18 Jan 2017 06:49:07 -0800 (PST) Received: from linzer.ki.iif.hu (linzer.ki.iif.hu [193.224.163.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68E0B12985C for ; Wed, 18 Jan 2017 06:49:07 -0800 (PST) Received: from cirkusz.lvs.iif.hu (cirkusz.lvs.iif.hu [193.225.14.182]) by linzer.ki.iif.hu (Postfix) with ESMTP id D02494060F3; Wed, 18 Jan 2017 15:49:05 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at cirkusz.lvs.iif.hu Received: from linzer.ki.iif.hu ([IPv6:::ffff:193.224.163.7]) by cirkusz.lvs.iif.hu (cirkusz.lvs.iif.hu [::ffff:193.225.14.72]) (amavisd-new, port 10024) with ESMTP id 6g8D482tiU1S; Wed, 18 Jan 2017 15:48:57 +0100 (CET) Received: from [IPv6:2001:738:0:401:8476:a736:d2fd:5b66] (unknown [IPv6:2001:738:0:401:8476:a736:d2fd:5b66]) by linzer.ki.iif.hu (Postfix) with ESMTPSA id E33624060DF; Wed, 18 Jan 2017 15:48:55 +0100 (CET) To: Alan Johnston References: From: =?UTF-8?B?TcOpc3rDoXJvcyBNaWjDoWx5?= Message-ID: <9de5a4ca-95a2-7829-08ac-1610c9814c7b@niif.hu> Date: Wed, 18 Jan 2017 15:48:56 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------1855F8A9CF669E7FF33DBB06" Archived-At: Cc: deadbeef@webrtc.org, Oleg Moskalenko , juberti@webrtc.org, "tram@ietf.org" Subject: Re: [tram] stun-origin status==? Is it dead? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Harald Alvestrand List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jan 2017 14:49:10 -0000 This is a multi-part message in MIME format. --------------1855F8A9CF669E7FF33DBB06 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Hi Alan et al. Many thanks for your fast reply! Do you know any alternatives/workaround to use TURN server with multiple realms? What if a client sends in the first STUN request the preferred realm (which the client's username/credential belongs to) instead of the web origin? (In practice the Web ORIGIN is almost useless AFAIU for the TURN server, it is only used to map it to a realm.) Add a new attribute in STUN, e.g. "PREFERRED_REALM" So instead of sending origin, what if we add a new STUN attribute with the preferred REALM and so, if the client adds it to the first STUN request then the STUN/TURN server use this realm (instead of default realm) during the response with the nonce? (and may add a new optional attribute "realm" in stun/turn credential in WebRTC STUN/TURN iceServer to indicate for TURN server which realm the user credential belongs to.) This hopefully address the origin based too much info leakage. Could be the idea above a possible acceptable workaround way forward to continue work on multi domain turn? Any alternatives? What are Your thoughts? Thx, Misi 2017-01-18 14:39 keltezéssel, Alan Johnston írta: > Hi Misi, > > Yes, it is dead. While the mechanism is convenient, it leaks too much > meta-data so the working group abandoned the effort. > > - Alan - > > On Wed, Jan 18, 2017 at 3:45 AM, Mészáros Mihály > wrote: > > Hi, > > I am planning to build a multi realm TURN service that would use > multi realm feature in coturn. > > But I sadly realized that there was some for me not very clear > IETF concerns and somehow writing draft-ietf-tram-stun-origin has > been stopped.. > > I am wondering what is the WG position about this draft status and > future? > > I need this multi domain to avoid server duplication: > > * I need to use multi realm to reuse TURN servers and separate > user credential domains, to avoid TURN server duplication for > every realm in every region. > * If this origin way could not be fixed then then I don't see > any way to make a multi realm TURN service. > (coTURN name is based on this feature AFAIK.) > * If we don't send any information from client side that could > be use on coTURN side to identify user credential realm than > coTRUN multidomain feature could not be used at all.. :( > > I am wondering if you know what was the main concern about in > IESG/IETF tram? > > And if this is final or not? Could it be somehow work it out? > > Why is it a show stopper concern? > > Is it possible to make any workaround to make it possible to send > any realm related info to to turn server ? > > I read the connected tram list mails and the ballot > , > but still not clear for me the main concern, and the actual status. > > (The hardest concern was I think Stephen Farrell concerns, but I > feel it could be addressed.) > > Unfortunately I saw all WebRTC browsers stopped implementing it. > > * https://bugzilla.mozilla.org/show_bug.cgi?id=1123722 > > * https://bugs.chromium.org/p/webrtc/issues/detail?id=4091#c10 > > > All in all I would like to know the reasons behind Justin statement: > > This feature is dead. We should plan to remove the code when convenient. > > I would like to turn it back if possible and find a way to make > multi realm TURN work. > > Any comments would be highly appreciated! > > Thanks, > Misi > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > > > --------------1855F8A9CF669E7FF33DBB06 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

Hi Alan et al.

