From nobody Mon Oct 14 15:04:21 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 192D9120104 for ; Mon, 14 Oct 2019 15:04:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r4bK8HkSTWd6 for ; Mon, 14 Oct 2019 15:04:17 -0700 (PDT) Received: from mail-pf1-x42f.google.com (mail-pf1-x42f.google.com [IPv6:2607:f8b0:4864:20::42f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BF54120019 for ; Mon, 14 Oct 2019 15:04:17 -0700 (PDT) Received: by mail-pf1-x42f.google.com with SMTP id h195so11125184pfe.5 for ; Mon, 14 Oct 2019 15:04:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:mime-version:subject:message-id:date :cc:to; bh=dMwNz0ZLwJrK18kf4xs/7E5BaMQQgrPydYjxQ8QU9tU=; b=Xqduuy0fKvlVdJUTOSjffrbl9RaGvkiNZwCwnntJrZj0bqn6MTKibgbep/GOowVcFW 8Y6V1Xv8Cz3d6sb3ohGd8MbAd+dtJdKi4anGTRATeHNmoPD+sM2wex+Ze8dtHsoWrijM 2oQiCvifWwqa/DEw3lCSCY36Stvy4URt17t+JFgK0sipIwrMjCiFWu2lN7I+/eASEpEJ Cc4PrQw199SrO+Pv2X2vbSey0dpBV0E3kTVqhrxhwrUHnl+4K5eqkG0XmeMhN8RmoKmo qsbcHiEPB1QMkpSLvc3/kIrJiO/J/fBJvmtUb3JLj+1x4RK8T7Pli77DagyjXu9dOz94 VfNA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:message-id:date:cc:to; bh=dMwNz0ZLwJrK18kf4xs/7E5BaMQQgrPydYjxQ8QU9tU=; b=qn5gqrCWiZOclUD1lgQmwy8Vnu5BklpdKSD8whzC7tnBme7NNsTLBmQktPi+hzYbu8 NUr1XXTujOkJLihCqmdVAkO9fUn76zH9y7/oghsvsvUdBt1G4FpvoNRu13c46lU9/qrL FWZHNt9QVw3SwHebAW9JWZnqVKtltniysWy5uc4DDgBPiF2UJuMGF1mXeVlOahMZzvr7 xpqWV63jGG/yzkDh78RyFom6755SYhRVTwXjcVZUPcHPJegG4B6mVF7TFKga2K4AnF4B AVNmvmTVmLRkwIZ/M3d8TAz17eVER2AAmie7C5772XV6pLbUy0t3b+MlTtfM5WEEVgE4 sXYg== X-Gm-Message-State: APjAAAW0UZxOFuzfcxE/dlzRP6/z2asX31fDH1iJVMjxdRrQRgVfLPtW Xy+/OIi7tMGTXFdB5BWTbvuV7MTs X-Google-Smtp-Source: APXvYqxlmw/qePOPHyPTZoDrGndd4hWXRBl3N62vz3SPch628LbcznCV9MXdh6Kvnd175UWEjmsTEw== X-Received: by 2002:aa7:86c2:: with SMTP id h2mr35283143pfo.0.1571090656283; Mon, 14 Oct 2019 15:04:16 -0700 (PDT) Received: from 197.66.20.149.in-addr.arpa (197.66.20.149.in-addr.arpa. [149.20.66.197]) by smtp.gmail.com with ESMTPSA id z2sm23287989pfq.58.2019.10.14.15.04.15 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 14 Oct 2019 15:04:15 -0700 (PDT) From: Fred Baker Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601\)) Message-Id: Date: Mon, 14 Oct 2019 15:04:13 -0700 To: v6ops list X-Mailer: Apple Mail (2.3601) Archived-At: Subject: [v6ops] IETF Working Group Agenda Analysis X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Oct 2019 22:04:19 -0000 Apologies for the HTML Email. Some folks complain about them. This is a = file I put together daily showing the status of v6ops documents.This = document describes the drafts associated with this group. It describes = their current state as seen by the RFC Editor, IESG/AD, and the working = or research group. For working group drafts and individual submissions, = it also indicates whether the draft has been updated since the previous = IETF meeting. Drafts that are new or have been updated are "current"; = other drafts are "old". At IETF 105, Jen discussed draft-linkova-v6ops-nd-cache-init, and there = was a lot of support for taking it as a working group draft. Bob Hinden, = 6man chair, commented that he would prefer that v6ops discuss = operational issues, but protocol issues be discussed in 6man. Hence, Ron = and I are looking for a draft-ietf-v6ops-nd-cache-init that addresses = the operational issues raised in this draft, and Bob and Ole are looking = for the protocol issues in a 6man draft. Those balls are in Jen's court, = but I suspect she would appreciate any help folks want to offer. A point I'm thinking about for IETF 106 is that we don't see a lot of = email support for the individual submissions below. If you are hoping = for one of them to go somewhere, email to the list would be in order. = We're also interested in new drafts on IPv6 networking. If you're = seeking inspiration, there have been a couple of longish threads on = nanog@ recently. As stated in our charter, we would hope they address = operational issues that you see in your network(s), and propose = solutions. Such drafts have to be posted before November 4, as that's = the repository cut-off, and ideally long enough before that to allow for = mailing list discussion. > On each draft below, there are three or four links: >=20 > the relevant datatracker link, > a pointer to the HTML version of the draft in the tools directory, > a pointer to the email archived on IETF mailing lists related to the = draft, and > a pointer to RFCDIFF against the previous version, if there was one. > RFC Editor: RFC-EDITOR >=20 > 2019-09-09 draft-ietf-v6ops-nat64-deployment (tracker) = = (HTML) = (thread) = (diffs) = > WG: Candidate for WG Adoption >=20 > 2019-07-25 draft-linkova-v6ops-nd-cache-init (tracker) = = (HTML) = (thread) = (diffs) = > Individual Submission: Unupdated >=20 > 2019-07-08 draft-palet-v6ops-464xlat-opt-cdn-caches (tracker) = (HTML) = = (thread) = (diffs) = > 2019-07-06 draft-gont-v6ops-slaac-renum (tracker) = (HTML) = (thread) = > 2019-07-06 draft-lmhp-v6ops-transition-comparison (tracker) = = (HTML) = = (thread) = (diffs) = > 2019-07-04 draft-palet-v6ops-p2p-links (tracker) = (HTML) = (thread) = (diffs) = = > 2019-07-03 draft-palet-v6ops-ipv6-only (tracker) = (HTML) = (thread) = (diffs) = = > 2019-06-24 draft-templin-v6ops-pdhost (tracker) = (HTML) = (thread) = (diffs) = > Individual Submission: Updated >=20 > 2019-09-18 draft-shytyi-v6ops-danir (tracker) = (HTML) = (thread) = (diffs) = > The charter for this group is at = https://datatracker.ietf.org/group/v6ops/about/ = Mon Oct 14 14:00:32 = 2019 = From nobody Mon Oct 14 17:17:10 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74F90120047 for ; Mon, 14 Oct 2019 17:17:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.499 X-Spam-Level: X-Spam-Status: No, score=-0.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sKxeZrmZBpo9 for ; Mon, 14 Oct 2019 17:17:06 -0700 (PDT) Received: from mail-ot1-x331.google.com (mail-ot1-x331.google.com [IPv6:2607:f8b0:4864:20::331]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A40EC120013 for ; Mon, 14 Oct 2019 17:17:06 -0700 (PDT) Received: by mail-ot1-x331.google.com with SMTP id e11so15335981otl.5 for ; Mon, 14 Oct 2019 17:17:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=Mj43a4wGMtmqB4SgqCvSNruaYkJBHbcx5azQ7I6KV6w=; b=eolvefNMZYXMoa9OPxdaok3sGJRfQhOOdgC1dpWpn9RhZfxKLg8q8+1Q0TEDR1j2pE UPJa1WfyQUIXZc7zPsv6c8SCxdZ2HVtS2br0SNAZzOve3Msda2UD9FE95VsL3p0A8hb3 8+W2icZw00WWh1m/N2WsoBbr8WRy85SIrE+GYU/6ias37bYfq9rIztbiIP1OC9BhtSrq XxUnMYcfEuMLNrQo+QWEHw4oxwvrXcE5Sw5XcD7wu2yJCtgWy2U3qR5gTMOUejIgGC0o rasywR/zaH40nRkwVToZci2sxNk7gOdzSLdajrxsTb4V92jRqE54Yyj7yedzsRbNZX6f oawA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=Mj43a4wGMtmqB4SgqCvSNruaYkJBHbcx5azQ7I6KV6w=; b=ffWd1jDOCzMzOqNUUGuc0uBYRZrj9LtJMlxT05RHBXiiEXeFUJHNL4GIZ4o08Sm+NJ tbGT6A9D6EUSDXkjpzrTh484qynFwu2KiBxDc/JKpIcY2wEdQtBUEVDzs0bc7vbebO/e lCHrkECARyIuzzwye+CVQ7OtSDSDEyqXWrJHvgIfTLbUnAkgleC3Efwgkg7xahwg8Gto Pq6ntK+8Sz44vXxHZc6J6XYqsupnjfDSLuioav1JFTevaAh/Gw/akWikC+rTt1JzEsuL sENXl/efvP9jvYPnP00PmbWK6jLMJXcJ6KsZzpQM5sZJSv+KUInmN9PPGOFyO4x3p8Oi cEpw== X-Gm-Message-State: APjAAAXcc/Kzc3ogRrCnPTsmrzay9H6pKJCGLdnjX8lK/XTxGLi+6N1B 46K8phfkTq3D1qqkQpDfbzD4DGCrutq1gSjAdpdkEg== X-Google-Smtp-Source: APXvYqyRN6PGvig3H0iI3MZWrOQ16KFzOSPyx+zGMkG2uQ1bfMEu3QdxrqHltNkpslbivnxaj3al9a8FvO6LNot8CeI= X-Received: by 2002:a9d:5e0f:: with SMTP id d15mr25252501oti.348.1571098625712; Mon, 14 Oct 2019 17:17:05 -0700 (PDT) MIME-Version: 1.0 From: Mark Smith Date: Tue, 15 Oct 2019 11:16:39 +1100 Message-ID: To: jordi.palet@theipv6company.com, v6ops list Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [v6ops] Some comments on 'IPv6 Point-to-Point Links' / draft-palet-v6ops-p2p-links-03 X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 00:17:09 -0000 Hi Jordi, I started this review a while ago, intending to get it finished before now. It isn't finished yet, however with IETF 106 coming, there's enough below to work on. Regards, Mark. -- Hi Jordi, Some comments on the above ID. * 3.2. Rationale for using /127 It may be worth mentioning that the effectiveness of this relies on both ends of the link being configured with addresses from within the /127, and that if that doesn't occur due to human error through omission, nothing in IPv6 will detect and notify of that situation. If the link is successfully carrying traffic, then people can assume the link's configuration is correct and complete. This is because although in IPv6 (and IPv4) we think about assigning a prefix to a link, in reality and practice, what we actually do is configure addresses from within a prefix to interfaces attached to a link. There is nothing in IPv6 that demands that all interfaces attached to a link have addresses from all of the prefixes assigned to the link, and it is a valid IPv6 configuration if all link interfaces don't have addresses from all link prefixes. The only IPv6 prefix that requires all interfaces on a link to have addresses from within it is the Link-Local prefix. A scenario I imagine is where two people are bringing up a Internet transit link between a service provider and a small enterprise. The small enterprise router has a default route towards the service provider. The service provider configures their link end with their /127, however the small enterprise overlooks it, because it isn't a routine task for them. As Internet access will work, it may appear that the link has been correctly configured with /127s at both ends. However, the ping-problem now exists with a "/127 link" due to the default route. This might sound a bit contrived, however the point is that humans are involved and can make errors, and to be assured that the /127 prefix mitigates the problem it is supposed to, human operators must check that both addresses are configured on the link, because IPv6 won't, and the link carrying transit traffic isn't a positive confirmation of /127 configuration correctness. So in this section it may be worth adding some text like: "If using a /127 prefix, configuration of each of the addresses within the /127 prefix, at each respective end of the link, must be actively validated by the network operator. A missing /127 address from one end of the link, with a local route pointing out that end of the link that covers the missing /127 address, such as a default route, causes a "ping-pong" scenario to exist for the missing /127 address. The link could still be successfully carrying transit traffic, and IPv6 will not report any errors, because IPv6 doesn't require or nor check to ensure all interfaces attached to a link has addresses from all prefixes assigned to the link, excepting the Link-Local prefix per [RFC 4291]." * Lack of full RFC 4861 ND implementation on point-to-point links The fundamental root cause of the ping-pong problem is some IPv6 implementations not performing full Neighbor Discovery (NS/NA) on addresses that the prefix says could exist on the link. IPv6 implementations are assuming that all addresses within the prefix must exist at the other end of the point-to-point link, and send the traffic straight onto the link. If the address doesn't exist, and there is a covering route back in the other direction, the ping-pong problem occurs. Full Neighbor Discovery is doing more than just resolving the link-layer address of an IPv6 address. Neighbor Discovery is also determining if the address exists. Even if a point-to-point link doesn't have link-layer addresses to resolve, ND determining if an address exists on the link is very beneficial because it will prevent the ping-pong problem occurring entirely regardless of the IPv6 prefix length being used on the link. So in my above SP and small enterprise example, the service provider router would try to ND NS for the missing far end /127, and if it doesn't successfully discover it's existence, then the SP router won't put packets onto the point-to-point link that would end up being ping-ponged. (I think this should be covered somewhere in this draft, but not necessarily directly after 3.2 above. Just convenient to put it here to use the SP / small enterprise example to demonstrate how performing full ND prevents ping-pong entirely.) * 4. Numbering Choices I don't think we should be referring to links as "numbered" or "unnumbered". If "numbers" are IPv6 addresses, all links are numbered, because RFC 4291 requires that all interfaces attached to a link have at least a Link-Local "number" or address from the Link-Local prefix. The principle of least surprise means that we need to be factual in our terminology and descriptions. I could imagine somebody who doesn't know IPv6 that well being surprised to discover their "unnumbered" link has numbers on it. They may even briefly panic because they think somebody breached their router security. An completely accurate and a most least surprising term for a link with interfaces that only has Link-Local Addresses is a "Link-Local Addresses Only" link, or "Link-Local Only" link. "Link-Local Only" is the also the abbreviated title of RFC 7404 "Using Only Link-Local Addressing inside an IPv6 Network", so using that term in this ID is consistent. * 4.1. GUA (Global Unicast Addresses) nit: extra "and" I think. "It provides full functionality for both <>and<> end-points of the point-to-point links and consequently, facilitates troubleshooting." probably should be: "It provides full functionality for both end-points of the point-to-point links and consequently, facilitates troubleshooting." * 4.2. ULA (Unique Local Addresses) "This approach may cause numerous problems and therefore is strongly discouraged." I'd suggest adding in "when carrying Internet traffic". It wouldn't cause any issues with PMTUD links carrying ULA traffic within the local ULA domain/ /48 prefix. i.e. "This approach may cause numerous problems when carrying Internet traffic and therefore is strongly discouraged." I think it would be worth referring to RFC 6752, "Issues with Private IP Addressing in the Internet", as it also services as more in depth discussion on this general issue, although from a private IPv4 addressing perspective. So something like: "ULAs are IPv6 private addresses, not intended to be used as source or destination addresses across the Internet. This issue also exists in IPv4 when using RFC 1918 addresses on links carrying IPv4 Internet traffic. [RFC 6752] discusses this issue for IPv4, with much of the discussion applying similarly to IPv6 and ULAs." "However, this approach is valid if, following Section 2.2 of [RFC4443], and despite using ULA for the point-to-point link, the router is configured with at least one GUA and the source of the ICMPv6 messages are always a GUA." I'd suggest referencing the IPv6 Default Address Selection RFC, as that is what will pick the GUA source address for a GUA destined ICMPv6 message. e.g. "However, this approach is valid if, following Section 2.2 of [RFC4443], and despite using ULA for the point-to-point link, the router is configured with at least one GUA and the source of the ICMPv6 messages are always a GUA, per the IPv6 Default Address Selection algorithm [RFC6724]." * 4.3. Unnumbered Per-above, replace "unnumbered" with "Link-Local Only" or similar and adjust the text to suit. "While this might work for routers, it does not work for devices that can't request a prefix delegation over DHCPv6 and are therefore left without any usable GUA to allow traffic forwarding." I'm a little confused by this. Is this describing a router can't do DHCPv6-PD and therefore would have only link-local addresses? Is the comment about not having a usable GUA preventing traffic forwarding really referring to the route not having an address that can be used for ICMPv6 messages that need to be sent across more than one link? If my understanding is correct, I think it might be better to say it that way, i.e. "The router will need to have a suitable routeable address, such as an appropriate GUA or ULA address, to use as a source for ICMPv6 messages." It's probably a bit of pedantry, however I expect a router with only link-local addresses will forward packets regardless, however if it needed to send an ICMPv6 message it would have no choice but to choose a link-local source address due to IPv6 Default Address Selection. I think they would be sent, however they should then be being dropped by the next router towards the destination. I can't think of much use for it, however I think it might be a valid configuration. IPv6 hosts are expected to deal with ICMPv6 packets being lost, so this would just be a perverse case of ICMPv6 packet loss. If the hosts either don't ever trigger PMTUD, or use RFC 4821 "Packetization Layer Path MTU Discovery" then a pure link-local only router setup might even work without issue. From nobody Mon Oct 14 20:29:47 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D572120077 for ; Mon, 14 Oct 2019 20:29:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.499 X-Spam-Level: X-Spam-Status: No, score=-0.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HR3q6Cw8_joH for ; Mon, 14 Oct 2019 20:29:44 -0700 (PDT) Received: from mail-oi1-x232.google.com (mail-oi1-x232.google.com [IPv6:2607:f8b0:4864:20::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62ADF120013 for ; Mon, 14 Oct 2019 20:29:44 -0700 (PDT) Received: by mail-oi1-x232.google.com with SMTP id i185so15515160oif.9 for ; Mon, 14 Oct 2019 20:29:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=2nqwOBEDoCyYzhGxwR/m3G8HSwHK6wTAV1k6nJsg/9U=; b=Fx6AMSy2uBhoVISp3g7jYnYcKdFCowXBJG+KcRFK3DZaadfM9GlLSJYiCfA0Csaqmb EhcjaJz4756qbwhw6PpyffzuBzlwi/4L9N0ktfY+PxrBre4oi2KeEV/ljUOjoV3aDyVY k6SSeu2ziHBnoPGF1aUEDyUsm/C0UCrOZVMDw/agUdgupU+Ou0pqIx1Sfm19RUg4A14m DhM3f1usRTVFaGWvBoPy6eGN9eqr5fCYudVimmDpVoGyn5eJvKdkwfoptrCtoJGol64l f6TSA0Tks74dQMw1VzA/WWnPFIUMJbfqEAe+5EQ9otYvWWCr8hhBMlZARznSjr+ayqt8 /PRw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=2nqwOBEDoCyYzhGxwR/m3G8HSwHK6wTAV1k6nJsg/9U=; b=JC6dYXrVDN7miPooQwgEynSUiw8qevKyUo5a634uMN9bZ8XoZ2XQhReNX+75dxpiTL MrpSjkPZ6tBivKq6BQdAOgfMzmOzBb32Jm3vjNPBot1Dt/gnw33BulpT5y5klZUnjEyk E52EXQT84/x9WqzMH3AHImi729lKDf2spS/qVYX9WV5uYzYajKqX629Zz4Cae2fj7P/4 c963UZLE4cZ06NZhLtphgGm8klzuXZv/UxYFiLMKGDdqlfwiUtIs9fHf9rLf4R2cCs5I XtwEQ6Xam2OB4gK6m3yUOOEmRck4v50u9RE85xk1GVaqiyronIE7Pmf7A9wsAMgTEM5E Q5AA== X-Gm-Message-State: APjAAAVKxblE4rpzGa8PBcNtiiiZ+XgS3pkCgFVbIUoN89YsvCUgTme2 rIDQkODowxstEx3YIv0fQDM4VCJpMr8mpQlHny2mdQ== X-Google-Smtp-Source: APXvYqzMbypkqaH5/Yo7H6OC16IPm6pvXgMfontS0qiILYeri2T2NioJs4CBvTocEaMnsw2oK7iFxAYBFgsM7B36RV4= X-Received: by 2002:a54:4198:: with SMTP id 24mr25829077oiy.164.1571110183477; Mon, 14 Oct 2019 20:29:43 -0700 (PDT) MIME-Version: 1.0 References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> In-Reply-To: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> From: Mark Smith Date: Tue, 15 Oct 2019 14:29:17 +1100 Message-ID: To: v6ops list Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 03:29:46 -0000 Hi All, Recently bought an IPv6 capable Wifi printer. As it is attached to my single Wifi SSID, it is also configuring IPv6 GUA addresses, even though it doesn't need or need to be reachable from the Internet in my use (i.e. I'm not using "cloud printing" or similar). I thought it would be better for these types of devices to only configure routeable addresses from the ULA address space by default, unless that is overridden. Comments most welcome. WG Chairs, I'm attending IETF-106, so I'd like a presentation slot for this. Thanks very much, Mark. ---------- Forwarded message --------- From: Date: Tue, 15 Oct 2019 at 14:24 Subject: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt To: Mark Smith A new version of I-D, draft-smith-v6ops-local-only-addressing-00.txt has been successfully submitted by Mark Smith and posted to the IETF repository. Name: draft-smith-v6ops-local-only-addressing Revision: 00 Title: Default IPv6 Local Only Addressing for Non-Internet Devices Document date: 2019-10-14 Group: Individual Submission Pages: 8 URL: https://www.ietf.org/internet-drafts/draft-smith-v6ops-local-only-addressing-00.txt Status: https://datatracker.ietf.org/doc/draft-smith-v6ops-local-only-addressing/ Htmlized: https://tools.ietf.org/html/draft-smith-v6ops-local-only-addressing-00 Htmlized: https://datatracker.ietf.org/doc/html/draft-smith-v6ops-local-only-addressing Abstract: For certain types or models of devices it should be clear and obvious that, by default, they should not be reachable from the global IPv6 Internet, or able to reach the global IPv6 Internet, even though the network they are attached to provides global IPv6 Internet connectivity. This memo proposes that these types of devices refuse to configure and use global IPv6 Internet addresses by default. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Mon Oct 14 20:33:27 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA12012006D for ; Mon, 14 Oct 2019 20:33:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qIoFSDYoVOmz for ; Mon, 14 Oct 2019 20:33:23 -0700 (PDT) Received: from mail-qt1-x82e.google.com (mail-qt1-x82e.google.com [IPv6:2607:f8b0:4864:20::82e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDA45120013 for ; Mon, 14 Oct 2019 20:33:22 -0700 (PDT) Received: by mail-qt1-x82e.google.com with SMTP id o12so28584320qtf.3 for ; Mon, 14 Oct 2019 20:33:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=tmwCG2/qY3zUx/CMOoKuAH6ssxo0uUZYoxvbrqiVfCk=; b=bOI7qe7sDXmCL9c2uuCawUDTWpHnLfi1Cnzl62Q2836iBZXX0BZXOrIMCGDc5H1ZY/ 7jaADu44XN/lrvDljE+3mhpb/S9aLbYLgzzUhPcJR7ckbI1gNMyp9i6Aw3coA6IIkmFK ashseD1Gn7x2bv7GVQmOdFob1BKpcQ8lP08yFONv0RvMKFMmwFEVd2/VBLrIdXuiM/cO a7YVQvj05WqbpQ6DeHH8xZIBUnl5Ec4jIjiB4zJFlxxEH7Y2ZIhx47z6byxSln2loykZ aWIdEMlmPTiFEIoqtKabiTrOFQwd/au5O/8vpq63tZ7cUChs5H+uUf8Qa2eAusN97d0T fNog== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=tmwCG2/qY3zUx/CMOoKuAH6ssxo0uUZYoxvbrqiVfCk=; b=AjffrWXeyxe/5X4WLOE4puGy/dSFwu86rlWS0hY4+mH3LAHhdt+/hQnzQ0NJ1cxrvA 6KXHkA2n5LGUkgo4VKNfANetBQJBUCPR/Hq8lyPUSlGhcxaKE5jqZXfVkeF9bE+FgHeL ytyRwQ/UrZ2pmVhcy4IgXVRdsG+FhlF9YwHgJFF806893gEaKh8/QuLRjAcNSE6SotxV Ye9LvW/muuXoa10i8orLqv2NeS4bgTi8pmzaQJxNK9hJX9X6yGNIg+RNKomcb1GWRDLU fIwa1iBbZJy1ppF08xfeSHItXvOs6azae2KmG9FqmiXZkDLl+GgSsfJ1TH8IQiXzmvP8 yTMg== X-Gm-Message-State: APjAAAVACrYgyK0nS0b5C3rJ/pyQRaHs+K4b4Y2PkmW1vJyz4X9v6h8w VA0LoCK7ZJ9pVqdjG7zelKELZw== X-Google-Smtp-Source: APXvYqwuQ0I1GA+0mtEolxWHHE5AjYwZc2ExqyNyhwWECRJ+6JLZS2cPAD1Lm3PP+WQMh//7jF27Wg== X-Received: by 2002:ac8:4052:: with SMTP id j18mr36326315qtl.281.1571110401974; Mon, 14 Oct 2019 20:33:21 -0700 (PDT) Received: from [10.0.10.46] (c-73-186-137-119.hsd1.ma.comcast.net. [73.186.137.119]) by smtp.gmail.com with ESMTPSA id g33sm9272323qtd.12.2019.10.14.20.33.21 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 14 Oct 2019 20:33:21 -0700 (PDT) From: Ted Lemon Message-Id: <9D4F9C86-6FF9-4BC6-993C-C6DDD70B5076@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_846A0935-DC17-47BC-A674-CF8FC9F3FA0B" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.4\)) Date: Mon, 14 Oct 2019 23:33:19 -0400 In-Reply-To: Cc: v6ops list To: Mark Smith References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> X-Mailer: Apple Mail (2.3601.0.4) Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 03:33:25 -0000 --Apple-Mail=_846A0935-DC17-47BC-A674-CF8FC9F3FA0B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 14, 2019, at 11:29 PM, Mark Smith wrote: > I thought it would be better for these types of devices to only > configure routeable addresses from the ULA address space by default, > unless that is overridden. How does the device know that it is =E2=80=9Cthat type of device?=E2=80=9D= Also, don=E2=80=99t you want it to fetch firmware updates? You should probably look at MUD=E2=80=94that=E2=80=99s a better approach = to this sort of problem, and doesn=E2=80=99t rely on address routability = as a proxy for access control. --Apple-Mail=_846A0935-DC17-47BC-A674-CF8FC9F3FA0B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 14, 2019, at 11:29 PM, Mark Smith <markzzzsmith@gmail.com> wrote:
I thought it would be better for these types of devices to = only
configure = routeable addresses from the ULA address space by default,
unless that = is overridden.

How does the device know that it is =E2=80=9Cthat type of = device?=E2=80=9D   Also, don=E2=80=99t you want it to fetch = firmware updates?

You should probably look at MUD=E2=80=94that=E2=80=99s a = better approach to this sort of problem, and doesn=E2=80=99t rely on = address routability as a proxy for access control.

= --Apple-Mail=_846A0935-DC17-47BC-A674-CF8FC9F3FA0B-- From nobody Tue Oct 15 01:11:22 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9AE3120071 for ; Tue, 15 Oct 2019 01:11:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8PpF3_KqlWIX for ; Tue, 15 Oct 2019 01:11:13 -0700 (PDT) Received: from mail-qt1-x82d.google.com (mail-qt1-x82d.google.com [IPv6:2607:f8b0:4864:20::82d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 88178120088 for ; Tue, 15 Oct 2019 01:11:13 -0700 (PDT) Received: by mail-qt1-x82d.google.com with SMTP id t20so23961065qtr.10 for ; Tue, 15 Oct 2019 01:11:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=0/82OCQeEoZL0W1mgBgiSv/cHtrKx2yjY3byPsc+Tao=; b=dQyL60VyDzp2j4Lpp8cFMxvpHUVdYsZHBxLaru8NxqZx5NDt6wuMrRzjlmcVj6LlvF 0ou8kWB6K+pYhzaHCERui5icz9BMkxd6UG/eckQuKr5oOBeH6sV4ESAlNiJwSyRvHtVF akuEV2TmXwGjRu1W/HhridwWfgK4VeBSz+R0g3r4e8XhRulUr5SclGsrs4nrMAP+wCv/ CVnyDDdP8GxACuDVp4boedxshJvVSXo3SpF23jO50P2jGUzmi+muFkAHqHIemwPfR2Ib 3AnK1XgDmSbX0l7TxgI3iqBGdk1Rncz6EivgjCHkEwBGbz9u5Ofa6Ths9B2v1MB0XSDj juMA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=0/82OCQeEoZL0W1mgBgiSv/cHtrKx2yjY3byPsc+Tao=; b=JNfQLC4caj1uapKlijkHIl1BmTBqKilUb5m//Ypp38dHeBhw8qFDo9f0TAkNglp3iR M4A3bEL/rPKdYXZC3Y+uD6+dKa2gNCh+WXC7vxj+mzWlBkuWp/K5f+9JhnZEm9PXR4r6 9ItzWTpHH2qYD6wWMzZ8bDdWvQTZXaDg2bWcClNKd7M0Iw/s20EDDcxM+ZItwbQ5yqiu hQ42eZI76NwgbKYuNLGKLfgiWCqo7KAaqolnSeHgf7mw0Q1zFQcFh4iX4DRwDPgEjDNr OLUU7EAoOSqbtgPMW1nCcFu3pxzwECD/XmONfs0bhPLG+FUF7PY9WSF9QgTjjEMvW48F ryzA== X-Gm-Message-State: APjAAAXAl4IoSrtoFWbNPGGu0ulEnLDrYbQYLWHWvCY1yh9uxP/19N1G w/voY6zHPJiv1e8LK0bnflWIg0fGMDuuTqKRTN2cFyfEEL4I2Q== X-Google-Smtp-Source: APXvYqyBIbrGT5vWE0kxDF8DtrTOzdVhKLOHtJsG4JpppQp/P510/yHs6zZj7CamYg/wAEsh3VAeGLB2ABOYm3SXc10= X-Received: by 2002:ac8:682:: with SMTP id f2mr37472188qth.149.1571127072427; Tue, 15 Oct 2019 01:11:12 -0700 (PDT) MIME-Version: 1.0 References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> In-Reply-To: From: Jen Linkova Date: Tue, 15 Oct 2019 19:11:00 +1100 Message-ID: To: Mark Smith Cc: v6ops list Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 08:11:15 -0000 On Tue, Oct 15, 2019 at 2:30 PM Mark Smith wrote: > Recently bought an IPv6 capable Wifi printer. As it is attached to my > single Wifi SSID, it is also configuring IPv6 GUA addresses, even > though it doesn't need or need to be reachable from the Internet in my > use (i.e. I'm not using "cloud printing" or similar). > > I thought it would be better for these types of devices to only > configure routeable addresses from the ULA address space by default, > unless that is overridden. The draft says '...when it is clear to a device manufacturer that a device should be isolated from the Internet by default..' I'm not sure it's possible to know that. Isolation from the Internet is the policy decision, not smth which is a function of the device type. I'm not sure that devices listed in the section 6 should by default be 'isolated from the Internet' - actually I believe otherwise. All those devices can be installed not just in a single-subnet home network but in SMB or enterprise-like networks. In that case reachability to/from global addresses would be required. > ---------- Forwarded message --------- > From: > Date: Tue, 15 Oct 2019 at 14:24 > Subject: New Version Notification for > draft-smith-v6ops-local-only-addressing-00.txt > To: Mark Smith > > > > A new version of I-D, draft-smith-v6ops-local-only-addressing-00.txt > has been successfully submitted by Mark Smith and posted to the > IETF repository. > > Name: draft-smith-v6ops-local-only-addressing > Revision: 00 > Title: Default IPv6 Local Only Addressing for Non-Internet Devices > Document date: 2019-10-14 > Group: Individual Submission > Pages: 8 > URL: > https://www.ietf.org/internet-drafts/draft-smith-v6ops-local-only-addressing-00.txt > Status: > https://datatracker.ietf.org/doc/draft-smith-v6ops-local-only-addressing/ > Htmlized: > https://tools.ietf.org/html/draft-smith-v6ops-local-only-addressing-00 > Htmlized: > https://datatracker.ietf.org/doc/html/draft-smith-v6ops-local-only-addressing > > > Abstract: > For certain types or models of devices it should be clear and obvious > that, by default, they should not be reachable from the global IPv6 > Internet, or able to reach the global IPv6 Internet, even though the > network they are attached to provides global IPv6 Internet > connectivity. This memo proposes that these types of devices refuse > to configure and use global IPv6 Internet addresses by default. > > > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops -- SY, Jen Linkova aka Furry From nobody Tue Oct 15 01:12:28 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D6E0C120071 for ; Tue, 15 Oct 2019 01:12:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gwihbiYeS8RI for ; Tue, 15 Oct 2019 01:12:25 -0700 (PDT) Received: from mail-qt1-x829.google.com (mail-qt1-x829.google.com [IPv6:2607:f8b0:4864:20::829]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C37421200A4 for ; Tue, 15 Oct 2019 01:12:25 -0700 (PDT) Received: by mail-qt1-x829.google.com with SMTP id u40so29265734qth.11 for ; Tue, 15 Oct 2019 01:12:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=vwQLwshkrXHbV3F6TkvZhroYvxzM1xAK0HhA3Rmai80=; b=XBgmyJLMIouu1oPQmUJcosTqwiZd+ZRCZC/cIpRg0fVXf4SfW2pU6Up7ffyXyW17e8 0k5SEf3tle1T5gjWTHaNQsypLoA7Ra5YaQBqGZTGr1rw5vxnuNd5CeeGmdb9pUS07Ow/ BYcGYJbrdh+UybivCVQXiIhP+BuIW/ts/3MiRpd/qUl6N98/moClp4XuwUnFMiTGwN8k do/uTOpcVSw55L51o8FXSceOZN3fklFW7+0ETEa546Kn4HM++IuSnEhu9gfKBRJNrVff vkOJZtwcnUVU2DwTkc3IvPohLsALoXro0XzgcK/GgNpEt5J323FWaoc+ChhRPjlyQ7ME AS2w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=vwQLwshkrXHbV3F6TkvZhroYvxzM1xAK0HhA3Rmai80=; b=h/hGQRN4FmIvVXCjFPrTakFNl7PP2oNuEBkVaY7cx5+oamkKpHAdg3N9uiHNqHY9UG KmNgF+Td4Wi56j3Dk9cra9BNZ6aAha8ugEA6DcRRzVX9ZHv8KXnjNtRhOmth1QloiF/C L8ZGaMSzCG/DBBdH7RAZfqSi8r0JNJNXFLxhAq0IOrTek9o4iM5X9HjUaVu20Pmw/mSc JDWQI2AjqiU8Txjaw7nVvM9qywLFEn6n02wWhZyxD19qkfZTRS5jOarTxXL5kku4gmJD Eq6kWOiRZc3lV5vWjRwkeCisWgi4MIK8Cg0VjwqExPcnUiaDaquq8vPNuwHxjCLD/F8G 85Bg== X-Gm-Message-State: APjAAAW2OewKaGdtgF833WERv5CHL2bkBdMBpl5PRrBp2ZGtiaWW90z9 BeJBUvw40BHljL93RZeI7vNl0XlVqOM2jXkiGsIneamkZkg= X-Google-Smtp-Source: APXvYqwhRoN7PcPI7/1urXwr1cd8Yz6Tk+a3ghqda3tAoktDs9gEYL/G8wVTNNW0kQ2JD2zv0qneBz76hOaTug3JZyU= X-Received: by 2002:ac8:705c:: with SMTP id y28mr6089253qtm.52.1571127144786; Tue, 15 Oct 2019 01:12:24 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Jen Linkova Date: Tue, 15 Oct 2019 19:12:13 +1100 Message-ID: To: Fred Baker Cc: v6ops list Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] IETF Working Group Agenda Analysis X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 08:12:27 -0000 On Tue, Oct 15, 2019 at 9:04 AM Fred Baker wrote= : > At IETF 105, Jen discussed draft-linkova-v6ops-nd-cache-init, and there w= as a lot of support for taking it as a working group draft. Bob Hinden, 6ma= n chair, commented that he would prefer that v6ops discuss operational issu= es, but protocol issues be discussed in 6man. Hence, Ron and I are looking = for a draft-ietf-v6ops-nd-cache-init that addresses the operational issues = raised in this draft, and Bob and Ole are looking for the protocol issues i= n a 6man draft. Those balls are in Jen's court, but I suspect she would app= reciate any help folks want to offer. Almost done with the new version, sorry about the delay, will submit before the deadline most definitely! --=20 SY, Jen Linkova aka Furry From nobody Tue Oct 15 01:15:58 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33FAB120088 for ; Tue, 15 Oct 2019 01:15:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4iUwmOUDu6ap for ; Tue, 15 Oct 2019 01:15:55 -0700 (PDT) Received: from mobil.space.net (mobil.space.net [195.30.115.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6222A120071 for ; Tue, 15 Oct 2019 01:15:55 -0700 (PDT) X-Original-To: v6ops@ietf.org Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id BC53442799 for ; Tue, 15 Oct 2019 10:15:53 +0200 (CEST) X-SpaceNet-Relay: true X-SpaceNet-Relay: true X-SpaceNet-Relay: true Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id AFD8F42797; Tue, 15 Oct 2019 10:15:53 +0200 (CEST) Received: by moebius4.space.net (Postfix, from userid 1007) id A83286D424; Tue, 15 Oct 2019 10:15:53 +0200 (CEST) Date: Tue, 15 Oct 2019 10:15:53 +0200 From: Gert Doering To: Jen Linkova Cc: Mark Smith , v6ops list Message-ID: <20191015081553.GO55186@Space.Net> References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-NCC-RegID: de.space User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 08:15:57 -0000 Hi, On Tue, Oct 15, 2019 at 07:11:00PM +1100, Jen Linkova wrote: > The draft says '...when it is clear to a device manufacturer that a > device should be isolated from the Internet by default..' I'd say that most devices built by manufacturers today SHOULD be isolated from the Internet... but I'm afraid that *manufacturers* are never going to agree that their shiny new toys are not mature enough... Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279 From nobody Tue Oct 15 08:02:22 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 508A1120802 for ; Tue, 15 Oct 2019 08:02:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=shytyi.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hl6cWh4O32da for ; Tue, 15 Oct 2019 08:02:17 -0700 (PDT) Received: from sender11-of-o52.zoho.eu (sender-of-o52.zoho.eu [31.186.226.248]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD47B12010F for ; Tue, 15 Oct 2019 08:02:15 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1571151730; cv=none; d=zohomail.eu; s=zohoarc; b=Ch3JpOUAfRYj5VzQ5+JX99YFrIXdeS+oduJAZetlnFMqMQ7CsnBRpGX+QVCh0a0+01R4cJCdPY8R9LPzv282xpEJAq7884O7n0bTvb85idqPTctcUsr36dXXzEKhCJOV9yjoLf3/w+xFyMwVmgVM8A+40vTbAVHKAAWdMExD3CY= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.eu; s=zohoarc; t=1571151730; h=Content-Type:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results; bh=MEX358J+OtrTjozt5ryp1n43bUmM9Kp8QwrtyHNoGCg=; b=ftOWr8y/hfJ/G8KrXIlbRdSxwArsiREoXOePjhR2hhhJqXliOaK5560GYtxpFYr/5ZmozVTvQMmUsB+bocFu84uObJKOPTZ2wNEFDZUft5KzABq8MwcbF+DE/iGghBByxf12/NPJX/6EIa3p7Ud75dNYKq5KI6EyEqd2eLlVefo= ARC-Authentication-Results: i=1; mx.zohomail.eu; dkim=pass header.i=shytyi.net; spf=pass smtp.mailfrom=ietf.dmytro@shytyi.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1571151730; s=hs; d=shytyi.net; i=ietf.dmytro@shytyi.net; h=Date:From:To:Cc:Message-Id:In-Reply-To:References:Subject:MIME-Version:Content-Type; l=3984; bh=MEX358J+OtrTjozt5ryp1n43bUmM9Kp8QwrtyHNoGCg=; b=CKRXBSifhbAoJma0Pw6d3fMbNCQh/n8i1M+fVez1kABnYWwglWbtr6wUSTMkKtn0 jjJsFGSBcHUkTpANr0nDNNOrptvFasPFy1Tj8kSCln42kspwimCp4Ijp5ZnjTsVmLqa 7uonuRinmZ6wdKdc1v20IAG1wbAAGas3huYhHWrg= Received: from sender.zoho.eu (172.26.23.31 [172.26.23.31]) by mx.zoho.eu with SMTPS id 1571151730215340.3932878234301; Tue, 15 Oct 2019 17:02:10 +0200 (CEST) Received: from mail.zoho.eu by mx.zoho.eu with SMTP id 1571151730115605.9374954758887; Tue, 15 Oct 2019 17:02:10 +0200 (CEST) Date: Tue, 15 Oct 2019 17:02:10 +0200 From: Dmytro Shytyi To: "Gert Doering" Cc: "Jen Linkova" , "v6ops list" Message-Id: <16dcff0d5c1.ccf1d708118262.791262979954754844@shytyi.net> In-Reply-To: <20191015081553.GO55186@Space.Net> References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> <20191015081553.GO55186@Space.Net> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_330810_1609086823.1571151730114" X-Priority: Medium User-Agent: Zoho Mail X-Mailer: Zoho Mail X-ZohoMailClient: External Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 15:02:21 -0000 ------=_Part_330810_1609086823.1571151730114 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Hello, >From the point when device is connected to the internet it becomes a Node that could be reached outside by external users. The firmware of such devices is updated not that frequenly. It could be dangerous. >From the point I put my device in DMZ in few moments i see in the log the "Access denied via ssh for user root". Thus, I think, it is an important thing the authors of the draft highlight. ______________ Dmytro SHYTYI ---- On Tue, 15 Oct 2019 10:15:53 +0200 Gert Doering wrote ---- Hi, On Tue, Oct 15, 2019 at 07:11:00PM +1100, Jen Linkova wrote: > The draft says '...when it is clear to a device manufacturer that a > device should be isolated from the Internet by default..' I'd say that most devices built by manufacturers today SHOULD be isolated from the Internet... but I'm afraid that *manufacturers* are never going to agree that their shiny new toys are not mature enough... Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279 _______________________________________________ v6ops mailing list mailto:v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops ------=_Part_330810_1609086823.1571151730114 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable =
Hello,

From the point= when device is connected to the internet it becomes a Node that could be r= eached outside by external users.
The firmware of such device= s is updated not that frequenly. It could be dangerous.
From the = point I put my device in DMZ in few moments i see in the log the "Access de= nied via ssh for user root".
Thus, I think, it is an importan= t thing the authors of the draft highlight.
______________
= Dmytro SHYTYI


---- On Tue, 15 Oct 2019 10:15:53 +0200 Gert Doering = <gert@space.net> wrote ----

Hi,

On Tue, Oct 15, 2019 at 07:11:00PM +1100, Jen L= inkova wrote:
> The draft says '...when it is clear to a device manu= facturer that a
> device should be isolated from the Internet by def= ault..'

I'd say that most devices built by manufacturers today SHO= ULD be
isolated from the Internet... but I'm afraid that *manufacturer= s*
are never going to agree that their shiny new toys are not mature enough...

Gert Doering
-- NetMaster
--
have you ena= bled IPv6 on something today...?

SpaceNet AG = Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14= Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen = HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444 U= St-IdNr.: DE813185279

____________________________________________= ___
v6ops mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops


------=_Part_330810_1609086823.1571151730114-- From nobody Tue Oct 15 08:14:07 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E50C120803 for ; Tue, 15 Oct 2019 08:13:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e9vmlm2PCTnG for ; Tue, 15 Oct 2019 08:13:56 -0700 (PDT) Received: from mail-qk1-x72e.google.com (mail-qk1-x72e.google.com [IPv6:2607:f8b0:4864:20::72e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53003120857 for ; Tue, 15 Oct 2019 08:13:56 -0700 (PDT) Received: by mail-qk1-x72e.google.com with SMTP id h126so19490602qke.10 for ; Tue, 15 Oct 2019 08:13:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=WdssGuf26Ki9b9l/XXLtMWSXPRtz2hg+cBwZ9lFQgMk=; b=kJTOuTCKCMo1Gd8WrHTnSzbi/b8lCLnsBx/vpsyn/HbJe9BSIfQVuVXMnAbvtDHISM GQvGM1uATJ3tqpIZUF95jyXGkPhxYu1INN7dj/+Dpe72tNjLlH6OywCd4aaxQUIglKT4 PJ3vYfdzlni36irKq6uoVV4ZhcmB8ua9MsWGLdP+7N36U3hfQ9FM1vKr/v8bk5DNWHhI ktVBfwVAW2zCf1+cdWWkQr1h6gCjGrMxOmUEcFJtIxs+iVOmM9LAns2yG09HyOMSzI8i R4P7HdLpxGGyV46B2Phd8KMy+1y2fVgyFZoIjvaQTPgArVdU7iugivTgmlNbVU0h0YYp 3lHQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=WdssGuf26Ki9b9l/XXLtMWSXPRtz2hg+cBwZ9lFQgMk=; b=eY/8neqQISqsl4WXq3ICMHBqsjhlYL2oneTlGg4J10DleKJt/lTcQ+ZoVfIBfOplGR ufDHqHAKzIcz1KcKb5amYlftFcm7LFzoSuuIaeAc+7QkJHTVnUrHPZxa9Sr9qT9v/Sdj q/fViTkkgWx7zZvD4QvWq4KLcFFtEYS3LnH8QkxE0vNYI0GwRHlhmdkjvP5i4mznzTsf BuNFLiUsjSQpdBVrmW2ULbG8KlS7uI979BnvFfRj2FsSUoPqdivPoJ9PGBzRMEpbqhmF m5WPZrTRNUQqoIbnJ7QxauYSof87pq3z34xLGsXsDShHXDGGjOglK2h4rvW6MSQu5Uek XAiw== X-Gm-Message-State: APjAAAVoYYv6IPbyvApCiWvzamxGyI+e8pqY5clZ4ObuPgNvZp1QXZI6 JmDPPq0BIb+YfMtOx3DPCxruNg== X-Google-Smtp-Source: APXvYqxTctuyGH0cGR9Qyr5o/L4sMy0Gq+67Un/91z4rBRB2AcXHeqU64maUPAG58qmTgcGCgpFo8g== X-Received: by 2002:ae9:f714:: with SMTP id s20mr35010827qkg.262.1571152435223; Tue, 15 Oct 2019 08:13:55 -0700 (PDT) Received: from [10.0.10.46] (c-73-186-137-119.hsd1.nh.comcast.net. [73.186.137.119]) by smtp.gmail.com with ESMTPSA id f27sm9683504qtv.85.2019.10.15.08.13.54 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 15 Oct 2019 08:13:54 -0700 (PDT) Content-Type: multipart/alternative; boundary="Apple-Mail=_2AE200C9-6BF8-47A5-86BF-A8CF8526F1D6" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.4\)) From: Ted Lemon X-Priority: Medium In-Reply-To: <16dcff0d5c1.ccf1d708118262.791262979954754844@shytyi.net> Date: Tue, 15 Oct 2019 11:13:53 -0400 Cc: Gert Doering , v6ops list Message-Id: <5CD8E0C6-7EF5-472D-B7EE-4CCD0D9B104E@fugue.com> References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> <20191015081553.GO55186@Space.Net> <16dcff0d5c1.ccf1d708118262.791262979954754844@shytyi.net> To: Dmytro Shytyi X-Mailer: Apple Mail (2.3601.0.4) Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 15:14:06 -0000 --Apple-Mail=_2AE200C9-6BF8-47A5-86BF-A8CF8526F1D6 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 15, 2019, at 11:02 AM, Dmytro Shytyi = wrote: > =46rom the point when device is connected to the internet it becomes a = Node that could be reached outside by external users. > The firmware of such devices is updated not that frequenly. It could = be dangerous. True. > =46rom the point I put my device in DMZ in few moments i see in the = log the "Access denied via ssh for user root". Yes, we all see these sorts of things. > Thus, I think, it is an important thing the authors of the draft = highlight. The problem is that this is not really a good way to solve the problem, = and I=E2=80=99d be surprised if anyone implemented it. If you and/or = the authors want to work on this problem, I think that would be = worthwhile, but I think you need to think about a different solution. = That=E2=80=99s why I suggested that you look at the work that is being = done with MUD (e.g., RFC 8520). --Apple-Mail=_2AE200C9-6BF8-47A5-86BF-A8CF8526F1D6 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 15, 2019, at 11:02 AM, Dmytro Shytyi <ietf.dmytro@shytyi.net> wrote:
=46rom the point when device is connected to the = internet it becomes a Node that could be reached outside by external = users.
The firmware of such devices is updated not that = frequenly. It could be dangerous.

True.

=46rom the point I put my device in DMZ in few moments = i see in the log the "Access denied via ssh for user root".

Yes, we = all see these sorts of things.

Thus, I think, it is an important thing the authors of = the draft highlight.

The problem is that this is not really a good way to solve = the problem, and I=E2=80=99d be surprised if anyone implemented it. =  If you and/or the authors want to work on this problem, I = think that would be worthwhile, but I think you need to think about a = different solution.   That=E2=80=99s why I = suggested that you look at the work that is being done with MUD (e.g., = RFC 8520).

= --Apple-Mail=_2AE200C9-6BF8-47A5-86BF-A8CF8526F1D6-- From nobody Tue Oct 15 12:07:00 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8A7A120123 for ; Tue, 15 Oct 2019 12:06:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z-UwKoAdFtZN for ; Tue, 15 Oct 2019 12:06:55 -0700 (PDT) Received: from frogstar.hit.bme.hu (frogstar.hit.bme.hu [IPv6:2001:738:2001:4020::2c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F26D2120046 for ; Tue, 15 Oct 2019 12:06:54 -0700 (PDT) Received: from [192.168.43.80] (netacc-gpn-7-159-102.pool.telenor.hu [176.77.159.102]) (authenticated bits=0) by frogstar.hit.bme.hu (8.15.2/8.15.2) with ESMTPSA id x9FJ6iEZ057916 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 15 Oct 2019 21:06:50 +0200 (CEST) (envelope-from lencse@hit.bme.hu) X-Authentication-Warning: frogstar.hit.bme.hu: Host netacc-gpn-7-159-102.pool.telenor.hu [176.77.159.102] claimed to be [192.168.43.80] To: v6ops@ietf.org References: From: =?UTF-8?Q?G=c3=a1bor_LENCSE?= Message-ID: Date: Tue, 15 Oct 2019 21:06:39 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-Virus-Scanned: clamav-milter 0.101.2 at frogstar.hit.bme.hu X-Virus-Status: Clean Received-SPF: pass (frogstar.hit.bme.hu: authenticated connection) receiver=frogstar.hit.bme.hu; client-ip=176.77.159.102; helo=[192.168.43.80]; envelope-from=lencse@hit.bme.hu; x-software=spfmilter 2.001 http://www.acme.com/software/spfmilter/ with libspf2-1.2.10; X-DCC--Metrics: frogstar.hit.bme.hu; whitelist X-Scanned-By: MIMEDefang 2.79 on 152.66.248.44 Archived-At: Subject: Re: [v6ops] IETF Working Group Agenda Analysis X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 19:06:58 -0000 Dear Fred, Thank you for taking care for all drafts, including our one: >> 2019-07-06 draft-lmhp-v6ops-transition-comparison (tracker) (HTML) (thread) (diffs) Unfortunately I cannot promise a significant update until the cut date of IETF 106. However, I do not want to abandon it at all, and I plan to add a section about the performance analysis of the 5 IPv4aaS technologies according to the methodology described in RFC 8219. Although our results are not visible yet, several people are working on this topic. When I was in Japan, I did SIIT (also called stateless NAT64) performance measurements, by which I tested the feasibility of the benchmarking methodology described in RFC 8219. Unfortunately, the DPDK based measurement program written by my PhD student proved to be completely unusable, and though I could do some quick fix and I could use it in a limited way, I decided to completely re-implement it. Now, I am very close to finish it and release siitperf as a free software. Since September, I have an MSc student, who is working on an RFC 8219 compliant DS-Lite Tester. He has experience in DPDK, and I hope that he can do it in one semester. (Perhaps, he will extend his tester for the other technologies in the next semester, but it is his decision, if he is willing to do so.) I also have two new PhD students: one of them focuses on the comparison of the 5 IPv4aaS technologies in several aspects, and the other one deals with the security issues of IPv6 transition technologies. So even slowly, but we are progressing. I plan to include some of our results into our draft before IETF 107. Best regards, Gábor From nobody Tue Oct 15 22:45:09 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D783712006F for ; Tue, 15 Oct 2019 22:45:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OfsI4ZBnBZd7 for ; Tue, 15 Oct 2019 22:45:04 -0700 (PDT) Received: from mail-pg1-x52f.google.com (mail-pg1-x52f.google.com [IPv6:2607:f8b0:4864:20::52f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D732120048 for ; Tue, 15 Oct 2019 22:45:04 -0700 (PDT) Received: by mail-pg1-x52f.google.com with SMTP id p12so4252012pgn.6 for ; Tue, 15 Oct 2019 22:45:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=WK/Z8URxcGRY5Wpps15qKOmgj+nhZy2oTFWc0PMhOLg=; b=tyjxBA6vkwbTLOuMyr3xGi8mQIaDN9FwXcvnqb8Veh2gixD6jUrq8FyznHzkprjLfw VA1dVigNUoHlkiIV7x2JEGnNL2fMJXzOt1nWrIKuLXtJDz+0SjsVcErw+jGaZWgwiV8l CsUwGqIyO7GhAwY5K7CHIKQVoLbE1fQc6NEjAiVdKipsDAhBwJ6L02Z9KQ48YBZrD4+j J7CBmuwAnKyHiQqEfkizUG70mhRSMnbyYa+2oKAIJ+pTvFGnKExbkZHpBxRbR7YCCedo jXhJIg0fDsQe9yBP3QfIY6/NEBHp49ZSRF0zXlkD9D2WZBCbFgc46I1H/as/JkiWukHm UuBg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=WK/Z8URxcGRY5Wpps15qKOmgj+nhZy2oTFWc0PMhOLg=; b=aDYwLeibzyyxEbkrr8yPKV22iTDz7My3Vswq+jX6ltQG6kXq4+MqqbuxgrOxF7FtJA K5QUGaUUAF337pe3iIjCBDQRk638ERY8+yo2A+DYS1PD1JSVBWN/FXdNIWkHmJM6kum9 tYse6JbdJ5BHywsS/BUa3LU2KN4SNjcneQxOlZjOKAi5HystIt66ynOn+8vMn7YVQ0Ah gf6t80Sqx7xpIRwm5oGqa/DjNZ65YALY3+h1c8ZuQ5NOdmrwOO/+4wXiImBGBTg2j3dK OXV6NdEefeF3Qpnxjr4PGpDuPYtWDit99IRFkSHpkJ5KUwZk4Eis6M++8hEwhfCC6sIH ar6g== X-Gm-Message-State: APjAAAVFlFbRplKLMlNK5jkx83ek6nizabqAtOuJbAhNm0ZS+QOILsQu g5lP0C0gafdyrRCts5bp8NvfSe1a X-Google-Smtp-Source: APXvYqwAgwXP9tWA7aUCoMtIp6QshzfloPDf7YzVi83R7PdG0o9YfXwT8Dxrmj1jdkjdlgel02viCg== X-Received: by 2002:a63:fe56:: with SMTP id x22mr43020691pgj.282.1571204703966; Tue, 15 Oct 2019 22:45:03 -0700 (PDT) Received: from [192.168.1.11] (ip70-185-147-118.sb.sd.cox.net. [70.185.147.118]) by smtp.gmail.com with ESMTPSA id z21sm22319846pfa.119.2019.10.15.22.45.02 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 15 Oct 2019 22:45:02 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601\)) From: Fred Baker In-Reply-To: Date: Tue, 15 Oct 2019 22:45:01 -0700 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <273D84A2-04D1-4BD7-87E6-7646C95D8955@gmail.com> References: To: =?utf-8?Q?G=C3=A1bor_LENCSE?= X-Mailer: Apple Mail (2.3601) Archived-At: Subject: Re: [v6ops] IETF Working Group Agenda Analysis X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Oct 2019 05:45:08 -0000 Looking forward to the update and the results. > On Oct 15, 2019, at 12:06 PM, G=C3=A1bor LENCSE = wrote: >=20 > Dear Fred, >=20 > Thank you for taking care for all drafts, including our one: >=20 >>> 2019-07-06 draft-lmhp-v6ops-transition-comparison (tracker) = = (HTML) = = (thread) = (diffs) = >=20 > Unfortunately I cannot promise a significant update until the cut date = of IETF 106. However, I do not want to abandon it at all, and I plan to = add a section about the performance analysis of the 5 IPv4aaS = technologies according to the methodology described in RFC 8219. >=20 > Although our results are not visible yet, several people are working = on this topic. When I was in Japan, I did SIIT (also called stateless = NAT64) performance measurements, by which I tested the feasibility of = the benchmarking methodology described in RFC 8219. Unfortunately, the = DPDK based measurement program written by my PhD student proved to be = completely unusable, and though I could do some quick fix and I could = use it in a limited way, I decided to completely re-implement it. Now, I = am very close to finish it and release siitperf as a free software. >=20 > Since September, I have an MSc student, who is working on an RFC 8219 = compliant DS-Lite Tester. He has experience in DPDK, and I hope that he = can do it in one semester. (Perhaps, he will extend his tester for the = other technologies in the next semester, but it is his decision, if he = is willing to do so.) >=20 > I also have two new PhD students: one of them focuses on the = comparison of the 5 IPv4aaS technologies in several aspects, and the = other one deals with the security issues of IPv6 transition = technologies. >=20 > So even slowly, but we are progressing. I plan to include some of our = results into our draft before IETF 107. >=20 > Best regards, >=20 > G=C3=A1bor >=20 >=20 > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops From nobody Tue Oct 15 22:51:26 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0113412006F for ; Tue, 15 Oct 2019 22:51:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VO-u3BWFfHrF for ; Tue, 15 Oct 2019 22:51:21 -0700 (PDT) Received: from mail-pg1-x533.google.com (mail-pg1-x533.google.com [IPv6:2607:f8b0:4864:20::533]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 88982120048 for ; Tue, 15 Oct 2019 22:51:21 -0700 (PDT) Received: by mail-pg1-x533.google.com with SMTP id e15so5583373pgu.13 for ; Tue, 15 Oct 2019 22:51:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=d0D5E7mNe/7sph0GKUBv+QoD+QpgGlwipt5NgwtZ/vI=; b=WFvFpl/ISoqSzBETFom+BdWAEZ2hwYgNQ3GjKsdutlWDdvQPoXfImqMBJZOi+gyMo2 33cFIa3Acf9M3lX6aVHUJKlhh14AP8CAisRjNOa2DYis0EXFtEWWLhJonDF4mu4zXUhm BY+WkDzwOqyejYzDWJpGMqQMzwdPWK8o+pzJZb+ZBlyFHaSpnVFRTxMtDl0jlsysuNP6 C3A1wlkBT4oJsjveljmJqhiqJOn0690jqj3/1W/fWwCgRd8bgLqrXSTTfWSM6+rbPQiM wfOb9Nl116uCigWds9lls2YO52yM/Jl5OCLp6+MGuwDevTbrQt/fwogPWkTE/azd+2aD 2UXg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=d0D5E7mNe/7sph0GKUBv+QoD+QpgGlwipt5NgwtZ/vI=; b=UOB6NTUdNR1iOA/lcLtGbd+LIXGQaDR0f9ruz3Ub8AIQH0BGeeviv63ye3e6vydE14 WfcDH6VMi/+c7j92j98Zploq45KEojMwqjo52fsPAgLe25wI61U9ivQvOWIGyK3kYBoh Lkeil+wzmXz74F09srTV5Jw0q0M7G06Tvze6Fd4wEQ2H7vOL/Fn4cYG4PkDi8CTLjh0K IXg4HgWJWJ/gl7DzRzn6Qm+K86Xq31+VEnSC9lvHiKTxpFeARI+f/s3NS+jwZcQAOD3+ DItEAFflhsOmUF/qYLafsGECtGVRiOzBVsA0/m8dAgj7MWu6w/Trq1MyIw9XkiEwLKpt DIqg== X-Gm-Message-State: APjAAAWntZY+rJgdY+lC133cJEvZRUe8XXD4QRP4MeG7zu4hf1AJQ5Dg Qgbt8qxkMlP4FJ6lRLU89FM= X-Google-Smtp-Source: APXvYqzHly37/SwMpBR4Xbc570STAWFKhvMi0y4hRWY2jIj33wHEpugb09pBV3/fYZXT3S5nuGclWg== X-Received: by 2002:a63:e802:: with SMTP id s2mr5803940pgh.188.1571205080980; Tue, 15 Oct 2019 22:51:20 -0700 (PDT) Received: from [192.168.1.11] (ip70-185-147-118.sb.sd.cox.net. [70.185.147.118]) by smtp.gmail.com with ESMTPSA id s97sm1146271pjc.4.2019.10.15.22.51.20 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 15 Oct 2019 22:51:20 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601\)) From: Fred Baker In-Reply-To: Date: Tue, 15 Oct 2019 22:51:19 -0700 Cc: v6ops list Content-Transfer-Encoding: quoted-printable Message-Id: References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> To: Mark Smith X-Mailer: Apple Mail (2.3601) Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Oct 2019 05:51:24 -0000 > On Oct 14, 2019, at 8:29 PM, Mark Smith = wrote: >=20 > Hi All, >=20 > Recently bought an IPv6 capable Wifi printer. As it is attached to my > single Wifi SSID, it is also configuring IPv6 GUA addresses, even > though it doesn't need or need to be reachable from the Internet in my > use (i.e. I'm not using "cloud printing" or similar). >=20 > I thought it would be better for these types of devices to only > configure routeable addresses from the ULA address space by default, > unless that is overridden. >=20 > Comments most welcome. >=20 > WG Chairs, I'm attending IETF-106, so I'd like a presentation slot for = this. As always, I'm looking for a posted draft, and I'm looking for = supportive working group commentary when it is posted. When you post it, = you will get an email from the secretariat. I'd suggest you "reply" to = it, but retrain it to v6ops@, describe your intentions, and request = comments. > Thanks very much, > Mark. >=20 > ---------- Forwarded message --------- > From: > Date: Tue, 15 Oct 2019 at 14:24 > Subject: New Version Notification for > draft-smith-v6ops-local-only-addressing-00.txt > To: Mark Smith >=20 >=20 >=20 > A new version of I-D, draft-smith-v6ops-local-only-addressing-00.txt > has been successfully submitted by Mark Smith and posted to the > IETF repository. >=20 > Name: draft-smith-v6ops-local-only-addressing > Revision: 00 > Title: Default IPv6 Local Only Addressing for Non-Internet = Devices > Document date: 2019-10-14 > Group: Individual Submission > Pages: 8 > URL: > = https://www.ietf.org/internet-drafts/draft-smith-v6ops-local-only-addressi= ng-00.txt > Status: > = https://datatracker.ietf.org/doc/draft-smith-v6ops-local-only-addressing/ > Htmlized: > https://tools.ietf.org/html/draft-smith-v6ops-local-only-addressing-00 > Htmlized: > = https://datatracker.ietf.org/doc/html/draft-smith-v6ops-local-only-address= ing >=20 >=20 > Abstract: > For certain types or models of devices it should be clear and = obvious > that, by default, they should not be reachable from the global IPv6 > Internet, or able to reach the global IPv6 Internet, even though the > network they are attached to provides global IPv6 Internet > connectivity. This memo proposes that these types of devices refuse > to configure and use global IPv6 Internet addresses by default. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops From nobody Tue Oct 15 22:54:42 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F73912006F for ; Tue, 15 Oct 2019 22:54:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tOFkIb8BmKLQ for ; Tue, 15 Oct 2019 22:54:38 -0700 (PDT) Received: from mail-pg1-x531.google.com (mail-pg1-x531.google.com [IPv6:2607:f8b0:4864:20::531]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E919120048 for ; Tue, 15 Oct 2019 22:54:38 -0700 (PDT) Received: by mail-pg1-x531.google.com with SMTP id p1so13597384pgi.4 for ; Tue, 15 Oct 2019 22:54:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=I30xC7FutK4ZYpWzeD9022LDcYQgFE9j7dfv16eegaw=; b=hQFxfoMidjYSo7uzsl8rMThF1K6di2MsbkedciF/bxCjp+7/UdIwC4HRE28X7+kxYf p/7KiyEB14FcUFMnmmWvZL8ZuNDbQJc+r2VrCIf20wCReoATUjBjODqG7HSOXoiMpOXG NsttrufhxTchWqCEWhLpCFcjd7U0ltRTMG0k0H925eG7JnKFg66WeQA4xA4I6svvgsRx oL1/HOY5t+JUHW/AeF2/QXO+LKjR0DjICmGFszxRWrXbVlpAm/+x7jYwATHh1S4j3N2E /MdLdyvPOoaUIN9/jn0L22h4AmUcoy/dDZ3amCZAzylCtJ+Du5kBc+zGWp024azltgSC zopg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=I30xC7FutK4ZYpWzeD9022LDcYQgFE9j7dfv16eegaw=; b=FIN4i3f5ivRpnwX5Zo1getXxlyZQzzYbXJesfXmUsu7zcuj8JR3gvrLdWMO303yQ+d z0UtRt6lrU5clzPOySj2rLgKWupFqf5VDw/kAdN4i3dAYKuGf2WrwwLr/8YC0U89+IFY Ru3bB+W0SKGBtP6JRMGkUOv0PoJY9wI+2pR0BccJfqy7GBCrlJC4anSIt+LUTyuZfAWI Fw+byT0ol4c+Vz+rZh6CiozqkoAAHnvxSPbWJ1neWoacvaH+nOQtJYKk3FT7jwhqTAbZ yRJTHZ3G9/wQk/en+yoFo7LI6Hu/kPYxzZVO57V7atlQO5S/ytcmq5u/0BkfUU2uuv5I gWnw== X-Gm-Message-State: APjAAAX7dZ4cZjwjNnFqf8O5sufsJOteDA7qKsFcGjQnXpopHnyr1HRW tArHThWuAeXAhqMoSOjLjqU= X-Google-Smtp-Source: APXvYqyNFN0a1BGy+Ur2sN4srp24LlhL0QoWxR1S+Vw2tPF3SyYW1BDfhgUhqz4uJIu0MRtqWjedWQ== X-Received: by 2002:a62:b419:: with SMTP id h25mr141107pfn.52.1571205278092; Tue, 15 Oct 2019 22:54:38 -0700 (PDT) Received: from [192.168.1.11] (ip70-185-147-118.sb.sd.cox.net. [70.185.147.118]) by smtp.gmail.com with ESMTPSA id v3sm23036985pfn.18.2019.10.15.22.54.37 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 15 Oct 2019 22:54:37 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601\)) From: Fred Baker In-Reply-To: Date: Tue, 15 Oct 2019 22:54:36 -0700 Cc: Mark Smith , v6ops list Content-Transfer-Encoding: quoted-printable Message-Id: <1E853367-E538-4C30-9689-3075BFB1D64F@gmail.com> References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> To: Jen Linkova X-Mailer: Apple Mail (2.3601) Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Oct 2019 05:54:41 -0000 > On Oct 15, 2019, at 1:11 AM, Jen Linkova wrote: >=20 > The draft says '...when it is clear to a device manufacturer that a > device should be isolated from the Internet by default..' > I'm not sure it's possible to know that.=20 It *is* possible for the device to prevent its packets from going = elsewhere, assuming routers and proxies behave according to the rules = and people aren't translating. That is a defined function of ULAs and = Link-Local addresses.= From nobody Tue Oct 15 23:10:23 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C62312006F for ; Tue, 15 Oct 2019 23:10:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.987 X-Spam-Level: X-Spam-Status: No, score=-1.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 066k16JVAadr for ; Tue, 15 Oct 2019 23:10:18 -0700 (PDT) Received: from mail-pf1-x42d.google.com (mail-pf1-x42d.google.com [IPv6:2607:f8b0:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 531FF120048 for ; Tue, 15 Oct 2019 23:10:18 -0700 (PDT) Received: by mail-pf1-x42d.google.com with SMTP id b128so14034865pfa.1 for ; Tue, 15 Oct 2019 23:10:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=xgho42inWfH7k74DWdLfTYT+XKzRStNdj/j8ABnN+x8=; b=ELihlnDtoqSR88wOlapMkO/Q3e3nhM8hHl1+kZOUJxEcLZrsKaHC7FtM94XUVeTJB0 w/AAOsX0clZKkjl3qOzSCxXGJcKPmOAz0LMRLfKkqVKnWSkb9gWVDtbHQEyb2JUqDQ5R +W8nTlnsphL+zPada2ftpipEpykSYHczX5X2AwuZBoAixRyTjb645tqWY8OkNpuAosT6 hwQGKUfqik8d62EIKdGJldhR76/Ln5t2imifgadHwEsMUiUH78MUy8HoMkvJoWmJk1ob knkUr6FC1UVOeflOtGwajRpNe7uPljy6w/och3Tjlsr/rKHCJvxX1KFVJ7qV5PMwO6cx sRig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=xgho42inWfH7k74DWdLfTYT+XKzRStNdj/j8ABnN+x8=; b=uSdAmraG9SGL7ey+sNo/DHDVI+hJVF7kISLCDtxoVS67DXfgAl4kGuOrbeeRPUC/Cr gopgIoprtv1ZQ7psWHSgV+Eank0l3eNav3SN9+ON9juA6an7ojdN6mN6n4bFL85fmDCE QpTbHXsAKeuUh7VX8f/5UIfiNAL79lHTKLlGx9sp9Kh1q8oHEUB0K/lyfKpAFc0ertyH YZGHxTwZqnMPOlY57/dGnDTRxAtehKrSM3LAFLqHSqR8ecj3H0MjYWGIol6IMEEllOQf EdjSXdL/SZqn2BF5VqVfHcl/YlEJsL+5CI0jVdTFTDZnsKwcM/xl1UIMYWF8DrD1iUCm BqVA== X-Gm-Message-State: APjAAAVc14U0J/j1rsAclOCWinMlsRgkUw/s/QiWR/upN6oJwgi7m4qH dwbX52E5DH0YDVc2vWshXxJGA05+ X-Google-Smtp-Source: APXvYqzWIn43dIXgfaBI/iIhXWq6d/BNqPDbtF6vb0XRUbJHTO6yo2LSrXGwNKuIbXiRDvl9y3gyZA== X-Received: by 2002:a62:62c2:: with SMTP id w185mr44144260pfb.6.1571206217658; Tue, 15 Oct 2019 23:10:17 -0700 (PDT) Received: from [192.168.1.11] (ip70-185-147-118.sb.sd.cox.net. [70.185.147.118]) by smtp.gmail.com with ESMTPSA id w2sm14047338pgr.78.2019.10.15.23.10.16 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 15 Oct 2019 23:10:16 -0700 (PDT) From: Fred Baker Message-Id: <6888C631-B184-4727-A438-97F6BFA3F60C@gmail.com> Content-Type: multipart/mixed; boundary="Apple-Mail=_BF269C6D-F221-4D68-9923-A91E7232F6DF" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601\)) Date: Tue, 15 Oct 2019 23:10:15 -0700 In-Reply-To: To: v6ops list References: X-Mailer: Apple Mail (2.3601) Archived-At: Subject: Re: [v6ops] IETF Working Group Agenda Analysis X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Oct 2019 06:10:21 -0000 --Apple-Mail=_BF269C6D-F221-4D68-9923-A91E7232F6DF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Let me ask a question. Each time we meet, about a month before the = repository cut-off, I say "it's a month before the cut-off" - Speak!. I = barely hear crickets. When I sent this (which I share with Ron every = other week and we discuss), I got several replies. Question for this list: is this a useful formulation of the datatracker = data and call to working group action? Would you like to see it a few = weeks before each meeting? It's what Ron and I use, in addition to the = datatracker itself, in figuring out our agenda. When I comment on = mailing list behavior, these are the links I'm following. As I did in = this email, I can also list action items I'm expecting - such as "hint, = you know who you are" - we had several people agree at IETF 105 to = review drafts and comment to the list... On Oct 14, 2019, at 3:04 PM, Fred Baker = wrote: > Apologies for the HTML Email. Some folks complain about them. This is = a file I put together daily showing the status of v6ops documents.This = document describes the drafts associated with this group. It describes = their current state as seen by the RFC Editor, IESG/AD, and the working = or research group. For working group drafts and individual submissions, = it also indicates whether the draft has been updated since the previous = IETF meeting. Drafts that are new or have been updated are "current"; = other drafts are "old". >=20 > At IETF 105, Jen discussed draft-linkova-v6ops-nd-cache-init, and = there was a lot of support for taking it as a working group draft. Bob = Hinden, 6man chair, commented that he would prefer that v6ops discuss = operational issues, but protocol issues be discussed in 6man. Hence, Ron = and I are looking for a draft-ietf-v6ops-nd-cache-init that addresses = the operational issues raised in this draft, and Bob and Ole are looking = for the protocol issues in a 6man draft. Those balls are in Jen's court, = but I suspect she would appreciate any help folks want to offer. >=20 > A point I'm thinking about for IETF 106 is that we don't see a lot of = email support for the individual submissions below. If you are hoping = for one of them to go somewhere, email to the list would be in order. = We're also interested in new drafts on IPv6 networking. If you're = seeking inspiration, there have been a couple of longish threads on = nanog@ recently. As stated in our charter, we would hope they address = operational issues that you see in your network(s), and propose = solutions. Such drafts have to be posted before November 4, as that's = the repository cut-off, and ideally long enough before that to allow for = mailing list discussion. --Apple-Mail=_BF269C6D-F221-4D68-9923-A91E7232F6DF Content-Disposition: attachment; filename=raw-agenda-data-v6ops.html Content-Type: text/html; x-unix-mode=0644; name="raw-agenda-data-v6ops.html" Content-Transfer-Encoding: 7bit IETF Working Group Agenda Analysis

This document describes the drafts associated with this group. It describes their current state as seen by the RFC Editor, IESG/AD, and the working or research group. For working group drafts and individual submissions, it also indicates whether the draft has been updated since the previous IETF meeting. Drafts that are new or have been updated are "current"; other drafts are "old".

On each draft, there are three or four links:

  • the relevant datatracker link,
  • a pointer to the HTML version of the draft in the tools directory,
  • a pointer to the email archived on IETF mailing lists related to the draft, and
  • a pointer to RFCDIFF against the previous version, if there was one.

RFC Editor: RFC-EDITOR

WG: Candidate for WG Adoption

Individual Submission: Unupdated

Individual Submission: Updated

The charter for this group is at https://datatracker.ietf.org/group/v6ops/about/

Mon Oct 14 14:00:32 2019

--Apple-Mail=_BF269C6D-F221-4D68-9923-A91E7232F6DF-- From nobody Wed Oct 16 02:19:27 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E96612088B for ; Wed, 16 Oct 2019 02:19:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WICIQg5_ff-H for ; Wed, 16 Oct 2019 02:19:25 -0700 (PDT) Received: from mail-qt1-x832.google.com (mail-qt1-x832.google.com [IPv6:2607:f8b0:4864:20::832]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35CC5120889 for ; Wed, 16 Oct 2019 02:19:25 -0700 (PDT) Received: by mail-qt1-x832.google.com with SMTP id 3so35121963qta.1 for ; Wed, 16 Oct 2019 02:19:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=anKYzR4l2lpfsWn/Z4Qr3kAHzCIgUmiIgEcodUoVQAg=; b=WgS6/UbaRTnzoj5DniC4v6yD+4MDMAHfCs6fJ7LP13Rdvcl7kd5e38Ve786SZNUE0s eCnYWK44ORTQHLBhHl3E2KaThJapzUKjlpP/CWSvFEPpZ9oMuhYDJSFy0DBKWPrulMmf yJrS14VkJ/CXwLTR6jmIx74dNFmRSdWOgAkyviY0nbqKePZVrN6KXEFVEbj70cfBIVnA /bXebMnAgmMTkdaYRln0JStBX8LOLys1okCW+p5tsWeOuPhLQfb0+7QntVomXsNwm3mX h8LkktBqBDGNgKmh6r/NQ4tto+Z0MJRc9tEpcOPhL4+kbKlDXxZ/aPwZpicMICqktqqa OjgA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=anKYzR4l2lpfsWn/Z4Qr3kAHzCIgUmiIgEcodUoVQAg=; b=npyZt8zITnVbvHw/45cuoG8wFmJAcbPFSXdeYXLVTfKhRMFO/bWR9fo8SFlpEdBfMJ i9N+bEQSlj/p9LPjlDQ0+O3hm6txJt0McFeGgQ/BSvHXRrOuPTXiWedshS0q1fA0Vvh9 8hBMbh+NaNSMSYPMBBN999kEns1yH20i2UCiTUfptzwhjTxh3OgtqeebCG6M68TXFlmw yiJvZXHBST9BSMay7Yu0BT4eHHreJs903DEta1fEHTkpGlBQZVKjaL8zMFAx5/5oVlWl kYASmPRg+gfmLb2pUu3SCNcaYFwQUFR3a/Fw0OCk8ApsS/w4YfNl4232o2tBsteZbdI8 V6IA== X-Gm-Message-State: APjAAAW/vnQipzhVh//u7UbSNnsF8PVw8qBnadaHkhpfzHX7dl2Kt02B 1yFbzdZFf5kmXZYoglmbmGQT0q4QEsqn7sVQfn267JBa X-Google-Smtp-Source: APXvYqwUuGO47V3PpYQIks2cp1W9/LVVI3y8rLopVz3XVKR1wufr3ZgyAuDoyPpYtEhoP6XIacvjQPDb+lzC7SGZ54A= X-Received: by 2002:a0c:b59b:: with SMTP id g27mr41676128qve.184.1571217564000; Wed, 16 Oct 2019 02:19:24 -0700 (PDT) MIME-Version: 1.0 References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> <1E853367-E538-4C30-9689-3075BFB1D64F@gmail.com> In-Reply-To: <1E853367-E538-4C30-9689-3075BFB1D64F@gmail.com> From: Jen Linkova Date: Wed, 16 Oct 2019 20:19:12 +1100 Message-ID: To: Fred Baker Cc: Mark Smith , v6ops list Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Oct 2019 09:19:26 -0000 On Wed, Oct 16, 2019 at 4:54 PM Fred Baker wrote: > > On Oct 15, 2019, at 1:11 AM, Jen Linkova wrote: > > > > The draft says '...when it is clear to a device manufacturer that a > > device should be isolated from the Internet by default..' > > I'm not sure it's possible to know that. > > It *is* possible for the device to prevent its packets from going elsewhere, Sorry I should have clarified: I'm questioning the statement that it's possible (or should be done) to know at the time of manufacturing that this particular device should be isolated from the Internet. Let's say I'm buying a printer. Or an IoT device (a sensor). How can the manufacturer know if I'm going to install it at my mom's home network with just one subnet (the link-local address would be sufficient), at my place (with subnets, so GUAs are needed or at least ULAs - but I would mean I have to configure my routers) or at my office (so GUA are required for the device to work)? Will I need to look for 'work with multiple network segments' sticker on a box before I buy a device (and shall I test it in the lab because vendors tend to be overly optimistic about their products feature set)? > assuming routers and proxies behave according to the rules and people aren't translating. That is a defined function of ULAs and Link-Local addresses. Not sure about ULAs. The ULA has global scope. If a device has a default gateway and ULAs only nothing would prevent it from sending packets with ULA source to any destinations. The network is expected to have a *policy* configured at its edge to block ULAs - so we are back to 'it's a policy decision if this device should or should not have global connectivity'. Let the administrator decide. -- SY, Jen Linkova aka Furry From nobody Wed Oct 16 08:12:14 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38338120074 for ; Wed, 16 Oct 2019 08:12:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z5gaeUnwVlwg for ; Wed, 16 Oct 2019 08:12:08 -0700 (PDT) Received: from mx.pao1.isc.org (mx.pao1.isc.org [IPv6:2001:4f8:0:2::2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 25B0D120934 for ; Wed, 16 Oct 2019 08:12:06 -0700 (PDT) Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.pao1.isc.org (Postfix) with ESMTPS id 0121F3AB00D; Wed, 16 Oct 2019 15:12:05 +0000 (UTC) Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTPS id CC322160054; Wed, 16 Oct 2019 15:12:04 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id B33EB160066; Wed, 16 Oct 2019 15:12:04 +0000 (UTC) Received: from zmx1.isc.org ([127.0.0.1]) by localhost (zmx1.isc.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id DCIxWpfD7Vxq; Wed, 16 Oct 2019 15:12:04 +0000 (UTC) Received: from [172.30.42.66] (n1-40-244-161.bla1.nsw.optusnet.com.au [1.40.244.161]) by zmx1.isc.org (Postfix) with ESMTPSA id 5840E160054; Wed, 16 Oct 2019 15:12:04 +0000 (UTC) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Mark Andrews Mime-Version: 1.0 (1.0) Date: Thu, 17 Oct 2019 02:12:01 +1100 Message-Id: References: Cc: Fred Baker , v6ops list In-Reply-To: To: Jen Linkova X-Mailer: iPhone Mail (17A860) Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Oct 2019 15:12:13 -0000 Jena , how does the attacker route the traffic to the ULA address of the dev= ice? GUA to ULA works within the site. Getting it to work from outside the= site is another matter. =20 First you have to find a border router with ULA filtering disabled. Home bo= rder routers have ULA filtering on by default if they want to be certified b= y cablelabs etc. Then you have to also have a border router that processes s= ource routed packets as ULA routes aren=E2=80=99t carried be default. Again= something that is supposed to be blocked on border routers by default.=20 Printers could also default to only accepting connections from the containin= g /48 of advertised RA prefixes. This works fine for ULA and reasonably well= for GUA in restricting traffic to =E2=80=9Cintra site=E2=80=9D It would work better if ISPs would hand our /48s.=20 --=20 Mark Andrews > On 16 Oct 2019, at 20:19, Jen Linkova wrote: >=20 > =EF=BB=BFOn Wed, Oct 16, 2019 at 4:54 PM Fred Baker wrote: >>>> On Oct 15, 2019, at 1:11 AM, Jen Linkova wrote: >>>=20 >>> The draft says '...when it is clear to a device manufacturer that a >>> device should be isolated from the Internet by default..' >>> I'm not sure it's possible to know that. >>=20 >> It *is* possible for the device to prevent its packets from going elsewhe= re, >=20 > Sorry I should have clarified: I'm questioning the statement that it's > possible (or should be done) to know at the time of manufacturing that > this particular > device should be isolated from the Internet. > Let's say I'm buying a printer. Or an IoT device (a sensor). How can > the manufacturer know if I'm going to install it at my mom's home > network with just one subnet (the link-local address would be > sufficient), at my place (with subnets, so GUAs are needed or at least > ULAs - but I would mean I have to configure my routers) or at my > office (so GUA are required for the device to work)? >=20 > Will I need to look for 'work with multiple network segments' sticker > on a box before I buy a device (and shall I test it in the lab because > vendors tend to be overly optimistic about their products feature > set)? >=20 >> assuming routers and proxies behave according to the rules and people are= n't translating. That is a defined function of ULAs and Link-Local addresses= . >=20 > Not sure about ULAs. The ULA has global scope. If a device has a > default gateway and ULAs only nothing would prevent it from sending > packets with ULA source to any destinations. The network is expected > to have a *policy* configured at its edge to block ULAs - so we are > back to 'it's a policy decision if this device should or should not > have global connectivity'. Let the administrator decide. >=20 > --=20 > SY, Jen Linkova aka Furry >=20 > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops From nobody Wed Oct 16 13:36:43 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BDFE4120116 for ; Wed, 16 Oct 2019 13:36:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QWsajhAmFkjg for ; Wed, 16 Oct 2019 13:36:39 -0700 (PDT) Received: from patsy.thehobsons.co.uk (patsy.thehobsons.co.uk [80.229.10.150]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B8F1212008B for ; Wed, 16 Oct 2019 13:36:39 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at patsy.thehobsons.co.uk Received: from simons-macbookpro.thehobsons.co.uk (Simons-MacBookPro.thehobsons.co.uk [192.168.137.111]) by patsy.thehobsons.co.uk (Postfix) with ESMTPSA id CBAFC14025 for ; Wed, 16 Oct 2019 20:36:34 +0000 (UTC) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Simon Hobson In-Reply-To: <20191015081553.GO55186@Space.Net> Date: Wed, 16 Oct 2019 21:36:33 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <3F904B43-6C97-4285-86E7-9FDDCF59ECA0@thehobsons.co.uk> References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> <20191015081553.GO55186@Space.Net> To: v6ops list X-Mailer: Apple Mail (2.2104) Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Oct 2019 20:36:42 -0000 Gert Doering wrote: >=20 > I'd say that most devices built by manufacturers today SHOULD be > isolated from the Internet... but I'm afraid that *manufacturers* > are never going to agree that their shiny new toys are not mature > enough... Not only that, but these days everything is "internet connected" = regardless of whether that actually adds anything useful*. I can't see = many (if any) manufacturers defaulting to *not* internet connected. * Eg, a made up example of a light "switch" and associated "smart" = lights that don't work without taking to a controller "somewhere out in = the internet" just so the user can control their lights from anywhere. From nobody Wed Oct 16 16:14:34 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CF4E12093E for ; Wed, 16 Oct 2019 16:14:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.748 X-Spam-Level: X-Spam-Status: No, score=-1.748 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nxd7ozP-v7HH for ; Wed, 16 Oct 2019 16:14:23 -0700 (PDT) Received: from mail-qk1-x732.google.com (mail-qk1-x732.google.com [IPv6:2607:f8b0:4864:20::732]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F0B4120934 for ; Wed, 16 Oct 2019 16:14:23 -0700 (PDT) Received: by mail-qk1-x732.google.com with SMTP id y189so150428qkc.3 for ; Wed, 16 Oct 2019 16:14:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=Z4Hr+vSjBLKXVUahopmcOgU2MstRQK24Neldx/s3ctE=; b=Kk+A0gF48CpadxlZZQ8Wf/srEAeBLuxLlCzLPp9IYnrx2l+DMwUeV79OYdESuqUS3X SW2SE0FpE6F1sKFCHxATHoF5h0n+f0WBS4lnelDBcR2MUpBSCiBlrS5uhv+4PJBN+RYO +WoplHmwaXIrNMgyKbGItxw3J1vquHKV3cqZjyhx7xbWWxPEqG4WPUnmdi6JOrDhBzqP +sqjl/wduja7t+08LIzAqG2AeiosyzlE5oRdtP7pX1qSFNEejmIZHTJM1/Y7c9lM/Ci/ Gwq0MlVUFq9pqrxEsjqeD1Qr5wtFrR1v1w4/00heTTROmMDRyxsM4a3Fx+3Gk+mDb1jw iodQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=Z4Hr+vSjBLKXVUahopmcOgU2MstRQK24Neldx/s3ctE=; b=ElXIfN/l8gNrnkptP7D/ZWUeAtSNVUCl/tUUAB2cLqXuO7Yw3QUBKsSEY/qgLhSQQG t+4HRZ3PC0RUu44POQsw0gW/TfeGaXniGwPLpyxarHfD2ZUUtq0p6O7T8svmlSTpDDob CT7txxBK8pCu8XkKBqS3m13zmcRRuwTvusFEfw5aPkxHVlRFWrnNew97gtxloyWmqUwH GLpVy5A6t5piaN7Qf3oJ1o5NDbfcrSO//qTEOF5DJ3ZCZQmahJgYq7QmsUXQJ23INmL4 O28VQsToFP8HmRHcqoa58zfLAC2YP3Q2kx83zoiRlzT1QSOVAO4TbZMY1R//M5J3dLUz +pOQ== X-Gm-Message-State: APjAAAV5uCETKHJJPAA9lQu7ychV5zLXT8Isap5ePcsZ5XKjbCGp1H2Y tGlg9gswSE7GR9DwgGJHWuypYb6KtOiItXpiHnI= X-Google-Smtp-Source: APXvYqw1Y7Gk8RpuUh5FynqAzFBhcTNFDf4IUzre+gsMEtK9Rva/mzXeLWunS4pjWchui2HZ2WUdDeQrQDI6eDHCsuQ= X-Received: by 2002:a37:a487:: with SMTP id n129mr445344qke.277.1571267661843; Wed, 16 Oct 2019 16:14:21 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Jen Linkova Date: Thu, 17 Oct 2019 10:14:10 +1100 Message-ID: To: Mark Andrews Cc: Fred Baker , v6ops list Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Oct 2019 23:14:33 -0000 On Thu, Oct 17, 2019 at 2:12 AM Mark Andrews wrote: > > Jena , how does the attacker route the traffic to the ULA address of the = device? GUA to ULA works within the site. What is the 'site'? >Getting it to work from outside the site is another matter. Scenario 1: we have devices which are technically able to talk to each other. You can either use this functionality or if you don't - implement security policies to block such traffic. Scenario 2: we start creating devices which looks like a normal Ipv6-enabled ones but they can only work in a very limited set of scenarios and if I want them to work in an arbitrary network, it would be, as you've correctly noticed, 'another matter'. I see this as an attempt of solving one particular and very specific use case on the expense of everyone else. If someone needs to prevent accidental access to subset of their devices from the Internet w/o putting any effort into implementing security policies why would not they just install devices w/o IPv6 support whatsoever? Use Ipv4 link-local addresses (or any other IPv4 addresses) and disable IPv4 NAT... Could be a great selling point 'built-in protection from unauthorised access: no IPv6 support'. > First you have to find a border router with ULA filtering disabled. >Home border routers have ULA filtering on by default if they want to be ce= rtified by cablelabs etc. Let's keep in mind that there are other scenarios besides 'a home router connected to an ISP network'. Last time I had a Cisco router as my home DSL device it was definitely able to route packets to/from ULAs. > Printers could also default to only accepting connections from the contai= ning /48 of advertised RA prefixes. This works fine for ULA and reasonably = well for GUA in restricting traffic to =E2=80=9Cintra site=E2=80=9D This creates a serious artificial limitation by introducing an entity called 'a site' on the host network stack level and enforcing very specific IPv6 address plan. > It would work better if ISPs would hand our /48s. ...and now it affects ISPs... What I'm trying to say is that the use case for the proposed approach is way to narrow to justify all consequences (and inconvenience caused). Like we haven't had enough issues with IPv6 support on non-phones/laptops - let's make our life even more entertaining ;) On the other hand indeed it could be a selling point for device vendors: 'you can print on that printer from another office building' and 'you can actually connect to our IoT sensors from your DC/Cloud, not just from a workstation sitting next to it'. > > On 16 Oct 2019, at 20:19, Jen Linkova wrote: > > > > =EF=BB=BFOn Wed, Oct 16, 2019 at 4:54 PM Fred Baker wrote: > >>>> On Oct 15, 2019, at 1:11 AM, Jen Linkova wrote: > >>> > >>> The draft says '...when it is clear to a device manufacturer that a > >>> device should be isolated from the Internet by default..' > >>> I'm not sure it's possible to know that. > >> > >> It *is* possible for the device to prevent its packets from going else= where, > > > > Sorry I should have clarified: I'm questioning the statement that it's > > possible (or should be done) to know at the time of manufacturing that > > this particular > > device should be isolated from the Internet. > > Let's say I'm buying a printer. Or an IoT device (a sensor). How can > > the manufacturer know if I'm going to install it at my mom's home > > network with just one subnet (the link-local address would be > > sufficient), at my place (with subnets, so GUAs are needed or at least > > ULAs - but I would mean I have to configure my routers) or at my > > office (so GUA are required for the device to work)? > > > > Will I need to look for 'work with multiple network segments' sticker > > on a box before I buy a device (and shall I test it in the lab because > > vendors tend to be overly optimistic about their products feature > > set)? > > > >> assuming routers and proxies behave according to the rules and people = aren't translating. That is a defined function of ULAs and Link-Local addre= sses. > > > > Not sure about ULAs. The ULA has global scope. If a device has a > > default gateway and ULAs only nothing would prevent it from sending > > packets with ULA source to any destinations. The network is expected > > to have a *policy* configured at its edge to block ULAs - so we are > > back to 'it's a policy decision if this device should or should not > > have global connectivity'. Let the administrator decide. > > > > -- > > SY, Jen Linkova aka Furry > > > > _______________________________________________ > > v6ops mailing list > > v6ops@ietf.org > > https://www.ietf.org/mailman/listinfo/v6ops > --=20 SY, Jen Linkova aka Furry From nobody Thu Oct 17 03:25:28 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 857B0120860 for ; Thu, 17 Oct 2019 03:25:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eZV2qcrngqxa for ; Thu, 17 Oct 2019 03:25:24 -0700 (PDT) Received: from aer-iport-2.cisco.com (aer-iport-2.cisco.com [173.38.203.52]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 658001200E7 for ; Thu, 17 Oct 2019 03:25:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7107; q=dns/txt; s=iport; t=1571307924; x=1572517524; h=from:message-id:mime-version:subject:date:in-reply-to:cc: to:references; bh=cXmNzeeVVUE1sSFYeRdqgRJdy4dzZoVgGY9rO5ql8vg=; b=FFXXarraRRCTQ5zd3HskfB/pk7qC4pGLy5RVDxNmKpwlv1QFcEIu0MFC yELhapqd29XDjmOIHsY+YPh37/6Idr2podVnHy44tCEaHQliZzswLSzmV 5Hm82u08vNcuZ/qMR8CoRf4rRJ2Vl3kagMPwQVI5dDem5wnmX3/CA9VjL c=; X-Files: signature.asc : 488 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AMAADHQKhd/xbLJq1lGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBEQEBAQEBAQEBAQEBgWkCAQEBAQELAYNfIBIqhCWJAod0iWu?= =?us-ascii?q?JM4YPgXsCBwEBAQkDAQEvAQGEQAKDJjYHDgIDCQEBBAEBAQIBBQRthTmFSwE?= =?us-ascii?q?BAQMBI1QCBQsLDgojBwICITYGEx+DAwGCRgMOIK5bdYEyhU2CRA2CGxCBNAG?= =?us-ascii?q?BUopTgX+BOB+CHi4+ghqFODKCLASNIQqJBJZhQYIsgjKBE41RhAsbjhCLNph?= =?us-ascii?q?ki3aDFAIEBgUCFYFZDiQqDYEhMxoIGxVlAYJBPhIQFIIIjhA/AzCRPgEB?= X-IronPort-AV: E=Sophos;i="5.67,307,1566864000"; d="asc'?scan'208,217";a="18102133" Received: from aer-iport-nat.cisco.com (HELO aer-core-2.cisco.com) ([173.38.203.22]) by aer-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 17 Oct 2019 10:25:22 +0000 Received: from [10.61.214.60] ([10.61.214.60]) by aer-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id x9HAPLUU013501 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 17 Oct 2019 10:25:22 GMT From: Eliot Lear Message-Id: Content-Type: multipart/signed; boundary="Apple-Mail=_3A272F8F-02CA-4652-8803-A2095C3D958D"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Thu, 17 Oct 2019 12:25:21 +0200 In-Reply-To: Cc: v6ops list To: Jen Linkova References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> <1E853367-E538-4C30-9689-3075BFB1D64F@gmail.com> X-Mailer: Apple Mail (2.3445.104.11) X-Outbound-SMTP-Client: 10.61.214.60, [10.61.214.60] X-Outbound-Node: aer-core-2.cisco.com Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Oct 2019 10:25:27 -0000 --Apple-Mail=_3A272F8F-02CA-4652-8803-A2095C3D958D Content-Type: multipart/alternative; boundary="Apple-Mail=_57C310A0-D7E2-4074-B9DF-BBEC1B0EF31A" --Apple-Mail=_57C310A0-D7E2-4074-B9DF-BBEC1B0EF31A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi, > On 16 Oct 2019, at 11:19, Jen Linkova wrote: >=20 > On Wed, Oct 16, 2019 at 4:54 PM Fred Baker = wrote: >>> On Oct 15, 2019, at 1:11 AM, Jen Linkova wrote: >>>=20 >>> The draft says '...when it is clear to a device manufacturer that a >>> device should be isolated from the Internet by default..' >>> I'm not sure it's possible to know that. >>=20 >> It *is* possible for the device to prevent its packets from going = elsewhere, >=20 > Sorry I should have clarified: I'm questioning the statement that it's > possible (or should be done) to know at the time of manufacturing that > this particular > device should be isolated from the Internet. > Let's say I'm buying a printer. Or an IoT device (a sensor). How can > the manufacturer know if I'm going to install it at my mom's home > network with just one subnet (the link-local address would be > sufficient), at my place (with subnets, so GUAs are needed or at least > ULAs - but I would mean I have to configure my routers) or at my > office (so GUA are required for the device to work)? >=20 > Will I need to look for 'work with multiple network segments' sticker > on a box before I buy a device (and shall I test it in the lab because > vendors tend to be overly optimistic about their products feature > set)? Ted mentioned RFC 8520 and Manufacturer Usage Descriptions. Here the = manufacturer can tell you what it was designed to access. That=E2=80=99s = not to say that you have to grant that access, but that some functions = may be lost if you don=E2=80=99t grant that access. For a consumer device, this can mean different things: Device won=E2=80=99t work at all (Echos, Hey Google) Device will work perfectly without Internet access or any local access = (most kitchen and home appliances) The device will lose some functionality but otherwise operate (no = firmware updates, maybe no notifications about malfunctions, status, = etc). Whether you want to grant access probably should not be made based on = the IP address, but on the network access control function. Eliot --Apple-Mail=_57C310A0-D7E2-4074-B9DF-BBEC1B0EF31A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hi,


On 16 Oct 2019, at 11:19, Jen Linkova <furry13@gmail.com> = wrote:

On Wed, Oct 16, 2019 at 4:54 PM Fred Baker <fredbaker.ietf@gmail.com> wrote:
On Oct 15, 2019, at 1:11 AM, Jen Linkova <furry13@gmail.com> = wrote:

The draft says '...when it is clear = to a device manufacturer that a
device should be isolated = from the Internet by default..'
I'm not sure it's possible = to know that.

It *is* possible = for the device to prevent its packets from going elsewhere,

Sorry I should have clarified: = I'm questioning the statement that it's
possible (or = should be done) to know at the time of manufacturing that
this particular
device should be isolated from = the Internet.
Let's say I'm buying a printer. Or an IoT = device (a sensor). How can
the manufacturer know if I'm = going to install it at my mom's home
network with just one = subnet (the link-local address would be
sufficient), at my = place (with subnets, so GUAs are needed or at least
ULAs - = but I would mean I have to configure my routers) or at my
office (so GUA are required for the device to work)?

Will I need to look for 'work with multiple = network segments' sticker
on a box before I buy a device = (and shall I test it in the lab because
vendors tend to be = overly optimistic about their products feature
set)?

Ted = mentioned RFC 8520 and Manufacturer Usage Descriptions.  Here the = manufacturer can tell you what it was designed to access.  That=E2=80= =99s not to say that you have to grant that access, but that some = functions may be lost if you don=E2=80=99t grant that = access.

For a consumer device, this = can mean different things:

  • Device won=E2=80=99t work at all = (Echos, Hey Google)
  • Device will work perfectly = without Internet access or any local access (most kitchen and home = appliances)
  • The device will lose some functionality = but otherwise operate (no firmware updates, maybe no notifications about = malfunctions, status, etc).

Whether you want to grant access = probably should not be made based on the IP address, but on the network = access control function.

Eliot

= --Apple-Mail=_57C310A0-D7E2-4074-B9DF-BBEC1B0EF31A-- --Apple-Mail=_3A272F8F-02CA-4652-8803-A2095C3D958D Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMFAl2oQZEACgkQh7ZrRtnS ejOsDAgApyuj6OWBfQOKLekSmMbhkwuw5KMNFVlmQ/dfG3CmZvVRhxpUj3cI5tuo p2Kl1/YTBwCxo2PmokliCNs4vZ8kf8M1SYdQ6CWf53hg2FzfLN+WFVniXGi48Hfb fOWfxCeuVTa16/WSj3u5LQev/urR/slJoTKLr/nvKKWacTTkTkEVqLIRokBJy3Q1 8CH6TKO06hoT0iqPrwwH2cxvdpecPSfXvwPiQEfew1eCFCab3fA7EKPfwLShF5+z VF1YmEuXEvpG1hE9bU3CUQayUG5eP0J8t5zmtp3QBzmAoUqQhMs0stya7mNWZult Eq3GCyXOcYWvRB5U1MnODAULBdqIKg== =lzgW -----END PGP SIGNATURE----- --Apple-Mail=_3A272F8F-02CA-4652-8803-A2095C3D958D-- From nobody Thu Oct 17 05:30:38 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A96ED1200DF; Thu, 17 Oct 2019 05:30:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IOIw20nSrToO; Thu, 17 Oct 2019 05:30:23 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB6BF12006A; Thu, 17 Oct 2019 05:30:22 -0700 (PDT) Received: from LHREML713-CAH.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id B53E73DB2055868D5F72; Thu, 17 Oct 2019 13:30:20 +0100 (IST) Received: from lhreml704-chm.china.huawei.com (10.201.108.53) by LHREML713-CAH.china.huawei.com (10.201.108.36) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 17 Oct 2019 13:30:20 +0100 Received: from lhreml704-chm.china.huawei.com (10.201.108.53) by lhreml704-chm.china.huawei.com (10.201.108.53) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Thu, 17 Oct 2019 13:30:20 +0100 Received: from DGGEMM403-HUB.china.huawei.com (10.3.20.211) by lhreml704-chm.china.huawei.com (10.201.108.53) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256) id 15.1.1713.5 via Frontend Transport; Thu, 17 Oct 2019 13:30:19 +0100 Received: from DGGEMM532-MBX.china.huawei.com ([169.254.7.168]) by DGGEMM403-HUB.china.huawei.com ([10.3.20.211]) with mapi id 14.03.0439.000; Thu, 17 Oct 2019 20:30:12 +0800 From: Lizhenbin To: "spring@ietf.org" , "ipv6@ietf.org" , "v6ops@ietf.org" CC: Zafar Ali , Clarence Filsfils , "Satoru Matsushima" Thread-Topic: New Version Notification for draft-matsushima-spring-srv6-deployment-status-02.txt Thread-Index: AQHVgwbEkV3wmDGT0Uy9HcWtTymOdKdexJGK Date: Thu, 17 Oct 2019 12:30:12 +0000 Message-ID: <5A5B4DE12C0DAC44AF501CD9A2B01A8D93503A7B@DGGEMM532-MBX.china.huawei.com> References: <157110930835.24708.13140748426444834467.idtracker@ietfa.amsl.com> In-Reply-To: <157110930835.24708.13140748426444834467.idtracker@ietfa.amsl.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.45.164.175] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [v6ops] Fw: New Version Notification for draft-matsushima-spring-srv6-deployment-status-02.txt X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Oct 2019 12:30:25 -0000 SGkgRm9sa3MsDQpXZSB1cGRhdGVkIHRoZSBTUnY2IGRlcGxveW1lbnQgZHJhZnQgYXMgZm9sbG93 cy4gVGhlcmUgYXJlIHR3byBuZXcgZGVwbG95bWVudHMgb2YgU1J2NiBmcm9tIENoaW5hIGZvciBy ZWZlcmVuY2U6IA0KQ2hpbmEgVW5pY29tIGFuZCBDRVJORVQyLiBJbiB0aGUgcGFzdCB0d28geWVh cnMsIENoaW5hIHB1c2hlZCB0aGUgSVB2NiBkZXBsb3ltZW50IGFuZCBhbG1vc3QgYWxsIHRoZSBJ UCBuZXR3b3JrcyANCm9mIG9wZXJhdG9ycyBhY2hpZXZlIHRoZSBnb2FsICJJUHY2IFJlYWR5Ii4g VGhpcyBwcm92aWRlIGEgc3Ryb25nIGJhc2UgZm9yIFNSdjYgZGVwbG95bWVudHMgd2hpY2ggY2Fu IGhlbHAgb3BlcmF0b3JzIA0KcHJvdmlkZSBuZXcgc2VydmljZXMgYmFzZWQgb24gSVB2NiBpbmZy YXN0cnVjdHVyZS4gTW9yZW92ZXIgdGhlIGVhc3kgaW5jcmVtZW50YWwgZGVwbG95bWVudCBhZHZh bnRhZ2Ugb2YgU1J2NiAocmVmZXIgDQp0byBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQteGllLXNwcmluZy1zcnY2LW5ldHdvcmstbWlncmF0aW9uLTAwICkgZmFjaWxpdGF0ZXMgdGhl IFNSdjYgZGVwbG95bWVudHMgaW4gdGhlIGV4aXN0aW5nIA0KbmV0d29yay4gQmVzaWRlcyB0aGUg U1J2NiBkZXBsb3ltZW50cyBwcm9wb3NlZCBpbiB0aGUgZHJhZnQsIHRoZXJlIHdpbGwgYmUgbW9y ZSBTUnY2IGZvciBkaWZmZXJlbnQgYXBwbGljYXRpb24gc2NlbmFyaW9zaW4gDQp0aGUgbmVhciBm dXR1cmUuIFRoZXNlIFNSdjYgZGVwbG95bWVudHMgIGFyZSBhbHNvIHByb21vdGluZyB0aGUgSVB2 NiBkZXBsb3ltZW50IGFuZCBtb3JlIElQdjYgdHJhZmZpYyB3aWxsIGJlIGJlYXJlZCBieSANCnRo ZXNlIG5ldHdvcmtzLiAgDQoNCg0KDQpCZXN0IFJlZ2FyZHMsDQpSb2Jpbg0KDQoNCg0KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kt6K8/sjLOiBpbnRlcm5ldC1kcmFm dHNAaWV0Zi5vcmcgW2ludGVybmV0LWRyYWZ0c0BpZXRmLm9yZ10NCreiy83KsbzkOiAyMDE5xOox MNTCMTXI1SAxMToxNQ0KytW8/sjLOiBaYWZhciBBbGk7IENsYXJlbmNlIEZpbHNmaWxzOyBMaXpo ZW5iaW47IFNhdG9ydSBNYXRzdXNoaW1hDQrW98ziOiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24g Zm9yIGRyYWZ0LW1hdHN1c2hpbWEtc3ByaW5nLXNydjYtZGVwbG95bWVudC1zdGF0dXMtMDIudHh0 DQoNCkEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1tYXRzdXNoaW1hLXNwcmluZy1zcnY2LWRl cGxveW1lbnQtc3RhdHVzLTAyLnR4dA0KaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBi eSBaYWZhciBBbGkgYW5kIHBvc3RlZCB0byB0aGUNCklFVEYgcmVwb3NpdG9yeS4NCg0KTmFtZTog ICAgICAgICAgIGRyYWZ0LW1hdHN1c2hpbWEtc3ByaW5nLXNydjYtZGVwbG95bWVudC1zdGF0dXMN ClJldmlzaW9uOiAgICAgICAwMg0KVGl0bGU6ICAgICAgICAgIFNSdjYgSW1wbGVtZW50YXRpb24g YW5kIERlcGxveW1lbnQgU3RhdHVzDQpEb2N1bWVudCBkYXRlOiAgMjAxOS0xMC0xNA0KR3JvdXA6 ICAgICAgICAgIEluZGl2aWR1YWwgU3VibWlzc2lvbg0KUGFnZXM6ICAgICAgICAgIDE5DQpVUkw6 ICAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LW1h dHN1c2hpbWEtc3ByaW5nLXNydjYtZGVwbG95bWVudC1zdGF0dXMtMDIudHh0DQpTdGF0dXM6ICAg ICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtbWF0c3VzaGltYS1z cHJpbmctc3J2Ni1kZXBsb3ltZW50LXN0YXR1cy8NCkh0bWxpemVkOiAgICAgICBodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvZHJhZnQtbWF0c3VzaGltYS1zcHJpbmctc3J2Ni1kZXBsb3ltZW50 LXN0YXR1cy0wMg0KSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2h0bWwvZHJhZnQtbWF0c3VzaGltYS1zcHJpbmctc3J2Ni1kZXBsb3ltZW50LXN0YXR1cw0K RGlmZjogICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1t YXRzdXNoaW1hLXNwcmluZy1zcnY2LWRlcGxveW1lbnQtc3RhdHVzLTAyDQoNCkFic3RyYWN0Og0K ICAgVGhpcyBkcmFmdCBwcm92aWRlcyBhbiBvdmVydmlldyBvZiBJUHY2IFNlZ21lbnQgUm91dGlu ZyAoU1J2NikNCiAgIGRlcGxveW1lbnQgc3RhdHVzLiAgSXQgbGlzdHMgdmFyaW91cyBTUnY2IGZl YXR1cmVzIHRoYXQgaGF2ZSBiZWVuDQogICBkZXBsb3llZCBpbiB0aGUgcHJvZHVjdGlvbiBuZXR3 b3Jrcy4gIEl0IGFsc28gcHJvdmlkZXMgYW4gb3ZlcnZpZXcgb2YNCiAgIFNSdjYgaW1wbGVtZW50 YXRpb24gYW5kIGludGVyb3BlcmFiaWxpdHkgdGVzdGluZyBzdGF0dXMuDQoNCg0KDQoNCg0KUGxl YXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRp bWUgb2Ygc3VibWlzc2lvbg0KdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJl IGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy4NCg0KVGhlIElFVEYgU2VjcmV0YXJpYXQ= From nobody Thu Oct 17 05:51:54 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B29D1200DF for ; Thu, 17 Oct 2019 05:51:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gih4N7kBoGtl for ; Thu, 17 Oct 2019 05:51:50 -0700 (PDT) Received: from cirse-smtp-out.extra.cea.fr (cirse-smtp-out.extra.cea.fr [132.167.192.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B89DE120100 for ; Thu, 17 Oct 2019 05:51:49 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by cirse-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9HCpm8t001007 for ; Thu, 17 Oct 2019 14:51:48 +0200 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 1E655206C78 for ; Thu, 17 Oct 2019 14:51:48 +0200 (CEST) Received: from muguet2-smtp-out.intra.cea.fr (muguet2-smtp-out.intra.cea.fr [132.166.192.13]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 14DE7202E62 for ; Thu, 17 Oct 2019 14:51:48 +0200 (CEST) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet2-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9HCpmkH013857 for ; Thu, 17 Oct 2019 14:51:48 +0200 To: v6ops@ietf.org References: <157110985111.24757.5250925329628210289.idtracker@ietfa.amsl.com> <20191015081553.GO55186@Space.Net> <16dcff0d5c1.ccf1d708118262.791262979954754844@shytyi.net> From: Alexandre Petrescu Message-ID: <00e1172f-6958-6636-0f32-047b206646f6@gmail.com> Date: Thu, 17 Oct 2019 14:51:47 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.1.2 MIME-Version: 1.0 In-Reply-To: <16dcff0d5c1.ccf1d708118262.791262979954754844@shytyi.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] Default IPv6 Local Only Addressing for Non-Internet Devices (Fwd: New Version Notification for draft-smith-v6ops-local-only-addressing-00.txt) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Oct 2019 12:51:53 -0000 Le 15/10/2019 à 17:02, Dmytro Shytyi a écrit : > Hello, > > From the point when device is connected to the internet it becomes a > Node that could be reached outside by external users. The firmware > of such devices is updated not that frequenly. It could be > dangerous. From the point I put my device in DMZ in few moments i see > in the log the "Access denied via ssh for user root". Thus, I think, > it is an important thing the authors of the draft highlight. True, the network topology that involves a DMZ is another way of solving the problem. Yet one may wonder how the address scoping solution would work together with a network topology solution involving a DMZ. Is ULA space to be used within the DMZ and GUAs on both sides of it, such that to better protect legitimate end users from attackers? Formulating a problem statement would help. Alex > ______________ *Dmytro SHYTYI* > > > ---- On Tue, 15 Oct 2019 10:15:53 +0200 *Gert Doering > * wrote ---- > > Hi, > > On Tue, Oct 15, 2019 at 07:11:00PM +1100, Jen Linkova wrote: >> The draft says '...when it is clear to a device manufacturer that >> a device should be isolated from the Internet by default..' > > I'd say that most devices built by manufacturers today SHOULD be > isolated from the Internet... but I'm afraid that *manufacturers* are > never going to agree that their shiny new toys are not mature > enough... > > Gert Doering -- NetMaster -- have you enabled IPv6 on something > today...? > > SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer > Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann > D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 > USt-IdNr.: DE813185279 > > _______________________________________________ v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > > > > > _______________________________________________ v6ops mailing list > v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops > From nobody Thu Oct 17 06:06:09 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2B6B1200E9 for ; Thu, 17 Oct 2019 06:06:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.63 X-Spam-Level: X-Spam-Status: No, score=-2.63 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yg8NgOldev4T for ; Thu, 17 Oct 2019 06:06:04 -0700 (PDT) Received: from oxalide-smtp-out.extra.cea.fr (oxalide-smtp-out.extra.cea.fr [132.168.224.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BC801200C5 for ; Thu, 17 Oct 2019 06:06:04 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by oxalide-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9HD61RM023903 for ; Thu, 17 Oct 2019 15:06:01 +0200 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id D32812040A0 for ; Thu, 17 Oct 2019 15:06:01 +0200 (CEST) Received: from muguet2-smtp-out.intra.cea.fr (muguet2-smtp-out.intra.cea.fr [132.166.192.13]) by pisaure.intra.cea.fr (Postfix) with ESMTP id CB45E203E23 for ; Thu, 17 Oct 2019 15:06:01 +0200 (CEST) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet2-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9HD61Yc025035 for ; Thu, 17 Oct 2019 15:06:01 +0200 To: v6ops@ietf.org References: <6888C631-B184-4727-A438-97F6BFA3F60C@gmail.com> From: Alexandre Petrescu Message-ID: <00bb5c5f-e594-ec6a-d32f-cae685272d8b@gmail.com> Date: Thu, 17 Oct 2019 15:06:01 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.1.2 MIME-Version: 1.0 In-Reply-To: <6888C631-B184-4727-A438-97F6BFA3F60C@gmail.com> Content-Type: multipart/alternative; boundary="------------5406D200869A433A5FCFF781" Content-Language: fr Archived-At: Subject: Re: [v6ops] IETF Working Group Agenda Analysis X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Oct 2019 13:06:08 -0000 This is a multi-part message in MIME format. --------------5406D200869A433A5FCFF781 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Le 16/10/2019 08:10, Fred Baker a crit: > Let me ask a question. Each time we meet, about a month before the > repository cut-off, I say "it's a month before the cut-off" - Speak!. > I barely hear crickets. When I sent this (which I share with Ron every > other week and we discuss), I got several replies. On my side, I must say that I do find useful the list you post about the relevant Internet Drafts. About the low noise crickets make: I think this aspect of too low traffic when requested is due to a little bit of compulsive posting by many posters. I myself am doing it so. Whenever in my schedule there is a result I think it deserves noting in v6ops I just post it: be it before a meeting, during or right after a meeting. This sometimes works, other times not at all. > > Question for this list: is this a useful formulation of the > datatracker data and call to working group action? Would you like to > see it a few weeks before each meeting? It's what Ron and I use, in > addition to the datatracker itself, in figuring out our agenda. When I > comment on mailing list behavior, these are the links I'm following. > As I did in this email, I can also list action items I'm expecting - > such as "hint, you know who you are" - we had several people agree at > IETF 105 to review drafts and comment to the list... I will not come to this meeting. A co-author will, and we are interested in getting a slot, nad interested in getting discussion results. We do have a sort of long term time plan for our draft. We would like to match our time plan to the v6ops WG time plan. We tried to talk about our draft whenever talk about drafts was requested. That is the best we can do at this time. But if there was a WG Milestones in a Charter, then we could adapt to these milestones too. Alex > > On Oct 14, 2019, at 3:04 PM, Fred Baker wrote: > > Apologies for the HTML Email. Some folks complain about them. This > is a file I put together daily showing the status of v6ops > documents.This document describes the drafts associated with this > group. It describes their current state as seen by the RFC Editor, > IESG/AD, and the working or research group. For working group drafts > and individual submissions, it also indicates whether the draft has > been updated since the previous IETF meeting. Drafts that are new or > have been updated are "current"; other drafts are "old". > > > > At IETF 105, Jen discussed draft-linkova-v6ops-nd-cache-init, and > there was a lot of support for taking it as a working group draft. Bob > Hinden, 6man chair, commented that he would prefer that v6ops discuss > operational issues, but protocol issues be discussed in 6man. Hence, > Ron and I are looking for a draft-ietf-v6ops-nd-cache-init that > addresses the operational issues raised in this draft, and Bob and Ole > are looking for the protocol issues in a 6man draft. Those balls are > in Jen's court, but I suspect she would appreciate any help folks want > to offer. > > > > A point I'm thinking about for IETF 106 is that we don't see a lot > of email support for the individual submissions below. If you are > hoping for one of them to go somewhere, email to the list would be in > order. We're also interested in new drafts on IPv6 networking. If > you're seeking inspiration, there have been a couple of longish > threads on nanog@ recently. As stated in our charter, we would hope > they address operational issues that you see in your network(s), and > propose solutions. Such drafts have to be posted before November 4, as > that's the repository cut-off, and ideally long enough before that to > allow for mailing list discussion. > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops --------------5406D200869A433A5FCFF781 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit


Le 16/10/2019 08:10, Fred Baker a crit:
Let me ask a question. Each time we meet, about a month before the repository cut-off, I say "it's a month before the cut-off" - Speak!. I barely hear crickets. When I sent this (which I share with Ron every other week and we discuss), I got several replies.

On my side, I must say that I do find useful the list you post about the relevant Internet Drafts.

About the low noise crickets make:

I think this aspect of too low traffic when requested is due to a little bit of compulsive posting by many posters. I myself am doing it so. Whenever in my schedule there is a result I think it deserves noting in v6ops I just post it: be it before a meeting, during or right after a meeting. This sometimes works, other times not at all.



Question for this list: is this a useful formulation of the datatracker data and call to working group action? Would you like to see it a few weeks before each meeting? It's what Ron and I use, in addition to the datatracker itself, in figuring out our agenda. When I comment on mailing list behavior, these are the links I'm following. As I did in this email, I can also list action items I'm expecting - such as "hint, you know who you are" - we had several people agree at IETF 105 to review drafts and comment to the list...


I will not come to this meeting. A co-author will, and we are interested in getting a slot, nad interested in getting discussion results.

We do have a sort of long term time plan for our draft. We would like to match our time plan to the v6ops WG time plan. We tried to talk about our draft whenever talk about drafts was requested. That is the best we can do at this time.

But if there was a WG Milestones in a Charter, then we could adapt to these milestones too.

Alex


On Oct 14, 2019, at 3:04 PM, Fred Baker <fredbaker.ietf@gmail.com> wrote:
> Apologies for the HTML Email. Some folks complain about them. This is a file I put together daily showing the status of v6ops documents.This document describes the drafts associated with this group. It describes their current state as seen by the RFC Editor, IESG/AD, and the working or research group. For working group drafts and individual submissions, it also indicates whether the draft has been updated since the previous IETF meeting. Drafts that are new or have been updated are "current"; other drafts are "old".
>
> At IETF 105, Jen discussed draft-linkova-v6ops-nd-cache-init, and there was a lot of support for taking it as a working group draft. Bob Hinden, 6man chair, commented that he would prefer that v6ops discuss operational issues, but protocol issues be discussed in 6man. Hence, Ron and I are looking for a draft-ietf-v6ops-nd-cache-init that addresses the operational issues raised in this draft, and Bob and Ole are looking for the protocol issues in a 6man draft. Those balls are in Jen's court, but I suspect she would appreciate any help folks want to offer.
>
> A point I'm thinking about for IETF 106 is that we don't see a lot of email support for the individual submissions below. If you are hoping for one of them to go somewhere, email to the list would be in order. We're also interested in new drafts on IPv6 networking. If you're seeking inspiration, there have been a couple of longish threads on nanog@ recently. As stated in our charter, we would hope they address operational issues that you see in your network(s), and propose solutions. Such drafts have to be posted before November 4, as that's the repository cut-off, and ideally long enough before that to allow for mailing list discussion.

_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops
--------------5406D200869A433A5FCFF781-- From nobody Thu Oct 17 16:53:11 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AFF241208A1; Thu, 17 Oct 2019 16:52:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9NcRlCxTU8Eo; Thu, 17 Oct 2019 16:52:55 -0700 (PDT) Received: from mail-pf1-x42e.google.com (mail-pf1-x42e.google.com [IPv6:2607:f8b0:4864:20::42e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D362120168; Thu, 17 Oct 2019 16:52:55 -0700 (PDT) Received: by mail-pf1-x42e.google.com with SMTP id a2so2640535pfo.10; Thu, 17 Oct 2019 16:52:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=MKYQenrD7ifF5pT0pKEk5HOi26gpKikhz3InfV7swUY=; b=t+kFUJpdyaQA5B0tAjvD32IEPYmxIjqFaTuAJNC4lIjIFKANe/R2wVfgVqL7N0fxVZ nm8XERCf9F2NmnlSeWzFmc9uE3mUIETR3Z+Q184jxMPg6ub2zth5EGHPz4vuPCNblM30 RkLS+b95xfmSMfOagKR0IMxzL8IB6pCxRt2b0ygYF4GiMcyHbvu32SfvP34jGVu9GfR3 s0MLK20DALW4me7Ei7Y1y2ipayBKvt3QXSLGF6VFJ34wOnN4BWwnlRHLgxnCkS9zZ1Ks MIdBPzqxOsxy11zjU6NBHrSnK1ly0+WtWJR8bzNTFm+O4lWsRM3Vy68S9fDS3hX9LI/0 dzQg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=MKYQenrD7ifF5pT0pKEk5HOi26gpKikhz3InfV7swUY=; b=lcDRrZhGux2J+b8soNktNWTftz9ZRYrjS8/B9gbYLavxbmIItdhx6EWt/msZr39+wR agMlzDbQKF0QNQ3Z51jSdAYvR3PANoCAHcBg0a1zVN4d30P1FVpTxZkknEjwYeN6JEEr wiKEGQ0UpXjpj5fXx24J3DQAbcsbIRDuQYAtecj0vIP7uzI0r2pLVZ4rQDI6alNqAIYa HBl67rtnQ9aVNcOJuQG2mRwtpM1Bt2dFfYhrTRjzSB/fT2d7CbHA3aBblHXvUpeqW3l+ iGjiFRaX1AjMn/zR7xLPEfuKGuKtEFj/Y3nfPhB3oynP3w9kY4fSE24mbfCPSKYu1rVH dl9w== X-Gm-Message-State: APjAAAX9mPl3rFGs3vkmPnHbTJDT/bR52nmrvknfVkc9bEy7+Y7RX/gQ iCM5+s+Pj9JiO5YFxEcC1Bc= X-Google-Smtp-Source: APXvYqzgg3rTClcQE+A1TJS5W2yoew4Dum9vlYzT8nPqXazzqvwuVEoNBKpm0Y6EUfydm6ty+0zDBA== X-Received: by 2002:a62:3387:: with SMTP id z129mr3135237pfz.185.1571356375018; Thu, 17 Oct 2019 16:52:55 -0700 (PDT) Received: from 205.66.20.149.in-addr.arpa (205.66.20.149.in-addr.arpa. [149.20.66.205]) by smtp.gmail.com with ESMTPSA id x65sm4712300pgb.75.2019.10.17.16.52.53 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 17 Oct 2019 16:52:54 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601\)) From: Fred Baker In-Reply-To: <5A5B4DE12C0DAC44AF501CD9A2B01A8D93503A7B@DGGEMM532-MBX.china.huawei.com> Date: Thu, 17 Oct 2019 16:52:53 -0700 Cc: "spring@ietf.org" , "ipv6@ietf.org" , "v6ops@ietf.org" , Clarence Filsfils , Satoru Matsushima Content-Transfer-Encoding: quoted-printable Message-Id: <153D8103-B147-4EE7-B7FE-A845D986938E@gmail.com> References: <157110930835.24708.13140748426444834467.idtracker@ietfa.amsl.com> <5A5B4DE12C0DAC44AF501CD9A2B01A8D93503A7B@DGGEMM532-MBX.china.huawei.com> To: Lizhenbin X-Mailer: Apple Mail (2.3601) Archived-At: Subject: Re: [v6ops] New Version Notification for draft-matsushima-spring-srv6-deployment-status-02.txt X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Oct 2019 23:52:58 -0000 > On Oct 17, 2019, at 5:30 AM, Lizhenbin wrote: >=20 > In the past two years, China pushed the IPv6 deployment and almost all = the IP networks of operators achieve the goal "IPv6 Ready". This provide = a strong base for SRv6 deployments which can help operators provide new = services based on IPv6 infrastructure. With respect, I would suggest that before we push for SRv6 deployment, = we develop and SRv6 use case that IPv6 doesn't support. My perception is = that SRv6 is a solution looking for a problem.= From nobody Thu Oct 17 17:10:49 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1387512010F for ; Thu, 17 Oct 2019 17:10:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=g-softbank-co-jp.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gfG5gBL6P9sq for ; Thu, 17 Oct 2019 17:10:40 -0700 (PDT) Received: from mail-ot1-x32a.google.com (mail-ot1-x32a.google.com [IPv6:2607:f8b0:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6266E120105 for ; Thu, 17 Oct 2019 17:10:40 -0700 (PDT) Received: by mail-ot1-x32a.google.com with SMTP id 21so3457262otj.11 for ; Thu, 17 Oct 2019 17:10:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=g-softbank-co-jp.20150623.gappssmtp.com; s=20150623; h=mime-version:from:in-reply-to:references:date:message-id:subject:to :cc:content-transfer-encoding; bh=+aFgfFyxZ2W8RbxFvzEzmlTKkEQkCxKrVEsKpGP97mQ=; b=NFlxZKWpt1D6TC3xpjcVBA9sgnNw8YwF7rspbTBNNQDeI0/4veookC94OdQt0idFhr UqzIIA1OQ29uHDPkkq2jRjDnqQ0MpjGvswZdyUF/3WBVGNgf0mm6P0RyT/CShnwabHDX ky+AP5EhbQ4XDGD+CIlxEoKYDE+g5r8I653UNTce84dF+3F3b6cMa455HI1kbZ4udcNz NpXWm6Zuh9L7mLWAh+AJAecUY/imaR/AJk4cE5VFO8iCQO/PAQsCMOLiFV0QrHFjhm05 mrbR0xJCL5Ta4j1yfL1tZ0YBOzrsl5+GPxYLeaIakBzpTJR2MvbTC6qPOef3wrLKQN9Y lBuw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:in-reply-to:references:date :message-id:subject:to:cc:content-transfer-encoding; bh=+aFgfFyxZ2W8RbxFvzEzmlTKkEQkCxKrVEsKpGP97mQ=; b=uDlA7pNcAg7D3V0j8hgcIcWPVRIo2pc3qe/9K6yG4xrl5lT698+jX32ul57RrA0ByF GhUX9KWK4o6Qr3X92e6oN5qOCphCIu+cez6cphhQTuHaq6Yb/51tXgusy21mQLpMIL/1 fpFKzEcqqsLAScl29PuiJQPzrYMdCxrWbqGnFRe67Pni0dYgp385OkGZE04vhRiIYEUb YCsWbm1eUfBc5LuIXgoVnDGpeukAX6yf4cUS4qvY3Bd8/gY9nXjQqphnIjQ0M5B1CJel PlZ8G+lH9jlJnOTdIFOnLaZXtooY3e2/gWVXV69RkvnrxxOe/A56ltU72xyjES5SXUpD qvkg== X-Gm-Message-State: APjAAAWF8YjIYrdCWVnE8m5dCKxwgub4tKNdCYCkO4h3OmUT5wUT0+zU gtZpgqeEm11CGPxroahGXfPD0tV02eumnhLj93L7gQ== X-Google-Smtp-Source: APXvYqzPKZV/gVz7TcVDq9baHsT08Mpvk6vcmyquj+4k5N0UWfGyk9HYA66Xm7LsQb9JqNA7fCYrTzhqbvuffB3o20U= X-Received: by 2002:a05:6830:4a6:: with SMTP id l6mr3708550otd.212.1571357439306; Thu, 17 Oct 2019 17:10:39 -0700 (PDT) Received: from unknown named unknown by gmailapi.google.com with HTTPREST; Thu, 17 Oct 2019 17:10:37 -0700 Mime-Version: 1.0 (1.0) From: =?UTF-8?B?5p2+5baL6IGh?= In-Reply-To: <153D8103-B147-4EE7-B7FE-A845D986938E@gmail.com> References: <157110930835.24708.13140748426444834467.idtracker@ietfa.amsl.com> <5A5B4DE12C0DAC44AF501CD9A2B01A8D93503A7B@DGGEMM532-MBX.china.huawei.com> <153D8103-B147-4EE7-B7FE-A845D986938E@gmail.com> Date: Thu, 17 Oct 2019 17:10:37 -0700 Message-ID: To: Fred Baker Cc: Lizhenbin , "spring@ietf.org" , "ipv6@ietf.org" , "v6ops@ietf.org" , Clarence Filsfils Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] New Version Notification for draft-matsushima-spring-srv6-deployment-status-02.txt X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Oct 2019 00:10:43 -0000 Fred, SRv6 is the solution to build networks and provide its services under the segment routing architecture in case of IPv6 dataplane. Sent from my iPhone 2019/10/18 8:52=E3=80=81Fred Baker =E3=81=AE=E3= =83=A1=E3=83=BC=E3=83=AB: > > >> On Oct 17, 2019, at 5:30 AM, Lizhenbin wrote: >> >> In the past two years, China pushed the IPv6 deployment and almost all t= he IP networks of operators achieve the goal "IPv6 Ready". This provide a s= trong base for SRv6 deployments which can help operators provide new servic= es based on IPv6 infrastructure. > > With respect, I would suggest that before we push for SRv6 deployment, we= develop and SRv6 use case that IPv6 doesn't support. My perception is that= SRv6 is a solution looking for a problem. From nobody Fri Oct 18 08:29:20 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F053120128 for ; Fri, 18 Oct 2019 08:29:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=herbertland-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Z41cJ9YSKEi for ; Fri, 18 Oct 2019 08:29:12 -0700 (PDT) Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 55C681200B8 for ; Fri, 18 Oct 2019 08:29:12 -0700 (PDT) Received: by mail-ed1-x531.google.com with SMTP id a15so4867251edt.6 for ; Fri, 18 Oct 2019 08:29:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=herbertland-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=LdOxFcRlN0koizO1zjqO48CbKgcZHLJKpKHpITE2tD8=; b=mTHCZvGkmTqi+qvllU6IUOH0h4HlgiGciO93V/afcf/dHjE42o5SIhh+eWXNJmsLtV /9JJ2te5eQpIC25eRvc/H78ZM60Q8bdF8VlLar6xLLCLW5C1TR61BY+h1LmsPz/deusN I/4SmGoiFMDjelCZzmZeU0k953CKXnUlwyUw3vpXK7ZyKjzmYy3MUnTkRWeAQSaawVB0 LnocrF7KI+ZlR3stcNxiEkw1NhqR72WZ4Lgf6vu9JWBB6+4LDQvRIKtagIn6TIFtOef/ gsLhgsk3URChEDhgePxMO4vb74AhuCqw7DqUJ6PjOOsBChxIIxEgWCdiDaGJRK/URP0f xM3Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=LdOxFcRlN0koizO1zjqO48CbKgcZHLJKpKHpITE2tD8=; b=Eg1FGGH/kbYdQ8Qjr287NItVevXCzY1yYFZOQ2DGl7Ois1xQuTI01mh9wX8tGXc/lP Gpvar89UJVX6OqQ5FXzeEfmSoe+/ov6sOemBwHGQ24Cdx2/U31bjA48phzj2wHeHBcho 013Zv+aaUBv4Ma68tg6SQI3FeArwGLecXUtmXvwkDS3J/9ahU+ZkZGUjyZmXFbog2zZk YmsqHNFjwCIlACEF39OuxnDTjENRMSUZ2bex2Pq7MCuL1EcEe7AicP4rUTGFfH+licJ2 5nvbQO7GFsLfUva7Nh0JU32YzuC0NpWRvmBI5PbnHiwo04woTJTvqveIieLtqHH6dVBM mrCA== X-Gm-Message-State: APjAAAX8Y7LNYhPsOk8EaufYW6zH/pviw0qdRyYkUUhetFElsaoaqde1 dmK8YcpEpR4cEt6HMVSPNIxz8PTJx/dR9yCLa5fqog== X-Google-Smtp-Source: APXvYqyfPQXFxwPUOm040Y9m/PRvs6af0cKKBwCbrhFAAi2ihvabhWkUaa7sNRX6c1Rbhaxh2wzUp362hE3vc01w6Ng= X-Received: by 2002:aa7:de12:: with SMTP id h18mr10155125edv.226.1571412550593; Fri, 18 Oct 2019 08:29:10 -0700 (PDT) MIME-Version: 1.0 References: <157110930835.24708.13140748426444834467.idtracker@ietfa.amsl.com> <5A5B4DE12C0DAC44AF501CD9A2B01A8D93503A7B@DGGEMM532-MBX.china.huawei.com> <153D8103-B147-4EE7-B7FE-A845D986938E@gmail.com> In-Reply-To: <153D8103-B147-4EE7-B7FE-A845D986938E@gmail.com> From: Tom Herbert Date: Fri, 18 Oct 2019 08:28:59 -0700 Message-ID: To: Fred Baker Cc: Lizhenbin , "spring@ietf.org" , "ipv6@ietf.org" , "v6ops@ietf.org" , Clarence Filsfils , Satoru Matsushima Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] New Version Notification for draft-matsushima-spring-srv6-deployment-status-02.txt X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Oct 2019 15:29:15 -0000 On Thu, Oct 17, 2019 at 4:53 PM Fred Baker wrote= : > > > > > On Oct 17, 2019, at 5:30 AM, Lizhenbin wrote: > > > > In the past two years, China pushed the IPv6 deployment and almost all = the IP networks of operators achieve the goal "IPv6 Ready". This provide a = strong base for SRv6 deployments which can help operators provide new servi= ces based on IPv6 infrastructure. > > With respect, I would suggest that before we push for SRv6 deployment, we= develop and SRv6 use case that IPv6 doesn't support. My perception is that= SRv6 is a solution looking for a problem. A related question can be asked. Section 9 of draft-ietf-6man-segment-routing-header-25 shows that SRH TLVs and SRH HMAC have not been implemented, except for HMAC in Linux which probably doesn't conform to the latest draft. Given there's no implementation, then it's logical to assume there's no deployment of these and none of deployment in draft-matsushima-spring-srv6-deployment-status-02 use these (that draft does not even mention TLVs) . Nevertheless, TLVs and HMAC are a major part of SRH and 6man has exerted quite a bit of effort working on these. What is the use case for SR TLVs and HMAC? Why are these use cases not already supported in IPv6 by HBH options, Destination options, or Authentication Header? Tom > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From nobody Tue Oct 22 13:55:44 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8972812008B; Tue, 22 Oct 2019 13:55:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=hFCZyoSP; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=ZWu4yMbQ Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7bebY51Qygnr; Tue, 22 Oct 2019 13:55:30 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99C25120077; Tue, 22 Oct 2019 13:55:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1984; q=dns/txt; s=iport; t=1571777730; x=1572987330; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=+SqQz2DjQgdrJVkGkWMKptFg1wmMg2DPoLCt30MCT7Y=; b=hFCZyoSPnotU8x7rjgEXaTMNKU76NknN6A+VnNUqFbXgZxoAYnoOGSNc pIoo2sEnRvrRvxaN9E59q1XIYYDHEiprpwixQZ6rMWY1hV4Nu59hD6k8f ID40lY4jZduPiuOQUXG4i64buLS/ZgNX8yUm5i5mc1Muqpwd48o08aetv k=; IronPort-PHdr: =?us-ascii?q?9a23=3ApDfblhe5DIZIYDilgCqadW43lGMj4e+mNxMJ6p?= =?us-ascii?q?chl7NFe7ii+JKnJkHE+PFxlwGQD57D5adCjOzb++D7VGoM7IzJkUhKcYcEFn?= =?us-ascii?q?pnwd4TgxRmBceEDUPhK/u/ZSAnAsVcVVJN9HCgOk8TE8H7NBXf?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AkAADqa69d/5tdJa1lGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBEQEBAQEBAQEBAQEBgWoBAQEBAQELAYFKUAVsVyAECyoKhBx?= =?us-ascii?q?igmUDileCNyWJbo4UglIDVAkBAQEMAQEYCwoCAQGDe0UCF4MTJDcGDgIDCQE?= =?us-ascii?q?BBAEBAQIBBQRthTcMhUsBAQEDAQEBEBERDAEBLAkCAQ8CAQgYAgImAgICHwY?= =?us-ascii?q?LFRACBAENBRsHgwABgkYDDiABDqcbAoE4iGF1gTKCfgEBBYUJDQuCFwMGgQ4?= =?us-ascii?q?oAYwOGIFAP4ERJwwTgkw+ghtHAQGBYReCeTKCLIxzgk43nSlBCoIkkRuBUII?= =?us-ascii?q?7G5lOjjaKN48QAgQCBAUCDgEBBYFoI4FYcBU7KgGCQVAQFIMGDBcVgzuFFIU?= =?us-ascii?q?/dIEpjVUBgSMBAQ?= X-IronPort-AV: E=Sophos;i="5.68,217,1569283200"; d="scan'208";a="354904708" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 22 Oct 2019 20:55:29 +0000 Received: from XCH-ALN-020.cisco.com (xch-aln-020.cisco.com [173.36.7.30]) by rcdn-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id x9MKtTa7001073 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 22 Oct 2019 20:55:29 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-ALN-020.cisco.com (173.36.7.30) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 22 Oct 2019 15:55:28 -0500 Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 22 Oct 2019 15:55:28 -0500 Received: from NAM01-SN1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 22 Oct 2019 15:55:28 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=A34JajynhfcZwa8o40eNjujsNwEtFPtROjrRrB6u1sZxzNq/UqXOIndIhSq421mMsprxyo0wJxjwmzr4jSA8vvJ/zoIgvT4Hz+JUsNfny+AGYAK1vWdXm2e8D5OEZVOoq8Pc11Rw/QsNlRZ3CdSNUOiSo1aW0ib5kFzvTJV2xErCaUp/t0mY0hJwmle/dC5+lCoiDyn/RNblzpT9lC+M6y5hnKwDelaI598DOJffOF8nQZqWgqyXi6/yMECIKQB7VZCoUBFpXqXREsSI5feeI2kMK58tZJywI0Tt7tZWq2aScO5AMcr1vbdp+NlGEyG1oNnLDqJVHz/N+5eVQ7PXsA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+SqQz2DjQgdrJVkGkWMKptFg1wmMg2DPoLCt30MCT7Y=; b=T9YH7BbWcOpI120iGeHmrf93yadZ5G5kEohZ7QaNB2TasrxPunckMFOj3pKxXqx6hLQVJwEOVk9KRZAuuTPUSuUh4+spw5hmwjYZTM21jZBHVh3pK8vdx5fshowMlaUKYWp+vpCLDTM3epxhLSEHNbje7oCcRp7EuUhSAeJYGRXJLbNI2EiC0QLjbHK2PVLypTDGIoVbi1VbVCMJHN1r7nteiJb9/xhja0S7eS7ZcdWjDY9XrUXPNzaPhcA2ekL2EV8X7cp4o/T8UZNa+CPk+4pDb5RIgJNCQRFGOU7fObfKVCwYr3hMb6v6YbRCDcqItflxi4vsTEQVMHgOlNUC/Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+SqQz2DjQgdrJVkGkWMKptFg1wmMg2DPoLCt30MCT7Y=; b=ZWu4yMbQVgaXO1AltHsbWkZR4h0rSnF9Ba3Lv11vNOHbe3h5J40QU3hKoqFC2ahRRpzsDX1KnszurEQh19reMKs7jMvAEwolw29l4Wq4TpEhmz++XIHpUAsAxvMmxUW92fPrY1ahai8RR3EcKg2Si7bvbCHQjM0SljGW5L1/Nro= Received: from MN2PR11MB3902.namprd11.prod.outlook.com (10.255.180.77) by MN2PR11MB3901.namprd11.prod.outlook.com (20.179.150.76) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2367.20; Tue, 22 Oct 2019 20:55:27 +0000 Received: from MN2PR11MB3902.namprd11.prod.outlook.com ([fe80::8829:7db5:3bf1:164e]) by MN2PR11MB3902.namprd11.prod.outlook.com ([fe80::8829:7db5:3bf1:164e%5]) with mapi id 15.20.2347.029; Tue, 22 Oct 2019 20:55:27 +0000 From: "Bertrand Duvivier (bduvivie)" To: Fred Baker , Lizhenbin CC: "spring@ietf.org" , "ipv6@ietf.org" , "v6ops@ietf.org" , "Clarence Filsfils (cfilsfil)" , Satoru Matsushima Thread-Topic: [spring] New Version Notification for draft-matsushima-spring-srv6-deployment-status-02.txt Thread-Index: AQHViRsI6HCT61t1VkC5Oeypxz3nGg== Date: Tue, 22 Oct 2019 20:55:27 +0000 Message-ID: References: <157110930835.24708.13140748426444834467.idtracker@ietfa.amsl.com> <5A5B4DE12C0DAC44AF501CD9A2B01A8D93503A7B@DGGEMM532-MBX.china.huawei.com> <153D8103-B147-4EE7-B7FE-A845D986938E@gmail.com> In-Reply-To: <153D8103-B147-4EE7-B7FE-A845D986938E@gmail.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=bduvivie@cisco.com; x-originating-ip: [173.38.220.59] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 450bf97b-48be-4c8c-7682-08d757322af4 x-ms-traffictypediagnostic: MN2PR11MB3901: x-ms-exchange-purlcount: 1 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 01986AE76B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(346002)(136003)(376002)(366004)(39860400002)(199004)(189003)(2616005)(33656002)(91956017)(7736002)(2906002)(66066001)(316002)(76116006)(305945005)(478600001)(81156014)(25786009)(4326008)(53546011)(26005)(11346002)(81166006)(5660300002)(71190400001)(6506007)(256004)(71200400001)(486006)(86362001)(446003)(6436002)(66446008)(476003)(6486002)(64756008)(8936002)(36756003)(66946007)(3846002)(6306002)(54906003)(66476007)(76176011)(110136005)(102836004)(6116002)(8676002)(6512007)(966005)(99286004)(14454004)(6246003)(229853002)(186003)(58126008)(66556008); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3901; H:MN2PR11MB3902.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: d0GAC+cR25c/R/Wms50MUZrfHgQFyrotSCE7T1nhBUgp51YJ5iSJJjzWENb4n7xbarPZvUBw75y/KtVRceRkNb4QHY27n9WGaE9eZl+T6Eq+0ZxnVjpF7lHp3u/1+vdPGlDJqfmw0loCCom6403d3PaTlIrXjnKWhmQkZvr5N0+qsyr6BAPUvPs/HzSUbbAxh/EVgHjIUWqT9icFwgO3jCKJqUAuGTxFM2Q1m1z84sg0dbA1v0vYaDrQcHCCCoLhcb/7q0BxpPzajOlssvXUwgTss45BGgqoo3ngXPfAyFd+DY/dHAxdhgSkzBWDIxWOPLCHI2D0C6EfbzjmNd6M7WH3rj05nZTTp805SFDMHWGV3NUKsSaJtcw0TV9zZ4ARj1gflJord+JcxI205wVZ1gJssu/NbiNywamMOC0gbQjhSmLeKTbbTDy+ejxbEX5jPP6sWJB48ZR1EcTEfZgl8mTnyibo+13ysh6Tg82NDtE= Content-Type: text/plain; charset="utf-8" Content-ID: <7B8A33E50BF84E4E8DB63A529E095EC2@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 450bf97b-48be-4c8c-7682-08d757322af4 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Oct 2019 20:55:27.3202 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: geBpXfBZ8oqlZN8ABTsoJviGtQToztaUWLcibEryU3z6NT44EoVO0QQTFILPWPNMg9tlwX4PFVnpOENeUBnz4A== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3901 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.30, xch-aln-020.cisco.com X-Outbound-Node: rcdn-core-4.cisco.com Archived-At: Subject: Re: [v6ops] [spring] New Version Notification for draft-matsushima-spring-srv6-deployment-status-02.txt X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Oct 2019 20:55:33 -0000 RnJlZCwNCg0KSVB2NiB3aXRob3V0IFNSSCBkb24ndCBzdXBwb3J0IFRFLCBub3IgRlJSICh0b3Bv bG9neSBpbmRlcGVuZGVudCksIG5vciBTZXJ2aWNlIENoYWluaW5nLCBub3IgTmV0d29yayBQcm9n cmFtbWluZywgU1J2NiBkb2VzIGFkZHJlc3MgYWxsLiBXaGljaCB3aGF0IElQdjQgbmV2ZXIgZGlk LCBmb3IgSVB2NCwgd2UgaGFkIHRvIGFkZCBleHRyYSBlbmNhcCAoTVBMUyxOU0gsLi4pIGludHJv ZHVjaW5nIGNvbnN0cmFpbnRzIGxpa2Ugbm8gc3VtbWFyaXNhdGlvbiB0byBkZWxpdmVyIHNpbWls YXIgdXNlLWNhc2VzLg0KDQpCVFcgSSdtIGF3YXJlIG9mDQotIDUrIGhhcmR3YXJlIHZlbmRvcnMg c3VwcG9ydGluZyBTUnY2DQotIDQrIGRlcGxveWVkIFNSdjYgbmV0d29ya3MNCi0gMjArIG5ldHdv cmsgb3BlcmF0b3JzIGludGVyZXN0ZWQgYnkgU1J2Ng0KLSBPUydzIHN1cHBvcnRpbmcgU1J2NiBs aWtlOiBMaW51eCwgRkQuaW8sLi4uDQpUaHVzICJiZWZvcmUgd2UgcHVzaCBTUnY2IGRlcGxveWVt ZW50IiBzb3VuZHMgbm90IGxvbmdlciBhbiBvcHRpb24sIGl0IGlzIGRvbmUgYWxyZWFkeS4gDQoN CkJSR0RTIEJlcnRyYW5kIA0KQ2lzY28NCg0KDQrvu79PbiAxOC8xMC8yMDE5LCAwMTo1MiwgInNw cmluZyBvbiBiZWhhbGYgb2YgRnJlZCBCYWtlciIgPHNwcmluZy1ib3VuY2VzQGlldGYub3JnIG9u IGJlaGFsZiBvZiBmcmVkYmFrZXIuaWV0ZkBnbWFpbC5jb20+IHdyb3RlOg0KDQogICAgDQogICAg PiBPbiBPY3QgMTcsIDIwMTksIGF0IDU6MzAgQU0sIExpemhlbmJpbiA8bGl6aGVuYmluQGh1YXdl aS5jb20+IHdyb3RlOg0KICAgID4gDQogICAgPiBJbiB0aGUgcGFzdCB0d28geWVhcnMsIENoaW5h IHB1c2hlZCB0aGUgSVB2NiBkZXBsb3ltZW50IGFuZCBhbG1vc3QgYWxsIHRoZSBJUCBuZXR3b3Jr cyBvZiBvcGVyYXRvcnMgYWNoaWV2ZSB0aGUgZ29hbCAiSVB2NiBSZWFkeSIuIFRoaXMgcHJvdmlk ZSBhIHN0cm9uZyBiYXNlIGZvciBTUnY2IGRlcGxveW1lbnRzIHdoaWNoIGNhbiBoZWxwIG9wZXJh dG9ycyBwcm92aWRlIG5ldyBzZXJ2aWNlcyBiYXNlZCBvbiBJUHY2IGluZnJhc3RydWN0dXJlLg0K ICAgIA0KICAgIFdpdGggcmVzcGVjdCwgSSB3b3VsZCBzdWdnZXN0IHRoYXQgYmVmb3JlIHdlIHB1 c2ggZm9yIFNSdjYgZGVwbG95bWVudCwgd2UgZGV2ZWxvcCBhbmQgU1J2NiB1c2UgY2FzZSB0aGF0 IElQdjYgZG9lc24ndCBzdXBwb3J0LiBNeSBwZXJjZXB0aW9uIGlzIHRoYXQgU1J2NiBpcyBhIHNv bHV0aW9uIGxvb2tpbmcgZm9yIGEgcHJvYmxlbS4NCiAgICBfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIHNwcmluZyBtYWlsaW5nIGxpc3QNCiAgICBz cHJpbmdAaWV0Zi5vcmcNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L3NwcmluZw0KICAgIA0KICAgIA0KDQo= From nobody Tue Oct 22 14:11:17 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0EA312008D; Tue, 22 Oct 2019 14:11:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7bxodke9TdHV; Tue, 22 Oct 2019 14:11:07 -0700 (PDT) Received: from maila2.tigertech.net (maila2.tigertech.net [208.80.4.152]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F03B712008B; Tue, 22 Oct 2019 14:11:06 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by maila2.tigertech.net (Postfix) with ESMTP id 46yR4p6JhFzKp6Y; Tue, 22 Oct 2019 14:11:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=2.tigertech; t=1571778666; bh=KOLlvl8SM5TlvHMnDJbrQeZSNHzItHSYr0jpvwlR4UE=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=b77nkSyuE54ySMWpSCvUb63hpRRh8EWwSdf1OGNscOvqmBaG05AuoHauSbNa/0TfV TUTyumWw4GxSEFhoNX2BDfqi1BIiNpdbLY+j+h0XKMOntvb9ebWJiKAy5HCvlIJTEc JGVMbZEPB7OaCVS6YOZrhx7w6/HngcvTVzQ+tNj4= X-Virus-Scanned: Debian amavisd-new at maila2.tigertech.net Received: from [10.195.197.206] (unknown [135.245.111.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by maila2.tigertech.net (Postfix) with ESMTPSA id 46yR4m6Lh7zxQrD; Tue, 22 Oct 2019 14:11:04 -0700 (PDT) To: "Bertrand Duvivier (bduvivie)" , Fred Baker , Lizhenbin Cc: "spring@ietf.org" , "ipv6@ietf.org" , "v6ops@ietf.org" , "Clarence Filsfils (cfilsfil)" , Satoru Matsushima References: <157110930835.24708.13140748426444834467.idtracker@ietfa.amsl.com> <5A5B4DE12C0DAC44AF501CD9A2B01A8D93503A7B@DGGEMM532-MBX.china.huawei.com> <153D8103-B147-4EE7-B7FE-A845D986938E@gmail.com> From: "Joel M. Halpern" Message-ID: <546dfd39-fbaf-3839-9482-4cb7254b51e0@joelhalpern.com> Date: Tue, 22 Oct 2019 17:11:01 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] [spring] New Version Notification for draft-matsushima-spring-srv6-deployment-status-02.txt X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Oct 2019 21:11:09 -0000 Hmm. That seems an overstatement. IPv6 can carry NSH (RFC 8300) and support Service Chaining. One can use IP-in-IP encapsulation to support FRR. While the TE available without NSH or SR is limited capabilities. And of course if the operators is willing to install MPLS, they can get all of the SRv6 capabilities by enabling MPLS (a capability all of their devices likely support.) And there are costs and risks associated with deploying SRv6. Yours, Joel On 10/22/2019 4:55 PM, Bertrand Duvivier (bduvivie) wrote: > Fred, > > IPv6 without SRH don't support TE, nor FRR (topology independent), nor Service Chaining, nor Network Programming, SRv6 does address all. Which what IPv4 never did, for IPv4, we had to add extra encap (MPLS,NSH,..) introducing constraints like no summarisation to deliver similar use-cases. > > BTW I'm aware of > - 5+ hardware vendors supporting SRv6 > - 4+ deployed SRv6 networks > - 20+ network operators interested by SRv6 > - OS's supporting SRv6 like: Linux, FD.io,... > Thus "before we push SRv6 deployement" sounds not longer an option, it is done already. > > BRGDS Bertrand > Cisco > > > On 18/10/2019, 01:52, "spring on behalf of Fred Baker" wrote: > > > > On Oct 17, 2019, at 5:30 AM, Lizhenbin wrote: > > > > In the past two years, China pushed the IPv6 deployment and almost all the IP networks of operators achieve the goal "IPv6 Ready". This provide a strong base for SRv6 deployments which can help operators provide new services based on IPv6 infrastructure. > > With respect, I would suggest that before we push for SRv6 deployment, we develop and SRv6 use case that IPv6 doesn't support. My perception is that SRv6 is a solution looking for a problem. > _______________________________________________ > spring mailing list > spring@ietf.org > https://www.ietf.org/mailman/listinfo/spring > > > > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > From nobody Tue Oct 22 17:17:18 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFAAE12021C; Tue, 22 Oct 2019 17:17:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=L6qZ/+g5; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=gPhNJZzR Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rMTUeeB-5UAH; Tue, 22 Oct 2019 17:17:04 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C592120152; Tue, 22 Oct 2019 17:17:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3840; q=dns/txt; s=iport; t=1571789824; x=1572999424; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=WbsxOrTnJkzgq5kkT8n/8jMMDPXZrF3bgjP3lXEWXag=; b=L6qZ/+g5MutWU/zyoElwQKUUyUunLeAxcNmn7LqoFdc/DdgFlKvVoPYU DsOu9gTvbekn1KF/XtD8m9RWYcuWZIGdM9gcK8W3rSkoQkSAczD4uFp4H 9tQO7+cZrHhg7BtoerPEKiK/If1vzvbjiPChoe8quK+srYrNldVBezbbJ k=; IronPort-PHdr: =?us-ascii?q?9a23=3Ar/FLSxGSSDFgvv9UPUcigJ1GYnJ96bzpIg4Y7I?= =?us-ascii?q?YmgLtSc6Oluo7vJ1Hb+e4z1Q3SRYuO7fVChqKWqK3mVWEaqbe5+HEZON0pNV?= =?us-ascii?q?cejNkO2QkpAcqLE0r+efTmcjI7AsVPfFRk5Hq8d0NSHZW2ag=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AiAADzmq9d/5pdJa1lGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBEQEBAQEBAQEBAQEBgWoBAQEBAQELAYFKUAVsVyAECyoKhBx?= =?us-ascii?q?igmUDilaCXIlujhSCUgNUCQEBAQwBARgLCgIBAYN7RQIXgxMkNwYOAgMJAQE?= =?us-ascii?q?EAQEBAgEFBG2FNwyFTAEBBAEBEBERDAEBLAkCAQ8CAQgYAgImAgICHwYLFRA?= =?us-ascii?q?CBAENBRsHgwABgkYDLgEOpn8CgTiIYXWBMoJ+AQEFhQENC4IXAwaBDigBjA4?= =?us-ascii?q?YgUA/gREnH4JMPoIbRwEBgTonF4J5MoIsjHMfgi83nSlBCoIkkRuBUII7G5l?= =?us-ascii?q?OjjaKN48QAgQCBAUCDgEBBYFoI4FYcBU7KgGCQVAQFIMGDBcVgzuFFIU/dIE?= =?us-ascii?q?pjCSBMQGBIwEB?= X-IronPort-AV: E=Sophos;i="5.68,218,1569283200"; d="scan'208";a="348695400" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 23 Oct 2019 00:17:02 +0000 Received: from XCH-ALN-019.cisco.com (xch-aln-019.cisco.com [173.36.7.29]) by rcdn-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id x9N0H2W1008385 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 23 Oct 2019 00:17:02 GMT Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-ALN-019.cisco.com (173.36.7.29) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 22 Oct 2019 19:17:01 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 22 Oct 2019 19:17:01 -0500 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 22 Oct 2019 20:17:01 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Arhwvp741oeRW81gAlUwfHqfTRxnHnpU5NjLFxXJe5GVui0JWZfukpPg10v8EBTlzeSSpEq+GO90lxjAChZnD0O+RCqTWqaivPfaZLaI+zHA3hulsp4kz+1NJWni+DbB0SK9iJsE83XDMF3P6sJkg1XjgP8NCW4P8jZlwtKtmxtM2sYXTWsNA8jo6TVNbGOdAEmim2RcZBiegemg4WA5HBVY2HVjmaMkvYzbr4WVUNBygSAhm3P1IFL+lwlhf1f+c5Muqjyx6JpgcLHtbNwe/KlBqnQ6Xb1XUdwNcT5rDOcC2ht1zROq8o9MPoyEoR07sQEm/2Prs3jbuo0hsyeN9A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WbsxOrTnJkzgq5kkT8n/8jMMDPXZrF3bgjP3lXEWXag=; b=TF48Kml6s0XxIO/LaRtcGEyqvCBqa8Ddnvg1GaaoFHza+dpU7rAU165WDjOCfc6DNGTeQG2cH6KilsE5jA3LMwMEfb3EQ6J6CGzpA9UwcYJ9JCRYkryNXejPzb8wdm2zTfUoWYPoKTPHKPU19VOnPXf8n2XPpAqaxSf4lIB42OLf2ivmlyKaEisstqL2VsteskRfiEyQm8a8GFJUROz/5PzxCYY5J9CpIBJnwogiulxPfDySnta/LYHFO1lSkyzoEY73zhe1EKgiPxmDXzPXZm1kM6XgFHD/M9BALF7ZQ13f/TGoVFabClCnm3yZr4l+PvKDDyh1Fe5MjMYzyQ+mwA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WbsxOrTnJkzgq5kkT8n/8jMMDPXZrF3bgjP3lXEWXag=; b=gPhNJZzR63d5ggGlJ6kqZeycA4Uc41KaMByQIOTOcczFLDiNT2Pq/HiAXnRP0yDwNX0EEdvmjkyDjFQeKFa/uYZzFUr/kx2vXFmUIOFbD93KPBBg1BcW9SndpWDJEHlqCIJJsGwi6+fH1ieFblL/0rEeXZIHtIkHYYj2cr61yBE= Received: from MN2PR11MB3902.namprd11.prod.outlook.com (10.255.180.77) by MN2PR11MB3599.namprd11.prod.outlook.com (20.178.251.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2347.21; Wed, 23 Oct 2019 00:17:00 +0000 Received: from MN2PR11MB3902.namprd11.prod.outlook.com ([fe80::8829:7db5:3bf1:164e]) by MN2PR11MB3902.namprd11.prod.outlook.com ([fe80::8829:7db5:3bf1:164e%5]) with mapi id 15.20.2347.029; Wed, 23 Oct 2019 00:17:00 +0000 From: "Bertrand Duvivier (bduvivie)" To: "Joel M. Halpern" , Fred Baker , Lizhenbin CC: "spring@ietf.org" , "ipv6@ietf.org" , "v6ops@ietf.org" , "Clarence Filsfils (cfilsfil)" , Satoru Matsushima Thread-Topic: [spring] New Version Notification for draft-matsushima-spring-srv6-deployment-status-02.txt Thread-Index: AQHViRsI6HCT61t1VkC5Oeypxz3nGqdnKDOAgABVfIA= Date: Wed, 23 Oct 2019 00:17:00 +0000 Message-ID: References: <157110930835.24708.13140748426444834467.idtracker@ietfa.amsl.com> <5A5B4DE12C0DAC44AF501CD9A2B01A8D93503A7B@DGGEMM532-MBX.china.huawei.com> <153D8103-B147-4EE7-B7FE-A845D986938E@gmail.com> <546dfd39-fbaf-3839-9482-4cb7254b51e0@joelhalpern.com> In-Reply-To: <546dfd39-fbaf-3839-9482-4cb7254b51e0@joelhalpern.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=bduvivie@cisco.com; x-originating-ip: [173.38.220.59] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 238ea18a-cb48-46aa-e158-08d7574e52b5 x-ms-traffictypediagnostic: MN2PR11MB3599: x-ms-exchange-purlcount: 2 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 019919A9E4 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(346002)(39860400002)(366004)(376002)(136003)(189003)(199004)(110136005)(316002)(71190400001)(6486002)(58126008)(5660300002)(14454004)(478600001)(53546011)(6506007)(966005)(2906002)(66066001)(33656002)(54906003)(102836004)(6246003)(36756003)(26005)(6436002)(99286004)(81166006)(2616005)(476003)(486006)(3846002)(91956017)(76176011)(66446008)(66556008)(11346002)(6306002)(186003)(81156014)(4326008)(256004)(7736002)(305945005)(14444005)(64756008)(71200400001)(66476007)(66946007)(6512007)(6116002)(76116006)(446003)(86362001)(25786009)(229853002)(8676002)(8936002); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3599; H:MN2PR11MB3902.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: mRIYt+UiIehlRW8LMAEOPZiqFK4TiC3QVwRvABVTKeCUy6ueqEgGtFj4dx/pWpnw7W9xj58n+x96UY4Xs5iEHzVXzLzajNxFzqQwwCYF6VOA5qsfM8mqMn9PCQ2ldjo5rOgvl4q9T+txQVogFEh+Lt8bE9AgIPYMr3X7XKtC4EkvZaGZBMbz44XdRVjC6Rp/fi0rYjnSlYu2msObx27kVapSPpxpOVbkp6S83v+XrTTt+M4MiOX91uYFehnNpRwrZIsa9uirWL05KAtIcGQkVAkEsT+MWOOoqQ4/1VnuzQ3FRRraWV0xr67Y2gyH94Rn9tXgyFjq0GFqoWo+3fxgN16C0ilh5602HAyEAi7iW1sAaIQWZc3wvBaSjqywFcxJ0LGHfQISa09bMvawp8HcinBtPAAIpWODdznZzXHmbSfUvUERJDvWMyiRNfNHyZD8KyUjO9nY0GIaZ1YnsDbu2A== Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 238ea18a-cb48-46aa-e158-08d7574e52b5 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Oct 2019 00:17:00.1772 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: UWj2TbL0YzBpft+xzko4dw2Pzf2TibrnlH2tROnGZNKbcT0cIdRDC1mzafBnY8bRBXZ/UA0nJKmxpeWiB6qKrg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3599 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.29, xch-aln-019.cisco.com X-Outbound-Node: rcdn-core-3.cisco.com Archived-At: Subject: Re: [v6ops] [spring] New Version Notification for draft-matsushima-spring-srv6-deployment-status-02.txt X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Oct 2019 00:17:07 -0000 Sm9lbCwNCg0KRnJlZCBhc2tlZCB3aGF0IElQdjYgY2FuJ3QgcmVzb2x2ZS4NCg0KTm90IElQdjYg KyBOU0ggKyBNUExTLg0KDQpUaGVyZSBpcyByaXNrIGFuZCBjb3N0IHdpdGggSVB2NiArIE5TSCAr IE1QTFMgYXMgd2VsbC4uLiANCg0KQmVzdCBSZWdhcmRzIEJlcnRyYW5kDQoNCg0KIA0KDQrvu79P biAyMi8xMC8yMDE5LCAyMzoxMSwgIkpvZWwgTS4gSGFscGVybiIgPGptaEBqb2VsaGFscGVybi5j b20+IHdyb3RlOg0KDQogICAgSG1tLiAgVGhhdCBzZWVtcyBhbiBvdmVyc3RhdGVtZW50Lg0KICAg IA0KICAgIElQdjYgY2FuIGNhcnJ5IE5TSCAoUkZDIDgzMDApIGFuZCBzdXBwb3J0IFNlcnZpY2Ug Q2hhaW5pbmcuDQogICAgDQogICAgT25lIGNhbiB1c2UgSVAtaW4tSVAgZW5jYXBzdWxhdGlvbiB0 byBzdXBwb3J0IEZSUi4NCiAgICANCiAgICBXaGlsZSB0aGUgVEUgYXZhaWxhYmxlIHdpdGhvdXQg TlNIIG9yIFNSIGlzIGxpbWl0ZWQgY2FwYWJpbGl0aWVzLg0KICAgIA0KICAgIEFuZCBvZiBjb3Vy c2UgaWYgdGhlIG9wZXJhdG9ycyBpcyB3aWxsaW5nIHRvIGluc3RhbGwgTVBMUywgdGhleSBjYW4g Z2V0IA0KICAgIGFsbCBvZiB0aGUgU1J2NiBjYXBhYmlsaXRpZXMgYnkgZW5hYmxpbmcgTVBMUyAo YSBjYXBhYmlsaXR5IGFsbCBvZiB0aGVpciANCiAgICBkZXZpY2VzIGxpa2VseSBzdXBwb3J0LikN CiAgICANCiAgICBBbmQgdGhlcmUgYXJlIGNvc3RzIGFuZCByaXNrcyBhc3NvY2lhdGVkIHdpdGgg ZGVwbG95aW5nIFNSdjYuDQogICAgDQogICAgWW91cnMsDQogICAgSm9lbA0KICAgIA0KICAgIA0K ICAgIE9uIDEwLzIyLzIwMTkgNDo1NSBQTSwgQmVydHJhbmQgRHV2aXZpZXIgKGJkdXZpdmllKSB3 cm90ZToNCiAgICA+IEZyZWQsDQogICAgPiANCiAgICA+IElQdjYgd2l0aG91dCBTUkggZG9uJ3Qg c3VwcG9ydCBURSwgbm9yIEZSUiAodG9wb2xvZ3kgaW5kZXBlbmRlbnQpLCBub3IgU2VydmljZSBD aGFpbmluZywgbm9yIE5ldHdvcmsgUHJvZ3JhbW1pbmcsIFNSdjYgZG9lcyBhZGRyZXNzIGFsbC4g V2hpY2ggd2hhdCBJUHY0IG5ldmVyIGRpZCwgZm9yIElQdjQsIHdlIGhhZCB0byBhZGQgZXh0cmEg ZW5jYXAgKE1QTFMsTlNILC4uKSBpbnRyb2R1Y2luZyBjb25zdHJhaW50cyBsaWtlIG5vIHN1bW1h cmlzYXRpb24gdG8gZGVsaXZlciBzaW1pbGFyIHVzZS1jYXNlcy4NCiAgICA+IA0KICAgID4gQlRX IEknbSBhd2FyZSBvZg0KICAgID4gLSA1KyBoYXJkd2FyZSB2ZW5kb3JzIHN1cHBvcnRpbmcgU1J2 Ng0KICAgID4gLSA0KyBkZXBsb3llZCBTUnY2IG5ldHdvcmtzDQogICAgPiAtIDIwKyBuZXR3b3Jr IG9wZXJhdG9ycyBpbnRlcmVzdGVkIGJ5IFNSdjYNCiAgICA+IC0gT1MncyBzdXBwb3J0aW5nIFNS djYgbGlrZTogTGludXgsIEZELmlvLC4uLg0KICAgID4gVGh1cyAiYmVmb3JlIHdlIHB1c2ggU1J2 NiBkZXBsb3llbWVudCIgc291bmRzIG5vdCBsb25nZXIgYW4gb3B0aW9uLCBpdCBpcyBkb25lIGFs cmVhZHkuDQogICAgPiANCiAgICA+IEJSR0RTIEJlcnRyYW5kDQogICAgPiBDaXNjbw0KICAgID4g DQogICAgPiANCiAgICA+IE9uIDE4LzEwLzIwMTksIDAxOjUyLCAic3ByaW5nIG9uIGJlaGFsZiBv ZiBGcmVkIEJha2VyIiA8c3ByaW5nLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGZyZWRi YWtlci5pZXRmQGdtYWlsLmNvbT4gd3JvdGU6DQogICAgPiANCiAgICA+ICAgICAgDQogICAgPiAg ICAgID4gT24gT2N0IDE3LCAyMDE5LCBhdCA1OjMwIEFNLCBMaXpoZW5iaW4gPGxpemhlbmJpbkBo dWF3ZWkuY29tPiB3cm90ZToNCiAgICA+ICAgICAgPg0KICAgID4gICAgICA+IEluIHRoZSBwYXN0 IHR3byB5ZWFycywgQ2hpbmEgcHVzaGVkIHRoZSBJUHY2IGRlcGxveW1lbnQgYW5kIGFsbW9zdCBh bGwgdGhlIElQIG5ldHdvcmtzIG9mIG9wZXJhdG9ycyBhY2hpZXZlIHRoZSBnb2FsICJJUHY2IFJl YWR5Ii4gVGhpcyBwcm92aWRlIGEgc3Ryb25nIGJhc2UgZm9yIFNSdjYgZGVwbG95bWVudHMgd2hp Y2ggY2FuIGhlbHAgb3BlcmF0b3JzIHByb3ZpZGUgbmV3IHNlcnZpY2VzIGJhc2VkIG9uIElQdjYg aW5mcmFzdHJ1Y3R1cmUuDQogICAgPiAgICAgIA0KICAgID4gICAgICBXaXRoIHJlc3BlY3QsIEkg d291bGQgc3VnZ2VzdCB0aGF0IGJlZm9yZSB3ZSBwdXNoIGZvciBTUnY2IGRlcGxveW1lbnQsIHdl IGRldmVsb3AgYW5kIFNSdjYgdXNlIGNhc2UgdGhhdCBJUHY2IGRvZXNuJ3Qgc3VwcG9ydC4gTXkg cGVyY2VwdGlvbiBpcyB0aGF0IFNSdjYgaXMgYSBzb2x1dGlvbiBsb29raW5nIGZvciBhIHByb2Js ZW0uDQogICAgPiAgICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQogICAgPiAgICAgIHNwcmluZyBtYWlsaW5nIGxpc3QNCiAgICA+ICAgICAgc3ByaW5n QGlldGYub3JnDQogICAgPiAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc3ByaW5nDQogICAgPiAgICAgIA0KICAgID4gICAgICANCiAgICA+IA0KICAgID4gLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0NCiAgICA+IElFVEYgSVB2NiB3b3JraW5nIGdyb3VwIG1haWxpbmcgbGlzdA0KICAgID4g aXB2NkBpZXRmLm9yZw0KICAgID4gQWRtaW5pc3RyYXRpdmUgUmVxdWVzdHM6IGh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaXB2Ng0KICAgID4gLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+ IA0KICAgIA0KDQo= From nobody Wed Oct 23 01:55:51 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02EB712093B for ; Wed, 23 Oct 2019 01:55:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g8cRBOE0hfoE for ; Wed, 23 Oct 2019 01:55:44 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C18711208FD for ; Wed, 23 Oct 2019 01:55:44 -0700 (PDT) Received: from [192.168.4.76] (unknown [190.179.111.238]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 5EE2086A4A; Wed, 23 Oct 2019 10:55:42 +0200 (CEST) From: Fernando Gont To: IPv6 Operations Openpgp: preference=signencrypt Message-ID: <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com> Date: Wed, 23 Oct 2019 03:51:32 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Oct 2019 08:55:50 -0000 Folks, Earlier this year there was a lot of discussion about slaac renumbering problems. Our original I-D covered everything from the problem statement to proposed protocol updates and operational workarounds. Based on the comments received while discussing this topic on this list and other forums, and in order to keep the discussion better focused on specific aspects of the problem, we have posted a v6ops-targetted document that focuses on: * The problem statement * Discussion of operational workarounds, and associated constraints The document is available at: https://tools.ietf.org/html/draft-gont-v6ops-slaac-renum We'd like to hear from the wg whether we have missed anything, whether the document is useful to the community, etc. Thanks! Cheers, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Wed Oct 23 08:08:24 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C53921209FF for ; Wed, 23 Oct 2019 08:08:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.498 X-Spam-Level: X-Spam-Status: No, score=-1.498 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0frfDYi_C75l for ; Wed, 23 Oct 2019 08:08:20 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9E7412093E for ; Wed, 23 Oct 2019 08:08:19 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iNIFE-0000IwC; Wed, 23 Oct 2019 17:08:16 +0200 Message-Id: To: v6ops@ietf.org Cc: Fernando Gont From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com In-reply-to: Your message of "Wed, 23 Oct 2019 03:51:32 -0500 ." <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com> Date: Wed, 23 Oct 2019 17:08:15 +0200 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Oct 2019 15:08:22 -0000 >The document is available at: >https://tools.ietf.org/html/draft-gont-v6ops-slaac-renum I think this is an important subject that is worth fixing. In this reply I'll focus on the preferred and valid lifetimes. On a host, the preferred and valid lifetimes play quite different roles. The preferred lifetime plays a role in setting up new flows. I.e. if the application does not provide a source address then the IPv6 layer uses the preferred lifetime to select the best source address among multiple candidates. Mistakenly setting the preferred lifetime of an address to zero may cause problems for new flows but has no impact on existing flows In contrast setting the valid lifetime to zero immediately signals an error condition to existing flows. This could cause a lot of trouble for long lived flows. The other side of the coin is that if a host ends up with stale prefixes, then the user maybe willing to wait for a few minutes for the situation to resolve itself, but probably not much longer. So the suggestion that AdvPreferredLifetime: AdvDefaultLifetime is likely not sufficient to be responsive to a user. And at the same time AdvValidLifetime: 1.5 * AdvDefaultLifetime is very risky if AdvDefaultLifetime is low. Note that RFC 4861 allows MaxRtrAdvInterval to be a low as 4 seconds, AdvDefaultLifetime can be as low as MaxRtrAdvInterval, so also 4 seconds. This creates a very fragile system. At the same time, AdvDefaultLifetime is commonly 1800 seconds. Which is way too long to wait for stale information to expire. I agree that valid and preferred lifetimes of resp. 30 days and 7 days are excessive. But I'm not at all convinced that tying them to AdvDefaultLifetime will have a positive effect. I'm also not convinced that there are sensible values for these lifetimes that are robust enough and at the same time responsive enough to deal with the issue at hand. Reducing the lifetimes would help against build up of stale prefixes. If they are set to a couple of hours. From nobody Wed Oct 23 09:07:53 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 993A01200B3 for ; Wed, 23 Oct 2019 09:07:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mpnc_A1QQ41k for ; Wed, 23 Oct 2019 09:07:46 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A577412004D for ; Wed, 23 Oct 2019 09:07:45 -0700 (PDT) Received: from [192.168.4.76] (unknown [190.179.55.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 0AE64865B4; Wed, 23 Oct 2019 18:07:41 +0200 (CEST) To: Philip Homburg , v6ops@ietf.org References: From: Fernando Gont Openpgp: preference=signencrypt Message-ID: Date: Wed, 23 Oct 2019 11:07:20 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Oct 2019 16:07:48 -0000 On 23/10/19 10:08, Philip Homburg wrote: >> The document is available at: >> https://tools.ietf.org/html/draft-gont-v6ops-slaac-renum > > I think this is an important subject that is worth fixing. > > In this reply I'll focus on the preferred and valid lifetimes. > > On a host, the preferred and valid lifetimes play quite different roles. > > The preferred lifetime plays a role in setting up new flows. I.e. if the > application does not provide a source address then the IPv6 layer uses > the preferred lifetime to select the best source address among multiple > candidates. Mistakenly setting the preferred lifetime of an address to zero > may cause problems for new flows but has no impact on existing flows > > In contrast setting the valid lifetime to zero immediately signals an error > condition to existing flows. This could cause a lot of trouble for long > lived flows. > > The other side of the coin is that if a host ends up with stale prefixes, > then the user maybe willing to wait for a few minutes for the situation to > resolve itself, but probably not much longer. Agreed. > So the suggestion that > AdvPreferredLifetime: AdvDefaultLifetime > is likely not sufficient to be responsive to a user. And at the same time > AdvValidLifetime: 1.5 * AdvDefaultLifetime > is very risky if AdvDefaultLifetime is low. > > Note that RFC 4861 allows MaxRtrAdvInterval to be a low as 4 seconds, > AdvDefaultLifetime can be as low as MaxRtrAdvInterval, so also 4 seconds. > > This creates a very fragile system. I may agree. That said, note that according to RFC7772, you'd never send RAs at a high frequency such as once as every 4 seconds. > At the same time, AdvDefaultLifetime is commonly 1800 seconds. Which is way > too long to wait for stale information to expire. > > I agree that valid and preferred lifetimes of resp. 30 days and 7 days > are excessive. But I'm not at all convinced that tying them to > AdvDefaultLifetime will have a positive effect. I'd say that at the very least the Preferred lifetime shouldn't be larger than AdvDefaultLifetime (what's the point of preferring an address you don't have a router for?). I do agree with your analysis of the valid lifetime -- is trickier. > I'm also not convinced > that there are sensible values for these lifetimes that are robust enough > and at the same time responsive enough to deal with the issue at hand. > > Reducing the lifetimes would help against build up of stale prefixes. If > they are set to a couple of hours. I do agree that this is not a complete solution, but, as you correctly note, would help against build up of stale prefixes. A better mitigation is to affect the preferred and possibly the valid lifetimes in response to consecutive RAs from the same router that lack the original (stale) prefix. e.g., after two consecutive RAs that do not contain the existing prefix, reduce the preferred lifetime. After two additional RAs, reduce the valid lifetime. Thoughts? Thanks! Cheers, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Thu Oct 24 00:43:06 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6ECB3120877 for ; Thu, 24 Oct 2019 00:43:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kaVP14-hXGhI for ; Thu, 24 Oct 2019 00:43:02 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 949DD120814 for ; Thu, 24 Oct 2019 00:43:01 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iNXlr-0000GGC; Thu, 24 Oct 2019 09:42:59 +0200 Message-Id: To: v6ops@ietf.org Cc: Fernando Gont From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: In-reply-to: Your message of "Wed, 23 Oct 2019 11:07:20 -0500 ." Date: Thu, 24 Oct 2019 09:42:58 +0200 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 07:43:05 -0000 >A better mitigation is to affect the preferred and possibly the valid >lifetimes in response to consecutive RAs from the same router that lack >the original (stale) prefix. e.g., after two consecutive RAs that do not >contain the existing prefix, reduce the preferred lifetime. After two >additional RAs, reduce the valid lifetime. I think that to avoid confusion it is probably best to have 3 documents: - one that describes host behavior. I think that what you describe above would fit in such a document. There is a lot we can do to make hosts more robust. - one that describes CPE behavior. If the CPE explicitly deprecates old prefixes then that solves the problem with CPE reboots. Having more sensible lifetimes fits in such a document, but I don't think it provides a solution. It just reduces some secondary effects such as stale prefix build up. - Finally, a document for ISPs describing how to best provide prefixes using DHCPv6-PD. I think all 3 approaches are needed: - a host doesn't want to rely on a cheap CPE doing its job. - a quality CPE can provide better support for hosts today. There will always be ISPs that do flash renumbering - finally a quality ISP may have a need to renumber customers and would like to do so without breaking things. From nobody Thu Oct 24 01:18:00 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5433120824 for ; Thu, 24 Oct 2019 01:17:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.497 X-Spam-Level: X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NTUlj6sL4ja8 for ; Thu, 24 Oct 2019 01:17:57 -0700 (PDT) Received: from mail-oi1-x229.google.com (mail-oi1-x229.google.com [IPv6:2607:f8b0:4864:20::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1AF1120046 for ; Thu, 24 Oct 2019 01:17:56 -0700 (PDT) Received: by mail-oi1-x229.google.com with SMTP id v186so7051707oie.5 for ; Thu, 24 Oct 2019 01:17:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=rxyvXGkpXVs7QdXqyUDNoc07Q1dcKcm5KKgjKYBssMw=; b=ntrKJDE1EjNNumNzjjiG9E8FtSKZmpgLFQkqfuTff2aFU1KuwYOzSqN+BqsdwJuJlU c2ZgK1HnySPGIK/KMvM9ihHpb0sdF74MpoazVZ/v0SW049wZHXMPl0A5Og+QPKvmj/AB OYiwwc/BOgoAkuW/FkKsNaGCSvh94JzNZSaXm+TUfhuLG1W+Oc1B3Nh++uM9xKXC7+xz iNHnxOwnMc8n4ZClW3opQJ3kwidQm2U58TC03DzPArdaMJulPqHWgaBdvvOvoyx/tFqt kzoRwCKSbDiV/yhjV63jmIrHol//vdsrJPXYDMfMS92LBHJlImXJynhwCGGhiFVQS0MA kD3Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=rxyvXGkpXVs7QdXqyUDNoc07Q1dcKcm5KKgjKYBssMw=; b=ooQgwc+5IKU7boPGzppW8WSfvWQ4zpp763WJzGewyOh8w5Ch9/xyUJXAd5lq7qh4z6 WeVdV2o5bYX7dn8429dxZnhn5lBl7HFZZNK/k91j6e0SU1u42l6S00EBDmHuqaoslZ2q I31M6pmpAjXuVlcFOW+MXAmKuk8fjyeNcCfcB69xzT8Jpj3TPCK65IeIBEpkxEnTP9xi pwPCh9vQpFf69h8v8S+OUiVNW+TQgLip/jO4p7Pd3B1B4GIA64LFVtc1bxcsv4ZEAL/F q80Odb2DiGfNZvhiPlItsVWtQpfiL7WypMLETAEMVF+Mo58Hd1Krp+5j+wNlr1lGdIYa WiFw== X-Gm-Message-State: APjAAAVmXEXh3j+/tNGV27eEtT1iJ7nERPpO4Ahvhw83l1ulsTEn2cag te4eTQdT208p4ZVcBpLscwFQHeCwfMm2kVnmMmbJCA== X-Google-Smtp-Source: APXvYqy1cx2zRyB/0Qd3jHtQDf3ig42Ax7u+ZwKkTBB6pu4AN8ud/IqIQIsb0dHKxt0X66ttV7g1vkrzqQzLaMbs+3Q= X-Received: by 2002:aca:5691:: with SMTP id k139mr3581981oib.54.1571905075773; Thu, 24 Oct 2019 01:17:55 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Mark Smith Date: Thu, 24 Oct 2019 19:17:45 +1100 Message-ID: To: Fernando Gont Cc: Philip Homburg , v6ops list Content-Type: multipart/alternative; boundary="000000000000a986d80595a3ab57" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 08:17:59 -0000 --000000000000a986d80595a3ab57 Content-Type: text/plain; charset="UTF-8" On Thu, 24 Oct 2019, 03:08 Fernando Gont, wrote: > On 23/10/19 10:08, Philip Homburg wrote: > >> The document is available at: > >> https://tools.ietf.org/html/draft-gont-v6ops-slaac-renum > > > > I think this is an important subject that is worth fixing. > > > > In this reply I'll focus on the preferred and valid lifetimes. > > > > On a host, the preferred and valid lifetimes play quite different roles. > > > > The preferred lifetime plays a role in setting up new flows. I.e. if the > > application does not provide a source address then the IPv6 layer uses > > the preferred lifetime to select the best source address among multiple > > candidates. Actually it doesn't, according to SA selection in RFC 6724. It's easy to think that, which is why I have in the past. I've even thought about proposing it, however when you think about it, you realise there are cases where it wouldn't work. The largest preferred lifetime address isn't always the best SA to use. For example, say you wanted to renumber a network. At the same time, you want to have a lower preferred and valid lifetime for the new prefix (perhaps it was set too high when the network was built). Yet the as the old addresses still have larger preferred lifetimes, they would be preferred. What you're really trying to choose is the newest addresses learned by the host. Preferred lifetime doesn't really always tell you that. I thought about this in the exact context of the scenario of this draft. Although the design of the broadband deployment I worked on always planned to give out stable prefixes, I worked through this scenario and realised that so many complex issues disappear if you provide stable prefixes. Fundamentally, if an ISP is selling an always on link to the same location, then the addressing should be as permanent as the link delivery location is. Mistakenly setting the preferred lifetime of an address to zero > > may cause problems for new flows but has no impact on existing flows > > > > In contrast setting the valid lifetime to zero immediately signals an > error > > condition to existing flows. This could cause a lot of trouble for long > > lived flows. > > > > The other side of the coin is that if a host ends up with stale prefixes, > > then the user maybe willing to wait for a few minutes for the situation > to > > resolve itself, but probably not much longer. > > Agreed. > > > > > So the suggestion that > > AdvPreferredLifetime: AdvDefaultLifetime > > is likely not sufficient to be responsive to a user. And at the same time > > AdvValidLifetime: 1.5 * AdvDefaultLifetime > > is very risky if AdvDefaultLifetime is low. > > > > Note that RFC 4861 allows MaxRtrAdvInterval to be a low as 4 seconds, > > AdvDefaultLifetime can be as low as MaxRtrAdvInterval, so also 4 seconds. > > > > This creates a very fragile system. > > I may agree. That said, note that according to RFC7772, you'd never send > RAs at a high frequency such as once as every 4 seconds. > > > > > At the same time, AdvDefaultLifetime is commonly 1800 seconds. Which is > way > > too long to wait for stale information to expire. > > > > I agree that valid and preferred lifetimes of resp. 30 days and 7 days > > are excessive. But I'm not at all convinced that tying them to > > AdvDefaultLifetime will have a positive effect. > > I'd say that at the very least the Preferred lifetime shouldn't be > larger than AdvDefaultLifetime (what's the point of preferring an > address you don't have a router for?). > > I do agree with your analysis of the valid lifetime -- is trickier. > > > > > I'm also not convinced > > that there are sensible values for these lifetimes that are robust > enough > > and at the same time responsive enough to deal with the issue at hand. > > > > Reducing the lifetimes would help against build up of stale prefixes. If > > they are set to a couple of hours. > > I do agree that this is not a complete solution, but, as you correctly > note, would help against build up of stale prefixes. > > > A better mitigation is to affect the preferred and possibly the valid > lifetimes in response to consecutive RAs from the same router that lack > the original (stale) prefix. e.g., after two consecutive RAs that do not > contain the existing prefix, reduce the preferred lifetime. After two > additional RAs, reduce the valid lifetime. > > Thoughts? > > Thanks! > > Cheers, > -- > Fernando Gont > SI6 Networks > e-mail: fgont@si6networks.com > PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 > > > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > --000000000000a986d80595a3ab57 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Thu, 24 Oct 2019, 03:08 Fernando Gont, <fgont@si6networks.com> wrote:
On 23/10/19 10:08, Philip Homburg wrote:
>> The document is available at:
>> https://tools.ietf.org/html/draft-gont-v6ops-slaac-renum
>
> I think this is an important subject that is worth fixing.
>
> In this reply I'll focus on the preferred and valid lifetimes.
>
> On a host, the preferred and valid lifetimes play quite different role= s.
>
> The preferred lifetime plays a role in setting up new flows. I.e. if t= he
> application does not provide a source address then the IPv6 layer uses=
> the preferred lifetime to select the best source address among multipl= e
> candidates.


Actually it doesn't, according= to SA selection in RFC 6724.

It's easy to think that, which is why I have in the past.

I've even thought about pro= posing it, however when you think about it, you realise there are cases whe= re it wouldn't work. The largest preferred lifetime address isn't a= lways the best SA to use.

For example, say you wanted to renumber a network. At the same time, you = want to have a lower preferred and valid lifetime for the new prefix (perha= ps it was set too high when the network was built). Yet the as the old addr= esses still have larger preferred lifetimes, they would be preferred.
=

What you're really trying= to choose is the newest addresses learned by the host. Preferred lifetime = doesn't really always tell you that.

<= div dir=3D"auto">I thought about this in the exact context of the scenario = of this draft. Although the design of the broadband deployment I worked on = always planned to give out stable prefixes, I worked through this scenario = and realised that so many complex issues disappear if you provide stable pr= efixes.

Fundamentally, i= f an ISP is selling an always on link to the same location, then the addres= sing should be as permanent as the link delivery location is.



fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492




_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.i= etf.org/mailman/listinfo/v6ops
--000000000000a986d80595a3ab57-- From nobody Thu Oct 24 02:21:04 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C779C1208A9 for ; Thu, 24 Oct 2019 02:21:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PvIgATsCSnmU for ; Thu, 24 Oct 2019 02:21:00 -0700 (PDT) Received: from oxalide-smtp-out.extra.cea.fr (oxalide-smtp-out.extra.cea.fr [132.168.224.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36F581200B8 for ; Thu, 24 Oct 2019 02:21:00 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by oxalide-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9O9Kvhi011476; Thu, 24 Oct 2019 11:20:57 +0200 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 36523205842; Thu, 24 Oct 2019 11:20:57 +0200 (CEST) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 283BE20582B; Thu, 24 Oct 2019 11:20:57 +0200 (CEST) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9O9KvkF017627; Thu, 24 Oct 2019 11:20:57 +0200 To: Fernando Gont References: <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com> From: Alexandre Petrescu Cc: IPv6 Operations Message-ID: Date: Thu, 24 Oct 2019 11:20:57 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.1.2 MIME-Version: 1.0 In-Reply-To: <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 09:21:03 -0000 Le 23/10/2019 à 10:51, Fernando Gont a écrit : > Folks, > > Earlier this year there was a lot of discussion about slaac renumbering > problems. Our original I-D covered everything from the problem statement > to proposed protocol updates and operational workarounds. > > Based on the comments received while discussing this topic on this list > and other forums, and in order to keep the discussion better focused on > specific aspects of the problem, we have posted a v6ops-targetted > document that focuses on: > > * The problem statement > * Discussion of operational workarounds, and associated constraints > > The document is available at: > https://tools.ietf.org/html/draft-gont-v6ops-slaac-renum > > We'd like to hear from the wg whether we have missed anything, whether > the document is useful to the community, etc. The document is useful because it sheds light on an existing problem that is not described elsewhere. In particular, the home networks scenario is very appropriate. First, I must say that the home network that I use uses a fixed /56 allocated by my ISP. In this, the prefix never changes, and it is not obtained by DHCPv6-PD - it is guaranteed by contract signed by hand. Such a case could be mentioned, as not being a problem described in this draft. Second, with respect to this text: > o The most common deployment scenario for IPv6 in home networks is > that in which a CPE router employs DHCPv6 Prefix Delegation > (DHCPv6-PD) [RFC8415] to request a prefix from an Internet Service > Provider (ISP), and a sub-prefix of the leased prefix is > advertised on the LAN-side of the CPE router via Stateless Address > Autoconfiguration (SLAAC) [RFC4862]. In scenarios where the CPE > router crashes and reboots, the CPE may be leased (via DHCPv6-PD) > a different prefix from the one previously leased, and therefore > advertise (via SLAAC) the new prefix on the LAN side. I agree with this deployment scenario. We have used a similar scenario here in the lab (not at home). We wrote a 'DANIR' draft that describes the implementation: the IoT Router (similar to a CPE) requests a prefix with DHCPv6-PD and then forms /64s and advertises them on the Ethernet link. I must say that this kind of software (request a prefix with DHCPv6-PD, form sub-prefixes, and put them in RAs on the other interfaces) does not exist as open source or some other available package. Because of that, I am surprised that you call it 'the most common deployment scenario'. Is this a scenario that is _expected_ to be 'common'? Then, a list of bullets follow, with more scenarios. I would like to request addition of two other scenarios: - an IoT scenario, in which an IoR Router connects several sensors to the Internet. For example, an IoT Router is deployed in a box at a traffic lights. The IoT device is the Traffic Lights Controller connected on Ethernet to the IoT Router. The IoT Router is connected on 4G. - a vehicular networks scenario: the On-Board Unit is deployed in a car. This OBU has a 4G interface and an Ethernet interface. There are several computers in the car that need IPv6 addresses. One may think about fitting these proposed two scenarios (IoT, and vehicles) into the three others ('switch-port VLAN', 'planned network renumbering' or 'automated device config mgmt'). But these scenarios sound more like Enterprise. IoTs and vehicles rarely if ever involve VLANs or planned network renumberng. Alex > > Thanks! > > Cheers, > From nobody Thu Oct 24 02:59:34 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8718712086B for ; Thu, 24 Oct 2019 02:59:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vNrHhXyBPpmP for ; Thu, 24 Oct 2019 02:59:30 -0700 (PDT) Received: from mail-lf1-x133.google.com (mail-lf1-x133.google.com [IPv6:2a00:1450:4864:20::133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 234A1120862 for ; Thu, 24 Oct 2019 02:59:30 -0700 (PDT) Received: by mail-lf1-x133.google.com with SMTP id u16so18618713lfq.3 for ; Thu, 24 Oct 2019 02:59:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=l/QVgQBdalqKllZPne8fXdv2uDcf4B9GRVmGkV9Tw8Q=; b=Q0wLzwzVvGxtrO0UAQ4YHXDoG14IjPJvu3rp7IOhWnyQJ831a7izA7jGWR68THjzm1 LRVjdnFo4WJ+u3C7VBNRTfzMOoWNiiRtQeWx9jTAnIttXX2wHgtRElRJyGU22wac+hAL G0SXOPn3o17p4TEHNkdp4JFLdewgBYPZaZtUwykJuUAeYVrX7obs+14yFhTJCAUfpZBf x9GD/ygJZCCGky/5np93ASKwejVMJS5b+cpzK7xD4uJHMQf/nqsoU0Wzcjvbl//OrIrD 9gioOX/deg1mwxk1QYCrYDbOFS4/HRaTPofK+2tFaTy/k5LiFQKbgFNUEtspZ4YtKpvf 2AVQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=l/QVgQBdalqKllZPne8fXdv2uDcf4B9GRVmGkV9Tw8Q=; b=PzVZb8K670MsSRU7oGFgce456LB9fv1xES52sexp5M6V9zZSAtLDmt42nkaRnw+Bcj Az/9H0ReLM5e2PCuphSKoEwd8y9Z9HQBR2ytQtlhJ0R9VcbAA4+HwRkS1eL8iCGxJdTw xwo9rbntuSZrP4UIWZN+AjFpsAua2YNKBZm8CtdKHSpBGJxfTAxe4HbP+IjhPkRQ8OgB i6CrJb0ZJWKwbCksDvyTmsQEj/E/GsqVbxJMyAj87+p9pKcXiqalTSrBUNmlxE2KbULQ oEXSsOuzUueRO1LkxxtMn6gBHSR1Euom7i2l0UO7wtauSyw42P9kYg0L0v2kpoYSu706 w0bg== X-Gm-Message-State: APjAAAVig7MAnamsiRDk+ToZUSHEXT08kKBLtjUDyHtE9LB50/+USR8A Rcdz0gx1tnWGXdEI9RQrxq/M6AdlmZK3p2uxry6oCQ== X-Google-Smtp-Source: APXvYqzRczuPK5hHRPNSnH7BcBLHfrQC414Erz4k9DSQsrtCXyir8E8cT3EUWWVv0f8UqZKj7IlvnaN6QLIxn4XE+E8= X-Received: by 2002:a19:ee15:: with SMTP id g21mr17657556lfb.27.1571911168009; Thu, 24 Oct 2019 02:59:28 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Trevor Warwick Date: Thu, 24 Oct 2019 10:57:26 +0100 Message-ID: To: v6ops list Content-Type: multipart/alternative; boundary="000000000000c9b3790595a51632" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 09:59:32 -0000 --000000000000c9b3790595a51632 Content-Type: text/plain; charset="UTF-8" On Thu, 24 Oct 2019 at 09:18, Mark Smith wrote: > > > I thought about this in the exact context of the scenario of this draft. > Although the design of the broadband deployment I worked on always planned > to give out stable prefixes, I worked through this scenario and realised > that so many complex issues disappear if you provide stable prefixes. > > Fundamentally, if an ISP is selling an always on link to the same > location, then the addressing should be as permanent as the link delivery > location is. > > If you're an ISP today, and using DHCPv6-PD to hand out IPv6 prefixes, what are the possible scenarios if you don't try hard to keep the prefixes stable? - You could be running a closed environment where all customers are forced to use your CPE, in which case you can make sure that your CPE has various hacks added to try to cope with prefix instability and avoid customer hosts experiencing connectivity issues when prefixes change. Maybe you can make this work well enough, and advanced customers who don't want to use your CPE are just out of luck. - If you're in an environment where customers can chose their own CPE, then it seems almost guaranteed that there will be connectivity problems when the prefix changes, because many CPE implementations don't handle this situation at all. So you're then relying on hosts falling back seamlessly to IPv4, in order to continue to have connectivity. In which case, I'd wonder why you're bothering to provide an IPv6 service in the first place. I do think this is an important problem that needs to be solved, for this context and the others mentioned in the draft. --000000000000c9b3790595a51632 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

On Thu, 24 Oct 2019 at 09:18, Mark Smith = <markzzzsmith@gmail.com>= ; wrote:


I thought about this in the= exact context of the scenario of this draft. Although the design of the br= oadband deployment I worked on always planned to give out stable prefixes, = I worked through this scenario and realised that so many complex issues dis= appear if you provide stable prefixes.

Fundamentally, if an ISP is selling an always on link to the= same location, then the addressing should be as permanent as the link deli= very location is.

= =C2=A0
If you're an ISP today, and using DHCPv6-PD to hand ou= t IPv6 prefixes, what are the possible scenarios if you don't try hard = to keep the prefixes stable?

- You could be runnin= g a closed environment where all customers are forced to use your CPE, in w= hich case you can make sure that your CPE has various=C2=A0 =C2=A0hacks add= ed to try to cope with prefix instability and avoid customer hosts experien= cing connectivity issues when prefixes change. Maybe you can make this work= well enough, and advanced customers who don't want to use your CPE are= just out of luck.

- If you're in an environme= nt where customers can chose their=C2=A0own CPE, then it seems almost guara= nteed that there will be connectivity problems when the prefix changes, bec= ause many CPE implementations don't handle this situation at all. So yo= u're then relying on hosts falling back seamlessly to IPv4, in order to= continue to have connectivity. In which case, I'd wonder why you'r= e bothering to provide an IPv6 service in the first place.=C2=A0
=
I do think this is an important problem that needs to be sol= ved, for this context and the others mentioned in the draft.
=

--000000000000c9b3790595a51632-- From nobody Thu Oct 24 03:43:57 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C2591200CC for ; Thu, 24 Oct 2019 03:43:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.497 X-Spam-Level: X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6D3_xE6q0nW3 for ; Thu, 24 Oct 2019 03:43:55 -0700 (PDT) Received: from mail-oi1-x22d.google.com (mail-oi1-x22d.google.com [IPv6:2607:f8b0:4864:20::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4EEB1200B5 for ; Thu, 24 Oct 2019 03:43:54 -0700 (PDT) Received: by mail-oi1-x22d.google.com with SMTP id 83so20204419oii.1 for ; Thu, 24 Oct 2019 03:43:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=JA3SgdNu8WqMWlN4MhDuuAbWDyD1Wlu2MX2043PrKP0=; b=E3Gtg//dLb+E6xqTFpcXb3ilmUI1iueKwGvT+tbMQ8XtlcbVz8NzKHYsWN+EJZ33I6 lCVEl5fU1jhFaEXhhVheAx+cdBnKgs96VHGn9UnCsz3v2jO+PBNbkENiMYq8BHhLGyte bIyCWQXb59fitFacPiBzOWmaXtLU9fsccx29pIsGXz/3tddimtktb5iOrWIVwKjE7im+ 3j6EyarDrZljZa0UujSXkVkNFGVsDZJK7ePaEtlDnVePPN2qsY3zRIRIkCnlGl+YQAdW pL1iLSwtdMvtN3gH2OndyiT12YsSCx7A/T8OeMCIPLBNbQG9Rg2jjEdGr6A6/R1PS0wD HJ6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=JA3SgdNu8WqMWlN4MhDuuAbWDyD1Wlu2MX2043PrKP0=; b=j3sD6LGQA3oXtFiMFm0fhL97TJon09Mq9nRfGDLC/NgK/TagbZ4pTZ5NdFbJQaURc/ 2Z5lNMIxVuSH5+I8TGtluTglo+sO3ZN1CjSuzBJCn6f8IjJdGbjOU69tfkcSHSrcUxCy RSBSjgJ8fV1vZXdQhHJZ4oO3s46KjrbxjDnbRwHOq3zuGbAx9bqHeiEjGJc+GWl6dhTr GYyHue0e5t75oy4zcNMzv+1jIloGstsQI2KY+bDjAvKouV4jhN9i77uCw+8ee9CQu+Il +seMlxB136QBqv/xPrE0+dyq0INYcfCXNCS5ic1ihNZHfvyXGw4TewG1dpmK19/if5Pp JDgg== X-Gm-Message-State: APjAAAUKFmleffsrkRogeBOqac8w8iv/nD/fXXzGIqOCXY2iRyFDolzp +YJ3GyeXXfbT6lgW3teZU2g7Xc8yAeFkqeSGDjY= X-Google-Smtp-Source: APXvYqxKbDYhRxfMo8SjmHpXhLRFhB4QhhHHugv0EcC/YQ1o8xLbv7j+oSKfkYDI1PPE9QIin7vbjV+4UHpLrrd3ypI= X-Received: by 2002:a54:4198:: with SMTP id 24mr3833704oiy.164.1571913834129; Thu, 24 Oct 2019 03:43:54 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Mark Smith Date: Thu, 24 Oct 2019 21:43:43 +1100 Message-ID: To: Trevor Warwick Cc: v6ops list Content-Type: multipart/alternative; boundary="000000000000b36bfa0595a5b505" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 10:43:56 -0000 --000000000000b36bfa0595a5b505 Content-Type: text/plain; charset="UTF-8" On Thu, 24 Oct 2019, 20:59 Trevor Warwick, wrote: > > On Thu, 24 Oct 2019 at 09:18, Mark Smith wrote: > >> >> >> I thought about this in the exact context of the scenario of this draft. >> Although the design of the broadband deployment I worked on always planned >> to give out stable prefixes, I worked through this scenario and realised >> that so many complex issues disappear if you provide stable prefixes. >> >> Fundamentally, if an ISP is selling an always on link to the same >> location, then the addressing should be as permanent as the link delivery >> location is. >> >> > If you're an ISP today, and using DHCPv6-PD to hand out IPv6 prefixes, > what are the possible scenarios if you don't try hard to keep the prefixes > stable? > Why don't you want to try hard? Not trying hard gives customers a bad experience. They're paying you to try hard to give them the best suitable service you can give them. > - You could be running a closed environment where all customers are forced > to use your CPE, in which case you can make sure that your CPE has various > hacks added to try to cope with prefix instability and avoid customer > hosts experiencing connectivity issues when prefixes change. Maybe you can > make this work well enough, and advanced customers who don't want to use > your CPE are just out of luck. > > - If you're in an environment where customers can chose their own CPE, > then it seems almost guaranteed that there will be connectivity problems > when the prefix changes, because many CPE implementations don't handle this > situation at all. So you're then relying on hosts falling back seamlessly > to IPv4, in order to continue to have connectivity. In which case, I'd > wonder why you're bothering to provide an IPv6 service in the first place. > See what I said about selling an always on service to a fixed location, and the addressing having the same amount of stability as the service and link itself. The reason this problem really exists is that ISPs have fundamentally continued to treat residential, always on broadband customers although they were still dial up customers. Nothing has changed - per BRAS (NAS) IP address pools, pool route aggregation at the router, customer gets a single IPv4 address when they attach, that can change each time they attach. PPPoE is making Ethernet connectivity resemble dial up connectivity. Now this dial up model is trying to be applied to semi-permanent IPv6 services, where it's even less applicable now that customers get their own routed address space on a semi-permanent link. Treat all customers as routed subnet SOHO customers, so they get the same prefix regardless of which BRAS they attach to. Move the route aggregation boundary to a higher level to e.g. a cluster of BRASes, or a region. Use an IPv6 address provisioning model that suites and matches the service they're paying for, not a nearly 30 year old dial up model. If your customers can BYO their CPE, then stable prefixes are the only choice. See slide 6. Residential IPv6 CPE - What Not to Do and Other Observations https://www.slideshare.net/mobile/markzzzsmith/residential-ipv6-cpe-what-not-to-do-and-other-observations > I do think this is an important problem that needs to be solved, for this > context and the others mentioned in the draft. > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > --000000000000b36bfa0595a5b505 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Thu, 24 Oct 2019, 20:59 Trevor Warwick, <twarwick@gmail.com> wrote:

On Thu, 24 Oct 2019 at 09:1= 8, Mark Smith <markzzzsmith@gmail.c= om> wrote:


I thought about th= is in the exact context of the scenario of this draft. Although the design = of the broadband deployment I worked on always planned to give out stable p= refixes, I worked through this scenario and realised that so many complex i= ssues disappear if you provide stable prefixes.

=
Fundamentally, if an ISP is selling an always on li= nk to the same location, then the addressing should be as permanent as the = link delivery location is.

=C2=A0
If you're an ISP today, and using DHCPv6-PD t= o hand out IPv6 prefixes, what are the possible scenarios if you don't = try hard to keep the prefixes stable?
<= /div>

Why don't you want t= o try hard? Not trying hard gives customers a bad experience. They're p= aying you to try hard to give them the best suitable service you can give t= hem.


- You could be running a closed environment whe= re all customers are forced to use your CPE, in which case you can make sur= e that your CPE has various=C2=A0 =C2=A0hacks added to try to cope with pre= fix instability and avoid customer hosts experiencing connectivity issues w= hen prefixes change. Maybe you can make this work well enough, and advanced= customers who don't want to use your CPE are just out of luck.

- If you're in an environment where customers can cho= se their=C2=A0own CPE, then it seems almost guaranteed that there will be c= onnectivity problems when the prefix changes, because many CPE implementati= ons don't handle this situation at all. So you're then relying on h= osts falling back seamlessly to IPv4, in order to continue to have connecti= vity. In which case, I'd wonder why you're bothering to provide an = IPv6 service in the first place.=C2=A0
=

See what I said about s= elling an always on service to a fixed location, and the addressing having = the same amount of stability as the service and link itself.

The reason this problem really exists= is that ISPs have fundamentally continued to treat residential, always on = broadband customers although they were still dial up customers. Nothing has= changed - per BRAS (NAS) IP address pools, pool route aggregation at the r= outer, customer gets a single IPv4 address when they attach, that can chang= e each time they attach. PPPoE is making Ethernet connectivity resemble dia= l up connectivity.

Now t= his dial up model is trying to be applied to semi-permanent IPv6 services, = where it's even less applicable now that customers get their own routed= address space on a semi-permanent link.

<= div dir=3D"auto">Treat all customers as routed subnet SOHO customers, so th= ey get the same prefix regardless of which BRAS they attach to. Move the ro= ute aggregation boundary to a higher level to e.g. a cluster of BRASes, or = a region.

Use an IPv6 ad= dress provisioning model that suites and matches the service they're pa= ying for, not a nearly 30 year old dial up model.
If your customers can BYO their CPE, then stable = prefixes are the only choice.

See slide 6.

Residential IPv6 CPE - What Not to Do and Other Observation= s




I do think this is an important problem that needs to be so= lved, for this context and the others mentioned in the draft.


_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.i= etf.org/mailman/listinfo/v6ops
--000000000000b36bfa0595a5b505-- From nobody Thu Oct 24 03:47:17 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 451741200B5 for ; Thu, 24 Oct 2019 03:47:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TjJMS5jxFffL for ; Thu, 24 Oct 2019 03:47:13 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02884120098 for ; Thu, 24 Oct 2019 03:47:12 -0700 (PDT) Received: from astfgl.hanazo.no (246.51-175-81.customer.lyse.net [51.175.81.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 942E54E11B34; Thu, 24 Oct 2019 10:47:11 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id E533B1FE6F4C; Thu, 24 Oct 2019 12:47:08 +0200 (CEST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Thu, 24 Oct 2019 12:47:08 +0200 Cc: Trevor Warwick , v6ops list Content-Transfer-Encoding: quoted-printable Message-Id: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> References: To: Mark Smith X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 10:47:15 -0000 Mark, Right. Instant/flash renumbering is not supported in IP networks. IPv6 does nothing to help with this, well, assuming a network hiding = behind NAT, it makes it harder. Apart from "does not work", what more can the IETF say or do here? Cheers, Ole > On 24 Oct 2019, at 12:43, Mark Smith wrote: >=20 >=20 >=20 > On Thu, 24 Oct 2019, 20:59 Trevor Warwick, wrote: >=20 > On Thu, 24 Oct 2019 at 09:18, Mark Smith = wrote: >=20 >=20 > I thought about this in the exact context of the scenario of this = draft. Although the design of the broadband deployment I worked on = always planned to give out stable prefixes, I worked through this = scenario and realised that so many complex issues disappear if you = provide stable prefixes. >=20 > Fundamentally, if an ISP is selling an always on link to the same = location, then the addressing should be as permanent as the link = delivery location is. >=20 > =20 > If you're an ISP today, and using DHCPv6-PD to hand out IPv6 prefixes, = what are the possible scenarios if you don't try hard to keep the = prefixes stable? >=20 > Why don't you want to try hard? Not trying hard gives customers a bad = experience. They're paying you to try hard to give them the best = suitable service you can give them. >=20 >=20 > - You could be running a closed environment where all customers are = forced to use your CPE, in which case you can make sure that your CPE = has various hacks added to try to cope with prefix instability and = avoid customer hosts experiencing connectivity issues when prefixes = change. Maybe you can make this work well enough, and advanced customers = who don't want to use your CPE are just out of luck. >=20 > - If you're in an environment where customers can chose their own CPE, = then it seems almost guaranteed that there will be connectivity problems = when the prefix changes, because many CPE implementations don't handle = this situation at all. So you're then relying on hosts falling back = seamlessly to IPv4, in order to continue to have connectivity. In which = case, I'd wonder why you're bothering to provide an IPv6 service in the = first place.=20 >=20 > See what I said about selling an always on service to a fixed = location, and the addressing having the same amount of stability as the = service and link itself. >=20 > The reason this problem really exists is that ISPs have fundamentally = continued to treat residential, always on broadband customers although = they were still dial up customers. Nothing has changed - per BRAS (NAS) = IP address pools, pool route aggregation at the router, customer gets a = single IPv4 address when they attach, that can change each time they = attach. PPPoE is making Ethernet connectivity resemble dial up = connectivity. >=20 > Now this dial up model is trying to be applied to semi-permanent IPv6 = services, where it's even less applicable now that customers get their = own routed address space on a semi-permanent link. >=20 > Treat all customers as routed subnet SOHO customers, so they get the = same prefix regardless of which BRAS they attach to. Move the route = aggregation boundary to a higher level to e.g. a cluster of BRASes, or a = region. >=20 > Use an IPv6 address provisioning model that suites and matches the = service they're paying for, not a nearly 30 year old dial up model. >=20 > If your customers can BYO their CPE, then stable prefixes are the only = choice. >=20 > See slide 6. >=20 > Residential IPv6 CPE - What Not to Do and Other Observations > = https://www.slideshare.net/mobile/markzzzsmith/residential-ipv6-cpe-what-n= ot-to-do-and-other-observations >=20 >=20 >=20 >=20 > I do think this is an important problem that needs to be solved, for = this context and the others mentioned in the draft. >=20 >=20 > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops From nobody Thu Oct 24 04:12:43 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E058120168 for ; Thu, 24 Oct 2019 04:12:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e7nSfzlx0Wui for ; Thu, 24 Oct 2019 04:12:37 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E06A5120810 for ; Thu, 24 Oct 2019 04:12:36 -0700 (PDT) Received: from [10.66.14.182] (host157.181-15-149.telecom.net.ar [181.15.149.157]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 21DDA851A6; Thu, 24 Oct 2019 13:12:33 +0200 (CEST) To: Ole Troan , Mark Smith Cc: v6ops list References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <13e9af25-6418-d2d2-95b4-35c835f28568@si6networks.com> Date: Thu, 24 Oct 2019 08:12:21 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 11:12:42 -0000 On 24/10/19 05:47, Ole Troan wrote: > Mark, > > Right. Instant/flash renumbering is not supported in IP networks. > IPv6 does nothing to help with this, well, assuming a network hiding behind NAT, it makes it harder. > Apart from "does not work", what more can the IETF say or do here? Maybe honor the "E" in IETF? :-) P.S.: The ISP renumbers the residential user is just one of many reasons for which this scenario could take place. Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Thu Oct 24 04:13:28 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A5EC120E12 for ; Thu, 24 Oct 2019 04:13:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.497 X-Spam-Level: X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xP8RBmUfHnd8 for ; Thu, 24 Oct 2019 04:13:17 -0700 (PDT) Received: from mail-oi1-x232.google.com (mail-oi1-x232.google.com [IPv6:2607:f8b0:4864:20::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F06B9120E48 for ; Thu, 24 Oct 2019 04:13:16 -0700 (PDT) Received: by mail-oi1-x232.google.com with SMTP id s71so7379566oih.11 for ; Thu, 24 Oct 2019 04:13:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=vgmJnvg2zZYGyuTBcLOVYrENiSXg4jx3qCMTwhz3UEE=; b=oCitzQYPTk7GXXcnKoPSZgiFnIAPfhtxokhRQTcZodd8jeLjCLr1KyDYZk0lbRt3Ru cArX5//XsIFsMX7GKz7lujtzPzIO1j0C2FAK2wO7uReMijstvjoGZys+GP2Fp71dL6wz NvPbG9NAc/vtjo60C3+JmKC11pqng1g68OyNF+QoO0hkKxYgT6cj9eJW0AUU/LsXdVXf YsNVIKfTQ8jMzD6dhXf/ZOHEnbDr+IVEQATVvq+kpgL86biHCD2//2nj39198EoMWrQ4 +7pvqEgwfDD2keBv8u5y/4GWqNow2OeAOl0feD9vnQlh7LSvxs4Hfo2aBFXqm+5gmfJm /dmQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=vgmJnvg2zZYGyuTBcLOVYrENiSXg4jx3qCMTwhz3UEE=; b=V53/9cxmlIRz3rbSrehu4Ks8jVhH4Iu7p5L3vQgbTYMdaGp01zN7sVBxe9zszNFc49 yiO1GyAosDJxD7q0Eguk6wuvlRrjd+JXEIvMYEZ/ajdxerarsPa65WMX6zTazE3Ewxn9 OcTjdqgPxLD7z8W1x6VVU2YjYgvjRvxyiaa1g9y9C0FIod3R9nosTh5JRFJo6UGMut3u 91xd71jeXQFPbjZQD3DiZuaDLi82DbR314/nuliJo40I/oQvOX4JblzGwCkXHplOpX6h k+Mp4eTOmQP8GAbISmEG0OV2We2hZL+jwqcyB06ak0myLauDBtCwEWaoRmpe0wpvyntn 6aMQ== X-Gm-Message-State: APjAAAU95HSY6ooeoeZLyAwG4boDpDs/VhXe1xI6y5JuSJz1aUtp3kjj 0yObJNHbGyOruMyzLSED0wR2RbKTgjgV83tdhzQ= X-Google-Smtp-Source: APXvYqxCJMS5xL5MmI7/ThSUhm+/2y9rXMXiBYsTrJZcMTlDdevrO3VHiDzyuiHhBRwXiwOsXTGbtgPBvtRxGwlReHg= X-Received: by 2002:aca:2211:: with SMTP id b17mr4175021oic.38.1571915596234; Thu, 24 Oct 2019 04:13:16 -0700 (PDT) MIME-Version: 1.0 References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-Reply-To: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Mark Smith Date: Thu, 24 Oct 2019 22:13:05 +1100 Message-ID: To: Ole Troan Cc: Trevor Warwick , v6ops list Content-Type: multipart/alternative; boundary="000000000000bb041b0595a61e43" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 11:13:26 -0000 --000000000000bb041b0595a61e43 Content-Type: text/plain; charset="UTF-8" On Thu, 24 Oct 2019, 21:47 Ole Troan, wrote: > Mark, > > Right. Instant/flash renumbering is not supported in IP networks. > IPv6 does nothing to help with this, well, assuming a network hiding > behind NAT, it makes it harder. > Apart from "does not work", what more can the IETF say or do here? > I think the issue could be not real knowing or thinking about any alternatives and not knowing that while it may have been possible to continue to follow the dial up model for IPv4 with NAT, that model can't be stretched to accommodate IPv6 and delegated prefixes without causing the issues in the draft. So an Informational RFC? > Cheers, > Ole > > > On 24 Oct 2019, at 12:43, Mark Smith wrote: > > > > > > > > On Thu, 24 Oct 2019, 20:59 Trevor Warwick, wrote: > > > > On Thu, 24 Oct 2019 at 09:18, Mark Smith wrote: > > > > > > I thought about this in the exact context of the scenario of this draft. > Although the design of the broadband deployment I worked on always planned > to give out stable prefixes, I worked through this scenario and realised > that so many complex issues disappear if you provide stable prefixes. > > > > Fundamentally, if an ISP is selling an always on link to the same > location, then the addressing should be as permanent as the link delivery > location is. > > > > > > If you're an ISP today, and using DHCPv6-PD to hand out IPv6 prefixes, > what are the possible scenarios if you don't try hard to keep the prefixes > stable? > > > > Why don't you want to try hard? Not trying hard gives customers a bad > experience. They're paying you to try hard to give them the best suitable > service you can give them. > > > > > > - You could be running a closed environment where all customers are > forced to use your CPE, in which case you can make sure that your CPE has > various hacks added to try to cope with prefix instability and avoid > customer hosts experiencing connectivity issues when prefixes change. Maybe > you can make this work well enough, and advanced customers who don't want > to use your CPE are just out of luck. > > > > - If you're in an environment where customers can chose their own CPE, > then it seems almost guaranteed that there will be connectivity problems > when the prefix changes, because many CPE implementations don't handle this > situation at all. So you're then relying on hosts falling back seamlessly > to IPv4, in order to continue to have connectivity. In which case, I'd > wonder why you're bothering to provide an IPv6 service in the first place. > > > > See what I said about selling an always on service to a fixed location, > and the addressing having the same amount of stability as the service and > link itself. > > > > The reason this problem really exists is that ISPs have fundamentally > continued to treat residential, always on broadband customers although they > were still dial up customers. Nothing has changed - per BRAS (NAS) IP > address pools, pool route aggregation at the router, customer gets a single > IPv4 address when they attach, that can change each time they attach. PPPoE > is making Ethernet connectivity resemble dial up connectivity. > > > > Now this dial up model is trying to be applied to semi-permanent IPv6 > services, where it's even less applicable now that customers get their own > routed address space on a semi-permanent link. > > > > Treat all customers as routed subnet SOHO customers, so they get the > same prefix regardless of which BRAS they attach to. Move the route > aggregation boundary to a higher level to e.g. a cluster of BRASes, or a > region. > > > > Use an IPv6 address provisioning model that suites and matches the > service they're paying for, not a nearly 30 year old dial up model. > > > > If your customers can BYO their CPE, then stable prefixes are the only > choice. > > > > See slide 6. > > > > Residential IPv6 CPE - What Not to Do and Other Observations > > > https://www.slideshare.net/mobile/markzzzsmith/residential-ipv6-cpe-what-not-to-do-and-other-observations > > > > > > > > > > I do think this is an important problem that needs to be solved, for > this context and the others mentioned in the draft. > > > > > > _______________________________________________ > > v6ops mailing list > > v6ops@ietf.org > > https://www.ietf.org/mailman/listinfo/v6ops > > _______________________________________________ > > v6ops mailing list > > v6ops@ietf.org > > https://www.ietf.org/mailman/listinfo/v6ops > > --000000000000bb041b0595a61e43 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Thu, 24 Oct 2019, 21:47 Ole Troan, <otroan@emp= loyees.org> wrote:
Mark,
Right. Instant/flash renumbering is not supported in IP networks.
IPv6 does nothing to help with this, well, assuming a network hiding behind= NAT, it makes it harder.
Apart from "does not work", what more can the IETF say or do here= ?

I think the issue could be not real knowing or thinking about any alternat= ives and not knowing that while it may have been possible to continue to fo= llow the dial up model for IPv4 with NAT, that model can't be stretched= to accommodate IPv6 and delegated prefixes without causing the issues in t= he draft.

So an Informat= ional RFC?



Cheers,
Ole

> On 24 Oct 2019, at 12:43, Mark Smith <markzzzsmith@g= mail.com> wrote:
>
>
>
> On Thu, 24 Oct 2019, 20:59 Trevor Warwick, <twarwick@gma= il.com> wrote:
>
> On Thu, 24 Oct 2019 at 09:18, Mark Smith <markzzzsmi= th@gmail.com> wrote:
>
>
> I thought about this in the exact context of the scenario of this draf= t. Although the design of the broadband deployment I worked on always plann= ed to give out stable prefixes, I worked through this scenario and realised= that so many complex issues disappear if you provide stable prefixes.
>
> Fundamentally, if an ISP is selling an always on link to the same loca= tion, then the addressing should be as permanent as the link delivery locat= ion is.
>
>=C2=A0
> If you're an ISP today, and using DHCPv6-PD to hand out IPv6 prefi= xes, what are the possible scenarios if you don't try hard to keep the = prefixes stable?
>
> Why don't you want to try hard? Not trying hard gives customers a = bad experience. They're paying you to try hard to give them the best su= itable service you can give them.
>
>
> - You could be running a closed environment where all customers are fo= rced to use your CPE, in which case you can make sure that your CPE has var= ious=C2=A0 =C2=A0hacks added to try to cope with prefix instability and avo= id customer hosts experiencing connectivity issues when prefixes change. Ma= ybe you can make this work well enough, and advanced customers who don'= t want to use your CPE are just out of luck.
>
> - If you're in an environment where customers can chose their own = CPE, then it seems almost guaranteed that there will be connectivity proble= ms when the prefix changes, because many CPE implementations don't hand= le this situation at all. So you're then relying on hosts falling back = seamlessly to IPv4, in order to continue to have connectivity. In which cas= e, I'd wonder why you're bothering to provide an IPv6 service in th= e first place.
>
> See what I said about selling an always on service to a fixed location= , and the addressing having the same amount of stability as the service and= link itself.
>
> The reason this problem really exists is that ISPs have fundamentally = continued to treat residential, always on broadband customers although they= were still dial up customers. Nothing has changed - per BRAS (NAS) IP addr= ess pools, pool route aggregation at the router, customer gets a single IPv= 4 address when they attach, that can change each time they attach. PPPoE is= making Ethernet connectivity resemble dial up connectivity.
>
> Now this dial up model is trying to be applied to semi-permanent IPv6 = services, where it's even less applicable now that customers get their = own routed address space on a semi-permanent link.
>
> Treat all customers as routed subnet SOHO customers, so they get the s= ame prefix regardless of which BRAS they attach to. Move the route aggregat= ion boundary to a higher level to e.g. a cluster of BRASes, or a region. >
> Use an IPv6 address provisioning model that suites and matches the ser= vice they're paying for, not a nearly 30 year old dial up model.
>
> If your customers can BYO their CPE, then stable prefixes are the only= choice.
>
> See slide 6.
>
> Residential IPv6 CPE - What Not to Do and Other Observations
> https://www.slideshare.net/mobile/markzzzsm= ith/residential-ipv6-cpe-what-not-to-do-and-other-observations
>
>
>
>
> I do think this is an important problem that needs to be solved, for t= his context and the others mentioned in the draft.
>
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/l= istinfo/v6ops
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/l= istinfo/v6ops

--000000000000bb041b0595a61e43-- From nobody Thu Oct 24 04:18:18 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37DDC120104 for ; Thu, 24 Oct 2019 04:18:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JbQ4BX6jQD76 for ; Thu, 24 Oct 2019 04:18:15 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9423E1200DE for ; Thu, 24 Oct 2019 04:18:15 -0700 (PDT) Received: from [10.66.14.182] (host157.181-15-149.telecom.net.ar [181.15.149.157]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id CF8BE86930; Thu, 24 Oct 2019 13:18:12 +0200 (CEST) To: Philip Homburg , v6ops@ietf.org References: From: Fernando Gont Openpgp: preference=signencrypt Message-ID: Date: Thu, 24 Oct 2019 08:17:48 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 11:18:17 -0000 Hello, Philip, On 24/10/19 02:42, Philip Homburg wrote: >> A better mitigation is to affect the preferred and possibly the valid >> lifetimes in response to consecutive RAs from the same router that lack >> the original (stale) prefix. e.g., after two consecutive RAs that do not >> contain the existing prefix, reduce the preferred lifetime. After two >> additional RAs, reduce the valid lifetime. > > I think that to avoid confusion it is probably best to have 3 documents: > - one that describes host behavior. I think that what you describe above would > fit in such a document. There is a lot we can do to make hosts more robust. Agreed. FWIW, We should have such document ready this weekend. > - one that describes CPE behavior. If the CPE explicitly deprecates old > prefixes then that solves the problem with CPE reboots. Having > more sensible lifetimes fits in such a document, but I don't think it > provides a solution. It just reduces some secondary effects such as > stale prefix build up. Agreed > - Finally, a document for ISPs describing how to best provide prefixes > using DHCPv6-PD. > > I think all 3 approaches are needed: > - a host doesn't want to rely on a cheap CPE doing its job. > - a quality CPE can provide better support for hosts today. There will always > be ISPs that do flash renumbering > - finally a quality ISP may have a need to renumber customers and would like > to do so without breaking things. I fully agree with your assessment. That said, maybe the first step is to start with a problem statement, as with this document? Thanks! Cheers, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Thu Oct 24 04:28:21 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C54501200B5 for ; Thu, 24 Oct 2019 04:28:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cXPwBGgDXkmk for ; Thu, 24 Oct 2019 04:28:18 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1136E12010C for ; Thu, 24 Oct 2019 04:28:18 -0700 (PDT) Received: from [10.66.14.182] (host157.181-15-149.telecom.net.ar [181.15.149.157]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 0405286913; Thu, 24 Oct 2019 13:28:14 +0200 (CEST) To: Mark Smith Cc: Philip Homburg , v6ops list References: From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <3cd9f169-9b88-4e8c-f021-81655dbd1e33@si6networks.com> Date: Thu, 24 Oct 2019 08:22:52 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 11:28:20 -0000 On 24/10/19 03:17, Mark Smith wrote: > > > On Thu, 24 Oct 2019, 03:08 Fernando Gont, > wrote: > > On 23/10/19 10:08, Philip Homburg wrote: > >> The document is available at: > >> https://tools.ietf.org/html/draft-gont-v6ops-slaac-renum > > > > I think this is an important subject that is worth fixing. > > > > In this reply I'll focus on the preferred and valid lifetimes. > > > > On a host, the preferred and valid lifetimes play quite different > roles. > > > > The preferred lifetime plays a role in setting up new flows. I.e. > if the > > application does not provide a source address then the IPv6 layer uses > > the preferred lifetime to select the best source address among > multiple > > candidates. > > > > Actually it doesn't, according to SA selection in RFC 6724.> > It's easy to think that, which is why I have in the past. Using the preferred lifetime for SAS makes the source address flap if there are multiple prefixes on the local network. This is not nice for troubleshooting. > I've even thought about proposing it, however when you think about it, > you realise there are cases where it wouldn't work. The largest > preferred lifetime address isn't always the best SA to use. Indeed. And while there are recommended defaults, multiple routers might be using different preferred lifetimes for the prefixes they advertise. > I thought about this in the exact context of the scenario of this draft. > Although the design of the broadband deployment I worked on always > planned to give out stable prefixes, I worked through this scenario and > realised that so many complex issues disappear if you provide stable > prefixes. FWIW, we're not against stable prefixes. We recognize there are scenarios in which they will not be stable, and we want the network to be robust in such scenarios. Thanks! Cheers, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Thu Oct 24 06:11:38 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66146120118 for ; Thu, 24 Oct 2019 06:11:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Gq/cFrtp; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=RGTxQpiM Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hQYJIvv3cOx7 for ; Thu, 24 Oct 2019 06:11:33 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95F1012010E for ; Thu, 24 Oct 2019 06:11:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=814; q=dns/txt; s=iport; t=1571922693; x=1573132293; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=z3CQpX65GvDQr3Hhz9GL90hTQfDH6A+aZuZhnWCTMu0=; b=Gq/cFrtphrZYL991kTMdhrAYcKPAhrdK/Zu8+zswILI6kxQlkzVf3rn/ g2QJoHF2wfd6593ESbJ4UcxgzX+3vDmKyrBIGAuNelQnyBs7NTYGyJzuq /zzE1egYAyLA56P55wH6IjYKqaNJFdC92gvD52KbNSj06Ug1UiijvJoVq g=; X-IronPort-AV: E=Sophos;i="5.68,224,1569283200"; d="scan'208";a="430166515" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 24 Oct 2019 13:11:07 +0000 Received: from XCH-RCD-020.cisco.com (xch-rcd-020.cisco.com [173.37.102.30]) by rcdn-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id x9ODB7aE026848 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 24 Oct 2019 13:11:07 GMT Received: from xhs-rtp-003.cisco.com (64.101.210.230) by XCH-RCD-020.cisco.com (173.37.102.30) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 24 Oct 2019 08:11:06 -0500 Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 24 Oct 2019 09:11:05 -0400 Received: from NAM03-CO1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 24 Oct 2019 08:11:04 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=GBILzKRtZI6vkYyYTExyTUkey+eYcFQ1i+sqjdMtKqDMAuABwcVyBRUTYIq67lXZWjvpflZa20N4Ip68ICLlqXV1I4APCp75g9DHphN4Mal8vS4ElVwg+Ph7cRPlpeYDkY8bzddOD7pqtqCtnYjFHYBscXqD2OZEW1pC43S0HAwKMrHRrkNx6dfKI0DSWRnf796VjTsVPYhbNp+QN12P/9MgS2SlTOuyhNR3tIzMbOiUP/jC20xaP6ZL10lKdV9e0s7dTcZHMzO6/TMfH2d4MvNu6N6TAdA/4PI2qrnEtagiX9XtAyr93qwJBAcvLbAv+aRox0eC/LAdhSsPWfQtOQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=z3CQpX65GvDQr3Hhz9GL90hTQfDH6A+aZuZhnWCTMu0=; b=Bl2U4dnvzU/CX4NzleiC1ZXVZT2gEszMu8yiLfPzHra2Jb5MkXdqO4VcyONE8iEa+MADXXqvpnmfFw9aWhDiiT9sZS+yq/jb87u5yT9syCS90WNIAyLWABEIIIVjro9PIXYRgl6qsuqxgQkTY5aRpFkBrf8fCR6K1q5mnePy1XZx6HRrTVH4XjXDACFHCOYCcWdtWqOhdIVchZSlwSq1DU7yNpmq+V/ZXNyd9FFCqhyoTJdx9CAykJGhyajaTeJFZ+qiDbX5tCH08vOnKnhAwBasGks00sZAUS0jlCEb7IBUosbYtARkjW8NOnfgtGa/QUVnektbSO9a9TzgViOvlQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=z3CQpX65GvDQr3Hhz9GL90hTQfDH6A+aZuZhnWCTMu0=; b=RGTxQpiMObYGQ9j17KxDoACwH4KcSw3BPj61DtW0ZaeyqDlm9UlrLuRjHI4EC4Gy4aGHUXekwpTSc9dQcIg/EJGgJtma6XD5DcchABqH4eUKs4vJo3RbHNUu11/zWGs7/0CYAYQss9/JfTxcvuwJVoTcF9PYK7AOToUtbi+GHiw= Received: from DM5PR11MB1753.namprd11.prod.outlook.com (10.175.88.141) by DM5PR11MB1497.namprd11.prod.outlook.com (10.172.38.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2347.16; Thu, 24 Oct 2019 13:11:04 +0000 Received: from DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::c1f1:d33a:2203:5a39]) by DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::c1f1:d33a:2203:5a39%7]) with mapi id 15.20.2367.027; Thu, 24 Oct 2019 13:11:04 +0000 From: "Eric Vyncke (evyncke)" To: Ole Troan , Mark Smith CC: v6ops list Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AQHVikODXOHd6Wy8jUyFIJ8SyvNa9adpjlkAgAAM74CAAAD0AIAASbwA Date: Thu, 24 Oct 2019 13:11:03 +0000 Message-ID: References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-Reply-To: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c0:1006::2d8] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 6b90a233-88cf-445e-908f-08d758839fc4 x-ms-traffictypediagnostic: DM5PR11MB1497: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 0200DDA8BE x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(366004)(376002)(396003)(136003)(346002)(189003)(199004)(110136005)(58126008)(6486002)(33656002)(6436002)(71190400001)(71200400001)(316002)(229853002)(256004)(305945005)(7736002)(36756003)(2906002)(86362001)(99286004)(186003)(6246003)(8936002)(11346002)(446003)(4744005)(6512007)(81166006)(81156014)(46003)(8676002)(76176011)(5660300002)(6506007)(14454004)(102836004)(478600001)(6116002)(66556008)(64756008)(66446008)(66476007)(91956017)(76116006)(66946007)(476003)(2616005)(4326008)(25786009)(486006); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR11MB1497; H:DM5PR11MB1753.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: xsILjlJVMXzzxy4sFQ6GZmxlhj05DrPLHAHPMdABUtbAVqWUxpv41469cO/9wKzrjZmlpVca9qnotSMGoKYblXpI/AOCcdcK68zGpP7Fp89gjy9AZWO42VuTz5n7BGPcohTwnHDgkJA5Pw1/dZ6ucPZobXsGYSO5Zlu2lJ3X/ECn3ra82kF3BOBmd8NjqC8qzoiDLu8imDXxAWBt7n+xfKtsFU/BLbCJrpqzCKbzWgcfTDTIDULEPSxXSZY0zsOFtXtKvrwmvsVCaTjMwV6xR9IQp7GHlJ1CLrYz9bOCr7+x/ef3IPg1Plte/5v69UcHBNQFZaXAGzTUZgNMBUJTCs6uW591sx4FWDBhhIZU2WqVwK3oUUkowXdwQ70tgERFM3m6Foec/TMPM+zLZRT6DoO9mOO7cG1FUtSD7zxSEF5QD3fdPchrWrbKaNI41Lro x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <461E60EA500AAD49A8C73E1D206DCE67@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 6b90a233-88cf-445e-908f-08d758839fc4 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2019 13:11:03.8964 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: jfnVZYZmKL4fmgZ3kSXpx3th9oWgyde4bB2z1rZepghD2fGywsqtSVmyJkBeRiHIQxoVWvSuPdXkMLvvU3v8Gw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR11MB1497 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.30, xch-rcd-020.cisco.com X-Outbound-Node: rcdn-core-5.cisco.com Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 13:11:36 -0000 T2xlDQoNCldoYXQgYWJvdXQgYSAiSVB2NiByZW51bWJlcmluZyBjb25zaWRlcmVkIGhhcm1mdWwi IG9yICJVbnN0YWJsZSBESENQLVBEIHByZWZpeCBjb25zaWRlcmVkIGhhcm1mdWwiID8NCg0KLcOp cmljIChlbmpveWluZyBteSAzLXllYXIgb2xkIC80OCBvciBpcyBpdCA1IHllYXJzPykNCg0KDQrv u79PbiAyNC8xMC8yMDE5LCAxMjo0NywgInY2b3BzIG9uIGJlaGFsZiBvZiBPbGUgVHJvYW4iIDx2 Nm9wcy1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBvdHJvYW5AZW1wbG95ZWVzLm9yZz4g d3JvdGU6DQoNCiAgICBNYXJrLA0KICAgIA0KICAgIFJpZ2h0LiBJbnN0YW50L2ZsYXNoIHJlbnVt YmVyaW5nIGlzIG5vdCBzdXBwb3J0ZWQgaW4gSVAgbmV0d29ya3MuDQogICAgSVB2NiBkb2VzIG5v dGhpbmcgdG8gaGVscCB3aXRoIHRoaXMsIHdlbGwsIGFzc3VtaW5nIGEgbmV0d29yayBoaWRpbmcg YmVoaW5kIE5BVCwgaXQgbWFrZXMgaXQgaGFyZGVyLg0KICAgIEFwYXJ0IGZyb20gImRvZXMgbm90 IHdvcmsiLCB3aGF0IG1vcmUgY2FuIHRoZSBJRVRGIHNheSBvciBkbyBoZXJlPw0KICAgIA0KICAg IENoZWVycywNCiAgICBPbGUNCiANCg0K From nobody Thu Oct 24 06:34:55 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6AD9C120840 for ; Thu, 24 Oct 2019 06:34:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=consulintel.es Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pofHXjWRayJv for ; Thu, 24 Oct 2019 06:34:52 -0700 (PDT) Received: from mail.consulintel.es (mail.consulintel.es [IPv6:2001:470:1f09:495::5]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B5BF12081D for ; Thu, 24 Oct 2019 06:34:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=consulintel.es; s=MDaemon; t=1571924087; x=1572528887; i=jordi.palet@consulintel.es; q=dns/txt; h=User-Agent:Date: Subject:From:To:CC:Message-ID:Thread-Topic:References: In-Reply-To:Mime-version:Content-type:Content-transfer-encoding; bh=pvEcGG9PQPWrqFhffN8oJQFop+MYxRZB6E9MF9V0+5Y=; b=UlUmld1YBu4pE p7NAXQdHP492eJ7t8rXn7ZYL50vbWkqA/t4debDjjupPWqYzygmZoD5EsfcEinYd WES85sfjnOQ6aI+lUTO+fhmalbwrdCXwHdpHbTkZKzqexV2+4egbTErMrjj+zPNu 7PiQrwLERQ4puHaCoxwsrXW3lSNu08= X-MDAV-Result: clean X-MDAV-Processed: mail.consulintel.es, Thu, 24 Oct 2019 15:34:47 +0200 X-Spam-Processed: mail.consulintel.es, Thu, 24 Oct 2019 15:34:47 +0200 Received: from [10.10.10.144] by mail.consulintel.es (MDaemon PRO v16.5.2) with ESMTPA id md50006439544.msg for ; Thu, 24 Oct 2019 15:34:45 +0200 X-MDRemoteIP: 2001:470:1f09:495:d006:7d6a:d2aa:7e27 X-MDHelo: [10.10.10.144] X-MDArrival-Date: Thu, 24 Oct 2019 15:34:45 +0200 X-Authenticated-Sender: jordi.palet@consulintel.es X-Return-Path: prvs=1200212867=jordi.palet@consulintel.es X-Envelope-From: jordi.palet@consulintel.es X-MDaemon-Deliver-To: v6ops@ietf.org User-Agent: Microsoft-MacOutlook/10.10.f.191014 Date: Thu, 24 Oct 2019 15:34:44 +0200 From: JORDI PALET MARTINEZ To: "Eric Vyncke (evyncke)" , Ole Troan , Mark Smith CC: v6ops list Message-ID: <2DAE4BF5-3D33-4DA2-A8E0-533468D1D317@consulintel.es> Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 13:34:55 -0000 +1 ! Regards, Jordi @jordipalet =20 =20 =EF=BB=BFEl 24/10/19 15:12, "v6ops en nombre de Eric Vyncke (evyncke)" escribi=C3=B3: Ole =20 What about a "IPv6 renumbering considered harmful" or "Unstable DHCP-PD= prefix considered harmful" ? =20 -=C3=A9ric (enjoying my 3-year old /48 or is it 5 years?) =20 =20 =EF=BB=BFOn 24/10/2019, 12:47, "v6ops on behalf of Ole Troan" wrote: =20 Mark, =20 Right. Instant/flash renumbering is not supported in IP networks. IPv6 does nothing to help with this, well, assuming a network hidin= g behind NAT, it makes it harder. Apart from "does not work", what more can the IETF say or do here? =20 Cheers, Ole =20 =20 _______________________________________________ v6ops mailing list v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops =20 ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.theipv6company.com The IPv6 Company This electronic message contains information which may be privileged or con= fidential. The information is intended to be for the exclusive use of the i= ndividual(s) named above and further non-explicilty authorized disclosure, = copying, distribution or use of the contents of this information, even if p= artially, including attached files, is strictly prohibited and will be cons= idered a criminal offense. If you are not the intended recipient be aware t= hat any disclosure, copying, distribution or use of the contents of this in= formation, even if partially, including attached files, is strictly prohibi= ted, will be considered a criminal offense, so you must reply to the origin= al sender to inform about this communication and delete it. From nobody Thu Oct 24 06:38:42 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 388DF120889 for ; Thu, 24 Oct 2019 06:38:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vATBvG01cwUl for ; Thu, 24 Oct 2019 06:38:39 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [IPv6:2607:7c80:54:3::74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE1DD120232 for ; Thu, 24 Oct 2019 06:38:39 -0700 (PDT) Received: from astfgl.hanazo.no (246.51-175-81.customer.lyse.net [51.175.81.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id C017E4E11AEF; Thu, 24 Oct 2019 13:38:38 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id C5A6E1FEAB38; Thu, 24 Oct 2019 15:38:36 +0200 (CEST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Thu, 24 Oct 2019 15:38:36 +0200 Cc: Mark Smith , v6ops list Content-Transfer-Encoding: quoted-printable Message-Id: References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> To: "Eric Vyncke (evyncke)" X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 13:38:41 -0000 Eric, > What about a "IPv6 renumbering considered harmful" or "Unstable = DHCP-PD prefix considered harmful" ? Perhaps, but isn't there a long list of documents the IETF has produced = on IPV6 renumbering already? Would a new document say anything new and more useful? And it's not like DHCPv6 PD (RFC3633) isn't clear either. =46rom the = abstract: The Prefix Delegation options provide a mechanism for automated delegation of IPv6 prefixes using the Dynamic Host Configuration Protocol (DHCP). This mechanism is intended for delegating a long- lived prefix from a delegating router to a requesting router, across an administrative boundary, where the delegating router does not require knowledge about the topology of the links in the network to which the prefixes will be assigned. That said, if people want to write a "IPv6 networks need stable = prefixes" document, go ahead. I'm skeptical that playing with prefix timers and protocol mechanisms = will do more than put lipstick on the pig. Iff we wanted to solve = ephemeral addressing / connectivity, that's would require something = else. Best regards, Ole= From nobody Thu Oct 24 06:43:32 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 757CD120840 for ; Thu, 24 Oct 2019 06:43:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pv7D-MWBSWfF for ; Thu, 24 Oct 2019 06:43:29 -0700 (PDT) Received: from sainfoin-smtp-out.extra.cea.fr (sainfoin-smtp-out.extra.cea.fr [132.167.192.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FD15120072 for ; Thu, 24 Oct 2019 06:43:29 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9ODhRrv024252 for ; Thu, 24 Oct 2019 15:43:27 +0200 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 990A3207ADC for ; Thu, 24 Oct 2019 15:43:27 +0200 (CEST) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 92AD3207AD9 for ; Thu, 24 Oct 2019 15:43:27 +0200 (CEST) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9ODhRYF000492 for ; Thu, 24 Oct 2019 15:43:27 +0200 To: v6ops@ietf.org References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Alexandre Petrescu Message-ID: <4a6aa65f-bcfc-bc59-2789-9bec5c483a1a@gmail.com> Date: Thu, 24 Oct 2019 15:43:27 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.1.2 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 13:43:32 -0000 Le 24/10/2019 à 15:11, Eric Vyncke (evyncke) a écrit : > [...] "Unstable DHCP-PD prefix considered harmful" ? Risks being shortened to an as harmful 'DHCP-PD considered harmful'. Alex > > -éric (enjoying my 3-year old /48 or is it 5 years?) > > > On 24/10/2019, 12:47, "v6ops on behalf of Ole Troan" wrote: > > Mark, > > Right. Instant/flash renumbering is not supported in IP networks. > IPv6 does nothing to help with this, well, assuming a network hiding behind NAT, it makes it harder. > Apart from "does not work", what more can the IETF say or do here? > > Cheers, > Ole > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > From nobody Thu Oct 24 08:57:13 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 70AAB12011C for ; Thu, 24 Oct 2019 08:57:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.999 X-Spam-Level: X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z_E16Sii-Svm for ; Thu, 24 Oct 2019 08:57:09 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 53A3F1200CC for ; Thu, 24 Oct 2019 08:57:08 -0700 (PDT) Received: from kiev.delong.com (kiev.delong.com [IPv6:2620:0:930:0:0:0:200:5]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9OFv149016541 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 24 Oct 2019 08:57:05 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9OFv149016541 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1571932627; bh=e95bmMxKW6puHriG5cUe7KdqEVWK2NamgvYTeN84LLs=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=FwDzVj7lKZePMZVBnRUA88G/81wtS5sm4AxzTgO0AzGQTJ0YzezminaLLj5pf7o8z XTuPJ7nDg//EvsW5XlDzjdHfMrAYGrih0aCHMR7KGU8qN2azgoT+qC3mYG7EtU0NSD bq72yOSn1DCd4lK1R0nAN8dQZJEvIHpv1w9Fg2vA= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Owen DeLong In-Reply-To: Date: Thu, 24 Oct 2019 08:57:01 -0700 Cc: v6ops@ietf.org, Fernando Gont Content-Transfer-Encoding: quoted-printable Message-Id: <19CE795F-B6B9-40A4-9231-34A73A84561C@delong.com> References: To: Philip Homburg X-Mailer: Apple Mail (2.3445.104.11) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [IPv6:2620:0:930:0:0:0:200:2]); Thu, 24 Oct 2019 08:57:07 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 15:57:13 -0000 > On Oct 23, 2019, at 08:08 , Philip Homburg = wrote: >=20 >> The document is available at: >> https://tools.ietf.org/html/draft-gont-v6ops-slaac-renum >=20 > I think this is an important subject that is worth fixing. >=20 > In this reply I'll focus on the preferred and valid lifetimes. >=20 > On a host, the preferred and valid lifetimes play quite different = roles. >=20 > The preferred lifetime plays a role in setting up new flows. I.e. if = the > application does not provide a source address then the IPv6 layer uses > the preferred lifetime to select the best source address among = multiple > candidates. Mistakenly setting the preferred lifetime of an address to = zero=20 > may cause problems for new flows but has no impact on existing flows >=20 > In contrast setting the valid lifetime to zero immediately signals an = error > condition to existing flows. This could cause a lot of trouble for = long=20 > lived flows. >=20 > The other side of the coin is that if a host ends up with stale = prefixes, > then the user maybe willing to wait for a few minutes for the = situation to > resolve itself, but probably not much longer. >=20 > So the suggestion that > AdvPreferredLifetime: AdvDefaultLifetime > is likely not sufficient to be responsive to a user. And at the same = time > AdvValidLifetime: 1.5 * AdvDefaultLifetime > is very risky if AdvDefaultLifetime is low. >=20 > Note that RFC 4861 allows MaxRtrAdvInterval to be a low as 4 seconds,=20= > AdvDefaultLifetime can be as low as MaxRtrAdvInterval, so also 4 = seconds. >=20 > This creates a very fragile system. >=20 > At the same time, AdvDefaultLifetime is commonly 1800 seconds. Which = is way > too long to wait for stale information to expire. Isn=E2=80=99t the issue of stale information strictly under the control = of the person running the router(s)? I mean during normal operations, 1800 seconds seems like a reasonable = default to me. In an environment where you are depending on routers advertising = different prefixes on the same network for redundancy (you=E2=80=99ve kind of = cobbled things poorly to begin with), you=E2=80=99ll want to select a shorter time, = certainly, but then you have that option. In a more traditional environment where you have = multiple routers announcing the same prefix providing redundancy, then it seems = to me that the prefix only goes stale during a renumber event. The procedure for renumbering a SLAAC network should be relatively = straightforward=E2=80=A6 1. Configure and test new prefix on routers and perhaps a few test = hosts with manual configuration. 2. Begin announcing new prefix via RAs. 3. Note the Valid Lifetime for the old prefix. (Tvold). 4. Take the old prefix out of the RAs (leave it fully configured on = the routers). 5. Wait some time greater than Tvold for the old prefix to expire. 6. Remove the old prefix from the routers. > I agree that valid and preferred lifetimes of resp. 30 days and 7 days=20= > are excessive. But I'm not at all convinced that tying them to=20 > AdvDefaultLifetime will have a positive effect. I'm also not convinced > that there are sensible values for these lifetimes that are robust = enough=20 > and at the same time responsive enough to deal with the issue at hand. Any tying of them to AdvDefaultLifetime should be merely for the purpose = of establishing a default, which seems a reasonable process. Certainly = there is a need for the Valid and Preferred lifetimes to be =E2=89=A5 = MaxRtrAdvInterval which must be =E2=89=A4 AdvDefaultLifetime for things to function at = all. > Reducing the lifetimes would help against build up of stale prefixes. = If > they are set to a couple of hours. Shouldn=E2=80=99t this be an individual administrative decision on a = site-by-site basis? If we=E2=80=99re looking to set more rational defaults or provide advice = on better defaults to administrators and/or product developers, then perhaps we should provide a context-aware set of rational defaults for these = variables. IMHO, there are a number of contexts each of which would likely need different values to achieve an optimum balance: Single-homed household or SMB end-user Multi-homed multi-prefix household or SMB end-user Multi-homed single-prefix (BGP) end site Enterprise Environment Transit Network (would you even use SLAAC here?) Others? Owen =09 From nobody Thu Oct 24 09:52:36 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CC8A120100 for ; Thu, 24 Oct 2019 09:52:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.999 X-Spam-Level: X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y1xLhlyteEVB for ; Thu, 24 Oct 2019 09:52:32 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 6F5D21200DB for ; Thu, 24 Oct 2019 09:52:32 -0700 (PDT) Received: from kiev.delong.com (kiev.delong.com [IPv6:2620:0:930:0:0:0:200:5]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9OGqVmU000380 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 24 Oct 2019 09:52:31 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9OGqVmU000380 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1571935952; bh=g2SHeCCgoyAHGklgQzg+uocBDb/VndFkf07i1z80Crc=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=p1n75PqjoIrMjZxZX/EM5xXNDTnhFMcvt/Q0+wO6E46JzSTbfxPqtiPra+A2ZAljp HKddEzWyh6ZlzysAUIVCM2UeQi4Ty04j9R6sGbUu3js0p7UeH8Gk0L1ikHAzZ6pQc8 WSF1KZeoJsKtgmdkcwlpG3CTNjkv4zJj0EmnY51U= From: Owen DeLong Message-Id: <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_BBA4E4E1-A862-425B-8B3B-07C74BE29715" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Thu, 24 Oct 2019 09:52:31 -0700 In-Reply-To: Cc: Philip Homburg , v6ops@ietf.org To: Fernando Gont References: X-Mailer: Apple Mail (2.3445.104.11) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [IPv6:2620:0:930:0:0:0:200:2]); Thu, 24 Oct 2019 09:52:32 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 16:52:35 -0000 --Apple-Mail=_BBA4E4E1-A862-425B-8B3B-07C74BE29715 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 >> I'm also not convinced >> that there are sensible values for these lifetimes that are robust = enough=20 >> and at the same time responsive enough to deal with the issue at = hand. >>=20 >> Reducing the lifetimes would help against build up of stale prefixes. = If >> they are set to a couple of hours. >=20 > I do agree that this is not a complete solution, but, as you correctly > note, would help against build up of stale prefixes. I do agree that 7 and 30 days, respectively are absurd timer default = values. I think we can take some lessons from IPv4 and DHCP here. A fairly = common lease time in the DHCP world is 3600 seconds (1 hour). This seems like a reasonable default preferred lifetime and I would propose that 1 day = (86400) seconds may well be a reasonable default valid lifetime. It is worth noting that these values are tunable by the administrator = and the RFC suggested defaults should never be a hard-coded value. With the following exception, I don=E2=80=99t advocate modifying this on = the client side: + Section 5.5.3 of RFC4862 should be amended to = specifically allow the immediate deprecation of a prefix by sending a = valid lifetime of 0 seconds. Hosts should be required to honor this as a signal that the prefix is no longer valid. I do think that generally speaking, your proposed modifications to CPE = and router behavior should be standardized and implemented. > A better mitigation is to affect the preferred and possibly the valid > lifetimes in response to consecutive RAs from the same router that = lack > the original (stale) prefix. e.g., after two consecutive RAs that do = not > contain the existing prefix, reduce the preferred lifetime. After two > additional RAs, reduce the valid lifetime. In the crash scenarios you describe, you=E2=80=99re assuming a single = router on the network or at least only one router announcing the prefix(es) in question with no = persistent memory of the prefixes it was announcing across a reboot. In such a = scenario, it seems to me that the following are also likely valid assumptions: + The network has significant excess bandwidth compared to = demand. + The small overhead of frequent RAs and short lifetimes = is probably an acceptable tradeoff in this environment. However, there are lots of other scenarios in the world where those = assumptions won=E2=80=99t hold true and we should not seek to solve this problem = (which is generally applicable to residential and SMB environments) at the expense of all of = those other professionally administered environments. For For the busy wifi scenario, the preferred lifetime of zero for the old = PIO should be sent many times and should be maintained in the configuration for at = least OldPreferredLifetime seconds. At the end of OldPreferredLifetime = seconds, if a host hasn=E2=80=99t seen the new RA, it will no longer matter as = the last RA it saw will have expired. It=E2=80=99s not ideal, but there really aren=E2=80=99t= a lot of good options here other than getting WiFi vendors to improve multicast reliability. In your automated configuration management scenario, IMHO, the people driving the automation have erred. The related case is, IMHO, a variant of the exact same case and represents the same error. It is still = operator error regardless of whether the operator is driving an automation = system, or is directly configuring a router. At a certain point, we need to = accept that there is a limit to the acceptable gymnastics for the prevention of = operator error. The best colloquialism here is =E2=80=9CIf you make something = completely idiot proof, the world will invent a better idiot.=E2=80=9D In section 3.2.1, you advocate setting the A and L bits to their = previous values for prefixes which are being deprecated. IMHO, this is incorrect and the announcements calling for immediate deprecation should also indicate = that the prefix should no longer be auto-configured and should no longer be considered on-link. Is there some unfortunate widely deployed behavior that interacts poorly with setting A and L to 0 for these previously valid prefixes? Finally, An editorial note=E2=80=A6 In Section 3, you state =E2=80=9CFinal= ly, Section 2.5 analyzes=E2=80=A6=E2=80=9D I believe this is intended to be a reference to section 3.2.2. Owen --Apple-Mail=_BBA4E4E1-A862-425B-8B3B-07C74BE29715 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
I'm = also not convinced
that there are sensible values for = these lifetimes that are robust enough 
and at the = same time responsive enough to deal with the issue at hand.

Reducing the lifetimes would help against = build up of stale prefixes. If
they are set to a couple of = hours.

I do agree that this is not a complete solution, but, as you = correctly
note, would = help against build up of stale prefixes.

I do agree that 7 and 30 days, respectively are = absurd timer default values.

I think = we can take some lessons from IPv4 and DHCP here. A fairly = common
lease time in the DHCP world is 3600 seconds (1 hour). = This seems like a
reasonable default preferred lifetime and I = would propose that 1 day (86400)
seconds may well be a = reasonable default valid lifetime.

It = is worth noting that these values are tunable by the administrator and = the
RFC suggested defaults should never be a hard-coded = value.

With the following exception, = I don=E2=80=99t advocate modifying this on the = client
side:
+ Section 5.5.3 of RFC4862 should = be amended to specifically
allow the immediate = deprecation of a prefix by sending a valid
= lifetime of 0 seconds. Hosts should be required to = honor
= this as a signal that the prefix is no longer = valid.

I do think that generally = speaking, your proposed modifications to CPE and
router = behavior should be standardized and implemented.

A better = mitigation is to affect the preferred and possibly the valid
lifetimes in response to = consecutive RAs from the same router that lack
the original (stale) prefix. = e.g., after two consecutive RAs that do not
contain the existing prefix, = reduce the preferred lifetime. After two
additional RAs, reduce the valid lifetime.

In = the crash scenarios you describe, you=E2=80=99re assuming a single = router on the network or
at least only one router announcing = the prefix(es) in question with no persistent
memory of the = prefixes it was announcing across a reboot. In such a = scenario,
it seems to me that the following are also likely = valid assumptions:

+ The = network has significant excess bandwidth compared to = demand.
+ The small overhead of frequent = RAs and short lifetimes is probably
= an acceptable tradeoff in this environment.

However, there are lots of other scenarios in the = world where those assumptions
won=E2=80=99t hold true and we = should not seek to solve this problem (which is = generally
applicable to residential and SMB environments) at = the expense of all of those
other professionally administered = environments.

For

For the busy wifi scenario, the preferred lifetime = of zero for the old PIO should be
sent many times and should = be maintained in the configuration for at = least
OldPreferredLifetime seconds. At the end of = OldPreferredLifetime seconds,
if a host hasn=E2=80=99t seen = the new RA, it will no longer matter as the last RA it = saw
will have expired. It=E2=80=99s not ideal, but there = really aren=E2=80=99t a lot of good options here
other than = getting WiFi vendors to improve multicast reliability.

In your automated configuration management = scenario, IMHO, the people
driving the automation have erred. = The related case is, IMHO, a variant
of the exact same case = and represents the same error. It is still operator
error = regardless of whether the operator is driving an automation = system,
or is directly configuring a router. At a certain = point, we need to accept that
there is a limit to the = acceptable gymnastics for the prevention of operator
error. = The best colloquialism here is =E2=80=9CIf you make something = completely
idiot proof, the world will invent a better = idiot.=E2=80=9D

In section 3.2.1, = you advocate setting the A and L bits to their previous = values
for prefixes which are being deprecated. IMHO, this is = incorrect and the
announcements calling for immediate = deprecation should also indicate that
the prefix should no = longer be auto-configured and should no longer be
considered = on-link.

Is there some unfortunate = widely deployed behavior that interacts poorly
with setting A = and L to 0 for these previously valid prefixes?

Finally, An editorial note=E2=80=A6 In Section 3, = you state =E2=80=9CFinally, Section 2.5 analyzes=E2=80=A6=E2=80=9D
I believe this is intended to be a reference to section = 3.2.2.


Owen


= --Apple-Mail=_BBA4E4E1-A862-425B-8B3B-07C74BE29715-- From nobody Thu Oct 24 12:38:49 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EDFB120025 for ; Thu, 24 Oct 2019 12:38:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JhRJO93xflRt for ; Thu, 24 Oct 2019 12:38:46 -0700 (PDT) Received: from mail-pf1-x431.google.com (mail-pf1-x431.google.com [IPv6:2607:f8b0:4864:20::431]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 808B2120020 for ; Thu, 24 Oct 2019 12:38:46 -0700 (PDT) Received: by mail-pf1-x431.google.com with SMTP id c184so6250566pfb.0 for ; Thu, 24 Oct 2019 12:38:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=+rzi9MPPi9+i02DYcyG4NqFS0tfLN2O/Z/SOx/Yei/Y=; b=ILpmEl8v8QmtQeX/vL9DHJwEaIRT7is0XiBvvDt9Id9fZSTblLSKynIpsVdGyAqczp nDWrTdoiEJ4XnmUwy//jcaaGlSEIvf8FlMgo7kW4sPze7T3Xlc6JZmmBDcWHFep1TVXH MLv4E3AwJqRzy+AgX1+XO09edogmx34VgpP13PKBsv1EQFYIpE9HmiXr6qI+nBVRJpFy 7LNtn5YuHqyaOIhOZXw3aaJp7LghU3VOWQORADdp55kmCvCETROIsOVs+z98F1+1K6iy mPibnM4w3xh6aRm7iTWK6blnimOYwR5rB4gusqAhMCZkL4/xTaQnK6gO7y1LLacr98co zyRA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=+rzi9MPPi9+i02DYcyG4NqFS0tfLN2O/Z/SOx/Yei/Y=; b=r+vn7yhNAGaLs9L3B3ftUndAeqwvEL8zJDPu0Me5GDU5/4hwHJFBvAbuXOGk1GAYv1 XVWbZcHfjezutggzkGW7NrF2xz5R6WK6b3XsrRerBMmpvZthLbABYbVmzXzXDcZZdXUp 5/lm2HaHjgg1vMKrtmZS/2amUxGw/myDuESeQcMYOUrI59pPfZ45AWH+g44ZyJrjY2jy yclCReVPsF0MCWiq9RYQYH/fa9RFrBMJ6R33y0Qeszu5mFC5Y3lqs8oeGGqlfCLC2lXY fKYVYb5uC5zkjn7cQRIw6FC4on5WMTaq2H0M+ZdWErqnncJ+Nsh/Azq5eMvdbU+hXN79 e7wA== X-Gm-Message-State: APjAAAXg9Ssw/58BFLaEae94MRwgVxKCZDVHx1uWpA4xKUS8krZ43WQu M588wIEhd+IFUvHBO25T9bd5uBLM X-Google-Smtp-Source: APXvYqxX7v6tjcRtQwX5ZIx8Sw+L8fZCJZeyiZxgdlGFLtDp9BhPmwj7d7hJ8YRi+DsmP5Ty3g4ROA== X-Received: by 2002:a17:90a:35a5:: with SMTP id r34mr8782872pjb.40.1571945925525; Thu, 24 Oct 2019 12:38:45 -0700 (PDT) Received: from [192.168.178.30] (98.145.69.111.dynamic.snap.net.nz. [111.69.145.98]) by smtp.gmail.com with ESMTPSA id b3sm27804749pfd.125.2019.10.24.12.38.43 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 24 Oct 2019 12:38:44 -0700 (PDT) To: Ole Troan , "Eric Vyncke (evyncke)" Cc: v6ops list References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Brian E Carpenter Message-ID: <71100bce-f332-5805-e94a-9ce6ac7b110d@gmail.com> Date: Fri, 25 Oct 2019 08:38:42 +1300 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 19:38:48 -0000 On 25-Oct-19 02:38, Ole Troan wrote: > Eric, > >> What about a "IPv6 renumbering considered harmful" or "Unstable DHCP-PD prefix considered harmful" ? > > Perhaps, but isn't there a long list of documents the IETF has produced on IPV6 renumbering already? > Would a new document say anything new and more useful? I doubt it, although we did leave many dangling problems in https://tools.ietf.org/html/rfc7010 Brian > > And it's not like DHCPv6 PD (RFC3633) isn't clear either. From the abstract: > > The Prefix Delegation options provide a mechanism for automated > delegation of IPv6 prefixes using the Dynamic Host Configuration > Protocol (DHCP). This mechanism is intended for delegating a long- > lived prefix from a delegating router to a requesting router, across > an administrative boundary, where the delegating router does not > require knowledge about the topology of the links in the network to > which the prefixes will be assigned. > > > That said, if people want to write a "IPv6 networks need stable prefixes" document, go ahead. > I'm skeptical that playing with prefix timers and protocol mechanisms will do more than put lipstick on the pig. Iff we wanted to solve ephemeral addressing / connectivity, that's would require something else. > > Best regards, > Ole > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > . > From nobody Thu Oct 24 14:47:32 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F630120255 for ; Thu, 24 Oct 2019 14:47:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.497 X-Spam-Level: X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tecuBltWJdSL for ; Thu, 24 Oct 2019 14:47:20 -0700 (PDT) Received: from mail-ot1-x334.google.com (mail-ot1-x334.google.com [IPv6:2607:f8b0:4864:20::334]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CABF1201EA for ; Thu, 24 Oct 2019 14:47:20 -0700 (PDT) Received: by mail-ot1-x334.google.com with SMTP id z6so370239otb.2 for ; Thu, 24 Oct 2019 14:47:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=OXUOEIVGuKNe7pZSlU65Cd/4DPQPlW4SiSdufEYHge0=; b=FPch/678Kf7C7d6KUtUH/rRBDheVW8y2RU/JnMhEcZDmUD60Ci9yZs5jZsG3ZZ0788 WBlMX5dddyM61NOk3qZthKJThVJn1zhSPMQvh7f/X91xXq97XHwugZf3ty7hBYxQnZ4z 8cTtmmsqUnj0XmpnNNdq0jAD/KZOzsfJC2HlO0mfL3SRiXusjAYGOJOx8CZ3SaPmz3y+ 5nXRF+gfU5Kw4xKw43eouuXI4FaSOIpGC+cj+9+xmESYVWh1KfdJJR3GA+l86H+W80Cf TL8cyWqoPshaFBMiwq8jd1Plmm9F7EFDErhWRfR7tfWjk70tP1pZlxkf+b71cs9Q17mX T2Xg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=OXUOEIVGuKNe7pZSlU65Cd/4DPQPlW4SiSdufEYHge0=; b=qoBd/VzUXYZIJo4X9s3PmDfcet9glIWx4VwfpD1Elb71aHEAbM7g3meZ5D5Sd0mOb0 /ppNVS24LpDAXwhWh/IZZGRYozQ42REIG7FxniO3kiI1VbuF064fDy3bp8srLzqx+AMN P20l80aIA/Pc6CYliI9NXWxkLXHm6PzXwuYTV6M4JHN2wwrUPKscBMXtY4tZeM1p5LkY zaDcXTCVjLcRDUaFklcKiN09gmPuFBQul1QOsKCpEIVbMxxVd0UyIe9Ww0IsZvXC6Koa kRVUlNFbPu9q4LkvEeUUOiJZfAnikO3g+AcZi9XlPfvbvMdM+81KXrp7NtHcbpz8v8wV K9mA== X-Gm-Message-State: APjAAAXpiRfxtdoPh5FAIZyzbw5rvK1LDWZui7BJJht3um9kPIy1XDl6 p2m5NriZkB7w0gUZPimV7qFDAcbXMd8k29n53L8= X-Google-Smtp-Source: APXvYqykIInVcAgK98Ddv86YKRwM8VugXZy7Pd1uTq7rH5LEGXEw6gAhd8jv+euT835pK0FF8gTPsnaGCO0myYjIdRc= X-Received: by 2002:a05:6830:43:: with SMTP id d3mr46898otp.153.1571953639909; Thu, 24 Oct 2019 14:47:19 -0700 (PDT) MIME-Version: 1.0 References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <4a6aa65f-bcfc-bc59-2789-9bec5c483a1a@gmail.com> In-Reply-To: <4a6aa65f-bcfc-bc59-2789-9bec5c483a1a@gmail.com> From: Mark Smith Date: Fri, 25 Oct 2019 08:47:09 +1100 Message-ID: To: Alexandre Petrescu Cc: v6ops list Content-Type: multipart/alternative; boundary="0000000000004f6ed60595aefa5b" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 21:47:30 -0000 --0000000000004f6ed60595aefa5b Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, 25 Oct 2019, 00:43 Alexandre Petrescu, wrote: > > > Le 24/10/2019 =C3=A0 15:11, Eric Vyncke (evyncke) a =C3=A9crit : > > [...] "Unstable DHCP-PD prefix considered harmful" ? > > Risks being shortened to an as harmful 'DHCP-PD considered harmful'. > If you're going to suggest that, you better say why. DHCPv6-PD has facilitated residential IPv6 deployment. There would have been no practical way to do it otherwise. > Alex > > > > > -=C3=A9ric (enjoying my 3-year old /48 or is it 5 years?) > > > > > > =EF=BB=BFOn 24/10/2019, 12:47, "v6ops on behalf of Ole Troan" < > v6ops-bounces@ietf.org on behalf of otroan@employees.org> wrote: > > > > Mark, > > > > Right. Instant/flash renumbering is not supported in IP networks. > > IPv6 does nothing to help with this, well, assuming a network > hiding behind NAT, it makes it harder. > > Apart from "does not work", what more can the IETF say or do here? > > > > Cheers, > > Ole > > > > > > _______________________________________________ > > v6ops mailing list > > v6ops@ietf.org > > https://www.ietf.org/mailman/listinfo/v6ops > > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > --0000000000004f6ed60595aefa5b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


DHCPv6-PD has facilitated residential IPv= 6 deployment. There would have been no practical way to do it otherwise.



Alex

>
> -=C3=A9ric (enjoying my 3-year old /48 or is it 5 years?)
>
>
> =EF=BB=BFOn 24/10/2019, 12:47, "v6ops on behalf of Ole Troan"= ; <v6ops-bounces@ietf.org on behalf of otroan@employees.org> wrote:
>
>=C2=A0 =C2=A0 =C2=A0 Mark,
>=C2=A0 =C2=A0 =C2=A0
>=C2=A0 =C2=A0 =C2=A0 Right. Instant/flash renumbering is not supported = in IP networks.
>=C2=A0 =C2=A0 =C2=A0 IPv6 does nothing to help with this, well, assumin= g a network hiding behind NAT, it makes it harder.
>=C2=A0 =C2=A0 =C2=A0 Apart from "does not work", what more ca= n the IETF say or do here?
>=C2=A0 =C2=A0 =C2=A0
>=C2=A0 =C2=A0 =C2=A0 Cheers,
>=C2=A0 =C2=A0 =C2=A0 Ole
>=C2=A0 =C2=A0
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6o= ps
>

_______________________________________________
v6ops mailing list
v6op= s@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops
--0000000000004f6ed60595aefa5b-- From nobody Fri Oct 25 01:37:04 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98AA2120233 for ; Fri, 25 Oct 2019 01:37:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9p9eMDCQ-o0I for ; Fri, 25 Oct 2019 01:37:01 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A09012001E for ; Fri, 25 Oct 2019 01:37:00 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iNv5U-0000KUC; Fri, 25 Oct 2019 10:36:48 +0200 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-reply-to: Your message of "Thu, 24 Oct 2019 15:38:36 +0200 ." Date: Fri, 25 Oct 2019 10:36:44 +0200 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 08:37:03 -0000 >I'm skeptical that playing with prefix timers and protocol mechanisms will do m >ore than put lipstick on the pig. Iff we wanted to solve ephemeral addressing / > connectivity, that's would require something else. A typical home situation today has almost exclusively outbound connections. People also accept that if you reboot a home router, a video stream may be interrupted. Where general problem of renumbering is hard to solve, the more limited home use case is not. For IPv4 all of this is hidden by NAT in the CPE. After the previous discussion, I updated my IPv6 stack to do detect prefixes that are no longer announced in RAs. This does solve the problem at hand. Previously, AVM CPEs (Fritz!Box) would actively kill weird prefixes used by hosts. That was quite effective, though has some weird side effects. So a CPE solution is likely to solve this problem as well. This is problem that can be solved both in the host and in the CPE. Of course, we can also wait for ISPs to start shipping CPEs with NAT66. Reality is that ISPs do flash renumbering for IPv4 customers. We can tell them that they cannot do that for IPv6, but that will result either in a delay of IPv6 deployment, or they will find a hack (such as NAT66) to make it 'work'. From nobody Fri Oct 25 01:43:05 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5D4612001E for ; Fri, 25 Oct 2019 01:43:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.198 X-Spam-Level: X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G_UNC7vqTGD3 for ; Fri, 25 Oct 2019 01:43:03 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [130.37.15.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80FD912012D for ; Fri, 25 Oct 2019 01:43:03 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iNvBU-0000DpC; Fri, 25 Oct 2019 10:43:00 +0200 Message-Id: To: v6ops@ietf.org Cc: Fernando Gont From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: In-reply-to: Your message of "Thu, 24 Oct 2019 08:17:48 -0300 ." Date: Fri, 25 Oct 2019 10:42:51 +0200 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 08:43:05 -0000 >I fully agree with your assessment. That said, maybe the first step is >to start with a problem statement, as with this document? The current draft is not a problem statement. From Section 3 it describes potential solutions. I'm not sure a separate problem statement is needed. The relevant documents can start with a description of what is happening today. In perfect world, bad things do not happen, but we don't live in a perfect world. Most customers don't have the luxury position to change ISPs just because their ISP does flash renumbering. From nobody Fri Oct 25 03:53:52 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D19E12084F for ; Fri, 25 Oct 2019 03:53:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QrMjRNvZGM7I for ; Fri, 25 Oct 2019 03:53:49 -0700 (PDT) Received: from sainfoin-smtp-out.extra.cea.fr (sainfoin-smtp-out.extra.cea.fr [132.167.192.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 206351200C7 for ; Fri, 25 Oct 2019 03:53:48 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9PArksh004557; Fri, 25 Oct 2019 12:53:46 +0200 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 5CA91205AA6; Fri, 25 Oct 2019 12:53:46 +0200 (CEST) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 4DC00202651; Fri, 25 Oct 2019 12:53:46 +0200 (CEST) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9PArkU5014439; Fri, 25 Oct 2019 12:53:46 +0200 To: Mark Smith Cc: v6ops list References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <4a6aa65f-bcfc-bc59-2789-9bec5c483a1a@gmail.com> From: Alexandre Petrescu Message-ID: Date: Fri, 25 Oct 2019 12:53:46 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.1.2 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 10:53:52 -0000 Le 24/10/2019 à 23:47, Mark Smith a écrit : > > > On Fri, 25 Oct 2019, 00:43 Alexandre Petrescu, > > wrote: > > > > Le 24/10/2019 à 15:11, Eric Vyncke (evyncke) a écrit : > >  [...] "Unstable DHCP-PD prefix considered harmful" ? > > Risks being shortened to an as harmful 'DHCP-PD considered harmful'. > > > If you're going to suggest that, you better say why. BEcause people take DHCPv6 for DHCPv4. I'd rather say: 'linux lack of a light kernel built-in DHCPv6 client is considered harmful' 'sticked addresses on interfaces after prefix expiration is considered harmful' 'lack of DHCPv6-delegated prefix presence in RA is considered harmful' ... > DHCPv6-PD has facilitated residential IPv6 deployment. There would have > been no practical way to do it otherwise. Probably DHCPv6-PD has facilitated residential IPv6 deployment. I will not argue about the practicability of other ways, but while my ISP (Free) delivers /56s w/o DHCPv6-PD since many years (supposedly w/ '6rd') it also engaged on a migration path to 'native IPv6' since 2017, that I do not really understand whether or not it uses DHCPv6-PD. Alex > > > > Alex > > > > > -éric (enjoying my 3-year old /48 or is it 5 years?) > > > > > > On 24/10/2019, 12:47, "v6ops on behalf of Ole Troan" > on behalf of > otroan@employees.org > wrote: > > > >      Mark, > > > >      Right. Instant/flash renumbering is not supported in IP > networks. > >      IPv6 does nothing to help with this, well, assuming a > network hiding behind NAT, it makes it harder. > >      Apart from "does not work", what more can the IETF say or do > here? > > > >      Cheers, > >      Ole > > > > > > _______________________________________________ > > v6ops mailing list > > v6ops@ietf.org > > https://www.ietf.org/mailman/listinfo/v6ops > > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > From nobody Fri Oct 25 03:56:45 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C65B120855 for ; Fri, 25 Oct 2019 03:56:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nRxZ10l28kOP for ; Fri, 25 Oct 2019 03:56:42 -0700 (PDT) Received: from sainfoin-smtp-out.extra.cea.fr (sainfoin-smtp-out.extra.cea.fr [132.167.192.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7AC8E120851 for ; Fri, 25 Oct 2019 03:56:37 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9PAuZ8J005381 for ; Fri, 25 Oct 2019 12:56:35 +0200 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id DB57D205AA4 for ; Fri, 25 Oct 2019 12:56:35 +0200 (CEST) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id D1C25205A1B for ; Fri, 25 Oct 2019 12:56:35 +0200 (CEST) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9PAuZV2015415 for ; Fri, 25 Oct 2019 12:56:35 +0200 To: v6ops@ietf.org References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <4a6aa65f-bcfc-bc59-2789-9bec5c483a1a@gmail.com> From: Alexandre Petrescu Message-ID: Date: Fri, 25 Oct 2019 12:56:35 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.1.2 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 10:56:44 -0000 As usual, I think one wants to make sure about which link layer does one talk in the Problem Statement and Operational workarounds. It might very well be that this DHCPv6-PD usefulness pertains to certain links (optical, in this case) and not in others (ADSL, or 4G). This relates directly to many ISPs. Alex Le 25/10/2019 à 12:53, Alexandre Petrescu a écrit : > > > Le 24/10/2019 à 23:47, Mark Smith a écrit : >> >> >> On Fri, 25 Oct 2019, 00:43 Alexandre Petrescu, >> > >> wrote: >> >> >> >>     Le 24/10/2019 à 15:11, Eric Vyncke (evyncke) a écrit : >>      >  [...] "Unstable DHCP-PD prefix considered harmful" ? >> >>     Risks being shortened to an as harmful 'DHCP-PD considered harmful'. >> >> >> If you're going to suggest that, you better say why. > > BEcause people take DHCPv6 for DHCPv4. > > I'd rather say: > > 'linux lack of a light kernel built-in DHCPv6 client is considered >  harmful' > 'sticked addresses on interfaces after prefix expiration is considered >  harmful' > 'lack of DHCPv6-delegated prefix presence in RA is considered >  harmful' > ... > >> DHCPv6-PD has facilitated residential IPv6 deployment. There would >> have been no practical way to do it otherwise. > > Probably DHCPv6-PD has facilitated residential IPv6 deployment.  I will > not argue about the practicability of other ways, but while my ISP > (Free) delivers /56s w/o DHCPv6-PD since many years (supposedly w/ > '6rd') it also engaged on a migration path to 'native IPv6' since 2017, > that I do not really understand whether or not it uses DHCPv6-PD. > > Alex > >> >> >> >>     Alex >> >>      > >>      > -éric (enjoying my 3-year old /48 or is it 5 years?) >>      > >>      > >>      > On 24/10/2019, 12:47, "v6ops on behalf of Ole Troan" >>     on behalf of >>     otroan@employees.org > wrote: >>      > >>      >      Mark, >>      > >>      >      Right. Instant/flash renumbering is not supported in IP >>     networks. >>      >      IPv6 does nothing to help with this, well, assuming a >>     network hiding behind NAT, it makes it harder. >>      >      Apart from "does not work", what more can the IETF say or do >>     here? >>      > >>      >      Cheers, >>      >      Ole >>      > >>      > >>      > _______________________________________________ >>      > v6ops mailing list >>      > v6ops@ietf.org >>      > https://www.ietf.org/mailman/listinfo/v6ops >>      > >> >>     _______________________________________________ >>     v6ops mailing list >>     v6ops@ietf.org >>     https://www.ietf.org/mailman/listinfo/v6ops >> > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops From nobody Fri Oct 25 05:22:26 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAF85120874 for ; Fri, 25 Oct 2019 05:22:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZrpodUJf_JwY for ; Fri, 25 Oct 2019 05:22:25 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [IPv6:2607:7c80:54:3::74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 064F812086F for ; Fri, 25 Oct 2019 05:22:25 -0700 (PDT) Received: from astfgl.hanazo.no (unknown [IPv6:2a01:79c:cebd:47d8:4dd1:333a:19d7:ed3c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 597E34E11A42; Fri, 25 Oct 2019 12:22:24 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id DD79C1FEC8B4; Fri, 25 Oct 2019 14:22:20 +0200 (CEST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Fri, 25 Oct 2019 14:22:20 +0200 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> To: Philip Homburg X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 12:22:26 -0000 > Reality is that ISPs do flash renumbering for IPv4 customers. We can = tell them=20 > that they cannot do that for IPv6, but that will result either in a = delay > of IPv6 deployment, or they will find a hack (such as NAT66) to make = it 'work'. a home network with ephemeral addressing stuck behind a firewall. what is the point of IPv6 over IPv4+NAT? what value does IPv6 bring? exposing external addressing in the internal network, combined with = exposing network layer addressing to the transport and application = layers is one of the bigger short-comings of IPv6. Cheers, Ole= From nobody Fri Oct 25 05:44:05 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 178A312087A for ; Fri, 25 Oct 2019 05:44:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.198 X-Spam-Level: X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nJOXT_VOXFH6 for ; Fri, 25 Oct 2019 05:44:02 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [130.37.15.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3993F120874 for ; Fri, 25 Oct 2019 05:44:02 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iNywd-0000KmC; Fri, 25 Oct 2019 14:43:55 +0200 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-reply-to: Your message of "Fri, 25 Oct 2019 14:22:20 +0200 ." Date: Fri, 25 Oct 2019 14:43:54 +0200 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 12:44:04 -0000 >a home network with ephemeral addressing stuck behind a firewall. >what is the point of IPv6 over IPv4+NAT? what value does IPv6 bring? In the case of, for example, youtube and netflix, the advantage is that high volume flows are not going through the ISP's CGNAT. In the case of certain banks that support IPv6, the advantage is that there is no risk that multiple households will share a single IPv4 address. In any case, it doesn't matter how much benefit IPv6 brings over IPv4. We are out of IPv4 addresses. Time to get rid of IPv4. >exposing external addressing in the internal network, combined with >exposing network layer addressing to the transport and application >layers is one of the bigger short-comings of IPv6. There are all kinds of problems with IPv6. But I don't think we want to wait for a resign of IPv6 or the transport and application layers. From nobody Fri Oct 25 05:53:49 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1006412086F for ; Fri, 25 Oct 2019 05:53:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VoXW5tRsYJ8E for ; Fri, 25 Oct 2019 05:53:46 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 899AE1200B5 for ; Fri, 25 Oct 2019 05:53:46 -0700 (PDT) Received: from astfgl.hanazo.no (unknown [IPv6:2a01:79c:cebd:47d8:4dd1:333a:19d7:ed3c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 6F8254E11AD9; Fri, 25 Oct 2019 12:53:45 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 63B3A1FEE85B; Fri, 25 Oct 2019 14:53:43 +0200 (CEST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Fri, 25 Oct 2019 14:53:43 +0200 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> To: Philip Homburg X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 12:53:48 -0000 >> a home network with ephemeral addressing stuck behind a firewall. >> what is the point of IPv6 over IPv4+NAT? what value does IPv6 bring? >=20 > In the case of, for example, youtube and netflix, the advantage is = that > high volume flows are not going through the ISP's CGNAT. how is that an advantage for the end user? it might be for the ISP. but that's the entity that cannot give stable = addressing in the first place... > In the case of certain banks that support IPv6, the advantage is that > there is no risk that multiple households will share a single IPv4 = address. that's a solved problem. security is done at a higher layer regardless. > In any case, it doesn't matter how much benefit IPv6 brings over IPv4. = We > are out of IPv4 addresses. Time to get rid of IPv4. if IPv6 provides no benefit over IPv4 then why? 32 + 16 > 128. or if we allow IPv6 to have no benefit over IPv4 I could rather say. >> exposing external addressing in the internal network, combined with=20= >> exposing network layer addressing to the transport and application=20 >> layers is one of the bigger short-comings of IPv6. >=20 > There are all kinds of problems with IPv6. But I don't think we want = to wait > for a resign of IPv6 or the transport and application layers. The changes in the transport and application layers are already = happening (e.g. QUIC). There are already "redesigns" of IPv6. Take ILNP. I'm not the one proposing an IPv6 redesign. This is a response to the = proposals of violating a fundamental expectation of stable addressing in = IPv6. cheers, Ole= From nobody Fri Oct 25 06:15:08 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2BE9120288 for ; Fri, 25 Oct 2019 06:15:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q2ta5S3TyK2N for ; Fri, 25 Oct 2019 06:15:06 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B02BE12004E for ; Fri, 25 Oct 2019 06:15:05 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iNzQi-0000KmC; Fri, 25 Oct 2019 15:15:00 +0200 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> In-reply-to: Your message of "Fri, 25 Oct 2019 14:53:43 +0200 ." <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> Date: Fri, 25 Oct 2019 15:14:59 +0200 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 13:15:07 -0000 >how is that an advantage for the end user? >it might be for the ISP. but that's the entity that cannot give stable >addressing in the first place... If routing IPv6 is cheaper than CGNAT IPv4 then either the ISP can offer higher bandwidth for the same price or reduce prices. In any case, very often the user doesn't have a choice. I would like to have reverse DNS delegated for all my IPv6 prefixes. That is just not going to happen. >> In the case of certain banks that support IPv6, the advantage is that >> there is no risk that multiple households will share a single IPv4 >address. > >that's a solved problem. security is done at a higher layer regardless. Not for that particular bank. They are very much interested in IP addresses. >if IPv6 provides no benefit over IPv4 then why? >32 + 16 > 128. >or if we allow IPv6 to have no benefit over IPv4 I could rather say. The benefit of IPv6 is that IPv6 addresses are almost for free, whereas a single IPv4 address costs a significant chunk of money (compared to other costs). >The changes in the transport and application layers are already >happening (e.g. QUIC). If QUIC can deal with this flash renumbering problem then it would be nice to see a report on that. I'm very curious how to would work. In any case, there will continue to be a lot of TCP and non-QUIC UDP in the coming years. Are you saying that it will be cheaper to modify all transport protocols than to fix it in the IPv6 stack? >There are already "redesigns" of IPv6. Take ILNP. As far as I know ILNP never got any traction. Do propose we hold off on deplying IPv6 until ILNP is mature? >I'm not the one proposing an IPv6 redesign. This is a response to the >proposals of violating a fundamental expectation of stable addressing in >IPv6. The current reality is that IPv6 addresses are not stable in many deployments. Yes, that's a pity. I'm personnaly very happy with my stable prefixes. But we have to adapt IPv6 to the real world. Everybody who has stable prefixes today benefits from having more IPv6 in the world. Keeping IPv6 restrict to a small, pure corner of the world provides no benefits. From nobody Fri Oct 25 06:17:05 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 078F0120877 for ; Fri, 25 Oct 2019 06:17:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.497 X-Spam-Level: X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aEBjzrwQlt8L for ; Fri, 25 Oct 2019 06:17:02 -0700 (PDT) Received: from mail-oi1-x235.google.com (mail-oi1-x235.google.com [IPv6:2607:f8b0:4864:20::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB58812086F for ; Fri, 25 Oct 2019 06:17:02 -0700 (PDT) Received: by mail-oi1-x235.google.com with SMTP id v138so1608123oif.6 for ; Fri, 25 Oct 2019 06:17:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=k27MOwajP6+IwUTjulRcVYlcejhaSDtJCxA9BTov5s4=; b=e6YRt5MroknEUyD2Q2HAZ/G5zNIbJJRuFwKfwpI0GnvuaI6Ku2hN3HLwbc1/hHuWpt MvJMMGmZnB8kG6oEg5OFEsAYGIIYI//m4DHDBrz4eu6A6kqlcaoRdLXSNU8iQyrO1yr/ 7Dt8S+G0DXhDtMwQwl5Ll+1ueSn+QHBQH5wePK71qy1eWBt8lsdrhiqxDvlupgNIx4ud cJKhb10ONb/243vDkFvozbhCQ2qBHUzfW+Z8ivA00Xk/MnZfioEAKR1tIm3rswGXCRNe isgbJ0dGGM7bykQo+mlf4JLPoqwV2Z2pXgswv2jBCk9exFf8KfQidLErOHElpOOLUa50 Zj7Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=k27MOwajP6+IwUTjulRcVYlcejhaSDtJCxA9BTov5s4=; b=POAnPDT9DvLrNvScXUGn1SL+NbCjAAM8L3B15/cV3m/Ti93UNLnhjDjDwes90Ew58v 3hhRjFo5B9EFEgz/w4JJwu+KYOFn4emUnwJRJ2Xe3OKsf/x28yKt++e9jQJoZvyyPpvO 5csMdwr/jWYQbvJ3OoPZGBvSks+j9Qw6caxpf61gU+rs67Z0E0HgmFWz+Z/DCrIcRkp3 PqP2ZerpPqxSbqKr3UeJJs/MuDoqG81on8nRhzk9Yb4jRJ+/okGhsvsTuX9xwd+WsRSt Bwodt/tKOBkrpRCP+tkpdyhpBNIoX4IDrpdZbuqEoZstry8gZ4aFyipNLZs6u4FJgOO0 B0dw== X-Gm-Message-State: APjAAAVqYU4EFGHBEg/8+wejqld3WD619cqoSWZcs7w5a6vnCELEveYY XNDLo5iZO772GcEA0S9qlkOR+B095pEuEM7TeSNeFg== X-Google-Smtp-Source: APXvYqzeFDbzJz+H+o8lDZBaXpERSs2WfKIg7r6teHjPta1RYCXxNlAQIX7RnX3pZP2AOl8fgdWE6aBHEjIGh7AoyZQ= X-Received: by 2002:aca:db09:: with SMTP id s9mr3044178oig.7.1572009421818; Fri, 25 Oct 2019 06:17:01 -0700 (PDT) MIME-Version: 1.0 References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-Reply-To: From: Mark Smith Date: Sat, 26 Oct 2019 00:16:35 +1100 Message-ID: To: Philip Homburg Cc: v6ops list Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 13:17:04 -0000 On Fri, 25 Oct 2019 at 19:37, Philip Homburg wrote: > > > Reality is that ISPs do flash renumbering for IPv4 customers. Why? Between 2005 and 2011, I worked for two residential ISPs, one state based with 80 000 customers, and another national one, with 160 000 customers. In all that time, I never needed to or saw anybody intentionally "flash renumber" as far as I can remember. The only time I can see a need to purposefully "flash renumber" would be if you want to shift around IP address pools across to different BRASes. I don't think that is a common event. (The common event was adding new IP addresses to existing per-BRAS pools, as customer numbers grew.) So I would like to hear from ISPs that purposely "flash renumber" why they do so, and how often. People are trying to continue to use the decades old dial up model. That's understandable - "if it ain't broke, don't fix it". It could be carried over from dial to residential broadband IPv4+NAT, because there were enough similarities. The problem is that it is broken when applied to IPv6. You don't keep using old solutions and ideas when they start to cause too many problems, and require too many work arounds to keep using them. Too many problems caused by the old method and too many work arounds to overcome them is a sign the old solution is really beyond its useful life and a new solution is necessary. >We can tell them > that they cannot do that for IPv6, but that will result either in a delay > of IPv6 deployment, or they will find a hack (such as NAT66) to make it 'work'. > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops From nobody Fri Oct 25 06:25:09 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10D8C12004E for ; Fri, 25 Oct 2019 06:25:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.198 X-Spam-Level: X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5nB85suQ3aLN for ; Fri, 25 Oct 2019 06:25:06 -0700 (PDT) Received: from omr2.cc.vt.edu (omr2.cc.ipv6.vt.edu [IPv6:2607:b400:92:8400:0:33:fb76:806e]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0FAE120128 for ; Fri, 25 Oct 2019 06:25:05 -0700 (PDT) Received: from mr4.cc.vt.edu (mr4.cc.ipv6.vt.edu [IPv6:2607:b400:92:8300:0:7b:e2b1:6a29]) by omr2.cc.vt.edu (8.14.4/8.14.4) with ESMTP id x9PDP4Ym025904 for ; Fri, 25 Oct 2019 09:25:04 -0400 Received: from mail-lf1-f71.google.com (mail-lf1-f71.google.com [209.85.167.71]) by mr4.cc.vt.edu (8.14.7/8.14.7) with ESMTP id x9PDOx2A000379 for ; Fri, 25 Oct 2019 09:25:04 -0400 Received: by mail-lf1-f71.google.com with SMTP id k30so577252lfj.5 for ; Fri, 25 Oct 2019 06:25:04 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=rkjiiwPw9OznnzLpYpOSR5KEnUPeLE4zLiE+B3je+yw=; b=VDqSjmUV59ShsBZMS6cbmpKRwCmFrKPqzYo5SLVeYVgLoBA5m3YHynZmSIhzOEyVeI SwoZuCqmE128YEkbHYo6A7n6x6W+TgioAND9Qf2xc9WD3RT1wLGgNoEtvW7ZFAGJSlsw lcdeF02hJwyTik2frMq29EJH0RuIUHDJMEGJBxjh0owJ0A5osrP638oxe3l5mDu/bQTc NhWYTZh42XZhX5DSYU6prSMH/XZK/OeVC8qFQkCVaFnueKPqao73qEL6uVKoaXWwflBz 2U5iUSjQuY1xdR8Tz1QHs0RuYOKGTSQiDIOH3y/sq69DQi/VdxUlo8X8EDZtQzw6m6uu 031g== X-Gm-Message-State: APjAAAVIc4/p0g9sTHEL+aDmkW0p72UeclNDaBXE6pS50aDGka6ZmhWL s2+fLX9UGNtl2QqOzbk69EASzGzjRGbTc+X0JrBEoT6DgBYv+3Y578cDxYJtWhNCakZ5pkYE+f/ Hrs6tM8K/TIDYzsl3UGRn5OIB70zHl12h X-Received: by 2002:a2e:2e15:: with SMTP id u21mr2458059lju.31.1572009898459; Fri, 25 Oct 2019 06:24:58 -0700 (PDT) X-Google-Smtp-Source: APXvYqyPDbSFspedxYzZc8DwnzOju/emOfKzPufNYpR9jdMgTB7MmnBxBIWecjAyTuK5p2JcBttS17roWQ+AKfzCOYg= X-Received: by 2002:a2e:2e15:: with SMTP id u21mr2458031lju.31.1572009897971; Fri, 25 Oct 2019 06:24:57 -0700 (PDT) MIME-Version: 1.0 References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-Reply-To: From: Clark Gaylord Date: Fri, 25 Oct 2019 09:24:46 -0400 Message-ID: To: Mark Smith Cc: Philip Homburg , "v6ops@ietf.org WG" Content-Type: multipart/alternative; boundary="0000000000008d6b650595bc1346" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 13:25:08 -0000 --0000000000008d6b650595bc1346 Content-Type: text/plain; charset="UTF-8" Note: that makes your sample size 2, not 240,000.... Renumbering is not "common" but it certainly happens. With that said, "flash renumber" could reasonably be considered a "high support risk" operation.. IPv6 is supposed to accommodate renumbering *more* gracefully, not less, than legacy IP, but it is still supposed to be a planned event. -- Clark Gaylord cgaylord@vt.edu ... autocorrect may have improved this message ... On Fri, Oct 25, 2019, 09:17 Mark Smith wrote: > On Fri, 25 Oct 2019 at 19:37, Philip Homburg > wrote: > > > > > > > > > Reality is that ISPs do flash renumbering for IPv4 customers. > > Why? > > Between 2005 and 2011, I worked for two residential ISPs, one state > based with 80 000 customers, and another national one, with 160 000 > customers. In all that time, I never needed to or saw anybody > intentionally "flash renumber" as far as I can remember. > > The only time I can see a need to purposefully "flash renumber" would > be if you want to shift around IP address pools across to different > BRASes. I don't think that is a common event. (The common event was > adding new IP addresses to existing per-BRAS pools, as customer > numbers grew.) > > So I would like to hear from ISPs that purposely "flash renumber" why > they do so, and how often. > > > People are trying to continue to use the decades old dial up model. > That's understandable - "if it ain't broke, don't fix it". It could be > carried over from dial to residential broadband IPv4+NAT, because > there were enough similarities. The problem is that it is broken when > applied to IPv6. > > You don't keep using old solutions and ideas when they start to cause > too many problems, and require too many work arounds to keep using > them. Too many problems caused by the old method and too many work > arounds to overcome them is a sign the old solution is really beyond > its useful life and a new solution is necessary. > > >We can tell them > > that they cannot do that for IPv6, but that will result either in a delay > > of IPv6 deployment, or they will find a hack (such as NAT66) to make it > 'work'. > > > > > > _______________________________________________ > > v6ops mailing list > > v6ops@ietf.org > > https://www.ietf.org/mailman/listinfo/v6ops > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > --0000000000008d6b650595bc1346 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

=
On Fri, Oct 25, 2019, 09:17 Mark Smit= h <markzzzsmith@gmail.com&= gt; wrote:
On Fri, 25 Oct 2019 at 1= 9:37, Philip Homburg <pch-v6ops-9@u-1.phicoh.com> wrote:<= br> >

<snip>

>
> Reality is that ISPs do flash renumbering for IPv4 customers.

Why?

Between 2005 and 2011, I worked for two residential ISPs, one state
based with 80 000 customers, and another national one, with 160 000
customers. In all that time, I never needed to or saw anybody
intentionally "flash renumber" as far as I can remember.

The only time I can see a need to purposefully "flash renumber" w= ould
be if you want to shift around IP address pools across to different
BRASes. I don't think that is a common event. (The common event was
adding new IP addresses to existing per-BRAS pools, as customer
numbers grew.)

So I would like to hear from ISPs that purposely "flash renumber"= why
they do so, and how often.


People are trying to continue to use the decades old dial up model.
That's understandable - "if it ain't broke, don't fix it&q= uot;. It could be
carried over from dial to residential broadband IPv4+NAT, because
there were enough similarities. The problem is that it is broken when
applied to IPv6.

You don't keep using old solutions and ideas when they start to cause too many problems, and require too many work arounds to keep using
them. Too many problems caused by the old method and too many work
arounds to overcome them is a sign the old solution is really beyond
its useful life and a new solution is necessary.

>We can tell them
> that they cannot do that for IPv6, but that will result either in a de= lay
> of IPv6 deployment, or they will find a hack (such as NAT66) to make i= t 'work'.
>
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6o= ps

_______________________________________________
v6ops mailing list
v6op= s@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops
--0000000000008d6b650595bc1346-- From nobody Fri Oct 25 06:25:47 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C1F612004E for ; Fri, 25 Oct 2019 06:25:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y-Var0k0eg4s for ; Fri, 25 Oct 2019 06:25:45 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 111A8120893 for ; Fri, 25 Oct 2019 06:25:41 -0700 (PDT) Received: from astfgl.hanazo.no (246.51-175-81.customer.lyse.net [51.175.81.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 34AE64E11B83; Fri, 25 Oct 2019 13:25:40 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 661441FEFB9D; Fri, 25 Oct 2019 15:25:36 +0200 (CEST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Fri, 25 Oct 2019 15:25:36 +0200 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> To: Philip Homburg X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 13:25:47 -0000 >> The changes in the transport and application layers are already=20 >> happening (e.g. QUIC). >=20 > If QUIC can deal with this flash renumbering problem then it would be = nice > to see a report on that. I'm very curious how to would work. >=20 > In any case, there will continue to be a lot of TCP and non-QUIC UDP = in > the coming years. Are you saying that it will be cheaper to modify all > transport protocols than to fix it in the IPv6 stack? It can't be fixed in the IPv6 stack. The only thing you can do is to make the IPv6 network not work = significantly worse than a flash renumbered IPv4 + NAT network. My argument is that if you do that, as in add support for ephemeral = addressing / flash renumbering at the network layer, without doing = anything at upper layers, then for an end-user, IPv6 will provide no = value or more likely negative value compared to IPv4 + NAT. Cheers, Ole= From nobody Fri Oct 25 06:28:27 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F7B012086D for ; Fri, 25 Oct 2019 06:28:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 348LJFbXQoFH for ; Fri, 25 Oct 2019 06:28:25 -0700 (PDT) Received: from mobil.space.net (mobil.space.net [195.30.115.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA95A120128 for ; Fri, 25 Oct 2019 06:28:24 -0700 (PDT) X-Original-To: v6ops@ietf.org Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id 193D242798 for ; Fri, 25 Oct 2019 15:28:23 +0200 (CEST) X-SpaceNet-Relay: true X-SpaceNet-Relay: true X-SpaceNet-Relay: true Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id 0A35742286; Fri, 25 Oct 2019 15:28:23 +0200 (CEST) Received: by moebius4.space.net (Postfix, from userid 1007) id 06871DDBF; Fri, 25 Oct 2019 15:28:23 +0200 (CEST) Date: Fri, 25 Oct 2019 15:28:22 +0200 From: Gert Doering To: Ole Troan Cc: Philip Homburg , v6ops@ietf.org Message-ID: <20191025132822.GE72330@Space.Net> References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-NCC-RegID: de.space User-Agent: Mutt/1.12.2 (2019-09-21) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 13:28:27 -0000 Hi, On Fri, Oct 25, 2019 at 03:25:36PM +0200, Ole Troan wrote: > My argument is that if you do that, as in add support for ephemeral addressing / flash renumbering at the network layer, without doing anything at upper layers, then for an end-user, IPv6 will provide no value or more likely negative value compared to IPv4 + NAT. Nothing in the lower layers of the IP stack provides any "value" to the end-user. Which is why they are not banging at our doors demanding "TCP!" or "DNS!" or "IPv4". Or, "IPv6", for that matter. Applications need to work, and applications have learned how to survive NAT breakage, so applications need to learn how to do deal with non-stable IPv6 addresses. Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279 From nobody Fri Oct 25 07:27:18 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10224120123 for ; Fri, 25 Oct 2019 07:27:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xxdcOBRFCCiq for ; Fri, 25 Oct 2019 07:27:14 -0700 (PDT) Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B267120122 for ; Fri, 25 Oct 2019 07:27:13 -0700 (PDT) X-Envelope-To: v6ops@ietf.org Received: from cupcake.local (089-101-195156.ntlworld.ie [89.101.195.156] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id x9PER46t084862 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 25 Oct 2019 15:27:05 +0100 (IST) (envelope-from nick@foobar.org) X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-195156.ntlworld.ie [89.101.195.156] (may be forged) claimed to be cupcake.local To: Ole Troan Cc: Philip Homburg , v6ops@ietf.org References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> From: Nick Hilliard Message-ID: <40c89b34-03ae-4a9d-0b6d-610e3b8564b2@foobar.org> Date: Fri, 25 Oct 2019 15:27:03 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:52.0) Gecko/20100101 PostboxApp/7.0.7 MIME-Version: 1.0 In-Reply-To: <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-GB Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 14:27:16 -0000 Ole Troan wrote on 25/10/2019 13:53: > This is a response to the proposals of violating a fundamental > expectation of stable addressing in IPv6. is that a fundamental design principle of ipv6? This is news. Nick From nobody Fri Oct 25 09:08:08 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FCE912098D for ; Fri, 25 Oct 2019 09:08:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=helix-net-nz.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O7ECg7RsVEBi for ; Fri, 25 Oct 2019 09:08:05 -0700 (PDT) Received: from mail-yw1-xc33.google.com (mail-yw1-xc33.google.com [IPv6:2607:f8b0:4864:20::c33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3CDF612098C for ; Fri, 25 Oct 2019 09:08:05 -0700 (PDT) Received: by mail-yw1-xc33.google.com with SMTP id a67so950891ywg.7 for ; Fri, 25 Oct 2019 09:08:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=helix-net-nz.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=TR+hncxmTW9X7FIM24bNZn4j/qSZ6nP5lm6iFqa5qO8=; b=qhKHP4c7QCvw/PuaZ/qDIKkBYWqA/DrC+6ERXCs0gVjPKazPdTwm6YX4znuvSLiysK 3P2ogH2oh30Yt0OFX/w4CLw/+RtZljHnXi4jhVyAEQcgP55bfygds3m4Gnm5rpDf9mO8 p0R+uplV9x+0wHslJ6UM6O4RrGPJ8u5GJIN0dYa8zfrR8nbaTEaMQ+/Dk1uRUPxa6uvM 6RPqGegF13Oj63B2N1i6pz6L0m5CIXC8zkzJxlJRoP3gmwcptbBVQu7pg660PdYMsOMG 2VdwV9EkD/OCE1SFeOK0/VQfAxZN5EZ9FjjGskhml3X+s4FVbQPnpgERcCIP2ypCetBK J3Yw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=TR+hncxmTW9X7FIM24bNZn4j/qSZ6nP5lm6iFqa5qO8=; b=kuE+UdLthQ1s67K2iNkmUG8pXjbJ/pH+jPosbW/LzOIE+FyJWMp25hvBgHVavuR/Px XYuTn1SoZD+P2o6NROqcOmLbqCAyAcGogGbQqcq6l1k7TryDsTzvqBZGBFhhQO0p8iCc ew5nKW4DnAf7IMVZu+Fdkd3EObVZoTC0LnexIRv7tCy0S73OuFDWBwFdmH5wTvLDTpbV z4Gib9LTsedsNWeoCAzZ7Qd4/BMXpUbawCsiEQPGFH4/xBcyKbJ9vivnNOIlI0IkMKG3 zakKO87PZDfIstO91qCKlfmRZdFpRsroAG/51wMl6CWOxNUXU8253hbJf94FNzbjQPHC FG2Q== X-Gm-Message-State: APjAAAVQXKRsbBqV912yBK5H3t7NG7QVv03HM2z9ElAg3AS0IHPomJcu jgP+IYPYvVvW3Wxy3gIQy8N259bvAoY= X-Google-Smtp-Source: APXvYqz+KFv62CTE6/VNJ+I03aFeKQuThcZDFvwINzjPW+jMX20UFaB7isB6JluoFbAxzZ6povcJow== X-Received: by 2002:a81:6104:: with SMTP id v4mr2814233ywb.501.1572019683915; Fri, 25 Oct 2019 09:08:03 -0700 (PDT) Received: from mail-il1-f172.google.com (mail-il1-f172.google.com. [209.85.166.172]) by smtp.gmail.com with ESMTPSA id h65sm838278ywa.62.2019.10.25.09.08.02 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 25 Oct 2019 09:08:03 -0700 (PDT) Received: by mail-il1-f172.google.com with SMTP id t5so2292660ilh.10 for ; Fri, 25 Oct 2019 09:08:02 -0700 (PDT) X-Received: by 2002:a92:188:: with SMTP id 130mr5113162ilb.177.1572019682459; Fri, 25 Oct 2019 09:08:02 -0700 (PDT) MIME-Version: 1.0 References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-Reply-To: From: Richard Patterson Date: Fri, 25 Oct 2019 17:07:51 +0100 X-Gmail-Original-Message-ID: Message-ID: To: v6ops list Content-Type: multipart/alternative; boundary="000000000000c0c74f0595be5a54" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 16:08:07 -0000 --000000000000c0c74f0595be5a54 Content-Type: text/plain; charset="UTF-8" On Fri, 25 Oct 2019 at 14:17, Mark Smith wrote: > > So I would like to hear from ISPs that purposely "flash renumber" why > they do so, and how often. > I wouldn't say purposely, we've gone to a lot of effort to keep them as stable as possible, however, there are times where network events could cause a current lease to become stale (or invalid), and for the new lease to contain a different prefix. i.e. If our transmission team decide to re-home a metro area, or if the capacity planning team decides to rebalance between BNGs. We don't offer truly static PD assignments as we don't have to build and maintain a topology aware IPAM <-> RADIUS service, when we can simply let the BNG/DHCPv6 server deal with assignments dynamically. --000000000000c0c74f0595be5a54 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

So I would like to hear from ISPs that purposely "flash renumber"= why
they do so, and how often.

I wouldn'= ;t say purposely, we've gone to a lot of effort to keep them as stable = as possible, however, there are times where network events could cause a cu= rrent lease to become stale (or invalid), and for the new lease to contain = a different prefix.=C2=A0
i.e.=C2=A0 If our transmission team dec= ide to re-home a metro area, or if the capacity planning team decides to re= balance between BNGs.

We don't offer truly sta= tic PD assignments as we don't have to build and maintain a topology aw= are IPAM <-> RADIUS service, when we can simply let the BNG/DHCPv6 se= rver deal with assignments dynamically.


=
--000000000000c0c74f0595be5a54-- From nobody Fri Oct 25 10:34:10 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 372C5120817 for ; Fri, 25 Oct 2019 10:34:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4dS30d-vAgRu for ; Fri, 25 Oct 2019 10:34:06 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07057120088 for ; Fri, 25 Oct 2019 10:34:06 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 0350786A26; Fri, 25 Oct 2019 19:34:02 +0200 (CEST) To: Ole Troan , Philip Homburg Cc: v6ops@ietf.org References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <100c6804-531f-f021-68c9-fb90c4e73b9c@si6networks.com> Date: Fri, 25 Oct 2019 13:58:29 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 17:34:08 -0000 On 25/10/19 09:22, Ole Troan wrote: >> Reality is that ISPs do flash renumbering for IPv4 customers. We >> can tell them that they cannot do that for IPv6, but that will >> result either in a delay of IPv6 deployment, or they will find a >> hack (such as NAT66) to make it 'work'. > > a home network with ephemeral addressing stuck behind a firewall. > what is the point of IPv6 over IPv4+NAT? what value does IPv6 bring? That if you *want* to do something else, you *can*. > exposing external addressing in the internal network, combined with > exposing network layer addressing to the transport and application > layers is one of the bigger short-comings of IPv6. Not sure what you mean. -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 10:34:16 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AA3F1209C4 for ; Fri, 25 Oct 2019 10:34:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OxYv1FUYv68F for ; Fri, 25 Oct 2019 10:34:10 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9275512099A for ; Fri, 25 Oct 2019 10:34:10 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id BE04186A3F; Fri, 25 Oct 2019 19:34:07 +0200 (CEST) To: Ole Troan , "Eric Vyncke (evyncke)" Cc: v6ops list References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <860c946a-c23c-4060-d83c-587302de28f8@si6networks.com> Date: Fri, 25 Oct 2019 14:19:16 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 17:34:15 -0000 On 24/10/19 10:38, Ole Troan wrote: > Eric, > >> What about a "IPv6 renumbering considered harmful" or "Unstable DHCP-PD prefix considered harmful" ? > > Perhaps, but isn't there a long list of documents the IETF has produced on IPV6 renumbering already? > Would a new document say anything new and more useful? > > And it's not like DHCPv6 PD (RFC3633) isn't clear either. From the abstract: > > The Prefix Delegation options provide a mechanism for automated > delegation of IPv6 prefixes using the Dynamic Host Configuration > Protocol (DHCP). This mechanism is intended for delegating a long- > lived prefix from a delegating router to a requesting router, across > an administrative boundary, where the delegating router does not > require knowledge about the topology of the links in the network to > which the prefixes will be assigned. Long-lived != immortal. As long as a prefix eventually changes, that is when the problem may be experienced. > That said, if people want to write a "IPv6 networks need stable prefixes" document, go ahead. > I'm skeptical that playing with prefix timers and protocol mechanisms will do more than put lipstick on the pig. It's not putting lipstick on a pig. In the current situation, hosts essentially do not react to prefixes that fade away. This is something that can be easily improved. > Iff we wanted to solve ephemeral addressing / connectivity, that's would require something else. Could you please elaborate on what you mean by ephemeral addressing / connectivity? Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 10:40:54 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C51C120132 for ; Fri, 25 Oct 2019 10:40:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iHNl94ONsEvD for ; Fri, 25 Oct 2019 10:40:51 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [IPv6:2607:7c80:54:3::74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DC19120088 for ; Fri, 25 Oct 2019 10:40:51 -0700 (PDT) Received: from [IPv6:2a01:79c:cebd:47d8:9c52:20df:ffc:2b15] (unknown [IPv6:2a01:79c:cebd:47d8:9c52:20df:ffc:2b15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id D1B364E11A42; Fri, 25 Oct 2019 17:40:49 +0000 (UTC) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable From: Ole Troan Mime-Version: 1.0 (1.0) Date: Fri, 25 Oct 2019 19:40:46 +0200 Message-Id: <5A20C8D8-3A42-464D-9D6D-79F1567B6FA4@employees.org> References: <860c946a-c23c-4060-d83c-587302de28f8@si6networks.com> Cc: "Eric Vyncke (evyncke)" , v6ops list In-Reply-To: <860c946a-c23c-4060-d83c-587302de28f8@si6networks.com> To: Fernando Gont X-Mailer: iPhone Mail (17B5084a) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 17:40:53 -0000 > On 25 Oct 2019, at 19:34, Fernando Gont wrote: >=20 >>> What about a "IPv6 renumbering considered harmful" or "Unstable DHCP-PD p= refix considered harmful" ? >>=20 >> Perhaps, but isn't there a long list of documents the IETF has produced o= n IPV6 renumbering already? >> Would a new document say anything new and more useful? >>=20 >> And it's not like DHCPv6 PD (RFC3633) isn't clear either. =46rom the abst= ract: >>=20 >> The Prefix Delegation options provide a mechanism for automated >> delegation of IPv6 prefixes using the Dynamic Host Configuration >> Protocol (DHCP). This mechanism is intended for delegating a long- >> lived prefix from a delegating router to a requesting router, across >> an administrative boundary, where the delegating router does not >> require knowledge about the topology of the links in the network to >> which the prefixes will be assigned. >=20 > Long-lived !=3D immortal. As long as a prefix eventually changes, that is > when the problem may be experienced. Not if renumbering of the network is done according to specification.=20 Flash renumbering is not defined so no-one should be surprised that you get u= ndefined behavior.=20 O.=20 From nobody Fri Oct 25 10:45:28 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C26571200DB for ; Fri, 25 Oct 2019 10:45:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gos-DXw369-4 for ; Fri, 25 Oct 2019 10:45:24 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 93263120088 for ; Fri, 25 Oct 2019 10:45:24 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id A17E88685E; Fri, 25 Oct 2019 19:45:21 +0200 (CEST) To: Owen DeLong Cc: Philip Homburg , v6ops@ietf.org References: <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> Date: Fri, 25 Oct 2019 14:45:15 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 17:45:27 -0000 On 24/10/19 13:52, Owen DeLong wrote: >>> I'm also not convinced >>> that there are sensible values for these lifetimes that are robust >>> enough  >>> and at the same time responsive enough to deal with the issue at hand. >>> >>> Reducing the lifetimes would help against build up of stale prefixes. If >>> they are set to a couple of hours. >> >> I do agree that this is not a complete solution, but, as you correctly >> note, would help against build up of stale prefixes. > > I do agree that 7 and 30 days, respectively are absurd timer default values. Exactly. *That* is the point. > I think we can take some lessons from IPv4 and DHCP here. A fairly common > lease time in the DHCP world is 3600 seconds (1 hour). This seems like a > reasonable default preferred lifetime and I would propose that 1 day (86400) > seconds may well be a reasonable default valid lifetime. That's certainly an improvement wrt what we have right now. > > It is worth noting that these values are tunable by the administrator > and the > RFC suggested defaults should never be a hard-coded value. > > With the following exception, I don’t advocate modifying this on the client > side: > +Section 5.5.3 of RFC4862 should be amended to specifically > allow the immediate deprecation of a prefix by sending a valid > lifetime of 0 seconds. Hosts should be required to honor > this as a signal that the prefix is no longer valid. Could you please elaborate on this one? > I do think that generally speaking, your proposed modifications to CPE and > router behavior should be standardized and implemented. > >> A better mitigation is to affect the preferred and possibly the valid >> lifetimes in response to consecutive RAs from the same router that lack >> the original (stale) prefix. e.g., after two consecutive RAs that do not >> contain the existing prefix, reduce the preferred lifetime. After two >> additional RAs, reduce the valid lifetime. > > In the crash scenarios you describe, you’re assuming a single router on > the network or > at least only one router announcing the prefix(es) in question with no > persistent > memory of the prefixes it was announcing across a reboot. In such a > scenario, > it seems to me that the following are also likely valid assumptions: > > +The network has significant excess bandwidth compared to demand. > +The small overhead of frequent RAs and short lifetimes is probably > an acceptable tradeoff in this environment. > > However, there are lots of other scenarios in the world where those > assumptions > won’t hold true and we should not seek to solve this problem (which is > generally > applicable to residential and SMB environments) at the expense of all of > those > other professionally administered environments. Even with the default RA frequency, if you were to unprefer a prefix upon, say, second RA that doesn't advertise it, and say, remove the prefix after many other RAs are received, that would be a *big* improvement to what we have now. > > For > > For the busy wifi scenario, the preferred lifetime of zero for the old > PIO should be > sent many times and should be maintained in the configuration for at least > OldPreferredLifetime seconds. At the end of OldPreferredLifetime seconds, > if a host hasn’t seen the new RA, it will no longer matter as the last > RA it saw > will have expired. It’s not ideal, but there really aren’t a lot of good > options here > other than getting WiFi vendors to improve multicast reliability. > > In your automated configuration management scenario, IMHO, the people > driving the automation have erred. The related case is, IMHO, a variant > of the exact same case and represents the same error. It is still operator > error regardless of whether the operator is driving an automation system, > or is directly configuring a router. At a certain point, we need to > accept that > there is a limit to the acceptable gymnastics for the prevention of operator > error. The best colloquialism here is “If you make something completely > idiot proof, the world will invent a better idiot.” > > In section 3.2.1, you advocate setting the A and L bits to their > previous values > for prefixes which are being deprecated. IMHO, this is incorrect and the > announcements calling for immediate deprecation should also indicate that > the prefix should no longer be auto-configured and should no longer be > considered on-link. Not sure I follow. Could you please elaborate? > Is there some unfortunate widely deployed behavior that interacts poorly > with setting A and L to 0 for these previously valid prefixes? > > Finally, An editorial note… In Section 3, you state “Finally, Section > 2.5 analyzes…” > I believe this is intended to be a reference to section 3.2.2. Nope. Section 3.2.2 talks about the interaction between dhcpv6-pd and slaac. BUt it is section 2.5 that discusses other considerations for dynamic/stable prefixes. For example, stable prefixes are not nice for privacy. Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 10:52:44 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EEA5120832 for ; Fri, 25 Oct 2019 10:52:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NwJ0NDY1Kasu for ; Fri, 25 Oct 2019 10:52:41 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD90D120132 for ; Fri, 25 Oct 2019 10:52:41 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id F04C28613B; Fri, 25 Oct 2019 19:52:38 +0200 (CEST) To: Philip Homburg , v6ops@ietf.org References: From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <67724967-418c-bc66-0fdb-eb1a038be0e3@si6networks.com> Date: Fri, 25 Oct 2019 14:49:17 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 17:52:43 -0000 On 25/10/19 05:42, Philip Homburg wrote: >> I fully agree with your assessment. That said, maybe the first step is >> to start with a problem statement, as with this document? > > The current draft is not a problem statement. From Section 3 it describes > potential solutions. It does contain a problem statement. And I think it would be nice if the problem statement could highlight, at a high-level, the possible ways to address the problem. The current document does elaborate quite a bit on some of them. Such parts could be removed and put into a separate document, though. > I'm not sure a separate problem statement is needed. The relevant > documents can start with a description of what is happening today. > In perfect world, bad things do not happen, but we don't live in a > perfect world. Most customers don't have the luxury position to change ISPs > just because their ISP does flash renumbering. Exactly. THe original draft had *everything* in the document, including protocol updates. THis one has limited to the problem statement plus operational mitigations. Maybe the text that gets too specific (.e.g the CPE behavior could be removed and made into a stand alone document). THoughts? -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 10:52:56 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3EC95120A08 for ; Fri, 25 Oct 2019 10:52:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l2Eh-DArkotk for ; Fri, 25 Oct 2019 10:52:51 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE03E1209DD for ; Fri, 25 Oct 2019 10:52:50 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 00F0F864E1; Fri, 25 Oct 2019 19:52:47 +0200 (CEST) To: Ole Troan Cc: "Eric Vyncke (evyncke)" , v6ops list References: <860c946a-c23c-4060-d83c-587302de28f8@si6networks.com> <5A20C8D8-3A42-464D-9D6D-79F1567B6FA4@employees.org> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <1a07be3c-90bb-5182-1a11-5e94fbbacf44@si6networks.com> Date: Fri, 25 Oct 2019 14:52:26 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <5A20C8D8-3A42-464D-9D6D-79F1567B6FA4@employees.org> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 17:52:55 -0000 On 25/10/19 14:40, Ole Troan wrote: > > >> On 25 Oct 2019, at 19:34, Fernando Gont wrote: >> >>>> What about a "IPv6 renumbering considered harmful" or "Unstable DHCP-PD prefix considered harmful" ? >>> >>> Perhaps, but isn't there a long list of documents the IETF has produced on IPV6 renumbering already? >>> Would a new document say anything new and more useful? >>> >>> And it's not like DHCPv6 PD (RFC3633) isn't clear either. From the abstract: >>> >>> The Prefix Delegation options provide a mechanism for automated >>> delegation of IPv6 prefixes using the Dynamic Host Configuration >>> Protocol (DHCP). This mechanism is intended for delegating a long- >>> lived prefix from a delegating router to a requesting router, across >>> an administrative boundary, where the delegating router does not >>> require knowledge about the topology of the links in the network to >>> which the prefixes will be assigned. >> >> Long-lived != immortal. As long as a prefix eventually changes, that is >> when the problem may be experienced. > > Not if renumbering of the network is done according to specification. > Flash renumbering is not defined so no-one should be surprised that you get undefined behavior. The "flash renumbering" could also happen if the CPE was trying to kind of the right thing, the ISP does not employ stable prefixes, and the CPE happens to crash and reboot. Some CPEs also reportedly do a "release" when rebooted. At the end of the day, what you get is a brittle network. And what we're trying to do is exactly improving the robustness of the network. -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 10:59:22 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A1CD1208BE for ; Fri, 25 Oct 2019 10:59:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pk7srn_gjXSv for ; Fri, 25 Oct 2019 10:59:15 -0700 (PDT) Received: from mail-qk1-x732.google.com (mail-qk1-x732.google.com [IPv6:2607:f8b0:4864:20::732]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B5791200D7 for ; Fri, 25 Oct 2019 10:59:15 -0700 (PDT) Received: by mail-qk1-x732.google.com with SMTP id u184so2568152qkd.4 for ; Fri, 25 Oct 2019 10:59:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=T9aS1ZVWmpN6S/KUS9MGNSCvWVDTFVAhfbKM0imEBz8=; b=fcUzLhnwAMR6HeWlR7rJi23AWVsqQvUQ/9rAOzwe+JG389UWgZuoR8l3Zr5WCvMkUN 1Y+AF1BNocympv/JVpjDgbVKJXX+8q15xUWCat7ELitAcZH/1/olO1HljkAc9YLvO1OG 0/ofiVZyLFCOr6z2eN93nV1VdjBuRgsQsU8C0dQlJ+AFJziJpkI2fJFoE9/Nvp7LAwOK FgNvRydDh9iIVysXGDltl7L5J/rWU2zXKpPgqqjxNzlelLOIH6V7C40g4ZsoPEVVL45s DW7YYejvb9KZKlqpKKbpGa3zmC1/E5iK1ZaXmR4n+sgRfwQ1greyK3rip5DCSzrE25M6 Y0gg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=T9aS1ZVWmpN6S/KUS9MGNSCvWVDTFVAhfbKM0imEBz8=; b=MRf+ql7Eczqy8H5r+4PcTqjtv6O2HFGvQSTky0iDXE4Z0Ht3U3733qfsowGyKejeKO r6hAAIDWXS++rwL6SnBjngd2ZVXefWSuncw9RX/mHFsabgWztqCDjwYahXxqhwAWn7m2 GEYFq/ftD+oYHmcESaTh++IAD7b3v7td2akBz9NROkcxIp/c1H5twEWZaIOv8lI5T6G5 3lOUu/5l70gyGo/LOiVubjAsnPD+a3yU8EhL17O5wLPsz2YKlATwERb//vtLQeVz90xZ Pd6+VuyJo7G9rrmChx+rpMWGrnOvoAepVsb1yNSJCET+XIoF0Vt8ypG+Y/3+q54eJ3pO AtCA== X-Gm-Message-State: APjAAAUUFNweC3J6rauRIKM7T1Atyujmzib2N4gV7Ss75wQAzEr898Oq IJIS1MBKX3Dz2tNMeNNDd85Cps4Wz+YOWA== X-Google-Smtp-Source: APXvYqy8MKZ9CB8ZfYW4/TzF1brRx5OYRr54YXPnhGtKPxiQJB25ugbsHQCKVz5fDIZIXDI88IZ8mA== X-Received: by 2002:a37:bd5:: with SMTP id 204mr3885032qkl.137.1572026354254; Fri, 25 Oct 2019 10:59:14 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:f9e1:cec4:6cf2:e2c1? ([2601:18b:300:36ee:f9e1:cec4:6cf2:e2c1]) by smtp.gmail.com with ESMTPSA id u18sm2875655qth.20.2019.10.25.10.59.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 25 Oct 2019 10:59:13 -0700 (PDT) From: Ted Lemon Message-Id: <4C2352ED-4B3A-4F11-B860-FE0848513431@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_F7BEF4FF-75B7-4FA3-B5B6-3A862AAD2FD3" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.4\)) Date: Fri, 25 Oct 2019 13:59:11 -0400 In-Reply-To: <1a07be3c-90bb-5182-1a11-5e94fbbacf44@si6networks.com> Cc: Ole Troan , v6ops list To: Fernando Gont References: <860c946a-c23c-4060-d83c-587302de28f8@si6networks.com> <5A20C8D8-3A42-464D-9D6D-79F1567B6FA4@employees.org> <1a07be3c-90bb-5182-1a11-5e94fbbacf44@si6networks.com> X-Mailer: Apple Mail (2.3601.0.4) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 17:59:18 -0000 --Apple-Mail=_F7BEF4FF-75B7-4FA3-B5B6-3A862AAD2FD3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 25, 2019, at 1:52 PM, Fernando Gont = wrote: > The "flash renumbering" could also happen if the CPE was trying to = kind > of the right thing, the ISP does not employ stable prefixes, and the = CPE > happens to crash and reboot. Some CPEs also reportedly do a "release" > when rebooted. That=E2=80=99s probably a bug. If the CPE has a valid lease, and the = prefix is still working, it should continue to advertise it until its = valid lifetime expires. The ISP DHCP server should be giving the = router two prefixes if it=E2=80=99s being renumbered: the preferred one, = and the one that=E2=80=99s still valid but not preferred anymore. --Apple-Mail=_F7BEF4FF-75B7-4FA3-B5B6-3A862AAD2FD3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 25, 2019, at 1:52 PM, Fernando Gont <fgont@si6networks.com> wrote:
The "flash renumbering" could also happen if the CPE was = trying to kind
of the right thing, the ISP does not employ stable prefixes, = and the CPE
happens to = crash and reboot. Some CPEs also reportedly do a "release"
when = rebooted.

That=E2=80=99s probably a bug.   If the CPE has a valid = lease, and the prefix is still working, it should continue to advertise = it until its valid lifetime expires.   The ISP DHCP server should = be giving the router two prefixes if it=E2=80=99s being renumbered: the = preferred one, and the one that=E2=80=99s still valid but not preferred = anymore.

= --Apple-Mail=_F7BEF4FF-75B7-4FA3-B5B6-3A862AAD2FD3-- From nobody Fri Oct 25 10:59:28 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 050F91209BF for ; Fri, 25 Oct 2019 10:59:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ltyUekszglc7 for ; Fri, 25 Oct 2019 10:59:23 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C1521209E9 for ; Fri, 25 Oct 2019 10:59:23 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 2A5078677F; Fri, 25 Oct 2019 19:59:19 +0200 (CEST) To: Ole Troan , Philip Homburg Cc: v6ops@ietf.org References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <3eabc5cd-3918-7308-7f0d-6d848f8e00b4@si6networks.com> Date: Fri, 25 Oct 2019 14:55:57 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 17:59:27 -0000 On 25/10/19 09:53, Ole Troan wrote: [....] > > I'm not the one proposing an IPv6 redesign. This is a response to the proposals of violating a fundamental expectation of stable addressing in IPv6. Could you please point to an RFC that documents such expectation? Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 10:59:35 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54AEB1209E0 for ; Fri, 25 Oct 2019 10:59:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m4j05zp90CUC for ; Fri, 25 Oct 2019 10:59:28 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C22E1209E9 for ; Fri, 25 Oct 2019 10:59:27 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 7EB3186918; Fri, 25 Oct 2019 19:59:24 +0200 (CEST) To: Philip Homburg , v6ops@ietf.org References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <6cb8cbee-e315-02a8-ebd5-a83410abf834@si6networks.com> Date: Fri, 25 Oct 2019 14:59:13 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 17:59:32 -0000 On 25/10/19 10:14, Philip Homburg wrote: >> how is that an advantage for the end user? >> it might be for the ISP. but that's the entity that cannot give stable >> addressing in the first place... > > If routing IPv6 is cheaper than CGNAT IPv4 then either the ISP can offer > higher bandwidth for the same price or reduce prices. > > In any case, very often the user doesn't have a choice. I would like to > have reverse DNS delegated for all my IPv6 prefixes. That is just not going > to happen. > >>> In the case of certain banks that support IPv6, the advantage is that >>> there is no risk that multiple households will share a single IPv4 >> address. >> >> that's a solved problem. security is done at a higher layer regardless. > > Not for that particular bank. They are very much interested in IP addresses. > >> if IPv6 provides no benefit over IPv4 then why? >> 32 + 16 > 128. >> or if we allow IPv6 to have no benefit over IPv4 I could rather say. > > The benefit of IPv6 is that IPv6 addresses are almost for free, whereas a > single IPv4 address costs a significant chunk of money (compared to other > costs). > >> The changes in the transport and application layers are already >> happening (e.g. QUIC). > > If QUIC can deal with this flash renumbering problem then it would be nice > to see a report on that. I'm very curious how to would work. THe best they could do is to try to *circumvent* the problem while keeping all the mess in the network layer. That'd certainly be a bad option. -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 11:05:13 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E932B120088 for ; Fri, 25 Oct 2019 11:05:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YmjUCbEv8fkf for ; Fri, 25 Oct 2019 11:05:09 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB752120043 for ; Fri, 25 Oct 2019 11:05:09 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 795B78681C; Fri, 25 Oct 2019 20:05:06 +0200 (CEST) To: Ole Troan , Philip Homburg Cc: v6ops@ietf.org References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <71621d5f-1525-98c0-aa94-281ac72a15cb@si6networks.com> Date: Fri, 25 Oct 2019 15:04:23 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 18:05:11 -0000 On 25/10/19 10:25, Ole Troan wrote: >>> The changes in the transport and application layers are already >>> happening (e.g. QUIC). >> >> If QUIC can deal with this flash renumbering problem then it would be nice >> to see a report on that. I'm very curious how to would work. >> >> In any case, there will continue to be a lot of TCP and non-QUIC UDP in >> the coming years. Are you saying that it will be cheaper to modify all >> transport protocols than to fix it in the IPv6 stack? > > It can't be fixed in the IPv6 stack. When what you call "flash-renumbering" happens, hosts continue employing addresses and network configuration that is stale incorrect. That's the problem. As soon as you are able to detect that and unprefer/remove such addresses/configuration, you've solved the problem. That's what we're trying to do here. > My argument is that if you do that, as in add support for ephemeral addressing / flash renumbering at the network layer, without doing anything at upper layers, then for an end-user, IPv6 will provide no value or more likely negative value compared to IPv4 + NAT. The two are orthogonal. Upper-layers can/should do better. That doesn't mean that we shouldn't improve robustness at the network layer. -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 11:10:30 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A5921200DF for ; Fri, 25 Oct 2019 11:10:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SE006rhVw5MF for ; Fri, 25 Oct 2019 11:10:27 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F2EA120043 for ; Fri, 25 Oct 2019 11:10:27 -0700 (PDT) Received: from [IPv6:2a01:79c:cebd:47d8:9c52:20df:ffc:2b15] (unknown [IPv6:2a01:79c:cebd:47d8:9c52:20df:ffc:2b15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 6EBF94E11B98; Fri, 25 Oct 2019 18:10:25 +0000 (UTC) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Ole Troan Mime-Version: 1.0 (1.0) Date: Fri, 25 Oct 2019 20:10:23 +0200 Message-Id: References: <71621d5f-1525-98c0-aa94-281ac72a15cb@si6networks.com> Cc: Philip Homburg , v6ops@ietf.org In-Reply-To: <71621d5f-1525-98c0-aa94-281ac72a15cb@si6networks.com> To: Fernando Gont X-Mailer: iPhone Mail (17B5084a) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 18:10:28 -0000 > On 25 Oct 2019, at 20:05, Fernando Gont wrote: >=20 > When what you call "flash-renumbering" happens,=20 Yes, because what you call =E2=80=9Crenumbering =E2=80=9C is not specified a= nywhere.=20 O= From nobody Fri Oct 25 11:11:10 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C5271200DF for ; Fri, 25 Oct 2019 11:11:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ikmg4hnHl9ek for ; Fri, 25 Oct 2019 11:11:07 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 134EE120043 for ; Fri, 25 Oct 2019 11:11:07 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 2DA08868C7; Fri, 25 Oct 2019 20:11:03 +0200 (CEST) To: Ted Lemon Cc: Ole Troan , v6ops list References: <860c946a-c23c-4060-d83c-587302de28f8@si6networks.com> <5A20C8D8-3A42-464D-9D6D-79F1567B6FA4@employees.org> <1a07be3c-90bb-5182-1a11-5e94fbbacf44@si6networks.com> <4C2352ED-4B3A-4F11-B860-FE0848513431@fugue.com> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <99f9eb4f-9e66-d0ae-c600-09f203d8f0bc@si6networks.com> Date: Fri, 25 Oct 2019 15:10:55 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <4C2352ED-4B3A-4F11-B860-FE0848513431@fugue.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 18:11:09 -0000 On 25/10/19 14:59, Ted Lemon wrote: > On Oct 25, 2019, at 1:52 PM, Fernando Gont > wrote: >> The "flash renumbering" could also happen if the CPE was trying to kind >> of the right thing, the ISP does not employ stable prefixes, and the CPE >> happens to crash and reboot. Some CPEs also reportedly do a "release" >> when rebooted. > > That’s probably a bug.   If the CPE has a valid lease, and the prefix is > still working, it should continue to advertise it until its valid > lifetime expires. Normally CPEs keep no state in stable storage about that. > The ISP DHCP server should be giving the router two > prefixes if it’s being renumbered: the preferred one, and the one that’s > still valid but not preferred anymore. The reality is that, we have all sort of things in the echosystem. So if the network is to be robust, while we can and do improvements were possible/needed. That said, there should be smarts on the hosts to cope with these scenarios gracefully (hope for the best, plan for the worst). Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 11:14:57 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D63C12004D for ; Fri, 25 Oct 2019 11:14:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t6XUnqmLfEyK for ; Fri, 25 Oct 2019 11:14:52 -0700 (PDT) Received: from mail-qt1-x82c.google.com (mail-qt1-x82c.google.com [IPv6:2607:f8b0:4864:20::82c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9AC0F120043 for ; Fri, 25 Oct 2019 11:14:52 -0700 (PDT) Received: by mail-qt1-x82c.google.com with SMTP id g50so4626006qtb.4 for ; Fri, 25 Oct 2019 11:14:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=44FEZUTnqcOqDjKsJ4wUQBkUO9pdVkc8nMZ/p4ihKM4=; b=PoAgUTIM4VC13lH/KooiLn3F144KZqFQYdUi3AI76TzsfziUmougXfsuaqDwWVdYj0 21WbhDxfAgzJGqGyyNGQdpF07keUIo7jRxoDlWGR6XMHo8SyW/oN0o/vKLxdBajH80Ly XOK3XD/btQy+JUyoB6zJwtZgUBE7YGEtv044Z/0AHSNnyswVSW9rx8V3d8g9tOVOcQsL oJgV3NvZj6RYtq1Bno11DwuvKlbWpO2KqZXsGDJ9USU1FFkEJbiY6eJsdO1T3rVrvnzZ I4bADV89DtXwjkjwbZcXyydCoqEzWk43/fPa0giNBBDsoaqExtTG97ItqNpmgcHVglHj e1DQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=44FEZUTnqcOqDjKsJ4wUQBkUO9pdVkc8nMZ/p4ihKM4=; b=jur0Yc84UsOxndWW04E7+kwkHSnptjwEYxQAL/QtxTAIRzSJSKAafbNzPegAxP3wjt e7vXxOmCflA137fmuS5RmafCXSJXcb+Ux+MIy6RlYbPMtum1IhSXhlCx2PJXk0G168u0 2Y1DY4Oyle3lG4vLkUTomFarT5gX+ASGQj6ykvDKIdIQOprkty6BYy5IQsEMmTlRGyeg t9ds281KEu5SJOYEb5I5d3UBytSLW/AkSYXrf3eQecnB3+NoxTeNzisj9n1hvX6gSLju akj6Gmou21tkSSV/8567G8Sm5NcuOKGtjHaAYkx9Tp5f2PLIBVEdIIuZ1Z6jTVtkn9dE lwRQ== X-Gm-Message-State: APjAAAVSUmR2NurCahve9vYJgu9buxW9EG9alobsPUP/isgnSdePQNSN oJi3d0MN8F3s25biu129ZXpcIQFG4l13Iw== X-Google-Smtp-Source: APXvYqwCnBjQMYJ5wL1rjEfFv9vNk5tNgtwT5LvP+f5ue2FjFYKD5rxdMENmk3HQQD3+FtmAbnSBFw== X-Received: by 2002:aed:22c8:: with SMTP id q8mr4771342qtc.0.1572027291700; Fri, 25 Oct 2019 11:14:51 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:f9e1:cec4:6cf2:e2c1? ([2601:18b:300:36ee:f9e1:cec4:6cf2:e2c1]) by smtp.gmail.com with ESMTPSA id p56sm1842209qtp.81.2019.10.25.11.14.50 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 25 Oct 2019 11:14:51 -0700 (PDT) From: Ted Lemon Message-Id: <0E52D130-261A-4EAF-87C9-08AC96A1F0EF@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_7619E691-EAB9-4502-871D-112EFD8C635A" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.4\)) Date: Fri, 25 Oct 2019 14:14:49 -0400 In-Reply-To: <99f9eb4f-9e66-d0ae-c600-09f203d8f0bc@si6networks.com> Cc: Ole Troan , v6ops list To: Fernando Gont References: <860c946a-c23c-4060-d83c-587302de28f8@si6networks.com> <5A20C8D8-3A42-464D-9D6D-79F1567B6FA4@employees.org> <1a07be3c-90bb-5182-1a11-5e94fbbacf44@si6networks.com> <4C2352ED-4B3A-4F11-B860-FE0848513431@fugue.com> <99f9eb4f-9e66-d0ae-c600-09f203d8f0bc@si6networks.com> X-Mailer: Apple Mail (2.3601.0.4) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 18:14:54 -0000 --Apple-Mail=_7619E691-EAB9-4502-871D-112EFD8C635A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 25, 2019, at 2:10 PM, Fernando Gont = wrote: > The reality is that, we have all sort of things in the echosystem. So = if > the network is to be robust, while we can and do improvements were > possible/needed. That said, there should be smarts on the hosts to = cope > with these scenarios gracefully (hope for the best, plan for the = worst). I agree. But if an ISP=E2=80=99s DHCP server is not doing this, I = would say that it=E2=80=99s a bug, and we should make sure that we are = at least giving them correct advice about what DHCP=E2=80=99s behavior = should be. Similarly with the CPE: if it asks for e.g. a /64, and gets = two, one with a preferred lifetime of zero, does it advertise both? --Apple-Mail=_7619E691-EAB9-4502-871D-112EFD8C635A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 25, 2019, at 2:10 PM, Fernando Gont <fgont@si6networks.com> wrote:
The reality is that, we have all sort of things in the = echosystem. So if
the network is to be robust, while we can and do improvements = were
possible/needed. That said, there should be smarts on the = hosts to cope
with these = scenarios gracefully (hope for the best, plan for the = worst).

I = agree.   But if an ISP=E2=80=99s DHCP server is not doing this, I = would say that it=E2=80=99s a bug, and we should make sure that we are = at least giving them correct advice about what DHCP=E2=80=99s behavior = should be.   Similarly with the CPE: if it asks for e.g. a /64, and = gets two, one with a preferred lifetime of zero, does it advertise = both?

= --Apple-Mail=_7619E691-EAB9-4502-871D-112EFD8C635A-- From nobody Fri Oct 25 11:16:54 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2EB912004D for ; Fri, 25 Oct 2019 11:16:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pvfJQ4trN2uR for ; Fri, 25 Oct 2019 11:16:53 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C2F7B120043 for ; Fri, 25 Oct 2019 11:16:52 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id AB67E86AD1; Fri, 25 Oct 2019 20:16:47 +0200 (CEST) To: Ole Troan Cc: Philip Homburg , v6ops@ietf.org References: <71621d5f-1525-98c0-aa94-281ac72a15cb@si6networks.com> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <53acb2aa-0de6-f6d9-0166-16d89f00ed1a@si6networks.com> Date: Fri, 25 Oct 2019 15:16:39 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 18:16:54 -0000 On 25/10/19 15:10, Ole Troan wrote: > > >> On 25 Oct 2019, at 20:05, Fernando Gont wrote: >> >> When what you call "flash-renumbering" happens, > > Yes, because what you call “renumbering “ is not specified anywhere. THat's why we explain and describe it in our I-D. -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 11:24:21 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34975120113 for ; Fri, 25 Oct 2019 11:24:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3j_AodjDPUvp for ; Fri, 25 Oct 2019 11:24:18 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3D85120043 for ; Fri, 25 Oct 2019 11:24:17 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 01BA8868CB; Fri, 25 Oct 2019 20:24:14 +0200 (CEST) To: Ted Lemon Cc: Ole Troan , v6ops list References: <860c946a-c23c-4060-d83c-587302de28f8@si6networks.com> <5A20C8D8-3A42-464D-9D6D-79F1567B6FA4@employees.org> <1a07be3c-90bb-5182-1a11-5e94fbbacf44@si6networks.com> <4C2352ED-4B3A-4F11-B860-FE0848513431@fugue.com> <99f9eb4f-9e66-d0ae-c600-09f203d8f0bc@si6networks.com> <0E52D130-261A-4EAF-87C9-08AC96A1F0EF@fugue.com> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: <86e78954-cd07-1492-b945-eb89a7b5ef9c@si6networks.com> Date: Fri, 25 Oct 2019 15:22:31 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <0E52D130-261A-4EAF-87C9-08AC96A1F0EF@fugue.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 18:24:19 -0000 On 25/10/19 15:14, Ted Lemon wrote: > On Oct 25, 2019, at 2:10 PM, Fernando Gont > wrote: >> The reality is that, we have all sort of things in the echosystem. So if >> the network is to be robust, while we can and do improvements were >> possible/needed. That said, there should be smarts on the hosts to cope >> with these scenarios gracefully (hope for the best, plan for the worst). > > I agree.   But if an ISP’s DHCP server is not doing this, I would say > that it’s a bug, and we should make sure that we are at least giving > them correct advice about what DHCP’s behavior should be. I fully agree. Indeed, we did include a bit of that in our I-D. >  Similarly > with the CPE: if it asks for e.g. a /64, and gets two, one with a > preferred lifetime of zero, does it advertise both? This is largely unspecified. So, yes, it should be better specified. Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 12:47:44 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4463E12011C for ; Fri, 25 Oct 2019 12:47:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1Ik8wxguaPGT for ; Fri, 25 Oct 2019 12:47:42 -0700 (PDT) Received: from mail-pg1-x543.google.com (mail-pg1-x543.google.com [IPv6:2607:f8b0:4864:20::543]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E648B12004F for ; Fri, 25 Oct 2019 12:47:41 -0700 (PDT) Received: by mail-pg1-x543.google.com with SMTP id f19so2177565pgn.13 for ; Fri, 25 Oct 2019 12:47:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=d5pOH9HjSn/EJ/2HzIh9fMrdtUylYoNw4JdKl3tsu+A=; b=j4xbBwzi/Ff1RapB5pKR1/hkxYkUlZCP3CPK/sd9ZBpX3N9GnCxkHqO95vClo7UU44 2m0stTiAk4bASEAMf1SOGUlP1SO0qrW3VVVIUKWxXiuXG4ip8kSzgM37m0C+7F+b+SB9 X2kdD8CtKCgK3c4RHtceAgk4IFTA7VrGg0BOZqwiFK04GsbVv/ScoMBAC3y75tc5gV7R HJdp1YkiqCs2b6Ayoa+U7MsWVD3/0hHahH6JMhtTJxDuZoa27ZroWoc/nL9JIPD8Flu5 B+kj47am90er0i2PrGph8+5mZX0BpDOkGmHtLwI2m2KXOuEFhEgkwKTfrKSKXDZQES4V 0WIg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=d5pOH9HjSn/EJ/2HzIh9fMrdtUylYoNw4JdKl3tsu+A=; b=NQXj8oKsfakRNIfhceEuZRPWv5PFF35mX0DIImIsxFArcYhyPegZ5BcFUzpxi2+9Ap DMEmwuWh9quVpBDKEKe6e+S7aaB6BMi3rjkVQaVJczbUPYcq8uCgtVO+a/NwVG/ruV4Y apHEvFmb5fYe0QwKzugIAK7dWcUlaiZrKvi0wgoF1fkviKLUOIT3B6ncznpqHP/Kzgla meFuHkfMtzz3oCMUFMIPV97Dz5+FhuM9KYOjCp2ZODnghyIdFoLPR7pt9cjR9Fzg42fG 3ZZiR09Pyn5twcD+MYiAz5+/9E1Fh8P09mEw4r6AMIrO7cOExXK1UeSFLuItalVcg7fW SHvQ== X-Gm-Message-State: APjAAAVn6Ub6v0FzmnIg7BmSmGqJimO0SysBgY4lATMjIyb95is3pxZD lpCyVcxtZrIL/xkBXIFcZkSD13rd X-Google-Smtp-Source: APXvYqxgf6PaBjRMWXh3VPpGDWERQusLfwBRyqh4Ro5nl3TSfqvYu4OC3wbBTKiQwQwoQCe0eTu4Uw== X-Received: by 2002:a62:1e06:: with SMTP id e6mr6137641pfe.181.1572032861179; Fri, 25 Oct 2019 12:47:41 -0700 (PDT) Received: from [192.168.178.30] (46.137.69.111.dynamic.snap.net.nz. [111.69.137.46]) by smtp.gmail.com with ESMTPSA id n23sm3395222pff.137.2019.10.25.12.47.39 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 25 Oct 2019 12:47:40 -0700 (PDT) To: v6ops@ietf.org References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <49A6064C-3AA0-4AA6-B78E-ED8404D35B97@employees.org> <40c89b34-03ae-4a9d-0b6d-610e3b8564b2@foobar.org> From: Brian E Carpenter Message-ID: Date: Sat, 26 Oct 2019 08:47:39 +1300 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <40c89b34-03ae-4a9d-0b6d-610e3b8564b2@foobar.org> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 19:47:43 -0000 On 26-Oct-19 03:27, Nick Hilliard wrote: > Ole Troan wrote on 25/10/2019 13:53: >> This is a response to the proposals of violating a fundamental >> expectation of stable addressing in IPv6. > is that a fundamental design principle of ipv6? This is news. Not that I'm aware of, but (as the 6renum WG showed) that doesn't mean that planned renumbering is easy; and unplanned renumbering is still a bug. Mitigations needed. Brian From nobody Fri Oct 25 13:23:27 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88769120044 for ; Fri, 25 Oct 2019 13:23:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RjJsrbIqJ31g for ; Fri, 25 Oct 2019 13:23:24 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C94412003E for ; Fri, 25 Oct 2019 13:23:24 -0700 (PDT) Received: from [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7] (unknown [IPv6:2804:431:c7f3:bff2:b8b3:4400:3123:ecb7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id E78F78678B; Fri, 25 Oct 2019 22:23:19 +0200 (CEST) To: "Eric Vyncke (evyncke)" , Ole Troan , Mark Smith Cc: v6ops list References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: Date: Fri, 25 Oct 2019 15:26:14 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 20:23:27 -0000 On 24/10/19 10:11, Eric Vyncke (evyncke) wrote: > Ole > > What about a "IPv6 renumbering considered harmful" or "Unstable DHCP-PD prefix considered harmful" ? > > -éric (enjoying my 3-year old /48 or is it 5 years?) The EFF might have some concerns about that ;-) -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 25 14:22:16 2019 Return-Path: X-Original-To: v6ops@ietf.org Delivered-To: v6ops@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B714312099A; Fri, 25 Oct 2019 14:12:13 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: v6ops@ietf.org, warren@kumari.net X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <157203793374.2724.685417492900105819.idtracker@ietfa.amsl.com> Date: Fri, 25 Oct 2019 14:12:13 -0700 Archived-At: Subject: [v6ops] v6ops - Requested session has been scheduled for IETF 106 X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 21:18:46 -0000 Dear Fred Baker, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. v6ops Session 1 (2:00 requested) Monday, 18 November 2019, Afternoon Session II 1550-1750 Room Name: Collyer size: 250 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/106/sessions/v6ops.ics Request Information: --------------------------------------------------------- Working Group Name: IPv6 Operations Area Name: Operations and Management Area Session Requester: Fred Baker Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 100 Conflicts to Avoid: Chair Conflict: spring lsr 6man intarea idr Key Participant Conflict: rtgwg tsvarea panrg grow tsvwg People who must be present: Fred Baker Ron Bonica Warren "Ace" Kumari Resources Requested: Special Requests: --------------------------------------------------------- From nobody Fri Oct 25 17:41:23 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB442120026 for ; Fri, 25 Oct 2019 17:41:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.497 X-Spam-Level: X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dmMeO3tXzobc for ; Fri, 25 Oct 2019 17:41:19 -0700 (PDT) Received: from mail-ot1-x343.google.com (mail-ot1-x343.google.com [IPv6:2607:f8b0:4864:20::343]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87E5C12004A for ; Fri, 25 Oct 2019 17:41:19 -0700 (PDT) Received: by mail-ot1-x343.google.com with SMTP id d8so3258379otc.7 for ; Fri, 25 Oct 2019 17:41:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=xzQt2B9LQBj71kVblyCuQZHoWHBG99i/Pg1OrxYzFi8=; b=rChqxn3fdVNRoCy6sVthSQnx5G8ixO85mLnfG4fLKeFiTzoj3W5uiGDI3OeaYXhJlo fzGbhU5RLfiD4uNpzkha35Rdngy3BQqg4tWZt/1lXGr3Cq39onPe5iQkazeUMamtKC9N c0IXgZuO9Pgvm8W5Imm2hSIlF709reAnI/h1FqxpbrWrO049rdDFAnRTVEIle/84gIE9 xYDIxMWdw/clnEnO7hg9HsU8Jb1BO/+ju8nXvGBsPV3acqmcCxBgmngEg3amZ9TG7nM/ jWIY5cu8q/6qv7xKvA+YmBl+Y4uPDRH55fqmdDAiEtC1X61HeqzmfcGjJGnVhf392Lvv rxSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=xzQt2B9LQBj71kVblyCuQZHoWHBG99i/Pg1OrxYzFi8=; b=VpNa8hSQR4ovmMdKnzEXNe2nYIIFVkj6S7xdxoyY40l0x1EVmLSjRGa5I4NCOqPTEY JgFX2hyWhuMH95Q4i8byHh9MNQpAI/LvlR0Efdx2saEhD8Z0brYT5pF3nNtKfW85gJOp 2kPzb4V35ePHRoFbb3091PEQ1eBJ41m+IIXPLTtRxiX/a9SORD+1UWpotcXxKUXmwNgO JcTQiJ1ffu6SHMBu1lyrNnxyJSQK/tLK84Sojh7Lc5nkIr21Gknm8QAkX6KGJxqEY9CB x8So84TRzxuxXbe/7txmrCizOu+vIJSC6aBzYDKsra3iqMU+6A77eaR9R8k1T1Zvqg8s dRKg== X-Gm-Message-State: APjAAAVHVjI4VgFbcQWFVL6SdZzBJYtqExwiQTKBAqKu4KVk1vG/EdTx 8YHkUhqeupRnysq2ACrxiDbb757o0UvaGsiF+jI= X-Google-Smtp-Source: APXvYqxhpciS2+pbO6FsSfGA4wC4RQWeZw9bUDgXQMYY7hAzVRQMW9BN8QroLPWFF1Wgz1BYmwPW4IfW/9d5roPevxM= X-Received: by 2002:a9d:6c85:: with SMTP id c5mr4789698otr.257.1572050478712; Fri, 25 Oct 2019 17:41:18 -0700 (PDT) MIME-Version: 1.0 References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-Reply-To: From: Mark Smith Date: Sat, 26 Oct 2019 11:41:07 +1100 Message-ID: To: Clark Gaylord Cc: Philip Homburg , v6ops list Content-Type: multipart/alternative; boundary="0000000000005a53980595c586ad" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Oct 2019 00:41:22 -0000 --0000000000005a53980595c586ad Content-Type: text/plain; charset="UTF-8" On Sat, 26 Oct 2019, 00:25 Clark Gaylord, wrote: > Note: that makes your sample size 2, not 240,000.... > I think the volume of users is an indication of the likelihood of encountering it, in the context of rapid broadband adoption at the time. When I started at the smaller ISP in 2005, we had 6000 customers. When I left in November of 2009, we had 80 000 customers. During that time the network was also entirely rebuilt, including going from 2 LNSes and a single BRAS to 2 new LNSes and 6 BRASes, on a new network core with an entirely new routing architecture (i.e. BGP for everything, OSPF carrying loopbacks and link addressing) . The rebuild included unavoidable redistribution of routes back and forth between and new network instances of BGP and OSPF (and the risk of BGP -> OSPF -> BGP). So given the growth, and the complexity of what we had to do to deploy a new network during that growth, while continuing to providing legacy network connectivity, I think if flash renumbering was a common thing that needed to be done, I think I should have encountered it often given my experience. > Renumbering is not "common" but it certainly happens. > I didn't say it didn't happen. People imply it is a regular and routine event that then justifies a lot if effort to work around its consequences to IPv6. I don't agree, because I don't think it is a common and routine event, and with the right address provisioning system and routing architecture, customers don't get flash renumbered even when, e.g. a BRAS is rebooted. With that said, "flash renumber" could reasonably be considered a "high > support risk" operation.. IPv6 is supposed to accommodate renumbering > *more* gracefully, not less, than legacy IP, but it is still supposed to be > a planned event. > If you use IPv6's graceful renumbering mechanisms i.e. multi-addressing and preferred and valid lifetimes, then it won't be flash renumbering. > -- > Clark Gaylord > cgaylord@vt.edu > ... autocorrect may have improved this message ... > > On Fri, Oct 25, 2019, 09:17 Mark Smith wrote: > >> On Fri, 25 Oct 2019 at 19:37, Philip Homburg >> wrote: >> > >> >> >> >> > >> > Reality is that ISPs do flash renumbering for IPv4 customers. >> >> Why? >> >> Between 2005 and 2011, I worked for two residential ISPs, one state >> based with 80 000 customers, and another national one, with 160 000 >> customers. In all that time, I never needed to or saw anybody >> intentionally "flash renumber" as far as I can remember. >> >> The only time I can see a need to purposefully "flash renumber" would >> be if you want to shift around IP address pools across to different >> BRASes. I don't think that is a common event. (The common event was >> adding new IP addresses to existing per-BRAS pools, as customer >> numbers grew.) >> >> So I would like to hear from ISPs that purposely "flash renumber" why >> they do so, and how often. >> >> >> People are trying to continue to use the decades old dial up model. >> That's understandable - "if it ain't broke, don't fix it". It could be >> carried over from dial to residential broadband IPv4+NAT, because >> there were enough similarities. The problem is that it is broken when >> applied to IPv6. >> >> You don't keep using old solutions and ideas when they start to cause >> too many problems, and require too many work arounds to keep using >> them. Too many problems caused by the old method and too many work >> arounds to overcome them is a sign the old solution is really beyond >> its useful life and a new solution is necessary. >> >> >We can tell them >> > that they cannot do that for IPv6, but that will result either in a >> delay >> > of IPv6 deployment, or they will find a hack (such as NAT66) to make it >> 'work'. >> > >> > >> > _______________________________________________ >> > v6ops mailing list >> > v6ops@ietf.org >> > https://www.ietf.org/mailman/listinfo/v6ops >> >> _______________________________________________ >> v6ops mailing list >> v6ops@ietf.org >> https://www.ietf.org/mailman/listinfo/v6ops >> > --0000000000005a53980595c586ad Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Sat, 26 Oct 2019, 00:25 Clark Gaylord, <cgaylord@v= t.edu> wrote:
Note: that makes your sample size 2, not 240,000....

I thin= k the volume of users is an indication of the likelihood of encountering it= , in the context of rapid broadband adoption at the time.

When I started at the smaller ISP in 2005= , we had 6000 customers. When I left in November of 2009, we had 80 000 cus= tomers.

During that time= the network was also entirely rebuilt, including going from 2 LNSes and a = single BRAS to 2 new LNSes and 6 BRASes, on a new network core with an enti= rely new routing architecture (i.e. BGP for everything, OSPF carrying loopb= acks and link addressing) . The rebuild included unavoidable redistribution= of routes back and forth between and new network instances of BGP and OSPF= (and the risk of BGP -> OSPF -> BGP).

So given the growth, and the complexity of what we had= to do to deploy a new network during that growth, while continuing to prov= iding legacy network connectivity, I think if flash renumbering was a commo= n thing that needed to be done, I think I should have encountered it often = given my experience.


Renumbering is not "common" but it certainly happens.

I didn't say it didn't happen.

People imply it is a regular and routine event that then= justifies a lot if effort to work around its consequences to IPv6.

I don't agree, because I do= n't think it is a common and routine event, and with the right address = provisioning system and routing architecture, customers don't get flash= renumbered even when, e.g. a BRAS is rebooted.

=
With that said, "flas= h renumber" could reasonably be considered a "high support risk&q= uot; operation.. IPv6 is supposed to accommodate renumbering *more* gracefu= lly, not less, than legacy IP, but it is still supposed to be a planned eve= nt.

If you use IPv6's graceful renumbering mechanisms = i.e. multi-addressing and preferred and valid lifetimes, then it won't = be flash renumbering.

<= div>

--
Clark Gaylord
cgaylord@vt.edu
... autocorrect m= ay have improved this message ...

On Fri, Oct 25, 2019, 09:17 Mark Sm= ith <markzzzsmith@gmail.com> wrote:
On Fri, 25 Oct 2019 at 19:37, Philip Homburg <= pch-v6ops-9@u-1.phicoh.com> wrote:
>

<snip>

>
> Reality is that ISPs do flash renumbering for IPv4 customers.

Why?

Between 2005 and 2011, I worked for two residential ISPs, one state
based with 80 000 customers, and another national one, with 160 000
customers. In all that time, I never needed to or saw anybody
intentionally "flash renumber" as far as I can remember.

The only time I can see a need to purposefully "flash renumber" w= ould
be if you want to shift around IP address pools across to different
BRASes. I don't think that is a common event. (The common event was
adding new IP addresses to existing per-BRAS pools, as customer
numbers grew.)

So I would like to hear from ISPs that purposely "flash renumber"= why
they do so, and how often.


People are trying to continue to use the decades old dial up model.
That's understandable - "if it ain't broke, don't fix it&q= uot;. It could be
carried over from dial to residential broadband IPv4+NAT, because
there were enough similarities. The problem is that it is broken when
applied to IPv6.

You don't keep using old solutions and ideas when they start to cause too many problems, and require too many work arounds to keep using
them. Too many problems caused by the old method and too many work
arounds to overcome them is a sign the old solution is really beyond
its useful life and a new solution is necessary.

>We can tell them
> that they cannot do that for IPv6, but that will result either in a de= lay
> of IPv6 deployment, or they will find a hack (such as NAT66) to make i= t 'work'.
>
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.or= g/mailman/listinfo/v6ops

_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.ietf.org/mai= lman/listinfo/v6ops
--0000000000005a53980595c586ad-- From nobody Fri Oct 25 18:30:21 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52E22120099 for ; Fri, 25 Oct 2019 18:30:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FO6ZWPG8UWHN for ; Fri, 25 Oct 2019 18:30:17 -0700 (PDT) Received: from mail-pl1-x62a.google.com (mail-pl1-x62a.google.com [IPv6:2607:f8b0:4864:20::62a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD81B120026 for ; Fri, 25 Oct 2019 18:30:17 -0700 (PDT) Received: by mail-pl1-x62a.google.com with SMTP id g9so1669370plp.3 for ; Fri, 25 Oct 2019 18:30:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:cc:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=7jnAJfGvLr0PFyue1SY+q7B/d7PqkS01W6blZLdBjjA=; b=TAqnvW51Bwjv3o0lWeaekIbEBXP+tGPNJbFht+uXt0vSKJrJBazvmNqXM8HlRz9AmM ofYgQHxYHNUCezDfggHiY8YTgyHG0Ku6hUy/6wYzeCIYqp/MOn7k9waQPROhg4eazgdl +/1G2jZVHCWQUB3LLRAEdiGct4w8SJ7sqU0lxuh4zLAdqW7ROTML9x7snTd7GAfIOv1c fKm21FdYdoVha4t86lL4wf3PMHWSCZ3on1nJh/4w3cBGVntJ6eqiy5nkI84CINIxtQgS cyC4aiI5DIAr8gJaHmVN6x20Yw9W2EGqrrpbm9u0CsMZMifOaeO9jzNwT8Sq5ExxgHcs AojA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:cc:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=7jnAJfGvLr0PFyue1SY+q7B/d7PqkS01W6blZLdBjjA=; b=cTX+8p/AISA4LgW5kBt+ZwbnHPy0gtHyM7I5lGB8NX7ovxzlFufXqfUqgvEKnn5lsr sXcwsfpmiIpAddxHDhAueMdnI7jKXgk0WUvFXnnsvARReFyA1sUwJ+A1d9rrqpjRPC9L smZVWxBHPKfHUu+S+Fz91s5w8q0gY49pyLrg6La0cMxlxv23Dv/NGtIgEWTYekf9zgTq LAv4n6kfnpilYE1D9eKKDnz8FQ3XmsxWMA0pJFL/n/JoE8TPef8IOvUtMw9qsPNmtSvp sAamdttDtyrjPZP0sQ5y8yIkieVZrY3r3gAkwxWAuD1x6QZ4ldmsArFoVBFQFyzg5sg4 QtLw== X-Gm-Message-State: APjAAAXFMr/I45N5zXDDvPnEMyhlKM9fnDKbZz6OepmPKEsGvriXNt7Z obD2CwuFqMWadPO6RyzgdJzharUN X-Google-Smtp-Source: APXvYqyP1tcmxs/rRQ7nKgbtpcZfckcb11eS3tIBpL0uZzneve1JYKhWXFMSkQloafoqki/PlRFH7Q== X-Received: by 2002:a17:902:b10c:: with SMTP id q12mr6813857plr.97.1572053417202; Fri, 25 Oct 2019 18:30:17 -0700 (PDT) Received: from [192.168.178.30] (46.137.69.111.dynamic.snap.net.nz. [111.69.137.46]) by smtp.gmail.com with ESMTPSA id f7sm3778723pfa.150.2019.10.25.18.30.15 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 25 Oct 2019 18:30:16 -0700 (PDT) To: Mark Smith References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Brian E Carpenter Cc: IPv6 Operations Message-ID: Date: Sat, 26 Oct 2019 14:30:12 +1300 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Oct 2019 01:30:19 -0000 >> Renumbering is not "common" but it certainly happens. ...> People imply it is a regular and routine event... Sadly, it is. For example, at my previous apartment there was a badly waterproofed joint somewhere between me and the nearest street cabinet, so for months I frequently lost ADSL synch... and when it came back, I got new IPv6 prefix. After a heavy rainstorm, this would happen many times a day. Yes, OK, there was a copper cable fault and it took many months to fix it. OK, maybe the ISP shouldn't regenerate a prefix every time. But that's real life and I suspect I am one of millions. Regards Brian From nobody Fri Oct 25 18:59:47 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1F051200B9 for ; Fri, 25 Oct 2019 18:59:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.497 X-Spam-Level: X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E4uNxgK7Q5cD for ; Fri, 25 Oct 2019 18:59:44 -0700 (PDT) Received: from mail-ot1-x330.google.com (mail-ot1-x330.google.com [IPv6:2607:f8b0:4864:20::330]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78FFF12001A for ; Fri, 25 Oct 2019 18:59:44 -0700 (PDT) Received: by mail-ot1-x330.google.com with SMTP id z6so3354126otb.2 for ; Fri, 25 Oct 2019 18:59:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Hb994jUUHwNXCsT21HJjIkVENUCzAXg6uvvWPI5FdRM=; b=Og9ERwMG1wiiBUtY4io2u5XvAdP24NG8lUlMBvQN2z3dVuXnY8777y6CQT4fBNCdKO JPFJ2/9M5J3OIsKxgIGD7HsMcTfWsEs7WtJvdt6b0cKG82OMfqgCTQTAcfXBX5pWG4Yr L7DwUQjK1crLh1SdPJM2AHiUE7/AClcIsdg2IRtazp5HHeG04n0aeGR5ivejwAT0Jdq8 3c27AIf4tsbxZFQ8habIjP7MWJZgk3Vqkwh1WlUxuxTjhseNPoTDB4nEf5YHNoKAibeN EKyNi1uTF/4ANjpNkY8aQEmpEoZdkLg+dAuLfat5gwJjpR0cnLED3JBj50++YsoOFXb+ lZ0A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Hb994jUUHwNXCsT21HJjIkVENUCzAXg6uvvWPI5FdRM=; b=iF6lIzw/KE+mhFGPm654X4bLJsivNAZ6vyKa2x5chJb/z5ixcn1uAR1uULk77rS3ro X+4zoCsuLX2h6qxPG/E5cuHXOhdaoOOlAtDN0wBehaUCEXo+oXYFlOLbKe7dMIBx8QXb LwXtFH2dPnQOK4qf4D8fjympwioQ3jui7cmz1ZWs0Jq74TK/cuGZHzYgS0z2QYcvyYOp MQukyb3Jsere9k23HukIxDGq9tYF6srLrlE+75Pbbsrqnp/kE4f6na3/zG0JdVY4gxYl uYLo4V64CF+4BNzzn7q2PzVQ/kSP27wqO6EunsKmp3xrNtNmImxso9FLh50ddKsW3DWj rmIw== X-Gm-Message-State: APjAAAWm+c1ulp9yFu7mZ/7tfsiIbXjcF4ZRpamZC4VGWchsD9+qdxNN K24WGy9ud5gDdsCgr7eAyZJcfux6NoheuOrMFTA= X-Google-Smtp-Source: APXvYqx1W6Wm38nn+iX6Z0XoEfPcDQZ5omXUt1fGxgnwSuF7aoZjaLOKgGR46l1eLKxf0jLxMf0LV5rQE6aL6V38HNk= X-Received: by 2002:a9d:6c85:: with SMTP id c5mr4948620otr.257.1572055183821; Fri, 25 Oct 2019 18:59:43 -0700 (PDT) MIME-Version: 1.0 References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-Reply-To: From: Mark Smith Date: Sat, 26 Oct 2019 12:59:32 +1100 Message-ID: To: Brian E Carpenter Cc: v6ops list Content-Type: multipart/alternative; boundary="000000000000cc909f0595c69ecb" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Oct 2019 01:59:46 -0000 --000000000000cc909f0595c69ecb Content-Type: text/plain; charset="UTF-8" On Sat, 26 Oct 2019, 12:30 Brian E Carpenter, wrote: > >> Renumbering is not "common" but it certainly happens. > ...> People imply it is a regular and routine event... > > Sadly, it is. For example, at my previous apartment there was a badly > waterproofed joint somewhere between me and the nearest street cabinet, so > for months I frequently lost ADSL synch... and when it came back, I got new > IPv6 prefix. After a heavy rainstorm, this would happen many times a day. > > Yes, OK, there was a copper cable fault and it took company> many months to fix it. OK, maybe the ISP shouldn't regenerate a > prefix every time. But that's real life and I suspect I am one of millions. > This smells of the local BRAS pool dial up model. In the same situation, that wouldn't happen to me because I have a stable /56 associated with my user account. If you're using PPPoE, you can specify the access concentrator you want to (re)attach to. One common AC/BRAS/NAS implementation caches IPv4 pool assignments to user accounts, so that if the same account re-attaches, the same IPv4 pool address is given back to it. I wouldn't be surprised if that also occurs with IPv6 pool delegated prefix assignments. > Regards > Brian > --000000000000cc909f0595c69ecb Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Sat, 26 Oct 2019, 12:30 Brian E Carpenter, <brian.e.carpenter@gmail.com&= gt; wrote:
>>=C2=A0 =C2=A0 = =C2=A0Renumbering is not "common" but it certainly happens.
...> People imply it is a regular and routine event...