Many thanks for your fast reply!

Do you know any alternatives/workaround to use TURN server with multiple realms?

What if a client sends in the first STUN request the preferred realm (which the client's username/credential belongs to) instead of the web origin?
(In practice the Web ORIGIN is almost useless AFAIU for the TURN server, it is only used to map it to a realm.)

Add a new attribute in STUN, e.g. "PREFERRED_REALM"

So instead of sending origin, what if we add a new STUN attribute with the preferred REALM and so, if the client adds it to the first STUN request then the STUN/TURN server use this realm (instead of default realm) during the response with the nonce?

(and may add a new optional attribute "realm" in stun/turn credential in WebRTC STUN/TURN iceServer to indicate for TURN server which realm the user credential belongs to.)

This hopefully address the origin based too much info leakage.

Could be the idea above a possible acceptable workaround way forward to continue work on multi domain turn?

Any alternatives?

What are Your thoughts?

Thx,
Misi

2017-01-18 14:39 keltezéssel, Alan Johnston írta:
Hi Misi,

Yes, it is dead.  While the mechanism is convenient, it leaks too much meta-data so the working group abandoned the effort.

- Alan -

On Wed, Jan 18, 2017 at 3:45 AM, Mészáros Mihály <misi@niif.hu> wrote:

Hi,

I am planning to build a multi realm TURN service that would use multi realm feature in coturn.

But I sadly realized that there was some for me not very clear IETF concerns and somehow writing draft-ietf-tram-stun-origin has been stopped..

I am wondering what is the WG position about this draft status and future?

I need this multi domain to avoid server duplication:

  • I need to use multi realm to reuse TURN servers and separate user credential domains, to avoid TURN server duplication for every realm in every region.
  • If this origin way could not be fixed then then I don't see any way to make a multi realm TURN service.
    (coTURN name is based on this feature AFAIK.)
  • If we don't send any information from client side that could be use on coTURN side to identify user credential realm than coTRUN multidomain feature could not be used at all.. :(

I am wondering if you know what was the main concern about in IESG/IETF tram?

And if this is final or not? Could it be somehow work it out?

Why is it a show stopper concern?

Is it possible to make any workaround to make it possible to send any realm related info to to turn server ?

I read the connected tram list mails and the ballot, but still not clear for me the main concern, and the actual status.

(The hardest concern was I think Stephen Farrell concerns, but I feel it could be addressed.)

Unfortunately I saw all WebRTC browsers stopped implementing it.

All in all I would like to know the reasons behind Justin statement:

This feature is dead. We should plan to remove the code when convenient.
I would like to turn it back if possible and find a way to make multi realm TURN work.

Any comments would be highly appreciated!

Thanks,
Misi

_______________________________________________
tram mailing list
tram@ietf.org
https://www.ietf.org/mailman/listinfo/tram