Sadly, it is. For example, at my previous apartment there was a badly water= proofed joint somewhere between me and the nearest street cabinet, so for m= onths I frequently lost ADSL synch... and when it came back, I got new IPv6= prefix. After a heavy rainstorm, this would happen many times a day.

Yes, OK, there was a copper cable fault and it took <unmentionable compa= ny> many months to fix it. OK, maybe the ISP shouldn't regenerate a = prefix every time. But that's real life and I suspect I am one of milli= ons.

This smells of the local BRAS pool dial up model.=C2=A0 In the same sit= uation, that wouldn't happen to me because I have a stable /56 associat= ed with my user account.

If you're using PPPoE, you can specify the access concentrator you wan= t to (re)attach to.

One = common AC/BRAS/NAS implementation caches IPv4 pool assignments to user acco= unts, so that if the same account re-attaches, the same IPv4 pool address i= s given back to it. I wouldn't be surprised if that also occurs with IP= v6 pool delegated prefix assignments.




<= /div>

Regards
=C2=A0 =C2=A0Brian
--000000000000cc909f0595c69ecb-- From nobody Sat Oct 26 11:24:34 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77EB31200CC for ; Sat, 26 Oct 2019 11:24:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.484 X-Spam-Level: ** X-Spam-Status: No, score=2.484 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_12_24=1.049, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NTeDJOY0zNRb for ; Sat, 26 Oct 2019 11:24:30 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97B561200C5 for ; Sat, 26 Oct 2019 11:24:30 -0700 (PDT) Received: from [10.10.22.143] (mvx-177-92-65-194.mundivox.com [177.92.65.194]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 75B2F86917; Sat, 26 Oct 2019 20:24:27 +0200 (CEST) To: Brian E Carpenter , Mark Smith Cc: IPv6 Operations References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: Date: Sat, 26 Oct 2019 00:16:00 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Oct 2019 18:24:33 -0000 On 25/10/19 22:30, Brian E Carpenter wrote: >>> Renumbering is not "common" but it certainly happens. > ....> People imply it is a regular and routine event... > > Sadly, it is. For example, at my previous apartment there was a badly waterproofed joint somewhere between me and the nearest street cabinet, so for months I frequently lost ADSL synch... and when it came back, I got new IPv6 prefix. After a heavy rainstorm, this would happen many times a day. > > Yes, OK, there was a copper cable fault and it took many months to fix it. OK, maybe the ISP shouldn't regenerate a prefix every time. But that's real life and I suspect I am one of millions. Indeed you are. In fact, I presented this topic at a recent LACNOG meeting, and we had at least three guys, from different countries, coming to the mike, noting they have experienced this, noting that they wished we did something about it. The document itself is a product of a conversation with an ISP (from a completely different geographical zone). Particularly when it's the user that experiences the problem, I think we are not of much help when instead of improving robustness, we complain about how the world should be a different places. Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Sat Oct 26 21:48:26 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F1D8120025 for ; Sat, 26 Oct 2019 21:48:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.999 X-Spam-Level: X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 49fodKaGWRpN for ; Sat, 26 Oct 2019 21:48:21 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id B3D9C12001A for ; Sat, 26 Oct 2019 21:48:19 -0700 (PDT) Received: from kiev.delong.com (kiev.delong.com [IPv6:2620:0:930:0:0:0:200:5]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9R4mAxd028564 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 26 Oct 2019 21:48:14 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9R4mAxd028564 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572151698; bh=Ikh/rXSMq71HYXizxJtwDyOY8GVwEQdIRM23ivZ2z8c=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=J3jmlGkvCwwoHuS1izJkSI1WtCbNsmxHxlgOAEd82pPit63CrpwEBrj6CQA7+y+ha VUvhFqhORrMKEAUn11BcAJIK9O22p88qlXQk8mnQXbeR8Q1YSX/clZPZUyhlQKit0B ldb54KXK4pRfRJWS/DzVctEFhk71lxEnOqp7zYlg= From: Owen DeLong Message-Id: <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_F20575FC-0DC7-479C-94C8-B953F19CF3AF" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Sat, 26 Oct 2019 21:48:10 -0700 In-Reply-To: <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> Cc: Philip Homburg , v6ops@ietf.org To: Fernando Gont References: <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> X-Mailer: Apple Mail (2.3445.104.11) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [IPv6:2620:0:930:0:0:0:200:2]); Sat, 26 Oct 2019 21:48:18 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 04:48:24 -0000 --Apple-Mail=_F20575FC-0DC7-479C-94C8-B953F19CF3AF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 >> It is worth noting that these values are tunable by the administrator >> and the >> RFC suggested defaults should never be a hard-coded value. >>=20 >> With the following exception, I don=E2=80=99t advocate modifying this = on the client >> side: >> +Section 5.5.3 of RFC4862 should be amended to specifically >> allow the immediate deprecation of a prefix by sending a valid >> lifetime of 0 seconds. Hosts should be required to honor >> this as a signal that the prefix is no longer valid. >=20 > Could you please elaborate on this one? I=E2=80=99m not sure what I could do to elaborate. The addition of a = specific call-out that even if the current behavior of =E2=89=A42 hours =3D 2 hours is to be = preserved, there should be a special case for =E2=80=9C0 seconds=E2=80=9D which causes the = prefix to be immediately deprecated with extreme prejudice. Hosts should be required to treat an RA containing a prefix with a 0 = second valid lifetime as an invalid prefix and immediately deprecate it from = the interface if it is in use. >=20 >=20 >=20 >> I do think that generally speaking, your proposed modifications to = CPE and >> router behavior should be standardized and implemented. >>=20 >>> A better mitigation is to affect the preferred and possibly the = valid >>> lifetimes in response to consecutive RAs from the same router that = lack >>> the original (stale) prefix. e.g., after two consecutive RAs that do = not >>> contain the existing prefix, reduce the preferred lifetime. After = two >>> additional RAs, reduce the valid lifetime. >>=20 >> In the crash scenarios you describe, you=E2=80=99re assuming a single = router on >> the network or >> at least only one router announcing the prefix(es) in question with = no >> persistent >> memory of the prefixes it was announcing across a reboot. In such a >> scenario, >> it seems to me that the following are also likely valid assumptions: >>=20 >> +The network has significant excess bandwidth compared to demand. >> +The small overhead of frequent RAs and short lifetimes is probably >> an acceptable tradeoff in this environment. >>=20 >> However, there are lots of other scenarios in the world where those >> assumptions >> won=E2=80=99t hold true and we should not seek to solve this problem = (which is >> generally >> applicable to residential and SMB environments) at the expense of all = of >> those >> other professionally administered environments. >=20 > Even with the default RA frequency, if you were to unprefer a prefix > upon, say, second RA that doesn't advertise it, and say, remove the > prefix after many other RAs are received, that would be a *big* > improvement to what we have now. I don=E2=80=99t like this idea because I can think of some scenarios = where you may receive multiple RAs from router A not containing the prefix in the same time frame that router B has not sent an additional RA containing the prefix, but it will do so in its next RA. There is no requirement for all routers on the same link to provide the same set of PIOs, nor are they required to use the same advertisement timers. I agree that it=E2=80=99s a bit of a corner case and it=E2=80=99s = certainly not an ideal way to configure a network, but it is not entirely unlikely to happen in the real world, it is within the current RFCs, it is valid functionality and = it is not broken by the expected behaviors today. >> In section 3.2.1, you advocate setting the A and L bits to their >> previous values >> for prefixes which are being deprecated. IMHO, this is incorrect and = the >> announcements calling for immediate deprecation should also indicate = that >> the prefix should no longer be auto-configured and should no longer = be >> considered on-link. >=20 > Not sure I follow. Could you please elaborate? Sure=E2=80=A6 In section 3.2.1 of your document, you advocate that if = the previously valid PIOs were set A=3D1 and/or L=3D1, then those values of the A and L = bits should be preserved in the RAs sent to deprecate them. My argument is that since you are attempting to make this a prefix that = hosts will no longer autoconfigure (A) and will no longer consider on-link = (L), that in reality, regardless of the previous state of the A and L bits in the = RAs announcing the prefix in a valid PIO, the new RAs since the prefix has = been deprecated should be sent with A=3D0, L=3D0 in order to signal the host that this prefix should not be auto configured and should no longer be considered on-link. >> Is there some unfortunate widely deployed behavior that interacts = poorly >> with setting A and L to 0 for these previously valid prefixes? >>=20 >> Finally, An editorial note=E2=80=A6 In Section 3, you state = =E2=80=9CFinally, Section >> 2.5 analyzes=E2=80=A6=E2=80=9D >> I believe this is intended to be a reference to section 3.2.2. >=20 > Nope. Section 3.2.2 talks about the interaction between dhcpv6-pd and > slaac. BUt it is section 2.5 that discusses other considerations for > dynamic/stable prefixes. For example, stable prefixes are not nice for > privacy. Fair enough, but in that case, I don=E2=80=99t think I would put it = after the description of section 3.2, nor would I use the word =E2=80=9CFinally=E2=80=9D as a lead-in to a = back-reference. Owen --Apple-Mail=_F20575FC-0DC7-479C-94C8-B953F19CF3AF Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
It is = worth noting that these values are tunable by the administrator
and the
RFC suggested defaults should never be = a hard-coded value.

With the following = exception, I don=E2=80=99t advocate modifying this on the client
side:
+Section 5.5.3 of RFC4862 should be = amended to specifically
allow the immediate deprecation of = a prefix by sending a valid
lifetime of 0 seconds. Hosts = should be required to honor
this as a signal that the = prefix is no longer valid.

Could you please elaborate on = this one?

I=E2=80=99m= not sure what I could do to elaborate. The addition of a specific = call-out that
even if the current behavior of =E2=89=A42 hours = =3D 2 hours is to be preserved, there should
be a special case = for =E2=80=9C0 seconds=E2=80=9D which causes the prefix to be = immediately
deprecated with extreme prejudice.

Hosts should be required to treat an RA containing = a prefix with a 0 second
valid lifetime as an invalid prefix = and immediately deprecate it from the interface
if it is in = use.





I do = think that generally speaking, your proposed modifications to CPE and
router behavior should be standardized and implemented.

A better = mitigation is to affect the preferred and possibly the valid
lifetimes in response to consecutive RAs from the same router = that lack
the original (stale) prefix. e.g., after two = consecutive RAs that do not
contain the existing prefix, = reduce the preferred lifetime. After two
additional RAs, = reduce the valid lifetime.

In = the crash scenarios you describe, you=E2=80=99re assuming a single = router on
the network or
at least only one = router announcing the prefix(es) in question with no
persistent
memory of the prefixes it was = announcing across a reboot. In such a
scenario,
it seems to me that the following are also likely valid = assumptions:

+The network has significant = excess bandwidth compared to demand.
+The small overhead = of frequent RAs and short lifetimes is probably
an = acceptable tradeoff in this environment.

However, there are lots of other scenarios in the world where = those
assumptions
won=E2=80=99t hold true = and we should not seek to solve this problem (which is
generally
applicable to residential and SMB = environments) at the expense of all of
those
other professionally administered environments.

Even with the default RA frequency, if you were to unprefer a = prefix
upon, say, = second RA that doesn't advertise it, and say, remove the
prefix after many other RAs are = received, that would be a *big*
improvement to what we have now.

I don=E2=80=99t = like this idea because I can think of some scenarios where = you
may receive multiple RAs from router A not containing the = prefix in the
same time frame that router B has not sent an = additional RA containing
the prefix, but it will do so in its = next RA.

There is no requirement for = all routers on the same link to provide the
same set of PIOs, = nor are they required to use the same = advertisement
timers.

I = agree that it=E2=80=99s a bit of a corner case and it=E2=80=99s = certainly not an ideal way
to configure a network, but it is = not entirely unlikely to happen in the
real world, it is = within the current RFCs, it is valid functionality and it
is = not broken by the expected behaviors today.

In = section 3.2.1, you advocate setting the A and L bits to their
previous values
for prefixes which are being = deprecated. IMHO, this is incorrect and the
announcements = calling for immediate deprecation should also indicate that
the prefix should no longer be auto-configured and should no = longer be
considered on-link.
Not sure I follow. Could you = please elaborate?

Sure=E2=80=A6 In section 3.2.1 of your document, you = advocate that if the previously
valid PIOs were set A=3D1 = and/or L=3D1, then those values of the A and L bits
should be = preserved in the RAs sent to deprecate them.

My argument is that since you are attempting to = make this a prefix that hosts
will no longer autoconfigure (A) = and will no longer consider on-link (L), that
in reality, = regardless of the previous state of the A and L bits in the = RAs
announcing the prefix in a valid PIO, the new RAs since = the prefix has been
deprecated should be sent with A=3D0, L=3D0 = in order to signal the host
that this prefix should not be = auto configured and should no longer be
considered = on-link.

Is = there some unfortunate widely deployed behavior that interacts poorly
with setting A and L to 0 for these previously valid = prefixes?

Finally, An editorial note=E2=80=A6= In Section 3, you state =E2=80=9CFinally, Section
2.5 = analyzes=E2=80=A6=E2=80=9D
I believe this is intended to = be a reference to section 3.2.2.

Nope. Section 3.2.2 talks about = the interaction between dhcpv6-pd and
slaac. BUt it is section 2.5 that discusses other = considerations for
dynamic/stable prefixes. For example, stable prefixes are not = nice for
privacy.


Fair enough, but in that = case, I don=E2=80=99t think I would put it after the description of = section 3.2,
nor would I use the word =E2=80=9CFinally=E2=80=9D = as a lead-in to a back-reference.

Owen




= --Apple-Mail=_F20575FC-0DC7-479C-94C8-B953F19CF3AF-- From nobody Sun Oct 27 00:58:26 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1248E120111 for ; Sun, 27 Oct 2019 00:58:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.497 X-Spam-Level: X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qJI-n2n_uZq8 for ; Sun, 27 Oct 2019 00:58:23 -0700 (PDT) Received: from mail-ot1-x336.google.com (mail-ot1-x336.google.com [IPv6:2607:f8b0:4864:20::336]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 398A3120110 for ; Sun, 27 Oct 2019 00:58:23 -0700 (PDT) Received: by mail-ot1-x336.google.com with SMTP id 53so4817385otv.4 for ; Sun, 27 Oct 2019 00:58:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=H/9smu29jBk/29gHq3vlVmqKNy4t5k1ioIOR1UjU25A=; b=B7VDNvKnNgT7SkRjlBQ0z23p1n5vSZurxqJMxIQ7o8EVJO/YfXLjeCBmZcjEGKCIpN jf0Rh/KW3/yahIha9uqBo5UZK0o2DR+NyrN6E2YHc40w03eqrywZS1Au3ajjKc96G8aq 17Db3yBuRKsOP4HAZALNwn5g2qg6OBVEO2MCzs61mutDIaBA3ZTjDYAywjbAPwrOzRA1 NSw3/IBOw2Nn+KO1pfgz87h0xUBcDWrkTqX5WeDrS9kBNHedFtwZnc6BV0GLFFsPJPL9 ffrq5jDW+vFUnkhvMN824pixhLBGry6CRziw/DCbR/in31UDpP7ld+HiCOgSqHrkGtQB Rv4Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=H/9smu29jBk/29gHq3vlVmqKNy4t5k1ioIOR1UjU25A=; b=bi/t5+EUH60ZmhqDnqca21iQrd72ZWyh6CEmoeoyK92k8OBXIV/d2VRaiLrvVMxhSL RyppH+xs64Q1Vt7ZrTwScVctKjfLOTvnf74lLGxjaC5yAMgkxA3dyGxP1ZNaHDCu/pp4 ilxHIu9e39GmtK5m9S3CMdLmGMeUw3sa3LLXTyVWEFYhvHFNTkNrc4Wd4kdiSvgGQHOV 18yDB8MjROnrDodJGdpaRA+lh0D+JAoEPg9W8tKAVOs9lEFvaHLpzZ9nHOHtzPa2DYik WfKJ7lyDUunslNhwjx06rijwOQeFy3BrpLy+AY5ZuBa0CP8rx7gcHtceQ30J4QsOX2pj 3QqQ== X-Gm-Message-State: APjAAAWQvhj8Dpeyg2PMOGO9k6bvkumScKuS2x9vYVLTvNBmzFt0gcU0 wZzboSXayr0PzP6GUZd/eb51UXTJ59hH75/GpFLexGey X-Google-Smtp-Source: APXvYqw570v2RKdOcEoNpd4mla4/M8La16MH2B+0tbUfT+Odpb+/tQr/6I/sxxX+Fn6LOhjW47QVAtQQSAoaSvzfE0g= X-Received: by 2002:a05:6830:43:: with SMTP id d3mr9707329otp.153.1572163102376; Sun, 27 Oct 2019 00:58:22 -0700 (PDT) MIME-Version: 1.0 References: <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com> In-Reply-To: <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com> From: Mark Smith Date: Sun, 27 Oct 2019 18:57:55 +1100 Message-ID: To: Owen DeLong Cc: Fernando Gont , v6ops list Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 07:58:25 -0000 So in summary, the proposal is to update RFCs, change 100s of millions of CPE implementations, and billions of IPv6 host implementations, to accommodate some ISPs who want to cling to an obsolete dynamic and dial up origin address provisioning model for always on Internet connections? Robustness is useful, however there needs to be a determined threshold where, beyond that, the cost of adding robustness exceeds the cost of properly fixing the problem that created the need for additional robustness in the first place. Making all CPE and all IPv6 hosts more robust to work around a problem caused by some ISPs' address provisioning systems and models is going to be far more expensive and incur costs on everybody (IETF, CPE vendors and host vendors, and their customers who indirectly pay CPE and host implementation costs), compared to those ISPs accepting that IPv6 customers require persistent prefixes and paying the costs of making changes to their own address provisioning systems. On Sun, 27 Oct 2019, 15:48 Owen DeLong, wrote: > > It is worth noting that these values are tunable by the administrator > and the > RFC suggested defaults should never be a hard-coded value. > > With the following exception, I don=E2=80=99t advocate modifying this on = the client > side: > +Section 5.5.3 of RFC4862 should be amended to specifically > allow the immediate deprecation of a prefix by sending a valid > lifetime of 0 seconds. Hosts should be required to honor > this as a signal that the prefix is no longer valid. > > > Could you please elaborate on this one? > > > I=E2=80=99m not sure what I could do to elaborate. The addition of a spec= ific call-out that > even if the current behavior of =E2=89=A42 hours =3D 2 hours is to be pre= served, there should > be a special case for =E2=80=9C0 seconds=E2=80=9D which causes the prefix= to be immediately > deprecated with extreme prejudice. > > Hosts should be required to treat an RA containing a prefix with a 0 seco= nd > valid lifetime as an invalid prefix and immediately deprecate it from the= interface > if it is in use. > > > > > > I do think that generally speaking, your proposed modifications to CPE an= d > router behavior should be standardized and implemented. > > A better mitigation is to affect the preferred and possibly the valid > lifetimes in response to consecutive RAs from the same router that lack > the original (stale) prefix. e.g., after two consecutive RAs that do not > contain the existing prefix, reduce the preferred lifetime. After two > additional RAs, reduce the valid lifetime. > > > In the crash scenarios you describe, you=E2=80=99re assuming a single rou= ter on > the network or > at least only one router announcing the prefix(es) in question with no > persistent > memory of the prefixes it was announcing across a reboot. In such a > scenario, > it seems to me that the following are also likely valid assumptions: > > +The network has significant excess bandwidth compared to demand. > +The small overhead of frequent RAs and short lifetimes is probably > an acceptable tradeoff in this environment. > > However, there are lots of other scenarios in the world where those > assumptions > won=E2=80=99t hold true and we should not seek to solve this problem (whi= ch is > generally > applicable to residential and SMB environments) at the expense of all of > those > other professionally administered environments. > > > Even with the default RA frequency, if you were to unprefer a prefix > upon, say, second RA that doesn't advertise it, and say, remove the > prefix after many other RAs are received, that would be a *big* > improvement to what we have now. > > > I don=E2=80=99t like this idea because I can think of some scenarios wher= e you > may receive multiple RAs from router A not containing the prefix in the > same time frame that router B has not sent an additional RA containing > the prefix, but it will do so in its next RA. > > There is no requirement for all routers on the same link to provide the > same set of PIOs, nor are they required to use the same advertisement > timers. > > I agree that it=E2=80=99s a bit of a corner case and it=E2=80=99s certain= ly not an ideal way > to configure a network, but it is not entirely unlikely to happen in the > real world, it is within the current RFCs, it is valid functionality and = it > is not broken by the expected behaviors today. > > In section 3.2.1, you advocate setting the A and L bits to their > previous values > for prefixes which are being deprecated. IMHO, this is incorrect and the > announcements calling for immediate deprecation should also indicate that > the prefix should no longer be auto-configured and should no longer be > considered on-link. > > > Not sure I follow. Could you please elaborate? > > > Sure=E2=80=A6 In section 3.2.1 of your document, you advocate that if the= previously > valid PIOs were set A=3D1 and/or L=3D1, then those values of the A and L = bits > should be preserved in the RAs sent to deprecate them. > > My argument is that since you are attempting to make this a prefix that h= osts > will no longer autoconfigure (A) and will no longer consider on-link (L),= that > in reality, regardless of the previous state of the A and L bits in the R= As > announcing the prefix in a valid PIO, the new RAs since the prefix has be= en > deprecated should be sent with A=3D0, L=3D0 in order to signal the host > that this prefix should not be auto configured and should no longer be > considered on-link. > > Is there some unfortunate widely deployed behavior that interacts poorly > with setting A and L to 0 for these previously valid prefixes? > > Finally, An editorial note=E2=80=A6 In Section 3, you state =E2=80=9CFina= lly, Section > 2.5 analyzes=E2=80=A6=E2=80=9D > I believe this is intended to be a reference to section 3.2.2. > > > Nope. Section 3.2.2 talks about the interaction between dhcpv6-pd and > slaac. BUt it is section 2.5 that discusses other considerations for > dynamic/stable prefixes. For example, stable prefixes are not nice for > privacy. > > > > Fair enough, but in that case, I don=E2=80=99t think I would put it after= the description of section 3.2, > nor would I use the word =E2=80=9CFinally=E2=80=9D as a lead-in to a back= -reference. > > Owen > > > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops From nobody Sun Oct 27 05:02:47 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83A66120128 for ; Sun, 27 Oct 2019 05:02:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0aQPMGAk4SU0 for ; Sun, 27 Oct 2019 05:02:43 -0700 (PDT) Received: from mail-qt1-x82d.google.com (mail-qt1-x82d.google.com [IPv6:2607:f8b0:4864:20::82d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D39F120127 for ; Sun, 27 Oct 2019 05:02:43 -0700 (PDT) Received: by mail-qt1-x82d.google.com with SMTP id z22so10452334qtq.11 for ; Sun, 27 Oct 2019 05:02:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=content-transfer-encoding:from:mime-version:date:message-id:subject :in-reply-to:references:to; bh=xsfbM29se1bIrATOvUFzH5SYbJmvD4Lxdznb8ypCsIg=; b=eEC/aouINY97f2+SW5SyOrbcYpjpNCEByOGL9YUEIAiwFx6/nr8ZvDx3wgojpHXNZt RXLwimtK7NW5XmmtJm54i7SJ8v0NzxLcTRbtoqw5SfMuGgKBNIC8DgXgMxTEFW8GoMf9 Zdk5Ft/p2PGeoYIfEWf7tzUvxpX2S1OFoyzLizkbBiJXXLMSlHLNR9SKRF3jeZibqK6I d9ba16oTwUWNhlio4Q/CI2W+bX1UgIMXmTGVmERPcl5BeS8Fn+SRJY8G6o+2nzBk8Yym 50fvDJAMCewVQBVl9YRKAC/+qCBf5XuceQKCoB5V2L3s0czYRfJ8YRQRneQ6FBJ86mqS qVSA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version:date :message-id:subject:in-reply-to:references:to; bh=xsfbM29se1bIrATOvUFzH5SYbJmvD4Lxdznb8ypCsIg=; b=ki3Z+KAwxeiqLRA9IBEuIiolWYXUK7KnXgVWxWJbivvdTgRetDybCH+WlXLZbFSvle 8gJ9U4XTLZvTCXBlPlfBLNZ4bwsTxZsLXOZq0WFxsgvcoWuoTwkx3xyMKze4h5ASv5V4 Il9yCqtkSyN+YrLKIftOiaIopOB71PknJrmhXpi6tjMzABLRXhydP5BFDrskTuHibFw/ eLYN9VEl7lxd8mt/9ig1G/tAc4r1rGQ9R7pXO9lQ12s35mWbF8iwf5qei0FRd7Af1S3T 9mgcYax+5RUndeCTVJ2WRkQ7NfJgOKZo4IukiXsvmca+Bq3v9SC17BR2Wnn7Ch/1e7M3 EvKQ== X-Gm-Message-State: APjAAAWuzXWYeGGGu/9aaFmRG24iRJf2LRfQTar6a3hcSg5C/wVhJBPg pCMZ+ZmbqZGrxIJ0try8cNSerz5oIUpDJA== X-Google-Smtp-Source: APXvYqzeJF4pfeJQZQ2eoxjzIJgV1MHLPRV/Md+c0eAMtWK4enjjVQrK5FAGhYdlvsZdFZkWBT5ySQ== X-Received: by 2002:ac8:7006:: with SMTP id x6mr12491217qtm.152.1572177762008; Sun, 27 Oct 2019 05:02:42 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:2097:1591:d7c2:2263? ([2601:18b:300:36ee:2097:1591:d7c2:2263]) by smtp.gmail.com with ESMTPSA id o201sm1207149qka.17.2019.10.27.05.02.41 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 27 Oct 2019 05:02:41 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Ted Lemon Mime-Version: 1.0 (1.0) Date: Sun, 27 Oct 2019 08:02:40 -0400 Message-Id: In-Reply-To: References: To: v6ops list X-Mailer: iPad Mail (17A878) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 12:02:46 -0000 Indeed, this would also not actually solve the problem. At present, the IS= Ps are doing something that is out of spec and causes problems. If we =E2=80= =9Cfix=E2=80=9D this by accommodating what they do, does that help, or does i= t just encourage them to continue doing it? What should be happening on the host with a prefix that=E2=80=99s deprecated= is that TCP connections should be timing out. This doesn=E2=80=99t take v= ery long. And if there is a new prefix being advertised on the link, that a= ddress should have a valid lifetime newer than the old prefix, meaning that t= he next TCP connection should come from that new prefix, not the old one. I think Fernando=E2=80=99s plan to shorten some timers makes sense, but shor= tening the minimum really doesn=E2=80=99t=E2=80=94it just opens up an opport= unity for an easy DoS, since I can now just send out death packets to the lo= cal network and break everything all at once. If you Really Really want to be able to have the routers send out RAs that d= eprecate the default route, and, as Mark is saying here, to upgrade millions= or perhaps billions of hosts, why not ask for something that=E2=80=99s a re= al improvement? First of all, fix CPEs so that they definitely support clean deprecation of p= refixes using PD. Second, fix RA so that it=E2=80=99s non-repudiable by a d= evice that doesn=E2=80=99t have the secret key. SEND does this, sort of. Nobody uses SEND because it tries to solve a too-b= ig problem and does it using obsolete technology. But the basic idea is go= od: include a public key in every RA that can be used to validate that the R= A was signed with the corresponding private key.=20 When another RA arrives, see if it was signed with the same key. If so, it= came from the same router, and can be trusted to update whatever informatio= n that router sent, including flash-deprecating a prefix. If not, ignore i= t. This avoids the problem of validating which RAs are good RAs: you just do wh= at you=E2=80=99re doing now with RAs. But if an RA goes out that supersedes= a previous RA, you don=E2=80=99t let it supersede it unless it=E2=80=99s pr= ovably from the same source. I=E2=80=99m currently doing something similar w= ith DNSSD Service Registration Protocol, using ECDSA, and the implementation= has a small enough footprint to run on IoT devices. Something like this wo= uld make SEND/CGA a bit more useful, I think. Note that this would not be required for hosts, and hence would not create u= nwanted privacy properties for host addresses. Also, when used e.g. in a h= otspot setting where it might be desirable to vary addresses, that=E2=80=99s= okay, because a new key can be generated regularly as long as the prefix on= the local link doesn=E2=80=99t need to be deprecated. From nobody Sun Oct 27 05:34:03 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D5F912009C for ; Sun, 27 Oct 2019 05:34:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.301 X-Spam-Level: X-Spam-Status: No, score=-2.301 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GKN_eWlWthjC for ; Sun, 27 Oct 2019 05:34:00 -0700 (PDT) Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B97012002F for ; Sun, 27 Oct 2019 05:33:59 -0700 (PDT) X-Envelope-To: v6ops@ietf.org Received: from crumpet.foobar.org (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id x9RCXsZq020271 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 27 Oct 2019 12:33:55 GMT (envelope-from nick@foobar.org) X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.foobar.org To: Ted Lemon Cc: v6ops list References: From: Nick Hilliard Message-ID: Date: Sun, 27 Oct 2019 12:33:53 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:52.0) Gecko/20100101 PostboxApp/7.0.7 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 12:34:02 -0000 Ted Lemon wrote on 27/10/2019 12:02: > If you Really Really want to be able to have the routers send out RAs > that deprecate the default route, and, as Mark is saying here, to > upgrade millions or perhaps billions of hosts, why not ask for > something that’s a real improvement? > > First of all, fix CPEs so that they definitely support clean > deprecation of prefixes using PD. Second, fix RA so that it’s > non-repudiable by a device that doesn’t have the secret key. you mean, turn it into stateful address autoconfiguration? :-) This isn't a criticism of what you're suggesting btw. It's an observation that the design philosophy behind SLAAC has intrinsic problems that cannot be resolved without dealing with state and state transfer, and that maybe we need to take a critical look at SLAAC and make potentially difficult decisions about whether or not it's fit for purpose for common deployment situations. Nick From nobody Sun Oct 27 06:42:07 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87718120128 for ; Sun, 27 Oct 2019 06:42:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vxvM08G6k67A for ; Sun, 27 Oct 2019 06:42:05 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B13C912006E for ; Sun, 27 Oct 2019 06:42:04 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iOinq-0000J3C; Sun, 27 Oct 2019 14:41:54 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: In-reply-to: Your message of "Sun, 27 Oct 2019 12:33:53 +0000 ." Date: Sun, 27 Oct 2019 14:41:54 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 13:42:07 -0000 > This isn't a criticism of what you're suggesting btw. It's an > observation that the design philosophy behind SLAAC has intrinsic > problems that cannot be resolved without dealing with state and > state transfer, and that maybe we need to take a critical look at > SLAAC and make potentially difficult decisions about whether or > not it's fit for purpose for common deployment situations. In this particular case (a CPE rebooting and getting a different prefix from the ISP), SLAAC has for the most part what we need. The little bit missing is that the CPE should write prefixes advertised using SLAAC to persistent storage which allows the CPE to invalidate stale prefixes after a reboot. Note that we could change SLAAC to allow the lifetime of a prefix to be set to zero, instead of having to wait for 2 hours. That might be an improvement but requires careful analsysis. From nobody Sun Oct 27 06:54:45 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0C1C120122 for ; Sun, 27 Oct 2019 06:54:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HWPziWo9ldmX for ; Sun, 27 Oct 2019 06:54:42 -0700 (PDT) Received: from mail-qk1-x735.google.com (mail-qk1-x735.google.com [IPv6:2607:f8b0:4864:20::735]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D075E120098 for ; Sun, 27 Oct 2019 06:54:41 -0700 (PDT) Received: by mail-qk1-x735.google.com with SMTP id q70so6098908qke.12 for ; Sun, 27 Oct 2019 06:54:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=2Iio03ETgIJOe7kfx6oVvrXs/VJyQLD1jn5DvORlzkg=; b=DlXBzoGZIbgNOni6t2XZANMP3qTI5DN6GcaYsU2EmSw73rxfJmvEtXIeq2uIkhjxUI y/TOqF64fR7v3OGmg0Uo8CRja7HF3L2eh72HMOmcG+bl6jQdElGva8z13A8K8o3HSVTZ aslb4hWQzck+cl1uzPJiirojOe+Llzl0i0Ilp6DPiyFZ84eru+V89OdBNPO+CTiD03Gf EVQe524+y+rinROZLmN+767HLzJ3qMn8o9DvnBjQtSHZl6aR2d66B4HfVO/+89+LpuSt cu5QPzF//ckWgS93NLvxs5/L9x8vvmii1e46u+epRnnWfFP/hBDkMKrVnsE2dhhT1Ycf nKyQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=2Iio03ETgIJOe7kfx6oVvrXs/VJyQLD1jn5DvORlzkg=; b=DQnpvgwRmSvSFuCZE57IaODw6xQcrINLQ2B9FLBDlqUuGdZ6d/578um+uZkyBUqNvo DESUsmCHHIejZdMgCePoifA38wGi0KkvqlhXLT/pKqHDZfrb6SZftdiCzigBU0GG/4PO rO2/5Umqv108h5TVVWlUyrmm24zgxFSIzy8lsNZelKvoOAdai+up7X3osYXgUciiim43 wk6nRQ2HuKrOttEHYlwzNGZlsHdfOZfvC7t6CopQYSw5YKtNb1bpp6yxeCzj6nrv2sPb ENAv6Bx4s/4URcaFoxVVjFqYz+P4HhQdwa+vzuIVd+vQCvs3v+AIt8dqJbsqvnulzeHJ kiNg== X-Gm-Message-State: APjAAAWyBP0cPg+mLgE0UNvLVLC6T0lWHNNMGn+VMcfBzoTp8E4iU3kC l/jna54DDg/voW6RzpBnH6dopA== X-Google-Smtp-Source: APXvYqyNRyko6hTR9rbN2GQtECACgmt5FJ/xQTDVW2uLXK655lry2/IrrMZwz9tRsEu9/xPvP02Otg== X-Received: by 2002:a05:620a:74b:: with SMTP id i11mr11432816qki.417.1572184480677; Sun, 27 Oct 2019 06:54:40 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:dc26:8796:798d:38c8? ([2601:18b:300:36ee:dc26:8796:798d:38c8]) by smtp.gmail.com with ESMTPSA id 44sm5491981qtt.13.2019.10.27.06.54.39 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 27 Oct 2019 06:54:40 -0700 (PDT) From: Ted Lemon Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_9B4FF6A1-4731-4D19-921C-D1E41909455D" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.4\)) Date: Sun, 27 Oct 2019 09:54:36 -0400 In-Reply-To: Cc: v6ops@ietf.org To: Philip Homburg References: X-Mailer: Apple Mail (2.3601.0.4) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 13:54:44 -0000 --Apple-Mail=_9B4FF6A1-4731-4D19-921C-D1E41909455D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 27, 2019, at 9:41 AM, Philip Homburg = wrote: > The little bit missing is that the CPE should write prefixes = advertised using > SLAAC to persistent storage which allows the CPE to invalidate stale = prefixes > after a reboot. Actually I do not believe this is correct behavior. Let us assume = prefix delegation. If we have prefix delegation, then when the CPE = comes back from a power cycle, it should reconfirm the prefix it had = previously; the assumption is that that prefix is still valid. This can = be handled in infrastructure=E2=80=94the ISP edge router should know = whether the prefix is still valid, because if it is it should be = advertising a route for it. If it is not still valid, then the CPE = router should attempt to renew it, which would go to the DHCP server = (possibly both messages would). If the lease on the address is still = valid, the ISP should renew the lease and not issue a new one. It is a = misconfiguration for some other thing to happen in this case. This = would then re-establish the route in the ISP edge router. If the ISP wants to deprecate the old prefix, the thing to do is not to = fail to renew it, but rather to renew it with a preferred lifetime of = zero and offer another prefix with a preferred lifetime that is not = zero. The CPE router should in this case advertise both prefixes, with = the applicable lifetimes. Using my limited SEND proposal, the = advertisement with a preferred lifetime of zero would be immediately = seen by all hosts that implement limited SEND, and they would start = using the new preferred prefix. Hosts that don=E2=80=99t implement = limited SEND would still behave correctly, but might take longer to stop = using the old prefix. This should be okay because the old valid = lifetime is still valid. That=E2=80=99s the way things should go when everything is working = correctly. If however the ISP=E2=80=99s DHCP server loses its cookies = and can=E2=80=99t renew the old prefix, then we=E2=80=99d see the new = behavior where hosts that implement limited SEND could immediately see = that the old prefix was no longer usable, and would stop using it in = preference to the new prefix. Hosts that don=E2=80=99t implement = limited SEND would behave as they behave today. And in the DoS attack case, because the attacker doesn=E2=80=99t have = the limited SEND key that was used to advertise the prefix that it is = attacking, only hosts that don=E2=80=99t implement limited SEND would = even see the attack. These hosts would reject any RA proposing a = lifetime shorter than two hours. So the DoS attack would be useless = both for hosts that implement limited SEND and hosts that don=E2=80=99t. --Apple-Mail=_9B4FF6A1-4731-4D19-921C-D1E41909455D Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 27, 2019, at 9:41 AM, Philip Homburg <pch-v6ops-9@u-1.phicoh.com> wrote:
The little bit missing is that the CPE should write prefixes = advertised using
SLAAC to persistent storage which allows the CPE to = invalidate stale prefixes
after a reboot.

Actually I do not believe this is correct = behavior.   Let us assume prefix delegation.   If we have = prefix delegation, then when the CPE comes back from a power cycle, it = should reconfirm the prefix it had previously; the assumption is that = that prefix is still valid.  This can be handled in = infrastructure=E2=80=94the ISP edge router should know whether the = prefix is still valid, because if it is it should be advertising a route = for it.   If it is not still valid, then the CPE router should = attempt to renew it, which would go to the DHCP server (possibly both = messages would).  If the lease on the address is still valid, the = ISP should renew the lease and not issue a new one.   It is a = misconfiguration for some other thing to happen in this case.   = This would then re-establish the route in the ISP edge router.

If the ISP wants to = deprecate the old prefix, the thing to do is not to fail to renew it, = but rather to renew it with a preferred lifetime of zero and offer = another prefix with a preferred lifetime that is not zero.   The = CPE router should in this case advertise both prefixes, with the = applicable lifetimes.  Using my limited SEND proposal, the = advertisement with a preferred lifetime of zero would be immediately = seen by all hosts that implement limited SEND, and they would start = using the new preferred prefix.  Hosts that don=E2=80=99t implement = limited SEND would still behave correctly, but might take longer to stop = using the old prefix.  This should be okay because the old valid = lifetime is still valid.

That=E2=80=99s the way things should go when everything is = working correctly.   If however the ISP=E2=80=99s DHCP server loses = its cookies and can=E2=80=99t renew the old prefix, then we=E2=80=99d = see the new behavior where hosts that implement limited SEND could = immediately see that the old prefix was no longer usable, and would stop = using it in preference to the new prefix.   Hosts that don=E2=80=99t = implement limited SEND would behave as they behave today.

And in the DoS attack = case, because the attacker doesn=E2=80=99t have the limited SEND key = that was used to advertise the prefix that it is attacking, only hosts = that don=E2=80=99t implement limited SEND would even see the attack. =  These hosts would reject any RA proposing a lifetime shorter than = two hours.   So the DoS attack would be useless both for hosts that = implement limited SEND and hosts that don=E2=80=99t.

= --Apple-Mail=_9B4FF6A1-4731-4D19-921C-D1E41909455D-- From nobody Sun Oct 27 07:07:38 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 035F612012C for ; Sun, 27 Oct 2019 07:07:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NkK1PPmvUiML for ; Sun, 27 Oct 2019 07:07:35 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 171DE12012A for ; Sun, 27 Oct 2019 07:07:35 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iOjCf-0000L9C; Sun, 27 Oct 2019 15:07:33 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: In-reply-to: Your message of "Sun, 27 Oct 2019 09:54:36 -0400 ." Date: Sun, 27 Oct 2019 15:07:26 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 14:07:36 -0000 > Actually I do not believe this is correct behavior. Let us > assume prefix delegation. If we have prefix delegation, then > when the CPE comes back from a power cycle, it should reconfirm > the prefix it had previously; the assumption is that that prefix > is still valid. This is not required behavior for a DHCP client. Traditionally, a client does not have to write a lease it received in persistent storage. In fact, in the case of DHCPv6-PD in some cases that actually triggers bugs on the ISP side and delays obtaining a new lease. Now I'm not opposed to trying to renew the previous lease. It makes the whole thing more complex and probably more fragile, but it is the right thing to do. However, the thing that actuualy makes it work (and no need for SEND there) is to have the CPE to advertise a stale prefix with lifetimes zero to inform hosts that this prefix no long works. From nobody Sun Oct 27 08:03:45 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10595120123 for ; Sun, 27 Oct 2019 08:03:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KEneuk9vaJWu for ; Sun, 27 Oct 2019 08:03:42 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [IPv6:2607:7c80:54:3::74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9B6712009E for ; Sun, 27 Oct 2019 08:03:42 -0700 (PDT) Received: from [IPv6:2a01:79c:cebd:47d8:1d3b:c8fc:8305:8a9a] (unknown [IPv6:2a01:79c:cebd:47d8:1d3b:c8fc:8305:8a9a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id DAA224E11B18; Sun, 27 Oct 2019 15:03:41 +0000 (UTC) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Ole Troan Mime-Version: 1.0 (1.0) Date: Sun, 27 Oct 2019 16:03:38 +0100 Message-Id: <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> References: Cc: v6ops@ietf.org In-Reply-To: To: Philip Homburg X-Mailer: iPhone Mail (17B5084a) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 15:03:44 -0000 > On 27 Oct 2019, at 14:42, Philip Homburg wrot= e: >=20 > =EF=BB=BF >>=20 >> This isn't a criticism of what you're suggesting btw. It's an >> observation that the design philosophy behind SLAAC has intrinsic >> problems that cannot be resolved without dealing with state and >> state transfer, and that maybe we need to take a critical look at >> SLAAC and make potentially difficult decisions about whether or >> not it's fit for purpose for common deployment situations. >=20 > In this particular case (a CPE rebooting and getting a different prefix fr= om > the ISP), SLAAC has for the most part what we need. >=20 > The little bit missing is that the CPE should write prefixes advertised us= ing > SLAAC to persistent storage which allows the CPE to invalidate stale prefi= xes > after a reboot. >=20 > Note that we could change SLAAC to allow the lifetime of a prefix to be > set to zero, instead of having to wait for 2 hours. That might be an > improvement but requires careful analsysis. Can you explain how operating a public service should work on this type of n= etwork? Cheers=20 Ole From nobody Sun Oct 27 08:05:42 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12ED9120086 for ; Sun, 27 Oct 2019 08:05:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tBCWtq9Dv-_X for ; Sun, 27 Oct 2019 08:05:38 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5AEF312009E for ; Sun, 27 Oct 2019 08:05:38 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iOk6q-0000IyC; Sun, 27 Oct 2019 16:05:36 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: In-reply-to: Your message of "Sun, 27 Oct 2019 08:02:40 -0400 ." Date: Sun, 27 Oct 2019 16:05:35 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 15:05:40 -0000 > Indeed, this would also > not actually solve the problem. At present, the ISPs are doing > something that is out of spec and causes problems. If we fix this > by accommodating what they do, does that help, or does it just > encourage them to continue doing it? At the moment, ISPs are doing something that sort of works in IPv4 because of NAT. It causes significant issues in IPv6. Of course, can we can tell ISPs that they are doing it wrong and that they should not deploy IPv6 until they have fixed their networks. I would like to have IPv6 now. And if that requires some tweaks to deal with broken behavior then so be it. > If you Really Really want to be able to have the routers send out > RAs that deprecate the default route, and, as Mark is saying here, > to upgrade millions or perhaps billions of hosts, why not ask for > something thats a real improvement? Because bundling features is a good way to ensure that nothing gets done. Dealing with flash renumbering in the CPE is a relatively small tweak that can be implemented at any time. > Second, fix RA so that its > non-repudiable by a device that doesnt have the secret key. If you think that this is an important thing to fix, feel free to talk about it. But why in this discussion? SEND doesn't do anything for flash renumbering. From an operational point of view, RA-guard is much more attractive then SEND. So it is not clear to me that there is any need for SEND. But I could be wrong. In any case, if there is a need to discuss SEND we could do that separately. This discussion is on how to deal with flash renumbering. From nobody Sun Oct 27 09:30:03 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2A6F120086 for ; Sun, 27 Oct 2019 09:30:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SxPD2O2o8gO3 for ; Sun, 27 Oct 2019 09:30:00 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2D32120072 for ; Sun, 27 Oct 2019 09:29:59 -0700 (PDT) Received: from [10.125.79.39] (unknown [191.241.228.139]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id C6B14868E0; Sun, 27 Oct 2019 17:29:55 +0100 (CET) To: Mark Smith , Owen DeLong Cc: v6ops list References: <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com> From: Fernando Gont Openpgp: preference=signencrypt Message-ID: Date: Sun, 27 Oct 2019 13:29:32 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 16:30:02 -0000 On 27/10/19 04:57, Mark Smith wrote: > So in summary, the proposal is to update RFCs, change 100s of millions > of CPE implementations, and billions of IPv6 host implementations, to > accommodate some ISPs who want to cling to an obsolete dynamic and > dial up origin address provisioning model for always on Internet > connections? Once more: the CPE router case is just *one of many* scenarios that may lead to the problem described in the document. The discussion about CPEs has to do with the CPEs doing what is right -- regardless of whether the ISP renumbers or not. Robustness has a lot to do with being able to gracefully handle the case when others screw up. > Robustness is useful, however there needs to be a determined threshold > where, beyond that, the cost of adding robustness exceeds the cost of > properly fixing the problem that created the need for additional > robustness in the first place. Could you please point at any specific part of the document that you object to? > Making all CPE and all IPv6 hosts more robust to work around a problem What we describe is what CPEs should be doing to respect the protocol semantics. Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Sun Oct 27 10:15:06 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49F8312006D for ; Sun, 27 Oct 2019 10:15:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4io2T3XhvpG4 for ; Sun, 27 Oct 2019 10:15:03 -0700 (PDT) Received: from mail-qk1-x72b.google.com (mail-qk1-x72b.google.com [IPv6:2607:f8b0:4864:20::72b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D8D7120046 for ; Sun, 27 Oct 2019 10:15:03 -0700 (PDT) Received: by mail-qk1-x72b.google.com with SMTP id m4so6374728qke.9 for ; Sun, 27 Oct 2019 10:15:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=TUCYEm7acOaJcIWjzdoURAEG5h9aJ4R2aqDwgfEdlzc=; b=EqVw8xNRgYLBQ4bFBstt/f0hcAqUaTd/eE1kn203WWQpyB8LFVU8Znn88tUQQ8b21+ QOCQtAiRX8ZtG/Odmk9UOc//4cRAdoQ14acq19FvPO+2dVp9vDTf61yt6GRGwEDw5NVd eHdPyFfm8rhVgZuqIVyNzUmAMb3Rsqd9/cs5c3/bLiAM13pIC/gbtH3EQhzbNKDW42OY Ys4c0uwCLSpy6WRE/ZJ+iT96RuKv25oJ8f1VX8ebecqQizTMaku+CBXElTmqJ8S4dUy/ u/Ma4/OD9AOrGstim4PQr70kDxtlfCkuiNH6HB46fzgQqz+Rln1AaFgWOgcSQWdU750T FMCQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=TUCYEm7acOaJcIWjzdoURAEG5h9aJ4R2aqDwgfEdlzc=; b=HQO7u30mTmDaMFO9V35zcdt5DNvvb1NJv2zXTxGhOTcMLsMW0HNg7l2/PkH30IFJQu 4t8VsAtazLQVmTOWwn/MOtzeOmQTbhbC+5DtQV3zRVlnHoeVWicfRdd0XPV23h0BdRMw gzkPkKUHD3YRcWUZWUFsXduW5y4koQ5UTrUKl+9eAACv6/7Yyvq0FvOkCnZgpgTJOPX+ /zaNBvshqxU6lJz1FcvWZv604ifBKJM3aaLJ/Rv2vRm0Gkn4s/dgW2xA6GfHX2wOtkdO fMS1L2dbpTkUzt+pIDNbbyvJ1IlFvT8U9lG5pn2961fd6hjWEnF2glbkbrT0wzaDk8by VuXg== X-Gm-Message-State: APjAAAUe5hbuhWL1UqWuouyLp3Ae4Gf5sMyreo9K15SUoKf96TXUi025 x/EKo0EcmlPGy2FtyjzLwwdOvFVgqsqfmg== X-Google-Smtp-Source: APXvYqzIi49hnI0lzzHbkPh4O7czZzUi1Kj9WxNhkyDta6mx2beOMPEvJreL6ILP+2xynhztrmSYog== X-Received: by 2002:a37:85c1:: with SMTP id h184mr12017038qkd.195.1572196502413; Sun, 27 Oct 2019 10:15:02 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:a0de:ef21:f9e9:1e01? ([2601:18b:300:36ee:a0de:ef21:f9e9:1e01]) by smtp.gmail.com with ESMTPSA id p4sm4668361qkf.112.2019.10.27.10.15.01 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 27 Oct 2019 10:15:01 -0700 (PDT) From: Ted Lemon Message-Id: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_C6234B18-87C1-44E3-9486-71D73A38866A" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.4\)) Date: Sun, 27 Oct 2019 13:14:59 -0400 In-Reply-To: Cc: v6ops@ietf.org To: Philip Homburg References: X-Mailer: Apple Mail (2.3601.0.4) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 17:15:05 -0000 --Apple-Mail=_C6234B18-87C1-44E3-9486-71D73A38866A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 27, 2019, at 11:05 AM, Philip Homburg = wrote: > If you think that this is an important thing to fix, feel free to=20 > talk about it. But why in this discussion? SEND doesn't do anything = for > flash renumbering. =46rom an operational point of view, RA-guard is = much > more attractive then SEND. So it is not clear to me that there is any > need for SEND. But I could be wrong. In any case, if there is a need > to discuss SEND we could do that separately. I think you missed my point. You can=E2=80=99t do flash renumbering by = advertising a prefix with a valid lifetime of zero, because that will be = ignored by hosts. If it were not ignored by hosts, it would be a very = effective DoS vector. And so if you want to be able to flash = deprecate a route, you need some way to validate that the deprecation is = coming from the same source as the route. Hence my suggested = =E2=80=9Climited SEND=E2=80=9D. Limited SEND would not be hard to implement. Yes, it would be = marginally harder than just saying that hosts should accept flash = deprecation of prefixes. But nobody with any sense is going to = implement that in their IP stack, so in practice if you want this to = work, you need some way to do flash deprecations that doesn=E2=80=99t = create a massive attack vector. --Apple-Mail=_C6234B18-87C1-44E3-9486-71D73A38866A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 27, 2019, at 11:05 AM, Philip Homburg <pch-v6ops-9@u-1.phicoh.com> wrote:
If you think that this is an important thing to fix, feel = free to 
talk about = it. But why in this discussion? SEND doesn't do anything for
flash = renumbering. =46rom an operational point of view, RA-guard is = much
more = attractive then SEND. So it is not clear to me that there is = any
need for = SEND. But I could be wrong. In any case, if there is a need
to discuss = SEND we could do that separately.

I think you missed my point.  You = can=E2=80=99t do flash renumbering by advertising a prefix with a valid = lifetime of zero, because that will be ignored by hosts.   If it = were not ignored by hosts, it would be a very effective DoS vector. =    And so if you want to be able to flash deprecate a route, = you need some way to validate that the deprecation is coming from the = same source as the route.   Hence my suggested =E2=80=9Climited = SEND=E2=80=9D.

Limited SEND would not be hard to implement.   Yes, it = would be marginally harder than just saying that hosts should accept = flash deprecation of prefixes.   But nobody with any sense is going = to implement that in their IP stack, so in practice if you want this to = work, you need some way to do flash deprecations that doesn=E2=80=99t = create a massive attack vector.

= --Apple-Mail=_C6234B18-87C1-44E3-9486-71D73A38866A-- From nobody Sun Oct 27 12:05:02 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6ACDF12004E for ; Sun, 27 Oct 2019 12:05:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.198 X-Spam-Level: X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3709WnzBTYgu for ; Sun, 27 Oct 2019 12:04:59 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [130.37.15.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56207120024 for ; Sun, 27 Oct 2019 12:04:59 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iOnqN-0000EpC; Sun, 27 Oct 2019 20:04:51 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> In-reply-to: Your message of "Sun, 27 Oct 2019 16:03:38 +0100 ." <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> Date: Sun, 27 Oct 2019 20:04:45 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 19:05:01 -0000 > > In this particular case (a CPE rebooting and getting a different prefix fro > m > > the ISP), SLAAC has for the most part what we need. > > > > The little bit missing is that the CPE should write prefixes advertised usi > ng > > SLAAC to persistent storage which allows the CPE to invalidate stale prefix > es > > after a reboot. > > > > Note that we could change SLAAC to allow the lifetime of a prefix to be > > set to zero, instead of having to wait for 2 hours. That might be an > > improvement but requires careful analsysis. > > Can you explain how operating a public service should work on this > type of network? Could you be more specific what you consider a 'public service' and what you expect to break? What I described is basically what happens on IPv4 when a CPE uses NAT and gets a new IPv4 address from the ISP. Flash renumbering is far from ideal, but a reality on the current internet. Any application that is suitable for home use is expected to deal with that scenario. Note that with automatic DNS updates, you can probably run a mail server (or your personal 'cloud') on such a link. But that is not a common use case at the moment. From nobody Sun Oct 27 12:06:19 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4830B12004E for ; Sun, 27 Oct 2019 12:06:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N8pQdDAindkt for ; Sun, 27 Oct 2019 12:06:16 -0700 (PDT) Received: from mail-pl1-x62f.google.com (mail-pl1-x62f.google.com [IPv6:2607:f8b0:4864:20::62f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB507120024 for ; Sun, 27 Oct 2019 12:06:16 -0700 (PDT) Received: by mail-pl1-x62f.google.com with SMTP id y8so4247333plk.0 for ; Sun, 27 Oct 2019 12:06:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=t2nwAeZA4w/6sIOUc1Xx2moMlutAj31HHSxf8wc6hfw=; b=KcpivEcPbRf8asqVTP8qGVZ9/Gy+5IgA5imtmuk6OLOX4n+fIv2YICGUPvrGQ/TGWB pch53HxKNnRbKO95XeMlG7Iq4MM7ocoWwDtH0v77U5XVRMNFVIR7tUUVCW4bxA4XTc5R v5spGMnlUQklmB79N7yLZ8gJKsL8WCw+3ECX+vUdnceicYWz2sqqAppp7r/Uq4JikABs 6gL6cenv6wKuufWu1etLX2SHEe0vnVX+ahSPFIKRqvz7RIDITBp8XXIJhi9GklSOMUII oeOzUF6VcGtf5KX/qQaBVR7UfuDwfcDmpuObRYiPl3M6KFs2ix7FTq+Hk0yVP5puRqsV Me4g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=t2nwAeZA4w/6sIOUc1Xx2moMlutAj31HHSxf8wc6hfw=; b=bXNfxXBH6Z2NHIttM7aETP3lZjqec3peM+dktxIRlEznFUwnMFSg3Un2aBjru43UrK yqPT02MVAltDyo9fh4oBAaCVtuVZgUhn9N0XfzJEwdxr578qYi6tIHjAzNRbcC5z+2tI hGDDX/BPYJWuak8ICob3XR9HckxFinFs5MMIt6taL8GlsnfCpdGjCEmm9uFCZpSi4MRO a3p1EtMDzrCU3eTygOMONujaqKTF8Pee5QWqPErQJn0FbXSpJ49OEnpCBrFIpN7diKYo kYkw2OYw/1SoePPmcgt6reift3L92RbzXpA7lsIn1qrywb45O8Yo1bCQ9tSPxYFlXLAj Dcsg== X-Gm-Message-State: APjAAAUmOvo4ahOL9JLb9lWnDfMsLeJc8CDRWf8Njd7TtRW1REPtgmlC QNy79qXIbdJroez7D1iVrAWvleq1 X-Google-Smtp-Source: APXvYqwcAgO5GWxlANZr2qK/Ey21cbsWoth6Zf7H4eA6p9Fcb711pgQ5w8/56vqZMMkgVTDvKPcVuA== X-Received: by 2002:a17:902:6b88:: with SMTP id p8mr15802670plk.80.1572203176004; Sun, 27 Oct 2019 12:06:16 -0700 (PDT) Received: from [192.168.178.30] (46.137.69.111.dynamic.snap.net.nz. [111.69.137.46]) by smtp.gmail.com with ESMTPSA id y20sm9463934pge.48.2019.10.27.12.06.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 27 Oct 2019 12:06:15 -0700 (PDT) To: Fernando Gont , Mark Smith , Owen DeLong Cc: v6ops list References: <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com> From: Brian E Carpenter Message-ID: <4cfa9c73-dd82-13bc-16a7-5c11ac48d03a@gmail.com> Date: Mon, 28 Oct 2019 08:06:12 +1300 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 19:06:18 -0000 On 28-Oct-19 05:29, Fernando Gont wrote: ... > Robustness has a lot to do with being able to gracefully handle the case > when others screw up. This. We can't make the world perfect, but we can make individual components that expect imperfection. Brian From nobody Sun Oct 27 12:31:26 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15C81120091 for ; Sun, 27 Oct 2019 12:31:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.999 X-Spam-Level: X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pS7mzoguuexn for ; Sun, 27 Oct 2019 12:31:17 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 6F170120024 for ; Sun, 27 Oct 2019 12:31:15 -0700 (PDT) Received: from kiev.delong.com (kiev.delong.com [IPv6:2620:0:930:0:0:0:200:5]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9RJVExA031317 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 27 Oct 2019 12:31:15 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9RJVExA031317 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572204675; bh=xYOWx5hYxYzwpoKEWdfX2AL/oJSyaTRIlSrn6Y1UMZM=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=uDHVGGhAXM/ORFmfzzBFRphhryaGYI/PCtg9XJF4brupFrYpRUm1kr/leEjOY+1bA 7Mup5C+vgHeM2yymUEt8jY0vqCh6VFs7e8PNVmSnfb4TTmPU0t+38KWJQhtUV2he18 8GTDuTxZ5Pl9GauJ93xo8Y758wkHINrf4Q0f2Jco= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Owen DeLong In-Reply-To: Date: Sun, 27 Oct 2019 12:31:14 -0700 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <413D25D1-5969-4677-B524-8B59850313F9@delong.com> References: To: Philip Homburg X-Mailer: Apple Mail (2.3445.104.11) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [IPv6:2620:0:930:0:0:0:200:2]); Sun, 27 Oct 2019 12:31:15 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 19:31:25 -0000 > On Oct 27, 2019, at 07:07 , Philip Homburg = wrote: >=20 >> Actually I do not believe this is correct behavior. Let us >> assume prefix delegation. If we have prefix delegation, then >> when the CPE comes back from a power cycle, it should reconfirm >> the prefix it had previously; the assumption is that that prefix >> is still valid. =20 >=20 > This is not required behavior for a DHCP client. Traditionally, a = client > does not have to write a lease it received in persistent storage. In=20= > fact, in the case of DHCPv6-PD in some cases that actually triggers = bugs > on the ISP side and delays obtaining a new lease. >=20 > Now I'm not opposed to trying to renew the previous lease. It makes = the > whole thing more complex and probably more fragile, but it is the = right > thing to do. >=20 > However, the thing that actuualy makes it work (and no need for SEND = there) > is to have the CPE to advertise a stale prefix with lifetimes zero to > inform hosts that this prefix no long works. How does the CPE identify a stale prefix if it hasn=E2=80=99t written = its previous prefixes to persistent storage? Owen From nobody Sun Oct 27 12:37:05 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7683120024 for ; Sun, 27 Oct 2019 12:37:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.998 X-Spam-Level: X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GqWTjk_w50Iz for ; Sun, 27 Oct 2019 12:36:57 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 5DD7D120052 for ; Sun, 27 Oct 2019 12:36:56 -0700 (PDT) Received: from kiev.delong.com (kiev.delong.com [IPv6:2620:0:930:0:0:0:200:5]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9RJZsDi032645 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 27 Oct 2019 12:35:55 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9RJZsDi032645 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572204955; bh=eVZ9RBwwImxPlLGaCflhJrjRnGW4SBT17IZKBUePvA4=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=W38hnBqaXvlBAf9YwCl+u0jQiYkFnr4yE1PmNGIDrnnVM5c3e4dGmbA2Zwleq5F1M QXlK3PybiqlpPmUy7rDifvieiUZKOgRvpgs4yCT7fA8snRf2ikKpK5vheA1d+ZAWMs zA2XwL5bRwBVf2EKKXKav1HX1WFDDB9fAkDw6yKs= From: Owen DeLong Message-Id: <3E4C671B-A03E-4A3F-A68B-5849BDCC6267@delong.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_5B4460ED-68D4-4A40-BAAE-975C08F6AC8A" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Sun, 27 Oct 2019 12:35:54 -0700 In-Reply-To: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> Cc: Philip Homburg , v6ops@ietf.org To: Ted Lemon References: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> X-Mailer: Apple Mail (2.3445.104.11) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [IPv6:2620:0:930:0:0:0:200:2]); Sun, 27 Oct 2019 12:35:55 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 19:37:03 -0000 --Apple-Mail=_5B4460ED-68D4-4A40-BAAE-975C08F6AC8A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 27, 2019, at 10:14 , Ted Lemon wrote: >=20 > On Oct 27, 2019, at 11:05 AM, Philip Homburg = > wrote: >> If you think that this is an important thing to fix, feel free to=20 >> talk about it. But why in this discussion? SEND doesn't do anything = for >> flash renumbering. =46rom an operational point of view, RA-guard is = much >> more attractive then SEND. So it is not clear to me that there is any >> need for SEND. But I could be wrong. In any case, if there is a need >> to discuss SEND we could do that separately. >=20 > I think you missed my point. You can=E2=80=99t do flash renumbering = by advertising a prefix with a valid lifetime of zero, because that will = be ignored by hosts. If it were not ignored by hosts, it would be a = very effective DoS vector. And so if you want to be able to flash = deprecate a route, you need some way to validate that the deprecation is = coming from the same source as the route. Hence my suggested = =E2=80=9Climited SEND=E2=80=9D. >=20 > Limited SEND would not be hard to implement. Yes, it would be = marginally harder than just saying that hosts should accept flash = deprecation of prefixes. But nobody with any sense is going to = implement that in their IP stack, so in practice if you want this to = work, you need some way to do flash deprecations that doesn=E2=80=99t = create a massive attack vector. It=E2=80=99s only a DOS vector if the attacker is already on-LAN. I recognize that there are environments where that is expected behavior = (e.g. Coffee Shop Wifi, University networks, etc.),but it=E2=80=99s not the case for the average residential CPE and = residential LAN segments. In the vast majority of situations where I would expect hostile hosts to = be likely to be on LAN, I don=E2=80=99t think I=E2=80=99d be using SLAAC for address assignment in the first place. Most likely, I=E2=80=99d = want stateful DHCP in such instances. Owen --Apple-Mail=_5B4460ED-68D4-4A40-BAAE-975C08F6AC8A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Oct 27, 2019, at 10:14 , Ted Lemon <mellon@fugue.com> = wrote:

On Oct 27, 2019, at = 11:05 AM, Philip Homburg <pch-v6ops-9@u-1.phicoh.com> wrote:
If you think = that this is an important thing to fix, feel free to 
talk about = it. But why in this discussion? SEND doesn't do anything for
flash = renumbering. =46rom an operational point of view, RA-guard is = much
more = attractive then SEND. So it is not clear to me that there is = any
need for = SEND. But I could be wrong. In any case, if there is a need
to discuss = SEND we could do that separately.

I think you missed my point.  You = can=E2=80=99t do flash renumbering by advertising a prefix with a valid = lifetime of zero, because that will be ignored by hosts.   If it = were not ignored by hosts, it would be a very effective DoS vector. =    And so if you want to be able to flash deprecate a route, = you need some way to validate that the deprecation is coming from the = same source as the route.   Hence my suggested =E2=80=9Climited = SEND=E2=80=9D.

Limited SEND would not be hard to implement.   Yes, it = would be marginally harder than just saying that hosts should accept = flash deprecation of prefixes.   But nobody with any sense is going = to implement that in their IP stack, so in practice if you want this to = work, you need some way to do flash deprecations that doesn=E2=80=99t = create a massive attack vector.

It=E2=80=99s only a DOS vector if the attacker is = already on-LAN.

I recognize that = there are environments where that is expected behavior (e.g. Coffee Shop = Wifi, University networks, etc.),but
it=E2=80=99s not the case = for the average residential CPE and residential LAN = segments.

In the vast majority of = situations where I would expect hostile hosts to be likely to be on LAN, = I don=E2=80=99t think I=E2=80=99d be using
SLAAC for address = assignment in the first place. Most likely, I=E2=80=99d want stateful = DHCP in such instances.

Owen

= --Apple-Mail=_5B4460ED-68D4-4A40-BAAE-975C08F6AC8A-- From nobody Sun Oct 27 12:44:52 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FBB7120052 for ; Sun, 27 Oct 2019 12:44:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s_JmcvWG7hFo for ; Sun, 27 Oct 2019 12:44:47 -0700 (PDT) Received: from mail-qt1-x82e.google.com (mail-qt1-x82e.google.com [IPv6:2607:f8b0:4864:20::82e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 661FD120046 for ; Sun, 27 Oct 2019 12:44:47 -0700 (PDT) Received: by mail-qt1-x82e.google.com with SMTP id t26so1492507qtr.5 for ; Sun, 27 Oct 2019 12:44:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=/TeD+KmhyrVQ6BJqGbaB3rV6y4+vqCliSZNIa8nyOus=; b=EYI445FI2DkDyd/EaY4w3srLQcj2IOD6uUjpQxVQr97fpUuewdJ8PIhCqUNJrGpItf 0pRL1T9gIwW/vCFH+H0S6TGb3nxgiPAMGCOjazN7kaaWEnMxXu2J5KqCuVD06mLycIPm l6YsARR68b6BVqbHy/sEESwSGdYejg03ivvqDYg/3pu7P1lJFFGXL/lH5BWm4A73K0Ta 4Fvm/qbomXShuMgh/zxsd5uYj8vhhnQmvDPhX2GtVCJYZ5kMPPU6fvV4FZZCYyr5s60C AOTcskY53GKwoMHTL2bc5ONHgD4nSwDJDvJZWt63tPKdhIK4WA7PjvxAXGKIIVX7obSf RvXQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=/TeD+KmhyrVQ6BJqGbaB3rV6y4+vqCliSZNIa8nyOus=; b=iH8baJOIEPQIwSyjNf1F9VLscsjULyimeaRkW73WAe5iS5dwoZqHJs0BuLvdWPehJP bl7OMaVGDgv8IjlEVgIssmOMZmVhY8tGR+29SBNxYQGjbRQniRzSIiCWUHRTkQI5/+ZP N/aNC/pZwlqrGDGmd2SXw9aB2gJBNm9XEG9kqCODo2b1S1wa6lpd0FaZYQVcMhjmTOPK smf+WLPfeuD9L7aAVBFxOUIU+Y4IjcOw7QaBzTAA33sao4n0/uAG5z9bhKmx7NzMGXr2 mT2I09FcW7Mtq1QJcMK6sfiwuOIcJx7S7gX5HZRCrALizmHBYpi0egJChN3Mpx2h+z2r PSaA== X-Gm-Message-State: APjAAAVWO/LXca62gPxoieWMA19wskpLo5VxqHiz6gmJxR6CkGGkG7lk QckpxY62gbd+rDDA+9f5ZoCLMv1NdgE5QQ== X-Google-Smtp-Source: APXvYqxsLgaotOE1g/WHaRyRNBjvx5gdyMD77MPNfY8ruFFXI4NU/F9e8fpXzbZ59SSkj1n3v8IEuQ== X-Received: by 2002:ac8:5547:: with SMTP id o7mr13648170qtr.315.1572205486521; Sun, 27 Oct 2019 12:44:46 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:a0de:ef21:f9e9:1e01? ([2601:18b:300:36ee:a0de:ef21:f9e9:1e01]) by smtp.gmail.com with ESMTPSA id x64sm4584890qkd.88.2019.10.27.12.44.45 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 27 Oct 2019 12:44:46 -0700 (PDT) From: Ted Lemon Message-Id: <85CFF978-D4A6-462C-9641-78215B4E9D06@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_A84FE1D5-1ECB-42E5-A213-F67F85443ED9" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.4\)) Date: Sun, 27 Oct 2019 15:44:43 -0400 In-Reply-To: Cc: Philip Homburg , v6ops@ietf.org To: Owen DeLong References: X-Mailer: Apple Mail (2.3601.0.4) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 19:44:51 -0000 --Apple-Mail=_A84FE1D5-1ECB-42E5-A213-F67F85443ED9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 27, 2019, at 3:30 PM, Owen DeLong wrote: > So this still requires that the CPE has written the lease to = persistent storage. Currently many CPE do not do this. Strictly speaking, if the CPE asks for a PD, and the server had already = given it a prefix, it should get the same prefix, even if renumbering is = happening; in the case of renumbering, it should get two prefixes, and = should use one as the preferred prefix and the other as a deprecated = prefix. There is actually no need to write the prefix to stable = storage if the DHCP server is behaving correctly. However, in the case of incorrect behavior, end users will see more = stable behavior in the case that the CPE remembers the old prefix. > I don=E2=80=99t know of a single DHCPv6 server which operates that way = currently. Can you point to a working example? Honestly, I have no idea. But that is what the RFC says you should do. = If existing DHCP servers aren=E2=80=99t doing this, they are not fully = implementing the specification. I think in general, current DHCP = servers just don=E2=80=99t allow you to cleanly deprecate a prefix, = because nobody asked for this capability. DHCP servers I know of will = not renumber at all. You can trick them into forcing a flash renumber = by hacking the lease database, but that=E2=80=99s not correct behavior. > While there may be advantages to limited SEND, I don=E2=80=99t see = that as a reason not to implement this particular fix across the board = since it would benefit both hosts implementing limited SEND as well as = hosts not implementing it. To which fix are you referring? --Apple-Mail=_A84FE1D5-1ECB-42E5-A213-F67F85443ED9 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 27, 2019, at 3:30 PM, Owen DeLong <owen@delong.com> = wrote:
So = this still requires that the CPE has written the lease to persistent = storage. Currently many CPE do not do this.

Strictly speaking, if the CPE asks for a PD, and = the server had already given it a prefix, it should get the same prefix, = even if renumbering is happening; in the case of renumbering, it should = get two prefixes, and should use one as the preferred prefix and the = other as a deprecated prefix.   There is actually no need to write = the prefix to stable storage if the DHCP server is behaving = correctly.

However, in the case of = incorrect behavior, end users will see more stable behavior in the case = that the CPE remembers the old prefix.

I don=E2=80=99t= know of a single DHCPv6 server which operates that way currently. Can = you point to a working example?

Honestly, I have no idea.  But = that is what the RFC says you should do.   If existing DHCP servers = aren=E2=80=99t doing this, they are not fully implementing the = specification.  I think in general, current DHCP servers just = don=E2=80=99t allow you to cleanly deprecate a prefix, because nobody = asked for this capability.   DHCP servers I know of will not = renumber at all.   You can trick them into forcing a flash renumber = by hacking the lease database, but that=E2=80=99s not correct = behavior.

While there may be = advantages to limited SEND, I don=E2=80=99t see that as a reason not to = implement this particular fix across the board since it would benefit = both hosts implementing limited SEND as well as hosts not implementing = it.

To which fix are = you referring?


= --Apple-Mail=_A84FE1D5-1ECB-42E5-A213-F67F85443ED9-- From nobody Sun Oct 27 12:46:22 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 326EC120046 for ; Sun, 27 Oct 2019 12:46:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id svbQs4yqSgWM for ; Sun, 27 Oct 2019 12:46:17 -0700 (PDT) Received: from mail-qt1-x82f.google.com (mail-qt1-x82f.google.com [IPv6:2607:f8b0:4864:20::82f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BCAA120052 for ; Sun, 27 Oct 2019 12:46:17 -0700 (PDT) Received: by mail-qt1-x82f.google.com with SMTP id l3so1013910qtp.2 for ; Sun, 27 Oct 2019 12:46:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=01U9pKntwqrkWlg/9/QD65T0ISNqkgl0ibXlTL8oKsQ=; b=h9yJ4ctTvUUGBB4s1P6bm293a4PUirzFH36N/poXTkJyD4VnpgrvBqaAIY9e1W5IZo CwgnKbwvtEi6EC5Pd/yDpab0PlsKIsjCPramGskP24gh33Z7hPWtaAaSmVGW2enTIbmq wo6eI226VS1j7Tp+XpY5rDie5fPst8cg2U8/RyOdkZA1I3rNmVpk89gE60Wr3VTyrtwJ xgkHpY1tJp2q2XYf2por1aVJjuV1Pa+60mokxM44eE5E8rIL4kXKUv9lk/i6XdCzh6pp vNpVROBx/qa98+8lKq2GJbx2hYG6Mo16ObBU4CHjUH5AZDzoijGsi7XzPaCE7wHM2FGi ZuPA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=01U9pKntwqrkWlg/9/QD65T0ISNqkgl0ibXlTL8oKsQ=; b=Bre0EYRUkihelwggmaN5FBvg41XDxFjU37BWlOMffffYUxpFwDRkz1GIY8rNHyFV7r Z9FhY83TmeiAA+dzyhgUGQRmndfhAQlR42Ik+hDst7GCDpIaqSQsnAE/FzZdVz/kENSg dUDoxaVl0mI9hOoG2oJgZCG1P9eJkVy2tGoL1JgCMyCyBdWY6uZEbW7KYXDZAMSi3IYv F5zGLDNrsSalctaDKsRiR4sP0LZpM/0S3B9/sPEytxCGbONXOQP4tZs25FjOWJeJI99W pvvQhm3ZVC+BlXIDqivUc1Ty+fZXPgxZU6JBUyQiTcu8GsSHJEtL9xMP2AHAZfEoOGgd 4PjQ== X-Gm-Message-State: APjAAAWxPKMF9vLjUI4i07FDgVRU9yCjDRYdl49lRjzi3Y95DBUHGyON ottGxAnsFsx8nMAr4ggT1YG/Voz/1tp+sQ== X-Google-Smtp-Source: APXvYqyXqTgU8Z/Zm9nv8YV437qAtSQkGVKGqmIrxkgobAEldsJJgvdRZcy2VTz9KM4O4Yf7/R/T0g== X-Received: by 2002:ac8:17ce:: with SMTP id r14mr9088380qtk.301.1572205576222; Sun, 27 Oct 2019 12:46:16 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:a0de:ef21:f9e9:1e01? ([2601:18b:300:36ee:a0de:ef21:f9e9:1e01]) by smtp.gmail.com with ESMTPSA id z8sm941588qki.27.2019.10.27.12.46.15 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 27 Oct 2019 12:46:15 -0700 (PDT) From: Ted Lemon Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_0BBC7736-B38E-47B0-9B8F-EFC49C18505F" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.4\)) Date: Sun, 27 Oct 2019 15:46:13 -0400 In-Reply-To: <3E4C671B-A03E-4A3F-A68B-5849BDCC6267@delong.com> Cc: Philip Homburg , v6ops@ietf.org To: Owen DeLong References: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <3E4C671B-A03E-4A3F-A68B-5849BDCC6267@delong.com> X-Mailer: Apple Mail (2.3601.0.4) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 19:46:20 -0000 --Apple-Mail=_0BBC7736-B38E-47B0-9B8F-EFC49C18505F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 27, 2019, at 3:35 PM, Owen DeLong wrote: > In the vast majority of situations where I would expect hostile hosts = to be likely to be on LAN, I don=E2=80=99t think I=E2=80=99d be using > SLAAC for address assignment in the first place. Most likely, I=E2=80=99= d want stateful DHCP in such instances. Hostile hosts happen when you get hit with malware, e.g. ransomware. = Being resilient in situations like this is important, even if they = aren=E2=80=99t all that common, because the cost of non-resilience is so = high. --Apple-Mail=_0BBC7736-B38E-47B0-9B8F-EFC49C18505F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 27, 2019, at 3:35 PM, Owen DeLong <owen@delong.com> = wrote:
In = the vast majority of situations where I would expect hostile hosts to be = likely to be on LAN, I don=E2=80=99t think I=E2=80=99d be = using
SLAAC for address assignment in the first place. Most = likely, I=E2=80=99d want stateful DHCP in such = instances.

Hostile hosts happen when you get hit with malware, e.g. = ransomware.   Being resilient in situations like this is important, = even if they aren=E2=80=99t all that common, because the cost of = non-resilience is so high.

= --Apple-Mail=_0BBC7736-B38E-47B0-9B8F-EFC49C18505F-- From nobody Sun Oct 27 13:02:40 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 651C4120052 for ; Sun, 27 Oct 2019 13:02:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.198 X-Spam-Level: X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0jK0klwLAYR8 for ; Sun, 27 Oct 2019 13:02:37 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [130.37.15.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AAC97120046 for ; Sun, 27 Oct 2019 13:02:36 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iOokE-0000KvC; Sun, 27 Oct 2019 21:02:34 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> In-reply-to: Your message of "Sun, 27 Oct 2019 13:14:59 -0400 ." <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> Date: Sun, 27 Oct 2019 21:02:24 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 20:02:39 -0000 > I think you missed my point. You can't do flash renumbering by > advertising a prefix with a valid lifetime of zero, because that > will be ignored by hosts. If it were not ignored by hosts, it > would be a very effective DoS vector. And so if you want to > be able to flash deprecate a route, you need some way to validate > that the deprecation is coming from the same source as the route. > Hence my suggested "limited SEND". Today, you can deprecate a prefix by sending an RA with the preferred lifetime set to zero. That is enough to get IPv6 at the same level as IPv4. Without RA-guard or SEND there are already quite a lot of opportunities to perform both a denial of service attack and a man in the middle attack on a local LAN. I'm not sure if the protection against advertising a zero valid lifetime is actually worth it. Any network that worries about local malicious hosts probably already uses RA-guard (or possibly SEND). In any case, it doesn't matter to the CPE whether the host will accept zero valid time or not. The CPE can just send them and then a separate document can either instruct hosts to accept all RAs with zero valid time or require some for of SEND. The key thing is that without any protocol modifications we can get IPv6 at the same level as IPv4. If we make more extensive modifications to the host, then there is no reason to rely on RA timers and the host could handle unmodified CPEs. From nobody Sun Oct 27 13:11:53 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AFDD8120024 for ; Sun, 27 Oct 2019 13:11:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qwdqTyE0a72M for ; Sun, 27 Oct 2019 13:11:50 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38F23120091 for ; Sun, 27 Oct 2019 13:11:50 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iOosl-0000KuC; Sun, 27 Oct 2019 21:11:23 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <413D25D1-5969-4677-B524-8B59850313F9@delong.com> In-reply-to: Your message of "Sun, 27 Oct 2019 12:31:14 -0700 ." <413D25D1-5969-4677-B524-8B59850313F9@delong.com> Date: Sun, 27 Oct 2019 21:11:19 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 20:11:52 -0000 > How does the CPE identify a stale prefix if it hasnt written its > previous prefixes to persistent storage? Writing prefixes to persistent storage is a key element in letting the CPE deal with this issue. From nobody Sun Oct 27 13:18:00 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12492120086 for ; Sun, 27 Oct 2019 13:17:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.998 X-Spam-Level: X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vuNTCzjVpPY6 for ; Sun, 27 Oct 2019 13:17:57 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 450F4120024 for ; Sun, 27 Oct 2019 13:17:49 -0700 (PDT) Received: from kiev.delong.com (kiev.delong.com [IPv6:2620:0:930:0:0:0:200:5]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9RJU4KI030826 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 27 Oct 2019 12:30:07 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9RJU4KI030826 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572204608; bh=xoX6+K6XmrVGHK4l/HhR18hstUCqgsoSzZHL9I0aeD4=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=jS2Wacqz6PxfifEzGRlTV+4wgrhyZMbGkuTZbF+Df1EwUg66LD/vyNmxcEFPPku6v DSFkg1xvnnMm4fULlI9O1/YHXELUAIoAUvfsyc40efhhxS+9QmW9llHCkrcMIFQ978 tCabswe5mhFeRElD74iiN/Tu5qaoGVqP+xn8FBfw= From: Owen DeLong Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_BD2A8DBD-9943-41E1-84D7-4A38241C43D5" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Sun, 27 Oct 2019 12:30:04 -0700 In-Reply-To: Cc: Philip Homburg , v6ops@ietf.org To: Ted Lemon References: X-Mailer: Apple Mail (2.3445.104.11) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [IPv6:2620:0:930:0:0:0:200:2]); Sun, 27 Oct 2019 12:30:08 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 20:17:59 -0000 --Apple-Mail=_BD2A8DBD-9943-41E1-84D7-4A38241C43D5 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 27, 2019, at 06:54 , Ted Lemon wrote: >=20 > On Oct 27, 2019, at 9:41 AM, Philip Homburg = > wrote: >> The little bit missing is that the CPE should write prefixes = advertised using >> SLAAC to persistent storage which allows the CPE to invalidate stale = prefixes >> after a reboot. >=20 > Actually I do not believe this is correct behavior. Let us assume = prefix delegation. If we have prefix delegation, then when the CPE = comes back from a power cycle, it should reconfirm the prefix it had = previously; the assumption is that that prefix is still valid. This can = be handled in infrastructure=E2=80=94the ISP edge router should know = whether the prefix is still valid, because if it is it should be = advertising a route for it. If it is not still valid, then the CPE = router should attempt to renew it, which would go to the DHCP server = (possibly both messages would). If the lease on the address is still = valid, the ISP should renew the lease and not issue a new one. It is a = misconfiguration for some other thing to happen in this case. This = would then re-establish the route in the ISP edge router. So this still requires that the CPE has written the lease to persistent = storage. Currently many CPE do not do this. I agree that the CPE should attempt to reconfirm/renew the existing = prefix lease. However, if that fails for some reason (and there are = multiple scenarios which present valid reasons this could fail without = misconfiguration on either side), I think that the behavior described is = preferable to simply removing the old prefix from RAs and waiting for = them to time out on the unsuspecting hosts. Especially in the case of 1 = week preferred and 1 month valid lifetime timers. > If the ISP wants to deprecate the old prefix, the thing to do is not = to fail to renew it, but rather to renew it with a preferred lifetime of = zero and offer another prefix with a preferred lifetime that is not = zero. The CPE router should in this case advertise both prefixes, with = the applicable lifetimes. Using my limited SEND proposal, the = advertisement with a preferred lifetime of zero would be immediately = seen by all hosts that implement limited SEND, and they would start = using the new preferred prefix. Hosts that don=E2=80=99t implement = limited SEND would still behave correctly, but might take longer to stop = using the old prefix. This should be okay because the old valid = lifetime is still valid. Can you point to any authoritative document which supports this = particular mechanism? I don=E2=80=99t know of a single DHCPv6 server which operates that way = currently. Can you point to a working example? > That=E2=80=99s the way things should go when everything is working = correctly. If however the ISP=E2=80=99s DHCP server loses its cookies = and can=E2=80=99t renew the old prefix, then we=E2=80=99d see the new = behavior where hosts that implement limited SEND could immediately see = that the old prefix was no longer usable, and would stop using it in = preference to the new prefix. Hosts that don=E2=80=99t implement = limited SEND would behave as they behave today. While there may be advantages to limited SEND, I don=E2=80=99t see that = as a reason not to implement this particular fix across the board since = it would benefit both hosts implementing limited SEND as well as hosts = not implementing it. Owen --Apple-Mail=_BD2A8DBD-9943-41E1-84D7-4A38241C43D5 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Oct 27, 2019, at 06:54 , Ted Lemon <mellon@fugue.com> = wrote:

On Oct 27, 2019, at = 9:41 AM, Philip Homburg <pch-v6ops-9@u-1.phicoh.com> wrote:
The little = bit missing is that the CPE should write prefixes advertised = using
SLAAC to = persistent storage which allows the CPE to invalidate stale = prefixes
after a = reboot.

Actually I do not believe this is correct behavior.   = Let us assume prefix delegation.   If we have prefix delegation, = then when the CPE comes back from a power cycle, it should reconfirm the = prefix it had previously; the assumption is that that prefix is still = valid.  This can be handled in infrastructure=E2=80=94the ISP edge = router should know whether the prefix is still valid, because if it is = it should be advertising a route for it.   If it is not still = valid, then the CPE router should attempt to renew it, which would go to = the DHCP server (possibly both messages would).  If the lease on = the address is still valid, the ISP should renew the lease and not issue = a new one.   It is a misconfiguration for some other thing to = happen in this case.   This would then re-establish the route in = the ISP edge router.

So this still requires that the CPE has written = the lease to persistent storage. Currently many CPE do not do = this.

I agree that the CPE should = attempt to reconfirm/renew the existing prefix lease. However, if that = fails for some reason (and there are multiple scenarios which present = valid reasons this could fail without misconfiguration on either side), = I think that the behavior described is preferable to simply removing the = old prefix from RAs and waiting for them to time out on the unsuspecting = hosts. Especially in the case of 1 week preferred and 1 month valid = lifetime timers.

If the ISP wants to deprecate the old prefix, = the thing to do is not to fail to renew it, but rather to renew it with = a preferred lifetime of zero and offer another prefix with a preferred = lifetime that is not zero.   The CPE router should in this case = advertise both prefixes, with the applicable lifetimes.  Using my = limited SEND proposal, the advertisement with a preferred lifetime of = zero would be immediately seen by all hosts that implement limited SEND, = and they would start using the new preferred prefix.  Hosts that = don=E2=80=99t implement limited SEND would still behave correctly, but = might take longer to stop using the old prefix.  This should be = okay because the old valid lifetime is still = valid.

Can you = point to any authoritative document which supports this particular = mechanism?

I don=E2=80=99t know of a = single DHCPv6 server which operates that way currently. Can you point to = a working example?

That=E2=80=99s the way things should go when = everything is working correctly.   If however the ISP=E2=80=99s = DHCP server loses its cookies and can=E2=80=99t renew the old prefix, = then we=E2=80=99d see the new behavior where hosts that implement = limited SEND could immediately see that the old prefix was no longer = usable, and would stop using it in preference to the new prefix.   = Hosts that don=E2=80=99t implement limited SEND would behave as they = behave today.

While there may be advantages to limited SEND, I = don=E2=80=99t see that as a reason not to implement this particular fix = across the board since it would benefit both hosts implementing limited = SEND as well as hosts not implementing it.

Owen

= --Apple-Mail=_BD2A8DBD-9943-41E1-84D7-4A38241C43D5-- From nobody Sun Oct 27 13:21:31 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 536EF12006B for ; Sun, 27 Oct 2019 13:21:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.499 X-Spam-Level: X-Spam-Status: No, score=-0.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001, SYSADMIN=1] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w31u_F38FUh6 for ; Sun, 27 Oct 2019 13:21:27 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C491120052 for ; Sun, 27 Oct 2019 13:21:27 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iOp2T-0000F0C; Sun, 27 Oct 2019 21:21:25 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <3E4C671B-A03E-4A3F-A68B-5849BDCC6267@delong.com> In-reply-to: Your message of "Sun, 27 Oct 2019 15:46:13 -0400 ." Date: Sun, 27 Oct 2019 21:21:24 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 20:21:28 -0000 > Hostile hosts happen when you get hit with malware, e.g. > ransomware. Being resilient in situations like this is important, > even if they aren't all that common, because the cost of > non-resilience is so high. As far as I know, nobody (in a home situation) is worried about malware performing ARP spoofing. If there is a variant of SEND that is both easy to deploy and can effectively prevent denial of service by a malicious local host, then it is certainly worth discussing. But I still think it should a separate discussion and not as part of dealing with flash renumbering. From nobody Sun Oct 27 15:04:02 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F8E71200DE for ; Sun, 27 Oct 2019 15:04:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=J/5htI57; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=0NxbeSYq Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i-PXNgUWB3pt for ; Sun, 27 Oct 2019 15:03:58 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB139120046 for ; Sun, 27 Oct 2019 15:03:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=22161; q=dns/txt; s=iport; t=1572213838; x=1573423438; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=TWH/Z9Sg3on3cw/jsTDYdgV7v90vhIEnVGBkbz2OvA8=; b=J/5htI57fqA3Y/Q7Pa0uFwrdHVpMCutG2DuS5HQC/iKpuytgefO/Hf99 Pknhi+bqKLcw/iew/FgusYfsjO1VJ6zgCZQAcK8YSlYlM0SsmVngjU/4k 2F76iX6sq+IXFaARcW1DZXCV/sVb5xAZiElgwC9SQ/cHvdNOOsGQ6kzHb 4=; IronPort-PHdr: =?us-ascii?q?9a23=3A/+/UcRNQathqC7Sq2cYl6mtXPHoupqn0MwgJ65?= =?us-ascii?q?Eul7NJdOG58o//OFDEuKg/l0fHCIPc7f8My/HbtaztQyQh2d6AqzhDOIdJSw?= =?us-ascii?q?dDjMwXmwI6B8vQF0r/PtbhbjcxG4JJU1o2t3w=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ALAAACE7Zd/5FdJa1lGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBEQEBAQEBAQEBAQEBgWgDAQEBAQELAYEbLyQFJwVsVyAECyo?= =?us-ascii?q?KhB6DRwOKbYJef5ILhGGBLoEkA1QJAQEBDAEBLQIBAYRAAheDKCQ1CA4CAwk?= =?us-ascii?q?BAQQBAQECAQUEbYU3DIVQAQEBAQMSER0BATcBDwIBCBEDAQIoAwICAjAUCQg?= =?us-ascii?q?CBAENBSKDAAGBeU0DLgGkGAKBOIhhdYEygn4BAQWCSYJDGIIXCYE2AYwOGIF?= =?us-ascii?q?/gREnH4IXNT6EHgsGAjQWglqCXo0QMoI3hTyJNI8DCoIklS4bmVqEVoYTg1a?= =?us-ascii?q?ZTgIEAgQFAg4BAQWBUwE3gVhwFWUBgkFQEBSDBoEnAQKCSYpTdIEpjFYBJYE?= =?us-ascii?q?LAYEpAQE?= X-IronPort-AV: E=Sophos;i="5.68,237,1569283200"; d="scan'208,217";a="366506637" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 27 Oct 2019 22:03:57 +0000 Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by rcdn-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id x9RM3voB008030 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 27 Oct 2019 22:03:57 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sun, 27 Oct 2019 17:03:56 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sun, 27 Oct 2019 18:03:55 -0400 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Sun, 27 Oct 2019 18:03:55 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=F4NPn7B+KLepZckJnQq+F0mz0sbBXOgb6Ujf8GjYvNfoZAdroHQV/mrjSYoYBJEw7w7tAwOaWV6fHx8nsH50e95jA2VM81jgS5R3IYLTMRMlN7emTCZWT5ESet8v+bsW/ccxbFF8bw44veEwDv9VO/oNt6gp2Ldi302vUA3KNUp4UbQXfKlm5aIW0zoIGj0x34p0Bf01quOqVqe8IASkwJeZae8zXL3S1LT4hst/1Raq5RfeRUZRb3hTJ//4CJmcHvtQt3msMilNmVeGBrZBtGtvKfqY5ZqGop9/LpT0pqiIXVOvzvNvTxBeMo0Zn/XfoDaF9oBGaBa7qQStMecTZg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TWH/Z9Sg3on3cw/jsTDYdgV7v90vhIEnVGBkbz2OvA8=; b=g0kASYl5VH5/H7f/EMOguy8aQQlpobHMx2FNa0/U0Lb/qLcail7VVGrjCUQzLSeZE6lsC1LdcZEFUPWwZwnizxnEyC2nxy/5Qh+3UMxbtV+z1Ji7l53AOaUN0PSOiSITCLMCAF81jUw6UBog30BELSpKFS91CcTtKtANvY3dKPe+GWB9PPFBFqHU48st/yRm9wqGlBlOH3sdnXSXNEGAHtMtJdLHbhvYjthu1g1xdWZ+CXAIpKzgJcFSjndZsLkp6GlDB0ol/0VpJj8evE64ogxhkSE6ytJsDDUplhg/P1aTZyfelAmlqgjYffE3NOSIF5bgmcWyRTmGCsoR253jXw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TWH/Z9Sg3on3cw/jsTDYdgV7v90vhIEnVGBkbz2OvA8=; b=0NxbeSYqz2B8jM+HMaHbbIHKYzIoXvMlEJVjvbcDHx7N5fP16Sf+XkxpOEI9ahN/1CHX/huV+f7s7iW4V7IZnXxVetaMxv0hvjnpwfYKWZ2/nLTuk02XrwCxqD2fvD+eDRLz+EXsIJZyffP0JMnxWcf1wkFOS/UcF2rOP3aPZYI= Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2319.namprd11.prod.outlook.com (10.174.97.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.24; Sun, 27 Oct 2019 22:03:53 +0000 Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.025; Sun, 27 Oct 2019 22:03:53 +0000 From: "Bernie Volz (volz)" To: Owen DeLong , Ted Lemon CC: "v6ops@ietf.org" Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AQHVibwc6PRwlsH+ZUmOeFzp+XKiI6dt8FJugAA0sICAAERiAIAACLmAgAATKlOAAANjAIAAXboA///n6oA= Date: Sun, 27 Oct 2019 22:03:53 +0000 Message-ID: <74875D36-6A96-4FB2-853F-86875833470D@cisco.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com; x-originating-ip: [173.38.117.91] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0a3224ee-dd43-47b8-86a0-08d75b298e50 x-ms-traffictypediagnostic: MWHPR1101MB2319: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0203C93D51 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(39860400002)(376002)(396003)(136003)(346002)(199004)(189003)(51444003)(316002)(26005)(3846002)(6116002)(71200400001)(71190400001)(7736002)(14454004)(86362001)(36756003)(66574012)(4326008)(6306002)(486006)(446003)(76176011)(6512007)(561944003)(236005)(54896002)(11346002)(2616005)(99286004)(91956017)(186003)(2906002)(6246003)(58126008)(110136005)(66946007)(64756008)(66446008)(66476007)(66556008)(81166006)(8936002)(476003)(8676002)(81156014)(478600001)(256004)(14444005)(5024004)(25786009)(229853002)(6486002)(76116006)(33656002)(102836004)(5660300002)(66066001)(6506007)(53546011)(6436002); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2319; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: QTTk1xRASqYC9am/+iZHYzL+sVebikBrcqYY7cK0YEQIPuYkhZTmH+J5mkj71LbQlFTdWfem3PjaGsebc+yX3mwP946C81ug3MmQjb1I66bupeXWh/nJCsblbmhfmu+RQ2EFjL+0GhtRRWvhRHgXpueS9dU6bAvBIHBnsa8pGy6pL5xiMvfWQeq0BOKWSZ8fpV77BE4Uo6wwyjNJYQ7psO4GhzDmcweO6CfZaaFJSofOM8JZx/BRic7L39BmTwF+pd4s3nJYdcF6n7Xqcdfw+lJu7klqGP03c6DpbWsFZY8gqgEfYp2Y6Aub3j5v6HGIBniOrYuJJpRrLPBDpBiULSafidiS+JRAr3fr54dfaOJ+SXq1mCu8eelkn0SGK7XUtCIUy2AVZKvTNalbpVD4dNFhU+7Hbg88mJVQCDwVeIZi6+kn1LiCvdTdM/yB6+NG x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_74875D366A964FB2853F86875833470Dciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 0a3224ee-dd43-47b8-86a0-08d75b298e50 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Oct 2019 22:03:53.4453 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: bHCZ30WiiyxVK1P4x4nBKbjPKHCEnnNTQPPlpvteH/x1yB8/fHpfgfjw7Z0HYbcX X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2319 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.13, xch-aln-003.cisco.com X-Outbound-Node: rcdn-core-9.cisco.com Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 22:04:02 -0000 --_000_74875D366A964FB2853F86875833470Dciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 PkkgZG9u4oCZdCBrbm93IG9mIGEgc2luZ2xlIERIQ1B2NiBzZXJ2ZXIgd2hpY2ggb3BlcmF0ZXMg dGhhdCB3YXkgY3VycmVudGx5LiBDYW4geW91IHBvaW50IHRvIGEgd29ya2luZyBleGFtcGxlPw0K DQpUaGF0IGlzIGFjdHVhbGx5IHRoZSBSRkM4NDE1IHNwZWNpZmllZCBiZWhhdmlvciDigKYgdGhl IERIQ1Agc2VydmVyIEkgd29yayBvbiAoQ2lzY28gUHJpbWUgTmV0d29yayBSZWdpc3RyYXIpIHdp bGwgZG8gdGhpcyBpZiBzdGVwcyBhcmUgdGFrZW4gdG8g4oCcaW52YWxpZGF0ZeKAnSBhIGxlYXNl Lg0KDQpTZWUgUkZDIDg0MTUsIFNlY3Rpb24gMTguMy40Og0KDQogICBJZiB0aGUgc2VydmVyIGZp bmRzIHRoYXQgYW55IG9mIHRoZSBhZGRyZXNzZXMgaW4gdGhlIElBIGFyZSBub3QNCiAgIGFwcHJv cHJpYXRlIGZvciB0aGUgbGluayB0byB3aGljaCB0aGUgY2xpZW50IGlzIGF0dGFjaGVkLCB0aGUg c2VydmVyDQogICByZXR1cm5zIHRoZSBhZGRyZXNzIHRvIHRoZSBjbGllbnQgd2l0aCBsaWZldGlt ZXMgb2YgMC4NCg0KICAgSWYgdGhlIHNlcnZlciBmaW5kcyB0aGF0IGFueSBvZiB0aGUgZGVsZWdh dGVkIHByZWZpeGVzIGluIHRoZSBJQSBhcmUNCiAgIG5vdCBhcHByb3ByaWF0ZSBmb3IgdGhlIGxp bmsgdG8gd2hpY2ggdGhlIGNsaWVudCBpcyBhdHRhY2hlZCwgdGhlDQogICBzZXJ2ZXIgcmV0dXJu cyB0aGUgZGVsZWdhdGVkIHByZWZpeCB0byB0aGUgY2xpZW50IHdpdGggbGlmZXRpbWVzDQogICBv ZiAwLg0KDQoNCiAgKiAgIEJlcm5pZQ0KDQpGcm9tOiB2Nm9wcyA8djZvcHMtYm91bmNlc0BpZXRm Lm9yZz4gb24gYmVoYWxmIG9mIE93ZW4gRGVMb25nIDxvd2VuQGRlbG9uZy5jb20+DQpEYXRlOiBT dW5kYXksIE9jdG9iZXIgMjcsIDIwMTkgYXQgNDoxOCBQTQ0KVG86IFRlZCBMZW1vbiA8bWVsbG9u QGZ1Z3VlLmNvbT4NCkNjOiAidjZvcHNAaWV0Zi5vcmciIDx2Nm9wc0BpZXRmLm9yZz4NClN1Ympl Y3Q6IFJlOiBbdjZvcHNdIFNMQUFDIHJlbnVtOiBQcm9ibGVtIFN0YXRlbWVudCAmIE9wZXJhdGlv bmFsIHdvcmthcm91bmRzDQoNCg0KDQoNCk9uIE9jdCAyNywgMjAxOSwgYXQgMDY6NTQgLCBUZWQg TGVtb24gPG1lbGxvbkBmdWd1ZS5jb208bWFpbHRvOm1lbGxvbkBmdWd1ZS5jb20+PiB3cm90ZToN Cg0KT24gT2N0IDI3LCAyMDE5LCBhdCA5OjQxIEFNLCBQaGlsaXAgSG9tYnVyZyA8cGNoLXY2b3Bz LTlAdS0xLnBoaWNvaC5jb208bWFpbHRvOnBjaC12Nm9wcy05QHUtMS5waGljb2guY29tPj4gd3Jv dGU6DQpUaGUgbGl0dGxlIGJpdCBtaXNzaW5nIGlzIHRoYXQgdGhlIENQRSBzaG91bGQgd3JpdGUg cHJlZml4ZXMgYWR2ZXJ0aXNlZCB1c2luZw0KU0xBQUMgdG8gcGVyc2lzdGVudCBzdG9yYWdlIHdo aWNoIGFsbG93cyB0aGUgQ1BFIHRvIGludmFsaWRhdGUgc3RhbGUgcHJlZml4ZXMNCmFmdGVyIGEg cmVib290Lg0KDQpBY3R1YWxseSBJIGRvIG5vdCBiZWxpZXZlIHRoaXMgaXMgY29ycmVjdCBiZWhh dmlvci4gICBMZXQgdXMgYXNzdW1lIHByZWZpeCBkZWxlZ2F0aW9uLiAgIElmIHdlIGhhdmUgcHJl Zml4IGRlbGVnYXRpb24sIHRoZW4gd2hlbiB0aGUgQ1BFIGNvbWVzIGJhY2sgZnJvbSBhIHBvd2Vy IGN5Y2xlLCBpdCBzaG91bGQgcmVjb25maXJtIHRoZSBwcmVmaXggaXQgaGFkIHByZXZpb3VzbHk7 IHRoZSBhc3N1bXB0aW9uIGlzIHRoYXQgdGhhdCBwcmVmaXggaXMgc3RpbGwgdmFsaWQuICBUaGlz IGNhbiBiZSBoYW5kbGVkIGluIGluZnJhc3RydWN0dXJl4oCUdGhlIElTUCBlZGdlIHJvdXRlciBz aG91bGQga25vdyB3aGV0aGVyIHRoZSBwcmVmaXggaXMgc3RpbGwgdmFsaWQsIGJlY2F1c2UgaWYg aXQgaXMgaXQgc2hvdWxkIGJlIGFkdmVydGlzaW5nIGEgcm91dGUgZm9yIGl0LiAgIElmIGl0IGlz IG5vdCBzdGlsbCB2YWxpZCwgdGhlbiB0aGUgQ1BFIHJvdXRlciBzaG91bGQgYXR0ZW1wdCB0byBy ZW5ldyBpdCwgd2hpY2ggd291bGQgZ28gdG8gdGhlIERIQ1Agc2VydmVyIChwb3NzaWJseSBib3Ro IG1lc3NhZ2VzIHdvdWxkKS4gIElmIHRoZSBsZWFzZSBvbiB0aGUgYWRkcmVzcyBpcyBzdGlsbCB2 YWxpZCwgdGhlIElTUCBzaG91bGQgcmVuZXcgdGhlIGxlYXNlIGFuZCBub3QgaXNzdWUgYSBuZXcg b25lLiAgIEl0IGlzIGEgbWlzY29uZmlndXJhdGlvbiBmb3Igc29tZSBvdGhlciB0aGluZyB0byBo YXBwZW4gaW4gdGhpcyBjYXNlLiAgIFRoaXMgd291bGQgdGhlbiByZS1lc3RhYmxpc2ggdGhlIHJv dXRlIGluIHRoZSBJU1AgZWRnZSByb3V0ZXIuDQoNClNvIHRoaXMgc3RpbGwgcmVxdWlyZXMgdGhh dCB0aGUgQ1BFIGhhcyB3cml0dGVuIHRoZSBsZWFzZSB0byBwZXJzaXN0ZW50IHN0b3JhZ2UuIEN1 cnJlbnRseSBtYW55IENQRSBkbyBub3QgZG8gdGhpcy4NCg0KSSBhZ3JlZSB0aGF0IHRoZSBDUEUg c2hvdWxkIGF0dGVtcHQgdG8gcmVjb25maXJtL3JlbmV3IHRoZSBleGlzdGluZyBwcmVmaXggbGVh c2UuIEhvd2V2ZXIsIGlmIHRoYXQgZmFpbHMgZm9yIHNvbWUgcmVhc29uIChhbmQgdGhlcmUgYXJl IG11bHRpcGxlIHNjZW5hcmlvcyB3aGljaCBwcmVzZW50IHZhbGlkIHJlYXNvbnMgdGhpcyBjb3Vs ZCBmYWlsIHdpdGhvdXQgbWlzY29uZmlndXJhdGlvbiBvbiBlaXRoZXIgc2lkZSksIEkgdGhpbmsg dGhhdCB0aGUgYmVoYXZpb3IgZGVzY3JpYmVkIGlzIHByZWZlcmFibGUgdG8gc2ltcGx5IHJlbW92 aW5nIHRoZSBvbGQgcHJlZml4IGZyb20gUkFzIGFuZCB3YWl0aW5nIGZvciB0aGVtIHRvIHRpbWUg b3V0IG9uIHRoZSB1bnN1c3BlY3RpbmcgaG9zdHMuIEVzcGVjaWFsbHkgaW4gdGhlIGNhc2Ugb2Yg MSB3ZWVrIHByZWZlcnJlZCBhbmQgMSBtb250aCB2YWxpZCBsaWZldGltZSB0aW1lcnMuDQoNCklm IHRoZSBJU1Agd2FudHMgdG8gZGVwcmVjYXRlIHRoZSBvbGQgcHJlZml4LCB0aGUgdGhpbmcgdG8g ZG8gaXMgbm90IHRvIGZhaWwgdG8gcmVuZXcgaXQsIGJ1dCByYXRoZXIgdG8gcmVuZXcgaXQgd2l0 aCBhIHByZWZlcnJlZCBsaWZldGltZSBvZiB6ZXJvIGFuZCBvZmZlciBhbm90aGVyIHByZWZpeCB3 aXRoIGEgcHJlZmVycmVkIGxpZmV0aW1lIHRoYXQgaXMgbm90IHplcm8uICAgVGhlIENQRSByb3V0 ZXIgc2hvdWxkIGluIHRoaXMgY2FzZSBhZHZlcnRpc2UgYm90aCBwcmVmaXhlcywgd2l0aCB0aGUg YXBwbGljYWJsZSBsaWZldGltZXMuICBVc2luZyBteSBsaW1pdGVkIFNFTkQgcHJvcG9zYWwsIHRo ZSBhZHZlcnRpc2VtZW50IHdpdGggYSBwcmVmZXJyZWQgbGlmZXRpbWUgb2YgemVybyB3b3VsZCBi ZSBpbW1lZGlhdGVseSBzZWVuIGJ5IGFsbCBob3N0cyB0aGF0IGltcGxlbWVudCBsaW1pdGVkIFNF TkQsIGFuZCB0aGV5IHdvdWxkIHN0YXJ0IHVzaW5nIHRoZSBuZXcgcHJlZmVycmVkIHByZWZpeC4g IEhvc3RzIHRoYXQgZG9u4oCZdCBpbXBsZW1lbnQgbGltaXRlZCBTRU5EIHdvdWxkIHN0aWxsIGJl aGF2ZSBjb3JyZWN0bHksIGJ1dCBtaWdodCB0YWtlIGxvbmdlciB0byBzdG9wIHVzaW5nIHRoZSBv bGQgcHJlZml4LiAgVGhpcyBzaG91bGQgYmUgb2theSBiZWNhdXNlIHRoZSBvbGQgdmFsaWQgbGlm ZXRpbWUgaXMgc3RpbGwgdmFsaWQuDQoNCkNhbiB5b3UgcG9pbnQgdG8gYW55IGF1dGhvcml0YXRp dmUgZG9jdW1lbnQgd2hpY2ggc3VwcG9ydHMgdGhpcyBwYXJ0aWN1bGFyIG1lY2hhbmlzbT8NCg0K SSBkb27igJl0IGtub3cgb2YgYSBzaW5nbGUgREhDUHY2IHNlcnZlciB3aGljaCBvcGVyYXRlcyB0 aGF0IHdheSBjdXJyZW50bHkuIENhbiB5b3UgcG9pbnQgdG8gYSB3b3JraW5nIGV4YW1wbGU/DQoN ClRoYXTigJlzIHRoZSB3YXkgdGhpbmdzIHNob3VsZCBnbyB3aGVuIGV2ZXJ5dGhpbmcgaXMgd29y a2luZyBjb3JyZWN0bHkuICAgSWYgaG93ZXZlciB0aGUgSVNQ4oCZcyBESENQIHNlcnZlciBsb3Nl cyBpdHMgY29va2llcyBhbmQgY2Fu4oCZdCByZW5ldyB0aGUgb2xkIHByZWZpeCwgdGhlbiB3ZeKA mWQgc2VlIHRoZSBuZXcgYmVoYXZpb3Igd2hlcmUgaG9zdHMgdGhhdCBpbXBsZW1lbnQgbGltaXRl ZCBTRU5EIGNvdWxkIGltbWVkaWF0ZWx5IHNlZSB0aGF0IHRoZSBvbGQgcHJlZml4IHdhcyBubyBs b25nZXIgdXNhYmxlLCBhbmQgd291bGQgc3RvcCB1c2luZyBpdCBpbiBwcmVmZXJlbmNlIHRvIHRo ZSBuZXcgcHJlZml4LiAgIEhvc3RzIHRoYXQgZG9u4oCZdCBpbXBsZW1lbnQgbGltaXRlZCBTRU5E IHdvdWxkIGJlaGF2ZSBhcyB0aGV5IGJlaGF2ZSB0b2RheS4NCg0KV2hpbGUgdGhlcmUgbWF5IGJl IGFkdmFudGFnZXMgdG8gbGltaXRlZCBTRU5ELCBJIGRvbuKAmXQgc2VlIHRoYXQgYXMgYSByZWFz b24gbm90IHRvIGltcGxlbWVudCB0aGlzIHBhcnRpY3VsYXIgZml4IGFjcm9zcyB0aGUgYm9hcmQg c2luY2UgaXQgd291bGQgYmVuZWZpdCBib3RoIGhvc3RzIGltcGxlbWVudGluZyBsaW1pdGVkIFNF TkQgYXMgd2VsbCBhcyBob3N0cyBub3QgaW1wbGVtZW50aW5nIGl0Lg0KDQpPd2VuDQoNCg== --_000_74875D366A964FB2853F86875833470Dciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6TWVubG8tUmVndWxhcjsNCglwYW5vc2UtMToyIDExIDYgOSAzIDggNCAyIDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywg c3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7 DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJs aW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlz dFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0 Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTow aW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpwLm1zb25v cm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1z b25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0K CW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNp emU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1h aWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1 bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpA cGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEu MGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7 fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MTg3NzU0 NDAxNDsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTk4 OTAwNzEyNiAtODIwNzExMTU4IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3 Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzO30NCkBsaXN0IGwwOmxldmVsMQ0KCXtt c28tbGV2ZWwtc3RhcnQtYXQ6MzAyOw0KCW1zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDotOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk6Q2FsaWJy aTt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWls eToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNQ0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxp c3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5n ZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250 LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4t Ym90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPg0KPC9o ZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRp diBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDtJIGRvbuKA mXQga25vdyBvZiBhIHNpbmdsZSBESENQdjYgc2VydmVyIHdoaWNoIG9wZXJhdGVzIHRoYXQgd2F5 IGN1cnJlbnRseS4gQ2FuIHlvdSBwb2ludCB0byBhIHdvcmtpbmcgZXhhbXBsZT88bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+VGhhdCBpcyBhY3R1YWxseSB0aGUgUkZDODQxNSBzcGVjaWZpZWQgYmVo YXZpb3Ig4oCmIHRoZSBESENQIHNlcnZlciBJIHdvcmsgb24gKENpc2NvIFByaW1lIE5ldHdvcmsg UmVnaXN0cmFyKSB3aWxsIGRvIHRoaXMgaWYgc3RlcHMgYXJlIHRha2VuIHRvIOKAnGludmFsaWRh dGXigJ0gYSBsZWFzZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U2VlIFJGQyA4NDE1LCBTZWN0 aW9uIDE4LjMuNDo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IElmIHRoZSBz ZXJ2ZXIgZmluZHMgdGhhdCBhbnkgb2YgdGhlIGFkZHJlc3NlcyBpbiB0aGUgSUEgYXJlIG5vdDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IGFwcHJvcHJp YXRlIGZvciB0aGUgbGluayB0byB3aGljaCB0aGUgY2xpZW50IGlzIGF0dGFjaGVkLCB0aGUgc2Vy dmVyPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsgcmV0 dXJucyB0aGUgYWRkcmVzcyB0byB0aGUgY2xpZW50IHdpdGggbGlmZXRpbWVzIG9mIDAuPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyBJZiB0aGUgc2VydmVyIGZpbmRzIHRoYXQg YW55IG9mIHRoZSBkZWxlZ2F0ZWQgcHJlZml4ZXMgaW4gdGhlIElBIGFyZTxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IG5vdCBhcHByb3ByaWF0ZSBmb3Ig dGhlIGxpbmsgdG8gd2hpY2ggdGhlIGNsaWVudCBpcyBhdHRhY2hlZCwgdGhlPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsgc2VydmVyIHJldHVybnMgdGhl IGRlbGVnYXRlZCBwcmVmaXggdG8gdGhlIGNsaWVudCB3aXRoIGxpZmV0aW1lczxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IG9mIDAuPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjx1bCBzdHls ZT0ibWFyZ2luLXRvcDowaW4iIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdy YXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj5CZXJu aWU8bzpwPjwvbzpwPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVD NERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206IDwv c3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPnY2b3Bz ICZsdDt2Nm9wcy1ib3VuY2VzQGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgT3dlbiBEZUxvbmcg Jmx0O293ZW5AZGVsb25nLmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+U3VuZGF5LCBPY3RvYmVy IDI3LCAyMDE5IGF0IDQ6MTggUE08YnI+DQo8Yj5UbzogPC9iPlRlZCBMZW1vbiAmbHQ7bWVsbG9u QGZ1Z3VlLmNvbSZndDs8YnI+DQo8Yj5DYzogPC9iPiZxdW90O3Y2b3BzQGlldGYub3JnJnF1b3Q7 ICZsdDt2Nm9wc0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFt2Nm9wc10g U0xBQUMgcmVudW06IFByb2JsZW0gU3RhdGVtZW50ICZhbXA7IE9wZXJhdGlvbmFsIHdvcmthcm91 bmRzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4N Cjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24g T2N0IDI3LCAyMDE5LCBhdCAwNjo1NCAsIFRlZCBMZW1vbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1l bGxvbkBmdWd1ZS5jb20iPm1lbGxvbkBmdWd1ZS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE9jdCAyNywgMjAxOSwgYXQg OTo0MSBBTSwgUGhpbGlwIEhvbWJ1cmcgJmx0OzxhIGhyZWY9Im1haWx0bzpwY2gtdjZvcHMtOUB1 LTEucGhpY29oLmNvbSI+cGNoLXY2b3BzLTlAdS0xLnBoaWNvaC5jb208L2E+Jmd0OyB3cm90ZToN CjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUu MHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O01lbmxvLVJlZ3Vs YXImcXVvdDssc2VyaWYiPlRoZSBsaXR0bGUgYml0IG1pc3NpbmcgaXMgdGhhdCB0aGUgQ1BFIHNo b3VsZCB3cml0ZSBwcmVmaXhlcyBhZHZlcnRpc2VkIHVzaW5nPGJyPg0KU0xBQUMgdG8gcGVyc2lz dGVudCBzdG9yYWdlIHdoaWNoIGFsbG93cyB0aGUgQ1BFIHRvIGludmFsaWRhdGUgc3RhbGUgcHJl Zml4ZXM8YnI+DQphZnRlciBhIHJlYm9vdC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWN0dWFsbHkgSSBkbyBub3Qg YmVsaWV2ZSB0aGlzIGlzIGNvcnJlY3QgYmVoYXZpb3IuICZuYnNwOyBMZXQgdXMgYXNzdW1lIHBy ZWZpeCBkZWxlZ2F0aW9uLiAmbmJzcDsgSWYgd2UgaGF2ZSBwcmVmaXggZGVsZWdhdGlvbiwgdGhl biB3aGVuIHRoZSBDUEUgY29tZXMgYmFjayBmcm9tIGEgcG93ZXIgY3ljbGUsIGl0IHNob3VsZCBy ZWNvbmZpcm0gdGhlIHByZWZpeCBpdCBoYWQgcHJldmlvdXNseTsgdGhlIGFzc3VtcHRpb24gaXMN CiB0aGF0IHRoYXQgcHJlZml4IGlzIHN0aWxsIHZhbGlkLiAmbmJzcDtUaGlzIGNhbiBiZSBoYW5k bGVkIGluIGluZnJhc3RydWN0dXJl4oCUdGhlIElTUCBlZGdlIHJvdXRlciBzaG91bGQga25vdyB3 aGV0aGVyIHRoZSBwcmVmaXggaXMgc3RpbGwgdmFsaWQsIGJlY2F1c2UgaWYgaXQgaXMgaXQgc2hv dWxkIGJlIGFkdmVydGlzaW5nIGEgcm91dGUgZm9yIGl0LiAmbmJzcDsgSWYgaXQgaXMgbm90IHN0 aWxsIHZhbGlkLCB0aGVuIHRoZSBDUEUgcm91dGVyIHNob3VsZCBhdHRlbXB0DQogdG8gcmVuZXcg aXQsIHdoaWNoIHdvdWxkIGdvIHRvIHRoZSBESENQIHNlcnZlciAocG9zc2libHkgYm90aCBtZXNz YWdlcyB3b3VsZCkuICZuYnNwO0lmIHRoZSBsZWFzZSBvbiB0aGUgYWRkcmVzcyBpcyBzdGlsbCB2 YWxpZCwgdGhlIElTUCBzaG91bGQgcmVuZXcgdGhlIGxlYXNlIGFuZCBub3QgaXNzdWUgYSBuZXcg b25lLiAmbmJzcDsgSXQgaXMgYSBtaXNjb25maWd1cmF0aW9uIGZvciBzb21lIG90aGVyIHRoaW5n IHRvIGhhcHBlbiBpbiB0aGlzIGNhc2UuICZuYnNwOyBUaGlzDQogd291bGQgdGhlbiByZS1lc3Rh Ymxpc2ggdGhlIHJvdXRlIGluIHRoZSBJU1AgZWRnZSByb3V0ZXIuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5TbyB0aGlzIHN0aWxsIHJlcXVpcmVzIHRoYXQgdGhlIENQRSBoYXMgd3JpdHRl biB0aGUgbGVhc2UgdG8gcGVyc2lzdGVudCBzdG9yYWdlLiBDdXJyZW50bHkgbWFueSBDUEUgZG8g bm90IGRvIHRoaXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkkgYWdyZWUgdGhhdCB0aGUgQ1BFIHNob3VsZCBhdHRlbXB0IHRvIHJlY29uZmly bS9yZW5ldyB0aGUgZXhpc3RpbmcgcHJlZml4IGxlYXNlLiBIb3dldmVyLCBpZiB0aGF0IGZhaWxz IGZvciBzb21lIHJlYXNvbiAoYW5kIHRoZXJlIGFyZSBtdWx0aXBsZSBzY2VuYXJpb3Mgd2hpY2gg cHJlc2VudCB2YWxpZCByZWFzb25zIHRoaXMgY291bGQgZmFpbCB3aXRob3V0IG1pc2NvbmZpZ3Vy YXRpb24gb24gZWl0aGVyIHNpZGUpLA0KIEkgdGhpbmsgdGhhdCB0aGUgYmVoYXZpb3IgZGVzY3Jp YmVkIGlzIHByZWZlcmFibGUgdG8gc2ltcGx5IHJlbW92aW5nIHRoZSBvbGQgcHJlZml4IGZyb20g UkFzIGFuZCB3YWl0aW5nIGZvciB0aGVtIHRvIHRpbWUgb3V0IG9uIHRoZSB1bnN1c3BlY3Rpbmcg aG9zdHMuIEVzcGVjaWFsbHkgaW4gdGhlIGNhc2Ugb2YgMSB3ZWVrIHByZWZlcnJlZCBhbmQgMSBt b250aCB2YWxpZCBsaWZldGltZSB0aW1lcnMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J ZiB0aGUgSVNQIHdhbnRzIHRvIGRlcHJlY2F0ZSB0aGUgb2xkIHByZWZpeCwgdGhlIHRoaW5nIHRv IGRvIGlzIG5vdCB0byBmYWlsIHRvIHJlbmV3IGl0LCBidXQgcmF0aGVyIHRvIHJlbmV3IGl0IHdp dGggYSBwcmVmZXJyZWQgbGlmZXRpbWUgb2YgemVybyBhbmQgb2ZmZXIgYW5vdGhlciBwcmVmaXgg d2l0aCBhIHByZWZlcnJlZCBsaWZldGltZSB0aGF0IGlzIG5vdCB6ZXJvLiAmbmJzcDsgVGhlIENQ RSByb3V0ZXIgc2hvdWxkDQogaW4gdGhpcyBjYXNlIGFkdmVydGlzZSBib3RoIHByZWZpeGVzLCB3 aXRoIHRoZSBhcHBsaWNhYmxlIGxpZmV0aW1lcy4gJm5ic3A7VXNpbmcgbXkgbGltaXRlZCBTRU5E IHByb3Bvc2FsLCB0aGUgYWR2ZXJ0aXNlbWVudCB3aXRoIGEgcHJlZmVycmVkIGxpZmV0aW1lIG9m IHplcm8gd291bGQgYmUgaW1tZWRpYXRlbHkgc2VlbiBieSBhbGwgaG9zdHMgdGhhdCBpbXBsZW1l bnQgbGltaXRlZCBTRU5ELCBhbmQgdGhleSB3b3VsZCBzdGFydCB1c2luZyB0aGUgbmV3DQogcHJl ZmVycmVkIHByZWZpeC4gJm5ic3A7SG9zdHMgdGhhdCBkb27igJl0IGltcGxlbWVudCBsaW1pdGVk IFNFTkQgd291bGQgc3RpbGwgYmVoYXZlIGNvcnJlY3RseSwgYnV0IG1pZ2h0IHRha2UgbG9uZ2Vy IHRvIHN0b3AgdXNpbmcgdGhlIG9sZCBwcmVmaXguICZuYnNwO1RoaXMgc2hvdWxkIGJlIG9rYXkg YmVjYXVzZSB0aGUgb2xkIHZhbGlkIGxpZmV0aW1lIGlzIHN0aWxsIHZhbGlkLjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5DYW4geW91IHBvaW50IHRvIGFueSBhdXRob3JpdGF0aXZlIGRvY3VtZW50IHdo aWNoIHN1cHBvcnRzIHRoaXMgcGFydGljdWxhciBtZWNoYW5pc20/PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgZG9u4oCZdCBrbm93IG9mIGEg c2luZ2xlIERIQ1B2NiBzZXJ2ZXIgd2hpY2ggb3BlcmF0ZXMgdGhhdCB3YXkgY3VycmVudGx5LiBD YW4geW91IHBvaW50IHRvIGEgd29ya2luZyBleGFtcGxlPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRo YXTigJlzIHRoZSB3YXkgdGhpbmdzIHNob3VsZCBnbyB3aGVuIGV2ZXJ5dGhpbmcgaXMgd29ya2lu ZyBjb3JyZWN0bHkuICZuYnNwOyBJZiBob3dldmVyIHRoZSBJU1DigJlzIERIQ1Agc2VydmVyIGxv c2VzIGl0cyBjb29raWVzIGFuZCBjYW7igJl0IHJlbmV3IHRoZSBvbGQgcHJlZml4LCB0aGVuIHdl 4oCZZCBzZWUgdGhlIG5ldyBiZWhhdmlvciB3aGVyZSBob3N0cyB0aGF0IGltcGxlbWVudCBsaW1p dGVkIFNFTkQgY291bGQgaW1tZWRpYXRlbHkNCiBzZWUgdGhhdCB0aGUgb2xkIHByZWZpeCB3YXMg bm8gbG9uZ2VyIHVzYWJsZSwgYW5kIHdvdWxkIHN0b3AgdXNpbmcgaXQgaW4gcHJlZmVyZW5jZSB0 byB0aGUgbmV3IHByZWZpeC4gJm5ic3A7IEhvc3RzIHRoYXQgZG9u4oCZdCBpbXBsZW1lbnQgbGlt aXRlZCBTRU5EIHdvdWxkIGJlaGF2ZSBhcyB0aGV5IGJlaGF2ZSB0b2RheS48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+V2hpbGUgdGhlcmUgbWF5IGJlIGFkdmFudGFnZXMgdG8gbGltaXRlZCBTRU5ELCBJ IGRvbuKAmXQgc2VlIHRoYXQgYXMgYSByZWFzb24gbm90IHRvIGltcGxlbWVudCB0aGlzIHBhcnRp Y3VsYXIgZml4IGFjcm9zcyB0aGUgYm9hcmQgc2luY2UgaXQgd291bGQgYmVuZWZpdCBib3RoIGhv c3RzIGltcGxlbWVudGluZyBsaW1pdGVkIFNFTkQgYXMgd2VsbCBhcyBob3N0cyBub3QgaW1wbGVt ZW50aW5nIGl0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5Pd2VuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8 L2h0bWw+DQo= --_000_74875D366A964FB2853F86875833470Dciscocom_-- From nobody Sun Oct 27 15:37:33 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FA0F120046 for ; Sun, 27 Oct 2019 15:37:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.497 X-Spam-Level: X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X6DDq5uLJFiv for ; Sun, 27 Oct 2019 15:37:29 -0700 (PDT) Received: from mail-ot1-x332.google.com (mail-ot1-x332.google.com [IPv6:2607:f8b0:4864:20::332]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3EC7120044 for ; Sun, 27 Oct 2019 15:37:29 -0700 (PDT) Received: by mail-ot1-x332.google.com with SMTP id b19so3173546otq.10 for ; Sun, 27 Oct 2019 15:37:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=HVid2a9/R0bJ86udl5eip2u6Jjy1Xs67kUKrAe++vZY=; b=ZaTI84/EdAZ9n8o8EIKeedLAr3NFev21zwFX6C1TA9Bv6JIf6/gRs7/g1YKCoQidKW mImleFeqawBj2cuAXjNji0FE6N0WebY8nzz01XHP2QSmJaMltwfNGjAWjz4b0pT2kpXE neglmJPpQkWFpDSysug4rBWQEPjGJx1ouScjsVPBX2Nb59pLNri6DGuWtLsMNPJz8l5L t3dNTsgV1yf4C1TTKxrOFQG+3iox/PlJlvM/7WcGHzCvRieZoL7GihVDnK8uhM/hMHQu cduoLD5y6bLBrYywbJjXx7bJt0OSuOyNjnvvbYmGMniUgERxfYFklXvhzCb7PlrDLhzK CqrA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=HVid2a9/R0bJ86udl5eip2u6Jjy1Xs67kUKrAe++vZY=; b=MQzObQVnzCS3fkE9F/GQMCzPSGIbXurSh459EvgPBUta5qKNdyaxXx51cHbmWPMDws Bva8nVK7oMswbZDng9b6ZcgkhoYyfVjf+mCJqEJ5AWKi+NepVcPYLq6IPYHE+NQfTcoM 1G6sLWkkpmrczchIVZSD7LJThNEGiqw3HOZW5K+06vaGRMGAPqIKCtpyDVI2qfSthlEc HTEncpPQSlMquFJ5EuNKzpxevXg5NHKi2ZgVd40azFGuVD73HOOlJdXakQpusFRjiPs7 keiyAZWkEGzOR3quyllUl0en92tz4hNNToOzexfbaFKyBpDjxvsHhvpUWk2xUcqVr7gx KC6w== X-Gm-Message-State: APjAAAUDEQ6unOBSUBBy3zBtumYeZG9sgMk832PERJHgJWDB+VHaq/sv Ys11Aog425w5VZD87qKQNgwV3d4SVc8sHiczlt4= X-Google-Smtp-Source: APXvYqxzTemcGpIdlcgUYicDiGBxJw5pI+wRx+fqSUNga2v6bCyy7zrJ501NYh75pRj8y2ZLtBvIlZ9rG5qySlPo2bY= X-Received: by 2002:a05:6830:43:: with SMTP id d3mr11946331otp.153.1572215848854; Sun, 27 Oct 2019 15:37:28 -0700 (PDT) MIME-Version: 1.0 References: <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com> <4cfa9c73-dd82-13bc-16a7-5c11ac48d03a@gmail.com> In-Reply-To: <4cfa9c73-dd82-13bc-16a7-5c11ac48d03a@gmail.com> From: Mark Smith Date: Mon, 28 Oct 2019 09:37:01 +1100 Message-ID: To: Brian E Carpenter Cc: Fernando Gont , Owen DeLong , v6ops list Content-Type: multipart/alternative; boundary="0000000000002e6bbf0595ec0777" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 22:37:31 -0000 --0000000000002e6bbf0595ec0777 Content-Type: text/plain; charset="UTF-8" On Mon, 28 Oct 2019, 06:06 Brian E Carpenter, wrote: > On 28-Oct-19 05:29, Fernando Gont wrote: > ... > > Robustness has a lot to do with being able to gracefully handle the case > > when others screw up. > > This. We can't make the world perfect, but we can make individual > components > that expect imperfection. > This is not what I said, as it is implying that I said there is no need for robustness. Robustness suffers from the law of diminishing returns. At some point the cost to design and implement robustness exceeds the either the likelihood it will be needed or the benefit it returns if needs to be used. Sugar is sometimes poured into the fuel tanks of cars, which will destroy the engine. It is not common and is done maliciously. If robustness should be universal, does that mean car engines should be made impervious to sugar, at great expense to everybody, despite the need for that robustness being rare? Some ISPs are shifting the cost and consequences of their design decision, which they can change, onto the IETF, CPE vendors and host implementers, and indirectly their customers'. Are they willing to pay these other parties to fix a problem that they are both causing and could fix themselves? (Can I bill these ISPs for the time I spent implementing the 'DeprecatePrefix' and 'DecrementLifetimes' options in 'radvd' in 2011 that address this problem? Those options have limitations that I still don't think are acceptable, which is why ISPs fixing their backend systems is still the best solution.) > Brian > --0000000000002e6bbf0595ec0777 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Mon, 28 Oct 2019, 06:06 Brian E Ca= rpenter, <brian.e.carpenter@gmail.com> wrote:
<= blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px= #ccc solid;padding-left:1ex">On 28-Oct-19 05:29, Fernando Gont wrote:
...
> Robustness has a lot to do with being able to gracefully handle the ca= se
> when others screw up.

This. We can't make the world perfect, but we can make individual compo= nents
that expect imperfection.

This is not what I said, as it is i= mplying that I said there is no need for robustness.

Robustness suffers from the law of diminishing returns. At some point th= e cost to design and implement robustness exceeds the either the likelihood= it will be needed or the benefit it returns if needs to be used.

Sugar is sometimes poured into the fuel tanks of cars, whic= h will destroy the engine. It is not common and is done maliciously. If rob= ustness should be universal, does that mean car engines should be made impe= rvious to sugar, at great expense to everybody, despite the need for that r= obustness being rare?

Some ISPs are shifting the c= ost and consequences of their design decision, which they can change, onto = the IETF, CPE vendors and host implementers, and indirectly their customers= '. Are they willing to pay these other parties to fix a problem that th= ey are both causing and could fix themselves?

(Can I bill these ISPs for the time I spent implementing the 'De= precatePrefix' and 'DecrementLifetimes' options in 'radvd&#= 39; in 2011 that address this problem? Those options have limitations that = I still don't think are acceptable, which is why ISPs fixing their back= end systems is still the best solution.)

<= div dir=3D"auto">

=C2=A0 =C2=A0 Brian
--0000000000002e6bbf0595ec0777-- From nobody Sun Oct 27 15:52:21 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02E8A12003E for ; Sun, 27 Oct 2019 15:52:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uCEiQvK9oNw0 for ; Sun, 27 Oct 2019 15:52:18 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [IPv6:2607:7c80:54:3::74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 523D61200B6 for ; Sun, 27 Oct 2019 15:52:18 -0700 (PDT) Received: from astfgl.hanazo.no (246.51-175-81.customer.lyse.net [51.175.81.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 90C174E11B7E; Sun, 27 Oct 2019 22:52:17 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 8DDB5202D8CF; Sun, 27 Oct 2019 23:52:15 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Sun, 27 Oct 2019 23:52:15 +0100 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> To: Philip Homburg X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Oct 2019 22:52:20 -0000 >>> Note that we could change SLAAC to allow the lifetime of a prefix to = be >>> set to zero, instead of having to wait for 2 hours. That might be an >>> improvement but requires careful analsysis. >>=20 >> Can you explain how operating a public service should work on this >> type of network? >=20 > Could you be more specific what you consider a 'public service' and = what > you expect to break? The (only) value (sic) of IPv6 to end-users is retoration of end to end = connectivity at the network layer. I challenge you to find in the "real world" of end-users many with much = trust in the ad-based "you are the product" centralised services in the = current Internet. IPv6 was meant to allow end-users to run decentralized services. - hidden primary DNS - mail - web - home-automation - video conferencing - jabber All of those have great open source software. To use Owen's paragraph: "I don=E2=80=99t know of a single server which operates that way = currently. Can you point to a working example?" Assuming all the moving parts required were updated to support flash = renumbering (I have little proof they even support graceful = renumbering),=20 if the end-user cannot trust the lifetimes in the delegated prefix, DNS = with TTL=3D1s is presumably the only choice? > What I described is basically what happens on IPv4 when a CPE uses NAT=20= > and gets a new IPv4 address from the ISP. If making IPv6 no better than IPv4 + NAT, then stick with IPv4 + NAT. IPv4 NAT scales very well as it turns out. > Flash renumbering is far from ideal, but a reality on the current = internet. > Any application that is suitable for home use is expected to deal with = that > scenario. We don't need IPv6 to maintain the status quo. > Note that with automatic DNS updates, you can probably run a mail = server (or > your personal 'cloud') on such a link. But that is not a common use = case > at the moment. And don't get me wrong, I'm all for making IPv6 addressing / onlink = behaviour more robust. But not justified in this way that can be seen to allow for practices = that removes any benefit of IPv6 over IPv4/NAT. Ole= From nobody Mon Oct 28 01:52:16 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1BCC1200FF for ; Mon, 28 Oct 2019 01:52:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z5Q4W5H53v1h for ; Mon, 28 Oct 2019 01:52:12 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EDF041200F7 for ; Mon, 28 Oct 2019 01:52:10 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iP0kt-0000GkC; Mon, 28 Oct 2019 09:52:03 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> In-reply-to: Your message of "Sun, 27 Oct 2019 23:52:15 +0100 ." Date: Mon, 28 Oct 2019 09:52:02 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 08:52:15 -0000 > The (only) value (sic) of IPv6 to end-users is retoration of end > to end connectivity at the network layer. End users at not really part of the equation at the moment. Many people have tried to convince their ISPs to provide IPv6 and failed. For home use, IPv6 is what you get when the ISP has decided that providing IP services over IPv6 instead of or next to IPv4 is worth it. This is not my ideal world. But realistically, we live in a world that still has to transition away from IPv4. > I challenge you to find in the "real world" of end-users many with > much trust in the ad-based "you are the product" centralised services > in the current Internet. IPv6 was meant to allow end-users to run > decentralized services. This is a separate issue. The problem started when people paid for connectivity but assumed they paid for internet services. There are plenty of providers for mail, messaging, etc. where you are not the product. But very few customers are willing to pay extra for such services. At the same time, where an ISP does provide stable addresses, most people find it hard to run services at home. > - hidden primary DNS - mail - web - home-automation - video > conferencing - jabber Many people have a more or less fixed IPv4 address. Setting up a few port forwards in a CPE is not that hard (and with IPv6, you have to do the same for the firewall in the CPE). Yet very few people run these services at home. Basically, the market value for those service at a residential home is zero. > Assuming all the moving parts required were updated to support > flash renumbering (I have little proof they even support graceful > renumbering), if the end-user cannot trust the lifetimes in the > delegated prefix, DNS with TTL=1s is presumably the only choice? ISPs that do flash renumbering, typically do that after a link down event. Assuming those events are rare (and ISPs have an incentive to make them rare because it interferes with watching video), then a TTL of a few minutes should work. > If making IPv6 no better than IPv4 + NAT, then stick with IPv4 + > NAT. IPv4 NAT scales very well as it turns out. IPv4 NAT doesn't scale very well when law enforcement wakes up and find out that a single IP address means lots of different people at the same time. IPv4 NAT also doesn't scale very well when it comes to bandwidth. For large ISPs, IPv4 NAT is also annoying from a network management point of view because it is not possible to uniquely number all devices in the network. Plenty of reasons for an ISP to move to IPv6 even if they don't care about providing end-to-end connectivity. > We don't need IPv6 to maintain the status quo. We are out of IPv4 addresses. There is a lot of demand for IPv4 addresses and the lack of them is a barrier against entry. > And don't get me wrong, I'm all for making IPv6 addressing / onlink > behaviour more robust. But not justified in this way that can be > seen to allow for practices that removes any benefit of IPv6 over > IPv4/NAT. The current internet has moved to lots of short lived flows. If we can tune systems that new address information propagates quickly, both on the local network and in DNS, then unstable prefixes could very well something we can live with. In fact, we can also use the letsencrypt argument: by having short lived certificates letencrypt strongly encourages automating the whole process. Lots of tooling popped up to support that model. Right now we are stuck in a model where too many files are hand edited with address and prefix information. At the same time, everybody expects phones and laptops to seemlessly move between networks, picking up new addresses and removing stale ones as they move around. From nobody Mon Oct 28 02:18:09 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 822791200F7 for ; Mon, 28 Oct 2019 02:18:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.126 X-Spam-Level: X-Spam-Status: No, score=-1.126 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FORGED_HOTMAIL_RCVD2=0.874, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=hotmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n7oIxL6X2JUr for ; Mon, 28 Oct 2019 02:18:05 -0700 (PDT) Received: from NAM04-BN3-obe.outbound.protection.outlook.com (mail-oln040092009025.outbound.protection.outlook.com [40.92.9.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D3D812003F for ; Mon, 28 Oct 2019 02:18:05 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CCS5MMOxB+cE+7HKJVdrOlOooJX69w1EY/n8U8qiSzBABWNAely+cmaYxIIrMwynsT2Na7k5lmiJHFxUq6topuuxVZ1MimtzsghERLBLqFs7FJFpHAY+Vxo+5fKJorYXDeL5ByOuYYDrFyxuKbib4l71cEZUV7wgiBqLTLQrkGIsb5t8MgfgnDsYyUq/bXxeAqE0C0xVhSz7EGarZfwp7ZWsPYu/+U1f0zQpo47y6kAkN1HjEvOqyhaRKfInAi+AqvCk6iRO37J4q9hVYdGLO9uRYTtUf9s0CBwAD/hxfBpHD3RMVWsPsLnJDrOqepFUONaLUFqEm0dfuBekTyxAPQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UssSwXEmH1J6re0CBTF/km6EbAk/+d3wcKeJgTG6Cv0=; b=PxM+8HjXOn89lrupL4TSdMLdp7eBF2V/FMlF7NDCXvU+OGN4YX1jBnLvGI5kyI+Qo/NZzc06mBAcF5zOB5WScwWGhgFxyvsNXg6iw5ue8t78aatjDwHp6w6eASBdc+8ITN16+L4z4wpx4dlEa0m8WcO9VfcIWrZm8pK6PGtox1g8IACCOtmQNws6wi8ECHkiNvKpQd7sVH4nGVkBsHlh+LofcFqpeZWNPXSXPA2/xyMn7ih5+83n1/V6fJ6lGiVZYxwRZru71CPMrnYm2WJaFN7wC6Cv1c1SO+b9aMXnKuR6j402FskcTxPDpGgoFj7YysDl2Di4gnFw9THVxqTaxA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UssSwXEmH1J6re0CBTF/km6EbAk/+d3wcKeJgTG6Cv0=; b=qnGAE+nSUzx4TzCFN1SjEYls0pChSGg0rpY5Ftt+tI/xmyou18IVS8oWt83x1qHcAqPX+2tqH0OhtfzxygtNFoxK8euoJ9rj8/q7qViv2STNfKXJ22hbQmyGek7EpV0r525coAJHb/E12104lK6HMv2k8czmLRn3T6Hr3MNZ7l7dZZgmBGPddZ64trPEYR9Cd2dkOFm6TBqjjR2RDAKKywBp6sjjsTy3zA1sNlYPzEQegsvuml5rE6RqOaXHgIVEl1LezKsXUU47IknsuNe3D7Q8m30A8VKlCmzbkOlKI5S2oNUxQmeXMgAXU2D3giJrkfTh0ir8AvXeP6Jo8isVrA== Received: from SN1NAM04FT033.eop-NAM04.prod.protection.outlook.com (10.152.88.56) by SN1NAM04HT106.eop-NAM04.prod.protection.outlook.com (10.152.89.76) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2387.20; Mon, 28 Oct 2019 09:18:04 +0000 Received: from DM6PR04MB4009.namprd04.prod.outlook.com (10.152.88.53) by SN1NAM04FT033.mail.protection.outlook.com (10.152.88.101) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2387.20 via Frontend Transport; Mon, 28 Oct 2019 09:18:04 +0000 Received: from DM6PR04MB4009.namprd04.prod.outlook.com ([fe80::7185:46b3:d5ae:62b3]) by DM6PR04MB4009.namprd04.prod.outlook.com ([fe80::7185:46b3:d5ae:62b3%5]) with mapi id 15.20.2387.025; Mon, 28 Oct 2019 09:18:03 +0000 From: Kristian McColm To: Philip Homburg , "v6ops@ietf.org" Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AQHVibO/i8YLMLGJDU2B6ep98TTbvKdoZH0AgAGe9YCAAaEQgIACS40AgAA1BICAAERiAIAACLiAgAATIoiAABa1AIAAQ5WGgAA/WYCAAKe9eIAABeLA Date: Mon, 28 Oct 2019 09:18:03 +0000 Message-ID: References: <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> In-Reply-To: Accept-Language: en-CA, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-incomingtopheadermarker: OriginalChecksum:E23E3B12AD18623D880AEC3C8948D5EDC5194C1C3B384273D6E954163C91BF8D; UpperCasedChecksum:626A953A2353FFEE58D4D55EF78B5D756D7A27CFF9D413D76D01D9CF894B08B2; SizeAsReceived:7181; Count:43 x-tmn: [0ya1+HpnZqKJmGyzPUJaOwSc0sDnRqGTJ1h6mYKgRplj3Krn+E9Nc94bcXpQpn0q] x-ms-publictraffictype: Email x-incomingheadercount: 43 x-eopattributedmessage: 0 x-ms-traffictypediagnostic: SN1NAM04HT106: x-ms-exchange-purlcount: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: wgtROBQGFTO8URmZekFSSZBbcl6A+Hn4OsYGLBFaV2SqtUiInX/SZZKAPSiBWpbsq18nXVkhS6LKFRpUTv/gpykJY8GwHo+N4yrDKvBvu4cnsSHQVCi4EpLtWaq8dLRd+J6aOcb+WbgS2cBCAdiO0ERwzw3U/NmhMVKqed22b841nSr4hFUFiHewCp2f+m7cxDPYESf4hau1u5xqA+hpF5EIgRRTon007od7CLkzOcI= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: ebf27b1f-326a-4377-d5b2-08d75b87bca5 X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Oct 2019 09:18:03.9022 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1NAM04HT106 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 09:18:08 -0000 > For large ISPs, IPv4 NAT is also annoying from a network management point= of view because it is not possible to uniquely number all devices in the n= etwork. For cellular networks, NAT is also very expensive when we talk about CGN (b= oth NAT44 and NAT64) and by simply deploying dual-stacked connectivity to y= our users you can immediately reduce CG-NAT requirement by around 60%, due = to most cellular data traffic being to native IPv6 enabled sites like YouTu= be, Facebook, Instagram etc. -----Original Message----- From: v6ops [mailto:v6ops-bounces@ietf.org] On Behalf Of Philip Homburg Sent: October 28, 2019 04:52 To: v6ops@ietf.org Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workaroun= ds > The (only) value (sic) of IPv6 to end-users is retoration of end to=20 > end connectivity at the network layer. End users at not really part of the equation at the moment. Many people hav= e tried to convince their ISPs to provide IPv6 and failed. For home use, IPv6 is what you get when the ISP has decided that providing = IP services over IPv6 instead of or next to IPv4 is worth it. This is not my ideal world. But realistically, we live in a world that stil= l has to transition away from IPv4.=20 > I challenge you to find in the "real world" of end-users many with=20 > much trust in the ad-based "you are the product" centralised services=20 > in the current Internet. IPv6 was meant to allow end-users to run=20 > decentralized services. This is a separate issue. The problem started when people paid for connecti= vity but assumed they paid for internet services. There are plenty of provi= ders for mail, messaging, etc. where you are not the product. But very few = customers are willing to pay extra for such services. At the same time, where an ISP does provide stable addresses, most people f= ind it hard to run services at home. > - hidden primary DNS - mail - web - home-automation - video=20 > conferencing - jabber Many people have a more or less fixed IPv4 address. Setting up a few port f= orwards in a CPE is not that hard (and with IPv6, you have to do the same f= or the firewall in the CPE). Yet very few people run these services at home. Basically, the market value for those service at a residential home is zero= . > Assuming all the moving parts required were updated to support flash=20 > renumbering (I have little proof they even support graceful=20 > renumbering), if the end-user cannot trust the lifetimes in the=20 > delegated prefix, DNS with TTL=3D1s is presumably the only choice? ISPs that do flash renumbering, typically do that after a link down event. Assuming those events are rare (and ISPs have an incentive to make them rar= e because it interferes with watching video), then a TTL of a few minutes s= hould work. > If making IPv6 no better than IPv4 + NAT, then stick with IPv4 + NAT. =20 > IPv4 NAT scales very well as it turns out. =20 IPv4 NAT doesn't scale very well when law enforcement wakes up and find out= that a single IP address means lots of different people at the same time. IPv4 NAT also doesn't scale very well when it comes to bandwidth. For large ISPs, IPv4 NAT is also annoying from a network management point o= f view because it is not possible to uniquely number all devices in the net= work. Plenty of reasons for an ISP to move to IPv6 even if they don't care about = providing end-to-end connectivity. > We don't need IPv6 to maintain the status quo. We are out of IPv4 addresses. There is a lot of demand for IPv4 addresses a= nd the lack of them is a barrier against entry. > And don't get me wrong, I'm all for making IPv6 addressing / onlink=20 > behaviour more robust. But not justified in this way that can be seen=20 > to allow for practices that removes any benefit of IPv6 over IPv4/NAT. The current internet has moved to lots of short lived flows. If we can tune= systems that new address information propagates quickly, both on the local= network and in DNS, then unstable prefixes could very well something we ca= n live with. In fact, we can also use the letsencrypt argument: by having short lived ce= rtificates letencrypt strongly encourages automating the whole process. Lots of tooling popped up to support that model. Right now we are stuck in a model where too many files are hand edited with= address and prefix information. At the same time, everybody expects phones= and laptops to seemlessly move between networks, picking up new addresses = and removing stale ones as they move around. _______________________________________________ v6ops mailing list v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops From nobody Mon Oct 28 02:19:56 2019 Return-Path: X-Original-To: v6ops@ietf.org Delivered-To: v6ops@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 405FE1200FF; Mon, 28 Oct 2019 02:19:55 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: v6ops@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: v6ops@ietf.org Message-ID: <157225439522.19974.4722438183502158312@ietfa.amsl.com> Date: Mon, 28 Oct 2019 02:19:55 -0700 Archived-At: Subject: [v6ops] I-D Action: draft-ietf-v6ops-nd-cache-init-00.txt X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 09:19:55 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IPv6 Operations WG of the IETF. Title : Neighbor Cache Entries on First-Hop Routers: Operational Considerations Author : Jen Linkova Filename : draft-ietf-v6ops-nd-cache-init-00.txt Pages : 13 Date : 2019-10-28 Abstract: Neighbor Discovery (RFC4861) is used by IPv6 nodes to determine the link-layer addresses of neighboring nodes as well as to discover and maintain reachability information. This document discusses how the neighbor discovery state machine on a first-hop router is causing user-visible connectivity issues when a new (not being seen on the network before) IPv6 address is being used. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-v6ops-nd-cache-init/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-v6ops-nd-cache-init-00 https://datatracker.ietf.org/doc/html/draft-ietf-v6ops-nd-cache-init-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 28 02:22:04 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41FF11200DF for ; Mon, 28 Oct 2019 02:22:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2iQDQPkKN2Bl for ; Mon, 28 Oct 2019 02:22:02 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24BFB12003F for ; Mon, 28 Oct 2019 02:22:02 -0700 (PDT) Received: from astfgl.hanazo.no (unknown [IPv6:2a01:79c:cebd:47d8:1877:7873:cee8:d3ed]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id D2E354E11AEC; Mon, 28 Oct 2019 09:22:00 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 00BB42037220; Mon, 28 Oct 2019 10:21:57 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Mon, 28 Oct 2019 10:21:57 +0100 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <21E28E8F-8E91-47D6-8337-9FF0359D67B8@employees.org> References: <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> To: Philip Homburg X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 09:22:03 -0000 Philip, I didn't see your answer to: "I don=E2=80=99t know of a single server which operates that way = currently. Can you point to a working example?" I take it the answer is: "currently none"? Ole > On 28 Oct 2019, at 09:52, Philip Homburg = wrote: >=20 >> The (only) value (sic) of IPv6 to end-users is retoration of end >> to end connectivity at the network layer. >=20 > End users at not really part of the equation at the moment. Many = people have > tried to convince their ISPs to provide IPv6 and failed. >=20 > For home use, IPv6 is what you get when the ISP has decided that = providing=20 > IP services over IPv6 instead of or next to IPv4 is worth it. >=20 > This is not my ideal world. But realistically, we live in a world that = still > has to transition away from IPv4.=20 >=20 >> I challenge you to find in the "real world" of end-users many with >> much trust in the ad-based "you are the product" centralised services >> in the current Internet. IPv6 was meant to allow end-users to run >> decentralized services. >=20 > This is a separate issue. The problem started when people paid for > connectivity but assumed they paid for internet services. There are = plenty > of providers for mail, messaging, etc. where you are not the product. = But > very few customers are willing to pay extra for such services. >=20 > At the same time, where an ISP does provide stable addresses, > most people find it hard to run services at home. >=20 >> - hidden primary DNS - mail - web - home-automation - video >> conferencing - jabber >=20 > Many people have a more or less fixed IPv4 address. Setting up a few = port > forwards in a CPE is not that hard (and with IPv6, you have to do the = same > for the firewall in the CPE). >=20 > Yet very few people run these services at home. >=20 > Basically, the market value for those service at a residential home is = zero. >=20 >> Assuming all the moving parts required were updated to support >> flash renumbering (I have little proof they even support graceful >> renumbering), if the end-user cannot trust the lifetimes in the >> delegated prefix, DNS with TTL=3D1s is presumably the only choice? >=20 > ISPs that do flash renumbering, typically do that after a link down = event. > Assuming those events are rare (and ISPs have an incentive to make = them > rare because it interferes with watching video), then a TTL of a few > minutes should work. >=20 >> If making IPv6 no better than IPv4 + NAT, then stick with IPv4 + >> NAT. IPv4 NAT scales very well as it turns out. >=20 > IPv4 NAT doesn't scale very well when law enforcement wakes up and = find out > that a single IP address means lots of different people at the same = time. >=20 > IPv4 NAT also doesn't scale very well when it comes to bandwidth. >=20 > For large ISPs, IPv4 NAT is also annoying from a network management = point of > view because it is not possible to uniquely number all devices in the=20= > network. >=20 > Plenty of reasons for an ISP to move to IPv6 even if they don't care = about > providing end-to-end connectivity. >=20 >> We don't need IPv6 to maintain the status quo. >=20 > We are out of IPv4 addresses. There is a lot of demand for IPv4 = addresses > and the lack of them is a barrier against entry. >=20 >> And don't get me wrong, I'm all for making IPv6 addressing / onlink >> behaviour more robust. But not justified in this way that can be >> seen to allow for practices that removes any benefit of IPv6 over >> IPv4/NAT. >=20 > The current internet has moved to lots of short lived flows. If we can > tune systems that new address information propagates quickly, both on = the > local network and in DNS, then unstable prefixes could very well = something > we can live with. >=20 > In fact, we can also use the letsencrypt argument: by having short = lived > certificates letencrypt strongly encourages automating the whole = process. > Lots of tooling popped up to support that model. >=20 > Right now we are stuck in a model where too many files are hand edited = with > address and prefix information. At the same time, everybody expects > phones and laptops to seemlessly move between networks, picking up new > addresses and removing stale ones as they move around. >=20 >=20 From nobody Mon Oct 28 02:31:57 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BEF2A120103; Mon, 28 Oct 2019 02:31:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r7T6IXNHUP-H; Mon, 28 Oct 2019 02:31:50 -0700 (PDT) Received: from mail-qk1-x734.google.com (mail-qk1-x734.google.com [IPv6:2607:f8b0:4864:20::734]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 308AD1200DF; Mon, 28 Oct 2019 02:31:50 -0700 (PDT) Received: by mail-qk1-x734.google.com with SMTP id e66so7809582qkf.13; Mon, 28 Oct 2019 02:31:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=ZsfoTri+5RmuEWnXa8NEkpnjjUfsYNULqEX9YGLDxHM=; b=LD3bGJMBUwdKmJ2IJnKtY+RL7lYAELGyGg6HtBnVnwfp+4DZ+CqUWpmhGh/s6LSsSY 6orlCpUTShCGLOVPzoB1Xh+PxWUFosqhcLTliejGGm9LSN4/IQm55EgzX2LnziEiiAC5 e64c0itlktIg5UcqYPts+gZHJCXfz8/5o/Os821PLSIKR4pRdR+V5Vkc2xBWGNptQCPB YIp/tdB5zkmdcHyssu5JCPywTKK0mhYWhupb3oTBQEWocZbgNuu797s5RwiM/lHnC0B2 z6PW8VGPKPxAhXwOLMgmOFXG8Wgs3nm6Gh+bQDEZCptC7aWR/y9hjziKbUAPeS4uvphL KSBg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=ZsfoTri+5RmuEWnXa8NEkpnjjUfsYNULqEX9YGLDxHM=; b=oMo9D/7Zg2W0kMiVyNDhjex/RZ14G3dbjyJRzdzwn968itVITWfc2a5QnRuxqdH8Mk 0n0lPgzepP3hWjc4ofnCGvH733VpzhFRQbmyanDiecuTDZGuE013Gu4wTM9R8R2YidmR aNe6tTvoyjl0wu0tKYqY1DqXiS0mJbj8C/UW8WPLhdlny5sei94oRMFF0ktX21cD4ORS 4eHWenF9XvMI1mVCFuHQAsW1zsFqoI1FbzPFycUDBcOZiv1+F3EzjLI7jcWy24ipZ66O elYBn7SO/iBhGHr8aEZQPLRY/9GGaxrlM4ucqOAu3d3m45srUZUvaZtoVf0zwhIHOtQx jfKg== X-Gm-Message-State: APjAAAWH/LciuEcq9RZf/LFzM+3T0jbZUT/DrpZHlBpGCp68BsIy8cve yem5Sms1G6jgWXHZfp+pbFamlkC/szuz/xGlPVdyzteg X-Google-Smtp-Source: APXvYqxUETE7WP203HK5/fwFxtcNIEKPaoJcF/MMTJVjeDRstCdGavjBcPmUkutVu/cFxcM4OhwAjHVR7Q3lnfidAWQ= X-Received: by 2002:a37:2f42:: with SMTP id v63mr14724972qkh.277.1572255108645; Mon, 28 Oct 2019 02:31:48 -0700 (PDT) MIME-Version: 1.0 From: Jen Linkova Date: Mon, 28 Oct 2019 20:31:37 +1100 Message-ID: To: V6 Ops List , 6man <6man@ietf.org> Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [v6ops] Neighbor Cache Entries on First-Hop Routers: New Drafts Posted. X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 09:31:52 -0000 Hello, During v6ops session at IETF105 it was suggested that in addition to https://datatracker.ietf.org/doc/draft-linkova-v6ops-nd-cache-init/ another draft is required, for 6man, which would summarise the proposed changes to RFC4861. So here we are: I've just submitted two drafts: 1) https://tools.ietf.org/html/draft-ietf-v6ops-nd-cache-init-00 - the v6ops@ WG document which is replacing draft-linkova-v6ops-nd-cache-init. The draft discussed the operational issues, various approaches to solve the problem and proposed solution. The proposed changes to RFC4861 is described in 2) https://tools.ietf.org/html/draft-linkova-6man-grand-00 Any comments/suggestions are appreciated. I'm still not sure if it's the best way to split those drafts. Known Issues: draft-linkova-6man-grand: Pls ignore the sentence in the Abstract which suggests updating RFC4862/RFC4429. I do not think it's necessary (but I might be wrong indeed). -- SY, Jen Linkova aka Furry From nobody Mon Oct 28 02:46:43 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E3DC12004A for ; Mon, 28 Oct 2019 02:46:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 3.16 X-Spam-Level: *** X-Spam-Status: No, score=3.16 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, SPOOFED_FREEMAIL=1.999] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6b9ycEXLimkv for ; Mon, 28 Oct 2019 02:46:40 -0700 (PDT) Received: from cirse-smtp-out.extra.cea.fr (cirse-smtp-out.extra.cea.fr [132.167.192.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA2DF120018 for ; Mon, 28 Oct 2019 02:46:39 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by cirse-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9S9kbwv039476 for ; Mon, 28 Oct 2019 10:46:37 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id B6C25201BE9 for ; Mon, 28 Oct 2019 10:46:37 +0100 (CET) Received: from muguet2-smtp-out.intra.cea.fr (muguet2-smtp-out.intra.cea.fr [132.166.192.13]) by pisaure.intra.cea.fr (Postfix) with ESMTP id A8A072007FB for ; Mon, 28 Oct 2019 10:46:37 +0100 (CET) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet2-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9S9kblq017954 for ; Mon, 28 Oct 2019 10:46:37 +0100 To: "v6ops@ietf.org" From: Alexandre Petrescu Message-ID: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> Date: Mon, 28 Oct 2019 10:46:37 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="------------1C10E4B8AE72B1BD8A5199B6" Content-Language: fr Archived-At: Subject: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 09:46:42 -0000 This is a multi-part message in MIME format. --------------1C10E4B8AE72B1BD8A5199B6 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit This message is out of focus of current discussions. Why the presence of a DHCPv6 server breaks Android computers? On my CPE at home, of ISP Free, I noticed recently this message: 'Watch out: if you activate the DHCPv6 server, certain Android computers are at risk of loosing their IPv6 connection'. Why and how the presence of a DHCPv6 server on the CPE breaks Android computers? I would like to try this DHCPv6 server to connect my Windows 2-in-1 computer to work at home, but I dont want to break the other Android tablet that shows the weather report. Alex --------------1C10E4B8AE72B1BD8A5199B6 Content-Type: multipart/related; boundary="------------BEA361DAC69021183B7750DF" --------------BEA361DAC69021183B7750DF Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit

This message is out of focus of current discussions.

Why the presence of a DHCPv6 server breaks Android computers?

On my CPE at home, of ISP Free, I noticed recently this message: 'Watch out: if you activate the DHCPv6 server, certain Android computers are at risk of loosing their IPv6 connection'.

Why and how the presence of a DHCPv6 server on the CPE breaks Android computers?

I would like to try this DHCPv6 server to connect my Windows 2-in-1 computer to work at home, but I dont want to break the other Android tablet that shows the weather report.

Alex

--------------BEA361DAC69021183B7750DF Content-Type: image/png; name="keihgodlboldplel.png" Content-Transfer-Encoding: base64 Content-ID: Content-Disposition: inline; filename="keihgodlboldplel.png" iVBORw0KGgoAAAANSUhEUgAAArAAAABzCAYAAABgpzGFAAAY0ElEQVR4nO2de4wd1X3HV8q/ /aNqWtIQmqKG8Md1pQiv7N29dmirKO4aaGywroS9+I+0Ka1BNWrd1v1jN7cVUSuVeoOhD1rX RFSryNkQAqGBTTdLEzAYOStevZvwMBj8AG9tV1ZC/v71j3tn7pwz5zn3Obufj/SVdu/MnDmv Oec7vzl37ki1WhWEEEIIIYTKopFBZwAhhBBCCKEYYWARQgghhFCphIFFCCGEEEKlktvAbqnK 6PZx2bBns2zYs1lGJ8elumXwmUYIIYQQQutXVgM79tsT8ut/uVk+/ujnZONzd8jGZ++QX330 c3LtX4zJ2G9NDDzjCCGEEEJofcpoYCe2TMg1M2NSPfklOfL+E/LguW/Kg+e+KUfef0ImTv6B /Nr0GJFYhBBCCCE0EBkN7A07xuWTT98k/3HhKbnxpT+Wj/ygKh/5QVVufHmfPPLBU/LJp26S G35vfOCZ75Wml6TJ0vTA87KW1KzX03J0apD5mJakeRWGsK3phwghhJBZRgN7/R9tlu0v3yP3 vvuwjCyNysgzm5paGpV73z0qn3/pT+T6P9wcdIKpo6c1pzBoA+NX74zDlOSqQ0SWpsOPO310 auD1Uyw/LeN4+qhMDazPtPOd1PlwmERzffa9Hz5wVAwfx59/SksnoM0RQgihGBkN7Cf+ZrPs f2tWvvT638qNL++Te96alf1vzcrvvHy3/ObJPfLx52+RT/z1mCfxzCSZTmCtz9Z7RKntTGQ6 6Jg1YGBbZXbv3+s+k0Rfh+0makDtq/fD1Hgm9dOOVse2M6YVIYRQL5UzsOOfnZBf+reqHHn/ CVn8v5PyD2e+LrevzMjtKzNy/9ljcujM1+Vjx7fLLz60WcY/6/gyVzo56mZhSo4ebZkRPVKT 3TfdtiRLmWe+6UTq216tiulxcTPylvk8MUbZidc6sRfIp7Nu9PTNaeQjkpljrWVUty1NJxG9 JZnuqO58+TEraPlAT/uMKeq4JNN6W0ybFhi0zpG78VDr11rfxmUL7Xxb63Ng/bCdbrtJHpNv JSfP3ExMtZ23TA3tDQJCCKG1ppyBHd0+Ltc8OSnPXnlF7n7zPvmV45Oy7dV75POv7JdfPj4p d715n/zde4/ILzy2VUa32w1se+KzRGIyE65qBlqTX2ayXpqu5idX3/Y0vSR97fGxsr+2b3Zi 7zSfprI7jIk5DVuEzlPGbATtdHqGTJkK1l10xLC1vycq1/M+kzOcWltYDWq8gVXquzotS9ky 5dKx1OfA+qHBwC5Na2bV0C+M5l944oIQQqjryhnYDVNjsvmFL8q/v/8duer4pNRPH5GnL5+Q 7156Xuqnj8jHjk/KQ+cfkxuev0M2TNmXEfjMiGl9XzsIOhVhVszbp9oza5p+7jNtwjWZmmOd 5tNUP44IrDkNs8Hxl9HyCLjjuos0sMn5PEam533GY2Dzbd2BgXXWS1j7Dq4f2urLfQ22I8m2 +kEIIYS6o5yBve6uTXJb46/kwKnDsuHkbrn/7DfkH889Kg+em5f7z35DKid3y5+fekBu/Z+D ct1dm6wJd2JGZGnaMSHrESbzdlswyHnOJH+BxiEon6b6CTaw7oinv4yWvHRcd3EGNjE2PhPT 8z4TaGDbZSpuYHNldS1N6NDAdr8fqmSPV0xz8k8rT3kDm1m2QRQWIYRQF5UzsNffuVlufuXP ZPqdh+RTJ26Tr549Jg+d/7b8y/nH5P6zx+Q3TtwmM+/8q2x/5U/l+jsdbyKwflGpuZ7RFOUL iyiFGVhT+rr0tYcmU/NAp/kMqZuCBtZfxmIG1p9ujIFN9g34wlqv+8yADGz+0Xt8BLa//TAg ars0nV/XbGi/4XjLA0IIobWmnIH9zK1jct3iTnnkg+/KtSd2yO0r0/KN//2+HFtdlNtXpuXa EzvlkQ+ekk/91w75zK2ud8GavlHemtCcESPfEoEwA2udjKeXDBN+N9bA9tLAWoyAr4wFDaw/ 3QhjErh8oC99JnQNbHJu67pry7pTS33n6sqz1tTYT/raD11fwtK+DKdEyyMi0gghhFAHyhnY ia1Vueq+Mfn9n3xF/unco/LpF2tyzQtfkGte+IJ8+sWa/PP5b8kXf/IVuervx2Riq/8E+Sen meha4LeqCxnYalVs77s8ffSBdN/c488O3kLgNw6+92+60tC/yW54TKuUsQMD603XlR9VocsH +tJnfAa2qkXlT5/OGTrzdp9h0+rKkK6xPgfWD91vEcjWQS4Cb1iGMByvfkMIIbSWZHwP7MZb JuSjX9sie378ZXn4gyflq2ePyf1nj8nDHzwpu1e+LB/92hbZeIvjFVoIVasStXxgGBUUkUQI IYRQv2U0sNVqVUZvmpCr7x2Tqx/fJqPP7ZXR5/bK1Y9vk6vvHZPRmzCvKEBRyweGQerrrvJr VxFCCCE0DLIa2Gq1KhNbJmTjzeOyYc9m2bBns2y8eVwmtmBe0VqV4QcHMK8IIYTQ0MlpYBFC CCGEEBo2YWARQgghhFCphIFFCCGEEEKlEgYWIYQQQgiVShhYhBBCCCFUKo1Uq1UZHR1NtWnT Jtm2bZvs2LFDarXamtTOnTtlcnJSxsfHlbKPjo7K2NiY7N69W+6++245ePDgmtT+/ftl7969 snXr1lz510P7F+0bCCGEEBoOKQZ206ZNsmvXroGbiH5p165dilEZGxuTAwcODNxg9ksHDhxQ TOx6a/+YvoEQQgih4ZFiYCcnJwduHPqtycnJtPx79+4duKnst/bu3buu2z+0byCEEEJoeKQY 2J07dw7cNPRbu3btSsu/f//+gRvKQURh13P7h/YNhBBCCA2PFAM7aMMwKCXlH7SZHJTWe/uH 9A2EEEIIDY96bGBnZG55WZYXDsu+vhzX0sycLC8vy/LcDAYWA4uBRQghhNaYChrYfXJ4Yblp EjOam1H3m5krZkKLHtcXAzv3muRYXZRZfftrc+kx7Y+SdOYkl8prc/60PVIPf03memFgk7rN KtNW+w4vtD6fk5nM/guH91mPT7dl219P33PeoD6VHtvKGwYWIYQQKqUKGNhWdNRgWIdG/TCw iUGdXZTVrGH0GtjEvK7K4qwl7cS0GtLymde2Se5RBFav232HZSFjCtsGttU/sgY2pl30fZP/ E9MakVZiXov010FfoAghhBDKK9rAJgZFj5oZzYceKUtNyELL9GhRNNtxiUlKI3FzMpMaJ0Mk r58G9uBBmV1cbfnOWa+BVfa1pZ0Y2MQcr74gJ1Y1g5puW5TZ7N+9XkJgqNtsn0j+npuba+6T MbBBfSfUwKZ94ogcWdAMara/ZP8ucDM06AsUIYQQQnlFG1hvNKtlGHQzqUTgWmZCSct1XGpC FpRoX/u8yZKGBTm8r/8GVvnMtAwgXSXgiZRqBtZljI3bskSY2Zj2N9Zt5rPUwM7MyNzynMyY 2t+xfCDUwCpmWNvXuK3g0oNBX6AIIYQQyqszA6tFQedm1EfIijLRuMRoZNNyHqc9ptYjf20N kYG1RGCDDKzqetV1s6uLMntwVpr+tblsQY/qOqO8fTOwzfadm9PWwGaWoChtHGpgjcdlv/SX 3MyoSxqS80dFgTGwCCGE0FCqK0sITEbUaBACDKzxOMNjYH3/ZlqDMbA9W0JgXOe6KouzLTOb nEM/Z8Ta2Z4tIcisf41p19AIrPnGakEO72uZWf042/8YWIQQQqh06sqXuJSobGpaDN/0dhhY 53EGo5Mc2zRGA1xCoK8/7eaXuHS1zrW6uqodn43Oxn+hK6r9bV/i0h7tN/tGu6+E3NB0YmDT JSgLC+1+kO2vpmUrGFiEEEKolOria7QypsH2BSuXgXUdZ4zUZR9FL8hCvw2sbb1pN16jZV2/ miwdMOyTvg0h2Ry2fKCwgbWsKVUNrHqjkXs9lsXYOl+jZV2/mumT+j5avwpdPoCBRQghhIZT /BJXrIFdg1rv7R/SNxBCCCE0PMLA1jCw6739Q/oGQgghhIZHGNgaBna9t39I30AIIYTQ8AgD W8PArvf2D+kbCCGEEBoeYWBrGNj13v4hfQMhhBBCwyPFwN55553rUpR/fZc/pG4QQgghNDxS DCxCCCGEEELDLgwsQgghhBAqlUaq1aoghBBCCCFUFhGBRQghhBBCpRIGFiGEEEIIlUoj1WpV AAAAAADKAgYWAAAAAEoFBhYAAAAASgUGFgAAAABKBQYWAAAAAEoFBhYAAAAASgUGFgAAAABK BQYWAAAAAEoFBhYAAAAASgUGFrpPoy6VSl0ag84HgIiINKReGZGR2nwHSYT26S6cqyx0+zpf T+PGMJd1mPMWy1oqS98ozxhW0MC2CpjrGA2pVypSb/g+K4ohrX500FJfBAOos1LXVyCNulRG RmQkI+V6b9SlMlKT+dwx6meNekVJo1JvGNLW0nExX2sf19c2iLjO+9w/GvWKezAOyU9gnrty rr5gG8NjkihYFttxMekNTT2KFJrjhir/GsOYt273tdJTYF5Pt7v7q3cMy84xIzWZH+B8VczA NupSqVSkMhJiVntsYMHDAOpszQ4aGXQz2rqIK0lFBxjYpnnN7jMvtUpdGqb9Qs3TwOp9jV+b a61PW8fw2DSIwGJgh5i1VBaFTsbbLozV2TlqgPNVIQPbqFekUm/IfC0zYSd39FknXrlL7sp9 lmQ4u3+mMlsdrl7Tt5nSb032SZrKnUBImmbma+1zpBExY7RZi7rN19rl8+QlTUv7P3duQ93n InZanrz136hLpbXNmn9L++jnN96pKWWytHNIvbuOV9q0IpUCZXG2hZK+4Y7SZFDna+19vQZ2 Xmq2+jCa45rMO/vcvNRi7nzzJ9X6Tsx1+rtSM/Szx219Nalnz3Xpuxb813VI3lsRBF9+un2u ZgmlZhobPWOE65ry1lmapGkMDyinHm1xXS8hY6AtvXyGrfVoLnOX6zZ2XrKVwbpf4DhZtB/G pKNdD92dqzqcN33jcrfqObfvSHAeuzp+GPNRcF7PbI/yZNY6tsx1fZmvmhQwsBn3brz4wyKw ysBp6MBpoXNGxBY21yorOE0NZdu81K0GtrVvpnXaZfLkxTYomM7tolFXIijzNZOhdNSZNf+O 9lHS1TqnoUz+dMSwrV32qH4SWxafgR2xlC/drl+AGVPqM7DG4y1pZ/+3lXO+JiOVijJwuwyM jrnvRNS/5TpXy6SNG67rMuRa0I7X7+iD827Jj5KeZwyJPpd+/RhunlzGwXiu4PHDMYZ7x19H nnP9wTcGOtLLZdlSj8Yy96BuY+clY53byxo8Thbth550cn3dZ2A7mas6mTd943K36llc82kB n9FBu3VtXleuuwhPZiLIwErP5quEeAObi65lKyLUwOruW5v4rQOMo9Fyg19omhqmhrPuny2H 43yhefF1mhzZ+rDd0bhMvyX/rvZJk3CskzGmb06nvclU9oh+UqQsARHYoAu4/WF7cNOjAKky F7ZzcmmnrQ5glnJmo7/pNtdAn8XWd2Lq3zeJG0xTp9eC6zor0u6Fx5CC59IH/SCT5ThX6Pjh GlO9N3VF8mypE1d6zjxn/reN192u29h5yZR/a1kjxsmi+felY2ufns9VkfNm7LhctH5sY2LR MaJwu3VxXnca2Ji6EbWe+z5ftYk2sLlHyLnHvQEG1ji5d2hgcxeUZiZCDayo4Xrj8Rnma619 rJGQmLwYzm3KodIGjoifr85s+Xe1T7rdEf7X7pat6eTyaaj30H5SpCxdN7AREdjcBazvZ38k GdbntDtqF7b2jKp/8yRu7au+CTLkWvBNJrHt3snkFHsuvb1CJzvnNVVk/NDG8BjT4spzyBjo Si+faUu+DGXuRd12amB9eQodJwv3DU86sQa2k7lKOpg3feNyN+vZNCYWnds76XfdnNdtBjZq rtby1e/5KkOkgfV9861oBNaWXkD6trv5ohFYJelKfp2tTitE3qhX1McWrrwERB2sC5wV46NF tQp0dGP+Xe0jAR3NeCcYTrvsEf2kSFliIjW+Y5Pz92INrI6pnAZD3LGBjap/Qz9z9VXvBJk9 leVaMB2v1G/kGONKLyqCEnguV98LjiKZsX9BwjMedDIJW9siyXex9jduM+yrjNfdrttODWzR /tPPdPS+3qu5KtkWO2+GGNhu1k/Qdx96EYENyEeRed1lYGPn6pyB7eN8lSHOwBo7jzoRp25b y5jps2xm52shE4UhLe1OPHrdaa6ItdxF5jYzzfJXKtnG8K2T0dattrYZz53LX+bRvZKW/d1t 9jqz5d/RPpGPdq3p5A4xlz24nxQpi6Mtog1s6y7UPhjnPwt9C0EeUzmbj2DUtyBYypYvjLPv hNa/3s+sfTXAwIRcC3oe9GUt0WOMK72AcSluPNMemQWOEa5zFamz1s4RSyXa+TKum2yfKGA8 dqTny3fr/8eNZe5+3UbPSzncZQ0dJwv3Q086xr7es7mqXR9R82aIge1WPVvHxII+o3C7dXFe 1+blYE9mrJ4IA1tgvgolysDa1j0qBW9N5NZv7Sl3rZmwc+BEkUsrd3etrTUMSVMtTH69ouei MS6ytuUlqcfk0Utdu2uyHJM5W/vbtZWa1HJrkC11aqszW/4taWW/eaqcQy+7r53zlWgpe2A/ KVCWZjKWtggysGpd5AYTj4HVz68unXDfDZvLqX7zWo1C+yZYWx1F1H/uOrf01ZAIXMi1oLdB rr0ixxhXet4xpMB4prwDsZI3FKZ+6TpXQJ15x3BfOTPnqNRq7uslZDy2pZfPuDlftjJ3u25j 5yVTGZxlDRwni/ZDUzoBfb13c1XkvBlsYKU79ezat4jP6KjdujSv27xSp3N11+ercPglLoC1 TsigX0a6Xa5B1tNabaNhgLrNQ53AGgADC7DGSd75uebAwEII1G0e6gTWABhYAAAAACgVGFgA AAAAKBUYWAAAAAAoFRhYAAAAACgVGFgAAAAAKBUYWIAecmh2NloAAADgZv0Y2OTlu0XelgtQ kEOzs/Lhhx8GCwMLAADgp6CBzf6CQvjv5ya/4pT7ucl+GMt1bWDVX7xIf6Uk+27Q9Jc59J/7 0z/L/3pUuw8EnMeH99eVykViYB978ntW/ef3lmTxmR9iYAEAAAIpZmCVnxIL/wkwk4HtGxhY xYimPwmb+1k6t4HNHaf8VrO+f/un6YJM7Bpso6yB/dFLDUWvNt6QlddPyam335FnnzuOgQUA AAikkIFtmpiK1Odbpkc3HJrBHanU5fFc1K4VuUtNy6HU7LS9USt90+/3mn4DvDbf+tsQFdbN kS0ta3l9v4nsyk9FKkXLpu+XmsKWSQwpuzGS2lDrO8TApu2qn2NeakYDm42w+9rXHO21k+wf /gRgEJgM7PIrP5ZXG2/IG2+9LadOn5H3zpyXF068iIEFAAAIpICBbRmHSl0aupkSaZuc1HDN S631tzECmzFgidlJonXK/w3VLCvb0nNWWibMY2BdaWnktjXqUvGlYchPvWjZQg2sq+wWc6hE UwMMrH+5h8vABrZv8PKD8hnYxLgmUdd33zsj586flwsXVmV5eRkDCwAAEEi0gXWaEHEvE/AZ WN2spZHehuHYXOTRs14ys78zLUue9bSj81O0bMEG1rVW1LOWVTGwJqn5DDew7TWxSpTXUAfG G5+REWtfKguJgf3O09+XlddPyZunmsb1woVVuXjpkly+fFkuX74sKysrGFgAAIBAIg2sIeJq NCUFDWyafk3mlUiv4TF+ZnlCI2TtpMHAGtPKFTlv7Cr1RoH8FCxbzBICe+GdEVg1AtqNCKyq 9u72OjAZcSV/JSUxsAuL/y2nTjcjrhcvXpIrV67IT3/281Sn3n4HAwsAABBInIGNiNIVM7Bt k1SrN88VEtkNMnGuCGwg2WjsoQL5KVS2nhnY/qyBzRfHXAft87fTXksGdvGZH8rZc83lApcv X5af/uznyuuz3n3vDAYWAAAgkCgDa1sral7/mTFctebfxuOdX66yR3rTz7KP7AMNrDOt3GGG PPjSsOWnSNlyaz0tpjLSwPbnLQQGbHWQi+4bov3GMpVjDeyzx4+n5vXKlSu597+eO38eAwsA ABBIhIF1GAo9emZ4C4EaPUyUfQuBZohMj/RNEeAiBtaVVu4wxzKD6PwUKJtkHt23TF+lcARW Ve/eA+t6k0BcHayVL3Gd/NGyrKysyJtvvpV+eevixUty8dIluXjxkly4sIqBBQAACGT9/BIX wADgl7gAAAC6DwYWoIccmp2NFgAAALjBwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABA qcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAA AECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMAC AAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnA wAIAAABAqcDAAgAAAECp+H/G2U7ur2UFKAAAAABJRU5ErkJggg== --------------BEA361DAC69021183B7750DF-- --------------1C10E4B8AE72B1BD8A5199B6-- From nobody Mon Oct 28 02:50:45 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D1DB12004A for ; Mon, 28 Oct 2019 02:50:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y_ejfbblIP70 for ; Mon, 28 Oct 2019 02:50:42 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 153A7120018 for ; Mon, 28 Oct 2019 02:50:42 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iP1fa-0000GYC; Mon, 28 Oct 2019 10:50:38 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> <21E28E8F-8E91-47D6-8337-9FF0359D67B8@employees.org> In-reply-to: Your message of "Mon, 28 Oct 2019 10:21:57 +0100 ." <21E28E8F-8E91-47D6-8337-9FF0359D67B8@employees.org> Date: Mon, 28 Oct 2019 10:50:38 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 09:50:43 -0000 > I didn't see your answer to: "I dont know of a single server which > operates that way currently. Can you point to a working example?" > > I take it the answer is: "currently none"? Is the question whether people are running services on home networks where the ISP uses flash renumbering? If so, the answer is yes. There are a number of 'dynamic DNS' providers. People use those to keep DNS up-to-date when their public IPv4 address changes. All of this is small scale hobbyist usage (and most likely only IPv4) but it does exist. From nobody Mon Oct 28 02:58:38 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED113120071 for ; Mon, 28 Oct 2019 02:58:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JjbNh931zHPB for ; Mon, 28 Oct 2019 02:58:35 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 764E6120018 for ; Mon, 28 Oct 2019 02:58:35 -0700 (PDT) Received: from astfgl.hanazo.no (246.51-175-81.customer.lyse.net [51.175.81.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id A06AF4E11B18; Mon, 28 Oct 2019 09:58:32 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 09D1A2038ED8; Mon, 28 Oct 2019 10:58:30 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Mon, 28 Oct 2019 10:58:29 +0100 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <1E99599F-0A56-4A53-AD7C-499BC87AA7D3@employees.org> References: <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> <21E28E8F-8E91-47D6-8337-9FF0359D67B8@employees.org> To: Philip Homburg X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 09:58:37 -0000 Philip, >> I didn't see your answer to: "I dont know of a single server which >> operates that way currently. Can you point to a working example?" >>=20 >> I take it the answer is: "currently none"? >=20 > Is the question whether people are running services on home networks = where > the ISP uses flash renumbering? >=20 > If so, the answer is yes. There are a number of 'dynamic DNS' = providers. > People use those to keep DNS up-to-date when their public IPv4 address = changes. >=20 > All of this is small scale hobbyist usage (and most likely only IPv4) = but > it does exist. No, the question is if there is any host stack + server software that = deals with flash renumbering deployed. And that is deployable without coding. It's the same question Owen posed for the ISP side, when challenged with = how DHCP behaves. The point here is that we as the IETF must also consider the end-user = here. Not that I don't think ISPs do that too, but so far this debate = has largely been on the premise of the opertor with little concern of = the consequences for the user. Cheers, Ole= From nobody Mon Oct 28 03:29:31 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1114A120018 for ; Mon, 28 Oct 2019 03:29:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=fzBgl+ns; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=PzahQ4ej Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IbgDPpiv9loH for ; Mon, 28 Oct 2019 03:29:29 -0700 (PDT) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0109912004A for ; Mon, 28 Oct 2019 03:29:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=17510; q=dns/txt; s=iport; t=1572258569; x=1573468169; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=EfbVQ5dXuM2JHilXMad1bhSSYkHOZgmVkqrwaOA4mfc=; b=fzBgl+nsrZNGj42Hr3y8l3o1RdeydTCYkWOAhNnD7uNKIi/SHJSaBSar zZi/tDHvlyu+YK86ZzvVLi8nfpU4NLYV5IZRMibxedT52v4B0Sj726zhB pdF1zvwWO0AmJXC3KNsGEFisv+Bs0ND+5glNNxj8qIb4dVTIU4cjw+dS2 g=; X-Files: image001.png : 6410 IronPort-PHdr: =?us-ascii?q?9a23=3Al+rD6BAGTuBUAoxGIQbyUyQJPHJ1sqjoPgMT9p?= =?us-ascii?q?ssgq5PdaLm5Zn5IUjD/qs13kTRU9Dd7PRJw6rNvqbsVHZIwK7JsWtKMfkuHw?= =?us-ascii?q?QAld1QmgUhBMCfDkiuIeD7aSc5EexJVURu+DewNk0GUMs=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BjAAAXwrZd/5pdJa1lGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYFqAgEBAQELAYEbL1AFbFcgBAsqhCiDRwOKbU6?= =?us-ascii?q?CEIc2gh+JNYJWgguCUgNUAgcBAQEJAQIBAS0CAQGEQAIXgy0kNwYOAgMJAQE?= =?us-ascii?q?EAQEBAgEFBG2FNwyFUAEBAQEDBQEMEQIIARIBATgPAgEIEQMBAgYBAQEiAgI?= =?us-ascii?q?CBRABCQUMFwEFCAIEAREBBggUgwABgkYDLgGkZQKBOIhhdYEygn4BAQWCSYJ?= =?us-ascii?q?DDQuCEAcJgTYBjA4YgUA/gTgfgkw+ghuCFDaCcDKCLI95hTyBEo0+gmaGQEE?= =?us-ascii?q?KgiSFeQGLKIQMG5lajQuBNF2JXY8UAgQCBAUCDgEBBYFoI4FYcBVlAYJBUBA?= =?us-ascii?q?UgwYMF4NQilN0gSmPPQEB?= X-IronPort-AV: E=Sophos;i="5.68,239,1569283200"; d="png'150?scan'150,208,217,150";a="359670058" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 28 Oct 2019 10:29:27 +0000 Received: from XCH-RCD-012.cisco.com (xch-rcd-012.cisco.com [173.37.102.22]) by rcdn-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id x9SATRVr024487 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 28 Oct 2019 10:29:27 GMT Received: from xhs-rtp-002.cisco.com (64.101.210.229) by XCH-RCD-012.cisco.com (173.37.102.22) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 28 Oct 2019 05:29:26 -0500 Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 28 Oct 2019 06:29:25 -0400 Received: from NAM04-BN3-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 28 Oct 2019 06:29:25 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=liWors2NSPHt2IzIYXITZGSL4FlW4uMQY00XSHYn/aJImtpljRLHgd29pQh1AQjQPR/XTIZNEyyTOwvGaRH9MYaOMvl3VQJ69y/wo+Odsh3cPj4SU7/8tSelQrdXHhuUaU8wwtWHoXxJaeAJxun9KmA1hG02mE/mxPuQ6J2iPHEiOj9QLP3zQ3/slHFsS0aaGvun2w7Cm26XTbK1w5K8X9nu/oHiHJFKjCQMal7Ho8Dur7/DHGi9NwO+ySaaGl9Eqpr2T79lwAi85SuwoYrL4ySfuNKvug6YTY7QzkBBF7mbiSazLks6/1ET3L1yqN09FCJfVCqKY8X3v2FzBqRnbQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=axgnqNKZ7VzaunG0lN1HUvTp9RYh2wUd+vu4pulGfkw=; b=iLOKDc71kQ1bB5Q7+dGJa/JMlBBWw+/tdf5blnNgPfibttQMV1jY1428FWfGxZJK9PGXWbAwJuH4ZNp1Jb8KSVr8TwnMcMHCJOSNsuj5a2oJU9zVBRcj8DD4rKbu2Qrauz02EMPaXmsGPRXpOWGkPTX8zLcGKtM01/5porz14riL96/BHjiBmhXDqICL+DuvsboEmzogz/bPJdgw34i9+lOCeQUdkkh0HvzGV3ntKeVmG6tn1OjkQwlmPBQAZEI4Gjrkj6ykdBxs5Qzs+gVM82XX5M1OKV2kKMxptVXeAU0jOgTAHcwgRS8WsjqnpdAPujuWY7yPX2RDAIjslzBc/w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=axgnqNKZ7VzaunG0lN1HUvTp9RYh2wUd+vu4pulGfkw=; b=PzahQ4ejiQ08n8WmFqe6jcVYGAzvVPcFKAiN7emC+xIESyt5+v9Ezo+Sw2QHOfQvhhP2XrMzbTsBeraQUfOBxJI4OR4b+Z/AhORXEc8EZv4nB9SO5RNG70v9LQD/pBwWOtsY6Rxb2TJ0dJybxFAVC5hTGmFaePOtnceqMsP1x6k= Received: from DM5PR11MB1753.namprd11.prod.outlook.com (10.175.88.141) by DM5PR11MB1785.namprd11.prod.outlook.com (10.175.88.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.22; Mon, 28 Oct 2019 10:29:24 +0000 Received: from DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::c1f1:d33a:2203:5a39]) by DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::c1f1:d33a:2203:5a39%7]) with mapi id 15.20.2387.025; Mon, 28 Oct 2019 10:29:24 +0000 From: "Eric Vyncke (evyncke)" To: Alexandre Petrescu , "v6ops@ietf.org" Thread-Topic: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? Thread-Index: AQHVjXSxUTW6KdWpvkqSEFNRgpz2/qdv6vwA Date: Mon, 28 Oct 2019 10:29:24 +0000 Message-ID: <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> In-Reply-To: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:b495:7032:7f20:2752] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: db2d48f0-4a7b-46ea-b785-08d75b91b44c x-ms-traffictypediagnostic: DM5PR11MB1785: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-forefront-prvs: 0204F0BDE2 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(39860400002)(136003)(346002)(396003)(376002)(189003)(199004)(2906002)(54896002)(6306002)(186003)(76116006)(14454004)(229853002)(7736002)(6512007)(6436002)(81156014)(76176011)(733005)(478600001)(316002)(8676002)(110136005)(99286004)(58126008)(6246003)(99936001)(81166006)(33656002)(36756003)(8936002)(4744005)(6486002)(2616005)(476003)(91956017)(66446008)(66556008)(86362001)(66946007)(790700001)(64756008)(14444005)(46003)(25786009)(446003)(5660300002)(11346002)(6116002)(71200400001)(71190400001)(53546011)(2501003)(66616009)(102836004)(6506007)(66476007)(486006)(256004); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR11MB1785; H:DM5PR11MB1753.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: YDVrm3H/Q+IlDKyJX8nktS9eXm1fNlRQFgXhfUgC1akmzSWV+tJBmR9+aWojffmYQW27NBQmb3kQZaBD6aB1DcLoo5Cp52Yl5HoYLTSh8lb7HYe4U7Ft7t31u43QWbUWOf4t2q7wnc4pd7S7aUBctvfxbsFhN8HNLncyITtflyNjRHgIDOVffJQVqdpMARWsrkM0SFkR0ZkUaRyvgG33D6GBYln8E3eKhctkKKf+MDuvxVSTQt3IYpDdudnL1ZtXDQn+wP6kYYJuOEPhsuZsqNW0rIkGDXECFUlJnzY2CkBsla66bhDBVqTpMRBJd/I9jpL96fLbCY3rkHwP4mu865sIu5O+Ib0TFgcfPhJjfZyCbtTj5ndFJJemPlkdY2VBckWuFFHtXuvPNMqtQ7/IHu27a77ihnpfutsUVXv22zJ7FazS8DP2MZkkCfabXDjH x-ms-exchange-transport-forked: True Content-Type: multipart/related; boundary="_004_3843CFD280EE4DEFAE59ED9F2B271048ciscocom_"; type="multipart/alternative" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: db2d48f0-4a7b-46ea-b785-08d75b91b44c X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Oct 2019 10:29:24.8397 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ihWUxHCpJW7Tcjf5/fLFdyWStn+uA+9b6tHCcua3+ln9a3OUzLqqLi4v1aWuYAhYCN4rMoz1JpTBSwYP9gRFMw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR11MB1785 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.22, xch-rcd-012.cisco.com X-Outbound-Node: rcdn-core-3.cisco.com Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 10:29:31 -0000 --_004_3843CFD280EE4DEFAE59ED9F2B271048ciscocom_ Content-Type: multipart/alternative; boundary="_000_3843CFD280EE4DEFAE59ED9F2B271048ciscocom_" --_000_3843CFD280EE4DEFAE59ED9F2B271048ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 77u/QWxleCwNCg0KTW9zdCBwcm9iYWJseSBhIGJ1ZyBpbiB5b3VyIEZyZWUgQ1BFICh0aGF0IGFw cGVhcnMgdG8gYmUgb3Zlci16ZWFsb3VzKQ0KDQotw6lyaWMNCg0KRnJvbTogdjZvcHMgPHY2b3Bz LWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBBbGV4YW5kcmUgUGV0cmVzY3UgPGFsZXhh bmRyZS5wZXRyZXNjdUBnbWFpbC5jb20+DQpEYXRlOiBNb25kYXksIDI4IE9jdG9iZXIgMjAxOSBh dCAxMDo0Nw0KVG86ICJ2Nm9wc0BpZXRmLm9yZyIgPHY2b3BzQGlldGYub3JnPg0KU3ViamVjdDog W3Y2b3BzXSBvdXQtb2YtZm9jdXM6IHdoeSBESENQdjYgYnJlYWtzIEFuZHJvaWQgY29tcHV0ZXJz Pw0KDQoNClRoaXMgbWVzc2FnZSBpcyBvdXQgb2YgZm9jdXMgb2YgY3VycmVudCBkaXNjdXNzaW9u cy4NCg0KV2h5IHRoZSBwcmVzZW5jZSBvZiBhIERIQ1B2NiBzZXJ2ZXIgYnJlYWtzIEFuZHJvaWQg Y29tcHV0ZXJzPw0KDQpPbiBteSBDUEUgYXQgaG9tZSwgb2YgSVNQIEZyZWUsIEkgbm90aWNlZCBy ZWNlbnRseSB0aGlzIG1lc3NhZ2U6ICdXYXRjaCBvdXQ6IGlmIHlvdSBhY3RpdmF0ZSB0aGUgREhD UHY2IHNlcnZlciwgY2VydGFpbiBBbmRyb2lkIGNvbXB1dGVycyBhcmUgYXQgcmlzayBvZiBsb29z aW5nIHRoZWlyIElQdjYgY29ubmVjdGlvbicuDQoNCldoeSBhbmQgaG93IHRoZSBwcmVzZW5jZSBv ZiBhIERIQ1B2NiBzZXJ2ZXIgb24gdGhlIENQRSBicmVha3MgQW5kcm9pZCBjb21wdXRlcnM/DQoN Ckkgd291bGQgbGlrZSB0byB0cnkgdGhpcyBESENQdjYgc2VydmVyIHRvIGNvbm5lY3QgbXkgV2lu ZG93cyAyLWluLTEgY29tcHV0ZXIgdG8gd29yayBhdCBob21lLCBidXQgSSBkb250IHdhbnQgdG8g YnJlYWsgdGhlIG90aGVyIEFuZHJvaWQgdGFibGV0IHRoYXQgc2hvd3MgdGhlIHdlYXRoZXIgcmVw b3J0Lg0KDQpBbGV4DQoNCltjaWQ6aW1hZ2UwMDEucG5nQDAxRDU4RDgyLkYzNDcyQTkwXQ0K --_000_3843CFD280EE4DEFAE59ED9F2B271048ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <3E481F2F8BF6A543991AD532C0DF575C@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1h bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30N CmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAu bXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5h bWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDow Y207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGNtOw0KCWZv bnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bh bi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hw RGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0 O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46 NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpX b3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNo YXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRp Zl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0 Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0Pjwv eG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYz QzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBjbGFzcz0iRW1haWxTdHlsZTE5Ij7vu79BbGV4LDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGNsYXNzPSJFbWFpbFN0 eWxlMTkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGNsYXNzPSJFbWFpbFN0eWxlMTkiPk1vc3QgcHJvYmFibHkgYSBidWcgaW4geW91ciBG cmVlIENQRSAodGhhdCBhcHBlYXJzIHRvIGJlIG92ZXItemVhbG91cyk8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBjbGFzcz0iRW1haWxTdHlsZTE5Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBj bGFzcz0iRW1haWxTdHlsZTE5Ij4tw6lyaWM8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20g MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFu PjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+djZvcHMgJmx0 O3Y2b3BzLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IG9uIGJlaGFsZiBvZiBBbGV4YW5kcmUgUGV0cmVz Y3UgJmx0O2FsZXhhbmRyZS5wZXRyZXNjdUBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9i Pk1vbmRheSwgMjggT2N0b2JlciAyMDE5IGF0IDEwOjQ3PGJyPg0KPGI+VG86IDwvYj4mcXVvdDt2 Nm9wc0BpZXRmLm9yZyZxdW90OyAmbHQ7djZvcHNAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVj dDogPC9iPlt2Nm9wc10gb3V0LW9mLWZvY3VzOiB3aHkgREhDUHY2IGJyZWFrcyBBbmRyb2lkIGNv bXB1dGVycz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPHAgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPlRoaXMg bWVzc2FnZSBpcyBvdXQgb2YgZm9jdXMgb2YgY3VycmVudCBkaXNjdXNzaW9ucy48L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+V2h5 IHRoZSBwcmVzZW5jZSBvZiBhIERIQ1B2NiBzZXJ2ZXIgYnJlYWtzIEFuZHJvaWQgY29tcHV0ZXJz Pzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij5PbiBteSBDUEUgYXQgaG9tZSwgb2YgSVNQIEZyZWUsIEkgbm90aWNlZCByZWNlbnRs eSB0aGlzIG1lc3NhZ2U6ICdXYXRjaCBvdXQ6IGlmIHlvdSBhY3RpdmF0ZSB0aGUgREhDUHY2IHNl cnZlciwgY2VydGFpbiBBbmRyb2lkIGNvbXB1dGVycyBhcmUgYXQgcmlzayBvZiBsb29zaW5nIHRo ZWlyIElQdjYNCiBjb25uZWN0aW9uJy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+V2h5IGFuZCBob3cgdGhlIHByZXNlbmNlIG9m IGEgREhDUHY2IHNlcnZlciBvbiB0aGUgQ1BFIGJyZWFrcyBBbmRyb2lkIGNvbXB1dGVycz88L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+SSB3b3VsZCBsaWtlIHRvIHRyeSB0aGlzIERIQ1B2NiBzZXJ2ZXIgdG8gY29ubmVjdCBteSBX aW5kb3dzIDItaW4tMSBjb21wdXRlciB0byB3b3JrIGF0IGhvbWUsIGJ1dCBJIGRvbnQgd2FudCB0 byBicmVhayB0aGUgb3RoZXIgQW5kcm9pZCB0YWJsZXQgdGhhdCBzaG93cyB0aGUgd2VhdGhlciBy ZXBvcnQuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPkFsZXg8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGltZyB3aWR0aD0iNTQ1IiBoZWlnaHQ9IjkxIiBzdHls ZT0id2lkdGg6NS42NzdpbjtoZWlnaHQ6Ljk0NzlpbiIgaWQ9Il94MDAwMF9pMTAyNSIgc3JjPSJj aWQ6aW1hZ2UwMDEucG5nQDAxRDU4RDgyLkYzNDcyQTkwIj48L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_3843CFD280EE4DEFAE59ED9F2B271048ciscocom_-- --_004_3843CFD280EE4DEFAE59ED9F2B271048ciscocom_ Content-Type: image/png; name="image001.png" Content-Description: image001.png Content-Disposition: inline; filename="image001.png"; size=6410; creation-date="Mon, 28 Oct 2019 10:29:24 GMT"; modification-date="Mon, 28 Oct 2019 10:29:24 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAArAAAABzCAYAAABgpzGFAAAY0ElEQVR4nO2de4wd1X3HV8q//aNq WtIQmqKG8Md1pQiv7N29dmirKO4aaGywroS9+I+0Ka1BNWrd1v1jN7cVUSuVeoOhD1rXRFSryNkQ AqGBTTdLEzAYOStevZvwMBj8AG9tV1ZC/v71j3tn7pwz5zn3Obufj/SVdu/MnDmvOec7vzl37ki1 WhWEEEIIIYTKopFBZwAhhBBCCKEYYWARQgghhFCphIFFCCGEEEKlktvAbqnK6PZx2bBns2zYs1lG J8elumXwmUYIIYQQQutXVgM79tsT8ut/uVk+/ujnZONzd8jGZ++QX330c3LtX4zJ2G9NDDzjCCGE EEJofcpoYCe2TMg1M2NSPfklOfL+E/LguW/Kg+e+KUfef0ImTv6B/Nr0GJFYhBBCCCE0EBkN7A07 xuWTT98k/3HhKbnxpT+Wj/ygKh/5QVVufHmfPPLBU/LJp26SG35vfOCZ75Wml6TJ0vTA87KW1KzX 03J0apD5mJakeRWGsK3phwghhJBZRgN7/R9tlu0v3yP3vvuwjCyNysgzm5paGpV73z0qn3/pT+T6 P9wcdIKpo6c1pzBoA+NX74zDlOSqQ0SWpsOPO310auD1Uyw/LeN4+qhMDazPtPOd1PlwmERzffa9 Hz5wVAwfx59/SksnoM0RQgihGBkN7Cf+ZrPsf2tWvvT638qNL++Te96alf1vzcrvvHy3/ObJPfLx 52+RT/z1mCfxzCSZTmCtz9Z7RKntTGQ66Jg1YGBbZXbv3+s+k0Rfh+0makDtq/fD1Hgm9dOOVse2 M6YVIYRQL5UzsOOfnZBf+reqHHn/CVn8v5PyD2e+LrevzMjtKzNy/9ljcujM1+Vjx7fLLz60WcY/ 6/gyVzo56mZhSo4ebZkRPVKT3TfdtiRLmWe+6UTq216tiulxcTPylvk8MUbZidc6sRfIp7Nu9PTN aeQjkpljrWVUty1NJxG9JZnuqO58+TEraPlAT/uMKeq4JNN6W0ybFhi0zpG78VDr11rfxmUL7Xxb 63Ng/bCdbrtJHpNvJSfP3ExMtZ23TA3tDQJCCKG1ppyBHd0+Ltc8OSnPXnlF7n7zPvmV45Oy7dV7 5POv7JdfPj4pd715n/zde4/ILzy2VUa32w1se+KzRGIyE65qBlqTX2ayXpqu5idX3/Y0vSR97fGx sr+2b3Zi7zSfprI7jIk5DVuEzlPGbATtdHqGTJkK1l10xLC1vycq1/M+kzOcWltYDWq8gVXquzot S9ky5dKx1OfA+qHBwC5Na2bV0C+M5l944oIQQqjryhnYDVNjsvmFL8q/v/8duer4pNRPH5GnL5+Q 7156Xuqnj8jHjk/KQ+cfkxuev0M2TNmXEfjMiGl9XzsIOhVhVszbp9oza5p+7jNtwjWZmmOd5tNU P44IrDkNs8Hxl9HyCLjjuos0sMn5PEam533GY2Dzbd2BgXXWS1j7Dq4f2urLfQ22I8m2+kEIIYS6 o5yBve6uTXJb46/kwKnDsuHkbrn/7DfkH889Kg+em5f7z35DKid3y5+fekBu/Z+Dct1dm6wJd2JG ZGnaMSHrESbzdlswyHnOJH+BxiEon6b6CTaw7oinv4yWvHRcd3EGNjE2PhPT8z4TaGDbZSpuYHNl dS1N6NDAdr8fqmSPV0xz8k8rT3kDm1m2QRQWIYRQF5UzsNffuVlufuXPZPqdh+RTJ26Tr549Jg+d /7b8y/nH5P6zx+Q3TtwmM+/8q2x/5U/l+jsdbyKwflGpuZ7RFOULiyiFGVhT+rr0tYcmU/NAp/kM qZuCBtZfxmIG1p9ujIFN9g34wlqv+8yADGz+0Xt8BLa//TAgars0nV/XbGi/4XjLA0IIobWmnIH9 zK1jct3iTnnkg+/KtSd2yO0r0/KN//2+HFtdlNtXpuXaEzvlkQ+ekk/91w75zK2ud8GavlHemtCc ESPfEoEwA2udjKeXDBN+N9bA9tLAWoyAr4wFDaw/3QhjErh8oC99JnQNbHJu67pry7pTS33n6sqz 1tTYT/raD11fwtK+DKdEyyMi0gghhFAHyhnYia1Vueq+Mfn9n3xF/unco/LpF2tyzQtfkGte+IJ8 +sWa/PP5b8kXf/IVuervx2Riq/8E+Senmeha4LeqCxnYalVs77s8ffSBdN/c488O3kLgNw6+92+6 0tC/yW54TKuUsQMD603XlR9VocsH+tJnfAa2qkXlT5/OGTrzdp9h0+rKkK6xPgfWD91vEcjWQS4C b1iGMByvfkMIIbSWZHwP7MZbJuSjX9sie378ZXn4gyflq2ePyf1nj8nDHzwpu1e+LB/92hbZeIvj FVoIVasStXxgGBUUkUQIIYRQv2U0sNVqVUZvmpCr7x2Tqx/fJqPP7ZXR5/bK1Y9vk6vvHZPRmzCv KEBRyweGQerrrvJrVxFCCCE0DLIa2Gq1KhNbJmTjzeOyYc9m2bBns2y8eVwmtmBe0VqV4QcHMK8I IYTQ0MlpYBFCCCGEEBo2YWARQgghhFCphIFFCCGEEEKlEgYWIYQQQgiVShhYhBBCCCFUKo1Uq1UZ HR1NtWnTJtm2bZvs2LFDarXamtTOnTtlcnJSxsfHlbKPjo7K2NiY7N69W+6++245ePDgmtT+/ftl 7969snXr1lz510P7F+0bCCGEEBoOKQZ206ZNsmvXroGbiH5p165dilEZGxuTAwcODNxg9ksHDhxQ TOx6a/+YvoEQQgih4ZFiYCcnJwduHPqtycnJtPx79+4duKnst/bu3buu2z+0byCEEEJoeKQY2J07 dw7cNPRbu3btSsu/f//+gRvKQURh13P7h/YNhBBCCA2PFAM7aMMwKCXlH7SZHJTWe/uH9A2EEEII DY96bGBnZG55WZYXDsu+vhzX0sycLC8vy/LcDAYWA4uBRQghhNaYChrYfXJ4YblpEjOam1H3m5kr ZkKLHtcXAzv3muRYXZRZfftrc+kx7Y+SdOYkl8prc/60PVIPf03memFgk7rNKtNW+w4vtD6fk5nM /guH91mPT7dl219P33PeoD6VHtvKGwYWIYQQKqUKGNhWdNRgWIdG/TCwiUGdXZTVrGH0GtjEvK7K 4qwl7cS0GtLymde2Se5RBFav232HZSFjCtsGttU/sgY2pl30fZP/E9MakVZiXov010FfoAghhBDK K9rAJgZFj5oZzYceKUtNyELL9GhRNNtxiUlKI3FzMpMaJ0Mkr58G9uBBmV1cbfnOWa+BVfa1pZ0Y 2MQcr74gJ1Y1g5puW5TZ7N+9XkJgqNtsn0j+npuba+6TMbBBfSfUwKZ94ogcWdAMara/ZP8ucDM0 6AsUIYQQQnlFG1hvNKtlGHQzqUTgWmZCSct1XGpCFpRoX/u8yZKGBTm8r/8GVvnMtAwgXSXgiZRq BtZljI3bskSY2Zj2N9Zt5rPUwM7MyNzynMyY2t+xfCDUwCpmWNvXuK3g0oNBX6AIIYQQyqszA6tF Qedm1EfIijLRuMRoZNNyHqc9ptYjf20NkYG1RGCDDKzqetV1s6uLMntwVpr+tblsQY/qOqO8fTOw zfadm9PWwGaWoChtHGpgjcdlv/SX3MyoSxqS80dFgTGwCCGE0FCqK0sITEbUaBACDKzxOMNjYH3/ ZlqDMbA9W0JgXOe6KouzLTObnEM/Z8Ta2Z4tIcisf41p19AIrPnGakEO72uZWf042/8YWIQQQqh0 6sqXuJSobGpaDN/0dhhY53EGo5Mc2zRGA1xCoK8/7eaXuHS1zrW6uqodn43Oxn+hK6r9bV/i0h7t N/tGu6+E3NB0YmDTJSgLC+1+kO2vpmUrGFiEEEKolOria7QypsH2BSuXgXUdZ4zUZR9FL8hCvw2s bb1pN16jZV2/miwdMOyTvg0h2Ry2fKCwgbWsKVUNrHqjkXs9lsXYOl+jZV2/mumT+j5avwpdPoCB RQghhIZT/BJXrIFdg1rv7R/SNxBCCCE0PMLA1jCw6739Q/oGQgghhIZHGNgaBna9t39I30AIIYTQ 8AgDW8PArvf2D+kbCCGEEBoeYWBrGNj13v4hfQMhhBBCwyPFwN55553rUpR/fZc/pG4QQgghNDxS DCxCCCGEEELDLgwsQgghhBAqlUaq1aoghBBCCCFUFhGBRQghhBBCpRIGFiGEEEIIlUoj1WpVAAAA AADKAgYWAAAAAEoFBhYAAAAASgUGFgAAAABKBQYWAAAAAEoFBhYAAAAASgUGFgAAAABKBQYWAAAA AEoFBhYAAAAASgUGFrpPoy6VSl0ag84HgIiINKReGZGR2nwHSYT26S6cqyx0+zpfT+PGMJd1mPMW y1oqS98ozxhW0MC2CpjrGA2pVypSb/g+K4ohrX500FJfBAOos1LXVyCNulRGRmQkI+V6b9SlMlKT +dwx6meNekVJo1JvGNLW0nExX2sf19c2iLjO+9w/GvWKezAOyU9gnrtyrr5gG8NjkihYFttxMekN TT2KFJrjhir/GsOYt273tdJTYF5Pt7v7q3cMy84xIzWZH+B8VczANupSqVSkMhJiVntsYMHDAOps zQ4aGXQz2rqIK0lFBxjYpnnN7jMvtUpdGqb9Qs3TwOp9jV+ba61PW8fw2DSIwGJgh5i1VBaFTsbb LozV2TlqgPNVIQPbqFekUm/IfC0zYSd39FknXrlL7sp9lmQ4u3+mMlsdrl7Tt5nSb032SZrKnUBI mmbma+1zpBExY7RZi7rN19rl8+QlTUv7P3duQ93nInZanrz136hLpbXNmn9L++jnN96pKWWytHNI vbuOV9q0IpUCZXG2hZK+4Y7SZFDna+19vQZ2Xmq2+jCa45rMO/vcvNRi7nzzJ9X6Tsx1+rtSM/Sz x219Nalnz3Xpuxb813VI3lsRBF9+un2uZgmlZhobPWOE65ry1lmapGkMDyinHm1xXS8hY6AtvXyG rfVoLnOX6zZ2XrKVwbpf4DhZtB/GpKNdD92dqzqcN33jcrfqObfvSHAeuzp+GPNRcF7PbI/yZNY6 tsx1fZmvmhQwsBn3brz4wyKwysBp6MBpoXNGxBY21yorOE0NZdu81K0GtrVvpnXaZfLkxTYomM7t olFXIijzNZOhdNSZNf+O9lHS1TqnoUz+dMSwrV32qH4SWxafgR2xlC/drl+AGVPqM7DG4y1pZ/+3 lXO+JiOVijJwuwyMjrnvRNS/5TpXy6SNG67rMuRa0I7X7+iD827Jj5KeZwyJPpd+/RhunlzGwXiu 4PHDMYZ7x19HnnP9wTcGOtLLZdlSj8Yy96BuY+clY53byxo8Thbth550cn3dZ2A7mas6mTd943K3 6llc82kBn9FBu3VtXleuuwhPZiLIwErP5quEeAObi65lKyLUwOruW5v4rQOMo9Fyg19omhqmhrPu ny2H43yhefF1mhzZ+rDd0bhMvyX/rvZJk3CskzGmb06nvclU9oh+UqQsARHYoAu4/WF7cNOjAKky F7ZzcmmnrQ5glnJmo7/pNtdAn8XWd2Lq3zeJG0xTp9eC6zor0u6Fx5CC59IH/SCT5ThX6PjhGlO9 N3VF8mypE1d6zjxn/reN192u29h5yZR/a1kjxsmi+felY2ufns9VkfNm7LhctH5sY2LRMaJwu3Vx Xnca2Ji6EbWe+z5ftYk2sLlHyLnHvQEG1ji5d2hgcxeUZiZCDayo4Xrj8Rnma619rJGQmLwYzm3K odIGjoifr85s+Xe1T7rdEf7X7pat6eTyaaj30H5SpCxdN7AREdjcBazvZ38kGdbntDtqF7b2jKp/ 8yRu7au+CTLkWvBNJrHt3snkFHsuvb1CJzvnNVVk/NDG8BjT4spzyBjoSi+faUu+DGXuRd12amB9 eQodJwv3DU86sQa2k7lKOpg3feNyN+vZNCYWnds76XfdnNdtBjZqrtby1e/5KkOkgfV9861oBNaW XkD6trv5ohFYJelKfp2tTitE3qhX1McWrrwERB2sC5wV46NFtQp0dGP+Xe0jAR3NeCcYTrvsEf2k SFliIjW+Y5Pz92INrI6pnAZD3LGBjap/Qz9z9VXvBJk9leVaMB2v1G/kGONKLyqCEnguV98LjiKZ sX9BwjMedDIJW9siyXex9jduM+yrjNfdrttODWzR/tPPdPS+3qu5KtkWO2+GGNhu1k/Qdx96EYEN yEeRed1lYGPn6pyB7eN8lSHOwBo7jzoRp25by5jps2xm52shE4UhLe1OPHrdaa6ItdxF5jYzzfJX KtnG8K2T0dattrYZz53LX+bRvZKW/d1t9jqz5d/RPpGPdq3p5A4xlz24nxQpi6Mtog1s6y7UPhjn Pwt9C0EeUzmbj2DUtyBYypYvjLPvhNa/3s+sfTXAwIRcC3oe9GUt0WOMK72AcSluPNMemQWOEa5z Famz1s4RSyXa+TKum2yfKGA8dqTny3fr/8eNZe5+3UbPSzncZQ0dJwv3Q086xr7es7mqXR9R82aI ge1WPVvHxII+o3C7dXFe1+blYE9mrJ4IA1tgvgolysDa1j0qBW9N5NZv7Sl3rZmwc+BEkUsrd3et rTUMSVMtTH69oueiMS6ytuUlqcfk0Utdu2uyHJM5W/vbtZWa1HJrkC11aqszW/4taWW/eaqcQy+7 r53zlWgpe2A/KVCWZjKWtggysGpd5AYTj4HVz68unXDfDZvLqX7zWo1C+yZYWx1F1H/uOrf01ZAI XMi1oLdBrr0ixxhXet4xpMB4prwDsZI3FKZ+6TpXQJ15x3BfOTPnqNRq7uslZDy2pZfPuDlftjJ3 u25j5yVTGZxlDRwni/ZDUzoBfb13c1XkvBlsYKU79ezat4jP6KjdujSv27xSp3N11+ercPglLoC1 TsigX0a6Xa5B1tNabaNhgLrNQ53AGgADC7DGSd75uebAwEII1G0e6gTWABhYAAAAACgVGFgAAAAA KBUYWAAAAAAoFRhYAAAAACgVGFgAAAAAKBUYWIAecmh2NloAAADgZv0Y2OTlu0XelgtQkEOzs/Lh hx8GCwMLAADgp6CBzf6CQvjv5ya/4pT7ucl+GMt1bWDVX7xIf6Uk+27Q9Jc59J/70z/L/3pUuw8E nMeH99eVykViYB978ntW/ef3lmTxmR9iYAEAAAIpZmCVnxIL/wkwk4HtGxhYxYimPwmb+1k6t4HN Haf8VrO+f/un6YJM7Bpso6yB/dFLDUWvNt6QlddPyam335FnnzuOgQUAAAikkIFtmpiK1Odbpkc3 HJrBHanU5fFc1K4VuUtNy6HU7LS9USt90+/3mn4DvDbf+tsQFdbNkS0ta3l9v4nsyk9FKkXLpu+X msKWSQwpuzGS2lDrO8TApu2qn2NeakYDm42w+9rXHO21k+wf/gRgEJgM7PIrP5ZXG2/IG2+9LadO n5H3zpyXF068iIEFAAAIpICBbRmHSl0aupkSaZuc1HDNS631tzECmzFgidlJonXK/w3VLCvb0nNW WibMY2BdaWnktjXqUvGlYchPvWjZQg2sq+wWc6hEUwMMrH+5h8vABrZv8PKD8hnYxLgmUdd33zsj 586flwsXVmV5eRkDCwAAEEi0gXWaEHEvE/AZWN2spZHehuHYXOTRs14ys78zLUue9bSj81O0bMEG 1rVW1LOWVTGwJqn5DDew7TWxSpTXUAfGG5+REWtfKguJgf3O09+XlddPyZunmsb1woVVuXjpkly+ fFkuX74sKysrGFgAAIBAIg2sIeJqNCUFDWyafk3mlUiv4TF+ZnlCI2TtpMHAGtPKFTlv7Cr1RoH8 FCxbzBICe+GdEVg1AtqNCKyq9u72OjAZcSV/JSUxsAuL/y2nTjcjrhcvXpIrV67IT3/281Sn3n4H AwsAABBInIGNiNIVM7Btk1SrN88VEtkNMnGuCGwg2WjsoQL5KVS2nhnY/qyBzRfHXAft87fTXksG dvGZH8rZc83lApcvX5af/uznyuuz3n3vDAYWAAAgkCgDa1sral7/mTFctebfxuOdX66yR3rTz7KP 7AMNrDOt3GGGPPjSsOWnSNlyaz0tpjLSwPbnLQQGbHWQi+4bov3GMpVjDeyzx4+n5vXKlSu597+e O38eAwsAABBIhIF1GAo9emZ4C4EaPUyUfQuBZohMj/RNEeAiBtaVVu4wxzKD6PwUKJtkHt23TF+l cARWVe/eA+t6k0BcHayVL3Gd/NGyrKysyJtvvpV+eevixUty8dIluXjxkly4sIqBBQAACGT9/BIX wADgl7gAAAC6DwYWoIccmp2NFgAAALjBwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDA AgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMAC AAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIA AABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAA AECp+H/G2U7ur2UFKAAAAABJRU5ErkJgggA= --_004_3843CFD280EE4DEFAE59ED9F2B271048ciscocom_-- From nobody Mon Oct 28 03:33:35 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06CE012006F for ; Mon, 28 Oct 2019 03:33:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=consulintel.es Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1alh64_O3J8j for ; Mon, 28 Oct 2019 03:33:31 -0700 (PDT) Received: from mail.consulintel.es (mail.consulintel.es [IPv6:2001:470:1f09:495::5]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9AB47120018 for ; Mon, 28 Oct 2019 03:33:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=consulintel.es; s=MDaemon; t=1572258807; x=1572863607; i=jordi.palet@consulintel.es; q=dns/txt; h=User-Agent:Date: Subject:From:To:Message-ID:Thread-Topic:References:In-Reply-To: Mime-version:Content-type; bh=LfO0hpva/EDLe0ludlr/qzMO+1WUfPzDnK R6sGyqyyg=; b=Ov2TBKApdoEmYZT8n9/uy+0vkkIsidOczsCqxH4IZ/HGyc4NkF 4f4gRq+AwLBQ8ghuHw5J/KQXt1edVGGgaP5lEMAqXC0hAcL93e7rynMXdpFm+La/ SI8helrF6cz9hzaVWUAnK/DX8RxcyIZ4duvQQphVc8z5du0xGIOyK9ZFU= X-MDAV-Result: clean X-MDAV-Processed: mail.consulintel.es, Mon, 28 Oct 2019 11:33:27 +0100 X-Spam-Processed: mail.consulintel.es, Mon, 28 Oct 2019 11:33:24 +0100 Received: from [10.10.10.144] by mail.consulintel.es (MDaemon PRO v16.5.2) with ESMTPA id md50006443590.msg for ; Mon, 28 Oct 2019 11:33:24 +0100 X-MDRemoteIP: 2001:470:1f09:495:9889:54cd:5c3a:f8f X-MDHelo: [10.10.10.144] X-MDArrival-Date: Mon, 28 Oct 2019 11:33:24 +0100 X-Authenticated-Sender: jordi.palet@consulintel.es X-Return-Path: prvs=12041868c1=jordi.palet@consulintel.es X-Envelope-From: jordi.palet@consulintel.es X-MDaemon-Deliver-To: v6ops@ietf.org User-Agent: Microsoft-MacOutlook/10.10.f.191014 Date: Mon, 28 Oct 2019 11:33:23 +0100 From: JORDI PALET MARTINEZ To: "v6ops@ietf.org" Message-ID: Thread-Topic: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> In-Reply-To: <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> Mime-version: 1.0 Content-type: multipart/mixed; boundary="B_3655107203_1325943962" Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 10:33:34 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3655107203_1325943962 Content-type: multipart/alternative; boundary="B_3655107203_33642003" --B_3655107203_33642003 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable It may be that if you enable DHCPv6, SLAAC is disabled, and then Android wi= ll not work (as they don=E2=80=99t support DHCPv6)? So probably the =E2=80= =9Cmessage=E2=80=9D is not correct =E2=80=A6 =20 Regards, Jordi @jordipalet =20 =20 =20 El 28/10/19 11:30, "v6ops en nombre de Eric Vyncke (evyncke)" escribi=C3=B3: =20 =EF=BB=BFAlex, =20 Most probably a bug in your Free CPE (that appears to be over-zealous) =20 -=C3=A9ric =20 From: v6ops on behalf of Alexandre Petrescu Date: Monday, 28 October 2019 at 10:47 To: "v6ops@ietf.org" Subject: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? =20 This message is out of focus of current discussions. Why the presence of a DHCPv6 server breaks Android computers? On my CPE at home, of ISP Free, I noticed recently this message: 'Watch out= : if you activate the DHCPv6 server, certain Android computers are at risk = of loosing their IPv6 connection'. Why and how the presence of a DHCPv6 server on the CPE breaks Android compu= ters? I would like to try this DHCPv6 server to connect my Windows 2-in-1 compute= r to work at home, but I dont want to break the other Android tablet that s= hows the weather report. Alex _______________________________________________ v6ops mailing list v6ops@ie= tf.org https://www.ietf.org/mailman/listinfo/v6ops=20 ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.theipv6company.com The IPv6 Company This electronic message contains information which may be privileged or con= fidential. The information is intended to be for the exclusive use of the i= ndividual(s) named above and further non-explicilty authorized disclosure, = copying, distribution or use of the contents of this information, even if p= artially, including attached files, is strictly prohibited and will be cons= idered a criminal offense. If you are not the intended recipient be aware t= hat any disclosure, copying, distribution or use of the contents of this in= formation, even if partially, including attached files, is strictly prohibi= ted, will be considered a criminal offense, so you must reply to the origin= al sender to inform about this communication and delete it. --B_3655107203_33642003 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

It may be th= at if you enable DHCPv6, SLAAC is disabled, and then Android will not work = (as they don=E2=80=99t support DHCPv6)? So probably the =E2=80=9Cmessage=E2= =80=9D is not correct =E2=80=A6

 

Regards,

Jordi

@jordipalet

=  

 

 

El 28/10/19 11:30, "v6ops en nombre = de Eric Vyncke (evyncke)" <v6ops-bounces@ietf.org en nombre de evyncke@cisco.com> escribi=C3=B3:

 

=EF=BB=BFAlex,

 

=

Most probably a bug in your Free CPE (that appears to be over-zealous)<= /span>

 

-=C3=A9ric<= o:p>

 =

From: v6ops <v6ops-bounces@ietf.org> on behalf= of Alexandre Petrescu <alexandre.petrescu@gmail.com>
Date: Monday, 28 October 2019 at 10:47
To: "v6ops@ietf.org" = <v6ops@ietf.org>
Subject: [v6ops] out-of-focus: why DHCPv6 = breaks Android computers?

 

This message is out of focus of current discussions.

=

Why the presence of a DHCPv6 server breaks Android computer= s?

On my CPE at home, of ISP Free, I n= oticed recently this message: 'Watch out: if you activate the DHCPv6 server= , certain Android computers are at risk of loosing their IPv6 connection'.<= /span>

Why and how the presence of a DHCPv6 s= erver on the CPE breaks Android computers?

I would like to try this DHCPv6 server to connect my Windows 2-in-1 co= mputer to work at home, but I dont want to break the other Android tablet t= hat shows the weather report.

Alex

3D"cid:image001.png@01D58D82.F3472A90"

_________= ______________________________________ v6ops mailing list v6ops@ietf.org ht= tps://www.ietf.org/mailman/listinfo/v6ops


********= **************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or con= fidential. The information is intended to be for the exclusive use of the i= ndividual(s) named above and further non-explicilty authorized disclosure, = copying, distribution or use of the contents of this information, even if p= artially, including attached files, is strictly prohibited and will be cons= idered a criminal offense. If you are not the intended recipient be aware t= hat any disclosure, copying, distribution or use of the contents of this in= formation, even if partially, including attached files, is strictly prohibi= ted, will be considered a criminal offense, so you must reply to the origin= al sender to inform about this communication and delete it.

--B_3655107203_33642003-- --B_3655107203_1325943962 Content-type: image/png; name="image001.png"; x-mac-creator="4F50494D"; x-mac-type="504E4766" Content-ID: Content-disposition: inline; filename="image001.png" Content-transfer-encoding: base64 iVBORw0KGgoAAAANSUhEUgAAArAAAABzCAYAAABgpzGFAAAY0ElEQVR4nO2de4wd1X3HV8q/ /aNqWtIQmqKG8Md1pQiv7N29dmirKO4aaGywroS9+I+0Ka1BNWrd1v1jN7cVUSuVeoOhD1rX RFSryNkQAqGBTTdLEzAYOStevZvwMBj8AG9tV1ZC/v71j3tn7pwz5zn3Obufj/SVdu/MnDmv Oec7vzl37ki1WhWEEEIIIYTKopFBZwAhhBBCCKEYYWARQgghhFCphIFFCCGEEEKlktvAbqnK 6PZx2bBns2zYs1lGJ8elumXwmUYIIYQQQutXVgM79tsT8ut/uVk+/ujnZONzd8jGZ++QX330 c3LtX4zJ2G9NDDzjCCGEEEJofcpoYCe2TMg1M2NSPfklOfL+E/LguW/Kg+e+KUfef0ImTv6B /Nr0GJFYhBBCCCE0EBkN7A07xuWTT98k/3HhKbnxpT+Wj/ygKh/5QVVufHmfPPLBU/LJp26S G35vfOCZ75Wml6TJ0vTA87KW1KzX03J0apD5mJakeRWGsK3phwghhJBZRgN7/R9tlu0v3yP3 vvuwjCyNysgzm5paGpV73z0qn3/pT+T6P9wcdIKpo6c1pzBoA+NX74zDlOSqQ0SWpsOPO310 auD1Uyw/LeN4+qhMDazPtPOd1PlwmERzffa9Hz5wVAwfx59/SksnoM0RQgihGBkN7Cf+ZrPs f2tWvvT638qNL++Te96alf1vzcrvvHy3/ObJPfLx52+RT/z1mCfxzCSZTmCtz9Z7RKntTGQ6 6Jg1YGBbZXbv3+s+k0Rfh+0makDtq/fD1Hgm9dOOVse2M6YVIYRQL5UzsOOfnZBf+reqHHn/ CVn8v5PyD2e+LrevzMjtKzNy/9ljcujM1+Vjx7fLLz60WcY/6/gyVzo56mZhSo4ebZkRPVKT 3TfdtiRLmWe+6UTq216tiulxcTPylvk8MUbZidc6sRfIp7Nu9PTNaeQjkpljrWVUty1NJxG9 JZnuqO58+TEraPlAT/uMKeq4JNN6W0ybFhi0zpG78VDr11rfxmUL7Xxb63Ng/bCdbrtJHpNv JSfP3ExMtZ23TA3tDQJCCKG1ppyBHd0+Ltc8OSnPXnlF7n7zPvmV45Oy7dV75POv7JdfPj4p d715n/zde4/ILzy2VUa32w1se+KzRGIyE65qBlqTX2ayXpqu5idX3/Y0vSR97fGxsr+2b3Zi 7zSfprI7jIk5DVuEzlPGbATtdHqGTJkK1l10xLC1vycq1/M+kzOcWltYDWq8gVXquzotS9ky 5dKx1OfA+qHBwC5Na2bV0C+M5l944oIQQqjryhnYDVNjsvmFL8q/v/8duer4pNRPH5GnL5+Q 7156Xuqnj8jHjk/KQ+cfkxuev0M2TNmXEfjMiGl9XzsIOhVhVszbp9oza5p+7jNtwjWZmmOd 5tNUP44IrDkNs8Hxl9HyCLjjuos0sMn5PEam533GY2Dzbd2BgXXWS1j7Dq4f2urLfQ22I8m2 +kEIIYS6o5yBve6uTXJb46/kwKnDsuHkbrn/7DfkH889Kg+em5f7z35DKid3y5+fekBu/Z+D ct1dm6wJd2JGZGnaMSHrESbzdlswyHnOJH+BxiEon6b6CTaw7oinv4yWvHRcd3EGNjE2PhPT 8z4TaGDbZSpuYHNldS1N6NDAdr8fqmSPV0xz8k8rT3kDm1m2QRQWIYRQF5UzsNffuVlufuXP ZPqdh+RTJ26Tr549Jg+d/7b8y/nH5P6zx+Q3TtwmM+/8q2x/5U/l+jsdbyKwflGpuZ7RFOUL iyiFGVhT+rr0tYcmU/NAp/kMqZuCBtZfxmIG1p9ujIFN9g34wlqv+8yADGz+0Xt8BLa//TAg ars0nV/XbGi/4XjLA0IIobWmnIH9zK1jct3iTnnkg+/KtSd2yO0r0/KN//2+HFtdlNtXpuXa EzvlkQ+ekk/91w75zK2ud8GavlHemtCcESPfEoEwA2udjKeXDBN+N9bA9tLAWoyAr4wFDaw/ 3QhjErh8oC99JnQNbHJu67pry7pTS33n6sqz1tTYT/raD11fwtK+DKdEyyMi0gghhFAHyhnY ia1Vueq+Mfn9n3xF/unco/LpF2tyzQtfkGte+IJ8+sWa/PP5b8kXf/IVuervx2Riq/8E+Sen meha4LeqCxnYalVs77s8ffSBdN/c488O3kLgNw6+92+60tC/yW54TKuUsQMD603XlR9VocsH +tJnfAa2qkXlT5/OGTrzdp9h0+rKkK6xPgfWD91vEcjWQS4Cb1iGMByvfkMIIbSWZHwP7MZb JuSjX9sie378ZXn4gyflq2ePyf1nj8nDHzwpu1e+LB/92hbZeIvjFVoIVasStXxgGBUUkUQI IYRQv2U0sNVqVUZvmpCr7x2Tqx/fJqPP7ZXR5/bK1Y9vk6vvHZPRmzCvKEBRyweGQerrrvJr VxFCCCE0DLIa2Gq1KhNbJmTjzeOyYc9m2bBns2y8eVwmtmBe0VqV4QcHMK8IIYTQ0MlpYBFC CCGEEBo2YWARQgghhFCphIFFCCGEEEKlEgYWIYQQQgiVShhYhBBCCCFUKo1Uq1UZHR1NtWnT Jtm2bZvs2LFDarXamtTOnTtlcnJSxsfHlbKPjo7K2NiY7N69W+6++245ePDgmtT+/ftl7969 snXr1lz510P7F+0bCCGEEBoOKQZ206ZNsmvXroGbiH5p165dilEZGxuTAwcODNxg9ksHDhxQ TOx6a/+YvoEQQgih4ZFiYCcnJwduHPqtycnJtPx79+4duKnst/bu3buu2z+0byCEEEJoeKQY 2J07dw7cNPRbu3btSsu/f//+gRvKQURh13P7h/YNhBBCCA2PFAM7aMMwKCXlH7SZHJTWe/uH 9A2EEEIIDY96bGBnZG55WZYXDsu+vhzX0sycLC8vy/LcDAYWA4uBRQghhNaYChrYfXJ4Yblp EjOam1H3m5krZkKLHtcXAzv3muRYXZRZfftrc+kx7Y+SdOYkl8prc/60PVIPf03memFgk7rN KtNW+w4vtD6fk5nM/guH91mPT7dl219P33PeoD6VHtvKGwYWIYQQKqUKGNhWdNRgWIdG/TCw iUGdXZTVrGH0GtjEvK7K4qwl7cS0GtLymde2Se5RBFav232HZSFjCtsGttU/sgY2pl30fZP/ E9MakVZiXov010FfoAghhBDKK9rAJgZFj5oZzYceKUtNyELL9GhRNNtxiUlKI3FzMpMaJ0Mk r58G9uBBmV1cbfnOWa+BVfa1pZ0Y2MQcr74gJ1Y1g5puW5TZ7N+9XkJgqNtsn0j+npuba+6T MbBBfSfUwKZ94ogcWdAMara/ZP8ucDM06AsUIYQQQnlFG1hvNKtlGHQzqUTgWmZCSct1XGpC FpRoX/u8yZKGBTm8r/8GVvnMtAwgXSXgiZRqBtZljI3bskSY2Zj2N9Zt5rPUwM7MyNzynMyY 2t+xfCDUwCpmWNvXuK3g0oNBX6AIIYQQyqszA6tFQedm1EfIijLRuMRoZNNyHqc9ptYjf20N kYG1RGCDDKzqetV1s6uLMntwVpr+tblsQY/qOqO8fTOwzfadm9PWwGaWoChtHGpgjcdlv/SX 3MyoSxqS80dFgTGwCCGE0FCqK0sITEbUaBACDKzxOMNjYH3/ZlqDMbA9W0JgXOe6KouzLTOb nEM/Z8Ta2Z4tIcisf41p19AIrPnGakEO72uZWf042/8YWIQQQqh06sqXuJSobGpaDN/0dhhY 53EGo5Mc2zRGA1xCoK8/7eaXuHS1zrW6uqodn43Oxn+hK6r9bV/i0h7tN/tGu6+E3NB0YmDT JSgLC+1+kO2vpmUrGFiEEEKolOria7QypsH2BSuXgXUdZ4zUZR9FL8hCvw2sbb1pN16jZV2/ miwdMOyTvg0h2Ry2fKCwgbWsKVUNrHqjkXs9lsXYOl+jZV2/mumT+j5avwpdPoCBRQghhIZT /BJXrIFdg1rv7R/SNxBCCCE0PMLA1jCw6739Q/oGQgghhIZHGNgaBna9t39I30AIIYTQ8AgD W8PArvf2D+kbCCGEEBoeYWBrGNj13v4hfQMhhBBCwyPFwN55553rUpR/fZc/pG4QQgghNDxS DCxCCCGEEELDLgwsQgghhBAqlUaq1aoghBBCCCFUFhGBRQghhBBCpRIGFiGEEEIIlUoj1WpV AAAAAADKAgYWAAAAAEoFBhYAAAAASgUGFgAAAABKBQYWAAAAAEoFBhYAAAAASgUGFgAAAABK BQYWAAAAAEoFBhYAAAAASgUGFrpPoy6VSl0ag84HgIiINKReGZGR2nwHSYT26S6cqyx0+zpf T+PGMJd1mPMWy1oqS98ozxhW0MC2CpjrGA2pVypSb/g+K4ohrX500FJfBAOos1LXVyCNulRG RmQkI+V6b9SlMlKT+dwx6meNekVJo1JvGNLW0nExX2sf19c2iLjO+9w/GvWKezAOyU9gnrty rr5gG8NjkihYFttxMekNTT2KFJrjhir/GsOYt273tdJTYF5Pt7v7q3cMy84xIzWZH+B8VczA NupSqVSkMhJiVntsYMHDAOpszQ4aGXQz2rqIK0lFBxjYpnnN7jMvtUpdGqb9Qs3TwOp9jV+b a61PW8fw2DSIwGJgh5i1VBaFTsbbLozV2TlqgPNVIQPbqFekUm/IfC0zYSd39FknXrlL7sp9 lmQ4u3+mMlsdrl7Tt5nSb032SZrKnUBImmbma+1zpBExY7RZi7rN19rl8+QlTUv7P3duQ93n InZanrz136hLpbXNmn9L++jnN96pKWWytHNIvbuOV9q0IpUCZXG2hZK+4Y7SZFDna+19vQZ2 Xmq2+jCa45rMO/vcvNRi7nzzJ9X6Tsx1+rtSM/Szx219Nalnz3Xpuxb813VI3lsRBF9+un2u ZgmlZhobPWOE65ry1lmapGkMDyinHm1xXS8hY6AtvXyGrfVoLnOX6zZ2XrKVwbpf4DhZtB/G pKNdD92dqzqcN33jcrfqObfvSHAeuzp+GPNRcF7PbI/yZNY6tsx1fZmvmhQwsBn3brz4wyKw ysBp6MBpoXNGxBY21yorOE0NZdu81K0GtrVvpnXaZfLkxTYomM7tolFXIijzNZOhdNSZNf+O 9lHS1TqnoUz+dMSwrV32qH4SWxafgR2xlC/drl+AGVPqM7DG4y1pZ/+3lXO+JiOVijJwuwyM jrnvRNS/5TpXy6SNG67rMuRa0I7X7+iD827Jj5KeZwyJPpd+/RhunlzGwXiu4PHDMYZ7x19H nnP9wTcGOtLLZdlSj8Yy96BuY+clY53byxo8Thbth550cn3dZ2A7mas6mTd943K36llc82kB n9FBu3VtXleuuwhPZiLIwErP5quEeAObi65lKyLUwOruW5v4rQOMo9Fyg19omhqmhrPuny2H 43yhefF1mhzZ+rDd0bhMvyX/rvZJk3CskzGmb06nvclU9oh+UqQsARHYoAu4/WF7cNOjAKky F7ZzcmmnrQ5glnJmo7/pNtdAn8XWd2Lq3zeJG0xTp9eC6zor0u6Fx5CC59IH/SCT5ThX6Pjh GlO9N3VF8mypE1d6zjxn/reN192u29h5yZR/a1kjxsmi+felY2ufns9VkfNm7LhctH5sY2LR MaJwu3VxXnca2Ji6EbWe+z5ftYk2sLlHyLnHvQEG1ji5d2hgcxeUZiZCDayo4Xrj8Rnma619 rJGQmLwYzm3KodIGjoifr85s+Xe1T7rdEf7X7pat6eTyaaj30H5SpCxdN7AREdjcBazvZ38k GdbntDtqF7b2jKp/8yRu7au+CTLkWvBNJrHt3snkFHsuvb1CJzvnNVVk/NDG8BjT4spzyBjo Si+faUu+DGXuRd12amB9eQodJwv3DU86sQa2k7lKOpg3feNyN+vZNCYWnds76XfdnNdtBjZq rtby1e/5KkOkgfV9861oBNaWXkD6trv5ohFYJelKfp2tTitE3qhX1McWrrwERB2sC5wV46NF tQp0dGP+Xe0jAR3NeCcYTrvsEf2kSFliIjW+Y5Pz92INrI6pnAZD3LGBjap/Qz9z9VXvBJk9 leVaMB2v1G/kGONKLyqCEnguV98LjiKZsX9BwjMedDIJW9siyXex9jduM+yrjNfdrttODWzR /tPPdPS+3qu5KtkWO2+GGNhu1k/Qdx96EYENyEeRed1lYGPn6pyB7eN8lSHOwBo7jzoRp25b y5jps2xm52shE4UhLe1OPHrdaa6ItdxF5jYzzfJXKtnG8K2T0dattrYZz53LX+bRvZKW/d1t 9jqz5d/RPpGPdq3p5A4xlz24nxQpi6Mtog1s6y7UPhjnPwt9C0EeUzmbj2DUtyBYypYvjLPv hNa/3s+sfTXAwIRcC3oe9GUt0WOMK72AcSluPNMemQWOEa5zFamz1s4RSyXa+TKum2yfKGA8 dqTny3fr/8eNZe5+3UbPSzncZQ0dJwv3Q086xr7es7mqXR9R82aIge1WPVvHxII+o3C7dXFe 1+blYE9mrJ4IA1tgvgolysDa1j0qBW9N5NZv7Sl3rZmwc+BEkUsrd3etrTUMSVMtTH69ouei MS6ytuUlqcfk0Utdu2uyHJM5W/vbtZWa1HJrkC11aqszW/4taWW/eaqcQy+7r53zlWgpe2A/ KVCWZjKWtggysGpd5AYTj4HVz68unXDfDZvLqX7zWo1C+yZYWx1F1H/uOrf01ZAIXMi1oLdB rr0ixxhXet4xpMB4prwDsZI3FKZ+6TpXQJ15x3BfOTPnqNRq7uslZDy2pZfPuDlftjJ3u25j 5yVTGZxlDRwni/ZDUzoBfb13c1XkvBlsYKU79ezat4jP6KjdujSv27xSp3N11+ercPglLoC1 TsigX0a6Xa5B1tNabaNhgLrNQ53AGgADC7DGSd75uebAwEII1G0e6gTWABhYAAAAACgVGFgA AAAAKBUYWAAAAAAoFRhYAAAAACgVGFgAAAAAKBUYWIAecmh2NloAAADgZv0Y2OTlu0XelgtQ kEOzs/Lhhx8GCwMLAADgp6CBzf6CQvjv5ya/4pT7ucl+GMt1bWDVX7xIf6Uk+27Q9Jc59J/7 0z/L/3pUuw8EnMeH99eVykViYB978ntW/ef3lmTxmR9iYAEAAAIpZmCVnxIL/wkwk4HtGxhY xYimPwmb+1k6t4HNHaf8VrO+f/un6YJM7Bpso6yB/dFLDUWvNt6QlddPyam335FnnzuOgQUA AAikkIFtmpiK1Odbpkc3HJrBHanU5fFc1K4VuUtNy6HU7LS9USt90+/3mn4DvDbf+tsQFdbN kS0ta3l9v4nsyk9FKkXLpu+XmsKWSQwpuzGS2lDrO8TApu2qn2NeakYDm42w+9rXHO21k+wf /gRgEJgM7PIrP5ZXG2/IG2+9LadOn5H3zpyXF068iIEFAAAIpICBbRmHSl0aupkSaZuc1HDN S631tzECmzFgidlJonXK/w3VLCvb0nNWWibMY2BdaWnktjXqUvGlYchPvWjZQg2sq+wWc6hE UwMMrH+5h8vABrZv8PKD8hnYxLgmUdd33zsj586flwsXVmV5eRkDCwAAEEi0gXWaEHEvE/AZ WN2spZHehuHYXOTRs14ys78zLUue9bSj81O0bMEG1rVW1LOWVTGwJqn5DDew7TWxSpTXUAfG G5+REWtfKguJgf3O09+XlddPyZunmsb1woVVuXjpkly+fFkuX74sKysrGFgAAIBAIg2sIeJq NCUFDWyafk3mlUiv4TF+ZnlCI2TtpMHAGtPKFTlv7Cr1RoH8FCxbzBICe+GdEVg1AtqNCKyq 9u72OjAZcSV/JSUxsAuL/y2nTjcjrhcvXpIrV67IT3/281Sn3n4HAwsAABBInIGNiNIVM7Bt k1SrN88VEtkNMnGuCGwg2WjsoQL5KVS2nhnY/qyBzRfHXAft87fTXksGdvGZH8rZc83lApcv X5af/uznyuuz3n3vDAYWAAAgkCgDa1sral7/mTFctebfxuOdX66yR3rTz7KP7AMNrDOt3GGG PPjSsOWnSNlyaz0tpjLSwPbnLQQGbHWQi+4bov3GMpVjDeyzx4+n5vXKlSu597+eO38eAwsA ABBIhIF1GAo9emZ4C4EaPUyUfQuBZohMj/RNEeAiBtaVVu4wxzKD6PwUKJtkHt23TF+lcARW Ve/eA+t6k0BcHayVL3Gd/NGyrKysyJtvvpV+eevixUty8dIluXjxkly4sIqBBQAACGT9/BIX wADgl7gAAAC6DwYWoIccmp2NFgAAALjBwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABA qcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAA AECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMAC AAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnA wAIAAABAqcDAAgAAAECp+H/G2U7ur2UFKAAAAABJRU5ErkJgggAA --B_3655107203_1325943962-- From nobody Mon Oct 28 03:35:27 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1E17120103 for ; Mon, 28 Oct 2019 03:35:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=consulintel.es Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t89kRsYPp-AD for ; Mon, 28 Oct 2019 03:35:23 -0700 (PDT) Received: from mail.consulintel.es (mail.consulintel.es [IPv6:2001:470:1f09:495::5]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 67099120018 for ; Mon, 28 Oct 2019 03:35:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=consulintel.es; s=MDaemon; t=1572258921; x=1572863721; i=jordi.palet@consulintel.es; q=dns/txt; h=User-Agent:Date: Subject:From:To:Message-ID:Thread-Topic:References:In-Reply-To: Mime-version:Content-type; bh=dMl2h/XWHAc/pVw6H8Kvn68W00XTkuTG7w eCzx0KRL0=; b=NchG9ugbrRHGpLewxR61mkuTdwbZZ7NL085tGF0H7nUzPBfqEZ 29mNJUOSzxnQov1OpyTugazbvdSplerDs08KKmAJCOP5s6ciXBX/RZ2JfVfHsOSZ ofextfM6zqFu5u4i7SIaulcaNAhvUO2CCDQFNCa5ZXZez0hNwPogHkCNM= X-MDAV-Result: clean X-MDAV-Processed: mail.consulintel.es, Mon, 28 Oct 2019 11:35:21 +0100 X-Spam-Processed: mail.consulintel.es, Mon, 28 Oct 2019 11:35:21 +0100 Received: from [10.10.10.144] by mail.consulintel.es (MDaemon PRO v16.5.2) with ESMTPA id md50006443592.msg for ; Mon, 28 Oct 2019 11:35:19 +0100 X-MDRemoteIP: 2001:470:1f09:495:9889:54cd:5c3a:f8f X-MDHelo: [10.10.10.144] X-MDArrival-Date: Mon, 28 Oct 2019 11:35:19 +0100 X-Authenticated-Sender: jordi.palet@consulintel.es X-Return-Path: prvs=12041868c1=jordi.palet@consulintel.es X-Envelope-From: jordi.palet@consulintel.es X-MDaemon-Deliver-To: v6ops@ietf.org User-Agent: Microsoft-MacOutlook/10.10.f.191014 Date: Mon, 28 Oct 2019 11:35:19 +0100 From: JORDI PALET MARTINEZ To: "v6ops@ietf.org" Message-ID: Thread-Topic: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> In-Reply-To: Mime-version: 1.0 Content-type: multipart/mixed; boundary="B_3655107319_472058629" Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 10:35:26 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3655107319_472058629 Content-type: multipart/alternative; boundary="B_3655107319_819479232" --B_3655107319_819479232 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable By the way, I=E2=80=99m not saying that it is correct to =E2=80=9Cdisable= =E2=80=9D SLAAC if you enable DHCPv6, but I=E2=80=99ve seen some =E2=80=9Cb= ad designed=E2=80=9D products that do that =E2=80=A6 =20 Regards, Jordi @jordipalet =20 =20 =20 El 28/10/19 11:34, "v6ops en nombre de JORDI PALET MARTINEZ" escri= bi=C3=B3: =20 It may be that if you enable DHCPv6, SLAAC is disabled, and then Android wi= ll not work (as they don=E2=80=99t support DHCPv6)? So probably the =E2=80= =9Cmessage=E2=80=9D is not correct =E2=80=A6 =20 Regards, Jordi @jordipalet =20 =20 =20 El 28/10/19 11:30, "v6ops en nombre de Eric Vyncke (evyncke)" escribi=C3=B3: =20 =EF=BB=BFAlex, =20 Most probably a bug in your Free CPE (that appears to be over-zealous) =20 -=C3=A9ric =20 From: v6ops on behalf of Alexandre Petrescu Date: Monday, 28 October 2019 at 10:47 To: "v6ops@ietf.org" Subject: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? =20 This message is out of focus of current discussions. Why the presence of a DHCPv6 server breaks Android computers? On my CPE at home, of ISP Free, I noticed recently this message: 'Watch out= : if you activate the DHCPv6 server, certain Android computers are at risk = of loosing their IPv6 connection'. Why and how the presence of a DHCPv6 server on the CPE breaks Android compu= ters? I would like to try this DHCPv6 server to connect my Windows 2-in-1 compute= r to work at home, but I dont want to break the other Android tablet that s= hows the weather report. Alex _______________________________________________ v6ops mailing list v6ops@ie= tf.org https://www.ietf.org/mailman/listinfo/v6ops=20 ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.theipv6company.com The IPv6 Company This electronic message contains information which may be privileged or con= fidential. The information is intended to be for the exclusive use of the i= ndividual(s) named above and further non-explicilty authorized disclosure, = copying, distribution or use of the contents of this information, even if p= artially, including attached files, is strictly prohibited and will be cons= idered a criminal offense. If you are not the intended recipient be aware t= hat any disclosure, copying, distribution or use of the contents of this in= formation, even if partially, including attached files, is strictly prohibi= ted, will be considered a criminal offense, so you must reply to the origin= al sender to inform about this communication and delete it. _______________________________________________ v6ops mailing list v6ops@ie= tf.org https://www.ietf.org/mailman/listinfo/v6ops=20 ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.theipv6company.com The IPv6 Company This electronic message contains information which may be privileged or con= fidential. The information is intended to be for the exclusive use of the i= ndividual(s) named above and further non-explicilty authorized disclosure, = copying, distribution or use of the contents of this information, even if p= artially, including attached files, is strictly prohibited and will be cons= idered a criminal offense. If you are not the intended recipient be aware t= hat any disclosure, copying, distribution or use of the contents of this in= formation, even if partially, including attached files, is strictly prohibi= ted, will be considered a criminal offense, so you must reply to the origin= al sender to inform about this communication and delete it. --B_3655107319_819479232 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

By the way, = I=E2=80=99m not saying that it is correct to =E2=80=9Cdisable=E2=80=9D SLAA= C if you enable DHCPv6, but I=E2=80=99ve seen some =E2=80=9Cbad designed=E2= =80=9D products that do that =E2=80=A6

 

Regards,

Jordi

@jordipalet

 

 

 

El 28/10/= 19 11:34, "v6ops en nombre de JORDI PALET MARTINEZ" <v6ops-bounces@ietf.org en nombre de = jordi.pale= t=3D40consulintel.es@dmarc.ietf.org> escribi=C3=B3:

 = ;

It may be = that if you enable DHCPv6, SLAAC is disabled, and then Android will not wor= k (as they don=E2=80=99t support DHCPv6)? So probably the =E2=80=9Cmessage= =E2=80=9D is not correct =E2=80=A6

 

Regards,

Jordi

@jordipalet

=  

 

 

El 28/10/19 11:30, "v6ops en nombre de = Eric Vyncke (evyncke)" <v= 6ops-bounces@ietf.org en nombre de evyncke@cisco.com> escribi=C3=B3:

 

=

=EF=BB=BFAlex,

 

Most probably a bug in your Free CPE (that appears to be over-zealous)

 

-=C3=A9ric

 <= /p>

From: v6ops <v6ops-bounces@ietf.org> on behalf of Al= exandre Petrescu <alexandre.petrescu@gmail.com>
Date: Monda= y, 28 October 2019 at 10:47
To: "v6ops@ietf.org" <v6= ops@ietf.org>
Subject: [v6ops] out-of-focus: why DHCPv6 breaks= Android computers?

 

Thi= s message is out of focus of current discussions.

Why the presence of a DHCPv6 server breaks Android computers?<= /span>

On my CPE at home, of ISP Free, I not= iced recently this message: 'Watch out: if you activate the DHCPv6 server, = certain Android computers are at risk of loosing their IPv6 connection'.

Why and how the presence of a DHCPv6 se= rver on the CPE breaks Android computers?

I would like to try this DHCPv6 server to connect my Windows 2-in-1 co= mputer to work at home, but I dont want to break the other Android tablet t= hat shows the weather report.

Alex

3D"cid:image001.png@01D58D82.F3472A90"

_______= ________________________________________ v6ops mailing list v6ops@ietf.org = https://www.ietf.org/mailman/listinfo/v6ops


*************************************= *********
IPv4 is over
Are you ready for the new Internet ?
http:/= /www.theipv6company.com
The IPv6 Company

This electronic message = contains information which may be privileged or confidential. The informati= on is intended to be for the exclusive use of the individual(s) named above= and further non-explicilty authorized disclosure, copying, distribution or= use of the contents of this information, even if partially, including atta= ched files, is strictly prohibited and will be considered a criminal offens= e. If you are not the intended recipient be aware that any disclosure, copy= ing, distribution or use of the contents of this information, even if parti= ally, including attached files, is strictly prohibited, will be considered = a criminal offense, so you must reply to the original sender to inform abou= t this communication and delete it.

________________________________= _______________ v6ops mailing list v6ops@ietf.org https://www.ietf.org/mail= man/listinfo/v6ops


*******************************= ***************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or con= fidential. The information is intended to be for the exclusive use of the i= ndividual(s) named above and further non-explicilty authorized disclosure, = copying, distribution or use of the contents of this information, even if p= artially, including attached files, is strictly prohibited and will be cons= idered a criminal offense. If you are not the intended recipient be aware t= hat any disclosure, copying, distribution or use of the contents of this in= formation, even if partially, including attached files, is strictly prohibi= ted, will be considered a criminal offense, so you must reply to the origin= al sender to inform about this communication and delete it.

--B_3655107319_819479232-- --B_3655107319_472058629 Content-type: image/png; name="image001.png"; x-mac-creator="4F50494D"; x-mac-type="504E4766" Content-ID: Content-disposition: inline; filename="image001.png" Content-transfer-encoding: base64 iVBORw0KGgoAAAANSUhEUgAAArAAAABzCAYAAABgpzGFAAAY0ElEQVR4nO2de4wd1X3HV8q/ /aNqWtIQmqKG8Md1pQiv7N29dmirKO4aaGywroS9+I+0Ka1BNWrd1v1jN7cVUSuVeoOhD1rX RFSryNkQAqGBTTdLEzAYOStevZvwMBj8AG9tV1ZC/v71j3tn7pwz5zn3Obufj/SVdu/MnDmv Oec7vzl37ki1WhWEEEIIIYTKopFBZwAhhBBCCKEYYWARQgghhFCphIFFCCGEEEKlktvAbqnK 6PZx2bBns2zYs1lGJ8elumXwmUYIIYQQQutXVgM79tsT8ut/uVk+/ujnZONzd8jGZ++QX330 c3LtX4zJ2G9NDDzjCCGEEEJofcpoYCe2TMg1M2NSPfklOfL+E/LguW/Kg+e+KUfef0ImTv6B /Nr0GJFYhBBCCCE0EBkN7A07xuWTT98k/3HhKbnxpT+Wj/ygKh/5QVVufHmfPPLBU/LJp26S G35vfOCZ75Wml6TJ0vTA87KW1KzX03J0apD5mJakeRWGsK3phwghhJBZRgN7/R9tlu0v3yP3 vvuwjCyNysgzm5paGpV73z0qn3/pT+T6P9wcdIKpo6c1pzBoA+NX74zDlOSqQ0SWpsOPO310 auD1Uyw/LeN4+qhMDazPtPOd1PlwmERzffa9Hz5wVAwfx59/SksnoM0RQgihGBkN7Cf+ZrPs f2tWvvT638qNL++Te96alf1vzcrvvHy3/ObJPfLx52+RT/z1mCfxzCSZTmCtz9Z7RKntTGQ6 6Jg1YGBbZXbv3+s+k0Rfh+0makDtq/fD1Hgm9dOOVse2M6YVIYRQL5UzsOOfnZBf+reqHHn/ CVn8v5PyD2e+LrevzMjtKzNy/9ljcujM1+Vjx7fLLz60WcY/6/gyVzo56mZhSo4ebZkRPVKT 3TfdtiRLmWe+6UTq216tiulxcTPylvk8MUbZidc6sRfIp7Nu9PTNaeQjkpljrWVUty1NJxG9 JZnuqO58+TEraPlAT/uMKeq4JNN6W0ybFhi0zpG78VDr11rfxmUL7Xxb63Ng/bCdbrtJHpNv JSfP3ExMtZ23TA3tDQJCCKG1ppyBHd0+Ltc8OSnPXnlF7n7zPvmV45Oy7dV75POv7JdfPj4p d715n/zde4/ILzy2VUa32w1se+KzRGIyE65qBlqTX2ayXpqu5idX3/Y0vSR97fGxsr+2b3Zi 7zSfprI7jIk5DVuEzlPGbATtdHqGTJkK1l10xLC1vycq1/M+kzOcWltYDWq8gVXquzotS9ky 5dKx1OfA+qHBwC5Na2bV0C+M5l944oIQQqjryhnYDVNjsvmFL8q/v/8duer4pNRPH5GnL5+Q 7156Xuqnj8jHjk/KQ+cfkxuev0M2TNmXEfjMiGl9XzsIOhVhVszbp9oza5p+7jNtwjWZmmOd 5tNUP44IrDkNs8Hxl9HyCLjjuos0sMn5PEam533GY2Dzbd2BgXXWS1j7Dq4f2urLfQ22I8m2 +kEIIYS6o5yBve6uTXJb46/kwKnDsuHkbrn/7DfkH889Kg+em5f7z35DKid3y5+fekBu/Z+D ct1dm6wJd2JGZGnaMSHrESbzdlswyHnOJH+BxiEon6b6CTaw7oinv4yWvHRcd3EGNjE2PhPT 8z4TaGDbZSpuYHNldS1N6NDAdr8fqmSPV0xz8k8rT3kDm1m2QRQWIYRQF5UzsNffuVlufuXP ZPqdh+RTJ26Tr549Jg+d/7b8y/nH5P6zx+Q3TtwmM+/8q2x/5U/l+jsdbyKwflGpuZ7RFOUL iyiFGVhT+rr0tYcmU/NAp/kMqZuCBtZfxmIG1p9ujIFN9g34wlqv+8yADGz+0Xt8BLa//TAg ars0nV/XbGi/4XjLA0IIobWmnIH9zK1jct3iTnnkg+/KtSd2yO0r0/KN//2+HFtdlNtXpuXa EzvlkQ+ekk/91w75zK2ud8GavlHemtCcESPfEoEwA2udjKeXDBN+N9bA9tLAWoyAr4wFDaw/ 3QhjErh8oC99JnQNbHJu67pry7pTS33n6sqz1tTYT/raD11fwtK+DKdEyyMi0gghhFAHyhnY ia1Vueq+Mfn9n3xF/unco/LpF2tyzQtfkGte+IJ8+sWa/PP5b8kXf/IVuervx2Riq/8E+Sen meha4LeqCxnYalVs77s8ffSBdN/c488O3kLgNw6+92+60tC/yW54TKuUsQMD603XlR9VocsH +tJnfAa2qkXlT5/OGTrzdp9h0+rKkK6xPgfWD91vEcjWQS4Cb1iGMByvfkMIIbSWZHwP7MZb JuSjX9sie378ZXn4gyflq2ePyf1nj8nDHzwpu1e+LB/92hbZeIvjFVoIVasStXxgGBUUkUQI IYRQv2U0sNVqVUZvmpCr7x2Tqx/fJqPP7ZXR5/bK1Y9vk6vvHZPRmzCvKEBRyweGQerrrvJr VxFCCCE0DLIa2Gq1KhNbJmTjzeOyYc9m2bBns2y8eVwmtmBe0VqV4QcHMK8IIYTQ0MlpYBFC CCGEEBo2YWARQgghhFCphIFFCCGEEEKlEgYWIYQQQgiVShhYhBBCCCFUKo1Uq1UZHR1NtWnT Jtm2bZvs2LFDarXamtTOnTtlcnJSxsfHlbKPjo7K2NiY7N69W+6++245ePDgmtT+/ftl7969 snXr1lz510P7F+0bCCGEEBoOKQZ206ZNsmvXroGbiH5p165dilEZGxuTAwcODNxg9ksHDhxQ TOx6a/+YvoEQQgih4ZFiYCcnJwduHPqtycnJtPx79+4duKnst/bu3buu2z+0byCEEEJoeKQY 2J07dw7cNPRbu3btSsu/f//+gRvKQURh13P7h/YNhBBCCA2PFAM7aMMwKCXlH7SZHJTWe/uH 9A2EEEIIDY96bGBnZG55WZYXDsu+vhzX0sycLC8vy/LcDAYWA4uBRQghhNaYChrYfXJ4Yblp EjOam1H3m5krZkKLHtcXAzv3muRYXZRZfftrc+kx7Y+SdOYkl8prc/60PVIPf03memFgk7rN KtNW+w4vtD6fk5nM/guH91mPT7dl219P33PeoD6VHtvKGwYWIYQQKqUKGNhWdNRgWIdG/TCw iUGdXZTVrGH0GtjEvK7K4qwl7cS0GtLymde2Se5RBFav232HZSFjCtsGttU/sgY2pl30fZP/ E9MakVZiXov010FfoAghhBDKK9rAJgZFj5oZzYceKUtNyELL9GhRNNtxiUlKI3FzMpMaJ0Mk r58G9uBBmV1cbfnOWa+BVfa1pZ0Y2MQcr74gJ1Y1g5puW5TZ7N+9XkJgqNtsn0j+npuba+6T MbBBfSfUwKZ94ogcWdAMara/ZP8ucDM06AsUIYQQQnlFG1hvNKtlGHQzqUTgWmZCSct1XGpC FpRoX/u8yZKGBTm8r/8GVvnMtAwgXSXgiZRqBtZljI3bskSY2Zj2N9Zt5rPUwM7MyNzynMyY 2t+xfCDUwCpmWNvXuK3g0oNBX6AIIYQQyqszA6tFQedm1EfIijLRuMRoZNNyHqc9ptYjf20N kYG1RGCDDKzqetV1s6uLMntwVpr+tblsQY/qOqO8fTOwzfadm9PWwGaWoChtHGpgjcdlv/SX 3MyoSxqS80dFgTGwCCGE0FCqK0sITEbUaBACDKzxOMNjYH3/ZlqDMbA9W0JgXOe6KouzLTOb nEM/Z8Ta2Z4tIcisf41p19AIrPnGakEO72uZWf042/8YWIQQQqh06sqXuJSobGpaDN/0dhhY 53EGo5Mc2zRGA1xCoK8/7eaXuHS1zrW6uqodn43Oxn+hK6r9bV/i0h7tN/tGu6+E3NB0YmDT JSgLC+1+kO2vpmUrGFiEEEKolOria7QypsH2BSuXgXUdZ4zUZR9FL8hCvw2sbb1pN16jZV2/ miwdMOyTvg0h2Ry2fKCwgbWsKVUNrHqjkXs9lsXYOl+jZV2/mumT+j5avwpdPoCBRQghhIZT /BJXrIFdg1rv7R/SNxBCCCE0PMLA1jCw6739Q/oGQgghhIZHGNgaBna9t39I30AIIYTQ8AgD W8PArvf2D+kbCCGEEBoeYWBrGNj13v4hfQMhhBBCwyPFwN55553rUpR/fZc/pG4QQgghNDxS DCxCCCGEEELDLgwsQgghhBAqlUaq1aoghBBCCCFUFhGBRQghhBBCpRIGFiGEEEIIlUoj1WpV AAAAAADKAgYWAAAAAEoFBhYAAAAASgUGFgAAAABKBQYWAAAAAEoFBhYAAAAASgUGFgAAAABK BQYWAAAAAEoFBhYAAAAASgUGFrpPoy6VSl0ag84HgIiINKReGZGR2nwHSYT26S6cqyx0+zpf T+PGMJd1mPMWy1oqS98ozxhW0MC2CpjrGA2pVypSb/g+K4ohrX500FJfBAOos1LXVyCNulRG RmQkI+V6b9SlMlKT+dwx6meNekVJo1JvGNLW0nExX2sf19c2iLjO+9w/GvWKezAOyU9gnrty rr5gG8NjkihYFttxMekNTT2KFJrjhir/GsOYt273tdJTYF5Pt7v7q3cMy84xIzWZH+B8VczA NupSqVSkMhJiVntsYMHDAOpszQ4aGXQz2rqIK0lFBxjYpnnN7jMvtUpdGqb9Qs3TwOp9jV+b a61PW8fw2DSIwGJgh5i1VBaFTsbbLozV2TlqgPNVIQPbqFekUm/IfC0zYSd39FknXrlL7sp9 lmQ4u3+mMlsdrl7Tt5nSb032SZrKnUBImmbma+1zpBExY7RZi7rN19rl8+QlTUv7P3duQ93n InZanrz136hLpbXNmn9L++jnN96pKWWytHNIvbuOV9q0IpUCZXG2hZK+4Y7SZFDna+19vQZ2 Xmq2+jCa45rMO/vcvNRi7nzzJ9X6Tsx1+rtSM/Szx219Nalnz3Xpuxb813VI3lsRBF9+un2u ZgmlZhobPWOE65ry1lmapGkMDyinHm1xXS8hY6AtvXyGrfVoLnOX6zZ2XrKVwbpf4DhZtB/G pKNdD92dqzqcN33jcrfqObfvSHAeuzp+GPNRcF7PbI/yZNY6tsx1fZmvmhQwsBn3brz4wyKw ysBp6MBpoXNGxBY21yorOE0NZdu81K0GtrVvpnXaZfLkxTYomM7tolFXIijzNZOhdNSZNf+O 9lHS1TqnoUz+dMSwrV32qH4SWxafgR2xlC/drl+AGVPqM7DG4y1pZ/+3lXO+JiOVijJwuwyM jrnvRNS/5TpXy6SNG67rMuRa0I7X7+iD827Jj5KeZwyJPpd+/RhunlzGwXiu4PHDMYZ7x19H nnP9wTcGOtLLZdlSj8Yy96BuY+clY53byxo8Thbth550cn3dZ2A7mas6mTd943K36llc82kB n9FBu3VtXleuuwhPZiLIwErP5quEeAObi65lKyLUwOruW5v4rQOMo9Fyg19omhqmhrPuny2H 43yhefF1mhzZ+rDd0bhMvyX/rvZJk3CskzGmb06nvclU9oh+UqQsARHYoAu4/WF7cNOjAKky F7ZzcmmnrQ5glnJmo7/pNtdAn8XWd2Lq3zeJG0xTp9eC6zor0u6Fx5CC59IH/SCT5ThX6Pjh GlO9N3VF8mypE1d6zjxn/reN192u29h5yZR/a1kjxsmi+felY2ufns9VkfNm7LhctH5sY2LR MaJwu3VxXnca2Ji6EbWe+z5ftYk2sLlHyLnHvQEG1ji5d2hgcxeUZiZCDayo4Xrj8Rnma619 rJGQmLwYzm3KodIGjoifr85s+Xe1T7rdEf7X7pat6eTyaaj30H5SpCxdN7AREdjcBazvZ38k GdbntDtqF7b2jKp/8yRu7au+CTLkWvBNJrHt3snkFHsuvb1CJzvnNVVk/NDG8BjT4spzyBjo Si+faUu+DGXuRd12amB9eQodJwv3DU86sQa2k7lKOpg3feNyN+vZNCYWnds76XfdnNdtBjZq rtby1e/5KkOkgfV9861oBNaWXkD6trv5ohFYJelKfp2tTitE3qhX1McWrrwERB2sC5wV46NF tQp0dGP+Xe0jAR3NeCcYTrvsEf2kSFliIjW+Y5Pz92INrI6pnAZD3LGBjap/Qz9z9VXvBJk9 leVaMB2v1G/kGONKLyqCEnguV98LjiKZsX9BwjMedDIJW9siyXex9jduM+yrjNfdrttODWzR /tPPdPS+3qu5KtkWO2+GGNhu1k/Qdx96EYENyEeRed1lYGPn6pyB7eN8lSHOwBo7jzoRp25b y5jps2xm52shE4UhLe1OPHrdaa6ItdxF5jYzzfJXKtnG8K2T0dattrYZz53LX+bRvZKW/d1t 9jqz5d/RPpGPdq3p5A4xlz24nxQpi6Mtog1s6y7UPhjnPwt9C0EeUzmbj2DUtyBYypYvjLPv hNa/3s+sfTXAwIRcC3oe9GUt0WOMK72AcSluPNMemQWOEa5zFamz1s4RSyXa+TKum2yfKGA8 dqTny3fr/8eNZe5+3UbPSzncZQ0dJwv3Q086xr7es7mqXR9R82aIge1WPVvHxII+o3C7dXFe 1+blYE9mrJ4IA1tgvgolysDa1j0qBW9N5NZv7Sl3rZmwc+BEkUsrd3etrTUMSVMtTH69ouei MS6ytuUlqcfk0Utdu2uyHJM5W/vbtZWa1HJrkC11aqszW/4taWW/eaqcQy+7r53zlWgpe2A/ KVCWZjKWtggysGpd5AYTj4HVz68unXDfDZvLqX7zWo1C+yZYWx1F1H/uOrf01ZAIXMi1oLdB rr0ixxhXet4xpMB4prwDsZI3FKZ+6TpXQJ15x3BfOTPnqNRq7uslZDy2pZfPuDlftjJ3u25j 5yVTGZxlDRwni/ZDUzoBfb13c1XkvBlsYKU79ezat4jP6KjdujSv27xSp3N11+ercPglLoC1 TsigX0a6Xa5B1tNabaNhgLrNQ53AGgADC7DGSd75uebAwEII1G0e6gTWABhYAAAAACgVGFgA AAAAKBUYWAAAAAAoFRhYAAAAACgVGFgAAAAAKBUYWIAecmh2NloAAADgZv0Y2OTlu0XelgtQ kEOzs/Lhhx8GCwMLAADgp6CBzf6CQvjv5ya/4pT7ucl+GMt1bWDVX7xIf6Uk+27Q9Jc59J/7 0z/L/3pUuw8EnMeH99eVykViYB978ntW/ef3lmTxmR9iYAEAAAIpZmCVnxIL/wkwk4HtGxhY xYimPwmb+1k6t4HNHaf8VrO+f/un6YJM7Bpso6yB/dFLDUWvNt6QlddPyam335FnnzuOgQUA AAikkIFtmpiK1Odbpkc3HJrBHanU5fFc1K4VuUtNy6HU7LS9USt90+/3mn4DvDbf+tsQFdbN kS0ta3l9v4nsyk9FKkXLpu+XmsKWSQwpuzGS2lDrO8TApu2qn2NeakYDm42w+9rXHO21k+wf /gRgEJgM7PIrP5ZXG2/IG2+9LadOn5H3zpyXF068iIEFAAAIpICBbRmHSl0aupkSaZuc1HDN S631tzECmzFgidlJonXK/w3VLCvb0nNWWibMY2BdaWnktjXqUvGlYchPvWjZQg2sq+wWc6hE UwMMrH+5h8vABrZv8PKD8hnYxLgmUdd33zsj586flwsXVmV5eRkDCwAAEEi0gXWaEHEvE/AZ WN2spZHehuHYXOTRs14ys78zLUue9bSj81O0bMEG1rVW1LOWVTGwJqn5DDew7TWxSpTXUAfG G5+REWtfKguJgf3O09+XlddPyZunmsb1woVVuXjpkly+fFkuX74sKysrGFgAAIBAIg2sIeJq NCUFDWyafk3mlUiv4TF+ZnlCI2TtpMHAGtPKFTlv7Cr1RoH8FCxbzBICe+GdEVg1AtqNCKyq 9u72OjAZcSV/JSUxsAuL/y2nTjcjrhcvXpIrV67IT3/281Sn3n4HAwsAABBInIGNiNIVM7Bt k1SrN88VEtkNMnGuCGwg2WjsoQL5KVS2nhnY/qyBzRfHXAft87fTXksGdvGZH8rZc83lApcv X5af/uznyuuz3n3vDAYWAAAgkCgDa1sral7/mTFctebfxuOdX66yR3rTz7KP7AMNrDOt3GGG PPjSsOWnSNlyaz0tpjLSwPbnLQQGbHWQi+4bov3GMpVjDeyzx4+n5vXKlSu597+eO38eAwsA ABBIhIF1GAo9emZ4C4EaPUyUfQuBZohMj/RNEeAiBtaVVu4wxzKD6PwUKJtkHt23TF+lcARW Ve/eA+t6k0BcHayVL3Gd/NGyrKysyJtvvpV+eevixUty8dIluXjxkly4sIqBBQAACGT9/BIX wADgl7gAAAC6DwYWoIccmp2NFgAAALjBwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABA qcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAA AECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMAC AAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnAwAIAAABAqcDAAgAAAECpwMACAAAAQKnA wAIAAABAqcDAAgAAAECp+H/G2U7ur2UFKAAAAABJRU5ErkJgggAAAA== --B_3655107319_472058629-- From nobody Mon Oct 28 07:04:47 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 757BE1200E9 for ; Mon, 28 Oct 2019 07:04:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nCBvAtkhATJY for ; Mon, 28 Oct 2019 07:04:45 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D215F12002F for ; Mon, 28 Oct 2019 07:04:44 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iP5dN-0000GNC; Mon, 28 Oct 2019 15:04:37 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> <21E28E8F-8E91-47D6-8337-9FF0359D67B8@employees.org> <1E99599F-0A56-4A53-AD7C-499BC87AA7D3@employees.org> In-reply-to: Your message of "Mon, 28 Oct 2019 10:58:29 +0100 ." <1E99599F-0A56-4A53-AD7C-499BC87AA7D3@employees.org> Date: Mon, 28 Oct 2019 15:04:36 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 14:04:46 -0000 > No, the question is if there is any host stack + server software > that deals with flash renumbering deployed. And that is deployable > without coding. Flash renumbering is by and large not a server problem. If a request reaches the server, then the server typically can reply. Any flow that spans the renumbering event will be affected, but there are lots of other issues that also affect established flows. If you renumber the network that contains mail servers, web servers, xmpp servers, etc., then the servers don't really notice. Of course, a renumbering event requires DNS to be updated, possibly changes to firewalls, etc. But that is no different from a proper renumbering event. From nobody Mon Oct 28 07:11:09 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFD7012082A for ; Mon, 28 Oct 2019 07:11:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tWffGWq9kENf for ; Mon, 28 Oct 2019 07:11:06 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [IPv6:2607:7c80:54:3::74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E710C12081B for ; Mon, 28 Oct 2019 07:10:57 -0700 (PDT) Received: from astfgl.hanazo.no (unknown [IPv6:2a01:79c:cebd:47d8:a8cf:1b3:67ae:5263]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 91B864E1294B; Mon, 28 Oct 2019 14:10:56 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 0774E20443E7; Mon, 28 Oct 2019 15:10:54 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Mon, 28 Oct 2019 15:10:53 +0100 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org> <21E28E8F-8E91-47D6-8337-9FF0359D67B8@employees.org> <1E99599F-0A56-4A53-AD7C-499BC87AA7D3@employees.org> To: Philip Homburg X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 14:11:08 -0000 Philip, >> No, the question is if there is any host stack + server software >> that deals with flash renumbering deployed. And that is deployable >> without coding. >=20 > Flash renumbering is by and large not a server problem. If a request > reaches the server, then the server typically can reply. Any flow that > spans the renumbering event will be affected, but there are lots of=20 > other issues that also affect established flows. >=20 > If you renumber the network that contains mail servers, web servers, > xmpp servers, etc., then the servers don't really notice. >=20 > Of course, a renumbering event requires DNS to be updated, possibly = changes > to firewalls, etc. But that is no different from a proper renumbering = event. And this is something you have tested and verified works? For a set of typical open source packages? See Bj=C3=B8rn's message as well. And try to see what happens when you do this for a hidden primary DNS = server... The world just isn't ready for flash renumbering of networks, likely not = graceful renumbering either. There are not many sensible responses the end-users can come up with to = a service provider with a network behaving this way, apart from = isolating addressing. Aka NAT. Cheers, Ole= From nobody Mon Oct 28 14:11:32 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 928ED120091 for ; Mon, 28 Oct 2019 14:11:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nvhqyG-wQkyA for ; Mon, 28 Oct 2019 14:11:29 -0700 (PDT) Received: from patsy.thehobsons.co.uk (patsy.thehobsons.co.uk [80.229.10.150]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D023B120096 for ; Mon, 28 Oct 2019 14:11:28 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at patsy.thehobsons.co.uk Received: from simons-macbookpro.thehobsons.co.uk (Simons-MacBookPro.thehobsons.co.uk [192.168.137.111]) by patsy.thehobsons.co.uk (Postfix) with ESMTPSA id CC4371BC37 for ; Mon, 28 Oct 2019 21:11:24 +0000 (UTC) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Simon Hobson In-Reply-To: <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> Date: Mon, 28 Oct 2019 21:11:21 +0000 Content-Transfer-Encoding: quoted-printable Message-Id: References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> To: "v6ops@ietf.org" X-Mailer: Apple Mail (2.2104) Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 21:11:31 -0000 Eric Vyncke (evyncke) wrote: > Most probably a bug in your Free CPE (that appears to be over-zealous) Could an alternative explanation be along the lines of : User turns on DHCPv6 server -> CPE configures it's RA service to label = the network as managed End user device receives RA and finds the network is managed -> it turns = off SLAAC As the EU device has disabled SLAAC and doesn't support DHCPv6, it now = loses IPv6 connectivity From nobody Mon Oct 28 14:57:30 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC56E120096 for ; Mon, 28 Oct 2019 14:57:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fIt4mV2PxGex for ; Mon, 28 Oct 2019 14:57:26 -0700 (PDT) Received: from mail-qt1-x829.google.com (mail-qt1-x829.google.com [IPv6:2607:f8b0:4864:20::829]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8372B12006B for ; Mon, 28 Oct 2019 14:57:26 -0700 (PDT) Received: by mail-qt1-x829.google.com with SMTP id o3so16986590qtj.8 for ; Mon, 28 Oct 2019 14:57:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=6rHXsU9cjVKV5vEUlqQLZ6f3wr1sTENWRJjqyZibFLM=; b=XJrC7zV13Va6gcMmYoDNRYZEpbuHM1k3Zw+uJYWh67EKWQw7oDQT0iSefck4TrFMmz YhmZma5/djz1TGaBfGpPy60mYKSKTc9nIMWy0HBNnhLP5QyGdMS4ZGpiQaOa8IdFuV1e LBBofC7xwZyra5O1VAkip/yHMKtFNjmx0RvEJvVxpxNk5unkFgWPYlthIzyLahzl+mEy ZiGUriMQBMW8jqkZ6vWKQID0/6D5W9gsqyoF68M+k64OcSb1TGEtgLqzAJ5QHk1T7JZV 9owttXvBUhcNcmQnb5M6M7YobOU3nVu61EZJBvWBxDITkzLiNmFVgws1Y9quivPgcDox RsVQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=6rHXsU9cjVKV5vEUlqQLZ6f3wr1sTENWRJjqyZibFLM=; b=om3oGk6/Qgh3tlLNirfKwnowHuxsglM40mipsKwV8AJHXuTIhMfr4WFFUqin23tTGi +WDcLuP3TxK/YtPqj0ZZffZCZMQPwxu5Qn72SiIZju9AxJuUzsXbyYJU3QChTYUJIXfD O9BoWXtt7nUgtNun2Wmcnecoq8fHYS3bC8sFyCV+KNv3wmtkaPLxVJwwrvRYsX4vSAhE 9ip6EQTMHFu2LSA5z24n6b2/3+MAcvechFXCrIV2FHFuVcRILK711sfrFHWFYpRhI698 RG2uK8IuFxljl7CtQE5j5ZzTGP9NGwg1cKiQ99SCPP36mioGd16bG8bTKzdtN0XPRe1b gEbA== X-Gm-Message-State: APjAAAVxKHaCuIRTSifGfh7oaUURsM1KyKQ/VR5fq7q1mULsLbyqnXh3 Rlle5K35ppUS3zr8V1NDdvWBRokOD5UEFQbXGwA= X-Google-Smtp-Source: APXvYqyruFYxVt4Jc4eb/lAmwwx4/sgPDpF+JWqrjoz2VKjGB8lf6lvdkAzeW6TNR028FTpS5xAO73UtxhT8rYsiSeo= X-Received: by 2002:ac8:53ca:: with SMTP id c10mr830826qtq.94.1572299845279; Mon, 28 Oct 2019 14:57:25 -0700 (PDT) MIME-Version: 1.0 References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> In-Reply-To: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Jen Linkova Date: Tue, 29 Oct 2019 08:57:13 +1100 Message-ID: To: Ole Troan Cc: Mark Smith , v6ops list Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 21:57:29 -0000 On Thu, Oct 24, 2019 at 9:47 PM Ole Troan wrote: > Right. Instant/flash renumbering is not supported in IP networks. Oh. Surprise. After I've been doing it all the time....;) Actually it would be helpful to define requirements/expectations. I read i= t as: R1: [MUST HAVE] after the renumbering host is able to open new connections R2: [NICE TO HAVE] old connections survive the renumbering. IMHO we shall at least enumerate the most common scenarios where R1 is not happening and look what can be done here. If we have a scenario when hosts end up with totally broken connectivity we= can: 1) say 'oh just don't do that' - however before we do this (=3D=3D produce some BCPs) it's worth analysing if it's feasible and, more importantly: --- is the party affected by the issue is the same party which is supposed to follow the BCP? --- are we talking about 'fix all hosts'? (when did we deal last time with the scenario 'a machine re-authenticated via 802.1x successfully, changed the VLAN but kept the old IPv6 prefix'? 2) See if there is a way to mitigate at least part of the problem by making the protocol more robust (isn't all DNA work is actually in the same problem space?) > IPv6 does nothing to help with this, well, assuming a network hiding behi= nd NAT, it makes it harder. > Apart from "does not work", what more can the IETF say or do here? Try to make the Internet work better, maybe? :) > > On 24 Oct 2019, at 12:43, Mark Smith wrote: > > > > > > > > On Thu, 24 Oct 2019, 20:59 Trevor Warwick, wrote: > > > > On Thu, 24 Oct 2019 at 09:18, Mark Smith wrote= : > > > > > > I thought about this in the exact context of the scenario of this draft= . Although the design of the broadband deployment I worked on always planne= d to give out stable prefixes, I worked through this scenario and realised = that so many complex issues disappear if you provide stable prefixes. > > > > Fundamentally, if an ISP is selling an always on link to the same locat= ion, then the addressing should be as permanent as the link delivery locati= on is. > > > > > > If you're an ISP today, and using DHCPv6-PD to hand out IPv6 prefixes, = what are the possible scenarios if you don't try hard to keep the prefixes = stable? > > > > Why don't you want to try hard? Not trying hard gives customers a bad e= xperience. They're paying you to try hard to give them the best suitable se= rvice you can give them. > > > > > > - You could be running a closed environment where all customers are for= ced to use your CPE, in which case you can make sure that your CPE has vari= ous hacks added to try to cope with prefix instability and avoid customer= hosts experiencing connectivity issues when prefixes change. Maybe you can= make this work well enough, and advanced customers who don't want to use y= our CPE are just out of luck. > > > > - If you're in an environment where customers can chose their own CPE, = then it seems almost guaranteed that there will be connectivity problems wh= en the prefix changes, because many CPE implementations don't handle this s= ituation at all. So you're then relying on hosts falling back seamlessly to= IPv4, in order to continue to have connectivity. In which case, I'd wonder= why you're bothering to provide an IPv6 service in the first place. > > > > See what I said about selling an always on service to a fixed location,= and the addressing having the same amount of stability as the service and = link itself. > > > > The reason this problem really exists is that ISPs have fundamentally c= ontinued to treat residential, always on broadband customers although they = were still dial up customers. Nothing has changed - per BRAS (NAS) IP addre= ss pools, pool route aggregation at the router, customer gets a single IPv4= address when they attach, that can change each time they attach. PPPoE is = making Ethernet connectivity resemble dial up connectivity. > > > > Now this dial up model is trying to be applied to semi-permanent IPv6 s= ervices, where it's even less applicable now that customers get their own r= outed address space on a semi-permanent link. > > > > Treat all customers as routed subnet SOHO customers, so they get the sa= me prefix regardless of which BRAS they attach to. Move the route aggregati= on boundary to a higher level to e.g. a cluster of BRASes, or a region. > > > > Use an IPv6 address provisioning model that suites and matches the serv= ice they're paying for, not a nearly 30 year old dial up model. > > > > If your customers can BYO their CPE, then stable prefixes are the only = choice. > > > > See slide 6. > > > > Residential IPv6 CPE - What Not to Do and Other Observations > > https://www.slideshare.net/mobile/markzzzsmith/residential-ipv6-cpe-wha= t-not-to-do-and-other-observations > > > > > > > > > > I do think this is an important problem that needs to be solved, for th= is context and the others mentioned in the draft. > > > > > > _______________________________________________ > > v6ops mailing list > > v6ops@ietf.org > > https://www.ietf.org/mailman/listinfo/v6ops > > _______________________________________________ > > v6ops mailing list > > v6ops@ietf.org > > https://www.ietf.org/mailman/listinfo/v6ops > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops --=20 SY, Jen Linkova aka Furry From nobody Mon Oct 28 15:36:32 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CA2112006B for ; Mon, 28 Oct 2019 15:36:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VQdQ6vuD2GGE for ; Mon, 28 Oct 2019 15:36:29 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4628C120033 for ; Mon, 28 Oct 2019 15:36:29 -0700 (PDT) Received: from astfgl.hanazo.no (246.51-175-81.customer.lyse.net [51.175.81.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 78D6A4E11B5C; Mon, 28 Oct 2019 22:36:28 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 9B7CA205AC83; Mon, 28 Oct 2019 23:36:25 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Mon, 28 Oct 2019 23:36:24 +0100 Cc: Mark Smith , v6ops list Content-Transfer-Encoding: quoted-printable Message-Id: <40E27B00-5C6F-4704-9554-2DC532F854BE@employees.org> References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> To: Jen Linkova X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 22:36:31 -0000 >> Right. Instant/flash renumbering is not supported in IP networks. >=20 > Oh. Surprise. After I've been doing it all the time....;) Oh great. So which services do you run in the network? Any issue with = short DNS ttls? Or do you only do this with MP-TCP / QUIC or only mosh style = applications with a built in session layer? I presume you have a routed network with multiple routers and links as = well? Ole, not sarcastic at all. ;-) >=20 > Actually it would be helpful to define requirements/expectations. I = read it as: > R1: [MUST HAVE] after the renumbering host is able to open new = connections > R2: [NICE TO HAVE] old connections survive the renumbering. >=20 > IMHO we shall at least enumerate the most common scenarios where R1 is > not happening and look what can be done here. > If we have a scenario when hosts end up with totally broken = connectivity we can: > 1) say 'oh just don't do that' - however before we do this (=3D=3D = produce > some BCPs) it's worth analysing if it's feasible and, more > importantly: > --- is the party affected by the issue is the same party which is > supposed to follow the BCP? > --- are we talking about 'fix all hosts'? (when did we deal last > time with the scenario 'a machine re-authenticated via 802.1x > successfully, changed the VLAN but kept the old IPv6 prefix'? > 2) See if there is a way to mitigate at least part of the problem by > making the protocol more robust (isn't all DNA work is actually in the > same problem space?) >=20 >> IPv6 does nothing to help with this, well, assuming a network hiding = behind NAT, it makes it harder. >> Apart from "does not work", what more can the IETF say or do here? >=20 > Try to make the Internet work better, maybe? :) >=20 >>> On 24 Oct 2019, at 12:43, Mark Smith wrote: >>>=20 >>>=20 >>>=20 >>> On Thu, 24 Oct 2019, 20:59 Trevor Warwick, = wrote: >>>=20 >>> On Thu, 24 Oct 2019 at 09:18, Mark Smith = wrote: >>>=20 >>>=20 >>> I thought about this in the exact context of the scenario of this = draft. Although the design of the broadband deployment I worked on = always planned to give out stable prefixes, I worked through this = scenario and realised that so many complex issues disappear if you = provide stable prefixes. >>>=20 >>> Fundamentally, if an ISP is selling an always on link to the same = location, then the addressing should be as permanent as the link = delivery location is. >>>=20 >>>=20 >>> If you're an ISP today, and using DHCPv6-PD to hand out IPv6 = prefixes, what are the possible scenarios if you don't try hard to keep = the prefixes stable? >>>=20 >>> Why don't you want to try hard? Not trying hard gives customers a = bad experience. They're paying you to try hard to give them the best = suitable service you can give them. >>>=20 >>>=20 >>> - You could be running a closed environment where all customers are = forced to use your CPE, in which case you can make sure that your CPE = has various hacks added to try to cope with prefix instability and = avoid customer hosts experiencing connectivity issues when prefixes = change. Maybe you can make this work well enough, and advanced customers = who don't want to use your CPE are just out of luck. >>>=20 >>> - If you're in an environment where customers can chose their own = CPE, then it seems almost guaranteed that there will be connectivity = problems when the prefix changes, because many CPE implementations don't = handle this situation at all. So you're then relying on hosts falling = back seamlessly to IPv4, in order to continue to have connectivity. In = which case, I'd wonder why you're bothering to provide an IPv6 service = in the first place. >>>=20 >>> See what I said about selling an always on service to a fixed = location, and the addressing having the same amount of stability as the = service and link itself. >>>=20 >>> The reason this problem really exists is that ISPs have = fundamentally continued to treat residential, always on broadband = customers although they were still dial up customers. Nothing has = changed - per BRAS (NAS) IP address pools, pool route aggregation at the = router, customer gets a single IPv4 address when they attach, that can = change each time they attach. PPPoE is making Ethernet connectivity = resemble dial up connectivity. >>>=20 >>> Now this dial up model is trying to be applied to semi-permanent = IPv6 services, where it's even less applicable now that customers get = their own routed address space on a semi-permanent link. >>>=20 >>> Treat all customers as routed subnet SOHO customers, so they get the = same prefix regardless of which BRAS they attach to. Move the route = aggregation boundary to a higher level to e.g. a cluster of BRASes, or a = region. >>>=20 >>> Use an IPv6 address provisioning model that suites and matches the = service they're paying for, not a nearly 30 year old dial up model. >>>=20 >>> If your customers can BYO their CPE, then stable prefixes are the = only choice. >>>=20 >>> See slide 6. >>>=20 >>> Residential IPv6 CPE - What Not to Do and Other Observations >>> = https://www.slideshare.net/mobile/markzzzsmith/residential-ipv6-cpe-what-n= ot-to-do-and-other-observations >>>=20 >>>=20 >>>=20 >>>=20 >>> I do think this is an important problem that needs to be solved, for = this context and the others mentioned in the draft. >>>=20 >>>=20 >>> _______________________________________________ >>> v6ops mailing list >>> v6ops@ietf.org >>> https://www.ietf.org/mailman/listinfo/v6ops >>> _______________________________________________ >>> v6ops mailing list >>> v6ops@ietf.org >>> https://www.ietf.org/mailman/listinfo/v6ops >>=20 >> _______________________________________________ >> v6ops mailing list >> v6ops@ietf.org >> https://www.ietf.org/mailman/listinfo/v6ops >=20 >=20 >=20 > --=20 > SY, Jen Linkova aka Furry From nobody Mon Oct 28 15:53:39 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 231A612006B for ; Mon, 28 Oct 2019 15:53:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T9myczZDJP3x for ; Mon, 28 Oct 2019 15:53:35 -0700 (PDT) Received: from mail-io1-xd2d.google.com (mail-io1-xd2d.google.com [IPv6:2607:f8b0:4864:20::d2d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E064120033 for ; Mon, 28 Oct 2019 15:53:35 -0700 (PDT) Received: by mail-io1-xd2d.google.com with SMTP id k1so3639501iom.9 for ; Mon, 28 Oct 2019 15:53:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=OON8ZZ76sN7cRoNOgivpCgVVZ/VbPu2m3b6lpUgelt4=; b=mKkX1mwxFvh4GvWGKLdpjunIxTAnWlrC15MIz3KYkScKWRVtl+E9PEdkj30ibkXfSB QH7iMAsaHDKJ/7Hw4WJi2BtH1Ij7E98zThZavstxBtxFPRmAPG6tXA4Jw1RMeSEPBMbw aVM0fycO7xxvTsQMGwCDRelyx27cW/v1K4QTHK8RVt4KZl01Fm8MEXOhLteFD9w45Kdu IrZ8ZPQ8TBJBAAkDa5zuBaxj3BbzusOtypZAkyuWGUQHpBezS2MJGzJ+PuyfUHRD8jDM 9jg/fCyTasnHcyxk36iuY7bOLSRL9s7MA6y3IzrbJ70OMAZ2tOcMQQ99LlCqxXOrwjJs Me8g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=OON8ZZ76sN7cRoNOgivpCgVVZ/VbPu2m3b6lpUgelt4=; b=TewhKzJ46F3MWYYysK0/2rjYnL7t2Yrg5LkwBYdnqMQDR2GtPuLKCFQEUdALhe+3L5 pksU4+pw+3UHAHJXaiABhxW3KmJ/CfGcFm2ejRrCuMkaGvrTuJS+o0iNQQ1xFqBlH5oj ewDWeKQtsW2culBmwPnTdUFAsENgjJ6Ro5wYogHFMLjWM0qVBRSiAokpXCw6tyYSwiMX NrysE8ZfbsS/vBupykEKoe+oJGyzR8N2Zr7H11o+CUk5K1ReLeIDbOOsstEfRgQR+NHO QQLrgHIBzjCCWP1EmAm0BUfPOT+eM8GhcCbcWxCDf02wBkQlC2Q0KK/jdEDBOuH1rGPd b3Ew== X-Gm-Message-State: APjAAAXJG3RpCY9nEGC5VHx3XMEVH8dxsjqPiFyGCDm/MOc1myYMzamf EiY4+X55E2EFZQPEQ8opL0vo5JagDX+m5yO/JRnW X-Google-Smtp-Source: APXvYqz9nt9WdqclGNJWtpdDiEALNs5AwQ24zw+Eq8rzFwecCi7GQr4KT+L2l6sLmNh/OaMbBGu36QHhcwpFIfV50Es= X-Received: by 2002:a5d:9dcf:: with SMTP id 15mr428914ioo.83.1572303214626; Mon, 28 Oct 2019 15:53:34 -0700 (PDT) MIME-Version: 1.0 References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> In-Reply-To: From: Scott Morizot Date: Mon, 28 Oct 2019 17:53:23 -0500 Message-ID: To: Simon Hobson Cc: IPv6 Operations Content-Type: multipart/alternative; boundary="000000000000964ef30596005ef7" Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 22:53:37 -0000 --000000000000964ef30596005ef7 Content-Type: text/plain; charset="UTF-8" On Mon, Oct 28, 2019, 16:11 Simon Hobson wrote: > Could an alternative explanation be along the lines of : > User turns on DHCPv6 server -> CPE configures it's RA service to label the > network as managed > End user device receives RA and finds the network is managed -> it turns > off SLAAC > As the EU device has disabled SLAAC and doesn't support DHCPv6, it now > loses IPv6 connectivity > No. Managed and autoconfig are separate and independent parts of the RA. We turn the former on and the latter off on most subnets at work, but I definitely know from experience that if you turn both on operating systems that support both will usually happily configure *both* a DHCPv6 *and* a SLAAC address. > --000000000000964ef30596005ef7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

On Mon, Oct 28, 2019, 16:11 Simon Hobson <linux@thehobsons.co.uk> wrote:
Could an alternative explanation be along the lines of :
User turns on DHCPv6 server -> CPE configures it's RA service to lab= el the network as managed
End user device receives RA and finds the network is managed -> it turns= off SLAAC
As the EU device has disabled SLAAC and doesn't support DHCPv6, it now = loses IPv6 connectivity

<= /div>
No. Managed and autoconfig are separate and independ= ent parts of the RA. We turn the former on and the latter off on most subne= ts at work, but I definitely know from experience that if you turn both on = operating systems that support both will usually happily configure *both* a= DHCPv6 *and* a SLAAC address.
--000000000000964ef30596005ef7-- From nobody Mon Oct 28 15:59:43 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 53B3C12008B for ; Mon, 28 Oct 2019 15:59:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mv_hT5E_9jiw for ; Mon, 28 Oct 2019 15:59:39 -0700 (PDT) Received: from mail-pg1-x533.google.com (mail-pg1-x533.google.com [IPv6:2607:f8b0:4864:20::533]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7409B12008A for ; Mon, 28 Oct 2019 15:59:39 -0700 (PDT) Received: by mail-pg1-x533.google.com with SMTP id l24so8013902pgh.10 for ; Mon, 28 Oct 2019 15:59:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=content-transfer-encoding:from:mime-version:subject:date:references :to:message-id; bh=ypwFaNd07yCw5pzX9DEymnr5oi/8iMWW8LzTLBG/zak=; b=C/P7WTizCvBUsWw5BJR6qNiuP1/JmqZcxPwelvoC0EU11STugMb6cOzaq2w01vvKLX 0oci5rGI+r/hnGplAh/sDvRNRsY1iWHhs8NIuWaiIf7qgmFVETz6P5uvCZYf8ar6nXQa tIgtBsNwgVojNBkeLyNxDhHqKqsfNDMD/NDUBC7sTJ865ksqT0dvRuDunV0gJzE7h55G 2A/EQfaIXN/hXas7kNZGgrApX8j64a9BWOlv04Fxgz9odtk9Ij9CjEYQvf2cgCxBnR/+ Jh2+OyU9vB8kMnKZhq1tRiJlpJXlhpPHWhIJfS9y0NKwLLi8G/OzCOOp8laKkEIMT6qJ j8Pg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:references:to:message-id; bh=ypwFaNd07yCw5pzX9DEymnr5oi/8iMWW8LzTLBG/zak=; b=qo4/TXpc+GrgUGzTrsjCjoJRKtWEVOQy7fDd4B62voFSbuhFLn2bgj2Pjd1Z2sQcYg DfDpG1g7yj3+0zVNh4NNkfat7YgArKdlQH1DUJ6DWjpNNZ8yxP3IX8+ZMy37j7vCGmqn voI/cqmpzCZz5BYzBpymVe/LudBaZd+jUmN8lcg6qnaWGSh6N9RYRJz2qdCDfkUkgxcT PBSun7F37olDD+FE3hNCyn1J8ZKEOEvYLorM3cqSUFwU/r/n3MYfGgI2jyb29rMHjUl6 tXreETS2/0Ndx+UcgoTRTExw6lRGCMNak/vrGg3ZRdGOz3SKKqQCViSZh0FnUnc6sZyD 2eMw== X-Gm-Message-State: APjAAAXvFid7vle88do4hp5CUegD3GNcCBEouFRIypXGLrmnYowWGdbV 1SpDsCfQy3PmClO2JzLfZdM= X-Google-Smtp-Source: APXvYqxxIwMCDXOjQhFQRQDdS/qPlXhDjfY3QZnHJZCeiTIiMZuV3QbfOfcTT8t4xou4hr2osA75tQ== X-Received: by 2002:aa7:80c6:: with SMTP id a6mr22910003pfn.107.1572303578992; Mon, 28 Oct 2019 15:59:38 -0700 (PDT) Received: from [192.168.0.17] (ip68-111-209-110.sd.sd.cox.net. [68.111.209.110]) by smtp.gmail.com with ESMTPSA id c8sm506625pjo.1.2019.10.28.15.59.38 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 28 Oct 2019 15:59:38 -0700 (PDT) Content-Type: multipart/alternative; boundary=Apple-Mail-E4870B4C-822F-40F6-98B0-9058D3455A3D Content-Transfer-Encoding: 7bit From: Fred Baker Mime-Version: 1.0 (1.0) Date: Mon, 28 Oct 2019 15:59:36 -0700 References: <157230031569.16075.10012054407774029822.idtracker@ietfa.amsl.com> To: v6ops list Message-Id: <3CA6FE37-CF11-4801-9631-D4FCE47E0654@gmail.com> X-Mailer: iPhone Mail (17B5084a) Archived-At: Subject: [v6ops] Fwd: [106all] IETF 106 Standard Registration and Internet Draft Deadline Approaching X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 22:59:41 -0000 --Apple-Mail-E4870B4C-822F-40F6-98B0-9058D3455A3D Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable > Date: October 28, 2019 at 3:06:00 PM PDT > To: IETF Announcement List > Cc: recentattendees@ietf.org, ietf@ietf.org, 106all@ietf.org > Subject: [106all] IETF 106 Standard Registration and Internet Draft Deadli= ne Approaching > Reply-To: agenda@ietf.org >=20 > =EF=BB=BFIETF 106 > Singapore > November 16-22, 2019 > Hosted By: Nokia >=20 > Standard Registration Deadline >=20 > REMINDER: The standard deadline for registration is Monday, November= 4th. > Be sure to register and pay before the deadline passes! > Register online at: https://ietf.org/how/meetings/register/ >=20 > NOTE: If you have started the registration process but not completed= > payment, your registration record will be deleted at UTC 23:59 on > Monday, November 4th. After November 4th at UTC 23:59 you will be re= quired to > re-enter your data and the registration fee will be $1,000 USD. > =20 > Internet Draft Deadline: >=20 > Internet Draft submission cut-off (for all drafts, including -00) > is Monday, November 4th by UTC 23:59. Please feel free to > upload drafts using the upload submissions tool found below: > https://datatracker.ietf.org/submit/ >=20 > If you have any questions or need assistance, please do not hesitate to=20= > contact: ietf-registrar@ietf.org >=20 > --=20 > 106all mailing list > 106all@ietf.org > https://www.ietf.org/mailman/listinfo/106all --Apple-Mail-E4870B4C-822F-40F6-98B0-9058D3455A3D Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Date: October 28, 2019 at 3:06:00 PM PDT
To: IETF Annou= ncement List <ietf-announce@ietf.org>
Cc: recentattendees@ie= tf.org, ietf@ietf.org, 106all@ietf.org
Subject: [106all] IETF 1= 06 Standard Registration and Internet Draft Deadline Approaching
R= eply-To: agenda@ietf.org

=EF=BB=BFIETF 106
Singapore
November 16-22, 2019
Hosted By: Nokia
=
Standard Registration Deadline

      REMINDER: The standard deadl= ine for registration is Monday, November 4th.
  &= nbsp;   Be sure to register and pay before the deadline passe= s!
      Register online at: h= ttps://ietf.org/how/meetings/register/

&nb= sp;     NOTE: If you have started the registration p= rocess but not completed
     &nbs= p;payment, your registration record will be deleted at UTC 23:59 on       Monday, November 4th. After Nov= ember 4th at UTC 23:59 you will be required to
  =     re-enter your data and the registration fee will be $= 1,000 USD.
   
Internet Draft Dea= dline:

    Internet Draft submis= sion cut-off (for all drafts, including -00)
    i= s Monday, November 4th by UTC 23:59. Please feel free to
&n= bsp;   upload drafts using the upload submissions tool found below:
    https://datatracker.ietf.org/submit/
<= span>
If you have any questions or need assistance, please d= o not hesitate to
contact: ietf-registrar@ietf.org
--
106all mailing list
<= span>106all@ietf.org
https://www.ietf.org/mailman/listinfo/1= 06all
= --Apple-Mail-E4870B4C-822F-40F6-98B0-9058D3455A3D-- From nobody Mon Oct 28 17:18:41 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83014120047 for ; Mon, 28 Oct 2019 17:18:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YimAWBjZqbMx for ; Mon, 28 Oct 2019 17:18:37 -0700 (PDT) Received: from mail-qt1-x836.google.com (mail-qt1-x836.google.com [IPv6:2607:f8b0:4864:20::836]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5655312003E for ; Mon, 28 Oct 2019 17:18:37 -0700 (PDT) Received: by mail-qt1-x836.google.com with SMTP id z17so10859315qts.9 for ; Mon, 28 Oct 2019 17:18:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=NdWI9lHw3JRL8THk0khg1rGC0mGkx7SUR/Gqzvat1JQ=; b=ThVUzgnHbN66pY+9vCIPY8rwhlr8HA6Bo9KKqpw9n/JD9NZDCy+kBqXRTwjGga4OoP HhnR+Wc27C0aVglTht+9LBQk4+9Z28iVKaQZTy1JTkxf4Oc8fuAhOC3wSr0p9TByyWaF VGXynAL4ckdHAnAvzwqO6Kz1JLYoFgyPH3YjBCWTXhIX3DLE1vAtx6CfgAS8KztljYVd WJFMFQd+LTyo2LpBP8tPBax6xD3zxmauueq1d/nmRnNBLh/2UAHncgAP/8oM29h2h1X5 4o7/SQbMvrXoJqL5FOb8Qh0Gsukc53hSqkhHRdBaINJlqnHuh9nuGuznMRM82w26Tauq Ig9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=NdWI9lHw3JRL8THk0khg1rGC0mGkx7SUR/Gqzvat1JQ=; b=iWWyUA9ITHMN7rZ8b5X3RNF3HaLFFpd4V34anuZLpRfOEMGFZZ4hx3BGKvKIlMmCUJ JITW2hFImuzMCcrPdcya21dnj27bqX9Uwka3QfIRPOEf1PXp+8JkjQ9r+ptYmjJPz1da +F7sRLuNjhYhTUEuDVd5YOv8rnMu8+FezpJJBIaTr8+Q2iqVuhQzwMkOcNdh28xT5EGx lePfspkx/2xr8dg6Knvt+PhTsNvHUz5mDQqss5Q4EUq7Nbkioa+c/nui8KQ0Ckaeq6A7 MtS/nEkOQpChZzKZASm0Y7Nc93DRdzU69yxUqOIrmEvgxPcLrNkPttnPwUcepHgzOkPP 5Qrg== X-Gm-Message-State: APjAAAVzuNnc1lSXusF0bNrlyZ+oFF30Om+OPEmanetNu337T8D4ax8q vHdBnd7EUxsrZI1drkuAELj6MxSoDz4ocYD9oCA= X-Google-Smtp-Source: APXvYqyorFprvhGmf9fY+OwjQbRY4RRCiCiQ7L7lwFhG2RE4BpuNmxn9uj2kWo784E+cKGvxtphpBwIqsKpyVPMIrwU= X-Received: by 2002:ac8:293a:: with SMTP id y55mr1486039qty.118.1572308316295; Mon, 28 Oct 2019 17:18:36 -0700 (PDT) MIME-Version: 1.0 References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> In-Reply-To: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> From: Jen Linkova Date: Tue, 29 Oct 2019 11:18:24 +1100 Message-ID: To: Alexandre Petrescu Cc: "v6ops@ietf.org" Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 00:18:38 -0000 On Mon, Oct 28, 2019 at 8:47 PM Alexandre Petrescu wrote: > Why the presence of a DHCPv6 server breaks Android computers? > > On my CPE at home, of ISP Free, I noticed recently this message: 'Watch out: if you activate the DHCPv6 server, certain Android computers are at risk of loosing their IPv6 connection'. > > Why and how the presence of a DHCPv6 server on the CPE breaks Android computers? The presence of DHCPv6 should not break Android devices (have not seen it before). Try it and see what happens? The only theory I have is that by 'activating DHCPv6' your CPE actually means 'disabling SLAAC'. Then yes, it would break things. > I would like to try this DHCPv6 server to connect my Windows 2-in-1 computer to work at home, Get the Creator update ;) Then it would work with RDNSS ;) -- SY, Jen Linkova aka Furry From nobody Mon Oct 28 18:22:41 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C23111200F1 for ; Mon, 28 Oct 2019 18:22:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L0fWcmsii354 for ; Mon, 28 Oct 2019 18:22:39 -0700 (PDT) Received: from mail-pf1-x42a.google.com (mail-pf1-x42a.google.com [IPv6:2607:f8b0:4864:20::42a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FBD8120033 for ; Mon, 28 Oct 2019 18:22:39 -0700 (PDT) Received: by mail-pf1-x42a.google.com with SMTP id r4so2606762pfl.7 for ; Mon, 28 Oct 2019 18:22:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=NAismXd5dIL1vjnbUam66PecfsBFT6ltxLiO7UkxTbc=; b=WCbNWy98w74rdAMv1rRQEP4ktYmnffGyON8TbODTfN1HcqVTV5NX+Rb9sggiQljF9e 9axS/B/TcSLnFOEkait2p+xOVatDV6n3fic22H2Wb1so8S15HqiON5xG8VqclEpqQ85f czb1Yn+gnCgotlGnZCABuccjdkyXjmx3AtzQlr7QZJEFTdts5Ujp03iL6A5mlgRL651y UAulcpqFR3D0b9ovJzdizVpTIhR2KoGwpYLh6cDKuY36wFkS7ti5zIdIX5/6TgKyniX+ e4YkmMK/aXghQT+H2QnUoj4PEiqdkX15eFfr1xh03964LRln37OsuBk2flmMyL+i/lMu DNbA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=NAismXd5dIL1vjnbUam66PecfsBFT6ltxLiO7UkxTbc=; b=Z3BZ8WSbE4Zad1lfTBEVCfmastE3BZrxoKlAKnJRXzBSV6HLqoQ8fBOjYDvT3VVYsU 9vp0kWOGonbVE/oQQ5SVlH4EsvfFce/UcZSMr0MyLmrRAEgtMoON887j0prtoCBMRhm+ ZtuFdqbV6rBkIz0mIUxjKMyIccQtMBT4cbu5mqxPFenF3JyHgIFa4XjK1rZ7fHg9buhN tZvPDWCgAO0u5p5EGOD0SsBi8A7aKZEpBeIaT1XJ0ek89Z3MLqTrqQB07A7/jZpdEFAs zFfC7pFDSAauBPJoK6Y6A05TN0+h/mlIM36diW6CF1aGu+SDu4kpHgAM5jKKDViq7iiZ Ff6A== X-Gm-Message-State: APjAAAUTx/vZSICCH+jpxii64mq/aqlUrTVI0WxhyA2ID3iiqdWtVDLi +Ca7fw4d1HbI8aJc1jEeZWKQz6DH7G8= X-Google-Smtp-Source: APXvYqz+CcaAr4fgM23+ER89ZNgwIwIgUArcH/1sjTotQWVZN7IkE/YxPsp69hQarlZhVXs8gaukJw== X-Received: by 2002:a17:90a:b304:: with SMTP id d4mr2896169pjr.27.1572312158553; Mon, 28 Oct 2019 18:22:38 -0700 (PDT) Received: from [130.216.38.69] (sc-cs-365005.cs.auckland.ac.nz. [130.216.38.69]) by smtp.gmail.com with ESMTPSA id z23sm13376490pgu.16.2019.10.28.18.22.36 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 28 Oct 2019 18:22:37 -0700 (PDT) To: v6ops@ietf.org References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> From: Brian E Carpenter Message-ID: <678dda9d-03f6-1dcc-4a4e-e3889435e656@gmail.com> Date: Tue, 29 Oct 2019 14:22:35 +1300 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 01:22:41 -0000 On 29-Oct-19 10:57, Jen Linkova wrote: > On Thu, Oct 24, 2019 at 9:47 PM Ole Troan wrote: >> Right. Instant/flash renumbering is not supported in IP networks. > > Oh. Surprise. After I've been doing it all the time....;) > > Actually it would be helpful to define requirements/expectations. I read it as: > R1: [MUST HAVE] after the renumbering host is able to open new connections How long after? Milliseconds, seconds, or minutes? It makes a lot of difference to the solution. > R2: [NICE TO HAVE] old connections survive the renumbering. I believe that when the operators refused to consider SHIM6 ten years ago, they were telling us that they really, truly do not care about that. So this becomes an application layer robustness issue. Brian From nobody Mon Oct 28 19:53:55 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D82A51207FD for ; Mon, 28 Oct 2019 19:53:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.999 X-Spam-Level: X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 76MAWyevYARr for ; Mon, 28 Oct 2019 19:53:49 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id E3374120047 for ; Mon, 28 Oct 2019 19:53:45 -0700 (PDT) Received: from [172.20.0.85] (rrcs-97-79-186-2.sw.biz.rr.com [97.79.186.2]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9T2rcrj027382 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 28 Oct 2019 19:53:44 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9T2rcrj027382 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572317624; bh=w2LC7jHmlYhDbMr9UWsxPr7mVjpe8FhxWKhelX2KhtM=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=30FfKX77k4/Dv9eumI0R9ZwpHTihvtZMNdKtY42bhujbJY00jZEkrrznUFiJB6nIq 8tv1ZQ9RdrhFhDeZybk657jJ8LgToMAtMfFTTzBi7WkYxKsB6UwUa3Mwq1kb645jI3 j9auKpAAIu/yaT+9NJ0vraQDcNrgE0AJKbk+svlY= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Owen DeLong In-Reply-To: Date: Mon, 28 Oct 2019 19:53:37 -0700 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <413D25D1-5969-4677-B524-8B59850313F9@delong.com> To: Philip Homburg X-Mailer: Apple Mail (2.3445.104.8) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Mon, 28 Oct 2019 19:53:44 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 02:53:52 -0000 > On Oct 27, 2019, at 1:11 PM, Philip Homburg = wrote: >=20 >> How does the CPE identify a stale prefix if it hasnt written its >> previous prefixes to persistent storage? >=20 > Writing prefixes to persistent storage is a key element in letting the > CPE deal with this issue. >=20 That=E2=80=99s what I thought, but someone called it =E2=80=9Cincorrect = behavior=E2=80=9D, so I asked the question. Owen From nobody Mon Oct 28 19:58:31 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 015FD120046 for ; Mon, 28 Oct 2019 19:58:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.999 X-Spam-Level: X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mMWpOd4kK45z for ; Mon, 28 Oct 2019 19:58:29 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 99B3512008D for ; Mon, 28 Oct 2019 19:58:29 -0700 (PDT) Received: from [172.20.0.85] (rrcs-97-79-186-2.sw.biz.rr.com [97.79.186.2]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9T2wQMW028968 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 28 Oct 2019 19:58:27 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9T2wQMW028968 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572317909; bh=IoyhnknFiFkNM6tW/WK/9diygnK5jlzVCXz7YHc8Dcs=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=HqWgqIhDNnh2xXcS+iaQyNHkRlPcoV6iQRZdJcpGpaUY7IhuRoUnMNeZ3+DBxXIRb tKeJRXXjqdhtPnMo8wZvkw/9U2r/dRBq0Fn2Fn+Ti+RIINLzWZqH/zpiqE6v3Thrhq S0CNZ1S8oC+1MXBVhcedSXt55x0dbt1lJXXjlG2M= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Owen DeLong In-Reply-To: Date: Mon, 28 Oct 2019 19:58:26 -0700 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <670EDAE2-D472-45BB-9888-27D0D03BEEB9@delong.com> References: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> To: Philip Homburg X-Mailer: Apple Mail (2.3445.104.8) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Mon, 28 Oct 2019 19:58:29 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 02:58:31 -0000 > On Oct 27, 2019, at 1:02 PM, Philip Homburg = wrote: >=20 >> I think you missed my point. You can't do flash renumbering by >> advertising a prefix with a valid lifetime of zero, because that >> will be ignored by hosts. If it were not ignored by hosts, it >> would be a very effective DoS vector. And so if you want to >> be able to flash deprecate a route, you need some way to validate >> that the deprecation is coming from the same source as the route. >> Hence my suggested "limited SEND". >=20 > Today, you can deprecate a prefix by sending an RA with the preferred = lifetime > set to zero. That is enough to get IPv6 at the same level as IPv4. No, this only deprecates it for new sessions. Existing sessions will = still need to time out before they stop trying to use the old prefix. In an ideal world, a = mechanism to signal the need to immediately error out such existing sessions is = preferable. > Without RA-guard or SEND there are already quite a lot of = opportunities to > perform both a denial of service attack and a man in the middle attack > on a local LAN. This is equally true in both IPv4 and IPv6. > I'm not sure if the protection against advertising a zero valid = lifetime > is actually worth it. Any network that worries about local malicious=20= > hosts probably already uses RA-guard (or possibly SEND).=20 One would certainly hope so. > In any case, it doesn't matter to the CPE whether the host will accept > zero valid time or not. The CPE can just send them and then a separate > document can either instruct hosts to accept all RAs with zero valid = time > or require some for of SEND. Agreed. > The key thing is that without any protocol modifications we can get = IPv6 > at the same level as IPv4.=20 >=20 > If we make more extensive modifications to the host, then there is no=20= > reason to rely on RA timers and the host could handle unmodified CPEs. I don=E2=80=99t think such a solution is as likely to succeed or be = widely deployed in the near term. Updating CPEs is generally a much more dependable and faster process = than updating all hosts. Owen From nobody Mon Oct 28 20:00:44 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F0B212008D for ; Mon, 28 Oct 2019 20:00:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.998 X-Spam-Level: X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ti6jiR4xZQmp for ; Mon, 28 Oct 2019 20:00:40 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 64CDA120047 for ; Mon, 28 Oct 2019 20:00:40 -0700 (PDT) Received: from [172.20.0.85] (rrcs-97-79-186-2.sw.biz.rr.com [97.79.186.2]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9T30I0I029734 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 28 Oct 2019 20:00:21 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9T30I0I029734 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572318022; bh=Dhv68lDdWMX0sO4XYXgKHrE/Xb+HLq89fjoYAuEtqP8=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=A8/KE/rdqxxcdf3Dgy5BVlQPfSztPDqcEcx3KQ76i/1XdeZWXzGYQn8mhKerjVWCw cGaGBHdwBY5sXZcBWu9t8QQ74G8V77jFaRCIiYnbg2LaFnoq6JsfsynGm+Ugl8aj4O f7WxJecWZAx6yk06PO5nWLe9QiICB7eJWOB4e5tU= From: Owen DeLong Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_D6459AC7-F240-4452-844E-C84B49E93283" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Date: Mon, 28 Oct 2019 20:00:17 -0700 In-Reply-To: Cc: Philip Homburg , v6ops@ietf.org To: Ted Lemon References: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <3E4C671B-A03E-4A3F-A68B-5849BDCC6267@delong.com> X-Mailer: Apple Mail (2.3445.104.8) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Mon, 28 Oct 2019 20:00:22 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 03:00:42 -0000 --Apple-Mail=_D6459AC7-F240-4452-844E-C84B49E93283 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 27, 2019, at 12:46 PM, Ted Lemon wrote: >=20 > On Oct 27, 2019, at 3:35 PM, Owen DeLong > wrote: >> In the vast majority of situations where I would expect hostile hosts = to be likely to be on LAN, I don=E2=80=99t think I=E2=80=99d be using >> SLAAC for address assignment in the first place. Most likely, I=E2=80=99= d want stateful DHCP in such instances. >=20 > Hostile hosts happen when you get hit with malware, e.g. ransomware. = Being resilient in situations like this is important, even if they = aren=E2=80=99t all that common, because the cost of non-resilience is so = high. >=20 There=E2=80=99s a difference between networks where hostile hosts can = occur in extreme circumstances (what you describe) and networks where = hostile hosts are expected as a normal occurrence (what I was intending = to describe). The type of attack and type of resilience required vary between these = two situations as well. Owen --Apple-Mail=_D6459AC7-F240-4452-844E-C84B49E93283 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Oct 27, 2019, at 12:46 PM, Ted Lemon <mellon@fugue.com> = wrote:

On Oct 27, 2019, at = 3:35 PM, Owen DeLong <owen@delong.com> wrote:
In the vast majority of situations = where I would expect hostile hosts to be likely to be on LAN, I don=E2=80=99= t think I=E2=80=99d be using
SLAAC for address assignment in the = first place. Most likely, I=E2=80=99d want stateful DHCP in such = instances.

Hostile hosts happen when you get hit with malware, e.g. = ransomware.   Being resilient in situations like this is important, = even if they aren=E2=80=99t all that common, because the cost of = non-resilience is so high.


There=E2=80=99s a difference between networks where hostile = hosts can occur in extreme circumstances (what you describe) and = networks where hostile hosts are expected as a normal occurrence (what I = was intending to describe).

The type of attack and type of resilience required vary = between these two situations as well.

Owen

= --Apple-Mail=_D6459AC7-F240-4452-844E-C84B49E93283-- From nobody Tue Oct 29 02:43:55 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C43112010F for ; Tue, 29 Oct 2019 02:43:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u1uC-BdmYD2N for ; Tue, 29 Oct 2019 02:43:51 -0700 (PDT) Received: from mail-qk1-x72a.google.com (mail-qk1-x72a.google.com [IPv6:2607:f8b0:4864:20::72a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49D641200B8 for ; Tue, 29 Oct 2019 02:43:51 -0700 (PDT) Received: by mail-qk1-x72a.google.com with SMTP id 15so11549734qkh.6 for ; Tue, 29 Oct 2019 02:43:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=nNr+i4ftkB77hIT9LofLK/cu2Cm5pLHH+2YcDQKCrc0=; b=B3ts0tZbyZhuYFTBaB1C0WTAKdhQpHjJCNJ+3hw7pRynbskht8926ZKt5s+KeqAQf0 5B1DoN0q445556Nv3aECB2lzOCoPrzGejm+Nh5o4F53yXJ3npf/9JQBiAF9e17Q6jhQw fpBvvVHVR9R7s8hu1hlEFH4/BrLx224iQQrAhX5gnfcOXTYc10zjFGPeAfmZ/a74sFsQ JL+anvEewawXpKhQ8G4xqHRlx2yWWNnzI8MmMcZjgfIpT4j0kFU2WykVEnIY7SqEFBwB n/NjCL2kLID4pPKyX4ewnDJKMtvT1YFzL4Y3Wh6wZlB9afc5W0KHO0xFuL+HtWfQM7HP xkXg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=nNr+i4ftkB77hIT9LofLK/cu2Cm5pLHH+2YcDQKCrc0=; b=reeZneLPnKs5Jh0i3SMZfw5WdViTcalTzOuVkzm/s1eKFnqebquh369zj07M+sk2lZ zMzdqF2UQe4MiRjSHckH7Z6qiTl35n4iRMGwfuW8bZsEFh6D9QtZBf2s2Az1Asq8KyST RYIi31cCBqxgxFMnVHOF9bDqBJL/03Hjf5kIQlRVjifH3Ulz8eXD1nCX71+pWvcCyCQA JD0nKaKEK+zGCz0gf0G3blckpS+kpM5bDukfy9kbBZpZ44hu0SUeBVuGqNZAqf2AbUt+ IzzMzGM2EmjPiHjg2u+XEu6Rn34Nu+hLGozoDEs/ZLlRtKDRPjXkcchQUUE9dvY6VDld Y1Wg== X-Gm-Message-State: APjAAAXgrT2D8hrDomz43R85vHp4IcAuI8A1OzkQftFNdVlKar+aNNPR 78Isj+xNIMliswHWqdUkwqf3L0KI9ALXYg== X-Google-Smtp-Source: APXvYqzexSViujWlSVfaruPupbpp7BohRkG8uz66wIWW0mfe73Cqe4nxd21w/n6BTYMPQqpQdFeJUw== X-Received: by 2002:a37:bf02:: with SMTP id p2mr20789652qkf.42.1572342229996; Tue, 29 Oct 2019 02:43:49 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:9be:fcfd:8f35:ceef? ([2601:18b:300:36ee:9be:fcfd:8f35:ceef]) by smtp.gmail.com with ESMTPSA id n56sm9933532qtb.73.2019.10.29.02.43.49 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 29 Oct 2019 02:43:49 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Ted Lemon Mime-Version: 1.0 (1.0) Date: Tue, 29 Oct 2019 05:43:48 -0400 Message-Id: References: Cc: Philip Homburg , v6ops@ietf.org In-Reply-To: To: Owen DeLong X-Mailer: iPad Mail (17A878) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 09:43:53 -0000 On Oct 28, 2019, at 11:00 PM, Owen DeLong wrote: >=20 > There=E2=80=99s a difference between networks where hostile hosts can occu= r in extreme circumstances (what you describe) and networks where hostile ho= sts are expected as a normal occurrence (what I was intending to describe). I=E2=80=99m not following your distinction. Bot infections can happen at a= ny time, on any network.= From nobody Tue Oct 29 03:37:17 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 879F8120099 for ; Tue, 29 Oct 2019 03:37:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.632 X-Spam-Level: X-Spam-Status: No, score=-2.632 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KJxdKhYAZIrX for ; Tue, 29 Oct 2019 03:37:15 -0700 (PDT) Received: from sainfoin-smtp-out.extra.cea.fr (sainfoin-smtp-out.extra.cea.fr [132.167.192.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1AA612002E for ; Tue, 29 Oct 2019 03:37:14 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9TAbBuN035971; Tue, 29 Oct 2019 11:37:11 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id B8DCB2027FF; Tue, 29 Oct 2019 11:37:11 +0100 (CET) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id ABF6C2038D1; Tue, 29 Oct 2019 11:37:11 +0100 (CET) Received: from [10.11.240.90] ([10.11.240.90]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9TAbBWN004630; Tue, 29 Oct 2019 11:37:11 +0100 To: Jen Linkova Cc: "v6ops@ietf.org" References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> From: Alexandre Petrescu Message-ID: Date: Tue, 29 Oct 2019 11:37:11 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 10:37:16 -0000 Le 29/10/2019 à 01:18, Jen Linkova a écrit : > On Mon, Oct 28, 2019 at 8:47 PM Alexandre Petrescu > wrote: >> Why the presence of a DHCPv6 server breaks Android computers? >> >> On my CPE at home, of ISP Free, I noticed recently this message: >> 'Watch out: if you activate the DHCPv6 server, certain Android >> computers are at risk of loosing their IPv6 connection'. >> >> Why and how the presence of a DHCPv6 server on the CPE breaks >> Android computers? > > The presence of DHCPv6 should not break Android devices (have not > seen it before). I may have not used the right word 'break'; a more conforming translation is 'loose their IPv6 connection'. While trying, that is what seem to happen: when turning on DHCPv6 server on the CPE the Android stops browsing ipv6.google.com. (it could browse when it was off). Remark, under same conditions, my Windows PC resists well this flipping of the DHCPv6 Server on CPE - it continues browsing ipv6.google.com after the flipping. > Try it and see what happens? Thanks, I did learn a few things while trying. > The only theory I have is that by 'activating DHCPv6' your CPE > actually means 'disabling SLAAC'. Then yes, it would break things. Well no. After activating DHCPv6 on CPE the CPE sent three RAs changing the Lifetime and flipping the M(anaged) and A(utonomous) flags. Packet dumps available upon request. >> I would like to try this DHCPv6 server to connect my Windows 2-in-1 >> computer to work at home, > > Get the Creator update ;) Then it would work with RDNSS ;) Well, I have Windows 10 latest version (not Creator), but it seems to work ok. The RDNSS option is present already in the RAs sent by the CPE. But I do not understand why would one suggest the use of RDNSS could solve this problem. Alex > From nobody Tue Oct 29 03:38:25 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E32912010C for ; Tue, 29 Oct 2019 03:38:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9WXi3g9QRg2i for ; Tue, 29 Oct 2019 03:38:22 -0700 (PDT) Received: from oxalide-smtp-out.extra.cea.fr (oxalide-smtp-out.extra.cea.fr [132.168.224.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69CC0120099 for ; Tue, 29 Oct 2019 03:38:22 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by oxalide-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9TAcK3I020839 for ; Tue, 29 Oct 2019 11:38:20 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 603862027FF for ; Tue, 29 Oct 2019 11:38:20 +0100 (CET) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 55E01200B4E for ; Tue, 29 Oct 2019 11:38:20 +0100 (CET) Received: from [10.11.240.90] ([10.11.240.90]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9TAcJok005429 for ; Tue, 29 Oct 2019 11:38:20 +0100 To: v6ops@ietf.org References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> From: Alexandre Petrescu Message-ID: Date: Tue, 29 Oct 2019 11:38:19 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 10:38:24 -0000 Le 28/10/2019 à 22:11, Simon Hobson a écrit : > Eric Vyncke (evyncke) wrote: > >> Most probably a bug in your Free CPE (that appears to be over-zealous) > > Could an alternative explanation be along the lines of : > User turns on DHCPv6 server -> CPE configures it's RA service to label the network as managed > End user device receives RA and finds the network is managed -> it turns off SLAAC > As the EU device has disabled SLAAC and doesn't support DHCPv6, it now loses IPv6 connectivity After trying, I think that is what happens. Alex > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > From nobody Tue Oct 29 03:39:44 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCB81120099 for ; Tue, 29 Oct 2019 03:39:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sKq16BswoDer for ; Tue, 29 Oct 2019 03:39:40 -0700 (PDT) Received: from cirse-smtp-out.extra.cea.fr (cirse-smtp-out.extra.cea.fr [132.167.192.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 789A612002E for ; Tue, 29 Oct 2019 03:39:40 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by cirse-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9TAdcdU025437 for ; Tue, 29 Oct 2019 11:39:38 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id D9E172027FF for ; Tue, 29 Oct 2019 11:39:38 +0100 (CET) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id CFB2D200B4E for ; Tue, 29 Oct 2019 11:39:38 +0100 (CET) Received: from [10.11.240.90] ([10.11.240.90]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9TAdc8u006266 for ; Tue, 29 Oct 2019 11:39:38 +0100 To: v6ops@ietf.org References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> From: Alexandre Petrescu Message-ID: Date: Tue, 29 Oct 2019 11:39:38 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 10:39:43 -0000 Le 28/10/2019 à 11:35, JORDI PALET MARTINEZ a écrit : > By the way, I’m not saying that it is correct to “disable” SLAAC if you > enable DHCPv6, but I’ve seen some “bad designed” products that do that … Well, depends what we call SLAAC. I agree with you some bad designed products do that. In this particular case I think the CPE sends the proper RAs with the right (to me) A, M and Lifetime flags such that someone using DHCPv6 can do it. Alex > > Regards, > > Jordi > > @jordipalet > > El 28/10/19 11:34, "v6ops en nombre de JORDI PALET MARTINEZ" > en nombre de > jordi.palet=40consulintel.es@dmarc.ietf.org > > escribió: > > It may be that if you enable DHCPv6, SLAAC is disabled, and then Android > will not work (as they don’t support DHCPv6)? So probably the “message” > is not correct … > > Regards, > > Jordi > > @jordipalet > > El 28/10/19 11:30, "v6ops en nombre de Eric Vyncke (evyncke)" > en nombre de > evyncke@cisco.com > escribió: > > Alex, > > Most probably a bug in your Free CPE (that appears to be over-zealous) > > -éric > > *From: *v6ops on behalf of Alexandre Petrescu > > *Date: *Monday, 28 October 2019 at 10:47 > *To: *"v6ops@ietf.org" > *Subject: *[v6ops] out-of-focus: why DHCPv6 breaks Android computers? > > This message is out of focus of current discussions. > > Why the presence of a DHCPv6 server breaks Android computers? > > On my CPE at home, of ISP Free, I noticed recently this message: 'Watch > out: if you activate the DHCPv6 server, certain Android computers are at > risk of loosing their IPv6 connection'. > > Why and how the presence of a DHCPv6 server on the CPE breaks Android > computers? > > I would like to try this DHCPv6 server to connect my Windows 2-in-1 > computer to work at home, but I dont want to break the other Android > tablet that shows the weather report. > > Alex > > cid:image001.png@01D58D82.F3472A90 > > _______________________________________________ v6ops mailing list > v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops > > > ********************************************** > IPv4 is over > Are you ready for the new Internet ? > http://www.theipv6company.com > The IPv6 Company > > This electronic message contains information which may be privileged or > confidential. The information is intended to be for the exclusive use of > the individual(s) named above and further non-explicilty authorized > disclosure, copying, distribution or use of the contents of this > information, even if partially, including attached files, is strictly > prohibited and will be considered a criminal offense. If you are not the > intended recipient be aware that any disclosure, copying, distribution > or use of the contents of this information, even if partially, including > attached files, is strictly prohibited, will be considered a criminal > offense, so you must reply to the original sender to inform about this > communication and delete it. > > _______________________________________________ v6ops mailing list > v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops > > > ********************************************** > IPv4 is over > Are you ready for the new Internet ? > http://www.theipv6company.com > The IPv6 Company > > This electronic message contains information which may be privileged or > confidential. The information is intended to be for the exclusive use of > the individual(s) named above and further non-explicilty authorized > disclosure, copying, distribution or use of the contents of this > information, even if partially, including attached files, is strictly > prohibited and will be considered a criminal offense. If you are not the > intended recipient be aware that any disclosure, copying, distribution > or use of the contents of this information, even if partially, including > attached files, is strictly prohibited, will be considered a criminal > offense, so you must reply to the original sender to inform about this > communication and delete it. > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > From nobody Tue Oct 29 03:51:45 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6113B120133 for ; Tue, 29 Oct 2019 03:51:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2ZuMEbi5ovgX for ; Tue, 29 Oct 2019 03:51:42 -0700 (PDT) Received: from oxalide-smtp-out.extra.cea.fr (oxalide-smtp-out.extra.cea.fr [132.168.224.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52DF8120099 for ; Tue, 29 Oct 2019 03:51:42 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by oxalide-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9TApaV9025466; Tue, 29 Oct 2019 11:51:37 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id CAA962038F6; Tue, 29 Oct 2019 11:51:36 +0100 (CET) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id BC770201966; Tue, 29 Oct 2019 11:51:36 +0100 (CET) Received: from [10.11.240.90] ([10.11.240.90]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9TApaK6013440; Tue, 29 Oct 2019 11:51:36 +0100 To: "Eric Vyncke (evyncke)" , "v6ops@ietf.org" References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> From: Alexandre Petrescu Message-ID: <6c2b2ab8-b7fe-3a15-7a92-ee5b8c4d5be8@gmail.com> Date: Tue, 29 Oct 2019 11:51:36 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: <3843CFD2-80EE-4DEF-AE59-ED9F2B271048@cisco.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 10:51:44 -0000 Le 28/10/2019 à 11:29, Eric Vyncke (evyncke) a écrit : > Alex, > > Most probably a bug in your Free CPE (that appears to be over-zealous) I could try to report this bug to Free or Android, if I were whose thinking were buggy. Or I could propose an RA flag for GUIs to accept Androids. Until then, I keep DHCPv6 Server off in the CPE :-( Alex > > -éric > > *From: *v6ops on behalf of Alexandre Petrescu > > *Date: *Monday, 28 October 2019 at 10:47 > *To: *"v6ops@ietf.org" > *Subject: *[v6ops] out-of-focus: why DHCPv6 breaks Android computers? > > This message is out of focus of current discussions. > > Why the presence of a DHCPv6 server breaks Android computers? > > On my CPE at home, of ISP Free, I noticed recently this message: 'Watch > out: if you activate the DHCPv6 server, certain Android computers are at > risk of loosing their IPv6 connection'. > > Why and how the presence of a DHCPv6 server on the CPE breaks Android > computers? > > I would like to try this DHCPv6 server to connect my Windows 2-in-1 > computer to work at home, but I dont want to break the other Android > tablet that shows the weather report. > > Alex > From nobody Tue Oct 29 04:22:19 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D40D120219 for ; Tue, 29 Oct 2019 04:22:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TpA1fSSPntvP for ; Tue, 29 Oct 2019 04:22:16 -0700 (PDT) Received: from mail-qt1-x82c.google.com (mail-qt1-x82c.google.com [IPv6:2607:f8b0:4864:20::82c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A60351201CE for ; Tue, 29 Oct 2019 04:22:16 -0700 (PDT) Received: by mail-qt1-x82c.google.com with SMTP id t26so9543312qtr.5 for ; Tue, 29 Oct 2019 04:22:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=b0DUm146W9OJdNaFf/3WeHOae6N3j85cuKadWhjQvxU=; b=Yw/5mmHKXtJuk09bnLve0nUIT/Hnic/x62zZSx9KOu06SIiIsctGt/ooEDoJMUqMTl oTnWU2pL1U2Ooxas4C4eJZ6LGDZpFhkbSEq1dYkAU23EGfE+soieW0VFYCk4k/0PodL0 ZLOKIqnSP3LnFN2vAvOmqgk8QRM02rrqfOhI14hrrQr4KthmXcTcZ6p5qKOTKMOGauEF 39Bc3pcXbAMg1TbDGfsvAM3xNowGPZTlV7joFGbRrpZ2dOI3Cfdy9IEXxNm5/gtRoGCe DGFoRYX6cKp917fFt2vqcJ/hqb0OqO2FPz3oxnxUyTGI07twatEcplg/WUnrqiBGbtoD DrfA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=b0DUm146W9OJdNaFf/3WeHOae6N3j85cuKadWhjQvxU=; b=qaPfjBwt9N4ybyjwHa5dIV7255ss4SLzXvnKi3Ktw2+Tj9anB4o3Y2abkGd7+cUORf Cvl7WDaAr8UAWTtZU9BXVmoTZhqGV6Nth384oMfnd6hBapBGlYnCJuxiDNztWclkcst1 0DmUBJjUW7tkX1/rxOef0P9rklab+RuspHGiXpvJQq2S4GoVBz+97naYhthqHp0xBahT EQSoDw6Q+aSpL7xWxmbhsZsprcwUzCCWhvSwmLj4vriRBHwnMbTIq1JwmaIrvcdg0Jie AIQBkIqjDR7Y4aTH8MhT2tlKb9GNdN7nCSpHDYV+jWBNtvIG9P7+0fxBadHrp/2EL4Bo ZyTg== X-Gm-Message-State: APjAAAUZejFVDDYwnbYBv5Mr/jcGwjyESAffSqyDxJkfe3o2Oo3ltM9A KCRlAg/eHCzJtFFvq/t+FZwhUg== X-Google-Smtp-Source: APXvYqzv6DyoEw2DjtCEecvJDPVVVg7O8Y9OMrutUEeBEU6G88jAtbmCYvIV854OYp03v/mpdffS3g== X-Received: by 2002:a05:6214:16a:: with SMTP id y10mr2965831qvs.15.1572348135749; Tue, 29 Oct 2019 04:22:15 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:505a:13c3:9370:5819? ([2601:18b:300:36ee:505a:13c3:9370:5819]) by smtp.gmail.com with ESMTPSA id v141sm9090260qka.59.2019.10.29.04.22.14 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 29 Oct 2019 04:22:15 -0700 (PDT) From: Ted Lemon Message-Id: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_79EFD310-B5AB-49FD-821D-F00654458AEC" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3600\)) Date: Tue, 29 Oct 2019 07:22:11 -0400 In-Reply-To: Cc: Jen Linkova , "v6ops@ietf.org" To: Alexandre Petrescu References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> X-Mailer: Apple Mail (2.3600) Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 11:22:18 -0000 --Apple-Mail=_79EFD310-B5AB-49FD-821D-F00654458AEC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 29, 2019, at 6:37 AM, Alexandre Petrescu = wrote: > Well no. After activating DHCPv6 on CPE the CPE sent three RAs > changing the Lifetime and flipping the M(anaged) and A(utonomous) = flags. >=20 > Packet dumps available upon request. That=E2=80=99s the problem. It should turn on the managed bit but not = turn off the autonomous bit. The two can validly be on at the same = time. Of course, since their meanings are deprecated, it=E2=80=99s not too = surprising that implementations get this wrong. --Apple-Mail=_79EFD310-B5AB-49FD-821D-F00654458AEC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 29, 2019, at 6:37 AM, Alexandre Petrescu <alexandre.petrescu@gmail.com> wrote:
Well no.  After  activating DHCPv6 on CPE the CPE = sent three RAs
changing the Lifetime and flipping the M(anaged) and = A(utonomous) flags.

Packet dumps available upon = request.

That=E2=80=99s the problem.   It should turn on the = managed bit but not turn off the autonomous bit.  The two can = validly be on at the same time.

Of course, since their meanings are = deprecated, it=E2=80=99s not too surprising that implementations get = this wrong.

= --Apple-Mail=_79EFD310-B5AB-49FD-821D-F00654458AEC-- From nobody Tue Oct 29 05:39:05 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97039120074 for ; Tue, 29 Oct 2019 05:39:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=NM1CE6uG; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=LQNloD8Z Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FMj1Fqwkr0DE for ; Tue, 29 Oct 2019 05:39:00 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E95F12004A for ; Tue, 29 Oct 2019 05:39:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7305; q=dns/txt; s=iport; t=1572352740; x=1573562340; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=/Kyjo4Y25NkclXCWTWedPjM9kMJbMtBUzxYJ3mGDgXE=; b=NM1CE6uGjvnDJMfmGMQHArokxzu/K+QKfCkcnidFvZEQ7IglnPG0J2ir nG67K8FhjBdrfDVJDbw5S/fEs9OTaJUJVBp4wGiPO4Nc3Q+DRiavRtYkU GUjJUAtcNiRdOysp07W+UmyR7eqA/a8+/bKfOipvDaT/Sfj9P8hwGojA7 Y=; IronPort-PHdr: =?us-ascii?q?9a23=3AmueyCRQIYzCn/3pQle6GjhOdMtpsv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESUDNfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH1?= =?us-ascii?q?5g640NmhA4RsuMCEn1NvnvOjYzHsVcXXdu/mqwNg5eH8OtL1A=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0APAAAmMrhd/4kNJK1lGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYFpBQEBAQELAYEbL1AFbFggBAsqhChRgnUDhFq?= =?us-ascii?q?GE4wziTWEYYEugSQDVAkBAQEMAQEYAQoKAgEBhEACF4NAJDQJDgIDCQEBBAE?= =?us-ascii?q?BAQIBBQRthTcMhVICBAEBEBEdAQEsCwEPAgEIDjEDAgICHwYLFBECBA4FIoM?= =?us-ascii?q?AAYF5TQMuAQIMpzMCgTiIYHWBMoJ+AQEFgTQBgRSCRQ0LghcDBoE2AYwOGIF?= =?us-ascii?q?AP4E4H4JMPoIbRwEBAgGCC4JjMoIsj3mFPJd2QQqCJIcQihKEDBQHgjyXII9?= =?us-ascii?q?/hmqCEY8OAgQCBAUCDgEBBYFSOYFYcBU7KgGCQVAQFIMGg3OFFIU/dAGBJ45?= =?us-ascii?q?eAQE?= X-IronPort-AV: E=Sophos;i="5.68,243,1569283200"; d="scan'208,217";a="653470489" Received: from alln-core-4.cisco.com ([173.36.13.137]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 29 Oct 2019 12:38:59 +0000 Received: from XCH-ALN-019.cisco.com (xch-aln-019.cisco.com [173.36.7.29]) by alln-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id x9TCcxNj022605 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 29 Oct 2019 12:38:59 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-ALN-019.cisco.com (173.36.7.29) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 29 Oct 2019 07:38:58 -0500 Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 29 Oct 2019 07:38:58 -0500 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 29 Oct 2019 07:38:58 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=aCdkxhCplBAo32Ilfgo5UVAAwwNSKRzLnc6yW1G4Uf8bzbf0IXW5h84FaqBpPzXLutrQK8epUu5uyK2AyxeYtmfuLS9wUWKlVcf3zSFU6P7zOc2z/OFKe9Z5fXhMPSK+DKRK6HGNyAU5tBuc5gA6O4P5RPjRjDH2Dg0raEGwCp5hQDT6a0QHQlQlftUH/LhrQznwp0sFkL7XUvbzf2CefRqQgwtOU0cvT3LSM64EZvV0QH6UEmUVfUmfIAutUAoYJfXKwd6qaeOU/o0o2xYgeweng3yA2cY219VuzZvtFy5ga6bid17V95mDtQHxpGjslB48Dwr5yWMGhe544CdepA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/Kyjo4Y25NkclXCWTWedPjM9kMJbMtBUzxYJ3mGDgXE=; b=mYUep6Wkve80BGKazsMG4W26au7f0tYqRxhHp2LWrzjT9zQLs1zH+AYg2J/xLZOSYoF31gQDCh6z/hlak4n+xv6G6Nd3PXrGTZ3nQAf9ObCGCKVwC3tQHrTGilTQRuMlh5zAdBlqdyKV515DTnq94aQBiLcY3u346t6KpMEmZBmlE4hBUqCzLyEkXmcvt5WWsi3pihu6dthQwmV7OqvFntYA5ZilTbrXvBSKcKqVZUSqW35q2cK0zB+s82klxUnSolXjmXszqxfin5ciBFDrs3RG+NTMR6VeYLIRsFDEtPYCPBSkYZaj1kE2oFyP4GrVAzAPNep4Sb3IhPDEGUcMGA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/Kyjo4Y25NkclXCWTWedPjM9kMJbMtBUzxYJ3mGDgXE=; b=LQNloD8ZE5AZlfr2hdBtMxG5YpYGHkiJXLSj1OLsl+st/91woXn2wZZj05tRUO2jpHYmnvhVMDZ9g64tlgLEHTZyuLR59kcgPUa6hugChpkqKfRBhmbrub9hL226wVJUVVQf3bcilzv4Htft8cL8K9qUBxjgGs52PBBstm/u3T4= Received: from MN2PR11MB4319.namprd11.prod.outlook.com (52.135.39.155) by MN2PR11MB3791.namprd11.prod.outlook.com (20.178.254.78) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.17; Tue, 29 Oct 2019 12:38:57 +0000 Received: from MN2PR11MB4319.namprd11.prod.outlook.com ([fe80::a5e4:8223:5e72:6181]) by MN2PR11MB4319.namprd11.prod.outlook.com ([fe80::a5e4:8223:5e72:6181%7]) with mapi id 15.20.2387.027; Tue, 29 Oct 2019 12:38:57 +0000 From: "Rajiv Asati (rajiva)" To: Ted Lemon CC: Alexandre Petrescu , "v6ops@ietf.org" Thread-Topic: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? Thread-Index: AQHVjXSxmpGXsWk+qkKRidIrKoxyNqdwwdcAgACs44CAAAyTgIAAFXCA Date: Tue, 29 Oct 2019 12:38:57 +0000 Message-ID: References: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> In-Reply-To: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=rajiva@cisco.com; x-originating-ip: [2600:387:2:803::81] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: dd5a1e1e-6bd7-47f2-74b1-08d75c6cf77f x-ms-traffictypediagnostic: MN2PR11MB3791: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:2887; x-forefront-prvs: 0205EDCD76 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(366004)(346002)(136003)(396003)(376002)(199004)(189003)(54896002)(53546011)(6506007)(606006)(102836004)(229853002)(14454004)(25786009)(476003)(2906002)(6486002)(478600001)(8676002)(186003)(54906003)(66574012)(486006)(81156014)(6512007)(966005)(36756003)(256004)(14444005)(6116002)(7736002)(76176011)(6306002)(66446008)(64756008)(66556008)(66476007)(236005)(6436002)(76116006)(86362001)(4326008)(4744005)(6246003)(33656002)(316002)(5660300002)(66946007)(81166006)(6916009)(8936002)(99286004)(11346002)(71190400001)(446003)(46003)(71200400001)(2616005); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3791; H:MN2PR11MB4319.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: kFAMrJoXIqhChrVhPXjHeWmkfUxO/k4Da394zYL+VIb8B4nf/zvF1fO3PnSPcd6366n2MUGzaHT4giOiTCAYGkoBlaf+CdyL2tx6AvAUh7YjU+NTsVSWyX/MIA0jKBLpm1I/Mr8CuaUTk1hZfa8ZWWgJNPnr68M8LA3+XhlDEU+aGTRBn5jzFt/tcCb2dLD6jmdFNrhrYazx+i0z3LY5mqunIhzB/c9TrF2BjVn+ESN9Dn5CmwcBlNBBWzKLtrjY23qnKo0pfdGADqWcn/+LMwMVJlHhNnFtzdcp+Ye4vNhvjc2ZTvA+itOdArJzYvZz53JfvdXLLCIx5/7hA7+yEVlxdHV+AMzP03a1JS2teRe+IJr66ECHJn9K5bwjxOxN70Q1MLmgIBkwoaWauPNXnNnQ0NGn34OwdJ8beyVK7u+jm/TGBVPLyjPZZGeeKPLtDLxG8FBTSbuKuRpJWLtLH9CWK6BbiiH8TBxW+jYu8Gs= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_EA825926BD884B1084F891E25C1BBA6Dciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: dd5a1e1e-6bd7-47f2-74b1-08d75c6cf77f X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Oct 2019 12:38:57.1774 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: iprJT0rLSNkMkEw7SraFm5GHk0sLqGZ1gQEcf4+AFxyHFSTcvgKxQVRkssObEJ49+luTzxafFoCL/rQUt4VbPw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3791 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.29, xch-aln-019.cisco.com X-Outbound-Node: alln-core-4.cisco.com Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 12:39:03 -0000 --_000_EA825926BD884B1084F891E25C1BBA6Dciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpJbmRlZWQuIENQRSByb3V0ZXIgc2hvdWxkIGFsbG93IGtlZXBpbmcgYm90aCBNIGFuZCBBIGZs YWdzLCB0byBhbGxvdyBzaW11bHRhbmVvdXMgdXNhZ2Ugb2YgREhDUHY2IGFuZCBTTEFBQyBieSB0 aGUgaG9zdHMuDQoNCkFib3V0IHRpbWUgdG8gdXBkYXRlIFJGQzcwODQgLQ0KaHR0cHM6Ly90b29s cy5pZXRmLm9yZy9odG1sL3JmYzcwODQjc2VjdGlvbi00LjMNCg0KDQoNCkNoZWVycywNClJhaml2 DQoNCg0KT24gT2N0IDI5LCAyMDE5LCBhdCA3OjIyIEFNLCBUZWQgTGVtb24gPG1lbGxvbkBmdWd1 ZS5jb20+IHdyb3RlOg0KDQrvu78gT24gT2N0IDI5LCAyMDE5LCBhdCA2OjM3IEFNLCBBbGV4YW5k cmUgUGV0cmVzY3UgPGFsZXhhbmRyZS5wZXRyZXNjdUBnbWFpbC5jb208bWFpbHRvOmFsZXhhbmRy ZS5wZXRyZXNjdUBnbWFpbC5jb20+PiB3cm90ZToNCldlbGwgbm8uICBBZnRlciAgYWN0aXZhdGlu ZyBESENQdjYgb24gQ1BFIHRoZSBDUEUgc2VudCB0aHJlZSBSQXMNCmNoYW5naW5nIHRoZSBMaWZl dGltZSBhbmQgZmxpcHBpbmcgdGhlIE0oYW5hZ2VkKSBhbmQgQSh1dG9ub21vdXMpIGZsYWdzLg0K DQpQYWNrZXQgZHVtcHMgYXZhaWxhYmxlIHVwb24gcmVxdWVzdC4NCg0KVGhhdOKAmXMgdGhlIHBy b2JsZW0uICAgSXQgc2hvdWxkIHR1cm4gb24gdGhlIG1hbmFnZWQgYml0IGJ1dCBub3QgdHVybiBv ZmYgdGhlIGF1dG9ub21vdXMgYml0LiAgVGhlIHR3byBjYW4gdmFsaWRseSBiZSBvbiBhdCB0aGUg c2FtZSB0aW1lLg0KDQpPZiBjb3Vyc2UsIHNpbmNlIHRoZWlyIG1lYW5pbmdzIGFyZSBkZXByZWNh dGVkLCBpdOKAmXMgbm90IHRvbyBzdXJwcmlzaW5nIHRoYXQgaW1wbGVtZW50YXRpb25zIGdldCB0 aGlzIHdyb25nLg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KdjZvcHMgbWFpbGluZyBsaXN0DQp2Nm9wc0BpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby92Nm9wcw0K --_000_EA825926BD884B1084F891E25C1BBA6Dciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <704340B8BE872F40BD3A928C97669CB0@cisco.onmicrosoft.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IGRpcj0iYXV0byI+DQo8 ZGl2Pjxicj4NCjwvZGl2Pg0KSW5kZWVkLiBDUEUgcm91dGVyIHNob3VsZCBhbGxvdyBrZWVwaW5n IGJvdGggTSBhbmQgQSBmbGFncywgdG8gYWxsb3cgc2ltdWx0YW5lb3VzIHVzYWdlIG9mIERIQ1B2 NiBhbmQgU0xBQUMgYnkgdGhlIGhvc3RzLiZuYnNwOw0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+ QWJvdXQgdGltZSB0byB1cGRhdGUgUkZDNzA4NCAtJm5ic3A7PC9kaXY+DQo8ZGl2PjxhIGhyZWY9 Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3MDg0I3NlY3Rpb24tNC4zIj5odHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzA4NCNzZWN0aW9uLTQuMzwvYT48L2Rpdj4NCjxkaXY+ PGJyPg0KPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8ZGl2PkNoZWVycyw8 L2Rpdj4NCjxkaXY+DQo8ZGl2IGRpcj0ibHRyIj4NCjxkaXY+UmFqaXYgJm5ic3A7PC9kaXY+DQo8 ZGl2Pjxicj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGRpcj0ibHRyIj48YnI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIj5PbiBPY3QgMjksIDIwMTksIGF0IDc6MjIgQU0sIFRlZCBMZW1vbiAmbHQ7 bWVsbG9uQGZ1Z3VlLmNvbSZndDsgd3JvdGU6PGJyPg0KPGJyPg0KPC9ibG9ja3F1b3RlPg0KPC9k aXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIj4NCjxkaXYgZGlyPSJsdHIiPu+7vyBPbiBPY3Qg MjksIDIwMTksIGF0IDY6MzcgQU0sIEFsZXhhbmRyZSBQZXRyZXNjdSAmbHQ7PGEgaHJlZj0ibWFp bHRvOmFsZXhhbmRyZS5wZXRyZXNjdUBnbWFpbC5jb20iIGNsYXNzPSIiPmFsZXhhbmRyZS5wZXRy ZXNjdUBnbWFpbC5jb208L2E+Jmd0OyB3cm90ZToNCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiBy Z2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBNZW5sby1SZWd1bGFyOyBmb250LXNpemU6IDE0cHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0 LWRlY29yYXRpb246IG5vbmU7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFu dDsiIGNsYXNzPSIiPldlbGwNCiBuby4gJm5ic3A7QWZ0ZXIgJm5ic3A7YWN0aXZhdGluZyBESENQ djYgb24gQ1BFIHRoZSBDUEUgc2VudCB0aHJlZSBSQXM8L3NwYW4+PGJyIHN0eWxlPSJjYXJldC1j b2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogTWVubG8tUmVndWxhcjsgZm9udC1zaXpl OiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY2FyZXQt Y29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IE1lbmxvLVJlZ3VsYXI7IGZvbnQtc2l6 ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAh aW1wb3J0YW50OyIgY2xhc3M9IiI+Y2hhbmdpbmcNCiB0aGUgTGlmZXRpbWUgYW5kIGZsaXBwaW5n IHRoZSBNKGFuYWdlZCkgYW5kIEEodXRvbm9tb3VzKSBmbGFncy48L3NwYW4+PGJyIHN0eWxlPSJj YXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogTWVubG8tUmVndWxhcjsgZm9u dC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8YnIgc3R5bGU9ImNh cmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBNZW5sby1SZWd1bGFyOyBmb250 LXNpemU6IDE0cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJj YXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogTWVubG8tUmVndWxhcjsgZm9u dC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5s aW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5QYWNrZXQNCiBkdW1wcyBhdmFpbGFibGUgdXBvbiBy ZXF1ZXN0Ljwvc3Bhbj48L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iIj5UaGF04oCZcyB0aGUgcHJvYmxlbS4gJm5ic3A7IEl0IHNob3VsZCB0 dXJuIG9uIHRoZSBtYW5hZ2VkIGJpdCBidXQgbm90IHR1cm4gb2ZmIHRoZSBhdXRvbm9tb3VzIGJp dC4gJm5ic3A7VGhlIHR3byBjYW4gdmFsaWRseSBiZSBvbiBhdCB0aGUgc2FtZSB0aW1lLjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+T2Yg Y291cnNlLCBzaW5jZSB0aGVpciBtZWFuaW5ncyBhcmUgZGVwcmVjYXRlZCwgaXTigJlzIG5vdCB0 b28gc3VycHJpc2luZyB0aGF0IGltcGxlbWVudGF0aW9ucyBnZXQgdGhpcyB3cm9uZy48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8c3Bhbj5fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzwvc3Bhbj48YnI+DQo8c3Bhbj52Nm9w cyBtYWlsaW5nIGxpc3Q8L3NwYW4+PGJyPg0KPHNwYW4+djZvcHNAaWV0Zi5vcmc8L3NwYW4+PGJy Pg0KPHNwYW4+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby92Nm9wczwvc3Bh bj48YnI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8 L2h0bWw+DQo= --_000_EA825926BD884B1084F891E25C1BBA6Dciscocom_-- From nobody Tue Oct 29 06:16:02 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D9D3120822 for ; Tue, 29 Oct 2019 06:16:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EG7QcAHnqA8I for ; Tue, 29 Oct 2019 06:15:58 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9016E120817 for ; Tue, 29 Oct 2019 06:15:58 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iPRLi-0000EpC; Tue, 29 Oct 2019 14:15:50 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <670EDAE2-D472-45BB-9888-27D0D03BEEB9@delong.com> In-reply-to: Your message of "Mon, 28 Oct 2019 19:58:26 -0700 ." <670EDAE2-D472-45BB-9888-27D0D03BEEB9@delong.com> Date: Tue, 29 Oct 2019 14:15:40 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 13:16:00 -0000 > > Today, you can deprecate a prefix by sending an RA with the preferred lifet > ime > > set to zero. That is enough to get IPv6 at the same level as IPv4. > > No, this only deprecates it for new sessions. Existing sessions > will still need to time out before they stop trying to use the old > prefix. In an ideal world, a mechanism to signal the need to > immediately error out such existing sessions is preferable. For IPv4 + NAT, if you flash renumber the upstream address then existing connections will be stuck. I'm not aware of any IPv4 signalling that could even tell a host behind NAT that the upstream address changed (with the exception of bringing the link down). Maybe you can be more specific why deprecating the old IPv6 prefix does not give the same effect as on IPv4 + NAT? > Updating CPEs is generally a much more dependable and faster process > than updating all hosts. Updating CPEs should make general web browsing work after flash renumbering. That should be enough for most users. From nobody Tue Oct 29 07:42:54 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D353B12091D for ; Tue, 29 Oct 2019 07:42:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9ZoSHImQlv7b for ; Tue, 29 Oct 2019 07:42:50 -0700 (PDT) Received: from mx0a-00191d01.pphosted.com (mx0a-00191d01.pphosted.com [67.231.149.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6574E1208DF for ; Tue, 29 Oct 2019 07:42:50 -0700 (PDT) Received: from pps.filterd (m0049295.ppops.net [127.0.0.1]) by m0049295.ppops.net-00191d01. (8.16.0.42/8.16.0.42) with SMTP id x9TESIuM029185; Tue, 29 Oct 2019 10:42:46 -0400 Received: from alpi154.enaf.aldc.att.com (sbcsmtp6.sbc.com [144.160.229.23]) by m0049295.ppops.net-00191d01. with ESMTP id 2vxq22rsr0-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 29 Oct 2019 10:42:45 -0400 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi154.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id x9TEgh21016494; Tue, 29 Oct 2019 10:42:44 -0400 Received: from zlp30483.vci.att.com (zlp30483.vci.att.com [135.47.91.189]) by alpi154.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id x9TEgcvA016396 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Tue, 29 Oct 2019 10:42:42 -0400 Received: from zlp30483.vci.att.com (zlp30483.vci.att.com [127.0.0.1]) by zlp30483.vci.att.com (Service) with ESMTP id 76A0B4014663; Tue, 29 Oct 2019 14:42:38 +0000 (GMT) Received: from GAALPA1MSGHUBAG.ITServices.sbc.com (unknown [130.8.218.156]) by zlp30483.vci.att.com (Service) with ESMTPS id 636974014661; Tue, 29 Oct 2019 14:42:38 +0000 (GMT) Received: from GAALPA1MSGUSRBF.ITServices.sbc.com ([169.254.5.98]) by GAALPA1MSGHUBAG.ITServices.sbc.com ([130.8.218.156]) with mapi id 14.03.0468.000; Tue, 29 Oct 2019 10:42:38 -0400 From: "STARK, BARBARA H" To: "'Ted Lemon'" , "'Alexandre Petrescu'" CC: "'v6ops@ietf.org'" Thread-Topic: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? Thread-Index: AQHVjXSnwl4m0JrsUk+Tlv2FJuKF5KdxBOYAgACs4oCAAAyTgP//7gMQ Date: Tue, 29 Oct 2019 14:42:37 +0000 Message-ID: <2D09D61DDFA73D4C884805CC7865E611536B4B1B@GAALPA1MSGUSRBF.ITServices.sbc.com> References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> In-Reply-To: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.70.242.121] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-10-29_04:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_policy_notspam policy=outbound_policy score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1031 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1908290000 definitions=main-1910290140 Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 14:42:53 -0000 PiBGcm9tOiBUZWQgTGVtb24NCj4+IE9uIE9jdCAyOSwgMjAxOSwgYXQgNjozNyBBTSwgQWxleGFu ZHJlIFBldHJlc2N1IDxtYWlsdG86YWxleGFuZHJlLnBldHJlc2N1QGdtYWlsLmNvbT4gd3JvdGU6 DQo+PiBXZWxsIG5vLiDCoEFmdGVyIMKgYWN0aXZhdGluZyBESENQdjYgb24gQ1BFIHRoZSBDUEUg c2VudCB0aHJlZSBSQXMNCj4+IGNoYW5naW5nIHRoZSBMaWZldGltZSBhbmQgZmxpcHBpbmcgdGhl IE0oYW5hZ2VkKSBhbmQgQSh1dG9ub21vdXMpIGZsYWdzLg0KPj4gDQo+PiBQYWNrZXQgZHVtcHMg YXZhaWxhYmxlIHVwb24gcmVxdWVzdC4NCg0KPiBUaGF04oCZcyB0aGUgcHJvYmxlbS4gwqAgSXQg c2hvdWxkIHR1cm4gb24gdGhlIG1hbmFnZWQgYml0IGJ1dCBub3QgdHVybiBvZmYgdGhlIGF1dG9u b21vdXMgYml0LiDCoFRoZSB0d28gY2FuIHZhbGlkbHkgYmUgb24gYXQgdGhlIHNhbWUgdGltZS4N Cg0KPiBPZiBjb3Vyc2UsIHNpbmNlIHRoZWlyIG1lYW5pbmdzIGFyZSBkZXByZWNhdGVkLCBpdOKA mXMgbm90IHRvbyBzdXJwcmlzaW5nIHRoYXQgaW1wbGVtZW50YXRpb25zIGdldCB0aGlzIHdyb25n Lg0KDQpEZXByZWNhdGVkPyBUaGVpciBtZWFuaW5ncyBhcmVuJ3QgZGVwcmVjYXRlZCBhdCBhbGws IEFGQUlLLiBTcGVjaWZpY2FsbHksIHRoZSBBdXRvbm9tb3VzIGJpdCBjb250aW51ZXMgdG8gbWVh biAidGhpcyBwcmVmaXggY2FuIGJlIHVzZWQgdG8gZ2VuZXJhdGUgU0xBQUMgYWRkcmVzc2VzIi4g SWYgdGhlcmUgaXMgbm8gcHJlZml4IHdpdGggQSBzZXQsIHRoZW4gdGhlcmUgaXMgbm8gcHJlZml4 IHRvIHVzZSB0byBnZW5lcmF0ZSBTTEFBQyBhZGRyZXNzZXMuIElmIHRoZXJlIGlzIGEgcHJlZml4 IHdpdGggQSBzZXQsIGhvc3RzIGFyZSBmcmVlIHRvIGNyZWF0ZSBTTEFBQyBhZGRyZXNzZXMgZnJv bSBpdCB0byB0aGVpciBoZWFydHMnIGNvbnRlbnQuIE9yIG5vdC4gSSBhZ3JlZSB0aGF0IGJhc2Vk IG9uIEFsZXgncyBkZXNjcmlwdGlvbiBvZiB0aGUgQSBiaXQgYmVpbmcgZmxpcHBlZCwgaXQgc3Vn Z2VzdHMgdGhlcmUgYXJlIG5vIHByZWZpeGVzIGJlaW5nIGFkdmVydGlzZWQgd2l0aCBBIHNldCAt LSB3aGljaCBtZWFucyBTTEFBQyBpcyBiZWluZyBkaXNhYmxlZC4NCg0KQW5kIEknbSBub3QgZ29p bmcgdG8gZ2V0IHN0YXJ0ZWQgd2l0aCBkZWJhdGluZyB0aGUgIk0iIGhpbnQuIE0ncyBtZWFuaW5n IGlzIHZlcnkgY2xlYXIuIFByb2JsZW1zIGFyaXNlIHdoZW4gcGVvcGxlIHRyeSB0byBhdHRyaWJ1 dGUgb3IgKHRoaW5rIHRoZXkgY2FuKSBkZW1hbmQgbW9yZSBtZWFuaW5nIHRoYW4gaXQgaGFzLiBJ dCdzIGEgYmVhdXRpZnVsIGxpdHRsZSBiaXQsIGFuZCBJIGxpa2UgaXQgdmVyeSBtdWNoLiBJdCBk b2Vzbid0IGRlc2VydmUgdG8gYmUgbWFsaWduZWQgbGlrZSB0aGlzLiBJdCBoYXMgc2VydmVkIG1l IHZlcnkgd2VsbC4NCkJhcmJhcmENCg0K From nobody Tue Oct 29 08:46:42 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9193C12083C for ; Tue, 29 Oct 2019 08:46:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QqFQeJhRyVBq for ; Tue, 29 Oct 2019 08:46:38 -0700 (PDT) Received: from mail-qt1-x834.google.com (mail-qt1-x834.google.com [IPv6:2607:f8b0:4864:20::834]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 03135120826 for ; Tue, 29 Oct 2019 08:46:38 -0700 (PDT) Received: by mail-qt1-x834.google.com with SMTP id z17so14239096qts.9 for ; Tue, 29 Oct 2019 08:46:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=h4Snpg6bTIPmqr73xtFs6WfODfpMmNNXHbwaeulDtjw=; b=IW7nRigo+tyK5p+a+1+2X6P5q5O0nDrqZr83blELFYAUGnFsQ83AYAG0qsaWsfk4v6 STm4JgDcufQop6PXOpE4xNRCPQ49MMxqzbSEec7HNNKDot/E3pytZLxiI28o3gDBdVU3 ivRDf4oaS7iKC/2IcKX5Ty59IrVGv1TPm0Rpo4zg8Teou6/imyLTBuaXS3EzujT/dbLw Z4XCewkqDMN7E0IrqLV0jQpnwmFPRNwoiI5ELds8RQZ07oj37lxqc+9XPjxxBN8un9xK vcyLY9G7xbvGYJfNkeEvOUPZ5/bgeOXHgSOovDlkHFvgT/q68YbuR2yLcYvtDH3A+Isq vdrg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=h4Snpg6bTIPmqr73xtFs6WfODfpMmNNXHbwaeulDtjw=; b=CJySn0sp0Vk8STrFdlF7JUwE17KPH20/GwCvhJR2z1KnxqMVU0wkUcoeXkYgeEI+i6 UYLa5HanBIpSHMqI5gNTOHjtpNUpz1tGk9+uGD14+9HkBV5XSP2oi5Hl5rUqeipzs0Tb 5mtf+qtwJ6BiIHmTFF6VI1oFBvdJIp1Eh2fRJfRgUpNQA4o0S00jVtMyT7+oj6/uKpJ0 Jaqu/gYbPSmUa+Gv5TLjU7SRZIiIdwrXGV+qNEX0tyORZvCzDan2zMP9L+j8gJMhfm3T cOtADKJeWq1P3IHBVkOyU0hERQu5ocdKptEm0YKfike5spR6l99LJB46mxogwTGgQroA aLow== X-Gm-Message-State: APjAAAWuzROpNGGtfpdDGtnC1qinM62fra3oP08GRdK4d65Sm2+i6DTY q37T9P6iJZ+EGBOBn9s1HS5MqA== X-Google-Smtp-Source: APXvYqwNka/+Gu60ZCLCp/kBTWmHf3LVYpNc2ny+lpmo4WEiaMTzSPgcAyqXSn/SLDl0sI3UhKdUHg== X-Received: by 2002:ac8:549:: with SMTP id c9mr5047176qth.178.1572363996825; Tue, 29 Oct 2019 08:46:36 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:90a7:9279:88c4:73a? ([2601:18b:300:36ee:90a7:9279:88c4:73a]) by smtp.gmail.com with ESMTPSA id 137sm5349122qkn.110.2019.10.29.08.46.35 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 29 Oct 2019 08:46:35 -0700 (PDT) From: Ted Lemon Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_5D02293E-E75B-4E18-8E9B-F5980FCC9A3D" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\)) Date: Tue, 29 Oct 2019 11:46:33 -0400 In-Reply-To: <2D09D61DDFA73D4C884805CC7865E611536B4B1B@GAALPA1MSGUSRBF.ITServices.sbc.com> Cc: Alexandre Petrescu , "v6ops@ietf.org" To: "STARK, BARBARA H" References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> <2D09D61DDFA73D4C884805CC7865E611536B4B1B@GAALPA1MSGUSRBF.ITServices.sbc.com> X-Mailer: Apple Mail (2.3601.0.10) Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 15:46:41 -0000 --Apple-Mail=_5D02293E-E75B-4E18-8E9B-F5980FCC9A3D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 29, 2019, at 10:42 AM, STARK, BARBARA H wrote: > It's a beautiful little bit, and I like it very much. It doesn't = deserve to be maligned like this. It has served me very well. I just meant that the RFC that described the meaning of the =E2=80=98M=E2=80= =99 bit explicitly has been deprecated in favor of one that does not. = You=E2=80=99re right about the =E2=80=98A=E2=80=99 bit, and I=E2=80=99m = sorry for maligning it. :) --Apple-Mail=_5D02293E-E75B-4E18-8E9B-F5980FCC9A3D Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 29, 2019, at 10:42 AM, STARK, BARBARA H <bs7652@att.com> = wrote:
It's a = beautiful little bit, and I like it very much. It doesn't deserve to be = maligned like this. It has served me very = well.