--------------1855F8A9CF669E7FF33DBB06-- From nobody Wed Jan 18 14:21:45 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BFB51128E19 for ; Wed, 18 Jan 2017 14:21:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=jive-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kxNqhStOPiKK for ; Wed, 18 Jan 2017 14:21:42 -0800 (PST) Received: from mail-oi0-x230.google.com (mail-oi0-x230.google.com [IPv6:2607:f8b0:4003:c06::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F4FB1294FC for ; Wed, 18 Jan 2017 14:21:39 -0800 (PST) Received: by mail-oi0-x230.google.com with SMTP id u143so14960759oif.3 for ; Wed, 18 Jan 2017 14:21:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jive-com.20150623.gappssmtp.com; s=20150623; h=subject:to:references:cc:from:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding; bh=MGJ10d93dqfi0SRI5TbyodLbfqw69pCmNLggp2u0iO4=; b=ttYNnB/MZTYCbDdj3nAMXUwJUrZ2MHbV91n7isuLO7ioYVgWDPR3G7bNvO7QWnxixB 5eQ10o/anShxhQ8FI9XBOmEpWommXSOT8QBARiJaGy+UW58T20w5Rjtm5TRf/U0RrcYa gqk79kRkmjtbYHt+AcdaYGzrgIvD1eR5qvuB5Y6xdYiWWov5XkQFWjtIH49fXkRiLwM8 6bd7ZckMrfLWAlF4ZmlIhCx5+wkxHiWbHKT+i7w0nNJBWzaIgkWKiuGYerZRmkeG5Ouz u6pqgmL3q0TMabZlECufa0kuUM7iNQkSpA6Vdpi3yz0EdSINDrZGb7ntwZERRPBgEv4c 2tlw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:cc:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=MGJ10d93dqfi0SRI5TbyodLbfqw69pCmNLggp2u0iO4=; b=H1qgjKHo4mrqd8KI++XDpIB7nWHmWzBJQ51CE3SxWu2w3vuOI5o7UAnRJQs2UwQjj4 zUK3QddfteFwR5N6WUyjC9kDiDITYK4jWeKGbINg8OENH1TYWI0102YMCOTd+4izFfHq BwnQrtb0kQGSCVPpPXCZS8TRLal6DPUebWsKGtB6eQNnE88XdWK2clD/jB2doH8wlPLL 2o7gSbSssuWuQjTrn7R52ihsuifErD+4EgzgVA1Y6v2EjVHAXyCMPMSvHeYYpyaj1MVH G1jEUv/v6GhTA6JcZa3wN019jJw7RFLfzsmJt1Yy9ThBQvTSDRbjUX6aBXYOyyv/Zs68 3WvA== X-Gm-Message-State: AIkVDXLGbUGEj/DVViNV8s7rLTqN6CluKSrd85TRDX+yGU2aggJbQqtzQUcR/QIT7AaJxG5sT8bKZADdAKv64D/uhgnZ9yPIQXPMLZTJhPffIxNO+1el7FStRtYeU2zOnPfEhBUiO950oVWfdTZh33QjF6KgP6ppGpq9riPab1Y= X-Received: by 10.202.228.68 with SMTP id b65mr2505844oih.93.1484778098489; Wed, 18 Jan 2017 14:21:38 -0800 (PST) Received: from MacBook-Pro-de-Simon.local ([216.50.167.215]) by smtp.gmail.com with ESMTPSA id q130sm854011oih.16.2017.01.18.14.21.37 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 18 Jan 2017 14:21:37 -0800 (PST) To: Harald Alvestrand , Alan Johnston References: <9de5a4ca-95a2-7829-08ac-1610c9814c7b@niif.hu> From: Simon Perreault Message-ID: Date: Wed, 18 Jan 2017 15:21:41 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.6.0 MIME-Version: 1.0 In-Reply-To: <9de5a4ca-95a2-7829-08ac-1610c9814c7b@niif.hu> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: Cc: juberti@webrtc.org, Oleg Moskalenko , deadbeef@webrtc.org, "tram@ietf.org" Subject: Re: [tram] stun-origin status==? Is it dead? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jan 2017 22:21:44 -0000 Le 2017-01-18 07:48, Mszros Mihly a crit : > Do you know any alternatives/workaround to use TURN server with multiple > realms? OAuth does the trick. https://tools.ietf.org/html/rfc7635 -- Simon Perreault Director of Engineering, Platform | Jive Communications, Inc. https://jive.com | +1 418 478 0989 ext. 1241 | sperreault@jive.com From nobody Thu Jan 19 00:20:57 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8E5E12947B for ; Thu, 19 Jan 2017 00:20:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cwdURY1H6uZQ for ; Thu, 19 Jan 2017 00:20:50 -0800 (PST) Received: from linzer.ki.iif.hu (linzer.ki.iif.hu [193.224.163.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C82871293EE for ; Thu, 19 Jan 2017 00:20:49 -0800 (PST) Received: from bolha.lvs.iif.hu (bolha.lvs.iif.hu [193.225.14.181]) by linzer.ki.iif.hu (Postfix) with ESMTP id 5F2D04060F3; Thu, 19 Jan 2017 09:20:48 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at bolha.lvs.iif.hu Received: from linzer.ki.iif.hu ([IPv6:::ffff:193.224.163.7]) by bolha.lvs.iif.hu (bolha.lvs.iif.hu [::ffff:193.225.14.72]) (amavisd-new, port 10024) with ESMTP id 0KS4hjBhYgfV; Thu, 19 Jan 2017 09:20:47 +0100 (CET) Received: from [IPv6:2001:738:0:401:8476:a736:d2fd:5b66] (unknown [IPv6:2001:738:0:401:8476:a736:d2fd:5b66]) by linzer.ki.iif.hu (Postfix) with ESMTPSA id 190EC4060C2; Thu, 19 Jan 2017 09:20:46 +0100 (CET) To: Simon Perreault , Harald Alvestrand , Alan Johnston References: <9de5a4ca-95a2-7829-08ac-1610c9814c7b@niif.hu> From: =?UTF-8?B?TcOpc3rDoXJvcyBNaWjDoWx5?= Message-ID: Date: Thu, 19 Jan 2017 09:20:47 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: Cc: deadbeef@webrtc.org, Oleg Moskalenko , juberti@webrtc.org, "tram@ietf.org" Subject: Re: [tram] stun-origin status==? Is it dead? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Jan 2017 08:20:56 -0000 2017-01-18 23:21 keltezssel, Simon Perreault rta: > Le 2017-01-18 07:48, Mszros Mihly a crit : >> Do you know any alternatives/workaround to use TURN server with multiple >> realms? > OAuth does the trick. > https://tools.ietf.org/html/rfc7635 > Hello Simon, Despite You are right multiple Auth Server could use with one TURN server, but on the wire even in OAuth case, STUN/TURN still use TURN server default realm with the mac_key. And may some TURN server client would like to have a fully customized realm according their own domain and hide the TURN service provider "realm". So even in case of OAuth it could have benefit to find solution to mutlidomain TURN. But the main point that unfortunately OAuth is not implemented and used in real world actually AFAIK. Furthermore even in STUN-bis I could see that the LTC password auth is still exists. And this way if I understand it correctly the username+password auth will not fade out very soon. All in all, I still feel the need to find a solution for multidomain TURN. I need your help: Would it be possible to work according my idea that (almost) address the concern that raised against ORIGIN. So stun client could send his preferred_realm and TURN server could decide if it handles such realm then replaces default realm with the one the user has preferred/requested? Do you see any weakens problem with this idea? Thx, Misi From nobody Thu Jan 19 08:43:59 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4615F1293E0 for ; Thu, 19 Jan 2017 08:43:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.998 X-Spam-Level: X-Spam-Status: No, score=0.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_SORBS_WEB=3.599, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7yVa2YlA_B-Q for ; Thu, 19 Jan 2017 08:43:56 -0800 (PST) Received: from mx0b-00198e01.pphosted.com (mx0b-00198e01.pphosted.com [67.231.157.197]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 500A91294BC for ; Thu, 19 Jan 2017 08:43:37 -0800 (PST) Received: from pps.filterd (m0073110.ppops.net [127.0.0.1]) by mx0b-00198e01.pphosted.com (8.16.0.20/8.16.0.20) with SMTP id v0JGcgqn020174; Thu, 19 Jan 2017 11:43:34 -0500 Received: from mail.vidyo.com ([162.209.16.214]) by mx0b-00198e01.pphosted.com with ESMTP id 27yhd6jq11-1 (version=TLSv1 cipher=AES128-SHA bits=128 verify=NOT); Thu, 19 Jan 2017 11:43:34 -0500 Received: from 492132-EXCH1.vidyo.com ([fe80::50:56ff:fe85:4f77]) by 492133-EXCH2.vidyo.com ([fe80::50:56ff:fe85:6b62%13]) with mapi id 14.03.0195.001; Thu, 19 Jan 2017 10:43:33 -0600 From: Jonathan Lennox To: =?Windows-1252?Q?M=E9sz=E1ros_Mih=E1ly?= Thread-Topic: [tram] stun-origin status==? Is it dead? Thread-Index: AQHScnJZzU05Q5Y9w0yAuJGdxAqx5aFAZgqA Date: Thu, 19 Jan 2017 16:43:32 +0000 Message-ID: <126902A7-D98E-42E6-AE49-69D39FD46EB9@vidyo.com> References: <9de5a4ca-95a2-7829-08ac-1610c9814c7b@niif.hu> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [160.79.219.114] Content-Type: text/plain; charset="Windows-1252" Content-ID: <217A1F9EF8F4C34E908BB78532C03E22@vidyo.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-01-19_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1612050000 definitions=main-1701190211 Archived-At: Cc: Oleg Moskalenko , "juberti@webrtc.org" , "tram@ietf.org" , Harald Alvestrand , Simon Perreault , "deadbeef@webrtc.org" , Alan Johnston Subject: Re: [tram] stun-origin status==? Is it dead? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Jan 2017 16:43:58 -0000 The other proposal that was made to replace the ORIGIN attribute was a HOST= attribute =97 this would be a way for a STUN / TURN client to send the DNS= name it used to lookup the server, and thus do virtual hosting more direct= ly. This would have similar security properties to SNI in TLS. It would a= llow virtual hosting, without exposing nearly as much information as ORIGIN= would. However, I don=92t know if anything ever came of this. Of course, if you=92re using TURN over TLS or DTLS, the TLS SNI field itsel= f will also allow you to do virtual hosting. > On Jan 19, 2017, at 3:20 AM, M=E9sz=E1ros Mih=E1ly wrote: >=20 > 2017-01-18 23:21 keltez=E9ssel, Simon Perreault =EDrta: >> Le 2017-01-18 =E0 07:48, M=E9sz=E1ros Mih=E1ly a =E9crit : >>> Do you know any alternatives/workaround to use TURN server with multipl= e >>> realms? >> OAuth does the trick. >> https://tools.ietf.org/html/rfc7635 >>=20 > Hello Simon, >=20 > Despite You are right multiple Auth Server could use with one TURN > server, but on the wire even in OAuth case, STUN/TURN still use TURN > server default realm with the mac_key. >=20 > And may some TURN server client would like to have a fully customized > realm according their own domain and hide the TURN service provider "real= m". > So even in case of OAuth it could have benefit to find solution to > mutlidomain TURN. >=20 > But the main point that unfortunately OAuth is not implemented and used > in real world actually AFAIK. > Furthermore even in STUN-bis I could see that the LTC password auth is > still exists. And this way if I understand it correctly the > username+password auth will not fade out very soon. >=20 > All in all, I still feel the need to find a solution for multidomain TURN= . > I need your help: Would it be possible to work according my idea that > (almost) address the concern that raised against ORIGIN. So stun client > could send his preferred_realm and TURN server could decide if it > handles such realm then replaces default realm with the one the user has > preferred/requested? >=20 > Do you see any weakens problem with this idea? >=20 > Thx, > Misi >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram >=20 From nobody Thu Jan 19 08:57:18 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3611A129471 for ; Thu, 19 Jan 2017 08:57:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.198 X-Spam-Level: X-Spam-Status: No, score=-5.