I = just meant that the RFC that described the meaning of the =E2=80=98M=E2=80= =99 bit explicitly has been deprecated in favor of one that does not. =  You=E2=80=99re right about the =E2=80=98A=E2=80=99 bit, and I=E2=80=99= m sorry for maligning it.  :)

= --Apple-Mail=_5D02293E-E75B-4E18-8E9B-F5980FCC9A3D-- From nobody Tue Oct 29 09:11:51 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7165812006E for ; Tue, 29 Oct 2019 09:11:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x6A8qZjO_TTp for ; Tue, 29 Oct 2019 09:11:48 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4171D12001A for ; Tue, 29 Oct 2019 09:11:48 -0700 (PDT) Received: from astfgl.hanazo.no (246.51-175-81.customer.lyse.net [51.175.81.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 44F724E12957; Tue, 29 Oct 2019 16:11:47 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 05DD52073D09; Tue, 29 Oct 2019 17:11:43 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Tue, 29 Oct 2019 17:11:43 +0100 Cc: Barbara H Stark , "v6ops@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> <2D09D61DDFA73D4C884805CC7865E611536B4B1B@GAALPA1MSGUSRBF.ITServices.sbc.com> To: Ted Lemon X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 16:11:49 -0000 Ted, >> It's a beautiful little bit, and I like it very much. It doesn't = deserve to be maligned like this. It has served me very well. >=20 > I just meant that the RFC that described the meaning of the =E2=80=98M=E2= =80=99 bit explicitly has been deprecated in favor of one that does not. = You=E2=80=99re right about the =E2=80=98A=E2=80=99 bit, and I=E2=80=99m = sorry for maligning it. :) Which RFC is that? As far as I know the M-flag is defined in RFC4861. Cheers, Ole= From nobody Tue Oct 29 10:20:35 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13771120AAE for ; Tue, 29 Oct 2019 10:20:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.999 X-Spam-Level: X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3X2ShQVRA4e0 for ; Tue, 29 Oct 2019 10:20:31 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 4D74B120AAD for ; Tue, 29 Oct 2019 10:20:30 -0700 (PDT) Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9THKQPA015312 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 29 Oct 2019 10:20:29 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9THKQPA015312 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572369629; bh=tJxaMQAz63ayNM6eyG9nYSR+6gLYdB2k2LWrSK9GQHE=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=W90ZPtYGEqAoqhq32ude4qxlba5lHMtWXTj2ZuN8+LwbKFt7qEEvdLCCKKBV0ESko C/bKEI0lJWthjCYdbf0g+RATWuu2JpQX5ts4IIWk3v4N9G9q65C594QEdnmXc72g4x 7GRr/HAtuhz2VhHhyS76yeTl5VYYUdT5Ie/XT94s= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Owen DeLong In-Reply-To: Date: Tue, 29 Oct 2019 10:20:26 -0700 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <670EDAE2-D472-45BB-9888-27D0D03BEEB9@delong.com> To: Philip Homburg X-Mailer: Apple Mail (2.3445.104.8) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Tue, 29 Oct 2019 10:20:29 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 17:20:33 -0000 > On Oct 29, 2019, at 6:15 AM, Philip Homburg = wrote: >=20 >>> Today, you can deprecate a prefix by sending an RA with the = preferred lifet >> ime >>> set to zero. That is enough to get IPv6 at the same level as IPv4. >>=20 >> No, this only deprecates it for new sessions. Existing sessions >> will still need to time out before they stop trying to use the old >> prefix. In an ideal world, a mechanism to signal the need to >> immediately error out such existing sessions is preferable. >=20 > For IPv4 + NAT, if you flash renumber the upstream address then = existing > connections will be stuck. Not exactly=E2=80=A6 They do fairly quickly get sent TCP RSTs in most = cases. > I'm not aware of any IPv4 signalling that could even tell a host = behind NAT > that the upstream address changed (with the exception of bringing the = link > down). Bringing the link down quickly and resetting the session allows for the = connection to be re-established and continue in most cases. OTOH, leaving the = connection hung until it times out at the application or host TCP stack level = creates huge delays in service restoration. > Maybe you can be more specific why deprecating the old IPv6 prefix = does not=20 > give the same effect as on IPv4 + NAT? Because the IPv4 host fairly quickly receives an RST packet when the = outbound packet hits a non-existent state table entry or a state table entry = marked as dead. OTOH, the IPv6 host doesn=E2=80=99t (currently) get any signaling from = the local router indicating that anything is amiss. It continues to treat the prefix as = valid for existing flows (and depending on the level of deprecation, i.e. whether or not a = preferred lifetime 0 was received) perhaps for new flows as well. >> Updating CPEs is generally a much more dependable and faster process >> than updating all hosts. >=20 > Updating CPEs should make general web browsing work after flash = renumbering. > That should be enough for most users. Unless the CPE knows to send out an RA with a preferred lifetime of 0 = for the now deprecated prefix, then you are mistaken in the actual systemic = behavior. Owen From nobody Tue Oct 29 10:32:16 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BDEA120AF6 for ; Tue, 29 Oct 2019 10:32:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.999 X-Spam-Level: X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h_kKmJFPhN1D for ; Tue, 29 Oct 2019 10:32:11 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 4A8DE120ABE for ; Tue, 29 Oct 2019 10:32:04 -0700 (PDT) Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9THVQb8018177 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 29 Oct 2019 10:31:29 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9THVQb8018177 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572370290; bh=1PgQffLpkln4HcnbRy2rpFjEv8xzzvp4fBMCWPdLjPA=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=2DJ+l0Wq9wbXp79E+GQcWXypX8WdYKD7sz2jwmnVA299NIxAiVSEjo+QPbJMWLUKF EpnEc706NQjFdSP0abJHqh1TY0uEni6qYCVIatuh5WlIHL3Hxhxv2chTpemMc8c/yv gvGGReahRLTUU/uk75j5FFc8e1hwpx/AgrTMnR+E= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Owen DeLong In-Reply-To: Date: Tue, 29 Oct 2019 10:31:25 -0700 Cc: Philip Homburg , v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <9F8B33B3-3F33-4003-BA34-FCC8B69D8ED8@delong.com> References: To: Ted Lemon X-Mailer: Apple Mail (2.3445.104.8) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Tue, 29 Oct 2019 10:31:30 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 17:32:13 -0000 > On Oct 29, 2019, at 2:43 AM, Ted Lemon wrote: >=20 > On Oct 28, 2019, at 11:00 PM, Owen DeLong wrote: >>=20 >> There=E2=80=99s a difference between networks where hostile hosts can = occur in extreme circumstances (what you describe) and networks where = hostile hosts are expected as a normal occurrence (what I was intending = to describe). >=20 > I=E2=80=99m not following your distinction. Bot infections can = happen at any time, on any network. Bot infections are only one kind of hostile host. The other kind is malicious actors who have hosts that are permitted on = your network. The former can occur anywhere. The latter is less common on enterprise networks and more common on = university networks and coffee shop networks and other public access = networks. I thought this was pretty clear from my original post. Owen From nobody Tue Oct 29 11:12:10 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3711C120826 for ; Tue, 29 Oct 2019 11:12:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LCueIfNX-yav for ; Tue, 29 Oct 2019 11:12:05 -0700 (PDT) Received: from mail-qk1-x72b.google.com (mail-qk1-x72b.google.com [IPv6:2607:f8b0:4864:20::72b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E413E120B3E for ; Tue, 29 Oct 2019 11:11:42 -0700 (PDT) Received: by mail-qk1-x72b.google.com with SMTP id a194so13180996qkg.10 for ; Tue, 29 Oct 2019 11:11:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=2t9pTo9/aX9+9nloDrkx287l4y2tXLynBxwCQhNAqN4=; b=fdcwbm1wX0U2RugA/f/gpRrHnwK6qZIdXqlU/Fy57YhH54x7qI8+/8h6YIZMNXChOi 6v2qlfhjp44laKFDvdavcMmThXEV/D/U7uNeNzMDolnirqnqMAKicPanruaJLLSLLR4Y jSAB2FrVPdM/+664v7w4956RZ8lDDrgEl6yU9QFwbA7J13Up64r8zlTFWroq5HXwdY/j zV7IMKq62cRKJUCjrJsyFF3j634jhthaR6u17MzyNeoFkX1fE3csdLDGM5IAB1pyb+zC usL3aF3MrNu5Y4bTHkTWuqlCHSkQdhpbT3HrBa86jw86qDY4QMOj0RSjkcu/V9ENoOf1 /gVg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=2t9pTo9/aX9+9nloDrkx287l4y2tXLynBxwCQhNAqN4=; b=V/Yi9SrgGOqrz7Smu1che/naMXVtA7pxY3rffguoUDCVAsxVTHU1LFdzAX9hJizdwS je0WyG3pXTESXUpW4dltFdev4YviCaj0QpAA57m+jv6s7D/ypO8TPMXWptJAoveS3aYH MZypA7/+1aKZrxrYaH5h+9Wd8xE2xB3eLmiFXGrr9Y2syX+N/asA99h//e5xfLy5bZGH gOIID7GMa89jPoFhplr/FjvA1BhYZaXdyu+XdV5URY8u1sEfuU4giPu36QBCDyk9xKPW DZRJy7vkyMwwp/lt/4SGsrzS9mFHHf7ckqdg3PIEx3CSuhjCm+VnO4YgBzxFxKDsc6Bi OCNg== X-Gm-Message-State: APjAAAWEcapeVHJA9xtiJc22R/E0JTExGRajAIYTk89kQZghIjMVc7b6 BkG7laqdn2db0f3dcJmSFJQYEg== X-Google-Smtp-Source: APXvYqyz6HANXymEZXJJSWIuZ45E6DJoWu7Q4cOdTjQBwau3mmeVGoV2RbYZlD+Wf4px7O+lRE7/6Q== X-Received: by 2002:a37:4c42:: with SMTP id z63mr20706278qka.79.1572372701934; Tue, 29 Oct 2019 11:11:41 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:90a7:9279:88c4:73a? ([2601:18b:300:36ee:90a7:9279:88c4:73a]) by smtp.gmail.com with ESMTPSA id b185sm9757374qkg.45.2019.10.29.11.11.41 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 29 Oct 2019 11:11:41 -0700 (PDT) From: Ted Lemon Message-Id: <654D9D17-FF64-44C8-8DBB-9622A192B08F@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_E3C954BF-7590-4EAD-941E-AB8630DC6834" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\)) Date: Tue, 29 Oct 2019 14:11:39 -0400 In-Reply-To: Cc: Barbara H Stark , "v6ops@ietf.org" To: Ole Troan References: <2b617ab1-018a-8f03-4d8b-081c09c9c88a@gmail.com> <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> <2D09D61DDFA73D4C884805CC7865E611536B4B1B@GAALPA1MSGUSRBF.ITServices.sbc.com> X-Mailer: Apple Mail (2.3601.0.10) Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 18:12:08 -0000 --Apple-Mail=_E3C954BF-7590-4EAD-941E-AB8630DC6834 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 29, 2019, at 12:11 PM, Ole Troan wrote: > Which RFC is that? > As far as I know the M-flag is defined in RFC4861. Weird. You are right. I don=E2=80=99t know why I=E2=80=99m = remembering it this way=E2=80=94I know that there was an issue, but = I=E2=80=99m not seeing the problem I remember in the RFC. The previous = version doesn=E2=80=99t mention DHCP specifically, so maybe I=E2=80=99m = remembering that version. --Apple-Mail=_E3C954BF-7590-4EAD-941E-AB8630DC6834 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 29, 2019, at 12:11 PM, Ole Troan <otroan@employees.org> wrote:
Which RFC is that?
As far as I know the M-flag is defined in = RFC4861.

Weird.   You are right.   I don=E2=80=99t know why = I=E2=80=99m remembering it this way=E2=80=94I know that there was an = issue, but I=E2=80=99m not seeing the problem I remember in the RFC. =   The previous version doesn=E2=80=99t mention DHCP specifically, = so maybe I=E2=80=99m remembering that version.

= --Apple-Mail=_E3C954BF-7590-4EAD-941E-AB8630DC6834-- From nobody Tue Oct 29 11:32:18 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E0ED120813 for ; Tue, 29 Oct 2019 11:32:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ez_Lg__zcVsI for ; Tue, 29 Oct 2019 11:32:15 -0700 (PDT) Received: from cirse-smtp-out.extra.cea.fr (cirse-smtp-out.extra.cea.fr [132.167.192.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21415120119 for ; Tue, 29 Oct 2019 11:32:14 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by cirse-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9TIWA4P018466; Tue, 29 Oct 2019 19:32:10 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 85A44201FF8; Tue, 29 Oct 2019 19:32:10 +0100 (CET) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 74F9A206326; Tue, 29 Oct 2019 19:32:10 +0100 (CET) Received: from [10.11.240.2] ([10.11.240.2]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9TIWA39030197; Tue, 29 Oct 2019 19:32:10 +0100 From: Alexandre Petrescu To: "Rajiv Asati (rajiva)" , Ted Lemon Cc: "v6ops@ietf.org" References: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> Message-ID: Date: Tue, 29 Oct 2019 19:32:09 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 18:32:17 -0000 Le 29/10/2019 à 13:38, Rajiv Asati (rajiva) a écrit : > > Indeed. CPE router should allow keeping both M and A flags, to allow > simultaneous usage of DHCPv6 and SLAAC by the hosts. At high level, it makes sense to require to allow simultaneous DHCP and SLAAC usage on a same subnet; a private email suggests the same. With that, Android and Windows would live ok side-by-side on same subnet. Further, thinking about how to implement the req, one would wonder whether the prefix in PIO with A flag set in an RA with M set, would be the same as the prefix used by the DHCP Server to form and deliver addresses? (if yes, I think that is difficult to achieve: (1) difficult to put same prefix in the software implementing RA sending, and in the DHCP server connfig files and (2) difficult to make sure the Server does not form an address for a Client, address that a Host has already formed in the same prefix). (because of that reason, I think that trying to implement that requirement would lead to designating a prefix for SLAAC and another prefix for DHCP; that may sound a little bit as a waste). Alex > > About time to update RFC7084 - > https://tools.ietf.org/html/rfc7084#section-4.3 > > > > Cheers, Rajiv > > >> On Oct 29, 2019, at 7:22 AM, Ted Lemon wrote: >> >>  On Oct 29, 2019, at 6:37 AM, Alexandre Petrescu >> > > wrote: >>> Well no. After activating DHCPv6 on CPE the CPE sent three RAs >>> changing the Lifetime and flipping the M(anaged) and >>> A(utonomous) flags. >>> >>> Packet dumps available upon request. >> >> That’s the problem. It should turn on the managed bit but not >> turn off the autonomous bit. The two can validly be on at the >> same time. >> >> Of course, since their meanings are deprecated, it’s not too >> surprising that implementations get this wrong. >> >> _______________________________________________ v6ops mailing list >> v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops From nobody Tue Oct 29 14:16:16 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6976B12006D for ; Tue, 29 Oct 2019 14:16:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=shytyi.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qbBfUDWs_0Vn for ; Tue, 29 Oct 2019 14:16:09 -0700 (PDT) Received: from sender11-of-o52.zoho.eu (sender11-of-o52.zoho.eu [185.20.211.238]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB52512001E for ; Tue, 29 Oct 2019 14:16:08 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1572383765; cv=none; d=zohomail.eu; s=zohoarc; b=XqDXBEvZfAc4qMbyVKJi2g01+hREszACcixt3qaXp9UP3IGUQwkIp4SGyzPmf6nvr1+n5QsBVDmkmzBthRShiXBhQJEqblqYK7h9aiB+jq1DtwrwrpFNBBCEDg+fa4MWsQzJ5dD+M+xVDHBIdjStYDzTPR5fdDd2GAHpiX/GyZk= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.eu; s=zohoarc; t=1572383765; h=Content-Type:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results; bh=kR75sDwcJ8hfQhONlsHO2PD8/vCoO+dJzrSPrhsA4z0=; b=ME9GTtQHnAuKhmSVGQ0BGnVGFykhICvIxuV4N59cTud3wPJBFm9ZZFTpalUGM+Td6b0I5peTd54U6JP1Vo969+zoYWrUAvSItlsTzWf3ClrDO5TGksmpB1v5TgZvG/Dg2lAQAJJbZvCmymN/pHkHyxmgW+BP1abuW9kXe6IYPz0= ARC-Authentication-Results: i=1; mx.zohomail.eu; dkim=pass header.i=shytyi.net; spf=pass smtp.mailfrom=ietf.dmytro@shytyi.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1572383765; s=hs; d=shytyi.net; i=ietf.dmytro@shytyi.net; h=Date:From:To:Cc:Message-Id:In-Reply-To:References:Subject:MIME-Version:Content-Type; l=69010; bh=kR75sDwcJ8hfQhONlsHO2PD8/vCoO+dJzrSPrhsA4z0=; b=CzjDuhsdtdpcIg+DeVGyW7nIH7YbPRQUKxHf3QPkVMTr22ZW1esmVJ3a9I6rjX1w a8Dujz2jKkdwqrGnINLlXCSNn80ZRBnx9aCnB1ED5sdQ6YCEknnGYse22S/mbd47nNQ CXjkLQzHWYNPEEZy5tbCq94x9co5TwvshskMSWgI= Received: from sender11-op-f32.zoho.eu (172.26.23.79 [172.26.23.79]) by mx.zohomail.com with SMTPS id 1572383764386901.1930180677879; Tue, 29 Oct 2019 22:16:04 +0100 (CET) Received: from mail.zoho.eu by mx.zoho.eu with SMTP id 157238376430951.376030478771554; Tue, 29 Oct 2019 22:16:04 +0100 (CET) Date: Tue, 29 Oct 2019 22:16:04 +0100 From: Dmytro Shytyi To: "Li HUANG" Cc: "v6ops" Message-Id: <16e19602f4a.11692076f325242.5254263295023703726@shytyi.net> In-Reply-To: References: <740671f9-6e68-70ac-8dd2-91f9d24b965d@gmail.com> <4561ca6d-4611-27e8-5cb3-16e72075fa65@gmail.com> <750e36b6-1572-2b78-953b-b0da8ae39130@gmail.com> <16dded8e702.ed9b0e42235989.4158295187609945732@shytyi.net> <16de3269bda.12447abf02199.1998508517577039185@shytyi.net> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_905399_1466798737.1572383764300" X-Priority: Medium User-Agent: Zoho Mail X-Mailer: Zoho Mail X-ZohoMailClient: External Archived-At: Subject: Re: [v6ops] Implementation of DANIR for IoT Router - DHCPv6-PD and ND X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 21:16:14 -0000 ------=_Part_905399_1466798737.1572383764300 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello Li, In the implementation it is possible to change the DUID. You need to modify= the linux kernel module code and recompile it. ______________ Dmytro SHYTYI ---- On Sat, 19 Oct 2019 15:04:29 +0200 Li HUANG wrot= e ---- Oct. 19 2019=C2=A0 21:http://00.hk w10p m800 Sg|Rv Thank you Dmytro and your group for sharing document on the specific dhcpv6= related topics .=C2=A0 You are welcome to share the dialog as well.=20 Hopefully Linux/Uniz further=C2=A0 OS checking around=C2=A0 would be helped= that from Dhcpv6DUID modifying unable remained to be the subnet concerning= at your convenience . Which was online arrow getting to you ... Sincerely mailto:BleuOisou@gmail.com Li HUANG On Fri, Oct 18, 2019, 20:30 Dmytro Shytyi wrote: Hello Li,=C2=A0 Don't you mind if we include in our disscussion the IETF v6ops working grou= p? In case you will not respond we will accept it as a permission to share our= disscussion with IETF Working group.=C2=A0 Thanks. =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0 Bien cordialement, Dmytro SHYTYI ---- On Mon, 07 Oct 2019 14:32:46 +0200 Alexandre Petrescu wrote ---- Li,=20 =20 Below you will find are some answers from Dmytro.=20 =20 I suggest we discuss this publicly on the v6ops WG email list, because=20 it is on that list that others have responded (not on DHC WG email list).= =20 =20 =20 1#=20 Router - is a node, that performs forwarding. Router node is not a=20 final destination of forwarded packets.=20 =20 Diagram :=20 ISP---Switch (4 mac found : isp x2 , modem x1 , IANA x1)---- Router=20 (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , vpn mac)=20 =20 && DHCPv6DUID failed to keep the modified DHCPv6DUID eth.initial.mac=20 =20 [Dmytro] In the implementation DHVPvyDUID type field is set to "1" that=20 meanse that DUID based on the link-layer Address Plus Time is used.=20 =20 example from the DANIR KD6:=20 =20 =C2=A0=C2=A0=C2=A0=C2=A0dhp.kd6_sol->my_client_id.duid_type =3D htons(1);= =20 =20 =C2=A0=C2=A0=C2=A0=C2=A0dhp.kd6_sol->my_client_id.hw_type =3D htons(1);=20 =20 =C2=A0=C2=A0=C2=A0=C2=A0//DUID time convert kernel vertsion to compatible o= ption value=20 =20 =C2=A0=C2=A0=C2=A0=C2=A0ver =3D utsname()->version;=20 =20 =C2=A0=C2=A0=C2=A0=C2=A0sscanf(ver, "%*s %*s %*s %*s %s %d %d:%d:%d %*s %d"= ,ktime_month,=20 &dh6_ktime.tm_mday, &dh6_ktime.tm_hour, &dh6_ktime.tm_min,=20 &dh6_ktime.tm_sec, &dh6_ktime.tm_year);=20 =20 =C2=A0=C2=A0=C2=A0=C2=A0dh6_ktime.tm_mon=3DGetMon(ktime_month);=20 =20 =C2=A0=C2=A0=C2=A0=C2=A0//pr_info( "EP KTIME: %d,%d,%d,%d,%d,%d", dh6_ktime= .tm_mon,=20 dh6_ktime.tm_mday, dh6_ktime.tm_hour, dh6_ktime.tm_min,=20 dh6_ktime.tm_sec, dh6_ktime.tm_year);=20 =20 =C2=A0=C2=A0=C2=A0=C2=A0kernelCompilationTimeStartingFrom2000 =3D=20 convertTimeDateToSeconds(dh6_ktime);=20 =20 =C2=A0=C2=A0=C2=A0=C2=A0duid_time=3Dhtonl( kernelCompilationTimeStartingFro= m2000 & 0xffffffff);=20 =20 =C2=A0=C2=A0=C2=A0=C2=A0memcpy=20 (&(dhp.kd6_sol->my_client_id.duid_time),&duid_time,sizeof(duid_time));=20 =20 =C2=A0=C2=A0=C2=A0=C2=A0memcpy (dhp.kd6_sol->my_client_id.my_hw_addr, d->de= v->dev_addr, 48);=20 =20 2#=20 DHCP-PD only can be configured by a figure not IPv6 . Term of , when=20 example 2002:: input :: would make the app grey uncontinued.=20 =20 &&=20 The Router Avertisement Messages carry the GUNPs=20 that are further used by the stateless autoconfiguration mechanism=20 (SLAAC)=20 =20 [Dmytro] RFC 4862 specifies the Router Advertisement processing process.=20 =20 3#=20 Global Unique Address (GUA) - is an address that is globally=20 available and globally unique.=20 =20 Diagram :=20 ISP---Switch (4 mac found : isp x2 , modem x1 , IANA x1)---- Router=20 (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , vpn mac)=20 =20 - GUA is DHCPv6DUID eth.mac ?=20 - which GUA to be mentioned at the draft ?=20 - Dhcpv6DUID using sub-prefix the same as the IPv4 exactly=20 working eth.mac , by ipconfig /all detected when the vista replaced its=20 motherboard and having both new and initial eth.mac shown both?=20 - "After the DHCPv6 packet leaves the cellular interface of=20 the IoT=20 Requesting Router via wireless OFDMA link, it reaches the element of=20 the access network which connects to the user equipment (UEs) -=20 eNodeB station." likes there must be some wireless "USB.sgw.isp"=20 host or , Dhcpv6 must be on Cellular host ? When one of 4 mac switch=20 showing Nokia , which sometimes modem connecting arp -a shown as well?=20 That would cause the pretty much lost functions of wire.router.map=20 always via as if owning speed lower much than the wireless does have .=20 =20 [Dmytro] GUA is IPv6 global unique address.=20 =20 4#=20 your freely downloadable kernal patch for Windows BIOS works ?=20 =20 [Dmytro] This is linux kernel module. Linux could be ran in the=20 virtualbox in the windows environment.=20 =20 5#=20 "The Hop Limit of packets that contain the DHCPv6 data MUST be 255 to=20 satisfy the properties of the cellular infrastructure. To reach the=20 PGW from the UE the DHCPv6 packets are encapsulated by SGW into UDP/=20 IPv4 packets; this encapsulation is for the GTP-U tunnel. The=20 corresponding decapsulation mechanism decreases the Hop Limit; when=20 the Hop Limit reaches value 0 the packet is discarded; to avoid this=20 situation it is required to put the Hop Limit value of the DHCPv6=20 Solicit equal to 255."=20 =20 - hop in switch default 64 decreased to 48 then the=20 SGW would not work--> no dhcpv6 completed ---> no ipv6 get to switch=20 then Rv after it ?=20 =20 =20 The packet will be discarded when Hop Limit will reach 0. When Hop Limit=20 > 0 packet will not be discarded.=20 =20 =20 Dmytro and Alex=20 =20 =20 Le 04/10/2019 =C3=A0 16:16, Li HUANG a =C3=A9crit=C2=A0:=20 > Oct. 04 2019=C2=A0 22:http://12.hk w10p m800 Sg|Rv=20 > Attn:=20 >=20 > Authors' Addresses=20 >=20 > Dmytro Shytyi=20 > SFR=20 > Paris area , Ile-de-France=20 > France=20 >=20 > Email:mailto:ietf.dmytro@shytyi.net =20 > URI:http://dmytro.shytyi.net=20 >=20 >=20 > Internet-DraDHCPv6_PD, PDP and NDP Implementation in IoT Rou March 2019= =20 >=20 >=20 > Alexandre Petrescu=20 > CEA, LIST=20 > CEA Saclay=20 > Gif-sur-Yvette , Ile-de-France 91190=20 > France=20 >=20 > Phone: +33169089223=20 > Email:mailto:Alexandre.Petrescu@cea.fr =20 >=20 >=20 > Good Day Alex and Dmytro,=20 >=20 >=20 >=20 >=20 > Do read through draft and thank you for your sharing .=20 >=20 > Some here could have not understood them well or clear , please help in= =20 > details off:=20 >=20 >=20 > 1#=20 > Router - is a node, that performs forwarding.=C2=A0 Router node is not a= =20 > =C2=A0 =C2=A0final destination of forwarded packets.=20 >=20 > Diagram :=20 > ISP---Switch (4 mac found : isp x2 , modem x1 , IANA x1)---- Router=20 > (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , vpn mac)=20 >=20 > && DHCPv6DUID failed to keep the modified DHCPv6DUID eth.initial.mac=20 >=20 >=20 >=20 > 2#=20 > DHCP-PD only can be configured by a figure not IPv6 . Term of , when=20 > example 2002:: input :: would make the app grey uncontinued.=20 >=20 > &&=20 > The Router Avertisement Messages carry the GUNPs=20 > =C2=A0 =C2=A0that are further used by the stateless autoconfiguration me= chanism=20 > =C2=A0 =C2=A0(SLAAC)=20 >=20 >=20 >=20 >=20 > 3#=20 > Global Unique Address (GUA) - is an address that is globally=20 > =C2=A0 =C2=A0available and globally unique.=20 >=20 > Diagram :=20 > ISP---Switch (4 mac found : isp x2 , modem x1 , IANA x1)---- Router=20 > (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , vpn mac)=20 >=20 > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0- GUA is DHCPv6DUID eth.mac ?= =20 > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0- which GUA to be mentioned at = the draft ?=20 > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0- Dhcpv6DUID using sub-prefix t= he same as the IPv4 exactly=20 > working eth.mac , by ipconfig /all detected when the vista replaced its= =20 > motherboard and having both new and initial eth.mac shown both?=20 > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0- "After the DHCPv6 packet leav= es the cellular interface of=20 > the IoT=20 > =C2=A0 =C2=A0Requesting Router via wireless OFDMA link, it reaches the e= lement of=20 > =C2=A0 =C2=A0the access network which connects to the user equipment (UE= s) -=20 > =C2=A0 =C2=A0eNodeB station." =C2=A0 =C2=A0likes there must be some wire= less "USB.sgw.isp"=20 > host or , =C2=A0Dhcpv6 must be on Cellular host ? When one of 4 mac switc= h=20 > showing Nokia , which sometimes modem connecting arp -a shown as well?=20 > That would cause the pretty much lost functions of wire.router.map=20 > always via as if owning speed lower much than the wireless does have .=20 >=20 >=20 >=20 >=20 > 4#=20 > your freely downloadable kernal patch for Windows BIOS works ?=20 >=20 >=20 >=20 >=20 > 5#=20 > "The Hop Limit of packets that contain the DHCPv6 data MUST be 255 to=20 > =C2=A0 =C2=A0satisfy the properties of the cellular infrastructure.=C2= =A0 To reach the=20 > =C2=A0 =C2=A0PGW from the UE the DHCPv6 packets are encapsulated by SGW = into UDP/=20 > =C2=A0 =C2=A0IPv4 packets; this encapsulation is for the GTP-U tunnel.= =C2=A0 The=20 > =C2=A0 =C2=A0corresponding decapsulation mechanism decreases the Hop Lim= it; when=20 > =C2=A0 =C2=A0the Hop Limit reaches value 0 the packet is discarded; to a= void this=20 > =C2=A0 =C2=A0situation it is required to put the Hop Limit value of the = DHCPv6=20 > =C2=A0 =C2=A0Solicit equal to 255."=20 >=20 > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0- hop in s= witch default 64 decreased to 48 then the=20 > SGW would not work--> no dhcpv6 completed ---> no ipv6 get to switch=20 > then Rv after it ?=20 >=20 >=20 >=20 >=20 >=20 > 6#=20 > "It is possible to use IPv6-over-PPP protocol [RFC1661], with LCP,=20 > =C2=A0 =C2=A0between the ARM and the modem."=20 >=20 > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 "ARM has = added a wealth of wireless technologies to=20 > its arsenal, but has no immediate plans to design a modem for mobile or= =20 > Internet of Things devices.=20 > The company offers CPU and GPU designs that are widely used in=20 > smartphones and tablets. A missing piece is a cellular modem that ARM=20 > customers could license and put in mobile devices."=20 >=20 >=20 > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 - My modem is Fibre Hua= wai wire model, Rv, Sg all=20 > wirecable devices.=20 >=20 >=20 > 7#=20 > Could not have been able to select one who would help Modify Dhcpv6DUID= =20 > completed , sent email to mailto:postmaster@microsoft.com=20 > none replying .=20 >=20 >=20 >=20 >=20 >=20 > Sincerely=20 > mailto:bleuoisou@gmail.com =20 >=20 > On Tue, Sep 24, 2019 at 1:27 AM Alexandre Petrescu=20 > > wrote:=20 >=20 > Hi Li,=20 >=20 > IETF is not police of protocols: IETF can not force organisations to= =20 > implement protocols or to fix bugs.=C2=A0 But we can discuss about pr= otocols=20 > at IETF.=20 >=20 > If Microsoft Windows does not implement DHCPv6-PD on wireless links= =20 > (like on cellular), then I have two things to say.=20 >=20 > One thing is to say that Microsoft programmers should not worry.=C2= =A0 They=20 > are not the only ones who do not implement DHCPv6-PD on wireless link= s.=20 > There is also Qualcomm who refuses to.=C2=A0 It may, or it may not be= a=20 > problem.=C2=A0 But it is not only Microsoft.=C2=A0 An it is a good to= pic to=20 > work on.=20 >=20 > The other thing is to say that it is possible to run a linux virtual= =20 > machine on a Microsoft Windows real machine.=C2=A0 In that linux mach= ine,=20 > one=20 > can run DHCPv6-PD, on the wireless interface of the real Microsoft=20 > Windows machine.=C2=A0 We propose open source to achieve this.=C2=A0 = It is=20 > available at=20 > https://dmytro.shytyi.net/kd6-danir-lite-kernel-dhcpv6-pd-and-ndp-impleme= ntation/=20 >=20 > (we have tried to upload it to github, but we hit a 2Gb upload limit;= =20 > this limit is a thing to complain to github, together with its lack o= f=20 > IPv6 access; and github is now a Microsoft organisation :-)=20 >=20 > Alex and Dmytro=20 >=20 >=20 > Le 20/09/2019 =C3=A0 01:55, Li HUANG a =C3=A9crit=C2=A0:=20 > > 08:http://47.hk S8 Sept 20 2019=20 > >=20 > >=20 > > continued...,=20 > >=20 > >=20 > > Thank you rephrasing our diagonose for assuring the points.=20 > >=20 > >=20 > > Wireless advance for dhcpv6 is imagined to experienced network map= s.=20 > > Which none wireless devices and plan isp at all decades.=20 > >=20 > >=20 > > Microsoft who is handing rcf3315 according modified failures,=C2= =A0 to=20 > > changed board OEM machine, has reached wall to resolve it inside= =20 > microsoft.=20 > >=20 > >=20 > > Looking for some where who would enter the juridical like=20 > IEFT...etc.,=20 > > in order to edge out what responsibility taken by who, if in such= =20 > > compromising rcf rules obeying=C2=A0 in conditions.=20 > >=20 > >=20 > >=20 > > Sincerely yours=20 > > Li HUANG=20 > >=20 > >=20 > >=20 > >=20 > >=20 > >=20 > > On Wed, Sep 18, 2019, 21:05 Alexandre Petrescu=20 > > =20 > >> wrote:=20 > >=20 > >=C2=A0 =C2=A0 =C2=A0Dear Li,=20 > >=20 > >=C2=A0 =C2=A0 =C2=A0Thank you for the partial clarification you sen= t in private=20 > about 'apt=20 > >=C2=A0 =C2=A0 =C2=A0windows'.=C2=A0 I understand that by 'apt windo= ws' you mean 'apart=20 > from=20 > >=C2=A0 =C2=A0 =C2=A0windows', which means 'with the exception of Wi= ndows'.=20 > >=20 > >=C2=A0 =C2=A0 =C2=A0So, I think you mean that we in our draft have = a preference=20 > to run=20 > >=C2=A0 =C2=A0 =C2=A0DHCPv6-PD over the wireless interface, like wit= h a phone.=20 > You also=20 > >=C2=A0 =C2=A0 =C2=A0mean=20 > >=C2=A0 =C2=A0 =C2=A0that is ok.=C2=A0 You also mean that only Windo= ws runs DHCPv6 on a=20 > wired=20 > >=C2=A0 =C2=A0 =C2=A0interface; because Windows blocked DHCPv6 on ww= an and wlan=20 > interface.=20 > >=20 > >=C2=A0 =C2=A0 =C2=A0I think you are saying that this Windows blocki= ng DHCPv6-PD=20 > on the=20 > >=C2=A0 =C2=A0 =C2=A0wireless interfaces caused you a lot of trouble= , even after=20 > system=20 > >=C2=A0 =C2=A0 =C2=A0updates.=20 > >=20 > >=C2=A0 =C2=A0 =C2=A0Because of that I think you are asking that we = make and=20 > forward to=20 > >=C2=A0 =C2=A0 =C2=A0Microsoft, a request to make DHCPv6-PD on the w= ireless interface.=20 > >=20 > >=C2=A0 =C2=A0 =C2=A0I may be wrong though.=20 > >=20 > >=C2=A0 =C2=A0 =C2=A0I would like to ask you: do you know somebody a= t Microsoft=20 > who cares=20 > >=C2=A0 =C2=A0 =C2=A0about DHCPv6?=C2=A0 Or should I write simply to= =20 > mailto:postmaster@microsoft.com = =20 > >=C2=A0 =C2=A0 =C2=A0 >=20 > >=C2=A0 =C2=A0 =C2=A0hoping they will direct the message to people i= n charge?=20 > >=20 > >=C2=A0 =C2=A0 =C2=A0Alex=20 > >=20 > >=C2=A0 =C2=A0 =C2=A0Le 18/09/2019 =C3=A0 09:45, Alexandre Petrescu = a =C3=A9crit=C2=A0:=20 > >=C2=A0 =C2=A0 =C2=A0 > Dear Li,=20 > >=C2=A0 =C2=A0 =C2=A0 >=20 > >=C2=A0 =C2=A0 =C2=A0 > Please help me understand:=20 > >=C2=A0 =C2=A0 =C2=A0 >=20 > >=C2=A0 =C2=A0 =C2=A0 > What do you mean by 'apt windows'?=20 > >=C2=A0 =C2=A0 =C2=A0 >=20 > >=C2=A0 =C2=A0 =C2=A0 > Alex=20 > >=C2=A0 =C2=A0 =C2=A0 >=20 > >=C2=A0 =C2=A0 =C2=A0 > Le 18/09/2019 =C3=A0 07:39, Li HUANG a =C3= =A9crit=C2=A0:=20 > >=C2=A0 =C2=A0 =C2=A0 >> 09:http://39.hk =C2=A0S8=20 > Sept 17th 2019=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> Thank you dhcwg returning on this,=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> IoT either PTP to dhcpv6 pd server sounds v= ery like the=20 > running=20 > >=C2=A0 =C2=A0 =C2=A0 >> preferially to wireless, or phone networks = instead of apt=20 > >=C2=A0 =C2=A0 =C2=A0windows that=20 > >=C2=A0 =C2=A0 =C2=A0 >> blocked wwan, wlan services of it ...=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> To the kernel apart, OEM user would princip= le following=20 > its offered=20 > >=C2=A0 =C2=A0 =C2=A0 >> updates of system, in case dhcpv6 required = update, how would=20 > >=C2=A0 =C2=A0 =C2=A0clients=20 > >=C2=A0 =C2=A0 =C2=A0 >> obey protocol rcf 3315, 8415, 6260 whilst O= EM warranty=20 > contract=20 > >=C2=A0 =C2=A0 =C2=A0to get=20 > >=C2=A0 =C2=A0 =C2=A0 >> all none conflicts?=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> Microsoft is one putting on tracking, it mu= st be forwarded to=20 > >=C2=A0 =C2=A0 =C2=A0them about.=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> Let have your kind advises on it please .= =20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> Sincerely yours=20 > >=C2=A0 =C2=A0 =C2=A0 >> Li HUANG=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> On Tue, Sep 17, 2019, 10:48 Li HUANG =20 > >=C2=A0 =C2=A0 =C2=A0>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =20 > >>> wrote:=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 09:http://39.hk =20 > S8 Sept 17th 2019=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 Thank you dhcwg returnin= g on this,=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 IoT either PTP to dhcpv6= pd server sounds very like=20 > the running=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 preferially to wireless,= or phone networks instead of apt=20 > >=C2=A0 =C2=A0 =C2=A0windows=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 that blocked wwan, wlan = services of it ...=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 To the kernel apart, OEM= user would principle=20 > following its=20 > >=C2=A0 =C2=A0 =C2=A0offered=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 updates of system, in ca= se dhcpv6 required update,=20 > how would=20 > >=C2=A0 =C2=A0 =C2=A0clients=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 obey protocol rcf 3315, = 8415, 6260 whilst OEM warranty=20 > >=C2=A0 =C2=A0 =C2=A0contract to=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 get all none conflicts?= =20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 Microsoft is one putting= on tracking, it must be=20 > forwarded=20 > >=C2=A0 =C2=A0 =C2=A0to them=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 about.=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 Let have your kind advis= es on it please .=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 Sincerely yours=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 Li HUANG=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 On Tue, Sep 17, 2019, 00= :18 Alexandre Petrescu=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 =20 > >=C2=A0 =C2=A0 =C2=A0 >=20 > >=C2=A0 =C2=A0 =C2=A0 =20 > >=C2=A0 =C2=A0 =C2=A0 >>>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 wrote:=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Hello to participants in DHC WG,=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = One might be interested in this kernel=20 > implementation of=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = DHCPv6-PD parts.=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Yours,=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Alex and Dmytro=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = -------- Message transf=C3=A9r=C3=A9 --------=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Sujet=C2=A0:=C2=A0=C2=A0=C2=A0=C2=A0 Kernel implementation of DANIR for=20 > IoT Router -=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = DHCPv6-PD and ND=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Date=C2=A0:=C2=A0=C2=A0=C2=A0=C2=A0 Mon, 16 Sep 2019 09:21:46 +0200=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = De=C2=A0:=C2=A0=C2=A0=C2=A0=C2=A0 Alexandre Petrescu=20 > >=C2=A0 =C2=A0 =C2=A0 =20 > >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = =20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Pour=C2=A0: mailto:v6ops@ietf.org =20 > >=20 > >=C2=A0 =C2=A0 =C2=A0=20 > >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =20 > >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = =20 > >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Hi,=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = The kernel implementation of DANIR for IoT Router was=20 > >=C2=A0 =C2=A0 =C2=A0finally=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = working a few weeks ago.=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = It is an implementation of=20 > draft-shytyi-v6ops-danir-03.txt.=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = This is the right thing to do, instead of=20 > '64share' RFC7278.=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = In this video one can see the kernel in the IoT=20 > Router=20 > >=C2=A0 =C2=A0 =C2=A0issues a=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = DHCPv6 PD request on its egress and obtains a /56; it=20 > >=C2=A0 =C2=A0 =C2=A0then makes=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = several /64s out of it and subsequently sends RAs=20 > with=20 > >=C2=A0 =C2=A0 =C2=A0these on=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = the ingress interfaces.=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = The DHCPv6 server is took off-the-shelf.=C2=A0 The PDP=20 > part=20 > >=C2=A0 =C2=A0 =C2=A0is not=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = present in the IoT Router, but we expect it to=20 > work ok=20 > >=C2=A0 =C2=A0 =C2=A0on a ptp=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = link on a cellular network to a smartphone.=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = The video recorded the virtual machines output on the=20 > >=C2=A0 =C2=A0 =C2=A0IoT Router=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = (featured below), the Client device behind it,=20 > and the=20 > >=C2=A0 =C2=A0 =C2=A0DHCPv6-PD=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = server.=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> https://youtu.be/DymVQY7bCUM=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Yours,=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Alexandre PETRESCU and Dmytro SHYTYI=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = PS: we will soon post the source code on github.=20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = _______________________________________________=20 > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = dhcwg mailing list=20 > >=C2=A0 =C2=A0 =C2=A0 >> mailto:dhcwg@ietf.org =20 > >=20 > =20 > >=C2=A0 =C2=A0 =C2=A0>>=20 > >=C2=A0 =C2=A0 =C2=A0 >> https://www.ietf.org/mailman/listinfo/dhcwg= =20 > >=C2=A0 =C2=A0 =C2=A0 >>=20 > >=C2=A0 =C2=A0 =C2=A0 >=20 > >=C2=A0 =C2=A0 =C2=A0 > ____________________________________________= ___=20 > >=C2=A0 =C2=A0 =C2=A0 > dhcwg mailing list=20 > >=C2=A0 =C2=A0 =C2=A0 > mailto:dhcwg@ietf.org =20 > >=20 > >=C2=A0 =C2=A0 =C2=A0 > https://www.ietf.org/mailman/listinfo/dhcwg= =20 > >=20 > >=C2=A0 =C2=A0 =C2=A0_______________________________________________= =20 > >=C2=A0 =C2=A0 =C2=A0dhcwg mailing list=20 > > mailto:dhcwg@ietf.org >=20 > > https://www.ietf.org/mailman/listinfo/dhcwg=20 > >=20 > ------=_Part_905399_1466798737.1572383764300 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable =
Hello Li,

In the implementation = it is possible to change the DUID. You need to modify the linux kernel modu= le code and recompile it.
______________
Dmytro SHYTYI
---- On Sat, 19 Oct 2019 15:04:29 +0200 Li HUANG <bleuoisou@gmail.com> wrote ----

Oct. 19 2019=   21:00.hk w10p m800 Sg= |Rv


Thank you Dmytro and your g= roup for sharing document on the specific dhcpv6 related topics .  You= are welcome to share the dialog as well.

Hop= efully Linux/Uniz further  OS checking around  would be helped th= at from Dhcpv6DUID modifying unable remained to be the subnet concerning at= your convenience . Which was online arrow getting to you ...


Sincerely
= Li HUANG


On= Fri, Oct 18, 2019, 20:30 Dmytro Shytyi <dmytro@shytyi.net> wrote:

=
Hello Li, 

Don= 't you mind if we include in our disscussion the IETF v6ops working group?<= br>
In case you will not respond we will accept it as a permissio= n to share our disscussion with IETF Working group. 
Tha= nks.

         = ;                    &nbs= p;
Bien cordialement,
Dmytro SHYTYI

---- On Mon, 07 Oct 2019 14:32:46 +0200 Alexandre Petrescu <alexandre.petrescu@gmail.com> wrote ----

Li,
Below you will find are some answers from Dmytro.

I suggest we di= scuss this publicly on the v6ops WG email list, because
it is on that l= ist that others have responded (not on DHC WG email list).


1= #
Router - is a node, that performs forwarding. Router node is not a =
final destination of forwarded packets.

Diagram :
ISP--= -Switch (4 mac found : isp x2 , modem x1 , IANA x1)---- Router
(WAN1,2= , LAN 3 mac )---- PCs (wire, wireless , vpn mac)

&& DHCPv= 6DUID failed to keep the modified DHCPv6DUID eth.initial.mac

[Dmyt= ro] In the implementation DHVPvyDUID type field is set to "1" that
mean= se that DUID based on the link-layer Address Plus Time is used.

ex= ample from the DANIR KD6:

    dhp.kd6_sol->= my_client_id.duid_type =3D htons(1);

    dhp.k= d6_sol->my_client_id.hw_type =3D htons(1);

   &n= bsp;//DUID time convert kernel vertsion to compatible option value
    ver =3D utsname()->version;

 &nbs= p;  sscanf(ver, "%*s %*s %*s %*s %s %d %d:%d:%d %*s %d",ktime_mon= th,
&dh6_ktime.tm_mday, &dh6_ktime.tm_hour, &dh6_ktime.tm_m= in,
&dh6_ktime.tm_sec, &dh6_ktime.tm_year);

 &nbs= p;  dh6_ktime.tm_mon=3DGetMon(ktime_month);

  =   //pr_info( "EP KTIME: %d,%d,%d,%d,%d,%d", dh6_ktime.tm_mon, dh6_ktime.tm_mday, dh6_ktime.tm_hour, dh6_ktime.tm_min,
dh6_ktime.tm_s= ec, dh6_ktime.tm_year);

    kernelCompilationT= imeStartingFrom2000 =3D
convertTimeDateToSeconds(dh6_ktime);

&= nbsp;   duid_time=3Dhtonl( kernelCompilationTimeStartingFrom= 2000 & 0xffffffff);

    memcpy
(&(= dhp.kd6_sol->my_client_id.duid_time),&duid_time,sizeof(duid_time)); =

    memcpy (dhp.kd6_sol->my_client_id.my_hw= _addr, d->dev->dev_addr, 48);

2#
DHCP-PD only can be c= onfigured by a figure not IPv6 . Term of , when
example 2002:: input := : would make the app grey uncontinued.

&&
The Router= Avertisement Messages carry the GUNPs
that are further used by the st= ateless autoconfiguration mechanism
(SLAAC)

[Dmytro] RFC 4862= specifies the Router Advertisement processing process.

3#
G= lobal Unique Address (GUA) - is an address that is globally
available = and globally unique.

Diagram :
ISP---Switch (4 mac found : i= sp x2 , modem x1 , IANA x1)---- Router
(WAN1,2, LAN 3 mac )---- PCs (w= ire, wireless , vpn mac)

- GUA is DHCPv6DUID eth.mac ?
- whi= ch GUA to be mentioned at the draft ?
- Dhcpv6DUID using sub-prefix th= e same as the IPv4 exactly
working eth.mac , by ipconfig /all detected= when the vista replaced its
motherboard and having both new and initi= al eth.mac shown both?
- "After the DHCPv6 packet leaves the cellular = interface of
the IoT
Requesting Router via wireless OFDMA link, i= t reaches the element of
the access network which connects to the user= equipment (UEs) -
eNodeB station." likes there must be some wirele= ss "USB.sgw.isp"
host or , Dhcpv6 must be on Cellular host ? When one= of 4 mac switch
showing Nokia , which sometimes modem connecting arp = -a shown as well?
That would cause the pretty much lost functions of w= ire.router.map
always via as if owning speed lower much than the wirel= ess does have .

[Dmytro] GUA is IPv6 global unique address.
<= br> 4#
your freely downloadable kernal patch for Windows BIOS works ? =

[Dmytro] This is linux kernel module. Linux could be ran in the virtualbox in the windows environment.

5#
"The Hop Limit o= f packets that contain the DHCPv6 data MUST be 255 to
satisfy the prop= erties of the cellular infrastructure. To reach the
PGW from the UE t= he DHCPv6 packets are encapsulated by SGW into UDP/
IPv4 packets; this= encapsulation is for the GTP-U tunnel. The
corresponding decapsulati= on mechanism decreases the Hop Limit; when
the Hop Limit reaches value= 0 the packet is discarded; to avoid this
situation it is required to = put the Hop Limit value of the DHCPv6
Solicit equal to 255."

= - hop in switch default 64 decreased to 48 then the
SGW would not wor= k--> no dhcpv6 completed ---> no ipv6 get to switch
then Rv afte= r it ?


The packet will be discarded when Hop Limit will reach= 0. When Hop Limit
> 0 packet will not be discarded.


= Dmytro and Alex


Le 04/10/2019 =C3=A0 16:16, Li HUANG a =C3=A9= crit :
> Oct. 04 2019  22:12.hk <http://= 12.hk> w10p m800 Sg|Rv
> Attn:
>
> Authors' Add= resses
>
> Dmytro Shytyi
> SFR
> Pa= ris area , Ile-de-France
> France
>
> Email:ietf.dmytro@shyty= i.net <mailto:ietf.dmytro@shytyi.net>
> URI:http://dmytro.shytyi.net
> >
> Internet-DraDHCPv6_PD, PDP and NDP Implementation in IoT Rou= March 2019
>
>
> Alexandre Petrescu
> = CEA, LIST
> CEA Saclay
> Gif-sur-Yvette , Ile-de-Fran= ce 91190
> France
>
> Phone: +33169089223 > Email:Alexandre.Petrescu@cea.fr <mailto:Alexandre.Petrescu@cea.fr>
>= ;
>
> Good Day Alex and Dmytro,
>
>
> >
> Do read through draft and thank you for your sharing .
= >
> Some here could have not understood them well or clear , plea= se help in
> details off:
>
>
> 1#
> Rou= ter - is a node, that performs forwarding.  Router node is not a
&= gt;    final destination of forwarded packets.
>
>= Diagram :
> ISP---Switch (4 mac found : isp x2 , modem x1 , IANA x1= )---- Router
> (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , vpn ma= c)
>
> && DHCPv6DUID failed to keep the modified DHCP= v6DUID eth.initial.mac
>
>
>
> 2#
> DHCP= -PD only can be configured by a figure not IPv6 . Term of , when
> e= xample 2002:: input :: would make the app grey uncontinued.
>
&g= t; &&
> The Router Avertisement Messages carry the GUNPs >    that are further used by the stateless autoconfiguratio= n mechanism
>    (SLAAC)
>
>
>
&= gt;
> 3#
> Global Unique Address (GUA) - is an address that i= s globally
>    available and globally unique.
> <= br>> Diagram :
> ISP---Switch (4 mac found : isp x2 , modem x1 , = IANA x1)---- Router
> (WAN1,2, LAN 3 mac )---- PCs (wire, wireless ,= vpn mac)
>
>            - GUA= is DHCPv6DUID eth.mac ?
>            = ;- which GUA to be mentioned at the draft ?
>       =      - Dhcpv6DUID using sub-prefix the same as the IPv4 exac= tly
> working eth.mac , by ipconfig /all detected when the vista rep= laced its
> motherboard and having both new and initial eth.mac show= n both?
>            - "After the DHC= Pv6 packet leaves the cellular interface of
> the IoT
> &nbs= p;  Requesting Router via wireless OFDMA link, it reaches the element = of
>    the access network which connects to the user equ= ipment (UEs) -
>    eNodeB station."    likes t= here must be some wireless "USB.sgw.isp"
> host or ,  Dhcpv6 mu= st be on Cellular host ? When one of 4 mac switch
> showing Nokia , = which sometimes modem connecting arp -a shown as well?
> That would = cause the pretty much lost functions of wire.router.map
> always via= as if owning speed lower much than the wireless does have .
>
&= gt;
>
>
> 4#
> your freely downloadable kernal = patch for Windows BIOS works ?
>
>
>
>
>= 5#
> "The Hop Limit of packets that contain the DHCPv6 data MUST be= 255 to
>    satisfy the properties of the cellular infra= structure.  To reach the
>    PGW from the UE the DH= CPv6 packets are encapsulated by SGW into UDP/
>    IPv4 = packets; this encapsulation is for the GTP-U tunnel.  The
> &n= bsp;  corresponding decapsulation mechanism decreases the Hop Limit; w= hen
>    the Hop Limit reaches value 0 the packet is disc= arded; to avoid this
>    situation it is required to put= the Hop Limit value of the DHCPv6
>    Solicit equal to = 255."
>
>               &= nbsp;  - hop in switch default 64 decreased to 48 then the
> SG= W would not work--> no dhcpv6 completed ---> no ipv6 get to switch > then Rv after it ?
>
>
>
>
>
= > 6#
> "It is possible to use IPv6-over-PPP protocol [RFC1661], w= ith LCP,
>    between the ARM and the modem."
> >                   "ARM= has added a wealth of wireless technologies to
> its arsenal, but h= as no immediate plans to design a modem for mobile or
> Internet of = Things devices.
> The company offers CPU and GPU designs that are wi= dely used in
> smartphones and tablets. A missing piece is a cellula= r modem that ARM
> customers could license and put in mobile devices= ."
>
>
>             &n= bsp; - My modem is Fibre Huawai wire model, Rv, Sg all
> wirecable d= evices.
>
>
> 7#
> Could not have been able to = select one who would help Modify Dhcpv6DUID
> completed , sent email= to postmaste= r@microsoft.com
> <mailto:postmaster@microsoft.com> none replying .=
>
>
>
>
>
> Sincerely
> <= a target=3D"_blank" href=3D"mailto:bleuoisou@gmail.com">bleuoisou@gmail.com= <mailto:bl= euoisou@gmail.com>
>
> On Tue, Sep 24, 2019 at 1:27 AM= Alexandre Petrescu
> <alexandre.petrescu@gmail.com <mailto:alexandre.petres= cu@gmail.com>> wrote:
>
> Hi Li,
>
&= gt; IETF is not police of protocols: IETF can not force organisations t= o
> implement protocols or to fix bugs.  But we can discuss= about protocols
> at IETF.
>
> If Microsoft W= indows does not implement DHCPv6-PD on wireless links
> (like on= cellular), then I have two things to say.
>
> One thing = is to say that Microsoft programmers should not worry.  They
> = are not the only ones who do not implement DHCPv6-PD on wireless links.=
> There is also Qualcomm who refuses to.  It may, or it ma= y not be a
> problem.  But it is not only Microsoft.  = An it is a good topic to
> work on.
>
> The ot= her thing is to say that it is possible to run a linux virtual
> = machine on a Microsoft Windows real machine.  In that linux machine, =
> one
> can run DHCPv6-PD, on the wireless interface = of the real Microsoft
> Windows machine.  We propose open s= ource to achieve this.  It is
> available at
> https://dmytro.shytyi.net/kd6-danir-lite-ke= rnel-dhcpv6-pd-and-ndp-implementation/
>
> (we have t= ried to upload it to github, but we hit a 2Gb upload limit;
> th= is limit is a thing to complain to github, together with its lack of
&g= t; IPv6 access; and github is now a Microsoft organisation :-)
>=
> Alex and Dmytro
>
>
> Le 20/09/2019 = =C3=A0 01:55, Li HUANG a =C3=A9crit :
> > 08:47.hk <http://47.hk> <http://47.hk> S8 Sept 20 2019
> >
>= >
> > continued...,
> >
> = >
> > Thank you rephrasing our diagonose for assuring t= he points.
> >
> >
> > Wireles= s advance for dhcpv6 is imagined to experienced network maps.
> = > Which none wireless devices and plan isp at all decades.
> = >
> >
> > Microsoft who is handing rcf33= 15 according modified failures,  to
> > changed board O= EM machine, has reached wall to resolve it inside
> microsoft. <= br>> >
> >
> > Looking for some wh= ere who would enter the juridical like
> IEFT...etc.,
> = > in order to edge out what responsibility taken by who, if in such =
> > compromising rcf rules obeying  in conditions.
= > >
> >
> >
> > Sin= cerely yours
> > Li HUANG
> >
> &= gt;
> >
> >
> >
> = >
> > On Wed, Sep 18, 2019, 21:05 Alexandre Petrescu
= > > <alexandre.petrescu@gmail.com
> <mailto:alexandre.petresc= u@gmail.com>
> <mailto:alexandre.petrescu@gmail.com
>= ; <mailto:alexandre.petrescu@gmail.com>>> wrote:
> &= gt;
> >     Dear Li,
> >
&= gt; >     Thank you for the partial clarification yo= u sent in private
> about 'apt
> >    &= nbsp;windows'.  I understand that by 'apt windows' you mean 'apart > from
> >     windows', which means = 'with the exception of Windows'.
> >
> > = ;    So, I think you mean that we in our draft have a preference =
> to run
> >     DHCPv6-PD over th= e wireless interface, like with a phone.
> You also
> = >     mean
> >     that i= s ok.  You also mean that only Windows runs DHCPv6 on a
> w= ired
> >     interface; because Windows block= ed DHCPv6 on wwan and wlan
> interface.
> >
&= gt; >     I think you are saying that this Windows b= locking DHCPv6-PD
> on the
> >     = ;wireless interfaces caused you a lot of trouble, even after
> s= ystem
> >     updates.
> > > >     Because of that I think you are asking t= hat we make and
> forward to
> >    &nb= sp;Microsoft, a request to make DHCPv6-PD on the wireless interface.
&g= t; >
> >     I may be wrong though. <= br>> >
> >     I would like to ask= you: do you know somebody at Microsoft
> who cares
> = >     about DHCPv6?  Or should I write simply to <= br>> postm= aster@microsoft.com <mailto:postmaster@microsoft.com>
> >&n= bsp;    <mailto:postmaster@microsoft.com
> <mailto:postmaster@microsof= t.com>>
> >     hoping they will di= rect the message to people in charge?
> >
> >=      Alex
> >
> >   =  Le 18/09/2019 =C3=A0 09:45, Alexandre Petrescu a =C3=A9crit : <= br>> >      > Dear Li,
> > = ;     >
> >      > Please hel= p me understand:
> >      >
> = >      > What do you mean by 'apt windows'?
> = >      >
> >      &g= t; Alex
> >      >
> > = ;     > Le 18/09/2019 =C3=A0 07:39, Li HUANG a =C3=A9crit = ;:
> >      >> 09:39.hk <http://39.hk> <htt= p://39.hk> <http://39= .hk/> S8
> Sept 17th 2019
> >  &= nbsp;   >>
> >      >>
&= gt; >      >> Thank you dhcwg returning on thi= s,
> >      >>
> > =     >>
> >      >> > >      >> IoT either PTP to dhcpv6 pd se= rver sounds very like the
> running
> >  &nb= sp;   >> preferially to wireless, or phone networks instead of a= pt
> >     windows that
> >&nb= sp;     >> blocked wwan, wlan services of it ...
> = >      >>
> >     = ; >>
> >      >> To the kernel ap= art, OEM user would principle following
> its offered
> = >      >> updates of system, in case dhcpv6 req= uired update, how would
> >     clients
&= gt; >      >> obey protocol rcf 3315, 8415, 62= 60 whilst OEM warranty
> contract
> >   = ;  to get
> >      >> all none con= flicts?
> >      >>
> >&= nbsp;     >>
> >      >>= ; Microsoft is one putting on tracking, it must be forwarded to
> = >     them about.
> >    &nbs= p; >>
> >      >>
> &= gt;      >> Let have your kind advises on it please . =
> >      >>
> >  &n= bsp;   >>
> >      >>
&g= t; >      >> Sincerely yours
> >= ;      >> Li HUANG
> >    &nb= sp; >>
> >      >> On Tue, Sep 17= , 2019, 10:48 Li HUANG <bleuoisou@gmail.com
> <mailto:bleuoisou@gmail.com>
>= >     <mailto:bleuoisou@gmail.com <mailto:bleuoisou@gmail.com>> > >      >> <mailto:bleuoisou@gmail.com <mailto:bleuoisou@gmail.com<= /a>>
> <mailto:bleuoisou@gmail.com <mailto:bleuoisou@gmail.com>>>> wro= te:
> >      >>
> > = ;     >>     09:39.hk <htt= p://39.hk> <http://39.= hk> <http://39.hk&= gt;
> S8 Sept 17th 2019
> >      &= gt;>
> >      >>
> >&= nbsp;     >>     Thank you dhcwg returning o= n this,
> >      >>
> >&= nbsp;     >>
> >      >>= ;
> >      >>     IoT ei= ther PTP to dhcpv6 pd server sounds very like
> the running
= > >      >>     preferially = to wireless, or phone networks instead of apt
> >  &nbs= p;  windows
> >      >>  &nbs= p;  that blocked wwan, wlan services of it ...
> > = ;     >>
> >      >> > >      >>     To the ker= nel apart, OEM user would principle
> following its
> = >     offered
> >      &g= t;>     updates of system, in case dhcpv6 required update= ,
> how would
> >     clients
= > >      >>     obey protoco= l rcf 3315, 8415, 6260 whilst OEM warranty
> >    =  contract to
> >      >>  &nb= sp;  get all none conflicts?
> >      &g= t;>
> >      >>
> >&n= bsp;     >>     Microsoft is one putting on = tracking, it must be
> forwarded
> >   =  to them
> >      >>   =   about.
> >      >>
> = >      >>
> >      &= gt;>     Let have your kind advises on it please .
&g= t; >      >>
> >    &= nbsp; >>
> >      >>
> = >      >>     Sincerely yours
= > >      >>     Li HUANG > >      >>
> >   = ;   >>
> >      >>  &nb= sp;  On Tue, Sep 17, 2019, 00:18 Alexandre Petrescu
> >=       >>     <alexandre.petrescu@gmail.com
> <mailto:alexandre.petrescu@gmail.com>
> >&nb= sp;    <mailto:alexandre.petrescu@gmail.com
> <mailto= :alexandr= e.petrescu@gmail.com>>
> >     <= mailto:al= exandre.petrescu@gmail.com
> <mailto:alexandre.petrescu@gmail.com<= /a>>
> >     <mailto:alexandre.petrescu@gmail.co= m
> <mailto:alexandre.petrescu@gmail.com>>>>
&= gt; >      >>     wrote:
&g= t; >      >>
> >    &= nbsp; >>         Hello to particip= ants in DHC WG,
> >      >>
> = >      >>       &n= bsp; One might be interested in this kernel
> implementation of =
> >      >>     &nb= sp;   DHCPv6-PD parts.
> >      >= ;>
> >      >>    &nb= sp;    Yours,
> >      >>= ;
> >      >>     &= nbsp;   Alex and Dmytro
> >      &g= t;>
> >      >>
> >&n= bsp;     >>         ----= ---- Message transf=C3=A9r=C3=A9 --------
> >    &= nbsp; >>         Sujet : = ;    Kernel implementation of DANIR for
> IoT Rou= ter -
> >      >>    &nb= sp;    DHCPv6-PD and ND
> >    &nbs= p; >>         Date : &nb= sp;   Mon, 16 Sep 2019 09:21:46 +0200
> >  &n= bsp;   >>         De :&n= bsp;    Alexandre Petrescu
> >    &= nbsp;<= alexandre.petrescu@gmail.com
> <mailto:alexandre.petrescu@gmail.co= m>
> <mailto:alexandre.petrescu@gmail.com
> <= mailto:al= exandre.petrescu@gmail.com>>>
> >    =   >>         <mailto:alexandre.petr= escu@gmail.com
> <mailto:alexandre.petrescu@gmail.com>
= > >     <mailto:alexandre.petrescu@gmail.com
&g= t; <mailto:alexandre.petrescu@gmail.com>>>
> >&nb= sp;     >>         Pour&= nbsp;: v6ops@ietf.org <mailto:v6ops@iet= f.org>
> <mailto:v6ops@ietf.org <mailto:v6ops@ietf.org>>
> >  &= nbsp;  <mailto:= v6ops@ietf.org <mailto:v6ops@ietf.org>
> <mailto:v6ops@ietf.org <mailto:v6ops@ietf.org>>>
&g= t; >      >> <v6ops@ietf.org <mailto:v6ops@ietf.org>
> <mailt= o:v6ops@ietf.org &l= t;mailto:v6ops@ietf.org= >>>
> >      >>  &nbs= p;      <mailto:v6ops@ietf.org <mailto:v6ops@ietf.org>
> <mailto:= v6ops@ietf.org <= mailto:v6ops@ietf.org>>>
> >      >>
> = >      >>
> >      = >>
> >      >>    =      Hi,
> >      >>= ;
> >      >>     &= nbsp;   The kernel implementation of DANIR for IoT Router was > >     finally
> >    =   >>         working a few we= eks ago.
> >      >>
> >=       >>         It= is an implementation of
> draft-shytyi-v6ops-danir-03.txt.
= > >      >>      &= nbsp;  This is the right thing to do, instead of
> '64share= ' RFC7278.
> >      >>
> &g= t;      >>         = In this video one can see the kernel in the IoT
> Router
>= ; >     issues a
> >    &nb= sp; >>         DHCPv6 PD request o= n its egress and obtains a /56; it
> >     th= en makes
> >      >>    =      several /64s out of it and subsequently sends RAs =
> with
> >     these on
> = >      >>       &= nbsp; the ingress interfaces.
> >      >&g= t;
> >      >>     =     The DHCPv6 server is took off-the-shelf.  The PDP <= br>> part
> >     is not
> = >      >>       &nbs= p; present in the IoT Router, but we expect it to
> work ok
= > >     on a ptp
> >    =   >>         link on a cellul= ar network to a smartphone.
> >      >>=
> >      >>     &n= bsp;   The video recorded the virtual machines output on the
= > >     IoT Router
> >   = ;   >>         (featured belo= w), the Client device behind it,
> and the
> >&nb= sp;    DHCPv6-PD
> >      >> =         server.
> > =     >>
> >      >> https://youtu.be/Dy= mVQY7bCUM
> >      >>
> = >      >>
> >      &= gt;>         Yours,
> >= ;      >>
> >      >&= gt;         Alexandre PETRESCU and Dmytr= o SHYTYI
> >      >>
> >=       >>         PS= : we will soon post the source code on github.
> >  &nb= sp;   >>
> >      >>  &= nbsp;      _______________________________________= ________
> >      >>    =      dhcwg mailing list
> >   =   >> dhcwg@= ietf.org <mailto:dhcwg@ietf.org>
> <mailto:dhcwg@ietf.org <mailto:dhcwg@ietf.org>>
> &= lt;mailto:dhcwg@ietf.or= g <mailto:dhcwg@= ietf.org>
> >     <mailto:dhcwg@ietf.org <mailto:dhcwg@ietf.org>>= ;>
> >      >> https://www.ietf.org/m= ailman/listinfo/dhcwg
> >      >> <= br>> >      >
> >    =   > _______________________________________________
> &= gt;      > dhcwg mailing list
> >  &n= bsp;   > dhcwg@= ietf.org <mailto:dhcwg@ietf.org>
> <mailto:dhcwg@ietf.org <mailto:dhcwg@ietf.org>>
> = >      > https://www.ietf.org/mailman/listinfo/dhcwg
> >
> >     ________________= _______________________________
> >     dhcwg= mailing list
> > dhcwg@ietf.org <mailto:dhcwg@ietf.org> <mailto:dhcwg@ietf.org
> <mailto:dhcwg@ietf.org>> =
> > https://www.ietf.org/mailman/listinfo/dhcwg
> = >
>

<= br>



------=_Part_905399_1466798737.1572383764300-- From nobody Tue Oct 29 15:29:31 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44337120072 for ; Tue, 29 Oct 2019 15:29:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.748 X-Spam-Level: X-Spam-Status: No, score=-1.748 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kr9lrl0oi_pE for ; Tue, 29 Oct 2019 15:29:27 -0700 (PDT) Received: from mail-qk1-x733.google.com (mail-qk1-x733.google.com [IPv6:2607:f8b0:4864:20::733]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69F6B12001E for ; Tue, 29 Oct 2019 15:29:27 -0700 (PDT) Received: by mail-qk1-x733.google.com with SMTP id e2so601943qkn.5 for ; Tue, 29 Oct 2019 15:29:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=mT1x45LoiMe26EcmWhcGpTkrdv/upVOfqzPaZS4B8nU=; b=dMk13FIiroskm/fjIkW1tw/BkIYjNkohHO6ezelUPmkkjHpb8ydNAaZ54WKUrTBaNh mxbXHhMt6LvhzWlV/Ml+g0sB1jwj+atfeX54xIMdE4IDZGwOk/V1dSZZiXZk963VyYDP hma3s7GT/xOkQ2ViMn3BjXo/SqFOo0PkaQjmbCjtWxAZjuVoOclIefI4VCT+k++Zj5B4 J1IpkWhP7KMsLiTX1dj9QBS73a33sgNzu3+5yOPHr2JhWx7CDTgOHnqpVTZ297yc11Pp koHi3kCW7PqKr1ZL6YyJwJPtc35Tx3wnJnZ8g9Ibpa4NgtE3OSFIkS2fYvcfCafECqHC C1qA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=mT1x45LoiMe26EcmWhcGpTkrdv/upVOfqzPaZS4B8nU=; b=UUygn1gWfw3m2RKbAPZPstDyISE85fc8XVjgRSGO83m5ezdU6GFIWkbBjwNfW50L7Y nSFl/auMhVLz9+g1Pk2JtFCRslT3YAYoK2iT8t7hYrQHztRV1QFhmHFOxGo1he5DV8bN YgDowhPYSoSrbr7oQkcMakh7bK21pDfkaneUr2h3/EH9HTGgTuJMUXvp2WuqZHVFRUQ1 nsHDCY7Tv2SrSTRztz56eLjTiIS8R3ThDUSVBcfqcru4D197xFjnsmU0hmkPYa9ge2qH MdIQCQyBomIi389kbq0zAK3FX2qiyD7CO089GaYCakrYMq+e6DBimIpPXyGtG5FjDk2Y 1Q0g== X-Gm-Message-State: APjAAAWMvQ56y1DUtQpY2tm7sFheFrnJxL7NwDGsA9Hgt9IsiSMYIoyv wP+Cew82k++3IV83RjDSXMb6I7O32FRsC/jYbpPYrA== X-Google-Smtp-Source: APXvYqwWhZOlv1wPr7Ka382S5K3NuA4WNheRWUYb5EXXXsfU+LeZIhoICGsxYdV8AGJhJZQm0H5B5EeKw/TCuGJxYHE= X-Received: by 2002:a05:620a:74b:: with SMTP id i11mr23509276qki.417.1572388166069; Tue, 29 Oct 2019 15:29:26 -0700 (PDT) MIME-Version: 1.0 References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <40E27B00-5C6F-4704-9554-2DC532F854BE@employees.org> In-Reply-To: <40E27B00-5C6F-4704-9554-2DC532F854BE@employees.org> From: Jen Linkova Date: Wed, 30 Oct 2019 09:29:14 +1100 Message-ID: To: Ole Troan Cc: Mark Smith , v6ops list Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 22:29:29 -0000 On Tue, Oct 29, 2019 at 9:36 AM Ole Troan wrote: > >> Right. Instant/flash renumbering is not supported in IP networks. > > > > Oh. Surprise. After I've been doing it all the time....;) > > Oh great. So which services do you run in the network? Any issue with sho= rt DNS ttls? Well, I'm quite lucky. First of all, I'm mostly renumbering networks containing "clients" - networks which rarely need incoming connections. > Or do you only do this with MP-TCP / QUIC or only mosh style applications= with a built in session layer? > I presume you have a routed network with multiple routers and links as we= ll? Boring topologies mostly - two routers to provide first-hop redundancy, two uplinks. And - after I've done quite a bit of renumbering both dual-stack and single-stack segments - IPv4 renumbering is much, much worse. Sometimes you have to flap switchports. >Ole, not sarcastic at all. ;-) > > > > > > Actually it would be helpful to define requirements/expectations. I re= ad it as: > > R1: [MUST HAVE] after the renumbering host is able to open new connecti= ons > > R2: [NICE TO HAVE] old connections survive the renumbering. > > > > IMHO we shall at least enumerate the most common scenarios where R1 is > > not happening and look what can be done here. > > If we have a scenario when hosts end up with totally broken connectivit= y we can: > > 1) say 'oh just don't do that' - however before we do this (=3D=3D prod= uce > > some BCPs) it's worth analysing if it's feasible and, more > > importantly: > > --- is the party affected by the issue is the same party which is > > supposed to follow the BCP? > > --- are we talking about 'fix all hosts'? (when did we deal last > > time with the scenario 'a machine re-authenticated via 802.1x > > successfully, changed the VLAN but kept the old IPv6 prefix'? > > 2) See if there is a way to mitigate at least part of the problem by > > making the protocol more robust (isn't all DNA work is actually in the > > same problem space?) > > > >> IPv6 does nothing to help with this, well, assuming a network hiding b= ehind NAT, it makes it harder. > >> Apart from "does not work", what more can the IETF say or do here? > > > > Try to make the Internet work better, maybe? :) > > > >>> On 24 Oct 2019, at 12:43, Mark Smith wrote: > >>> > >>> > >>> > >>> On Thu, 24 Oct 2019, 20:59 Trevor Warwick, wrote= : > >>> > >>> On Thu, 24 Oct 2019 at 09:18, Mark Smith wro= te: > >>> > >>> > >>> I thought about this in the exact context of the scenario of this dra= ft. Although the design of the broadband deployment I worked on always plan= ned to give out stable prefixes, I worked through this scenario and realise= d that so many complex issues disappear if you provide stable prefixes. > >>> > >>> Fundamentally, if an ISP is selling an always on link to the same loc= ation, then the addressing should be as permanent as the link delivery loca= tion is. > >>> > >>> > >>> If you're an ISP today, and using DHCPv6-PD to hand out IPv6 prefixes= , what are the possible scenarios if you don't try hard to keep the prefixe= s stable? > >>> > >>> Why don't you want to try hard? Not trying hard gives customers a bad= experience. They're paying you to try hard to give them the best suitable = service you can give them. > >>> > >>> > >>> - You could be running a closed environment where all customers are f= orced to use your CPE, in which case you can make sure that your CPE has va= rious hacks added to try to cope with prefix instability and avoid custom= er hosts experiencing connectivity issues when prefixes change. Maybe you c= an make this work well enough, and advanced customers who don't want to use= your CPE are just out of luck. > >>> > >>> - If you're in an environment where customers can chose their own CPE= , then it seems almost guaranteed that there will be connectivity problems = when the prefix changes, because many CPE implementations don't handle this= situation at all. So you're then relying on hosts falling back seamlessly = to IPv4, in order to continue to have connectivity. In which case, I'd wond= er why you're bothering to provide an IPv6 service in the first place. > >>> > >>> See what I said about selling an always on service to a fixed locatio= n, and the addressing having the same amount of stability as the service an= d link itself. > >>> > >>> The reason this problem really exists is that ISPs have fundamentally= continued to treat residential, always on broadband customers although the= y were still dial up customers. Nothing has changed - per BRAS (NAS) IP add= ress pools, pool route aggregation at the router, customer gets a single IP= v4 address when they attach, that can change each time they attach. PPPoE i= s making Ethernet connectivity resemble dial up connectivity. > >>> > >>> Now this dial up model is trying to be applied to semi-permanent IPv6= services, where it's even less applicable now that customers get their own= routed address space on a semi-permanent link. > >>> > >>> Treat all customers as routed subnet SOHO customers, so they get the = same prefix regardless of which BRAS they attach to. Move the route aggrega= tion boundary to a higher level to e.g. a cluster of BRASes, or a region. > >>> > >>> Use an IPv6 address provisioning model that suites and matches the se= rvice they're paying for, not a nearly 30 year old dial up model. > >>> > >>> If your customers can BYO their CPE, then stable prefixes are the onl= y choice. > >>> > >>> See slide 6. > >>> > >>> Residential IPv6 CPE - What Not to Do and Other Observations > >>> https://www.slideshare.net/mobile/markzzzsmith/residential-ipv6-cpe-w= hat-not-to-do-and-other-observations > >>> > >>> > >>> > >>> > >>> I do think this is an important problem that needs to be solved, for = this context and the others mentioned in the draft. > >>> > >>> > >>> _______________________________________________ > >>> v6ops mailing list > >>> v6ops@ietf.org > >>> https://www.ietf.org/mailman/listinfo/v6ops > >>> _______________________________________________ > >>> v6ops mailing list > >>> v6ops@ietf.org > >>> https://www.ietf.org/mailman/listinfo/v6ops > >> > >> _______________________________________________ > >> v6ops mailing list > >> v6ops@ietf.org > >> https://www.ietf.org/mailman/listinfo/v6ops > > > > > > > > -- > > SY, Jen Linkova aka Furry > -- SY, Jen Linkova aka Furry From nobody Tue Oct 29 17:55:28 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB34312009E for ; Tue, 29 Oct 2019 17:55:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.748 X-Spam-Level: X-Spam-Status: No, score=-1.748 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 24Y-FHeUee13 for ; Tue, 29 Oct 2019 17:55:24 -0700 (PDT) Received: from mail-qk1-x735.google.com (mail-qk1-x735.google.com [IPv6:2607:f8b0:4864:20::735]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B188120052 for ; Tue, 29 Oct 2019 17:55:24 -0700 (PDT) Received: by mail-qk1-x735.google.com with SMTP id y81so916842qkb.7 for ; Tue, 29 Oct 2019 17:55:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=RTRQsdp0r0D4va+xjvH1Mimn7RNU30uh9VU7NVV9+d4=; b=Ivb9d7zIlrUa4fDH6Hdo0YtA6c7hh8S7OUhYKxyrCMd3Q4xDLy8yyvF5d7v07mNO1n lyWWNjyKVeMoE0Ka34yl3tZbLTABy2DDjiKcB/RkIHDfskp47GwXDrMAJvOfiRZjL/61 0PaeKCSd6SdB8pXiXp2jQTv0eaiJhzfJJ1yfR1T9NNuOBt/HLm+J5sQqXAAojJXkzEHU eSOGHuCm3L5642VJza41oKJmkDU3DB5RF2pL+ah1U7wA5oclFIflykxWJr8F+YflLtP9 xuSiqv6iPktCkeGhSv+EMrgE0RZKwSgPqLKpXF5i41a8bH54hMdOBlqNUv80oEDA1BRf /EEg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=RTRQsdp0r0D4va+xjvH1Mimn7RNU30uh9VU7NVV9+d4=; b=uOIZ3uGyFFqN9xQEGNOkT8KDR/UAdJlYb1bDkBIwutbuH+CnxceIQzgg2yQF+lKAoU VnR7PUpWZfpLVdWFpSApm1RaTVBMZToHuYtNhOtmO14ooWT6bD78iGSzLftYHDVXkY0b jzcbyEC/gcBiae0Dmvoun+Od6M7oTnkdUI0L/kkM0vJwvnPTPLGi7/hfa7CRh7nG7vJy nire5hyNh63gpkXM0LXN4pmuslmPFgSF5mHxt7GHratw1V+WUswVNvJeqibIYZuQ1by6 V1hguBZI1Qyy/P6XHGVlNnM7pcmT4J97zdUDikod3Sh33tPlqPBSIGnnaMOv9eXrES6o Dk5A== X-Gm-Message-State: APjAAAU6bGQcIzQUVF4T05GNEHV9qWafUAB0iD/a1NQYkFheFZiJ6mf+ FBnojo7zp2vjJBWXg+AedNSu78/kgAF1DhpDPpA= X-Google-Smtp-Source: APXvYqzSD0Pxwzm4UINBLqZlKQ25rIMZMEYtWpREb+V50elJuAGplFpi+jqI6DXfrGkfq4z2nypc+OxP+o3Ge6hb9A0= X-Received: by 2002:a37:d0b:: with SMTP id 11mr23960807qkn.466.1572396923143; Tue, 29 Oct 2019 17:55:23 -0700 (PDT) MIME-Version: 1.0 References: <848BA3B3-36B4-4C42-86D0-88759BC45D5A@employees.org> <678dda9d-03f6-1dcc-4a4e-e3889435e656@gmail.com> In-Reply-To: <678dda9d-03f6-1dcc-4a4e-e3889435e656@gmail.com> From: Jen Linkova Date: Wed, 30 Oct 2019 11:55:11 +1100 Message-ID: To: Brian E Carpenter Cc: V6 Ops List Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 00:55:26 -0000 On Tue, Oct 29, 2019 at 12:22 PM Brian E Carpenter wrote: > > Actually it would be helpful to define requirements/expectations. I read it as: > > R1: [MUST HAVE] after the renumbering host is able to open new connections > > How long after? Milliseconds, seconds, or minutes? It makes a lot of difference to the solution. As soon as the host gets the new address configured. If the address is assigned to the host interface and applications can use that address to send packets - then those packets (and return traffic) should not be dropped by the network unless it's an explicit (e.g. security) policy. > > R2: [NICE TO HAVE] old connections survive the renumbering. > > I believe that when the operators refused to consider SHIM6 ten years ago, they were telling us that they really, truly do not care about that. So this becomes an application layer robustness issue. Actually I kind of agree. I mean - there are many reasons why a connection might get stuck/interrupted. Devices can fail, can be rebooted etc. It would be nice if applications could take care of this (and some of them do..) In 'home CPE, DHCP-PD' case we are talking about renumbering happening as a result of a CPE reboot/failure. So connections would suffer anyway. Other flash renumbering cases are smth which is not happening to the network on regular basis - so (IMHO) it's OK for it to be slightly intrusive. > > Brian > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops -- SY, Jen Linkova aka Furry From nobody Tue Oct 29 19:57:14 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BED8B12007A for ; Tue, 29 Oct 2019 19:57:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.748 X-Spam-Level: X-Spam-Status: No, score=-0.748 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lCRPvjWEsPvq for ; Tue, 29 Oct 2019 19:57:11 -0700 (PDT) Received: from mail-qt1-x833.google.com (mail-qt1-x833.google.com [IPv6:2607:f8b0:4864:20::833]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18BEF120129 for ; Tue, 29 Oct 2019 19:57:11 -0700 (PDT) Received: by mail-qt1-x833.google.com with SMTP id y39so1285246qty.0 for ; Tue, 29 Oct 2019 19:57:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=pBwKQriN5PILVx4EsPzAvhNO0iXXEkDdrLU046AVfb0=; b=l5jCPVs/vwQc3jjy+3B+1S2ZED8woUF36oWb3JXNP4mzEqqWz/puaBw+540UWCArlg upx3FX8kWJUpYd+HfquClBc4l5ipOBJlIEQMSeqdEjUMwKvYnPBwxf8tOQMZRttb93hO 4F/2cpzvt1Ocp8M38fdtFKC1pKbEuXnYpKCEL5JJkv72V7sN/l5Tvw1skohoxfBIUH3e Fx8IP/yp6Lv2ouUtwBOKaZQ48hN4niPk0cjQvBaO5iH0PFxKQFrfvluIwQT96BDEEHzO ScNCHIK8rSLhh8ZkO05FhKUin+/PzKP2iqVXKrvO4LhvsaFgewKZynMEu3KKioupVCOm oYiw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=pBwKQriN5PILVx4EsPzAvhNO0iXXEkDdrLU046AVfb0=; b=G/ifaWsRPjterhnDnFrYRbBeiUXPzwAm1LKH7kcSWzKHgivKEiRW4lwaperc8dLRGv dknj4FjeRVH0pvD2htHa6fvzbFydZfYWCvM9ENvxYtVZxoJSWlu8DQ9A/HKO1uUVYv0/ lS2qXUraj29mxKvSR9qGxzBVf5H9IxVs3u1KShq4rCTaou5wdowzSmhO6Uu28N3i1OZk vGMNLF2C3/jNpQ3YofK5VzpM0MhMC42TgAO3lrWK8EjLa6+TU3aF4wegdZ7c0PG2pq2t lYCipxdQ2cIrBAcBGfwEWTgFOoo8Yslq716wnLf+I73YMxPycFbUiNgVmAgDLI6vxw0K cJpg== X-Gm-Message-State: APjAAAWwYVf1H9N0t4WJNs3K/KQ7/RJwy3zSC9NgcZ5Z1NOs2/s2OTQo WJMvxF6Aq1W7vTl1wxrbSfPFS9eW3dlAOaFk2jg= X-Google-Smtp-Source: APXvYqybenAMxY327qVGcf2UCSJ17Y49S8sLgbrtqTWOEQlP3dIKTAxeHZPF6szcYiVH0MCZBFE0vTLNkCzc6+QVmaA= X-Received: by 2002:ac8:385d:: with SMTP id r29mr2947323qtb.52.1572404228803; Tue, 29 Oct 2019 19:57:08 -0700 (PDT) MIME-Version: 1.0 References: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> In-Reply-To: From: Jen Linkova Date: Wed, 30 Oct 2019 13:56:57 +1100 Message-ID: To: Alexandre Petrescu Cc: "Rajiv Asati (rajiva)" , Ted Lemon , "v6ops@ietf.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 02:57:13 -0000 On Wed, Oct 30, 2019 at 5:32 AM Alexandre Petrescu wrote: > At high level, it makes sense to require to allow simultaneous DHCP and > SLAAC usage on a same subnet; a private email suggests the same. > With that, Android and Windows would live ok side-by-side on same subnet. I'm still not sure I understand why you need DHCP for Windows...Unless you got that Windows in an antique shop...;) I have plenty of Windows machines in the network (in an IPv6-only one as we= ll). > Further, thinking about how to implement the req, one would wonder > whether the prefix in PIO with A flag set in an RA with M set, would be > the same as the prefix used by the DHCP Server to form and deliver > addresses? > (if yes, I think that is difficult to achieve: (1) difficult to put same > prefix in the software implementing RA sending, and in the DHCP server > connfig files Could you elaborate on this one? How is "putting the prefix in the software implementing RA sending" different from "configuring a prefix on a router interface"? It's like saying 'difficult to configure the same IPv4 or IPv6 prefix on the router interface and on DHCP server' >and (2) difficult to make sure the Server does not form an > address for a Client, address that a Host has already formed in the same > prefix). That's could be done to the some degree of confidence - if the pool is using the first addresses in the prefix (let's say, the highest 50 bits if the interface ID set to 0) then it's rather unlikely that such interface ID would be generated by SLAAC. However that's a good point, thanks for another item in my collection of 'why I don't need DHCPv6' reasons ;)) > (because of that reason, I think that trying to implement that > requirement would lead to designating a prefix for SLAAC and another > prefix for DHCP; that may sound a little bit as a waste). I'm sure operating such a network will be...eh...entertaining... > >> On Oct 29, 2019, at 7:22 AM, Ted Lemon wrote: > >> > >> =EF=BB=BF On Oct 29, 2019, at 6:37 AM, Alexandre Petrescu > >> >> > wrote: > >>> Well no. After activating DHCPv6 on CPE the CPE sent three RAs > >>> changing the Lifetime and flipping the M(anaged) and > >>> A(utonomous) flags. > >>> > >>> Packet dumps available upon request. > >> > >> That=E2=80=99s the problem. It should turn on the managed bit but no= t > >> turn off the autonomous bit. The two can validly be on at the > >> same time. > >> > >> Of course, since their meanings are deprecated, it=E2=80=99s not too > >> surprising that implementations get this wrong. > >> > >> _______________________________________________ v6ops mailing list > >> v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops --=20 SY, Jen Linkova aka Furry From nobody Tue Oct 29 20:35:13 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC5D7120273 for ; Tue, 29 Oct 2019 20:35:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=QJMmiWME; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=mD65JnU8 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Deeb88TTFNsL for ; Tue, 29 Oct 2019 20:35:10 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3ADF1207FD for ; Tue, 29 Oct 2019 20:35:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4008; q=dns/txt; s=iport; t=1572406510; x=1573616110; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=hkgpXpLhYHIfNH4QwpI+cQTaCIn1Mka9tX46fATqBMs=; b=QJMmiWMEWCTdtNKcWd8Tr7m88wQupE+Uf2y47vxcdEawOP06xSLUtQ0H Bj8U5Uk+Q3ANmc3MoDbQLRubvaxuyvj+W1qn+f036g5kH/PJ6tPY2Rmpa dmMSBfUtGRI4jh4ykFCYNdUN4z+tJ0dhninYn9x7wmblKXE4os9SI5/1M 0=; IronPort-PHdr: =?us-ascii?q?9a23=3A9jNS1xHUAsh1d5MY0eRmoZ1GYnJ96bzpIg4Y7I?= =?us-ascii?q?YmgLtSc6Oluo7vJ1Hb+e4w3Q3SRYuO7fVChqKWqK3mVWEaqbe5+HEZON0pNV?= =?us-ascii?q?cejNkO2QkpAcqLE0r+eeTjbS0kFexJVURu+DewNk0GUMs=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AKAAD/A7ld/5NdJa1kGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYFpBQEBAQELAYFKUAVsWCAECyqEKINGA4Rahhu?= =?us-ascii?q?CXolVjhaBLhSBEANUCQEBAQwBARgLCgIBAYFMgnQCF4NCJDQJDgIDCQEBBAE?= =?us-ascii?q?BAQIBBQRthTcMhVEBAQEBAgEBARAREQwBASwLAQsEAgEIEQMBAgECAhkKAwI?= =?us-ascii?q?CAh8GCxQBAgEFCAIEAQ0FIoMAAYJGAw4gAQIMqBwCgTiIYHWBMoJ+AQEFgTQ?= =?us-ascii?q?BgRSCSw0LghcDBoEOKAGMEBiBQD+BOB+CTD6CG0cBAQIBgSsBEgEJLYJ5MoI?= =?us-ascii?q?sj3udMkEKgiSHEIoShA0bgjyXII4/gUCGbIIRjw4CBAIEBQIOAQEFgVI5Z3F?= =?us-ascii?q?wFTsqAYJBUBAUgwaDc4UUhT90AYEni1+CMAEB?= X-IronPort-AV: E=Sophos;i="5.68,245,1569283200"; d="scan'208";a="653860130" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 30 Oct 2019 03:35:08 +0000 Received: from XCH-RCD-009.cisco.com (xch-rcd-009.cisco.com [173.37.102.19]) by rcdn-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id x9U3Z8f3029391 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 30 Oct 2019 03:35:08 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-009.cisco.com (173.37.102.19) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 29 Oct 2019 22:35:08 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 29 Oct 2019 22:35:07 -0500 Received: from NAM03-CO1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 29 Oct 2019 23:35:07 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HWFoeZd5SeDIYbg5s6iIxnunAWetgHPWAyx8ZGIFJWeITPJ4uJvLlO/sRgxJCnTJGQuQcxGShnCjJeHPofUbre9R9WM9NoC4nQcMjSIQkhclfnx/NFGrdL7UbqLiem945dlMnkgQszwlYzVTYk7nfYDUB6FJj4Chh6OxT+psaQhnq+AzRDTXe03WvceBGvZQL8S/zyIrr3GNVM/JB73Nz5n3Z17f6i4ZjD4SDX7Fmy8zFwt2cHTwB8WA1RjtRrgM7Pr5WjFQKZIsc6ShF197z/SNdfIkLjKAXLZEMVlyjlUQDg/ihwJqHF8y57ofAoHDJt1h6OXagKWU82u1eW1New== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hkgpXpLhYHIfNH4QwpI+cQTaCIn1Mka9tX46fATqBMs=; b=E+kqEL17dBPtPxvdfzlnKKmaa2tIIg+LlypfIoHfw26PJwaFNCLxoJsN1k5FJ2kUBmkKVOkWY93d08Nc6moOZy8jBPFX0npQVRrlh4+gTiy6l94WqD2QKbg5nqH3/SmYn2LSM69mF3jY44kGN07xV+Ig1eQspEQS4LYZHdD3hn9UHFpGXDkbiOKZBVHstIM9NUgmXUPHCIbgj0u1WQlDGlKkrbTmK/uXGujFgzaMDLULh/qJ2AgI1P9J95m0yD6c+onTJ+In7YFAVpx2heY00KB9/FYM5EdAja9ggmw2scKhONEUQrC6RfKE/sBW5TRBONnRTdfRIQ+jMXeAs7a2NA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hkgpXpLhYHIfNH4QwpI+cQTaCIn1Mka9tX46fATqBMs=; b=mD65JnU8g9Ns9FB9WVwgmT2ORWkPHxOjcdXDXr5qV5FjHjen7DPrZb2k31ImOEwidT8d/MuOfJIGviChYYvF6XMbPGj2p+hTlxXg6yaSTtaX7fIFAxc9UsWJIZ/exoRhIAOZjAKHUPtLe8SswaiUuERU2xCO4uzg/hcJX727YlQ= Received: from MN2PR11MB4319.namprd11.prod.outlook.com (52.135.39.155) by MN2PR11MB3838.namprd11.prod.outlook.com (20.178.252.202) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.24; Wed, 30 Oct 2019 03:35:06 +0000 Received: from MN2PR11MB4319.namprd11.prod.outlook.com ([fe80::a5e4:8223:5e72:6181]) by MN2PR11MB4319.namprd11.prod.outlook.com ([fe80::a5e4:8223:5e72:6181%7]) with mapi id 15.20.2387.027; Wed, 30 Oct 2019 03:35:06 +0000 From: "Rajiv Asati (rajiva)" To: Alexandre Petrescu , Ted Lemon CC: "v6ops@ietf.org" Thread-Topic: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? Thread-Index: AQHVjXSxmpGXsWk+qkKRidIrKoxyNqdwwdcAgACs44CAAAyTgIAAFXCAgABisYCAACDDAA== Date: Wed, 30 Oct 2019 03:35:06 +0000 Message-ID: References: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=rajiva@cisco.com; x-originating-ip: [2001:420:c0c4:1003::6c] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 9a64c095-c7ff-4855-ee67-08d75cea2833 x-ms-traffictypediagnostic: MN2PR11MB3838: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 02065A9E77 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(346002)(396003)(366004)(376002)(39860400002)(13464003)(51444003)(189003)(199004)(6246003)(6512007)(76116006)(71200400001)(53546011)(66556008)(66446008)(316002)(99286004)(6506007)(64756008)(2906002)(25786009)(66574012)(66946007)(66476007)(76176011)(6116002)(33656002)(46003)(7736002)(36756003)(446003)(486006)(6436002)(81156014)(4326008)(102836004)(8936002)(2616005)(186003)(5660300002)(110136005)(6306002)(476003)(6486002)(256004)(81166006)(229853002)(11346002)(8676002)(58126008)(14444005)(86362001)(966005)(14454004)(71190400001)(478600001)(305945005); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3838; H:MN2PR11MB4319.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: CYPPYKWa5dd5vOhvMocCluNz1K4Km8Wq94c4aQGUUxshpR7L2yH7Wf8gKbE5VEr1Qw1AVwYhCyB9z40CWqmHwxkQzKZsAc7pk40crh0CNFo+SpkpH2LpCu5STHI5JsyFumqCM8by81riRGrStPGlb2L6xjPkpftFnG5H+Yh0ruWop16MDRnQO0HxLJoJgJg5pHipZPWpXyg30NHGIn4V+QDMX3UDrg7xu+ECpFp3h8QAUETO+F/pfoTC1hY1CfhgzEqw4y3WrYBtljG/I6iHKGv8Z7Tl1ls34Fcfqz5Am62+TVDhwVeNjDBJ4aALXgt4T/nkjA4S2IdXd5rMH6hDVOMG5ik05NxWKNZ3xpNNcxjlBRQNpQDMCr3DdMO5evN5nfQ6AJjUlkzlYZFc6D6Wf+4bpSVHzhH7Ua9QPk6BHwMhBx7JuZVNpGMndri+UeJo9rhzldgSsNUYEZuClmWxi2N7ENEKInvkObw8jfsyepU= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <4ED43D209E261A45AD823718F336551B@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 9a64c095-c7ff-4855-ee67-08d75cea2833 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2019 03:35:06.1989 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: PjasdLw6bfWRoCuzm0PU6uJeTXyuQE9NiJy1hxBpoyyZazVwrwrVos8NsuXuCyvb1jKOYYcYXphHRwoRwg9JFA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3838 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.19, xch-rcd-009.cisco.com X-Outbound-Node: rcdn-core-11.cisco.com Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 03:35:12 -0000 DQpZZXMsIHNhbWUgcHJlZml4IGNhbiBiZSBzcGVjaWZpZWQgaW4gREhDUHY2IHNlcnZlciBhbmQg cm91dGVyIFJBIFBJTy4gSWYgZXZlciBhIGNvbmZsaWN0IGJldHdlZW4gdGhlIElQdjYgYWRkcmVz c2VzIGF0IGEgaG9zdCwgdGhlbiB0aGUgaG9zdCBjb3VsZCB1c2UgREFEIHRvIHJlc29sdmUgdGhl IGNvbmZsaWN0IChhbmQgcmVjeWNsZSB0aGUgU0xBQUMgZGVyaXZlZCBhZGRyZXNzKS4gU3RhbmRh cmQgbWFjaGluZXJ5LiANCg0KLS0gDQpDaGVlcnMsDQpSYWppdiAgDQoNCu+7vy0tLS0tT3JpZ2lu YWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBBbGV4YW5kcmUgUGV0cmVzY3UgPGFsZXhhbmRyZS5wZXRy ZXNjdUBnbWFpbC5jb20+DQpEYXRlOiBUdWVzZGF5LCBPY3RvYmVyIDI5LCAyMDE5IGF0IDI6MzIg UE0NClRvOiBSYWppdiBBc2F0aSA8cmFqaXZhQGNpc2NvLmNvbT4sIFRlZCBMZW1vbiA8bWVsbG9u QGZ1Z3VlLmNvbT4NCkNjOiAidjZvcHNAaWV0Zi5vcmciIDx2Nm9wc0BpZXRmLm9yZz4NClN1Ympl Y3Q6IFJlOiBbdjZvcHNdIG91dC1vZi1mb2N1czogd2h5IERIQ1B2NiBicmVha3MgQW5kcm9pZCBj b21wdXRlcnM/DQoNCiAgICANCiAgICANCiAgICBMZSAyOS8xMC8yMDE5IMOgIDEzOjM4LCBSYWpp diBBc2F0aSAocmFqaXZhKSBhIMOpY3JpdCA6DQogICAgPiANCiAgICA+IEluZGVlZC4gQ1BFIHJv dXRlciBzaG91bGQgYWxsb3cga2VlcGluZyBib3RoIE0gYW5kIEEgZmxhZ3MsIHRvIGFsbG93IA0K ICAgID4gc2ltdWx0YW5lb3VzIHVzYWdlIG9mIERIQ1B2NiBhbmQgU0xBQUMgYnkgdGhlIGhvc3Rz Lg0KICAgIA0KICAgIEF0IGhpZ2ggbGV2ZWwsIGl0IG1ha2VzIHNlbnNlIHRvIHJlcXVpcmUgdG8g YWxsb3cgc2ltdWx0YW5lb3VzIERIQ1AgYW5kDQogICAgU0xBQUMgdXNhZ2Ugb24gYSBzYW1lIHN1 Ym5ldDsgYSBwcml2YXRlIGVtYWlsIHN1Z2dlc3RzIHRoZSBzYW1lLg0KICAgIFdpdGggdGhhdCwg QW5kcm9pZCBhbmQgV2luZG93cyB3b3VsZCBsaXZlIG9rIHNpZGUtYnktc2lkZSBvbiBzYW1lIHN1 Ym5ldC4NCiAgICANCiAgICBGdXJ0aGVyLCB0aGlua2luZyBhYm91dCBob3cgdG8gaW1wbGVtZW50 IHRoZSByZXEsIG9uZSB3b3VsZCB3b25kZXINCiAgICB3aGV0aGVyIHRoZSBwcmVmaXggaW4gUElP IHdpdGggQSBmbGFnIHNldCBpbiBhbiBSQSB3aXRoIE0gc2V0LCB3b3VsZCBiZQ0KICAgIHRoZSBz YW1lIGFzIHRoZSBwcmVmaXggdXNlZCBieSB0aGUgREhDUCBTZXJ2ZXIgdG8gZm9ybSBhbmQgZGVs aXZlcg0KICAgIGFkZHJlc3Nlcz8NCiAgICANCiAgICAoaWYgeWVzLCBJIHRoaW5rIHRoYXQgaXMg ZGlmZmljdWx0IHRvIGFjaGlldmU6ICgxKSBkaWZmaWN1bHQgdG8gcHV0IHNhbWUNCiAgICBwcmVm aXggaW4gdGhlIHNvZnR3YXJlIGltcGxlbWVudGluZyBSQSBzZW5kaW5nLCBhbmQgaW4gdGhlIERI Q1Agc2VydmVyDQogICAgY29ubmZpZyBmaWxlcyBhbmQgKDIpIGRpZmZpY3VsdCB0byBtYWtlIHN1 cmUgdGhlIFNlcnZlciBkb2VzIG5vdCBmb3JtIGFuDQogICAgYWRkcmVzcyBmb3IgYSBDbGllbnQs IGFkZHJlc3MgdGhhdCBhIEhvc3QgaGFzIGFscmVhZHkgZm9ybWVkIGluIHRoZSBzYW1lDQogICAg cHJlZml4KS4NCiAgICANCiAgICAoYmVjYXVzZSBvZiB0aGF0IHJlYXNvbiwgSSB0aGluayB0aGF0 IHRyeWluZyB0byBpbXBsZW1lbnQgdGhhdA0KICAgIHJlcXVpcmVtZW50IHdvdWxkIGxlYWQgdG8g ZGVzaWduYXRpbmcgYSBwcmVmaXggZm9yIFNMQUFDIGFuZCBhbm90aGVyDQogICAgcHJlZml4IGZv ciBESENQOyB0aGF0IG1heSBzb3VuZCBhIGxpdHRsZSBiaXQgYXMgYSB3YXN0ZSkuDQogICAgDQog ICAgQWxleA0KICAgIA0KICAgID4gDQogICAgPiBBYm91dCB0aW1lIHRvIHVwZGF0ZSBSRkM3MDg0 IC0gDQogICAgPiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzA4NCNzZWN0aW9uLTQu Mw0KICAgID4gDQogICAgPiANCiAgICA+IA0KICAgID4gQ2hlZXJzLCBSYWppdg0KICAgID4gDQog ICAgPiANCiAgICA+PiBPbiBPY3QgMjksIDIwMTksIGF0IDc6MjIgQU0sIFRlZCBMZW1vbiA8bWVs bG9uQGZ1Z3VlLmNvbT4gd3JvdGU6DQogICAgPj4gDQogICAgPj4gIE9uIE9jdCAyOSwgMjAxOSwg YXQgNjozNyBBTSwgQWxleGFuZHJlIFBldHJlc2N1IA0KICAgID4+IDxhbGV4YW5kcmUucGV0cmVz Y3VAZ21haWwuY29tIA0KICAgID4+IDxtYWlsdG86YWxleGFuZHJlLnBldHJlc2N1QGdtYWlsLmNv bT4+IHdyb3RlOg0KICAgID4+PiBXZWxsIG5vLiAgQWZ0ZXIgIGFjdGl2YXRpbmcgREhDUHY2IG9u IENQRSB0aGUgQ1BFIHNlbnQgdGhyZWUgUkFzDQogICAgPj4+ICBjaGFuZ2luZyB0aGUgTGlmZXRp bWUgYW5kIGZsaXBwaW5nIHRoZSBNKGFuYWdlZCkgYW5kDQogICAgPj4+IEEodXRvbm9tb3VzKSBm bGFncy4NCiAgICA+Pj4gDQogICAgPj4+IFBhY2tldCBkdW1wcyBhdmFpbGFibGUgdXBvbiByZXF1 ZXN0Lg0KICAgID4+IA0KICAgID4+IFRoYXTigJlzIHRoZSBwcm9ibGVtLiAgIEl0IHNob3VsZCB0 dXJuIG9uIHRoZSBtYW5hZ2VkIGJpdCBidXQgbm90IA0KICAgID4+IHR1cm4gb2ZmIHRoZSBhdXRv bm9tb3VzIGJpdC4gIFRoZSB0d28gY2FuIHZhbGlkbHkgYmUgb24gYXQgdGhlDQogICAgPj4gc2Ft ZSB0aW1lLg0KICAgID4+IA0KICAgID4+IE9mIGNvdXJzZSwgc2luY2UgdGhlaXIgbWVhbmluZ3Mg YXJlIGRlcHJlY2F0ZWQsIGl04oCZcyBub3QgdG9vIA0KICAgID4+IHN1cnByaXNpbmcgdGhhdCBp bXBsZW1lbnRhdGlvbnMgZ2V0IHRoaXMgd3JvbmcuDQogICAgPj4gDQogICAgPj4gX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18gdjZvcHMgbWFpbGluZyBsaXN0 DQogICAgPj4gIHY2b3BzQGlldGYub3JnIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vdjZvcHMNCiAgICANCg0K From nobody Tue Oct 29 21:26:30 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DBE6120089 for ; Tue, 29 Oct 2019 21:26:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.748 X-Spam-Level: X-Spam-Status: No, score=-1.748 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QLd5ixhI7EfA for ; Tue, 29 Oct 2019 21:26:27 -0700 (PDT) Received: from mail-qt1-x82f.google.com (mail-qt1-x82f.google.com [IPv6:2607:f8b0:4864:20::82f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEA8A12003E for ; Tue, 29 Oct 2019 21:26:27 -0700 (PDT) Received: by mail-qt1-x82f.google.com with SMTP id c26so1435712qtj.10 for ; Tue, 29 Oct 2019 21:26:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=pCrT+t0Z6Gln1IsZn6globRwsONvX1/+bOeouZGx2Wo=; b=Q312etn1GBuANtG78LtvqBykLH76sMlu4JsSQXEqeFliPwyfWTlhTwa9KpDtBPwU/R L8ofZaVMkL1Tllu8RJDX2A2c9sK6iyHqk+59TNF2e5GYIvhcfuoWiUmItJyqscGWWaNV 9ZgHTaup90S1ra05AgwzfQsdNpc5wq5K1n9qt/966ZYvFda/cr8eDSEhV/Lg2OkDGjW8 gqXQ1ftwgf5NXcmfNvzNgzD0YpuvPF0aWU1n2YH/8f8yNUYymWBStmq5hbfZHcYk7+hD dN6zqgRyPFctXeRAQdXt8xDgBD6C0g2RF36WCut2kqAs60iZznkCJAb+clxL3PhhlJhz h7NQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=pCrT+t0Z6Gln1IsZn6globRwsONvX1/+bOeouZGx2Wo=; b=NSNE3lwzp5cImQgtpfpKJjlj7DYaPJHNgriTBq6sjTosQBU8k23BGz7FaqLxyKyPUs sugeNZO/L6vUp1Y++WTaD/2UmkEmkP1mZVXaA1C1Z/eeqylTbTJFx75SDrwhoV+jW3kZ vc2myPCkkP1NojcRAr11BgIFG06bfwiRvcYhrEGrb9fsM1rS9IyfoN6sbF3V1O90zBSc 8Qn63odi9JTVd0s2ofqiscdkdhBhsULKq5vZem04WSI+7lddhLXNra6ADKY0I/yEvdfF +6rSYkZkYyQpTxVLa1LModynxM777CQBLlD0aNK3XmaWOzjH19aWELhGroAtwIO65Fd1 PXtw== X-Gm-Message-State: APjAAAXplP+K4AJ/1F5WMLMKvgz9MAGRSD0zUr4lkTbr88KJuYrQNbBB f+ReSJYqKnKg1awpRuCVKlo2NWSbHWK/PGMFlck= X-Google-Smtp-Source: APXvYqxpJnhkXVlnmm0uMmMnmRUlghzRvpZYyItRQnb9NZAS50aGVbJCZ+cgtaaBPL2UX91/8XIcdSgjOb3PFEolGpM= X-Received: by 2002:a0c:c2d3:: with SMTP id c19mr27532289qvi.158.1572409586478; Tue, 29 Oct 2019 21:26:26 -0700 (PDT) MIME-Version: 1.0 References: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> In-Reply-To: From: Jen Linkova Date: Wed, 30 Oct 2019 15:26:15 +1100 Message-ID: To: "Rajiv Asati (rajiva)" Cc: Alexandre Petrescu , Ted Lemon , "v6ops@ietf.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 04:26:30 -0000 On Wed, Oct 30, 2019 at 2:35 PM Rajiv Asati (rajiva) wro= te: > Yes, same prefix can be specified in DHCPv6 server and router RA PIO. If = ever a conflict between the IPv6 addresses at a host, then the host could u= se DAD to resolve the conflict (and recycle the SLAAC derived address). Sta= ndard machinery. Well, I guess the more tricky case is 'a host got an address from DHCP, DAD is failing because another host already assigned the same IP (manually or via SLAAC)'. What's next (besides sending DECLINE back to the server)? Split-brain condition in address assignments is hard. The more I read this thread the less I see the point of having DHCPv6 (for address assignment) when we have SLAAC. Oh...I think I'm breaking the promise I made to myself ("never get involved into SLAAC vs DHCP discussion ever') again...;)) > =EF=BB=BF-----Original Message----- > From: Alexandre Petrescu > Date: Tuesday, October 29, 2019 at 2:32 PM > To: Rajiv Asati , Ted Lemon > Cc: "v6ops@ietf.org" > Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? > > > > Le 29/10/2019 =C3=A0 13:38, Rajiv Asati (rajiva) a =C3=A9crit : > > > > Indeed. CPE router should allow keeping both M and A flags, to allo= w > > simultaneous usage of DHCPv6 and SLAAC by the hosts. > > At high level, it makes sense to require to allow simultaneous DHCP a= nd > SLAAC usage on a same subnet; a private email suggests the same. > With that, Android and Windows would live ok side-by-side on same sub= net. > > Further, thinking about how to implement the req, one would wonder > whether the prefix in PIO with A flag set in an RA with M set, would = be > the same as the prefix used by the DHCP Server to form and deliver > addresses? > > (if yes, I think that is difficult to achieve: (1) difficult to put s= ame > prefix in the software implementing RA sending, and in the DHCP serve= r > connfig files and (2) difficult to make sure the Server does not form= an > address for a Client, address that a Host has already formed in the s= ame > prefix). > > (because of that reason, I think that trying to implement that > requirement would lead to designating a prefix for SLAAC and another > prefix for DHCP; that may sound a little bit as a waste). > > Alex > > > > > About time to update RFC7084 - > > https://tools.ietf.org/html/rfc7084#section-4.3 > > > > > > > > Cheers, Rajiv > > > > > >> On Oct 29, 2019, at 7:22 AM, Ted Lemon wrote: > >> > >> On Oct 29, 2019, at 6:37 AM, Alexandre Petrescu > >> >> > wrote: > >>> Well no. After activating DHCPv6 on CPE the CPE sent three RAs > >>> changing the Lifetime and flipping the M(anaged) and > >>> A(utonomous) flags. > >>> > >>> Packet dumps available upon request. > >> > >> That=E2=80=99s the problem. It should turn on the managed bit bu= t not > >> turn off the autonomous bit. The two can validly be on at the > >> same time. > >> > >> Of course, since their meanings are deprecated, it=E2=80=99s not t= oo > >> surprising that implementations get this wrong. > >> > >> _______________________________________________ v6ops mailing list > >> v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops --=20 SY, Jen Linkova aka Furry From nobody Wed Oct 30 03:38:21 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8384E12010F for ; Wed, 30 Oct 2019 03:38:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n_MNxbKXWwDc for ; Wed, 30 Oct 2019 03:38:18 -0700 (PDT) Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D876D120013 for ; Wed, 30 Oct 2019 03:38:17 -0700 (PDT) Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iPlMZ-0000J5C; Wed, 30 Oct 2019 11:38:03 +0100 Message-Id: To: v6ops@ietf.org From: Philip Homburg Sender: pch-b9D3CB0F5@u-1.phicoh.com References: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <670EDAE2-D472-45BB-9888-27D0D03BEEB9@delong.com> In-reply-to: Your message of "Tue, 29 Oct 2019 10:20:26 -0700 ." Date: Wed, 30 Oct 2019 11:37:57 +0100 Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 10:38:19 -0000 > > For IPv4 + NAT, if you flash renumber the upstream address then existing > > connections will be stuck. > > Not exactly They do fairly quickly get sent TCP RSTs in most cases. That's not my experience. I hardly ever see a CPE generate a RST when a flow doesn't exist. > OTOH, leaving the connection hung until it times out at the > application or host TCP stack level creates huge delays in service > restoration. This is exactly what happens today in many cases. Of course, where developers get annoyed by this behaviour, they implement shorter timeout at the application level. I.e., a typical webbrowser doesn't wait for the host to report an error on a TCP connection. > Because the IPv4 host fairly quickly receives an RST packet when > the outbound packet hits a non-existent state table entry or a > state table entry marked as dead. My experience is different. In any case, if we want the CPE to send a RST when it upstream prefix changes, then of course that can be coded as well. I very much doubt that we really want to go there. Changing the host would be better. > Unless the CPE knows to send out an RA with a preferred lifetime > of 0 for the now deprecated prefix, then you are mistaken in the > actual systemic behavior. The whole point of this discussion is to write a draft that requires the CPE to do so. Probably with a companion of recommended host changes. From nobody Wed Oct 30 03:46:29 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD83812013C for ; Wed, 30 Oct 2019 03:46:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NxD59btRRJ8e for ; Wed, 30 Oct 2019 03:46:25 -0700 (PDT) Received: from mail-qk1-x732.google.com (mail-qk1-x732.google.com [IPv6:2607:f8b0:4864:20::732]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 26229120013 for ; Wed, 30 Oct 2019 03:46:25 -0700 (PDT) Received: by mail-qk1-x732.google.com with SMTP id m16so1826794qki.11 for ; Wed, 30 Oct 2019 03:46:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=content-transfer-encoding:from:mime-version:date:message-id:subject :in-reply-to:references:to:cc; bh=moMWugqUgYc86vhHUKok5RhNf6WUyJjsVaRaTLxCGQs=; b=X17K8+UMdF74ygd7E/Ru7BureoJVUbknZmqA6wDVIUw54t7bgITK35SgRf2Yqx/6oa spsoEV9b20kZFV9dRNyw93Wa9Qewmk1/Lq8argTwE/dtP16ncJp6jSpmZ4jyOj9b/2dU z1sSlzznz6h4ws2mTuZv148u7ZU4EAcmkJnAvq7wcRqsJLHXLo1pwaNtwX5vPKA+wfua fvu1w066I0AE40jKYLCrOsWn2uNnD+QFqc62FwG6xh/krwQs2o2Sm138pgX0iyXSq3JE 1/3z3k/iwLqrW0MOULOHmrhPH1lvxz4xYrGO7bjYCEvvZsOOL6aa1dcHC6ossdsshtFs XT2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version:date :message-id:subject:in-reply-to:references:to:cc; bh=moMWugqUgYc86vhHUKok5RhNf6WUyJjsVaRaTLxCGQs=; b=fMq9BGAbrsuRY4RXlyn+Sklth+oy6EHRSL1U1CPEu3OdkNTwQwo2QDnhqFLtvxUGBc IjOdPssz0GhRJlcODHhQMxukgVW6min5QhxEVC/95dtLXtRzXtrHVX3ZGHLhiYZohh+c wEHSb/Eg6laHokALN7m/eItA4QyTbWXlY1+xRjfAivI0SXuFOIPW/4FzOVYo37uPf/NK 4Fj1hrui4crL2VMZlrPmI3WMQXWgTRnYJVxkZ77yHJk0Hk7HbjIAayEeXC/Y3ghlYTBy ZKgk4uj2F0VJ1Ww2odawExvDjWFQebgZJOofVYyA5gv9DDGgBm43qay3bMTYoPy9YSPz BPtQ== X-Gm-Message-State: APjAAAWe2PURwo4qMdE9nvhe1FD/vAiYqnN2gXnlSVS44wrJP3u19UHl szbK2s5HDJ8AY4Vz+gtgrI68spgwPwgvRA== X-Google-Smtp-Source: APXvYqzwl3sdWA4wAM0a4MnffsoePs7nA7DbvGmfncZNK/c7KHOcOgSMKcFyC89V5cZa941Suqv9sA== X-Received: by 2002:a37:4a92:: with SMTP id x140mr5500639qka.24.1572432384046; Wed, 30 Oct 2019 03:46:24 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:9be:fcfd:8f35:ceef? ([2601:18b:300:36ee:9be:fcfd:8f35:ceef]) by smtp.gmail.com with ESMTPSA id 187sm1441536qkk.103.2019.10.30.03.46.23 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 30 Oct 2019 03:46:23 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Ted Lemon Mime-Version: 1.0 (1.0) Date: Wed, 30 Oct 2019 06:46:22 -0400 Message-Id: In-Reply-To: References: To: Philip Homburg Cc: v6ops@ietf.org X-Mailer: iPad Mail (17A878) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 10:46:28 -0000 > On Oct 30, 2019, at 6:38 AM, Philip Homburg w= rote: >=20 >>> For IPv4 + NAT, if you flash renumber the upstream address then existing= >>> connections will be stuck. >> Not exactly They do fairly quickly get sent TCP RSTs in most cases. >=20 > That's not my experience. I hardly ever see a CPE generate a RST when a fl= ow > doesn't exist To be clear, the issue is that in order for a TCP RST to be sent, the TCP me= ssage has to be delivered to the endpoint in the first place. The CPE isn=E2= =80=99t going to randomly send TCP RSTs to flows that don=E2=80=99t terminat= e on it. That is, it is not going to watch TCP traffic through it, notice t= hat the source address on a particular message is not on the prefix it is cu= rrently advertising, and then construct a TCP RST to break that connection. So in practice, if a renumbering has happened in this way, what is going to h= appen is that that TCP connection is going to time out for ninety seconds. > This is exactly what happens today in many cases. Of course, where develop= ers > get annoyed by this behaviour, they implement shorter timeout at the=20 > application level. I.e., a typical webbrowser doesn't wait for the host to= > report an error on a TCP connection. This should not be happening often enough that application developers are ad= ding shorter timeouts to their code. A CPE reboot is an exceptional event, a= nd a deliberate renumbering by the ISP ought to be as well. If they are do= ing that, I suspect it=E2=80=99s independent of the renumbering problem. It would not surprise me if there are CPEs that behave badly when the ISP re= numbering, and ISPs that behave badly when a prefix that is still valid is, f= rom their perspective, no longer on offer. We ought to characterize that pro= blem and propose solutions to this. By =E2=80=9Ccharacterize,=E2=80=9D I m= ean look at what actual CPEs do, not theorize, although I think theorizing i= sn=E2=80=99t bad either.=20= From nobody Wed Oct 30 03:55:26 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E8211200CE for ; Wed, 30 Oct 2019 03:55:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2juCRxPRgNdx for ; Wed, 30 Oct 2019 03:55:23 -0700 (PDT) Received: from mail-qk1-x72c.google.com (mail-qk1-x72c.google.com [IPv6:2607:f8b0:4864:20::72c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B92E3120013 for ; Wed, 30 Oct 2019 03:55:23 -0700 (PDT) Received: by mail-qk1-x72c.google.com with SMTP id m4so2190678qke.9 for ; Wed, 30 Oct 2019 03:55:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=GwR1tMBJFeYBSacJgbQWS7VjPrB/pR9xzi0dxMhY9ao=; b=eEemcTymslcw6PmrzYVIb4vFDwYsxoGBvZoFi5ME/BGHniwWlHCo3xrxUEWQeVKswE WAorL0ghHXNexMUR/hJVHvMu8N8ZmEV8FbUNNC33P+Dsszt+7xDHEOTJ4FzSyFCL6lTY FD2vYtfvKaYMhg0COaLHsDC2jisxVFSwy+LLPKlQNoP8vOO0847KF0TqF7k/tsItLIoG sgXOvuMh0XvFBU+k8unnP+eZzo5+t3U+F5ZSuI3kmA7231VWf1wOHziGNkmVaLEXeN8a 5TBTi3a4Uwegl7Xtq+IuyJCnSPZzmeYCv1f7WKi0DGgOGf+0sLugzKX6QYCOphzP049I e2kQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=GwR1tMBJFeYBSacJgbQWS7VjPrB/pR9xzi0dxMhY9ao=; b=sK0XUbyNyB9p7QvtH/HvMUV6DtpUDzqvY7fC7935d7oNA+uXoByuPFH0mqv4H+ukGc HOi9z/qia+ktBodAf1bXsSS3WVSgBAu1SdqHsTTxYpq6DUuCyAu94C0/aD9MZpYVtImN R9lTX1OBoC4PRfBcRbsYInSaTxqwWZyxG8C4VUWY0mFIueFEAb8y85zT/jMr6Dg8RvRR 6/5zcXY+S0z47f/vxX7LxZGGVHLDG0tE2a2GD9CtnrUQxBLZ7fm+oemjyB8rzNabvmfN POenKm7BmjQDvjRsfgLL7FGlhhMIRm+aQOBq/N2aW9wuIlVA0BtRTXnRVyRwdrPaGpRp OSXA== X-Gm-Message-State: APjAAAXPhUB553XABFtz45ZB/pd46HtvxeKO39rvvq0XhaEzuOevvkH7 pQjXonX79HVWuxYk4kRUECrTp9jsW6+kUQ== X-Google-Smtp-Source: APXvYqwX46u+uuhaWmeXggLm99djLWrGHVOe0mqQvq8a7x9WmMl1R+g7PNbDqyfLwb2Jlrm7JfDyfQ== X-Received: by 2002:a37:7383:: with SMTP id o125mr26031625qkc.67.1572432922633; Wed, 30 Oct 2019 03:55:22 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:9be:fcfd:8f35:ceef? ([2601:18b:300:36ee:9be:fcfd:8f35:ceef]) by smtp.gmail.com with ESMTPSA id l93sm980530qtd.86.2019.10.30.03.55.21 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 30 Oct 2019 03:55:21 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Ted Lemon Mime-Version: 1.0 (1.0) Date: Wed, 30 Oct 2019 06:55:21 -0400 Message-Id: <25B6E7E5-0D9A-4699-8382-074F63E1FEAD@fugue.com> References: Cc: "Rajiv Asati (rajiva)" , Alexandre Petrescu , "v6ops@ietf.org" In-Reply-To: To: Jen Linkova X-Mailer: iPad Mail (17A878) Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 10:55:25 -0000 On Oct 30, 2019, at 12:26 AM, Jen Linkova wrote: >=20 > What's next (besides sending DECLINE back to the server)? That=E2=80=99s what=E2=80=99s next. This is exactly the right thing to do. = Having sent the decline, you would then do another solicit, and unless the= DHCP server is broken, you=E2=80=99d get a new address. Isn=E2=80=99t it also the case that there are addresses that will never be g= enerated by SLAAC? If so, the DHCP server could allocate addresses that fi= t that profile and we wouldn=E2=80=99t see this issue in the first place. From nobody Wed Oct 30 04:01:52 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 976DA120104 for ; Wed, 30 Oct 2019 04:01:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CZysUrHflMMd for ; Wed, 30 Oct 2019 04:01:49 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEEF412002E for ; Wed, 30 Oct 2019 04:01:49 -0700 (PDT) Received: from astfgl.hanazo.no (unknown [IPv6:2001:420:44c1:2614:19db:53b8:4daa:7092]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id ADB024E11B08; Wed, 30 Oct 2019 11:01:48 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 92AEE208F335; Wed, 30 Oct 2019 12:01:45 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Wed, 30 Oct 2019 12:01:45 +0100 Cc: Philip Homburg , v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <837E9523-14FC-4F6C-88FC-DCC316265299@employees.org> References: To: Ted Lemon X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 11:01:52 -0000 >>>> For IPv4 + NAT, if you flash renumber the upstream address then = existing >>>> connections will be stuck. >>> Not exactly They do fairly quickly get sent TCP RSTs in most cases. >>=20 >> That's not my experience. I hardly ever see a CPE generate a RST when = a flow >> doesn't exist >=20 > To be clear, the issue is that in order for a TCP RST to be sent, the = TCP message has to be delivered to the endpoint in the first place. = The CPE isn=E2=80=99t going to randomly send TCP RSTs to flows that = don=E2=80=99t terminate on it. That is, it is not going to watch TCP = traffic through it, notice that the source address on a particular = message is not on the prefix it is currently advertising, and then = construct a TCP RST to break that connection. >=20 > So in practice, if a renumbering has happened in this way, what is = going to happen is that that TCP connection is going to time out for = ninety seconds. What a CPE does do, is to send an ICMP destination unreachable (5 - = Source address failed ingress/egress policy) as the source address would = violate the unicast RPC check. RFC7084, L-14. >> This is exactly what happens today in many cases. Of course, where = developers >> get annoyed by this behaviour, they implement shorter timeout at the=20= >> application level. I.e., a typical webbrowser doesn't wait for the = host to >> report an error on a TCP connection. >=20 > This should not be happening often enough that application developers = are adding shorter timeouts to their code. A CPE reboot is an = exceptional event, and a deliberate renumbering by the ISP ought to be = as well. If they are doing that, I suspect it=E2=80=99s independent of = the renumbering problem. >=20 > It would not surprise me if there are CPEs that behave badly when the = ISP renumbering, and ISPs that behave badly when a prefix that is still = valid is, from their perspective, no longer on offer. We ought to = characterize that problem and propose solutions to this. By = =E2=80=9Ccharacterize,=E2=80=9D I mean look at what actual CPEs do, not = theorize, although I think theorizing isn=E2=80=99t bad either.=20 You can generalise the renumbering problem to a multi-prefix = multi-homing problem. Whenever a host has multiple addresses the = application must continuously evaluate all possible paths and react to = path failures. An invalidated prefix is just a reachability problem = close to the host, and theoretically no different than a path failure = multiple hops away. In the case when a requesting router loses a prefix, it can of course = signal that to the hosts as proposed in Fernando's draft. But that = doesn't solve the general problem, and I'm skeptical to using addressing = as a reachability signal. E.g. if the CPE's upstream link flaps, is that = enough to trigger deprecation of the prefix? Of course it shouldn't. Ole= From nobody Wed Oct 30 04:19:29 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA6B9120099 for ; Wed, 30 Oct 2019 04:19:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VNlDQk0DlYuI for ; Wed, 30 Oct 2019 04:19:26 -0700 (PDT) Received: from mail-qt1-x82f.google.com (mail-qt1-x82f.google.com [IPv6:2607:f8b0:4864:20::82f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8173120046 for ; Wed, 30 Oct 2019 04:19:25 -0700 (PDT) Received: by mail-qt1-x82f.google.com with SMTP id l3so2677728qtp.2 for ; Wed, 30 Oct 2019 04:19:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=content-transfer-encoding:from:mime-version:date:subject:message-id :cc:to; bh=knJn+MAkI2KbeDfsBhS4WhHdESN9CL58tGqLQMXqDeQ=; b=obdWhoT+IeOJecplBA9xZvDvhuDZWRslGdTRRjL8mTflLFq6t/oadxD9MI2NH88ocs cICtW7IS4aDg2e8c4Nd66idkwZPP6CSUqpSORVEQLKbZwwijNhH4VZktAER1ySSKsBEL kV2eMr5xzmh3YWfM2ARQNx/ELoWpQ9GJjI4o3ov8H7P32qQvK161UOrLp506QzsFUi3M 6XPUCNkKUuojOPAOCljnZwepUyKERRo9R1ejvQcBo0NpfY8+wB8VJ5y952LWRY3DNw/t AIsVCgZQ7pg3qnSTlR0Q2g7q1q5+ItkcaHZP1pXRlyBkVV5JB0BnLwyD0q3CYurCWhy0 JmNQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version:date :subject:message-id:cc:to; bh=knJn+MAkI2KbeDfsBhS4WhHdESN9CL58tGqLQMXqDeQ=; b=DLH7mRq19kh2AAtvOeG6CQol4Q/7EPDX58JIX4/4PVs+p48t5oaDSIciqHpSHQyK0A 449gWmpjYhRsx1SezBgATYBm/DS+l7G0zxSYqgwZGlypdyH2AnfgMPxcxHe9Jvm0PCLu wLoSnmD7n5sPyj6mJU2D5/B7xPHFempKg8zfdcDT3lqLjv/VeVzHO1BxUk6QCgm2H68X TJqq+ZkPmz1UgfuNJF/SAmO2dYwz1qoksTfwte6k1y2uKvTisgzs1VQ/OrvawCOVlaPi bwqrRyll2kNS+DX8DXuKWMtmkEt74OQ4k70IT78a0AStk7zgqfZFHOdl9Uq7IE3xTqvb BMfw== X-Gm-Message-State: APjAAAUz1GWzuD3JpZ6/VnPShd2DJXg1SJbnyFawg1myinPuLlqWYR/e tU+7FZ5CKI3VUVXcrAHTIC0YeXERuN9C8w== X-Google-Smtp-Source: APXvYqwuAjk06bkH17IS68Q9K9WKhKejYQqVGeq2VbQ76NB5fNoFdqtQt6nNIVZhJIPzUcpZaf+wxQ== X-Received: by 2002:ac8:35a4:: with SMTP id k33mr4310816qtb.354.1572434364766; Wed, 30 Oct 2019 04:19:24 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:9be:fcfd:8f35:ceef? ([2601:18b:300:36ee:9be:fcfd:8f35:ceef]) by smtp.gmail.com with ESMTPSA id e17sm1098404qtk.65.2019.10.30.04.19.23 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 30 Oct 2019 04:19:23 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Ted Lemon Mime-Version: 1.0 (1.0) Date: Wed, 30 Oct 2019 07:19:22 -0400 Message-Id: <4BFCBC35-7997-4763-BDA1-443AAF30B487@fugue.com> Cc: Philip Homburg , v6ops@ietf.org To: Ole Troan X-Mailer: iPad Mail (17A878) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 11:19:28 -0000 On Oct 30, 2019, at 7:01 AM, Ole Troan wrote: >=20 > What a CPE does do, is to send an ICMP destination unreachable (5 - Source= address failed ingress/egress policy) as the source address would violate t= he unicast RPC check. RFC7084, L-14. Does this actually happen in practice, though? It=E2=80=99s not actually clear to me how L-13 would be implemented. Is a f= ailure to provide a prefix that=E2=80=99s been requested an indication that t= he prefix is no longer valid, or simply that it isn=E2=80=99t renewed? Sho= uld the CPE in this case stop using it? What does =E2=80=9Creplaced by=E2=80= =9D actually mean? =46rom the perspective of DHCP PD, it would be valid for the CPE to continue= using the prefix until it expires. That might very well not be the right t= hing to do, but there is a lack of clarity here in the specification, and I a= m wondering how router vendors have interpreted this in practice. From nobody Wed Oct 30 04:26:54 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F95D120110 for ; Wed, 30 Oct 2019 04:26:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yYsyq1vVvQFE for ; Wed, 30 Oct 2019 04:26:51 -0700 (PDT) Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE31212010C for ; Wed, 30 Oct 2019 04:26:50 -0700 (PDT) X-Envelope-To: v6ops@ietf.org Received: from crumpet.foobar.org (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id x9UBQeXD046375 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 30 Oct 2019 11:26:41 GMT (envelope-from nick@foobar.org) X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.foobar.org To: Ole Troan Cc: Ted Lemon , v6ops@ietf.org References: <837E9523-14FC-4F6C-88FC-DCC316265299@employees.org> From: Nick Hilliard Message-ID: <90576322-be50-b8b1-31dd-bb1ef870993d@foobar.org> Date: Wed, 30 Oct 2019 11:26:39 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:52.0) Gecko/20100101 PostboxApp/7.0.8 MIME-Version: 1.0 In-Reply-To: <837E9523-14FC-4F6C-88FC-DCC316265299@employees.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 11:26:53 -0000 Ole Troan wrote on 30/10/2019 11:01: > What a CPE does do, is to send an ICMP destination unreachable (5 - > Source address failed ingress/egress policy) as the source address > would violate the unicast RPC check. RFC7084, L-14. what many, if not most, CPEs do is drop the flow on the ground and move on with life. Nick From nobody Wed Oct 30 05:30:00 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4FFC9120145 for ; Wed, 30 Oct 2019 05:29:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=iol.unh.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KzyeQR8SQKKe for ; Wed, 30 Oct 2019 05:29:57 -0700 (PDT) Received: from mail-wm1-x331.google.com (mail-wm1-x331.google.com [IPv6:2a00:1450:4864:20::331]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6DBC012013D for ; Wed, 30 Oct 2019 05:29:57 -0700 (PDT) Received: by mail-wm1-x331.google.com with SMTP id q70so1916678wme.1 for ; Wed, 30 Oct 2019 05:29:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iol.unh.edu; s=unh-iol; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=OTTy7yQYPVsqZrGlpqhziL/O33EQ5OMGeUFOHv+KxRg=; b=MHsckmvrd6WoyaGnTV8eCZmXajUHJaM/Adg8BZ3HJ9pvjjyI7dp+IU6lAN5YACLf3G hvEpQDlgP2U6Lu8XivD9Vc3y9sWBsTafUmr3aa1IRh1qzaqXz8/BrBX/bdJ2ycGZNXJK okVutiGMtvlqBHbV6F4iukuHjEi8wVpZO3idk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=OTTy7yQYPVsqZrGlpqhziL/O33EQ5OMGeUFOHv+KxRg=; b=TBnN9ubxbAzBZy7Cd6iVnS1pLpu9FXUcTM0EmyE3CMBm8FKxiiKe9W1zUmMDw4P8CA IHaXLGGudrlNaQc5QHJIppPX1MXjNb9xUUNSOFtyUq1UVJkBdWTKjesuHhgkhi9SnW3d KT4Qy2QuEKzAl2B+FRD8YZyOd93RRGXrilAsnrq+u1VX+6qSzLIGoIZhb2HCtyblMICL oJOyTkoXHs/A2G/db4GjCYIr404WX4rBmHpedCQWyhGL1VU0h4No0DJJ0JaCC4dRbvYP vSPu08i5aLjRasOZXQmYSQkzOn21nMnNvudWGaJmpsIvhBsjqLZ5+EPsImGo1tHnJgaC Ui+w== X-Gm-Message-State: APjAAAUjnHvVlLcvnm7/PXfYlhDJhg1MIiJNVZTbaHUxzEamARF8sx5G 8Nfco0UDQvWaKzdPR92XzEjBRFcyqDX/oD/LqGD1rFW6PnvwOA== X-Google-Smtp-Source: APXvYqz0Yhplzx3eCf8um2xbW1gSzwKXBI9zwPMpZZvve7k+BNwmyxdZ/lHzh1kJPxrsoY8eFvckqyByjKrCXa7qkb4= X-Received: by 2002:a7b:cd05:: with SMTP id f5mr3530406wmj.24.1572438595589; Wed, 30 Oct 2019 05:29:55 -0700 (PDT) MIME-Version: 1.0 References: <837E9523-14FC-4F6C-88FC-DCC316265299@employees.org> <90576322-be50-b8b1-31dd-bb1ef870993d@foobar.org> In-Reply-To: <90576322-be50-b8b1-31dd-bb1ef870993d@foobar.org> From: Timothy Winters Date: Wed, 30 Oct 2019 08:29:44 -0400 Message-ID: To: Nick Hilliard Cc: Ole Troan , IPv6 Operations Content-Type: multipart/alternative; boundary="000000000000ebedcf05961fe397" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 12:29:59 -0000 --000000000000ebedcf05961fe397 Content-Type: text/plain; charset="UTF-8" Hi Ted, Yes we have a couple of test cases for IPv6 Ready CE Router Logo that confirms this behavior. One focuses on "Prefix Change" or what your calling Flash renumber. I will note this is a common failure the first time devices fail. Regards, Tim On Wed, Oct 30, 2019 at 7:26 AM Nick Hilliard wrote: > Ole Troan wrote on 30/10/2019 11:01: > > What a CPE does do, is to send an ICMP destination unreachable (5 - > > Source address failed ingress/egress policy) as the source address > > would violate the unicast RPC check. RFC7084, L-14. > what many, if not most, CPEs do is drop the flow on the ground and move > on with life. > > Nick > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > --000000000000ebedcf05961fe397 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Ted,

Yes we have a couple of test ca= ses for IPv6 Ready CE Router Logo that confirms this behavior.=C2=A0 One fo= cuses on "Prefix Change" or what your calling Flash renumber.=C2= =A0 I will note this is a common failure the first time devices fail.
=

Regards,
Tim

On Wed, Oct 30, 2019 at 7:2= 6 AM Nick Hilliard <nick@foobar.org> wrote:
Ol= e Troan wrote on 30/10/2019 11:01:
> What a CPE does do, is to send an ICMP destination unreachable (5 - > Source address failed ingress/egress policy) as the source address
> would violate the unicast RPC check. RFC7084, L-14.
what many, if not most, CPEs do is drop the flow on the ground and move on with life.

Nick

_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops
--000000000000ebedcf05961fe397-- From nobody Wed Oct 30 05:33:05 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6773F12013D for ; Wed, 30 Oct 2019 05:33:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n0XpXrtRlhQI for ; Wed, 30 Oct 2019 05:33:01 -0700 (PDT) Received: from mail-qt1-x834.google.com (mail-qt1-x834.google.com [IPv6:2607:f8b0:4864:20::834]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61CF812013C for ; Wed, 30 Oct 2019 05:33:01 -0700 (PDT) Received: by mail-qt1-x834.google.com with SMTP id x21so2881641qto.12 for ; Wed, 30 Oct 2019 05:33:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=bgwDL4KgFq8YIinDVk88cDLbiIhgtuCx77pouS/6Hcg=; b=f6AGheDW1NbFEcZG0GEl0wTOzRcIni1Hgs+dDNvIl/8Ghsb5xlVOIZL6YWUb32HpOK plbYtK3cF9o5oyzm1x9KVAvAaukCLGTo5/cFrGAXCN0o06rG0Pz1ofGDsMjVH9LBssav R+RKCIGIRXuXwGtQkMLBFeIANhdld0SDPoXESV3sHhgaIzvgD0Q+ojmYYI1KOfKwYYkL dq41REmRCCuVorNc51zc86rnMjNPycH5pTQsEmENXkBbXZWcxcPMlWr5sioyOLsu9f6f zpS5keboBmapIQEfyMgHNIH7jhz0yCbQ3s6rvyEJeSsxiGt1UQtLY1ghseujk2xCOipn 5A0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=bgwDL4KgFq8YIinDVk88cDLbiIhgtuCx77pouS/6Hcg=; b=PsCWHqa0jVVzlFpi736wyWR2F1yDbuSAprFSViFUCi+a2fYcie3/zthkL1e248Tw7l FGgRhkZ+eKSp90gJYngxj4nbByhXTQ4eYe1IpryaHnhfEXhicoC0bgiQUWhM4UVS/cr1 igW2jOID3FZw5CCaNKUYwjG00OouD/LGvmHeQhoXOOTw1jCdl7p4e6xX/MUkIAG2LALh q8gbx2UEGtMTqrICThirMW0vA5ihYI2bhHZdpAcBXhl6sKtxIwhDwaBqA/B0iKbBRgki fFMxTf+106V+3ghaxbDE0CHjYAn6IK/waen51/qpf78kwGe7fcE5h4iGPj9kA9Vw483y L/tA== X-Gm-Message-State: APjAAAWc7waQHCg6BC3dL1/SmCzEbEo0JZkUa++xsB6GA+IXSWm3aBud HUBDOpvu6nAB3gaqWsA8viFZBQ== X-Google-Smtp-Source: APXvYqxGJDYgUY6oatjWECBOpa6lpoHF0TdmZVBv7EUJFAXxkL4r4tjAFVW0qzpxdCEk+OK/sFddeQ== X-Received: by 2002:ad4:56ab:: with SMTP id bd11mr21030398qvb.237.1572438780489; Wed, 30 Oct 2019 05:33:00 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:a4bd:5a89:da31:d7c4? ([2601:18b:300:36ee:a4bd:5a89:da31:d7c4]) by smtp.gmail.com with ESMTPSA id k187sm1205888qkb.20.2019.10.30.05.32.59 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 30 Oct 2019 05:32:59 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Ted Lemon Mime-Version: 1.0 (1.0) Date: Wed, 30 Oct 2019 08:32:59 -0400 Message-Id: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> References: Cc: Nick Hilliard , IPv6 Operations In-Reply-To: To: Timothy Winters X-Mailer: iPhone Mail (17B78) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 12:33:03 -0000 On Oct 30, 2019, at 08:30, Timothy Winters wrote: > Yes we have a couple of test cases for IPv6 Ready CE Router Logo that conf= irms this behavior. One focuses on "Prefix Change" or what your calling Fla= sh renumber. I will note this is a common failure the first time devices fa= il. Thanks for the info! Which behavior do you mean? There=E2=80=99s the handl= ing of pd, and then there=E2=80=99s the icmp response.=20= From nobody Wed Oct 30 05:40:55 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA78D12013D for ; Wed, 30 Oct 2019 05:40:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=iol.unh.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aJd0Seu2Npg6 for ; Wed, 30 Oct 2019 05:40:51 -0700 (PDT) Received: from mail-wr1-x42e.google.com (mail-wr1-x42e.google.com [IPv6:2a00:1450:4864:20::42e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA78B12010C for ; Wed, 30 Oct 2019 05:40:50 -0700 (PDT) Received: by mail-wr1-x42e.google.com with SMTP id l10so2148509wrb.2 for ; Wed, 30 Oct 2019 05:40:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iol.unh.edu; s=unh-iol; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=zuKYTxFnNgJUMco8T2gYHf3rjgSzfgVSs98QmUnbWfo=; b=cfY20c0dFUO/XhuKslL0ydtfyBHTITjowUi705DQNE3FG7HR5pwBKzS/LWxP0KbXuh X/mM2hs9gG6mCTwiGkLERonry+nXKYFWCmTYhirMDH4mrRDkd8UqndgGUI0wX6MKRstJ wJGDj5ZEJlK7/KWQqZEAAzcnKBp48IIyMOxkE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=zuKYTxFnNgJUMco8T2gYHf3rjgSzfgVSs98QmUnbWfo=; b=JgHV1NpPbOHov9ViG5/aImTxsmC4NQgS3GzVz2yxx5FBIvLdSYXJxnyGT+4ZbPK9A7 jU5M+fRenPgsA9cGnyTUTGkdSGPm9QMjUmvpXtpCjrrSd1Z/MXxecqtwtG+H5W3y/lL6 iOr42e1qC06S1zzqrSSixf/dL+IrBnbeLKf9cnMyuLKUEMLeAT8GwUgKj3H81fQa+8aD c/KHZq/NWpL2EB8+j/bjkCauVMKkqn0B41li2aoshnwxmHZUO1+QGhsG6+FB+AqYgqV7 MvK/Egl78btheoPTju3VEoxaYvbI7eVHsqeFJbyx4tzERWyVJaLPCm8FegFChRPvElNY HH4Q== X-Gm-Message-State: APjAAAVSPVbXslpb/IG7Y1suzv1BbG7aT9mEEhaPQdRZhZyVuRuQAnN/ 2eAqSPhU3/jQDI4mKuTn0RZsqlSe2OKjXkyhoEfE0w== X-Google-Smtp-Source: APXvYqyOv74fnYuFMVr6/5sJKz6/iUCrAmaub+uAhAafFdkEY3KqqDEIcnKBdpV0Z6Wx/vlHiTLDckPnajT0uClXHsU= X-Received: by 2002:adf:f00d:: with SMTP id j13mr23071623wro.253.1572439249175; Wed, 30 Oct 2019 05:40:49 -0700 (PDT) MIME-Version: 1.0 References: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> In-Reply-To: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> From: Timothy Winters Date: Wed, 30 Oct 2019 08:40:38 -0400 Message-ID: To: Ted Lemon Cc: Nick Hilliard , IPv6 Operations Content-Type: multipart/alternative; boundary="000000000000e0e4330596200a85" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 12:40:53 -0000 --000000000000e0e4330596200a85 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Ted, We check both, the handling of the IA_PD and the error message. ~Tim On Wed, Oct 30, 2019 at 8:33 AM Ted Lemon wrote: > On Oct 30, 2019, at 08:30, Timothy Winters wrote: > > Yes we have a couple of test cases for IPv6 Ready CE Router Logo that > confirms this behavior. One focuses on "Prefix Change" or what your > calling Flash renumber. I will note this is a common failure the first > time devices fail. > > Thanks for the info! Which behavior do you mean? There=E2=80=99s the ha= ndling of > pd, and then there=E2=80=99s the icmp response. --000000000000e0e4330596200a85 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Ted,

We check both, the handling of = the IA_PD and the error message.

~Tim
<= br>
On Wed,= Oct 30, 2019 at 8:33 AM Ted Lemon <= mellon@fugue.com> wrote:
On Oct 30, 2019, at 08:30, Timothy Winters <twinters@iol.unh.edu> = wrote:
> Yes we have a couple of test cases for IPv6 Ready CE Router Logo that = confirms this behavior.=C2=A0 One focuses on "Prefix Change" or w= hat your calling Flash renumber.=C2=A0 I will note this is a common failure= the first time devices fail.

Thanks for the info!=C2=A0 Which behavior do you mean?=C2=A0 There=E2=80=99= s the handling of pd, and then there=E2=80=99s the icmp response.
--000000000000e0e4330596200a85-- From nobody Wed Oct 30 05:59:30 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8EC3120A24 for ; Wed, 30 Oct 2019 05:59:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mtF85Jqbqdk6 for ; Wed, 30 Oct 2019 05:59:03 -0700 (PDT) Received: from mail-qk1-x72c.google.com (mail-qk1-x72c.google.com [IPv6:2607:f8b0:4864:20::72c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DCB2A120903 for ; Wed, 30 Oct 2019 05:59:02 -0700 (PDT) Received: by mail-qk1-x72c.google.com with SMTP id d13so2598926qko.3 for ; Wed, 30 Oct 2019 05:59:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=c6e5CFONZDiwWQ+PGDfILSeqGWSJwbvai/vSi4o7zP8=; b=Sqn3JqB1wMyl7mem0K+tcORPoj33KNa/IC85BfzXwm+dgZqsK6vPWodrbkpAi3amtr CDXHPbH7sYE8We5GxA6JDR0CcFvTiECUp1p1LbcWd8a86q8PT6LpQF38pBCN9lBrx0ry kEej97Uw8gV9UUs+VP5BIzClwoj/XYIr4ZEkBXI5lTs0LOzUilnMn62zx47wmBu4YSdp 4hSdAh2lRG4XzPYz6jrVHp3tp5z/LMynPbWb/3vNgOIZB1c9DYqRrSsTLnVkwVpY6Nns IRwqdsn+TrQVJO+Wi2XOzxy49bNheT/2Rd7xhXvvSyMg2XWnlfaTL/zXPlWu5n9yat9U zjuQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=c6e5CFONZDiwWQ+PGDfILSeqGWSJwbvai/vSi4o7zP8=; b=S5dXXHANIl/pAPaAHlBe68I3bnU8QhN093zQ6XaTaOJ5Deda1Qb+BkOIXBUQrMqLXC 7KskZvIiRErr0MzJkA35ImFNEPw7cINvxN4Zu2V9mmc+9m9TJ+edgqIflbIGmG2U7XHr uWhaaRJ+kO4XP1zvq5nxdxFNXX4DpTiDN0+GhIudLDgFXXK4HubuCePSfAUcxYAIhRu7 oCevJJQSkuJxYdCskFtqCBd6J93Rl9pwzckjOMZpQnPv7sPQXgOwo3Bi5fpNmz2+OBpJ 2z5/6Z/a8A/q03K2DxMwunlvk0R/u24eLVbCpr6WtTfxXaVf/YEHsus+4JtFnJbxpB1+ 2j0w== X-Gm-Message-State: APjAAAWVIPBN1iVNXn+10yW1ypifpWB3B0p+stVSIYRi2290PBu1gQnl vmO9oRIFjS3hJYAEM1zN45vbVA== X-Google-Smtp-Source: APXvYqwPAOa+Z5itW6tJ/ReDxGig2TR4kp9cJKJj3noHjpbgx7Ic8EU8/PpQFUr3ZY+MMDk5vy35Ww== X-Received: by 2002:a05:620a:12bb:: with SMTP id x27mr7924589qki.459.1572440341767; Wed, 30 Oct 2019 05:59:01 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:c5ad:3e58:9e29:c076? ([2601:18b:300:36ee:c5ad:3e58:9e29:c076]) by smtp.gmail.com with ESMTPSA id 76sm2120383qke.111.2019.10.30.05.59.01 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Oct 2019 05:59:01 -0700 (PDT) From: Ted Lemon Message-Id: <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_A62F7A98-8D99-4C73-AB8D-39B40985A21A" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\)) Date: Wed, 30 Oct 2019 08:58:59 -0400 In-Reply-To: Cc: Nick Hilliard , IPv6 Operations To: Timothy Winters References: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> X-Mailer: Apple Mail (2.3601.0.10) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 12:59:08 -0000 --Apple-Mail=_A62F7A98-8D99-4C73-AB8D-39B40985A21A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 30, 2019, at 8:40 AM, Timothy Winters = wrote: > We check both, the handling of the IA_PD and the error message. And to be clear, you mean that if the CPE asks for a prefix delegation = and doesn=E2=80=99t get the prefix it previously had, it deprecates it = as described in L-14? When this deprecation happens, what ways are = being tested for it to happen? E.g., is it the case that the client sends an IA PD containing an IA = Prefix option, is the server returning the IA Prefix option containing = the same prefix, with a status code encapsulated in it? What status = code? Or is it returning an IA Prefix option with a different prefix? = Or is it doing both? --Apple-Mail=_A62F7A98-8D99-4C73-AB8D-39B40985A21A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 30, 2019, at 8:40 AM, Timothy Winters <twinters@iol.unh.edu> wrote:
We check both, the handling of the = IA_PD and the error message.

And to be clear, you mean that if the CPE = asks for a prefix delegation and doesn=E2=80=99t get the prefix it = previously had, it deprecates it as described in L-14?  When this = deprecation happens, what ways are being tested for it to = happen?

E.g., = is it the case that the client sends an IA PD containing an IA Prefix = option, is the server returning the IA Prefix option containing the same = prefix, with a status code encapsulated in it?   What status code? =   Or is it returning an IA Prefix option with a different prefix? =   Or is it doing both?

= --Apple-Mail=_A62F7A98-8D99-4C73-AB8D-39B40985A21A-- From nobody Wed Oct 30 06:02:38 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF44D1208C4 for ; Wed, 30 Oct 2019 06:02:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CZ7OnDUynGLm for ; Wed, 30 Oct 2019 06:02:28 -0700 (PDT) Received: from mail-io1-xd2e.google.com (mail-io1-xd2e.google.com [IPv6:2607:f8b0:4864:20::d2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B0961208C3 for ; Wed, 30 Oct 2019 06:02:28 -0700 (PDT) Received: by mail-io1-xd2e.google.com with SMTP id p6so2401493iod.7 for ; Wed, 30 Oct 2019 06:02:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=u2SdyaNOL/pLE/QD5RLrRrgsXkE7JNaQDxFxDrdXE14=; b=DpW707v5fv6znuQwAYHiXozPVywHYlkH1E4rGUQniBTCXeOlWJGnpGq3OzdDOYuiW3 S4/4LLVwjW5PFACPSwu0SaRUE+BDzl6lz2LcrIfLhLk4Tng+L4z3Z7S/WHaZJBu5+ODx BYkdfdMMRPORyxs+ch71w8or50zCtukj5XoDFpF4zsFSHlZv5SWBgRuwTtIgzzYmp8GY UQAfJaxgb4T2vtvVxWietdIrs9HddSACk6Cg+K87RHByKODz6kp1j/p9Ci9C/ek5AXkA 6fI8LSJNRHu1+9jqyHNu/CVNZIs81hrx9hJcau6Mw81p8X2VcYL7KyRCdDdt9fn27y+C F5vQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=u2SdyaNOL/pLE/QD5RLrRrgsXkE7JNaQDxFxDrdXE14=; b=WBi7ydfi6dBnc8q21+BZj3XABOIAghZm9Qxowg4hRn2k0v/s8BsrcP7kS6TeSx2Q2m e8o2KNPT7PY4i/w14WMJLUHDHVb6KqU/MOsSASlcplz8jHpU6tGFVbAK6wUPIH+4H1mI CdxU6F45HDce5oJiLsSVqzbqEUXcfMJjqqiaJBwXT74ffazvEKAHakBG4l/rIk20wT/H oOicLxbr6FM+nWb4G6qoIr6HfSHEFDl+BIeu1O4HP5ERLDV5WAotA3yizaX929hmsEV1 Rf7WRCKkoG3u1/XdG1zOCIUho/xB5g1Nc4VXuvsRb8MZyZe4vcb3T2hRrvx8Rjj2ABrX Sx9w== X-Gm-Message-State: APjAAAUNiiad3+AvzU4R0GhlJrrPihyPVjSwKFgdAObfKC5+WDadq734 jkAvI/Up2DCQ6CI1J7LRJxjUky03NN9V+3d7fs4KaUGL X-Google-Smtp-Source: APXvYqxqnYCSxnv2bb9J72+QyUs/EYySZl0YxnMAPlpvsJn+4S8JlHWKRcRlpKsiTHszzLy9QOpk7OBdEkNClYuFm7o= X-Received: by 2002:a02:c558:: with SMTP id g24mr20979457jaj.52.1572440547217; Wed, 30 Oct 2019 06:02:27 -0700 (PDT) MIME-Version: 1.0 References: <740671f9-6e68-70ac-8dd2-91f9d24b965d@gmail.com> <4561ca6d-4611-27e8-5cb3-16e72075fa65@gmail.com> <750e36b6-1572-2b78-953b-b0da8ae39130@gmail.com> <16dded8e702.ed9b0e42235989.4158295187609945732@shytyi.net> <16de3269bda.12447abf02199.1998508517577039185@shytyi.net> <16e19602f4a.11692076f325242.5254263295023703726@shytyi.net> In-Reply-To: <16e19602f4a.11692076f325242.5254263295023703726@shytyi.net> From: Li HUANG Date: Wed, 30 Oct 2019 21:02:15 +0800 Message-ID: To: Dmytro Shytyi Cc: v6ops Content-Type: multipart/alternative; boundary="0000000000003f56220596205866" Archived-At: Subject: Re: [v6ops] Implementation of DANIR for IoT Router - DHCPv6-PD and ND X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 13:02:34 -0000 --0000000000003f56220596205866 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable 20:59.hk S8 Oct. 30 2019 Dear Dmytro, All using clients are windows, would it be mounted in linux to modify this at webex remote from your computer at a payable way? Sincerely yours Li HUANG On Wed, Oct 30, 2019, 05:16 Dmytro Shytyi wrote: > Hello Li, > > In the implementation it is possible to change the DUID. You need to > modify the linux kernel module code and recompile it. > ______________ > *Dmytro SHYTYI* > > ---- On Sat, 19 Oct 2019 15:04:29 +0200 *Li HUANG >* wrote ---- > > Oct. 19 2019 21:00.hk w10p m800 Sg|Rv > > > Thank you Dmytro and your group for sharing document on the specific > dhcpv6 related topics . You are welcome to share the dialog as well. > > Hopefully Linux/Uniz further OS checking around would be helped that > from Dhcpv6DUID modifying unable remained to be the subnet concerning at > your convenience . Which was online arrow getting to you ... > > > Sincerely > BleuOisou@gmail.com > Li HUANG > > > On Fri, Oct 18, 2019, 20:30 Dmytro Shytyi wrote: > > > Hello Li, > > Don't you mind if we include in our disscussion the IETF v6ops working > group? > In case you will not respond we will accept it as a permission to share > our disscussion with IETF Working group. > Thanks. > > > Bien cordialement, > *Dmytro SHYTYI* > > > ---- On Mon, 07 Oct 2019 14:32:46 +0200 *Alexandre Petrescu > >* wrote ---- > > Li, > > Below you will find are some answers from Dmytro. > > I suggest we discuss this publicly on the v6ops WG email list, because > it is on that list that others have responded (not on DHC WG email list). > > > 1# > Router - is a node, that performs forwarding. Router node is not a > final destination of forwarded packets. > > Diagram : > ISP---Switch (4 mac found : isp x2 , modem x1 , IANA x1)---- Router > (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , vpn mac) > > && DHCPv6DUID failed to keep the modified DHCPv6DUID eth.initial.mac > > [Dmytro] In the implementation DHVPvyDUID type field is set to "1" that > meanse that DUID based on the link-layer Address Plus Time is used. > > example from the DANIR KD6: > > dhp.kd6_sol->my_client_id.duid_type =3D htons(1); > > dhp.kd6_sol->my_client_id.hw_type =3D htons(1); > > //DUID time convert kernel vertsion to compatible option value > > ver =3D utsname()->version; > > sscanf(ver, "%*s %*s %*s %*s %s %d %d:%d:%d %*s %d",ktime_month, > &dh6_ktime.tm_mday, &dh6_ktime.tm_hour, &dh6_ktime.tm_min, > &dh6_ktime.tm_sec, &dh6_ktime.tm_year); > > dh6_ktime.tm_mon=3DGetMon(ktime_month); > > //pr_info( "EP KTIME: %d,%d,%d,%d,%d,%d", dh6_ktime.tm_mon, > dh6_ktime.tm_mday, dh6_ktime.tm_hour, dh6_ktime.tm_min, > dh6_ktime.tm_sec, dh6_ktime.tm_year); > > kernelCompilationTimeStartingFrom2000 =3D > convertTimeDateToSeconds(dh6_ktime); > > duid_time=3Dhtonl( kernelCompilationTimeStartingFrom2000 & 0xffffffff= ); > > memcpy > (&(dhp.kd6_sol->my_client_id.duid_time),&duid_time,sizeof(duid_time)); > > memcpy (dhp.kd6_sol->my_client_id.my_hw_addr, d->dev->dev_addr, 48); > > 2# > DHCP-PD only can be configured by a figure not IPv6 . Term of , when > example 2002:: input :: would make the app grey uncontinued. > > && > The Router Avertisement Messages carry the GUNPs > that are further used by the stateless autoconfiguration mechanism > (SLAAC) > > [Dmytro] RFC 4862 specifies the Router Advertisement processing process. > > 3# > Global Unique Address (GUA) - is an address that is globally > available and globally unique. > > Diagram : > ISP---Switch (4 mac found : isp x2 , modem x1 , IANA x1)---- Router > (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , vpn mac) > > - GUA is DHCPv6DUID eth.mac ? > - which GUA to be mentioned at the draft ? > - Dhcpv6DUID using sub-prefix the same as the IPv4 exactly > working eth.mac , by ipconfig /all detected when the vista replaced its > motherboard and having both new and initial eth.mac shown both? > - "After the DHCPv6 packet leaves the cellular interface of > the IoT > Requesting Router via wireless OFDMA link, it reaches the element of > the access network which connects to the user equipment (UEs) - > eNodeB station." likes there must be some wireless "USB.sgw.isp" > host or , Dhcpv6 must be on Cellular host ? When one of 4 mac switch > showing Nokia , which sometimes modem connecting arp -a shown as well? > That would cause the pretty much lost functions of wire.router.map > always via as if owning speed lower much than the wireless does have . > > [Dmytro] GUA is IPv6 global unique address. > > 4# > your freely downloadable kernal patch for Windows BIOS works ? > > [Dmytro] This is linux kernel module. Linux could be ran in the > virtualbox in the windows environment. > > 5# > "The Hop Limit of packets that contain the DHCPv6 data MUST be 255 to > satisfy the properties of the cellular infrastructure. To reach the > PGW from the UE the DHCPv6 packets are encapsulated by SGW into UDP/ > IPv4 packets; this encapsulation is for the GTP-U tunnel. The > corresponding decapsulation mechanism decreases the Hop Limit; when > the Hop Limit reaches value 0 the packet is discarded; to avoid this > situation it is required to put the Hop Limit value of the DHCPv6 > Solicit equal to 255." > > - hop in switch default 64 decreased to 48 then the > SGW would not work--> no dhcpv6 completed ---> no ipv6 get to switch > then Rv after it ? > > > The packet will be discarded when Hop Limit will reach 0. When Hop Limit > > 0 packet will not be discarded. > > > Dmytro and Alex > > > Le 04/10/2019 =C3=A0 16:16, Li HUANG a =C3=A9crit : > > Oct. 04 2019 22:12.hk w10p m800 Sg|Rv > > Attn: > > > > Authors' Addresses > > > > Dmytro Shytyi > > SFR > > Paris area , Ile-de-France > > France > > > > Email:ietf.dmytro@shytyi.net > > URI:http://dmytro.shytyi.net > > > > > > Internet-DraDHCPv6_PD, PDP and NDP Implementation in IoT Rou March 2019 > > > > > > Alexandre Petrescu > > CEA, LIST > > CEA Saclay > > Gif-sur-Yvette , Ile-de-France 91190 > > France > > > > Phone: +33169089223 > > Email:Alexandre.Petrescu@cea.fr > > > > > > Good Day Alex and Dmytro, > > > > > > > > > > Do read through draft and thank you for your sharing . > > > > Some here could have not understood them well or clear , please help in > > details off: > > > > > > 1# > > Router - is a node, that performs forwarding. Router node is not a > > final destination of forwarded packets. > > > > Diagram : > > ISP---Switch (4 mac found : isp x2 , modem x1 , IANA x1)---- Router > > (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , vpn mac) > > > > && DHCPv6DUID failed to keep the modified DHCPv6DUID eth.initial.mac > > > > > > > > 2# > > DHCP-PD only can be configured by a figure not IPv6 . Term of , when > > example 2002:: input :: would make the app grey uncontinued. > > > > && > > The Router Avertisement Messages carry the GUNPs > > that are further used by the stateless autoconfiguration mechanism > > (SLAAC) > > > > > > > > > > 3# > > Global Unique Address (GUA) - is an address that is globally > > available and globally unique. > > > > Diagram : > > ISP---Switch (4 mac found : isp x2 , modem x1 , IANA x1)---- Router > > (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , vpn mac) > > > > - GUA is DHCPv6DUID eth.mac ? > > - which GUA to be mentioned at the draft ? > > - Dhcpv6DUID using sub-prefix the same as the IPv4 exactly > > working eth.mac , by ipconfig /all detected when the vista replaced its > > motherboard and having both new and initial eth.mac shown both? > > - "After the DHCPv6 packet leaves the cellular interface of > > the IoT > > Requesting Router via wireless OFDMA link, it reaches the element of > > the access network which connects to the user equipment (UEs) - > > eNodeB station." likes there must be some wireless "USB.sgw.isp" > > host or , Dhcpv6 must be on Cellular host ? When one of 4 mac switch > > showing Nokia , which sometimes modem connecting arp -a shown as well? > > That would cause the pretty much lost functions of wire.router.map > > always via as if owning speed lower much than the wireless does have . > > > > > > > > > > 4# > > your freely downloadable kernal patch for Windows BIOS works ? > > > > > > > > > > 5# > > "The Hop Limit of packets that contain the DHCPv6 data MUST be 255 to > > satisfy the properties of the cellular infrastructure. To reach the > > PGW from the UE the DHCPv6 packets are encapsulated by SGW into UDP/ > > IPv4 packets; this encapsulation is for the GTP-U tunnel. The > > corresponding decapsulation mechanism decreases the Hop Limit; when > > the Hop Limit reaches value 0 the packet is discarded; to avoid this > > situation it is required to put the Hop Limit value of the DHCPv6 > > Solicit equal to 255." > > > > - hop in switch default 64 decreased to 48 then the > > SGW would not work--> no dhcpv6 completed ---> no ipv6 get to switch > > then Rv after it ? > > > > > > > > > > > > 6# > > "It is possible to use IPv6-over-PPP protocol [RFC1661], with LCP, > > between the ARM and the modem." > > > > "ARM has added a wealth of wireless technologies to > > its arsenal, but has no immediate plans to design a modem for mobile or > > Internet of Things devices. > > The company offers CPU and GPU designs that are widely used in > > smartphones and tablets. A missing piece is a cellular modem that ARM > > customers could license and put in mobile devices." > > > > > > - My modem is Fibre Huawai wire model, Rv, Sg all > > wirecable devices. > > > > > > 7# > > Could not have been able to select one who would help Modify Dhcpv6DUID > > completed , sent email to postmaster@microsoft.com > > none replying . > > > > > > > > > > > > Sincerely > > bleuoisou@gmail.com > > > > On Tue, Sep 24, 2019 at 1:27 AM Alexandre Petrescu > > > > wrote: > > > > Hi Li, > > > > IETF is not police of protocols: IETF can not force organisations to > > implement protocols or to fix bugs. But we can discuss about protocols > > at IETF. > > > > If Microsoft Windows does not implement DHCPv6-PD on wireless links > > (like on cellular), then I have two things to say. > > > > One thing is to say that Microsoft programmers should not worry. They > > are not the only ones who do not implement DHCPv6-PD on wireless links. > > There is also Qualcomm who refuses to. It may, or it may not be a > > problem. But it is not only Microsoft. An it is a good topic to > > work on. > > > > The other thing is to say that it is possible to run a linux virtual > > machine on a Microsoft Windows real machine. In that linux machine, > > one > > can run DHCPv6-PD, on the wireless interface of the real Microsoft > > Windows machine. We propose open source to achieve this. It is > > available at > > > https://dmytro.shytyi.net/kd6-danir-lite-kernel-dhcpv6-pd-and-ndp-impleme= ntation/ > > > > (we have tried to upload it to github, but we hit a 2Gb upload limit; > > this limit is a thing to complain to github, together with its lack of > > IPv6 access; and github is now a Microsoft organisation :-) > > > > Alex and Dmytro > > > > > > Le 20/09/2019 =C3=A0 01:55, Li HUANG a =C3=A9crit : > > > 08:47.hk S8 Sept 20 2019 > > > > > > > > > continued..., > > > > > > > > > Thank you rephrasing our diagonose for assuring the points. > > > > > > > > > Wireless advance for dhcpv6 is imagined to experienced network maps. > > > Which none wireless devices and plan isp at all decades. > > > > > > > > > Microsoft who is handing rcf3315 according modified failures, to > > > changed board OEM machine, has reached wall to resolve it inside > > microsoft. > > > > > > > > > Looking for some where who would enter the juridical like > > IEFT...etc., > > > in order to edge out what responsibility taken by who, if in such > > > compromising rcf rules obeying in conditions. > > > > > > > > > > > > Sincerely yours > > > Li HUANG > > > > > > > > > > > > > > > > > > > > > On Wed, Sep 18, 2019, 21:05 Alexandre Petrescu > > > > > > > >> wrote: > > > > > > Dear Li, > > > > > > Thank you for the partial clarification you sent in private > > about 'apt > > > windows'. I understand that by 'apt windows' you mean 'apart > > from > > > windows', which means 'with the exception of Windows'. > > > > > > So, I think you mean that we in our draft have a preference > > to run > > > DHCPv6-PD over the wireless interface, like with a phone. > > You also > > > mean > > > that is ok. You also mean that only Windows runs DHCPv6 on a > > wired > > > interface; because Windows blocked DHCPv6 on wwan and wlan > > interface. > > > > > > I think you are saying that this Windows blocking DHCPv6-PD > > on the > > > wireless interfaces caused you a lot of trouble, even after > > system > > > updates. > > > > > > Because of that I think you are asking that we make and > > forward to > > > Microsoft, a request to make DHCPv6-PD on the wireless interface. > > > > > > I may be wrong though. > > > > > > I would like to ask you: do you know somebody at Microsoft > > who cares > > > about DHCPv6? Or should I write simply to > > postmaster@microsoft.com > > > > > > > > hoping they will direct the message to people in charge? > > > > > > Alex > > > > > > Le 18/09/2019 =C3=A0 09:45, Alexandre Petrescu a =C3=A9crit : > > > > Dear Li, > > > > > > > > Please help me understand: > > > > > > > > What do you mean by 'apt windows'? > > > > > > > > Alex > > > > > > > > Le 18/09/2019 =C3=A0 07:39, Li HUANG a =C3=A9crit : > > > >> 09:39.hk S8 > > Sept 17th 2019 > > > >> > > > >> > > > >> Thank you dhcwg returning on this, > > > >> > > > >> > > > >> > > > >> IoT either PTP to dhcpv6 pd server sounds very like the > > running > > > >> preferially to wireless, or phone networks instead of apt > > > windows that > > > >> blocked wwan, wlan services of it ... > > > >> > > > >> > > > >> To the kernel apart, OEM user would principle following > > its offered > > > >> updates of system, in case dhcpv6 required update, how would > > > clients > > > >> obey protocol rcf 3315, 8415, 6260 whilst OEM warranty > > contract > > > to get > > > >> all none conflicts? > > > >> > > > >> > > > >> Microsoft is one putting on tracking, it must be forwarded to > > > them about. > > > >> > > > >> > > > >> Let have your kind advises on it please . > > > >> > > > >> > > > >> > > > >> Sincerely yours > > > >> Li HUANG > > > >> > > > >> On Tue, Sep 17, 2019, 10:48 Li HUANG > > > > > > > > >> > > >>> wrote: > > > >> > > > >> 09:39.hk > > S8 Sept 17th 2019 > > > >> > > > >> > > > >> Thank you dhcwg returning on this, > > > >> > > > >> > > > >> > > > >> IoT either PTP to dhcpv6 pd server sounds very like > > the running > > > >> preferially to wireless, or phone networks instead of apt > > > windows > > > >> that blocked wwan, wlan services of it ... > > > >> > > > >> > > > >> To the kernel apart, OEM user would principle > > following its > > > offered > > > >> updates of system, in case dhcpv6 required update, > > how would > > > clients > > > >> obey protocol rcf 3315, 8415, 6260 whilst OEM warranty > > > contract to > > > >> get all none conflicts? > > > >> > > > >> > > > >> Microsoft is one putting on tracking, it must be > > forwarded > > > to them > > > >> about. > > > >> > > > >> > > > >> Let have your kind advises on it please . > > > >> > > > >> > > > >> > > > >> Sincerely yours > > > >> Li HUANG > > > >> > > > >> > > > >> On Tue, Sep 17, 2019, 00:18 Alexandre Petrescu > > > >> > > > > > > > > > > > > > > >>> > > > >> wrote: > > > >> > > > >> Hello to participants in DHC WG, > > > >> > > > >> One might be interested in this kernel > > implementation of > > > >> DHCPv6-PD parts. > > > >> > > > >> Yours, > > > >> > > > >> Alex and Dmytro > > > >> > > > >> > > > >> -------- Message transf=C3=A9r=C3=A9 -------- > > > >> Sujet : Kernel implementation of DANIR for > > IoT Router - > > > >> DHCPv6-PD and ND > > > >> Date : Mon, 16 Sep 2019 09:21:46 +0200 > > > >> De : Alexandre Petrescu > > > > > > > >> > > > >> > > > > > >> > > > >> Pour : v6ops@ietf.org > > > > > > > > >> > > > >> > > >> > > > >> > > >> > > > >> > > > >> > > > >> > > > >> Hi, > > > >> > > > >> The kernel implementation of DANIR for IoT Router was > > > finally > > > >> working a few weeks ago. > > > >> > > > >> It is an implementation of > > draft-shytyi-v6ops-danir-03.txt. > > > >> This is the right thing to do, instead of > > '64share' RFC7278. > > > >> > > > >> In this video one can see the kernel in the IoT > > Router > > > issues a > > > >> DHCPv6 PD request on its egress and obtains a /56; it > > > then makes > > > >> several /64s out of it and subsequently sends RAs > > with > > > these on > > > >> the ingress interfaces. > > > >> > > > >> The DHCPv6 server is took off-the-shelf. The PDP > > part > > > is not > > > >> present in the IoT Router, but we expect it to > > work ok > > > on a ptp > > > >> link on a cellular network to a smartphone. > > > >> > > > >> The video recorded the virtual machines output on the > > > IoT Router > > > >> (featured below), the Client device behind it, > > and the > > > DHCPv6-PD > > > >> server. > > > >> > > > >> https://youtu.be/DymVQY7bCUM > > > >> > > > >> > > > >> Yours, > > > >> > > > >> Alexandre PETRESCU and Dmytro SHYTYI > > > >> > > > >> PS: we will soon post the source code on github. > > > >> > > > >> _______________________________________________ > > > >> dhcwg mailing list > > > >> dhcwg@ietf.org > > > > > > > > >> > > > >> https://www.ietf.org/mailman/listinfo/dhcwg > > > >> > > > > > > > > _______________________________________________ > > > > dhcwg mailing list > > > > dhcwg@ietf.org > > > > > > > https://www.ietf.org/mailman/listinfo/dhcwg > > > > > > _______________________________________________ > > > dhcwg mailing list > > > dhcwg@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dhcwg > > > > > > > > > > > > > --0000000000003f56220596205866 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
20:59.hk S8 Oct. 30 2019

Dear = Dmytro,

All using client= s are windows, would it be mounted in linux to modify this at webex remote = from your computer at a payable way?


Sincerely yours
Li HUANG

On Wed, Oct 30, 2019, 05:16 Dmytro Shytyi <ietf.dmytro@shytyi.net> wrote:
Hello Li,

In the implementation it is possible to change the DUID. You need to= modify the linux kernel module code and recompile it.
______________
Dmytro SHYTYI

---- On Sat, 19 Oct 2019 15:04:29 +0200 Li HUANG <bleuoisou@gma= il.com> wrote ----

Oct. 19 2019=C2=A0 21:00.hk w10p m800 Sg|Rv


Thank you Dmytro and your group for sha= ring document on the specific dhcpv6 related topics .=C2=A0 You are welcome= to share the dialog as well.

Hopefully Linux= /Uniz further=C2=A0 OS checking around=C2=A0 would be helped that from Dhcp= v6DUID modifying unable remained to be the subnet concerning at your conven= ience . Which was online arrow getting to you ...

<= div>
Sincerely


On Fri, Oct 18, 2019, 20:30 Dmytro Shytyi= <dmytro@shytyi.net> wrote:


H= ello Li,=C2=A0

Don't you mind if we includ= e in our disscussion the IETF v6ops working group?
In case yo= u will not respond we will accept it as a permission to share our disscussi= on with IETF Working group.=C2=A0
Thanks.

<= /div>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0
Bi= en cordialement,
Dmytro SHY= TYI


---- = On Mon, 07 Oct 2019 14:32:46 +0200 Alexandre Petrescu <alex= andre.petrescu@gmail.com> wrote ----

Li,

Below you will find ar= e some answers from Dmytro.

I suggest we discuss this publicly on = the v6ops WG email list, because
it is on that list that others have re= sponded (not on DHC WG email list).


1#
Router - is a no= de, that performs forwarding. Router node is not a
final destination = of forwarded packets.

Diagram :
ISP---Switch (4 mac found : = isp x2 , modem x1 , IANA x1)---- Router
(WAN1,2, LAN 3 mac )---- PCs (= wire, wireless , vpn mac)

&& DHCPv6DUID failed to keep th= e modified DHCPv6DUID eth.initial.mac

[Dmytro] In the implementati= on DHVPvyDUID type field is set to "1" that
meanse that DUID = based on the link-layer Address Plus Time is used.

example from th= e DANIR KD6:

=C2=A0=C2=A0=C2=A0=C2=A0dhp.kd6_sol->my_client_id.= duid_type =3D htons(1);

=C2=A0=C2=A0=C2=A0=C2=A0dhp.kd6_sol->my= _client_id.hw_type =3D htons(1);

=C2=A0=C2=A0=C2=A0=C2=A0//DUID ti= me convert kernel vertsion to compatible option value

=C2=A0=C2=A0= =C2=A0=C2=A0ver =3D utsname()->version;

=C2=A0=C2=A0=C2=A0=C2= =A0sscanf(ver, "%*s %*s %*s %*s %s %d %d:%d:%d %*s %d",ktime_mont= h,
&dh6_ktime.tm_mday, &dh6_ktime.tm_hour, &dh6_ktime.tm_mi= n,
&dh6_ktime.tm_sec, &dh6_ktime.tm_year);

=C2=A0=C2= =A0=C2=A0=C2=A0dh6_ktime.tm_mon=3DGetMon(ktime_month);

=C2=A0=C2= =A0=C2=A0=C2=A0//pr_info( "EP KTIME: %d,%d,%d,%d,%d,%d", dh6_ktim= e.tm_mon,
dh6_ktime.tm_mday, dh6_ktime.tm_hour, dh6_ktime.tm_min,
d= h6_ktime.tm_sec, dh6_ktime.tm_year);

=C2=A0=C2=A0=C2=A0=C2=A0kerne= lCompilationTimeStartingFrom2000 =3D
convertTimeDateToSeconds(dh6_ktime= );

=C2=A0=C2=A0=C2=A0=C2=A0duid_time=3Dhtonl( kernelCompilationTim= eStartingFrom2000 & 0xffffffff);

=C2=A0=C2=A0=C2=A0=C2=A0memcp= y
(&(dhp.kd6_sol->my_client_id.duid_time),&duid_time,sizeof(= duid_time));

=C2=A0=C2=A0=C2=A0=C2=A0memcpy (dhp.kd6_sol->my_cl= ient_id.my_hw_addr, d->dev->dev_addr, 48);

2#
DHCP-PD = only can be configured by a figure not IPv6 . Term of , when
example 2= 002:: input :: would make the app grey uncontinued.

&& The Router Avertisement Messages carry the GUNPs
that are further u= sed by the stateless autoconfiguration mechanism
(SLAAC)

[Dmy= tro] RFC 4862 specifies the Router Advertisement processing process.
<= br> 3#
Global Unique Address (GUA) - is an address that is globally available and globally unique.

Diagram :
ISP---Switch (4 = mac found : isp x2 , modem x1 , IANA x1)---- Router
(WAN1,2, LAN 3 mac= )---- PCs (wire, wireless , vpn mac)

- GUA is DHCPv6DUID eth.mac= ?
- which GUA to be mentioned at the draft ?
- Dhcpv6DUID using = sub-prefix the same as the IPv4 exactly
working eth.mac , by ipconfig = /all detected when the vista replaced its
motherboard and having both = new and initial eth.mac shown both?
- "After the DHCPv6 packet le= aves the cellular interface of
the IoT
Requesting Router via wire= less OFDMA link, it reaches the element of
the access network which co= nnects to the user equipment (UEs) -
eNodeB station." likes th= ere must be some wireless "USB.sgw.isp"
host or , Dhcpv6 mu= st be on Cellular host ? When one of 4 mac switch
showing Nokia , whic= h sometimes modem connecting arp -a shown as well?
That would cause th= e pretty much lost functions of wire.router.map
always via as if ownin= g speed lower much than the wireless does have .

[Dmytro] GUA is I= Pv6 global unique address.

4#
your freely downloadable kerna= l patch for Windows BIOS works ?

[Dmytro] This is linux kernel mod= ule. Linux could be ran in the
virtualbox in the windows environment. <= br>
5#
"The Hop Limit of packets that contain the DHCPv6 dat= a MUST be 255 to
satisfy the properties of the cellular infrastructure= . To reach the
PGW from the UE the DHCPv6 packets are encapsulated by= SGW into UDP/
IPv4 packets; this encapsulation is for the GTP-U tunne= l. The
corresponding decapsulation mechanism decreases the Hop Limit;= when
the Hop Limit reaches value 0 the packet is discarded; to avoid = this
situation it is required to put the Hop Limit value of the DHCPv6=
Solicit equal to 255."

- hop in switch default 64 decr= eased to 48 then the
SGW would not work--> no dhcpv6 completed ---&= gt; no ipv6 get to switch
then Rv after it ?


The packet = will be discarded when Hop Limit will reach 0. When Hop Limit
> 0 p= acket will not be discarded.


Dmytro and Alex


Le= 04/10/2019 =C3=A0 16:16, Li HUANG a =C3=A9crit=C2=A0:
> Oct. 04 201= 9=C2=A0 22:12= .hk <h= ttp://12.hk> w10p m800 Sg|Rv
> Attn:
>
> Author= s' Addresses
>
> Dmytro Shytyi
> SFR
&= gt; Paris area , Ile-de-France
> France
>
> = Email:ietf.dmytro@shytyi.net <mailto:ietf.dmytro@shytyi.ne= t>
> URI:http://dmytro.shytyi.net
>
> > Internet-DraDHCPv6_PD, PDP and NDP Implementation in IoT Rou March 2= 019
>
>
> Alexandre Petrescu
> CEA, LIS= T
> CEA Saclay
> Gif-sur-Yvette , Ile-de-France 911= 90
> France
>
> Phone: +33169089223
> = Email:Alexandre.Petrescu@cea.fr <mailto:Alexandre.P= etrescu@cea.fr>
>
>
> Good Day Alex and Dmytro,=
>
>
>
>
> Do read through draft and tha= nk you for your sharing .
>
> Some here could have not unders= tood them well or clear , please help in
> details off:
> >
> 1#
> Router - is a node, that performs forwarding.=C2= =A0 Router node is not a
> =C2=A0 =C2=A0final destination of forwar= ded packets.
>
> Diagram :
> ISP---Switch (4 mac found= : isp x2 , modem x1 , IANA x1)---- Router
> (WAN1,2, LAN 3 mac )---= - PCs (wire, wireless , vpn mac)
>
> && DHCPv6DUID fa= iled to keep the modified DHCPv6DUID eth.initial.mac
>
>
= >
> 2#
> DHCP-PD only can be configured by a figure not IP= v6 . Term of , when
> example 2002:: input :: would make the app gre= y uncontinued.
>
> &&
> The Router Avertisemen= t Messages carry the GUNPs
> =C2=A0 =C2=A0that are further used by = the stateless autoconfiguration mechanism
> =C2=A0 =C2=A0(SLAAC) >
>
>
>
> 3#
> Global Unique Addres= s (GUA) - is an address that is globally
> =C2=A0 =C2=A0available a= nd globally unique.
>
> Diagram :
> ISP---Switch (4 ma= c found : isp x2 , modem x1 , IANA x1)---- Router
> (WAN1,2, LAN 3 m= ac )---- PCs (wire, wireless , vpn mac)
>
> =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0- GUA is DHCPv6DUID eth.mac ?
> =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0- which GUA to be mentioned at the draft = ?
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0- Dhcpv6DUID using sub= -prefix the same as the IPv4 exactly
> working eth.mac , by ipconfig= /all detected when the vista replaced its
> motherboard and having = both new and initial eth.mac shown both?
> =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0- "After the DHCPv6 packet leaves the cellular interf= ace of
> the IoT
> =C2=A0 =C2=A0Requesting Router via wirele= ss OFDMA link, it reaches the element of
> =C2=A0 =C2=A0the access = network which connects to the user equipment (UEs) -
> =C2=A0 =C2= =A0eNodeB station." =C2=A0 =C2=A0likes there must be some wireless &qu= ot;USB.sgw.isp"
> host or , =C2=A0Dhcpv6 must be on Cellular ho= st ? When one of 4 mac switch
> showing Nokia , which sometimes mode= m connecting arp -a shown as well?
> That would cause the pretty muc= h lost functions of wire.router.map
> always via as if owning speed = lower much than the wireless does have .
>
>
>
>= ;
> 4#
> your freely downloadable kernal patch for Windows BI= OS works ?
>
>
>
>
> 5#
> "T= he Hop Limit of packets that contain the DHCPv6 data MUST be 255 to
>= ; =C2=A0 =C2=A0satisfy the properties of the cellular infrastructure.=C2= =A0 To reach the
> =C2=A0 =C2=A0PGW from the UE the DHCPv6 packets = are encapsulated by SGW into UDP/
> =C2=A0 =C2=A0IPv4 packets; this= encapsulation is for the GTP-U tunnel.=C2=A0 The
> =C2=A0 =C2=A0co= rresponding decapsulation mechanism decreases the Hop Limit; when
> = =C2=A0 =C2=A0the Hop Limit reaches value 0 the packet is discarded; to avo= id this
> =C2=A0 =C2=A0situation it is required to put the Hop Limi= t value of the DHCPv6
> =C2=A0 =C2=A0Solicit equal to 255." >
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0- hop in switch default 64 decreased to 48 then the
> SGW woul= d not work--> no dhcpv6 completed ---> no ipv6 get to switch
>= then Rv after it ?
>
>
>
>
>
> 6= #
> "It is possible to use IPv6-over-PPP protocol [RFC1661], wi= th LCP,
> =C2=A0 =C2=A0between the ARM and the modem."
>= ;
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = "ARM has added a wealth of wireless technologies to
> its arsen= al, but has no immediate plans to design a modem for mobile or
> Int= ernet of Things devices.
> The company offers CPU and GPU designs th= at are widely used in
> smartphones and tablets. A missing piece is = a cellular modem that ARM
> customers could license and put in mobil= e devices."
>
>
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 - My modem is Fibre Huawai wire model, Rv, Sg all
= > wirecable devices.
>
>
> 7#
> Could not ha= ve been able to select one who would help Modify Dhcpv6DUID
> comple= ted , sent email to postmaster@microsoft.com
> <mailto:= postmaster@microsoft.com> none replying .
>
> >
>
>
> Sincerely
> bleuoisou@gmail.com <mailto:bleuoisou@gmail.com>
>
> On Tue, Sep 2= 4, 2019 at 1:27 AM Alexandre Petrescu
> <alexandre.petr= escu@gmail.com <mailto:alexandre.petrescu@gmail.com>= ;> wrote:
>
> Hi Li,
>
> IETF is not= police of protocols: IETF can not force organisations to
> impl= ement protocols or to fix bugs.=C2=A0 But we can discuss about protocols > at IETF.
>
> If Microsoft Windows does not imp= lement DHCPv6-PD on wireless links
> (like on cellular), then I = have two things to say.
>
> One thing is to say that Micr= osoft programmers should not worry.=C2=A0 They
> are not the onl= y ones who do not implement DHCPv6-PD on wireless links.
> There= is also Qualcomm who refuses to.=C2=A0 It may, or it may not be a
>= problem.=C2=A0 But it is not only Microsoft.=C2=A0 An it is a good top= ic to
> work on.
>
> The other thing is to say= that it is possible to run a linux virtual
> machine on a Micro= soft Windows real machine.=C2=A0 In that linux machine,
> one > can run DHCPv6-PD, on the wireless interface of the real Microso= ft
> Windows machine.=C2=A0 We propose open source to achieve th= is.=C2=A0 It is
> available at
> https://dmytro.shytyi.net/kd6-danir-lite-ke= rnel-dhcpv6-pd-and-ndp-implementation/
>
> (we have t= ried to upload it to github, but we hit a 2Gb upload limit;
> th= is limit is a thing to complain to github, together with its lack of
&g= t; IPv6 access; and github is now a Microsoft organisation :-)
>=
> Alex and Dmytro
>
>
> Le 20/09/2019 = =C3=A0 01:55, Li HUANG a =C3=A9crit=C2=A0:
> > 08:47.hk <http://47.hk>= <http://4= 7.hk> S8 Sept 20 2019
> >
> >
>= > continued...,
> >
> >
> = > Thank you rephrasing our diagonose for assuring the points.
>= >
> >
> > Wireless advance for dhcpv= 6 is imagined to experienced network maps.
> > Which none wi= reless devices and plan isp at all decades.
> >
> = >
> > Microsoft who is handing rcf3315 according modifi= ed failures,=C2=A0 to
> > changed board OEM machine, has rea= ched wall to resolve it inside
> microsoft.
> > <= br>> >
> > Looking for some where who would enter= the juridical like
> IEFT...etc.,
> > in order t= o edge out what responsibility taken by who, if in such
> > = compromising rcf rules obeying=C2=A0 in conditions.
> >
= > >
> >
> > Sincerely yours
&g= t; > Li HUANG
> >
> >
> &= gt;
> >
> >
> >
> = > On Wed, Sep 18, 2019, 21:05 Alexandre Petrescu
> > <= alexandre.petrescu@gmail.com
> <mailto:alexandre.petrescu@gmail.com>
> <mailto:a= lexandre.petrescu@gmail.com
> <mailto:alexandre= .petrescu@gmail.com>>> wrote:
> >
> = >=C2=A0 =C2=A0 =C2=A0Dear Li,
> >
> >=C2= =A0 =C2=A0 =C2=A0Thank you for the partial clarification you sent in privat= e
> about 'apt
> >=C2=A0 =C2=A0 =C2=A0windows= '.=C2=A0 I understand that by 'apt windows' you mean 'apart=
> from
> >=C2=A0 =C2=A0 =C2=A0windows', whic= h means 'with the exception of Windows'.
> >
>= ; >=C2=A0 =C2=A0 =C2=A0So, I think you mean that we in our draft ha= ve a preference
> to run
> >=C2=A0 =C2=A0 =C2=A0D= HCPv6-PD over the wireless interface, like with a phone.
> You a= lso
> >=C2=A0 =C2=A0 =C2=A0mean
> >=C2=A0 =C2= =A0 =C2=A0that is ok.=C2=A0 You also mean that only Windows runs DHCPv6 on = a
> wired
> >=C2=A0 =C2=A0 =C2=A0interface; becau= se Windows blocked DHCPv6 on wwan and wlan
> interface.
>= >
> >=C2=A0 =C2=A0 =C2=A0I think you are saying tha= t this Windows blocking DHCPv6-PD
> on the
> >=C2= =A0 =C2=A0 =C2=A0wireless interfaces caused you a lot of trouble, even afte= r
> system
> >=C2=A0 =C2=A0 =C2=A0updates.
&g= t; >
> >=C2=A0 =C2=A0 =C2=A0Because of that I think = you are asking that we make and
> forward to
> >= =C2=A0 =C2=A0 =C2=A0Microsoft, a request to make DHCPv6-PD on the wireless = interface.
> >
> >=C2=A0 =C2=A0 =C2=A0I may b= e wrong though.
> >
> >=C2=A0 =C2=A0 =C2=A0I = would like to ask you: do you know somebody at Microsoft
> who c= ares
> >=C2=A0 =C2=A0 =C2=A0about DHCPv6?=C2=A0 Or should I = write simply to
> postmaster@microsoft.com <mailto:postmaster@microsoft.com>
> >=C2=A0 =C2=A0 =C2=A0&l= t;mailto:postmaster@microsoft.com
> <mailto:= postmaster@microsoft.com>>
> >=C2=A0 =C2=A0 =C2=A0= hoping they will direct the message to people in charge?
> >=
> >=C2=A0 =C2=A0 =C2=A0Alex
> >
> = >=C2=A0 =C2=A0 =C2=A0Le 18/09/2019 =C3=A0 09:45, Alexandre Petrescu a = =C3=A9crit=C2=A0:
> >=C2=A0 =C2=A0 =C2=A0 > Dear Li,
= > >=C2=A0 =C2=A0 =C2=A0 >
> >=C2=A0 =C2=A0 =C2= =A0 > Please help me understand:
> >=C2=A0 =C2=A0 =C2=A0 = >
> >=C2=A0 =C2=A0 =C2=A0 > What do you mean by 'a= pt windows'?
> >=C2=A0 =C2=A0 =C2=A0 >
> = >=C2=A0 =C2=A0 =C2=A0 > Alex
> >=C2=A0 =C2=A0 =C2=A0 &= gt;
> >=C2=A0 =C2=A0 =C2=A0 > Le 18/09/2019 =C3=A0 07:39,= Li HUANG a =C3=A9crit=C2=A0:
> >=C2=A0 =C2=A0 =C2=A0 >&g= t; 09:39.hk <http:/= /39.hk> <http://39.hk> <http://39.hk/>=C2=A0S8
> Sept 17th 201= 9
> >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 = =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> Than= k you dhcwg returning on this,
> >=C2=A0 =C2=A0 =C2=A0 >&= gt;
> >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2= =A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> = IoT either PTP to dhcpv6 pd server sounds very like the
> runnin= g
> >=C2=A0 =C2=A0 =C2=A0 >> preferially to wireless, = or phone networks instead of apt
> >=C2=A0 =C2=A0 =C2=A0wind= ows that
> >=C2=A0 =C2=A0 =C2=A0 >> blocked wwan, wlan= services of it ...
> >=C2=A0 =C2=A0 =C2=A0 >>
>= ; >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 = =C2=A0 >> To the kernel apart, OEM user would principle following > its offered
> >=C2=A0 =C2=A0 =C2=A0 >> updat= es of system, in case dhcpv6 required update, how would
> >= =C2=A0 =C2=A0 =C2=A0clients
> >=C2=A0 =C2=A0 =C2=A0 >>= obey protocol rcf 3315, 8415, 6260 whilst OEM warranty
> contra= ct
> >=C2=A0 =C2=A0 =C2=A0to get
> >=C2=A0 = =C2=A0 =C2=A0 >> all none conflicts?
> >=C2=A0 =C2=A0 = =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >>
> = >=C2=A0 =C2=A0 =C2=A0 >> Microsoft is one putting on tracking, = it must be forwarded to
> >=C2=A0 =C2=A0 =C2=A0them about. <= br>> >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2= =A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> Let hav= e your kind advises on it please .
> >=C2=A0 =C2=A0 =C2=A0 &= gt;>
> >=C2=A0 =C2=A0 =C2=A0 >>
> >= =C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >&g= t; Sincerely yours
> >=C2=A0 =C2=A0 =C2=A0 >> Li HUANG=
> >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 = =C2=A0 =C2=A0 >> On Tue, Sep 17, 2019, 10:48 Li HUANG <bleuoisou@= gmail.com
> <mailto:bleuoisou@gmail.com>
>= >=C2=A0 =C2=A0 =C2=A0<mailto:bleuoisou@gmail.com <mailt= o:bleuoisou@gmail.com>>
> >=C2=A0 =C2=A0 =C2=A0 &= gt;> <mailto:bleuoisou@gmail.com <mailto:bleuoisou@gmail.com= >
> <mailto:bleuoisou@gmail.com <mailto:bleuo= isou@gmail.com>>>> wrote:
> >=C2=A0 =C2=A0 = =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2= =A0=C2=A0 09:= 39.hk <http://39.hk> <http://39.hk> <http://39.hk>
> S8 Sept 17th 201= 9
> >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 = =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> =C2= =A0=C2=A0=C2=A0 Thank you dhcwg returning on this,
> >=C2=A0= =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> > >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2= =A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 IoT either PTP to dhcpv6 pd server s= ounds very like
> the running
> >=C2=A0 =C2=A0 = =C2=A0 >> =C2=A0=C2=A0=C2=A0 preferially to wireless, or phone networ= ks instead of apt
> >=C2=A0 =C2=A0 =C2=A0windows
> = >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 that blocked wwan, = wlan services of it ...
> >=C2=A0 =C2=A0 =C2=A0 >> > >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2= =A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 To the kernel apart, OEM user would = principle
> following its
> >=C2=A0 =C2=A0 =C2=A0= offered
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 = updates of system, in case dhcpv6 required update,
> how would <= br>> >=C2=A0 =C2=A0 =C2=A0clients
> >=C2=A0 =C2= =A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 obey protocol rcf 3315, 8415, 6260 w= hilst OEM warranty
> >=C2=A0 =C2=A0 =C2=A0contract to
&g= t; >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 get all none c= onflicts?
> >=C2=A0 =C2=A0 =C2=A0 >>
> >= ;=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >&= gt; =C2=A0=C2=A0=C2=A0 Microsoft is one putting on tracking, it must be > forwarded
> >=C2=A0 =C2=A0 =C2=A0to them
> = >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 about.
> = >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2= =A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0= =C2=A0 Let have your kind advises on it please .
> >=C2=A0 = =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >>
= > >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0= =C2=A0 >> =C2=A0=C2=A0=C2=A0 Sincerely yours
> >=C2= =A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 Li HUANG
> >= =C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >&g= t;
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 On Tu= e, Sep 17, 2019, 00:18 Alexandre Petrescu
> >=C2=A0 =C2=A0 = =C2=A0 >> =C2=A0=C2=A0=C2=A0 <alexandre.petrescu@gmail.c= om
> <mailto:alexandre.petrescu@gmail.com&g= t;
> >=C2=A0 =C2=A0 =C2=A0<mailto:alexandre.pet= rescu@gmail.com
> <mailto:alexandre.petrescu@gm= ail.com>>
> >=C2=A0 =C2=A0 =C2=A0<mailto:alexandre.petrescu@gmail.com
> <mailto:alex= andre.petrescu@gmail.com>
> >=C2=A0 =C2=A0 =C2=A0<= mailto:alexandre.petrescu@gmail.com
> <mailto:<= a href=3D"mailto:alexandre.petrescu@gmail.com" target=3D"_blank" rel=3D"nor= eferrer">alexandre.petrescu@gmail.com>>>>
> >= ;=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0 wrote:
> >= =C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >&g= t; =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Hello to participants in DHC = WG,
> >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2= =A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 One m= ight be interested in this kernel
> implementation of
> = >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0 DHCPv6-PD parts.
> >=C2=A0 =C2=A0 =C2=A0 >> > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 Yours,
> >=C2=A0 =C2=A0 =C2=A0 >>
>= ; >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 Alex and Dmytro
> >=C2=A0 =C2=A0 =C2=A0 >> <= br>> >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2= =A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -------- Mes= sage transf=C3=A9r=C3=A9 --------
> >=C2=A0 =C2=A0 =C2=A0 &g= t;> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Sujet=C2=A0:=C2=A0=C2=A0= =C2=A0=C2=A0 Kernel implementation of DANIR for
> IoT Router - <= br>> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 DHCPv6-PD and ND
> >=C2=A0 =C2=A0 =C2=A0 >= ;> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Date=C2=A0:=C2=A0=C2=A0=C2= =A0=C2=A0 Mon, 16 Sep 2019 09:21:46 +0200
> >=C2=A0 =C2=A0 = =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 De=C2=A0:=C2=A0= =C2=A0=C2=A0=C2=A0 Alexandre Petrescu
> >=C2=A0 =C2=A0 =C2= =A0<alexandre.petrescu@gmail.com
> <mailto:<= a href=3D"mailto:alexandre.petrescu@gmail.com" target=3D"_blank" rel=3D"nor= eferrer">alexandre.petrescu@gmail.com>
> <mailto:alexandre.petrescu@gmail.com
> <mailto:ale= xandre.petrescu@gmail.com>>>
> >=C2=A0 =C2=A0 = =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <mailto:alexandre.petrescu@gmail.com
> <mailto:ale= xandre.petrescu@gmail.com>
> >=C2=A0 =C2=A0 =C2=A0<= ;mailto:alexandre.petrescu@gmail.com
> <mailto:= alexandre.petrescu@gmail.com>>>
> >= =C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Po= ur=C2=A0: v6ops@ietf.org <mailto:v6ops@ietf.org>
> <mai= lto:= v6ops@ietf.org <mailto:v6ops@ietf.org>>
> >=C2= =A0 =C2=A0 =C2=A0<mailto:v6ops@ietf.org <mailto:v6ops@ietf.org> > <mailto:v6ops@ietf.org <mailto:v6ops@ietf.org>>> =
> >=C2=A0 =C2=A0 =C2=A0 >> <v6ops@ietf.org <mail= to:v= 6ops@ietf.org>
> <mailto:v6ops@ietf.org <mailto:v6ops@i= etf.org>>>
> >=C2=A0 =C2=A0 =C2=A0 >> =C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <mailto:v6ops@ietf.org <mailt= o:v6= ops@ietf.org>
> <mailto:v6ops@ietf.org <mailto:v6ops@ie= tf.org>>>
> >=C2=A0 =C2=A0 =C2=A0 >>
= > >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0= =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Hi,
> >=C2=A0 =C2=A0 =C2= =A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 The kernel implementation of DANIR for IoT R= outer was
> >=C2=A0 =C2=A0 =C2=A0finally
> >= =C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 wo= rking a few weeks ago.
> >=C2=A0 =C2=A0 =C2=A0 >>
= > >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 It is an implementation of
> draft-shytyi-v6ops-dan= ir-03.txt.
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 This is the right thing to do, instead of
&= gt; '64share' RFC7278.
> >=C2=A0 =C2=A0 =C2=A0 &= gt;>
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 In this video one can see the kernel in the IoT > Router
> >=C2=A0 =C2=A0 =C2=A0issues a
> = >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0 DHCPv6 PD request on its egress and obtains a /56; it
> = >=C2=A0 =C2=A0 =C2=A0then makes
> >=C2=A0 =C2=A0 =C2=A0 &= gt;> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 several /64s out of it a= nd subsequently sends RAs
> with
> >=C2=A0 =C2=A0= =C2=A0these on
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 the ingress interfaces.
> >= ;=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >&= gt; =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 The DHCPv6 server is took of= f-the-shelf.=C2=A0 The PDP
> part
> >=C2=A0 =C2= =A0 =C2=A0is not
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 present in the IoT Router, but we expect = it to
> work ok
> >=C2=A0 =C2=A0 =C2=A0on a ptp <= br>> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 link on a cellular network to a smartphone.
> &= gt;=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >= ;> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 The video recorded the vir= tual machines output on the
> >=C2=A0 =C2=A0 =C2=A0IoT Route= r
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 (featured below), the Client device behind it,
> = and the
> >=C2=A0 =C2=A0 =C2=A0DHCPv6-PD
> &= gt;=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= server.
> >=C2=A0 =C2=A0 =C2=A0 >>
> >= =C2=A0 =C2=A0 =C2=A0 >> https://youtu.be/DymVQY7bCUM
> = >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 =C2= =A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yours,
> >=C2=A0 =C2=A0 =C2= =A0 >>
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Alexandre PETRESCU and Dmytro SHYTYI
>= ; >=C2=A0 =C2=A0 =C2=A0 >>
> >=C2=A0 =C2=A0 = =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 PS: we will soon= post the source code on github.
> >=C2=A0 =C2=A0 =C2=A0 >= ;>
> >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 _______________________________________________
&= gt; >=C2=A0 =C2=A0 =C2=A0 >> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 dhcwg mailing list
> >=C2=A0 =C2=A0 =C2=A0 >= > dhcwg@ietf.org <mailto:dhcwg@ietf.org>
> <mailto:<= a href=3D"mailto:dhcwg@ietf.org" target=3D"_blank" rel=3D"noreferrer">dhcwg= @ietf.org <mailto:dhcwg@ietf.org>>
> <mailto:dhcwg@i= etf.org <mailto:dhcwg@ietf.org>
> >=C2=A0 =C2=A0 = =C2=A0<mailto:dhcwg@ietf.org <mailto:dhcwg@ietf.org>>>
&= gt; >=C2=A0 =C2=A0 =C2=A0 >> https://www.ie= tf.org/mailman/listinfo/dhcwg
> >=C2=A0 =C2=A0 =C2=A0 &g= t;>
> >=C2=A0 =C2=A0 =C2=A0 >
> >=C2=A0= =C2=A0 =C2=A0 > _______________________________________________
>= ; >=C2=A0 =C2=A0 =C2=A0 > dhcwg mailing list
> >= =C2=A0 =C2=A0 =C2=A0 > dhcwg@ietf.org <mailto:dhcwg@ietf.org>
= > <mailto:dhcwg@ietf.org <mailto:dhcwg@ietf.org>>
&g= t; >=C2=A0 =C2=A0 =C2=A0 > https://www.ietf.or= g/mailman/listinfo/dhcwg
> >
> >=C2=A0 = =C2=A0 =C2=A0_______________________________________________
> = >=C2=A0 =C2=A0 =C2=A0dhcwg mailing list
> > dhcwg@ietf.org <mailto:dhcwg@ietf.org> <mailto:dhcwg@ietf.org
> <= mailto:dhcwg@ietf.org>>
> > https://= www.ietf.org/mailman/listinfo/dhcwg
> >
>






--0000000000003f56220596205866-- From nobody Wed Oct 30 06:13:39 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E1C3120A1A for ; Wed, 30 Oct 2019 06:13:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wZPh0v7_aGxn for ; Wed, 30 Oct 2019 06:13:29 -0700 (PDT) Received: from oxalide-smtp-out.extra.cea.fr (oxalide-smtp-out.extra.cea.fr [132.168.224.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2AB0712006F for ; Wed, 30 Oct 2019 06:13:28 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by oxalide-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9UDDQpx015760 for ; Wed, 30 Oct 2019 14:13:26 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id C08E0206421 for ; Wed, 30 Oct 2019 14:13:26 +0100 (CET) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id B5BE62063EA for ; Wed, 30 Oct 2019 14:13:26 +0100 (CET) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9UDDQ3C001336 for ; Wed, 30 Oct 2019 14:13:26 +0100 To: v6ops@ietf.org References: <740671f9-6e68-70ac-8dd2-91f9d24b965d@gmail.com> <4561ca6d-4611-27e8-5cb3-16e72075fa65@gmail.com> <750e36b6-1572-2b78-953b-b0da8ae39130@gmail.com> <16dded8e702.ed9b0e42235989.4158295187609945732@shytyi.net> <16de3269bda.12447abf02199.1998508517577039185@shytyi.net> <16e19602f4a.11692076f325242.5254263295023703726@shytyi.net> From: Alexandre Petrescu Message-ID: <0e4cc304-6139-3918-b66e-4c02630dec51@gmail.com> Date: Wed, 30 Oct 2019 14:13:26 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] Implementation of DANIR for IoT Router - DHCPv6-PD and ND X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 13:13:38 -0000 Do you mean you want to see a demo of linux VM with DANIR hosted on Windows, during the v6ops WG meeting relayed on a telco, that you will see as a remote (paying) participant? (draft-shytyi-v6ops-danir-04) Alex Le 30/10/2019 à 14:02, Li HUANG a écrit : > 20:59.hk S8 Oct. 30 2019 > > > Dear Dmytro, > > All using clients are windows, would it be mounted in linux to modify > this at webex remote from your computer at a payable way? > > > Sincerely yours > Li HUANG > > On Wed, Oct 30, 2019, 05:16 Dmytro Shytyi > wrote: > > __ > Hello Li, > > In the implementation it is possible to change the DUID. You need to > modify the linux kernel module code and recompile it. > ______________ > *Dmytro SHYTYI* > > ---- On Sat, 19 Oct 2019 15:04:29 +0200 *Li HUANG > >* wrote ---- > > Oct. 19 2019  21:00.hk w10p m800 Sg|Rv > > > Thank you Dmytro and your group for sharing document on the > specific dhcpv6 related topics .  You are welcome to share the > dialog as well. > > Hopefully Linux/Uniz further  OS checking around  would be > helped that from Dhcpv6DUID modifying unable remained to be the > subnet concerning at your convenience . Which was online arrow > getting to you ... > > > Sincerely > BleuOisou@gmail.com > Li HUANG > > > On Fri, Oct 18, 2019, 20:30 Dmytro Shytyi > > wrote: > > __ > Hello Li, > > Don't you mind if we include in our disscussion the > IETF v6ops working group? > In case you will not respond we will accept it as a > permission to share our disscussion with IETF > Working group. > Thanks. > > > Bien cordialement, > *Dmytro SHYTYI* > > > ---- On Mon, 07 Oct 2019 14:32:46 +0200 *Alexandre > Petrescu >* wrote ---- > > Li, > > Below you will find are some answers from Dmytro. > > I suggest we discuss this publicly on the v6ops > WG email list, because > it is on that list that others have responded > (not on DHC WG email list). > > > 1# > Router - is a node, that performs forwarding. > Router node is not a > final destination of forwarded packets. > > Diagram : > ISP---Switch (4 mac found : isp x2 , modem x1 , > IANA x1)---- Router > (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , > vpn mac) > > && DHCPv6DUID failed to keep the modified > DHCPv6DUID eth.initial.mac > > [Dmytro] In the implementation DHVPvyDUID type > field is set to "1" that > meanse that DUID based on the link-layer Address > Plus Time is used. > > example from the DANIR KD6: > >     dhp.kd6_sol->my_client_id.duid_type = > htons(1); > >     dhp.kd6_sol->my_client_id.hw_type = htons(1); > >     //DUID time convert kernel vertsion to > compatible option value > >     ver = utsname()->version; > >     sscanf(ver, "%*s %*s %*s %*s %s %d %d:%d:%d > %*s %d",ktime_month, > &dh6_ktime.tm_mday, &dh6_ktime.tm_hour, > &dh6_ktime.tm_min, > &dh6_ktime.tm_sec, &dh6_ktime.tm_year); > >     dh6_ktime.tm_mon=GetMon(ktime_month); > >     //pr_info( "EP KTIME: %d,%d,%d,%d,%d,%d", > dh6_ktime.tm_mon, > dh6_ktime.tm_mday, dh6_ktime.tm_hour, > dh6_ktime.tm_min, > dh6_ktime.tm_sec, dh6_ktime.tm_year); > >     kernelCompilationTimeStartingFrom2000 = > convertTimeDateToSeconds(dh6_ktime); > >     duid_time=htonl( > kernelCompilationTimeStartingFrom2000 & > 0xffffffff); > >     memcpy > (&(dhp.kd6_sol->my_client_id.duid_time),&duid_time,sizeof(duid_time)); > > >     memcpy > (dhp.kd6_sol->my_client_id.my_hw_addr, > d->dev->dev_addr, 48); > > 2# > DHCP-PD only can be configured by a figure not > IPv6 . Term of , when > example 2002:: input :: would make the app grey > uncontinued. > > && > The Router Avertisement Messages carry the GUNPs > that are further used by the stateless > autoconfiguration mechanism > (SLAAC) > > [Dmytro] RFC 4862 specifies the Router > Advertisement processing process. > > 3# > Global Unique Address (GUA) - is an address that > is globally > available and globally unique. > > Diagram : > ISP---Switch (4 mac found : isp x2 , modem x1 , > IANA x1)---- Router > (WAN1,2, LAN 3 mac )---- PCs (wire, wireless , > vpn mac) > > - GUA is DHCPv6DUID eth.mac ? > - which GUA to be mentioned at the draft ? > - Dhcpv6DUID using sub-prefix the same as the > IPv4 exactly > working eth.mac , by ipconfig /all detected when > the vista replaced its > motherboard and having both new and initial > eth.mac shown both? > - "After the DHCPv6 packet leaves the cellular > interface of > the IoT > Requesting Router via wireless OFDMA link, it > reaches the element of > the access network which connects to the user > equipment (UEs) - > eNodeB station." likes there must be some > wireless "USB.sgw.isp" > host or , Dhcpv6 must be on Cellular host ? When > one of 4 mac switch > showing Nokia , which sometimes modem connecting > arp -a shown as well? > That would cause the pretty much lost functions > of wire.router.map > always via as if owning speed lower much than > the wireless does have . > > [Dmytro] GUA is IPv6 global unique address. > > 4# > your freely downloadable kernal patch for > Windows BIOS works ? > > [Dmytro] This is linux kernel module. Linux > could be ran in the > virtualbox in the windows environment. > > 5# > "The Hop Limit of packets that contain the > DHCPv6 data MUST be 255 to > satisfy the properties of the cellular > infrastructure.. To reach the > PGW from the UE the DHCPv6 packets are > encapsulated by SGW into UDP/ > IPv4 packets; this encapsulation is for the > GTP-U tunnel. The > corresponding decapsulation mechanism decreases > the Hop Limit; when > the Hop Limit reaches value 0 the packet is > discarded; to avoid this > situation it is required to put the Hop Limit > value of the DHCPv6 > Solicit equal to 255." > > - hop in switch default 64 decreased to 48 then the > SGW would not work--> no dhcpv6 completed ---> > no ipv6 get to switch > then Rv after it ? > > > The packet will be discarded when Hop Limit will > reach 0. When Hop Limit > > 0 packet will not be discarded. > > > Dmytro and Alex > > > Le 04/10/2019 à 16:16, Li HUANG a écrit : > > Oct. 04 2019  22:12..hk > w10p m800 Sg|Rv > > Attn: > > > > Authors' Addresses > > > > Dmytro Shytyi > > SFR > > Paris area , Ile-de-France > > France > > > > Email:ietf.dmytro@shytyi.net > > > > > URI:http://dmytro.shytyi.net > > > > > > Internet-DraDHCPv6_PD, PDP and NDP > Implementation in IoT Rou March 2019 > > > > > > Alexandre Petrescu > > CEA, LIST > > CEA Saclay > > Gif-sur-Yvette , Ile-de-France 91190 > > France > > > > Phone: +33169089223 > > Email:Alexandre.Petrescu@cea.fr > > > > > > > > > Good Day Alex and Dmytro, > > > > > > > > > > Do read through draft and thank you for your > sharing . > > > > Some here could have not understood them well > or clear , please help in > > details off: > > > > > > 1# > > Router - is a node, that performs > forwarding.  Router node is not a > >    final destination of forwarded packets. > > > > Diagram : > > ISP---Switch (4 mac found : isp x2 , modem x1 > , IANA x1)---- Router > > (WAN1,2, LAN 3 mac )---- PCs (wire, wireless > , vpn mac) > > > > && DHCPv6DUID failed to keep the modified > DHCPv6DUID eth.initial.mac > > > > > > > > 2# > > DHCP-PD only can be configured by a figure > not IPv6 . Term of , when > > example 2002:: input :: would make the app > grey uncontinued. > > > > && > > The Router Avertisement Messages carry the GUNPs > >    that are further used by the stateless > autoconfiguration mechanism > >    (SLAAC) > > > > > > > > > > 3# > > Global Unique Address (GUA) - is an address > that is globally > >    available and globally unique. > > > > Diagram : > > ISP---Switch (4 mac found : isp x2 , modem x1 > , IANA x1)---- Router > > (WAN1,2, LAN 3 mac )---- PCs (wire, wireless > , vpn mac) > > > >            - GUA is DHCPv6DUID eth.mac ? > >            - which GUA to be mentioned at the > draft ? > >            - Dhcpv6DUID using sub-prefix the > same as the IPv4 exactly > > working eth.mac , by ipconfig /all detected > when the vista replaced its > > motherboard and having both new and initial > eth.mac shown both? > >            - "After the DHCPv6 packet leaves > the cellular interface of > > the IoT > >    Requesting Router via wireless OFDMA link, > it reaches the element of > >    the access network which connects to the > user equipment (UEs) - > >    eNodeB station."    likes there must be > some wireless "USB.sgw.isp" > > host or ,  Dhcpv6 must be on Cellular host ? > When one of 4 mac switch > > showing Nokia , which sometimes modem > connecting arp -a shown as well? > > That would cause the pretty much lost > functions of wire.router.map > > always via as if owning speed lower much than > the wireless does have . > > > > > > > > > > 4# > > your freely downloadable kernal patch for > Windows BIOS works ? > > > > > > > > > > 5# > > "The Hop Limit of packets that contain the > DHCPv6 data MUST be 255 to > >    satisfy the properties of the cellular > infrastructure.  To reach the > >    PGW from the UE the DHCPv6 packets are > encapsulated by SGW into UDP/ > >    IPv4 packets; this encapsulation is for > the GTP-U tunnel.  The > >    corresponding decapsulation mechanism > decreases the Hop Limit; when > >    the Hop Limit reaches value 0 the packet > is discarded; to avoid this > >    situation it is required to put the Hop > Limit value of the DHCPv6 > >    Solicit equal to 255." > > > >                  - hop in switch default 64 > decreased to 48 then the > > SGW would not work--> no dhcpv6 completed > ---> no ipv6 get to switch > > then Rv after it ? > > > > > > > > > > > > 6# > > "It is possible to use IPv6-over-PPP protocol > [RFC1661], with LCP, > >    between the ARM and the modem." > > > >                   "ARM has added a wealth of > wireless technologies to > > its arsenal, but has no immediate plans to > design a modem for mobile or > > Internet of Things devices. > > The company offers CPU and GPU designs that > are widely used in > > smartphones and tablets. A missing piece is a > cellular modem that ARM > > customers could license and put in mobile > devices." > > > > > >               - My modem is Fibre Huawai wire > model, Rv, Sg all > > wirecable devices. > > > > > > 7# > > Could not have been able to select one who > would help Modify Dhcpv6DUID > > completed , sent email to > postmaster@microsoft.com > > > > none replying . > > > > > > > > > > > > Sincerely > > bleuoisou@gmail.com > > > > > > > On Tue, Sep 24, 2019 at 1:27 AM Alexandre > Petrescu > > > >> wrote: > > > > Hi Li, > > > > IETF is not police of protocols: IETF can not > force organisations to > > implement protocols or to fix bugs.  But we > can discuss about protocols > > at IETF. > > > > If Microsoft Windows does not implement > DHCPv6-PD on wireless links > > (like on cellular), then I have two things to > say. > > > > One thing is to say that Microsoft > programmers should not worry.  They > > are not the only ones who do not implement > DHCPv6-PD on wireless links. > > There is also Qualcomm who refuses to.  It > may, or it may not be a > > problem.  But it is not only Microsoft.  An > it is a good topic to > > work on. > > > > The other thing is to say that it is possible > to run a linux virtual > > machine on a Microsoft Windows real machine. > In that linux machine, > > one > > can run DHCPv6-PD, on the wireless interface > of the real Microsoft > > Windows machine.  We propose open source to > achieve this.  It is > > available at > > > https://dmytro.shytyi.net/kd6-danir-lite-kernel-dhcpv6-pd-and-ndp-implementation/ > > > > > (we have tried to upload it to github, but we > hit a 2Gb upload limit; > > this limit is a thing to complain to github, > together with its lack of > > IPv6 access; and github is now a Microsoft > organisation :-) > > > > Alex and Dmytro > > > > > > Le 20/09/2019 à 01:55, Li HUANG a écrit : > > > 08:47.hk > S8 Sept 20 2019 > > > > > > > > > continued..., > > > > > > > > > Thank you rephrasing our diagonose for > assuring the points. > > > > > > > > > Wireless advance for dhcpv6 is imagined to > experienced network maps. > > > Which none wireless devices and plan isp at > all decades. > > > > > > > > > Microsoft who is handing rcf3315 according > modified failures,  to > > > changed board OEM machine, has reached wall > to resolve it inside > > microsoft. > > > > > > > > > Looking for some where who would enter the > juridical like > > IEFT...etc., > > > in order to edge out what responsibility > taken by who, if in such > > > compromising rcf rules obeying  in conditions. > > > > > > > > > > > > Sincerely yours > > > Li HUANG > > > > > > > > > > > > > > > > > > > > > On Wed, Sep 18, 2019, 21:05 Alexandre Petrescu > > > > > > > > > > >>> wrote: > > > > > >     Dear Li, > > > > > >     Thank you for the partial clarification > you sent in private > > about 'apt > > >     windows'.  I understand that by 'apt > windows' you mean 'apart > > from > > >     windows', which means 'with the > exception of Windows'. > > > > > >     So, I think you mean that we in our > draft have a preference > > to run > > >     DHCPv6-PD over the wireless interface, > like with a phone. > > You also > > >     mean > > >     that is ok.  You also mean that only > Windows runs DHCPv6 on a > > wired > > >     interface; because Windows blocked > DHCPv6 on wwan and wlan > > interface. > > > > > >     I think you are saying that this > Windows blocking DHCPv6-PD > > on the > > >     wireless interfaces caused you a lot of > trouble, even after > > system > > >     updates. > > > > > >     Because of that I think you are asking > that we make and > > forward to > > >     Microsoft, a request to make DHCPv6-PD > on the wireless interface. > > > > > >     I may be wrong though. > > > > > >     I would like to ask you: do you know > somebody at Microsoft > > who cares > > >     about DHCPv6?  Or should I write simply to > > postmaster@microsoft.com > > > > > >      > > >> > > >     hoping they will direct the message to > people in charge? > > > > > >     Alex > > > > > >     Le 18/09/2019 à 09:45, Alexandre > Petrescu a écrit : > > >      > Dear Li, > > >      > > > >      > Please help me understand: > > >      > > > >      > What do you mean by 'apt windows'? > > >      > > > >      > Alex > > >      > > > >      > Le 18/09/2019 à 07:39, Li HUANG a > écrit : > > >      >> 09:39.hk >  S8 > > Sept 17th 2019 > > >      >> > > >      >> > > >      >> Thank you dhcwg returning on this, > > >      >> > > >      >> > > >      >> > > >      >> IoT either PTP to dhcpv6 pd server > sounds very like the > > running > > >      >> preferially to wireless, or phone > networks instead of apt > > >     windows that > > >      >> blocked wwan, wlan services of it ... > > >      >> > > >      >> > > >      >> To the kernel apart, OEM user would > principle following > > its offered > > >      >> updates of system, in case dhcpv6 > required update, how would > > >     clients > > >      >> obey protocol rcf 3315, 8415, 6260 > whilst OEM warranty > > contract > > >     to get > > >      >> all none conflicts? > > >      >> > > >      >> > > >      >> Microsoft is one putting on > tracking, it must be forwarded to > > >     them about. > > >      >> > > >      >> > > >      >> Let have your kind advises on it > please . > > >      >> > > >      >> > > >      >> > > >      >> Sincerely yours > > >      >> Li HUANG > > >      >> > > >      >> On Tue, Sep 17, 2019, 10:48 Li > HUANG > > > > > >      > >> > > >      >> > > > > > >>>> wrote: > > >      >> > > >      >>     09:39.hk > > > S8 Sept 17th 2019 > > >      >> > > >      >> > > >      >>     Thank you dhcwg returning on this, > > >      >> > > >      >> > > >      >> > > >      >>     IoT either PTP to dhcpv6 pd > server sounds very like > > the running > > >      >>     preferially to wireless, or > phone networks instead of apt > > >     windows > > >      >>     that blocked wwan, wlan > services of it ... > > >      >> > > >      >> > > >      >>     To the kernel apart, OEM user > would principle > > following its > > >     offered > > >      >>     updates of system, in case > dhcpv6 required update, > > how would > > >     clients > > >      >>     obey protocol rcf 3315, 8415, > 6260 whilst OEM warranty > > >     contract to > > >      >>     get all none conflicts? > > >      >> > > >      >> > > >      >>     Microsoft is one putting on > tracking, it must be > > forwarded > > >     to them > > >      >>     about. > > >      >> > > >      >> > > >      >>     Let have your kind advises on > it please . > > >      >> > > >      >> > > >      >> > > >      >>     Sincerely yours > > >      >>     Li HUANG > > >      >> > > >      >> > > >      >>     On Tue, Sep 17, 2019, 00:18 > Alexandre Petrescu > > >      >>     > > > > > >      > > >> > > >      > > > > > >      > > >>>> > > >      >>     wrote: > > >      >> > > >      >>         Hello to participants in > DHC WG, > > >      >> > > >      >>         One might be interested in > this kernel > > implementation of > > >      >>         DHCPv6-PD parts. > > >      >> > > >      >>         Yours, > > >      >> > > >      >>         Alex and Dmytro > > >      >> > > >      >> > > >      >>         -------- Message transféré > -------- > > >      >>         Sujet :     Kernel > implementation of DANIR for > > IoT Router - > > >      >>         DHCPv6-PD and ND > > >      >>         Date :     Mon, 16 Sep 2019 > 09:21:46 +0200 > > >      >>         De :     Alexandre Petrescu > > >      > > > > > > > >>> > > >      >> > > > > > > >      > > >>> > > >      >>         Pour : v6ops@ietf.org > > > > >> > > >      > > > >>> > > >      >> > > > >>> > > >      >>         > > > >>> > > >      >> > > >      >> > > >      >> > > >      >>         Hi, > > >      >> > > >      >>         The kernel implementation > of DANIR for IoT Router was > > >     finally > > >      >>         working a few weeks ago. > > >      >> > > >      >>     ��   It is an implementation of > > draft-shytyi-v6ops-danir-03.txt. > > >      >>         This is the right thing to > do, instead of > > '64share' RFC7278. > > >      >> > > >      >>         In this video one can see > the kernel in the IoT > > Router > > >     issues a > > >      >>         DHCPv6 PD request on its > egress and obtains a /56; it > > >     then makes > > >      >>         several /64s out of it and > subsequently sends RAs > > with > > >     these on > > >      >>         the ingress interfaces. > > >      >> > > >      >>         The DHCPv6 server is took > off-the-shelf.  The PDP > > part > > >     is not > > >      >>         present in the IoT Router, > but we expect it to > > work ok > > >     on a ptp > > >      >>         link on a cellular network > to a smartphone. > > >      >> > > >      >>         The video recorded the > virtual machines output on the > > >     IoT Router > > >      >>         (featured below), the > Client device behind it, > > and the > > >     DHCPv6-PD > > >      >>         server. > > >      >> > > >      >> https://youtu.be/DymVQY7bCUM > > >      >> > > >      >> > > >      >>         Yours, > > >      >> > > >      >>         Alexandre PETRESCU and > Dmytro SHYTYI > > >      >> > > >      >>         PS: we will soon post the > source code on github. > > >      >> > > >      >> > _______________________________________________ > > >      >>         dhcwg mailing list > > >      >> dhcwg@ietf.org > > > > >> > > > > > >      >>> > > >      >> > https://www.ietf.org/mailman/listinfo/dhcwg > > >      >> > > >      > > > >      > > _______________________________________________ > > >      > dhcwg mailing list > > >      > dhcwg@ietf.org > > > > >> > > >      > > https://www.ietf.org/mailman/listinfo/dhcwg > > > > > > >  _______________________________________________ > > >     dhcwg mailing list > > > dhcwg@ietf.org > > > > > >> > > > https://www.ietf.org/mailman/listinfo/dhcwg > > > > > > > > > > > > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > From nobody Wed Oct 30 06:14:47 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CBD012006F for ; Wed, 30 Oct 2019 06:14:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=iol.unh.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xvZd0rd-his1 for ; Wed, 30 Oct 2019 06:14:43 -0700 (PDT) Received: from mail-wm1-x32a.google.com (mail-wm1-x32a.google.com [IPv6:2a00:1450:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BCE6A1208C4 for ; Wed, 30 Oct 2019 06:14:42 -0700 (PDT) Received: by mail-wm1-x32a.google.com with SMTP id g19so2113231wmh.4 for ; Wed, 30 Oct 2019 06:14:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iol.unh.edu; s=unh-iol; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=0TobJVJq+AWd/VzRMEjmRwTkJnHRxIgCcOUTRAZ7UdY=; b=bnd8G7YRml+lVoe2ifB6J3dXCSKs+BQ8TMjsGV+ITzvzCNVWf9EZFQj3n74d/BU8oJ Wptr/jsFk8qW2lntOm73dmkVP/L8ftHW9wlDiix44cTsireo1co34EBmOwOWkD868ZWK ML/vdc0OKiCLMwWEoYJY0adxrsyhyDEtb325g= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=0TobJVJq+AWd/VzRMEjmRwTkJnHRxIgCcOUTRAZ7UdY=; b=d8XYc3+sE6726FKqCaz9j93wqHLajDqfF9o7Tv9layYAR/dV3ZtwtdFUedZyhFchBP awaK/jFFCb0v9dYcweYCEcspGMLJo41CT+r8p/GiG3xGRJqjv+WyQIQQcv3oVNgLYZ7W UixUTKjwDbo6vDylc/JrXguvKceb5bjzchupyWRLQGYCr/uha0g32frqXIQTwm3T40OL DVCjBi8zyIUwb+5xKheGwzc+xFeDPOsLmIIot036nXSjdBpAir0Ps9JYJTxxF8+KMh34 N8Wnb0Nqn2cqs7qKzo4Uuyr6tzkJ5nAMBAUCzA9q8DgXVcSN/KsHz8CBXNcFBgNYe8Qx okjg== X-Gm-Message-State: APjAAAV6AD1+eMp4U1K9XhQc84UkezMQthADKhZsNW5l5N0QSFU0rIXJ 074kb2nCT4xljtQGSlauqSUWwYjc8ihxPpd6Go0M6jOC1xs= X-Google-Smtp-Source: APXvYqyVINcNmK09BbFcIic24bHJkHDorxARgfu4T0Ic+fsVrTHCqJM9F816gMRb/og7t4D3M7cwCacSPRFu7GSrpek= X-Received: by 2002:a1c:c912:: with SMTP id f18mr9585470wmb.168.1572441280858; Wed, 30 Oct 2019 06:14:40 -0700 (PDT) MIME-Version: 1.0 References: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> In-Reply-To: <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> From: Timothy Winters Date: Wed, 30 Oct 2019 09:14:29 -0400 Message-ID: To: Ted Lemon Cc: Nick Hilliard , IPv6 Operations Content-Type: multipart/alternative; boundary="000000000000f9e5dc059620835a" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 13:14:45 -0000 --000000000000f9e5dc059620835a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Ted, We test it four different ways. A: Lifetimes set to zero (First IA_PD gets to zero, New IAPD as a lifetime) B: Prefix Timeout (First IA_PD never gets renewed) C: Reconfigure (Send Reconfigure responding Renew message has first IA_PD to zero, second IA_PD valid) D: Change Prefix Length Details are located here for test 2.7.5. ~Tim On Wed, Oct 30, 2019 at 8:59 AM Ted Lemon wrote: > On Oct 30, 2019, at 8:40 AM, Timothy Winters wrote= : > > We check both, the handling of the IA_PD and the error message. > > > And to be clear, you mean that if the CPE asks for a prefix delegation an= d > doesn=E2=80=99t get the prefix it previously had, it deprecates it as des= cribed in > L-14? When this deprecation happens, what ways are being tested for it t= o > happen? > > E.g., is it the case that the client sends an IA PD containing an IA > Prefix option, is the server returning the IA Prefix option containing th= e > same prefix, with a status code encapsulated in it? What status code? > Or is it returning an IA Prefix option with a different prefix? Or is i= t > doing both? > > --000000000000f9e5dc059620835a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Ted,

We test it four different ways.=
A:=C2=A0Lifetimes set to zero (First IA_PD gets to zero, New IAP= D as a lifetime)
B:=C2=A0Prefix Timeout (First IA_PD never gets r= enewed)
C:=C2=A0Reconfigure (Send Reconfigure responding Renew me= ssage has first IA_PD to zero, second IA_PD valid)
D:=C2=A0Change= Prefix Length

Details are located here=C2=A0for test 2.= 7.5.

~Tim


On Wed, Oct 30, 2019= at 8:59 AM Ted Lemon <mellon@fugue.com> wrote:
On Oct 30, 2019, at 8:40 AM, Timothy Winters <= twinters@iol.unh.= edu> wrote:
= We check both, the handling of the IA_PD and the error message.
=

And to be clear, you mean that if the CPE asks = for a prefix delegation and doesn=E2=80=99t get the prefix it previously ha= d, it deprecates it as described in L-14?=C2=A0 When this deprecation happe= ns, what ways are being tested for it to happen?

E= .g., is it the case that the client sends an IA PD containing an IA Prefix = option, is the server returning the IA Prefix option containing the same pr= efix, with a status code encapsulated in it? =C2=A0 What status code? =C2= =A0 Or is it returning an IA Prefix option with a different prefix? =C2=A0 = Or is it doing both?

--000000000000f9e5dc059620835a-- From nobody Wed Oct 30 06:24:48 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22144120A0A for ; Wed, 30 Oct 2019 06:24:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=fQib7dil; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=p5olXYnH Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aEwiEpunhZUT for ; Wed, 30 Oct 2019 06:24:41 -0700 (PDT) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D5D812006F for ; Wed, 30 Oct 2019 06:24:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=14259; q=dns/txt; s=iport; t=1572441881; x=1573651481; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=dTlqLzV7GdOv5T501STbTB/7Z2+Sp3XN19SZoDrNBpw=; b=fQib7dilev2lPvFeNFWZ/RWpMtL8yeYeXbhz4JzWOw3cfrh+DRURInuf A1yQ4vn/CYGL/sUM9m94NrR6rmD1W9r4uHqAOG0z4c47hNH0bnvI2nKqu qKqAZSFMBXFNInsgfCwlBRKdihJ1TYKeZZ0qyWf045lD78g0RnL2J/1Yr I=; IronPort-PHdr: =?us-ascii?q?9a23=3ABvDwuhJdABz5NisDBdmcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeCuKd2lFGcW4Ld5roEkOfQv636EU04qZea+DFKa5lQT1?= =?us-ascii?q?kAgMQSkRYnBZubDknpBPXrdCc9Ws9FUQwt8g=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AOAABDjrld/40NJK1kDgwBAQEBAQE?= =?us-ascii?q?BAQEDAQEBAREBAQECAgEBAQGBagQBAQEBCwGBGy9QBWxYIAQLKgqEHoNGA4p?= =?us-ascii?q?vgl6TCoRhgS4UgRADVAkBAQEMAQEtAgEBgUyCdAIXg08kNQgOAgMJAQEEAQE?= =?us-ascii?q?BAgEFBG2FNwyFUQEBAQEDEhEdAQE3AQ8CAQgOAwMBAigDAgICMBQJCAIEAQ0?= =?us-ascii?q?FIoMAAYF5TQMuAahHAoE4iGB1gTKCfgEBBYUbGIIXCYE2AYwQGIF/gRAoH4J?= =?us-ascii?q?MPoQtAgI0BhCCWjKCLI0LgnKFPII5lgAKgiSVMRuZXoRXhhODVplOAgQCBAU?= =?us-ascii?q?CDgEBBYFUATaBWHAVZQGCQVAQFIMGg3OKGDt0gSiLBoEwAS9eAQE?= X-IronPort-AV: E=Sophos;i="5.68,247,1569283200"; d="scan'208,217";a="658787559" Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 30 Oct 2019 13:24:38 +0000 Received: from XCH-ALN-015.cisco.com (xch-aln-015.cisco.com [173.36.7.25]) by alln-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id x9UDOc3F003337 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 30 Oct 2019 13:24:38 GMT Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-015.cisco.com (173.36.7.25) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 08:24:38 -0500 Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 08:24:37 -0500 Received: from NAM01-SN1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 30 Oct 2019 08:24:37 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=EGm7k8Po4j92F117nrlnCaycUnxJcIDXzGhpY+FzO//7pEw9SxUCHOFpPWhE7U/++peYzF4vjimND/vCK0Hmq/3pNaiQeDhdYhZTJDeoHI/1VGFXPCG6FRy+h14XVaf9QjQwBlLzjAWKJV4y3alYnJXqETSq9dXkE9Nz17XRpudyOUdmzottzfzWRujfem/+u1nOdBidAcQ4JtHvwviGnnP23oE5/PWkoQcaM1CwHR/eM+R8ELPQySK9OSI9mC69MP1Z//vd3r54A6eR4OOOqr+eqKwvQ4FgD4fWFY2csml9mU5ThNgBEIfMd2on+q1BXzbVImTHUPG5Cj8ZlGWusg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dTlqLzV7GdOv5T501STbTB/7Z2+Sp3XN19SZoDrNBpw=; b=NhLgFOv6m932S/d/eKXstMOkt5dFm4XtSffREsUD7Qh21nQ2oSuzX7AVvp/vd+0pTA9cS+0aIU629MoxlAxoOyYWnPW/L34xMk/ODLBxCRtFHBHMTcXTGY48OY4YGoTKjxJFE3nhymHVx1lJHkgoYsYYDj8z+Fq1vjg4pOetNk5hM6htyRs+1KWyZGFT6wSR9yq6oCRZiHUqLvWASGvqj+JCEDFcQUibKfidki2fPzclDUldZUd/UTK15c+Roh2DiUfBvXObem4tmMQ11XMQf9AymoPFLeq6tiwC61jOEEAJZa6u8q+e3jbSG4jPvhK8hsQ8A7RY4A8e8lXIT8ldMg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dTlqLzV7GdOv5T501STbTB/7Z2+Sp3XN19SZoDrNBpw=; b=p5olXYnHnEDIB7/A/VAmrlyRfGQ+llYmWRRaI2rlgkIeAiixpjanpJehzpLjiJGKBUfjnNc7MBw9Z4oo/jvzYpbqlTNuQ8ZEiRjhB4dQXtkKnRhiLiFeHxKxVtlpJkjSOqwqZw8lt4s8PAzGLOZhpNz2cyhAsMl6JDLp3sD3hUo= Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2128.namprd11.prod.outlook.com (10.174.98.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.24; Wed, 30 Oct 2019 13:24:36 +0000 Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.028; Wed, 30 Oct 2019 13:24:35 +0000 From: "Bernie Volz (volz)" To: Ted Lemon , Timothy Winters CC: IPv6 Operations Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AQHVibwc6PRwlsH+ZUmOeFzp+XKiI6dt8FJugAA0sICAAERiAIAAM1UOgAAj7oCAAC8lwYACBjMAgADxGbaAASHcfIAAAh0AgAAETICAAAb1gIAAEaAAgAAA6YCAAAIjAIAABSGA///EFwA= Date: Wed, 30 Oct 2019 13:24:35 +0000 Message-ID: References: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> In-Reply-To: <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com; x-originating-ip: [173.38.117.77] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: a6e2bf4b-f38c-4acc-f422-08d75d3c822e x-ms-traffictypediagnostic: MWHPR1101MB2128: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 02065A9E77 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(346002)(376002)(366004)(39860400002)(136003)(189003)(199004)(6306002)(54896002)(6512007)(2171002)(236005)(25786009)(6116002)(3846002)(66066001)(36756003)(6246003)(229853002)(4326008)(6486002)(33656002)(6436002)(14454004)(58126008)(316002)(86362001)(110136005)(8936002)(5660300002)(7736002)(81156014)(478600001)(81166006)(11346002)(8676002)(446003)(14444005)(99286004)(256004)(91956017)(76116006)(476003)(186003)(2906002)(64756008)(66556008)(66476007)(66946007)(102836004)(6506007)(71190400001)(486006)(26005)(2616005)(53546011)(76176011)(66446008)(71200400001); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2128; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: BaosW2f0YJkSKZThu5i3llu5JlxtdPgy9fBEAxuL3bYMCTeVP7ivuOkWh1HvLTX7AfD2ujxICGgvBmDlmTW+IiZK5p3uCVfAbvTylDogYQHMdnFZ2w+Gbz0SiX3eVrJMM3p/V8BBEBiSH9neBAGSKQqwGGpxJmTbaXyodoLZ2ie7zQrjguzCHDmrNpblA9jCjSTKUrE0XPbXhWzkst68qmBGh4uQRBIHq6rdnWo8xjjeE7CxxdXdE5/jCaZvVA9+lvNN1iTpqwU8Vig/+9faW8vEjf+eEf9tyL3O90e1xlTDF1OitcR57+yWnhGqx2d5JmeUTPB6axOxc3fUTkCHfcPg1fBiAH0jmZKmcFBJ3pg4q8wGlL/IhqXy0dQSm+zWZgOu/rguVAvFvL50r3N4apbKehkf+3MA305RP4P2nn59g1a3LkkfjbKPlNVZhUrU x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_F7F614D9EC79474CB81CCEF0B9EF6908ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: a6e2bf4b-f38c-4acc-f422-08d75d3c822e X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2019 13:24:35.6682 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: dY8XFMIRQO+wPZka1/h/xnihx4QQjO2SVRpMRn7vzvrsTYuKxAWLAzDs7rWBdyOv X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2128 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.25, xch-aln-015.cisco.com X-Outbound-Node: alln-core-8.cisco.com Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 13:24:47 -0000 --_000_F7F614D9EC79474CB81CCEF0B9EF6908ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 V2hpbGUgSSBoYXZlbuKAmXQgZm9sbG93ZWQgdGhpcyBkaXNjdXNzaW9uIGluIGRldGFpbCwgSSBk byB3b25kZXIgaWYgdGhlIFNQIERIQ1Agc2VydmVyIGNvdWxkIHByb3ZpZGUgc29tZSBhc3Npc3Rh bmNlIHRvIENQRXMgdGhhdCBkb27igJl0IGhhdmUgc3RvcmFnZSDigKYNCg0KV2hlbiBhIENQRSBi b290cyBhbmQgZG9lcyBhIFNvbGljaXQgLyBSZXF1ZXN0LCBpdCBjb3VsZCBpbmNsdWRlIGEgbmV3 IG9wdGlvbiB0aGF0IHRlbGxzIHRoZSBESENQIHNlcnZlciB0aGF0IGl0IGhhcyBubyBzdG9yYWdl IGFuZCB0aGVyZWZvcmUgbm8ga25vd2xlZGdlIG9mIGFueSDigJxwYXN04oCdIGxlYXNlcy4gVGhl IERIQ1Agc2VydmVyIGluIHRoaXMgY2FzZSBjb3VsZCBpbmNsdWRlIGFueSDigJxvbGTigJ0gbGVh c2VzIGl0IHN0aWxsIGhhcyBhIHJlY29yZCBvZiAoaS5lLiwgdGhhdCBoYXZlIG5vdCBleHBpcmVk IGJ1dCBhcmUgbm8gbG9uZ2VyIOKAnHZhbGlk4oCdIGluIHRlcm1zIG9mIHRoZSBjb25maWd1cmF0 aW9uIGJlY2F1c2Ugb2YgcmVudW1iZXJpbmcgb3Igb3RoZXIgY29uZGl0aW9ucykgd2l0aCAwIGxp ZmV0aW1lcy4gVGhhdCB3b3VsZCBhbGxvdyBhIHJlYm9vdGluZyBDUEUgdG8gbGVhcm4gb2xkIGRl bGVnYXRlZCBwcmVmaXhlcyB0aGF0IGl0IG1pZ2h0IGhhdmUgYWR2ZXJ0aXNlZCB0byBpdHMgY2xp ZW50cyBhbmQgaW5pdGlhdGUgZGVwcmVjYXRpb24gb2YgdGhlc2UgcHJlZml4ZXMgKGFuZCBhbnkg YWRkcmVzc2VzIGdlbmVyYXRlZCBmcm9tIHRoZW0pLg0KDQpUaGlzIHdvdWxkIGltcHJvdmUgdGhl IHNpdHVhdGlvbiB3aGVuIHRoZSBDUEUgaGFzIG5vIHN0b3JhZ2UgYW5kIHJlYm9vdHMgKHdoZXRo ZXIgY3VzdG9tZXIgb3IgU1AgaW5pdGlhdGVkKS4NCg0KTm90ZTogVGhlcmUgY291bGQgYmUgY29u ZGl0aW9ucyBpbiB3aGljaCB0aGlzIHdvdWxkIGZhaWwgKHN1Y2ggYXMgaWYgU1AgcmVtb3ZlZCBh bGwgY29uZmlndXJhdGlvbiByZWxhdGVkIHRvIHRoZSBvbGRlciBwcmVmaXhlcyBmcm9tIHRoZSBE SENQIHNlcnZlciksIGJ1dCBpbiBtYW55IGNhc2VzIGl0IHdvdWxkIGFsbG93IGZvciBjbGVhbiBy ZW51bWJlcmluZy4gT2YgY291cnNlLCBpdCByZXF1aXJlcyB1cGRhdGluZyB0aGUgREhDUCBzb2Z0 d2FyZSAob24gdGhlIFNQIHNlcnZlcnMgYW5kIGluIHRoZSBDUEVzKSwgYnV0IGl0IHByb2JhYmx5 IGVhc2llciB0byBhY2NvbXBsaXNoIHRoYW4gcmVxdWlyaW5nIHVzZSBvZiBzdG9yYWdlIG9uIHRo ZSBDUEUgZGV2aWNlLg0KDQpCZSBhIHJlbGF0aXZlIGVhc3kgZHJhZnQgdG8gd3JpdGUgdXAgKGF0 IGxlYXN0IGluIHRoZW9yeSkuDQoNCg0KICAqICAgQmVybmllDQoNCkZyb206IHY2b3BzIDx2Nm9w cy1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgVGVkIExlbW9uIDxtZWxsb25AZnVndWUu Y29tPg0KRGF0ZTogV2VkbmVzZGF5LCBPY3RvYmVyIDMwLCAyMDE5IGF0IDk6MDAgQU0NClRvOiBU aW1vdGh5IFdpbnRlcnMgPHR3aW50ZXJzQGlvbC51bmguZWR1Pg0KQ2M6ICJ2Nm9wc0BpZXRmLm9y ZyIgPHY2b3BzQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFt2Nm9wc10gU0xBQUMgcmVudW06IFBy b2JsZW0gU3RhdGVtZW50ICYgT3BlcmF0aW9uYWwgd29ya2Fyb3VuZHMNCg0KT24gT2N0IDMwLCAy MDE5LCBhdCA4OjQwIEFNLCBUaW1vdGh5IFdpbnRlcnMgPHR3aW50ZXJzQGlvbC51bmguZWR1PG1h aWx0bzp0d2ludGVyc0Bpb2wudW5oLmVkdT4+IHdyb3RlOg0KV2UgY2hlY2sgYm90aCwgdGhlIGhh bmRsaW5nIG9mIHRoZSBJQV9QRCBhbmQgdGhlIGVycm9yIG1lc3NhZ2UuDQoNCkFuZCB0byBiZSBj bGVhciwgeW91IG1lYW4gdGhhdCBpZiB0aGUgQ1BFIGFza3MgZm9yIGEgcHJlZml4IGRlbGVnYXRp b24gYW5kIGRvZXNu4oCZdCBnZXQgdGhlIHByZWZpeCBpdCBwcmV2aW91c2x5IGhhZCwgaXQgZGVw cmVjYXRlcyBpdCBhcyBkZXNjcmliZWQgaW4gTC0xND8gIFdoZW4gdGhpcyBkZXByZWNhdGlvbiBo YXBwZW5zLCB3aGF0IHdheXMgYXJlIGJlaW5nIHRlc3RlZCBmb3IgaXQgdG8gaGFwcGVuPw0KDQpF LmcuLCBpcyBpdCB0aGUgY2FzZSB0aGF0IHRoZSBjbGllbnQgc2VuZHMgYW4gSUEgUEQgY29udGFp bmluZyBhbiBJQSBQcmVmaXggb3B0aW9uLCBpcyB0aGUgc2VydmVyIHJldHVybmluZyB0aGUgSUEg UHJlZml4IG9wdGlvbiBjb250YWluaW5nIHRoZSBzYW1lIHByZWZpeCwgd2l0aCBhIHN0YXR1cyBj b2RlIGVuY2Fwc3VsYXRlZCBpbiBpdD8gICBXaGF0IHN0YXR1cyBjb2RlPyAgIE9yIGlzIGl0IHJl dHVybmluZyBhbiBJQSBQcmVmaXggb3B0aW9uIHdpdGggYSBkaWZmZXJlbnQgcHJlZml4PyAgIE9y IGlzIGl0IGRvaW5nIGJvdGg/DQoNCg== --_000_F7F614D9EC79474CB81CCEF0B9EF6908ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <111054AA5A1D0E438D13ED5C3C87A11D@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OldpbmdkaW5nczsNCglwYW5vc2UtMTo1IDAg MCAwIDAgMCAwIDAgMCAwO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0 aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJh Z3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCglt YXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0K CW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTox MS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcC5tc29ub3JtYWww LCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3Jt YWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5 bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJ e21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2Ug V29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAx LjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8q IExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjE2MTYwNTYwMzk7 DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0xODA5ODM5 MDkwIDI5Mzk4NzUyIDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4Njkz IDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzO30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2 ZWwtc3RhcnQtYXQ6MDsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxl dmVsLXRleHQ6LTsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KQGxp c3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJp ZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZv bnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxl dmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30N CkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6 U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQt ZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTow aW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxi b2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9 IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XaGlsZSBJIGhhdmVu4oCZdCBm b2xsb3dlZCB0aGlzIGRpc2N1c3Npb24gaW4gZGV0YWlsLCBJIGRvIHdvbmRlciBpZiB0aGUgU1Ag REhDUCBzZXJ2ZXIgY291bGQgcHJvdmlkZSBzb21lIGFzc2lzdGFuY2UgdG8gQ1BFcyB0aGF0IGRv buKAmXQgaGF2ZSBzdG9yYWdlIOKApjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XaGVuIGEgQ1BF IGJvb3RzIGFuZCBkb2VzIGEgU29saWNpdCAvIFJlcXVlc3QsIGl0IGNvdWxkIGluY2x1ZGUgYSBu ZXcgb3B0aW9uIHRoYXQgdGVsbHMgdGhlIERIQ1Agc2VydmVyIHRoYXQgaXQgaGFzIG5vIHN0b3Jh Z2UgYW5kIHRoZXJlZm9yZSBubyBrbm93bGVkZ2Ugb2YgYW55IOKAnHBhc3TigJ0gbGVhc2VzLiBU aGUgREhDUCBzZXJ2ZXIgaW4gdGhpcyBjYXNlIGNvdWxkIGluY2x1ZGUgYW55IOKAnG9sZOKAnSBs ZWFzZXMNCiBpdCBzdGlsbCBoYXMgYSByZWNvcmQgb2YgKGkuZS4sIHRoYXQgaGF2ZSBub3QgZXhw aXJlZCBidXQgYXJlIG5vIGxvbmdlciDigJx2YWxpZOKAnSBpbiB0ZXJtcyBvZiB0aGUgY29uZmln dXJhdGlvbiBiZWNhdXNlIG9mIHJlbnVtYmVyaW5nIG9yIG90aGVyIGNvbmRpdGlvbnMpIHdpdGgg MCBsaWZldGltZXMuIFRoYXQgd291bGQgYWxsb3cgYSByZWJvb3RpbmcgQ1BFIHRvIGxlYXJuIG9s ZCBkZWxlZ2F0ZWQgcHJlZml4ZXMgdGhhdCBpdCBtaWdodCBoYXZlDQogYWR2ZXJ0aXNlZCB0byBp dHMgY2xpZW50cyBhbmQgaW5pdGlhdGUgZGVwcmVjYXRpb24gb2YgdGhlc2UgcHJlZml4ZXMgKGFu ZCBhbnkgYWRkcmVzc2VzIGdlbmVyYXRlZCBmcm9tIHRoZW0pLjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5UaGlzIHdvdWxkIGltcHJvdmUgdGhlIHNpdHVhdGlvbiB3aGVuIHRoZSBDUEUgaGFzIG5v IHN0b3JhZ2UgYW5kIHJlYm9vdHMgKHdoZXRoZXIgY3VzdG9tZXIgb3IgU1AgaW5pdGlhdGVkKS48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Tm90ZTogVGhlcmUgY291bGQgYmUgY29uZGl0aW9ucyBp biB3aGljaCB0aGlzIHdvdWxkIGZhaWwgKHN1Y2ggYXMgaWYgU1AgcmVtb3ZlZCBhbGwgY29uZmln dXJhdGlvbiByZWxhdGVkIHRvIHRoZSBvbGRlciBwcmVmaXhlcyBmcm9tIHRoZSBESENQIHNlcnZl ciksIGJ1dCBpbiBtYW55IGNhc2VzIGl0IHdvdWxkIGFsbG93IGZvciBjbGVhbiByZW51bWJlcmlu Zy4gT2YgY291cnNlLCBpdCByZXF1aXJlcyB1cGRhdGluZw0KIHRoZSBESENQIHNvZnR3YXJlIChv biB0aGUgU1Agc2VydmVycyBhbmQgaW4gdGhlIENQRXMpLCBidXQgaXQgcHJvYmFibHkgZWFzaWVy IHRvIGFjY29tcGxpc2ggdGhhbiByZXF1aXJpbmcgdXNlIG9mIHN0b3JhZ2Ugb24gdGhlIENQRSBk ZXZpY2UuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJlIGEgcmVsYXRpdmUgZWFzeSBkcmFmdCB0 byB3cml0ZSB1cCAoYXQgbGVhc3QgaW4gdGhlb3J5KS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHVsIHN0eWxlPSJtYXJnaW4tdG9w OjBpbiIgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJt YXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPkJlcm5pZTxvOnA+PC9vOnA+ PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJvbTogPC9zcGFuPjwvYj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+djZvcHMgJmx0O3Y2b3BzLWJv dW5jZXNAaWV0Zi5vcmcmZ3Q7IG9uIGJlaGFsZiBvZiBUZWQgTGVtb24gJmx0O21lbGxvbkBmdWd1 ZS5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2RheSwgT2N0b2JlciAzMCwgMjAxOSBh dCA5OjAwIEFNPGJyPg0KPGI+VG86IDwvYj5UaW1vdGh5IFdpbnRlcnMgJmx0O3R3aW50ZXJzQGlv bC51bmguZWR1Jmd0Ozxicj4NCjxiPkNjOiA8L2I+JnF1b3Q7djZvcHNAaWV0Zi5vcmcmcXVvdDsg Jmx0O3Y2b3BzQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW3Y2b3BzXSBT TEFBQyByZW51bTogUHJvYmxlbSBTdGF0ZW1lbnQgJmFtcDsgT3BlcmF0aW9uYWwgd29ya2Fyb3Vu ZHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ T24gT2N0IDMwLCAyMDE5LCBhdCA4OjQwIEFNLCBUaW1vdGh5IFdpbnRlcnMgJmx0OzxhIGhyZWY9 Im1haWx0bzp0d2ludGVyc0Bpb2wudW5oLmVkdSI+dHdpbnRlcnNAaW9sLnVuaC5lZHU8L2E+Jmd0 OyB3cm90ZToNCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpI ZWx2ZXRpY2EiPldlIGNoZWNrIGJvdGgsIHRoZSBoYW5kbGluZyBvZiB0aGUgSUFfUEQgYW5kIHRo ZSBlcnJvciBtZXNzYWdlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFuZCB0byBiZSBjbGVhciwgeW91 IG1lYW4gdGhhdCBpZiB0aGUgQ1BFIGFza3MgZm9yIGEgcHJlZml4IGRlbGVnYXRpb24gYW5kIGRv ZXNu4oCZdCBnZXQgdGhlIHByZWZpeCBpdCBwcmV2aW91c2x5IGhhZCwgaXQgZGVwcmVjYXRlcyBp dCBhcyBkZXNjcmliZWQgaW4gTC0xND8gJm5ic3A7V2hlbiB0aGlzIGRlcHJlY2F0aW9uIGhhcHBl bnMsIHdoYXQgd2F5cyBhcmUgYmVpbmcgdGVzdGVkIGZvciBpdCB0byBoYXBwZW4/PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkUuZy4sIGlzIGl0 IHRoZSBjYXNlIHRoYXQgdGhlIGNsaWVudCBzZW5kcyBhbiBJQSBQRCBjb250YWluaW5nIGFuIElB IFByZWZpeCBvcHRpb24sIGlzIHRoZSBzZXJ2ZXIgcmV0dXJuaW5nIHRoZSBJQSBQcmVmaXggb3B0 aW9uIGNvbnRhaW5pbmcgdGhlIHNhbWUgcHJlZml4LCB3aXRoIGEgc3RhdHVzIGNvZGUgZW5jYXBz dWxhdGVkIGluIGl0PyAmbmJzcDsgV2hhdCBzdGF0dXMgY29kZT8gJm5ic3A7IE9yIGlzIGl0IHJl dHVybmluZw0KIGFuIElBIFByZWZpeCBvcHRpb24gd2l0aCBhIGRpZmZlcmVudCBwcmVmaXg/ICZu YnNwOyBPciBpcyBpdCBkb2luZyBib3RoPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_F7F614D9EC79474CB81CCEF0B9EF6908ciscocom_-- From nobody Wed Oct 30 06:33:21 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CBF312081A for ; Wed, 30 Oct 2019 06:33:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=consulintel.es Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8TJyBJTDzhrT for ; Wed, 30 Oct 2019 06:33:16 -0700 (PDT) Received: from mail.consulintel.es (mail.consulintel.es [IPv6:2001:470:1f09:495::5]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB17F1200DE for ; Wed, 30 Oct 2019 06:33:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=consulintel.es; s=MDaemon; t=1572442392; x=1573047192; i=jordi.palet@consulintel.es; q=dns/txt; h=User-Agent:Date: Subject:From:To:CC:Message-ID:Thread-Topic:References: In-Reply-To:Mime-version:Content-type; bh=fuLyO7Et+4evJLorD/REq0 lgzBvixKBPt2+hsd0JLvQ=; b=Q4B17m5Wp/AWn0TrWxXq0uKaNPTH8G6gT5Tl89 /cwBnI0nHb6iQDiaHSscC63+VBtpBu5racgxTqht4uVsNvssW487G/sKj3JAw4G2 F4yRZiW493YXLtlJM8lP7H5x5Bza1MGMb30N8fEcpQqnhAzzK1wVczoYst1i5or+ 41uFo= X-MDAV-Result: clean X-MDAV-Processed: mail.consulintel.es, Wed, 30 Oct 2019 14:33:12 +0100 X-Spam-Processed: mail.consulintel.es, Wed, 30 Oct 2019 14:33:10 +0100 Received: from [10.10.10.144] by mail.consulintel.es (MDaemon PRO v16.5.2) with ESMTPA id md50006446627.msg for ; Wed, 30 Oct 2019 14:33:09 +0100 X-MDRemoteIP: 2001:470:1f09:495:81e7:1e88:3063:7d60 X-MDHelo: [10.10.10.144] X-MDArrival-Date: Wed, 30 Oct 2019 14:33:09 +0100 X-Authenticated-Sender: jordi.palet@consulintel.es X-Return-Path: prvs=120690714a=jordi.palet@consulintel.es X-Envelope-From: jordi.palet@consulintel.es X-MDaemon-Deliver-To: v6ops@ietf.org User-Agent: Microsoft-MacOutlook/10.10.f.191014 Date: Wed, 30 Oct 2019 14:33:08 +0100 From: JORDI PALET MARTINEZ To: "Bernie Volz (volz)" , Ted Lemon , Timothy Winters CC: IPv6 Operations Message-ID: <724EA0E3-9CD6-4721-90F6-B47ADC31E439@consulintel.es> Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds References: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3655290788_72956351" Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 13:33:19 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3655290788_72956351 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Hi Bernie, =20 I think RFC4649, option 37, provides that option. =20 Regards, Jordi @jordipalet =20 =20 =20 El 30/10/19 14:25, "v6ops en nombre de Bernie Volz (volz)" escribi=C3=B3: =20 While I haven=E2=80=99t followed this discussion in detail, I do wonder if = the SP DHCP server could provide some assistance to CPEs that don=E2=80=99t= have storage =E2=80=A6 =20 When a CPE boots and does a Solicit / Request, it could include a new optio= n that tells the DHCP server that it has no storage and therefore no knowle= dge of any =E2=80=9Cpast=E2=80=9D leases. The DHCP server in this case coul= d include any =E2=80=9Cold=E2=80=9D leases it still has a record of (i.e., = that have not expired but are no longer =E2=80=9Cvalid=E2=80=9D in terms of= the configuration because of renumbering or other conditions) with 0 lifet= imes. That would allow a rebooting CPE to learn old delegated prefixes that= it might have advertised to its clients and initiate deprecation of these = prefixes (and any addresses generated from them). =20 This would improve the situation when the CPE has no storage and reboots (w= hether customer or SP initiated). =20 Note: There could be conditions in which this would fail (such as if SP rem= oved all configuration related to the older prefixes from the DHCP server),= but in many cases it would allow for clean renumbering. Of course, it requ= ires updating the DHCP software (on the SP servers and in the CPEs), but it= probably easier to accomplish than requiring use of storage on the CPE dev= ice. =20 Be a relative easy draft to write up (at least in theory). =20 - Bernie =20 From: v6ops on behalf of Ted Lemon Date: Wednesday, October 30, 2019 at 9:00 AM To: Timothy Winters Cc: "v6ops@ietf.org" Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workaroun= ds =20 On Oct 30, 2019, at 8:40 AM, Timothy Winters wrote:= =20 We check both, the handling of the IA_PD and the error message. =20 And to be clear, you mean that if the CPE asks for a prefix delegation and = doesn=E2=80=99t get the prefix it previously had, it deprecates it as descr= ibed in L-14? When this deprecation happens, what ways are being tested fo= r it to happen? =20 E.g., is it the case that the client sends an IA PD containing an IA Prefix= option, is the server returning the IA Prefix option containing the same p= refix, with a status code encapsulated in it? What status code? Or is i= t returning an IA Prefix option with a different prefix? Or is it doing b= oth? =20 _______________________________________________ v6ops mailing list v6ops@ie= tf.org https://www.ietf.org/mailman/listinfo/v6ops=20 ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.theipv6company.com The IPv6 Company This electronic message contains information which may be privileged or con= fidential. The information is intended to be for the exclusive use of the i= ndividual(s) named above and further non-explicilty authorized disclosure, = copying, distribution or use of the contents of this information, even if p= artially, including attached files, is strictly prohibited and will be cons= idered a criminal offense. If you are not the intended recipient be aware t= hat any disclosure, copying, distribution or use of the contents of this in= formation, even if partially, including attached files, is strictly prohibi= ted, will be considered a criminal offense, so you must reply to the origin= al sender to inform about this communication and delete it. --B_3655290788_72956351 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

Hi Bernie,

 

I think RFC4649, opti= on 37, provides that option.

 

Regards,

Jordi

@jordipalet

&nb= sp;

 

 

El 30/10/19 14:25, "v6ops en nombre de B= ernie Volz (volz)" <v6ops= -bounces@ietf.org en nombre de volz@c= isco.com> escribi=C3=B3:

 

While I haven=E2=80=99t followed = this discussion in detail, I do wonder if the SP DHCP server could provide = some assistance to CPEs that don=E2=80=99t have storage =E2=80=A6

 

When a CPE boots and doe= s a Solicit / Request, it could include a new option that tells the DHCP se= rver that it has no storage and therefore no knowledge of any =E2=80=9Cpast= =E2=80=9D leases. The DHCP server in this case could include any =E2=80=9Co= ld=E2=80=9D leases it still has a record of (i.e., that have not expired bu= t are no longer =E2=80=9Cvalid=E2=80=9D in terms of the configuration becau= se of renumbering or other conditions) with 0 lifetimes. That would allow a= rebooting CPE to learn old delegated prefixes that it might have advertise= d to its clients and initiate deprecation of these prefixes (and any addres= ses generated from them).

 

This would improve the situation when the CPE has no storage and= reboots (whether customer or SP initiated).

 

Note: There could be conditions in which this= would fail (such as if SP removed all configuration related to the older p= refixes from the DHCP server), but in many cases it would allow for clean r= enumbering. Of course, it requires updating the DHCP software (on the SP se= rvers and in the CPEs), but it probably easier to accomplish than requiring= use of storage on the CPE device.

 

Be a relative easy draft to write up (at least in theor= y).

 <= o:p>

-  = ;        Bernie<= o:p>

 =

From: v6ops <v6ops-bounces@ietf.org> on behalf of Ted Lemon = <mellon@fugue.com>
Date: Wednesday, October 30, 2019 at 9:0= 0 AM
To: Timothy Winters <twinters@iol.unh.edu>
Cc: <= /b>"v6ops@ietf.org" <v6ops@ietf.org>
Subject: Re:= [v6ops] SLAAC renum: Problem Statement & Operational workarounds

 

On Oct 30, 2019, at 8:40 AM, Timothy Winters <twinters@iol.unh.edu> wrote:

<= blockquote style=3D'margin-top:5.0pt;margin-bottom:5.0pt'>

We check both, the handling of the IA_PD and the err= or message.

 

And to be clear, you mean that if= the CPE asks for a prefix delegation and doesn=E2=80=99t get the prefix it= previously had, it deprecates it as described in L-14?  When this dep= recation happens, what ways are being tested for it to happen?

 <= /o:p>

E.g.,= is it the case that the client sends an IA PD containing an IA Prefix opti= on, is the server returning the IA Prefix option containing the same prefix= , with a status code encapsulated in it?   What status code?   Or= is it returning an IA Prefix option with a different prefix?   Or is = it doing both?

 

_______________________________________________ v6ops mail= ing list v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops


**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or con= fidential. The information is intended to be for the exclusive use of the i= ndividual(s) named above and further non-explicilty authorized disclosure, = copying, distribution or use of the contents of this information, even if p= artially, including attached files, is strictly prohibited and will be cons= idered a criminal offense. If you are not the intended recipient be aware t= hat any disclosure, copying, distribution or use of the contents of this in= formation, even if partially, including attached files, is strictly prohibi= ted, will be considered a criminal offense, so you must reply to the origin= al sender to inform about this communication and delete it.

--B_3655290788_72956351-- From nobody Wed Oct 30 06:46:20 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 615AE1200FD for ; Wed, 30 Oct 2019 06:46:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=WGRgR/Y+; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=FpEqViQR Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DXcdMVxtbi1U for ; Wed, 30 Oct 2019 06:46:16 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC45D1200DE for ; Wed, 30 Oct 2019 06:46:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=26719; q=dns/txt; s=iport; t=1572443175; x=1573652775; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=KeTWxn47vDAHAfTOKA8C4WbAsOOcWaJlt+a8gc6pcn4=; b=WGRgR/Y+qgz6hOwx4O8Lb9DsJp0D+VkaP9B2moa30O50cs/6UQN+6qFQ 3LW07L5JwzNmDeD/Mr/dOwi4VGrzaPaRxCIylb0eTuhnhGoKMUfRs+7no aXLv5NffVZjKvH7D5IqqnwtkL9TGPOfIqFRzbBjn62jg3V7eTCql9EGoM g=; IronPort-PHdr: =?us-ascii?q?9a23=3ARbZ5sB8ADnMkmv9uRHGN82YQeigqvan1NQcJ65?= =?us-ascii?q?0hzqhDabmn44+/YR7E/fs4iljPUM2b8P9Ch+fM+4HYEW0bqdfJq3UeaNpJXh?= =?us-ascii?q?4Bh98Rmlk+B8qXIUb6N/XtKSc9GZcKWQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AGAAC9k7ld/4sNJK1kDgsBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBAREBAQEBAQEBAQEBAYFpBAEBAQEBCwGBGy9QBWxYIAQLKgq?= =?us-ascii?q?EHoNGA4RahhaCXpdrgS4UgRADVAkBAQEMAQEYAQoKAgEBgUyCdAIXg08kNAk?= =?us-ascii?q?OAgMJAQEEAQEBAgEFBG2FNwyFUQEBAQEDAQEQEQoTAQEsCwEPAgEIEQMBAig?= =?us-ascii?q?DAgICJQsUCQgCBAENBSKDAAGBeU0DLgEOqCcCgTiIYHWBMoJ+AQEFgTQBg2M?= =?us-ascii?q?YghcJgTYBiB2CVYEeGIF/JmooH4JMPoJiAQGBJSQCAiQHCQYGCgiCUjKCLIx?= =?us-ascii?q?yCAEQgnKFPII5lgAKgiSIXYoZgjsbgjyXIoRXhhODVplOAgQCBAUCDgEBBYF?= =?us-ascii?q?SOYFYcBU7KgGCQQlHEBSDBoNzhRSFBDt0gSiLBoEwAS9TCwEB?= X-IronPort-AV: E=Sophos;i="5.68,247,1569283200"; d="scan'208,217";a="361596457" Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 30 Oct 2019 13:46:14 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id x9UDkEb2009048 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 30 Oct 2019 13:46:14 GMT Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 08:46:14 -0500 Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 08:46:11 -0500 Received: from NAM05-DM3-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 30 Oct 2019 08:46:11 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fwpwneqTUebNeKRUzYCAoaSk5K5cUxya6rux4zNEMhSoOOgpEbP6snQHb4qJ+aKaU2Nb5H/onyezivP5yA6HIL64/4s4wO8HdgRtTvz/IHFJ7DQUpCJK4pcOS5zW8tEkV/dpUzhdqGOPS6W+UsT2NoZdPYPpxNe96ywK9GL7Y8SF7u4ywb0C2tRnnnHFjFwbmh0RIFxk4gX2fQK6syWeBt5paAyNi8YjnNvuijPg89iBGqXWUcftcTZQnBPVT5JBgvd939z/TCagNHacl+aDRn/meXudGUWV9cQK8S2jhlS7E4zIAac0upZhiBQgdhuIO27QSWlwyF0z40lvGrKwWg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=KeTWxn47vDAHAfTOKA8C4WbAsOOcWaJlt+a8gc6pcn4=; b=Ko7XDIa6s9jebDGGjXy2amK7N915HU7+ZMOV87LqLtbp/rFx9eQQe/8pEXxBp1hoTPM1VFDxTWPcWXH7UuhT0M5NaInInp5he3piyFpgrtc4EA0wLr67xClfI1bcwFP0zEL/NQaFIQV4IOO/jDNuZkr4WLxlIHMXRURP2LIH/hQVs9wCGkda8apIlm4dMoqA7Qfk0aeh1PcIPyzzVlaNrOqzN8upEH/lbXOEwW2dto9MgHKo5GAnmHSeJLeJRHr9o7ftNiBoJwD5n7dUx4N5dUuohT/HTBzG85iWU/wlyDywxbgZWX2dF6ZX9NFcuvUrYKw4lA+bpWu7sK4aet5Qzw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=KeTWxn47vDAHAfTOKA8C4WbAsOOcWaJlt+a8gc6pcn4=; b=FpEqViQRErWyNsgrL5+tL1V8nITY8wkmftpxLfaC960RI15u0FoBCIAzGj5XXnRg6ersNzSXsJETRkb0WbgxEEldj30B7NrUiDy1XRtwgZ18AjfuJ58NnTbfIpCBDxiPfEaBNimngJuExUjRqEwrdE5JeagJVLaZr+rOZXgSeOI= Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2191.namprd11.prod.outlook.com (10.174.101.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.22; Wed, 30 Oct 2019 13:46:10 +0000 Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.028; Wed, 30 Oct 2019 13:46:10 +0000 From: "Bernie Volz (volz)" To: JORDI PALET MARTINEZ , Ted Lemon , Timothy Winters CC: IPv6 Operations Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AQHVibwc6PRwlsH+ZUmOeFzp+XKiI6dt8FJugAA0sICAAERiAIAAM1UOgAAj7oCAAC8lwYACBjMAgADxGbaAASHcfIAAAh0AgAAETICAAAb1gIAAEaAAgAAA6YCAAAIjAIAABSGA///EFwCAAEVzAP//wJQA Date: Wed, 30 Oct 2019 13:46:09 +0000 Message-ID: <5329B4F4-A06E-4CE4-AE6F-6F96CEFE24ED@cisco.com> References: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> <724EA0E3-9CD6-4721-90F6-B47ADC31E439@consulintel.es> In-Reply-To: <724EA0E3-9CD6-4721-90F6-B47ADC31E439@consulintel.es> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com; x-originating-ip: [173.38.117.77] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 2bcf561d-7b26-4edc-5c7d-08d75d3f858b x-ms-traffictypediagnostic: MWHPR1101MB2191: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 02065A9E77 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(366004)(39860400002)(376002)(136003)(346002)(189003)(199004)(66556008)(91956017)(76116006)(76176011)(229853002)(4326008)(66066001)(14454004)(5660300002)(25786009)(316002)(54896002)(66946007)(58126008)(6306002)(6512007)(36756003)(6486002)(966005)(478600001)(7736002)(6436002)(6246003)(236005)(2171002)(99286004)(66476007)(8676002)(64756008)(446003)(186003)(11346002)(81166006)(81156014)(33656002)(256004)(14444005)(5024004)(86362001)(2616005)(486006)(2906002)(476003)(71190400001)(71200400001)(8936002)(6506007)(53546011)(66574012)(3846002)(6116002)(102836004)(26005)(66446008)(110136005); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2191; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: e1g9+9Sf1fQcbyGs9WRmBdnHnCpOnl7UaBSQM328iVBDUohOPe3oiP1dgylUxesGhjb7Xxxn6d/x165E43+8jQszY5ktds9lZlwKchRpufgvIi/ZzHq9NfED/jrS0SEoGJiGM3usZ8GlWeC9f0CzpiAVDXNM5kZoa73WGW/XY4+Kv1VS7jRDX+crkUJtBprKmdZmZGyj7kdlj8b9s8x9l9mhh1z6HL2CzCc2TWiDI8YbJfY/fIwvkP9LRf/U3ZCWeE34dp0F5xjcSv0cUwxW2hSus3EfXadoVh7xKRqeyleFh1FzKDFAcMll7fLHCDQxr7f1jqNro+Y8CaeTnXOa6tIT97JfjJ5Fk2cRpn5HI0ZmU/l/2IUfafPGJWz7QYWjg5ye8tZnTRotfHtjSTL/2aCTE3gPfsTjmwQYbxgFPnokahhSE+IcJYttk4RFJQsN x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_5329B4F4A06E4CE4AE6F6F96CEFE24EDciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 2bcf561d-7b26-4edc-5c7d-08d75d3f858b X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2019 13:46:09.6222 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: qsUAFy/wuDssEXfQRm3VRcn3BgDbKQ21++LrEtC0Ahpj/ujFVBK5/BAK+MjwWPRr X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2191 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com X-Outbound-Node: alln-core-6.cisco.com Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 13:46:19 -0000 --_000_5329B4F4A06E4CE4AE6F6F96CEFE24EDciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBkb27igJl0IHJlYWxseSB0aGluayBzbyBhcyB0aGlzIGlzIGEgcmVsYXkgYWdlbnQgb3B0aW9u IOKAkyBub3QgYSBDUEUgb3B0aW9uLiBGb3IgdGhlIFNQLCB0aGUgQ1BFIGlzIGEgREhDUCBjbGll bnQuDQoNCklmIHlvdSBhcmUgdHJ5aW5nIHRvIHNpbXBseSBzYXkgdGhhdCBhIHJlbGF5ZWQgcGFj a2V0IG1heSBiZSB0aGUgdHJpZ2dlciwgb25lIGNvdWxkIGNlcnRhaW5seSBjb25zaWRlciBkb2lu ZyB0aGF0IGluIGFsbCB0aG9zZSBjYXNlcyBidXQgaXQgaXMgbm90IGNsZWFyIGlmIHRoYXQgY291 bGQgY2F1c2Ugc29tZSBwcm9ibGVtcyAoaWYgdGhlb3J5IGl0IHNob3VsZCBub3Qg4oCmIGJ1dCB5 b3UgbmV2ZXIga25vdykuIENlcnRhaW5seSwgb25lIGNvdWxkIGNvbnNpZGVyIGEgREhDUCBzZXJ2 ZXIgY29uZmlndXJhdGlvbiBrbm9iIHRoYXQgc2F5cyDigJxkbyB0aGlz4oCdIChmb3Igc29tZSBw YXJ0IG9yIGFsbCBvZiB0aGUgY29uZmlndXJhdGlvbikuDQoNCg0KICAqICAgQmVybmllDQoNCkZy b206IEpPUkRJIFBBTEVUIE1BUlRJTkVaIDxqb3JkaS5wYWxldEBjb25zdWxpbnRlbC5lcz4NCkRh dGU6IFdlZG5lc2RheSwgT2N0b2JlciAzMCwgMjAxOSBhdCA5OjMzIEFNDQpUbzogQmVybmllIFZv bHogPHZvbHpAY2lzY28uY29tPiwgVGVkIExlbW9uIDxtZWxsb25AZnVndWUuY29tPiwgVGltb3Ro eSBXaW50ZXJzIDx0d2ludGVyc0Bpb2wudW5oLmVkdT4NCkNjOiAidjZvcHNAaWV0Zi5vcmciIDx2 Nm9wc0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbdjZvcHNdIFNMQUFDIHJlbnVtOiBQcm9ibGVt IFN0YXRlbWVudCAmIE9wZXJhdGlvbmFsIHdvcmthcm91bmRzDQoNCkhpIEJlcm5pZSwNCg0KSSB0 aGluayBSRkM0NjQ5LCBvcHRpb24gMzcsIHByb3ZpZGVzIHRoYXQgb3B0aW9uLg0KDQpSZWdhcmRz LA0KSm9yZGkNCkBqb3JkaXBhbGV0DQoNCg0KDQpFbCAzMC8xMC8xOSAxNDoyNSwgInY2b3BzIGVu IG5vbWJyZSBkZSBCZXJuaWUgVm9seiAodm9seikiIDx2Nm9wcy1ib3VuY2VzQGlldGYub3JnPG1h aWx0bzp2Nm9wcy1ib3VuY2VzQGlldGYub3JnPiBlbiBub21icmUgZGUgdm9sekBjaXNjby5jb208 bWFpbHRvOnZvbHpAY2lzY28uY29tPj4gZXNjcmliacOzOg0KDQpXaGlsZSBJIGhhdmVu4oCZdCBm b2xsb3dlZCB0aGlzIGRpc2N1c3Npb24gaW4gZGV0YWlsLCBJIGRvIHdvbmRlciBpZiB0aGUgU1Ag REhDUCBzZXJ2ZXIgY291bGQgcHJvdmlkZSBzb21lIGFzc2lzdGFuY2UgdG8gQ1BFcyB0aGF0IGRv buKAmXQgaGF2ZSBzdG9yYWdlIOKApg0KDQpXaGVuIGEgQ1BFIGJvb3RzIGFuZCBkb2VzIGEgU29s aWNpdCAvIFJlcXVlc3QsIGl0IGNvdWxkIGluY2x1ZGUgYSBuZXcgb3B0aW9uIHRoYXQgdGVsbHMg dGhlIERIQ1Agc2VydmVyIHRoYXQgaXQgaGFzIG5vIHN0b3JhZ2UgYW5kIHRoZXJlZm9yZSBubyBr bm93bGVkZ2Ugb2YgYW55IOKAnHBhc3TigJ0gbGVhc2VzLiBUaGUgREhDUCBzZXJ2ZXIgaW4gdGhp cyBjYXNlIGNvdWxkIGluY2x1ZGUgYW55IOKAnG9sZOKAnSBsZWFzZXMgaXQgc3RpbGwgaGFzIGEg cmVjb3JkIG9mIChpLmUuLCB0aGF0IGhhdmUgbm90IGV4cGlyZWQgYnV0IGFyZSBubyBsb25nZXIg 4oCcdmFsaWTigJ0gaW4gdGVybXMgb2YgdGhlIGNvbmZpZ3VyYXRpb24gYmVjYXVzZSBvZiByZW51 bWJlcmluZyBvciBvdGhlciBjb25kaXRpb25zKSB3aXRoIDAgbGlmZXRpbWVzLiBUaGF0IHdvdWxk IGFsbG93IGEgcmVib290aW5nIENQRSB0byBsZWFybiBvbGQgZGVsZWdhdGVkIHByZWZpeGVzIHRo YXQgaXQgbWlnaHQgaGF2ZSBhZHZlcnRpc2VkIHRvIGl0cyBjbGllbnRzIGFuZCBpbml0aWF0ZSBk ZXByZWNhdGlvbiBvZiB0aGVzZSBwcmVmaXhlcyAoYW5kIGFueSBhZGRyZXNzZXMgZ2VuZXJhdGVk IGZyb20gdGhlbSkuDQoNClRoaXMgd291bGQgaW1wcm92ZSB0aGUgc2l0dWF0aW9uIHdoZW4gdGhl IENQRSBoYXMgbm8gc3RvcmFnZSBhbmQgcmVib290cyAod2hldGhlciBjdXN0b21lciBvciBTUCBp bml0aWF0ZWQpLg0KDQpOb3RlOiBUaGVyZSBjb3VsZCBiZSBjb25kaXRpb25zIGluIHdoaWNoIHRo aXMgd291bGQgZmFpbCAoc3VjaCBhcyBpZiBTUCByZW1vdmVkIGFsbCBjb25maWd1cmF0aW9uIHJl bGF0ZWQgdG8gdGhlIG9sZGVyIHByZWZpeGVzIGZyb20gdGhlIERIQ1Agc2VydmVyKSwgYnV0IGlu IG1hbnkgY2FzZXMgaXQgd291bGQgYWxsb3cgZm9yIGNsZWFuIHJlbnVtYmVyaW5nLiBPZiBjb3Vy c2UsIGl0IHJlcXVpcmVzIHVwZGF0aW5nIHRoZSBESENQIHNvZnR3YXJlIChvbiB0aGUgU1Agc2Vy dmVycyBhbmQgaW4gdGhlIENQRXMpLCBidXQgaXQgcHJvYmFibHkgZWFzaWVyIHRvIGFjY29tcGxp c2ggdGhhbiByZXF1aXJpbmcgdXNlIG9mIHN0b3JhZ2Ugb24gdGhlIENQRSBkZXZpY2UuDQoNCkJl IGEgcmVsYXRpdmUgZWFzeSBkcmFmdCB0byB3cml0ZSB1cCAoYXQgbGVhc3QgaW4gdGhlb3J5KS4N Cg0KDQotICAgICAgICAgIEJlcm5pZQ0KDQpGcm9tOiB2Nm9wcyA8djZvcHMtYm91bmNlc0BpZXRm Lm9yZz4gb24gYmVoYWxmIG9mIFRlZCBMZW1vbiA8bWVsbG9uQGZ1Z3VlLmNvbT4NCkRhdGU6IFdl ZG5lc2RheSwgT2N0b2JlciAzMCwgMjAxOSBhdCA5OjAwIEFNDQpUbzogVGltb3RoeSBXaW50ZXJz IDx0d2ludGVyc0Bpb2wudW5oLmVkdT4NCkNjOiAidjZvcHNAaWV0Zi5vcmciIDx2Nm9wc0BpZXRm Lm9yZz4NClN1YmplY3Q6IFJlOiBbdjZvcHNdIFNMQUFDIHJlbnVtOiBQcm9ibGVtIFN0YXRlbWVu dCAmIE9wZXJhdGlvbmFsIHdvcmthcm91bmRzDQoNCk9uIE9jdCAzMCwgMjAxOSwgYXQgODo0MCBB TSwgVGltb3RoeSBXaW50ZXJzIDx0d2ludGVyc0Bpb2wudW5oLmVkdTxtYWlsdG86dHdpbnRlcnNA aW9sLnVuaC5lZHU+PiB3cm90ZToNCldlIGNoZWNrIGJvdGgsIHRoZSBoYW5kbGluZyBvZiB0aGUg SUFfUEQgYW5kIHRoZSBlcnJvciBtZXNzYWdlLg0KDQpBbmQgdG8gYmUgY2xlYXIsIHlvdSBtZWFu IHRoYXQgaWYgdGhlIENQRSBhc2tzIGZvciBhIHByZWZpeCBkZWxlZ2F0aW9uIGFuZCBkb2VzbuKA mXQgZ2V0IHRoZSBwcmVmaXggaXQgcHJldmlvdXNseSBoYWQsIGl0IGRlcHJlY2F0ZXMgaXQgYXMg ZGVzY3JpYmVkIGluIEwtMTQ/ICBXaGVuIHRoaXMgZGVwcmVjYXRpb24gaGFwcGVucywgd2hhdCB3 YXlzIGFyZSBiZWluZyB0ZXN0ZWQgZm9yIGl0IHRvIGhhcHBlbj8NCg0KRS5nLiwgaXMgaXQgdGhl IGNhc2UgdGhhdCB0aGUgY2xpZW50IHNlbmRzIGFuIElBIFBEIGNvbnRhaW5pbmcgYW4gSUEgUHJl Zml4IG9wdGlvbiwgaXMgdGhlIHNlcnZlciByZXR1cm5pbmcgdGhlIElBIFByZWZpeCBvcHRpb24g Y29udGFpbmluZyB0aGUgc2FtZSBwcmVmaXgsIHdpdGggYSBzdGF0dXMgY29kZSBlbmNhcHN1bGF0 ZWQgaW4gaXQ/ICAgV2hhdCBzdGF0dXMgY29kZT8gICBPciBpcyBpdCByZXR1cm5pbmcgYW4gSUEg UHJlZml4IG9wdGlvbiB3aXRoIGEgZGlmZmVyZW50IHByZWZpeD8gICBPciBpcyBpdCBkb2luZyBi b3RoPw0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXyB2 Nm9wcyBtYWlsaW5nIGxpc3QgdjZvcHNAaWV0Zi5vcmcgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby92Nm9wcw0KDQoqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqDQpJUHY0IGlzIG92ZXINCkFyZSB5b3UgcmVhZHkgZm9yIHRoZSBuZXcgSW50 ZXJuZXQgPw0KaHR0cDovL3d3dy50aGVpcHY2Y29tcGFueS5jb20NClRoZSBJUHY2IENvbXBhbnkN Cg0KVGhpcyBlbGVjdHJvbmljIG1lc3NhZ2UgY29udGFpbnMgaW5mb3JtYXRpb24gd2hpY2ggbWF5 IGJlIHByaXZpbGVnZWQgb3IgY29uZmlkZW50aWFsLiBUaGUgaW5mb3JtYXRpb24gaXMgaW50ZW5k ZWQgdG8gYmUgZm9yIHRoZSBleGNsdXNpdmUgdXNlIG9mIHRoZSBpbmRpdmlkdWFsKHMpIG5hbWVk IGFib3ZlIGFuZCBmdXJ0aGVyIG5vbi1leHBsaWNpbHR5IGF1dGhvcml6ZWQgZGlzY2xvc3VyZSwg Y29weWluZywgZGlzdHJpYnV0aW9uIG9yIHVzZSBvZiB0aGUgY29udGVudHMgb2YgdGhpcyBpbmZv cm1hdGlvbiwgZXZlbiBpZiBwYXJ0aWFsbHksIGluY2x1ZGluZyBhdHRhY2hlZCBmaWxlcywgaXMg c3RyaWN0bHkgcHJvaGliaXRlZCBhbmQgd2lsbCBiZSBjb25zaWRlcmVkIGEgY3JpbWluYWwgb2Zm ZW5zZS4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCBiZSBhd2FyZSB0aGF0 IGFueSBkaXNjbG9zdXJlLCBjb3B5aW5nLCBkaXN0cmlidXRpb24gb3IgdXNlIG9mIHRoZSBjb250 ZW50cyBvZiB0aGlzIGluZm9ybWF0aW9uLCBldmVuIGlmIHBhcnRpYWxseSwgaW5jbHVkaW5nIGF0 dGFjaGVkIGZpbGVzLCBpcyBzdHJpY3RseSBwcm9oaWJpdGVkLCB3aWxsIGJlIGNvbnNpZGVyZWQg YSBjcmltaW5hbCBvZmZlbnNlLCBzbyB5b3UgbXVzdCByZXBseSB0byB0aGUgb3JpZ2luYWwgc2Vu ZGVyIHRvIGluZm9ybSBhYm91dCB0aGlzIGNvbW11bmljYXRpb24gYW5kIGRlbGV0ZSBpdC4NCg0K DQo= --_000_5329B4F4A06E4CE4AE6F6F96CEFE24EDciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <3AD48C8A6488A342A2279880D8C0F35D@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OldpbmdkaW5nczsNCglwYW5vc2UtMTo1IDAg MCAwIDAgMCAwIDAgMCAwO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0 aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJh Z3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCglt YXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0K CW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTox MS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcC5tc29ub3JtYWww LCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3Jt YWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5 bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21z by1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm Ow0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ Y29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBv cnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXpl OjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2Lldv cmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICov DQpAbGlzdCBsMA0KCXttc28tbGlzdC1pZDoxNjE2MDU2MDM5Ow0KCW1zby1saXN0LXR5cGU6aHli cmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMTgwOTgzOTA5MCAyOTM5ODc1MiA2NzY5ODY5 MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2 NzY5ODY5Mzt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXN0YXJ0LWF0OjA7DQoJbXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Oi07DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglt c28tZmFyZWFzdC1mb250LWZhbWlseTpDYWxpYnJpO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6 bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7 fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWls eTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDps ZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXci O30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1p bHk6V2luZ2RpbmdzO30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjE5OTU3MTk4MDU7DQoJbXNv LWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjEyNDM3NjM5MzAgMjA2 MjQ1MTcyNCA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5 ODY4OSA2NzY5ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMTpsZXZlbDENCgl7bXNvLWxldmVsLXN0 YXJ0LWF0OjA7DQoJbXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Oi07DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgltc28tZmFyZWFzdC1mb250LWZhbWlseTpDYWxpYnJpO30NCkBsaXN0IGwx OmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyI7fQ0KQGxpc3QgbDE6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZh bWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDE6bGV2ZWw1DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMTpsZXZlbDYN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlz dCBsMTpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsMTpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWls eToiQ291cmllciBOZXciO30NCkBsaXN0IGwxOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30N CnVsDQoJe21hcmdpbi1ib3R0b206MGluO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3Jk U2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBkb27igJl0IHJlYWxseSB0aGluayBz byBhcyB0aGlzIGlzIGEgcmVsYXkgYWdlbnQgb3B0aW9uIOKAkyBub3QgYSBDUEUgb3B0aW9uLiBG b3IgdGhlIFNQLCB0aGUgQ1BFIGlzIGEgREhDUCBjbGllbnQuPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPklmIHlvdSBhcmUgdHJ5aW5nIHRvIHNpbXBseSBzYXkgdGhhdCBhIHJlbGF5ZWQgcGFja2V0 IG1heSBiZSB0aGUgdHJpZ2dlciwgb25lIGNvdWxkIGNlcnRhaW5seSBjb25zaWRlciBkb2luZyB0 aGF0IGluIGFsbCB0aG9zZSBjYXNlcyBidXQgaXQgaXMgbm90IGNsZWFyIGlmIHRoYXQgY291bGQg Y2F1c2Ugc29tZSBwcm9ibGVtcyAoaWYgdGhlb3J5IGl0IHNob3VsZCBub3Qg4oCmIGJ1dCB5b3Ug bmV2ZXIga25vdykuIENlcnRhaW5seSwNCiBvbmUgY291bGQgY29uc2lkZXIgYSBESENQIHNlcnZl ciBjb25maWd1cmF0aW9uIGtub2IgdGhhdCBzYXlzIOKAnGRvIHRoaXPigJ0gKGZvciBzb21lIHBh cnQgb3IgYWxsIG9mIHRoZSBjb25maWd1cmF0aW9uKS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHVsIHN0eWxlPSJtYXJnaW4tdG9w OjBpbiIgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJt YXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzMiPkJlcm5pZTxvOnA+PC9vOnA+ PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJvbTogPC9zcGFuPjwvYj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+Sk9SREkgUEFMRVQgTUFSVElO RVogJmx0O2pvcmRpLnBhbGV0QGNvbnN1bGludGVsLmVzJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5X ZWRuZXNkYXksIE9jdG9iZXIgMzAsIDIwMTkgYXQgOTozMyBBTTxicj4NCjxiPlRvOiA8L2I+QmVy bmllIFZvbHogJmx0O3ZvbHpAY2lzY28uY29tJmd0OywgVGVkIExlbW9uICZsdDttZWxsb25AZnVn dWUuY29tJmd0OywgVGltb3RoeSBXaW50ZXJzICZsdDt0d2ludGVyc0Bpb2wudW5oLmVkdSZndDs8 YnI+DQo8Yj5DYzogPC9iPiZxdW90O3Y2b3BzQGlldGYub3JnJnF1b3Q7ICZsdDt2Nm9wc0BpZXRm Lm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFt2Nm9wc10gU0xBQUMgcmVudW06IFBy b2JsZW0gU3RhdGVtZW50ICZhbXA7IE9wZXJhdGlvbmFsIHdvcmthcm91bmRzPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0Ij5IaSBCZXJuaWUsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0Ij5JIHRoaW5rIFJGQzQ2NDksIG9wdGlvbiAzNywgcHJvdmlkZXMgdGhhdCBv cHRpb24uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtjb2xvcjpibGFjayI+UmVnYXJkcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Kb3JkaTwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkBqb3JkaXBhbGV0PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1i b3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM1LjRwdCI+RWwgMzAvMTAvMTkgMTQ6MjUsICZx dW90O3Y2b3BzIGVuIG5vbWJyZSBkZSBCZXJuaWUgVm9seiAodm9seikmcXVvdDsgJmx0OzxhIGhy ZWY9Im1haWx0bzp2Nm9wcy1ib3VuY2VzQGlldGYub3JnIj52Nm9wcy1ib3VuY2VzQGlldGYub3Jn PC9hPiBlbiBub21icmUgZGUNCjxhIGhyZWY9Im1haWx0bzp2b2x6QGNpc2NvLmNvbSI+dm9sekBj aXNjby5jb208L2E+Jmd0OyBlc2NyaWJpw7M6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNS40cHQi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzUuNHB0Ij5XaGlsZSBJIGhhdmVu4oCZdCBmb2xsb3dlZCB0aGlzIGRp c2N1c3Npb24gaW4gZGV0YWlsLCBJIGRvIHdvbmRlciBpZiB0aGUgU1AgREhDUCBzZXJ2ZXIgY291 bGQgcHJvdmlkZSBzb21lIGFzc2lzdGFuY2UgdG8gQ1BFcyB0aGF0IGRvbuKAmXQgaGF2ZSBzdG9y YWdlIOKApjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM1LjRwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzUuNHB0Ij5XaGVuIGEgQ1BFIGJvb3RzIGFuZCBkb2VzIGEg U29saWNpdCAvIFJlcXVlc3QsIGl0IGNvdWxkIGluY2x1ZGUgYSBuZXcgb3B0aW9uIHRoYXQgdGVs bHMgdGhlIERIQ1Agc2VydmVyIHRoYXQgaXQgaGFzIG5vIHN0b3JhZ2UgYW5kIHRoZXJlZm9yZSBu byBrbm93bGVkZ2Ugb2YgYW55IOKAnHBhc3TigJ0gbGVhc2VzLiBUaGUgREhDUCBzZXJ2ZXIgaW4g dGhpcyBjYXNlIGNvdWxkDQogaW5jbHVkZSBhbnkg4oCcb2xk4oCdIGxlYXNlcyBpdCBzdGlsbCBo YXMgYSByZWNvcmQgb2YgKGkuZS4sIHRoYXQgaGF2ZSBub3QgZXhwaXJlZCBidXQgYXJlIG5vIGxv bmdlciDigJx2YWxpZOKAnSBpbiB0ZXJtcyBvZiB0aGUgY29uZmlndXJhdGlvbiBiZWNhdXNlIG9m IHJlbnVtYmVyaW5nIG9yIG90aGVyIGNvbmRpdGlvbnMpIHdpdGggMCBsaWZldGltZXMuIFRoYXQg d291bGQgYWxsb3cgYSByZWJvb3RpbmcgQ1BFIHRvIGxlYXJuIG9sZCBkZWxlZ2F0ZWQgcHJlZml4 ZXMNCiB0aGF0IGl0IG1pZ2h0IGhhdmUgYWR2ZXJ0aXNlZCB0byBpdHMgY2xpZW50cyBhbmQgaW5p dGlhdGUgZGVwcmVjYXRpb24gb2YgdGhlc2UgcHJlZml4ZXMgKGFuZCBhbnkgYWRkcmVzc2VzIGdl bmVyYXRlZCBmcm9tIHRoZW0pLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM1LjRwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzUuNHB0Ij5UaGlzIHdvdWxkIGltcHJv dmUgdGhlIHNpdHVhdGlvbiB3aGVuIHRoZSBDUEUgaGFzIG5vIHN0b3JhZ2UgYW5kIHJlYm9vdHMg KHdoZXRoZXIgY3VzdG9tZXIgb3IgU1AgaW5pdGlhdGVkKS48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNS40cHQiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM1LjRwdCI+ Tm90ZTogVGhlcmUgY291bGQgYmUgY29uZGl0aW9ucyBpbiB3aGljaCB0aGlzIHdvdWxkIGZhaWwg KHN1Y2ggYXMgaWYgU1AgcmVtb3ZlZCBhbGwgY29uZmlndXJhdGlvbiByZWxhdGVkIHRvIHRoZSBv bGRlciBwcmVmaXhlcyBmcm9tIHRoZSBESENQIHNlcnZlciksIGJ1dCBpbiBtYW55IGNhc2VzIGl0 IHdvdWxkIGFsbG93IGZvciBjbGVhbiByZW51bWJlcmluZy4gT2YNCiBjb3Vyc2UsIGl0IHJlcXVp cmVzIHVwZGF0aW5nIHRoZSBESENQIHNvZnR3YXJlIChvbiB0aGUgU1Agc2VydmVycyBhbmQgaW4g dGhlIENQRXMpLCBidXQgaXQgcHJvYmFibHkgZWFzaWVyIHRvIGFjY29tcGxpc2ggdGhhbiByZXF1 aXJpbmcgdXNlIG9mIHN0b3JhZ2Ugb24gdGhlIENQRSBkZXZpY2UuPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzUuNHB0Ij4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNS40 cHQiPkJlIGEgcmVsYXRpdmUgZWFzeSBkcmFmdCB0byB3cml0ZSB1cCAoYXQgbGVhc3QgaW4gdGhl b3J5KS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNS40cHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJh Z3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDo3MS40cHQ7dGV4dC1pbmRlbnQ6LS4yNWluO21zby1s aXN0OmwwIGxldmVsMSBsZm8yIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJt c28tbGlzdDpJZ25vcmUiPi08c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+QmVybmllPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzUuNHB0Ij4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNS40cHQiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+djZvcHMgJmx0O3Y2b3BzLWJvdW5jZXNAaWV0Zi5v cmcmZ3Q7IG9uIGJlaGFsZiBvZiBUZWQgTGVtb24gJmx0O21lbGxvbkBmdWd1ZS5jb20mZ3Q7PGJy Pg0KPGI+RGF0ZTogPC9iPldlZG5lc2RheSwgT2N0b2JlciAzMCwgMjAxOSBhdCA5OjAwIEFNPGJy Pg0KPGI+VG86IDwvYj5UaW1vdGh5IFdpbnRlcnMgJmx0O3R3aW50ZXJzQGlvbC51bmguZWR1Jmd0 Ozxicj4NCjxiPkNjOiA8L2I+JnF1b3Q7djZvcHNAaWV0Zi5vcmcmcXVvdDsgJmx0O3Y2b3BzQGll dGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW3Y2b3BzXSBTTEFBQyByZW51bTog UHJvYmxlbSBTdGF0ZW1lbnQgJmFtcDsgT3BlcmF0aW9uYWwgd29ya2Fyb3VuZHM8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzUuNHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM1LjRwdCI+T24gT2N0IDMwLCAyMDE5 LCBhdCA4OjQwIEFNLCBUaW1vdGh5IFdpbnRlcnMgJmx0OzxhIGhyZWY9Im1haWx0bzp0d2ludGVy c0Bpb2wudW5oLmVkdSI+dHdpbnRlcnNAaW9sLnVuaC5lZHU8L2E+Jmd0OyB3cm90ZToNCjxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21h cmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzUuNHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTpIZWx2ZXRpY2EiPldlIGNoZWNrIGJvdGgsIHRoZSBoYW5kbGluZyBvZiB0aGUg SUFfUEQgYW5kIHRoZSBlcnJvciBtZXNzYWdlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNS40cHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNS40cHQiPkFuZCB0byBiZSBj bGVhciwgeW91IG1lYW4gdGhhdCBpZiB0aGUgQ1BFIGFza3MgZm9yIGEgcHJlZml4IGRlbGVnYXRp b24gYW5kIGRvZXNu4oCZdCBnZXQgdGhlIHByZWZpeCBpdCBwcmV2aW91c2x5IGhhZCwgaXQgZGVw cmVjYXRlcyBpdCBhcyBkZXNjcmliZWQgaW4gTC0xND8gJm5ic3A7V2hlbiB0aGlzIGRlcHJlY2F0 aW9uIGhhcHBlbnMsIHdoYXQgd2F5cyBhcmUgYmVpbmcgdGVzdGVkDQogZm9yIGl0IHRvIGhhcHBl bj88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNS40cHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM1LjRwdCI+RS5n LiwgaXMgaXQgdGhlIGNhc2UgdGhhdCB0aGUgY2xpZW50IHNlbmRzIGFuIElBIFBEIGNvbnRhaW5p bmcgYW4gSUEgUHJlZml4IG9wdGlvbiwgaXMgdGhlIHNlcnZlciByZXR1cm5pbmcgdGhlIElBIFBy ZWZpeCBvcHRpb24gY29udGFpbmluZyB0aGUgc2FtZSBwcmVmaXgsIHdpdGggYSBzdGF0dXMgY29k ZSBlbmNhcHN1bGF0ZWQgaW4gaXQ/ICZuYnNwOyBXaGF0IHN0YXR1cw0KIGNvZGU/ICZuYnNwOyBP ciBpcyBpdCByZXR1cm5pbmcgYW4gSUEgUHJlZml4IG9wdGlvbiB3aXRoIGEgZGlmZmVyZW50IHBy ZWZpeD8gJm5ic3A7IE9yIGlzIGl0IGRvaW5nIGJvdGg/PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzUuNHB0Ij4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM1LjRwdCI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18gdjZvcHMgbWFpbGluZyBsaXN0IHY2b3BzQGlldGYub3JnIGh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vdjZvcHMNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGJyPg0KKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKjxicj4NCklQdjQgaXMgb3Zlcjxicj4NCkFyZSB5b3UgcmVhZHkgZm9yIHRoZSBu ZXcgSW50ZXJuZXQgPzxicj4NCmh0dHA6Ly93d3cudGhlaXB2NmNvbXBhbnkuY29tPGJyPg0KVGhl IElQdjYgQ29tcGFueTxicj4NCjxicj4NClRoaXMgZWxlY3Ryb25pYyBtZXNzYWdlIGNvbnRhaW5z IGluZm9ybWF0aW9uIHdoaWNoIG1heSBiZSBwcml2aWxlZ2VkIG9yIGNvbmZpZGVudGlhbC4gVGhl IGluZm9ybWF0aW9uIGlzIGludGVuZGVkIHRvIGJlIGZvciB0aGUgZXhjbHVzaXZlIHVzZSBvZiB0 aGUgaW5kaXZpZHVhbChzKSBuYW1lZCBhYm92ZSBhbmQgZnVydGhlciBub24tZXhwbGljaWx0eSBh dXRob3JpemVkIGRpc2Nsb3N1cmUsIGNvcHlpbmcsIGRpc3RyaWJ1dGlvbiBvciB1c2Ugb2YNCiB0 aGUgY29udGVudHMgb2YgdGhpcyBpbmZvcm1hdGlvbiwgZXZlbiBpZiBwYXJ0aWFsbHksIGluY2x1 ZGluZyBhdHRhY2hlZCBmaWxlcywgaXMgc3RyaWN0bHkgcHJvaGliaXRlZCBhbmQgd2lsbCBiZSBj b25zaWRlcmVkIGEgY3JpbWluYWwgb2ZmZW5zZS4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVk IHJlY2lwaWVudCBiZSBhd2FyZSB0aGF0IGFueSBkaXNjbG9zdXJlLCBjb3B5aW5nLCBkaXN0cmli dXRpb24gb3IgdXNlIG9mIHRoZSBjb250ZW50cw0KIG9mIHRoaXMgaW5mb3JtYXRpb24sIGV2ZW4g aWYgcGFydGlhbGx5LCBpbmNsdWRpbmcgYXR0YWNoZWQgZmlsZXMsIGlzIHN0cmljdGx5IHByb2hp Yml0ZWQsIHdpbGwgYmUgY29uc2lkZXJlZCBhIGNyaW1pbmFsIG9mZmVuc2UsIHNvIHlvdSBtdXN0 IHJlcGx5IHRvIHRoZSBvcmlnaW5hbCBzZW5kZXIgdG8gaW5mb3JtIGFib3V0IHRoaXMgY29tbXVu aWNhdGlvbiBhbmQgZGVsZXRlIGl0Ljxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_5329B4F4A06E4CE4AE6F6F96CEFE24EDciscocom_-- From nobody Wed Oct 30 06:51:15 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DE2F12011F for ; Wed, 30 Oct 2019 06:51:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l8XA67MjyYBO for ; Wed, 30 Oct 2019 06:51:12 -0700 (PDT) Received: from mail-qk1-x733.google.com (mail-qk1-x733.google.com [IPv6:2607:f8b0:4864:20::733]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C44CD1200DE for ; Wed, 30 Oct 2019 06:51:11 -0700 (PDT) Received: by mail-qk1-x733.google.com with SMTP id 205so1459967qkk.1 for ; Wed, 30 Oct 2019 06:51:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=YYaTe7isG2h0k6Zp/k+/ShRd5vSRErbm+o7BDjd91M0=; b=eoSDnkFHpfM6RpI1n4k13tGTmxTLstdRkVGEpUMiJnFGfVq48lPVintc/9sFQ24VnI HFz/4mo34EP0y1fwWqRNMHMeZk1TJAIb/YnzOQZvAfU3sHI5yBxfwYs6ct8c3bD3DvfL ZkLkpIOqHgQxVrv4PBc242NlYKSAyABCYYzIx9/rTnVar8Kz5YinDYcH794j13Wu2rh9 a1smvxp+xDqM7bvQ47fJfSxo32Wim2IOZakF7nwpOMXWJbVhW7IVassTclmcA1H6nf+h GLvq/mxc4xdZVZPsJBn0Rd3i7uN3FmNv10DkAD9T64QlwOyleshD/z8PIK5zpTo8uZNW Xx5A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=YYaTe7isG2h0k6Zp/k+/ShRd5vSRErbm+o7BDjd91M0=; b=O2Rw0arb8TFmkkDIeV+6G6eJNhzv2dHiMfFCoKOqYgKEUTl1KkDumPh1u6XYRiM6BF 7XESRWoDZQQYScff3RJjvlrYJ8HHsY2CxuBsx5gTEMxicmxMGCMF/vAg2CtAdfFmSmJO SjZMYPlAaiwf0aaij2i7YvbqSCYoNxYnV/TS9y4MZrHz5Dsl7Km7YJWIpAqXLgWmoiAQ VdUZRWMajFHeTgUFK//iohmuIYEujMOkufIzH7nkftzjyosQ0a9xvoAAGQIqh3bIoy0t rIx6ZhPYAJh+Oqu4xi/KEFvW4avxSfFAeiUkxQI7BsdTTSInByvCFtr2SmZCL7gNym2T MAyw== X-Gm-Message-State: APjAAAVqZsJgoAG9H8T4e09Vw3n+4hM15ZBY0T6XV41kR8OLkRJxIhsh kEjI/i1DWBsEK/kImHSkO7SoJg== X-Google-Smtp-Source: APXvYqwvjjtAP8QeHF/vSg4eHLr58xdFdKftNY7kmsFFwta4xuMBfggb86+0BJk1bmsgD/EXtuI/Tg== X-Received: by 2002:ae9:f80d:: with SMTP id x13mr6776004qkh.63.1572443470595; Wed, 30 Oct 2019 06:51:10 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:c5ad:3e58:9e29:c076? ([2601:18b:300:36ee:c5ad:3e58:9e29:c076]) by smtp.gmail.com with ESMTPSA id 76sm45018qke.111.2019.10.30.06.51.09 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Oct 2019 06:51:10 -0700 (PDT) From: Ted Lemon Message-Id: <591F3207-735E-4182-82AD-A88F4A01C678@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_07240815-F81F-44F1-BDA6-20FB75AED0F1" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\)) Date: Wed, 30 Oct 2019 09:51:06 -0400 In-Reply-To: Cc: Timothy Winters , IPv6 Operations To: "Bernie Volz (volz)" References: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> X-Mailer: Apple Mail (2.3601.0.10) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 13:51:15 -0000 --Apple-Mail=_07240815-F81F-44F1-BDA6-20FB75AED0F1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 30, 2019, at 9:24 AM, Bernie Volz (volz) wrote: > When a CPE boots and does a Solicit / Request, it could include a new = option that tells the DHCP server that it has no storage and therefore = no knowledge of any =E2=80=9Cpast=E2=80=9D leases. The DHCP server in = this case could include any =E2=80=9Cold=E2=80=9D leases it still has a = record of (i.e., that have not expired but are no longer =E2=80=9Cvalid=E2= =80=9D in terms of the configuration because of renumbering or other = conditions) with 0 lifetimes. That would allow a rebooting CPE to learn = old delegated prefixes that it might have advertised to its clients and = initiate deprecation of these prefixes (and any addresses generated from = them). I don=E2=80=99t see any reason why this should not just be the default = behavior. --Apple-Mail=_07240815-F81F-44F1-BDA6-20FB75AED0F1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 30, 2019, at 9:24 AM, Bernie Volz (volz) <volz@cisco.com> = wrote:
When a CPE boots and does a Solicit / = Request, it could include a new option that tells the DHCP server that = it has no storage and therefore no knowledge of any =E2=80=9Cpast=E2=80=9D= leases. The DHCP server in this case could include any =E2=80=9Cold=E2=80= =9D leases it still has a record of (i.e., that have not expired but are = no longer =E2=80=9Cvalid=E2=80=9D in terms of the configuration because = of renumbering or other conditions) with 0 lifetimes. That would allow a = rebooting CPE to learn old delegated prefixes that it might have = advertised to its clients and initiate deprecation of these prefixes = (and any addresses generated from them).

I don=E2=80=99t see any reason why this should not = just be the default behavior.


= --Apple-Mail=_07240815-F81F-44F1-BDA6-20FB75AED0F1-- From nobody Wed Oct 30 07:03:15 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74F5B120112 for ; Wed, 30 Oct 2019 07:03:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=dT6zNNQu; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=A3Pqwy4r Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7lk2CgeQDdCf for ; Wed, 30 Oct 2019 07:03:11 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD9F21200DE for ; Wed, 30 Oct 2019 07:03:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=13220; q=dns/txt; s=iport; t=1572444190; x=1573653790; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=osbYUwSIxkQ61PutpJ1c9VsWBGp4oPYvSj36Pu35WY8=; b=dT6zNNQucal1BlPgahoHKMey17D0bGvVMWrV5BJS1cTWUlQO0qLbqj5O OqW0M1CW8UZdRa2jQgcNUOybI9kGdjDmhxvHHBZO3dJSW21FQa9mK067B Sf0ZLz278MrN4J1N9PenJ2aKXVWhKvSX3nH591pTq9m60NT1AHDlHQGof w=; IronPort-PHdr: =?us-ascii?q?9a23=3A7GC9QBQIiz02/mAHJgFGvt15B9psv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESUANfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH1?= =?us-ascii?q?5NksAKh0olCc+BB1f8Kav0aCgoNM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AGAADQl7ld/4kNJK1kGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBEQEBAQEBAQEBAQEBgWkEAQEBAQELAYEbL1AFbFggBAsqCoQ?= =?us-ascii?q?eg0YDhFqGFYJekwqEYYEugSQDVAkBAQEMAQEtAgEBhEACF4NPJDQJDgIDCQE?= =?us-ascii?q?BBAEBAQIBBQRthTcMhVEBAQEBAgESEQoTAQE3AQQLAgEIDgMEAQEoAwICAjA?= =?us-ascii?q?UCQgCBA4FCBqDAYF5TQMOIAGoLgKBOIhgdYEygn4BAQWFFxiCFwmBNgGMEBi?= =?us-ascii?q?Bf4FXgkw+hC8CFjSCWjKCLI0LgnKFPII5lgAKgiSVTJlehFeGE50kAgQCBAU?= =?us-ascii?q?CDgEBBYFSOYFYcBWDJ1AQFIMGDBeDUIpTdIEoiwaBMAEvXgEB?= X-IronPort-AV: E=Sophos;i="5.68,247,1569283200"; d="scan'208,217";a="360089573" Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 30 Oct 2019 14:03:09 +0000 Received: from XCH-RCD-020.cisco.com (xch-rcd-020.cisco.com [173.37.102.30]) by alln-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id x9UE39Vf021427 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 30 Oct 2019 14:03:09 GMT Received: from xhs-aln-001.cisco.com (173.37.135.118) by XCH-RCD-020.cisco.com (173.37.102.30) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 09:03:08 -0500 Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 09:03:07 -0500 Received: from NAM04-BN3-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 30 Oct 2019 09:03:07 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fGPK4LXRW6jkIGiCZSkRnEKybd8n2iEJPmMSqLq0OB+dwfG+0Qkj4E8vOduqRE1kD0rQAQ9hsUgbrZpZGegEewDxoRNcgbNshqwiZVBcOEg9JvrdrxZe4utWxcS8OEiD+UtLcgVquQ7G/7AdUnak0HBdOSQ1DsM3+Yr7rJO58TlD+88+6T4vuMZEVWnnpuh9VuTR58hlk4usYOZg0/UxTBNcjAUtGJzOyHqjINxVj4BPMRa8Y2GX3O+MklqiLbTxqyeDn0Wh8uouXLIWAjRnCMCluGwVqmLbToZ7+6N5d7afXjhD4UBHNem47DtdrcRdvjNe4wCSE/RD5ImR1zHpcw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=osbYUwSIxkQ61PutpJ1c9VsWBGp4oPYvSj36Pu35WY8=; b=TJthuIRpJ/LOr2wPxZR2RXIDKZXHVvbYPpSsiNMq3Ufk8anThLwMGYTNPncufE4EpJsvOpzZaNaNZdsBvPoKujBgK2RTLd/juCO5inebXqkDVuh1dQuP928bzLfx2Jyp149lFo1UH+kNOt+5rSSEERH780x541oOlqIEf0+fglwtEa7fVUtSH7Hpl/Z/Rl57uFNtfSUUfEdXDfQXoLMgsyadNnMAWarAAr7ME00NaXRwj8I/uxBY/JuUpP1r5jBnIMdEOhvXklCWlFeNtFpHajNJZ0ML34ky2g93JZKA5fhw69vOQ4RDvIdnIkRXkH8HNrDGQl9ADeQKTsS9KGmuHw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=osbYUwSIxkQ61PutpJ1c9VsWBGp4oPYvSj36Pu35WY8=; b=A3Pqwy4r1ODJjPBbmi79SqphoU8EWsD24hyZ8eR0XPiPLMKJYDYyI/QfLO7v5be0hm/b10CpxL65yPXNHPrjotK+AspLxv75R9dBT5lPrcTfKBbAFxUfXCqQ5+LMiy0WaNGXMC/gGwQZJr4/cwQB4OeUvYnbxwjV3TpKA2YKAsE= Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2191.namprd11.prod.outlook.com (10.174.101.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.22; Wed, 30 Oct 2019 14:03:07 +0000 Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.028; Wed, 30 Oct 2019 14:03:06 +0000 From: "Bernie Volz (volz)" To: Ted Lemon CC: Timothy Winters , IPv6 Operations Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AQHVibwc6PRwlsH+ZUmOeFzp+XKiI6dt8FJugAA0sICAAERiAIAAM1UOgAAj7oCAAC8lwYACBjMAgADxGbaAASHcfIAAAh0AgAAETICAAAb1gIAAEaAAgAAA6YCAAAIjAIAABSGA///EFwCAAEp4AIAAAM9w Date: Wed, 30 Oct 2019 14:03:06 +0000 Message-ID: References: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> <591F3207-735E-4182-82AD-A88F4A01C678@fugue.com> In-Reply-To: <591F3207-735E-4182-82AD-A88F4A01C678@fugue.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com; x-originating-ip: [173.38.117.77] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: eb40ea07-d442-4519-ca0f-08d75d41e389 x-ms-traffictypediagnostic: MWHPR1101MB2191: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 02065A9E77 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(346002)(136003)(376002)(366004)(396003)(39860400002)(189003)(199004)(790700001)(86362001)(2906002)(486006)(8676002)(64756008)(54906003)(14444005)(256004)(446003)(33656002)(81156014)(81166006)(11346002)(186003)(476003)(26005)(102836004)(66446008)(71200400001)(8936002)(71190400001)(6116002)(3846002)(53546011)(6506007)(76176011)(7696005)(66066001)(14454004)(4326008)(229853002)(6916009)(76116006)(66556008)(55016002)(7736002)(6246003)(6436002)(478600001)(236005)(99286004)(74316002)(66476007)(25786009)(52536014)(5660300002)(6306002)(9686003)(316002)(54896002)(66946007); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2191; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: OouYEnNlQ2Rw/Ls7J8JwoTFCUdOpQUahutIDKq/l3WpVnzFg8CJrO7BkyRR2vWS6qWgDaqDUQI02MOJ8rmifeDV/aQSTd1z6i5sl3tiaVPXF0jV1k1fUeG4nnERySCt+RKzNVuLXNWQkIKTgIlN1waUw+LZhkBZSg9dYQpnle6FdOVEdz/yvzKadE/Ke8TbQjXID1CODmQw1K/X0NUSc19MrEDaud7TW6B/Et0thhWeuwjsx2VFXXU5J7BTmn2FR88etmGmSDpZ5cAYip0+r+oSZ4SSQ5lQHnB8gNYisOWsbjJ/5bbSjAqk2wyBDZ0//QciB3r9J6ok523vhhM9fik08J76KiLs6gH/IY6BHreKGxWjVLakVNlRYVMTsC5z1aMdCcrYTua3CFVIjlCY5WuPS4z0PphUrxSdB8wr1H6MF3cUcRX8j8D8nCPSlfgqR x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR1101MB22889898CBD2143BA84DA1C8CF600MWHPR1101MB2288_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: eb40ea07-d442-4519-ca0f-08d75d41e389 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2019 14:03:06.5451 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: rREyZhC/UUaZbeyR0OMFe8z6o5Qw1fMeucC4JMTcjIrBpFj0uj1kHMad5cULBj4z X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2191 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.30, xch-rcd-020.cisco.com X-Outbound-Node: alln-core-4.cisco.com Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 14:03:13 -0000 --_000_MWHPR1101MB22889898CBD2143BA84DA1C8CF600MWHPR1101MB2288_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGVkOg0KDQpBIFNvbGljaXQga2luZCBvZiBtZWFucyDigJxzdGFydCBmcm9tIHNjcmF0Y2jigJ0u IFNvIHRoYXTigJlzIHdoeSB0aGUgY3VycmVudCBSRkM4NDE1IHNwZWNpZmljYXRpb24gZG9lcyBu b3QgcmVxdWlyZSBzZW5kaW5nIGluZm9ybWF0aW9uIHJlbGF0ZWQgdG8g4oCcb2xk4oCdIGxlYXNl cy4gVGhlIHRleHQgYWxzbyBkb2VzIG5vdCBwcm92aWRlIGZvciBzZW5kaW5nIDAgbGlmZXRpbWVz IGluIGFuIEFkdmVydGlzZSB3aGljaCBpcyB3aGVyZSB0aGlzIHdvdWxkIGZpcnN0IGFwcGVhciDi gJMgYW5kIHRoZW4gYWxzbyBpbiB0aGUgUmVwbHkgdG8gdGhlIFJlcXVlc3QuIFBlcmhhcHMgdGhl cmUgaXMgYW4gYXJndW1lbnQgdGhhdCB0aGVzZSBsZWFzZXMgc2hvdWxkIG5vdCBiZSBhZGRlZCB0 byB0aGUgQWR2ZXJ0aXNlLCBidXQgYmUgaW4gdGhlIFJlcGx5IHRvIHRoZSBSZXF1ZXN0Lg0KDQpT bywgaXQgZG9lcyBnZXQgYSBiaXQgbW9yZSBjb21wbGV4IGFuZCBuZWVkcyB0byBiZSB3b3JrZWQg b3V0Lg0KDQo+IEkgZG9u4oCZdCBzZWUgYW55IHJlYXNvbiB3aHkgdGhpcyBzaG91bGQgbm90IGp1 c3QgYmUgdGhlIGRlZmF1bHQgYmVoYXZpb3IuDQoNCkFzIEkgc2FpZCB0aGF0IGFzIHRoaXMgaXMg YSBjaGFuZ2UgaW4gYmVoYXZpb3IsIHdlIGRvbuKAmXQga25vdyB3aGF0IHRoZSBjb25zZXF1ZW5j ZXMgZm9yIGV4aXN0aW5nIGRldmljZXMgbWF5IGJlIOKAkyBhbmQgaW4gc29tZSBjYXNlcywgaWYg dGhlIGRldmljZSBkb2VzIGhhdmUgc3RvcmFnZSwgd291bGQgdGhpcyBjb25mdXNlIGl0PyBJ4oCZ bSBub3QgYWdhaW5zdCBoYXZpbmcgdGhpcyBiZSBhIGNvbmZpZ3VyYXRpb24ga25vYiBpbiB0aGUg c2VydmVyIHdoaWNoIGNhbiBiZSBhcHBsaWVkIGF0IHZhcmlvdXMg4oCcbGV2ZWxz4oCdIChwZXJo YXBzIGV2ZW4gZ2xvYmFsbHkpLg0KDQoNCiAgKiAgIEJlcm5pZQ0KDQpGcm9tOiBUZWQgTGVtb24g PG1lbGxvbkBmdWd1ZS5jb20+DQpTZW50OiBXZWRuZXNkYXksIE9jdG9iZXIgMzAsIDIwMTkgOTo1 MSBBTQ0KVG86IEJlcm5pZSBWb2x6ICh2b2x6KSA8dm9sekBjaXNjby5jb20+DQpDYzogVGltb3Ro eSBXaW50ZXJzIDx0d2ludGVyc0Bpb2wudW5oLmVkdT47IElQdjYgT3BlcmF0aW9ucyA8djZvcHNA aWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW3Y2b3BzXSBTTEFBQyByZW51bTogUHJvYmxlbSBTdGF0 ZW1lbnQgJiBPcGVyYXRpb25hbCB3b3JrYXJvdW5kcw0KDQpPbiBPY3QgMzAsIDIwMTksIGF0IDk6 MjQgQU0sIEJlcm5pZSBWb2x6ICh2b2x6KSA8dm9sekBjaXNjby5jb208bWFpbHRvOnZvbHpAY2lz Y28uY29tPj4gd3JvdGU6DQpXaGVuIGEgQ1BFIGJvb3RzIGFuZCBkb2VzIGEgU29saWNpdCAvIFJl cXVlc3QsIGl0IGNvdWxkIGluY2x1ZGUgYSBuZXcgb3B0aW9uIHRoYXQgdGVsbHMgdGhlIERIQ1Ag c2VydmVyIHRoYXQgaXQgaGFzIG5vIHN0b3JhZ2UgYW5kIHRoZXJlZm9yZSBubyBrbm93bGVkZ2Ug b2YgYW55IOKAnHBhc3TigJ0gbGVhc2VzLiBUaGUgREhDUCBzZXJ2ZXIgaW4gdGhpcyBjYXNlIGNv dWxkIGluY2x1ZGUgYW55IOKAnG9sZOKAnSBsZWFzZXMgaXQgc3RpbGwgaGFzIGEgcmVjb3JkIG9m IChpLmUuLCB0aGF0IGhhdmUgbm90IGV4cGlyZWQgYnV0IGFyZSBubyBsb25nZXIg4oCcdmFsaWTi gJ0gaW4gdGVybXMgb2YgdGhlIGNvbmZpZ3VyYXRpb24gYmVjYXVzZSBvZiByZW51bWJlcmluZyBv ciBvdGhlciBjb25kaXRpb25zKSB3aXRoIDAgbGlmZXRpbWVzLiBUaGF0IHdvdWxkIGFsbG93IGEg cmVib290aW5nIENQRSB0byBsZWFybiBvbGQgZGVsZWdhdGVkIHByZWZpeGVzIHRoYXQgaXQgbWln aHQgaGF2ZSBhZHZlcnRpc2VkIHRvIGl0cyBjbGllbnRzIGFuZCBpbml0aWF0ZSBkZXByZWNhdGlv biBvZiB0aGVzZSBwcmVmaXhlcyAoYW5kIGFueSBhZGRyZXNzZXMgZ2VuZXJhdGVkIGZyb20gdGhl bSkuDQoNCkkgZG9u4oCZdCBzZWUgYW55IHJlYXNvbiB3aHkgdGhpcyBzaG91bGQgbm90IGp1c3Qg YmUgdGhlIGRlZmF1bHQgYmVoYXZpb3IuDQoNCg0K --_000_MWHPR1101MB22889898CBD2143BA84DA1C8CF600MWHPR1101MB2288_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlz dFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7 bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDow aW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWww DQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsN CgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdp bi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs LXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRv d3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJ Zm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4w aW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjEN Cgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDAN Cgl7bXNvLWxpc3QtaWQ6NjI5Mjg5MzQ2Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1s aXN0LXRlbXBsYXRlLWlkczo1NTU4OTg5NzAgMTk4MjY1NDg0MCA2NzY5ODY5MSA2NzY5ODY5MyA2 NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5Mzt9DQpA bGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXN0YXJ0LWF0OjA7DQoJbXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Oi07DQoJbXNvLWxldmVsLXRhYi1zdG9w Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgltc28tZmFyZWFzdC1m b250LWZhbWlseTpDYWxpYnJpO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6 bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0K CWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGww OmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2Rpbmdz O30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGluO30N Ci0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6 ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2 OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0t LT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxl Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UZWQ6 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkEgU29saWNpdCBraW5kIG9mIG1lYW5zIOKAnHN0YXJ0 IGZyb20gc2NyYXRjaOKAnS4gU28gdGhhdOKAmXMgd2h5IHRoZSBjdXJyZW50IFJGQzg0MTUgc3Bl Y2lmaWNhdGlvbiBkb2VzIG5vdCByZXF1aXJlIHNlbmRpbmcgaW5mb3JtYXRpb24gcmVsYXRlZCB0 byDigJxvbGTigJ0gbGVhc2VzLiBUaGUgdGV4dCBhbHNvIGRvZXMgbm90IHByb3ZpZGUgZm9yIHNl bmRpbmcgMCBsaWZldGltZXMgaW4gYW4gQWR2ZXJ0aXNlIHdoaWNoIGlzDQogd2hlcmUgdGhpcyB3 b3VsZCBmaXJzdCBhcHBlYXIg4oCTIGFuZCB0aGVuIGFsc28gaW4gdGhlIFJlcGx5IHRvIHRoZSBS ZXF1ZXN0LiBQZXJoYXBzIHRoZXJlIGlzIGFuIGFyZ3VtZW50IHRoYXQgdGhlc2UgbGVhc2VzIHNo b3VsZCBub3QgYmUgYWRkZWQgdG8gdGhlIEFkdmVydGlzZSwgYnV0IGJlIGluIHRoZSBSZXBseSB0 byB0aGUgUmVxdWVzdC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U28sIGl0IGRvZXMgZ2V0IGEg Yml0IG1vcmUgY29tcGxleCBhbmQgbmVlZHMgdG8gYmUgd29ya2VkIG91dC48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+Jmd0OyBJIGRvbuKAmXQgc2VlIGFueSByZWFzb24gd2h5IHRoaXMgc2hvdWxk IG5vdCBqdXN0IGJlIHRoZSBkZWZhdWx0IGJlaGF2aW9yLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5BcyBJIHNhaWQgdGhhdCBhcyB0aGlzIGlzIGEgY2hhbmdlIGluIGJlaGF2aW9yLCB3ZSBkb27i gJl0IGtub3cgd2hhdCB0aGUgY29uc2VxdWVuY2VzIGZvciBleGlzdGluZyBkZXZpY2VzIG1heSBi ZSDigJMgYW5kIGluIHNvbWUgY2FzZXMsIGlmIHRoZSBkZXZpY2UgZG9lcyBoYXZlIHN0b3JhZ2Us IHdvdWxkIHRoaXMgY29uZnVzZSBpdD8gSeKAmW0gbm90IGFnYWluc3QgaGF2aW5nIHRoaXMgYmUg YSBjb25maWd1cmF0aW9uDQoga25vYiBpbiB0aGUgc2VydmVyIHdoaWNoIGNhbiBiZSBhcHBsaWVk IGF0IHZhcmlvdXMg4oCcbGV2ZWxz4oCdIChwZXJoYXBzIGV2ZW4gZ2xvYmFsbHkpLjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8dWwg c3R5bGU9Im1hcmdpbi10b3A6MGluIiB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBh cmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+ QmVybmllPG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gVGVkIExlbW9uICZsdDttZWxsb25AZnVndWUuY29t Jmd0OyA8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBPY3RvYmVyIDMwLCAyMDE5IDk6NTEg QU08YnI+DQo8Yj5Ubzo8L2I+IEJlcm5pZSBWb2x6ICh2b2x6KSAmbHQ7dm9sekBjaXNjby5jb20m Z3Q7PGJyPg0KPGI+Q2M6PC9iPiBUaW1vdGh5IFdpbnRlcnMgJmx0O3R3aW50ZXJzQGlvbC51bmgu ZWR1Jmd0OzsgSVB2NiBPcGVyYXRpb25zICZsdDt2Nm9wc0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5T dWJqZWN0OjwvYj4gUmU6IFt2Nm9wc10gU0xBQUMgcmVudW06IFByb2JsZW0gU3RhdGVtZW50ICZh bXA7IE9wZXJhdGlvbmFsIHdvcmthcm91bmRzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5PbiBPY3QgMzAsIDIwMTksIGF0IDk6MjQgQU0sIEJlcm5pZSBWb2x6ICh2b2x6 KSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnZvbHpAY2lzY28uY29tIj52b2x6QGNpc2NvLmNvbTwvYT4m Z3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5XaGVuIGEgQ1BFIGJvb3RzIGFuZCBkb2VzIGEgU29saWNpdCAvIFJlcXVl c3QsIGl0IGNvdWxkIGluY2x1ZGUgYSBuZXcgb3B0aW9uIHRoYXQgdGVsbHMgdGhlIERIQ1Agc2Vy dmVyIHRoYXQgaXQgaGFzIG5vIHN0b3JhZ2UgYW5kIHRoZXJlZm9yZSBubyBrbm93bGVkZ2Ugb2Yg YW55IOKAnHBhc3TigJ0gbGVhc2VzLiBUaGUgREhDUCBzZXJ2ZXIgaW4gdGhpcyBjYXNlIGNvdWxk IGluY2x1ZGUgYW55IOKAnG9sZOKAnSBsZWFzZXMNCiBpdCBzdGlsbCBoYXMgYSByZWNvcmQgb2Yg KGkuZS4sIHRoYXQgaGF2ZSBub3QgZXhwaXJlZCBidXQgYXJlIG5vIGxvbmdlciDigJx2YWxpZOKA nSBpbiB0ZXJtcyBvZiB0aGUgY29uZmlndXJhdGlvbiBiZWNhdXNlIG9mIHJlbnVtYmVyaW5nIG9y IG90aGVyIGNvbmRpdGlvbnMpIHdpdGggMCBsaWZldGltZXMuIFRoYXQgd291bGQgYWxsb3cgYSBy ZWJvb3RpbmcgQ1BFIHRvIGxlYXJuIG9sZCBkZWxlZ2F0ZWQgcHJlZml4ZXMgdGhhdCBpdCBtaWdo dCBoYXZlDQogYWR2ZXJ0aXNlZCB0byBpdHMgY2xpZW50cyBhbmQgaW5pdGlhdGUgZGVwcmVjYXRp b24gb2YgdGhlc2UgcHJlZml4ZXMgKGFuZCBhbnkgYWRkcmVzc2VzIGdlbmVyYXRlZCBmcm9tIHRo ZW0pLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+SSBkb27igJl0IHNlZSBhbnkgcmVhc29uIHdoeSB0aGlzIHNob3Vs ZCBub3QganVzdCBiZSB0aGUgZGVmYXVsdCBiZWhhdmlvci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9ib2R5Pg0KPC9odG1sPg0K --_000_MWHPR1101MB22889898CBD2143BA84DA1C8CF600MWHPR1101MB2288_-- From nobody Wed Oct 30 07:07:19 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 414E91200F3 for ; Wed, 30 Oct 2019 07:07:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r5JY_x0O1hYe for ; Wed, 30 Oct 2019 07:07:16 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [IPv6:2607:7c80:54:3::74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 301E4120112 for ; Wed, 30 Oct 2019 07:07:16 -0700 (PDT) Received: from astfgl.hanazo.no (dhcp217197164246.blix.com [217.197.164.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 267C64E11B4E; Wed, 30 Oct 2019 14:07:15 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 2D87620903EC; Wed, 30 Oct 2019 15:07:12 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> Date: Wed, 30 Oct 2019 15:07:11 +0100 Cc: Timothy Winters , IPv6 Operations Content-Transfer-Encoding: quoted-printable Message-Id: References: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> To: Ted Lemon X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 14:07:17 -0000 Ted, >> We check both, the handling of the IA_PD and the error message. >=20 > And to be clear, you mean that if the CPE asks for a prefix delegation = and doesn=E2=80=99t get the prefix it previously had, it deprecates it = as described in L-14? When this deprecation happens, what ways are = being tested for it to happen? >=20 > E.g., is it the case that the client sends an IA PD containing an IA = Prefix option, is the server returning the IA Prefix option containing = the same prefix, with a status code encapsulated in it? What status = code? Or is it returning an IA Prefix option with a different prefix? = Or is it doing both? You are thinking about this wrong. The simple implementation of uRPF/BCP38 is: on LAN ingress to do a = lookup in the FIB of the SA, if the resulting adjacency/interface = matches the ingress interface allow packet otherwise drop packet and = send ICMP message. This behaviour is required regardless of renumbering = or not. The ISP is required to do this on their ingress interfaces too. Cheers, Ole= From nobody Wed Oct 30 07:16:04 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88E95120077 for ; Wed, 30 Oct 2019 07:16:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RVWNDuBPiDFN for ; Wed, 30 Oct 2019 07:16:01 -0700 (PDT) Received: from mail-qk1-x736.google.com (mail-qk1-x736.google.com [IPv6:2607:f8b0:4864:20::736]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 767FC120BF5 for ; Wed, 30 Oct 2019 07:16:01 -0700 (PDT) Received: by mail-qk1-x736.google.com with SMTP id d13so2885315qko.3 for ; Wed, 30 Oct 2019 07:16:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=ImXtXVjI7lt3K/Fa5+VHFu2ZoBp3lmUy3F6QiekVTkI=; b=O+t0ny5tD5PPE4JEhU9D1xe/EiM/3GLnDucdKJxSeDiccv/OCMmTu/vD8L9XIXUKAN EYVRv6dp5tdDNud6psNH+fEyhCSnxoj5eAjRy/PvvQ5TCls2riIIy49OALGC5XLvSe2v 218Q30PAokRXvvkOsdx6sxXA7/xbihs2Gh/TbmDpu4E+c7Qi+bOtyTN2x8zUpoHvTRuU 6e25UT5tm5uutGjn+UZrAAJA99rjv2C9OpoFb6EmXQuxbTRAnv9Okxkpw8+0K93giG3Z EZhZplgWBqCeHWsjP/1t7bXzdV1ni8KucHBBEFqKPEXcRnujsyyoq+O5hG10NaUH/9Mz fbkA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=ImXtXVjI7lt3K/Fa5+VHFu2ZoBp3lmUy3F6QiekVTkI=; b=NBsQta6oC5EhgutUTbrKxsQ+Gx4X71lzqrvFpSNheVFKjLNlgVFwSK9cWn4Fpl9irI Avse6UGUetKMzas6d7ORbdvTq4iohvu+h6grIG/CirGbVHi/s29WzXRHaZNLwGMwP0IQ 2L3V6RXOzngw0tsPgM1NXetuePQmhJgkJLnagbd9WR4tvSChcQxxRKGvYzDrYLBugiNN tcmAj+FIvR4VEpKjj0U3UTHdZtpL5pQjCRlvuOgVSza95thwwMr5XnUfzfamKuHzQvjs MzgnbtD7C1iPmbas84PrlYP7Yp4Mm9i98RrJ0KFp8MQmd8Az9qNPYk1y0e5sgtlRaAaK CvHA== X-Gm-Message-State: APjAAAW4iaTHA/v59nxmbb9JxNHR6YX84PXPREeNN3ZvsBb0XcaIVIRc 9UpAxHSGMjDBDkW1PrEEGTMYnQ== X-Google-Smtp-Source: APXvYqyJn52sIUaPhNUnQPbeSViTlsG5iU2lU3mcz3+qWQoNCjHjz0CDHd8jopDVx5VApGyk6mUcgg== X-Received: by 2002:a37:a64d:: with SMTP id p74mr47789qke.285.1572444960423; Wed, 30 Oct 2019 07:16:00 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:c5ad:3e58:9e29:c076? ([2601:18b:300:36ee:c5ad:3e58:9e29:c076]) by smtp.gmail.com with ESMTPSA id y82sm63505qka.130.2019.10.30.07.15.59 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Oct 2019 07:15:59 -0700 (PDT) From: Ted Lemon Message-Id: <886D4F45-0B58-4726-9BED-BF32F2F88238@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_CF65DE2B-2EC5-4D53-985C-6DBBBE50539E" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\)) Date: Wed, 30 Oct 2019 10:15:58 -0400 In-Reply-To: Cc: Timothy Winters , IPv6 Operations To: "Bernie Volz (volz)" References: <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> <591F3207-735E-4182-82AD-A88F4A01C678@fugue.com> X-Mailer: Apple Mail (2.3601.0.10) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 14:16:03 -0000 --Apple-Mail=_CF65DE2B-2EC5-4D53-985C-6DBBBE50539E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 30, 2019, at 10:03 AM, Bernie Volz (volz) wrote: > A Solicit kind of means =E2=80=9Cstart from scratch=E2=80=9D. So = that=E2=80=99s why the current RFC8415 specification does not require = sending information related to =E2=80=9Cold=E2=80=9D leases. The text = also does not provide for sending 0 lifetimes in an Advertise which is = where this would first appear =E2=80=93 and then also in the Reply to = the Request. Perhaps there is an argument that these leases should not = be added to the Advertise, but be in the Reply to the Request. > =20 > So, it does get a bit more complex and needs to be worked out. > =20 > > I don=E2=80=99t see any reason why this should not just be the = default behavior. > =20 > As I said that as this is a change in behavior, we don=E2=80=99t know = what the consequences for existing devices may be =E2=80=93 and in some = cases, if the device does have storage, would this confuse it? I=E2=80=99m= not against having this be a configuration knob in the server which can = be applied at various =E2=80=9Clevels=E2=80=9D (perhaps even globally). There are a lot of assumptions you=E2=80=99ve stated here that as far as = I know do not appear in the standard. E.g., you may think that a = solicit kind of means =E2=80=9Cstart from scratch,=E2=80=9D but is it = not okay for the DHCP server to send 0 lifetimes in the Advertise? Or = is it just not suggested? I agree that it needs to be worked out. As for existing devices, I = think that at this point a scorched earth policy is not unreasonable: if = there are devices out there that have firmware that can=E2=80=99t be = updated to fix problems like this, it=E2=80=99s probably good if they = stop working and have to be =E2=80=9Crecycled.=E2=80=9D I hope that = number is zero; if for some ISP it=E2=80=99s sufficiently more than zero = that this isn=E2=80=99t the right solution, then they may have to wait = until those routers EOL before deploying this =E2=80=9Cnew" behavior. However, I think in practice this simply wouldn=E2=80=99t cause a = problem, and complexifying things to prevent such a problem seems = unnecessary in the absence of data. Do we test for the case where the DHCP server sends back two IA Prefix = options in an IA_PD? I think that=E2=80=99s allowed, isn=E2=80=99t it? = Maybe the right behavior is to leave the Advertise unchanged, but send = to IA Prefixes in the Reply. --Apple-Mail=_CF65DE2B-2EC5-4D53-985C-6DBBBE50539E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 30, 2019, at 10:03 AM, Bernie Volz (volz) <volz@cisco.com> = wrote:
A Solicit kind of means =E2=80=9Cstart = from scratch=E2=80=9D. So that=E2=80=99s why the current RFC8415 = specification does not require sending information related to =E2=80=9Cold= =E2=80=9D leases. The text also does not provide for sending 0 lifetimes = in an Advertise which is where this would first appear =E2=80=93 and = then also in the Reply to the Request. Perhaps there is an argument that = these leases should not be added to the Advertise, but be in the Reply = to the Request.
 
So, it does get a bit more complex and needs to be = worked out.
 
> I don=E2=80=99t see any reason why this should = not just be the default behavior.
 
As I said that as this is a change in = behavior, we don=E2=80=99t know what the consequences for existing = devices may be =E2=80=93 and in some cases, if the device does have = storage, would this confuse it? I=E2=80=99m not against having this be a = configuration knob in the server which can be applied at various = =E2=80=9Clevels=E2=80=9D (perhaps even = globally).

There are a lot of assumptions you=E2=80=99ve stated here = that as far as I know do not appear in the standard.   E.g., you = may think that a solicit kind of means =E2=80=9Cstart from scratch,=E2=80=9D= but is it not okay for the DHCP server to send 0 lifetimes in the = Advertise?  Or is it just not suggested?

I agree that it needs to be worked out. =   As for existing devices, I think that at this point a scorched = earth policy is not unreasonable: if there are devices out there that = have firmware that can=E2=80=99t be updated to fix problems like this, = it=E2=80=99s probably good if they stop working and have to be = =E2=80=9Crecycled.=E2=80=9D   I hope that number is zero; if for = some ISP it=E2=80=99s sufficiently more than zero that this isn=E2=80=99t = the right solution, then they may have to wait until those routers EOL = before deploying this =E2=80=9Cnew" behavior.

However, I think in practice this = simply wouldn=E2=80=99t cause a problem, and complexifying things to = prevent such a problem seems unnecessary in the absence of = data.

Do we = test for the case where the DHCP server sends back two IA Prefix options = in an IA_PD?   I think that=E2=80=99s allowed, isn=E2=80=99t it? =   Maybe the right behavior is to leave the Advertise unchanged, but = send to IA Prefixes in the Reply.