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-3.199] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cwRglS4NR_WS for ; Thu, 19 Jan 2017 08:57:16 -0800 (PST) Received: from mail-yb0-x231.google.com (mail-yb0-x231.google.com [IPv6:2607:f8b0:4002:c09::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BAE7E129470 for ; Thu, 19 Jan 2017 08:57:15 -0800 (PST) Received: by mail-yb0-x231.google.com with SMTP id j82so26402694ybg.1 for ; Thu, 19 Jan 2017 08:57:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=tbAZaz1JPM0RhFISMl22loY/qgnIvw/dH0U6V1+JWXE=; b=Z8bKWUAn9wK4vIkCeqQWNtnmW2tAHs7LZCUYlqioPIXo3OEHE3P+LW2cAi92dSOJ+o mVsTqgDBH9PbNfWZZuTtq8AwNnMyMh7ccJ9Qc8u/TX597LFqUTta43meHBZimAqcfEGJ OvXnFCvnd9vX1UxEb5DVEaq0+lLNH2ieOFbge1AkeVqDWHnK+wZeKtQrJENM+5mDo/oF 6z4tMNzD4qL8xRNeynWMKjAEuQHT+cT5tROyX6Na5d0KvFrEBeh6pe1q4F63BE8bgYUP 3LXmZ655LEUsHkWZhQQc4bHO/3gXv/pSUdi9PTM31fJCZXO80fO7bMjozC/XdmJv8Tme 4njQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=tbAZaz1JPM0RhFISMl22loY/qgnIvw/dH0U6V1+JWXE=; b=tsQM1ySlnPoNzYWLj1dYnvtJXV0JMjrZ38G6bUn6I2MZpl8v+Scichc0b0upyA7wR6 vFlivgSIxSmuUPAwpoHKVOoxhZ/5T4EJlFM7x7CBlzHcl+NDgDByVkUyNfGnatqlaKXo SHh8RS3u4rKK0vrq2kbAuVHoA4Xj5kIqlKFdCELnwGdgKifnMWaDVncBv8n2iPQWHW18 w/KXOkle+4C0wGoUTVNjLJsllv46XvP3eaqT35tL0ZT7hnyaxrcfNy5rM3wYywukSskX zGB4Ol4/8UGT/9YNdky2sjvbvXyjF5isP6EVJvLzl8HxIOn4OVLsjh+tW2h5T5VMb8m/ kU0w== X-Gm-Message-State: AIkVDXJQ89d3/Xdvk0n0bCKHGza45272NfvSUERlp9gcB3xG2vOFq1qppWhigtIInbxbUF/dXrSFpk7pqoc7lTnC X-Received: by 10.37.58.4 with SMTP id h4mr6907193yba.82.1484845034755; Thu, 19 Jan 2017 08:57:14 -0800 (PST) MIME-Version: 1.0 Received: by 10.37.56.73 with HTTP; Thu, 19 Jan 2017 08:56:53 -0800 (PST) In-Reply-To: <126902A7-D98E-42E6-AE49-69D39FD46EB9@vidyo.com> References: <9de5a4ca-95a2-7829-08ac-1610c9814c7b@niif.hu> <126902A7-D98E-42E6-AE49-69D39FD46EB9@vidyo.com> From: Harald Alvestrand Date: Thu, 19 Jan 2017 17:56:53 +0100 Message-ID: To: Jonathan Lennox Content-Type: multipart/alternative; boundary=001a114c713cd8695c0546756c0d Archived-At: Cc: Oleg Moskalenko , "juberti@webrtc.org" , "tram@ietf.org" , =?UTF-8?B?TcOpc3rDoXJvcyBNaWjDoWx5?= , Simon Perreault , "deadbeef@webrtc.org" , Alan Johnston Subject: Re: [tram] stun-origin status==? Is it dead? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Jan 2017 16:57:17 -0000 --001a114c713cd8695c0546756c0d Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I think we need to have a writeup on: 1) What it's legitimate for the STUN service provider to learn about the user 2) What it's NOT legitimate for the STUN service provider to learn about the user Possibly scoped by scenario. Usually, if something dies because "it's a privacy violation", we can't get any further without some privacy analysis. On Thu, Jan 19, 2017 at 5:43 PM, Jonathan Lennox wrote= : > The other proposal that was made to replace the ORIGIN attribute was a > HOST attribute =E2=80=94 this would be a way for a STUN / TURN client to = send the > DNS name it used to lookup the server, and thus do virtual hosting more > directly. This would have similar security properties to SNI in TLS. It > would allow virtual hosting, without exposing nearly as much information = as > ORIGIN would. > > However, I don=E2=80=99t know if anything ever came of this. > > Of course, if you=E2=80=99re using TURN over TLS or DTLS, the TLS SNI fie= ld itself > will also allow you to do virtual hosting. > > > On Jan 19, 2017, at 3:20 AM, M=C3=A9sz=C3=A1ros Mih=C3=A1ly wrote: > > > > 2017-01-18 23:21 keltez=C3=A9ssel, Simon Perreault =C3=ADrta: > >> Le 2017-01-18 =C3=A0 07:48, M=C3=A9sz=C3=A1ros Mih=C3=A1ly a =C3=A9cri= t : > >>> Do you know any alternatives/workaround to use TURN server with > multiple > >>> realms? > >> OAuth does the trick. > >> https://tools.ietf.org/html/rfc7635 > >> > > Hello Simon, > > > > Despite You are right multiple Auth Server could use with one TURN > > server, but on the wire even in OAuth case, STUN/TURN still use TURN > > server default realm with the mac_key. > > > > And may some TURN server client would like to have a fully customized > > realm according their own domain and hide the TURN service provider > "realm". > > So even in case of OAuth it could have benefit to find solution to > > mutlidomain TURN. > > > > But the main point that unfortunately OAuth is not implemented and used > > in real world actually AFAIK. > > Furthermore even in STUN-bis I could see that the LTC password auth is > > still exists. And this way if I understand it correctly the > > username+password auth will not fade out very soon. > > > > All in all, I still feel the need to find a solution for multidomain > TURN. > > I need your help: Would it be possible to work according my idea that > > (almost) address the concern that raised against ORIGIN. So stun client > > could send his preferred_realm and TURN server could decide if it > > handles such realm then replaces default realm with the one the user ha= s > > preferred/requested? > > > > Do you see any weakens problem with this idea? > > > > Thx, > > Misi > > > > _______________________________________________ > > tram mailing list > > tram@ietf.org > > https://www.ietf.org/mailman/listinfo/tram > > > > --001a114c713cd8695c0546756c0d Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I think we need to have a writeup on:

1= ) What it's legitimate for the STUN service provider to learn about the= user
2) What it's NOT legitimate for the STUN service provid= er to learn about the user

Possibly scoped by scen= ario.
Usually, if something dies because "it's a privacy= violation", we can't get any further without some privacy analysi= s.


On Thu, Jan 19, 2017 at 5:43 PM, Jonathan Lennox <jonathan@vi= dyo.com> wrote:
The other p= roposal that was made to replace the ORIGIN attribute was a HOST attribute = =E2=80=94 this would be a way for a STUN / TURN client to send the DNS name= it used to lookup the server, and thus do virtual hosting more directly.= =C2=A0 This would have similar security properties to SNI in TLS.=C2=A0 It = would allow virtual hosting, without exposing nearly as much information as= ORIGIN would.

However, I don=E2=80=99t know if anything ever came of this.

Of course, if you=E2=80=99re using TURN over TLS or DTLS, the TLS SNI field= itself will also allow you to do virtual hosting.

> On Jan 19, 2017, at 3:20 AM, M=C3=A9sz=C3=A1ros Mih=C3=A1ly <misi@niif.hu> wrote:
>
> 2017-01-18 23:21 keltez=C3=A9ssel, Simon Perreault =C3=ADrta:
>> Le 2017-01-18 =C3=A0 07:48, M=C3=A9sz=C3=A1ros Mih=C3=A1ly a =C3= =A9crit :
>>> Do you know any alternatives/workaround to use TURN server wit= h multiple
>>> realms?
>> OAuth does the trick.
>> https://tools.ietf.org/html/rfc7635
>>
> Hello Simon,
>
> Despite You are right multiple Auth Server could use with one TURN
> server, but on the wire even in OAuth case, STUN/TURN still use TURN > server default realm with the mac_key.
>
> And may some TURN server client would like to have a fully customized<= br> > realm according their own domain and hide the TURN service provider &q= uot;realm".
> So even in case of OAuth it could have benefit to find solution to
> mutlidomain TURN.
>
> But the main point that unfortunately OAuth is not implemented and use= d
> in real world actually AFAIK.
> Furthermore even in STUN-bis I could see that the LTC password auth is=
> still exists. And this way if I understand it correctly the
> username+password auth will not fade out very soon.
>
> All in all, I still feel the need to find a solution for multidomain T= URN.
> I need your help: Would it be possible to work according my idea that<= br> > (almost) address the concern that raised against ORIGIN. So stun clien= t
> could send his preferred_realm and TURN server could decide if it
> handles such realm then replaces default realm with the one the user h= as
> preferred/requested?
>
> Do you see any weakens problem with this idea?
>
> Thx,
> Misi
>
> _______________________________________________
> tram mailing list
> tram@ietf.org
> https://www.ietf.org/mailman/listinfo/tram >