= --Apple-Mail=_CF65DE2B-2EC5-4D53-985C-6DBBBE50539E-- From nobody Wed Oct 30 07:28:15 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1DBC120B2F for ; Wed, 30 Oct 2019 07:28:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=messagingengine.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cjUUT60EwzoE for ; Wed, 30 Oct 2019 07:28:11 -0700 (PDT) Received: from wout4-smtp.messagingengine.com (wout4-smtp.messagingengine.com [64.147.123.20]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00CDF120B7A for ; Wed, 30 Oct 2019 07:28:10 -0700 (PDT) Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.west.internal (Postfix) with ESMTP id 1F33F591 for ; Wed, 30 Oct 2019 10:28:10 -0400 (EDT) Received: from imap3 ([10.202.2.53]) by compute2.internal (MEProxy); Wed, 30 Oct 2019 10:28:10 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=5hvzbs Dnsk+gA6gwSQn2VcV99P36+iikJXABB1mg0g0=; b=chgBUg8a50bxr0pdeHzAJV I6bgWgqb0U11TqDFuaPe/bFuL3niIjiVMPJquEBesG5RPjVA7vmaJouty5S31STI HBypxvtrDvFcbCkCUZMqjsZqhIFXR5yRJOHrtSNtESBAsCpLRcqxTKHknrIwuKlU YCVYUwyAvh0qVl3v4YdJFqtqeENVcqn7zaTOjihBj0lmH5Q0FG/pxLuh4Wry0/k0 3/U2gmAdoA8UlQuPNcFnHqUiQPWw1sRAmrKLf2D/UVcSm5f2OJnw8P496ZfSfmAk XaZbkjYEQ9ebW10vjy37qe5kCmuQbYG+hqK1/NzT951mkbWlRQSaXcd+MlTrLlBg == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedufedruddtfedgieehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfgjfhffhffvufgtsehttd ertderredtnecuhfhrohhmpedftfgrughuqdetughrihgrnhcuhfgvuhhruggvrghnfdcu oehivghtfhdqfihgshesrhgrughuqdgrughrihgrnhdrfhgvuhhruggvrghnrdhnvghtqe enucfrrghrrghmpehmrghilhhfrhhomhepihgvthhfqdifghhssehrrgguuhdqrggurhhi rghnrdhfvghurhguvggrnhdrnhgvthenucevlhhushhtvghrufhiiigvpedt X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 501) id 56EF34E009F; Wed, 30 Oct 2019 10:28:09 -0400 (EDT) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.1.7-509-ge3ec61c-fmstable-20191030v1 Mime-Version: 1.0 Message-Id: <9dfd5e47-c593-4145-b530-74fb0f4155ed@www.fastmail.com> In-Reply-To: References: <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com> Date: Wed, 30 Oct 2019 15:27:49 +0100 From: "Radu-Adrian Feurdean" To: v6ops@ietf.org Content-Type: text/plain Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 14:28:13 -0000 On Thu, Oct 24, 2019, at 11:20, Alexandre Petrescu wrote: > In particular, the home networks scenario is very appropriate. > > First, I must say that the home network that I use uses a fixed /56 > allocated by my ISP. In this, the prefix never changes, and it is not > obtained by DHCPv6-PD - it is guaranteed by contract signed by hand. > Such a case could be mentioned, as not being a problem described in this > draft. If you are talking about residential service (not business/enterprise-class), I would like to know who your service provider is. > I must say that this kind of software (request a prefix with DHCPv6-PD, > form sub-prefixes, and put them in RAs on the other interfaces) does not > exist as open source or some other available package. Dibbler-client does that by default. Once the delegated prefix (shorter than /64) is obtained, a /64 from that prefix is assigned to each interface. With proper radvd.conf configuration (prefix ::/64), RAs will be sent for those prefixes. A lot (?? most ??) of CPEs implementing DHCPv6-PD client do this in some form or another. Some do this automatically (take prefixes and assign them to interfaces), other need manual configuration (n-th prefix go to interface ZZZ). > Because of that, I am surprised that you call it 'the most common > deployment scenario'. Is this a scenario that is _expected_ to be 'common'? "Expected enough" to warrant a device to be disqualified as "CPE that supports IPv6" if it doesn't work this way. In an ISP environment. > I would like to request addition of two other scenarios: > > - an IoT scenario, in which an IoR Router connects several sensors to > the Internet. For example, an IoT Router is deployed in a box at a > traffic lights. The IoT device is the Traffic Lights Controller > connected on Ethernet to the IoT Router. The IoT Router is connected on 4G. > > - a vehicular networks scenario: the On-Board Unit is deployed in a car. > This OBU has a 4G interface and an Ethernet interface. There are > several computers in the car that need IPv6 addresses. Like : you have a mobile phone on a network doing IPv6+NAT64, you pout it in tethering/mobile-hotspot mode, and connect several other devices (usually laptops) to that hotspot - they all get IPv6 addresses (in the same single /64 that the phone obtained via SLAAC or something else). It is clear that getting a /56 (even a /60 or /62 would do it) via DHCPv6-PD would be a nicer solution, but when your mobile device runs android.... -- R-A.F. From nobody Wed Oct 30 08:51:55 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58D1A120113 for ; Wed, 30 Oct 2019 08:51:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L0wmnscLgXBm for ; Wed, 30 Oct 2019 08:51:50 -0700 (PDT) Received: from sainfoin-smtp-out.extra.cea.fr (sainfoin-smtp-out.extra.cea.fr [132.167.192.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A206120019 for ; Wed, 30 Oct 2019 08:51:49 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9UFph2f018572; Wed, 30 Oct 2019 16:51:43 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id C6CF0206690; Wed, 30 Oct 2019 16:51:43 +0100 (CET) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id B3E45202E41; Wed, 30 Oct 2019 16:51:43 +0100 (CET) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9UFphMW030249; Wed, 30 Oct 2019 16:51:43 +0100 To: Jen Linkova , "Rajiv Asati (rajiva)" Cc: Ted Lemon , "v6ops@ietf.org" References: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> From: Alexandre Petrescu Message-ID: Date: Wed, 30 Oct 2019 16:51:43 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 15:51:53 -0000 Le 30/10/2019 à 05:26, Jen Linkova a écrit : > On Wed, Oct 30, 2019 at 2:35 PM Rajiv Asati (rajiva) > wrote: >> Yes, same prefix can be specified in DHCPv6 server and router RA >> PIO. If ever a conflict between the IPv6 addresses at a host, then >> the host could use DAD to resolve the conflict (and recycle the >> SLAAC derived address). Standard machinery. > > Well, I guess the more tricky case is 'a host got an address from > DHCP, DAD is failing because another host already assigned the same > IP (manually or via SLAAC)'. What's next (besides sending DECLINE > back to the server)? Split-brain condition in address assignments is > hard. The more I read this thread the less I see the point of having > DHCPv6 (for address assignment) when we have SLAAC. > > Oh...I think I'm breaking the promise I made to myself ("never get > involved into SLAAC vs DHCP discussion ever') again...;)) I dont want to discuss a vs b either. Alex > > >> -----Original Message----- From: Alexandre Petrescu >> Date: Tuesday, October 29, 2019 at >> 2:32 PM To: Rajiv Asati , Ted Lemon >> Cc: "v6ops@ietf.org" Subject: >> Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? >> >> >> >> Le 29/10/2019 à 13:38, Rajiv Asati (rajiva) a écrit : >>> >>> Indeed. CPE router should allow keeping both M and A flags, to >>> allow simultaneous usage of DHCPv6 and SLAAC by the hosts. >> >> At high level, it makes sense to require to allow simultaneous DHCP >> and SLAAC usage on a same subnet; a private email suggests the >> same. With that, Android and Windows would live ok side-by-side on >> same subnet. >> >> Further, thinking about how to implement the req, one would wonder >> whether the prefix in PIO with A flag set in an RA with M set, >> would be the same as the prefix used by the DHCP Server to form and >> deliver addresses? >> >> (if yes, I think that is difficult to achieve: (1) difficult to put >> same prefix in the software implementing RA sending, and in the >> DHCP server connfig files and (2) difficult to make sure the Server >> does not form an address for a Client, address that a Host has >> already formed in the same prefix). >> >> (because of that reason, I think that trying to implement that >> requirement would lead to designating a prefix for SLAAC and >> another prefix for DHCP; that may sound a little bit as a waste). >> >> Alex >> >>> >>> About time to update RFC7084 - >>> https://tools.ietf.org/html/rfc7084#section-4.3 >>> >>> >>> >>> Cheers, Rajiv >>> >>> >>>> On Oct 29, 2019, at 7:22 AM, Ted Lemon >>>> wrote: >>>> >>>> On Oct 29, 2019, at 6:37 AM, Alexandre Petrescu >>>> >>> > wrote: >>>>> Well no. After activating DHCPv6 on CPE the CPE sent three >>>>> RAs changing the Lifetime and flipping the M(anaged) and >>>>> A(utonomous) flags. >>>>> >>>>> Packet dumps available upon request. >>>> >>>> That’s the problem. It should turn on the managed bit but >>>> not turn off the autonomous bit. The two can validly be on at >>>> the same time. >>>> >>>> Of course, since their meanings are deprecated, it’s not too >>>> surprising that implementations get this wrong. >>>> >>>> _______________________________________________ v6ops mailing >>>> list v6ops@ietf.org >>>> https://www.ietf.org/mailman/listinfo/v6ops >> >> >> _______________________________________________ v6ops mailing list >> v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops > > > From nobody Wed Oct 30 08:53:14 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E25B312002F for ; Wed, 30 Oct 2019 08:53:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.632 X-Spam-Level: X-Spam-Status: No, score=-2.632 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s2bSu7Elrjey for ; Wed, 30 Oct 2019 08:53:10 -0700 (PDT) Received: from cirse-smtp-out.extra.cea.fr (cirse-smtp-out.extra.cea.fr [132.167.192.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2203B120019 for ; Wed, 30 Oct 2019 08:53:09 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by cirse-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9UFr5Nt008553; Wed, 30 Oct 2019 16:53:05 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 87F5F2066BF; Wed, 30 Oct 2019 16:53:05 +0100 (CET) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 7E2E9206689; Wed, 30 Oct 2019 16:53:05 +0100 (CET) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9UFr5bY030961; Wed, 30 Oct 2019 16:53:05 +0100 To: "Rajiv Asati (rajiva)" , Ted Lemon Cc: "v6ops@ietf.org" References: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> From: Alexandre Petrescu Message-ID: <411309a8-3f75-8d62-c656-51ac755413d4@gmail.com> Date: Wed, 30 Oct 2019 16:53:05 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 15:53:12 -0000 Le 30/10/2019 à 04:35, Rajiv Asati (rajiva) a écrit : > > Yes, same prefix can be specified in DHCPv6 server and router RA PIO. > If ever a conflict between the IPv6 addresses at a host, then the > host could use DAD to resolve the conflict (and recycle the SLAAC > derived address). Standard machinery. Why would conflict result into recycling through a SLAAC process and not a DHCP exchange. There's no std machinery for that. Alex From nobody Wed Oct 30 09:02:54 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A43FE120964 for ; Wed, 30 Oct 2019 09:02:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.631 X-Spam-Level: X-Spam-Status: No, score=-2.631 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dt_CR4BG88_k for ; Wed, 30 Oct 2019 09:02:50 -0700 (PDT) Received: from oxalide-smtp-out.extra.cea.fr (oxalide-smtp-out.extra.cea.fr [132.168.224.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2498912089B for ; Wed, 30 Oct 2019 09:02:49 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by oxalide-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9UG2iWH007504; Wed, 30 Oct 2019 17:02:44 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 6EAB62065B0; Wed, 30 Oct 2019 17:02:44 +0100 (CET) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 5BF9020373F; Wed, 30 Oct 2019 17:02:44 +0100 (CET) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9UG2iwV003317; Wed, 30 Oct 2019 17:02:44 +0100 To: Jen Linkova Cc: "Rajiv Asati (rajiva)" , Ted Lemon , "v6ops@ietf.org" References: <8DA54CF0-B7D7-4E4B-BA85-EA024401DEAC@fugue.com> From: Alexandre Petrescu Message-ID: Date: Wed, 30 Oct 2019 17:02:44 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] out-of-focus: why DHCPv6 breaks Android computers? X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 16:02:53 -0000 Le 30/10/2019 à 03:56, Jen Linkova a écrit : > On Wed, Oct 30, 2019 at 5:32 AM Alexandre Petrescu > wrote: >> At high level, it makes sense to require to allow simultaneous DHCP >> and SLAAC usage on a same subnet; a private email suggests the >> same. With that, Android and Windows would live ok side-by-side on >> same subnet. > > I'm still not sure I understand why you need DHCP for > Windows...Unless you got that Windows in an antique shop...;) I have > plenty of Windows machines in the network (in an IPv6-only one as > well). Well, my Windows is very new from Dell, not from antique. My Windows is on DHCPv4-only at work. At home it works ok on DHCPv6 as well. At home it is a mixed IPv4-IPv6. My Windows could stop doing DHCPv6 if I request it to, but by default it does DHCPv6 in addition to SLAAC. My Windows could run only SLAAC if I asked it to. My CPE does IPv6 and SLAAC by default, and DHCPv6 is an option off by default. So - do not worry. >> Further, thinking about how to implement the req, one would wonder >> whether the prefix in PIO with A flag set in an RA with M set, >> would be the same as the prefix used by the DHCP Server to form and >> deliver addresses? > >> (if yes, I think that is difficult to achieve: (1) difficult to put >> same prefix in the software implementing RA sending, and in the >> DHCP server connfig files > > Could you elaborate on this one? How is "putting the prefix in the > software implementing RA sending" different from "configuring a > prefix on a router interface"? It's like saying 'difficult to > configure the same IPv4 or IPv6 prefix on the router interface and on > DHCP server' I meant to say : 'to maintain'. If I change something in the DHCP conf files then I have to change the same in the RA conf files, to make sure the same prefix is present on both. But, probably some software packages do that ok. >> and (2) difficult to make sure the Server does not form an address >> for a Client, address that a Host has already formed in the same >> prefix). > > That's could be done to the some degree of confidence - if the pool > is using the first addresses in the prefix (let's say, the highest > 50 bits if the interface ID set to 0) then it's rather unlikely that > such interface ID would be generated by SLAAC. However that's a good > point, thanks for another item in my collection of 'why I don't need > DHCPv6' reasons ;)) :-) that starts to sound like being against x in the a vs b discussion. >> (because of that reason, I think that trying to implement that >> requirement would lead to designating a prefix for SLAAC and >> another prefix for DHCP; that may sound a little bit as a waste). > > I'm sure operating such a network will be...eh...entertaining... Sure, however, one might need this behaviour. I think that I might need the DHCPv6 server on the CPE. The reason I might need it is because I might need a Prefix Delegated from that CPE. Do you think that would not be a valid need? (I guess you will invite me to check whether my CPE's DHCPv6 option responds to an IA_PD request, thing that I will maybe try one day). (think that currently a /56 is assigned by ISP to my home network, and that last time I checked I had to manually decide on a GUI which /64 out of that /56 goes to which IP of which in-home router). Alex > >>>> On Oct 29, 2019, at 7:22 AM, Ted Lemon >>>> wrote: >>>> >>>>  On Oct 29, 2019, at 6:37 AM, Alexandre Petrescu >>>> >>> > wrote: >>>>> Well no. After activating DHCPv6 on CPE the CPE sent three >>>>> RAs changing the Lifetime and flipping the M(anaged) and >>>>> A(utonomous) flags. >>>>> >>>>> Packet dumps available upon request. >>>> >>>> That’s the problem. It should turn on the managed bit but >>>> not turn off the autonomous bit. The two can validly be on at >>>> the same time. >>>> >>>> Of course, since their meanings are deprecated, it’s not too >>>> surprising that implementations get this wrong. >>>> >>>> _______________________________________________ v6ops mailing >>>> list v6ops@ietf.org >>>> https://www.ietf.org/mailman/listinfo/v6ops >> >> _______________________________________________ v6ops mailing list >> v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops > > > From nobody Wed Oct 30 09:29:54 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04A7C12083A for ; Wed, 30 Oct 2019 09:29:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.632 X-Spam-Level: X-Spam-Status: No, score=-2.632 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZoB_6eiVSsJL for ; Wed, 30 Oct 2019 09:29:51 -0700 (PDT) Received: from sainfoin-smtp-out.extra.cea.fr (sainfoin-smtp-out.extra.cea.fr [132.167.192.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E77D3120816 for ; Wed, 30 Oct 2019 09:29:50 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9UGTnxB029328 for ; Wed, 30 Oct 2019 17:29:49 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 4A4EE2066BA for ; Wed, 30 Oct 2019 17:29:49 +0100 (CET) Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 3FBE12065D3 for ; Wed, 30 Oct 2019 17:29:49 +0100 (CET) Received: from [10.8.35.150] (is154594.intra.cea.fr [10.8.35.150]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9UGTnIg016726 for ; Wed, 30 Oct 2019 17:29:49 +0100 To: v6ops@ietf.org References: <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com> <9dfd5e47-c593-4145-b530-74fb0f4155ed@www.fastmail.com> From: Alexandre Petrescu Message-ID: Date: Wed, 30 Oct 2019 17:29:48 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: <9dfd5e47-c593-4145-b530-74fb0f4155ed@www.fastmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 16:29:53 -0000 Le 30/10/2019 à 15:27, Radu-Adrian Feurdean a écrit : > On Thu, Oct 24, 2019, at 11:20, Alexandre Petrescu wrote: > >> In particular, the home networks scenario is very appropriate. >> >> First, I must say that the home network that I use uses a fixed >> /56 allocated by my ISP. In this, the prefix never changes, and it >> is not obtained by DHCPv6-PD - it is guaranteed by contract signed >> by hand. Such a case could be mentioned, as not being a problem >> described in this draft. > > If you are talking about residential service (not > business/enterprise-class), I would like to know who your service > provider is. (my correction: I am not at all good at bit fiddling, sorry. What I get at home is a /60, I think, not a /56. Because the CPE GUI proposes me to split it into 8 /64s). YEs, it is at home, probably you mean it is residential. The payment is a flat 35eur/month. No special QoS commitments from them, other than a 'noise level' of 55dbm due to the length of the line. The service provider is Free. ('Free' is its name; it was the first callable at gratuitous phone numbers when all others requested a payment in exchange; later they were the first to offer flat rates when the others were per-connection time; because of that it called itself so). >> I must say that this kind of software (request a prefix with >> DHCPv6-PD, form sub-prefixes, and put them in RAs on the other >> interfaces) does not exist as open source or some other available >> package. > > Dibbler-client does that by default. Once the delegated prefix > (shorter than /64) is obtained, a /64 from that prefix is assigned to > each interface. With proper radvd.conf configuration (prefix ::/64), > RAs will be sent for those prefixes. I did not know. The difficulty I talked about is to maintain what's in that radvd.conf in sync with what is dhcpd.conf. Maybe some software packages already do it. Also, because you talk about deriving /64s out of /56: I am not sure there is a standard way to do it. Maybe dibbler does it, but I doubt it is the best way. > A lot (?? most ??) of CPEs implementing DHCPv6-PD client do this in > some form or another. Some do this automatically (take prefixes and > assign them to interfaces), other need manual configuration (n-th > prefix go to interface ZZZ). It's good to know. But again, I doubt these CPEs derive prefixes in the manner that _I_ want it. For example, I want the /60 to be derived into one /64 and a single other set of /64s. I dont want the /60 to be derived into 8 /64s. I do that to help aggregation and speed up the forwarding process. Other times I might want to derive that /60 differently. I dont think there is a standard way to do it. >> Because of that, I am surprised that you call it 'the most common >> deployment scenario'. Is this a scenario that is _expected_ to be >> 'common'? > > "Expected enough" to warrant a device to be disqualified as "CPE that > supports IPv6" if it doesn't work this way. In an ISP environment. Well. A CPE that supports IPv6 should run DHCPv6. A CLient and a Server? Both? Just one? How does CPE propagate the prefixes learned with its CLient to its Server? >> I would like to request addition of two other scenarios: >> >> - an IoT scenario, in which an IoR Router connects several sensors >> to the Internet. For example, an IoT Router is deployed in a box >> at a traffic lights. The IoT device is the Traffic Lights >> Controller connected on Ethernet to the IoT Router. The IoT Router >> is connected on 4G. >> >> - a vehicular networks scenario: the On-Board Unit is deployed in a >> car. This OBU has a 4G interface and an Ethernet interface. There >> are several computers in the car that need IPv6 addresses. > > Like : you have a mobile phone on a network doing IPv6+NAT64, My CPE is not doing NAT64, I think. I dont want NAT64. > you pout it in tethering/mobile-hotspot mode, and connect several > other devices (usually laptops) to that hotspot - they all get IPv6 > addresses (in the same single /64 that the phone obtained via SLAAC > or something else). It is clear that getting a /56 (even a /60 or /62 > would do it) via DHCPv6-PD would be a nicer solution, but when your > mobile device runs android.... Well. Android is good in many places and for many goals. I agree that tethering/mobile-hotspot mode is a good solution in certain circumstances, like sharing one's smartphone connection to tablets nearby. However, tethering in IPv6 ('64share' RFC) has some drawbacks: (1) it does not support more than the WiFi tethered to the cellular (doesnt support an additional subnet like Ethernet) and (2) the incoming interface must be cellular (cant be another wifi). In a car, one has a WiFi hotspot but also lots of Ethernets and CANs. It's not possible to use 64share to accomodate all that. Hence, there DHCPv6-PD is not just a nicer solution - it is a requirement. Other than cars, even at home, one may want a DHCPv6-PD Server on the CPE for similar reasons. If one wants to run tethering on a device at home that has no cellular connection (e.g. a WiFi<->USB, or a USB<->Ethernet device) to extend to other devices then one cant use tethering ('64share'), must use DHCPv6-PD. Alex > From nobody Wed Oct 30 14:02:02 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBBC6120924; Wed, 30 Oct 2019 14:01:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=QKbPAFhB; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=cmL076Xe Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OUjKbfh_4m36; Wed, 30 Oct 2019 14:01:51 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E9006120AA9; Wed, 30 Oct 2019 14:01:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=14152; q=dns/txt; s=iport; t=1572469310; x=1573678910; h=from:to:cc:subject:date:message-id:mime-version; bh=6Fx5o1rkgKrvfNEdNeg90d2cBV6nOQOHbeiyQmgt29s=; b=QKbPAFhBgSKgfcDyg89MJD6mmd/741HGicGxOB+PfbDqBzcl7VqxZ8ER 7mNT53gpw2SfayRMoBChUNju4W2jCMUEKOn1cTlNbOrRtwVez8/4E+LNO rJRDqgi8pfrJWW1QtSFuu/NWXecBZ+oBYSQPPhHFRtC+bchfu262jRsqL k=; IronPort-PHdr: =?us-ascii?q?9a23=3AsmpUcRFEeQnRi2udAKIP7Z1GYnJ96bzpIg4Y7I?= =?us-ascii?q?YmgLtSc6Oluo7vJ1Hb+e4w0Q3SRYuO7fVChqKWqK3mVWEaqbe5+HEZON0ETB?= =?us-ascii?q?oZkYMTlg0kDtSCDBjlK/r4Ryc7B89FElRi+iLzPA=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CoAQCF+bld/5ldJa1lHAEBAQEBBwE?= =?us-ascii?q?BEQEEBAEBgWwEAQELAYEbLyknBWxYIAQLKgqHZAOKc5VohGGCUgNUCQEBAQw?= =?us-ascii?q?BASUIAgEBhEACg2YkNwYOAgMJAQEEAQEBAgEFBG2FNwELhVQWGxMBASwLARE?= =?us-ascii?q?BgQAmAQQODRqDAYF5TQMuAQ6oEQKBOIhggieCfgEBBYE0AYNhGIIXAwaBNgG?= =?us-ascii?q?FF4Z5GIF/gRBHgwqCYgEBAgGBQgYCFiuDFYIsjHMYCA2IGYI5lgAKgiSGLGS?= =?us-ascii?q?OPJlehFeGE4NWiCyMKYR5AgQCBAUCDgEBBYFoI4FYcBU7gjgBM1AQFIMGgSc?= =?us-ascii?q?BCYJChRSFP3QBgSeLBoEwAS9eAQE?= X-IronPort-AV: E=Sophos;i="5.68,248,1569283200"; d="scan'208,217";a="649800280" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 30 Oct 2019 21:01:49 +0000 Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by rcdn-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id x9UL1nhl001811 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 30 Oct 2019 21:01:49 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 16:01:49 -0500 Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 16:01:48 -0500 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 30 Oct 2019 16:01:48 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=J5zrUeZKLtthddbh00k4u8dFO8HHrcwrLtj2GshYp4J/qNAy3aunOpjYT4TyjJibGKmUvFIQ0q/UQlZ9etrvuK2wcYNbc/IGrOSGf3qpeLV6PV9+2ZAPADLqOoWJnKP23ULmJb2pLhHclhjmjYF8TMchzDp/fC7KIHbYwlGeN9UudSWZnzkUUm53HMlkLS0HeTlVevgq/X0gjH4Uzw2Zqgu2ALDUmu6cityPferD1Tk20jlgqKTm9duM3Wn5pvX8FLMJYO2a1oulJWFgzD2lLCWSwaK6GdgreoeKlkTEzT9Wi+bYW5yMT/a6ddIGjOewTshtszyKCJZj/wlK++Sm8g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rJWnB6v6t3gj3B/qSC+h55SNs448PlyR7taZdwQqngU=; b=ku83MK4ln6aT8LfoQS/GcypHkRkHQ3Jykk2/D6MbrwZrerftneSyQzc8/SnxQPj5bGFnb8tWkk9msyZvPRe7QVz18Qv+1X3Ww2uzAFbUS6QOnQSgPgd9Ecvcyg/+RJPAvWQOrlpOZOt9uhWV45fBpmZ5RzQP5jNUj4vYcOsalld5gsrP6sHzJKyI76dC2KcjJpMerdmk0tyKSAw5wboESAzKUFKDJROwS/XEtO6Tt0fCG4UsSkzyW9YcjTAPBFAjgiFwPxN220LPxrIIilirrG1hiShh213NwkZFONnFS8qaFDyQbIKWvHyAz82Eo5Pcx9PbZNf5Z+diSeAE/Fpv3w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rJWnB6v6t3gj3B/qSC+h55SNs448PlyR7taZdwQqngU=; b=cmL076XeXs2875dv0i6infuV7p+SgaqdjFE8nV3WwsO5PbxMpHyHk9aCucM1TNsoto2vdxLev+WEWih7zNIkQVU21ZFxvrAJQqIRX9/RFBenyWqFf6rpnd9A0L+8t1mH+9fwa5apxu+XSaMLl5RtJpcR3UBhpgmGfYAPzN76aWI= Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2093.namprd11.prod.outlook.com (10.174.96.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.24; Wed, 30 Oct 2019 21:01:47 +0000 Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.028; Wed, 30 Oct 2019 21:01:47 +0000 From: "Bernie Volz (volz)" To: "dhcwg@ietf.org" CC: IPv6 Operations Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AdWPYMgWrzinXIUuTM2kZJk2AWui+g== Date: Wed, 30 Oct 2019 21:01:47 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com; x-originating-ip: [173.38.117.77] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 32b7b826-2cbc-41ec-ff27-08d75d7c60b2 x-ms-traffictypediagnostic: MWHPR1101MB2093: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 02065A9E77 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(346002)(376002)(136003)(366004)(396003)(39860400002)(189003)(199004)(606006)(450100002)(71190400001)(71200400001)(2501003)(256004)(102836004)(14444005)(476003)(25786009)(33656002)(2351001)(486006)(14454004)(186003)(26005)(6436002)(2906002)(76116006)(66556008)(66476007)(66946007)(52536014)(316002)(74316002)(5660300002)(4326008)(66066001)(5640700003)(478600001)(64756008)(966005)(9686003)(6306002)(55016002)(236005)(54896002)(8676002)(86362001)(6116002)(6916009)(81156014)(7696005)(81166006)(3846002)(99286004)(790700001)(1730700003)(6506007)(66446008)(8936002)(7736002); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2093; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 2OD8DBY5Fq6gK9aCzEAo/mNClgY2Hts82ROyligLjtvEHLxya7ag0P7yoeAmIlkPwPeGVaeFPOPJxl5om3gEb9S9VEzTfBvpVqDmDex/rHO7lN/r0ya+tBX7ORv01QNOR3rA0yoElu8mPSr1J+TAAp107jV6PemvS08aggOCDiQ3+bWsW+pNYanjBVt6rsQh8eyg+B83CBbDmELhb9QqwMx/m3Q6Gl6hQK/+bATuSYoQQVKs9l/0T5N/miR1XN20i1cRxt9Og0EdGALABDWUwD2jz/whRwJmXrK1iGOt+MEXVgl3/YNZK2TZBRzz26kOAvVMnN0h1qsJeo4dCgz3SIYIXv9qT4L+joL30EhnLSnwjmhDKHp7a5pd2/xrpZT5xcehO4prqZPloKzmjupFUNxWV3zbYgbtoox15gM3NENZG2x/XouUjO7nWEKj+1Iy98vdyNE6UkpOe4I+lp0LOkSaT1/ZTvYO0p/l0pdMPtE= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR1101MB2288616D545F3DAD1D1734A1CF600MWHPR1101MB2288_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 32b7b826-2cbc-41ec-ff27-08d75d7c60b2 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2019 21:01:47.4696 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 8+nP9l6iUwWj7RjIzsz079lxcUEjdzdADWFrfdLlE/nQlu4zJsSyfA1ejEv8xDwY X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2093 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.13, xch-aln-003.cisco.com X-Outbound-Node: rcdn-core-2.cisco.com Archived-At: Subject: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 21:01:55 -0000 --_000_MWHPR1101MB2288616D545F3DAD1D1734A1CF600MWHPR1101MB2288_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello: DHC folks may want to check out the recent discussion on the v6ops mailing = list (https://mailarchive.ietf.org/arch/browse/v6ops/) with the "SLAAC renu= m: Problem Statement & Operational workarounds" subject. Basically, one issue that appears to happen in networks where CPEs receive = delegated prefixes and are renumbered when a CPE cycles power - why the ren= umbering occurs is not material. The issue is that some of the devices serv= iced by the CPE may still have configuration (i.e., from Prefix Information= Options received via RAs or perhaps even DHCP) based on the original deleg= ated prefix and if the CPE does not have stable storage (into which it stor= ed the old delegated prefix), nothing initiates deprecating this informatio= n. This is because everyone is honoring the lifetimes, but the renumbering = caused the SP DHCP server to provide a totally new delegated prefix and the= re's no record in the CPE of the old. For a CPE that has stable storage, it could initiate steps to deprecate the= old delegated prefix. Note that this issue is discussed in https://tools.ietf.org/html/draft-fkhp= -dhc-dhcpv6-pd-relay-requirements-00#section-3.2 and also in section 4.3 (S= -1) of that draft. One idea that I suggested is that the SP DHCP server can provide this infor= mation to the CPE. The DHCP server should still have a record of the previo= us delegated prefix (as it has not yet expired for the binding) and it coul= d therefore send this, with 0 lifetimes, in the Reply to the Request (as it= would do in a Renew). This would avoid the need for the CPE to keep this i= nformation in stable storage. There isn't any direct mention of sending IA_PD (or IA_NA) with 0 lifetimes= in the processing of Requests, but it isn't a stretch to consider this. An= d, without something, it isn't obvious that servers should (or would) do th= is? Some possibilities are (from least conservative to most): 1. Always have the server do this (sending 0 lifetimes) for a Reply to a= Request for this condition. 2. (1) but only for Relayed messages. 3. Have a server configuration knob (at whatever granularities desired -= global, prefix, client, ...). 4. Define a new option that a client would include in (Solicit/)Request = to request this behavior. Note that (3) could always override. Hopefully existing clients would handle this correctly, though they likely = would not take the action to deprecate the old delegated prefix. But we don= 't know (and at least early in the DHCPv6 days, clients weren't always happ= y when they received multiple delegated prefixes). Hence, how conservative = should we be? Perhaps we can discuss as part of draft-fkhp-dhc-dhcpv6-pd-relay-requiremen= ts (which is on the agenda for IETF-106), or I could request a separate slo= t for it - if we need a higher bandwidth discussion. We can also just discuss here on the mailing list as it may be possible to = resolve fairly quickly. It will require a short draft as it is something that would need to be fold= ed into a RFC8415 bis or continue on it own. Probably adding it to draft-fk= hp-dhc-dhcpv6-pd-relay-requirements is not best since these are the delegat= ing relay, not server, requirements. * Bernie --_000_MWHPR1101MB2288616D545F3DAD1D1734A1CF600MWHPR1101MB2288_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello:

 

DHC folks may want to check out the recent discussio= n on the v6ops mailing list (https://mailarchive.ietf.org/arch/browse/v6ops/) with the= “SLAAC renum: Problem Statement & Operational workarounds” subject.

 

Basically, one issue that appears to happen in netwo= rks where CPEs receive delegated prefixes and are renumbered when a CPE cyc= les power – why the renumbering occurs is not material. The issue is = that some of the devices serviced by the CPE may still have configuration (i.e., from Prefix Information Options re= ceived via RAs or perhaps even DHCP) based on the original delegated prefix= and if the CPE does not have stable storage (into which it stored the old = delegated prefix), nothing initiates deprecating this information. This is because everyone is honoring the lif= etimes, but the renumbering caused the SP DHCP server to provide a totally = new delegated prefix and there’s no record in the CPE of the old.

 

For a CPE that has stable storage, it could initiate= steps to deprecate the old delegated prefix.

 

Note that this issue is discussed in https://tools.ietf.org/html/draft-fkhp-dhc-dhcpv6-pd-relay-requirements-00#= section-3.2 and also in section 4.3 (S-1) of that draft.

 

One idea that I suggested is that the SP DHCP server= can provide this information to the CPE. The DHCP server should still have= a record of the previous delegated prefix (as it has not yet expired for t= he binding) and it could therefore send this, with 0 lifetimes, in the Reply to the Request (as it would do i= n a Renew). This would avoid the need for the CPE to keep this information = in stable storage.

 

There isn’t any direct mention of sending IA_P= D (or IA_NA) with 0 lifetimes in the processing of Requests, but it isnR= 17;t a stretch to consider this. And, without something, it isn’t obv= ious that servers should (or would) do this?

 

Some possibilities are (from least conservative to m= ost):

  1. Always have the server do this (sending 0 lifetimes) for a Reply to a= Request for this condition.
  2. (1) but only for Relayed = messages.
  3. Have a server configuration knob (at whateve= r granularities desired – global, prefix, client, …).
  4. Define a new option that a client would include in (Solicit/)Re= quest to request this behavior. Note that (3) could always override.

 

Hopefully existing clients would handle this correct= ly, though they likely would not take the action to deprecate the old deleg= ated prefix. But we don’t know (and at least early in the DHCPv6 days= , clients weren’t always happy when they received multiple delegated prefixes). Hence, how conservative should we b= e?

 

Perhaps we can discuss as part of draft-fkhp-dhc-dhc= pv6-pd-relay-requirements (which is on the agenda for IETF-106), or I could= request a separate slot for it - if we need a higher bandwidth discussion.=

 

We can also just discuss here on the mailing list as= it may be possible to resolve fairly quickly.

 

It will require a short draft as it is something tha= t would need to be folded into a RFC8415 bis or continue on it own. Probabl= y adding it to draft-fkhp-dhc-dhcpv6-pd-relay-requirements is not best sinc= e these are the delegating relay, not server, requirements.

 

  • Bernie
--_000_MWHPR1101MB2288616D545F3DAD1D1734A1CF600MWHPR1101MB2288_-- From nobody Wed Oct 30 14:53:23 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03CD212011A; Wed, 30 Oct 2019 14:53:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.4 X-Spam-Level: X-Spam-Status: No, score=-1.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id STVWohTPYCJB; Wed, 30 Oct 2019 14:53:12 -0700 (PDT) Received: from mail-il1-f181.google.com (mail-il1-f181.google.com [209.85.166.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11BBA1200D6; Wed, 30 Oct 2019 14:53:12 -0700 (PDT) Received: by mail-il1-f181.google.com with SMTP id s75so3550198ilc.3; Wed, 30 Oct 2019 14:53:12 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=wcLrV9QCkQSoTJYgswp7GX4PMWKuRS4rVkwk3N/SNeA=; b=kSGQ1BYHC3LZWrblEY2ukMD0HPoqCPvdtS5UyVG6r3LQIUZwE5vunNvXkH6HxEdbDv +0aRDX1ElDMyGzar7jk09zzPUd2BNHxOGx4VVWuyEErBJv77ltvZtqiL/sqE+B32mytW kI/bv2ybBb2j5ut2/mKLT8SoYf5DX5bdRqKuKSl1k8kbAQYLJTmNmG7R3gU53MDf6t0g ZdIqy4BcWjLF1Vi/4GH9zwRPz6hm1/cszveL4GTYNZhjGj1ukVW84NT+SFwPTr1YmfhS gMer084pXUDe/9MUyBGxk4JE87cUAYRODJoSiOaS98USqei2Tx/nIOSknD9NMoFyLyAj 40aQ== X-Gm-Message-State: APjAAAV2YaZCPlYQUPeeQC103ajLvStOH8KOdhr8tt5EdmkBrIOeRs88 3wrahf4qbVpV/VYDDxMbJ4MkL0xBmaVZWHt4GSc= X-Google-Smtp-Source: APXvYqw4L5DROPJ7NrdDSPKRMtopq58/Pu0O88ZAj/hZ2tt5iEaV71lxGc2muwVD/7X/vTkFJGaFuhxkZBPusQsDzTA= X-Received: by 2002:a92:7703:: with SMTP id s3mr2367550ilc.274.1572472391203; Wed, 30 Oct 2019 14:53:11 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Bud Millwood Date: Wed, 30 Oct 2019 22:52:59 +0100 Message-ID: To: "Bernie Volz (volz)" Cc: "dhcwg@ietf.org" , IPv6 Operations Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 21:53:15 -0000 Hi Bernie: If suggestion (1) or (2), an older CPE that borks over two delegated prefixes would stay borked until the old prefix expired. And it seems like suggestion (3) still runs the risk of catching that older CPE. Configuring that knob at the client level seems like a lot of management overhead. I wonder if introducing suggestions (1) or (2) aren't pushing existing clients to expose new bugs they may have? Suggestion (4) seems reasonable to me. - Bud On Wed, Oct 30, 2019 at 10:02 PM Bernie Volz (volz) wrote: > > Hello: > > > > DHC folks may want to check out the recent discussion on the v6ops mailin= g list (https://mailarchive.ietf.org/arch/browse/v6ops/) with the =E2=80=9C= SLAAC renum: Problem Statement & Operational workarounds=E2=80=9D subject. > > > > Basically, one issue that appears to happen in networks where CPEs receiv= e delegated prefixes and are renumbered when a CPE cycles power =E2=80=93 w= hy the renumbering occurs is not material. The issue is that some of the de= vices serviced by the CPE may still have configuration (i.e., from Prefix I= nformation Options received via RAs or perhaps even DHCP) based on the orig= inal delegated prefix and if the CPE does not have stable storage (into whi= ch it stored the old delegated prefix), nothing initiates deprecating this = information. This is because everyone is honoring the lifetimes, but the re= numbering caused the SP DHCP server to provide a totally new delegated pref= ix and there=E2=80=99s no record in the CPE of the old. > > > > For a CPE that has stable storage, it could initiate steps to deprecate t= he old delegated prefix. > > > > Note that this issue is discussed in https://tools.ietf.org/html/draft-fk= hp-dhc-dhcpv6-pd-relay-requirements-00#section-3.2 and also in section 4.3 = (S-1) of that draft. > > > > One idea that I suggested is that the SP DHCP server can provide this inf= ormation to the CPE. The DHCP server should still have a record of the prev= ious delegated prefix (as it has not yet expired for the binding) and it co= uld therefore send this, with 0 lifetimes, in the Reply to the Request (as = it would do in a Renew). This would avoid the need for the CPE to keep this= information in stable storage. > > > > There isn=E2=80=99t any direct mention of sending IA_PD (or IA_NA) with 0= lifetimes in the processing of Requests, but it isn=E2=80=99t a stretch to= consider this. And, without something, it isn=E2=80=99t obvious that serve= rs should (or would) do this? > > > > Some possibilities are (from least conservative to most): > > Always have the server do this (sending 0 lifetimes) for a Reply to a Req= uest for this condition. > (1) but only for Relayed messages. > Have a server configuration knob (at whatever granularities desired =E2= =80=93 global, prefix, client, =E2=80=A6). > Define a new option that a client would include in (Solicit/)Request to r= equest this behavior. Note that (3) could always override. > > > > Hopefully existing clients would handle this correctly, though they likel= y would not take the action to deprecate the old delegated prefix. But we d= on=E2=80=99t know (and at least early in the DHCPv6 days, clients weren=E2= =80=99t always happy when they received multiple delegated prefixes). Hence= , how conservative should we be? > > > > Perhaps we can discuss as part of draft-fkhp-dhc-dhcpv6-pd-relay-requirem= ents (which is on the agenda for IETF-106), or I could request a separate s= lot for it - if we need a higher bandwidth discussion. > > > > We can also just discuss here on the mailing list as it may be possible t= o resolve fairly quickly. > > > > It will require a short draft as it is something that would need to be fo= lded into a RFC8415 bis or continue on it own. Probably adding it to draft-= fkhp-dhc-dhcpv6-pd-relay-requirements is not best since these are the deleg= ating relay, not server, requirements. > > > > Bernie > > _______________________________________________ > dhcwg mailing list > dhcwg@ietf.org > https://www.ietf.org/mailman/listinfo/dhcwg From nobody Wed Oct 30 14:59:08 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 546B412012C for ; Wed, 30 Oct 2019 14:59:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1nGFXVwdsHEe for ; Wed, 30 Oct 2019 14:59:04 -0700 (PDT) Received: from mail-qt1-x82d.google.com (mail-qt1-x82d.google.com [IPv6:2607:f8b0:4864:20::82d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3123712011A for ; Wed, 30 Oct 2019 14:59:04 -0700 (PDT) Received: by mail-qt1-x82d.google.com with SMTP id y39so5568534qty.0 for ; Wed, 30 Oct 2019 14:59:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=4KElR8MQMUqs3BIH+POYDYIf4tc3+IG6ax/OocOIATA=; b=T237j1bJZFIRiyWgMDmr6+LWWRo3m8WT1195S37Uoxn5ukEspd8Vz8OOwpq7xfLOQX ArkNL2L78387kOJshXC0y+Wahl3huytI2pLA4aDwT0UAkbGKM0K+c8YYoeRhM09MryFg yjvh/wn6FWBM46yhHyP8ByeKKhG9o3Pvso+ZpHzU1s7AIfAcKB7RUDx4lkHkVzsjkhxL x5bcyiM82m867dgcrxOX7tWp3kqVWOxjvwWiWgrPek5S8+mEJId9pOzn9iIkc7Peqj1x 5oCmKIPTPM7kvr4HTa7MlRgH9iSziWfl9Cy/KAarBP9SFJqsqPP2m08WWl5pyShjN3iF 6uCw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=4KElR8MQMUqs3BIH+POYDYIf4tc3+IG6ax/OocOIATA=; b=kKd6dftrMsT9W6MfHw5De0iqjnnc9GwYMMM5ZaR9uYoJtW+Y5nLA3coktGWjnFoNdX 3ZJd7vGykSWuv2ST6UetywFq736lDpjP7BFCH6cs/n1ui4Tvx8Vi5KAyzkbuV00qDoGq c6mHLtullHQiiVJ3PRx6UIfZ77amQUzoJClNLLre3SrhGlwzcv/U77uY9HhpChESgCmx SXHWLZRMCkuzspiA0ACbO3HcbaObOwFG8aod04T7JHa4IPZO+rlfzb0rrKEgMZIdB9T1 TOw8XeIXD0fTFcjXZGn5lADj5QAzxg0+ekVzBr6A8kfXryRTIUiTJs8TggvGyQrpNfLN x19A== X-Gm-Message-State: APjAAAWIfX52WGyLx9Wl8P/s308aVoVrNkIyR+jdOb9bL7FmAI8/3+3+ TAxrw28j9PUcVHc4vy53/ZAvWg== X-Google-Smtp-Source: APXvYqx84Dov4TwoXbUO/GsJ1piAs7kODDPOzbswXlzoMEr7D8C4D7aHR+6Q6cPu4xoZcToNc7laew== X-Received: by 2002:ac8:2fba:: with SMTP id l55mr2396553qta.167.1572472743125; Wed, 30 Oct 2019 14:59:03 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:c5ad:3e58:9e29:c076? ([2601:18b:300:36ee:c5ad:3e58:9e29:c076]) by smtp.gmail.com with ESMTPSA id s67sm723423qkh.70.2019.10.30.14.59.02 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Oct 2019 14:59:02 -0700 (PDT) From: Ted Lemon Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_ABAACE6E-7661-4DA5-8269-58A53B65D4D8" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\)) Date: Wed, 30 Oct 2019 17:59:00 -0400 In-Reply-To: Cc: "Bernie Volz (volz)" , "dhcwg@ietf.org" , IPv6 Operations To: Bud Millwood References: X-Mailer: Apple Mail (2.3601.0.10) Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 21:59:06 -0000 --Apple-Mail=_ABAACE6E-7661-4DA5-8269-58A53B65D4D8 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 30, 2019, at 5:52 PM, Bud Millwood = wrote: > I wonder if introducing suggestions (1) or (2) aren't pushing existing > clients to expose new bugs they may have? Suggestion (4) seems > reasonable to me. Clients that have bugs should be updated. Routers that aren=E2=80=99t = updatable should be binned. Sites that have massive numbers of = non-updatable routers that can=E2=80=99t be updated don=E2=80=99t have = to turn the feature on. I think it=E2=80=99s fine to make this a = server configuration parameter. The benefit to doing this correctly is that it=E2=80=99s arguably = already correct. There are likely routers out there that will already = do the right thing when they get a deprecated prefix. The most likely = use case for a deprecated prefix is not that it has a valid lifetime of = zero, but that it has a preferred lifetime of zero: a graceful = renumbering event. DHCPv6 should already support graceful renumbering. = This was a design goal. --Apple-Mail=_ABAACE6E-7661-4DA5-8269-58A53B65D4D8 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 30, 2019, at 5:52 PM, Bud Millwood <budm@weird-solutions.com> wrote:
I wonder if introducing suggestions (1) or (2) aren't pushing = existing
clients to = expose new bugs they may have? Suggestion (4) seems
reasonable to = me.

Clients = that have bugs should be updated.  Routers that aren=E2=80=99t = updatable should be binned.   Sites that have massive numbers of = non-updatable routers that can=E2=80=99t be updated don=E2=80=99t have = to turn the feature on.   I think it=E2=80=99s fine to make this a = server configuration parameter.

The benefit to doing this correctly is = that it=E2=80=99s arguably already correct.  There are likely = routers out there that will already do the right thing when they get a = deprecated prefix.   The most likely use case for a deprecated = prefix is not that it has a valid lifetime of zero, but that it has a = preferred lifetime of zero: a graceful renumbering event.   DHCPv6 = should already support graceful renumbering.   This was a design = goal.

= --Apple-Mail=_ABAACE6E-7661-4DA5-8269-58A53B65D4D8-- From nobody Wed Oct 30 15:08:58 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27EB412011A; Wed, 30 Oct 2019 15:08:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g0DZbZA7WMZo; Wed, 30 Oct 2019 15:08:56 -0700 (PDT) Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21A891200D6; Wed, 30 Oct 2019 15:08:56 -0700 (PDT) Received: from astfgl.hanazo.no (unknown [IPv6:2a02:20c8:5921:100:d81:142e:e6bf:3843]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id 67CB54E11B4E; Wed, 30 Oct 2019 22:08:55 +0000 (UTC) Received: from [IPv6:::1] (localhost [IPv6:::1]) by astfgl.hanazo.no (Postfix) with ESMTP id 6D66820A4B8B; Wed, 30 Oct 2019 23:08:51 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3594.4.19\)) From: Ole Troan In-Reply-To: Date: Wed, 30 Oct 2019 23:08:51 +0100 Cc: Bud Millwood , "dhcwg@ietf.org" , IPv6 Operations Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Ted Lemon X-Mailer: Apple Mail (2.3594.4.19) Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 22:08:57 -0000 >> I wonder if introducing suggestions (1) or (2) aren't pushing = existing >> clients to expose new bugs they may have? Suggestion (4) seems >> reasonable to me. >=20 > Clients that have bugs should be updated. Routers that aren=E2=80=99t = updatable should be binned. Sites that have massive numbers of = non-updatable routers that can=E2=80=99t be updated don=E2=80=99t have = to turn the feature on. I think it=E2=80=99s fine to make this a = server configuration parameter. >=20 > The benefit to doing this correctly is that it=E2=80=99s arguably = already correct. There are likely routers out there that will already = do the right thing when they get a deprecated prefix. The most likely = use case for a deprecated prefix is not that it has a valid lifetime of = zero, but that it has a preferred lifetime of zero: a graceful = renumbering event. DHCPv6 should already support graceful renumbering. = This was a design goal. Right, why wouldn't this just be (accellerated) graceful renumbering as = already described in 3633/8415. I don't understand why this would expose bugs or require a new option? Cheers, Ole= From nobody Wed Oct 30 15:16:26 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5327B120829; Wed, 30 Oct 2019 15:16:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=eTI3Mv8f; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=Xqp7uOtE Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 497IpJ4Z3guR; Wed, 30 Oct 2019 15:16:23 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB9AF12080C; Wed, 30 Oct 2019 15:16:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6894; q=dns/txt; s=iport; t=1572473782; x=1573683382; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=9X5dibBYs7cx54z46ziQ5JWqpm3N2qHZqIw7FLD87vA=; b=eTI3Mv8fh0LcAA+LdIgw6JF3PSBT1hvoF+8FTwQuxabSnVqWOkEbj6Lp +RIDlrlv2U9wb0VEJ5ng9dXkHBz85YpeVjhiurP1ExxLqZJTdSDiPk+M2 e9k/4g6WfMaZGYsstyWIFUX7oCVl6HS8Df3ilGxRtEqfXVCu4pfGU1QFj 0=; IronPort-PHdr: =?us-ascii?q?9a23=3A0EcIfhIqxbI4023kEtmcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeCuKd2lFGcW4Ld5roEkOfQv636EU04qZea+DFKa5lQT1?= =?us-ascii?q?kAgMQSkRYnBZubDknpBPXrdCc9Ws9FUQwt8g=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C/AADnCrpd/4sNJK1lGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYF9gUspJwVsUAggBAsqCoQeg0YDinOCXpdrglI?= =?us-ascii?q?DVAkBAQEMAQEYDQgCAQGEQAIXg08kOBMCAwkBAQQBAQECAQUEbYU3DIVRAQE?= =?us-ascii?q?BAQIBAQEQEREMAQEsCwEECwIBCBgCAiYCAgIlCxUQAQEEDgUbB4MAAYJGAw4?= =?us-ascii?q?gAQ6oBgKBOIhgdYEygn4BAQWBNAGBFIJPGIIXAwaBDiiFGIZ5GIF/gRAoH4J?= =?us-ascii?q?MPoJiAQECAYFCBgIUgxAygiyMcxgIGoJQh3WWAAqCJIcQjiEbgjyMCIsahFe?= =?us-ascii?q?GE4wCjCmEeQIEAgQFAg4BAQWBaSKBWHAVOyoBgg0BM1AQFIMGDBeBBAEJgkK?= =?us-ascii?q?FFIU/dAGBJ4sGgTABL14BAQ?= X-IronPort-AV: E=Sophos;i="5.68,248,1569283200"; d="scan'208";a="656704178" Received: from alln-core-6.cisco.com ([173.36.13.139]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 30 Oct 2019 22:16:21 +0000 Received: from XCH-RCD-005.cisco.com (xch-rcd-005.cisco.com [173.37.102.15]) by alln-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id x9UMGLtq004834 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 30 Oct 2019 22:16:21 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-RCD-005.cisco.com (173.37.102.15) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 17:16:21 -0500 Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 17:16:20 -0500 Received: from NAM02-BL2-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 30 Oct 2019 17:16:20 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=TSjXa+FSrHG+iXNGr4TxQd9CNXc4gOtabyyzslPw8uDfIFgA1mSV0E9bnOzlmIBNIn9ZFT29lrXFnMzCI96Ix33Z4y2VKQi3P2ZRMAlRYxiy3ToxIN4ne67Z1l0Tjb2L1FAnrrhJi3pzM2wTQqj6cPqjklBZXUw2TMa5POiOTRcCaCngHxdDSSxAKvb+uLUJWaEu1maN5RfotLX886jGkJQjczeS9dd2atCdqE2+AcdZns7Jk4fkHEHx3eGwCvb3ORI75DAvclc0VQGoUsb/1R3ixjURce/N9rf2ICK5yIiMJLjjTBitlxQijudIjG1gynciuZI0o2nmvQOV14EU8w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9X5dibBYs7cx54z46ziQ5JWqpm3N2qHZqIw7FLD87vA=; b=M2dE5UL/ZM2/cNj5m4AJS5lHYw9Wn0xeU+DLKcRikWXqeV4VfXYsp+k/rBYHSsyhg4dInMpva1LgTdu+Dnj8NkdhT+ZEAmTKr5qd2/1lGfoC5Co2L/dxsvWECHLonrbbCDj6FG6omYR9CqjcoD2HcSmdrrBxyRVBfQPl+RigUzL3+MEbTglhRV5i08KZ/iZzJzD38zjCypYtajMnxtTOqfFxJBv7hIolnGBDvygsU3JATfNI11yUGUJKi/XNSarnpPxewoyfFBF9mDRF0N1a4mU2FtlhAztpTfy/tjTMRRqrecjdHNa+z306smrtN9Kj3eic467OHB8A5g1G5sPerA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9X5dibBYs7cx54z46ziQ5JWqpm3N2qHZqIw7FLD87vA=; b=Xqp7uOtEZZV4FFzlc43SLjgiP+nTSnd4WyFikU3/egdObWoPhryLYQT/6s6kB0yJlpXmSuZWzxY0k5529xr7SfnHVPJ6oN1Crora5VUwj29+X2T1Y6oKmEr9eqCN2H7FFFfsFfV9qZkucsko430GH7VGMlEXB5OP1azJyybntGc= Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2287.namprd11.prod.outlook.com (10.174.255.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.24; Wed, 30 Oct 2019 22:16:18 +0000 Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.028; Wed, 30 Oct 2019 22:16:17 +0000 From: "Bernie Volz (volz)" To: Bud Millwood CC: "dhcwg@ietf.org" , IPv6 Operations Thread-Topic: [dhcwg] [v6ops] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AdWPYMgWrzinXIUuTM2kZJk2AWui+gAC5zaAAADQaAY= Date: Wed, 30 Oct 2019 22:16:17 +0000 Message-ID: References: , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com; x-originating-ip: [24.233.121.124] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c5c2c836-7ff6-480d-ed06-08d75d86c944 x-ms-traffictypediagnostic: MWHPR1101MB2287: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 02065A9E77 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(199004)(54094003)(189003)(54906003)(6116002)(33656002)(498600001)(99286004)(6436002)(71190400001)(71200400001)(229853002)(2906002)(14454004)(91956017)(3846002)(76116006)(66446008)(66946007)(6486002)(64756008)(66556008)(66476007)(966005)(6916009)(26005)(446003)(81156014)(6246003)(102836004)(2616005)(186003)(66066001)(81166006)(8676002)(256004)(25786009)(7736002)(305945005)(14444005)(76176011)(476003)(8936002)(486006)(6512007)(5660300002)(86362001)(6306002)(4326008)(53546011)(36756003)(11346002)(6506007); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2287; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: oc5db4MNfqXc21qCOSQd5qnW6CPRZmJxqHA7bYY+atYWB+Wl5AgxpblLwTRVXhgPYd7JEUx8DqfPPrfImTaXw94V77xhS56VmzoWfk6Nl+yV38okLDzFNea7Mscei6T7+kzJu1y27+3Fq7idp0Dy4xvIsowawm0y4IJi5S3JZp0OFwfLA6FScA3rOPh7A7rVoupv4HolpKF1F9zkI7jDpMeF0KTmavlYfSS8saBvx3y7uQ7/FEgjRguRJkP3JnV+37oTa1Hb1Z6tzIfbcRHXMI4NQEzurwEevGeZYSvz+Q9CQxRqgZ+Zhr/4f0rn7a23HEvV+AUMupqNXLUWbLHRXtxFZpf3YMAKaO+VZmRLck8Uj4aJDYjASYiMwkFw8pyhAmjOpbCGP/rOcGPoF1XxwsQZ6rzxfeQjiZhvGrXbX5/mzO+XlVL9CSuk/aZ0Rk6pP05mAvK4h6y7fY7wLwjvTlH5WmHwjA8SeqHyvNm7ZFM= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: c5c2c836-7ff6-480d-ed06-08d75d86c944 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2019 22:16:17.8033 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: CsiLxMDDh+SLeBBqoyGOzXfpidYlrP4GVZqDaNI6Q/zyCqrmJSjVicme5W8zF5on X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2287 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.15, xch-rcd-005.cisco.com X-Outbound-Node: alln-core-6.cisco.com Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 22:16:25 -0000 U2VlIFRlZOKAmXMgbWVzc2FnZSAuLi4NCg0KUmVnYXJkaW5nICgzKSwgSSB3YXMgdGhpbmtpbmcg dGhhdCB5b3UgbWlnaHQgY29uZmlndXJlIGl0IHNlcnZlciB3aWRlIHRvIGRvIHRoaXMsIGJ1dCBp ZiB5b3UgaGFkIHNwZWNpZmljIGJyb2tlbiBjbGllbnRzLCB0aG9zZSBjb3VsZCBiZSBleGNsdWRl ZCAocGVyaGFwcyBiYXNlZCBvbiBhIGNsYXNzLCBzdWNoIGFzIGZyb20gYSBzcGVjaWZpYyBtYW51 ZmFjdHVyZXIsIG9yIGJ5IGV4cGxpY2l0IGR1aWQpLiBUaGVyZeKAmXMgcHJvYmFibHkgbmV2ZXIg YW4gaXNzdWluZyBpbiBwcm92aWRpbmcgY29uZmlndXJhdGlvbiBrbm9icyAuLi4gbW9zdCBsaWtl bHkgaXQgaXMganVzdCB0aGUgZGVmYXVsdCBiZWhhdmlvciB0aGF0IGlzIGltcG9ydGFudC4NCg0K SeKAmW0gbGVzcyBpbmNsaW5lZCB0byBicmVhayB3aGF0IGlzIHdvcmtpbmcsIHNvIEnigJlkIGJl IGEgYml0IG1vcmUgY2F1dGlvdXMgdGhhbiBUZWQuIEFsc28sIHRoZSDigJxub3figJ0gYnJva2Vu IENQRSB3aWxsIGNhdXNlIGEgY3VzdG9tZXIgc2VydmljZSBjYWxsIGFuZCBjb3VsZCBiZSBleHBl bnNpdmUgdG8gdGhlIFNQLiBTUCBzdXBwb3J0IHRlYW1zIGFsc28gd291bGQgbGlrZWx5IG5lZWQg dG8ga25vdyB0aGF0IHRoZXkgbWlnaHQgc2VlIGFuIGluY3JlYXNlIGluIGN1c3RvbWVyIGlzc3Vl cywgd2hpY2ggcHJvYmFibHkgaXNu4oCZdCBlYXN5IHRvIGtub3cgKGhvdyBtYW55IHBlb3BsZSBy ZWFkIHJlbGVhc2Ugbm90ZXMgY2FyZWZ1bGx5KT8NCg0KLSBCZXJuaWUNCg0KPiBPbiBPY3QgMzAs IDIwMTksIGF0IDU6NTMgUE0sIEJ1ZCBNaWxsd29vZCA8YnVkbUB3ZWlyZC1zb2x1dGlvbnMuY29t PiB3cm90ZToNCj4gDQo+IEhpIEJlcm5pZToNCj4gDQo+IElmIHN1Z2dlc3Rpb24gKDEpIG9yICgy KSwgYW4gb2xkZXIgQ1BFIHRoYXQgYm9ya3Mgb3ZlciB0d28gZGVsZWdhdGVkDQo+IHByZWZpeGVz IHdvdWxkIHN0YXkgYm9ya2VkIHVudGlsIHRoZSBvbGQgcHJlZml4IGV4cGlyZWQuIEFuZCBpdCBz ZWVtcw0KPiBsaWtlIHN1Z2dlc3Rpb24gKDMpIHN0aWxsIHJ1bnMgdGhlIHJpc2sgb2YgY2F0Y2hp bmcgdGhhdCBvbGRlciBDUEUuDQo+IENvbmZpZ3VyaW5nIHRoYXQga25vYiBhdCB0aGUgY2xpZW50 IGxldmVsIHNlZW1zIGxpa2UgYSBsb3Qgb2YNCj4gbWFuYWdlbWVudCBvdmVyaGVhZC4NCj4gDQo+ IEkgd29uZGVyIGlmIGludHJvZHVjaW5nIHN1Z2dlc3Rpb25zICgxKSBvciAoMikgYXJlbid0IHB1 c2hpbmcgZXhpc3RpbmcNCj4gY2xpZW50cyB0byBleHBvc2UgbmV3IGJ1Z3MgdGhleSBtYXkgaGF2 ZT8gU3VnZ2VzdGlvbiAoNCkgc2VlbXMNCj4gcmVhc29uYWJsZSB0byBtZS4NCj4gDQo+IC0gQnVk DQo+IA0KPiANCj4gDQo+IA0KPiANCj4gDQo+PiBPbiBXZWQsIE9jdCAzMCwgMjAxOSBhdCAxMDow MiBQTSBCZXJuaWUgVm9seiAodm9seikgPHZvbHpAY2lzY28uY29tPiB3cm90ZToNCj4+IA0KPj4g SGVsbG86DQo+PiANCj4+IA0KPj4gDQo+PiBESEMgZm9sa3MgbWF5IHdhbnQgdG8gY2hlY2sgb3V0 IHRoZSByZWNlbnQgZGlzY3Vzc2lvbiBvbiB0aGUgdjZvcHMgbWFpbGluZyBsaXN0IChodHRwczov L21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvYnJvd3NlL3Y2b3BzLykgd2l0aCB0aGUg4oCcU0xB QUMgcmVudW06IFByb2JsZW0gU3RhdGVtZW50ICYgT3BlcmF0aW9uYWwgd29ya2Fyb3VuZHPigJ0g c3ViamVjdC4NCj4+IA0KPj4gDQo+PiANCj4+IEJhc2ljYWxseSwgb25lIGlzc3VlIHRoYXQgYXBw ZWFycyB0byBoYXBwZW4gaW4gbmV0d29ya3Mgd2hlcmUgQ1BFcyByZWNlaXZlIGRlbGVnYXRlZCBw cmVmaXhlcyBhbmQgYXJlIHJlbnVtYmVyZWQgd2hlbiBhIENQRSBjeWNsZXMgcG93ZXIg4oCTIHdo eSB0aGUgcmVudW1iZXJpbmcgb2NjdXJzIGlzIG5vdCBtYXRlcmlhbC4gVGhlIGlzc3VlIGlzIHRo YXQgc29tZSBvZiB0aGUgZGV2aWNlcyBzZXJ2aWNlZCBieSB0aGUgQ1BFIG1heSBzdGlsbCBoYXZl IGNvbmZpZ3VyYXRpb24gKGkuZS4sIGZyb20gUHJlZml4IEluZm9ybWF0aW9uIE9wdGlvbnMgcmVj ZWl2ZWQgdmlhIFJBcyBvciBwZXJoYXBzIGV2ZW4gREhDUCkgYmFzZWQgb24gdGhlIG9yaWdpbmFs IGRlbGVnYXRlZCBwcmVmaXggYW5kIGlmIHRoZSBDUEUgZG9lcyBub3QgaGF2ZSBzdGFibGUgc3Rv cmFnZSAoaW50byB3aGljaCBpdCBzdG9yZWQgdGhlIG9sZCBkZWxlZ2F0ZWQgcHJlZml4KSwgbm90 aGluZyBpbml0aWF0ZXMgZGVwcmVjYXRpbmcgdGhpcyBpbmZvcm1hdGlvbi4gVGhpcyBpcyBiZWNh dXNlIGV2ZXJ5b25lIGlzIGhvbm9yaW5nIHRoZSBsaWZldGltZXMsIGJ1dCB0aGUgcmVudW1iZXJp bmcgY2F1c2VkIHRoZSBTUCBESENQIHNlcnZlciB0byBwcm92aWRlIGEgdG90YWxseSBuZXcgZGVs ZWdhdGVkIHByZWZpeCBhbmQgdGhlcmXigJlzIG5vIHJlY29yZCBpbiB0aGUgQ1BFIG9mIHRoZSBv bGQuDQo+PiANCj4+IA0KPj4gDQo+PiBGb3IgYSBDUEUgdGhhdCBoYXMgc3RhYmxlIHN0b3JhZ2Us IGl0IGNvdWxkIGluaXRpYXRlIHN0ZXBzIHRvIGRlcHJlY2F0ZSB0aGUgb2xkIGRlbGVnYXRlZCBw cmVmaXguDQo+PiANCj4+IA0KPj4gDQo+PiBOb3RlIHRoYXQgdGhpcyBpc3N1ZSBpcyBkaXNjdXNz ZWQgaW4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWZraHAtZGhjLWRoY3B2Ni1w ZC1yZWxheS1yZXF1aXJlbWVudHMtMDAjc2VjdGlvbi0zLjIgYW5kIGFsc28gaW4gc2VjdGlvbiA0 LjMgKFMtMSkgb2YgdGhhdCBkcmFmdC4NCj4+IA0KPj4gDQo+PiANCj4+IE9uZSBpZGVhIHRoYXQg SSBzdWdnZXN0ZWQgaXMgdGhhdCB0aGUgU1AgREhDUCBzZXJ2ZXIgY2FuIHByb3ZpZGUgdGhpcyBp bmZvcm1hdGlvbiB0byB0aGUgQ1BFLiBUaGUgREhDUCBzZXJ2ZXIgc2hvdWxkIHN0aWxsIGhhdmUg YSByZWNvcmQgb2YgdGhlIHByZXZpb3VzIGRlbGVnYXRlZCBwcmVmaXggKGFzIGl0IGhhcyBub3Qg eWV0IGV4cGlyZWQgZm9yIHRoZSBiaW5kaW5nKSBhbmQgaXQgY291bGQgdGhlcmVmb3JlIHNlbmQg dGhpcywgd2l0aCAwIGxpZmV0aW1lcywgaW4gdGhlIFJlcGx5IHRvIHRoZSBSZXF1ZXN0IChhcyBp dCB3b3VsZCBkbyBpbiBhIFJlbmV3KS4gVGhpcyB3b3VsZCBhdm9pZCB0aGUgbmVlZCBmb3IgdGhl IENQRSB0byBrZWVwIHRoaXMgaW5mb3JtYXRpb24gaW4gc3RhYmxlIHN0b3JhZ2UuDQo+PiANCj4+ IA0KPj4gDQo+PiBUaGVyZSBpc27igJl0IGFueSBkaXJlY3QgbWVudGlvbiBvZiBzZW5kaW5nIElB X1BEIChvciBJQV9OQSkgd2l0aCAwIGxpZmV0aW1lcyBpbiB0aGUgcHJvY2Vzc2luZyBvZiBSZXF1 ZXN0cywgYnV0IGl0IGlzbuKAmXQgYSBzdHJldGNoIHRvIGNvbnNpZGVyIHRoaXMuIEFuZCwgd2l0 aG91dCBzb21ldGhpbmcsIGl0IGlzbuKAmXQgb2J2aW91cyB0aGF0IHNlcnZlcnMgc2hvdWxkIChv ciB3b3VsZCkgZG8gdGhpcz8NCj4+IA0KPj4gDQo+PiANCj4+IFNvbWUgcG9zc2liaWxpdGllcyBh cmUgKGZyb20gbGVhc3QgY29uc2VydmF0aXZlIHRvIG1vc3QpOg0KPj4gDQo+PiBBbHdheXMgaGF2 ZSB0aGUgc2VydmVyIGRvIHRoaXMgKHNlbmRpbmcgMCBsaWZldGltZXMpIGZvciBhIFJlcGx5IHRv IGEgUmVxdWVzdCBmb3IgdGhpcyBjb25kaXRpb24uDQo+PiAoMSkgYnV0IG9ubHkgZm9yIFJlbGF5 ZWQgbWVzc2FnZXMuDQo+PiBIYXZlIGEgc2VydmVyIGNvbmZpZ3VyYXRpb24ga25vYiAoYXQgd2hh dGV2ZXIgZ3JhbnVsYXJpdGllcyBkZXNpcmVkIOKAkyBnbG9iYWwsIHByZWZpeCwgY2xpZW50LCDi gKYpLg0KPj4gRGVmaW5lIGEgbmV3IG9wdGlvbiB0aGF0IGEgY2xpZW50IHdvdWxkIGluY2x1ZGUg aW4gKFNvbGljaXQvKVJlcXVlc3QgdG8gcmVxdWVzdCB0aGlzIGJlaGF2aW9yLiBOb3RlIHRoYXQg KDMpIGNvdWxkIGFsd2F5cyBvdmVycmlkZS4NCj4+IA0KPj4gDQo+PiANCj4+IEhvcGVmdWxseSBl eGlzdGluZyBjbGllbnRzIHdvdWxkIGhhbmRsZSB0aGlzIGNvcnJlY3RseSwgdGhvdWdoIHRoZXkg bGlrZWx5IHdvdWxkIG5vdCB0YWtlIHRoZSBhY3Rpb24gdG8gZGVwcmVjYXRlIHRoZSBvbGQgZGVs ZWdhdGVkIHByZWZpeC4gQnV0IHdlIGRvbuKAmXQga25vdyAoYW5kIGF0IGxlYXN0IGVhcmx5IGlu IHRoZSBESENQdjYgZGF5cywgY2xpZW50cyB3ZXJlbuKAmXQgYWx3YXlzIGhhcHB5IHdoZW4gdGhl eSByZWNlaXZlZCBtdWx0aXBsZSBkZWxlZ2F0ZWQgcHJlZml4ZXMpLiBIZW5jZSwgaG93IGNvbnNl cnZhdGl2ZSBzaG91bGQgd2UgYmU/DQo+PiANCj4+IA0KPj4gDQo+PiBQZXJoYXBzIHdlIGNhbiBk aXNjdXNzIGFzIHBhcnQgb2YgZHJhZnQtZmtocC1kaGMtZGhjcHY2LXBkLXJlbGF5LXJlcXVpcmVt ZW50cyAod2hpY2ggaXMgb24gdGhlIGFnZW5kYSBmb3IgSUVURi0xMDYpLCBvciBJIGNvdWxkIHJl cXVlc3QgYSBzZXBhcmF0ZSBzbG90IGZvciBpdCAtIGlmIHdlIG5lZWQgYSBoaWdoZXIgYmFuZHdp ZHRoIGRpc2N1c3Npb24uDQo+PiANCj4+IA0KPj4gDQo+PiBXZSBjYW4gYWxzbyBqdXN0IGRpc2N1 c3MgaGVyZSBvbiB0aGUgbWFpbGluZyBsaXN0IGFzIGl0IG1heSBiZSBwb3NzaWJsZSB0byByZXNv bHZlIGZhaXJseSBxdWlja2x5Lg0KPj4gDQo+PiANCj4+IA0KPj4gSXQgd2lsbCByZXF1aXJlIGEg c2hvcnQgZHJhZnQgYXMgaXQgaXMgc29tZXRoaW5nIHRoYXQgd291bGQgbmVlZCB0byBiZSBmb2xk ZWQgaW50byBhIFJGQzg0MTUgYmlzIG9yIGNvbnRpbnVlIG9uIGl0IG93bi4gUHJvYmFibHkgYWRk aW5nIGl0IHRvIGRyYWZ0LWZraHAtZGhjLWRoY3B2Ni1wZC1yZWxheS1yZXF1aXJlbWVudHMgaXMg bm90IGJlc3Qgc2luY2UgdGhlc2UgYXJlIHRoZSBkZWxlZ2F0aW5nIHJlbGF5LCBub3Qgc2VydmVy LCByZXF1aXJlbWVudHMuDQo+PiANCj4+IA0KPj4gDQo+PiBCZXJuaWUNCj4+IA0KPj4gX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+IGRoY3dnIG1haWxp bmcgbGlzdA0KPj4gZGhjd2dAaWV0Zi5vcmcNCj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vZGhjd2cNCg== From nobody Wed Oct 30 15:24:03 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8623120121; Wed, 30 Oct 2019 15:23:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Ww8mgSP3; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=G87x05j9 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2HBR_YwrhglM; Wed, 30 Oct 2019 15:23:53 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DBF1120105; Wed, 30 Oct 2019 15:23:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7948; q=dns/txt; s=iport; t=1572474232; x=1573683832; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=YVQvi9nBmp7Nm7itycHOlZQJqA4VUK+2ewA8ijbI3no=; b=Ww8mgSP3QmuJCuy1n/HIK1BZu0t2u3D09Wb1K+dT+jHbH708UPiRmK2u SZa1RsVu2WnP3YHNwQzhXQHL8owiCM++ZGfi9I0MYwtJgajsF7a4h0RZ2 FgxbB3/0aP0he4nOcm41aGK3hEe/J3HwOlUX4/R2TVlFSjjlwGMKdeEEJ U=; IronPort-PHdr: =?us-ascii?q?9a23=3AhBLshRAG/S8FX3Db+xRGUyQJPHJ1sqjoPgMT9p?= =?us-ascii?q?ssgq5PdaLm5Zn5IUjD/qgw3kTRU9Dd7PRJw6rNvqbsVHZIwK7JsWtKMdRXUg?= =?us-ascii?q?Mdz8AfngguGsmAXFP8KOzCZC0hF8MEX1hgrDm2?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DAAAAdDLpd/5JdJa1lGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYF9gUspJwVsUAggBAsqCoQeg0YDinOCOSWXa4J?= =?us-ascii?q?SA1QJAQEBDAEBGA0IAgEBhEACF4NPJDgTAgMJAQEEAQEBAgEFBG2FNwyFUQE?= =?us-ascii?q?BAQECAQEBEBERDAEBLAsBBAsCAQgYAgImAgICJQsVEAIEDgUbB4MAAYJGAw4?= =?us-ascii?q?gAQ6oCwKBOIhgdYEygn4BAQWBNAGBFIJPGIIXAwaBDiiFGIZ5GIF/gRAoDBO?= =?us-ascii?q?CTD6CYgEBAgGBQgYCFIMQMoIsjHMYCBqCUId1lgAKgiSHEI4hG4I8jAiLGoR?= =?us-ascii?q?XhhOBaIoajCmEeQIEAgQFAg4BAQWBaSKBWHAVOyoBgg0BM1AQFIMGDBeBBAE?= =?us-ascii?q?JgkKFFIU/dAGBJ4sGgTABL14BAQ?= X-IronPort-AV: E=Sophos;i="5.68,248,1569283200"; d="scan'208";a="652783848" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 30 Oct 2019 22:23:51 +0000 Received: from XCH-RCD-008.cisco.com (xch-rcd-008.cisco.com [173.37.102.18]) by rcdn-core-10.cisco.com (8.15.2/8.15.2) with ESMTPS id x9UMNprp030368 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 30 Oct 2019 22:23:51 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-RCD-008.cisco.com (173.37.102.18) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 17:23:50 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 17:23:50 -0500 Received: from NAM01-BN3-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 30 Oct 2019 18:23:49 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Kftm7QmgaJZ/EA0tPpRPrPLOI10AupPi0DA8Z+zqGoDql+aiSOVRzF7RgR7wLDUZQElZcf4nVRJyUhs/7en2c97m4P5YUdjVyLpLvnIAEGILjcFxVDdeixfPg8dNKxnVBJpQxZ4cgCXyZ5xrYZJKYPjWiQgqc13lr3NoXotXgaQ5tfBVqib4x4rOPF4vlkZrL6YLJPg8GY9GzpqUfAU20siEo1WdKOVcdrbh6c/eGEHMXI2tW8/2tycd836NUfKdvN+OV6H4+z2TXib50D4C6ApcK0P37RALUAQL8a6SNpDCyFaBWt/nRK0TeKFHUgsx2OPag0MEqQOKrVgFk5mT6Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YVQvi9nBmp7Nm7itycHOlZQJqA4VUK+2ewA8ijbI3no=; b=F0J0y/m5XUpXwZupasVocOBWgwYzkWK0WHgjohnWsCWhnKoLb+Ew8ITgJ2SQzvqcrFO01NRI2zhR/GlL30Az3Om8QnaL4cKKiFay/GxDorwnHfirdS4j4YL1En9Og+/2OfynekF/4+y0nO2zVVU118D1ibyN2A2mtlBiOqgwODJac9ZObgbRkePpMlJvu01KbVwZMlQWSD7cj/lz0WOceGasAdluBD/efoaujw//gg5NvdFsSWaOQasDiik1NggFJqmbQHlYPGlIcrZKC1INeFD7DZu60swpknRTTLDsO4YKmeCJw6quR8gc9RkLVjJZOUJNQhjtSa4jWQedSlcnbw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YVQvi9nBmp7Nm7itycHOlZQJqA4VUK+2ewA8ijbI3no=; b=G87x05j9uRUVqQIMCZw3Nj91tMXCxQCD4XwHoXUcVXawB0hDiyZ4FCL/IEgvrfhQNmY9qH986CNq4HaRgRiTFMI61MjKxClX4VOsdZLwnL/7xWfzlFhGYIuKeVdnnKda8THjj8ivrZ9w+zJRni0pl6dCJXqAvBrFUeVRYw6xLcY= Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.24; Wed, 30 Oct 2019 22:23:48 +0000 Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.028; Wed, 30 Oct 2019 22:23:48 +0000 From: "Bernie Volz (volz)" To: Bud Millwood CC: "dhcwg@ietf.org" , IPv6 Operations Thread-Topic: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AQHVj3CzWteKsg72/USNDiD4aC/e6w== Date: Wed, 30 Oct 2019 22:23:48 +0000 Message-ID: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com; x-originating-ip: [24.233.121.124] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 9bd29daf-b5b7-4a40-34ed-08d75d87d5e7 x-ms-traffictypediagnostic: MWHPR1101MB2288: x-ms-exchange-purlcount: 4 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 02065A9E77 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(346002)(376002)(366004)(136003)(39860400002)(54094003)(189003)(199004)(66556008)(53546011)(186003)(64756008)(102836004)(6512007)(66946007)(6506007)(76116006)(26005)(66476007)(86362001)(91956017)(36756003)(71200400001)(66066001)(71190400001)(4326008)(99286004)(66446008)(76176011)(6436002)(6306002)(229853002)(6916009)(256004)(14444005)(446003)(6246003)(2906002)(8936002)(476003)(2616005)(7736002)(6486002)(305945005)(486006)(81156014)(25786009)(81166006)(8676002)(6116002)(54906003)(316002)(3846002)(5660300002)(478600001)(33656002)(966005)(14454004)(11346002); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2288; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 382cumZhi2NGoU0rsxxmv23l5ZFVbyDViWL5Y7mihT+vHLQVQU4Y0jLREgmqck3rB7oCE1QdeCCp8Xg+Tkq6PQ8oikT/OtDkfRqjBSqbSj9uPxW83lQG5AdPrKAo8S2Xvzc++iPJkR0zqxEdAx4VXVGsvz2I6uCl4fLC8U0vGO6PItzNA2tbelxjwa7FUz8L/f1U03mip//cZ0nSQD4dk0rSge5nVbo6v/cm6HwUUiQMmnAusBNowHGs4gTALphytJLznreKUi8EKdAfALFettMlCu7cGTYB0P8A/a9MOuwNbFVq6gnu3qXvnO9b60XcxuFAsxtrBKoyac/86OzcocIIq6d6c14T6b3U8sswe/6BYaRQtecF+Fqrd7M0jjKRxiRM944qZH6m/AciK+IolJ9g8g0yuqKVzLd4MbrU6fGXRVI3Yy+x6q9uCm+wGyeYt+QTWgNPd1yrTRTBrOKCxkbUVn98NgrNos4xaywsvb8= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 9bd29daf-b5b7-4a40-34ed-08d75d87d5e7 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2019 22:23:48.5662 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: lB03uup9pLfTKxeRpIdw32s9Zlfld39+XH4gvDuoByDYEt4oRUM5dWoy+qk/pA4B X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2288 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.18, xch-rcd-008.cisco.com X-Outbound-Node: rcdn-core-10.cisco.com Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 22:23:55 -0000 SSBzaG91bGQgcG9pbnQgb3V0IHRoYXQgaGF2aW5nIHRoZSBkaGNwIHNlcnZlciBzdXBwbHkgdGhp cyBpbmZvcm1hdGlvbiBtYXkgbm90IHdvcmsgYWxsIHRoZSB0aW1lLiBJdCByZWFsbHkgZGVwZW5k cyBvbiB3aGF0IGNvbmZpZ3VyYXRpb24gY2hhbmdlcyB3ZXJlIG1hZGUgYW5kIHRoZSBzZXJ2ZXIg aW1wbGVtZW50YXRpb24uIEFuZCBvZiBjb3Vyc2UgaXMgdXNlbGVzcyBpZiB5b3Ug4oCcbW92ZeKA nSB0aGUgQ1BFLg0KDQpTbyB0aGlzIGlzbuKAmXQgZ29pbmcgdG8gYmUgcHJlZmVjdCAob25seSBz dG9yYWdlIG9uIENQRSB3aWxsIGRvIHRoYXQpLCBidXQgc2hvdWxkIGltcHJvdmUgdGhpbmdzIGFu ZCBlc3BlY2lhbGx5IGZvciB0aG9zZSBzaXR1YXRpb25zIHdoZXJlIHRoZSBTUCBjb25maWd1cmVz IHRoZSBESENQIHNlcnZlciB0byByZW51bWJlciBwZXJpb2RpY2FsbHkuDQoNCi0gQmVybmllDQoN Cj4gT24gT2N0IDMwLCAyMDE5LCBhdCA2OjE2IFBNLCBCZXJuaWUgVm9seiAodm9seikgPHZvbHpA Y2lzY28uY29tPiB3cm90ZToNCj4gDQo+IFNlZSBUZWTigJlzIG1lc3NhZ2UgLi4uDQo+IA0KPiBS ZWdhcmRpbmcgKDMpLCBJIHdhcyB0aGlua2luZyB0aGF0IHlvdSBtaWdodCBjb25maWd1cmUgaXQg c2VydmVyIHdpZGUgdG8gZG8gdGhpcywgYnV0IGlmIHlvdSBoYWQgc3BlY2lmaWMgYnJva2VuIGNs aWVudHMsIHRob3NlIGNvdWxkIGJlIGV4Y2x1ZGVkIChwZXJoYXBzIGJhc2VkIG9uIGEgY2xhc3Ms IHN1Y2ggYXMgZnJvbSBhIHNwZWNpZmljIG1hbnVmYWN0dXJlciwgb3IgYnkgZXhwbGljaXQgZHVp ZCkuIFRoZXJl4oCZcyBwcm9iYWJseSBuZXZlciBhbiBpc3N1aW5nIGluIHByb3ZpZGluZyBjb25m aWd1cmF0aW9uIGtub2JzIC4uLiBtb3N0IGxpa2VseSBpdCBpcyBqdXN0IHRoZSBkZWZhdWx0IGJl aGF2aW9yIHRoYXQgaXMgaW1wb3J0YW50Lg0KPiANCj4gSeKAmW0gbGVzcyBpbmNsaW5lZCB0byBi cmVhayB3aGF0IGlzIHdvcmtpbmcsIHNvIEnigJlkIGJlIGEgYml0IG1vcmUgY2F1dGlvdXMgdGhh biBUZWQuIEFsc28sIHRoZSDigJxub3figJ0gYnJva2VuIENQRSB3aWxsIGNhdXNlIGEgY3VzdG9t ZXIgc2VydmljZSBjYWxsIGFuZCBjb3VsZCBiZSBleHBlbnNpdmUgdG8gdGhlIFNQLiBTUCBzdXBw b3J0IHRlYW1zIGFsc28gd291bGQgbGlrZWx5IG5lZWQgdG8ga25vdyB0aGF0IHRoZXkgbWlnaHQg c2VlIGFuIGluY3JlYXNlIGluIGN1c3RvbWVyIGlzc3Vlcywgd2hpY2ggcHJvYmFibHkgaXNu4oCZ dCBlYXN5IHRvIGtub3cgKGhvdyBtYW55IHBlb3BsZSByZWFkIHJlbGVhc2Ugbm90ZXMgY2FyZWZ1 bGx5KT8NCj4gDQo+IC0gQmVybmllDQo+IA0KPj4gT24gT2N0IDMwLCAyMDE5LCBhdCA1OjUzIFBN LCBCdWQgTWlsbHdvb2QgPGJ1ZG1Ad2VpcmQtc29sdXRpb25zLmNvbT4gd3JvdGU6DQo+PiANCj4+ IEhpIEJlcm5pZToNCj4+IA0KPj4gSWYgc3VnZ2VzdGlvbiAoMSkgb3IgKDIpLCBhbiBvbGRlciBD UEUgdGhhdCBib3JrcyBvdmVyIHR3byBkZWxlZ2F0ZWQNCj4+IHByZWZpeGVzIHdvdWxkIHN0YXkg Ym9ya2VkIHVudGlsIHRoZSBvbGQgcHJlZml4IGV4cGlyZWQuIEFuZCBpdCBzZWVtcw0KPj4gbGlr ZSBzdWdnZXN0aW9uICgzKSBzdGlsbCBydW5zIHRoZSByaXNrIG9mIGNhdGNoaW5nIHRoYXQgb2xk ZXIgQ1BFLg0KPj4gQ29uZmlndXJpbmcgdGhhdCBrbm9iIGF0IHRoZSBjbGllbnQgbGV2ZWwgc2Vl bXMgbGlrZSBhIGxvdCBvZg0KPj4gbWFuYWdlbWVudCBvdmVyaGVhZC4NCj4+IA0KPj4gSSB3b25k ZXIgaWYgaW50cm9kdWNpbmcgc3VnZ2VzdGlvbnMgKDEpIG9yICgyKSBhcmVuJ3QgcHVzaGluZyBl eGlzdGluZw0KPj4gY2xpZW50cyB0byBleHBvc2UgbmV3IGJ1Z3MgdGhleSBtYXkgaGF2ZT8gU3Vn Z2VzdGlvbiAoNCkgc2VlbXMNCj4+IHJlYXNvbmFibGUgdG8gbWUuDQo+PiANCj4+IC0gQnVkDQo+ PiANCj4+IA0KPj4gDQo+PiANCj4+IA0KPj4gDQo+Pj4gT24gV2VkLCBPY3QgMzAsIDIwMTkgYXQg MTA6MDIgUE0gQmVybmllIFZvbHogKHZvbHopIDx2b2x6QGNpc2NvLmNvbT4gd3JvdGU6DQo+Pj4g DQo+Pj4gSGVsbG86DQo+Pj4gDQo+Pj4gDQo+Pj4gDQo+Pj4gREhDIGZvbGtzIG1heSB3YW50IHRv IGNoZWNrIG91dCB0aGUgcmVjZW50IGRpc2N1c3Npb24gb24gdGhlIHY2b3BzIG1haWxpbmcgbGlz dCAoaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL2Jyb3dzZS92Nm9wcy8pIHdpdGgg dGhlIOKAnFNMQUFDIHJlbnVtOiBQcm9ibGVtIFN0YXRlbWVudCAmIE9wZXJhdGlvbmFsIHdvcmth cm91bmRz4oCdIHN1YmplY3QuDQo+Pj4gDQo+Pj4gDQo+Pj4gDQo+Pj4gQmFzaWNhbGx5LCBvbmUg aXNzdWUgdGhhdCBhcHBlYXJzIHRvIGhhcHBlbiBpbiBuZXR3b3JrcyB3aGVyZSBDUEVzIHJlY2Vp dmUgZGVsZWdhdGVkIHByZWZpeGVzIGFuZCBhcmUgcmVudW1iZXJlZCB3aGVuIGEgQ1BFIGN5Y2xl cyBwb3dlciDigJMgd2h5IHRoZSByZW51bWJlcmluZyBvY2N1cnMgaXMgbm90IG1hdGVyaWFsLiBU aGUgaXNzdWUgaXMgdGhhdCBzb21lIG9mIHRoZSBkZXZpY2VzIHNlcnZpY2VkIGJ5IHRoZSBDUEUg bWF5IHN0aWxsIGhhdmUgY29uZmlndXJhdGlvbiAoaS5lLiwgZnJvbSBQcmVmaXggSW5mb3JtYXRp b24gT3B0aW9ucyByZWNlaXZlZCB2aWEgUkFzIG9yIHBlcmhhcHMgZXZlbiBESENQKSBiYXNlZCBv biB0aGUgb3JpZ2luYWwgZGVsZWdhdGVkIHByZWZpeCBhbmQgaWYgdGhlIENQRSBkb2VzIG5vdCBo YXZlIHN0YWJsZSBzdG9yYWdlIChpbnRvIHdoaWNoIGl0IHN0b3JlZCB0aGUgb2xkIGRlbGVnYXRl ZCBwcmVmaXgpLCBub3RoaW5nIGluaXRpYXRlcyBkZXByZWNhdGluZyB0aGlzIGluZm9ybWF0aW9u LiBUaGlzIGlzIGJlY2F1c2UgZXZlcnlvbmUgaXMgaG9ub3JpbmcgdGhlIGxpZmV0aW1lcywgYnV0 IHRoZSByZW51bWJlcmluZyBjYXVzZWQgdGhlIFNQIERIQ1Agc2VydmVyIHRvIHByb3ZpZGUgYSB0 b3RhbGx5IG5ldyBkZWxlZ2F0ZWQgcHJlZml4IGFuZCB0aGVyZeKAmXMgbm8gcmVjb3JkIGluIHRo ZSBDUEUgb2YgdGhlIG9sZC4NCj4+PiANCj4+PiANCj4+PiANCj4+PiBGb3IgYSBDUEUgdGhhdCBo YXMgc3RhYmxlIHN0b3JhZ2UsIGl0IGNvdWxkIGluaXRpYXRlIHN0ZXBzIHRvIGRlcHJlY2F0ZSB0 aGUgb2xkIGRlbGVnYXRlZCBwcmVmaXguDQo+Pj4gDQo+Pj4gDQo+Pj4gDQo+Pj4gTm90ZSB0aGF0 IHRoaXMgaXNzdWUgaXMgZGlzY3Vzc2VkIGluIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1ma2hwLWRoYy1kaGNwdjYtcGQtcmVsYXktcmVxdWlyZW1lbnRzLTAwI3NlY3Rpb24tMy4y IGFuZCBhbHNvIGluIHNlY3Rpb24gNC4zIChTLTEpIG9mIHRoYXQgZHJhZnQuDQo+Pj4gDQo+Pj4g DQo+Pj4gDQo+Pj4gT25lIGlkZWEgdGhhdCBJIHN1Z2dlc3RlZCBpcyB0aGF0IHRoZSBTUCBESENQ IHNlcnZlciBjYW4gcHJvdmlkZSB0aGlzIGluZm9ybWF0aW9uIHRvIHRoZSBDUEUuIFRoZSBESENQ IHNlcnZlciBzaG91bGQgc3RpbGwgaGF2ZSBhIHJlY29yZCBvZiB0aGUgcHJldmlvdXMgZGVsZWdh dGVkIHByZWZpeCAoYXMgaXQgaGFzIG5vdCB5ZXQgZXhwaXJlZCBmb3IgdGhlIGJpbmRpbmcpIGFu ZCBpdCBjb3VsZCB0aGVyZWZvcmUgc2VuZCB0aGlzLCB3aXRoIDAgbGlmZXRpbWVzLCBpbiB0aGUg UmVwbHkgdG8gdGhlIFJlcXVlc3QgKGFzIGl0IHdvdWxkIGRvIGluIGEgUmVuZXcpLiBUaGlzIHdv dWxkIGF2b2lkIHRoZSBuZWVkIGZvciB0aGUgQ1BFIHRvIGtlZXAgdGhpcyBpbmZvcm1hdGlvbiBp biBzdGFibGUgc3RvcmFnZS4NCj4+PiANCj4+PiANCj4+PiANCj4+PiBUaGVyZSBpc27igJl0IGFu eSBkaXJlY3QgbWVudGlvbiBvZiBzZW5kaW5nIElBX1BEIChvciBJQV9OQSkgd2l0aCAwIGxpZmV0 aW1lcyBpbiB0aGUgcHJvY2Vzc2luZyBvZiBSZXF1ZXN0cywgYnV0IGl0IGlzbuKAmXQgYSBzdHJl dGNoIHRvIGNvbnNpZGVyIHRoaXMuIEFuZCwgd2l0aG91dCBzb21ldGhpbmcsIGl0IGlzbuKAmXQg b2J2aW91cyB0aGF0IHNlcnZlcnMgc2hvdWxkIChvciB3b3VsZCkgZG8gdGhpcz8NCj4+PiANCj4+ PiANCj4+PiANCj4+PiBTb21lIHBvc3NpYmlsaXRpZXMgYXJlIChmcm9tIGxlYXN0IGNvbnNlcnZh dGl2ZSB0byBtb3N0KToNCj4+PiANCj4+PiBBbHdheXMgaGF2ZSB0aGUgc2VydmVyIGRvIHRoaXMg KHNlbmRpbmcgMCBsaWZldGltZXMpIGZvciBhIFJlcGx5IHRvIGEgUmVxdWVzdCBmb3IgdGhpcyBj b25kaXRpb24uDQo+Pj4gKDEpIGJ1dCBvbmx5IGZvciBSZWxheWVkIG1lc3NhZ2VzLg0KPj4+IEhh dmUgYSBzZXJ2ZXIgY29uZmlndXJhdGlvbiBrbm9iIChhdCB3aGF0ZXZlciBncmFudWxhcml0aWVz IGRlc2lyZWQg4oCTIGdsb2JhbCwgcHJlZml4LCBjbGllbnQsIOKApikuDQo+Pj4gRGVmaW5lIGEg bmV3IG9wdGlvbiB0aGF0IGEgY2xpZW50IHdvdWxkIGluY2x1ZGUgaW4gKFNvbGljaXQvKVJlcXVl c3QgdG8gcmVxdWVzdCB0aGlzIGJlaGF2aW9yLiBOb3RlIHRoYXQgKDMpIGNvdWxkIGFsd2F5cyBv dmVycmlkZS4NCj4+PiANCj4+PiANCj4+PiANCj4+PiBIb3BlZnVsbHkgZXhpc3RpbmcgY2xpZW50 cyB3b3VsZCBoYW5kbGUgdGhpcyBjb3JyZWN0bHksIHRob3VnaCB0aGV5IGxpa2VseSB3b3VsZCBu b3QgdGFrZSB0aGUgYWN0aW9uIHRvIGRlcHJlY2F0ZSB0aGUgb2xkIGRlbGVnYXRlZCBwcmVmaXgu IEJ1dCB3ZSBkb27igJl0IGtub3cgKGFuZCBhdCBsZWFzdCBlYXJseSBpbiB0aGUgREhDUHY2IGRh eXMsIGNsaWVudHMgd2VyZW7igJl0IGFsd2F5cyBoYXBweSB3aGVuIHRoZXkgcmVjZWl2ZWQgbXVs dGlwbGUgZGVsZWdhdGVkIHByZWZpeGVzKS4gSGVuY2UsIGhvdyBjb25zZXJ2YXRpdmUgc2hvdWxk IHdlIGJlPw0KPj4+IA0KPj4+IA0KPj4+IA0KPj4+IFBlcmhhcHMgd2UgY2FuIGRpc2N1c3MgYXMg cGFydCBvZiBkcmFmdC1ma2hwLWRoYy1kaGNwdjYtcGQtcmVsYXktcmVxdWlyZW1lbnRzICh3aGlj aCBpcyBvbiB0aGUgYWdlbmRhIGZvciBJRVRGLTEwNiksIG9yIEkgY291bGQgcmVxdWVzdCBhIHNl cGFyYXRlIHNsb3QgZm9yIGl0IC0gaWYgd2UgbmVlZCBhIGhpZ2hlciBiYW5kd2lkdGggZGlzY3Vz c2lvbi4NCj4+PiANCj4+PiANCj4+PiANCj4+PiBXZSBjYW4gYWxzbyBqdXN0IGRpc2N1c3MgaGVy ZSBvbiB0aGUgbWFpbGluZyBsaXN0IGFzIGl0IG1heSBiZSBwb3NzaWJsZSB0byByZXNvbHZlIGZh aXJseSBxdWlja2x5Lg0KPj4+IA0KPj4+IA0KPj4+IA0KPj4+IEl0IHdpbGwgcmVxdWlyZSBhIHNo b3J0IGRyYWZ0IGFzIGl0IGlzIHNvbWV0aGluZyB0aGF0IHdvdWxkIG5lZWQgdG8gYmUgZm9sZGVk IGludG8gYSBSRkM4NDE1IGJpcyBvciBjb250aW51ZSBvbiBpdCBvd24uIFByb2JhYmx5IGFkZGlu ZyBpdCB0byBkcmFmdC1ma2hwLWRoYy1kaGNwdjYtcGQtcmVsYXktcmVxdWlyZW1lbnRzIGlzIG5v dCBiZXN0IHNpbmNlIHRoZXNlIGFyZSB0aGUgZGVsZWdhdGluZyByZWxheSwgbm90IHNlcnZlciwg cmVxdWlyZW1lbnRzLg0KPj4+IA0KPj4+IA0KPj4+IA0KPj4+IEJlcm5pZQ0KPj4+IA0KPj4+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+Pj4gZGhjd2cg bWFpbGluZyBsaXN0DQo+Pj4gZGhjd2dAaWV0Zi5vcmcNCj4+PiBodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2RoY3dnDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQo+IHY2b3BzIG1haWxpbmcgbGlzdA0KPiB2Nm9wc0BpZXRmLm9y Zw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Y2b3BzDQo= From nobody Wed Oct 30 15:43:29 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07AAD1200C1 for ; Wed, 30 Oct 2019 15:43:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lAYpk5RTfpLK for ; Wed, 30 Oct 2019 15:43:20 -0700 (PDT) Received: from mail-qk1-x72a.google.com (mail-qk1-x72a.google.com [IPv6:2607:f8b0:4864:20::72a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C8A80120018 for ; Wed, 30 Oct 2019 15:43:20 -0700 (PDT) Received: by mail-qk1-x72a.google.com with SMTP id 15so4704784qkh.6 for ; Wed, 30 Oct 2019 15:43:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=i/rXSzfzJxCJp/9K58VstvQ5w1XNieCx/NFJ/fHZhgs=; b=e9LD0riRSlu+UvWyg8q2IWIzHCKiGL4FjEBIBchoqKR0y0XxpzxLAnJenL7GImCG4F sxoHeK1mq9eh5gRKOHipipgGXDUFDzxn2f2G2cgDExLnhH6b3OtunTRt7QFHvKiLNmwJ UYquBPK17U6/ShJ3zw0IDoEt3Z/Tlu4LDOGWvynm7Eg7dqA+gp5VRdPsMSIAlGL6NThl iBqnC5B5hNBTS+wTYAaqqSUoVUbAVVDEMALzeAluCsTNGtl4CG2/IhX8Pz2PdASx6/AV FOyXy2gqTHYTIUOL/jAuPby+n1/91HEeeY4abGmrI8o7BpIQ/oyTv7K0+FZUNSoD1lHp UaEA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=i/rXSzfzJxCJp/9K58VstvQ5w1XNieCx/NFJ/fHZhgs=; b=MJxNlrVpBh1IumOI5hwjgvWgJKw58AqQi1QtIK1l5GEVzo6V8YRRdzFHCcUsdiAyhK BZeagOBWyfwCqNhwpfU74OZQhCDts+TAiow5PsjSSl3gRonkIqa32SSOWrtn6L32ne39 08jp8naK2a75a/46mw07jdtnREjgMuEto5qlHxQzHPZxMhO5JBjYntVMgnCcQbsryKjm xyHuiHT9IMcAk7UqL0tRYBtFZPGYAOdpRn2xzJZ9+iWLujoR/HNr6wG+18No1+GGlWon RwDtZqKZiTE3QaGxAMtYT0UKb48rq/n0c8S/ieoerTv1mp6R3zI/WdjLR87My5/Eu/qY tDlA== X-Gm-Message-State: APjAAAWh9dIggevdZ560QNgg3fCq3plQyUmRJscY322Clp0JZBglNmr+ 3dODpXoLpbb2zFID6gK791qO/w== X-Google-Smtp-Source: APXvYqwdxOHD75G2ToIEqoC9E4JUngtaNYuCRWaYjrig/h4VEKcipuoiwv/+AvrY5ST9jN922H8kmQ== X-Received: by 2002:a05:620a:5e4:: with SMTP id z4mr1890868qkg.310.1572475399843; Wed, 30 Oct 2019 15:43:19 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:c5ad:3e58:9e29:c076? ([2601:18b:300:36ee:c5ad:3e58:9e29:c076]) by smtp.gmail.com with ESMTPSA id o3sm1277891qta.3.2019.10.30.15.43.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Oct 2019 15:43:19 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\)) From: Ted Lemon In-Reply-To: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> Date: Wed, 30 Oct 2019 18:43:17 -0400 Cc: Bud Millwood , "dhcwg@ietf.org" , IPv6 Operations Content-Transfer-Encoding: quoted-printable Message-Id: References: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> To: "Bernie Volz (volz)" X-Mailer: Apple Mail (2.3601.0.10) Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 22:43:23 -0000 On Oct 30, 2019, at 6:23 PM, Bernie Volz (volz) wrote: > I should point out that having the dhcp server supply this information = may not work all the time. It really depends on what configuration = changes were made and the server implementation. And of course is = useless if you =E2=80=9Cmove=E2=80=9D the CPE. In this case the prefix would presumably no longer be valid; if it was = valid and was offered as a deprecated prefix, it would cause no harm. I am not suggesting that this should just start happening with no = testing. What I am suggesting is that forcing firmware updates on CPE = routers isn=E2=80=99t something we should be as chary of as we used to = be. From nobody Wed Oct 30 16:18:50 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA882120168; Wed, 30 Oct 2019 16:18:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.4 X-Spam-Level: X-Spam-Status: No, score=-1.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VPLPJkcBEaSy; Wed, 30 Oct 2019 16:18:40 -0700 (PDT) Received: from mail-io1-f54.google.com (mail-io1-f54.google.com [209.85.166.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 72D24120817; Wed, 30 Oct 2019 16:18:40 -0700 (PDT) Received: by mail-io1-f54.google.com with SMTP id r144so4532795iod.8; Wed, 30 Oct 2019 16:18:40 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=j4stawB2/aZsWbMsFsShm5v3V/Vs3NGBGv1Ps/UfGrE=; b=GK41SkWMIS6SNHWkPcfkK40rVahFmSyOJHv5LH1dic1klFazs813Q3lzQNDfTCiOLQ k9wHsXs6e5gkMpmwOhFAaMSKy2Qa0700r6vWvTOnZA5mXmltRLG00AwZaIF67lRso16A /sORVa8pon3NOTdDIi5MYZmlul0eUPp+sY+A9ZTudGBrwA0fGN1C9U25d9uhv1clj582 RLlxGWDx5UsFnODyQIzTdirEN3ksdZb+rW3zS4wL1U9Askw0zWtQZd1CAsdgGghZMZMt xhcl+M2pPme6+5HwLJM4tsfMHZpGywRiYJUofi+UqqJtfVApPy9zd2mq5lF27kG+eK8y Ushw== X-Gm-Message-State: APjAAAXBH7O+hKPtvpfvEaHop2BEHDj/2SysM4cedUzVNS5xMy9qjbD2 4n+3PGabS0fjDK9kMDzFIpVIHLZ9bHjKRthugPk= X-Google-Smtp-Source: APXvYqypdC1HaIYuTf23y5q4bKWfnnAGCJgBKxYXk166pD1eQvNfiqM7IhdtVVukedwHu3gxnsfvstVW2SWRp89KFVU= X-Received: by 2002:a6b:8f58:: with SMTP id r85mr2100897iod.308.1572477519634; Wed, 30 Oct 2019 16:18:39 -0700 (PDT) MIME-Version: 1.0 References: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> In-Reply-To: From: Bud Millwood Date: Thu, 31 Oct 2019 00:18:28 +0100 Message-ID: To: Ted Lemon Cc: "Bernie Volz (volz)" , "dhcwg@ietf.org" , IPv6 Operations Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 23:18:42 -0000 It's not so much about the lifetime of the prefix as about putting two prefixes in a reply to a request, right? And any CPE that can't handle that gracefully gets hosed. I agree that providers of course need to test this feature, and a server side configuration makes that possible. Also, I'm all for firmware upgrades, but requiring it to fix a hosed CPE is could be a big issue. > This would avoid the need for the CPE to keep this information in stable = storage. > So this isn=E2=80=99t going to be prefect (only storage on CPE will do th= at) I'm leaning towards a server-side configuration option. Creating a new option to request something that may or may not work doesn't seem great. - Bud On Wed, Oct 30, 2019 at 11:43 PM Ted Lemon wrote: > > On Oct 30, 2019, at 6:23 PM, Bernie Volz (volz) wrote: > > I should point out that having the dhcp server supply this information = may not work all the time. It really depends on what configuration changes = were made and the server implementation. And of course is useless if you = =E2=80=9Cmove=E2=80=9D the CPE. > > In this case the prefix would presumably no longer be valid; if it was va= lid and was offered as a deprecated prefix, it would cause no harm. > > I am not suggesting that this should just start happening with no testing= . What I am suggesting is that forcing firmware updates on CPE routers is= n=E2=80=99t something we should be as chary of as we used to be. > > _______________________________________________ > dhcwg mailing list > dhcwg@ietf.org > https://www.ietf.org/mailman/listinfo/dhcwg From nobody Wed Oct 30 16:32:07 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC7C6120818 for ; Wed, 30 Oct 2019 16:31:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B3H7pAdbohAb for ; Wed, 30 Oct 2019 16:31:56 -0700 (PDT) Received: from mail-qt1-x82e.google.com (mail-qt1-x82e.google.com [IPv6:2607:f8b0:4864:20::82e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 364EE120819 for ; Wed, 30 Oct 2019 16:31:56 -0700 (PDT) Received: by mail-qt1-x82e.google.com with SMTP id z17so5850694qts.9 for ; Wed, 30 Oct 2019 16:31:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=PmmYzfkC06cIgUUh0BoL6jIOlr2G+wX/6/3+kZ4ldJk=; b=xj+lCfQnWaQOMa+Cl0fs+pog4xJZpoh6+T0+IRZzIApqNwSRvVtcMBmBG76hMifL5d F8C1b6EVWDPHn6iShUaz0XEMUcB9f5CDV10c9mfeurJ9AvMKuYn5/ULeIrG98IoO+5RH +8ITR0Br5dUh0GtGyBjl7Vd7Esa1LuCet7EN7xpIqP9Xo0BREQ0uQlvw4yk/1jgZFkmK oP9BYobDpiKwYz0Hby08v8Wqhrd2Va0fnVhDhnF724nAx7fgDCJntvK4NZPAujB1Y2LD BT9Y4EnOHJV0hjZ3xST9I3UZc8wV+i0aSSrdnoMqNyHxxHriwe6jkaUmCICYYYJvX468 c5KQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=PmmYzfkC06cIgUUh0BoL6jIOlr2G+wX/6/3+kZ4ldJk=; b=dkg8AO4RO1E5sgU4V8VhH0HmkcitO+BUO+uDAQlID7qJkjfUhmBDGqYHMEwGrClULB 5vznAmqBYSZPDip95dchHeG3QnQYIRyKELsOJl0YIo114u6fNTFHZK45rtSqwhNpCzX5 ks91dvD5S3VqAPoqsyDIZV+nOtHPKtm1dvsLjPUveSuuP4CvTSa/YKSJIxEgnHRPO61/ Ek7uYbMpeFLstsin3zT/MVazDMNXTZvYUU88L3NOoUkfwlTm1+xizqhJ71F/QQwV5SMP MX3ikjAYBQAtFs9tEXF3QO7nyq2deLLC6oFvnt4/Z7XjvoCuh+FcSngvywo/yPHxSLQz U+Gg== X-Gm-Message-State: APjAAAXIdmCFbHAA9+XB4K1XjrRJ+FaITwvRxV/0XpGkKIEmMJJh5OVI EtWs0Sju0ugDvSiNu9oLQFd60A== X-Google-Smtp-Source: APXvYqwXLiFMJbQ8i5qzeZzeTSeTQW14wf2VsQG9NrsOzBBacpvd2dnlVwKr1Yr7kgFeO4vvAOJOpA== X-Received: by 2002:a05:6214:14b2:: with SMTP id bo18mr1768469qvb.72.1572478315255; Wed, 30 Oct 2019 16:31:55 -0700 (PDT) Received: from ?IPv6:2601:18b:300:36ee:c915:d402:aa29:95fd? ([2601:18b:300:36ee:c915:d402:aa29:95fd]) by smtp.gmail.com with ESMTPSA id m72sm939275qke.5.2019.10.30.16.31.54 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Oct 2019 16:31:54 -0700 (PDT) From: Ted Lemon Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_F0D318B4-EF02-4484-8549-65664529A3CA" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3600\)) Date: Wed, 30 Oct 2019 19:31:52 -0400 In-Reply-To: Cc: "Bernie Volz (volz)" , "dhcwg@ietf.org" , IPv6 Operations To: Bud Millwood References: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> X-Mailer: Apple Mail (2.3600) Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 23:31:59 -0000 --Apple-Mail=_F0D318B4-EF02-4484-8549-65664529A3CA Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Oct 30, 2019, at 7:18 PM, Bud Millwood = wrote: > It's not so much about the lifetime of the prefix as about putting two > prefixes in a reply to a request, right? And any CPE that can't handle > that gracefully gets hosed. I agree that providers of course need to > test this feature, and a server side configuration makes that > possible. Also, I'm all for firmware upgrades, but requiring it to fix > a hosed CPE is could be a big issue. The thing is, if they can=E2=80=99t handle a two-PD response, they are = out of spec. This is already allowed in the RFC. Granted, there may be plenty of CPEs that won=E2=80=99t handle this = correctly. If they can be bricked by a message with two PDs, then = bricking them is the right thing to do, because that=E2=80=99s a = zero-day vulnerability wide open on the customer network. --Apple-Mail=_F0D318B4-EF02-4484-8549-65664529A3CA Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Oct 30, 2019, at 7:18 PM, Bud Millwood <budm@weird-solutions.com> wrote:
It's not so much about the lifetime of the prefix as about = putting two
prefixes in a = reply to a request, right? And any CPE that can't handle
that = gracefully gets hosed. I agree that providers of course need = to
test this = feature, and a server side configuration makes that
possible. = Also, I'm all for firmware upgrades, but requiring it to fix
a hosed CPE = is could be a big issue.

The thing is, if they can=E2=80=99t handle a = two-PD response, they are out of spec.  This is already allowed in = the RFC.

Granted, there may be plenty of CPEs that won=E2=80=99t = handle this correctly.   If they can be bricked by a message with = two PDs, then bricking them is the right thing to do, because that=E2=80=99= s a zero-day vulnerability wide open on the customer network.

= --Apple-Mail=_F0D318B4-EF02-4484-8549-65664529A3CA-- From nobody Wed Oct 30 16:39:11 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1004612001E for ; Wed, 30 Oct 2019 16:39:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.497 X-Spam-Level: X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HysHTuZeIFxt for ; Wed, 30 Oct 2019 16:39:09 -0700 (PDT) Received: from mail-oi1-x231.google.com (mail-oi1-x231.google.com [IPv6:2607:f8b0:4864:20::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2662120018 for ; Wed, 30 Oct 2019 16:39:08 -0700 (PDT) Received: by mail-oi1-x231.google.com with SMTP id n16so3603694oig.2 for ; Wed, 30 Oct 2019 16:39:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=+bWlXDCtHUVE4EuqDjgITPpIggea8pzJmdYlFqLzqQI=; b=bKcsebivz+ouJEMa/y49hsKXBr/RIgNlvQdGOqjgYdtgMt99ueRpfhSPx2FTfoHzta cvpw5SVoWR6cYGlLflqZ4kzAa0fPzMksr2JHJVKEbt6546C7IvWOp4vaw11oZ9eUtss/ xkH7IG8/6rL8JAoT4X9Jma9oRCJAhRhxVlj7Ogf0wGCrACOtH4TGQHB8ez33mJyeDKCa WELfEzz+7syxGqrj6y+DlQ7CjmxylF3THLzzs9QuHKzVxm+SSMIE2sjqEjrA4VGS8xo0 +9oMbeCd+DlwMSGu/RqFJwTdR/0oK6m2ZhJ5jxiBPtvO0rw9gw/GD6HqBTZqxWiW2Vx2 iQ2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=+bWlXDCtHUVE4EuqDjgITPpIggea8pzJmdYlFqLzqQI=; b=uDkfHlyJLw7HAlnDA4YteL6eL5ZcyV0C28FF2hWJoW7sHTvFpO8+sF/JiW2Hz1tCd5 6ktGG55cLy5KROnXZlgaCnlpwLpxfYrTnlTgg4q4H4OjEXn9d7O3/jNe5sTCt/0n5THZ OiXqihL/WXVpSh7acNCvn/ds9RbVU6dwcThsAdI7E8VfgqwgSjbNsXaHDxHY6/ijwOp3 CixYMWvCGLrPj9+Z8HnYfqlYqhAw9q376pEJzsAdhGjetSFZcl8yGa3Vxn81I3vA8VCN KjoY7zzBsn6ghBuXPwYU0xa4Zqvp/fc9XP9Ams4ifoAHVsbJ1XRuBK8q85pYhVfiyv7E 3Ftg== X-Gm-Message-State: APjAAAWQmguTigO/QvjGMRGMsud5DjrI3zr0VAR7Zx2a0jQIGoItyQAs O60rlQAdMmpwSP9Ah6sv0bdNuFFfcwO3PGHeJSM= X-Google-Smtp-Source: APXvYqxZqxSrTGeQLjMnYLrUjo+Ov2Gw9KTSMrulG/eLS2sTgi0gmDLIS3r2vnCBvQIA1sxmwg2FgsjtRxoJQ7I1cSA= X-Received: by 2002:aca:2211:: with SMTP id b17mr1595398oic.38.1572478748186; Wed, 30 Oct 2019 16:39:08 -0700 (PDT) MIME-Version: 1.0 References: <837E9523-14FC-4F6C-88FC-DCC316265299@employees.org> In-Reply-To: <837E9523-14FC-4F6C-88FC-DCC316265299@employees.org> From: Mark Smith Date: Thu, 31 Oct 2019 10:38:41 +1100 Message-ID: To: Ole Troan Cc: Ted Lemon , v6ops list Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: [v6ops] A broken promise - "You said PD Prefix Valid Lifetime is going to be X" (Re: SLAAC renum: Problem Statement & Operational workarounds) X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 23:39:10 -0000 On Wed, 30 Oct 2019 at 22:02, Ole Troan wrote: > > In the case when a requesting router loses a prefix, it can of course sig= nal that to the hosts as proposed in Fernando's draft. But that doesn't sol= ve the general problem, and I'm skeptical to using addressing as a reachabi= lity signal. E.g. if the CPE's upstream link flaps, is that enough to trigg= er deprecation of the prefix? Of course it shouldn't. > Exactly. Transient network faults are supposed to be survived - that's why TCP makes quite a number of attempts at re-transmitting when packet loss occurs, rather than just immediately terminating the connection. When an ISP "flash renumbers" a customer what's really happening is that the customer's network layer point of attachment to the network is being changed - the customer is being abruptly disconnected, moved and re-connected. Possibly that is easy to overlook because the customers physical location and their physical link to the network doesn't change. I think Ole observed that this is contrary to what the PD prefix's Valid Lifetime said would be the case. The ISP supplied a PD Prefix with a Valid Lifetime of X seconds, and then broke that promise by abruptly changing addressing before X seconds. ISPs should be expected to live up to their Valid Lifetime promises. Regards, Mark. > Ole > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops From nobody Wed Oct 30 17:54:19 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83BFD12006B; Wed, 30 Oct 2019 17:54:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=bkGBSITm; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=ty5oq68a Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wosy9heyjQXH; Wed, 30 Oct 2019 17:54:15 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 631C5120018; Wed, 30 Oct 2019 17:54:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11125; q=dns/txt; s=iport; t=1572483255; x=1573692855; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=/yCLCmeEmzGuzus025EdDF9enuq4dikgdDbdxGJzULQ=; b=bkGBSITmQ5hBDWSZLS5vJH7BmSeUTIv+jMCes7Jh3/3NPxT3NPBmxNjB WCWRiMlTInphgnnUeYFXD5e414h3dubX8ZhjSPQgUYyMfN+0VMlrnR7e2 tvxv+vkMYgm9ktRmi+9ddFL71ibqR916IX1Bp8uCzw5U5nj3Purw9r9tF A=; IronPort-PHdr: =?us-ascii?q?9a23=3AX3BZ2hQlXoWDigezehs14fI5Ltpsv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESUANfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH1?= =?us-ascii?q?5NksAKh0olCc+BB1f8Kav0aCgoNM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DXAAB1MLpd/4gNJK1lGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYF9gRwvUAWBRCAECyoKhB6DRgOKc4I5ky+EYYJ?= =?us-ascii?q?SA1QJAQEBDAEBLQIBAYRAAheDTyQ4EwIDCQEBBAEBAQIBBQRthTcMhVICAQM?= =?us-ascii?q?SER0BATcBDwIBCA4xAwICAjAUEQIEAQ0FGwQDgwCBek0DLgGoAQKBOIhgdYE?= =?us-ascii?q?ygn4BAQWFEhiCFwmBNowRGIF/gTgME4JMPoQvCYMdMoIsjROCaoU8mDkKgiS?= =?us-ascii?q?VMRuZX4RXhhODVplOAgQCBAUCDgEBBYFpIoFYcBVlAYJBUBAUgwYMF4NQilN?= =?us-ascii?q?0gSiLB4EvAS9eAQE?= X-IronPort-AV: E=Sophos;i="5.68,248,1569283200"; d="scan'208,217";a="353957947" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 31 Oct 2019 00:53:59 +0000 Received: from XCH-RCD-006.cisco.com (xch-rcd-006.cisco.com [173.37.102.16]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id x9V0rxe2023567 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 31 Oct 2019 00:53:59 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-006.cisco.com (173.37.102.16) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 19:53:58 -0500 Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 19:53:58 -0500 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 30 Oct 2019 20:53:57 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HHYEbtFrmq0cOoFRDoVndekImRRlMwp/LH5K/Vxop8/GyK6HcJWBUltyCrI6MZYfU+Abr7Nj2VPV+71jC5u/s5t3Aic5uErmmqa7vbJFOVNwAnGdFmYTmwyVAmoB32qZcEI3XADK2dSraBl6+4GIGDbTjglq2TrPZaR0O+4W/AiqY7kDM/YftugyhOQ+g+reoiPEacG41MzsMbpd96ZXN/FfzaHzOOJ/VKGoCBLIWKkHqvWB/TKEJGSwEZiatun9D+7sDZu9Y7Q2Lydrt3GVlt5QGDU4slZoNVki9s514MODqdt/kBS3E/qw1dh5uSqYBLeDzpDOUuNOyVXv8sLNuA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/yCLCmeEmzGuzus025EdDF9enuq4dikgdDbdxGJzULQ=; b=JSmhroilL8dk28tOltVWjRRbKXD1cH/p7HeRAvWu4WUuiJmPYN+BQAK0MRiW2+IQVH0OYDQCfPqXVqNJe6Oy/GdQi3GxJoHju3ktRkjLS24+ckHX4+spw8aiVChiTzTrMWLnRnKc+mDpJ1Yh2r74y/oiCiETTh36BGozGPt4IMVseDOvPax0WIsfG/8YJ+j4mZ5X44wdXZ0G3gqkcWtwh/1HJ8EyCDXThNBkJfecF472BkFGRXSWTOY9McnC7E/a1kF8jBGi5Sg0D+wKRfUw/eK/sDxzDKhMIdJcmeaFWEcrpNREXGsdi38O4V9xGJ8DT4IhivgtJrkahkYq+eqXAg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/yCLCmeEmzGuzus025EdDF9enuq4dikgdDbdxGJzULQ=; b=ty5oq68aIt8nqufDHCKCRnmq0e5Xdwg6CfRLBblzOFedaVaLa3woM6CTBWcWDhpK6i6K017jgsuXN1rZuKR03bWCzcPVdCC2FQywUcrvslkZywYjBUcAh/NbTsgpYvC2iPfEnTGbcRHKePNiwyKp6+tztQ0sVuNHQE+fyy/rbUg= Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2142.namprd11.prod.outlook.com (10.174.99.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.22; Thu, 31 Oct 2019 00:53:56 +0000 Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.028; Thu, 31 Oct 2019 00:53:56 +0000 From: "Bernie Volz (volz)" To: Ted Lemon , Bud Millwood , "dhcwg@ietf.org" CC: IPv6 Operations Thread-Topic: [dhcwg] [v6ops] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AQHVj3NwV9i3QJoK8Ua4yd4/ygUlcadz0cUAgAADvgCAABbtIw== Date: Thu, 31 Oct 2019 00:53:55 +0000 Message-ID: References: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com; x-originating-ip: [24.233.121.124] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 2b9e8d2a-4424-4b08-5cfa-08d75d9ccebd x-ms-traffictypediagnostic: MWHPR1101MB2142: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 02070414A1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(39860400002)(136003)(376002)(346002)(366004)(199004)(189003)(229853002)(14444005)(99286004)(76176011)(236005)(256004)(66476007)(66556008)(64756008)(66446008)(8936002)(3846002)(11346002)(91956017)(2501003)(6512007)(446003)(6116002)(54896002)(316002)(478600001)(7736002)(66946007)(76116006)(6246003)(36756003)(186003)(71190400001)(71200400001)(2616005)(4326008)(486006)(25786009)(53546011)(6506007)(86362001)(8676002)(2906002)(6486002)(5660300002)(6436002)(66066001)(110136005)(26005)(102836004)(81166006)(81156014)(33656002)(14454004)(476003); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2142; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: lvvQrCT3RI/G/eKZkeSlcMTtxTW4JK6cZM1r+NUNqLg4zYpPCszv4hehKXk5MoA8VSdp9baDF0ipRXDNCU/sDcwmqFL8eABFAlKFmN4RM3Z/Sh/gmdo19EFpLzGRble1M154XzFNLEPaNNtGnaM/IqJ6DHLNRiHhl0nBivmmr+td8IwseeFNPoNsxuEgPaRABlW6pccs2CJR09de0yge584B0WailaqQJeCfLG7+WeMBTUoctOIcGNsjMjY/0s3WweSr47jQguKI+yAXtIVfWD3Q9T7BVNcA4/JtzgSfBxnwYY2GYdJFpiP4MxkqYrzlbkntEilk5Tml361Ip5dZNb59e8u0jBWmNiTnMX1UlIIoOhS5FDqDqSFn+9Be94JASO7DpUCbJpJjoMf8UXpvAeosNN1d9ty21s9V3uXllgkFrRgdSKB5t10yG3rSnlhL x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_A72A93B2B9474365A81150D8908B01EAciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 2b9e8d2a-4424-4b08-5cfa-08d75d9ccebd X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Oct 2019 00:53:55.5644 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: KXfQK65BWIoC2LMYUk1ELYYdGbZoF8lKV8BWukHkEMnVJHrWBAwr1q43oizId9kk X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2142 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.16, xch-rcd-006.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Oct 2019 00:54:17 -0000 --_000_A72A93B2B9474365A81150D8908B01EAciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TWFyayBTbWl0aCBvbiB2Nm9wcyBtbCB3cm90ZToNCg0K4oCcSSB0aGluayBPbGUgb2JzZXJ2ZWQg dGhhdCB0aGlzIGlzIGNvbnRyYXJ5IHRvIHdoYXQgdGhlIFBEIHByZWZpeCdzIFZhbGlkIExpZmV0 aW1lIHNhaWQgd291bGQgYmUgdGhlIGNhc2UuIFRoZSBJU1Agc3VwcGxpZWQgYSBQRCBQcmVmaXgg d2l0aCBhIFZhbGlkIExpZmV0aW1lIG9mIFggc2Vjb25kcywgYW5kIHRoZW4gYnJva2UgdGhhdCBw cm9taXNlIGJ5IGFicnVwdGx5IGNoYW5naW5nIGFkZHJlc3NpbmcgYmVmb3JlIFggc2Vjb25kcy4g SVNQcyBzaG91bGQgYmUgZXhwZWN0ZWQgdG8gbGl2ZSB1cCB0byB0aGVpciBWYWxpZCBMaWZldGlt ZSBwcm9taXNlcy7igJ0NCg0KQW5kIGl0IHdvdWxkIGJlIHdvcnRoIGJldHRlciB1bmRlcnN0YW5k aW5nIGV4YWN0bHkgd2hhdCBoYXBwZW5zIGluIHRoZXNlIHNpdHVhdGlvbnMgKHBlcmhhcHMgaXQg d2FzIGNvdmVyZWQgZWFybGllciBidXQgSSBtaXNzZWQgb3IgbG9zdCB0aGF0KSAgLi4uIGlmIHRo ZSBQcmVmaXggY29uZmlndXJhdGlvbiByZWFsbHkgaXMgcmFkaWNhbGx5IGNoYW5nZWQsIGV2ZW4g dGhlIFNQIGRoY3Agc2VydmVyIG1heSBiZSB1bmFibGUgdG8gYXNzaXN0Lg0KDQotIEJlcm5pZQ0K DQpPbiBPY3QgMzAsIDIwMTksIGF0IDc6MzIgUE0sIFRlZCBMZW1vbiA8bWVsbG9uQGZ1Z3VlLmNv bTxtYWlsdG86bWVsbG9uQGZ1Z3VlLmNvbT4+IHdyb3RlOg0KDQpPbiBPY3QgMzAsIDIwMTksIGF0 IDc6MTggUE0sIEJ1ZCBNaWxsd29vZCA8YnVkbUB3ZWlyZC1zb2x1dGlvbnMuY29tPG1haWx0bzpi dWRtQHdlaXJkLXNvbHV0aW9ucy5jb20+PiB3cm90ZToNCkl0J3Mgbm90IHNvIG11Y2ggYWJvdXQg dGhlIGxpZmV0aW1lIG9mIHRoZSBwcmVmaXggYXMgYWJvdXQgcHV0dGluZyB0d28NCnByZWZpeGVz IGluIGEgcmVwbHkgdG8gYSByZXF1ZXN0LCByaWdodD8gQW5kIGFueSBDUEUgdGhhdCBjYW4ndCBo YW5kbGUNCnRoYXQgZ3JhY2VmdWxseSBnZXRzIGhvc2VkLiBJIGFncmVlIHRoYXQgcHJvdmlkZXJz IG9mIGNvdXJzZSBuZWVkIHRvDQp0ZXN0IHRoaXMgZmVhdHVyZSwgYW5kIGEgc2VydmVyIHNpZGUg Y29uZmlndXJhdGlvbiBtYWtlcyB0aGF0DQpwb3NzaWJsZS4gQWxzbywgSSdtIGFsbCBmb3IgZmly bXdhcmUgdXBncmFkZXMsIGJ1dCByZXF1aXJpbmcgaXQgdG8gZml4DQphIGhvc2VkIENQRSBpcyBj b3VsZCBiZSBhIGJpZyBpc3N1ZS4NCg0KVGhlIHRoaW5nIGlzLCBpZiB0aGV5IGNhbuKAmXQgaGFu ZGxlIGEgdHdvLVBEIHJlc3BvbnNlLCB0aGV5IGFyZSBvdXQgb2Ygc3BlYy4gIFRoaXMgaXMgYWxy ZWFkeSBhbGxvd2VkIGluIHRoZSBSRkMuDQoNCkdyYW50ZWQsIHRoZXJlIG1heSBiZSBwbGVudHkg b2YgQ1BFcyB0aGF0IHdvbuKAmXQgaGFuZGxlIHRoaXMgY29ycmVjdGx5LiAgIElmIHRoZXkgY2Fu IGJlIGJyaWNrZWQgYnkgYSBtZXNzYWdlIHdpdGggdHdvIFBEcywgdGhlbiBicmlja2luZyB0aGVt IGlzIHRoZSByaWdodCB0aGluZyB0byBkbywgYmVjYXVzZSB0aGF04oCZcyBhIHplcm8tZGF5IHZ1 bG5lcmFiaWxpdHkgd2lkZSBvcGVuIG9uIHRoZSBjdXN0b21lciBuZXR3b3JrLg0KDQo= --_000_A72A93B2B9474365A81150D8908B01EAciscocom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IGRpcj0iYXV0byI+DQpN YXJrIFNtaXRoIG9uIHY2b3BzIG1sIHdyb3RlOg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+PHNw YW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6IHJnYmEoMjU1LCAyNTUsIDI1NSwgMCk7Ij7igJxJ IHRoaW5rIE9sZSBvYnNlcnZlZCB0aGF0IHRoaXMgaXMgY29udHJhcnkgdG8gd2hhdCB0aGUgUEQg cHJlZml4J3MmbmJzcDtWYWxpZCBMaWZldGltZSBzYWlkIHdvdWxkIGJlIHRoZSBjYXNlLiBUaGUg SVNQIHN1cHBsaWVkIGEgUEQgUHJlZml4Jm5ic3A7d2l0aCBhIFZhbGlkIExpZmV0aW1lIG9mIFgg c2Vjb25kcywgYW5kIHRoZW4gYnJva2UgdGhhdCBwcm9taXNlDQogYnkmbmJzcDthYnJ1cHRseSBj aGFuZ2luZyBhZGRyZXNzaW5nIGJlZm9yZSBYIHNlY29uZHMuIElTUHMgc2hvdWxkIGJlIGV4cGVj dGVkJm5ic3A7dG8gbGl2ZSB1cCB0byB0aGVpciBWYWxpZCBMaWZldGltZSBwcm9taXNlcy7igJ08 L3NwYW4+PC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5BbmQgaXQgd291bGQgYmUgd29y dGggYmV0dGVyIHVuZGVyc3RhbmRpbmcgZXhhY3RseSB3aGF0IGhhcHBlbnMgaW4gdGhlc2Ugc2l0 dWF0aW9ucyAocGVyaGFwcyBpdCB3YXMgY292ZXJlZCBlYXJsaWVyIGJ1dCBJIG1pc3NlZCBvciBs b3N0IHRoYXQpICZuYnNwOy4uLiBpZiB0aGUgUHJlZml4IGNvbmZpZ3VyYXRpb24gcmVhbGx5IGlz IHJhZGljYWxseSBjaGFuZ2VkLCBldmVuIHRoZSBTUCBkaGNwIHNlcnZlciBtYXkgYmUgdW5hYmxl IHRvIGFzc2lzdC48L2Rpdj4NCjxkaXY+PGJyPg0KPGRpdiBkaXI9Imx0ciI+LSBCZXJuaWU8L2Rp dj4NCjxkaXYgZGlyPSJsdHIiPjxicj4NCk9uIE9jdCAzMCwgMjAxOSwgYXQgNzozMiBQTSwgVGVk IExlbW9uICZsdDs8YSBocmVmPSJtYWlsdG86bWVsbG9uQGZ1Z3VlLmNvbSI+bWVsbG9uQGZ1Z3Vl LmNvbTwvYT4mZ3Q7IHdyb3RlOjxicj4NCjxicj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSI+DQo8ZGl2IGRpcj0ibHRyIj5PbiBPY3QgMzAsIDIwMTksIGF0IDc6MTggUE0sIEJ1ZCBN aWxsd29vZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJ1ZG1Ad2VpcmQtc29sdXRpb25zLmNvbSIgY2xh c3M9IiI+YnVkbUB3ZWlyZC1zb2x1dGlvbnMuY29tPC9hPiZndDsgd3JvdGU6DQo8ZGl2Pg0KPGJs b2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIHN0eWxl PSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogTWVubG8tUmVndWxhcjsg Zm9udC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTog aW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5JdCdzDQogbm90IHNvIG11Y2ggYWJvdXQgdGhl IGxpZmV0aW1lIG9mIHRoZSBwcmVmaXggYXMgYWJvdXQgcHV0dGluZyB0d288L3NwYW4+PGJyIHN0 eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogTWVubG8tUmVndWxh cjsgZm9udC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBz dHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IE1lbmxvLVJlZ3Vs YXI7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxvYXQ6IG5vbmU7IGRpc3Bs YXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+cHJlZml4ZXMNCiBpbiBhIHJlcGx5IHRv IGEgcmVxdWVzdCwgcmlnaHQ/IEFuZCBhbnkgQ1BFIHRoYXQgY2FuJ3QgaGFuZGxlPC9zcGFuPjxi ciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IE1lbmxvLVJl Z3VsYXI7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPHNw YW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBNZW5sby1S ZWd1bGFyOyBmb250LXNpemU6IDE0cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPnRoYXQNCiBncmFjZWZ1bGx5IGdl dHMgaG9zZWQuIEkgYWdyZWUgdGhhdCBwcm92aWRlcnMgb2YgY291cnNlIG5lZWQgdG88L3NwYW4+ PGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogTWVubG8t UmVndWxhcjsgZm9udC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8 c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IE1lbmxv LVJlZ3VsYXI7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxvYXQ6IG5vbmU7 IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+dGVzdA0KIHRoaXMgZmVhdHVy ZSwgYW5kIGEgc2VydmVyIHNpZGUgY29uZmlndXJhdGlvbiBtYWtlcyB0aGF0PC9zcGFuPjxiciBz dHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IE1lbmxvLVJlZ3Vs YXI7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPHNwYW4g c3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBNZW5sby1SZWd1 bGFyOyBmb250LXNpemU6IDE0cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPnBvc3NpYmxlLg0KIEFsc28sIEknbSBh bGwgZm9yIGZpcm13YXJlIHVwZ3JhZGVzLCBidXQgcmVxdWlyaW5nIGl0IHRvIGZpeDwvc3Bhbj48 YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBNZW5sby1S ZWd1bGFyOyBmb250LXNpemU6IDE0cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxz cGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogTWVubG8t UmVndWxhcjsgZm9udC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5hDQogaG9zZWQgQ1BFIGlzIGNv dWxkIGJlIGEgYmlnIGlzc3VlLjwvc3Bhbj48L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0K PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5UaGUgdGhpbmcgaXMsIGlmIHRoZXkgY2Fu4oCZ dCBoYW5kbGUgYSB0d28tUEQgcmVzcG9uc2UsIHRoZXkgYXJlIG91dCBvZiBzcGVjLiAmbmJzcDtU aGlzIGlzIGFscmVhZHkgYWxsb3dlZCBpbiB0aGUgUkZDLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+R3JhbnRlZCwgdGhlcmUgbWF5IGJl IHBsZW50eSBvZiBDUEVzIHRoYXQgd29u4oCZdCBoYW5kbGUgdGhpcyBjb3JyZWN0bHkuICZuYnNw OyBJZiB0aGV5IGNhbiBiZSBicmlja2VkIGJ5IGEgbWVzc2FnZSB3aXRoIHR3byBQRHMsIHRoZW4g YnJpY2tpbmcgdGhlbSBpcyB0aGUgcmlnaHQgdGhpbmcgdG8gZG8sIGJlY2F1c2UgdGhhdOKAmXMg YSB6ZXJvLWRheSB2dWxuZXJhYmlsaXR5IHdpZGUgb3BlbiBvbiB0aGUgY3VzdG9tZXIgbmV0d29y ay48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_A72A93B2B9474365A81150D8908B01EAciscocom_-- From nobody Wed Oct 30 18:40:18 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFF0112008B; Wed, 30 Oct 2019 18:40:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.998 X-Spam-Level: X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HVzxHcRqcdYL; Wed, 30 Oct 2019 18:40:14 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id EDB5F12006B; Wed, 30 Oct 2019 18:40:09 -0700 (PDT) Received: from [172.20.0.85] (rrcs-97-79-186-2.sw.biz.rr.com [97.79.186.2]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9V1cfOS004481 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 30 Oct 2019 18:38:42 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9V1cfOS004481 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572485923; bh=w0TJ2XGkkP1+qQAtqMApZ1MVm+I9hWUT78aoux/lAqI=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=znXsju/GsTlnk5tm3XYnc4KhnKy9+KC7W/DNqLTwmd3kqYu7Ib9RWadwOC1qge7jn +dGBQ0Zt3KtakyNBOe5bXYs1LFTmnW5U6KoPddjTxA3un3l9r18ycX2AMmwhktsRCT CjQlQmyb/hyDaiF0w3kPthCDusBmF4C/sPzqtmx4= From: Owen DeLong Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_7AF93E5E-9C49-4AD9-BB83-89C83D9D7FEC" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Date: Wed, 30 Oct 2019 18:38:41 -0700 In-Reply-To: Cc: Ted Lemon , Bud Millwood , "dhcwg@ietf.org" , IPv6 Operations To: "Bernie Volz (volz)" References: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> X-Mailer: Apple Mail (2.3445.104.8) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Wed, 30 Oct 2019 18:38:43 -0700 (PDT) Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Oct 2019 01:40:17 -0000 --Apple-Mail=_7AF93E5E-9C49-4AD9-BB83-89C83D9D7FEC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 30, 2019, at 5:53 PM, Bernie Volz (volz) = wrote: >=20 > Mark Smith on v6ops ml wrote: >=20 > =E2=80=9CI think Ole observed that this is contrary to what the PD = prefix's Valid Lifetime said would be the case. The ISP supplied a PD = Prefix with a Valid Lifetime of X seconds, and then broke that promise = by abruptly changing addressing before X seconds. ISPs should be = expected to live up to their Valid Lifetime promises.=E2=80=9D Sure, but in the real world, there is an entire class of ISPs that have = repeatedly demonstrated utter and near complete disregard for such = niceties as promises to customers (e.g. most major eyeball ISPs in the = US at a minimum), so having CPE behavior that accommodates this fact in = favor of the user will likely lead to a better user experience than = stomping or feet and insisting that ISPs behave properly. > And it would be worth better understanding exactly what happens in = these situations (perhaps it was covered earlier but I missed or lost = that) ... if the Prefix configuration really is radically changed, even = the SP dhcp server may be unable to assist. With what is being proposed, the SP DHCP server doesn=E2=80=99t need to = assist. The CPU should write the set of received prefixes and their = expected expiration times (preferred, valid) to persistent storage. The = CPU should update this when a packet making a change to these timers is = received. It should make every effort to deprecate prefixes it cannot = renew from the links where it previously advertised them. This doesn=E2=80=99t require anything special on the SP side. Owen >=20 > - Bernie >=20 > On Oct 30, 2019, at 7:32 PM, Ted Lemon > wrote: >=20 >> On Oct 30, 2019, at 7:18 PM, Bud Millwood > wrote: >>> It's not so much about the lifetime of the prefix as about putting = two >>> prefixes in a reply to a request, right? And any CPE that can't = handle >>> that gracefully gets hosed. I agree that providers of course need to >>> test this feature, and a server side configuration makes that >>> possible. Also, I'm all for firmware upgrades, but requiring it to = fix >>> a hosed CPE is could be a big issue. >>=20 >> The thing is, if they can=E2=80=99t handle a two-PD response, they = are out of spec. This is already allowed in the RFC. >>=20 >> Granted, there may be plenty of CPEs that won=E2=80=99t handle this = correctly. If they can be bricked by a message with two PDs, then = bricking them is the right thing to do, because that=E2=80=99s a = zero-day vulnerability wide open on the customer network. >>=20 > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops --Apple-Mail=_7AF93E5E-9C49-4AD9-BB83-89C83D9D7FEC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Oct 30, 2019, at 5:53 PM, Bernie Volz (volz) <volz@cisco.com> = wrote:

Mark Smith on v6ops ml wrote:

=E2=80=9CI think Ole observed that this is contrary to = what the PD prefix's Valid Lifetime said would be the case. The ISP = supplied a PD Prefix with a Valid Lifetime of X seconds, and then = broke that promise by abruptly changing addressing before X seconds. ISPs should be = expected to live up to their Valid Lifetime = promises.=E2=80=9D

Sure, but in the real world, there is an entire class = of ISPs that have repeatedly demonstrated utter and near complete = disregard for such niceties as promises to customers (e.g. most major = eyeball ISPs in the US at a minimum), so having CPE behavior that = accommodates this fact in favor of the user will likely lead to a better = user experience than stomping or feet and insisting that ISPs behave = properly.

And it would be worth better understanding exactly what = happens in these situations (perhaps it was covered earlier but I missed = or lost that)  ... if the Prefix configuration really is radically = changed, even the SP dhcp server may be unable to = assist.

With = what is being proposed, the SP DHCP server doesn=E2=80=99t need to = assist. The CPU should write the set of received prefixes and their = expected expiration times (preferred, valid) to persistent storage. The = CPU should update this when a packet making a change to these timers is = received. It should make every effort to deprecate prefixes it cannot = renew from the links where it previously advertised them.

This doesn=E2=80=99t require anything special on = the SP side.

Owen


- Bernie

On Oct 30, 2019, at 7:32 PM, Ted Lemon <mellon@fugue.com> = wrote:

On Oct 30, 2019, at 7:18 PM, Bud Millwood = <budm@weird-solutions.com> wrote:
It's not so much about the lifetime of the prefix as about putting = two
prefixes in a reply to a request, right? And any CPE that can't handle
that gracefully gets hosed. I agree that providers of course need = to
test this feature, and a server side configuration makes that
possible. Also, I'm all for firmware upgrades, but requiring it to fix
a hosed CPE is could be a big issue.

The thing is, if they can=E2=80=99t handle a two-PD = response, they are out of spec.  This is already allowed in the = RFC.

Granted, there may be plenty of CPEs that won=E2=80=99t = handle this correctly.   If they can be bricked by a message with = two PDs, then bricking them is the right thing to do, because that=E2=80=99= s a zero-day vulnerability wide open on the customer network.

_______________________________________________
v6ops = mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops

= --Apple-Mail=_7AF93E5E-9C49-4AD9-BB83-89C83D9D7FEC-- From nobody Wed Oct 30 18:48:45 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D917C12006B; Wed, 30 Oct 2019 18:48:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=HHPE8kcm; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=AbIB0jcy Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M79TnD0w9yO6; Wed, 30 Oct 2019 18:48:34 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C93ED12008B; Wed, 30 Oct 2019 18:48:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=21130; q=dns/txt; s=iport; t=1572486513; x=1573696113; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=HXTmAa2yzpO/iyBPdD8ZDxtUgTo+xfdiCz9XeO6tHgg=; b=HHPE8kcmPsG8eDxFdZxewBRltOqdS6fo0YfLajMS1uOi50E+7vnOYYeo qegR0c+63xr+aaDnZfuYVukD2sbAPu3WeIOYF+/MfioA4kModsvxvNswE Ud8fkmQkS8e8jP1FAjP4vPq2GJsQkObBD9M8Nz0fal3V/SmCBcJAaJDvL w=; IronPort-PHdr: =?us-ascii?q?9a23=3AF9Df8BwhSvyp6i/XCy+N+z0EezQntrPoPwUc9p?= =?us-ascii?q?sgjfdUf7+++4j5YRGN/u1j2VnOW4iTq+lJjebbqejBYSQB+t7A+GsHbIQKUh?= =?us-ascii?q?YEjcsMmAl1HsmBG2XwLeXhaGoxG8ERHFI=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CwAAD+PLpd/4UNJK1lGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYF9gRwvJCwFbFggBAsqCoQeg0YDinSCXpMKhGG?= =?us-ascii?q?CUgNUCQEBAQwBARgBCgoCAQGEQAIXg08kOBMCAwkBAQQBAQECAQUEbYU3DIV?= =?us-ascii?q?RAQEBAQMBARARChMBASwLAQ8CAQgRBAEBKAMCAgIlCxQJCAIEDgUIEwQDgwG?= =?us-ascii?q?BeU0DLgEOp1ACgTiIYHWBMoJ+AQEFgTQBg18YghcDBoE2jBEYgX+BV4FOfj6?= =?us-ascii?q?CYgEBgUsCBw8rCYJaMoIsjROCaoU8mDkKgiSVTII8lyOEV4YThRaYDgIEAgQ?= =?us-ascii?q?FAg4BAQWBaSKBWHAVO4JsUBAUgwYMF4NQhRSFP3SBKIsGASSBCwEvXgEB?= X-IronPort-AV: E=Sophos;i="5.68,249,1569283200"; d="scan'208,217";a="656069055" Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 31 Oct 2019 01:48:32 +0000 Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id x9V1mWqZ013616 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 31 Oct 2019 01:48:32 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 20:48:31 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 20:48:31 -0500 Received: from NAM04-CO1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 30 Oct 2019 21:48:31 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=INF7qH/yBtm50r2yEEmFXY9vYB6AMllaXz40ah8LvaqzwlUicbTQMV6AZK0+C1deDmfUohe0xihvpw3C4UMgsIoBIhlt6+vg710K23GrgqoGsDBBINN+5QOSVWGJPmAmcJC94vbQSl6SdeqeM7JnpJBwdmr662V9aeCG9ohLOCbYD7pkbUGhwrS848bLuw3sPegG7DsMghxxu/BGHjDvlbVWj4w5AJbR+1ER3IjJVdq5PwNXvjiV6Z8UP38UAsAGPhWfrRwsh6UABhUCCLOMC85osyLDYfZ5Zr9pOVSNjCYl5Mrp1idsfk13bzmhb0hCstuv9ioGssZeJ7Kk5/d/dw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HXTmAa2yzpO/iyBPdD8ZDxtUgTo+xfdiCz9XeO6tHgg=; b=noSYkApWWzUuOmYowV8aJukOXqxGrPd8sRE04BbCk3fFtp8g0JB8jqlSuw0txANaMbdG/D7iwGD/H4mNWq1z+U4i4qr6JHA5TL8lv8dMaiuiClCEpY1J4/1KE0TMmWZdoVrAvMA436cO7b2SF8sxTIHKcD9TRb1tCb5TMu5rywJBIcsmmcxPup2Zr00rQuVYNRsnkxpacBYRDV+Rnp8dDCjAOrGPMRFT5EZihotBvMkQVZ92so49qQH6OUh9V9YqvAV4yIj1v9cJA2b5pMxf0O6PIKJYHr/TtOKIbP2Uyud2Z3O+dvpwp7yET+lVf4cHGI2/Oyh5Q8hbZ6TtvLXPIw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HXTmAa2yzpO/iyBPdD8ZDxtUgTo+xfdiCz9XeO6tHgg=; b=AbIB0jcyaHFLKFm1Gs2bGOYzBoSUTa/7AcS7duf/kMmy6NbXUqVFtJeC6mMkuQlC/qTm3fUtdP08/9tp9qT6zWMQjCLY6nIT7JumTy3FUx25SSYUiWzdv5oQRv7nO3Nd33PwojSWqSNCI+OCpNXNQ5lF9wzqErpqkRaivH3vbic= Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2080.namprd11.prod.outlook.com (10.174.99.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.24; Thu, 31 Oct 2019 01:48:28 +0000 Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.028; Thu, 31 Oct 2019 01:48:28 +0000 From: "Bernie Volz (volz)" To: Owen DeLong CC: Ted Lemon , Bud Millwood , "dhcwg@ietf.org" , IPv6 Operations Thread-Topic: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds Thread-Index: AQHVj4wF2N9x2yVd00KuCcRTFHdPxadz+cYg Date: Thu, 31 Oct 2019 01:48:28 +0000 Message-ID: References: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com; x-originating-ip: [173.38.117.77] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 50584efa-482f-4ea6-c9e4-08d75da46d6e x-ms-traffictypediagnostic: MWHPR1101MB2080: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 02070414A1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(366004)(376002)(39860400002)(136003)(346002)(189003)(199004)(6116002)(7736002)(55016002)(14444005)(256004)(236005)(3846002)(229853002)(74316002)(9686003)(54896002)(6306002)(790700001)(71200400001)(71190400001)(66066001)(86362001)(2906002)(6436002)(4326008)(6916009)(25786009)(8936002)(5660300002)(8676002)(66946007)(81166006)(966005)(76116006)(606006)(33656002)(11346002)(52536014)(66476007)(66446008)(64756008)(66556008)(14454004)(6246003)(26005)(53546011)(102836004)(6506007)(186003)(81156014)(76176011)(316002)(486006)(7696005)(99286004)(54906003)(478600001)(446003)(476003); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2080; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 2XH3ijdbzVm0aSmtKpvM9UCSIJlYvGH/gPkK6TfEZ13gcBpzFHiiWyP8e/hhAmf42SPf/WD353QqRda5I2Dhz7wH5Nm1goc/xR1A/wX7Ptrmm/w2ajUJy6cNKNL6zkun1osNLv/jyYoiaecOJZ3KWh6e5CutJeiFT5/n4TOxGXB6sT0Zj8HXA5Pc2Avx0OokMD/2kINy6v5HJHa+kIoLmN5bnJNsY0PPMwSGI3nY5QhJyooAA6X7elqRu4I/i8FqTlSSZ3g1/shD9NT/yeny6J5slJl8QSZ52skLQf+CTepdGtp7EI6FP3l8PM8V7L49OgR8cLZXNioszbCBeA3IsESSR4uyLM5YK00JmmlZhsyuVM/+tR8uaE86SoHeMEEumleydJdYD0Q29P01xz1tmpoN4II7LYx3Q31HnovVsit9+3au159njHxNsUd2Kk3S8f3fIYaJYlIUCTKugBAkp8hIpf+TEmvWae97NiWhxTs= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR1101MB22883C9D6880B84F103F884DCF630MWHPR1101MB2288_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 50584efa-482f-4ea6-c9e4-08d75da46d6e X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Oct 2019 01:48:28.6162 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: eZpPpRlcQHIuMLXxgAKkLOqTVZ2ES/o2PTyQKUiqc7OqROCgLFQVDq3rJPscxTds X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2080 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.13, xch-rcd-003.cisco.com X-Outbound-Node: alln-core-11.cisco.com Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Oct 2019 01:48:37 -0000 --_000_MWHPR1101MB22883C9D6880B84F103F884DCF630MWHPR1101MB2288_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T3dlbjoNCg0K4oCcVGhlIENQVSBzaG91bGQgd3JpdGUgdGhlIHNldCBvZiByZWNlaXZlZCBwcmVm aXhlcyBhbmQgdGhlaXIgZXhwZWN0ZWQgZXhwaXJhdGlvbiB0aW1lcyAocHJlZmVycmVkLCB2YWxp ZCkgdG8gcGVyc2lzdGVudCBzdG9yYWdlLiBUaGUgQ1BVIHNob3VsZCB1cGRhdGUgdGhpcyB3aGVu IGEgcGFja2V0IG1ha2luZyBhIGNoYW5nZSB0byB0aGVzZSB0aW1lcnMgaXMgcmVjZWl2ZWQuIEl0 IHNob3VsZCBtYWtlIGV2ZXJ5IGVmZm9ydCB0byBkZXByZWNhdGUgcHJlZml4ZXMgaXQgY2Fubm90 IHJlbmV3IGZyb20gdGhlIGxpbmtzIHdoZXJlIGl0IHByZXZpb3VzbHkgYWR2ZXJ0aXNlZCB0aGVt LuKAnQ0KDQpJIGZ1bGx5IGFncmVlIHdpdGggdGhhdC4gVGhhdCBpcyB0aGUgYmVzdCBhbmQgbW9z dCBjb21wbGV0ZSBzb2x1dGlvbi4gTm8gZGlzYWdyZWVtZW50IHRoZXJlLg0KDQpJIHdhcyBqdXN0 IHRyeWluZyB0byBjb21lIHVwIHdpdGggc29tZXRoaW5nIHRoYXQgY291bGQgaGVscCBpbiBjYXNl cyB3aGVyZSB0aGlzIHdhcyBub3QgcmVhc29uYWJsZS4NCg0KTm90ZSB0aGF0IGl0IGlzIHRlY2hu aWNhbGx5IGEgYml0IG1vcmUgdGhhbiBqdXN0IHdyaXRlIHRvIHN0b3JhZ2UgYXMgYSBjbG9jayBp cyBhbHNvIG5lZWRlZCB0byBrbm93IHdoZXRoZXIgdGhlIHByZWZpeCBuZWVkcyB0byBiZSBkZXBy ZWNhdGVkIG9yIG5vdC4gUGVyaGFwcyB0aW1lIGNhbiBjb21lIGZyb20gdGhlIG5ldHdvcmsgb3Ig dGhlIGRldmljZSBjYW4ganVzdCBkZXByZWNhdGUgcmVnYXJkbGVzcyBvZiB0aW1lIGlmIHRoZSBu ZXcgcHJlZml4IGlzIGRpZmZlcmVudCB3aGVuIGl0IHJlYm9vdHM/DQoNCg0KICAqICAgQmVybmll DQoNCkZyb206IE93ZW4gRGVMb25nIDxvd2VuQGRlbG9uZy5jb20+DQpTZW50OiBXZWRuZXNkYXks IE9jdG9iZXIgMzAsIDIwMTkgOTozOSBQTQ0KVG86IEJlcm5pZSBWb2x6ICh2b2x6KSA8dm9sekBj aXNjby5jb20+DQpDYzogVGVkIExlbW9uIDxtZWxsb25AZnVndWUuY29tPjsgQnVkIE1pbGx3b29k IDxidWRtQHdlaXJkLXNvbHV0aW9ucy5jb20+OyBkaGN3Z0BpZXRmLm9yZzsgSVB2NiBPcGVyYXRp b25zIDx2Nm9wc0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbdjZvcHNdIFtkaGN3Z10gU0xBQUMg cmVudW06IFByb2JsZW0gU3RhdGVtZW50ICYgT3BlcmF0aW9uYWwgd29ya2Fyb3VuZHMNCg0KDQoN Cg0KT24gT2N0IDMwLCAyMDE5LCBhdCA1OjUzIFBNLCBCZXJuaWUgVm9seiAodm9seikgPHZvbHpA Y2lzY28uY29tPG1haWx0bzp2b2x6QGNpc2NvLmNvbT4+IHdyb3RlOg0KDQpNYXJrIFNtaXRoIG9u IHY2b3BzIG1sIHdyb3RlOg0KDQrigJxJIHRoaW5rIE9sZSBvYnNlcnZlZCB0aGF0IHRoaXMgaXMg Y29udHJhcnkgdG8gd2hhdCB0aGUgUEQgcHJlZml4J3MgVmFsaWQgTGlmZXRpbWUgc2FpZCB3b3Vs ZCBiZSB0aGUgY2FzZS4gVGhlIElTUCBzdXBwbGllZCBhIFBEIFByZWZpeCB3aXRoIGEgVmFsaWQg TGlmZXRpbWUgb2YgWCBzZWNvbmRzLCBhbmQgdGhlbiBicm9rZSB0aGF0IHByb21pc2UgYnkgYWJy dXB0bHkgY2hhbmdpbmcgYWRkcmVzc2luZyBiZWZvcmUgWCBzZWNvbmRzLiBJU1BzIHNob3VsZCBi ZSBleHBlY3RlZCB0byBsaXZlIHVwIHRvIHRoZWlyIFZhbGlkIExpZmV0aW1lIHByb21pc2VzLuKA nQ0KDQpTdXJlLCBidXQgaW4gdGhlIHJlYWwgd29ybGQsIHRoZXJlIGlzIGFuIGVudGlyZSBjbGFz cyBvZiBJU1BzIHRoYXQgaGF2ZSByZXBlYXRlZGx5IGRlbW9uc3RyYXRlZCB1dHRlciBhbmQgbmVh ciBjb21wbGV0ZSBkaXNyZWdhcmQgZm9yIHN1Y2ggbmljZXRpZXMgYXMgcHJvbWlzZXMgdG8gY3Vz dG9tZXJzIChlLmcuIG1vc3QgbWFqb3IgZXllYmFsbCBJU1BzIGluIHRoZSBVUyBhdCBhIG1pbmlt dW0pLCBzbyBoYXZpbmcgQ1BFIGJlaGF2aW9yIHRoYXQgYWNjb21tb2RhdGVzIHRoaXMgZmFjdCBp biBmYXZvciBvZiB0aGUgdXNlciB3aWxsIGxpa2VseSBsZWFkIHRvIGEgYmV0dGVyIHVzZXIgZXhw ZXJpZW5jZSB0aGFuIHN0b21waW5nIG9yIGZlZXQgYW5kIGluc2lzdGluZyB0aGF0IElTUHMgYmVo YXZlIHByb3Blcmx5Lg0KDQoNCkFuZCBpdCB3b3VsZCBiZSB3b3J0aCBiZXR0ZXIgdW5kZXJzdGFu ZGluZyBleGFjdGx5IHdoYXQgaGFwcGVucyBpbiB0aGVzZSBzaXR1YXRpb25zIChwZXJoYXBzIGl0 IHdhcyBjb3ZlcmVkIGVhcmxpZXIgYnV0IEkgbWlzc2VkIG9yIGxvc3QgdGhhdCkgIC4uLiBpZiB0 aGUgUHJlZml4IGNvbmZpZ3VyYXRpb24gcmVhbGx5IGlzIHJhZGljYWxseSBjaGFuZ2VkLCBldmVu IHRoZSBTUCBkaGNwIHNlcnZlciBtYXkgYmUgdW5hYmxlIHRvIGFzc2lzdC4NCg0KV2l0aCB3aGF0 IGlzIGJlaW5nIHByb3Bvc2VkLCB0aGUgU1AgREhDUCBzZXJ2ZXIgZG9lc27igJl0IG5lZWQgdG8g YXNzaXN0LiBUaGUgQ1BVIHNob3VsZCB3cml0ZSB0aGUgc2V0IG9mIHJlY2VpdmVkIHByZWZpeGVz IGFuZCB0aGVpciBleHBlY3RlZCBleHBpcmF0aW9uIHRpbWVzIChwcmVmZXJyZWQsIHZhbGlkKSB0 byBwZXJzaXN0ZW50IHN0b3JhZ2UuIFRoZSBDUFUgc2hvdWxkIHVwZGF0ZSB0aGlzIHdoZW4gYSBw YWNrZXQgbWFraW5nIGEgY2hhbmdlIHRvIHRoZXNlIHRpbWVycyBpcyByZWNlaXZlZC4gSXQgc2hv dWxkIG1ha2UgZXZlcnkgZWZmb3J0IHRvIGRlcHJlY2F0ZSBwcmVmaXhlcyBpdCBjYW5ub3QgcmVu ZXcgZnJvbSB0aGUgbGlua3Mgd2hlcmUgaXQgcHJldmlvdXNseSBhZHZlcnRpc2VkIHRoZW0uDQoN ClRoaXMgZG9lc27igJl0IHJlcXVpcmUgYW55dGhpbmcgc3BlY2lhbCBvbiB0aGUgU1Agc2lkZS4N Cg0KT3dlbg0KDQoNCg0KLSBCZXJuaWUNCg0KT24gT2N0IDMwLCAyMDE5LCBhdCA3OjMyIFBNLCBU ZWQgTGVtb24gPG1lbGxvbkBmdWd1ZS5jb208bWFpbHRvOm1lbGxvbkBmdWd1ZS5jb20+PiB3cm90 ZToNCk9uIE9jdCAzMCwgMjAxOSwgYXQgNzoxOCBQTSwgQnVkIE1pbGx3b29kIDxidWRtQHdlaXJk LXNvbHV0aW9ucy5jb208bWFpbHRvOmJ1ZG1Ad2VpcmQtc29sdXRpb25zLmNvbT4+IHdyb3RlOg0K SXQncyBub3Qgc28gbXVjaCBhYm91dCB0aGUgbGlmZXRpbWUgb2YgdGhlIHByZWZpeCBhcyBhYm91 dCBwdXR0aW5nIHR3bw0KcHJlZml4ZXMgaW4gYSByZXBseSB0byBhIHJlcXVlc3QsIHJpZ2h0PyBB bmQgYW55IENQRSB0aGF0IGNhbid0IGhhbmRsZQ0KdGhhdCBncmFjZWZ1bGx5IGdldHMgaG9zZWQu IEkgYWdyZWUgdGhhdCBwcm92aWRlcnMgb2YgY291cnNlIG5lZWQgdG8NCnRlc3QgdGhpcyBmZWF0 dXJlLCBhbmQgYSBzZXJ2ZXIgc2lkZSBjb25maWd1cmF0aW9uIG1ha2VzIHRoYXQNCnBvc3NpYmxl LiBBbHNvLCBJJ20gYWxsIGZvciBmaXJtd2FyZSB1cGdyYWRlcywgYnV0IHJlcXVpcmluZyBpdCB0 byBmaXgNCmEgaG9zZWQgQ1BFIGlzIGNvdWxkIGJlIGEgYmlnIGlzc3VlLg0KDQpUaGUgdGhpbmcg aXMsIGlmIHRoZXkgY2Fu4oCZdCBoYW5kbGUgYSB0d28tUEQgcmVzcG9uc2UsIHRoZXkgYXJlIG91 dCBvZiBzcGVjLiAgVGhpcyBpcyBhbHJlYWR5IGFsbG93ZWQgaW4gdGhlIFJGQy4NCg0KR3JhbnRl ZCwgdGhlcmUgbWF5IGJlIHBsZW50eSBvZiBDUEVzIHRoYXQgd29u4oCZdCBoYW5kbGUgdGhpcyBj b3JyZWN0bHkuICAgSWYgdGhleSBjYW4gYmUgYnJpY2tlZCBieSBhIG1lc3NhZ2Ugd2l0aCB0d28g UERzLCB0aGVuIGJyaWNraW5nIHRoZW0gaXMgdGhlIHJpZ2h0IHRoaW5nIHRvIGRvLCBiZWNhdXNl IHRoYXTigJlzIGEgemVyby1kYXkgdnVsbmVyYWJpbGl0eSB3aWRlIG9wZW4gb24gdGhlIGN1c3Rv bWVyIG5ldHdvcmsuDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQp2Nm9wcyBtYWlsaW5nIGxpc3QNCnY2b3BzQGlldGYub3JnPG1haWx0bzp2Nm9wc0Bp ZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vdjZvcHMNCg0K --_000_MWHPR1101MB22883C9D6880B84F103F884DCF630MWHPR1101MB2288_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5Ok1lbmxvLVJlZ3Vs YXI7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAgMDt9DQovKiBTdHlsZSBEZWZpbml0aW9u cyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46 MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9u OnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1z b0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGlu Ow0KCW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6 LjVpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1h bDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjEN Cgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30N CmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0 aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6NDYwNjEzNzgxOw0KCW1zby1saXN0LXR5 cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczo1MzIwODA1OTAgNzcxMzc0ODAwIDY3 Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4 NjkxIDY3Njk4NjkzO30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6LTsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3Qg bDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6 IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0 IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2Rp bmdzO30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGlu O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp Zl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVy cGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5P d2VuOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj7igJxUaGUgQ1BVIHNob3VsZCB3cml0ZSB0aGUg c2V0IG9mIHJlY2VpdmVkIHByZWZpeGVzIGFuZCB0aGVpciBleHBlY3RlZCBleHBpcmF0aW9uIHRp bWVzIChwcmVmZXJyZWQsIHZhbGlkKSB0byBwZXJzaXN0ZW50IHN0b3JhZ2UuIFRoZSBDUFUgc2hv dWxkIHVwZGF0ZSB0aGlzIHdoZW4gYSBwYWNrZXQgbWFraW5nIGEgY2hhbmdlIHRvIHRoZXNlIHRp bWVycyBpcyByZWNlaXZlZC4gSXQgc2hvdWxkIG1ha2UgZXZlcnkNCiBlZmZvcnQgdG8gZGVwcmVj YXRlIHByZWZpeGVzIGl0IGNhbm5vdCByZW5ldyBmcm9tIHRoZSBsaW5rcyB3aGVyZSBpdCBwcmV2 aW91c2x5IGFkdmVydGlzZWQgdGhlbS7igJ08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBmdWxs eSBhZ3JlZSB3aXRoIHRoYXQuIFRoYXQgaXMgdGhlIGJlc3QgYW5kIG1vc3QgY29tcGxldGUgc29s dXRpb24uIE5vIGRpc2FncmVlbWVudCB0aGVyZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSB3 YXMganVzdCB0cnlpbmcgdG8gY29tZSB1cCB3aXRoIHNvbWV0aGluZyB0aGF0IGNvdWxkIGhlbHAg aW4gY2FzZXMgd2hlcmUgdGhpcyB3YXMgbm90IHJlYXNvbmFibGUuPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPk5vdGUgdGhhdCBpdCBpcyB0ZWNobmljYWxseSBhIGJpdCBtb3JlIHRoYW4ganVzdCB3 cml0ZSB0byBzdG9yYWdlIGFzIGEgY2xvY2sgaXMgYWxzbyBuZWVkZWQgdG8ga25vdyB3aGV0aGVy IHRoZSBwcmVmaXggbmVlZHMgdG8gYmUgZGVwcmVjYXRlZCBvciBub3QuIFBlcmhhcHMgdGltZSBj YW4gY29tZSBmcm9tIHRoZSBuZXR3b3JrIG9yIHRoZSBkZXZpY2UgY2FuIGp1c3QgZGVwcmVjYXRl IHJlZ2FyZGxlc3Mgb2YNCiB0aW1lIGlmIHRoZSBuZXcgcHJlZml4IGlzIGRpZmZlcmVudCB3aGVu IGl0IHJlYm9vdHM/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjx1bCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHR5cGU9ImRpc2MiPg0K PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1s aXN0OmwwIGxldmVsMSBsZm8xIj5CZXJuaWU8bzpwPjwvbzpwPjwvbGk+PC91bD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBp biAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBPd2VuIERlTG9u ZyAmbHQ7b3dlbkBkZWxvbmcuY29tJmd0OyA8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBP Y3RvYmVyIDMwLCAyMDE5IDk6MzkgUE08YnI+DQo8Yj5Ubzo8L2I+IEJlcm5pZSBWb2x6ICh2b2x6 KSAmbHQ7dm9sekBjaXNjby5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBUZWQgTGVtb24gJmx0O21l bGxvbkBmdWd1ZS5jb20mZ3Q7OyBCdWQgTWlsbHdvb2QgJmx0O2J1ZG1Ad2VpcmQtc29sdXRpb25z LmNvbSZndDs7IGRoY3dnQGlldGYub3JnOyBJUHY2IE9wZXJhdGlvbnMgJmx0O3Y2b3BzQGlldGYu b3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW3Y2b3BzXSBbZGhjd2ddIFNMQUFDIHJl bnVtOiBQcm9ibGVtIFN0YXRlbWVudCAmYW1wOyBPcGVyYXRpb25hbCB3b3JrYXJvdW5kczxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+ DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0 Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBPY3QgMzAsIDIwMTksIGF0IDU6NTMg UE0sIEJlcm5pZSBWb2x6ICh2b2x6KSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnZvbHpAY2lzY28uY29t Ij52b2x6QGNpc2NvLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+TWFyayBTbWl0aCBvbiB2Nm9wcyBtbCB3cm90ZTogPG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj7igJxJIHRoaW5rIE9sZSBv YnNlcnZlZCB0aGF0IHRoaXMgaXMgY29udHJhcnkgdG8gd2hhdCB0aGUgUEQgcHJlZml4J3MmbmJz cDtWYWxpZCBMaWZldGltZSBzYWlkIHdvdWxkIGJlIHRoZSBjYXNlLiBUaGUgSVNQIHN1cHBsaWVk IGEgUEQgUHJlZml4Jm5ic3A7d2l0aCBhIFZhbGlkIExpZmV0aW1lIG9mIFggc2Vjb25kcywgYW5k IHRoZW4gYnJva2UgdGhhdCBwcm9taXNlIGJ5Jm5ic3A7YWJydXB0bHkgY2hhbmdpbmcgYWRkcmVz c2luZyBiZWZvcmUNCiBYIHNlY29uZHMuIElTUHMgc2hvdWxkIGJlIGV4cGVjdGVkJm5ic3A7dG8g bGl2ZSB1cCB0byB0aGVpciBWYWxpZCBMaWZldGltZSBwcm9taXNlcy7igJ08bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+U3VyZSwgYnV0IGluIHRoZSByZWFsIHdvcmxkLCB0aGVyZSBpcyBhbiBlbnRpcmUg Y2xhc3Mgb2YgSVNQcyB0aGF0IGhhdmUgcmVwZWF0ZWRseSBkZW1vbnN0cmF0ZWQgdXR0ZXIgYW5k IG5lYXIgY29tcGxldGUgZGlzcmVnYXJkIGZvciBzdWNoIG5pY2V0aWVzIGFzIHByb21pc2VzIHRv IGN1c3RvbWVycyAoZS5nLiBtb3N0IG1ham9yIGV5ZWJhbGwgSVNQcyBpbiB0aGUgVVMgYXQgYSBt aW5pbXVtKSwgc28gaGF2aW5nDQogQ1BFIGJlaGF2aW9yIHRoYXQgYWNjb21tb2RhdGVzIHRoaXMg ZmFjdCBpbiBmYXZvciBvZiB0aGUgdXNlciB3aWxsIGxpa2VseSBsZWFkIHRvIGEgYmV0dGVyIHVz ZXIgZXhwZXJpZW5jZSB0aGFuIHN0b21waW5nIG9yIGZlZXQgYW5kIGluc2lzdGluZyB0aGF0IElT UHMgYmVoYXZlIHByb3Blcmx5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFuZCBpdCB3b3VsZCBiZSB3b3J0aCBiZXR0 ZXIgdW5kZXJzdGFuZGluZyBleGFjdGx5IHdoYXQgaGFwcGVucyBpbiB0aGVzZSBzaXR1YXRpb25z IChwZXJoYXBzIGl0IHdhcyBjb3ZlcmVkIGVhcmxpZXIgYnV0IEkgbWlzc2VkIG9yIGxvc3QgdGhh dCkgJm5ic3A7Li4uIGlmIHRoZSBQcmVmaXggY29uZmlndXJhdGlvbiByZWFsbHkgaXMgcmFkaWNh bGx5IGNoYW5nZWQsIGV2ZW4gdGhlIFNQIGRoY3Agc2VydmVyIG1heSBiZQ0KIHVuYWJsZSB0byBh c3Npc3QuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldpdGggd2hhdCBpcyBiZWluZyBwcm9wb3NlZCwg dGhlIFNQIERIQ1Agc2VydmVyIGRvZXNu4oCZdCBuZWVkIHRvIGFzc2lzdC4gVGhlIENQVSBzaG91 bGQgd3JpdGUgdGhlIHNldCBvZiByZWNlaXZlZCBwcmVmaXhlcyBhbmQgdGhlaXIgZXhwZWN0ZWQg ZXhwaXJhdGlvbiB0aW1lcyAocHJlZmVycmVkLCB2YWxpZCkgdG8gcGVyc2lzdGVudCBzdG9yYWdl LiBUaGUgQ1BVIHNob3VsZCB1cGRhdGUgdGhpcyB3aGVuIGEgcGFja2V0DQogbWFraW5nIGEgY2hh bmdlIHRvIHRoZXNlIHRpbWVycyBpcyByZWNlaXZlZC4gSXQgc2hvdWxkIG1ha2UgZXZlcnkgZWZm b3J0IHRvIGRlcHJlY2F0ZSBwcmVmaXhlcyBpdCBjYW5ub3QgcmVuZXcgZnJvbSB0aGUgbGlua3Mg d2hlcmUgaXQgcHJldmlvdXNseSBhZHZlcnRpc2VkIHRoZW0uPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgZG9lc27igJl0IHJlcXVpcmUg YW55dGhpbmcgc3BlY2lhbCBvbiB0aGUgU1Agc2lkZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T3dlbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+ DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0 Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gQmVybmllPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWJvdHRvbToxMi4wcHQiPjxicj4NCk9uIE9jdCAzMCwgMjAxOSwgYXQgNzozMiBQTSwgVGVkIExl bW9uICZsdDs8YSBocmVmPSJtYWlsdG86bWVsbG9uQGZ1Z3VlLmNvbSI+bWVsbG9uQGZ1Z3VlLmNv bTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHls ZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5PbiBPY3QgMzAsIDIwMTksIGF0IDc6MTggUE0sIEJ1ZCBNaWxsd29vZCAm bHQ7PGEgaHJlZj0ibWFpbHRvOmJ1ZG1Ad2VpcmQtc29sdXRpb25zLmNvbSI+YnVkbUB3ZWlyZC1z b2x1dGlvbnMuY29tPC9hPiZndDsgd3JvdGU6DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8Ymxv Y2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTomcXVvdDtNZW5sby1SZWd1bGFyJnF1b3Q7LHNlcmlmIj5JdCdzIG5vdCBzbyBt dWNoIGFib3V0IHRoZSBsaWZldGltZSBvZiB0aGUgcHJlZml4IGFzIGFib3V0IHB1dHRpbmcgdHdv PGJyPg0KcHJlZml4ZXMgaW4gYSByZXBseSB0byBhIHJlcXVlc3QsIHJpZ2h0PyBBbmQgYW55IENQ RSB0aGF0IGNhbid0IGhhbmRsZTxicj4NCnRoYXQgZ3JhY2VmdWxseSBnZXRzIGhvc2VkLiBJIGFn cmVlIHRoYXQgcHJvdmlkZXJzIG9mIGNvdXJzZSBuZWVkIHRvPGJyPg0KdGVzdCB0aGlzIGZlYXR1 cmUsIGFuZCBhIHNlcnZlciBzaWRlIGNvbmZpZ3VyYXRpb24gbWFrZXMgdGhhdDxicj4NCnBvc3Np YmxlLiBBbHNvLCBJJ20gYWxsIGZvciBmaXJtd2FyZSB1cGdyYWRlcywgYnV0IHJlcXVpcmluZyBp dCB0byBmaXg8YnI+DQphIGhvc2VkIENQRSBpcyBjb3VsZCBiZSBhIGJpZyBpc3N1ZS48L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+VGhlIHRoaW5nIGlzLCBpZiB0aGV5IGNhbuKAmXQgaGFuZGxlIGEgdHdvLVBEIHJlc3Bv bnNlLCB0aGV5IGFyZSBvdXQgb2Ygc3BlYy4gJm5ic3A7VGhpcyBpcyBhbHJlYWR5IGFsbG93ZWQg aW4gdGhlIFJGQy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+R3JhbnRlZCwgdGhlcmUgbWF5IGJlIHBsZW50eSBvZiBDUEVzIHRoYXQgd29u4oCZ dCBoYW5kbGUgdGhpcyBjb3JyZWN0bHkuICZuYnNwOyBJZiB0aGV5IGNhbiBiZSBicmlja2VkIGJ5 IGEgbWVzc2FnZSB3aXRoIHR3byBQRHMsIHRoZW4gYnJpY2tpbmcgdGhlbSBpcyB0aGUgcmlnaHQg dGhpbmcgdG8gZG8sIGJlY2F1c2UgdGhhdOKAmXMgYSB6ZXJvLWRheSB2dWxuZXJhYmlsaXR5IHdp ZGUgb3BlbiBvbiB0aGUgY3VzdG9tZXIgbmV0d29yay48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4N CnY2b3BzIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzp2Nm9wc0BpZXRmLm9yZyI+ djZvcHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby92Nm9wcyI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by92Nm9wczwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_MWHPR1101MB22883C9D6880B84F103F884DCF630MWHPR1101MB2288_-- From nobody Wed Oct 30 19:12:51 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F276F1200FE; Wed, 30 Oct 2019 19:12:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.496 X-Spam-Level: X-Spam-Status: No, score=-0.496 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VY6D2Kgg22ds; Wed, 30 Oct 2019 19:12:41 -0700 (PDT) Received: from mail-oi1-x22b.google.com (mail-oi1-x22b.google.com [IPv6:2607:f8b0:4864:20::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 885A0120058; Wed, 30 Oct 2019 19:12:41 -0700 (PDT) Received: by mail-oi1-x22b.google.com with SMTP id g81so3826587oib.8; Wed, 30 Oct 2019 19:12:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=JMZQlqC6lRY0rCdL/GQFOvfmNiZMuL1w+XPqWfKzKso=; b=Fv3I6f8yQgQL1grA7HSbhS7QredjP4No0boZY5Nna1E3gc7n//37QSRyD3PRl+ed8b W4JJYDV0ianBQGB2/1CwKTmCjLCitZKNJkdi/Ghma7AQFwbe2xVDOImcKwB7iYig05aR JzlyjfJ/oj3PbmkGCLzwiTfmnoMgCdCcWzcpj5VBBF75uQultP3x+HtqRm2S1hEC7Iy9 Yox727LOsdVX8OQM2ROE7UhOVw4ZH70idMdJXwgPeBKY4vS8O22VY9Hx1ESTdkjLnbPd id4UyhYV745VqK2uMdoqhbvG/UruoExEaq0sR82su94hW4Ag4I4MNFT+TV2snRCRKtrf jnSA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=JMZQlqC6lRY0rCdL/GQFOvfmNiZMuL1w+XPqWfKzKso=; b=CsEsArmTOF3nS0DyEuSsZ9GynwdgQ717Fvrjfu3Pn8mjwFvypT2W6jCiEmnoPuJ1Ml 9fQWdNY3K3WQjzt4SNEfA7/boyTnJjnYYe6e/4TzG2AzQhQDR2Iy4Xrk1tj5LStBLxK1 /HwaiW2jausesXZVbEcz6DTAuGPeXAGYkmwNg3CATkBHIddZf84Fha7kbwADflxaX88T PPTyDmivou4nPMAydtRc8ykZ9+6Bhn6bcd42jilUf53xc6LaOKPMvPdLwb0YGzkrBzfJ 7/CtyexnsNOxZGJ8pCj83AGlK++J7VIRAZThQiirtdPOjdYdBpnbeqJfX/+p43wDdP/B 9iCQ== X-Gm-Message-State: APjAAAW58ujaf1JflwkaG/q83ysq+52wEt4dGwOb1C5lbS4EbrBUibtc JwTjAa9pMCNYkrQZhmSu0tLP0VEKnWV4mwhtZhY= X-Google-Smtp-Source: APXvYqx4qi/EqqjAk82SKSZazsSxxwptzJS2Frcsjbv+m9blfVoLbi3LZsCSPg0kdXVrXHiD5YanCzdki57C/nGb7M4= X-Received: by 2002:aca:f553:: with SMTP id t80mr2004102oih.60.1572487960802; Wed, 30 Oct 2019 19:12:40 -0700 (PDT) MIME-Version: 1.0 References: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> In-Reply-To: From: Mark Smith Date: Thu, 31 Oct 2019 13:12:30 +1100 Message-ID: To: Owen DeLong Cc: "Bernie Volz (volz)" , dhcwg@ietf.org, IPv6 Operations , Bud Millwood Content-Type: multipart/alternative; boundary="0000000000005139f005962b6251" Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Oct 2019 02:12:43 -0000 --0000000000005139f005962b6251 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, 31 Oct 2019, 12:40 Owen DeLong, wrote: > > > On Oct 30, 2019, at 5:53 PM, Bernie Volz (volz) wrote: > > Mark Smith on v6ops ml wrote: > > =E2=80=9CI think Ole observed that this is contrary to what the PD prefix= 's Valid > Lifetime said would be the case. The ISP supplied a PD Prefix with a Vali= d > Lifetime of X seconds, and then broke that promise by abruptly changing > addressing before X seconds. ISPs should be expected to live up to their > Valid Lifetime promises.=E2=80=9D > > > Sure, but in the real world, there is an entire class of ISPs that have > repeatedly demonstrated utter and near complete disregard for such niceti= es > as promises to customers (e.g. most major eyeball ISPs in the US at a > minimum), so having CPE behavior that accommodates this fact in favor of > the user will likely lead to a better user experience than stomping or fe= et > and insisting that ISPs behave properly. > So if some enterprise network operators said to the IETF, "We want to be able to change the VLAN assignments of any of our IPv6 hosts randomly and unexpectedly, including at 9:10 am when everybody is checking their email, and have the hosts handle that entirely seamlessly." would we consider that to be a reasonable request? > And it would be worth better understanding exactly what happens in these > situations (perhaps it was covered earlier but I missed or lost that) ..= . > if the Prefix configuration really is radically changed, even the SP dhcp > server may be unable to assist. > > > With what is being proposed, the SP DHCP server doesn=E2=80=99t need to a= ssist. > The CPU should write the set of received prefixes and their expected > expiration times (preferred, valid) to persistent storage. The CPU should > update this when a packet making a change to these timers is received. It > should make every effort to deprecate prefixes it cannot renew from the > links where it previously advertised them. > > This doesn=E2=80=99t require anything special on the SP side. > > Owen > > > - Bernie > > On Oct 30, 2019, at 7:32 PM, Ted Lemon wrote: > > On Oct 30, 2019, at 7:18 PM, Bud Millwood > wrote: > > It's not so much about the lifetime of the prefix as about putting two > prefixes in a reply to a request, right? And any CPE that can't handle > that gracefully gets hosed. I agree that providers of course need to > test this feature, and a server side configuration makes that > possible. Also, I'm all for firmware upgrades, but requiring it to fix > a hosed CPE is could be a big issue. > > > The thing is, if they can=E2=80=99t handle a two-PD response, they are ou= t of > spec. This is already allowed in the RFC. > > Granted, there may be plenty of CPEs that won=E2=80=99t handle this corre= ctly. > If they can be bricked by a message with two PDs, then bricking them is t= he > right thing to do, because that=E2=80=99s a zero-day vulnerability wide o= pen on the > customer network. > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > > > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops > --0000000000005139f005962b6251 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Thu, 31 Oct 2019, 12:40 Owen DeLong, <owen@delong.com> wrote:


On Oct 30, 2019, at = 5:53 PM, Bernie Volz (volz) <volz@cisco.com> wrote:

Mark Smith on v6ops ml wrote:

=E2=80=9CI think = Ole observed that this is contrary to what the PD prefix's=C2=A0Valid L= ifetime said would be the case. The ISP supplied a PD Prefix=C2=A0with a Va= lid Lifetime of X seconds, and then broke that promise by=C2=A0abruptly changing addressing before X seconds. ISPs should be expe= cted=C2=A0to live up to their Valid Lifetime promises.=E2=80=9D

Sure, but in the real world, there= is an entire class of ISPs that have repeatedly demonstrated utter and nea= r complete disregard for such niceties as promises to customers (e.g. most = major eyeball ISPs in the US at a minimum), so having CPE behavior that acc= ommodates this fact in favor of the user will likely lead to a better user = experience than stomping or feet and insisting that ISPs behave properly.

So if some enterprise network operators said to the IETF,

"We want to be able to change = the VLAN assignments of any of our IPv6 hosts randomly and unexpectedly, in= cluding at 9:10 am when everybody is checking their email, and have the hos= ts handle that entirely seamlessly."

=
would we consider that to be a reasonable request?
<= div dir=3D"auto">


And it would be worth better understanding exactly what happens in the= se situations (perhaps it was covered earlier but I missed or lost that) = =C2=A0... if the Prefix configuration really is radically changed, even the= SP dhcp server may be unable to assist.

With what is being proposed, the SP DHCP server doesn=E2=80=99t = need to assist. The CPU should write the set of received prefixes and their= expected expiration times (preferred, valid) to persistent storage. The CP= U should update this when a packet making a change to these timers is recei= ved. It should make every effort to deprecate prefixes it cannot renew from= the links where it previously advertised them.

Th= is doesn=E2=80=99t require anything special on the SP side.

<= /div>
Owen


- Bernie

On Oct 30, 2019, at 7:32 PM, Ted Lemon <mellon@fugue.com> wrote:
On Oct 30, 2019, at 7:18 PM, Bud Millwood <budm@w= eird-solutions.com> wrote:
It's not so much about the lifetime of the prefix as about putting two prefixes in a reply to a request, right? And any CPE that can't handle that gracefully gets hosed. I agree that providers of course need to
test this feature, and a server side configuration makes that
possible. Also, I'm all for firmware upgrades, but requiring it to fix a hosed CPE is could be a big issue.

The thing is, if they can=E2=80=99t handle a two-PD response, they are= out of spec.=C2=A0 This is already allowed in the RFC.

Granted, there may be plenty of CPEs that won=E2=80=99t handle this co= rrectly. =C2=A0 If they can be bricked by a message with two PDs, then bric= king them is the right thing to do, because that=E2=80=99s a zero-day vulne= rability wide open on the customer network.

_______________________________________________
v6ops mailing list
v6ops@= ietf.org
https://www.ietf.org/mailman/listinfo/v6o= ps

______________________________= _________________
v6ops mailing list
v6op= s@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops
--0000000000005139f005962b6251-- From nobody Wed Oct 30 19:18:07 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B15A6120115; Wed, 30 Oct 2019 19:17:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.998 X-Spam-Level: X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2htOvTDgxsEt; Wed, 30 Oct 2019 19:17:56 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 102E71200FE; Wed, 30 Oct 2019 19:17:53 -0700 (PDT) Received: from [172.20.0.85] (rrcs-97-79-186-2.sw.biz.rr.com [97.79.186.2]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9V28vT6013768 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 30 Oct 2019 19:09:01 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9V28vT6013768 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572487746; bh=0RTvFG2f7cvKOOwNW9uWRGB6I1uuPpmeYP9FXD1bvTk=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=iUgxNnJ5KeOY68xozzTHo6aNixdKGCXPwoB3drxpNizxfK9qLSQQKBe0iOaT8OM/0 JfIm2kzz27Bs85vANqsPjxz3GjuRiU543TrzFqwbQuTs+9Ssyn0Xa8Hx8MIAtt8G/l VHUCPObs1+q0Z6rs+cylZI6eAlBtzW+w4dJ2wnrs= From: Owen DeLong Message-Id: <0CF14BE1-F12F-4BB8-937F-ED513D370316@delong.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_081C5415-863F-400D-B6C9-4D2BC6D4EC9A" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Date: Wed, 30 Oct 2019 19:08:56 -0700 In-Reply-To: Cc: Ted Lemon , Bud Millwood , "dhcwg@ietf.org" , IPv6 Operations To: "Bernie Volz (volz)" References: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> X-Mailer: Apple Mail (2.3445.104.8) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Wed, 30 Oct 2019 19:09:06 -0700 (PDT) Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Oct 2019 02:17:59 -0000 --Apple-Mail=_081C5415-863F-400D-B6C9-4D2BC6D4EC9A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 30, 2019, at 6:48 PM, Bernie Volz (volz) = wrote: >=20 > Owen: > =20 > =E2=80=9CThe CPU should write the set of received prefixes and their = expected expiration times (preferred, valid) to persistent storage. The = CPU should update this when a packet making a change to these timers is = received. It should make every effort to deprecate prefixes it cannot = renew from the links where it previously advertised them.=E2=80=9D Argh=E2=80=A6 That should read CPE, not CPU. =20 > I fully agree with that. That is the best and most complete solution. = No disagreement there. > =20 > I was just trying to come up with something that could help in cases = where this was not reasonable. Such as? I cannot fathom a case where this isn=E2=80=99t reasonable. All = CPE has non-volatile memory for storing settings. We=E2=80=99re talking = about adding 24 octets per prefix and unlikely more than 3 prefixes per = interface. Assuming no more than 4 (routed) interfaces on your basic = home gateway, that=E2=80=99s a maximum of 12 prefixes for a total of 288 = octets of storage. =20 > Note that it is technically a bit more than just write to storage as a = clock is also needed to know whether the prefix needs to be deprecated = or not. Perhaps time can come from the network or the device can just = deprecate regardless of time if the new prefix is different when it = reboots? Nope=E2=80=A6 It isn=E2=80=99t=E2=80=A6. The clock is an existing = function of the CPE. All you need to write is the expected expiration = time. (Current clock + prefix timer) to the non-volatile storage. You = don=E2=80=99t need to count down the timer values. The clock can be internal or synchronized to NTP or some other time = service, but virtually every CPE already has an internal clock, so = there=E2=80=99s no additional requirement here. In fact, the CPE _HAS_ = to have a clock already to know when prefixes time out without a reboot = or flash renumbering event. Owen > =20 > Bernie > =20 > From: Owen DeLong >=20 > Sent: Wednesday, October 30, 2019 9:39 PM > To: Bernie Volz (volz) > > Cc: Ted Lemon >; Bud = Millwood >; = dhcwg@ietf.org ; IPv6 Operations > > Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & = Operational workarounds > =20 > =20 >=20 >=20 > On Oct 30, 2019, at 5:53 PM, Bernie Volz (volz) > wrote: > =20 > Mark Smith on v6ops ml wrote:=20 > =20 > =E2=80=9CI think Ole observed that this is contrary to what the PD = prefix's Valid Lifetime said would be the case. The ISP supplied a PD = Prefix with a Valid Lifetime of X seconds, and then broke that promise = by abruptly changing addressing before X seconds. ISPs should be = expected to live up to their Valid Lifetime promises.=E2=80=9D > =20 > Sure, but in the real world, there is an entire class of ISPs that = have repeatedly demonstrated utter and near complete disregard for such = niceties as promises to customers (e.g. most major eyeball ISPs in the = US at a minimum), so having CPE behavior that accommodates this fact in = favor of the user will likely lead to a better user experience than = stomping or feet and insisting that ISPs behave properly. >=20 >=20 > And it would be worth better understanding exactly what happens in = these situations (perhaps it was covered earlier but I missed or lost = that) ... if the Prefix configuration really is radically changed, even = the SP dhcp server may be unable to assist. > =20 > With what is being proposed, the SP DHCP server doesn=E2=80=99t need = to assist. The CPU should write the set of received prefixes and their = expected expiration times (preferred, valid) to persistent storage. The = CPU should update this when a packet making a change to these timers is = received. It should make every effort to deprecate prefixes it cannot = renew from the links where it previously advertised them. > =20 > This doesn=E2=80=99t require anything special on the SP side. > =20 > Owen >=20 >=20 > =20 > - Bernie >=20 > On Oct 30, 2019, at 7:32 PM, Ted Lemon > wrote: >=20 > On Oct 30, 2019, at 7:18 PM, Bud Millwood > wrote: > It's not so much about the lifetime of the prefix as about putting two > prefixes in a reply to a request, right? And any CPE that can't handle > that gracefully gets hosed. I agree that providers of course need to > test this feature, and a server side configuration makes that > possible. Also, I'm all for firmware upgrades, but requiring it to fix > a hosed CPE is could be a big issue. > =20 > The thing is, if they can=E2=80=99t handle a two-PD response, they are = out of spec. This is already allowed in the RFC. > =20 > Granted, there may be plenty of CPEs that won=E2=80=99t handle this = correctly. If they can be bricked by a message with two PDs, then = bricking them is the right thing to do, because that=E2=80=99s a = zero-day vulnerability wide open on the customer network. > =20 > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops = --Apple-Mail=_081C5415-863F-400D-B6C9-4D2BC6D4EC9A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Oct 30, 2019, at 6:48 PM, Bernie Volz (volz) <volz@cisco.com> = wrote:

Owen:
 
=E2=80=9CTh= e CPU should write the set of received prefixes and their expected = expiration times (preferred, valid) to persistent storage. The CPU = should update this when a packet making a change to these timers is = received. It should make every effort to deprecate prefixes it cannot = renew from the links where it previously advertised = them.=E2=80=9D

Argh=E2=80=A6 That should read CPE, not = CPU.
 
I fully agree with that. = That is the best and most complete solution. No disagreement there.
 
I was = just trying to come up with something that could help in cases where = this was not reasonable.

Such as? I cannot fathom a case where this isn=E2=80=99t = reasonable. All CPE has non-volatile memory for storing settings. = We=E2=80=99re talking about adding 24 octets per prefix and unlikely = more than 3 prefixes per interface. Assuming no more than 4 (routed) = interfaces on your basic home gateway, that=E2=80=99s a maximum of 12 = prefixes for a total of 288 octets of storage.
 
Note that it is technically a bit more = than just write to storage as a clock is also needed to know whether the = prefix needs to be deprecated or not. Perhaps time can come from the = network or the device can just deprecate regardless of time if the new = prefix is different when it reboots?

Nope=E2=80=A6 It isn=E2=80=99t=E2=80=A6. The clock is = an existing function of the CPE. All you need to write is the expected = expiration time. (Current clock + prefix timer) to the non-volatile = storage. You don=E2=80=99t need to count down the timer = values.

The clock can be internal or = synchronized to NTP or some other time service, but virtually every CPE = already has an internal clock, so there=E2=80=99s no additional = requirement here. In fact, the CPE _HAS_ to have a clock already to know = when prefixes time out without a reboot or flash renumbering = event.

Owen

 
  • Bernie
 
From: Owen DeLong <owen@delong.com> 
Sent: Wednesday, October 30, 2019 = 9:39 PM
To: Bernie Volz (volz) <volz@cisco.com>
Cc: Ted = Lemon <mellon@fugue.com>; Bud = Millwood <budm@weird-solutions.com>; dhcwg@ietf.org; IPv6 Operations <v6ops@ietf.org>
Subject: Re: [v6ops] [dhcwg] SLAAC = renum: Problem Statement & Operational workarounds
 
 


On Oct 30, 2019, at 5:53 PM, Bernie Volz (volz) <volz@cisco.com> wrote:
 
Mark Smith on v6ops ml wrote: 
 
=E2=80=9CI think Ole observed that this = is contrary to what the PD prefix's Valid Lifetime said would be = the case. The ISP supplied a PD Prefix with a Valid Lifetime of X = seconds, and then broke that promise by abruptly changing = addressing before X seconds. ISPs should be expected to live up to = their Valid Lifetime promises.=E2=80=9D
 
Sure, but in the real world, there is an entire class of ISPs = that have repeatedly demonstrated utter and near complete disregard for = such niceties as promises to customers (e.g. most major eyeball ISPs in = the US at a minimum), so having CPE behavior that accommodates this fact = in favor of the user will likely lead to a better user experience than = stomping or feet and insisting that ISPs behave properly.


And it would be worth = better understanding exactly what happens in these situations (perhaps = it was covered earlier but I missed or lost that)  ... if the = Prefix configuration really is radically changed, even the SP dhcp = server may be unable to assist.
 
With what is being proposed, the SP DHCP server doesn=E2=80=99t= need to assist. The CPU should write the set of received prefixes and = their expected expiration times (preferred, valid) to persistent = storage. The CPU should update this when a packet making a change to = these timers is received. It should make every effort to deprecate = prefixes it cannot renew from the links where it previously advertised = them.
 
This doesn=E2=80=99t require anything special on the SP = side.
 
Owen


 
- Bernie


On Oct 30, 2019, at = 7:32 PM, Ted Lemon <mellon@fugue.com> = wrote:

On Oct 30, 2019, at 7:18 PM, Bud Millwood <budm@weird-solutions.com> = wrote:
It's not so much = about the lifetime of the prefix as about putting two
prefixes in a reply to a request, right? And any CPE that = can't handle
that gracefully gets hosed. I agree that = providers of course need to
test this feature, and a = server side configuration makes that
possible. Also, I'm = all for firmware upgrades, but requiring it to fix
a hosed = CPE is could be a big issue.
 
The thing is, if they can=E2=80=99t = handle a two-PD response, they are out of spec.  This is already = allowed in the RFC.
 
Granted, there may be plenty of CPEs that won=E2=80=99t = handle this correctly.   If they can be bricked by a message with = two PDs, then bricking them is the right thing to do, because that=E2=80=99= s a zero-day vulnerability wide open on the customer network.
 
_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops

= --Apple-Mail=_081C5415-863F-400D-B6C9-4D2BC6D4EC9A-- From nobody Wed Oct 30 20:05:39 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60EB81200D6 for ; Wed, 30 Oct 2019 20:05:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.999 X-Spam-Level: X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I4OI5hrQzysW for ; Wed, 30 Oct 2019 20:05:35 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 0286A1200B2 for ; Wed, 30 Oct 2019 20:05:27 -0700 (PDT) Received: from [172.20.0.85] (rrcs-97-79-186-2.sw.biz.rr.com [97.79.186.2]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9V35HB0028958 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 30 Oct 2019 20:05:18 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9V35HB0028958 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572491118; bh=XFH33Ktgy42bGpfhrQdUfFOIw0jcgMiwtxNxAoV1XG4=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=pvm3IPpiiWz5kskefcNDNJkP58J7af2Jj9Xjt28GnTXhP/bd8l39dzw6hKOxZLfMV ze3u2yo3MX3MgmumgpLclTKIV3PCgotaINx6AtdCACrZic/o5BO2xBkmBCa08n2GmC /fowoLhKb05afXw8do4pXnhZLi/TkLVqUOOxnv/I= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Owen DeLong In-Reply-To: Date: Wed, 30 Oct 2019 20:05:16 -0700 Cc: v6ops@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <6ABAC3D7-30EA-4ECD-8B5F-A04309C208CE@delong.com> References: <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com> <9dfd5e47-c593-4145-b530-74fb0f4155ed@www.fastmail.com> To: Alexandre Petrescu X-Mailer: Apple Mail (2.3445.104.8) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Wed, 30 Oct 2019 20:05:18 -0700 (PDT) Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Oct 2019 03:05:37 -0000 8 /64s is a /61. 16 /64s is a /60. 256 /64s is a /56. You should be getting 65,536 /64s (a /48) and if I were you, I would = complain to any ISP that gave me less. Owen > On Oct 30, 2019, at 9:29 AM, Alexandre Petrescu = wrote: >=20 >=20 >=20 > Le 30/10/2019 =C3=A0 15:27, Radu-Adrian Feurdean a =C3=A9crit : >> On Thu, Oct 24, 2019, at 11:20, Alexandre Petrescu wrote: >>> In particular, the home networks scenario is very appropriate. >>> First, I must say that the home network that I use uses a fixed >>> /56 allocated by my ISP. In this, the prefix never changes, and it >>> is not obtained by DHCPv6-PD - it is guaranteed by contract signed >>> by hand. Such a case could be mentioned, as not being a problem = described in this draft. >> If you are talking about residential service (not = business/enterprise-class), I would like to know who your service = provider is. >=20 > (my correction: I am not at all good at bit fiddling, sorry. What I = get > at home is a /60, I think, not a /56. Because the CPE GUI proposes me > to split it into 8 /64s). >=20 > YEs, it is at home, probably you mean it is residential. The payment = is > a flat 35eur/month. No special QoS commitments from them, other than = a > 'noise level' of 55dbm due to the length of the line. >=20 > The service provider is Free. ('Free' is its name; it was the first > callable at gratuitous phone numbers when all others requested a = payment > in exchange; later they were the first to offer flat rates when the > others were per-connection time; because of that it called itself so). >=20 >>> I must say that this kind of software (request a prefix with = DHCPv6-PD, form sub-prefixes, and put them in RAs on the other = interfaces) does not exist as open source or some other available = package. >> Dibbler-client does that by default. Once the delegated prefix = (shorter than /64) is obtained, a /64 from that prefix is assigned to >> each interface. With proper radvd.conf configuration (prefix ::/64), >> RAs will be sent for those prefixes. >=20 > I did not know. The difficulty I talked about is to maintain what's = in > that radvd.conf in sync with what is dhcpd.conf. Maybe some software > packages already do it. >=20 > Also, because you talk about deriving /64s out of /56: I am not sure > there is a standard way to do it. Maybe dibbler does it, but I doubt = it > is the best way. >=20 >> A lot (?? most ??) of CPEs implementing DHCPv6-PD client do this in = some form or another. Some do this automatically (take prefixes and = assign them to interfaces), other need manual configuration (n-th prefix = go to interface ZZZ). >=20 > It's good to know. >=20 > But again, I doubt these CPEs derive prefixes in the manner that _I_ > want it. >=20 > For example, I want the /60 to be derived into one /64 and a single > other set of /64s. I dont want the /60 to be derived into 8 /64s. >=20 > I do that to help aggregation and speed up the forwarding process. >=20 > Other times I might want to derive that /60 differently. >=20 > I dont think there is a standard way to do it. >=20 >>> Because of that, I am surprised that you call it 'the most common = deployment scenario'. Is this a scenario that is _expected_ to be >>> 'common'? >> "Expected enough" to warrant a device to be disqualified as "CPE that >> supports IPv6" if it doesn't work this way. In an ISP environment. >=20 > Well. >=20 > A CPE that supports IPv6 should run DHCPv6. A CLient and a Server? > Both? Just one? >=20 > How does CPE propagate the prefixes learned with its CLient to its = Server? >=20 >>> I would like to request addition of two other scenarios: >>> - an IoT scenario, in which an IoR Router connects several sensors >>> to the Internet. For example, an IoT Router is deployed in a box >>> at a traffic lights. The IoT device is the Traffic Lights = Controller connected on Ethernet to the IoT Router. The IoT Router >>> is connected on 4G. >>> - a vehicular networks scenario: the On-Board Unit is deployed in a >>> car. This OBU has a 4G interface and an Ethernet interface. There >>> are several computers in the car that need IPv6 addresses. >> Like : you have a mobile phone on a network doing IPv6+NAT64, >=20 > My CPE is not doing NAT64, I think. >=20 > I dont want NAT64. >=20 >> you pout it in tethering/mobile-hotspot mode, and connect several = other devices (usually laptops) to that hotspot - they all get IPv6 = addresses (in the same single /64 that the phone obtained via SLAAC or = something else). It is clear that getting a /56 (even a /60 or /62 >> would do it) via DHCPv6-PD would be a nicer solution, but when your >> mobile device runs android.... >=20 > Well. Android is good in many places and for many goals. >=20 > I agree that tethering/mobile-hotspot mode is a good solution in = certain > circumstances, like sharing one's smartphone connection to tablets = nearby. >=20 > However, tethering in IPv6 ('64share' RFC) has some drawbacks: (1) it > does not support more than the WiFi tethered to the cellular (doesnt > support an additional subnet like Ethernet) and (2) the incoming > interface must be cellular (cant be another wifi). >=20 > In a car, one has a WiFi hotspot but also lots of Ethernets and CANs. > It's not possible to use 64share to accomodate all that. >=20 > Hence, there DHCPv6-PD is not just a nicer solution - it is a = requirement. >=20 > Other than cars, even at home, one may want a DHCPv6-PD Server on the > CPE for similar reasons. >=20 > If one wants to run tethering on a device at home that has no cellular > connection (e.g. a WiFi<->USB, or a USB<->Ethernet device) to extend = to > other devices then one cant use tethering ('64share'), must use = DHCPv6-PD. >=20 > Alex >=20 >=20 > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops From nobody Wed Oct 30 22:18:04 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4169120074; Wed, 30 Oct 2019 22:17:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.998 X-Spam-Level: X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ovM0HAALVaq1; Wed, 30 Oct 2019 22:17:53 -0700 (PDT) Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id BB827120052; Wed, 30 Oct 2019 22:17:50 -0700 (PDT) Received: from [172.20.0.85] (rrcs-97-79-186-2.sw.biz.rr.com [97.79.186.2]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9V3Eavs031708 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 30 Oct 2019 20:14:37 -0700 DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9V3Eavs031708 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572491678; bh=/TuYGHNF/Xf5fIQZOpd30YmtBDKOW6yAaFSDQLcj2l8=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=OBmq6S9H9uCvJ8dOvYRWr7sagdGW64c1joXLI3v/5iiUs8Xv8OSJXEkbwAePAURCx leNjTugZKNfzaJGfMb9KAytWH7gZCCrasjCxQE8O8D+uq5zIPXGXk3gNF08UmWXuZT 9G7ocEy/jyxd9zwRiTd3Viaw6caBDe14Ef7kCOBg= From: Owen DeLong Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_3176AF5B-12E6-420B-A300-1584605D3336" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Date: Wed, 30 Oct 2019 20:14:36 -0700 In-Reply-To: Cc: "Bernie Volz (volz)" , dhcwg@ietf.org, IPv6 Operations , Bud Millwood To: Mark Smith References: <8755B40E-4075-4AAC-BF59-19B6DF9BA6D1@cisco.com> X-Mailer: Apple Mail (2.3445.104.8) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Wed, 30 Oct 2019 20:14:38 -0700 (PDT) Archived-At: Subject: Re: [v6ops] [dhcwg] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Oct 2019 05:17:56 -0000 --Apple-Mail=_3176AF5B-12E6-420B-A300-1584605D3336 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 30, 2019, at 7:12 PM, Mark Smith = wrote: >=20 >=20 >=20 > On Thu, 31 Oct 2019, 12:40 Owen DeLong, > wrote: >=20 >=20 >> On Oct 30, 2019, at 5:53 PM, Bernie Volz (volz) > wrote: >>=20 >> Mark Smith on v6ops ml wrote: >>=20 >> =E2=80=9CI think Ole observed that this is contrary to what the PD = prefix's Valid Lifetime said would be the case. The ISP supplied a PD = Prefix with a Valid Lifetime of X seconds, and then broke that promise = by abruptly changing addressing before X seconds. ISPs should be = expected to live up to their Valid Lifetime promises.=E2=80=9D >=20 > Sure, but in the real world, there is an entire class of ISPs that = have repeatedly demonstrated utter and near complete disregard for such = niceties as promises to customers (e.g. most major eyeball ISPs in the = US at a minimum), so having CPE behavior that accommodates this fact in = favor of the user will likely lead to a better user experience than = stomping or feet and insisting that ISPs behave properly. >=20 > So if some enterprise network operators said to the IETF, >=20 > "We want to be able to change the VLAN assignments of any of our IPv6 = hosts randomly and unexpectedly, including at 9:10 am when everybody is = checking their email, and have the hosts handle that entirely = seamlessly." >=20 > would we consider that to be a reasonable request? Probably not, but we=E2=80=99re not asking that and we=E2=80=99re not = asking for the hosts to handle it. We=E2=80=99re asking for CPE routers in residential and SMB environments = to handle what is already a common behavior of residential and SMB ISPs = through a relatively simple CPE change. Owen >=20 >=20 >=20 >> And it would be worth better understanding exactly what happens in = these situations (perhaps it was covered earlier but I missed or lost = that) ... if the Prefix configuration really is radically changed, even = the SP dhcp server may be unable to assist. >=20 > With what is being proposed, the SP DHCP server doesn=E2=80=99t need = to assist. The CPU should write the set of received prefixes and their = expected expiration times (preferred, valid) to persistent storage. The = CPU should update this when a packet making a change to these timers is = received. It should make every effort to deprecate prefixes it cannot = renew from the links where it previously advertised them. >=20 > This doesn=E2=80=99t require anything special on the SP side. >=20 > Owen >=20 >>=20 >> - Bernie >>=20 >> On Oct 30, 2019, at 7:32 PM, Ted Lemon > wrote: >>=20 >>> On Oct 30, 2019, at 7:18 PM, Bud Millwood > wrote: >>>> It's not so much about the lifetime of the prefix as about putting = two >>>> prefixes in a reply to a request, right? And any CPE that can't = handle >>>> that gracefully gets hosed. I agree that providers of course need = to >>>> test this feature, and a server side configuration makes that >>>> possible. Also, I'm all for firmware upgrades, but requiring it to = fix >>>> a hosed CPE is could be a big issue. >>>=20 >>> The thing is, if they can=E2=80=99t handle a two-PD response, they = are out of spec. This is already allowed in the RFC. >>>=20 >>> Granted, there may be plenty of CPEs that won=E2=80=99t handle this = correctly. If they can be bricked by a message with two PDs, then = bricking them is the right thing to do, because that=E2=80=99s a = zero-day vulnerability wide open on the customer network. >>>=20 >> _______________________________________________ >> v6ops mailing list >> v6ops@ietf.org >> https://www.ietf.org/mailman/listinfo/v6ops = >=20 > _______________________________________________ > v6ops mailing list > v6ops@ietf.org > https://www.ietf.org/mailman/listinfo/v6ops = --Apple-Mail=_3176AF5B-12E6-420B-A300-1584605D3336 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Oct 30, 2019, at 7:12 PM, Mark Smith <markzzzsmith@gmail.com> wrote:



On Thu, 31 = Oct 2019, 12:40 Owen DeLong, <owen@delong.com> wrote:

On Oct 30, 2019, at 5:53 PM, Bernie Volz = (volz) <volz@cisco.com> wrote:

Mark Smith on v6ops ml wrote:

=E2=80=9CI think Ole observed that this is contrary to what = the PD prefix's Valid Lifetime said would be the case. The ISP = supplied a PD Prefix with a Valid Lifetime of X seconds, and then = broke that promise by abruptly changing addressing before X seconds. ISPs should be = expected to live up to their Valid Lifetime = promises.=E2=80=9D

Sure, but in the real world, there is an = entire class of ISPs that have repeatedly demonstrated utter and near = complete disregard for such niceties as promises to customers (e.g. most = major eyeball ISPs in the US at a minimum), so having CPE behavior that = accommodates this fact in favor of the user will likely lead to a better = user experience than stomping or feet and insisting that ISPs behave = properly.

So if some = enterprise network operators said to the IETF,

"We want to = be able to change the VLAN assignments of any of our IPv6 hosts randomly = and unexpectedly, including at 9:10 am when everybody is checking their = email, and have the hosts handle that entirely seamlessly."

would we consider that to be a reasonable = request?

Probably = not, but we=E2=80=99re not asking that and we=E2=80=99re not asking for = the hosts to handle it.

We=E2=80=99re = asking for CPE routers in residential and SMB environments  to = handle what is already a common behavior of residential and SMB ISPs = through a relatively simple CPE change.

Owen




And it would be worth better understanding exactly what = happens in these situations (perhaps it was covered earlier but I missed = or lost that)  ... if the Prefix configuration really is radically = changed, even the SP dhcp server may be unable to = assist.

With what is being proposed, the SP DHCP server = doesn=E2=80=99t need to assist. The CPU should write the set of received = prefixes and their expected expiration times (preferred, valid) to = persistent storage. The CPU should update this when a packet making a = change to these timers is received. It should make every effort to = deprecate prefixes it cannot renew from the links where it previously = advertised them.

This doesn=E2=80=99t require anything special on the SP = side.

Owen


- Bernie

On Oct 30, 2019, at 7:32 PM, Ted Lemon <mellon@fugue.com> wrote:

On Oct 30, 2019, at 7:18 PM, Bud Millwood = <budm@weird-solutions.com> wrote:
It's= not so much about the lifetime of the prefix as about putting = two
prefixes in a reply to a request, right? And any CPE that can't handle
that= gracefully gets hosed. I agree that providers of course need = to
test= this feature, and a server side configuration makes that
possible. Also, I'm all for firmware upgrades, but requiring it to fix
a hosed CPE is could be a big issue.

The thing is, if they can=E2=80=99t handle a two-PD = response, they are out of spec.  This is already allowed in the = RFC.

Granted, there may be plenty of CPEs that won=E2=80=99t = handle this correctly.   If they can be bricked by a message with = two PDs, then bricking them is the right thing to do, because that=E2=80=99= s a zero-day vulnerability wide open on the customer network.

_______________________________________________
v6ops = mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops

_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops

= --Apple-Mail=_3176AF5B-12E6-420B-A300-1584605D3336-- From nobody Thu Oct 31 03:02:52 2019 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1A311200B3 for ; Thu, 31 Oct 2019 03:02:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.63 X-Spam-Level: X-Spam-Status: No, score=-2.63 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K7fmHSrdYIJy for ; Thu, 31 Oct 2019 03:02:47 -0700 (PDT) Received: from cirse-smtp-out.extra.cea.fr (cirse-smtp-out.extra.cea.fr [132.167.192.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8A3912004E for ; Thu, 31 Oct 2019 03:02:46 -0700 (PDT) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by cirse-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9VA2csv047661; Thu, 31 Oct 2019 11:02:38 +0100 Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 6837F201451; Thu, 31 Oct 2019 11:02:38 +0100 (CET) Received: from muguet2-smtp-out.intra.cea.fr (muguet2-smtp-out.intra.cea.fr [132.166.192.13]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 52D87202633; Thu, 31 Oct 2019 11:02:38 +0100 (CET) Received: from [10.11.240.55] ([10.11.240.55]) by muguet2-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9VA2X8N032018; Thu, 31 Oct 2019 11:02:34 +0100 To: Owen DeLong Cc: v6ops@ietf.org References: <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com> <9dfd5e47-c593-4145-b530-74fb0f4155ed@www.fastmail.com> <6ABAC3D7-30EA-4ECD-8B5F-A04309C208CE@delong.com> From: Alexandre Petrescu Message-ID: <55508c99-42b7-5c22-5c56-306a41b51bf3@gmail.com> Date: Thu, 31 Oct 2019 11:02:33 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0 MIME-Version: 1.0 In-Reply-To: <6ABAC3D7-30EA-4ECD-8B5F-A04309C208CE@delong.com> Content-Type: multipart/alternative; boundary="------------03038B2FFC2D569502CB2DC5" Content-Language: fr Archived-At: Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Oct 2019 10:02:51 -0000 This is a multi-part message in MIME format. --------------03038B2FFC2D569502CB2DC5 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Le 31/10/2019 à 04:05, Owen DeLong a écrit : > 8 /64s is a /61. Right, I guess 8 /64s is a /61 because 2^3 is 8, and 3+61 is 64. Yet in the hextet notation, I get ce10, ce11 ... ce17 (see an annotated figure of GUI below).  They are 8 /64s.  I dont see ce18, neither ce19 in the GUI.  Might it be that my neighbor gets ce18 and ce19, but it would mean s/he cant get more than 2 /64s.  Might it be that free hides ce18 and ce19 for something else inside my home that they dont tell me what.  Might it be they expect me to ask them for more addresses later. Whether I get a /61 or a /60 at home is still a valid question for me. > 16 /64s is a /60. > 256 /64s is a /56. > You should be getting 65,536 /64s (a /48) and if I were you, I would complain to any ISP that gave me less.I I keep the /48 request in mind for my next interaction with their service, because I have many things to ask. I suppose they will ask me, in return, if I already spent the 2^61 addresses they already gave me. Alex PS: For information, see below an annotated copy of the GUI listing the form of the 8 prefixes I see in GUI on CPE. One may notice things to complain about: the use of ff:fe in the LL, the way they call it 'Prefix Delegation' without using DHCPv6-PD and the optional firewall IPv6 activation (off by default - they dream :-) You may understand why I say I have many things to ask them. > > Owen > >> On Oct 30, 2019, at 9:29 AM, Alexandre Petrescu wrote: >> >> >> >> Le 30/10/2019 à 15:27, Radu-Adrian Feurdean a écrit : >>> On Thu, Oct 24, 2019, at 11:20, Alexandre Petrescu wrote: >>>> In particular, the home networks scenario is very appropriate. >>>> First, I must say that the home network that I use uses a fixed >>>> /56 allocated by my ISP. In this, the prefix never changes, and it >>>> is not obtained by DHCPv6-PD - it is guaranteed by contract signed >>>> by hand. Such a case could be mentioned, as not being a problem described in this draft. >>> If you are talking about residential service (not business/enterprise-class), I would like to know who your service provider is. >> (my correction: I am not at all good at bit fiddling, sorry. What I get >> at home is a /60, I think, not a /56. Because the CPE GUI proposes me >> to split it into 8 /64s). >> >> YEs, it is at home, probably you mean it is residential. The payment is >> a flat 35eur/month. No special QoS commitments from them, other than a >> 'noise level' of 55dbm due to the length of the line. >> >> The service provider is Free. ('Free' is its name; it was the first >> callable at gratuitous phone numbers when all others requested a payment >> in exchange; later they were the first to offer flat rates when the >> others were per-connection time; because of that it called itself so). >> >>>> I must say that this kind of software (request a prefix with DHCPv6-PD, form sub-prefixes, and put them in RAs on the other interfaces) does not exist as open source or some other available package. >>> Dibbler-client does that by default. Once the delegated prefix (shorter than /64) is obtained, a /64 from that prefix is assigned to >>> each interface. With proper radvd.conf configuration (prefix ::/64), >>> RAs will be sent for those prefixes. >> I did not know. The difficulty I talked about is to maintain what's in >> that radvd.conf in sync with what is dhcpd.conf. Maybe some software >> packages already do it. >> >> Also, because you talk about deriving /64s out of /56: I am not sure >> there is a standard way to do it. Maybe dibbler does it, but I doubt it >> is the best way. >> >>> A lot (?? most ??) of CPEs implementing DHCPv6-PD client do this in some form or another. Some do this automatically (take prefixes and assign them to interfaces), other need manual configuration (n-th prefix go to interface ZZZ). >> It's good to know. >> >> But again, I doubt these CPEs derive prefixes in the manner that _I_ >> want it. >> >> For example, I want the /60 to be derived into one /64 and a single >> other set of /64s. I dont want the /60 to be derived into 8 /64s. >> >> I do that to help aggregation and speed up the forwarding process. >> >> Other times I might want to derive that /60 differently. >> >> I dont think there is a standard way to do it. >> >>>> Because of that, I am surprised that you call it 'the most common deployment scenario'. Is this a scenario that is _expected_ to be >>>> 'common'? >>> "Expected enough" to warrant a device to be disqualified as "CPE that >>> supports IPv6" if it doesn't work this way. In an ISP environment. >> Well. >> >> A CPE that supports IPv6 should run DHCPv6. A CLient and a Server? >> Both? Just one? >> >> How does CPE propagate the prefixes learned with its CLient to its Server? >> >>>> I would like to request addition of two other scenarios: >>>> - an IoT scenario, in which an IoR Router connects several sensors >>>> to the Internet. For example, an IoT Router is deployed in a box >>>> at a traffic lights. The IoT device is the Traffic Lights Controller connected on Ethernet to the IoT Router. The IoT Router >>>> is connected on 4G. >>>> - a vehicular networks scenario: the On-Board Unit is deployed in a >>>> car. This OBU has a 4G interface and an Ethernet interface. There >>>> are several computers in the car that need IPv6 addresses. >>> Like : you have a mobile phone on a network doing IPv6+NAT64, >> My CPE is not doing NAT64, I think. >> >> I dont want NAT64. >> >>> you pout it in tethering/mobile-hotspot mode, and connect several other devices (usually laptops) to that hotspot - they all get IPv6 addresses (in the same single /64 that the phone obtained via SLAAC or something else). It is clear that getting a /56 (even a /60 or /62 >>> would do it) via DHCPv6-PD would be a nicer solution, but when your >>> mobile device runs android.... >> Well. Android is good in many places and for many goals. >> >> I agree that tethering/mobile-hotspot mode is a good solution in certain >> circumstances, like sharing one's smartphone connection to tablets nearby. >> >> However, tethering in IPv6 ('64share' RFC) has some drawbacks: (1) it >> does not support more than the WiFi tethered to the cellular (doesnt >> support an additional subnet like Ethernet) and (2) the incoming >> interface must be cellular (cant be another wifi). >> >> In a car, one has a WiFi hotspot but also lots of Ethernets and CANs. >> It's not possible to use 64share to accomodate all that. >> >> Hence, there DHCPv6-PD is not just a nicer solution - it is a requirement. >> >> Other than cars, even at home, one may want a DHCPv6-PD Server on the >> CPE for similar reasons. >> >> If one wants to run tethering on a device at home that has no cellular >> connection (e.g. a WiFi<->USB, or a USB<->Ethernet device) to extend to >> other devices then one cant use tethering ('64share'), must use DHCPv6-PD. >> >> Alex >> >> >> _______________________________________________ >> v6ops mailing list >> v6ops@ietf.org >> https://www.ietf.org/mailman/listinfo/v6ops --------------03038B2FFC2D569502CB2DC5 Content-Type: multipart/related; boundary="------------411F52B47C1D7E690204DA79" --------------411F52B47C1D7E690204DA79 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit


Le 31/10/2019 à 04:05, Owen DeLong a écrit :
8 /64s is a /61.

Right, I guess 8 /64s is a /61 because 2^3 is 8, and 3+61 is 64.

Yet in the hextet notation, I get ce10, ce11 ... ce17 (see an annotated figure of GUI below).  They are 8 /64s.  I dont see ce18, neither ce19 in the GUI.  Might it be that my neighbor gets ce18 and ce19, but it would mean s/he cant get more than 2 /64s.  Might it be that free hides ce18 and ce19 for something else inside my home that they dont tell me what.  Might it be they expect me to ask them for more addresses later.

Whether I get a /61 or a /60 at home is still a valid question for me.

16 /64s is a /60.
256 /64s is a /56.
You should be getting 65,536 /64s (a /48) and if I were you, I would complain to any ISP that gave me less.I

I keep the /48 request in mind for my next interaction with their service, because I have many things to ask.

I suppose they will ask me, in return, if I already spent the 2^61 addresses they already gave me.

Alex



PS:

For information, see below an annotated copy of the GUI listing the form of the 8 prefixes I see in GUI on CPE.

One may notice things to complain about: the use of ff:fe in the LL, the way they call it 'Prefix Delegation' without using DHCPv6-PD and the optional firewall IPv6 activation (off by default - they dream :-)

You may understand why I say I have many things to ask them.






Owen


On Oct 30, 2019, at 9:29 AM, Alexandre Petrescu <alexandre.petrescu@gmail.com> wrote:



Le 30/10/2019 à 15:27, Radu-Adrian Feurdean a écrit :

On Thu, Oct 24, 2019, at 11:20, Alexandre Petrescu wrote:

In particular, the home networks scenario is very appropriate.
First, I must say that the home network that I use uses a fixed
/56 allocated by my ISP.  In this, the prefix never changes, and it
is not obtained by DHCPv6-PD - it is guaranteed by contract signed
by hand. Such a case could be mentioned, as not being a problem described in this draft.

If you are talking about residential service (not business/enterprise-class), I would like to know who your service provider is.

(my correction: I am not at all good at bit fiddling, sorry.  What I get
at home is a /60, I think, not a /56.  Because the CPE GUI proposes me
to split it into 8 /64s).

YEs, it is at home, probably you mean it is residential.  The payment is
a flat 35eur/month.  No special QoS commitments from them, other than a
'noise level' of 55dbm due to the length of the line.

The service provider is Free. ('Free' is its name; it was the first
callable at gratuitous phone numbers when all others requested a payment
in exchange; later they were the first to offer flat rates when the
others were per-connection time; because of that it called itself so).


I must say that this kind of software (request a prefix with DHCPv6-PD, form sub-prefixes, and put them in RAs on the other interfaces) does not exist as open source or some other available package.

Dibbler-client does that by default. Once the delegated prefix (shorter than /64) is obtained, a /64 from that prefix is assigned to
each interface. With proper radvd.conf configuration (prefix ::/64),
RAs will be sent for those prefixes.

I did not know.  The difficulty I talked about is to maintain what's in
that radvd.conf in sync with what is dhcpd.conf.  Maybe some software
packages already do it.

Also, because you talk about deriving /64s out of /56: I am not sure
there is a standard way to do it.  Maybe dibbler does it, but I doubt it
is the best way.


A lot (?? most ??) of CPEs implementing DHCPv6-PD client do this in some form or another. Some do this automatically (take prefixes and assign them to interfaces), other need manual configuration (n-th prefix go to interface ZZZ).

It's good to know.

But again, I doubt these CPEs derive prefixes in the manner that _I_
want it.

For example, I want the /60 to be derived into one /64 and a single
other set of /64s.  I dont want the /60 to be derived into 8 /64s.

I do that to help aggregation and speed up the forwarding process.

Other times I might want to derive that /60 differently.

I dont think there is a standard way to do it.


Because of that, I am surprised that you call it 'the most common deployment scenario'.  Is this a scenario that is _expected_ to be
'common'?

"Expected enough" to warrant a device to be disqualified as "CPE that
supports IPv6" if it doesn't work this way. In an ISP environment.

Well.

A CPE that supports IPv6 should run DHCPv6.  A CLient and a Server?
Both?  Just one?

How does CPE propagate the prefixes learned with its CLient to its Server?


I would like to request addition of two other scenarios:
- an IoT scenario, in which an IoR Router connects several sensors
to the Internet.  For example, an IoT Router is deployed in a box
at a traffic lights.  The IoT device is the Traffic Lights Controller connected on Ethernet to the IoT Router.  The IoT Router
is connected on 4G.
- a vehicular networks scenario: the On-Board Unit is deployed in a
car. This OBU has a 4G interface and an Ethernet interface. There
are several computers in the car that need IPv6 addresses.

Like : you have a mobile phone on a network doing IPv6+NAT64,

My CPE is not doing NAT64, I think.

I dont want NAT64.


you pout it in tethering/mobile-hotspot mode, and connect several other devices (usually laptops) to that hotspot - they all get IPv6 addresses (in the same single /64 that the phone obtained via SLAAC or something else). It is clear that getting a /56 (even a /60 or /62
would do it) via DHCPv6-PD would be a nicer solution, but when your
mobile device runs android....

Well.  Android is good in many places and for many goals.

I agree that tethering/mobile-hotspot mode is a good solution in certain
circumstances, like sharing one's smartphone connection to tablets nearby.

However, tethering in IPv6 ('64share' RFC) has some drawbacks: (1) it
does not support more than the WiFi tethered to the cellular (doesnt
support an additional subnet like Ethernet) and (2) the incoming
interface must be cellular (cant be another wifi).

In a car, one has a WiFi hotspot but also lots of Ethernets and CANs.
It's not possible to use 64share to accomodate all that.

Hence, there DHCPv6-PD is not just a nicer solution - it is a requirement.

Other than cars, even at home, one may want a DHCPv6-PD Server on the
CPE for similar reasons.

If one wants to run tethering on a device at home that has no cellular
connection (e.g. a WiFi<->USB, or a USB<->Ethernet device) to extend to
other devices then one cant use tethering ('64share'), must use DHCPv6-PD.

Alex


_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops


    

  


--------------411F52B47C1D7E690204DA79
Content-Type: image/png;
 name="mohkmddlfcdkakja.png"
Content-Transfer-Encoding: base64
Content-ID: 
Content-Disposition: inline;
 filename="mohkmddlfcdkakja.png"
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--------------411F52B47C1D7E690204DA79--

--------------03038B2FFC2D569502CB2DC5--


From nobody Thu Oct 31 03:26:03 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C2BB1200F1 for ; Thu, 31 Oct 2019 03:26:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.387
X-Spam-Level: **
X-Spam-Status: No, score=2.387 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, HTML_IMAGE_ONLY_24=1.618, HTML_IMAGE_RATIO_06=0.001, HTML_MESSAGE=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, SPOOFED_FREEMAIL=1.999] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UpGA2FjssuvY for ; Thu, 31 Oct 2019 03:26:00 -0700 (PDT)
Received: from sainfoin-smtp-out.extra.cea.fr (sainfoin-smtp-out.extra.cea.fr [132.167.192.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1A1C1200F6 for ; Thu, 31 Oct 2019 03:25:59 -0700 (PDT)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9VAPvLC015111 for ; Thu, 31 Oct 2019 11:25:57 +0100
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id C8461203BA4 for ; Thu, 31 Oct 2019 11:25:57 +0100 (CET)
Received: from muguet2-smtp-out.intra.cea.fr (muguet2-smtp-out.intra.cea.fr [132.166.192.13]) by pisaure.intra.cea.fr (Postfix) with ESMTP id B7359203BA2 for ; Thu, 31 Oct 2019 11:25:57 +0100 (CET)
Received: from [10.11.240.4] ([10.11.240.4]) by muguet2-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9VAPoU7016147 for ; Thu, 31 Oct 2019 11:25:51 +0100
To: "v6ops@ietf.org" 
From: Alexandre Petrescu 
Message-ID: 
Date: Thu, 31 Oct 2019 11:25:50 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="------------21FA509471B2502024ED670C"
Content-Language: fr
Archived-At: 
Subject: [v6ops] IPv6 new access from Windows to Google: display of a critical security alert
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 10:26:02 -0000

This is a multi-part message in MIME format.
--------------21FA509471B2502024ED670C
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

Google alerted me a few days ago during my DHCPv6 experiments, when I 
browsed it with a Windows computer using IPv6 first time, although many 
times previously with IPv4.

Incidentally, the address my Windows used was an address delivered by 
DHCPv6. Being DHCPv6 is visible in its format: in the hextet 
representation, the '::' appears before the last two hextets 
(X::b4cc:8eb9) as opposed to a SLAAC address where the double colon 
appears quasi always before the last _four_ hextets.

I am trying to understand why Google complained wiht such a critical 
security alert.

- is it because the address was a DHCP address rather than SLAAC?

- it is because I connect from an address they have never seen before?

- is it because it is the first time I connect to them by IPv6 on this 
computer?

- is it because when I connect  with IPv6 to them I keep changing the 
IPv6 address (as opposed to IPv4 is always the same because behind NAT)?

The messages they displayed are not helpful to understand what's 
happening, because they talk about 'application security', 'wrong 
device', etc.  Neither is the case: I have a running anti-virus so my 
apps are healthy and the device is always the same Windows device I use 
to connect to Google.


--------------21FA509471B2502024ED670C
Content-Type: multipart/related;
 boundary="------------2337D06D61F12A2712D84C19"


--------------2337D06D61F12A2712D84C19
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit


  

    
  
  
    
Google alerted me a few
          days ago during my DHCPv6 experiments, when I browsed it with
          a Windows computer using IPv6 first time, although many times
          previously with IPv4.

    
Incidentally, the
          address my Windows used was an address delivered by DHCPv6. 
          Being DHCPv6 is visible in its format: in the hextet
          representation, the '::' appears before the last two hextets
          (X::b4cc:8eb9) as opposed to a SLAAC address where the double
          colon appears quasi always before the last _four_ hextets.

    
I am trying to
          understand why Google complained wiht such a critical security
          alert.

        

    
- is it because the
          address was a DHCP address rather than SLAAC?

    
- it is because I
          connect from an address they have never seen before?

    
- is it because it is
          the first time I connect to them by IPv6 on this computer?

    
- is it because when I
          connect  with IPv6 to them I keep changing the IPv6 address
          (as opposed to IPv4 is always the same because behind NAT)?

        

    
The messages they
          displayed are not helpful to understand what's happening,
          because they talk about 'application security', 'wrong
          device', etc.  Neither is the case: I have a running
          anti-virus so my apps are healthy and the device is always the
          same Windows device I use to connect to Google.

    

  


--------------2337D06D61F12A2712D84C19
Content-Type: image/jpeg;
 name="gapjjmicnkndmmma.jpg"
Content-Transfer-Encoding: base64
Content-ID: 
Content-Disposition: inline;
 filename="gapjjmicnkndmmma.jpg"
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--------------2337D06D61F12A2712D84C19--

--------------21FA509471B2502024ED670C--


From nobody Thu Oct 31 07:17:30 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3A72120180 for ; Thu, 31 Oct 2019 07:17:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.998
X-Spam-Level: 
X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lju82DV2zpAr for ; Thu, 31 Oct 2019 07:17:24 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id F087512018B for ; Thu, 31 Oct 2019 07:17:23 -0700 (PDT)
Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9VEGvI9032491 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 31 Oct 2019 07:16:58 -0700
DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9VEGvI9032491
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572531419; bh=iDHpRlqPScRj/nBPxCqepsoS0qdnNpofzfcBOSAR12w=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=2RzzLqo135f2wfbRovX5A/TZFUY3yyUBJGkHtB8W2YmVtAfddSBYkMf3etBG6gVA/ fQANj7XAf5q6aOGOPLVNXV3fhKfS7NUy9pRAEwOa/6c0rOSwNZf8aQjYZQYyctzPP9 bCXxTQTNhzTTPbqiCtRbFJ7MvTN7Ghybq1OjoZ7w=
From: Owen DeLong 
Message-Id: 
Content-Type: multipart/alternative; boundary="Apple-Mail=_901C778E-71AF-47E7-9D4E-A42AD66B884F"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\))
Date: Thu, 31 Oct 2019 07:16:57 -0700
In-Reply-To: <55508c99-42b7-5c22-5c56-306a41b51bf3@gmail.com>
Cc: v6ops@ietf.org
To: Alexandre Petrescu 
References: <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com>  <9dfd5e47-c593-4145-b530-74fb0f4155ed@www.fastmail.com>  <6ABAC3D7-30EA-4ECD-8B5F-A04309C208CE@delong.com> <55508c99-42b7-5c22-5c56-306a41b51bf3@gmail.com>
X-Mailer: Apple Mail (2.3445.104.8)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Thu, 31 Oct 2019 07:16:59 -0700 (PDT)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 14:17:29 -0000

--Apple-Mail=_901C778E-71AF-47E7-9D4E-A42AD66B884F
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On Oct 31, 2019, at 3:02 AM, Alexandre Petrescu =
 wrote:
>=20
>=20
>=20
> Le 31/10/2019 =C3=A0 04:05, Owen DeLong a =C3=A9crit :
>> 8 /64s is a /61.
> Right, I guess 8 /64s is a /61 because 2^3 is 8, and 3+61 is 64.
>=20
>=20
Well, a /60 would include not only ce10..ce17, but also ce18, ce19, =
ce1a, ce1b, ce1c, ce1d, ce1e, and ce1f.

I=E2=80=99m not familiar with your particular router or its GUI, so I =
can=E2=80=99t explain why it displays what it does.

It may simply be limited to 8 subnets that it can handle. It may be =
something else.

I doubt that it has anything to do with your neighbor as your neighbor =
would get their own separate PD. They might have the opposing /61 =
(ce18..ce1f), but in that case they would still also have 8 subnets in =
that case.
> Yet in the hextet notation, I get ce10, ce11 ... ce17 (see an =
annotated figure of GUI below).  They are 8 /64s.  I dont see ce18, =
neither ce19 in the GUI.  Might it be that my neighbor gets ce18 and =
ce19, but it would mean s/he cant get more than 2 /64s.  Might it be =
that free hides ce18 and ce19 for something else inside my home that =
they dont tell me what.  Might it be they expect me to ask them for more =
addresses later.
>=20
> Whether I get a /61 or a /60 at home is still a valid question for me.
>=20
>> 16 /64s is a /60.
>> 256 /64s is a /56.
>> You should be getting 65,536 /64s (a /48) and if I were you, I would =
complain to any ISP that gave me less.I=20
> I keep the /48 request in mind for my next interaction with their =
service, because I have many things to ask.
>=20
> I suppose they will ask me, in return, if I already spent the 2^61 =
addresses they already gave me.
>=20
This is IPv4think. In the IPv6 world, the intent is to provide large =
blocks to avoid future need to renumber and routing table pollution.

Owen

> Alex
>=20
>=20
>=20
>=20
>=20
> PS:
>=20
> For information, see below an annotated copy of the GUI listing the =
form of the 8 prefixes I see in GUI on CPE.
>=20
> One may notice things to complain about: the use of ff:fe in the LL, =
the way they call it 'Prefix Delegation' without using DHCPv6-PD and the =
optional firewall IPv6 activation (off by default - they dream :-)
>=20
> You may understand why I say I have many things to ask them.
>=20
>=20
>=20
> 
>=20
>=20
>=20
>=20
>=20
>>=20
>> Owen
>>=20
>>> On Oct 30, 2019, at 9:29 AM, Alexandre Petrescu =
  =
wrote:
>>>=20
>>>=20
>>>=20
>>> Le 30/10/2019 =C3=A0 15:27, Radu-Adrian Feurdean a =C3=A9crit :
>>>> On Thu, Oct 24, 2019, at 11:20, Alexandre Petrescu wrote:
>>>>> In particular, the home networks scenario is very appropriate.
>>>>> First, I must say that the home network that I use uses a fixed
>>>>> /56 allocated by my ISP.  In this, the prefix never changes, and =
it
>>>>> is not obtained by DHCPv6-PD - it is guaranteed by contract signed
>>>>> by hand. Such a case could be mentioned, as not being a problem =
described in this draft.
>>>> If you are talking about residential service (not =
business/enterprise-class), I would like to know who your service =
provider is.
>>> (my correction: I am not at all good at bit fiddling, sorry.  What I =
get
>>> at home is a /60, I think, not a /56.  Because the CPE GUI proposes =
me
>>> to split it into 8 /64s).
>>>=20
>>> YEs, it is at home, probably you mean it is residential.  The =
payment is
>>> a flat 35eur/month.  No special QoS commitments from them, other =
than a
>>> 'noise level' of 55dbm due to the length of the line.
>>>=20
>>> The service provider is Free. ('Free' is its name; it was the first
>>> callable at gratuitous phone numbers when all others requested a =
payment
>>> in exchange; later they were the first to offer flat rates when the
>>> others were per-connection time; because of that it called itself =
so).
>>>=20
>>>>> I must say that this kind of software (request a prefix with =
DHCPv6-PD, form sub-prefixes, and put them in RAs on the other =
interfaces) does not exist as open source or some other available =
package.
>>>> Dibbler-client does that by default. Once the delegated prefix =
(shorter than /64) is obtained, a /64 from that prefix is assigned to
>>>> each interface. With proper radvd.conf configuration (prefix =
::/64),
>>>> RAs will be sent for those prefixes.
>>> I did not know.  The difficulty I talked about is to maintain what's =
in
>>> that radvd.conf in sync with what is dhcpd.conf.  Maybe some =
software
>>> packages already do it.
>>>=20
>>> Also, because you talk about deriving /64s out of /56: I am not sure
>>> there is a standard way to do it.  Maybe dibbler does it, but I =
doubt it
>>> is the best way.
>>>=20
>>>> A lot (?? most ??) of CPEs implementing DHCPv6-PD client do this in =
some form or another. Some do this automatically (take prefixes and =
assign them to interfaces), other need manual configuration (n-th prefix =
go to interface ZZZ).
>>> It's good to know.
>>>=20
>>> But again, I doubt these CPEs derive prefixes in the manner that _I_
>>> want it.
>>>=20
>>> For example, I want the /60 to be derived into one /64 and a single
>>> other set of /64s.  I dont want the /60 to be derived into 8 /64s.
>>>=20
>>> I do that to help aggregation and speed up the forwarding process.
>>>=20
>>> Other times I might want to derive that /60 differently.
>>>=20
>>> I dont think there is a standard way to do it.
>>>=20
>>>>> Because of that, I am surprised that you call it 'the most common =
deployment scenario'.  Is this a scenario that is _expected_ to be
>>>>> 'common'?
>>>> "Expected enough" to warrant a device to be disqualified as "CPE =
that
>>>> supports IPv6" if it doesn't work this way. In an ISP environment.
>>> Well.
>>>=20
>>> A CPE that supports IPv6 should run DHCPv6.  A CLient and a Server?
>>> Both?  Just one?
>>>=20
>>> How does CPE propagate the prefixes learned with its CLient to its =
Server?
>>>=20
>>>>> I would like to request addition of two other scenarios:
>>>>> - an IoT scenario, in which an IoR Router connects several sensors
>>>>> to the Internet.  For example, an IoT Router is deployed in a box
>>>>> at a traffic lights.  The IoT device is the Traffic Lights =
Controller connected on Ethernet to the IoT Router.  The IoT Router
>>>>> is connected on 4G.
>>>>> - a vehicular networks scenario: the On-Board Unit is deployed in =
a
>>>>> car. This OBU has a 4G interface and an Ethernet interface. There
>>>>> are several computers in the car that need IPv6 addresses.
>>>> Like : you have a mobile phone on a network doing IPv6+NAT64,
>>> My CPE is not doing NAT64, I think.
>>>=20
>>> I dont want NAT64.
>>>=20
>>>> you pout it in tethering/mobile-hotspot mode, and connect several =
other devices (usually laptops) to that hotspot - they all get IPv6 =
addresses (in the same single /64 that the phone obtained via SLAAC or =
something else). It is clear that getting a /56 (even a /60 or /62
>>>> would do it) via DHCPv6-PD would be a nicer solution, but when your
>>>> mobile device runs android....
>>> Well.  Android is good in many places and for many goals.
>>>=20
>>> I agree that tethering/mobile-hotspot mode is a good solution in =
certain
>>> circumstances, like sharing one's smartphone connection to tablets =
nearby.
>>>=20
>>> However, tethering in IPv6 ('64share' RFC) has some drawbacks: (1) =
it
>>> does not support more than the WiFi tethered to the cellular (doesnt
>>> support an additional subnet like Ethernet) and (2) the incoming
>>> interface must be cellular (cant be another wifi).
>>>=20
>>> In a car, one has a WiFi hotspot but also lots of Ethernets and =
CANs.
>>> It's not possible to use 64share to accomodate all that.
>>>=20
>>> Hence, there DHCPv6-PD is not just a nicer solution - it is a =
requirement.
>>>=20
>>> Other than cars, even at home, one may want a DHCPv6-PD Server on =
the
>>> CPE for similar reasons.
>>>=20
>>> If one wants to run tethering on a device at home that has no =
cellular
>>> connection (e.g. a WiFi<->USB, or a USB<->Ethernet device) to extend =
to
>>> other devices then one cant use tethering ('64share'), must use =
DHCPv6-PD.
>>>=20
>>> Alex
>>>=20
>>>=20
>>> _______________________________________________
>>> v6ops mailing list
>>> v6ops@ietf.org 
>>> https://www.ietf.org/mailman/listinfo/v6ops =



--Apple-Mail=_901C778E-71AF-47E7-9D4E-A42AD66B884F
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8



On Oct 31, 2019, at 3:02 AM, Alexandre Petrescu <alexandre.petrescu@gmail.com> wrote:


 =20
    
 =20
  


    

    
Le 31/10/2019 =C3=A0 04:05, Owen =
DeLong a
      =C3=A9crit :

    

    

      
8 /64s is a /61.


    
Right, I guess 8 /64s is a =
/61 because 2^3 is 8, and 3+61 is
        64.

Well, a /60 would include not =
only ce10..ce17, but also ce18, ce19, ce1a, ce1b, ce1c, ce1d, ce1e, and =
ce1f.

I=E2=80=99m not familiar with =
your particular router or its GUI, so I can=E2=80=99t explain why it =
displays what it does.

It may simply =
be limited to 8 subnets that it can handle. It may be something =
else.

I doubt that it has anything =
to do with your neighbor as your neighbor would get their own separate =
PD. They might have the opposing /61 (ce18..ce1f), but in that case they =
would still also have 8 subnets in that case.
Yet in the hextet notation, I get ce10, ce11 ... ce17 (see =
an
        annotated figure of GUI below).  They are 8 /64s.  I =
dont see
        ce18, neither ce19 in the GUI.  Might it be that my =
neighbor
        gets ce18 and ce19, but it would mean s/he cant get more than 2
        /64s.  Might it be that free hides ce18 and ce19 for =
something
        else inside my home that they dont tell me what.  Might it =
be
        they expect me to ask them for more addresses later.

      
Whether I get a /61 or a /60 =
at home is still a valid
        question for me.

    

    

      
16 /64s is a /60.
256 /64s is a /56.
You should be getting 65,536 /64s (a /48) and if I were you, I would =
complain to any ISP that gave me less.I 

    
I keep the /48 request in =
mind for my next interaction with
        their service, because I have many things to ask.

      
I suppose they will ask me, =
in return, if I already spent the
        2^61 addresses they already gave =
me.
This is IPv4think. In the IPv6 =
world, the intent is to provide large blocks to avoid future need to =
renumber and routing table pollution.

Owen

Alex


      


      
PS:

      
For information, see below =
an annotated copy of the GUI
        listing the form of the 8 prefixes I see in GUI on =
CPE.
One may notice things to =
complain about: the use of ff:fe in
        the LL, the way they call it 'Prefix Delegation' without using
        DHCPv6-PD and the optional firewall IPv6 activation (off by
        default - they dream :-)
You =
may understand why I say I have many things to ask them.


      
<mohkmddlfcdkakja.png><=
/span>

      


    


    

    

      
Owen



      

        
On Oct 30, 2019, at 9:29 =
AM, Alexandre Petrescu <alexandre.petrescu@gmail.=
com> wrote:



Le 30/10/2019 =C3=A0 15:27, Radu-Adrian Feurdean a =C3=A9crit :


        

          
On Thu, Oct 24, 2019, =
at 11:20, Alexandre Petrescu wrote:


          

            
In particular, the =
home networks scenario is very appropriate.
First, I must say that the home network that I use uses a fixed
/56 allocated by my ISP.  In this, the prefix never changes, and it
is not obtained by DHCPv6-PD - it is guaranteed by contract signed
by hand. Such a case could be mentioned, as not being a problem =
described in this draft.


          

          
If you are talking =
about residential service (not business/enterprise-class), I would like =
to know who your service provider is.


        

        
(my correction: I am not =
at all good at bit fiddling, sorry.  What I get
at home is a /60, I think, not a /56.  Because the CPE GUI proposes me
to split it into 8 /64s).

YEs, it is at home, probably you mean it is residential.  The payment is
a flat 35eur/month.  No special QoS commitments from them, other than a
'noise level' of 55dbm due to the length of the line.

The service provider is Free. ('Free' is its name; it was the first
callable at gratuitous phone numbers when all others requested a payment
in exchange; later they were the first to offer flat rates when the
others were per-connection time; because of that it called itself so).



        

          

            
I must say that this =
kind of software (request a prefix with DHCPv6-PD, form sub-prefixes, =
and put them in RAs on the other interfaces) does not exist as open =
source or some other available package.


          

          
Dibbler-client does =
that by default. Once the delegated prefix (shorter than /64) is =
obtained, a /64 from that prefix is assigned to
each interface. With proper radvd.conf configuration (prefix ::/64),
RAs will be sent for those prefixes.


        

        
I did not know.  The =
difficulty I talked about is to maintain what's in
that radvd.conf in sync with what is dhcpd.conf.  Maybe some software
packages already do it.

Also, because you talk about deriving /64s out of /56: I am not sure
there is a standard way to do it.  Maybe dibbler does it, but I doubt it
is the best way.



        

          
A lot (?? most ??) of =
CPEs implementing DHCPv6-PD client do this in some form or another. Some =
do this automatically (take prefixes and assign them to interfaces), =
other need manual configuration (n-th prefix go to interface ZZZ).


        

        
It's good to know.

But again, I doubt these CPEs derive prefixes in the manner that _I_
want it.

For example, I want the /60 to be derived into one /64 and a single
other set of /64s.  I dont want the /60 to be derived into 8 /64s.

I do that to help aggregation and speed up the forwarding process.

Other times I might want to derive that /60 differently.

I dont think there is a standard way to do it.



        

          

            
Because of that, I am =
surprised that you call it 'the most common deployment scenario'.  Is =
this a scenario that is _expected_ to be
'common'?


          

          
"Expected enough" to =
warrant a device to be disqualified as "CPE that
supports IPv6" if it doesn't work this way. In an ISP environment.


        

        
Well.

A CPE that supports IPv6 should run DHCPv6.  A CLient and a Server?
Both?  Just one?

How does CPE propagate the prefixes learned with its CLient to its =
Server?



        

          

            
I would like to =
request addition of two other scenarios:
- an IoT scenario, in which an IoR Router connects several sensors
to the Internet.  For example, an IoT Router is deployed in a box
at a traffic lights.  The IoT device is the Traffic Lights Controller =
connected on Ethernet to the IoT Router.  The IoT Router
is connected on 4G.
- a vehicular networks scenario: the On-Board Unit is deployed in a
car. This OBU has a 4G interface and an Ethernet interface. There
are several computers in the car that need IPv6 addresses.


          

          
Like : you have a =
mobile phone on a network doing IPv6+NAT64,


        

        
My CPE is not doing =
NAT64, I think.

I dont want NAT64.



        

          
you pout it in =
tethering/mobile-hotspot mode, and connect several other devices =
(usually laptops) to that hotspot - they all get IPv6 addresses (in the =
same single /64 that the phone obtained via SLAAC or something else). It =
is clear that getting a /56 (even a /60 or /62
would do it) via DHCPv6-PD would be a nicer solution, but when your
mobile device runs android....


        

        
Well.  Android is good in =
many places and for many goals.

I agree that tethering/mobile-hotspot mode is a good solution in certain
circumstances, like sharing one's smartphone connection to tablets =
nearby.

However, tethering in IPv6 ('64share' RFC) has some drawbacks: (1) it
does not support more than the WiFi tethered to the cellular (doesnt
support an additional subnet like Ethernet) and (2) the incoming
interface must be cellular (cant be another wifi).

In a car, one has a WiFi hotspot but also lots of Ethernets and CANs.
It's not possible to use 64share to accomodate all that.

Hence, there DHCPv6-PD is not just a nicer solution - it is a =
requirement.

Other than cars, even at home, one may want a DHCPv6-PD Server on the
CPE for similar reasons.

If one wants to run tethering on a device at home that has no cellular
connection (e.g. a WiFi<->USB, or a USB<->Ethernet device) =
to extend to
other devices then one cant use tethering ('64share'), must use =
DHCPv6-PD.

Alex


_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.ietf.org/=
mailman/listinfo/v6ops


      

      

    

  




=

--Apple-Mail=_901C778E-71AF-47E7-9D4E-A42AD66B884F--


From nobody Thu Oct 31 07:33:04 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E641512018B for ; Thu, 31 Oct 2019 07:33:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.998
X-Spam-Level: 
X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rkI6M7ZF1cAk for ; Thu, 31 Oct 2019 07:33:01 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 73FE21200FF for ; Thu, 31 Oct 2019 07:32:53 -0700 (PDT)
Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9VEWjPQ003427 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 31 Oct 2019 07:32:46 -0700
DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9VEWjPQ003427
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572532367; bh=P2Z5Puv8HtYf7ykU/BWcJAx8lJaEN0wJiRwsZ3I+REk=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=1EIMnly8AwMLvaWB2RW3mJd5n5VZ3PIL4F3srTvku1z3nN/dTgBDc5Q2M0neWlyEd DcnKvTKtLHW/vNuphG3tYkN6LWjV3qw2sSUkHnzMP6SSrtTkSDx095wba0qcWDX4RL nhy+cU4Z5zx0WRQyGMWU3rh/pfE31pEHs+edFA64=
From: Owen DeLong 
Message-Id: <7649D02C-9252-4F5E-B195-B213F299F6C1@delong.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_64A858FF-9DE7-4E12-AEBE-132404C185A0"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\))
Date: Thu, 31 Oct 2019 07:32:45 -0700
In-Reply-To: 
Cc: "v6ops@ietf.org" 
To: Alexandre Petrescu 
References: 
X-Mailer: Apple Mail (2.3445.104.8)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Thu, 31 Oct 2019 07:32:47 -0700 (PDT)
Archived-At: 
Subject: Re: [v6ops] IPv6 new access from Windows to Google: display of a critical security alert
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 14:33:03 -0000

--Apple-Mail=_64A858FF-9DE7-4E12-AEBE-132404C185A0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On Oct 31, 2019, at 3:25 AM, Alexandre Petrescu =
 wrote:
>=20
> Google alerted me a few days ago during my DHCPv6 experiments, when I =
browsed it with a Windows computer using IPv6 first time, although many =
times previously with IPv4.
>=20
>=20
Since I don=E2=80=99t speak French, it=E2=80=99s hard to interpret the =
error message and I can=E2=80=99t paste the contents of an image into =
google translate.

> Incidentally, the address my Windows used was an address delivered by =
DHCPv6.  Being DHCPv6 is visible in its format: in the hextet =
representation, the '::' appears before the last two hextets =
(X::b4cc:8eb9) as opposed to a SLAAC address where the double colon =
appears quasi always before the last _four_ hextets.
>=20
>=20
Google can=E2=80=99t tell how you got the address. The position of the =
:: is irrelevant. This is simply an artifact of the UI in question. Any =
address which contains contiguous hextets of all zeroes (e.g. 0:0:0) may =
abbreviate one such group of hextets to ::.

Example: 2001:d8b:0:0:53a2:0:0:1 can be written as:
	2001:db8::53a2:0:0:1
	2001:db8:0:0:53a2::1

All three of the above expressions represent the same exact 128-bit =
address.
> I am trying to understand why Google complained wiht such a critical =
security alert.
>=20
Hard to say. Is the security alert about your address or is it about the =
site you were trying to visit?
If you can provide an English translation of the message, it might be =
possible to provide better advice.

> - is it because the address was a DHCP address rather than SLAAC?
>=20
No. Google can=E2=80=99t tell how the address was assigned. It=E2=80=99s =
just another 128 bit number from Google=E2=80=99s perspective.

> - it is because I connect from an address they have never seen before?
>=20
Without being able to decipher the error message, it=E2=80=99s hard to =
say.
> - is it because it is the first time I connect to them by IPv6 on this =
computer?
>=20
Not likely.
> - is it because when I connect  with IPv6 to them I keep changing the =
IPv6 address (as opposed to IPv4 is always the same because behind NAT)?
>=20
Not likely.
> The messages they displayed are not helpful to understand what's =
happening, because they talk about 'application security', 'wrong =
device', etc.  Neither is the case: I have a running anti-virus so my =
apps are healthy and the device is always the same Windows device I use =
to connect to Google.
>=20
Again, without a translation of the full error message, there is not =
enough information to answer your questions. No guarantee that a =
translation of the full error message would provide enough information, =
but probably worth a try.

Owen

> 
>=20
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops


--Apple-Mail=_64A858FF-9DE7-4E12-AEBE-132404C185A0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8



On Oct 31, 2019, at 3:25 AM, Alexandre Petrescu <alexandre.petrescu@gmail.com> wrote:


 =20

    
 =20
  
Google alerted me a few
          days ago during my DHCPv6 experiments, when I browsed it with
          a Windows computer using IPv6 first time, although many times
          previously with IPv4.

Since I don=E2=80=99t speak =
French, it=E2=80=99s hard to interpret the error message and I can=E2=80=99=
t paste the contents of an image into google translate.

Incidentally, the
          address my Windows used was an address delivered by =
DHCPv6. 
          Being DHCPv6 is visible in its format: in the hextet
          representation, the '::' appears before the last two hextets
          (X::b4cc:8eb9) as opposed to a SLAAC address where the double
          colon appears quasi always before the last _four_ =
hextets.

Google can=E2=80=99t tell how =
you got the address. The position of the :: is irrelevant. This is =
simply an artifact of the UI in question. Any address which contains =
contiguous hextets of all zeroes (e.g. 0:0:0) may abbreviate one such =
group of hextets to ::.

Example: =
2001:d8b:0:0:53a2:0:0:1 can be written as:
	=
2001:db8::53a2:0:0:1
	=
2001:db8:0:0:53a2::1

All =
three of the above expressions represent the same exact 128-bit =
address.
I am trying to
          understand why Google complained wiht such a critical security
          alert.
Hard to say. =
Is the security alert about your address or is it about the site you =
were trying to visit?
If you can provide an English =
translation of the message, it might be possible to provide better =
advice.


        
- is it because the
          address was a DHCP address rather than =
SLAAC?
No. Google can=E2=80=
=99t tell how the address was assigned. It=E2=80=99s just another 128 =
bit number from Google=E2=80=99s perspective.

- it is because I
          connect from an address they have never seen =
before?
Without being able to =
decipher the error message, it=E2=80=99s hard to say.
- is it because it is
          the first time I connect to them by IPv6 on this =
computer?
Not likely.
- is it because when I
          connect  with IPv6 to them I keep changing the IPv6 =
address
          (as opposed to IPv4 is always the same because behind NAT)?
Not likely.

        
The messages they
          displayed are not helpful to understand what's happening,
          because they talk about 'application security', 'wrong
          device', etc.  Neither is the case: I have a running
          anti-virus so my apps are healthy and the device is always the
          same Windows device I use to connect to =
Google.
Again, without a =
translation of the full error message, there is not enough information =
to answer your questions. No guarantee that a translation of the full =
error message would provide enough information, but probably worth a =
try.

Owen

<gapjjmicnkndmmma.jpg><=
/span>

  


_______________________________________________
v6ops =
mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops

=

--Apple-Mail=_64A858FF-9DE7-4E12-AEBE-132404C185A0--


From nobody Thu Oct 31 07:50:22 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32EB81208B2 for ; Thu, 31 Oct 2019 07:50:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.63
X-Spam-Level: 
X-Spam-Status: No, score=-2.63 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f4mEXMl3r_Yu for ; Thu, 31 Oct 2019 07:50:10 -0700 (PDT)
Received: from cirse-smtp-out.extra.cea.fr (cirse-smtp-out.extra.cea.fr [132.167.192.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F01951208D3 for ; Thu, 31 Oct 2019 07:50:09 -0700 (PDT)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by cirse-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9VEo4h0047495; Thu, 31 Oct 2019 15:50:04 +0100
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id BD3AD206AA0; Thu, 31 Oct 2019 15:50:04 +0100 (CET)
Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id AD6AB203A09; Thu, 31 Oct 2019 15:50:04 +0100 (CET)
Received: from [10.11.240.55] ([10.11.240.55]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9VEo3jr002636; Thu, 31 Oct 2019 15:50:03 +0100
To: Owen DeLong 
Cc: v6ops@ietf.org
References: <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com>  <9dfd5e47-c593-4145-b530-74fb0f4155ed@www.fastmail.com>  <6ABAC3D7-30EA-4ECD-8B5F-A04309C208CE@delong.com> <55508c99-42b7-5c22-5c56-306a41b51bf3@gmail.com> 
From: Alexandre Petrescu 
Message-ID: 
Date: Thu, 31 Oct 2019 15:50:03 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: multipart/alternative; boundary="------------7A509730D16058C4B6EE61F7"
Content-Language: fr
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 14:50:19 -0000

This is a multi-part message in MIME format.
--------------7A509730D16058C4B6EE61F7
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit


Le 31/10/2019 à 15:16, Owen DeLong a écrit :
>
>
>> On Oct 31, 2019, at 3:02 AM, Alexandre Petrescu 
>> > 
>> wrote:
>>
>>
>> Le 31/10/2019 à 04:05, Owen DeLong a écrit :
>>> 8 /64s is a /61.
>>
>> Right, I guess 8 /64s is a /61 because 2^3 is 8, and 3+61 is 64.
>>
>>
> Well, a /60 would include not only ce10..ce17, but also ce18, ce19, 
> ce1a, ce1b, ce1c, ce1d, ce1e, and ce1f.
>
> I’m not familiar with your particular router or its GUI, so I can’t 
> explain why it displays what it does.
>
> It may simply be limited to 8 subnets that it can handle. It may be 
> something else.
>
> I doubt that it has anything to do with your neighbor as your neighbor 
> would get their own separate PD. They might have the opposing /61 
> (ce18..ce1f), but in that case they would still also have 8 subnets in 
> that case.


I think that's right.

I think I conclude I get a /61 at home from Free.  I will try to not 
forget this number in future conversations.

(remark, a private email also challenged me on the stability and 
contractuability of this prefix: I must say I dont know; I just know it 
did not change in several years)


>> Yet in the hextet notation, I get ce10, ce11 ... ce17 (see an 
>> annotated figure of GUI below).  They are 8 /64s.  I dont see ce18, 
>> neither ce19 in the GUI.  Might it be that my neighbor gets ce18 and 
>> ce19, but it would mean s/he cant get more than 2 /64s.  Might it be 
>> that free hides ce18 and ce19 for something else inside my home that 
>> they dont tell me what.  Might it be they expect me to ask them for 
>> more addresses later.
>>
>> Whether I get a /61 or a /60 at home is still a valid question for me.
>>
>>> 16 /64s is a /60.
>>> 256 /64s is a /56.
>>> You should be getting 65,536 /64s (a /48) and if I were you, I would complain to any ISP that gave me less.I
>>
>> I keep the /48 request in mind for my next interaction with their 
>> service, because I have many things to ask.
>>
>> I suppose they will ask me, in return, if I already spent the 2^61 
>> addresses they already gave me.
>>
> This is IPv4think. In the IPv6 world, the intent is to provide large 
> blocks to avoid future need to renumber and routing table pollution.


Noted the IPv4think.

Alex


>
> Owen
>
>> Alex
>>
>>
>>
>> PS:
>>
>> For information, see below an annotated copy of the GUI listing the 
>> form of the 8 prefixes I see in GUI on CPE.
>>
>> One may notice things to complain about: the use of ff:fe in the LL, 
>> the way they call it 'Prefix Delegation' without using DHCPv6-PD and 
>> the optional firewall IPv6 activation (off by default - they dream :-)
>>
>> You may understand why I say I have many things to ask them.
>>
>>
>> 
>>
>>
>>
>>> Owen
>>>
>>>> On Oct 30, 2019, at 9:29 AM, Alexandre Petrescu  wrote:
>>>>
>>>>
>>>>
>>>> Le 30/10/2019 à 15:27, Radu-Adrian Feurdean a écrit :
>>>>> On Thu, Oct 24, 2019, at 11:20, Alexandre Petrescu wrote:
>>>>>> In particular, the home networks scenario is very appropriate.
>>>>>> First, I must say that the home network that I use uses a fixed
>>>>>> /56 allocated by my ISP.  In this, the prefix never changes, and it
>>>>>> is not obtained by DHCPv6-PD - it is guaranteed by contract signed
>>>>>> by hand. Such a case could be mentioned, as not being a problem described in this draft.
>>>>> If you are talking about residential service (not business/enterprise-class), I would like to know who your service provider is.
>>>> (my correction: I am not at all good at bit fiddling, sorry.  What I get
>>>> at home is a /60, I think, not a /56.  Because the CPE GUI proposes me
>>>> to split it into 8 /64s).
>>>>
>>>> YEs, it is at home, probably you mean it is residential.  The payment is
>>>> a flat 35eur/month.  No special QoS commitments from them, other than a
>>>> 'noise level' of 55dbm due to the length of the line.
>>>>
>>>> The service provider is Free. ('Free' is its name; it was the first
>>>> callable at gratuitous phone numbers when all others requested a payment
>>>> in exchange; later they were the first to offer flat rates when the
>>>> others were per-connection time; because of that it called itself so).
>>>>
>>>>>> I must say that this kind of software (request a prefix with DHCPv6-PD, form sub-prefixes, and put them in RAs on the other interfaces) does not exist as open source or some other available package.
>>>>> Dibbler-client does that by default. Once the delegated prefix (shorter than /64) is obtained, a /64 from that prefix is assigned to
>>>>> each interface. With proper radvd.conf configuration (prefix ::/64),
>>>>> RAs will be sent for those prefixes.
>>>> I did not know.  The difficulty I talked about is to maintain what's in
>>>> that radvd.conf in sync with what is dhcpd.conf.  Maybe some software
>>>> packages already do it.
>>>>
>>>> Also, because you talk about deriving /64s out of /56: I am not sure
>>>> there is a standard way to do it.  Maybe dibbler does it, but I doubt it
>>>> is the best way.
>>>>
>>>>> A lot (?? most ??) of CPEs implementing DHCPv6-PD client do this in some form or another. Some do this automatically (take prefixes and assign them to interfaces), other need manual configuration (n-th prefix go to interface ZZZ).
>>>> It's good to know.
>>>>
>>>> But again, I doubt these CPEs derive prefixes in the manner that _I_
>>>> want it.
>>>>
>>>> For example, I want the /60 to be derived into one /64 and a single
>>>> other set of /64s.  I dont want the /60 to be derived into 8 /64s.
>>>>
>>>> I do that to help aggregation and speed up the forwarding process.
>>>>
>>>> Other times I might want to derive that /60 differently.
>>>>
>>>> I dont think there is a standard way to do it.
>>>>
>>>>>> Because of that, I am surprised that you call it 'the most common deployment scenario'.  Is this a scenario that is _expected_ to be
>>>>>> 'common'?
>>>>> "Expected enough" to warrant a device to be disqualified as "CPE that
>>>>> supports IPv6" if it doesn't work this way. In an ISP environment.
>>>> Well.
>>>>
>>>> A CPE that supports IPv6 should run DHCPv6.  A CLient and a Server?
>>>> Both?  Just one?
>>>>
>>>> How does CPE propagate the prefixes learned with its CLient to its Server?
>>>>
>>>>>> I would like to request addition of two other scenarios:
>>>>>> - an IoT scenario, in which an IoR Router connects several sensors
>>>>>> to the Internet.  For example, an IoT Router is deployed in a box
>>>>>> at a traffic lights.  The IoT device is the Traffic Lights Controller connected on Ethernet to the IoT Router.  The IoT Router
>>>>>> is connected on 4G.
>>>>>> - a vehicular networks scenario: the On-Board Unit is deployed in a
>>>>>> car. This OBU has a 4G interface and an Ethernet interface. There
>>>>>> are several computers in the car that need IPv6 addresses.
>>>>> Like : you have a mobile phone on a network doing IPv6+NAT64,
>>>> My CPE is not doing NAT64, I think.
>>>>
>>>> I dont want NAT64.
>>>>
>>>>> you pout it in tethering/mobile-hotspot mode, and connect several other devices (usually laptops) to that hotspot - they all get IPv6 addresses (in the same single /64 that the phone obtained via SLAAC or something else). It is clear that getting a /56 (even a /60 or /62
>>>>> would do it) via DHCPv6-PD would be a nicer solution, but when your
>>>>> mobile device runs android....
>>>> Well.  Android is good in many places and for many goals.
>>>>
>>>> I agree that tethering/mobile-hotspot mode is a good solution in certain
>>>> circumstances, like sharing one's smartphone connection to tablets nearby.
>>>>
>>>> However, tethering in IPv6 ('64share' RFC) has some drawbacks: (1) it
>>>> does not support more than the WiFi tethered to the cellular (doesnt
>>>> support an additional subnet like Ethernet) and (2) the incoming
>>>> interface must be cellular (cant be another wifi).
>>>>
>>>> In a car, one has a WiFi hotspot but also lots of Ethernets and CANs.
>>>> It's not possible to use 64share to accomodate all that.
>>>>
>>>> Hence, there DHCPv6-PD is not just a nicer solution - it is a requirement.
>>>>
>>>> Other than cars, even at home, one may want a DHCPv6-PD Server on the
>>>> CPE for similar reasons.
>>>>
>>>> If one wants to run tethering on a device at home that has no cellular
>>>> connection (e.g. a WiFi<->USB, or a USB<->Ethernet device) to extend to
>>>> other devices then one cant use tethering ('64share'), must use DHCPv6-PD.
>>>>
>>>> Alex
>>>>
>>>>
>>>> _______________________________________________
>>>> v6ops mailing list
>>>> v6ops@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/v6ops
>

--------------7A509730D16058C4B6EE61F7
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit


  
    
  
  
    


    

    
Le 31/10/2019 à 15:16, Owen DeLong a
      écrit :

    

    

      
      

      


        

          
On Oct 31, 2019, at 3:02 AM, Alexandre Petrescu
            <alexandre.petrescu@gmail.com>
            wrote:

          

          

            

              


              

              
Le 31/10/2019 à 04:05, Owen
                DeLong a écrit :

              

              

                
8 /64s is a /61.


              

              
Right, I guess 8 /64s is a /61
                  because 2^3 is 8, and 3+61 is 64.

              


              

            

          

        

        Well, a /60 would include not only ce10..ce17, but also ce18,
        ce19, ce1a, ce1b, ce1c, ce1d, ce1e, and ce1f.

      


      

      
I’m not familiar with your particular router or its GUI, so I
        can’t explain why it displays what it does.

      


      

      
It may simply be limited to 8 subnets that it can handle. It
        may be something else.

      


      

      
I doubt that it has anything to do with your neighbor as your
        neighbor would get their own separate PD. They might have the
        opposing /61 (ce18..ce1f), but in that case they would still
        also have 8 subnets in that case.

      

    

    


    

    
I think that's right.

    
I think I conclude I get a /61 at home from Free.  I will try to
      not forget this number in future conversations.

    
(remark, a private email also challenged me on the stability and
      contractuability of this prefix: I must say I dont know; I just
      know it did not change in several years)

    


    

    

      

        

          

            

              
Yet in the hextet notation, I get
                  ce10, ce11 ... ce17 (see an annotated figure of GUI
                  below).  They are 8 /64s.  I dont see ce18, neither
                  ce19 in the GUI.  Might it be that my neighbor gets
                  ce18 and ce19, but it would mean s/he cant get more
                  than 2 /64s.  Might it be that free hides ce18 and
                  ce19 for something else inside my home that they dont
                  tell me what.  Might it be they expect me to ask them
                  for more addresses later.

                

              
Whether I get a /61 or a /60 at
                  home is still a valid question for me.

              

              

                
16 /64s is a /60.
256 /64s is a /56.
You should be getting 65,536 /64s (a /48) and if I were you, I would complain to any ISP that gave me less.I 

              

              
I keep the /48 request in mind
                  for my next interaction with their service, because I
                  have many things to ask.

                

              
I suppose they will ask me, in
                  return, if I already spent the 2^61 addresses they
                  already gave me.

            

          

        

        This is IPv4think. In the IPv6 world, the intent is to provide
        large blocks to avoid future need to renumber and routing table
        pollution.

    

    


    

    
Noted the IPv4think.

    

    
Alex

    


    

    

      


      

      
Owen

      


        

          

            

              
Alex

              


                

              


                

              
PS:

                

              
For information, see below an
                  annotated copy of the GUI listing the form of the 8
                  prefixes I see in GUI on CPE.

              
One may notice things to complain
                  about: the use of ff:fe in the LL, the way they call
                  it 'Prefix Delegation' without using DHCPv6-PD and the
                  optional firewall IPv6 activation (off by default -
                  they dream :-)

              
You may understand why I say I
                  have many things to ask them.

              


                

              
<mohkmddlfcdkakja.png>

                

              


              

              


              

              

                
Owen



                

                  
On Oct 30, 2019, at 9:29 AM, Alexandre Petrescu <alexandre.petrescu@gmail.com> wrote:



Le 30/10/2019 à 15:27, Radu-Adrian Feurdean a écrit :


                  

                    
On Thu, Oct 24, 2019, at 11:20, Alexandre Petrescu wrote:


                    

                      
In particular, the home networks scenario is very appropriate.
First, I must say that the home network that I use uses a fixed
/56 allocated by my ISP.  In this, the prefix never changes, and it
is not obtained by DHCPv6-PD - it is guaranteed by contract signed
by hand. Such a case could be mentioned, as not being a problem described in this draft.


                    

                    
If you are talking about residential service (not business/enterprise-class), I would like to know who your service provider is.


                  

                  
(my correction: I am not at all good at bit fiddling, sorry.  What I get
at home is a /60, I think, not a /56.  Because the CPE GUI proposes me
to split it into 8 /64s).

YEs, it is at home, probably you mean it is residential.  The payment is
a flat 35eur/month.  No special QoS commitments from them, other than a
'noise level' of 55dbm due to the length of the line.

The service provider is Free. ('Free' is its name; it was the first
callable at gratuitous phone numbers when all others requested a payment
in exchange; later they were the first to offer flat rates when the
others were per-connection time; because of that it called itself so).



                  

                    

                      
I must say that this kind of software (request a prefix with DHCPv6-PD, form sub-prefixes, and put them in RAs on the other interfaces) does not exist as open source or some other available package.


                    

                    
Dibbler-client does that by default. Once the delegated prefix (shorter than /64) is obtained, a /64 from that prefix is assigned to
each interface. With proper radvd.conf configuration (prefix ::/64),
RAs will be sent for those prefixes.


                  

                  
I did not know.  The difficulty I talked about is to maintain what's in
that radvd.conf in sync with what is dhcpd.conf.  Maybe some software
packages already do it.

Also, because you talk about deriving /64s out of /56: I am not sure
there is a standard way to do it.  Maybe dibbler does it, but I doubt it
is the best way.



                  

                    
A lot (?? most ??) of CPEs implementing DHCPv6-PD client do this in some form or another. Some do this automatically (take prefixes and assign them to interfaces), other need manual configuration (n-th prefix go to interface ZZZ).


                  

                  
It's good to know.

But again, I doubt these CPEs derive prefixes in the manner that _I_
want it.

For example, I want the /60 to be derived into one /64 and a single
other set of /64s.  I dont want the /60 to be derived into 8 /64s.

I do that to help aggregation and speed up the forwarding process.

Other times I might want to derive that /60 differently.

I dont think there is a standard way to do it.



                  

                    

                      
Because of that, I am surprised that you call it 'the most common deployment scenario'.  Is this a scenario that is _expected_ to be
'common'?


                    

                    
"Expected enough" to warrant a device to be disqualified as "CPE that
supports IPv6" if it doesn't work this way. In an ISP environment.


                  

                  
Well.

A CPE that supports IPv6 should run DHCPv6.  A CLient and a Server?
Both?  Just one?

How does CPE propagate the prefixes learned with its CLient to its Server?



                  

                    

                      
I would like to request addition of two other scenarios:
- an IoT scenario, in which an IoR Router connects several sensors
to the Internet.  For example, an IoT Router is deployed in a box
at a traffic lights.  The IoT device is the Traffic Lights Controller connected on Ethernet to the IoT Router.  The IoT Router
is connected on 4G.
- a vehicular networks scenario: the On-Board Unit is deployed in a
car. This OBU has a 4G interface and an Ethernet interface. There
are several computers in the car that need IPv6 addresses.


                    

                    
Like : you have a mobile phone on a network doing IPv6+NAT64,


                  

                  
My CPE is not doing NAT64, I think.

I dont want NAT64.



                  

                    
you pout it in tethering/mobile-hotspot mode, and connect several other devices (usually laptops) to that hotspot - they all get IPv6 addresses (in the same single /64 that the phone obtained via SLAAC or something else). It is clear that getting a /56 (even a /60 or /62
would do it) via DHCPv6-PD would be a nicer solution, but when your
mobile device runs android....


                  

                  
Well.  Android is good in many places and for many goals.

I agree that tethering/mobile-hotspot mode is a good solution in certain
circumstances, like sharing one's smartphone connection to tablets nearby.

However, tethering in IPv6 ('64share' RFC) has some drawbacks: (1) it
does not support more than the WiFi tethered to the cellular (doesnt
support an additional subnet like Ethernet) and (2) the incoming
interface must be cellular (cant be another wifi).

In a car, one has a WiFi hotspot but also lots of Ethernets and CANs.
It's not possible to use 64share to accomodate all that.

Hence, there DHCPv6-PD is not just a nicer solution - it is a requirement.

Other than cars, even at home, one may want a DHCPv6-PD Server on the
CPE for similar reasons.

If one wants to run tethering on a device at home that has no cellular
connection (e.g. a WiFi<->USB, or a USB<->Ethernet device) to extend to
other devices then one cant use tethering ('64share'), must use DHCPv6-PD.

Alex


_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops


                

              

            

          

        

      

      

    

  


--------------7A509730D16058C4B6EE61F7--


From nobody Thu Oct 31 08:04:33 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA295120823 for ; Thu, 31 Oct 2019 08:04:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.977
X-Spam-Level: *
X-Spam-Status: No, score=1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, HTML_OBFUSCATE_20_30=1.999, HTML_TAG_BALANCE_HEAD=0.817, HTTP_ESCAPED_HOST=0.1, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001, URI_TRY_3LD=0.69, WEIRD_QUOTING=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n8ly_ipc3sQW for ; Thu, 31 Oct 2019 08:04:25 -0700 (PDT)
Received: from cirse-smtp-out.extra.cea.fr (cirse-smtp-out.extra.cea.fr [132.167.192.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70C09120811 for ; Thu, 31 Oct 2019 08:04:24 -0700 (PDT)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by cirse-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9VF4Jo2003524; Thu, 31 Oct 2019 16:04:19 +0100
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 417B5206A00; Thu, 31 Oct 2019 16:04:19 +0100 (CET)
Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id C8C77203C3B; Thu, 31 Oct 2019 16:04:18 +0100 (CET)
Received: from [10.11.240.55] ([10.11.240.55]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id x9VF3nkV011035; Thu, 31 Oct 2019 16:03:50 +0100
To: Owen DeLong 
Cc: "v6ops@ietf.org" 
References:  <7649D02C-9252-4F5E-B195-B213F299F6C1@delong.com>
From: Alexandre Petrescu 
Message-ID: 
Date: Thu, 31 Oct 2019 16:03:49 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.0
MIME-Version: 1.0
In-Reply-To: <7649D02C-9252-4F5E-B195-B213F299F6C1@delong.com>
Content-Type: multipart/mixed; boundary="------------19233F335A7405FEF9E6B9CE"
Content-Language: fr
Archived-At: 
Subject: Re: [v6ops] IPv6 new access from Windows to Google: display of a critical security alert
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 15:04:31 -0000

This is a multi-part message in MIME format.
--------------19233F335A7405FEF9E6B9CE
Content-Type: multipart/alternative;
 boundary="------------E101B6A04B84DEF89426C4C9"


--------------E101B6A04B84DEF89426C4C9
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit


Le 31/10/2019 à 15:32, Owen DeLong a écrit :
>
>
>> On Oct 31, 2019, at 3:25 AM, Alexandre Petrescu 
>> > 
>> wrote:
>>
>> Google alerted me a few days ago during my DHCPv6 experiments, when I 
>> browsed it with a Windows computer using IPv6 first time, although 
>> many times previously with IPv4.
>>
>>
> Since I don’t speak French, it’s hard to interpret the error message 
> and I can’t paste the contents of an image into google translate.
>
>> Incidentally, the address my Windows used was an address delivered by 
>> DHCPv6. Being DHCPv6 is visible in its format: in the hextet 
>> representation, the '::' appears before the last two hextets 
>> (X::b4cc:8eb9) as opposed to a SLAAC address where the double colon 
>> appears quasi always before the last _four_ hextets.
>>
>>
> Google can’t tell how you got the address. The position of the :: is 
> irrelevant. This is simply an artifact of the UI in question. Any 
> address which contains contiguous hextets of all zeroes (e.g. 0:0:0) 
> may abbreviate one such group of hextets to ::.
>
> Example: 2001:d8b:0:0:53a2:0:0:1 can be written as:
> 2001:db8::53a2:0:0:1
> 2001:db8:0:0:53a2::1
>
> All three of the above expressions represent the same exact 128-bit 
> address.


Well I never seen an IPv6 address that is SLAAC'ed and has so many 
leftmost 0s.

But I agree with the principle you say.


>> I am trying to understand why Google complained wiht such a critical 
>> security alert.
>>
> Hard to say. Is the security alert about your address or is it about 
> the site you were trying to visit?


It popped up when I tried to visit ipv6.google.com with firefox most 
recent.  But I guess it tried first to sign in on my Google account, or 
something like that.  They should know what they tried to do with my 
connection.  What I know is that it did not deserve such a security alert.

> If you can provide an English translation of the message, it might be 
> possible to provide better advice.

Manual translation is hard.  See automated translation below. The 
original html (so one can copy paste), and the result of a button click 
on 'Info' button on that page, are attached.


> Access to your account by a suspicious application has been blocked
> alexandru.petrescu@gmail.com
> Google has prevented anyone from signing in to your account using an 
> app that does not belong to Google. If it was not you, it means that 
> someone else knows your password. We advise you to modify it immediately.
> 
> Unrecognized device
> 
> 17 minutes ago
> 
> Near "City, France"
> 2a01: X: Y: ce10 :: b4cc: 8eb9 (IP address)
> Have you recently been unable to sign in to your Google Account?

>
>> - is it because the address was a DHCP address rather than SLAAC?
>>
> No. Google can’t tell how the address was assigned. It’s just another 
> 128 bit number from Google’s perspective.
>
>> - it is because I connect from an address they have never seen before?
>>
> Without being able to decipher the error message, it’s hard to say.
>>
>> - is it because it is the first time I connect to them by IPv6 on 
>> this computer?
>>
> Not likely.
>>
>> - is it because when I connect with IPv6 to them I keep changing the 
>> IPv6 address (as opposed to IPv4 is always the same because behind NAT)?
>>
> Not likely.


Is it because https on IPv6 might not work as well as on IPv4?

Alex


--------------E101B6A04B84DEF89426C4C9
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit


  
    
  
  
    


    

    
Le 31/10/2019 à 15:32, Owen DeLong a
      écrit :

    

    

      
      

      


        

          
On Oct 31, 2019, at 3:25 AM, Alexandre Petrescu
            <alexandre.petrescu@gmail.com>
            wrote:

          

          

            

              
Google alerted me a few days ago
                    during my DHCPv6 experiments, when I browsed it with
                    a Windows computer using IPv6 first time, although
                    many times previously with IPv4.

              


              

            

          

        

        Since I don’t speak French, it’s hard to interpret the error
        message and I can’t paste the contents of an image into google
        translate.

      


        

          

            

              
Incidentally, the address my
                    Windows used was an address delivered by DHCPv6. 
                    Being DHCPv6 is visible in its format: in the hextet
                    representation, the '::' appears before the last two
                    hextets (X::b4cc:8eb9) as opposed to a SLAAC address
                    where the double colon appears quasi always before
                    the last _four_ hextets.

              


              

            

          

        

        Google can’t tell how you got the address. The position of the
        :: is irrelevant. This is simply an artifact of the UI in
        question. Any address which contains contiguous hextets of all
        zeroes (e.g. 0:0:0) may abbreviate one such group of hextets to
        ::.

      


      

      
Example: 2001:d8b:0:0:53a2:0:0:1 can be written as:

      
	2001:db8::53a2:0:0:1

      
	2001:db8:0:0:53a2::1

      


      

      
All three of the above expressions represent the same exact
        128-bit address.

    

    


    

    
Well I never seen an IPv6 address that is SLAAC'ed and has so
      many leftmost 0s.

    
But I agree with the principle you say.

    


    

    

      

        

          

            

              
I am trying to understand why
                    Google complained wiht such a critical security
                    alert.

                  

            

          

        

        
Hard to say. Is the security alert about your address or is
          it about the site you were trying to visit?

      

    

    


    

    
It popped up when I tried to visit ipv6.google.com with firefox
      most recent.  But I guess it tried first to sign in on my Google
      account, or something like that.  They should know what they tried
      to do with my connection.  What I know is that it did not deserve
      such a security alert.

    

    

      

        
If you can provide an English translation of the message,
          it might be possible to provide better advice.

      

    

    
Manual translation is hard.  See automated translation below. 
      The original html (so one can copy paste), and the result of a
      button click on 'Info' button on that page, are attached.

    


    

    

      
Access to your account by a
            suspicious application has been blocked

          alexandru.petrescu@gmail.com

          Google has prevented anyone from signing in to
            your account using an app that does not belong to Google.
          If it was not you, it means that someone else
            knows your password. We advise you to
            modify it immediately.

          

          Unrecognized device

          

          17 minutes ago

          

          Near "City, France"

          2a01: X: Y: ce10 :: b4cc: 8eb9 (IP address)

          Have you recently been unable to sign in to
            your Google Account?

      

    

    

      

        


        

        

          

            

              
 

              
- is it because the address was a
                    DHCP address rather than SLAAC?

            

          

        

        
No. Google can’t tell how the address was assigned. It’s
          just another 128 bit number from Google’s perspective.

        

        

          

            

              
- it is because I connect from an
                    address they have never seen before?

            

          

        

        Without being able to decipher the error message, it’s hard to
        say.

        

          

            

              
- is it because it is the first
                    time I connect to them by IPv6 on this computer?

            

          

        

        Not likely.

        

          

            

              
- is it because when I connect 
                    with IPv6 to them I keep changing the IPv6 address
                    (as opposed to IPv4 is always the same because
                    behind NAT)?

                  

            

          

        

        Not likely.

      

    

    


    

    
Is it because https on IPv6 might not work as well as on IPv4?

    
Alex

  


--------------E101B6A04B84DEF89426C4C9--

--------------19233F335A7405FEF9E6B9CE
Content-Type: text/html; charset=UTF-8;
 name="=?UTF-8?Q?Alerte_de_s=c3=a9curit=c3=a9_critique-priv=2ehtml?="
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename*0*=UTF-8''%41%6C%65%72%74%65%20%64%65%20%73%C3%A9%63%75%72%69%74;
 filename*1*=%C3%A9%20%63%72%69%74%69%71%75%65%2D%70%72%69%76%2E%68%74%6D;
 filename*2*=%6C

PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBkaXI9Imx0ciIgbGFuZz0iZnIiPjxoZWFkPg0KPG1l
dGEgaHR0cC1lcXVpdj0iY29udGVudC10eXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz
ZXQ9VVRGLTgiPjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBhc3luYz0iIiBzcmM9
IkFsZXJ0ZSUyMGRlJTIwcyVDMyVBOWN1cml0JUMzJUE5JTIwY3JpdGlxdWVfZmljaGllcnMv
Z2EuanMiIG5vbmNlPSJqSmxCVnE4Y0FxTWJSQTlzelVxR0V3Ij48L3NjcmlwdD48c2NyaXB0
IHNyYz0iQWxlcnRlJTIwZGUlMjBzJUMzJUE5Y3VyaXQlQzMlQTklMjBjcml0aXF1ZV9maWNo
aWVycy9jYmdhcGkubG9hZGVkXzAiIG5vbmNlPSJqSmxCVnE4Y0FxTWJSQTlzelVxR0V3IiBh
c3luYz0iIj48L3NjcmlwdD48IS0tIGJhc2UgaHJlZj0iaHR0cHM6Ly9teWFjY291bnQuZ29v
Z2xlLmNvbS8iIC0tPjxtZXRhIG5hbWU9InJlZmVycmVyIiBjb250ZW50PSJvcmlnaW4td2hl
bi1jcm9zcy1vcmlnaW4iPjxsaW5rIHJlbD0iY2Fub25pY2FsIiBocmVmPSJodHRwczovL215
YWNjb3VudC5nb29nbGUuY29tL2FsZXJ0L250LzE1NzIzNDUzNTUwMDAiPjxtZXRhIG5hbWU9
InZpZXdwb3J0IiBjb250ZW50PSJpbml0aWFsLXNjYWxlPTEsIG1heGltdW0tc2NhbGU9MSwg
dXNlci1zY2FsYWJsZT1ubywgd2lkdGg9ZGV2aWNlLXdpZHRoIj48bGluayByZWw9InNob3J0
Y3V0IGljb24iIGhyZWY9Imh0dHBzOi8vd3d3Lmdvb2dsZS5jb20vZmF2aWNvbi5pY28iPjxz
Y3JpcHQgZGF0YS1pZD0iX2dkIiBub25jZT0iakpsQlZxOGNBcU1iUkE5c3pVcUdFdyI+d2lu
ZG93LldJWl9nbG9iYWxfZGF0YSA9IHsiQVpkUmhkIjowLCJEcGltR2YiOmZhbHNlLCJFUDF5
a2QiOlsiL18vKiJdLCJGZHJGSmUiOiItNTU4ODAxNDkyODM2MzkwNTQyNSIsIkltNmNtZiI6
Ii9fL0FjY291bnRTZXR0aW5nc1NlY3VyaXR5QWR2aXNvclVpIiwiTFZJWFhiIjoxLCJMb1F2
N2UiOmZhbHNlLCJNVDdmOWIiOltdLCJRcnR4SyI6IjAiLCJTMDZHcmIiOiIxMDEyOTY2MzIw
Njk0ODU3MTgwMjYiLCJTMU5abWQiOmZhbHNlLCJTTmxNMGUiOiJBQUZnY2hpNkVBQVJkVGM1
dnJGRkJ2Q1dQVVY0OjE1NzIzNDY0MDM4NDMiLCJXM1l5cWYiOiIxMDEyOTY2MzIwNjk0ODU3
MTgwMjYiLCJXWnNaMWUiOiJvZHl2bFN0WWxtVWk2b0JhL0F5OERpRnFQNTRRRWs2QnBoIiwi
WWxsaDNlIjoiJS5ALjE1NzIzNDY0MDM3OTc1MTEsMTY5MTM2NzA3LDExNDEyMjc0NDhdXG4i
LCJjZmIyaCI6ImJvcV9pZGVudGl0eWFjY291bnRzZXR0aW5nc3Vpc2VydmVyXzIwMTkxMDI3
LjE5X3AwIiwiZU5ua3dmIjoiMTU1NDc0NDgxNyIsImVwdFplIjoiL18vQWNjb3VudFNldHRp
bmdzU2VjdXJpdHlBZHZpc29yVWkvIiwiZlBEeHdkIjpbMTc2MzQzMywxNzY4NzExXSwiZ0dj
TG9lIjpmYWxzZSwiblF5QUUiOnsiYXhrUWpiIjoidHJ1ZSIsImFSb29FIjoiZmFsc2UiLCJY
YXhuZ2UiOiJ0cnVlIiwiUlpDajFkIjoidHJ1ZSIsImxkbllHYiI6ImZhbHNlIiwieDNucGJk
IjoidHJ1ZSIsIkVKcmZRZCI6ImZhbHNlIiwidWFmd25lIjoiZmFsc2UiLCJOTzM4UGMiOiJm
YWxzZSIsInAzakhTIjoidHJ1ZSIsImhpSmloYyI6ImZhbHNlIiwiQ0pXQnIiOiJmYWxzZSIs
InpzWHRPYyI6InRydWUiLCJWQ3dZVmMiOiJ0cnVlIiwiTTRhZXFmIjoiZmFsc2UiLCJTZDlt
T2IiOiJ0cnVlIiwid2NMY2RlIjoiZmFsc2UiLCJ0QlNsb2IiOiJmYWxzZSIsImNNd2xpZSI6
ImZhbHNlIiwibVlZQ2llIjoiZmFsc2UiLCJUV21FNmMiOiJ0cnVlIiwiUVp2Z1dlIjoidHJ1
ZSIsImdkdFk3YiI6ImZhbHNlIiwiYlRqd3FkIjoidHJ1ZSIsInZnSnd5ZSI6InRydWUiLCJ2
WjkwTGIiOiJmYWxzZSIsIm1ORHByIjoiZmFsc2UiLCJKWldKamMiOiJ0cnVlIiwicjhBVURk
IjoiZmFsc2UiLCJld2JYZyI6ImZhbHNlIiwiSjJTclIiOiJmYWxzZSIsInAxRDcyZCI6ImZh
bHNlIiwieGhRT3EiOiJ0cnVlIiwiRlppNWRmIjoidHJ1ZSIsImFCRXRQYyI6ImZhbHNlIiwi
SWlkOE9lIjoiZmFsc2UiLCJUSjZnaSI6InRydWUiLCJJcTY0QiI6ImZhbHNlIiwieVZMdnAi
OiJmYWxzZSIsIm1lc3VxYyI6InRydWUifSwib1BFUDdjIjoiYWxleGFuZHJ1LnBldHJlc2N1
QGdtYWlsLmNvbSIsInFEQ1NrZSI6IjEwMTI5NjYzMjA2OTQ4NTcxODAyNiIsInF3QVFrZSI6
IkFjY291bnRTZXR0aW5nc1NlY3VyaXR5QWR2aXNvclVpIiwicXltVmUiOiJnTHAzRUp2TkFq
ZDVvZW9oZm4xSE45X2tJbEkiLCJydFFDeGMiOi02MCwidGh5a2hkIjoiQU9mc2NPVlZzcnZi
LXV0QUg0WEpFNlJBOU5qQ2IyM2xrZW9RbmpaR1BsRFd3UGRXWkY1bVFkVTV0RGVLTjBiVlo3
eFlkVURETnpzYk5UMnJHZFlrMm1VUXhqTmFnUmlPeDF1eXVQZU02RHo0U0c1bnlINkFWNjV6
bzN6LVVCYmNvMjRsIiwidzJidEFlIjoiJS5ALlwiMTAxMjk2NjMyMDY5NDg1NzE4MDI2XCIs
XCIxMDEyOTY2MzIwNjk0ODU3MTgwMjZcIixcIjBcIixmYWxzZSxudWxsLG51bGwsdHJ1ZV1c
biIsInpDaEpvZCI6IiUuQC5dXG4ifTs8L3NjcmlwdD48c2NyaXB0IG5vbmNlPSJqSmxCVnE4
Y0FxTWJSQTlzelVxR0V3Ij4oZnVuY3Rpb24oKXsndXNlIHN0cmljdCc7dmFyIGI9d2luZG93
LGU9Yi5wZXJmb3JtYW5jZSxsPWcoKSxwPWUmJmUubm93PzA6ZSYmZS50aW1pbmcmJmUudGlt
aW5nLm5hdmlnYXRpb25TdGFydD9lLnRpbWluZy5uYXZpZ2F0aW9uU3RhcnQ6bDtmdW5jdGlv
biBnKCl7cmV0dXJuIGUmJmUubm93P2Uubm93KCk6KG5ldyBEYXRlKS5nZXRUaW1lKCl9DQpi
Lmw9ZnVuY3Rpb24ocSl7ZnVuY3Rpb24gaChhKXt2YXIgYz17fTtjW2FdPWcoKTttLnB1c2go
Yyl9ZnVuY3Rpb24gcihhLGMpe2lmKCFjfHwibm9uZSI9PWMuc3R5bGUuZGlzcGxheSlyZXR1
cm4hMTt2YXIgZD1hLmRlZmF1bHRWaWV3O2lmKGQmJmQuZ2V0Q29tcHV0ZWRTdHlsZSYmKGQ9
ZC5nZXRDb21wdXRlZFN0eWxlKGMpLCJoaWRkZW4iPT1kLnZpc2liaWxpdHl8fCIwcHgiPT1k
LmhlaWdodHx8IjBweCI9PWQud2lkdGgpKXJldHVybiExO2lmKCFjLmdldEJvdW5kaW5nQ2xp
ZW50UmVjdClyZXR1cm4hMDt2YXIgZj1jLmdldEJvdW5kaW5nQ2xpZW50UmVjdCgpO2M9Zi5s
ZWZ0K2IucGFnZVhPZmZzZXQ7ZD1mLnRvcCtiLnBhZ2VZT2Zmc2V0O2lmKDA+ZCtmLmhlaWdo
dHx8MD5jK2Yud2lkdGh8fDA+PWYuaGVpZ2h0fHwwPj1mLndpZHRoKXJldHVybiExO2E9YS5k
b2N1bWVudEVsZW1lbnQ7cmV0dXJuIGQ8PShiLmlubmVySGVpZ2h0fHxhLmNsaWVudEhlaWdo
dCkmJmM8PShiLmlubmVyV2lkdGh8fA0KYS5jbGllbnRXaWR0aCl9ZnVuY3Rpb24gbihhKXtr
W2FdPU1hdGgubWF4KGtbYV18fDAsZygpKX1mdW5jdGlvbiB0KCl7Yi5wcnQ9ZygpfWIuY2Nf
YWlkPXE7Yi5pbWxfc3RhcnQ9cDtiLmNzc19zaXplPTA7dmFyIG09W3siIjpwfV07Yi5jY19s
YXRlbmN5PW07Yi5jY1RpY2s9aDtiLm9uSnNMb2FkPWZ1bmN0aW9uKCl7aCgianNsIil9O2Iu
b25Dc3NMb2FkPWZ1bmN0aW9uKCl7aCgiY3NzbCIpfTt2YXIgaz17fTtiLmltbF90aWNrcz1r
O2IuX2lzVmlzaWJsZT1yO2IuX3JlY29yZEltbD1uO2RvY3VtZW50LmRvY3VtZW50RWxlbWVu
dC5hZGRFdmVudExpc3RlbmVyKCJsb2FkIixmdW5jdGlvbihhKXthPWEudGFyZ2V0OyJJTUci
IT1hLnRhZ05hbWV8fGEuaGFzQXR0cmlidXRlKCJkYXRhLWlpZCIpfHxhLmhhc0F0dHJpYnV0
ZSgiZGF0YS1zcmMiKXx8YS5oYXNBdHRyaWJ1dGUoImRhdGEtaWxzIil8fGEuaGFzQXR0cmli
dXRlKCJkYXRhLW5vYWZ0Iil8fChhPWEuc3JjKSYmbihhKX0sITApOw0KYi5wcnQ9LTE7Yi53
aXpfdGljaz10fTt9KS5jYWxsKHRoaXMpOw0KbCgnZHBhMXZkJyk8L3NjcmlwdD48c2NyaXB0
IG5vbmNlPSJqSmxCVnE4Y0FxTWJSQTlzelVxR0V3Ij52YXIgX0ZfY3NzUm93S2V5ID0gJ2Jv
cS1pZGVudGl0eS5BY2NvdW50U2V0dGluZ3NTZWN1cml0eUFkdmlzb3JVaS5aUlFqcFNsYU0t
SS5MLkY0Lk8nO3ZhciBfRl9jb21iaW5lZFNpZ25hdHVyZSA9ICdBT2FFbWxHLU5PaDdGM053
SHZzM1JFY3hqRHF1bXpHT29BJztmdW5jdGlvbiBfRHVtcEV4Y2VwdGlvbihlKSB7dGhyb3cg
ZTt9PC9zY3JpcHQ+PHN0eWxlIGRhdGEtaHJlZj0iaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20v
Xy9tc3MvYm9xLWlkZW50aXR5L18vc3Mvaz1ib3EtaWRlbnRpdHkuQWNjb3VudFNldHRpbmdz
U2VjdXJpdHlBZHZpc29yVWkuWlJRanBTbGFNLUkuTC5GNC5PL2FtPVNKeUUvZD0xL2VkPTEv
Y3Q9emdtcy9ycz1BT2FFbWxFYmdGYWxLZEc4REtVS0dJa3hqdlNZZFFVVEN3L209c2VjdXJp
dHlldmVudHZpZXcsX2IsX3RwIiBub25jZT0iakpsQlZxOGNBcU1iUkE5c3pVcUdFdyI+aHRt
bHtoZWlnaHQ6MTAwJTtvdmVyZmxvdzpoaWRkZW59Ym9keXtoZWlnaHQ6MTAwJTtvdmVyZmxv
dzpoaWRkZW47LW1vei1vc3gtZm9udC1zbW9vdGhpbmc6Z3JheXNjYWxlO2NvbG9yOnJnYmEo
MCwwLDAsMC44Nyk7Zm9udC1mYW1pbHk6Um9ib3RvLFJvYm90b0RyYWZ0LEhlbHZldGljYSxB
cmlhbCxzYW5zLXNlcmlmO21hcmdpbjowOy1tb3otdGV4dC1zaXplLWFkanVzdDoxMDAlOy1t
b3otdGV4dC1zaXplLWFkanVzdDoxMDAlO3RleHQtc2l6ZS1hZGp1c3Q6MTAwJX10ZXh0YXJl
YXtmb250LWZhbWlseTpSb2JvdG8sUm9ib3RvRHJhZnQsSGVsdmV0aWNhLEFyaWFsLHNhbnMt
c2VyaWZ9YXt0ZXh0LWRlY29yYXRpb246bm9uZTtjb2xvcjojMjk2MmZmfWltZ3tib3JkZXI6
bm9uZX0jYXBwcy1kZWJ1Zy10cmFjZXJze2Rpc3BsYXk6bm9uZX1odG1se292ZXJmbG93OnZp
c2libGV9Ym9keXtvdmVyZmxvdzp2aXNpYmxlO292ZXJmbG93LXk6c2Nyb2xsfUBrZXlmcmFt
ZXMgbWRjLXJpcHBsZS1mZy1yYWRpdXMtaW57MCV7YW5pbWF0aW9uLXRpbWluZy1mdW5jdGlv
bjpjdWJpYy1iZXppZXIoMC40LDAsMC4yLDEpO3RyYW5zZm9ybTp0cmFuc2xhdGUodmFyKC0t
bWRjLXJpcHBsZS1mZy10cmFuc2xhdGUtc3RhcnQsMCkpIHNjYWxlKDEpfXRve3RyYW5zZm9y
bTp0cmFuc2xhdGUodmFyKC0tbWRjLXJpcHBsZS1mZy10cmFuc2xhdGUtZW5kLDApKSBzY2Fs
ZSh2YXIoLS1tZGMtcmlwcGxlLWZnLXNjYWxlLDEpKX19QGtleWZyYW1lcyBtZGMtcmlwcGxl
LWZnLW9wYWNpdHktaW57MCV7YW5pbWF0aW9uLXRpbWluZy1mdW5jdGlvbjpsaW5lYXI7b3Bh
Y2l0eTowfXRve29wYWNpdHk6dmFyKC0tbWRjLXJpcHBsZS1mZy1vcGFjaXR5LDApfX1Aa2V5
ZnJhbWVzIG1kYy1yaXBwbGUtZmctb3BhY2l0eS1vdXR7MCV7YW5pbWF0aW9uLXRpbWluZy1m
dW5jdGlvbjpsaW5lYXI7b3BhY2l0eTp2YXIoLS1tZGMtcmlwcGxlLWZnLW9wYWNpdHksMCl9
dG97b3BhY2l0eTowfX0uVmZQcGtkLWtzS3NaZC1YeElBcWV7LS1tZGMtcmlwcGxlLWZnLXNp
emU6MDstLW1kYy1yaXBwbGUtbGVmdDowOy0tbWRjLXJpcHBsZS10b3A6MDstLW1kYy1yaXBw
bGUtZmctc2NhbGU6MTstLW1kYy1yaXBwbGUtZmctdHJhbnNsYXRlLWVuZDowOy0tbWRjLXJp
cHBsZS1mZy10cmFuc2xhdGUtc3RhcnQ6MDt3aWxsLWNoYW5nZTp0cmFuc2Zvcm0sb3BhY2l0
eTtwb3NpdGlvbjpyZWxhdGl2ZTtvdXRsaW5lOm5vbmU7b3ZlcmZsb3c6aGlkZGVufS5WZlBw
a2Qta3NLc1pkLVh4SUFxZTo6YmVmb3Jle3Bvc2l0aW9uOmFic29sdXRlOy1tb3otYm9yZGVy
LXJhZGl1czo1MCU7Ym9yZGVyLXJhZGl1czo1MCU7b3BhY2l0eTowO3BvaW50ZXItZXZlbnRz
Om5vbmU7Y29udGVudDoiIn0uVmZQcGtkLWtzS3NaZC1YeElBcWU6OmFmdGVye3Bvc2l0aW9u
OmFic29sdXRlOy1tb3otYm9yZGVyLXJhZGl1czo1MCU7Ym9yZGVyLXJhZGl1czo1MCU7b3Bh
Y2l0eTowO3BvaW50ZXItZXZlbnRzOm5vbmU7Y29udGVudDoiIn0uVmZQcGtkLWtzS3NaZC1Y
eElBcWU6OmJlZm9yZXt0cmFuc2l0aW9uOm9wYWNpdHkgMTVtcyBsaW5lYXIsYmFja2dyb3Vu
ZC1jb2xvciAxNW1zIGxpbmVhcjt6LWluZGV4OjF9LlZmUHBrZC1rc0tzWmQtWHhJQXFlLlZm
UHBrZC1rc0tzWmQtbVdQazNkOjpiZWZvcmV7dHJhbnNmb3JtOnNjYWxlKHZhcigtLW1kYy1y
aXBwbGUtZmctc2NhbGUsMSkpfS5WZlBwa2Qta3NLc1pkLVh4SUFxZS5WZlBwa2Qta3NLc1pk
LW1XUGszZDo6YWZ0ZXJ7dG9wOjA7bGVmdDowO3RyYW5zZm9ybTpzY2FsZSgwKTt0cmFuc2Zv
cm0tb3JpZ2luOmNlbnRlciBjZW50ZXJ9LlZmUHBrZC1rc0tzWmQtWHhJQXFlLlZmUHBrZC1r
c0tzWmQtbVdQazNkLU9XWEVYZS1aTk1UcWQ6OmFmdGVye3RvcDp2YXIoLS1tZGMtcmlwcGxl
LXRvcCwwKTtsZWZ0OnZhcigtLW1kYy1yaXBwbGUtbGVmdCwwKX0uVmZQcGtkLWtzS3NaZC1Y
eElBcWUuVmZQcGtkLWtzS3NaZC1tV1BrM2QtT1dYRVhlLVR2OGw1ZC1sSmZaTWM6OmFmdGVy
e2FuaW1hdGlvbjptZGMtcmlwcGxlLWZnLXJhZGl1cy1pbiAyMjVtcyBmb3J3YXJkcyxtZGMt
cmlwcGxlLWZnLW9wYWNpdHktaW4gNzVtcyBmb3J3YXJkc30uVmZQcGtkLWtzS3NaZC1YeElB
cWUuVmZQcGtkLWtzS3NaZC1tV1BrM2QtT1dYRVhlLVR2OGw1ZC1PbVMxdmY6OmFmdGVye2Fu
aW1hdGlvbjptZGMtcmlwcGxlLWZnLW9wYWNpdHktb3V0IDE1MG1zO3RyYW5zZm9ybTp0cmFu
c2xhdGUodmFyKC0tbWRjLXJpcHBsZS1mZy10cmFuc2xhdGUtZW5kLDApKSBzY2FsZSh2YXIo
LS1tZGMtcmlwcGxlLWZnLXNjYWxlLDEpKX0uVmZQcGtkLWtzS3NaZC1YeElBcWU6OmJlZm9y
ZXtiYWNrZ3JvdW5kLWNvbG9yOiMwMDB9LlZmUHBrZC1rc0tzWmQtWHhJQXFlOjphZnRlcnti
YWNrZ3JvdW5kLWNvbG9yOiMwMDB9LlZmUHBrZC1rc0tzWmQtWHhJQXFlOmhvdmVyOjpiZWZv
cmV7b3BhY2l0eTouMDR9LlZmUHBrZC1rc0tzWmQtWHhJQXFlLlZmUHBrZC1rc0tzWmQtbVdQ
azNkLU9XWEVYZS1BSGU2S2MtWHBuRENlOjpiZWZvcmV7dHJhbnNpdGlvbi1kdXJhdGlvbjo3
NW1zO29wYWNpdHk6LjEyfS5WZlBwa2Qta3NLc1pkLVh4SUFxZTpub3QoLlZmUHBrZC1rc0tz
WmQtbVdQazNkKTpmb2N1czo6YmVmb3Jle3RyYW5zaXRpb24tZHVyYXRpb246NzVtcztvcGFj
aXR5Oi4xMn0uVmZQcGtkLWtzS3NaZC1YeElBcWU6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGsz
ZCk6OmFmdGVye3RyYW5zaXRpb246b3BhY2l0eSAxNTBtcyBsaW5lYXJ9LlZmUHBrZC1rc0tz
WmQtWHhJQXFlOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpOmFjdGl2ZTo6YWZ0ZXJ7dHJh
bnNpdGlvbi1kdXJhdGlvbjo3NW1zO29wYWNpdHk6LjEyfS5WZlBwa2Qta3NLc1pkLVh4SUFx
ZS5WZlBwa2Qta3NLc1pkLW1XUGszZHstLW1kYy1yaXBwbGUtZmctb3BhY2l0eTouMTJ9LlZm
UHBrZC1rc0tzWmQtWHhJQXFlOjpiZWZvcmV7dG9wOi1tb3otY2FsYyg1MCUgLSAxMDAlKTt0
b3A6Y2FsYyg1MCUgLSAxMDAlKTtsZWZ0Oi1tb3otY2FsYyg1MCUgLSAxMDAlKTtsZWZ0OmNh
bGMoNTAlIC0gMTAwJSk7d2lkdGg6MjAwJTtoZWlnaHQ6MjAwJX0uVmZQcGtkLWtzS3NaZC1Y
eElBcWU6OmFmdGVye3RvcDotbW96LWNhbGMoNTAlIC0gMTAwJSk7dG9wOmNhbGMoNTAlIC0g
MTAwJSk7bGVmdDotbW96LWNhbGMoNTAlIC0gMTAwJSk7bGVmdDpjYWxjKDUwJSAtIDEwMCUp
O3dpZHRoOjIwMCU7aGVpZ2h0OjIwMCV9LlZmUHBrZC1rc0tzWmQtWHhJQXFlLlZmUHBrZC1r
c0tzWmQtbVdQazNkOjphZnRlcnt3aWR0aDp2YXIoLS1tZGMtcmlwcGxlLWZnLXNpemUsMTAw
JSk7aGVpZ2h0OnZhcigtLW1kYy1yaXBwbGUtZmctc2l6ZSwxMDAlKX0uVmZQcGtkLWtzS3Na
ZC1YeElBcWVbZGF0YS1tZGMtcmlwcGxlLWlzLXVuYm91bmRlZF17b3ZlcmZsb3c6dmlzaWJs
ZX0uVmZQcGtkLWtzS3NaZC1YeElBcWVbZGF0YS1tZGMtcmlwcGxlLWlzLXVuYm91bmRlZF06
OmJlZm9yZXt0b3A6LW1vei1jYWxjKDUwJSAtIDUwJSk7dG9wOmNhbGMoNTAlIC0gNTAlKTts
ZWZ0Oi1tb3otY2FsYyg1MCUgLSA1MCUpO2xlZnQ6Y2FsYyg1MCUgLSA1MCUpO3dpZHRoOjEw
MCU7aGVpZ2h0OjEwMCV9LlZmUHBrZC1rc0tzWmQtWHhJQXFlW2RhdGEtbWRjLXJpcHBsZS1p
cy11bmJvdW5kZWRdOjphZnRlcnt0b3A6LW1vei1jYWxjKDUwJSAtIDUwJSk7dG9wOmNhbGMo
NTAlIC0gNTAlKTtsZWZ0Oi1tb3otY2FsYyg1MCUgLSA1MCUpO2xlZnQ6Y2FsYyg1MCUgLSA1
MCUpO3dpZHRoOjEwMCU7aGVpZ2h0OjEwMCV9LlZmUHBrZC1rc0tzWmQtWHhJQXFlW2RhdGEt
bWRjLXJpcHBsZS1pcy11bmJvdW5kZWRdLlZmUHBrZC1rc0tzWmQtbVdQazNkOjpiZWZvcmV7
dG9wOnZhcigtLW1kYy1yaXBwbGUtdG9wLGNhbGMoNTAlIC0gNTAlKSk7bGVmdDp2YXIoLS1t
ZGMtcmlwcGxlLWxlZnQsY2FsYyg1MCUgLSA1MCUpKTt3aWR0aDp2YXIoLS1tZGMtcmlwcGxl
LWZnLXNpemUsMTAwJSk7aGVpZ2h0OnZhcigtLW1kYy1yaXBwbGUtZmctc2l6ZSwxMDAlKX0u
VmZQcGtkLWtzS3NaZC1YeElBcWVbZGF0YS1tZGMtcmlwcGxlLWlzLXVuYm91bmRlZF0uVmZQ
cGtkLWtzS3NaZC1tV1BrM2Q6OmFmdGVye3RvcDp2YXIoLS1tZGMtcmlwcGxlLXRvcCxjYWxj
KDUwJSAtIDUwJSkpO2xlZnQ6dmFyKC0tbWRjLXJpcHBsZS1sZWZ0LGNhbGMoNTAlIC0gNTAl
KSk7d2lkdGg6dmFyKC0tbWRjLXJpcHBsZS1mZy1zaXplLDEwMCUpO2hlaWdodDp2YXIoLS1t
ZGMtcmlwcGxlLWZnLXNpemUsMTAwJSl9LlZmUHBrZC1kZ2wySGYtcHBIbHJmLXNNNU1OYntk
aXNwbGF5OmlubGluZX0uVXd3dEh7LW1vei1ib3JkZXItcmFkaXVzOmluaGVyaXQ7Ym9yZGVy
LXJhZGl1czppbmhlcml0O2hlaWdodDoxMDAlO2xlZnQ6MDtwb2ludGVyLWV2ZW50czpub25l
O3Bvc2l0aW9uOmFic29sdXRlO3RvcDowO3dpZHRoOjEwMCU7ZGlzcGxheTpub25lfS5GemFE
Y2UgLlV3d3RIe2Rpc3BsYXk6YmxvY2t9LlZmUHBrZC1MZ2JzU2V7Zm9udC1mYW1pbHk6Um9i
b3RvLHNhbnMtc2VyaWY7LW1vei1vc3gtZm9udC1zbW9vdGhpbmc6Z3JheXNjYWxlO2ZvbnQt
c2l6ZTouODc1cmVtO2xpbmUtaGVpZ2h0OjIuMjVyZW07Zm9udC13ZWlnaHQ6NTAwO2xldHRl
ci1zcGFjaW5nOi4wODkyODU3MTQzZW07dGV4dC1kZWNvcmF0aW9uOm5vbmU7dGV4dC10cmFu
c2Zvcm06dXBwZXJjYXNlO3BhZGRpbmc6MCA4cHggMCA4cHg7ZGlzcGxheTotd2Via2l0LWlu
bGluZS1ib3g7ZGlzcGxheTotd2Via2l0LWlubGluZS1mbGV4O2Rpc3BsYXk6LW1zLWlubGlu
ZS1mbGV4Ym94O2Rpc3BsYXk6aW5saW5lLWZsZXg7cG9zaXRpb246cmVsYXRpdmU7YWxpZ24t
aXRlbXM6Y2VudGVyO2p1c3RpZnktY29udGVudDpjZW50ZXI7Ym94LXNpemluZzpib3JkZXIt
Ym94O21pbi13aWR0aDo2NHB4O2JvcmRlcjpub25lO291dGxpbmU6bm9uZTtsaW5lLWhlaWdo
dDppbmhlcml0Oy1tb3otdXNlci1zZWxlY3Q6bm9uZTtvdmVyZmxvdzp2aXNpYmxlO3ZlcnRp
Y2FsLWFsaWduOm1pZGRsZTstbW96LWJvcmRlci1yYWRpdXM6NHB4O2JvcmRlci1yYWRpdXM6
NHB4fS5WZlBwa2QtTGdic1NlOjotbW96LWZvY3VzLWlubmVye3BhZGRpbmc6MDtib3JkZXI6
MH0uVmZQcGtkLUxnYnNTZTphY3RpdmV7b3V0bGluZTpub25lfS5WZlBwa2QtTGdic1NlOmhv
dmVye2N1cnNvcjpwb2ludGVyfS5WZlBwa2QtTGdic1NlOmRpc2FibGVke2JhY2tncm91bmQt
Y29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6cmdiYSgwLDAsMCwwLjM3KTtjdXJzb3I6ZGVmYXVs
dDtwb2ludGVyLWV2ZW50czpub25lfS5WZlBwa2QtTGdic1NlIC5WZlBwa2QtSmg5bEdjey1t
b3otYm9yZGVyLXJhZGl1czo0cHg7Ym9yZGVyLXJhZGl1czo0cHh9LlZmUHBrZC1MZ2JzU2U6
bm90KDpkaXNhYmxlZCl7YmFja2dyb3VuZC1jb2xvcjp0cmFuc3BhcmVudH0uVmZQcGtkLUxn
YnNTZSAuVmZQcGtkLWtCRHNvZHttYXJnaW4tbGVmdDowO21hcmdpbi1yaWdodDo4cHg7ZGlz
cGxheTppbmxpbmUtYmxvY2s7d2lkdGg6MThweDtoZWlnaHQ6MThweDtmb250LXNpemU6MThw
eDt2ZXJ0aWNhbC1hbGlnbjp0b3B9W2Rpcj1ydGxdIC5WZlBwa2QtTGdic1NlIC5WZlBwa2Qt
a0JEc29kLC5WZlBwa2QtTGdic1NlIC5WZlBwa2Qta0JEc29kW2Rpcj1ydGxde21hcmdpbi1s
ZWZ0OjhweDttYXJnaW4tcmlnaHQ6MH0uVmZQcGtkLUxnYnNTZSAuVmZQcGtkLVJMbW5KYntw
b3NpdGlvbjphYnNvbHV0ZTt0b3A6NTAlO3JpZ2h0OjA7bGVmdDowO2hlaWdodDo0OHB4O3Ry
YW5zZm9ybTp0cmFuc2xhdGVZKC01MCUpfS5WZlBwa2QtTGdic1NlOm5vdCg6ZGlzYWJsZWQp
e2NvbG9yOiM2MjAwZWU7Y29sb3I6dmFyKC0tbWRjLXRoZW1lLXByaW1hcnksIzYyMDBlZSl9
LlZmUHBrZC12UXpmOGQrLlZmUHBrZC1rQkRzb2R7bWFyZ2luLWxlZnQ6OHB4O21hcmdpbi1y
aWdodDowfVtkaXI9cnRsXSAuVmZQcGtkLXZRemY4ZCsuVmZQcGtkLWtCRHNvZCwuVmZQcGtk
LXZRemY4ZCsuVmZQcGtkLWtCRHNvZFtkaXI9cnRsXXttYXJnaW4tbGVmdDowO21hcmdpbi1y
aWdodDo4cHh9c3ZnLlZmUHBrZC1rQkRzb2R7ZmlsbDpjdXJyZW50Q29sb3J9LlZmUHBrZC1M
Z2JzU2UtT1dYRVhlLU1WN3llYiAuVmZQcGtkLWtCRHNvZCwuVmZQcGtkLUxnYnNTZS1PV1hF
WGUtazhRcEogLlZmUHBrZC1rQkRzb2QsLlZmUHBrZC1MZ2JzU2UtT1dYRVhlLUlOc0FnYyAu
VmZQcGtkLWtCRHNvZHttYXJnaW4tbGVmdDotNHB4O21hcmdpbi1yaWdodDo4cHh9W2Rpcj1y
dGxdIC5WZlBwa2QtTGdic1NlLU9XWEVYZS1NVjd5ZWIgLlZmUHBrZC1rQkRzb2QsLlZmUHBr
ZC1MZ2JzU2UtT1dYRVhlLU1WN3llYiAuVmZQcGtkLWtCRHNvZFtkaXI9cnRsXSxbZGlyPXJ0
bF0gLlZmUHBrZC1MZ2JzU2UtT1dYRVhlLWs4UXBKIC5WZlBwa2Qta0JEc29kLC5WZlBwa2Qt
TGdic1NlLU9XWEVYZS1rOFFwSiAuVmZQcGtkLWtCRHNvZFtkaXI9cnRsXSxbZGlyPXJ0bF0g
LlZmUHBrZC1MZ2JzU2UtT1dYRVhlLUlOc0FnYyAuVmZQcGtkLWtCRHNvZCwuVmZQcGtkLUxn
YnNTZS1PV1hFWGUtSU5zQWdjIC5WZlBwa2Qta0JEc29kW2Rpcj1ydGxdLC5WZlBwa2QtTGdi
c1NlLU9XWEVYZS1NVjd5ZWIgLlZmUHBrZC12UXpmOGQrLlZmUHBrZC1rQkRzb2QsLlZmUHBr
ZC1MZ2JzU2UtT1dYRVhlLWs4UXBKIC5WZlBwa2QtdlF6ZjhkKy5WZlBwa2Qta0JEc29kLC5W
ZlBwa2QtTGdic1NlLU9XWEVYZS1JTnNBZ2MgLlZmUHBrZC12UXpmOGQrLlZmUHBrZC1rQkRz
b2R7bWFyZ2luLWxlZnQ6OHB4O21hcmdpbi1yaWdodDotNHB4fVtkaXI9cnRsXSAuVmZQcGtk
LUxnYnNTZS1PV1hFWGUtTVY3eWViIC5WZlBwa2QtdlF6ZjhkKy5WZlBwa2Qta0JEc29kLC5W
ZlBwa2QtTGdic1NlLU9XWEVYZS1NVjd5ZWIgLlZmUHBrZC12UXpmOGQrLlZmUHBrZC1rQkRz
b2RbZGlyPXJ0bF0sW2Rpcj1ydGxdIC5WZlBwa2QtTGdic1NlLU9XWEVYZS1rOFFwSiAuVmZQ
cGtkLXZRemY4ZCsuVmZQcGtkLWtCRHNvZCwuVmZQcGtkLUxnYnNTZS1PV1hFWGUtazhRcEog
LlZmUHBrZC12UXpmOGQrLlZmUHBrZC1rQkRzb2RbZGlyPXJ0bF0sW2Rpcj1ydGxdIC5WZlBw
a2QtTGdic1NlLU9XWEVYZS1JTnNBZ2MgLlZmUHBrZC12UXpmOGQrLlZmUHBrZC1rQkRzb2Qs
LlZmUHBrZC1MZ2JzU2UtT1dYRVhlLUlOc0FnYyAuVmZQcGtkLXZRemY4ZCsuVmZQcGtkLWtC
RHNvZFtkaXI9cnRsXXttYXJnaW4tbGVmdDotNHB4O21hcmdpbi1yaWdodDo4cHh9LlZmUHBr
ZC1MZ2JzU2UtT1dYRVhlLU1WN3llYiwuVmZQcGtkLUxnYnNTZS1PV1hFWGUtazhRcEp7cGFk
ZGluZzowIDE2cHggMCAxNnB4fS5WZlBwa2QtTGdic1NlLU9XWEVYZS1NVjd5ZWI6ZGlzYWJs
ZWQsLlZmUHBrZC1MZ2JzU2UtT1dYRVhlLWs4UXBKOmRpc2FibGVke2JhY2tncm91bmQtY29s
b3I6cmdiYSgwLDAsMCwwLjEyKTtjb2xvcjpyZ2JhKDAsMCwwLDAuMzcpfS5WZlBwa2QtTGdi
c1NlLU9XWEVYZS1NVjd5ZWI6bm90KDpkaXNhYmxlZCksLlZmUHBrZC1MZ2JzU2UtT1dYRVhl
LWs4UXBKOm5vdCg6ZGlzYWJsZWQpe2JhY2tncm91bmQtY29sb3I6IzYyMDBlZX0uVmZQcGtk
LUxnYnNTZS1PV1hFWGUtTVY3eWViOm5vdCg6ZGlzYWJsZWQpLC5WZlBwa2QtTGdic1NlLU9X
WEVYZS1rOFFwSjpub3QoOmRpc2FibGVkKXtiYWNrZ3JvdW5kLWNvbG9yOnZhcigtLW1kYy10
aGVtZS1wcmltYXJ5LCM2MjAwZWUpfS5WZlBwa2QtTGdic1NlLU9XWEVYZS1NVjd5ZWI6bm90
KDpkaXNhYmxlZCksLlZmUHBrZC1MZ2JzU2UtT1dYRVhlLWs4UXBKOm5vdCg6ZGlzYWJsZWQp
e2NvbG9yOiNmZmY7Y29sb3I6dmFyKC0tbWRjLXRoZW1lLW9uLXByaW1hcnksI2ZmZil9LlZm
UHBrZC1MZ2JzU2UtT1dYRVhlLU1WN3llYnstbW96LWJveC1zaGFkb3c6MCAzcHggMXB4IC0y
cHggcmdiYSgwLDAsMCwwLjIpLDAgMnB4IDJweCAwIHJnYmEoMCwwLDAsMC4xNCksMCAxcHgg
NXB4IDAgcmdiYSgwLDAsMCwwLjEyKTtib3gtc2hhZG93OjAgM3B4IDFweCAtMnB4IHJnYmEo
MCwwLDAsMC4yKSwwIDJweCAycHggMCByZ2JhKDAsMCwwLDAuMTQpLDAgMXB4IDVweCAwIHJn
YmEoMCwwLDAsMC4xMik7dHJhbnNpdGlvbjpib3gtc2hhZG93IDI4MG1zIGN1YmljLWJlemll
cigwLjQsMCwwLjIsMSl9LlZmUHBrZC1MZ2JzU2UtT1dYRVhlLU1WN3llYjpob3ZlciwuVmZQ
cGtkLUxnYnNTZS1PV1hFWGUtTVY3eWViOmZvY3Vzey1tb3otYm94LXNoYWRvdzowIDJweCA0
cHggLTFweCByZ2JhKDAsMCwwLDAuMiksMCA0cHggNXB4IDAgcmdiYSgwLDAsMCwwLjE0KSww
IDFweCAxMHB4IDAgcmdiYSgwLDAsMCwwLjEyKTtib3gtc2hhZG93OjAgMnB4IDRweCAtMXB4
IHJnYmEoMCwwLDAsMC4yKSwwIDRweCA1cHggMCByZ2JhKDAsMCwwLDAuMTQpLDAgMXB4IDEw
cHggMCByZ2JhKDAsMCwwLDAuMTIpfS5WZlBwa2QtTGdic1NlLU9XWEVYZS1NVjd5ZWI6YWN0
aXZley1tb3otYm94LXNoYWRvdzowIDVweCA1cHggLTNweCByZ2JhKDAsMCwwLDAuMiksMCA4
cHggMTBweCAxcHggcmdiYSgwLDAsMCwwLjE0KSwwIDNweCAxNHB4IDJweCByZ2JhKDAsMCww
LDAuMTIpO2JveC1zaGFkb3c6MCA1cHggNXB4IC0zcHggcmdiYSgwLDAsMCwwLjIpLDAgOHB4
IDEwcHggMXB4IHJnYmEoMCwwLDAsMC4xNCksMCAzcHggMTRweCAycHggcmdiYSgwLDAsMCww
LjEyKX0uVmZQcGtkLUxnYnNTZS1PV1hFWGUtTVY3eWViOmRpc2FibGVkey1tb3otYm94LXNo
YWRvdzowIDAgMCAwIHJnYmEoMCwwLDAsMC4yKSwwIDAgMCAwIHJnYmEoMCwwLDAsMC4xNCks
MCAwIDAgMCByZ2JhKDAsMCwwLDAuMTIpO2JveC1zaGFkb3c6MCAwIDAgMCByZ2JhKDAsMCww
LDAuMiksMCAwIDAgMCByZ2JhKDAsMCwwLDAuMTQpLDAgMCAwIDAgcmdiYSgwLDAsMCwwLjEy
KX0uVmZQcGtkLUxnYnNTZS1PV1hFWGUtSU5zQWdje2JvcmRlci1zdHlsZTpzb2xpZDtwYWRk
aW5nOjAgMTVweCAwIDE1cHg7Ym9yZGVyLXdpZHRoOjFweH0uVmZQcGtkLUxnYnNTZS1PV1hF
WGUtSU5zQWdjOmRpc2FibGVke2JvcmRlci1jb2xvcjpyZ2JhKDAsMCwwLDAuMzcpfS5WZlBw
a2QtTGdic1NlLU9XWEVYZS1JTnNBZ2MgLlZmUHBrZC1KaDlsR2N7dG9wOi0xcHg7bGVmdDot
MXB4O2JvcmRlcjoxcHggc29saWQgdHJhbnNwYXJlbnR9LlZmUHBrZC1MZ2JzU2UtT1dYRVhl
LUlOc0FnYzpub3QoOmRpc2FibGVkKXtib3JkZXItY29sb3I6IzYyMDBlZTtib3JkZXItY29s
b3I6dmFyKC0tbWRjLXRoZW1lLXByaW1hcnksIzYyMDBlZSl9LlZmUHBrZC1MZ2JzU2UtT1dY
RVhlLWRnbDJIZnttYXJnaW4tdG9wOjZweDttYXJnaW4tYm90dG9tOjZweH0uVmZQcGtkLUxn
YnNTZXstLW1kYy1yaXBwbGUtZmctc2l6ZTowOy0tbWRjLXJpcHBsZS1sZWZ0OjA7LS1tZGMt
cmlwcGxlLXRvcDowOy0tbWRjLXJpcHBsZS1mZy1zY2FsZToxOy0tbWRjLXJpcHBsZS1mZy10
cmFuc2xhdGUtZW5kOjA7LS1tZGMtcmlwcGxlLWZnLXRyYW5zbGF0ZS1zdGFydDowO3dpbGwt
Y2hhbmdlOnRyYW5zZm9ybSxvcGFjaXR5fS5WZlBwa2QtTGdic1NlIC5WZlBwa2QtSmg5bEdj
OjpiZWZvcmUsLlZmUHBrZC1MZ2JzU2UgLlZmUHBrZC1KaDlsR2M6OmFmdGVye3Bvc2l0aW9u
OmFic29sdXRlOy1tb3otYm9yZGVyLXJhZGl1czo1MCU7Ym9yZGVyLXJhZGl1czo1MCU7b3Bh
Y2l0eTowO3BvaW50ZXItZXZlbnRzOm5vbmU7Y29udGVudDoiIn0uVmZQcGtkLUxnYnNTZSAu
VmZQcGtkLUpoOWxHYzo6YmVmb3Jle3RyYW5zaXRpb246b3BhY2l0eSAxNW1zIGxpbmVhcixi
YWNrZ3JvdW5kLWNvbG9yIDE1bXMgbGluZWFyO3otaW5kZXg6MX0uVmZQcGtkLUxnYnNTZS5W
ZlBwa2Qta3NLc1pkLW1XUGszZCAuVmZQcGtkLUpoOWxHYzo6YmVmb3Jle3RyYW5zZm9ybTpz
Y2FsZSh2YXIoLS1tZGMtcmlwcGxlLWZnLXNjYWxlLDEpKX0uVmZQcGtkLUxnYnNTZS5WZlBw
a2Qta3NLc1pkLW1XUGszZCAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7dG9wOjA7bGVmdDowO3Ry
YW5zZm9ybTpzY2FsZSgwKTt0cmFuc2Zvcm0tb3JpZ2luOmNlbnRlciBjZW50ZXJ9LlZmUHBr
ZC1MZ2JzU2UuVmZQcGtkLWtzS3NaZC1tV1BrM2QtT1dYRVhlLVpOTVRxZCAuVmZQcGtkLUpo
OWxHYzo6YWZ0ZXJ7dG9wOnZhcigtLW1kYy1yaXBwbGUtdG9wLDApO2xlZnQ6dmFyKC0tbWRj
LXJpcHBsZS1sZWZ0LDApfS5WZlBwa2QtTGdic1NlLlZmUHBrZC1rc0tzWmQtbVdQazNkLU9X
WEVYZS1UdjhsNWQtbEpmWk1jIC5WZlBwa2QtSmg5bEdjOjphZnRlcnthbmltYXRpb246bWRj
LXJpcHBsZS1mZy1yYWRpdXMtaW4gMjI1bXMgZm9yd2FyZHMsbWRjLXJpcHBsZS1mZy1vcGFj
aXR5LWluIDc1bXMgZm9yd2FyZHN9LlZmUHBrZC1MZ2JzU2UuVmZQcGtkLWtzS3NaZC1tV1Br
M2QtT1dYRVhlLVR2OGw1ZC1PbVMxdmYgLlZmUHBrZC1KaDlsR2M6OmFmdGVye2FuaW1hdGlv
bjptZGMtcmlwcGxlLWZnLW9wYWNpdHktb3V0IDE1MG1zO3RyYW5zZm9ybTp0cmFuc2xhdGUo
dmFyKC0tbWRjLXJpcHBsZS1mZy10cmFuc2xhdGUtZW5kLDApKSBzY2FsZSh2YXIoLS1tZGMt
cmlwcGxlLWZnLXNjYWxlLDEpKX0uVmZQcGtkLUxnYnNTZSAuVmZQcGtkLUpoOWxHYzo6YmVm
b3JlLC5WZlBwa2QtTGdic1NlIC5WZlBwa2QtSmg5bEdjOjphZnRlcnt0b3A6LW1vei1jYWxj
KDUwJSAtIDEwMCUpO3RvcDpjYWxjKDUwJSAtIDEwMCUpO2xlZnQ6LW1vei1jYWxjKDUwJSAt
IDEwMCUpO2xlZnQ6Y2FsYyg1MCUgLSAxMDAlKTt3aWR0aDoyMDAlO2hlaWdodDoyMDAlfS5W
ZlBwa2QtTGdic1NlLlZmUHBrZC1rc0tzWmQtbVdQazNkIC5WZlBwa2QtSmg5bEdjOjphZnRl
cnt3aWR0aDp2YXIoLS1tZGMtcmlwcGxlLWZnLXNpemUsMTAwJSk7aGVpZ2h0OnZhcigtLW1k
Yy1yaXBwbGUtZmctc2l6ZSwxMDAlKX0uVmZQcGtkLUxnYnNTZSAuVmZQcGtkLUpoOWxHYzo6
YmVmb3JlLC5WZlBwa2QtTGdic1NlIC5WZlBwa2QtSmg5bEdjOjphZnRlcntiYWNrZ3JvdW5k
LWNvbG9yOiM2MjAwZWV9LlZmUHBrZC1MZ2JzU2UgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZSwu
VmZQcGtkLUxnYnNTZSAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7YmFja2dyb3VuZC1jb2xvcjp2
YXIoLS1tZGMtdGhlbWUtcHJpbWFyeSwjNjIwMGVlKX0uVmZQcGtkLUxnYnNTZTpob3ZlciAu
VmZQcGtkLUpoOWxHYzo6YmVmb3Jle29wYWNpdHk6LjA0fS5WZlBwa2QtTGdic1NlLlZmUHBr
ZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1BSGU2S2MtWHBuRENlIC5WZlBwa2QtSmg5bEdjOjpi
ZWZvcmUsLlZmUHBrZC1MZ2JzU2U6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6Zm9jdXMg
LlZmUHBrZC1KaDlsR2M6OmJlZm9yZXt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7b3BhY2l0
eTouMTJ9LlZmUHBrZC1MZ2JzU2U6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCkgLlZmUHBr
ZC1KaDlsR2M6OmFmdGVye3RyYW5zaXRpb246b3BhY2l0eSAxNTBtcyBsaW5lYXJ9LlZmUHBr
ZC1MZ2JzU2U6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6YWN0aXZlIC5WZlBwa2QtSmg5
bEdjOjphZnRlcnt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7b3BhY2l0eTouMTJ9LlZmUHBr
ZC1MZ2JzU2UuVmZQcGtkLWtzS3NaZC1tV1BrM2R7LS1tZGMtcmlwcGxlLWZnLW9wYWNpdHk6
LjEyfS5WZlBwa2QtTGdic1NlIC5WZlBwa2QtSmg5bEdje3Bvc2l0aW9uOmFic29sdXRlO2Jv
eC1zaXppbmc6Y29udGVudC1ib3g7d2lkdGg6MTAwJTtoZWlnaHQ6MTAwJTtvdmVyZmxvdzpo
aWRkZW59LlZmUHBrZC1MZ2JzU2U6bm90KC5WZlBwa2QtTGdic1NlLU9XWEVYZS1JTnNBZ2Mp
IC5WZlBwa2QtSmg5bEdje3RvcDowO2xlZnQ6MH0uVmZQcGtkLUxnYnNTZS1PV1hFWGUtTVY3
eWViIC5WZlBwa2QtSmg5bEdjOjpiZWZvcmUsLlZmUHBrZC1MZ2JzU2UtT1dYRVhlLU1WN3ll
YiAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXIsLlZmUHBrZC1MZ2JzU2UtT1dYRVhlLWs4UXBKIC5W
ZlBwa2QtSmg5bEdjOjpiZWZvcmUsLlZmUHBrZC1MZ2JzU2UtT1dYRVhlLWs4UXBKIC5WZlBw
a2QtSmg5bEdjOjphZnRlcntiYWNrZ3JvdW5kLWNvbG9yOiNmZmZ9LlZmUHBrZC1MZ2JzU2Ut
T1dYRVhlLU1WN3llYiAuVmZQcGtkLUpoOWxHYzo6YmVmb3JlLC5WZlBwa2QtTGdic1NlLU9X
WEVYZS1NVjd5ZWIgLlZmUHBrZC1KaDlsR2M6OmFmdGVyLC5WZlBwa2QtTGdic1NlLU9XWEVY
ZS1rOFFwSiAuVmZQcGtkLUpoOWxHYzo6YmVmb3JlLC5WZlBwa2QtTGdic1NlLU9XWEVYZS1r
OFFwSiAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7YmFja2dyb3VuZC1jb2xvcjp2YXIoLS1tZGMt
dGhlbWUtb24tcHJpbWFyeSwjZmZmKX0uVmZQcGtkLUxnYnNTZS1PV1hFWGUtTVY3eWViOmhv
dmVyIC5WZlBwa2QtSmg5bEdjOjpiZWZvcmUsLlZmUHBrZC1MZ2JzU2UtT1dYRVhlLWs4UXBK
OmhvdmVyIC5WZlBwa2QtSmg5bEdjOjpiZWZvcmV7b3BhY2l0eTouMDh9LlZmUHBrZC1MZ2Jz
U2UtT1dYRVhlLU1WN3llYi5WZlBwa2Qta3NLc1pkLW1XUGszZC1PV1hFWGUtQUhlNktjLVhw
bkRDZSAuVmZQcGtkLUpoOWxHYzo6YmVmb3JlLC5WZlBwa2QtTGdic1NlLU9XWEVYZS1NVjd5
ZWI6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6Zm9jdXMgLlZmUHBrZC1KaDlsR2M6OmJl
Zm9yZSwuVmZQcGtkLUxnYnNTZS1PV1hFWGUtazhRcEouVmZQcGtkLWtzS3NaZC1tV1BrM2Qt
T1dYRVhlLUFIZTZLYy1YcG5EQ2UgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZSwuVmZQcGtkLUxn
YnNTZS1PV1hFWGUtazhRcEo6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6Zm9jdXMgLlZm
UHBrZC1KaDlsR2M6OmJlZm9yZXt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7b3BhY2l0eTou
MjR9LlZmUHBrZC1MZ2JzU2UtT1dYRVhlLU1WN3llYjpub3QoLlZmUHBrZC1rc0tzWmQtbVdQ
azNkKSAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXIsLlZmUHBrZC1MZ2JzU2UtT1dYRVhlLWs4UXBK
Om5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpIC5WZlBwa2QtSmg5bEdjOjphZnRlcnt0cmFu
c2l0aW9uOm9wYWNpdHkgMTUwbXMgbGluZWFyfS5WZlBwa2QtTGdic1NlLU9XWEVYZS1NVjd5
ZWI6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6YWN0aXZlIC5WZlBwa2QtSmg5bEdjOjph
ZnRlciwuVmZQcGtkLUxnYnNTZS1PV1hFWGUtazhRcEo6bm90KC5WZlBwa2Qta3NLc1pkLW1X
UGszZCk6YWN0aXZlIC5WZlBwa2QtSmg5bEdjOjphZnRlcnt0cmFuc2l0aW9uLWR1cmF0aW9u
Ojc1bXM7b3BhY2l0eTouMjR9LlZmUHBrZC1MZ2JzU2UtT1dYRVhlLU1WN3llYi5WZlBwa2Qt
a3NLc1pkLW1XUGszZCwuVmZQcGtkLUxnYnNTZS1PV1hFWGUtazhRcEouVmZQcGtkLWtzS3Na
ZC1tV1BrM2R7LS1tZGMtcmlwcGxlLWZnLW9wYWNpdHk6LjI0fS5WZlBwa2QtTGdic1Nle2hl
aWdodDozNnB4fS5WZlBwa2QtQnoxMTJjLUxnYnNTZXtkaXNwbGF5OmlubGluZS1ibG9jaztw
b3NpdGlvbjpyZWxhdGl2ZTtib3gtc2l6aW5nOmJvcmRlci1ib3g7Ym9yZGVyOm5vbmU7b3V0
bGluZTpub25lO2JhY2tncm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7ZmlsbDpjdXJyZW50Q29s
b3I7Y29sb3I6aW5oZXJpdDtmb250LXNpemU6MjRweDt0ZXh0LWRlY29yYXRpb246bm9uZTtj
dXJzb3I6cG9pbnRlcjstbW96LXVzZXItc2VsZWN0Om5vbmU7d2lkdGg6NDhweDtoZWlnaHQ6
NDhweDtwYWRkaW5nOjEycHh9LlZmUHBrZC1CejExMmMtTGdic1NlIHN2ZywuVmZQcGtkLUJ6
MTEyYy1MZ2JzU2UgaW1ne3dpZHRoOjI0cHg7aGVpZ2h0OjI0cHh9LlZmUHBrZC1CejExMmMt
TGdic1NlOmRpc2FibGVke2NvbG9yOnJnYmEoMCwwLDAsMC4zOCk7Y29sb3I6dmFyKC0tbWRj
LXRoZW1lLXRleHQtZGlzYWJsZWQtb24tbGlnaHQscmdiYSgwLDAsMCwwLjM4KSk7Y3Vyc29y
OmRlZmF1bHQ7cG9pbnRlci1ldmVudHM6bm9uZX0uVmZQcGtkLUJ6MTEyYy1rQkRzb2R7ZGlz
cGxheTppbmxpbmUtYmxvY2t9LlZmUHBrZC1CejExMmMta0JEc29kLlZmUHBrZC1CejExMmMt
a0JEc29kLU9XWEVYZS1JVDVkSmQsLlZmUHBrZC1CejExMmMtTGdic1NlLU9XWEVYZS1JVDVk
SmQgLlZmUHBrZC1CejExMmMta0JEc29ke2Rpc3BsYXk6bm9uZX0uVmZQcGtkLUJ6MTEyYy1M
Z2JzU2UtT1dYRVhlLUlUNWRKZCAuVmZQcGtkLUJ6MTEyYy1rQkRzb2QuVmZQcGtkLUJ6MTEy
Yy1rQkRzb2QtT1dYRVhlLUlUNWRKZHtkaXNwbGF5OmlubGluZS1ibG9ja30uVmZQcGtkLUJ6
MTEyYy1MZ2JzU2V7LS1tZGMtcmlwcGxlLWZnLXNpemU6MDstLW1kYy1yaXBwbGUtbGVmdDow
Oy0tbWRjLXJpcHBsZS10b3A6MDstLW1kYy1yaXBwbGUtZmctc2NhbGU6MTstLW1kYy1yaXBw
bGUtZmctdHJhbnNsYXRlLWVuZDowOy0tbWRjLXJpcHBsZS1mZy10cmFuc2xhdGUtc3RhcnQ6
MDt3aWxsLWNoYW5nZTp0cmFuc2Zvcm0sb3BhY2l0eX0uVmZQcGtkLUJ6MTEyYy1MZ2JzU2U6
OmJlZm9yZXtwb3NpdGlvbjphYnNvbHV0ZTstbW96LWJvcmRlci1yYWRpdXM6NTAlO2JvcmRl
ci1yYWRpdXM6NTAlO29wYWNpdHk6MDtwb2ludGVyLWV2ZW50czpub25lO2NvbnRlbnQ6IiJ9
LlZmUHBrZC1CejExMmMtTGdic1NlOjphZnRlcntwb3NpdGlvbjphYnNvbHV0ZTstbW96LWJv
cmRlci1yYWRpdXM6NTAlO2JvcmRlci1yYWRpdXM6NTAlO29wYWNpdHk6MDtwb2ludGVyLWV2
ZW50czpub25lO2NvbnRlbnQ6IiJ9LlZmUHBrZC1CejExMmMtTGdic1NlOjpiZWZvcmV7dHJh
bnNpdGlvbjpvcGFjaXR5IDE1bXMgbGluZWFyLGJhY2tncm91bmQtY29sb3IgMTVtcyBsaW5l
YXI7ei1pbmRleDoxfS5WZlBwa2QtQnoxMTJjLUxnYnNTZS5WZlBwa2Qta3NLc1pkLW1XUGsz
ZDo6YmVmb3Jle3RyYW5zZm9ybTpzY2FsZSh2YXIoLS1tZGMtcmlwcGxlLWZnLXNjYWxlLDEp
KX0uVmZQcGtkLUJ6MTEyYy1MZ2JzU2UuVmZQcGtkLWtzS3NaZC1tV1BrM2Q6OmFmdGVye3Ry
YW5zZm9ybTpzY2FsZSgwKTt0cmFuc2Zvcm0tb3JpZ2luOmNlbnRlciBjZW50ZXJ9LlZmUHBr
ZC1CejExMmMtTGdic1NlLlZmUHBrZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1aTk1UcWQ6OmFm
dGVye3RvcDp2YXIoLS1tZGMtcmlwcGxlLXRvcCwwKTtsZWZ0OnZhcigtLW1kYy1yaXBwbGUt
bGVmdCwwKX0uVmZQcGtkLUJ6MTEyYy1MZ2JzU2UuVmZQcGtkLWtzS3NaZC1tV1BrM2QtT1dY
RVhlLVR2OGw1ZC1sSmZaTWM6OmFmdGVye2FuaW1hdGlvbjptZGMtcmlwcGxlLWZnLXJhZGl1
cy1pbiAyMjVtcyBmb3J3YXJkcyxtZGMtcmlwcGxlLWZnLW9wYWNpdHktaW4gNzVtcyBmb3J3
YXJkc30uVmZQcGtkLUJ6MTEyYy1MZ2JzU2UuVmZQcGtkLWtzS3NaZC1tV1BrM2QtT1dYRVhl
LVR2OGw1ZC1PbVMxdmY6OmFmdGVye2FuaW1hdGlvbjptZGMtcmlwcGxlLWZnLW9wYWNpdHkt
b3V0IDE1MG1zO3RyYW5zZm9ybTp0cmFuc2xhdGUodmFyKC0tbWRjLXJpcHBsZS1mZy10cmFu
c2xhdGUtZW5kLDApKSBzY2FsZSh2YXIoLS1tZGMtcmlwcGxlLWZnLXNjYWxlLDEpKX0uVmZQ
cGtkLUJ6MTEyYy1MZ2JzU2U6OmJlZm9yZXt0b3A6LW1vei1jYWxjKDUwJSAtIDUwJSk7dG9w
OmNhbGMoNTAlIC0gNTAlKTtsZWZ0Oi1tb3otY2FsYyg1MCUgLSA1MCUpO2xlZnQ6Y2FsYyg1
MCUgLSA1MCUpO3dpZHRoOjEwMCU7aGVpZ2h0OjEwMCV9LlZmUHBrZC1CejExMmMtTGdic1Nl
OjphZnRlcnt0b3A6LW1vei1jYWxjKDUwJSAtIDUwJSk7dG9wOmNhbGMoNTAlIC0gNTAlKTts
ZWZ0Oi1tb3otY2FsYyg1MCUgLSA1MCUpO2xlZnQ6Y2FsYyg1MCUgLSA1MCUpO3dpZHRoOjEw
MCU7aGVpZ2h0OjEwMCV9LlZmUHBrZC1CejExMmMtTGdic1NlLlZmUHBrZC1rc0tzWmQtbVdQ
azNkOjpiZWZvcmV7dG9wOnZhcigtLW1kYy1yaXBwbGUtdG9wLGNhbGMoNTAlIC0gNTAlKSk7
bGVmdDp2YXIoLS1tZGMtcmlwcGxlLWxlZnQsY2FsYyg1MCUgLSA1MCUpKTt3aWR0aDp2YXIo
LS1tZGMtcmlwcGxlLWZnLXNpemUsMTAwJSk7aGVpZ2h0OnZhcigtLW1kYy1yaXBwbGUtZmct
c2l6ZSwxMDAlKX0uVmZQcGtkLUJ6MTEyYy1MZ2JzU2UuVmZQcGtkLWtzS3NaZC1tV1BrM2Q6
OmFmdGVye3RvcDp2YXIoLS1tZGMtcmlwcGxlLXRvcCxjYWxjKDUwJSAtIDUwJSkpO2xlZnQ6
dmFyKC0tbWRjLXJpcHBsZS1sZWZ0LGNhbGMoNTAlIC0gNTAlKSk7d2lkdGg6dmFyKC0tbWRj
LXJpcHBsZS1mZy1zaXplLDEwMCUpO2hlaWdodDp2YXIoLS1tZGMtcmlwcGxlLWZnLXNpemUs
MTAwJSl9LlZmUHBrZC1CejExMmMtTGdic1NlOjpiZWZvcmV7YmFja2dyb3VuZC1jb2xvcjoj
MDAwfS5WZlBwa2QtQnoxMTJjLUxnYnNTZTo6YWZ0ZXJ7YmFja2dyb3VuZC1jb2xvcjojMDAw
fS5WZlBwa2QtQnoxMTJjLUxnYnNTZTpob3Zlcjo6YmVmb3Jle29wYWNpdHk6LjA0fS5WZlBw
a2QtQnoxMTJjLUxnYnNTZS5WZlBwa2Qta3NLc1pkLW1XUGszZC1PV1hFWGUtQUhlNktjLVhw
bkRDZTo6YmVmb3Jle3RyYW5zaXRpb24tZHVyYXRpb246NzVtcztvcGFjaXR5Oi4xMn0uVmZQ
cGtkLUJ6MTEyYy1MZ2JzU2U6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6Zm9jdXM6OmJl
Zm9yZXt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7b3BhY2l0eTouMTJ9LlZmUHBrZC1CejEx
MmMtTGdic1NlOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpOjphZnRlcnt0cmFuc2l0aW9u
Om9wYWNpdHkgMTUwbXMgbGluZWFyfS5WZlBwa2QtQnoxMTJjLUxnYnNTZTpub3QoLlZmUHBr
ZC1rc0tzWmQtbVdQazNkKTphY3RpdmU6OmFmdGVye3RyYW5zaXRpb24tZHVyYXRpb246NzVt
cztvcGFjaXR5Oi4xMn0uVmZQcGtkLUJ6MTEyYy1MZ2JzU2UuVmZQcGtkLWtzS3NaZC1tV1Br
M2R7LS1tZGMtcmlwcGxlLWZnLW9wYWNpdHk6LjEyfS5uQ1A1eWN7Zm9udC1mYW1pbHk6Ikdv
b2dsZSBTYW5zIixSb2JvdG8sQXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6Ljg3NXJlbTtm
b250LXdlaWdodDo1MDA7bGV0dGVyLXNwYWNpbmc6LjAxMDcxNDI4NTdlbTt0ZXh0LXRyYW5z
Zm9ybTpub25lOy1tb3otYm94LXNoYWRvdzpub25lO2JveC1zaGFkb3c6bm9uZTt0cmFuc2l0
aW9uOmJvcmRlciAyODBtcyBjdWJpYy1iZXppZXIoMC40LDAsMC4yLDEpLGJveC1zaGFkb3cg
MjgwbXMgY3ViaWMtYmV6aWVyKDAuNCwwLDAuMiwxKX0ubkNQNXljIC5WZlBwa2QtSmg5bEdj
e2hlaWdodDoxMDAlO3Bvc2l0aW9uOmFic29sdXRlO292ZXJmbG93OmhpZGRlbjt3aWR0aDox
MDAlO3otaW5kZXg6MH0ubkNQNXljIC5WZlBwa2QtdlF6ZjhkLC5uQ1A1eWMgLlZmUHBrZC1r
QkRzb2R7cG9zaXRpb246cmVsYXRpdmV9LkZ6YURjZSAubkNQNXljIC5Vd3d0SHstbW96LWJv
cmRlci1yYWRpdXM6NHB4O2JvcmRlci1yYWRpdXM6NHB4fS5uQ1A1eWM6bm90KDpkaXNhYmxl
ZCl7YmFja2dyb3VuZC1jb2xvcjojMWE3M2U4O2JhY2tncm91bmQtY29sb3I6dmFyKC0tZ20t
ZmlsbGJ1dHRvbi1jb250YWluZXItY29sb3IsIzFhNzNlOCk7Y29sb3I6I2ZmZjtjb2xvcjp2
YXIoLS1nbS1maWxsYnV0dG9uLWluay1jb2xvciwjZmZmKX0ubkNQNXljIC5WZlBwa2QtSmg5
bEdjOjpiZWZvcmUsLm5DUDV5YyAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7YmFja2dyb3VuZC1j
b2xvcjojMjAyMTI0O2JhY2tncm91bmQtY29sb3I6dmFyKC0tZ20tZmlsbGJ1dHRvbi1zdGF0
ZS1jb2xvciwjMjAyMTI0KX0ubkNQNXljOmhvdmVyIC5WZlBwa2QtSmg5bEdjOjpiZWZvcmV7
b3BhY2l0eTouMTZ9Lm5DUDV5Yy5WZlBwa2Qta3NLc1pkLW1XUGszZC1PV1hFWGUtQUhlNktj
LVhwbkRDZSAuVmZQcGtkLUpoOWxHYzo6YmVmb3JlLC5uQ1A1eWM6bm90KC5WZlBwa2Qta3NL
c1pkLW1XUGszZCk6Zm9jdXMgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZXt0cmFuc2l0aW9uLWR1
cmF0aW9uOjc1bXM7b3BhY2l0eTouMjR9Lm5DUDV5Yzpub3QoLlZmUHBrZC1rc0tzWmQtbVdQ
azNkKSAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7dHJhbnNpdGlvbjpvcGFjaXR5IDE1MG1zIGxp
bmVhcn0ubkNQNXljOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpOmFjdGl2ZSAuVmZQcGtk
LUpoOWxHYzo6YWZ0ZXJ7dHJhbnNpdGlvbi1kdXJhdGlvbjo3NW1zO29wYWNpdHk6LjJ9Lm5D
UDV5Yy5WZlBwa2Qta3NLc1pkLW1XUGszZHstLW1kYy1yaXBwbGUtZmctb3BhY2l0eTouMn0u
bkNQNXljOmhvdmVyLC5uQ1A1eWM6Zm9jdXN7LW1vei1ib3gtc2hhZG93OjAgMXB4IDJweCAw
IHJnYmEoMjYsMTE1LDIzMiwwLjMpLDAgMXB4IDNweCAxcHggcmdiYSgyNiwxMTUsMjMyLDAu
MTUpO2JveC1zaGFkb3c6MCAxcHggMnB4IDAgcmdiYSgyNiwxMTUsMjMyLDAuMyksMCAxcHgg
M3B4IDFweCByZ2JhKDI2LDExNSwyMzIsMC4xNSk7LW1vei1ib3gtc2hhZG93OjAgMXB4IDJw
eCAwIHZhcigtLWdtLWZpbGxidXR0b24ta2V5c2hhZG93LWNvbG9yLHJnYmEoMjYsMTE1LDIz
MiwwLjMpKSwwIDFweCAzcHggMXB4IHZhcigtLWdtLWZpbGxidXR0b24tYW1iaWVudHNoYWRv
dy1jb2xvcixyZ2JhKDI2LDExNSwyMzIsMC4xNSkpO2JveC1zaGFkb3c6MCAxcHggMnB4IDAg
dmFyKC0tZ20tZmlsbGJ1dHRvbi1rZXlzaGFkb3ctY29sb3IscmdiYSgyNiwxMTUsMjMyLDAu
MykpLDAgMXB4IDNweCAxcHggdmFyKC0tZ20tZmlsbGJ1dHRvbi1hbWJpZW50c2hhZG93LWNv
bG9yLHJnYmEoMjYsMTE1LDIzMiwwLjE1KSl9Lm5DUDV5YzphY3RpdmV7LW1vei1ib3gtc2hh
ZG93OjAgMXB4IDJweCAwIHJnYmEoMjYsMTE1LDIzMiwwLjMpLDAgMnB4IDZweCAycHggcmdi
YSgyNiwxMTUsMjMyLDAuMTUpO2JveC1zaGFkb3c6MCAxcHggMnB4IDAgcmdiYSgyNiwxMTUs
MjMyLDAuMyksMCAycHggNnB4IDJweCByZ2JhKDI2LDExNSwyMzIsMC4xNSk7LW1vei1ib3gt
c2hhZG93OjAgMXB4IDJweCAwIHZhcigtLWdtLWZpbGxidXR0b24ta2V5c2hhZG93LWNvbG9y
LHJnYmEoMjYsMTE1LDIzMiwwLjMpKSwwIDJweCA2cHggMnB4IHZhcigtLWdtLWZpbGxidXR0
b24tYW1iaWVudHNoYWRvdy1jb2xvcixyZ2JhKDI2LDExNSwyMzIsMC4xNSkpO2JveC1zaGFk
b3c6MCAxcHggMnB4IDAgdmFyKC0tZ20tZmlsbGJ1dHRvbi1rZXlzaGFkb3ctY29sb3Iscmdi
YSgyNiwxMTUsMjMyLDAuMykpLDAgMnB4IDZweCAycHggdmFyKC0tZ20tZmlsbGJ1dHRvbi1h
bWJpZW50c2hhZG93LWNvbG9yLHJnYmEoMjYsMTE1LDIzMiwwLjE1KSl9LkZ6YURjZSAubkNQ
NXlje3Bvc2l0aW9uOnJlbGF0aXZlO2ZvbnQtZmFtaWx5OiJHb29nbGUgU2FucyIsUm9ib3Rv
LEFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOi44NzVyZW07Zm9udC13ZWlnaHQ6NTAwO2xl
dHRlci1zcGFjaW5nOi4wMTA3MTQyODU3ZW07dGV4dC10cmFuc2Zvcm06bm9uZTstbW96LWJv
eC1zaGFkb3c6bm9uZTtib3gtc2hhZG93Om5vbmU7dHJhbnNpdGlvbjpib3JkZXIgMjgwbXMg
Y3ViaWMtYmV6aWVyKDAuNCwwLDAuMiwxKSxib3gtc2hhZG93IDI4MG1zIGN1YmljLWJlemll
cigwLjQsMCwwLjIsMSl9LkZ6YURjZSAubkNQNXljIC5WZlBwa2QtSmg5bEdje2hlaWdodDox
MDAlO3Bvc2l0aW9uOmFic29sdXRlO292ZXJmbG93OmhpZGRlbjt3aWR0aDoxMDAlO3otaW5k
ZXg6MH0uRnphRGNlIC5uQ1A1eWMgLlZmUHBrZC12UXpmOGQsLkZ6YURjZSAubkNQNXljIC5W
ZlBwa2Qta0JEc29ke3Bvc2l0aW9uOnJlbGF0aXZlfS5GemFEY2UgLkZ6YURjZSAubkNQNXlj
IC5Vd3d0SHstbW96LWJvcmRlci1yYWRpdXM6NHB4O2JvcmRlci1yYWRpdXM6NHB4fS5GemFE
Y2UgLm5DUDV5Yzpub3QoOmRpc2FibGVkKXtiYWNrZ3JvdW5kLWNvbG9yOiM4YWI0Zjg7YmFj
a2dyb3VuZC1jb2xvcjp2YXIoLS1nbS1maWxsYnV0dG9uLWNvbnRhaW5lci1jb2xvciwjOGFi
NGY4KTtjb2xvcjojMjAyMTI0O2NvbG9yOnZhcigtLWdtLWZpbGxidXR0b24taW5rLWNvbG9y
LCMyMDIxMjQpfS5GemFEY2UgLm5DUDV5YyAuVmZQcGtkLUpoOWxHYzo6YmVmb3JlLC5GemFE
Y2UgLm5DUDV5YyAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7YmFja2dyb3VuZC1jb2xvcjojZmZm
O2JhY2tncm91bmQtY29sb3I6dmFyKC0tZ20tZmlsbGJ1dHRvbi1zdGF0ZS1jb2xvciwjZmZm
KX0uRnphRGNlIC5uQ1A1eWM6aG92ZXIgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZXtvcGFjaXR5
Oi4xNn0uRnphRGNlIC5uQ1A1eWMuVmZQcGtkLWtzS3NaZC1tV1BrM2QtT1dYRVhlLUFIZTZL
Yy1YcG5EQ2UgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZSwuRnphRGNlIC5uQ1A1eWM6bm90KC5W
ZlBwa2Qta3NLc1pkLW1XUGszZCk6Zm9jdXMgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZXt0cmFu
c2l0aW9uLWR1cmF0aW9uOjc1bXM7b3BhY2l0eTouMjR9LkZ6YURjZSAubkNQNXljOm5vdCgu
VmZQcGtkLWtzS3NaZC1tV1BrM2QpIC5WZlBwa2QtSmg5bEdjOjphZnRlcnt0cmFuc2l0aW9u
Om9wYWNpdHkgMTUwbXMgbGluZWFyfS5GemFEY2UgLm5DUDV5Yzpub3QoLlZmUHBrZC1rc0tz
WmQtbVdQazNkKTphY3RpdmUgLlZmUHBrZC1KaDlsR2M6OmFmdGVye3RyYW5zaXRpb24tZHVy
YXRpb246NzVtcztvcGFjaXR5Oi4yfS5GemFEY2UgLm5DUDV5Yy5WZlBwa2Qta3NLc1pkLW1X
UGszZHstLW1kYy1yaXBwbGUtZmctb3BhY2l0eTouMn0uRnphRGNlIC5uQ1A1eWMgLlV3d3RI
e3RyYW5zaXRpb246b3BhY2l0eSAyODBtcyBjdWJpYy1iZXppZXIoMC40LDAsMC4yLDEpO29w
YWNpdHk6MH0uRnphRGNlIC5uQ1A1eWM6aG92ZXIsLkZ6YURjZSAubkNQNXljOmZvY3Vze2Jv
cmRlcjowOy1tb3otYm94LXNoYWRvdzowIDFweCAycHggMCByZ2JhKDAsMCwwLDAuMyksMCAx
cHggM3B4IDFweCByZ2JhKDAsMCwwLDAuMTUpO2JveC1zaGFkb3c6MCAxcHggMnB4IDAgcmdi
YSgwLDAsMCwwLjMpLDAgMXB4IDNweCAxcHggcmdiYSgwLDAsMCwwLjE1KX0uRnphRGNlIC5u
Q1A1eWM6aG92ZXIgLlV3d3RILC5GemFEY2UgLm5DUDV5Yzpmb2N1cyAuVXd3dEh7YmFja2dy
b3VuZC1jb2xvcjojZThlYWVkO29wYWNpdHk6LjA1fS5GemFEY2UgLm5DUDV5YzphY3RpdmV7
Ym9yZGVyOjA7LW1vei1ib3gtc2hhZG93OjAgMXB4IDJweCAwIHJnYmEoMCwwLDAsMC4zKSww
IDJweCA2cHggMnB4IHJnYmEoMCwwLDAsMC4xNSk7Ym94LXNoYWRvdzowIDFweCAycHggMCBy
Z2JhKDAsMCwwLDAuMyksMCAycHggNnB4IDJweCByZ2JhKDAsMCwwLDAuMTUpfS5GemFEY2Ug
Lm5DUDV5YzphY3RpdmUgLlV3d3RIe2JhY2tncm91bmQtY29sb3I6I2U4ZWFlZDtvcGFjaXR5
Oi4wOH0uUmoyTWxme2ZvbnQtZmFtaWx5OiJHb29nbGUgU2FucyIsUm9ib3RvLEFyaWFsLHNh
bnMtc2VyaWY7Zm9udC1zaXplOi44NzVyZW07Zm9udC13ZWlnaHQ6NTAwO2xldHRlci1zcGFj
aW5nOi4wMTA3MTQyODU3ZW07dGV4dC10cmFuc2Zvcm06bm9uZTstbW96LWJveC1zaGFkb3c6
bm9uZTtib3gtc2hhZG93Om5vbmU7dHJhbnNpdGlvbjpib3JkZXIgMjgwbXMgY3ViaWMtYmV6
aWVyKDAuNCwwLDAuMiwxKSxib3gtc2hhZG93IDI4MG1zIGN1YmljLWJlemllcigwLjQsMCww
LjIsMSl9LlJqMk1sZiAuVmZQcGtkLUpoOWxHY3toZWlnaHQ6MTAwJTtwb3NpdGlvbjphYnNv
bHV0ZTtvdmVyZmxvdzpoaWRkZW47d2lkdGg6MTAwJTt6LWluZGV4OjB9LlJqMk1sZiAuVmZQ
cGtkLXZRemY4ZCwuUmoyTWxmIC5WZlBwa2Qta0JEc29ke3Bvc2l0aW9uOnJlbGF0aXZlfS5G
emFEY2UgLlJqMk1sZiAuVXd3dEh7LW1vei1ib3JkZXItcmFkaXVzOjRweDtib3JkZXItcmFk
aXVzOjRweH0uUmoyTWxmIC5WZlBwa2QtSmg5bEdjOjpiZWZvcmUsLlJqMk1sZiAuVmZQcGtk
LUpoOWxHYzo6YWZ0ZXJ7YmFja2dyb3VuZC1jb2xvcjojMWE3M2U4O2JhY2tncm91bmQtY29s
b3I6dmFyKC0tZ20taGFpcmxpbmVidXR0b24tc3RhdGUtY29sb3IsIzFhNzNlOCl9LlJqMk1s
Zjpob3ZlciAuVmZQcGtkLUpoOWxHYzo6YmVmb3Jle29wYWNpdHk6LjA0fS5SajJNbGYuVmZQ
cGtkLWtzS3NaZC1tV1BrM2QtT1dYRVhlLUFIZTZLYy1YcG5EQ2UgLlZmUHBrZC1KaDlsR2M6
OmJlZm9yZSwuUmoyTWxmOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpOmZvY3VzIC5WZlBw
a2QtSmg5bEdjOjpiZWZvcmV7dHJhbnNpdGlvbi1kdXJhdGlvbjo3NW1zO29wYWNpdHk6LjEy
fS5SajJNbGY6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCkgLlZmUHBrZC1KaDlsR2M6OmFm
dGVye3RyYW5zaXRpb246b3BhY2l0eSAxNTBtcyBsaW5lYXJ9LlJqMk1sZjpub3QoLlZmUHBr
ZC1rc0tzWmQtbVdQazNkKTphY3RpdmUgLlZmUHBrZC1KaDlsR2M6OmFmdGVye3RyYW5zaXRp
b24tZHVyYXRpb246NzVtcztvcGFjaXR5Oi4xMn0uUmoyTWxmLlZmUHBrZC1rc0tzWmQtbVdQ
azNkey0tbWRjLXJpcHBsZS1mZy1vcGFjaXR5Oi4xMn0uUmoyTWxmOm5vdCg6ZGlzYWJsZWQp
e2NvbG9yOiMxYTczZTg7Y29sb3I6dmFyKC0tZ20taGFpcmxpbmVidXR0b24taW5rLWNvbG9y
LCMxYTczZTgpO2JvcmRlci1jb2xvcjojZGFkY2UwO2JvcmRlci1jb2xvcjp2YXIoLS1nbS1o
YWlybGluZWJ1dHRvbi1vdXRsaW5lLWNvbG9yLCNkYWRjZTApfS5SajJNbGY6aG92ZXI6bm90
KDpkaXNhYmxlZCksLlJqMk1sZjphY3RpdmU6bm90KDpkaXNhYmxlZCksLlJqMk1sZjpub3Qo
LlZmUHBrZC1rc0tzWmQtbVdQazNkKTpmb2N1czpub3QoOmRpc2FibGVkKSwuUmoyTWxmLlZm
UHBrZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1BSGU2S2MtWHBuRENlOm5vdCg6ZGlzYWJsZWQp
e2NvbG9yOiMxNzRlYTY7Y29sb3I6dmFyKC0tZ20taGFpcmxpbmVidXR0b24taW5rLWNvbG9y
LS1zdGF0ZWZ1bCwjMTc0ZWE2KX0uUmoyTWxmOmhvdmVyOm5vdCg6ZGlzYWJsZWQpLC5SajJN
bGY6YWN0aXZlOm5vdCg6ZGlzYWJsZWQpe2JvcmRlci1jb2xvcjojZGFkY2UwO2JvcmRlci1j
b2xvcjp2YXIoLS1nbS1oYWlybGluZWJ1dHRvbi1vdXRsaW5lLWNvbG9yLCNkYWRjZTApfS5S
ajJNbGY6Zm9jdXM6bm90KDpkaXNhYmxlZCl7Ym9yZGVyLWNvbG9yOiMxNzRlYTY7Ym9yZGVy
LWNvbG9yOnZhcigtLWdtLWhhaXJsaW5lYnV0dG9uLW91dGxpbmUtY29sb3ItLXN0YXRlZnVs
LCMxNzRlYTYpfS5SajJNbGY6ZGlzYWJsZWR7Ym9yZGVyLWNvbG9yOiNkYWRjZTB9LlJqMk1s
ZjphY3RpdmV7LW1vei1ib3gtc2hhZG93OjAgMXB4IDJweCAwIHJnYmEoNjAsNjQsNjcsMC4z
KSwwIDJweCA2cHggMnB4IHJnYmEoNjAsNjQsNjcsMC4xNSk7Ym94LXNoYWRvdzowIDFweCAy
cHggMCByZ2JhKDYwLDY0LDY3LDAuMyksMCAycHggNnB4IDJweCByZ2JhKDYwLDY0LDY3LDAu
MTUpOy1tb3otYm94LXNoYWRvdzowIDFweCAycHggMCB2YXIoLS1nbS1oYWlybGluZWJ1dHRv
bi1rZXlzaGFkb3ctY29sb3IscmdiYSg2MCw2NCw2NywwLjMpKSwwIDJweCA2cHggMnB4IHZh
cigtLWdtLWhhaXJsaW5lYnV0dG9uLWFtYmllbnRzaGFkb3ctY29sb3IscmdiYSg2MCw2NCw2
NywwLjE1KSk7Ym94LXNoYWRvdzowIDFweCAycHggMCB2YXIoLS1nbS1oYWlybGluZWJ1dHRv
bi1rZXlzaGFkb3ctY29sb3IscmdiYSg2MCw2NCw2NywwLjMpKSwwIDJweCA2cHggMnB4IHZh
cigtLWdtLWhhaXJsaW5lYnV0dG9uLWFtYmllbnRzaGFkb3ctY29sb3IscmdiYSg2MCw2NCw2
NywwLjE1KSl9LkZ6YURjZSAuUmoyTWxme3Bvc2l0aW9uOnJlbGF0aXZlO2ZvbnQtZmFtaWx5
OiJHb29nbGUgU2FucyIsUm9ib3RvLEFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOi44NzVy
ZW07Zm9udC13ZWlnaHQ6NTAwO2xldHRlci1zcGFjaW5nOi4wMTA3MTQyODU3ZW07dGV4dC10
cmFuc2Zvcm06bm9uZTstbW96LWJveC1zaGFkb3c6bm9uZTtib3gtc2hhZG93Om5vbmU7dHJh
bnNpdGlvbjpib3JkZXIgMjgwbXMgY3ViaWMtYmV6aWVyKDAuNCwwLDAuMiwxKSxib3gtc2hh
ZG93IDI4MG1zIGN1YmljLWJlemllcigwLjQsMCwwLjIsMSl9LkZ6YURjZSAuUmoyTWxmIC5W
ZlBwa2QtSmg5bEdje2hlaWdodDoxMDAlO3Bvc2l0aW9uOmFic29sdXRlO292ZXJmbG93Omhp
ZGRlbjt3aWR0aDoxMDAlO3otaW5kZXg6MH0uRnphRGNlIC5SajJNbGYgLlZmUHBrZC12UXpm
OGQsLkZ6YURjZSAuUmoyTWxmIC5WZlBwa2Qta0JEc29ke3Bvc2l0aW9uOnJlbGF0aXZlfS5G
emFEY2UgLkZ6YURjZSAuUmoyTWxmIC5Vd3d0SHstbW96LWJvcmRlci1yYWRpdXM6NHB4O2Jv
cmRlci1yYWRpdXM6NHB4fS5GemFEY2UgLlJqMk1sZi5WZlBwa2Qta3NLc1pkLW1XUGszZC1P
V1hFWGUtQUhlNktjLVhwbkRDZSAuVmZQcGtkLUpoOWxHYzo6YmVmb3JlLC5GemFEY2UgLlJq
Mk1sZjpub3QoLlZmUHBrZC1rc0tzWmQtbVdQazNkKTpmb2N1cyAuVmZQcGtkLUpoOWxHYzo6
YmVmb3Jle3RyYW5zaXRpb24tZHVyYXRpb246NzVtc30uRnphRGNlIC5SajJNbGY6bm90KC5W
ZlBwa2Qta3NLc1pkLW1XUGszZCkgLlZmUHBrZC1KaDlsR2M6OmFmdGVye3RyYW5zaXRpb246
b3BhY2l0eSAxNTBtcyBsaW5lYXJ9LkZ6YURjZSAuUmoyTWxmOm5vdCguVmZQcGtkLWtzS3Na
ZC1tV1BrM2QpOmFjdGl2ZSAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7dHJhbnNpdGlvbi1kdXJh
dGlvbjo3NW1zfS5GemFEY2UgLlJqMk1sZjpub3QoOmRpc2FibGVkKXtjb2xvcjojOGFiNGY4
O2NvbG9yOnZhcigtLWdtLWhhaXJsaW5lYnV0dG9uLWluay1jb2xvciwjOGFiNGY4KTtib3Jk
ZXItY29sb3I6IzVmNjM2ODtib3JkZXItY29sb3I6dmFyKC0tZ20taGFpcmxpbmVidXR0b24t
b3V0bGluZS1jb2xvciwjNWY2MzY4KX0uRnphRGNlIC5SajJNbGY6aG92ZXI6bm90KDpkaXNh
YmxlZCksLkZ6YURjZSAuUmoyTWxmOmFjdGl2ZTpub3QoOmRpc2FibGVkKSwuRnphRGNlIC5S
ajJNbGY6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6Zm9jdXM6bm90KDpkaXNhYmxlZCks
LkZ6YURjZSAuUmoyTWxmLlZmUHBrZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1BSGU2S2MtWHBu
RENlOm5vdCg6ZGlzYWJsZWQpe2NvbG9yOiNhZWNiZmE7Y29sb3I6dmFyKC0tZ20taGFpcmxp
bmVidXR0b24taW5rLWNvbG9yLS1zdGF0ZWZ1bCwjYWVjYmZhKX0uRnphRGNlIC5SajJNbGY6
aG92ZXI6bm90KDpkaXNhYmxlZCksLkZ6YURjZSAuUmoyTWxmOmFjdGl2ZTpub3QoOmRpc2Fi
bGVkKXtib3JkZXItY29sb3I6IzVmNjM2ODtib3JkZXItY29sb3I6dmFyKC0tZ20taGFpcmxp
bmVidXR0b24tb3V0bGluZS1jb2xvciwjNWY2MzY4KX0uRnphRGNlIC5SajJNbGY6Zm9jdXM6
bm90KDpkaXNhYmxlZCl7Ym9yZGVyLWNvbG9yOiNhZWNiZmE7Ym9yZGVyLWNvbG9yOnZhcigt
LWdtLWhhaXJsaW5lYnV0dG9uLW91dGxpbmUtY29sb3ItLXN0YXRlZnVsLCNhZWNiZmEpfS5G
emFEY2UgLlJqMk1sZiAuVXd3dEh7dHJhbnNpdGlvbjpvcGFjaXR5IDI4MG1zIGN1YmljLWJl
emllcigwLjQsMCwwLjIsMSk7b3BhY2l0eTowfS5GemFEY2UgLlJqMk1sZiAuVmZQcGtkLUpo
OWxHYzo6YmVmb3JlLC5GemFEY2UgLlJqMk1sZiAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7YmFj
a2dyb3VuZC1jb2xvcjojOGFiNGY4O2JhY2tncm91bmQtY29sb3I6dmFyKC0tZ20taGFpcmxp
bmVidXR0b24tc3RhdGUtY29sb3IsIzhhYjRmOCl9LkZ6YURjZSAuUmoyTWxmOmhvdmVyIC5W
ZlBwa2QtSmg5bEdjOjpiZWZvcmV7b3BhY2l0eTouMDR9LkZ6YURjZSAuUmoyTWxmLlZmUHBr
ZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1BSGU2S2MtWHBuRENlIC5WZlBwa2QtSmg5bEdjOjpi
ZWZvcmUsLkZ6YURjZSAuUmoyTWxmOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpOmZvY3Vz
IC5WZlBwa2QtSmg5bEdjOjpiZWZvcmV7dHJhbnNpdGlvbi1kdXJhdGlvbjo3NW1zO29wYWNp
dHk6LjEyfS5GemFEY2UgLlJqMk1sZjpub3QoLlZmUHBrZC1rc0tzWmQtbVdQazNkKSAuVmZQ
cGtkLUpoOWxHYzo6YWZ0ZXJ7dHJhbnNpdGlvbjpvcGFjaXR5IDE1MG1zIGxpbmVhcn0uRnph
RGNlIC5SajJNbGY6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6YWN0aXZlIC5WZlBwa2Qt
Smg5bEdjOjphZnRlcnt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7b3BhY2l0eTouMX0uRnph
RGNlIC5SajJNbGYuVmZQcGtkLWtzS3NaZC1tV1BrM2R7LS1tZGMtcmlwcGxlLWZnLW9wYWNp
dHk6LjF9LkZ6YURjZSAuUmoyTWxmOmRpc2FibGVke2JvcmRlci1jb2xvcjojZThlYWVkfS5G
emFEY2UgLlJqMk1sZjphY3RpdmV7LW1vei1ib3gtc2hhZG93OjAgMXB4IDJweCAwIHJnYmEo
MCwwLDAsMC4zKSwwIDJweCA2cHggMnB4IHJnYmEoMCwwLDAsMC4xNSk7Ym94LXNoYWRvdzow
IDFweCAycHggMCByZ2JhKDAsMCwwLDAuMyksMCAycHggNnB4IDJweCByZ2JhKDAsMCwwLDAu
MTUpfS5iOWh5VmR7Zm9udC1mYW1pbHk6Ikdvb2dsZSBTYW5zIixSb2JvdG8sQXJpYWwsc2Fu
cy1zZXJpZjtmb250LXNpemU6Ljg3NXJlbTtmb250LXdlaWdodDo1MDA7bGV0dGVyLXNwYWNp
bmc6LjAxMDcxNDI4NTdlbTt0ZXh0LXRyYW5zZm9ybTpub25lO3BhZGRpbmc6MCAxNnB4IDAg
MTZweDt0cmFuc2l0aW9uOmJvcmRlciAyODBtcyBjdWJpYy1iZXppZXIoMC40LDAsMC4yLDEp
LGJveC1zaGFkb3cgMjgwbXMgY3ViaWMtYmV6aWVyKDAuNCwwLDAuMiwxKTtib3JkZXI6MDst
bW96LWJveC1zaGFkb3c6MCAxcHggMnB4IDAgcmdiYSg2MCw2NCw2NywwLjMpLDAgMXB4IDNw
eCAxcHggcmdiYSg2MCw2NCw2NywwLjE1KTtib3gtc2hhZG93OjAgMXB4IDJweCAwIHJnYmEo
NjAsNjQsNjcsMC4zKSwwIDFweCAzcHggMXB4IHJnYmEoNjAsNjQsNjcsMC4xNSk7LW1vei1i
b3gtc2hhZG93OjAgMXB4IDJweCAwIHZhcigtLWdtLXByb3RlY3RlZGJ1dHRvbi1rZXlzaGFk
b3ctY29sb3IscmdiYSg2MCw2NCw2NywwLjMpKSwwIDFweCAzcHggMXB4IHZhcigtLWdtLXBy
b3RlY3RlZGJ1dHRvbi1hbWJpZW50c2hhZG93LWNvbG9yLHJnYmEoNjAsNjQsNjcsMC4xNSkp
O2JveC1zaGFkb3c6MCAxcHggMnB4IDAgdmFyKC0tZ20tcHJvdGVjdGVkYnV0dG9uLWtleXNo
YWRvdy1jb2xvcixyZ2JhKDYwLDY0LDY3LDAuMykpLDAgMXB4IDNweCAxcHggdmFyKC0tZ20t
cHJvdGVjdGVkYnV0dG9uLWFtYmllbnRzaGFkb3ctY29sb3IscmdiYSg2MCw2NCw2NywwLjE1
KSl9LmI5aHlWZCAuVmZQcGtkLUpoOWxHY3toZWlnaHQ6MTAwJTtwb3NpdGlvbjphYnNvbHV0
ZTtvdmVyZmxvdzpoaWRkZW47d2lkdGg6MTAwJTt6LWluZGV4OjB9LmI5aHlWZCAuVmZQcGtk
LXZRemY4ZCwuYjloeVZkIC5WZlBwa2Qta0JEc29ke3Bvc2l0aW9uOnJlbGF0aXZlfS5GemFE
Y2UgLmI5aHlWZCAuVXd3dEh7LW1vei1ib3JkZXItcmFkaXVzOjRweDtib3JkZXItcmFkaXVz
OjRweH0uYjloeVZkIC5WZlBwa2QtSmg5bEdjOjpiZWZvcmUsLmI5aHlWZCAuVmZQcGtkLUpo
OWxHYzo6YWZ0ZXJ7YmFja2dyb3VuZC1jb2xvcjojMWE3M2U4O2JhY2tncm91bmQtY29sb3I6
dmFyKC0tZ20tcHJvdGVjdGVkYnV0dG9uLXN0YXRlLWNvbG9yLCMxYTczZTgpfS5iOWh5VmQ6
aG92ZXIgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZXtvcGFjaXR5Oi4wNH0uYjloeVZkLlZmUHBr
ZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1BSGU2S2MtWHBuRENlIC5WZlBwa2QtSmg5bEdjOjpi
ZWZvcmUsLmI5aHlWZDpub3QoLlZmUHBrZC1rc0tzWmQtbVdQazNkKTpmb2N1cyAuVmZQcGtk
LUpoOWxHYzo6YmVmb3Jle3RyYW5zaXRpb24tZHVyYXRpb246NzVtcztvcGFjaXR5Oi4xMn0u
YjloeVZkOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpIC5WZlBwa2QtSmg5bEdjOjphZnRl
cnt0cmFuc2l0aW9uOm9wYWNpdHkgMTUwbXMgbGluZWFyfS5iOWh5VmQ6bm90KC5WZlBwa2Qt
a3NLc1pkLW1XUGszZCk6YWN0aXZlIC5WZlBwa2QtSmg5bEdjOjphZnRlcnt0cmFuc2l0aW9u
LWR1cmF0aW9uOjc1bXM7b3BhY2l0eTouMTJ9LmI5aHlWZC5WZlBwa2Qta3NLc1pkLW1XUGsz
ZHstLW1kYy1yaXBwbGUtZmctb3BhY2l0eTouMTJ9LmI5aHlWZDpub3QoOmRpc2FibGVkKXti
YWNrZ3JvdW5kLWNvbG9yOiNmZmY7YmFja2dyb3VuZC1jb2xvcjp2YXIoLS1nbS1wcm90ZWN0
ZWRidXR0b24tY29udGFpbmVyLWNvbG9yLCNmZmYpO2NvbG9yOiMxYTczZTg7Y29sb3I6dmFy
KC0tZ20tcHJvdGVjdGVkYnV0dG9uLWluay1jb2xvciwjMWE3M2U4KX0uYjloeVZkOmhvdmVy
Om5vdCg6ZGlzYWJsZWQpLC5iOWh5VmQ6YWN0aXZlOm5vdCg6ZGlzYWJsZWQpLC5iOWh5VmQ6
bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6Zm9jdXM6bm90KDpkaXNhYmxlZCksLmI5aHlW
ZC5WZlBwa2Qta3NLc1pkLW1XUGszZC1PV1hFWGUtQUhlNktjLVhwbkRDZTpub3QoOmRpc2Fi
bGVkKXtjb2xvcjojMTc0ZWE2O2NvbG9yOnZhcigtLWdtLXByb3RlY3RlZGJ1dHRvbi1pbmst
Y29sb3ItLXN0YXRlZnVsLCMxNzRlYTYpfS5iOWh5VmQ6aG92ZXIsLmI5aHlWZDpmb2N1c3ti
b3JkZXI6MDstbW96LWJveC1zaGFkb3c6MCAxcHggMnB4IDAgcmdiYSg2MCw2NCw2NywwLjMp
LDAgMnB4IDZweCAycHggcmdiYSg2MCw2NCw2NywwLjE1KTtib3gtc2hhZG93OjAgMXB4IDJw
eCAwIHJnYmEoNjAsNjQsNjcsMC4zKSwwIDJweCA2cHggMnB4IHJnYmEoNjAsNjQsNjcsMC4x
NSk7LW1vei1ib3gtc2hhZG93OjAgMXB4IDJweCAwIHZhcigtLWdtLXByb3RlY3RlZGJ1dHRv
bi1rZXlzaGFkb3ctY29sb3IscmdiYSg2MCw2NCw2NywwLjMpKSwwIDJweCA2cHggMnB4IHZh
cigtLWdtLXByb3RlY3RlZGJ1dHRvbi1hbWJpZW50c2hhZG93LWNvbG9yLHJnYmEoNjAsNjQs
NjcsMC4xNSkpO2JveC1zaGFkb3c6MCAxcHggMnB4IDAgdmFyKC0tZ20tcHJvdGVjdGVkYnV0
dG9uLWtleXNoYWRvdy1jb2xvcixyZ2JhKDYwLDY0LDY3LDAuMykpLDAgMnB4IDZweCAycHgg
dmFyKC0tZ20tcHJvdGVjdGVkYnV0dG9uLWFtYmllbnRzaGFkb3ctY29sb3IscmdiYSg2MCw2
NCw2NywwLjE1KSl9LmI5aHlWZDphY3RpdmV7Ym9yZGVyOjA7LW1vei1ib3gtc2hhZG93OjAg
MXB4IDNweCAwIHJnYmEoNjAsNjQsNjcsMC4zKSwwIDRweCA4cHggM3B4IHJnYmEoNjAsNjQs
NjcsMC4xNSk7Ym94LXNoYWRvdzowIDFweCAzcHggMCByZ2JhKDYwLDY0LDY3LDAuMyksMCA0
cHggOHB4IDNweCByZ2JhKDYwLDY0LDY3LDAuMTUpOy1tb3otYm94LXNoYWRvdzowIDFweCAz
cHggMCB2YXIoLS1nbS1wcm90ZWN0ZWRidXR0b24ta2V5c2hhZG93LWNvbG9yLHJnYmEoNjAs
NjQsNjcsMC4zKSksMCA0cHggOHB4IDNweCB2YXIoLS1nbS1wcm90ZWN0ZWRidXR0b24tYW1i
aWVudHNoYWRvdy1jb2xvcixyZ2JhKDYwLDY0LDY3LDAuMTUpKTtib3gtc2hhZG93OjAgMXB4
IDNweCAwIHZhcigtLWdtLXByb3RlY3RlZGJ1dHRvbi1rZXlzaGFkb3ctY29sb3IscmdiYSg2
MCw2NCw2NywwLjMpKSwwIDRweCA4cHggM3B4IHZhcigtLWdtLXByb3RlY3RlZGJ1dHRvbi1h
bWJpZW50c2hhZG93LWNvbG9yLHJnYmEoNjAsNjQsNjcsMC4xNSkpfS5GemFEY2UgLmI5aHlW
ZHtwb3NpdGlvbjpyZWxhdGl2ZTtmb250LWZhbWlseToiR29vZ2xlIFNhbnMiLFJvYm90byxB
cmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZTouODc1cmVtO2ZvbnQtd2VpZ2h0OjUwMDtsZXR0
ZXItc3BhY2luZzouMDEwNzE0Mjg1N2VtO3RleHQtdHJhbnNmb3JtOm5vbmU7cGFkZGluZzow
IDE2cHggMCAxNnB4O3RyYW5zaXRpb246Ym9yZGVyIDI4MG1zIGN1YmljLWJlemllcigwLjQs
MCwwLjIsMSksYm94LXNoYWRvdyAyODBtcyBjdWJpYy1iZXppZXIoMC40LDAsMC4yLDEpfS5G
emFEY2UgLmI5aHlWZCAuVmZQcGtkLUpoOWxHY3toZWlnaHQ6MTAwJTtwb3NpdGlvbjphYnNv
bHV0ZTtvdmVyZmxvdzpoaWRkZW47d2lkdGg6MTAwJTt6LWluZGV4OjB9LkZ6YURjZSAuYjlo
eVZkIC5WZlBwa2QtdlF6ZjhkLC5GemFEY2UgLmI5aHlWZCAuVmZQcGtkLWtCRHNvZHtwb3Np
dGlvbjpyZWxhdGl2ZX0uRnphRGNlIC5GemFEY2UgLmI5aHlWZCAuVXd3dEh7LW1vei1ib3Jk
ZXItcmFkaXVzOjRweDtib3JkZXItcmFkaXVzOjRweH0uRnphRGNlIC5iOWh5VmQuVmZQcGtk
LWtzS3NaZC1tV1BrM2QtT1dYRVhlLUFIZTZLYy1YcG5EQ2UgLlZmUHBrZC1KaDlsR2M6OmJl
Zm9yZSwuRnphRGNlIC5iOWh5VmQ6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6Zm9jdXMg
LlZmUHBrZC1KaDlsR2M6OmJlZm9yZXt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXN9LkZ6YURj
ZSAuYjloeVZkOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpIC5WZlBwa2QtSmg5bEdjOjph
ZnRlcnt0cmFuc2l0aW9uOm9wYWNpdHkgMTUwbXMgbGluZWFyfS5GemFEY2UgLmI5aHlWZDpu
b3QoLlZmUHBrZC1rc0tzWmQtbVdQazNkKTphY3RpdmUgLlZmUHBrZC1KaDlsR2M6OmFmdGVy
e3RyYW5zaXRpb24tZHVyYXRpb246NzVtc30uRnphRGNlIC5iOWh5VmQ6bm90KDpkaXNhYmxl
ZCl7YmFja2dyb3VuZC1jb2xvcjojMjAyMTI0O2JhY2tncm91bmQtY29sb3I6dmFyKC0tZ20t
cHJvdGVjdGVkYnV0dG9uLWNvbnRhaW5lci1jb2xvciwjMjAyMTI0KTtjb2xvcjojOGFiNGY4
O2NvbG9yOnZhcigtLWdtLXByb3RlY3RlZGJ1dHRvbi1pbmstY29sb3IsIzhhYjRmOCl9LkZ6
YURjZSAuYjloeVZkOmhvdmVyOm5vdCg6ZGlzYWJsZWQpLC5GemFEY2UgLmI5aHlWZDphY3Rp
dmU6bm90KDpkaXNhYmxlZCksLkZ6YURjZSAuYjloeVZkOm5vdCguVmZQcGtkLWtzS3NaZC1t
V1BrM2QpOmZvY3VzOm5vdCg6ZGlzYWJsZWQpLC5GemFEY2UgLmI5aHlWZC5WZlBwa2Qta3NL
c1pkLW1XUGszZC1PV1hFWGUtQUhlNktjLVhwbkRDZTpub3QoOmRpc2FibGVkKXtjb2xvcjoj
YWVjYmZhO2NvbG9yOnZhcigtLWdtLXByb3RlY3RlZGJ1dHRvbi1pbmstY29sb3ItLXN0YXRl
ZnVsLCNhZWNiZmEpfS5GemFEY2UgLmI5aHlWZCAuVmZQcGtkLUpoOWxHYzo6YmVmb3JlLC5G
emFEY2UgLmI5aHlWZCAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7YmFja2dyb3VuZC1jb2xvcjoj
YWVjYmZhO2JhY2tncm91bmQtY29sb3I6dmFyKC0tZ20tcHJvdGVjdGVkYnV0dG9uLXN0YXRl
LWNvbG9yLCNhZWNiZmEpfS5GemFEY2UgLmI5aHlWZDpob3ZlciAuVmZQcGtkLUpoOWxHYzo6
YmVmb3Jle29wYWNpdHk6LjA0fS5GemFEY2UgLmI5aHlWZC5WZlBwa2Qta3NLc1pkLW1XUGsz
ZC1PV1hFWGUtQUhlNktjLVhwbkRDZSAuVmZQcGtkLUpoOWxHYzo6YmVmb3JlLC5GemFEY2Ug
LmI5aHlWZDpub3QoLlZmUHBrZC1rc0tzWmQtbVdQazNkKTpmb2N1cyAuVmZQcGtkLUpoOWxH
Yzo6YmVmb3Jle3RyYW5zaXRpb24tZHVyYXRpb246NzVtcztvcGFjaXR5Oi4xMn0uRnphRGNl
IC5iOWh5VmQ6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCkgLlZmUHBrZC1KaDlsR2M6OmFm
dGVye3RyYW5zaXRpb246b3BhY2l0eSAxNTBtcyBsaW5lYXJ9LkZ6YURjZSAuYjloeVZkOm5v
dCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpOmFjdGl2ZSAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7
dHJhbnNpdGlvbi1kdXJhdGlvbjo3NW1zO29wYWNpdHk6LjF9LkZ6YURjZSAuYjloeVZkLlZm
UHBrZC1rc0tzWmQtbVdQazNkey0tbWRjLXJpcHBsZS1mZy1vcGFjaXR5Oi4xfS5GemFEY2Ug
LmI5aHlWZCAuVXd3dEh7dHJhbnNpdGlvbjpvcGFjaXR5IDI4MG1zIGN1YmljLWJlemllcigw
LjQsMCwwLjIsMSl9LkZ6YURjZSAuYjloeVZke2JvcmRlcjowOy1tb3otYm94LXNoYWRvdzow
IDFweCAycHggMCByZ2JhKDAsMCwwLDAuMyksMCAxcHggM3B4IDFweCByZ2JhKDAsMCwwLDAu
MTUpO2JveC1zaGFkb3c6MCAxcHggMnB4IDAgcmdiYSgwLDAsMCwwLjMpLDAgMXB4IDNweCAx
cHggcmdiYSgwLDAsMCwwLjE1KX0uRnphRGNlIC5iOWh5VmQgLlV3d3RIe2JhY2tncm91bmQt
Y29sb3I6I2U4ZWFlZDtvcGFjaXR5Oi4wNX0uRnphRGNlIC5iOWh5VmQ6aG92ZXIsLkZ6YURj
ZSAuYjloeVZkOmZvY3Vze2JvcmRlcjowOy1tb3otYm94LXNoYWRvdzowIDFweCAycHggMCBy
Z2JhKDAsMCwwLDAuMyksMCAycHggNnB4IDJweCByZ2JhKDAsMCwwLDAuMTUpO2JveC1zaGFk
b3c6MCAxcHggMnB4IDAgcmdiYSgwLDAsMCwwLjMpLDAgMnB4IDZweCAycHggcmdiYSgwLDAs
MCwwLjE1KX0uRnphRGNlIC5iOWh5VmQ6aG92ZXIgLlV3d3RILC5GemFEY2UgLmI5aHlWZDpm
b2N1cyAuVXd3dEh7YmFja2dyb3VuZC1jb2xvcjojZThlYWVkO29wYWNpdHk6LjA4fS5GemFE
Y2UgLmI5aHlWZDphY3RpdmV7Ym9yZGVyOjA7LW1vei1ib3gtc2hhZG93OjAgMXB4IDNweCAw
IHJnYmEoMCwwLDAsMC4zKSwwIDRweCA4cHggM3B4IHJnYmEoMCwwLDAsMC4xNSk7Ym94LXNo
YWRvdzowIDFweCAzcHggMCByZ2JhKDAsMCwwLDAuMyksMCA0cHggOHB4IDNweCByZ2JhKDAs
MCwwLDAuMTUpfS5GemFEY2UgLmI5aHlWZDphY3RpdmUgLlV3d3RIe2JhY2tncm91bmQtY29s
b3I6I2U4ZWFlZDtvcGFjaXR5Oi4xMX0ua3NCakVje2ZvbnQtZmFtaWx5OiJHb29nbGUgU2Fu
cyIsUm9ib3RvLEFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOi44NzVyZW07Zm9udC13ZWln
aHQ6NTAwO2xldHRlci1zcGFjaW5nOi4wMTA3MTQyODU3ZW07dGV4dC10cmFuc2Zvcm06bm9u
ZX0ua3NCakVjIC5WZlBwa2QtSmg5bEdje2hlaWdodDoxMDAlO3Bvc2l0aW9uOmFic29sdXRl
O292ZXJmbG93OmhpZGRlbjt3aWR0aDoxMDAlO3otaW5kZXg6MH0ua3NCakVjIC5WZlBwa2Qt
dlF6ZjhkLC5rc0JqRWMgLlZmUHBrZC1rQkRzb2R7cG9zaXRpb246cmVsYXRpdmV9LkZ6YURj
ZSAua3NCakVjIC5Vd3d0SHstbW96LWJvcmRlci1yYWRpdXM6NHB4O2JvcmRlci1yYWRpdXM6
NHB4fS5rc0JqRWMgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZSwua3NCakVjIC5WZlBwa2QtSmg5
bEdjOjphZnRlcntiYWNrZ3JvdW5kLWNvbG9yOiMxYTczZTg7YmFja2dyb3VuZC1jb2xvcjp2
YXIoLS1nbS1jb2xvcnRleHRidXR0b24tc3RhdGUtY29sb3IsIzFhNzNlOCl9LmtzQmpFYzpo
b3ZlciAuVmZQcGtkLUpoOWxHYzo6YmVmb3Jle29wYWNpdHk6LjA0fS5rc0JqRWMuVmZQcGtk
LWtzS3NaZC1tV1BrM2QtT1dYRVhlLUFIZTZLYy1YcG5EQ2UgLlZmUHBrZC1KaDlsR2M6OmJl
Zm9yZSwua3NCakVjOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpOmZvY3VzIC5WZlBwa2Qt
Smg5bEdjOjpiZWZvcmV7dHJhbnNpdGlvbi1kdXJhdGlvbjo3NW1zO29wYWNpdHk6LjEyfS5r
c0JqRWM6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCkgLlZmUHBrZC1KaDlsR2M6OmFmdGVy
e3RyYW5zaXRpb246b3BhY2l0eSAxNTBtcyBsaW5lYXJ9LmtzQmpFYzpub3QoLlZmUHBrZC1r
c0tzWmQtbVdQazNkKTphY3RpdmUgLlZmUHBrZC1KaDlsR2M6OmFmdGVye3RyYW5zaXRpb24t
ZHVyYXRpb246NzVtcztvcGFjaXR5Oi4xMn0ua3NCakVjLlZmUHBrZC1rc0tzWmQtbVdQazNk
ey0tbWRjLXJpcHBsZS1mZy1vcGFjaXR5Oi4xMn0ua3NCakVjOm5vdCg6ZGlzYWJsZWQpe2Jh
Y2tncm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6IzFhNzNlODtjb2xvcjp2YXIoLS1n
bS1jb2xvcnRleHRidXR0b24taW5rLWNvbG9yLCMxYTczZTgpfS5rc0JqRWM6aG92ZXI6bm90
KDpkaXNhYmxlZCksLmtzQmpFYzphY3RpdmU6bm90KDpkaXNhYmxlZCksLmtzQmpFYzpub3Qo
LlZmUHBrZC1rc0tzWmQtbVdQazNkKTpmb2N1czpub3QoOmRpc2FibGVkKSwua3NCakVjLlZm
UHBrZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1BSGU2S2MtWHBuRENlOm5vdCg6ZGlzYWJsZWQp
e2NvbG9yOiMxNzRlYTY7Y29sb3I6dmFyKC0tZ20tY29sb3J0ZXh0YnV0dG9uLWluay1jb2xv
ci0tc3RhdGVmdWwsIzE3NGVhNil9LkZ6YURjZSAua3NCakVje3Bvc2l0aW9uOnJlbGF0aXZl
O2ZvbnQtZmFtaWx5OiJHb29nbGUgU2FucyIsUm9ib3RvLEFyaWFsLHNhbnMtc2VyaWY7Zm9u
dC1zaXplOi44NzVyZW07Zm9udC13ZWlnaHQ6NTAwO2xldHRlci1zcGFjaW5nOi4wMTA3MTQy
ODU3ZW07dGV4dC10cmFuc2Zvcm06bm9uZX0uRnphRGNlIC5rc0JqRWMgLlZmUHBrZC1KaDls
R2N7aGVpZ2h0OjEwMCU7cG9zaXRpb246YWJzb2x1dGU7b3ZlcmZsb3c6aGlkZGVuO3dpZHRo
OjEwMCU7ei1pbmRleDowfS5GemFEY2UgLmtzQmpFYyAuVmZQcGtkLXZRemY4ZCwuRnphRGNl
IC5rc0JqRWMgLlZmUHBrZC1rQkRzb2R7cG9zaXRpb246cmVsYXRpdmV9LkZ6YURjZSAuRnph
RGNlIC5rc0JqRWMgLlV3d3RIey1tb3otYm9yZGVyLXJhZGl1czo0cHg7Ym9yZGVyLXJhZGl1
czo0cHh9LkZ6YURjZSAua3NCakVjLlZmUHBrZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1BSGU2
S2MtWHBuRENlIC5WZlBwa2QtSmg5bEdjOjpiZWZvcmUsLkZ6YURjZSAua3NCakVjOm5vdCgu
VmZQcGtkLWtzS3NaZC1tV1BrM2QpOmZvY3VzIC5WZlBwa2QtSmg5bEdjOjpiZWZvcmV7dHJh
bnNpdGlvbi1kdXJhdGlvbjo3NW1zfS5GemFEY2UgLmtzQmpFYzpub3QoLlZmUHBrZC1rc0tz
WmQtbVdQazNkKSAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7dHJhbnNpdGlvbjpvcGFjaXR5IDE1
MG1zIGxpbmVhcn0uRnphRGNlIC5rc0JqRWM6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6
YWN0aXZlIC5WZlBwa2QtSmg5bEdjOjphZnRlcnt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXN9
LkZ6YURjZSAua3NCakVjOm5vdCg6ZGlzYWJsZWQpe2JhY2tncm91bmQtY29sb3I6dHJhbnNw
YXJlbnQ7Y29sb3I6IzhhYjRmODtjb2xvcjp2YXIoLS1nbS1jb2xvcnRleHRidXR0b24taW5r
LWNvbG9yLCM4YWI0ZjgpfS5GemFEY2UgLmtzQmpFYzpob3Zlcjpub3QoOmRpc2FibGVkKSwu
RnphRGNlIC5rc0JqRWM6YWN0aXZlOm5vdCg6ZGlzYWJsZWQpLC5GemFEY2UgLmtzQmpFYzpu
b3QoLlZmUHBrZC1rc0tzWmQtbVdQazNkKTpmb2N1czpub3QoOmRpc2FibGVkKSwuRnphRGNl
IC5rc0JqRWMuVmZQcGtkLWtzS3NaZC1tV1BrM2QtT1dYRVhlLUFIZTZLYy1YcG5EQ2U6bm90
KDpkaXNhYmxlZCl7Y29sb3I6I2FlY2JmYTtjb2xvcjp2YXIoLS1nbS1jb2xvcnRleHRidXR0
b24taW5rLWNvbG9yLS1zdGF0ZWZ1bCwjYWVjYmZhKX0uRnphRGNlIC5rc0JqRWMgLlZmUHBr
ZC1KaDlsR2M6OmJlZm9yZSwuRnphRGNlIC5rc0JqRWMgLlZmUHBrZC1KaDlsR2M6OmFmdGVy
e2JhY2tncm91bmQtY29sb3I6I2FlY2JmYTtiYWNrZ3JvdW5kLWNvbG9yOnZhcigtLWdtLWNv
bG9ydGV4dGJ1dHRvbi1zdGF0ZS1jb2xvciwjYWVjYmZhKX0uRnphRGNlIC5rc0JqRWM6aG92
ZXIgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZXtvcGFjaXR5Oi4wNH0uRnphRGNlIC5rc0JqRWMu
VmZQcGtkLWtzS3NaZC1tV1BrM2QtT1dYRVhlLUFIZTZLYy1YcG5EQ2UgLlZmUHBrZC1KaDls
R2M6OmJlZm9yZSwuRnphRGNlIC5rc0JqRWM6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6
Zm9jdXMgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZXt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7
b3BhY2l0eTouMTJ9LkZ6YURjZSAua3NCakVjOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2Qp
IC5WZlBwa2QtSmg5bEdjOjphZnRlcnt0cmFuc2l0aW9uOm9wYWNpdHkgMTUwbXMgbGluZWFy
fS5GemFEY2UgLmtzQmpFYzpub3QoLlZmUHBrZC1rc0tzWmQtbVdQazNkKTphY3RpdmUgLlZm
UHBrZC1KaDlsR2M6OmFmdGVye3RyYW5zaXRpb24tZHVyYXRpb246NzVtcztvcGFjaXR5Oi4x
fS5GemFEY2UgLmtzQmpFYy5WZlBwa2Qta3NLc1pkLW1XUGszZHstLW1kYy1yaXBwbGUtZmct
b3BhY2l0eTouMX0uTGpEeGNke2ZvbnQtZmFtaWx5OiJHb29nbGUgU2FucyIsUm9ib3RvLEFy
aWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOi44NzVyZW07Zm9udC13ZWlnaHQ6NTAwO2xldHRl
ci1zcGFjaW5nOi4wMTA3MTQyODU3ZW07dGV4dC10cmFuc2Zvcm06bm9uZX0uTGpEeGNkIC5W
ZlBwa2QtSmg5bEdje2hlaWdodDoxMDAlO3Bvc2l0aW9uOmFic29sdXRlO292ZXJmbG93Omhp
ZGRlbjt3aWR0aDoxMDAlO3otaW5kZXg6MH0uTGpEeGNkIC5WZlBwa2QtdlF6ZjhkLC5MakR4
Y2QgLlZmUHBrZC1rQkRzb2R7cG9zaXRpb246cmVsYXRpdmV9LkZ6YURjZSAuTGpEeGNkIC5V
d3d0SHstbW96LWJvcmRlci1yYWRpdXM6NHB4O2JvcmRlci1yYWRpdXM6NHB4fS5MakR4Y2Qg
LlZmUHBrZC1KaDlsR2M6OmJlZm9yZSwuTGpEeGNkIC5WZlBwa2QtSmg5bEdjOjphZnRlcnti
YWNrZ3JvdW5kLWNvbG9yOiM1ZjYzNjg7YmFja2dyb3VuZC1jb2xvcjp2YXIoLS1nbS1uZXV0
cmFsdGV4dGJ1dHRvbi1zdGF0ZS1jb2xvciwjNWY2MzY4KX0uTGpEeGNkOmhvdmVyIC5WZlBw
a2QtSmg5bEdjOjpiZWZvcmV7b3BhY2l0eTouMDR9LkxqRHhjZC5WZlBwa2Qta3NLc1pkLW1X
UGszZC1PV1hFWGUtQUhlNktjLVhwbkRDZSAuVmZQcGtkLUpoOWxHYzo6YmVmb3JlLC5MakR4
Y2Q6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6Zm9jdXMgLlZmUHBrZC1KaDlsR2M6OmJl
Zm9yZXt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7b3BhY2l0eTouMTJ9LkxqRHhjZDpub3Qo
LlZmUHBrZC1rc0tzWmQtbVdQazNkKSAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7dHJhbnNpdGlv
bjpvcGFjaXR5IDE1MG1zIGxpbmVhcn0uTGpEeGNkOm5vdCguVmZQcGtkLWtzS3NaZC1tV1Br
M2QpOmFjdGl2ZSAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7dHJhbnNpdGlvbi1kdXJhdGlvbjo3
NW1zO29wYWNpdHk6LjEyfS5MakR4Y2QuVmZQcGtkLWtzS3NaZC1tV1BrM2R7LS1tZGMtcmlw
cGxlLWZnLW9wYWNpdHk6LjEyfS5MakR4Y2Q6bm90KDpkaXNhYmxlZCl7YmFja2dyb3VuZC1j
b2xvcjp0cmFuc3BhcmVudDtjb2xvcjojNWY2MzY4O2NvbG9yOnZhcigtLWdtLW5ldXRyYWx0
ZXh0YnV0dG9uLWluay1jb2xvciwjNWY2MzY4KX0uTGpEeGNkOmhvdmVyOm5vdCg6ZGlzYWJs
ZWQpLC5MakR4Y2Q6YWN0aXZlOm5vdCg6ZGlzYWJsZWQpLC5MakR4Y2Q6bm90KC5WZlBwa2Qt
a3NLc1pkLW1XUGszZCk6Zm9jdXM6bm90KDpkaXNhYmxlZCksLkxqRHhjZC5WZlBwa2Qta3NL
c1pkLW1XUGszZC1PV1hFWGUtQUhlNktjLVhwbkRDZTpub3QoOmRpc2FibGVkKXtjb2xvcjoj
MjAyMTI0O2NvbG9yOnZhcigtLWdtLW5ldXRyYWx0ZXh0YnV0dG9uLWluay1jb2xvci0tc3Rh
dGVmdWwsIzIwMjEyNCl9LkZ6YURjZSAuTGpEeGNke3Bvc2l0aW9uOnJlbGF0aXZlO2ZvbnQt
ZmFtaWx5OiJHb29nbGUgU2FucyIsUm9ib3RvLEFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXpl
Oi44NzVyZW07Zm9udC13ZWlnaHQ6NTAwO2xldHRlci1zcGFjaW5nOi4wMTA3MTQyODU3ZW07
dGV4dC10cmFuc2Zvcm06bm9uZX0uRnphRGNlIC5MakR4Y2QgLlZmUHBrZC1KaDlsR2N7aGVp
Z2h0OjEwMCU7cG9zaXRpb246YWJzb2x1dGU7b3ZlcmZsb3c6aGlkZGVuO3dpZHRoOjEwMCU7
ei1pbmRleDowfS5GemFEY2UgLkxqRHhjZCAuVmZQcGtkLXZRemY4ZCwuRnphRGNlIC5MakR4
Y2QgLlZmUHBrZC1rQkRzb2R7cG9zaXRpb246cmVsYXRpdmV9LkZ6YURjZSAuRnphRGNlIC5M
akR4Y2QgLlV3d3RIey1tb3otYm9yZGVyLXJhZGl1czo0cHg7Ym9yZGVyLXJhZGl1czo0cHh9
LkZ6YURjZSAuTGpEeGNkLlZmUHBrZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1BSGU2S2MtWHBu
RENlIC5WZlBwa2QtSmg5bEdjOjpiZWZvcmUsLkZ6YURjZSAuTGpEeGNkOm5vdCguVmZQcGtk
LWtzS3NaZC1tV1BrM2QpOmZvY3VzIC5WZlBwa2QtSmg5bEdjOjpiZWZvcmV7dHJhbnNpdGlv
bi1kdXJhdGlvbjo3NW1zfS5GemFEY2UgLkxqRHhjZDpub3QoLlZmUHBrZC1rc0tzWmQtbVdQ
azNkKSAuVmZQcGtkLUpoOWxHYzo6YWZ0ZXJ7dHJhbnNpdGlvbjpvcGFjaXR5IDE1MG1zIGxp
bmVhcn0uRnphRGNlIC5MakR4Y2Q6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6YWN0aXZl
IC5WZlBwa2QtSmg5bEdjOjphZnRlcnt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXN9LkZ6YURj
ZSAuTGpEeGNkOm5vdCg6ZGlzYWJsZWQpe2JhY2tncm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7
Y29sb3I6I2U4ZWFlZDtjb2xvcjp2YXIoLS1nbS1uZXV0cmFsdGV4dGJ1dHRvbi1pbmstY29s
b3IsI2U4ZWFlZCl9LkZ6YURjZSAuTGpEeGNkOmhvdmVyOm5vdCg6ZGlzYWJsZWQpLC5GemFE
Y2UgLkxqRHhjZDphY3RpdmU6bm90KDpkaXNhYmxlZCksLkZ6YURjZSAuTGpEeGNkOm5vdCgu
VmZQcGtkLWtzS3NaZC1tV1BrM2QpOmZvY3VzOm5vdCg6ZGlzYWJsZWQpLC5GemFEY2UgLkxq
RHhjZC5WZlBwa2Qta3NLc1pkLW1XUGszZC1PV1hFWGUtQUhlNktjLVhwbkRDZTpub3QoOmRp
c2FibGVkKXtjb2xvcjojZjhmOWZhO2NvbG9yOnZhcigtLWdtLW5ldXRyYWx0ZXh0YnV0dG9u
LWluay1jb2xvci0tc3RhdGVmdWwsI2Y4ZjlmYSl9LkZ6YURjZSAuTGpEeGNkIC5WZlBwa2Qt
Smg5bEdjOjpiZWZvcmUsLkZ6YURjZSAuTGpEeGNkIC5WZlBwa2QtSmg5bEdjOjphZnRlcnti
YWNrZ3JvdW5kLWNvbG9yOiNlOGVhZWQ7YmFja2dyb3VuZC1jb2xvcjp2YXIoLS1nbS1uZXV0
cmFsdGV4dGJ1dHRvbi1zdGF0ZS1jb2xvciwjZThlYWVkKX0uRnphRGNlIC5MakR4Y2Q6aG92
ZXIgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZXtvcGFjaXR5Oi4wNH0uRnphRGNlIC5MakR4Y2Qu
VmZQcGtkLWtzS3NaZC1tV1BrM2QtT1dYRVhlLUFIZTZLYy1YcG5EQ2UgLlZmUHBrZC1KaDls
R2M6OmJlZm9yZSwuRnphRGNlIC5MakR4Y2Q6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6
Zm9jdXMgLlZmUHBrZC1KaDlsR2M6OmJlZm9yZXt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7
b3BhY2l0eTouMTJ9LkZ6YURjZSAuTGpEeGNkOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2Qp
IC5WZlBwa2QtSmg5bEdjOjphZnRlcnt0cmFuc2l0aW9uOm9wYWNpdHkgMTUwbXMgbGluZWFy
fS5GemFEY2UgLkxqRHhjZDpub3QoLlZmUHBrZC1rc0tzWmQtbVdQazNkKTphY3RpdmUgLlZm
UHBrZC1KaDlsR2M6OmFmdGVye3RyYW5zaXRpb24tZHVyYXRpb246NzVtcztvcGFjaXR5Oi4x
fS5GemFEY2UgLkxqRHhjZC5WZlBwa2Qta3NLc1pkLW1XUGszZHstLW1kYy1yaXBwbGUtZmct
b3BhY2l0eTouMX0uRHVNSVFjLC5GemFEY2UgLkR1TUlRY3twYWRkaW5nOjAgMjRweCAwIDI0
cHh9LlA2MlFKY3twYWRkaW5nOjAgMjNweCAwIDIzcHg7Ym9yZGVyLXdpZHRoOjFweH0uUDYy
UUpjIC5WZlBwa2QtSmg5bEdje3RvcDotMXB4O2xlZnQ6LTFweDtib3JkZXI6MXB4IHNvbGlk
IHRyYW5zcGFyZW50fS55SHkxcmN7ei1pbmRleDowfS55SHkxcmM6OmJlZm9yZXt6LWluZGV4
Oi0xfS55SHkxcmM6OmFmdGVye3otaW5kZXg6LTF9LkZ6YURjZSAueUh5MXJjOjpiZWZvcmUs
LkZ6YURjZSAueUh5MXJjOjphZnRlcntiYWNrZ3JvdW5kLWNvbG9yOiNlOGVhZWR9LkZ6YURj
ZSAueUh5MXJjOmhvdmVyOjpiZWZvcmV7b3BhY2l0eTouMDR9LkZ6YURjZSAueUh5MXJjLlZm
UHBrZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1BSGU2S2MtWHBuRENlOjpiZWZvcmUsLkZ6YURj
ZSAueUh5MXJjOm5vdCguVmZQcGtkLWtzS3NaZC1tV1BrM2QpOmZvY3VzOjpiZWZvcmV7dHJh
bnNpdGlvbi1kdXJhdGlvbjo3NW1zO29wYWNpdHk6LjEyfS5GemFEY2UgLnlIeTFyYzpub3Qo
LlZmUHBrZC1rc0tzWmQtbVdQazNkKTo6YWZ0ZXJ7dHJhbnNpdGlvbjpvcGFjaXR5IDE1MG1z
IGxpbmVhcn0uRnphRGNlIC55SHkxcmM6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6YWN0
aXZlOjphZnRlcnt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7b3BhY2l0eTouMX0uRnphRGNl
IC55SHkxcmMuVmZQcGtkLWtzS3NaZC1tV1BrM2R7LS1tZGMtcmlwcGxlLWZnLW9wYWNpdHk6
LjF9LkZ6YURjZSAuZnpSQlZjOjpiZWZvcmUsLkZ6YURjZSAuZnpSQlZjOjphZnRlcntiYWNr
Z3JvdW5kLWNvbG9yOiNlOGVhZWR9LkZ6YURjZSAuZnpSQlZjOmhvdmVyOjpiZWZvcmV7b3Bh
Y2l0eTouMDR9LkZ6YURjZSAuZnpSQlZjLlZmUHBrZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1B
SGU2S2MtWHBuRENlOjpiZWZvcmUsLkZ6YURjZSAuZnpSQlZjOm5vdCguVmZQcGtkLWtzS3Na
ZC1tV1BrM2QpOmZvY3VzOjpiZWZvcmV7dHJhbnNpdGlvbi1kdXJhdGlvbjo3NW1zO29wYWNp
dHk6LjEyfS5GemFEY2UgLmZ6UkJWYzpub3QoLlZmUHBrZC1rc0tzWmQtbVdQazNkKTo6YWZ0
ZXJ7dHJhbnNpdGlvbjpvcGFjaXR5IDE1MG1zIGxpbmVhcn0uRnphRGNlIC5melJCVmM6bm90
KC5WZlBwa2Qta3NLc1pkLW1XUGszZCk6YWN0aXZlOjphZnRlcnt0cmFuc2l0aW9uLWR1cmF0
aW9uOjc1bXM7b3BhY2l0eTouMX0uRnphRGNlIC5melJCVmMuVmZQcGtkLWtzS3NaZC1tV1Br
M2R7LS1tZGMtcmlwcGxlLWZnLW9wYWNpdHk6LjF9LldwSGVMY3toZWlnaHQ6MTAwJTtsZWZ0
OjA7cG9zaXRpb246YWJzb2x1dGU7dG9wOjA7d2lkdGg6MTAwJTtvdXRsaW5lOm5vbmV9W2Rp
cj1ydGxdIC5IRG5ucmYgLlZmUHBrZC1rQkRzb2QsLkhEbm5yZiAuVmZQcGtkLWtCRHNvZFtk
aXI9cnRsXSxbZGlyPXJ0bF0gLlFEd0RELC5RRHdERFtkaXI9cnRsXXt0cmFuc2Zvcm06c2Nh
bGVYKC0xKX0ua0Z3UGVle2hlaWdodDoxMDAlfS55ZE1NRWJ7d2lkdGg6MTAwJX0uU1NQR0tm
e2Rpc3BsYXk6YmxvY2s7b3ZlcmZsb3cteTpoaWRkZW47ei1pbmRleDoxfS5lZWpzRGN7b3Zl
cmZsb3cteTphdXRvfS5yRnJOTWV7LW1vei11c2VyLXNlbGVjdDpub25lO2Rpc3BsYXk6aW5s
aW5lLWJsb2NrO291dGxpbmU6bm9uZTtwYWRkaW5nLWJvdHRvbTo4cHg7d2lkdGg6MjAwcHh9
LmFDc0pvZHtoZWlnaHQ6NDBweDtwb3NpdGlvbjpyZWxhdGl2ZTt2ZXJ0aWNhbC1hbGlnbjp0
b3B9LmFYQnRJe2Rpc3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5
Oi1tcy1mbGV4Ym94O2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6ZmxleDtwb3NpdGlv
bjpyZWxhdGl2ZTt0b3A6MTRweH0uWGI5aFB7ZGlzcGxheTotd2Via2l0LWJveDtkaXNwbGF5
Oi1tb3otYm94O2Rpc3BsYXk6LW1zLWZsZXhib3g7ZGlzcGxheTotd2Via2l0LWZsZXg7ZGlz
cGxheTpmbGV4O2JveC1mbGV4OjE7ZmxleC1ncm93OjE7ZmxleC1zaHJpbms6MTttaW4td2lk
dGg6MCU7cG9zaXRpb246cmVsYXRpdmV9LkEzN1VaZXstbW96LWJveC1zaXppbmc6Ym9yZGVy
LWJveDtib3gtc2l6aW5nOmJvcmRlci1ib3g7aGVpZ2h0OjI0cHg7bGluZS1oZWlnaHQ6MjRw
eDtwb3NpdGlvbjpyZWxhdGl2ZX0ucWdjQjNjOm5vdCg6ZW1wdHkpe3BhZGRpbmctcmlnaHQ6
MTJweH0uc3h5WWpkOm5vdCg6ZW1wdHkpe3BhZGRpbmctbGVmdDoxMnB4fS53aHNPbmR7Ym94
LWZsZXg6MTtmbGV4LWdyb3c6MTtmbGV4LXNocmluazoxO2JhY2tncm91bmQtY29sb3I6dHJh
bnNwYXJlbnQ7Ym9yZGVyOm5vbmU7ZGlzcGxheTpibG9jaztmb250OjQwMCAxNnB4IFJvYm90
byxSb2JvdG9EcmFmdCxIZWx2ZXRpY2EsQXJpYWwsc2Fucy1zZXJpZjtoZWlnaHQ6MjRweDts
aW5lLWhlaWdodDoyNHB4O21hcmdpbjowO21pbi13aWR0aDowJTtvdXRsaW5lOm5vbmU7cGFk
ZGluZzowO3otaW5kZXg6MH0uckZyTk1lLmRtN1lUYyAud2hzT25ke2NvbG9yOiNmZmZ9Lndo
c09uZDppbnZhbGlkLC53aHNPbmQ6LW1vei1zdWJtaXQtaW52YWxpZCwud2hzT25kOi1tb3ot
dWktaW52YWxpZHstbW96LWJveC1zaGFkb3c6bm9uZTtib3gtc2hhZG93Om5vbmV9LkkwVko0
ZD4ud2hzT25kOjotbXMtY2xlYXIsLkkwVko0ZD4ud2hzT25kOjotbXMtcmV2ZWFse2Rpc3Bs
YXk6bm9uZX0uaTlscnB7YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDAsMCwwLDAuMTIpO2JvdHRv
bTotMnB4O2hlaWdodDoxcHg7bGVmdDowO21hcmdpbjowO3BhZGRpbmc6MDtwb3NpdGlvbjph
YnNvbHV0ZTt3aWR0aDoxMDAlfS5pOWxycDpiZWZvcmV7Y29udGVudDoiIjtwb3NpdGlvbjph
YnNvbHV0ZTt0b3A6MDtib3R0b206LTJweDtsZWZ0OjA7cmlnaHQ6MDtib3JkZXItYm90dG9t
OjFweCBzb2xpZCByZ2JhKDAsMCwwLDApO3BvaW50ZXItZXZlbnRzOm5vbmV9LnJGck5NZS5k
bTdZVGMgLmk5bHJwe2JhY2tncm91bmQtY29sb3I6cmdiYSgyNTUsMjU1LDI1NSwwLjcwKX0u
T2FiRE1ley1tb3otdHJhbnNmb3JtOnNjYWxlWCgwKTt0cmFuc2Zvcm06c2NhbGVYKDApO2Jh
Y2tncm91bmQtY29sb3I6IzQyODVmNDtib3R0b206LTJweDtoZWlnaHQ6MnB4O2xlZnQ6MDtt
YXJnaW46MDtwYWRkaW5nOjA7cG9zaXRpb246YWJzb2x1dGU7d2lkdGg6MTAwJX0uckZyTk1l
LmRtN1lUYyAuT2FiRE1le2JhY2tncm91bmQtY29sb3I6I2ExYzJmYX0uckZyTk1lLmswdFdq
IC5pOWxycCwuckZyTk1lLmswdFdqIC5PYWJETWV7YmFja2dyb3VuZC1jb2xvcjojZDUwMDAw
O2hlaWdodDoycHh9LnJGck5NZS5rMHRXai5kbTdZVGMgLmk5bHJwLC5yRnJOTWUuazB0V2ou
ZG03WVRjIC5PYWJETWV7YmFja2dyb3VuZC1jb2xvcjojZTA2MDU1fS53aHNPbmRbZGlzYWJs
ZWRde2NvbG9yOnJnYmEoMCwwLDAsMC4zOCl9LnJGck5NZS5kbTdZVGMgLndoc09uZFtkaXNh
YmxlZF17Y29sb3I6cmdiYSgyNTUsMjU1LDI1NSwwLjUwKX0ud2hzT25kW2Rpc2FibGVkXX4u
aTlscnB7YmFja2dyb3VuZDpub25lO2JvcmRlci1ib3R0b206MXB4IGRvdHRlZCByZ2JhKDAs
MCwwLDAuMzgpfS5PYWJETWUuWTJaeXBmey1tb3otYW5pbWF0aW9uOnF1YW50dW1XaXpQYXBl
cklucHV0UmVtb3ZlVW5kZXJsaW5lIC4zcyBjdWJpYy1iZXppZXIoMC40LDAsMC4yLDEpO2Fu
aW1hdGlvbjpxdWFudHVtV2l6UGFwZXJJbnB1dFJlbW92ZVVuZGVybGluZSAuM3MgY3ViaWMt
YmV6aWVyKDAuNCwwLDAuMiwxKX0uckZyTk1lLnUzYlc0ZSAuT2FiRE1ley1tb3otYW5pbWF0
aW9uOnF1YW50dW1XaXpQYXBlcklucHV0QWRkVW5kZXJsaW5lIC4zcyBjdWJpYy1iZXppZXIo
MC40LDAsMC4yLDEpO2FuaW1hdGlvbjpxdWFudHVtV2l6UGFwZXJJbnB1dEFkZFVuZGVybGlu
ZSAuM3MgY3ViaWMtYmV6aWVyKDAuNCwwLDAuMiwxKTstbW96LXRyYW5zZm9ybTpzY2FsZVgo
MSk7dHJhbnNmb3JtOnNjYWxlWCgxKX0uckZyTk1lLnNkSnJKYz4uYUNzSm9ke3BhZGRpbmct
dG9wOjI0cHh9LkF4T3lGY3stbW96LXRyYW5zZm9ybS1vcmlnaW46Ym90dG9tIGxlZnQ7dHJh
bnNmb3JtLW9yaWdpbjpib3R0b20gbGVmdDstbW96LXRyYW5zaXRpb246YWxsIC4zcyBjdWJp
Yy1iZXppZXIoMC40LDAsMC4yLDEpO3RyYW5zaXRpb246YWxsIC4zcyBjdWJpYy1iZXppZXIo
MC40LDAsMC4yLDEpOy1tb3otdHJhbnNpdGlvbi1wcm9wZXJ0eTpjb2xvcixib3R0b20sdHJh
bnNmb3JtO3RyYW5zaXRpb24tcHJvcGVydHk6Y29sb3IsYm90dG9tLHRyYW5zZm9ybTtjb2xv
cjpyZ2JhKDAsMCwwLDAuMzgpO2ZvbnQ6NDAwIDE2cHggUm9ib3RvLFJvYm90b0RyYWZ0LEhl
bHZldGljYSxBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxNnB4O3BvaW50ZXItZXZlbnRz
Om5vbmU7cG9zaXRpb246YWJzb2x1dGU7Ym90dG9tOjNweDtsZWZ0OjA7d2lkdGg6MTAwJX0u
d2hzT25kOm5vdChbZGlzYWJsZWRdKTpmb2N1c34uQXhPeUZjLC53aHNPbmRbYmFkaW5wdXQ9
InRydWUiXX4uQXhPeUZjLC5yRnJOTWUuQ0RFTFhiIC5BeE95RmMsLnJGck5NZS5kTGdqOGIg
LkF4T3lGY3stbW96LXRyYW5zZm9ybTpzY2FsZSguNzUpIHRyYW5zbGF0ZVkoLTM5cHgpO3Ry
YW5zZm9ybTpzY2FsZSguNzUpIHRyYW5zbGF0ZVkoLTM5cHgpfS53aHNPbmQ6bm90KFtkaXNh
YmxlZF0pOmZvY3Vzfi5BeE95RmN7Y29sb3I6IzQyODVmNH0uckZyTk1lLmRtN1lUYyAud2hz
T25kOm5vdChbZGlzYWJsZWRdKTpmb2N1c34uQXhPeUZje2NvbG9yOiNhMWMyZmF9LnJGck5N
ZS5rMHRXaiAud2hzT25kOm5vdChbZGlzYWJsZWRdKTpmb2N1c34uQXhPeUZje2NvbG9yOiNk
NTAwMDB9Lm5kSmk1ZHtjb2xvcjpyZ2JhKDAsMCwwLDAuMzgpO2ZvbnQ6NDAwIDE2cHggUm9i
b3RvLFJvYm90b0RyYWZ0LEhlbHZldGljYSxBcmlhbCxzYW5zLXNlcmlmO21heC13aWR0aDox
MDAlO292ZXJmbG93OmhpZGRlbjtwb2ludGVyLWV2ZW50czpub25lO3Bvc2l0aW9uOmFic29s
dXRlO3RleHQtb3ZlcmZsb3c6ZWxsaXBzaXM7dG9wOjJweDtsZWZ0OjA7d2hpdGUtc3BhY2U6
bm93cmFwfS5yRnJOTWUuQ0RFTFhiIC5uZEppNWR7ZGlzcGxheTpub25lfS5LMFk4U2V7Zm9u
dDo0MDAgMTJweCBSb2JvdG8sUm9ib3RvRHJhZnQsSGVsdmV0aWNhLEFyaWFsLHNhbnMtc2Vy
aWY7aGVpZ2h0OjE2cHg7bWFyZ2luLWxlZnQ6YXV0bztwYWRkaW5nLWxlZnQ6MTZweDtwYWRk
aW5nLXRvcDo4cHg7cG9pbnRlci1ldmVudHM6bm9uZTtvcGFjaXR5Oi4zO3doaXRlLXNwYWNl
Om5vd3JhcH0uckZyTk1lLmRtN1lUYyAuQXhPeUZjLC5yRnJOTWUuZG03WVRjIC5LMFk4U2Us
LnJGck5NZS5kbTdZVGMgLm5kSmk1ZHtjb2xvcjpyZ2JhKDI1NSwyNTUsMjU1LDAuNzApfS5y
RnJOTWUuVHljOUp7cGFkZGluZy1ib3R0b206NHB4fS5kRU9PYWIsLm92bmZ3ZTpub3QoOmVt
cHR5KXtmbGV4OjEgMSBhdXRvO2ZvbnQ6NDAwIDEycHggUm9ib3RvLFJvYm90b0RyYWZ0LEhl
bHZldGljYSxBcmlhbCxzYW5zLXNlcmlmO21pbi1oZWlnaHQ6MTZweDtwYWRkaW5nLXRvcDo4
cHh9LkxYUlBoe2Rpc3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5
Oi1tcy1mbGV4Ym94O2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6ZmxleH0ub3ZuZndl
e3BvaW50ZXItZXZlbnRzOm5vbmV9LmRFT09hYntjb2xvcjojZDUwMDAwfS5yRnJOTWUuZG03
WVRjIC5kRU9PYWIsLnJGck5NZS5kbTdZVGMuazB0V2ogLndoc09uZDpub3QoW2Rpc2FibGVk
XSk6Zm9jdXN+LkF4T3lGY3tjb2xvcjojZTA2MDU1fS5vdm5md2V7b3BhY2l0eTouM30uckZy
Tk1lLmRtN1lUYyAub3ZuZndle2NvbG9yOnJnYmEoMjU1LDI1NSwyNTUsMC43MCk7b3BhY2l0
eToxfS5yRnJOTWUuazB0V2ogLm92bmZ3ZSwuckZyTk1lOm5vdCguazB0V2opIC5vdm5md2U6
bm90KDplbXB0eSkrLmRFT09hYntkaXNwbGF5Om5vbmV9QGtleWZyYW1lcyBxdWFudHVtV2l6
UGFwZXJJbnB1dFJlbW92ZVVuZGVybGluZXswJXstbW96LXRyYW5zZm9ybTpzY2FsZVgoMSk7
dHJhbnNmb3JtOnNjYWxlWCgxKTtvcGFjaXR5OjF9dG97LW1vei10cmFuc2Zvcm06c2NhbGVY
KDEpO3RyYW5zZm9ybTpzY2FsZVgoMSk7b3BhY2l0eTowfX1Aa2V5ZnJhbWVzIHF1YW50dW1X
aXpQYXBlcklucHV0QWRkVW5kZXJsaW5lezAley1tb3otdHJhbnNmb3JtOnNjYWxlWCgwKTt0
cmFuc2Zvcm06c2NhbGVYKDApfXRvey1tb3otdHJhbnNmb3JtOnNjYWxlWCgxKTt0cmFuc2Zv
cm06c2NhbGVYKDEpfX0uTUNjT0Fje2JvdHRvbTowO2xlZnQ6MDtwb3NpdGlvbjphYnNvbHV0
ZTtyaWdodDowO3RvcDowO292ZXJmbG93OmhpZGRlbjt6LWluZGV4OjF9Lk1DY09BYz4ucEd4
cEhje2ZsZXgtc2hyaW5rOjA7Ym94LWZsZXg6MDtmbGV4LWdyb3c6MH0uSXFCZk0+LkhMbEFI
YnthbGlnbi1pdGVtczpjZW50ZXI7ZGlzcGxheTotd2Via2l0LWJveDtkaXNwbGF5Oi1tb3ot
Ym94O2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6LW1zLWZsZXhib3g7ZGlzcGxheTpm
bGV4O2hlaWdodDo2MHB4O3Bvc2l0aW9uOmFic29sdXRlO3JpZ2h0OjE2cHg7dG9wOjA7ei1p
bmRleDo5OTk5fS5WVW9LWntkaXNwbGF5Om5vbmU7cG9zaXRpb246YWJzb2x1dGU7dG9wOjA7
bGVmdDowO3JpZ2h0OjA7aGVpZ2h0OjNweDt6LWluZGV4OjEwMDF9LlRSSExBY3twb3NpdGlv
bjphYnNvbHV0ZTt0b3A6MDtsZWZ0OjA7d2lkdGg6MjUlO2hlaWdodDoxMDAlO2JhY2tncm91
bmQ6IzY4ZTt0cmFuc2Zvcm0tb3JpZ2luOjAgMH0ubUlNMjZjIC5WVW9LWntkaXNwbGF5OmJs
b2NrfS5tSU0yNmMgLlRSSExBY3thbmltYXRpb246Ym9xQ2hyb21lYXBpUGFnZVByb2dyZXNz
QW5pbWF0aW9uIDFzIGluZmluaXRlO2FuaW1hdGlvbi10aW1pbmctZnVuY3Rpb246Y3ViaWMt
YmV6aWVyKDAuNCwwLjAsMSwxKTthbmltYXRpb24tZGVsYXk6LjFzfS5naHlQRWMgLlZVb0ta
e3Bvc2l0aW9uOmZpeGVkfUBrZXlmcmFtZXMgYm9xQ2hyb21lYXBpUGFnZVByb2dyZXNzQW5p
bWF0aW9uezAle3RyYW5zZm9ybTpzY2FsZVgoMCl9NTAle3RyYW5zZm9ybTpzY2FsZVgoNSl9
dG97dHJhbnNmb3JtOnNjYWxlWCg1KSB0cmFuc2xhdGVYKDEwMCUpfX1Aa2V5ZnJhbWVzIHF1
YW50dW1XaXpCb3hJbmtTcHJlYWR7MCV7LW1vei10cmFuc2Zvcm06dHJhbnNsYXRlKC01MCUs
LTUwJSkgc2NhbGUoLjIpO3RyYW5zZm9ybTp0cmFuc2xhdGUoLTUwJSwtNTAlKSBzY2FsZSgu
Mil9dG97LW1vei10cmFuc2Zvcm06dHJhbnNsYXRlKC01MCUsLTUwJSkgc2NhbGUoMi4yKTt0
cmFuc2Zvcm06dHJhbnNsYXRlKC01MCUsLTUwJSkgc2NhbGUoMi4yKX19QGtleWZyYW1lcyBx
dWFudHVtV2l6SWNvbkZvY3VzUHVsc2V7MCV7LW1vei10cmFuc2Zvcm06dHJhbnNsYXRlKC01
MCUsLTUwJSkgc2NhbGUoMS41KTt0cmFuc2Zvcm06dHJhbnNsYXRlKC01MCUsLTUwJSkgc2Nh
bGUoMS41KTtvcGFjaXR5OjB9dG97LW1vei10cmFuc2Zvcm06dHJhbnNsYXRlKC01MCUsLTUw
JSkgc2NhbGUoMik7dHJhbnNmb3JtOnRyYW5zbGF0ZSgtNTAlLC01MCUpIHNjYWxlKDIpO29w
YWNpdHk6MX19QGtleWZyYW1lcyBxdWFudHVtV2l6UmFkaWFsSW5rU3ByZWFkezAley1tb3ot
dHJhbnNmb3JtOnNjYWxlKDEuNSk7dHJhbnNmb3JtOnNjYWxlKDEuNSk7b3BhY2l0eTowfXRv
ey1tb3otdHJhbnNmb3JtOnNjYWxlKDIuNSk7dHJhbnNmb3JtOnNjYWxlKDIuNSk7b3BhY2l0
eToxfX1Aa2V5ZnJhbWVzIHF1YW50dW1XaXpSYWRpYWxJbmtGb2N1c1B1bHNlezAley1tb3ot
dHJhbnNmb3JtOnNjYWxlKDIpO3RyYW5zZm9ybTpzY2FsZSgyKTtvcGFjaXR5OjB9dG97LW1v
ei10cmFuc2Zvcm06c2NhbGUoMi41KTt0cmFuc2Zvcm06c2NhbGUoMi41KTtvcGFjaXR5OjF9
fS5PMFdSa2Z7LW1vei11c2VyLXNlbGVjdDpub25lOy1tb3otdHJhbnNpdGlvbjpiYWNrZ3Jv
dW5kIC4ycyAuMXM7dHJhbnNpdGlvbjpiYWNrZ3JvdW5kIC4ycyAuMXM7Ym9yZGVyOjA7LW1v
ei1ib3JkZXItcmFkaXVzOjNweDtib3JkZXItcmFkaXVzOjNweDtjdXJzb3I6cG9pbnRlcjtk
aXNwbGF5OmlubGluZS1ibG9jaztmb250LXNpemU6MTRweDtmb250LXdlaWdodDo1MDA7bWlu
LXdpZHRoOjRlbTtvdXRsaW5lOm5vbmU7b3ZlcmZsb3c6aGlkZGVuO3Bvc2l0aW9uOnJlbGF0
aXZlO3RleHQtYWxpZ246Y2VudGVyO3RleHQtdHJhbnNmb3JtOnVwcGVyY2FzZTt6LWluZGV4
OjB9LkE5anlhZHtmb250LXNpemU6MTNweDtsaW5lLWhlaWdodDoxNnB4fS56WmhuWWV7LW1v
ei10cmFuc2l0aW9uOmJveC1zaGFkb3cgLjI4cyBjdWJpYy1iZXppZXIoMC40LDAuMCwwLjIs
MSk7dHJhbnNpdGlvbjpib3gtc2hhZG93IC4yOHMgY3ViaWMtYmV6aWVyKDAuNCwwLjAsMC4y
LDEpO2JhY2tncm91bmQ6I2RmZGZkZjstbW96LWJveC1zaGFkb3c6MCAycHggMnB4IDAgcmdi
YSgwLDAsMCwwLjE0KSwwIDNweCAxcHggLTJweCByZ2JhKDAsMCwwLDAuMTIpLDAgMXB4IDVw
eCAwIHJnYmEoMCwwLDAsMC4yKTtib3gtc2hhZG93OjAgMnB4IDJweCAwIHJnYmEoMCwwLDAs
MC4xNCksMCAzcHggMXB4IC0ycHggcmdiYSgwLDAsMCwwLjEyKSwwIDFweCA1cHggMCByZ2Jh
KDAsMCwwLDAuMil9LnpaaG5ZZS5xczQxcWV7LW1vei10cmFuc2l0aW9uOmJveC1zaGFkb3cg
LjI4cyBjdWJpYy1iZXppZXIoMC40LDAuMCwwLjIsMSk7dHJhbnNpdGlvbjpib3gtc2hhZG93
IC4yOHMgY3ViaWMtYmV6aWVyKDAuNCwwLjAsMC4yLDEpOy1tb3otdHJhbnNpdGlvbjpiYWNr
Z3JvdW5kIC44czt0cmFuc2l0aW9uOmJhY2tncm91bmQgLjhzOy1tb3otYm94LXNoYWRvdzow
IDhweCAxMHB4IDFweCByZ2JhKDAsMCwwLDAuMTQpLDAgM3B4IDE0cHggMnB4IHJnYmEoMCww
LDAsMC4xMiksMCA1cHggNXB4IC0zcHggcmdiYSgwLDAsMCwwLjIpO2JveC1zaGFkb3c6MCA4
cHggMTBweCAxcHggcmdiYSgwLDAsMCwwLjE0KSwwIDNweCAxNHB4IDJweCByZ2JhKDAsMCww
LDAuMTIpLDAgNXB4IDVweCAtM3B4IHJnYmEoMCwwLDAsMC4yKX0uZTNEdXViLC5lM0R1dWIg
YSwuZTNEdXViIGE6aG92ZXIsLmUzRHV1YiBhOmxpbmssLmUzRHV1YiBhOnZpc2l0ZWR7YmFj
a2dyb3VuZDojNDI4NWY0O2NvbG9yOiNmZmZ9LkhROHlmLC5IUTh5ZiBhe2NvbG9yOiM0Mjg1
ZjR9LlV4dWJVLC5VeHViVSBhe2NvbG9yOiNmZmZ9LlpGcjYwZHtwb3NpdGlvbjphYnNvbHV0
ZTt0b3A6MDtyaWdodDowO2JvdHRvbTowO2xlZnQ6MDtiYWNrZ3JvdW5kLWNvbG9yOnRyYW5z
cGFyZW50fS5PMFdSa2YudTNiVzRlIC5aRnI2MGR7YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDAs
MCwwLDAuMTIpfS5VeHViVS51M2JXNGUgLlpGcjYwZHtiYWNrZ3JvdW5kLWNvbG9yOnJnYmEo
MjU1LDI1NSwyNTUsMC4zMCl9LmUzRHV1Yi51M2JXNGUgLlpGcjYwZHtiYWNrZ3JvdW5kLWNv
bG9yOnJnYmEoMCwwLDAsMC4xMjIpfS5IUTh5Zi51M2JXNGUgLlpGcjYwZHtiYWNrZ3JvdW5k
LWNvbG9yOnJnYmEoNjYsMTMzLDI0NCwwLjE0OSl9LlZ3ZTRWYnstbW96LXRyYW5zZm9ybTp0
cmFuc2xhdGUoLTUwJSwtNTAlKSBzY2FsZSgwKTt0cmFuc2Zvcm06dHJhbnNsYXRlKC01MCUs
LTUwJSkgc2NhbGUoMCk7dHJhbnNpdGlvbjpvcGFjaXR5IC4ycyBlYXNlLHZpc2liaWxpdHkg
MHMgZWFzZSAuMnMsdHJhbnNmb3JtIDBzIGVhc2UgLjJzO3RyYW5zaXRpb246b3BhY2l0eSAu
MnMgZWFzZSx2aXNpYmlsaXR5IDBzIGVhc2UgLjJzLC13ZWJraXQtdHJhbnNmb3JtIDBzIGVh
c2UgLjJzO2JhY2tncm91bmQtc2l6ZTpjb3ZlcjtsZWZ0OjA7b3BhY2l0eTowO3BvaW50ZXIt
ZXZlbnRzOm5vbmU7cG9zaXRpb246YWJzb2x1dGU7dG9wOjA7dmlzaWJpbGl0eTpoaWRkZW59
Lk8wV1JrZi5xczQxcWUgLlZ3ZTRWYnstbW96LXRyYW5zZm9ybTp0cmFuc2xhdGUoLTUwJSwt
NTAlKSBzY2FsZSgyLjIpO3RyYW5zZm9ybTp0cmFuc2xhdGUoLTUwJSwtNTAlKSBzY2FsZSgy
LjIpO29wYWNpdHk6MTt2aXNpYmlsaXR5OnZpc2libGV9Lk8wV1JrZi5xczQxcWUuTTlCZzRk
IC5Wd2U0VmJ7dHJhbnNpdGlvbjotd2Via2l0LXRyYW5zZm9ybSAuM3MgY3ViaWMtYmV6aWVy
KDAuMCwwLjAsMC4yLDEpLG9wYWNpdHkgLjJzIGN1YmljLWJlemllcigwLjAsMC4wLDAuMiwx
KTt0cmFuc2l0aW9uOnRyYW5zZm9ybSAuM3MgY3ViaWMtYmV6aWVyKDAuMCwwLjAsMC4yLDEp
LG9wYWNpdHkgLjJzIGN1YmljLWJlemllcigwLjAsMC4wLDAuMiwxKX0uTzBXUmtmLmo3bkla
YiAuVndlNFZiey1tb3otdHJhbnNmb3JtOnRyYW5zbGF0ZSgtNTAlLC01MCUpIHNjYWxlKDIu
Mik7dHJhbnNmb3JtOnRyYW5zbGF0ZSgtNTAlLC01MCUpIHNjYWxlKDIuMik7dmlzaWJpbGl0
eTp2aXNpYmxlfS5vRzVTcmIgLlZ3ZTRWYiwuelpoblllIC5Wd2U0VmJ7YmFja2dyb3VuZC1p
bWFnZTpyYWRpYWwtZ3JhZGllbnQoY2lyY2xlIGZhcnRoZXN0LXNpZGUscmdiYSgwLDAsMCww
LjEyKSxyZ2JhKDAsMCwwLDAuMTIpIDgwJSxyZ2JhKDAsMCwwLDApIDEwMCUpfS5IUTh5ZiAu
VndlNFZie2JhY2tncm91bmQtaW1hZ2U6cmFkaWFsLWdyYWRpZW50KGNpcmNsZSBmYXJ0aGVz
dC1zaWRlLHJnYmEoNjYsMTMzLDI0NCwwLjI1MSkscmdiYSg2NiwxMzMsMjQ0LDAuMjUxKSA4
MCUscmdiYSg2NiwxMzMsMjQ0LDApIDEwMCUpfS5lM0R1dWIgLlZ3ZTRWYntiYWNrZ3JvdW5k
LWltYWdlOnJhZGlhbC1ncmFkaWVudChjaXJjbGUgZmFydGhlc3Qtc2lkZSwjMzM2N2Q2LCMz
MzY3ZDYgODAlLHJnYmEoNTEsMTAzLDIxNCwwKSAxMDAlKX0uVXh1YlUgLlZ3ZTRWYntiYWNr
Z3JvdW5kLWltYWdlOnJhZGlhbC1ncmFkaWVudChjaXJjbGUgZmFydGhlc3Qtc2lkZSxyZ2Jh
KDI1NSwyNTUsMjU1LDAuMzApLHJnYmEoMjU1LDI1NSwyNTUsMC4zMCkgODAlLHJnYmEoMjU1
LDI1NSwyNTUsMCkgMTAwJSl9Lk8wV1JrZi5SRFBaRXstbW96LWJveC1zaGFkb3c6bm9uZTti
b3gtc2hhZG93Om5vbmU7Y29sb3I6cmdiYSg2OCw2OCw2OCwwLjUwMik7Y3Vyc29yOmRlZmF1
bHQ7ZmlsbDpyZ2JhKDY4LDY4LDY4LDAuNTAyKX0uelpoblllLlJEUFpFe2JhY2tncm91bmQ6
cmdiYSgxNTMsMTUzLDE1MywwLjEwMil9LlV4dWJVLlJEUFpFe2NvbG9yOnJnYmEoMjU1LDI1
NSwyNTUsMC41MDIpO2ZpbGw6cmdiYSgyNTUsMjU1LDI1NSwwLjUwMil9LlV4dWJVLnpaaG5Z
ZS5SRFBaRXtiYWNrZ3JvdW5kOnJnYmEoMjA0LDIwNCwyMDQsMC4xMDIpfS5Dd2FLOXtwb3Np
dGlvbjpyZWxhdGl2ZX0uUnZlSnZke2Rpc3BsYXk6aW5saW5lLWJsb2NrO21hcmdpbjouNWVt
fS5KUGRSNmJ7LW1vei10cmFuc2Zvcm06dHJhbnNsYXRlWigwKTt0cmFuc2Zvcm06dHJhbnNs
YXRlWigwKTstbW96LXRyYW5zaXRpb246bWF4LXdpZHRoIC4ycyBjdWJpYy1iZXppZXIoMC4w
LDAuMCwwLjIsMSksbWF4LWhlaWdodCAuMnMgY3ViaWMtYmV6aWVyKDAuMCwwLjAsMC4yLDEp
LG9wYWNpdHkgLjFzIGxpbmVhcjt0cmFuc2l0aW9uOm1heC13aWR0aCAuMnMgY3ViaWMtYmV6
aWVyKDAuMCwwLjAsMC4yLDEpLG1heC1oZWlnaHQgLjJzIGN1YmljLWJlemllcigwLjAsMC4w
LDAuMiwxKSxvcGFjaXR5IC4xcyBsaW5lYXI7YmFja2dyb3VuZDojZmZmZmZmO2JvcmRlcjow
Oy1tb3otYm9yZGVyLXJhZGl1czoycHg7Ym9yZGVyLXJhZGl1czoycHg7LW1vei1ib3gtc2hh
ZG93OjAgOHB4IDEwcHggMXB4IHJnYmEoMCwwLDAsMC4xNCksMCAzcHggMTRweCAycHggcmdi
YSgwLDAsMCwwLjEyKSwwIDVweCA1cHggLTNweCByZ2JhKDAsMCwwLDAuMik7Ym94LXNoYWRv
dzowIDhweCAxMHB4IDFweCByZ2JhKDAsMCwwLDAuMTQpLDAgM3B4IDE0cHggMnB4IHJnYmEo
MCwwLDAsMC4xMiksMCA1cHggNXB4IC0zcHggcmdiYSgwLDAsMCwwLjIpO2JveC1zaXppbmc6
Ym9yZGVyLWJveDttYXgtaGVpZ2h0OjEwMCU7bWF4LXdpZHRoOjEwMCU7b3BhY2l0eToxO291
dGxpbmU6MXB4IHNvbGlkIHRyYW5zcGFyZW50O3otaW5kZXg6MjAwMH0uWHZoWTFke292ZXJm
bG93LXg6aGlkZGVuO292ZXJmbG93LXk6YXV0b30uSkFQcXBle2Zsb2F0OmxlZnQ7cGFkZGlu
ZzoxNnB4IDB9LkpQZFI2Yi5xalRFQnstbW96LXRyYW5zaXRpb246bGVmdCAuMnMgY3ViaWMt
YmV6aWVyKDAuMCwwLjAsMC4yLDEpLG1heC13aWR0aCAuMnMgY3ViaWMtYmV6aWVyKDAuMCww
LjAsMC4yLDEpLG1heC1oZWlnaHQgLjJzIGN1YmljLWJlemllcigwLjAsMC4wLDAuMiwxKSxv
cGFjaXR5IC4wNXMgbGluZWFyLHRvcCAuMnMgY3ViaWMtYmV6aWVyKDAuMCwwLjAsMC4yLDEp
O3RyYW5zaXRpb246bGVmdCAuMnMgY3ViaWMtYmV6aWVyKDAuMCwwLjAsMC4yLDEpLG1heC13
aWR0aCAuMnMgY3ViaWMtYmV6aWVyKDAuMCwwLjAsMC4yLDEpLG1heC1oZWlnaHQgLjJzIGN1
YmljLWJlemllcigwLjAsMC4wLDAuMiwxKSxvcGFjaXR5IC4wNXMgbGluZWFyLHRvcCAuMnMg
Y3ViaWMtYmV6aWVyKDAuMCwwLjAsMC4yLDEpfS5KUGRSNmIualZ3bUxie21heC1oZWlnaHQ6
NTZweDtvcGFjaXR5OjB9LkpQZFI2Yi5DQXdJQ2V7b3ZlcmZsb3c6aGlkZGVufS5KUGRSNmIu
b1h4S3Fmey1tb3otdHJhbnNpdGlvbjpub25lO3RyYW5zaXRpb246bm9uZX0uejgwTTF7Y29s
b3I6IzIyMjtjdXJzb3I6cG9pbnRlcjtkaXNwbGF5OmJsb2NrO291dGxpbmU6bm9uZTtvdmVy
ZmxvdzpoaWRkZW47cGFkZGluZzowIDI0cHg7cG9zaXRpb246cmVsYXRpdmV9LnV5WXVWYntk
aXNwbGF5Oi13ZWJraXQtYm94O2Rpc3BsYXk6LW1vei1ib3g7ZGlzcGxheTotbXMtZmxleGJv
eDtkaXNwbGF5Oi13ZWJraXQtZmxleDtkaXNwbGF5OmZsZXg7Zm9udC1zaXplOjE0cHg7Zm9u
dC13ZWlnaHQ6NDAwO2xpbmUtaGVpZ2h0OjQwcHg7aGVpZ2h0OjQwcHg7cG9zaXRpb246cmVs
YXRpdmU7d2hpdGUtc3BhY2U6bm93cmFwfS5qTzdoM2N7Ym94LWZsZXg6MTtmbGV4LWdyb3c6
MTttaW4td2lkdGg6MH0uSlBkUjZiLmU1RW1qYyAuejgwTTF7cGFkZGluZy1sZWZ0OjY0cHh9
LkpQZFI2Yi5DYmxUbWYgLno4ME0xe3BhZGRpbmctcmlnaHQ6NDhweH0uUENkT0lie2Rpc3Bs
YXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5Oi1tcy1mbGV4Ym94O2Rp
c3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6ZmxleDtmbGV4LWRpcmVjdGlvbjpjb2x1bW47
anVzdGlmeS1jb250ZW50OmNlbnRlcjtiYWNrZ3JvdW5kLXJlcGVhdDpuby1yZXBlYXQ7aGVp
Z2h0OjQwcHg7bGVmdDoyNHB4O29wYWNpdHk6LjU0O3Bvc2l0aW9uOmFic29sdXRlfS56ODBN
MS5SRFBaRSAuUENkT0lie29wYWNpdHk6LjI2fS56ODBNMS5Gd1I3UGN7b3V0bGluZToxcHgg
c29saWQgdHJhbnNwYXJlbnQ7YmFja2dyb3VuZC1jb2xvcjojZWVlZWVlfS56ODBNMS5SRFBa
RXtjb2xvcjojYjhiOGI4O2N1cnNvcjpkZWZhdWx0fS56ODBNMS5OMlJwQmU6OmJlZm9yZXst
bW96LXRyYW5zZm9ybTpyb3RhdGUoNDVkZWcpO3RyYW5zZm9ybTpyb3RhdGUoNDVkZWcpOy1t
b3otdHJhbnNmb3JtLW9yaWdpbjpsZWZ0O3RyYW5zZm9ybS1vcmlnaW46bGVmdDtjb250ZW50
OiJcMDAwMGEwIjtkaXNwbGF5OmJsb2NrO2JvcmRlci1yaWdodDoycHggc29saWQgIzIyMjti
b3JkZXItYm90dG9tOjJweCBzb2xpZCAjMjIyO2hlaWdodDoxNnB4O2xlZnQ6MjRweDtvcGFj
aXR5Oi41NDtwb3NpdGlvbjphYnNvbHV0ZTt0b3A6MTMlO3dpZHRoOjdweDt6LWluZGV4OjB9
LkpQZFI2Yi5DYmxUbWYgLno4ME0xLk4yUnBCZTo6YmVmb3Jle2xlZnQ6YXV0bztyaWdodDox
NnB4fS56ODBNMS5SRFBaRTo6YmVmb3Jle2JvcmRlci1jb2xvcjojYjhiOGI4O29wYWNpdHk6
MX0uYUJCamJke3BvaW50ZXItZXZlbnRzOm5vbmU7cG9zaXRpb246YWJzb2x1dGV9Lno4ME0x
LnFzNDFxZT4uYUJCamJkey1tb3otYW5pbWF0aW9uOnF1YW50dW1XaXpCb3hJbmtTcHJlYWQg
LjNzIGVhc2Utb3V0O2FuaW1hdGlvbjpxdWFudHVtV2l6Qm94SW5rU3ByZWFkIC4zcyBlYXNl
LW91dDthbmltYXRpb24tZmlsbC1tb2RlOmZvcndhcmRzO2JhY2tncm91bmQtaW1hZ2U6LW1v
ei1yYWRpYWwtZ3JhZGllbnQoY2lyY2xlIGZhcnRoZXN0LXNpZGUsI2JkYmRiZCwjYmRiZGJk
IDgwJSxyZ2JhKDE4OSwxODksMTg5LDApIDEwMCUpO2JhY2tncm91bmQtaW1hZ2U6cmFkaWFs
LWdyYWRpZW50KGNpcmNsZSBmYXJ0aGVzdC1zaWRlLCNiZGJkYmQsI2JkYmRiZCA4MCUscmdi
YSgxODksMTg5LDE4OSwwKSAxMDAlKTtiYWNrZ3JvdW5kLXNpemU6Y292ZXI7b3BhY2l0eTox
O3RvcDowO2xlZnQ6MH0uSjBYbFple2NvbG9yOmluaGVyaXQ7bGluZS1oZWlnaHQ6NDBweDtw
YWRkaW5nOjAgNnB4IDAgMWVtfS5hOWNhU2N7Y29sb3I6aW5oZXJpdDtkaXJlY3Rpb246bHRy
O3BhZGRpbmc6MCA2cHggMCAxZW19LmtDdFl3ZXtib3JkZXItdG9wOjFweCBzb2xpZCByZ2Jh
KDAsMCwwLDAuMTIpO21hcmdpbjo3cHggMH0uQjJsN2xje2JvcmRlci1sZWZ0OjFweCBzb2xp
ZCByZ2JhKDAsMCwwLDAuMTIpO2Rpc3BsYXk6aW5saW5lLWJsb2NrO2hlaWdodDo0OHB4fUBt
ZWRpYSBzY3JlZW4gYW5kIChtYXgtd2lkdGg6ODQwcHgpey5KQVBxcGV7cGFkZGluZzo4cHgg
MH0uejgwTTF7cGFkZGluZzowIDE2cHh9LkpQZFI2Yi5lNUVtamMgLno4ME0xe3BhZGRpbmct
bGVmdDo0OHB4fS5QQ2RPSWJ7bGVmdDoxMnB4fX0uZmIwZzZ7cG9zaXRpb246cmVsYXRpdmV9
QG1lZGlhIChtYXgtd2lkdGg6MzE5cHgpey5mSEt2cWMgLko5ZkptZiwuZkhLdnFjIC5xUlVv
bGN7cGFkZGluZzoxMnB4fX0ubVViQ2Nley1tb3otdXNlci1zZWxlY3Q6bm9uZTstbW96LXRy
YW5zaXRpb246YmFja2dyb3VuZCAuM3M7dHJhbnNpdGlvbjpiYWNrZ3JvdW5kIC4zcztib3Jk
ZXI6MDstbW96LWJvcmRlci1yYWRpdXM6NTAlO2JvcmRlci1yYWRpdXM6NTAlO2N1cnNvcjpw
b2ludGVyO2Rpc3BsYXk6aW5saW5lLWJsb2NrO2ZsZXgtc2hyaW5rOjA7aGVpZ2h0OjQ4cHg7
b3V0bGluZTpub25lO292ZXJmbG93OmhpZGRlbjtwb3NpdGlvbjpyZWxhdGl2ZTt0ZXh0LWFs
aWduOmNlbnRlcjt3aWR0aDo0OHB4O3otaW5kZXg6MH0ubVViQ2NlPi5UcFFtOWR7aGVpZ2h0
OjQ4cHg7d2lkdGg6NDhweH0uWVlCeHBmey1tb3otYm9yZGVyLXJhZGl1czowO2JvcmRlci1y
YWRpdXM6MDtvdmVyZmxvdzp2aXNpYmxlfS5mS3o3T2R7Y29sb3I6cmdiYSgwLDAsMCwwLjU0
KTtmaWxsOnJnYmEoMCwwLDAsMC41NCl9LnA5Tnd0ZXtjb2xvcjpyZ2JhKDI1NSwyNTUsMjU1
LDAuNzQ5KTtmaWxsOnJnYmEoMjU1LDI1NSwyNTUsMC43NDkpfS5mS3o3T2QudTNiVzRle2Jh
Y2tncm91bmQtY29sb3I6cmdiYSgwLDAsMCwwLjEyKX0ucDlOd3RlLnUzYlc0ZXtiYWNrZ3Jv
dW5kLWNvbG9yOnJnYmEoMjA0LDIwNCwyMDQsMC4yNTEpfS5ZWUJ4cGYudTNiVzRle2JhY2tn
cm91bmQtY29sb3I6dHJhbnNwYXJlbnR9LlZUQmE3YnstbW96LXRyYW5zZm9ybTp0cmFuc2xh
dGUoLTUwJSwtNTAlKSBzY2FsZSgwKTt0cmFuc2Zvcm06dHJhbnNsYXRlKC01MCUsLTUwJSkg
c2NhbGUoMCk7dHJhbnNpdGlvbjpvcGFjaXR5IC4ycyBlYXNlLHZpc2liaWxpdHkgMHMgZWFz
ZSAuMnMsdHJhbnNmb3JtIDBzIGVhc2UgLjJzO3RyYW5zaXRpb246b3BhY2l0eSAuMnMgZWFz
ZSx2aXNpYmlsaXR5IDBzIGVhc2UgLjJzLC13ZWJraXQtdHJhbnNmb3JtIDBzIGVhc2UgLjJz
O2JhY2tncm91bmQtc2l6ZTpjb3ZlcjtsZWZ0OjA7b3BhY2l0eTowO3BvaW50ZXItZXZlbnRz
Om5vbmU7cG9zaXRpb246YWJzb2x1dGU7dG9wOjA7dmlzaWJpbGl0eTpoaWRkZW59LllZQnhw
Zi51M2JXNGUgLlZUQmE3YnstbW96LWFuaW1hdGlvbjpxdWFudHVtV2l6SWNvbkZvY3VzUHVs
c2UgLjdzIGluZmluaXRlIGFsdGVybmF0ZTthbmltYXRpb246cXVhbnR1bVdpekljb25Gb2N1
c1B1bHNlIC43cyBpbmZpbml0ZSBhbHRlcm5hdGU7aGVpZ2h0OjEwMCU7bGVmdDo1MCU7dG9w
OjUwJTt3aWR0aDoxMDAlO3Zpc2liaWxpdHk6dmlzaWJsZX0ubVViQ2NlLnFzNDFxZSAuVlRC
YTdiey1tb3otdHJhbnNmb3JtOnRyYW5zbGF0ZSgtNTAlLC01MCUpIHNjYWxlKDIuMik7dHJh
bnNmb3JtOnRyYW5zbGF0ZSgtNTAlLC01MCUpIHNjYWxlKDIuMik7b3BhY2l0eToxO3Zpc2li
aWxpdHk6dmlzaWJsZX0ubVViQ2NlLnFzNDFxZS5NOUJnNGQgLlZUQmE3Ynt0cmFuc2l0aW9u
Oi13ZWJraXQtdHJhbnNmb3JtIC4zcyBjdWJpYy1iZXppZXIoMC4wLDAuMCwwLjIsMSksb3Bh
Y2l0eSAuMnMgY3ViaWMtYmV6aWVyKDAuMCwwLjAsMC4yLDEpO3RyYW5zaXRpb246dHJhbnNm
b3JtIC4zcyBjdWJpYy1iZXppZXIoMC4wLDAuMCwwLjIsMSksb3BhY2l0eSAuMnMgY3ViaWMt
YmV6aWVyKDAuMCwwLjAsMC4yLDEpfS5tVWJDY2UuajduSVpiIC5WVEJhN2J7LW1vei10cmFu
c2Zvcm06dHJhbnNsYXRlKC01MCUsLTUwJSkgc2NhbGUoMi4yKTt0cmFuc2Zvcm06dHJhbnNs
YXRlKC01MCUsLTUwJSkgc2NhbGUoMi4yKTt2aXNpYmlsaXR5OnZpc2libGV9LmZLejdPZCAu
VlRCYTdie2JhY2tncm91bmQtaW1hZ2U6cmFkaWFsLWdyYWRpZW50KGNpcmNsZSBmYXJ0aGVz
dC1zaWRlLHJnYmEoMCwwLDAsMC4xMikscmdiYSgwLDAsMCwwLjEyKSA4MCUscmdiYSgwLDAs
MCwwKSAxMDAlKX0ucDlOd3RlIC5WVEJhN2J7YmFja2dyb3VuZC1pbWFnZTpyYWRpYWwtZ3Jh
ZGllbnQoY2lyY2xlIGZhcnRoZXN0LXNpZGUscmdiYSgyMDQsMjA0LDIwNCwwLjI1MSkscmdi
YSgyMDQsMjA0LDIwNCwwLjI1MSkgODAlLHJnYmEoMjA0LDIwNCwyMDQsMCkgMTAwJSl9Lm1V
YkNjZS5SRFBaRXtjb2xvcjpyZ2JhKDAsMCwwLDAuMjYpO2ZpbGw6cmdiYSgwLDAsMCwwLjI2
KTtjdXJzb3I6ZGVmYXVsdH0ucDlOd3RlLlJEUFpFe2NvbG9yOnJnYmEoMjU1LDI1NSwyNTUs
MC41MDIpO2ZpbGw6cmdiYSgyNTUsMjU1LDI1NSwwLjUwMil9LnhqS2lMYntwb3NpdGlvbjpy
ZWxhdGl2ZTt0b3A6NTAlfS54aktpTGI+c3BhbntkaXNwbGF5OmlubGluZS1ibG9jaztwb3Np
dGlvbjpyZWxhdGl2ZX0ubGxoRU1key1tb3otdHJhbnNpdGlvbjpvcGFjaXR5IC4xNXMgY3Vi
aWMtYmV6aWVyKDAuNCwwLjAsMC4yLDEpIC4xNXM7dHJhbnNpdGlvbjpvcGFjaXR5IC4xNXMg
Y3ViaWMtYmV6aWVyKDAuNCwwLjAsMC4yLDEpIC4xNXM7YmFja2dyb3VuZC1jb2xvcjpyZ2Jh
KDAsMCwwLDAuNTAyKTtib3R0b206MDtsZWZ0OjA7b3BhY2l0eTowO3Bvc2l0aW9uOmZpeGVk
O3JpZ2h0OjA7dG9wOjA7ei1pbmRleDo1MDAwfS5sbGhFTWQuaVdPNXRkey1tb3otdHJhbnNp
dGlvbjpvcGFjaXR5IC4wNXMgY3ViaWMtYmV6aWVyKDAuNCwwLjAsMC4yLDEpO3RyYW5zaXRp
b246b3BhY2l0eSAuMDVzIGN1YmljLWJlemllcigwLjQsMC4wLDAuMiwxKTtvcGFjaXR5OjF9
Lm1qQU5kY3t0cmFuc2l0aW9uOi13ZWJraXQtdHJhbnNmb3JtIC40cyBjdWJpYy1iZXppZXIo
MC40LDAuMCwwLjIsMSk7dHJhbnNpdGlvbjp0cmFuc2Zvcm0gLjRzIGN1YmljLWJlemllcigw
LjQsMC4wLDAuMiwxKTstbW96LWJveC1hbGlnbjpjZW50ZXI7Ym94LWFsaWduOmNlbnRlcjth
bGlnbi1pdGVtczpjZW50ZXI7ZGlzcGxheTotd2Via2l0LWJveDtkaXNwbGF5Oi1tb3otYm94
O2Rpc3BsYXk6LW1zLWZsZXhib3g7ZGlzcGxheTotd2Via2l0LWZsZXg7ZGlzcGxheTpmbGV4
Oy1tb3otYm94LW9yaWVudDp2ZXJ0aWNhbDtib3gtb3JpZW50OnZlcnRpY2FsO2ZsZXgtZGly
ZWN0aW9uOmNvbHVtbjtib3R0b206MDtsZWZ0OjA7cGFkZGluZzowIDUlO3Bvc2l0aW9uOmFi
c29sdXRlO3JpZ2h0OjA7dG9wOjB9Lngzd1dnZSwuT05KaGx7ZGlzcGxheTpibG9jaztoZWln
aHQ6M2VtfS5lRVBlZ2U+Lngzd1dnZSwuZUVQZWdlPi5PTkpobHtib3gtZmxleDoxO2ZsZXgt
Z3JvdzoxfS5KOU5maXtmbGV4LXNocmluazoxO21heC1oZWlnaHQ6MTAwJX0uZzNWSWxkey1t
b3otYm94LWFsaWduOnN0cmV0Y2g7Ym94LWFsaWduOnN0cmV0Y2g7YWxpZ24taXRlbXM6c3Ry
ZXRjaDtkaXNwbGF5Oi13ZWJraXQtYm94O2Rpc3BsYXk6LW1vei1ib3g7ZGlzcGxheTotbXMt
ZmxleGJveDtkaXNwbGF5Oi13ZWJraXQtZmxleDtkaXNwbGF5OmZsZXg7LW1vei1ib3gtb3Jp
ZW50OnZlcnRpY2FsO2JveC1vcmllbnQ6dmVydGljYWw7ZmxleC1kaXJlY3Rpb246Y29sdW1u
O3RyYW5zaXRpb246LXdlYmtpdC10cmFuc2Zvcm0gLjIyNXMgY3ViaWMtYmV6aWVyKDAuMCww
LjAsMC4yLDEpO3RyYW5zaXRpb246dHJhbnNmb3JtIC4yMjVzIGN1YmljLWJlemllcigwLjAs
MC4wLDAuMiwxKTtwb3NpdGlvbjpyZWxhdGl2ZTtiYWNrZ3JvdW5kLWNvbG9yOiNmZmY7LW1v
ei1ib3JkZXItcmFkaXVzOjJweDtib3JkZXItcmFkaXVzOjJweDstbW96LWJveC1zaGFkb3c6
MCAxMnB4IDE1cHggMCByZ2JhKDAsMCwwLDAuMjQpO2JveC1zaGFkb3c6MCAxMnB4IDE1cHgg
MCByZ2JhKDAsMCwwLDAuMjQpO21heC13aWR0aDoyNGVtO291dGxpbmU6MXB4IHNvbGlkIHRy
YW5zcGFyZW50O292ZXJmbG93OmhpZGRlbn0udmN1ZzNkIC5nM1ZJbGR7cGFkZGluZzowfS5n
M1ZJbGQua2RDZHFje3RyYW5zaXRpb246LXdlYmtpdC10cmFuc2Zvcm0gLjE1cyBjdWJpYy1i
ZXppZXIoMC40LDAuMCwxLDEpO3RyYW5zaXRpb246dHJhbnNmb3JtIC4xNXMgY3ViaWMtYmV6
aWVyKDAuNCwwLjAsMSwxKX0uVXA4dkguQ0F3SUNle3RyYW5zZm9ybTpzY2FsZSgwLjgpfS5V
cDh2SC5rZENkcWN7dHJhbnNmb3JtOnNjYWxlKDAuOSl9Lk5ldnRkYz4ueDN3V2dle2JveC1m
bGV4OjA7ZmxleC1ncm93OjB9Lk5ldnRkYz4uT05KaGx7Ym94LWZsZXg6MTtmbGV4LWdyb3c6
MX0udmN1ZzNkey1tb3otYm94LWFsaWduOnN0cmV0Y2g7Ym94LWFsaWduOnN0cmV0Y2g7YWxp
Z24taXRlbXM6c3RyZXRjaDtwYWRkaW5nOjB9LnZjdWczZD4uZzNWSWxke2JveC1mbGV4OjI7
ZmxleC1ncm93OjI7LW1vei1ib3JkZXItcmFkaXVzOjA7Ym9yZGVyLXJhZGl1czowO2xlZnQ6
MDtyaWdodDowO21heC13aWR0aDoxMDAlfS52Y3VnM2Q+Lk9OSmhsLC52Y3VnM2Q+Lngzd1dn
ZXtib3gtZmxleDowO2ZsZXgtZ3JvdzowO2hlaWdodDowfS50T3JOZ2R7ZGlzcGxheTotd2Vi
a2l0LWJveDtkaXNwbGF5Oi1tb3otYm94O2Rpc3BsYXk6LW1zLWZsZXhib3g7ZGlzcGxheTot
d2Via2l0LWZsZXg7ZGlzcGxheTpmbGV4O2ZsZXgtc2hyaW5rOjA7Zm9udDo1MDAgMjBweCBS
b2JvdG8sUm9ib3RvRHJhZnQsSGVsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWY7cGFkZGluZzoy
NHB4IDI0cHggMjBweCAyNHB4fS52Y3VnM2QgLnRPck5nZHtkaXNwbGF5Om5vbmV9LlROY3pp
Yntib3gtcGFjazpqdXN0aWZ5O2p1c3RpZnktY29udGVudDpzcGFjZS1iZXR3ZWVuO2ZsZXgt
c2hyaW5rOjA7LW1vei1ib3gtc2hhZG93OjAgM3B4IDRweCAwIHJnYmEoMCwwLDAsMC4yNCk7
Ym94LXNoYWRvdzowIDNweCA0cHggMCByZ2JhKDAsMCwwLDAuMjQpO2JhY2tncm91bmQtY29s
b3I6IzQ1NWE2NDtjb2xvcjp3aGl0ZTtkaXNwbGF5Om5vbmU7Zm9udDo1MDAgMjBweCBSb2Jv
dG8sUm9ib3RvRHJhZnQsSGVsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWZ9LnZjdWczZCAuVE5j
emlie2Rpc3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5Oi1tcy1m
bGV4Ym94O2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6ZmxleH0uUE5lbnpme2JveC1m
bGV4OjE7ZmxleC1ncm93OjE7ZmxleC1zaHJpbms6MTtvdmVyZmxvdzpoaWRkZW47d29yZC13
cmFwOmJyZWFrLXdvcmR9LlROY3ppYiAuUE5lbnpme21hcmdpbjoxNnB4IDB9LlZZN0pRZHto
ZWlnaHQ6MH0uVE5jemliIC5WWTdKUWQsLnRPck5nZCAuYlpXSWdke2Rpc3BsYXk6bm9uZX0u
UjZMZnRlIC5XdHc4SHtmbGV4LXNocmluazowO2Rpc3BsYXk6YmxvY2s7bWFyZ2luOi0xMnB4
IC02cHggMCAwfS5QYm5HaGV7Ym94LWZsZXg6MjtmbGV4LWdyb3c6MjtmbGV4LXNocmluazoy
O2Rpc3BsYXk6YmxvY2s7Zm9udDo0MDAgMTRweC8yMHB4IFJvYm90byxSb2JvdG9EcmFmdCxI
ZWx2ZXRpY2EsQXJpYWwsc2Fucy1zZXJpZjtwYWRkaW5nOjAgMjRweDtvdmVyZmxvdy15OmF1
dG99LldoZTh1YiAuUGJuR2hle3BhZGRpbmctdG9wOjI0cHh9LmhGRXFOYiAuUGJuR2hle3Bh
ZGRpbmctYm90dG9tOjI0cHh9LnZjdWczZCAuUGJuR2hle3BhZGRpbmc6MTZweH0uWGZwc1Zl
e2Rpc3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5Oi1tcy1mbGV4
Ym94O2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6ZmxleDtmbGV4LXNocmluazowO2Jv
eC1wYWNrOmVuZDtqdXN0aWZ5LWNvbnRlbnQ6ZmxleC1lbmQ7cGFkZGluZzoyNHB4IDI0cHgg
MTZweCAyNHB4fS52Y3VnM2QgLlhmcHNWZXtkaXNwbGF5Om5vbmV9Lk9sbGJXZXtib3gtcGFj
azplbmQ7anVzdGlmeS1jb250ZW50OmZsZXgtZW5kO2Rpc3BsYXk6bm9uZX0udmN1ZzNkIC5P
bGxiV2V7ZGlzcGxheTotd2Via2l0LWJveDtkaXNwbGF5Oi1tb3otYm94O2Rpc3BsYXk6LW1z
LWZsZXhib3g7ZGlzcGxheTotd2Via2l0LWZsZXg7ZGlzcGxheTpmbGV4Oy1tb3otYm94LWFs
aWduOnN0YXJ0O2JveC1hbGlnbjpzdGFydDthbGlnbi1pdGVtczpmbGV4LXN0YXJ0O21hcmdp
bjowIDE2cHh9LmtIc3NkYy5PMFdSa2YuQzBvVmZjLC5YZnBzVmUgLk8wV1JrZi5DMG9WZmN7
bWluLXdpZHRoOjY0cHh9LmtIc3NkYysua0hzc2Rje21hcmdpbi1sZWZ0OjhweH0uVE5jemli
IC5rSHNzZGN7Y29sb3I6I2ZmZjttYXJnaW4tdG9wOjEwcHh9LlROY3ppYiAuV3R3OEh7bWFy
Z2luOjRweCAyNHB4IDRweCAwfS5UTmN6aWIgLmtIc3NkYy51M2JXNGUsLlROY3ppYiAuV3R3
OEgudTNiVzRle2JhY2tncm91bmQtY29sb3I6cmdiYSgyMDQsMjA0LDIwNCwwLjI1MSl9LlRO
Y3ppYiAua0hzc2RjPi5Wd2U0VmIsLlROY3ppYiAuV3R3OEg+LlZUQmE3YntiYWNrZ3JvdW5k
LWltYWdlOnJhZGlhbC1ncmFkaWVudChjaXJjbGUgZmFydGhlc3Qtc2lkZSxyZ2JhKDI1NSwy
NTUsMjU1LDAuMzApLHJnYmEoMjU1LDI1NSwyNTUsMC4zMCkgODAlLHJnYmEoMjU1LDI1NSwy
NTUsMCkgMTAwJSl9LlROY3ppYiAua0hzc2RjLlJEUFpFLC5UTmN6aWIgLld0dzhILlJEUFpF
e2NvbG9yOnJnYmEoMjU1LDI1NSwyNTUsMC41MDIpO2ZpbGw6cmdiYSgyNTUsMjU1LDI1NSww
LjUwMil9LkZLRjZtYywuRktGNm1jOmZvY3Vze2Rpc3BsYXk6YmxvY2s7b3V0bGluZTpub25l
O3RleHQtZGVjb3JhdGlvbjpub25lfS5GS0Y2bWM6dmlzaXRlZHtmaWxsOmluaGVyaXQ7c3Ry
b2tlOmluaGVyaXR9LlUyNmZnYi51M2JXNGV7b3V0bGluZToxcHggc29saWQgdHJhbnNwYXJl
bnR9LkMwb1ZmY3tsaW5lLWhlaWdodDoyMHB4O21pbi13aWR0aDo4OHB4fS5DMG9WZmMgLlJ2
ZUp2ZHttYXJnaW46OHB4fS5EUHZ3WWN7Zm9udC1mYW1pbHk6J01hdGVyaWFsIEljb25zIEV4
dGVuZGVkJztmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHlsZTpub3JtYWw7Zm9udC1zaXpl
OjI0cHg7bGluZS1oZWlnaHQ6MTtsZXR0ZXItc3BhY2luZzpub3JtYWw7dGV4dC1yZW5kZXJp
bmc6b3B0aW1pemVMZWdpYmlsaXR5O3RleHQtdHJhbnNmb3JtOm5vbmU7ZGlzcGxheTppbmxp
bmUtYmxvY2s7d29yZC13cmFwOm5vcm1hbDtkaXJlY3Rpb246bHRyO2ZvbnQtZmVhdHVyZS1z
ZXR0aW5nczonbGlnYScgMX1odG1sW2Rpcj0icnRsIl0gLnNtOHNDZnstbW96LXRyYW5zZm9y
bTpzY2FsZVgoLTEpO3RyYW5zZm9ybTpzY2FsZVgoLTEpO2ZpbHRlcjpGbGlwSH1jLXdpentj
b250YWluOnN0eWxlfWMtd2l6PmMtZGF0YXtkaXNwbGF5Om5vbmV9Yy13aXouckVUU0R7Y29u
dGFpbjpub25lfWMtd2l6LlViaThae2NvbnRhaW46bGF5b3V0IHN0eWxlfS5OTW01TXtmaWxs
OmN1cnJlbnRDb2xvcn1odG1sW2Rpcj0icnRsIl0gLmhoaWtiY3t0cmFuc2Zvcm06c2NhbGVY
KC0xKX0uYzlQZTRjLC5zUmhQaWN7bWFyZ2luOmF1dG99QG1lZGlhIChtaW4td2lkdGg6NDgw
cHgpIGFuZCAobWF4LXdpZHRoOjU0M3B4KXsuYzlQZTRje21heC13aWR0aDo0NDhweH19QG1l
ZGlhIChtaW4td2lkdGg6NTQ0cHgpey5jOVBlNGN7cGFkZGluZzowIDQ4cHh9fS5jcUpIdHst
bW96LXRyYW5zaXRpb246b3BhY2l0eSAuMTVzIGN1YmljLWJlemllcigwLjQsMC4wLDAuMiwx
KSAuMTVzO3RyYW5zaXRpb246b3BhY2l0eSAuMTVzIGN1YmljLWJlemllcigwLjQsMC4wLDAu
MiwxKSAuMTVzO2JhY2tncm91bmQtY29sb3I6cmdiYSgzMiwzMywzNiwwLjYpO2JvdHRvbTow
O2xlZnQ6MDtvcGFjaXR5OjA7cG9zaXRpb246Zml4ZWQ7cmlnaHQ6MDt0b3A6MDt6LWluZGV4
OjUwMDB9LmNxSkh0LmlXTzV0ZHstbW96LXRyYW5zaXRpb246b3BhY2l0eSAuMDVzIGN1Ymlj
LWJlemllcigwLjQsMC4wLDAuMiwxKTt0cmFuc2l0aW9uOm9wYWNpdHkgLjA1cyBjdWJpYy1i
ZXppZXIoMC40LDAuMCwwLjIsMSk7b3BhY2l0eToxfS5OR1NrUGV7dHJhbnNpdGlvbjotd2Vi
a2l0LXRyYW5zZm9ybSAuNHMgY3ViaWMtYmV6aWVyKDAuNCwwLjAsMC4yLDEpO3RyYW5zaXRp
b246dHJhbnNmb3JtIC40cyBjdWJpYy1iZXppZXIoMC40LDAuMCwwLjIsMSk7LW1vei1ib3gt
YWxpZ246Y2VudGVyO2JveC1hbGlnbjpjZW50ZXI7YWxpZ24taXRlbXM6Y2VudGVyO2Rpc3Bs
YXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5Oi1tcy1mbGV4Ym94O2Rp
c3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6ZmxleDstbW96LWJveC1vcmllbnQ6dmVydGlj
YWw7Ym94LW9yaWVudDp2ZXJ0aWNhbDtmbGV4LWRpcmVjdGlvbjpjb2x1bW47YmFja2ZhY2Ut
dmlzaWJpbGl0eTpoaWRkZW47Ym90dG9tOjA7bGVmdDowO3BhZGRpbmc6MCA1JTtwb3NpdGlv
bjphYnNvbHV0ZTtyaWdodDowO3RvcDowfS5odFEydmQsLmJtbk9SZXtkaXNwbGF5OmJsb2Nr
O2hlaWdodDozZW19LnBaekJKZT4uaHRRMnZkLC5wWnpCSmU+LmJtbk9SZXtib3gtZmxleDox
O2ZsZXgtZ3JvdzoxfS5Ib1JWNGN7ZmxleC1zaHJpbms6MTttYXgtaGVpZ2h0OjEwMCV9QG1l
ZGlhIChtYXgtd2lkdGg6NDc5cHgpey5jcUpIdC53bzFoIC5odFEydmQsLmNxSkh0LndvMWgg
LmJtbk9SZXtoZWlnaHQ6MH0uY3FKSHQud28xaCAuTkdTa1Ble3BhZGRpbmc6MH0uY3FKSHQu
d28xaCAuSG9SVjRjey1tb3otYm9yZGVyLXJhZGl1czowO2JvcmRlci1yYWRpdXM6MDtoZWln
aHQ6MTAwJTttYXgtd2lkdGg6MTAwJTt3aWR0aDoxMDAlfX0uRWVub0tmey1tb3otYm94LWFs
aWduOnN0cmV0Y2g7Ym94LWFsaWduOnN0cmV0Y2g7YWxpZ24taXRlbXM6c3RyZXRjaDtiYWNr
Z3JvdW5kLWNvbG9yOiNmZmY7Ym94LXNoYWRvdzowIDFweCAzcHggMCByZ2JhKDYwLDY0LDY3
LC4zMCksMCA0cHggOHB4IDNweCByZ2JhKDYwLDY0LDY3LC4xNSk7ZGlzcGxheTotd2Via2l0
LWJveDtkaXNwbGF5Oi1tb3otYm94O2Rpc3BsYXk6LW1zLWZsZXhib3g7ZGlzcGxheTotd2Vi
a2l0LWZsZXg7ZGlzcGxheTpmbGV4Oy1tb3otYm94LW9yaWVudDp2ZXJ0aWNhbDtib3gtb3Jp
ZW50OnZlcnRpY2FsO2ZsZXgtZGlyZWN0aW9uOmNvbHVtbjt0cmFuc2l0aW9uOi13ZWJraXQt
dHJhbnNmb3JtIC4yMjVzIGN1YmljLWJlemllcigwLjAsMC4wLDAuMiwxKTt0cmFuc2l0aW9u
OnRyYW5zZm9ybSAuMjI1cyBjdWJpYy1iZXppZXIoMC4wLDAuMCwwLjIsMSk7cG9zaXRpb246
cmVsYXRpdmU7LW1vei1ib3JkZXItcmFkaXVzOjhweDtib3JkZXItcmFkaXVzOjhweDttYXgt
d2lkdGg6MjRlbTtvdXRsaW5lOm5vbmU7b3ZlcmZsb3c6aGlkZGVufS5FZW5vS2YgLkxqRHhj
ZDpub3QoOmRpc2FibGVkKXtjb2xvcjojMjAyMTI0fS5IajhEbmUgLkVlbm9LZntwYWRkaW5n
OjB9LkVlbm9LZi5rZENkcWN7dHJhbnNpdGlvbjotd2Via2l0LXRyYW5zZm9ybSAuMTVzIGN1
YmljLWJlemllcigwLjQsMC4wLDEsMSk7dHJhbnNpdGlvbjp0cmFuc2Zvcm0gLjE1cyBjdWJp
Yy1iZXppZXIoMC40LDAuMCwxLDEpfS52V2xYWWMuQ0F3SUNle3RyYW5zZm9ybTpzY2FsZSgw
LjgpfS52V2xYWWMua2RDZHFje3RyYW5zZm9ybTpzY2FsZSgwLjkpfS5IajhEbmV7LW1vei1i
b3gtYWxpZ246c3RyZXRjaDtib3gtYWxpZ246c3RyZXRjaDthbGlnbi1pdGVtczpzdHJldGNo
O3BhZGRpbmc6MH0uSGo4RG5lPi5FZW5vS2Z7Ym94LWZsZXg6MjtmbGV4LWdyb3c6MjstbW96
LWJvcmRlci1yYWRpdXM6MDtib3JkZXItcmFkaXVzOjA7bGVmdDowO3JpZ2h0OjA7bWF4LXdp
ZHRoOjEwMCV9LkhqOERuZT4uT05KaGwsLkhqOERuZT4ueDN3V2dle2JveC1mbGV4OjA7Zmxl
eC1ncm93OjA7aGVpZ2h0OjB9LllaSUpSYntkaXNwbGF5Oi13ZWJraXQtYm94O2Rpc3BsYXk6
LW1vei1ib3g7ZGlzcGxheTotbXMtZmxleGJveDtkaXNwbGF5Oi13ZWJraXQtZmxleDtkaXNw
bGF5OmZsZXg7ZmxleC1zaHJpbms6MDtsZXR0ZXItc3BhY2luZzouMDA2MjVlbTtmb250LWZh
bWlseTonR29vZ2xlIFNhbnMnLFJvYm90byxBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZTox
cmVtO2ZvbnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjVyZW07cGFkZGluZzoxOHB4IDI0
cHggMTZweCAyNHB4fS5EUVdqemMgLllaSUpSYntwYWRkaW5nLWJvdHRvbTowfS5IajhEbmUg
LllaSUpSYntkaXNwbGF5Om5vbmV9LnhqM0huYntib3gtZmxleDoxO2ZsZXgtZ3JvdzoxO2Zs
ZXgtc2hyaW5rOjE7b3ZlcmZsb3c6aGlkZGVuO3dvcmQtd3JhcDpicmVhay13b3JkfS5sVjM0
OGJ7aGVpZ2h0OjB9LllaSUpSYiAueGZyQVNke2Rpc3BsYXk6bm9uZX0ubFV4MDIgLkd4eU5S
e2ZsZXgtc2hyaW5rOjA7ZGlzcGxheTpibG9jazttYXJnaW46LTExcHggLTIwcHggMCAwfS5X
WDFtVmV7Ym94LWZsZXg6MjtmbGV4LWdyb3c6MjtmbGV4LXNocmluazoyO2Rpc3BsYXk6Ymxv
Y2s7Zm9udDo0MDAgMTRweC8yMHB4IFJvYm90byxSb2JvdG9EcmFmdCxIZWx2ZXRpY2EsQXJp
YWwsc2Fucy1zZXJpZjtwYWRkaW5nOjAgMjRweDtvdmVyZmxvdy15OmF1dG99Lk1VNGJwYyAu
V1gxbVZle3BhZGRpbmctdG9wOjIwcHh9LnJDQUpSZSAuV1gxbVZle3BhZGRpbmctYm90dG9t
OjI0cHh9LkhqOERuZSAuV1gxbVZle3BhZGRpbmc6MTZweH0uS3NIQVlke2Rpc3BsYXk6LXdl
YmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5Oi1tcy1mbGV4Ym94O2Rpc3BsYXk6
LXdlYmtpdC1mbGV4O2Rpc3BsYXk6ZmxleDtmbGV4LXNocmluazowO2JveC1wYWNrOmVuZDtq
dXN0aWZ5LWNvbnRlbnQ6ZmxleC1lbmQ7cGFkZGluZzoxNnB4IDI0cHggMTJweCAyNHB4fS5I
ajhEbmUgLktzSEFZZHtkaXNwbGF5Om5vbmV9Lm9SVXpaYntib3gtcGFjazplbmQ7anVzdGlm
eS1jb250ZW50OmZsZXgtZW5kO2Rpc3BsYXk6bm9uZX0uSGo4RG5lIC5vUlV6WmJ7ZGlzcGxh
eTotd2Via2l0LWJveDtkaXNwbGF5Oi1tb3otYm94O2Rpc3BsYXk6LW1zLWZsZXhib3g7ZGlz
cGxheTotd2Via2l0LWZsZXg7ZGlzcGxheTpmbGV4Oy1tb3otYm94LWFsaWduOnN0YXJ0O2Jv
eC1hbGlnbjpzdGFydDthbGlnbi1pdGVtczpmbGV4LXN0YXJ0O21hcmdpbjowIDE2cHh9Lkxq
clBHZi5PMFdSa2YuQzBvVmZjLC5Lc0hBWWQgLk8wV1JrZi5DMG9WZmN7bWluLXdpZHRoOjY0
cHh9LkxqclBHZisuTGpyUEdme21hcmdpbi1sZWZ0OjhweH0uRUt5MXZjIC5ZWklKUmJ7Zm9u
dC1mYW1pbHk6J0dvb2dsZSBTYW5zJyxSb2JvdG8sQXJpYWwsc2Fucy1zZXJpZjtmb250LXNp
emU6MS4zNzVyZW07Zm9udC13ZWlnaHQ6NDAwO2xpbmUtaGVpZ2h0OjEuNzVyZW07Ym9yZGVy
LWJvdHRvbToxcHggc29saWQgI2RhZGNlMDttYXJnaW4tYm90dG9tOjI0cHh9QG1lZGlhICht
aW4td2lkdGg6NDgwcHgpey5FS3kxdmMuRWVub0tme21heC13aWR0aDo1MDBweDt3aWR0aDo1
MDBweH19Lk9FSDNUe2N1cnNvcjpoYW5kO2N1cnNvcjpwb2ludGVyfS5lMjlLUWV7b3V0bGlu
ZTo0cHggc29saWQgI2M2ZGFmY30uVlpUVklke2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybCho
dHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2Vj
dXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvbm90aWZpY2F0aW9ucy02Y2E5OTc5Njk5MDgx
YmEzOWMyZmY5NDA4Y2ViNTQ1MC5wbmcpIC0zM3B4IC0xN3B4O2JhY2tncm91bmQtc2l6ZTox
MDdweCAzM3B4O3dpZHRoOjE2cHg7aGVpZ2h0OjE2cHh9Lk1yMGdmY3tiYWNrZ3JvdW5kOm5v
LXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291
bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL25vdGlmaWNhdGlvbnMt
NmNhOTk3OTY5OTA4MWJhMzljMmZmOTQwOGNlYjU0NTAucG5nKSAtMzNweCAwO2JhY2tncm91
bmQtc2l6ZToxMDdweCAzM3B4O3dpZHRoOjE2cHg7aGVpZ2h0OjE2cHh9Lks0MndwY3tiYWNr
Z3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkv
Ym9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL25vdGlm
aWNhdGlvbnMtNmNhOTk3OTY5OTA4MWJhMzljMmZmOTQwOGNlYjU0NTAucG5nKSAwIDA7YmFj
a2dyb3VuZC1zaXplOjEwN3B4IDMzcHg7d2lkdGg6MzJweDtoZWlnaHQ6MzJweH0uU0ZqZkhj
e2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVu
dGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMv
bm90aWZpY2F0aW9ucy02Y2E5OTc5Njk5MDgxYmEzOWMyZmY5NDA4Y2ViNTQ1MC5wbmcpIC01
MHB4IDA7YmFja2dyb3VuZC1zaXplOjEwN3B4IDMzcHg7d2lkdGg6MzJweDtoZWlnaHQ6MzJw
eH0uVnZWTjdje3ZlcnRpY2FsLWFsaWduOnRvcDt3b3JkLWJyZWFrOmJyZWFrLWFsbH0uTGRx
ZzF7Y29sb3I6cmdiYSgwLDAsMCwwLjY1KX0uTGRxZzEuRFB2d1lje2ZvbnQtc2l6ZToxNnB4
O2xpbmUtaGVpZ2h0OjI4cHh9LmI2emVxZi5tVWJDY2V7cG9zaXRpb246cmVsYXRpdmU7bWFy
Z2luLWxlZnQ6OHB4O3dpZHRoOjIwcHg7aGVpZ2h0OjIwcHg7dG9wOi0zcHh9LlJhTHVHZntw
YWRkaW5nOjNweCAwIDNweCAxNXB4O3ZlcnRpY2FsLWFsaWduOnRvcH0udmE4Qm1le2NvbG9y
OnJnYmEoMCwwLDAsMC42NSk7cGFkZGluZzo0cHggMDt2ZXJ0aWNhbC1hbGlnbjp0b3A7d2lk
dGg6MzAlfS5YaHBrV2J7Ym9yZGVyLWNvbGxhcHNlOmNvbGxhcHNlfS5SSmVTVmJ7cGFkZGlu
Zy1sZWZ0OjZweDt2ZXJ0aWNhbC1hbGlnbjptaWRkbGV9Lmp0SDVuY3tvdmVyZmxvdzpoaWRk
ZW59Lkxjd1Bqe2Zsb2F0OmxlZnQ7bWFyZ2luLXJpZ2h0OjEwcHg7bWF4LXdpZHRoOjMwMHB4
O3ZlcnRpY2FsLWFsaWduOnRvcDt3aWR0aDoxMDAlfS5lMnZ2YmV7Ym9yZGVyLWNvbGxhcHNl
OmNvbGxhcHNlO21heC13aWR0aDozMDBweDt3aWR0aDoxMDAlfS5XU00wZmV7ZmxvYXQ6cmln
aHQ7cGFkZGluZzo0cHg7d2lkdGg6MjAwcHh9LnpWVEpVZXtoZWlnaHQ6MTIwcHg7d2lkdGg6
MjAwcHh9Lmp2bWlnY3tjb2xvcjojOWU5ZTllO2ZvbnQtc2l6ZToxMnB4O21hcmdpbi10b3A6
N3B4fUBtZWRpYSAobWluLXdpZHRoOjQ2NnB4KXsuTnVkdmFie21hcmdpbi10b3A6LTIwcHg7
cG9zaXRpb246cmVsYXRpdmV9fS5WRUdMVmR7YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0
dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1
cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9icm93c2Vycy1lNDk1ZGFhNmJlYzA4YmI4NWQx
NDBmZGY2NmRmNWFhNC5wbmcpIDAgLTIxcHg7YmFja2dyb3VuZC1zaXplOjIwcHggMTQ2cHg7
d2lkdGg6MjBweDtoZWlnaHQ6MjBweH0uVkVHTFZkW2RhdGEtYnJvd3Nlcj0nMSdde2JhY2tn
cm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9i
b3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvYnJvd3Nl
cnMtZTQ5NWRhYTZiZWMwOGJiODVkMTQwZmRmNjZkZjVhYTQucG5nKSAwIC02M3B4O2JhY2tn
cm91bmQtc2l6ZToyMHB4IDE0NnB4O3dpZHRoOjIwcHg7aGVpZ2h0OjIwcHh9LlZFR0xWZFtk
YXRhLWJyb3dzZXI9JzInXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cu
Z3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9u
L2ltYWdlcy9zcHJpdGVzL2Jyb3dzZXJzLWU0OTVkYWE2YmVjMDhiYjg1ZDE0MGZkZjY2ZGY1
YWE0LnBuZykgMCAtODRweDtiYWNrZ3JvdW5kLXNpemU6MjBweCAxNDZweDt3aWR0aDoyMHB4
O2hlaWdodDoyMHB4fS5WRUdMVmRbZGF0YS1icm93c2VyPSczJ117YmFja2dyb3VuZDpuby1y
ZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50
c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9icm93c2Vycy1lNDk1ZGFh
NmJlYzA4YmI4NWQxNDBmZGY2NmRmNWFhNC5wbmcpIDAgMDtiYWNrZ3JvdW5kLXNpemU6MjBw
eCAxNDZweDt3aWR0aDoyMHB4O2hlaWdodDoyMHB4fS5WRUdMVmRbZGF0YS1icm93c2VyPSc0
J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lk
ZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRl
cy9icm93c2Vycy1lNDk1ZGFhNmJlYzA4YmI4NWQxNDBmZGY2NmRmNWFhNC5wbmcpIDAgLTEw
NXB4O2JhY2tncm91bmQtc2l6ZToyMHB4IDE0NnB4O3dpZHRoOjIwcHg7aGVpZ2h0OjIwcHh9
LlZFR0xWZFtkYXRhLWJyb3dzZXI9JzUnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0
cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3Vy
aXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2Jyb3dzZXJzLWU0OTVkYWE2YmVjMDhiYjg1ZDE0
MGZkZjY2ZGY1YWE0LnBuZykgMCAtMTI2cHg7YmFja2dyb3VuZC1zaXplOjIwcHggMTQ2cHg7
d2lkdGg6MjBweDtoZWlnaHQ6MjBweH0uVkVHTFZkW2RhdGEtYnJvd3Nlcj0nNidde2JhY2tn
cm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9i
b3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvYnJvd3Nl
cnMtZTQ5NWRhYTZiZWMwOGJiODVkMTQwZmRmNjZkZjVhYTQucG5nKSAwIC0yMXB4O2JhY2tn
cm91bmQtc2l6ZToyMHB4IDE0NnB4O3dpZHRoOjIwcHg7aGVpZ2h0OjIwcHh9LlZFR0xWZFtk
YXRhLWJyb3dzZXI9JzcnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cu
Z3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9u
L2ltYWdlcy9zcHJpdGVzL2Jyb3dzZXJzLWU0OTVkYWE2YmVjMDhiYjg1ZDE0MGZkZjY2ZGY1
YWE0LnBuZykgMCAtNDJweDtiYWNrZ3JvdW5kLXNpemU6MjBweCAxNDZweDt3aWR0aDoyMHB4
O2hlaWdodDoyMHB4fS5CVFNISFtkYXRhLWFjdGl2aXR5LWdyb3VwPScxJ117YmFja2dyb3Vu
ZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9h
Y2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9hY3Rpdml0aWVz
XzMyX2xpZ2h0LThkMzNjZGU0MTkyYmMxZmE3NDc4Yzk3MDVlOTFiMWU0LnBuZykgMCAwO2Jh
Y2tncm91bmQtc2l6ZTozMnB4IDE5N3B4O3dpZHRoOjMycHg7aGVpZ2h0OjMycHh9LkJUU0hI
W2RhdGEtYWN0aXZpdHktZ3JvdXA9JzEyJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0
dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1
cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9hY3Rpdml0aWVzXzMyX2xpZ2h0LThkMzNjZGU0
MTkyYmMxZmE3NDc4Yzk3MDVlOTFiMWU0LnBuZykgMCAtMzNweDtiYWNrZ3JvdW5kLXNpemU6
MzJweCAxOTdweDt3aWR0aDozMnB4O2hlaWdodDozMnB4fS5CVFNISFtkYXRhLWFjdGl2aXR5
LWdyb3VwPScyJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0
aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFn
ZXMvc3ByaXRlcy9hY3Rpdml0aWVzXzMyX2xpZ2h0LThkMzNjZGU0MTkyYmMxZmE3NDc4Yzk3
MDVlOTFiMWU0LnBuZykgMCAtMTMycHg7YmFja2dyb3VuZC1zaXplOjMycHggMTk3cHg7d2lk
dGg6MzJweDtoZWlnaHQ6MzJweH0uQlRTSEhbZGF0YS1hY3Rpdml0eS1ncm91cD0nMyddLC5C
VFNISFtkYXRhLWFjdGl2aXR5LWdyb3VwPSc3J10sLkJUU0hIW2RhdGEtYWN0aXZpdHktZ3Jv
dXA9JzgnXSwuQlRTSEhbZGF0YS1hY3Rpdml0eS1ncm91cD0nOSdde2JhY2tncm91bmQ6bm8t
cmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3Vu
dHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvYWN0aXZpdGllc18zMl9s
aWdodC04ZDMzY2RlNDE5MmJjMWZhNzQ3OGM5NzA1ZTkxYjFlNC5wbmcpIDAgLTk5cHg7YmFj
a2dyb3VuZC1zaXplOjMycHggMTk3cHg7d2lkdGg6MzJweDtoZWlnaHQ6MzJweH0uQlRTSEhb
ZGF0YS1hY3Rpdml0eS1ncm91cD0nNCdde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRw
czovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJp
dHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvYWN0aXZpdGllc18zMl9saWdodC04ZDMzY2RlNDE5
MmJjMWZhNzQ3OGM5NzA1ZTkxYjFlNC5wbmcpIDAgLTE2NXB4O2JhY2tncm91bmQtc2l6ZToz
MnB4IDE5N3B4O3dpZHRoOjMycHg7aGVpZ2h0OjMycHh9LkJUU0hIW2RhdGEtYWN0aXZpdHkt
Z3JvdXA9JzUnXSwuQlRTSEhbZGF0YS1hY3Rpdml0eS1ncm91cD0nNiddLC5CVFNISFtkYXRh
LWFjdGl2aXR5LWdyb3VwPScxMCddLC5CVFNISFtkYXRhLWFjdGl2aXR5LWdyb3VwPScxMSdd
e2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVu
dGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMv
YWN0aXZpdGllc18zMl9saWdodC04ZDMzY2RlNDE5MmJjMWZhNzQ3OGM5NzA1ZTkxYjFlNC5w
bmcpIDAgLTY2cHg7YmFja2dyb3VuZC1zaXplOjMycHggMTk3cHg7d2lkdGg6MzJweDtoZWln
aHQ6MzJweH0uYlJVS3ViW2RhdGEtYWN0aXZpdHktZ3JvdXA9JzEnXXtiYWNrZ3JvdW5kOm5v
LXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291
bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2FjdGl2aXRpZXNfMTZf
bGlnaHQtY2JjOTQ0OTE4N2MzMjNmODExOTYzNGJhMGZkZmY2M2IucG5nKSAwIDA7YmFja2dy
b3VuZC1zaXplOjE2cHggMTAxcHg7d2lkdGg6MTZweDtoZWlnaHQ6MTZweH0uYlJVS3ViW2Rh
dGEtYWN0aXZpdHktZ3JvdXA9JzEyJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBz
Oi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0
eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9hY3Rpdml0aWVzXzE2X2xpZ2h0LWNiYzk0NDkxODdj
MzIzZjgxMTk2MzRiYTBmZGZmNjNiLnBuZykgMCAtMTdweDtiYWNrZ3JvdW5kLXNpemU6MTZw
eCAxMDFweDt3aWR0aDoxNnB4O2hlaWdodDoxNnB4fS5iUlVLdWJbZGF0YS1hY3Rpdml0eS1n
cm91cD0nMidde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGlj
LmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2Vz
L3Nwcml0ZXMvYWN0aXZpdGllc18xNl9saWdodC1jYmM5NDQ5MTg3YzMyM2Y4MTE5NjM0YmEw
ZmRmZjYzYi5wbmcpIDAgLTY4cHg7YmFja2dyb3VuZC1zaXplOjE2cHggMTAxcHg7d2lkdGg6
MTZweDtoZWlnaHQ6MTZweH0uYlJVS3ViW2RhdGEtYWN0aXZpdHktZ3JvdXA9JzMnXSwuYlJV
S3ViW2RhdGEtYWN0aXZpdHktZ3JvdXA9JzcnXSwuYlJVS3ViW2RhdGEtYWN0aXZpdHktZ3Jv
dXA9JzgnXSwuYlJVS3ViW2RhdGEtYWN0aXZpdHktZ3JvdXA9JzknXXtiYWNrZ3JvdW5kOm5v
LXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291
bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2FjdGl2aXRpZXNfMTZf
bGlnaHQtY2JjOTQ0OTE4N2MzMjNmODExOTYzNGJhMGZkZmY2M2IucG5nKSAwIC01MXB4O2Jh
Y2tncm91bmQtc2l6ZToxNnB4IDEwMXB4O3dpZHRoOjE2cHg7aGVpZ2h0OjE2cHh9LmJSVUt1
YltkYXRhLWFjdGl2aXR5LWdyb3VwPSc0J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0
dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1
cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9hY3Rpdml0aWVzXzE2X2xpZ2h0LWNiYzk0NDkx
ODdjMzIzZjgxMTk2MzRiYTBmZGZmNjNiLnBuZykgMCAtODVweDtiYWNrZ3JvdW5kLXNpemU6
MTZweCAxMDFweDt3aWR0aDoxNnB4O2hlaWdodDoxNnB4fS5iUlVLdWJbZGF0YS1hY3Rpdml0
eS1ncm91cD0nNSddLC5iUlVLdWJbZGF0YS1hY3Rpdml0eS1ncm91cD0nNiddLC5iUlVLdWJb
ZGF0YS1hY3Rpdml0eS1ncm91cD0nMTAnXSwuYlJVS3ViW2RhdGEtYWN0aXZpdHktZ3JvdXA9
JzExJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29t
L2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3By
aXRlcy9hY3Rpdml0aWVzXzE2X2xpZ2h0LWNiYzk0NDkxODdjMzIzZjgxMTk2MzRiYTBmZGZm
NjNiLnBuZykgMCAtMzRweDtiYWNrZ3JvdW5kLXNpemU6MTZweCAxMDFweDt3aWR0aDoxNnB4
O2hlaWdodDoxNnB4fS5xM1A0MWJ7bGV0dGVyLXNwYWNpbmc6LjAxNDI4NTcxZW07Zm9udC1m
YW1pbHk6Um9ib3RvLEFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOi44NzVyZW07Zm9udC13
ZWlnaHQ6NDAwO2xpbmUtaGVpZ2h0OjEuMjVyZW07cGFkZGluZy1ib3R0b206MTZweH0udnpG
SDB7bGV0dGVyLXNwYWNpbmc6LjAwNjI1ZW07Zm9udC1mYW1pbHk6Um9ib3RvLEFyaWFsLHNh
bnMtc2VyaWY7Zm9udC1zaXplOjFyZW07Zm9udC13ZWlnaHQ6NDAwO2xpbmUtaGVpZ2h0OjEu
NXJlbTtwYWRkaW5nLXRvcDoxNnB4O2JvcmRlci10b3A6MXB4IHNvbGlkICNkYWRjZTA7cGFk
ZGluZy1ib3R0b206MTZweH0ubnpDWnVke2Rpc3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTot
bW96LWJveDtkaXNwbGF5Oi13ZWJraXQtZmxleDtkaXNwbGF5Oi1tcy1mbGV4Ym94O2Rpc3Bs
YXk6ZmxleDtmbGV4LWZsb3c6cm93IHdyYXAtcmV2ZXJzZTstbW96LWJveC1hbGlnbjpjZW50
ZXI7Ym94LWFsaWduOmNlbnRlcjthbGlnbi1pdGVtczpjZW50ZXI7Ym94LXBhY2s6anVzdGlm
eTtqdXN0aWZ5LWNvbnRlbnQ6c3BhY2UtYmV0d2VlbjttYXJnaW4tYm90dG9tOi04cHg7bWFy
Z2luLXJpZ2h0Oi04cHh9LmhqaGYyZXtkaXNwbGF5Oi13ZWJraXQtYm94O2Rpc3BsYXk6LW1v
ei1ib3g7ZGlzcGxheTotd2Via2l0LWZsZXg7ZGlzcGxheTotbXMtZmxleGJveDtkaXNwbGF5
OmZsZXg7LW1vei1ib3gtb3JpZW50OnZlcnRpY2FsO2JveC1vcmllbnQ6dmVydGljYWw7Zmxl
eC1kaXJlY3Rpb246Y29sdW1uO2JveC1mbGV4OjE7ZmxleC1ncm93OjF9LklBUFFlZXtjb2xv
cjojNWY2MzY4O2ZvbnQtc2l6ZToyMHB4fS5HT1FQOGN7ZGlzcGxheTotd2Via2l0LWJveDtk
aXNwbGF5Oi1tb3otYm94O2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6LW1zLWZsZXhi
b3g7ZGlzcGxheTpmbGV4Oy1tb3otYm94LW9yaWVudDpob3Jpem9udGFsO2JveC1vcmllbnQ6
aG9yaXpvbnRhbDtmbGV4LWRpcmVjdGlvbjpyb3c7cGFkZGluZy1ib3R0b206MTBweH0udjZS
aTNke2Rpc3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5Oi13ZWJr
aXQtZmxleDtkaXNwbGF5Oi1tcy1mbGV4Ym94O2Rpc3BsYXk6ZmxleDstbW96LWJveC1vcmll
bnQ6dmVydGljYWw7Ym94LW9yaWVudDp2ZXJ0aWNhbDtmbGV4LWRpcmVjdGlvbjpjb2x1bW59
LmxFRnhSZHtib3gtZmxleDowO2ZsZXgtZ3JvdzowO2ZsZXgtc2hyaW5rOjA7bWFyZ2luLXJp
Z2h0OjEycHh9LmlqTmdMZXtsZXR0ZXItc3BhY2luZzouMDE3ODU3MTRlbTtmb250LWZhbWls
eTpSb2JvdG8sQXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6Ljg3NXJlbTtmb250LXdlaWdo
dDo1MDA7bGluZS1oZWlnaHQ6MS4yNXJlbX0uWVZsTnpme3dvcmQtYnJlYWs6YnJlYWstYWxs
fS5idjU4OGV7ZGlzcGxheTppbmxpbmUtYmxvY2t9Lkwzc2Fpe2Rpc3BsYXk6LXdlYmtpdC1i
b3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5Oi13ZWJraXQtZmxleDtkaXNwbGF5Oi1tcy1m
bGV4Ym94O2Rpc3BsYXk6ZmxleDstbW96LWJveC1vcmllbnQ6aG9yaXpvbnRhbDtib3gtb3Jp
ZW50Omhvcml6b250YWw7ZmxleC1kaXJlY3Rpb246cm93Oy1tb3otYm94LWFsaWduOmNlbnRl
cjtib3gtYWxpZ246Y2VudGVyO2FsaWduLWl0ZW1zOmNlbnRlcn0uTmxIeHNley1tb3otYm94
LWFsaWduOmNlbnRlcjtib3gtYWxpZ246Y2VudGVyO2FsaWduLWl0ZW1zOmNlbnRlcjtwYWRk
aW5nLXJpZ2h0OjE2cHh9LlJmdlh4ZHstbW96LWJveC1hbGlnbjpjZW50ZXI7Ym94LWFsaWdu
OmNlbnRlcjthbGlnbi1pdGVtczpjZW50ZXI7Zm9udC1zaXplOjIwcHg7Zm9udC13ZWlnaHQ6
NTAwfS5MZ2lRUWV7LW1vei1ib3gtYWxpZ246Y2VudGVyO2JveC1hbGlnbjpjZW50ZXI7YWxp
Z24taXRlbXM6Y2VudGVyfS5VS0NFQntib3JkZXItYm90dG9tOjFweCBzb2xpZCAjZGFkY2Uw
O3BhZGRpbmctYm90dG9tOjhweDttYXJnaW4tYm90dG9tOjE2cHh9LlNDWUpZY3tkaXNwbGF5
Oi13ZWJraXQtYm94O2Rpc3BsYXk6LW1vei1ib3g7ZGlzcGxheTotd2Via2l0LWZsZXg7ZGlz
cGxheTotbXMtZmxleGJveDtkaXNwbGF5OmZsZXg7LW1vei1ib3gtb3JpZW50Omhvcml6b250
YWw7Ym94LW9yaWVudDpob3Jpem9udGFsO2ZsZXgtZGlyZWN0aW9uOnJvd30uRkF5VmNke2Nv
bG9yOiM1ZjYzNjg7Zm9udC1zaXplOjIwcHg7cGFkZGluZy1yaWdodDoxNnB4O3BhZGRpbmct
dG9wOjZweH0uZ0lwWTJie2Rpc3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtk
aXNwbGF5Oi13ZWJraXQtZmxleDtkaXNwbGF5Oi1tcy1mbGV4Ym94O2Rpc3BsYXk6ZmxleDst
bW96LWJveC1vcmllbnQ6dmVydGljYWw7Ym94LW9yaWVudDp2ZXJ0aWNhbDtmbGV4LWRpcmVj
dGlvbjpjb2x1bW47cGFkZGluZzo2cHggMH0uTjJWNmljey1tb3otYm94LWFsaWduOmNlbnRl
cjtib3gtYWxpZ246Y2VudGVyO2FsaWduLWl0ZW1zOmNlbnRlcjtjb2xvcjojNWY2MzY4O2Zv
bnQtc2l6ZToxNHB4fS5scWdyYmZ7Y29sb3I6IzlhYTBhNjtmb250LXNpemU6MTRweH0ublI2
QUpke2JhY2tncm91bmQ6I2ZmZjtjb2xvcjojMWE3M2U4fS5jWWNtMmR7bWFyZ2luLXRvcDou
NWVtfS5jWWNtMmQuRGViV2Fje2Rpc3BsYXk6aW5saW5lfS5ySGpDUHttYXJnaW4tbGVmdDox
NnB4fS5jT3FqdGV7bWFyZ2luLWJvdHRvbTo4cHg7bWFyZ2luLXJpZ2h0OjhweH0udXo0Rkpm
LlJqMk1sZntib3gtZmxleDoxO2ZsZXgtZ3JvdzoxO2ZsZXgtc2hyaW5rOjE7YmFja2dyb3Vu
ZDojZmZmfS51ejRGSmYuUmoyTWxmOmVuYWJsZWR7Y29sb3I6IzVmNjM2OH0ubm82b0ple2Zv
bnQtZmFtaWx5OidHb29nbGUgU2FucycsUm9ib3RvLEFyaWFsLHNhbnMtc2VyaWY7Zm9udC1z
aXplOjEuNXJlbTtmb250LXdlaWdodDo0MDA7bGluZS1oZWlnaHQ6MnJlbTtjb2xvcjojMjAy
MTI0O21hcmdpbjowO3BhZGRpbmctYm90dG9tOjE2cHh9LmN3M2hXYnstbW96LWJvcmRlci1y
YWRpdXM6NTAlO2JvcmRlci1yYWRpdXM6NTAlO2hlaWdodDoyMHB4O21hcmdpbi1yaWdodDo4
cHg7d2lkdGg6MjBweH0ubUZadEVme21hcmdpbjowIC00MHB4fS51aWtEeWZ7YmFja2dyb3Vu
ZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9h
Y2NvdW50c2V0dGluZ3Nub3RpZmljYXRpb25zL2ltYWdlcy9zcHJpdGVzL2hkcGktYWRhNzdh
ZThiNWY5ZGNhY2I1M2FiMWY1ZGYyNjcwMDYucG5nKSAwIC0xMzRweDtiYWNrZ3JvdW5kLXNp
emU6NDUwcHggMzE5cHg7d2lkdGg6NDUwcHg7aGVpZ2h0OjE4NXB4O21hcmdpbjowIGF1dG87
em9vbTouOX0uS2ZId0d7ZGlzcGxheTotd2Via2l0LWJveDtkaXNwbGF5Oi1tb3otYm94O2Rp
c3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6LW1zLWZsZXhib3g7ZGlzcGxheTpmbGV4Oy1t
b3otYm94LW9yaWVudDpob3Jpem9udGFsO2JveC1vcmllbnQ6aG9yaXpvbnRhbDtmbGV4LWRp
cmVjdGlvbjpyb3c7LW1vei11c2VyLXNlbGVjdDpub25lO3BhZGRpbmctYm90dG9tOjI4cHg7
cGFkZGluZy10b3A6MTZweH0uczNPeEpme2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRw
czovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzbm90aWZp
Y2F0aW9ucy9pbWFnZXMvc3ByaXRlcy9oZHBpLWFkYTc3YWU4YjVmOWRjYWNiNTNhYjFmNWRm
MjY3MDA2LnBuZykgMCAwO2JhY2tncm91bmQtc2l6ZTo0NTBweCAzMTlweDt3aWR0aDozNnB4
O2hlaWdodDozNnB4O2JveC1mbGV4OjA7ZmxleC1ncm93OjA7ZmxleC1zaHJpbms6MH0uZlRy
M1ple3BhZGRpbmctbGVmdDo4cHh9LkdrM2p4YntsZXR0ZXItc3BhY2luZzouMDE3ODU3MTRl
bTtmb250LWZhbWlseTpSb2JvdG8sQXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6Ljg3NXJl
bTtmb250LXdlaWdodDo1MDA7bGluZS1oZWlnaHQ6MS4yNXJlbX0ua2oyODZke2NvbG9yOiM1
ZjYzNjg7Zm9udC1zaXplOjE0cHh9LklBZ3g1YntkaXNwbGF5Oi13ZWJraXQtYm94O2Rpc3Bs
YXk6LW1vei1ib3g7ZGlzcGxheTotd2Via2l0LWZsZXg7ZGlzcGxheTotbXMtZmxleGJveDtk
aXNwbGF5OmZsZXg7LW1vei1ib3gtYWxpZ246Y2VudGVyO2JveC1hbGlnbjpjZW50ZXI7YWxp
Z24taXRlbXM6Y2VudGVyOy1tb3otYm94LW9yaWVudDpob3Jpem9udGFsO2JveC1vcmllbnQ6
aG9yaXpvbnRhbDtmbGV4LWRpcmVjdGlvbjpyb3c7bWFyZ2luLXRvcDotOHB4O3BhZGRpbmct
Ym90dG9tOjI0cHh9LkhNZEF1Y3tkaXNwbGF5Oi13ZWJraXQtYm94O2Rpc3BsYXk6LW1vei1i
b3g7ZGlzcGxheTotd2Via2l0LWZsZXg7ZGlzcGxheTotbXMtZmxleGJveDtkaXNwbGF5OmZs
ZXg7LW1vei1ib3gtb3JpZW50OnZlcnRpY2FsO2JveC1vcmllbnQ6dmVydGljYWw7ZmxleC1k
aXJlY3Rpb246Y29sdW1uO2JveC1mbGV4OjE7ZmxleC1ncm93OjE7cGFkZGluZzozNnB4IDQw
cHh9LkhNZEF1Yy5QS2tzeGZ7cGFkZGluZy10b3A6MjRweH0ua2V2NUlmLC5VM2VpRGN7Zm9u
dC1zaXplOjE4cHh9LmtldjVJZntjb2xvcjojMTg4MDM4fS5VM2VpRGN7Y29sb3I6I2M1MjIx
Zn0udU9sZ1dje2NvbG9yOiNmZmY7dmVydGljYWwtYWxpZ246bWlkZGxlfS55RlRwc2Uua3NC
akVje3BhZGRpbmc6MDttaW4td2lkdGg6MH0uaG1BelNle2JhY2tncm91bmQtY29sb3I6I2Q5
MzAyNX0uQXFDdklme2NvbG9yOiNmZmZ9LmdickxHZSAuY0gzYnpie3ZlcnRpY2FsLWFsaWdu
Om1pZGRsZX0uZ2JyTEdlIC5lWmNCcGV7Zm9udC1zaXplOjIwcHh9LmhqaGYyZSAudkJVbVpi
e2Rpc3BsYXk6bm9uZX0ubm1IMVRiIC5oamhmMmUgLnZCVW1aYntkaXNwbGF5OmluaXRpYWx9
QG1lZGlhIChtaW4td2lkdGg6NDgwcHgpey5uekNadWR7bWFyZ2luLXRvcDphdXRvfS51ejRG
SmYuUmoyTWxme21pbi13aWR0aDotbW96LWNhbGMoNTAlIC0gOHB4KTttaW4td2lkdGg6Y2Fs
Yyg1MCUgLSA4cHgpfX1AbWVkaWEgKG1heC13aWR0aDo0NzlweCl7LkhNZEF1Y3twYWRkaW5n
OjM2cHggMjRweH0ubUZadEVme21hcmdpbjowIC0yNHB4fX1AbWVkaWEgb25seSBzY3JlZW4g
YW5kIChtaW4td2lkdGg6Mzg2cHgpIGFuZCAobWF4LXdpZHRoOjQyNXB4KXsudWlrRHlme3pv
b206Ljh9fUBtZWRpYSBvbmx5IHNjcmVlbiBhbmQgKG1pbi13aWR0aDozNDZweCkgYW5kICht
YXgtd2lkdGg6Mzg1cHgpey51aWtEeWZ7em9vbTouN319QG1lZGlhIG9ubHkgc2NyZWVuIGFu
ZCAobWF4LXdpZHRoOjM0NXB4KXsudWlrRHlme3pvb206LjZ9fS5samQ4RmVbZGF0YS1kZXZp
Y2UtdHlwZT0nMCdde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3Rh
dGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1h
Z2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfNzItNjA1MmU4MDNmZGFjOWIxODMxM2Q3
MWJiZWRjZGVlY2MucG5nKSAwIC02NTdweDtiYWNrZ3JvdW5kLXNpemU6NzJweCAxMTY3cHg7
d2lkdGg6NzJweDtoZWlnaHQ6NzJweH0ubGpkOEZlW2RhdGEtZGV2aWNlLXR5cGU9JzEnXXti
YWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRp
dHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2Rl
dmljZXNfcmVhbGlzdGljXzcyLTYwNTJlODAzZmRhYzliMTgzMTNkNzFiYmVkY2RlZWNjLnBu
ZykgMCAtNDM4cHg7YmFja2dyb3VuZC1zaXplOjcycHggMTE2N3B4O3dpZHRoOjcycHg7aGVp
Z2h0OjcycHh9LmxqZDhGZVtkYXRhLWRldmljZS10eXBlPScyJ117YmFja2dyb3VuZDpuby1y
ZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50
c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3Rp
Y183Mi02MDUyZTgwM2ZkYWM5YjE4MzEzZDcxYmJlZGNkZWVjYy5wbmcpIDAgLTEwOTVweDti
YWNrZ3JvdW5kLXNpemU6NzJweCAxMTY3cHg7d2lkdGg6NzJweDtoZWlnaHQ6NzJweH0ubGpk
OEZlW2RhdGEtZGV2aWNlLXR5cGU9JzMnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0
cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3Vy
aXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzcyLTYwNTJlODAz
ZmRhYzliMTgzMTNkNzFiYmVkY2RlZWNjLnBuZykgMCAtMjE5cHg7YmFja2dyb3VuZC1zaXpl
OjcycHggMTE2N3B4O3dpZHRoOjcycHg7aGVpZ2h0OjcycHh9LmxqZDhGZVtkYXRhLWRldmlj
ZS10eXBlPSc0J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0
aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFn
ZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY183Mi02MDUyZTgwM2ZkYWM5YjE4MzEzZDcx
YmJlZGNkZWVjYy5wbmcpIDAgLTgwM3B4O2JhY2tncm91bmQtc2l6ZTo3MnB4IDExNjdweDt3
aWR0aDo3MnB4O2hlaWdodDo3MnB4fS5samQ4RmVbZGF0YS1kZXZpY2UtdHlwZT0nNSdde2Jh
Y2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0
eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2
aWNlc19yZWFsaXN0aWNfNzItNjA1MmU4MDNmZGFjOWIxODMxM2Q3MWJiZWRjZGVlY2MucG5n
KSAwIC01MTFweDtiYWNrZ3JvdW5kLXNpemU6NzJweCAxMTY3cHg7d2lkdGg6NzJweDtoZWln
aHQ6NzJweH0ubGpkOEZlW2RhdGEtZGV2aWNlLXR5cGU9JzYnXXtiYWNrZ3JvdW5kOm5vLXJl
cGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRz
ZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGlj
XzcyLTYwNTJlODAzZmRhYzliMTgzMTNkNzFiYmVkY2RlZWNjLnBuZykgMCAtNzNweDtiYWNr
Z3JvdW5kLXNpemU6NzJweCAxMTY3cHg7d2lkdGg6NzJweDtoZWlnaHQ6NzJweH0ubGpkOEZl
W2RhdGEtZGV2aWNlLXR5cGU9JzcnXSwubGpkOEZlW2RhdGEtZGV2aWNlLXR5cGU9JzgnXXti
YWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRp
dHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2Rl
dmljZXNfcmVhbGlzdGljXzcyLTYwNTJlODAzZmRhYzliMTgzMTNkNzFiYmVkY2RlZWNjLnBu
ZykgMCAtNzMwcHg7YmFja2dyb3VuZC1zaXplOjcycHggMTE2N3B4O3dpZHRoOjcycHg7aGVp
Z2h0OjcycHh9LmxqZDhGZVtkYXRhLWRldmljZS10eXBlPSc5J117YmFja2dyb3VuZDpuby1y
ZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50
c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3Rp
Y183Mi02MDUyZTgwM2ZkYWM5YjE4MzEzZDcxYmJlZGNkZWVjYy5wbmcpIDAgLTE0NnB4O2Jh
Y2tncm91bmQtc2l6ZTo3MnB4IDExNjdweDt3aWR0aDo3MnB4O2hlaWdodDo3MnB4fS5samQ4
RmVbZGF0YS1kZXZpY2UtdHlwZT0nMTAnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0
cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3Vy
aXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzcyLTYwNTJlODAz
ZmRhYzliMTgzMTNkNzFiYmVkY2RlZWNjLnBuZykgMCAtMzY1cHg7YmFja2dyb3VuZC1zaXpl
OjcycHggMTE2N3B4O3dpZHRoOjcycHg7aGVpZ2h0OjcycHh9LlRCY2dPZHtib3R0b206MTBw
eH0uaFNjamxmW2RhdGEtZGV2aWNlLXR5cGU9JzAnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1
cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5n
c3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzI0LWVl
ZDFkNmFjOTExZjgwMjA2ODI0MTFhNWNmZDYzNmIxLnBuZykgMCAtMjI1cHg7YmFja2dyb3Vu
ZC1zaXplOjI0cHggMzk5cHg7d2lkdGg6MjRweDtoZWlnaHQ6MjRweH0uaFNjamxmW2RhdGEt
ZGV2aWNlLXR5cGU9JzEnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cu
Z3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9u
L2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzI0LWVlZDFkNmFjOTExZjgwMjA2
ODI0MTFhNWNmZDYzNmIxLnBuZykgMCAtMTUwcHg7YmFja2dyb3VuZC1zaXplOjI0cHggMzk5
cHg7d2lkdGg6MjRweDtoZWlnaHQ6MjRweH0uaFNjamxmW2RhdGEtZGV2aWNlLXR5cGU9JzIn
XXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRl
bnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVz
L2RldmljZXNfcmVhbGlzdGljXzI0LWVlZDFkNmFjOTExZjgwMjA2ODI0MTFhNWNmZDYzNmIx
LnBuZykgMCAtMzc1cHg7YmFja2dyb3VuZC1zaXplOjI0cHggMzk5cHg7d2lkdGg6MjRweDto
ZWlnaHQ6MjRweH0uaFNjamxmW2RhdGEtZGV2aWNlLXR5cGU9JzMnXXtiYWNrZ3JvdW5kOm5v
LXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291
bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlz
dGljXzI0LWVlZDFkNmFjOTExZjgwMjA2ODI0MTFhNWNmZDYzNmIxLnBuZykgMCAtNzVweDti
YWNrZ3JvdW5kLXNpemU6MjRweCAzOTlweDt3aWR0aDoyNHB4O2hlaWdodDoyNHB4fS5oU2Nq
bGZbZGF0YS1kZXZpY2UtdHlwZT0nNCdde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRw
czovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJp
dHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfMjQtZWVkMWQ2YWM5
MTFmODAyMDY4MjQxMWE1Y2ZkNjM2YjEucG5nKSAwIC0yNzVweDtiYWNrZ3JvdW5kLXNpemU6
MjRweCAzOTlweDt3aWR0aDoyNHB4O2hlaWdodDoyNHB4fS5oU2NqbGZbZGF0YS1kZXZpY2Ut
dHlwZT0nNSdde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGlj
LmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2Vz
L3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfMjQtZWVkMWQ2YWM5MTFmODAyMDY4MjQxMWE1
Y2ZkNjM2YjEucG5nKSAwIC0xNzVweDtiYWNrZ3JvdW5kLXNpemU6MjRweCAzOTlweDt3aWR0
aDoyNHB4O2hlaWdodDoyNHB4fS5oU2NqbGZbZGF0YS1kZXZpY2UtdHlwZT0nNidde2JhY2tn
cm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9i
b3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNl
c19yZWFsaXN0aWNfMjQtZWVkMWQ2YWM5MTFmODAyMDY4MjQxMWE1Y2ZkNjM2YjEucG5nKSAw
IC0yNXB4O2JhY2tncm91bmQtc2l6ZToyNHB4IDM5OXB4O3dpZHRoOjI0cHg7aGVpZ2h0OjI0
cHh9LmhTY2psZltkYXRhLWRldmljZS10eXBlPSc3J10sLmhTY2psZltkYXRhLWRldmljZS10
eXBlPSc4J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMu
Y29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMv
c3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY18yNC1lZWQxZDZhYzkxMWY4MDIwNjgyNDExYTVj
ZmQ2MzZiMS5wbmcpIDAgLTI1MHB4O2JhY2tncm91bmQtc2l6ZToyNHB4IDM5OXB4O3dpZHRo
OjI0cHg7aGVpZ2h0OjI0cHh9LmhTY2psZltkYXRhLWRldmljZS10eXBlPSc5J117YmFja2dy
b3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2Jv
cS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2Vz
X3JlYWxpc3RpY18yNC1lZWQxZDZhYzkxMWY4MDIwNjgyNDExYTVjZmQ2MzZiMS5wbmcpIDAg
LTUwcHg7YmFja2dyb3VuZC1zaXplOjI0cHggMzk5cHg7d2lkdGg6MjRweDtoZWlnaHQ6MjRw
eH0uaFNjamxmW2RhdGEtZGV2aWNlLXR5cGU9JzEwJ117YmFja2dyb3VuZDpuby1yZXBlYXQg
dXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGlu
Z3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY18yNC1l
ZWQxZDZhYzkxMWY4MDIwNjgyNDExYTVjZmQ2MzZiMS5wbmcpIDAgLTEyNXB4O2JhY2tncm91
bmQtc2l6ZToyNHB4IDM5OXB4O3dpZHRoOjI0cHg7aGVpZ2h0OjI0cHh9LmhraDM3ZXtib3R0
b206NHB4fS5LUDUzWWNbZGF0YS1kZXZpY2UtdHlwZT0nMCdde2JhY2tncm91bmQ6bm8tcmVw
ZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNl
dHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNf
NDgtN2U0ZTExZjQwM2UyOGU4NTI2NWIxNDhmZmM4MjhkNTcucG5nKSAwIC00NDFweDtiYWNr
Z3JvdW5kLXNpemU6NDhweCA3ODNweDt3aWR0aDo0OHB4O2hlaWdodDo0OHB4fS5LUDUzWWNb
ZGF0YS1kZXZpY2UtdHlwZT0nMSdde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczov
L3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHlj
b21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfNDgtN2U0ZTExZjQwM2Uy
OGU4NTI2NWIxNDhmZmM4MjhkNTcucG5nKSAwIC0yOTRweDtiYWNrZ3JvdW5kLXNpemU6NDhw
eCA3ODNweDt3aWR0aDo0OHB4O2hlaWdodDo0OHB4fS5LUDUzWWNbZGF0YS1kZXZpY2UtdHlw
ZT0nMidde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNv
bS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nw
cml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfNDgtN2U0ZTExZjQwM2UyOGU4NTI2NWIxNDhmZmM4
MjhkNTcucG5nKSAwIC03MzVweDtiYWNrZ3JvdW5kLXNpemU6NDhweCA3ODNweDt3aWR0aDo0
OHB4O2hlaWdodDo0OHB4fS5LUDUzWWNbZGF0YS1kZXZpY2UtdHlwZT0nMydde2JhY2tncm91
bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3Ev
YWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19y
ZWFsaXN0aWNfNDgtN2U0ZTExZjQwM2UyOGU4NTI2NWIxNDhmZmM4MjhkNTcucG5nKSAwIC0x
NDdweDtiYWNrZ3JvdW5kLXNpemU6NDhweCA3ODNweDt3aWR0aDo0OHB4O2hlaWdodDo0OHB4
fS5LUDUzWWNbZGF0YS1kZXZpY2UtdHlwZT0nNCdde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVy
bChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdz
c2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfNDgtN2U0
ZTExZjQwM2UyOGU4NTI2NWIxNDhmZmM4MjhkNTcucG5nKSAwIC01MzlweDtiYWNrZ3JvdW5k
LXNpemU6NDhweCA3ODNweDt3aWR0aDo0OHB4O2hlaWdodDo0OHB4fS5LUDUzWWNbZGF0YS1k
ZXZpY2UtdHlwZT0nNSdde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5n
c3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24v
aW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfNDgtN2U0ZTExZjQwM2UyOGU4NTI2
NWIxNDhmZmM4MjhkNTcucG5nKSAwIC0zNDNweDtiYWNrZ3JvdW5kLXNpemU6NDhweCA3ODNw
eDt3aWR0aDo0OHB4O2hlaWdodDo0OHB4fS5LUDUzWWNbZGF0YS1kZXZpY2UtdHlwZT0nNidd
e2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVu
dGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMv
ZGV2aWNlc19yZWFsaXN0aWNfNDgtN2U0ZTExZjQwM2UyOGU4NTI2NWIxNDhmZmM4MjhkNTcu
cG5nKSAwIC00OXB4O2JhY2tncm91bmQtc2l6ZTo0OHB4IDc4M3B4O3dpZHRoOjQ4cHg7aGVp
Z2h0OjQ4cHh9LktQNTNZY1tkYXRhLWRldmljZS10eXBlPSc3J10sLktQNTNZY1tkYXRhLWRl
dmljZS10eXBlPSc4J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3Lmdz
dGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9p
bWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY180OC03ZTRlMTFmNDAzZTI4ZTg1MjY1
YjE0OGZmYzgyOGQ1Ny5wbmcpIDAgLTQ5MHB4O2JhY2tncm91bmQtc2l6ZTo0OHB4IDc4M3B4
O3dpZHRoOjQ4cHg7aGVpZ2h0OjQ4cHh9LktQNTNZY1tkYXRhLWRldmljZS10eXBlPSc5J117
YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50
aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9k
ZXZpY2VzX3JlYWxpc3RpY180OC03ZTRlMTFmNDAzZTI4ZTg1MjY1YjE0OGZmYzgyOGQ1Ny5w
bmcpIDAgLTk4cHg7YmFja2dyb3VuZC1zaXplOjQ4cHggNzgzcHg7d2lkdGg6NDhweDtoZWln
aHQ6NDhweH0uS1A1M1ljW2RhdGEtZGV2aWNlLXR5cGU9JzEwJ117YmFja2dyb3VuZDpuby1y
ZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50
c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3Rp
Y180OC03ZTRlMTFmNDAzZTI4ZTg1MjY1YjE0OGZmYzgyOGQ1Ny5wbmcpIDAgLTI0NXB4O2Jh
Y2tncm91bmQtc2l6ZTo0OHB4IDc4M3B4O3dpZHRoOjQ4cHg7aGVpZ2h0OjQ4cHh9Lml2dTVv
ZHtib3R0b206NnB4fS5pbXRCVVtkYXRhLWRldmljZS10eXBlPScwJ117YmFja2dyb3VuZDpu
by1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2Nv
dW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxp
c3RpY18zNi1jNmRmNzQ2ZmVlM2ZiNjI1NzA3MTI3NzhmYjE5MDhkYS5wbmcpIDAgLTMzM3B4
O2JhY2tncm91bmQtc2l6ZTozNnB4IDU5MXB4O3dpZHRoOjM2cHg7aGVpZ2h0OjM2cHh9Lmlt
dEJVW2RhdGEtZGV2aWNlLXR5cGU9JzEnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0
cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3Vy
aXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzM2LWM2ZGY3NDZm
ZWUzZmI2MjU3MDcxMjc3OGZiMTkwOGRhLnBuZykgMCAtMjIycHg7YmFja2dyb3VuZC1zaXpl
OjM2cHggNTkxcHg7d2lkdGg6MzZweDtoZWlnaHQ6MzZweH0uaW10QlVbZGF0YS1kZXZpY2Ut
dHlwZT0nMidde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGlj
LmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2Vz
L3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfMzYtYzZkZjc0NmZlZTNmYjYyNTcwNzEyNzc4
ZmIxOTA4ZGEucG5nKSAwIC01NTVweDtiYWNrZ3JvdW5kLXNpemU6MzZweCA1OTFweDt3aWR0
aDozNnB4O2hlaWdodDozNnB4fS5pbXRCVVtkYXRhLWRldmljZS10eXBlPSczJ117YmFja2dy
b3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2Jv
cS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2Vz
X3JlYWxpc3RpY18zNi1jNmRmNzQ2ZmVlM2ZiNjI1NzA3MTI3NzhmYjE5MDhkYS5wbmcpIDAg
LTExMXB4O2JhY2tncm91bmQtc2l6ZTozNnB4IDU5MXB4O3dpZHRoOjM2cHg7aGVpZ2h0OjM2
cHh9LmltdEJVW2RhdGEtZGV2aWNlLXR5cGU9JzQnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1
cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5n
c3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzM2LWM2
ZGY3NDZmZWUzZmI2MjU3MDcxMjc3OGZiMTkwOGRhLnBuZykgMCAtNDA3cHg7YmFja2dyb3Vu
ZC1zaXplOjM2cHggNTkxcHg7d2lkdGg6MzZweDtoZWlnaHQ6MzZweH0uaW10QlVbZGF0YS1k
ZXZpY2UtdHlwZT0nNSdde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5n
c3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24v
aW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfMzYtYzZkZjc0NmZlZTNmYjYyNTcw
NzEyNzc4ZmIxOTA4ZGEucG5nKSAwIC0yNTlweDtiYWNrZ3JvdW5kLXNpemU6MzZweCA1OTFw
eDt3aWR0aDozNnB4O2hlaWdodDozNnB4fS5pbXRCVVtkYXRhLWRldmljZS10eXBlPSc2J117
YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50
aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9k
ZXZpY2VzX3JlYWxpc3RpY18zNi1jNmRmNzQ2ZmVlM2ZiNjI1NzA3MTI3NzhmYjE5MDhkYS5w
bmcpIDAgLTM3cHg7YmFja2dyb3VuZC1zaXplOjM2cHggNTkxcHg7d2lkdGg6MzZweDtoZWln
aHQ6MzZweH0uaW10QlVbZGF0YS1kZXZpY2UtdHlwZT0nNyddLC5pbXRCVVtkYXRhLWRldmlj
ZS10eXBlPSc4J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0
aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFn
ZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY18zNi1jNmRmNzQ2ZmVlM2ZiNjI1NzA3MTI3
NzhmYjE5MDhkYS5wbmcpIDAgLTM3MHB4O2JhY2tncm91bmQtc2l6ZTozNnB4IDU5MXB4O3dp
ZHRoOjM2cHg7aGVpZ2h0OjM2cHh9LmltdEJVW2RhdGEtZGV2aWNlLXR5cGU9JzknXXtiYWNr
Z3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkv
Ym9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2Rldmlj
ZXNfcmVhbGlzdGljXzM2LWM2ZGY3NDZmZWUzZmI2MjU3MDcxMjc3OGZiMTkwOGRhLnBuZykg
MCAtNzRweDtiYWNrZ3JvdW5kLXNpemU6MzZweCA1OTFweDt3aWR0aDozNnB4O2hlaWdodDoz
NnB4fS5pbXRCVVtkYXRhLWRldmljZS10eXBlPScxMCdde2JhY2tncm91bmQ6bm8tcmVwZWF0
IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRp
bmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfMzYt
YzZkZjc0NmZlZTNmYjYyNTcwNzEyNzc4ZmIxOTA4ZGEucG5nKSAwIC0xODVweDtiYWNrZ3Jv
dW5kLXNpemU6MzZweCA1OTFweDt3aWR0aDozNnB4O2hlaWdodDozNnB4fS5hdEkxWmV7Ym90
dG9tOjRweH0uZTA0Vmxke2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5n
c3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24v
aW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfMzYtYzZkZjc0NmZlZTNmYjYyNTcw
NzEyNzc4ZmIxOTA4ZGEucG5nKSAwIC0zMzNweDtiYWNrZ3JvdW5kLXNpemU6MzZweCA1OTFw
eDt3aWR0aDozNnB4O2hlaWdodDozNnB4fS5lMDRWbGRbZGF0YS1mb3JtLWZhY3Rvcj0nMSdd
e2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVu
dGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMv
ZGV2aWNlc19yZWFsaXN0aWNfMzYtYzZkZjc0NmZlZTNmYjYyNTcwNzEyNzc4ZmIxOTA4ZGEu
cG5nKSAwIC00ODFweDtiYWNrZ3JvdW5kLXNpemU6MzZweCA1OTFweDt3aWR0aDozNnB4O2hl
aWdodDozNnB4fS5lMDRWbGRbZGF0YS1mb3JtLWZhY3Rvcj0nMidde2JhY2tncm91bmQ6bm8t
cmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3Vu
dHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0
aWNfMzYtYzZkZjc0NmZlZTNmYjYyNTcwNzEyNzc4ZmIxOTA4ZGEucG5nKSAwIC0zNzBweDti
YWNrZ3JvdW5kLXNpemU6MzZweCA1OTFweDt3aWR0aDozNnB4O2hlaWdodDozNnB4fS5lMDRW
bGRbZGF0YS1mb3JtLWZhY3Rvcj0nMydde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRw
czovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJp
dHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfMzYtYzZkZjc0NmZl
ZTNmYjYyNTcwNzEyNzc4ZmIxOTA4ZGEucG5nKSAwIC01MThweDtiYWNrZ3JvdW5kLXNpemU6
MzZweCA1OTFweDt3aWR0aDozNnB4O2hlaWdodDozNnB4fS5lMDRWbGRbZGF0YS1vcz0nMSdd
W2RhdGEtZm9ybS1mYWN0b3I9JzEnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6
Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5
Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzM2LWM2ZGY3NDZmZWUz
ZmI2MjU3MDcxMjc3OGZiMTkwOGRhLnBuZykgMCAtMTExcHg7YmFja2dyb3VuZC1zaXplOjM2
cHggNTkxcHg7d2lkdGg6MzZweDtoZWlnaHQ6MzZweH0uZTA0VmxkW2RhdGEtb3M9JzInXVtk
YXRhLWZvcm0tZmFjdG9yPScxJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8v
d3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNv
bW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY18zNi1jNmRmNzQ2ZmVlM2Zi
NjI1NzA3MTI3NzhmYjE5MDhkYS5wbmcpIDAgLTI1OXB4O2JhY2tncm91bmQtc2l6ZTozNnB4
IDU5MXB4O3dpZHRoOjM2cHg7aGVpZ2h0OjM2cHh9LmUwNFZsZFtkYXRhLW9zPSczJ11bZGF0
YS1mb3JtLWZhY3Rvcj0nMSdde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3
dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21t
b24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfMzYtYzZkZjc0NmZlZTNmYjYy
NTcwNzEyNzc4ZmIxOTA4ZGEucG5nKSAwIC00MDdweDtiYWNrZ3JvdW5kLXNpemU6MzZweCA1
OTFweDt3aWR0aDozNnB4O2hlaWdodDozNnB4fS5lMDRWbGRbZGF0YS1vcz0nNCddW2RhdGEt
Zm9ybS1mYWN0b3I9JzInXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cu
Z3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9u
L2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzM2LWM2ZGY3NDZmZWUzZmI2MjU3
MDcxMjc3OGZiMTkwOGRhLnBuZykgMCAtMjIycHg7YmFja2dyb3VuZC1zaXplOjM2cHggNTkx
cHg7d2lkdGg6MzZweDtoZWlnaHQ6MzZweH0uZTA0VmxkW2RhdGEtb3M9JzQnXVtkYXRhLWZv
cm0tZmFjdG9yPSczJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3Lmdz
dGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9p
bWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY18zNi1jNmRmNzQ2ZmVlM2ZiNjI1NzA3
MTI3NzhmYjE5MDhkYS5wbmcpIDAgLTc0cHg7YmFja2dyb3VuZC1zaXplOjM2cHggNTkxcHg7
d2lkdGg6MzZweDtoZWlnaHQ6MzZweH0uZTA0VmxkW2RhdGEtb3M9JzUnXVtkYXRhLWZvcm0t
ZmFjdG9yPScyJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0
aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFn
ZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY18zNi1jNmRmNzQ2ZmVlM2ZiNjI1NzA3MTI3
NzhmYjE5MDhkYS5wbmcpIDAgLTU1NXB4O2JhY2tncm91bmQtc2l6ZTozNnB4IDU5MXB4O3dp
ZHRoOjM2cHg7aGVpZ2h0OjM2cHh9LmUwNFZsZFtkYXRhLW9zPSc1J11bZGF0YS1mb3JtLWZh
Y3Rvcj0nMydde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGlj
LmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2Vz
L3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfMzYtYzZkZjc0NmZlZTNmYjYyNTcwNzEyNzc4
ZmIxOTA4ZGEucG5nKSAwIC0xODVweDtiYWNrZ3JvdW5kLXNpemU6MzZweCA1OTFweDt3aWR0
aDozNnB4O2hlaWdodDozNnB4fS5lMDRWbGRbZGF0YS1vcz0nNidde2JhY2tncm91bmQ6bm8t
cmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3Vu
dHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0
aWNfMzYtYzZkZjc0NmZlZTNmYjYyNTcwNzEyNzc4ZmIxOTA4ZGEucG5nKSAwIC0zN3B4O2Jh
Y2tncm91bmQtc2l6ZTozNnB4IDU5MXB4O3dpZHRoOjM2cHg7aGVpZ2h0OjM2cHh9LmUwNFZs
ZFtkYXRhLWZvcm0tZmFjdG9yPSc0J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBz
Oi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0
eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY18zNi1jNmRmNzQ2ZmVl
M2ZiNjI1NzA3MTI3NzhmYjE5MDhkYS5wbmcpIDAgLTE0OHB4O2JhY2tncm91bmQtc2l6ZToz
NnB4IDU5MXB4O3dpZHRoOjM2cHg7aGVpZ2h0OjM2cHh9LmUwNFZsZFtkYXRhLWZvcm0tZmFj
dG9yPSc1J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMu
Y29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMv
c3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY18zNi1jNmRmNzQ2ZmVlM2ZiNjI1NzA3MTI3Nzhm
YjE5MDhkYS5wbmcpIDAgMDtiYWNrZ3JvdW5kLXNpemU6MzZweCA1OTFweDt3aWR0aDozNnB4
O2hlaWdodDozNnB4fS5lMDRWbGRbZGF0YS1mb3JtLWZhY3Rvcj0nNidde2JhY2tncm91bmQ6
bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNj
b3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFs
aXN0aWNfMzYtYzZkZjc0NmZlZTNmYjYyNTcwNzEyNzc4ZmIxOTA4ZGEucG5nKSAwIC00NDRw
eDtiYWNrZ3JvdW5kLXNpemU6MzZweCA1OTFweDt3aWR0aDozNnB4O2hlaWdodDozNnB4fS5l
MDRWbGRbZGF0YS1mb3JtLWZhY3Rvcj0nNydde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybCho
dHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2Vj
dXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfMzYtYzZkZjc0
NmZlZTNmYjYyNTcwNzEyNzc4ZmIxOTA4ZGEucG5nKSAwIC0yOTZweDtiYWNrZ3JvdW5kLXNp
emU6MzZweCA1OTFweDt3aWR0aDozNnB4O2hlaWdodDozNnB4fS53QkxJa2J7YmFja2dyb3Vu
ZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9h
Y2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3Jl
YWxpc3RpY180OC03ZTRlMTFmNDAzZTI4ZTg1MjY1YjE0OGZmYzgyOGQ1Ny5wbmcpIDAgLTQ0
MXB4O2JhY2tncm91bmQtc2l6ZTo0OHB4IDc4M3B4O3dpZHRoOjQ4cHg7aGVpZ2h0OjQ4cHh9
LndCTElrYltkYXRhLWZvcm0tZmFjdG9yPScxJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJs
KGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3Nz
ZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY180OC03ZTRl
MTFmNDAzZTI4ZTg1MjY1YjE0OGZmYzgyOGQ1Ny5wbmcpIDAgLTYzN3B4O2JhY2tncm91bmQt
c2l6ZTo0OHB4IDc4M3B4O3dpZHRoOjQ4cHg7aGVpZ2h0OjQ4cHh9LndCTElrYltkYXRhLWZv
cm0tZmFjdG9yPScyJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3Lmdz
dGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9p
bWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY180OC03ZTRlMTFmNDAzZTI4ZTg1MjY1
YjE0OGZmYzgyOGQ1Ny5wbmcpIDAgLTQ5MHB4O2JhY2tncm91bmQtc2l6ZTo0OHB4IDc4M3B4
O3dpZHRoOjQ4cHg7aGVpZ2h0OjQ4cHh9LndCTElrYltkYXRhLWZvcm0tZmFjdG9yPSczJ117
YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50
aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9k
ZXZpY2VzX3JlYWxpc3RpY180OC03ZTRlMTFmNDAzZTI4ZTg1MjY1YjE0OGZmYzgyOGQ1Ny5w
bmcpIDAgLTY4NnB4O2JhY2tncm91bmQtc2l6ZTo0OHB4IDc4M3B4O3dpZHRoOjQ4cHg7aGVp
Z2h0OjQ4cHh9LndCTElrYltkYXRhLW9zPScxJ11bZGF0YS1mb3JtLWZhY3Rvcj0nMSdde2Jh
Y2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0
eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2
aWNlc19yZWFsaXN0aWNfNDgtN2U0ZTExZjQwM2UyOGU4NTI2NWIxNDhmZmM4MjhkNTcucG5n
KSAwIC0xNDdweDtiYWNrZ3JvdW5kLXNpemU6NDhweCA3ODNweDt3aWR0aDo0OHB4O2hlaWdo
dDo0OHB4fS53QkxJa2JbZGF0YS1vcz0nMiddW2RhdGEtZm9ybS1mYWN0b3I9JzEnXXtiYWNr
Z3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkv
Ym9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2Rldmlj
ZXNfcmVhbGlzdGljXzQ4LTdlNGUxMWY0MDNlMjhlODUyNjViMTQ4ZmZjODI4ZDU3LnBuZykg
MCAtMzQzcHg7YmFja2dyb3VuZC1zaXplOjQ4cHggNzgzcHg7d2lkdGg6NDhweDtoZWlnaHQ6
NDhweH0ud0JMSWtiW2RhdGEtb3M9JzMnXVtkYXRhLWZvcm0tZmFjdG9yPScxJ117YmFja2dy
b3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2Jv
cS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2Vz
X3JlYWxpc3RpY180OC03ZTRlMTFmNDAzZTI4ZTg1MjY1YjE0OGZmYzgyOGQ1Ny5wbmcpIDAg
LTUzOXB4O2JhY2tncm91bmQtc2l6ZTo0OHB4IDc4M3B4O3dpZHRoOjQ4cHg7aGVpZ2h0OjQ4
cHh9LndCTElrYltkYXRhLW9zPSc0J11bZGF0YS1mb3JtLWZhY3Rvcj0nMidde2JhY2tncm91
bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3Ev
YWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19y
ZWFsaXN0aWNfNDgtN2U0ZTExZjQwM2UyOGU4NTI2NWIxNDhmZmM4MjhkNTcucG5nKSAwIC0y
OTRweDtiYWNrZ3JvdW5kLXNpemU6NDhweCA3ODNweDt3aWR0aDo0OHB4O2hlaWdodDo0OHB4
fS53QkxJa2JbZGF0YS1vcz0nNCddW2RhdGEtZm9ybS1mYWN0b3I9JzMnXXtiYWNrZ3JvdW5k
Om5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2Fj
Y291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVh
bGlzdGljXzQ4LTdlNGUxMWY0MDNlMjhlODUyNjViMTQ4ZmZjODI4ZDU3LnBuZykgMCAtOThw
eDtiYWNrZ3JvdW5kLXNpemU6NDhweCA3ODNweDt3aWR0aDo0OHB4O2hlaWdodDo0OHB4fS53
QkxJa2JbZGF0YS1vcz0nNSddW2RhdGEtZm9ybS1mYWN0b3I9JzInXXtiYWNrZ3JvdW5kOm5v
LXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291
bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlz
dGljXzQ4LTdlNGUxMWY0MDNlMjhlODUyNjViMTQ4ZmZjODI4ZDU3LnBuZykgMCAtNzM1cHg7
YmFja2dyb3VuZC1zaXplOjQ4cHggNzgzcHg7d2lkdGg6NDhweDtoZWlnaHQ6NDhweH0ud0JM
SWtiW2RhdGEtb3M9JzUnXVtkYXRhLWZvcm0tZmFjdG9yPSczJ117YmFja2dyb3VuZDpuby1y
ZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50
c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3Rp
Y180OC03ZTRlMTFmNDAzZTI4ZTg1MjY1YjE0OGZmYzgyOGQ1Ny5wbmcpIDAgLTI0NXB4O2Jh
Y2tncm91bmQtc2l6ZTo0OHB4IDc4M3B4O3dpZHRoOjQ4cHg7aGVpZ2h0OjQ4cHh9LndCTElr
YltkYXRhLW9zPSc2J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3Lmdz
dGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9p
bWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY180OC03ZTRlMTFmNDAzZTI4ZTg1MjY1
YjE0OGZmYzgyOGQ1Ny5wbmcpIDAgLTQ5cHg7YmFja2dyb3VuZC1zaXplOjQ4cHggNzgzcHg7
d2lkdGg6NDhweDtoZWlnaHQ6NDhweH0ud0JMSWtiW2RhdGEtZm9ybS1mYWN0b3I9JzQnXXti
YWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRp
dHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2Rl
dmljZXNfcmVhbGlzdGljXzQ4LTdlNGUxMWY0MDNlMjhlODUyNjViMTQ4ZmZjODI4ZDU3LnBu
ZykgMCAtMTk2cHg7YmFja2dyb3VuZC1zaXplOjQ4cHggNzgzcHg7d2lkdGg6NDhweDtoZWln
aHQ6NDhweH0ud0JMSWtiW2RhdGEtZm9ybS1mYWN0b3I9JzUnXXtiYWNrZ3JvdW5kOm5vLXJl
cGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRz
ZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGlj
XzQ4LTdlNGUxMWY0MDNlMjhlODUyNjViMTQ4ZmZjODI4ZDU3LnBuZykgMCAwO2JhY2tncm91
bmQtc2l6ZTo0OHB4IDc4M3B4O3dpZHRoOjQ4cHg7aGVpZ2h0OjQ4cHh9LndCTElrYltkYXRh
LWZvcm0tZmFjdG9yPSc2J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3
LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1v
bi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY180OC03ZTRlMTFmNDAzZTI4ZTg1
MjY1YjE0OGZmYzgyOGQ1Ny5wbmcpIDAgLTU4OHB4O2JhY2tncm91bmQtc2l6ZTo0OHB4IDc4
M3B4O3dpZHRoOjQ4cHg7aGVpZ2h0OjQ4cHh9LndCTElrYltkYXRhLWZvcm0tZmFjdG9yPSc3
J117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lk
ZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRl
cy9kZXZpY2VzX3JlYWxpc3RpY180OC03ZTRlMTFmNDAzZTI4ZTg1MjY1YjE0OGZmYzgyOGQ1
Ny5wbmcpIDAgLTM5MnB4O2JhY2tncm91bmQtc2l6ZTo0OHB4IDc4M3B4O3dpZHRoOjQ4cHg7
aGVpZ2h0OjQ4cHh9LkVNVDV6YntiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93
d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29t
bW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzcyLTYwNTJlODAzZmRhYzli
MTgzMTNkNzFiYmVkY2RlZWNjLnBuZykgMCAtNjU3cHg7YmFja2dyb3VuZC1zaXplOjcycHgg
MTE2N3B4O3dpZHRoOjcycHg7aGVpZ2h0OjcycHh9LkVNVDV6YltkYXRhLWZvcm0tZmFjdG9y
PScxJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0dHBzOi8vd3d3LmdzdGF0aWMuY29t
L2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1cml0eWNvbW1vbi9pbWFnZXMvc3By
aXRlcy9kZXZpY2VzX3JlYWxpc3RpY183Mi02MDUyZTgwM2ZkYWM5YjE4MzEzZDcxYmJlZGNk
ZWVjYy5wbmcpIDAgLTk0OXB4O2JhY2tncm91bmQtc2l6ZTo3MnB4IDExNjdweDt3aWR0aDo3
MnB4O2hlaWdodDo3MnB4fS5FTVQ1emJbZGF0YS1mb3JtLWZhY3Rvcj0nMidde2JhY2tncm91
bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3Ev
YWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19y
ZWFsaXN0aWNfNzItNjA1MmU4MDNmZGFjOWIxODMxM2Q3MWJiZWRjZGVlY2MucG5nKSAwIC03
MzBweDtiYWNrZ3JvdW5kLXNpemU6NzJweCAxMTY3cHg7d2lkdGg6NzJweDtoZWlnaHQ6NzJw
eH0uRU1UNXpiW2RhdGEtZm9ybS1mYWN0b3I9JzMnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1
cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5n
c3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzcyLTYw
NTJlODAzZmRhYzliMTgzMTNkNzFiYmVkY2RlZWNjLnBuZykgMCAtMTAyMnB4O2JhY2tncm91
bmQtc2l6ZTo3MnB4IDExNjdweDt3aWR0aDo3MnB4O2hlaWdodDo3MnB4fS5FTVQ1emJbZGF0
YS1vcz0nMSddW2RhdGEtZm9ybS1mYWN0b3I9JzEnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1
cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5n
c3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzcyLTYw
NTJlODAzZmRhYzliMTgzMTNkNzFiYmVkY2RlZWNjLnBuZykgMCAtMjE5cHg7YmFja2dyb3Vu
ZC1zaXplOjcycHggMTE2N3B4O3dpZHRoOjcycHg7aGVpZ2h0OjcycHh9LkVNVDV6YltkYXRh
LW9zPScyJ11bZGF0YS1mb3JtLWZhY3Rvcj0nMSdde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVy
bChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdz
c2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfNzItNjA1
MmU4MDNmZGFjOWIxODMxM2Q3MWJiZWRjZGVlY2MucG5nKSAwIC01MTFweDtiYWNrZ3JvdW5k
LXNpemU6NzJweCAxMTY3cHg7d2lkdGg6NzJweDtoZWlnaHQ6NzJweH0uRU1UNXpiW2RhdGEt
b3M9JzMnXVtkYXRhLWZvcm0tZmFjdG9yPScxJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJs
KGh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3Nz
ZWN1cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY183Mi02MDUy
ZTgwM2ZkYWM5YjE4MzEzZDcxYmJlZGNkZWVjYy5wbmcpIDAgLTgwM3B4O2JhY2tncm91bmQt
c2l6ZTo3MnB4IDExNjdweDt3aWR0aDo3MnB4O2hlaWdodDo3MnB4fS5FTVQ1emJbZGF0YS1v
cz0nNCddW2RhdGEtZm9ybS1mYWN0b3I9JzInXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwo
aHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3Nl
Y3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzcyLTYwNTJl
ODAzZmRhYzliMTgzMTNkNzFiYmVkY2RlZWNjLnBuZykgMCAtNDM4cHg7YmFja2dyb3VuZC1z
aXplOjcycHggMTE2N3B4O3dpZHRoOjcycHg7aGVpZ2h0OjcycHh9LkVNVDV6YltkYXRhLW9z
PSc0J11bZGF0YS1mb3JtLWZhY3Rvcj0nMydde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybCho
dHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2Vj
dXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfNzItNjA1MmU4
MDNmZGFjOWIxODMxM2Q3MWJiZWRjZGVlY2MucG5nKSAwIC0xNDZweDtiYWNrZ3JvdW5kLXNp
emU6NzJweCAxMTY3cHg7d2lkdGg6NzJweDtoZWlnaHQ6NzJweH0uRU1UNXpiW2RhdGEtb3M9
JzUnXVtkYXRhLWZvcm0tZmFjdG9yPScyJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0
dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1
cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY183Mi02MDUyZTgw
M2ZkYWM5YjE4MzEzZDcxYmJlZGNkZWVjYy5wbmcpIDAgLTEwOTVweDtiYWNrZ3JvdW5kLXNp
emU6NzJweCAxMTY3cHg7d2lkdGg6NzJweDtoZWlnaHQ6NzJweH0uRU1UNXpiW2RhdGEtb3M9
JzUnXVtkYXRhLWZvcm0tZmFjdG9yPSczJ117YmFja2dyb3VuZDpuby1yZXBlYXQgdXJsKGh0
dHBzOi8vd3d3LmdzdGF0aWMuY29tL2lkZW50aXR5L2JvcS9hY2NvdW50c2V0dGluZ3NzZWN1
cml0eWNvbW1vbi9pbWFnZXMvc3ByaXRlcy9kZXZpY2VzX3JlYWxpc3RpY183Mi02MDUyZTgw
M2ZkYWM5YjE4MzEzZDcxYmJlZGNkZWVjYy5wbmcpIDAgLTM2NXB4O2JhY2tncm91bmQtc2l6
ZTo3MnB4IDExNjdweDt3aWR0aDo3MnB4O2hlaWdodDo3MnB4fS5FTVQ1emJbZGF0YS1vcz0n
Nidde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9p
ZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0
ZXMvZGV2aWNlc19yZWFsaXN0aWNfNzItNjA1MmU4MDNmZGFjOWIxODMxM2Q3MWJiZWRjZGVl
Y2MucG5nKSAwIC03M3B4O2JhY2tncm91bmQtc2l6ZTo3MnB4IDExNjdweDt3aWR0aDo3MnB4
O2hlaWdodDo3MnB4fS5FTVQ1emJbZGF0YS1mb3JtLWZhY3Rvcj0nNCdde2JhY2tncm91bmQ6
bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGljLmNvbS9pZGVudGl0eS9ib3EvYWNj
b3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2VzL3Nwcml0ZXMvZGV2aWNlc19yZWFs
aXN0aWNfNzItNjA1MmU4MDNmZGFjOWIxODMxM2Q3MWJiZWRjZGVlY2MucG5nKSAwIC0yOTJw
eDtiYWNrZ3JvdW5kLXNpemU6NzJweCAxMTY3cHg7d2lkdGg6NzJweDtoZWlnaHQ6NzJweH0u
RU1UNXpiW2RhdGEtZm9ybS1mYWN0b3I9JzUnXXtiYWNrZ3JvdW5kOm5vLXJlcGVhdCB1cmwo
aHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkvYm9xL2FjY291bnRzZXR0aW5nc3Nl
Y3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2RldmljZXNfcmVhbGlzdGljXzcyLTYwNTJl
ODAzZmRhYzliMTgzMTNkNzFiYmVkY2RlZWNjLnBuZykgMCAwO2JhY2tncm91bmQtc2l6ZTo3
MnB4IDExNjdweDt3aWR0aDo3MnB4O2hlaWdodDo3MnB4fS5FTVQ1emJbZGF0YS1mb3JtLWZh
Y3Rvcj0nNidde2JhY2tncm91bmQ6bm8tcmVwZWF0IHVybChodHRwczovL3d3dy5nc3RhdGlj
LmNvbS9pZGVudGl0eS9ib3EvYWNjb3VudHNldHRpbmdzc2VjdXJpdHljb21tb24vaW1hZ2Vz
L3Nwcml0ZXMvZGV2aWNlc19yZWFsaXN0aWNfNzItNjA1MmU4MDNmZGFjOWIxODMxM2Q3MWJi
ZWRjZGVlY2MucG5nKSAwIC04NzZweDtiYWNrZ3JvdW5kLXNpemU6NzJweCAxMTY3cHg7d2lk
dGg6NzJweDtoZWlnaHQ6NzJweH0uRU1UNXpiW2RhdGEtZm9ybS1mYWN0b3I9JzcnXXtiYWNr
Z3JvdW5kOm5vLXJlcGVhdCB1cmwoaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaWRlbnRpdHkv
Ym9xL2FjY291bnRzZXR0aW5nc3NlY3VyaXR5Y29tbW9uL2ltYWdlcy9zcHJpdGVzL2Rldmlj
ZXNfcmVhbGlzdGljXzcyLTYwNTJlODAzZmRhYzliMTgzMTNkNzFiYmVkY2RlZWNjLnBuZykg
MCAtNTg0cHg7YmFja2dyb3VuZC1zaXplOjcycHggMTE2N3B4O3dpZHRoOjcycHg7aGVpZ2h0
OjcycHh9LmlkYThpY3tkaXNwbGF5Oi13ZWJraXQtYm94O2Rpc3BsYXk6LW1vei1ib3g7ZGlz
cGxheTotbXMtZmxleGJveDtkaXNwbGF5Oi13ZWJraXQtZmxleDtkaXNwbGF5OmZsZXg7YWxp
Z24taXRlbXM6Y2VudGVyO2JvcmRlci10b3AtbGVmdC1yYWRpdXM6OHB4O2JvcmRlci10b3At
cmlnaHQtcmFkaXVzOjhweDtwYWRkaW5nOjE2cHggNDBweH0udUNTc0d7Ym94LWZsZXg6MTtm
bGV4LWdyb3c6MTtmbGV4LXNocmluazoxO2xldHRlci1zcGFjaW5nOi4wMDYyNWVtO2ZvbnQt
ZmFtaWx5OidHb29nbGUgU2FucycsUm9ib3RvLEFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXpl
OjFyZW07Zm9udC13ZWlnaHQ6NTAwO2xpbmUtaGVpZ2h0OjEuNXJlbX0uQ0NmNG1je2JveC1m
bGV4OjA7ZmxleC1ncm93OjA7ZmxleC1zaHJpbms6MDtwYWRkaW5nLXJpZ2h0OjEycHh9QG1l
ZGlhIChtYXgtd2lkdGg6NDc5cHgpey5pZGE4aWN7LW1vei1ib3JkZXItcmFkaXVzOjA7Ym9y
ZGVyLXJhZGl1czowO3BhZGRpbmc6MTZweCAyNHB4fX0uWUNuMkRje2Rpc3BsYXk6YmxvY2t9
LnJtYXBLY3twb3NpdGlvbjpyZWxhdGl2ZX0uYVlTMXRje2Rpc3BsYXk6YmxvY2s7ZmlsbDoj
ZWE0MzM1O3Bvc2l0aW9uOmFic29sdXRlO3JpZ2h0OjB9LmtaSGk4e2Rpc3BsYXk6YmxvY2s7
bWFyZ2luOmF1dG99LnphUW5tZnttYXJnaW46LTE4cHggLTEycHh9LnphUW5tZiAudkFlZG57
ZGlzcGxheTpibG9ja30uVE04Y0dle2Rpc3BsYXk6bm9uZX0uVmZQcGtkLVdzall3Y3stbW96
LWJvcmRlci1yYWRpdXM6NHB4O2JvcmRlci1yYWRpdXM6NHB4O2JhY2tncm91bmQtY29sb3I6
I2ZmZjtiYWNrZ3JvdW5kLWNvbG9yOnZhcigtLW1kYy10aGVtZS1zdXJmYWNlLCNmZmYpOy1t
b3otYm94LXNoYWRvdzowIDJweCAxcHggLTFweCByZ2JhKDAsMCwwLDAuMiksMCAxcHggMXB4
IDAgcmdiYSgwLDAsMCwwLjE0KSwwIDFweCAzcHggMCByZ2JhKDAsMCwwLDAuMTIpO2JveC1z
aGFkb3c6MCAycHggMXB4IC0xcHggcmdiYSgwLDAsMCwwLjIpLDAgMXB4IDFweCAwIHJnYmEo
MCwwLDAsMC4xNCksMCAxcHggM3B4IDAgcmdiYSgwLDAsMCwwLjEyKTtkaXNwbGF5Oi13ZWJr
aXQtYm94O2Rpc3BsYXk6LW1vei1ib3g7ZGlzcGxheTotd2Via2l0LWZsZXg7ZGlzcGxheTot
bXMtZmxleGJveDtkaXNwbGF5OmZsZXg7ZmxleC1kaXJlY3Rpb246Y29sdW1uO2JveC1zaXpp
bmc6Ym9yZGVyLWJveH0uVmZQcGtkLVdzall3Yy1PV1hFWGUtSU5zQWdjey1tb3otYm94LXNo
YWRvdzowIDAgMCAwIHJnYmEoMCwwLDAsMC4yKSwwIDAgMCAwIHJnYmEoMCwwLDAsMC4xNCks
MCAwIDAgMCByZ2JhKDAsMCwwLDAuMTIpO2JveC1zaGFkb3c6MCAwIDAgMCByZ2JhKDAsMCww
LDAuMiksMCAwIDAgMCByZ2JhKDAsMCwwLDAuMTQpLDAgMCAwIDAgcmdiYSgwLDAsMCwwLjEy
KTtib3JkZXItd2lkdGg6MXB4O2JvcmRlci1zdHlsZTpzb2xpZDtib3JkZXItY29sb3I6I2Uw
ZTBlMH0uVmZQcGtkLWdCTkdOZXtwb3NpdGlvbjpyZWxhdGl2ZTtib3gtc2l6aW5nOmJvcmRl
ci1ib3g7YmFja2dyb3VuZC1yZXBlYXQ6bm8tcmVwZWF0O2JhY2tncm91bmQtcG9zaXRpb246
Y2VudGVyO2JhY2tncm91bmQtc2l6ZTpjb3Zlcn0uVmZQcGtkLWdCTkdOZTo6YmVmb3Jle2Rp
c3BsYXk6YmxvY2s7Y29udGVudDoiIn0uVmZQcGtkLWdCTkdOZTpmaXJzdC1jaGlsZHtib3Jk
ZXItdG9wLWxlZnQtcmFkaXVzOmluaGVyaXQ7Ym9yZGVyLXRvcC1yaWdodC1yYWRpdXM6aW5o
ZXJpdH0uVmZQcGtkLWdCTkdOZTpsYXN0LWNoaWxke2JvcmRlci1ib3R0b20tbGVmdC1yYWRp
dXM6aW5oZXJpdDtib3JkZXItYm90dG9tLXJpZ2h0LXJhZGl1czppbmhlcml0fS5WZlBwa2Qt
Z0JOR05lLU9XWEVYZS1CYVlpc2M6OmJlZm9yZXttYXJnaW4tdG9wOjEwMCV9LlZmUHBrZC1n
Qk5HTmUtT1dYRVhlLVczbEdwLUNsdDB6Yjo6YmVmb3Jle21hcmdpbi10b3A6NTYuMjUlfS5W
ZlBwa2QtZ0JOR05lLWJOOTdQY3twb3NpdGlvbjphYnNvbHV0ZTt0b3A6MDtyaWdodDowO2Jv
dHRvbTowO2xlZnQ6MDtib3gtc2l6aW5nOmJvcmRlci1ib3h9LlZmUHBrZC1FU2NiRmItSkli
dVFje2Rpc3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5Oi13ZWJr
aXQtZmxleDtkaXNwbGF5Oi1tcy1mbGV4Ym94O2Rpc3BsYXk6ZmxleDtmbGV4LWRpcmVjdGlv
bjpjb2x1bW47Ym94LXNpemluZzpib3JkZXItYm94O3Bvc2l0aW9uOnJlbGF0aXZlO291dGxp
bmU6bm9uZTtjb2xvcjppbmhlcml0O3RleHQtZGVjb3JhdGlvbjpub25lO2N1cnNvcjpwb2lu
dGVyO292ZXJmbG93OmhpZGRlbn0uVmZQcGtkLUVTY2JGYi1KSWJ1UWM6Zmlyc3QtY2hpbGR7
Ym9yZGVyLXRvcC1sZWZ0LXJhZGl1czppbmhlcml0O2JvcmRlci10b3AtcmlnaHQtcmFkaXVz
OmluaGVyaXR9LlZmUHBrZC1FU2NiRmItSklidVFjOmxhc3QtY2hpbGR7Ym9yZGVyLWJvdHRv
bS1sZWZ0LXJhZGl1czppbmhlcml0O2JvcmRlci1ib3R0b20tcmlnaHQtcmFkaXVzOmluaGVy
aXR9LlZmUHBrZC1ncUlpWmV7ZGlzcGxheTotd2Via2l0LWJveDtkaXNwbGF5Oi1tb3otYm94
O2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6LW1zLWZsZXhib3g7ZGlzcGxheTpmbGV4
O2ZsZXgtZGlyZWN0aW9uOnJvdzthbGlnbi1pdGVtczpjZW50ZXI7Ym94LXNpemluZzpib3Jk
ZXItYm94O21pbi1oZWlnaHQ6NTJweDtwYWRkaW5nOjhweH0uVmZQcGtkLWdxSWlaZS1PV1hF
WGUtVmtmZWRlLXJKQ3RPY3twYWRkaW5nOjB9LlZmUHBrZC1FU2NiRmItSklidVFjey0tbWRj
LXJpcHBsZS1mZy1zaXplOjA7LS1tZGMtcmlwcGxlLWxlZnQ6MDstLW1kYy1yaXBwbGUtdG9w
OjA7LS1tZGMtcmlwcGxlLWZnLXNjYWxlOjE7LS1tZGMtcmlwcGxlLWZnLXRyYW5zbGF0ZS1l
bmQ6MDstLW1kYy1yaXBwbGUtZmctdHJhbnNsYXRlLXN0YXJ0OjA7d2lsbC1jaGFuZ2U6dHJh
bnNmb3JtLG9wYWNpdHl9LlZmUHBrZC1FU2NiRmItSklidVFjOjpiZWZvcmV7cG9zaXRpb246
YWJzb2x1dGU7LW1vei1ib3JkZXItcmFkaXVzOjUwJTtib3JkZXItcmFkaXVzOjUwJTtvcGFj
aXR5OjA7cG9pbnRlci1ldmVudHM6bm9uZTtjb250ZW50OiIifS5WZlBwa2QtRVNjYkZiLUpJ
YnVRYzo6YWZ0ZXJ7cG9zaXRpb246YWJzb2x1dGU7LW1vei1ib3JkZXItcmFkaXVzOjUwJTti
b3JkZXItcmFkaXVzOjUwJTtvcGFjaXR5OjA7cG9pbnRlci1ldmVudHM6bm9uZTtjb250ZW50
OiIifS5WZlBwa2QtRVNjYkZiLUpJYnVRYzo6YmVmb3Jle3RyYW5zaXRpb246b3BhY2l0eSAx
NW1zIGxpbmVhcixiYWNrZ3JvdW5kLWNvbG9yIDE1bXMgbGluZWFyO3otaW5kZXg6MX0uVmZQ
cGtkLUVTY2JGYi1KSWJ1UWMuVmZQcGtkLWtzS3NaZC1tV1BrM2Q6OmJlZm9yZXt0cmFuc2Zv
cm06c2NhbGUodmFyKC0tbWRjLXJpcHBsZS1mZy1zY2FsZSwxKSl9LlZmUHBrZC1FU2NiRmIt
SklidVFjLlZmUHBrZC1rc0tzWmQtbVdQazNkOjphZnRlcnt0b3A6MDtsZWZ0OjA7dHJhbnNm
b3JtOnNjYWxlKDApO3RyYW5zZm9ybS1vcmlnaW46Y2VudGVyIGNlbnRlcn0uVmZQcGtkLUVT
Y2JGYi1KSWJ1UWMuVmZQcGtkLWtzS3NaZC1tV1BrM2QtT1dYRVhlLVpOTVRxZDo6YWZ0ZXJ7
dG9wOnZhcigtLW1kYy1yaXBwbGUtdG9wLDApO2xlZnQ6dmFyKC0tbWRjLXJpcHBsZS1sZWZ0
LDApfS5WZlBwa2QtRVNjYkZiLUpJYnVRYy5WZlBwa2Qta3NLc1pkLW1XUGszZC1PV1hFWGUt
VHY4bDVkLWxKZlpNYzo6YWZ0ZXJ7YW5pbWF0aW9uOm1kYy1yaXBwbGUtZmctcmFkaXVzLWlu
IDIyNW1zIGZvcndhcmRzLG1kYy1yaXBwbGUtZmctb3BhY2l0eS1pbiA3NW1zIGZvcndhcmRz
fS5WZlBwa2QtRVNjYkZiLUpJYnVRYy5WZlBwa2Qta3NLc1pkLW1XUGszZC1PV1hFWGUtVHY4
bDVkLU9tUzF2Zjo6YWZ0ZXJ7YW5pbWF0aW9uOm1kYy1yaXBwbGUtZmctb3BhY2l0eS1vdXQg
MTUwbXM7dHJhbnNmb3JtOnRyYW5zbGF0ZSh2YXIoLS1tZGMtcmlwcGxlLWZnLXRyYW5zbGF0
ZS1lbmQsMCkpIHNjYWxlKHZhcigtLW1kYy1yaXBwbGUtZmctc2NhbGUsMSkpfS5WZlBwa2Qt
RVNjYkZiLUpJYnVRYzo6YmVmb3Jle3RvcDotbW96LWNhbGMoNTAlIC0gMTAwJSk7dG9wOmNh
bGMoNTAlIC0gMTAwJSk7bGVmdDotbW96LWNhbGMoNTAlIC0gMTAwJSk7bGVmdDpjYWxjKDUw
JSAtIDEwMCUpO3dpZHRoOjIwMCU7aGVpZ2h0OjIwMCV9LlZmUHBrZC1FU2NiRmItSklidVFj
OjphZnRlcnt0b3A6LW1vei1jYWxjKDUwJSAtIDEwMCUpO3RvcDpjYWxjKDUwJSAtIDEwMCUp
O2xlZnQ6LW1vei1jYWxjKDUwJSAtIDEwMCUpO2xlZnQ6Y2FsYyg1MCUgLSAxMDAlKTt3aWR0
aDoyMDAlO2hlaWdodDoyMDAlfS5WZlBwa2QtRVNjYkZiLUpJYnVRYy5WZlBwa2Qta3NLc1pk
LW1XUGszZDo6YWZ0ZXJ7d2lkdGg6dmFyKC0tbWRjLXJpcHBsZS1mZy1zaXplLDEwMCUpO2hl
aWdodDp2YXIoLS1tZGMtcmlwcGxlLWZnLXNpemUsMTAwJSl9LlZmUHBrZC1FU2NiRmItSkli
dVFjOjpiZWZvcmV7YmFja2dyb3VuZC1jb2xvcjojMDAwfS5WZlBwa2QtRVNjYkZiLUpJYnVR
Yzo6YWZ0ZXJ7YmFja2dyb3VuZC1jb2xvcjojMDAwfS5WZlBwa2QtRVNjYkZiLUpJYnVRYzpo
b3Zlcjo6YmVmb3Jle29wYWNpdHk6LjA0fS5WZlBwa2QtRVNjYkZiLUpJYnVRYy5WZlBwa2Qt
a3NLc1pkLW1XUGszZC1PV1hFWGUtQUhlNktjLVhwbkRDZTo6YmVmb3Jle3RyYW5zaXRpb24t
ZHVyYXRpb246NzVtcztvcGFjaXR5Oi4xMn0uVmZQcGtkLUVTY2JGYi1KSWJ1UWM6bm90KC5W
ZlBwa2Qta3NLc1pkLW1XUGszZCk6Zm9jdXM6OmJlZm9yZXt0cmFuc2l0aW9uLWR1cmF0aW9u
Ojc1bXM7b3BhY2l0eTouMTJ9LlZmUHBrZC1FU2NiRmItSklidVFjOm5vdCguVmZQcGtkLWtz
S3NaZC1tV1BrM2QpOjphZnRlcnt0cmFuc2l0aW9uOm9wYWNpdHkgMTUwbXMgbGluZWFyfS5W
ZlBwa2QtRVNjYkZiLUpJYnVRYzpub3QoLlZmUHBrZC1rc0tzWmQtbVdQazNkKTphY3RpdmU6
OmFmdGVye3RyYW5zaXRpb24tZHVyYXRpb246NzVtcztvcGFjaXR5Oi4xMn0uVmZQcGtkLUVT
Y2JGYi1KSWJ1UWMuVmZQcGtkLWtzS3NaZC1tV1BrM2R7LS1tZGMtcmlwcGxlLWZnLW9wYWNp
dHk6LjEyfS5LQzFkUXstbW96LWJvcmRlci1yYWRpdXM6OHB4O2JvcmRlci1yYWRpdXM6OHB4
O2JvcmRlcjowOy1tb3otYm94LXNoYWRvdzowIDFweCAycHggMCByZ2JhKDYwLDY0LDY3LDAu
MyksMCAxcHggM3B4IDFweCByZ2JhKDYwLDY0LDY3LDAuMTUpO2JveC1zaGFkb3c6MCAxcHgg
MnB4IDAgcmdiYSg2MCw2NCw2NywwLjMpLDAgMXB4IDNweCAxcHggcmdiYSg2MCw2NCw2Nyww
LjE1KX0uRnphRGNlIC5LQzFkUXtwb3NpdGlvbjpyZWxhdGl2ZTtiYWNrZ3JvdW5kLWNvbG9y
OiMyMDIxMjR9LkZ6YURjZSAuS0MxZFEgLlZmUHBrZC1FU2NiRmItSklidVFjOjpiZWZvcmUs
LkZ6YURjZSAuS0MxZFEgLlZmUHBrZC1FU2NiRmItSklidVFjOjphZnRlcntiYWNrZ3JvdW5k
LWNvbG9yOiNlOGVhZWR9LkZ6YURjZSAuS0MxZFEgLlZmUHBrZC1FU2NiRmItSklidVFjOmhv
dmVyOjpiZWZvcmV7b3BhY2l0eTouMDR9LkZ6YURjZSAuS0MxZFEgLlZmUHBrZC1FU2NiRmIt
SklidVFjLlZmUHBrZC1rc0tzWmQtbVdQazNkLU9XWEVYZS1BSGU2S2MtWHBuRENlOjpiZWZv
cmUsLkZ6YURjZSAuS0MxZFEgLlZmUHBrZC1FU2NiRmItSklidVFjOm5vdCguVmZQcGtkLWtz
S3NaZC1tV1BrM2QpOmZvY3VzOjpiZWZvcmV7dHJhbnNpdGlvbi1kdXJhdGlvbjo3NW1zO29w
YWNpdHk6LjEyfS5GemFEY2UgLktDMWRRIC5WZlBwa2QtRVNjYkZiLUpJYnVRYzpub3QoLlZm
UHBrZC1rc0tzWmQtbVdQazNkKTo6YWZ0ZXJ7dHJhbnNpdGlvbjpvcGFjaXR5IDE1MG1zIGxp
bmVhcn0uRnphRGNlIC5LQzFkUSAuVmZQcGtkLUVTY2JGYi1KSWJ1UWM6bm90KC5WZlBwa2Qt
a3NLc1pkLW1XUGszZCk6YWN0aXZlOjphZnRlcnt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7
b3BhY2l0eTouMX0uRnphRGNlIC5LQzFkUSAuVmZQcGtkLUVTY2JGYi1KSWJ1UWMuVmZQcGtk
LWtzS3NaZC1tV1BrM2R7LS1tZGMtcmlwcGxlLWZnLW9wYWNpdHk6LjF9LkZ6YURjZSAuS0Mx
ZFEgLlZmUHBrZC1nQk5HTmV7ei1pbmRleDoxfS5GemFEY2UgLktDMWRRe2JvcmRlcjowOy1t
b3otYm94LXNoYWRvdzowIDFweCAycHggMCByZ2JhKDAsMCwwLDAuMyksMCAxcHggM3B4IDFw
eCByZ2JhKDAsMCwwLDAuMTUpO2JveC1zaGFkb3c6MCAxcHggMnB4IDAgcmdiYSgwLDAsMCww
LjMpLDAgMXB4IDNweCAxcHggcmdiYSgwLDAsMCwwLjE1KX0uRnphRGNlIC5LQzFkUSAuVXd3
dEh7YmFja2dyb3VuZC1jb2xvcjojZThlYWVkO29wYWNpdHk6LjA1fS5Vc2QxQWN7LW1vei1i
b3JkZXItcmFkaXVzOjhweDtib3JkZXItcmFkaXVzOjhweDtib3JkZXI6MXB4IHNvbGlkICNk
YWRjZTA7LW1vei1ib3gtc2hhZG93Om5vbmU7Ym94LXNoYWRvdzpub25lfS5GemFEY2UgLlVz
ZDFBY3twb3NpdGlvbjpyZWxhdGl2ZTtiYWNrZ3JvdW5kLWNvbG9yOiMyMDIxMjR9LkZ6YURj
ZSAuVXNkMUFjIC5WZlBwa2QtRVNjYkZiLUpJYnVRYzo6YmVmb3JlLC5GemFEY2UgLlVzZDFB
YyAuVmZQcGtkLUVTY2JGYi1KSWJ1UWM6OmFmdGVye2JhY2tncm91bmQtY29sb3I6I2U4ZWFl
ZH0uRnphRGNlIC5Vc2QxQWMgLlZmUHBrZC1FU2NiRmItSklidVFjOmhvdmVyOjpiZWZvcmV7
b3BhY2l0eTouMDR9LkZ6YURjZSAuVXNkMUFjIC5WZlBwa2QtRVNjYkZiLUpJYnVRYy5WZlBw
a2Qta3NLc1pkLW1XUGszZC1PV1hFWGUtQUhlNktjLVhwbkRDZTo6YmVmb3JlLC5GemFEY2Ug
LlVzZDFBYyAuVmZQcGtkLUVTY2JGYi1KSWJ1UWM6bm90KC5WZlBwa2Qta3NLc1pkLW1XUGsz
ZCk6Zm9jdXM6OmJlZm9yZXt0cmFuc2l0aW9uLWR1cmF0aW9uOjc1bXM7b3BhY2l0eTouMTJ9
LkZ6YURjZSAuVXNkMUFjIC5WZlBwa2QtRVNjYkZiLUpJYnVRYzpub3QoLlZmUHBrZC1rc0tz
WmQtbVdQazNkKTo6YWZ0ZXJ7dHJhbnNpdGlvbjpvcGFjaXR5IDE1MG1zIGxpbmVhcn0uRnph
RGNlIC5Vc2QxQWMgLlZmUHBrZC1FU2NiRmItSklidVFjOm5vdCguVmZQcGtkLWtzS3NaZC1t
V1BrM2QpOmFjdGl2ZTo6YWZ0ZXJ7dHJhbnNpdGlvbi1kdXJhdGlvbjo3NW1zO29wYWNpdHk6
LjF9LkZ6YURjZSAuVXNkMUFjIC5WZlBwa2QtRVNjYkZiLUpJYnVRYy5WZlBwa2Qta3NLc1pk
LW1XUGszZHstLW1kYy1yaXBwbGUtZmctb3BhY2l0eTouMX0uRnphRGNlIC5Vc2QxQWMgLlZm
UHBrZC1nQk5HTmV7ei1pbmRleDoxfS5GemFEY2UgLlVzZDFBY3tib3JkZXI6MXB4IHNvbGlk
ICM1ZjYzNjg7LW1vei1ib3gtc2hhZG93Om5vbmU7Ym94LXNoYWRvdzpub25lfS5GemFEY2Ug
LlVzZDFBYyAuVXd3dEh7b3BhY2l0eTowfS5TaTZBMGN7cG9zaXRpb246YWJzb2x1dGU7bGVm
dDowO3RvcDowO3dpZHRoOjEwMCU7aGVpZ2h0OjEwMCU7b3V0bGluZTpub25lfS5iZFpUeGR7
cGFkZGluZzozMHB4O3RleHQtYWxpZ246Y2VudGVyfS5uOU9xZXtsZXR0ZXItc3BhY2luZzou
MDE0Mjg1NzFlbTtmb250LWZhbWlseTpSb2JvdG8sQXJpYWwsc2Fucy1zZXJpZjtmb250LXNp
emU6Ljg3NXJlbTtmb250LXdlaWdodDo0MDA7bGluZS1oZWlnaHQ6MS4yNXJlbTtwYWRkaW5n
LWJvdHRvbToxNnB4O3BhZGRpbmctdG9wOjB9LnFmMUVne21hcmdpbi1sZWZ0OjE2cHg7cGFk
ZGluZzo4cHggMCAyMHB4IDE2cHh9LkhaTnMwe3BhZGRpbmctYm90dG9tOjhweH0uWVU1d1di
e2xldHRlci1zcGFjaW5nOi4wMTc4NTcxNGVtO2ZvbnQtZmFtaWx5OlJvYm90byxBcmlhbCxz
YW5zLXNlcmlmO2ZvbnQtc2l6ZTouODc1cmVtO2ZvbnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdo
dDoxLjI1cmVtO3BhZGRpbmctdG9wOjhweH0uRVFSb1R7bWFyZ2luLWxlZnQ6YXV0b30uRWtj
TnNje21heC13aWR0aDp1bnNldDtwb3NpdGlvbjphYnNvbHV0ZX0uRWtjTnNjIC5KOWZKbWZ7
cGFkZGluZy1ib3R0b206MjRweH0uT0oxUHdlKy5PSjFQd2V7bWFyZ2luLWxlZnQ6OHB4fUBt
ZWRpYSAobWluLXdpZHRoOjQ4MHB4KXsuQ0RVYXRie3BhZGRpbmctdG9wOjQycHh9LkNEVWF0
YiAueWZ6VEdme21heC13aWR0aDo1MDBweDttYXJnaW46MCBhdXRvO21pbi1oZWlnaHQ6MzMy
cHg7b3ZlcmZsb3c6aGlkZGVufS5Fa2NOc2N7d2lkdGg6LW1vei1jYWxjKDUwMHB4IC0gMio0
MHB4KTt3aWR0aDpjYWxjKDUwMHB4IC0gMio0MHB4KTt0b3A6LW1vei1jYWxjKDY0cHggKyA0
MnB4ICsgMzMycHggLSAzMnB4KTt0b3A6Y2FsYyg2NHB4ICsgNDJweCArIDMzMnB4IC0gMzJw
eCl9LkVrY05zYy5JWFNvYWN7dG9wOi1tb3otY2FsYyg2NHB4ICsgNDJweCArIDMzMnB4ICsg
NTZweCAtIDMycHgpO3RvcDpjYWxjKDY0cHggKyA0MnB4ICsgMzMycHggKyA1NnB4IC0gMzJw
eCl9LkVrY05zYyAub0plV3Vme3BhZGRpbmctYm90dG9tOjE2cHh9fUBtZWRpYSAobWF4LXdp
ZHRoOjQ3OXB4KXsuQ0RVYXRiIC55ZnpUR2Z7LW1vei1ib3JkZXItcmFkaXVzOjA7Ym9yZGVy
LXJhZGl1czowOy1tb3otYm94LXNoYWRvdzpub25lO2JveC1zaGFkb3c6bm9uZX0uRWtjTnNj
e3dpZHRoOjEwMCU7Ym90dG9tOjA7Ym9yZGVyLWJvdHRvbS1sZWZ0LXJhZGl1czowO2JvcmRl
ci1ib3R0b20tcmlnaHQtcmFkaXVzOjA7bWluLWhlaWdodDoyMiV9fS5qcTRmTWV7LW1vei1i
b3JkZXItcmFkaXVzOjUwJTtib3JkZXItcmFkaXVzOjUwJTtib3JkZXI6c29saWQgI2U4ZWFl
ZCAycHg7aGVpZ2h0OjQ4cHg7cG9zaXRpb246cmVsYXRpdmU7d2lkdGg6NDhweH0uSDZVQWFk
e2JvdHRvbTowO2xlZnQ6MDttYXJnaW46YXV0bztwb3NpdGlvbjphYnNvbHV0ZTtyaWdodDow
O3RvcDowfS52MGo4UHttYXgtaGVpZ2h0OjMycHg7bWF4LXdpZHRoOjMycHh9LnlveEVGZHtt
YXgtaGVpZ2h0OjI0cHg7bWF4LXdpZHRoOjI0cHh9LkMzNzlUZXttYXgtaGVpZ2h0OjE2cHg7
bWF4LXdpZHRoOjE2cHh9LkZkRUNPYnttYXJnaW4tYm90dG9tOjE2cHh9LkphbGZiY3ttYXJn
aW4tcmlnaHQ6MTZweDtwb3NpdGlvbjpyZWxhdGl2ZX0uanRuR1Zje2FsaWduLWl0ZW1zOmNl
bnRlcjtkaXNwbGF5Oi13ZWJraXQtYm94O2Rpc3BsYXk6LW1vei1ib3g7ZGlzcGxheTotd2Vi
a2l0LWZsZXg7ZGlzcGxheTotbXMtZmxleGJveDtkaXNwbGF5OmZsZXg7bWFyZ2luLWJvdHRv
bToxNnB4fS5nTFFCamN7bGV0dGVyLXNwYWNpbmc6LjAxNzg1NzE0ZW07Zm9udC1mYW1pbHk6
J0dvb2dsZSBTYW5zJyxSb2JvdG8sQXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6Ljg3NXJl
bTtmb250LXdlaWdodDo1MDA7bGluZS1oZWlnaHQ6MS4yNXJlbTttYXJnaW4tdG9wOjhweDtw
YWRkaW5nLWJvdHRvbToxNnB4O3BhZGRpbmctdG9wOjhweH0ucjI0Mnl7Ym94LWZsZXg6MTtm
bGV4LWdyb3c6MTtmbGV4LXNocmluazoxO3dpZHRoOi1tb3otY2FsYygxMDAlIC0gNjhweCk7
d2lkdGg6Y2FsYygxMDAlIC0gNjhweCl9LkViSUdHZntsZXR0ZXItc3BhY2luZzouMDA2MjVl
bTtmb250LWZhbWlseTonR29vZ2xlIFNhbnMnLFJvYm90byxBcmlhbCxzYW5zLXNlcmlmO2Zv
bnQtc2l6ZToxcmVtO2ZvbnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjVyZW07bWFyZ2lu
OjA7d29yZC13cmFwOmJyZWFrLXdvcmR9Lmhka1BUZHtkaXNwbGF5Oi13ZWJraXQtYm94O2Rp
c3BsYXk6LW1vei1ib3g7ZGlzcGxheTotd2Via2l0LWZsZXg7ZGlzcGxheTotbXMtZmxleGJv
eDtkaXNwbGF5OmZsZXg7bWFyZ2luLWJvdHRvbToxNnB4fS5veE9sZmV7cGFkZGluZy1ib3R0
b206MTJweDttYXJnaW4tYm90dG9tOjB9Lk5PblpyY3tjb2xvcjojNWY2MzY4O2JveC1mbGV4
OjA7ZmxleC1ncm93OjA7ZmxleC1zaHJpbms6MDtoZWlnaHQ6MjRweDttYXJnaW4tcmlnaHQ6
MzJweDtwb3NpdGlvbjpyZWxhdGl2ZTstbW96LXVzZXItc2VsZWN0Om5vbmU7d2lkdGg6MjRw
eH0uWmFrelRle3BhZGRpbmctYm90dG9tOjE2cHh9Lk5PblpyYyAuTk1tNU17ZmlsbDojNWY2
MzY4fS5ncDhWaWR7YWxpZ24tc2VsZjpjZW50ZXI7ZGlzcGxheTotd2Via2l0LWJveDtkaXNw
bGF5Oi1tb3otYm94O2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6LW1zLWZsZXhib3g7
ZGlzcGxheTpmbGV4O2JveC1mbGV4OjA7ZmxleC1ncm93OjA7ZmxleC1zaHJpbms6MDt3aWR0
aDotbW96LWNhbGMoMTAwJSAtIDMycHgpO3dpZHRoOmNhbGMoMTAwJSAtIDMycHgpfS5ZSnV4
c2J7Ym9yZGVyLWJvdHRvbToxcHggc29saWQgI2RhZGNlMDtwYWRkaW5nLWJvdHRvbToxNnB4
fS5wZDNnb2V7Ym94LWZsZXg6MDtmbGV4LWdyb3c6MDtmbGV4LXNocmluazowO3dpZHRoOi1t
b3otY2FsYygxMDAlIC0gNjRweCk7d2lkdGg6Y2FsYygxMDAlIC0gNjRweCk7dGV4dC1hbGln
bjpsZWZ0O3dvcmQtd3JhcDpicmVhay13b3JkfS5rQ242QWR7Ym94LWZsZXg6MDtmbGV4LWdy
b3c6MDtmbGV4LXNocmluazowO3dpZHRoOjI0cHh9LmtDbjZBZCAud0M2UXhle3dpZHRoOjI1
MHB4fS5NcHRYYmN7bWFyZ2luLXJpZ2h0OjQwcHh9LnVTaDVUe2NvbG9yOiNmYmJjMDR9LlpR
ZHFRYy5oRmdncHtjb2xvcjojNWY2MzY4fS5aUWRxUWMuaEZnZ3AucXM0MXFlLC5aUWRxUWMu
aEZnZ3A6aG92ZXIsLlpRZHFRYy5oRmdncDpmb2N1c3tjb2xvcjojNDI4NWY0fS5JN2ZUTmMu
d0M2UXhle2NvbG9yOiMyMDIxMjR9LkJSR3dZYi5oWG01cXtiYWNrZ3JvdW5kLWNvbG9yOiNm
ZmY7Ym94LXNoYWRvdzowIDFweCAycHggMCByZ2JhKDYwLDY0LDY3LC4zMCksMCAxcHggM3B4
IDFweCByZ2JhKDYwLDY0LDY3LC4xNSl9LmhGZ2dwe2NvbG9yOiM3ZjdmN2Z9LmhGZ2dwLnFz
NDFxZSwuaEZnZ3A6aG92ZXIsLmhGZ2dwOmZvY3Vze2NvbG9yOiM0Mjg1ZjQ7b3V0bGluZTpu
b25lfS56Rzh2dmN7Zm9udC1zaXplOjI0cHg7bWFyZ2luOjAgNHB4O3ZlcnRpY2FsLWFsaWdu
OnRleHQtYm90dG9tfS53QzZReGV7LW1vei10cmFuc2Zvcm0tb3JpZ2luOnRvcCBsZWZ0O3Ry
YW5zZm9ybS1vcmlnaW46dG9wIGxlZnQ7Ym94LXNpemluZzpib3JkZXItYm94O2NvbG9yOiMy
MTIxMjE7bWF4LXdpZHRoOjMwMHB4O3BhZGRpbmc6OHB4O3Bvc2l0aW9uOmFic29sdXRlO3Ry
YW5zZm9ybTpzY2FsZSgxLDEpO3RyYW5zaXRpb246dHJhbnNmb3JtIC40cyBjdWJpYy1iZXpp
ZXIoMC40LDAuMCwwLjIsMSk7ei1pbmRleDo0fS53QzZReGUuYVVJZGlley1tb3otdHJhbnNm
b3JtLW9yaWdpbjp0b3AgcmlnaHQ7dHJhbnNmb3JtLW9yaWdpbjp0b3AgcmlnaHR9LndDNlF4
ZS5xOEE4ZGN7LW1vei10cmFuc2Zvcm0tb3JpZ2luOmJvdHRvbSBsZWZ0O3RyYW5zZm9ybS1v
cmlnaW46Ym90dG9tIGxlZnR9LndDNlF4ZS5hVUlkaWUucThBOGRjey1tb3otdHJhbnNmb3Jt
LW9yaWdpbjpib3R0b20gcmlnaHQ7dHJhbnNmb3JtLW9yaWdpbjpib3R0b20gcmlnaHR9LndD
NlF4ZS5qVndtTGJ7dHJhbnNmb3JtOnNjYWxlKDAsMCl9LndDNlF4ZS5rZENkcWN7dHJhbnNp
dGlvbi1kZWxheTouMnN9LmhYbTVxe2JhY2tncm91bmQtY29sb3I6I2ZmZjstbW96LWJvcmRl
ci1yYWRpdXM6MnB4O2JvcmRlci1yYWRpdXM6MnB4Oy1tb3otYm94LXNoYWRvdzowIDRweCA1
cHggMCByZ2JhKDAsMCwwLDAuMTQpLDAgMXB4IDEwcHggMCByZ2JhKDAsMCwwLDAuMTIpLDAg
MnB4IDRweCAtMXB4IHJnYmEoMCwwLDAsMC4yKTtib3gtc2hhZG93OjAgNHB4IDVweCAwIHJn
YmEoMCwwLDAsMC4xNCksMCAxcHggMTBweCAwIHJnYmEoMCwwLDAsMC4xMiksMCAycHggNHB4
IC0xcHggcmdiYSgwLDAsMCwwLjIpO3BhZGRpbmc6OHB4IDE2cHg7cG9zaXRpb246cmVsYXRp
dmV9Lm5wM1E3Y3tvcGFjaXR5OjE7dHJhbnNpdGlvbjpvcGFjaXR5IC40cyBlYXNlIC4yc30u
d0M2UXhlLmpWd21MYiAubnAzUTdje29wYWNpdHk6MH0ud0M2UXhlLmtkQ2RxYyAubnAzUTdj
e3RyYW5zaXRpb24tZGVsYXk6MHN9Lnh3cmNZZHtib3R0b206MDtsZWZ0OjA7cG9zaXRpb246
Zml4ZWQ7cmlnaHQ6MDt0b3A6MDt6LWluZGV4OjN9LmtscTJSY3tjb2xvcjojNDI4NWY0O2Zp
bGw6IzQyODVmNDtmb250LXNpemU6MTZweDttYXgtaGVpZ2h0OjE2cHg7bWF4LXdpZHRoOjE2
cHg7dmVydGljYWwtYWxpZ246dGV4dC1ib3R0b219LkFXRkpke2NvbG9yOiM0Mjg1ZjQ7Zmls
bDojNDI4NWY0O2ZvbnQtc2l6ZToyNHB4O21heC1oZWlnaHQ6MjRweDttYXgtd2lkdGg6MjRw
eDt2ZXJ0aWNhbC1hbGlnbjp0ZXh0LWJvdHRvbX0uUzZ4MDNke21hcmdpbjotMThweCAtMTJw
eH0uV3Z0WjZle2NvbG9yOnJnYmEoMCwwLDAsMC42NSl9LkFEdk1PZHtkaXNwbGF5Om5vbmV9
LklUaVNTY3tjb2xvcjojNWY2MzY4fS5aOUp5d2Z7Zm9udC13ZWlnaHQ6Ym9sZDtwYWRkaW5n
LWxlZnQ6OHB4fS5Ta1BLSmV7bWFyZ2luLWJvdHRvbTo1cHh9LmdzUklrZTpub3QoOmZpcnN0
LWNoaWxkKXttYXJnaW4tdG9wOjhweH0uSlJ0eXNiey1tb3otdXNlci1zZWxlY3Q6bm9uZTst
bW96LXRyYW5zaXRpb246YmFja2dyb3VuZCAuM3M7dHJhbnNpdGlvbjpiYWNrZ3JvdW5kIC4z
cztib3JkZXI6MDstbW96LWJvcmRlci1yYWRpdXM6NTAlO2JvcmRlci1yYWRpdXM6NTAlO2Nv
bG9yOiM0NDQ7Y3Vyc29yOnBvaW50ZXI7ZGlzcGxheTppbmxpbmUtYmxvY2s7ZmlsbDojNDQ0
O2ZsZXgtc2hyaW5rOjA7aGVpZ2h0OjQ4cHg7b3V0bGluZTpub25lO292ZXJmbG93OmhpZGRl
bjtwb3NpdGlvbjpyZWxhdGl2ZTt0ZXh0LWFsaWduOmNlbnRlcjt3aWR0aDo0OHB4O3otaW5k
ZXg6MH0uSlJ0eXNiLlJEUFpFe2N1cnNvcjpkZWZhdWx0fS5aRFNzMXtjb2xvcjpyZ2JhKDI1
NSwyNTUsMjU1LDAuNzQ5KTtmaWxsOnJnYmEoMjU1LDI1NSwyNTUsMC43NDkpfS5XendyWGIu
dTNiVzRle2JhY2tncm91bmQtY29sb3I6cmdiYSgxNTMsMTUzLDE1MywwLjQpfS5aRFNzMS51
M2JXNGV7YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDIwNCwyMDQsMjA0LDAuMjUxKX0uTldsZjNl
ey1tb3otdHJhbnNmb3JtOnRyYW5zbGF0ZSgtNTAlLC01MCUpIHNjYWxlKDApO3RyYW5zZm9y
bTp0cmFuc2xhdGUoLTUwJSwtNTAlKSBzY2FsZSgwKTstbW96LXRyYW5zaXRpb246b3BhY2l0
eSAuMnMgZWFzZTt0cmFuc2l0aW9uOm9wYWNpdHkgLjJzIGVhc2U7YmFja2dyb3VuZC1zaXpl
OmNvdmVyO2xlZnQ6MDtvcGFjaXR5OjA7cG9pbnRlci1ldmVudHM6bm9uZTtwb3NpdGlvbjph
YnNvbHV0ZTt0b3A6MDt2aXNpYmlsaXR5OmhpZGRlbn0uSlJ0eXNiLmlXTzV0ZD4uTldsZjNl
e3RyYW5zaXRpb246LXdlYmtpdC10cmFuc2Zvcm0gLjNzIGN1YmljLWJlemllcigwLjAsMC4w
LDAuMiwxKTt0cmFuc2l0aW9uOnRyYW5zZm9ybSAuM3MgY3ViaWMtYmV6aWVyKDAuMCwwLjAs
MC4yLDEpOy1tb3otdHJhbnNmb3JtOnRyYW5zbGF0ZSgtNTAlLC01MCUpIHNjYWxlKDIuMik7
dHJhbnNmb3JtOnRyYW5zbGF0ZSgtNTAlLC01MCUpIHNjYWxlKDIuMik7b3BhY2l0eToxO3Zp
c2liaWxpdHk6dmlzaWJsZX0uSlJ0eXNiLmo3bklaYj4uTldsZjNley1tb3otdHJhbnNmb3Jt
OnRyYW5zbGF0ZSgtNTAlLC01MCUpIHNjYWxlKDIuMik7dHJhbnNmb3JtOnRyYW5zbGF0ZSgt
NTAlLC01MCUpIHNjYWxlKDIuMik7dmlzaWJpbGl0eTp2aXNpYmxlfS5XendyWGIuaVdPNXRk
Pi5OV2xmM2V7YmFja2dyb3VuZC1pbWFnZTpyYWRpYWwtZ3JhZGllbnQoY2lyY2xlIGZhcnRo
ZXN0LXNpZGUscmdiYSgxNTMsMTUzLDE1MywwLjQpLHJnYmEoMTUzLDE1MywxNTMsMC40KSA4
MCUscmdiYSgxNTMsMTUzLDE1MywwKSAxMDAlKX0uWkRTczEuaVdPNXRkPi5OV2xmM2V7YmFj
a2dyb3VuZC1pbWFnZTpyYWRpYWwtZ3JhZGllbnQoY2lyY2xlIGZhcnRoZXN0LXNpZGUscmdi
YSgyMDQsMjA0LDIwNCwwLjI1MSkscmdiYSgyMDQsMjA0LDIwNCwwLjI1MSkgODAlLHJnYmEo
MjA0LDIwNCwyMDQsMCkgMTAwJSl9Lld6d3JYYi5SRFBaRXtjb2xvcjpyZ2JhKDY4LDY4LDY4
LDAuNTAyKTtmaWxsOnJnYmEoNjgsNjgsNjgsMC41MDIpfS5aRFNzMS5SRFBaRXtjb2xvcjpy
Z2JhKDI1NSwyNTUsMjU1LDAuNTAyKTtmaWxsOnJnYmEoMjU1LDI1NSwyNTUsMC41MDIpfS5N
aFhYY2N7bGluZS1oZWlnaHQ6NDRweDtwb3NpdGlvbjpyZWxhdGl2ZX0uTHc3R0hke21hcmdp
bjo4cHg7ZGlzcGxheTppbmxpbmUtYmxvY2t9LnpRVG1pZntoZWlnaHQ6MTAwJX0uTUNjT0Fj
e2Rpc3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5Oi13ZWJraXQt
ZmxleDtkaXNwbGF5Oi1tcy1mbGV4Ym94O2Rpc3BsYXk6ZmxleDtmbGV4LWRpcmVjdGlvbjpj
b2x1bW59LlNTUEdLZntwb3NpdGlvbjpyZWxhdGl2ZTttaW4taGVpZ2h0OjEwMCV9LnpRVG1p
ZntoZWlnaHQ6YXV0b30uU1NQR0tmLkJJSUJiY3toZWlnaHQ6MTAwJTtvdmVyZmxvdzpoaWRk
ZW59LlQ0TGdOYnttaW4taGVpZ2h0OjEwMCU7aGVpZ2h0OmF1dG87cG9zaXRpb246cmVsYXRp
dmV9LlQ0TGdOYi5lZWpzRGN7bWluLWhlaWdodDoxMDAlO292ZXJmbG93LXk6aGlkZGVufS5W
akZYentoZWlnaHQ6NTZweH1AbWVkaWEgKG1pbi13aWR0aDo2MDBweCl7LlZqRlh6e2hlaWdo
dDo2NHB4fX0jZ2J7cG9zaXRpb246Zml4ZWQ7bGVmdDowO3JpZ2h0OjB9LnVpcmZvICNnYntw
b3NpdGlvbjpyZWxhdGl2ZX0udWlyZm8gLlZqRlh6e2hlaWdodDowfS51aXJmbyAuU1NQR0tm
e21pbi1oZWlnaHQ6LW1vei1jYWxjKDEwMHZoIC0gNTZweCk7bWluLWhlaWdodDpjYWxjKDEw
MHZoIC0gNTZweCk7aGVpZ2h0OmF1dG99QG1lZGlhIChtaW4td2lkdGg6NjAwcHgpey51aXJm
byAuU1NQR0tme21pbi1oZWlnaHQ6LW1vei1jYWxjKDEwMHZoIC0gNjRweCk7bWluLWhlaWdo
dDpjYWxjKDEwMHZoIC0gNjRweCk7aGVpZ2h0OmF1dG99fS5NQlJ6U2V7Ym9yZGVyLXRvcDox
cHggc29saWQgcmdiYSgwLDAsMCwwLjEyKX1ib2R5e2JhY2tncm91bmQtY29sb3I6I2ZmZjtj
b2xvcjpyZ2JhKDAsMCwwLDAuODcpO2ZvbnQ6NDAwIDE0cHgvMjBweCBSb2JvdG8sUm9ib3Rv
RHJhZnQsSGVsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWY7bWluLWhlaWdodDozMjBweDttaW4t
d2lkdGg6MjQwcHg7cG9zaXRpb246cmVsYXRpdmV9YTpob3Zlcnt0ZXh0LWRlY29yYXRpb246
dW5kZXJsaW5lfWlucHV0LHNlbGVjdCx0ZXh0YXJlYXtjb2xvcjpyZ2JhKDAsMCwwLDAuODcp
O2ZvbnQtZmFtaWx5OlJvYm90byxSb2JvdG9EcmFmdCxIZWx2ZXRpY2EsQXJpYWwsc2Fucy1z
ZXJpZn11bCxsaXttYXJnaW46MDtwYWRkaW5nOjB9cHttYXJnaW46MH1kaXYuVmpGWHp7ZGlz
cGxheTpub25lfWF7Y29sb3I6IzFhNzNlODt0ZXh0LWRlY29yYXRpb246bm9uZX1AbWVkaWEg
KG1pbi13aWR0aDo2MDFweCl7Yy13aXouU1NQR0tme21pbi1oZWlnaHQ6LW1vei1jYWxjKDEw
MHZoIC0gNjVweCk7bWluLWhlaWdodDpjYWxjKDEwMHZoIC0gNjVweCk7cG9zaXRpb246cmVs
YXRpdmV9ZGl2LlQ0TGdOYnttaW4taGVpZ2h0Oi1tb3otY2FsYygxMDB2aCAtIDg5cHgpO21p
bi1oZWlnaHQ6Y2FsYygxMDB2aCAtIDg5cHgpO3Bvc2l0aW9uOnJlbGF0aXZlfX1AbWVkaWEg
KG1heC13aWR0aDo2MDBweCl7Yy13aXouU1NQR0tme21pbi1oZWlnaHQ6LW1vei1jYWxjKDEw
MHZoIC0gNTdweCk7bWluLWhlaWdodDpjYWxjKDEwMHZoIC0gNTdweCk7cG9zaXRpb246cmVs
YXRpdmV9ZGl2LlQ0TGdOYnttaW4taGVpZ2h0Oi1tb3otY2FsYygxMDB2aCAtIDcxcHgpO21p
bi1oZWlnaHQ6Y2FsYygxMDB2aCAtIDcxcHgpO3Bvc2l0aW9uOnJlbGF0aXZlfX0ud2U4N1Zj
LnpsZGxuZHtkaXNwbGF5Om5vbmV9QG1lZGlhIChtaW4td2lkdGg6MTAyNHB4KXsud2U4N1Zj
Llk1ZTVqZntkaXNwbGF5Om5vbmV9fS53ZTg3VmMuVHBubGVie2Rpc3BsYXk6bm9uZX0ud2U4
N1ZjLkYwQVhvLC53ZTg3VmMuZEI1TUhje2Rpc3BsYXk6YmxvY2t9QG1lZGlhIChtaW4td2lk
dGg6MTAyNHB4KXsud2U4N1ZjLmRCNU1IY3tkaXNwbGF5Om5vbmV9fS52WVpkN3tjb2xvcjoj
NWY2MzY4O21hcmdpbi10b3A6NHB4fXNlbnRpbmVse30NCi8qIyBzb3VyY2VVUkw9L18vbXNz
L2JvcS1pZGVudGl0eS9fL3NzL2s9Ym9xLWlkZW50aXR5LkFjY291bnRTZXR0aW5nc1NlY3Vy
aXR5QWR2aXNvclVpLlpSUWpwU2xhTS1JLkwuRjQuTy9hbT1TSnlFL2Q9MS9lZD0xL2N0PXpn
bXMvcnM9QU9hRW1sRWJnRmFsS2RHOERLVUtHSWt4anZTWWRRVVRDdy9tPXNlY3VyaXR5ZXZl
bnR2aWV3LF9iLF90cCAqLzwvc3R5bGU+PHNjcmlwdCBub25jZT0iakpsQlZxOGNBcU1iUkE5
c3pVcUdFdyI+b25Dc3NMb2FkKCk7PC9zY3JpcHQ+PHN0eWxlIG5vbmNlPSJqSmxCVnE4Y0Fx
TWJSQTlzelVxR0V3Ij5AZm9udC1mYWNle2ZvbnQtZmFtaWx5OidSb2JvdG8nO2ZvbnQtc3R5
bGU6bm9ybWFsO2ZvbnQtd2VpZ2h0OjMwMDtzcmM6bG9jYWwoJ1JvYm90byBMaWdodCcpLGxv
Y2FsKCdSb2JvdG8tTGlnaHQnKSx1cmwoLy9mb250cy5nc3RhdGljLmNvbS9zL3JvYm90by92
MTgvS0ZPbENucUV1OTJGcjFNbVNVNWZDUmM0RXNBLndvZmYyKWZvcm1hdCgnd29mZjInKTt1
bmljb2RlLXJhbmdlOlUrMDQ2MC0wNTJGLFUrMUM4MC0xQzg4LFUrMjBCNCxVKzJERTAtMkRG
RixVK0E2NDAtQTY5RixVK0ZFMkUtRkUyRjt9QGZvbnQtZmFjZXtmb250LWZhbWlseTonUm9i
b3RvJztmb250LXN0eWxlOm5vcm1hbDtmb250LXdlaWdodDozMDA7c3JjOmxvY2FsKCdSb2Jv
dG8gTGlnaHQnKSxsb2NhbCgnUm9ib3RvLUxpZ2h0JyksdXJsKC8vZm9udHMuZ3N0YXRpYy5j
b20vcy9yb2JvdG8vdjE4L0tGT2xDbnFFdTkyRnIxTW1TVTVmQUJjNEVzQS53b2ZmMilmb3Jt
YXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzA0MDAtMDQ1RixVKzA0OTAtMDQ5MSxVKzA0
QjAtMDRCMSxVKzIxMTY7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J1JvYm90byc7Zm9udC1z
dHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6MzAwO3NyYzpsb2NhbCgnUm9ib3RvIExpZ2h0Jyks
bG9jYWwoJ1JvYm90by1MaWdodCcpLHVybCgvL2ZvbnRzLmdzdGF0aWMuY29tL3Mvcm9ib3Rv
L3YxOC9LRk9sQ25xRXU5MkZyMU1tU1U1ZkNCYzRFc0Eud29mZjIpZm9ybWF0KCd3b2ZmMicp
O3VuaWNvZGUtcmFuZ2U6VSsxRjAwLTFGRkY7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J1Jv
Ym90byc7Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6MzAwO3NyYzpsb2NhbCgnUm9i
b3RvIExpZ2h0JyksbG9jYWwoJ1JvYm90by1MaWdodCcpLHVybCgvL2ZvbnRzLmdzdGF0aWMu
Y29tL3Mvcm9ib3RvL3YxOC9LRk9sQ25xRXU5MkZyMU1tU1U1ZkJ4YzRFc0Eud29mZjIpZm9y
bWF0KCd3b2ZmMicpO3VuaWNvZGUtcmFuZ2U6VSswMzcwLTAzRkY7fUBmb250LWZhY2V7Zm9u
dC1mYW1pbHk6J1JvYm90byc7Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6MzAwO3Ny
Yzpsb2NhbCgnUm9ib3RvIExpZ2h0JyksbG9jYWwoJ1JvYm90by1MaWdodCcpLHVybCgvL2Zv
bnRzLmdzdGF0aWMuY29tL3Mvcm9ib3RvL3YxOC9LRk9sQ25xRXU5MkZyMU1tU1U1ZkN4YzRF
c0Eud29mZjIpZm9ybWF0KCd3b2ZmMicpO3VuaWNvZGUtcmFuZ2U6VSswMTAyLTAxMDMsVSsw
MTEwLTAxMTEsVSsxRUEwLTFFRjksVSsyMEFCO31AZm9udC1mYWNle2ZvbnQtZmFtaWx5OidS
b2JvdG8nO2ZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtd2VpZ2h0OjMwMDtzcmM6bG9jYWwoJ1Jv
Ym90byBMaWdodCcpLGxvY2FsKCdSb2JvdG8tTGlnaHQnKSx1cmwoLy9mb250cy5nc3RhdGlj
LmNvbS9zL3JvYm90by92MTgvS0ZPbENucUV1OTJGcjFNbVNVNWZDaGM0RXNBLndvZmYyKWZv
cm1hdCgnd29mZjInKTt1bmljb2RlLXJhbmdlOlUrMDEwMC0wMjRGLFUrMDI1OSxVKzFFMDAt
MUVGRixVKzIwMjAsVSsyMEEwLTIwQUIsVSsyMEFELTIwQ0YsVSsyMTEzLFUrMkM2MC0yQzdG
LFUrQTcyMC1BN0ZGO31AZm9udC1mYWNle2ZvbnQtZmFtaWx5OidSb2JvdG8nO2ZvbnQtc3R5
bGU6bm9ybWFsO2ZvbnQtd2VpZ2h0OjMwMDtzcmM6bG9jYWwoJ1JvYm90byBMaWdodCcpLGxv
Y2FsKCdSb2JvdG8tTGlnaHQnKSx1cmwoLy9mb250cy5nc3RhdGljLmNvbS9zL3JvYm90by92
MTgvS0ZPbENucUV1OTJGcjFNbVNVNWZCQmM0LndvZmYyKWZvcm1hdCgnd29mZjInKTt1bmlj
b2RlLXJhbmdlOlUrMDAwMC0wMEZGLFUrMDEzMSxVKzAxNTItMDE1MyxVKzAyQkItMDJCQyxV
KzAyQzYsVSswMkRBLFUrMDJEQyxVKzIwMDAtMjA2RixVKzIwNzQsVSsyMEFDLFUrMjEyMixV
KzIxOTEsVSsyMTkzLFUrMjIxMixVKzIyMTUsVStGRUZGLFUrRkZGRDt9QGZvbnQtZmFjZXtm
b250LWZhbWlseTonUm9ib3RvJztmb250LXN0eWxlOm5vcm1hbDtmb250LXdlaWdodDo0MDA7
c3JjOmxvY2FsKCdSb2JvdG8gUmVndWxhcicpLGxvY2FsKCdSb2JvdG8tUmVndWxhcicpLHVy
bCgvL2ZvbnRzLmdzdGF0aWMuY29tL3Mvcm9ib3RvL3YxOC9LRk9tQ25xRXU5MkZyMU11NzJ4
S096WS53b2ZmMilmb3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzA0NjAtMDUyRixV
KzFDODAtMUM4OCxVKzIwQjQsVSsyREUwLTJERkYsVStBNjQwLUE2OUYsVStGRTJFLUZFMkY7
fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J1JvYm90byc7Zm9udC1zdHlsZTpub3JtYWw7Zm9u
dC13ZWlnaHQ6NDAwO3NyYzpsb2NhbCgnUm9ib3RvIFJlZ3VsYXInKSxsb2NhbCgnUm9ib3Rv
LVJlZ3VsYXInKSx1cmwoLy9mb250cy5nc3RhdGljLmNvbS9zL3JvYm90by92MTgvS0ZPbUNu
cUV1OTJGcjFNdTVteEtPelkud29mZjIpZm9ybWF0KCd3b2ZmMicpO3VuaWNvZGUtcmFuZ2U6
VSswNDAwLTA0NUYsVSswNDkwLTA0OTEsVSswNEIwLTA0QjEsVSsyMTE2O31AZm9udC1mYWNl
e2ZvbnQtZmFtaWx5OidSb2JvdG8nO2ZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtd2VpZ2h0OjQw
MDtzcmM6bG9jYWwoJ1JvYm90byBSZWd1bGFyJyksbG9jYWwoJ1JvYm90by1SZWd1bGFyJyks
dXJsKC8vZm9udHMuZ3N0YXRpYy5jb20vcy9yb2JvdG8vdjE4L0tGT21DbnFFdTkyRnIxTXU3
bXhLT3pZLndvZmYyKWZvcm1hdCgnd29mZjInKTt1bmljb2RlLXJhbmdlOlUrMUYwMC0xRkZG
O31AZm9udC1mYWNle2ZvbnQtZmFtaWx5OidSb2JvdG8nO2ZvbnQtc3R5bGU6bm9ybWFsO2Zv
bnQtd2VpZ2h0OjQwMDtzcmM6bG9jYWwoJ1JvYm90byBSZWd1bGFyJyksbG9jYWwoJ1JvYm90
by1SZWd1bGFyJyksdXJsKC8vZm9udHMuZ3N0YXRpYy5jb20vcy9yb2JvdG8vdjE4L0tGT21D
bnFFdTkyRnIxTXU0V3hLT3pZLndvZmYyKWZvcm1hdCgnd29mZjInKTt1bmljb2RlLXJhbmdl
OlUrMDM3MC0wM0ZGO31AZm9udC1mYWNle2ZvbnQtZmFtaWx5OidSb2JvdG8nO2ZvbnQtc3R5
bGU6bm9ybWFsO2ZvbnQtd2VpZ2h0OjQwMDtzcmM6bG9jYWwoJ1JvYm90byBSZWd1bGFyJyks
bG9jYWwoJ1JvYm90by1SZWd1bGFyJyksdXJsKC8vZm9udHMuZ3N0YXRpYy5jb20vcy9yb2Jv
dG8vdjE4L0tGT21DbnFFdTkyRnIxTXU3V3hLT3pZLndvZmYyKWZvcm1hdCgnd29mZjInKTt1
bmljb2RlLXJhbmdlOlUrMDEwMi0wMTAzLFUrMDExMC0wMTExLFUrMUVBMC0xRUY5LFUrMjBB
Qjt9QGZvbnQtZmFjZXtmb250LWZhbWlseTonUm9ib3RvJztmb250LXN0eWxlOm5vcm1hbDtm
b250LXdlaWdodDo0MDA7c3JjOmxvY2FsKCdSb2JvdG8gUmVndWxhcicpLGxvY2FsKCdSb2Jv
dG8tUmVndWxhcicpLHVybCgvL2ZvbnRzLmdzdGF0aWMuY29tL3Mvcm9ib3RvL3YxOC9LRk9t
Q25xRXU5MkZyMU11N0d4S096WS53b2ZmMilmb3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5n
ZTpVKzAxMDAtMDI0RixVKzAyNTksVSsxRTAwLTFFRkYsVSsyMDIwLFUrMjBBMC0yMEFCLFUr
MjBBRC0yMENGLFUrMjExMyxVKzJDNjAtMkM3RixVK0E3MjAtQTdGRjt9QGZvbnQtZmFjZXtm
b250LWZhbWlseTonUm9ib3RvJztmb250LXN0eWxlOm5vcm1hbDtmb250LXdlaWdodDo0MDA7
c3JjOmxvY2FsKCdSb2JvdG8gUmVndWxhcicpLGxvY2FsKCdSb2JvdG8tUmVndWxhcicpLHVy
bCgvL2ZvbnRzLmdzdGF0aWMuY29tL3Mvcm9ib3RvL3YxOC9LRk9tQ25xRXU5MkZyMU11NG14
Sy53b2ZmMilmb3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzAwMDAtMDBGRixVKzAx
MzEsVSswMTUyLTAxNTMsVSswMkJCLTAyQkMsVSswMkM2LFUrMDJEQSxVKzAyREMsVSsyMDAw
LTIwNkYsVSsyMDc0LFUrMjBBQyxVKzIxMjIsVSsyMTkxLFUrMjE5MyxVKzIyMTIsVSsyMjE1
LFUrRkVGRixVK0ZGRkQ7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J1JvYm90byc7Zm9udC1z
dHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NTAwO3NyYzpsb2NhbCgnUm9ib3RvIE1lZGl1bScp
LGxvY2FsKCdSb2JvdG8tTWVkaXVtJyksdXJsKC8vZm9udHMuZ3N0YXRpYy5jb20vcy9yb2Jv
dG8vdjE4L0tGT2xDbnFFdTkyRnIxTW1FVTlmQ1JjNEVzQS53b2ZmMilmb3JtYXQoJ3dvZmYy
Jyk7dW5pY29kZS1yYW5nZTpVKzA0NjAtMDUyRixVKzFDODAtMUM4OCxVKzIwQjQsVSsyREUw
LTJERkYsVStBNjQwLUE2OUYsVStGRTJFLUZFMkY7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6
J1JvYm90byc7Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NTAwO3NyYzpsb2NhbCgn
Um9ib3RvIE1lZGl1bScpLGxvY2FsKCdSb2JvdG8tTWVkaXVtJyksdXJsKC8vZm9udHMuZ3N0
YXRpYy5jb20vcy9yb2JvdG8vdjE4L0tGT2xDbnFFdTkyRnIxTW1FVTlmQUJjNEVzQS53b2Zm
Milmb3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzA0MDAtMDQ1RixVKzA0OTAtMDQ5
MSxVKzA0QjAtMDRCMSxVKzIxMTY7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J1JvYm90byc7
Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NTAwO3NyYzpsb2NhbCgnUm9ib3RvIE1l
ZGl1bScpLGxvY2FsKCdSb2JvdG8tTWVkaXVtJyksdXJsKC8vZm9udHMuZ3N0YXRpYy5jb20v
cy9yb2JvdG8vdjE4L0tGT2xDbnFFdTkyRnIxTW1FVTlmQ0JjNEVzQS53b2ZmMilmb3JtYXQo
J3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzFGMDAtMUZGRjt9QGZvbnQtZmFjZXtmb250LWZh
bWlseTonUm9ib3RvJztmb250LXN0eWxlOm5vcm1hbDtmb250LXdlaWdodDo1MDA7c3JjOmxv
Y2FsKCdSb2JvdG8gTWVkaXVtJyksbG9jYWwoJ1JvYm90by1NZWRpdW0nKSx1cmwoLy9mb250
cy5nc3RhdGljLmNvbS9zL3JvYm90by92MTgvS0ZPbENucUV1OTJGcjFNbUVVOWZCeGM0RXNB
LndvZmYyKWZvcm1hdCgnd29mZjInKTt1bmljb2RlLXJhbmdlOlUrMDM3MC0wM0ZGO31AZm9u
dC1mYWNle2ZvbnQtZmFtaWx5OidSb2JvdG8nO2ZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtd2Vp
Z2h0OjUwMDtzcmM6bG9jYWwoJ1JvYm90byBNZWRpdW0nKSxsb2NhbCgnUm9ib3RvLU1lZGl1
bScpLHVybCgvL2ZvbnRzLmdzdGF0aWMuY29tL3Mvcm9ib3RvL3YxOC9LRk9sQ25xRXU5MkZy
MU1tRVU5ZkN4YzRFc0Eud29mZjIpZm9ybWF0KCd3b2ZmMicpO3VuaWNvZGUtcmFuZ2U6VSsw
MTAyLTAxMDMsVSswMTEwLTAxMTEsVSsxRUEwLTFFRjksVSsyMEFCO31AZm9udC1mYWNle2Zv
bnQtZmFtaWx5OidSb2JvdG8nO2ZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtd2VpZ2h0OjUwMDtz
cmM6bG9jYWwoJ1JvYm90byBNZWRpdW0nKSxsb2NhbCgnUm9ib3RvLU1lZGl1bScpLHVybCgv
L2ZvbnRzLmdzdGF0aWMuY29tL3Mvcm9ib3RvL3YxOC9LRk9sQ25xRXU5MkZyMU1tRVU5ZkNo
YzRFc0Eud29mZjIpZm9ybWF0KCd3b2ZmMicpO3VuaWNvZGUtcmFuZ2U6VSswMTAwLTAyNEYs
VSswMjU5LFUrMUUwMC0xRUZGLFUrMjAyMCxVKzIwQTAtMjBBQixVKzIwQUQtMjBDRixVKzIx
MTMsVSsyQzYwLTJDN0YsVStBNzIwLUE3RkY7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J1Jv
Ym90byc7Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NTAwO3NyYzpsb2NhbCgnUm9i
b3RvIE1lZGl1bScpLGxvY2FsKCdSb2JvdG8tTWVkaXVtJyksdXJsKC8vZm9udHMuZ3N0YXRp
Yy5jb20vcy9yb2JvdG8vdjE4L0tGT2xDbnFFdTkyRnIxTW1FVTlmQkJjNC53b2ZmMilmb3Jt
YXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzAwMDAtMDBGRixVKzAxMzEsVSswMTUyLTAx
NTMsVSswMkJCLTAyQkMsVSswMkM2LFUrMDJEQSxVKzAyREMsVSsyMDAwLTIwNkYsVSsyMDc0
LFUrMjBBQyxVKzIxMjIsVSsyMTkxLFUrMjE5MyxVKzIyMTIsVSsyMjE1LFUrRkVGRixVK0ZG
RkQ7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J1JvYm90byc7Zm9udC1zdHlsZTpub3JtYWw7
Zm9udC13ZWlnaHQ6NzAwO3NyYzpsb2NhbCgnUm9ib3RvIEJvbGQnKSxsb2NhbCgnUm9ib3Rv
LUJvbGQnKSx1cmwoLy9mb250cy5nc3RhdGljLmNvbS9zL3JvYm90by92MTgvS0ZPbENucUV1
OTJGcjFNbVdVbGZDUmM0RXNBLndvZmYyKWZvcm1hdCgnd29mZjInKTt1bmljb2RlLXJhbmdl
OlUrMDQ2MC0wNTJGLFUrMUM4MC0xQzg4LFUrMjBCNCxVKzJERTAtMkRGRixVK0E2NDAtQTY5
RixVK0ZFMkUtRkUyRjt9QGZvbnQtZmFjZXtmb250LWZhbWlseTonUm9ib3RvJztmb250LXN0
eWxlOm5vcm1hbDtmb250LXdlaWdodDo3MDA7c3JjOmxvY2FsKCdSb2JvdG8gQm9sZCcpLGxv
Y2FsKCdSb2JvdG8tQm9sZCcpLHVybCgvL2ZvbnRzLmdzdGF0aWMuY29tL3Mvcm9ib3RvL3Yx
OC9LRk9sQ25xRXU5MkZyMU1tV1VsZkFCYzRFc0Eud29mZjIpZm9ybWF0KCd3b2ZmMicpO3Vu
aWNvZGUtcmFuZ2U6VSswNDAwLTA0NUYsVSswNDkwLTA0OTEsVSswNEIwLTA0QjEsVSsyMTE2
O31AZm9udC1mYWNle2ZvbnQtZmFtaWx5OidSb2JvdG8nO2ZvbnQtc3R5bGU6bm9ybWFsO2Zv
bnQtd2VpZ2h0OjcwMDtzcmM6bG9jYWwoJ1JvYm90byBCb2xkJyksbG9jYWwoJ1JvYm90by1C
b2xkJyksdXJsKC8vZm9udHMuZ3N0YXRpYy5jb20vcy9yb2JvdG8vdjE4L0tGT2xDbnFFdTky
RnIxTW1XVWxmQ0JjNEVzQS53b2ZmMilmb3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpV
KzFGMDAtMUZGRjt9QGZvbnQtZmFjZXtmb250LWZhbWlseTonUm9ib3RvJztmb250LXN0eWxl
Om5vcm1hbDtmb250LXdlaWdodDo3MDA7c3JjOmxvY2FsKCdSb2JvdG8gQm9sZCcpLGxvY2Fs
KCdSb2JvdG8tQm9sZCcpLHVybCgvL2ZvbnRzLmdzdGF0aWMuY29tL3Mvcm9ib3RvL3YxOC9L
Rk9sQ25xRXU5MkZyMU1tV1VsZkJ4YzRFc0Eud29mZjIpZm9ybWF0KCd3b2ZmMicpO3VuaWNv
ZGUtcmFuZ2U6VSswMzcwLTAzRkY7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J1JvYm90byc7
Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NzAwO3NyYzpsb2NhbCgnUm9ib3RvIEJv
bGQnKSxsb2NhbCgnUm9ib3RvLUJvbGQnKSx1cmwoLy9mb250cy5nc3RhdGljLmNvbS9zL3Jv
Ym90by92MTgvS0ZPbENucUV1OTJGcjFNbVdVbGZDeGM0RXNBLndvZmYyKWZvcm1hdCgnd29m
ZjInKTt1bmljb2RlLXJhbmdlOlUrMDEwMi0wMTAzLFUrMDExMC0wMTExLFUrMUVBMC0xRUY5
LFUrMjBBQjt9QGZvbnQtZmFjZXtmb250LWZhbWlseTonUm9ib3RvJztmb250LXN0eWxlOm5v
cm1hbDtmb250LXdlaWdodDo3MDA7c3JjOmxvY2FsKCdSb2JvdG8gQm9sZCcpLGxvY2FsKCdS
b2JvdG8tQm9sZCcpLHVybCgvL2ZvbnRzLmdzdGF0aWMuY29tL3Mvcm9ib3RvL3YxOC9LRk9s
Q25xRXU5MkZyMU1tV1VsZkNoYzRFc0Eud29mZjIpZm9ybWF0KCd3b2ZmMicpO3VuaWNvZGUt
cmFuZ2U6VSswMTAwLTAyNEYsVSswMjU5LFUrMUUwMC0xRUZGLFUrMjAyMCxVKzIwQTAtMjBB
QixVKzIwQUQtMjBDRixVKzIxMTMsVSsyQzYwLTJDN0YsVStBNzIwLUE3RkY7fUBmb250LWZh
Y2V7Zm9udC1mYW1pbHk6J1JvYm90byc7Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6
NzAwO3NyYzpsb2NhbCgnUm9ib3RvIEJvbGQnKSxsb2NhbCgnUm9ib3RvLUJvbGQnKSx1cmwo
Ly9mb250cy5nc3RhdGljLmNvbS9zL3JvYm90by92MTgvS0ZPbENucUV1OTJGcjFNbVdVbGZC
QmM0LndvZmYyKWZvcm1hdCgnd29mZjInKTt1bmljb2RlLXJhbmdlOlUrMDAwMC0wMEZGLFUr
MDEzMSxVKzAxNTItMDE1MyxVKzAyQkItMDJCQyxVKzAyQzYsVSswMkRBLFUrMDJEQyxVKzIw
MDAtMjA2RixVKzIwNzQsVSsyMEFDLFUrMjEyMixVKzIxOTEsVSsyMTkzLFUrMjIxMixVKzIy
MTUsVStGRUZGLFUrRkZGRDt9QGZvbnQtZmFjZXtmb250LWZhbWlseTonTWF0ZXJpYWwgSWNv
bnMgRXh0ZW5kZWQnO2ZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtd2VpZ2h0OjQwMDtzcmM6dXJs
KC8vZm9udHMuZ3N0YXRpYy5jb20vcy9tYXRlcmlhbGljb25zZXh0ZW5kZWQvdjUwL2tKRWpC
dmdYN0JnbmtTclV3VDhVbkxWYzM4WXlkZWpZWS1vRV9Mdkoud29mZjIpZm9ybWF0KCd3b2Zm
MicpO30ubWF0ZXJpYWwtaWNvbnMtZXh0ZW5kZWR7Zm9udC1mYW1pbHk6J01hdGVyaWFsIElj
b25zIEV4dGVuZGVkJztmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHlsZTpub3JtYWw7Zm9u
dC1zaXplOjI0cHg7bGluZS1oZWlnaHQ6MTtsZXR0ZXItc3BhY2luZzpub3JtYWw7dGV4dC10
cmFuc2Zvcm06bm9uZTtkaXNwbGF5OmlubGluZS1ibG9jazt3aGl0ZS1zcGFjZTpub3dyYXA7
d29yZC13cmFwOm5vcm1hbDtkaXJlY3Rpb246bHRyOy1tb3otZm9udC1mZWF0dXJlLXNldHRp
bmdzOidsaWdhJzstbW96LW9zeC1mb250LXNtb290aGluZzpncmF5c2NhbGU7fUBmb250LWZh
Y2V7Zm9udC1mYW1pbHk6J0dvb2dsZSBNYXRlcmlhbCBJY29ucyc7Zm9udC1zdHlsZTpub3Jt
YWw7Zm9udC13ZWlnaHQ6NDAwO3NyYzp1cmwoLy9mb250cy5nc3RhdGljLmNvbS9zL2dvb2ds
ZW1hdGVyaWFsaWNvbnMvdjE4L0d3Nmt3ZGZ3NlVuWExKQ2NtYWZaeUZSWGIzQkw5cnZpMFFa
RzNRLndvZmYyKWZvcm1hdCgnd29mZjInKTt9Lmdvb2dsZS1tYXRlcmlhbC1pY29uc3tmb250
LWZhbWlseTonR29vZ2xlIE1hdGVyaWFsIEljb25zJztmb250LXdlaWdodDpub3JtYWw7Zm9u
dC1zdHlsZTpub3JtYWw7Zm9udC1zaXplOjI0cHg7bGluZS1oZWlnaHQ6MTtsZXR0ZXItc3Bh
Y2luZzpub3JtYWw7dGV4dC10cmFuc2Zvcm06bm9uZTtkaXNwbGF5OmlubGluZS1ibG9jazt3
aGl0ZS1zcGFjZTpub3dyYXA7d29yZC13cmFwOm5vcm1hbDtkaXJlY3Rpb246bHRyOy1tb3ot
Zm9udC1mZWF0dXJlLXNldHRpbmdzOidsaWdhJzstbW96LW9zeC1mb250LXNtb290aGluZzpn
cmF5c2NhbGU7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J1Byb2R1Y3QgU2Fucyc7Zm9udC1z
dHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3NyYzpsb2NhbCgnUHJvZHVjdCBTYW5zJyks
bG9jYWwoJ1Byb2R1Y3RTYW5zLVJlZ3VsYXInKSx1cmwoLy9mb250cy5nc3RhdGljLmNvbS9z
L3Byb2R1Y3RzYW5zL3Y5L3B4aUR5cFFrb3QxVG5GaHNGTU9mR1NoVkdkZU9jRWcud29mZjIp
Zm9ybWF0KCd3b2ZmMicpO3VuaWNvZGUtcmFuZ2U6VSswMTAwLTAyNEYsVSswMjU5LFUrMUUw
MC0xRUZGLFUrMjAyMCxVKzIwQTAtMjBBQixVKzIwQUQtMjBDRixVKzIxMTMsVSsyQzYwLTJD
N0YsVStBNzIwLUE3RkY7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J1Byb2R1Y3QgU2Fucyc7
Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3NyYzpsb2NhbCgnUHJvZHVjdCBT
YW5zJyksbG9jYWwoJ1Byb2R1Y3RTYW5zLVJlZ3VsYXInKSx1cmwoLy9mb250cy5nc3RhdGlj
LmNvbS9zL3Byb2R1Y3RzYW5zL3Y5L3B4aUR5cFFrb3QxVG5GaHNGTU9mR1NoVkY5ZU8ud29m
ZjIpZm9ybWF0KCd3b2ZmMicpO3VuaWNvZGUtcmFuZ2U6VSswMDAwLTAwRkYsVSswMTMxLFUr
MDE1Mi0wMTUzLFUrMDJCQi0wMkJDLFUrMDJDNixVKzAyREEsVSswMkRDLFUrMjAwMC0yMDZG
LFUrMjA3NCxVKzIwQUMsVSsyMTIyLFUrMjE5MSxVKzIxOTMsVSsyMjEyLFUrMjIxNSxVK0ZF
RkYsVStGRkZEO31AZm9udC1mYWNle2ZvbnQtZmFtaWx5OidHb29nbGUgU2Fucyc7Zm9udC1z
dHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3NyYzpsb2NhbCgnR29vZ2xlIFNhbnMgUmVn
dWxhcicpLGxvY2FsKCdHb29nbGVTYW5zLVJlZ3VsYXInKSx1cmwoLy9mb250cy5nc3RhdGlj
LmNvbS9zL2dvb2dsZXNhbnMvdjE0LzRVYUdyRU5Ic3hKbEdEdUdvMU9JbEwzS3dwNU1LZy53
b2ZmMilmb3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzA0MDAtMDQ1RixVKzA0OTAt
MDQ5MSxVKzA0QjAtMDRCMSxVKzIxMTY7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J0dvb2ds
ZSBTYW5zJztmb250LXN0eWxlOm5vcm1hbDtmb250LXdlaWdodDo0MDA7c3JjOmxvY2FsKCdH
b29nbGUgU2FucyBSZWd1bGFyJyksbG9jYWwoJ0dvb2dsZVNhbnMtUmVndWxhcicpLHVybCgv
L2ZvbnRzLmdzdGF0aWMuY29tL3MvZ29vZ2xlc2Fucy92MTQvNFVhR3JFTkhzeEpsR0R1R28x
T0lsTDNOd3A1TUtnLndvZmYyKWZvcm1hdCgnd29mZjInKTt1bmljb2RlLXJhbmdlOlUrMDM3
MC0wM0ZGO31AZm9udC1mYWNle2ZvbnQtZmFtaWx5OidHb29nbGUgU2Fucyc7Zm9udC1zdHls
ZTpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3NyYzpsb2NhbCgnR29vZ2xlIFNhbnMgUmVndWxh
cicpLGxvY2FsKCdHb29nbGVTYW5zLVJlZ3VsYXInKSx1cmwoLy9mb250cy5nc3RhdGljLmNv
bS9zL2dvb2dsZXNhbnMvdjE0LzRVYUdyRU5Ic3hKbEdEdUdvMU9JbEwzQndwNU1LZy53b2Zm
Milmb3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzAxMDItMDEwMyxVKzAxMTAtMDEx
MSxVKzFFQTAtMUVGOSxVKzIwQUI7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J0dvb2dsZSBT
YW5zJztmb250LXN0eWxlOm5vcm1hbDtmb250LXdlaWdodDo0MDA7c3JjOmxvY2FsKCdHb29n
bGUgU2FucyBSZWd1bGFyJyksbG9jYWwoJ0dvb2dsZVNhbnMtUmVndWxhcicpLHVybCgvL2Zv
bnRzLmdzdGF0aWMuY29tL3MvZ29vZ2xlc2Fucy92MTQvNFVhR3JFTkhzeEpsR0R1R28xT0ls
TDNBd3A1TUtnLndvZmYyKWZvcm1hdCgnd29mZjInKTt1bmljb2RlLXJhbmdlOlUrMDEwMC0w
MjRGLFUrMDI1OSxVKzFFMDAtMUVGRixVKzIwMjAsVSsyMEEwLTIwQUIsVSsyMEFELTIwQ0Ys
VSsyMTEzLFUrMkM2MC0yQzdGLFUrQTcyMC1BN0ZGO31AZm9udC1mYWNle2ZvbnQtZmFtaWx5
OidHb29nbGUgU2Fucyc7Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3NyYzps
b2NhbCgnR29vZ2xlIFNhbnMgUmVndWxhcicpLGxvY2FsKCdHb29nbGVTYW5zLVJlZ3VsYXIn
KSx1cmwoLy9mb250cy5nc3RhdGljLmNvbS9zL2dvb2dsZXNhbnMvdjE0LzRVYUdyRU5Ic3hK
bEdEdUdvMU9JbEwzT3dwNC53b2ZmMilmb3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpV
KzAwMDAtMDBGRixVKzAxMzEsVSswMTUyLTAxNTMsVSswMkJCLTAyQkMsVSswMkM2LFUrMDJE
QSxVKzAyREMsVSsyMDAwLTIwNkYsVSsyMDc0LFUrMjBBQyxVKzIxMjIsVSsyMTkxLFUrMjE5
MyxVKzIyMTIsVSsyMjE1LFUrRkVGRixVK0ZGRkQ7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6
J0dvb2dsZSBTYW5zJztmb250LXN0eWxlOm5vcm1hbDtmb250LXdlaWdodDo1MDA7c3JjOmxv
Y2FsKCdHb29nbGUgU2FucyBNZWRpdW0nKSxsb2NhbCgnR29vZ2xlU2Fucy1NZWRpdW0nKSx1
cmwoLy9mb250cy5nc3RhdGljLmNvbS9zL2dvb2dsZXNhbnMvdjE0LzRVYWJyRU5Ic3hKbEdE
dUdvMU9JbExVOTRZdDNDd1otUHcud29mZjIpZm9ybWF0KCd3b2ZmMicpO3VuaWNvZGUtcmFu
Z2U6VSswNDAwLTA0NUYsVSswNDkwLTA0OTEsVSswNEIwLTA0QjEsVSsyMTE2O31AZm9udC1m
YWNle2ZvbnQtZmFtaWx5OidHb29nbGUgU2Fucyc7Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13
ZWlnaHQ6NTAwO3NyYzpsb2NhbCgnR29vZ2xlIFNhbnMgTWVkaXVtJyksbG9jYWwoJ0dvb2ds
ZVNhbnMtTWVkaXVtJyksdXJsKC8vZm9udHMuZ3N0YXRpYy5jb20vcy9nb29nbGVzYW5zL3Yx
NC80VWFickVOSHN4SmxHRHVHbzFPSWxMVTk0WXR3Q3daLVB3LndvZmYyKWZvcm1hdCgnd29m
ZjInKTt1bmljb2RlLXJhbmdlOlUrMDM3MC0wM0ZGO31AZm9udC1mYWNle2ZvbnQtZmFtaWx5
OidHb29nbGUgU2Fucyc7Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NTAwO3NyYzps
b2NhbCgnR29vZ2xlIFNhbnMgTWVkaXVtJyksbG9jYWwoJ0dvb2dsZVNhbnMtTWVkaXVtJyks
dXJsKC8vZm9udHMuZ3N0YXRpYy5jb20vcy9nb29nbGVzYW5zL3YxNC80VWFickVOSHN4SmxH
RHVHbzFPSWxMVTk0WXQ4Q3daLVB3LndvZmYyKWZvcm1hdCgnd29mZjInKTt1bmljb2RlLXJh
bmdlOlUrMDEwMi0wMTAzLFUrMDExMC0wMTExLFUrMUVBMC0xRUY5LFUrMjBBQjt9QGZvbnQt
ZmFjZXtmb250LWZhbWlseTonR29vZ2xlIFNhbnMnO2ZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQt
d2VpZ2h0OjUwMDtzcmM6bG9jYWwoJ0dvb2dsZSBTYW5zIE1lZGl1bScpLGxvY2FsKCdHb29n
bGVTYW5zLU1lZGl1bScpLHVybCgvL2ZvbnRzLmdzdGF0aWMuY29tL3MvZ29vZ2xlc2Fucy92
MTQvNFVhYnJFTkhzeEpsR0R1R28xT0lsTFU5NFl0OUN3Wi1Qdy53b2ZmMilmb3JtYXQoJ3dv
ZmYyJyk7dW5pY29kZS1yYW5nZTpVKzAxMDAtMDI0RixVKzAyNTksVSsxRTAwLTFFRkYsVSsy
MDIwLFUrMjBBMC0yMEFCLFUrMjBBRC0yMENGLFUrMjExMyxVKzJDNjAtMkM3RixVK0E3MjAt
QTdGRjt9QGZvbnQtZmFjZXtmb250LWZhbWlseTonR29vZ2xlIFNhbnMnO2ZvbnQtc3R5bGU6
bm9ybWFsO2ZvbnQtd2VpZ2h0OjUwMDtzcmM6bG9jYWwoJ0dvb2dsZSBTYW5zIE1lZGl1bScp
LGxvY2FsKCdHb29nbGVTYW5zLU1lZGl1bScpLHVybCgvL2ZvbnRzLmdzdGF0aWMuY29tL3Mv
Z29vZ2xlc2Fucy92MTQvNFVhYnJFTkhzeEpsR0R1R28xT0lsTFU5NFl0ekN3WS53b2ZmMilm
b3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzAwMDAtMDBGRixVKzAxMzEsVSswMTUy
LTAxNTMsVSswMkJCLTAyQkMsVSswMkM2LFUrMDJEQSxVKzAyREMsVSsyMDAwLTIwNkYsVSsy
MDc0LFUrMjBBQyxVKzIxMjIsVSsyMTkxLFUrMjE5MyxVKzIyMTIsVSsyMjE1LFUrRkVGRixV
K0ZGRkQ7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J0dvb2dsZSBTYW5zJztmb250LXN0eWxl
Om5vcm1hbDtmb250LXdlaWdodDo3MDA7c3JjOmxvY2FsKCdHb29nbGUgU2FucyBCb2xkJyks
bG9jYWwoJ0dvb2dsZVNhbnMtQm9sZCcpLHVybCgvL2ZvbnRzLmdzdGF0aWMuY29tL3MvZ29v
Z2xlc2Fucy92MTQvNFVhYnJFTkhzeEpsR0R1R28xT0lsTFYxNTR0M0N3Wi1Qdy53b2ZmMilm
b3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzA0MDAtMDQ1RixVKzA0OTAtMDQ5MSxV
KzA0QjAtMDRCMSxVKzIxMTY7fUBmb250LWZhY2V7Zm9udC1mYW1pbHk6J0dvb2dsZSBTYW5z
Jztmb250LXN0eWxlOm5vcm1hbDtmb250LXdlaWdodDo3MDA7c3JjOmxvY2FsKCdHb29nbGUg
U2FucyBCb2xkJyksbG9jYWwoJ0dvb2dsZVNhbnMtQm9sZCcpLHVybCgvL2ZvbnRzLmdzdGF0
aWMuY29tL3MvZ29vZ2xlc2Fucy92MTQvNFVhYnJFTkhzeEpsR0R1R28xT0lsTFYxNTR0d0N3
Wi1Qdy53b2ZmMilmb3JtYXQoJ3dvZmYyJyk7dW5pY29kZS1yYW5nZTpVKzAzNzAtMDNGRjt9
QGZvbnQtZmFjZXtmb250LWZhbWlseTonR29vZ2xlIFNhbnMnO2ZvbnQtc3R5bGU6bm9ybWFs
O2ZvbnQtd2VpZ2h0OjcwMDtzcmM6bG9jYWwoJ0dvb2dsZSBTYW5zIEJvbGQnKSxsb2NhbCgn
R29vZ2xlU2Fucy1Cb2xkJyksdXJsKC8vZm9udHMuZ3N0YXRpYy5jb20vcy9nb29nbGVzYW5z
L3YxNC80VWFickVOSHN4SmxHRHVHbzFPSWxMVjE1NHQ4Q3daLVB3LndvZmYyKWZvcm1hdCgn
d29mZjInKTt1bmljb2RlLXJhbmdlOlUrMDEwMi0wMTAzLFUrMDExMC0wMTExLFUrMUVBMC0x
RUY5LFUrMjBBQjt9QGZvbnQtZmFjZXtmb250LWZhbWlseTonR29vZ2xlIFNhbnMnO2ZvbnQt
c3R5bGU6bm9ybWFsO2ZvbnQtd2VpZ2h0OjcwMDtzcmM6bG9jYWwoJ0dvb2dsZSBTYW5zIEJv
bGQnKSxsb2NhbCgnR29vZ2xlU2Fucy1Cb2xkJyksdXJsKC8vZm9udHMuZ3N0YXRpYy5jb20v
cy9nb29nbGVzYW5zL3YxNC80VWFickVOSHN4SmxHRHVHbzFPSWxMVjE1NHQ5Q3daLVB3Lndv
ZmYyKWZvcm1hdCgnd29mZjInKTt1bmljb2RlLXJhbmdlOlUrMDEwMC0wMjRGLFUrMDI1OSxV
KzFFMDAtMUVGRixVKzIwMjAsVSsyMEEwLTIwQUIsVSsyMEFELTIwQ0YsVSsyMTEzLFUrMkM2
MC0yQzdGLFUrQTcyMC1BN0ZGO31AZm9udC1mYWNle2ZvbnQtZmFtaWx5OidHb29nbGUgU2Fu
cyc7Zm9udC1zdHlsZTpub3JtYWw7Zm9udC13ZWlnaHQ6NzAwO3NyYzpsb2NhbCgnR29vZ2xl
IFNhbnMgQm9sZCcpLGxvY2FsKCdHb29nbGVTYW5zLUJvbGQnKSx1cmwoLy9mb250cy5nc3Rh
dGljLmNvbS9zL2dvb2dsZXNhbnMvdjE0LzRVYWJyRU5Ic3hKbEdEdUdvMU9JbExWMTU0dHpD
d1kud29mZjIpZm9ybWF0KCd3b2ZmMicpO3VuaWNvZGUtcmFuZ2U6VSswMDAwLTAwRkYsVSsw
MTMxLFUrMDE1Mi0wMTUzLFUrMDJCQi0wMkJDLFUrMDJDNixVKzAyREEsVSswMkRDLFUrMjAw
MC0yMDZGLFUrMjA3NCxVKzIwQUMsVSsyMTIyLFUrMjE5MSxVKzIxOTMsVSsyMjEyLFUrMjIx
NSxVK0ZFRkYsVStGRkZEO308L3N0eWxlPjxzY3JpcHQgbm9uY2U9ImpKbEJWcThjQXFNYlJB
OXN6VXFHRXciPihmdW5jdGlvbigpeyd1c2Ugc3RyaWN0Jzt2YXIgZj10aGlzfHxzZWxmOw0K
ZnVuY3Rpb24gYWEoYSl7dmFyIGI9dHlwZW9mIGE7aWYoIm9iamVjdCI9PWIpaWYoYSl7aWYo
YSBpbnN0YW5jZW9mIEFycmF5KXJldHVybiJhcnJheSI7aWYoYSBpbnN0YW5jZW9mIE9iamVj
dClyZXR1cm4gYjt2YXIgYz1PYmplY3QucHJvdG90eXBlLnRvU3RyaW5nLmNhbGwoYSk7aWYo
IltvYmplY3QgV2luZG93XSI9PWMpcmV0dXJuIm9iamVjdCI7aWYoIltvYmplY3QgQXJyYXld
Ij09Y3x8Im51bWJlciI9PXR5cGVvZiBhLmxlbmd0aCYmInVuZGVmaW5lZCIhPXR5cGVvZiBh
LnNwbGljZSYmInVuZGVmaW5lZCIhPXR5cGVvZiBhLnByb3BlcnR5SXNFbnVtZXJhYmxlJiYh
YS5wcm9wZXJ0eUlzRW51bWVyYWJsZSgic3BsaWNlIikpcmV0dXJuImFycmF5IjtpZigiW29i
amVjdCBGdW5jdGlvbl0iPT1jfHwidW5kZWZpbmVkIiE9dHlwZW9mIGEuY2FsbCYmInVuZGVm
aW5lZCIhPXR5cGVvZiBhLnByb3BlcnR5SXNFbnVtZXJhYmxlJiYhYS5wcm9wZXJ0eUlzRW51
bWVyYWJsZSgiY2FsbCIpKXJldHVybiJmdW5jdGlvbiJ9ZWxzZSByZXR1cm4ibnVsbCI7ZWxz
ZSBpZigiZnVuY3Rpb24iPT0NCmImJiJ1bmRlZmluZWQiPT10eXBlb2YgYS5jYWxsKXJldHVy
biJvYmplY3QiO3JldHVybiBifXZhciBoPURhdGUubm93fHxmdW5jdGlvbigpe3JldHVybitu
ZXcgRGF0ZX07dmFyIHQ9e307ZnVuY3Rpb24gYmEoYSxiKXtpZihudWxsPT09YilyZXR1cm4h
MTtpZigiY29udGFpbnMiaW4gYSYmMT09Yi5ub2RlVHlwZSlyZXR1cm4gYS5jb250YWlucyhi
KTtpZigiY29tcGFyZURvY3VtZW50UG9zaXRpb24iaW4gYSlyZXR1cm4gYT09Ynx8ISEoYS5j
b21wYXJlRG9jdW1lbnRQb3NpdGlvbihiKSYxNik7Zm9yKDtiJiZhIT1iOyliPWIucGFyZW50
Tm9kZTtyZXR1cm4gYj09YX07ZnVuY3Rpb24gY2EoYSxiKXtyZXR1cm4gZnVuY3Rpb24oYyl7
Y3x8KGM9d2luZG93LmV2ZW50KTtyZXR1cm4gYi5jYWxsKGEsYyl9fWZ1bmN0aW9uIHUoYSl7
YT1hLnRhcmdldHx8YS5zcmNFbGVtZW50OyFhLmdldEF0dHJpYnV0ZSYmYS5wYXJlbnROb2Rl
JiYoYT1hLnBhcmVudE5vZGUpO3JldHVybiBhfXZhciB3PSJ1bmRlZmluZWQiIT10eXBlb2Yg
bmF2aWdhdG9yJiYvTWFjaW50b3NoLy50ZXN0KG5hdmlnYXRvci51c2VyQWdlbnQpLGRhPSJ1
bmRlZmluZWQiIT10eXBlb2YgbmF2aWdhdG9yJiYhL09wZXJhLy50ZXN0KG5hdmlnYXRvci51
c2VyQWdlbnQpJiYvV2ViS2l0Ly50ZXN0KG5hdmlnYXRvci51c2VyQWdlbnQpLGVhPXtBOjEs
SU5QVVQ6MSxURVhUQVJFQToxLFNFTEVDVDoxLEJVVFRPTjoxfTsNCmZ1bmN0aW9uIHgoYSl7
cmV0dXJuKGE9YS5jaGFuZ2VkVG91Y2hlcyYmYS5jaGFuZ2VkVG91Y2hlc1swXXx8YS50b3Vj
aGVzJiZhLnRvdWNoZXNbMF0pP3tjbGllbnRYOmEuY2xpZW50WCxjbGllbnRZOmEuY2xpZW50
WSxzY3JlZW5YOmEuc2NyZWVuWCxzY3JlZW5ZOmEuc2NyZWVuWX06bnVsbH0NCmZ1bmN0aW9u
IHkoYSl7dmFyIGI9e307Yi5vcmlnaW5hbEV2ZW50VHlwZT1hLnR5cGU7Yi50eXBlPSJjbGlj
ayI7Zm9yKHZhciBjIGluIGEpe3ZhciBkPWFbY107InR5cGUiPT1jfHwic3JjRWxlbWVudCI9
PWN8fCJmdW5jdGlvbiI9PWFhKGQpfHwoYltjXT1kKX1iLnRpbWVTdGFtcD1oKCk7Yi5kZWZh
dWx0UHJldmVudGVkPSExO2IucHJldmVudERlZmF1bHQ9ZmE7Yi5fcHJvcGFnYXRpb25TdG9w
cGVkPSExO2Iuc3RvcFByb3BhZ2F0aW9uPWphO2lmKGE9eChhKSliLmNsaWVudFg9YS5jbGll
bnRYLGIuY2xpZW50WT1hLmNsaWVudFksYi5zY3JlZW5YPWEuc2NyZWVuWCxiLnNjcmVlblk9
YS5zY3JlZW5ZO3JldHVybiBifWZ1bmN0aW9uIGthKCl7dGhpcy5fbW91c2VFdmVudHNQcmV2
ZW50ZWQ9ITB9ZnVuY3Rpb24gZmEoKXt0aGlzLmRlZmF1bHRQcmV2ZW50ZWQ9ITB9ZnVuY3Rp
b24gamEoKXt0aGlzLl9wcm9wYWdhdGlvblN0b3BwZWQ9ITB9DQp2YXIgbGE9e0E6MTMsQlVU
VE9OOjAsQ0hFQ0tCT1g6MzIsQ09NQk9CT1g6MTMsRklMRTowLEdSSURDRUxMOjEzLExJTks6
MTMsTElTVEJPWDoxMyxNRU5VOjAsTUVOVUJBUjowLE1FTlVJVEVNOjAsTUVOVUlURU1DSEVD
S0JPWDowLE1FTlVJVEVNUkFESU86MCxPUFRJT046MCxSQURJTzozMixSQURJT0dST1VQOjMy
LFJFU0VUOjAsU1VCTUlUOjAsU1dJVENIOjMyLFRBQjowLFRSRUU6MTMsVFJFRUlURU06MTN9
LG1hPXtDSEVDS0JPWDohMCxGSUxFOiEwLE9QVElPTjohMCxSQURJTzohMH0sbmE9e0NPTE9S
OiEwLERBVEU6ITAsREFURVRJTUU6ITAsIkRBVEVUSU1FLUxPQ0FMIjohMCxFTUFJTDohMCxN
T05USDohMCxOVU1CRVI6ITAsUEFTU1dPUkQ6ITAsUkFOR0U6ITAsU0VBUkNIOiEwLFRFTDoh
MCxURVhUOiEwLFRFWFRBUkVBOiEwLFRJTUU6ITAsVVJMOiEwLFdFRUs6ITB9LG9hPXtBOiEw
LEFSRUE6ITAsQlVUVE9OOiEwLERJQUxPRzohMCxJTUc6ITAsSU5QVVQ6ITAsTElOSzohMCwN
Ck1FTlU6ITAsT1BUR1JPVVA6ITAsT1BUSU9OOiEwLFBST0dSRVNTOiEwLFNFTEVDVDohMCxU
RVhUQVJFQTohMH07ZnVuY3Rpb24gcGEoKXt0aGlzLmo9W107dGhpcy5hPVtdO3RoaXMuYz1b
XTt0aGlzLmk9e307dGhpcy5iPW51bGw7dGhpcy5nPVtdfXZhciBBLHFhLHJhPSJ1bmRlZmlu
ZWQiIT10eXBlb2YgbmF2aWdhdG9yJiYvaVBob25lfGlQYWR8aVBvZC8udGVzdChuYXZpZ2F0
b3IudXNlckFnZW50KSxzYT1TdHJpbmcucHJvdG90eXBlLnRyaW0/ZnVuY3Rpb24oYSl7cmV0
dXJuIGEudHJpbSgpfTpmdW5jdGlvbihhKXtyZXR1cm4gYS5yZXBsYWNlKC9eXHMrLywiIiku
cmVwbGFjZSgvXHMrJC8sIiIpfSx0YT0vXHMqO1xzKi8sQj1udWxsOw0KZnVuY3Rpb24gdWEo
YSxiKXtyZXR1cm4gZnVuY3Rpb24oYyl7dmFyIGQ9YjtpZigiY2xpY2siPT1kJiYodyYmYy5t
ZXRhS2V5fHwhdyYmYy5jdHJsS2V5fHwyPT1jLndoaWNofHxudWxsPT1jLndoaWNoJiY0PT1j
LmJ1dHRvbnx8Yy5zaGlmdEtleSkpZD0iY2xpY2ttb2QiO2Vsc2V7dmFyIGc9Yy53aGljaHx8
Yy5rZXlDb2RlfHxjLmtleTtkYSYmMz09ZyYmKGc9MTMpO2lmKDEzIT1nJiYzMiE9ZylnPSEx
O2Vsc2V7dmFyIGU9dShjKSxsOyhsPSJrZXlkb3duIiE9Yy50eXBlfHwhISghKCJnZXRBdHRy
aWJ1dGUiaW4gZSl8fChlLmdldEF0dHJpYnV0ZSgidHlwZSIpfHxlLnRhZ05hbWUpLnRvVXBw
ZXJDYXNlKClpbiBuYXx8IkJVVFRPTiI9PWUudGFnTmFtZS50b1VwcGVyQ2FzZSgpfHxlLnR5
cGUmJiJGSUxFIj09ZS50eXBlLnRvVXBwZXJDYXNlKCl8fGUuaXNDb250ZW50RWRpdGFibGUp
fHxjLmN0cmxLZXl8fGMuc2hpZnRLZXl8fGMuYWx0S2V5fHxjLm1ldGFLZXl8fChlLmdldEF0
dHJpYnV0ZSgidHlwZSIpfHwNCmUudGFnTmFtZSkudG9VcHBlckNhc2UoKWluIG1hJiYzMj09
Zyl8fCgobD1lLnRhZ05hbWUgaW4gZWEpfHwobD1lLmdldEF0dHJpYnV0ZU5vZGUoInRhYmlu
ZGV4IiksbD1udWxsIT1sJiZsLnNwZWNpZmllZCksbD0hKGwmJiFlLmRpc2FibGVkKSk7aWYo
bClnPSExO2Vsc2V7bD0oZS5nZXRBdHRyaWJ1dGUoInJvbGUiKXx8ZS50eXBlfHxlLnRhZ05h
bWUpLnRvVXBwZXJDYXNlKCk7dmFyIHA9IShsIGluIGxhKSYmMTM9PWc7ZT0iSU5QVVQiIT1l
LnRhZ05hbWUudG9VcHBlckNhc2UoKXx8ISFlLnR5cGU7Zz0oMD09bGFbbF0lZ3x8cCkmJmV9
fWcmJihkPSJjbGlja2tleSIpfWU9Yy5zcmNFbGVtZW50fHxjLnRhcmdldDtnPUMoZCxjLGUs
IiIsbnVsbCk7Zm9yKGw9ZTtsJiZsIT10aGlzO2w9bC5fX293bmVyfHxsLnBhcmVudE5vZGUp
e3ZhciBrPWw7Yjp7dmFyIG49dm9pZCAwO3ZhciByPWs7cD1kO3ZhciBoYT1jO3ZhciBtPXIu
X19qc2FjdGlvbjtpZighbSl7dmFyIHY7bT1udWxsOyJnZXRBdHRyaWJ1dGUiaW4NCnImJiht
PXIuZ2V0QXR0cmlidXRlKCJqc2FjdGlvbiIpKTtpZih2PW0pe209dFt2XTtpZighbSl7bT17
fTtmb3IodmFyIEg9di5zcGxpdCh0YSksRGE9SD9ILmxlbmd0aDowLEk9MDtJPERhO0krKyl7
dmFyIHo9SFtJXTtpZih6KXt2YXIgSj16LmluZGV4T2YoIjoiKSxpYT0tMSE9SjttW2lhP3Nh
KHouc3Vic3RyKDAsSikpOiJjbGljayJdPWlhP3NhKHouc3Vic3RyKEorMSkpOnp9fXRbdl09
bX1yLl9fanNhY3Rpb249bX1lbHNlIG09dmEsci5fX2pzYWN0aW9uPW19Im1heWJlX2NsaWNr
Ij09cCYmbS5jbGljaz8obj1wLHA9ImNsaWNrIik6ImNsaWNra2V5Ij09cD9wPSJjbGljayI6
ImNsaWNrIiE9cHx8bS5jbGlja3x8KHA9ImNsaWNrb25seSIpO3Y9bnVsbDtpZihtLmNsaWNr
KXtyPXdhKHIsaGEsbSk7aWYoIXIpe249e2Y6cCxhY3Rpb246IiIsZXZlbnQ6bnVsbCxsOiEw
fTticmVhayBifXIhPWhhJiYodj1yLHA9ci50eXBlKX1uPXtmOm4/bjpwLGFjdGlvbjptW3Bd
fHwiIixldmVudDp2LA0KbDohMX19aWYobi5sfHxuLmFjdGlvbilicmVha31uJiYoZz1DKG4u
ZixuLmV2ZW50fHxjLGUsbi5hY3Rpb258fCIiLGssZy50aW1lU3RhbXApKTtnJiYidG91Y2hl
bmQiPT1nLmV2ZW50VHlwZSYmKGcuZXZlbnQuX3ByZXZlbnRNb3VzZUV2ZW50cz1rYSk7aWYo
biYmbi5hY3Rpb24pe2lmKGU9ImNsaWNra2V5Ij09ZCllPXUoYyksZT0oZS50eXBlfHxlLnRh
Z05hbWUpLnRvVXBwZXJDYXNlKCksKGU9MzI9PShjLndoaWNofHxjLmtleUNvZGV8fGMua2V5
KSYmIkNIRUNLQk9YIiE9ZSl8fChlPXUoYyksbD1lLnRhZ05hbWUudG9VcHBlckNhc2UoKSxu
PShlLmdldEF0dHJpYnV0ZSgicm9sZSIpfHwiIikudG9VcHBlckNhc2UoKSxlPSJCVVRUT04i
PT09bHx8IkJVVFRPTiI9PT1uPyEwOiEoZS50YWdOYW1lLnRvVXBwZXJDYXNlKClpbiBvYSl8
fCJBIj09PWx8fCJTRUxFQ1QiPT09bHx8KGUuZ2V0QXR0cmlidXRlKCJ0eXBlIil8fGUudGFn
TmFtZSkudG9VcHBlckNhc2UoKWluIG1hfHwoZS5nZXRBdHRyaWJ1dGUoInR5cGUiKXx8DQpl
LnRhZ05hbWUpLnRvVXBwZXJDYXNlKClpbiBuYT8hMTohMCk7ZSYmKGMucHJldmVudERlZmF1
bHQ/Yy5wcmV2ZW50RGVmYXVsdCgpOmMucmV0dXJuVmFsdWU9ITEpO2lmKCJtb3VzZWVudGVy
Ij09ZHx8Im1vdXNlbGVhdmUiPT1kKWlmKGU9Yy5yZWxhdGVkVGFyZ2V0LCEoIm1vdXNlb3Zl
ciI9PWMudHlwZSYmIm1vdXNlZW50ZXIiPT1kfHwibW91c2VvdXQiPT1jLnR5cGUmJiJtb3Vz
ZWxlYXZlIj09ZCl8fGUmJihlPT09a3x8YmEoayxlKSkpZy5hY3Rpb249IiIsZy5hY3Rpb25F
bGVtZW50PW51bGw7ZWxzZXtkPXt9O2Zvcih2YXIgcSBpbiBjKSJmdW5jdGlvbiIhPT10eXBl
b2YgY1txXSYmInNyY0VsZW1lbnQiIT09cSYmInRhcmdldCIhPT1xJiYoZFtxXT1jW3FdKTtk
LnR5cGU9Im1vdXNlb3ZlciI9PWMudHlwZT8ibW91c2VlbnRlciI6Im1vdXNlbGVhdmUiO2Qu
dGFyZ2V0PWQuc3JjRWxlbWVudD1rO2QuYnViYmxlcz0hMTtnLmV2ZW50PWQ7Zy50YXJnZXRF
bGVtZW50PWt9fWVsc2UgZy5hY3Rpb249DQoiIixnLmFjdGlvbkVsZW1lbnQ9bnVsbDtrPWc7
YS5iJiYhay5ldmVudC5hMTF5c2dkJiYocT1DKGsuZXZlbnRUeXBlLGsuZXZlbnQsay50YXJn
ZXRFbGVtZW50LGsuYWN0aW9uLGsuYWN0aW9uRWxlbWVudCxrLnRpbWVTdGFtcCksImNsaWNr
b25seSI9PXEuZXZlbnRUeXBlJiYocS5ldmVudFR5cGU9ImNsaWNrIiksYS5iKHEsITApKTtp
ZihrLmFjdGlvbkVsZW1lbnQpe2lmKGEuYikhay5hY3Rpb25FbGVtZW50fHwiQSIhPWsuYWN0
aW9uRWxlbWVudC50YWdOYW1lfHwiY2xpY2siIT1rLmV2ZW50VHlwZSYmImNsaWNrbW9kIiE9
ay5ldmVudFR5cGV8fChjLnByZXZlbnREZWZhdWx0P2MucHJldmVudERlZmF1bHQoKTpjLnJl
dHVyblZhbHVlPSExKSxhLmIoayk7ZWxzZXtpZigocT1mLmRvY3VtZW50KSYmIXEuY3JlYXRl
RXZlbnQmJnEuY3JlYXRlRXZlbnRPYmplY3QpdHJ5e3ZhciBLPXEuY3JlYXRlRXZlbnRPYmpl
Y3QoYyl9Y2F0Y2goSmEpe0s9Y31lbHNlIEs9YztrLmV2ZW50PUs7YS5nLnB1c2goayl9InRv
dWNoZW5kIj09DQprLmV2ZW50LnR5cGUmJmsuZXZlbnQuX21vdXNlRXZlbnRzUHJldmVudGVk
JiYoQj15KGsuZXZlbnQpKX19fWZ1bmN0aW9uIEMoYSxiLGMsZCxnLGUpe3JldHVybntldmVu
dFR5cGU6YSxldmVudDpiLHRhcmdldEVsZW1lbnQ6YyxhY3Rpb246ZCxhY3Rpb25FbGVtZW50
OmcsdGltZVN0YW1wOmV8fGgoKX19dmFyIHZhPXt9Ow0KZnVuY3Rpb24gd2EoYSxiLGMpe2lm
KCJjbGljayI9PWIudHlwZXx8Yi50YXJnZXRUb3VjaGVzJiYxPGIudGFyZ2V0VG91Y2hlcy5s
ZW5ndGgpcmV0dXJuIGI7dmFyIGQ9QSxnPWIudGFyZ2V0O2lmKGcmJnhhKGcpKXJldHVybiBi
O2c9eChiKTtpZigidG91Y2hzdGFydCIhPWIudHlwZXx8Yy50b3VjaHN0YXJ0fHxjLnRvdWNo
ZW5kKWlmKCJ0b3VjaGVuZCI9PWIudHlwZSYmZCYmZC5ub2RlPT1hKWlmKGIuZGVmYXVsdFBy
ZXZlbnRlZHx8ZyYmNDxNYXRoLmFicyhnLmNsaWVudFgtZC54KStNYXRoLmFicyhnLmNsaWVu
dFktZC55KSlBPW51bGw7ZWxzZXtCPWE9eShiKTtiLnN0b3BQcm9wYWdhdGlvbigpO2IucHJl
dmVudERlZmF1bHQoKTtkb2N1bWVudC5jcmVhdGVFdmVudD8oYj1kb2N1bWVudC5jcmVhdGVF
dmVudCgiTW91c2VFdmVudCIpLGIuaW5pdE1vdXNlRXZlbnQoYS50eXBlLCEwLCEwLHdpbmRv
dyxhLmRldGFpbHx8MSxhLnNjcmVlblh8fDAsYS5zY3JlZW5ZfHwwLGEuY2xpZW50WHx8DQow
LGEuY2xpZW50WXx8MCxhLmN0cmxLZXl8fCExLGEuYWx0S2V5fHwhMSxhLnNoaWZ0S2V5fHwh
MSxhLm1ldGFLZXl8fCExLGEuYnV0dG9ufHwwLGEucmVsYXRlZFRhcmdldHx8bnVsbCkpOihi
PWRvY3VtZW50LmNyZWF0ZUV2ZW50T2JqZWN0KCksYi50eXBlPWEudHlwZSxiLmNsaWVudFg9
YS5jbGllbnRYLGIuY2xpZW50WT1hLmNsaWVudFksYi5idXR0b249YS5idXR0b24sYi5kZXRh
aWw9YS5kZXRhaWwsYi5jdHJsS2V5PWEuY3RybEtleSxiLmFsdEtleT1hLmFsdEtleSxiLnNo
aWZ0S2V5PWEuc2hpZnRLZXksYi5tZXRhS2V5PWEubWV0YUtleSk7Yi5tPWEudGltZVN0YW1w
O2IuX2Zhc3RjbGljaz0hMDthOntmb3IoYz1hLnRhcmdldDtjJiZjLmdldEF0dHJpYnV0ZTsp
e2Q9Yy50YWdOYW1lfHwiIjtpZigiQSI9PWR8fCJJTlBVVCI9PWR8fCJURVhUQVJFQSI9PWR8
fCJTRUxFQ1QiPT1kfHwiQlVUVE9OIj09ZHx8Yy5nZXRBdHRyaWJ1dGUoInRhYkluZGV4Iikp
YnJlYWsgYTtjPWMucGFyZW50Tm9kZX1jPQ0KbnVsbH1jP2MuZm9jdXMoKTpkb2N1bWVudC5h
Y3RpdmVFbGVtZW50JiZkb2N1bWVudC5hY3RpdmVFbGVtZW50LmJsdXIoKTthLnRhcmdldC5k
aXNwYXRjaEV2ZW50KGIpO2lmKCFiLmRlZmF1bHRQcmV2ZW50ZWQpe2lmKGRvY3VtZW50LmFj
dGl2ZUVsZW1lbnQmJmRvY3VtZW50LmFjdGl2ZUVsZW1lbnQhPWIudGFyZ2V0JiZkb2N1bWVu
dC5hY3RpdmVFbGVtZW50IT1jJiZ4YShkb2N1bWVudC5hY3RpdmVFbGVtZW50KSl0cnl7ZG9j
dW1lbnQuYWN0aXZlRWxlbWVudC5ibHVyKCl9Y2F0Y2goZSl7fXRyeXt3aW5kb3cuZ2V0U2Vs
ZWN0aW9uKCkucmVtb3ZlQWxsUmFuZ2VzKCl9Y2F0Y2goZSl7fX1yZXR1cm4gbnVsbH1lbHNl
InRvdWNobW92ZSI9PWIudHlwZSYmZCYmZyYmNDxNYXRoLmFicyhnLmNsaWVudFgtZC54KStN
YXRoLmFicyhnLmNsaWVudFktZC55KSYmKEE9bnVsbCk7ZWxzZSByZXR1cm4gQT17bm9kZTph
LHg6Zz9nLmNsaWVudFg6MCx5Omc/Zy5jbGllbnRZOjB9LEI9bnVsbCxjbGVhclRpbWVvdXQo
cWEpLA0KcWE9c2V0VGltZW91dCh5YSw0MDApLG51bGw7cmV0dXJuIGJ9ZnVuY3Rpb24geGEo
YSl7dmFyIGI9YS50YWdOYW1lfHwiIjtyZXR1cm4iVEVYVEFSRUEiPT1ifHwiSU5QVVQiPT1i
fHwiU0VMRUNUIj09Ynx8Ik9QVElPTiI9PWJ8fGEuaXNDb250ZW50RWRpdGFibGV9ZnVuY3Rp
b24geWEoKXtBPW51bGx9ZnVuY3Rpb24gRChhKXtpZighYS5fZmFzdGNsaWNrKXt2YXIgYj1C
O2lmKGIpaWYoODAwPGgoKS1iLnRpbWVTdGFtcClCPW51bGw7ZWxzZXt2YXIgYz00Pj1NYXRo
LmFicyhhLmNsaWVudFgtYi5jbGllbnRYKStNYXRoLmFicyhhLmNsaWVudFktYi5jbGllbnRZ
KTtiLnRhcmdldD09YS50YXJnZXR8fGM/KGEuc3RvcFByb3BhZ2F0aW9uKCksYS5wcmV2ZW50
RGVmYXVsdCgpLCJjbGljayI9PWEudHlwZSYmKEI9bnVsbCkpOkI9bnVsbH19fQ0KZnVuY3Rp
b24gemEoYSxiKXtyZXR1cm4gZnVuY3Rpb24oYyl7dmFyIGQ9YSxnPWIsZT0hMTsibW91c2Vl
bnRlciI9PWQ/ZD0ibW91c2VvdmVyIjoibW91c2VsZWF2ZSI9PWQmJihkPSJtb3VzZW91dCIp
O2lmKGMuYWRkRXZlbnRMaXN0ZW5lcil7aWYoImZvY3VzIj09ZHx8ImJsdXIiPT1kfHwiZXJy
b3IiPT1kfHwibG9hZCI9PWQpZT0hMDtjLmFkZEV2ZW50TGlzdGVuZXIoZCxnLGUpfWVsc2Ug
Yy5hdHRhY2hFdmVudCYmKCJmb2N1cyI9PWQ/ZD0iZm9jdXNpbiI6ImJsdXIiPT1kJiYoZD0i
Zm9jdXNvdXQiKSxnPWNhKGMsZyksYy5hdHRhY2hFdmVudCgib24iK2QsZykpO3JldHVybntm
OmQsaDpnLGNhcHR1cmU6ZX19fQ0KZnVuY3Rpb24gRShhLGIsYyl7aWYoIWEuaS5oYXNPd25Q
cm9wZXJ0eShiKSl7dmFyIGQ9dWEoYSxiKTtjPXphKGN8fGIsZCk7YS5pW2JdPWQ7YS5qLnB1
c2goYyk7Zm9yKGQ9MDtkPGEuYS5sZW5ndGg7KytkKXt2YXIgZz1hLmFbZF07Zy5iLnB1c2go
Yy5jYWxsKG51bGwsZy5hKSl9ImNsaWNrIj09YiYmRShhLCJrZXlkb3duIik7ImNsaWNrIj09
YiYmKEUoYSwidG91Y2hzdGFydCIpLEUoYSwidG91Y2hlbmQiKSxFKGEsInRvdWNobW92ZSIp
LGRvY3VtZW50LmFkZEV2ZW50TGlzdGVuZXImJihkb2N1bWVudC5hZGRFdmVudExpc3RlbmVy
KCJjbGljayIsRCwhMCksZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigibW91c2V1cCIsRCwh
MCksZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigibW91c2Vkb3duIixELCEwKSkpfX1wYS5w
cm90b3R5cGUuaD1mdW5jdGlvbihhKXtyZXR1cm4gdGhpcy5pW2FdfTsNCmZ1bmN0aW9uIEFh
KGEpe3ZhciBiPUYsYz1hLmE7cmEmJihjLnN0eWxlLmN1cnNvcj0icG9pbnRlciIpO2Zvcihj
PTA7YzxiLmoubGVuZ3RoOysrYylhLmIucHVzaChiLmpbY10uY2FsbChudWxsLGEuYSkpfWZ1
bmN0aW9uIEJhKGEpe2Zvcih2YXIgYj1DYSxjPTA7YzxiLmxlbmd0aDsrK2MpaWYoYltjXS5h
IT1hLmEmJkVhKGJbY10uYSxhLmEpKXJldHVybiEwO3JldHVybiExfWZ1bmN0aW9uIEVhKGEs
Yil7Zm9yKDthIT1iJiZiLnBhcmVudE5vZGU7KWI9Yi5wYXJlbnROb2RlO3JldHVybiBhPT1i
fTt2YXIgRz13aW5kb3csRj1uZXcgcGE7dmFyIEZhPUcuZG9jdW1lbnQuZG9jdW1lbnRFbGVt
ZW50LEw9bmV3IGZ1bmN0aW9uKGEpe3RoaXMuYT1hO3RoaXMuYj1bXX0oRmEpLE07Yjp7Zm9y
KHZhciBOPTA7TjxGLmEubGVuZ3RoO04rKylpZihFYShGLmFbTl0uYSxGYSkpe009ITA7YnJl
YWsgYn1NPSExfQ0KaWYoTSlGLmMucHVzaChMKTtlbHNle0FhKEwpO0YuYS5wdXNoKEwpO2Zv
cih2YXIgQ2E9Ri5jLmNvbmNhdChGLmEpLE89W10sUD1bXSxRPTA7UTxGLmEubGVuZ3RoOysr
USl7dmFyIFI9Ri5hW1FdO2lmKEJhKFIpKXtPLnB1c2goUik7Zm9yKHZhciBTPTA7UzxSLmIu
bGVuZ3RoOysrUyl7dmFyIFQ9Ui5hLFU9Ui5iW1NdO1QucmVtb3ZlRXZlbnRMaXN0ZW5lcj9U
LnJlbW92ZUV2ZW50TGlzdGVuZXIoVS5mLFUuaCxVLmNhcHR1cmUpOlQuZGV0YWNoRXZlbnQm
JlQuZGV0YWNoRXZlbnQoIm9uIitVLmYsVS5oKX1SLmI9W119ZWxzZSBQLnB1c2goUil9Zm9y
KHZhciBWPTA7VjxGLmMubGVuZ3RoOysrVil7dmFyIFc9Ri5jW1ZdO0JhKFcpP08ucHVzaChX
KTooUC5wdXNoKFcpLEFhKFcpKX1GLmE9UDtGLmM9T31FKEYsImNsaWNrIik7RShGLCJkYmxj
bGljayIpO0UoRiwiZm9jdXMiKTtFKEYsImZvY3VzaW4iKTtFKEYsImJsdXIiKTtFKEYsImVy
cm9yIik7RShGLCJmb2N1c291dCIpO0UoRiwia2V5ZG93biIpOw0KRShGLCJrZXl1cCIpO0Uo
Riwia2V5cHJlc3MiKTtFKEYsImxvYWQiKTtFKEYsIm1vdXNlb3ZlciIpO0UoRiwibW91c2Vv
dXQiKTtFKEYsIm1vdXNlZW50ZXIiKTtFKEYsIm1vdXNlbGVhdmUiKTtFKEYsInN1Ym1pdCIp
O0UoRiwidG91Y2hzdGFydCIpO0UoRiwidG91Y2hlbmQiKTtFKEYsInRvdWNobW92ZSIpO0Uo
RiwiYXV4Y2xpY2siKTtFKEYsImNoYW5nZSIpO0UoRiwiaW5wdXQiKTtFKEYsInRleHRpbnB1
dCIpO0UoRiwiY3V0Iik7RShGLCJwYXN0ZSIpO0UoRiwibW91c2Vkb3duIik7RShGLCJtb3Vz
ZXVwIik7RShGLCJ3aGVlbCIpO0UoRiwiY29udGV4dG1lbnUiKTtFKEYsImRyYWdvdmVyIik7
RShGLCJkcmFnZW50ZXIiKTtFKEYsImRyYWdsZWF2ZSIpO0UoRiwiZHJvcCIpO0UoRiwiZHJh
Z3N0YXJ0Iik7RShGLCJkcmFnZW5kIik7dmFyIEdhLEhhOyJvbndlYmtpdGFuaW1hdGlvbmVu
ZCJpbiBHJiYoR2E9IndlYmtpdEFuaW1hdGlvbkVuZCIpO0UoRiwiYW5pbWF0aW9uZW5kIixH
YSk7DQoib253ZWJraXR0cmFuc2l0aW9uZW5kImluIEcmJihIYT0id2Via2l0VHJhbnNpdGlv
bkVuZCIpO0UoRiwidHJhbnNpdGlvbmVuZCIsSGEpO3ZhciBJYT1mdW5jdGlvbihhKXtyZXR1
cm57dHJpZ2dlcjpmdW5jdGlvbihiKXt2YXIgYz1hLmgoYi50eXBlKTtjfHwoRShhLGIudHlw
ZSksYz1hLmgoYi50eXBlKSk7dmFyIGQ9Yi50YXJnZXR8fGIuc3JjRWxlbWVudDtjJiZjLmNh
bGwoZC5vd25lckRvY3VtZW50LmRvY3VtZW50RWxlbWVudCxiKX0sYmluZDpmdW5jdGlvbihi
KXthLmI9YjthLmcmJigwPGEuZy5sZW5ndGgmJmIoYS5nKSxhLmc9bnVsbCl9fX0oRiksWD1b
IkJPUV93aXpiaW5kIl0sWT13aW5kb3d8fGY7WFswXWluIFl8fCJ1bmRlZmluZWQiPT10eXBl
b2YgWS5leGVjU2NyaXB0fHxZLmV4ZWNTY3JpcHQoInZhciAiK1hbMF0pOw0KZm9yKHZhciBa
O1gubGVuZ3RoJiYoWj1YLnNoaWZ0KCkpOylYLmxlbmd0aHx8dm9pZCAwPT09SWE/WVtaXSYm
WVtaXSE9PU9iamVjdC5wcm90b3R5cGVbWl0/WT1ZW1pdOlk9WVtaXT17fTpZW1pdPUlhO30p
LmNhbGwodGhpcyk7DQo8L3NjcmlwdD48c2NyaXB0IG5vY29sbGVjdD0iIiBocmVmPSJodHRw
czovL3d3dy5nc3RhdGljLmNvbS9fL21zcy9ib3EtaWRlbnRpdHkvXy9qcy9rPWJvcS1pZGVu
dGl0eS5BY2NvdW50U2V0dGluZ3NTZWN1cml0eUFkdmlzb3JVaS5mci5wbmdjVU9FOWtMZy5l
czUuTy9hbT1TSnlFL2Q9MS9leGNtPV9iLF90cCxzZWN1cml0eWV2ZW50dmlldy9lZD0xL2Rn
PTAvd3Q9Mi9jdD16Z21zL3JzPUFPYUVtbEZDbTVRQW5CU0MxblJjTWQ3NHgyNWdjOHhUNUEv
bT1fYixfdHAiIGlkPSJiYXNlLWpzIiBub25jZT0iakpsQlZxOGNBcU1iUkE5c3pVcUdFdyI+
InVzZSBzdHJpY3QiO3RoaXMuZGVmYXVsdF9BY2NvdW50U2V0dGluZ3NTZWN1cml0eUFkdmlz
b3JVaT10aGlzLmRlZmF1bHRfQWNjb3VudFNldHRpbmdzU2VjdXJpdHlBZHZpc29yVWl8fHt9
OyhmdW5jdGlvbihfKXt2YXIgd2luZG93PXRoaXM7DQp0cnl7DQp2YXIgYWFhLGJhYSxjYWEs
ZGFhLGVhYSxmYWEsdWEsZ2FhLGFhLHZhLHdhLHlhLHphLGhhYSxBYSxpYWEsRWEsSGEsSWE7
Xy5jYT1mdW5jdGlvbihhKXtyZXR1cm4gZnVuY3Rpb24oKXtyZXR1cm4gYWFbYV0uYXBwbHko
dGhpcyxhcmd1bWVudHMpfX07Xy5kYT1mdW5jdGlvbihhLGIpe3JldHVybiBhYVthXT1ifTtf
Lm09ZnVuY3Rpb24oKXshZWEmJmZhJiYoZWE9ZmEoKSk7cmV0dXJuIGVhfTthYWE9ZnVuY3Rp
b24oYSl7dmFyIGI9YS5FeWE7Xy5pYShhKSYmKGI9YS5NYj8hYS5NYi5mYXRhbDp2b2lkIDAp
O3JldHVybiBifTtiYWE9ZnVuY3Rpb24oYSl7dmFyIGI9YS53bztfLmlhKGEpJiYoYj1hLk1i
P2EuTWIud286dm9pZCAwKTtyZXR1cm4gYn07DQpjYWE9ZnVuY3Rpb24oYSxiKXt2YXIgYz1i
YWEoYSk7aWYobnVsbD09Y3x8MD5jKXJldHVybiBiO3ZhciBkPSExO2IudGhlbihmdW5jdGlv
bigpe2Q9ITB9LGZ1bmN0aW9uKCl7fSk7Yz1fLmphKGMsXy5rYShudWxsKSk7YS5NYiYmKGEu
TWIuYks9ITEpO2MudGhlbihmdW5jdGlvbigpe2EuTWImJihhLk1iLmJLPSFkKX0pO3JldHVy
biBfLmxhKFtiLGNdKX07ZGFhPWZ1bmN0aW9uKGEsYil7cmV0dXJuIGFhYShhKT9fLm1hKGIs
ZnVuY3Rpb24oKXtyZXR1cm4gXy5rYShudWxsKX0pOmJ9O2VhYT1mdW5jdGlvbihhLGIpe3Jl
dHVybiBfLmlhKGEpJiZhLk1iJiZhLk1iLm0wP2IudGhlbihmdW5jdGlvbihjKXshYyYmYS5N
YiYmYS5NYi5iSz8oYz1uZXcgXy5uYSxjPV8ub2EoYywxLDIsMCkpOmM9bnVsbDtyZXR1cm4g
Y30sZnVuY3Rpb24oYyl7cmV0dXJuInVuZGVmaW5lZCIhPXR5cGVvZiBfLnBhJiZjIGluc3Rh
bmNlb2YgXy5wYT9jLnN0YXR1czpudWxsfSk6Yn07DQpmYWE9ZnVuY3Rpb24oYSl7dmFyIGI9
ITA7Yj12b2lkIDA9PT1iPyExOmI7YT12b2lkIDA9PT1hPyExOmE7dmFyIGM9IiIsZD0iIjt3
aW5kb3cmJndpbmRvdy5fRl9jc3NSb3dLZXkmJihjPXdpbmRvdy5fRl9jc3NSb3dLZXksd2lu
ZG93Ll9GX2NvbWJpbmVkU2lnbmF0dXJlJiYoZD13aW5kb3cuX0ZfY29tYmluZWRTaWduYXR1
cmUpKTtpZihjJiYiZnVuY3Rpb24iIT09dHlwZW9mIHdpbmRvdy5fRl9pbnN0YWxsQ3NzKXRo
cm93IEVycm9yKCJZIik7dmFyIGU9IiI7dmFyIGY9Xy5xYS5fRl9qc1VybCxnPWRvY3VtZW50
LmdldEVsZW1lbnRCeUlkKCJiYXNlLWpzIik7aWYoZyl7dmFyIGg9Zy50YWdOYW1lLnRvVXBw
ZXJDYXNlKCk7aWYoIlNDUklQVCI9PWh8fCJMSU5LIj09aCllPWcuc3JjP2cuc3JjOmcuZ2V0
QXR0cmlidXRlKCJocmVmIil9aWYoZiYmZSl7aWYoZiE9ZSl0aHJvdyBFcnJvcigiV2AiK2Yr
ImAiK2UpO2U9Zn1lbHNlIGU9Znx8ZTtpZighcmEoZSkpdGhyb3cgRXJyb3IoIlgiKTsNCmE9
bmV3IF8uc2EoXy50YShlKSxjLGQsYixhKTtiPV8ubSgpO2IuRmI9YTtiLmVPKCEwKTtyZXR1
cm4gYX07dWE9ZnVuY3Rpb24oYSl7YT1hLl9fc295O2EuY3phKCExKTtyZXR1cm4gYX07Z2Fh
PWZ1bmN0aW9uKGEpe2Zvcig7YSYmIWEuV0cmJiJDLVdJWiIhPT1hLnRhZ05hbWU7KWE9YS5w
YXJlbnRFbGVtZW50O3JldHVybiBhfTthYT1bXTt2YT1mdW5jdGlvbihhKXt2YXIgYj0wO3Jl
dHVybiBmdW5jdGlvbigpe3JldHVybiBiPGEubGVuZ3RoP3tkb25lOiExLHZhbHVlOmFbYisr
XX06e2RvbmU6ITB9fX07d2E9ImZ1bmN0aW9uIj09dHlwZW9mIE9iamVjdC5kZWZpbmVQcm9w
ZXJ0aWVzP09iamVjdC5kZWZpbmVQcm9wZXJ0eTpmdW5jdGlvbihhLGIsYyl7YSE9QXJyYXku
cHJvdG90eXBlJiZhIT1PYmplY3QucHJvdG90eXBlJiYoYVtiXT1jLnZhbHVlKX07DQpfLnhh
PSJ1bmRlZmluZWQiIT10eXBlb2Ygd2luZG93JiZ3aW5kb3c9PT10aGlzP3RoaXM6InVuZGVm
aW5lZCIhPXR5cGVvZiBnbG9iYWwmJm51bGwhPWdsb2JhbD9nbG9iYWw6dGhpczt5YT1mdW5j
dGlvbigpe3lhPWZ1bmN0aW9uKCl7fTtfLnhhLlN5bWJvbHx8KF8ueGEuU3ltYm9sPWhhYSl9
O3phPWZ1bmN0aW9uKGEsYil7dGhpcy5oYT1hO3dhKHRoaXMsImRlc2NyaXB0aW9uIix7Y29u
ZmlndXJhYmxlOiEwLHdyaXRhYmxlOiEwLHZhbHVlOmJ9KX07emEucHJvdG90eXBlLnRvU3Ry
aW5nPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuaGF9O2hhYT1mdW5jdGlvbigpe2Z1bmN0aW9u
IGEoYyl7aWYodGhpcyBpbnN0YW5jZW9mIGEpdGhyb3cgbmV3IFR5cGVFcnJvcigiYSIpO3Jl
dHVybiBuZXcgemEoImpzY29tcF9zeW1ib2xfIisoY3x8IiIpKyJfIitiKyssYyl9dmFyIGI9
MDtyZXR1cm4gYX0oKTsNCl8uQmE9ZnVuY3Rpb24oKXt5YSgpO3ZhciBhPV8ueGEuU3ltYm9s
Lml0ZXJhdG9yO2F8fChhPV8ueGEuU3ltYm9sLml0ZXJhdG9yPV8ueGEuU3ltYm9sKCJTeW1i
b2wuaXRlcmF0b3IiKSk7ImZ1bmN0aW9uIiE9dHlwZW9mIEFycmF5LnByb3RvdHlwZVthXSYm
d2EoQXJyYXkucHJvdG90eXBlLGEse2NvbmZpZ3VyYWJsZTohMCx3cml0YWJsZTohMCx2YWx1
ZTpmdW5jdGlvbigpe3JldHVybiBBYSh2YSh0aGlzKSl9fSk7Xy5CYT1mdW5jdGlvbigpe319
O0FhPWZ1bmN0aW9uKGEpe18uQmEoKTthPXtuZXh0OmF9O2FbXy54YS5TeW1ib2wuaXRlcmF0
b3JdPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXN9O3JldHVybiBhfTtfLkNhPWZ1bmN0aW9uKGEp
e3ZhciBiPSJ1bmRlZmluZWQiIT10eXBlb2YgU3ltYm9sJiZTeW1ib2wuaXRlcmF0b3ImJmFb
U3ltYm9sLml0ZXJhdG9yXTtyZXR1cm4gYj9iLmNhbGwoYSk6e25leHQ6dmEoYSl9fTsNCl8u
RGE9ZnVuY3Rpb24oYSl7aWYoIShhIGluc3RhbmNlb2YgQXJyYXkpKXthPV8uQ2EoYSk7Zm9y
KHZhciBiLGM9W107IShiPWEubmV4dCgpKS5kb25lOyljLnB1c2goYi52YWx1ZSk7YT1jfXJl
dHVybiBhfTtpYWE9ImZ1bmN0aW9uIj09dHlwZW9mIE9iamVjdC5jcmVhdGU/T2JqZWN0LmNy
ZWF0ZTpmdW5jdGlvbihhKXt2YXIgYj1mdW5jdGlvbigpe307Yi5wcm90b3R5cGU9YTtyZXR1
cm4gbmV3IGJ9O2lmKCJmdW5jdGlvbiI9PXR5cGVvZiBPYmplY3Quc2V0UHJvdG90eXBlT2Yp
RWE9T2JqZWN0LnNldFByb3RvdHlwZU9mO2Vsc2V7dmFyIEZhO2E6e3ZhciBqYWE9e2E6ITB9
LEdhPXt9O3RyeXtHYS5fX3Byb3RvX189amFhO0ZhPUdhLmE7YnJlYWsgYX1jYXRjaChhKXt9
RmE9ITF9RWE9RmE/ZnVuY3Rpb24oYSxiKXthLl9fcHJvdG9fXz1iO2lmKGEuX19wcm90b19f
IT09Yil0aHJvdyBuZXcgVHlwZUVycm9yKCJiYCIrYSk7cmV0dXJuIGF9Om51bGx9SGE9RWE7
DQpfLnE9ZnVuY3Rpb24oYSxiKXthLnByb3RvdHlwZT1pYWEoYi5wcm90b3R5cGUpO2EucHJv
dG90eXBlLmNvbnN0cnVjdG9yPWE7aWYoSGEpSGEoYSxiKTtlbHNlIGZvcih2YXIgYyBpbiBi
KWlmKCJwcm90b3R5cGUiIT1jKWlmKE9iamVjdC5kZWZpbmVQcm9wZXJ0aWVzKXt2YXIgZD1P
YmplY3QuZ2V0T3duUHJvcGVydHlEZXNjcmlwdG9yKGIsYyk7ZCYmT2JqZWN0LmRlZmluZVBy
b3BlcnR5KGEsYyxkKX1lbHNlIGFbY109YltjXTthLlRiPWIucHJvdG90eXBlfTtJYT1mdW5j
dGlvbihhLGIpe2lmKGIpe3ZhciBjPV8ueGE7YT1hLnNwbGl0KCIuIik7Zm9yKHZhciBkPTA7
ZDxhLmxlbmd0aC0xO2QrKyl7dmFyIGU9YVtkXTtlIGluIGN8fChjW2VdPXt9KTtjPWNbZV19
YT1hW2EubGVuZ3RoLTFdO2Q9Y1thXTtiPWIoZCk7YiE9ZCYmbnVsbCE9YiYmd2EoYyxhLHtj
b25maWd1cmFibGU6ITAsd3JpdGFibGU6ITAsdmFsdWU6Yn0pfX07DQpJYSgiUHJvbWlzZSIs
ZnVuY3Rpb24oYSl7ZnVuY3Rpb24gYigpe3RoaXMuaGE9bnVsbH1mdW5jdGlvbiBjKGcpe3Jl
dHVybiBnIGluc3RhbmNlb2YgZT9nOm5ldyBlKGZ1bmN0aW9uKGgpe2goZyl9KX1pZihhKXJl
dHVybiBhO2IucHJvdG90eXBlLmthPWZ1bmN0aW9uKGcpe2lmKG51bGw9PXRoaXMuaGEpe3Ro
aXMuaGE9W107dmFyIGg9dGhpczt0aGlzLnRhKGZ1bmN0aW9uKCl7aC5BYSgpfSl9dGhpcy5o
YS5wdXNoKGcpfTt2YXIgZD1fLnhhLnNldFRpbWVvdXQ7Yi5wcm90b3R5cGUudGE9ZnVuY3Rp
b24oZyl7ZChnLDApfTtiLnByb3RvdHlwZS5BYT1mdW5jdGlvbigpe2Zvcig7dGhpcy5oYSYm
dGhpcy5oYS5sZW5ndGg7KXt2YXIgZz10aGlzLmhhO3RoaXMuaGE9W107Zm9yKHZhciBoPTA7
aDxnLmxlbmd0aDsrK2gpe3ZhciBsPWdbaF07Z1toXT1udWxsO3RyeXtsKCl9Y2F0Y2gobil7
dGhpcy53YShuKX19fXRoaXMuaGE9bnVsbH07Yi5wcm90b3R5cGUud2E9ZnVuY3Rpb24oZyl7
dGhpcy50YShmdW5jdGlvbigpe3Rocm93IGc7DQp9KX07dmFyIGU9ZnVuY3Rpb24oZyl7dGhp
cy5rYT0wO3RoaXMudGE9dm9pZCAwO3RoaXMuaGE9W107dmFyIGg9dGhpcy53YSgpO3RyeXtn
KGgucmVzb2x2ZSxoLnJlamVjdCl9Y2F0Y2gobCl7aC5yZWplY3QobCl9fTtlLnByb3RvdHlw
ZS53YT1mdW5jdGlvbigpe2Z1bmN0aW9uIGcobil7cmV0dXJuIGZ1bmN0aW9uKHApe2x8fChs
PSEwLG4uY2FsbChoLHApKX19dmFyIGg9dGhpcyxsPSExO3JldHVybntyZXNvbHZlOmcodGhp
cy5OYSkscmVqZWN0OmcodGhpcy5BYSl9fTtlLnByb3RvdHlwZS5OYT1mdW5jdGlvbihnKXtp
ZihnPT09dGhpcyl0aGlzLkFhKG5ldyBUeXBlRXJyb3IoImMiKSk7ZWxzZSBpZihnIGluc3Rh
bmNlb2YgZSl0aGlzLk5iKGcpO2Vsc2V7YTpzd2l0Y2godHlwZW9mIGcpe2Nhc2UgIm9iamVj
dCI6dmFyIGg9bnVsbCE9ZzticmVhayBhO2Nhc2UgImZ1bmN0aW9uIjpoPSEwO2JyZWFrIGE7
ZGVmYXVsdDpoPSExfWg/dGhpcy5NYShnKTp0aGlzLklhKGcpfX07ZS5wcm90b3R5cGUuTWE9
DQpmdW5jdGlvbihnKXt2YXIgaD12b2lkIDA7dHJ5e2g9Zy50aGVufWNhdGNoKGwpe3RoaXMu
QWEobCk7cmV0dXJufSJmdW5jdGlvbiI9PXR5cGVvZiBoP3RoaXMuUmEoaCxnKTp0aGlzLklh
KGcpfTtlLnByb3RvdHlwZS5BYT1mdW5jdGlvbihnKXt0aGlzLkthKDIsZyl9O2UucHJvdG90
eXBlLklhPWZ1bmN0aW9uKGcpe3RoaXMuS2EoMSxnKX07ZS5wcm90b3R5cGUuS2E9ZnVuY3Rp
b24oZyxoKXtpZigwIT10aGlzLmthKXRocm93IEVycm9yKCJkYCIrZysiYCIraCsiYCIrdGhp
cy5rYSk7dGhpcy5rYT1nO3RoaXMudGE9aDt0aGlzLkZhKCl9O2UucHJvdG90eXBlLkZhPWZ1
bmN0aW9uKCl7aWYobnVsbCE9dGhpcy5oYSl7Zm9yKHZhciBnPTA7Zzx0aGlzLmhhLmxlbmd0
aDsrK2cpZi5rYSh0aGlzLmhhW2ddKTt0aGlzLmhhPW51bGx9fTt2YXIgZj1uZXcgYjtlLnBy
b3RvdHlwZS5OYj1mdW5jdGlvbihnKXt2YXIgaD10aGlzLndhKCk7Zy5UdihoLnJlc29sdmUs
aC5yZWplY3QpfTtlLnByb3RvdHlwZS5SYT0NCmZ1bmN0aW9uKGcsaCl7dmFyIGw9dGhpcy53
YSgpO3RyeXtnLmNhbGwoaCxsLnJlc29sdmUsbC5yZWplY3QpfWNhdGNoKG4pe2wucmVqZWN0
KG4pfX07ZS5wcm90b3R5cGUudGhlbj1mdW5jdGlvbihnLGgpe2Z1bmN0aW9uIGwodix6KXty
ZXR1cm4iZnVuY3Rpb24iPT10eXBlb2Ygdj9mdW5jdGlvbihDKXt0cnl7bih2KEMpKX1jYXRj
aChFKXtwKEUpfX06en12YXIgbixwLHQ9bmV3IGUoZnVuY3Rpb24odix6KXtuPXY7cD16fSk7
dGhpcy5UdihsKGcsbiksbChoLHApKTtyZXR1cm4gdH07ZS5wcm90b3R5cGVbImNhdGNoIl09
ZnVuY3Rpb24oZyl7cmV0dXJuIHRoaXMudGhlbih2b2lkIDAsZyl9O2UucHJvdG90eXBlLlR2
PWZ1bmN0aW9uKGcsaCl7ZnVuY3Rpb24gbCgpe3N3aXRjaChuLmthKXtjYXNlIDE6ZyhuLnRh
KTticmVhaztjYXNlIDI6aChuLnRhKTticmVhaztkZWZhdWx0OnRocm93IEVycm9yKCJlYCIr
bi5rYSk7fX12YXIgbj10aGlzO251bGw9PXRoaXMuaGE/Zi5rYShsKTp0aGlzLmhhLnB1c2go
bCl9Ow0KZS5yZXNvbHZlPWM7ZS5yZWplY3Q9ZnVuY3Rpb24oZyl7cmV0dXJuIG5ldyBlKGZ1
bmN0aW9uKGgsbCl7bChnKX0pfTtlLnJhY2U9ZnVuY3Rpb24oZyl7cmV0dXJuIG5ldyBlKGZ1
bmN0aW9uKGgsbCl7Zm9yKHZhciBuPV8uQ2EoZykscD1uLm5leHQoKTshcC5kb25lO3A9bi5u
ZXh0KCkpYyhwLnZhbHVlKS5UdihoLGwpfSl9O2UuYWxsPWZ1bmN0aW9uKGcpe3ZhciBoPV8u
Q2EoZyksbD1oLm5leHQoKTtyZXR1cm4gbC5kb25lP2MoW10pOm5ldyBlKGZ1bmN0aW9uKG4s
cCl7ZnVuY3Rpb24gdChDKXtyZXR1cm4gZnVuY3Rpb24oRSl7dltDXT1FO3otLTswPT16JiZu
KHYpfX12YXIgdj1bXSx6PTA7ZG8gdi5wdXNoKHZvaWQgMCkseisrLGMobC52YWx1ZSkuVHYo
dCh2Lmxlbmd0aC0xKSxwKSxsPWgubmV4dCgpO3doaWxlKCFsLmRvbmUpfSl9O3JldHVybiBl
fSk7DQpJYSgiQXJyYXkucHJvdG90eXBlLmZpbmQiLGZ1bmN0aW9uKGEpe3JldHVybiBhP2E6
ZnVuY3Rpb24oYixjKXthOnt2YXIgZD10aGlzO2QgaW5zdGFuY2VvZiBTdHJpbmcmJihkPVN0
cmluZyhkKSk7Zm9yKHZhciBlPWQubGVuZ3RoLGY9MDtmPGU7ZisrKXt2YXIgZz1kW2ZdO2lm
KGIuY2FsbChjLGcsZixkKSl7Yj1nO2JyZWFrIGF9fWI9dm9pZCAwfXJldHVybiBifX0pO3Zh
ciBMYT1mdW5jdGlvbihhLGIsYyl7aWYobnVsbD09YSl0aHJvdyBuZXcgVHlwZUVycm9yKCJo
YCIrYyk7aWYoYiBpbnN0YW5jZW9mIFJlZ0V4cCl0aHJvdyBuZXcgVHlwZUVycm9yKCJpYCIr
Yyk7cmV0dXJuIGErIiJ9Ow0KSWEoIlN0cmluZy5wcm90b3R5cGUuZW5kc1dpdGgiLGZ1bmN0
aW9uKGEpe3JldHVybiBhP2E6ZnVuY3Rpb24oYixjKXt2YXIgZD1MYSh0aGlzLGIsImVuZHNX
aXRoIik7dm9pZCAwPT09YyYmKGM9ZC5sZW5ndGgpO2M9TWF0aC5tYXgoMCxNYXRoLm1pbihj
fDAsZC5sZW5ndGgpKTtmb3IodmFyIGU9Yi5sZW5ndGg7MDxlJiYwPGM7KWlmKGRbLS1jXSE9
YlstLWVdKXJldHVybiExO3JldHVybiAwPj1lfX0pO0lhKCJTdHJpbmcucHJvdG90eXBlLnN0
YXJ0c1dpdGgiLGZ1bmN0aW9uKGEpe3JldHVybiBhP2E6ZnVuY3Rpb24oYixjKXt2YXIgZD1M
YSh0aGlzLGIsInN0YXJ0c1dpdGgiKSxlPWQubGVuZ3RoLGY9Yi5sZW5ndGg7Yz1NYXRoLm1h
eCgwLE1hdGgubWluKGN8MCxkLmxlbmd0aCkpO2Zvcih2YXIgZz0wO2c8ZiYmYzxlOylpZihk
W2MrK10hPWJbZysrXSlyZXR1cm4hMTtyZXR1cm4gZz49Zn19KTsNCklhKCJTdHJpbmcucHJv
dG90eXBlLnJlcGVhdCIsZnVuY3Rpb24oYSl7cmV0dXJuIGE/YTpmdW5jdGlvbihiKXt2YXIg
Yz1MYSh0aGlzLG51bGwsInJlcGVhdCIpO2lmKDA+Ynx8MTM0MjE3NzI3OTxiKXRocm93IG5l
dyBSYW5nZUVycm9yKCJqIik7Ynw9MDtmb3IodmFyIGQ9IiI7YjspaWYoYiYxJiYoZCs9Yyks
Yj4+Pj0xKWMrPWM7cmV0dXJuIGR9fSk7dmFyIE5hPWZ1bmN0aW9uKGEsYil7cmV0dXJuIE9i
amVjdC5wcm90b3R5cGUuaGFzT3duUHJvcGVydHkuY2FsbChhLGIpfTsNCklhKCJXZWFrTWFw
IixmdW5jdGlvbihhKXtmdW5jdGlvbiBiKCl7fWZ1bmN0aW9uIGMobCl7dmFyIG49dHlwZW9m
IGw7cmV0dXJuIm9iamVjdCI9PT1uJiZudWxsIT09bHx8ImZ1bmN0aW9uIj09PW59ZnVuY3Rp
b24gZChsKXtpZighTmEobCxmKSl7dmFyIG49bmV3IGI7d2EobCxmLHt2YWx1ZTpufSl9fWZ1
bmN0aW9uIGUobCl7dmFyIG49T2JqZWN0W2xdO24mJihPYmplY3RbbF09ZnVuY3Rpb24ocCl7
aWYocCBpbnN0YW5jZW9mIGIpcmV0dXJuIHA7ZChwKTtyZXR1cm4gbihwKX0pfWlmKGZ1bmN0
aW9uKCl7aWYoIWF8fCFPYmplY3Quc2VhbClyZXR1cm4hMTt0cnl7dmFyIGw9T2JqZWN0LnNl
YWwoe30pLG49T2JqZWN0LnNlYWwoe30pLHA9bmV3IGEoW1tsLDJdLFtuLDNdXSk7aWYoMiE9
cC5nZXQobCl8fDMhPXAuZ2V0KG4pKXJldHVybiExO3BbImRlbGV0ZSJdKGwpO3Auc2V0KG4s
NCk7cmV0dXJuIXAuaGFzKGwpJiY0PT1wLmdldChuKX1jYXRjaCh0KXtyZXR1cm4hMX19KCkp
cmV0dXJuIGE7DQp2YXIgZj0iJGpzY29tcF9oaWRkZW5fIitNYXRoLnJhbmRvbSgpO2UoImZy
ZWV6ZSIpO2UoInByZXZlbnRFeHRlbnNpb25zIik7ZSgic2VhbCIpO3ZhciBnPTAsaD1mdW5j
dGlvbihsKXt0aGlzLmhhPShnKz1NYXRoLnJhbmRvbSgpKzEpLnRvU3RyaW5nKCk7aWYobCl7
bD1fLkNhKGwpO2Zvcih2YXIgbjshKG49bC5uZXh0KCkpLmRvbmU7KW49bi52YWx1ZSx0aGlz
LnNldChuWzBdLG5bMV0pfX07aC5wcm90b3R5cGUuc2V0PWZ1bmN0aW9uKGwsbil7aWYoIWMo
bCkpdGhyb3cgRXJyb3IoImsiKTtkKGwpO2lmKCFOYShsLGYpKXRocm93IEVycm9yKCJsYCIr
bCk7bFtmXVt0aGlzLmhhXT1uO3JldHVybiB0aGlzfTtoLnByb3RvdHlwZS5nZXQ9ZnVuY3Rp
b24obCl7cmV0dXJuIGMobCkmJk5hKGwsZik/bFtmXVt0aGlzLmhhXTp2b2lkIDB9O2gucHJv
dG90eXBlLmhhcz1mdW5jdGlvbihsKXtyZXR1cm4gYyhsKSYmTmEobCxmKSYmTmEobFtmXSx0
aGlzLmhhKX07aC5wcm90b3R5cGVbImRlbGV0ZSJdPQ0KZnVuY3Rpb24obCl7cmV0dXJuIGMo
bCkmJk5hKGwsZikmJk5hKGxbZl0sdGhpcy5oYSk/ZGVsZXRlIGxbZl1bdGhpcy5oYV06ITF9
O3JldHVybiBofSk7SWEoIk9iamVjdC5pcyIsZnVuY3Rpb24oYSl7cmV0dXJuIGE/YTpmdW5j
dGlvbihiLGMpe3JldHVybiBiPT09Yz8wIT09Ynx8MS9iPT09MS9jOmIhPT1iJiZjIT09Y319
KTtJYSgiQXJyYXkucHJvdG90eXBlLmluY2x1ZGVzIixmdW5jdGlvbihhKXtyZXR1cm4gYT9h
OmZ1bmN0aW9uKGIsYyl7dmFyIGQ9dGhpcztkIGluc3RhbmNlb2YgU3RyaW5nJiYoZD1TdHJp
bmcoZCkpO3ZhciBlPWQubGVuZ3RoO2M9Y3x8MDtmb3IoMD5jJiYoYz1NYXRoLm1heChjK2Us
MCkpO2M8ZTtjKyspe3ZhciBmPWRbY107aWYoZj09PWJ8fE9iamVjdC5pcyhmLGIpKXJldHVy
biEwfXJldHVybiExfX0pOw0KSWEoIlN0cmluZy5wcm90b3R5cGUuaW5jbHVkZXMiLGZ1bmN0
aW9uKGEpe3JldHVybiBhP2E6ZnVuY3Rpb24oYixjKXtyZXR1cm4tMSE9PUxhKHRoaXMsYiwi
aW5jbHVkZXMiKS5pbmRleE9mKGIsY3x8MCl9fSk7DQpJYSgiTWFwIixmdW5jdGlvbihhKXtp
ZihmdW5jdGlvbigpe2lmKCFhfHwiZnVuY3Rpb24iIT10eXBlb2YgYXx8IWEucHJvdG90eXBl
LmVudHJpZXN8fCJmdW5jdGlvbiIhPXR5cGVvZiBPYmplY3Quc2VhbClyZXR1cm4hMTt0cnl7
dmFyIGg9T2JqZWN0LnNlYWwoe3g6NH0pLGw9bmV3IGEoXy5DYShbW2gsInMiXV0pKTtpZigi
cyIhPWwuZ2V0KGgpfHwxIT1sLnNpemV8fGwuZ2V0KHt4OjR9KXx8bC5zZXQoe3g6NH0sInQi
KSE9bHx8MiE9bC5zaXplKXJldHVybiExO3ZhciBuPWwuZW50cmllcygpLHA9bi5uZXh0KCk7
aWYocC5kb25lfHxwLnZhbHVlWzBdIT1ofHwicyIhPXAudmFsdWVbMV0pcmV0dXJuITE7cD1u
Lm5leHQoKTtyZXR1cm4gcC5kb25lfHw0IT1wLnZhbHVlWzBdLnh8fCJ0IiE9cC52YWx1ZVsx
XXx8IW4ubmV4dCgpLmRvbmU/ITE6ITB9Y2F0Y2godCl7cmV0dXJuITF9fSgpKXJldHVybiBh
O18uQmEoKTt2YXIgYj1uZXcgV2Vha01hcCxjPWZ1bmN0aW9uKGgpe3RoaXMua2E9DQp7fTt0
aGlzLmhhPWYoKTt0aGlzLnNpemU9MDtpZihoKXtoPV8uQ2EoaCk7Zm9yKHZhciBsOyEobD1o
Lm5leHQoKSkuZG9uZTspbD1sLnZhbHVlLHRoaXMuc2V0KGxbMF0sbFsxXSl9fTtjLnByb3Rv
dHlwZS5zZXQ9ZnVuY3Rpb24oaCxsKXtoPTA9PT1oPzA6aDt2YXIgbj1kKHRoaXMsaCk7bi5s
aXN0fHwobi5saXN0PXRoaXMua2Fbbi5pZF09W10pO24uU2g/bi5TaC52YWx1ZT1sOihuLlNo
PXtuZXh0OnRoaXMuaGEsbm06dGhpcy5oYS5ubSxoZWFkOnRoaXMuaGEsa2V5OmgsdmFsdWU6
bH0sbi5saXN0LnB1c2gobi5TaCksdGhpcy5oYS5ubS5uZXh0PW4uU2gsdGhpcy5oYS5ubT1u
LlNoLHRoaXMuc2l6ZSsrKTtyZXR1cm4gdGhpc307Yy5wcm90b3R5cGVbImRlbGV0ZSJdPWZ1
bmN0aW9uKGgpe2g9ZCh0aGlzLGgpO3JldHVybiBoLlNoJiZoLmxpc3Q/KGgubGlzdC5zcGxp
Y2UoaC5pbmRleCwxKSxoLmxpc3QubGVuZ3RofHxkZWxldGUgdGhpcy5rYVtoLmlkXSxoLlNo
Lm5tLm5leHQ9aC5TaC5uZXh0LA0KaC5TaC5uZXh0Lm5tPWguU2gubm0saC5TaC5oZWFkPW51
bGwsdGhpcy5zaXplLS0sITApOiExfTtjLnByb3RvdHlwZS5jbGVhcj1mdW5jdGlvbigpe3Ro
aXMua2E9e307dGhpcy5oYT10aGlzLmhhLm5tPWYoKTt0aGlzLnNpemU9MH07Yy5wcm90b3R5
cGUuaGFzPWZ1bmN0aW9uKGgpe3JldHVybiEhZCh0aGlzLGgpLlNofTtjLnByb3RvdHlwZS5n
ZXQ9ZnVuY3Rpb24oaCl7cmV0dXJuKGg9ZCh0aGlzLGgpLlNoKSYmaC52YWx1ZX07Yy5wcm90
b3R5cGUuZW50cmllcz1mdW5jdGlvbigpe3JldHVybiBlKHRoaXMsZnVuY3Rpb24oaCl7cmV0
dXJuW2gua2V5LGgudmFsdWVdfSl9O2MucHJvdG90eXBlLmtleXM9ZnVuY3Rpb24oKXtyZXR1
cm4gZSh0aGlzLGZ1bmN0aW9uKGgpe3JldHVybiBoLmtleX0pfTtjLnByb3RvdHlwZS52YWx1
ZXM9ZnVuY3Rpb24oKXtyZXR1cm4gZSh0aGlzLGZ1bmN0aW9uKGgpe3JldHVybiBoLnZhbHVl
fSl9O2MucHJvdG90eXBlLmZvckVhY2g9ZnVuY3Rpb24oaCxsKXtmb3IodmFyIG49DQp0aGlz
LmVudHJpZXMoKSxwOyEocD1uLm5leHQoKSkuZG9uZTspcD1wLnZhbHVlLGguY2FsbChsLHBb
MV0scFswXSx0aGlzKX07Yy5wcm90b3R5cGVbU3ltYm9sLml0ZXJhdG9yXT1jLnByb3RvdHlw
ZS5lbnRyaWVzO3ZhciBkPWZ1bmN0aW9uKGgsbCl7dmFyIG49bCYmdHlwZW9mIGw7Im9iamVj
dCI9PW58fCJmdW5jdGlvbiI9PW4/Yi5oYXMobCk/bj1iLmdldChsKToobj0iIisgKytnLGIu
c2V0KGwsbikpOm49InBfIitsO3ZhciBwPWgua2Fbbl07aWYocCYmTmEoaC5rYSxuKSlmb3Io
aD0wO2g8cC5sZW5ndGg7aCsrKXt2YXIgdD1wW2hdO2lmKGwhPT1sJiZ0LmtleSE9PXQua2V5
fHxsPT09dC5rZXkpcmV0dXJue2lkOm4sbGlzdDpwLGluZGV4OmgsU2g6dH19cmV0dXJue2lk
Om4sbGlzdDpwLGluZGV4Oi0xLFNoOnZvaWQgMH19LGU9ZnVuY3Rpb24oaCxsKXt2YXIgbj1o
LmhhO3JldHVybiBBYShmdW5jdGlvbigpe2lmKG4pe2Zvcig7bi5oZWFkIT1oLmhhOyluPW4u
bm07Zm9yKDtuLm5leHQhPQ0Kbi5oZWFkOylyZXR1cm4gbj1uLm5leHQse2RvbmU6ITEsdmFs
dWU6bChuKX07bj1udWxsfXJldHVybntkb25lOiEwLHZhbHVlOnZvaWQgMH19KX0sZj1mdW5j
dGlvbigpe3ZhciBoPXt9O3JldHVybiBoLm5tPWgubmV4dD1oLmhlYWQ9aH0sZz0wO3JldHVy
biBjfSk7DQpJYSgiU2V0IixmdW5jdGlvbihhKXtpZihmdW5jdGlvbigpe2lmKCFhfHwiZnVu
Y3Rpb24iIT10eXBlb2YgYXx8IWEucHJvdG90eXBlLmVudHJpZXN8fCJmdW5jdGlvbiIhPXR5
cGVvZiBPYmplY3Quc2VhbClyZXR1cm4hMTt0cnl7dmFyIGM9T2JqZWN0LnNlYWwoe3g6NH0p
LGQ9bmV3IGEoXy5DYShbY10pKTtpZighZC5oYXMoYyl8fDEhPWQuc2l6ZXx8ZC5hZGQoYykh
PWR8fDEhPWQuc2l6ZXx8ZC5hZGQoe3g6NH0pIT1kfHwyIT1kLnNpemUpcmV0dXJuITE7dmFy
IGU9ZC5lbnRyaWVzKCksZj1lLm5leHQoKTtpZihmLmRvbmV8fGYudmFsdWVbMF0hPWN8fGYu
dmFsdWVbMV0hPWMpcmV0dXJuITE7Zj1lLm5leHQoKTtyZXR1cm4gZi5kb25lfHxmLnZhbHVl
WzBdPT1jfHw0IT1mLnZhbHVlWzBdLnh8fGYudmFsdWVbMV0hPWYudmFsdWVbMF0/ITE6ZS5u
ZXh0KCkuZG9uZX1jYXRjaChnKXtyZXR1cm4hMX19KCkpcmV0dXJuIGE7Xy5CYSgpO3ZhciBi
PWZ1bmN0aW9uKGMpe3RoaXMuaGE9bmV3IE1hcDsNCmlmKGMpe2M9Xy5DYShjKTtmb3IodmFy
IGQ7IShkPWMubmV4dCgpKS5kb25lOyl0aGlzLmFkZChkLnZhbHVlKX10aGlzLnNpemU9dGhp
cy5oYS5zaXplfTtiLnByb3RvdHlwZS5hZGQ9ZnVuY3Rpb24oYyl7Yz0wPT09Yz8wOmM7dGhp
cy5oYS5zZXQoYyxjKTt0aGlzLnNpemU9dGhpcy5oYS5zaXplO3JldHVybiB0aGlzfTtiLnBy
b3RvdHlwZVsiZGVsZXRlIl09ZnVuY3Rpb24oYyl7Yz10aGlzLmhhWyJkZWxldGUiXShjKTt0
aGlzLnNpemU9dGhpcy5oYS5zaXplO3JldHVybiBjfTtiLnByb3RvdHlwZS5jbGVhcj1mdW5j
dGlvbigpe3RoaXMuaGEuY2xlYXIoKTt0aGlzLnNpemU9MH07Yi5wcm90b3R5cGUuaGFzPWZ1
bmN0aW9uKGMpe3JldHVybiB0aGlzLmhhLmhhcyhjKX07Yi5wcm90b3R5cGUuZW50cmllcz1m
dW5jdGlvbigpe3JldHVybiB0aGlzLmhhLmVudHJpZXMoKX07Yi5wcm90b3R5cGUudmFsdWVz
PWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuaGEudmFsdWVzKCl9O2IucHJvdG90eXBlLmtleXM9
DQpiLnByb3RvdHlwZS52YWx1ZXM7Yi5wcm90b3R5cGVbU3ltYm9sLml0ZXJhdG9yXT1iLnBy
b3RvdHlwZS52YWx1ZXM7Yi5wcm90b3R5cGUuZm9yRWFjaD1mdW5jdGlvbihjLGQpe3ZhciBl
PXRoaXM7dGhpcy5oYS5mb3JFYWNoKGZ1bmN0aW9uKGYpe3JldHVybiBjLmNhbGwoZCxmLGYs
ZSl9KX07cmV0dXJuIGJ9KTt2YXIgT2E9ZnVuY3Rpb24oYSxiKXtfLkJhKCk7YSBpbnN0YW5j
ZW9mIFN0cmluZyYmKGErPSIiKTt2YXIgYz0wLGQ9e25leHQ6ZnVuY3Rpb24oKXtpZihjPGEu
bGVuZ3RoKXt2YXIgZT1jKys7cmV0dXJue3ZhbHVlOmIoZSxhW2VdKSxkb25lOiExfX1kLm5l
eHQ9ZnVuY3Rpb24oKXtyZXR1cm57ZG9uZTohMCx2YWx1ZTp2b2lkIDB9fTtyZXR1cm4gZC5u
ZXh0KCl9fTtkW1N5bWJvbC5pdGVyYXRvcl09ZnVuY3Rpb24oKXtyZXR1cm4gZH07cmV0dXJu
IGR9Ow0KSWEoIkFycmF5LnByb3RvdHlwZS5rZXlzIixmdW5jdGlvbihhKXtyZXR1cm4gYT9h
OmZ1bmN0aW9uKCl7cmV0dXJuIE9hKHRoaXMsZnVuY3Rpb24oYil7cmV0dXJuIGJ9KX19KTtJ
YSgiT2JqZWN0LnZhbHVlcyIsZnVuY3Rpb24oYSl7cmV0dXJuIGE/YTpmdW5jdGlvbihiKXt2
YXIgYz1bXSxkO2ZvcihkIGluIGIpTmEoYixkKSYmYy5wdXNoKGJbZF0pO3JldHVybiBjfX0p
O0lhKCJPYmplY3QuZW50cmllcyIsZnVuY3Rpb24oYSl7cmV0dXJuIGE/YTpmdW5jdGlvbihi
KXt2YXIgYz1bXSxkO2ZvcihkIGluIGIpTmEoYixkKSYmYy5wdXNoKFtkLGJbZF1dKTtyZXR1
cm4gY319KTsNCklhKCJBcnJheS5mcm9tIixmdW5jdGlvbihhKXtyZXR1cm4gYT9hOmZ1bmN0
aW9uKGIsYyxkKXtjPW51bGwhPWM/YzpmdW5jdGlvbihoKXtyZXR1cm4gaH07dmFyIGU9W10s
Zj0idW5kZWZpbmVkIiE9dHlwZW9mIFN5bWJvbCYmU3ltYm9sLml0ZXJhdG9yJiZiW1N5bWJv
bC5pdGVyYXRvcl07aWYoImZ1bmN0aW9uIj09dHlwZW9mIGYpe2I9Zi5jYWxsKGIpO2Zvcih2
YXIgZz0wOyEoZj1iLm5leHQoKSkuZG9uZTspZS5wdXNoKGMuY2FsbChkLGYudmFsdWUsZysr
KSl9ZWxzZSBmb3IoZj1iLmxlbmd0aCxnPTA7ZzxmO2crKyllLnB1c2goYy5jYWxsKGQsYltn
XSxnKSk7cmV0dXJuIGV9fSk7SWEoIkFycmF5LnByb3RvdHlwZS52YWx1ZXMiLGZ1bmN0aW9u
KGEpe3JldHVybiBhP2E6ZnVuY3Rpb24oKXtyZXR1cm4gT2EodGhpcyxmdW5jdGlvbihiLGMp
e3JldHVybiBjfSl9fSk7DQp2YXIga2FhPSJmdW5jdGlvbiI9PXR5cGVvZiBPYmplY3QuYXNz
aWduP09iamVjdC5hc3NpZ246ZnVuY3Rpb24oYSxiKXtmb3IodmFyIGM9MTtjPGFyZ3VtZW50
cy5sZW5ndGg7YysrKXt2YXIgZD1hcmd1bWVudHNbY107aWYoZClmb3IodmFyIGUgaW4gZClO
YShkLGUpJiYoYVtlXT1kW2VdKX1yZXR1cm4gYX07SWEoIk9iamVjdC5hc3NpZ24iLGZ1bmN0
aW9uKGEpe3JldHVybiBhfHxrYWF9KTtJYSgiTnVtYmVyLmlzRmluaXRlIixmdW5jdGlvbihh
KXtyZXR1cm4gYT9hOmZ1bmN0aW9uKGIpe3JldHVybiJudW1iZXIiIT09dHlwZW9mIGI/ITE6
IWlzTmFOKGIpJiZJbmZpbml0eSE9PWImJi1JbmZpbml0eSE9PWJ9fSk7SWEoIk51bWJlci5p
c0ludGVnZXIiLGZ1bmN0aW9uKGEpe3JldHVybiBhP2E6ZnVuY3Rpb24oYil7cmV0dXJuIE51
bWJlci5pc0Zpbml0ZShiKT9iPT09TWF0aC5mbG9vcihiKTohMX19KTsNCl8uX0R1bXBFeGNl
cHRpb249d2luZG93Ll9EdW1wRXhjZXB0aW9ufHxmdW5jdGlvbihhKXt0aHJvdyBhO307d2lu
ZG93Ll9EdW1wRXhjZXB0aW9uPV8uX0R1bXBFeGNlcHRpb247DQp2YXIgUGEsbGFhLFNhLFJh
LGNiLG1hYSxuYWEsb2FhLHBhYSxnYixoYixpYixrYjtQYT1QYXx8e307Xy5xYT10aGlzfHxz
ZWxmO18uUWE9ZnVuY3Rpb24oYSxiLGMpe2E9YS5zcGxpdCgiLiIpO2M9Y3x8Xy5xYTthWzBd
aW4gY3x8InVuZGVmaW5lZCI9PXR5cGVvZiBjLmV4ZWNTY3JpcHR8fGMuZXhlY1NjcmlwdCgi
dmFyICIrYVswXSk7Zm9yKHZhciBkO2EubGVuZ3RoJiYoZD1hLnNoaWZ0KCkpOylhLmxlbmd0
aHx8dm9pZCAwPT09Yj9jW2RdJiZjW2RdIT09T2JqZWN0LnByb3RvdHlwZVtkXT9jPWNbZF06
Yz1jW2RdPXt9OmNbZF09Yn07Xy5UYT1mdW5jdGlvbihhKXtpZihhJiZhIT1fLnFhKXJldHVy
biBSYShhLmRvY3VtZW50KTtudWxsPT09U2EmJihTYT1SYShfLnFhLmRvY3VtZW50KSk7cmV0
dXJuIFNhfTtsYWE9L15bXHcrL18tXStbPV17MCwyfSQvO1NhPW51bGw7DQpSYT1mdW5jdGlv
bihhKXtyZXR1cm4oYT1hLnF1ZXJ5U2VsZWN0b3ImJmEucXVlcnlTZWxlY3Rvcigic2NyaXB0
W25vbmNlXSIpKSYmKGE9YS5ub25jZXx8YS5nZXRBdHRyaWJ1dGUoIm5vbmNlIikpJiZsYWEu
dGVzdChhKT9hOiIifTtfLlVhPWZ1bmN0aW9uKGEsYil7YT1hLnNwbGl0KCIuIik7Yj1ifHxf
LnFhO2Zvcih2YXIgYz0wO2M8YS5sZW5ndGg7YysrKWlmKGI9YlthW2NdXSxudWxsPT1iKXJl
dHVybiBudWxsO3JldHVybiBifTtfLlZhPWZ1bmN0aW9uKCl7fTtfLldhPWZ1bmN0aW9uKCl7
dGhyb3cgRXJyb3IoIm0iKTt9O18uWGE9ZnVuY3Rpb24oYSl7YS54Qz12b2lkIDA7YS50Yj1m
dW5jdGlvbigpe3JldHVybiBhLnhDP2EueEM6YS54Qz1uZXcgYX19Ow0KXy5ZYT1mdW5jdGlv
bihhKXt2YXIgYj10eXBlb2YgYTtpZigib2JqZWN0Ij09YilpZihhKXtpZihhIGluc3RhbmNl
b2YgQXJyYXkpcmV0dXJuImFycmF5IjtpZihhIGluc3RhbmNlb2YgT2JqZWN0KXJldHVybiBi
O3ZhciBjPU9iamVjdC5wcm90b3R5cGUudG9TdHJpbmcuY2FsbChhKTtpZigiW29iamVjdCBX
aW5kb3ddIj09YylyZXR1cm4ib2JqZWN0IjtpZigiW29iamVjdCBBcnJheV0iPT1jfHwibnVt
YmVyIj09dHlwZW9mIGEubGVuZ3RoJiYidW5kZWZpbmVkIiE9dHlwZW9mIGEuc3BsaWNlJiYi
dW5kZWZpbmVkIiE9dHlwZW9mIGEucHJvcGVydHlJc0VudW1lcmFibGUmJiFhLnByb3BlcnR5
SXNFbnVtZXJhYmxlKCJzcGxpY2UiKSlyZXR1cm4iYXJyYXkiO2lmKCJbb2JqZWN0IEZ1bmN0
aW9uXSI9PWN8fCJ1bmRlZmluZWQiIT10eXBlb2YgYS5jYWxsJiYidW5kZWZpbmVkIiE9dHlw
ZW9mIGEucHJvcGVydHlJc0VudW1lcmFibGUmJiFhLnByb3BlcnR5SXNFbnVtZXJhYmxlKCJj
YWxsIikpcmV0dXJuImZ1bmN0aW9uIn1lbHNlIHJldHVybiJudWxsIjsNCmVsc2UgaWYoImZ1
bmN0aW9uIj09YiYmInVuZGVmaW5lZCI9PXR5cGVvZiBhLmNhbGwpcmV0dXJuIm9iamVjdCI7
cmV0dXJuIGJ9O18uWmE9ZnVuY3Rpb24oYSl7cmV0dXJuImFycmF5Ij09Xy5ZYShhKX07Xy4k
YT1mdW5jdGlvbihhKXt2YXIgYj1fLllhKGEpO3JldHVybiJhcnJheSI9PWJ8fCJvYmplY3Qi
PT1iJiYibnVtYmVyIj09dHlwZW9mIGEubGVuZ3RofTtfLmFiPWZ1bmN0aW9uKGEpe3JldHVy
biJmdW5jdGlvbiI9PV8uWWEoYSl9O18uYmI9ZnVuY3Rpb24oYSl7dmFyIGI9dHlwZW9mIGE7
cmV0dXJuIm9iamVjdCI9PWImJm51bGwhPWF8fCJmdW5jdGlvbiI9PWJ9O18uZGI9ZnVuY3Rp
b24oYSl7cmV0dXJuIGFbY2JdfHwoYVtjYl09KyttYWEpfTtjYj0iY2xvc3VyZV91aWRfIiso
MUU5Kk1hdGgucmFuZG9tKCk+Pj4wKTttYWE9MDtuYWE9ZnVuY3Rpb24oYSxiLGMpe3JldHVy
biBhLmNhbGwuYXBwbHkoYS5iaW5kLGFyZ3VtZW50cyl9Ow0Kb2FhPWZ1bmN0aW9uKGEsYixj
KXtpZighYSl0aHJvdyBFcnJvcigpO2lmKDI8YXJndW1lbnRzLmxlbmd0aCl7dmFyIGQ9QXJy
YXkucHJvdG90eXBlLnNsaWNlLmNhbGwoYXJndW1lbnRzLDIpO3JldHVybiBmdW5jdGlvbigp
e3ZhciBlPUFycmF5LnByb3RvdHlwZS5zbGljZS5jYWxsKGFyZ3VtZW50cyk7QXJyYXkucHJv
dG90eXBlLnVuc2hpZnQuYXBwbHkoZSxkKTtyZXR1cm4gYS5hcHBseShiLGUpfX1yZXR1cm4g
ZnVuY3Rpb24oKXtyZXR1cm4gYS5hcHBseShiLGFyZ3VtZW50cyl9fTtfLnI9ZnVuY3Rpb24o
YSxiLGMpe0Z1bmN0aW9uLnByb3RvdHlwZS5iaW5kJiYtMSE9RnVuY3Rpb24ucHJvdG90eXBl
LmJpbmQudG9TdHJpbmcoKS5pbmRleE9mKCJuYXRpdmUgY29kZSIpP18ucj1uYWE6Xy5yPW9h
YTtyZXR1cm4gXy5yLmFwcGx5KG51bGwsYXJndW1lbnRzKX07DQpfLmViPWZ1bmN0aW9uKGEs
Yil7dmFyIGM9QXJyYXkucHJvdG90eXBlLnNsaWNlLmNhbGwoYXJndW1lbnRzLDEpO3JldHVy
biBmdW5jdGlvbigpe3ZhciBkPWMuc2xpY2UoKTtkLnB1c2guYXBwbHkoZCxhcmd1bWVudHMp
O3JldHVybiBhLmFwcGx5KHRoaXMsZCl9fTtfLmZiPURhdGUubm93fHxmdW5jdGlvbigpe3Jl
dHVybituZXcgRGF0ZX07DQpwYWE9ZnVuY3Rpb24oYSl7aWYoXy5xYS5leGVjU2NyaXB0KV8u
cWEuZXhlY1NjcmlwdChhLCJKYXZhU2NyaXB0Iik7ZWxzZSBpZihfLnFhLmV2YWwpe2lmKG51
bGw9PWdiKXt0cnl7Xy5xYS5ldmFsKCJ2YXIgX2V2YWxUZXN0XyA9IDE7Iil9Y2F0Y2goZCl7
fWlmKCJ1bmRlZmluZWQiIT10eXBlb2YgXy5xYS5fZXZhbFRlc3RfKXt0cnl7ZGVsZXRlIF8u
cWEuX2V2YWxUZXN0X31jYXRjaChkKXt9Z2I9ITB9ZWxzZSBnYj0hMX1pZihnYilfLnFhLmV2
YWwoYSk7ZWxzZXt2YXIgYj1fLnFhLmRvY3VtZW50LGM9Yi5jcmVhdGVFbGVtZW50KCJzY3Jp
cHQiKTtjLnR5cGU9InRleHQvamF2YXNjcmlwdCI7Yy5kZWZlcj0hMTtjLmFwcGVuZENoaWxk
KGIuY3JlYXRlVGV4dE5vZGUoYSkpO2IuaGVhZC5hcHBlbmRDaGlsZChjKTtiLmhlYWQucmVt
b3ZlQ2hpbGQoYyl9fWVsc2UgdGhyb3cgRXJyb3IoIm4iKTt9O2diPW51bGw7aGI9ZnVuY3Rp
b24oYSxiKXtfLlFhKGEsYix2b2lkIDApfTsNCl8udT1mdW5jdGlvbihhLGIpe2Z1bmN0aW9u
IGMoKXt9Yy5wcm90b3R5cGU9Yi5wcm90b3R5cGU7YS5UYj1iLnByb3RvdHlwZTthLnByb3Rv
dHlwZT1uZXcgYzthLnByb3RvdHlwZS5jb25zdHJ1Y3Rvcj1hfTtpYj1mdW5jdGlvbihhKXty
ZXR1cm4gYX07a2I9ZnVuY3Rpb24oYSl7dmFyIGI9bnVsbCxjPV8ucWEudHJ1c3RlZFR5cGVz
fHxfLnFhLlRydXN0ZWRUeXBlcztpZighY3x8IWMuY3JlYXRlUG9saWN5KXJldHVybiBiO3Ry
eXtiPWMuY3JlYXRlUG9saWN5KGEse2NyZWF0ZUhUTUw6aWIsY3JlYXRlU2NyaXB0OmliLGNy
ZWF0ZVNjcmlwdFVSTDppYixjcmVhdGVVUkw6aWJ9KX1jYXRjaChkKXtfLnFhLmNvbnNvbGUm
Jl8ucWEuY29uc29sZS5lcnJvcihkLm1lc3NhZ2UpfXJldHVybiBifTtrYigiQWNjb3VudFNl
dHRpbmdzU2VjdXJpdHlBZHZpc29yVWkjYmFzZSIpOw0KXy5sYj1mdW5jdGlvbihhKXtpZihF
cnJvci5jYXB0dXJlU3RhY2tUcmFjZSlFcnJvci5jYXB0dXJlU3RhY2tUcmFjZSh0aGlzLF8u
bGIpO2Vsc2V7dmFyIGI9RXJyb3IoKS5zdGFjaztiJiYodGhpcy5zdGFjaz1iKX1hJiYodGhp
cy5tZXNzYWdlPVN0cmluZyhhKSk7dGhpcy5oYT0hMH07Xy51KF8ubGIsRXJyb3IpO18ubGIu
cHJvdG90eXBlLm5hbWU9IkN1c3RvbUVycm9yIjsNCnZhciBtYjsNCnZhciByYWE7Xy5uYj1m
dW5jdGlvbihhKXtyZXR1cm4gYVthLmxlbmd0aC0xXX07Xy5vYj1BcnJheS5wcm90b3R5cGUu
aW5kZXhPZj9mdW5jdGlvbihhLGIsYyl7cmV0dXJuIEFycmF5LnByb3RvdHlwZS5pbmRleE9m
LmNhbGwoYSxiLGMpfTpmdW5jdGlvbihhLGIsYyl7Yz1udWxsPT1jPzA6MD5jP01hdGgubWF4
KDAsYS5sZW5ndGgrYyk6YztpZigic3RyaW5nIj09PXR5cGVvZiBhKXJldHVybiJzdHJpbmci
IT09dHlwZW9mIGJ8fDEhPWIubGVuZ3RoPy0xOmEuaW5kZXhPZihiLGMpO2Zvcig7YzxhLmxl
bmd0aDtjKyspaWYoYyBpbiBhJiZhW2NdPT09YilyZXR1cm4gYztyZXR1cm4tMX07DQpfLnFh
YT1BcnJheS5wcm90b3R5cGUubGFzdEluZGV4T2Y/ZnVuY3Rpb24oYSxiKXtyZXR1cm4gQXJy
YXkucHJvdG90eXBlLmxhc3RJbmRleE9mLmNhbGwoYSxiLGEubGVuZ3RoLTEpfTpmdW5jdGlv
bihhLGIpe3ZhciBjPWEubGVuZ3RoLTE7MD5jJiYoYz1NYXRoLm1heCgwLGEubGVuZ3RoK2Mp
KTtpZigic3RyaW5nIj09PXR5cGVvZiBhKXJldHVybiJzdHJpbmciIT09dHlwZW9mIGJ8fDEh
PWIubGVuZ3RoPy0xOmEubGFzdEluZGV4T2YoYixjKTtmb3IoOzA8PWM7Yy0tKWlmKGMgaW4g
YSYmYVtjXT09PWIpcmV0dXJuIGM7cmV0dXJuLTF9O18ucGI9QXJyYXkucHJvdG90eXBlLmZv
ckVhY2g/ZnVuY3Rpb24oYSxiLGMpe0FycmF5LnByb3RvdHlwZS5mb3JFYWNoLmNhbGwoYSxi
LGMpfTpmdW5jdGlvbihhLGIsYyl7Zm9yKHZhciBkPWEubGVuZ3RoLGU9InN0cmluZyI9PT10
eXBlb2YgYT9hLnNwbGl0KCIiKTphLGY9MDtmPGQ7ZisrKWYgaW4gZSYmYi5jYWxsKGMsZVtm
XSxmLGEpfTsNCl8ucWI9ZnVuY3Rpb24oYSxiLGMpe2Zvcih2YXIgZD0ic3RyaW5nIj09PXR5
cGVvZiBhP2Euc3BsaXQoIiIpOmEsZT1hLmxlbmd0aC0xOzA8PWU7LS1lKWUgaW4gZCYmYi5j
YWxsKGMsZFtlXSxlLGEpfTtfLnJiPUFycmF5LnByb3RvdHlwZS5maWx0ZXI/ZnVuY3Rpb24o
YSxiLGMpe3JldHVybiBBcnJheS5wcm90b3R5cGUuZmlsdGVyLmNhbGwoYSxiLGMpfTpmdW5j
dGlvbihhLGIsYyl7Zm9yKHZhciBkPWEubGVuZ3RoLGU9W10sZj0wLGc9InN0cmluZyI9PT10
eXBlb2YgYT9hLnNwbGl0KCIiKTphLGg9MDtoPGQ7aCsrKWlmKGggaW4gZyl7dmFyIGw9Z1to
XTtiLmNhbGwoYyxsLGgsYSkmJihlW2YrK109bCl9cmV0dXJuIGV9Ow0KXy5zYj1BcnJheS5w
cm90b3R5cGUubWFwP2Z1bmN0aW9uKGEsYixjKXtyZXR1cm4gQXJyYXkucHJvdG90eXBlLm1h
cC5jYWxsKGEsYixjKX06ZnVuY3Rpb24oYSxiLGMpe2Zvcih2YXIgZD1hLmxlbmd0aCxlPUFy
cmF5KGQpLGY9InN0cmluZyI9PT10eXBlb2YgYT9hLnNwbGl0KCIiKTphLGc9MDtnPGQ7Zysr
KWcgaW4gZiYmKGVbZ109Yi5jYWxsKGMsZltnXSxnLGEpKTtyZXR1cm4gZX07Xy50Yj1BcnJh
eS5wcm90b3R5cGUucmVkdWNlP2Z1bmN0aW9uKGEsYixjKXtyZXR1cm4gQXJyYXkucHJvdG90
eXBlLnJlZHVjZS5jYWxsKGEsYixjKX06ZnVuY3Rpb24oYSxiLGMpe3ZhciBkPWM7KDAsXy5w
YikoYSxmdW5jdGlvbihlLGYpe2Q9Yi5jYWxsKHZvaWQgMCxkLGUsZixhKX0pO3JldHVybiBk
fTsNCl8udWI9QXJyYXkucHJvdG90eXBlLnNvbWU/ZnVuY3Rpb24oYSxiLGMpe3JldHVybiBB
cnJheS5wcm90b3R5cGUuc29tZS5jYWxsKGEsYixjKX06ZnVuY3Rpb24oYSxiLGMpe2Zvcih2
YXIgZD1hLmxlbmd0aCxlPSJzdHJpbmciPT09dHlwZW9mIGE/YS5zcGxpdCgiIik6YSxmPTA7
ZjxkO2YrKylpZihmIGluIGUmJmIuY2FsbChjLGVbZl0sZixhKSlyZXR1cm4hMDtyZXR1cm4h
MX07Xy52Yj1BcnJheS5wcm90b3R5cGUuZXZlcnk/ZnVuY3Rpb24oYSxiLGMpe3JldHVybiBB
cnJheS5wcm90b3R5cGUuZXZlcnkuY2FsbChhLGIsYyl9OmZ1bmN0aW9uKGEsYixjKXtmb3Io
dmFyIGQ9YS5sZW5ndGgsZT0ic3RyaW5nIj09PXR5cGVvZiBhP2Euc3BsaXQoIiIpOmEsZj0w
O2Y8ZDtmKyspaWYoZiBpbiBlJiYhYi5jYWxsKGMsZVtmXSxmLGEpKXJldHVybiExO3JldHVy
biEwfTsNCl8uemI9ZnVuY3Rpb24oYSxiLGMpe2I9Xy55YihhLGIsYyk7cmV0dXJuIDA+Yj9u
dWxsOiJzdHJpbmciPT09dHlwZW9mIGE/YS5jaGFyQXQoYik6YVtiXX07Xy55Yj1mdW5jdGlv
bihhLGIsYyl7Zm9yKHZhciBkPWEubGVuZ3RoLGU9InN0cmluZyI9PT10eXBlb2YgYT9hLnNw
bGl0KCIiKTphLGY9MDtmPGQ7ZisrKWlmKGYgaW4gZSYmYi5jYWxsKGMsZVtmXSxmLGEpKXJl
dHVybiBmO3JldHVybi0xfTtfLkFiPWZ1bmN0aW9uKGEsYixjKXtmb3IodmFyIGQ9InN0cmlu
ZyI9PT10eXBlb2YgYT9hLnNwbGl0KCIiKTphLGU9YS5sZW5ndGgtMTswPD1lO2UtLSlpZihl
IGluIGQmJmIuY2FsbChjLGRbZV0sZSxhKSlyZXR1cm4gZTtyZXR1cm4tMX07Xy5DYj1mdW5j
dGlvbihhLGIpe3JldHVybiAwPD0oMCxfLm9iKShhLGIpfTtfLkRiPWZ1bmN0aW9uKGEpe2lm
KCFfLlphKGEpKWZvcih2YXIgYj1hLmxlbmd0aC0xOzA8PWI7Yi0tKWRlbGV0ZSBhW2JdO2Eu
bGVuZ3RoPTB9Ow0KXy5FYj1mdW5jdGlvbihhLGIpe18uQ2IoYSxiKXx8YS5wdXNoKGIpfTtf
LkdiPWZ1bmN0aW9uKGEsYil7Yj0oMCxfLm9iKShhLGIpO3ZhciBjOyhjPTA8PWIpJiZfLkZi
KGEsYik7cmV0dXJuIGN9O18uRmI9ZnVuY3Rpb24oYSxiKXtyZXR1cm4gMT09QXJyYXkucHJv
dG90eXBlLnNwbGljZS5jYWxsKGEsYiwxKS5sZW5ndGh9O18uSWI9ZnVuY3Rpb24oYSl7cmV0
dXJuIEFycmF5LnByb3RvdHlwZS5jb25jYXQuYXBwbHkoW10sYXJndW1lbnRzKX07Xy5KYj1m
dW5jdGlvbihhKXt2YXIgYj1hLmxlbmd0aDtpZigwPGIpe2Zvcih2YXIgYz1BcnJheShiKSxk
PTA7ZDxiO2QrKyljW2RdPWFbZF07cmV0dXJuIGN9cmV0dXJuW119Ow0KXy5LYj1mdW5jdGlv
bihhLGIpe2Zvcih2YXIgYz0xO2M8YXJndW1lbnRzLmxlbmd0aDtjKyspe3ZhciBkPWFyZ3Vt
ZW50c1tjXTtpZihfLiRhKGQpKXt2YXIgZT1hLmxlbmd0aHx8MCxmPWQubGVuZ3RofHwwO2Eu
bGVuZ3RoPWUrZjtmb3IodmFyIGc9MDtnPGY7ZysrKWFbZStnXT1kW2ddfWVsc2UgYS5wdXNo
KGQpfX07Xy5PYj1mdW5jdGlvbihhLGIsYyxkKXtBcnJheS5wcm90b3R5cGUuc3BsaWNlLmFw
cGx5KGEsXy5OYihhcmd1bWVudHMsMSkpfTtfLk5iPWZ1bmN0aW9uKGEsYixjKXtyZXR1cm4g
Mj49YXJndW1lbnRzLmxlbmd0aD9BcnJheS5wcm90b3R5cGUuc2xpY2UuY2FsbChhLGIpOkFy
cmF5LnByb3RvdHlwZS5zbGljZS5jYWxsKGEsYixjKX07DQpfLlBiPWZ1bmN0aW9uKGEsYil7
Yj1ifHxhO2Zvcih2YXIgYz17fSxkPTAsZT0wO2U8YS5sZW5ndGg7KXt2YXIgZj1hW2UrK107
dmFyIGc9ZjtnPV8uYmIoZyk/Im8iK18uZGIoZyk6KHR5cGVvZiBnKS5jaGFyQXQoMCkrZztP
YmplY3QucHJvdG90eXBlLmhhc093blByb3BlcnR5LmNhbGwoYyxnKXx8KGNbZ109ITAsYltk
KytdPWYpfWIubGVuZ3RoPWR9O18uUmI9ZnVuY3Rpb24oYSxiKXthLnNvcnQoYnx8Xy5RYil9
O18uU2I9ZnVuY3Rpb24oYSxiLGMpe2lmKCFfLiRhKGEpfHwhXy4kYShiKXx8YS5sZW5ndGgh
PWIubGVuZ3RoKXJldHVybiExO3ZhciBkPWEubGVuZ3RoO2M9Y3x8cmFhO2Zvcih2YXIgZT0w
O2U8ZDtlKyspaWYoIWMoYVtlXSxiW2VdKSlyZXR1cm4hMTtyZXR1cm4hMH07Xy5RYj1mdW5j
dGlvbihhLGIpe3JldHVybiBhPmI/MTphPGI/LTE6MH07cmFhPWZ1bmN0aW9uKGEsYil7cmV0
dXJuIGE9PT1ifTsNCnZhciBYYixZYixaYiwkYixhYyxiYyxzYWEsZWM7Xy5UYj1mdW5jdGlv
bihhLGIpe3JldHVybiAwPT1hLmxhc3RJbmRleE9mKGIsMCl9O18uVWI9ZnVuY3Rpb24oYSxi
KXt2YXIgYz1hLmxlbmd0aC1iLmxlbmd0aDtyZXR1cm4gMDw9YyYmYS5pbmRleE9mKGIsYyk9
PWN9O18uVmI9ZnVuY3Rpb24oYSl7cmV0dXJuL15bXHNceGEwXSokLy50ZXN0KGEpfTtfLldi
PVN0cmluZy5wcm90b3R5cGUudHJpbT9mdW5jdGlvbihhKXtyZXR1cm4gYS50cmltKCl9OmZ1
bmN0aW9uKGEpe3JldHVybi9eW1xzXHhhMF0qKFtcc1xTXSo/KVtcc1x4YTBdKiQvLmV4ZWMo
YSlbMV19Ow0KXy5jYz1mdW5jdGlvbihhLGIpe2lmKGIpYT1hLnJlcGxhY2UoWGIsIiZhbXA7
IikucmVwbGFjZShZYiwiJmx0OyIpLnJlcGxhY2UoWmIsIiZndDsiKS5yZXBsYWNlKCRiLCIm
cXVvdDsiKS5yZXBsYWNlKGFjLCImIzM5OyIpLnJlcGxhY2UoYmMsIiYjMDsiKTtlbHNle2lm
KCFzYWEudGVzdChhKSlyZXR1cm4gYTstMSE9YS5pbmRleE9mKCImIikmJihhPWEucmVwbGFj
ZShYYiwiJmFtcDsiKSk7LTEhPWEuaW5kZXhPZigiPCIpJiYoYT1hLnJlcGxhY2UoWWIsIiZs
dDsiKSk7LTEhPWEuaW5kZXhPZigiPiIpJiYoYT1hLnJlcGxhY2UoWmIsIiZndDsiKSk7LTEh
PWEuaW5kZXhPZignIicpJiYoYT1hLnJlcGxhY2UoJGIsIiZxdW90OyIpKTstMSE9YS5pbmRl
eE9mKCInIikmJihhPWEucmVwbGFjZShhYywiJiMzOTsiKSk7LTEhPWEuaW5kZXhPZigiXHgw
MCIpJiYoYT1hLnJlcGxhY2UoYmMsIiYjMDsiKSl9cmV0dXJuIGF9O1hiPS8mL2c7WWI9Lzwv
ZztaYj0vPi9nOyRiPS8iL2c7YWM9LycvZzsNCmJjPS9ceDAwL2c7c2FhPS9bXHgwMCY8PiIn
XS87Xy5kYz1mdW5jdGlvbihhLGIpe3JldHVybi0xIT1hLnRvTG93ZXJDYXNlKCkuaW5kZXhP
ZihiLnRvTG93ZXJDYXNlKCkpfTsNCl8uZmM9ZnVuY3Rpb24oYSxiKXt2YXIgYz0wO2E9KDAs
Xy5XYikoU3RyaW5nKGEpKS5zcGxpdCgiLiIpO2I9KDAsXy5XYikoU3RyaW5nKGIpKS5zcGxp
dCgiLiIpO2Zvcih2YXIgZD1NYXRoLm1heChhLmxlbmd0aCxiLmxlbmd0aCksZT0wOzA9PWMm
JmU8ZDtlKyspe3ZhciBmPWFbZV18fCIiLGc9YltlXXx8IiI7ZG97Zj0vKFxkKikoXEQqKSgu
KikvLmV4ZWMoZil8fFsiIiwiIiwiIiwiIl07Zz0vKFxkKikoXEQqKSguKikvLmV4ZWMoZyl8
fFsiIiwiIiwiIiwiIl07aWYoMD09ZlswXS5sZW5ndGgmJjA9PWdbMF0ubGVuZ3RoKWJyZWFr
O2M9ZWMoMD09ZlsxXS5sZW5ndGg/MDpwYXJzZUludChmWzFdLDEwKSwwPT1nWzFdLmxlbmd0
aD8wOnBhcnNlSW50KGdbMV0sMTApKXx8ZWMoMD09ZlsyXS5sZW5ndGgsMD09Z1syXS5sZW5n
dGgpfHxlYyhmWzJdLGdbMl0pO2Y9ZlszXTtnPWdbM119d2hpbGUoMD09Yyl9cmV0dXJuIGN9
Ow0KZWM9ZnVuY3Rpb24oYSxiKXtyZXR1cm4gYTxiPy0xOmE+Yj8xOjB9Ow0KdmFyIHRhYTth
Ont2YXIgamM9Xy5xYS5uYXZpZ2F0b3I7aWYoamMpe3ZhciBrYz1qYy51c2VyQWdlbnQ7aWYo
a2Mpe18uaWM9a2M7YnJlYWsgYX19Xy5pYz0iIn1fLm1jPWZ1bmN0aW9uKGEpe3JldHVybi0x
IT1fLmljLmluZGV4T2YoYSl9O3RhYT1mdW5jdGlvbihhKXtmb3IodmFyIGI9Lyhcd1tcdyBd
KylcLyhbXlxzXSspXHMqKD86XCgoLio/KVwpKT8vZyxjPVtdLGQ7ZD1iLmV4ZWMoYSk7KWMu
cHVzaChbZFsxXSxkWzJdLGRbM118fHZvaWQgMF0pO3JldHVybiBjfTsNCnZhciBEYztfLm5j
PWZ1bmN0aW9uKGEsYixjKXtmb3IodmFyIGQgaW4gYSliLmNhbGwoYyxhW2RdLGQsYSl9O18u
cGM9ZnVuY3Rpb24oYSxiKXt2YXIgYz17fSxkO2ZvcihkIGluIGEpYi5jYWxsKHZvaWQgMCxh
W2RdLGQsYSkmJihjW2RdPWFbZF0pO3JldHVybiBjfTtfLnFjPWZ1bmN0aW9uKGEsYixjKXt2
YXIgZD17fSxlO2ZvcihlIGluIGEpZFtlXT1iLmNhbGwoYyxhW2VdLGUsYSk7cmV0dXJuIGR9
O18uc2M9ZnVuY3Rpb24oYSxiKXtmb3IodmFyIGMgaW4gYSlpZihiLmNhbGwodm9pZCAwLGFb
Y10sYyxhKSlyZXR1cm4hMDtyZXR1cm4hMX07Xy50Yz1mdW5jdGlvbihhKXt2YXIgYj0wLGM7
Zm9yKGMgaW4gYSliKys7cmV0dXJuIGJ9O18udWM9ZnVuY3Rpb24oYSl7dmFyIGI9W10sYz0w
LGQ7Zm9yKGQgaW4gYSliW2MrK109YVtkXTtyZXR1cm4gYn07Xy52Yz1mdW5jdGlvbihhKXt2
YXIgYj1bXSxjPTAsZDtmb3IoZCBpbiBhKWJbYysrXT1kO3JldHVybiBifTsNCl8ud2M9ZnVu
Y3Rpb24oYSxiKXtyZXR1cm4gbnVsbCE9PWEmJmIgaW4gYX07Xy56Yz1mdW5jdGlvbihhKXtm
b3IodmFyIGIgaW4gYSlyZXR1cm4hMTtyZXR1cm4hMH07Xy5BYz1mdW5jdGlvbihhLGIpe2Ig
aW4gYSYmZGVsZXRlIGFbYl19O18uQmM9ZnVuY3Rpb24oYSxiLGMpe3JldHVybiBudWxsIT09
YSYmYiBpbiBhP2FbYl06Y307Xy5DYz1mdW5jdGlvbihhKXt2YXIgYj17fSxjO2ZvcihjIGlu
IGEpYltjXT1hW2NdO3JldHVybiBifTtEYz0iY29uc3RydWN0b3IgaGFzT3duUHJvcGVydHkg
aXNQcm90b3R5cGVPZiBwcm9wZXJ0eUlzRW51bWVyYWJsZSB0b0xvY2FsZVN0cmluZyB0b1N0
cmluZyB2YWx1ZU9mIi5zcGxpdCgiICIpOw0KXy5FYz1mdW5jdGlvbihhLGIpe2Zvcih2YXIg
YyxkLGU9MTtlPGFyZ3VtZW50cy5sZW5ndGg7ZSsrKXtkPWFyZ3VtZW50c1tlXTtmb3IoYyBp
biBkKWFbY109ZFtjXTtmb3IodmFyIGY9MDtmPERjLmxlbmd0aDtmKyspYz1EY1tmXSxPYmpl
Y3QucHJvdG90eXBlLmhhc093blByb3BlcnR5LmNhbGwoZCxjKSYmKGFbY109ZFtjXSl9fTtf
LkZjPWZ1bmN0aW9uKGEpe3ZhciBiPWFyZ3VtZW50cy5sZW5ndGg7aWYoMT09YiYmXy5aYShh
cmd1bWVudHNbMF0pKXJldHVybiBfLkZjLmFwcGx5KG51bGwsYXJndW1lbnRzWzBdKTtmb3Io
dmFyIGM9e30sZD0wO2Q8YjtkKyspY1thcmd1bWVudHNbZF1dPSEwO3JldHVybiBjfTsNCnZh
ciBHYyxOYyx2YWEsT2MsdWFhO0djPWZ1bmN0aW9uKCl7cmV0dXJuIF8ubWMoIlRyaWRlbnQi
KXx8Xy5tYygiTVNJRSIpfTtfLktjPWZ1bmN0aW9uKCl7cmV0dXJuIF8ubWMoIkZpcmVmb3gi
KXx8Xy5tYygiRnhpT1MiKX07Xy5NYz1mdW5jdGlvbigpe3JldHVybiBfLm1jKCJTYWZhcmki
KSYmIShfLkxjKCl8fF8ubWMoIkNvYXN0Iil8fF8ubWMoIk9wZXJhIil8fF8ubWMoIkVkZ2Ui
KXx8Xy5tYygiRWRnLyIpfHxfLm1jKCJPUFIiKXx8Xy5LYygpfHxfLm1jKCJTaWxrIil8fF8u
bWMoIkFuZHJvaWQiKSl9O18uTGM9ZnVuY3Rpb24oKXtyZXR1cm4oXy5tYygiQ2hyb21lIil8
fF8ubWMoIkNyaU9TIikpJiYhXy5tYygiRWRnZSIpfTtOYz1mdW5jdGlvbigpe3JldHVybiBf
Lm1jKCJBbmRyb2lkIikmJiEoXy5MYygpfHxfLktjKCl8fF8ubWMoIk9wZXJhIil8fF8ubWMo
IlNpbGsiKSl9Ow0KdmFhPWZ1bmN0aW9uKCl7ZnVuY3Rpb24gYShlKXtlPV8uemIoZSxkKTty
ZXR1cm4gY1tlXXx8IiJ9dmFyIGI9Xy5pYztpZihHYygpKXJldHVybiB1YWEoYik7Yj10YWEo
Yik7dmFyIGM9e307KDAsXy5wYikoYixmdW5jdGlvbihlKXtjW2VbMF1dPWVbMV19KTt2YXIg
ZD1fLmViKF8ud2MsYyk7cmV0dXJuIF8ubWMoIk9wZXJhIik/YShbIlZlcnNpb24iLCJPcGVy
YSJdKTpfLm1jKCJFZGdlIik/YShbIkVkZ2UiXSk6Xy5tYygiRWRnLyIpP2EoWyJFZGciXSk6
Xy5MYygpP2EoWyJDaHJvbWUiLCJDcmlPUyJdKTooYj1iWzJdKSYmYlsxXXx8IiJ9O09jPWZ1
bmN0aW9uKGEpe3JldHVybiAwPD1fLmZjKHZhYSgpLGEpfTsNCnVhYT1mdW5jdGlvbihhKXt2
YXIgYj0vcnY6ICooW1xkXC5dKikvLmV4ZWMoYSk7aWYoYiYmYlsxXSlyZXR1cm4gYlsxXTti
PSIiO3ZhciBjPS9NU0lFICsoW1xkXC5dKykvLmV4ZWMoYSk7aWYoYyYmY1sxXSlpZihhPS9U
cmlkZW50XC8oXGQuXGQpLy5leGVjKGEpLCI3LjAiPT1jWzFdKWlmKGEmJmFbMV0pc3dpdGNo
KGFbMV0pe2Nhc2UgIjQuMCI6Yj0iOC4wIjticmVhaztjYXNlICI1LjAiOmI9IjkuMCI7YnJl
YWs7Y2FzZSAiNi4wIjpiPSIxMC4wIjticmVhaztjYXNlICI3LjAiOmI9IjExLjAifWVsc2Ug
Yj0iNy4wIjtlbHNlIGI9Y1sxXTtyZXR1cm4gYn07DQp2YXIgd2FhLHhhYTtfLlFjPWZ1bmN0
aW9uKGEpe3JldHVybiBmdW5jdGlvbigpe3JldHVybiBhfX07Xy5SYz1mdW5jdGlvbihhKXty
ZXR1cm4gYX07d2FhPWZ1bmN0aW9uKGEpe3JldHVybiBmdW5jdGlvbigpe3Rocm93IEVycm9y
KGEpO319O3hhYT1mdW5jdGlvbihhKXtyZXR1cm4gZnVuY3Rpb24oKXt0aHJvdyBhO319Ow0K
dmFyIFNjPWtiKCJBY2NvdW50U2V0dGluZ3NTZWN1cml0eUFkdmlzb3JVaSNodG1sIik7DQp2
YXIgVWMsVGMseWFhO18uVmM9ZnVuY3Rpb24oYSxiKXt0aGlzLmhhPWE9PT1UYyYmYnx8IiI7
dGhpcy5rYT1VY307Xy5WYy5wcm90b3R5cGUuU2o9ITA7Xy5WYy5wcm90b3R5cGUuVGg9ZnVu
Y3Rpb24oKXtyZXR1cm4gdGhpcy5oYX07Xy5ZYz1mdW5jdGlvbihhKXtyZXR1cm4gYSBpbnN0
YW5jZW9mIF8uVmMmJmEuY29uc3RydWN0b3I9PT1fLlZjJiZhLmthPT09VWM/YS5oYToidHlw
ZV9lcnJvcjpDb25zdCJ9O18uWmM9ZnVuY3Rpb24oYSl7cmV0dXJuIG5ldyBfLlZjKFRjLGEp
fTtVYz17fTtUYz17fTt5YWE9Xy5aYygiIik7DQpfLmJkPWZ1bmN0aW9uKCl7dGhpcy5oYT0i
Ijt0aGlzLmthPV8uYWR9O18uYmQucHJvdG90eXBlLlNqPSEwO18uYWQ9e307Xy5iZC5wcm90
b3R5cGUuVGg9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5oYS50b1N0cmluZygpfTtfLmJkLnBy
b3RvdHlwZS5ObD1mdW5jdGlvbihhKXt0aGlzLmhhPVNjP1NjLmNyZWF0ZVNjcmlwdChhKTph
O3JldHVybiB0aGlzfTsobmV3IF8uYmQpLk5sKCIiKTsNCnZhciB6YWEsQWFhLEJhYSxDYWEs
RGFhLEVhYTt6YWE9LzxbXj5dKj58JlteO10rOy9nO18uZ2Q9ZnVuY3Rpb24oYSxiKXtyZXR1
cm4gYj9hLnJlcGxhY2UoemFhLCIiKTphfTtBYWE9L1tBLVphLXpcdTAwYzAtXHUwMGQ2XHUw
MGQ4LVx1MDBmNlx1MDBmOC1cdTAyYjhcdTAzMDAtXHUwNTkwXHUwOTAwLVx1MWZmZlx1MjAw
ZVx1MmMwMC1cdWQ4MDFcdWQ4MDQtXHVkODM5XHVkODNjLVx1ZGJmZlx1ZjkwMC1cdWZiMWNc
dWZlMDAtXHVmZTZmXHVmZWZkLVx1ZmZmZl0vO0JhYT0vXlteQS1aYS16XHUwMGMwLVx1MDBk
Nlx1MDBkOC1cdTAwZjZcdTAwZjgtXHUwMmI4XHUwMzAwLVx1MDU5MFx1MDkwMC1cdTFmZmZc
dTIwMGVcdTJjMDAtXHVkODAxXHVkODA0LVx1ZDgzOVx1ZDgzYy1cdWRiZmZcdWY5MDAtXHVm
YjFjXHVmZTAwLVx1ZmU2Zlx1ZmVmZC1cdWZmZmZdKltcdTA1OTEtXHUwNmVmXHUwNmZhLVx1
MDhmZlx1MjAwZlx1ZDgwMi1cdWQ4MDNcdWQ4M2EtXHVkODNiXHVmYjFkLVx1ZmRmZlx1ZmU3
MC1cdWZlZmNdLzsNCkNhYT0vXmh0dHA6XC9cLy4qLztEYWE9L1xzKy87RWFhPS9bXGRcdTA2
ZjAtXHUwNmY5XS87Xy5oZD1mdW5jdGlvbihhLGIpe3ZhciBjPTAsZD0wLGU9ITE7YT1fLmdk
KGEsYikuc3BsaXQoRGFhKTtmb3IoYj0wO2I8YS5sZW5ndGg7YisrKXt2YXIgZj1hW2JdO0Jh
YS50ZXN0KF8uZ2QoZix2b2lkIDApKT8oYysrLGQrKyk6Q2FhLnRlc3QoZik/ZT0hMDpBYWEu
dGVzdChfLmdkKGYsdm9pZCAwKSk/ZCsrOkVhYS50ZXN0KGYpJiYoZT0hMCl9cmV0dXJuIDA9
PWQ/ZT8xOjA6LjQ8Yy9kPy0xOjF9Ow0KdmFyIGxkLGpkLGlkO18ua2Q9ZnVuY3Rpb24oYSxi
KXt0aGlzLmhhPWE9PT1pZCYmYnx8IiI7dGhpcy5rYT1qZH07Xy5rZC5wcm90b3R5cGUuU2o9
ITA7Xy5rZC5wcm90b3R5cGUuVGg9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5oYS50b1N0cmlu
ZygpfTtfLmtkLnByb3RvdHlwZS51Qz0hMDtfLmtkLnByb3RvdHlwZS5Naj1fLmNhKDIpO18u
bWQ9ZnVuY3Rpb24oYSl7cmV0dXJuIGxkKGEpLnRvU3RyaW5nKCl9O2xkPWZ1bmN0aW9uKGEp
e2lmKGEgaW5zdGFuY2VvZiBfLmtkJiZhLmNvbnN0cnVjdG9yPT09Xy5rZCYmYS5rYT09PWpk
KXJldHVybiBhLmhhO18uWWEoYSk7cmV0dXJuInR5cGVfZXJyb3I6VHJ1c3RlZFJlc291cmNl
VXJsIn07Xy5uZD1mdW5jdGlvbihhKXtyZXR1cm4gXy50YShfLlljKGEpKX07amQ9e307Xy50
YT1mdW5jdGlvbihhKXthPVNjP1NjLmNyZWF0ZVNjcmlwdFVSTChhKTphO3JldHVybiBuZXcg
Xy5rZChpZCxhKX07aWQ9e307DQp2YXIgRmFhLEdhYSx3ZCxyZCxGZCxxZDtfLnNkPWZ1bmN0
aW9uKGEsYil7dGhpcy5oYT1hPT09cWQmJmJ8fCIiO3RoaXMua2E9cmR9O18uc2QucHJvdG90
eXBlLlNqPSEwO18uc2QucHJvdG90eXBlLlRoPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuaGEu
dG9TdHJpbmcoKX07Xy5zZC5wcm90b3R5cGUudUM9ITA7Xy5zZC5wcm90b3R5cGUuTWo9Xy5j
YSgxKTtfLnRkPWZ1bmN0aW9uKGEpe2lmKGEgaW5zdGFuY2VvZiBfLnNkJiZhLmNvbnN0cnVj
dG9yPT09Xy5zZCYmYS5rYT09PXJkKXJldHVybiBhLmhhO18uWWEoYSk7cmV0dXJuInR5cGVf
ZXJyb3I6U2FmZVVybCJ9O0ZhYT0vXig/OmF1ZGlvXC8oPzozZ3BwMnwzZ3BwfGFhY3xMMTZ8
bWlkaXxtcDN8bXA0fG1wZWd8b2dhfG9nZ3xvcHVzfHgtbTRhfHgtd2F2fHdhdnx3ZWJtKXxp
bWFnZVwvKD86Ym1wfGdpZnxqcGVnfGpwZ3xwbmd8dGlmZnx3ZWJwfHgtaWNvbil8dGV4dFwv
Y3N2fHZpZGVvXC8oPzptcGVnfG1wNHxvZ2d8d2VibXxxdWlja3RpbWUpKSg/Ojtcdys9KD86
XHcrfCJbXHc7PV0rIikpKiQvaTsNCkdhYT0vXmRhdGE6KFteLF0qKTtiYXNlNjQsW2EtejAt
OStcL10rPSokL2k7d2Q9L14oPzooPzpodHRwcz98bWFpbHRvfGZ0cCk6fFteOi8/I10qKD86
Wy8/I118JCkpL2k7Xy5EZD1mdW5jdGlvbihhKXtpZihhIGluc3RhbmNlb2YgXy5zZClyZXR1
cm4gYTthPSJvYmplY3QiPT10eXBlb2YgYSYmYS5Taj9hLlRoKCk6U3RyaW5nKGEpO3dkLnRl
c3QoYSl8fChhPSJhYm91dDppbnZhbGlkI3pDbG9zdXJleiIpO3JldHVybiBfLnhkKGEpfTsN
Cl8uRWQ9ZnVuY3Rpb24oYSxiKXtpZihhIGluc3RhbmNlb2YgXy5zZClyZXR1cm4gYTthPSJv
YmplY3QiPT10eXBlb2YgYSYmYS5Taj9hLlRoKCk6U3RyaW5nKGEpO2lmKGImJi9eZGF0YTov
aS50ZXN0KGEpKXtiPWEucmVwbGFjZSgvKCUwQXwlMEQpL2csIiIpO3ZhciBjPWIubWF0Y2go
R2FhKTtjPWMmJkZhYS50ZXN0KGNbMV0pO2I9Xy54ZChjP2I6ImFib3V0OmludmFsaWQjekNs
b3N1cmV6Iik7aWYoYi5UaCgpPT1hKXJldHVybiBifXdkLnRlc3QoYSl8fChhPSJhYm91dDpp
bnZhbGlkI3pDbG9zdXJleiIpO3JldHVybiBfLnhkKGEpfTtyZD17fTtfLnhkPWZ1bmN0aW9u
KGEpe3JldHVybiBuZXcgXy5zZChxZCxhKX07RmQ9Xy54ZCgiYWJvdXQ6YmxhbmsiKTtxZD17
fTsNCl8uSGQ9ZnVuY3Rpb24oKXt0aGlzLmhhPSIiO3RoaXMua2E9Xy5HZH07Xy5IZC5wcm90
b3R5cGUuU2o9ITA7Xy5HZD17fTtfLkhkLnByb3RvdHlwZS5UaD1mdW5jdGlvbigpe3JldHVy
biB0aGlzLmhhfTtfLkhkLnByb3RvdHlwZS5ObD1mdW5jdGlvbihhKXt0aGlzLmhhPWE7cmV0
dXJuIHRoaXN9O18uSGFhPShuZXcgXy5IZCkuTmwoIiIpOw0KXy5KZD1mdW5jdGlvbigpe3Ro
aXMuaGE9IiI7dGhpcy5rYT1fLklkfTtfLkpkLnByb3RvdHlwZS5Taj0hMDtfLklkPXt9O18u
SmQucHJvdG90eXBlLlRoPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuaGF9O18uSmQucHJvdG90
eXBlLk5sPWZ1bmN0aW9uKGEpe3RoaXMuaGE9YTtyZXR1cm4gdGhpc307KG5ldyBfLkpkKS5O
bCgiIik7DQp2YXIgS2Q7Xy5MZD1mdW5jdGlvbigpe3RoaXMuV0Q9IiI7dGhpcy56UT1LZDt0
aGlzLm9CPW51bGx9O18uTGQucHJvdG90eXBlLnVDPSEwO18uTGQucHJvdG90eXBlLk1qPV8u
Y2EoMCk7Xy5MZC5wcm90b3R5cGUuU2o9ITA7Xy5MZC5wcm90b3R5cGUuVGg9ZnVuY3Rpb24o
KXtyZXR1cm4gdGhpcy5XRC50b1N0cmluZygpfTtfLk1kPWZ1bmN0aW9uKGEpe2lmKGEgaW5z
dGFuY2VvZiBfLkxkJiZhLmNvbnN0cnVjdG9yPT09Xy5MZCYmYS56UT09PUtkKXJldHVybiBh
LldEO18uWWEoYSk7cmV0dXJuInR5cGVfZXJyb3I6U2FmZUh0bWwifTtLZD17fTtfLk5kPWZ1
bmN0aW9uKGEsYil7cmV0dXJuKG5ldyBfLkxkKS5ObChhLGIpfTtfLkxkLnByb3RvdHlwZS5O
bD1mdW5jdGlvbihhLGIpe3RoaXMuV0Q9U2M/U2MuY3JlYXRlSFRNTChhKTphO3RoaXMub0I9
YjtyZXR1cm4gdGhpc307Xy5OZCgiPCFET0NUWVBFIGh0bWw+IiwwKTtfLlBkPV8uTmQoIiIs
MCk7Xy5JYWE9Xy5OZCgiPGJyPiIsMCk7DQpfLkphYT1mdW5jdGlvbihhKXt2YXIgYj0hMSxj
O3JldHVybiBmdW5jdGlvbigpe2J8fChjPWEoKSxiPSEwKTtyZXR1cm4gY319KGZ1bmN0aW9u
KCl7dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2IiksYj1kb2N1bWVudC5jcmVh
dGVFbGVtZW50KCJkaXYiKTtiLmFwcGVuZENoaWxkKGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQo
ImRpdiIpKTthLmFwcGVuZENoaWxkKGIpO2I9YS5maXJzdENoaWxkLmZpcnN0Q2hpbGQ7YS5p
bm5lckhUTUw9Xy5NZChfLlBkKTtyZXR1cm4hYi5wYXJlbnRFbGVtZW50fSk7Xy5RZD1mdW5j
dGlvbihhLGIpe2I9YiBpbnN0YW5jZW9mIF8uc2Q/YjpfLkVkKGIpO2EuaHJlZj1fLnRkKGIp
fTtfLlJkPWZ1bmN0aW9uKGEsYil7Yj1iIGluc3RhbmNlb2YgXy5zZD9iOl8uRWQoYiwvXmRh
dGE6aW1hZ2VcLy9pLnRlc3QoYikpO2Euc3JjPV8udGQoYil9O18uU2Q9ZnVuY3Rpb24oYSxi
KXthLnNyYz1fLm1kKGIpfTsNCl8uVGQ9ZnVuY3Rpb24oYSxiKXthLnNyYz1sZChiKTsoYj1f
LlRhKCkpJiZhLnNldEF0dHJpYnV0ZSgibm9uY2UiLGIpfTtfLlVkPWZ1bmN0aW9uKGEsYil7
Yj1iIGluc3RhbmNlb2YgXy5zZD9iOl8uRWQoYik7YS5ocmVmPV8udGQoYil9Ow0KXy5WZD1m
dW5jdGlvbihhKXtyZXR1cm4hL1teMC05XS8udGVzdChhKX07Xy5XZD1mdW5jdGlvbihhKXty
ZXR1cm4gZW5jb2RlVVJJQ29tcG9uZW50KFN0cmluZyhhKSl9O18uJGQ9ZnVuY3Rpb24oYSl7
cmV0dXJuIGE9Xy5jYyhhLHZvaWQgMCl9O18uYWU9ZnVuY3Rpb24oYSl7cmV0dXJuIFN0cmlu
ZyhhKS5yZXBsYWNlKC8oWy0oKVxbXF17fSs/Ki4kXF58LDojPCFcXF0pL2csIlxcJDEiKS5y
ZXBsYWNlKC9ceDA4L2csIlxceDA4Iil9O18uYmU9U3RyaW5nLnByb3RvdHlwZS5yZXBlYXQ/
ZnVuY3Rpb24oYSxiKXtyZXR1cm4gYS5yZXBlYXQoYil9OmZ1bmN0aW9uKGEsYil7cmV0dXJu
IEFycmF5KGIrMSkuam9pbihhKX07Xy5jZT1mdW5jdGlvbihhKXtyZXR1cm4gbnVsbD09YT8i
IjpTdHJpbmcoYSl9O18uZGU9ZnVuY3Rpb24oYSl7cmV0dXJuIFN0cmluZyhhKS5yZXBsYWNl
KC9cLShbYS16XSkvZyxmdW5jdGlvbihiLGMpe3JldHVybiBjLnRvVXBwZXJDYXNlKCl9KX07
DQpfLmVlPWZ1bmN0aW9uKGEpe3JldHVybiBTdHJpbmcoYSkucmVwbGFjZSgvKFtBLVpdKS9n
LCItJDEiKS50b0xvd2VyQ2FzZSgpfTtfLmZlPWZ1bmN0aW9uKGEpe3JldHVybiBhLnJlcGxh
Y2UoLyhefFtcc10rKShbYS16XSkvZyxmdW5jdGlvbihiLGMsZCl7cmV0dXJuIGMrZC50b1Vw
cGVyQ2FzZSgpfSl9Ow0KdmFyIGdlO2dlPWZ1bmN0aW9uKCl7cmV0dXJuIF8ubWMoImlQaG9u
ZSIpJiYhXy5tYygiaVBvZCIpJiYhXy5tYygiaVBhZCIpfTtfLmhlPWZ1bmN0aW9uKCl7cmV0
dXJuIGdlKCl8fF8ubWMoImlQYWQiKXx8Xy5tYygiaVBvZCIpfTsNCnZhciBMYWE7Xy5pZT1m
dW5jdGlvbihhKXtfLmllWyIgIl0oYSk7cmV0dXJuIGF9O18uaWVbIiAiXT1fLlZhO18uamU9
ZnVuY3Rpb24oYSxiKXt0cnl7cmV0dXJuIF8uaWUoYVtiXSksITB9Y2F0Y2goYyl7fXJldHVy
biExfTtMYWE9ZnVuY3Rpb24oYSxiKXt2YXIgYz1LYWE7cmV0dXJuIE9iamVjdC5wcm90b3R5
cGUuaGFzT3duUHJvcGVydHkuY2FsbChjLGEpP2NbYV06Y1thXT1iKGEpfTsNCnZhciB5ZSx6
ZSxLYWEsR2U7Xy5xZT1fLm1jKCJPcGVyYSIpO18ucmU9R2MoKTtfLnNlPV8ubWMoIkVkZ2Ui
KTtfLnRlPV8uc2V8fF8ucmU7Xy51ZT1fLm1jKCJHZWNrbyIpJiYhKF8uZGMoXy5pYywiV2Vi
S2l0IikmJiFfLm1jKCJFZGdlIikpJiYhKF8ubWMoIlRyaWRlbnQiKXx8Xy5tYygiTVNJRSIp
KSYmIV8ubWMoIkVkZ2UiKTtfLnZlPV8uZGMoXy5pYywiV2ViS2l0IikmJiFfLm1jKCJFZGdl
Iik7Xy5NYWE9Xy52ZSYmXy5tYygiTW9iaWxlIik7Xy53ZT1fLm1jKCJNYWNpbnRvc2giKTtf
Lk5hYT1fLm1jKCJXaW5kb3dzIik7Xy5PYWE9Xy5tYygiTGludXgiKXx8Xy5tYygiQ3JPUyIp
O18ueGU9Xy5tYygiQW5kcm9pZCIpO18uUGFhPWdlKCk7Xy5RYWE9Xy5tYygiaVBhZCIpO18u
UmFhPV8ubWMoImlQb2QiKTtfLlNhYT1fLmhlKCk7eWU9ZnVuY3Rpb24oKXt2YXIgYT1fLnFh
LmRvY3VtZW50O3JldHVybiBhP2EuZG9jdW1lbnRNb2RlOnZvaWQgMH07DQphOnt2YXIgQWU9
IiIsQmU9ZnVuY3Rpb24oKXt2YXIgYT1fLmljO2lmKF8udWUpcmV0dXJuL3J2OihbXlwpO10r
KShcKXw7KS8uZXhlYyhhKTtpZihfLnNlKXJldHVybi9FZGdlXC8oW1xkXC5dKykvLmV4ZWMo
YSk7aWYoXy5yZSlyZXR1cm4vXGIoPzpNU0lFfHJ2KVs6IF0oW15cKTtdKykoXCl8OykvLmV4
ZWMoYSk7aWYoXy52ZSlyZXR1cm4vV2ViS2l0XC8oXFMrKS8uZXhlYyhhKTtpZihfLnFlKXJl
dHVybi8oPzpWZXJzaW9uKVsgXC9dPyhcUyspLy5leGVjKGEpfSgpO0JlJiYoQWU9QmU/QmVb
MV06IiIpO2lmKF8ucmUpe3ZhciBDZT15ZSgpO2lmKG51bGwhPUNlJiZDZT5wYXJzZUZsb2F0
KEFlKSl7emU9U3RyaW5nKENlKTticmVhayBhfX16ZT1BZX1fLkRlPXplO0thYT17fTtfLkVl
PWZ1bmN0aW9uKGEpe3JldHVybiBMYWEoYSxmdW5jdGlvbigpe3JldHVybiAwPD1fLmZjKF8u
RGUsYSl9KX07Xy5GZT1mdW5jdGlvbihhKXtyZXR1cm4gTnVtYmVyKFRhYSk+PWF9Ow0KR2U9
Xy5xYS5kb2N1bWVudCYmXy5yZT95ZSgpOnZvaWQgMDt2YXIgVGFhPUdlOw0KdmFyIFVhYSxW
YWEsV2FhO3RyeXsobmV3IHNlbGYuT2Zmc2NyZWVuQ2FudmFzKDAsMCkpLmdldENvbnRleHQo
IjJkIil9Y2F0Y2goYSl7fVVhYT0hXy5yZXx8Xy5GZSg5KTtWYWE9IV8udWUmJiFfLnJlfHxf
LnJlJiZfLkZlKDkpfHxfLnVlJiZfLkVlKCIxLjkuMSIpO18uSGU9Xy5yZSYmIV8uRWUoIjki
KTtXYWE9Xy5yZXx8Xy5xZXx8Xy52ZTsNCl8uSWU9ZnVuY3Rpb24oYSxiKXt0aGlzLng9dm9p
ZCAwIT09YT9hOjA7dGhpcy55PXZvaWQgMCE9PWI/YjowfTtfLms9Xy5JZS5wcm90b3R5cGU7
Xy5rLmNsb25lPWZ1bmN0aW9uKCl7cmV0dXJuIG5ldyBfLkllKHRoaXMueCx0aGlzLnkpfTtf
LmsuZXF1YWxzPWZ1bmN0aW9uKGEpe3JldHVybiBhIGluc3RhbmNlb2YgXy5JZSYmKHRoaXM9
PWE/ITA6dGhpcyYmYT90aGlzLng9PWEueCYmdGhpcy55PT1hLnk6ITEpfTtfLmsuY2VpbD1m
dW5jdGlvbigpe3RoaXMueD1NYXRoLmNlaWwodGhpcy54KTt0aGlzLnk9TWF0aC5jZWlsKHRo
aXMueSk7cmV0dXJuIHRoaXN9O18uay5mbG9vcj1mdW5jdGlvbigpe3RoaXMueD1NYXRoLmZs
b29yKHRoaXMueCk7dGhpcy55PU1hdGguZmxvb3IodGhpcy55KTtyZXR1cm4gdGhpc307Xy5r
LnJvdW5kPWZ1bmN0aW9uKCl7dGhpcy54PU1hdGgucm91bmQodGhpcy54KTt0aGlzLnk9TWF0
aC5yb3VuZCh0aGlzLnkpO3JldHVybiB0aGlzfTsNCl8uU2U9ZnVuY3Rpb24oYSxiKXt0aGlz
LndpZHRoPWE7dGhpcy5oZWlnaHQ9Yn07Xy5UZT1mdW5jdGlvbihhLGIpe3JldHVybiBhPT1i
PyEwOmEmJmI/YS53aWR0aD09Yi53aWR0aCYmYS5oZWlnaHQ9PWIuaGVpZ2h0OiExfTtfLms9
Xy5TZS5wcm90b3R5cGU7Xy5rLmNsb25lPWZ1bmN0aW9uKCl7cmV0dXJuIG5ldyBfLlNlKHRo
aXMud2lkdGgsdGhpcy5oZWlnaHQpfTtfLmsuYXNwZWN0UmF0aW89ZnVuY3Rpb24oKXtyZXR1
cm4gdGhpcy53aWR0aC90aGlzLmhlaWdodH07Xy5rLmlzRW1wdHk9ZnVuY3Rpb24oKXtyZXR1
cm4hKHRoaXMud2lkdGgqdGhpcy5oZWlnaHQpfTtfLmsuY2VpbD1mdW5jdGlvbigpe3RoaXMu
d2lkdGg9TWF0aC5jZWlsKHRoaXMud2lkdGgpO3RoaXMuaGVpZ2h0PU1hdGguY2VpbCh0aGlz
LmhlaWdodCk7cmV0dXJuIHRoaXN9Ow0KXy5rLmZsb29yPWZ1bmN0aW9uKCl7dGhpcy53aWR0
aD1NYXRoLmZsb29yKHRoaXMud2lkdGgpO3RoaXMuaGVpZ2h0PU1hdGguZmxvb3IodGhpcy5o
ZWlnaHQpO3JldHVybiB0aGlzfTtfLmsucm91bmQ9ZnVuY3Rpb24oKXt0aGlzLndpZHRoPU1h
dGgucm91bmQodGhpcy53aWR0aCk7dGhpcy5oZWlnaHQ9TWF0aC5yb3VuZCh0aGlzLmhlaWdo
dCk7cmV0dXJuIHRoaXN9Ow0KdmFyIGFmLGpmLFlhYSxYYWE7Xy5YZT1mdW5jdGlvbihhKXty
ZXR1cm4gYT9uZXcgXy5VZShfLlZlKGEpKTptYnx8KG1iPW5ldyBfLlVlKX07Xy5ZZT1mdW5j
dGlvbihhLGIpe3JldHVybiJzdHJpbmciPT09dHlwZW9mIGI/YS5nZXRFbGVtZW50QnlJZChi
KTpifTtfLiRlPWZ1bmN0aW9uKGEsYil7dmFyIGM9Ynx8ZG9jdW1lbnQ7cmV0dXJuIGMucXVl
cnlTZWxlY3RvckFsbCYmYy5xdWVyeVNlbGVjdG9yP2MucXVlcnlTZWxlY3RvckFsbCgiLiIr
YSk6Xy5aZShkb2N1bWVudCwiKiIsYSxiKX07DQpfLlplPWZ1bmN0aW9uKGEsYixjLGQpe2E9
ZHx8YTtiPWImJiIqIiE9Yj9TdHJpbmcoYikudG9VcHBlckNhc2UoKToiIjtpZihhLnF1ZXJ5
U2VsZWN0b3JBbGwmJmEucXVlcnlTZWxlY3RvciYmKGJ8fGMpKXJldHVybiBhLnF1ZXJ5U2Vs
ZWN0b3JBbGwoYisoYz8iLiIrYzoiIikpO2lmKGMmJmEuZ2V0RWxlbWVudHNCeUNsYXNzTmFt
ZSl7YT1hLmdldEVsZW1lbnRzQnlDbGFzc05hbWUoYyk7aWYoYil7ZD17fTtmb3IodmFyIGU9
MCxmPTAsZztnPWFbZl07ZisrKWI9PWcubm9kZU5hbWUmJihkW2UrK109Zyk7ZC5sZW5ndGg9
ZTtyZXR1cm4gZH1yZXR1cm4gYX1hPWEuZ2V0RWxlbWVudHNCeVRhZ05hbWUoYnx8IioiKTtp
ZihjKXtkPXt9O2ZvcihmPWU9MDtnPWFbZl07ZisrKWI9Zy5jbGFzc05hbWUsImZ1bmN0aW9u
Ij09dHlwZW9mIGIuc3BsaXQmJl8uQ2IoYi5zcGxpdCgvXHMrLyksYykmJihkW2UrK109Zyk7
ZC5sZW5ndGg9ZTtyZXR1cm4gZH1yZXR1cm4gYX07DQpfLmJmPWZ1bmN0aW9uKGEsYil7Xy5u
YyhiLGZ1bmN0aW9uKGMsZCl7YyYmIm9iamVjdCI9PXR5cGVvZiBjJiZjLlNqJiYoYz1jLlRo
KCkpOyJzdHlsZSI9PWQ/YS5zdHlsZS5jc3NUZXh0PWM6ImNsYXNzIj09ZD9hLmNsYXNzTmFt
ZT1jOiJmb3IiPT1kP2EuaHRtbEZvcj1jOmFmLmhhc093blByb3BlcnR5KGQpP2Euc2V0QXR0
cmlidXRlKGFmW2RdLGMpOl8uVGIoZCwiYXJpYS0iKXx8Xy5UYihkLCJkYXRhLSIpP2Euc2V0
QXR0cmlidXRlKGQsYyk6YVtkXT1jfSl9O2FmPXtjZWxscGFkZGluZzoiY2VsbFBhZGRpbmci
LGNlbGxzcGFjaW5nOiJjZWxsU3BhY2luZyIsY29sc3BhbjoiY29sU3BhbiIsZnJhbWVib3Jk
ZXI6ImZyYW1lQm9yZGVyIixoZWlnaHQ6ImhlaWdodCIsbWF4bGVuZ3RoOiJtYXhMZW5ndGgi
LG5vbmNlOiJub25jZSIscm9sZToicm9sZSIscm93c3Bhbjoicm93U3BhbiIsdHlwZToidHlw
ZSIsdXNlbWFwOiJ1c2VNYXAiLHZhbGlnbjoidkFsaWduIix3aWR0aDoid2lkdGgifTsNCl8u
ZGY9ZnVuY3Rpb24oYSl7YT0oYXx8d2luZG93KS5kb2N1bWVudDthPV8uY2YoYSk/YS5kb2N1
bWVudEVsZW1lbnQ6YS5ib2R5O3JldHVybiBuZXcgXy5TZShhLmNsaWVudFdpZHRoLGEuY2xp
ZW50SGVpZ2h0KX07Xy5mZj1mdW5jdGlvbihhKXt2YXIgYj1fLmVmKGEpO2E9YS5wYXJlbnRX
aW5kb3d8fGEuZGVmYXVsdFZpZXc7cmV0dXJuIF8ucmUmJl8uRWUoIjEwIikmJmEucGFnZVlP
ZmZzZXQhPWIuc2Nyb2xsVG9wP25ldyBfLkllKGIuc2Nyb2xsTGVmdCxiLnNjcm9sbFRvcCk6
bmV3IF8uSWUoYS5wYWdlWE9mZnNldHx8Yi5zY3JvbGxMZWZ0LGEucGFnZVlPZmZzZXR8fGIu
c2Nyb2xsVG9wKX07Xy5lZj1mdW5jdGlvbihhKXtyZXR1cm4gYS5zY3JvbGxpbmdFbGVtZW50
P2Euc2Nyb2xsaW5nRWxlbWVudDohXy52ZSYmXy5jZihhKT9hLmRvY3VtZW50RWxlbWVudDph
LmJvZHl8fGEuZG9jdW1lbnRFbGVtZW50fTsNCl8uZ2Y9ZnVuY3Rpb24oYSl7cmV0dXJuIGE/
YS5wYXJlbnRXaW5kb3d8fGEuZGVmYXVsdFZpZXc6d2luZG93fTtfLmtmPWZ1bmN0aW9uKGEs
Yil7dmFyIGM9U3RyaW5nKGJbMF0pLGQ9YlsxXTtpZighVWFhJiZkJiYoZC5uYW1lfHxkLnR5
cGUpKXtjPVsiPCIsY107ZC5uYW1lJiZjLnB1c2goJyBuYW1lPSInLF8uJGQoZC5uYW1lKSwn
IicpO2lmKGQudHlwZSl7Yy5wdXNoKCcgdHlwZT0iJyxfLiRkKGQudHlwZSksJyInKTt2YXIg
ZT17fTtfLkVjKGUsZCk7ZGVsZXRlIGUudHlwZTtkPWV9Yy5wdXNoKCI+Iik7Yz1jLmpvaW4o
IiIpfWM9Xy5oZihhLGMpO2QmJigic3RyaW5nIj09PXR5cGVvZiBkP2MuY2xhc3NOYW1lPWQ6
Xy5aYShkKT9jLmNsYXNzTmFtZT1kLmpvaW4oIiAiKTpfLmJmKGMsZCkpOzI8Yi5sZW5ndGgm
JmpmKGEsYyxiLDIpO3JldHVybiBjfTsNCmpmPWZ1bmN0aW9uKGEsYixjLGQpe2Z1bmN0aW9u
IGUoZyl7ZyYmYi5hcHBlbmRDaGlsZCgic3RyaW5nIj09PXR5cGVvZiBnP2EuY3JlYXRlVGV4
dE5vZGUoZyk6Zyl9Zm9yKDtkPGMubGVuZ3RoO2QrKyl7dmFyIGY9Y1tkXTshXy4kYShmKXx8
Xy5iYihmKSYmMDxmLm5vZGVUeXBlP2UoZik6KDAsXy5wYikoWGFhKGYpP18uSmIoZik6Zixl
KX19O18ubGY9ZnVuY3Rpb24oYSl7cmV0dXJuIF8uaGYoZG9jdW1lbnQsYSl9O18uaGY9ZnVu
Y3Rpb24oYSxiKXtiPVN0cmluZyhiKTsiYXBwbGljYXRpb24veGh0bWwreG1sIj09PWEuY29u
dGVudFR5cGUmJihiPWIudG9Mb3dlckNhc2UoKSk7cmV0dXJuIGEuY3JlYXRlRWxlbWVudChi
KX07Xy5jZj1mdW5jdGlvbihhKXtyZXR1cm4iQ1NTMUNvbXBhdCI9PWEuY29tcGF0TW9kZX07
Xy5tZj1mdW5jdGlvbihhLGIpe2pmKF8uVmUoYSksYSxhcmd1bWVudHMsMSl9O18ubmY9ZnVu
Y3Rpb24oYSl7Zm9yKHZhciBiO2I9YS5maXJzdENoaWxkOylhLnJlbW92ZUNoaWxkKGIpfTsN
Cl8ub2Y9ZnVuY3Rpb24oYSl7cmV0dXJuIGEmJmEucGFyZW50Tm9kZT9hLnBhcmVudE5vZGUu
cmVtb3ZlQ2hpbGQoYSk6bnVsbH07Xy5wZj1mdW5jdGlvbihhKXtyZXR1cm4gVmFhJiZ2b2lk
IDAhPWEuY2hpbGRyZW4/YS5jaGlsZHJlbjooMCxfLnJiKShhLmNoaWxkTm9kZXMsZnVuY3Rp
b24oYil7cmV0dXJuIDE9PWIubm9kZVR5cGV9KX07WWFhPWZ1bmN0aW9uKGEpe3JldHVybiB2
b2lkIDAhPT1hLm5leHRFbGVtZW50U2libGluZz9hLm5leHRFbGVtZW50U2libGluZzpfLkJm
KGEubmV4dFNpYmxpbmcsITApfTtfLkJmPWZ1bmN0aW9uKGEsYil7Zm9yKDthJiYxIT1hLm5v
ZGVUeXBlOylhPWI/YS5uZXh0U2libGluZzphLnByZXZpb3VzU2libGluZztyZXR1cm4gYX07
Xy5DZj1mdW5jdGlvbihhKXtyZXR1cm4gXy5iYihhKSYmMT09YS5ub2RlVHlwZX07DQpfLkRm
PWZ1bmN0aW9uKGEpe3ZhciBiO2lmKFdhYSYmIShfLnJlJiZfLkVlKCI5IikmJiFfLkVlKCIx
MCIpJiZfLnFhLlNWR0VsZW1lbnQmJmEgaW5zdGFuY2VvZiBfLnFhLlNWR0VsZW1lbnQpJiYo
Yj1hLnBhcmVudEVsZW1lbnQpKXJldHVybiBiO2I9YS5wYXJlbnROb2RlO3JldHVybiBfLkNm
KGIpP2I6bnVsbH07Xy5FZj1mdW5jdGlvbihhLGIpe2lmKCFhfHwhYilyZXR1cm4hMTtpZihh
LmNvbnRhaW5zJiYxPT1iLm5vZGVUeXBlKXJldHVybiBhPT1ifHxhLmNvbnRhaW5zKGIpO2lm
KCJ1bmRlZmluZWQiIT10eXBlb2YgYS5jb21wYXJlRG9jdW1lbnRQb3NpdGlvbilyZXR1cm4g
YT09Ynx8ISEoYS5jb21wYXJlRG9jdW1lbnRQb3NpdGlvbihiKSYxNik7Zm9yKDtiJiZhIT1i
OyliPWIucGFyZW50Tm9kZTtyZXR1cm4gYj09YX07Xy5WZT1mdW5jdGlvbihhKXtyZXR1cm4g
OT09YS5ub2RlVHlwZT9hOmEub3duZXJEb2N1bWVudHx8YS5kb2N1bWVudH07DQpfLkZmPWZ1
bmN0aW9uKGEsYil7aWYoInRleHRDb250ZW50ImluIGEpYS50ZXh0Q29udGVudD1iO2Vsc2Ug
aWYoMz09YS5ub2RlVHlwZSlhLmRhdGE9U3RyaW5nKGIpO2Vsc2UgaWYoYS5maXJzdENoaWxk
JiYzPT1hLmZpcnN0Q2hpbGQubm9kZVR5cGUpe2Zvcig7YS5sYXN0Q2hpbGQhPWEuZmlyc3RD
aGlsZDspYS5yZW1vdmVDaGlsZChhLmxhc3RDaGlsZCk7YS5maXJzdENoaWxkLmRhdGE9U3Ry
aW5nKGIpfWVsc2UgXy5uZihhKSxhLmFwcGVuZENoaWxkKF8uVmUoYSkuY3JlYXRlVGV4dE5v
ZGUoU3RyaW5nKGIpKSl9O1hhYT1mdW5jdGlvbihhKXtpZihhJiYibnVtYmVyIj09dHlwZW9m
IGEubGVuZ3RoKXtpZihfLmJiKGEpKXJldHVybiJmdW5jdGlvbiI9PXR5cGVvZiBhLml0ZW18
fCJzdHJpbmciPT10eXBlb2YgYS5pdGVtO2lmKF8uYWIoYSkpcmV0dXJuImZ1bmN0aW9uIj09
dHlwZW9mIGEuaXRlbX1yZXR1cm4hMX07DQpfLkhmPWZ1bmN0aW9uKGEsYixjLGQpe2lmKCFi
JiYhYylyZXR1cm4gbnVsbDt2YXIgZT1iP1N0cmluZyhiKS50b1VwcGVyQ2FzZSgpOm51bGw7
cmV0dXJuIF8uR2YoYSxmdW5jdGlvbihmKXtyZXR1cm4oIWV8fGYubm9kZU5hbWU9PWUpJiYo
IWN8fCJzdHJpbmciPT09dHlwZW9mIGYuY2xhc3NOYW1lJiZfLkNiKGYuY2xhc3NOYW1lLnNw
bGl0KC9ccysvKSxjKSl9LCEwLGQpfTtfLklmPWZ1bmN0aW9uKGEsYil7cmV0dXJuIF8uSGYo
YSxudWxsLGIsdm9pZCAwKX07Xy5HZj1mdW5jdGlvbihhLGIsYyxkKXthJiYhYyYmKGE9YS5w
YXJlbnROb2RlKTtmb3IoYz0wO2EmJihudWxsPT1kfHxjPD1kKTspe2lmKGIoYSkpcmV0dXJu
IGE7YT1hLnBhcmVudE5vZGU7YysrfXJldHVybiBudWxsfTtfLlVlPWZ1bmN0aW9uKGEpe3Ro
aXMuaGE9YXx8Xy5xYS5kb2N1bWVudHx8ZG9jdW1lbnR9O18uaz1fLlVlLnByb3RvdHlwZTtf
LmsuTmM9Xy5YZTtfLmsuWWI9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5oYX07DQpfLmsuUWE9
ZnVuY3Rpb24oYSl7cmV0dXJuIF8uWWUodGhpcy5oYSxhKX07Xy5rLkUyPV8uVWUucHJvdG90
eXBlLlFhO18uay5nZXRFbGVtZW50c0J5VGFnTmFtZT1mdW5jdGlvbihhLGIpe3JldHVybihi
fHx0aGlzLmhhKS5nZXRFbGVtZW50c0J5VGFnTmFtZShTdHJpbmcoYSkpfTtfLmsuQ2c9Xy5j
YSgzKTtfLmsuY3JlYXRlRWxlbWVudD1mdW5jdGlvbihhKXtyZXR1cm4gXy5oZih0aGlzLmhh
LGEpfTtfLmsuZ2V0V2luZG93PWZ1bmN0aW9uKCl7dmFyIGE9dGhpcy5oYTtyZXR1cm4gYS5w
YXJlbnRXaW5kb3d8fGEuZGVmYXVsdFZpZXd9O18uay5hcHBlbmRDaGlsZD1mdW5jdGlvbihh
LGIpe2EuYXBwZW5kQ2hpbGQoYil9O18uay5hcHBlbmQ9Xy5tZjtfLmsuY2FuSGF2ZUNoaWxk
cmVuPWZ1bmN0aW9uKGEpe2lmKDEhPWEubm9kZVR5cGUpcmV0dXJuITE7c3dpdGNoKGEudGFn
TmFtZSl7Y2FzZSAiQVBQTEVUIjpjYXNlICJBUkVBIjpjYXNlICJCQVNFIjpjYXNlICJCUiI6
Y2FzZSAiQ09MIjpjYXNlICJDT01NQU5EIjpjYXNlICJFTUJFRCI6Y2FzZSAiRlJBTUUiOmNh
c2UgIkhSIjpjYXNlICJJTUciOmNhc2UgIklOUFVUIjpjYXNlICJJRlJBTUUiOmNhc2UgIklT
SU5ERVgiOmNhc2UgIktFWUdFTiI6Y2FzZSAiTElOSyI6Y2FzZSAiTk9GUkFNRVMiOmNhc2Ug
Ik5PU0NSSVBUIjpjYXNlICJNRVRBIjpjYXNlICJPQkpFQ1QiOmNhc2UgIlBBUkFNIjpjYXNl
ICJTQ1JJUFQiOmNhc2UgIlNPVVJDRSI6Y2FzZSAiU1RZTEUiOmNhc2UgIlRSQUNLIjpjYXNl
ICJXQlIiOnJldHVybiExfXJldHVybiEwfTsNCl8uay5oQz1fLm9mO18uay5HVj1fLnBmO18u
ay5jb250YWlucz1fLkVmOw0KdmFyIEpmPVtdLEtmPVtdLExmPSExLE1mPWZ1bmN0aW9uKGEp
e0pmW0pmLmxlbmd0aF09YTtpZihMZilmb3IodmFyIGI9MDtiPEtmLmxlbmd0aDtiKyspYSgo
MCxfLnIpKEtmW2JdLmthLEtmW2JdKSl9LFZmPWZ1bmN0aW9uKGEpe0xmPSEwO2Zvcih2YXIg
Yj0oMCxfLnIpKGEua2EsYSksYz0wO2M8SmYubGVuZ3RoO2MrKylKZltjXShiKTtLZi5wdXNo
KGEpfTsNCnZhciBZZixaYWEsWGY7Xy5XZj1mdW5jdGlvbihhKXtfLnFhLnNldFRpbWVvdXQo
ZnVuY3Rpb24oKXt0aHJvdyBhO30sMCl9O18uWmY9ZnVuY3Rpb24oYSl7YT1YZihhKTshXy5h
YihfLnFhLnNldEltbWVkaWF0ZSl8fF8ucWEuV2luZG93JiZfLnFhLldpbmRvdy5wcm90b3R5
cGUmJiFfLm1jKCJFZGdlIikmJl8ucWEuV2luZG93LnByb3RvdHlwZS5zZXRJbW1lZGlhdGU9
PV8ucWEuc2V0SW1tZWRpYXRlPyhZZnx8KFlmPVphYSgpKSxZZihhKSk6Xy5xYS5zZXRJbW1l
ZGlhdGUoYSl9Ow0KWmFhPWZ1bmN0aW9uKCl7dmFyIGE9Xy5xYS5NZXNzYWdlQ2hhbm5lbDsi
dW5kZWZpbmVkIj09PXR5cGVvZiBhJiYidW5kZWZpbmVkIiE9PXR5cGVvZiB3aW5kb3cmJndp
bmRvdy5wb3N0TWVzc2FnZSYmd2luZG93LmFkZEV2ZW50TGlzdGVuZXImJiFfLm1jKCJQcmVz
dG8iKSYmKGE9ZnVuY3Rpb24oKXt2YXIgZT1fLmxmKCJJRlJBTUUiKTtlLnN0eWxlLmRpc3Bs
YXk9Im5vbmUiO18uU2QoZSxfLm5kKHlhYSkpO2RvY3VtZW50LmRvY3VtZW50RWxlbWVudC5h
cHBlbmRDaGlsZChlKTt2YXIgZj1lLmNvbnRlbnRXaW5kb3c7ZT1mLmRvY3VtZW50O2Uub3Bl
bigpO2Uud3JpdGUoXy5NZChfLlBkKSk7ZS5jbG9zZSgpO3ZhciBnPSJjYWxsSW1tZWRpYXRl
IitNYXRoLnJhbmRvbSgpLGg9ImZpbGU6Ij09Zi5sb2NhdGlvbi5wcm90b2NvbD8iKiI6Zi5s
b2NhdGlvbi5wcm90b2NvbCsiLy8iK2YubG9jYXRpb24uaG9zdDtlPSgwLF8ucikoZnVuY3Rp
b24obCl7aWYoKCIqIj09aHx8bC5vcmlnaW49PQ0KaCkmJmwuZGF0YT09Zyl0aGlzLnBvcnQx
Lm9ubWVzc2FnZSgpfSx0aGlzKTtmLmFkZEV2ZW50TGlzdGVuZXIoIm1lc3NhZ2UiLGUsITEp
O3RoaXMucG9ydDE9e307dGhpcy5wb3J0Mj17cG9zdE1lc3NhZ2U6ZnVuY3Rpb24oKXtmLnBv
c3RNZXNzYWdlKGcsaCl9fX0pO2lmKCJ1bmRlZmluZWQiIT09dHlwZW9mIGEmJiFHYygpKXt2
YXIgYj1uZXcgYSxjPXt9LGQ9YztiLnBvcnQxLm9ubWVzc2FnZT1mdW5jdGlvbigpe2lmKHZv
aWQgMCE9PWMubmV4dCl7Yz1jLm5leHQ7dmFyIGU9Yy5jYjtjLmNiPW51bGw7ZSgpfX07cmV0
dXJuIGZ1bmN0aW9uKGUpe2QubmV4dD17Y2I6ZX07ZD1kLm5leHQ7Yi5wb3J0Mi5wb3N0TWVz
c2FnZSgwKX19cmV0dXJuInVuZGVmaW5lZCIhPT10eXBlb2YgZG9jdW1lbnQmJiJvbnJlYWR5
c3RhdGVjaGFuZ2UiaW4gXy5sZigiU0NSSVBUIik/ZnVuY3Rpb24oZSl7dmFyIGY9Xy5sZigi
U0NSSVBUIik7Zi5vbnJlYWR5c3RhdGVjaGFuZ2U9ZnVuY3Rpb24oKXtmLm9ucmVhZHlzdGF0
ZWNoYW5nZT0NCm51bGw7Zi5wYXJlbnROb2RlLnJlbW92ZUNoaWxkKGYpO2Y9bnVsbDtlKCk7
ZT1udWxsfTtkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuYXBwZW5kQ2hpbGQoZil9OmZ1bmN0
aW9uKGUpe18ucWEuc2V0VGltZW91dChlLDApfX07WGY9Xy5SYztNZihmdW5jdGlvbihhKXtY
Zj1hfSk7DQp2YXIgZWc7Xy4kZj1mdW5jdGlvbigpe3RoaXMuVGM9dGhpcy5UYzt0aGlzLk5i
PXRoaXMuTmJ9O18uJGYucHJvdG90eXBlLlRjPSExO18uJGYucHJvdG90eXBlLmlzRGlzcG9z
ZWQ9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5UY307Xy4kZi5wcm90b3R5cGUuaGU9ZnVuY3Rp
b24oKXt0aGlzLlRjfHwodGhpcy5UYz0hMCx0aGlzLkRjKCkpfTtfLmNnPWZ1bmN0aW9uKGEs
Yil7Xy5hZyhhLF8uZWIoXy5iZyxiKSl9O18uYWc9ZnVuY3Rpb24oYSxiLGMpe2EuVGM/dm9p
ZCAwIT09Yz9iLmNhbGwoYyk6YigpOihhLk5ifHwoYS5OYj1bXSksYS5OYi5wdXNoKHZvaWQg
MCE9PWM/KDAsXy5yKShiLGMpOmIpKX07Xy4kZi5wcm90b3R5cGUuRGM9ZnVuY3Rpb24oKXtp
Zih0aGlzLk5iKWZvcig7dGhpcy5OYi5sZW5ndGg7KXRoaXMuTmIuc2hpZnQoKSgpfTtfLmRn
PWZ1bmN0aW9uKGEpe3JldHVybiBhJiYiZnVuY3Rpb24iPT10eXBlb2YgYS5pc0Rpc3Bvc2Vk
P2EuaXNEaXNwb3NlZCgpOiExfTsNCl8uYmc9ZnVuY3Rpb24oYSl7YSYmImZ1bmN0aW9uIj09
dHlwZW9mIGEuaGUmJmEuaGUoKX07ZWc9ZnVuY3Rpb24oYSl7Zm9yKHZhciBiPTAsYz1hcmd1
bWVudHMubGVuZ3RoO2I8YzsrK2Ipe3ZhciBkPWFyZ3VtZW50c1tiXTtfLiRhKGQpP2VnLmFw
cGx5KG51bGwsZCk6Xy5iZyhkKX19Ow0KdmFyIGZnPWZ1bmN0aW9uKCl7Xy4kZi5jYWxsKHRo
aXMpfTtfLnUoZmcsXy4kZik7ZmcucHJvdG90eXBlLmluaXRpYWxpemU9ZnVuY3Rpb24oKXt9
Ow0KdmFyIGdnPWZ1bmN0aW9uKGEsYil7dGhpcy5oYT1hO3RoaXMua2E9Yn07Z2cucHJvdG90
eXBlLmV4ZWN1dGU9ZnVuY3Rpb24oYSl7dGhpcy5oYSYmKHRoaXMuaGEuY2FsbCh0aGlzLmth
fHxudWxsLGEpLHRoaXMuaGE9dGhpcy5rYT1udWxsKX07Z2cucHJvdG90eXBlLmFib3J0PWZ1
bmN0aW9uKCl7dGhpcy5rYT10aGlzLmhhPW51bGx9O01mKGZ1bmN0aW9uKGEpe2dnLnByb3Rv
dHlwZS5leGVjdXRlPWEoZ2cucHJvdG90eXBlLmV4ZWN1dGUpfSk7DQp2YXIgaGc9ZnVuY3Rp
b24oYSxiKXtfLiRmLmNhbGwodGhpcyk7dGhpcy5BYT1hO3RoaXMuSWE9Yjt0aGlzLndhPVtd
O3RoaXMudGE9W107dGhpcy5rYT1bXX07Xy51KGhnLF8uJGYpO18uaz1oZy5wcm90b3R5cGU7
Xy5rLm1EPWZnO18uay5Laz1udWxsO18uay5Ebz1mdW5jdGlvbigpe3JldHVybiB0aGlzLkFh
fTtfLmsuZ2V0SWQ9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5JYX07Xy5rLmZ6PWZ1bmN0aW9u
KGEpe2lmKHRoaXMubUQ9PT1mZyl0aGlzLm1EPWE7ZWxzZSB0aHJvdyBFcnJvcigicyIpO307
dmFyIGlnPWZ1bmN0aW9uKGEsYil7YS50YS5wdXNoKG5ldyBnZyhiLHZvaWQgMCkpfTtoZy5w
cm90b3R5cGUuaGE9ZnVuY3Rpb24oKXt0aGlzLktrPW5ldyBmZ307DQp2YXIgeWc9ZnVuY3Rp
b24oYSxiKXt2YXIgYz1uZXcgYS5tRDtjLmluaXRpYWxpemUoYigpKTthLktrPWM7Yz0oYz0h
IWpnKGEua2EsYigpKSl8fCEhamcoYS53YSxiKCkpO2N8fChhLnRhLmxlbmd0aD0wKTtyZXR1
cm4gY30sJGFhPWZ1bmN0aW9uKGEsYil7KGI9amcoYS50YSxiKSkmJndpbmRvdy5zZXRUaW1l
b3V0KHdhYSgiTW9kdWxlIGVycmJhY2sgZmFpbHVyZXM6ICIrYiksMCk7YS5rYS5sZW5ndGg9
MDthLndhLmxlbmd0aD0wfSxqZz1mdW5jdGlvbihhLGIpe2Zvcih2YXIgYz1bXSxkPTA7ZDxh
Lmxlbmd0aDtkKyspdHJ5e2FbZF0uZXhlY3V0ZShiKX1jYXRjaChlKXtfLldmKGUpLGMucHVz
aChlKX1hLmxlbmd0aD0wO3JldHVybiBjLmxlbmd0aD9jOm51bGx9O2hnLnByb3RvdHlwZS5E
Yz1mdW5jdGlvbigpe2hnLlRiLkRjLmNhbGwodGhpcyk7Xy5iZyh0aGlzLktrKX07DQp2YXIg
emc9ZnVuY3Rpb24oYSxiLGMpe2M9Y3x8Xy5xYTt2YXIgZD1jLm9uZXJyb3IsZT0hIWI7Xy52
ZSYmIV8uRWUoIjUzNS4zIikmJihlPSFlKTtjLm9uZXJyb3I9ZnVuY3Rpb24oZixnLGgsbCxu
KXtkJiZkKGYsZyxoLGwsbik7YSh7bWVzc2FnZTpmLGZpbGVOYW1lOmcsbGluZTpoLGxpbmVO
dW1iZXI6aCx6eGE6bCxlcnJvcjpufSk7cmV0dXJuIGV9fSxhYmE9ZnVuY3Rpb24oYSl7dmFy
IGI9Xy5VYSgid2luZG93LmxvY2F0aW9uLmhyZWYiKTtudWxsPT1hJiYoYT0nVW5rbm93biBF
cnJvciBvZiB0eXBlICJudWxsL3VuZGVmaW5lZCInKTtpZigic3RyaW5nIj09PXR5cGVvZiBh
KXJldHVybnttZXNzYWdlOmEsbmFtZToiVW5rbm93biBlcnJvciIsbGluZU51bWJlcjoiTm90
IGF2YWlsYWJsZSIsZmlsZU5hbWU6YixzdGFjazoiTm90IGF2YWlsYWJsZSJ9O3ZhciBjPSEx
O3RyeXt2YXIgZD1hLmxpbmVOdW1iZXJ8fGEubGluZXx8Ik5vdCBhdmFpbGFibGUifWNhdGNo
KGYpe2Q9Ik5vdCBhdmFpbGFibGUiLA0KYz0hMH10cnl7dmFyIGU9YS5maWxlTmFtZXx8YS5m
aWxlbmFtZXx8YS5zb3VyY2VVUkx8fF8ucWEuJGdvb2dEZWJ1Z0ZuYW1lfHxifWNhdGNoKGYp
e2U9Ik5vdCBhdmFpbGFibGUiLGM9ITB9cmV0dXJuIWMmJmEubGluZU51bWJlciYmYS5maWxl
TmFtZSYmYS5zdGFjayYmYS5tZXNzYWdlJiZhLm5hbWU/YTooYj1hLm1lc3NhZ2UsbnVsbD09
YiYmKGI9YS5jb25zdHJ1Y3RvciYmYS5jb25zdHJ1Y3RvciBpbnN0YW5jZW9mIEZ1bmN0aW9u
PydVbmtub3duIEVycm9yIG9mIHR5cGUgIicrKGEuY29uc3RydWN0b3IubmFtZT9hLmNvbnN0
cnVjdG9yLm5hbWU6QWcoYS5jb25zdHJ1Y3RvcikpKyciJzoiVW5rbm93biBFcnJvciBvZiB1
bmtub3duIHR5cGUiKSx7bWVzc2FnZTpiLG5hbWU6YS5uYW1lfHwiVW5rbm93bkVycm9yIixs
aW5lTnVtYmVyOmQsZmlsZU5hbWU6ZSxzdGFjazphLnN0YWNrfHwiTm90IGF2YWlsYWJsZSJ9
KX0sQ2c9ZnVuY3Rpb24oYSl7dmFyIGI9QmcoQ2cpO2lmKGIpcmV0dXJuIGI7DQpiPVtdO2Zv
cih2YXIgYz1hcmd1bWVudHMuY2FsbGVlLmNhbGxlcixkPTA7YyYmKCFhfHxkPGEpOyl7Yi5w
dXNoKEFnKGMpKTtiLnB1c2goIigpXG4iKTt0cnl7Yz1jLmNhbGxlcn1jYXRjaChlKXtiLnB1
c2goIltleGNlcHRpb24gdHJ5aW5nIHRvIGdldCBjYWxsZXJdXG4iKTticmVha31kKys7aWYo
NTA8PWQpe2IucHVzaCgiWy4uLmxvbmcgc3RhY2suLi5dIik7YnJlYWt9fWEmJmQ+PWE/Yi5w
dXNoKCJbLi4ucmVhY2hlZCBtYXggZGVwdGggbGltaXQuLi5dIik6Yi5wdXNoKCJbZW5kXSIp
O3JldHVybiBiLmpvaW4oIiIpfSxCZz1mdW5jdGlvbihhKXt2YXIgYj1FcnJvcigpO2lmKEVy
cm9yLmNhcHR1cmVTdGFja1RyYWNlKXJldHVybiBFcnJvci5jYXB0dXJlU3RhY2tUcmFjZShi
LGEpLFN0cmluZyhiLnN0YWNrKTt0cnl7dGhyb3cgYjt9Y2F0Y2goYyl7Yj1jfXJldHVybihh
PWIuc3RhY2spP1N0cmluZyhhKTpudWxsfSxEZz1mdW5jdGlvbihhKXt2YXIgYjsoYj1CZyhh
fHxEZykpfHwNCihiPUVnKGF8fGFyZ3VtZW50cy5jYWxsZWUuY2FsbGVyLFtdKSk7cmV0dXJu
IGJ9LEVnPWZ1bmN0aW9uKGEsYil7dmFyIGM9W107aWYoXy5DYihiLGEpKWMucHVzaCgiWy4u
LmNpcmN1bGFyIHJlZmVyZW5jZS4uLl0iKTtlbHNlIGlmKGEmJjUwPmIubGVuZ3RoKXtjLnB1
c2goQWcoYSkrIigiKTtmb3IodmFyIGQ9YS5hcmd1bWVudHMsZT0wO2QmJmU8ZC5sZW5ndGg7
ZSsrKXswPGUmJmMucHVzaCgiLCAiKTt2YXIgZj1kW2VdO3N3aXRjaCh0eXBlb2YgZil7Y2Fz
ZSAib2JqZWN0IjpmPWY/Im9iamVjdCI6Im51bGwiO2JyZWFrO2Nhc2UgInN0cmluZyI6YnJl
YWs7Y2FzZSAibnVtYmVyIjpmPVN0cmluZyhmKTticmVhaztjYXNlICJib29sZWFuIjpmPWY/
InRydWUiOiJmYWxzZSI7YnJlYWs7Y2FzZSAiZnVuY3Rpb24iOmY9KGY9QWcoZikpP2Y6Iltm
bl0iO2JyZWFrO2RlZmF1bHQ6Zj10eXBlb2YgZn00MDxmLmxlbmd0aCYmKGY9Zi5zdWJzdHIo
MCw0MCkrIi4uLiIpO2MucHVzaChmKX1iLnB1c2goYSk7DQpjLnB1c2goIilcbiIpO3RyeXtj
LnB1c2goRWcoYS5jYWxsZXIsYikpfWNhdGNoKGcpe2MucHVzaCgiW2V4Y2VwdGlvbiB0cnlp
bmcgdG8gZ2V0IGNhbGxlcl1cbiIpfX1lbHNlIGE/Yy5wdXNoKCJbLi4ubG9uZyBzdGFjay4u
Ll0iKTpjLnB1c2goIltlbmRdIik7cmV0dXJuIGMuam9pbigiIil9LEFnPWZ1bmN0aW9uKGEp
e2lmKEZnW2FdKXJldHVybiBGZ1thXTthPVN0cmluZyhhKTtpZighRmdbYV0pe3ZhciBiPS9m
dW5jdGlvblxzKyhbXlwoXSspL20uZXhlYyhhKTtGZ1thXT1iP2JbMV06IltBbm9ueW1vdXNd
In1yZXR1cm4gRmdbYV19LEZnPXt9Ow0KXy5IZz1mdW5jdGlvbihhLGIpe3RoaXMua2E9e307
dGhpcy5oYT1bXTt0aGlzLnRhPTA7dmFyIGM9YXJndW1lbnRzLmxlbmd0aDtpZigxPGMpe2lm
KGMlMil0aHJvdyBFcnJvcigicCIpO2Zvcih2YXIgZD0wO2Q8YztkKz0yKXRoaXMuc2V0KGFy
Z3VtZW50c1tkXSxhcmd1bWVudHNbZCsxXSl9ZWxzZSBhJiZfLkdnKHRoaXMsYSl9O18uSGcu
cHJvdG90eXBlLkFnPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMudGF9O18uSGcucHJvdG90eXBl
LlVmPWZ1bmN0aW9uKCl7SWcodGhpcyk7Zm9yKHZhciBhPVtdLGI9MDtiPHRoaXMuaGEubGVu
Z3RoO2IrKylhLnB1c2godGhpcy5rYVt0aGlzLmhhW2JdXSk7cmV0dXJuIGF9O18uSGcucHJv
dG90eXBlLkVoPWZ1bmN0aW9uKCl7SWcodGhpcyk7cmV0dXJuIHRoaXMuaGEuY29uY2F0KCl9
O18uS2c9ZnVuY3Rpb24oYSxiKXtyZXR1cm4gXy5KZyhhLmthLGIpfTtfLkhnLnByb3RvdHlw
ZS51bD1fLmNhKDQpOw0KXy5IZy5wcm90b3R5cGUuZXF1YWxzPWZ1bmN0aW9uKGEsYil7aWYo
dGhpcz09PWEpcmV0dXJuITA7aWYodGhpcy50YSE9YS5BZygpKXJldHVybiExO2I9Ynx8YmJh
O0lnKHRoaXMpO2Zvcih2YXIgYyxkPTA7Yz10aGlzLmhhW2RdO2QrKylpZighYih0aGlzLmdl
dChjKSxhLmdldChjKSkpcmV0dXJuITE7cmV0dXJuITB9O3ZhciBiYmE9ZnVuY3Rpb24oYSxi
KXtyZXR1cm4gYT09PWJ9O18uSGcucHJvdG90eXBlLmlzRW1wdHk9ZnVuY3Rpb24oKXtyZXR1
cm4gMD09dGhpcy50YX07Xy5IZy5wcm90b3R5cGUuY2xlYXI9ZnVuY3Rpb24oKXt0aGlzLmth
PXt9O3RoaXMudGE9dGhpcy5oYS5sZW5ndGg9MH07Xy5IZy5wcm90b3R5cGUucmVtb3ZlPWZ1
bmN0aW9uKGEpe3JldHVybiBfLkpnKHRoaXMua2EsYSk/KGRlbGV0ZSB0aGlzLmthW2FdLHRo
aXMudGEtLSx0aGlzLmhhLmxlbmd0aD4yKnRoaXMudGEmJklnKHRoaXMpLCEwKTohMX07DQp2
YXIgSWc9ZnVuY3Rpb24oYSl7aWYoYS50YSE9YS5oYS5sZW5ndGgpe2Zvcih2YXIgYj0wLGM9
MDtiPGEuaGEubGVuZ3RoOyl7dmFyIGQ9YS5oYVtiXTtfLkpnKGEua2EsZCkmJihhLmhhW2Mr
K109ZCk7YisrfWEuaGEubGVuZ3RoPWN9aWYoYS50YSE9YS5oYS5sZW5ndGgpe3ZhciBlPXt9
O2ZvcihjPWI9MDtiPGEuaGEubGVuZ3RoOylkPWEuaGFbYl0sXy5KZyhlLGQpfHwoYS5oYVtj
KytdPWQsZVtkXT0xKSxiKys7YS5oYS5sZW5ndGg9Y319O18uSGcucHJvdG90eXBlLmdldD1m
dW5jdGlvbihhLGIpe3JldHVybiBfLkpnKHRoaXMua2EsYSk/dGhpcy5rYVthXTpifTtfLkhn
LnByb3RvdHlwZS5zZXQ9ZnVuY3Rpb24oYSxiKXtfLkpnKHRoaXMua2EsYSl8fCh0aGlzLnRh
KyssdGhpcy5oYS5wdXNoKGEpKTt0aGlzLmthW2FdPWJ9Ow0KXy5HZz1mdW5jdGlvbihhLGIp
e2lmKGIgaW5zdGFuY2VvZiBfLkhnKWZvcih2YXIgYz1iLkVoKCksZD0wO2Q8Yy5sZW5ndGg7
ZCsrKWEuc2V0KGNbZF0sYi5nZXQoY1tkXSkpO2Vsc2UgZm9yKGMgaW4gYilhLnNldChjLGJb
Y10pfTtfLkhnLnByb3RvdHlwZS5mb3JFYWNoPWZ1bmN0aW9uKGEsYil7Zm9yKHZhciBjPXRo
aXMuRWgoKSxkPTA7ZDxjLmxlbmd0aDtkKyspe3ZhciBlPWNbZF0sZj10aGlzLmdldChlKTth
LmNhbGwoYixmLGUsdGhpcyl9fTtfLkhnLnByb3RvdHlwZS5jbG9uZT1mdW5jdGlvbigpe3Jl
dHVybiBuZXcgXy5IZyh0aGlzKX07Xy5KZz1mdW5jdGlvbihhLGIpe3JldHVybiBPYmplY3Qu
cHJvdG90eXBlLmhhc093blByb3BlcnR5LmNhbGwoYSxiKX07DQp2YXIgTGc9ZnVuY3Rpb24o
KXt0aGlzLkZiPXRoaXMuTWE9bnVsbH07Xy5rPUxnLnByb3RvdHlwZTtfLmsuZU89ZnVuY3Rp
b24oKXt9O18uay5mTz1mdW5jdGlvbigpe307Xy5rLld5PWZ1bmN0aW9uKCl7fTtfLmsubko9
ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5NYX07Xy5rLk9FPWZ1bmN0aW9uKGEpe3RoaXMuTWE9
YX07Xy5rLnVlPWZ1bmN0aW9uKCl7cmV0dXJuITF9O18uay5KSz1mdW5jdGlvbigpe3JldHVy
biExfTtfLmsuWWg9ZnVuY3Rpb24oKXt9O18uay5mej1mdW5jdGlvbigpe307DQp2YXIgZWE9
bnVsbCxmYT1udWxsOw0KdmFyIE1nPWZ1bmN0aW9uKGEsYil7dGhpcy50YT1hO3RoaXMud2E9
Yjt0aGlzLmthPTA7dGhpcy5oYT1udWxsfTtNZy5wcm90b3R5cGUuZ2V0PWZ1bmN0aW9uKCl7
aWYoMDx0aGlzLmthKXt0aGlzLmthLS07dmFyIGE9dGhpcy5oYTt0aGlzLmhhPWEubmV4dDth
Lm5leHQ9bnVsbH1lbHNlIGE9dGhpcy50YSgpO3JldHVybiBhfTt2YXIgTmc9ZnVuY3Rpb24o
YSxiKXthLndhKGIpOzEwMD5hLmthJiYoYS5rYSsrLGIubmV4dD1hLmhhLGEuaGE9Yil9Ow0K
dmFyIE9nPWZ1bmN0aW9uKCl7dGhpcy5rYT10aGlzLmhhPW51bGx9LFFnPW5ldyBNZyhmdW5j
dGlvbigpe3JldHVybiBuZXcgUGd9LGZ1bmN0aW9uKGEpe2EucmVzZXQoKX0pO09nLnByb3Rv
dHlwZS5hZGQ9ZnVuY3Rpb24oYSxiKXt2YXIgYz1RZy5nZXQoKTtjLnNldChhLGIpO3RoaXMu
a2E/dGhpcy5rYS5uZXh0PWM6dGhpcy5oYT1jO3RoaXMua2E9Y307T2cucHJvdG90eXBlLnJl
bW92ZT1mdW5jdGlvbigpe3ZhciBhPW51bGw7dGhpcy5oYSYmKGE9dGhpcy5oYSx0aGlzLmhh
PXRoaXMuaGEubmV4dCx0aGlzLmhhfHwodGhpcy5rYT1udWxsKSxhLm5leHQ9bnVsbCk7cmV0
dXJuIGF9O3ZhciBQZz1mdW5jdGlvbigpe3RoaXMubmV4dD10aGlzLnNjb3BlPXRoaXMuWmU9
bnVsbH07UGcucHJvdG90eXBlLnNldD1mdW5jdGlvbihhLGIpe3RoaXMuWmU9YTt0aGlzLnNj
b3BlPWI7dGhpcy5uZXh0PW51bGx9Ow0KUGcucHJvdG90eXBlLnJlc2V0PWZ1bmN0aW9uKCl7
dGhpcy5uZXh0PXRoaXMuc2NvcGU9dGhpcy5aZT1udWxsfTsNCnZhciBVZz1mdW5jdGlvbihh
LGIpe1JnfHxjYmEoKTtTZ3x8KFJnKCksU2c9ITApO1RnLmFkZChhLGIpfSxSZyxjYmE9ZnVu
Y3Rpb24oKXtpZihfLnFhLlByb21pc2UmJl8ucWEuUHJvbWlzZS5yZXNvbHZlKXt2YXIgYT1f
LnFhLlByb21pc2UucmVzb2x2ZSh2b2lkIDApO1JnPWZ1bmN0aW9uKCl7YS50aGVuKFZnKX19
ZWxzZSBSZz1mdW5jdGlvbigpe18uWmYoVmcpfX0sU2c9ITEsVGc9bmV3IE9nLFZnPWZ1bmN0
aW9uKCl7Zm9yKHZhciBhO2E9VGcucmVtb3ZlKCk7KXt0cnl7YS5aZS5jYWxsKGEuc2NvcGUp
fWNhdGNoKGIpe18uV2YoYil9TmcoUWcsYSl9U2c9ITF9Ow0KdmFyIFdnPWZ1bmN0aW9uKGEp
e2lmKCFhKXJldHVybiExO3RyeXtyZXR1cm4hIWEuJGdvb2dfVGhlbmFibGV9Y2F0Y2goYil7
cmV0dXJuITF9fTsNCnZhciBnaCxoaCxpaCx1aCx3aCxlYmEseGg7Xy5maD1mdW5jdGlvbihh
LGIpe3RoaXMuaGE9MDt0aGlzLkthPXZvaWQgMDt0aGlzLndhPXRoaXMua2E9dGhpcy50YT1u
dWxsO3RoaXMuQWE9dGhpcy5JYT0hMTtpZihhIT1fLlZhKXRyeXt2YXIgYz10aGlzO2EuY2Fs
bChiLGZ1bmN0aW9uKGQpe2VoKGMsMixkKX0sZnVuY3Rpb24oZCl7ZWgoYywzLGQpfSl9Y2F0
Y2goZCl7ZWgodGhpcywzLGQpfX07Z2g9ZnVuY3Rpb24oKXt0aGlzLm5leHQ9dGhpcy5jb250
ZXh0PXRoaXMua2E9dGhpcy50YT10aGlzLmhhPW51bGw7dGhpcy5Ybj0hMX07Z2gucHJvdG90
eXBlLnJlc2V0PWZ1bmN0aW9uKCl7dGhpcy5jb250ZXh0PXRoaXMua2E9dGhpcy50YT10aGlz
LmhhPW51bGw7dGhpcy5Ybj0hMX07aGg9bmV3IE1nKGZ1bmN0aW9uKCl7cmV0dXJuIG5ldyBn
aH0sZnVuY3Rpb24oYSl7YS5yZXNldCgpfSk7DQppaD1mdW5jdGlvbihhLGIsYyl7dmFyIGQ9
aGguZ2V0KCk7ZC50YT1hO2Qua2E9YjtkLmNvbnRleHQ9YztyZXR1cm4gZH07Xy5rYT1mdW5j
dGlvbihhKXtpZihhIGluc3RhbmNlb2YgXy5maClyZXR1cm4gYTt2YXIgYj1uZXcgXy5maChf
LlZhKTtlaChiLDIsYSk7cmV0dXJuIGJ9O18uamg9ZnVuY3Rpb24oYSl7cmV0dXJuIG5ldyBf
LmZoKGZ1bmN0aW9uKGIsYyl7YyhhKX0pfTtfLmxoPWZ1bmN0aW9uKGEsYixjKXtraChhLGIs
YyxudWxsKXx8VWcoXy5lYihiLGEpKX07Xy5sYT1mdW5jdGlvbihhKXtyZXR1cm4gbmV3IF8u
ZmgoZnVuY3Rpb24oYixjKXthLmxlbmd0aHx8Yih2b2lkIDApO2Zvcih2YXIgZD0wLGU7ZDxh
Lmxlbmd0aDtkKyspZT1hW2RdLF8ubGgoZSxiLGMpfSl9Ow0KXy5taD1mdW5jdGlvbihhKXty
ZXR1cm4gbmV3IF8uZmgoZnVuY3Rpb24oYixjKXt2YXIgZD1hLmxlbmd0aCxlPVtdO2lmKGQp
Zm9yKHZhciBmPWZ1bmN0aW9uKG4scCl7ZC0tO2Vbbl09cDswPT1kJiZiKGUpfSxnPWZ1bmN0
aW9uKG4pe2Mobil9LGg9MCxsO2g8YS5sZW5ndGg7aCsrKWw9YVtoXSxfLmxoKGwsXy5lYihm
LGgpLGcpO2Vsc2UgYihlKX0pfTtfLm5oPWZ1bmN0aW9uKCl7dmFyIGEsYixjPW5ldyBfLmZo
KGZ1bmN0aW9uKGQsZSl7YT1kO2I9ZX0pO3JldHVybiBuZXcgZGJhKGMsYSxiKX07Xy5maC5w
cm90b3R5cGUudGhlbj1mdW5jdGlvbihhLGIsYyl7cmV0dXJuIG9oKHRoaXMsXy5hYihhKT9h
Om51bGwsXy5hYihiKT9iOm51bGwsYyl9O18uZmgucHJvdG90eXBlLiRnb29nX1RoZW5hYmxl
PSEwO18ucWg9ZnVuY3Rpb24oYSxiLGMpe2I9aWgoYixiLGMpO2IuWG49ITA7cGgoYSxiKTty
ZXR1cm4gYX07Xy5tYT1mdW5jdGlvbihhLGIsYyl7cmV0dXJuIG9oKGEsbnVsbCxiLGMpfTsN
Cl8uZmgucHJvdG90eXBlLmNhbmNlbD1mdW5jdGlvbihhKXtpZigwPT10aGlzLmhhKXt2YXIg
Yj1uZXcgXy5yaChhKTtVZyhmdW5jdGlvbigpe3NoKHRoaXMsYil9LHRoaXMpfX07DQp2YXIg
c2g9ZnVuY3Rpb24oYSxiKXtpZigwPT1hLmhhKWlmKGEudGEpe3ZhciBjPWEudGE7aWYoYy5r
YSl7Zm9yKHZhciBkPTAsZT1udWxsLGY9bnVsbCxnPWMua2E7ZyYmKGcuWG58fChkKyssZy5o
YT09YSYmKGU9ZyksIShlJiYxPGQpKSk7Zz1nLm5leHQpZXx8KGY9Zyk7ZSYmKDA9PWMuaGEm
JjE9PWQ/c2goYyxiKTooZj8oZD1mLGQubmV4dD09Yy53YSYmKGMud2E9ZCksZC5uZXh0PWQu
bmV4dC5uZXh0KTp0aChjKSx1aChjLGUsMyxiKSkpfWEudGE9bnVsbH1lbHNlIGVoKGEsMyxi
KX0scGg9ZnVuY3Rpb24oYSxiKXthLmthfHwyIT1hLmhhJiYzIT1hLmhhfHx2aChhKTthLndh
P2Eud2EubmV4dD1iOmEua2E9YjthLndhPWJ9LG9oPWZ1bmN0aW9uKGEsYixjLGQpe3ZhciBl
PWloKG51bGwsbnVsbCxudWxsKTtlLmhhPW5ldyBfLmZoKGZ1bmN0aW9uKGYsZyl7ZS50YT1i
P2Z1bmN0aW9uKGgpe3RyeXt2YXIgbD1iLmNhbGwoZCxoKTtmKGwpfWNhdGNoKG4pe2cobil9
fTpmO2Uua2E9Yz8NCmZ1bmN0aW9uKGgpe3RyeXt2YXIgbD1jLmNhbGwoZCxoKTt2b2lkIDA9
PT1sJiZoIGluc3RhbmNlb2YgXy5yaD9nKGgpOmYobCl9Y2F0Y2gobil7ZyhuKX19Omd9KTtl
LmhhLnRhPWE7cGgoYSxlKTtyZXR1cm4gZS5oYX07Xy5maC5wcm90b3R5cGUuTWE9ZnVuY3Rp
b24oYSl7dGhpcy5oYT0wO2VoKHRoaXMsMixhKX07Xy5maC5wcm90b3R5cGUuTmE9ZnVuY3Rp
b24oYSl7dGhpcy5oYT0wO2VoKHRoaXMsMyxhKX07DQp2YXIgZWg9ZnVuY3Rpb24oYSxiLGMp
ezA9PWEuaGEmJihhPT09YyYmKGI9MyxjPW5ldyBUeXBlRXJyb3IoInQiKSksYS5oYT0xLGto
KGMsYS5NYSxhLk5hLGEpfHwoYS5LYT1jLGEuaGE9YixhLnRhPW51bGwsdmgoYSksMyE9Ynx8
YyBpbnN0YW5jZW9mIF8ucmh8fGViYShhLGMpKSl9LGtoPWZ1bmN0aW9uKGEsYixjLGQpe2lm
KGEgaW5zdGFuY2VvZiBfLmZoKXJldHVybiBwaChhLGloKGJ8fF8uVmEsY3x8bnVsbCxkKSks
ITA7aWYoV2coYSkpcmV0dXJuIGEudGhlbihiLGMsZCksITA7aWYoXy5iYihhKSl0cnl7dmFy
IGU9YS50aGVuO2lmKF8uYWIoZSkpcmV0dXJuIGZiYShhLGUsYixjLGQpLCEwfWNhdGNoKGYp
e3JldHVybiBjLmNhbGwoZCxmKSwhMH1yZXR1cm4hMX0sZmJhPWZ1bmN0aW9uKGEsYixjLGQs
ZSl7dmFyIGY9ITEsZz1mdW5jdGlvbihsKXtmfHwoZj0hMCxjLmNhbGwoZSxsKSl9LGg9ZnVu
Y3Rpb24obCl7Znx8KGY9ITAsZC5jYWxsKGUsbCkpfTt0cnl7Yi5jYWxsKGEsZywNCmgpfWNh
dGNoKGwpe2gobCl9fSx2aD1mdW5jdGlvbihhKXthLklhfHwoYS5JYT0hMCxVZyhhLkZhLGEp
KX0sdGg9ZnVuY3Rpb24oYSl7dmFyIGI9bnVsbDthLmthJiYoYj1hLmthLGEua2E9Yi5uZXh0
LGIubmV4dD1udWxsKTthLmthfHwoYS53YT1udWxsKTtyZXR1cm4gYn07Xy5maC5wcm90b3R5
cGUuRmE9ZnVuY3Rpb24oKXtmb3IodmFyIGE7YT10aCh0aGlzKTspdWgodGhpcyxhLHRoaXMu
aGEsdGhpcy5LYSk7dGhpcy5JYT0hMX07dWg9ZnVuY3Rpb24oYSxiLGMsZCl7aWYoMz09YyYm
Yi5rYSYmIWIuWG4pZm9yKDthJiZhLkFhO2E9YS50YSlhLkFhPSExO2lmKGIuaGEpYi5oYS50
YT1udWxsLHdoKGIsYyxkKTtlbHNlIHRyeXtiLlhuP2IudGEuY2FsbChiLmNvbnRleHQpOndo
KGIsYyxkKX1jYXRjaChlKXt4aC5jYWxsKG51bGwsZSl9TmcoaGgsYil9O3doPWZ1bmN0aW9u
KGEsYixjKXsyPT1iP2EudGEuY2FsbChhLmNvbnRleHQsYyk6YS5rYSYmYS5rYS5jYWxsKGEu
Y29udGV4dCxjKX07DQplYmE9ZnVuY3Rpb24oYSxiKXthLkFhPSEwO1VnKGZ1bmN0aW9uKCl7
YS5BYSYmeGguY2FsbChudWxsLGIpfSl9O3hoPV8uV2Y7Xy5yaD1mdW5jdGlvbihhKXtfLmxi
LmNhbGwodGhpcyxhKX07Xy51KF8ucmgsXy5sYik7Xy5yaC5wcm90b3R5cGUubmFtZT0iY2Fu
Y2VsIjt2YXIgZGJhPWZ1bmN0aW9uKGEsYixjKXt0aGlzLlJiPWE7dGhpcy5yZXNvbHZlPWI7
dGhpcy5yZWplY3Q9Y307DQovKg0KIFBvcnRpb25zIG9mIHRoaXMgY29kZSBhcmUgZnJvbSBN
b2NoaUtpdCwgcmVjZWl2ZWQgYnkNCiBUaGUgQ2xvc3VyZSBBdXRob3JzIHVuZGVyIHRoZSBN
SVQgbGljZW5zZS4gQWxsIG90aGVyIGNvZGUgaXMgQ29weXJpZ2h0DQogMjAwNS0yMDA5IFRo
ZSBDbG9zdXJlIEF1dGhvcnMuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuDQoqLw0KdmFyIGdiYSxR
aCxKaCxLaDtfLnloPWZ1bmN0aW9uKGEsYil7dGhpcy5JYT1bXTt0aGlzLmtiPWE7dGhpcy5S
YT1ifHxudWxsO3RoaXMud2E9dGhpcy5oYT0hMTt0aGlzLnRhPXZvaWQgMDt0aGlzLk5hPXRo
aXMuRmI9dGhpcy5NYT0hMTt0aGlzLkthPTA7dGhpcy5rYT1udWxsO3RoaXMuQWE9MH07Xy55
aC5wcm90b3R5cGUuY2FuY2VsPWZ1bmN0aW9uKGEpe2lmKHRoaXMuaGEpdGhpcy50YSBpbnN0
YW5jZW9mIF8ueWgmJnRoaXMudGEuY2FuY2VsKCk7ZWxzZXtpZih0aGlzLmthKXt2YXIgYj10
aGlzLmthO2RlbGV0ZSB0aGlzLmthO2E/Yi5jYW5jZWwoYSk6KGIuQWEtLSwwPj1iLkFhJiZi
LmNhbmNlbCgpKX10aGlzLmtiP3RoaXMua2IuY2FsbCh0aGlzLlJhLHRoaXMpOnRoaXMuTmE9
ITA7dGhpcy5oYXx8dGhpcy5FZihuZXcgXy56aCh0aGlzKSl9fTtfLnloLnByb3RvdHlwZS5O
Yj1mdW5jdGlvbihhLGIpe3RoaXMuTWE9ITE7SWgodGhpcyxhLGIpfTsNCnZhciBJaD1mdW5j
dGlvbihhLGIsYyl7YS5oYT0hMDthLnRhPWM7YS53YT0hYjtKaChhKX0sTGg9ZnVuY3Rpb24o
YSl7aWYoYS5oYSl7aWYoIWEuTmEpdGhyb3cgbmV3IEtoKGEpO2EuTmE9ITF9fTtfLnloLnBy
b3RvdHlwZS5KYz1mdW5jdGlvbihhKXtMaCh0aGlzKTtJaCh0aGlzLCEwLGEpfTtfLnloLnBy
b3RvdHlwZS5FZj1mdW5jdGlvbihhKXtMaCh0aGlzKTtJaCh0aGlzLCExLGEpfTtfLk5oPWZ1
bmN0aW9uKGEsYixjKXtyZXR1cm4gXy5NaChhLGIsbnVsbCxjKX07Xy5PaD1mdW5jdGlvbihh
LGIsYyl7cmV0dXJuIF8uTWgoYSxudWxsLGIsYyl9O2diYT1mdW5jdGlvbihhLGIpe18uTWgo
YSxiLGZ1bmN0aW9uKGMpe3ZhciBkPWIuY2FsbCh0aGlzLGMpO2lmKHZvaWQgMD09PWQpdGhy
b3cgYztyZXR1cm4gZH0sdm9pZCAwKX07Xy5NaD1mdW5jdGlvbihhLGIsYyxkKXthLklhLnB1
c2goW2IsYyxkXSk7YS5oYSYmSmgoYSk7cmV0dXJuIGF9Ow0KXy55aC5wcm90b3R5cGUudGhl
bj1mdW5jdGlvbihhLGIsYyl7dmFyIGQsZSxmPW5ldyBfLmZoKGZ1bmN0aW9uKGcsaCl7ZD1n
O2U9aH0pO18uTWgodGhpcyxkLGZ1bmN0aW9uKGcpe2cgaW5zdGFuY2VvZiBfLnpoP2YuY2Fu
Y2VsKCk6ZShnKX0pO3JldHVybiBmLnRoZW4oYSxiLGMpfTtfLnloLnByb3RvdHlwZS4kZ29v
Z19UaGVuYWJsZT0hMDtfLlBoPWZ1bmN0aW9uKGEsYil7YiBpbnN0YW5jZW9mIF8ueWg/Xy5O
aChhLCgwLF8ucikoYi5OaSxiKSk6Xy5OaChhLGZ1bmN0aW9uKCl7cmV0dXJuIGJ9KX07Xy55
aC5wcm90b3R5cGUuTmk9ZnVuY3Rpb24oYSl7dmFyIGI9bmV3IF8ueWg7Xy5NaCh0aGlzLGIu
SmMsYi5FZixiKTthJiYoYi5rYT10aGlzLHRoaXMuQWErKyk7cmV0dXJuIGJ9O18ueWgucHJv
dG90eXBlLmlzRXJyb3I9ZnVuY3Rpb24oYSl7cmV0dXJuIGEgaW5zdGFuY2VvZiBFcnJvcn07
UWg9ZnVuY3Rpb24oYSl7cmV0dXJuKDAsXy51YikoYS5JYSxmdW5jdGlvbihiKXtyZXR1cm4g
Xy5hYihiWzFdKX0pfTsNCkpoPWZ1bmN0aW9uKGEpe2lmKGEuS2EmJmEuaGEmJlFoKGEpKXt2
YXIgYj1hLkthLGM9UmhbYl07YyYmKF8ucWEuY2xlYXJUaW1lb3V0KGMuaGEpLGRlbGV0ZSBS
aFtiXSk7YS5LYT0wfWEua2EmJihhLmthLkFhLS0sZGVsZXRlIGEua2EpO2I9YS50YTtmb3Io
dmFyIGQ9Yz0hMTthLklhLmxlbmd0aCYmIWEuTWE7KXt2YXIgZT1hLklhLnNoaWZ0KCksZj1l
WzBdLGc9ZVsxXTtlPWVbMl07aWYoZj1hLndhP2c6Zil0cnl7dmFyIGg9Zi5jYWxsKGV8fGEu
UmEsYik7dm9pZCAwIT09aCYmKGEud2E9YS53YSYmKGg9PWJ8fGEuaXNFcnJvcihoKSksYS50
YT1iPWgpO2lmKFdnKGIpfHwiZnVuY3Rpb24iPT09dHlwZW9mIF8ucWEuUHJvbWlzZSYmYiBp
bnN0YW5jZW9mIF8ucWEuUHJvbWlzZSlkPSEwLGEuTWE9ITB9Y2F0Y2gobCl7Yj1sLGEud2E9
ITAsUWgoYSl8fChjPSEwKX19YS50YT1iO2QmJihoPSgwLF8ucikoYS5OYixhLCEwKSxkPSgw
LF8ucikoYS5OYixhLCExKSxiIGluc3RhbmNlb2YgXy55aD8NCihfLk1oKGIsaCxkKSxiLkZi
PSEwKTpiLnRoZW4oaCxkKSk7YyYmKGI9bmV3IFNoKGIpLFJoW2IuaGFdPWIsYS5LYT1iLmhh
KX07Xy5UaD1mdW5jdGlvbihhKXt2YXIgYj1uZXcgXy55aDtiLkpjKGEpO3JldHVybiBifTtf
LlVoPWZ1bmN0aW9uKGEpe3ZhciBiPW5ldyBfLnloO2EudGhlbihmdW5jdGlvbihjKXtiLkpj
KGMpfSxmdW5jdGlvbihjKXtiLkVmKGMpfSk7cmV0dXJuIGJ9O18uVmg9ZnVuY3Rpb24oYSl7
dmFyIGI9bmV3IF8ueWg7Yi5FZihhKTtyZXR1cm4gYn07S2g9ZnVuY3Rpb24oYSl7Xy5sYi5j
YWxsKHRoaXMpO3RoaXMuSWU9YX07Xy51KEtoLF8ubGIpO0toLnByb3RvdHlwZS5tZXNzYWdl
PSJEZWZlcnJlZCBoYXMgYWxyZWFkeSBmaXJlZCI7S2gucHJvdG90eXBlLm5hbWU9IkFscmVh
ZHlDYWxsZWRFcnJvciI7Xy56aD1mdW5jdGlvbihhKXtfLmxiLmNhbGwodGhpcyk7dGhpcy5J
ZT1hfTtfLnUoXy56aCxfLmxiKTtfLnpoLnByb3RvdHlwZS5tZXNzYWdlPSJEZWZlcnJlZCB3
YXMgY2FuY2VsZWQiOw0KXy56aC5wcm90b3R5cGUubmFtZT0iQ2FuY2VsZWRFcnJvciI7dmFy
IFNoPWZ1bmN0aW9uKGEpe3RoaXMuaGE9Xy5xYS5zZXRUaW1lb3V0KCgwLF8ucikodGhpcy50
YSx0aGlzKSwwKTt0aGlzLmthPWF9O1NoLnByb3RvdHlwZS50YT1mdW5jdGlvbigpe2RlbGV0
ZSBSaFt0aGlzLmhhXTt0aHJvdyB0aGlzLmthO307dmFyIFJoPXt9Ow0KdmFyIFdoPWZ1bmN0
aW9uKCl7TGcuY2FsbCh0aGlzKTt0aGlzLnRhPXt9O3RoaXMuQWE9W107dGhpcy5JYT1bXTt0
aGlzLlhhPVtdO3RoaXMua2E9W107dGhpcy5LYT1bXTt0aGlzLlRjPXt9O3RoaXMud2E9dGhp
cy5OYT1uZXcgaGcoW10sIiIpO3RoaXMuU2I9bnVsbDt0aGlzLkZhPW5ldyBfLnloO3RoaXMu
QWM9bnVsbDt0aGlzLmtiPXRoaXMuTGI9ITE7dGhpcy5OYj0wO3RoaXMuaGM9dGhpcy5aYj10
aGlzLnhlPSExfTtfLnUoV2gsTGcpO18uaz1XaC5wcm90b3R5cGU7Xy5rLmVPPWZ1bmN0aW9u
KGEpe3RoaXMuTGI9YX07Xy5rLmZPPWZ1bmN0aW9uKGEpe3RoaXMua2I9YX07DQpfLmsuV3k9
ZnVuY3Rpb24oYSxiKXtpZighKHRoaXMgaW5zdGFuY2VvZiBXaCkpdGhpcy5XeShhLGIpO2Vs
c2UgaWYoInN0cmluZyI9PT10eXBlb2YgYSl7YT1hLnNwbGl0KCIvIik7Zm9yKHZhciBjPVtd
LGQ9MDtkPGEubGVuZ3RoO2QrKyl7dmFyIGU9YVtkXS5zcGxpdCgiOiIpLGY9ZVswXTtpZihl
WzFdKXtlPWVbMV0uc3BsaXQoIiwiKTtmb3IodmFyIGc9MDtnPGUubGVuZ3RoO2crKyllW2dd
PWNbcGFyc2VJbnQoZVtnXSwzNildfWVsc2UgZT1bXTtjLnB1c2goZik7dGhpcy50YVtmXT1u
ZXcgaGcoZSxmKX1iJiZiLmxlbmd0aD8oXy5LYih0aGlzLkFhLGIpLHRoaXMuU2I9Xy5uYihi
KSk6dGhpcy5GYS5oYXx8dGhpcy5GYS5KYygpO1hoKHRoaXMpfX07Xy5rLkJrPWZ1bmN0aW9u
KGEpe3JldHVybiB0aGlzLnRhW2FdfTtfLmsuT0U9ZnVuY3Rpb24oYSl7V2guVGIuT0UuY2Fs
bCh0aGlzLGEpO1hoKHRoaXMpfTtfLmsudWU9ZnVuY3Rpb24oKXtyZXR1cm4gMDx0aGlzLkFh
Lmxlbmd0aH07DQpfLmsuSks9ZnVuY3Rpb24oKXtyZXR1cm4gMDx0aGlzLkthLmxlbmd0aH07
DQp2YXIgWmg9ZnVuY3Rpb24oYSl7dmFyIGI9YS54ZSxjPWEudWUoKTtjIT1iJiYoWWgoYSxj
PyJhY3RpdmUiOiJpZGxlIiksYS54ZT1jKTtiPWEuSksoKTtiIT1hLlpiJiYoWWgoYSxiPyJ1
c2VyQWN0aXZlIjoidXNlcklkbGUiKSxhLlpiPWIpfSxhaT1mdW5jdGlvbihhLGIsYyl7dmFy
IGQ9W107Xy5QYihiLGQpO2I9W107Zm9yKHZhciBlPXt9LGY9MDtmPGQubGVuZ3RoO2YrKyl7
dmFyIGc9ZFtmXSxoPWEuQmsoZyk7aWYoIWgpdGhyb3cgRXJyb3IoInVgIitnKTt2YXIgbD1u
ZXcgXy55aDtlW2ddPWw7aC5Laz9sLkpjKGEuTWEpOihoYmEoYSxnLGgsISFjLGwpLCRoKGEs
Zyl8fGIucHVzaChnKSl9MDxiLmxlbmd0aCYmKGEua2I/Xy5OaChhLkZhLCgwLF8ucikoYS5S
YSxhLGIpKTowPT1hLkFhLmxlbmd0aD9hLlJhKGIpOihhLmthLnB1c2goYiksWmgoYSkpKTty
ZXR1cm4gZX0saGJhPWZ1bmN0aW9uKGEsYixjLGQsZSl7Yy53YS5wdXNoKG5ldyBnZyhlLkpj
LGUpKTtpZyhjLGZ1bmN0aW9uKGYpe2UuRWYoRXJyb3IoZikpfSk7DQokaChhLGIpP2QmJihf
LkNiKGEuS2EsYil8fGEuS2EucHVzaChiKSxaaChhKSk6ZCYmKF8uQ2IoYS5LYSxiKXx8YS5L
YS5wdXNoKGIpKX07V2gucHJvdG90eXBlLlJhPWZ1bmN0aW9uKGEsYixjKXtifHwodGhpcy5O
Yj0wKTtiPWliYSh0aGlzLGEpO3RoaXMua2I/Xy5LYih0aGlzLkFhLGIpOnRoaXMuQWE9Yjt0
aGlzLklhPXRoaXMuTGI/YTpfLkpiKGIpO1poKHRoaXMpOzAhPWIubGVuZ3RoJiYodGhpcy5Y
YS5wdXNoLmFwcGx5KHRoaXMuWGEsYiksYT0oMCxfLnIpKHRoaXMuRmIuU2IsdGhpcy5GYixf
LkpiKGIpLHRoaXMudGEsbnVsbCwoMCxfLnIpKHRoaXMubGQsdGhpcyx0aGlzLklhLGIpLCgw
LF8ucikodGhpcy5OZCx0aGlzKSwhIWMpLChjPTVFMypNYXRoLnBvdyh0aGlzLk5iLDIpKT93
aW5kb3cuc2V0VGltZW91dChhLGMpOmEoKSl9Ow0KdmFyIGliYT1mdW5jdGlvbihhLGIpe2I9
KDAsXy5yYikoYixmdW5jdGlvbihlKXtyZXR1cm4gYS50YVtlXS5Laz8oXy5xYS5zZXRUaW1l
b3V0KGZ1bmN0aW9uKCl7cmV0dXJuIEVycm9yKCJ2YCIrZSl9LDApLCExKTohMH0pO2Zvcih2
YXIgYz1bXSxkPTA7ZDxiLmxlbmd0aDtkKyspYz1jLmNvbmNhdChiaShhLGJbZF0pKTtfLlBi
KGMpO3JldHVybiFhLkxiJiYxPGMubGVuZ3RoPyhiPWMuc2hpZnQoKSxhLmthPSgwLF8uc2Ip
KGMsZnVuY3Rpb24oZSl7cmV0dXJuW2VdfSkuY29uY2F0KGEua2EpLFtiXSk6Y30sYmk9ZnVu
Y3Rpb24oYSxiKXt2YXIgYz1fLkZjKGEuWGEpLGQ9W107Y1tiXXx8ZC5wdXNoKGIpO2I9W2Jd
O2Zvcih2YXIgZT0wO2U8Yi5sZW5ndGg7ZSsrKWZvcih2YXIgZj1hLkJrKGJbZV0pLkRvKCks
Zz1mLmxlbmd0aC0xOzA8PWc7Zy0tKXt2YXIgaD1mW2ddO2EuQmsoaCkuS2t8fGNbaF18fChk
LnB1c2goaCksYi5wdXNoKGgpKX1kLnJldmVyc2UoKTtfLlBiKGQpO3JldHVybiBkfSwNClho
PWZ1bmN0aW9uKGEpe2Eud2E9PWEuTmEmJihhLndhPW51bGwseWcoYS5OYSwoMCxfLnIpKGEu
bkosYSkpJiZjaShhLDQpLFpoKGEpKX07V2gucHJvdG90eXBlLmhhPWZ1bmN0aW9uKCl7aWYo
dGhpcy53YSl7dmFyIGE9dGhpcy53YS5nZXRJZCgpO3RoaXMuaXNEaXNwb3NlZCgpfHwoeWco
dGhpcy50YVthXSwoMCxfLnIpKHRoaXMubkosdGhpcykpJiZjaSh0aGlzLDQpLF8uR2IodGhp
cy5LYSxhKSxfLkdiKHRoaXMuQWEsYSksMD09dGhpcy5BYS5sZW5ndGgmJmhpKHRoaXMpLHRo
aXMuU2ImJmE9PXRoaXMuU2ImJih0aGlzLkZhLmhhfHx0aGlzLkZhLkpjKCkpLFpoKHRoaXMp
LHRoaXMud2E9bnVsbCl9fTt2YXIgJGg9ZnVuY3Rpb24oYSxiKXtpZihfLkNiKGEuQWEsYikp
cmV0dXJuITA7Zm9yKHZhciBjPTA7YzxhLmthLmxlbmd0aDtjKyspaWYoXy5DYihhLmthW2Nd
LGIpKXJldHVybiEwO3JldHVybiExfTsNCldoLnByb3RvdHlwZS5sb2FkPWZ1bmN0aW9uKGEs
Yil7cmV0dXJuIGFpKHRoaXMsW2FdLGIpW2FdfTtfLmlpPWZ1bmN0aW9uKGEsYil7cmV0dXJu
IGFpKGEsYix2b2lkIDApfTtfLnc9ZnVuY3Rpb24oYSl7dmFyIGI9Xy5tKCk7Yi53YT1iLkJr
KGEpfTtXaC5wcm90b3R5cGUuWWg9ZnVuY3Rpb24oYSl7dGhpcy53YSYmdGhpcy53YS5rYS5w
dXNoKG5ldyBnZyhhLHZvaWQgMCkpfTtXaC5wcm90b3R5cGUuZno9ZnVuY3Rpb24oYSl7dGhp
cy53YSYmdGhpcy53YS5meihhKX07V2gucHJvdG90eXBlLmxkPWZ1bmN0aW9uKGEsYixjKXt0
aGlzLk5iKys7dGhpcy5JYT1hOygwLF8ucGIpKGIsXy5lYihfLkdiLHRoaXMuWGEpLHRoaXMp
OzQwMT09Yz8oY2kodGhpcywwKSx0aGlzLmthLmxlbmd0aD0wKTo0MTA9PWM/KGppKHRoaXMs
MyksaGkodGhpcykpOjM8PXRoaXMuTmI/KGppKHRoaXMsMSksaGkodGhpcykpOnRoaXMuUmEo
dGhpcy5JYSwhMCw4MDAxPT1jKX07DQpXaC5wcm90b3R5cGUuTmQ9ZnVuY3Rpb24oKXtqaSh0
aGlzLDIpO2hpKHRoaXMpfTsNCnZhciBqaT1mdW5jdGlvbihhLGIpezE8YS5JYS5sZW5ndGg/
YS5rYT0oMCxfLnNiKShhLklhLGZ1bmN0aW9uKGMpe3JldHVybltjXX0pLmNvbmNhdChhLmth
KTpjaShhLGIpfSxjaT1mdW5jdGlvbihhLGIpe3ZhciBjPWEuSWE7YS5BYS5sZW5ndGg9MDtm
b3IodmFyIGQ9W10sZT0wO2U8YS5rYS5sZW5ndGg7ZSsrKXt2YXIgZj0oMCxfLnJiKShhLmth
W2VdLGZ1bmN0aW9uKGwpe3ZhciBuPWJpKHRoaXMsbCk7cmV0dXJuKDAsXy51YikoYyxmdW5j
dGlvbihwKXtyZXR1cm4gXy5DYihuLHApfSl9LGEpO18uS2IoZCxmKX1mb3IoZT0wO2U8Yy5s
ZW5ndGg7ZSsrKV8uRWIoZCxjW2VdKTtmb3IoZT0wO2U8ZC5sZW5ndGg7ZSsrKXtmb3IoZj0w
O2Y8YS5rYS5sZW5ndGg7ZisrKV8uR2IoYS5rYVtmXSxkW2VdKTtfLkdiKGEuS2EsZFtlXSl9
dmFyIGc9YS5UYy5lcnJvcjtpZihnKWZvcihlPTA7ZTxnLmxlbmd0aDtlKyspe3ZhciBoPWdb
ZV07Zm9yKGY9MDtmPGQubGVuZ3RoO2YrKyloKCJlcnJvciIsDQpkW2ZdLGIpfWZvcihlPTA7
ZTxjLmxlbmd0aDtlKyspYS50YVtjW2VdXSYmJGFhKGEudGFbY1tlXV0sYik7YS5JYS5sZW5n
dGg9MDtaaChhKX0saGk9ZnVuY3Rpb24oYSl7Zm9yKDthLmthLmxlbmd0aDspe3ZhciBiPSgw
LF8ucmIpKGEua2Euc2hpZnQoKSxmdW5jdGlvbihjKXtyZXR1cm4hdGhpcy5CayhjKS5La30s
YSk7aWYoMDxiLmxlbmd0aCl7YS5SYShiKTtyZXR1cm59fVpoKGEpfSxZaD1mdW5jdGlvbihh
LGIpe2E9YS5UY1tiXTtmb3IodmFyIGM9MDthJiZjPGEubGVuZ3RoO2MrKylhW2NdKGIpfTtX
aC5wcm90b3R5cGUuaGU9ZnVuY3Rpb24oKXtlZyhfLnVjKHRoaXMudGEpLHRoaXMuTmEpO3Ro
aXMudGE9e307dGhpcy5BYT1bXTt0aGlzLklhPVtdO3RoaXMuS2E9W107dGhpcy5rYT1bXTt0
aGlzLlRjPXt9O3RoaXMuaGM9ITB9O1doLnByb3RvdHlwZS5pc0Rpc3Bvc2VkPWZ1bmN0aW9u
KCl7cmV0dXJuIHRoaXMuaGN9O2ZhPWZ1bmN0aW9uKCl7cmV0dXJuIG5ldyBXaH07DQp2YXIg
a2k9ZnVuY3Rpb24oKXtXaC5jYWxsKHRoaXMpfTtfLnEoa2ksV2gpO2tpLnByb3RvdHlwZS5C
az1mdW5jdGlvbihhKXthIGluIHRoaXMudGF8fCh0aGlzLnRhW2FdPW5ldyBoZyhbXSxhKSk7
cmV0dXJuIHRoaXMudGFbYV19Ow0KZWE9bmV3IGtpOw0KXy5saT1fLnFhLkpTT04uc3RyaW5n
aWZ5Ow0KXy5qYmE9Xy5uZChfLlpjKCJodHRwczovL2FwaXMuZ29vZ2xlLmNvbS9qcy9hcGku
anMiKSk7DQpfLm1pPWZ1bmN0aW9uKGEsYil7cmV0dXJuKGI9Yi5XSVpfZ2xvYmFsX2RhdGEp
JiZhIGluIGI/YlthXTpudWxsfTsNCl8ubmk9ZnVuY3Rpb24oYSxiKXthPUpTT04ucGFyc2Uo
IlsiK2Euc3Vic3RyaW5nKDQpKTtyZXR1cm4gbmV3IGIoYSl9Ow0KXy5vaT1mdW5jdGlvbihh
KXtmb3IodmFyIGI9W10sYz0wLGQ9MDtkPGEubGVuZ3RoO2QrKyl7dmFyIGU9YS5jaGFyQ29k
ZUF0KGQpOzI1NTxlJiYoYltjKytdPWUmMjU1LGU+Pj04KTtiW2MrK109ZX1yZXR1cm4gYn07
DQpfLnBpPV8uS2MoKTtfLnFpPWdlKCl8fF8ubWMoImlQb2QiKTtfLnJpPV8ubWMoImlQYWQi
KTtfLnNpPU5jKCk7Xy50aT1fLkxjKCk7Xy51aT1fLk1jKCkmJiFfLmhlKCk7DQp2YXIgdmk7
dmk9e307Xy53aT1udWxsO18ueWk9ZnVuY3Rpb24oYSxiKXt2b2lkIDA9PT1iJiYoYj0wKTtf
LnhpKCk7Yj12aVtiXTtmb3IodmFyIGM9W10sZD0wO2Q8YS5sZW5ndGg7ZCs9Myl7dmFyIGU9
YVtkXSxmPWQrMTxhLmxlbmd0aCxnPWY/YVtkKzFdOjAsaD1kKzI8YS5sZW5ndGgsbD1oP2Fb
ZCsyXTowLG49ZT4+MjtlPShlJjMpPDw0fGc+PjQ7Zz0oZyYxNSk8PDJ8bD4+NjtsJj02Mzto
fHwobD02NCxmfHwoZz02NCkpO2MucHVzaChiW25dLGJbZV0sYltnXXx8IiIsYltsXXx8IiIp
fXJldHVybiBjLmpvaW4oIiIpfTsNCl8ueGk9ZnVuY3Rpb24oKXtpZighXy53aSl7Xy53aT17
fTtmb3IodmFyIGE9IkFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5v
cHFyc3R1dnd4eXowMTIzNDU2Nzg5Ii5zcGxpdCgiIiksYj1bIisvPSIsIisvIiwiLV89Iiwi
LV8uIiwiLV8iXSxjPTA7NT5jO2MrKyl7dmFyIGQ9YS5jb25jYXQoYltjXS5zcGxpdCgiIikp
O3ZpW2NdPWQ7Zm9yKHZhciBlPTA7ZTxkLmxlbmd0aDtlKyspe3ZhciBmPWRbZV07dm9pZCAw
PT09Xy53aVtmXSYmKF8ud2lbZl09ZSl9fX19Ow0KdmFyIEFpPWZ1bmN0aW9uKGEsYil7dGhp
cy5rYT1hO3RoaXMud2E9Yjt0aGlzLmhhPXt9O3RoaXMudGE9ITA7aWYoMDx0aGlzLmthLmxl
bmd0aCl7Zm9yKGE9MDthPHRoaXMua2EubGVuZ3RoO2ErKyl7Yj10aGlzLmthW2FdO3ZhciBj
PWJbMF07dGhpcy5oYVtjLnRvU3RyaW5nKCldPW5ldyB6aShjLGJbMV0pfXRoaXMudGE9ITB9
fTtBaS5wcm90b3R5cGUuQWQ9ZnVuY3Rpb24oKXtpZih0aGlzLnRhKXtpZih0aGlzLndhKXt2
YXIgYT10aGlzLmhhLGI7Zm9yKGIgaW4gYSlpZihPYmplY3QucHJvdG90eXBlLmhhc093blBy
b3BlcnR5LmNhbGwoYSxiKSl7dmFyIGM9YVtiXS5oYTtjJiZjLkFkKCl9fX1lbHNle3RoaXMu
a2EubGVuZ3RoPTA7YT1CaSh0aGlzKTthLnNvcnQoKTtmb3IoYj0wO2I8YS5sZW5ndGg7Yisr
KXt2YXIgZD10aGlzLmhhW2FbYl1dOyhjPWQuaGEpJiZjLkFkKCk7dGhpcy5rYS5wdXNoKFtk
LmtleSxkLnZhbHVlXSl9dGhpcy50YT0hMH1yZXR1cm4gdGhpcy5rYX07DQp2YXIgQ2k9ZnVu
Y3Rpb24oYSl7dGhpcy5rYT0wO3RoaXMuaGE9YX07Q2kucHJvdG90eXBlLm5leHQ9ZnVuY3Rp
b24oKXtyZXR1cm4gdGhpcy5rYTx0aGlzLmhhLmxlbmd0aD97ZG9uZTohMSx2YWx1ZTp0aGlz
LmhhW3RoaXMua2ErK119Ontkb25lOiEwLHZhbHVlOnZvaWQgMH19OyJ1bmRlZmluZWQiIT10
eXBlb2YgU3ltYm9sJiYoQ2kucHJvdG90eXBlW1N5bWJvbC5pdGVyYXRvcl09ZnVuY3Rpb24o
KXtyZXR1cm4gdGhpc30pO18uaz1BaS5wcm90b3R5cGU7Xy5rLmNsZWFyPWZ1bmN0aW9uKCl7
dGhpcy5oYT17fTt0aGlzLnRhPSExfTtfLmsuZW50cmllcz1mdW5jdGlvbigpe3ZhciBhPVtd
LGI9QmkodGhpcyk7Yi5zb3J0KCk7Zm9yKHZhciBjPTA7YzxiLmxlbmd0aDtjKyspe3ZhciBk
PXRoaXMuaGFbYltjXV07YS5wdXNoKFtkLmtleSxEaSh0aGlzLGQpXSl9cmV0dXJuIG5ldyBD
aShhKX07DQpfLmsua2V5cz1mdW5jdGlvbigpe3ZhciBhPVtdLGI9QmkodGhpcyk7Yi5zb3J0
KCk7Zm9yKHZhciBjPTA7YzxiLmxlbmd0aDtjKyspYS5wdXNoKHRoaXMuaGFbYltjXV0ua2V5
KTtyZXR1cm4gbmV3IENpKGEpfTtfLmsudmFsdWVzPWZ1bmN0aW9uKCl7dmFyIGE9W10sYj1C
aSh0aGlzKTtiLnNvcnQoKTtmb3IodmFyIGM9MDtjPGIubGVuZ3RoO2MrKylhLnB1c2goRGko
dGhpcyx0aGlzLmhhW2JbY11dKSk7cmV0dXJuIG5ldyBDaShhKX07Xy5rLmZvckVhY2g9ZnVu
Y3Rpb24oYSxiKXt2YXIgYz1CaSh0aGlzKTtjLnNvcnQoKTtmb3IodmFyIGQ9MDtkPGMubGVu
Z3RoO2QrKyl7dmFyIGU9dGhpcy5oYVtjW2RdXTthLmNhbGwoYixEaSh0aGlzLGUpLGUua2V5
LHRoaXMpfX07Xy5rLnNldD1mdW5jdGlvbihhLGIpe3ZhciBjPW5ldyB6aShhKTt0aGlzLndh
PyhjLmhhPWIsYy52YWx1ZT1iLkFkKCkpOmMudmFsdWU9Yjt0aGlzLmhhW2EudG9TdHJpbmco
KV09Yzt0aGlzLnRhPSExO3JldHVybiB0aGlzfTsNCnZhciBEaT1mdW5jdGlvbihhLGIpe3Jl
dHVybiBhLndhPyhiLmhhfHwoYi5oYT1uZXcgYS53YShiLnZhbHVlKSksYi5oYSk6Yi52YWx1
ZX07QWkucHJvdG90eXBlLmdldD1mdW5jdGlvbihhKXtpZihhPXRoaXMuaGFbYS50b1N0cmlu
ZygpXSlyZXR1cm4gRGkodGhpcyxhKX07QWkucHJvdG90eXBlLmhhcz1mdW5jdGlvbihhKXty
ZXR1cm4gYS50b1N0cmluZygpaW4gdGhpcy5oYX07dmFyIEJpPWZ1bmN0aW9uKGEpe2E9YS5o
YTt2YXIgYj1bXSxjO2ZvcihjIGluIGEpT2JqZWN0LnByb3RvdHlwZS5oYXNPd25Qcm9wZXJ0
eS5jYWxsKGEsYykmJmIucHVzaChjKTtyZXR1cm4gYn0semk9ZnVuY3Rpb24oYSxiKXt0aGlz
LmtleT1hO3RoaXMudmFsdWU9Yjt0aGlzLmhhPXZvaWQgMH07DQp2YXIgR2ksWWksYWo7Xy5F
aT1mdW5jdGlvbihhLGIpe3RoaXMuRGg9YTt0aGlzLnVjPWI7dGhpcy5UbD0wfTtfLng9ZnVu
Y3Rpb24oKXt9O18uRmk9ImZ1bmN0aW9uIj09dHlwZW9mIFVpbnQ4QXJyYXk7DQpfLnk9ZnVu
Y3Rpb24oYSxiLGMsZCxlLGYpe2EuaGE9bnVsbDtifHwoYj1jP1tjXTpbXSk7YS5OYj1jP1N0
cmluZyhjKTp2b2lkIDA7YS5BYT0wPT09Yz8tMTowO2EudGE9YjthOntjPWEudGEubGVuZ3Ro
O2I9LTE7aWYoYyYmKGI9Yy0xLGM9YS50YVtiXSwhKG51bGw9PT1jfHwib2JqZWN0IiE9dHlw
ZW9mIGN8fF8uWmEoYyl8fF8uRmkmJmMgaW5zdGFuY2VvZiBVaW50OEFycmF5KSkpe2EuSWE9
Yi1hLkFhO2Eua2E9YzticmVhayBhfS0xPGQ/KGEuSWE9TWF0aC5tYXgoZCxiKzEtYS5BYSks
YS5rYT1udWxsKTphLklhPU51bWJlci5NQVhfVkFMVUV9YS5OYT17fTtpZihlKWZvcihkPTA7
ZDxlLmxlbmd0aDtkKyspYj1lW2RdLGI8YS5JYT8oYis9YS5BYSxhLnRhW2JdPWEudGFbYl18
fEdpKTooXy5IaShhKSxhLmthW2JdPWEua2FbYl18fEdpKTtpZihmJiZmLmxlbmd0aClmb3Io
ZD0wO2Q8Zi5sZW5ndGg7ZCsrKV8uSWkoYSxmW2RdKX07R2k9W107DQpfLkhpPWZ1bmN0aW9u
KGEpe3ZhciBiPWEuSWErYS5BYTthLnRhW2JdfHwoYS5rYT1hLnRhW2JdPXt9KX07Xy5BPWZ1
bmN0aW9uKGEsYil7aWYoYjxhLklhKXtiKz1hLkFhO3ZhciBjPWEudGFbYl07cmV0dXJuIGM9
PT1HaT9hLnRhW2JdPVtdOmN9aWYoYS5rYSlyZXR1cm4gYz1hLmthW2JdLGM9PT1HaT9hLmth
W2JdPVtdOmN9O18uSmk9ZnVuY3Rpb24oYSxiKXthPV8uQShhLGIpO3JldHVybiBudWxsPT1h
P2E6K2F9O18uQj1mdW5jdGlvbihhLGIpe2E9Xy5BKGEsYik7cmV0dXJuIG51bGw9PWE/YToh
IWF9O18uS2k9ZnVuY3Rpb24oYSxiLGMpe2E9Xy5BKGEsYik7cmV0dXJuIG51bGw9PWE/Yzph
fTtfLkxpPWZ1bmN0aW9uKGEsYixjKXthLmhhfHwoYS5oYT17fSk7aWYoYiBpbiBhLmhhKXJl
dHVybiBhLmhhW2JdO3ZhciBkPV8uQShhLGIpO2R8fChkPVtdLF8uRChhLGIsZCkpO3JldHVy
biBhLmhhW2JdPW5ldyBBaShkLGMpfTsNCl8uRD1mdW5jdGlvbihhLGIsYyl7YjxhLklhP2Eu
dGFbYithLkFhXT1jOihfLkhpKGEpLGEua2FbYl09Yyk7cmV0dXJuIGF9O18ub2E9ZnVuY3Rp
b24oYSxiLGMsZCl7YyE9PWQ/Xy5EKGEsYixjKTphLnRhW2IrYS5BYV09bnVsbDtyZXR1cm4g
YX07Xy5NaT1mdW5jdGlvbihhLGIpe18uQShhLDEpLnB1c2goYik7cmV0dXJuIGF9O18uTmk9
ZnVuY3Rpb24oYSxiLGMsZCl7KGM9Xy5JaShhLGMpKSYmYyE9PWImJnZvaWQgMCE9PWQmJihh
LmhhJiZjIGluIGEuaGEmJihhLmhhW2NdPXZvaWQgMCksXy5EKGEsYyx2b2lkIDApKTtyZXR1
cm4gXy5EKGEsYixkKX07Xy5JaT1mdW5jdGlvbihhLGIpe2Zvcih2YXIgYyxkLGU9MDtlPGIu
bGVuZ3RoO2UrKyl7dmFyIGY9YltlXSxnPV8uQShhLGYpO251bGwhPWcmJihjPWYsZD1nLF8u
RChhLGYsdm9pZCAwKSl9cmV0dXJuIGM/KF8uRChhLGMsZCksYyk6MH07DQpfLkY9ZnVuY3Rp
b24oYSxiLGMpe2EuaGF8fChhLmhhPXt9KTtpZighYS5oYVtjXSl7dmFyIGQ9Xy5BKGEsYyk7
ZCYmKGEuaGFbY109bmV3IGIoZCkpfXJldHVybiBhLmhhW2NdfTtfLlBpPWZ1bmN0aW9uKGEs
YixjKXtfLk9pKGEsYixjKTtiPWEuaGFbY107Yj09R2kmJihiPWEuaGFbY109W10pO3JldHVy
biBifTtfLk9pPWZ1bmN0aW9uKGEsYixjKXthLmhhfHwoYS5oYT17fSk7aWYoIWEuaGFbY10p
e2Zvcih2YXIgZD1fLkEoYSxjKSxlPVtdLGY9MDtmPGQubGVuZ3RoO2YrKyllW2ZdPW5ldyBi
KGRbZl0pO2EuaGFbY109ZX19O18uUWk9ZnVuY3Rpb24oYSxiLGMpe2EuaGF8fChhLmhhPXt9
KTt2YXIgZD1jP2MuQWQoKTpjO2EuaGFbYl09YztyZXR1cm4gXy5EKGEsYixkKX07Xy5SaT1m
dW5jdGlvbihhLGIsYyxkKXthLmhhfHwoYS5oYT17fSk7dmFyIGU9ZD9kLkFkKCk6ZDthLmhh
W2JdPWQ7cmV0dXJuIF8uTmkoYSxiLGMsZSl9Ow0KXy5TaT1mdW5jdGlvbihhLGIsYyl7YS5o
YXx8KGEuaGE9e30pO2M9Y3x8W107Zm9yKHZhciBkPVtdLGU9MDtlPGMubGVuZ3RoO2UrKylk
W2VdPWNbZV0uQWQoKTthLmhhW2JdPWM7cmV0dXJuIF8uRChhLGIsZCl9O1lpPWZ1bmN0aW9u
KGEpe2lmKGEuaGEpZm9yKHZhciBiIGluIGEuaGEpe3ZhciBjPWEuaGFbYl07aWYoXy5aYShj
KSlmb3IodmFyIGQ9MDtkPGMubGVuZ3RoO2QrKyljW2RdJiZjW2RdLkFkKCk7ZWxzZSBjJiZj
LkFkKCl9fTtfLngucHJvdG90eXBlLkFkPWZ1bmN0aW9uKCl7WWkodGhpcyk7cmV0dXJuIHRo
aXMudGF9Ow0KXy54LnByb3RvdHlwZS5UZD1fLkZpP2Z1bmN0aW9uKCl7dmFyIGE9VWludDhB
cnJheS5wcm90b3R5cGUudG9KU09OO1VpbnQ4QXJyYXkucHJvdG90eXBlLnRvSlNPTj1mdW5j
dGlvbigpe3JldHVybiBfLnlpKHRoaXMpfTt0cnl7cmV0dXJuIEpTT04uc3RyaW5naWZ5KHRo
aXMudGEmJnRoaXMuQWQoKSxaaSl9ZmluYWxseXtVaW50OEFycmF5LnByb3RvdHlwZS50b0pT
T049YX19OmZ1bmN0aW9uKCl7cmV0dXJuIEpTT04uc3RyaW5naWZ5KHRoaXMudGEmJnRoaXMu
QWQoKSxaaSl9O3ZhciBaaT1mdW5jdGlvbihhLGIpe3JldHVybiJudW1iZXIiIT09dHlwZW9m
IGJ8fCFpc05hTihiKSYmSW5maW5pdHkhPT1iJiYtSW5maW5pdHkhPT1iP2I6U3RyaW5nKGIp
fTtfLngucHJvdG90eXBlLnRvU3RyaW5nPWZ1bmN0aW9uKCl7WWkodGhpcyk7cmV0dXJuIHRo
aXMudGEudG9TdHJpbmcoKX07DQpfLngucHJvdG90eXBlLmdldEV4dGVuc2lvbj1mdW5jdGlv
bihhKXtpZih0aGlzLmthKXt0aGlzLmhhfHwodGhpcy5oYT17fSk7dmFyIGI9YS5EaDtpZihh
LlRsKXtpZihhLnVjKXJldHVybiB0aGlzLmhhW2JdfHwodGhpcy5oYVtiXT0oMCxfLnNiKSh0
aGlzLmthW2JdfHxbXSxmdW5jdGlvbihjKXtyZXR1cm4gbmV3IGEudWMoYyl9KSksdGhpcy5o
YVtiXX1lbHNlIGlmKGEudWMpcmV0dXJuIXRoaXMuaGFbYl0mJnRoaXMua2FbYl0mJih0aGlz
LmhhW2JdPW5ldyBhLnVjKHRoaXMua2FbYl0pKSx0aGlzLmhhW2JdO3JldHVybiB0aGlzLmth
W2JdfX07Xy54LnByb3RvdHlwZS5jbG9uZT1mdW5jdGlvbigpe3JldHVybiBfLiRpKHRoaXMp
fTtfLiRpPWZ1bmN0aW9uKGEpe3JldHVybiBuZXcgYS5jb25zdHJ1Y3RvcihhaihhLkFkKCkp
KX07DQphaj1mdW5jdGlvbihhKXtpZihfLlphKGEpKXtmb3IodmFyIGI9QXJyYXkoYS5sZW5n
dGgpLGM9MDtjPGEubGVuZ3RoO2MrKyl7dmFyIGQ9YVtjXTtudWxsIT1kJiYoYltjXT0ib2Jq
ZWN0Ij09dHlwZW9mIGQ/YWooZCk6ZCl9cmV0dXJuIGJ9aWYoXy5GaSYmYSBpbnN0YW5jZW9m
IFVpbnQ4QXJyYXkpcmV0dXJuIG5ldyBVaW50OEFycmF5KGEpO2I9e307Zm9yKGMgaW4gYSlk
PWFbY10sbnVsbCE9ZCYmKGJbY109Im9iamVjdCI9PXR5cGVvZiBkP2FqKGQpOmQpO3JldHVy
biBifTtfLmJqPXt9Ow0KXy5jaj1uZXcgV2Vha01hcDtfLmRqPW5ldyBXZWFrTWFwOw0KXy5l
aj1mdW5jdGlvbihhKXt0aGlzLkIyPWF9O18uZWoucHJvdG90eXBlLnRvU3RyaW5nPWZ1bmN0
aW9uKCl7cmV0dXJuIHRoaXMuQjJ9O18uZmo9ZnVuY3Rpb24oYSl7cmV0dXJuIG5ldyBfLmVq
KGEpfTsNCl8uZ2o9ZnVuY3Rpb24oYSl7dGhpcy5pZD1hfTtfLmdqLnByb3RvdHlwZS50b1N0
cmluZz1mdW5jdGlvbigpe3JldHVybiB0aGlzLmlkfTsNCl8uaGo9ZnVuY3Rpb24oYSxiKXt0
aGlzLnR5cGU9YSBpbnN0YW5jZW9mIF8uZ2o/U3RyaW5nKGEpOmE7dGhpcy50YT10aGlzLnRh
cmdldD1iO3RoaXMuZGVmYXVsdFByZXZlbnRlZD10aGlzLndhPSExO3RoaXMuRk49ITB9O18u
aGoucHJvdG90eXBlLnN0b3BQcm9wYWdhdGlvbj1mdW5jdGlvbigpe3RoaXMud2E9ITB9O18u
aGoucHJvdG90eXBlLnByZXZlbnREZWZhdWx0PWZ1bmN0aW9uKCl7dGhpcy5kZWZhdWx0UHJl
dmVudGVkPSEwO3RoaXMuRk49ITF9Ow0KdmFyIGlqLGxiYSxtYmE7Xy5rYmE9IV8ucmV8fF8u
RmUoOSk7aWo9IV8ucmV8fF8uRmUoOSk7bGJhPV8ucmUmJiFfLkVlKCI5Iik7bWJhPWZ1bmN0
aW9uKCl7aWYoIV8ucWEuYWRkRXZlbnRMaXN0ZW5lcnx8IU9iamVjdC5kZWZpbmVQcm9wZXJ0
eSlyZXR1cm4hMTt2YXIgYT0hMSxiPU9iamVjdC5kZWZpbmVQcm9wZXJ0eSh7fSwicGFzc2l2
ZSIse2dldDpmdW5jdGlvbigpe2E9ITB9fSk7dHJ5e18ucWEuYWRkRXZlbnRMaXN0ZW5lcigi
dGVzdCIsXy5WYSxiKSxfLnFhLnJlbW92ZUV2ZW50TGlzdGVuZXIoInRlc3QiLF8uVmEsYil9
Y2F0Y2goYyl7fXJldHVybiBhfSgpOw0KXy5qaj1mdW5jdGlvbihhLGIpe18uaGouY2FsbCh0
aGlzLGE/YS50eXBlOiIiKTt0aGlzLnJlbGF0ZWRUYXJnZXQ9dGhpcy50YT10aGlzLnRhcmdl
dD1udWxsO3RoaXMuYnV0dG9uPXRoaXMuc2NyZWVuWT10aGlzLnNjcmVlblg9dGhpcy5jbGll
bnRZPXRoaXMuY2xpZW50WD0wO3RoaXMua2V5PSIiO3RoaXMuaGE9MDt0aGlzLm1ldGFLZXk9
dGhpcy5zaGlmdEtleT10aGlzLmFsdEtleT10aGlzLmN0cmxLZXk9ITE7dGhpcy5zdGF0ZT1u
dWxsO3RoaXMucG9pbnRlcklkPTA7dGhpcy5wb2ludGVyVHlwZT0iIjt0aGlzLmthPW51bGw7
YSYmdGhpcy5pbml0KGEsYil9O18udShfLmpqLF8uaGopO3ZhciBuYmE9ezI6InRvdWNoIiwz
OiJwZW4iLDQ6Im1vdXNlIn07DQpfLmpqLnByb3RvdHlwZS5pbml0PWZ1bmN0aW9uKGEsYil7
dmFyIGM9dGhpcy50eXBlPWEudHlwZSxkPWEuY2hhbmdlZFRvdWNoZXMmJmEuY2hhbmdlZFRv
dWNoZXMubGVuZ3RoP2EuY2hhbmdlZFRvdWNoZXNbMF06bnVsbDt0aGlzLnRhcmdldD1hLnRh
cmdldHx8YS5zcmNFbGVtZW50O3RoaXMudGE9YjsoYj1hLnJlbGF0ZWRUYXJnZXQpP18udWUm
JihfLmplKGIsIm5vZGVOYW1lIil8fChiPW51bGwpKToibW91c2VvdmVyIj09Yz9iPWEuZnJv
bUVsZW1lbnQ6Im1vdXNlb3V0Ij09YyYmKGI9YS50b0VsZW1lbnQpO3RoaXMucmVsYXRlZFRh
cmdldD1iO2Q/KHRoaXMuY2xpZW50WD12b2lkIDAhPT1kLmNsaWVudFg/ZC5jbGllbnRYOmQu
cGFnZVgsdGhpcy5jbGllbnRZPXZvaWQgMCE9PWQuY2xpZW50WT9kLmNsaWVudFk6ZC5wYWdl
WSx0aGlzLnNjcmVlblg9ZC5zY3JlZW5YfHwwLHRoaXMuc2NyZWVuWT1kLnNjcmVlbll8fDAp
Oih0aGlzLmNsaWVudFg9dm9pZCAwIT09YS5jbGllbnRYP2EuY2xpZW50WDoNCmEucGFnZVgs
dGhpcy5jbGllbnRZPXZvaWQgMCE9PWEuY2xpZW50WT9hLmNsaWVudFk6YS5wYWdlWSx0aGlz
LnNjcmVlblg9YS5zY3JlZW5YfHwwLHRoaXMuc2NyZWVuWT1hLnNjcmVlbll8fDApO3RoaXMu
YnV0dG9uPWEuYnV0dG9uO3RoaXMuaGE9YS5rZXlDb2RlfHwwO3RoaXMua2V5PWEua2V5fHwi
Ijt0aGlzLmN0cmxLZXk9YS5jdHJsS2V5O3RoaXMuYWx0S2V5PWEuYWx0S2V5O3RoaXMuc2hp
ZnRLZXk9YS5zaGlmdEtleTt0aGlzLm1ldGFLZXk9YS5tZXRhS2V5O3RoaXMucG9pbnRlcklk
PWEucG9pbnRlcklkfHwwO3RoaXMucG9pbnRlclR5cGU9InN0cmluZyI9PT10eXBlb2YgYS5w
b2ludGVyVHlwZT9hLnBvaW50ZXJUeXBlOm5iYVthLnBvaW50ZXJUeXBlXXx8IiI7dGhpcy5z
dGF0ZT1hLnN0YXRlO3RoaXMua2E9YTthLmRlZmF1bHRQcmV2ZW50ZWQmJnRoaXMucHJldmVu
dERlZmF1bHQoKX07DQpfLmpqLnByb3RvdHlwZS5zdG9wUHJvcGFnYXRpb249ZnVuY3Rpb24o
KXtfLmpqLlRiLnN0b3BQcm9wYWdhdGlvbi5jYWxsKHRoaXMpO3RoaXMua2Euc3RvcFByb3Bh
Z2F0aW9uP3RoaXMua2Euc3RvcFByb3BhZ2F0aW9uKCk6dGhpcy5rYS5jYW5jZWxCdWJibGU9
ITB9O18uamoucHJvdG90eXBlLnByZXZlbnREZWZhdWx0PWZ1bmN0aW9uKCl7Xy5qai5UYi5w
cmV2ZW50RGVmYXVsdC5jYWxsKHRoaXMpO3ZhciBhPXRoaXMua2E7aWYoYS5wcmV2ZW50RGVm
YXVsdClhLnByZXZlbnREZWZhdWx0KCk7ZWxzZSBpZihhLnJldHVyblZhbHVlPSExLGxiYSl0
cnl7aWYoYS5jdHJsS2V5fHwxMTI8PWEua2V5Q29kZSYmMTIzPj1hLmtleUNvZGUpYS5rZXlD
b2RlPS0xfWNhdGNoKGIpe319Ow0KdmFyIGxqLG9iYTtfLmtqPSJjbG9zdXJlX2xpc3RlbmFi
bGVfIisoMUU2Kk1hdGgucmFuZG9tKCl8MCk7bGo9ZnVuY3Rpb24oYSl7cmV0dXJuISghYXx8
IWFbXy5ral0pfTtvYmE9MDsNCnZhciBwYmE9ZnVuY3Rpb24oYSxiLGMsZCxlKXt0aGlzLmxp
c3RlbmVyPWE7dGhpcy5oYT1udWxsO3RoaXMuc3JjPWI7dGhpcy50eXBlPWM7dGhpcy5jYXB0
dXJlPSEhZDt0aGlzLkR0PWU7dGhpcy5rZXk9KytvYmE7dGhpcy5Bbj10aGlzLlN2PSExfSxt
aj1mdW5jdGlvbihhKXthLkFuPSEwO2EubGlzdGVuZXI9bnVsbDthLmhhPW51bGw7YS5zcmM9
bnVsbDthLkR0PW51bGx9Ow0KdmFyIG5qPWZ1bmN0aW9uKGEpe3RoaXMuc3JjPWE7dGhpcy5o
YT17fTt0aGlzLmthPTB9O25qLnByb3RvdHlwZS5hZGQ9ZnVuY3Rpb24oYSxiLGMsZCxlKXt2
YXIgZj1hLnRvU3RyaW5nKCk7YT10aGlzLmhhW2ZdO2F8fChhPXRoaXMuaGFbZl09W10sdGhp
cy5rYSsrKTt2YXIgZz1vaihhLGIsZCxlKTstMTxnPyhiPWFbZ10sY3x8KGIuU3Y9ITEpKToo
Yj1uZXcgcGJhKGIsdGhpcy5zcmMsZiwhIWQsZSksYi5Tdj1jLGEucHVzaChiKSk7cmV0dXJu
IGJ9O25qLnByb3RvdHlwZS5yZW1vdmU9ZnVuY3Rpb24oYSxiLGMsZCl7YT1hLnRvU3RyaW5n
KCk7aWYoIShhIGluIHRoaXMuaGEpKXJldHVybiExO3ZhciBlPXRoaXMuaGFbYV07Yj1vaihl
LGIsYyxkKTtyZXR1cm4tMTxiPyhtaihlW2JdKSxfLkZiKGUsYiksMD09ZS5sZW5ndGgmJihk
ZWxldGUgdGhpcy5oYVthXSx0aGlzLmthLS0pLCEwKTohMX07DQp2YXIgcGo9ZnVuY3Rpb24o
YSxiKXt2YXIgYz1iLnR5cGU7YyBpbiBhLmhhJiZfLkdiKGEuaGFbY10sYikmJihtaihiKSww
PT1hLmhhW2NdLmxlbmd0aCYmKGRlbGV0ZSBhLmhhW2NdLGEua2EtLSkpfTtuai5wcm90b3R5
cGUueHE9ZnVuY3Rpb24oYSxiLGMsZCl7YT10aGlzLmhhW2EudG9TdHJpbmcoKV07dmFyIGU9
LTE7YSYmKGU9b2ooYSxiLGMsZCkpO3JldHVybi0xPGU/YVtlXTpudWxsfTtuai5wcm90b3R5
cGUuaGFzTGlzdGVuZXI9ZnVuY3Rpb24oYSxiKXt2YXIgYz12b2lkIDAhPT1hLGQ9Yz9hLnRv
U3RyaW5nKCk6IiIsZT12b2lkIDAhPT1iO3JldHVybiBfLnNjKHRoaXMuaGEsZnVuY3Rpb24o
Zil7Zm9yKHZhciBnPTA7ZzxmLmxlbmd0aDsrK2cpaWYoIShjJiZmW2ddLnR5cGUhPWR8fGUm
JmZbZ10uY2FwdHVyZSE9YikpcmV0dXJuITA7cmV0dXJuITF9KX07DQp2YXIgb2o9ZnVuY3Rp
b24oYSxiLGMsZCl7Zm9yKHZhciBlPTA7ZTxhLmxlbmd0aDsrK2Upe3ZhciBmPWFbZV07aWYo
IWYuQW4mJmYubGlzdGVuZXI9PWImJmYuY2FwdHVyZT09ISFjJiZmLkR0PT1kKXJldHVybiBl
fXJldHVybi0xfTsNCnZhciBxaixyaixzaix3aixxYmEseWosRGosQ2osemoseGosRWosdmo7
cWo9ImNsb3N1cmVfbG1fIisoMUU2Kk1hdGgucmFuZG9tKCl8MCk7cmo9e307c2o9MDtfLnVq
PWZ1bmN0aW9uKGEsYixjLGQsZSl7aWYoZCYmZC5vbmNlKXJldHVybiBfLnRqKGEsYixjLGQs
ZSk7aWYoXy5aYShiKSl7Zm9yKHZhciBmPTA7ZjxiLmxlbmd0aDtmKyspXy51aihhLGJbZl0s
YyxkLGUpO3JldHVybiBudWxsfWM9dmooYyk7cmV0dXJuIGxqKGEpP2EubGlzdGVuKGIsYyxf
LmJiKGQpPyEhZC5jYXB0dXJlOiEhZCxlKTp3aihhLGIsYywhMSxkLGUpfTsNCndqPWZ1bmN0
aW9uKGEsYixjLGQsZSxmKXtpZighYil0aHJvdyBFcnJvcigieiIpO3ZhciBnPV8uYmIoZSk/
ISFlLmNhcHR1cmU6ISFlLGg9eGooYSk7aHx8KGFbcWpdPWg9bmV3IG5qKGEpKTtjPWguYWRk
KGIsYyxkLGcsZik7aWYoYy5oYSlyZXR1cm4gYztkPXFiYSgpO2MuaGE9ZDtkLnNyYz1hO2Qu
bGlzdGVuZXI9YztpZihhLmFkZEV2ZW50TGlzdGVuZXIpbWJhfHwoZT1nKSx2b2lkIDA9PT1l
JiYoZT0hMSksYS5hZGRFdmVudExpc3RlbmVyKGIudG9TdHJpbmcoKSxkLGUpO2Vsc2UgaWYo
YS5hdHRhY2hFdmVudClhLmF0dGFjaEV2ZW50KHlqKGIudG9TdHJpbmcoKSksZCk7ZWxzZSBp
ZihhLmFkZExpc3RlbmVyJiZhLnJlbW92ZUxpc3RlbmVyKWEuYWRkTGlzdGVuZXIoZCk7ZWxz
ZSB0aHJvdyBFcnJvcigiQSIpO3NqKys7cmV0dXJuIGN9Ow0KcWJhPWZ1bmN0aW9uKCl7dmFy
IGE9emosYj1paj9mdW5jdGlvbihjKXtyZXR1cm4gYS5jYWxsKGIuc3JjLGIubGlzdGVuZXIs
Yyl9OmZ1bmN0aW9uKGMpe2M9YS5jYWxsKGIuc3JjLGIubGlzdGVuZXIsYyk7aWYoIWMpcmV0
dXJuIGN9O3JldHVybiBifTtfLnRqPWZ1bmN0aW9uKGEsYixjLGQsZSl7aWYoXy5aYShiKSl7
Zm9yKHZhciBmPTA7ZjxiLmxlbmd0aDtmKyspXy50aihhLGJbZl0sYyxkLGUpO3JldHVybiBu
dWxsfWM9dmooYyk7cmV0dXJuIGxqKGEpP2EuJGwoYixjLF8uYmIoZCk/ISFkLmNhcHR1cmU6
ISFkLGUpOndqKGEsYixjLCEwLGQsZSl9O18uQWo9ZnVuY3Rpb24oYSxiLGMsZCxlKXtpZihf
LlphKGIpKWZvcih2YXIgZj0wO2Y8Yi5sZW5ndGg7ZisrKV8uQWooYSxiW2ZdLGMsZCxlKTtl
bHNlIGQ9Xy5iYihkKT8hIWQuY2FwdHVyZTohIWQsYz12aihjKSxsaihhKT9hLmVrKGIsYyxk
LGUpOmEmJihhPXhqKGEpKSYmKGI9YS54cShiLGMsZCxlKSkmJl8uQmooYil9Ow0KXy5Caj1m
dW5jdGlvbihhKXtpZigibnVtYmVyIiE9PXR5cGVvZiBhJiZhJiYhYS5Bbil7dmFyIGI9YS5z
cmM7aWYobGooYikpYi4kdShhKTtlbHNle3ZhciBjPWEudHlwZSxkPWEuaGE7Yi5yZW1vdmVF
dmVudExpc3RlbmVyP2IucmVtb3ZlRXZlbnRMaXN0ZW5lcihjLGQsYS5jYXB0dXJlKTpiLmRl
dGFjaEV2ZW50P2IuZGV0YWNoRXZlbnQoeWooYyksZCk6Yi5hZGRMaXN0ZW5lciYmYi5yZW1v
dmVMaXN0ZW5lciYmYi5yZW1vdmVMaXN0ZW5lcihkKTtzai0tOyhjPXhqKGIpKT8ocGooYyxh
KSwwPT1jLmthJiYoYy5zcmM9bnVsbCxiW3FqXT1udWxsKSk6bWooYSl9fX07eWo9ZnVuY3Rp
b24oYSl7cmV0dXJuIGEgaW4gcmo/cmpbYV06cmpbYV09Im9uIithfTsNCkRqPWZ1bmN0aW9u
KGEsYixjLGQpe3ZhciBlPSEwO2lmKGE9eGooYSkpaWYoYj1hLmhhW2IudG9TdHJpbmcoKV0p
Zm9yKGI9Yi5jb25jYXQoKSxhPTA7YTxiLmxlbmd0aDthKyspe3ZhciBmPWJbYV07ZiYmZi5j
YXB0dXJlPT1jJiYhZi5BbiYmKGY9Q2ooZixkKSxlPWUmJiExIT09Zil9cmV0dXJuIGV9O0Nq
PWZ1bmN0aW9uKGEsYil7dmFyIGM9YS5saXN0ZW5lcixkPWEuRHR8fGEuc3JjO2EuU3YmJl8u
QmooYSk7cmV0dXJuIGMuY2FsbChkLGIpfTsNCnpqPWZ1bmN0aW9uKGEsYil7aWYoYS5Bbily
ZXR1cm4hMDtpZighaWope3ZhciBjPWJ8fF8uVWEoIndpbmRvdy5ldmVudCIpO2I9bmV3IF8u
amooYyx0aGlzKTt2YXIgZD0hMDtpZighKDA+Yy5rZXlDb2RlfHx2b2lkIDAhPWMucmV0dXJu
VmFsdWUpKXthOnt2YXIgZT0hMTtpZigwPT1jLmtleUNvZGUpdHJ5e2Mua2V5Q29kZT0tMTti
cmVhayBhfWNhdGNoKGcpe2U9ITB9aWYoZXx8dm9pZCAwPT1jLnJldHVyblZhbHVlKWMucmV0
dXJuVmFsdWU9ITB9Yz1bXTtmb3IoZT1iLnRhO2U7ZT1lLnBhcmVudE5vZGUpYy5wdXNoKGUp
O2E9YS50eXBlO2ZvcihlPWMubGVuZ3RoLTE7IWIud2EmJjA8PWU7ZS0tKXtiLnRhPWNbZV07
dmFyIGY9RGooY1tlXSxhLCEwLGIpO2Q9ZCYmZn1mb3IoZT0wOyFiLndhJiZlPGMubGVuZ3Ro
O2UrKyliLnRhPWNbZV0sZj1EaihjW2VdLGEsITEsYiksZD1kJiZmfXJldHVybiBkfXJldHVy
biBDaihhLG5ldyBfLmpqKGIsdGhpcykpfTsNCnhqPWZ1bmN0aW9uKGEpe2E9YVtxal07cmV0
dXJuIGEgaW5zdGFuY2VvZiBuaj9hOm51bGx9O0VqPSJfX2Nsb3N1cmVfZXZlbnRzX2ZuXyIr
KDFFOSpNYXRoLnJhbmRvbSgpPj4+MCk7dmo9ZnVuY3Rpb24oYSl7aWYoXy5hYihhKSlyZXR1
cm4gYTthW0VqXXx8KGFbRWpdPWZ1bmN0aW9uKGIpe3JldHVybiBhLmhhbmRsZUV2ZW50KGIp
fSk7cmV0dXJuIGFbRWpdfTtNZihmdW5jdGlvbihhKXt6aj1hKHpqKX0pOw0KXy5Gaj1mdW5j
dGlvbigpe18uJGYuY2FsbCh0aGlzKTt0aGlzLkFsPW5ldyBuaih0aGlzKTt0aGlzLmlSPXRo
aXM7dGhpcy5LRD1udWxsfTtfLnUoXy5GaixfLiRmKTtfLkZqLnByb3RvdHlwZVtfLmtqXT0h
MDtfLms9Xy5Gai5wcm90b3R5cGU7Xy5rLmFDPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuS0R9
O18uay5nej1mdW5jdGlvbihhKXt0aGlzLktEPWF9O18uay5hZGRFdmVudExpc3RlbmVyPWZ1
bmN0aW9uKGEsYixjLGQpe18udWoodGhpcyxhLGIsYyxkKX07Xy5rLnJlbW92ZUV2ZW50TGlz
dGVuZXI9ZnVuY3Rpb24oYSxiLGMsZCl7Xy5Baih0aGlzLGEsYixjLGQpfTsNCl8uay5kaXNw
YXRjaEV2ZW50PWZ1bmN0aW9uKGEpe3ZhciBiLGM9dGhpcy5hQygpO2lmKGMpZm9yKGI9W107
YztjPWMuYUMoKSliLnB1c2goYyk7Yz10aGlzLmlSO3ZhciBkPWEudHlwZXx8YTtpZigic3Ry
aW5nIj09PXR5cGVvZiBhKWE9bmV3IF8uaGooYSxjKTtlbHNlIGlmKGEgaW5zdGFuY2VvZiBf
LmhqKWEudGFyZ2V0PWEudGFyZ2V0fHxjO2Vsc2V7dmFyIGU9YTthPW5ldyBfLmhqKGQsYyk7
Xy5FYyhhLGUpfWU9ITA7aWYoYilmb3IodmFyIGY9Yi5sZW5ndGgtMTshYS53YSYmMDw9Zjtm
LS0pe3ZhciBnPWEudGE9YltmXTtlPWcuTnMoZCwhMCxhKSYmZX1hLndhfHwoZz1hLnRhPWMs
ZT1nLk5zKGQsITAsYSkmJmUsYS53YXx8KGU9Zy5OcyhkLCExLGEpJiZlKSk7aWYoYilmb3Io
Zj0wOyFhLndhJiZmPGIubGVuZ3RoO2YrKylnPWEudGE9YltmXSxlPWcuTnMoZCwhMSxhKSYm
ZTtyZXR1cm4gZX07DQpfLmsuRGM9ZnVuY3Rpb24oKXtfLkZqLlRiLkRjLmNhbGwodGhpcyk7
dGhpcy5tTigpO3RoaXMuS0Q9bnVsbH07Xy5rLmxpc3Rlbj1mdW5jdGlvbihhLGIsYyxkKXty
ZXR1cm4gdGhpcy5BbC5hZGQoU3RyaW5nKGEpLGIsITEsYyxkKX07Xy5rLiRsPWZ1bmN0aW9u
KGEsYixjLGQpe3JldHVybiB0aGlzLkFsLmFkZChTdHJpbmcoYSksYiwhMCxjLGQpfTtfLmsu
ZWs9ZnVuY3Rpb24oYSxiLGMsZCl7cmV0dXJuIHRoaXMuQWwucmVtb3ZlKFN0cmluZyhhKSxi
LGMsZCl9O18uay4kdT1mdW5jdGlvbihhKXtwaih0aGlzLkFsLGEpfTtfLmsubU49ZnVuY3Rp
b24oKXtpZih0aGlzLkFsKXt2YXIgYT10aGlzLkFsLGI9MCxjO2ZvcihjIGluIGEuaGEpe2Zv
cih2YXIgZD1hLmhhW2NdLGU9MDtlPGQubGVuZ3RoO2UrKykrK2IsbWooZFtlXSk7ZGVsZXRl
IGEuaGFbY107YS5rYS0tfX19Ow0KXy5rLk5zPWZ1bmN0aW9uKGEsYixjKXthPXRoaXMuQWwu
aGFbU3RyaW5nKGEpXTtpZighYSlyZXR1cm4hMDthPWEuY29uY2F0KCk7Zm9yKHZhciBkPSEw
LGU9MDtlPGEubGVuZ3RoOysrZSl7dmFyIGY9YVtlXTtpZihmJiYhZi5BbiYmZi5jYXB0dXJl
PT1iKXt2YXIgZz1mLmxpc3RlbmVyLGg9Zi5EdHx8Zi5zcmM7Zi5TdiYmdGhpcy4kdShmKTtk
PSExIT09Zy5jYWxsKGgsYykmJmR9fXJldHVybiBkJiYwIT1jLkZOfTtfLmsueHE9ZnVuY3Rp
b24oYSxiLGMsZCl7cmV0dXJuIHRoaXMuQWwueHEoU3RyaW5nKGEpLGIsYyxkKX07Xy5rLmhh
c0xpc3RlbmVyPWZ1bmN0aW9uKGEsYil7cmV0dXJuIHRoaXMuQWwuaGFzTGlzdGVuZXIodm9p
ZCAwIT09YT9TdHJpbmcoYSk6dm9pZCAwLGIpfTsNCl8uR2o9ZnVuY3Rpb24oYSxiKXtfLkZq
LmNhbGwodGhpcyk7dGhpcy5rYT1hfHwxO3RoaXMuaGE9Ynx8Xy5xYTt0aGlzLnRhPSgwLF8u
cikodGhpcy5EVix0aGlzKTt0aGlzLndhPSgwLF8uZmIpKCl9O18udShfLkdqLF8uRmopO18u
az1fLkdqLnByb3RvdHlwZTtfLmsuZW5hYmxlZD0hMTtfLmsuUWo9bnVsbDtfLmsuc2V0SW50
ZXJ2YWw9ZnVuY3Rpb24oYSl7dGhpcy5rYT1hO3RoaXMuUWomJnRoaXMuZW5hYmxlZD8odGhp
cy5zdG9wKCksdGhpcy5zdGFydCgpKTp0aGlzLlFqJiZ0aGlzLnN0b3AoKX07DQpfLmsuRFY9
ZnVuY3Rpb24oKXtpZih0aGlzLmVuYWJsZWQpe3ZhciBhPSgwLF8uZmIpKCktdGhpcy53YTsw
PGEmJmE8LjgqdGhpcy5rYT90aGlzLlFqPXRoaXMuaGEuc2V0VGltZW91dCh0aGlzLnRhLHRo
aXMua2EtYSk6KHRoaXMuUWomJih0aGlzLmhhLmNsZWFyVGltZW91dCh0aGlzLlFqKSx0aGlz
LlFqPW51bGwpLHRoaXMuZGlzcGF0Y2hFdmVudCgidGljayIpLHRoaXMuZW5hYmxlZCYmKHRo
aXMuc3RvcCgpLHRoaXMuc3RhcnQoKSkpfX07Xy5rLnN0YXJ0PWZ1bmN0aW9uKCl7dGhpcy5l
bmFibGVkPSEwO3RoaXMuUWp8fCh0aGlzLlFqPXRoaXMuaGEuc2V0VGltZW91dCh0aGlzLnRh
LHRoaXMua2EpLHRoaXMud2E9KDAsXy5mYikoKSl9O18uay5zdG9wPWZ1bmN0aW9uKCl7dGhp
cy5lbmFibGVkPSExO3RoaXMuUWomJih0aGlzLmhhLmNsZWFyVGltZW91dCh0aGlzLlFqKSx0
aGlzLlFqPW51bGwpfTsNCl8uay5EYz1mdW5jdGlvbigpe18uR2ouVGIuRGMuY2FsbCh0aGlz
KTt0aGlzLnN0b3AoKTtkZWxldGUgdGhpcy5oYX07Xy5Iaj1mdW5jdGlvbihhLGIsYyl7aWYo
Xy5hYihhKSljJiYoYT0oMCxfLnIpKGEsYykpO2Vsc2UgaWYoYSYmImZ1bmN0aW9uIj09dHlw
ZW9mIGEuaGFuZGxlRXZlbnQpYT0oMCxfLnIpKGEuaGFuZGxlRXZlbnQsYSk7ZWxzZSB0aHJv
dyBFcnJvcigiQiIpO3JldHVybiAyMTQ3NDgzNjQ3PE51bWJlcihiKT8tMTpfLnFhLnNldFRp
bWVvdXQoYSxifHwwKX07Xy5Jaj1mdW5jdGlvbihhKXtfLnFhLmNsZWFyVGltZW91dChhKX07
Xy5qYT1mdW5jdGlvbihhLGIpe3ZhciBjPW51bGw7cmV0dXJuIF8ubWEobmV3IF8uZmgoZnVu
Y3Rpb24oZCxlKXtjPV8uSGooZnVuY3Rpb24oKXtkKGIpfSxhKTstMT09YyYmZShFcnJvcigi
QyIpKX0pLGZ1bmN0aW9uKGQpe18uSWooYyk7dGhyb3cgZDt9KX07DQpfLlBqPWZ1bmN0aW9u
KGEsYil7aWYoIWImJmEuaGFzQXR0cmlidXRlKCJqc3NoYWRvdyIpKXJldHVybiBudWxsO2Zv
cihiPTA7YT1fLk9qKGEpOyl7aWYoYS5oYXNBdHRyaWJ1dGUoImpzc2xvdCIpKWIrPTE7ZWxz
ZSBpZihhLmhhc0F0dHJpYnV0ZSgianNzaGFkb3ciKSYmMDxiKXstLWI7Y29udGludWV9aWYo
MD49YilyZXR1cm4gYX1yZXR1cm4gbnVsbH07Xy5Paj1mdW5jdGlvbihhKXtyZXR1cm4gYT9h
Ll9fb3duZXI/YS5fX293bmVyOmEucGFyZW50Tm9kZSYmMTE9PT1hLnBhcmVudE5vZGUubm9k
ZVR5cGU/YS5wYXJlbnROb2RlLmhvc3Q6Xy5EZihhKTpudWxsfTtfLlFqPWZ1bmN0aW9uKGEs
YixjLGQpe2ZvcihjfHwoYT1fLlBqKGEsZCkpO2E7KXtpZihiKGEpKXJldHVybiBhO2E9Xy5Q
aihhLGQpfXJldHVybiBudWxsfTsNCnZhciByYmE9ZnVuY3Rpb24oYSxiLGMpe3RoaXMuYWN0
aW9uPWE7dGhpcy50YXJnZXQ9Ynx8bnVsbDt0aGlzLlZkPWN8fG51bGx9LFJqPWZ1bmN0aW9u
KCl7dGhpcy5oYT1bXX0sc2JhPS9eXC4/KFx3KykoPzpcKChbXHd8PV0rKVwpKT8kLyxTaj17
fSx0YmE9ZnVuY3Rpb24oYSl7dmFyIGI9U2pbYV07aWYoYilyZXR1cm4gYjtiPWEuc3BsaXQo
IiwiKTtmb3IodmFyIGM9bmV3IFJqLGQ9MDtkPGIubGVuZ3RoO2QrKyl7dmFyIGU9KDAsXy5X
YikoYltkXSksZj1lLm1hdGNoKHNiYSk7aWYoIWYpdGhyb3cgRXJyb3IoIkRgIitlKTt2YXIg
Zz1lPW51bGw7aWYoZlsyXSlmb3IodmFyIGg9ZlsyXS5zcGxpdCgifCIpLGw9MDtsPGgubGVu
Z3RoO2wrKyl7dmFyIG49aFtsXS5zcGxpdCgiPSIpO25bMV0/KGV8fChlPXt9KSxlW25bMF1d
PW5bMV0pOmd8fChnPW5bMF0pfWMuaGEucHVzaChuZXcgcmJhKGZbMV0sZyxlKSl9cmV0dXJu
IFNqW2FdPWN9O1JqLnByb3RvdHlwZS5nZXQ9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5oYX07
DQpfLlRqPWZ1bmN0aW9uKGEsYil7dmFyIGM9YS5fX3dpejtjfHwoYz1hLl9fd2l6PXt9KTty
ZXR1cm4gY1tiXX07Xy5Vaj1mdW5jdGlvbihhLGIpe3JldHVybiBfLlFqKGEsZnVuY3Rpb24o
Yyl7cmV0dXJuIF8uQ2YoYykmJmMuaGFzQXR0cmlidXRlKCJqc2NvbnRyb2xsZXIiKX0sYiwh
MCl9Ow0KXy5Waj1mdW5jdGlvbihhLGIsYyxkKXt0aGlzLnR5cGU9YS50eXBlO3RoaXMuZXZl
bnQ9YTt0aGlzLnRhcmdldEVsZW1lbnQ9Yjt0aGlzLnlkPWM7dGhpcy5kYXRhPWEuZGF0YTt0
aGlzLnNvdXJjZT1kfTsNCnZhciB1YmE7dWJhPXt9O18uV2o9ZnVuY3Rpb24oYSl7Il9fanNh
Y3Rpb24iaW4gYSYmZGVsZXRlIGEuX19qc2FjdGlvbn07DQp2YXIgWGosdmJhLFlqO1hqPXt9
O18uWmo9ZnVuY3Rpb24oYSxiLGMsZCl7dmFyIGU9KDAsXy5XYikoYS5nZXRBdHRyaWJ1dGUo
ImpzYWN0aW9uIil8fCIiKTtjPSgwLF8ucikoYyxkfHxudWxsKTt2YXIgZjtiIGluc3RhbmNl
b2YgQXJyYXk/Zj1iOmY9W2JdO2I9Xy5DYShmKTtmb3IoZD1iLm5leHQoKTshZC5kb25lO2Q9
Yi5uZXh0KCkpe2Q9ZC52YWx1ZTtpZighWWooZSxkKSl7ZSYmIS87JC8udGVzdChlKSYmKGUr
PSI7Iik7ZSs9ZCsiOi5DTElFTlQiO3ZhciBnPWE7Zy5zZXRBdHRyaWJ1dGUoImpzYWN0aW9u
IixlKTtfLldqKGcpfShnPV8uVGooYSxkKSk/Zy5wdXNoKGMpOmEuX193aXpbZF09W2NdfXJl
dHVybntWVDpmLGNiOmMsQ2E6YX19O18uYms9ZnVuY3Rpb24oYSxiLGMsZCxlKXt2YXIgZj1f
LmFrKF8uVmUoYSkpO2E9e3R5cGU6Yix0YXJnZXQ6YSxidWJibGVzOnZvaWQgMCE9ZD9kOiEw
fTt2b2lkIDAhPT1jJiYoYS5kYXRhPWMpO2UmJl8uRWMoYSxlKTtmLnRyaWdnZXIoYSl9Ow0K
Xy5jaz1mdW5jdGlvbihhLGIsYyxkLGUpe2E9dmJhKGEsYik7KDAsXy5wYikoYSxmdW5jdGlv
bihmKXt2YXIgZz1lO2QmJihnPWd8fHt9LGcuX19zb3VyY2U9ZCk7Xy5iayhmLGIsYywhMSxn
KX0pfTt2YmE9ZnVuY3Rpb24oYSxiKXt2YXIgYz1bXSxkPWZ1bmN0aW9uKGUpe3ZhciBmPWZ1
bmN0aW9uKGcpe18uZGouaGFzKGcpJiYoMCxfLnBiKShfLmRqLmdldChnKSxmdW5jdGlvbiho
KXtfLkVmKGEsaCl8fGQoaCl9KTtfLmRrKGcsYikmJmMucHVzaChnKX07KDAsXy5wYikoZS5x
dWVyeVNlbGVjdG9yQWxsKCdbanNhY3Rpb24qPSInK2IrJyJdLFtqc2NvbnRyb2xsZXJdW19f
SVNfT1dORVJdJyksZik7Xy5DZihlKSYmZihlKX07ZChhKTtyZXR1cm4gY307Xy5kaz1mdW5j
dGlvbihhLGIpe3ZhciBjPWEuX19qc2FjdGlvbjtyZXR1cm4gYz8hIWNbYl06WWooYS5nZXRB
dHRyaWJ1dGUoImpzYWN0aW9uIiksYil9Ow0KWWo9ZnVuY3Rpb24oYSxiKXtpZighYSlyZXR1
cm4hMTt2YXIgYz11YmFbYV07aWYoYylyZXR1cm4hIWNbYl07Yz1YaltiXTtjfHwoYz1uZXcg
UmVnRXhwKCIoXlxccyoiK2IrIlxccyo6fFtcXHM7XSIrYisiXFxzKjopIiksWGpbYl09Yyk7
cmV0dXJuIGMudGVzdChhKX07Xy5haz1mdW5jdGlvbihhKXtyZXR1cm4gYS5fX3dpemRpc3Bh
dGNoZXJ9Ow0KdmFyIGVrO2VrPWZ1bmN0aW9uKGEpe3JldHVybiJzdHJpbmciPT10eXBlb2Yg
YS5jbGFzc05hbWU/YS5jbGFzc05hbWU6YS5nZXRBdHRyaWJ1dGUmJmEuZ2V0QXR0cmlidXRl
KCJjbGFzcyIpfHwiIn07Xy5maz1mdW5jdGlvbihhKXtyZXR1cm4gYS5jbGFzc0xpc3Q/YS5j
bGFzc0xpc3Q6ZWsoYSkubWF0Y2goL1xTKy9nKXx8W119O18uZ2s9ZnVuY3Rpb24oYSxiKXsi
c3RyaW5nIj09dHlwZW9mIGEuY2xhc3NOYW1lP2EuY2xhc3NOYW1lPWI6YS5zZXRBdHRyaWJ1
dGUmJmEuc2V0QXR0cmlidXRlKCJjbGFzcyIsYil9O18uaGs9ZnVuY3Rpb24oYSxiKXtyZXR1
cm4gYS5jbGFzc0xpc3Q/YS5jbGFzc0xpc3QuY29udGFpbnMoYik6Xy5DYihfLmZrKGEpLGIp
fTtfLmlrPWZ1bmN0aW9uKGEsYil7aWYoYS5jbGFzc0xpc3QpYS5jbGFzc0xpc3QuYWRkKGIp
O2Vsc2UgaWYoIV8uaGsoYSxiKSl7dmFyIGM9ZWsoYSk7Xy5nayhhLGMrKDA8Yy5sZW5ndGg/
IiAiK2I6YikpfX07DQpfLmprPWZ1bmN0aW9uKGEsYil7YS5jbGFzc0xpc3Q/YS5jbGFzc0xp
c3QucmVtb3ZlKGIpOl8uaGsoYSxiKSYmXy5nayhhLCgwLF8ucmIpKF8uZmsoYSksZnVuY3Rp
b24oYyl7cmV0dXJuIGMhPWJ9KS5qb2luKCIgIikpfTsNCl8ua2s9IV8ucmUmJiFfLk1jKCk7
Xy5saz1mdW5jdGlvbihhLGIsYyl7aWYoXy5rayYmYS5kYXRhc2V0KWEuZGF0YXNldFtiXT1j
O2Vsc2V7aWYoLy1bYS16XS8udGVzdChiKSl0aHJvdyBFcnJvcigiciIpO2Euc2V0QXR0cmli
dXRlKCJkYXRhLSIrXy5lZShiKSxjKX19O18ubWs9ZnVuY3Rpb24oYSxiKXtpZigvLVthLXpd
Ly50ZXN0KGIpKXJldHVybiBudWxsO2lmKF8ua2smJmEuZGF0YXNldCl7aWYoTmMoKSYmIShi
IGluIGEuZGF0YXNldCkpcmV0dXJuIG51bGw7YT1hLmRhdGFzZXRbYl07cmV0dXJuIHZvaWQg
MD09PWE/bnVsbDphfXJldHVybiBhLmdldEF0dHJpYnV0ZSgiZGF0YS0iK18uZWUoYikpfTtf
Lm5rPWZ1bmN0aW9uKGEsYil7cmV0dXJuLy1bYS16XS8udGVzdChiKT8hMTpfLmtrJiZhLmRh
dGFzZXQ/YiBpbiBhLmRhdGFzZXQ6YS5oYXNBdHRyaWJ1dGU/YS5oYXNBdHRyaWJ1dGUoImRh
dGEtIitfLmVlKGIpKTohIWEuZ2V0QXR0cmlidXRlKCJkYXRhLSIrXy5lZShiKSl9Ow0KXy5v
az1mdW5jdGlvbihhKXt2YXIgYj1hLnR5cGU7aWYoInN0cmluZyI9PT10eXBlb2YgYilzd2l0
Y2goYi50b0xvd2VyQ2FzZSgpKXtjYXNlICJjaGVja2JveCI6Y2FzZSAicmFkaW8iOnJldHVy
biBhLmNoZWNrZWQ/YS52YWx1ZTpudWxsO2Nhc2UgInNlbGVjdC1vbmUiOnJldHVybiBiPWEu
c2VsZWN0ZWRJbmRleCwwPD1iP2Eub3B0aW9uc1tiXS52YWx1ZTpudWxsO2Nhc2UgInNlbGVj
dC1tdWx0aXBsZSI6Yj1bXTtmb3IodmFyIGMsZD0wO2M9YS5vcHRpb25zW2RdO2QrKyljLnNl
bGVjdGVkJiZiLnB1c2goYy52YWx1ZSk7cmV0dXJuIGIubGVuZ3RoP2I6bnVsbH1yZXR1cm4g
bnVsbCE9YS52YWx1ZT9hLnZhbHVlOm51bGx9Ow0KXy5waz1mdW5jdGlvbigpe3JldHVybiBf
LnZlPyJXZWJraXQiOl8udWU/Ik1veiI6Xy5yZT8ibXMiOl8ucWU/Ik8iOm51bGx9Ow0KXy5x
az1mdW5jdGlvbihhLGIsYyxkKXt0aGlzLnRvcD1hO3RoaXMucmlnaHQ9Yjt0aGlzLmJvdHRv
bT1jO3RoaXMubGVmdD1kfTtfLms9Xy5xay5wcm90b3R5cGU7Xy5rLklkPWZ1bmN0aW9uKCl7
cmV0dXJuIHRoaXMucmlnaHQtdGhpcy5sZWZ0fTtfLmsuZ2V0SGVpZ2h0PWZ1bmN0aW9uKCl7
cmV0dXJuIHRoaXMuYm90dG9tLXRoaXMudG9wfTtfLmsuY2xvbmU9ZnVuY3Rpb24oKXtyZXR1
cm4gbmV3IF8ucWsodGhpcy50b3AsdGhpcy5yaWdodCx0aGlzLmJvdHRvbSx0aGlzLmxlZnQp
fTtfLmsuY29udGFpbnM9ZnVuY3Rpb24oYSl7cmV0dXJuIHRoaXMmJmE/YSBpbnN0YW5jZW9m
IF8ucWs/YS5sZWZ0Pj10aGlzLmxlZnQmJmEucmlnaHQ8PXRoaXMucmlnaHQmJmEudG9wPj10
aGlzLnRvcCYmYS5ib3R0b208PXRoaXMuYm90dG9tOmEueD49dGhpcy5sZWZ0JiZhLng8PXRo
aXMucmlnaHQmJmEueT49dGhpcy50b3AmJmEueTw9dGhpcy5ib3R0b206ITF9Ow0KXy5rLmNl
aWw9ZnVuY3Rpb24oKXt0aGlzLnRvcD1NYXRoLmNlaWwodGhpcy50b3ApO3RoaXMucmlnaHQ9
TWF0aC5jZWlsKHRoaXMucmlnaHQpO3RoaXMuYm90dG9tPU1hdGguY2VpbCh0aGlzLmJvdHRv
bSk7dGhpcy5sZWZ0PU1hdGguY2VpbCh0aGlzLmxlZnQpO3JldHVybiB0aGlzfTtfLmsuZmxv
b3I9ZnVuY3Rpb24oKXt0aGlzLnRvcD1NYXRoLmZsb29yKHRoaXMudG9wKTt0aGlzLnJpZ2h0
PU1hdGguZmxvb3IodGhpcy5yaWdodCk7dGhpcy5ib3R0b209TWF0aC5mbG9vcih0aGlzLmJv
dHRvbSk7dGhpcy5sZWZ0PU1hdGguZmxvb3IodGhpcy5sZWZ0KTtyZXR1cm4gdGhpc307Xy5r
LnJvdW5kPWZ1bmN0aW9uKCl7dGhpcy50b3A9TWF0aC5yb3VuZCh0aGlzLnRvcCk7dGhpcy5y
aWdodD1NYXRoLnJvdW5kKHRoaXMucmlnaHQpO3RoaXMuYm90dG9tPU1hdGgucm91bmQodGhp
cy5ib3R0b20pO3RoaXMubGVmdD1NYXRoLnJvdW5kKHRoaXMubGVmdCk7cmV0dXJuIHRoaXN9
Ow0KXy5yaz1mdW5jdGlvbihhLGIsYyxkKXt0aGlzLmxlZnQ9YTt0aGlzLnRvcD1iO3RoaXMu
d2lkdGg9Yzt0aGlzLmhlaWdodD1kfTtfLms9Xy5yay5wcm90b3R5cGU7Xy5rLmNsb25lPWZ1
bmN0aW9uKCl7cmV0dXJuIG5ldyBfLnJrKHRoaXMubGVmdCx0aGlzLnRvcCx0aGlzLndpZHRo
LHRoaXMuaGVpZ2h0KX07Xy5rLmNvbnRhaW5zPWZ1bmN0aW9uKGEpe3JldHVybiBhIGluc3Rh
bmNlb2YgXy5JZT9hLng+PXRoaXMubGVmdCYmYS54PD10aGlzLmxlZnQrdGhpcy53aWR0aCYm
YS55Pj10aGlzLnRvcCYmYS55PD10aGlzLnRvcCt0aGlzLmhlaWdodDp0aGlzLmxlZnQ8PWEu
bGVmdCYmdGhpcy5sZWZ0K3RoaXMud2lkdGg+PWEubGVmdCthLndpZHRoJiZ0aGlzLnRvcDw9
YS50b3AmJnRoaXMudG9wK3RoaXMuaGVpZ2h0Pj1hLnRvcCthLmhlaWdodH07Xy5rLkJnPWZ1
bmN0aW9uKCl7cmV0dXJuIG5ldyBfLlNlKHRoaXMud2lkdGgsdGhpcy5oZWlnaHQpfTsNCl8u
ay5jZWlsPWZ1bmN0aW9uKCl7dGhpcy5sZWZ0PU1hdGguY2VpbCh0aGlzLmxlZnQpO3RoaXMu
dG9wPU1hdGguY2VpbCh0aGlzLnRvcCk7dGhpcy53aWR0aD1NYXRoLmNlaWwodGhpcy53aWR0
aCk7dGhpcy5oZWlnaHQ9TWF0aC5jZWlsKHRoaXMuaGVpZ2h0KTtyZXR1cm4gdGhpc307Xy5r
LmZsb29yPWZ1bmN0aW9uKCl7dGhpcy5sZWZ0PU1hdGguZmxvb3IodGhpcy5sZWZ0KTt0aGlz
LnRvcD1NYXRoLmZsb29yKHRoaXMudG9wKTt0aGlzLndpZHRoPU1hdGguZmxvb3IodGhpcy53
aWR0aCk7dGhpcy5oZWlnaHQ9TWF0aC5mbG9vcih0aGlzLmhlaWdodCk7cmV0dXJuIHRoaXN9
O18uay5yb3VuZD1mdW5jdGlvbigpe3RoaXMubGVmdD1NYXRoLnJvdW5kKHRoaXMubGVmdCk7
dGhpcy50b3A9TWF0aC5yb3VuZCh0aGlzLnRvcCk7dGhpcy53aWR0aD1NYXRoLnJvdW5kKHRo
aXMud2lkdGgpO3RoaXMuaGVpZ2h0PU1hdGgucm91bmQodGhpcy5oZWlnaHQpO3JldHVybiB0
aGlzfTsNCnZhciB1ayxzayxGayxJayxKaztfLnRrPWZ1bmN0aW9uKGEsYixjKXtpZigic3Ry
aW5nIj09PXR5cGVvZiBiKShiPXNrKGEsYikpJiYoYS5zdHlsZVtiXT1jKTtlbHNlIGZvcih2
YXIgZCBpbiBiKXtjPWE7dmFyIGU9YltkXSxmPXNrKGMsZCk7ZiYmKGMuc3R5bGVbZl09ZSl9
fTt1az17fTtzaz1mdW5jdGlvbihhLGIpe3ZhciBjPXVrW2JdO2lmKCFjKXt2YXIgZD1fLmRl
KGIpO2M9ZDt2b2lkIDA9PT1hLnN0eWxlW2RdJiYoZD1fLnBrKCkrXy5mZShkKSx2b2lkIDAh
PT1hLnN0eWxlW2RdJiYoYz1kKSk7dWtbYl09Y31yZXR1cm4gY307Xy52az1mdW5jdGlvbihh
LGIpe3ZhciBjPV8uVmUoYSk7cmV0dXJuIGMuZGVmYXVsdFZpZXcmJmMuZGVmYXVsdFZpZXcu
Z2V0Q29tcHV0ZWRTdHlsZSYmKGE9Yy5kZWZhdWx0Vmlldy5nZXRDb21wdXRlZFN0eWxlKGEs
bnVsbCkpP2FbYl18fGEuZ2V0UHJvcGVydHlWYWx1ZShiKXx8IiI6IiJ9Ow0KXy53az1mdW5j
dGlvbihhLGIpe3JldHVybiBfLnZrKGEsYil8fChhLmN1cnJlbnRTdHlsZT9hLmN1cnJlbnRT
dHlsZVtiXTpudWxsKXx8YS5zdHlsZSYmYS5zdHlsZVtiXX07Xy54az1mdW5jdGlvbihhKXty
ZXR1cm4gXy53ayhhLCJvdmVyZmxvd1giKX07Xy55az1mdW5jdGlvbihhKXtyZXR1cm4gXy53
ayhhLCJvdmVyZmxvd1kiKX07Xy56az1mdW5jdGlvbihhKXt0cnl7dmFyIGI9YS5nZXRCb3Vu
ZGluZ0NsaWVudFJlY3QoKX1jYXRjaChjKXtyZXR1cm57bGVmdDowLHRvcDowLHJpZ2h0OjAs
Ym90dG9tOjB9fV8ucmUmJmEub3duZXJEb2N1bWVudC5ib2R5JiYoYT1hLm93bmVyRG9jdW1l
bnQsYi5sZWZ0LT1hLmRvY3VtZW50RWxlbWVudC5jbGllbnRMZWZ0K2EuYm9keS5jbGllbnRM
ZWZ0LGIudG9wLT1hLmRvY3VtZW50RWxlbWVudC5jbGllbnRUb3ArYS5ib2R5LmNsaWVudFRv
cCk7cmV0dXJuIGJ9Ow0KXy5Caz1mdW5jdGlvbihhLGIpe2E9Xy5BayhhKTtiPV8uQWsoYik7
cmV0dXJuIG5ldyBfLkllKGEueC1iLngsYS55LWIueSl9O18uQ2s9ZnVuY3Rpb24oYSl7YT1f
LnprKGEpO3JldHVybiBuZXcgXy5JZShhLmxlZnQsYS50b3ApfTtfLkFrPWZ1bmN0aW9uKGEp
e2lmKDE9PWEubm9kZVR5cGUpcmV0dXJuIF8uQ2soYSk7YT1hLmNoYW5nZWRUb3VjaGVzP2Eu
Y2hhbmdlZFRvdWNoZXNbMF06YTtyZXR1cm4gbmV3IF8uSWUoYS5jbGllbnRYLGEuY2xpZW50
WSl9O18uRGs9ZnVuY3Rpb24oYSxiKXthLnN0eWxlLmRpc3BsYXk9Yj8iIjoibm9uZSJ9Ow0K
Xy5Faz1mdW5jdGlvbihhLGIsYyxkKXtpZigvXlxkK3B4PyQvLnRlc3QoYikpcmV0dXJuIHBh
cnNlSW50KGIsMTApO3ZhciBlPWEuc3R5bGVbY10sZj1hLnJ1bnRpbWVTdHlsZVtjXTthLnJ1
bnRpbWVTdHlsZVtjXT1hLmN1cnJlbnRTdHlsZVtjXTthLnN0eWxlW2NdPWI7Yj1hLnN0eWxl
W2RdO2Euc3R5bGVbY109ZTthLnJ1bnRpbWVTdHlsZVtjXT1mO3JldHVybitifTtGaz1mdW5j
dGlvbihhLGIpe3JldHVybihiPWEuY3VycmVudFN0eWxlP2EuY3VycmVudFN0eWxlW2JdOm51
bGwpP18uRWsoYSxiLCJsZWZ0IiwicGl4ZWxMZWZ0Iik6MH07DQpfLkdrPWZ1bmN0aW9uKGEs
Yil7aWYoXy5yZSl7dmFyIGM9RmsoYSxiKyJMZWZ0IiksZD1GayhhLGIrIlJpZ2h0IiksZT1G
ayhhLGIrIlRvcCIpO2E9RmsoYSxiKyJCb3R0b20iKTtyZXR1cm4gbmV3IF8ucWsoZSxkLGEs
Yyl9Yz1fLnZrKGEsYisiTGVmdCIpO2Q9Xy52ayhhLGIrIlJpZ2h0Iik7ZT1fLnZrKGEsYisi
VG9wIik7YT1fLnZrKGEsYisiQm90dG9tIik7cmV0dXJuIG5ldyBfLnFrKHBhcnNlRmxvYXQo
ZSkscGFyc2VGbG9hdChkKSxwYXJzZUZsb2F0KGEpLHBhcnNlRmxvYXQoYykpfTtfLkhrPWZ1
bmN0aW9uKGEpe3JldHVybiBfLkdrKGEsInBhZGRpbmciKX07SWs9e3RoaW46MixtZWRpdW06
NCx0aGljazo2fTsNCkprPWZ1bmN0aW9uKGEsYil7aWYoIm5vbmUiPT0oYS5jdXJyZW50U3R5
bGU/YS5jdXJyZW50U3R5bGVbYisiU3R5bGUiXTpudWxsKSlyZXR1cm4gMDtiPWEuY3VycmVu
dFN0eWxlP2EuY3VycmVudFN0eWxlW2IrIldpZHRoIl06bnVsbDtyZXR1cm4gYiBpbiBJaz9J
a1tiXTpfLkVrKGEsYiwibGVmdCIsInBpeGVsTGVmdCIpfTsNCl8uS2s9ZnVuY3Rpb24oYSl7
aWYoXy5yZSYmIV8uRmUoOSkpe3ZhciBiPUprKGEsImJvcmRlckxlZnQiKSxjPUprKGEsImJv
cmRlclJpZ2h0IiksZD1KayhhLCJib3JkZXJUb3AiKTthPUprKGEsImJvcmRlckJvdHRvbSIp
O3JldHVybiBuZXcgXy5xayhkLGMsYSxiKX1iPV8udmsoYSwiYm9yZGVyTGVmdFdpZHRoIik7
Yz1fLnZrKGEsImJvcmRlclJpZ2h0V2lkdGgiKTtkPV8udmsoYSwiYm9yZGVyVG9wV2lkdGgi
KTthPV8udmsoYSwiYm9yZGVyQm90dG9tV2lkdGgiKTtyZXR1cm4gbmV3IF8ucWsocGFyc2VG
bG9hdChkKSxwYXJzZUZsb2F0KGMpLHBhcnNlRmxvYXQoYSkscGFyc2VGbG9hdChiKSl9Ow0K
dmFyIFhrLHhiYSx5YmEsTmssemJhLHdiYTtfLkxrPWZ1bmN0aW9uKGEpe2EgaW5zdGFuY2Vv
ZiBfLkxrP2E9YS5EZDphWzBdaW5zdGFuY2VvZiBfLkxrJiYoYT0oMCxfLnRiKShhLGZ1bmN0
aW9uKGIsYyl7cmV0dXJuIF8uSWIoYixjLkRkKX0sW10pLF8uUGIoYSkpO3RoaXMuRGQ9Xy5K
YihhKX07Xy5rPV8uTGsucHJvdG90eXBlO18uay5XZD1mdW5jdGlvbihhLGIsYyl7KCh2b2lk
IDA9PT1jPzA6Yyk/Xy5xYjpfLnBiKSh0aGlzLkRkLGEsYik7cmV0dXJuIHRoaXN9O18uay5z
aXplPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuRGQubGVuZ3RofTtfLmsuZ2V0PWZ1bmN0aW9u
KGEpe3JldHVybiB0aGlzLkRkW2FdfHxudWxsfTtfLmsuQ2E9ZnVuY3Rpb24oKXtyZXR1cm4g
dGhpcy5EZFswXXx8bnVsbH07Xy5rLkhzPV8uY2EoNik7Xy5rLkVnPV8uY2EoOCk7Xy5rLkFk
PWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuRGQuc2xpY2UoKX07DQpfLmsubWFwPWZ1bmN0aW9u
KGEsYil7cmV0dXJuKDAsXy5zYikodGhpcy5EZCxhLGIpfTtfLmsuZXF1YWxzPWZ1bmN0aW9u
KGEpe3JldHVybiB0aGlzPT09YXx8Xy5TYih0aGlzLkRkLGEuRGQpfTtfLmsuWGI9Xy5jYSgx
MCk7Xy5rLiRoPV8uY2EoMTIpO18uay5maW5kPWZ1bmN0aW9uKGEpe3ZhciBiPVtdO3RoaXMu
V2QoZnVuY3Rpb24oYyl7Yz1jLnF1ZXJ5U2VsZWN0b3JBbGwoU3RyaW5nKGEpKTtmb3IodmFy
IGQ9MDtkPGMubGVuZ3RoO2QrKyliLnB1c2goY1tkXSl9KTtyZXR1cm4gbmV3IF8uTGsoYil9
O18uTWs9ZnVuY3Rpb24oYSxiKXt2YXIgYz1bXTthLldkKGZ1bmN0aW9uKGQpeyhkPWQucXVl
cnlTZWxlY3RvcihiKSkmJmMucHVzaChkKX0pO3JldHVybiBuZXcgXy5MayhjKX07DQpfLkxr
LnByb3RvdHlwZS5jaGlsZHJlbj1mdW5jdGlvbigpe3ZhciBhPVtdO3RoaXMuV2QoZnVuY3Rp
b24oYil7Yj1fLnBmKGIpO2Zvcih2YXIgYz0wO2M8Yi5sZW5ndGg7YysrKWEucHVzaChiW2Nd
KX0pO3JldHVybiBuZXcgXy5MayhhKX07Xy5May5wcm90b3R5cGUuZmlsdGVyPWZ1bmN0aW9u
KGEpe2E9KDAsXy5yYikodGhpcy5EZCxOayhhKSk7cmV0dXJuIG5ldyBfLkxrKGEpfTtfLkxr
LnByb3RvdHlwZS5jbG9zZXN0PWZ1bmN0aW9uKGEpe3ZhciBiPVtdLGM9TmsoYSksZD1mdW5j
dGlvbihlKXtyZXR1cm4gXy5DZihlKSYmYyhlKX07dGhpcy5XZChmdW5jdGlvbihlKXsoZT1f
LkdmKGUsZCwhMCkpJiYhXy5DYihiLGUpJiZiLnB1c2goZSl9KTtyZXR1cm4gbmV3IF8uTGso
Yil9O18uTGsucHJvdG90eXBlLm5leHQ9ZnVuY3Rpb24oYSl7cmV0dXJuIF8uT2sodGhpcyxZ
YWEsYSl9Ow0KXy5Paz1mdW5jdGlvbihhLGIsYyl7dmFyIGQ9W10sZTtjP2U9TmsoYyk6ZT13
YmE7YS5XZChmdW5jdGlvbihmKXsoZj1iKGYpKSYmZShmKSYmZC5wdXNoKGYpfSk7cmV0dXJu
IG5ldyBfLkxrKGQpfTtfLkxrLnByb3RvdHlwZS5QYj1mdW5jdGlvbihhKXtmb3IodmFyIGI9
MDtiPHRoaXMuRGQubGVuZ3RoO2IrKylpZihfLmhrKHRoaXMuRGRbYl0sYSkpcmV0dXJuITA7
cmV0dXJuITF9O18uTGsucHJvdG90eXBlLm5iPWZ1bmN0aW9uKGEpe3JldHVybiB0aGlzLldk
KGZ1bmN0aW9uKGIpe18uaWsoYixhKX0pfTtfLkxrLnByb3RvdHlwZS53Yj1mdW5jdGlvbihh
KXtyZXR1cm4gdGhpcy5XZChmdW5jdGlvbihiKXtfLmprKGIsYSl9KX07Xy5Qaz1mdW5jdGlv
bihhLGIsYyl7cmV0dXJuITA9PT1jP2EubmIoYik6ITE9PT1jP2Eud2IoYik6YS5XZChmdW5j
dGlvbihkKXtfLmhrKGQsYik/Xy5qayhkLGIpOl8uaWsoZCxiKX0pfTtfLms9Xy5May5wcm90
b3R5cGU7DQpfLmsuRmY9ZnVuY3Rpb24oKXtpZigwPHRoaXMuRGQubGVuZ3RoKXt2YXIgYT10
aGlzLkRkWzBdO2lmKCJ0ZXh0Q29udGVudCJpbiBhKXJldHVybigwLF8uV2IpKGEudGV4dENv
bnRlbnQpO2lmKCJpbm5lclRleHQiaW4gYSlyZXR1cm4oMCxfLldiKShhLmlubmVyVGV4dCl9
cmV0dXJuIiJ9O18uay5RZj1mdW5jdGlvbihhKXtyZXR1cm4gdGhpcy5XZChmdW5jdGlvbihi
KXtfLkZmKGIsYSl9KX07Xy5rLkJjPV8uY2EoMTMpO18uay5CYj1mdW5jdGlvbihhLGIpe3Jl
dHVybiB0aGlzLldkKGZ1bmN0aW9uKGMpe2Muc2V0QXR0cmlidXRlKGEsYil9KX07Xy5rLlhk
PV8uY2EoMTQpO18uay5nZXRTdHlsZT1mdW5jdGlvbihhKXtpZigwPHRoaXMuRGQubGVuZ3Ro
KXt2YXIgYj10aGlzLkRkWzBdLGM9Yi5zdHlsZVtfLmRlKGEpXTtyZXR1cm4idW5kZWZpbmVk
IiE9PXR5cGVvZiBjP2M6Yi5zdHlsZVtzayhiLGEpXXx8IiJ9fTsNCl8uay5zZXRTdHlsZT1m
dW5jdGlvbihhLGIpe3JldHVybiB0aGlzLldkKGZ1bmN0aW9uKGMpe18udGsoYyxhLGIpfSl9
O18uay5nZXREYXRhPWZ1bmN0aW9uKGEpe2lmKDA9PT10aGlzLkRkLmxlbmd0aClyZXR1cm4g
bmV3IF8uUWsoYSxudWxsKTt2YXIgYj1fLm1rKHRoaXMuRGRbMF0sYSk7cmV0dXJuIG5ldyBf
LlFrKGEsYil9O18uay5mb2N1cz1mdW5jdGlvbigpe3RyeXt0aGlzLkNhKCkuZm9jdXMoKX1j
YXRjaChhKXt9cmV0dXJuIHRoaXN9Ow0KXy5rLmNsaWNrPWZ1bmN0aW9uKCl7dmFyIGE9Xy5W
ZSh0aGlzLkNhKCkpO2lmKGEuY3JlYXRlRXZlbnQpe3ZhciBiPWEuY3JlYXRlRXZlbnQoIk1v
dXNlRXZlbnRzIik7Yi5pbml0TW91c2VFdmVudCgiY2xpY2siLCEwLCEwLGEuZGVmYXVsdFZp
ZXcsMSwwLDAsMCwwLCExLCExLCExLCExLDAsbnVsbCk7dGhpcy5DYSgpLmRpc3BhdGNoRXZl
bnQoYil9ZWxzZSBiPWEuY3JlYXRlRXZlbnRPYmplY3QoKSxiLmNsaWVudFg9MCxiLmNsaWVu
dFk9MCxiLnNjcmVlblg9MCxiLnNjcmVlblk9MCxiLmFsdEtleT0hMSxiLmN0cmxLZXk9ITEs
Yi5zaGlmdEtleT0hMSxiLmJ1dHRvbj0wLHRoaXMuQ2EoKS5maXJlRXZlbnQoIm9uY2xpY2si
LGIpfTsNCl8uUms9ZnVuY3Rpb24oYSxiLGMsZCl7ZnVuY3Rpb24gZShoLGwsbil7dmFyIHA9
bDtsJiZsLnBhcmVudE5vZGUmJihwPWwuY2xvbmVOb2RlKCEwKSk7aChwLG4pfWQ9dm9pZCAw
PT09ZD8hMTpkO2lmKDE9PWEuRGQubGVuZ3RoKXt2YXIgZj1hLkRkWzBdLGc9ZnVuY3Rpb24o
aCl7cmV0dXJuIGIoaCxmKX07YyBpbnN0YW5jZW9mIF8uTGs/Yy5XZChnLHZvaWQgMCxkKTpf
LlphKGMpPyhkP18ucWI6Xy5wYikoYyxnKTpnKGMpO3JldHVybiBhfXJldHVybiBhLldkKGZ1
bmN0aW9uKGgpe2MgaW5zdGFuY2VvZiBfLkxrP2MuV2QoZnVuY3Rpb24obCl7ZShiLGwsaCl9
KTpfLlphKGMpPygwLF8ucGIpKGMsZnVuY3Rpb24obCl7ZShiLGwsaCl9KTplKGIsYyxoKX0p
fTtfLms9Xy5May5wcm90b3R5cGU7Xy5rLmFwcGVuZD1mdW5jdGlvbihhKXtyZXR1cm4gXy5S
ayh0aGlzLGZ1bmN0aW9uKGIsYyl7YiYmYy5hcHBlbmRDaGlsZChiKX0sYSl9Ow0KXy5rLnJl
bW92ZT1mdW5jdGlvbigpe3JldHVybiBfLlJrKHRoaXMsZnVuY3Rpb24oYSxiKXtfLm9mKGIp
fSxudWxsKX07Xy5rLmFmdGVyPWZ1bmN0aW9uKGEsYil7cmV0dXJuIF8uUmsodGhpcyxmdW5j
dGlvbihjLGQpe2MmJmQucGFyZW50Tm9kZSYmZC5wYXJlbnROb2RlLmluc2VydEJlZm9yZShj
LGQubmV4dFNpYmxpbmcpfSxhLCEodm9pZCAwPT09Ynx8YikpfTtfLmsuYmVmb3JlPWZ1bmN0
aW9uKGEpe3JldHVybiBfLlJrKHRoaXMsZnVuY3Rpb24oYixjKXtiJiZjLnBhcmVudE5vZGUm
JmMucGFyZW50Tm9kZS5pbnNlcnRCZWZvcmUoYixjKX0sYSl9O18uay5yZXBsYWNlV2l0aD1m
dW5jdGlvbihhKXtyZXR1cm4gXy5Sayh0aGlzLGZ1bmN0aW9uKGIsYyl7aWYoYil7dmFyIGQ9
Yy5wYXJlbnROb2RlO2QmJmQucmVwbGFjZUNoaWxkKGIsYyl9fSxhKX07Xy5rLnRvZ2dsZT1m
dW5jdGlvbihhKXtyZXR1cm4gdGhpcy5XZChmdW5jdGlvbihiKXtfLkRrKGIsYSl9KX07Xy5r
LnNob3c9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy50b2dnbGUoITApfTsNCl8uay5oaWRlPWZ1
bmN0aW9uKCl7cmV0dXJuIHRoaXMudG9nZ2xlKCExKX07Xy5rLnRyaWdnZXI9ZnVuY3Rpb24o
YSxiLGMsZCl7cmV0dXJuIHRoaXMuV2QoZnVuY3Rpb24oZSl7Xy5iayhlLGEsYixjLGQpfSl9
O18uVms9ZnVuY3Rpb24oYSl7cmV0dXJuIGEgaW5zdGFuY2VvZiBfLkxrP2EuQ2EoKTphfTtf
LldrPWZ1bmN0aW9uKGEsYil7YSBpbnN0YW5jZW9mIF8uTGsmJihiPWEuRGQsYT1udWxsKTtf
LkxrLmNhbGwodGhpcyxudWxsIT1hP1thXTpiKX07Xy51KF8uV2ssXy5Mayk7Xy5rPV8uV2su
cHJvdG90eXBlO18uay5jaGlsZHJlbj1mdW5jdGlvbigpe3JldHVybiBuZXcgXy5MayhBcnJh
eS5wcm90b3R5cGUuc2xpY2UuY2FsbChfLnBmKHRoaXMuRGRbMF0pKSl9O18uay5XZD1mdW5j
dGlvbihhLGIpe2EuY2FsbChiLHRoaXMuRGRbMF0sMCk7cmV0dXJuIHRoaXN9O18uay5zaXpl
PWZ1bmN0aW9uKCl7cmV0dXJuIDF9O18uay5DYT1mdW5jdGlvbigpe3JldHVybiB0aGlzLkRk
WzBdfTsNCl8uay5Icz1fLmNhKDUpO18uay5FZz1fLmNhKDcpO18uay5YYj1fLmNhKDkpO18u
ay4kaD1fLmNhKDExKTtfLlFrPWZ1bmN0aW9uKGEsYil7dGhpcy5rYT1hO3RoaXMuaGE9Yn07
WGs9ZnVuY3Rpb24oYSl7dGhyb3cgRXJyb3IoIkdgIithLmthKTt9O18uaz1fLlFrLnByb3Rv
dHlwZTtfLmsuJGE9ZnVuY3Rpb24oYSl7aWYobnVsbD09dGhpcy5oYSlyZXR1cm4gMD09YXJn
dW1lbnRzLmxlbmd0aCYmWGsodGhpcyksYTtpZigic3RyaW5nIj09PXR5cGVvZiB0aGlzLmhh
KXJldHVybiB0aGlzLmhhO3Rocm93IG5ldyBUeXBlRXJyb3IoIkhgIit0aGlzLmthKyJgIit0
aGlzLmhhKyJgIit0eXBlb2YgdGhpcy5oYSk7fTsNCl8uay5DYz1mdW5jdGlvbihhKXtpZihu
dWxsPT10aGlzLmhhKXJldHVybiAwPT1hcmd1bWVudHMubGVuZ3RoJiZYayh0aGlzKSxhO2lm
KCJib29sZWFuIj09PXR5cGVvZiB0aGlzLmhhKXJldHVybiB0aGlzLmhhO2lmKCJzdHJpbmci
PT09dHlwZW9mIHRoaXMuaGEpe3ZhciBiPXRoaXMuaGEudG9Mb3dlckNhc2UoKTtpZigidHJ1
ZSI9PT1ifHwiMSI9PT1iKXJldHVybiEwO2lmKCJmYWxzZSI9PT1ifHwiMCI9PT1iKXJldHVy
biExfXRocm93IG5ldyBUeXBlRXJyb3IoIklgIit0aGlzLmthKyJgIit0aGlzLmhhKyJgIit0
eXBlb2YgdGhpcy5oYSk7fTsNCl8uay54Yz1mdW5jdGlvbihhKXtpZihudWxsPT10aGlzLmhh
KXJldHVybiAwPT1hcmd1bWVudHMubGVuZ3RoJiZYayh0aGlzKSxhO2lmKCJudW1iZXIiPT09
dHlwZW9mIHRoaXMuaGEpcmV0dXJuIHRoaXMuaGE7aWYoInN0cmluZyI9PT10eXBlb2YgdGhp
cy5oYSl7dmFyIGI9TnVtYmVyKHRoaXMuaGEpO2lmKCFpc05hTihiKSYmIV8uVmIodGhpcy5o
YSkpcmV0dXJuIGJ9dGhyb3cgbmV3IFR5cGVFcnJvcigiSmAiK3RoaXMua2ErImAiK3RoaXMu
aGErImAiK3R5cGVvZiB0aGlzLmhhKTt9O18uay5RZD1mdW5jdGlvbigpe3JldHVybiBudWxs
IT10aGlzLmhhfTtfLmsudG9TdHJpbmc9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy4kYSgpfTtf
LllrPWZ1bmN0aW9uKGEsYixjKXtpZihudWxsPT1hLmhhKXJldHVybiBjO2E9YS4kYSgpO3Jl
dHVybiBfLm5pKGEsYil9Ow0KXy5Ray5wcm90b3R5cGUudGE9ZnVuY3Rpb24oYSl7aWYobnVs
bD09dGhpcy5oYSl7aWYoMD09YXJndW1lbnRzLmxlbmd0aCl0aHJvdyBFcnJvcigiR2AiK3Ro
aXMua2EpO3JldHVybiBhfXZhciBiPV8uJGEodGhpcy5oYSk/dGhpcy5oYToic3RyaW5nIiE9
PXR5cGVvZiB0aGlzLmhhP1t0aGlzLmhhXTp4YmEodGhpcyk7cmV0dXJuKDAsXy5zYikoYixm
dW5jdGlvbihjLGQpe3JldHVybiBuZXcgXy5Rayh0aGlzLmthKyJbIitkKyJdIixjKX0sdGhp
cyl9O3hiYT1mdW5jdGlvbihhKXthPWEuJGEoKTtyZXR1cm4iIj09YS50cmltKCk/W106YS5z
cGxpdCgiLCIpLm1hcChmdW5jdGlvbihiKXtyZXR1cm4gYi50cmltKCl9KX07eWJhPS9eXFso
W2EtejAtOS1dKykoPSIoW15cXCJdKikiKT9dJC87DQpOaz1mdW5jdGlvbihhKXtpZigic3Ry
aW5nIj09dHlwZW9mIGEpe2lmKCIuIj09YS5jaGFyQXQoMCkpcmV0dXJuIF8uWmsoYS5zdWJz
dHIoMSkpO2lmKCJbIj09YS5jaGFyQXQoMCkpe3ZhciBiPXliYS5leGVjKGEpO3JldHVybiBf
LiRrKGJbMV0sLTE9PWEuaW5kZXhPZigiPSIpP3ZvaWQgMDpiWzNdKX1yZXR1cm4gemJhKGEp
fXJldHVybiBhfTtfLlprPWZ1bmN0aW9uKGEpe3JldHVybiBmdW5jdGlvbihiKXtyZXR1cm4g
Yi5nZXRBdHRyaWJ1dGUmJl8uaGsoYixhKX19O18uJGs9ZnVuY3Rpb24oYSxiKXtyZXR1cm4g
ZnVuY3Rpb24oYyl7cmV0dXJuIHZvaWQgMCE9PWI/Yy5nZXRBdHRyaWJ1dGUmJmMuZ2V0QXR0
cmlidXRlKGEpPT1iOmMuaGFzQXR0cmlidXRlJiZjLmhhc0F0dHJpYnV0ZShhKX19O3piYT1m
dW5jdGlvbihhKXthPWEudG9VcHBlckNhc2UoKTtyZXR1cm4gZnVuY3Rpb24oYil7cmV0dXJu
KGI9Yi50YWdOYW1lKSYmYi50b1VwcGVyQ2FzZSgpPT1hfX07d2JhPWZ1bmN0aW9uKCl7cmV0
dXJuITB9Ow0KXy5hbD1mdW5jdGlvbihhKXt2YXIgYj12b2lkIDA9PT1iP3dpbmRvdzpiO3Jl
dHVybiBuZXcgXy5RayhhLF8ubWkoYSxiKSl9Ow0KXy5ibD1mdW5jdGlvbihhKXtfLnkodGhp