--001a114c713cd8695c0546756c0d-- From nobody Fri Jan 20 06:07:17 2017 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45467129451 for ; Fri, 20 Jan 2017 06:07:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PtoRbjPLvu-J for ; Fri, 20 Jan 2017 06:07:14 -0800 (PST) Received: from linzer.ki.iif.hu (linzer.ki.iif.hu [193.224.163.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 514BA1293E8 for ; Fri, 20 Jan 2017 06:07:14 -0800 (PST) Received: from bolha.lvs.iif.hu (bolha.lvs.iif.hu [193.225.14.181]) by linzer.ki.iif.hu (Postfix) with ESMTP id 3FE294060C3; Fri, 20 Jan 2017 15:07:12 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at bolha.lvs.iif.hu Received: from linzer.ki.iif.hu ([IPv6:::ffff:193.224.163.7]) by bolha.lvs.iif.hu (bolha.lvs.iif.hu [::ffff:193.225.14.72]) (amavisd-new, port 10024) with ESMTP id BGMoeubAtxrO; Fri, 20 Jan 2017 15:07:11 +0100 (CET) Received: from [IPv6:2001:738:0:401:8476:a736:d2fd:5b66] (unknown [IPv6:2001:738:0:401:8476:a736:d2fd:5b66]) by linzer.ki.iif.hu (Postfix) with ESMTPSA id 392C44060C2; Fri, 20 Jan 2017 15:07:10 +0100 (CET) To: Harald Alvestrand , Jonathan Lennox References: <9de5a4ca-95a2-7829-08ac-1610c9814c7b@niif.hu> <126902A7-D98E-42E6-AE49-69D39FD46EB9@vidyo.com> From: =?UTF-8?B?TcOpc3rDoXJvcyBNaWjDoWx5?= Message-ID: Date: Fri, 20 Jan 2017 15:07:10 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------8FEB9BAD6562D15B3E1ECAD8" Archived-At: Cc: Oleg Moskalenko , "juberti@webrtc.org" , "tram@ietf.org" , Simon Perreault , "deadbeef@webrtc.org" , Alan Johnston Subject: Re: [tram] stun-origin status==? Is it dead? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Jan 2017 14:07:17 -0000 This is a multi-part message in MIME format. --------------8FEB9BAD6562D15B3E1ECAD8 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit STUN RFC5389 REALM definition links back to RFC3261. And RFC3261 in section 22.1 States "The realm string alone defines the protection domain." So it is not mandatory that it is connected to the TURN server host FQDN. (It is NOT a MUST to set REALM equivalent to TURN server FQDN or domain name.) On multi domain TURN server case the TURN server already has info about which user belongs to which realm. The realm,username,HA1(password) information is in the backend userdb, and this way client do not reveal any new information that the TURN server not knows already... So I still think that sending a new STUN attribute in first request e.g. "preferred_realm" and replace server "default_realm from that point could be a solution and a way forward. Do you agree, or do have you any concerns? Thx, Misi 2017-01-19 17:56 keltezéssel, Harald Alvestrand írta: > I think we need to have a writeup on: > > 1) What it's legitimate for the STUN service provider to learn about > the user > 2) What it's NOT legitimate for the STUN service provider to learn > about the user > > Possibly scoped by scenario. > Usually, if something dies because "it's a privacy violation", we > can't get any further without some privacy analysis. > > > On Thu, Jan 19, 2017 at 5:43 PM, Jonathan Lennox > wrote: > > The other proposal that was made to replace the ORIGIN attribute > was a HOST attribute — this would be a way for a STUN / TURN > client to send the DNS name it used to lookup the server, and thus > do virtual hosting more directly. This would have similar > security properties to SNI in TLS. It would allow virtual > hosting, without exposing nearly as much information as ORIGIN would. > > However, I don’t know if anything ever came of this. > > Of course, if you’re using TURN over TLS or DTLS, the TLS SNI > field itself will also allow you to do virtual hosting. > > > On Jan 19, 2017, at 3:20 AM, Mészáros Mihály > wrote: > > > > 2017-01-18 23:21 keltezéssel, Simon Perreault írta: > >> Le 2017-01-18 à 07:48, Mészáros Mihály a écrit : > >>> Do you know any alternatives/workaround to use TURN server > with multiple > >>> realms? > >> OAuth does the trick. > >> https://tools.ietf.org/html/rfc7635 > > >> > > Hello Simon, > > > > Despite You are right multiple Auth Server could use with one TURN > > server, but on the wire even in OAuth case, STUN/TURN still use TURN > > server default realm with the mac_key. > > > > And may some TURN server client would like to have a fully > customized > > realm according their own domain and hide the TURN service > provider "realm". > > So even in case of OAuth it could have benefit to find solution to > > mutlidomain TURN. > > > > But the main point that unfortunately OAuth is not implemented > and used > > in real world actually AFAIK. > > Furthermore even in STUN-bis I could see that the LTC password > auth is > > still exists. And this way if I understand it correctly the > > username+password auth will not fade out very soon. > > > > All in all, I still feel the need to find a solution for > multidomain TURN. > > I need your help: Would it be possible to work according my idea > that > > (almost) address the concern that raised against ORIGIN. So stun > client > > could send his preferred_realm and TURN server could decide if it > > handles such realm then replaces default realm with the one the > user has > > preferred/requested? > > > > Do you see any weakens problem with this idea? > > > > Thx, > > Misi > > > > _______________________________________________ > > tram mailing list > > tram@ietf.org > > https://www.ietf.org/mailman/listinfo/tram > > > > > --------------8FEB9BAD6562D15B3E1ECAD8 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

STUN RFC5389  REALM definition links back to RFC3261.

And RFC3261 in section 22.1 States "The realm string alone defines the protection domain."

So it is not mandatory that it is connected to the TURN server host FQDN.
(It is NOT a MUST to set REALM equivalent to TURN server FQDN or domain name.)

On multi domain TURN server case the TURN server already has info about which user belongs to which realm.
The realm,username,HA1(password) information is in the backend userdb,
and this way client do not reveal any new information that the TURN server not knows already...

So I still think that sending a new STUN attribute in first request e.g. "preferred_realm" and replace server "default_realm from that point could be a solution and a way forward.
Do you agree, or do have you any concerns?

Thx,
Misi

2017-01-19 17:56 keltezéssel, Harald Alvestrand írta:
I think we need to have a writeup on:

1) What it's legitimate for the STUN service provider to learn about the user
2) What it's NOT legitimate for the STUN service provider to learn about the user

Possibly scoped by scenario.
Usually, if something dies because "it's a privacy violation", we can't get any further without some privacy analysis.


On Thu, Jan 19, 2017 at 5:43 PM, Jonathan Lennox <jonathan@vidyo.com> wrote:
The other proposal that was made to replace the ORIGIN attribute was a HOST attribute — this would be a way for a STUN / TURN client to send the DNS name it used to lookup the server, and thus do virtual hosting more directly.  This would have similar security properties to SNI in TLS.  It would allow virtual hosting, without exposing nearly as much information as ORIGIN would.

However, I don’t know if anything ever came of this.

Of course, if you’re using TURN over TLS or DTLS, the TLS SNI field itself will also allow you to do virtual hosting.

> On Jan 19, 2017, at 3:20 AM, Mészáros Mihály <misi@niif.hu> wrote:
>
> 2017-01-18 23:21 keltezéssel, Simon Perreault írta:
>> Le 2017-01-18 à 07:48, Mészáros Mihály a écrit :
>>> Do you know any alternatives/workaround to use TURN server with multiple
>>> realms?
>> OAuth does the trick.
>> https://tools.ietf.org/html/rfc7635
>>
> Hello Simon,
>
> Despite You are right multiple Auth Server could use with one TURN
> server, but on the wire even in OAuth case, STUN/TURN still use TURN
> server default realm with the mac_key.
>
> And may some TURN server client would like to have a fully customized
> realm according their own domain and hide the TURN service provider "realm".
> So even in case of OAuth it could have benefit to find solution to
> mutlidomain TURN.
>
> But the main point that unfortunately OAuth is not implemented and used
> in real world actually AFAIK.
> Furthermore even in STUN-bis I could see that the LTC password auth is
> still exists. And this way if I understand it correctly the
> username+password auth will not fade out very soon.
>
> All in all, I still feel the need to find a solution for multidomain TURN.
> I need your help: Would it be possible to work according my idea that
> (almost) address the concern that raised against ORIGIN. So stun client
> could send his preferred_realm and TURN server could decide if it
> handles such realm then replaces default realm with the one the user has
> preferred/requested?
>
> Do you see any weakens problem with this idea?
>
> Thx,
> Misi
>
> _______________________________________________
> tram mailing list
> tram@ietf.org
> https://www.ietf.org/mailman/listinfo/tram
>



--------------8FEB9BAD6562D15B3E1ECAD8--