cyxhLDAsLTEsbnVsbCxBYmEpfTtfLnUoXy5ibCxfLngpO3ZhciBBYmE9W1s1LDYsN11dOw0K
Xy5jbD1fLllrKF8uYWwoIncyYnRBZSIpLF8uYmwsbmV3IF8uYmwpOw0KdmFyIEJiYT1mdW5j
dGlvbihhLGIpe3JldHVybiBuZXcgXy5maChmdW5jdGlvbihjLGQpe3ZhciBlPWIuZG9jdW1l
bnQuZG9jdW1lbnRFbGVtZW50LGY9ZS5zdHlsZS5wb2ludGVyRXZlbnRzO2Uuc3R5bGUucG9p
bnRlckV2ZW50cz0ibm9uZSI7dmFyIGc9Xy5qYSg0RTMpLnRoZW4oZnVuY3Rpb24oKXtkKCJP
cmlnaW4gY2hlY2sgdGFraW5nIHRvbyBsb25nLiIpfSksaD1hLmxlbmd0aCxsPWZ1bmN0aW9u
KG4pe3ZhciBwPW4ub3JpZ2luO24uc291cmNlPT1iLnBhcmVudCYmInZlcmlmeS1vcmlnaW4t
cmVwbHkiPT1uLmRhdGEmJihfLkNiKGEscCk/KGcuY2FuY2VsKCksZS5zdHlsZS5wb2ludGVy
RXZlbnRzPWYsYi5yZW1vdmVFdmVudExpc3RlbmVyKCJtZXNzYWdlIixsKSxjKCkpOihoLS0s
MD09aCYmZCgiQ2xhaW1lZCBvcmlnaW5zICIrYSsiIGRpZCBub3QgY29udGFpbiBhbnkgb2Yg
dGhlIGNoZWNrZWQgcGFyZW50IG9yaWdpbnM6ICIrcCkpKX07Yi5hZGRFdmVudExpc3RlbmVy
KCJtZXNzYWdlIiwNCmwpOygwLF8ucGIpKGEsZnVuY3Rpb24obil7cmV0dXJuIGIucGFyZW50
LnBvc3RNZXNzYWdlKCJ2ZXJpZnktb3JpZ2luIixuKX0pfSl9LENiYT1mdW5jdGlvbihhLGIp
e3JldHVybiBiLmxvY2F0aW9uLm9yaWdpbiYmYi5sb2NhdGlvbi5hbmNlc3Rvck9yaWdpbnM/
KDAsXy52YikoYi5sb2NhdGlvbi5hbmNlc3Rvck9yaWdpbnMsZnVuY3Rpb24oYyl7cmV0dXJu
IF8uQ2IoYSxjKXx8Yz09Yi5sb2NhdGlvbi5vcmlnaW59KTohMX07DQooZnVuY3Rpb24oKXt2
YXIgYT13aW5kb3c7aWYoYSE9YS50b3AmJighR2MoKXx8YS5mcmFtZXMhPWEudG9wKSlpZihf
LkIoXy5jbCw0KSl7dmFyIGI9Xy5hbCgiaWtmam5jIikudGEobnVsbCksYz1fLmFsKCJTMU5a
bWQiKS5DYyghMSk7aWYoYilpZihiPSgwLF8uc2IpKGIsZnVuY3Rpb24oZSl7cmV0dXJuIGUu
JGEoKX0pLCFjJiYoMTxiLmxlbmd0aHx8YS50b3AhPWEucGFyZW50KSl2YXIgZD0iVGhpcyBz
aXRlIGRvZXMgbm90IGFsbG93IG11bHRpLWxldmVsIGZyYW1pbmciO2Vsc2UgaWYoYS5sb2Nh
dGlvbi5vcmlnaW4mJmEubG9jYXRpb24uYW5jZXN0b3JPcmlnaW5zKUNiYShiLGEpfHwoZD0i
T25lIG9mIGNsYWltZWQgb3JpZ2lucyAiK2IrImRpZCBub3QgbWF0Y2ggbG9jYXRpb24uYW5j
ZXN0b3JPcmlnaW5zLiIpO2Vsc2V7aWYoR2MoKSYmT2MoOSl8fF8uS2MoKSYmT2MoMzMpKXJl
dHVybjtfLm1hKEJiYShiLGEpLGZ1bmN0aW9uKGUpe2Q9Ik9yaWdpbiBjaGVjayBmYWlsZWQu
ICIrDQplO18uVWQobG9jYXRpb24sRmQpO3JldHVybiEwfSl9fWVsc2UgZD0iQXR0ZW1wdGlu
ZyB0byBpZnJhbWUgd2l0aG91dCBAQWxsb3dGcmFtaW5nIGFubm90YXRpb24uIjtkJiZfLlVk
KGxvY2F0aW9uLEZkKX0pKCk7DQpfLmVsPXt9Ow0KXy5mbD17fTsNCl8uZ2w9e307DQpfLmhs
PXt9Ow0KXy5pbD1mdW5jdGlvbihhKXtfLnkodGhpcyxhLDAsLTEsbnVsbCxudWxsKX07Xy51
KF8uaWwsXy54KTtfLmlsLnByb3RvdHlwZS5KYj1mdW5jdGlvbigpe3JldHVybiBfLktpKHRo
aXMsMiwiIil9Ow0KXy5uYT1mdW5jdGlvbihhKXtfLnkodGhpcyxhLDAsLTEsRGJhLG51bGwp
fTtfLnUoXy5uYSxfLngpO3ZhciBEYmE9WzNdOw0KXy5qbD1mdW5jdGlvbihhLGIsYyl7dGhp
cy5WeT1hO3RoaXMuc2o9Ynx8bnVsbDt0aGlzLmFxPWN8fFtdfTtfLmpsLnByb3RvdHlwZS50
b1N0cmluZz1mdW5jdGlvbigpe3JldHVybiB0aGlzLlZ5fTtfLmpsLnByb3RvdHlwZS5nZXRN
b2R1bGVJZD1mdW5jdGlvbigpe3JldHVybiB0aGlzLnNqfTtfLmpsLnByb3RvdHlwZS5Ebz1m
dW5jdGlvbigpe3JldHVybiB0aGlzLmFxfTsNCl8ua2w9bmV3IF8uamwoIm43M3F3ZiIpOw0K
Xy5sbD1uZXcgXy5qbCgiTXBKd1pjIik7DQpfLm1sPW5ldyBfLmpsKCJVVUpxVmUiKTsNCnZh
ciBFYmE7Xy5ubD1uZXcgXy5qbCgieVJSdFIiKTtFYmE9bmV3IF8uamwoInBWYnhCYyIpO18u
b2w9bmV3IF8uamwoIkdIQWVBYyIsIkdIQWVBYyIpO18ucGw9bmV3IF8uamwoIld0NnZqZiIp
O18ucWw9bmV3IF8uamwoImJ5ZlRPYiIpO18ucmw9bmV3IF8uamwoIkxFaWtaZSIpO18uc2w9
bmV3IF8uamwoInJKbUpyYyIpO18uRmJhPW5ldyBfLmpsKCJvZnVhcGMiKTtfLkdiYT1uZXcg
Xy5qbCgibHNqVm1jIik7DQpfLnRsPW5ldyBfLmpsKCJneWNoZyIsdm9pZCAwLFtfLnJsXSk7
Xy51bD1uZXcgXy5qbCgieFVkaXBmIik7DQpfLnZsPW5ldyBfLmpsKCJVbG1tcmQiLHZvaWQg
MCxbXy50bF0pOw0KdmFyIHdsPWZ1bmN0aW9uKGEsYil7dGhpcy5rYT1hO3RoaXMuaGE9Yn07
d2wucHJvdG90eXBlLmdldElkPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMua2F9O3dsLnByb3Rv
dHlwZS50b1N0cmluZz1mdW5jdGlvbigpe3JldHVybiB0aGlzLmthfTsNCl8ueGw9bmV3IHds
KCJza2lwQ2FjaGUiLCEwKTtfLnlsPW5ldyB3bCgibWF4UmV0cmllcyIsMyk7Xy56bD1uZXcg
d2woImlzSW5pdGlhbERhdGEiLCEwKTtfLkFsPW5ldyB3bCgiYmF0Y2hJZCIpO18uQmw9bmV3
IHdsKCJiYXRjaFJlcXVlc3RJZCIpO18uQ2w9bmV3IHdsKCJleHRlbnNpb25JZCIpO18uRGw9
bmV3IHdsKCJlZXNUb2tlbnMiKTtfLkVsPW5ldyB3bCgiZnJvbnRlbmRNZXRob2RUeXBlIik7
Xy5GbD1uZXcgd2woImVwdFplIik7DQpfLkdsPWZ1bmN0aW9uKGEsYixjLGQsZSl7dmFyIGY9
dGhpczt0aGlzLmhhPWE7dGhpcy5KaD1ifHx2b2lkIDA7dGhpcy5BcD1jfHx7fTt0aGlzLkRq
PWR8fHt9O2UmJigwLF8ucGIpKGUsZnVuY3Rpb24oZyl7Zi5EaltnLmtleS5nZXRJZCgpXT12
b2lkIDAhPWcudmFsdWU/Zy52YWx1ZTpnLmtleS5oYX0sdGhpcyl9O18uR2wucHJvdG90eXBl
LnpkPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuaGF9O18uR2wucHJvdG90eXBlLnNKPV8uY2Eo
MTUpO18uSWw9ZnVuY3Rpb24oYSxiLGMpe2lmKHZvaWQgMD09PWIuaGEmJnZvaWQgMD09PWMp
dGhyb3cgRXJyb3IoIktgIitiKTthPV8uSGwoYSk7YS5EaltiLmdldElkKCldPXZvaWQgMCE9
Yz9jOmIuaGE7cmV0dXJuIGF9O18uSGw9ZnVuY3Rpb24oYSl7dmFyIGI9Xy5xYyhhLkFwLGZ1
bmN0aW9uKGQpe3JldHVybiBfLiRpKGQpfSksYz1hLkpoO2M9Yz9fLiRpKGMpOm51bGw7cmV0
dXJuIG5ldyBfLkdsKGEuaGEsYyxiLF8uQ2MoYS5EaikpfTsNCl8uSmw9ZnVuY3Rpb24oYSxi
LGMsZCl7dmFyIGU9dGhpczt0aGlzLmhhPWE7dGhpcy5JYT1jO3RoaXMua2E9Yjt0aGlzLnRh
PXBhcnNlSW50KGEsMTApfHxudWxsO3RoaXMuRmE9dGhpcy5LYT1udWxsOyh0aGlzLkFhPWQp
JiYoMCxfLnBiKShkLGZ1bmN0aW9uKGYpe18uQ2w9PT1mLmtleT9lLnRhPWYudmFsdWU6Xy5E
bD09PWYua2V5P2UuS2E9Zi52YWx1ZTpfLkZsPT09Zi5rZXkmJihlLkZhPWYudmFsdWUpfSx0
aGlzKX07Xy5KbC5wcm90b3R5cGUudG9TdHJpbmc9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5o
YX07Xy5KbC5wcm90b3R5cGUudGI9ZnVuY3Rpb24oYSl7cmV0dXJuIG5ldyBfLkdsKHRoaXMs
YSx2b2lkIDAsdm9pZCAwLHRoaXMuQWEpfTtfLkpsLnByb3RvdHlwZS53YT1fLmNhKDE3KTsN
Cl8uSmwucHJvdG90eXBlLm1hdGNoZXM9ZnVuY3Rpb24oYSl7cmV0dXJuIHRoaXMuaGE9PWEu
aGF8fHRoaXMudGEmJnRoaXMudGEudG9TdHJpbmcoKT09YS5oYXx8YS50YSYmYS50YS50b1N0
cmluZygpPT10aGlzLmhhPyEwOiExfTsNCl8uS2w9ZnVuY3Rpb24oYSl7dGhpcy5oYT1hfTtf
LktsLnByb3RvdHlwZS5rYT1mdW5jdGlvbigpe3JldHVybiB0aGlzLmhhLnByb3RvdHlwZS5Z
YX07Xy5LbC5wcm90b3R5cGUudGI9ZnVuY3Rpb24oYSl7cmV0dXJuIG5ldyB0aGlzLmhhKGEp
fTtfLkxsPWZ1bmN0aW9uKGEsYil7dmFyIGM9bnVsbDthIGluc3RhbmNlb2YgXy54PyJzdHJp
bmciPT09dHlwZW9mIGEuWWEmJihjPWEuWWEpOmEgaW5zdGFuY2VvZiBfLktsP18uYWIoYS5r
YSkmJihjPWEuaGEucHJvdG90eXBlLllhKToic3RyaW5nIj09PXR5cGVvZiBhLnByb3RvdHlw
ZS5ZYSYmKGM9YS5wcm90b3R5cGUuWWEpO3JldHVybiBiJiYhYz8iIjpjfTsNCl8uTWw9bmV3
IF8uamwoIk53SDBIIix2b2lkIDAsW18udWxdKTsNCl8uTmw9ZnVuY3Rpb24oYSxiKXt0aGlz
LndhPWE7dGhpcy5oYT1iO3RoaXMuY29uc3RydWN0b3IuaUh8fCh0aGlzLmNvbnN0cnVjdG9y
LmlIPXt9KTt0aGlzLmNvbnN0cnVjdG9yLmlIW3RoaXMudG9TdHJpbmcoKV09dGhpc307Xy5O
bC5wcm90b3R5cGUuVGQ9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy50b1N0cmluZygpfTtfLk5s
LnByb3RvdHlwZS50b1N0cmluZz1mdW5jdGlvbigpe3RoaXMua2F8fCh0aGlzLmthPXRoaXMu
d2EuaGErIjoiK3RoaXMuaGEpO3JldHVybiB0aGlzLmthfTtfLk5sLnByb3RvdHlwZS5nZXRU
eXBlPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuaGF9Ow0KdmFyIE9sPWZ1bmN0aW9uKGEsYil7
Xy5ObC5jYWxsKHRoaXMsYSxiKX07Xy51KE9sLF8uTmwpOw0KXy5QbD1mdW5jdGlvbihhKXt0
aGlzLmhhPWF9O18uSGJhPW5ldyBfLlBsKCJsaWIiKTsNCnZhciBRbD1mdW5jdGlvbihhKXt2
YXIgYj17fSxjPXt9LGQ9W10sZT1bXSxmPWZ1bmN0aW9uKG4pe2lmKCFjW25dKXt2YXIgcD1u
IGluc3RhbmNlb2YgXy5qbD9uLkRvKCk6W107Y1tuXT1fLkpiKHApOygwLF8ucGIpKHAsZnVu
Y3Rpb24odCl7Ylt0XT1iW3RdfHxbXTtiW3RdLnB1c2gobil9KTtwLmxlbmd0aHx8ZC5wdXNo
KG4pOygwLF8ucGIpKHAsZil9fTtmb3IoKDAsXy5wYikoYSxmKTtkLmxlbmd0aDspe3ZhciBn
PWQuc2hpZnQoKTtlLnB1c2goZyk7YltnXSYmKDAsXy5wYikoYltnXSxmdW5jdGlvbihuKXtf
LkdiKGNbbl0sZyk7Y1tuXS5sZW5ndGh8fGQucHVzaChuKX0pfXZhciBoPXt9LGw9W107KDAs
Xy5wYikoZSxmdW5jdGlvbihuKXtuIGluc3RhbmNlb2YgXy5qbCYmKG49bi5nZXRNb2R1bGVJ
ZCgpLG51bGw9PW58fGhbbl18fChoW25dPSEwLGwucHVzaChuKSkpfSk7cmV0dXJue0UwOmUs
V1g6bH19Ow0KdmFyIFNsPWZ1bmN0aW9uKGEpe18uJGYuY2FsbCh0aGlzKTt0aGlzLiRqPXt9
O3RoaXMuQWE9e307dGhpcy5JYT17fTt0aGlzLmhhPXt9O3RoaXMua2E9e307dGhpcy5MYj17
fTt0aGlzLk5hPWE/YS5WZSgpOm5ldyBfLkZqO3RoaXMuU2I9IWE7dGhpcy50YT1udWxsO2E/
KHRoaXMudGE9YSx0aGlzLklhPWEuSWEsdGhpcy5oYT1hLmhhLHRoaXMuQWE9YS5BYSx0aGlz
LmthPWEua2EpOigwLF8uZmIpKCk7YT1SbCh0aGlzKTt0aGlzIT1hJiYoYS53YT9hLndhLnB1
c2godGhpcyk6YS53YT1bdGhpc10pfSxJYmEsSmJhLFJsLE1iYSxMYmEsTmJhLE9iYTtfLnUo
U2wsXy4kZik7SWJhPS4wNT5NYXRoLnJhbmRvbSgpOw0KSmJhPWZ1bmN0aW9uKGEpe3ZhciBi
PVtdO2E9UmwoYSk7dmFyIGM7YS4kaltfLmtsXSYmKGM9YS4kaltfLmtsXVswXSk7YyYmYi5w
dXNoKGMpO2E9YS53YXx8W107Zm9yKHZhciBkPTA7ZDxhLmxlbmd0aDtkKyspYVtkXS4kaltf
LmtsXSYmKGM9YVtkXS4kaltfLmtsXVswXSksYyYmIV8uQ2IoYixjKSYmYi5wdXNoKGMpO3Jl
dHVybiBifTtSbD1mdW5jdGlvbihhKXtmb3IoO2EudGE7KWE9YS50YTtyZXR1cm4gYX07Xy5U
bD1mdW5jdGlvbihhLGIpe2Zvcig7YTspe2lmKGE9PWIpcmV0dXJuITA7YT1hLnRhfXJldHVy
biExfTtTbC5wcm90b3R5cGUuZ2V0PWZ1bmN0aW9uKGEpe3ZhciBiPV8uVWwodGhpcyxhKTtp
ZihudWxsPT1iKXRocm93IG5ldyBWbChhKTtyZXR1cm4gYn07DQpfLlVsPWZ1bmN0aW9uKGEs
Yil7Zm9yKHZhciBjPWE7YztjPWMudGEpe2lmKGMuaXNEaXNwb3NlZCgpKXRocm93IEVycm9y
KCJMYCIrYik7aWYoYy4kaltiXSlyZXR1cm4gYy4kaltiXVswXTtpZihjLkxiW2JdKWJyZWFr
fWlmKGM9YS5JYVtiXSl7Yz1jKGEpO2lmKG51bGw9PWMpdGhyb3cgRXJyb3IoIk1gIitiKTtf
LldsKGEsYixjKTtyZXR1cm4gY31yZXR1cm4gbnVsbH07U2wucHJvdG90eXBlLnJpPWZ1bmN0
aW9uKGEpe3JldHVybiBfLlhsKHRoaXMsW2FdLHZvaWQgMClbYV19Ow0KXy5YbD1mdW5jdGlv
bihhLGIsYyl7dmFyIGQ9WWwoYSksZT0hYztjPXt9O2Zvcih2YXIgZj1bXSxnPVtdLGg9e30s
bD17fSxuPV8uVWwoYSxFYmEpLHA9MDtwPGIubGVuZ3RoO3ArKyl7dmFyIHQ9YltwXSx2PV8u
VWwoYSx0KTtpZih2KXt2YXIgej1uZXcgXy55aDtjW3RdPXo7di5QcCYmKF8uUGgoeix2LlBw
KCkpLF8uTmgoeixfLmViKGZ1bmN0aW9uKEUpe3JldHVybiBFfSx2KSkpO3ouSmModil9ZWxz
ZSBpZihhLmthW3RdKXo9YS5rYVt0XS5OaSgpLF8uTmgoeiwoMCxfLnIpKGEuRmEsYSx0KSks
Y1t0XT16O2Vsc2V7aWYodCBpbnN0YW5jZW9mIF8uamwpdmFyIEM9UWwoW3RdKS5XWDtlbHNl
KHY9YS5BYVt0XSkmJihDPVt2XSk7IWV8fEMmJkMubGVuZ3RoPyhDJiYobiYmdCBpbnN0YW5j
ZW9mIF8uamwmJm4uZHphKCkmJihJYmEmJih6PW4uZnphKEtiYSksbFt0XT16KSxuLnh5YSh0
KSksZi5wdXNoLmFwcGx5KGYsQyksaFt0XT1fLm5iKEMpKSxnLnB1c2godCkpOih6PW5ldyBf
LnloLA0KY1t0XT16LHouRWYobmV3IFZsKHQpKSl9fWlmKGUpe2lmKGYubGVuZ3RoKXthLkth
JiYwPCgwLF8ucmIpKGYsZnVuY3Rpb24oRSl7cmV0dXJuISRoKGQsRSl9KS5sZW5ndGgmJmEu
S2EucHVzaChuZXcgWmwpO2ZvcihwPTA7cDxnLmxlbmd0aDtwKyspYS5WZSgpLmRpc3BhdGNo
RXZlbnQobmV3ICRsKCJhIixnW3BdKSk7Yj1fLmlpKFlsKGEpLGYpO2ZvcihwPTA7cDxnLmxl
bmd0aDtwKyspdD1nW3BdLHY9aFt0XSxmPWJbdl0sej1mIGluc3RhbmNlb2YgXy55aD9mLk5p
KCk6Xy5VaChmKSxjW3RdPXosbFt0XSYmXy5OaCh6LGZ1bmN0aW9uKCl7bi5ReGEobFt0XSl9
KSxMYmEoYSx6LHQsdil9fWVsc2UgZm9yKHA9MDtwPGcubGVuZ3RoO3ArKyl0PWdbcF0sdj1m
W3BdLHo9bmV3IF8ueWgoKDAsXy5yKShhLmtiLGEsdCkpLGNbdF09eiwoaD1hLmhhW3RdKXx8
KGEuaGFbdF09aD1bXSksdiYmTWJhKGEseix0LHYpLF8uTmgoeiwoMCxfLnIpKGEuTWEsYSx0
LHYpKSxoLnB1c2goe21iOmEsZDp6fSk7DQpyZXR1cm4gY307TWJhPWZ1bmN0aW9uKGEsYixj
LGQpe18uTmgoYixmdW5jdGlvbigpe3ZhciBlPVlsKHRoaXMpO2lmKGUuQmsoZCkuS2spcmV0
dXJuIGUuTWE7dGhpcy5LYSYmdGhpcy5LYS5wdXNoKG5ldyBabCk7cmV0dXJuIGUubG9hZChk
KX0sYSk7Xy5PaChiLCgwLF8ucikoYS5YYSxhLGMsZCkpfTtMYmE9ZnVuY3Rpb24oYSxiLGMs
ZCl7Xy5OaChiLGZ1bmN0aW9uKCl7dGhpcy5WZSgpLmRpc3BhdGNoRXZlbnQobmV3ICRsKCJi
IixjKSl9LGEpO18uT2goYiwoMCxfLnIpKGEuWGEsYSxjLGQpKTtfLk5oKGIsKDAsXy5yKShh
Lk1hLGEsYyxkKSl9Ow0KU2wucHJvdG90eXBlLk1hPWZ1bmN0aW9uKGEsYil7dmFyIGM9Xy5V
bCh0aGlzLGEpO2lmKG51bGw9PWMpe2lmKHRoaXMua2FbYV0pe3ZhciBkPXRoaXMua2FbYV0u
TmkoKTtfLk5oKGQsKDAsXy5yKSh0aGlzLk1hLHRoaXMsYSxiKSk7cmV0dXJuIGR9dGhyb3cg
bmV3IGFtKGEsYiwiTW9kdWxlIGxvYWRlZCBidXQgc2VydmljZSBvciBmYWN0b3J5IG5vdCBy
ZWdpc3RlcmVkIHdpdGggYXBwIGNvbnRleHRzLiIpO31yZXR1cm4gYy5QcD8oZD1uZXcgXy55
aCxfLlBoKGQsYy5QcCgpKSxkLkpjKGMpLF8uTmgoZCwoMCxfLnIpKHRoaXMuRmEsdGhpcyxh
KSksZCk6dGhpcy5GYShhKX07U2wucHJvdG90eXBlLkZhPWZ1bmN0aW9uKGEpe3RoaXMua2Fb
YV0mJmRlbGV0ZSB0aGlzLmthW2FdO3JldHVybiB0aGlzLmdldChhKX07U2wucHJvdG90eXBl
LlhhPWZ1bmN0aW9uKGEsYixjKXtyZXR1cm4gYyBpbnN0YW5jZW9mIF8uemg/YzpuZXcgY20o
YSxiLGMpfTsNCl8uV2w9ZnVuY3Rpb24oYSxiLGMpe2lmKGEuaXNEaXNwb3NlZCgpKV8uYmco
Yyk7ZWxzZXthLiRqW2JdPVtjLCEwXTtjPU5iYShhLGEsYik7Zm9yKHZhciBkPTA7ZDxjLmxl
bmd0aDtkKyspY1tkXS5KYyhudWxsKTtkZWxldGUgYS5BYVtiXX19O05iYT1mdW5jdGlvbihh
LGIsYyl7dmFyIGQ9W10sZT1hLmhhW2NdO2UmJihfLnFiKGUsZnVuY3Rpb24oZil7Xy5UbChm
Lm1iLGIpJiYoZC5wdXNoKGYuZCksXy5HYihlLGYpKX0pLDA9PWUubGVuZ3RoJiZkZWxldGUg
YS5oYVtjXSk7cmV0dXJuIGR9O09iYT1mdW5jdGlvbihhLGIpe2EuaGEmJl8ubmMoYS5oYSxm
dW5jdGlvbihjLGQsZSl7Xy5xYihjLGZ1bmN0aW9uKGYpe2YubWI9PWImJl8uR2IoYyxmKX0p
OzA9PWMubGVuZ3RoJiZkZWxldGUgZVtkXX0pfTsNClNsLnByb3RvdHlwZS5rYj1mdW5jdGlv
bihhLGIpe3ZhciBjPXRoaXMuaGEmJnRoaXMuaGFbYV07aWYoYyl7Zm9yKHZhciBkPTA7ZDxj
Lmxlbmd0aDsrK2QpaWYoY1tkXS5tYj09dGhpcyYmY1tkXS5kPT1iKXtfLkZiKGMsZCk7YnJl
YWt9MD09Yy5sZW5ndGgmJmRlbGV0ZSB0aGlzLmhhW2FdfX07U2wucHJvdG90eXBlLkRjPWZ1
bmN0aW9uKCl7aWYoUmwodGhpcyk9PXRoaXMpe3ZhciBhPXRoaXMud2E7aWYoYSlmb3IoO2Eu
bGVuZ3RoOylhWzBdLmhlKCl9ZWxzZXthPVJsKHRoaXMpLndhO2Zvcih2YXIgYj0wO2I8YS5s
ZW5ndGg7YisrKWlmKGFbYl09PXRoaXMpe2Euc3BsaWNlKGIsMSk7YnJlYWt9fWZvcih2YXIg
YyBpbiB0aGlzLiRqKWE9dGhpcy4kaltjXSxhWzFdJiZhWzBdLmhlJiZhWzBdLmhlKCk7dGhp
cy4kaj1udWxsO3RoaXMuU2ImJnRoaXMuTmEuaGUoKTtPYmEodGhpcyx0aGlzKTt0aGlzLmhh
PW51bGw7Xy5iZyh0aGlzLkZiKTt0aGlzLkxiPXRoaXMuRmI9bnVsbDtTbC5UYi5EYy5jYWxs
KHRoaXMpfTsNClNsLnByb3RvdHlwZS5WZT1mdW5jdGlvbigpe3JldHVybiB0aGlzLk5hfTt2
YXIgWWw9ZnVuY3Rpb24oYSl7cmV0dXJuIGEuUmE/YS5SYTphLnRhP1lsKGEudGEpOm51bGx9
LFZsPWZ1bmN0aW9uKGEpe18ubGIuY2FsbCh0aGlzKTt0aGlzLmlkPWE7dGhpcy5tZXNzYWdl
PSdTZXJ2aWNlIGZvciAiJythKyciIGlzIG5vdCByZWdpc3RlcmVkJ307Xy51KFZsLF8ubGIp
O3ZhciBjbT1mdW5jdGlvbihhLGIsYyl7Xy5sYi5jYWxsKHRoaXMpO3RoaXMubWVzc2FnZT0n
TW9kdWxlICInK2IrJyIgZmFpbGVkIHRvIGxvYWQgd2hlbiByZXF1ZXN0aW5nIHRoZSBzZXJ2
aWNlICInK2ErJyIgW2NhdXNlOiAnK2MrIl0iO3RoaXMuc3RhY2s9Yy5zdGFjaysiXG5XUkFQ
UEVEIEJZOlxuIit0aGlzLnN0YWNrfTtfLnUoY20sXy5sYik7DQp2YXIgYW09ZnVuY3Rpb24o
YSxiLGMpe18ubGIuY2FsbCh0aGlzKTt0aGlzLm1lc3NhZ2U9J0NvbmZpZ3VyYXRpb24gZXJy
b3Igd2hlbiBsb2FkaW5nIHRoZSBtb2R1bGUgIicrYisnIiBmb3IgdGhlIHNlcnZpY2UgIicr
YSsnIjogJytjfTtfLnUoYW0sXy5sYik7dmFyIFpsPWZ1bmN0aW9uKCl7Q2coKX0sJGw9ZnVu
Y3Rpb24oYSl7Xy5oai5jYWxsKHRoaXMsYSl9O18udSgkbCxfLmhqKTt2YXIgS2JhPW5ldyBP
bChuZXcgXy5QbCgiZnZhIiksMSk7DQp2YXIgZG09ZnVuY3Rpb24oKXtfLiRmLmNhbGwodGhp
cyl9LFFiYSxQYmEsZW0sUmJhO18udShkbSxfLiRmKTtkbS5wcm90b3R5cGUuQWM9bnVsbDtk
bS5wcm90b3R5cGUuaW5pdD1mdW5jdGlvbigpe3RoaXMuaGE9W119O1FiYT1mdW5jdGlvbihh
KXt2YXIgYj1lbTtiLmthPWE7UGJhKGIpfTtfLmdtPWZ1bmN0aW9uKGEsYil7dmFyIGM9ZW07
Yy50YSYmKGE9IlBvdGVudGlhbGx5IHNlbnNpdGl2ZSBtZXNzYWdlIHN0cmlwcGVkIGZvciBz
ZWN1cml0eSByZWFzb25zLiIsYj1FcnJvcigiTiIpKTtjLmlzRGlzcG9zZWQoKXx8YiBpbnN0
YW5jZW9mIF8uemh8fChjLmthP2ZtKGMua2EsYixhKTpjLmhhJiYxMD5jLmhhLmxlbmd0aCYm
Yy5oYS5wdXNoKFthLGJdKSl9O1BiYT1mdW5jdGlvbihhKXthLmhhJiYoKDAsXy5wYikoYS5o
YSxmdW5jdGlvbihiKXtmbSh0aGlzLmthLGJbMV0sYlswXSl9LGEpLGEuaGE9bnVsbCl9O2Vt
PW5ldyBkbTtSYmE9ZnVuY3Rpb24oYSl7Xy5nbShudWxsLGEpfTsNCnZhciBobT1mdW5jdGlv
bihhKXtzd2l0Y2goYSl7Y2FzZSAyMDA6Y2FzZSAyMDE6Y2FzZSAyMDI6Y2FzZSAyMDQ6Y2Fz
ZSAyMDY6Y2FzZSAzMDQ6Y2FzZSAxMjIzOnJldHVybiEwO2RlZmF1bHQ6cmV0dXJuITF9fTsN
CnZhciBpbT1mdW5jdGlvbigpe307aW0ucHJvdG90eXBlLmhhPW51bGw7aW0ucHJvdG90eXBl
Lk9mPWZ1bmN0aW9uKCl7dmFyIGE7KGE9dGhpcy5oYSl8fChhPXt9LGptKHRoaXMpJiYoYVsw
XT0hMCxhWzFdPSEwKSxhPXRoaXMuaGE9YSk7cmV0dXJuIGF9Ow0KdmFyIGttLGxtPWZ1bmN0
aW9uKCl7fTtfLnUobG0saW0pO3ZhciBubT1mdW5jdGlvbihhKXtyZXR1cm4oYT1qbShhKSk/
bmV3IEFjdGl2ZVhPYmplY3QoYSk6bmV3IFhNTEh0dHBSZXF1ZXN0fSxqbT1mdW5jdGlvbihh
KXtpZighYS5rYSYmInVuZGVmaW5lZCI9PXR5cGVvZiBYTUxIdHRwUmVxdWVzdCYmInVuZGVm
aW5lZCIhPXR5cGVvZiBBY3RpdmVYT2JqZWN0KXtmb3IodmFyIGI9WyJNU1hNTDIuWE1MSFRU
UC42LjAiLCJNU1hNTDIuWE1MSFRUUC4zLjAiLCJNU1hNTDIuWE1MSFRUUCIsIk1pY3Jvc29m
dC5YTUxIVFRQIl0sYz0wO2M8Yi5sZW5ndGg7YysrKXt2YXIgZD1iW2NdO3RyeXtyZXR1cm4g
bmV3IEFjdGl2ZVhPYmplY3QoZCksYS5rYT1kfWNhdGNoKGUpe319dGhyb3cgRXJyb3IoIk8i
KTt9cmV0dXJuIGEua2F9O2ttPW5ldyBsbTsNCl8ucm09ZnVuY3Rpb24oYSl7cmV0dXJuIGEu
QWcmJiJmdW5jdGlvbiI9PXR5cGVvZiBhLkFnP2EuQWcoKTpfLiRhKGEpfHwic3RyaW5nIj09
PXR5cGVvZiBhP2EubGVuZ3RoOl8udGMoYSl9O18uc209ZnVuY3Rpb24oYSl7aWYoYS5VZiYm
ImZ1bmN0aW9uIj09dHlwZW9mIGEuVWYpcmV0dXJuIGEuVWYoKTtpZigic3RyaW5nIj09PXR5
cGVvZiBhKXJldHVybiBhLnNwbGl0KCIiKTtpZihfLiRhKGEpKXtmb3IodmFyIGI9W10sYz1h
Lmxlbmd0aCxkPTA7ZDxjO2QrKyliLnB1c2goYVtkXSk7cmV0dXJuIGJ9cmV0dXJuIF8udWMo
YSl9O18udG09ZnVuY3Rpb24oYSl7aWYoYS5FaCYmImZ1bmN0aW9uIj09dHlwZW9mIGEuRWgp
cmV0dXJuIGEuRWgoKTtpZighYS5VZnx8ImZ1bmN0aW9uIiE9dHlwZW9mIGEuVWYpe2lmKF8u
JGEoYSl8fCJzdHJpbmciPT09dHlwZW9mIGEpe3ZhciBiPVtdO2E9YS5sZW5ndGg7Zm9yKHZh
ciBjPTA7YzxhO2MrKyliLnB1c2goYyk7cmV0dXJuIGJ9cmV0dXJuIF8udmMoYSl9fTsNCl8u
dW09ZnVuY3Rpb24oYSxiLGMpe2lmKGEuZm9yRWFjaCYmImZ1bmN0aW9uIj09dHlwZW9mIGEu
Zm9yRWFjaClhLmZvckVhY2goYixjKTtlbHNlIGlmKF8uJGEoYSl8fCJzdHJpbmciPT09dHlw
ZW9mIGEpKDAsXy5wYikoYSxiLGMpO2Vsc2UgZm9yKHZhciBkPV8udG0oYSksZT1fLnNtKGEp
LGY9ZS5sZW5ndGgsZz0wO2c8ZjtnKyspYi5jYWxsKGMsZVtnXSxkJiZkW2ddLGEpfTsNCnZh
ciB6bSxEbSxFbSxGbSxHbSxTYmE7Xy52bT1mdW5jdGlvbihhLGIsYyxkLGUsZixnKXt2YXIg
aD0iIjthJiYoaCs9YSsiOiIpO2MmJihoKz0iLy8iLGImJihoKz1iKyJAIiksaCs9YyxkJiYo
aCs9IjoiK2QpKTtlJiYoaCs9ZSk7ZiYmKGgrPSI/IitmKTtnJiYoaCs9IiMiK2cpO3JldHVy
biBofTtfLndtPS9eKD86KFteOi8/Iy5dKyk6KT8oPzpcL1wvKD86KFteLz8jXSopQCk/KFte
LyM/XSo/KSg/OjooWzAtOV0rKSk/KD89Wy8jP118JCkpPyhbXj8jXSspPyg/Olw/KFteI10q
KSk/KD86IyhbXHNcU10qKSk/JC87Xy54bT1mdW5jdGlvbihhLGIpe3JldHVybiBhP2I/ZGVj
b2RlVVJJKGEpOmRlY29kZVVSSUNvbXBvbmVudChhKTphfTtfLnltPWZ1bmN0aW9uKGEsYil7
cmV0dXJuIGIubWF0Y2goXy53bSlbYV18fG51bGx9Ow0Kem09ZnVuY3Rpb24oYSl7YT1fLnlt
KDEsYSk7IWEmJl8ucWEuc2VsZiYmXy5xYS5zZWxmLmxvY2F0aW9uJiYoYT1fLnFhLnNlbGYu
bG9jYXRpb24ucHJvdG9jb2wsYT1hLnN1YnN0cigwLGEubGVuZ3RoLTEpKTtyZXR1cm4gYT9h
LnRvTG93ZXJDYXNlKCk6IiJ9O18uQW09ZnVuY3Rpb24oYSl7dmFyIGI9YS5pbmRleE9mKCIj
Iik7cmV0dXJuIDA+Yj9udWxsOmEuc3Vic3RyKGIrMSl9O18uQm09ZnVuY3Rpb24oYSl7YT1h
Lm1hdGNoKF8ud20pO3JldHVybiBfLnZtKGFbMV0sYVsyXSxhWzNdLGFbNF0pfTtfLkNtPWZ1
bmN0aW9uKGEsYil7aWYoYSl7YT1hLnNwbGl0KCImIik7Zm9yKHZhciBjPTA7YzxhLmxlbmd0
aDtjKyspe3ZhciBkPWFbY10uaW5kZXhPZigiPSIpLGU9bnVsbDtpZigwPD1kKXt2YXIgZj1h
W2NdLnN1YnN0cmluZygwLGQpO2U9YVtjXS5zdWJzdHJpbmcoZCsxKX1lbHNlIGY9YVtjXTti
KGYsZT9kZWNvZGVVUklDb21wb25lbnQoZS5yZXBsYWNlKC9cKy9nLCIgIikpOiIiKX19fTsN
CkRtPWZ1bmN0aW9uKGEsYil7aWYoIWIpcmV0dXJuIGE7dmFyIGM9YS5pbmRleE9mKCIjIik7
MD5jJiYoYz1hLmxlbmd0aCk7dmFyIGQ9YS5pbmRleE9mKCI/Iik7aWYoMD5kfHxkPmMpe2Q9
Yzt2YXIgZT0iIn1lbHNlIGU9YS5zdWJzdHJpbmcoZCsxLGMpO2E9W2Euc3Vic3RyKDAsZCks
ZSxhLnN1YnN0cihjKV07Yz1hWzFdO2FbMV09Yj9jP2MrIiYiK2I6YjpjO3JldHVybiBhWzBd
KyhhWzFdPyI/IithWzFdOiIiKSthWzJdfTtFbT1mdW5jdGlvbihhLGIsYyl7aWYoXy5aYShi
KSlmb3IodmFyIGQ9MDtkPGIubGVuZ3RoO2QrKylFbShhLFN0cmluZyhiW2RdKSxjKTtlbHNl
IG51bGwhPWImJmMucHVzaChhKygiIj09PWI/IiI6Ij0iK18uV2QoYikpKX07Rm09ZnVuY3Rp
b24oYSxiKXt2YXIgYz1bXTtmb3IoYj1ifHwwO2I8YS5sZW5ndGg7Yis9MilFbShhW2JdLGFb
YisxXSxjKTtyZXR1cm4gYy5qb2luKCImIil9Ow0KR209ZnVuY3Rpb24oYSl7dmFyIGI9W10s
Yztmb3IoYyBpbiBhKUVtKGMsYVtjXSxiKTtyZXR1cm4gYi5qb2luKCImIil9O18uSG09ZnVu
Y3Rpb24oYSxiKXt2YXIgYz0yPT1hcmd1bWVudHMubGVuZ3RoP0ZtKGFyZ3VtZW50c1sxXSww
KTpGbShhcmd1bWVudHMsMSk7cmV0dXJuIERtKGEsYyl9O18uSW09ZnVuY3Rpb24oYSxiLGMp
e2M9bnVsbCE9Yz8iPSIrXy5XZChjKToiIjtyZXR1cm4gRG0oYSxiK2MpfTtfLkptPWZ1bmN0
aW9uKGEsYixjLGQpe2Zvcih2YXIgZT1jLmxlbmd0aDswPD0oYj1hLmluZGV4T2YoYyxiKSkm
JmI8ZDspe3ZhciBmPWEuY2hhckNvZGVBdChiLTEpO2lmKDM4PT1mfHw2Mz09ZilpZihmPWEu
Y2hhckNvZGVBdChiK2UpLCFmfHw2MT09Znx8Mzg9PWZ8fDM1PT1mKXJldHVybiBiO2IrPWUr
MX1yZXR1cm4tMX07Xy5LbT0vI3wkLzsNCl8uTG09ZnVuY3Rpb24oYSxiKXt2YXIgYz1hLnNl
YXJjaChfLkttKSxkPV8uSm0oYSwwLGIsYyk7aWYoMD5kKXJldHVybiBudWxsO3ZhciBlPWEu
aW5kZXhPZigiJiIsZCk7aWYoMD5lfHxlPmMpZT1jO2QrPWIubGVuZ3RoKzE7cmV0dXJuIGRl
Y29kZVVSSUNvbXBvbmVudChhLnN1YnN0cihkLGUtZCkucmVwbGFjZSgvXCsvZywiICIpKX07
U2JhPS9bPyZdKCR8IykvO18uTW09ZnVuY3Rpb24oYSxiKXtmb3IodmFyIGM9YS5zZWFyY2go
Xy5LbSksZD0wLGUsZj1bXTswPD0oZT1fLkptKGEsZCxiLGMpKTspZi5wdXNoKGEuc3Vic3Ry
aW5nKGQsZSkpLGQ9TWF0aC5taW4oYS5pbmRleE9mKCImIixlKSsxfHxjLGMpO2YucHVzaChh
LnN1YnN0cihkKSk7cmV0dXJuIGYuam9pbigiIikucmVwbGFjZShTYmEsIiQxIil9Ow0KdmFy
IFRiYSxQbTtfLk5tPWZ1bmN0aW9uKGEpe18uRmouY2FsbCh0aGlzKTt0aGlzLmhlYWRlcnM9
bmV3IF8uSGc7dGhpcy5SYT1hfHxudWxsO3RoaXMua2E9ITE7dGhpcy5OYT10aGlzLmhhPW51
bGw7dGhpcy5JYT0iIjt0aGlzLkFhPTA7dGhpcy50YT10aGlzLkZiPXRoaXMuTWE9dGhpcy5Y
YT0hMTt0aGlzLkthPTA7dGhpcy5GYT1udWxsO3RoaXMuTGI9IiI7dGhpcy5oYz10aGlzLmti
PSExfTtfLnUoXy5ObSxfLkZqKTtfLk5tLnByb3RvdHlwZS5BYz1udWxsO1RiYT0vXmh0dHBz
PyQvaTtfLk9tPVsiUE9TVCIsIlBVVCJdO1BtPVtdO18uUW09ZnVuY3Rpb24oYSxiLGMsZCxl
LGYsZyl7dmFyIGg9bmV3IF8uTm07UG0ucHVzaChoKTtiJiZoLmxpc3RlbigiY29tcGxldGUi
LGIpO2guJGwoInJlYWR5IixoLlpiKTtmJiYoaC5LYT1NYXRoLm1heCgwLGYpKTtnJiYoaC5r
Yj1nKTtoLnNlbmQoYSxjLGQsZSl9Ow0KXy5ObS5wcm90b3R5cGUuWmI9ZnVuY3Rpb24oKXt0
aGlzLmhlKCk7Xy5HYihQbSx0aGlzKX07DQpfLk5tLnByb3RvdHlwZS5zZW5kPWZ1bmN0aW9u
KGEsYixjLGQpe2lmKHRoaXMuaGEpdGhyb3cgRXJyb3IoIlBgIit0aGlzLklhKyJgIithKTti
PWI/Yi50b1VwcGVyQ2FzZSgpOiJHRVQiO3RoaXMuSWE9YTt0aGlzLkFhPTA7dGhpcy5YYT0h
MTt0aGlzLmthPSEwO3RoaXMuaGE9dGhpcy5SYT9ubSh0aGlzLlJhKTpubShrbSk7dGhpcy5O
YT10aGlzLlJhP3RoaXMuUmEuT2YoKTprbS5PZigpO3RoaXMuaGEub25yZWFkeXN0YXRlY2hh
bmdlPSgwLF8ucikodGhpcy54ZSx0aGlzKTt0cnl7dGhpcy5GYj0hMCx0aGlzLmhhLm9wZW4o
YixTdHJpbmcoYSksITApLHRoaXMuRmI9ITF9Y2F0Y2goZil7Um0odGhpcyk7cmV0dXJufWE9
Y3x8IiI7dmFyIGU9dGhpcy5oZWFkZXJzLmNsb25lKCk7ZCYmXy51bShkLGZ1bmN0aW9uKGYs
Zyl7ZS5zZXQoZyxmKX0pO2Q9Xy56YihlLkVoKCksVWJhKTtjPV8ucWEuRm9ybURhdGEmJmEg
aW5zdGFuY2VvZiBfLnFhLkZvcm1EYXRhOyFfLkNiKF8uT20sYil8fGR8fA0KY3x8ZS5zZXQo
IkNvbnRlbnQtVHlwZSIsImFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZDtjaGFy
c2V0PXV0Zi04Iik7ZS5mb3JFYWNoKGZ1bmN0aW9uKGYsZyl7dGhpcy5oYS5zZXRSZXF1ZXN0
SGVhZGVyKGcsZil9LHRoaXMpO3RoaXMuTGImJih0aGlzLmhhLnJlc3BvbnNlVHlwZT10aGlz
LkxiKTsid2l0aENyZWRlbnRpYWxzImluIHRoaXMuaGEmJnRoaXMuaGEud2l0aENyZWRlbnRp
YWxzIT09dGhpcy5rYiYmKHRoaXMuaGEud2l0aENyZWRlbnRpYWxzPXRoaXMua2IpO3RyeXtT
bSh0aGlzKSwwPHRoaXMuS2EmJigodGhpcy5oYz1WYmEodGhpcy5oYSkpPyh0aGlzLmhhLnRp
bWVvdXQ9dGhpcy5LYSx0aGlzLmhhLm9udGltZW91dD0oMCxfLnIpKHRoaXMuV3UsdGhpcykp
OnRoaXMuRmE9Xy5Iaih0aGlzLld1LHRoaXMuS2EsdGhpcykpLHRoaXMuTWE9ITAsdGhpcy5o
YS5zZW5kKGEpLHRoaXMuTWE9ITF9Y2F0Y2goZil7Um0odGhpcyl9fTsNCnZhciBWYmE9ZnVu
Y3Rpb24oYSl7cmV0dXJuIF8ucmUmJl8uRWUoOSkmJiJudW1iZXIiPT09dHlwZW9mIGEudGlt
ZW91dCYmdm9pZCAwIT09YS5vbnRpbWVvdXR9LFViYT1mdW5jdGlvbihhKXtyZXR1cm4iY29u
dGVudC10eXBlIj09YS50b0xvd2VyQ2FzZSgpfTtfLk5tLnByb3RvdHlwZS5XdT1mdW5jdGlv
bigpeyJ1bmRlZmluZWQiIT10eXBlb2YgUGEmJnRoaXMuaGEmJih0aGlzLkFhPTgsdGhpcy5k
aXNwYXRjaEV2ZW50KCJ0aW1lb3V0IiksdGhpcy5hYm9ydCg4KSl9O3ZhciBSbT1mdW5jdGlv
bihhKXthLmthPSExO2EuaGEmJihhLnRhPSEwLGEuaGEuYWJvcnQoKSxhLnRhPSExKTthLkFh
PTU7VG0oYSk7VW0oYSl9LFRtPWZ1bmN0aW9uKGEpe2EuWGF8fChhLlhhPSEwLGEuZGlzcGF0
Y2hFdmVudCgiY29tcGxldGUiKSxhLmRpc3BhdGNoRXZlbnQoImVycm9yIikpfTsNCl8uTm0u
cHJvdG90eXBlLmFib3J0PWZ1bmN0aW9uKGEpe3RoaXMuaGEmJnRoaXMua2EmJih0aGlzLmth
PSExLHRoaXMudGE9ITAsdGhpcy5oYS5hYm9ydCgpLHRoaXMudGE9ITEsdGhpcy5BYT1hfHw3
LHRoaXMuZGlzcGF0Y2hFdmVudCgiY29tcGxldGUiKSx0aGlzLmRpc3BhdGNoRXZlbnQoImFi
b3J0IiksVW0odGhpcykpfTtfLk5tLnByb3RvdHlwZS5EYz1mdW5jdGlvbigpe3RoaXMuaGEm
Jih0aGlzLmthJiYodGhpcy5rYT0hMSx0aGlzLnRhPSEwLHRoaXMuaGEuYWJvcnQoKSx0aGlz
LnRhPSExKSxVbSh0aGlzLCEwKSk7Xy5ObS5UYi5EYy5jYWxsKHRoaXMpfTtfLk5tLnByb3Rv
dHlwZS54ZT1mdW5jdGlvbigpe3RoaXMuaXNEaXNwb3NlZCgpfHwodGhpcy5GYnx8dGhpcy5N
YXx8dGhpcy50YT9WbSh0aGlzKTp0aGlzLlNiKCkpfTtfLk5tLnByb3RvdHlwZS5TYj1mdW5j
dGlvbigpe1ZtKHRoaXMpfTsNCnZhciBWbT1mdW5jdGlvbihhKXtpZihhLmthJiYidW5kZWZp
bmVkIiE9dHlwZW9mIFBhJiYoIWEuTmFbMV18fDQhPV8uV20oYSl8fDIhPWEuZ2V0U3RhdHVz
KCkpKWlmKGEuTWEmJjQ9PV8uV20oYSkpXy5IaihhLnhlLDAsYSk7ZWxzZSBpZihhLmRpc3Bh
dGNoRXZlbnQoInJlYWR5c3RhdGVjaGFuZ2UiKSw0PT1fLldtKGEpKXthLmthPSExO3RyeXtf
LlhtKGEpPyhhLmRpc3BhdGNoRXZlbnQoImNvbXBsZXRlIiksYS5kaXNwYXRjaEV2ZW50KCJz
dWNjZXNzIikpOihhLkFhPTYsYS5nZXRTdGF0dXMoKSxUbShhKSl9ZmluYWxseXtVbShhKX19
fSxVbT1mdW5jdGlvbihhLGIpe2lmKGEuaGEpe1NtKGEpO3ZhciBjPWEuaGEsZD1hLk5hWzBd
P18uVmE6bnVsbDthLmhhPW51bGw7YS5OYT1udWxsO2J8fGEuZGlzcGF0Y2hFdmVudCgicmVh
ZHkiKTt0cnl7Yy5vbnJlYWR5c3RhdGVjaGFuZ2U9ZH1jYXRjaChlKXt9fX0sU209ZnVuY3Rp
b24oYSl7YS5oYSYmYS5oYyYmKGEuaGEub250aW1lb3V0PQ0KbnVsbCk7YS5GYSYmKF8uSWoo
YS5GYSksYS5GYT1udWxsKX07Xy5ObS5wcm90b3R5cGUudWU9ZnVuY3Rpb24oKXtyZXR1cm4h
IXRoaXMuaGF9O18uWG09ZnVuY3Rpb24oYSl7dmFyIGI9YS5nZXRTdGF0dXMoKSxjO2lmKCEo
Yz1obShiKSkpe2lmKGI9MD09PWIpYT16bShTdHJpbmcoYS5JYSkpLGI9IVRiYS50ZXN0KGEp
O2M9Yn1yZXR1cm4gY307Xy5XbT1mdW5jdGlvbihhKXtyZXR1cm4gYS5oYT9hLmhhLnJlYWR5
U3RhdGU6MH07Xy5ObS5wcm90b3R5cGUuZ2V0U3RhdHVzPWZ1bmN0aW9uKCl7dHJ5e3JldHVy
biAyPF8uV20odGhpcyk/dGhpcy5oYS5zdGF0dXM6LTF9Y2F0Y2goYSl7cmV0dXJuLTF9fTtf
LlltPWZ1bmN0aW9uKGEpe3RyeXtyZXR1cm4gYS5oYT9hLmhhLnJlc3BvbnNlVGV4dDoiIn1j
YXRjaChiKXtyZXR1cm4iIn19O18uTm0ucHJvdG90eXBlLndhPV8uY2EoMTYpO01mKGZ1bmN0
aW9uKGEpe18uTm0ucHJvdG90eXBlLlNiPWEoXy5ObS5wcm90b3R5cGUuU2IpfSk7DQpfLlpt
PWZ1bmN0aW9uKGEpe18uJGYuY2FsbCh0aGlzKTt0aGlzLmthPWE7dGhpcy5oYT17fX07Xy51
KF8uWm0sXy4kZik7dmFyIGFuPVtdO18uWm0ucHJvdG90eXBlLmxpc3Rlbj1mdW5jdGlvbihh
LGIsYyxkKXtfLlphKGIpfHwoYiYmKGFuWzBdPWIudG9TdHJpbmcoKSksYj1hbik7Zm9yKHZh
ciBlPTA7ZTxiLmxlbmd0aDtlKyspe3ZhciBmPV8udWooYSxiW2VdLGN8fHRoaXMuaGFuZGxl
RXZlbnQsZHx8ITEsdGhpcy5rYXx8dGhpcyk7aWYoIWYpYnJlYWs7dGhpcy5oYVtmLmtleV09
Zn1yZXR1cm4gdGhpc307Xy5abS5wcm90b3R5cGUuJGw9ZnVuY3Rpb24oYSxiLGMsZCl7cmV0
dXJuIGJuKHRoaXMsYSxiLGMsZCl9Ow0KdmFyIGJuPWZ1bmN0aW9uKGEsYixjLGQsZSxmKXtp
ZihfLlphKGMpKWZvcih2YXIgZz0wO2c8Yy5sZW5ndGg7ZysrKWJuKGEsYixjW2ddLGQsZSxm
KTtlbHNle2I9Xy50aihiLGMsZHx8YS5oYW5kbGVFdmVudCxlLGZ8fGEua2F8fGEpO2lmKCFi
KXJldHVybiBhO2EuaGFbYi5rZXldPWJ9cmV0dXJuIGF9O18uWm0ucHJvdG90eXBlLmVrPWZ1
bmN0aW9uKGEsYixjLGQsZSl7aWYoXy5aYShiKSlmb3IodmFyIGY9MDtmPGIubGVuZ3RoO2Yr
Kyl0aGlzLmVrKGEsYltmXSxjLGQsZSk7ZWxzZSBjPWN8fHRoaXMuaGFuZGxlRXZlbnQsZD1f
LmJiKGQpPyEhZC5jYXB0dXJlOiEhZCxlPWV8fHRoaXMua2F8fHRoaXMsYz12aihjKSxkPSEh
ZCxiPWxqKGEpP2EueHEoYixjLGQsZSk6YT8oYT14aihhKSk/YS54cShiLGMsZCxlKTpudWxs
Om51bGwsYiYmKF8uQmooYiksZGVsZXRlIHRoaXMuaGFbYi5rZXldKTtyZXR1cm4gdGhpc307
DQpfLmNuPWZ1bmN0aW9uKGEpe18ubmMoYS5oYSxmdW5jdGlvbihiLGMpe3RoaXMuaGEuaGFz
T3duUHJvcGVydHkoYykmJl8uQmooYil9LGEpO2EuaGE9e319O18uWm0ucHJvdG90eXBlLkRj
PWZ1bmN0aW9uKCl7Xy5abS5UYi5EYy5jYWxsKHRoaXMpO18uY24odGhpcyl9O18uWm0ucHJv
dG90eXBlLmhhbmRsZUV2ZW50PWZ1bmN0aW9uKCl7dGhyb3cgRXJyb3IoIlEiKTt9Ow0KdmFy
IFhiYSxXYmE7Xy5kbj1mdW5jdGlvbihhKXt0aGlzLmthPXZvaWQgMD09PWE/bnVsbDphO3Ro
aXMuaGE9Il9TQ18iK1diYSsrO1hiYS5wdXNoKHRoaXMpfTtYYmE9W107V2JhPTA7Xy5tKCku
WWgoZnVuY3Rpb24oKXt9KTsNCl8uZW49bmV3IF8uZG4oITEpOw0KdmFyIFliYT1bXSxaYmE9
ZnVuY3Rpb24oYSxiLGMpe3RoaXMuVnk9YTt0aGlzLmthPXZvaWQgMD09PWM/bnVsbDpjO3Ro
aXMuaGE9bnVsbDt0aGlzLnRhPWI7WWJhLnB1c2godGhpcyl9LGZuPWZ1bmN0aW9uKGEsYil7
dmFyIGM9YS5WeS5EbygpO18uR2IoYyxhLmthKTtjLnB1c2goYik7YS5oYT1ifTsNCl8uZ249
ZnVuY3Rpb24oKXt0aGlzLmhhPXt9fTtfLmduLnByb3RvdHlwZS5yZWdpc3Rlcj1mdW5jdGlv
bihhLGIpe3RoaXMuaGFbYV09Yn07Xy5obj1mdW5jdGlvbihhLGIpe2lmKCFhLmhhW2JdKXJl
dHVybiBiO2E9YS5oYVtiXTtyZXR1cm4oYT1hLmhhfHxhLmthKT9hOmJ9O18uam49ZnVuY3Rp
b24oYSxiKXthPWEuaGFbYl07aWYoIWEpdGhyb3cgRXJyb3IoIlJgIitiKTtyZXR1cm4gYX07
Xy5YYShfLmduKTsNCnZhciBubixsbixvbixwbixrbjtfLkc9ZnVuY3Rpb24oYSxiKXtyZXR1
cm4ga24oYSxuZXcgXy5qbChhLGEsYikpfTtfLm1uPWZ1bmN0aW9uKGEsYil7YT1fLkcoYSxi
P1tiXTp2b2lkIDApO18uZ24udGIoKS5yZWdpc3RlcihhLG5ldyBaYmEoYSxsbihhKSxiKSk7
cmV0dXJuIGF9O25uPWZ1bmN0aW9uKGEsYil7bG4oYikuYWRkKGEpfTtsbj1mdW5jdGlvbihh
KXthPWEudG9TdHJpbmcoKTtyZXR1cm4gb25bYV09b25bYV18fG5ldyBTZXR9O29uPXt9O3Bu
PXt9O18ucW49ZnVuY3Rpb24oYSl7dmFyIGI9cG5bYV07Ynx8KGI9bmV3IF8uamwoYSxhLFtd
KSxrbihhLGIpKTtyZXR1cm4gYn07a249ZnVuY3Rpb24oYSxiKXtyZXR1cm4gYj1wblthXT1w
blthXXx8Yn07DQpfLnJuPV8ubW4oIlFMcFRPZCIpOw0KXy5zbj1mdW5jdGlvbihhKXtyZXR1
cm4gXy5qbihfLmduLnRiKCksYSl9Ow0KXy4kYmE9bmV3IF8uZmgoZnVuY3Rpb24oYSl7Xy50
bj1hfSk7DQpfLnVuPWZ1bmN0aW9uKGEpe18ueSh0aGlzLGEsMCwtMSxudWxsLG51bGwpfTtf
LnUoXy51bixfLngpO18uYmpbNjYzMjE2ODddPW5ldyBfLkVpKDY2MzIxNjg3LF8udW4pOw0K
dmFyIHZuPWZ1bmN0aW9uKGEpe18ueSh0aGlzLGEsMCwtMSxudWxsLG51bGwpfTtfLnUodm4s
Xy54KTsNCl8uYWNhPW5ldyBfLkVpKDE3NTIzNzM3NSx2bik7DQp2YXIgd247Xy5iY2E9TWF0
aC5wb3coMiwzMSktMTt3bj1mdW5jdGlvbihhLGIpe3RoaXMuaGE9YTt0aGlzLmthPWJ9O18u
eG49bmV3IHduKCJQTCIsMSk7Xy5jY2E9bmV3IHduKCJNUyIsMik7Xy5kY2E9bmV3IHduKCJW
VCIsMyk7DQp2YXIgeW49ZnVuY3Rpb24oYSl7dmFyIGI9Xy5xYS5kb2N1bWVudDtpZihiJiYh
Yi5jcmVhdGVFdmVudCYmYi5jcmVhdGVFdmVudE9iamVjdCl0cnl7cmV0dXJuIGIuY3JlYXRl
RXZlbnRPYmplY3QoYSl9Y2F0Y2goYyl7cmV0dXJuIGF9ZWxzZSByZXR1cm4gYX07DQp2YXIg
Q249ZnVuY3Rpb24oYSxiLGMsZCxlLGYpe18uRmouY2FsbCh0aGlzKTt0aGlzLlhhPWEucmVw
bGFjZShlY2EsIl8iKTt0aGlzLkZiPWE7dGhpcy50YT1ifHxudWxsO3RoaXMua2E9Yz95bihj
KTpudWxsO3RoaXMuU2I9ZXx8bnVsbDt0aGlzLk1hPWZ8fG51bGw7IXRoaXMuTWEmJmMmJmMu
dGFyZ2V0JiZfLkNmKGMudGFyZ2V0KSYmKHRoaXMuTWE9Yy50YXJnZXQpO3RoaXMuTmE9W107
dGhpcy5rYj17fTt0aGlzLkxiPXRoaXMuRmE9ZHx8KDAsXy5mYikoKTt0aGlzLmhhPXt9O3Ro
aXMuaGFbIm1haW4tYWN0aW9uZmxvdy1icmFuY2giXT0xO3RoaXMuSWE9e307dGhpcy53YT0h
MTt0aGlzLkFhPXt9O3RoaXMuS2E9e307dGhpcy5SYT0hMTt6bi5wdXNoKHRoaXMpO3RoaXMu
aGM9KytmY2E7YT1uZXcgQW4oImNyZWF0ZWQiLHRoaXMpO251bGwhPUJuJiZCbi5kaXNwYXRj
aEV2ZW50KGEpfTtfLnUoQ24sXy5Gaik7DQp2YXIgem49W10sQm49bmV3IF8uRmosZWNhPS9b
fi4sPyYtXS9nLGZjYT0wO0NuLnByb3RvdHlwZS5pZD1mdW5jdGlvbigpe3JldHVybiB0aGlz
LmhjfTtDbi5wcm90b3R5cGUuZ2V0VHlwZT1mdW5jdGlvbigpe3JldHVybiB0aGlzLlhhfTt2
YXIgRW49ZnVuY3Rpb24oYSxiLGMpe2Eud2EmJkRuKGEsInRpY2siLHZvaWQgMCxiKTtjPWN8
fHt9O2IgaW4gYS5rYiYmKGEuSWFbYl09ITApO3ZhciBkPWMudGltZXx8KDAsXy5mYikoKTsh
Yy54VCYmIWMuTHhhJiZkPmEuTGImJihhLkxiPWQpO2Zvcih2YXIgZT1kLWEuRmEsZj1hLk5h
Lmxlbmd0aDswPGYmJmEuTmFbZi0xXVsxXT5lOylmLS07Xy5PYihhLk5hLGYsMCxbYixlLGMu
eFRdKTthLmtiW2JdPWR9Ow0KQ24ucHJvdG90eXBlLmRvbmU9ZnVuY3Rpb24oYSxiLGMpe2lm
KHRoaXMud2F8fCF0aGlzLmhhW2FdKURuKHRoaXMsImRvbmUiLGEsYik7ZWxzZXtiJiZFbih0
aGlzLGIsYyk7dGhpcy5oYVthXS0tOzA9PXRoaXMuaGFbYV0mJmRlbGV0ZSB0aGlzLmhhW2Fd
O2lmKGE9Xy56Yyh0aGlzLmhhKSlpZihCbil7Yj1hPSIiO2Zvcih2YXIgZCBpbiB0aGlzLklh
KXRoaXMuSWEuaGFzT3duUHJvcGVydHkoZCkmJihiPWIrYStkLGE9InwiKTtiJiYodGhpcy5L
YS5kdXA9Yik7ZD1uZXcgQW4oImJlZm9yZWRvbmUiLHRoaXMpO3RoaXMuZGlzcGF0Y2hFdmVu
dChkKSYmQm4uZGlzcGF0Y2hFdmVudChkKT8oKGE9Z2NhKHRoaXMuS2EpKSYmKHRoaXMuQWEu
Y2FkPWEpLGQudHlwZT0iZG9uZSIsYT1Cbi5kaXNwYXRjaEV2ZW50KGQpKTphPSExfWVsc2Ug
YT0hMDthJiYodGhpcy53YT0hMCxfLkdiKHpuLHRoaXMpLHRoaXMua2E9dGhpcy50YT1udWxs
LHRoaXMuaGUoKSl9fTsNCkNuLnByb3RvdHlwZS5OaT1mdW5jdGlvbihhLGIsYyl7dGhpcy53
YSYmRG4odGhpcywiYnJhbmNoIixhLGIpO2ImJkVuKHRoaXMsYixjKTt0aGlzLmhhW2FdP3Ro
aXMuaGFbYV0rKzp0aGlzLmhhW2FdPTF9O3ZhciBEbj1mdW5jdGlvbihhLGIsYyxkKXtpZihC
bil7dmFyIGU9bmV3IEFuKCJlcnJvciIsYSk7ZS5lcnJvcj1iO2UuTmk9YztlLmthPWQ7ZS5o
YT1hLndhO0JuLmRpc3BhdGNoRXZlbnQoZSl9fSxnY2E9ZnVuY3Rpb24oYSl7dmFyIGI9W107
Xy5uYyhhLGZ1bmN0aW9uKGMsZCl7ZD1lbmNvZGVVUklDb21wb25lbnQoZCk7Yz1lbmNvZGVV
UklDb21wb25lbnQoYykucmVwbGFjZSgvJTdDL2csInwiKTtiLnB1c2goZCsiOiIrYyl9KTty
ZXR1cm4gYi5qb2luKCIsIil9Ow0KQ24ucHJvdG90eXBlLmFjdGlvbj1mdW5jdGlvbihhKXt0
aGlzLndhJiZEbih0aGlzLCJhY3Rpb24iKTt2YXIgYj1bXSxjPW51bGwsZD1udWxsLGU9bnVs
bCxmPW51bGw7aGNhKGEsZnVuY3Rpb24oZyl7dmFyIGg7IWcuX19vaSYmZy5nZXRBdHRyaWJ1
dGUmJihnLl9fb2k9Zy5nZXRBdHRyaWJ1dGUoIm9pIikpO2lmKGg9Zy5fX29pKWIudW5zaGlm
dChoKSxjfHwoYz1nLmdldEF0dHJpYnV0ZSgianNpbnN0YW5jZSIpKTtlfHxkJiYiMSIhPWR8
fChlPWcuZ2V0QXR0cmlidXRlKCJ2ZWQiKSk7Znx8KGY9Zy5nZXRBdHRyaWJ1dGUoInZldCIp
KTtkfHwoZD1nLmdldEF0dHJpYnV0ZSgianN0cmFjayIpKX0pO2YmJih0aGlzLkFhLnZldD1m
KTtkJiYodGhpcy5BYS5jdD10aGlzLlhhLDA8Yi5sZW5ndGgmJmljYSh0aGlzLGIuam9pbigi
LiIpKSxjJiYoYz0iKiI9PWMuY2hhckF0KDApP3BhcnNlSW50KGMuc3Vic3RyKDEpLDEwKTpw
YXJzZUludChjLDEwKSx0aGlzLkFhLmNkPWMpLCIxIiE9ZCYmDQoodGhpcy5BYS5laT1kKSxl
JiYodGhpcy5BYS52ZWQ9ZSkpfTt2YXIgaWNhPWZ1bmN0aW9uKGEsYil7YS53YSYmRG4oYSwi
ZXh0cmFkYXRhIik7YS5LYS5vaT1iLnRvU3RyaW5nKCkucmVwbGFjZSgvWzo7LFxzXS9nLCJf
Iil9LGhjYT1mdW5jdGlvbihhLGIpe2Zvcig7YSYmMT09YS5ub2RlVHlwZTthPWEucGFyZW50
Tm9kZSliKGEpfTtfLms9Q24ucHJvdG90eXBlO18uay5TaT1mdW5jdGlvbigpe3JldHVybiB0
aGlzLkZifTtfLmsuSmM9ZnVuY3Rpb24oYSxiLGMsZCl7dGhpcy5OaShiLGMpO3ZhciBlPXRo
aXM7cmV0dXJuIGZ1bmN0aW9uKGYpe3RyeXt2YXIgZz1hLmFwcGx5KHRoaXMsYXJndW1lbnRz
KX1maW5hbGx5e2UuZG9uZShiLGQpfXJldHVybiBnfX07Xy5rLmV2ZW50PWZ1bmN0aW9uKCl7
cmV0dXJuIHRoaXMua2F9O18uay5SaT1mdW5jdGlvbigpe3JldHVybiB0aGlzLlNifTtfLmsu
dGFyZ2V0PWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuTWF9Ow0KXy5rLnZhbHVlPWZ1bmN0aW9u
KGEpe3ZhciBiPXRoaXMudGE7cmV0dXJuIGI/YSBpbiBiP2JbYV06Yi5nZXRBdHRyaWJ1dGU/
Yi5nZXRBdHRyaWJ1dGUoYSk6dm9pZCAwOnZvaWQgMH07dmFyIEFuPWZ1bmN0aW9uKGEsYil7
Xy5oai5jYWxsKHRoaXMsYSxiKX07Xy51KEFuLF8uaGopOw0KdmFyIEZuPWZ1bmN0aW9uKCl7
fTtGbi5wcm90b3R5cGUuS2E9ZnVuY3Rpb24oKXt9Ow0KdmFyIGpjYT1bImNsaWNrIiwiZm9j
dXMiLCJ0b3VjaHN0YXJ0IiwibW91c2Vkb3duIl0sR249ZnVuY3Rpb24oKXt0aGlzLndhPTA7
dGhpcy50YT1udWxsO3RoaXMuSWE9ITE7dGhpcy5rYT10aGlzLmhhPW51bGw7dGhpcy5BYT0h
MX07Xy5xKEduLEZuKTsNCkduLnByb3RvdHlwZS5LYT1mdW5jdGlvbihhKXtpZihfLkNiKGpj
YSxhLlJpKCkpJiYodGhpcy53YSsrLG51bGwhPWEudGEpKXt2YXIgYj1hLmthJiZhLmthLmhh
P2EuUmE/KF8uVWEoIndpbmRvdy5wZXJmb3JtYW5jZS50aW1pbmcubmF2aWdhdGlvblN0YXJ0
IikmJl8uVWEoIndpbmRvdy5wZXJmb3JtYW5jZS5ub3ciKT93aW5kb3cucGVyZm9ybWFuY2Uu
dGltaW5nLm5hdmlnYXRpb25TdGFydCt3aW5kb3cucGVyZm9ybWFuY2Uubm93KCk6KDAsXy5m
YikoKSktYS5rYS5oYTphLmthLnRpbWVTdGFtcC1hLmthLmhhOjA7MDw9YiYmNkU1Pj1iJiYo
bnVsbD09dGhpcy50YSYmKHRoaXMudGE9YiksdGhpcy5oYT1udWxsPT10aGlzLmhhP2I6dGhp
cy5oYSooMS0xL3RoaXMud2EpK2IvdGhpcy53YSk7YT0oMCxfLmZiKSgpLWEuRmE7MDw9YSYm
NkU1Pj1hJiZudWxsPT10aGlzLmthJiYodGhpcy5rYT1hKX19O18uSG49bmV3IEduOw0KXy5J
bj1fLmZqKCJ3WlZIbGQiKTtfLkpuPV8uZmooIm5EYThpYyIpO18uUG49Xy5maigibzA3SFpj
Iik7Xy5Rbj1fLmZqKCJValFNYWMiKTsNCnZhciBabiwkbixhbztfLlJuPV8uZmooInRpNmhH
YyIpO18uU249Xy5maigiWllJZkZkIik7Xy5rY2E9Xy5maigiZVFzUUIiKTtfLlRuPV8uZmoo
Ik8xaHRDYiIpO18ubGNhPV8uZmooImc2Y0pIZCIpO18ubWNhPV8uZmooIm90YjI5ZSIpO18u
VW49Xy5maigiQUhtdXdlIik7Xy5Wbj1fLmZqKCJPMjJwM2UiKTtfLlduPV8uZmooIkpJYnVR
YyIpO18ubmNhPV8uZmooImloNFhFYiIpO18uWG49Xy5maigic1B2ajhlIik7Xy5Zbj1fLmZq
KCJHdm5lSGIiKTtabj1fLmZqKCJyY3VRNmIiKTskbj1fLmZqKCJkeVJjcGIiKTthbz1fLmZq
KCJ1MHBqb2UiKTsNCnZhciBibzt5YSgpO2JvPVN5bWJvbCgiTEtyeDFiIik7Xy5jbz1mdW5j
dGlvbigpe3RoaXMua2E9e307dGhpcy5BYz10aGlzLmhhPXRoaXMuT2Q9bnVsbDt0aGlzLnRh
PW9jYX07Xy5jby5wcm90b3R5cGUuamU9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5PZH07Xy5j
by5wcm90b3R5cGUucmVnaXN0ZXI9ZnVuY3Rpb24oYSxiKXtiLmRpc3BsYXlOYW1lPWE7Ylti
b109YTt0aGlzLmthW2FdPWJ9O18uZW89ZnVuY3Rpb24oYSxiKXtyZXR1cm4gYltib119O18u
Z289ZnVuY3Rpb24oYSxiKXt2YXIgYz1fLmhuKF8uZ24udGIoKSxiKTtyZXR1cm4oYj1hLmth
W2NdKT8oYS5oYSYmYS5oYS5OWShjKSxfLlRoKGIpKTpjIGluc3RhbmNlb2YgXy5qbD8oYS5o
YSYmYS5oYS5SWShjKSxfLk5oKF8uVWgoYS5yaShbY10pKSxmdW5jdGlvbigpe2lmKGEua2Fb
Y10pcmV0dXJuIGEuaGEmJmEuaGEuT1koYyksYS5rYVtjXTt0aHJvdyBmbyhhLGMpO30pKTpf
LlZoKGZvKGEsYykpfTsNCl8uY28ucHJvdG90eXBlLnJpPWZ1bmN0aW9uKGEpe2E9cGNhKHRo
aXMsYSk7Xy5tYShhLGZ1bmN0aW9uKCl7fSk7cmV0dXJuIGF9Ow0KdmFyIHBjYT1mdW5jdGlv
bihhLGIpe2I9Yi5tYXAoZnVuY3Rpb24oZSl7cmV0dXJuIF8uaG4oXy5nbi50YigpLGUpfSk7
Yj0oMCxfLnJiKShiLGZ1bmN0aW9uKGUpe3JldHVybiF0aGlzLmthW2VdfSxhKTtiPSgwLF8u
cmIpKFFsKGIpLkUwLGZ1bmN0aW9uKGUpe3JldHVybiBlIGluc3RhbmNlb2YgXy5qbCYmIXRo
aXMua2FbZV19LGEpO3ZhciBjPVtdLGQ9e307KDAsXy5wYikoYixmdW5jdGlvbihlKXtlPWUu
Z2V0TW9kdWxlSWQoKTtudWxsPT1lfHxkW2VdfHwoZFtlXT0hMCxjLnB1c2goZSkpfSk7aWYo
MD09Yy5sZW5ndGgpcmV0dXJuIF8ua2EoKTt0cnl7cmV0dXJuIF8ubWgoT2JqZWN0LnZhbHVl
cyhhLnRhKGEsYykpKX1jYXRjaChlKXtyZXR1cm4gXy5qaChlKX19LGZvPWZ1bmN0aW9uKGEs
Yil7YS5oYSYmYS5oYS5RWShiKTtyZXR1cm4gbmV3IFR5cGVFcnJvcigiVGAiK2IpfTtfLlhh
KF8uY28pO3ZhciBvY2E9ZnVuY3Rpb24oYSxiKXtyZXR1cm4gXy5paShfLm0oKSxiKX07DQp2
YXIgcWNhPWZ1bmN0aW9uKGEpe3ZhciBiPXRoaXMuZ2V0QXR0cmlidXRlKGEpO0VsZW1lbnQu
cHJvdG90eXBlLnJlbW92ZUF0dHJpYnV0ZS5hcHBseSh0aGlzLGFyZ3VtZW50cyk7Xy5iayh0
aGlzLCRuLHtuYW1lOmEsaXU6bnVsbCxiXzpifSwhMSx2b2lkIDApfSxyY2E9ZnVuY3Rpb24o
YSl7dmFyIGI9dGhpcy5nZXRBdHRyaWJ1dGUoYSk7RWxlbWVudC5wcm90b3R5cGUuc2V0QXR0
cmlidXRlLmFwcGx5KHRoaXMsYXJndW1lbnRzKTt2YXIgYz10aGlzLmdldEF0dHJpYnV0ZShh
KTtfLmJrKHRoaXMsJG4se25hbWU6YSxpdTpjLGJfOmJ9LCExLHZvaWQgMCl9LGlvPWZ1bmN0
aW9uKGEsYil7dmFyIGM9dGhpczt0aGlzLlhhPWE7dGhpcy5PZD1ifHxudWxsO3RoaXMuQWM9
bnVsbDt0aGlzLmthPW5ldyBzY2EodGhpcy5BYyxmdW5jdGlvbigpe3JldHVybiBobyhjKX0p
O3RoaXMud2E9bmV3IF8uRmo7dGhpcy50YT17fTt0aGlzLkthPW51bGw7dGhpcy5SYT1uZXcg
U2V0O3RoaXMuTWE9dGhpcy5JYT0NCiExO3RoaXMuRmE9bnVsbDthLl9fd2l6bWFuYWdlcj10
aGlzO3RoaXMuTGI9KDAsXy5yKShmdW5jdGlvbigpe3RoaXMuSWE9ITE7dGhpcy5NYSYmaG8o
dGhpcyl9LHRoaXMpO3RoaXMuTmE9bmV3IF8uWm0odGhpcyk7dGhpcy5OYS5saXN0ZW4oXy5n
ZihhKSwidW5sb2FkIix0aGlzLmtiKTt0aGlzLk5hLmxpc3RlbihfLmdmKGEpLCJzY3JvbGwi
LHRoaXMuRmIpfSxzY2EsdGNhLHVjYSxtbyxwbyxxbyxobyxubyx3Y2E7Xy51KGlvLF8uJGYp
O3NjYT1mdW5jdGlvbihhLGIpe3RoaXMuQWM9YTt0aGlzLkFhPWI7dGhpcy50YT1bXTt0aGlz
LndhPVtdO3RoaXMua2E9dGhpcy5oYT0hMX07dGNhPWZ1bmN0aW9uKGEpe2Eua2E9ITE7dmFy
IGI9YS5oYT9udWxsOntwUjphLnRhLEFuOmEud2F9O2EudGE9W107YS53YT1bXTthLmhhPSEx
O3JldHVybiBifTtfLmpvPWZ1bmN0aW9uKGEpe3JldHVybiBfLlZlKGEpLl9fd2l6bWFuYWdl
cn07dWNhPW5ldyBfLmdqKCJybHpJTWUiKTsNCmlvLnByb3RvdHlwZS5WZT1mdW5jdGlvbigp
e3JldHVybiB0aGlzLndhfTtpby5wcm90b3R5cGUuaGE9ZnVuY3Rpb24oKXt2YXIgYT10aGlz
LmthO2E9YS5oYT8hMTphLmhhPSEwO2EmJihhPXRoaXMua2EsYS5rYXx8Xy5aZihhLkFhKSxf
LlpmKCgwLF8ucikodGhpcy53YS5kaXNwYXRjaEV2ZW50LHRoaXMud2EsdWNhKSkpfTtpby5w
cm90b3R5cGUuWWI9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5YYX07aW8ucHJvdG90eXBlLkZi
PWZ1bmN0aW9uKCl7dGhpcy5MYiYmKHRoaXMuSWF8fCh0aGlzLklhPSEwKSx0aGlzLkZhJiZ3
aW5kb3cuY2xlYXJUaW1lb3V0KHRoaXMuRmEpLHRoaXMuRmE9d2luZG93LnNldFRpbWVvdXQo
dGhpcy5MYiwyMDApKX07DQptbz1mdW5jdGlvbihhLGIpe2lmKCFfLmRnKGEuT2QpKXt2YXIg
Yz1bXTtiLmZvckVhY2goZnVuY3Rpb24oZCl7dmFyIGU9ZC5nZXRBdHRyaWJ1dGUoImpzY29u
dHJvbGxlciIpO2UmJiFkLmdldEF0dHJpYnV0ZSgianNsYXp5IikmJihkPV8ucW4oZSkpJiYh
YS5SYS5oYXMoZCkmJihjLnB1c2goZCksYS5SYS5hZGQoZCkpfSk7MDxjLmxlbmd0aCYmKGI9
Xy5jby50YigpLnJpKGMpKSYmXy5tYShiLGZ1bmN0aW9uKCl7fSl9fTtfLm9vPWZ1bmN0aW9u
KGEsYil7YS50YVtfLmRiKGIpXXx8bm8oYSxbYl0pfTtwbz1bImpzY29udHJvbGxlciIsImpz
bW9kZWwiLCJqc293bmVyIl07cW89cG8ubWFwKGZ1bmN0aW9uKGEpe3JldHVybiJbIithKyJd
In0pLmpvaW4oIiwiKSsoJyxbanNhY3Rpb24qPSInK1puKyc6dHJpZ2dlci4iXScpOw0KaG89
ZnVuY3Rpb24oYSl7aWYoIWEud2EuaXNEaXNwb3NlZCgpKWlmKGEuSWEpYS5NYT0hMDtlbHNl
e2EuTWE9ITE7dmFyIGI9dGNhKGEua2EpO2lmKGIpbm8oYSxiLnBSLmZpbHRlcihmdW5jdGlv
bihoKXtyZXR1cm4gYS5ZYigpLmRvY3VtZW50RWxlbWVudC5jb250YWlucyhoKX0pKSxiLkFu
LmZvckVhY2goZnVuY3Rpb24oaCl7YS5BYShoKTsoMCxfLnBiKShoLnF1ZXJ5U2VsZWN0b3JB
bGwocW8pLGZ1bmN0aW9uKGwpe3JldHVybiBhLkFhKGwpfSl9KTtlbHNle2I9YS5YYS5xdWVy
eVNlbGVjdG9yQWxsKHFvKTtmb3IodmFyIGM9W10sZD17fSxlPTA7ZTxiLmxlbmd0aDtlKysp
e3ZhciBmPWJbZV0sZz1fLmRiKGYpO2EudGFbZ10/ZFtnXT1mOmMucHVzaChmKX1fLm5jKGEu
dGEsZnVuY3Rpb24oaCxsKXtkW2xdfHx0aGlzLkFhKGgpfSxhKTtubyhhLGMpfX19Ow0Kbm89
ZnVuY3Rpb24oYSxiKXtpZihiLmxlbmd0aCl7dmFyIGM9ITEsZD1bXTtiLmZvckVhY2goZnVu
Y3Rpb24oZSl7aWYoXy5kayhlLFpuKXx8cG8uc29tZShmdW5jdGlvbihmKXtyZXR1cm4gZS5o
YXNBdHRyaWJ1dGUoZil9KSlhLnRhW18uZGIoZSldPWU7Xy5kayhlLCRuKSYmdmNhKGUpO18u
ZGsoZSxabik/ZC5wdXNoKGUpOmM9ITB9KTttbyhhLGQpO3djYShkKTtjJiYoYS5LYSYmd2lu
ZG93LmNsZWFyVGltZW91dChhLkthKSxhLkthPXdpbmRvdy5zZXRUaW1lb3V0KGZ1bmN0aW9u
KCl7cmV0dXJuIG1vKGEsT2JqZWN0LnZhbHVlcyhhLnRhKSl9LDApKX19Ow0Kd2NhPWZ1bmN0
aW9uKGEpe2lmKGEubGVuZ3RoKXt2YXIgYj0hISh3aW5kb3cucGVyZm9ybWFuY2UmJndpbmRv
dy5wZXJmb3JtYW5jZS5tYXJrJiZ3aW5kb3cucGVyZm9ybWFuY2UubWVhc3VyZSYmd2luZG93
LnBlcmZvcm1hbmNlLmNsZWFyTWVhc3VyZXMmJndpbmRvdy5wZXJmb3JtYW5jZS5jbGVhck1h
cmtzKTtiJiYod2luZG93LnBlcmZvcm1hbmNlLmNsZWFyTWVhc3VyZXMoImtEY1A5YiIpLHdp
bmRvdy5wZXJmb3JtYW5jZS5jbGVhck1hcmtzKCJPN2pQTmIiKSx3aW5kb3cucGVyZm9ybWFu
Y2UubWFyaygiTzdqUE5iIikpO2EuZm9yRWFjaChmdW5jdGlvbihjKXt0cnl7Xy5iayhjLFpu
LHZvaWQgMCwhMSx2b2lkIDApfWNhdGNoKGQpe3dpbmRvdy5zZXRUaW1lb3V0KHhhYShkKSww
KX19KTtiJiZ3aW5kb3cucGVyZm9ybWFuY2UubWVhc3VyZSgia0RjUDliIiwiTzdqUE5iIil9
fTsNCmlvLnByb3RvdHlwZS5BYT1mdW5jdGlvbihhKXt2YXIgYj1hLl9fY29tcG9uZW50O2Im
JmIuaGUoKTtybyhhLl9fanNjb250cm9sbGVyKTthLl9fanNjb250cm9sbGVyPXZvaWQgMDtp
ZihiPWEuX19qc21vZGVsKXtmb3IodmFyIGMgaW4gYilybyhiW2NdKTthLl9fanNtb2RlbD12
b2lkIDB9KGM9YS5fX293bmVyKSYmXy5kai5oYXMoYykmJl8uR2IoXy5kai5nZXQoYyksYSk7
ZGVsZXRlIHRoaXMudGFbXy5kYihhKV19O2lvLnByb3RvdHlwZS5rYj1mdW5jdGlvbigpe3Ro
aXMuTmEuaGUoKTt0aGlzLndhLmhlKCk7Xy5uYyh0aGlzLnRhLHRoaXMuQWEsdGhpcyl9O3Zh
ciBybz1mdW5jdGlvbihhKXtpZihhKWlmKGEuaGEpe3ZhciBiPW51bGw7dHJ5e18uTmgoYSxm
dW5jdGlvbihjKXtiPWN9KX1jYXRjaChjKXt9YiYmYi5oZSgpfWVsc2UgYS5jYW5jZWwoKX07
aW8ucHJvdG90eXBlLkRjPWZ1bmN0aW9uKCl7dGhpcy5rYigpO2lvLlRiLkRjLmNhbGwodGhp
cyl9Ow0KdmFyIHZjYT1mdW5jdGlvbihhKXthLnNldEF0dHJpYnV0ZT1yY2E7YS5yZW1vdmVB
dHRyaWJ1dGU9cWNhfTsNCnZhciB4Y2E9ZnVuY3Rpb24oYSxiKXtmb3IodmFyIGM9MDtjPGIu
bGVuZ3RoO2MrKyl0cnl7dmFyIGQ9YltjXS5oYShhKTtpZihudWxsIT1kJiZkLmFib3J0KXJl
dHVybiBkfWNhdGNoKGUpe18uV2YoZSl9fSx5Y2E9ZnVuY3Rpb24oYSxiKXtmb3IodmFyIGM9
MDtjPGIubGVuZ3RoO2MrKyl0cnl7YltjXS5rYShhKX1jYXRjaChkKXtfLldmKGQpfX07DQp2
YXIgc287c289e307Xy50bz1mdW5jdGlvbihhLGIpe2lmKGEgaW5zdGFuY2VvZiBfLmpsKXt2
YXIgYz1fLmhuKF8uZ24udGIoKSxhKTthPXNvW2NdfWVsc2UgaWYoXy5hYihhKSljPV8uZW8o
Xy5jby50YigpLGEpLGE9Xy5UaChhKTtlbHNlIHJldHVybiBfLlZoKCJTZXJ2aWNlIGtleSBt
dXN0IGJlIGEgU2VydmljZUlkIG9yIFNlcnZpY2UgY29uc3RydWN0b3IiKTthfHwoYT1fLmdv
KF8uY28udGIoKSxjKSxzb1tjXT1hKTt2YXIgZD1uZXcgXy55aCxlPWZ1bmN0aW9uKGYpe18u
TWgoZi5uVihjLGJ8fHZvaWQgMCksZnVuY3Rpb24oZyl7ZC5KYyhnKX0sZnVuY3Rpb24oZyl7
ZC5FZihnKX0pfTtfLk5oKGEsZnVuY3Rpb24oZil7dmFyIGc9Xy5obihfLmduLnRiKCksYyk7
aWYoZyE9YylmPV8udG8oZyxiKSxfLk1oKGYsZC5KYyxkLkVmLGQpO2Vsc2UgcmV0dXJuIF8u
Z24udGIoKSxlKGYpfSk7Xy5PaChhLGZ1bmN0aW9uKGYpe2QuRWYoZil9KTtyZXR1cm4gZH07
DQp2YXIgdW89ZnVuY3Rpb24oYSl7dGhpcy5LYT17fTt0aGlzLk1hPXt9O3RoaXMuRmE9e307
dGhpcy5rYT1bXTt2YXIgYj16Y2E7dGhpcy5JYT1mdW5jdGlvbihjKXtpZihjPWIoYykpYy5S
YT0hMDtyZXR1cm4gY307dGhpcy53YT1hO3RoaXMuaGE9e307dGhpcy50YT1udWxsfTsNCnVv
LnByb3RvdHlwZS5BYT1mdW5jdGlvbihhLGIpe2lmKF8uWmEoYSkpdGhpcy5rYT1fLkpiKGEp
LHZvKHRoaXMpO2Vsc2UgaWYoYT0ibWF5YmVfY2xpY2siPT09YS5ldmVudFR5cGU/bnVsbDph
KWlmKGIpe3ZhciBjPWEuZXZlbnQ7YT10aGlzLmhhW2EuZXZlbnRUeXBlXTtiPSExO2lmKGEp
Zm9yKHZhciBkPTAsZTtlPWFbZCsrXTspITE9PT1lKGMpJiYoYj0hMCk7YiYmKGMucHJldmVu
dERlZmF1bHQ/Yy5wcmV2ZW50RGVmYXVsdCgpOmMucmV0dXJuVmFsdWU9ITEpfWVsc2UgZT1h
LmFjdGlvbixiPWUuc3BsaXQoIi4iKVswXSxkPXRoaXMuTWFbYl0sdGhpcy53YT9jPXRoaXMu
d2EoYSk6ZD9kLmFjY2VwdChhKSYmKGM9ZC5EcSk6Yz10aGlzLkthW2VdLGM/KGE9dGhpcy5J
YShhKSxjKGEpLGEuZG9uZSgibWFpbi1hY3Rpb25mbG93LWJyYW5jaCIpKTooYz15bihhLmV2
ZW50KSxhLmV2ZW50PWMsdGhpcy5rYS5wdXNoKGEpLGR8fChjPXRoaXMuRmFbYl0pJiYhYy5l
UyYmKGMuWUsodGhpcywNCmIsYSksYy5lUz0hMCkpfTt2YXIgemNhPWZ1bmN0aW9uKGEpe3Jl
dHVybiBuZXcgQ24oYS5hY3Rpb24sYS5hY3Rpb25FbGVtZW50LGEuZXZlbnQsYS50aW1lU3Rh
bXAsYS5ldmVudFR5cGUsYS50YXJnZXRFbGVtZW50KX0sdm89ZnVuY3Rpb24oYSl7YS50YSYm
MCE9YS5rYS5sZW5ndGgmJlVnKGZ1bmN0aW9uKCl7dGhpcy50YSh0aGlzLmthLHRoaXMpfSxh
KX07DQpfLndvPWZ1bmN0aW9uKGEsYixjLGQsZSxmKXtfLnloLmNhbGwodGhpcyxlLGYpO3Ro
aXMuRGQ9YTt0aGlzLkZhPVtdO3RoaXMuWGE9ISFiO3RoaXMuaGM9ISFjO3RoaXMuU2I9ISFk
O2ZvcihiPXRoaXMuVGM9MDtiPGEubGVuZ3RoO2IrKylfLk1oKGFbYl0sKDAsXy5yKSh0aGlz
LkxiLHRoaXMsYiwhMCksKDAsXy5yKSh0aGlzLkxiLHRoaXMsYiwhMSkpOzAhPWEubGVuZ3Ro
fHx0aGlzLlhhfHx0aGlzLkpjKHRoaXMuRmEpfTtfLnUoXy53byxfLnloKTtfLndvLnByb3Rv
dHlwZS5MYj1mdW5jdGlvbihhLGIsYyl7dGhpcy5UYysrO3RoaXMuRmFbYV09W2IsY107dGhp
cy5oYXx8KHRoaXMuWGEmJmI/dGhpcy5KYyhbYSxjXSk6dGhpcy5oYyYmIWI/dGhpcy5FZihj
KTp0aGlzLlRjPT10aGlzLkRkLmxlbmd0aCYmdGhpcy5KYyh0aGlzLkZhKSk7dGhpcy5TYiYm
IWImJihjPW51bGwpO3JldHVybiBjfTsNCl8ud28ucHJvdG90eXBlLkVmPWZ1bmN0aW9uKGEp
e18ud28uVGIuRWYuY2FsbCh0aGlzLGEpO2ZvcihhPTA7YTx0aGlzLkRkLmxlbmd0aDthKysp
dGhpcy5EZFthXS5jYW5jZWwoKX07Xy54bz1mdW5jdGlvbihhKXtyZXR1cm4gXy5OaChuZXcg
Xy53byhhLCExLCEwKSxmdW5jdGlvbihiKXtmb3IodmFyIGM9W10sZD0wO2Q8Yi5sZW5ndGg7
ZCsrKWNbZF09YltkXVsxXTtyZXR1cm4gY30pfTsNCnZhciB5bz1mdW5jdGlvbihhLGIsYyl7
dGhpcy5UMT1hO3RoaXMuU289Yjt0aGlzLk9kPWN8fG51bGw7dGhpcy5BYz1udWxsO2E9dGhp
cy5ZZz1uZXcgdW8oQWNhKHRoaXMpKTtjPSgwLF8ucikodGhpcy5nMCx0aGlzKTthLnRhPWM7
dm8oYSk7dGhpcy5GdD1bXTtiLlliKCkuX193aXpkaXNwYXRjaGVyPXRoaXM7dGhpcy5YRD17
fTt0aGlzLlp3PVtdO3RoaXMud0M9ITE7dGhpcy5hSD1fLkhufHxudWxsO3RoaXMuZU49Xy5U
aCgpO3RoaXMuZE89ITF9O3lvLnByb3RvdHlwZS5qZT1mdW5jdGlvbigpe3JldHVybiB0aGlz
Lk9kfTt5by5wcm90b3R5cGUuVWc9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5PZHx8dm9pZCAw
fTt5by5wcm90b3R5cGUuZzA9ZnVuY3Rpb24oYSxiKXtmb3IoO2EubGVuZ3RoOyl7dmFyIGM9
YS5zaGlmdCgpO2IuQWEoYyl9fTt5by5wcm90b3R5cGUudHJpZ2dlcj1mdW5jdGlvbihhKXt0
aGlzLlQxKGEpfTsNCnZhciB6bz1mdW5jdGlvbihhLGIpe2lmKF8uRWYoYi5vd25lckRvY3Vt
ZW50LGIpKXtmb3IodmFyIGM9MDtjPGEuRnQubGVuZ3RoO2MrKylpZihfLkVmKGEuRnRbY10s
YikpcmV0dXJuITE7cmV0dXJuITB9Zm9yKGM9YjtjPWMucGFyZW50Tm9kZTspe2M9Yy5ob3N0
fHxjO2lmKF8uQ2IoYS5GdCxjKSlicmVhaztpZihjPT1iLm93bmVyRG9jdW1lbnQpcmV0dXJu
ITB9cmV0dXJuITF9Ow0KeW8ucHJvdG90eXBlLnNmPWZ1bmN0aW9uKGEpe3ZhciBiPXRoaXMs
Yz1fLmNvLnRiKCksZD1fLlZrKGEpLGU9ZC5nZXRBdHRyaWJ1dGUoImpzY29udHJvbGxlciIp
O2lmKGQuX19qc2NvbnRyb2xsZXIpcmV0dXJuIF8uTmgoZC5fX2pzY29udHJvbGxlci5OaSgp
LGZ1bmN0aW9uKGgpe3JldHVybiBoLmpWJiZoLnFyIT1lPyhkLl9fanNjb250cm9sbGVyPXZv
aWQgMCxoLmhlKCksYi5zZihhKSk6aH0pO2U9Xy5xbihlKTt2YXIgZj1uZXcgXy55aDtkLl9f
anNjb250cm9sbGVyPWY7Xy5vbyh0aGlzLlNvLGQpO3pvKHRoaXMsZCl8fChmLmNhbmNlbCgp
LGQuX19qc2NvbnRyb2xsZXI9dm9pZCAwKTt2YXIgZz1mdW5jdGlvbihoKXtpZih6byhiLGQp
KXtoPWguY3JlYXRlKGUsZCxiKTt2YXIgbD0hMDtfLk5oKGgsZnVuY3Rpb24obil7bHx8em8o
YixkKT9mLkpjKG4pOihmLmNhbmNlbCgpLGQuX19qc2NvbnRyb2xsZXI9dm9pZCAwKX0pO18u
T2goaCxmLkVmLGYpO2w9ITF9ZWxzZSBmLmNhbmNlbCgpLA0KZC5fX2pzY29udHJvbGxlcj12
b2lkIDB9O18uT2goXy5OaChfLmdvKGMsZSksZnVuY3Rpb24oaCl7ZyhoKX0pLGZ1bmN0aW9u
KGgpe2YuRWYoaCl9KTtyZXR1cm4gZi5OaSgpfTt5by5wcm90b3R5cGUuSlY9ZnVuY3Rpb24o
YSl7aWYoIXRoaXMuT2R8fCF0aGlzLk9kLmlzRGlzcG9zZWQoKSl7dmFyIGI9YS5GYjtpZihi
PWIuc3Vic3RyKDAsYi5pbmRleE9mKCIuIikpKSJ0cmlnZ2VyIj09YiYmKGI9YS50YSxhPWEu
U2koKS5zdWJzdHJpbmcoOCksXy5iayhiLG5ldyBfLmVqKGEpLHZvaWQgMCx2b2lkIDAsdm9p
ZCAwKSk7ZWxzZXtiPWEuZXZlbnQoKTt2YXIgYz1iJiZiLl9kX2VycjtpZihjKXt2YXIgZD1f
LlRoKCk7dmFyIGU9Yi5fcjtkZWxldGUgYi5fZF9lcnI7ZGVsZXRlIGIuX3J9ZWxzZSBkPXRo
aXMuZU4sZT1uZXcgXy55aCx0aGlzLmVOPXRoaXMuZE8/ZTpfLlRoKCk7QmNhKHRoaXMsYSxk
LGUsYyk7cmV0dXJuIGV9fX07DQp2YXIgQmNhPWZ1bmN0aW9uKGEsYixjLGQsZSl7dmFyIGY9
Yi50YSxnPWIuZXZlbnQoKTtnLmhhPUNjYShnKTt2YXIgaD1nLl9yZXRhcmdldD9nLl9yZXRh
cmdldDpiLnRhcmdldCgpfHxnLnNyY0VsZW1lbnQsbD1fLlRqKGYsYi5SaSgpP2IuUmkoKTpn
LnR5cGUpLG49ISFsJiYwPGwubGVuZ3RoLHA9ITE7Yi5OaSgid2l6Iik7aWYobil7dmFyIHQ9
e307bD1fLkNhKGwpO2Zvcih2YXIgdj1sLm5leHQoKTshdi5kb25lO3Q9e0Z6OnQuRnp9LHY9
bC5uZXh0KCkpdC5Gej12LnZhbHVlLF8uTmgoYyxmdW5jdGlvbihKKXtyZXR1cm4gZnVuY3Rp
b24oKXtyZXR1cm4gQW8oYSxiLEouRnosbnVsbCxoKX19KHQpKSxfLk5oKGMsZnVuY3Rpb24o
Sil7cD0hMD09PUooKXx8cH0pfXZhciB6PV8uVWooZiwhMCk7aWYoeil7Zj10YmEoYi5TaSgp
KTt2YXIgQz1EY2EoYixmLHopO2lmKEMubGVuZ3RoKXt2YXIgRT1hLnNmKHopO18uTmgoYyxm
dW5jdGlvbigpe3JldHVybiBFY2EoYSxiLEMseixnLEUscCl9KX1lbHNlIF8uTmgoYywNCmZ1
bmN0aW9uKCl7biYmIXB8fEJvKGEsYixnKX0pfWVsc2UgXy5OaChjLGZ1bmN0aW9uKCl7cCYm
Qm8oYSxiLGcpfSk7Xy5PaChjLGZ1bmN0aW9uKEope2lmKEogaW5zdGFuY2VvZiBfLnpoKXJl
dHVybiBfLlRoKCk7aWYoeiYmeiE9ZG9jdW1lbnQuYm9keSl7dmFyIE89ZT9nLmRhdGEuZXJy
b3JzLnNsaWNlKCk6W107dmFyIFI9Xy5Paih6KTtpZihSKXtpZighRmNhKGEpKXRocm93IEo7
Sj17TnhhOmIuUmkoKT9iLlJpKCkudG9TdHJpbmcoKTpudWxsLEN4YTp6LmdldEF0dHJpYnV0
ZSgianNjb250cm9sbGVyIiksZXJyb3I6Sn07Ty5wdXNoKEopO0o9bmV3IF8ueWg7Xy5iayhS
LGFvLHtlcnJvcnM6T30sdm9pZCAwLHtfZF9lcnI6ITAsX3I6Sn0pO089Sn1lbHNlIE89Xy5U
aCgpO3JldHVybiBPfXRocm93IEo7fSk7Z2JhKGMsZnVuY3Rpb24oKXtiLmRvbmUoIndpeiIp
O2QuSmMoKX0pfSxGY2E9ZnVuY3Rpb24oYSl7ZG9jdW1lbnQuYm9keSYmIWEud0MmJihfLlpq
KGRvY3VtZW50LmJvZHksDQphbyxmdW5jdGlvbihiKXtpZigoYj1iLmRhdGEpJiZiLmVycm9y
cyYmMDxiLmVycm9ycy5sZW5ndGgpdGhyb3cgYi5lcnJvcnNbMF0uZXJyb3I7fSxhKSxhLndD
PSEwKTtyZXR1cm4gYS53Q30sRWNhPWZ1bmN0aW9uKGEsYixjLGQsZSxmLGcpe2YuaGEmJihl
LmhhPTApO18uTmgoZixmdW5jdGlvbihoKXthLmFIJiZhLmFILkthKGIsZC5nZXRBdHRyaWJ1
dGUoImpzY29udHJvbGxlciIpKTtyZXR1cm4gR2NhKGEsaCxiLGQsYyxnKX0pO3JldHVybiBm
fSxHY2E9ZnVuY3Rpb24oYSxiLGMsZCxlLGYpe3ZhciBnPWMuZXZlbnQoKSxoPV8uVGgoKSxs
PXt9O2U9Xy5DYShlKTtmb3IodmFyIG49ZS5uZXh0KCk7IW4uZG9uZTtsPXtFejpsLkV6LEt6
OmwuS3p9LG49ZS5uZXh0KCkpbj1uLnZhbHVlLGwuRXo9bi5hY3Rpb24sbC5Lej1uLnRhcmdl
dCxfLk5oKGgsZnVuY3Rpb24ocCl7cmV0dXJuIGZ1bmN0aW9uKCl7Zm9yKHZhciB0PXAuRXos
dj10LmFjdGlvbix6PW51bGwsQz1iLEU9bnVsbDshRSYmDQpDJiYoRT1DLm5rW3ZdLEM9Qy5j
b25zdHJ1Y3Rvci5UYixDJiZDLm5rKTspO0UmJih6PUUuY2FsbChiKSk7aWYoIXopdGhyb3cg
RXJyb3IoIkVgIit0LmFjdGlvbisiYCIrYik7cmV0dXJuIEFvKGEsYyx6LGIscC5Leil9fShs
KSksXy5OaChoLGZ1bmN0aW9uKHApe2Y9ITA9PT1wKCl8fGZ9KTtfLk5oKGgsZnVuY3Rpb24o
KXtpZihmJiYhMSE9PWcuYnViYmxlcyl7dmFyIHA9Q28oYSxnLGQpO251bGwhPXAmJmEudHJp
Z2dlcihwKX19KTtyZXR1cm4gaH0sRGNhPWZ1bmN0aW9uKGEsYixjKXt2YXIgZD1bXSxlPWEu
ZXZlbnQoKTtiPWIuZ2V0KCk7Zm9yKHZhciBmPTA7ZjxiLmxlbmd0aDtmKyspe3ZhciBnPWJb
Zl07aWYoIkNMSUVOVCIhPT1nLmFjdGlvbil7dmFyIGg9ZS5fcmV0YXJnZXQ/ZS5fcmV0YXJn
ZXQ6YS50YXJnZXQoKXx8ZS5zcmNFbGVtZW50LGw9bnVsbDtpZihnLnRhcmdldCl7ZG97dmFy
IG49aC5nZXRBdHRyaWJ1dGUoImpzbmFtZSIpO2lmKGcudGFyZ2V0PT1uJiZfLlVqKGgsDQoh
MSk9PWMpe2w9aDticmVha31oPV8uT2ooaCl9d2hpbGUoaCYmaCE9Yyk7aWYoIWwpY29udGlu
dWV9aWYoZy5WZCl7aWYoInRydWUiPT1nLlZkLnByZXZlbnREZWZhdWx0KWlmKG49ZSxuLnBy
ZXZlbnREZWZhdWx0KW4ucHJldmVudERlZmF1bHQoKTtlbHNlIGlmKG4uc3JjRWxlbWVudCl7
dmFyIHA9bi5zcmNFbGVtZW50Lm93bmVyRG9jdW1lbnQucGFyZW50V2luZG93O3AuZXZlbnQm
JnAuZXZlbnQudHlwZT09bi50eXBlJiYocC5ldmVudC5yZXR1cm5WYWx1ZT0hMSl9InRydWUi
PT1nLlZkLnByZXZlbnRNb3VzZUV2ZW50cyYmZS5fcHJldmVudE1vdXNlRXZlbnRzLmNhbGwo
ZSl9ZC5wdXNoKHthY3Rpb246Zyx0YXJnZXQ6bHx8aH0pfX1yZXR1cm4gZH0sQW89ZnVuY3Rp
b24oYSxiLGMsZCxlKXt2YXIgZj1iLmV2ZW50KCk7Yj1iLnRhOzM9PWUubm9kZVR5cGUmJihl
PWUucGFyZW50Tm9kZSk7dmFyIGc9bmV3IF8uVmooZixuZXcgXy5XayhlKSxuZXcgXy5Xayhi
KSxmLl9fc291cmNlKSwNCmg9W107ZT1bXTtmPV8uQ2EoYS5adyk7Zm9yKGI9Zi5uZXh0KCk7
IWIuZG9uZTtiPWYubmV4dCgpKXtiPWIudmFsdWU7dmFyIGw9YS5YRFtiXTtsP2gucHVzaChs
KTplLnB1c2goYil9aWYoYy5uSClmb3IoZj1fLkNhKGMubkgpLGI9Zi5uZXh0KCk7IWIuZG9u
ZTtiPWYubmV4dCgpKWI9Yi52YWx1ZSwobD1hLlhEW2JdKT9oLnB1c2gobCk6ZS5wdXNoKGIp
O3JldHVybiBfLk5oKEhjYShhLGUpLGZ1bmN0aW9uKG4pe249Xy5DYShuKTtmb3IodmFyIHA9
bi5uZXh0KCk7IXAuZG9uZTtwPW4ubmV4dCgpKWgucHVzaChwLnZhbHVlKTtpZihoLmxlbmd0
aCl7aWYoeGNhKGcsaCkpcmV0dXJuIGZ1bmN0aW9uKCl7fTt5Y2EoZyxoKX1yZXR1cm4oMCxf
LnIpKGMsZCxnKX0pfSxIY2E9ZnVuY3Rpb24oYSxiKXt2YXIgYz1bXTtfLmNvLnRiKCkucmko
Yik7dmFyIGQ9e307Yj1fLkNhKGIpO2Zvcih2YXIgZT1iLm5leHQoKTshZS5kb25lO2Q9e252
OmQubnZ9LGU9Yi5uZXh0KCkpZC5udj1lLnZhbHVlLA0KZT1fLk5oKF8udG8oZC5udixhLk9k
KSxmdW5jdGlvbihmKXtyZXR1cm4gZnVuY3Rpb24oZyl7YS5YRFtmLm52XT1nfX0oZCkpLGMu
cHVzaChlKTtyZXR1cm4gXy54byhjKX0sQm89ZnVuY3Rpb24oYSxiLGMpe2I9Q28oYSxjLGIu
dGFyZ2V0KCl8fGMuc3JjRWxlbWVudCxfLk9qKGIudGEpKTtudWxsIT1iJiZhLnRyaWdnZXIo
Yil9LENvPWZ1bmN0aW9uKGEsYixjLGQpe3ZhciBlPXt9LGY7Zm9yKGYgaW4gYikiZnVuY3Rp
b24iIT09dHlwZW9mIGJbZl0mJiJzcmNFbGVtZW50IiE9PWYmJiJ0YXJnZXQiIT09ZiYmInBh
dGgiIT09ZiYmKGVbZl09YltmXSk7ZD1kfHxfLk9qKGMpO2lmKCFkfHwhem8oYSxkKSlyZXR1
cm4gbnVsbDtlLnRhcmdldD1kO2lmKGIucGF0aClmb3IoYT0wO2E8Yi5wYXRoLmxlbmd0aDth
KyspaWYoYi5wYXRoW2FdPT09ZCl7ZS5wYXRoPWIucGF0aC5zbGljZShhKTticmVha31lLl9y
ZXRhcmdldD1jO2UuX29yaWdpbmFsRXZlbnQ9YjtiLnByZXZlbnREZWZhdWx0JiYoZS5kZWZh
dWx0UHJldmVudGVkPQ0KYi5kZWZhdWx0UHJldmVudGVkfHwhMSxlLnByZXZlbnREZWZhdWx0
PUljYSxlLl9wcm9wYWdhdGlvblN0b3BwZWQ9Yi5fcHJvcGFnYXRpb25TdG9wcGVkfHwhMSxl
LnN0b3BQcm9wYWdhdGlvbj1KY2EsZS5faW1tZWRpYXRlUHJvcGFnYXRpb25TdG9wcGVkPWIu
X2ltbWVkaWF0ZVByb3BhZ2F0aW9uU3RvcHBlZHx8ITEsZS5zdG9wSW1tZWRpYXRlUHJvcGFn
YXRpb249S2NhKTtyZXR1cm4gZX0sQWNhPWZ1bmN0aW9uKGEpe3ZhciBiPSgwLF8ucikoYS5K
VixhKSxjPV8uUmM7TWYoZnVuY3Rpb24oZCl7Yz1kfSk7cmV0dXJuIGZ1bmN0aW9uKCl7cmV0
dXJuIGMoYil9fSxDY2E9ZnVuY3Rpb24oYSl7YT1hLnRpbWVTdGFtcDt2YXIgYj0oMCxfLmZi
KSgpO3JldHVybiBhPj1iKzMxNTM2RTY/YS8xRTM6YT49Yi0zMTUzNkU2JiZhPGIrMzE1MzZF
Nj9hOl8uVWEoIndpbmRvdy5wZXJmb3JtYW5jZS50aW1pbmcubmF2aWdhdGlvblN0YXJ0Iik/
YSt3aW5kb3cucGVyZm9ybWFuY2UudGltaW5nLm5hdmlnYXRpb25TdGFydDoNCm51bGx9LElj
YT1mdW5jdGlvbigpe3RoaXMuZGVmYXVsdFByZXZlbnRlZD0hMDt2YXIgYT10aGlzLl9vcmln
aW5hbEV2ZW50O2EmJmEucHJldmVudERlZmF1bHQoKX0sSmNhPWZ1bmN0aW9uKCl7dGhpcy5f
cHJvcGFnYXRpb25TdG9wcGVkPSEwO3ZhciBhPXRoaXMuX29yaWdpbmFsRXZlbnQ7YSYmYS5z
dG9wUHJvcGFnYXRpb24oKX0sS2NhPWZ1bmN0aW9uKCl7dGhpcy5faW1tZWRpYXRlUHJvcGFn
YXRpb25TdG9wcGVkPSEwO3ZhciBhPXRoaXMuX29yaWdpbmFsRXZlbnQ7YSYmYS5zdG9wSW1t
ZWRpYXRlUHJvcGFnYXRpb24oKX07DQp2YXIgTGNhLERvLEVvLE1jYTtMY2E9ZnVuY3Rpb24o
KXt9O0RvPXt9O0VvPXt9O18uRm89ZnVuY3Rpb24oYSl7Xy5uYyhhLGZ1bmN0aW9uKGIsYyl7
RG9bY109Yn0pfTtfLkdvPWZ1bmN0aW9uKGEpe18ubmMoYSxmdW5jdGlvbihiLGMpe0RvW2Nd
PWI7RW9bY109ITB9KX07Xy5Ibz1mdW5jdGlvbihhLGIsYyl7dmFyIGQ9W10sZT1fLnFjKGIs
ZnVuY3Rpb24oZyxoKXtyZXR1cm4gTWNhKGEsYltoXSxkLERvW2hdLGgpfSksZj1fLnhvKGQp
O18uTmgoZixmdW5jdGlvbihnKXt2YXIgaD1fLnFjKGUsZnVuY3Rpb24obCl7dmFyIG49bmV3
IExjYTtfLm5jKGwsZnVuY3Rpb24ocCx0KXtuW3RdPWdbcF19KTtyZXR1cm4gbn0pO2MmJiho
LnN0YXRlPWMpO3JldHVybiBofSk7Xy5PaChmLGZ1bmN0aW9uKGcpe3Rocm93IGc7fSk7cmV0
dXJuIGZ9Ow0KTWNhPWZ1bmN0aW9uKGEsYixjLGQsZSl7dmFyIGY9e30sZztFb1tlXT9nPWQo
YSxiKTpnPV8ucWMoYixmdW5jdGlvbihoKXtyZXR1cm4gZChhLGgsYil9KTtfLm5jKGcsZnVu
Y3Rpb24oaCxsKXtoIGluc3RhbmNlb2YgXy5maCYmKGg9Xy5VaChoKSk7dmFyIG49Yy5sZW5n
dGg7Yy5wdXNoKGgpO2ZbbF09bn0pO3JldHVybiBmfTtfLkdvKHttYjpmdW5jdGlvbihhLGIp
e3ZhciBjPV8udWMoYik7aWYoMD09Yy5sZW5ndGgpcmV0dXJue307YT1hLmplKCk7dHJ5e3Zh
ciBkPV8uWGwoYSxjKX1jYXRjaChlKXt0aHJvdyBlO31yZXR1cm4gXy5xYyhiLGZ1bmN0aW9u
KGUpe3JldHVybiBkW2VdfSl9LHByZWxvYWQ6ZnVuY3Rpb24oYSxiKXthPV8udWMoYikuZmls
dGVyKGZ1bmN0aW9uKGQpe3JldHVybiBkIGluc3RhbmNlb2YgXy5qbH0pO3ZhciBjPV8uY28u
dGIoKS5yaShhKTtyZXR1cm4gXy5xYyhiLGZ1bmN0aW9uKCl7cmV0dXJuIGN9KX19KTsNCl8u
Rm8oe2NvbnRleHQ6ZnVuY3Rpb24oYSxiKXtyZXR1cm4gYS5nZXRDb250ZXh0KGIpfSxJZTpm
dW5jdGlvbihhLGIpe2E9Yi5jYWxsKGEpO3JldHVybiBfLlphKGEpP18ueG8oYSk6YX0sQ246
ZnVuY3Rpb24oYSxiKXtyZXR1cm4gbmV3IF8uZmgoZnVuY3Rpb24oYyl7Xy5hYihiKSYmYyhi
LmNhbGwoYSxhKSk7YyhiKX0pfX0pO18ucWF8fF8uSG8obnVsbCx7Wm46e30sbWI6e30sY29u
dGV4dDp7fSxjb250cm9sbGVyOnt9LGNvbnRyb2xsZXJzOnt9LGRhdGE6e30sSWU6e30sQ246
e30sS1Q6e30scHJlbG9hZDp7fSxrYzp7fSxqdTp7fSxJYjp7fSxEcjp7fSxHYTp7fX0pLnRo
ZW4oKTsNCl8uSW89Xy5tbigieGlxRXNlIik7DQpfLkpvPV8ubW4oIlVnQXRYZSIpOw0KXy5p
YT1mdW5jdGlvbihhKXtyZXR1cm4gXy5iYihhKSYmdm9pZCAwIT09YS5RYiYmYS5RYiBpbnN0
YW5jZW9mIF8uSmwmJnZvaWQgMCE9PWEuRWImJih2b2lkIDA9PT1hLldifHxhLldiIGluc3Rh
bmNlb2YgXy54KT8hMDohMX07DQp2YXIgTmNhO18uS289W2NhYSxlYWEsZGFhXTtOY2E9ZnVu
Y3Rpb24oYSxiKXsoMCxfLnBiKShfLktvLGZ1bmN0aW9uKGMpe2E9YyhiLGEpfSk7cmV0dXJu
IGF9Ow0KXy5Mbz1fLkcoIklaVDYzIik7DQp2YXIgT2NhPWZ1bmN0aW9uKGEsYil7aWYoMD09
Xy51YyhiKS5sZW5ndGgpcmV0dXJuIG51bGw7dmFyIGM9ITE7Xy5uYyhiLGZ1bmN0aW9uKGQp
e01vKGQpJiYoYz0hMCl9KTtyZXR1cm4gYz9fLkhvKGEse0dhOnt0STpfLkxvfX0pLnRoZW4o
ZnVuY3Rpb24oZCl7cmV0dXJuIF8ucGMoYixmdW5jdGlvbihlKXtlPU1vKGUpO3JldHVybiFl
fHwwPT09ZS5sZW5ndGh8fCgwLF8udWIpKGUsZnVuY3Rpb24oZil7cmV0dXJuIGQuR2EudEku
aXNFbmFibGVkKGYpfSl9KX0pOmJ9LE1vPWZ1bmN0aW9uKGEpe3ZhciBiPWEuems7Xy5pYShh
KSYmKGI9YS5NYj9hLk1iLnprOnZvaWQgMCk7cmV0dXJuIGJ9Ow0KdmFyIE5vPWZ1bmN0aW9u
KGEsYil7Xy5zbihfLkpvKTtfLkpvLkRvKCkucHVzaChhKTtyZXR1cm4gZnVuY3Rpb24oYyxk
KXtfLm5jKGQsZnVuY3Rpb24oZyxoKXtfLmFiKGcubWFrZVJlcXVlc3QpJiYoZz1fLkNjKGcp
LGRbaF09ZyxnLnJlcXVlc3Q9Zy5tYWtlUmVxdWVzdC5jYWxsKGMpKTtiJiYhZy5FYiYmKGcu
RWI9Yil9KTt2YXIgZSxmPV8uTmgoXy5IbyhjLHtHYTp7Z1Q6YX19KSxmdW5jdGlvbihnKXtl
PWcuR2EuZ1Q7cmV0dXJuIE9jYShjLGQpfSkudGhlbihmdW5jdGlvbihnKXtyZXR1cm4gZz9l
LmV4ZWN1dGUoZyk6Xy5rYSh7fSl9KTtyZXR1cm4gXy5xYyhkLGZ1bmN0aW9uKGcsaCl7dmFy
IGw9Zi50aGVuKGZ1bmN0aW9uKG4pe3JldHVybiBuW2hdP25baF06bnVsbH0pO3JldHVybiBO
Y2EobCxnKX0pfX07DQpfLk9vPV8uRygidzloRHYiLFtfLk1sXSk7bm4oXy5PbywiVWdBdFhl
Iik7DQpfLlBvPV8uRygiSk5veGkiLFtfLnZsLF8uT29dKTtubihfLlBvLCJVZ0F0WGUiKTsN
Cl8uUW89Xy5HKCJad0RrOWQiKTtubihfLlFvLCJ4aXFFc2UiKTsNCl8uUm89Xy5HKCJSTWhC
ZmUiLFtfLklvXSk7DQp2YXIgUGNhPWZ1bmN0aW9uKGEsYil7cmV0dXJuIF8ucWMoYixmdW5j
dGlvbihjLGQpe3ZhciBlPXt9O3JldHVybiBfLk9oKF8uTmgoXy5IbyhhLHtrYzooZVtkXT1j
LGUpfSksZnVuY3Rpb24oZil7cmV0dXJuIGYua2NbZF19KSxmdW5jdGlvbigpe3JldHVybiBu
dWxsfSl9KX0sUWNhPWZ1bmN0aW9uKGEsYil7dmFyIGM9Xy5IbyhhLHtHYTp7Rmk6Xy5Sb319
KTtyZXR1cm4gXy5xYyhiLGZ1bmN0aW9uKGQpe2lmKCJmdW5jdGlvbiI9PV8uWWEoZCl8fGQg
aW5zdGFuY2VvZiBfLktsKXZhciBlPWQ7ZWxzZXtlPWQudWM7dmFyIGY9ZC5KeWF9ZSBpbnN0
YW5jZW9mIF8uS2wmJihlPWUuaGEpO3ZhciBnPV8uTGwoZSk7dmFyIGg9YS5IYT9hLkhhKCku
Q2EoKTphLkpvKCk7ZiYmYS5MRShnLGYpO3JldHVybiBjLnRoZW4oZnVuY3Rpb24obCl7dmFy
IG49ZTtyZXR1cm4gdm9pZCAwIT09ZC5ySj9sLkdhLkZpLnJlc29sdmUoaCxuLGQuckopOmwu
R2EuRmkucmVzb2x2ZShoLG4pfSl9KX0sU289Tm8oXy5QbyksDQpSY2E9Tm8oXy5Pbyk7DQp2
YXIgU2NhPWZ1bmN0aW9uKCl7dmFyIGE9d2luZG93O2lmKCFhLmxvY2F0aW9uKXRyeXsoMCxf
LmxpKShhKX1jYXRjaChjKXt9dmFyIGI9YS5sb2NhdGlvbiYmYS5sb2NhdGlvbi5hbmNlc3Rv
ck9yaWdpbnM7aWYodm9pZCAwIT09YilyZXR1cm4gYiYmYi5sZW5ndGg/YltiLmxlbmd0aC0x
XT09YS5sb2NhdGlvbi5vcmlnaW46ITA7dHJ5e3JldHVybiB2b2lkIDAhPT1hLnRvcC5sb2Nh
dGlvbi5ocmVmfWNhdGNoKGMpe3JldHVybiExfX07DQp2YXIgVG89e30sVW89ZnVuY3Rpb24o
KXt2YXIgYT17fTthLmxvY2F0aW9uPWRvY3VtZW50LmxvY2F0aW9uLnRvU3RyaW5nKCk7aWYo
U2NhKCkpdHJ5e2FbInRvcC5sb2NhdGlvbiJdPXRvcC5sb2NhdGlvbi50b1N0cmluZygpfWNh
dGNoKGMpe2FbInRvcC5sb2NhdGlvbiJdPSJbZXh0ZXJuYWxdIn1lbHNlIGFbInRvcC5sb2Nh
dGlvbiJdPSJbZXh0ZXJuYWxdIjtmb3IodmFyIGIgaW4gVG8pdHJ5e2FbYl09VG9bYl0uY2Fs
bCgpfWNhdGNoKGMpe2FbYl09IltlcnJvcl0gIitjLm1lc3NhZ2V9cmV0dXJuIGF9Ow0KdmFy
IFRjYT1mdW5jdGlvbihhKXt0aGlzLmhhPWE7dGhpcy50YT17fTt0aGlzLmthPVtdfSxmbT1m
dW5jdGlvbihhLGIsYyl7dmFyIGQ9VW8oKTtjJiYoZC5tZXNzYWdlPWMpO2E6e2M9RGcoKTtk
WyJjYWxsLXN0YWNrIl09YztiPWIgaW5zdGFuY2VvZiBFcnJvcj9iOmJ8fCIiO2M9IiI7aWYo
Yil7Yz1iLm1lc3NhZ2V8fCJ1bmtub3duIjtmb3IodmFyIGU9MCxmPTA7ZjxjLmxlbmd0aDsr
K2YpZT0zMSplK2MuY2hhckNvZGVBdChmKT4+PjA7Yz1lfWU9IiI7Zm9yKGcgaW4gZCllPWUr
ZysiOiIrZFtnXSsiOiI7dmFyIGc9YysiOjoiK2U7Yz1hLnRhW2ddO2N8fChjPXt0aW1lOjAs
Y291bnQ6MH0sYS50YVtnXT1jKTtpZigxRTQ+KDAsXy5mYikoKS1jLnRpbWUpYy5jb3VudCsr
LDE9PWMuY291bnQmJihkPVVvKCksZC5tZXNzYWdlPSJUaHJvdHRsaW5nOiAiK2csYS5oYS5r
YShiLGQpKTtlbHNle2MuY291bnQmJihkWyJkcm9wcGVkLWluc3RhbmNlcyJdPWMuY291bnQp
O2MudGltZT0oMCxfLmZiKSgpOw0KZm9yKGc9Yy5jb3VudD0wO2c8YS5rYS5sZW5ndGg7Zysr
KWlmKCExPT09YS5rYVtnXShiLGQpKWJyZWFrIGE7YS5oYS5rYShiLGQpfX19Ow0KdmFyIFZv
PWZ1bmN0aW9uKGEpe18uJGYuY2FsbCh0aGlzKTt0aGlzLndhPWE7dGhpcy50YT0hMDt0aGlz
LmhhPSExfTtfLnUoVm8sXy4kZik7Vm8ucHJvdG90eXBlLmthPWZ1bmN0aW9uKGEpe3JldHVy
biBXbyh0aGlzLGEpfTsNCnZhciBYbz1mdW5jdGlvbihhLGIpe3JldHVybihiPyJfX3dyYXBw
ZXJfIjoiX19wcm90ZWN0ZWRfIikrXy5kYihhKSsiX18ifSxXbz1mdW5jdGlvbihhLGIpe3Zh
ciBjPVhvKGEsITApO2JbY118fCgoYltjXT1VY2EoYSxiKSlbWG8oYSwhMSldPWIpO3JldHVy
biBiW2NdfSxVY2E9ZnVuY3Rpb24oYSxiKXt2YXIgYz1mdW5jdGlvbigpe2lmKGEuaXNEaXNw
b3NlZCgpKXJldHVybiBiLmFwcGx5KHRoaXMsYXJndW1lbnRzKTt0cnl7cmV0dXJuIGIuYXBw
bHkodGhpcyxhcmd1bWVudHMpfWNhdGNoKGQpe1lvKGEsZCl9ZmluYWxseXt9fTtjW1hvKGEs
ITEpXT1iO3JldHVybiBjfSxZbz1mdW5jdGlvbihhLGIpe2lmKCEoYiYmIm9iamVjdCI9PT10
eXBlb2YgYiYmInN0cmluZyI9PT10eXBlb2YgYi5tZXNzYWdlJiYwPT1iLm1lc3NhZ2UuaW5k
ZXhPZigiRXJyb3IgaW4gcHJvdGVjdGVkIGZ1bmN0aW9uOiAiKXx8InN0cmluZyI9PT10eXBl
b2YgYiYmMD09Yi5pbmRleE9mKCJFcnJvciBpbiBwcm90ZWN0ZWQgZnVuY3Rpb246ICIpKSl7
YS53YShiKTsNCmlmKCFhLnRhKXRocm93IGEuaGEmJigib2JqZWN0Ij09PXR5cGVvZiBiJiZi
JiYic3RyaW5nIj09PXR5cGVvZiBiLm1lc3NhZ2U/Yi5tZXNzYWdlPSJFcnJvciBpbiBwcm90
ZWN0ZWQgZnVuY3Rpb246ICIrYi5tZXNzYWdlOmI9IkVycm9yIGluIHByb3RlY3RlZCBmdW5j
dGlvbjogIitiKSxiO3Rocm93IG5ldyBabyhiKTt9fSxWY2E9ZnVuY3Rpb24oYSl7Im9udW5o
YW5kbGVkcmVqZWN0aW9uImluIF8ucWEmJihfLnFhLm9udW5oYW5kbGVkcmVqZWN0aW9uPWZ1
bmN0aW9uKGIpe1lvKGEsYiYmYi5yZWFzb24/Yi5yZWFzb246RXJyb3IoIlUiKSl9KX0sYXA9
ZnVuY3Rpb24oYSl7Zm9yKHZhciBiPV8uVWEoIndpbmRvdyIpLGM9WyJyZXF1ZXN0QW5pbWF0
aW9uRnJhbWUiLCJtb3pSZXF1ZXN0QW5pbWF0aW9uRnJhbWUiLCJ3ZWJraXRBbmltYXRpb25G
cmFtZSIsIm1zUmVxdWVzdEFuaW1hdGlvbkZyYW1lIl0sZD0wO2Q8Yy5sZW5ndGg7ZCsrKXt2
YXIgZT1jW2RdO2NbZF1pbiBiJiYkbyhhLA0KZSl9fSwkbz1mdW5jdGlvbihhLGIpe3ZhciBj
PV8uVWEoIndpbmRvdyIpLGQ9Y1tiXTtjW2JdPWZ1bmN0aW9uKGUsZil7InN0cmluZyI9PT10
eXBlb2YgZSYmKGU9Xy5lYihwYWEsZSkpO2FyZ3VtZW50c1swXT1lPVdvKGEsZSk7aWYoZC5h
cHBseSlyZXR1cm4gZC5hcHBseSh0aGlzLGFyZ3VtZW50cyk7dmFyIGc9ZTtpZigyPGFyZ3Vt
ZW50cy5sZW5ndGgpe3ZhciBoPUFycmF5LnByb3RvdHlwZS5zbGljZS5jYWxsKGFyZ3VtZW50
cywyKTtnPWZ1bmN0aW9uKCl7ZS5hcHBseSh0aGlzLGgpfX1yZXR1cm4gZChnLGYpfTtjW2Jd
W1hvKGEsITEpXT1kfTtWby5wcm90b3R5cGUuRGM9ZnVuY3Rpb24oKXt2YXIgYT1fLlVhKCJ3
aW5kb3ciKTt2YXIgYj1hLnNldFRpbWVvdXQ7Yj1iW1hvKHRoaXMsITEpXXx8YjthLnNldFRp
bWVvdXQ9YjtiPWEuc2V0SW50ZXJ2YWw7Yj1iW1hvKHRoaXMsITEpXXx8YjthLnNldEludGVy
dmFsPWI7Vm8uVGIuRGMuY2FsbCh0aGlzKX07DQp2YXIgWm89ZnVuY3Rpb24oYSl7Xy5sYi5j
YWxsKHRoaXMsIkVycm9yIGluIHByb3RlY3RlZCBmdW5jdGlvbjogIisoYSYmYS5tZXNzYWdl
P1N0cmluZyhhLm1lc3NhZ2UpOlN0cmluZyhhKSkpOyhhPWEmJmEuc3RhY2spJiYic3RyaW5n
Ij09PXR5cGVvZiBhJiYodGhpcy5zdGFjaz1hKX07Xy51KFpvLF8ubGIpOw0KdmFyIGJwPWZ1
bmN0aW9uKGEsYixjKXtfLkZqLmNhbGwodGhpcyk7dGhpcy53YT1ifHxudWxsO3RoaXMudGE9
e307dGhpcy5JYT1XY2E7dGhpcy5BYT1hO2N8fCh0aGlzLmhhPW51bGwsXy5yZSYmIV8uRWUo
IjEwIik/emcoKDAsXy5yKSh0aGlzLmthLHRoaXMpLCExLG51bGwpOih0aGlzLmhhPW5ldyBW
bygoMCxfLnIpKHRoaXMua2EsdGhpcykpLCRvKHRoaXMuaGEsInNldFRpbWVvdXQiKSwkbyh0
aGlzLmhhLCJzZXRJbnRlcnZhbCIpLGFwKHRoaXMuaGEpLFZmKHRoaXMuaGEpKSl9O18udShi
cCxfLkZqKTt2YXIgY3A9ZnVuY3Rpb24oYSxiKXtfLmhqLmNhbGwodGhpcywiYyIpO3RoaXMu
ZXJyb3I9YTt0aGlzLmNvbnRleHQ9Yn07Xy51KGNwLF8uaGopO3ZhciBXY2E9ZnVuY3Rpb24o
YSxiLGMsZCl7Xy5RbShhLG51bGwsYixjLGQpfTsNCmJwLnByb3RvdHlwZS5rYT1mdW5jdGlv
bihhLGIpe2E9YS5lcnJvcnx8YTtiPWI/Xy5DYyhiKTp7fTthIGluc3RhbmNlb2YgRXJyb3Im
Jl8uRWMoYixhLl9fY2xvc3VyZV9fZXJyb3JfX2NvbnRleHRfXzk4NDM4Mnx8e30pO3ZhciBj
PWFiYShhKTtpZih0aGlzLndhKXRyeXt0aGlzLndhKGMsYil9Y2F0Y2gobCl7fXZhciBkPWMu
bWVzc2FnZS5zdWJzdHJpbmcoMCwxOTAwKTtpZighKGEgaW5zdGFuY2VvZiBfLmxiKXx8YS5o
YSl7YT1jLnN0YWNrO3RyeXt2YXIgZT1fLkhtKHRoaXMuQWEsInNjcmlwdCIsYy5maWxlTmFt
ZSwiZXJyb3IiLGQsImxpbmUiLGMubGluZU51bWJlcik7aWYoIV8uemModGhpcy50YSkpe2Q9
ZTt2YXIgZj1HbSh0aGlzLnRhKTtlPURtKGQsZil9Zj17fTtmLnRyYWNlPWE7aWYoYilmb3Io
dmFyIGcgaW4gYilmWyJjb250ZXh0LiIrZ109YltnXTt2YXIgaD1HbShmKTt0aGlzLklhKGUs
IlBPU1QiLGgsdGhpcy5LYSl9Y2F0Y2gobCl7fX10cnl7dGhpcy5kaXNwYXRjaEV2ZW50KG5l
dyBjcChjLA0KYikpfWNhdGNoKGwpe319O2JwLnByb3RvdHlwZS5EYz1mdW5jdGlvbigpe18u
YmcodGhpcy5oYSk7YnAuVGIuRGMuY2FsbCh0aGlzKX07DQp2YXIgWWNhPWZ1bmN0aW9uKGEp
e2VtLmluaXQoKTthJiYoYT1uZXcgYnAoYSx2b2lkIDAsITApLFFiYShuZXcgVGNhKGEpKSk7
dmFyIGI9bnVsbDthPWZ1bmN0aW9uKGMpe18ucWEuJGdvb2dEZWJ1Z0ZuYW1lJiZjJiZjLm1l
c3NhZ2UmJiFjLmZpbGVOYW1lJiYoYy5tZXNzYWdlKz0iIGluICIrXy5xYS4kZ29vZ0RlYnVn
Rm5hbWUpO2I/YyYmYy5tZXNzYWdlJiYoYy5tZXNzYWdlKz0iIFtQb3NzaWJseSBjYXVzZWQg
Ynk6ICIrYisiXSIpOmI9U3RyaW5nKGMpO18uZ20obnVsbCxjKX07Xy5RYSgiX0R1bXBFeGNl
cHRpb24iLGEsdm9pZCAwKTtfLlFhKCJfQl9lcnIiLGEsdm9pZCAwKTsoMCxfLnBiKShbXy5x
YV0uY29uY2F0KFtdKSxfLmViKHpnLF8uZWIoWGNhLCEwKSwhMCkpO18uTGMoKSYmT2MoMjgp
fHxfLktjKCkmJk9jKDE0KXx8R2MoKSYmT2MoMTEpfHxfLk1jKCkmJk9jKDEwKTtpZighXy5y
ZXx8Xy5FZSgxMCkpYT1uZXcgVm8oUmJhKSxhLnRhPSEwLGEuaGE9ITAsYXAoYSksJG8oYSwN
CiJzZXRUaW1lb3V0IiksJG8oYSwic2V0SW50ZXJ2YWwiKSxWY2EoYSksVmYoYSl9LFhjYT1m
dW5jdGlvbihhLGIpey0xPT1iLm1lc3NhZ2UuaW5kZXhPZigiRXJyb3IgaW4gcHJvdGVjdGVk
IGZ1bmN0aW9uOiAiKSYmKGIuZXJyb3ImJmIuZXJyb3Iuc3RhY2s/Xy5nbShudWxsLGIuZXJy
b3IpOmF8fF8uZ20obnVsbCxiKSl9Ow0KdmFyIFpjYT1mdW5jdGlvbihhLGIpe2I9Ynx8Xy5Y
ZSgpO3ZhciBjPWIuWWIoKSxkPWIuY3JlYXRlRWxlbWVudCgiU1RZTEUiKTtkLnR5cGU9InRl
eHQvY3NzIjtiLmdldEVsZW1lbnRzQnlUYWdOYW1lKCJIRUFEIilbMF0uYXBwZW5kQ2hpbGQo
ZCk7ZC5zdHlsZVNoZWV0P2Quc3R5bGVTaGVldC5jc3NUZXh0PWE6ZC5hcHBlbmRDaGlsZChj
LmNyZWF0ZVRleHROb2RlKGEpKTtyZXR1cm4gZH07DQp2YXIgZHA9ZnVuY3Rpb24oYSl7dGhp
cy5oYT1hfTtkcC5wcm90b3R5cGUuaW5pdD1mdW5jdGlvbigpe3ZhciBhPXRoaXM7aGIoIl9G
X2luc3RhbGxDc3MiLGZ1bmN0aW9uKGIpe2lmKGIpe3ZhciBjPWEuaGEuTWE7aWYoYylpZihj
PSRjYShjKSwwPT1jLmxlbmd0aCllcChiLGRvY3VtZW50KTtlbHNle2M9Xy5DYShjKTtmb3Io
dmFyIGQ9Yy5uZXh0KCk7IWQuZG9uZTtkPWMubmV4dCgpKWVwKGIsZC52YWx1ZSl9ZWxzZSBl
cChiLGRvY3VtZW50KX19KX07dmFyIGVwPWZ1bmN0aW9uKGEsYil7dmFyIGM9Yi5zdHlsZVNo
ZWV0cy5sZW5ndGgsZD1aY2EoYSxuZXcgXy5VZShiKSk7ZC5zZXRBdHRyaWJ1dGUoImRhdGEt
bGF0ZS1jc3MiLCIiKTtiLnN0eWxlU2hlZXRzLmxlbmd0aD09YysxJiZfLnpiKGIuc3R5bGVT
aGVldHMsZnVuY3Rpb24oZSl7cmV0dXJuKGUub3duZXJOb2RlfHxlLm93bmluZ0VsZW1lbnQp
PT1kfSl9LCRjYT1mdW5jdGlvbihhKXtyZXR1cm4oMCxfLnNiKShKYmEoYSksZnVuY3Rpb24o
Yil7cmV0dXJuIGIuaGF9KX07DQp2YXIgZnA9ZnVuY3Rpb24oKXt0aGlzLmhhPXt9O3RoaXMu
a2E9IiJ9LGFkYT17d2thOiJrIixFODoiY2siLFBkYToibSIsVyQ6ImV4bSIsVSQ6ImV4Y20i
LE0yOiJhbSIsT2lhOiJydCIsUmJhOiJkIixWJDoiZWQiLENxYToic3YiLGY5OiJkZW9iIix1
NzoiY2IiLHdwYToicnMiLGRwYToic2RjaCIsWGJhOiJpbSIsZzk6ImRnIixQJDoiYnIiLGN4
YToid3QiLEJxYToic20iLE1kYToibWQiLEY4OiJjdCJ9LHJhOw0KZnAucHJvdG90eXBlLnRv
U3RyaW5nPWZ1bmN0aW9uKCl7aWYoIjEiPT1ncCh0aGlzLCJtZCIpKXJldHVybiBiZGEodGhp
cyk7dmFyIGE9W10sYj0oMCxfLnIpKGZ1bmN0aW9uKGQpe3ZvaWQgMCE9PXRoaXMuaGFbZF0m
JmEucHVzaChkKyI9Iit0aGlzLmhhW2RdKX0sdGhpcyk7Yigic2RjaCIpO2IoImsiKTtiKCJj
ayIpO2IoImFtIik7YigicnQiKTsiZCJpbiB0aGlzLmhhfHxocCh0aGlzLCJkIiwiMCIpO2Io
ImQiKTtiKCJleG0iKTtiKCJleGNtIik7KHRoaXMuaGEuZXhjbXx8dGhpcy5oYS5leG0pJiZh
LnB1c2goImVkPTEiKTtiKCJkZyIpOyIxIj09Z3AodGhpcywiYnIiKSYmYigiYnIiKTthOnN3
aXRjaChncCh0aGlzLCJ3dCIpKXtjYXNlICIwIjp2YXIgYz0iMCI7YnJlYWsgYTtjYXNlICIy
IjpjPSIyIjticmVhayBhO2RlZmF1bHQ6Yz0iMSJ9IjEiIT09YyYmYigid3QiKTtiKCJzbSIp
O2IoImltIik7YTpzd2l0Y2goZ3AodGhpcywiY3QiKSl7Y2FzZSAiemdtcyI6Yz0iemdtcyI7
DQpicmVhayBhO2RlZmF1bHQ6Yz0iZ21zIn0iemdtcyI9PWMmJmIoImN0Iik7YigicnMiKTti
KCJtIik7YigiY2IiKTtyZXR1cm4gdGhpcy5rYSthLmpvaW4oIi8iKX07dmFyIGJkYT1mdW5j
dGlvbihhKXt2YXIgYj1bXSxjPSgwLF8ucikoZnVuY3Rpb24oZCl7dm9pZCAwIT09dGhpcy5o
YVtkXSYmYi5wdXNoKGQrIj0iK3RoaXMuaGFbZF0pfSxhKTtjKCJtZCIpO2MoImsiKTtjKCJj
ayIpO2MoImN0Iik7YygiYW0iKTtjKCJycyIpO3JldHVybiBhLmthK2Iuam9pbigiLyIpfSxn
cD1mdW5jdGlvbihhLGIpe3JldHVybiBhLmhhW2JdP2EuaGFbYl06bnVsbH0saHA9ZnVuY3Rp
b24oYSxiLGMpe2M/YS5oYVtiXT1jOmRlbGV0ZSBhLmhhW2JdfSxpcD1mdW5jdGlvbihhKXty
ZXR1cm4oYT1ncChhLCJtIikpP2Euc3BsaXQoIiwiKTpbXX07ZnAucHJvdG90eXBlLmdldE1l
dGFkYXRhPWZ1bmN0aW9uKCl7cmV0dXJuIjEiPT1ncCh0aGlzLCJtZCIpfTsNCnZhciBqcD1m
dW5jdGlvbihhKXtkZWxldGUgYS5oYS5tO2RlbGV0ZSBhLmhhLmV4bTtkZWxldGUgYS5oYS5l
ZH07ZnAucHJvdG90eXBlLmNsb25lPWZ1bmN0aW9uKCl7cmV0dXJuIF8ua3AodGhpcy50b1N0
cmluZygpKX07Xy5rcD1mdW5jdGlvbihhKXt2YXIgYj1uZXcgZnAsYz0oYS5zdGFydHNXaXRo
KCJodHRwczovL3ViZXJwcm94eS1wZW4tcmVkaXJlY3QuY29ycC5nb29nbGUuY29tL3ViZXJw
cm94eS9wZW4/dXJsPSIpP2Euc3Vic3RyKDY1KTphKS5tYXRjaChfLndtKVs1XTtfLm5jKGFk
YSxmdW5jdGlvbihlKXt2YXIgZj1jLm1hdGNoKCIvIitlKyI9KFteL10rKSIpO2YmJmhwKGIs
ZSxmWzFdKX0pO3ZhciBkPS0xIT1hLmluZGV4T2YoIl8vc3MvIik/Il8vc3MvIjoiXy9qcy8i
O2Iua2E9YS5zdWJzdHIoMCxhLmluZGV4T2YoZCkrZC5sZW5ndGgpO3JldHVybiBifTsNCnJh
PWZ1bmN0aW9uKGEpe2E9Xy54bShfLnltKDUsYSksITApO3JldHVybiBudWxsIT09YSYmISFh
Lm1hdGNoKCIoL18vanMvKXwoL18vc3MvKSIpJiYhIWEubWF0Y2goIi9rPSIpfTsNCnZhciBk
ZGE9ZnVuY3Rpb24oYSl7cmV0dXJuIGNkYShhKS50aGVuKGZ1bmN0aW9uKGIpe3JldHVybiBK
U09OLnBhcnNlKGIucmVzcG9uc2VUZXh0KX0pfSxjZGE9ZnVuY3Rpb24oYSl7dmFyIGI9e30s
Yz1iLkMyP25tKGIuQzIpOm5tKGttKTtyZXR1cm4gXy5tYShuZXcgXy5maChmdW5jdGlvbihk
LGUpe3ZhciBmO3RyeXtjLm9wZW4oIkdFVCIsYSwhMCl9Y2F0Y2gobCl7ZShuZXcgbHAoIkVy
cm9yIG9wZW5pbmcgWEhSOiAiK2wubWVzc2FnZSxhLGMpKX1jLm9ucmVhZHlzdGF0ZWNoYW5n
ZT1mdW5jdGlvbigpe2lmKDQ9PWMucmVhZHlTdGF0ZSl7Xy5xYS5jbGVhclRpbWVvdXQoZik7
dmFyIGw7IShsPWhtKGMuc3RhdHVzKSkmJihsPTA9PT1jLnN0YXR1cykmJihsPXptKGEpLGw9
ISgiaHR0cCI9PWx8fCJodHRwcyI9PWx8fCIiPT1sKSk7bD9kKGMpOmUobmV3IG1wKGMuc3Rh
dHVzLGEsYykpfX07Yy5vbmVycm9yPWZ1bmN0aW9uKCl7ZShuZXcgbHAoIk5ldHdvcmsgZXJy
b3IiLGEsYykpfTsNCmlmKGIuaGVhZGVycylmb3IodmFyIGcgaW4gYi5oZWFkZXJzKXt2YXIg
aD1iLmhlYWRlcnNbZ107bnVsbCE9aCYmYy5zZXRSZXF1ZXN0SGVhZGVyKGcsaCl9Yi53aXRo
Q3JlZGVudGlhbHMmJihjLndpdGhDcmVkZW50aWFscz1iLndpdGhDcmVkZW50aWFscyk7Yi5y
ZXNwb25zZVR5cGUmJihjLnJlc3BvbnNlVHlwZT1iLnJlc3BvbnNlVHlwZSk7Yi5taW1lVHlw
ZSYmYy5vdmVycmlkZU1pbWVUeXBlKGIubWltZVR5cGUpOzA8Yi5HMSYmKGY9Xy5xYS5zZXRU
aW1lb3V0KGZ1bmN0aW9uKCl7Yy5vbnJlYWR5c3RhdGVjaGFuZ2U9Xy5WYTtjLmFib3J0KCk7
ZShuZXcgbnAoYSxjKSl9LGIuRzEpKTt0cnl7Yy5zZW5kKG51bGwpfWNhdGNoKGwpe2Mub25y
ZWFkeXN0YXRlY2hhbmdlPV8uVmEsXy5xYS5jbGVhclRpbWVvdXQoZiksZShuZXcgbHAoIkVy
cm9yIHNlbmRpbmcgWEhSOiAiK2wubWVzc2FnZSxhLGMpKX19KSxmdW5jdGlvbihkKXtkIGlu
c3RhbmNlb2YgXy5yaCYmYy5hYm9ydCgpO3Rocm93IGQ7DQp9KX0sbHA9ZnVuY3Rpb24oYSxi
KXtfLmxiLmNhbGwodGhpcyxhKyIsIHVybD0iK2IpO3RoaXMudXJsPWJ9O18udShscCxfLmxi
KTtscC5wcm90b3R5cGUubmFtZT0iWGhyRXJyb3IiO3ZhciBtcD1mdW5jdGlvbihhLGIsYyl7
bHAuY2FsbCh0aGlzLCJSZXF1ZXN0IEZhaWxlZCwgc3RhdHVzPSIrYSxiLGMpO3RoaXMuc3Rh
dHVzPWF9O18udShtcCxscCk7bXAucHJvdG90eXBlLm5hbWU9Ilhockh0dHBFcnJvciI7dmFy
IG5wPWZ1bmN0aW9uKGEsYil7bHAuY2FsbCh0aGlzLCJSZXF1ZXN0IHRpbWVkIG91dCIsYSxi
KX07Xy51KG5wLGxwKTtucC5wcm90b3R5cGUubmFtZT0iWGhyVGltZW91dEVycm9yIjsNCnZh
ciBvcD1mdW5jdGlvbihhKXthPWEuY2xvbmUoKTtqcChhKTtocChhLCJkZyIsbnVsbCk7aHAo
YSwiZCIsIjAiKTtyZXR1cm4gYX0scHA9ZnVuY3Rpb24oYSxiLGMpe3ZhciBkPXZvaWQgMD09
PWM/e306YztjPXZvaWQgMD09PWQueGw/dm9pZCAwOmQueGw7ZD12b2lkIDA9PT1kLnFsP3Zv
aWQgMDpkLnFsO2hwKGEsIm0iLGIuam9pbigiLCIpKTtjJiYoaHAoYSwiY2siLGMpLGQmJmhw
KGEsInJzIixkKSk7YT1hLnRvU3RyaW5nKCk7Xy5UYihhLCIvIikmJihhPV8uQm0oZG9jdW1l
bnQubG9jYXRpb24uaHJlZikrYSk7cmV0dXJuIF8udGEoYSl9Ow0KdmFyIHJwLHZwLHRwLHVw
LGVkYSxnZGEsZmRhO18uc2E9ZnVuY3Rpb24oYSxiLGMsZCxlKXtkPXZvaWQgMD09PWQ/ITE6
ZDtlPXZvaWQgMD09PWU/ITE6ZTt0aGlzLkthPV8ua3AoXy5tZChhKSk7dGhpcy5MYj1iO3Ro
aXMuWGE9Yzt0aGlzLk1hPWQ7dGhpcy5JYT17fTt0aGlzLkZhPVtdO3RoaXMuTmI9ITA7dGhp
cy5OYT0oYT1ncCh0aGlzLkthLCJleGNtIikpP2Euc3BsaXQoIiwiKTpbXTt0aGlzLkZiPWU7
dGhpcy5rYT1kb2N1bWVudC5oZWFkfHxkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQ7dGhpcy5B
YT1udWxsO18ucXAodGhpcyxpcCh0aGlzLkthKSk7dGhpcy5SYSgpfTsNCnJwPWZ1bmN0aW9u
KGEpe2Zvcih2YXIgYj1fLkNhKGRvY3VtZW50LmdldEVsZW1lbnRzQnlUYWdOYW1lKCJzdHls
ZSIpKSxjPWIubmV4dCgpOyFjLmRvbmU7Yz1iLm5leHQoKSlpZihjPWMudmFsdWUsYy5ocmVm
fHxjLmdldEF0dHJpYnV0ZSgiZGF0YS1ocmVmIikpe3ZhciBkPWMuaHJlZnx8Yy5nZXRBdHRy
aWJ1dGUoImRhdGEtaHJlZiIpO2lmKHJhKGQpJiYhXy5rcChkKS5rYS5lbmRzV2l0aCgiXy9q
cy8iKSl7Yz1hO2Q9aXAoXy5rcChkKSk7ZD1fLkNhKGQpO2Zvcih2YXIgZT1kLm5leHQoKTsh
ZS5kb25lO2U9ZC5uZXh0KCkpZT1lLnZhbHVlLGMuTmEuaW5jbHVkZXMoZSl8fGMuTmEucHVz
aChlKX19fTtfLnNhLnByb3RvdHlwZS5TYj1mdW5jdGlvbihhLGIsYyxkLGUpe2lmKCFhKXRo
cm93IEVycm9yKCJWIik7dGhpcy5GYiYmcnAodGhpcyk7dGhpcy5NYSYmKGE9ZWRhKHRoaXMs
YSkpO3RoaXMuVGMoYSxkfHx2b2lkIDAsZXx8dm9pZCAwKX07DQpfLnNhLnByb3RvdHlwZS5U
Yz1mdW5jdGlvbihhLGIpe3ZhciBjPXRoaXM7Yj12b2lkIDA9PT1iP2Z1bmN0aW9uKCl7fTpi
O18uc3AodGhpcyxhLGZ1bmN0aW9uKGQsZSl7Yy5sb2FkKGQsZSxiKX0pfHxiKC0xKX07Xy5z
YS5wcm90b3R5cGUuUmE9ZnVuY3Rpb24oKXt9Ow0KdnA9ZnVuY3Rpb24oYSxiKXtpZihhLk1h
KXt2YXIgYz17eGw6YS5MYixxbDphLlhhLHlOOnRwKGEpLEp1OnVwKGEpfSxkPXZvaWQgMD09
PWM/e306YztjPXZvaWQgMD09PWQueU4/W106ZC55Tjt2YXIgZT12b2lkIDA9PT1kLkp1P1td
OmQuSnUsZj12b2lkIDA9PT1kLnhsP3ZvaWQgMDpkLnhsO2Q9dm9pZCAwPT09ZC5xbD92b2lk
IDA6ZC5xbDthPW9wKGEuS2EpO2hwKGEsImQiLCIxIik7Yi5zb3J0KCk7Yy5zb3J0KCk7aHAo
YSwiZXhtIixjLmpvaW4oIiwiKSk7ZS5zb3J0KCk7aHAoYSwiZXhjbSIsZS5qb2luKCIsIikp
O2I9cHAoYSxiLHt4bDpmLHFsOmR9KX1lbHNlIGM9e3hsOmEuTGIscWw6YS5YYSxKdTp1cChh
KX0sZj12b2lkIDA9PT1jP3t9OmMsYz12b2lkIDA9PT1mLkp1P1tdOmYuSnUsZT12b2lkIDA9
PT1mLnhsP3ZvaWQgMDpmLnhsLGY9dm9pZCAwPT09Zi5xbD92b2lkIDA6Zi5xbCxhPW9wKGEu
S2EpLGMuc29ydCgpLGhwKGEsImV4Y20iLGMuam9pbigiLCIpKSxiPXBwKGEsDQpiLHt4bDpl
LHFsOmZ9KTtyZXR1cm4gYn07Xy5xcD1mdW5jdGlvbihhLGIpe2Zvcih2YXIgYz0hMSxkPTA7
ZDxiLmxlbmd0aDsrK2Qpe3ZhciBlPWJbZF07YS5JYVtlXXx8KGEuSWFbZV09ITAsYS5GYS5w
dXNoKGUpLGM9ITApfWMmJihhLk5iPSExKX07Xy53cD1mdW5jdGlvbihhLGIpe2Zvcih2YXIg
Yz0wO2M8Yi5sZW5ndGg7KytjKXt2YXIgZD1iW2NdO2EuSWFbZF0mJihkZWxldGUgYS5JYVtk
XSxfLkdiKGEuRmEsZCkpfX07Xy5zYS5wcm90b3R5cGUubG9hZD1mdW5jdGlvbihhLGIsYyl7
dmFyIGQ9dGhpcztfLm1kKGEpO3ZhciBlPV8ueHAoZmRhKGEpLGIsZnVuY3Rpb24oKXtkLmth
LnJlbW92ZUNoaWxkKGUpO2QuQWE9PWUmJihkLkFhPW51bGwpfSxmdW5jdGlvbihmKXtkLmth
LnJlbW92ZUNoaWxkKGUpO2QuQWE9PWUmJihkLkFhPW51bGwpO18ud3AoZCxmKTtjKC0xKX0p
O18ucXAodGhpcyxiKTt0aGlzLkFhPWU7dGhpcy5rYS5pbnNlcnRCZWZvcmUoZSx0aGlzLmth
LmZpcnN0Q2hpbGQpfTsNCl8ueHA9ZnVuY3Rpb24oYSxiLGMsZCl7dmFyIGU9Yi5sZW5ndGgs
Zj1mdW5jdGlvbigpe2U9MDthLm9ubG9hZD1udWxsO2Eub25lcnJvcj1udWxsO2c9ZnVuY3Rp
b24oKXt9fSxnPWZ1bmN0aW9uKCl7ZigpO3ZhciBsPWIuZmlsdGVyKGZ1bmN0aW9uKG4pe3Jl
dHVybiFfLm0oKS5CayhuKS5La30pOzAhPT1sLmxlbmd0aD9kKGwsIlJlc3BvbnNlIHdhcyBz
dWNjZXNzZnVsIGJ1dCB3YXMgbWlzc2luZyBtb2R1bGUocykgIitsKyIuIik6YygpfSxoPWZ1
bmN0aW9uKCl7ZS0tOzA9PWUmJmcoKX07Yi5mb3JFYWNoKGZ1bmN0aW9uKGwpe2w9Xy5tKCku
QmsobCk7bC5Laz9oKCk6KGwua2EucHVzaChuZXcgZ2coaCx2b2lkIDApKSxpZyhsLGgpKX0p
O2Eub25sb2FkPWZ1bmN0aW9uKCl7cmV0dXJuIGcoKX07YS5vbmVycm9yPWZ1bmN0aW9uKCl7
ZigpO2QoYil9O3JldHVybiBhfTt0cD1mdW5jdGlvbihhKXthLk5ifHwoYS5OYj0hMCxhLkZh
LnNvcnQoKSk7cmV0dXJuIGEuRmF9Ow0KdXA9ZnVuY3Rpb24oYSl7YT1hLk5hO2Euc29ydCgp
O3JldHVybiBhfTtlZGE9ZnVuY3Rpb24oYSxiKXtyZXR1cm4gYi5maWx0ZXIoZnVuY3Rpb24o
Yyl7cmV0dXJuIWEuSWFbY119KX07Xy5zcD1mdW5jdGlvbihhLGIsYyl7Zm9yKHZhciBkPTA7
ZDxiLmxlbmd0aDspe2Zvcih2YXIgZT1iLmxlbmd0aC1kLGY9MD09ZD9iOmIuc2xpY2UoZCxi
Lmxlbmd0aCksZz12cChhLGYpLGg9Xy5tZChnKSxsPXZvaWQgMDs0MDQzPGgubGVuZ3RoOylp
ZigxPGUpZS09TWF0aC5jZWlsKChoLmxlbmd0aC00MDQzKS82KSxlPU1hdGgubWF4KGUsMSks
Zj1iLnNsaWNlKGQsZCtlKSxnPXZwKGEsZiksaD1fLm1kKGcpO2Vsc2V7aWYoYS5NYSl7YS5N
YT0hMTtoPWEuS2EuY2xvbmUoKTtqcChoKTtocChoLCJkZyIsbnVsbCk7aHAoaCwibWQiLCIx
Iik7bD1kZGEoaC50b1N0cmluZygpKTticmVha31yZXR1cm4hMX1pZihsKXtnZGEoYSxsLGYp
O2JyZWFrfWVsc2UgZCs9ZSxjKGcsZil9cmV0dXJuITB9Ow0KZ2RhPWZ1bmN0aW9uKGEsYixj
KXtiLnRoZW4oZnVuY3Rpb24oZCl7dmFyIGU9Xy5tKCk7ZS5XeShkLm1vZHVsZUdyYXBoKTtm
b3IoZD0wO2Q8dHAoYSkubGVuZ3RoOysrZCllLkJrKHRwKGEpW2RdKS5oYSgpO18uaWkoXy5t
KCksYyl9KX07ZmRhPWZ1bmN0aW9uKGEpe3ZhciBiPV8ubGYoIlNDUklQVCIpO18uVGQoYixh
KTtiLmFzeW5jPSExO3JldHVybiBifTsNCnZhciB5cCx6cCxBcCxoZGE7eXA9W107enA9bnVs
bDtBcD1mdW5jdGlvbihhKXt5cC5wdXNoKGEpfTtfLkJwPWZ1bmN0aW9uKGEpeygwLF8ucGIp
KHlwLGZ1bmN0aW9uKGIpe18udG8oYixhKX0pfTtoZGE9ZnVuY3Rpb24oKXtyZXR1cm4oMCxf
LnNiKSh5cCxmdW5jdGlvbihhKXtyZXR1cm4gYS5nZXRNb2R1bGVJZCgpfSl9Ow0KdmFyIENw
PWZ1bmN0aW9uKCl7Xy4kZi5jYWxsKHRoaXMpO3RoaXMuT2Q9bnVsbH07Xy5xKENwLGZnKTt2
YXIgaWRhPWZ1bmN0aW9uKGEpe3ZhciBiPW5ldyBTbDthLk9kPWI7dmFyIGM9Xy5tKCk7Yy5m
TyghMCk7Yy5PRShiKTthLk9kLlJhPWM7KG5ldyBkcChjKSkuaW5pdCgpO2E9ISFkb2N1bWVu
dC5nZXRFbGVtZW50QnlJZCgiYmFzZS1qcyIpJiYhZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQo
ImJhc2UtanMiKS5oYXNBdHRyaWJ1dGUoIm5vQ29sbGVjdCIpO3ZhciBkPWZhYShhKTthJiZo
Yigic3RvcFNjYW5Gb3JDc3MiLGZ1bmN0aW9uKCl7ZC5GYj0hMTtycChkKX0pfTsNCkNwLnBy
b3RvdHlwZS5pbml0aWFsaXplPWZ1bmN0aW9uKCl7aWRhKHRoaXMpO3ZhciBhPV8uYWwoIklt
NmNtZiIpLiRhKCkrIi9qc2Vycm9yIjtZY2EoYSk7YT1fLlFjKF8uYWwoImNmYjJoIikuJGEo
KSk7VG8uYnVpbGRMYWJlbD1hO2lmKHpwKXthPXpwLkRvKCk7Zm9yKHZhciBiPTA7Yjx5cC5s
ZW5ndGg7YisrKWEucHVzaCh5cFtiXSl9YT10aGlzLk9kO2I9d2luZG93LkJPUV93aXpiaW5k
O3ZhciBjPXdpbmRvdy5kb2N1bWVudDtCbj1udWxsO3ZhciBkPWIudHJpZ2dlcjtiPWIuYmlu
ZDtjPW5ldyBpbyhjLGEpO2Q9bmV3IHlvKGQsYyxhKTthJiYoXy5jby50YigpLk9kPWEsXy5j
ZyhhLGMpKTthPWQuWWc7YigoMCxfLnIpKGEuQWEsYSkpO2MuaGEoKTtkLmRPPSExO2E9ZC5T
bzthPSgwLF8ucikoYS5oYSxhKTt3aW5kb3cud2l6X3Byb2dyZXNzPWE7Zm4oXy5zbihfLklv
KSxfLlFvKTtfLkdvKHtkYXRhOlNvLGZIOlNvLFRvOlJjYX0pO18uR28oe2FmZGF0YV9vOlNv
fSk7Xy5Hbyh7a2M6UWNhfSk7DQpfLkdvKHtqdTpQY2F9KTthKCk7YT1bXy5ybF07Xy50bC5z
aj1EcDtfLnRsLmFxPWE7Xy52bC5zaj1EcDtfLnZsLmFxPWE7Xy51bC5zaj1EcDtfLnVsLmFx
PWE7Xy5ubC5zaj1qZGE7Xy5rbC5zaj1rZGE7Xy5wbC5zaj1FcDtfLm9sLmFxPVtfLmtsXTtf
LnFsLnNqPUZwO18ucmwuc2o9RnA7Xy5zbC5zaj1sZGE7Xy5sbC5zaj0iZG9kSUNkIjtfLmxs
LmFxPVtfLmtsXTttZGEodGhpcyk7d2luZG93LnRvcD09d2luZG93JiZ3aW5kb3cuY29uc29s
ZSYmKHNldFRpbWVvdXQoY29uc29sZS5sb2cuYmluZChjb25zb2xlLCIlYyVzIiwiY29sb3I6
IHJlZDsgYmFja2dyb3VuZDogeWVsbG93OyBmb250LXNpemU6IDI0cHg7IiwiQVZFUlRJU1NF
TUVOVFx1MDBhMCEiKSksc2V0VGltZW91dChjb25zb2xlLmxvZy5iaW5kKGNvbnNvbGUsIiVj
JXMiLCJjb2xvcjogYmxhY2s7IGZvbnQtc2l6ZTogMThweDsiLCJFbiB1dGlsaXNhbnQgY2V0
dGUgY29uc29sZSwgdm91cyB2b3VzIGV4cG9zZXogYXUgcmlzcXVlIHF1ZSBkZXMgcGVyc29u
bmVzIG1hbHZlaWxsYW50ZXMgdXN1cnBlbnQgdm90cmUgaWRlbnRpdFx1MDBlOSBldCB2b2xl
bnQgdm9zIGluZm9ybWF0aW9ucyBnclx1MDBlMmNlIFx1MDBlMCB1bmUgYXR0YXF1ZSBhcHBl
bFx1MDBlOWUgU2VsZi1YU1MuXG5OZSBzYWlzaXNzZXogcGFzIGV0IG5lIGNvcGlleiBwYXMg
ZHUgY29kZSBxdWUgdm91cyBuZSBjb21wcmVuZXogcGFzLiIpKSl9Ow0KdmFyIG1kYT1mdW5j
dGlvbihhKXtmdW5jdGlvbiBiKCl7dmFyIGQ9W0VwLG5kYSxvZGEscGRhXTt6cHx8Xy5LYihk
LGhkYSgpKTtfLmlpKF8ubSgpLGQpO3pwfHxfLkJwKGMpfXZhciBjPWEuT2Q7Xy50aih3aW5k
b3csImxvYWQiLGZ1bmN0aW9uKCl7d2luZG93LmNjVGljayYmd2luZG93LmNjVGljaygib2wi
KTt3aW5kb3cuc2V0VGltZW91dChiLDApfSl9LG5kYT0iX2xhdGVuY3kiLERwPSJaeERhcWMi
LGpkYT0iZl9sZHRmIixFcD0iT0pVcnZiIixGcD0id213ZzhiIixsZGE9IllGZWZDZSIsa2Rh
PSJYQXpjaGMiLG9kYT0iRkNwYnFiIixwZGE9IldoSk5rIjtfLm0oKS5meihDcCk7d2luZG93
LkJPUV9sb2FkZWRJbml0aWFsSlM9ITA7DQpfLkdwPXt9O18uSHA9ZnVuY3Rpb24oYSxiKXt2
YXIgYz1fLkdwW2FdO2N8fChjPV8uR3BbYV09W10pO2MucHVzaChiKX07DQpfLklwPV8ubW4o
InBCNlpxZCIpOw0KXy5KcD1fLkcoIndzOVRsYyIpO25uKF8uSnAsIndJN1NmYyIpOw0KXy5L
cD1fLm1uKCJ3STdTZmMiLF8uSnApOw0KXy5McD1fLkcoIldoSk5rIixbXy5LcF0pOw0KXy5N
cD1fLkcoInhRdFpiIixbXy5LcF0pO25uKF8uTXAsInJIanBYZCIpOw0KXy5OcD1fLm1uKCJy
SGpwWGQiLF8uTXApOw0KXy5PcD1fLkcoInZmdU5KZiIpO25uKF8uT3AsIlNGM2dzZCIpOw0K
Xy5QcD1fLm1uKCJTRjNnc2QiLF8uT3ApOw0KXy5RcD1fLkcoIlByUFlSZCIsW18uTG9dKTsN
Cl8uUnA9Xy5HKCJoYzZVYmQiLFtfLlFwLF8uUHBdKTsNCl8uU3A9Xy5HKCJTcHNmU2IiLFtf
LlFwLF8uUnAsXy5sbCxfLmtsXSk7bm4oXy5TcCwibzAySmllIik7DQpfLlRwPV8ubW4oIm8w
MkppZSIsXy5TcCk7DQpfLlVwPV8uRygiemJNTDNjIixbXy5JcCxfLlRwLF8uTnBdKTtubihf
LlVwLCJCd3VlaCIpOw0KXy5IcChfLkxwLGZ1bmN0aW9uKGEpe18uSG8oYSx7R2E6e2xnOl8u
cm59fSkudGhlbihmdW5jdGlvbihiKXtiLkdhLmxnLkpiKF8uZW4pJiYoYj1fLmFsKCJydFFD
eGMiKS54YygpLGEuS3goYikpfSl9KTtfLkhwKF8uVXAsZnVuY3Rpb24oYSl7YS5vUigpfSk7
DQpfLnFkYT1fLkcoImdEMkxuYyIpOw0KXy5WcD1fLkcoIk5UTVphYyIpO25uKF8uVnAsIlk5
YXRLZiIpOw0KXy5XcD1fLm1uKCJZOWF0S2YiLF8uVnApOw0KXy5YcD1fLkcoInEweFRpZiIs
W18uV3AsXy5RcF0pOw0KXy5ZcD1fLm1uKCJ1aU5rZWUiLF8uVXApOw0KXy5acD1fLkcoIkhU
OFhEZSIpO25uKF8uWnAsInVpTmtlZSIpOw0KXy4kcD1fLkcoIlNNMWxtZCIsW18uTnBdKTtu
bihfLiRwLCJ1aU5rZWUiKTsNCl8uY3E9Xy5HKCJSOVlISmMiLFtfLktwXSk7bm4oXy5jcSwi
ckhqcFhkIik7DQpfLmRxPV8uRygiVWFzOUhkIixbXy5VcF0pOw0KXy5lcT1fLkcoIlBWbFFP
ZCIpO25uKF8uZXEsIkNCbFJ4ZiIpOw0KXy5mcT1fLm1uKCJDQmxSeGYiLF8uZXEpOw0KXy5n
cT1fLkcoIlhWTU52ZCIsW18uS3BdKTtubihfLmdxLCJkb0tzNGMiKTsNCl8uaHE9Xy5tbigi
ZG9LczRjIixfLmdxKTsNCl8uaXE9Xy5HKCJydWlIcGIiKTsNCl8uanE9Xy5HKCJwUkVyayIs
W18uaXFdKTtubihfLmpxLCJDbkFqMGUiKTsNCl8ucmRhPV8uRygiV2VHRzFlIixbXy5qcV0p
Ow0KXy5zZGE9Xy5HKCJjUFM0VmIiKTsNCnZhciBrcT1fLkcoImdtWEgxIik7DQpfLmxxPV8u
RygiUXFZUGllIixba3EsXy5pcV0pO25uKF8ubHEsIkNuQWowZSIpOw0KXy50ZGE9Xy5HKCJT
alh5Y2QiLFtfLmxxLF8ubHFdKTsNCl8ubXE9Xy5HKCJsd2Rka2YiLFtfLnJsLF8uS3BdKTsN
Cl8ubnE9Xy5HKCJFRlE3OGMiLFtfLnJsLF8ubXFdKTsNCnZhciBvcT1fLkcoImZaaGxaYiIs
W2txLF8uaXFdKTtubihvcSwiQ25BajBlIik7DQpfLnBxPV8uRygiWW85UnplIixbb3FdKTsN
Cl8udWRhPV8uRygiUGd1MHViIixbb3FdKTsNCl8udmRhPV8uRygiTllrd0FlIixbb3FdKTsN
Cl8ucXE9Xy5HKCJMMUFBa2IiLFtfLktwXSk7DQpfLnJxPV8uRygiTzZ5OGVkIixbXy5rbF0p
Ow0KXy5zcT1fLkcoImFXM3BZIixbXy5xcV0pOw0KXy53ZGE9Xy5HKCJ2MlA4Y2MiLFtfLmts
LF8uc3FdKTsNCnZhciB5cT1fLkcoIkE0VVRDYiIpOw0KXy54ZGE9Xy5HKCJGYmJha2UiLFt5
cV0pOw0KdmFyIHlkYT1fLkcoImllSmY3ZCIpOw0KXy56cT1fLkcoIkpjdXNNZSIsW3lkYSxf
LmlxXSk7bm4oXy56cSwiQ25BajBlIik7DQpfLkFxPV8uRygiYkM4UGZiIixbXy5zcV0pOw0K
Xy5CcT1fLkcoInBudWxGZSIsW18uenEsXy5BcV0pOw0KXy56ZGE9Xy5HKCJEazlIemYiLFtf
LmlxXSk7DQpfLkNxPV8uRygiWHZXQ25iIixba3EsXy5pcV0pO25uKF8uQ3EsIkNuQWowZSIp
Ow0KXy5EcT1fLkcoIlNkY3dIYiIsW18uZ3FdKTtubihfLkRxLCJDQmxSeGYiKTsNCl8uRXE9
Xy5HKCJCVmdxdWYiLFtfLmZxLF8uVXBdKTsNCl8uRnE9Xy5HKCJWM2RET2IiKTsNCl8uR3E9
Xy5HKCJwaklDRGUiLFtfLmRxLF8udGwsXy5KbyxfLlNwLF8uSnAsXy5RbyxfLkZxLF8uUm8s
Xy5MbyxfLm1xLF8uRHEsXy5zcSxfLkVxLF8uVXAsXy5LcF0pO25uKF8uR3EsIkw3WHd3Iik7
DQpfLkhxPV8uRygibUkzTEZiIik7DQpfLklxPV8uRygibGF6RzdiIixbXy5IcV0pOw0KXy5K
cT1fLkcoIm1kUjdxIixbXy5rbCxfLkhxLF8uSXFdKTsNCl8uS3E9Xy5HKCJraktkWGUiLFtf
LmxsLF8ua2wsXy5KcSxfLkhxXSk7DQpfLkxxPV8uRygiTUk2azdjIixbXy5KcV0pOw0KXy5B
ZGE9Xy5HKCJFQW9TdGQiLFtfLmtsXSk7DQpfLkJkYT1fLkcoIlhxdk9EZCIsW18uSHFdKTsN
Cl8uTXE9Xy5HKCJHa1JpS2IiKTtubihfLk1xLCJpV1AxWWIiKTsNCl8uTnE9Xy5tbigiaVdQ
MVliIixfLk1xKTsNCl8uT3E9Xy5HKCJkdUZRRmMiLFtfLmxsLF8uUXAsXy5LcF0pO25uKF8u
T3EsImlXUDFZYiIpOw0KXy5DZGE9Xy5HKCJHSUxVWmUiKTsNCl8uRGRhPV8uRygiSmRiejZl
Iik7DQpfLlBxPV8uRygiTXE5bjBjIixbXy5rbF0pOw0KXy5FZGE9Xy5HKCJweUZXd2UiLFtf
LlBxXSk7DQpfLlFxPV8uRygieURYdXAiLFtfLmxsXSk7DQpfLlJxPV8uRygicEEzVk5iIixb
Xy5RcV0pOw0KXy5GZGE9Xy5HKCJ6cUtPMWIiLFtfLmxsLF8uUnFdKTsNCl8uU3E9Xy5HKCJw
eHEzeCIsW18ubGxdKTsNCl8uVHE9Xy5HKCJlNXFGTGMiKTsNCl8uVXE9Xy5HKCJNZFV6VWUi
LFtfLnJxLF8uRHEsXy5RcCxfLnNxLF8uVHEsXy5OcV0pO25uKF8uVXEsInBCNlpxZCIpOw0K
Xy5WcT1fLkcoInp5MHZOYiIsW18uS3AsXy5ybl0pO25uKF8uVnEsImJJZjhpIik7DQpfLldx
PV8uRygiTEdKZnAiLFtfLlZxLF8ucm4sXy5VcCxfLktwXSk7bm4oXy5XcSwib1dPbERiIik7
DQpfLlhxPV8uRygicWZUR3JiIixbXy5XcV0pO25uKF8uWHEsIm9XT2xEYiIpOw0KXy5ZcT1f
LkcoIlJNd1lOYyIsW18uS3AsXy5ybl0pO25uKF8uWXEsIm9XT2xEYiIpOw0KXy5acT1fLkco
Ilp4ZTNpIixbXy5ZcSxfLnJuLF8uVXAsXy5LcF0pO25uKF8uWnEsIm9XT2xEYiIpOw0KXy4k
cT1fLkcoImZUZkdPIik7bm4oXy4kcSwiYklmOGkiKTsNCl8uYXI9Xy5tbigiYklmOGkiLF8u
JHEpOw0KXy5icj1fLm1uKCJpQkN1cSIpOw0KXy5jcj1fLkcoIkxGTXhVYiIsW18uYnIsXy5h
cl0pO25uKF8uY3IsIm9XT2xEYiIpOw0KXy5kcj1fLkcoIlFOcUJBZSIsW18uY3JdKTtubihf
LmRyLCJvV09sRGIiKTsNCl8uZXI9Xy5tbigib1dPbERiIixfLiRxKTsNCmZuKF8uc24oXy5l
ciksXy5kcik7Zm4oXy5zbihfLmJyKSxfLlpxKTtmbihfLnNuKF8uYXIpLF8uWHEpOw0KXy5m
cj1fLkcoImljbXFLZiIsW18ucm5dKTsNCl8uZ3I9Xy5HKCJQclV5aGYiLFtfLmtsLF8uYXIs
Xy5mcl0pOw0KXy5ocj1fLkcoInprMHV4IixbXy5hcixfLmZyLF8uVXBdKTsNCl8uaXI9Xy5H
KCJibHdqVmMiKTtubihfLmlyLCJITG8zRWYiKTsNCl8uanI9Xy5HKCJaZkFveiIsW18udGws
Xy5pcl0pO25uKF8uanIsImlUc3lhYyIpOw0KXy5rcj1fLkcoIk9tZ2FJIixbXy5pcl0pO25u
KF8ua3IsIlRVem9jZiIpOw0KXy5scj1fLkcoImZLVVYzZSIpO25uKF8ubHIsIlRVem9jZiIp
Ow0KXy5tcj1fLkcoImF1ckZpYyIpO25uKF8ubXIsIlRVem9jZiIpOw0KXy5ucj1fLkcoInJF
Nk1nZCIsW18uS3BdKTtubihfLm5yLCJUVXpvY2YiKTsNCl8ub3I9Xy5HKCJpSkFlVSIpO25u
KF8ub3IsIkc4RmxzZSIpOw0KXy5wcj1fLm1uKCJ4NjBmaWUiLF8ub3IpOw0KXy5xcj1fLkco
IlBRYVlBZiIsW18ucmwsXy5pcixfLmtyLF8ubHIsXy5tcixfLm5yLF8ucHJdKTtubihfLnFy
LCJiOUFDamQiKTsNCl8ucnI9Xy5HKCJVMGFQZ2QiKTsNCl8uc3I9Xy5HKCJsUEtTd2UiLFtf
LnFyLF8uaXIsXy5ycl0pO25uKF8uc3IsImlUc3lhYyIpOw0KXy50cj1fLkcoInlEVlZrYiIs
W18uanIsXy5zcixfLmlyXSk7bm4oXy50ciwiaVRzeWFjIik7DQpfLnVyPV8ubW4oImlUc3lh
YyIpOw0KXy52cj1fLkcoIlVwZ0N1YiIsW18udXIsXy5ycl0pO25uKF8udnIsIm14alBpZCIp
Ow0KXy53cj1fLm1uKCJ0ZlROOGMiLF8udnIpOw0KXy54cj1fLkcoInZseGlKZiIsW18uaXIs
Xy53cl0pOw0KXy55cj1fLm1uKCJITG8zRWYiKTsNCl8uenI9Xy5HKCJWd0R6RmUiLFtfLndy
LF8ueXIsXy5ycl0pO25uKF8uenIsIkhEdlJkZSIpOw0KXy5Bcj1fLm1uKCJIRHZSZGUiKTsN
Cl8uQnI9Xy5HKCJBN2ZDVSIsW18uQXIsXy55cixfLk9vXSk7bm4oXy5CciwiVWdBdFhlIik7
DQpfLkNyPV8uRygiVDlSenpkIixbXy5pcl0pO25uKF8uQ3IsImI5QUNqZCIpOw0KXy5Ecj1f
LkcoImJtNTF0ZiIsW18ucHIsXy55cixfLnVyXSk7bm4oXy5EciwiVFV6b2NmIik7DQpfLkdk
YT1fLkcoIkZ5bmF3YiIsW18ucmxdKTsNCl8uSGRhPV8uRygieWxsWWFlIixbXy5pcixfLndy
XSk7DQpfLkVyPV8uRygiT2dPVk5lIixbXy5rbCxfLnJuXSk7DQpfLkZyPV8uRygiWVR4TDQi
LFtfLlVwXSk7bm4oXy5GciwiUUxwVE9kIik7DQpmbihfLnNuKF8ucm4pLF8uRnIpOw0KXy5J
ZGE9Xy5HKCJCWDExM2QiLFtfLkVyXSk7DQpfLkpkYT1fLkcoIlZPQVkwYyIsW18uRXJdKTsN
Cl8uR3I9Xy5HKCJWWGRmeGQiLFt5cV0pOw0KXy5LZGE9Xy5HKCJNOU9RbmYiLFtfLlFxXSk7
DQpfLkxkYT1fLkcoImFLeDJWZSIsW18uR3JdKTsNCl8uSHI9Xy5HKCJxbWRUOSIsW18ua2ws
Xy5lcl0pOw0KXy5NZGE9Xy5HKCJLaE1LbGIiLFtfLmtsXSk7DQp2YXIgSXI9Xy5HKCJ3R003
SmMiKTsNCl8uTmRhPV8uRygiUUlnYmlmIixbSXJdKTsNCl8uSnI9Xy5HKCJFR05KRmYiLFtf
LmtsLF8ubGwsXy5zcV0pOw0KXy5Lcj1fLkcoImlTdmc2ZSIsW3lxLF8uSnJdKTsNCl8uT2Rh
PV8uRygieDd6NHRjIixbXy5Lcl0pOw0KXy5Mcj1fLkcoInVZM052ZCIsW18uSnJdKTtubihf
LkxyLCJYZDdFSmUiKTsNCl8uTXI9Xy5HKCJZd0hHVGQiLFt5cV0pO25uKF8uTXIsIlhkN0VK
ZSIpOw0KXy5QZGE9Xy5HKCJmaUdkY2IiLFtfLkxyXSk7DQpfLk5yPV8uRygiZmdqOFJiIixb
Xy5rbCxfLmxsLF8uc3FdKTsNCl8uT3I9Xy5HKCJ4aGk0a2UiLFtfLmxsLF8uTnJdKTsNCl8u
UHI9Xy5HKCJONUxxcGMiLFtfLnNxLF8uRnFdKTsNCl8uUWRhPV8uRygiblJUNktlIik7DQpf
LlJkYT1fLkcoIngzakFlZiIsW18uTnJdKTsNCl8uUXI9Xy5HKCJXQ0cyZmUiKTsNCl8uUnI9
Xy5HKCJXcFA5WWMiLFtfLlFyLF8uS3BdKTsNCl8uU3I9Xy5HKCJwY0tFbGUiLFtfLndyLF8u
S3BdKTsNCl8uU2RhPV8uRygiQUhZbXdlIik7DQpfLlRkYT1fLkcoIlpLdHFwZiIsW18ua2xd
KTsNCl8uVWRhPV8uRygiVHQzOEdiIixbXy5Rcl0pOw0KdmFyIFRyPV8uRygiVkJlM1RiIik7
DQpfLlVyPV8uRygiSHR3Ym9kIixbVHJdKTsNCl8uVmRhPV8uRygiYmV0bGZjIixbXy5Vcl0p
Ow0KXy5Wcj1fLkcoIk9zdXZkZCIsW18uU3EsXy5sbF0pOw0KXy5XZGE9Xy5HKCJDZ0M5R2Mi
LFtfLlZyXSk7DQpfLlhkYT1fLkcoImhyVTkiLFtUcl0pOw0KXy5Xcj1fLkcoIktvcm5JZSIp
Ow0KXy5ZZGE9Xy5HKCJpVFBmTGMiLFtfLldyXSk7DQpfLlpkYT1fLkcoIndQUk5zZCIsW18u
V3JdKTsNCl8uJGRhPV8uRygiRWNXMDhjIixbeXFdKTsNCl8uWHI9Xy5HKCJNeXdKUiIsW18u
YXIsXy5mcl0pOw0KXy5hZWE9Xy5HKCJIME1FQWYiLFtfLmxsLF8uZXJdKTsNCl8uWXI9Xy5H
KCJBVmxpeWQiLFtfLndyXSk7DQpfLlpyPV8uRygiUkV3NnpiIixba3EsXy5pcV0pO25uKF8u
WnIsIkNuQWowZSIpOw0KXy4kcj1fLkcoImpLQXZxZCIsW1RyLF8uaXFdKTtubihfLiRyLCJD
bkFqMGUiKTsNCl8uYXM9Xy5HKCJzdm1pMGIiLFtrcSxfLmlxXSk7bm4oXy5hcywiQ25BajBl
Iik7DQpfLmJzPV8uRygiczM5UzQiLFtfLmxsLF8ubWxdKTtubihfLmJzLCJZOWF0S2YiKTsN
Cl8uY3M9Xy5HKCJwdzcwR2MiLFtfLmJzXSk7bm4oXy5jcywiWTlhdEtmIik7DQpfLmRzPV8u
RygiUUloRnIiLFtfLlFwLF8uY3NdKTtubihfLmRzLCJTRjNnc2QiKTsNCl8uZXM9Xy5HKCJT
OXdhOGMiLFtrcSxfLmlxXSk7bm4oXy5lcywiQ25BajBlIik7DQpfLmJlYT1fLkcoInl4MU40
IixbXy5VcF0pOw0KXy5jZWE9Xy5HKCJOMERnc2MiLFtfLkVyXSk7DQpfLmZzPV8uRygiTjVx
UGUiLFtfLkRxXSk7DQpfLmRlYT1fLkcoImI0NGtGZSIsW18uZnNdKTsNCl8uZ3M9Xy5HKCJX
R21aZ2IiLFtfLlhwXSk7DQpfLmhzPV8uRygicmRLbnUiLFtfLlhwXSk7DQpfLmlzPV8uRygi
YnRWZTQiLFtfLlhwXSk7DQpfLmpzPV8uRygiYk5WM3RmIixbXy5YcF0pOw0KXy5rcz1fLkco
ImJtczBtYiIsW18uWHBdKTsNCl8ubHM9Xy5HKCJnME40UGMiLFtfLlhwXSk7DQpfLm1zPV8u
RygiRWx3QmVjIixbXy5YcF0pOw0KXy5lZWE9Xy5HKCJWWVM4TGUiLFtfLmtsXSk7DQpfLm5z
PV8uRygiZUJLQ1QiKTsNCl8uZmVhPV8uRygid3EzZWhlIixbXy5uc10pOw0KXy5nZWE9Xy5H
KCJGRmtLYmMiLFtfLm5zXSk7DQpfLm9zPV8uRygiWXI0QTAiLFtrcSxfLmlxXSk7bm4oXy5v
cywiQ25BajBlIik7DQpfLmhlYT1fLkcoIkhXRWU3IixbXy5vcyxfLkVyXSk7DQpfLmllYT1f
LkcoImZqWWZTZCIsW18ub3NdKTsNCl8ucHM9Xy5HKCJJNllEZ2QiLFtfLmxsLF8ucnEsXy5z
cV0pOw0KXy5qZWE9Xy5HKCJTTVlhZmQiLFtfLm9zLF8ucHNdKTsNCl8ua2VhPV8uRygiQjg4
dzRiIixbXy5vcyxfLmtsLF8uWHIsXy5lcixfLktwXSk7DQpfLnFzPV8uRygiaEdvdTJlIixb
Xy53cl0pO25uKF8ucXMsIktBOHlKZSIpOw0KXy5sZWE9Xy5HKCJYOEhObWUiLFtfLmZzXSk7
DQpfLm1lYT1fLkcoInRuYzl6YyIsW18uTnJdKTsNCl8ubmVhPV8uRygiaEg2NGtkIixbXy5u
c10pOw0KXy5vZWE9Xy5HKCJyTlBJSiIsW18ubGwsXy5OcixfLlVwLF8uS3BdKTsNCl8ucGVh
PV8uRygiZWFMRVRiIixbSXIsXy5rbCxfLlVwXSk7DQpfLnJzPV8uRygiaExCYlJiIixbXy5r
bCxfLmxsLF8uc3FdKTsNCl8uc3M9Xy5HKCJmcmlFMWUiLFtfLmxsLF8ud3IsXy5wc10pOw0K
Xy50cz1fLkcoInNNSTEyZSIsW18ubGwsXy5VcCxfLktwXSk7DQpfLnVzPV8uRygiTUl4aGtm
IixbXy50cyxfLnNzLF8ucnNdKTsNCl8ucWVhPV8uRygiV0VUNTUiLFtfLnJzXSk7DQpfLnJl
YT1fLkcoInJQMEM5IixbXy5OcixfLktwXSk7DQpfLnZzPV8uRygiamNUcUwiLFtfLm9sXSk7
DQpfLnNlYT1fLkcoImNsWmQ3IixbXy52c10pOw0KXy53cz1fLkcoIm1oQTZ6YyIsW18uUHJd
KTsNCl8ueHM9Xy5HKCJHZ2pPayIsW18ubGwsXy50cyxfLnJzXSk7DQpfLnRlYT1fLkcoInRt
eExqYiIsW18ubGwsXy5Pcl0pOw0KXy55cz1fLkcoImpMVWxoZCIpOw0KXy5HKCJNNk9NQ2Ii
LFtfLmxsLF8ueXMsXy53cixfLnBzLF8uWXJdKTsNCl8uRygiU1BmaEtkIixbXy5sbCxfLnBz
XSk7DQpfLnpzPV8uRygiT1RpUEtiIik7DQpfLkFzPV8uRygiQkxkVGFjIixbXy56c10pOw0K
Xy51ZWE9Xy5HKCJpSmxQR2UiLFtfLkFzXSk7DQpfLnZlYT1fLkcoIlpFVE1nZiIsW18uTXIs
Xy5sbF0pOw0KXy53ZWE9Xy5HKCJETUVLS2MiLFtfLlFyLF8uVXBdKTsNCl8uQnM9Xy5HKCJV
a1dxWWQiLFtfLktwLF8uVXAsXy5McF0pOw0KXy54ZWE9Xy5HKCJGWk1RdmIiLFtfLlFyXSk7
DQpfLnllYT1fLkcoIlNlWXhoYiIsW18ubGxdKTsNCl8uQ3M9Xy5HKCJKS05QTSIsW18uS3Bd
KTtubihfLkNzLCJRN0J4bGQiKTsNCl8uRHM9Xy5tbigiUTdCeGxkIik7DQpmbihfLnNuKF8u
RHMpLF8uQ3MpOw0KXy56ZWE9Xy5HKCJvWkp0QmIiLFtrcV0pOw0KXy5BZWE9Xy5HKCJ2Mnh5
emMiLFtdKTsNCl8uRXM9Xy5HKCJnSnpEeWMiLFtfLmtsLF8ubGwsXy5XcF0pOw0KXy5CZWE9
Xy5HKCJBaEJJdWMiLFtfLkVzXSk7DQpfLkNlYT1fLkcoIlpha2VTZSIsW18ucXFdKTsNCl8u
RygiSm55cXJjIixbXSk7DQpfLklzPV8uRygicWplekIiLFtfLkRxXSk7DQpfLkcoImZSZk5p
ZCIsW18uSXNdKTsNCl8uRGVhPV8uRygiY2o2RTZlIixbXSk7DQpfLkpzPV8uRygieDN3Y0Rm
IixbXy5pcV0pO25uKF8uSnMsIkNuQWowZSIpOw0KXy5FZWE9Xy5HKCJVZHJReiIsW18uQnFd
KTsNCl8uRmVhPV8uRygiZTg1NUdlIixbXSk7DQpfLkdlYT1fLkcoIkxDcndSYyIsW18ucHNd
KTsNCl8uS3M9Xy5HKCJrWnNncWQiLFtfLmxsLF8uUnAsXy53cixfLnJzLF8uZXIsXy5Rcixf
LnBzLF8uVXBdKTsNCnZhciBMcz1fLkcoImk3WDl2ZSIsW18ua2wsXy5ybCxfLkRzXSk7DQpf
LkhlYT1fLkcoInlHUkZhZCIsW0xzXSk7DQpfLkllYT1fLkcoImV5a1A4IixbXy5Lc10pOw0K
Xy5Ncz1fLkcoIllKU0d3ZCIsW18uWHBdKTsNCl8uTnM9Xy5HKCJPb2hqaGQiLFtfLlhwXSk7
DQpfLk9zPV8uRygiQjhKcEFkIixbXy5YcF0pOw0KXy5Qcz1fLkcoIlI3Zm5lYiIpOw0KXy5R
cz1fLkcoIlRTRDA4YiIsW18ud3JdKTsNCl8uSmVhPV8uRygiYUVQNXIiLFtfLlBzLF8uUXMs
Xy5OcixfLnBzXSk7DQpfLktlYT1fLkcoIndnOGQyZCIsW18uUXMsXy5lcl0pOw0KXy5MZWE9
Xy5HKCJheEFZQWMiLFtfLmxsLF8uUXMsXy5Ocl0pOw0KXy5Scz1fLkcoImxEeE9GZSIsW18u
WHBdKTsNCl8uTWVhPV8uRygiVXF6dk5iIixbXy5rbF0pOw0KXy5Tcz1fLkcoIm14ekhDYyIp
Ow0KXy5OZWE9Xy5HKCJ2OUxGRSIsW18ubGwsXy5TcyxfLkZxXSk7DQpfLlRzPV8uRygibHF0
SkZiIik7DQpfLlVzPV8uRygiSk9rbTFlIik7DQpfLlZzPV8uRygiWDBpdEtjIixbXy5rbCxf
LmxsLF8uVXAsXy5VcyxfLlRzXSk7DQpfLldzPV8uRygiczI5TVMiLFtrcSxfLmxsLF8uVXMs
Xy5pcV0pO25uKF8uV3MsIkNuQWowZSIpOw0KXy5Ycz1fLkcoInZSNkk5YyIsW2txLF8uaXFd
KTtubihfLlhzLCJDbkFqMGUiKTsNCl8uWXM9Xy5HKCJFMnV1eGQiLFtfLmFyLF8ud3IsXy5w
cyxfLlVwLF8uS3BdKTsNCl8uWnM9Xy5HKCJwMkJTeWIiLFtfLllzXSk7DQpfLk9lYT1fLkco
ImVOeEpqZCIsW18uWXMsXy5yc10pOw0KXy5QZWE9Xy5HKCJRUHFpYmYiLFtfLllzXSk7DQpf
LlFlYT1fLkcoIlkwa0dKYyIsW18uWXMsXy5yc10pOw0KXy4kcz1fLkcoIksxNVhwZSIsW18u
WHBdKTsNCl8uUmVhPV8uRygiblhxZlFlIixbXy5Zc10pOw0KXy5hdD1fLkcoIkdZYUF4ZSIs
W18uWHBdKTsNCl8uYnQ9Xy5HKCJ1MU9sM2UiLFtfLlhwXSk7DQpfLmN0PV8uRygiUDRHTXJl
IixbXy5YcF0pOw0KXy5kdD1fLkcoIkd5TXUwIixbXy5YcF0pOw0KXy5TZWE9Xy5HKCJOU1NZ
b2YiLFtfLmxsLF8uUnAsXy5ZcyxfLnJzXSk7DQpfLlRlYT1fLkcoImJselRrZCIsW18uUnAs
Xy5ZcyxfLlFyXSk7DQpfLlVlYT1fLkcoInY5NnZQYyIsW18ucHEsXy5RcCxfLlVwLF8uUnAs
Xy5Zc10pOw0KXy5ldD1fLkcoImZaSGduZSIsW18uWHBdKTsNCl8uZnQ9Xy5HKCJucmw5WmQi
LFtfLlhwXSk7DQpfLmd0PV8uRygic25uU1JjIixbXy5YcF0pOw0KXy5odD1fLkcoIm5Ud1dD
YyIsW18uWHBdKTsNCl8ubHQ9Xy5HKCJ3SUwxcGIiLFtfLlhwXSk7DQpfLm10PV8uRygiRUNO
d1JlIixbXy5YcF0pOw0KXy5udD1fLkcoIlVydVRFYyIsW18uWHBdKTsNCl8ub3Q9Xy5HKCJm
WFVvcGUiLFtfLlhwXSk7DQpfLnB0PV8uRygiZFpIZEFkIixbXy5YcF0pOw0KXy5xdD1fLkco
ImpXQzQ0ZSIsW18uWHBdKTsNCl8ucnQ9Xy5HKCJyMEYxZiIsW18uWHBdKTsNCl8uc3Q9Xy5H
KCJKMTlFM2MiLFtfLlhwXSk7DQpfLnR0PV8uRygiRkcxZ0EiLFtfLlhwXSk7DQpfLlZlYT1f
LkcoIkZnaHJzYiIsW18uVnMsXy5ScCxfLllzLF8ud3JdKTsNCl8uV2VhPV8uRygiczFnN0hm
IixbTHNdKTsNCl8uWGVhPV8uRygiS0s5WktjIixbXy5acyxfLmxsLF8uVXNdKTsNCl8udXQ9
Xy5HKCJNVWtrdGIiLFtfLmxsLF8uWXMsXy5wc10pOw0KXy5ZZWE9Xy5HKCJBUnh3cmIiLFtf
LnV0LF8uUnBdKTsNCl8uWmVhPV8uRygicnJRQWxiIixbXy51dCxfLlJwXSk7DQpfLiRlYT1f
LkcoIktwbTh6ZCIsW18udXQsXy5ScF0pOw0KXy5hZmE9Xy5HKCJEaGRNamYiLFtfLnV0LF8u
WXMsXy53cl0pOw0KXy5iZmE9Xy5HKCJjRVhmbWMiLFtfLnV0LF8ud3IsXy5yc10pOw0KXy5j
ZmE9Xy5HKCJocUxUa2IiLFtfLnV0LF8ud3IsXy5Zc10pOw0KXy5kZmE9Xy5HKCJmcUtXdyIs
W18ubGwsXy5ZcyxfLndyLF8ucnNdKTsNCl8uZWZhPV8uRygicWc1dTNkIixbXy51dCxfLlJw
XSk7DQpfLmZmYT1fLkcoIm5hRHBwYiIsW18udXQsXy5ScF0pOw0KXy5nZmE9Xy5HKCJNR005
ZWMiLFtfLnV0XSk7DQpfLmhmYT1fLkcoIkVmRk5YIixbXy51dCxfLlJwLF8uWXNdKTsNCl8u
aWZhPV8uRygicllXOExiIixbTHNdKTsNCl8udnQ9Xy5HKCJCSHhkeWYiLFtfLmxsLF8uUnAs
Xy53cyxfLndyLF8uYXIsXy54cyxfLkJzLF8ucHMsXy5VcCxfLktwXSk7DQpfLmpmYT1fLkco
InUxSTJlYyIsW18ubGwsXy52dCxfLlVwLF8uS3BdKTsNCl8ua2ZhPV8uRygic3NqaUJkIixb
Xy5sbCxfLnZ0LF8uVXAsXy5LcF0pOw0KdmFyIHd0PV8uRygiTndNRlpjIixbXy5sbCxfLnZ0
LF8uVXNdKTsNCl8ueHQ9Xy5HKCJEUkNnd2QiKTsNCl8ubGZhPV8uRygiV2gzU21mIixbXy5s
bCxfLnZ0LF8ucnMsXy54dF0pOw0KXy5tZmE9Xy5HKCJJeEtoeGQiLFtfLktwLF8uVXAsXy5M
cF0pOw0KXy5uZmE9Xy5HKCJoeVIwaGYiLFt3dCxfLlVwXSk7DQpfLnl0PV8uRygibzNjaXlm
IixbXy5YcF0pOw0KXy56dD1fLkcoIlpPWlZOYiIsW18udnRdKTsNCl8ub2ZhPV8uRygibUxs
MmJmIixbXy56dCxfLnZ0LF8ucnMsXy51c10pOw0KXy5BdD1fLkcoInRKUENOZCIpOw0KXy5C
dD1fLkcoIkJ6cWdhZiIpOw0KXy5DdD1fLkcoIlV1V0tRZSIsW18uQXQsXy5CdF0pOw0KXy5w
ZmE9Xy5HKCJ1QzYxRSIsW3d0LF8uenQsXy5zcyxfLnJzLF8uQ3QsXy5BdCxfLkJ0XSk7DQpf
LkR0PV8uRygiREZqWEJiIixbXy5YcF0pOw0KXy5xZmE9Xy5HKCJ5RDJrSmMiLFtfLlVwXSk7
DQpfLkV0PV8uRygiaVJhTGgiLFtfLlhwXSk7DQpfLnJmYT1fLkcoInhVRHNhZCIsW3d0LF8u
d3IsXy5hcixfLnJzXSk7DQpfLkZ0PV8uRygiWWk3MExkIixbXy5YcF0pOw0KXy5zZmE9Xy5H
KCJYajNWOWQiLFt3dCxfLndyXSk7DQpfLkd0PV8uRygiVmhScHplIixbXy5YcF0pOw0KXy50
ZmE9Xy5HKCJSQWVYOWIiLFt3dCxfLndyLF8uUnBdKTsNCl8uSHQ9Xy5HKCJGaWY3QiIsW18u
WHBdKTsNCl8udWZhPV8uRygieVFtUzgiLFt3dCxfLlJwLF8uVXAsXy5LcF0pOw0KXy5JdD1f
LkcoIkxnTlRKYiIsW18uWHBdKTsNCl8udmZhPV8uRygieUYxcldiIixbXy5WcyxfLmxsLF8u
dnQsXy5ScF0pOw0KXy53ZmE9Xy5HKCJwOThXRSIsW0xzXSk7DQpfLnhmYT1fLkcoIkJVTDg4
IixbXy5Rcl0pOw0KXy5KdD1fLkcoIlNBU0JQZCIsW18uWHBdKTsNCl8uS3Q9Xy5HKCJxM2oy
YmUiLFtfLlhwXSk7DQpfLkx0PV8uRygiRnFVTmJjIixbXy5YcF0pOw0KXy5NdD1fLkcoIlZk
RGNBZSIsW18uWHBdKTsNCl8uTnQ9Xy5HKCJ1V1F3ZCIsW18uWHBdKTsNCl8ueWZhPV8uRygi
bkRtWDRkIixbd3RdKTsNCl8uemZhPV8uRygiblBrQjdlIixbd3QsXy5VcCxfLktwXSk7DQpf
LkFmYT1fLkcoIkFkY0J4ZiIsW18ubGwsXy5ScCxfLmVyLF8uUXIsXy5VcCxfLktwXSk7DQpf
Lk90PV8uRygia2NYQUEiLFtfLlhwXSk7DQpfLlB0PV8uRygiQmhjTm1mIixbXy5YcF0pOw0K
Xy5RdD1fLkcoIm5RaFowYyIsW18uWHBdKTsNCl8uUnQ9Xy5HKCJPejBIOWIiLFtfLlhwXSk7
DQpfLlN0PV8uRygiRVIyN3diIixbXy5YcF0pOw0KXy5UdD1fLkcoIlRZWXhPZSIsW18uWHBd
KTsNCl8uQmZhPV8uRygiak1iMlZiIik7DQpfLlV0PWZ1bmN0aW9uKCl7fTtfLnUoXy5VdCxf
LiRmKTtfLlV0LnByb3RvdHlwZS5oYT1fLmNhKDE5KTtfLlV0LnByb3RvdHlwZS5rYT1fLmNh
KDIxKTtfLlV0LnByb3RvdHlwZS50YT1fLmNhKDIzKTsNCl8uVnQ9ZnVuY3Rpb24oKXt9O18u
cShfLlZ0LF8uVXQpO18uVnQucHJvdG90eXBlLmhhPV8uY2EoMTgpOw0KXy5XdD17fTsNCl8u
WHQ9ZnVuY3Rpb24oYSl7Xy55KHRoaXMsYSwiaWFydy5ycmEiLC0xLG51bGwsbnVsbCl9O18u
dShfLlh0LF8ueCk7Xy5ZdD1uZXcgXy5FaSgxMzUzNzYzMzgsXy5YdCk7Xy5XdFsxMzUzNzYz
MzhdPV8uWXQ7Xy5YdC5MZT0iaWFydy5ycmEiO18uWHQucHJvdG90eXBlLmdldFVybD1mdW5j
dGlvbigpe3JldHVybiBfLkEodGhpcywxKX07DQpfLlZhLnJlZGlyZWN0PWZ1bmN0aW9uKGEs
YixjKXthPWEuZ2V0VXJsKCk7Yz1fLkltKF8uTW0oYSwiY29udGludWUiKSwiY29udGludWUi
LGMpO18uVWQoYixjKX07DQpfLlp0PWZ1bmN0aW9uKGEpe18ueSh0aGlzLGEsImFmLmRlcCIs
LTEsbnVsbCxudWxsKX07Xy51KF8uWnQsXy54KTtfLiR0PW5ldyBfLkVpKDEwNjYyNzE2Myxf
Llp0KTtfLmJqWzEwNjYyNzE2M109Xy4kdDtfLlp0LkxlPSJhZi5kZXAiO18uWnQucHJvdG90
eXBlLmdldElkPWZ1bmN0aW9uKCl7cmV0dXJuIF8uQSh0aGlzLDEpfTsNCl8uYXU9ZnVuY3Rp
b24oYSl7dGhpcy5PZD1hfTtfLnEoXy5hdSxfLlV0KTtfLmF1LnByb3RvdHlwZS5rYT1fLmNh
KDIwKTtfLmF1LnByb3RvdHlwZS50YT1fLmNhKDIyKTsNCl8ubSgpLlloKGZ1bmN0aW9uKGEp
e18uTmgoYS5yaShfLnJsKSxmdW5jdGlvbihiKXtiLiRrKG5ldyBfLlZ0KTtiLiRrKG5ldyBf
LmF1KGEpKX0pfSk7DQpudWxsIT1fLnNuKF8uSXApLmhhfHxmbihfLnNuKF8uSXApLF8uVXEp
Ow0KZm4oXy5zbihfLnVyKSxfLnRyKTtmbihfLnNuKF8ud3IpLF8udnIpO2ZuKF8uc24oXy5B
ciksXy56cik7Zm4oXy5zbihfLnlyKSxfLmlyKTtfLkdvKHtycGM6Tm8oXy5CciwicnBjIiks
V3lhOmZ1bmN0aW9uKGEsYil7dmFyIGM9Xy5IbyhhLHtHYTp7dTE6Xy54cn19KTtyZXR1cm4g
Xy5xYyhiLGZ1bmN0aW9uKGQpe3JldHVybiBjLnRoZW4oZnVuY3Rpb24oZSl7cmV0dXJuIGUu
R2EudTEudGEoZCl9KX0pfX0pOw0KXy5idT1fLkcoImJYcFRTIik7DQpfLmN1PWZ1bmN0aW9u
KGEpe2E9YXx8ZG9jdW1lbnQuYm9keTthPV8uQ2EoYS5xdWVyeVNlbGVjdG9yQWxsKCJzdHls
ZVtkYXRhLXNlcnZlci1jc3MtY29sbGVjdGlvbl0sIGxpbmtbZGF0YS1zZXJ2ZXItY3NzLWNv
bGxlY3Rpb25dIikpO2Zvcih2YXIgYj1hLm5leHQoKTshYi5kb25lO2I9YS5uZXh0KCkpZG9j
dW1lbnQuaGVhZC5hcHBlbmRDaGlsZChiLnZhbHVlKX07DQpmbihfLnNuKF8uV3ApLF8uYnMp
O2ZuKF8uc24oXy5QcCksXy5kcyk7DQpfLkZvKHtxYzpmdW5jdGlvbihhKXt2YXIgYj1hLkhh
P2EuSGEoKS5DYSgpOmEuSm8oKTt2YXIgYz1iLl9fc295P3VhKGIpOm51bGw7aWYoYylyZXR1
cm4gXy5rYShjKTt2YXIgZD1nYWEoYik7ZC5mQXx8KGQuZkE9bmV3IFNldCk7dmFyIGU9ZC5m
QTtjPW5ldyBTZXQ7Zm9yKHZhciBmPV8uQ2EoZSksZz1mLm5leHQoKTshZy5kb25lO2c9Zi5u
ZXh0KCkpZz1nLnZhbHVlLF8uRWYoYixnKSYmYy5hZGQoZyk7Yy5zaXplfHwoZS5hZGQoYiks
Yi5fX3NveV90YWdnZWRfZm9yX3NraXA9ITApO2E9IkMtV0laIiE9PWQudGFnTmFtZT9kLldH
LnRoZW4oZnVuY3Rpb24oKXtlLmNsZWFyKCk7dmFyIGg9Yi5fX3NveT91YShiKTpudWxsO2lm
KGgpcmV0dXJuIGg7ZC5fX3NveS5yZW5kZXIoKTtyZXR1cm4gdWEoYil9KTpfLkhvKGEse0dh
OntZZTpfLlFwfX0pLnRoZW4oZnVuY3Rpb24oaCl7cmV0dXJuIGguR2EuWWUudnEoZCl9KS50
aGVuKGZ1bmN0aW9uKGgpe3JldHVybiBoLkdsKCkudGhlbihmdW5jdGlvbihsKXtlLmNsZWFy
KCk7ZC5fX2luY3JlbWVudGFsRE9NRGF0YXx8DQooXy5jdShkKSxsLkxEKGQpKTtyZXR1cm4g
dWEoYil9KX0pO2IuZkE9YztyZXR1cm4gYi5XRz1hfX0pOw0KXy5kdT1fLkcoIldPOWVlIik7
DQpmbihfLnNuKF8uZnEpLF8uRHEpO251bGwhPV8uc24oXy5ocSkuaGF8fGZuKF8uc24oXy5o
cSksXy5EcSk7enA9Xy5HcTsNCkFwKF8uZ3IpO0FwKF8uaHIpOw0KQXAoXy5Fcik7DQpBcChf
LmVyKTtBcChfLkhyKTsNCkFwKF8uYnUpO0FwKF8uUnIpOw0KQXAoXy5ucSk7DQpBcChfLmR1
KTtfLmFsKCJ4OTZVQmYiKS4kYShudWxsKSYmXy5IcChfLmR1LGZ1bmN0aW9uKGEpe2EuTTAo
KX0pOw0KDQoNCl8uX01vZHVsZU1hbmFnZXJfaW5pdGlhbGl6ZT0oMCxfLnIpKF8ubSgpLld5
LF8ubSgpKTsNCg0KKDAsXy5fTW9kdWxlTWFuYWdlcl9pbml0aWFsaXplKSgnJyxbJ190cCdd
KTsNCg0KdmFyIHlnYT17fTtfLncoIl90cCIpOw0Kd2luZG93Ll9GX2dldElqRGF0YT1mdW5j
dGlvbigpe3ZhciBhPXdpbmRvdy5JSl92YWx1ZXN8fHdpbmRvdy5wYXJlbnQuSUpfdmFsdWVz
O2lmKDY0IT1hLmxlbmd0aCl0aHJvdyBFcnJvcigiamEiKTtyZXR1cm57ZnhhOmFbMF0saEE6
YVsxXSx4UjpmdW5jdGlvbigpe3JldHVybiBuZXcgXy5ibChhWzJdKX0sSG06YVszXSxreGE6
YVs0XSxSaDphWzVdLG94YTphWzZdLHR4YTphWzddLHh4YTphWzhdLGNvdW50cnk6YVs5XSxk
VDphWzEwXSxEeGE6YVsxMV0sRnhhOmFbMTJdLGhUOmFbMTNdLHN3OmFbMTRdLGRpcjphWzE1
XSxUeGE6YVsxNl0sVXhhOmFbMTddLHBVOmFbMThdLFZ4YTphWzE5XSxjeWE6YVsyMF0sZHlh
OmFbMjFdLGV5YTphWzIyXSxmeWE6YVsyM10scHg6YVsyNF0sZ3lhOmFbMjVdLGh5YTphWzI2
XSxpeWE6YVsyN10sanlhOmFbMjhdLG55YTphWzI5XSxxSzphWzMwXSxyeWE6YVszMV0sbGFu
Z3VhZ2U6YVszMl0sQWk6YVszM10sbG9jYWxlOmFbMzRdLHl5YTphWzM1XSxwRDphWzM2XSwN
CnBMOmFbMzddLEF5YTphWzM4XSxCeWE6YVszOV0sWlg6YVs0MF0saG06YVs0MV0sRHlhOmFb
NDJdLEd5YTphWzQzXSxsWjphWzQ0XSxNeWE6YVs0NV0sUHlhOmFbNDZdLGNOOmFbNDddLGRO
OmFbNDhdLHJ0bDphWzQ5XSxremE6YVs1MF0sbXphOmFbNTFdLGhGOmFbNTJdLHF6OmFbNTNd
LEJwOmFbNTRdLG96YTpmdW5jdGlvbigpe3JldHVybiBuZXcgeWdhLnVybHMuWCQoYVs1NV0p
fSxPaDphWzU2XSxldjphWzU3XSx0emE6YVs1OF0sSmE6YVs1OV0sdXphOmFbNjBdLHZ6YTph
WzYxXSx5ZWFyOmFbNjJdLHh6YTphWzYzXX19Ow0KDQpfLm0oKS5oYSgpOw0KDQp9Y2F0Y2go
ZSl7Xy5fRHVtcEV4Y2VwdGlvbihlKX0NCn0pLmNhbGwodGhpcyx0aGlzLmRlZmF1bHRfQWNj
b3VudFNldHRpbmdzU2VjdXJpdHlBZHZpc29yVWkpOw0KLy8gR29vZ2xlIEluYy4NCg0KLy8j
IHNvdXJjZVVSTD0vXy9tc3MvYm9xLWlkZW50aXR5L18vanMvaz1ib3EtaWRlbnRpdHkuQWNj
b3VudFNldHRpbmdzU2VjdXJpdHlBZHZpc29yVWkuZnIucG5nY1VPRTlrTGcuZXM1Lk8vYW09
U0p5RS9kPTEvZXhjbT1fYixfdHAsc2VjdXJpdHlldmVudHZpZXcvZWQ9MS9kZz0wL3d0PTIv
Y3Q9emdtcy9ycz1BT2FFbWxGQ201UUFuQlNDMW5SY01kNzR4MjVnYzh4VDVBL209X2IsX3Rw
DQpvbkpzTG9hZCgpOzwvc2NyaXB0PjxzdHlsZSBub25jZT0iakpsQlZxOGNBcU1iUkE5c3pV
cUdFdyI+LmdiX09he2ZvbnQ6MTNweC8yN3B4IFJvYm90byxSb2JvdG9EcmFmdCxBcmlhbCxz
YW5zLXNlcmlmO3otaW5kZXg6OTg2fUAtbW96LWtleWZyYW1lcyBnYl9fYXswJXtvcGFjaXR5
OjB9NTAle29wYWNpdHk6MX19QGtleWZyYW1lcyBnYl9fYXswJXtvcGFjaXR5OjB9NTAle29w
YWNpdHk6MX19YS5nYl9Xe2JvcmRlcjpub25lO2NvbG9yOiM0Mjg1ZjQ7Y3Vyc29yOmRlZmF1
bHQ7Zm9udC13ZWlnaHQ6Ym9sZDtvdXRsaW5lOm5vbmU7cG9zaXRpb246cmVsYXRpdmU7dGV4
dC1hbGlnbjpjZW50ZXI7dGV4dC1kZWNvcmF0aW9uOm5vbmU7dGV4dC10cmFuc2Zvcm06dXBw
ZXJjYXNlO3doaXRlLXNwYWNlOm5vd3JhcDstbW96LXVzZXItc2VsZWN0Om5vbmV9YS5nYl9X
OmhvdmVyOmFmdGVyLGEuZ2JfVzpmb2N1czphZnRlcntiYWNrZ3JvdW5kLWNvbG9yOnJnYmEo
MCwwLDAsLjEyKTtjb250ZW50OicnO2hlaWdodDoxMDAlO2xlZnQ6MDtwb3NpdGlvbjphYnNv
bHV0ZTt0b3A6MDt3aWR0aDoxMDAlfWEuZ2JfVzpob3ZlcixhLmdiX1c6Zm9jdXN7dGV4dC1k
ZWNvcmF0aW9uOm5vbmV9YS5nYl9XOmFjdGl2ZXtiYWNrZ3JvdW5kLWNvbG9yOnJnYmEoMTUz
LDE1MywxNTMsLjQpO3RleHQtZGVjb3JhdGlvbjpub25lfWEuZ2JfWHtiYWNrZ3JvdW5kLWNv
bG9yOiM0Mjg1ZjQ7Y29sb3I6I2ZmZn1hLmdiX1g6YWN0aXZle2JhY2tncm91bmQtY29sb3I6
IzAwNDNiMn0uZ2JfWnstbW96LWJveC1zaGFkb3c6MCAxcHggMXB4IHJnYmEoMCwwLDAsLjE2
KTtib3gtc2hhZG93OjAgMXB4IDFweCByZ2JhKDAsMCwwLC4xNil9LmdiX1csLmdiX1gsLmdi
XzAsLmdiXzF7ZGlzcGxheTppbmxpbmUtYmxvY2s7bGluZS1oZWlnaHQ6MjhweDtwYWRkaW5n
OjAgMTJweDstbW96LWJvcmRlci1yYWRpdXM6MnB4O2JvcmRlci1yYWRpdXM6MnB4fS5nYl8w
e2JhY2tncm91bmQ6I2Y4ZjhmODtib3JkZXI6MXB4IHNvbGlkICNjNmM2YzZ9LmdiXzF7YmFj
a2dyb3VuZDojZjhmOGY4fS5nYl8wLCNnYiBhLmdiXzAuZ2JfMCwuZ2JfMXtjb2xvcjojNjY2
O2N1cnNvcjpkZWZhdWx0O3RleHQtZGVjb3JhdGlvbjpub25lfSNnYiBhLmdiXzEuZ2JfMXtj
dXJzb3I6ZGVmYXVsdDt0ZXh0LWRlY29yYXRpb246bm9uZX0uZ2JfMXtib3JkZXI6MXB4IHNv
bGlkICM0Mjg1ZjQ7Zm9udC13ZWlnaHQ6Ym9sZDtvdXRsaW5lOm5vbmU7YmFja2dyb3VuZDoj
NDI4NWY0O2JhY2tncm91bmQ6LW1vei1saW5lYXItZ3JhZGllbnQodG9wLCM0Mzg3ZmQsIzQ2
ODNlYSk7YmFja2dyb3VuZDpsaW5lYXItZ3JhZGllbnQodG9wLCM0Mzg3ZmQsIzQ2ODNlYSk7
ZmlsdGVyOnByb2dpZDpEWEltYWdlVHJhbnNmb3JtLk1pY3Jvc29mdC5ncmFkaWVudChzdGFy
dENvbG9yc3RyPSM0Mzg3ZmQsZW5kQ29sb3JzdHI9IzQ2ODNlYSxHcmFkaWVudFR5cGU9MCl9
I2diIGEuZ2JfMS5nYl8xe2NvbG9yOiNmZmZ9LmdiXzE6aG92ZXJ7LW1vei1ib3gtc2hhZG93
OjAgMXB4IDAgcmdiYSgwLDAsMCwuMTUpO2JveC1zaGFkb3c6MCAxcHggMCByZ2JhKDAsMCww
LC4xNSl9LmdiXzE6YWN0aXZley1tb3otYm94LXNoYWRvdzppbnNldCAwIDJweCAwIHJnYmEo
MCwwLDAsLjE1KTtib3gtc2hhZG93Omluc2V0IDAgMnB4IDAgcmdiYSgwLDAsMCwuMTUpO2Jh
Y2tncm91bmQ6IzNjNzhkYztiYWNrZ3JvdW5kOi1tb3otbGluZWFyLWdyYWRpZW50KHRvcCwj
M2M3YWU0LCMzZjc2ZDMpO2JhY2tncm91bmQ6bGluZWFyLWdyYWRpZW50KHRvcCwjM2M3YWU0
LCMzZjc2ZDMpO2ZpbHRlcjpwcm9naWQ6RFhJbWFnZVRyYW5zZm9ybS5NaWNyb3NvZnQuZ3Jh
ZGllbnQoc3RhcnRDb2xvcnN0cj0jM2M3YWU0LGVuZENvbG9yc3RyPSMzZjc2ZDMsR3JhZGll
bnRUeXBlPTApfS5nYl92YXtkaXNwbGF5Om5vbmUhaW1wb3J0YW50fS5nYl93YXt2aXNpYmls
aXR5OmhpZGRlbn0uZ2JfZWR7ZGlzcGxheTppbmxpbmUtYmxvY2s7dmVydGljYWwtYWxpZ246
bWlkZGxlfS5nYl9JZntwb3NpdGlvbjpyZWxhdGl2ZX0uZ2JfQntkaXNwbGF5OmlubGluZS1i
bG9jaztvdXRsaW5lOm5vbmU7dmVydGljYWwtYWxpZ246bWlkZGxlOy1tb3otYm9yZGVyLXJh
ZGl1czoycHg7Ym9yZGVyLXJhZGl1czoycHg7LW1vei1ib3gtc2l6aW5nOmJvcmRlci1ib3g7
Ym94LXNpemluZzpib3JkZXItYm94O2hlaWdodDo0MHB4O3dpZHRoOjQwcHg7Y29sb3I6IzAw
MDtjdXJzb3I6cG9pbnRlcjt0ZXh0LWRlY29yYXRpb246bm9uZX0jZ2IjZ2IgYS5nYl9Ce2Nv
bG9yOiMwMDA7Y3Vyc29yOnBvaW50ZXI7dGV4dC1kZWNvcmF0aW9uOm5vbmV9LmdiX1Fhe2Jv
cmRlci1jb2xvcjp0cmFuc3BhcmVudDtib3JkZXItYm90dG9tLWNvbG9yOiNmZmY7Ym9yZGVy
LXN0eWxlOmRhc2hlZCBkYXNoZWQgc29saWQ7Ym9yZGVyLXdpZHRoOjAgOC41cHggOC41cHg7
ZGlzcGxheTpub25lO3Bvc2l0aW9uOmFic29sdXRlO2xlZnQ6MTEuNXB4O3RvcDo0M3B4O3ot
aW5kZXg6MTtoZWlnaHQ6MDt3aWR0aDowOy1tb3otYW5pbWF0aW9uOmdiX19hIC4yczthbmlt
YXRpb246Z2JfX2EgLjJzfS5nYl9SYXtib3JkZXItY29sb3I6dHJhbnNwYXJlbnQ7Ym9yZGVy
LXN0eWxlOmRhc2hlZCBkYXNoZWQgc29saWQ7Ym9yZGVyLXdpZHRoOjAgOC41cHggOC41cHg7
ZGlzcGxheTpub25lO3Bvc2l0aW9uOmFic29sdXRlO2xlZnQ6MTEuNXB4O3otaW5kZXg6MTto
ZWlnaHQ6MDt3aWR0aDowOy1tb3otYW5pbWF0aW9uOmdiX19hIC4yczthbmltYXRpb246Z2Jf
X2EgLjJzO2JvcmRlci1ib3R0b20tY29sb3I6I2NjYztib3JkZXItYm90dG9tLWNvbG9yOnJn
YmEoMCwwLDAsLjIpO3RvcDo0MnB4fXg6LW8tcHJlZm9jdXMsZGl2LmdiX1Jhe2JvcmRlci1i
b3R0b20tY29sb3I6I2NjY30uZ2JfRHtiYWNrZ3JvdW5kOiNmZmY7Ym9yZGVyOjFweCBzb2xp
ZCAjY2NjO2JvcmRlci1jb2xvcjpyZ2JhKDAsMCwwLC4yKTtjb2xvcjojMDAwOy1tb3otYm94
LXNoYWRvdzowIDJweCAxMHB4IHJnYmEoMCwwLDAsLjIpO2JveC1zaGFkb3c6MCAycHggMTBw
eCByZ2JhKDAsMCwwLC4yKTtkaXNwbGF5Om5vbmU7b3V0bGluZTpub25lO292ZXJmbG93Omhp
ZGRlbjtwb3NpdGlvbjphYnNvbHV0ZTtyaWdodDo4cHg7dG9wOjYycHg7LW1vei1hbmltYXRp
b246Z2JfX2EgLjJzO2FuaW1hdGlvbjpnYl9fYSAuMnM7LW1vei1ib3JkZXItcmFkaXVzOjJw
eDtib3JkZXItcmFkaXVzOjJweDstbW96LXVzZXItc2VsZWN0OnRleHR9LmdiX2VkLmdiX0Jj
IC5nYl9RYSwuZ2JfZWQuZ2JfQmMgLmdiX1JhLC5nYl9lZC5nYl9CYyAuZ2JfRCwuZ2JfQmMu
Z2JfRHtkaXNwbGF5OmJsb2NrfS5nYl9lZC5nYl9CYy5nYl9KZiAuZ2JfUWEsLmdiX2VkLmdi
X0JjLmdiX0pmIC5nYl9SYXtkaXNwbGF5Om5vbmV9LmdiX0tme3Bvc2l0aW9uOmFic29sdXRl
O3JpZ2h0OjhweDt0b3A6NjJweDt6LWluZGV4Oi0xfS5nYl9BYSAuZ2JfUWEsLmdiX0FhIC5n
Yl9SYSwuZ2JfQWEgLmdiX0R7bWFyZ2luLXRvcDotMTBweH0uZ2JfZWQ6Zmlyc3QtY2hpbGQs
I2dic2Z3OmZpcnN0LWNoaWxkKy5nYl9lZHtwYWRkaW5nLWxlZnQ6NHB4fS5nYl9qYS5nYl9S
ZSAuZ2JfZWQ6Zmlyc3QtY2hpbGR7cGFkZGluZy1sZWZ0OjB9LmdiX1Zje3Bvc2l0aW9uOnJl
bGF0aXZlfS5nYl9LYyAuZ2JfVmMsLmdiXzFkIC5nYl9WY3tmbG9hdDpyaWdodH0uZ2JfQntw
YWRkaW5nOjhweDtjdXJzb3I6cG9pbnRlcn0uZ2JfamEgLmdiX3BiOm5vdCguZ2JfVyk6Zm9j
dXMgaW1ne2JhY2tncm91bmQtY29sb3I6cmdiYSgwLDAsMCwwLjIwKTtvdXRsaW5lOm5vbmU7
LW1vei1ib3JkZXItcmFkaXVzOjUwJTtib3JkZXItcmFkaXVzOjUwJX0uZ2JfU2UgYnV0dG9u
OmZvY3VzIHN2ZywuZ2JfU2UgYnV0dG9uOmhvdmVyIHN2ZywuZ2JfU2UgYnV0dG9uOmFjdGl2
ZSBzdmcsLmdiX0I6Zm9jdXMsLmdiX0I6aG92ZXIsLmdiX0I6YWN0aXZlLC5nYl9CW2FyaWEt
ZXhwYW5kZWQ9dHJ1ZV17b3V0bGluZTpub25lOy1tb3otYm9yZGVyLXJhZGl1czo1MCU7Ym9y
ZGVyLXJhZGl1czo1MCV9LmdiX3NjIC5nYl9TZS5nYl9UZSBidXR0b246Zm9jdXMgc3ZnLC5n
Yl9zYyAuZ2JfU2UuZ2JfVGUgYnV0dG9uOmZvY3VzOmhvdmVyIHN2ZywuZ2JfU2UgYnV0dG9u
OmZvY3VzIHN2ZywuZ2JfU2UgYnV0dG9uOmZvY3VzOmhvdmVyIHN2ZywuZ2JfQjpmb2N1cywu
Z2JfQjpmb2N1czpob3ZlcntiYWNrZ3JvdW5kLWNvbG9yOnJnYmEoNjAsNjQsNjcsMC4xKX0u
Z2Jfc2MgLmdiX1NlLmdiX1RlIGJ1dHRvbjphY3RpdmUgc3ZnLC5nYl9TZSBidXR0b246YWN0
aXZlIHN2ZywuZ2JfQjphY3RpdmV7YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDYwLDY0LDY3LDAu
MTIpfS5nYl9zYyAuZ2JfU2UuZ2JfVGUgYnV0dG9uOmhvdmVyIHN2ZywuZ2JfU2UgYnV0dG9u
OmhvdmVyIHN2ZywuZ2JfQjpob3ZlcntiYWNrZ3JvdW5kLWNvbG9yOnJnYmEoNjAsNjQsNjcs
MC4wOCl9LmdiX2ZhIC5nYl9CLmdiX0RhOmhvdmVye2JhY2tncm91bmQtY29sb3I6dHJhbnNw
YXJlbnR9LmdiX0JbYXJpYS1leHBhbmRlZD10cnVlXSwuZ2JfQjpob3ZlclthcmlhLWV4cGFu
ZGVkPXRydWVde2JhY2tncm91bmQtY29sb3I6cmdiYSg5NSw5OSwxMDQsMC4yNCl9LmdiX0Jb
YXJpYS1leHBhbmRlZD10cnVlXSAuZ2JfVWUsLmdiX0JbYXJpYS1leHBhbmRlZD10cnVlXSAu
Z2JfVmV7ZmlsbDojNWY2MzY4O29wYWNpdHk6MX0uZ2Jfc2MgLmdiX1NlIGJ1dHRvbjpob3Zl
ciBzdmcsLmdiX3NjIC5nYl9COmhvdmVye2JhY2tncm91bmQtY29sb3I6cmdiYSgyMzIsMjM0
LDIzNywwLjA4KX0uZ2Jfc2MgLmdiX1NlIGJ1dHRvbjpmb2N1cyBzdmcsLmdiX3NjIC5nYl9T
ZSBidXR0b246Zm9jdXM6aG92ZXIgc3ZnLC5nYl9zYyAuZ2JfQjpmb2N1cywuZ2Jfc2MgLmdi
X0I6Zm9jdXM6aG92ZXJ7YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDIzMiwyMzQsMjM3LDAuMTAp
fS5nYl9zYyAuZ2JfU2UgYnV0dG9uOmFjdGl2ZSBzdmcsLmdiX3NjIC5nYl9COmFjdGl2ZXti
YWNrZ3JvdW5kLWNvbG9yOnJnYmEoMjMyLDIzNCwyMzcsMC4xMil9LmdiX3NjIC5nYl9CW2Fy
aWEtZXhwYW5kZWQ9dHJ1ZV0sLmdiX3NjIC5nYl9COmhvdmVyW2FyaWEtZXhwYW5kZWQ9dHJ1
ZV17YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDI1NSwyNTUsMjU1LDAuMTIpfS5nYl9zYyAuZ2Jf
QlthcmlhLWV4cGFuZGVkPXRydWVdIC5nYl9VZSwuZ2Jfc2MgLmdiX0JbYXJpYS1leHBhbmRl
ZD10cnVlXSAuZ2JfVmV7ZmlsbDojZmZmZmZmO29wYWNpdHk6MX0uZ2JfZWR7cGFkZGluZzo0
cHh9LmdiX2phLmdiX1JlIC5nYl9lZHtwYWRkaW5nOjRweCAycHh9LmdiX2phLmdiX1JlIC5n
Yl9FYS5nYl9lZHtwYWRkaW5nLWxlZnQ6NnB4fS5nYl9Ee3otaW5kZXg6OTkxO2xpbmUtaGVp
Z2h0Om5vcm1hbH0uZ2JfRC5nYl9XZXtsZWZ0OjhweDtyaWdodDphdXRvfUBtZWRpYSAobWF4
LXdpZHRoOjM1MHB4KXsuZ2JfRC5nYl9XZXtsZWZ0OjB9fS5nYl9YZSAuZ2JfRHt0b3A6NTZw
eH0uZ2JfQSAuZ2JfQiwuZ2JfQyAuZ2JfQSAuZ2JfQntiYWNrZ3JvdW5kLXBvc2l0aW9uOi02
NHB4IC0yOXB4fS5nYl9oIC5nYl9BIC5nYl9Ce2JhY2tncm91bmQtcG9zaXRpb246LTI5cHgg
LTI5cHg7b3BhY2l0eToxfS5nYl9BIC5nYl9CLC5nYl9BIC5nYl9COmhvdmVyLC5nYl9BIC5n
Yl9COmZvY3Vze29wYWNpdHk6MX0uZ2JfTGR7ZGlzcGxheTpub25lfS5nYl9YY3tmb250LWZh
bWlseTpHb29nbGUgU2FucyxSb2JvdG8sUm9ib3RvRHJhZnQsSGVsdmV0aWNhLEFyaWFsLHNh
bnMtc2VyaWY7Zm9udC1zaXplOjIwcHg7Zm9udC13ZWlnaHQ6NDAwO2xldHRlci1zcGFjaW5n
Oi4yNXB4O2xpbmUtaGVpZ2h0OjQ4cHg7bWFyZ2luLWJvdHRvbToycHg7b3BhY2l0eToxO292
ZXJmbG93OmhpZGRlbjtwYWRkaW5nLWxlZnQ6MTZweDtwb3NpdGlvbjpyZWxhdGl2ZTt0ZXh0
LW92ZXJmbG93OmVsbGlwc2lzO3ZlcnRpY2FsLWFsaWduOm1pZGRsZTt0b3A6MnB4O3doaXRl
LXNwYWNlOm5vd3JhcDtmbGV4OjEgMSBhdXRvfS5nYl9YYy5nYl9aY3tjb2xvcjojM2M0MDQz
fS5nYl9qYS5nYl9rYSAuZ2JfWGN7bWFyZ2luLWJvdHRvbTowfS5nYl8wYy5nYl8xYyAuZ2Jf
WGN7cGFkZGluZy1sZWZ0OjRweH0uZ2JfamEuZ2Jfa2EgLmdiXzJje3Bvc2l0aW9uOnJlbGF0
aXZlO3RvcDotMnB4fS5nYl9qYXtjb2xvcjpibGFjazttaW4td2lkdGg6MzIwcHg7cG9zaXRp
b246cmVsYXRpdmU7LW1vei10cmFuc2l0aW9uOmJveC1zaGFkb3cgMjUwbXM7dHJhbnNpdGlv
bjpib3gtc2hhZG93IDI1MG1zfS5nYl9qYS5nYl9BY3ttaW4td2lkdGg6MjQwcHh9LmdiX2ph
LmdiX01kIC5nYl9UY3tkaXNwbGF5Om5vbmV9LmdiX2phLmdiX01kIC5nYl9OZHtoZWlnaHQ6
NTZweH1oZWFkZXIuZ2JfamF7ZGlzcGxheTpibG9ja30uZ2JfamEgc3Zne2ZpbGw6Y3VycmVu
dENvbG9yfS5nYl9PZHtwb3NpdGlvbjpmaXhlZDt0b3A6MDt3aWR0aDoxMDAlfS5nYl9QZHst
bW96LWJveC1zaGFkb3c6MCA0cHggNXB4IDAgcmdiYSgwLDAsMCwwLjE0KSwwIDFweCAxMHB4
IDAgcmdiYSgwLDAsMCwwLjEyKSwwIDJweCA0cHggLTFweCByZ2JhKDAsMCwwLDAuMik7Ym94
LXNoYWRvdzowIDRweCA1cHggMCByZ2JhKDAsMCwwLDAuMTQpLDAgMXB4IDEwcHggMCByZ2Jh
KDAsMCwwLDAuMTIpLDAgMnB4IDRweCAtMXB4IHJnYmEoMCwwLDAsMC4yKX0uZ2JfUWR7aGVp
Z2h0OjY0cHh9LmdiX2phOm5vdCguZ2JfRWMpIC5nYl80Yy5nYl81Yzpub3QoLmdiX1JkKSwu
Z2JfamE6bm90KC5nYl9FYykgLmdiX0lkOm5vdCguZ2JfUmQpLC5nYl9qYS5nYl9TZCAuZ2Jf
NGMuZ2JfNWMuZ2JfUmQsLmdiX2phLmdiX1NkIC5nYl9JZC5nYl9SZHtkaXNwbGF5Om5vbmUh
aW1wb3J0YW50fS5nYl9OZHtib3gtc2l6aW5nOmJvcmRlci1ib3g7cG9zaXRpb246cmVsYXRp
dmU7d2lkdGg6MTAwJTtkaXNwbGF5Oi13ZWJraXQtYm94O2Rpc3BsYXk6LW1vei1ib3g7ZGlz
cGxheTotbXMtZmxleGJveDtkaXNwbGF5Oi13ZWJraXQtZmxleDtkaXNwbGF5OmZsZXg7anVz
dGlmeS1jb250ZW50OnNwYWNlLWJldHdlZW47bWluLXdpZHRoOi13ZWJraXQtbWluLWNvbnRl
bnQ7bWluLXdpZHRoOi1tb3otbWluLWNvbnRlbnQ7bWluLXdpZHRoOi1tcy1taW4tY29udGVu
dDttaW4td2lkdGg6bWluLWNvbnRlbnR9LmdiX2phOm5vdCguZ2Jfa2EpIC5nYl9OZHtwYWRk
aW5nOjhweH0uZ2JfamEuZ2JfVGQgLmdiX05ke2ZsZXg6MSAwIGF1dG99LmdiX2phIC5nYl9O
ZC5nYl9VZC5nYl9WZHttaW4td2lkdGg6MH0uZ2JfamEuZ2Jfa2EgLmdiX05ke3BhZGRpbmc6
NHB4O3BhZGRpbmctbGVmdDo4cHg7bWluLXdpZHRoOjB9LmdiX1Rje2hlaWdodDo0OHB4O3Zl
cnRpY2FsLWFsaWduOm1pZGRsZTt3aGl0ZS1zcGFjZTpub3dyYXA7LW1vei1ib3gtYWxpZ246
Y2VudGVyO2FsaWduLWl0ZW1zOmNlbnRlcjtkaXNwbGF5Oi13ZWJraXQtYm94O2Rpc3BsYXk6
LW1vei1ib3g7ZGlzcGxheTotbXMtZmxleGJveDtkaXNwbGF5Oi13ZWJraXQtZmxleDtkaXNw
bGF5OmZsZXg7LW1vei11c2VyLXNlbGVjdDotbW96LW5vbmV9LmdiX1hkPi5nYl9UY3tkaXNw
bGF5OnRhYmxlLWNlbGw7d2lkdGg6MTAwJX0uZ2JfMGN7cGFkZGluZy1yaWdodDozMHB4Oy1t
b3otYm94LXNpemluZzpib3JkZXItYm94O2JveC1zaXppbmc6Ym9yZGVyLWJveDtmbGV4OjEg
MCBhdXRvfS5nYl9qYS5nYl9rYSAuZ2JfMGN7cGFkZGluZy1yaWdodDoxNHB4fS5nYl9aZHtm
bGV4OjEgMSAxMDAlfS5nYl9aZD46b25seS1jaGlsZHtkaXNwbGF5OmlubGluZS1ibG9ja30u
Z2JfVWMuZ2JfTGN7cGFkZGluZy1sZWZ0OjRweH0uZ2JfVWMuZ2JfMGQsLmdiX2phLmdiX1Rk
IC5nYl9VYywuZ2JfamEuZ2Jfa2E6bm90KC5nYl8xZCkgLmdiX1Vje3BhZGRpbmctbGVmdDow
fS5nYl9qYS5nYl9rYSAuZ2JfVWMuZ2JfMGR7cGFkZGluZy1yaWdodDowfS5nYl9qYS5nYl9r
YSAuZ2JfVWMuZ2JfMGQgLmdiX2Zhe21hcmdpbi1sZWZ0OjEwcHh9LmdiX0xje2Rpc3BsYXk6
aW5saW5lfS5nYl9qYS5nYl9FYyAuZ2JfVWMuZ2JfMmR7cGFkZGluZy1sZWZ0OjJweH0uZ2Jf
WGN7ZGlzcGxheTppbmxpbmUtYmxvY2t9LmdiX1Vje2JveC1zaXppbmc6Ym9yZGVyLWJveDto
ZWlnaHQ6NDhweDtsaW5lLWhlaWdodDpub3JtYWw7cGFkZGluZzowIDRweDtwYWRkaW5nLWxl
ZnQ6MzBweDtmbGV4OjAgMCBhdXRvO2p1c3RpZnktY29udGVudDpmbGV4LWVuZH0uZ2JfMWR7
aGVpZ2h0OjQ4cHh9LmdiX2phLmdiXzFke21pbi13aWR0aDppbml0aWFsO21pbi13aWR0aDph
dXRvfS5nYl8xZCAuZ2JfVWN7ZmxvYXQ6cmlnaHQ7cGFkZGluZy1sZWZ0OjMycHh9LmdiXzNk
e2ZvbnQtc2l6ZToxNHB4O21heC13aWR0aDoyMDBweDtvdmVyZmxvdzpoaWRkZW47cGFkZGlu
ZzowIDEycHg7dGV4dC1vdmVyZmxvdzplbGxpcHNpczt3aGl0ZS1zcGFjZTpub3dyYXA7LW1v
ei11c2VyLXNlbGVjdDp0ZXh0fS5nYl80ZHt0cmFuc2l0aW9uOmJhY2tncm91bmQtY29sb3Ig
LjRzfS5nYl81ZHtjb2xvcjpibGFja30uZ2Jfc2N7Y29sb3I6d2hpdGV9LmdiX2phIGEsLmdi
X3hjIGF7Y29sb3I6aW5oZXJpdH0uZ2Jfcntjb2xvcjpyZ2JhKDAsMCwwLDAuODcpfS5nYl9q
YSBzdmcsLmdiX3hjIHN2ZywuZ2JfMGMgLmdiXzZkLC5nYl9LYyAuZ2JfNmR7Y29sb3I6IzVm
NjM2ODtvcGFjaXR5OjF9LmdiX3NjIHN2ZywuZ2JfeGMuZ2JfQ2Mgc3ZnLC5nYl9zYyAuZ2Jf
MGMgLmdiXzZkLC5nYl9zYyAuZ2JfMGMgLmdiX3JjLC5nYl9zYyAuZ2JfMGMgLmdiXzJjLC5n
Yl94Yy5nYl9DYyAuZ2JfNmR7Y29sb3I6cmdiYSgyNTUsMjU1LDI1NSwuODcpfS5nYl9zYyAu
Z2JfMGMgLmdiX2xhOm5vdCguZ2JfN2Qpe29wYWNpdHk6Ljg3fS5nYl9aY3tjb2xvcjppbmhl
cml0O29wYWNpdHk6MTt0ZXh0LXJlbmRlcmluZzpvcHRpbWl6ZUxlZ2liaWxpdHk7LW1vei1v
c3gtZm9udC1zbW9vdGhpbmc6Z3JheXNjYWxlfS5nYl9zYyAuZ2JfWmMsLmdiXzVkIC5nYl9a
Y3tvcGFjaXR5OjF9LmdiXzhke3Bvc2l0aW9uOnJlbGF0aXZlfS5nYl85ZHtsaW5lLWhlaWdo
dDpub3JtYWw7cGFkZGluZy1yaWdodDoxNXB4fWEuZ2JfZSxzcGFuLmdiX2V7Y29sb3I6cmdi
YSgwLDAsMCwwLjg3KTt0ZXh0LWRlY29yYXRpb246bm9uZX0uZ2Jfc2MgYS5nYl9lLC5nYl9z
YyBzcGFuLmdiX2V7Y29sb3I6d2hpdGV9YS5nYl9lOmhvdmVyLGEuZ2JfZTpmb2N1c3tvcGFj
aXR5Oi44NTt0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lfS5nYl9me2Rpc3BsYXk6aW5saW5l
LWJsb2NrO3BhZGRpbmctbGVmdDoxNXB4fS5nYl9mIC5nYl9le2Rpc3BsYXk6aW5saW5lLWJs
b2NrO2xpbmUtaGVpZ2h0OjI0cHg7b3V0bGluZTpub25lO3ZlcnRpY2FsLWFsaWduOm1pZGRs
ZX0uZ2JfYWV7Zm9udC1mYW1pbHk6R29vZ2xlIFNhbnMsUm9ib3RvLFJvYm90b0RyYWZ0LEhl
bHZldGljYSxBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtd2VpZ2h0OjUwMDtmb250LXNpemU6MTRw
eDtsZXR0ZXItc3BhY2luZzouMjVweDtsaW5lLWhlaWdodDoxNnB4O21hcmdpbi1sZWZ0OjEw
cHg7bWFyZ2luLXJpZ2h0OjhweDttaW4td2lkdGg6OTZweDtwYWRkaW5nOjlweCAyM3B4O3Rl
eHQtYWxpZ246Y2VudGVyO3ZlcnRpY2FsLWFsaWduOm1pZGRsZTstbW96LWJvcmRlci1yYWRp
dXM6NHB4O2JvcmRlci1yYWRpdXM6NHB4Oy1tb3otYm94LXNpemluZzpib3JkZXItYm94O2Jv
eC1zaXppbmc6Ym9yZGVyLWJveH0uZ2JfamEuZ2JfMWQgLmdiX2Fle21hcmdpbi1sZWZ0Ojhw
eH0jZ2IgYS5nYl8xLmdiXzEuZ2JfYWUsI2diIGEuZ2JfMC5nYl8wLmdiX2Fle2N1cnNvcjpw
b2ludGVyfS5nYl8xLmdiX2FlOmhvdmVye2JhY2tncm91bmQ6IzJiN2RlOTstbW96LWJveC1z
aGFkb3c6MCAxcHggMnB4IDAgcmdiYSg2NiwxMzMsMjQ0LDAuMyksMCAxcHggM3B4IDFweCBy
Z2JhKDY2LDEzMywyNDQsMC4xNSk7Ym94LXNoYWRvdzowIDFweCAycHggMCByZ2JhKDY2LDEz
MywyNDQsMC4zKSwwIDFweCAzcHggMXB4IHJnYmEoNjYsMTMzLDI0NCwwLjE1KX0uZ2JfMS5n
Yl9hZTpmb2N1cywuZ2JfMS5nYl9hZTpob3Zlcjpmb2N1c3tiYWNrZ3JvdW5kOiM1MDk0ZWQ7
LW1vei1ib3gtc2hhZG93OjAgMXB4IDJweCAwIHJnYmEoNjYsMTMzLDI0NCwwLjMpLDAgMXB4
IDNweCAxcHggcmdiYSg2NiwxMzMsMjQ0LDAuMTUpO2JveC1zaGFkb3c6MCAxcHggMnB4IDAg
cmdiYSg2NiwxMzMsMjQ0LDAuMyksMCAxcHggM3B4IDFweCByZ2JhKDY2LDEzMywyNDQsMC4x
NSl9LmdiXzEuZ2JfYWU6YWN0aXZle2JhY2tncm91bmQ6IzYzYTBlZjstbW96LWJveC1zaGFk
b3c6MCAxcHggMnB4IDAgcmdiYSg2NiwxMzMsMjQ0LDAuMyksMCAxcHggM3B4IDFweCByZ2Jh
KDY2LDEzMywyNDQsMC4xNSk7Ym94LXNoYWRvdzowIDFweCAycHggMCByZ2JhKDY2LDEzMywy
NDQsMC4zKSwwIDFweCAzcHggMXB4IHJnYmEoNjYsMTMzLDI0NCwwLjE1KX0uZ2JfYWU6bm90
KC5nYl8wKXtiYWNrZ3JvdW5kOiMxYTczZTg7Ym9yZGVyOjFweCBzb2xpZCB0cmFuc3BhcmVu
dH0uZ2JfamEuZ2Jfa2EgLmdiX2Fle3BhZGRpbmc6OXB4IDE1cHg7bWluLXdpZHRoOjgwcHh9
I2diIGEuZ2JfMS5nYl9iZS5nYl9hZSwjZ2IgYS5nYl9hZS5nYl8we2JhY2tncm91bmQ6I2Zm
ZmZmZjtib3JkZXItY29sb3I6I2RhZGNlMDstbW96LWJveC1zaGFkb3c6bm9uZTtib3gtc2hh
ZG93Om5vbmU7Y29sb3I6IzFhNzNlOH0jZ2IgYS5nYl8xLmdiX2JlLmdiX2FlOmhvdmVyLCNn
YiBhLmdiX2FlLmdiXzA6aG92ZXJ7YmFja2dyb3VuZDojZjhmYmZmO2JvcmRlci1jb2xvcjoj
Y2NlMGZjfSNnYiBhLmdiXzEuZ2JfYmUuZ2JfYWU6Zm9jdXMsI2diIGEuZ2JfMS5nYl9iZS5n
Yl9hZTpmb2N1czpob3ZlciwjZ2IgYS5nYl9hZS5nYl8wOmZvY3VzLCNnYiBhLmdiX2FlLmdi
XzA6Zm9jdXM6aG92ZXJ7YmFja2dyb3VuZDojZjRmOGZmO2JvcmRlci1jb2xvcjojYzlkZGZj
fSNnYiBhLmdiXzEuZ2JfYmUuZ2JfYWU6YWN0aXZlLCNnYiBhLmdiX2FlLmdiXzA6YWN0aXZl
e2JhY2tncm91bmQ6I2VjZjNmZX0jZ2IgYS5nYl8xLmdiX2JlLmdiX2FlOmFjdGl2ZXstbW96
LWJveC1zaGFkb3c6MCAxcHggMnB4IDAgcmdiYSgwLDAsMCwwLjMpLDAgMnB4IDZweCAycHgg
cmdiYSgwLDAsMCwwLjE1KTtib3gtc2hhZG93OjAgMXB4IDJweCAwIHJnYmEoMCwwLDAsMC4z
KSwwIDJweCA2cHggMnB4IHJnYmEoMCwwLDAsMC4xNSl9I2diIGEuZ2JfYWUuZ2JfMDpub3Qo
LmdiX2JlKTphY3RpdmV7LW1vei1ib3gtc2hhZG93OjAgMXB4IDJweCAwIHJnYmEoNjAsNjQs
NjcsMC4zKSwwIDJweCA2cHggMnB4IHJnYmEoNjAsNjQsNjcsMC4xNSk7Ym94LXNoYWRvdzow
IDFweCAycHggMCByZ2JhKDYwLDY0LDY3LDAuMyksMCAycHggNnB4IDJweCByZ2JhKDYwLDY0
LDY3LDAuMTUpfS5nYl9mYXtiYWNrZ3JvdW5kLWNvbG9yOnJnYmEoMjU1LDI1NSwyNTUsMC44
OCk7Y3Vyc29yOnBvaW50ZXI7ZGlzcGxheTppbmxpbmUtYmxvY2s7b3ZlcmZsb3c6aGlkZGVu
O3BhZGRpbmc6MDt2ZXJ0aWNhbC1hbGlnbjptaWRkbGU7Ym9yZGVyOjFweCBzb2xpZCAjZGFk
Y2UwO291dGxpbmU6bm9uZTtib3gtc2l6aW5nOmJvcmRlci1ib3g7LW1vei1ib3JkZXItcmFk
aXVzOjhweDtib3JkZXItcmFkaXVzOjhweH0uZ2JfZmE6aG92ZXJ7Ym9yZGVyOjFweCBzb2xp
ZCAjZDJlM2ZjO2JhY2tncm91bmQtY29sb3I6cmdiYSgyNDgsMjUwLDI1NSwwLjg4KX0uZ2Jf
ZmE6Zm9jdXN7Ym9yZGVyOjFweCBzb2xpZCAjZmZmO2JhY2tncm91bmQtY29sb3I6cmdiYSgy
NTUsMjU1LDI1NSk7LW1vei1ib3gtc2hhZG93OjAgMXB4IDJweCAwIHJnYmEoNjAsNjQsNjcs
MC4zKSwwIDFweCAzcHggMXB4IHJnYmEoNjAsNjQsNjcsMC4xNSk7Ym94LXNoYWRvdzowIDFw
eCAycHggMCByZ2JhKDYwLDY0LDY3LDAuMyksMCAxcHggM3B4IDFweCByZ2JhKDYwLDY0LDY3
LDAuMTUpfS5nYl9nYXtkaXNwbGF5OmlubGluZS1ibG9jaztwYWRkaW5nLWxlZnQ6N3B4O3Bh
ZGRpbmctYm90dG9tOjJweDt0ZXh0LWFsaWduOmNlbnRlcjt2ZXJ0aWNhbC1hbGlnbjptaWRk
bGV9LmdiX2dhLmdiX2hhe2JhY2tncm91bmQtY29sb3I6I2YxZjNmNDstbW96LWJvcmRlci1y
YWRpdXM6NHB4O2JvcmRlci1yYWRpdXM6NHB4O21hcmdpbi1sZWZ0OjhweDtwYWRkaW5nLWxl
ZnQ6MH0uZ2JfZ2EuZ2JfaGEgLmdiX2lhe3ZlcnRpY2FsLWFsaWduOm1pZGRsZX0uZ2JfamE6
bm90KC5nYl9rYSkgLmdiX2Zhe21hcmdpbi1sZWZ0OjEwcHg7bWFyZ2luLXJpZ2h0OjRweH0u
Z2JfZmEgLmdiX2lhLmdiX2xhe21pbi13aWR0aDowfS5nYl94YXtiYWNrZ3JvdW5kLXNpemU6
MzJweCAzMnB4Oy1tb3otYm9yZGVyLXJhZGl1czo1MCU7Ym9yZGVyLXJhZGl1czo1MCU7ZGlz
cGxheTpibG9jazttYXJnaW46MDtvdmVyZmxvdzpoaWRkZW47cG9zaXRpb246cmVsYXRpdmU7
aGVpZ2h0OjMycHg7d2lkdGg6MzJweDt6LWluZGV4OjB9QG1lZGlhIChtaW4tcmVzb2x1dGlv
bjoxLjI1ZHBweCksKC1vLW1pbi1kZXZpY2UtcGl4ZWwtcmF0aW86NS80KSwoLXdlYmtpdC1t
aW4tZGV2aWNlLXBpeGVsLXJhdGlvOjEuMjUpLChtaW4tZGV2aWNlLXBpeGVsLXJhdGlvOjEu
MjUpey5nYl94YTo6YmVmb3Jle2Rpc3BsYXk6aW5saW5lLWJsb2NrOy1tb3otdHJhbnNmb3Jt
OnNjYWxlKC41KTt0cmFuc2Zvcm06c2NhbGUoLjUpOy1tb3otdHJhbnNmb3JtLW9yaWdpbjps
ZWZ0IDA7dHJhbnNmb3JtLW9yaWdpbjpsZWZ0IDB9LmdiX3lhOjpiZWZvcmV7ZGlzcGxheTpp
bmxpbmUtYmxvY2s7LW1vei10cmFuc2Zvcm06c2NhbGUoLjUpO3RyYW5zZm9ybTpzY2FsZSgu
NSk7LW1vei10cmFuc2Zvcm0tb3JpZ2luOmxlZnQgMDt0cmFuc2Zvcm0tb3JpZ2luOmxlZnQg
MH0uZ2JfaiAuZ2JfeWE6OmJlZm9yZXstbW96LXRyYW5zZm9ybTpzY2FsZSgwLjQxNjY2NjY2
Nyk7dHJhbnNmb3JtOnNjYWxlKDAuNDE2NjY2NjY3KX19LmdiX3hhOmhvdmVyLC5nYl94YTpm
b2N1c3stbW96LWJveC1zaGFkb3c6MCAxcHggMCByZ2JhKDAsMCwwLC4xNSk7Ym94LXNoYWRv
dzowIDFweCAwIHJnYmEoMCwwLDAsLjE1KX0uZ2JfeGE6YWN0aXZley1tb3otYm94LXNoYWRv
dzppbnNldCAwIDJweCAwIHJnYmEoMCwwLDAsLjE1KTtib3gtc2hhZG93Omluc2V0IDAgMnB4
IDAgcmdiYSgwLDAsMCwuMTUpfS5nYl94YTphY3RpdmU6OmFmdGVye2JhY2tncm91bmQ6cmdi
YSgwLDAsMCwuMSk7LW1vei1ib3JkZXItcmFkaXVzOjUwJTtib3JkZXItcmFkaXVzOjUwJTtj
b250ZW50OicnO2Rpc3BsYXk6YmxvY2s7aGVpZ2h0OjEwMCV9LmdiX3phe2N1cnNvcjpwb2lu
dGVyO2xpbmUtaGVpZ2h0OjQwcHg7bWluLXdpZHRoOjMwcHg7b3BhY2l0eTouNzU7b3ZlcmZs
b3c6aGlkZGVuO3ZlcnRpY2FsLWFsaWduOm1pZGRsZTt0ZXh0LW92ZXJmbG93OmVsbGlwc2lz
fS5nYl9CLmdiX3phe3dpZHRoOmF1dG99LmdiX3phOmhvdmVyLC5nYl96YTpmb2N1c3tvcGFj
aXR5Oi44NX0uZ2JfQWEgLmdiX3phLC5nYl9BYSAuZ2JfQmF7bGluZS1oZWlnaHQ6MjZweH0j
Z2IjZ2IuZ2JfQWEgYS5nYl96YSwuZ2JfQWEgLmdiX0Jhe2ZvbnQtc2l6ZToxMXB4O2hlaWdo
dDphdXRvfS5nYl9DYXtib3JkZXItdG9wOjRweCBzb2xpZCAjMDAwO2JvcmRlci1sZWZ0OjRw
eCBkYXNoZWQgdHJhbnNwYXJlbnQ7Ym9yZGVyLXJpZ2h0OjRweCBkYXNoZWQgdHJhbnNwYXJl
bnQ7ZGlzcGxheTppbmxpbmUtYmxvY2s7bWFyZ2luLWxlZnQ6NnB4O29wYWNpdHk6Ljc1O3Zl
cnRpY2FsLWFsaWduOm1pZGRsZX0uZ2JfRGE6aG92ZXIgLmdiX0Nhe29wYWNpdHk6Ljg1fS5n
Yl9mYT4uZ2JfRWF7cGFkZGluZzozcHggM3B4IDNweCA0cHh9LmdiX0ZhLmdiX3dhe2NvbG9y
OiNmZmZ9LmdiX2ggLmdiX3phLC5nYl9oIC5nYl9DYXtvcGFjaXR5OjF9I2diI2diLmdiX2gu
Z2JfaCBhLmdiX3phLCNnYiNnYiAuZ2JfaC5nYl9oIGEuZ2JfemF7Y29sb3I6I2ZmZn0uZ2Jf
aC5nYl9oIC5nYl9DYXtib3JkZXItdG9wLWNvbG9yOiNmZmY7b3BhY2l0eToxfS5nYl9DIC5n
Yl94YTpob3ZlciwuZ2JfaCAuZ2JfeGE6aG92ZXIsLmdiX0MgLmdiX3hhOmZvY3VzLC5nYl9o
IC5nYl94YTpmb2N1c3stbW96LWJveC1zaGFkb3c6MCAxcHggMCByZ2JhKDAsMCwwLC4xNSks
MCAxcHggMnB4IHJnYmEoMCwwLDAsLjIpO2JveC1zaGFkb3c6MCAxcHggMCByZ2JhKDAsMCww
LC4xNSksMCAxcHggMnB4IHJnYmEoMCwwLDAsLjIpfS5nYl9IYSAuZ2JfRWEsLmdiX0lhIC5n
Yl9FYXtwb3NpdGlvbjphYnNvbHV0ZTtyaWdodDoxcHh9LmdiX0VhLmdiX2csLmdiX0phLmdi
X2csLmdiX0RhLmdiX2d7ZmxleDowIDEgYXV0bztmbGV4OjAgMSBtYWluLXNpemV9LmdiX0th
LmdiX0xhIC5nYl96YXt3aWR0aDozMHB4IWltcG9ydGFudH0uZ2JfTWEuZ2Jfd2F7ZGlzcGxh
eTpub25lfS5nYl9OYXtoZWlnaHQ6NDBweDtwb3NpdGlvbjphYnNvbHV0ZTtyaWdodDotNXB4
O3RvcDotNXB4O3dpZHRoOjQwcHh9LmdiX09hIC5nYl9OYSwuZ2JfUGEgLmdiX05he3JpZ2h0
OjA7dG9wOjB9LmdiX0VhIC5nYl9Ce3BhZGRpbmc6NHB4fS5nYl9kZXtkaXNwbGF5Om5vbmV9
LmdiX2xje2Rpc3BsYXk6aW5saW5lLWJsb2NrO3Bvc2l0aW9uOnJlbGF0aXZlO3RvcDoycHg7
LW1vei11c2VyLXNlbGVjdDotbW96LW5vbmV9LmdiX2dlIC5nYl9sY3tkaXNwbGF5Om5vbmV9
LmdiX05kIC5nYl9tY3tsaW5lLWhlaWdodDpub3JtYWw7cG9zaXRpb246cmVsYXRpdmU7cGFk
ZGluZy1sZWZ0OjE2cHh9LmdiXzBjLmdiXzFjIC5nYl9tY3twYWRkaW5nLWxlZnQ6MH0uZ2Jf
MGMgLmdiX21je3BhZGRpbmctbGVmdDoxMnB4fS5nYl9uYy5nYl9oZXtkaXJlY3Rpb246bHRy
fS5nYl9uYy5nYl9oZSAuZ2JfNmR7cGFkZGluZy1sZWZ0OjhweDtwYWRkaW5nLXJpZ2h0OjB9
LmdiX25jIC5nYl9XYzpiZWZvcmV7Y29udGVudDp1cmwoJ2h0dHBzOi8vd3d3LmdzdGF0aWMu
Y29tL2ltYWdlcy9icmFuZGluZy9nb29nbGVsb2dvL3N2Zy9nb29nbGVsb2dvX2Nscl83NHgy
NHB4LnN2ZycpO2Rpc3BsYXk6aW5saW5lLWJsb2NrO2hlaWdodDoyNHB4O3dpZHRoOjc0cHh9
LmdiX25jIC5nYl9XY3toZWlnaHQ6MjRweDt3aWR0aDo3NHB4O2Rpc3BsYXk6aW5saW5lLWJs
b2NrO3ZlcnRpY2FsLWFsaWduOm1pZGRsZX0uZ2JfbmN7ZGlzcGxheTppbmxpbmUtYmxvY2s7
dmVydGljYWwtYWxpZ246bWlkZGxlfS5nYl9uYyAuZ2JfV2MsLmdiX25jLmdiX2llLC5nYl9u
Yzpub3QoLmdiX2llKTpub3QoOmZvY3VzKXtvdXRsaW5lOm5vbmV9LmdiX2lhe2Rpc3BsYXk6
aW5saW5lLWJsb2NrO3ZlcnRpY2FsLWFsaWduOm1pZGRsZX0uZ2JfcWN7Ym9yZGVyOm5vbmU7
ZGlzcGxheTpibG9jazt2aXNpYmlsaXR5OmhpZGRlbn1pbWcuZ2JfbGF7Ym9yZGVyOjA7dmVy
dGljYWwtYWxpZ246bWlkZGxlfS5nYl9DYyAuZ2JfbmMgLmdiX1djOmJlZm9yZSwuZ2Jfc2Mg
LmdiX25jIC5nYl9XYzpiZWZvcmV7Y29udGVudDp1cmwoJ2h0dHBzOi8vd3d3LmdzdGF0aWMu
Y29tL2ltYWdlcy9icmFuZGluZy9nb29nbGVsb2dvL3N2Zy9nb29nbGVsb2dvX2xpZ2h0X2Ns
cl83NHgyNHB4LnN2ZycpfS5nYl81ZCAuZ2JfbmMgLmdiX1djOmJlZm9yZXtjb250ZW50OnVy
bCgnaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaW1hZ2VzL2JyYW5kaW5nL2dvb2dsZWxvZ28v
c3ZnL2dvb2dsZWxvZ29fZGFya19jbHJfNzR4MjRweC5zdmcnKX1AbWVkaWEgc2NyZWVuIGFu
ZCAoLW1zLWhpZ2gtY29udHJhc3Q6YmxhY2stb24td2hpdGUpey5nYl9zYyAuZ2JfbmMgLmdi
X1djOmJlZm9yZXtjb250ZW50OnVybCgnaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vaW1hZ2Vz
L2JyYW5kaW5nL2dvb2dsZWxvZ28vc3ZnL2dvb2dsZWxvZ29fZGFya19jbHJfNzR4MjRweC5z
dmcnKX19QG1lZGlhIHNjcmVlbiBhbmQgKC1tcy1oaWdoLWNvbnRyYXN0OndoaXRlLW9uLWJs
YWNrKXsuZ2JfNWQgLmdiX25jIC5nYl9XYzpiZWZvcmV7Y29udGVudDp1cmwoJ2h0dHBzOi8v
d3d3LmdzdGF0aWMuY29tL2ltYWdlcy9icmFuZGluZy9nb29nbGVsb2dvL3N2Zy9nb29nbGVs
b2dvX2xpZ2h0X2Nscl83NHgyNHB4LnN2ZycpfX0uZ2JfaWF7YmFja2dyb3VuZC1yZXBlYXQ6
bm8tcmVwZWF0fS5nYl82ZHtkaXNwbGF5OmlubGluZS1ibG9jaztmb250LWZhbWlseTonUHJv
ZHVjdCBTYW5zJyxBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToyMnB4O2xpbmUtaGVpZ2h0
OjI0cHg7cGFkZGluZy1sZWZ0OjhweDtwb3NpdGlvbjpyZWxhdGl2ZTt0b3A6LTEuNXB4O3Zl
cnRpY2FsLWFsaWduOm1pZGRsZX0uZ2JfMGMgLmdiXzZke3BhZGRpbmctbGVmdDo0cHh9Lmdi
XzBjIC5nYl82ZC5nYl9qZXtwYWRkaW5nLWxlZnQ6MH0uZ2JfbGEuZ2JfN2R7cGFkZGluZy1y
aWdodDo0cHh9LmdiX0NjIC5nYl9aYy5nYl82ZHtvcGFjaXR5OjF9LmdiX2tlOmZvY3VzIC5n
Yl82ZHt0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lfS5nYl9sZSBpbWcuZ2JfbGF7bWFyZ2lu
LWJvdHRvbTo0cHh9LmdiX3Jjey1tb3otYm9yZGVyLXJhZGl1czo1MCU7Ym9yZGVyLXJhZGl1
czo1MCU7ZGlzcGxheTppbmxpbmUtYmxvY2s7bWFyZ2luOjAgNHB4O3BhZGRpbmc6MTJweDtv
dmVyZmxvdzpoaWRkZW47dmVydGljYWwtYWxpZ246bWlkZGxlO2N1cnNvcjpwb2ludGVyO2hl
aWdodDoyNHB4O3dpZHRoOjI0cHg7LW1vei11c2VyLXNlbGVjdDpub25lO2ZsZXg6MCAwIGF1
dG99LmdiX2thIC5nYl9yY3ttYXJnaW46MCA0cHggMCAwfS5nYl9yYzpmb2N1cywuZ2JfcmM6
Zm9jdXM6aG92ZXJ7YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDYwLDY0LDY3LDAuMSk7b3V0bGlu
ZTpub25lfS5nYl9yYzphY3RpdmV7YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDYwLDY0LDY3LDAu
MTIpO291dGxpbmU6bm9uZX0uZ2JfcmM6aG92ZXJ7YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDYw
LDY0LDY3LDAuMDgpO291dGxpbmU6bm9uZX0uZ2Jfc2MgLmdiX3JjOmhvdmVye2JhY2tncm91
bmQtY29sb3I6cmdiYSgyMzIsMjM0LDIzNywwLjA4KX0uZ2Jfc2MgLmdiX3JjOmZvY3VzLC5n
Yl9zYyAuZ2JfcmM6Zm9jdXM6aG92ZXJ7YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDIzMiwyMzQs
MjM3LDAuMSl9LmdiX3NjIC5nYl9yYzphY3RpdmV7YmFja2dyb3VuZC1jb2xvcjpyZ2JhKDIz
MiwyMzQsMjM3LDAuMTIpfS5nYl90Y3tkaXNwbGF5Om5vbmV9LmdiX3Vje3RyYW5zZm9ybTpu
b25lfS5nYl93Y3tkaXNwbGF5Om5vbmV9LmdiX3hje2JhY2tncm91bmQtY29sb3I6I2ZmZjti
b3R0b206MDtjb2xvcjojMDAwO2hlaWdodDotbW96LWNhbGMoMTAwdmggLSAxMDAlKTtoZWln
aHQ6Y2FsYygxMDB2aCAtIDEwMCUpO292ZXJmbG93LXk6YXV0bztvdmVyZmxvdy14OmhpZGRl
bjtwb3NpdGlvbjphYnNvbHV0ZTt0b3A6MTAwJTt6LWluZGV4Ojk5MDt3aWxsLWNoYW5nZTp2
aXNpYmlsaXR5O3Zpc2liaWxpdHk6aGlkZGVuO2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3Bs
YXk6ZmxleDtmbGV4LWRpcmVjdGlvbjpjb2x1bW47LW1vei10cmFuc2l0aW9uOnRyYW5zZm9y
bSAuMjVzIGN1YmljLWJlemllcigwLjQsMC4wLDAuMiwxKSx2aXNpYmlsaXR5IDBzIGxpbmVh
ciAuMjVzO3RyYW5zaXRpb246dHJhbnNmb3JtIC4yNXMgY3ViaWMtYmV6aWVyKDAuNCwwLjAs
MC4yLDEpLHZpc2liaWxpdHkgMHMgbGluZWFyIC4yNXN9LmdiX3hjLmdiX3ljLmdiX3pjLC5n
Yl94Yy5nYl95Yy5nYl96Yzpob3ZlcntvdmVyZmxvdzp2aXNpYmxlfS5nYl94Yy5nYl9rYXt3
aWR0aDoyNjRweDt0cmFuc2Zvcm06dHJhbnNsYXRlWCgtMjY0cHgpfS5nYl94Yzpub3QoLmdi
X2thKXt3aWR0aDoyODBweDt0cmFuc2Zvcm06dHJhbnNsYXRlWCgtMjgwcHgpfS5nYl9BYyAu
Z2JfeGN7d2lkdGg6MTk1cHh9LmdiX3hjLmdiX0Jje3RyYW5zZm9ybTp0cmFuc2xhdGVYKDAp
O3Zpc2liaWxpdHk6dmlzaWJsZTstbW96LWJveC1zaGFkb3c6MCAwIDE2cHggcmdiYSgwLDAs
MCwuMjgpO2JveC1zaGFkb3c6MCAwIDE2cHggcmdiYSgwLDAsMCwuMjgpOy1tb3otdHJhbnNp
dGlvbjp0cmFuc2Zvcm0gLjI1cyBjdWJpYy1iZXppZXIoMC40LDAuMCwwLjIsMSksdmlzaWJp
bGl0eSAwcyBsaW5lYXIgMHM7dHJhbnNpdGlvbjp0cmFuc2Zvcm0gLjI1cyBjdWJpYy1iZXpp
ZXIoMC40LDAuMCwwLjIsMSksdmlzaWJpbGl0eSAwcyBsaW5lYXIgMHN9LmdiX3hjLmdiX0Nj
e2JhY2tncm91bmQtY29sb3I6cmdiYSgzMiwzMywzNiwxKTtjb2xvcjojZThlYWVkfS5nYl9E
Yy5nYl9FY3tiYWNrZ3JvdW5kLWNvbG9yOnRyYW5zcGFyZW50Oy1tb3otYm94LXNoYWRvdzow
IDA7Ym94LXNoYWRvdzowIDB9LmdiX0RjLmdiX0VjPjpub3QoLmdiX0ZjKXtkaXNwbGF5Om5v
bmV9LmdiX0Zje2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6ZmxleDtmbGV4OjEgMSBh
dXRvO2ZsZXgtZGlyZWN0aW9uOmNvbHVtbn0uZ2JfRmM+LmdiX0hje2ZsZXg6MSAwIGF1dG99
LmdiX0ZjPi5nYl9JY3tmbGV4OjAgMCBhdXRvfS5nYl9KY3tsaXN0LXN0eWxlOm5vbmU7bWFy
Z2luLXRvcDowO21hcmdpbi1ib3R0b206MDtwYWRkaW5nOjhweCAwfS5nYl94Yzpub3QoLmdi
X0RjKSAuZ2JfSmM6Zmlyc3QtY2hpbGR7cGFkZGluZzowIDAgOHB4IDB9LmdiX0pjOm5vdCg6
bGFzdC1jaGlsZCl7Ym9yZGVyLWJvdHRvbToxcHggc29saWQgI2RkZH0uZ2JfQ2MgLmdiX0pj
Om5vdCg6bGFzdC1jaGlsZCl7Ym9yZGVyLWJvdHRvbToxcHggc29saWQgIzVmNjM2OH0uZ2Jf
Q2MgLmdiX0tjIC5nYl9MY3tiYWNrZ3JvdW5kLWNvbG9yOnJnYmEoMzIsMzMsMzYsMSk7Ym9y
ZGVyLWJvdHRvbToxcHggc29saWQgIzVmNjM2OH0uZ2JfTWN7Y3Vyc29yOnBvaW50ZXJ9Lmdi
X05jOmVtcHR5e2Rpc3BsYXk6bm9uZX0uZ2JfTWMsLmdiX05je2Rpc3BsYXk6YmxvY2s7bWlu
LWhlaWdodDo0MHB4O3BhZGRpbmctYm90dG9tOjRweDtwYWRkaW5nLXRvcDo0cHg7Zm9udC1m
YW1pbHk6Um9ib3RvLFJvYm90b0RyYWZ0LEhlbHZldGljYSxBcmlhbCxzYW5zLXNlcmlmO2Nv
bG9yOnJnYmEoMCwwLDAsMC44Nyl9LmdiX0NjIC5nYl9NY3tjb2xvcjojZThlYWVkfS5nYl9D
YyAuZ2JfTmN7Y29sb3I6IzlhYTBhNn0uZ2JfeGMuZ2Jfa2EgLmdiX01je3BhZGRpbmctbGVm
dDoxNnB4fS5nYl94Yzpub3QoLmdiX2thKSAuZ2JfTWMsLmdiX3hjOm5vdCguZ2Jfa2EpIC5n
Yl9OY3twYWRkaW5nLWxlZnQ6MjRweH0uZ2JfTWM6aG92ZXJ7YmFja2dyb3VuZDpyZ2JhKDAs
MCwwLDAuMTIpfS5nYl9DYyAuZ2JfTWM6aG92ZXJ7YmFja2dyb3VuZDpyZ2JhKDIzMiwyMzQs
MjM3LDAuMDgpfS5nYl9NYy5nYl9PY3tiYWNrZ3JvdW5kOnJnYmEoMCwwLDAsMC4xMik7Zm9u
dC13ZWlnaHQ6Ym9sZDtjb2xvcjpyZ2JhKDAsMCwwLDAuODcpfS5nYl9DYyAuZ2JfTWMuZ2Jf
T2N7YmFja2dyb3VuZDpyZ2JhKDIzMiwyMzQsMjM3LDAuMTIpO2NvbG9yOnJnYmEoMjU1LDI1
NSwyNTUsLjg3KX0uZ2JfTWMgLmdiX1Bje3RleHQtZGVjb3JhdGlvbjpub25lO2Rpc3BsYXk6
aW5saW5lLWJsb2NrO3dpZHRoOjEwMCV9LmdiX01jIC5nYl9QYzpmb2N1c3tvdXRsaW5lOm5v
bmV9LmdiX01jIC5nYl9RYywuZ2JfTmN7cGFkZGluZy1sZWZ0OjMycHg7ZGlzcGxheTppbmxp
bmUtYmxvY2s7bGluZS1oZWlnaHQ6NDBweDt2ZXJ0aWNhbC1hbGlnbjp0b3A7d2lkdGg6MTc2
cHg7d2hpdGUtc3BhY2U6bm93cmFwO292ZXJmbG93OmhpZGRlbjt0ZXh0LW92ZXJmbG93OmVs
bGlwc2lzfS5nYl9BYyAuZ2JfTWMgLmdiX1FjLC5nYl9BYyAuZ2JfTmN7cGFkZGluZy1sZWZ0
OjE2cHg7d2lkdGg6MTM4cHh9LmdiX0ZjLmdiX3MgLmdiX1BjOmZvY3VzIC5nYl9RY3t0ZXh0
LWRlY29yYXRpb246dW5kZXJsaW5lfS5nYl9NYyAuZ2JfUmN7aGVpZ2h0OjI0cHg7d2lkdGg6
MjRweDtmbG9hdDpsZWZ0O21hcmdpbi10b3A6OHB4O3ZlcnRpY2FsLWFsaWduOm1pZGRsZX0u
Z2JfS2M+KntkaXNwbGF5OmJsb2NrO21pbi1oZWlnaHQ6NDhweH0uZ2JfamEuZ2Jfa2EgLmdi
X0tjPip7cGFkZGluZy10b3A6NHB4O3BhZGRpbmctYm90dG9tOjRweDtwYWRkaW5nLWxlZnQ6
MTZweH0uZ2JfamE6bm90KC5nYl9rYSkgLmdiX0tjPip7cGFkZGluZy10b3A6OHB4O3BhZGRp
bmctYm90dG9tOjhweDtwYWRkaW5nLWxlZnQ6MjRweH0uZ2JfamE6bm90KC5nYl9rYSkgLmdi
XzBjIC5nYl9sY3stbW96LWJveC1hbGlnbjpjZW50ZXI7YWxpZ24taXRlbXM6Y2VudGVyO2Rp
c3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTotbW96LWJveDtkaXNwbGF5Oi1tcy1mbGV4Ym94
O2Rpc3BsYXk6LXdlYmtpdC1mbGV4O2Rpc3BsYXk6ZmxleH0uZ2JfS2MgLmdiX2xje2Rpc3Bs
YXk6dGFibGUtY2VsbDtoZWlnaHQ6NDhweDt2ZXJ0aWNhbC1hbGlnbjptaWRkbGV9LmdiX0tj
IC5nYl9MY3tiYWNrZ3JvdW5kLWNvbG9yOiNmNWY1ZjU7ZGlzcGxheTpibG9ja30uZ2JfS2Mg
LmdiX0xjIC5nYl9lZHtmbG9hdDpyaWdodH0uZ2JfamEuZ2Jfa2EgLmdiX0tjIC5nYl9MY3tw
YWRkaW5nOjRweH0uZ2JfamE6bm90KC5nYl9rYSkgLmdiX0tjIC5nYl9MY3twYWRkaW5nOjhw
eH0uZ2JfS2MgLmdiX3phe3dpZHRoOjQwcHh9LmdiX0tjIC5nYl9DYXtwb3NpdGlvbjphYnNv
bHV0ZTtyaWdodDowO3RvcDo1MCV9LmdiX3hjIC5nYl9rZXt0ZXh0LWRlY29yYXRpb246bm9u
ZX0uZ2JfeGMgLmdiXzZke2Rpc3BsYXk6aW5saW5lO3doaXRlLXNwYWNlOm5vcm1hbDt3b3Jk
LWJyZWFrOmJyZWFrLWFsbDt3b3JkLWJyZWFrOmJyZWFrLXdvcmR9Ym9keS5nYl9uZSBbZGF0
YS1vZ3BjXXstbW96LXRyYW5zaXRpb246bWFyZ2luLWxlZnQgLjI1cyBjdWJpYy1iZXppZXIo
MC40LDAuMCwwLjIsMSksdmlzaWJpbGl0eSAwcyBsaW5lYXIgLjI1czt0cmFuc2l0aW9uOm1h
cmdpbi1sZWZ0IC4yNXMgY3ViaWMtYmV6aWVyKDAuNCwwLjAsMC4yLDEpLHZpc2liaWxpdHkg
MHMgbGluZWFyIC4yNXN9Ym9keS5nYl9uZS5nYl9vZSBbZGF0YS1vZ3BjXXstbW96LXRyYW5z
aXRpb246bWFyZ2luLWxlZnQgLjI1cyBjdWJpYy1iZXppZXIoMC40LDAuMCwwLjIsMSksdmlz
aWJpbGl0eSAwcyBsaW5lYXIgMHM7dHJhbnNpdGlvbjptYXJnaW4tbGVmdCAuMjVzIGN1Ymlj
LWJlemllcigwLjQsMC4wLDAuMiwxKSx2aXNpYmlsaXR5IDBzIGxpbmVhciAwc31ib2R5IFtk
YXRhLW9ncGNde21hcmdpbi1sZWZ0OjB9Ym9keS5nYl9vZSBbZGF0YS1vZ3BjXXttYXJnaW4t
bGVmdDoyODBweH0uZ2JfRWZ7Y3Vyc29yOnBvaW50ZXI7cGFkZGluZzoxM3B4fS5nYl9GZnti
YWNrZ3JvdW5kLWNvbG9yOnJnYmEoMCwwLDAsMC4xKTstbW96LWJveC1zaGFkb3c6aW5zZXQg
MXB4IDFweCAzcHggcmdiYSgwLDAsMCwuMjQpO2JveC1zaGFkb3c6aW5zZXQgMXB4IDFweCAz
cHggcmdiYSgwLDAsMCwuMjQpO3dpZHRoOjM0cHg7aGVpZ2h0OjE3cHg7LW1vei1ib3JkZXIt
cmFkaXVzOjhweDtib3JkZXItcmFkaXVzOjhweDtwb3NpdGlvbjpyZWxhdGl2ZTstbW96LXRy
YW5zaXRpb246YmFja2dyb3VuZC1jb2xvciBlYXNlIDE1MG1zO3RyYW5zaXRpb246YmFja2dy
b3VuZC1jb2xvciBlYXNlIDE1MG1zfS5nYl9FZlthcmlhLXByZXNzZWQ9dHJ1ZV0gLmdiX0Zm
e2JhY2tncm91bmQtY29sb3I6cmdiYSgyNTUsMjU1LDI1NSwwLjEpfS5nYl9IZntwb3NpdGlv
bjphYnNvbHV0ZTt3aWR0aDoyNXB4O2hlaWdodDoyNXB4Oy1tb3otYm9yZGVyLXJhZGl1czo1
MCU7Ym9yZGVyLXJhZGl1czo1MCU7LW1vei1ib3gtc2hhZG93OjAgMCAycHggcmdiYSgwLDAs
MCwuMTIpLDAgMnB4IDRweCByZ2JhKDAsMCwwLC4yNCk7Ym94LXNoYWRvdzowIDAgMnB4IHJn
YmEoMCwwLDAsLjEyKSwwIDJweCA0cHggcmdiYSgwLDAsMCwuMjQpO3RvcDotNHB4O3RyYW5z
Zm9ybTp0cmFuc2xhdGVYKC0xMnB4KTtiYWNrZ3JvdW5kLWNvbG9yOndoaXRlOy1tb3otdHJh
bnNpdGlvbjp0cmFuc2Zvcm0gZWFzZSAxNTBtczt0cmFuc2l0aW9uOnRyYW5zZm9ybSBlYXNl
IDE1MG1zfS5nYl9FZlthcmlhLXByZXNzZWQ9dHJ1ZV0gLmdiX0hme3RyYW5zZm9ybTp0cmFu
c2xhdGVYKDIwcHgpfS5nYl9IZiBpbWd7cG9zaXRpb246YWJzb2x1dGU7bWFyZ2luOjVweDt3
aWR0aDoxNXB4O2hlaWdodDoxNXB4fS5nYl9wZXtsaW5lLWhlaWdodDowOy1tb3otdXNlci1z
ZWxlY3Q6LW1vei1ub25lfS5nYl9aZD4uZ2JfcGU6b25seS1jaGlsZHtmbG9hdDpyaWdodH0u
Z2JfcGUgLmdiX3Vle2Rpc3BsYXk6aW5saW5lLWJsb2NrfS5nYl9wZSAuZ2JfcGJ7Y3Vyc29y
OnBvaW50ZXJ9LmdiX3BlIC5nYl9wYiBpbWd7b3BhY2l0eTouNTQ7d2lkdGg6MjRweDtoZWln
aHQ6MjRweDtwYWRkaW5nOjEwcHh9LmdiX3NjIC5nYl9wZSAuZ2JfcGIgaW1ne29wYWNpdHk6
MX0uZ2JfcWV7dGV4dC1hbGlnbjpyaWdodH0uZ2JfdWV7dGV4dC1hbGlnbjppbml0aWFsfS5n
Yl9wZSAuZ2JfdmUsLmdiX3BlIC5nYl93ZXtkaXNwbGF5OnRhYmxlLWNlbGw7aGVpZ2h0OjQ4
cHg7dmVydGljYWwtYWxpZ246bWlkZGxlfS5nYl9wZSAuZ2JfdmU6bm90KC5nYl94ZSl7b3Zl
cmZsb3c6aGlkZGVufS5nYl9BZXtwYWRkaW5nLWxlZnQ6MTZweH0uZ2JfQWU6bm90KC5nYl9r
YSl7cGFkZGluZy1sZWZ0OjI0cHh9LmdiX0Jle2NvbG9yOmJsYWNrO29wYWNpdHk6LjU0fS5n
Yl9DZXtiYWNrZ3JvdW5kOndoaXRlOy1tb3otYm94LXNoYWRvdzowIDVweCA1cHggLTNweCBy
Z2JhKDAsMCwwLDAuMiksMCA4cHggMTBweCAxcHggcmdiYSgwLDAsMCwwLjE0KSwwIDNweCAx
NHB4IDJweCByZ2JhKDAsMCwwLDAuMTIpO2JveC1zaGFkb3c6MCA1cHggNXB4IC0zcHggcmdi
YSgwLDAsMCwwLjIpLDAgOHB4IDEwcHggMXB4IHJnYmEoMCwwLDAsMC4xNCksMCAzcHggMTRw
eCAycHggcmdiYSgwLDAsMCwwLjEyKTtvdmVyZmxvdy15OmhpZGRlbjtwb3NpdGlvbjphYnNv
bHV0ZTtyaWdodDoyNHB4O3RvcDo0OHB4fS5nYl8zY3tkaXNwbGF5Om5vbmV9LmdiXzNjLmdi
X0Jje2Rpc3BsYXk6YmxvY2t9LmdiXzRje2JhY2tncm91bmQtY29sb3I6I2ZmZjstbW96LWJv
eC1zaGFkb3c6MCAxcHggMCByZ2JhKDAsMCwwLDAuMDgpO2JveC1zaGFkb3c6MCAxcHggMCBy
Z2JhKDAsMCwwLDAuMDgpO2NvbG9yOiMwMDA7cG9zaXRpb246cmVsYXRpdmU7ei1pbmRleDo5
ODZ9LmdiXzVje2hlaWdodDo0MHB4O3BhZGRpbmc6MTZweCAyNHB4O3doaXRlLXNwYWNlOm5v
d3JhcH0uZ2JfNmN7cG9zaXRpb246Zml4ZWQ7Ym90dG9tOjE2cHg7cGFkZGluZzoxNnB4O3Jp
Z2h0OjE2cHg7d2hpdGUtc3BhY2U6bm9ybWFsO3dpZHRoOjMyOHB4O3RyYW5zaXRpb246d2lk
dGggLjJzLGJvdHRvbSAuMnMscmlnaHQgLjJzOy1tb3otYm9yZGVyLXJhZGl1czoycHg7Ym9y
ZGVyLXJhZGl1czoycHg7LW1vei1ib3gtc2hhZG93OjAgNXB4IDVweCAtM3B4IHJnYmEoMCww
LDAsMC4yKSwwIDhweCAxMHB4IDFweCByZ2JhKDAsMCwwLDAuMTQpLDAgM3B4IDE0cHggMnB4
IHJnYmEoMCwwLDAsMC4xMik7Ym94LXNoYWRvdzowIDVweCA1cHggLTNweCByZ2JhKDAsMCww
LDAuMiksMCA4cHggMTBweCAxcHggcmdiYSgwLDAsMCwwLjE0KSwwIDNweCAxNHB4IDJweCBy
Z2JhKDAsMCwwLDAuMTIpfUBtZWRpYSAobWF4LXdpZHRoOjQwMHB4KXsuZ2JfNGMuZ2JfNmN7
bWF4LXdpZHRoOjM2OHB4O3dpZHRoOmF1dG87Ym90dG9tOjA7cmlnaHQ6MH19LmdiXzRjIC5n
Yl9wYntib3JkZXI6MDtmb250LXdlaWdodDo1MDA7Zm9udC1zaXplOjE0cHg7bGluZS1oZWln
aHQ6MzZweDttaW4td2lkdGg6MzJweDtwYWRkaW5nOjAgMTZweDt2ZXJ0aWNhbC1hbGlnbjpt
aWRkbGV9LmdiXzRjIC5nYl9wYjpiZWZvcmV7Y29udGVudDonJztoZWlnaHQ6NnB4O2xlZnQ6
MDtwb3NpdGlvbjphYnNvbHV0ZTt0b3A6LTZweDt3aWR0aDoxMDAlfS5nYl80YyAuZ2JfcGI6
YWZ0ZXJ7Ym90dG9tOi02cHg7Y29udGVudDonJztoZWlnaHQ6NnB4O2xlZnQ6MDtwb3NpdGlv
bjphYnNvbHV0ZTt3aWR0aDoxMDAlfS5nYl80YyAuZ2JfcGIrLmdiX3Bie21hcmdpbi1sZWZ0
OjhweH0uZ2JfN2N7aGVpZ2h0OjQ4cHg7cGFkZGluZzo0cHg7bWFyZ2luOi04cHggMCAwIC04
cHh9LmdiXzZjIC5nYl83Y3tmbG9hdDpsZWZ0O21hcmdpbjotNHB4fS5nYl84Y3tmb250LWZh
bWlseTpSb2JvdG8sUm9ib3RvRHJhZnQsSGVsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWY7b3Zl
cmZsb3c6aGlkZGVuO3ZlcnRpY2FsLWFsaWduOnRvcH0uZ2JfNWMgLmdiXzhje2Rpc3BsYXk6
aW5saW5lLWJsb2NrO3BhZGRpbmctbGVmdDo4cHg7d2lkdGg6NjQwcHh9LmdiXzZjIC5nYl84
Y3tkaXNwbGF5OmJsb2NrO21hcmdpbi1sZWZ0OjU2cHg7cGFkZGluZy1ib3R0b206MTZweH0u
Z2JfOWN7YmFja2dyb3VuZC1jb2xvcjppbmhlcml0fS5nYl81YyAuZ2JfOWN7ZGlzcGxheTpp
bmxpbmUtYmxvY2s7cG9zaXRpb246YWJzb2x1dGU7dG9wOjE4cHg7cmlnaHQ6MjRweH0uZ2Jf
NmMgLmdiXzlje3RleHQtYWxpZ246cmlnaHQ7cGFkZGluZy1yaWdodDoyNHB4O3BhZGRpbmct
dG9wOjZweH0uZ2JfOWMgLmdiX2Fke2hlaWdodDoxLjVlbTttYXJnaW46LS4yNWVtIDEwcHgg
LS4yNWVtIDA7dmVydGljYWwtYWxpZ246dGV4dC10b3A7d2lkdGg6MS41ZW19LmdiX2Jke2xp
bmUtaGVpZ2h0OjIwcHg7Zm9udC1zaXplOjE2cHg7Zm9udC13ZWlnaHQ6NzAwO2NvbG9yOnJn
YmEoMCwwLDAsLjg3KX0uZ2JfNmMgLmdiX2Jke2NvbG9yOnJnYmEoMCwwLDAsLjg3KTtmb250
LXNpemU6MTZweDtsaW5lLWhlaWdodDoyMHB4O3BhZGRpbmctdG9wOjhweH0uZ2JfNWMgLmdi
X2JkLC5nYl81YyAuZ2JfY2R7d2lkdGg6NjQwcHh9LmdiX2NkIC5nYl9kZCwuZ2JfY2R7bGlu
ZS1oZWlnaHQ6MjBweDtmb250LXNpemU6MTNweDtmb250LXdlaWdodDo0MDA7Y29sb3I6cmdi
YSgwLDAsMCwuNTQpfS5nYl82YyAuZ2JfY2QgLmdiX2Rke2ZvbnQtc2l6ZToxNHB4fS5nYl82
YyAuZ2JfY2R7cGFkZGluZy10b3A6MTJweH0uZ2JfNmMgLmdiX2NkIGF7Y29sb3I6cmdiYSg2
NiwxMzMsMjQ0LDEpfS5nYl9lZC5nYl9mZHtwYWRkaW5nOjB9LmdiX2ZkIC5nYl9Ee2JhY2tn
cm91bmQ6I2ZmZmZmZjtib3JkZXI6c29saWQgMXB4IHRyYW5zcGFyZW50Oy1tb3otYm9yZGVy
LXJhZGl1czo4cHg7Ym9yZGVyLXJhZGl1czo4cHg7Ym94LXNpemluZzpib3JkZXItYm94O3Bh
ZGRpbmc6MTZweDtyaWdodDoxNnB4O3RvcDo3MnB4Oy1tb3otYm94LXNoYWRvdzowIDFweCAy
cHggMCByZ2JhKDY1LDY5LDczLDAuMyksMCAzcHggNnB4IDJweCByZ2JhKDY1LDY5LDczLDAu
MTUpO2JveC1zaGFkb3c6MCAxcHggMnB4IDAgcmdiYSg2NSw2OSw3MywwLjMpLDAgM3B4IDZw
eCAycHggcmdiYSg2NSw2OSw3MywwLjE1KX1hLmdiX2dke2NvbG9yOiM1ZjYzNjghaW1wb3J0
YW50O2ZvbnQtc2l6ZToyMnB4O2hlaWdodDoyNHB4O29wYWNpdHk6MTtwYWRkaW5nOjhweDtw
b3NpdGlvbjphYnNvbHV0ZTtyaWdodDo4cHg7dG9wOjhweDt0ZXh0LWRlY29yYXRpb246bm9u
ZSFpbXBvcnRhbnQ7d2lkdGg6MjRweH1hLmdiX2dkOmZvY3VzLGEuZ2JfZ2Q6YWN0aXZlLGEu
Z2JfZ2Q6Zm9jdXM6aG92ZXJ7YmFja2dyb3VuZC1jb2xvcjojZThlYWVkOy1tb3otYm9yZGVy
LXJhZGl1czo1MCU7Ym9yZGVyLXJhZGl1czo1MCU7b3V0bGluZTpub25lfWEuZ2JfZ2Q6aG92
ZXJ7YmFja2dyb3VuZC1jb2xvcjojZjFmM2Y0Oy1tb3otYm9yZGVyLXJhZGl1czo1MCU7Ym9y
ZGVyLXJhZGl1czo1MCU7b3V0bGluZTpub25lfXN2Zy5nYl9oZHtmaWxsOiM1ZjYzNjg7b3Bh
Y2l0eToxfS5nYl9pZHtwYWRkaW5nOjA7d2hpdGUtc3BhY2U6bm9ybWFsO2Rpc3BsYXk6dGFi
bGV9LmdiX2pke2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTpSb2JvdG8sUm9ib3Rv
RHJhZnQsSGVsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWZ9LmdiX2ZkIC5nYl8xOmFjdGl2ZXtv
dXRsaW5lOm5vbmU7LW1vei1ib3gtc2hhZG93OjAgNHB4IDVweCByZ2JhKDAsMCwwLC4xNik7
Ym94LXNoYWRvdzowIDRweCA1cHggcmdiYSgwLDAsMCwuMTYpfS5nYl9XLmdiX2tkLmdiX2xk
ey1tb3otYm9yZGVyLXJhZGl1czo0cHg7Ym9yZGVyLXJhZGl1czo0cHg7Y3Vyc29yOnBvaW50
ZXI7aGVpZ2h0OjE2cHg7Y29sb3I6IzVmNjM2ODtmb250LWZhbWlseTpHb29nbGUgU2FucyxS
b2JvdG8sUm9ib3RvRHJhZnQsSGVsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWY7Zm9udC13ZWln
aHQ6NTAwO2xldHRlci1zcGFjaW5nOi4yNXB4O2xpbmUtaGVpZ2h0OjE2cHg7cGFkZGluZzo4
cHggNnB4O3RleHQtdHJhbnNmb3JtOm5vbmU7LW1vei1vc3gtZm9udC1zbW9vdGhpbmc6Z3Jh
eXNjYWxlfS5nYl9XLmdiX2tkOmhvdmVye2JhY2tncm91bmQtY29sb3I6I2Y4ZjlmYX0uZ2Jf
Vy5nYl9rZDpmb2N1cywuZ2JfVy5nYl9rZDpob3Zlcjpmb2N1c3tiYWNrZ3JvdW5kLWNvbG9y
OiNmMWYzZjQ7Ym9yZGVyLWNvbG9yOnRyYW5zcGFyZW50fS5nYl9XLmdiX2tkOmFjdGl2ZXti
YWNrZ3JvdW5kLWNvbG9yOiNmMWYzZjQ7LW1vei1ib3gtc2hhZG93OjAgMXB4IDJweCAwIHJn
YmEoNjAsNjQsNjcsMC4zKSwwIDFweCAzcHggMXB4IHJnYmEoNjAsNjQsNjcsMC4xNSk7Ym94
LXNoYWRvdzowIDFweCAycHggMCByZ2JhKDYwLDY0LDY3LDAuMyksMCAxcHggM3B4IDFweCBy
Z2JhKDYwLDY0LDY3LDAuMTUpfS5nYl9kZHtjb2xvcjojNWY2MzY4O2ZvbnQtZmFtaWx5OlJv
Ym90byxSb2JvdG9EcmFmdCxIZWx2ZXRpY2EsQXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6
MTRweDtsZXR0ZXItc3BhY2luZzouMjVweDtsaW5lLWhlaWdodDoyMHB4O21hcmdpbjowO21h
cmdpbi1ib3R0b206NXB4fS5nYl9tZHt0ZXh0LWFsaWduOnJpZ2h0O2ZvbnQtc2l6ZToxNHB4
O3BhZGRpbmctYm90dG9tOjA7d2hpdGUtc3BhY2U6bm93cmFwfS5nYl9tZCAuZ2JfbmR7bWFy
Z2luLWxlZnQ6MTJweDt0ZXh0LXRyYW5zZm9ybTpub25lfWEuZ2JfMS5nYl9uZDpob3Zlcnti
YWNrZ3JvdW5kLWNvbG9yOiMyYjdkZTk7Ym9yZGVyLWNvbG9yOnRyYW5zcGFyZW50Oy1tb3ot
Ym94LXNoYWRvdzowIDFweCAycHggMCByZ2JhKDY2LDEzMywyNDQsMC4zKSwwIDFweCAzcHgg
MXB4IHJnYmEoNjYsMTMzLDI0NCwwLjE1KTtib3gtc2hhZG93OjAgMXB4IDJweCAwIHJnYmEo
NjYsMTMzLDI0NCwwLjMpLDAgMXB4IDNweCAxcHggcmdiYSg2NiwxMzMsMjQ0LDAuMTUpfWEu
Z2JfMS5nYl9uZDpmb2N1cyxhLmdiXzEuZ2JfbmQ6aG92ZXI6Zm9jdXN7YmFja2dyb3VuZC1j
b2xvcjojNTA5NGVkO2JvcmRlci1jb2xvcjp0cmFuc3BhcmVudDstbW96LWJveC1zaGFkb3c6
MCAxcHggMnB4IDAgcmdiYSg2NiwxMzMsMjQ0LDAuMyksMCAxcHggM3B4IDFweCByZ2JhKDY2
LDEzMywyNDQsMC4xNSk7Ym94LXNoYWRvdzowIDFweCAycHggMCByZ2JhKDY2LDEzMywyNDQs
MC4zKSwwIDFweCAzcHggMXB4IHJnYmEoNjYsMTMzLDI0NCwwLjE1KX1hLmdiXzEuZ2JfbmQ6
YWN0aXZle2JhY2tncm91bmQtY29sb3I6IzYzYTBlZjstbW96LWJveC1zaGFkb3c6MCAxcHgg
MnB4IDAgcmdiYSg2NiwxMzMsMjQ0LDAuMyksMCAxcHggM3B4IDFweCByZ2JhKDY2LDEzMywy
NDQsMC4xNSk7Ym94LXNoYWRvdzowIDFweCAycHggMCByZ2JhKDY2LDEzMywyNDQsMC4zKSww
IDFweCAzcHggMXB4IHJnYmEoNjYsMTMzLDI0NCwwLjE1KX0uZ2JfbWQgLmdiX25kLmdiX29k
e3BhZGRpbmctbGVmdDo2cHg7cGFkZGluZy1yaWdodDoxNHB4fS5nYl9tZCAuZ2JfbGQuZ2Jf
bmQgaW1ne2JhY2tncm91bmQtY29sb3I6aW5oZXJpdDstbW96LWJvcmRlci1yYWRpdXM6aW5p
dGlhbDtib3JkZXItcmFkaXVzOmluaXRpYWw7aGVpZ2h0OjE4cHg7bWFyZ2luOjAgOHB4IDAg
NHB4O3ZlcnRpY2FsLWFsaWduOnRleHQtdG9wO3dpZHRoOjE4cHh9LmdiX3BkIC5nYl9pZCAu
Z2JfcWQgLmdiX2xke2JvcmRlcjoycHggc29saWQgdHJhbnNwYXJlbnR9LmdiX3BkIC5nYl9p
ZCAuZ2JfcWQgLmdiX2xkOmZvY3VzOmFmdGVyLC5nYl9wZCAuZ2JfaWQgLmdiX3FkIC5nYl9s
ZDpob3ZlcjphZnRlcntiYWNrZ3JvdW5kLWNvbG9yOnRyYW5zcGFyZW50fS5nYl9qZHtiYWNr
Z3JvdW5kLWNvbG9yOiM0MDQwNDA7Y29sb3I6I2ZmZjtwYWRkaW5nOjE2cHg7cG9zaXRpb246
YWJzb2x1dGU7dG9wOjYycHg7bWluLXdpZHRoOjMyOHB4O21heC13aWR0aDo2NTBweDtyaWdo
dDo4cHg7LW1vei1ib3JkZXItcmFkaXVzOjJweDtib3JkZXItcmFkaXVzOjJweDstbW96LWJv
eC1zaGFkb3c6NHB4IDRweCAxMnB4IHJnYmEoMCwwLDAsMC40KTtib3gtc2hhZG93OjRweCA0
cHggMTJweCByZ2JhKDAsMCwwLDAuNCl9LmdiX2pkIGEsLmdiX2pkIGE6dmlzaXRlZHtjb2xv
cjojNWU5N2Y2O3RleHQtZGVjb3JhdGlvbjpub25lfS5nYl9yZHt0ZXh0LXRyYW5zZm9ybTp1
cHBlcmNhc2V9LmdiX3Nke3BhZGRpbmctbGVmdDo1MHB4fS5nYl90ZHtjb2xvcjojM2M0MDQz
O2ZvbnQtZmFtaWx5Okdvb2dsZSBTYW5zLFJvYm90byxSb2JvdG9EcmFmdCxIZWx2ZXRpY2Es
QXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6MTZweDtmb250LXdlaWdodDo1MDA7bGV0dGVy
LXNwYWNpbmc6LjFweDtsaW5lLWhlaWdodDoyMHB4O21hcmdpbjowO21hcmdpbi1ib3R0b206
MTJweH0uZ2JfZGQgYS5nYl92ZHt0ZXh0LWRlY29yYXRpb246bm9uZTtjb2xvcjojNWU5N2Y2
fS5nYl9kZCBhLmdiX3ZkOnZpc2l0ZWR7Y29sb3I6IzVlOTdmNn0uZ2JfZGQgYS5nYl92ZDpo
b3ZlciwuZ2JfZGQgYS5nYl92ZDphY3RpdmV7dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZX0u
Z2Jfd2R7cG9zaXRpb246YWJzb2x1dGU7YmFja2dyb3VuZDp0cmFuc3BhcmVudDt0b3A6LTk5
OXB4O3otaW5kZXg6LTE7dmlzaWJpbGl0eTpoaWRkZW47bWFyZ2luLXRvcDoxcHg7bWFyZ2lu
LWxlZnQ6MXB4fSNnYiAuZ2JfZmR7bWFyZ2luOjB9LmdiX2ZkIC5nYl9wYntiYWNrZ3JvdW5k
OiM0ZDkwZmU7Ym9yZGVyOjJweCBzb2xpZCB0cmFuc3BhcmVudDtib3gtc2l6aW5nOmJvcmRl
ci1ib3g7Zm9udC13ZWlnaHQ6NTAwO21hcmdpbi10b3A6MjFweDttaW4td2lkdGg6NzBweDt0
ZXh0LWFsaWduOmNlbnRlcjstbW96LW9zeC1mb250LXNtb290aGluZzpncmF5c2NhbGV9Lmdi
X2ZkIGEuZ2JfMXtiYWNrZ3JvdW5kOiMxYTczZTg7LW1vei1ib3JkZXItcmFkaXVzOjRweDti
b3JkZXItcmFkaXVzOjRweDtjb2xvcjojZmZmZmZmO2ZvbnQtZmFtaWx5Okdvb2dsZSBTYW5z
LFJvYm90byxSb2JvdG9EcmFmdCxIZWx2ZXRpY2EsQXJpYWwsc2Fucy1zZXJpZjtmb250LXNp
emU6MTRweDtmb250LXdlaWdodDo1MDA7bGV0dGVyLXNwYWNpbmc6LjI1cHg7bGluZS1oZWln
aHQ6MTZweDtwYWRkaW5nOjhweCAyMnB4Oy1tb3otb3N4LWZvbnQtc21vb3RoaW5nOmdyYXlz
Y2FsZX0uZ2JfZmQgYS5nYl8xLmdiX3hke2JhY2tncm91bmQ6I2Q5MzAyNX0uZ2JfZmQgYS5n
Yl8xLmdiX3hkOmhvdmVye2JhY2tncm91bmQtY29sb3I6I2NjMzEyN30uZ2JfZmQgYS5nYl8x
LmdiX3hkOmZvY3VzLC5nYl9mZCBhLmdiXzEuZ2JfeGQ6Zm9jdXM6aG92ZXJ7YmFja2dyb3Vu
ZC1jb2xvcjojYjMzMzJjfS5nYl9mZCBhLmdiXzEuZ2JfeGQ6YWN0aXZlLC5nYl9mZCBhLmdi
XzEuZ2JfeGQ6Zm9jdXM6YWN0aXZle2JhY2tncm91bmQtY29sb3I6I2E2MzQyZX0uZ2JfZmQ6
bm90KC5nYl9wZCkgYS5nYl8xe2Zsb2F0OnJpZ2h0fSNnYiAuZ2JfZmQgYS5nYl9wYi5nYl9w
Yntjb2xvcjojZmZmZmZmO2N1cnNvcjpwb2ludGVyfS5nYl9mZCAuZ2JfcGI6aG92ZXJ7YmFj
a2dyb3VuZDojMzU3YWU4O2JvcmRlci1jb2xvcjojMmY1YmI3fS5nYl95ZCwuZ2JfcWR7ZGlz
cGxheTp0YWJsZS1jZWxsfS5nYl95ZHt2ZXJ0aWNhbC1hbGlnbjptaWRkbGV9LmdiX3lkIGlt
Z3toZWlnaHQ6NDhweDtwYWRkaW5nLWxlZnQ6NHB4O3BhZGRpbmctcmlnaHQ6MjBweDt3aWR0
aDo0OHB4fS5nYl9xZHtwYWRkaW5nLWxlZnQ6MTNweDt3aWR0aDoxMDAlfS5nYl9mZCAuZ2Jf
cWR7cGFkZGluZy10b3A6NHB4O21pbi13aWR0aDozMjZweDtwYWRkaW5nLWxlZnQ6MDt3aWR0
aDozMjZweH0uZ2JfZmQuZ2JfemQgLmdiX3Fke21pbi13aWR0aDoyNTRweDt3aWR0aDoyNTRw
eH0uZ2JfZmQ6bm90KC5nYl9wZCkgLmdiX3Fke3BhZGRpbmctdG9wOjMycHh9LmdiX0Fke2Rp
c3BsYXk6YmxvY2s7ZGlzcGxheTppbmxpbmUtYmxvY2s7cGFkZGluZzoxZW0gMCAwIDA7cG9z
aXRpb246cmVsYXRpdmU7d2lkdGg6MTAwJX0uZ2JfQmR7Y29sb3I6I2ZmMDAwMDtmb250LXN0
eWxlOml0YWxpYzttYXJnaW46MDtwYWRkaW5nLWxlZnQ6NDZweH0uZ2JfQWQgLmdiX0Nke2Zs
b2F0OnJpZ2h0O21hcmdpbjotMjBweCAwO3dpZHRoOi1tb3otY2FsYygxMDAlIC0gNDZweCk7
d2lkdGg6Y2FsYygxMDAlIC0gNDZweCl9LmdiX0RkIHN2Z3tmaWxsOmdyZXl9LmdiX0RkLmdi
X0VkIHN2Z3tmaWxsOiM0Mjg1ZjR9LmdiX0FkIC5nYl9DZCBsYWJlbDphZnRlcntiYWNrZ3Jv
dW5kLWNvbG9yOiM0Mjg1ZjR9LmdiX0Rke2Rpc3BsYXk6aW5saW5lO2Zsb2F0OnJpZ2h0O21h
cmdpbi1yaWdodDoyMnB4O3Bvc2l0aW9uOnJlbGF0aXZlO3RvcDoycHh9LmdiX0lke2NvbG9y
OiNmZmZmZmY7Zm9udC1zaXplOjEzcHg7Zm9udC13ZWlnaHQ6Ym9sZDtoZWlnaHQ6MjVweDts
aW5lLWhlaWdodDoxOXB4O3BhZGRpbmctdG9wOjVweDtwYWRkaW5nLWxlZnQ6MTJweDtwb3Np
dGlvbjpyZWxhdGl2ZTtiYWNrZ3JvdW5kLWNvbG9yOiM0ZDkwZmV9LmdiX0lkIC5nYl9KZHtj
b2xvcjojZmZmZmZmO2N1cnNvcjpkZWZhdWx0O2ZvbnQtc2l6ZToyMnB4O2ZvbnQtd2VpZ2h0
Om5vcm1hbDtwb3NpdGlvbjphYnNvbHV0ZTtyaWdodDoxMnB4O3RvcDo1cHh9LmdiX0lkIC5n
Yl9uZCwuZ2JfSWQgLmdiX2tke2NvbG9yOiNmZmZmZmY7ZGlzcGxheTppbmxpbmUtYmxvY2s7
Zm9udC1zaXplOjExcHg7bWFyZ2luLWxlZnQ6MTZweDtwYWRkaW5nOjAgOHB4O3doaXRlLXNw
YWNlOm5vd3JhcH0uZ2JfS2R7YmFja2dyb3VuZDpub25lO2JhY2tncm91bmQtaW1hZ2U6LW1v
ei1saW5lYXItZ3JhZGllbnQodG9wLHJnYmEoMCwwLDAsMC4xNikscmdiYSgwLDAsMCwwLjIp
KTtiYWNrZ3JvdW5kLWltYWdlOmxpbmVhci1ncmFkaWVudCh0b3AscmdiYSgwLDAsMCwwLjE2
KSxyZ2JhKDAsMCwwLDAuMikpO2JhY2tncm91bmQtaW1hZ2U6LW1vei1saW5lYXItZ3JhZGll
bnQodG9wLHJnYmEoMCwwLDAsMC4xNikscmdiYSgwLDAsMCwwLjIpKTstbW96LWJvcmRlci1y
YWRpdXM6MnB4O2JvcmRlci1yYWRpdXM6MnB4O2JvcmRlcjoxcHggc29saWQgI2RjZGNkYzti
b3JkZXI6MXB4IHNvbGlkIHJnYmEoMCwwLDAsMC4xKTtjdXJzb3I6ZGVmYXVsdCFpbXBvcnRh
bnQ7ZmlsdGVyOnByb2dpZDpEWEltYWdlVHJhbnNmb3JtLk1pY3Jvc29mdC5ncmFkaWVudChz
dGFydENvbG9yc3RyPSMxNjAwMDBmZixlbmRDb2xvcnN0cj0jMjIwMDAwZmYpO3RleHQtZGVj
b3JhdGlvbjpub25lIWltcG9ydGFudH0uZ2JfS2Q6aG92ZXJ7YmFja2dyb3VuZDpub25lO2Jh
Y2tncm91bmQtaW1hZ2U6LW1vei1saW5lYXItZ3JhZGllbnQodG9wLHJnYmEoMCwwLDAsMC4x
NCkscmdiYSgwLDAsMCwwLjIpKTtiYWNrZ3JvdW5kLWltYWdlOmxpbmVhci1ncmFkaWVudCh0
b3AscmdiYSgwLDAsMCwwLjE0KSxyZ2JhKDAsMCwwLDAuMikpO2JhY2tncm91bmQtaW1hZ2U6
LW1vei1saW5lYXItZ3JhZGllbnQodG9wLHJnYmEoMCwwLDAsMC4xNCkscmdiYSgwLDAsMCww
LjIpKTtib3JkZXI6MXB4IHNvbGlkIHJnYmEoMCwwLDAsMC4yKTtib3gtc2hhZG93OjAgMXB4
IDFweCByZ2JhKDAsMCwwLDAuMSk7LW1vei1ib3gtc2hhZG93OjAgMXB4IDFweCByZ2JhKDAs
MCwwLDAuMSk7ZmlsdGVyOnByb2dpZDpEWEltYWdlVHJhbnNmb3JtLk1pY3Jvc29mdC5ncmFk
aWVudChzdGFydENvbG9yc3RyPSMxNDAwMDAwMCxlbmRDb2xvcnN0cj0jMjIwMDAwMDApfS5n
Yl9LZDphY3RpdmV7Ym94LXNoYWRvdzppbnNldCAwIDFweCAycHggcmdiYSgwLDAsMCwwLjMp
Oy1tb3otYm94LXNoYWRvdzppbnNldCAwIDFweCAycHggcmdiYSgwLDAsMCwwLjMpfS5nYl9q
YSAuZ2JfV3tjb2xvcjojNDI4NWY0fS5nYl9qYSAuZ2JfWHtjb2xvcjojZmZmfS5nYl9qYSAu
Z2JfcGI6bm90KC5nYl9QZSk6Zm9jdXN7b3V0bGluZTpub25lfS5nYl9pZiwuZ2JfamYsLmdi
X2tme2Rpc3BsYXk6bm9uZX0uZ2JfRmV7aGVpZ2h0OjQ4cHg7bWF4LXdpZHRoOjcyMHB4fS5n
Yl9aZC5nYl9PZTpub3QoLmdiX0VlKSAuZ2JfRmV7bWF4LXdpZHRoOjEwMCU7ZmxleDoxIDEg
YXV0b30uZ2JfWGQ+LmdiX1RjIC5nYl9GZXtkaXNwbGF5OnRhYmxlLWNlbGw7dmVydGljYWwt
YWxpZ246bWlkZGxlO3dpZHRoOjEwMCV9LmdiX1pkLmdiX09lIC5nYl9GZSAuZ2JfU2V7bWFy
Z2luLWxlZnQ6MDttYXJnaW4tcmlnaHQ6MH0uZ2JfU2V7YmFja2dyb3VuZDojZjFmM2Y0O2Jv
cmRlcjoxcHggc29saWQgdHJhbnNwYXJlbnQ7LW1vei1ib3JkZXItcmFkaXVzOjhweDtib3Jk
ZXItcmFkaXVzOjhweDttYXJnaW4tbGVmdDphdXRvO21hcmdpbi1yaWdodDphdXRvO21heC13
aWR0aDo3MjBweDtwb3NpdGlvbjpyZWxhdGl2ZTstbW96LXRyYW5zaXRpb246YmFja2dyb3Vu
ZCAxMDBtcyBlYXNlLWluLHdpZHRoIDEwMG1zIGVhc2Utb3V0O3RyYW5zaXRpb246YmFja2dy
b3VuZCAxMDBtcyBlYXNlLWluLHdpZHRoIDEwMG1zIGVhc2Utb3V0fS5nYl9TZS5nYl9sZnst
bW96LWJvcmRlci1yYWRpdXM6OHB4IDhweCAwIDA7Ym9yZGVyLXJhZGl1czo4cHggOHB4IDAg
MH0uZ2Jfc2MgLmdiX1Nle2JhY2tncm91bmQ6cmdiYSgyNDEsMjQzLDI0NCwwLjI0KX0uZ2Jf
U2UgYnV0dG9ue2JhY2tncm91bmQ6bm9uZTtib3JkZXI6bm9uZTtjdXJzb3I6cG9pbnRlcjtv
dXRsaW5lOm5vbmU7cGFkZGluZzowIDVweDtsaW5lLWhlaWdodDowfS5nYl9TZTpub3QoLmdi
X0VlKSBidXR0b257cGFkZGluZzowIDVweH0uZ2JfU2UgYnV0dG9uIHN2ZywuZ2JfU2UgYnV0
dG9uIGltZ3twYWRkaW5nOjhweDttYXJnaW46M3B4fS5nYl9TZS5nYl9FZSBidXR0b24gc3Zn
e21hcmdpbi1sZWZ0OjFweDttYXJnaW4tcmlnaHQ6MXB4fS5nYl9tZi5nYl9uZiwuZ2Jfb2Yu
Z2JfbmZ7cGFkZGluZy1sZWZ0OjJweDtwYWRkaW5nLXJpZ2h0OjJweH0uZ2Jfb2Z7ZGlzcGxh
eTpub25lfS5nYl9tZiwuZ2Jfb2Z7ZmxvYXQ6bGVmdDtwb3NpdGlvbjphYnNvbHV0ZTt0b3A6
MH0uZ2JfcGZ7cG9zaXRpb246YWJzb2x1dGU7cmlnaHQ6MDtjdXJzb3I6ZGVmYXVsdDt2aXNp
YmlsaXR5OmhpZGRlbjt0b3A6MDstbW96LXRyYW5zaXRpb246b3BhY2l0eSAyNTBtcyBlYXNl
LW91dDt0cmFuc2l0aW9uOm9wYWNpdHkgMjUwbXMgZWFzZS1vdXR9LmdiX3FmIC5nYl9wZnty
aWdodDozN3B4fS5nYl9wZi5nYl9yZnt2aXNpYmlsaXR5OmluaGVyaXR9LmdiX3Nme3Bvc2l0
aW9uOmFic29sdXRlO3JpZ2h0OjA7dG9wOjB9LmdiX3Rme2hlaWdodDo0NnB4O3BhZGRpbmc6
MDttYXJnaW4tbGVmdDo1NnB4O21hcmdpbi1yaWdodDo0OXB4O292ZXJmbG93OmhpZGRlbn0u
Z2JfcWYgLmdiX3Rme21hcmdpbi1yaWdodDo4NXB4fS5nYl9kZntiYWNrZ3JvdW5kOnRyYW5z
cGFyZW50O2JvcmRlcjpub25lO2ZvbnQ6bm9ybWFsIDE2cHggR29vZ2xlIFNhbnMsUm9ib3Rv
LFJvYm90b0RyYWZ0LEhlbHZldGljYSxBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtdmFyaWFudC1s
aWdhdHVyZXM6bm9uZTtoZWlnaHQ6NDZweDtvdXRsaW5lOm5vbmU7d2lkdGg6MTAwJTstbW96
LWJveC1zaXppbmc6Ym9yZGVyLWJveDtib3gtc2l6aW5nOmJvcmRlci1ib3h9LmdiX25mLmdi
X3RmIC5nYl9kZi5nYl91ZntwYWRkaW5nLWxlZnQ6MnB4fS5nYl9zYyAuZ2JfZGZ7Y29sb3I6
cmdiYSgyNTUsMjU1LDI1NSwwLjg3KX0uZ2JfZGY6bm90KC5nYl91Zil7cGFkZGluZzoxMXB4
IDB9LmdiX2RmLmdiX3Vme3BhZGRpbmc6MH0uZ2JfdWZ7aGVpZ2h0OjQ2cHg7bGluZS1oZWln
aHQ6NDZweH0uZ2JfU2U6bm90KC5nYl9UZSkgaW5wdXQ6Oi1tb3otcGxhY2Vob2xkZXJ7Y29s
b3I6cmdiYSgwLDAsMCwwLjU0KX0uZ2Jfc2MgLmdiX1NlOm5vdCguZ2JfVGUpIGlucHV0Ojot
bW96LXBsYWNlaG9sZGVye2NvbG9yOnJnYmEoMjU1LDI1NSwyNTUsMC44Nyl9LmdiX1NlLmdi
X0VlOm5vdCguZ2JfTCl7YmFja2dyb3VuZDp0cmFuc3BhcmVudDtmbG9hdDpyaWdodDstbW96
LWJveC1zaGFkb3c6bm9uZTtib3gtc2hhZG93Om5vbmV9LmdiX1NlLmdiX0VlOm5vdCguZ2Jf
TCkgLmdiX3RmLC5nYl9TZS5nYl9FZTpub3QoLmdiX0wpIC5nYl9wZiwuZ2JfU2UuZ2JfRWU6
bm90KC5nYl9MKSAuZ2Jfc2Z7ZGlzcGxheTpub25lfS5nYl9TZS5nYl9FZS5nYl9Me21hcmdp
bi1sZWZ0OjA7cG9zaXRpb246YWJzb2x1dGU7d2lkdGg6YXV0b30uZ2JfU2UuZ2JfRWUuZ2Jf
TCAuZ2JfbWZ7ZGlzcGxheTpub25lfS5nYl9TZS5nYl9FZSAuZ2JfbWZ7cGFkZGluZzowO3Bv
c2l0aW9uOnN0YXRpY30uZ2JfU2UuZ2JfRWUuZ2JfTCAuZ2Jfb2Z7ZGlzcGxheTpibG9ja30u
Z2JfamEuZ2JfRWMgLmdiX1RjLmdiX0RlOm5vdCguZ2JfRWUpIC5nYl9GZSwuZ2JfamEuZ2Jf
RWMgLmdiX1RjLmdiX0hlLmdiX0llOm5vdCguZ2JfRWUpIC5nYl9GZSwuZ2JfamEuZ2JfVGQg
LmdiX1RjOm5vdCguZ2JfRGUpOm5vdCguZ2JfRWUpIC5nYl9GZXtwYWRkaW5nLXJpZ2h0OjMw
cHh9LmdiX2phLmdiX0VjIC5nYl9UYy5nYl9JZTpub3QoLmdiX0VlKSAuZ2JfRmUsLmdiX2ph
LmdiX0VjIC5nYl9UYy5nYl9IZS5nYl9EZTpub3QoLmdiX0VlKSAuZ2JfRmV7cGFkZGluZy1s
ZWZ0OjMwcHh9LmdiX1RjOm5vdCguZ2JfRWUpIC5nYl9GZXtwYWRkaW5nLWxlZnQ6MTBweDtw
YWRkaW5nLXJpZ2h0OjEwcHg7d2lkdGg6MTAwJTtmbGV4OjEgMSBhdXRvfS5nYl9GZS5nYl93
YXtkaXNwbGF5Om5vbmV9LmdiX1pkLmdiX0plPi5nYl9wZXttaW4td2lkdGg6aW5pdGlhbCFp
bXBvcnRhbnQ7bWluLXdpZHRoOmF1dG8haW1wb3J0YW50fS5nYl9LZSwuZ2JfTGU6bm90KC5n
Yl9VZCk6bm90KC5nYl9KZSkuZ2JfTWV7anVzdGlmeS1jb250ZW50OmZsZXgtZW5kfS5nYl9M
ZTpub3QoLmdiX1VkKTpub3QoLmdiX0plKXtqdXN0aWZ5LWNvbnRlbnQ6Y2VudGVyfS5nYl9M
ZTpub3QoLmdiX1VkKTpub3QoLmdiX0plKS5nYl9OZSwuZ2JfTGU6bm90KC5nYl9VZCk6bm90
KC5nYl9KZSkuZ2JfT2V7anVzdGlmeS1jb250ZW50OmZsZXgtc3RhcnR9LmdiX1pkLmdiX1Vk
LC5nYl9aZC5nYl9KZXtqdXN0aWZ5LWNvbnRlbnQ6c3BhY2UtYmV0d2Vlbn0uZ2JfamEuZ2Jf
a2EgLmdiXzBjLC5nYl9OZC5nYl9VZC5nYl9WZD4uZ2JfMGN7ZmxleDoxIDEgYXV0bztvdmVy
ZmxvdzpoaWRkZW59LmdiX2phLmdiX2thIC5nYl9aZCwuZ2JfTmQuZ2JfVWQuZ2JfVmQ+Lmdi
X1pke2ZsZXg6MCAwIGF1dG99LmdiX3Zme3Bvc2l0aW9uOnJlbGF0aXZlfS5nYl93ZnttYXJn
aW46MCA1OHB4O3BhZGRpbmc6MDt0ZXh0LWFsaWduOmNlbnRlcjt3aGl0ZS1zcGFjZTpub3dy
YXA7LW1vei11c2VyLXNlbGVjdDpub25lO292ZXJmbG93OmhpZGRlbn0uZ2Jfa2EgLmdiX3dm
LC5nYl9NZCAuZ2Jfd2Z7bWFyZ2luOjAgMjRweH0uZ2JfeGYsLmdiX3lme2Rpc3BsYXk6bm9u
ZTtoZWlnaHQ6NDhweDtwb3NpdGlvbjphYnNvbHV0ZTt0b3A6MDt3aWR0aDoxMDBweH0uZ2Jf
dmYuZ2JfemYgLmdiX3hmLC5nYl92Zi5nYl9BZiAuZ2JfeWZ7ZGlzcGxheTpibG9ja30uZ2Jf
eWZ7cG9pbnRlci1ldmVudHM6bm9uZX0uZ2JfeGZ7cG9pbnRlci1ldmVudHM6bm9uZTtsZWZ0
OjB9LmdiX3lme3JpZ2h0OjB9LmdiX0Jme2N1cnNvcjpwb2ludGVyO2Rpc3BsYXk6aW5saW5l
LXRhYmxlO291dGxpbmU6bm9uZX0uZ2JfQmY+LmdiX0Nme2JvcmRlcjowIHNvbGlkIHRyYW5z
cGFyZW50O2JvcmRlci13aWR0aDoycHggMDtkaXNwbGF5OnRhYmxlLWNlbGw7aGVpZ2h0OjQ0
cHg7cGFkZGluZzowIDIycHg7b3BhY2l0eTouNzt0ZXh0LWRlY29yYXRpb246bm9uZTt0ZXh0
LXRyYW5zZm9ybTp1cHBlcmNhc2U7dmVydGljYWwtYWxpZ246bWlkZGxlfS5nYl9CZi5nYl9P
Yzpmb2N1c3tiYWNrZ3JvdW5kLWNvbG9yOnJnYmEoMCwwLDAsLjE2KX0uZ2JfQmYuZ2JfT2M+
LmdiX0Nme2JvcmRlci1ib3R0b20tY29sb3I6YmxhY2s7b3BhY2l0eToxfS5nYl9zYyAuZ2Jf
QmYuZ2JfT2M+LmdiX0Nme2JvcmRlci1ib3R0b20tY29sb3I6d2hpdGV9LmdiXzVkIC5nYl9C
Zi5nYl9PYz4uZ2JfQ2Z7Ym9yZGVyLWJvdHRvbS1jb2xvcjpibGFja30uZ2Jfd2YuZ2JfRGY+
LmdiX0JmLmdiX09jPi5nYl9DZntib3JkZXItYm90dG9tLWNvbG9yOiM0Mjg1ZjQ7Y29sb3I6
IzQyODVmNH1zZW50aW5lbHt9LmdiaWk6OmJlZm9yZXtjb250ZW50OnVybChodHRwczovL2xo
My5nb29nbGV1c2VyY29udGVudC5jb20vLVVUZWdGOG5pU2ZNL0FBQUFBQUFBQUFJL0FBQUFB
QUFBQUFBL0FDSGkzcmRPaXlsU24xb2JmNHVHbWliSUJHSnZsTDh2a1EuQ01JRC9zMzItYy9w
aG90by5qcGcpfS5nYmlwOjpiZWZvcmV7Y29udGVudDp1cmwoaHR0cHM6Ly9saDMuZ29vZ2xl
dXNlcmNvbnRlbnQuY29tLy1VVGVnRjhuaVNmTS9BQUFBQUFBQUFBSS9BQUFBQUFBQUFBQS9B
Q0hpM3JkT2l5bFNuMW9iZjR1R21pYklCR0p2bEw4dmtRLkNNSUQvczk2LWMvcGhvdG8uanBn
KX1AbWVkaWEgKG1pbi1yZXNvbHV0aW9uOjEuMjVkcHB4KSwoLW8tbWluLWRldmljZS1waXhl
bC1yYXRpbzo1LzQpLCgtd2Via2l0LW1pbi1kZXZpY2UtcGl4ZWwtcmF0aW86MS4yNSksKG1p
bi1kZXZpY2UtcGl4ZWwtcmF0aW86MS4yNSl7LmdiaWk6OmJlZm9yZXtjb250ZW50OnVybCho
dHRwczovL2xoMy5nb29nbGV1c2VyY29udGVudC5jb20vLVVUZWdGOG5pU2ZNL0FBQUFBQUFB
QUFJL0FBQUFBQUFBQUFBL0FDSGkzcmRPaXlsU24xb2JmNHVHbWliSUJHSnZsTDh2a1EuQ01J
RC9zNjQtYy9waG90by5qcGcpfS5nYmlwOjpiZWZvcmV7Y29udGVudDp1cmwoaHR0cHM6Ly9s
aDMuZ29vZ2xldXNlcmNvbnRlbnQuY29tLy1VVGVnRjhuaVNmTS9BQUFBQUFBQUFBSS9BQUFB
QUFBQUFBQS9BQ0hpM3JkT2l5bFNuMW9iZjR1R21pYklCR0p2bEw4dmtRLkNNSUQvczE5Mi1j
L3Bob3RvLmpwZyl9fQ0KPC9zdHlsZT48c2NyaXB0IG5vbmNlPSJqSmxCVnE4Y0FxTWJSQTlz
elVxR0V3Ij47dGhpcy5nYmFyXz17Q09ORklHOltbWzAsInd3dy5nc3RhdGljLmNvbSIsIm9n
LnF0bS5lbl9VUy55N00tUmdwdXpaNC5PIiwiZnIiLCJmciIsIjE5MiIsMCxbNCwyLCIuNDAu
NDAuNDAuNzYuNDAuNDAuNDAuIiwiIiwiMTMwMDEwMiwzNzAwMjQyIiwiMjc2MzgyMzUwIiwi
MCJdLG51bGwsIkl4cTRYWWZOTnBya2d3Zm9qN213QWciLG51bGwsMCwib2cucXRtLi0xYzdi
cWJmZ2p3aDVqLkwuRjQuTyIsIkFBMllyVHZvWWpTdVFISUc3TGRQMURUMTlSUTBFVExBaEEi
LCJBQTJZclR2dmxIZ0ZQWTVQMEYyUy0xaFZwcGdYQjVtU2pnIiwiIiwyLDEsMjAwLCJGUkEi
LG51bGwsbnVsbCwiMjY5IiwiMTkyIiwxXSxudWxsLFsxLDAuMTAwMDAwMDAxNDkwMTE2MSwy
LDEsMV0sWzEsMC4wMDEwMDAwMDAwNDc0OTc0NTEsMV0sWzEsMCwwLG51bGwsIjAiLCJhbGV4
YW5kcnUucGV0cmVzY3VAZ21haWwuY29tIiwiIiwiQUpQRzlkNmRTMTN0TGVIMU9MWTZmdnhZ
TVh1aXQySjQ5QXJyaEdlZTRuZl92aDZpXzdLbGFmbEY1cWZRRzJiQU9hUlZUT3I0cW9KZU5F
M2NsRzNJdFZvcDJURnl2VkJWclEiXSxbMCwxLCIiLDEsMSwwLDAsMSwwLDAsMCwwLDEsbnVs
bCwwLDAsbnVsbCxudWxsLDEsMCwwLCIiLCIiLCIiLCIiLCIiLCIiLG51bGwsMCwwLDAsMyww
LG51bGwsbnVsbCxudWxsLCJyZ2JhKDMyLDMzLDM2LDEpIiwicmdiYSgyNTUsMjU1LDI1NSww
Ljk2KSIsMCwwLDFdLFsiJTEkcyAocGFyIGTDqWZhdXQpIiwiQ29tcHRlIGRlIG1hcnF1ZSIs
MSwiJTEkcyAoZMOpbMOpZ3XDqSkiLDEsbnVsbCw5NiwiL2FsZXJ0L250LzE1NzIzNDUzNTUw
MDA/cmZuPTI3XHUwMDI2cmZuYz0xXHUwMDI2ZWlkPS0zNTM3NTc4NTE0MzgzMzIzMTgxXHUw
MDI2ZXQ9MFx1MDAyNnBsaT0xXHUwMDI2YXV0aHVzZXI9JGF1dGh1c2VyXHUwMDI2cGFnZUlk
PSRwYWdlSWQiLG51bGwsbnVsbCxudWxsLDEsImh0dHBzOi8vYWNjb3VudHMuZ29vZ2xlLmNv
bS9MaXN0QWNjb3VudHM/YXV0aHVzZXI9MFx1MDAyNmxpc3RQYWdlcz0xXHUwMDI2ZndwdXQ9
MTBcdTAwMjZyZHI9Mlx1MDAyNnBpZD0xOTJcdTAwMjZncHNpYT0xXHUwMDI2c291cmNlPW9n
Ylx1MDAyNm1vPTFcdTAwMjZtbj0xXHUwMDI2aGw9ZnIiLDAsImRhc2hib2FyZCIsbnVsbCxu
dWxsLG51bGwsbnVsbCwiUHJvZmlsIiwiIiwxLG51bGwsIkTDqWNvbm5lY3TDqSIsImh0dHBz
Oi8vYWNjb3VudHMuZ29vZ2xlLmNvbS9BY2NvdW50Q2hvb3Nlcj9zb3VyY2U9b2diXHUwMDI2
Y29udGludWU9JGNvbnRpbnVlXHUwMDI2RW1haWw9JGVtYWlsIiwiaHR0cHM6Ly9hY2NvdW50
cy5nb29nbGUuY29tL1JlbW92ZUxvY2FsQWNjb3VudD9zb3VyY2U9b2diIiwiU1VQUFJJTUVS
IiwiQ09OTkVYSU9OIiwwLDAsMSwwLDEsMCwwLCIwMDA3NzBGMjAzN0I0NDFBNzc0RUJBRTVG
NTExQzYyQzFFRDM5RjAxNzA5RjE3NzIyQTo6MTU3MjM0NjQwMzg5NiIsbnVsbCwzLCJTZXNz
aW9uIGFycml2w6llIMOgIGV4cGlyYXRpb24iLG51bGwsMCwiaHR0cHM6Ly9kb2NzLmdvb2ds
ZS5jb20vcGlja2VyIiwiVmlzaXRldXIiLG51bGwsIlBhciBkw6lmYXV0IiwiRMOpbMOpZ3XD
qSIsIlNlIGTDqWNvbm5lY3RlciBkZSB0b3VzIGxlcyBjb21wdGVzIiwwXSxudWxsLFsiMSIs
ImdjaV85MWYzMDc1NWQ2YTZiNzg3ZGNjMmE0MDYyZTZlOTgyNC5qcyIsImdvb2dsZWFwaXMu
Y2xpZW50OnBsdXNvbmU6Z2FwaS5pZnJhbWVzIiwiMCIsImZyIl0sbnVsbCxudWxsLFswLCIi
LG51bGwsIiIsMCwiRXJyZXVyIGxvcnMgZHUgY2hhcmdlbWVudCBkZXMgYXBwbGljYXRpb25z
IE1hcmtldHBsYWNlLiIsIlZvdXMgbmUgZGlzcG9zZXogZCdhdWN1bmUgYXBwbGljYXRpb24g
TWFya2V0cGxhY2UuIiwxLG51bGwsbnVsbCxudWxsLG51bGwsMCxbWzEsIiUxJHMgc3VyICUy
JHMiLCIlMSRzIHN1ciAlMiRzIGRhbnMgbGEgc2VjdGlvbiBQbHVzIl1dLG51bGwsMF0sWzEs
bnVsbCxudWxsLCJbW1tbMixbMTkyXV0sWzIsWzFdXSxbMixbOF1dLFsyLFszNl1dLFsyLFs3
OF1dLFsyLFsyM11dLFsyLFs0OV1dLFsyLFsxMTldXSxbMixbMjRdXSxbMixbNTFdXSxbMixb
MzFdXV0sW1syLFs2XV0sWzIsWzI1XV0sWzIsWzEwXV0sWzIsWzMwXV0sWzIsWzUzXV0sWzIs
WzMwMF1dXV1dIixbImh0dHBzIiwib2dzLmdvb2dsZS5jb20iLDAsIi91LzAiLCJydD1qXHUw
MDI2c291cmNlaWQ9MTkyIixbIi91LzAvXy9vZy9jdXN0b21pemF0aW9uL2dldCIsIiJdLFsi
L3UvMC9fL29nL2N1c3RvbWl6YXRpb24vc2V0IiwiIl0sWyIvdS8wL18vb2cvY3VzdG9taXph
dGlvbi9yZW1vdmUiLCIiXV0sIkFKUEc5ZDZkUzEzdExlSDFPTFk2ZnZ4WU1YdWl0Mko0OUFy
cmhHZWU0bmZfdmg2aV83S2xhZmxGNXFmUUcyYkFPYVJWVE9yNHFvSmVORTNjbEczSXRWb3Ay
VEZ5dlZCVnJRIl0sWyJtOy9fL3Njcy9hYmMtc3RhdGljL18vanMvaz1nYXBpLmdhcGkuZW4u
N2tXU3IyNHdYRmMuTy9kPTEvY3Q9emdtcy9ycz1BSHBPb28taTlyN0liQ1RVUWZKMHYtRlBo
UktSUzhhaWhRL209X19mZWF0dXJlc19fIiwiaHR0cHM6Ly9hcGlzLmdvb2dsZS5jb20iLCIi
LCIiLCIxIiwiIixudWxsLDEsImVzX3BsdXNvbmVfZ2NfMjAxOTEwMDEuMF9wMCIsImZyIixu
dWxsLDBdLFswLjAwOTk5OTk5OTc3NjQ4MjU4MiwiZnIiLCIxOTIiLFtudWxsLCIiLCIwIixu
dWxsLDEsNTE4NDAwMCxudWxsLG51bGwsIiIsMCwxLCIiLDAsMCwwLDAsMSwwXSxudWxsLFtb
IiIsIiIsIjAiLDAsMCwtMV1dLG51bGwsMCxudWxsLG51bGwsWyI1MDYxNDUxIiwiZ29vZ2xl
XFwuKGNvbXxydXxjYXxieXxrenxjb21cXC5teHxjb21cXC50cikkIiwxXV0sWzEsMSwwLDQw
NDAwLDE5MiwiRlJBIiwiZnIiLCIyNzYzODIzNTAuMCIsNywwLjAwOTk5OTk5OTc3NjQ4MjU4
MiwxLDAsbnVsbCxudWxsLDAsMCwiIixudWxsLG51bGwsMSwiSXhxNFhZZk5OcHJrZ3dmb2o3
bXdBZyJdLFtbbnVsbCxudWxsLG51bGwsImh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL29nL18v
anMvaz1vZy5xdG0uZW5fVVMueTdNLVJncHV6WjQuTy9ydD1qL209cWdsLHFfZCxxX3BjLHFh
d2QscWRpZCxxbWQscXNkLHFtdXRzZCxxYmcscWJkLHFhcGlkL2V4bT1xYWF3LHFhYnIscWFk
ZCxxYWlkLHFhbG8scWVicixxZWluLHFoYXcscWhicixxaGNoLHFoZ2EscWhpZCxxaGluLHFo
bG8scWhtbixxaHBjLHFocHIscWhzZixxaHRiLHFodHQvZD0xL2VkPTEvcnM9QUEyWXJUdm9Z
alN1UUhJRzdMZFAxRFQxOVJRMEVUTEFoQSJdLFtudWxsLG51bGwsbnVsbCwiaHR0cHM6Ly93
d3cuZ3N0YXRpYy5jb20vb2cvXy9zcy9rPW9nLnF0bS4tMWM3YnFiZmdqd2g1ai5MLkY0Lk8v
bT1xYXdkLHFkaWQscW1kL2V4Y209cWFhdyxxYWJyLHFhZGQscWFpZCxxYWxvLHFlYnIscWVp
bixxaGF3LHFoYnIscWhjaCxxaGdhLHFoaWQscWhpbixxaGxvLHFobW4scWhwYyxxaHByLHFo
c2YscWh0YixxaHR0L2Q9MS9lZD0xL2N0PXpnbXMvcnM9QUEyWXJUdnZsSGdGUFk1UDBGMlMt
MWhWcHBnWEI1bVNqZyJdXSxudWxsLG51bGwsWyIiXSxudWxsLFszMDAwMDAsIi91LzAiLCIv
dS8wL18vb2cvYm90Z3VhcmQvZ2V0IiwiQUpQRzlkNmRTMTN0TGVIMU9MWTZmdnhZTVh1aXQy
SjQ5QXJyaEdlZTRuZl92aDZpXzdLbGFmbEY1cWZRRzJiQU9hUlZUT3I0cW9KZU5FM2NsRzNJ
dFZvcDJURnl2VkJWclEiLCJodHRwcyIsMCwib2dzLmdvb2dsZS5jb20iLCJydD1qXHUwMDI2
c291cmNlaWQ9MTkyIiwiIiwiakpsQlZxOGNBcU1iUkE5c3pVcUdFdyIsIiIsMCwwLDFdLFtb
Im1vdXNlZG93biIsInRvdWNoc3RhcnQiLCJ0b3VjaG1vdmUiLCJ3aGVlbCIsImtleWRvd24i
XSwzMDAwMDBdXV0sfTt0aGlzLmdiYXJfPXRoaXMuZ2Jhcl98fHt9OyhmdW5jdGlvbihfKXt2
YXIgd2luZG93PXRoaXM7DQp0cnl7DQp2YXIgYWEsY2EsZGEsamEsa2EsbGEsbWEsbmEsRWEs
RmEsSGE7YWE9ZnVuY3Rpb24oYSl7dmFyIGM9MDtyZXR1cm4gZnVuY3Rpb24oKXtyZXR1cm4g
YzxhLmxlbmd0aD97ZG9uZTohMSx2YWx1ZTphW2MrK119Ontkb25lOiEwfX19O18uYmE9ZnVu
Y3Rpb24oYSl7dmFyIGM9InVuZGVmaW5lZCIhPXR5cGVvZiBTeW1ib2wmJlN5bWJvbC5pdGVy
YXRvciYmYVtTeW1ib2wuaXRlcmF0b3JdO3JldHVybiBjP2MuY2FsbChhKTp7bmV4dDphYShh
KX19O2NhPSJmdW5jdGlvbiI9PXR5cGVvZiBPYmplY3QuY3JlYXRlP09iamVjdC5jcmVhdGU6
ZnVuY3Rpb24oYSl7dmFyIGM9ZnVuY3Rpb24oKXt9O2MucHJvdG90eXBlPWE7cmV0dXJuIG5l
dyBjfTsNCmlmKCJmdW5jdGlvbiI9PXR5cGVvZiBPYmplY3Quc2V0UHJvdG90eXBlT2YpZGE9
T2JqZWN0LnNldFByb3RvdHlwZU9mO2Vsc2V7dmFyIGZhO2E6e3ZhciBoYT17UWc6ITB9LGlh
PXt9O3RyeXtpYS5fX3Byb3RvX189aGE7ZmE9aWEuUWc7YnJlYWsgYX1jYXRjaChhKXt9ZmE9
ITF9ZGE9ZmE/ZnVuY3Rpb24oYSxjKXthLl9fcHJvdG9fXz1jO2lmKGEuX19wcm90b19fIT09
Yyl0aHJvdyBuZXcgVHlwZUVycm9yKCJhYCIrYSk7cmV0dXJuIGF9Om51bGx9amE9ZGE7DQpf
LnA9ZnVuY3Rpb24oYSxjKXthLnByb3RvdHlwZT1jYShjLnByb3RvdHlwZSk7YS5wcm90b3R5
cGUuY29uc3RydWN0b3I9YTtpZihqYSlqYShhLGMpO2Vsc2UgZm9yKHZhciBkIGluIGMpaWYo
InByb3RvdHlwZSIhPWQpaWYoT2JqZWN0LmRlZmluZVByb3BlcnRpZXMpe3ZhciBlPU9iamVj
dC5nZXRPd25Qcm9wZXJ0eURlc2NyaXB0b3IoYyxkKTtlJiZPYmplY3QuZGVmaW5lUHJvcGVy
dHkoYSxkLGUpfWVsc2UgYVtkXT1jW2RdO2EuSz1jLnByb3RvdHlwZX07a2E9ImZ1bmN0aW9u
Ij09dHlwZW9mIE9iamVjdC5kZWZpbmVQcm9wZXJ0aWVzP09iamVjdC5kZWZpbmVQcm9wZXJ0
eTpmdW5jdGlvbihhLGMsZCl7YSE9QXJyYXkucHJvdG90eXBlJiZhIT1PYmplY3QucHJvdG90
eXBlJiYoYVtjXT1kLnZhbHVlKX07bGE9InVuZGVmaW5lZCIhPXR5cGVvZiB3aW5kb3cmJndp
bmRvdz09PXRoaXM/dGhpczoidW5kZWZpbmVkIiE9dHlwZW9mIGdsb2JhbCYmbnVsbCE9Z2xv
YmFsP2dsb2JhbDp0aGlzOw0KbWE9ZnVuY3Rpb24oYSxjKXtpZihjKXt2YXIgZD1sYTthPWEu
c3BsaXQoIi4iKTtmb3IodmFyIGU9MDtlPGEubGVuZ3RoLTE7ZSsrKXt2YXIgZj1hW2VdO2Yg
aW4gZHx8KGRbZl09e30pO2Q9ZFtmXX1hPWFbYS5sZW5ndGgtMV07ZT1kW2FdO2M9YyhlKTtj
IT1lJiZudWxsIT1jJiZrYShkLGEse2NvbmZpZ3VyYWJsZTohMCx3cml0YWJsZTohMCx2YWx1
ZTpjfSl9fTtuYT1mdW5jdGlvbihhLGMsZCl7aWYobnVsbD09YSl0aHJvdyBuZXcgVHlwZUVy
cm9yKCJiYCIrZCk7aWYoYyBpbnN0YW5jZW9mIFJlZ0V4cCl0aHJvdyBuZXcgVHlwZUVycm9y
KCJjYCIrZCk7cmV0dXJuIGErIiJ9Ow0KbWEoIlN0cmluZy5wcm90b3R5cGUuc3RhcnRzV2l0
aCIsZnVuY3Rpb24oYSl7cmV0dXJuIGE/YTpmdW5jdGlvbihjLGQpe3ZhciBlPW5hKHRoaXMs
Yywic3RhcnRzV2l0aCIpLGY9ZS5sZW5ndGgsZz1jLmxlbmd0aDtkPU1hdGgubWF4KDAsTWF0
aC5taW4oZHwwLGUubGVuZ3RoKSk7Zm9yKHZhciBoPTA7aDxnJiZkPGY7KWlmKGVbZCsrXSE9
Y1toKytdKXJldHVybiExO3JldHVybiBoPj1nfX0pO21hKCJOdW1iZXIuTUFYX1NBRkVfSU5U
RUdFUiIsZnVuY3Rpb24oKXtyZXR1cm4gOTAwNzE5OTI1NDc0MDk5MX0pO3ZhciBvYT1mdW5j
dGlvbigpe29hPWZ1bmN0aW9uKCl7fTtsYS5TeW1ib2x8fChsYS5TeW1ib2w9cGEpfSxxYT1m
dW5jdGlvbihhLGMpe3RoaXMuYj1hO2thKHRoaXMsImRlc2NyaXB0aW9uIix7Y29uZmlndXJh
YmxlOiEwLHdyaXRhYmxlOiEwLHZhbHVlOmN9KX07cWEucHJvdG90eXBlLnRvU3RyaW5nPWZ1
bmN0aW9uKCl7cmV0dXJuIHRoaXMuYn07DQp2YXIgcGE9ZnVuY3Rpb24oKXtmdW5jdGlvbiBh
KGQpe2lmKHRoaXMgaW5zdGFuY2VvZiBhKXRocm93IG5ldyBUeXBlRXJyb3IoImQiKTtyZXR1
cm4gbmV3IHFhKCJqc2NvbXBfc3ltYm9sXyIrKGR8fCIiKSsiXyIrYysrLGQpfXZhciBjPTA7
cmV0dXJuIGF9KCksc2E9ZnVuY3Rpb24oKXtvYSgpO3ZhciBhPWxhLlN5bWJvbC5pdGVyYXRv
cjthfHwoYT1sYS5TeW1ib2wuaXRlcmF0b3I9bGEuU3ltYm9sKCJTeW1ib2wuaXRlcmF0b3Ii
KSk7ImZ1bmN0aW9uIiE9dHlwZW9mIEFycmF5LnByb3RvdHlwZVthXSYma2EoQXJyYXkucHJv
dG90eXBlLGEse2NvbmZpZ3VyYWJsZTohMCx3cml0YWJsZTohMCx2YWx1ZTpmdW5jdGlvbigp
e3JldHVybiByYShhYSh0aGlzKSl9fSk7c2E9ZnVuY3Rpb24oKXt9fSxyYT1mdW5jdGlvbihh
KXtzYSgpO2E9e25leHQ6YX07YVtsYS5TeW1ib2wuaXRlcmF0b3JdPWZ1bmN0aW9uKCl7cmV0
dXJuIHRoaXN9O3JldHVybiBhfSx0YT1mdW5jdGlvbihhLGMpe3NhKCk7DQphIGluc3RhbmNl
b2YgU3RyaW5nJiYoYSs9IiIpO3ZhciBkPTAsZT17bmV4dDpmdW5jdGlvbigpe2lmKGQ8YS5s
ZW5ndGgpe3ZhciBmPWQrKztyZXR1cm57dmFsdWU6YyhmLGFbZl0pLGRvbmU6ITF9fWUubmV4
dD1mdW5jdGlvbigpe3JldHVybntkb25lOiEwLHZhbHVlOnZvaWQgMH19O3JldHVybiBlLm5l
eHQoKX19O2VbU3ltYm9sLml0ZXJhdG9yXT1mdW5jdGlvbigpe3JldHVybiBlfTtyZXR1cm4g
ZX07bWEoIkFycmF5LnByb3RvdHlwZS5rZXlzIixmdW5jdGlvbihhKXtyZXR1cm4gYT9hOmZ1
bmN0aW9uKCl7cmV0dXJuIHRhKHRoaXMsZnVuY3Rpb24oYyl7cmV0dXJuIGN9KX19KTttYSgi
QXJyYXkucHJvdG90eXBlLnZhbHVlcyIsZnVuY3Rpb24oYSl7cmV0dXJuIGE/YTpmdW5jdGlv
bigpe3JldHVybiB0YSh0aGlzLGZ1bmN0aW9uKGMsZCl7cmV0dXJuIGR9KX19KTsNCnZhciB1
YT1mdW5jdGlvbihhLGMpe3JldHVybiBPYmplY3QucHJvdG90eXBlLmhhc093blByb3BlcnR5
LmNhbGwoYSxjKX07DQptYSgiV2Vha01hcCIsZnVuY3Rpb24oYSl7ZnVuY3Rpb24gYygpe31m
dW5jdGlvbiBkKG0pe3ZhciBuPXR5cGVvZiBtO3JldHVybiJvYmplY3QiPT09biYmbnVsbCE9
PW18fCJmdW5jdGlvbiI9PT1ufWZ1bmN0aW9uIGUobSl7aWYoIXVhKG0sZykpe3ZhciBuPW5l
dyBjO2thKG0sZyx7dmFsdWU6bn0pfX1mdW5jdGlvbiBmKG0pe3ZhciBuPU9iamVjdFttXTtu
JiYoT2JqZWN0W21dPWZ1bmN0aW9uKHIpe2lmKHIgaW5zdGFuY2VvZiBjKXJldHVybiByO2Uo
cik7cmV0dXJuIG4ocil9KX1pZihmdW5jdGlvbigpe2lmKCFhfHwhT2JqZWN0LnNlYWwpcmV0
dXJuITE7dHJ5e3ZhciBtPU9iamVjdC5zZWFsKHt9KSxuPU9iamVjdC5zZWFsKHt9KSxyPW5l
dyBhKFtbbSwyXSxbbiwzXV0pO2lmKDIhPXIuZ2V0KG0pfHwzIT1yLmdldChuKSlyZXR1cm4h
MTtyWyJkZWxldGUiXShtKTtyLnNldChuLDQpO3JldHVybiFyLmhhcyhtKSYmND09ci5nZXQo
bil9Y2F0Y2godil7cmV0dXJuITF9fSgpKXJldHVybiBhOw0KdmFyIGc9IiRqc2NvbXBfaGlk
ZGVuXyIrTWF0aC5yYW5kb20oKTtmKCJmcmVlemUiKTtmKCJwcmV2ZW50RXh0ZW5zaW9ucyIp
O2YoInNlYWwiKTt2YXIgaD0wLGw9ZnVuY3Rpb24obSl7dGhpcy5iPShoKz1NYXRoLnJhbmRv
bSgpKzEpLnRvU3RyaW5nKCk7aWYobSl7bT1fLmJhKG0pO2Zvcih2YXIgbjshKG49bS5uZXh0
KCkpLmRvbmU7KW49bi52YWx1ZSx0aGlzLnNldChuWzBdLG5bMV0pfX07bC5wcm90b3R5cGUu
c2V0PWZ1bmN0aW9uKG0sbil7aWYoIWQobSkpdGhyb3cgRXJyb3IoImUiKTtlKG0pO2lmKCF1
YShtLGcpKXRocm93IEVycm9yKCJmYCIrbSk7bVtnXVt0aGlzLmJdPW47cmV0dXJuIHRoaXN9
O2wucHJvdG90eXBlLmdldD1mdW5jdGlvbihtKXtyZXR1cm4gZChtKSYmdWEobSxnKT9tW2dd
W3RoaXMuYl06dm9pZCAwfTtsLnByb3RvdHlwZS5oYXM9ZnVuY3Rpb24obSl7cmV0dXJuIGQo
bSkmJnVhKG0sZykmJnVhKG1bZ10sdGhpcy5iKX07bC5wcm90b3R5cGVbImRlbGV0ZSJdPQ0K
ZnVuY3Rpb24obSl7cmV0dXJuIGQobSkmJnVhKG0sZykmJnVhKG1bZ10sdGhpcy5iKT9kZWxl
dGUgbVtnXVt0aGlzLmJdOiExfTtyZXR1cm4gbH0pOw0KbWEoIk1hcCIsZnVuY3Rpb24oYSl7
aWYoZnVuY3Rpb24oKXtpZighYXx8ImZ1bmN0aW9uIiE9dHlwZW9mIGF8fCFhLnByb3RvdHlw
ZS5lbnRyaWVzfHwiZnVuY3Rpb24iIT10eXBlb2YgT2JqZWN0LnNlYWwpcmV0dXJuITE7dHJ5
e3ZhciBsPU9iamVjdC5zZWFsKHt4OjR9KSxtPW5ldyBhKF8uYmEoW1tsLCJzIl1dKSk7aWYo
InMiIT1tLmdldChsKXx8MSE9bS5zaXplfHxtLmdldCh7eDo0fSl8fG0uc2V0KHt4OjR9LCJ0
IikhPW18fDIhPW0uc2l6ZSlyZXR1cm4hMTt2YXIgbj1tLmVudHJpZXMoKSxyPW4ubmV4dCgp
O2lmKHIuZG9uZXx8ci52YWx1ZVswXSE9bHx8InMiIT1yLnZhbHVlWzFdKXJldHVybiExO3I9
bi5uZXh0KCk7cmV0dXJuIHIuZG9uZXx8NCE9ci52YWx1ZVswXS54fHwidCIhPXIudmFsdWVb
MV18fCFuLm5leHQoKS5kb25lPyExOiEwfWNhdGNoKHYpe3JldHVybiExfX0oKSlyZXR1cm4g
YTtzYSgpO3ZhciBjPW5ldyBXZWFrTWFwLGQ9ZnVuY3Rpb24obCl7dGhpcy5mPXt9Ow0KdGhp
cy5iPWcoKTt0aGlzLnNpemU9MDtpZihsKXtsPV8uYmEobCk7Zm9yKHZhciBtOyEobT1sLm5l
eHQoKSkuZG9uZTspbT1tLnZhbHVlLHRoaXMuc2V0KG1bMF0sbVsxXSl9fTtkLnByb3RvdHlw
ZS5zZXQ9ZnVuY3Rpb24obCxtKXtsPTA9PT1sPzA6bDt2YXIgbj1lKHRoaXMsbCk7bi5saXN0
fHwobi5saXN0PXRoaXMuZltuLmlkXT1bXSk7bi5ZYT9uLllhLnZhbHVlPW06KG4uWWE9e25l
eHQ6dGhpcy5iLCRiOnRoaXMuYi4kYixoZWFkOnRoaXMuYixrZXk6bCx2YWx1ZTptfSxuLmxp
c3QucHVzaChuLllhKSx0aGlzLmIuJGIubmV4dD1uLllhLHRoaXMuYi4kYj1uLllhLHRoaXMu
c2l6ZSsrKTtyZXR1cm4gdGhpc307ZC5wcm90b3R5cGVbImRlbGV0ZSJdPWZ1bmN0aW9uKGwp
e2w9ZSh0aGlzLGwpO3JldHVybiBsLllhJiZsLmxpc3Q/KGwubGlzdC5zcGxpY2UobC5pbmRl
eCwxKSxsLmxpc3QubGVuZ3RofHxkZWxldGUgdGhpcy5mW2wuaWRdLGwuWWEuJGIubmV4dD1s
LllhLm5leHQsbC5ZYS5uZXh0LiRiPQ0KbC5ZYS4kYixsLllhLmhlYWQ9bnVsbCx0aGlzLnNp
emUtLSwhMCk6ITF9O2QucHJvdG90eXBlLmNsZWFyPWZ1bmN0aW9uKCl7dGhpcy5mPXt9O3Ro
aXMuYj10aGlzLmIuJGI9ZygpO3RoaXMuc2l6ZT0wfTtkLnByb3RvdHlwZS5oYXM9ZnVuY3Rp
b24obCl7cmV0dXJuISFlKHRoaXMsbCkuWWF9O2QucHJvdG90eXBlLmdldD1mdW5jdGlvbihs
KXtyZXR1cm4obD1lKHRoaXMsbCkuWWEpJiZsLnZhbHVlfTtkLnByb3RvdHlwZS5lbnRyaWVz
PWZ1bmN0aW9uKCl7cmV0dXJuIGYodGhpcyxmdW5jdGlvbihsKXtyZXR1cm5bbC5rZXksbC52
YWx1ZV19KX07ZC5wcm90b3R5cGUua2V5cz1mdW5jdGlvbigpe3JldHVybiBmKHRoaXMsZnVu
Y3Rpb24obCl7cmV0dXJuIGwua2V5fSl9O2QucHJvdG90eXBlLnZhbHVlcz1mdW5jdGlvbigp
e3JldHVybiBmKHRoaXMsZnVuY3Rpb24obCl7cmV0dXJuIGwudmFsdWV9KX07ZC5wcm90b3R5
cGUuZm9yRWFjaD1mdW5jdGlvbihsLG0pe2Zvcih2YXIgbj10aGlzLmVudHJpZXMoKSwNCnI7
IShyPW4ubmV4dCgpKS5kb25lOylyPXIudmFsdWUsbC5jYWxsKG0sclsxXSxyWzBdLHRoaXMp
fTtkLnByb3RvdHlwZVtTeW1ib2wuaXRlcmF0b3JdPWQucHJvdG90eXBlLmVudHJpZXM7dmFy
IGU9ZnVuY3Rpb24obCxtKXt2YXIgbj1tJiZ0eXBlb2YgbTsib2JqZWN0Ij09bnx8ImZ1bmN0
aW9uIj09bj9jLmhhcyhtKT9uPWMuZ2V0KG0pOihuPSIiKyArK2gsYy5zZXQobSxuKSk6bj0i
cF8iK207dmFyIHI9bC5mW25dO2lmKHImJnVhKGwuZixuKSlmb3IobD0wO2w8ci5sZW5ndGg7
bCsrKXt2YXIgdj1yW2xdO2lmKG0hPT1tJiZ2LmtleSE9PXYua2V5fHxtPT09di5rZXkpcmV0
dXJue2lkOm4sbGlzdDpyLGluZGV4OmwsWWE6dn19cmV0dXJue2lkOm4sbGlzdDpyLGluZGV4
Oi0xLFlhOnZvaWQgMH19LGY9ZnVuY3Rpb24obCxtKXt2YXIgbj1sLmI7cmV0dXJuIHJhKGZ1
bmN0aW9uKCl7aWYobil7Zm9yKDtuLmhlYWQhPWwuYjspbj1uLiRiO2Zvcig7bi5uZXh0IT1u
LmhlYWQ7KXJldHVybiBuPQ0Kbi5uZXh0LHtkb25lOiExLHZhbHVlOm0obil9O249bnVsbH1y
ZXR1cm57ZG9uZTohMCx2YWx1ZTp2b2lkIDB9fSl9LGc9ZnVuY3Rpb24oKXt2YXIgbD17fTty
ZXR1cm4gbC4kYj1sLm5leHQ9bC5oZWFkPWx9LGg9MDtyZXR1cm4gZH0pOw0KbWEoIlNldCIs
ZnVuY3Rpb24oYSl7aWYoZnVuY3Rpb24oKXtpZighYXx8ImZ1bmN0aW9uIiE9dHlwZW9mIGF8
fCFhLnByb3RvdHlwZS5lbnRyaWVzfHwiZnVuY3Rpb24iIT10eXBlb2YgT2JqZWN0LnNlYWwp
cmV0dXJuITE7dHJ5e3ZhciBkPU9iamVjdC5zZWFsKHt4OjR9KSxlPW5ldyBhKF8uYmEoW2Rd
KSk7aWYoIWUuaGFzKGQpfHwxIT1lLnNpemV8fGUuYWRkKGQpIT1lfHwxIT1lLnNpemV8fGUu
YWRkKHt4OjR9KSE9ZXx8MiE9ZS5zaXplKXJldHVybiExO3ZhciBmPWUuZW50cmllcygpLGc9
Zi5uZXh0KCk7aWYoZy5kb25lfHxnLnZhbHVlWzBdIT1kfHxnLnZhbHVlWzFdIT1kKXJldHVy
biExO2c9Zi5uZXh0KCk7cmV0dXJuIGcuZG9uZXx8Zy52YWx1ZVswXT09ZHx8NCE9Zy52YWx1
ZVswXS54fHxnLnZhbHVlWzFdIT1nLnZhbHVlWzBdPyExOmYubmV4dCgpLmRvbmV9Y2F0Y2go
aCl7cmV0dXJuITF9fSgpKXJldHVybiBhO3NhKCk7dmFyIGM9ZnVuY3Rpb24oZCl7dGhpcy5i
PW5ldyBNYXA7DQppZihkKXtkPV8uYmEoZCk7Zm9yKHZhciBlOyEoZT1kLm5leHQoKSkuZG9u
ZTspdGhpcy5hZGQoZS52YWx1ZSl9dGhpcy5zaXplPXRoaXMuYi5zaXplfTtjLnByb3RvdHlw
ZS5hZGQ9ZnVuY3Rpb24oZCl7ZD0wPT09ZD8wOmQ7dGhpcy5iLnNldChkLGQpO3RoaXMuc2l6
ZT10aGlzLmIuc2l6ZTtyZXR1cm4gdGhpc307Yy5wcm90b3R5cGVbImRlbGV0ZSJdPWZ1bmN0
aW9uKGQpe2Q9dGhpcy5iWyJkZWxldGUiXShkKTt0aGlzLnNpemU9dGhpcy5iLnNpemU7cmV0
dXJuIGR9O2MucHJvdG90eXBlLmNsZWFyPWZ1bmN0aW9uKCl7dGhpcy5iLmNsZWFyKCk7dGhp
cy5zaXplPTB9O2MucHJvdG90eXBlLmhhcz1mdW5jdGlvbihkKXtyZXR1cm4gdGhpcy5iLmhh
cyhkKX07Yy5wcm90b3R5cGUuZW50cmllcz1mdW5jdGlvbigpe3JldHVybiB0aGlzLmIuZW50
cmllcygpfTtjLnByb3RvdHlwZS52YWx1ZXM9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5iLnZh
bHVlcygpfTtjLnByb3RvdHlwZS5rZXlzPWMucHJvdG90eXBlLnZhbHVlczsNCmMucHJvdG90
eXBlW1N5bWJvbC5pdGVyYXRvcl09Yy5wcm90b3R5cGUudmFsdWVzO2MucHJvdG90eXBlLmZv
ckVhY2g9ZnVuY3Rpb24oZCxlKXt2YXIgZj10aGlzO3RoaXMuYi5mb3JFYWNoKGZ1bmN0aW9u
KGcpe3JldHVybiBkLmNhbGwoZSxnLGcsZil9KX07cmV0dXJuIGN9KTttYSgiQXJyYXkuZnJv
bSIsZnVuY3Rpb24oYSl7cmV0dXJuIGE/YTpmdW5jdGlvbihjLGQsZSl7ZD1udWxsIT1kP2Q6
ZnVuY3Rpb24obCl7cmV0dXJuIGx9O3ZhciBmPVtdLGc9InVuZGVmaW5lZCIhPXR5cGVvZiBT
eW1ib2wmJlN5bWJvbC5pdGVyYXRvciYmY1tTeW1ib2wuaXRlcmF0b3JdO2lmKCJmdW5jdGlv
biI9PXR5cGVvZiBnKXtjPWcuY2FsbChjKTtmb3IodmFyIGg9MDshKGc9Yy5uZXh0KCkpLmRv
bmU7KWYucHVzaChkLmNhbGwoZSxnLnZhbHVlLGgrKykpfWVsc2UgZm9yKGc9Yy5sZW5ndGgs
aD0wO2g8ZztoKyspZi5wdXNoKGQuY2FsbChlLGNbaF0saCkpO3JldHVybiBmfX0pOw0KbWEo
Ik9iamVjdC5lbnRyaWVzIixmdW5jdGlvbihhKXtyZXR1cm4gYT9hOmZ1bmN0aW9uKGMpe3Zh
ciBkPVtdLGU7Zm9yKGUgaW4gYyl1YShjLGUpJiZkLnB1c2goW2UsY1tlXV0pO3JldHVybiBk
fX0pO21hKCJPYmplY3QuaXMiLGZ1bmN0aW9uKGEpe3JldHVybiBhP2E6ZnVuY3Rpb24oYyxk
KXtyZXR1cm4gYz09PWQ/MCE9PWN8fDEvYz09PTEvZDpjIT09YyYmZCE9PWR9fSk7bWEoIkFy
cmF5LnByb3RvdHlwZS5pbmNsdWRlcyIsZnVuY3Rpb24oYSl7cmV0dXJuIGE/YTpmdW5jdGlv
bihjLGQpe3ZhciBlPXRoaXM7ZSBpbnN0YW5jZW9mIFN0cmluZyYmKGU9U3RyaW5nKGUpKTt2
YXIgZj1lLmxlbmd0aDtkPWR8fDA7Zm9yKDA+ZCYmKGQ9TWF0aC5tYXgoZCtmLDApKTtkPGY7
ZCsrKXt2YXIgZz1lW2RdO2lmKGc9PT1jfHxPYmplY3QuaXMoZyxjKSlyZXR1cm4hMH1yZXR1
cm4hMX19KTsNCm1hKCJTdHJpbmcucHJvdG90eXBlLmluY2x1ZGVzIixmdW5jdGlvbihhKXty
ZXR1cm4gYT9hOmZ1bmN0aW9uKGMsZCl7cmV0dXJuLTEhPT1uYSh0aGlzLGMsImluY2x1ZGVz
IikuaW5kZXhPZihjLGR8fDApfX0pO18udmE9Xy52YXx8e307Xy5xPXRoaXN8fHNlbGY7Xy53
YT1mdW5jdGlvbigpe307Xy54YT1mdW5jdGlvbihhKXthLlZlPXZvaWQgMDthLnVhPWZ1bmN0
aW9uKCl7cmV0dXJuIGEuVmU/YS5WZTphLlZlPW5ldyBhfX07DQpfLnphPWZ1bmN0aW9uKGEp
e3ZhciBjPXR5cGVvZiBhO2lmKCJvYmplY3QiPT1jKWlmKGEpe2lmKGEgaW5zdGFuY2VvZiBB
cnJheSlyZXR1cm4iYXJyYXkiO2lmKGEgaW5zdGFuY2VvZiBPYmplY3QpcmV0dXJuIGM7dmFy
IGQ9T2JqZWN0LnByb3RvdHlwZS50b1N0cmluZy5jYWxsKGEpO2lmKCJbb2JqZWN0IFdpbmRv
d10iPT1kKXJldHVybiJvYmplY3QiO2lmKCJbb2JqZWN0IEFycmF5XSI9PWR8fCJudW1iZXIi
PT10eXBlb2YgYS5sZW5ndGgmJiJ1bmRlZmluZWQiIT10eXBlb2YgYS5zcGxpY2UmJiJ1bmRl
ZmluZWQiIT10eXBlb2YgYS5wcm9wZXJ0eUlzRW51bWVyYWJsZSYmIWEucHJvcGVydHlJc0Vu
dW1lcmFibGUoInNwbGljZSIpKXJldHVybiJhcnJheSI7aWYoIltvYmplY3QgRnVuY3Rpb25d
Ij09ZHx8InVuZGVmaW5lZCIhPXR5cGVvZiBhLmNhbGwmJiJ1bmRlZmluZWQiIT10eXBlb2Yg
YS5wcm9wZXJ0eUlzRW51bWVyYWJsZSYmIWEucHJvcGVydHlJc0VudW1lcmFibGUoImNhbGwi
KSlyZXR1cm4iZnVuY3Rpb24ifWVsc2UgcmV0dXJuIm51bGwiOw0KZWxzZSBpZigiZnVuY3Rp
b24iPT1jJiYidW5kZWZpbmVkIj09dHlwZW9mIGEuY2FsbClyZXR1cm4ib2JqZWN0IjtyZXR1
cm4gY307Xy5BYT1mdW5jdGlvbihhKXtyZXR1cm4iYXJyYXkiPT1fLnphKGEpfTtfLkJhPWZ1
bmN0aW9uKGEpe3JldHVybiJmdW5jdGlvbiI9PV8uemEoYSl9O18uQ2E9ZnVuY3Rpb24oYSl7
dmFyIGM9dHlwZW9mIGE7cmV0dXJuIm9iamVjdCI9PWMmJm51bGwhPWF8fCJmdW5jdGlvbiI9
PWN9O18uRGE9ImNsb3N1cmVfdWlkXyIrKDFFOSpNYXRoLnJhbmRvbSgpPj4+MCk7RWE9ZnVu
Y3Rpb24oYSxjLGQpe3JldHVybiBhLmNhbGwuYXBwbHkoYS5iaW5kLGFyZ3VtZW50cyl9Ow0K
RmE9ZnVuY3Rpb24oYSxjLGQpe2lmKCFhKXRocm93IEVycm9yKCk7aWYoMjxhcmd1bWVudHMu
bGVuZ3RoKXt2YXIgZT1BcnJheS5wcm90b3R5cGUuc2xpY2UuY2FsbChhcmd1bWVudHMsMik7
cmV0dXJuIGZ1bmN0aW9uKCl7dmFyIGY9QXJyYXkucHJvdG90eXBlLnNsaWNlLmNhbGwoYXJn
dW1lbnRzKTtBcnJheS5wcm90b3R5cGUudW5zaGlmdC5hcHBseShmLGUpO3JldHVybiBhLmFw
cGx5KGMsZil9fXJldHVybiBmdW5jdGlvbigpe3JldHVybiBhLmFwcGx5KGMsYXJndW1lbnRz
KX19O18udD1mdW5jdGlvbihhLGMsZCl7RnVuY3Rpb24ucHJvdG90eXBlLmJpbmQmJi0xIT1G
dW5jdGlvbi5wcm90b3R5cGUuYmluZC50b1N0cmluZygpLmluZGV4T2YoIm5hdGl2ZSBjb2Rl
Iik/Xy50PUVhOl8udD1GYTtyZXR1cm4gXy50LmFwcGx5KG51bGwsYXJndW1lbnRzKX07Xy5H
YT1EYXRlLm5vd3x8ZnVuY3Rpb24oKXtyZXR1cm4rbmV3IERhdGV9Ow0KXy51PWZ1bmN0aW9u
KGEsYyl7YT1hLnNwbGl0KCIuIik7dmFyIGQ9Xy5xO2FbMF1pbiBkfHwidW5kZWZpbmVkIj09
dHlwZW9mIGQuZXhlY1NjcmlwdHx8ZC5leGVjU2NyaXB0KCJ2YXIgIithWzBdKTtmb3IodmFy
IGU7YS5sZW5ndGgmJihlPWEuc2hpZnQoKSk7KWEubGVuZ3RofHx2b2lkIDA9PT1jP2RbZV0m
JmRbZV0hPT1PYmplY3QucHJvdG90eXBlW2VdP2Q9ZFtlXTpkPWRbZV09e306ZFtlXT1jfTtf
Lnc9ZnVuY3Rpb24oYSxjKXtmdW5jdGlvbiBkKCl7fWQucHJvdG90eXBlPWMucHJvdG90eXBl
O2EuSz1jLnByb3RvdHlwZTthLnByb3RvdHlwZT1uZXcgZDthLnByb3RvdHlwZS5jb25zdHJ1
Y3Rvcj1hfTtIYT1mdW5jdGlvbihhKXtyZXR1cm4gYX07DQpfLklhPWZ1bmN0aW9uKGEpe3Zh
ciBjPW51bGwsZD1fLnEudHJ1c3RlZFR5cGVzfHxfLnEuVHJ1c3RlZFR5cGVzO2lmKCFkfHwh
ZC5jcmVhdGVQb2xpY3kpcmV0dXJuIGM7dHJ5e2M9ZC5jcmVhdGVQb2xpY3koYSx7Y3JlYXRl
SFRNTDpIYSxjcmVhdGVTY3JpcHQ6SGEsY3JlYXRlU2NyaXB0VVJMOkhhLGNyZWF0ZVVSTDpI
YX0pfWNhdGNoKGUpe18ucS5jb25zb2xlJiZfLnEuY29uc29sZS5lcnJvcihlLm1lc3NhZ2Up
fXJldHVybiBjfTtfLklhKCJvZ2ItcXRtI2Jhc2UiKTsNCl8uSmE9ZnVuY3Rpb24oYSl7aWYo
RXJyb3IuY2FwdHVyZVN0YWNrVHJhY2UpRXJyb3IuY2FwdHVyZVN0YWNrVHJhY2UodGhpcyxf
LkphKTtlbHNle3ZhciBjPUVycm9yKCkuc3RhY2s7YyYmKHRoaXMuc3RhY2s9Yyl9YSYmKHRo
aXMubWVzc2FnZT1TdHJpbmcoYSkpfTtfLncoXy5KYSxFcnJvcik7Xy5KYS5wcm90b3R5cGUu
bmFtZT0iQ3VzdG9tRXJyb3IiOw0KXy5LYT1BcnJheS5wcm90b3R5cGUuaW5kZXhPZj9mdW5j
dGlvbihhLGMpe3JldHVybiBBcnJheS5wcm90b3R5cGUuaW5kZXhPZi5jYWxsKGEsYyx2b2lk
IDApfTpmdW5jdGlvbihhLGMpe2lmKCJzdHJpbmciPT09dHlwZW9mIGEpcmV0dXJuInN0cmlu
ZyIhPT10eXBlb2YgY3x8MSE9Yy5sZW5ndGg/LTE6YS5pbmRleE9mKGMsMCk7Zm9yKHZhciBk
PTA7ZDxhLmxlbmd0aDtkKyspaWYoZCBpbiBhJiZhW2RdPT09YylyZXR1cm4gZDtyZXR1cm4t
MX07Xy5MYT1BcnJheS5wcm90b3R5cGUuZm9yRWFjaD9mdW5jdGlvbihhLGMsZCl7QXJyYXku
cHJvdG90eXBlLmZvckVhY2guY2FsbChhLGMsZCl9OmZ1bmN0aW9uKGEsYyxkKXtmb3IodmFy
IGU9YS5sZW5ndGgsZj0ic3RyaW5nIj09PXR5cGVvZiBhP2Euc3BsaXQoIiIpOmEsZz0wO2c8
ZTtnKyspZyBpbiBmJiZjLmNhbGwoZCxmW2ddLGcsYSl9Ow0KXy5NYT1BcnJheS5wcm90b3R5
cGUuZmlsdGVyP2Z1bmN0aW9uKGEsYyxkKXtyZXR1cm4gQXJyYXkucHJvdG90eXBlLmZpbHRl
ci5jYWxsKGEsYyxkKX06ZnVuY3Rpb24oYSxjLGQpe2Zvcih2YXIgZT1hLmxlbmd0aCxmPVtd
LGc9MCxoPSJzdHJpbmciPT09dHlwZW9mIGE/YS5zcGxpdCgiIik6YSxsPTA7bDxlO2wrKylp
ZihsIGluIGgpe3ZhciBtPWhbbF07Yy5jYWxsKGQsbSxsLGEpJiYoZltnKytdPW0pfXJldHVy
biBmfTtfLk5hPUFycmF5LnByb3RvdHlwZS5tYXA/ZnVuY3Rpb24oYSxjLGQpe3JldHVybiBB
cnJheS5wcm90b3R5cGUubWFwLmNhbGwoYSxjLGQpfTpmdW5jdGlvbihhLGMsZCl7Zm9yKHZh
ciBlPWEubGVuZ3RoLGY9QXJyYXkoZSksZz0ic3RyaW5nIj09PXR5cGVvZiBhP2Euc3BsaXQo
IiIpOmEsaD0wO2g8ZTtoKyspaCBpbiBnJiYoZltoXT1jLmNhbGwoZCxnW2hdLGgsYSkpO3Jl
dHVybiBmfTsNCl8uT2E9QXJyYXkucHJvdG90eXBlLnNvbWU/ZnVuY3Rpb24oYSxjKXtyZXR1
cm4gQXJyYXkucHJvdG90eXBlLnNvbWUuY2FsbChhLGMsdm9pZCAwKX06ZnVuY3Rpb24oYSxj
KXtmb3IodmFyIGQ9YS5sZW5ndGgsZT0ic3RyaW5nIj09PXR5cGVvZiBhP2Euc3BsaXQoIiIp
OmEsZj0wO2Y8ZDtmKyspaWYoZiBpbiBlJiZjLmNhbGwodm9pZCAwLGVbZl0sZixhKSlyZXR1
cm4hMDtyZXR1cm4hMX07Xy5QYT1mdW5jdGlvbihhLGMpe3JldHVybiAwPD0oMCxfLkthKShh
LGMpfTsNCnZhciBSYTtfLlFhPWZ1bmN0aW9uKGEsYyxkKXtmb3IodmFyIGUgaW4gYSljLmNh
bGwoZCxhW2VdLGUsYSl9O1JhPSJjb25zdHJ1Y3RvciBoYXNPd25Qcm9wZXJ0eSBpc1Byb3Rv
dHlwZU9mIHByb3BlcnR5SXNFbnVtZXJhYmxlIHRvTG9jYWxlU3RyaW5nIHRvU3RyaW5nIHZh
bHVlT2YiLnNwbGl0KCIgIik7Xy5TYT1mdW5jdGlvbihhLGMpe2Zvcih2YXIgZCxlLGY9MTtm
PGFyZ3VtZW50cy5sZW5ndGg7ZisrKXtlPWFyZ3VtZW50c1tmXTtmb3IoZCBpbiBlKWFbZF09
ZVtkXTtmb3IodmFyIGc9MDtnPFJhLmxlbmd0aDtnKyspZD1SYVtnXSxPYmplY3QucHJvdG90
eXBlLmhhc093blByb3BlcnR5LmNhbGwoZSxkKSYmKGFbZF09ZVtkXSl9fTsNCnZhciBUYT1f
LklhKCJvZ2ItcXRtI2h0bWwiKTsNCnZhciBVYTtfLldhPWZ1bmN0aW9uKGEsYyl7dGhpcy5i
PWE9PT1VYSYmY3x8IiI7dGhpcy5mPV8uVmF9O18uV2EucHJvdG90eXBlLlBiPSEwO18uV2Eu
cHJvdG90eXBlLkNiPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuYn07Xy5YYT1mdW5jdGlvbihh
KXtyZXR1cm4gbmV3IF8uV2EoVWEsYSl9O18uVmE9e307VWE9e307Xy5ZYT1fLlhhKCIiKTsN
Cl8uJGE9ZnVuY3Rpb24oKXt0aGlzLmI9IiI7dGhpcy5mPV8uWmF9O18uJGEucHJvdG90eXBl
LlBiPSEwO18uWmE9e307Xy4kYS5wcm90b3R5cGUuQ2I9ZnVuY3Rpb24oKXtyZXR1cm4gdGhp
cy5iLnRvU3RyaW5nKCl9O18uYWI9ZnVuY3Rpb24oYSl7dmFyIGM9bmV3IF8uJGE7Yy5iPVRh
P1RhLmNyZWF0ZVNjcmlwdChhKTphO3JldHVybiBjfTtfLmFiKCIiKTsNCnZhciBiYjtfLmRi
PWZ1bmN0aW9uKGEsYyl7dGhpcy5mPWE9PT1iYiYmY3x8IiI7dGhpcy5qPV8uY2J9O18uZGIu
cHJvdG90eXBlLlBiPSEwO18uZGIucHJvdG90eXBlLkNiPWZ1bmN0aW9uKCl7cmV0dXJuIHRo
aXMuZi50b1N0cmluZygpfTtfLmRiLnByb3RvdHlwZS5UZT0hMDtfLmRiLnByb3RvdHlwZS5i
PWZ1bmN0aW9uKCl7cmV0dXJuIDF9O18uY2I9e307Xy5lYj1mdW5jdGlvbihhKXthPVRhP1Rh
LmNyZWF0ZVNjcmlwdFVSTChhKTphO3JldHVybiBuZXcgXy5kYihiYixhKX07YmI9e307DQp2
YXIgZ2I7Xy5mYj1TdHJpbmcucHJvdG90eXBlLnRyaW0/ZnVuY3Rpb24oYSl7cmV0dXJuIGEu
dHJpbSgpfTpmdW5jdGlvbihhKXtyZXR1cm4vXltcc1x4YTBdKihbXHNcU10qPylbXHNceGEw
XSokLy5leGVjKGEpWzFdfTsNCl8uaGI9ZnVuY3Rpb24oYSxjKXt2YXIgZD0wO2E9KDAsXy5m
YikoU3RyaW5nKGEpKS5zcGxpdCgiLiIpO2M9KDAsXy5mYikoU3RyaW5nKGMpKS5zcGxpdCgi
LiIpO2Zvcih2YXIgZT1NYXRoLm1heChhLmxlbmd0aCxjLmxlbmd0aCksZj0wOzA9PWQmJmY8
ZTtmKyspe3ZhciBnPWFbZl18fCIiLGg9Y1tmXXx8IiI7ZG97Zz0vKFxkKikoXEQqKSguKikv
LmV4ZWMoZyl8fFsiIiwiIiwiIiwiIl07aD0vKFxkKikoXEQqKSguKikvLmV4ZWMoaCl8fFsi
IiwiIiwiIiwiIl07aWYoMD09Z1swXS5sZW5ndGgmJjA9PWhbMF0ubGVuZ3RoKWJyZWFrO2Q9
Z2IoMD09Z1sxXS5sZW5ndGg/MDpwYXJzZUludChnWzFdLDEwKSwwPT1oWzFdLmxlbmd0aD8w
OnBhcnNlSW50KGhbMV0sMTApKXx8Z2IoMD09Z1syXS5sZW5ndGgsMD09aFsyXS5sZW5ndGgp
fHxnYihnWzJdLGhbMl0pO2c9Z1szXTtoPWhbM119d2hpbGUoMD09ZCl9cmV0dXJuIGR9Ow0K
Z2I9ZnVuY3Rpb24oYSxjKXtyZXR1cm4gYTxjPy0xOmE+Yz8xOjB9Ow0KdmFyIG1iLGpiO18u
a2I9ZnVuY3Rpb24oYSxjKXt0aGlzLmY9YT09PV8uaWImJmN8fCIiO3RoaXMuaj1qYn07Xy5r
Yi5wcm90b3R5cGUuUGI9ITA7Xy5rYi5wcm90b3R5cGUuQ2I9ZnVuY3Rpb24oKXtyZXR1cm4g
dGhpcy5mLnRvU3RyaW5nKCl9O18ua2IucHJvdG90eXBlLlRlPSEwO18ua2IucHJvdG90eXBl
LmI9ZnVuY3Rpb24oKXtyZXR1cm4gMX07Xy5sYj1mdW5jdGlvbihhKXtpZihhIGluc3RhbmNl
b2YgXy5rYiYmYS5jb25zdHJ1Y3Rvcj09PV8ua2ImJmEuaj09PWpiKXJldHVybiBhLmY7Xy56
YShhKTtyZXR1cm4idHlwZV9lcnJvcjpTYWZlVXJsIn07bWI9L14oPzooPzpodHRwcz98bWFp
bHRvfGZ0cCk6fFteOi8/I10qKD86Wy8/I118JCkpL2k7DQpfLm5iPWZ1bmN0aW9uKGEpe2lm
KGEgaW5zdGFuY2VvZiBfLmtiKXJldHVybiBhO2E9Im9iamVjdCI9PXR5cGVvZiBhJiZhLlBi
P2EuQ2IoKTpTdHJpbmcoYSk7bWIudGVzdChhKXx8KGE9ImFib3V0OmludmFsaWQjekNsb3N1
cmV6Iik7cmV0dXJuIG5ldyBfLmtiKF8uaWIsYSl9O18ub2I9ZnVuY3Rpb24oYSl7aWYoYSBp
bnN0YW5jZW9mIF8ua2IpcmV0dXJuIGE7YT0ib2JqZWN0Ij09dHlwZW9mIGEmJmEuUGI/YS5D
YigpOlN0cmluZyhhKTttYi50ZXN0KGEpfHwoYT0iYWJvdXQ6aW52YWxpZCN6Q2xvc3VyZXoi
KTtyZXR1cm4gbmV3IF8ua2IoXy5pYixhKX07amI9e307Xy5pYj17fTsNCl8ucWI9ZnVuY3Rp
b24oKXt0aGlzLmI9IiI7dGhpcy5mPV8ucGJ9O18ucWIucHJvdG90eXBlLlBiPSEwO18ucGI9
e307Xy5xYi5wcm90b3R5cGUuQ2I9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5ifTtfLnJiPWZ1
bmN0aW9uKGEpe3ZhciBjPW5ldyBfLnFiO2MuYj1hO3JldHVybiBjfTtfLnNiPV8ucmIoIiIp
Ow0KYTp7dmFyIHViPV8ucS5uYXZpZ2F0b3I7aWYodWIpe3ZhciB2Yj11Yi51c2VyQWdlbnQ7
aWYodmIpe18udGI9dmI7YnJlYWsgYX19Xy50Yj0iIn1fLng9ZnVuY3Rpb24oYSl7cmV0dXJu
LTEhPV8udGIuaW5kZXhPZihhKX07DQp2YXIgeWI7Xy53Yj1mdW5jdGlvbigpe3JldHVybiBf
LngoIlRyaWRlbnQiKXx8Xy54KCJNU0lFIil9O18ueGI9ZnVuY3Rpb24oKXtyZXR1cm4gXy54
KCJGaXJlZm94Iil8fF8ueCgiRnhpT1MiKX07Xy56Yj1mdW5jdGlvbigpe3JldHVybiBfLngo
IlNhZmFyaSIpJiYhKHliKCl8fF8ueCgiQ29hc3QiKXx8Xy54KCJPcGVyYSIpfHxfLngoIkVk
Z2UiKXx8Xy54KCJFZGcvIil8fF8ueCgiT1BSIil8fF8ueGIoKXx8Xy54KCJTaWxrIil8fF8u
eCgiQW5kcm9pZCIpKX07eWI9ZnVuY3Rpb24oKXtyZXR1cm4oXy54KCJDaHJvbWUiKXx8Xy54
KCJDcmlPUyIpKSYmIV8ueCgiRWRnZSIpfTtfLkFiPWZ1bmN0aW9uKCl7cmV0dXJuIF8ueCgi
QW5kcm9pZCIpJiYhKHliKCl8fF8ueGIoKXx8Xy54KCJPcGVyYSIpfHxfLngoIlNpbGsiKSl9
Ow0KdmFyIEJiO18uQ2I9ZnVuY3Rpb24oKXt0aGlzLmY9IiI7dGhpcy5vPUJiO3RoaXMuaj1u
dWxsfTtfLkNiLnByb3RvdHlwZS5UZT0hMDtfLkNiLnByb3RvdHlwZS5iPWZ1bmN0aW9uKCl7
cmV0dXJuIHRoaXMuan07Xy5DYi5wcm90b3R5cGUuUGI9ITA7Xy5DYi5wcm90b3R5cGUuQ2I9
ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5mLnRvU3RyaW5nKCl9O18uRGI9ZnVuY3Rpb24oYSl7
aWYoYSBpbnN0YW5jZW9mIF8uQ2ImJmEuY29uc3RydWN0b3I9PT1fLkNiJiZhLm89PT1CYily
ZXR1cm4gYS5mO18uemEoYSk7cmV0dXJuInR5cGVfZXJyb3I6U2FmZUh0bWwifTtCYj17fTtf
LkViPWZ1bmN0aW9uKGEsYyl7dmFyIGQ9bmV3IF8uQ2I7ZC5mPVRhP1RhLmNyZWF0ZUhUTUwo
YSk6YTtkLmo9YztyZXR1cm4gZH07Xy5FYigiPCFET0NUWVBFIGh0bWw+IiwwKTtfLkZiPV8u
RWIoIiIsMCk7Xy5HYj1fLkViKCI8YnI+IiwwKTsNCl8uSGI9ZnVuY3Rpb24oYSl7dmFyIGM9
ITEsZDtyZXR1cm4gZnVuY3Rpb24oKXtjfHwoZD1hKCksYz0hMCk7cmV0dXJuIGR9fShmdW5j
dGlvbigpe3ZhciBhPWRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoImRpdiIpLGM9ZG9jdW1lbnQu
Y3JlYXRlRWxlbWVudCgiZGl2Iik7Yy5hcHBlbmRDaGlsZChkb2N1bWVudC5jcmVhdGVFbGVt
ZW50KCJkaXYiKSk7YS5hcHBlbmRDaGlsZChjKTtjPWEuZmlyc3RDaGlsZC5maXJzdENoaWxk
O2EuaW5uZXJIVE1MPV8uRGIoXy5GYik7cmV0dXJuIWMucGFyZW50RWxlbWVudH0pOw0KdmFy
IEliO0liPWZ1bmN0aW9uKCl7cmV0dXJuIF8ueCgiaVBob25lIikmJiFfLngoImlQb2QiKSYm
IV8ueCgiaVBhZCIpfTtfLkpiPWZ1bmN0aW9uKCl7cmV0dXJuIEliKCl8fF8ueCgiaVBhZCIp
fHxfLngoImlQb2QiKX07DQpfLktiPWZ1bmN0aW9uKGEpe18uS2JbIiAiXShhKTtyZXR1cm4g
YX07Xy5LYlsiICJdPV8ud2E7dmFyIE1iPWZ1bmN0aW9uKGEsYyl7dmFyIGQ9TGI7cmV0dXJu
IE9iamVjdC5wcm90b3R5cGUuaGFzT3duUHJvcGVydHkuY2FsbChkLGEpP2RbYV06ZFthXT1j
KGEpfTsNCnZhciAkYixhYyxMYixpYztfLk5iPV8ueCgiT3BlcmEiKTtfLnk9Xy53YigpO18u
T2I9Xy54KCJFZGdlIik7Xy5QYj1fLk9ifHxfLnk7Xy5RYj1fLngoIkdlY2tvIikmJiEoLTEh
PV8udGIudG9Mb3dlckNhc2UoKS5pbmRleE9mKCJ3ZWJraXQiKSYmIV8ueCgiRWRnZSIpKSYm
IShfLngoIlRyaWRlbnQiKXx8Xy54KCJNU0lFIikpJiYhXy54KCJFZGdlIik7Xy5SYj0tMSE9
Xy50Yi50b0xvd2VyQ2FzZSgpLmluZGV4T2YoIndlYmtpdCIpJiYhXy54KCJFZGdlIik7Xy5T
Yj1fLngoIk1hY2ludG9zaCIpO18uVGI9Xy54KCJXaW5kb3dzIik7Xy5VYj1fLngoIkxpbnV4
Iil8fF8ueCgiQ3JPUyIpO18uVmI9Xy54KCJBbmRyb2lkIik7Xy5XYj1JYigpO18uWGI9Xy54
KCJpUGFkIik7Xy5ZYj1fLngoImlQb2QiKTtfLlpiPV8uSmIoKTskYj1mdW5jdGlvbigpe3Zh
ciBhPV8ucS5kb2N1bWVudDtyZXR1cm4gYT9hLmRvY3VtZW50TW9kZTp2b2lkIDB9Ow0KYTp7
dmFyIGJjPSIiLGNjPWZ1bmN0aW9uKCl7dmFyIGE9Xy50YjtpZihfLlFiKXJldHVybi9ydjoo
W15cKTtdKykoXCl8OykvLmV4ZWMoYSk7aWYoXy5PYilyZXR1cm4vRWRnZVwvKFtcZFwuXSsp
Ly5leGVjKGEpO2lmKF8ueSlyZXR1cm4vXGIoPzpNU0lFfHJ2KVs6IF0oW15cKTtdKykoXCl8
OykvLmV4ZWMoYSk7aWYoXy5SYilyZXR1cm4vV2ViS2l0XC8oXFMrKS8uZXhlYyhhKTtpZihf
Lk5iKXJldHVybi8oPzpWZXJzaW9uKVsgXC9dPyhcUyspLy5leGVjKGEpfSgpO2NjJiYoYmM9
Y2M/Y2NbMV06IiIpO2lmKF8ueSl7dmFyIGRjPSRiKCk7aWYobnVsbCE9ZGMmJmRjPnBhcnNl
RmxvYXQoYmMpKXthYz1TdHJpbmcoZGMpO2JyZWFrIGF9fWFjPWJjfV8uZWM9YWM7TGI9e307
Xy5mYz1mdW5jdGlvbihhKXtyZXR1cm4gTWIoYSxmdW5jdGlvbigpe3JldHVybiAwPD1fLmhi
KF8uZWMsYSl9KX07Xy5oYz1mdW5jdGlvbihhKXtyZXR1cm4gTnVtYmVyKGdjKT49YX07DQpp
Yz1fLnEuZG9jdW1lbnQmJl8ueT8kYigpOnZvaWQgMDt2YXIgZ2M9aWM7DQpfLmpjPV8ueGIo
KTtfLmtjPUliKCl8fF8ueCgiaVBvZCIpO18ubGM9Xy54KCJpUGFkIik7Xy5tYz1fLkFiKCk7
Xy5uYz15YigpO18ub2M9Xy56YigpJiYhXy5KYigpOw0KdmFyIHBjPXt9LHFjPW51bGw7DQpf
LnJjPWZ1bmN0aW9uKGEpe3RoaXMuYj0wO3RoaXMuZj1hfTtfLnJjLnByb3RvdHlwZS5uZXh0
PWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuYjx0aGlzLmYubGVuZ3RoP3tkb25lOiExLHZhbHVl
OnRoaXMuZlt0aGlzLmIrK119Ontkb25lOiEwLHZhbHVlOnZvaWQgMH19OyJ1bmRlZmluZWQi
IT10eXBlb2YgU3ltYm9sJiYoXy5yYy5wcm90b3R5cGVbU3ltYm9sLml0ZXJhdG9yXT1mdW5j
dGlvbigpe3JldHVybiB0aGlzfSk7DQp2YXIgdWMseWM7Xy56PWZ1bmN0aW9uKCl7fTtfLnNj
PSJmdW5jdGlvbiI9PXR5cGVvZiBVaW50OEFycmF5Ow0KXy5BPWZ1bmN0aW9uKGEsYyxkLGUs
ZixnKXthLmI9bnVsbDtjfHwoYz1kP1tkXTpbXSk7YS5GPWQ/U3RyaW5nKGQpOnZvaWQgMDth
Lnc9MD09PWQ/LTE6MDthLmo9YzthOntkPWEuai5sZW5ndGg7Yz0tMTtpZihkJiYoYz1kLTEs
ZD1hLmpbY10sIShudWxsPT09ZHx8Im9iamVjdCIhPXR5cGVvZiBkfHxfLkFhKGQpfHxfLnNj
JiZkIGluc3RhbmNlb2YgVWludDhBcnJheSkpKXthLkE9Yy1hLnc7YS5vPWQ7YnJlYWsgYX0t
MTxlPyhhLkE9TWF0aC5tYXgoZSxjKzEtYS53KSxhLm89bnVsbCk6YS5BPU51bWJlci5NQVhf
VkFMVUV9YS5HPXt9O2lmKGYpZm9yKGU9MDtlPGYubGVuZ3RoO2UrKyljPWZbZV0sYzxhLkE/
KGMrPWEudyxhLmpbY109YS5qW2NdfHxfLnRjKToodWMoYSksYS5vW2NdPWEub1tjXXx8Xy50
Yyk7aWYoZyYmZy5sZW5ndGgpZm9yKGU9MDtlPGcubGVuZ3RoO2UrKylfLnZjKGEsZ1tlXSl9
O18udGM9W107DQp1Yz1mdW5jdGlvbihhKXt2YXIgYz1hLkErYS53O2EualtjXXx8KGEubz1h
LmpbY109e30pfTtfLkI9ZnVuY3Rpb24oYSxjKXtpZihjPGEuQSl7Yys9YS53O3ZhciBkPWEu
altjXTtyZXR1cm4gZD09PV8udGM/YS5qW2NdPVtdOmR9aWYoYS5vKXJldHVybiBkPWEub1tj
XSxkPT09Xy50Yz9hLm9bY109W106ZH07Xy5EPWZ1bmN0aW9uKGEsYyl7YT1fLkIoYSxjKTty
ZXR1cm4gbnVsbD09YT9hOiEhYX07Xy5FPWZ1bmN0aW9uKGEsYyxkKXthPV8uQihhLGMpO3Jl
dHVybiBudWxsPT1hP2Q6YX07Xy53Yz1mdW5jdGlvbihhLGMsZCl7YT1fLkQoYSxjKTtyZXR1
cm4gbnVsbD09YT9kOmF9O18ueGM9ZnVuY3Rpb24oYSxjLGQpe2E9Xy5CKGEsYyk7YT1udWxs
PT1hP2E6K2E7cmV0dXJuIG51bGw9PWE/ZDphfTtfLkY9ZnVuY3Rpb24oYSxjLGQpe2M8YS5B
P2EualtjK2Eud109ZDoodWMoYSksYS5vW2NdPWQpO3JldHVybiBhfTsNCl8udmM9ZnVuY3Rp
b24oYSxjKXtmb3IodmFyIGQsZSxmPTA7ZjxjLmxlbmd0aDtmKyspe3ZhciBnPWNbZl0saD1f
LkIoYSxnKTtudWxsIT1oJiYoZD1nLGU9aCxfLkYoYSxnLHZvaWQgMCkpfXJldHVybiBkPyhf
LkYoYSxkLGUpLGQpOjB9O18uRz1mdW5jdGlvbihhLGMsZCl7YS5ifHwoYS5iPXt9KTtpZigh
YS5iW2RdKXt2YXIgZT1fLkIoYSxkKTtlJiYoYS5iW2RdPW5ldyBjKGUpKX1yZXR1cm4gYS5i
W2RdfTtfLkg9ZnVuY3Rpb24oYSxjLGQpe2EuYnx8KGEuYj17fSk7dmFyIGU9ZD9kLnNiKCk6
ZDthLmJbY109ZDtyZXR1cm4gXy5GKGEsYyxlKX07eWM9ZnVuY3Rpb24oYSl7aWYoYS5iKWZv
cih2YXIgYyBpbiBhLmIpe3ZhciBkPWEuYltjXTtpZihfLkFhKGQpKWZvcih2YXIgZT0wO2U8
ZC5sZW5ndGg7ZSsrKWRbZV0mJmRbZV0uc2IoKTtlbHNlIGQmJmQuc2IoKX19O18uei5wcm90
b3R5cGUuc2I9ZnVuY3Rpb24oKXt5Yyh0aGlzKTtyZXR1cm4gdGhpcy5qfTsNCl8uei5wcm90
b3R5cGUuZj1fLnNjP2Z1bmN0aW9uKCl7dmFyIGE9VWludDhBcnJheS5wcm90b3R5cGUudG9K
U09OO1VpbnQ4QXJyYXkucHJvdG90eXBlLnRvSlNPTj1mdW5jdGlvbigpe3ZhciBjO3ZvaWQg
MD09PWMmJihjPTApO2lmKCFxYyl7cWM9e307Zm9yKHZhciBkPSJBQkNERUZHSElKS0xNTk9Q
UVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSIuc3BsaXQo
IiIpLGU9WyIrLz0iLCIrLyIsIi1fPSIsIi1fLiIsIi1fIl0sZj0wOzU+ZjtmKyspe3ZhciBn
PWQuY29uY2F0KGVbZl0uc3BsaXQoIiIpKTtwY1tmXT1nO2Zvcih2YXIgaD0wO2g8Zy5sZW5n
dGg7aCsrKXt2YXIgbD1nW2hdO3ZvaWQgMD09PXFjW2xdJiYocWNbbF09aCl9fX1jPXBjW2Nd
O2Q9W107Zm9yKGU9MDtlPHRoaXMubGVuZ3RoO2UrPTMpe3ZhciBtPXRoaXNbZV0sbj0oZj1l
KzE8dGhpcy5sZW5ndGgpP3RoaXNbZSsxXTowO2w9KGc9ZSsyPHRoaXMubGVuZ3RoKT90aGlz
W2UrMl06MDsNCmg9bT4+MjttPShtJjMpPDw0fG4+PjQ7bj0obiYxNSk8PDJ8bD4+NjtsJj02
MztnfHwobD02NCxmfHwobj02NCkpO2QucHVzaChjW2hdLGNbbV0sY1tuXXx8IiIsY1tsXXx8
IiIpfXJldHVybiBkLmpvaW4oIiIpfTt0cnl7cmV0dXJuIEpTT04uc3RyaW5naWZ5KHRoaXMu
aiYmdGhpcy5zYigpLHpjKX1maW5hbGx5e1VpbnQ4QXJyYXkucHJvdG90eXBlLnRvSlNPTj1h
fX06ZnVuY3Rpb24oKXtyZXR1cm4gSlNPTi5zdHJpbmdpZnkodGhpcy5qJiZ0aGlzLnNiKCks
emMpfTt2YXIgemM9ZnVuY3Rpb24oYSxjKXtyZXR1cm4ibnVtYmVyIiE9PXR5cGVvZiBjfHwh
aXNOYU4oYykmJkluZmluaXR5IT09YyYmLUluZmluaXR5IT09Yz9jOlN0cmluZyhjKX07Xy56
LnByb3RvdHlwZS50b1N0cmluZz1mdW5jdGlvbigpe3ljKHRoaXMpO3JldHVybiB0aGlzLmou
dG9TdHJpbmcoKX07DQpfLko9ZnVuY3Rpb24oKXt0aGlzLlJhPXRoaXMuUmE7dGhpcy5NYj10
aGlzLk1ifTtfLkoucHJvdG90eXBlLlJhPSExO18uSi5wcm90b3R5cGUuc2E9ZnVuY3Rpb24o
KXt0aGlzLlJhfHwodGhpcy5SYT0hMCx0aGlzLlAoKSl9O18uSi5wcm90b3R5cGUuUD1mdW5j
dGlvbigpe2lmKHRoaXMuTWIpZm9yKDt0aGlzLk1iLmxlbmd0aDspdGhpcy5NYi5zaGlmdCgp
KCl9Ow0KdmFyIEFjPWZ1bmN0aW9uKGEpe18uQSh0aGlzLGEsMCwtMSxudWxsLG51bGwpfTtf
LncoQWMsXy56KTsNCl8uQmM9ZnVuY3Rpb24oYSl7Xy5BKHRoaXMsYSwwLC0xLG51bGwsbnVs
bCl9O18udyhfLkJjLF8ueik7DQp2YXIgQ2M9ZnVuY3Rpb24oYSl7Xy5BKHRoaXMsYSwwLC0x
LG51bGwsbnVsbCl9O18udyhDYyxfLnopOw0KXy5EYz1mdW5jdGlvbihhKXtfLkEodGhpcyxh
LDAsLTEsbnVsbCxudWxsKX07Xy53KF8uRGMsXy56KTsNCl8uRWM9ZnVuY3Rpb24oYSl7Xy5B
KHRoaXMsYSwwLC0xLG51bGwsbnVsbCl9O18udyhfLkVjLF8ueik7DQp2YXIgRmM9ZnVuY3Rp
b24oYSl7Xy5KLmNhbGwodGhpcyk7dGhpcy5qPWE7dGhpcy5iPVtdO3RoaXMuZj17fX07Xy53
KEZjLF8uSik7RmMucHJvdG90eXBlLkdjPWZ1bmN0aW9uKCl7Zm9yKHZhciBhPXRoaXMuYi5s
ZW5ndGgsYz10aGlzLmIsZD1bXSxlPTA7ZTxhOysrZSl7dmFyIGY9Y1tlXS5iKCk7YTp7dmFy
IGc9dGhpcy5qO2Zvcih2YXIgaD1mLnNwbGl0KCIuIiksbD1oLmxlbmd0aCxtPTA7bTxsOysr
bSlpZihnW2hbbV1dKWc9Z1toW21dXTtlbHNle2c9bnVsbDticmVhayBhfWc9ZyBpbnN0YW5j
ZW9mIEZ1bmN0aW9uP2c6bnVsbH1pZihnJiZnIT10aGlzLmZbZl0pdHJ5e2NbZV0uR2MoZyl9
Y2F0Y2gobil7fWVsc2UgZC5wdXNoKGNbZV0pfXRoaXMuYj1kLmNvbmNhdChjLnNsaWNlKGEp
KX07DQp2YXIgR2M9ZnVuY3Rpb24oYSl7Xy5KLmNhbGwodGhpcyk7dGhpcy53PWE7dGhpcy5q
PXRoaXMuYj1udWxsO3RoaXMuQT0wO3RoaXMubz17fTt0aGlzLmY9ITE7YT13aW5kb3cubmF2
aWdhdG9yLnVzZXJBZ2VudDswPD1hLmluZGV4T2YoIk1TSUUiKSYmMDw9YS5pbmRleE9mKCJU
cmlkZW50IikmJihhPS9cYig/Ok1TSUV8cnYpWzogXShbXlwpO10rKShcKXw7KS8uZXhlYyhh
KSkmJmFbMV0mJjk+cGFyc2VGbG9hdChhWzFdKSYmKHRoaXMuZj0hMCl9O18ucChHYyxfLkop
O0djLnByb3RvdHlwZS5CPWZ1bmN0aW9uKGEsYyl7dGhpcy5iPWM7dGhpcy5qPWE7Yy5wcmV2
ZW50RGVmYXVsdD9jLnByZXZlbnREZWZhdWx0KCk6Yy5yZXR1cm5WYWx1ZT0hMX07DQpfLkhj
PWZ1bmN0aW9uKGEpe18uQSh0aGlzLGEsMCwtMSxudWxsLG51bGwpfTtfLncoXy5IYyxfLnop
Ow0KXy5JYz1mdW5jdGlvbihhKXtfLkEodGhpcyxhLDAsLTEsbnVsbCxudWxsKX07Xy53KF8u
SWMsXy56KTsNCl8uSz1mdW5jdGlvbihhLGMpe3JldHVybiBudWxsIT1hPyEhYTohIWN9O18u
TD1mdW5jdGlvbihhLGMpe3ZvaWQgMD09YyYmKGM9IiIpO3JldHVybiBudWxsIT1hP2E6Y307
Xy5KYz1mdW5jdGlvbihhLGMpe3ZvaWQgMD09YyYmKGM9MCk7cmV0dXJuIG51bGwhPWE/YTpj
fTsNCl8uTWM9ZnVuY3Rpb24oKXt0aGlzLmRhdGE9e319O18uTWMucHJvdG90eXBlLmI9ZnVu
Y3Rpb24oKXt3aW5kb3cuY29uc29sZSYmd2luZG93LmNvbnNvbGUubG9nJiZ3aW5kb3cuY29u
c29sZS5sb2coIkxvZyBkYXRhOiAiLHRoaXMuZGF0YSl9O18uTWMucHJvdG90eXBlLmY9ZnVu
Y3Rpb24oYSl7dmFyIGM9W10sZDtmb3IoZCBpbiB0aGlzLmRhdGEpYy5wdXNoKGVuY29kZVVS
SUNvbXBvbmVudChkKSsiPSIrZW5jb2RlVVJJQ29tcG9uZW50KFN0cmluZyh0aGlzLmRhdGFb
ZF0pKSk7cmV0dXJuKCJhdHlwPWkmeng9IisobmV3IERhdGUpLmdldFRpbWUoKSsiJiIrYy5q
b2luKCImIikpLnN1YnN0cigwLGEpfTsNCnZhciBOYz1mdW5jdGlvbihhLGMpe3RoaXMuZGF0
YT17fTt2YXIgZD1fLkcoYSxDYyw4KXx8bmV3IENjO3dpbmRvdy5nb29nbGUmJndpbmRvdy5n
b29nbGUua0VJJiYodGhpcy5kYXRhLmVpPXdpbmRvdy5nb29nbGUua0VJKTt0aGlzLmRhdGEu
c2VpPV8uTChfLkIoYSwxMCkpO3RoaXMuZGF0YS5vZ2Y9Xy5MKF8uQihkLDMpKTt2YXIgZT13
aW5kb3cuZ29vZ2xlJiZ3aW5kb3cuZ29vZ2xlLnNuPy8uKmhwJC8udGVzdCh3aW5kb3cuZ29v
Z2xlLnNuKT8hMTohMDpfLksoXy5EKGEsNykpO3RoaXMuZGF0YS5vZ3JwPWU/IjEiOiIiO3Ro
aXMuZGF0YS5vZ3Y9Xy5MKF8uQihkLDYpKSsiLiIrXy5MKF8uQihkLDcpKTt0aGlzLmRhdGEu
b2dkPV8uTChfLkIoYSwyMSkpO3RoaXMuZGF0YS5vZ2M9Xy5MKF8uQihhLDIwKSk7dGhpcy5k
YXRhLm9nbD1fLkwoXy5CKGEsNSkpO2MmJih0aGlzLmRhdGEub2dndj1jKX07Xy53KE5jLF8u
TWMpOw0KXy5PYz1mdW5jdGlvbihhLGMsZCxlLGYpe05jLmNhbGwodGhpcyxhLGMpO18uU2Eo
dGhpcy5kYXRhLHtqZXhwaWQ6Xy5MKF8uQihhLDkpKSxzcmNwZzoicHJvcD0iK18uTChfLkIo
YSw2KSksanNyOk1hdGgucm91bmQoMS9lKSxlbXNnOmQubmFtZSsiOiIrZC5tZXNzYWdlfSk7
aWYoZil7Zi5fc24mJihmLl9zbj0ib2cuIitmLl9zbik7Zm9yKHZhciBnIGluIGYpdGhpcy5k
YXRhW2VuY29kZVVSSUNvbXBvbmVudChnKV09ZltnXX19O18udyhfLk9jLE5jKTsNCnZhciBQ
YyxTYyxSYztfLlFjPWZ1bmN0aW9uKGEpe3ZhciBjPXdpbmRvdy5nb29nbGUmJndpbmRvdy5n
b29nbGUubG9nVXJsPyIiOiJodHRwczovL3d3dy5nb29nbGUuY29tIjtjKz0iL2dlbl8yMDQ/
IjtjKz1hLmYoMjA0MC1jLmxlbmd0aCk7UGMoXy5uYihjKSl9O1BjPWZ1bmN0aW9uKGEpe3Zh
ciBjPW5ldyBJbWFnZTtjLm9uZXJyb3I9Yy5vbmxvYWQ9Yy5vbmFib3J0PWZ1bmN0aW9uKCl7
UmMgaW4gU2MmJmRlbGV0ZSBTY1tSY119O1NjW1JjKytdPWM7Yy5zcmM9Xy5sYihhKX07U2M9
W107UmM9MDsNCl8uVGM9ZnVuY3Rpb24oYSl7Xy5BKHRoaXMsYSwwLC0xLG51bGwsbnVsbCl9
O18udyhfLlRjLF8ueik7DQp2YXIgJGM7Xy5VYz1mdW5jdGlvbigpe3RoaXMuYj17fTt0aGlz
LmY9e319O18ueGEoXy5VYyk7Xy5XYz1mdW5jdGlvbihhKXtyZXR1cm4gXy5WYyhfLlVjLnVh
KCksYSl9O18uWWM9ZnVuY3Rpb24oYSxjKXt2YXIgZD1fLlVjLnVhKCk7aWYoYSBpbiBkLmIp
e2lmKGQuYlthXSE9Yyl0aHJvdyBuZXcgWGMoYSk7fWVsc2V7ZC5iW2FdPWM7aWYoYz1kLmZb
YV0pZm9yKHZhciBlPTAsZj1jLmxlbmd0aDtlPGY7ZSsrKWNbZV0uYihkLmIsYSk7ZGVsZXRl
IGQuZlthXX19O18uVmM9ZnVuY3Rpb24oYSxjKXtpZihjIGluIGEuYilyZXR1cm4gYS5iW2Nd
O3Rocm93IG5ldyBaYyhjKTt9OyRjPWZ1bmN0aW9uKCl7Xy5KYS5jYWxsKHRoaXMpfTtfLnco
JGMsXy5KYSk7dmFyIFhjPWZ1bmN0aW9uKCl7Xy5KYS5jYWxsKHRoaXMpfTtfLncoWGMsJGMp
O3ZhciBaYz1mdW5jdGlvbigpe18uSmEuY2FsbCh0aGlzKX07Xy53KFpjLCRjKTsNCnZhciBj
ZD1mdW5jdGlvbigpe3ZhciBhPWFkO3RoaXMuRz1iZDt0aGlzLnc9Xy5KYyhfLnhjKGEsMiwu
MDAxKSwuMDAxKTt0aGlzLkQ9Xy5LKF8uRChhLDEpKSYmTWF0aC5yYW5kb20oKTx0aGlzLnc7
dGhpcy5CPV8uSmMoXy5FKGEsMywxKSwxKTt0aGlzLm89MDt0aGlzLmI9dGhpcy5qPW51bGw7
Xy53YyhhLDQsITApO3RoaXMuZj1fLkpjKF8ueGMoYSw1LC4xKSwuMSk7dGhpcy5BPU1hdGgu
cmFuZG9tKCk8dGhpcy5mfTsNCmNkLnByb3RvdHlwZS5sb2c9ZnVuY3Rpb24oYSxjKXtpZih0
aGlzLmImJnRoaXMuQSl7dmFyIGQ9bmV3IEFjO18uRihkLDEsYS5tZXNzYWdlKTtfLkYoZCwy
LGEuc3RhY2spO18uRihkLDMsYS5saW5lTnVtYmVyKTtfLkYoZCw0LHRoaXMuZik7Xy5GKGQs
NSwxKTt2YXIgZT1uZXcgXy5CYztfLkgoZSw0MCxkKTt0aGlzLmIubG9nKDk4LGUpfXRyeXtp
Zih0aGlzLkQmJnRoaXMubzx0aGlzLkIpe3RyeXt2YXIgZj0odGhpcy5qfHxfLlZjKF8uVWMu
dWEoKSwibG0iKSkuYihhLGMpfWNhdGNoKGcpe2Y9bmV3IF8uT2ModGhpcy5HLCJxdWFudHVt
OmdhcGlCdWlsZExhYmVsIixhLHRoaXMudyxjKX1fLlFjKGYpO3RoaXMubysrfX1jYXRjaChn
KXt9fTsNCnZhciBkZD1bMSwyLDMsNCw1LDYsOSwxMCwxMSwxMywxNCwyOCwyOSwzMCwzNCwz
NSwzNywzOCwzOSw0MCw0Miw0Myw0OCw0OSw1MCw1MSw1Miw1Myw2Miw1MDBdLGdkPWZ1bmN0
aW9uKGEsYyxkLGUsZixnKXtOYy5jYWxsKHRoaXMsYSxjKTtfLlNhKHRoaXMuZGF0YSx7b2dl
OmUsb2dleDpfLkwoXy5CKGEsOSkpLG9ncDpfLkwoXy5CKGEsNikpLG9nc3I6TWF0aC5yb3Vu
ZCgxLyhlZChlKT9fLkpjKF8ueGMoZCwzLDEpKTpfLkpjKF8ueGMoZCwyLDFFLTQpKSkpLG9n
dXM6Zn0pO2lmKGcpeyJvZ3ciaW4gZyYmKHRoaXMuZGF0YS5vZ3c9Zy5vZ3csZGVsZXRlIGcu
b2d3KTsidmVkImluIGcmJih0aGlzLmRhdGEudmVkPWcudmVkLGRlbGV0ZSBnLnZlZCk7YT1b
XTtmb3IodmFyIGggaW4gZykwIT1hLmxlbmd0aCYmYS5wdXNoKCIsIiksYS5wdXNoKGZkKGgp
KSxhLnB1c2goIi4iKSxhLnB1c2goZmQoZ1toXSkpO2c9YS5qb2luKCIiKTsiIiE9ZyYmKHRo
aXMuZGF0YS5vZ2FkPWcpfX07DQpfLncoZ2QsTmMpO3ZhciBmZD1mdW5jdGlvbihhKXthPVN0
cmluZyhhKTtyZXR1cm4gYS5yZXBsYWNlKCIuIiwiJTJFIikucmVwbGFjZSgiLCIsIiUyQyIp
fSxoZD1udWxsLGVkPWZ1bmN0aW9uKGEpe2lmKCFoZCl7aGQ9e307Zm9yKHZhciBjPTA7Yzxk
ZC5sZW5ndGg7YysrKWhkW2RkW2NdXT0hMH1yZXR1cm4hIWhkW2FdfTsNCnZhciBsZD1mdW5j
dGlvbigpe3ZhciBhPWlkLGM9amQsZD1rZDt0aGlzLkE9YTt0aGlzLnc9Yzt0aGlzLm89Xy5K
YyhfLnhjKGEsMiwxRS00KSwxRS00KTt0aGlzLmY9Xy5KYyhfLnhjKGEsMywxKSwxKTtjPU1h
dGgucmFuZG9tKCk7dGhpcy5qPV8uSyhfLkQoYSwxKSkmJmM8dGhpcy5vO3RoaXMuYj1fLkso
Xy5EKGEsMSkpJiZjPHRoaXMuZjthPTA7Xy5LKF8uRChkLDEpKSYmKGF8PTEpO18uSyhfLkQo
ZCwyKSkmJihhfD0yKTtfLksoXy5EKGQsMykpJiYoYXw9NCk7dGhpcy5CPWF9O2xkLnByb3Rv
dHlwZS5sb2c9ZnVuY3Rpb24oYSxjKXt0cnl7aWYoZWQoYSk/dGhpcy5iOnRoaXMuail7dmFy
IGQ9bmV3IGdkKHRoaXMudywicXVhbnR1bTpnYXBpQnVpbGRMYWJlbCIsdGhpcy5BLGEsdGhp
cy5CLGMpO18uUWMoZCl9fWNhdGNoKGUpe319Ow0KdmFyIG1kPWZ1bmN0aW9uKGEpe18uQSh0
aGlzLGEsMCwtMSxudWxsLG51bGwpfTtfLncobWQsXy56KTsNCnZhciBuZD1mdW5jdGlvbihh
KXt0aGlzLmI9YTt0aGlzLmY9dm9pZCAwO3RoaXMuaj1bXX07bmQucHJvdG90eXBlLnRoZW49
ZnVuY3Rpb24oYSxjLGQpe3RoaXMuai5wdXNoKG5ldyBvZChhLGMsZCkpO18ucGQodGhpcyl9
O18ucWQ9ZnVuY3Rpb24oYSxjKXtpZih2b2lkIDAhPT1hLmJ8fHZvaWQgMCE9PWEuZil0aHJv
dyBFcnJvcigibSIpO2EuYj1jO18ucGQoYSl9O18ucGQ9ZnVuY3Rpb24oYSl7aWYoMDxhLmou
bGVuZ3RoKXt2YXIgYz12b2lkIDAhPT1hLmIsZD12b2lkIDAhPT1hLmY7aWYoY3x8ZCl7Yz1j
P2EubzphLnc7ZD1hLmo7YS5qPVtdO3RyeXsoMCxfLkxhKShkLGMsYSl9Y2F0Y2goZSl7Y29u
c29sZS5lcnJvcihlKX19fX07bmQucHJvdG90eXBlLm89ZnVuY3Rpb24oYSl7YS5mJiZhLmYu
Y2FsbChhLmIsdGhpcy5iKX07bmQucHJvdG90eXBlLnc9ZnVuY3Rpb24oYSl7YS5qJiZhLmou
Y2FsbChhLmIsdGhpcy5mKX07DQp2YXIgb2Q9ZnVuY3Rpb24oYSxjLGQpe3RoaXMuZj1hO3Ro
aXMuaj1jO3RoaXMuYj1kfTsNCl8ucmQ9ZnVuY3Rpb24oKXt0aGlzLm89bmV3IG5kO3RoaXMu
Zj1uZXcgbmQ7dGhpcy5CPW5ldyBuZDt0aGlzLnc9bmV3IG5kO3RoaXMuQT1uZXcgbmQ7dGhp
cy5EPW5ldyBuZDt0aGlzLkc9bmV3IG5kO3RoaXMuYj1uZXcgbmQ7dGhpcy5qPW5ldyBuZH07
Xy54YShfLnJkKTtfLms9Xy5yZC5wcm90b3R5cGU7Xy5rLnhoPWZ1bmN0aW9uKCl7cmV0dXJu
IHRoaXMub307Xy5rLkZoPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuZn07Xy5rLktoPWZ1bmN0
aW9uKCl7cmV0dXJuIHRoaXMuQn07Xy5rLkVoPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMud307
Xy5rLkloPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuQX07Xy5rLkxoPWZ1bmN0aW9uKCl7cmV0
dXJuIHRoaXMuRH07Xy5rLkJoPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuR307Xy5rLkNoPWZ1
bmN0aW9uKCl7cmV0dXJuIHRoaXMuYn07Xy5rLm9oPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMu
an07DQp2YXIgc2Q9ZnVuY3Rpb24oYSl7Xy5BKHRoaXMsYSwwLC0xLG51bGwsbnVsbCl9O18u
dyhzZCxfLnopO18udWQ9ZnVuY3Rpb24oKXtyZXR1cm4gXy5HKF8udGQsXy5EYywxKX07Xy52
ZD1mdW5jdGlvbigpe3JldHVybiBfLkcoXy50ZCxfLkVjLDUpfTsNCnZhciB3ZDt3aW5kb3cu
Z2Jhcl8mJndpbmRvdy5nYmFyXy5DT05GSUc/d2Q9d2luZG93LmdiYXJfLkNPTkZJR1swXXx8
e306d2Q9W107Xy50ZD1uZXcgc2Qod2QpOw0KdmFyIGFkLGJkLGpkLGtkLGlkO2FkPV8uRyhf
LnRkLF8uVGMsMyl8fG5ldyBfLlRjO2JkPV8udWQoKXx8bmV3IF8uRGM7Xy5NPW5ldyBjZDtq
ZD1fLnVkKCl8fG5ldyBfLkRjO2tkPV8udmQoKXx8bmV3IF8uRWM7aWQ9Xy5HKF8udGQsbWQs
NCl8fG5ldyBtZDtfLnhkPW5ldyBsZDsNCl8udSgiZ2Jhcl8uX0R1bXBFeGNlcHRpb24iLGZ1
bmN0aW9uKGEpe18uTT9fLk0ubG9nKGEpOmNvbnNvbGUuZXJyb3IoYSl9KTsNCl8ueWQ9bmV3
IEdjKF8uTSk7DQpfLnhkLmxvZyg4LHttOiJCYWNrQ29tcGF0Ij09ZG9jdW1lbnQuY29tcGF0
TW9kZT8icSI6InMifSk7Xy51KCJnYmFyLkEiLG5kKTtuZC5wcm90b3R5cGUuYWE9bmQucHJv
dG90eXBlLnRoZW47Xy51KCJnYmFyLkIiLF8ucmQpO18ucmQucHJvdG90eXBlLmJhPV8ucmQu
cHJvdG90eXBlLkZoO18ucmQucHJvdG90eXBlLmJiPV8ucmQucHJvdG90eXBlLktoO18ucmQu
cHJvdG90eXBlLmJkPV8ucmQucHJvdG90eXBlLkloO18ucmQucHJvdG90eXBlLmJlPV8ucmQu
cHJvdG90eXBlLkxoO18ucmQucHJvdG90eXBlLmJmPV8ucmQucHJvdG90eXBlLnhoO18ucmQu
cHJvdG90eXBlLmJnPV8ucmQucHJvdG90eXBlLkVoO18ucmQucHJvdG90eXBlLmJoPV8ucmQu
cHJvdG90eXBlLkJoO18ucmQucHJvdG90eXBlLmJpPV8ucmQucHJvdG90eXBlLkNoO18ucmQu
cHJvdG90eXBlLmJqPV8ucmQucHJvdG90eXBlLm9oO18udSgiZ2Jhci5hIixfLnJkLnVhKCkp
O3ZhciB6ZD1uZXcgRmMod2luZG93KTsNCl8uWWMoImFwaSIsemQpO3ZhciBBZD1fLnZkKCl8
fG5ldyBfLkVjLEJkPV8uTChfLkIoQWQsOCkpO3dpbmRvdy5fX1BWVD1CZDtfLlljKCJlcSIs
Xy55ZCk7DQoNCn1jYXRjaChlKXtfLl9EdW1wRXhjZXB0aW9uKGUpfQ0KdHJ5ew0KdmFyIENk
PWZ1bmN0aW9uKGEpe18uQSh0aGlzLGEsMCwtMSxudWxsLG51bGwpfTtfLncoQ2QsXy56KTsN
CnZhciBEZD1mdW5jdGlvbigpe18uSi5jYWxsKHRoaXMpO3RoaXMuZj1bXTt0aGlzLmI9W119
O18ucChEZCxfLkopO0RkLnByb3RvdHlwZS5qPWZ1bmN0aW9uKGEsYyl7dGhpcy5mLnB1c2go
e1JkOmEsb3B0aW9uczpjfSl9O0RkLnByb3RvdHlwZS5pbml0PWZ1bmN0aW9uKGEsYyxkKXt3
aW5kb3cuZ2FwaT17fTt2YXIgZT13aW5kb3cuX19fanNsPXt9O2UuaD1fLkwoXy5CKGEsMSkp
O251bGwhPV8uQihhLDEyKSYmKGUuZHBvPV8uSyhfLkQoYSwxMikpKTtlLm1zPV8uTChfLkIo
YSwyKSk7ZS5tPV8uTChfLkIoYSwzKSk7ZS5sPVtdO18uQihjLDEpJiYoYT1fLkIoYywzKSkm
JnRoaXMuYi5wdXNoKGEpO18uQihkLDEpJiYoZD1fLkIoZCwyKSkmJnRoaXMuYi5wdXNoKGQp
O18udSgiZ2FwaS5sb2FkIiwoMCxfLnQpKHRoaXMuaix0aGlzKSk7cmV0dXJuIHRoaXN9Ow0K
dmFyIEVkPV8uRyhfLnRkLF8uSGMsMTQpfHxuZXcgXy5IYyxGZD1fLkcoXy50ZCxfLkljLDkp
fHxuZXcgXy5JYyxHZD1uZXcgQ2QsSGQ9bmV3IERkO0hkLmluaXQoRWQsRmQsR2QpO18uWWMo
ImdzIixIZCk7DQoNCn1jYXRjaChlKXtfLl9EdW1wRXhjZXB0aW9uKGUpfQ0KfSkodGhpcy5n
YmFyXyk7DQovLyBHb29nbGUgSW5jLg0KPC9zY3JpcHQ+PHRpdGxlPkFsZXJ0ZSBkZSBzw6lj
dXJpdMOpIGNyaXRpcXVlPC90aXRsZT48c2NyaXB0IG5vbmNlPSJqSmxCVnE4Y0FxTWJSQTlz
elVxR0V3Ij52YXIgQUZfaW5pdERhdGFLZXlzID0gWyJkczowIiwiZHM6MSIsImRzOjIiLCJk
czozIiwiZHM6NCJdDQo7IHZhciBBRl9kYXRhU2VydmljZVJlcXVlc3RzID0geydkczoyJyA6
IHtpZDonWlBvVmtmJyxleHQ6IDEuMjcyOTg0NzJFOCAscmVxdWVzdDpbXQ0KfSwnZHM6MScg
OiB7aWQ6J0dkVExiZCcsZXh0OiAxLjI3ODIzNjNFOCAscmVxdWVzdDpbXQ0KfSwnZHM6MCcg
OiB7aWQ6J25LVUxCZCcsZXh0OiA2LjI0NjI1MjlFNyAscmVxdWVzdDpbXQ0KfSwnZHM6NCcg
OiB7aWQ6J3pPTUVwYicsZXh0OiAxLjQ1Mjg2MzYxRTggLHJlcXVlc3Q6W251bGwsMjcsMSwi
LTM1Mzc1Nzg1MTQzODMzMjMxODEiLG51bGwsZmFsc2VdDQp9LCdkczozJyA6IHtpZDonUU9Q
eVBkJyxleHQ6IDEuMTgwMjE3OTdFOCAscmVxdWVzdDpbXQ0KfX07IHZhciBBRl9pbml0RGF0
YUNodW5rUXVldWUgPSBbXTsgdmFyIEFGX2luaXREYXRhQ2FsbGJhY2s7IHZhciBBRl9pbml0
RGF0YUluaXRpYWxpemVDYWxsYmFjazsgaWYgKEFGX2luaXREYXRhSW5pdGlhbGl6ZUNhbGxi
YWNrKSB7QUZfaW5pdERhdGFJbml0aWFsaXplQ2FsbGJhY2soQUZfaW5pdERhdGFLZXlzLCBB
Rl9pbml0RGF0YUNodW5rUXVldWUsIEFGX2RhdGFTZXJ2aWNlUmVxdWVzdHMpO31pZiAoIUFG
X2luaXREYXRhQ2FsbGJhY2spIHtBRl9pbml0RGF0YUNhbGxiYWNrID0gZnVuY3Rpb24oY2h1
bmspIHtBRl9pbml0RGF0YUNodW5rUXVldWUucHVzaChjaHVuayk7fTt9PC9zY3JpcHQ+PGxp
bmsgaHJlZj0iQWxlcnRlJTIwZGUlMjBzJUMzJUE5Y3VyaXQlQzMlQTklMjBjcml0aXF1ZV9m
aWNoaWVycy9jc3MuY3NzIiByZWw9InN0eWxlc2hlZXQiPjxzY3JpcHQgYXN5bmM9IiIgdHlw
ZT0idGV4dC9qYXZhc2NyaXB0IiBjaGFyc2V0PSJVVEYtOCIgc3JjPSJBbGVydGUlMjBkZSUy
MHMlQzMlQTljdXJpdCVDMyVBOSUyMGNyaXRpcXVlX2ZpY2hpZXJzL3JzQUEyWXJUdm9ZalN1
UUhJRzdMZFAxRFQxOVJRMEVUTEFoQSIgbm9uY2U9ImpKbEJWcThjQXFNYlJBOXN6VXFHRXci
Pjwvc2NyaXB0PjxsaW5rIHR5cGU9InRleHQvY3NzIiByZWw9InN0eWxlc2hlZXQiIGhyZWY9
IkFsZXJ0ZSUyMGRlJTIwcyVDMyVBOWN1cml0JUMzJUE5JTIwY3JpdGlxdWVfZmljaGllcnMv
cnNBQTJZclR2dmxIZ0ZQWTVQMEYyUy0xaFZwcGdYQjVtU2pnLmNzcyI+PHN0eWxlIHR5cGU9
InRleHQvY3NzIj4jZ2IxIC5nYl9wOjpiZWZvcmV7bGVmdDowcHg7dG9wOi0xMzhweH08L3N0
eWxlPjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyIgZGF0YS1sYXRlLWNzcz0iIj4uRURJZDBje3Bv
c2l0aW9uOnJlbGF0aXZlfS5uaGg0SWN7cG9zaXRpb246YWJzb2x1dGU7bGVmdDowO3JpZ2h0
OjA7dG9wOjA7ei1pbmRleDoxO3BvaW50ZXItZXZlbnRzOm5vbmV9Lm5oaDRJY1tkYXRhLXN0
YXRlPSJzbmFwcGluZyJdLC5uaGg0SWNbZGF0YS1zdGF0ZT0iY2FuY2VsbGVkIl17LW1vei10
cmFuc2l0aW9uOnRyYW5zZm9ybSAyMDBtczt0cmFuc2l0aW9uOnRyYW5zZm9ybSAyMDBtc30u
TUdVRm5me2Rpc3BsYXk6YmxvY2s7d2lkdGg6MjhweDtoZWlnaHQ6MjhweDtwYWRkaW5nOjE1
cHg7bWFyZ2luOjAgYXV0bzt0cmFuc2Zvcm06c2NhbGUoMC43KTtiYWNrZ3JvdW5kLWNvbG9y
OiNmYWZhZmE7Ym9yZGVyOjFweCBzb2xpZCAjZTBlMGUwOy1tb3otYm9yZGVyLXJhZGl1czo1
MCU7Ym9yZGVyLXJhZGl1czo1MCU7LW1vei1ib3gtc2hhZG93OjAgMnB4IDJweCAwIHJnYmEo
MCwwLDAsMC4yKTtib3gtc2hhZG93OjAgMnB4IDJweCAwIHJnYmEoMCwwLDAsMC4yKTstbW96
LXRyYW5zaXRpb246b3BhY2l0eSA0MDBtczt0cmFuc2l0aW9uOm9wYWNpdHkgNDAwbXN9Lm5o
aDRJY1tkYXRhLXN0YXRlPSJyZXN0aW5nIl0gLk1HVUZuZiwubmhoNEljW2RhdGEtc3RhdGU9
ImNvb2xkb3duIl0gLk1HVUZuZnt0cmFuc2Zvcm06c2NhbGUoMCk7LW1vei10cmFuc2l0aW9u
OnRyYW5zZm9ybSAxNTBtczt0cmFuc2l0aW9uOnRyYW5zZm9ybSAxNTBtc30ubmhoNEljIC5M
TENhMGV7c3Ryb2tlLXdpZHRoOjMuNnB4Oy1tb3otdHJhbnNmb3JtOnRyYW5zbGF0ZVooMXB4
KTt0cmFuc2Zvcm06dHJhbnNsYXRlWigxcHgpfS5uaGg0SWNbZGF0YS1wYXN0LXRocmVzaG9s
ZD0iZmFsc2UiXSAuTExDYTBle29wYWNpdHk6LjN9LnJPaEF4YntmaWxsOiM0Mjg1ZjQ7c3Ry
b2tlOiM0Mjg1ZjR9LkE2VVVxZXtkaXNwbGF5Om5vbmU7c3Ryb2tlLXdpZHRoOjNweDt3aWR0
aDoyOHB4O2hlaWdodDoyOHB4fS50YmNWT3t3aWR0aDoyOHB4O2hlaWdodDoyOHB4fS5iUTdv
a2V7cG9zaXRpb246YWJzb2x1dGU7d2lkdGg6MDtoZWlnaHQ6MDtvdmVyZmxvdzpoaWRkZW59
LkE2VVVxZS5xczQxcWV7YW5pbWF0aW9uLW5hbWU6cXVhbnR1bVdpelNwaW5uZXJSb3RhdGU7
YW5pbWF0aW9uLWR1cmF0aW9uOjE1NjguNjNtczthbmltYXRpb24taXRlcmF0aW9uLWNvdW50
OmluZmluaXRlO2FuaW1hdGlvbi10aW1pbmctZnVuY3Rpb246bGluZWFyO2Rpc3BsYXk6aW5s
aW5lLWJsb2NrfS5BNlVVcWUuU2RvV2pie2Rpc3BsYXk6aW5saW5lLWJsb2NrfS5BNlVVcWUu
cXM0MXFlIC5jZUlXcGN7c3Ryb2tlOm5vbmU7ZmlsbDpub25lfS5BNlVVcWUuc2Y0ZTZiIC5x
alVDa2Z7c3Ryb2tlLXdpZHRoOjB9LnFqVUNrZnstbW96LXRyYW5zaXRpb246c3Ryb2tlLXdp
ZHRoIDQwMG1zO3RyYW5zaXRpb246c3Ryb2tlLXdpZHRoIDQwMG1zO3RyYW5zZm9ybS1vcmln
aW46MTRweCAxNHB4O3N0cm9rZS1kYXNoYXJyYXk6NTguOSA1OC45O3N0cm9rZS1kYXNob2Zm
c2V0OjU4Ljk7ZmlsbDpub25lOy1tb3otdHJhbnNmb3JtOnJvdGF0ZSgwZGVnKTt0cmFuc2Zv
cm06cm90YXRlKDBkZWcpfS5BNlVVcWUuU2RvV2piIC5xalVDa2Z7dHJhbnNpdGlvbi1kdXJh
dGlvbjowfS5BNlVVcWUuaVB3WmViIC5xalVDa2Z7YW5pbWF0aW9uLWRlbGF5Oi00NjZtcywt
NDY2bXMsLTQ2Nm1zfS5BNlVVcWUucXM0MXFlIC5xalVDa2Z7YW5pbWF0aW9uLW5hbWU6cXVh
bnR1bVdpelNwaW5uZXJGaWxsVW5maWxsLHF1YW50dW1XaXpTcGlubmVyUm90LHF1YW50dW1X
aXpTcGlubmVyQ29sb3JzO2FuaW1hdGlvbi1kdXJhdGlvbjoxMzMzbXMsNTMzMm1zLDUzMzJt
czthbmltYXRpb24taXRlcmF0aW9uLWNvdW50OmluZmluaXRlLGluZmluaXRlLGluZmluaXRl
O2FuaW1hdGlvbi10aW1pbmctZnVuY3Rpb246Y3ViaWMtYmV6aWVyKDAuNCwwLjAsMC4yLDEp
LHN0ZXBzKDQpLGxpbmVhcjthbmltYXRpb24tZmlsbC1tb2RlOmZvcndhcmRzfUBrZXlmcmFt
ZXMgcXVhbnR1bVdpelNwaW5uZXJSb3RhdGV7MCV7LW1vei10cmFuc2Zvcm06cm90YXRlKDBk
ZWcpO3RyYW5zZm9ybTpyb3RhdGUoMGRlZyl9dG97LW1vei10cmFuc2Zvcm06cm90YXRlKDM2
MGRlZyk7dHJhbnNmb3JtOnJvdGF0ZSgzNjBkZWcpfX1Aa2V5ZnJhbWVzIHF1YW50dW1XaXpT
cGlubmVyRmlsbFVuZmlsbHswJXtzdHJva2UtZGFzaG9mZnNldDo1OC44fTUwJXtzdHJva2Ut
ZGFzaG9mZnNldDowfXRve3N0cm9rZS1kYXNob2Zmc2V0Oi01OC40fX1Aa2V5ZnJhbWVzIHF1
YW50dW1XaXpTcGlubmVyUm90ezAley1tb3otdHJhbnNmb3JtOnJvdGF0ZSgwZGVnKTt0cmFu
c2Zvcm06cm90YXRlKDBkZWcpfXRvey1tb3otdHJhbnNmb3JtOnJvdGF0ZSgtMzYwZGVnKTt0
cmFuc2Zvcm06cm90YXRlKC0zNjBkZWcpfX1Aa2V5ZnJhbWVzIHF1YW50dW1XaXpTcGlubmVy
Q29sb3JzezAle3N0cm9rZTojNDI4NWY0fTE4JXtzdHJva2U6IzQyODVmNH0yNSV7c3Ryb2tl
OiNkYjQ0Mzd9NDMle3N0cm9rZTojZGI0NDM3fTUwJXtzdHJva2U6I2Y0YjQwMH02OCV7c3Ry
b2tlOiNmNGI0MDB9NzUle3N0cm9rZTojMGY5ZDU4fTkzJXtzdHJva2U6IzBmOWQ1OH10b3tz
dHJva2U6IzQyODVmNH19LktMNFg2ZXtiYWNrZ3JvdW5kOiNlZWVlZWU7Ym90dG9tOjA7bGVm
dDowO29wYWNpdHk6MDtwb3NpdGlvbjphYnNvbHV0ZTtyaWdodDowO3RvcDowfS5UdUE0NWJ7
b3BhY2l0eTouOH1zZW50aW5lbHt9PC9zdHlsZT48c3R5bGUgdHlwZT0idGV4dC9jc3MiIGRh
dGEtbGF0ZS1jc3M9IiI+Lk1oME5OYntiYWNrZ3JvdW5kLWNvbG9yOiMzMjMyMzI7Ym90dG9t
OjA7Ym94LXNpemluZzpib3JkZXItYm94Oy1tb3otYm94LXNoYWRvdzowIDZweCAxMHB4IDAg
cmdiYSgwLDAsMCwwLjE0KSwwIDFweCAxOHB4IDAgcmdiYSgwLDAsMCwwLjEyKSwwIDNweCA1
cHggLTFweCByZ2JhKDAsMCwwLDAuMik7Ym94LXNoYWRvdzowIDZweCAxMHB4IDAgcmdiYSgw
LDAsMCwwLjE0KSwwIDFweCAxOHB4IDAgcmdiYSgwLDAsMCwwLjEyKSwwIDNweCA1cHggLTFw
eCByZ2JhKDAsMCwwLDAuMik7Y29sb3I6I2ZmZjtkaXNwbGF5Oi13ZWJraXQtYm94O2Rpc3Bs
YXk6LW1vei1ib3g7ZGlzcGxheTotd2Via2l0LWZsZXg7ZGlzcGxheTotbXMtZmxleGJveDtk
aXNwbGF5OmZsZXg7ZmxleC1kaXJlY3Rpb246Y29sdW1uO2ZvbnQtc2l6ZToxNHB4O2xlZnQ6
MDttaW4taGVpZ2h0OjQ4cHg7cG9zaXRpb246Zml4ZWQ7cmlnaHQ6MDt0cmFuc2Zvcm06dHJh
bnNsYXRlKDAsMTAwJSk7dmlzaWJpbGl0eTpoaWRkZW47ei1pbmRleDo5OTk5OX0uTTZ0SHZ7
LW1vei1ib3gtYWxpZ246Y2VudGVyO2JveC1hbGlnbjpjZW50ZXI7YWxpZ24taXRlbXM6Y2Vu
dGVyO2FsaWduLWNvbnRlbnQ6Y2VudGVyO2Rpc3BsYXk6LXdlYmtpdC1ib3g7ZGlzcGxheTot
bW96LWJveDtkaXNwbGF5Oi13ZWJraXQtZmxleDtkaXNwbGF5Oi1tcy1mbGV4Ym94O2Rpc3Bs
YXk6ZmxleDtmbGV4LWRpcmVjdGlvbjpyb3c7bWluLWhlaWdodDppbmhlcml0O3BhZGRpbmc6
MH0uYUdKRTFie2JveC1mbGV4OjE7ZmxleC1ncm93OjE7ZmxleC1zaHJpbms6MTtsaW5lLWhl
aWdodDpub3JtYWw7b3ZlcmZsb3c6aGlkZGVuO3BhZGRpbmc6MTRweCAyNHB4O3RleHQtb3Zl
cmZsb3c6ZWxsaXBzaXM7d29yZC1icmVhazpicmVhay13b3JkfS54OTVxemV7YWxpZ24tc2Vs
ZjpjZW50ZXI7Y29sb3I6I2VlZmY0MTtib3gtZmxleDowO2ZsZXgtZ3JvdzowO2ZsZXgtc2hy
aW5rOjA7ZmxvYXQ6cmlnaHQ7dGV4dC10cmFuc2Zvcm06dXBwZXJjYXNlO2ZvbnQtd2VpZ2h0
OjUwMDtkaXNwbGF5OmlubGluZS1ibG9jaztjdXJzb3I6cG9pbnRlcjtvdXRsaW5lOm5vbmU7
cGFkZGluZzoxNHB4IDI0cHh9LktZWm45YntiYWNrZ3JvdW5kLWNvbG9yOiM0Mjg1ZjR9Lm1p
c1RUZXt0cmFuc2Zvcm06dHJhbnNsYXRlKDAsMCl9QG1lZGlhIHNjcmVlbiBhbmQgKG1pbi13
aWR0aDo0ODFweCl7Lk1oME5OYnttaW4td2lkdGg6Mjg4cHg7bWF4LXdpZHRoOjU2OHB4Oy1t
b3otYm9yZGVyLXJhZGl1czoycHg7Ym9yZGVyLXJhZGl1czoycHh9Lk1wMlowYntsZWZ0OjI0
cHg7bWFyZ2luLXJpZ2h0OjI0cHg7cmlnaHQ6YXV0b30uVmNDOEZje2xlZnQ6NTAlO3JpZ2h0
OmF1dG87dHJhbnNmb3JtOnRyYW5zbGF0ZSgtNTAlLDEwMCUpfS5NcDJaMGIubWlzVFRle2Jv
dHRvbToyNHB4fS5WY0M4RmMubWlzVFRle2JvdHRvbTowO3RyYW5zZm9ybTp0cmFuc2xhdGUo
LTUwJSwwKX0uTTZ0SHZ7cGFkZGluZzowfS5hR0pFMWJ7cGFkZGluZy1yaWdodDoyNHB4fX1A
bWVkaWEgc2NyZWVuIGFuZCAobWF4LXdpZHRoOjQ4MHB4KXsueGJnSTZlIC5hR0pFMWIsLnhi
Z0k2ZSAueDk1cXple3BhZGRpbmctYm90dG9tOjI0cHg7cGFkZGluZy10b3A6MjRweH19QG1l
ZGlhIHNjcmVlbiBhbmQgKG1pbi13aWR0aDo0ODFweCkgYW5kIChtYXgtd2lkdGg6NTY4cHgp
ey5NaDBOTmJ7bWF4LXdpZHRoOjkwJX19QG1lZGlhIHNjcmVlbiBhbmQgKG1pbi13aWR0aDo1
NjlweCl7Lk1oME5OYnttYXgtd2lkdGg6NTY4cHh9fXNlbnRpbmVse308L3N0eWxlPjxzY3Jp
cHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBjaGFyc2V0PSJVVEYtOCIgc3JjPSJBbGVydGUl
MjBkZSUyMHMlQzMlQTljdXJpdCVDMyVBOSUyMGNyaXRpcXVlX2ZpY2hpZXJzLzltYWJKMGli
Ri1CUTkzdzBabnBnMllwNU94eV9PWEZCTXZmbmFVZV9zNjguanMiIG5vbmNlPSJqSmxCVnE4
Y0FxTWJSQTlzelVxR0V3Ij48L3NjcmlwdD48L2hlYWQ+PHNwYW4gaWQ9Indhcm5pbmctY29u
dGFpbmVyIj48aSBkYXRhLXJlYWN0cm9vdD0iIj48L2k+PC9zcGFuPjxib2R5IGlkPSJ5RG1I
MGQiIGpzY29udHJvbGxlcj0icGpJQ0RlIiBqc2FjdGlvbj0icmN1UTZiOm5wVDJtZDsgY2xp
Y2s6RkFicGdmOyBhdXhjbGljazpGQWJwZ2Y7YzB2OHQ6LkNMSUVOVDtValFNYWM6LkNMSUVO
VDtYd2dVSmU6LkNMSUVOVDtrZXlkb3duOi5DTElFTlQ7a2V5dXA6LkNMSUVOVDtrZXlwcmVz
czouQ0xJRU5UO25IanFEZDouQ0xJRU5UO3Fha280ZTouQ0xJRU5UO1RTcFdhZjouQ0xJRU5U
O0xoaVFlYzouQ0xJRU5UO20ycU5IZDouQ0xJRU5UO3dJTkppYzouQ0xJRU5UO0d2bmVIYjou
Q0xJRU5UIiBjbGFzcz0idFFqNVkgZ2h5UEVjIElxQmZNIGVjSkVpYiBFV1pjdWQgRUlsRGZl
IGQ4RXRkZCBjakdnSGIgTGNVejlkIHVPYXQzZCIgc3R5bGU9ImJvdHRvbTogYXV0bzsgcmln
aHQ6IGF1dG87IHdpZHRoOiBhdXRvOyBoZWlnaHQ6IDEwMCU7IG1pbi1oZWlnaHQ6IDEwMzZw
eDsiPjxkaXYgY2xhc3M9IndvdC1wb3B1cC1jb250YWluZXIiPjwvZGl2PjxzY3JpcHQgYXJp
YS1oaWRkZW49InRydWUiIG5vbmNlPSJqSmxCVnE4Y0FxTWJSQTlzelVxR0V3Ij53aW5kb3cu
d2l6X3Byb2dyZXNzJiZ3aW5kb3cud2l6X3Byb2dyZXNzKCk7PC9zY3JpcHQ+PGRpdiBjbGFz
cz0iVlVvS1oiIGFyaWEtaGlkZGVuPSJ0cnVlIj48ZGl2IGNsYXNzPSJUUkhMQWMiPjwvZGl2
PjwvZGl2PjxkaXYgY2xhc3M9InBHeHBIYyI+PGhlYWRlciBjbGFzcz0iZ2JfamEgZ2JfT2Eg
Z2JfUmUgZ2JfT2QgZ2JfRWMiIG5nLW5vbi1iaW5kYWJsZT0iIiBpZD0iZ2IiIHJvbGU9ImJh
bm5lciIgc3R5bGU9ImJhY2tncm91bmQtY29sb3I6cmdiYSgyNTUsMjU1LDI1NSwwLjk2KSI+
PGRpdiBjbGFzcz0iZ2JfOGQiPjxkaXYgY2xhc3M9ImdiX3pjIGdiX3hjIGdiX0VjIiBuZy1u
b24tYmluZGFibGU9IiI+PGRpdiBjbGFzcz0iZ2JfS2MiPjxkaXYgY2xhc3M9ImdiX2xjIj48
ZGl2IGNsYXNzPSJnYl9tYyI+PGEgY2xhc3M9ImdiX2tlIGdiX25jIGdiX2llIiBocmVmPSJo
dHRwczovL215YWNjb3VudC5nb29nbGUuY29tLz9hdXRodXNlcj0wIiB0aXRsZT0iUGFyYW3D
qHRyZXMgZGUgY29tcHRlIEdvb2dsZSI+PHNwYW4gY2xhc3M9ImdiX2xhIGdiX1djIj48L3Nw
YW4+PHNwYW4gY2xhc3M9ImdicG4gZ2JfNmQgZ2JfWmMiPkNvbXB0ZTwvc3Bhbj48L2E+PC9k
aXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfRmMiPjwvZGl2PjwvZGl2PjwvZGl2Pjxk
aXYgY2xhc3M9ImdiX05kIGdiXzRkIGdiX1ZkIGdiX1VkIj48ZGl2IGNsYXNzPSJnYl9UYyBn
Yl8wYyI+PGRpdiBjbGFzcz0iZ2JfcmMgZ2JfdmEiIGFyaWEtZXhwYW5kZWQ9ImZhbHNlIiBh
cmlhLWxhYmVsPSJNZW51IHByaW5jaXBhbCIgcm9sZT0iYnV0dG9uIiB0YWJpbmRleD0iMCI+
PHN2ZyBmb2N1c2FibGU9ImZhbHNlIiB2aWV3Qm94PSIwIDAgMjQgMjQiPjxwYXRoIGQ9Ik0z
IDE4aDE4di0ySDN2MnptMC01aDE4di0ySDN2MnptMC03djJoMThWNkgzeiI+PC9wYXRoPjwv
c3ZnPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3JjIGdiX3VjIGdiX3ZhIiBhcmlhLWxhYmVsPSJS
ZXRvdXIiIHJvbGU9ImJ1dHRvbiIgdGFiaW5kZXg9IjAiPjxzdmcgZm9jdXNhYmxlPSJmYWxz
ZSIgdmlld0JveD0iMCAwIDI0IDI0Ij48cGF0aCBkPSJNMjAgMTFINy44M2w1LjU5LTUuNTlM
MTIgNGwtOCA4IDggOCAxLjQxLTEuNDFMNy44MyAxM0gyMHYtMnoiPjwvcGF0aD48L3N2Zz48
L2Rpdj48ZGl2IGNsYXNzPSJnYl9yYyBnYl92YyBnYl92YSIgYXJpYS1sYWJlbD0iRmVybWVy
IiByb2xlPSJidXR0b24iIHRhYmluZGV4PSIwIj48c3ZnIHZpZXdCb3g9IjAgMCAyNCAyNCI+
PHBhdGggZD0iTTE5IDYuNDFMMTcuNTkgNSAxMiAxMC41OSA2LjQxIDUgNSA2LjQxIDEwLjU5
IDEyIDUgMTcuNTkgNi40MSAxOSAxMiAxMy40MSAxNy41OSAxOSAxOSAxNy41OSAxMy40MSAx
MnoiPjwvcGF0aD48L3N2Zz48L2Rpdj48ZGl2IGNsYXNzPSJnYl9sYyI+PGRpdiBjbGFzcz0i
Z2JfbWMiPjxhIGNsYXNzPSJnYl9rZSBnYl9uYyBnYl9pZSIgaHJlZj0iaHR0cHM6Ly9teWFj
Y291bnQuZ29vZ2xlLmNvbS8/YXV0aHVzZXI9MCIgdGl0bGU9IlBhcmFtw6h0cmVzIGRlIGNv
bXB0ZSBHb29nbGUiPjxzcGFuIGNsYXNzPSJnYl9sYSBnYl9XYyI+PC9zcGFuPjxzcGFuIGNs
YXNzPSJnYnBuIGdiXzZkIGdiX1pjIj5Db21wdGU8L3NwYW4+PC9hPjwvZGl2PjwvZGl2Pjxk
aXYgY2xhc3M9ImdiX1RjIGdiX3ZhIGdiX1hjIGdiX1pjIj48c3BhbiBjbGFzcz0iZ2JfMmMi
IGFyaWEtbGV2ZWw9IjEiIHJvbGU9ImhlYWRpbmciPjwvc3Bhbj48L2Rpdj48L2Rpdj48ZGl2
IGNsYXNzPSJnYl9UYyBnYl9aZCBnYl9VZCBnYl9PZSBnYl9EZSBnYl9MZSI+PGRpdiBjbGFz
cz0iZ2JfcWUgZ2JfcGUiPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3JlIGdiX3BlIj48ZGl2IGNs
YXNzPSJnYl92ZSBnYl91ZSBnYl94ZSI+PGRpdiBqc2NvbnRyb2xsZXI9Inl4MU40IiBqc2Fj
dGlvbj0icWFrbzRlOmtTYUlkIiBjbGFzcz0id2U4N1ZjIGZubm5XZCI+PGRpdiByb2xlPSJi
dXR0b24iIGNsYXNzPSJVMjZmZ2IgSlJ0eXNiIFd6d3JYYiBBejFJWWIgekM3ejdiIFR4czhh
ZCIganNjb250cm9sbGVyPSJpU3ZnNmUiIGpzYWN0aW9uPSJjbGljazpjT3VDZ2Q7IG1vdXNl
ZG93bjpVWDd5WjsgbW91c2V1cDpsYnNEN2U7IG1vdXNlZW50ZXI6dGZPMVljOyBtb3VzZWxl
YXZlOkp5d0d1ZTsgZm9jdXM6QUhtdXdlOyBibHVyOk8yMnAzZTsgY29udGV4dG1lbnU6bWc5
UGVmO3RvdWNoc3RhcnQ6cDZwMkg7IHRvdWNobW92ZTpGd3VObmY7IHRvdWNoZW5kOnlmcUJ4
YyhwcmV2ZW50TW91c2VFdmVudHM9dHJ1ZXxwcmV2ZW50RGVmYXVsdD10cnVlKTsgdG91Y2hj
YW5jZWw6Sk10UmpkOztrZXlkb3duOkk0ODFsZTsiIGpzc2hhZG93PSIiIGFyaWEtbGFiZWw9
IlBsdXMgZCdvcHRpb25zIiBhcmlhLWRpc2FibGVkPSJmYWxzZSIgdGFiaW5kZXg9IjAiIGFy
aWEtaGFzcG9wdXA9InRydWUiIGFyaWEtZXhwYW5kZWQ9ImZhbHNlIiBkYXRhLWFsaWducmln
aHQ9InRydWUiIGlkPSJvdzQiIF9faXNfb3duZXI9InRydWUiPjxkaXYgY2xhc3M9Ik5XbGYz
ZSBNYmhVemQiIGpzbmFtZT0ia3NLc1pkIj48L2Rpdj48c3BhbiBqc3Nsb3Q9IiIgY2xhc3M9
Ik1oWFhjYyBvSmVXdWYiPjxzcGFuIGNsYXNzPSJMdzdHSGQgc25CeWFjIj48c3BhbiBjbGFz
cz0iRFB2d1ljIHZZWmQ3IiBhcmlhLWhpZGRlbj0idHJ1ZSI+7peUPC9zcGFuPjwvc3Bhbj48
L3NwYW4+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfVWMg
Z2JfS2EgZ2JfVGMiIG5nLW5vbi1iaW5kYWJsZT0iIiBkYXRhLW9nc3ItdXA9IiI+PGRpdiBj
bGFzcz0iZ2JfVmMiPjxkaXYgY2xhc3M9ImdiX0xjIj48ZGl2IGNsYXNzPSJnYl9BIGdiX2Vk
IGdiX2cgZ2JfSmYiIGRhdGEtb2dzci1hbHQ9IiIgaWQ9Imdid2EiPjxkaXYgY2xhc3M9Imdi
X0lmIj48YSBjbGFzcz0iZ2JfQiIgYXJpYS1sYWJlbD0iQXBwbGljYXRpb25zIEdvb2dsZSIg
aHJlZj0iaHR0cHM6Ly93d3cuZ29vZ2xlLmZyL2ludGwvZnIvYWJvdXQvcHJvZHVjdHM/dGFi
PWtoIiBhcmlhLWV4cGFuZGVkPSJmYWxzZSIgcm9sZT0iYnV0dG9uIiB0YWJpbmRleD0iMCI+
PHN2ZyBjbGFzcz0iZ2JfVWUiIGZvY3VzYWJsZT0iZmFsc2UiIHZpZXdCb3g9IjAgMCAyNCAy
NCI+PHBhdGggZD0iTTYsOGMxLjEsMCAyLC0wLjkgMiwtMnMtMC45LC0yIC0yLC0yIC0yLDAu
OSAtMiwyIDAuOSwyIDIsMnpNMTIsMjBjMS4xLDAgMiwtMC45IDIsLTJzLTAuOSwtMiAtMiwt
MiAtMiwwLjkgLTIsMiAwLjksMiAyLDJ6TTYsMjBjMS4xLDAgMiwtMC45IDIsLTJzLTAuOSwt
MiAtMiwtMiAtMiwwLjkgLTIsMiAwLjksMiAyLDJ6TTYsMTRjMS4xLDAgMiwtMC45IDIsLTJz
LTAuOSwtMiAtMiwtMiAtMiwwLjkgLTIsMiAwLjksMiAyLDJ6TTEyLDE0YzEuMSwwIDIsLTAu
OSAyLC0ycy0wLjksLTIgLTIsLTIgLTIsMC45IC0yLDIgMC45LDIgMiwyek0xNiw2YzAsMS4x
IDAuOSwyIDIsMnMyLC0wLjkgMiwtMiAtMC45LC0yIC0yLC0yIC0yLDAuOSAtMiwyek0xMiw4
YzEuMSwwIDIsLTAuOSAyLC0ycy0wLjksLTIgLTIsLTIgLTIsMC45IC0yLDIgMC45LDIgMiwy
ek0xOCwxNGMxLjEsMCAyLC0wLjkgMiwtMnMtMC45LC0yIC0yLC0yIC0yLDAuOSAtMiwyIDAu
OSwyIDIsMnpNMTgsMjBjMS4xLDAgMiwtMC45IDIsLTJzLTAuOSwtMiAtMiwtMiAtMiwwLjkg
LTIsMiAwLjksMiAyLDJ6Ij48L3BhdGg+PC9zdmc+PC9hPjxkaXYgY2xhc3M9ImdiX1JhIj48
L2Rpdj48ZGl2IGNsYXNzPSJnYl9RYSI+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBj
bGFzcz0iZ2JfRWEgZ2JfZWQgZ2JfeWcgZ2JfZyBnYl9KZiI+PGRpdiBjbGFzcz0iZ2JfSWYg
Z2JfSmEgZ2JfeWcgZ2JfZyI+PGEgY2xhc3M9ImdiX0IgZ2JfRGEgZ2JfZyIgYXJpYS1sYWJl
bD0iQ29tcHRlIEdvb2dsZSBBbGV4YW5kcmUgUGV0cmVzY3UgIA0KKGFsZXhhbmRydS5wZXRy
ZXNjdUBnbWFpbC5jb20pIiBocmVmPSJodHRwczovL2FjY291bnRzLmdvb2dsZS5jb20vU2ln
bk91dE9wdGlvbnM/aGw9ZnImYW1wO2NvbnRpbnVlPWh0dHBzOi8vbXlhY2NvdW50Lmdvb2ds
ZS5jb20vYWxlcnQvbnQvMTU3MjM0NTM1NTAwMCUzRnJmbiUzRDI3JTI2cmZuYyUzRDElMjZl
aWQlM0QtMzUzNzU3ODUxNDM4MzMyMzE4MSUyNmV0JTNEMCUyNnBsaSUzRDEiIHJvbGU9ImJ1
dHRvbiIgdGFiaW5kZXg9IjAiIGFyaWEtZXhwYW5kZWQ9ImZhbHNlIj48c3BhbiBjbGFzcz0i
Z2JfeGEgZ2JpaSIgYXJpYS1oaWRkZW49InRydWUiPjwvc3Bhbj48L2E+PGRpdiBjbGFzcz0i
Z2JfUmEiPjwvZGl2PjxkaXYgY2xhc3M9ImdiX1FhIj48L2Rpdj48L2Rpdj48L2Rpdj48L2Rp
dj48L2Rpdj48ZGl2IGNsYXNzPSJnYl9FIGdiX0QgZ2JfUiBnYl9VIiBhcmlhLWxhYmVsPSJB
cHBsaWNhdGlvbnMgR29vZ2xlIiBhcmlhLWhpZGRlbj0idHJ1ZSIgcm9sZT0icmVnaW9uIj48
dWwgY2xhc3M9ImdiX0ggZ2JfeSIgYXJpYS1kcm9wZWZmZWN0PSJtb3ZlIj48bGkgY2xhc3M9
ImdiX2kiIGFyaWEtZ3JhYmJlZD0iZmFsc2UiIGlkPSJvZ2JrZGRnOjAiPjxhIGNsYXNzPSJn
Yl9kIiBkYXRhLXBpZD0iMTkyIiBkcmFnZ2FibGU9ImZhbHNlIiBocmVmPSJodHRwczovL215
YWNjb3VudC5nb29nbGUuY29tLz91dG1fc291cmNlPU9HQiZhbXA7dGFiPWtrJmFtcDt1dG1f
bWVkaXVtPWFwcCIgaWQ9ImdiMTkyIiB0YXJnZXQ9Il9ibGFuayI+PGRpdiBjbGFzcz0iZ2Jf
dSI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfdiI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfdyI+PC9k
aXY+PGRpdiBjbGFzcz0iZ2JfeCI+PC9kaXY+PHNwYW4gY2xhc3M9ImdiX3EiIHN0eWxlPSJi
YWNrZ3JvdW5kLWltYWdlOnVybCgnaHR0cHM6Ly9saDMuZ29vZ2xldXNlcmNvbnRlbnQuY29t
Ly1VVGVnRjhuaVNmTS9BQUFBQUFBQUFBSS9BQUFBQUFBQUFBQS9BQ0hpM3JkT2l5bFNuMW9i
ZjR1R21pYklCR0p2bEw4dmtRLkNNSUQvczEyOC1iMTYtY2MtcnAvcGhvdG8uanBnJykiPjwv
c3Bhbj48c3BhbiBjbGFzcz0iZ2JfciI+Q29tcHRlPC9zcGFuPjwvYT48L2xpPjxsaSBjbGFz
cz0iZ2JfaSIgYXJpYS1ncmFiYmVkPSJmYWxzZSIgaWQ9Im9nYmtkZGc6MSI+PGEgY2xhc3M9
ImdiX2QiIGRhdGEtcGlkPSIxIiBkcmFnZ2FibGU9ImZhbHNlIiBocmVmPSJodHRwczovL3d3
dy5nb29nbGUuZnIvd2ViaHA/dGFiPWt3IiBpZD0iZ2IxIiB0YXJnZXQ9Il9ibGFuayI+PGRp
diBjbGFzcz0iZ2JfdSI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfdiI+PC9kaXY+PGRpdiBjbGFz
cz0iZ2JfdyI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfeCI+PC9kaXY+PHNwYW4gY2xhc3M9Imdi
X3AiIHN0eWxlPSJiYWNrZ3JvdW5kLXBvc2l0aW9uOjAgLTEzOHB4Ij48L3NwYW4+PHNwYW4g
Y2xhc3M9ImdiX3IiPlJlY2hlcmNoZTwvc3Bhbj48L2E+PC9saT48bGkgY2xhc3M9ImdiX2ki
IGFyaWEtZ3JhYmJlZD0iZmFsc2UiIGlkPSJvZ2JrZGRnOjIiPjxhIGNsYXNzPSJnYl9kIiBk
YXRhLXBpZD0iOCIgZHJhZ2dhYmxlPSJmYWxzZSIgaHJlZj0iaHR0cHM6Ly9tYXBzLmdvb2ds
ZS5mci9tYXBzP2hsPWZyJmFtcDt0YWI9a2wiIGlkPSJnYjgiIHRhcmdldD0iX2JsYW5rIj48
ZGl2IGNsYXNzPSJnYl91Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl92Ij48L2Rpdj48ZGl2IGNs
YXNzPSJnYl93Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl94Ij48L2Rpdj48c3BhbiBjbGFzcz0i
Z2JfcCIgc3R5bGU9ImJhY2tncm91bmQtcG9zaXRpb246MCAtMTAzNXB4Ij48L3NwYW4+PHNw
YW4gY2xhc3M9ImdiX3IiPk1hcHM8L3NwYW4+PC9hPjwvbGk+PGxpIGNsYXNzPSJnYl9pIiBh
cmlhLWdyYWJiZWQ9ImZhbHNlIiBpZD0ib2dia2RkZzozIj48YSBjbGFzcz0iZ2JfZCIgZGF0
YS1waWQ9IjM2IiBkcmFnZ2FibGU9ImZhbHNlIiBocmVmPSJodHRwczovL3d3dy55b3V0dWJl
LmNvbS8/Z2w9RlImYW1wO3RhYj1rMSIgaWQ9ImdiMzYiIHRhcmdldD0iX2JsYW5rIj48ZGl2
IGNsYXNzPSJnYl91Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl92Ij48L2Rpdj48ZGl2IGNsYXNz
PSJnYl93Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl94Ij48L2Rpdj48c3BhbiBjbGFzcz0iZ2Jf
cCIgc3R5bGU9ImJhY2tncm91bmQtcG9zaXRpb246MCAtMTQ0OXB4Ij48L3NwYW4+PHNwYW4g
Y2xhc3M9ImdiX3IiPllvdVR1YmU8L3NwYW4+PC9hPjwvbGk+PGxpIGNsYXNzPSJnYl9pIiBh
cmlhLWdyYWJiZWQ9ImZhbHNlIiBpZD0ib2dia2RkZzo0Ij48YSBjbGFzcz0iZ2JfZCIgZGF0
YS1waWQ9Ijc4IiBkcmFnZ2FibGU9ImZhbHNlIiBocmVmPSJodHRwczovL3BsYXkuZ29vZ2xl
LmNvbS8/aGw9ZnImYW1wO3RhYj1rOCIgaWQ9ImdiNzgiIHRhcmdldD0iX2JsYW5rIj48ZGl2
IGNsYXNzPSJnYl91Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl92Ij48L2Rpdj48ZGl2IGNsYXNz
PSJnYl93Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl94Ij48L2Rpdj48c3BhbiBjbGFzcz0iZ2Jf
cCIgc3R5bGU9ImJhY2tncm91bmQtcG9zaXRpb246MCAtNzU5cHgiPjwvc3Bhbj48c3BhbiBj
bGFzcz0iZ2JfciI+UGxheTwvc3Bhbj48L2E+PC9saT48bGkgY2xhc3M9ImdiX2kiIGFyaWEt
Z3JhYmJlZD0iZmFsc2UiIGlkPSJvZ2JrZGRnOjUiPjxhIGNsYXNzPSJnYl9kIiBkYXRhLXBp
ZD0iMjMiIGRyYWdnYWJsZT0iZmFsc2UiIGhyZWY9Imh0dHBzOi8vbWFpbC5nb29nbGUuY29t
L21haWwvP3RhYj1rbSIgaWQ9ImdiMjMiIHRhcmdldD0iX2JsYW5rIj48ZGl2IGNsYXNzPSJn
Yl91Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl92Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl93Ij48
L2Rpdj48ZGl2IGNsYXNzPSJnYl94Ij48L2Rpdj48c3BhbiBjbGFzcz0iZ2JfcCIgc3R5bGU9
ImJhY2tncm91bmQtcG9zaXRpb246MCAtMjEzOXB4Ij48L3NwYW4+PHNwYW4gY2xhc3M9Imdi
X3IiPkdtYWlsPC9zcGFuPjwvYT48L2xpPjxsaSBjbGFzcz0iZ2JfaSIgYXJpYS1ncmFiYmVk
PSJmYWxzZSIgaWQ9Im9nYmtkZGc6NiI+PGEgY2xhc3M9ImdiX2QiIGRhdGEtcGlkPSI0OSIg
ZHJhZ2dhYmxlPSJmYWxzZSIgaHJlZj0iaHR0cHM6Ly9kcml2ZS5nb29nbGUuY29tLz90YWI9
a28mYW1wO2F1dGh1c2VyPTAiIGlkPSJnYjQ5IiB0YXJnZXQ9Il9ibGFuayI+PGRpdiBjbGFz
cz0iZ2JfdSI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfdiI+PC9kaXY+PGRpdiBjbGFzcz0iZ2Jf
dyI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfeCI+PC9kaXY+PHNwYW4gY2xhc3M9ImdiX3AiIHN0
eWxlPSJiYWNrZ3JvdW5kLXBvc2l0aW9uOjAgMCI+PC9zcGFuPjxzcGFuIGNsYXNzPSJnYl9y
Ij5Ecml2ZTwvc3Bhbj48L2E+PC9saT48bGkgY2xhc3M9ImdiX2kiIGFyaWEtZ3JhYmJlZD0i
ZmFsc2UiIGlkPSJvZ2JrZGRnOjciPjxhIGNsYXNzPSJnYl9kIiBkYXRhLXBpZD0iMjQiIGRy
YWdnYWJsZT0iZmFsc2UiIGhyZWY9Imh0dHBzOi8vd3d3Lmdvb2dsZS5jb20vY2FsZW5kYXI/
dGFiPWtjIiBpZD0iZ2IyNCIgdGFyZ2V0PSJfYmxhbmsiPjxkaXYgY2xhc3M9ImdiX3UiPjwv
ZGl2PjxkaXYgY2xhc3M9ImdiX3YiPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3ciPjwvZGl2Pjxk
aXYgY2xhc3M9ImdiX3giPjwvZGl2PjxzcGFuIGNsYXNzPSJnYl9wIiBzdHlsZT0iYmFja2dy
b3VuZC1wb3NpdGlvbjowIC0xNzk0cHgiPjwvc3Bhbj48c3BhbiBjbGFzcz0iZ2JfciI+QWdl
bmRhPC9zcGFuPjwvYT48L2xpPjxsaSBjbGFzcz0iZ2JfaSIgYXJpYS1ncmFiYmVkPSJmYWxz
ZSIgaWQ9Im9nYmtkZGc6OCI+PGEgY2xhc3M9ImdiX2QiIGRhdGEtcGlkPSI1MSIgZHJhZ2dh
YmxlPSJmYWxzZSIgaHJlZj0iaHR0cHM6Ly90cmFuc2xhdGUuZ29vZ2xlLmZyLz9obD1mciZh
bXA7dGFiPWtUIiBpZD0iZ2I1MSIgdGFyZ2V0PSJfYmxhbmsiPjxkaXYgY2xhc3M9ImdiX3Ui
PjwvZGl2PjxkaXYgY2xhc3M9ImdiX3YiPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3ciPjwvZGl2
PjxkaXYgY2xhc3M9ImdiX3giPjwvZGl2PjxzcGFuIGNsYXNzPSJnYl9wIiBzdHlsZT0iYmFj
a2dyb3VuZC1wb3NpdGlvbjowIC0xNTg3cHgiPjwvc3Bhbj48c3BhbiBjbGFzcz0iZ2JfciI+
VHJhZHVjdGlvbjwvc3Bhbj48L2E+PC9saT48bGkgY2xhc3M9ImdiX2kiIGFyaWEtZ3JhYmJl
ZD0iZmFsc2UiIGlkPSJvZ2JrZGRnOjkiPjxhIGNsYXNzPSJnYl9kIiBkYXRhLXBpZD0iMzEi
IGRyYWdnYWJsZT0iZmFsc2UiIGhyZWY9Imh0dHBzOi8vcGhvdG9zLmdvb2dsZS5jb20vP3Rh
Yj1rcSZhbXA7cGFnZUlkPW5vbmUiIGlkPSJnYjMxIiB0YXJnZXQ9Il9ibGFuayI+PGRpdiBj
bGFzcz0iZ2JfdSI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfdiI+PC9kaXY+PGRpdiBjbGFzcz0i
Z2JfdyI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfeCI+PC9kaXY+PHNwYW4gY2xhc3M9ImdiX3Ai
IHN0eWxlPSJiYWNrZ3JvdW5kLXBvc2l0aW9uOjAgLTIwNzBweCI+PC9zcGFuPjxzcGFuIGNs
YXNzPSJnYl9yIj5QaG90b3M8L3NwYW4+PC9hPjwvbGk+PGxpIGNsYXNzPSJnYl9pIiBhcmlh
LWdyYWJiZWQ9ImZhbHNlIiBpZD0ib2dia2RkZzphIj48YSBjbGFzcz0iZ2JfZCIgZGF0YS1w
aWQ9IjUiIGRyYWdnYWJsZT0iZmFsc2UiIGhyZWY9Imh0dHBzOi8vbmV3cy5nb29nbGUuZnIv
bndzaHA/aGw9ZnImYW1wO3RhYj1rbiIgaWQ9ImdiNSIgdGFyZ2V0PSJfYmxhbmsiPjxkaXYg
Y2xhc3M9ImdiX3UiPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3YiPjwvZGl2PjxkaXYgY2xhc3M9
ImdiX3ciPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3giPjwvZGl2PjxzcGFuIGNsYXNzPSJnYl9w
IiBzdHlsZT0iYmFja2dyb3VuZC1wb3NpdGlvbjowIC0yMjA4cHgiPjwvc3Bhbj48c3BhbiBj
bGFzcz0iZ2JfciI+QWN0dWFsaXTDqXM8L3NwYW4+PC9hPjwvbGk+PC91bD48YSBjbGFzcz0i
Z2JfSSBnYl85ZiIgYXJpYS1sYWJlbD0iQXV0cmVzIGFwcGxpY2F0aW9ucyBHb29nbGUmbmJz
cDtBcHBzIiBocmVmPSJodHRwczovL3d3dy5nb29nbGUuZnIvaW50bC9mci9hYm91dC9wcm9k
dWN0cz90YWI9a2giIHRhcmdldD0iX2JsYW5rIiBhcmlhLWV4cGFuZGVkPSJmYWxzZSIgYXJp
YS1oaWRkZW49InRydWUiPlBsdXM8L2E+PHNwYW4gY2xhc3M9ImdiX0oiPjwvc3Bhbj48dWwg
Y2xhc3M9ImdiX0ggZ2JfeiIgYXJpYS1kcm9wZWZmZWN0PSJtb3ZlIiBhcmlhLWhpZGRlbj0i
dHJ1ZSI+PGxpIGNsYXNzPSJnYl9pIiBhcmlhLWdyYWJiZWQ9ImZhbHNlIiBpZD0ib2dia2Rk
ZzpiIj48YSBjbGFzcz0iZ2JfZCIgZGF0YS1waWQ9IjYiIGRyYWdnYWJsZT0iZmFsc2UiIGhy
ZWY9Imh0dHBzOi8vd3d3Lmdvb2dsZS5mci9zaG9wcGluZz9obD1mciZhbXA7c291cmNlPW9n
JmFtcDt0YWI9a2YiIGlkPSJnYjYiIHRhcmdldD0iX2JsYW5rIj48ZGl2IGNsYXNzPSJnYl91
Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl92Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl93Ij48L2Rp
dj48ZGl2IGNsYXNzPSJnYl94Ij48L2Rpdj48c3BhbiBjbGFzcz0iZ2JfcCIgc3R5bGU9ImJh
Y2tncm91bmQtcG9zaXRpb246MCAtNjlweCI+PC9zcGFuPjxzcGFuIGNsYXNzPSJnYl9yIj5T
aG9wcGluZzwvc3Bhbj48L2E+PC9saT48bGkgY2xhc3M9ImdiX2kiIGFyaWEtZ3JhYmJlZD0i
ZmFsc2UiIGlkPSJvZ2JrZGRnOmMiPjxhIGNsYXNzPSJnYl9kIiBkYXRhLXBpZD0iMjUiIGRy
YWdnYWJsZT0iZmFsc2UiIGhyZWY9Imh0dHBzOi8vZG9jcy5nb29nbGUuY29tL2RvY3VtZW50
Lz91c3A9ZG9jc19hbGMmYW1wO2F1dGh1c2VyPTAiIGlkPSJnYjI1IiB0YXJnZXQ9Il9ibGFu
ayI+PGRpdiBjbGFzcz0iZ2JfdSI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfdiI+PC9kaXY+PGRp
diBjbGFzcz0iZ2JfdyI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfeCI+PC9kaXY+PHNwYW4gY2xh
c3M9ImdiX3AiIHN0eWxlPSJiYWNrZ3JvdW5kLXBvc2l0aW9uOjAgLTI0ODRweCI+PC9zcGFu
PjxzcGFuIGNsYXNzPSJnYl9yIj5Eb2NzPC9zcGFuPjwvYT48L2xpPjxsaSBjbGFzcz0iZ2Jf
aSIgYXJpYS1ncmFiYmVkPSJmYWxzZSIgaWQ9Im9nYmtkZGc6ZCI+PGEgY2xhc3M9ImdiX2Qi
IGRhdGEtcGlkPSIxMCIgZHJhZ2dhYmxlPSJmYWxzZSIgaHJlZj0iaHR0cHM6Ly9ib29rcy5n
b29nbGUuZnIvYmtzaHA/aGw9ZnImYW1wO3RhYj1rcCIgaWQ9ImdiMTAiIHRhcmdldD0iX2Js
YW5rIj48ZGl2IGNsYXNzPSJnYl91Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl92Ij48L2Rpdj48
ZGl2IGNsYXNzPSJnYl93Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl94Ij48L2Rpdj48c3BhbiBj
bGFzcz0iZ2JfcCIgc3R5bGU9ImJhY2tncm91bmQtcG9zaXRpb246MCAtMTkzMnB4Ij48L3Nw
YW4+PHNwYW4gY2xhc3M9ImdiX3IiPkxpdnJlczwvc3Bhbj48L2E+PC9saT48bGkgY2xhc3M9
ImdiX2kiIGFyaWEtZ3JhYmJlZD0iZmFsc2UiIGlkPSJvZ2JrZGRnOmUiPjxhIGNsYXNzPSJn
Yl9kIiBkYXRhLXBpZD0iMzAiIGRyYWdnYWJsZT0iZmFsc2UiIGhyZWY9Imh0dHBzOi8vd3d3
LmJsb2dnZXIuY29tLz90YWI9a2oiIGlkPSJnYjMwIiB0YXJnZXQ9Il9ibGFuayI+PGRpdiBj
bGFzcz0iZ2JfdSI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfdiI+PC9kaXY+PGRpdiBjbGFzcz0i
Z2JfdyI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfeCI+PC9kaXY+PHNwYW4gY2xhc3M9ImdiX3Ai
IHN0eWxlPSJiYWNrZ3JvdW5kLXBvc2l0aW9uOjAgLTIyNzdweCI+PC9zcGFuPjxzcGFuIGNs
YXNzPSJnYl9yIj5CbG9nZ2VyPC9zcGFuPjwvYT48L2xpPjxsaSBjbGFzcz0iZ2JfaSIgYXJp
YS1ncmFiYmVkPSJmYWxzZSIgaWQ9Im9nYmtkZGc6ZiI+PGEgY2xhc3M9ImdiX2QiIGRhdGEt
cGlkPSI1MyIgZHJhZ2dhYmxlPSJmYWxzZSIgaHJlZj0iaHR0cHM6Ly9jb250YWN0cy5nb29n
bGUuY29tLz9obD1mciZhbXA7dGFiPWtDIiBpZD0iZ2I1MyIgdGFyZ2V0PSJfYmxhbmsiPjxk
aXYgY2xhc3M9ImdiX3UiPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3YiPjwvZGl2PjxkaXYgY2xh
c3M9ImdiX3ciPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3giPjwvZGl2PjxzcGFuIGNsYXNzPSJn
Yl9wIiBzdHlsZT0iYmFja2dyb3VuZC1wb3NpdGlvbjowIC0yNjIycHgiPjwvc3Bhbj48c3Bh
biBjbGFzcz0iZ2JfciI+Q29udGFjdHM8L3NwYW4+PC9hPjwvbGk+PGxpIGNsYXNzPSJnYl9p
IiBhcmlhLWdyYWJiZWQ9ImZhbHNlIiBpZD0ib2dia2RkZzpnIj48YSBjbGFzcz0iZ2JfZCIg
ZGF0YS1waWQ9IjMwMCIgZHJhZ2dhYmxlPSJmYWxzZSIgaHJlZj0iaHR0cHM6Ly9oYW5nb3V0
cy5nb29nbGUuY29tLyIgaWQ9ImdiMzAwIiB0YXJnZXQ9Il9ibGFuayI+PGRpdiBjbGFzcz0i
Z2JfdSI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfdiI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfdyI+
PC9kaXY+PGRpdiBjbGFzcz0iZ2JfeCI+PC9kaXY+PHNwYW4gY2xhc3M9ImdiX3AiIHN0eWxl
PSJiYWNrZ3JvdW5kLXBvc2l0aW9uOjAgLTg5N3B4Ij48L3NwYW4+PHNwYW4gY2xhc3M9Imdi
X3IiPkhhbmdvdXRzPC9zcGFuPjwvYT48L2xpPjxsaSBjbGFzcz0iZ2JfaSIgYXJpYS1ncmFi
YmVkPSJmYWxzZSIgaWQ9Im9nYmtkZGc6aCI+PGEgY2xhc3M9ImdiX2QiIGRhdGEtcGlkPSI0
NjEiIGRyYWdnYWJsZT0iZmFsc2UiIGhyZWY9Imh0dHBzOi8vZHVvLmdvb2dsZS5jb20vP3Vz
cD1kdW9fYWxkIiBpZD0iZ2I0NjEiIHRhcmdldD0iX2JsYW5rIj48ZGl2IGNsYXNzPSJnYl91
Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl92Ij48L2Rpdj48ZGl2IGNsYXNzPSJnYl93Ij48L2Rp
dj48ZGl2IGNsYXNzPSJnYl94Ij48L2Rpdj48c3BhbiBjbGFzcz0iZ2JfcCIgc3R5bGU9ImJh
Y2tncm91bmQtcG9zaXRpb246MCAtMTI0MnB4Ij48L3NwYW4+PHNwYW4gY2xhc3M9ImdiX3Ii
PkR1bzwvc3Bhbj48L2E+PC9saT48bGkgY2xhc3M9ImdiX2kiIGFyaWEtZ3JhYmJlZD0iZmFs
c2UiIGlkPSJvZ2JrZGRnOmkiPjxhIGNsYXNzPSJnYl9kIiBkYXRhLXBpZD0iMTM2IiBkcmFn
Z2FibGU9ImZhbHNlIiBocmVmPSJodHRwczovL2tlZXAuZ29vZ2xlLmNvbS91LzAiIGlkPSJn
YjEzNiIgdGFyZ2V0PSJfYmxhbmsiPjxkaXYgY2xhc3M9ImdiX3UiPjwvZGl2PjxkaXYgY2xh
c3M9ImdiX3YiPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3ciPjwvZGl2PjxkaXYgY2xhc3M9Imdi
X3giPjwvZGl2PjxzcGFuIGNsYXNzPSJnYl9iIj48L3NwYW4+PHNwYW4gY2xhc3M9ImdiX3Ii
PktlZXA8L3NwYW4+PC9hPjwvbGk+PGxpIGNsYXNzPSJnYl9pIiBhcmlhLWdyYWJiZWQ9ImZh
bHNlIiBpZD0ib2dia2RkZzpqIj48YSBjbGFzcz0iZ2JfZCIgZGF0YS1waWQ9IjM1NyIgZHJh
Z2dhYmxlPSJmYWxzZSIgaHJlZj0iaHR0cHM6Ly9qYW1ib2FyZC5nb29nbGUuY29tLz9hdXRo
dXNlcj0wJmFtcDt1c3A9amFtX2FsZCIgaWQ9ImdiMzU3IiB0YXJnZXQ9Il9ibGFuayI+PGRp
diBjbGFzcz0iZ2JfdSI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfdiI+PC9kaXY+PGRpdiBjbGFz
cz0iZ2JfdyI+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfeCI+PC9kaXY+PHNwYW4gY2xhc3M9Imdi
X3AiIHN0eWxlPSJiYWNrZ3JvdW5kLXBvc2l0aW9uOjAgLTQxNHB4Ij48L3NwYW4+PHNwYW4g
Y2xhc3M9ImdiX3IiPkphbWJvYXJkPC9zcGFuPjwvYT48L2xpPjxsaSBjbGFzcz0iZ2JfaSIg
YXJpYS1ncmFiYmVkPSJmYWxzZSIgaWQ9Im9nYmtkZGc6ayI+PGEgY2xhc3M9ImdiX2QiIGRh
dGEtcGlkPSIyNjUiIGRyYWdnYWJsZT0iZmFsc2UiIGhyZWY9Imh0dHBzOi8vY2xhc3Nyb29t
Lmdvb2dsZS5jb20vP2F1dGh1c2VyPTAiIGlkPSJnYjI2NSIgdGFyZ2V0PSJfYmxhbmsiPjxk
aXYgY2xhc3M9ImdiX3UiPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3YiPjwvZGl2PjxkaXYgY2xh
c3M9ImdiX3ciPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3giPjwvZGl2PjxzcGFuIGNsYXNzPSJn
Yl9wIiBzdHlsZT0iYmFja2dyb3VuZC1wb3NpdGlvbjowIC0yMDdweCI+PC9zcGFuPjxzcGFu
IGNsYXNzPSJnYl9yIj5DbGFzc3Jvb208L3NwYW4+PC9hPjwvbGk+PGxpIGNsYXNzPSJnYl9p
IiBhcmlhLWdyYWJiZWQ9ImZhbHNlIiBpZD0ib2dia2RkZzpsIj48YSBjbGFzcz0iZ2JfZCIg
ZGF0YS1waWQ9IjMzOCIgZHJhZ2dhYmxlPSJmYWxzZSIgaHJlZj0iaHR0cHM6Ly93d3cuZ29v
Z2xlLmZyL3NhdmUiIGlkPSJnYjMzOCIgdGFyZ2V0PSJfYmxhbmsiPjxkaXYgY2xhc3M9Imdi
X3UiPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3YiPjwvZGl2PjxkaXYgY2xhc3M9ImdiX3ciPjwv
ZGl2PjxkaXYgY2xhc3M9ImdiX3giPjwvZGl2PjxzcGFuIGNsYXNzPSJnYl9wIiBzdHlsZT0i
YmFja2dyb3VuZC1wb3NpdGlvbjowIC04MjhweCI+PC9zcGFuPjxzcGFuIGNsYXNzPSJnYl9y
Ij5Db2xsZWN0aW9uczwvc3Bhbj48L2E+PC9saT48L3VsPjxhIGNsYXNzPSJnYl8xZiBnYl9K
IiBocmVmPSJodHRwczovL3d3dy5nb29nbGUuZnIvaW50bC9mci9hYm91dC9wcm9kdWN0cz90
YWI9a2giIHRhcmdldD0iX2JsYW5rIiBhcmlhLWhpZGRlbj0idHJ1ZSI+QXV0cmVzIHLDqXN1
bHRhdHMgR29vZ2xlPC9hPjwvZGl2PjxkaXYgY2xhc3M9ImdiX1NhIGdiX0QiIGFyaWEtbGFi
ZWw9IkluZm9ybWF0aW9ucyBkZSBjb21wdGUiIGFyaWEtaGlkZGVuPSJ0cnVlIj48ZGl2IGNs
YXNzPSJnYl8yYSI+PGEgY2xhc3M9ImdiXzdhIGdiXzNhIGdiXzlmIiBhcmlhLWxhYmVsPSJD
aGFuZ2VyIGxhIHBob3RvIGR1IHByb2ZpbCIgaHJlZj0iaHR0cHM6Ly9teWFjY291bnQuZ29v
Z2xlLmNvbS8/dXRtX3NvdXJjZT1PR0ImYW1wO3RhYj1rayIgdGFyZ2V0PSJfYmxhbmsiPjxk
aXYgY2xhc3M9ImdiXzhhIiBzdHlsZT0icG9zaXRpb246cmVsYXRpdmUiPjxkaXYgY2xhc3M9
ImdiX3lhIGdiaXAiIHRpdGxlPSJQcm9maWwiPjwvZGl2PjxzcGFuIGNsYXNzPSJnYl9NYSI+
TW9kaWZpZXI8L3NwYW4+PC9kaXY+PC9hPjxkaXYgY2xhc3M9ImdiXzRhIj48ZGl2IGNsYXNz
PSJnYl9mYiBnYl9nYiI+QWxleGFuZHJlIFBldHJlc2N1PC9kaXY+PGRpdiBjbGFzcz0iZ2Jf
aGIiPmFsZXhhbmRydS5wZXRyZXNjdUBnbWFpbC5jb208L2Rpdj48ZGl2IGNsYXNzPSJnYl80
ZiBnYl8xYSI+PGEgY2xhc3M9ImdiX0RiIiBocmVmPSJodHRwczovL3BvbGljaWVzLmdvb2ds
ZS5jb20vcHJpdmFjeT9obD1mciIgdGFyZ2V0PSJfYmxhbmsiPkNvbmZpZGVudGlhbGl0w6k8
L2E+PC9kaXY+PGEgY2xhc3M9ImdiXzAgZ2JfNWYgZ2JwMSBnYl9QZSBnYl9wYiIgaHJlZj0i
aHR0cHM6Ly9teWFjY291bnQuZ29vZ2xlLmNvbS8/dXRtX3NvdXJjZT1PR0ImYW1wO3RhYj1r
ayZhbXA7dXRtX21lZGl1bT1hY3QiIHRhcmdldD0iX2JsYW5rIj5Db21wdGUgR29vZ2xlPC9h
PjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9ImdiX0JiIj48ZGl2IGNsYXNzPSJnYl84ZiBnYl9J
YiBnYl92YSIgYXJpYS1oaWRkZW49InRydWUiPjxhIGNsYXNzPSJnYl9LYiBnYl9WYiIgYXJp
YS1oaWRkZW49InRydWUiIGhyZWY9Imh0dHBzOi8vbXlhY2NvdW50Lmdvb2dsZS5jb20vYWxl
cnQvbnQvMTU3MjM0NTM1NTAwMD9yZm49MjcmYW1wO3JmbmM9MSZhbXA7ZWlkPS0zNTM3NTc4
NTE0MzgzMzIzMTgxJmFtcDtldD0wJmFtcDtwbGk9MSZhbXA7YXV0aHVzZXI9MCZhbXA7cGFn
ZUlkPW5vbmUiIHRhcmdldD0iX2JsYW5rIj48aW1nIGNsYXNzPSJnYl9YYiBnYl84YSIgc3Jj
PSJkYXRhOmltYWdlL2dpZjtiYXNlNjQsUjBsR09EbGhBUUFCQUlBQUFQLy8vLy8vL3lINUJB
RUtBQUVBTEFBQUFBQUJBQUVBQUFJQ1RBRUFPdz09IiBhbHQ9IlByb2ZpbCIgZGF0YS1zcmM9
Imh0dHBzOi8vbGgzLmdvb2dsZXVzZXJjb250ZW50LmNvbS8tVVRlZ0Y4bmlTZk0vQUFBQUFB
QUFBQUkvQUFBQUFBQUFBQUEvQUNIaTNyZE9peWxTbjFvYmY0dUdtaWJJQkdKdmxMOHZrUS5D
TUlEL3M0OC1jL3Bob3RvLmpwZyI+PGRpdiBjbGFzcz0iZ2JfTmIiPjxkaXYgY2xhc3M9Imdi
XzFiIj5BbGV4YW5kcmUgUGV0cmVzY3U8L2Rpdj48ZGl2IGNsYXNzPSJnYl8zYiI+YWxleGFu
ZHJ1LnBldHJlc2N1QGdtYWlsLmNvbSAocGFyIGTDqWZhdXQpPC9kaXY+PC9kaXY+PC9hPjwv
ZGl2PjxhIGNsYXNzPSJnYl84YiBnYl92YSBnYl83YiIgaHJlZj0iaHR0cHM6Ly9teWFjY291
bnQuZ29vZ2xlLmNvbS9icmFuZGFjY291bnRzP2F1dGh1c2VyPTAmYW1wO2NvbnRpbnVlPWh0
dHBzOi8vbXlhY2NvdW50Lmdvb2dsZS5jb20vYWxlcnQvbnQvMTU3MjM0NTM1NTAwMCUzRnJm
biUzRDI3JTI2cmZuYyUzRDElMjZlaWQlM0QtMzUzNzU3ODUxNDM4MzMyMzE4MSUyNmV0JTNE
MCUyNnBsaSUzRDEmYW1wO3NlcnZpY2U9L2FsZXJ0L250LzE1NzIzNDUzNTUwMDAlM0ZyZm4l
M0QyNyUyNnJmbmMlM0QxJTI2ZWlkJTNELTM1Mzc1Nzg1MTQzODMzMjMxODElMjZldCUzRDAl
MjZwbGklM0QxJTI2YXV0aHVzZXIlM0QlMjRhdXRodXNlciUyNnBhZ2VJZCUzRCUyNHBhZ2VJ
ZCIgYXJpYS1oaWRkZW49InRydWUiPjxzcGFuIGNsYXNzPSJnYl85YiBnYl9wYyI+PC9zcGFu
PjxkaXYgY2xhc3M9ImdiX2JjIj5Ub3VzIHZvcyBjb21wdGVzIGRlIG1hcnF1ZSZuYnNwO8K7
PC9kaXY+PC9hPjwvZGl2PjxkaXYgY2xhc3M9ImdiX2JnIGdiX2hjIGdiX3ZhIj48ZGl2IGNs
YXNzPSJnYl9qYyI+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0iZ2JfM2YgZ2Jfb2IiPjxkaXY+
PGEgY2xhc3M9ImdiXzAgZ2JfMmYgZ2JfUGUgZ2JfcGIiIGhyZWY9Imh0dHBzOi8vYWNjb3Vu
dHMuZ29vZ2xlLmNvbS9BZGRTZXNzaW9uP2NvbnRpbnVlPWh0dHBzOi8vbXlhY2NvdW50Lmdv
b2dsZS5jb20vYWxlcnQvbnQvMTU3MjM0NTM1NTAwMD9yZm4lM0QyNyUyNnJmbmMlM0QxJTI2
ZWlkJTNELTM1Mzc1Nzg1MTQzODMzMjMxODElMjZldCUzRDAlMjZwbGklM0QxJmFtcDtjc2ln
PUFGLVNFblpVcndLRTFPTWdMSUtPOjE1NzIzNDY0MDMiIHRhcmdldD0iX2JsYW5rIj5Bam91
dGVyIHVuIGNvbXB0ZTwvYT48L2Rpdj48ZGl2PjxhIGNsYXNzPSJnYl8wIGdiXzZmIGdiX2Vn
IGdiX1BlIGdiX3BiIiBpZD0iZ2JfNzEiIGhyZWY9Imh0dHBzOi8vYWNjb3VudHMuZ29vZ2xl
LmNvbS9Mb2dvdXQiIHRhcmdldD0iX3RvcCI+RMOpY29ubmV4aW9uPC9hPjwvZGl2PjwvZGl2
PjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9ImdiX1dkIGdiXzRkIj48L2Rpdj48L2hlYWRlcj48
ZGl2IGNsYXNzPSJnYl9RZCIgc3R5bGU9ImhlaWdodDogNjRweDsiPjwvZGl2PjwvZGl2Pjxz
Y3JpcHQgbm9uY2U9ImpKbEJWcThjQXFNYlJBOXN6VXFHRXciPnRoaXMuZ2Jhcl89dGhpcy5n
YmFyX3x8e307KGZ1bmN0aW9uKF8pe3ZhciB3aW5kb3c9dGhpczsNCnRyeXsNCl8uSWQ9IV8u
eXx8Xy5oYyg5KTtfLkpkPSFfLnl8fF8uaGMoOSk7Xy5LZD1fLnkmJiFfLmZjKCI5Iik7Xy5M
ZD1mdW5jdGlvbigpe2lmKCFfLnEuYWRkRXZlbnRMaXN0ZW5lcnx8IU9iamVjdC5kZWZpbmVQ
cm9wZXJ0eSlyZXR1cm4hMTt2YXIgYT0hMSxjPU9iamVjdC5kZWZpbmVQcm9wZXJ0eSh7fSwi
cGFzc2l2ZSIse2dldDpmdW5jdGlvbigpe2E9ITB9fSk7dHJ5e18ucS5hZGRFdmVudExpc3Rl
bmVyKCJ0ZXN0IixfLndhLGMpLF8ucS5yZW1vdmVFdmVudExpc3RlbmVyKCJ0ZXN0IixfLndh
LGMpfWNhdGNoKGQpe31yZXR1cm4gYX0oKTsNCl8uTWQ9Xy5SYj8id2Via2l0VHJhbnNpdGlv
bkVuZCI6Xy5OYj8ib3RyYW5zaXRpb25lbmQiOiJ0cmFuc2l0aW9uZW5kIjsNCg0KfWNhdGNo
KGUpe18uX0R1bXBFeGNlcHRpb24oZSl9DQp0cnl7DQpfLk5kPWZ1bmN0aW9uKGEsYyxkKXtp
ZighYS5mKWlmKGQgaW5zdGFuY2VvZiBBcnJheSlmb3IodmFyIGUgaW4gZClfLk5kKGEsYyxk
W2VdKTtlbHNle2U9KDAsXy50KShhLkIsYSxjKTt2YXIgZj1hLkErZDthLkErKztjLnNldEF0
dHJpYnV0ZSgiZGF0YS1lcWlkIixmKTthLm9bZl09ZTtjJiZjLmFkZEV2ZW50TGlzdGVuZXI/
Yy5hZGRFdmVudExpc3RlbmVyKGQsZSwhMSk6YyYmYy5hdHRhY2hFdmVudD9jLmF0dGFjaEV2
ZW50KCJvbiIrZCxlKTphLncubG9nKEVycm9yKCJrYCIrYykpfX07DQoNCn1jYXRjaChlKXtf
Ll9EdW1wRXhjZXB0aW9uKGUpfQ0KdHJ5ew0KdmFyIE9kPWRvY3VtZW50LnF1ZXJ5U2VsZWN0
b3IoIi5nYl9BIC5nYl9CIiksUGQ9ZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiI2diLmdiX0Fj
Iik7T2QmJiFQZCYmXy5OZChfLnlkLE9kLCJjbGljayIpOw0KDQp9Y2F0Y2goZSl7Xy5fRHVt
cEV4Y2VwdGlvbihlKX0NCnRyeXsNCnZhciBSZCxUZCxVZCxYZCwkZCxhZSxiZSxjZSxkZSxl
ZSxmZSxrZSxsZTtfLlFkPWZ1bmN0aW9uKGEsYyl7dmFyIGQ9QXJyYXkucHJvdG90eXBlLnNs
aWNlLmNhbGwoYXJndW1lbnRzLDEpO3JldHVybiBmdW5jdGlvbigpe3ZhciBlPWQuc2xpY2Uo
KTtlLnB1c2guYXBwbHkoZSxhcmd1bWVudHMpO3JldHVybiBhLmFwcGx5KHRoaXMsZSl9fTtS
ZD1mdW5jdGlvbihhKXtpZihhIGluc3RhbmNlb2YgXy5kYiYmYS5jb25zdHJ1Y3Rvcj09PV8u
ZGImJmEuaj09PV8uY2IpcmV0dXJuIGEuZjtfLnphKGEpO3JldHVybiJ0eXBlX2Vycm9yOlRy
dXN0ZWRSZXNvdXJjZVVybCJ9O18uU2Q9ZnVuY3Rpb24oYSl7cmV0dXJuIFJkKGEpLnRvU3Ry
aW5nKCl9O1RkPW51bGw7VWQ9L15bXHcrL18tXStbPV17MCwyfSQvOw0KXy5WZD1mdW5jdGlv
bigpe2lmKG51bGw9PT1UZClhOnt2YXIgYT1fLnEuZG9jdW1lbnQ7aWYoKGE9YS5xdWVyeVNl
bGVjdG9yJiZhLnF1ZXJ5U2VsZWN0b3IoInNjcmlwdFtub25jZV0iKSkmJihhPWEubm9uY2V8
fGEuZ2V0QXR0cmlidXRlKCJub25jZSIpKSYmVWQudGVzdChhKSl7VGQ9YTticmVhayBhfVRk
PSIifXJldHVybiBUZH07Xy5XZD1mdW5jdGlvbihhKXt2YXIgYz1fLnphKGEpO3JldHVybiJh
cnJheSI9PWN8fCJvYmplY3QiPT1jJiYibnVtYmVyIj09dHlwZW9mIGEubGVuZ3RofTtfLllk
PWZ1bmN0aW9uKGEpe3ZhciBjPWEubGVuZ3RoO2lmKDA8Yyl7Zm9yKHZhciBkPUFycmF5KGMp
LGU9MDtlPGM7ZSsrKWRbZV09YVtlXTtyZXR1cm4gZH1yZXR1cm5bXX07Xy5aZD1mdW5jdGlv
bihhLGMpe3JldHVybiAwPT1hLmxhc3RJbmRleE9mKGMsMCl9OyRkPS8mL2c7YWU9LzwvZzti
ZT0vPi9nO2NlPS8iL2c7ZGU9LycvZztlZT0vXHgwMC9nO2ZlPS9bXHgwMCY8PiInXS87DQpf
LmdlPWZ1bmN0aW9uKGEsYyl7aWYoYylhPWEucmVwbGFjZSgkZCwiJmFtcDsiKS5yZXBsYWNl
KGFlLCImbHQ7IikucmVwbGFjZShiZSwiJmd0OyIpLnJlcGxhY2UoY2UsIiZxdW90OyIpLnJl
cGxhY2UoZGUsIiYjMzk7IikucmVwbGFjZShlZSwiJiMwOyIpO2Vsc2V7aWYoIWZlLnRlc3Qo
YSkpcmV0dXJuIGE7LTEhPWEuaW5kZXhPZigiJiIpJiYoYT1hLnJlcGxhY2UoJGQsIiZhbXA7
IikpOy0xIT1hLmluZGV4T2YoIjwiKSYmKGE9YS5yZXBsYWNlKGFlLCImbHQ7IikpOy0xIT1h
LmluZGV4T2YoIj4iKSYmKGE9YS5yZXBsYWNlKGJlLCImZ3Q7IikpOy0xIT1hLmluZGV4T2Yo
JyInKSYmKGE9YS5yZXBsYWNlKGNlLCImcXVvdDsiKSk7LTEhPWEuaW5kZXhPZigiJyIpJiYo
YT1hLnJlcGxhY2UoZGUsIiYjMzk7IikpOy0xIT1hLmluZGV4T2YoIlx4MDAiKSYmKGE9YS5y
ZXBsYWNlKGVlLCImIzA7IikpfXJldHVybiBhfTsNCl8uaGU9ZnVuY3Rpb24oYSxjLGQpe2Eu
cmVsPWQ7YS5ocmVmPS0xIT1kLnRvTG93ZXJDYXNlKCkuaW5kZXhPZigic3R5bGVzaGVldCIp
P18uU2QoYyk6YyBpbnN0YW5jZW9mIF8uZGI/Xy5TZChjKTpjIGluc3RhbmNlb2YgXy5rYj9f
LmxiKGMpOl8ubGIoXy5vYihjKSl9O18uaWU9ZnVuY3Rpb24oYSxjKXthLnNyYz1SZChjKTso
Yz1fLlZkKCkpJiZhLnNldEF0dHJpYnV0ZSgibm9uY2UiLGMpfTtfLmplPWZ1bmN0aW9uKGEp
e3JldHVybiBhPV8uZ2UoYSx2b2lkIDApfTtrZT0hXy55fHxfLmhjKDkpO2xlPSFfLlFiJiYh
Xy55fHxfLnkmJl8uaGMoOSl8fF8uUWImJl8uZmMoIjEuOS4xIik7Xy5tZT1fLnkmJiFfLmZj
KCI5Iik7Xy5uZT1fLnl8fF8uTmJ8fF8uUmI7DQp2YXIgdWUsd2UsQWU7Xy5xZT1mdW5jdGlv
bihhKXtyZXR1cm4gYT9uZXcgXy5vZShfLnBlKGEpKTpYZHx8KFhkPW5ldyBfLm9lKX07Xy5y
ZT1mdW5jdGlvbihhLGMpe3JldHVybiJzdHJpbmciPT09dHlwZW9mIGM/YS5nZXRFbGVtZW50
QnlJZChjKTpjfTtfLnNlPWZ1bmN0aW9uKGEsYyl7cmV0dXJuKGN8fGRvY3VtZW50KS5nZXRF
bGVtZW50c0J5VGFnTmFtZShTdHJpbmcoYSkpfTtfLk49ZnVuY3Rpb24oYSxjKXt2YXIgZD1j
fHxkb2N1bWVudDtpZihkLmdldEVsZW1lbnRzQnlDbGFzc05hbWUpYT1kLmdldEVsZW1lbnRz
QnlDbGFzc05hbWUoYSlbMF07ZWxzZXtkPWRvY3VtZW50O3ZhciBlPWN8fGQ7YT1lLnF1ZXJ5
U2VsZWN0b3JBbGwmJmUucXVlcnlTZWxlY3RvciYmYT9lLnF1ZXJ5U2VsZWN0b3IoYT8iLiIr
YToiIik6Xy50ZShkLCIqIixhLGMpWzBdfHxudWxsfXJldHVybiBhfHxudWxsfTsNCl8udGU9
ZnVuY3Rpb24oYSxjLGQsZSl7YT1lfHxhO2M9YyYmIioiIT1jP1N0cmluZyhjKS50b1VwcGVy
Q2FzZSgpOiIiO2lmKGEucXVlcnlTZWxlY3RvckFsbCYmYS5xdWVyeVNlbGVjdG9yJiYoY3x8
ZCkpcmV0dXJuIGEucXVlcnlTZWxlY3RvckFsbChjKyhkPyIuIitkOiIiKSk7aWYoZCYmYS5n
ZXRFbGVtZW50c0J5Q2xhc3NOYW1lKXthPWEuZ2V0RWxlbWVudHNCeUNsYXNzTmFtZShkKTtp
ZihjKXtlPXt9O2Zvcih2YXIgZj0wLGc9MCxoO2g9YVtnXTtnKyspYz09aC5ub2RlTmFtZSYm
KGVbZisrXT1oKTtlLmxlbmd0aD1mO3JldHVybiBlfXJldHVybiBhfWE9YS5nZXRFbGVtZW50
c0J5VGFnTmFtZShjfHwiKiIpO2lmKGQpe2U9e307Zm9yKGc9Zj0wO2g9YVtnXTtnKyspYz1o
LmNsYXNzTmFtZSwiZnVuY3Rpb24iPT10eXBlb2YgYy5zcGxpdCYmXy5QYShjLnNwbGl0KC9c
cysvKSxkKSYmKGVbZisrXT1oKTtlLmxlbmd0aD1mO3JldHVybiBlfXJldHVybiBhfTsNCl8u
dmU9ZnVuY3Rpb24oYSxjKXtfLlFhKGMsZnVuY3Rpb24oZCxlKXtkJiYib2JqZWN0Ij09dHlw
ZW9mIGQmJmQuUGImJihkPWQuQ2IoKSk7InN0eWxlIj09ZT9hLnN0eWxlLmNzc1RleHQ9ZDoi
Y2xhc3MiPT1lP2EuY2xhc3NOYW1lPWQ6ImZvciI9PWU/YS5odG1sRm9yPWQ6dWUuaGFzT3du
UHJvcGVydHkoZSk/YS5zZXRBdHRyaWJ1dGUodWVbZV0sZCk6Xy5aZChlLCJhcmlhLSIpfHxf
LlpkKGUsImRhdGEtIik/YS5zZXRBdHRyaWJ1dGUoZSxkKTphW2VdPWR9KX07dWU9e2NlbGxw
YWRkaW5nOiJjZWxsUGFkZGluZyIsY2VsbHNwYWNpbmc6ImNlbGxTcGFjaW5nIixjb2xzcGFu
OiJjb2xTcGFuIixmcmFtZWJvcmRlcjoiZnJhbWVCb3JkZXIiLGhlaWdodDoiaGVpZ2h0Iixt
YXhsZW5ndGg6Im1heExlbmd0aCIsbm9uY2U6Im5vbmNlIixyb2xlOiJyb2xlIixyb3dzcGFu
OiJyb3dTcGFuIix0eXBlOiJ0eXBlIix1c2VtYXA6InVzZU1hcCIsdmFsaWduOiJ2QWxpZ24i
LHdpZHRoOiJ3aWR0aCJ9Ow0KXy54ZT1mdW5jdGlvbihhLGMsZCl7cmV0dXJuIHdlKGRvY3Vt
ZW50LGFyZ3VtZW50cyl9O3dlPWZ1bmN0aW9uKGEsYyl7dmFyIGQ9U3RyaW5nKGNbMF0pLGU9
Y1sxXTtpZigha2UmJmUmJihlLm5hbWV8fGUudHlwZSkpe2Q9WyI8IixkXTtlLm5hbWUmJmQu
cHVzaCgnIG5hbWU9IicsXy5qZShlLm5hbWUpLCciJyk7aWYoZS50eXBlKXtkLnB1c2goJyB0
eXBlPSInLF8uamUoZS50eXBlKSwnIicpO3ZhciBmPXt9O18uU2EoZixlKTtkZWxldGUgZi50
eXBlO2U9Zn1kLnB1c2goIj4iKTtkPWQuam9pbigiIil9ZD1fLnllKGEsZCk7ZSYmKCJzdHJp
bmciPT09dHlwZW9mIGU/ZC5jbGFzc05hbWU9ZTpfLkFhKGUpP2QuY2xhc3NOYW1lPWUuam9p
bigiICIpOl8udmUoZCxlKSk7MjxjLmxlbmd0aCYmXy56ZShhLGQsYywyKTtyZXR1cm4gZH07
DQpfLnplPWZ1bmN0aW9uKGEsYyxkLGUpe2Z1bmN0aW9uIGYoaCl7aCYmYy5hcHBlbmRDaGls
ZCgic3RyaW5nIj09PXR5cGVvZiBoP2EuY3JlYXRlVGV4dE5vZGUoaCk6aCl9Zm9yKDtlPGQu
bGVuZ3RoO2UrKyl7dmFyIGc9ZFtlXTshXy5XZChnKXx8Xy5DYShnKSYmMDxnLm5vZGVUeXBl
P2YoZyk6KDAsXy5MYSkoQWUoZyk/Xy5ZZChnKTpnLGYpfX07Xy5CZT1mdW5jdGlvbihhKXty
ZXR1cm4gXy55ZShkb2N1bWVudCxhKX07Xy55ZT1mdW5jdGlvbihhLGMpe2M9U3RyaW5nKGMp
OyJhcHBsaWNhdGlvbi94aHRtbCt4bWwiPT09YS5jb250ZW50VHlwZSYmKGM9Yy50b0xvd2Vy
Q2FzZSgpKTtyZXR1cm4gYS5jcmVhdGVFbGVtZW50KGMpfTtfLkNlPWZ1bmN0aW9uKGEpe2Zv
cih2YXIgYztjPWEuZmlyc3RDaGlsZDspYS5yZW1vdmVDaGlsZChjKX07Xy5EZT1mdW5jdGlv
bihhKXtyZXR1cm4gYSYmYS5wYXJlbnROb2RlP2EucGFyZW50Tm9kZS5yZW1vdmVDaGlsZChh
KTpudWxsfTsNCl8uRWU9ZnVuY3Rpb24oYSl7cmV0dXJuIGxlJiZ2b2lkIDAhPWEuY2hpbGRy
ZW4/YS5jaGlsZHJlbjooMCxfLk1hKShhLmNoaWxkTm9kZXMsZnVuY3Rpb24oYyl7cmV0dXJu
IDE9PWMubm9kZVR5cGV9KX07Xy5GZT1mdW5jdGlvbihhKXtyZXR1cm4gXy5DYShhKSYmMT09
YS5ub2RlVHlwZX07Xy5HZT1mdW5jdGlvbihhLGMpe2lmKCFhfHwhYylyZXR1cm4hMTtpZihh
LmNvbnRhaW5zJiYxPT1jLm5vZGVUeXBlKXJldHVybiBhPT1jfHxhLmNvbnRhaW5zKGMpO2lm
KCJ1bmRlZmluZWQiIT10eXBlb2YgYS5jb21wYXJlRG9jdW1lbnRQb3NpdGlvbilyZXR1cm4g
YT09Y3x8ISEoYS5jb21wYXJlRG9jdW1lbnRQb3NpdGlvbihjKSYxNik7Zm9yKDtjJiZhIT1j
OyljPWMucGFyZW50Tm9kZTtyZXR1cm4gYz09YX07Xy5wZT1mdW5jdGlvbihhKXtyZXR1cm4g
OT09YS5ub2RlVHlwZT9hOmEub3duZXJEb2N1bWVudHx8YS5kb2N1bWVudH07DQpBZT1mdW5j
dGlvbihhKXtpZihhJiYibnVtYmVyIj09dHlwZW9mIGEubGVuZ3RoKXtpZihfLkNhKGEpKXJl
dHVybiJmdW5jdGlvbiI9PXR5cGVvZiBhLml0ZW18fCJzdHJpbmciPT10eXBlb2YgYS5pdGVt
O2lmKF8uQmEoYSkpcmV0dXJuImZ1bmN0aW9uIj09dHlwZW9mIGEuaXRlbX1yZXR1cm4hMX07
Xy5vZT1mdW5jdGlvbihhKXt0aGlzLmI9YXx8Xy5xLmRvY3VtZW50fHxkb2N1bWVudH07Xy5r
PV8ub2UucHJvdG90eXBlO18uay5DPWZ1bmN0aW9uKGEpe3JldHVybiBfLnJlKHRoaXMuYixh
KX07Xy5rLnZhPWZ1bmN0aW9uKGEsYyxkKXtyZXR1cm4gd2UodGhpcy5iLGFyZ3VtZW50cyl9
O18uay5jcmVhdGVFbGVtZW50PWZ1bmN0aW9uKGEpe3JldHVybiBfLnllKHRoaXMuYixhKX07
Xy5rLlZkPWZ1bmN0aW9uKGEsYyl7YS5hcHBlbmRDaGlsZChjKX07Xy5rLlhmPV8uQ2U7Xy5r
LldkPV8uRGU7Xy5rLk5oPV8uRWU7Xy5rLldmPV8uR2U7DQoNCn1jYXRjaChlKXtfLl9EdW1w
RXhjZXB0aW9uKGUpfQ0KdHJ5ew0KdmFyIEhlPWZ1bmN0aW9uKGEpe3ZhciBjPWFyZ3VtZW50
cy5sZW5ndGg7aWYoMT09YyYmXy5BYShhcmd1bWVudHNbMF0pKXJldHVybiBIZS5hcHBseShu
dWxsLGFyZ3VtZW50c1swXSk7Zm9yKHZhciBkPXt9LGU9MDtlPGM7ZSsrKWRbYXJndW1lbnRz
W2VdXT0hMDtyZXR1cm4gZH0sSWU7DQpIZSgiQSBBUkVBIEJVVFRPTiBIRUFEIElOUFVUIExJ
TksgTUVOVSBNRVRBIE9QVEdST1VQIE9QVElPTiBQUk9HUkVTUyBTVFlMRSBTRUxFQ1QgU09V
UkNFIFRFWFRBUkVBIFRJVExFIFRSQUNLIi5zcGxpdCgiICIpKTtfLkplPWZ1bmN0aW9uKGEs
Yyl7Yz9hLnNldEF0dHJpYnV0ZSgicm9sZSIsYyk6YS5yZW1vdmVBdHRyaWJ1dGUoInJvbGUi
KX07DQpfLktlPWZ1bmN0aW9uKGEsYyxkKXtfLkFhKGQpJiYoZD1kLmpvaW4oIiAiKSk7dmFy
IGU9ImFyaWEtIitjOyIiPT09ZHx8dm9pZCAwPT1kPyhJZXx8KEllPXthdG9taWM6ITEsYXV0
b2NvbXBsZXRlOiJub25lIixkcm9wZWZmZWN0OiJub25lIixoYXNwb3B1cDohMSxsaXZlOiJv
ZmYiLG11bHRpbGluZTohMSxtdWx0aXNlbGVjdGFibGU6ITEsb3JpZW50YXRpb246InZlcnRp
Y2FsIixyZWFkb25seTohMSxyZWxldmFudDoiYWRkaXRpb25zIHRleHQiLHJlcXVpcmVkOiEx
LHNvcnQ6Im5vbmUiLGJ1c3k6ITEsZGlzYWJsZWQ6ITEsaGlkZGVuOiExLGludmFsaWQ6ImZh
bHNlIn0pLGQ9SWUsYyBpbiBkP2Euc2V0QXR0cmlidXRlKGUsZFtjXSk6YS5yZW1vdmVBdHRy
aWJ1dGUoZSkpOmEuc2V0QXR0cmlidXRlKGUsZCl9Ow0KDQp9Y2F0Y2goZSl7Xy5fRHVtcEV4
Y2VwdGlvbihlKX0NCnRyeXsNCl8uTGU9ZnVuY3Rpb24oYSl7YT1hLnNwbGl0KCIuIik7Zm9y
KHZhciBjPV8ucSxkPTA7ZDxhLmxlbmd0aDtkKyspaWYoYz1jW2FbZF1dLG51bGw9PWMpcmV0
dXJuIG51bGw7cmV0dXJuIGN9Ow0KDQp9Y2F0Y2goZSl7Xy5fRHVtcEV4Y2VwdGlvbihlKX0N
CnRyeXsNCnZhciBOZTtfLk1lPWZ1bmN0aW9uKGEsYyl7Yz0oMCxfLkthKShhLGMpO3ZhciBk
OyhkPTA8PWMpJiZBcnJheS5wcm90b3R5cGUuc3BsaWNlLmNhbGwoYSxjLDEpO3JldHVybiBk
fTtOZT1mdW5jdGlvbihhLGMpe2Zvcih2YXIgZCBpbiBhKWlmKGMuY2FsbCh2b2lkIDAsYVtk
XSxkLGEpKXJldHVybiEwO3JldHVybiExfTtfLk9lPWZ1bmN0aW9uKGEsYyl7dHJ5e3JldHVy
biBfLktiKGFbY10pLCEwfWNhdGNoKGQpe31yZXR1cm4hMX07DQpfLlBlPWZ1bmN0aW9uKGEs
Yyl7dGhpcy50eXBlPWE7dGhpcy5iPXRoaXMudGFyZ2V0PWM7dGhpcy5mPSExO3RoaXMuSGc9
ITB9O18uUGUucHJvdG90eXBlLnN0b3BQcm9wYWdhdGlvbj1mdW5jdGlvbigpe3RoaXMuZj0h
MH07Xy5QZS5wcm90b3R5cGUucHJldmVudERlZmF1bHQ9ZnVuY3Rpb24oKXt0aGlzLkhnPSEx
fTsNCl8uUWU9ZnVuY3Rpb24oYSxjKXtfLlBlLmNhbGwodGhpcyxhP2EudHlwZToiIik7dGhp
cy5yZWxhdGVkVGFyZ2V0PXRoaXMuYj10aGlzLnRhcmdldD1udWxsO3RoaXMuYnV0dG9uPXRo
aXMuc2NyZWVuWT10aGlzLnNjcmVlblg9dGhpcy5jbGllbnRZPXRoaXMuY2xpZW50WD0wO3Ro
aXMua2V5PSIiO3RoaXMuaj10aGlzLmtleUNvZGU9MDt0aGlzLm1ldGFLZXk9dGhpcy5zaGlm
dEtleT10aGlzLmFsdEtleT10aGlzLmN0cmxLZXk9ITE7dGhpcy5zdGF0ZT1udWxsO3RoaXMu
cG9pbnRlcklkPTA7dGhpcy5wb2ludGVyVHlwZT0iIjt0aGlzLmtiPW51bGw7YSYmdGhpcy5p
bml0KGEsYyl9O18udyhfLlFlLF8uUGUpO3ZhciBSZT17MjoidG91Y2giLDM6InBlbiIsNDoi
bW91c2UifTsNCl8uUWUucHJvdG90eXBlLmluaXQ9ZnVuY3Rpb24oYSxjKXt2YXIgZD10aGlz
LnR5cGU9YS50eXBlLGU9YS5jaGFuZ2VkVG91Y2hlcyYmYS5jaGFuZ2VkVG91Y2hlcy5sZW5n
dGg/YS5jaGFuZ2VkVG91Y2hlc1swXTpudWxsO3RoaXMudGFyZ2V0PWEudGFyZ2V0fHxhLnNy
Y0VsZW1lbnQ7dGhpcy5iPWM7KGM9YS5yZWxhdGVkVGFyZ2V0KT9fLlFiJiYoXy5PZShjLCJu
b2RlTmFtZSIpfHwoYz1udWxsKSk6Im1vdXNlb3ZlciI9PWQ/Yz1hLmZyb21FbGVtZW50OiJt
b3VzZW91dCI9PWQmJihjPWEudG9FbGVtZW50KTt0aGlzLnJlbGF0ZWRUYXJnZXQ9YztlPyh0
aGlzLmNsaWVudFg9dm9pZCAwIT09ZS5jbGllbnRYP2UuY2xpZW50WDplLnBhZ2VYLHRoaXMu
Y2xpZW50WT12b2lkIDAhPT1lLmNsaWVudFk/ZS5jbGllbnRZOmUucGFnZVksdGhpcy5zY3Jl
ZW5YPWUuc2NyZWVuWHx8MCx0aGlzLnNjcmVlblk9ZS5zY3JlZW5ZfHwwKToodGhpcy5jbGll
bnRYPXZvaWQgMCE9PWEuY2xpZW50WD9hLmNsaWVudFg6DQphLnBhZ2VYLHRoaXMuY2xpZW50
WT12b2lkIDAhPT1hLmNsaWVudFk/YS5jbGllbnRZOmEucGFnZVksdGhpcy5zY3JlZW5YPWEu
c2NyZWVuWHx8MCx0aGlzLnNjcmVlblk9YS5zY3JlZW5ZfHwwKTt0aGlzLmJ1dHRvbj1hLmJ1
dHRvbjt0aGlzLmtleUNvZGU9YS5rZXlDb2RlfHwwO3RoaXMua2V5PWEua2V5fHwiIjt0aGlz
Lmo9YS5jaGFyQ29kZXx8KCJrZXlwcmVzcyI9PWQ/YS5rZXlDb2RlOjApO3RoaXMuY3RybEtl
eT1hLmN0cmxLZXk7dGhpcy5hbHRLZXk9YS5hbHRLZXk7dGhpcy5zaGlmdEtleT1hLnNoaWZ0
S2V5O3RoaXMubWV0YUtleT1hLm1ldGFLZXk7dGhpcy5wb2ludGVySWQ9YS5wb2ludGVySWR8
fDA7dGhpcy5wb2ludGVyVHlwZT0ic3RyaW5nIj09PXR5cGVvZiBhLnBvaW50ZXJUeXBlP2Eu
cG9pbnRlclR5cGU6UmVbYS5wb2ludGVyVHlwZV18fCIiO3RoaXMuc3RhdGU9YS5zdGF0ZTt0
aGlzLmtiPWE7YS5kZWZhdWx0UHJldmVudGVkJiZ0aGlzLnByZXZlbnREZWZhdWx0KCl9Ow0K
Xy5RZS5wcm90b3R5cGUuc3RvcFByb3BhZ2F0aW9uPWZ1bmN0aW9uKCl7Xy5RZS5LLnN0b3BQ
cm9wYWdhdGlvbi5jYWxsKHRoaXMpO3RoaXMua2Iuc3RvcFByb3BhZ2F0aW9uP3RoaXMua2Iu
c3RvcFByb3BhZ2F0aW9uKCk6dGhpcy5rYi5jYW5jZWxCdWJibGU9ITB9O18uUWUucHJvdG90
eXBlLnByZXZlbnREZWZhdWx0PWZ1bmN0aW9uKCl7Xy5RZS5LLnByZXZlbnREZWZhdWx0LmNh
bGwodGhpcyk7dmFyIGE9dGhpcy5rYjtpZihhLnByZXZlbnREZWZhdWx0KWEucHJldmVudERl
ZmF1bHQoKTtlbHNlIGlmKGEucmV0dXJuVmFsdWU9ITEsXy5LZCl0cnl7aWYoYS5jdHJsS2V5
fHwxMTI8PWEua2V5Q29kZSYmMTIzPj1hLmtleUNvZGUpYS5rZXlDb2RlPS0xfWNhdGNoKGMp
e319Ow0KdmFyIFVlO18uU2U9ImNsb3N1cmVfbGlzdGVuYWJsZV8iKygxRTYqTWF0aC5yYW5k
b20oKXwwKTtfLlRlPWZ1bmN0aW9uKGEpe3JldHVybiEoIWF8fCFhW18uU2VdKX07VWU9MDsN
CnZhciBWZTtWZT1mdW5jdGlvbihhLGMsZCxlLGYpe3RoaXMubGlzdGVuZXI9YTt0aGlzLmI9
bnVsbDt0aGlzLnNyYz1jO3RoaXMudHlwZT1kO3RoaXMuY2FwdHVyZT0hIWU7dGhpcy5lZT1m
O3RoaXMua2V5PSsrVWU7dGhpcy5tZD10aGlzLk9kPSExfTtfLldlPWZ1bmN0aW9uKGEpe2Eu
bWQ9ITA7YS5saXN0ZW5lcj1udWxsO2EuYj1udWxsO2Euc3JjPW51bGw7YS5lZT1udWxsfTsN
Cl8uWGU9ZnVuY3Rpb24oYSl7dGhpcy5zcmM9YTt0aGlzLmI9e307dGhpcy5mPTB9O18uWGUu
cHJvdG90eXBlLmFkZD1mdW5jdGlvbihhLGMsZCxlLGYpe3ZhciBnPWEudG9TdHJpbmcoKTth
PXRoaXMuYltnXTthfHwoYT10aGlzLmJbZ109W10sdGhpcy5mKyspO3ZhciBoPVllKGEsYyxl
LGYpOy0xPGg/KGM9YVtoXSxkfHwoYy5PZD0hMSkpOihjPW5ldyBWZShjLHRoaXMuc3JjLGcs
ISFlLGYpLGMuT2Q9ZCxhLnB1c2goYykpO3JldHVybiBjfTtfLlhlLnByb3RvdHlwZS5yZW1v
dmU9ZnVuY3Rpb24oYSxjLGQsZSl7YT1hLnRvU3RyaW5nKCk7aWYoIShhIGluIHRoaXMuYikp
cmV0dXJuITE7dmFyIGY9dGhpcy5iW2FdO2M9WWUoZixjLGQsZSk7cmV0dXJuLTE8Yz8oXy5X
ZShmW2NdKSxBcnJheS5wcm90b3R5cGUuc3BsaWNlLmNhbGwoZixjLDEpLDA9PWYubGVuZ3Ro
JiYoZGVsZXRlIHRoaXMuYlthXSx0aGlzLmYtLSksITApOiExfTsNCl8uWmU9ZnVuY3Rpb24o
YSxjKXt2YXIgZD1jLnR5cGU7aWYoIShkIGluIGEuYikpcmV0dXJuITE7dmFyIGU9Xy5NZShh
LmJbZF0sYyk7ZSYmKF8uV2UoYyksMD09YS5iW2RdLmxlbmd0aCYmKGRlbGV0ZSBhLmJbZF0s
YS5mLS0pKTtyZXR1cm4gZX07Xy5YZS5wcm90b3R5cGUuWGM9ZnVuY3Rpb24oYSxjKXthPXRo
aXMuYlthLnRvU3RyaW5nKCldO3ZhciBkPVtdO2lmKGEpZm9yKHZhciBlPTA7ZTxhLmxlbmd0
aDsrK2Upe3ZhciBmPWFbZV07Zi5jYXB0dXJlPT1jJiZkLnB1c2goZil9cmV0dXJuIGR9O18u
WGUucHJvdG90eXBlLkhjPWZ1bmN0aW9uKGEsYyxkLGUpe2E9dGhpcy5iW2EudG9TdHJpbmco
KV07dmFyIGY9LTE7YSYmKGY9WWUoYSxjLGQsZSkpO3JldHVybi0xPGY/YVtmXTpudWxsfTsN
Cl8uWGUucHJvdG90eXBlLmhhc0xpc3RlbmVyPWZ1bmN0aW9uKGEsYyl7dmFyIGQ9dm9pZCAw
IT09YSxlPWQ/YS50b1N0cmluZygpOiIiLGY9dm9pZCAwIT09YztyZXR1cm4gTmUodGhpcy5i
LGZ1bmN0aW9uKGcpe2Zvcih2YXIgaD0wO2g8Zy5sZW5ndGg7KytoKWlmKCEoZCYmZ1toXS50
eXBlIT1lfHxmJiZnW2hdLmNhcHR1cmUhPWMpKXJldHVybiEwO3JldHVybiExfSl9O3ZhciBZ
ZT1mdW5jdGlvbihhLGMsZCxlKXtmb3IodmFyIGY9MDtmPGEubGVuZ3RoOysrZil7dmFyIGc9
YVtmXTtpZighZy5tZCYmZy5saXN0ZW5lcj09YyYmZy5jYXB0dXJlPT0hIWQmJmcuZWU9PWUp
cmV0dXJuIGZ9cmV0dXJuLTF9Ow0KdmFyICRlLGFmLGJmLGVmLGdmLGhmLG5mLG1mLGpmLG9m
OyRlPSJjbG9zdXJlX2xtXyIrKDFFNipNYXRoLnJhbmRvbSgpfDApO2FmPXt9O2JmPTA7Xy5Q
PWZ1bmN0aW9uKGEsYyxkLGUsZil7aWYoZSYmZS5vbmNlKXJldHVybiBfLmNmKGEsYyxkLGUs
Zik7aWYoXy5BYShjKSl7Zm9yKHZhciBnPTA7ZzxjLmxlbmd0aDtnKyspXy5QKGEsY1tnXSxk
LGUsZik7cmV0dXJuIG51bGx9ZD1fLmRmKGQpO3JldHVybiBfLlRlKGEpP2EuSChjLGQsXy5D
YShlKT8hIWUuY2FwdHVyZTohIWUsZik6ZWYoYSxjLGQsITEsZSxmKX07DQplZj1mdW5jdGlv
bihhLGMsZCxlLGYsZyl7aWYoIWMpdGhyb3cgRXJyb3IoIm4iKTt2YXIgaD1fLkNhKGYpPyEh
Zi5jYXB0dXJlOiEhZixsPV8uZmYoYSk7bHx8KGFbJGVdPWw9bmV3IF8uWGUoYSkpO2Q9bC5h
ZGQoYyxkLGUsaCxnKTtpZihkLmIpcmV0dXJuIGQ7ZT1nZigpO2QuYj1lO2Uuc3JjPWE7ZS5s
aXN0ZW5lcj1kO2lmKGEuYWRkRXZlbnRMaXN0ZW5lcilfLkxkfHwoZj1oKSx2b2lkIDA9PT1m
JiYoZj0hMSksYS5hZGRFdmVudExpc3RlbmVyKGMudG9TdHJpbmcoKSxlLGYpO2Vsc2UgaWYo
YS5hdHRhY2hFdmVudClhLmF0dGFjaEV2ZW50KGhmKGMudG9TdHJpbmcoKSksZSk7ZWxzZSBp
ZihhLmFkZExpc3RlbmVyJiZhLnJlbW92ZUxpc3RlbmVyKWEuYWRkTGlzdGVuZXIoZSk7ZWxz
ZSB0aHJvdyBFcnJvcigibyIpO2JmKys7cmV0dXJuIGR9Ow0KZ2Y9ZnVuY3Rpb24oKXt2YXIg
YT1qZixjPV8uSmQ/ZnVuY3Rpb24oZCl7cmV0dXJuIGEuY2FsbChjLnNyYyxjLmxpc3RlbmVy
LGQpfTpmdW5jdGlvbihkKXtkPWEuY2FsbChjLnNyYyxjLmxpc3RlbmVyLGQpO2lmKCFkKXJl
dHVybiBkfTtyZXR1cm4gY307Xy5jZj1mdW5jdGlvbihhLGMsZCxlLGYpe2lmKF8uQWEoYykp
e2Zvcih2YXIgZz0wO2c8Yy5sZW5ndGg7ZysrKV8uY2YoYSxjW2ddLGQsZSxmKTtyZXR1cm4g
bnVsbH1kPV8uZGYoZCk7cmV0dXJuIF8uVGUoYSk/YS5EYihjLGQsXy5DYShlKT8hIWUuY2Fw
dHVyZTohIWUsZik6ZWYoYSxjLGQsITAsZSxmKX07Xy5rZj1mdW5jdGlvbihhLGMsZCxlLGYp
e2lmKF8uQWEoYykpZm9yKHZhciBnPTA7ZzxjLmxlbmd0aDtnKyspXy5rZihhLGNbZ10sZCxl
LGYpO2Vsc2UgZT1fLkNhKGUpPyEhZS5jYXB0dXJlOiEhZSxkPV8uZGYoZCksXy5UZShhKT9h
LkFhKGMsZCxlLGYpOmEmJihhPV8uZmYoYSkpJiYoYz1hLkhjKGMsZCxlLGYpKSYmXy5sZihj
KX07DQpfLmxmPWZ1bmN0aW9uKGEpe2lmKCJudW1iZXIiPT09dHlwZW9mIGF8fCFhfHxhLm1k
KXJldHVybiExO3ZhciBjPWEuc3JjO2lmKF8uVGUoYykpcmV0dXJuIGMuQ2UoYSk7dmFyIGQ9
YS50eXBlLGU9YS5iO2MucmVtb3ZlRXZlbnRMaXN0ZW5lcj9jLnJlbW92ZUV2ZW50TGlzdGVu
ZXIoZCxlLGEuY2FwdHVyZSk6Yy5kZXRhY2hFdmVudD9jLmRldGFjaEV2ZW50KGhmKGQpLGUp
OmMuYWRkTGlzdGVuZXImJmMucmVtb3ZlTGlzdGVuZXImJmMucmVtb3ZlTGlzdGVuZXIoZSk7
YmYtLTsoZD1fLmZmKGMpKT8oXy5aZShkLGEpLDA9PWQuZiYmKGQuc3JjPW51bGwsY1skZV09
bnVsbCkpOl8uV2UoYSk7cmV0dXJuITB9O2hmPWZ1bmN0aW9uKGEpe3JldHVybiBhIGluIGFm
P2FmW2FdOmFmW2FdPSJvbiIrYX07DQpuZj1mdW5jdGlvbihhLGMsZCxlKXt2YXIgZj0hMDtp
ZihhPV8uZmYoYSkpaWYoYz1hLmJbYy50b1N0cmluZygpXSlmb3IoYz1jLmNvbmNhdCgpLGE9
MDthPGMubGVuZ3RoO2ErKyl7dmFyIGc9Y1thXTtnJiZnLmNhcHR1cmU9PWQmJiFnLm1kJiYo
Zz1tZihnLGUpLGY9ZiYmITEhPT1nKX1yZXR1cm4gZn07bWY9ZnVuY3Rpb24oYSxjKXt2YXIg
ZD1hLmxpc3RlbmVyLGU9YS5lZXx8YS5zcmM7YS5PZCYmXy5sZihhKTtyZXR1cm4gZC5jYWxs
KGUsYyl9Ow0KamY9ZnVuY3Rpb24oYSxjKXtpZihhLm1kKXJldHVybiEwO2lmKCFfLkpkKXt2
YXIgZD1jfHxfLkxlKCJ3aW5kb3cuZXZlbnQiKTtjPW5ldyBfLlFlKGQsdGhpcyk7dmFyIGU9
ITA7aWYoISgwPmQua2V5Q29kZXx8dm9pZCAwIT1kLnJldHVyblZhbHVlKSl7YTp7dmFyIGY9
ITE7aWYoMD09ZC5rZXlDb2RlKXRyeXtkLmtleUNvZGU9LTE7YnJlYWsgYX1jYXRjaChoKXtm
PSEwfWlmKGZ8fHZvaWQgMD09ZC5yZXR1cm5WYWx1ZSlkLnJldHVyblZhbHVlPSEwfWQ9W107
Zm9yKGY9Yy5iO2Y7Zj1mLnBhcmVudE5vZGUpZC5wdXNoKGYpO2E9YS50eXBlO2ZvcihmPWQu
bGVuZ3RoLTE7IWMuZiYmMDw9ZjtmLS0pe2MuYj1kW2ZdO3ZhciBnPW5mKGRbZl0sYSwhMCxj
KTtlPWUmJmd9Zm9yKGY9MDshYy5mJiZmPGQubGVuZ3RoO2YrKyljLmI9ZFtmXSxnPW5mKGRb
Zl0sYSwhMSxjKSxlPWUmJmd9cmV0dXJuIGV9cmV0dXJuIG1mKGEsbmV3IF8uUWUoYyx0aGlz
KSl9Ow0KXy5mZj1mdW5jdGlvbihhKXthPWFbJGVdO3JldHVybiBhIGluc3RhbmNlb2YgXy5Y
ZT9hOm51bGx9O29mPSJfX2Nsb3N1cmVfZXZlbnRzX2ZuXyIrKDFFOSpNYXRoLnJhbmRvbSgp
Pj4+MCk7Xy5kZj1mdW5jdGlvbihhKXtpZihfLkJhKGEpKXJldHVybiBhO2Fbb2ZdfHwoYVtv
Zl09ZnVuY3Rpb24oYyl7cmV0dXJuIGEuaGFuZGxlRXZlbnQoYyl9KTtyZXR1cm4gYVtvZl19
Ow0KDQp9Y2F0Y2goZSl7Xy5fRHVtcEV4Y2VwdGlvbihlKX0NCnRyeXsNCnZhciB0ZjtfLnBm
PWZ1bmN0aW9uKGEpe3JldHVybiBhfTtfLnFmPWZ1bmN0aW9uKGEpe3JldHVybiBhIGluc3Rh
bmNlb2YgXy5XYSYmYS5jb25zdHJ1Y3Rvcj09PV8uV2EmJmEuZj09PV8uVmE/YS5iOiJ0eXBl
X2Vycm9yOkNvbnN0In07Xy5yZj1mdW5jdGlvbihhKXtyZXR1cm4gXy5lYihfLnFmKGEpKX07
Xy5zZj1mdW5jdGlvbihhLGMpe2Euc3JjPV8uU2QoYyl9O3RmPWZ1bmN0aW9uKGEsYyl7dGhp
cy5qPWE7dGhpcy5vPWM7dGhpcy5mPTA7dGhpcy5iPW51bGx9O3RmLnByb3RvdHlwZS5nZXQ9
ZnVuY3Rpb24oKXtpZigwPHRoaXMuZil7dGhpcy5mLS07dmFyIGE9dGhpcy5iO3RoaXMuYj1h
Lm5leHQ7YS5uZXh0PW51bGx9ZWxzZSBhPXRoaXMuaigpO3JldHVybiBhfTt2YXIgdWY9ZnVu
Y3Rpb24oYSxjKXthLm8oYyk7MTAwPmEuZiYmKGEuZisrLGMubmV4dD1hLmIsYS5iPWMpfTsN
CnZhciB2Zj1mdW5jdGlvbihhKXtfLnEuc2V0VGltZW91dChmdW5jdGlvbigpe3Rocm93IGE7
fSwwKX0sd2YseGY9ZnVuY3Rpb24oKXt2YXIgYT1fLnEuTWVzc2FnZUNoYW5uZWw7InVuZGVm
aW5lZCI9PT10eXBlb2YgYSYmInVuZGVmaW5lZCIhPT10eXBlb2Ygd2luZG93JiZ3aW5kb3cu
cG9zdE1lc3NhZ2UmJndpbmRvdy5hZGRFdmVudExpc3RlbmVyJiYhXy54KCJQcmVzdG8iKSYm
KGE9ZnVuY3Rpb24oKXt2YXIgZj1fLkJlKCJJRlJBTUUiKTtmLnN0eWxlLmRpc3BsYXk9Im5v
bmUiO18uc2YoZixfLnJmKF8uWWEpKTtkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuYXBwZW5k
Q2hpbGQoZik7dmFyIGc9Zi5jb250ZW50V2luZG93O2Y9Zy5kb2N1bWVudDtmLm9wZW4oKTtm
LndyaXRlKF8uRGIoXy5GYikpO2YuY2xvc2UoKTt2YXIgaD0iY2FsbEltbWVkaWF0ZSIrTWF0
aC5yYW5kb20oKSxsPSJmaWxlOiI9PWcubG9jYXRpb24ucHJvdG9jb2w/IioiOmcubG9jYXRp
b24ucHJvdG9jb2wrIi8vIisNCmcubG9jYXRpb24uaG9zdDtmPSgwLF8udCkoZnVuY3Rpb24o
bSl7aWYoKCIqIj09bHx8bS5vcmlnaW49PWwpJiZtLmRhdGE9PWgpdGhpcy5wb3J0MS5vbm1l
c3NhZ2UoKX0sdGhpcyk7Zy5hZGRFdmVudExpc3RlbmVyKCJtZXNzYWdlIixmLCExKTt0aGlz
LnBvcnQxPXt9O3RoaXMucG9ydDI9e3Bvc3RNZXNzYWdlOmZ1bmN0aW9uKCl7Zy5wb3N0TWVz
c2FnZShoLGwpfX19KTtpZigidW5kZWZpbmVkIiE9PXR5cGVvZiBhJiYhXy53YigpKXt2YXIg
Yz1uZXcgYSxkPXt9LGU9ZDtjLnBvcnQxLm9ubWVzc2FnZT1mdW5jdGlvbigpe2lmKHZvaWQg
MCE9PWQubmV4dCl7ZD1kLm5leHQ7dmFyIGY9ZC5DZjtkLkNmPW51bGw7ZigpfX07cmV0dXJu
IGZ1bmN0aW9uKGYpe2UubmV4dD17Q2Y6Zn07ZT1lLm5leHQ7Yy5wb3J0Mi5wb3N0TWVzc2Fn
ZSgwKX19cmV0dXJuInVuZGVmaW5lZCIhPT10eXBlb2YgZG9jdW1lbnQmJiJvbnJlYWR5c3Rh
dGVjaGFuZ2UiaW4gXy5CZSgiU0NSSVBUIik/ZnVuY3Rpb24oZil7dmFyIGc9DQpfLkJlKCJT
Q1JJUFQiKTtnLm9ucmVhZHlzdGF0ZWNoYW5nZT1mdW5jdGlvbigpe2cub25yZWFkeXN0YXRl
Y2hhbmdlPW51bGw7Zy5wYXJlbnROb2RlLnJlbW92ZUNoaWxkKGcpO2c9bnVsbDtmKCk7Zj1u
dWxsfTtkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuYXBwZW5kQ2hpbGQoZyl9OmZ1bmN0aW9u
KGYpe18ucS5zZXRUaW1lb3V0KGYsMCl9fTsNCnZhciB5Zj1mdW5jdGlvbigpe3RoaXMuZj10
aGlzLmI9bnVsbH0sQWY9bmV3IHRmKGZ1bmN0aW9uKCl7cmV0dXJuIG5ldyB6Zn0sZnVuY3Rp
b24oYSl7YS5yZXNldCgpfSk7eWYucHJvdG90eXBlLmFkZD1mdW5jdGlvbihhLGMpe3ZhciBk
PUFmLmdldCgpO2Quc2V0KGEsYyk7dGhpcy5mP3RoaXMuZi5uZXh0PWQ6dGhpcy5iPWQ7dGhp
cy5mPWR9O3lmLnByb3RvdHlwZS5yZW1vdmU9ZnVuY3Rpb24oKXt2YXIgYT1udWxsO3RoaXMu
YiYmKGE9dGhpcy5iLHRoaXMuYj10aGlzLmIubmV4dCx0aGlzLmJ8fCh0aGlzLmY9bnVsbCks
YS5uZXh0PW51bGwpO3JldHVybiBhfTt2YXIgemY9ZnVuY3Rpb24oKXt0aGlzLm5leHQ9dGhp
cy5zY29wZT10aGlzLlliPW51bGx9O3pmLnByb3RvdHlwZS5zZXQ9ZnVuY3Rpb24oYSxjKXt0
aGlzLlliPWE7dGhpcy5zY29wZT1jO3RoaXMubmV4dD1udWxsfTsNCnpmLnByb3RvdHlwZS5y
ZXNldD1mdW5jdGlvbigpe3RoaXMubmV4dD10aGlzLnNjb3BlPXRoaXMuWWI9bnVsbH07DQp2
YXIgQmYsQ2YsRGYsRWYsR2Y7Xy5GZj1mdW5jdGlvbihhLGMpe0JmfHxDZigpO0RmfHwoQmYo
KSxEZj0hMCk7RWYuYWRkKGEsYyl9O0NmPWZ1bmN0aW9uKCl7aWYoXy5xLlByb21pc2UmJl8u
cS5Qcm9taXNlLnJlc29sdmUpe3ZhciBhPV8ucS5Qcm9taXNlLnJlc29sdmUodm9pZCAwKTtC
Zj1mdW5jdGlvbigpe2EudGhlbihHZil9fWVsc2UgQmY9ZnVuY3Rpb24oKXt2YXIgYz1HZjsh
Xy5CYShfLnEuc2V0SW1tZWRpYXRlKXx8Xy5xLldpbmRvdyYmXy5xLldpbmRvdy5wcm90b3R5
cGUmJiFfLngoIkVkZ2UiKSYmXy5xLldpbmRvdy5wcm90b3R5cGUuc2V0SW1tZWRpYXRlPT1f
LnEuc2V0SW1tZWRpYXRlPyh3Znx8KHdmPXhmKCkpLHdmKGMpKTpfLnEuc2V0SW1tZWRpYXRl
KGMpfX07RGY9ITE7RWY9bmV3IHlmO0dmPWZ1bmN0aW9uKCl7Zm9yKHZhciBhO2E9RWYucmVt
b3ZlKCk7KXt0cnl7YS5ZYi5jYWxsKGEuc2NvcGUpfWNhdGNoKGMpe3ZmKGMpfXVmKEFmLGEp
fURmPSExfTsNCl8uSGY9ZnVuY3Rpb24oYSl7YS5wcm90b3R5cGUuJGdvb2dfVGhlbmFibGU9
ITB9O18uSWY9ZnVuY3Rpb24oYSl7aWYoIWEpcmV0dXJuITE7dHJ5e3JldHVybiEhYS4kZ29v
Z19UaGVuYWJsZX1jYXRjaChjKXtyZXR1cm4hMX19Ow0KdmFyIExmLFlmLFVmLFNmLFRmLFpm
LFhmLCRmO18uS2Y9ZnVuY3Rpb24oYSxjKXt0aGlzLmI9MDt0aGlzLkI9dm9pZCAwO3RoaXMu
bz10aGlzLmY9dGhpcy5qPW51bGw7dGhpcy53PXRoaXMuQT0hMTtpZihhIT1fLndhKXRyeXt2
YXIgZD10aGlzO2EuY2FsbChjLGZ1bmN0aW9uKGUpe18uSmYoZCwyLGUpfSxmdW5jdGlvbihl
KXtfLkpmKGQsMyxlKX0pfWNhdGNoKGUpe18uSmYodGhpcywzLGUpfX07TGY9ZnVuY3Rpb24o
KXt0aGlzLm5leHQ9dGhpcy5jb250ZXh0PXRoaXMuZj10aGlzLmo9dGhpcy5iPW51bGw7dGhp
cy5vPSExfTtMZi5wcm90b3R5cGUucmVzZXQ9ZnVuY3Rpb24oKXt0aGlzLmNvbnRleHQ9dGhp
cy5mPXRoaXMuaj10aGlzLmI9bnVsbDt0aGlzLm89ITF9Ow0KdmFyIE1mPW5ldyB0ZihmdW5j
dGlvbigpe3JldHVybiBuZXcgTGZ9LGZ1bmN0aW9uKGEpe2EucmVzZXQoKX0pLE5mPWZ1bmN0
aW9uKGEsYyxkKXt2YXIgZT1NZi5nZXQoKTtlLmo9YTtlLmY9YztlLmNvbnRleHQ9ZDtyZXR1
cm4gZX07Xy5LZi5wcm90b3R5cGUudGhlbj1mdW5jdGlvbihhLGMsZCl7cmV0dXJuIE9mKHRo
aXMsXy5CYShhKT9hOm51bGwsXy5CYShjKT9jOm51bGwsZCl9O18uSGYoXy5LZik7Xy5QZj1m
dW5jdGlvbihhLGMpe3JldHVybiBPZihhLG51bGwsYyx2b2lkIDApfTtfLktmLnByb3RvdHlw
ZS5jYW5jZWw9ZnVuY3Rpb24oYSl7aWYoMD09dGhpcy5iKXt2YXIgYz1uZXcgXy5RZihhKTtf
LkZmKGZ1bmN0aW9uKCl7UmYodGhpcyxjKX0sdGhpcyl9fTsNCnZhciBSZj1mdW5jdGlvbihh
LGMpe2lmKDA9PWEuYilpZihhLmope3ZhciBkPWEuajtpZihkLmYpe2Zvcih2YXIgZT0wLGY9
bnVsbCxnPW51bGwsaD1kLmY7aCYmKGgub3x8KGUrKyxoLmI9PWEmJihmPWgpLCEoZiYmMTxl
KSkpO2g9aC5uZXh0KWZ8fChnPWgpO2YmJigwPT1kLmImJjE9PWU/UmYoZCxjKTooZz8oZT1n
LGUubmV4dD09ZC5vJiYoZC5vPWUpLGUubmV4dD1lLm5leHQubmV4dCk6U2YoZCksVGYoZCxm
LDMsYykpKX1hLmo9bnVsbH1lbHNlIF8uSmYoYSwzLGMpfSxWZj1mdW5jdGlvbihhLGMpe2Eu
Znx8MiE9YS5iJiYzIT1hLmJ8fFVmKGEpO2Eubz9hLm8ubmV4dD1jOmEuZj1jO2Eubz1jfSxP
Zj1mdW5jdGlvbihhLGMsZCxlKXt2YXIgZj1OZihudWxsLG51bGwsbnVsbCk7Zi5iPW5ldyBf
LktmKGZ1bmN0aW9uKGcsaCl7Zi5qPWM/ZnVuY3Rpb24obCl7dHJ5e3ZhciBtPWMuY2FsbChl
LGwpO2cobSl9Y2F0Y2gobil7aChuKX19Omc7Zi5mPWQ/ZnVuY3Rpb24obCl7dHJ5e3ZhciBt
PQ0KZC5jYWxsKGUsbCk7dm9pZCAwPT09bSYmbCBpbnN0YW5jZW9mIF8uUWY/aChsKTpnKG0p
fWNhdGNoKG4pe2gobil9fTpofSk7Zi5iLmo9YTtWZihhLGYpO3JldHVybiBmLmJ9O18uS2Yu
cHJvdG90eXBlLkc9ZnVuY3Rpb24oYSl7dGhpcy5iPTA7Xy5KZih0aGlzLDIsYSl9O18uS2Yu
cHJvdG90eXBlLkY9ZnVuY3Rpb24oYSl7dGhpcy5iPTA7Xy5KZih0aGlzLDMsYSl9O18uSmY9
ZnVuY3Rpb24oYSxjLGQpezA9PWEuYiYmKGE9PT1kJiYoYz0zLGQ9bmV3IFR5cGVFcnJvcigi
cCIpKSxhLmI9MSxfLldmKGQsYS5HLGEuRixhKXx8KGEuQj1kLGEuYj1jLGEuaj1udWxsLFVm
KGEpLDMhPWN8fGQgaW5zdGFuY2VvZiBfLlFmfHxYZihhLGQpKSl9Ow0KXy5XZj1mdW5jdGlv
bihhLGMsZCxlKXtpZihhIGluc3RhbmNlb2YgXy5LZilyZXR1cm4gVmYoYSxOZihjfHxfLndh
LGR8fG51bGwsZSkpLCEwO2lmKF8uSWYoYSkpcmV0dXJuIGEudGhlbihjLGQsZSksITA7aWYo
Xy5DYShhKSl0cnl7dmFyIGY9YS50aGVuO2lmKF8uQmEoZikpcmV0dXJuIFlmKGEsZixjLGQs
ZSksITB9Y2F0Y2goZyl7cmV0dXJuIGQuY2FsbChlLGcpLCEwfXJldHVybiExfTtZZj1mdW5j
dGlvbihhLGMsZCxlLGYpe3ZhciBnPSExLGg9ZnVuY3Rpb24obSl7Z3x8KGc9ITAsZC5jYWxs
KGYsbSkpfSxsPWZ1bmN0aW9uKG0pe2d8fChnPSEwLGUuY2FsbChmLG0pKX07dHJ5e2MuY2Fs
bChhLGgsbCl9Y2F0Y2gobSl7bChtKX19O1VmPWZ1bmN0aW9uKGEpe2EuQXx8KGEuQT0hMCxf
LkZmKGEuRCxhKSl9O1NmPWZ1bmN0aW9uKGEpe3ZhciBjPW51bGw7YS5mJiYoYz1hLmYsYS5m
PWMubmV4dCxjLm5leHQ9bnVsbCk7YS5mfHwoYS5vPW51bGwpO3JldHVybiBjfTsNCl8uS2Yu
cHJvdG90eXBlLkQ9ZnVuY3Rpb24oKXtmb3IodmFyIGE7YT1TZih0aGlzKTspVGYodGhpcyxh
LHRoaXMuYix0aGlzLkIpO3RoaXMuQT0hMX07VGY9ZnVuY3Rpb24oYSxjLGQsZSl7aWYoMz09
ZCYmYy5mJiYhYy5vKWZvcig7YSYmYS53O2E9YS5qKWEudz0hMTtpZihjLmIpYy5iLmo9bnVs
bCxaZihjLGQsZSk7ZWxzZSB0cnl7Yy5vP2Muai5jYWxsKGMuY29udGV4dCk6WmYoYyxkLGUp
fWNhdGNoKGYpeyRmLmNhbGwobnVsbCxmKX11ZihNZixjKX07WmY9ZnVuY3Rpb24oYSxjLGQp
ezI9PWM/YS5qLmNhbGwoYS5jb250ZXh0LGQpOmEuZiYmYS5mLmNhbGwoYS5jb250ZXh0LGQp
fTtYZj1mdW5jdGlvbihhLGMpe2Eudz0hMDtfLkZmKGZ1bmN0aW9uKCl7YS53JiYkZi5jYWxs
KG51bGwsYyl9KX07JGY9dmY7Xy5RZj1mdW5jdGlvbihhKXtfLkphLmNhbGwodGhpcyxhKX07
Xy53KF8uUWYsXy5KYSk7Xy5RZi5wcm90b3R5cGUubmFtZT0iY2FuY2VsIjsNCg0KfWNhdGNo
KGUpe18uX0R1bXBFeGNlcHRpb24oZSl9DQp0cnl7DQp2YXIgZmcsaGc7Xy5hZz1mdW5jdGlv
bihhKXthJiYiZnVuY3Rpb24iPT10eXBlb2YgYS5zYSYmYS5zYSgpfTtfLmJnPWZ1bmN0aW9u
KGEsYyl7Yz1fLlFkKF8uYWcsYyk7YS5SYT9jKCk6KGEuTWJ8fChhLk1iPVtdKSxhLk1iLnB1
c2goYykpfTtfLmNnPWZ1bmN0aW9uKGEpe3ZhciBjPVtdLGQ9MCxlO2ZvcihlIGluIGEpY1tk
KytdPWFbZV07cmV0dXJuIGN9O18uZGc9ZnVuY3Rpb24oYSl7cmV0dXJuIGE/YS5wYXJlbnRX
aW5kb3d8fGEuZGVmYXVsdFZpZXc6d2luZG93fTsNCl8uZWc9ZnVuY3Rpb24oYSxjKXtpZigi
dGV4dENvbnRlbnQiaW4gYSlhLnRleHRDb250ZW50PWM7ZWxzZSBpZigzPT1hLm5vZGVUeXBl
KWEuZGF0YT1TdHJpbmcoYyk7ZWxzZSBpZihhLmZpcnN0Q2hpbGQmJjM9PWEuZmlyc3RDaGls
ZC5ub2RlVHlwZSl7Zm9yKDthLmxhc3RDaGlsZCE9YS5maXJzdENoaWxkOylhLnJlbW92ZUNo
aWxkKGEubGFzdENoaWxkKTthLmZpcnN0Q2hpbGQuZGF0YT1TdHJpbmcoYyl9ZWxzZSBfLkNl
KGEpLGEuYXBwZW5kQ2hpbGQoXy5wZShhKS5jcmVhdGVUZXh0Tm9kZShTdHJpbmcoYykpKX07
Zmc9e1NDUklQVDoxLFNUWUxFOjEsSEVBRDoxLElGUkFNRToxLE9CSkVDVDoxfTtoZz17SU1H
OiIgIixCUjoiXG4ifTsNCl8uaWc9ZnVuY3Rpb24oYSxjLGQpe2lmKCEoYS5ub2RlTmFtZSBp
biBmZykpaWYoMz09YS5ub2RlVHlwZSlkP2MucHVzaChTdHJpbmcoYS5ub2RlVmFsdWUpLnJl
cGxhY2UoLyhcclxufFxyfFxuKS9nLCIiKSk6Yy5wdXNoKGEubm9kZVZhbHVlKTtlbHNlIGlm
KGEubm9kZU5hbWUgaW4gaGcpYy5wdXNoKGhnW2Eubm9kZU5hbWVdKTtlbHNlIGZvcihhPWEu
Zmlyc3RDaGlsZDthOylfLmlnKGEsYyxkKSxhPWEubmV4dFNpYmxpbmd9O18uUj1mdW5jdGlv
bigpe18uSi5jYWxsKHRoaXMpO3RoaXMuTmI9bmV3IF8uWGUodGhpcyk7dGhpcy5SZz10aGlz
O3RoaXMuamY9bnVsbH07Xy53KF8uUixfLkopO18uUi5wcm90b3R5cGVbXy5TZV09ITA7Xy5r
PV8uUi5wcm90b3R5cGU7Xy5rLnpkPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuamZ9O18uay5R
Yz1mdW5jdGlvbihhKXt0aGlzLmpmPWF9O18uay5hZGRFdmVudExpc3RlbmVyPWZ1bmN0aW9u
KGEsYyxkLGUpe18uUCh0aGlzLGEsYyxkLGUpfTsNCl8uay5yZW1vdmVFdmVudExpc3RlbmVy
PWZ1bmN0aW9uKGEsYyxkLGUpe18ua2YodGhpcyxhLGMsZCxlKX07Xy5rLmRpc3BhdGNoRXZl
bnQ9ZnVuY3Rpb24oYSl7dmFyIGMsZD10aGlzLnpkKCk7aWYoZClmb3IoYz1bXTtkO2Q9ZC56
ZCgpKWMucHVzaChkKTtkPXRoaXMuUmc7dmFyIGU9YS50eXBlfHxhO2lmKCJzdHJpbmciPT09
dHlwZW9mIGEpYT1uZXcgXy5QZShhLGQpO2Vsc2UgaWYoYSBpbnN0YW5jZW9mIF8uUGUpYS50
YXJnZXQ9YS50YXJnZXR8fGQ7ZWxzZXt2YXIgZj1hO2E9bmV3IF8uUGUoZSxkKTtfLlNhKGEs
Zil9Zj0hMDtpZihjKWZvcih2YXIgZz1jLmxlbmd0aC0xOyFhLmYmJjA8PWc7Zy0tKXt2YXIg
aD1hLmI9Y1tnXTtmPWguVmMoZSwhMCxhKSYmZn1hLmZ8fChoPWEuYj1kLGY9aC5WYyhlLCEw
LGEpJiZmLGEuZnx8KGY9aC5WYyhlLCExLGEpJiZmKSk7aWYoYylmb3IoZz0wOyFhLmYmJmc8
Yy5sZW5ndGg7ZysrKWg9YS5iPWNbZ10sZj1oLlZjKGUsITEsYSkmJmY7cmV0dXJuIGZ9Ow0K
Xy5rLlA9ZnVuY3Rpb24oKXtfLlIuSy5QLmNhbGwodGhpcyk7dGhpcy52ZSgpO3RoaXMuamY9
bnVsbH07Xy5rLkg9ZnVuY3Rpb24oYSxjLGQsZSl7cmV0dXJuIHRoaXMuTmIuYWRkKFN0cmlu
ZyhhKSxjLCExLGQsZSl9O18uay5EYj1mdW5jdGlvbihhLGMsZCxlKXtyZXR1cm4gdGhpcy5O
Yi5hZGQoU3RyaW5nKGEpLGMsITAsZCxlKX07Xy5rLkFhPWZ1bmN0aW9uKGEsYyxkLGUpe3Jl
dHVybiB0aGlzLk5iLnJlbW92ZShTdHJpbmcoYSksYyxkLGUpfTtfLmsuQ2U9ZnVuY3Rpb24o
YSl7cmV0dXJuIF8uWmUodGhpcy5OYixhKX07Xy5rLnZlPWZ1bmN0aW9uKGEpe2lmKHRoaXMu
TmIpe3ZhciBjPXRoaXMuTmI7YT1hJiZhLnRvU3RyaW5nKCk7dmFyIGQ9MCxlO2ZvcihlIGlu
IGMuYilpZighYXx8ZT09YSl7Zm9yKHZhciBmPWMuYltlXSxnPTA7ZzxmLmxlbmd0aDtnKysp
KytkLF8uV2UoZltnXSk7ZGVsZXRlIGMuYltlXTtjLmYtLX1jPWR9ZWxzZSBjPTA7cmV0dXJu
IGN9Ow0KXy5rLlZjPWZ1bmN0aW9uKGEsYyxkKXthPXRoaXMuTmIuYltTdHJpbmcoYSldO2lm
KCFhKXJldHVybiEwO2E9YS5jb25jYXQoKTtmb3IodmFyIGU9ITAsZj0wO2Y8YS5sZW5ndGg7
KytmKXt2YXIgZz1hW2ZdO2lmKGcmJiFnLm1kJiZnLmNhcHR1cmU9PWMpe3ZhciBoPWcubGlz
dGVuZXIsbD1nLmVlfHxnLnNyYztnLk9kJiZ0aGlzLkNlKGcpO2U9ITEhPT1oLmNhbGwobCxk
KSYmZX19cmV0dXJuIGUmJjAhPWQuSGd9O18uay5YYz1mdW5jdGlvbihhLGMpe3JldHVybiB0
aGlzLk5iLlhjKFN0cmluZyhhKSxjKX07Xy5rLkhjPWZ1bmN0aW9uKGEsYyxkLGUpe3JldHVy
biB0aGlzLk5iLkhjKFN0cmluZyhhKSxjLGQsZSl9O18uay5oYXNMaXN0ZW5lcj1mdW5jdGlv
bihhLGMpe3JldHVybiB0aGlzLk5iLmhhc0xpc3RlbmVyKHZvaWQgMCE9PWE/U3RyaW5nKGEp
OnZvaWQgMCxjKX07DQpfLmpnPWZ1bmN0aW9uKGEsYyl7Xy5SLmNhbGwodGhpcyk7dGhpcy5m
PWF8fDE7dGhpcy5iPWN8fF8ucTt0aGlzLmo9KDAsXy50KSh0aGlzLlhqLHRoaXMpO3RoaXMu
bz0oMCxfLkdhKSgpfTtfLncoXy5qZyxfLlIpO18uaz1fLmpnLnByb3RvdHlwZTtfLmsubWM9
ITE7Xy5rLkhiPW51bGw7Xy5rLlhqPWZ1bmN0aW9uKCl7aWYodGhpcy5tYyl7dmFyIGE9KDAs
Xy5HYSkoKS10aGlzLm87MDxhJiZhPC44KnRoaXMuZj90aGlzLkhiPXRoaXMuYi5zZXRUaW1l
b3V0KHRoaXMuaix0aGlzLmYtYSk6KHRoaXMuSGImJih0aGlzLmIuY2xlYXJUaW1lb3V0KHRo
aXMuSGIpLHRoaXMuSGI9bnVsbCksdGhpcy5kaXNwYXRjaEV2ZW50KCJ0aWNrIiksdGhpcy5t
YyYmKHRoaXMuc3RvcCgpLHRoaXMuc3RhcnQoKSkpfX07Xy5rLnN0YXJ0PWZ1bmN0aW9uKCl7
dGhpcy5tYz0hMDt0aGlzLkhifHwodGhpcy5IYj10aGlzLmIuc2V0VGltZW91dCh0aGlzLmos
dGhpcy5mKSx0aGlzLm89KDAsXy5HYSkoKSl9Ow0KXy5rLnN0b3A9ZnVuY3Rpb24oKXt0aGlz
Lm1jPSExO3RoaXMuSGImJih0aGlzLmIuY2xlYXJUaW1lb3V0KHRoaXMuSGIpLHRoaXMuSGI9
bnVsbCl9O18uay5QPWZ1bmN0aW9uKCl7Xy5qZy5LLlAuY2FsbCh0aGlzKTt0aGlzLnN0b3Ao
KTtkZWxldGUgdGhpcy5ifTtfLmtnPWZ1bmN0aW9uKGEsYyxkKXtpZihfLkJhKGEpKWQmJihh
PSgwLF8udCkoYSxkKSk7ZWxzZSBpZihhJiYiZnVuY3Rpb24iPT10eXBlb2YgYS5oYW5kbGVF
dmVudClhPSgwLF8udCkoYS5oYW5kbGVFdmVudCxhKTtlbHNlIHRocm93IEVycm9yKCJxIik7
cmV0dXJuIDIxNDc0ODM2NDc8TnVtYmVyKGMpPy0xOl8ucS5zZXRUaW1lb3V0KGEsY3x8MCl9
O18ubGc9ZnVuY3Rpb24oYSl7Xy5xLmNsZWFyVGltZW91dChhKX07DQoNCn1jYXRjaChlKXtf
Ll9EdW1wRXhjZXB0aW9uKGUpfQ0KdHJ5ew0KdmFyIG1nO21nPVsxLDQsMl07Xy5uZz1mdW5j
dGlvbihhKXtyZXR1cm4oXy5JZD8wPT1hLmtiLmJ1dHRvbjoiY2xpY2siPT1hLnR5cGU/ITA6
ISEoYS5rYi5idXR0b24mbWdbMF0pKSYmIShfLlJiJiZfLlNiJiZhLmN0cmxLZXkpfTtfLm9n
PWZ1bmN0aW9uKGEpe3JldHVybi9eW1xzXHhhMF0qJC8udGVzdChhKX07Xy5wZz1mdW5jdGlv
bihhKXtfLkouY2FsbCh0aGlzKTt0aGlzLlU9YTt0aGlzLk49e319O18udyhfLnBnLF8uSik7
dmFyIHFnPVtdO18ucGcucHJvdG90eXBlLkg9ZnVuY3Rpb24oYSxjLGQsZSl7cmV0dXJuIHJn
KHRoaXMsYSxjLGQsZSl9O18ucGcucHJvdG90eXBlLm89ZnVuY3Rpb24oYSxjLGQsZSxmKXty
ZXR1cm4gcmcodGhpcyxhLGMsZCxlLGYpfTsNCnZhciByZz1mdW5jdGlvbihhLGMsZCxlLGYs
Zyl7Xy5BYShkKXx8KGQmJihxZ1swXT1kLnRvU3RyaW5nKCkpLGQ9cWcpO2Zvcih2YXIgaD0w
O2g8ZC5sZW5ndGg7aCsrKXt2YXIgbD1fLlAoYyxkW2hdLGV8fGEuaGFuZGxlRXZlbnQsZnx8
ITEsZ3x8YS5VfHxhKTtpZighbClicmVhazthLk5bbC5rZXldPWx9cmV0dXJuIGF9O18ucGcu
cHJvdG90eXBlLkRiPWZ1bmN0aW9uKGEsYyxkLGUpe3JldHVybiBzZyh0aGlzLGEsYyxkLGUp
fTt2YXIgc2c9ZnVuY3Rpb24oYSxjLGQsZSxmLGcpe2lmKF8uQWEoZCkpZm9yKHZhciBoPTA7
aDxkLmxlbmd0aDtoKyspc2coYSxjLGRbaF0sZSxmLGcpO2Vsc2V7Yz1fLmNmKGMsZCxlfHxh
LmhhbmRsZUV2ZW50LGYsZ3x8YS5VfHxhKTtpZighYylyZXR1cm4gYTthLk5bYy5rZXldPWN9
cmV0dXJuIGF9Ow0KXy5wZy5wcm90b3R5cGUuQWE9ZnVuY3Rpb24oYSxjLGQsZSxmKXtpZihf
LkFhKGMpKWZvcih2YXIgZz0wO2c8Yy5sZW5ndGg7ZysrKXRoaXMuQWEoYSxjW2ddLGQsZSxm
KTtlbHNlIGQ9ZHx8dGhpcy5oYW5kbGVFdmVudCxlPV8uQ2EoZSk/ISFlLmNhcHR1cmU6ISFl
LGY9Znx8dGhpcy5VfHx0aGlzLGQ9Xy5kZihkKSxlPSEhZSxjPV8uVGUoYSk/YS5IYyhjLGQs
ZSxmKTphPyhhPV8uZmYoYSkpP2EuSGMoYyxkLGUsZik6bnVsbDpudWxsLGMmJihfLmxmKGMp
LGRlbGV0ZSB0aGlzLk5bYy5rZXldKTtyZXR1cm4gdGhpc307Xy50Zz1mdW5jdGlvbihhKXtf
LlFhKGEuTixmdW5jdGlvbihjLGQpe3RoaXMuTi5oYXNPd25Qcm9wZXJ0eShkKSYmXy5sZihj
KX0sYSk7YS5OPXt9fTtfLnBnLnByb3RvdHlwZS5QPWZ1bmN0aW9uKCl7Xy5wZy5LLlAuY2Fs
bCh0aGlzKTtfLnRnKHRoaXMpfTtfLnBnLnByb3RvdHlwZS5oYW5kbGVFdmVudD1mdW5jdGlv
bigpe3Rocm93IEVycm9yKCJzIik7fTsNCg0KfWNhdGNoKGUpe18uX0R1bXBFeGNlcHRpb24o
ZSl9DQp0cnl7DQp2YXIgQmcsR2c7Xy51Zz1mdW5jdGlvbihhLGMpe3RoaXMueD12b2lkIDAh
PT1hP2E6MDt0aGlzLmI9dm9pZCAwIT09Yz9jOjB9O18udWcucHJvdG90eXBlLmNlaWw9ZnVu
Y3Rpb24oKXt0aGlzLng9TWF0aC5jZWlsKHRoaXMueCk7dGhpcy5iPU1hdGguY2VpbCh0aGlz
LmIpO3JldHVybiB0aGlzfTtfLnVnLnByb3RvdHlwZS5mbG9vcj1mdW5jdGlvbigpe3RoaXMu
eD1NYXRoLmZsb29yKHRoaXMueCk7dGhpcy5iPU1hdGguZmxvb3IodGhpcy5iKTtyZXR1cm4g
dGhpc307Xy51Zy5wcm90b3R5cGUucm91bmQ9ZnVuY3Rpb24oKXt0aGlzLng9TWF0aC5yb3Vu
ZCh0aGlzLngpO3RoaXMuYj1NYXRoLnJvdW5kKHRoaXMuYik7cmV0dXJuIHRoaXN9O18udmc9
ZnVuY3Rpb24oYSxjKXt0aGlzLndpZHRoPWE7dGhpcy5oZWlnaHQ9Y307Xy5rPV8udmcucHJv
dG90eXBlO18uay5hc3BlY3RSYXRpbz1mdW5jdGlvbigpe3JldHVybiB0aGlzLndpZHRoL3Ro
aXMuaGVpZ2h0fTsNCl8uay5OYz1mdW5jdGlvbigpe3JldHVybiEodGhpcy53aWR0aCp0aGlz
LmhlaWdodCl9O18uay5jZWlsPWZ1bmN0aW9uKCl7dGhpcy53aWR0aD1NYXRoLmNlaWwodGhp
cy53aWR0aCk7dGhpcy5oZWlnaHQ9TWF0aC5jZWlsKHRoaXMuaGVpZ2h0KTtyZXR1cm4gdGhp
c307Xy5rLmZsb29yPWZ1bmN0aW9uKCl7dGhpcy53aWR0aD1NYXRoLmZsb29yKHRoaXMud2lk
dGgpO3RoaXMuaGVpZ2h0PU1hdGguZmxvb3IodGhpcy5oZWlnaHQpO3JldHVybiB0aGlzfTtf
Lmsucm91bmQ9ZnVuY3Rpb24oKXt0aGlzLndpZHRoPU1hdGgucm91bmQodGhpcy53aWR0aCk7
dGhpcy5oZWlnaHQ9TWF0aC5yb3VuZCh0aGlzLmhlaWdodCk7cmV0dXJuIHRoaXN9O18ud2c9
ZnVuY3Rpb24oYSl7cmV0dXJuIG5ldyBfLnZnKGEud2lkdGgsYS5oZWlnaHQpfTtfLnhnPWZ1
bmN0aW9uKGEpe3JldHVybiJDU1MxQ29tcGF0Ij09YS5jb21wYXRNb2RlfTsNCl8ueWc9ZnVu
Y3Rpb24oYSl7YT0oYXx8d2luZG93KS5kb2N1bWVudDthPV8ueGcoYSk/YS5kb2N1bWVudEVs
ZW1lbnQ6YS5ib2R5O3JldHVybiBuZXcgXy52ZyhhLmNsaWVudFdpZHRoLGEuY2xpZW50SGVp
Z2h0KX07Xy56Zz1mdW5jdGlvbihhKXtyZXR1cm4gYS5zY3JvbGxpbmdFbGVtZW50P2Euc2Ny
b2xsaW5nRWxlbWVudDohXy5SYiYmXy54ZyhhKT9hLmRvY3VtZW50RWxlbWVudDphLmJvZHl8
fGEuZG9jdW1lbnRFbGVtZW50fTtfLkFnPWZ1bmN0aW9uKGEpe3ZhciBjPV8uemcoYSk7YT1h
LnBhcmVudFdpbmRvd3x8YS5kZWZhdWx0VmlldztyZXR1cm4gXy55JiZfLmZjKCIxMCIpJiZh
LnBhZ2VZT2Zmc2V0IT1jLnNjcm9sbFRvcD9uZXcgXy51ZyhjLnNjcm9sbExlZnQsYy5zY3Jv
bGxUb3ApOm5ldyBfLnVnKGEucGFnZVhPZmZzZXR8fGMuc2Nyb2xsTGVmdCxhLnBhZ2VZT2Zm
c2V0fHxjLnNjcm9sbFRvcCl9O0JnPTA7DQpfLkNnPWZ1bmN0aW9uKGEpe3JldHVybiBhW18u
RGFdfHwoYVtfLkRhXT0rK0JnKX07Xy5EZz1mdW5jdGlvbihhLGMsZCl7cmV0dXJuIDI+PWFy
Z3VtZW50cy5sZW5ndGg/QXJyYXkucHJvdG90eXBlLnNsaWNlLmNhbGwoYSxjKTpBcnJheS5w
cm90b3R5cGUuc2xpY2UuY2FsbChhLGMsZCl9O18uRWc9ZnVuY3Rpb24oYSxjLGQsZSl7QXJy
YXkucHJvdG90eXBlLnNwbGljZS5hcHBseShhLF8uRGcoYXJndW1lbnRzLDEpKX07Xy5GZz1m
dW5jdGlvbihhKXtyZXR1cm4gU3RyaW5nKGEpLnJlcGxhY2UoL1wtKFthLXpdKS9nLGZ1bmN0
aW9uKGMsZCl7cmV0dXJuIGQudG9VcHBlckNhc2UoKX0pfTtHZz1mdW5jdGlvbihhKXtyZXR1
cm4gYS5yZXBsYWNlKC8oXnxbXHNdKykoW2Etel0pL2csZnVuY3Rpb24oYyxkLGUpe3JldHVy
biBkK2UudG9VcHBlckNhc2UoKX0pfTsNCl8uSGc9ZnVuY3Rpb24oYSxjKXtyZXR1cm4gYT09
Yz8hMDphJiZjP2Eud2lkdGg9PWMud2lkdGgmJmEuaGVpZ2h0PT1jLmhlaWdodDohMX07DQp2
YXIgS2c7Xy5KZz1mdW5jdGlvbihhLGMsZCl7aWYoInN0cmluZyI9PT10eXBlb2YgYykoYz1f
LklnKGEsYykpJiYoYS5zdHlsZVtjXT1kKTtlbHNlIGZvcih2YXIgZSBpbiBjKXtkPWE7dmFy
IGY9Y1tlXSxnPV8uSWcoZCxlKTtnJiYoZC5zdHlsZVtnXT1mKX19O0tnPXt9O18uSWc9ZnVu
Y3Rpb24oYSxjKXt2YXIgZD1LZ1tjXTtpZighZCl7dmFyIGU9Xy5GZyhjKTtkPWU7dm9pZCAw
PT09YS5zdHlsZVtlXSYmKGU9KF8uUmI/IldlYmtpdCI6Xy5RYj8iTW96IjpfLnk/Im1zIjpf
Lk5iPyJPIjpudWxsKStHZyhlKSx2b2lkIDAhPT1hLnN0eWxlW2VdJiYoZD1lKSk7S2dbY109
ZH1yZXR1cm4gZH07Xy5MZz1mdW5jdGlvbihhLGMpe3ZhciBkPV8ucGUoYSk7cmV0dXJuIGQu
ZGVmYXVsdFZpZXcmJmQuZGVmYXVsdFZpZXcuZ2V0Q29tcHV0ZWRTdHlsZSYmKGE9ZC5kZWZh
dWx0Vmlldy5nZXRDb21wdXRlZFN0eWxlKGEsbnVsbCkpP2FbY118fGEuZ2V0UHJvcGVydHlW
YWx1ZShjKXx8IiI6IiJ9Ow0KXy5NZz1mdW5jdGlvbihhLGMpe3JldHVybiBfLkxnKGEsYyl8
fChhLmN1cnJlbnRTdHlsZT9hLmN1cnJlbnRTdHlsZVtjXTpudWxsKXx8YS5zdHlsZSYmYS5z
dHlsZVtjXX07Xy5OZz1mdW5jdGlvbihhKXthPWE/Xy5wZShhKTpkb2N1bWVudDtyZXR1cm4h
Xy55fHxfLmhjKDkpfHxfLnhnKF8ucWUoYSkuYik/YS5kb2N1bWVudEVsZW1lbnQ6YS5ib2R5
fTtfLk9nPWZ1bmN0aW9uKGEpe3RyeXt2YXIgYz1hLmdldEJvdW5kaW5nQ2xpZW50UmVjdCgp
fWNhdGNoKGQpe3JldHVybntsZWZ0OjAsdG9wOjAscmlnaHQ6MCxib3R0b206MH19Xy55JiZh
Lm93bmVyRG9jdW1lbnQuYm9keSYmKGE9YS5vd25lckRvY3VtZW50LGMubGVmdC09YS5kb2N1
bWVudEVsZW1lbnQuY2xpZW50TGVmdCthLmJvZHkuY2xpZW50TGVmdCxjLnRvcC09YS5kb2N1
bWVudEVsZW1lbnQuY2xpZW50VG9wK2EuYm9keS5jbGllbnRUb3ApO3JldHVybiBjfTsNCl8u
UGc9ZnVuY3Rpb24oYSl7dmFyIGM9Xy5wZShhKSxkPW5ldyBfLnVnKDAsMCksZT1fLk5nKGMp
O2lmKGE9PWUpcmV0dXJuIGQ7YT1fLk9nKGEpO2M9Xy5BZyhfLnFlKGMpLmIpO2QueD1hLmxl
ZnQrYy54O2QuYj1hLnRvcCtjLmI7cmV0dXJuIGR9O18uUWc9ZnVuY3Rpb24oYSxjKXsibnVt
YmVyIj09dHlwZW9mIGEmJihhPShjP01hdGgucm91bmQoYSk6YSkrInB4Iik7cmV0dXJuIGF9
O18uU2c9ZnVuY3Rpb24oYSl7dmFyIGM9Xy5SZztpZigibm9uZSIhPV8uTWcoYSwiZGlzcGxh
eSIpKXJldHVybiBjKGEpO3ZhciBkPWEuc3R5bGUsZT1kLmRpc3BsYXksZj1kLnZpc2liaWxp
dHksZz1kLnBvc2l0aW9uO2QudmlzaWJpbGl0eT0iaGlkZGVuIjtkLnBvc2l0aW9uPSJhYnNv
bHV0ZSI7ZC5kaXNwbGF5PSJpbmxpbmUiO2E9YyhhKTtkLmRpc3BsYXk9ZTtkLnBvc2l0aW9u
PWc7ZC52aXNpYmlsaXR5PWY7cmV0dXJuIGF9Ow0KXy5SZz1mdW5jdGlvbihhKXt2YXIgYz1h
Lm9mZnNldFdpZHRoLGQ9YS5vZmZzZXRIZWlnaHQsZT1fLlJiJiYhYyYmIWQ7cmV0dXJuKHZv
aWQgMD09PWN8fGUpJiZhLmdldEJvdW5kaW5nQ2xpZW50UmVjdD8oYT1fLk9nKGEpLG5ldyBf
LnZnKGEucmlnaHQtYS5sZWZ0LGEuYm90dG9tLWEudG9wKSk6bmV3IF8udmcoYyxkKX07Xy5T
PWZ1bmN0aW9uKGEsYyl7YS5zdHlsZS5kaXNwbGF5PWM/IiI6Im5vbmUifTtfLlRnPV8uUWI/
Ik1velVzZXJTZWxlY3QiOl8uUmJ8fF8uT2I/IldlYmtpdFVzZXJTZWxlY3QiOm51bGw7DQoN
Cn1jYXRjaChlKXtfLl9EdW1wRXhjZXB0aW9uKGUpfQ0KdHJ5ew0KdmFyIFVnLFhnO1VnPWZ1
bmN0aW9uKGEsYyl7cmV0dXJuIG51bGwhPT1hJiZjIGluIGE/YVtjXTp2b2lkIDB9O18uVmc9
ZnVuY3Rpb24oYSl7cmV0dXJuIG51bGw9PWE/IiI6U3RyaW5nKGEpfTtfLldnPWZ1bmN0aW9u
KGEpe2lmKDQ4PD1hJiY1Nz49YXx8OTY8PWEmJjEwNj49YXx8NjU8PWEmJjkwPj1hfHwoXy5S
Ynx8Xy5PYikmJjA9PWEpcmV0dXJuITA7c3dpdGNoKGEpe2Nhc2UgMzI6Y2FzZSA0MzpjYXNl
IDYzOmNhc2UgNjQ6Y2FzZSAxMDc6Y2FzZSAxMDk6Y2FzZSAxMTA6Y2FzZSAxMTE6Y2FzZSAx
ODY6Y2FzZSA1OTpjYXNlIDE4OTpjYXNlIDE4NzpjYXNlIDYxOmNhc2UgMTg4OmNhc2UgMTkw
OmNhc2UgMTkxOmNhc2UgMTkyOmNhc2UgMjIyOmNhc2UgMjE5OmNhc2UgMjIwOmNhc2UgMjIx
OmNhc2UgMTYzOmNhc2UgNTg6cmV0dXJuITA7Y2FzZSAxNzM6cmV0dXJuIF8uUWI7ZGVmYXVs
dDpyZXR1cm4hMX19Ow0KWGc9ZnVuY3Rpb24oYSl7c3dpdGNoKGEpe2Nhc2UgNjE6cmV0dXJu
IDE4NztjYXNlIDU5OnJldHVybiAxODY7Y2FzZSAxNzM6cmV0dXJuIDE4OTtjYXNlIDIyNDpy
ZXR1cm4gOTE7Y2FzZSAwOnJldHVybiAyMjQ7ZGVmYXVsdDpyZXR1cm4gYX19O18uWWc9ZnVu
Y3Rpb24oYSl7aWYoXy5RYilhPVhnKGEpO2Vsc2UgaWYoXy5TYiYmXy5SYilzd2l0Y2goYSl7
Y2FzZSA5MzphPTkxfXJldHVybiBhfTsNCl8uWmc9ZnVuY3Rpb24oYSxjLGQsZSxmLGcpe2lm
KF8uUmImJiFfLmZjKCI1MjUiKSlyZXR1cm4hMDtpZihfLlNiJiZmKXJldHVybiBfLldnKGEp
O2lmKGYmJiFlKXJldHVybiExO2lmKCFfLlFiKXsibnVtYmVyIj09PXR5cGVvZiBjJiYoYz1f
LllnKGMpKTt2YXIgaD0xNz09Y3x8MTg9PWN8fF8uU2ImJjkxPT1jO2lmKCghZHx8Xy5TYikm
Jmh8fF8uU2ImJjE2PT1jJiYoZXx8ZykpcmV0dXJuITF9aWYoKF8uUmJ8fF8uT2IpJiZlJiZk
KXN3aXRjaChhKXtjYXNlIDIyMDpjYXNlIDIxOTpjYXNlIDIyMTpjYXNlIDE5MjpjYXNlIDE4
NjpjYXNlIDE4OTpjYXNlIDE4NzpjYXNlIDE4ODpjYXNlIDE5MDpjYXNlIDE5MTpjYXNlIDE5
MjpjYXNlIDIyMjpyZXR1cm4hMX1pZihfLnkmJmUmJmM9PWEpcmV0dXJuITE7c3dpdGNoKGEp
e2Nhc2UgMTM6cmV0dXJuIF8uUWI/Z3x8Zj8hMTohKGQmJmUpOiEwO2Nhc2UgMjc6cmV0dXJu
IShfLlJifHxfLk9ifHxfLlFiKX1yZXR1cm4gXy5RYiYmKGV8fGZ8fA0KZyk/ITE6Xy5XZyhh
KX07DQpfLiRnPWZ1bmN0aW9uKCl7fTtfLnhhKF8uJGcpO18uJGcucHJvdG90eXBlLmI9MDtf
LmFoPWZ1bmN0aW9uKGEpe3JldHVybiI6IisoYS5iKyspLnRvU3RyaW5nKDM2KX07DQp2YXIg
YmgsZmg7Xy5jaD1mdW5jdGlvbihhKXtfLlIuY2FsbCh0aGlzKTt0aGlzLmI9YXx8Xy5xZSgp
O3RoaXMubWE9Ymg7dGhpcy5XPW51bGw7dGhpcy5EYT0hMTt0aGlzLmY9bnVsbDt0aGlzLk09
dm9pZCAwO3RoaXMuRz10aGlzLnc9dGhpcy5qPXRoaXMuQT1udWxsO3RoaXMuS2E9ITF9O18u
dyhfLmNoLF8uUik7Xy5jaC5wcm90b3R5cGUuJGE9Xy4kZy51YSgpO2JoPW51bGw7Xy5kaD1m
dW5jdGlvbihhKXtyZXR1cm4gYS5XfHwoYS5XPV8uYWgoYS4kYSkpfTtfLmNoLnByb3RvdHlw
ZS5DPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuZn07Xy5laD1mdW5jdGlvbihhKXthLk18fChh
Lk09bmV3IF8ucGcoYSkpO3JldHVybiBhLk19Ow0KZmg9ZnVuY3Rpb24oYSxjKXtpZihhPT1j
KXRocm93IEVycm9yKCJ1Iik7dmFyIGQ7aWYoZD1jJiZhLmomJmEuVyl7ZD1hLmo7dmFyIGU9
YS5XO2Q9ZC5HJiZlP1VnKGQuRyxlKXx8bnVsbDpudWxsfWlmKGQmJmEuaiE9Yyl0aHJvdyBF
cnJvcigidSIpO2Euaj1jO18uY2guSy5RYy5jYWxsKGEsYyl9O18uY2gucHJvdG90eXBlLlFj
PWZ1bmN0aW9uKGEpe2lmKHRoaXMuaiYmdGhpcy5qIT1hKXRocm93IEVycm9yKCJ2Iik7Xy5j
aC5LLlFjLmNhbGwodGhpcyxhKX07Xy5jaC5wcm90b3R5cGUuSWI9ZnVuY3Rpb24oKXt0aGlz
LmY9dGhpcy5iLmNyZWF0ZUVsZW1lbnQoIkRJViIpfTtfLmNoLnByb3RvdHlwZS5IYT1mdW5j
dGlvbihhKXtnaCh0aGlzLGEpfTt2YXIgZ2g9ZnVuY3Rpb24oYSxjLGQpe2lmKGEuRGEpdGhy
b3cgRXJyb3IoInciKTthLmZ8fGEuSWIoKTtjP2MuaW5zZXJ0QmVmb3JlKGEuZixkfHxudWxs
KTphLmIuYi5ib2R5LmFwcGVuZENoaWxkKGEuZik7YS5qJiYhYS5qLkRhfHxhLkZhKCl9Ow0K
Xy5rPV8uY2gucHJvdG90eXBlO18uay5CZj1mdW5jdGlvbigpe3JldHVybiEwfTtfLmsuV2I9
ZnVuY3Rpb24oYSl7dGhpcy5mPWF9O18uay5GYT1mdW5jdGlvbigpe3RoaXMuRGE9ITA7Xy5o
aCh0aGlzLGZ1bmN0aW9uKGEpeyFhLkRhJiZhLkMoKSYmYS5GYSgpfSl9O18uay5sYj1mdW5j
dGlvbigpe18uaGgodGhpcyxmdW5jdGlvbihhKXthLkRhJiZhLmxiKCl9KTt0aGlzLk0mJl8u
dGcodGhpcy5NKTt0aGlzLkRhPSExfTtfLmsuUD1mdW5jdGlvbigpe3RoaXMuRGEmJnRoaXMu
bGIoKTt0aGlzLk0mJih0aGlzLk0uc2EoKSxkZWxldGUgdGhpcy5NKTtfLmhoKHRoaXMsZnVu
Y3Rpb24oYSl7YS5zYSgpfSk7IXRoaXMuS2EmJnRoaXMuZiYmXy5EZSh0aGlzLmYpO3RoaXMu
aj10aGlzLkE9dGhpcy5mPXRoaXMuRz10aGlzLnc9bnVsbDtfLmNoLksuUC5jYWxsKHRoaXMp
fTsNCl8uay5GYz1mdW5jdGlvbihhLGMsZCl7aWYoYS5EYSYmKGR8fCF0aGlzLkRhKSl0aHJv
dyBFcnJvcigidyIpO2lmKDA+Y3x8Yz5fLmloKHRoaXMpKXRocm93IEVycm9yKCJ5Iik7dGhp
cy5HJiZ0aGlzLnd8fCh0aGlzLkc9e30sdGhpcy53PVtdKTtpZihhLmo9PXRoaXMpe3ZhciBl
PV8uZGgoYSk7dGhpcy5HW2VdPWE7Xy5NZSh0aGlzLncsYSl9ZWxzZXtlPXRoaXMuRzt2YXIg
Zj1fLmRoKGEpO2lmKG51bGwhPT1lJiZmIGluIGUpdGhyb3cgRXJyb3IoImdgIitmKTtlW2Zd
PWF9ZmgoYSx0aGlzKTtfLkVnKHRoaXMudyxjLDAsYSk7YS5EYSYmdGhpcy5EYSYmYS5qPT10
aGlzPyhkPXRoaXMuJGMoKSxjPWQuY2hpbGROb2Rlc1tjXXx8bnVsbCxjIT1hLkMoKSYmZC5p
bnNlcnRCZWZvcmUoYS5DKCksYykpOmQ/KHRoaXMuZnx8dGhpcy5JYigpLGM9Xy5qaCh0aGlz
LGMrMSksZ2goYSx0aGlzLiRjKCksYz9jLmY6bnVsbCkpOnRoaXMuRGEmJiFhLkRhJiZhLmYm
JmEuZi5wYXJlbnROb2RlJiYxPT0NCmEuZi5wYXJlbnROb2RlLm5vZGVUeXBlJiZhLkZhKCl9
O18uay4kYz1mdW5jdGlvbigpe3JldHVybiB0aGlzLmZ9O18uaWg9ZnVuY3Rpb24oYSl7cmV0
dXJuIGEudz9hLncubGVuZ3RoOjB9O18uamg9ZnVuY3Rpb24oYSxjKXtyZXR1cm4gYS53P2Eu
d1tjXXx8bnVsbDpudWxsfTtfLmhoPWZ1bmN0aW9uKGEsYyxkKXthLncmJigwLF8uTGEpKGEu
dyxjLGQpfTtfLmNoLnByb3RvdHlwZS5yZW1vdmVDaGlsZD1mdW5jdGlvbihhLGMpe2lmKGEp
e3ZhciBkPSJzdHJpbmciPT09dHlwZW9mIGE/YTpfLmRoKGEpO2E9dGhpcy5HJiZkP1VnKHRo
aXMuRyxkKXx8bnVsbDpudWxsO2lmKGQmJmEpe3ZhciBlPXRoaXMuRztkIGluIGUmJmRlbGV0
ZSBlW2RdO18uTWUodGhpcy53LGEpO2MmJihhLmxiKCksYS5mJiZfLkRlKGEuZikpO2ZoKGEs
bnVsbCl9fWlmKCFhKXRocm93IEVycm9yKCJ6Iik7cmV0dXJuIGF9Ow0KDQp9Y2F0Y2goZSl7
Xy5fRHVtcEV4Y2VwdGlvbihlKX0NCnRyeXsNCnZhciBsaCxtaCxuaDtfLmtoPWZ1bmN0aW9u
KGEsYyl7dmFyIGQ9YS5sZW5ndGgtYy5sZW5ndGg7cmV0dXJuIDA8PWQmJmEuaW5kZXhPZihj
LGQpPT1kfTtsaD1mdW5jdGlvbihhKXtyZXR1cm4ic3RyaW5nIj09dHlwZW9mIGEuY2xhc3NO
YW1lP2EuY2xhc3NOYW1lOmEuZ2V0QXR0cmlidXRlJiZhLmdldEF0dHJpYnV0ZSgiY2xhc3Mi
KXx8IiJ9O21oPWZ1bmN0aW9uKGEpe3JldHVybiBhLmNsYXNzTGlzdD9hLmNsYXNzTGlzdDps
aChhKS5tYXRjaCgvXFMrL2cpfHxbXX07bmg9ZnVuY3Rpb24oYSxjKXsic3RyaW5nIj09dHlw
ZW9mIGEuY2xhc3NOYW1lP2EuY2xhc3NOYW1lPWM6YS5zZXRBdHRyaWJ1dGUmJmEuc2V0QXR0
cmlidXRlKCJjbGFzcyIsYyl9O18uVD1mdW5jdGlvbihhLGMpe3JldHVybiBhLmNsYXNzTGlz
dD9hLmNsYXNzTGlzdC5jb250YWlucyhjKTpfLlBhKG1oKGEpLGMpfTsNCl8uVT1mdW5jdGlv
bihhLGMpe2lmKGEuY2xhc3NMaXN0KWEuY2xhc3NMaXN0LmFkZChjKTtlbHNlIGlmKCFfLlQo
YSxjKSl7dmFyIGQ9bGgoYSk7bmgoYSxkKygwPGQubGVuZ3RoPyIgIitjOmMpKX19O18ub2g9
ZnVuY3Rpb24oYSxjKXtpZihhLmNsYXNzTGlzdCkoMCxfLkxhKShjLGZ1bmN0aW9uKGYpe18u
VShhLGYpfSk7ZWxzZXt2YXIgZD17fTsoMCxfLkxhKShtaChhKSxmdW5jdGlvbihmKXtkW2Zd
PSEwfSk7KDAsXy5MYSkoYyxmdW5jdGlvbihmKXtkW2ZdPSEwfSk7Yz0iIjtmb3IodmFyIGUg
aW4gZCljKz0wPGMubGVuZ3RoPyIgIitlOmU7bmgoYSxjKX19O18uVj1mdW5jdGlvbihhLGMp
e2EuY2xhc3NMaXN0P2EuY2xhc3NMaXN0LnJlbW92ZShjKTpfLlQoYSxjKSYmbmgoYSwoMCxf
Lk1hKShtaChhKSxmdW5jdGlvbihkKXtyZXR1cm4gZCE9Y30pLmpvaW4oIiAiKSl9Ow0KXy5w
aD1mdW5jdGlvbihhLGMpe2EuY2xhc3NMaXN0PygwLF8uTGEpKGMsZnVuY3Rpb24oZCl7Xy5W
KGEsZCl9KTpuaChhLCgwLF8uTWEpKG1oKGEpLGZ1bmN0aW9uKGQpe3JldHVybiFfLlBhKGMs
ZCl9KS5qb2luKCIgIikpfTsNCg0KfWNhdGNoKGUpe18uX0R1bXBFeGNlcHRpb24oZSl9DQp0
cnl7DQpfLnFoPWZ1bmN0aW9uKGEsYyl7cmV0dXJuIF8uSChhLDQ3LGMpfTtfLnNoPWZ1bmN0
aW9uKGEsYyxkKXtfLnJoLkgoYyxkLHZvaWQgMCxhLlV8fGEsYSk7cmV0dXJuIGF9O18udGg9
ZnVuY3Rpb24oYSxjKXtjPWMgaW5zdGFuY2VvZiBfLmtiP2M6Xy5vYihjKTthLmhyZWY9Xy5s
YihjKX07Xy51aD1mdW5jdGlvbihhKXtfLkEodGhpcyxhLDAsLTEsbnVsbCxudWxsKX07Xy53
KF8udWgsXy56KTtfLnZoPWZ1bmN0aW9uKGEsYyl7cmV0dXJuIF8uRihhLDIsYyl9O18ud2g9
ZnVuY3Rpb24oYSxjKXt2YXIgZD1jfHxkb2N1bWVudDtyZXR1cm4gZC5xdWVyeVNlbGVjdG9y
QWxsJiZkLnF1ZXJ5U2VsZWN0b3I/ZC5xdWVyeVNlbGVjdG9yQWxsKCIuIithKTpfLnRlKGRv
Y3VtZW50LCIqIixhLGMpfTtfLnhoPWZ1bmN0aW9uKGEsYyl7Yy5wYXJlbnROb2RlJiZjLnBh
cmVudE5vZGUuaW5zZXJ0QmVmb3JlKGEsYy5uZXh0U2libGluZyl9Ow0KXy55aD1mdW5jdGlv
bihhLGMsZCl7Zm9yKHZhciBlPTA7YSYmKG51bGw9PWR8fGU8PWQpOyl7aWYoYyhhKSlyZXR1
cm4gYTthPWEucGFyZW50Tm9kZTtlKyt9cmV0dXJuIG51bGx9O18uemg9ZnVuY3Rpb24oYSxj
KXtyZXR1cm4gYz9fLnloKGEsZnVuY3Rpb24oZCl7cmV0dXJuIWN8fCJzdHJpbmciPT09dHlw
ZW9mIGQuY2xhc3NOYW1lJiZfLlBhKGQuY2xhc3NOYW1lLnNwbGl0KC9ccysvKSxjKX0sdm9p
ZCAwKTpudWxsfTsNCnZhciBBaCxCaDtBaD1mdW5jdGlvbigpe307Xy5yaD1uZXcgQWg7Qmg9
WyJjbGljayIsImtleWRvd24iLCJrZXl1cCJdO0FoLnByb3RvdHlwZS5IPWZ1bmN0aW9uKGEs
YyxkLGUsZil7dmFyIGc9ZnVuY3Rpb24oaCl7dmFyIGw9Xy5kZihjKSxtPV8uRmUoaC50YXJn
ZXQpP2gudGFyZ2V0LmdldEF0dHJpYnV0ZSgicm9sZSIpfHxudWxsOm51bGw7ImNsaWNrIj09
aC50eXBlJiZfLm5nKGgpP2wuY2FsbChlLGgpOjEzIT1oLmtleUNvZGUmJjMhPWgua2V5Q29k
ZXx8ImtleXVwIj09aC50eXBlPzMyIT1oLmtleUNvZGV8fCJrZXl1cCIhPWgudHlwZXx8ImJ1
dHRvbiIhPW0mJiJ0YWIiIT1tfHwobC5jYWxsKGUsaCksaC5wcmV2ZW50RGVmYXVsdCgpKToo
aC50eXBlPSJrZXlwcmVzcyIsbC5jYWxsKGUsaCkpfTtnLndiPWM7Zy5Maj1lO2Y/Zi5IKGEs
QmgsZyxkKTpfLlAoYSxCaCxnLGQpfTsNCkFoLnByb3RvdHlwZS5BYT1mdW5jdGlvbihhLGMs
ZCxlLGYpe2Zvcih2YXIgZyxoPTA7Zz1CaFtoXTtoKyspe3ZhciBsPWE7dmFyIG09Zzt2YXIg
bj0hIWQ7bT1fLlRlKGwpP2wuWGMobSxuKTpsPyhsPV8uZmYobCkpP2wuWGMobSxuKTpbXTpb
XTtmb3IobD0wO249bVtsXTtsKyspe3ZhciByPW4ubGlzdGVuZXI7aWYoci53Yj09YyYmci5M
aj09ZSl7Zj9mLkFhKGEsZyxuLmxpc3RlbmVyLGQsZSk6Xy5rZihhLGcsbi5saXN0ZW5lcixk
LGUpO2JyZWFrfX19fTsNCg0KfWNhdGNoKGUpe18uX0R1bXBFeGNlcHRpb24oZSl9DQp0cnl7
DQpfLkNoPSFfLnkmJiFfLnpiKCk7DQoNCn1jYXRjaChlKXtfLl9EdW1wRXhjZXB0aW9uKGUp
fQ0KdHJ5ew0KdmFyIERoO0RoPWZ1bmN0aW9uKGEsYyxkKXtpZihhLmYpcmV0dXJuIG51bGw7
aWYoZCBpbnN0YW5jZW9mIEFycmF5KXt2YXIgZT1udWxsLGY7Zm9yKGYgaW4gZCl7dmFyIGc9
RGgoYSxjLGRbZl0pO2cmJihlPWcpfXJldHVybiBlfWU9bnVsbDthLmImJmEuYi50eXBlPT1k
JiZhLmo9PWMmJihlPWEuYixhLmI9bnVsbCk7aWYoZj1jLmdldEF0dHJpYnV0ZSgiZGF0YS1l
cWlkIikpYy5yZW1vdmVBdHRyaWJ1dGUoImRhdGEtZXFpZCIpLChmPWEub1tmXSk/Yy5yZW1v
dmVFdmVudExpc3RlbmVyP2MucmVtb3ZlRXZlbnRMaXN0ZW5lcihkLGYsITEpOmMuZGV0YWNo
RXZlbnQmJmMuZGV0YWNoRXZlbnQoIm9uIitkLGYpOmEudy5sb2coRXJyb3IoImxgIitjKSk7
cmV0dXJuIGV9O18uRWg9ZnVuY3Rpb24oYSxjLGQpe3JldHVybiBmdW5jdGlvbigpe3RyeXty
ZXR1cm4gYy5hcHBseShkLGFyZ3VtZW50cyl9Y2F0Y2goZSl7YS5sb2coZSl9fX07DQpfLkdo
PWZ1bmN0aW9uKGEsYyxkLGUsZixnKXtlPV8uRWgoYSxlLGcpO2E9Xy5QKGMsZCxlLGYsZyk7
Xy5GaChjLGQpO3JldHVybiBhfTtfLkZoPWZ1bmN0aW9uKGEsYyl7aWYoYSBpbnN0YW5jZW9m
IEVsZW1lbnQmJihjPURoKF8uV2MoImVxIiksYSxjfHxbXSkpKWlmKF8ueSYmYyBpbnN0YW5j
ZW9mIE1vdXNlRXZlbnQmJmEuZGlzcGF0Y2hFdmVudCl7dmFyIGQ9ZG9jdW1lbnQuY3JlYXRl
RXZlbnQoIk1vdXNlRXZlbnQiKTtkLmluaXRNb3VzZUV2ZW50KGMudHlwZSwhMCwhMCxjLnZp
ZXcsYy5kZXRhaWwsYy5zY3JlZW5YLGMuc2NyZWVuWSxjLmNsaWVudFgsYy5jbGllbnRZLGMu
Y3RybEtleSxjLmFsdEtleSxjLnNoaWZ0S2V5LGMubWV0YUtleSxjLmJ1dHRvbixjLnJlbGF0
ZWRUYXJnZXQpO2EuZGlzcGF0Y2hFdmVudChkKX1lbHNlIGEuZGlzcGF0Y2hFdmVudCYmYS5k
aXNwYXRjaEV2ZW50KGMpfTsNCg0KfWNhdGNoKGUpe18uX0R1bXBFeGNlcHRpb24oZSl9DQp0
cnl7DQpfLkhoPWZ1bmN0aW9uKGEpe3ZhciBjPU51bWJlcihhKTtyZXR1cm4gMD09YyYmXy5v
ZyhhKT9OYU46Y307Xy5JaD1mdW5jdGlvbihhLGMpe18ucGcuY2FsbCh0aGlzLGMpO3RoaXMu
dz1hO3RoaXMuRWE9Y3x8dGhpc307Xy53KF8uSWgsXy5wZyk7Xy5JaC5wcm90b3R5cGUuSD1m
dW5jdGlvbihhLGMsZCxlKXtpZihkKXtpZigiZnVuY3Rpb24iIT10eXBlb2YgZCl0aHJvdyBu
ZXcgVHlwZUVycm9yKCJBIik7ZD1fLkVoKHRoaXMudyxkLHRoaXMuRWEpO2Q9Xy5JaC5LLkgu
Y2FsbCh0aGlzLGEsYyxkLGUpO18uRmgoYSxKaChjKSk7cmV0dXJuIGR9cmV0dXJuIF8uSWgu
Sy5ILmNhbGwodGhpcyxhLGMsZCxlKX07DQpfLkloLnByb3RvdHlwZS5vPWZ1bmN0aW9uKGEs
YyxkLGUsZil7aWYoZCl7aWYoImZ1bmN0aW9uIiE9dHlwZW9mIGQpdGhyb3cgbmV3IFR5cGVF
cnJvcigiQSIpO2Q9Xy5FaCh0aGlzLncsZCxmfHx0aGlzLkVhKTtkPV8uSWguSy5vLmNhbGwo
dGhpcyxhLGMsZCxlLGYpO18uRmgoYSxKaChjKSk7cmV0dXJuIGR9cmV0dXJuIF8uSWguSy5v
LmNhbGwodGhpcyxhLGMsZCxlLGYpfTtfLkloLnByb3RvdHlwZS5EYj1mdW5jdGlvbihhLGMs
ZCxlKXtpZihkKXtpZigiZnVuY3Rpb24iIT10eXBlb2YgZCl0aHJvdyBuZXcgVHlwZUVycm9y
KCJBIik7ZD1fLkVoKHRoaXMudyxkLHRoaXMuRWEpO2Q9Xy5JaC5LLkRiLmNhbGwodGhpcyxh
LGMsZCxlKTtfLkZoKGEsSmgoYykpO3JldHVybiBkfXJldHVybiBfLkloLksuRGIuY2FsbCh0
aGlzLGEsYyxkLGUpfTsNCnZhciBKaD1mdW5jdGlvbihhKXtyZXR1cm4gXy5BYShhKT8oMCxf
Lk5hKShhLEpoKToic3RyaW5nIj09PXR5cGVvZiBhP2E6YT9hLnRvU3RyaW5nKCk6YX07DQpf
LktoPWZ1bmN0aW9uKGEsYyl7Xy5JaC5jYWxsKHRoaXMsYyk7dGhpcy5mPWF9O18udyhfLkto
LF8uSWgpO18uS2gucHJvdG90eXBlLkM9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5mfTtfLkto
LnByb3RvdHlwZS5QPWZ1bmN0aW9uKCl7dGhpcy5mPW51bGw7Xy5LaC5LLlAuY2FsbCh0aGlz
KX07DQoNCn1jYXRjaChlKXtfLl9EdW1wRXhjZXB0aW9uKGUpfQ0KdHJ5ew0KXy5MaD1mdW5j
dGlvbihhLGMsZCl7Xy5LaC5jYWxsKHRoaXMsYSxjKTt0aGlzLmo9ZDsoYT1fLk4oImdiX25j
Iix0aGlzLmYpKSYmXy5zaCh0aGlzLGEsdGhpcy5iKX07Xy53KF8uTGgsXy5LaCk7Xy5MaC5w
cm90b3R5cGUuYj1mdW5jdGlvbihhKXt2YXIgYzsoYT1hLmIpJiYoYT1hLmdldEF0dHJpYnV0
ZU5vZGUoImRhdGEtdmVkIikpJiZhLnZhbHVlJiYoYz17dmVkOmEudmFsdWV9KTt0aGlzLmou
bG9nKDM5LGMpfTsNCg0KfWNhdGNoKGUpe18uX0R1bXBFeGNlcHRpb24oZSl9DQp0cnl7DQp2
YXIgTWg9ZnVuY3Rpb24oYSl7Xy5KLmNhbGwodGhpcyk7dGhpcy5BPWE7dGhpcy5qPW51bGw7
dGhpcy5iPXt9O3RoaXMuQj17fTt0aGlzLmY9e319O18udyhNaCxfLkopO18uTmg9ZnVuY3Rp
b24oYSl7aWYoYS5qKXJldHVybiBhLmo7Zm9yKHZhciBjIGluIGEuZilpZihhLmZbY10ubWco
KSYmYS5mW2NdLlJiKCkpcmV0dXJuIGEuZltjXTtyZXR1cm4gbnVsbH07TWgucHJvdG90eXBl
Lnc9ZnVuY3Rpb24oYSl7dGhpcy5mW2FdJiYoXy5OaCh0aGlzKSYmXy5OaCh0aGlzKS5GZCgp
PT1hfHx0aGlzLmZbYV0uc2UoITApKX07TWgucHJvdG90eXBlLm89ZnVuY3Rpb24oYSl7dGhp
cy5mW2EuRmQoKV09YX07dmFyIE9oPW5ldyBNaChfLk0pO18uWWMoImRkIixPaCk7DQoNCn1j
YXRjaChlKXtfLl9EdW1wRXhjZXB0aW9uKGUpfQ0KdHJ5ew0KdmFyIFFoLFJoLFVoLFZoLFho
LFpoLCRoLGFpLGJpLGNpLGVpLGdpLGtpLGxpO18uUGg9ZnVuY3Rpb24oYSxjKXtjJiZfLnRo
KGEsYS5ocmVmLnJlcGxhY2UoLyhbPyZdKGNvbnRpbnVlfGZvbGxvd3VwKT0pW14mXSovZywi
JDEiK2VuY29kZVVSSUNvbXBvbmVudChjKSkpfTtRaD1mdW5jdGlvbihhLGMpe2lmKHZvaWQg
MCE9PWEuYnx8dm9pZCAwIT09YS5mKXRocm93IEVycm9yKCJtIik7YS5mPWM7Xy5wZChhKX07
Umg9ZnVuY3Rpb24oYSl7Xy5BKHRoaXMsYSwwLC0xLG51bGwsbnVsbCl9O18udyhSaCxfLnop
O18uU2g9ZnVuY3Rpb24oYSxjKXtjLnBhcmVudE5vZGUmJmMucGFyZW50Tm9kZS5pbnNlcnRC
ZWZvcmUoYSxjKX07Xy5UaD1mdW5jdGlvbihhLGMsZCl7Xy5KLmNhbGwodGhpcyk7dGhpcy53
Yj1hO3RoaXMuZj1jfHwwO3RoaXMuYj1kO3RoaXMuT2E9KDAsXy50KSh0aGlzLk1oLHRoaXMp
fTtfLncoXy5UaCxfLkopO18uaz1fLlRoLnByb3RvdHlwZTtfLmsuWWM9MDsNCl8uay5QPWZ1
bmN0aW9uKCl7Xy5UaC5LLlAuY2FsbCh0aGlzKTt0aGlzLnN0b3AoKTtkZWxldGUgdGhpcy53
YjtkZWxldGUgdGhpcy5ifTtfLmsuc3RhcnQ9ZnVuY3Rpb24oYSl7dGhpcy5zdG9wKCk7dGhp
cy5ZYz1fLmtnKHRoaXMuT2Esdm9pZCAwIT09YT9hOnRoaXMuZil9O18uay5zdG9wPWZ1bmN0
aW9uKCl7MCE9dGhpcy5ZYyYmXy5sZyh0aGlzLlljKTt0aGlzLlljPTB9O18uay5NaD1mdW5j
dGlvbigpe3RoaXMuWWM9MDt0aGlzLndiJiZ0aGlzLndiLmNhbGwodGhpcy5iKX07Xy5XPWZ1
bmN0aW9uKGEsYyxkKXtkP18uVShhLGMpOl8uVihhLGMpfTtVaD1mdW5jdGlvbihhKXthPWEu
Z2V0QXR0cmlidXRlKCJzcmMiKTtyZXR1cm4gbnVsbCE9YSYmIiIhPWF9Ow0KVmg9ZnVuY3Rp
b24oYSxjLGQpe2E9Xy5OKCJnYl9sYSIsYS5DKCkpO2lmKCIiIT1jfHwiIiE9ZClpZihfLlQo
YSwiZ2JfaWEiKSl7dmFyIGU9YS5zdHlsZVtfLkZnKCJiYWNrZ3JvdW5kLWltYWdlIildOyIi
IT0oInVuZGVmaW5lZCIhPT10eXBlb2YgZT9lOmEuc3R5bGVbXy5JZyhhLCJiYWNrZ3JvdW5k
LWltYWdlIildfHwiIikmJihjPSIiIT1kP2Q6YyxfLkpnKGEsImJhY2tncm91bmQtaW1hZ2Ui
LCJ1cmwoJyIrYysiJykiKSxhPV8uTigiZ2JfcWMiLGEpLG51bGwhPWEmJlVoKGEpJiZhLnNl
dEF0dHJpYnV0ZSgic3JjIixjKSl9ZWxzZSJJTUciPT1hLnRhZ05hbWUmJihlPSIiIT1jP2M6
ZCxudWxsIT1hJiZVaChhKSYmYS5zZXRBdHRyaWJ1dGUoInNyYyIsZSksYyE9ZCYmKGQ9IiIh
PWQ/ZCsiIDJ4ICI6IiIsIiIhPWMmJihkPWQrKCIiPT1kPyIiOiIsIikrKGMrIiAxeCIpKSxh
LnNldEF0dHJpYnV0ZSgic3Jjc2V0IixkKSkpfTsNCl8uV2g9ZnVuY3Rpb24oYSxjKXtjJiZf
Lk5oKGEpJiZjIT1fLk5oKGEpJiZfLk5oKGEpLnNlKCExKTthLmo9Y307WGg9ZnVuY3Rpb24o
YSl7cmV0dXJuIFN0cmluZyhhKS5yZXBsYWNlKC8oW0EtWl0pL2csIi0kMSIpLnRvTG93ZXJD
YXNlKCl9O18uWWg9ZnVuY3Rpb24oYSxjKXtyZXR1cm4gXy5OKGEsYyl9O1poPWZ1bmN0aW9u
KGEsYyl7dmFyIGQ9Yy5wYXJlbnROb2RlO2QmJmQucmVwbGFjZUNoaWxkKGEsYyl9OyRoPWZ1
bmN0aW9uKGEsYyxkLGUpe2lmKG51bGwhPWEpZm9yKGE9YS5maXJzdENoaWxkO2E7KXtpZihj
KGEpJiYoZC5wdXNoKGEpLGUpfHwkaChhLGMsZCxlKSlyZXR1cm4hMDthPWEubmV4dFNpYmxp
bmd9cmV0dXJuITF9O2FpPWZ1bmN0aW9uKGEsYyl7dmFyIGQ9W107cmV0dXJuICRoKGEsYyxk
LCEwKT9kWzBdOnZvaWQgMH07Ymk9ZnVuY3Rpb24oYSxjKXt2YXIgZD1bXTskaChhLGMsZCwh
MSk7cmV0dXJuIGR9Ow0KY2k9ZnVuY3Rpb24oYSl7cmV0dXJuIF8ueSYmIV8uZmMoIjkiKT8o
YT1hLmdldEF0dHJpYnV0ZU5vZGUoInRhYmluZGV4IiksbnVsbCE9YSYmYS5zcGVjaWZpZWQp
OmEuaGFzQXR0cmlidXRlKCJ0YWJpbmRleCIpfTtlaT1mdW5jdGlvbihhKXthPWEudGFiSW5k
ZXg7cmV0dXJuIm51bWJlciI9PT10eXBlb2YgYSYmMDw9YSYmMzI3Njg+YX07Xy5maT1mdW5j
dGlvbihhLGMpe2M/YS50YWJJbmRleD0wOihhLnRhYkluZGV4PS0xLGEucmVtb3ZlQXR0cmli
dXRlKCJ0YWJJbmRleCIpKX07DQpnaT1mdW5jdGlvbihhKXt2YXIgYztpZigoYz0iQSI9PWEu
dGFnTmFtZSYmYS5oYXNBdHRyaWJ1dGUoImhyZWYiKXx8IklOUFVUIj09YS50YWdOYW1lfHwi
VEVYVEFSRUEiPT1hLnRhZ05hbWV8fCJTRUxFQ1QiPT1hLnRhZ05hbWV8fCJCVVRUT04iPT1h
LnRhZ05hbWU/IWEuZGlzYWJsZWQmJighY2koYSl8fGVpKGEpKTpjaShhKSYmZWkoYSkpJiZf
Lnkpe3ZhciBkOyFfLkJhKGEuZ2V0Qm91bmRpbmdDbGllbnRSZWN0KXx8Xy55JiZudWxsPT1h
LnBhcmVudEVsZW1lbnQ/ZD17aGVpZ2h0OmEub2Zmc2V0SGVpZ2h0LHdpZHRoOmEub2Zmc2V0
V2lkdGh9OmQ9YS5nZXRCb3VuZGluZ0NsaWVudFJlY3QoKTthPW51bGwhPWQmJjA8ZC5oZWln
aHQmJjA8ZC53aWR0aH1lbHNlIGE9YztyZXR1cm4gYX07DQpfLmhpPWZ1bmN0aW9uKGEpe2lm
KF8ubWUmJm51bGwhPT1hJiYiaW5uZXJUZXh0ImluIGEpYT1hLmlubmVyVGV4dC5yZXBsYWNl
KC8oXHJcbnxccnxcbikvZywiXG4iKTtlbHNle3ZhciBjPVtdO18uaWcoYSxjLCEwKTthPWMu
am9pbigiIil9YT1hLnJlcGxhY2UoLyBceEFEIC9nLCIgIikucmVwbGFjZSgvXHhBRC9nLCIi
KTthPWEucmVwbGFjZSgvXHUyMDBCL2csIiIpO18ubWV8fChhPWEucmVwbGFjZSgvICsvZywi
ICIpKTsiICIhPWEmJihhPWEucmVwbGFjZSgvXlxzKi8sIiIpKTtyZXR1cm4gYX07Xy5paT1m
dW5jdGlvbihhLGMpe2E9YS5nZXRBdHRyaWJ1dGUoImFyaWEtIitjKTtyZXR1cm4gbnVsbD09
YXx8dm9pZCAwPT1hPyIiOlN0cmluZyhhKX07Xy5qaT1mdW5jdGlvbihhLGMsZCl7aWYoXy5D
aCYmYS5kYXRhc2V0KWEuZGF0YXNldFtjXT1kO2Vsc2V7aWYoLy1bYS16XS8udGVzdChjKSl0
aHJvdyBFcnJvcigiaiIpO2Euc2V0QXR0cmlidXRlKCJkYXRhLSIrWGgoYyksZCl9fTsNCmtp
PWZ1bmN0aW9uKGEpe2lmKC8tW2Etel0vLnRlc3QoIml0ZW0iKSlyZXR1cm4gbnVsbDtpZihf
LkNoJiZhLmRhdGFzZXQpe2lmKF8uQWIoKSYmISgiaXRlbSJpbiBhLmRhdGFzZXQpKXJldHVy
biBudWxsO2E9YS5kYXRhc2V0Lml0ZW07cmV0dXJuIHZvaWQgMD09PWE/bnVsbDphfXJldHVy
biBhLmdldEF0dHJpYnV0ZSgiZGF0YS0iK1hoKCJpdGVtIikpfTtsaT1mdW5jdGlvbihhLGMp
e3JldHVybi8tW2Etel0vLnRlc3QoYyk/ITE6Xy5DaCYmYS5kYXRhc2V0P2MgaW4gYS5kYXRh
c2V0OmEuaGFzQXR0cmlidXRlP2EuaGFzQXR0cmlidXRlKCJkYXRhLSIrWGgoYykpOiEhYS5n
ZXRBdHRyaWJ1dGUoImRhdGEtIitYaChjKSl9O18ubmk9ZnVuY3Rpb24oYSxjKXtfLlIuY2Fs
bCh0aGlzKTt0aGlzLmI9YTt0aGlzLmo9bWkodGhpcy5iKTt0aGlzLkI9Y3x8MTAwO3RoaXMu
bz1fLlAoYSwicmVzaXplIix0aGlzLncsITEsdGhpcyl9O18udyhfLm5pLF8uUik7DQpfLm5p
LnByb3RvdHlwZS5QPWZ1bmN0aW9uKCl7Xy5sZih0aGlzLm8pO18ubmkuSy5QLmNhbGwodGhp
cyl9O18ubmkucHJvdG90eXBlLnc9ZnVuY3Rpb24oKXt0aGlzLmZ8fCh0aGlzLmY9bmV3IF8u
VGgodGhpcy5BLHRoaXMuQix0aGlzKSxfLmJnKHRoaXMsdGhpcy5mKSk7dGhpcy5mLnN0YXJ0
KCl9O18ubmkucHJvdG90eXBlLkE9ZnVuY3Rpb24oKXtpZighdGhpcy5iLlJhKXt2YXIgYT10
aGlzLmosYz1taSh0aGlzLmIpO3RoaXMuaj1jO2lmKGEpe3ZhciBkPSExO2Eud2lkdGghPWMu
d2lkdGgmJih0aGlzLmRpc3BhdGNoRXZlbnQoImIiKSxkPSEwKTthLmhlaWdodCE9Yy5oZWln
aHQmJih0aGlzLmRpc3BhdGNoRXZlbnQoImEiKSxkPSEwKTtkJiZ0aGlzLmRpc3BhdGNoRXZl
bnQoInJlc2l6ZSIpfWVsc2UgdGhpcy5kaXNwYXRjaEV2ZW50KCJhIiksdGhpcy5kaXNwYXRj
aEV2ZW50KCJiIiksdGhpcy5kaXNwYXRjaEV2ZW50KCJyZXNpemUiKX19Ow0KdmFyIG9pPWZ1
bmN0aW9uKGEpe18uUi5jYWxsKHRoaXMpO3RoaXMuZj1hfHx3aW5kb3c7dGhpcy5qPV8uUCh0
aGlzLmYsInJlc2l6ZSIsdGhpcy5vLCExLHRoaXMpO3RoaXMuYj1fLnlnKHRoaXMuZil9LHBp
LG1pO18udyhvaSxfLlIpO18ucWk9ZnVuY3Rpb24oKXt2YXIgYT13aW5kb3csYz1fLkNnKGEp
O3JldHVybiBwaVtjXT1waVtjXXx8bmV3IG9pKGEpfTtwaT17fTttaT1mdW5jdGlvbihhKXty
ZXR1cm4gYS5iP18ud2coYS5iKTpudWxsfTtvaS5wcm90b3R5cGUuUD1mdW5jdGlvbigpe29p
LksuUC5jYWxsKHRoaXMpO3RoaXMuaiYmKF8ubGYodGhpcy5qKSx0aGlzLmo9bnVsbCk7dGhp
cy5iPXRoaXMuZj1udWxsfTtvaS5wcm90b3R5cGUubz1mdW5jdGlvbigpe3ZhciBhPV8ueWco
dGhpcy5mKTtfLkhnKGEsdGhpcy5iKXx8KHRoaXMuYj1hLHRoaXMuZGlzcGF0Y2hFdmVudCgi
cmVzaXplIikpfTsNCnZhciByaTtyaT1mdW5jdGlvbihhKXtyZXR1cm4gbnVsbCE9Xy55aChh
LGZ1bmN0aW9uKGMpe3JldHVybiAxPT1jLm5vZGVUeXBlJiYidHJ1ZSI9PV8uaWkoYywiaGlk
ZGVuIil9KX07Xy5zaT1mdW5jdGlvbihhKXtyZXR1cm4gYT9iaShhLGZ1bmN0aW9uKGMpe3Jl
dHVybiAxPT1jLm5vZGVUeXBlJiZnaShjKSYmIXJpKGMpfSk6W119Ow0KXy50aT1mdW5jdGlv
bihhKXt0aGlzLmY9YTt0aGlzLmI9bnVsbH07Xy51aT1mdW5jdGlvbihhKXthLmJ8fChhLmI9
Xy5QKGEuZiwia2V5ZG93biIsYS5qLCExLGEpKX07Xy53aT1mdW5jdGlvbihhKXt2aShhKTtf
LlcoYS5mLCJnYl9zIiwhMSl9O18udGkucHJvdG90eXBlLmo9ZnVuY3Rpb24oYSl7OSE9YS5r
ZXlDb2RlfHxfLlQodGhpcy5mLCJnYl9zIil8fChfLlcodGhpcy5mLCJnYl9zIiwhMCksdmko
dGhpcykpfTt2YXIgdmk9ZnVuY3Rpb24oYSl7YS5iJiYoXy5sZihhLmIpLGEuYj1udWxsKX07
DQpfLnhpPWZ1bmN0aW9uKGEsYyl7Xy5SLmNhbGwodGhpcyk7dGhpcy5BPWE7YyYmKHRoaXMu
QS5pZD1jKX07Xy53KF8ueGksXy5SKTtfLnhpLnByb3RvdHlwZS5DPWZ1bmN0aW9uKCl7cmV0
dXJuIHRoaXMuQX07Xy54aS5wcm90b3R5cGUuQ2E9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5B
LmlkfTtfLnhpLnByb3RvdHlwZS5aPWZ1bmN0aW9uKCl7dmFyIGE9dGhpcy5BLmlkO2F8fChh
PSJnYiQiK18uYWgoXy4kZy51YSgpKSx0aGlzLkEuaWQ9YSk7cmV0dXJuIGF9O18ueGkucHJv
dG90eXBlLlA9ZnVuY3Rpb24oKXtfLkRlKHRoaXMuQSk7Xy54aS5LLlAuY2FsbCh0aGlzKX07
DQpfLnlpPWZ1bmN0aW9uKGEpe18ueGkuY2FsbCh0aGlzLGEpO18ucmguSChhLHRoaXMuYiwh
MSx0aGlzKX07Xy53KF8ueWksXy54aSk7Xy55aS5wcm90b3R5cGUuYj1mdW5jdGlvbihhKXt0
aGlzLmRpc3BhdGNoRXZlbnQoImNsaWNrIil8fGEucHJldmVudERlZmF1bHQoKX07DQpfLnpp
PWZ1bmN0aW9uKGEpe3JldHVybiBhaShhLGZ1bmN0aW9uKGMpe3JldHVybiBfLkZlKGMpJiZn
aShjKX0pfTtfLkFpPWZ1bmN0aW9uKGEpeyhhPV8uemkoYSkpJiZhLmZvY3VzKCl9Ow0KdmFy
IEJpPWZ1bmN0aW9uKCl7fTsNCnZhciBDaT1mdW5jdGlvbihhLGMsZCl7dGhpcy5mPWE7dGhp
cy5qPWM7dGhpcy5iPWR8fF8ucX07DQp2YXIgRGk9ZnVuY3Rpb24oKXt0aGlzLmI9W119O0Rp
LnByb3RvdHlwZS5mPWZ1bmN0aW9uKGEsYyxkKXt0aGlzLncoYSxjLGQpO3RoaXMuYi5wdXNo
KG5ldyBDaShhLGMsZCkpfTtEaS5wcm90b3R5cGUudz1mdW5jdGlvbihhLGMsZCl7ZD1kfHxf
LnE7Zm9yKHZhciBlPTAsZj10aGlzLmIubGVuZ3RoO2U8ZjtlKyspe3ZhciBnPXRoaXMuYltl
XTtpZihnLmY9PWEmJmcuaj09YyYmZy5iPT1kKXt0aGlzLmIuc3BsaWNlKGUsMSk7YnJlYWt9
fX07RGkucHJvdG90eXBlLmo9ZnVuY3Rpb24oYSl7Zm9yKHZhciBjPTAsZD10aGlzLmIubGVu
Z3RoO2M8ZDtjKyspe3ZhciBlPXRoaXMuYltjXTsiY2F0YyI9PWUuZiYmZS5qLmNhbGwoZS5i
LGEpfX07DQp2YXIgRmk9ZnVuY3Rpb24oYSxjKXt0aGlzLm89bmV3IERpO3RoaXMuRD1hO3Ro
aXMuQT1jO3RoaXMuYj1FaShhLm9mZnNldFdpZHRoLHRoaXMuQSk7dGhpcy5HPW5ldyBfLm5p
KF8ucWkoKSwxMCk7Xy5QKHRoaXMuRywiYiIsZnVuY3Rpb24oKXt3aW5kb3cucmVxdWVzdEFu
aW1hdGlvbkZyYW1lP3dpbmRvdy5yZXF1ZXN0QW5pbWF0aW9uRnJhbWUoKDAsXy50KSh0aGlz
LkIsdGhpcykpOnRoaXMuQigpfSwhMSx0aGlzKX0sRWk9ZnVuY3Rpb24oYSxjKXtmb3IodmFy
IGQ9MCxlPWMubGVuZ3RoLTEsZj1jWzBdO2Q8ZTspe2lmKGE8PWYubWF4KXJldHVybiBmLmlk
O2Y9Y1srK2RdfXJldHVybiBjW2VdLmlkfTtGaS5wcm90b3R5cGUuQj1mdW5jdGlvbigpe3Zh
ciBhPUVpKHRoaXMuRC5vZmZzZXRXaWR0aCx0aGlzLkEpO2EhPXRoaXMuYiYmKHRoaXMuYj1h
LHRoaXMuaihuZXcgQmkpKX07RmkucHJvdG90eXBlLmY9ZnVuY3Rpb24oYSxjLGQpe3RoaXMu
by5mKGEsYyxkKX07DQpGaS5wcm90b3R5cGUudz1mdW5jdGlvbihhLGMpe3RoaXMuby53KGEs
Yyl9O0ZpLnByb3RvdHlwZS5qPWZ1bmN0aW9uKGEpe3RoaXMuby5qKGEpfTsNCnZhciBHaT17
Q2s6ImdiX2thIixSazoiZ2JfVGQiLGprOiJnYl9FYyJ9Ow0KdmFyIEhpPXtpZDoidW5saW1p
dGVkUHJvZHVjdENvbnRyb2wiLHFlOk51bWJlci5NQVhfU0FGRV9JTlRFR0VSfTsNCnZhciBJ
aT1mdW5jdGlvbihhLGMpe2N8fChjPXRoaXMuY3JlYXRlRWxlbWVudCgpLGEuSGQoKS5hcHBl
bmRDaGlsZChjKSk7Xy54aS5jYWxsKHRoaXMsYyk7dGhpcy53PW5ldyBfLnBnKHRoaXMpO18u
c2godGhpcy53LHRoaXMuQygpLHRoaXMuV2gpfTtfLncoSWksXy54aSk7Xy5rPUlpLnByb3Rv
dHlwZTtfLmsuY3JlYXRlRWxlbWVudD1mdW5jdGlvbigpe3ZhciBhPV8uQmUoIkxJIik7Xy5V
KGEsImdiX01jIik7Xy5KZShhLCJtZW51aXRlbSIpO3JldHVybiBhfTtfLmsuZmo9ZnVuY3Rp
b24oYSl7YT9fLmppKHRoaXMuQygpLCJpdGVtIixhKTooYT10aGlzLkMoKSwhLy1bYS16XS8u
dGVzdCgiaXRlbSIpJiYoXy5DaCYmYS5kYXRhc2V0P2xpKGEsIml0ZW0iKSYmZGVsZXRlIGEu
ZGF0YXNldC5pdGVtOmEucmVtb3ZlQXR0cmlidXRlKCJkYXRhLSIrWGgoIml0ZW0iKSkpKTty
ZXR1cm4gdGhpc307Xy5rLkdkPWZ1bmN0aW9uKCl7cmV0dXJuIGtpKHRoaXMuQygpKX07DQpf
LmsubmQ9ZnVuY3Rpb24oYSl7Xy5XKHRoaXMuQygpLCJnYl9PYyIsYSk7cmV0dXJuIHRoaXN9
O18uay5mb2N1cz1mdW5jdGlvbigpe18uQWkodGhpcy5DKCkpfTtfLmsuV2g9ZnVuY3Rpb24o
KXt0aGlzLmRpc3BhdGNoRXZlbnQoImNsaWNrIil9Ow0KdmFyIEppPWZ1bmN0aW9uKGEsYyl7
SWkuY2FsbCh0aGlzLGEsYyk7dGhpcy5qPV8uWWgoImdiX1BjIix0aGlzLkMoKSk7dGhpcy5v
PV8uTigiZ2JfUmMiLHRoaXMuaik7dGhpcy5iPW51bGw7dGhpcy5mPV8uTigiZ2JfUWMiLHRo
aXMuail9O18ucChKaSxJaSk7Xy5rPUppLnByb3RvdHlwZTtfLmsuY3JlYXRlRWxlbWVudD1m
dW5jdGlvbigpe3ZhciBhPUlpLnByb3RvdHlwZS5jcmVhdGVFbGVtZW50LmNhbGwodGhpcyk7
Xy5VKGEsImdiX1NjIik7dmFyIGM9Xy54ZSgiQSIsImdiX1BjIik7Xy5maShjLCEwKTthLmFw
cGVuZENoaWxkKGMpO3ZhciBkPV8ueGUoIlNQQU4iLCJnYl9RYyIpO2MuYXBwZW5kQ2hpbGQo
ZCk7cmV0dXJuIGF9O18uay5HZD1mdW5jdGlvbigpe3JldHVybiBJaS5wcm90b3R5cGUuR2Qu
Y2FsbCh0aGlzKXx8dGhpcy52ZygpfTtfLmsudmc9ZnVuY3Rpb24oKXtyZXR1cm4gXy5oaSh0
aGlzLmYpfTtfLmsuaWo9ZnVuY3Rpb24oYSl7Xy5lZyh0aGlzLmYsYSk7cmV0dXJuIHRoaXN9
Ow0KXy5rLmhqPWZ1bmN0aW9uKGEpe3RoaXMub3x8KHRoaXMubz1fLnhlKCJJTUciLCJnYl9S
YyIpLHRoaXMuby5zZXRBdHRyaWJ1dGUoImFsdCIsIiIpLHRoaXMuYj8oWmgodGhpcy5vLHRo
aXMuYiksdGhpcy5iPW51bGwpOl8uU2godGhpcy5vLHRoaXMuZikpO3RoaXMuby5zZXRBdHRy
aWJ1dGUoInNyYyIsYSk7cmV0dXJuIHRoaXN9O18uay5Raj1mdW5jdGlvbihhKXtpZighKGEg
aW5zdGFuY2VvZiBFbGVtZW50JiYic3ZnIj09YS50YWdOYW1lLnRvTG93ZXJDYXNlKCkpKXJl
dHVybiB0aGlzO3RoaXMubz8oWmgoYSx0aGlzLm8pLHRoaXMubz1udWxsKTp0aGlzLmI/Wmgo
YSx0aGlzLmIpOl8uU2goYSx0aGlzLmYpO3ZhciBjPWEuZ2V0QXR0cmlidXRlKCJjbGFzcyIp
O2M/YS5zZXRBdHRyaWJ1dGUoImNsYXNzIixjKyIgZ2JfUmMiKTphLnNldEF0dHJpYnV0ZSgi
Y2xhc3MiLCJnYl9SYyIpO3RoaXMuYj1hO3JldHVybiB0aGlzfTtfLmsuZm9jdXM9ZnVuY3Rp
b24oKXt0aGlzLmouZm9jdXMoKX07DQpfLktpPWZ1bmN0aW9uKGEpe18ueGkuY2FsbCh0aGlz
LGEpO3RoaXMuZj1bXTt0aGlzLkY9e319O18udyhfLktpLF8ueGkpO18ueGkucHJvdG90eXBl
LkhkPWZ1bmN0aW9uKCl7cmV0dXJuIHRoaXMuQygpfTtfLktpLnByb3RvdHlwZS55YT1mdW5j
dGlvbihhKXt2YXIgYz10aGlzLkZbYV07aWYoYylyZXR1cm4gYzt2YXIgZD1kb2N1bWVudC5n
ZXRFbGVtZW50QnlJZChhKTtpZihkKWZvcih2YXIgZT0wLGY9dGhpcy5mLmxlbmd0aDtlPGY7
KytlKWlmKGM9dGhpcy5mW2VdLGMuQygpPT1kKXJldHVybiB0aGlzLkZbYV09YztyZXR1cm4g
bnVsbH07Xy5LaS5wcm90b3R5cGUuRWI9ZnVuY3Rpb24oYSl7YS5RYyh0aGlzKTt0aGlzLmYu
cHVzaChhKTt2YXIgYz1hLkEuaWQ7YyYmKHRoaXMuRltjXT1hKX07Xy5LaS5wcm90b3R5cGUu
Vj1mdW5jdGlvbigpe2Zvcih2YXIgYT0wLGM9dGhpcy5mLmxlbmd0aDthPGM7YSsrKXRoaXMu
ZlthXS5zYSgpO3RoaXMuRj17fTt0aGlzLmY9W119Ow0KdmFyIExpPWZ1bmN0aW9uKGEsYyl7
Xy5LaS5jYWxsKHRoaXMsY3x8dGhpcy5jcmVhdGVFbGVtZW50KCkpO3RoaXMuaj1hO2E9dGhp
cy5DKCkuZ2V0RWxlbWVudHNCeUNsYXNzTmFtZSgiZ2JfTWMiKTtmb3IoYz0wO2M8YS5sZW5n
dGg7YysrKXt2YXIgZD1hW2NdO18uVChkLCJnYl9TYyIpP3RoaXMuRWIobmV3IEppKHRoaXMs
ZCkpOnRoaXMuRWIobmV3IElpKHRoaXMsZCkpfXRoaXMuYj1fLk4oImdiX05jIix0aGlzLkMo
KSl9O18udyhMaSxfLktpKTtfLms9TGkucHJvdG90eXBlO18uay5jcmVhdGVFbGVtZW50PWZ1
bmN0aW9uKCl7dmFyIGE9Xy5CZSgiVUwiKTtfLlUoYSwiZ2JfSmMiKTt2YXIgYz1fLnhlKCJT
UEFOIiwiZ2JfTmMiKTthLmFwcGVuZENoaWxkKGMpO3JldHVybiBhfTtfLmsuRWI9ZnVuY3Rp
b24oYSl7TGkuSy5FYi5jYWxsKHRoaXMsYSk7dmFyIGM9dGhpcy5qLGQ9YS5DKCk7ZD1kLmlk
fHwoZC5pZD0iZ2JtIitfLmFoKF8uJGcudWEoKSkpO2MuTltkXT1hfTsNCl8uay5kaj1mdW5j
dGlvbigpe3JldHVybiBudWxsIT10aGlzLmI/Xy5oaSh0aGlzLmIpOm51bGx9O18uay5laj1m
dW5jdGlvbihhKXtyZXR1cm4gbnVsbCE9dGhpcy5iPyhfLmVnKHRoaXMuYixhKSx0aGlzKTpu
dWxsfTtfLmsuVmc9ZnVuY3Rpb24oKXt2YXIgYT1uZXcgSWkodGhpcyk7dGhpcy5FYihhKTty
ZXR1cm4gYX07Xy5rLldnPWZ1bmN0aW9uKCl7dmFyIGE9bmV3IEppKHRoaXMpO3RoaXMuRWIo
YSk7cmV0dXJuIGF9Ow0KdmFyIFg9ZnVuY3Rpb24oYSxjLGQsZSxmLGcsaCl7Xy5LaS5jYWxs
KHRoaXMsYSk7dGhpcy5iPWM7dGhpcy5CPWE7dGhpcy53PWQ7dGhpcy5NPWU7dGhpcy5KPWY7
dGhpcy5vPV8uTigiZ2JfRmMiLHRoaXMuYik7dGhpcy5MPW5ldyBfLnRpKHRoaXMubyk7dGhp
cy5EPV8uTigiZ2JfSGMiLHRoaXMubyk7dGhpcy5HPV8uTigiZ2JfSWMiLHRoaXMubyk7dGhp
cy5OPXt9O3RoaXMuTz1bXTt0aGlzLlU9Z3x8ITE7dGhpcy5UPWh8fCExO3RoaXMuaj1uZXcg
Xy5wZyh0aGlzKTtNaSh0aGlzKTthPXRoaXMuby5nZXRFbGVtZW50c0J5Q2xhc3NOYW1lKCJn
Yl9KYyIpO2ZvcihjPTA7YzxhLmxlbmd0aDtjKyspdGhpcy5FYihuZXcgTGkodGhpcyxhW2Nd
KSl9O18ucChYLF8uS2kpO18uaz1YLnByb3RvdHlwZTtfLmsuUD1mdW5jdGlvbigpe18uS2ku
cHJvdG90eXBlLlAuY2FsbCh0aGlzKTtOaSh0aGlzKX07Xy5rLkhkPWZ1bmN0aW9uKCl7cmV0
dXJuIHRoaXMub307DQpfLmsuamo9ZnVuY3Rpb24oKXtyZXR1cm4gXy5OKCJnYl9rZSIsdGhp
cy5iKX07Xy5rLlVnPWZ1bmN0aW9uKCl7T2kodGhpcyk7cmV0dXJuIFBpKHRoaXMsdGhpcy5E
KX07Xy5rLlRnPWZ1bmN0aW9uKCl7T2kodGhpcyk7cmV0dXJuIFBpKHRoaXMsdGhpcy5HKX07
dmFyIFBpPWZ1bmN0aW9uKGEsYyl7dmFyIGQ9bmV3IExpKGEpLGU9ZC5DKCk7Yy5hcHBlbmRD
aGlsZChlKTthLkViKGQpO3JldHVybiBkfSxPaT1mdW5jdGlvbihhKXthLkR8fChhLkQ9Xy5C
ZSgiRElWIiksXy5VKGEuRCwiZ2JfSGMiKSxhLm8uYXBwZW5kQ2hpbGQoYS5EKSxhLkc9Xy5C
ZSgiRElWIiksXy5VKGEuRywiZ2JfSWMiKSxhLm8uYXBwZW5kQ2hpbGQoYS5HKSl9O1gucHJv
dG90eXBlLkVhPWZ1bmN0aW9uKGEpe18uVyh0aGlzLmIsImdiX0RjIiwxPT1hKTt0aGlzLmRp
c3BhdGNoRXZlbnQoIm1zYyIpfTtYLnByb3RvdHlwZS4kPWZ1bmN0aW9uKCl7cmV0dXJuIFFp
KHRoaXMpPzA6MX07DQp2YXIgUmk9ZnVuY3Rpb24oYSxjKXtzd2l0Y2goYyl7Y2FzZSAibWVu
dSI6Xy5WKGEuQygpLCJnYl92YSIpO2JyZWFrO2Nhc2UgImJhY2siOl8uVihhLncsImdiX3Zh
Iik7YnJlYWs7Y2FzZSAiY2xvc2UiOl8uVihhLk0sImdiX3ZhIil9fSxTaT1mdW5jdGlvbihh
KXtfLlUoYS5DKCksImdiX3ZhIik7Xy5VKGEudywiZ2JfdmEiKTtfLlUoYS5NLCJnYl92YSIp
fSxUaT1mdW5jdGlvbihhKXtyZXR1cm4hXy5UKGEsImdiX3ZhIil9O18uaz1YLnByb3RvdHlw
ZTtfLmsuaXNWaXNpYmxlPWZ1bmN0aW9uKGEpe3N3aXRjaChhKXtjYXNlICJtZW51IjpyZXR1
cm4gVGkodGhpcy5DKCkpO2Nhc2UgImJhY2siOnJldHVybiBUaSh0aGlzLncpO2Nhc2UgImNs
b3NlIjpyZXR1cm4gVGkodGhpcy5NKX1yZXR1cm4hMX07DQpfLmsuZGY9ZnVuY3Rpb24oYSl7
dGhpcy5KfHwoYSYmXy5KZyh0aGlzLmIsInRyYW5zaXRpb24iLCJub25lIiksdGhpcy5kaXNw
YXRjaEV2ZW50KCJiZWZvcmVzaG93IiksXy5VKHRoaXMuYiwiZ2JfQmMiKSxfLktlKHRoaXMu
QygpLCJleHBhbmRlZCIsITApLF8uQWkodGhpcy5vKSxfLnVpKHRoaXMuTCksdGhpcy5kaXNw
YXRjaEV2ZW50KCJvcGVuIiksdGhpcy5qLm8oZG9jdW1lbnQuYm9keSxVaSx0aGlzLlIsITAs
dGhpcyksdGhpcy5qLkgoZG9jdW1lbnQuYm9keSwiZm9jdXNpbiIsdGhpcy5TKSxhJiZfLmtn
KGZ1bmN0aW9uKCl7Xy5KZyh0aGlzLmIsInRyYW5zaXRpb24iLCIiKX0sMCx0aGlzKSl9O18u
ay5Naj1mdW5jdGlvbihhKXt0aGlzLkomJl8uS2UodGhpcy5DKCksImV4cGFuZGVkIixhKX07
DQpfLmsuY2xvc2U9ZnVuY3Rpb24oYSl7dGhpcy5KfHwoYSYmXy5KZyh0aGlzLmIsInRyYW5z
aXRpb24iLCJub25lIiksXy5WKHRoaXMuYiwiZ2JfQmMiKSxfLktlKHRoaXMuQygpLCJleHBh
bmRlZCIsITEpLGRvY3VtZW50LmFjdGl2ZUVsZW1lbnQ9PXRoaXMuQygpJiZ0aGlzLkMoKS5i
bHVyKCksXy53aSh0aGlzLkwpLHRoaXMuZGlzcGF0Y2hFdmVudCgiY2xvc2UiKSxOaSh0aGlz
KSxhJiZfLmtnKGZ1bmN0aW9uKCl7Xy5KZyh0aGlzLmIsInRyYW5zaXRpb24iLCIiKX0sMCx0
aGlzKSl9O18uay5Xaj1mdW5jdGlvbihhKXtUaSh0aGlzLkIpJiZfLlUodGhpcy5CLCJnYl93
YyIpO18uVih0aGlzLncsImdiX3ZhIik7YSYmXy5jZih0aGlzLncsImNsaWNrIixhKX07Xy5r
LkppPWZ1bmN0aW9uKCl7Xy5VKHRoaXMudywiZ2JfdmEiKTtfLlQodGhpcy5CLCJnYl93YyIp
JiZfLlYodGhpcy5CLCJnYl93YyIpfTtfLmsuU2I9ZnVuY3Rpb24oKXtyZXR1cm4gXy5UKHRo
aXMuYiwiZ2JfQmMiKX07DQp2YXIgTWk9ZnVuY3Rpb24oYSl7Xy5zaChhLmosYS5DKCksYS5o
YSk7YS5DKCkuYWRkRXZlbnRMaXN0ZW5lcigia2V5ZG93biIsZnVuY3Rpb24oYyl7MzI9PWMu
a2V5Q29kZSYmYy5wcmV2ZW50RGVmYXVsdCgpfSk7Xy5zaChhLmosYS5vLGEuWSk7YS5qLkgo
YS5iLCJrZXlkb3duIixhLnRhKTthLmouSChhLmIsImtleXVwIixhLm1hKTtfLnNoKGEuaixh
LncsZnVuY3Rpb24oKXt0aGlzLmRpc3BhdGNoRXZlbnQoImJiYyIpfSk7Xy5zaChhLmosYS5N
LGZ1bmN0aW9uKCl7dGhpcy5kaXNwYXRjaEV2ZW50KCJjYmMiKX0pO2lmKF8uVChhLmIsImdi
X2thIil8fF8uVChhLmIsImdiX1RkIikpYS5qLkgod2luZG93LCJyZXNpemUiLGEuVyksYS5X
KCk7Xy5UKGEuYiwiZ2JfeWMiKXx8YS5qLkRiKHdpbmRvdywidG91Y2hzdGFydCIsZnVuY3Rp
b24oKXtfLkpnKGEuYiwib3ZlcmZsb3cteSIsImF1dG8iKX0pfTsNClgucHJvdG90eXBlLlc9
ZnVuY3Rpb24oKXt2YXIgYT13aW5kb3cudmlzdWFsVmlld3BvcnQ/d2luZG93LnZpc3VhbFZp
ZXdwb3J0LmhlaWdodDp3aW5kb3cuaW5uZXJIZWlnaHQ7YSYmXy5KZyh0aGlzLmIsImhlaWdo
dCIsImNhbGMoIithKyJweCAtIDEwMCUpIil9O1gucHJvdG90eXBlLmhhPWZ1bmN0aW9uKCl7
dGhpcy5kaXNwYXRjaEV2ZW50KCJtYmMiKTtpZighdGhpcy5KKXtpZih0aGlzLlNiKCkpe3Ro
aXMuY2xvc2UoKTt2YXIgYT0hMH1lbHNlIHRoaXMuZGYoKSxhPSExO2EmJnRoaXMuQygpLmZv
Y3VzKCl9fTt2YXIgUWk9ZnVuY3Rpb24oYSl7cmV0dXJuIV8uVChhLmIsImdiX0RjIil8fF8u
VChhLmIsImdiX2thIil8fF8uVChhLmIsImdiX1RkIil9O1gucHJvdG90eXBlLm1hPWZ1bmN0
aW9uKGEpezk9PT1hLmtleUNvZGUmJnRoaXMuU2IoKSYmKGE9dGhpcy5MLF8uVyhhLmYsImdi
X3MiLCEwKSx2aShhKSl9Ow0KWC5wcm90b3R5cGUudGE9ZnVuY3Rpb24oYSl7YTp7aWYoMzY9
PWEua2V5Q29kZXx8MzU9PWEua2V5Q29kZSl7dmFyIGM9Xy5zaSh0aGlzLmIpO2lmKDA8Yy5s
ZW5ndGgpe3ZhciBkPWNbYy5sZW5ndGgtMV07MzY9PWEua2V5Q29kZSYmKGQ9IVFpKHRoaXMp
JiYxPGMubGVuZ3RoP2NbMV06Y1swXSk7ZC5mb2N1cygpO2EucHJldmVudERlZmF1bHQoKTti
cmVhayBhfX0yNyE9YS5rZXlDb2RlfHx0aGlzLlUmJiFRaSh0aGlzKXx8KHRoaXMuY2xvc2Uo
KSxudWxsIT10aGlzLkImJnRoaXMuQi5mb2N1cygpKX05PT09YS5rZXlDb2RlJiZ0aGlzLlNi
KCkmJlFpKHRoaXMpJiYoYz1hLnRhcmdldCxkPV8uc2kodGhpcy5iKSwwPGQubGVuZ3RoJiYo
Yz09ZFswXSYmYS5zaGlmdEtleT8oZFtkLmxlbmd0aC0xXS5mb2N1cygpLGEucHJldmVudERl
ZmF1bHQoKSk6YyE9ZFtkLmxlbmd0aC0xXXx8YS5zaGlmdEtleXx8KGRbMF0uZm9jdXMoKSxh
LnByZXZlbnREZWZhdWx0KCkpKSl9Ow0KWC5wcm90b3R5cGUuWT1mdW5jdGlvbihhKXtpZihh
LnRhcmdldCBpbnN0YW5jZW9mIE5vZGUpe2E6e2E9YS50YXJnZXQ7Zm9yKHZhciBjPXRoaXMu
bzthJiZhIT09Yzspe3ZhciBkPWEuaWQ7aWYoZCBpbiB0aGlzLk4pe2E9dGhpcy5OW2RdO2Jy
ZWFrIGF9YT1hLnBhcmVudE5vZGV9YT1udWxsfWlmKGEpe2E9YS5HZCgpO2M9MDtmb3IoZD10
aGlzLk8ubGVuZ3RoO2M8ZDsrK2Mpe3ZhciBlPXRoaXMuT1tjXTtlLk9hLmNhbGwoZS5iLGEp
fXRoaXMuVSYmIVFpKHRoaXMpfHx0aGlzLmNsb3NlKCl9fX07dmFyIFZpPWZ1bmN0aW9uKGEp
e3JldHVybiBhIGluc3RhbmNlb2YgSFRNTEVsZW1lbnQmJmxpKGEsIm9nb2JtIil9Ow0KWC5w
cm90b3R5cGUuUj1mdW5jdGlvbihhKXt0aGlzLlNiKCkmJmEudGFyZ2V0IGluc3RhbmNlb2Yg
Tm9kZSYmISghUWkodGhpcyl8fHRoaXMuVCYmXy55aChhLnRhcmdldCxWaSkpJiYoImtleWRv
d24iPT1hLnR5cGU/Mjc9PWEua2V5Q29kZSYmKGEucHJldmVudERlZmF1bHQoKSxhLnN0b3BQ
cm9wYWdhdGlvbigpLHRoaXMuY2xvc2UoKSx0aGlzLkMoKS5mb2N1cygpKTpfLnpoKGEudGFy
Z2V0LCJnYl9EIil8fF8uemgoYS50YXJnZXQsImdiX3JjIil8fF8uR2UodGhpcy5iLGEudGFy
Z2V0KXx8KCJ0b3VjaHN0YXJ0Ij09YS50eXBlJiYoYS5wcmV2ZW50RGVmYXVsdCgpLGEuc3Rv
cFByb3BhZ2F0aW9uKCkpLHRoaXMuY2xvc2UoKSkpfTsNClgucHJvdG90eXBlLlM9ZnVuY3Rp
b24oKXt0aGlzLlNiKCkmJighUWkodGhpcyl8fCJJRlJBTUUiIT1kb2N1bWVudC5hY3RpdmVF
bGVtZW50LnRhZ05hbWUmJih0aGlzLlQmJl8ueWgoZG9jdW1lbnQuYWN0aXZlRWxlbWVudCxW
aSl8fF8uemgoZG9jdW1lbnQuYWN0aXZlRWxlbWVudCwiZ2JfeGMiKXx8Xy56aChkb2N1bWVu
dC5hY3RpdmVFbGVtZW50LCJnYl9EIil8fF8uQWkodGhpcy5vKSkpfTt2YXIgTmk9ZnVuY3Rp
b24oYSl7YS5qLkFhKGRvY3VtZW50LmJvZHksVWksYS5SLCExLGEpO2Euai5BYShkb2N1bWVu
dC5ib2R5LCJmb2N1c2luIixhLlMpfTtYLnByb3RvdHlwZS5YPWZ1bmN0aW9uKGEsYyl7dGhp
cy5PLnB1c2gobmV3IFdpKGEsYykpfTt2YXIgVWk9ImNsaWNrIG1vdXNlZG93biBzY3JvbGwg
dG91Y2hzdGFydCB3aGVlbCBrZXlkb3duIi5zcGxpdCgiICIpLFdpPWZ1bmN0aW9uKGEsYyl7
dGhpcy5PYT1hO3RoaXMuYj1jfTsNCl8uWGk9ZnVuY3Rpb24oYSl7Xy54aS5jYWxsKHRoaXMs
YSk7Xy5QKGEsImNsaWNrIix0aGlzLmIsITEsdGhpcyl9O18udyhfLlhpLF8ueGkpO18uWGku
cHJvdG90eXBlLmY9ZnVuY3Rpb24oKXt2YXIgYT10aGlzLkMoKS5nZXRBdHRyaWJ1dGUoImFy
aWEtcHJlc3NlZCIpO3JldHVybihudWxsPT1hP2E6ImJvb2xlYW4iPT09dHlwZW9mIGE/YToi
dHJ1ZSI9PWEpfHwhMX07Xy5YaS5wcm90b3R5cGUuYj1mdW5jdGlvbihhKXthPWEuYjt2YXIg
Yz1fLmlpKGEsInByZXNzZWQiKTtfLm9nKF8uVmcoYykpfHwidHJ1ZSI9PWN8fCJmYWxzZSI9
PWM/Xy5LZShhLCJwcmVzc2VkIiwidHJ1ZSI9PWM/ImZhbHNlIjoidHJ1ZSIpOmEucmVtb3Zl
QXR0cmlidXRlKCJhcmlhLXByZXNzZWQiKTt0aGlzLmRpc3BhdGNoRXZlbnQoImNsaWNrIil9
Ow0KXy5ZaT1mdW5jdGlvbigpe18udSgiZ2Jhci5JIixfLnhpKTtfLnhpLnByb3RvdHlwZS5p
YT1fLnhpLnByb3RvdHlwZS5DYTtfLnhpLnByb3RvdHlwZS5pYj1fLnhpLnByb3RvdHlwZS5D
O18ueGkucHJvdG90eXBlLmljPV8ueGkucHJvdG90eXBlLlo7Xy51KCJnYmFyLkoiLF8uS2kp
O18uS2kucHJvdG90eXBlLmphPV8uS2kucHJvdG90eXBlLnlhO18uS2kucHJvdG90eXBlLmpi
PV8uS2kucHJvdG90eXBlLlY7Xy51KCJnYmFyLksiLF8ueWkpO18udSgiZ2Jhci5MIixfLlhp
KTtfLlhpLnByb3RvdHlwZS5sYT1fLlhpLnByb3RvdHlwZS5mfTsNCnZhciBZPWZ1bmN0aW9u
KGEsYyxkLGUpe18uUi5jYWxsKHRoaXMpO3RoaXMuaj1hO18uVih0aGlzLmosImdiX01kIik7
dGhpcy5mPWM7dGhpcy5NPWQ7dGhpcy4kYT0iIjt0aGlzLlZiPWU7dGhpcy5EPXRoaXMuYj1u
dWxsO3RoaXMuTGE9dGhpcy5OPXRoaXMuWD0hMTt0aGlzLnRhPV8uSyhfLkQodGhpcy5mLDE2
KSwhMSk7dGhpcy5WPW5ldyBfLnBnKHRoaXMpO3RoaXMuQ2E9Xy5OKCJnYl9YYyIsdGhpcy5q
KTt0aGlzLlM9Xy5LKF8uRChjLDYpLCExKTt0aGlzLkRjPV8uTigiZ2JfMmMiLHRoaXMuQ2Ep
O3RoaXMudz1fLk4oImdiX05kIix0aGlzLmopO3RoaXMuTD1fLk4oImdiX1dkIix0aGlzLmop
Oyh0aGlzLiQ9Xy5LKF8uRCh0aGlzLmYsMjEpLCExKSkmJnRoaXMudyYmKHRoaXMuRWE9Xy5O
KCJnYl95ZSIsdGhpcy5qKSx0aGlzLlU9Xy5OKCJnYl9DZSIsdGhpcy5qKSx0aGlzLk89Xy5O
KCJnYl96ZSIsdGhpcy5qKSk7dGhpcy5GPV8uTigiZ2JfVWMiLHRoaXMuaik7dGhpcy5UPV8u
TigiZ2JfTGMiLA0KdGhpcy5qKTt0aGlzLnZkPV8uTigiZ2JfVmMiLHRoaXMuaik7dGhpcy5C
PV8uTigiZ2JfMGMiLHRoaXMuaik7dGhpcy5BPV8uTigiZ2JfWmQiLHRoaXMuaik7dGhpcy5a
PUFycmF5LnByb3RvdHlwZS5zbGljZS5jYWxsKF8ud2goImdiXzRkIix0aGlzLmopKTt0aGlz
LlI9ITE7dGhpcy55Yz1fLksoXy5EKHRoaXMuZiwxOSksITEpO3RoaXMud2M9Xy5LKF8uRCh0
aGlzLmYsMjApLCExKTthPVppKHRoaXMsITApO2M9WmkodGhpcywhMSk7dGhpcy5CYz1NYXRo
Lm1heChhLGMpO3RoaXMuVz1fLkQodGhpcy5mLDE1KTtkPV8uSmMoXy5CKHRoaXMuZiwzMCks
MCk7MCE9ZCYmJGkodGhpcyxkKTthPWFqKHRoaXMsYSxjKTt0aGlzLkc9bmV3IEZpKHRoaXMu
aixiaik7dGhpcy5oYz1fLkwoXy5CKHRoaXMuZiwzNykpO3RoaXMuYmM9Xy5MKF8uQih0aGlz
LmYsMzgpKTt0aGlzLnhjPV8uVCh0aGlzLmosImdiXzFkIik7dGhpcy5yZD1fLksoXy5EKHRo
aXMuZiwzOSkpO3RoaXMuJCYmdGhpcy53JiYodGhpcy5hYj0NCm5ldyBGaSh0aGlzLmosY2op
LHRoaXMuYWIuZigiY2F0YyIsdGhpcy5oYSx0aGlzKSx0aGlzLmhhKCksXy5zaCh0aGlzLlYs
dGhpcy5FYSxmdW5jdGlvbigpe3ZhciBmPXRoaXMuVSxnPSFfLlQoZiwiZ2JfdmEiKTtfLlco
ZiwiZ2JfdmEiLGcpfSkpO3RoaXMuQWM9Xy5LKF8uRCh0aGlzLmYsMSksITEpO3RoaXMuemM9
Xy5LKF8uRCh0aGlzLmYsNDApLCExKTtkaih0aGlzKTtlaih0aGlzLHRoaXMuRy5iKTt0aGlz
LkcuZigiY2F0YyIsdGhpcy5rYyx0aGlzKTtfLkQodGhpcy5mLDgpJiZkb2N1bWVudC5hZGRF
dmVudExpc3RlbmVyKCJzY3JvbGwiLCgwLF8udCkoZnVuY3Rpb24oKXtfLlcodGhpcy5qLCJn
Yl9QZCIsMDx3aW5kb3cuc2Nyb2xsWSl9LHRoaXMpKTtudWxsIT10aGlzLkEmJl8uRCh0aGlz
LmYsNykmJih0aGlzLm1hPW5ldyBGaSh0aGlzLkEsYSksdGhpcy5tYS5mKCJjYXRjIix0aGlz
LlNlLHRoaXMpLHRoaXMuU2UoKSl9O18udyhZLF8uUik7DQp2YXIgZmo9ImNsaWNrIG1vdXNl
ZG93biBzY3JvbGwgdG91Y2hzdGFydCB3aGVlbCBrZXlkb3duIi5zcGxpdCgiICIpLGJqPVt7
aWQ6ImdiX2thIixtYXg6NTk5fSx7aWQ6ImdiX1RkIixtYXg6MTAyM30se2lkOiJnYl9FYyJ9
XSxjaj1be2lkOntpZDoib25lUHJvZHVjdENvbnRyb2wiLHFlOjF9LG1heDozMjB9LHtpZDp7
aWQ6InR3b1Byb2R1Y3RDb250cm9sIixxZToyfSxtYXg6MzYwfSx7aWQ6e2lkOiJ0aHJlZVBy
b2R1Y3RDb250cm9sIixxZTozfSxtYXg6NDEwfSx7aWQ6SGl9XTtfLms9WS5wcm90b3R5cGU7
Xy5rLkM9ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy5qfTtfLmsuUmo9ZnVuY3Rpb24oYSl7dGhp
cy5EPWE7Z2oodGhpcyx0aGlzLlgpO2E9aGoodGhpcyk7MCE9YSYmaWoodGhpcyxhKX07Xy5r
LlNqPWZ1bmN0aW9uKGEsYyl7dGhpcy5EJiZWaCh0aGlzLkQsYSxjKX07DQpfLmsuT2o9ZnVu
Y3Rpb24oYSl7dGhpcy5VYihhfHx0aGlzLnJkPzE6MCk7dGhpcy5CYihhP3RoaXMuaGM6dGhp
cy5iYyk7dmFyIGM9Xy5OKCJnYl8xIik7bnVsbCE9YyYmXy5XKGMsImdiX2JlIixhKTt0aGlz
LmImJnRoaXMuemMmJl8uVyh0aGlzLmIuYiwiZ2JfQ2MiLGEpO18ucmQudWEoKS5iLnRoZW4o
ZnVuY3Rpb24oZCl7ZC4kaShhKX0pfTtfLmsuVGo9ZnVuY3Rpb24oYSl7dGhpcy5DYSYmKF8u
ZWcodGhpcy5EYyxhfHwiIiksXy5XKHRoaXMuQ2EsImdiX3ZhIiwhYSksdGhpcy5TPSEhYSxl
aih0aGlzLHRoaXMuRy5iKSl9O18uay5saj1mdW5jdGlvbigpe3JldHVybiBfLk4oImdiX2tl
Iix0aGlzLncpfTtfLmsuU2U9ZnVuY3Rpb24oKXtpZihudWxsIT10aGlzLm1hKXt2YXIgYT10
aGlzLm1hLmI7Mz09YT9qaih0aGlzLCExKToxPT1hP2pqKHRoaXMsITApOmpqKHRoaXMsImdi
X0VjIj09dGhpcy5HLmIpfX07DQp2YXIgamo9ZnVuY3Rpb24oYSxjKXtpZihfLkQoYS5mLDcp
JiYoIWEuUnx8Yykpe2lmKGEuVyl7dmFyIGQ9Xy5OKCJnYl9xZSIsYS5qKTtpZihkKXt2YXIg
ZT1fLk4oImdiX3JlIixhLmopLGY9ImdiX0VjIiE9YS5HLmJ8fGM/IiI6YS5CYysicHgiO18u
SmcoZCwibWluLXdpZHRoIixmKTtfLkpnKGUsIm1pbi13aWR0aCIsZil9fV8uVChhLkEsImdi
X0VlIikhPWMmJihfLlcoYS5BLCJnYl9FZSIsYyksYz9hLmRpc3BhdGNoRXZlbnQoInNmaSIp
OmEuZGlzcGF0Y2hFdmVudCgic2Z1IiksXy5XKF8uTigiZ2JfU2UiLGEuQSksImdiX0VlIixj
KSxjJiZhLmhhKCkpfX0sZGo9ZnVuY3Rpb24oYSl7dmFyIGM9Xy5yZC51YSgpO2Eud3x8UWgo
Yy5mLEVycm9yKCJGIikpO18uSyhfLkQoYS5mLDExKSl8fFFoKGMuRCxFcnJvcigiRyIpKTtf
LksoXy5EKGEuZiw3KSl8fFFoKGMuQixFcnJvcigiSCIpKTtfLksoXy5EKGEuZiwxMikpfHxR
aChjLncsRXJyb3IoIkkiKSk7Xy5LKF8uRChhLmYsMTMpKXx8DQpRaChjLkEsRXJyb3IoIkoi
KSk7Xy5LKF8uRChhLmYsNDEpKXx8UWgoYy5qLEVycm9yKCJLIikpfSxlaj1mdW5jdGlvbihh
LGMpe2lmKCFhLmImJmEudyl7dmFyIGQ9Xy5OKCJnYl9yYyIsYS5qKTtpZihkKXt2YXIgZT1f
Lk4oImdiX3hjIik7aWYoZSl7dmFyIGY9Xy5OKCJnYl91YyIpO2lmKGYpe3ZhciBnPV8uTigi
Z2JfdmMiKTtpZihnKXthLmI9bmV3IFgoZCxlLGYsZyxfLksoXy5EKGEuZiwxNiksITEpLF8u
SyhfLkQoYS5mLDkpLCExKSxfLksoXy5EKGEuZiwzMyksITEpKTthLmIuSCgib3BlbiIsYS51
YywhMSxhKTthLmIuSCgiY2xvc2UiLGEubGMsITEsYSk7YS5iLkgoIm1zYyIsYS52YywhMSxh
KTtzd2l0Y2goXy5CKGEuZiwzMikpe2Nhc2UgMTphLkooImJhY2siKTticmVhaztjYXNlIDI6
YS5KKCJjbG9zZSIpO2JyZWFrO2Nhc2UgMzphLkooIm5vbmUiKTticmVhaztkZWZhdWx0OmEu
SigiZGVmYXVsdCIpfV8uWWkoKTtfLnUoImdiYXIuQyIsWCk7WC5wcm90b3R5cGUuY2E9WC5w
cm90b3R5cGUuSGQ7DQpYLnByb3RvdHlwZS5jYj1YLnByb3RvdHlwZS5VZztYLnByb3RvdHlw
ZS5jYz1YLnByb3RvdHlwZS5YO1gucHJvdG90eXBlLmNkPVgucHJvdG90eXBlLkVhO1gucHJv
dG90eXBlLmNlPVgucHJvdG90eXBlLlRnO1gucHJvdG90eXBlLmNmPVgucHJvdG90eXBlLmRm
O1gucHJvdG90eXBlLmNnPVgucHJvdG90eXBlLmNsb3NlO1gucHJvdG90eXBlLmNoPVgucHJv
dG90eXBlLiQ7WC5wcm90b3R5cGUuY2k9WC5wcm90b3R5cGUuV2o7WC5wcm90b3R5cGUuY2o9
WC5wcm90b3R5cGUuSmk7WC5wcm90b3R5cGUuY2s9WC5wcm90b3R5cGUuU2I7WC5wcm90b3R5
cGUuY2w9WC5wcm90b3R5cGUuTWo7WC5wcm90b3R5cGUuY209WC5wcm90b3R5cGUuamo7Xy51
KCJnYmFyLkQiLExpKTtMaS5wcm90b3R5cGUuZGE9TGkucHJvdG90eXBlLlZnO0xpLnByb3Rv
dHlwZS5kYj1MaS5wcm90b3R5cGUuV2c7TGkucHJvdG90eXBlLmRjPUxpLnByb3RvdHlwZS5k
ajtMaS5wcm90b3R5cGUuZGQ9TGkucHJvdG90eXBlLmVqOw0KXy51KCJnYmFyLkUiLElpKTtJ
aS5wcm90b3R5cGUuZWE9SWkucHJvdG90eXBlLkM7SWkucHJvdG90eXBlLmViPUlpLnByb3Rv
dHlwZS5uZDtJaS5wcm90b3R5cGUuZWM9SWkucHJvdG90eXBlLmZqO0lpLnByb3RvdHlwZS5l
ZD1JaS5wcm90b3R5cGUuR2Q7Xy51KCJnYmFyLkYiLEppKTtKaS5wcm90b3R5cGUuZmE9Smku
cHJvdG90eXBlLmlqO0ppLnByb3RvdHlwZS5mYj1KaS5wcm90b3R5cGUuaGo7SmkucHJvdG90
eXBlLmZjPUppLnByb3RvdHlwZS5RajtKaS5wcm90b3R5cGUuZmQ9SmkucHJvdG90eXBlLnZn
O0ppLnByb3RvdHlwZS5lZD1KaS5wcm90b3R5cGUuR2Q7Xy5xZChfLnJkLnVhKCkuZixhLmIp
fWVsc2UgYS5NLmxvZyhFcnJvcigiQiIpKX1lbHNlIGEuTS5sb2coRXJyb3IoIkMiKSl9ZWxz
ZSBhLk0ubG9nKEVycm9yKCJEIikpfWVsc2UgYS5NLmxvZyhFcnJvcigiRSIpKX1hLmImJiFh
Lk4mJmEuSigiZGVmYXVsdCIpO2EuYiYmYS53YyYmYS5KKCJub25lIik7a2ooYSk7YS55Y3x8
DQphLnRhP2EuWD0hMDooZD0iZ2Jfa2EiPT1jLGU9Xy5LKF8uRChhLmYsNSksITEpLGY9Xy5L
KF8uRChhLmYsNyksITEpLGEuWD0hKGEuU3x8ZCYmKGV8fGYpKSk7ZD1saihhLGMpO2EuYiYm
ZD9fLm1qKGEpfHxudWxsPT1hLlR8fChkPV8uTigiZ2JfS2MiKSxhLlQucGFyZW50Tm9kZSE9
ZCYmZC5pbnNlcnRCZWZvcmUoYS5ULGQuY2hpbGROb2Rlc1swXXx8bnVsbCksXy5VKGEuRiwi
Z2JfMGQiKSxhLlkoKSxhLmRpc3BhdGNoRXZlbnQoInVwaSIpKTpfLm1qKGEpJiZhLncmJm51
bGwhPWEuVCYmKGQ9YS52ZCxkLmluc2VydEJlZm9yZShhLlQsZC5jaGlsZE5vZGVzWzBdfHxu
dWxsKSxfLlYoYS5GLCJnYl8wZCIpLGEuWSgpLGEuZGlzcGF0Y2hFdmVudCgidXBvIikpO2Q9
ImdiX2thIj09YzthLkQmJiFhLnRhJiYoZT1hLkQuQygpLGY9IWEuUyxfLlcoZSwiZ2JfdmEi
LCFmKSxmJiZnaihhLGEuWCkpO2EuYiYmKGEuYi5pc1Zpc2libGUoIm1lbnUiKXx8YS5iLmlz
VmlzaWJsZSgiYmFjayIpKSYmDQohUWkoYS5iKSYmKGEuTGE9YS5iLlNiKCkpO2U9Xy5jZyhH
aSk7Xy5waChhLmosZSk7Xy5VKGEuaixjKTtfLkQoYS5mLDcpO2EuVyYmbnVsbCE9YS5CJiYo
ImdiX0VjIiE9Yz8oXy5KZyhhLkIsIm1pbi13aWR0aCIsIiIpLF8uSmcoYS5GLCJtaW4td2lk
dGgiLCIiKSk6KGY9Xy5TZyhhLkIpLndpZHRoLGc9Xy5TZyhhLkYpLndpZHRoLGY9TWF0aC5t
YXgoZixnKSxfLkpnKGEuQiwibWluLXdpZHRoIixmKyJweCIpLF8uSmcoYS5GLCJtaW4td2lk
dGgiLGYrInB4IikpKTtkP2EuUnx8KGEuUj0hMCxqaihhLGEuUikpOihhLlI9ITEsYS5TZSgp
KTtudWxsIT1hLkEmJihmPSJnYl9UZCI9PWMsXy5XKGEuQSwiZ2JfTGUiLCFkJiYhZiksXy5X
KGEuQSwiZ2JfS2UiLGR8fGYpKTthLmImJihkPWEuYi5iLF8ucGgoZCxlKSxfLlUoZCxjKSxR
aShhLmIpP18uTigiZ2JfOGQiLHZvaWQgMCkuYXBwZW5kQ2hpbGQoZCk6YS5qLmFwcGVuZENo
aWxkKGQpLGEuYi5pc1Zpc2libGUoIm1lbnUiKXx8YS5iLmlzVmlzaWJsZSgiYmFjayIpKSYm
DQooYz0hUWkoYS5iKSxkPWEuYi5TYigpLGMmJiFkJiZhLkxhP2EuYi5kZigpOiFjJiZkJiZh
LmIuY2xvc2UoKSk7Xy5uaihhKX0sZ2o9ZnVuY3Rpb24oYSxjKXt2YXIgZD1fLk4oImdiX2xh
IixhLkQuQygpKTtfLlcoZCwiZ2JfdmEiLCFjKTthPV8uTigiZ2JfNmQiLGEuRC5DKCkpO251
bGwhPWEmJl8uVyhhLCJnYl9qZSIsIWMpfSxhaj1mdW5jdGlvbihhLGMsZCl7dmFyIGU9MzIw
LGY9Xy5KYyhfLkIoYS5mLDI5KSwwKTswPGYmJihlPWYpO2Y9ZSsyKk1hdGgubWF4KGMsZCk7
Yz1lK2MrZDtyZXR1cm4gZiE9YyYmYS5XP1t7aWQ6MSxtYXg6Y30se2lkOjIsbWF4OmZ9LHtp
ZDozfV06W3tpZDoxLG1heDpjfSx7aWQ6M31dfSxaaT1mdW5jdGlvbihhLGMpe2lmKGE9Xy5O
KGM/ImdiX3FlIjoiZ2JfcmUiLGEuaikpe3ZhciBkPWEub2Zmc2V0V2lkdGg7KDAsXy5MYSko
YS5jaGlsZHJlbixmdW5jdGlvbihlKXtfLlQoZSwiZ2JfdmEiKSYmKGQtPWUub2Zmc2V0V2lk
dGgpfSk7cmV0dXJuIGR9cmV0dXJuIDB9LA0Kb2o9ZnVuY3Rpb24oYSl7cmV0dXJuIGZ1bmN0
aW9uKCl7YS5jbGljaygpfX0scGo9ZnVuY3Rpb24oYSl7dmFyIGM9Xy5OKCJnYl9xZSIsYS5q
KSxkPV8uTigiZ2JfcmUiLGEuaiksZT1bXTtjJiYoMCxfLkxhKShjLmNoaWxkcmVuLGZ1bmN0
aW9uKGYpe2UucHVzaChmKX0pO18uSyhfLkQoYS5mLDcpLCExKSYmKGE9Xy5OKCJnYl9FZSIs
YS5BKSkmJihhPV8uTigiZ2JfbWYiLGEpLGEuYj0hMCxlLnB1c2goYSkpO2QmJigwLF8uTGEp
KGQuY2hpbGRyZW4sZnVuY3Rpb24oZil7ZS5wdXNoKGYpfSk7cmV0dXJuIGV9Ow0KWS5wcm90
b3R5cGUuaGE9ZnVuY3Rpb24oKXtpZih0aGlzLiQmJnRoaXMudyl7dmFyIGE9cGoodGhpcyks
Yz0hMTthPSgwLF8uTWEpKGEsZnVuY3Rpb24oZyl7Yz1jfHxfLlQoZywiZ2JfdGUiKTtyZXR1
cm4gXy5UKGcsImdiX3BiIil8fF8uVChnLCJnYl9FZiIpfHxfLlQoZywiZ2JfbWYiKX0pO3Zh
ciBkPXRoaXMuYWIuYi5xZSxlPSExO2lmKGEubGVuZ3RoPmR8fGMpZT0hMCxkLS07dmFyIGY9
YS5sZW5ndGgtZDtpZihlIT0hXy5UKHRoaXMuRWEsImdiX3ZhIil8fGYhPXRoaXMuTy5jaGls
ZHJlbil7Xy5XKHRoaXMuRWEsImdiX3ZhIiwhZSk7aWYoZSlmb3IoO3RoaXMuTy5maXJzdENo
aWxkOyl0aGlzLk8ucmVtb3ZlQ2hpbGQodGhpcy5PLmZpcnN0Q2hpbGQpO3FqKHRoaXMsYSxk
KTtlP3RoaXMuVi5vKGRvY3VtZW50LmJvZHksZmosdGhpcy5LYSwhMCx0aGlzKTp0aGlzLlYu
QWEoZG9jdW1lbnQuYm9keSxmaix0aGlzLkthLCExLHRoaXMpfX19Ow0KdmFyIHFqPWZ1bmN0
aW9uKGEsYyxkKXtjPSgwLF8uTWEpKGMsZnVuY3Rpb24oZyl7cmV0dXJuIF8uVChnLCJnYl90
ZSIpPyhyaih0aGlzLGcpLCExKTohMH0sYSk7Zm9yKHZhciBlPTA7ZTxjLmxlbmd0aDtlKysp
e3ZhciBmPWNbZV07ZT49ZD9yaihhLGYpOl8uVihmLCJnYl92YSIpfX0scmo9ZnVuY3Rpb24o
YSxjKXtfLlUoYywiZ2JfdmEiKTt2YXIgZD1fLkJlKCJMSSIpO18ub2goZCxbImdiX0FlIiwi
Z2JfTWMiLCJnYl9TYyJdKTtfLmZpKGQsITApO18uc2goYS5WLGQsb2ooYykpO3ZhciBlPV8u
eGUoIkEiLCJnYl9QYyIpO2QuYXBwZW5kQ2hpbGQoZSk7dmFyIGY9Xy54ZSgiU1BBTiIsImdi
X1FjIik7ZS5hcHBlbmRDaGlsZChmKTtlPWMuYj9jLmdldEF0dHJpYnV0ZSgiYXJpYS1sYWJl
bCIpOmMudGl0bGU7Xy5lZyhmLGUpO2U9ITE7Xy5UKGMsImdiX0VmIikmJihlPSEwKTt2YXIg
ZyxoPWMuY2hpbGRyZW5bMF07ZT9nPWguY2hpbGRyZW5bMF0uY2hpbGRyZW5bMF0uc3JjOmMu
Yj9nPQ0KImh0dHBzOi8vd3d3LmdzdGF0aWMuY29tL2ltYWdlcy9pY29ucy9tYXRlcmlhbC9z
eXN0ZW0vMXgvc2VhcmNoX2JsYWNrXzI0ZHAucG5nIjpnPWguc3JjO2Eubz1fLnhlKCJJTUci
KTtfLm9oKGEubyxbImdiX1JjIiwiZ2JfQmUiXSk7YS5vLnNldEF0dHJpYnV0ZSgic3JjIixn
KTtfLlNoKGEubyxmKTthLk8uYXBwZW5kQ2hpbGQoZCl9O1kucHJvdG90eXBlLkthPWZ1bmN0
aW9uKGEpeyFfLlQodGhpcy5VLCJnYl92YSIpJiZhLnRhcmdldCBpbnN0YW5jZW9mIE5vZGUm
Jigia2V5ZG93biI9PWEudHlwZT8yNz09YS5rZXlDb2RlJiYoYS5wcmV2ZW50RGVmYXVsdCgp
LGEuc3RvcFByb3BhZ2F0aW9uKCksXy5VKHRoaXMuVSwiZ2JfdmEiKSx0aGlzLkMoKS5mb2N1
cygpKTpfLkdlKHRoaXMuVSxhLnRhcmdldCl8fCgidG91Y2hzdGFydCI9PWEudHlwZSYmKGEu
cHJldmVudERlZmF1bHQoKSxhLnN0b3BQcm9wYWdhdGlvbigpKSxfLlUodGhpcy5VLCJnYl92
YSIpKSl9Ow0KWS5wcm90b3R5cGUua2M9ZnVuY3Rpb24oKXtlaih0aGlzLHRoaXMuRy5iKTt0
aGlzLmImJl8uc2oodGhpcyx0aGlzLmIuU2IoKSwhMSk7dGhpcy5kaXNwYXRjaEV2ZW50KCJm
ZmMiKX07Xy5zaj1mdW5jdGlvbihhLGMsZCl7YS5iJiYoUWkoYS5iKSYmKGM9ITEpLGE9ZG9j
dW1lbnQuYm9keSxfLlcoYSwiZ2Jfb2UiLGMpLF8uVyhhLCJnYl9uZSIsZCkpfTtZLnByb3Rv
dHlwZS51Yz1mdW5jdGlvbigpe18uc2oodGhpcywhMCwhMCl9O1kucHJvdG90eXBlLmxjPWZ1
bmN0aW9uKCl7Xy5zaih0aGlzLCExLCEwKX07WS5wcm90b3R5cGUudmM9ZnVuY3Rpb24oKXt2
YXIgYT1RaSh0aGlzLmIpLGM9dGhpcy5iLmI7YT9fLk4oImdiXzhkIix2b2lkIDApLmFwcGVu
ZENoaWxkKGMpOnRoaXMuai5hcHBlbmRDaGlsZChjKX07Xy5taj1mdW5jdGlvbihhKXtyZXR1
cm4hIWEuYiYmXy5UKGEuRiwiZ2JfMGQiKX07DQpZLnByb3RvdHlwZS5KPWZ1bmN0aW9uKGEp
e3ZhciBjPSExO3N3aXRjaChhKXtjYXNlICJiYWNrIjp0aGlzLk49ITA7U2kodGhpcy5iKTtS
aSh0aGlzLmIsImJhY2siKTtjPSEwO2JyZWFrO2Nhc2UgImNsb3NlIjp0aGlzLk49ITA7U2ko
dGhpcy5iKTtSaSh0aGlzLmIsImNsb3NlIik7Yz0hMDticmVhaztjYXNlICJkZWZhdWx0Ijp0
aGlzLk49ITE7bGoodGhpcyx0aGlzLkcuYil8fHRoaXMuQWM/KHRoaXMuYiYmIXRoaXMuYi5p
c1Zpc2libGUoIm1lbnUiKSYmKFNpKHRoaXMuYiksUmkodGhpcy5iLCJtZW51IikpLGM9ITAp
Oih0aGlzLmImJnRoaXMuYi5pc1Zpc2libGUoImJhY2siKSYmU2kodGhpcy5iKSx0aGlzLmIm
JnRoaXMuYi5pc1Zpc2libGUoIm1lbnUiKT8oYT10aGlzLmIsYS5jbG9zZSgpLF8uVShhLkMo
KSwiZ2JfdmEiKSxUaShhLncpJiZfLlYoYS5DKCksImdiX3djIikpOihhPV8uTigiZ2JfcmMi
LHRoaXMuaikpJiZfLlUoYSwiZ2JfdmEiKSxjPSExKTticmVhaztjYXNlICJub25lIjp0aGlz
Lk49DQohMCxTaSh0aGlzLmIpLGM9ITF9bnVsbCE9dGhpcy5CJiZfLlcodGhpcy5CLCJnYl8x
YyIsYyl9O3ZhciBsaj1mdW5jdGlvbihhLGMpe3ZhciBkPSJnYl9rYSI9PWM7Yz0iZ2JfVGQi
PT1jO3ZhciBlPV8uSyhfLkQoYS5mLDUpLCExKSxmPV8uSyhfLkQoYS5mLDIpLCExKTtyZXR1
cm4hKF8uSyhfLkQoYS5mLDEwKSwhMSl8fGEudGEpJiZmJiYoZHx8YyYmKGV8fGEuUykpfTtZ
LnByb3RvdHlwZS5nZXRIZWlnaHQ9ZnVuY3Rpb24oKXt2YXIgYT10aGlzLmoub2Zmc2V0SGVp
Z2h0O2lmKHRoaXMueGMpe3ZhciBjPV8uTigiZ2JfSWQiKTtjJiYoYSs9Yy5vZmZzZXRIZWln
aHQpfXJldHVybiBhfTtfLm5qPWZ1bmN0aW9uKGEpe3ZhciBjPWEuZ2V0SGVpZ2h0KCkrInB4
IjthLiRhIT1jJiYoYS4kYT1jLGEuVmImJihhLlZiLnN0eWxlLmhlaWdodD1jKSxhLmRpc3Bh
dGNoRXZlbnQoInJlc2l6ZSIpKX07WS5wcm90b3R5cGUuQ2M9ZnVuY3Rpb24oKXt0aGlzLkwm
Jl8ubmoodGhpcyl9Ow0KWS5wcm90b3R5cGUueWE9ZnVuY3Rpb24oKXtpZighdGhpcy5MKXt2
YXIgYT1fLkJlKCJESVYiKTtfLm9oKGEsWyJnYl9XZCIsImdiXzRkIl0pO3RqKGEsaGoodGhp
cykpO2Euc3R5bGUuYmFja2dyb3VuZENvbG9yPXRoaXMuai5zdHlsZS5iYWNrZ3JvdW5kQ29s
b3I7dGhpcy5aLnB1c2goYSk7Xy54aChhLHRoaXMudyk7dGhpcy5MPWF9cmV0dXJuIHRoaXMu
TH07WS5wcm90b3R5cGUuRWM9ZnVuY3Rpb24oKXtfLkRlKHRoaXMuTCk7dGhpcy5MPW51bGw7
Xy5uaih0aGlzKX07WS5wcm90b3R5cGUuVWI9ZnVuY3Rpb24oYSl7Mj09YSYmKGE9MCk7Zm9y
KHZhciBjPTA7Yzx0aGlzLloubGVuZ3RoO2MrKyl0aih0aGlzLlpbY10sYSk7aWoodGhpcyxh
KX07DQp2YXIgaWo9ZnVuY3Rpb24oYSxjKXtpZihhLkQpe2lmKDI9PWMpe2M9Xy5MKF8uQihh
LmYsMjQpLCIiKTt2YXIgZD1fLkwoXy5CKGEuZiwyNyksIiIpfWVsc2UgMT09Yz8oYz1fLkwo
Xy5CKGEuZiwyMyksIiIpLGQ9Xy5MKF8uQihhLmYsMjYpLCIiKSk6KGM9Xy5MKF8uQihhLmYs
MjIpLCIiKSxkPV8uTChfLkIoYS5mLDI1KSwiIikpOyIiPT1jJiYiIj09ZHx8VmgoYS5ELGMs
ZCl9fSxoaj1mdW5jdGlvbihhKXthPWEuWlswXTtyZXR1cm4gYS5jbGFzc0xpc3QuY29udGFp
bnMoImdiX3NjIik/MTphLmNsYXNzTGlzdC5jb250YWlucygiZ2JfNWQiKT8yOjB9LHRqPWZ1
bmN0aW9uKGEsYyl7Xy5waChhLFsiZ2JfNWQiLCJnYl9zYyJdKTsxPT1jP18uVShhLCJnYl9z
YyIpOjI9PWMmJl8uVShhLCJnYl81ZCIpfTtZLnByb3RvdHlwZS5CYj1mdW5jdGlvbihhKXt0
aGlzLmouc3R5bGUuYmFja2dyb3VuZENvbG9yPWF9O1kucHJvdG90eXBlLmpjPWZ1bmN0aW9u
KCl7cmV0dXJuIHRoaXMuai5zdHlsZS5iYWNrZ3JvdW5kQ29sb3J9Ow0KWS5wcm90b3R5cGUu
WT1mdW5jdGlvbigpe3ZhciBhPV8uV2MoImRkIik7Xy5OaChhKSYmXy5OaChhKS5zZSghMSk7
Xy5XaChhLG51bGwpfTtZLnByb3RvdHlwZS5zZD1mdW5jdGlvbihhKXskaSh0aGlzLGEtOC0x
MCk7a2oodGhpcyl9O3ZhciAkaT1mdW5jdGlvbihhLGMpe251bGw9PWEuQT9hLk0ubG9nKEVy
cm9yKCJNIikpOmEuVz9hLk0ubG9nKEVycm9yKCJOIikpOmEuR2I9MD5jPzA6Y30sa2o9ZnVu
Y3Rpb24oYSl7bnVsbCE9YS5CJiYoImdiX2thIj09YS5HLmI/Xy5KZyhhLkIsIm1pbi13aWR0
aCIsIiIpOm51bGwhPWEuR2ImJl8uSmcoYS5CLCJtaW4td2lkdGgiLGEuR2IrInB4IikpfTtZ
LnByb3RvdHlwZS51ZD1mdW5jdGlvbihhKXtfLlcoXy5OKCJnYl9sYyIsdGhpcy53KSwiZ2Jf
dmEiLCFhKX07WS5wcm90b3R5cGUucWQ9ZnVuY3Rpb24oYSl7aWYoYSl7dmFyIGM9Xy5OKCJn
Yl8xIik7bnVsbCE9YyYmXy5QaChjLGEpO18ucmQudWEoKS5iLnRoZW4oZnVuY3Rpb24oZCl7
ZC5FZyhhKX0pfX07DQp2YXIgdWo9ZnVuY3Rpb24oYSxjKXtjLnhhPWMudHlwZTtjLnhiPWMu
dGFyZ2V0O3JldHVybiBhLmNhbGwodGhpcyxjKX07DQp2YXIgdmo7Xy5SLnByb3RvdHlwZS56
YT1fLlFkKGZ1bmN0aW9uKGEsYyxkLGUsZil7cmV0dXJuIGEuY2FsbCh0aGlzLGMsXy5RZCh1
aixkKSxlLGYpfSxfLlIucHJvdG90eXBlLkgpO18uUi5wcm90b3R5cGUuemI9Xy5SLnByb3Rv
dHlwZS56ZDt2YXIgd2o9Xy5OKCJnYl9qYSIpOw0KaWYobnVsbD09d2opdmo9bnVsbDtlbHNl
e3ZhciB4aj1fLkcoXy50ZCxSaCw2KXx8bmV3IFJoLHlqPW5ldyBZKHdqLHhqLF8uTSxfLk4o
ImdiX1FkIikpO18udSgiZ2Jhci5QIixZKTtZLnByb3RvdHlwZS5wYT1ZLnByb3RvdHlwZS5n
ZXRIZWlnaHQ7WS5wcm90b3R5cGUucGI9WS5wcm90b3R5cGUuVGo7WS5wcm90b3R5cGUucGM9
WS5wcm90b3R5cGUuVWI7WS5wcm90b3R5cGUucGQ9WS5wcm90b3R5cGUuQmI7WS5wcm90b3R5
cGUucGU9WS5wcm90b3R5cGUueWE7WS5wcm90b3R5cGUucGY9WS5wcm90b3R5cGUuQ2M7WS5w
cm90b3R5cGUucGc9WS5wcm90b3R5cGUuRWM7WS5wcm90b3R5cGUucGg9WS5wcm90b3R5cGUu
bGo7WS5wcm90b3R5cGUucGk9WS5wcm90b3R5cGUuWTtZLnByb3RvdHlwZS5waj1ZLnByb3Rv
dHlwZS5zZDtZLnByb3RvdHlwZS5waz1ZLnByb3RvdHlwZS51ZDtZLnByb3RvdHlwZS5wbD1Z
LnByb3RvdHlwZS5xZDtZLnByb3RvdHlwZS5wbT1ZLnByb3RvdHlwZS5KO1kucHJvdG90eXBl
LnBuPQ0KWS5wcm90b3R5cGUuamM7WS5wcm90b3R5cGUucG89WS5wcm90b3R5cGUuU2o7WS5w
cm90b3R5cGUucHA9WS5wcm90b3R5cGUuT2o7Xy5xZChfLnJkLnVhKCkubyx5aik7dmo9eWp9
Xy56aj12ajsNCg0KfWNhdGNoKGUpe18uX0R1bXBFeGNlcHRpb24oZSl9DQp0cnl7DQp2YXIg
QWo9ZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLmdiX0VhIC5nYl9CIiksQmo9ZG9jdW1lbnQu
cXVlcnlTZWxlY3RvcigiI2diLmdiX0FjIik7QWomJiFCaiYmXy5OZChfLnlkLEFqLCJjbGlj
ayIpOw0KDQp9Y2F0Y2goZSl7Xy5fRHVtcEV4Y2VwdGlvbihlKX0NCnRyeXsNCihmdW5jdGlv
bigpe2Zvcih2YXIgYT1kb2N1bWVudC5xdWVyeVNlbGVjdG9yQWxsKCIuZ2JfbmMiKSxjPTA7
YzxhLmxlbmd0aDtjKyspXy5OZChfLnlkLGFbY10sImNsaWNrIik7Xy5yZC51YSgpLm8udGhl
bihmdW5jdGlvbihkKXtpZihkKXt2YXIgZT1fLk4oImdiX2xjIixkLncpO2UmJihlPW5ldyBf
LkxoKGUsXy5NLF8ueGQpLGQuUmooZSkpfX0pfSkoKTsNCg0KfWNhdGNoKGUpe18uX0R1bXBF
eGNlcHRpb24oZSl9DQp9KSh0aGlzLmdiYXJfKTsNCi8vIEdvb2dsZSBJbmMuDQo8L3Njcmlw
dD48Yy13aXoganNyZW5kZXJlcj0iVFlZeE9lIiBjbGFzcz0ielFUbWlmIFNTUEdLZiBNQlJ6
U2UiIGRhdGEtb2dwYz0iIiBqc2RhdGE9ImRlZmVycmVkLWkxIiBkYXRhLXA9IiUuQC5udWxs
LG51bGwsbnVsbCxudWxsLG51bGwsWyZxdW90Oy0zNTM3NTc4NTE0MzgzMzIzMTgxJnF1b3Q7
LDI3LDFdDQpdDQoiIGRhdGEtbm9kZS1pbmRleD0iMDswIiBqc21vZGVsPSJoYzZVYmQiIHZp
ZXc9IiIgZGF0YS12aWV3LWluc3RhbmNlLWlkPSIvYWxlcnQsL2FsZXJ0Lzp0eXBlLzppZC1W
MCI+PGRpdiBjbGFzcz0iVDRMZ05iIiBqc25hbWU9ImE5a3h0ZSI+PGRpdiBjbGFzcz0iVmpG
WHoiPjwvZGl2PjxjLXdpeiBqc3JlbmRlcmVyPSJZSlNHd2QiIGpzc2hhZG93PSIiIGpzZGF0
YT0iZGVmZXJyZWQtaTIiIGRhdGEtcD0iJS5ALm51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxu
dWxsLG51bGwsbnVsbCxmYWxzZSxbJnF1b3Q7LTM1Mzc1Nzg1MTQzODMzMjMxODEmcXVvdDss
MjcsMV0NCl0NCiIgZGF0YS1ub2RlLWluZGV4PSIxOzAiIGpzbW9kZWw9ImhjNlViZCI+PGRp
diBjbGFzcz0iQ0RVYXRiIj48ZGl2IGNsYXNzPSJWZlBwa2QtV3NqWXdjIEtDMWRRICB5ZnpU
R2YiIGpzY29udHJvbGxlcj0ia1pzZ3FkIiBqc2FjdGlvbj0iSklidVFjOmdXM1FkYyx5VHF6
d2QoajZMblllKSxNODF5cGMobGNhd3llKSxVUEJUZWIobFZPVERlKSxFOGdkdmIoYnpaVWtl
KSxiWGVWVGMoR2VHSEtiKTtyY3VRNmI6bnBUMm1kOyIganNkYXRhPSJ6eHJzM2U7MTU3MjM0
NTM1NTAwMDs1IHozbTJFO187MyBrU1FSZmM7Xzs0IENPQkpjZDtfOzIgbU40c1o7XzsxIj48
ZGl2IGpzbmFtZT0iRzBiclJlIj48ZGl2PjwvZGl2PjwvZGl2PjxkaXYganNuYW1lPSJiTjk3
UGMiIGFyaWEtbGl2ZT0icG9saXRlIiBjbGFzcz0iaGpoZjJlIj48ZGl2IGNsYXNzPSJpZGE4
aWMgaG1BelNlIj48ZGl2IGNsYXNzPSJDQ2Y0bWMiPjxpIGNsYXNzPSJnb29nbGUtbWF0ZXJp
YWwtaWNvbnMgdU9sZ1djIiBhcmlhLWhpZGRlbj0idHJ1ZSI+ZXJyb3I8L2k+PC9kaXY+PGRp
diBjbGFzcz0idUNTc0ciPjxkaXYgY2xhc3M9IkFxQ3ZJZiI+QWxlcnRlIGRlIHPDqWN1cml0
w6kgY3JpdGlxdWU8L2Rpdj48L2Rpdj48L2Rpdj48ZGl2IGNsYXNzPSJITWRBdWMgUEtrc3hm
Ij48aDEgY2xhc3M9Im5vNm9KZSI+TCdhY2PDqHMgw6Agdm90cmUgY29tcHRlIHBhciB1bmUg
YXBwbGljYXRpb24gc3VzcGVjdGUgYSDDqXTDqSBibG9xdcOpPC9oMT48ZGl2IGNsYXNzPSJJ
QWd4NWIiPjxpbWcgc3JjPSJBbGVydGUlMjBkZSUyMHMlQzMlQTljdXJpdCVDMyVBOSUyMGNy
aXRpcXVlX2ZpY2hpZXJzL0FBdUU3bUNGWUp0alh3VF9tNHBpVUtZOHQ5V012TEh1ckRNYVZi
a0djcWRlczIwLWMuanBnIiBjbGFzcz0iY3czaFdiIj5hbGV4YW5kcnUucGV0cmVzY3VAZ21h
aWwuY29tPC9kaXY+PGRpdiBjbGFzcz0icTNQNDFiIj5Hb29nbGUNCiBhIGVtcMOqY2jDqSBx
dWVscXUndW4gZGUgc2UgY29ubmVjdGVyIMOgIHZvdHJlIGNvbXB0ZSDDoCBsJ2FpZGUgZCd1
bmUgDQphcHBsaWNhdGlvbiBuJ2FwcGFydGVuYW50IHBhcyDDoCBHb29nbGUuIFNpIGNlIG4n
w6l0YWl0IHBhcyB2b3VzLCBjZWxhIA0Kc2lnbmlmaWUgcXVlIHF1ZWxxdSd1biBkJ2F1dHJl
IGNvbm5hw650IHZvdHJlIG1vdCBkZSBwYXNzZS4gTm91cyB2b3VzIA0KY29uc2VpbGxvbnMg
ZG9uYyBkZSBsZSBtb2RpZmllciBpbW3DqWRpYXRlbWVudC48L2Rpdj48ZGl2IGNsYXNzPSJH
T1FQOGMiPjxkaXYgY2xhc3M9InY2UmkzZCIgcm9sZT0ibGlzdCI+PGRpdiByb2xlPSJsaXN0
aXRlbSIgY2xhc3M9IlNDWUpZYyI+PHNwYW4gY2xhc3M9IkRQdndZYyIgYXJpYS1oaWRkZW49
InRydWUiPjxkaXYgY2xhc3M9IkZBeVZjZCI+7oy5PC9kaXY+PC9zcGFuPjxkaXYgY2xhc3M9
ImdJcFkyYiI+PGRpdiBjbGFzcz0iaWVnanBjIj5BcHBhcmVpbCBub24gcmVjb25udTwvZGl2
PjwvZGl2PjwvZGl2PjxkaXYgcm9sZT0ibGlzdGl0ZW0iIGNsYXNzPSJTQ1lKWWMiIGpzbmFt
ZT0id015R3NlIj48c3BhbiBjbGFzcz0iRFB2d1ljIiBhcmlhLWhpZGRlbj0idHJ1ZSI+PGRp
diBjbGFzcz0iRkF5VmNkIj7uorU8L2Rpdj48L3NwYW4+PGRpdiBjbGFzcz0iZ0lwWTJiIj48
ZGl2IGNsYXNzPSJpZWdqcGMiPklsIHkgYSAxNyZuYnNwO21pbnV0ZXM8L2Rpdj48L2Rpdj48
L2Rpdj48ZGl2IHJvbGU9Imxpc3RpdGVtIiBjbGFzcz0iU0NZSlljIj48c3BhbiBjbGFzcz0i
RFB2d1ljIiBhcmlhLWhpZGRlbj0idHJ1ZSI+PGRpdiBjbGFzcz0iRkF5VmNkIj7ug4g8L2Rp
dj48L3NwYW4+PGRpdiBjbGFzcz0iZ0lwWTJiIj48ZGl2IGNsYXNzPSJpZWdqcGMiPsOAIHBy
b3hpbWl0w6kgZGUgIlZpbGxlLCBGcmFuY2UiPC9kaXY+PGRpdiBjbGFzcz0iTjJWNmljIj48
c3BhbiBjbGFzcz0iWVZsTnpmIj4yYTAxOlg6WTpjZTEwOjpiNGNjOjhlYjk8L3NwYW4+IDxz
cGFuIGNsYXNzPSJidjU4OGUiPjxzcGFuPihhZHJlc3NlJm5ic3A7SVApPC9zcGFuPiZuYnNw
OzxzcGFuIGpzY29udHJvbGxlcj0iV0VUNTUiIGpzYWN0aW9uPSJKSWJ1UWM6Rkw5YUllKExn
YnNTZSkiIGNsYXNzPSJnYnJMR2UgSUFQUWVlIiBpZD0ib3cyNCIgX19pc19vd25lcj0idHJ1
ZSI+PGJ1dHRvbiBjbGFzcz0iVmZQcGtkLUJ6MTEyYy1MZ2JzU2UgeUh5MXJjIHphUW5tZiBt
QW96QWMgY0gzYnpiIiBqc2NvbnRyb2xsZXI9IllvOVJ6ZSIganNhY3Rpb249ImNsaWNrOmNP
dUNnZDsgbW91c2Vkb3duOlVYN3laOyBtb3VzZXVwOmxic0Q3ZTsgbW91c2VlbnRlcjp0Zk8x
WWM7IG1vdXNlbGVhdmU6Snl3R3VlOyB0b3VjaHN0YXJ0OnA2cDJIOyB0b3VjaG1vdmU6Rnd1
Tm5mOyB0b3VjaGVuZDp5ZnFCeGM7IHRvdWNoY2FuY2VsOkpNdFJqZDsgZm9jdXM6QUhtdXdl
OyBibHVyOk8yMnAzZTsgY29udGV4dG1lbnU6bWc5UGVmOyIganNuYW1lPSJMZ2JzU2UiIGFy
aWEtbGFiZWw9IlBsdXMgZGUgZMOpdGFpbHMiIGFyaWEtaGFzcG9wdXA9InRydWUiIHN0eWxl
PSItLW1kYy1yaXBwbGUtZmctc2l6ZToyOHB4OyAtLW1kYy1yaXBwbGUtZmctc2NhbGU6MS43
MTQyODU3MTQyODU3MTQyOyAtLW1kYy1yaXBwbGUtbGVmdDoxMHB4OyAtLW1kYy1yaXBwbGUt
dG9wOjEwcHg7Ij48aSBjbGFzcz0iZ29vZ2xlLW1hdGVyaWFsLWljb25zIFZmUHBrZC1rQkRz
b2QgdkFlZG4gZVpjQnBlIiBhcmlhLWhpZGRlbj0idHJ1ZSI+aW5mbzwvaT48L2J1dHRvbj48
ZGl2IGNsYXNzPSJUTThjR2UiPjwvZGl2Pjwvc3Bhbj48L3NwYW4+PC9kaXY+PC9kaXY+PC9k
aXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0idnpGSDAiIGpzbmFtZT0ieTlWdWZlIj5BdmV6
LXZvdXMgcsOpY2VtbWVudCDDqXTDqSBkYW5zIGwnaW1wb3NzaWJpbGl0w6kgZGUgdm91cyBj
b25uZWN0ZXIgw6Agdm90cmUgY29tcHRlIEdvb2dsZSZuYnNwOz88L2Rpdj48ZGl2IGNsYXNz
PSJuekNadWQiPjxidXR0b24gY2xhc3M9IlZmUHBrZC1MZ2JzU2UgVmZQcGtkLUxnYnNTZS1P
V1hFWGUtSU5zQWdjIFJqMk1sZiB1ejRGSmYgY09xanRlIiBqc2NvbnRyb2xsZXI9IllvOVJ6
ZSIganNhY3Rpb249ImNsaWNrOmNPdUNnZDsgbW91c2Vkb3duOlVYN3laOyBtb3VzZXVwOmxi
c0Q3ZTsgbW91c2VlbnRlcjp0Zk8xWWM7IG1vdXNlbGVhdmU6Snl3R3VlOyB0b3VjaHN0YXJ0
OnA2cDJIOyB0b3VjaG1vdmU6Rnd1Tm5mOyB0b3VjaGVuZDp5ZnFCeGM7IHRvdWNoY2FuY2Vs
OkpNdFJqZDsgZm9jdXM6QUhtdXdlOyBibHVyOk8yMnAzZTsgY29udGV4dG1lbnU6bWc5UGVm
OyIganNuYW1lPSJsY2F3eWUiPjxkaXYgY2xhc3M9IlZmUHBrZC1KaDlsR2MiPjwvZGl2Pjxp
IGNsYXNzPSJnb29nbGUtbWF0ZXJpYWwtaWNvbnMgVmZQcGtkLWtCRHNvZCBVM2VpRGMiIGFy
aWEtaGlkZGVuPSJ0cnVlIj5jbGVhcjwvaT48c3BhbiBqc25hbWU9IlY2N2FHYyIgY2xhc3M9
IlZmUHBrZC12UXpmOGQiPk5vbiwgc8OpY3VyaXNlciBtb24gY29tcHRlPC9zcGFuPjxkaXYg
Y2xhc3M9IlV3d3RIIj48L2Rpdj48L2J1dHRvbj48YnV0dG9uIGNsYXNzPSJWZlBwa2QtTGdi
c1NlIFZmUHBrZC1MZ2JzU2UtT1dYRVhlLUlOc0FnYyBSajJNbGYgdXo0RkpmIGNPcWp0ZSIg
anNjb250cm9sbGVyPSJZbzlSemUiIGpzYWN0aW9uPSJjbGljazpjT3VDZ2Q7IG1vdXNlZG93
bjpVWDd5WjsgbW91c2V1cDpsYnNEN2U7IG1vdXNlZW50ZXI6dGZPMVljOyBtb3VzZWxlYXZl
Okp5d0d1ZTsgdG91Y2hzdGFydDpwNnAySDsgdG91Y2htb3ZlOkZ3dU5uZjsgdG91Y2hlbmQ6
eWZxQnhjOyB0b3VjaGNhbmNlbDpKTXRSamQ7IGZvY3VzOkFIbXV3ZTsgYmx1cjpPMjJwM2U7
IGNvbnRleHRtZW51Om1nOVBlZjsiIGpzbmFtZT0iajZMblllIj48ZGl2IGNsYXNzPSJWZlBw
a2QtSmg5bEdjIj48L2Rpdj48aSBjbGFzcz0iZ29vZ2xlLW1hdGVyaWFsLWljb25zIFZmUHBr
ZC1rQkRzb2Qga2V2NUlmIiBhcmlhLWhpZGRlbj0idHJ1ZSI+ZG9uZTwvaT48c3BhbiBqc25h
bWU9IlY2N2FHYyIgY2xhc3M9IlZmUHBrZC12UXpmOGQiPk91aSwgYyfDqXRhaXQgbW9pPC9z
cGFuPjxkaXYgY2xhc3M9IlV3d3RIIj48L2Rpdj48L2J1dHRvbj48L2Rpdj48L2Rpdj48L2Rp
dj48ZGl2IGNsYXNzPSJVd3d0SCI+PC9kaXY+PC9kaXY+PC9kaXY+PGMtZGF0YSBpZD0iaTIi
IGpzZGF0YT0iIENPQkpjZDtfOzIgbU40c1o7XzsxIHozbTJFO187MyBrU1FSZmM7Xzs0IHp4
cnMzZTsxNTcyMzQ1MzU1MDAwOzUiPjwvYy1kYXRhPjwvYy13aXo+PC9kaXY+PGMtZGF0YSBp
ZD0iaTEiPjwvYy1kYXRhPjwvYy13aXo+PHNjcmlwdCBhcmlhLWhpZGRlbj0idHJ1ZSIgbm9u
Y2U9ImpKbEJWcThjQXFNYlJBOXN6VXFHRXciPndpbmRvdy53aXpfcHJvZ3Jlc3MmJndpbmRv
dy53aXpfcHJvZ3Jlc3MoKTt3aW5kb3cud2l6X3RpY2smJndpbmRvdy53aXpfdGljaygnYm9x
LmFjY291bnRzZXR0aW5nc3NlY3VyaXR5YWR2aXNvcnVpLnNlY3VyaXR5ZXZlbnQuUmVuZGVy
UmVuZGVyZXInKTs8L3NjcmlwdD48c2NyaXB0IG5vbmNlPSJqSmxCVnE4Y0FxTWJSQTlzelVx
R0V3Ij4oZnVuY3Rpb24oKXsndXNlIHN0cmljdCc7dmFyIGI9d2luZG93LGM9e307Yi5hZnQ9
YztmdW5jdGlvbiBfcmVjb3JkSXNBYm92ZUZvbGQoYSl7aWYoIShhLmhhc0F0dHJpYnV0ZSgi
ZGF0YS1zcmMiKXx8YS5oYXNBdHRyaWJ1dGUoImRhdGEtaWxzIil8fGEuaGFzQXR0cmlidXRl
KCJkYXRhLW5vYWZ0IikpJiZhLnNyYyl7dmFyIGQ9YS5oYXNBdHRyaWJ1dGUoImRhdGEtaWlk
Iik/YS5nZXRBdHRyaWJ1dGUoImRhdGEtaXVybCIpOmEuc3JjO2NbZF09Y1tkXXx8Yi5faXNW
aXNpYmxlKGIuZG9jdW1lbnQsYSl9fWIuaW5pdEFmdD1mdW5jdGlvbigpe1tdLmZvckVhY2gu
Y2FsbChkb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiaW1nIiksZnVuY3Rpb24oYSl7
X3JlY29yZElzQWJvdmVGb2xkKGEpfSl9O30pLmNhbGwodGhpcyk7DQppbml0QWZ0KCk8L3Nj
cmlwdD48c2NyaXB0IGlkPSJfaWoiIG5vbmNlPSJqSmxCVnE4Y0FxTWJSQTlzelVxR0V3Ij53
aW5kb3cuSUpfdmFsdWVzID0gWydodHRwczpcL1wvbXlhY2NvdW50Lmdvb2dsZS5jb20nLCdy
Zm5ceDNkMjdceDI2cmZuY1x4M2QxXHgyNmVpZFx4M2QtMzUzNzU3ODUxNDM4MzMyMzE4MVx4
MjZldFx4M2QwXHgyNnBsaVx4M2QxJyxbIjEwMTI5NjYzMjA2OTQ4NTcxODAyNiIsIjEwMTI5
NjYzMjA2OTQ4NTcxODAyNiIsIjAiLGZhbHNlLG51bGwsbnVsbCx0cnVlXQ0KLCcwJywnaHR0
cHM6XC9cL215YWNjb3VudC5nb29nbGUuY29tXC8nLCBudWxsICwnYm9xX2lkZW50aXR5YWNj
b3VudHNldHRpbmdzdWlzZXJ2ZXJfMjAxOTEwMjcuMTlfcDAnLCdteWFjY291bnQuZ29vZ2xl
LmNvbScsIDAuMCAsJycsJ2pKbEJWcThjQXFNYlJBOXN6VXFHRXcnLCcnLCAyMDE5LjAgLCdo
dHRwczpcL1wvbXlhY2NvdW50Lmdvb2dsZS5jb21cL2FsZXJ0XC9udFwvMTU3MjM0NTM1NTAw
MCcsIG51bGwgLCdsdHInLCdodHRwczpcL1wvYWNjb3VudHMuZ29vZ2xlLmNvbVwvQWNjb3Vu
dENob29zZXI/Y29udGludWVceDNkaHR0cHM6XC9cL215YWNjb3VudC5nb29nbGUuY29tXC9h
bGVydFwvbnRcLzE1NzIzNDUzNTUwMDA/cmZuJTNEMjclMjZyZm5jJTNEMSUyNmVpZCUzRC0z
NTM3NTc4NTE0MzgzMzIzMTgxJTI2ZXQlM0QwJTI2cGxpJTNEMVx4MjZobFx4M2Rmclx4MjZj
c2lnXHgzZEFGLVNFblpVcndLRTFPTWdMSUtPOjE1NzIzNDY0MDMnLCdodHRwczpcL1wvYWNj
b3VudHMuZ29vZ2xlLmNvbScsJ2h0dHBzOlwvXC9hY2NvdW50cy5nb29nbGUuY29tXC9TZXJ2
aWNlTG9naW4/aGxceDNkZnJceDI2YXV0aHVzZXJceDNkMFx4MjZjb250aW51ZVx4M2RodHRw
czpcL1wvbXlhY2NvdW50Lmdvb2dsZS5jb21cL2FsZXJ0XC9udFwvMTU3MjM0NTM1NTAwMD9y
Zm4lM0QyNyUyNnJmbmMlM0QxJTI2ZWlkJTNELTM1Mzc1Nzg1MTQzODMzMjMxODElMjZldCUz
RDAlMjZwbGklM0QxXHgyNmNzaWdceDNkQUYtU0VuWlVyd0tFMU9NZ0xJS086MTU3MjM0NjQw
MycsJ2h0dHBzOlwvXC9hY2NvdW50cy5nb29nbGUuY29tXC9TaWduT3V0T3B0aW9ucz9jb250
aW51ZVx4M2RodHRwczpcL1wvbXlhY2NvdW50Lmdvb2dsZS5jb21cL2FsZXJ0XC9udFwvMTU3
MjM0NTM1NTAwMD9yZm4lM0QyNyUyNnJmbmMlM0QxJTI2ZWlkJTNELTM1Mzc1Nzg1MTQzODMz
MjMxODElMjZldCUzRDAlMjZwbGklM0QxXHgyNmNzaWdceDNkQUYtU0VuWlVyd0tFMU9NZ0xJ
S086MTU3MjM0NjQwMycsJ2h0dHBzOlwvXC9tYWlsLmdvb2dsZS5jb21cL21haWxcLz9pYnhy
XHgzZDAjc2V0dGluZ3NcL2FjY291bnRzJywnaHR0cHM6XC9cL2J1c2luZXNzLmdvb2dsZS5j
b20nLCdodHRwczpcL1wvcGx1cy5nb29nbGUuY29tJywnZnInLCBmYWxzZSAsIG51bGwgLCBu
dWxsICwgbnVsbCAsJycsIGZhbHNlICwgZmFsc2UgLCdodHRwczpcL1wvZmFtaWxpZXMuZ29v
Z2xlLmNvbScsJ2ZyJywnZnInLCdmcicsJ2h0dHBzOlwvXC9hYm91dG1lLmdvb2dsZS5jb20n
LCdodHRwczpcL1wvbXlhY2NvdW50Lmdvb2dsZS5jb20nLCdodHRwczpcL1wvbXlhY2NvdW50
Lmdvb2dsZS5jb21cLycsJ2h0dHBzOlwvXC9kcml2ZS5nb29nbGUuY29tXC9zZXR0aW5ncycs
J2h0dHBzOlwvXC9mYW1pbGllcy5nb29nbGUuY29tJywnaHR0cHM6XC9cL3Rha2VvdXQuZ29v
Z2xlLmNvbVwvc2V0dGluZ3MnLCdodHRwczpcL1wvd3d3Lmdvb2dsZS5jb21cL3NldHRpbmdz
JywnQUFGZ2NoaTZFQUFSZFRjNXZyRkZCdkNXUFVWNDoxNTcyMzQ2NDAzODQzJywnaHR0cHM6
XC9cL25vdGlmaWNhdGlvbnMuZ29vZ2xlLmNvbVwvc2V0dGluZ3MnLCdodHRwczpcL1wvZG9j
cy5nb29nbGUuY29tXC9waWNrZXInLCdodHRwczpcL1wvcGhvdG9zLmdvb2dsZS5jb20nLCdo
dHRwczpcL1wvbXlhY2NvdW50Lmdvb2dsZS5jb21cL3ByaXZhY3lwb2xpY3k/aGxceDNkZnIn
LCBudWxsICwgbnVsbCAsIGZhbHNlICwnaHR0cHM6XC9cL3Rha2VvdXQuZ29vZ2xlLmNvbScs
J2h0dHBzOlwvXC9teWFjY291bnQuZ29vZ2xlLmNvbVwvdGVybXNvZnNlcnZpY2U/aGxceDNk
ZnInLCAxLjU3MjM0NjQwMzg1NkUxMiAsIDEuNTQ2Mjk3MkUxMiAsIDEuNTcyMzAzNkUxMiAs
WyJodHRwczovL215YWNjb3VudC5nb29nbGUuY29tIixudWxsLG51bGwsbnVsbCxudWxsLG51
bGwsbnVsbCwiaHR0cHM6Ly9mYW1pbGllcy5nb29nbGUuY29tIiwiaHR0cHM6Ly9kcml2ZS5n
b29nbGUuY29tIl0NCiwgMC4wICwgbnVsbCAsJ2FsZXhhbmRydS5wZXRyZXNjdUBnbWFpbC5j
b20nLCdtYWxlJywgdHJ1ZSAsJzEwMTI5NjYzMjA2OTQ4NTcxODAyNicsIDIwMTkuMCAsJ2h0
dHBzOlwvXC95b3V0dWJlLmNvbScsXTsgd2luZG93LklKX3ZhbHVlc0NiICYmIHdpbmRvdy5J
Sl92YWx1ZXNDYigpOzwvc2NyaXB0PjxzY3JpcHQgbm9uY2U9ImpKbEJWcThjQXFNYlJBOXN6
VXFHRXciPkFGX2luaXREYXRhQ2FsbGJhY2soe2tleTogJ2RzOjEnLCBpc0Vycm9yOiAgZmFs
c2UgLCBoYXNoOiAnMScsIGRhdGE6ZnVuY3Rpb24oKXtyZXR1cm4gWyJhbGV4YW5kcnUucGV0
cmVzY3VAZ21haWwuY29tIl0NCn19KTs8L3NjcmlwdD48c2NyaXB0IG5vbmNlPSJqSmxCVnE4
Y0FxTWJSQTlzelVxR0V3Ij5BRl9pbml0RGF0YUNhbGxiYWNrKHtrZXk6ICdkczowJywgaXNF
cnJvcjogIGZhbHNlICwgaGFzaDogJzInLCBkYXRhOmZ1bmN0aW9uKCl7cmV0dXJuIFsiYWMu
cy5nLnBvcnRyYWl0IiwiLy9saDMuZ29vZ2xldXNlcmNvbnRlbnQuY29tL2EtL0FBdUU3bUNG
WUp0alh3VF9tNHBpVUtZOHQ5V012TEh1ckRNYVZia0djcWRlIix0cnVlLHRydWVdDQp9fSk7
PC9zY3JpcHQ+PHNjcmlwdCBub25jZT0iakpsQlZxOGNBcU1iUkE5c3pVcUdFdyI+QUZfaW5p
dERhdGFDYWxsYmFjayh7a2V5OiAnZHM6MicsIGlzRXJyb3I6ICBmYWxzZSAsIGhhc2g6ICcz
JywgZGF0YTpmdW5jdGlvbigpe3JldHVybiBbImFsZXhhbmRyZS5wZXRyZXNjdUBmcmVlLmZy
Iix0cnVlLGZhbHNlLDE0ODA4NzE3NjUyNzldDQp9fSk7PC9zY3JpcHQ+PHNjcmlwdCBub25j
ZT0iakpsQlZxOGNBcU1iUkE5c3pVcUdFdyI+QUZfaW5pdERhdGFDYWxsYmFjayh7a2V5OiAn
ZHM6MycsIGlzRXJyb3I6ICBmYWxzZSAsIGhhc2g6ICc0JywgZGF0YTpmdW5jdGlvbigpe3Jl
dHVybiBbdHJ1ZSxbImFjLmMucC5waSIsbnVsbCxudWxsLG51bGwsIiszMzY2MTI0MzIxNCIs
bnVsbCxudWxsLGZhbHNlLFsxLDIsM10NCiwxLCJGUiIsIjA2IDYxIDI0IDMyIDE0IiwiKzMz
IDYgNjEgMjQgMzIgMTQiXQ0KLHRydWUsdHJ1ZSwxNDQ0MjQ2ODk4MzEyXQ0KfX0pOzwvc2Ny
aXB0PjxzY3JpcHQgbm9uY2U9ImpKbEJWcThjQXFNYlJBOXN6VXFHRXciPkFGX2luaXREYXRh
Q2FsbGJhY2soe2tleTogJ2RzOjQnLCBpc0Vycm9yOiAgZmFsc2UgLCBoYXNoOiAnNScsIGRh
dGE6ZnVuY3Rpb24oKXtyZXR1cm4gW1siQWNmYzY4NmQxMmZmNmQyMjciLCIiLDE1NzIzNDUz
NTUwMDAsMTU3MjM0NTM1NTAwMCxudWxsLDAsbnVsbCxudWxsLHRydWUsbnVsbCxudWxsLG51
bGwsdHJ1ZSxudWxsLFtbIiIsMTU3MjM0NTM1NTAwMF0NCl0NCixbIiIsMTU3MjM0NTM1NTAw
MF0NCixudWxsLCIiXQ0KLFszLG51bGwsbnVsbCwiMmEwMTpYOlk6Y2UxMDo6YjRjYzo4ZWI5
IiwiVmlsbGUsIEZyYW5jZSIsbnVsbCxudWxsLG51bGwsWyIiLCIiLCIiLCIiLCIiLHRydWUs
bnVsbCxudWxsLG51bGwsMCxudWxsLG51bGwsMV0NCixudWxsLDEsMTU3MjM0NTM1NTAwMCxb
dHJ1ZSwzLDNdDQosbnVsbCwiQWNmYzY4NmQxMmZmNmQyMjciLDI3LG51bGwsdHJ1ZSwiLTM1
Mzc1Nzg1MTQzODMzMjMxODEiLFs0LDFdDQosWzIsMTU3MjM0NTM1NjA3NF0NCixmYWxzZV0N
CixmYWxzZSxmYWxzZV0NCn19KTs8L3NjcmlwdD48c2NyaXB0IGFyaWEtaGlkZGVuPSJ0cnVl
IiBub25jZT0iakpsQlZxOGNBcU1iUkE5c3pVcUdFdyI+d2luZG93Lndpel9wcm9ncmVzcyYm
d2luZG93Lndpel9wcm9ncmVzcygpOyB3aW5kb3cuc3RvcFNjYW5Gb3JDc3MmJndpbmRvdy5z
dG9wU2NhbkZvckNzcygpOyBjY1RpY2soJ2JsJyk7PC9zY3JpcHQ+PHNjcmlwdCBub25jZT0i
akpsQlZxOGNBcU1iUkE5c3pVcUdFdyI+dGhpcy5nYmFyXz10aGlzLmdiYXJffHx7fTsoZnVu
Y3Rpb24oXyl7dmFyIHdpbmRvdz10aGlzOw0KdHJ5ew0KaWYoXy56ail7dmFyIENqO2lmKENq
PV8uQihfLnpqLmYsMykpZm9yKHZhciBEaj1fLndoKENqKSxFaj0wO0VqPERqLmxlbmd0aDtF
aisrKV8uamkoRGpbRWpdLCJvZ3BjIiwiIik7Xy5zaihfLnpqLCEhXy56ai5iJiZfLnpqLmIu
U2IoKSwhMSl9DQo7DQp9Y2F0Y2goZSl7Xy5fRHVtcEV4Y2VwdGlvbihlKX0NCnRyeXsNCl8u
Rmo9ZnVuY3Rpb24oYSl7Xy5BKHRoaXMsYSwwLC0xLG51bGwsbnVsbCl9O18udyhfLkZqLF8u
eik7DQoNCn1jYXRjaChlKXtfLl9EdW1wRXhjZXB0aW9uKGUpfQ0KdHJ5ew0KdmFyIEdqPWZ1
bmN0aW9uKGEsYyxkKXtfLnhkLmxvZyg0Nix7YXR0OmEsbWF4OmMsdXJsOmR9KX0sSWo9ZnVu
Y3Rpb24oYSxjLGQpe18ueGQubG9nKDQ3LHthdHQ6YSxtYXg6Yyx1cmw6ZH0pO2E8Yz9Iaihh
KzEsYyk6Xy5NLmxvZyhFcnJvcigiT2AiK2ErImAiK2MpLHt1cmw6ZH0pfSxIaj1mdW5jdGlv
bihhLGMpe2lmKEpqKXt2YXIgZD1fLkJlKCJTQ1JJUFQiKTtkLmFzeW5jPSEwO2QudHlwZT0i
dGV4dC9qYXZhc2NyaXB0IjtkLmNoYXJzZXQ9IlVURi04IjtfLmllKGQsSmopO2Qub25sb2Fk
PV8uUWQoR2osYSxjLGQuc3JjKTtkLm9uZXJyb3I9Xy5RZChJaixhLGMsZC5zcmMpO18ueGQu
bG9nKDQ1LHthdHQ6YSxtYXg6Yyx1cmw6ZC5zcmN9KTtfLnNlKCJIRUFEIilbMF0uYXBwZW5k
Q2hpbGQoZCl9fSxLaj1mdW5jdGlvbihhKXtfLkEodGhpcyxhLDAsLTEsbnVsbCxudWxsKX07
Xy53KEtqLF8ueik7DQp2YXIgTGo9Xy5HKF8udGQsS2osMTcpfHxuZXcgS2osTWosSmo9KE1q
PV8uRyhMaixfLkZqLDEpKT9fLmViKF8uQihNaiw0KXx8IiIpOm51bGwsTmosT2o9KE5qPV8u
RyhMaixfLkZqLDIpKT9fLmViKF8uQihOaiw0KXx8IiIpOm51bGwsUGo9ZnVuY3Rpb24oKXtI
aigxLDIpO2lmKE9qKXt2YXIgYT1fLkJlKCJMSU5LIik7YS5zZXRBdHRyaWJ1dGUoInR5cGUi
LCJ0ZXh0L2NzcyIpO18uaGUoYSxPaiwic3R5bGVzaGVldCIpO18uc2UoIkhFQUQiKVswXS5h
cHBlbmRDaGlsZChhKX19Ow0KKGZ1bmN0aW9uKCl7dmFyIGE9Xy51ZCgpO2lmKF8uRChhLDE4
KSlQaigpO2Vsc2V7dmFyIGM9Xy5CKGEsMTkpfHwwO3dpbmRvdy5hZGRFdmVudExpc3RlbmVy
KCJsb2FkIixmdW5jdGlvbigpe3dpbmRvdy5zZXRUaW1lb3V0KFBqLGMpfSl9fSkoKTsNCg0K
fWNhdGNoKGUpe18uX0R1bXBFeGNlcHRpb24oZSl9DQp9KSh0aGlzLmdiYXJfKTsNCi8vIEdv
b2dsZSBJbmMuDQo8L3NjcmlwdD48ZGl2IGNsYXNzPSJnYl9MZCI+QXBwbGljYXRpb25zIEdv
b2dsZTwvZGl2PjxkaXYgY2xhc3M9ImdiX2RlIj48ZGl2IGNsYXNzPSJnYl9mZSI+PGRpdj5D
b21wdGUgR29vZ2xlPC9kaXY+PGRpdiBjbGFzcz0iZ2JfZ2IiPkFsZXhhbmRyZSBQZXRyZXNj
dTwvZGl2PjxkaXY+YWxleGFuZHJ1LnBldHJlc2N1QGdtYWlsLmNvbTwvZGl2PjwvZGl2Pjwv
ZGl2PjxkaXYgY2xhc3M9ImdiX3RjIj5NZW51IHByaW5jaXBhbDwvZGl2PjxkaXYgbmctbm9u
LWJpbmRhYmxlPSIiPjwvZGl2PjwvYm9keT48L2h0bWw+DQo=
--------------19233F335A7405FEF9E6B9CE
Content-Type: application/pdf;
 name="activ-suspecte.pdf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="activ-suspecte.pdf"
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--------------19233F335A7405FEF9E6B9CE--


From nobody Thu Oct 31 10:40:07 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB0A1120073 for ; Thu, 31 Oct 2019 10:40:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xJdEAbOJ4Qwx for ; Thu, 31 Oct 2019 10:40:03 -0700 (PDT)
Received: from mail-io1-xd41.google.com (mail-io1-xd41.google.com [IPv6:2607:f8b0:4864:20::d41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EBAD812006A for ; Thu, 31 Oct 2019 10:40:02 -0700 (PDT)
Received: by mail-io1-xd41.google.com with SMTP id w12so7643285iol.11 for ; Thu, 31 Oct 2019 10:40:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=4FhxAf4Ke9/pux4m7GTQ5v31xRME8IGETFADBdlk8j0=; b=b6/u24NsvVXnyqyOTB8euN5YaIwKBpGlskKEFisUAvLTrv0hVjpg0LI3YRsc3h31oB 64qmKDrcxQANX2B289TX8lIdywZRAlYY0zzBoHqBOl6pBe7HTkaCzBaAtmErORA85vjT LvUeNTIMO+l/qYveo9ZoWWbRWdBGyYZKiKch/2viK4VDzz7XVSPqVSOW9tkf1s/Ot0FE BNKTfTLXwNh9Lloq435alkIQWDUr07SqUgCLIqQysG8r0nYIVm4MBoH9X12n+bf7K8Jp yGbF+0SajbLbpeCmdYGJ7xLhrCqtLsmX+x7xs4DbMpcuWvYtI7DqFcaak9KGoX8s35cj VNSQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=4FhxAf4Ke9/pux4m7GTQ5v31xRME8IGETFADBdlk8j0=; b=lnK0z7UyanfWCsdxsMSq2m8UO7w/jMb+euC58yaofRhA9np+RyF5UqRb6a5V16tZpd A0n2IFokPSgdV+Lw7loYIWfRDOSlXtRePcMSyuNfm/k9WXhlRHpGtvbMmQ9fbT2dsmOj q8kR3R43sg/AZjIOC9bvV1mciPEw8V7MxL/egYJMHSQNCpX/1W0UwpS6bG3PXkIRQEnl VPgH/xFEFjhZUY8zbrYtCwRREu+jhTl3VSvKShPDU92kAO7/SuXhzjwr4Ql98RKmBgYP Y6AgQA12KvJF8+Ys8PZr7Vvjb688pwb8yeDY5H8TarTw//nLqAUVEbvUJOsx1QcZjsJD ivMA==
X-Gm-Message-State: APjAAAVEhyQ+hrC/ZqH6Cw1tgbeBrPe4JRf/Qzsq9llva7j7T11QXNyP uTgdTnPYYGlxfpCengJsYAj+Kle/ZaWSawt90NA=
X-Google-Smtp-Source: APXvYqzBpEQzIyr+WqXQCShxTUdTnSFARK30Mvu3/qkFbv9kaFM790lI/4s1M8jBGpmY1TssrjHEEllnL4zIVpLUyys=
X-Received: by 2002:a6b:bbc5:: with SMTP id l188mr6419753iof.259.1572543601900;  Thu, 31 Oct 2019 10:40:01 -0700 (PDT)
MIME-Version: 1.0
References:   <837E9523-14FC-4F6C-88FC-DCC316265299@employees.org> 
In-Reply-To: 
From: Naveen Kottapalli 
Date: Thu, 31 Oct 2019 23:09:44 +0530
Message-ID: 
To: Mark Smith 
Cc: Ole Troan , v6ops list 
Content-Type: multipart/alternative; boundary="000000000000c8fee405963856c6"
Archived-At: 
Subject: Re: [v6ops] A broken promise - "You said PD Prefix Valid Lifetime is going to be X" (Re: SLAAC renum: Problem Statement & Operational workarounds)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 17:40:05 -0000

--000000000000c8fee405963856c6
Content-Type: text/plain; charset="UTF-8"

+1

The problem I feel is mainly because of the the middle boxes sitting
between the devices which are using the prefix and the one who delegated
the prefixes.  I believe in most of the deployed implementations like the
BNG or any DHC server will have a record of the prefixes being delegated
and lifetimes will be honored till lease time expires.  As a matter of fact
in the cases listed, prefixes are be valid for the given lifetimes at both
the device and the delegating router.  Just because the CPE got rebooted or
lost the context of the prefixes, the middle boxes deprecating or
suggesting a whole set of new prefixes towards the devices might not be the
solution to the actual problem.

Yours,
Naveen.


On Thu, 31 Oct 2019 at 05:09, Mark Smith  wrote:

> On Wed, 30 Oct 2019 at 22:02, Ole Troan  wrote:
> >
> 
>
> > In the case when a requesting router loses a prefix, it can of course
> signal that to the hosts as proposed in Fernando's draft. But that doesn't
> solve the general problem, and I'm skeptical to using addressing as a
> reachability signal. E.g. if the CPE's upstream link flaps, is that enough
> to trigger deprecation of the prefix? Of course it shouldn't.
> >
>
> Exactly. Transient network faults are supposed to be survived - that's
> why TCP makes quite a number of attempts at re-transmitting when
> packet loss occurs, rather than just immediately terminating the
> connection.
>
> When an ISP "flash renumbers" a customer what's really happening is
> that the customer's network layer point of attachment to the network
> is being changed - the customer is being abruptly disconnected, moved
> and re-connected. Possibly that is easy to overlook because the
> customers physical location and their physical link to the network
> doesn't change.
>
> I think Ole observed that this is contrary to what the PD prefix's
> Valid Lifetime said would be the case. The ISP supplied a PD Prefix
> with a Valid Lifetime of X seconds, and then broke that promise by
> abruptly changing addressing before X seconds. ISPs should be expected
> to live up to their Valid Lifetime promises.
>
> Regards,
> Mark.
>
>
> > Ole
> > _______________________________________________
> > v6ops mailing list
> > v6ops@ietf.org
> > https://www.ietf.org/mailman/listinfo/v6ops
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>

--000000000000c8fee405963856c6
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable


+1

The problem I feel is mainly because=
 of the the middle boxes sitting between the devices which are using the pr=
efix and the one who delegated the prefixes.=C2=A0 I believe in most of the=
 deployed implementations like the BNG or any DHC server will have a record=
 of the prefixes being delegated and lifetimes will be honored till lease t=
ime expires.=C2=A0=20

As a matter=C2=A0of fact in the cases listed, prefixes are be valid for the=
 given lifetimes at both the device and the delegating router.=C2=A0 Just b=
ecause the CPE got rebooted or lost the context of the prefixes, the middle=
 boxes deprecating or suggesting a whole set of new prefixes towards the de=
vices might not be the solution to the actual problem.

Yours,
Naveen.


On Thu, 31 Oct 2019=
 at 05:09, Mark Smith <markzzz=
smith@gmail.com> wrote:
On Wed, 30 Oct 2019 at 22:02, Ole Troan <otroan@employees.org> wrot=
e:

>

<snip>



> In the case when a requesting router loses a prefix, it can of course =
signal that to the hosts as proposed in Fernando's draft. But that does=
n't solve the general problem, and I'm skeptical to using addressin=
g as a reachability signal. E.g. if the CPE's upstream link flaps, is t=
hat enough to trigger deprecation of the prefix? Of course it shouldn't=
.

>



Exactly. Transient network faults are supposed to be survived - that's<=
br>
why TCP makes quite a number of attempts at re-transmitting when

packet loss occurs, rather than just immediately terminating the

connection.



When an ISP "flash renumbers" a customer what's really happen=
ing is

that the customer's network layer point of attachment to the network
is being changed - the customer is being abruptly disconnected, moved

and re-connected. Possibly that is easy to overlook because the

customers physical location and their physical link to the network

doesn't change.



I think Ole observed that this is contrary to what the PD prefix's

Valid Lifetime said would be the case. The ISP supplied a PD Prefix

with a Valid Lifetime of X seconds, and then broke that promise by

abruptly changing addressing before X seconds. ISPs should be expected

to live up to their Valid Lifetime promises.



Regards,

Mark.





> Ole

> _______________________________________________

> v6ops mailing list

> v6ops@ietf.org=


> https://www.ietf.org/mailman/listinfo/v6ops



_______________________________________________

v6ops mailing list

v6ops@ietf.org

https://www.ietf.org/mailman/listinfo/v6ops




--000000000000c8fee405963856c6--


From nobody Thu Oct 31 11:48:10 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24AD112006A for ; Thu, 31 Oct 2019 11:48:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IsSKnl_US9AM for ; Thu, 31 Oct 2019 11:48:07 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCD3912000F for ; Thu, 31 Oct 2019 11:48:06 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 10894865AF; Thu, 31 Oct 2019 19:48:02 +0100 (CET)
To: Mark Smith , Brian E Carpenter 
Cc: Owen DeLong , v6ops list 
References:   <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com>   <4cfa9c73-dd82-13bc-16a7-5c11ac48d03a@gmail.com> 
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: 
Date: Thu, 31 Oct 2019 15:47:54 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 18:48:09 -0000

On 27/10/19 19:37, Mark Smith wrote:
> 
> 
> On Mon, 28 Oct 2019, 06:06 Brian E Carpenter,
> > wrote:
> 
>     On 28-Oct-19 05:29, Fernando Gont wrote:
>     ...
>     > Robustness has a lot to do with being able to gracefully handle
>     the case
>     > when others screw up.
> 
> 
>     This. We can't make the world perfect, but we can make individual
>     components
>     that expect imperfection.
> 
> 
> 
> This is not what I said, as it is implying that I said there is no need
> for robustness.
> 
> Robustness suffers from the law of diminishing returns. At some point
> the cost to design and implement robustness exceeds the either the
> likelihood it will be needed or the benefit it returns if needs to be used.

Could you please argue against any specific text in our document?




> Sugar is sometimes poured into the fuel tanks of cars, which will
> destroy the engine. It is not common and is done maliciously. If
> robustness should be universal, does that mean car engines should be
> made impervious to sugar, at great expense to everybody, despite the
> need for that robustness being rare?
> 
> Some ISPs are shifting the cost and consequences of their design
> decision, which they can change, onto the IETF, CPE vendors and host
> implementers, and indirectly their customers'. Are they willing to pay
> these other parties to fix a problem that they are both causing and
> could fix themselves?

Is there anything that we are recommending CPEs to do that shouldn't be
there (anyway) to comply with the semantics of the protocols?

That said, I will repeat that the home network/cpe case is only one of
the scenarios in which this problem may be faced.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 12:13:52 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95D0A120800 for ; Thu, 31 Oct 2019 12:13:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b5QgRU2eS8el for ; Thu, 31 Oct 2019 12:13:48 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D7B9120018 for ; Thu, 31 Oct 2019 12:13:48 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id A1B078691B; Thu, 31 Oct 2019 20:13:45 +0100 (CET)
To: Owen DeLong 
Cc: v6ops@ietf.org
References:   <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com>
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <8dbfb1b6-5efa-019f-313b-e8045ee277ee@si6networks.com>
Date: Thu, 31 Oct 2019 16:13:34 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:13:51 -0000

On 27/10/19 01:48, Owen DeLong wrote:
>>> It is worth noting that these values are tunable by the administrator
>>> and the
>>> RFC suggested defaults should never be a hard-coded value.
>>>
>>> With the following exception, I don’t advocate modifying this on the
>>> client
>>> side:
>>> +Section 5.5.3 of RFC4862 should be amended to specifically
>>> allow the immediate deprecation of a prefix by sending a valid
>>> lifetime of 0 seconds. Hosts should be required to honor
>>> this as a signal that the prefix is no longer valid.
>>
>> Could you please elaborate on this one?
> 
> I’m not sure what I could do to elaborate. The addition of a specific
> call-out that
> even if the current behavior of ≤2 hours = 2 hours is to be preserved,
> there should
> be a special case for “0 seconds” which causes the prefix to be immediately
> deprecated with extreme prejudice.
> 
> Hosts should be required to treat an RA containing a prefix with a 0 second
> valid lifetime as an invalid prefix and immediately deprecate it from
> the interface
> if it is in use.

OK, so you do agree with the proposed change? (in
draft-gont-6man-slaac-renum, not in *this* document)




>>> I do think that generally speaking, your proposed modifications to
>>> CPE and
>>> router behavior should be standardized and implemented.
>>>
>>>> A better mitigation is to affect the preferred and possibly the valid
>>>> lifetimes in response to consecutive RAs from the same router that lack
>>>> the original (stale) prefix. e.g., after two consecutive RAs that do not
>>>> contain the existing prefix, reduce the preferred lifetime. After two
>>>> additional RAs, reduce the valid lifetime.
>>>
>>> In the crash scenarios you describe, you’re assuming a single router on
>>> the network or
>>> at least only one router announcing the prefix(es) in question with no
>>> persistent
>>> memory of the prefixes it was announcing across a reboot. In such a
>>> scenario,
>>> it seems to me that the following are also likely valid assumptions:
>>>
>>> +The network has significant excess bandwidth compared to demand.
>>> +The small overhead of frequent RAs and short lifetimes is probably
>>> an acceptable tradeoff in this environment.
>>>
>>> However, there are lots of other scenarios in the world where those
>>> assumptions
>>> won’t hold true and we should not seek to solve this problem (which is
>>> generally
>>> applicable to residential and SMB environments) at the expense of all of
>>> those
>>> other professionally administered environments.
>>
>> Even with the default RA frequency, if you were to unprefer a prefix
>> upon, say, second RA that doesn't advertise it, and say, remove the
>> prefix after many other RAs are received, that would be a *big*
>> improvement to what we have now.
> 
> I don’t like this idea because I can think of some scenarios where you
> may receive multiple RAs from router A not containing the prefix in the
> same time frame that router B has not sent an additional RA containing
> the prefix, but it will do so in its next RA.

Maybe it wasn't clear in the I-D, but the basic idea is:
If you receive multiple RAs from router A that do not advertise the
prefix, then you disassociate such prefix with router A. If nobody else
is advertising the prefix, you'd deprecate it. If other routers are
advertising it, this would not change the status quo of the prefix wrt
such other routers.


> There is no requirement for all routers on the same link to provide the
> same set of PIOs, nor are they required to use the same advertisement
> timers.

Agreed. Please see above.






>>> In section 3.2.1, you advocate setting the A and L bits to their
>>> previous values
>>> for prefixes which are being deprecated. IMHO, this is incorrect and the
>>> announcements calling for immediate deprecation should also indicate that
>>> the prefix should no longer be auto-configured and should no longer be
>>> considered on-link.
>>
>> Not sure I follow. Could you please elaborate?
> 
> Sure… In section 3.2.1 of your document, you advocate that if the previously
> valid PIOs were set A=1 and/or L=1, then those values of the A and L bits
> should be preserved in the RAs sent to deprecate them.
> 
> My argument is that since you are attempting to make this a prefix that
> hosts
> will no longer autoconfigure (A) and will no longer consider on-link
> (L), that
> in reality, regardless of the previous state of the A and L bits in the RAs
> announcing the prefix in a valid PIO, the new RAs since the prefix has been
> deprecated should be sent with A=0, L=0 in order to signal the host
> that this prefix should not be auto configured and should no longer be
> considered on-link.

You really make a good point. I will go through RFC4861 and see what's
the current expected behaviour in such case.





>>> Is there some unfortunate widely deployed behavior that interacts poorly
>>> with setting A and L to 0 for these previously valid prefixes?
>>>
>>> Finally, An editorial note… In Section 3, you state “Finally, Section
>>> 2.5 analyzes…”
>>> I believe this is intended to be a reference to section 3.2.2.
>>
>> Nope. Section 3.2.2 talks about the interaction between dhcpv6-pd and
>> slaac. BUt it is section 2.5 that discusses other considerations for
>> dynamic/stable prefixes. For example, stable prefixes are not nice for
>> privacy.
> 
> 
> Fair enough, but in that case, I don’t think I would put it after the
> description of section 3.2,
> nor would I use the word “Finally” as a lead-in to a back-reference.

Will tweak the text accordingly.

Thanks!

Cheers,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 12:16:18 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2AAF120816 for ; Thu, 31 Oct 2019 12:16:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=messagingengine.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WgvgySCnCNxe for ; Thu, 31 Oct 2019 12:16:15 -0700 (PDT)
Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA6F5120800 for ; Thu, 31 Oct 2019 12:16:14 -0700 (PDT)
Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.nyi.internal (Postfix) with ESMTP id 51D032252A for ; Thu, 31 Oct 2019 15:16:13 -0400 (EDT)
Received: from imap3 ([10.202.2.53]) by compute2.internal (MEProxy); Thu, 31 Oct 2019 15:16:13 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=VdbgNsQuF/3n2g1jwuOaFM1eRhV90myiXZtcin8yb 6w=; b=V32VmomXgZ5NnYvAybiHARlBdBqMUcUUHmHQ7Dm/enAyLLvv50I4YXeQO zXS8ru8MZwpFrVNIqrprubfThE92/QOnwX/45buNNI8iVgwrQcpc5yfVjvsongBC P/GWzQzkOx4i3nTRqMDi/gfWn6p5Rgkq10+ARi52/0ubjjJ/UJV8UkGPMST5dArZ N++wDtaN8u4yky85wFH0duxBw5TDTk0J8b56vBsWWUgrGLh2v2EfBJnGeMmpRnBw TQo4ysiWPB2Y9Nb9BTfnWS+RCc/IheoW4e6n62hssTXOPm5caGzJtCkm6gVNjkEY Wl6aoWwNnHskS1RdGNYDriJJiRyxw==
X-ME-Sender: 
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedufedruddthedguddvudcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepofgfggfkjghffffhvffutgfgse htqhertderreejnecuhfhrohhmpedftfgrughuqdetughrihgrnhcuhfgvuhhruggvrghn fdcuoehivghtfhdqfihgshesrhgrughuqdgrughrihgrnhdrfhgvuhhruggvrghnrdhnvg htqeenucfrrghrrghmpehmrghilhhfrhhomhepihgvthhfqdifghhssehrrgguuhdqrggu rhhirghnrdhfvghurhguvggrnhdrnhgvthenucevlhhushhtvghrufhiiigvpedt
X-ME-Proxy:    
Received: by mailuser.nyi.internal (Postfix, from userid 501) id DC6084E009F; Thu, 31 Oct 2019 15:16:12 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.1.7-509-ge3ec61c-fmstable-20191030v1
Mime-Version: 1.0
Message-Id: <804cba98-1f87-4fb8-abad-df0d80d25945@www.fastmail.com>
In-Reply-To: 
References: <85b1ef40-f107-0ece-3e71-377f4d22dd46@si6networks.com>  <9dfd5e47-c593-4145-b530-74fb0f4155ed@www.fastmail.com>  <6ABAC3D7-30EA-4ECD-8B5F-A04309C208CE@delong.com> <55508c99-42b7-5c22-5c56-306a41b51bf3@gmail.com> 
Date: Thu, 31 Oct 2019 20:15:19 +0100
From: "Radu-Adrian Feurdean" 
To: v6ops@ietf.org
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: quoted-printable
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:16:17 -0000

On Thu, Oct 31, 2019, at 15:16, Owen DeLong wrote:
>=20
>=20
> > On Oct 31, 2019, at 3:02 AM, Alexandre Petrescu  wrote:
> >=20
> >=20
>=20
> > Le 31/10/2019 =C3=A0 04:05, Owen DeLong a =C3=A9crit :
> >> 8 /64s is a /61.
> > Right, I guess 8 /64s is a /61 because 2^3 is 8, and 3+61 is 64.
>=20
> >=20
> Well, a /60 would include not only ce10..ce17, but also ce18, ce19,=20=

> ce1a, ce1b, ce1c, ce1d, ce1e, and ce1f.

They DO provision a /60 per customer, they just keep half of it for thei=
r own use. The separate STB box was known to make use of it at some mome=
nt on the past. It may still be the case... probably...=20

> 256 /64s is a /56.
> You should be getting 65,536 /64s (a /48) and if I were you, I would=20=

> complain to any ISP that gave me less.I=20

Legacy of their past 64rd deployment.=20

--=20
R-A.F.


From nobody Thu Oct 31 12:26:31 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C07AE120018 for ; Thu, 31 Oct 2019 12:26:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cP8lFoRV-SkV for ; Thu, 31 Oct 2019 12:26:27 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D0112120013 for ; Thu, 31 Oct 2019 12:26:26 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id CAD748698C; Thu, 31 Oct 2019 20:26:23 +0100 (CET)
To: Ted Lemon , v6ops list 
References:  
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com>
Date: Thu, 31 Oct 2019 16:21:04 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:26:29 -0000

Hello, Ted,


On 27/10/19 09:02, Ted Lemon wrote:
> Indeed, this would also not actually solve the problem.   At present,
> the ISPs are doing something that is out of spec and causes problems.
> If we “fix” this by accommodating what they do, does that help, or
> does it just encourage them to continue doing it?

Did happy eyeballs encourage broken IPv6 connectivity, or did it
actually help IPv6 deployment?




> What should be happening on the host with a prefix that’s deprecated
> is that TCP connections should be timing out.   This doesn’t take
> very long.  

~9 minutes, IIRC.


> And if there is a new prefix being advertised on the
> link, that address should have a valid lifetime newer than the old
> prefix, meaning that the next TCP connection should come from that
> new prefix, not the old one.

That's not correct. Neither the Valid Lifetime nor the Preferred
Lifetime affect address selection.




> I think Fernando’s plan to shorten some timers makes sense, but
> shortening the minimum really doesn’t—it just opens up an opportunity
> for an easy DoS, since I can now just send out death packets to the
> local network and break everything all at once.

The reality with ND attacks are (modulo sanity checks on the packets):
you enforce FHS, or you don't.




> If you Really Really want to be able to have the routers send out RAs
> that deprecate the default route, and, as Mark is saying here, to
> upgrade millions or perhaps billions of hosts, why not ask for
> something that’s a real improvement?

Every piece helps.



> First of all, fix CPEs so that they definitely support clean
> deprecation of prefixes using PD.

But robustness cannot rely on any of these specific bits.


>  Second, fix RA so that it’s
> non-repudiable by a device that doesn’t have the secret key.
> 
> SEND does this, sort of.  Nobody uses SEND because it tries to solve
> a too-big problem and does it using obsolete technology.   But the
> basic idea is good: include a public key in every RA that can be used
> to validate that the RA was signed with the corresponding private
> key.

What's the practical difference between that, an a network that supports
RA-Guard?



> When another RA arrives, see if it was signed with the same key.   If
> so, it came from the same router, and can be trusted to update
> whatever information that router sent, including flash-deprecating a
> prefix.   If not, ignore it.

In the non-SEND trust model, you do trust the local router. Why did you
trust the local router to configure your network, but not for
deprecating the prefix?

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 12:26:38 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BA6E1209F4 for ; Thu, 31 Oct 2019 12:26:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1C_5nuhWaxut for ; Thu, 31 Oct 2019 12:26:31 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DF9B120013 for ; Thu, 31 Oct 2019 12:26:31 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 21B1F8698C; Thu, 31 Oct 2019 20:26:27 +0100 (CET)
To: Ted Lemon , Philip Homburg 
Cc: v6ops@ietf.org
References:     
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: 
Date: Thu, 31 Oct 2019 16:25:23 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:26:36 -0000

On 27/10/19 10:54, Ted Lemon wrote:
> On Oct 27, 2019, at 9:41 AM, Philip Homburg  > wrote:
>> The little bit missing is that the CPE should write prefixes
>> advertised using
>> SLAAC to persistent storage which allows the CPE to invalidate stale
>> prefixes
>> after a reboot.
> 
> Actually I do not believe this is correct behavior.   Let us assume
> prefix delegation.   If we have prefix delegation, then when the CPE
> comes back from a power cycle, it should reconfirm the prefix it had
> previously; the assumption is that that prefix is still valid.  This can
> be handled in infrastructure—the ISP edge router should know whether the
> prefix is still valid, because if it is it should be advertising a route
> for it.   If it is not still valid, then the CPE router should attempt
> to renew it, which would go to the DHCP server (possibly both messages
> would).

That assues the CPE has stored the previously-leased prefix on stable
storage -- which does not need to be the case. Hence the related text in
our I-D.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 12:27:48 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0789A1209D9 for ; Thu, 31 Oct 2019 12:27:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.999
X-Spam-Level: 
X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sy5sxzQi4Lcg for ; Thu, 31 Oct 2019 12:27:36 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 9DE0912097C for ; Thu, 31 Oct 2019 12:27:32 -0700 (PDT)
Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9VJRVkF021473 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 31 Oct 2019 12:27:31 -0700
DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9VJRVkF021473
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572550052; bh=tQeKh/rNwYgT1e/jvMxMIfJ7B4MZ3KOjy0yhN1GiZXg=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=GtELwLZd2GcNvox5/EVKjE4oU79XsmXa9EOrbDPS83G0aWpyVoGHZeMuY9yQ1LmT3 PXZhLCEWpXkFWorNc89+L+r/qJCM6idzFtfvJj6BnXRD9itIm7KTCsLrP8Og5fT2qy T1uuYgoevR8LtVrFOLIf/ztXvZgkUDeXOB2OmQrw=
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\))
From: Owen DeLong 
In-Reply-To: <8dbfb1b6-5efa-019f-313b-e8045ee277ee@si6networks.com>
Date: Thu, 31 Oct 2019 12:27:30 -0700
Cc: v6ops@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: 
References:   <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com> <8dbfb1b6-5efa-019f-313b-e8045ee277ee@si6networks.com>
To: Fernando Gont 
X-Mailer: Apple Mail (2.3445.104.8)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Thu, 31 Oct 2019 12:27:32 -0700 (PDT)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:27:45 -0000

> On Oct 31, 2019, at 12:13 PM, Fernando Gont  =
wrote:
>=20
> On 27/10/19 01:48, Owen DeLong wrote:
>>>> It is worth noting that these values are tunable by the =
administrator
>>>> and the
>>>> RFC suggested defaults should never be a hard-coded value.
>>>>=20
>>>> With the following exception, I don=E2=80=99t advocate modifying =
this on the
>>>> client
>>>> side:
>>>> +Section 5.5.3 of RFC4862 should be amended to specifically
>>>> allow the immediate deprecation of a prefix by sending a valid
>>>> lifetime of 0 seconds. Hosts should be required to honor
>>>> this as a signal that the prefix is no longer valid.
>>>=20
>>> Could you please elaborate on this one?
>>=20
>> I=E2=80=99m not sure what I could do to elaborate. The addition of a =
specific
>> call-out that
>> even if the current behavior of =E2=89=A42 hours =3D 2 hours is to be =
preserved,
>> there should
>> be a special case for =E2=80=9C0 seconds=E2=80=9D which causes the =
prefix to be immediately
>> deprecated with extreme prejudice.
>>=20
>> Hosts should be required to treat an RA containing a prefix with a 0 =
second
>> valid lifetime as an invalid prefix and immediately deprecate it from
>> the interface
>> if it is in use.
>=20
> OK, so you do agree with the proposed change? (in
> draft-gont-6man-slaac-renum, not in *this* document)

=46rom the context of my thinking at the time of writing the original =
reply,
=E2=80=9Cthis document=E2=80=9D referred to draft-gont-6man-slaac-renum. =
Apolgies
for my lack of clarity as you have apparently interpreted it =
differently.

>=20
>=20
>=20
>=20
>>>> I do think that generally speaking, your proposed modifications to
>>>> CPE and
>>>> router behavior should be standardized and implemented.
>>>>=20
>>>>> A better mitigation is to affect the preferred and possibly the =
valid
>>>>> lifetimes in response to consecutive RAs from the same router that =
lack
>>>>> the original (stale) prefix. e.g., after two consecutive RAs that =
do not
>>>>> contain the existing prefix, reduce the preferred lifetime. After =
two
>>>>> additional RAs, reduce the valid lifetime.
>>>>=20
>>>> In the crash scenarios you describe, you=E2=80=99re assuming a =
single router on
>>>> the network or
>>>> at least only one router announcing the prefix(es) in question with =
no
>>>> persistent
>>>> memory of the prefixes it was announcing across a reboot. In such a
>>>> scenario,
>>>> it seems to me that the following are also likely valid =
assumptions:
>>>>=20
>>>> +The network has significant excess bandwidth compared to demand.
>>>> +The small overhead of frequent RAs and short lifetimes is probably
>>>> an acceptable tradeoff in this environment.
>>>>=20
>>>> However, there are lots of other scenarios in the world where those
>>>> assumptions
>>>> won=E2=80=99t hold true and we should not seek to solve this =
problem (which is
>>>> generally
>>>> applicable to residential and SMB environments) at the expense of =
all of
>>>> those
>>>> other professionally administered environments.
>>>=20
>>> Even with the default RA frequency, if you were to unprefer a prefix
>>> upon, say, second RA that doesn't advertise it, and say, remove the
>>> prefix after many other RAs are received, that would be a *big*
>>> improvement to what we have now.
>>=20
>> I don=E2=80=99t like this idea because I can think of some scenarios =
where you
>> may receive multiple RAs from router A not containing the prefix in =
the
>> same time frame that router B has not sent an additional RA =
containing
>> the prefix, but it will do so in its next RA.
>=20
> Maybe it wasn't clear in the I-D, but the basic idea is:
> If you receive multiple RAs from router A that do not advertise the
> prefix, then you disassociate such prefix with router A. If nobody =
else
> is advertising the prefix, you'd deprecate it. If other routers are
> advertising it, this would not change the status quo of the prefix wrt
> such other routers.

That=E2=80=99s definitely not how I interpreted the I-D and I would =
strongly encourage
you to review and update the I-D for clarity in this area. I=E2=80=99m =
actually still not
100% convinced that this is correct behavior. It also places additional =
burdens
on hosts to track all routers associated with a given prefix rather than =
merely
tracking candidate default gateways, RIO data, and one set of prefix =
timers
utilizing the most recently received timer refreshes.

>> There is no requirement for all routers on the same link to provide =
the
>> same set of PIOs, nor are they required to use the same advertisement
>> timers.
>=20
> Agreed. Please see above.

With the above clarification, I think it can be done and is less likely =
to break
things. However, it does place a significant additional tracking burden =
on the
host which I=E2=80=99m not entirely convinced is a desirable situation. =
Especially in the
case of a resource-constrained host which is using SLAAC to avoid the =
overhead
of DHCP.

>=20
>=20
>=20
>=20
>=20
>=20
>>>> In section 3.2.1, you advocate setting the A and L bits to their
>>>> previous values
>>>> for prefixes which are being deprecated. IMHO, this is incorrect =
and the
>>>> announcements calling for immediate deprecation should also =
indicate that
>>>> the prefix should no longer be auto-configured and should no longer =
be
>>>> considered on-link.
>>>=20
>>> Not sure I follow. Could you please elaborate?
>>=20
>> Sure=E2=80=A6 In section 3.2.1 of your document, you advocate that if =
the previously
>> valid PIOs were set A=3D1 and/or L=3D1, then those values of the A =
and L bits
>> should be preserved in the RAs sent to deprecate them.
>>=20
>> My argument is that since you are attempting to make this a prefix =
that
>> hosts
>> will no longer autoconfigure (A) and will no longer consider on-link
>> (L), that
>> in reality, regardless of the previous state of the A and L bits in =
the RAs
>> announcing the prefix in a valid PIO, the new RAs since the prefix =
has been
>> deprecated should be sent with A=3D0, L=3D0 in order to signal the =
host
>> that this prefix should not be auto configured and should no longer =
be
>> considered on-link.
>=20
> You really make a good point. I will go through RFC4861 and see what's
> the current expected behaviour in such case.

Thanks!

Owen


From nobody Thu Oct 31 12:34:10 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 339BE12000F for ; Thu, 31 Oct 2019 12:34:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level: 
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7aRIh119vnVl for ; Thu, 31 Oct 2019 12:34:06 -0700 (PDT)
Received: from mail-qk1-x72f.google.com (mail-qk1-x72f.google.com [IPv6:2607:f8b0:4864:20::72f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7A16120018 for ; Thu, 31 Oct 2019 12:34:05 -0700 (PDT)
Received: by mail-qk1-x72f.google.com with SMTP id 71so8297781qkl.0 for ; Thu, 31 Oct 2019 12:34:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=ltwSmjcMTMmkvIg7gYfQomWqrXoDXZBo+FW6znQ6baU=; b=UFmaYpDN/9ReFl5vDYO8fQPBnyw2Oaz7P6hDpXt4Nz6Xqilg0Dk5iHIQOkbgc/U5Tv aF+dqtiBHXBnv25L0dRJqRc2UCyApy7K9A5aDQBm1B6Zoivm8fKID0FyjMdHgLWgiPL2 /9rLJolPHEzgXgZ+QVPJhGwBf3/l9S5DdUKX3DOX3t9Y9PvqKVdx+cj0n6QzFHF0iCni /83vTMRu2QjoiJKrK1BAPFGce7oULw/GpMWYaX8EYKfxnIiEQW7e881EUGLxEmiyLaJR k5WKb+JoMOMPz3B9jAbQVANrGOQCw1c+ULJMsrj/cVsnGyPl0A/bXK7aByohNgCG4bu9 Fv6Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=ltwSmjcMTMmkvIg7gYfQomWqrXoDXZBo+FW6znQ6baU=; b=sj9MbGRUL+x8zE4hIAZdE1L5Y+GF6bCoFHdnfSoLW5+uJ2q73Zs1kSUM8DU8H04Dvc 5D2tEupmI5pzveDhvE18AG+rzcq3iuWD0luNllYP2L2yWBuo5kSR+rbJTyjdXHLLH/aQ 3gDdKL6/L5kyAT3Bo8ZP0VYywAUMNu/0QPW0kHg20QzFDDHouJ6h0adT8OGmCFwumbxS cVPqwmLnOve2hwKj4hPYMJUC5GWajZK7Wc7TQOMxDWJO5UQJRR0qjPKbXuB3jnJbQwJM tGlhLsGvw7kpRv1ObKNAw8OY+LaLpOVqWC+MKUuu2DsZaQFAaZzNK3/gVwwr5EcSPtpr +lUw==
X-Gm-Message-State: APjAAAUutvGJSvp1gqFuLilL92m/MpLp/ekrKuXTATSzUnJ15eV/Om/M Oqts379iPKT0eESjwQJgoI6eSgtjwIaFrA==
X-Google-Smtp-Source: APXvYqwtBgVqoxBDt41a+m5UigGPoJrQ8r35U8sWw8C+n81HCPt7EUUaGMU4Fz+s+0y977Sfoj2oyQ==
X-Received: by 2002:a37:c40d:: with SMTP id d13mr7064242qki.371.1572550444824;  Thu, 31 Oct 2019 12:34:04 -0700 (PDT)
Received: from ?IPv6:2601:18b:300:36ee:bdc1:1d6d:228a:c9c1? ([2601:18b:300:36ee:bdc1:1d6d:228a:c9c1]) by smtp.gmail.com with ESMTPSA id m5sm1743549qtp.97.2019.10.31.12.34.03 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 31 Oct 2019 12:34:04 -0700 (PDT)
From: Ted Lemon 
Message-Id: <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_4BF377F3-88B4-41BB-AD1F-EDBD1E762866"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3600\))
Date: Thu, 31 Oct 2019 15:34:02 -0400
In-Reply-To: <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com>
Cc: v6ops list 
To: Fernando Gont 
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com>
X-Mailer: Apple Mail (2.3600)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:34:09 -0000

--Apple-Mail=_4BF377F3-88B4-41BB-AD1F-EDBD1E762866
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

On Oct 31, 2019, at 3:21 PM, Fernando Gont  =
wrote:
> On 27/10/19 09:02, Ted Lemon wrote:
>> Indeed, this would also not actually solve the problem.   At present,
>> the ISPs are doing something that is out of spec and causes problems.
>> If we =E2=80=9Cfix=E2=80=9D this by accommodating what they do, does =
that help, or
>> does it just encourage them to continue doing it?
>=20
> Did happy eyeballs encourage broken IPv6 connectivity, or did it
> actually help IPv6 deployment?

Don=E2=80=99t get me wrong=E2=80=94I=E2=80=99m not saying we shouldn=E2=80=
=99t do things to improve the situation.   I am saying that we should be =
strategic about it.

>> What should be happening on the host with a prefix that=E2=80=99s =
deprecated
>> is that TCP connections should be timing out.   This doesn=E2=80=99t =
take
>> very long. =20
>=20
> ~9 minutes, IIRC.

Should be 90 seconds.


>> And if there is a new prefix being advertised on the
>> link, that address should have a valid lifetime newer than the old
>> prefix, meaning that the next TCP connection should come from that
>> new prefix, not the old one.
>=20
> That's not correct. Neither the Valid Lifetime nor the Preferred
> Lifetime affect address selection.

Okay, there=E2=80=99s something to fix.  Why would these not affect =
source address selection?

>> I think Fernando=E2=80=99s plan to shorten some timers makes sense, =
but
>> shortening the minimum really doesn=E2=80=99t=E2=80=94it just opens =
up an opportunity
>> for an easy DoS, since I can now just send out death packets to the
>> local network and break everything all at once.
>=20
> The reality with ND attacks are (modulo sanity checks on the packets):
> you enforce FHS, or you don't.

What is =E2=80=9CFHS=E2=80=9D?

>> If you Really Really want to be able to have the routers send out RAs
>> that deprecate the default route, and, as Mark is saying here, to
>> upgrade millions or perhaps billions of hosts, why not ask for
>> something that=E2=80=99s a real improvement?
>=20
> Every piece helps.

Right, but if the effort involved in two different options differs by =
epsilon, you should always choose the option that produces the better =
outcome, shouldn=E2=80=99t you?

>> Second, fix RA so that it=E2=80=99s
>> non-repudiable by a device that doesn=E2=80=99t have the secret key.
>>=20
>> SEND does this, sort of.  Nobody uses SEND because it tries to solve
>> a too-big problem and does it using obsolete technology.   But the
>> basic idea is good: include a public key in every RA that can be used
>> to validate that the RA was signed with the corresponding private
>> key.
>=20
> What's the practical difference between that, an a network that =
supports
> RA-Guard?

On a network that supports RA guard, there probably is no difference, =
but RA guard on some networks, as we=E2=80=99ve discussed in the past, =
will actually make the network not work.   RA guard requires an active =
administrator.   So the CPE case we=E2=80=99re talking about isn=E2=80=99t=
 relevant.


>> When another RA arrives, see if it was signed with the same key.   If
>> so, it came from the same router, and can be trusted to update
>> whatever information that router sent, including flash-deprecating a
>> prefix.   If not, ignore it.
>=20
> In the non-SEND trust model, you do trust the local router. Why did =
you
> trust the local router to configure your network, but not for
> deprecating the prefix?

In the non-SEND trust model, you trust the local network.   You hope =
that the RA you get =E2=80=9Cfrom the router=E2=80=9D is actually from =
the router.


--Apple-Mail=_4BF377F3-88B4-41BB-AD1F-EDBD1E762866
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

On =
Oct 31, 2019, at 3:21 PM, Fernando Gont <fgont@si6networks.com> wrote:
On 27/10/19 09:02, =
Ted Lemon wrote:
Indeed, this would also not actually solve the =
problem.   At present,
the ISPs are doing =
something that is out of spec and causes problems.
If we =
=E2=80=9Cfix=E2=80=9D this by accommodating what they do, does that =
help, or
does it just encourage them to continue doing =
it?

Did happy eyeballs =
encourage broken IPv6 connectivity, or did it
actually =
help IPv6 deployment?

Don=E2=80=99t get me wrong=E2=80=94I=E2=80=99m not =
saying we shouldn=E2=80=99t do things to improve the situation.   I =
am saying that we should be strategic about it.

What should be happening =
on the host with a prefix that=E2=80=99s deprecated
is =
that TCP connections should be timing out.   This doesn=E2=80=99=
t take
very long.  

~9 minutes, IIRC.

Should be =
90 seconds.


And if there is a new prefix being advertised =
on the
link, that address should have a valid lifetime =
newer than the old
prefix, meaning that the next TCP =
connection should come from that
new prefix, not the old =
one.

That's not correct. =
Neither the Valid Lifetime nor the Preferred
Lifetime =
affect address selection.

Okay, there=E2=80=99s something to fix.  Why would =
these not affect source address selection?

I think Fernando=E2=80=99s=
 plan to shorten some timers makes sense, but
shortening =
the minimum really doesn=E2=80=99t=E2=80=94it just opens up an =
opportunity
for an easy DoS, since I can now just send out =
death packets to the
local network and break everything =
all at once.

The reality with =
ND attacks are (modulo sanity checks on the packets):
you =
enforce FHS, or you don't.
What is =E2=80=9CFHS=E2=80=9D?

If you Really Really =
want to be able to have the routers send out RAs
that =
deprecate the default route, and, as Mark is saying here, to
upgrade millions or perhaps billions of hosts, why not ask =
for
something that=E2=80=99s a real improvement?

Every piece helps.

Right, but =
if the effort involved in two different options differs by epsilon, you =
should always choose the option that produces the better outcome, =
shouldn=E2=80=99t you?

 Second, fix RA so that it=E2=80=99s
non-repudiable by a device that doesn=E2=80=99t have the =
secret key.

SEND does this, sort of. =
 Nobody uses SEND because it tries to solve
a too-big =
problem and does it using obsolete technology.   But the
basic idea is good: include a public key in every RA that can =
be used
to validate that the RA was signed with the =
corresponding private
key.

What's the practical difference between that, an a network =
that supports
RA-Guard?

On a =
network that supports RA guard, there probably is no difference, but RA =
guard on some networks, as we=E2=80=99ve discussed in the past, will =
actually make the network not work.   RA guard requires an active =
administrator.   So the CPE case we=E2=80=99re talking about =
isn=E2=80=99t relevant.


When =
another RA arrives, see if it was signed with the same key. =
  If
so, it came from the same router, and can =
be trusted to update
whatever information that router =
sent, including flash-deprecating a
prefix.   If =
not, ignore it.

In the =
non-SEND trust model, you do trust the local router. Why did you
trust the local router to configure your network, but not =
for
deprecating the prefix?

In the non-SEND trust model, you trust the local network. =
  You hope that the RA you get =E2=80=9Cf=
rom the router=E2=80=9D is actually from the router.

=

--Apple-Mail=_4BF377F3-88B4-41BB-AD1F-EDBD1E762866--


From nobody Thu Oct 31 12:44:41 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2039612006A for ; Thu, 31 Oct 2019 12:44:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vY98ajxZMtTn for ; Thu, 31 Oct 2019 12:44:37 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FE29120018 for ; Thu, 31 Oct 2019 12:44:37 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id C62BA8679F; Thu, 31 Oct 2019 20:44:32 +0100 (CET)
To: Philip Homburg , v6ops@ietf.org
References:   
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <96c7ab64-0768-55f0-9d92-4574dbd8032c@si6networks.com>
Date: Thu, 31 Oct 2019 16:38:39 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:44:39 -0000

On 27/10/19 12:05, Philip Homburg wrote:
>> Indeed, this would also
>> not actually solve the problem.   At present, the ISPs are doing
>> something that is out of spec and causes problems.   If we fix this
>> by accommodating what they do, does that help, or does it just
>> encourage them to continue doing it?
> 
> At the moment, ISPs are doing something that sort of works in IPv4 because
> of NAT. It causes significant issues in IPv6.

Note that this is *one* of the network scenarios that may lead to this
problematic scenario.



> Of course, can we can tell ISPs that they are doing it wrong and that they
> should not deploy IPv6 until they have fixed their networks.
> 
> I would like to have IPv6 now. And if that requires some tweaks to deal with
> broken behavior then so be it.

Indeed. Besides, the patch increases robustness overall.


> 
>> If you Really Really want to be able to have the routers send out
>> RAs that deprecate the default route, and, as Mark is saying here,
>> to upgrade millions or perhaps billions of hosts, why not ask for
>> something thats a real improvement?
> 
> Because bundling features is a good way to ensure that nothing gets done.

Indeed.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 12:44:51 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8278C12087A for ; Thu, 31 Oct 2019 12:44:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WhAn_oBuwn_I for ; Thu, 31 Oct 2019 12:44:42 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18D9E12081E for ; Thu, 31 Oct 2019 12:44:42 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 2209A8679F; Thu, 31 Oct 2019 20:44:38 +0100 (CET)
To: Ted Lemon , Philip Homburg 
Cc: v6ops@ietf.org
References:    <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com>
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <5e0d1da1-4933-069c-68f6-9aa360106582@si6networks.com>
Date: Thu, 31 Oct 2019 16:41:28 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:44:50 -0000

On 27/10/19 14:14, Ted Lemon wrote:
> On Oct 27, 2019, at 11:05 AM, Philip Homburg  > wrote:
>> If you think that this is an important thing to fix, feel free to 
>> talk about it. But why in this discussion? SEND doesn't do anything for
>> flash renumbering. From an operational point of view, RA-guard is much
>> more attractive then SEND. So it is not clear to me that there is any
>> need for SEND. But I could be wrong. In any case, if there is a need
>> to discuss SEND we could do that separately.
> 
> I think you missed my point.  You can’t do flash renumbering by
> advertising a prefix with a valid lifetime of zero, because that will be
> ignored by hosts.   If it were not ignored by hosts, it would be a very
> effective DoS vector. 

As someone that has played a lot with ND-based DoS vectors, I should say
that you trust RAs, or you don't. If you do, all bets are off. ("sudo
apt-get install ipv6toolkit;man ra6" and you'll get examples of a bunch
of other DoS attacks that an attacker can perform).

>From an attacker's point of view, you just need one that works.

-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 12:44:57 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3B461208E3 for ; Thu, 31 Oct 2019 12:44:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z3mdSzDyuXuK for ; Thu, 31 Oct 2019 12:44:46 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD37C1208CA for ; Thu, 31 Oct 2019 12:44:45 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 37D248679F; Thu, 31 Oct 2019 20:44:42 +0100 (CET)
To: Owen DeLong , Ted Lemon 
Cc: v6ops@ietf.org
References:    <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <3E4C671B-A03E-4A3F-A68B-5849BDCC6267@delong.com>
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <1c925f21-f363-b053-b936-888a3060f7a7@si6networks.com>
Date: Thu, 31 Oct 2019 16:43:08 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <3E4C671B-A03E-4A3F-A68B-5849BDCC6267@delong.com>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:44:52 -0000

On 27/10/19 16:35, Owen DeLong wrote:
> 
> 
>> On Oct 27, 2019, at 10:14 , Ted Lemon > > wrote:
>>
>> On Oct 27, 2019, at 11:05 AM, Philip Homburg
>> > wrote:
>>> If you think that this is an important thing to fix, feel free to 
>>> talk about it. But why in this discussion? SEND doesn't do anything for
>>> flash renumbering. From an operational point of view, RA-guard is much
>>> more attractive then SEND. So it is not clear to me that there is any
>>> need for SEND. But I could be wrong. In any case, if there is a need
>>> to discuss SEND we could do that separately.
>>
>> I think you missed my point.  You can’t do flash renumbering by
>> advertising a prefix with a valid lifetime of zero, because that will
>> be ignored by hosts.   If it were not ignored by hosts, it would be a
>> very effective DoS vector.    And so if you want to be able to flash
>> deprecate a route, you need some way to validate that the deprecation
>> is coming from the same source as the route.   Hence my suggested
>> “limited SEND”.
>>
>> Limited SEND would not be hard to implement.   Yes, it would be
>> marginally harder than just saying that hosts should accept flash
>> deprecation of prefixes.   But nobody with any sense is going to
>> implement that in their IP stack, so in practice if you want this to
>> work, you need some way to do flash deprecations that doesn’t create a
>> massive attack vector.
> 
> It’s only a DOS vector if the attacker is already on-LAN.
> 
> I recognize that there are environments where that is expected behavior
> (e.g. Coffee Shop Wifi, University networks, etc.),but
> it’s not the case for the average residential CPE and residential LAN
> segments.
> 
> In the vast majority of situations where I would expect hostile hosts to
> be likely to be on LAN, I don’t think I’d be using
> SLAAC for address assignment in the first place. Most likely, I’d want
> stateful DHCP in such instances.

You can do SLAAC as long as you do FHS. At which point the issue raised
by Ted is a non-issue.


-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 12:47:27 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E6EF12006A for ; Thu, 31 Oct 2019 12:47:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level: 
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CxtVZzSOeXY3 for ; Thu, 31 Oct 2019 12:47:21 -0700 (PDT)
Received: from mail-qt1-x82c.google.com (mail-qt1-x82c.google.com [IPv6:2607:f8b0:4864:20::82c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A958A120018 for ; Thu, 31 Oct 2019 12:47:21 -0700 (PDT)
Received: by mail-qt1-x82c.google.com with SMTP id t8so10161840qtc.6 for ; Thu, 31 Oct 2019 12:47:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=spKos9Oq56BLlhbEGrXt0pPb2qZiZ0A03dJ52TM0phU=; b=i3zzRwgZ6eDwCBaoxkNEMGfCJyY2HRDDuuC+SRArmQVXBcU8cV5VR7nEKBheNmErxr 2+qRqBrqmk70LSf+Xw2r4/JLWUjc4WhJBza32w9liuGrxWvpEZEnGJsXarVt+Gjqj4Dj SK4eSvN+I6wwfzB7Z/+TATx1F6/trV/UG7dvFdJ+JucXzVUIonJooGwkWeix5uBfDKGL SRG9SlFB7CQZHydpUrgnklTM0xZjiE1xBbS+8arN/Z+RT2Tz9Z+3uUyzyre+3su7BTiz qeItYzBFSAXKMGauPevgV9lggcBrq7o5gat+GNT5RkF/vCRHwrPlKoqSXT/h8LWJ83vG YeGg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=spKos9Oq56BLlhbEGrXt0pPb2qZiZ0A03dJ52TM0phU=; b=lV7pj16ecQgloUyv0mobUeKpE5f9sX6veprzl3Cc/MZ+C8xINYl97r5XfL7l11038Y oqnipoRiszmXlWyuokfieCV1S5B7wK5wEs5T6J/wahTOqe4MvmFT0KA+3r6Qq0iTKPgh hbX08i+xe19CdgHPOndHsu5K3BuwF6bewqL8FoP7pwsf51EUKDw97joaRusRMrv7pLMr GsCQF9lCkPsigUYUJrRPFoM86UGiOohrZGaelIh+D4Ior2pSONOs3ofZCtlYVjLTSLVr smo6LcNR6QjGAwm8mlMo3sAHPiuYCzMjUxjbUWWzQdxheNtnjeT54DJ2FO42DqxNjqpt dRmw==
X-Gm-Message-State: APjAAAVQVHM1d6IqefTJxGedhkdMJxhaHujVOfIxVVz6GVGvhLT7SwNy kb6pgyF/ICYc5eWXpMBY5YheRTvvru59IQ==
X-Google-Smtp-Source: APXvYqxTAvWSS+LpbLRWpBEmO2v/j/acahDw+//7GrwV9f39KoZHQfaBSQChFXb8FOsL4NPsXvyUZQ==
X-Received: by 2002:ac8:120a:: with SMTP id x10mr7494582qti.366.1572551240708;  Thu, 31 Oct 2019 12:47:20 -0700 (PDT)
Received: from ?IPv6:2601:18b:300:36ee:bdc1:1d6d:228a:c9c1? ([2601:18b:300:36ee:bdc1:1d6d:228a:c9c1]) by smtp.gmail.com with ESMTPSA id o2sm2463713qkf.68.2019.10.31.12.47.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 31 Oct 2019 12:47:20 -0700 (PDT)
From: Ted Lemon 
Message-Id: 
Content-Type: multipart/alternative; boundary="Apple-Mail=_CE443863-59E8-437B-BC98-04D662A5AD41"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3600\))
Date: Thu, 31 Oct 2019 15:47:18 -0400
In-Reply-To: <5e0d1da1-4933-069c-68f6-9aa360106582@si6networks.com>
Cc: Philip Homburg , v6ops@ietf.org
To: Fernando Gont 
References:    <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <5e0d1da1-4933-069c-68f6-9aa360106582@si6networks.com>
X-Mailer: Apple Mail (2.3600)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:47:24 -0000

--Apple-Mail=_CE443863-59E8-437B-BC98-04D662A5AD41
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

On Oct 31, 2019, at 3:41 PM, Fernando Gont  =
wrote:
> As someone that has played a lot with ND-based DoS vectors, I should =
say
> that you trust RAs, or you don't. If you do, all bets are off. ("sudo
> apt-get install ipv6toolkit;man ra6" and you'll get examples of a =
bunch
> of other DoS attacks that an attacker can perform).

As an end user, I don=E2=80=99t have this experience.   If someone is =
spamming my network with RAs, I can find out who and disconnect them.   =
A DoS attack based on massive quantities of RAs is a lot different than =
an attack that shuts my network off with one multicast.=20


--Apple-Mail=_CE443863-59E8-437B-BC98-04D662A5AD41
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

On =
Oct 31, 2019, at 3:41 PM, Fernando Gont <fgont@si6networks.com> wrote:
As someone that has played a lot with ND-based DoS vectors, I =
should say
that you =
trust RAs, or you don't. If you do, all bets are off. ("sudo
apt-get =
install ipv6toolkit;man ra6" and you'll get examples of a =
bunch
of other DoS =
attacks that an attacker can =
perform).

As=
 an end user, I don=E2=80=99t have this experience.   If someone is =
spamming my network with RAs, I can find out who and disconnect them. =
  A DoS attack based on massive quantities of RAs is a lot =
different than an attack that shuts my network off with one =
multicast. 

=

--Apple-Mail=_CE443863-59E8-437B-BC98-04D662A5AD41--


From nobody Thu Oct 31 12:49:31 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE577120871 for ; Thu, 31 Oct 2019 12:49:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level: 
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a_0a_jBrpHy5 for ; Thu, 31 Oct 2019 12:49:28 -0700 (PDT)
Received: from mail-qk1-x72f.google.com (mail-qk1-x72f.google.com [IPv6:2607:f8b0:4864:20::72f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 25E85120A12 for ; Thu, 31 Oct 2019 12:49:28 -0700 (PDT)
Received: by mail-qk1-x72f.google.com with SMTP id h6so8330100qkf.2 for ; Thu, 31 Oct 2019 12:49:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=ZC7vOe5+gBG284wLIDoM/IgBKEIk52LQa/5Vb/unNH0=; b=i+8mk8mMjpr8T2AM+sDAiqfuGmu7bsEnp+glhOkAGT3eUvOETR5LWns94bhKqVavev 3kG4lT48URRPOb0WT6Kv06yJsrUZXhVDsquPIaQz4xIpdyxzJgWxLEaBxI+1kkT0juXC 1J2PlzmyD5L3gf8eeDhXp9br+dEXTi1RK5n07kN9at6oCxo3zLTRIScYU9GoGpFq88sK rqNZLJx53JtM+KXZT6KsCV5NQSFNDqQhXXMR6+9/QtC4lJRGClFORjygQAdUQ3KQOAL/ QVpI6tJmSE2fTle3nD/82+7hZYVUePeqxPhS6qC5RsuCbqMWJeqQznG3IONmi8MIeDm/ hswQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=ZC7vOe5+gBG284wLIDoM/IgBKEIk52LQa/5Vb/unNH0=; b=uI60roNKhH/v3xzc3KLQLo1FZrLWLHsKv8j4fHUBtwEw0BQiFMpotMu5/i1oBR3Ow8 GHGqrddwUNhMnCWGCYp6A5ORdl4s3nfxyIrXbfil6nkXbifD5XTb9fLZgp7R4pE9CkR7 tM8EUVU/d0dfZfTSm5mzTG8XQN7NxL9I/JOHZ2IAGGqiK0fwk1HOsri7AdNKTpGnBt4H /oNnGBD0xA05q/aBVIlVZjRF49vbwo/xS4zLoM983qglCKumkzeKtbcjis7pQXWCqj1P bVelvAzvRqbJ5VZRPSqrM4WzKja9aPoclNaSiTo4iZAxdLmWf0g5YFDMq3zY9kcua5QC EhGA==
X-Gm-Message-State: APjAAAXJCNowISfjJSX/5K+P4XP8Okw/jWN/4vjeiu0HmMt2Xcxs6xpK qzozlg9LIbEPgYmfWdL7CYHK8mmNromWkg==
X-Google-Smtp-Source: APXvYqyT5Li0r1qIPB0Qnfe2IH3t35Jeuucg2plH2I6yyAzQGkbDnNNK5o3XUMLKiDYJssWRwjyu4g==
X-Received: by 2002:a05:620a:648:: with SMTP id a8mr6834516qka.426.1572551367171;  Thu, 31 Oct 2019 12:49:27 -0700 (PDT)
Received: from ?IPv6:2601:18b:300:36ee:bdc1:1d6d:228a:c9c1? ([2601:18b:300:36ee:bdc1:1d6d:228a:c9c1]) by smtp.gmail.com with ESMTPSA id o12sm2295210qkk.54.2019.10.31.12.49.26 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 31 Oct 2019 12:49:26 -0700 (PDT)
From: Ted Lemon 
Message-Id: 
Content-Type: multipart/alternative; boundary="Apple-Mail=_83EDF94F-17F0-4140-82D0-2C8370CCCEEB"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3600\))
Date: Thu, 31 Oct 2019 15:49:24 -0400
In-Reply-To: 
Cc: Fernando Gont , v6ops list 
To: Owen DeLong 
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com> <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com> 
X-Mailer: Apple Mail (2.3600)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:49:30 -0000

--Apple-Mail=_83EDF94F-17F0-4140-82D0-2C8370CCCEEB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

On Oct 31, 2019, at 3:47 PM, Owen DeLong  wrote:
> RA Guard could be default configured on switches with particular =
default =E2=80=9Cplug router in here=E2=80=9D (uplink) ports, =
eliminating the need for an active administrator. This could be a useful =
specification in the HomeNet documents, perhaps.

This would be disastrous.   It pretty much makes permissionless =
networking impossible in exchange for solving a security problem no-one =
has.


--Apple-Mail=_83EDF94F-17F0-4140-82D0-2C8370CCCEEB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

On =
Oct 31, 2019, at 3:47 PM, Owen DeLong <owen@delong.com> =
wrote:
RA Guard could be default =
configured on switches with particular default =E2=80=9Cplug router in =
here=E2=80=9D (uplink) ports, eliminating the need for an active =
administrator. This could be a useful specification in the HomeNet =
documents, perhaps.

This would be disastrous.   It pretty much makes =
permissionless networking impossible in exchange for solving a security =
problem no-one has.

=

--Apple-Mail=_83EDF94F-17F0-4140-82D0-2C8370CCCEEB--


From nobody Thu Oct 31 12:58:44 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D528D1200C5 for ; Thu, 31 Oct 2019 12:58:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tduVQXYtK2Yr for ; Thu, 31 Oct 2019 12:58:41 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE43E12006A for ; Thu, 31 Oct 2019 12:58:41 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id A4C828669B; Thu, 31 Oct 2019 20:58:38 +0100 (CET)
To: "Bernie Volz (volz)" , Owen DeLong , Ted Lemon 
Cc: "v6ops@ietf.org" 
References:       <74875D36-6A96-4FB2-853F-86875833470D@cisco.com>
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: 
Date: Thu, 31 Oct 2019 16:47:43 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <74875D36-6A96-4FB2-853F-86875833470D@cisco.com>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:58:44 -0000

On 27/10/19 19:03, Bernie Volz (volz) wrote:
>>I don’t know of a single DHCPv6 server which operates that way
> currently. Can you point to a working example?
> 
>  
> 
> That is actually the RFC8415 specified behavior … the DHCP server I work
> on (Cisco Prime Network Registrar) will do this if steps are taken to
> “invalidate” a lease.
> 
>  
> 
> See RFC 8415, Section 18.3.4:
> 
>  
> 
>    If the server finds that any of the addresses in the IA are not
> 
>    appropriate for the link to which the client is attached, the server
> 
>    returns the address to the client with lifetimes of 0.
> 
>  
> 
>    If the server finds that any of the delegated prefixes in the IA are
> 
>    not appropriate for the link to which the client is attached, the
> 
>    server returns the delegated prefix to the client with lifetimes
> 
>    of 0.

Doesn't the above imply that the client remembers the addresses?


-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 12:58:55 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 99278120973 for ; Thu, 31 Oct 2019 12:58:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vt8YDE6g996N for ; Thu, 31 Oct 2019 12:58:45 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60F7212006A for ; Thu, 31 Oct 2019 12:58:45 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id B8426866A6; Thu, 31 Oct 2019 20:58:42 +0100 (CET)
To: Ole Troan , Philip Homburg 
Cc: v6ops@ietf.org
References:  <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org>  
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <657422af-5243-ce32-e72c-72197cde866f@si6networks.com>
Date: Thu, 31 Oct 2019 16:58:32 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 19:58:51 -0000

On 27/10/19 19:52, Ole Troan wrote:
>>>> Note that we could change SLAAC to allow the lifetime of a
>>>> prefix to be set to zero, instead of having to wait for 2
>>>> hours. That might be an improvement but requires careful
>>>> analsysis.
>>> 
>>> Can you explain how operating a public service should work on
>>> this type of network?
>> 
>> Could you be more specific what you consider a 'public service' and
>> what you expect to break?
> 
> The (only) value (sic) of IPv6 to end-users is retoration of end to
> end connectivity at the network layer.

That's know how IPv6 is being deployed in many places. It's quite common
that the CPE implements a Diode firewall. And what's worse, the CPE
doesn't have the appropriate support in UPnP for punching holes in it.



> I challenge you to find in the "real world" of end-users many with
> much trust in the ad-based "you are the product" centralised services
> in the current Internet.

Isn't that how/why Google, Facebook, and others make money?



> IPv6 was meant to allow end-users to run
> decentralized services.
> 
> - hidden primary DNS - mail - web - home-automation - video
> conferencing - jabber
> 
> All of those have great open source software. To use Owen's
> paragraph: "I don’t know of a single server which operates that way
> currently. Can you point to a working example?"
> 
> Assuming all the moving parts required were updated to support flash
> renumbering (I have little proof they even support graceful
> renumbering), if the end-user cannot trust the lifetimes in the
> delegated prefix, DNS with TTL=1s is presumably the only choice?

I'm not saying you don't raise a valid question. However, in the context
of this discussion there's a difference between being able to graceully
handle the scenario when it happens, vs planning for it to happen
deterministically.

(FWIW, I have a bunch of services running behind NATs, where the
addresses get rotated. Yes, I do use small lifetimes (< 1 minute).
That's not uncommon nowadays, anyway)




>> What I described is basically what happens on IPv4 when a CPE uses
>> NAT and gets a new IPv4 address from the ISP.
> 
> If making IPv6 no better than IPv4 + NAT, then stick with IPv4 +
> NAT. IPv4 NAT scales very well as it turns out.

IPv6 could allow you to host services in a better way.

(In my example above, I just *can't* leverage IPv6 because of the
firewall and CPEs with no UPnP support for IPv6)




>> Flash renumbering is far from ideal, but a reality on the current
>> internet. Any application that is suitable for home use is expected
>> to deal with that scenario.
> 
> We don't need IPv6 to maintain the status quo.

We need IPv6 to actually work. There are networks nowadays in which it
is breaking badly. IN some cases it's preventing deployment. In others,
users are falling back to IPv4.


> 
>> Note that with automatic DNS updates, you can probably run a mail
>> server (or your personal 'cloud') on such a link. But that is not a
>> common use case at the moment.
> 
> And don't get me wrong, I'm all for making IPv6 addressing / onlink
> behaviour more robust. But not justified in this way that can be seen
> to allow for practices that removes any benefit of IPv6 over
> IPv4/NAT.

The benefits are in global addressing. As noted abouve, there are many
scenarios where "global connectivity" is worse for IPv6. Not that I like
it (but that doesn't change facts).

P.S.: I reiterate that the home network/cpe case is only *one* of the
scenarios where this problem may be faced.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 13:26:35 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB1F51200E9 for ; Thu, 31 Oct 2019 13:26:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level: 
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Ci5eoTPl; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=RYGMYdnq
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5PtvoN9gxy3O for ; Thu, 31 Oct 2019 13:26:33 -0700 (PDT)
Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01D2F12004D for ; Thu, 31 Oct 2019 13:26:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3424; q=dns/txt; s=iport; t=1572553593; x=1573763193; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=seWHfpH9TP4HZj09/wN6XdrZEyYt2H3mRNk9nrdhzz4=; b=Ci5eoTPlyNFzE8fz0HgSYGpxLnvY4SEgeeaU9Z0q1nzsNqhlSTIiswar xC2DAMZdYecgjnA6ZfbUSgC3OCZUgFKrqozdXO225xa3AdDCHdITPlsTO MTh10wk/EXsWPdzhT5CuhdW7WYKxPqVx3PwGuu1JEHMz2Si8+H2ogtLvB U=;
IronPort-PHdr: =?us-ascii?q?9a23=3AttuaCBCYwHlRizk73rOzUyQJPHJ1sqjoPgMT9p?= =?us-ascii?q?ssgq5PdaLm5Zn5IUjD/qgw3kTRU9Dd7PRJw6rNvqbsVHZIwK7JsWtKMdRXUg?= =?us-ascii?q?Mdz8AfngguGsmAXFP8KOzCZC0hF8MEX1hgrDm2?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AUAAAuQ7td/4kNJK1lGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYFrAwEBAQELAYFKUAWBRCAECyoKhB6DRgOKdIJ?= =?us-ascii?q?el2uBLoEkA1QJAQEBDAEBLQIBAYRAAheDXSQ2Bw4CAwkBAQQBAQECAQUEbYU?= =?us-ascii?q?3DIVRAQEBAQIBEhERDAEBNwEEBwQCAQgOAwQBAQECAiYCAgIwFQgIAgQBDQU?= =?us-ascii?q?IGoVHAw4gAaVwAoE4iGB1gTKCfgEBBYURGIIXCYEOKAGMEBiBf4FXghc1PoQ?= =?us-ascii?q?vGBWCeTKCLI99nXcKgiSVUJlhhFeGE4NWmVMCBAIEBQIOAQEFgVkKKIFYcBW?= =?us-ascii?q?DJ1AQFIMGg3OKU3SBKIw2AYENAQE?=
X-IronPort-AV: E=Sophos;i="5.68,252,1569283200"; d="scan'208";a="354659025"
Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 31 Oct 2019 20:26:27 +0000
Received: from XCH-RCD-020.cisco.com (xch-rcd-020.cisco.com [173.37.102.30]) by alln-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id x9VKQR0r014982 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 31 Oct 2019 20:26:27 GMT
Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-020.cisco.com (173.37.102.30) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 31 Oct 2019 15:26:27 -0500
Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 31 Oct 2019 15:26:26 -0500
Received: from NAM04-CO1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 31 Oct 2019 16:26:26 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=O4iUt5RNgjser1aYIkiGyDiVNeS7ysgjCFUoVm0M/6Ko1uz96p/tNYJOwv8Cnx/GR64f0FtadfSJj/ez0TnDyOmKrO/bLW220jFOXMHIeBXdPN1jDwiq0dU+qXTiqPZbVNDczq+MivamJO6AWXRxnIOEhHizewaUnHBroFd/Jl8PnUgtMrAITc/KxRJTOutOjs9ULTGHqnqazMkVzzky3CfL/JJ2RnpLGXGpp1HngLSFFXezE7YjnyBp3t9dMaUJmBvV0755gAEF4EmTY0VQA+9mlgXy31JTh/iJl54AKco+qcVJIGlaElwdBtwOdGYPQSOqZC/Ng7lc1F0NOl24gA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=seWHfpH9TP4HZj09/wN6XdrZEyYt2H3mRNk9nrdhzz4=; b=WGQO4uJJE9t0I6FyXyehVo2kBDprj8P2lYtb/lgwPtTy9fAMKoGsI9nnnsMYuID4JiO2uva0G5fO2L75SVMTK9IuUy/eCvtwoMkYDCjGWN5ry3+5E512lyCugU1NAahq42YNm8XqvKJF+JMK/pnLKBSoqiuVSx7KB65bCnFH2glq3Dh/a07/Z0DHDfCE497Ob4pcEO3E2Qor8o/5+rw8+QFlcSgxfbkQKyuELnIjnN66tt5fs6Lqq2gU5lVPPsi6t6FF/GWi5Nw9K4I7c9HL4U3YMvUxj99KmdXpPYOeaAfVIGrV92LbI8/1redJBU7F1GBQ9axAE5v7HLHKxtRg3g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com;  s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=seWHfpH9TP4HZj09/wN6XdrZEyYt2H3mRNk9nrdhzz4=; b=RYGMYdnqPJ0iQ31pc9PJlwjsUAGLAxEVei9Dxyj+k5nacFRd0nxg4btY3hN4np0di3HAoimnaPpG9lz6BKqE5fOCs7hhQ9KG7uNAG4Ahe/b8FTvHjg0mqout4X1MSM6ZKKPI/dg3Ajk9YtlcgfZ2/jFpXLfXLHDdMAkdPH92Ue8=
Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2255.namprd11.prod.outlook.com (10.174.101.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.23; Thu, 31 Oct 2019 20:26:23 +0000
Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.028; Thu, 31 Oct 2019 20:26:23 +0000
From: "Bernie Volz (volz)" 
To: Fernando Gont , Owen DeLong , "Ted Lemon" 
CC: "v6ops@ietf.org" 
Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
Thread-Index: AQHVibwc6PRwlsH+ZUmOeFzp+XKiI6dt8FJugAA0sICAAERiAIAACLmAgAATKlOAAANjAIAAXboA///n6oCABmZYgIAABRDQ
Date: Thu, 31 Oct 2019 20:26:22 +0000
Message-ID: 
References:       <74875D36-6A96-4FB2-853F-86875833470D@cisco.com> 
In-Reply-To: 
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com; 
x-originating-ip: [173.38.117.77]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 8a2b546b-174b-4602-36de-08d75e4098ff
x-ms-traffictypediagnostic: MWHPR1101MB2255:
x-microsoft-antispam-prvs: 
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 02070414A1
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(346002)(376002)(396003)(366004)(136003)(199004)(189003)(13464003)(486006)(55016002)(9686003)(8936002)(186003)(6246003)(71190400001)(229853002)(6506007)(53546011)(6116002)(26005)(102836004)(446003)(99286004)(14454004)(2906002)(3846002)(7696005)(76176011)(6436002)(25786009)(14444005)(5660300002)(256004)(5024004)(71200400001)(76116006)(110136005)(4326008)(66446008)(316002)(52536014)(8676002)(81156014)(81166006)(33656002)(64756008)(66476007)(66556008)(66946007)(478600001)(7736002)(476003)(66066001)(74316002)(86362001)(11346002)(305945005); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2255; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: NB7+vMPIBRyUQYXb3vPLA8HpqSN5suxOQE51tSTELlaIl4KOPTGYf+PmXjVbQqVpdLiCH9/XGhJ4377UgI8SKg1XyZW5ZwwCCx8J74xmkKZYffyzMTwn7IkzTN/rCimuOkJefcrx/KuFE38H2RjEcFOwFw44cGoLr800nWU9Um8w36p9VhjLL0xAJLBGeA5gHY3i8cXaepLItXCDnwfc6BByvQedTm0oNTCVB+kuy0nVMRKMpzvj6SLVI+9GM9VkxuGizEvHW5jITFgSE6BWtcgRfV7QzCP0quqPrVhOTaxgcetfX7otszix3491bRQOBYdQ+O9g2FJtoTj/aM09lMe8NMBP18bvMx7wX32EXlK/fDth7ybaftEbOZnQdgrT1e+HtM10vaR8vJIV3e4q3JrEGn+LpTM6y9Wt25yzDAe+u4P0dtAmSzhxlP6cG4fS
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 8a2b546b-174b-4602-36de-08d75e4098ff
X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Oct 2019 20:26:23.0256 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 6svcNUBxIajyycCh9uCyPZkRmQdqtur5k2Ac0R+LwiliHjrTSWmEM5jjUzTSuU87
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2255
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.30, xch-rcd-020.cisco.com
X-Outbound-Node: alln-core-4.cisco.com
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 20:26:35 -0000
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==


From nobody Thu Oct 31 16:18:02 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D28C2120824 for ; Thu, 31 Oct 2019 16:17:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.999
X-Spam-Level: 
X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qNsZMUEy68Vz for ; Thu, 31 Oct 2019 16:17:57 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id E4415120026 for ; Thu, 31 Oct 2019 16:17:50 -0700 (PDT)
Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9VJc4ig024527 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 31 Oct 2019 12:38:05 -0700
DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9VJc4ig024527
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572550686; bh=WfEgN3vpy6lYv+gn9ike8sv8srQDubeyBLmf3+JSRnU=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=1xqrCXcbzyL4mVULu6ZA19QuHVkplJh0TGWOhDbhMTeMPpO1eDFZ2mHYVFcglc07t F/VGZVTvTZC9aJmYaC5uoTS1I+dZXesFRNmil07HXQ3f4Zo54ueEdagvOYShz1eUgS iKvj+x/fJRiHBZjfcDZyZoGj65fY3g25aX4hb68M=
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\))
From: Owen DeLong 
In-Reply-To: <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com>
Date: Thu, 31 Oct 2019 12:38:04 -0700
Cc: Ted Lemon , v6ops list 
Content-Transfer-Encoding: quoted-printable
Message-Id: 
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com>
To: Fernando Gont 
X-Mailer: Apple Mail (2.3445.104.8)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Thu, 31 Oct 2019 12:38:06 -0700 (PDT)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 23:17:59 -0000

> On Oct 31, 2019, at 12:21 PM, Fernando Gont  =
wrote:
>=20
> Hello, Ted,
>=20
>=20
> On 27/10/19 09:02, Ted Lemon wrote:
>> Indeed, this would also not actually solve the problem.   At present,
>> the ISPs are doing something that is out of spec and causes problems.
>> If we =E2=80=9Cfix=E2=80=9D this by accommodating what they do, does =
that help, or
>> does it just encourage them to continue doing it?
>=20
> Did happy eyeballs encourage broken IPv6 connectivity, or did it
> actually help IPv6 deployment?

Considering these mutually exclusive is a false dichotomy.

It did both.

>> What should be happening on the host with a prefix that=E2=80=99s =
deprecated
>> is that TCP connections should be timing out.   This doesn=E2=80=99t =
take
>> very long. =20
>=20
> ~9 minutes, IIRC.

Somewhat variable, but yes, can be as long as ~15 minutes in some cases.

>> First of all, fix CPEs so that they definitely support clean
>> deprecation of prefixes using PD.
>=20
> But robustness cannot rely on any of these specific bits.

Perhaps not, but this is the lowest hanging fruit and the cleanest set =
of changes.

Certainly you have to admit that the proposed CPE changes would yield =
the greatest improvement
in robustness at the lowest cost of any of the proposed solutions in the =
I-D in question.

>> When another RA arrives, see if it was signed with the same key.   If
>> so, it came from the same router, and can be trusted to update
>> whatever information that router sent, including flash-deprecating a
>> prefix.   If not, ignore it.
>=20
> In the non-SEND trust model, you do trust the local router. Why did =
you
> trust the local router to configure your network, but not for
> deprecating the prefix?

Trusting the local router to configure the network to add a previously =
non-operational host to the network has a somewhat different set of =
consequence for failure than trusting whatever on-link host wishes to =
tell you to effectively shut down your currently operating network =
connection.

Especially when you consider that such an announcement can be sent to =
the all nodes on link multicast address, effectively dropping them all =
at once.

I agree it=E2=80=99s not a huge difference, but, it is a difference and =
certainly the scope of the resulting problem can be much larger than the =
case of individual host configuration.

Owen



From nobody Thu Oct 31 16:18:11 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55553120026 for ; Thu, 31 Oct 2019 16:17:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.998
X-Spam-Level: 
X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LClByrAhfpvb for ; Thu, 31 Oct 2019 16:17:57 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 8642D12010D for ; Thu, 31 Oct 2019 16:17:57 -0700 (PDT)
Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9VJw0lv030861 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 31 Oct 2019 12:58:01 -0700
DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9VJw0lv030861
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572551882; bh=saC4Q0BpqcXCGCNHB/Emuf04EJ4UMap0/BdjVXN876M=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=BMbwZgihQgjMhocEmQ9/fM72XfR7UqX+EUFOb8E8HTgsIbdyv+HTNTPtrLvFtgrS0 52u7kk3vNTmjsUJgV8kvhEsb935XWc2cqPWcR5XSObZc2bSu3sFv7fbtVVCZfPyyAw mNr49ngrq+yQmFOPFC2QFrfvqIz99EJS5r6dD4O8=
From: Owen DeLong 
Message-Id: <39E02F6E-10CF-486A-9E4C-DF494E6DCCAA@delong.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_8144BBF7-782A-4D8C-9237-36464849A29C"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\))
Date: Thu, 31 Oct 2019 12:58:00 -0700
In-Reply-To: 
Cc: Fernando Gont , v6ops list 
To: Ted Lemon 
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com> <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com>  
X-Mailer: Apple Mail (2.3445.104.8)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Thu, 31 Oct 2019 12:58:02 -0700 (PDT)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 23:17:59 -0000

--Apple-Mail=_8144BBF7-782A-4D8C-9237-36464849A29C
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On Oct 31, 2019, at 12:49 PM, Ted Lemon  wrote:
>=20
> On Oct 31, 2019, at 3:47 PM, Owen DeLong > wrote:
>> RA Guard could be default configured on switches with particular =
default =E2=80=9Cplug router in here=E2=80=9D (uplink) ports, =
eliminating the need for an active administrator. This could be a useful =
specification in the HomeNet documents, perhaps.
>=20
> This would be disastrous.   It pretty much makes permissionless =
networking impossible in exchange for solving a security problem no-one =
has.
>=20
Huh?

How=E2=80=99s that?

If I have two default uplink ports on a switch and the default =
configuration on the switch is that those are the =E2=80=9Crouter=E2=80=9D=
 ports and everything else is treated as a =E2=80=9Chost=E2=80=9D port =
for RA Guard on by default, how does that render anything =
=E2=80=9Cimpossible=E2=80=9D?

If you don=E2=80=99t want RA Guard, turn it off. It=E2=80=99s just a =
default setting.

If you want a different RA Guard configuration, the set it as you like.

I=E2=80=99m not proposing hard-coding anything. I=E2=80=99m proposing an =
RA-Guard friendly set of defaults that actually solve a common security =
problem in administrator-less networks, whether they=E2=80=99ve suffered =
from it yet or not.

Owen



--Apple-Mail=_8144BBF7-782A-4D8C-9237-36464849A29C
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8



On Oct 31, 2019, at 12:49 PM, Ted Lemon <mellon@fugue.com> =
wrote:

On Oct 31, 2019, at =
3:47 PM, Owen DeLong <owen@delong.com> wrote:
RA Guard could be default configured on switches with =
particular default =E2=80=9Cplug router in here=E2=80=9D (uplink) ports, =
eliminating the need for an active administrator. This could be a useful =
specification in the HomeNet documents, =
perhaps.

This would be disastrous.   It pretty much makes =
permissionless networking impossible in exchange for solving a security =
problem no-one has.

Huh?

How=E2=80=99s that?

If I have two default =
uplink ports on a switch and the default configuration on the switch is =
that those are the =E2=80=9Crouter=E2=80=9D ports and everything else is =
treated as a =E2=80=9Chost=E2=80=9D port for RA Guard on by default, how =
does that render anything =E2=80=9Cimpossible=E2=80=9D?

If you don=E2=80=99t =
want RA Guard, turn it off. It=E2=80=99s just a default =
setting.

If =
you want a different RA Guard configuration, the set it as you =
like.

I=E2=80=99=
m not proposing hard-coding anything. I=E2=80=99m proposing an RA-Guard =
friendly set of defaults that actually solve a common security problem =
in administrator-less networks, whether they=E2=80=99ve suffered from it =
yet or not.

Owen


=

--Apple-Mail=_8144BBF7-782A-4D8C-9237-36464849A29C--


From nobody Thu Oct 31 16:18:18 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C5CC120026 for ; Thu, 31 Oct 2019 16:18:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.998
X-Spam-Level: 
X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4WFftv12Y2Y6 for ; Thu, 31 Oct 2019 16:17:58 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id EBA1B12080C for ; Thu, 31 Oct 2019 16:17:57 -0700 (PDT)
Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9VJlhgG027570 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 31 Oct 2019 12:47:44 -0700
DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9VJlhgG027570
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572551265; bh=6apIF171XzrRl9UPjs25xfzik/csxxZu79iEOymdlk4=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=G0l1z9a5eprBZmR9xPKnJlfHUNAtpvge4b8rDnvGjFHUXY3rD6zZdMj7OxWebCZ9D 28Ry5Od/wJe7kx4Jr6skLCMjHHf+nIPqPPylUv9xaCVWHoxJnoas0rQNJFOO/rIuMF nLLCKOMPEub0rTBtVoF2VFL0VfBWWAa1W6X3+iZs=
From: Owen DeLong 
Message-Id: 
Content-Type: multipart/alternative; boundary="Apple-Mail=_67FE618F-39AA-4B9E-9732-0CEF8BDADE2F"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\))
Date: Thu, 31 Oct 2019 12:47:42 -0700
In-Reply-To: <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com>
Cc: Fernando Gont , v6ops list 
To: Ted Lemon 
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com> <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com>
X-Mailer: Apple Mail (2.3445.104.8)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Thu, 31 Oct 2019 12:47:45 -0700 (PDT)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 23:18:00 -0000

--Apple-Mail=_67FE618F-39AA-4B9E-9732-0CEF8BDADE2F
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On Oct 31, 2019, at 12:34 PM, Ted Lemon  wrote:
>=20
> On Oct 31, 2019, at 3:21 PM, Fernando Gont > wrote:
>> On 27/10/19 09:02, Ted Lemon wrote:
>>> Indeed, this would also not actually solve the problem.   At =
present,
>>> the ISPs are doing something that is out of spec and causes =
problems.
>>> If we =E2=80=9Cfix=E2=80=9D this by accommodating what they do, does =
that help, or
>>> does it just encourage them to continue doing it?
>>=20
>> Did happy eyeballs encourage broken IPv6 connectivity, or did it
>> actually help IPv6 deployment?
>=20
> Don=E2=80=99t get me wrong=E2=80=94I=E2=80=99m not saying we =
shouldn=E2=80=99t do things to improve the situation.   I am saying that =
we should be strategic about it.
>=20
>>> What should be happening on the host with a prefix that=E2=80=99s =
deprecated
>>> is that TCP connections should be timing out.   This doesn=E2=80=99t =
take
>>> very long. =20
>>=20
>> ~9 minutes, IIRC.
>=20
> Should be 90 seconds.

That=E2=80=99s for the three-way handshake=E2=80=A6 For an existing =
established flow, it can be much MUCH longer.

>=20
>=20
>>> And if there is a new prefix being advertised on the
>>> link, that address should have a valid lifetime newer than the old
>>> prefix, meaning that the next TCP connection should come from that
>>> new prefix, not the old one.
>>=20
>> That's not correct. Neither the Valid Lifetime nor the Preferred
>> Lifetime affect address selection.
>=20
> Okay, there=E2=80=99s something to fix.  Why would these not affect =
source address selection?

Because there are other things that do which are much better reasons for =
address selection.

There are enough problems with address selection (especially on =
platforms like MacOS
where they=E2=80=99ve chosen to eliminate the ability to configure SAS) =
as it is. Adding this as an
additional variable (let alone making it override the other =
tie-breakers) is not, IMHO, an
actual improvement.

>>> I think Fernando=E2=80=99s plan to shorten some timers makes sense, =
but
>>> shortening the minimum really doesn=E2=80=99t=E2=80=94it just opens =
up an opportunity
>>> for an easy DoS, since I can now just send out death packets to the
>>> local network and break everything all at once.
>>=20
>> The reality with ND attacks are (modulo sanity checks on the =
packets):
>> you enforce FHS, or you don't.
>=20
> What is =E2=80=9CFHS=E2=80=9D?

First Hop Security (e.g. RA Guard, SEND, etc.)

>>> If you Really Really want to be able to have the routers send out =
RAs
>>> that deprecate the default route, and, as Mark is saying here, to
>>> upgrade millions or perhaps billions of hosts, why not ask for
>>> something that=E2=80=99s a real improvement?
>>=20
>> Every piece helps.
>=20
> Right, but if the effort involved in two different options differs by =
epsilon, you should always choose the option that produces the better =
outcome, shouldn=E2=80=99t you?

Yes, but the better outcome must be defined not only in terms of the =
ideal end result if/when implemented, but also in terms of the =
probability of widespread implementation and the time delay between now =
and said wide deployment.

>>> Second, fix RA so that it=E2=80=99s
>>> non-repudiable by a device that doesn=E2=80=99t have the secret key.
>>>=20
>>> SEND does this, sort of.  Nobody uses SEND because it tries to solve
>>> a too-big problem and does it using obsolete technology.   But the
>>> basic idea is good: include a public key in every RA that can be =
used
>>> to validate that the RA was signed with the corresponding private
>>> key.
>>=20
>> What's the practical difference between that, an a network that =
supports
>> RA-Guard?
>=20
> On a network that supports RA guard, there probably is no difference, =
but RA guard on some networks, as we=E2=80=99ve discussed in the past, =
will actually make the network not work.   RA guard requires an active =
administrator.   So the CPE case we=E2=80=99re talking about isn=E2=80=99t=
 relevant.

RA Guard as implemented today in most existing platforms requires an =
active administrator.

RA Guard could be default configured on switches with particular default =
=E2=80=9Cplug router in here=E2=80=9D (uplink) ports, eliminating the =
need for an active administrator. This could be a useful specification =
in the HomeNet documents, perhaps.

>>> When another RA arrives, see if it was signed with the same key.   =
If
>>> so, it came from the same router, and can be trusted to update
>>> whatever information that router sent, including flash-deprecating a
>>> prefix.   If not, ignore it.
>>=20
>> In the non-SEND trust model, you do trust the local router. Why did =
you
>> trust the local router to configure your network, but not for
>> deprecating the prefix?
>=20
> In the non-SEND trust model, you trust the local network.   You hope =
that the RA you get =E2=80=9Cfrom the router=E2=80=9D is actually from =
the router.

That doesn=E2=80=99t answer the question. It merely describes the model. =
The question was why is bind trust in a prefix deprecation message any =
worse than blind trust in a network configuration message.

Owen


--Apple-Mail=_67FE618F-39AA-4B9E-9732-0CEF8BDADE2F
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8



On Oct 31, 2019, at 12:34 PM, Ted Lemon <mellon@fugue.com> =
wrote:

On Oct 31, 2019, at =
3:21 PM, Fernando Gont <fgont@si6networks.com> wrote:
On 27/10/19 09:02, Ted =
Lemon wrote:
Indeed, this would also not actually solve the =
problem.   At present,
the ISPs are doing =
something that is out of spec and causes problems.
If we =
=E2=80=9Cfix=E2=80=9D this by accommodating what they do, does that =
help, or
does it just encourage them to continue doing =
it?

Did happy eyeballs =
encourage broken IPv6 connectivity, or did it
actually =
help IPv6 deployment?

Don=E2=80=99t get me wrong=E2=80=94I=E2=80=
=99m not saying we shouldn=E2=80=99t do things to improve the situation. =
  I am saying that we should be strategic about it.

What =
should be happening on the host with a prefix that=E2=80=99s =
deprecated
is that TCP connections should be timing out. =
  This doesn=E2=80=99t take
very long.  

~9 minutes, IIRC.

Should be 90 =
seconds.

That=E2=80=
=99s for the three-way handshake=E2=80=A6 For an existing established =
flow, it can be much MUCH longer.



And if there is a new =
prefix being advertised on the
link, that address should =
have a valid lifetime newer than the old
prefix, meaning =
that the next TCP connection should come from that
new =
prefix, not the old one.

That's =
not correct. Neither the Valid Lifetime nor the Preferred
Lifetime affect address selection.

Okay, there=E2=80=99s something to fix.  Why would =
these not affect source address =
selection?

Because=
 there are other things that do which are much better reasons for =
address selection.

There are enough =
problems with address selection (especially on platforms like =
MacOS
where they=E2=80=99ve chosen to eliminate the ability to =
configure SAS) as it is. Adding this as an
additional variable =
(let alone making it override the other tie-breakers) is not, IMHO, =
an
actual improvement.

I think =
Fernando=E2=80=99s plan to shorten some timers makes sense, but
shortening the minimum really doesn=E2=80=99t=E2=80=94it just =
opens up an opportunity
for an easy DoS, since I can now =
just send out death packets to the
local network and break =
everything all at once.

The =
reality with ND attacks are (modulo sanity checks on the packets):
you enforce FHS, or you don't.

What is =
=E2=80=9CFHS=E2=80=9D?

First Hop Security (e.g. RA Guard, SEND, =
etc.)

If you Really Really =
want to be able to have the routers send out RAs
that =
deprecate the default route, and, as Mark is saying here, to
upgrade millions or perhaps billions of hosts, why not ask =
for
something that=E2=80=99s a real improvement?

Every piece helps.

Right, but if the effort involved in two different =
options differs by epsilon, you should always choose the option that =
produces the better outcome, shouldn=E2=80=99t =
you?

Yes, but =
the better outcome must be defined not only in terms of the ideal end =
result if/when implemented, but also in terms of the probability of =
widespread implementation and the time delay between now and said wide =
deployment.

 Second, fix RA so that =
it=E2=80=99s
non-repudiable by a device that doesn=E2=80=99t=
 have the secret key.

SEND does this, sort =
of.  Nobody uses SEND because it tries to solve
a =
too-big problem and does it using obsolete technology.   But =
the
basic idea is good: include a public key in every RA =
that can be used
to validate that the RA was signed with =
the corresponding private
key.

What's the practical difference =
between that, an a network that supports
RA-Guard?

On a network that supports RA guard, there probably is =
no difference, but RA guard on some networks, as we=E2=80=99ve discussed =
in the past, will actually make the network not work.   RA guard =
requires an active administrator.   So the CPE case we=E2=80=99re =
talking about isn=E2=80=99t =
relevant.

RA =
Guard as implemented today in most existing platforms requires an active =
administrator.

RA Guard could be =
default configured on switches with particular default =E2=80=9Cplug =
router in here=E2=80=9D (uplink) ports, eliminating the need for an =
active administrator. This could be a useful specification in the =
HomeNet documents, perhaps.

When another RA arrives, =
see if it was signed with the same key.   If
so, =
it came from the same router, and can be trusted to update
whatever information that router sent, including =
flash-deprecating a
prefix.   If not, ignore =
it.

In the non-SEND trust =
model, you do trust the local router. Why did you
trust =
the local router to configure your network, but not for
deprecating the prefix?

In the non-SEND trust model, you trust the local network. =
  You hope that the RA you get =E2=80=9Cf=
rom the router=E2=80=9D is actually from the =
router.

That =
doesn=E2=80=99t answer the question. It merely describes the model. The =
question was why is bind trust in a prefix deprecation message any worse =
than blind trust in a network configuration message.

Owen

=

--Apple-Mail=_67FE618F-39AA-4B9E-9732-0CEF8BDADE2F--


From nobody Thu Oct 31 16:18:25 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0630A12010D for ; Thu, 31 Oct 2019 16:18:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.999
X-Spam-Level: 
X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mcbwSFlIOJs4 for ; Thu, 31 Oct 2019 16:17:57 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 4E518120105 for ; Thu, 31 Oct 2019 16:17:57 -0700 (PDT)
Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9VJo4nA028291 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 31 Oct 2019 12:50:06 -0700
DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9VJo4nA028291
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572551407; bh=Pvvev2jHgQRlxVqG+jSHiSgXZDmKc+Qdfg9nC3exkn0=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=IfsNxhocVtq5mJP9+8xydL0rIz1fbCnWFjl8VvorKGpKQMliq3U8nzSg82rVa4Alk sPCpH1Vjxsqv0laZ5uD2XdyjlO44eYx7fktFeg6KXt9DcG5A5KZ99YtGcFSXnzByoi nM0pmHCJW9+bX5+Z0Ns+8UQN4EDDO/pibCgY8/w0=
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\))
From: Owen DeLong 
In-Reply-To: <1c925f21-f363-b053-b936-888a3060f7a7@si6networks.com>
Date: Thu, 31 Oct 2019 12:50:03 -0700
Cc: Ted Lemon , v6ops@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: 
References:    <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <3E4C671B-A03E-4A3F-A68B-5849BDCC6267@delong.com> <1c925f21-f363-b053-b936-888a3060f7a7@si6networks.com>
To: Fernando Gont 
X-Mailer: Apple Mail (2.3445.104.8)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Thu, 31 Oct 2019 12:50:07 -0700 (PDT)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 23:18:01 -0000

> On Oct 31, 2019, at 12:43 PM, Fernando Gont  =
wrote:
>=20
> On 27/10/19 16:35, Owen DeLong wrote:
>>=20
>>=20
>>> On Oct 27, 2019, at 10:14 , Ted Lemon >> > wrote:
>>>=20
>>> On Oct 27, 2019, at 11:05 AM, Philip Homburg
>>> > =
wrote:
>>>> If you think that this is an important thing to fix, feel free to=20=

>>>> talk about it. But why in this discussion? SEND doesn't do anything =
for
>>>> flash renumbering. =46rom an operational point of view, RA-guard is =
much
>>>> more attractive then SEND. So it is not clear to me that there is =
any
>>>> need for SEND. But I could be wrong. In any case, if there is a =
need
>>>> to discuss SEND we could do that separately.
>>>=20
>>> I think you missed my point.  You can=E2=80=99t do flash renumbering =
by
>>> advertising a prefix with a valid lifetime of zero, because that =
will
>>> be ignored by hosts.   If it were not ignored by hosts, it would be =
a
>>> very effective DoS vector.    And so if you want to be able to flash
>>> deprecate a route, you need some way to validate that the =
deprecation
>>> is coming from the same source as the route.   Hence my suggested
>>> =E2=80=9Climited SEND=E2=80=9D.
>>>=20
>>> Limited SEND would not be hard to implement.   Yes, it would be
>>> marginally harder than just saying that hosts should accept flash
>>> deprecation of prefixes.   But nobody with any sense is going to
>>> implement that in their IP stack, so in practice if you want this to
>>> work, you need some way to do flash deprecations that doesn=E2=80=99t =
create a
>>> massive attack vector.
>>=20
>> It=E2=80=99s only a DOS vector if the attacker is already on-LAN.
>>=20
>> I recognize that there are environments where that is expected =
behavior
>> (e.g. Coffee Shop Wifi, University networks, etc.),but
>> it=E2=80=99s not the case for the average residential CPE and =
residential LAN
>> segments.
>>=20
>> In the vast majority of situations where I would expect hostile hosts =
to
>> be likely to be on LAN, I don=E2=80=99t think I=E2=80=99d be using
>> SLAAC for address assignment in the first place. Most likely, I=E2=80=99=
d want
>> stateful DHCP in such instances.
>=20
> You can do SLAAC as long as you do FHS. At which point the issue =
raised
> by Ted is a non-issue.

I=E2=80=99ve looked at what it takes to deploy SEND and I=E2=80=99ve met =
some of the people
that support the networks in places like McDonald=E2=80=99s and =
Starbucks=E2=80=A6

I=E2=80=99m thinking that successful, reliable FHS in those environments =
is a rather
humorous concept.

Owen


From nobody Thu Oct 31 16:18:32 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42D1D1208C2 for ; Thu, 31 Oct 2019 16:18:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.999
X-Spam-Level: 
X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0m1xkA-Yoo_E for ; Thu, 31 Oct 2019 16:18:01 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 2813312081A for ; Thu, 31 Oct 2019 16:17:58 -0700 (PDT)
Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9VJdatm025045 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 31 Oct 2019 12:39:37 -0700
DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9VJdatm025045
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572550778; bh=P92juo4ycGy9K3yyXQxWMUvNNUZdKO2qo3cbmQO/D8Y=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=1Q6lLjByrn3F0HafDmKETzc4/oNd0ds8e/ghi6XruYwH5EWnTxTWIFlN5E5muKs+G TIHkXwa2OyOuAJBMHKfQ//31xSCVvBOXL+wXyfJac/o+W/0Kf2AsB+vAuNNgWy4vlM SWxoZDHaxJlWcPYavxIBolfbIEexH3ld+DeKyOik=
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\))
From: Owen DeLong 
In-Reply-To: 
Date: Thu, 31 Oct 2019 12:39:35 -0700
Cc: Ted Lemon , Philip Homburg ,  v6ops@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: 
References:      
To: Fernando Gont 
X-Mailer: Apple Mail (2.3445.104.8)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Thu, 31 Oct 2019 12:39:38 -0700 (PDT)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 23:18:10 -0000

> On Oct 31, 2019, at 12:25 PM, Fernando Gont  =
wrote:
>=20
> On 27/10/19 10:54, Ted Lemon wrote:
>> On Oct 27, 2019, at 9:41 AM, Philip Homburg =
> > wrote:
>>> The little bit missing is that the CPE should write prefixes
>>> advertised using
>>> SLAAC to persistent storage which allows the CPE to invalidate stale
>>> prefixes
>>> after a reboot.
>>=20
>> Actually I do not believe this is correct behavior.   Let us assume
>> prefix delegation.   If we have prefix delegation, then when the CPE
>> comes back from a power cycle, it should reconfirm the prefix it had
>> previously; the assumption is that that prefix is still valid.  This =
can
>> be handled in infrastructure=E2=80=94the ISP edge router should know =
whether the
>> prefix is still valid, because if it is it should be advertising a =
route
>> for it.   If it is not still valid, then the CPE router should =
attempt
>> to renew it, which would go to the DHCP server (possibly both =
messages
>> would).
>=20
> That assues the CPE has stored the previously-leased prefix on stable
> storage -- which does not need to be the case. Hence the related text =
in
> our I-D.

IMHO, the CPE requirements should be increased and the CPE should be =
required
to store the prefix and it=E2=80=99s expected valid and preferred =
expiration times in persistent
storage. I would like to see the text in the I-D updated accordingly.

Owen
>=20


From nobody Thu Oct 31 16:18:40 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 553AA12086F for ; Thu, 31 Oct 2019 16:18:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.998
X-Spam-Level: 
X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id boAwbRBKTHWd for ; Thu, 31 Oct 2019 16:17:57 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id B840412026E for ; Thu, 31 Oct 2019 16:17:57 -0700 (PDT)
Received: from [199.187.216.130] ([199.187.216.130]) (authenticated bits=0) by owen.delong.com (8.15.2/8.15.2) with ESMTPSA id x9VJsmgM029622 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 31 Oct 2019 12:54:48 -0700
DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com x9VJsmgM029622
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1572551689; bh=ioaUTNQL7UgFlcxN0J6WNb59gPrqvur7We87rsCrPzw=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=SbdbZm00W1FnVRAGumw3dqhAZi6wCdweTJqtYQDRNbhd+ZQnIl3IFmfoHvGaHddgH PY9Dwef/3ghM9Nh6IWPhBCOJWtqFOvyIMQTQEAVzIRdS2nUggmv9FWJ+ECa3V10qIv 8csNHmcfqqVlP9tN/QPiwBShx1Jm/Umd+SkPwuJ8=
From: Owen DeLong 
Message-Id: <8ACF5015-B390-4722-801C-B49E8F80E1C4@delong.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_E7484BCD-E5A5-44AB-AEC8-03451C724F5C"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\))
Date: Thu, 31 Oct 2019 12:54:47 -0700
In-Reply-To: 
Cc: Fernando Gont , v6ops@ietf.org
To: Ted Lemon 
References:    <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <5e0d1da1-4933-069c-68f6-9aa360106582@si6networks.com> 
X-Mailer: Apple Mail (2.3445.104.8)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (owen.delong.com [192.159.10.2]); Thu, 31 Oct 2019 12:54:49 -0700 (PDT)
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 31 Oct 2019 23:18:11 -0000

--Apple-Mail=_E7484BCD-E5A5-44AB-AEC8-03451C724F5C
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On Oct 31, 2019, at 12:47 PM, Ted Lemon  wrote:
>=20
> On Oct 31, 2019, at 3:41 PM, Fernando Gont > wrote:
>> As someone that has played a lot with ND-based DoS vectors, I should =
say
>> that you trust RAs, or you don't. If you do, all bets are off. ("sudo
>> apt-get install ipv6toolkit;man ra6" and you'll get examples of a =
bunch
>> of other DoS attacks that an attacker can perform).
>=20
> As an end user, I don=E2=80=99t have this experience.   If someone is =
spamming my network with RAs, I can find out who and disconnect them.   =
A DoS attack based on massive quantities of RAs is a lot different than =
an attack that shuts my network off with one multicast.=20

There are a variety of attacks in Fernando=E2=80=99s documentation which =
do not require large numbers of Gas.

A few multicast RAs well timed can, for example, change everyone=E2=80=99s=
 default gateway for MITM games.

Another thing you often seem to miss, Ted, is that not everyone=E2=80=99s =
environment is necessarily similar to yours.

When developing I-Ds and RFCs, care must be taken to consider that the =
internet is an extremely diverse set of networks in an even more diverse =
set of environments.

Owen


--Apple-Mail=_E7484BCD-E5A5-44AB-AEC8-03451C724F5C
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8



On Oct 31, 2019, at 12:47 PM, Ted Lemon <mellon@fugue.com> =
wrote:

On Oct 31, 2019, at =
3:41 PM, Fernando Gont <fgont@si6networks.com> wrote:
As someone that has played a lot with ND-based DoS vectors, I =
should say
that you =
trust RAs, or you don't. If you do, all bets are off. ("sudo
apt-get =
install ipv6toolkit;man ra6" and you'll get examples of a =
bunch
of other DoS =
attacks that an attacker can =
perform).

As=
 an end user, I don=E2=80=99t have this experience.   If someone is =
spamming my network with RAs, I can find out who and disconnect them. =
  A DoS attack based on massive quantities of RAs is a lot =
different than an attack that shuts my network off with one =
multicast. 

There are a variety of attacks in Fernando=E2=80=99s =
documentation which do not require large numbers of Gas.

A few multicast RAs well timed can, for example, =
change everyone=E2=80=99s default gateway for MITM games.

Another thing you often seem to miss, Ted, is that =
not everyone=E2=80=99s environment is necessarily similar to =
yours.

When developing I-Ds and =
RFCs, care must be taken to consider that the internet is an extremely =
diverse set of networks in an even more diverse set of =
environments.

Owen

=

--Apple-Mail=_E7484BCD-E5A5-44AB-AEC8-03451C724F5C--


From nobody Thu Oct 31 17:20:41 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81249120105 for ; Thu, 31 Oct 2019 17:20:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.496
X-Spam-Level: 
X-Spam-Status: No, score=-0.496 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xc30Mz7SZc1l for ; Thu, 31 Oct 2019 17:20:39 -0700 (PDT)
Received: from mail-oi1-x236.google.com (mail-oi1-x236.google.com [IPv6:2607:f8b0:4864:20::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E203F1200EF for ; Thu, 31 Oct 2019 17:20:38 -0700 (PDT)
Received: by mail-oi1-x236.google.com with SMTP id v186so6831222oie.5 for ; Thu, 31 Oct 2019 17:20:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=TPjVaNG6mqGXCUY83DF1Xk3jt1L0XQqGUT6Vzi7WqK0=; b=thOSRrFcA1JHVDXps7CEwW9ylctLH3ZP41ft+Tnd1SLi1lTE49s1XzmHR0kF27IIIF DJhfbAbRi9jH3lVvH5IB9g5YmtT1rSZHNXQi70F5pXcJ2XTtKlGiy81bWqmO68cOT2EB xNqKk83itRTk3uAn4VJvmLPDwp1mjQ3eFharKMTqBkMT+XonywXOqK214u5LJ0Ct2+/9 GvZ1g5jwigLCKi1AzFulDcn1GfAq02PSDXSxgmSb3Sz8QKdKf3p8MoZmrjUDfmg3i0St mWfMVwCh7lhn/hGr1fiMFcqvVFS8nJQfY4Dp6T1mbAIa0nnjVAiKNzb0gpudc6KBac8e ZipA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=TPjVaNG6mqGXCUY83DF1Xk3jt1L0XQqGUT6Vzi7WqK0=; b=P6OTOEKH9nay/MUMc9Xn9XLFBNN2FsrTuDYNjsGuh445/ejnT8EQ0DvFsXDeL3k3p+ JM+yQgtEoVoYQA7Hm3d9tdIqQlnZ27+UvsYNHGMbrZGncCjoBCe7xdtHc9r1YPfIn3UT kLcTmsMXc7B/5NI1UbQxAZ5Exma2CS8EhDKyEOkF57iaUUFCVVjwjcl8CyA6L8A83S+C hBtijZaXZjodD+WnnLvv084jyj2+sDqyhG/qYKmf1ZoOut6d6nJ7vLZxlr5aoOi64isi 6fk7mD9IW+JYdcnBrewFC8vYjwzqatoaqqiKuDRagxcvkCdCewL4YpSZsobOaDdGk34/ /nDw==
X-Gm-Message-State: APjAAAU3Fm/j7lqBmj5bFM01lBq3oiPt0K8I3HR92WkP3HY56cK9DxGd sKngFvxKA7Z2CpcNU+1HcMcxcxfOUql+13xCYg4=
X-Google-Smtp-Source: APXvYqy5aS7RYcc415J2c6dE43rF76+xxf5Qyh5+M86Q/vrN0KCLBGiTTUa6q/S5p1CCK5OdDq7Vl02xUXdwkJsvWLo=
X-Received: by 2002:aca:f553:: with SMTP id t80mr457506oih.60.1572567638166; Thu, 31 Oct 2019 17:20:38 -0700 (PDT)
MIME-Version: 1.0
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com> <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com>
In-Reply-To: <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com>
From: Mark Smith 
Date: Fri, 1 Nov 2019 11:20:27 +1100
Message-ID: 
To: Ted Lemon 
Cc: Fernando Gont , v6ops list 
Content-Type: multipart/alternative; boundary="0000000000007550a305963def58"
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 00:20:40 -0000

--0000000000007550a305963def58
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, 1 Nov 2019, 06:34 Ted Lemon,  wrote:

> On Oct 31, 2019, at 3:21 PM, Fernando Gont  wrote:
>
> On 27/10/19 09:02, Ted Lemon wrote:
>
> Indeed, this would also not actually solve the problem.   At present,
> the ISPs are doing something that is out of spec and causes problems.
> If we =E2=80=9Cfix=E2=80=9D this by accommodating what they do, does that=
 help, or
> does it just encourage them to continue doing it?
>
>
> Did happy eyeballs encourage broken IPv6 connectivity, or did it
> actually help IPv6 deployment?
>
>
> Don=E2=80=99t get me wrong=E2=80=94I=E2=80=99m not saying we shouldn=E2=
=80=99t do things to improve the
> situation.   I am saying that we should be strategic about it.
>
> What should be happening on the host with a prefix that=E2=80=99s depreca=
ted
> is that TCP connections should be timing out.   This doesn=E2=80=99t take
> very long.
>
>
> ~9 minutes, IIRC.
>
>
> Should be 90 seconds.
>

You've got no more than 10 seconds unless you want end users to actively
try to do something to recover, which can include calling their ISP's
helpdesk.

A short presentation on some user experience factors for network engineers.

"A bit of UX for NEs"
https://www.slideshare.net/markzzzsmith/ausnog-2019-lightning-talk-a-bit-of=
-ux-for-nes



>
> And if there is a new prefix being advertised on the
> link, that address should have a valid lifetime newer than the old
> prefix, meaning that the next TCP connection should come from that
> new prefix, not the old one.
>
>
> That's not correct. Neither the Valid Lifetime nor the Preferred
> Lifetime affect address selection.
>
>
> Okay, there=E2=80=99s something to fix.  Why would these not affect sourc=
e address
> selection?
>
> I think Fernando=E2=80=99s plan to shorten some timers makes sense, but
> shortening the minimum really doesn=E2=80=99t=E2=80=94it just opens up an=
 opportunity
> for an easy DoS, since I can now just send out death packets to the
> local network and break everything all at once.
>
>
> The reality with ND attacks are (modulo sanity checks on the packets):
> you enforce FHS, or you don't.
>
>
> What is =E2=80=9CFHS=E2=80=9D?
>
> If you Really Really want to be able to have the routers send out RAs
> that deprecate the default route, and, as Mark is saying here, to
> upgrade millions or perhaps billions of hosts, why not ask for
> something that=E2=80=99s a real improvement?
>
>
> Every piece helps.
>
>
> Right, but if the effort involved in two different options differs by
> epsilon, you should always choose the option that produces the better
> outcome, shouldn=E2=80=99t you?
>
> Second, fix RA so that it=E2=80=99s
> non-repudiable by a device that doesn=E2=80=99t have the secret key.
>
> SEND does this, sort of.  Nobody uses SEND because it tries to solve
> a too-big problem and does it using obsolete technology.   But the
> basic idea is good: include a public key in every RA that can be used
> to validate that the RA was signed with the corresponding private
> key.
>
>
> What's the practical difference between that, an a network that supports
> RA-Guard?
>
>
> On a network that supports RA guard, there probably is no difference, but
> RA guard on some networks, as we=E2=80=99ve discussed in the past, will a=
ctually
> make the network not work.   RA guard requires an active administrator.
> So the CPE case we=E2=80=99re talking about isn=E2=80=99t relevant.
>
>
> When another RA arrives, see if it was signed with the same key.   If
> so, it came from the same router, and can be trusted to update
> whatever information that router sent, including flash-deprecating a
> prefix.   If not, ignore it.
>
>
> In the non-SEND trust model, you do trust the local router. Why did you
> trust the local router to configure your network, but not for
> deprecating the prefix?
>
>
> In the non-SEND trust model, you trust the local network.   You *hope* th=
at
> the RA you get =E2=80=9Cfrom the router=E2=80=9D is actually from the rou=
ter.
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>

--0000000000007550a305963def58
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable




On Fri, 1 Nov 2019, 06:34 Ted Lemon, <mellon@fugue.co=
m> wrote:
On Oct 31, 2019, at 3:21 PM,=
 Fernando Gont <fgont@si6networks.com> wrote:
On 27/10/19 09:02, Ted Lemon wrote:
Indeed, this would also not actually solve the=
 problem. =C2=A0=C2=A0At present,
the ISPs are doing something that is o=
ut of spec and causes problems.
If we =E2=80=9Cfix=E2=80=9D this by acco=
mmodating what they do, does that help, or
does it just encourage them t=
o continue doing it?

Did happy eyeballs encourage broke=
n IPv6 connectivity, or did it
actually help IPv6 deployment?
<=
/div>

Don=E2=80=99t get me wrong=E2=80=94I=E2=80=
=99m not saying we shouldn=E2=80=99t do things to improve the situation. =
=C2=A0 I am saying that we should be strategic about it.

What should be ha=
ppening on the host with a prefix that=E2=80=99s deprecated
is that TCP =
connections should be timing out. =C2=A0=C2=A0This doesn=E2=80=99t take
=
very long. =C2=A0

~9 minutes, IIRC.

Should be 90 seconds.

You've got no more=
 than 10 seconds unless you want end users to actively try to do something =
to recover, which can include calling their ISP's helpdesk.

A short presentation on some user e=
xperience factors for network engineers.

<=
div dir=3D"auto">"A bit of UX for NEs"

<=
div dir=3D"auto">


And if there is a new prefix being advertised =
on the
link, that address should have a valid lifetime newer than the ol=
d
prefix, meaning that the next TCP connection should come from that
=
new prefix, not the old one.

That's not correct. Ne=
ither the Valid Lifetime nor the Preferred
Lifetime affect address selec=
tion.

Okay, there=E2=80=99s some=
thing to fix.=C2=A0 Why would these not affect source address selection?

I=
 think Fernando=E2=80=99s plan to shorten some timers makes sense, but
s=
hortening the minimum really doesn=E2=80=99t=E2=80=94it just opens up an op=
portunity
for an easy DoS, since I can now just send out death packets t=
o the
local network and break everything all at once.
The reality with ND attacks are (modulo sanity checks on the packets):you enforce FHS, or you don't.

What is =E2=80=9CFHS=E2=80=9D?

=

If you Really Really want to be able to=
 have the routers send out RAs
that deprecate the default route, and, as=
 Mark is saying here, to
upgrade millions or perhaps billions of hosts, =
why not ask for
something that=E2=80=99s a real improvement?

Every piece helps.

Righ=
t, but if the effort involved in two different options differs by epsilon, =
you should always choose the option that produces the better outcome, shoul=
dn=E2=80=99t you?

<=
div>
 Second, fix RA so that it=E2=80=99s
non-r=
epudiable by a device that doesn=E2=80=99t have the secret key.

SEND=
 does this, sort of.=C2=A0 Nobody uses SEND because it tries to solve
a =
too-big problem and does it using obsolete technology. =C2=A0=C2=A0But the<=
br>basic idea is good: include a public key in every RA that can be usedto validate that the RA was signed with the corresponding private
key.<=
br>

What's the practical difference between that, an a =
network that supports
RA-Guard?

On a network that supports RA guard, there probably is no difference, bu=
t RA guard on some networks, as we=E2=80=99ve discussed in the past, will a=
ctually make the network not work. =C2=A0 RA guard requires an active admin=
istrator. =C2=A0 So the CPE case we=E2=80=99re talking about isn=E2=80=99t =
relevant.


When another RA arrives, see if it was=
 signed with the same key. =C2=A0=C2=A0If
so, it came from the same rout=
er, and can be trusted to update
whatever information that router sent, =
including flash-deprecating a
prefix. =C2=A0=C2=A0If not, ignore it.
=


In the non-SEND trust model, you do trust the local router=
. Why did you
trust the local router to configure your network, but not =
for
deprecating the prefix?

I=
n the non-SEND trust model, you trust the local network. =C2=A0 You hope=
=C2=A0that the RA you get=C2=A0=E2=80=9Cfrom the router=E2=80=9D is act=
ually from the router.

__________________________=
_____________________

v6ops mailing list

v6ops@ietf.org

https://www.ietf.org/mailman/listin=
fo/v6ops




--0000000000007550a305963def58--


From nobody Thu Oct 31 20:07:31 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33CF01200F9 for ; Thu, 31 Oct 2019 20:07:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1DsgTu7k764G for ; Thu, 31 Oct 2019 20:07:28 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE37412006D for ; Thu, 31 Oct 2019 20:07:27 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id D3A03869AA; Fri,  1 Nov 2019 04:07:23 +0100 (CET)
To: Owen DeLong 
Cc: v6ops@ietf.org
References:   <7C913CC2-938F-449C-9750-85C36EC05E38@delong.com> <48c864c7-589d-23cf-417e-6f4ec012a76a@si6networks.com> <7C142F1F-04C6-48A2-A65A-7CADD3691ECF@delong.com> <8dbfb1b6-5efa-019f-313b-e8045ee277ee@si6networks.com> 
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <95cbe3d9-191e-c6e1-cb42-305686ef1e42@si6networks.com>
Date: Thu, 31 Oct 2019 23:04:47 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 03:07:30 -0000

Hello, Owen,

On 31/10/19 16:27, Owen DeLong wrote:
[....]
>>>
>>> I’m not sure what I could do to elaborate. The addition of a specific
>>> call-out that
>>> even if the current behavior of ≤2 hours = 2 hours is to be preserved,
>>> there should
>>> be a special case for “0 seconds” which causes the prefix to be immediately
>>> deprecated with extreme prejudice.
>>>
>>> Hosts should be required to treat an RA containing a prefix with a 0 second
>>> valid lifetime as an invalid prefix and immediately deprecate it from
>>> the interface
>>> if it is in use.
>>
>> OK, so you do agree with the proposed change? (in
>> draft-gont-6man-slaac-renum, not in *this* document)
> 
> From the context of my thinking at the time of writing the original reply,
> “this document” referred to draft-gont-6man-slaac-renum. Apolgies
> for my lack of clarity as you have apparently interpreted it differently.

Ok. BUt, double-checking: DO you agree with the proposed behaviour?




[....]
>>>>
>>>> Even with the default RA frequency, if you were to unprefer a prefix
>>>> upon, say, second RA that doesn't advertise it, and say, remove the
>>>> prefix after many other RAs are received, that would be a *big*
>>>> improvement to what we have now.
>>>
>>> I don’t like this idea because I can think of some scenarios where you
>>> may receive multiple RAs from router A not containing the prefix in the
>>> same time frame that router B has not sent an additional RA containing
>>> the prefix, but it will do so in its next RA.
>>
>> Maybe it wasn't clear in the I-D, but the basic idea is:
>> If you receive multiple RAs from router A that do not advertise the
>> prefix, then you disassociate such prefix with router A. If nobody else
>> is advertising the prefix, you'd deprecate it. If other routers are
>> advertising it, this would not change the status quo of the prefix wrt
>> such other routers.
> 
> That’s definitely not how I interpreted the I-D and I would strongly encourage
> you to review and update the I-D for clarity in this area. I’m actually still not
> 100% convinced that this is correct behavior. It also places additional burdens
> on hosts to track all routers associated with a given prefix rather than merely
> tracking candidate default gateways, RIO data, and one set of prefix timers
> utilizing the most recently received timer refreshes.

Thanks for the feedback! I will definitely clarify the text. FWIW, in
the context of RFC8028, you already need to keep prefixes associated
with routers....


> 
>>> There is no requirement for all routers on the same link to provide the
>>> same set of PIOs, nor are they required to use the same advertisement
>>> timers.
>>
>> Agreed. Please see above.
> 
> With the above clarification, I think it can be done and is less likely to break
> things. However, it does place a significant additional tracking burden on the
> host which I’m not entirely convinced is a desirable situation. Especially in the
> case of a resource-constrained host which is using SLAAC to avoid the overhead
> of DHCP.

In the context of RFC8028, you don't have much of an option -- otherwise
you run the risk of being egress filtered.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 20:07:38 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 565D3120860 for ; Thu, 31 Oct 2019 20:07:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TnB8FLmwcrao for ; Thu, 31 Oct 2019 20:07:31 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C83A612006D for ; Thu, 31 Oct 2019 20:07:30 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 2C2608671F; Fri,  1 Nov 2019 04:07:27 +0100 (CET)
To: Ted Lemon 
Cc: v6ops list 
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com> <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com>
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <7007fd81-eae9-c165-c405-162b561f165a@si6networks.com>
Date: Thu, 31 Oct 2019 23:27:19 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 03:07:36 -0000

On 31/10/19 16:34, Ted Lemon wrote:
> On Oct 31, 2019, at 3:21 PM, Fernando Gont  > wrote:
>> On 27/10/19 09:02, Ted Lemon wrote:
>>> Indeed, this would also not actually solve the problem.   At present,
>>> the ISPs are doing something that is out of spec and causes problems.
>>> If we “fix” this by accommodating what they do, does that help, or
>>> does it just encourage them to continue doing it?
>>
>> Did happy eyeballs encourage broken IPv6 connectivity, or did it
>> actually help IPv6 deployment?
> 
> Don’t get me wrong—I’m not saying we shouldn’t do things to improve the
> situation.   I am saying that we should be strategic about it.

For the home network case, the situation right now is that there are
deployments that break, and ISPs meaning to deploy IPv6 that can't do
stable prefixes. Certainly, that's a very bad strategy on our side.

That said, and as noted, the home network case is just *one* scenario
where this problem may be faced. And a subset of the mitigations for
this scenarios are useful for the general case.



>>> What should be happening on the host with a prefix that’s deprecated
>>> is that TCP connections should be timing out.   This doesn’t take
>>> very long.  
>>
>> ~9 minutes, IIRC.
> 
> Should be 90 seconds.

Nope. The default user timeout is 5 minutes as per RFC793. (The first
para of the second page of RFC5482 provides a summary wrt the
specification of the user timeout).




>>> And if there is a new prefix being advertised on the
>>> link, that address should have a valid lifetime newer than the old
>>> prefix, meaning that the next TCP connection should come from that
>>> new prefix, not the old one.
>>
>> That's not correct. Neither the Valid Lifetime nor the Preferred
>> Lifetime affect address selection.
> 
> Okay, there’s something to fix.  Why would these not affect source
> address selection?

For many reasons: one of them: two different routers might be using
different values for these timers, in an un-coordinated manner. And
there's not reason for which the smaller or larger lifetimes should
imply an address is preferred.

OTOH, you might thing about preferring "the last advertised prefix". BUt
that would mean that src address would flap, which is bad for
trouble-shooting.


> 
>>> I think Fernando’s plan to shorten some timers makes sense, but
>>> shortening the minimum really doesn’t—it just opens up an opportunity
>>> for an easy DoS, since I can now just send out death packets to the
>>> local network and break everything all at once.
>>
>> The reality with ND attacks are (modulo sanity checks on the packets):
>> you enforce FHS, or you don't.
> 
> What is “FHS”?

Sorry, for that: First Hop Security, Cisco's speak for RA-Guard, ND
inspeaction, and so on...




>>> If you Really Really want to be able to have the routers send out RAs
>>> that deprecate the default route, and, as Mark is saying here, to
>>> upgrade millions or perhaps billions of hosts, why not ask for
>>> something that’s a real improvement?
>>
>> Every piece helps.
> 
> Right, but if the effort involved in two different options differs by
> epsilon, you should always choose the option that produces the better
> outcome, shouldn’t you?

Is there any of the proposed fixes that we shouldn't be doing, already,
anyway?


> 
>>> Second, fix RA so that it’s
>>> non-repudiable by a device that doesn’t have the secret key.
>>>
>>> SEND does this, sort of.  Nobody uses SEND because it tries to solve
>>> a too-big problem and does it using obsolete technology.   But the
>>> basic idea is good: include a public key in every RA that can be used
>>> to validate that the RA was signed with the corresponding private
>>> key.
>>
>> What's the practical difference between that, an a network that supports
>> RA-Guard?
> 
> On a network that supports RA guard, there probably is no difference,
> but RA guard on some networks, as we’ve discussed in the past, will
> actually make the network not work.   RA guard requires an active
> administrator.   So the CPE case we’re talking about isn’t relevant.

The point is: in a network where you do not employ RA-Guard, you are
already trusting the router. Actually, it's worse: you trust all local
systems.


> 
> 
>>> When another RA arrives, see if it was signed with the same key.   If
>>> so, it came from the same router, and can be trusted to update
>>> whatever information that router sent, including flash-deprecating a
>>> prefix.   If not, ignore it.
>>
>> In the non-SEND trust model, you do trust the local router. Why did you
>> trust the local router to configure your network, but not for
>> deprecating the prefix?
> 
> In the non-SEND trust model, you trust the local network.   You
> /hope/ that the RA you get “from the router” is actually from the router.

Exactly: that's the point: you already trust the local network. What's
the rationale for trusting one of the RAs, but not the others?


-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 20:07:46 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAB821200F9 for ; Thu, 31 Oct 2019 20:07:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vCcYQ-eYOPWj for ; Thu, 31 Oct 2019 20:07:36 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE06212087B for ; Thu, 31 Oct 2019 20:07:35 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 320BE86956; Fri,  1 Nov 2019 04:07:31 +0100 (CET)
To: Owen DeLong 
Cc: Ted Lemon , v6ops list 
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com> 
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: 
Date: Fri, 1 Nov 2019 00:02:30 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 03:07:43 -0000

On 31/10/19 16:38, Owen DeLong wrote:
> 
> 
>> On Oct 31, 2019, at 12:21 PM, Fernando Gont  wrote:
>>
>> Hello, Ted,
>>
>>
>> On 27/10/19 09:02, Ted Lemon wrote:
>>> Indeed, this would also not actually solve the problem.   At present,
>>> the ISPs are doing something that is out of spec and causes problems.
>>> If we “fix” this by accommodating what they do, does that help, or
>>> does it just encourage them to continue doing it?
>>
>> Did happy eyeballs encourage broken IPv6 connectivity, or did it
>> actually help IPv6 deployment?
> 
> Considering these mutually exclusive is a false dichotomy.
> 
> It did both.

It's hard for me to believe that folks were breaking stuff on purpose.

In any case, I would assume and expect that helping IPv6 deployment was
more of a priority at the time. IN fact, we wouldn't be talking about
"google seeing 25% of IPv6" if there wasn't a way to circumvent
brokenness, I'd assume.


[...]
> 
>>> When another RA arrives, see if it was signed with the same key.   If
>>> so, it came from the same router, and can be trusted to update
>>> whatever information that router sent, including flash-deprecating a
>>> prefix.   If not, ignore it.
>>
>> In the non-SEND trust model, you do trust the local router. Why did you
>> trust the local router to configure your network, but not for
>> deprecating the prefix?
> 
> Trusting the local router to configure the network to add a previously non-operational host to the network has a somewhat different set of consequence for failure than trusting whatever on-link host wishes to tell you to effectively shut down your currently operating network connection.

We'll that's the SLAAC model.



> Especially when you consider that such an announcement can be sent to the all nodes on link multicast address, effectively dropping them all at once.
> 
> I agree it’s not a huge difference, but, it is a difference and certainly the scope of the resulting problem can be much larger than the case of individual host configuration.

Hosts trust a lot of other crap. e.g., feel free to advertising a Cur
Hop Limit of 1. Is that any different?

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 20:07:53 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B47D12083F for ; Thu, 31 Oct 2019 20:07:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T-cO1gO6nt9e for ; Thu, 31 Oct 2019 20:07:42 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9234D12020A for ; Thu, 31 Oct 2019 20:07:42 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 7CA3D8671F; Fri,  1 Nov 2019 04:07:37 +0100 (CET)
To: Owen DeLong 
Cc: Ted Lemon , Philip Homburg , v6ops@ietf.org
References:       
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <8f46bb68-1713-8c68-96b1-c46cf2003325@si6networks.com>
Date: Fri, 1 Nov 2019 00:06:56 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 03:07:49 -0000

On 31/10/19 16:39, Owen DeLong wrote:
> 
> 
>> On Oct 31, 2019, at 12:25 PM, Fernando Gont  wrote:
>>
>> On 27/10/19 10:54, Ted Lemon wrote:
>>> On Oct 27, 2019, at 9:41 AM, Philip Homburg >> > wrote:
>>>> The little bit missing is that the CPE should write prefixes
>>>> advertised using
>>>> SLAAC to persistent storage which allows the CPE to invalidate stale
>>>> prefixes
>>>> after a reboot.
>>>
>>> Actually I do not believe this is correct behavior.   Let us assume
>>> prefix delegation.   If we have prefix delegation, then when the CPE
>>> comes back from a power cycle, it should reconfirm the prefix it had
>>> previously; the assumption is that that prefix is still valid.  This can
>>> be handled in infrastructure—the ISP edge router should know whether the
>>> prefix is still valid, because if it is it should be advertising a route
>>> for it.   If it is not still valid, then the CPE router should attempt
>>> to renew it, which would go to the DHCP server (possibly both messages
>>> would).
>>
>> That assues the CPE has stored the previously-leased prefix on stable
>> storage -- which does not need to be the case. Hence the related text in
>> our I-D.
> 
> IMHO, the CPE requirements should be increased and the CPE should be required
> to store the prefix and it’s expected valid and preferred expiration times in persistent
> storage. I would like to see the text in the I-D updated accordingly.

It's already there (draft-gont-v6ops-slaac-renum-00):

3.2.1.  Signaling Stale Configuration Information

   In order to phase-out stale configuration information:

   o  A CPE router sending RAs that advertise dynamically-learned
      prefixes (e.g. via DHCPv6-PD) on an interface MUST record, on
      stable storage, the list of prefixes being advertised on each
      network segment.


Thanks!

Cheers,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 20:11:37 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6FF8712006D for ; Thu, 31 Oct 2019 20:11:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d9rb0uwssaph for ; Thu, 31 Oct 2019 20:11:35 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB26A1200F4 for ; Thu, 31 Oct 2019 20:11:34 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 062148678F; Fri,  1 Nov 2019 04:11:31 +0100 (CET)
To: Ted Lemon 
Cc: Philip Homburg , v6ops@ietf.org
References:    <855496CB-BF7E-41E6-B273-41C4AA771E41@fugue.com> <5e0d1da1-4933-069c-68f6-9aa360106582@si6networks.com> 
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <2e7d225b-131e-e5ec-4ff5-c98a3b868e42@si6networks.com>
Date: Fri, 1 Nov 2019 00:11:23 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 03:11:36 -0000

On 31/10/19 16:47, Ted Lemon wrote:
> On Oct 31, 2019, at 3:41 PM, Fernando Gont  > wrote:
>> As someone that has played a lot with ND-based DoS vectors, I should say
>> that you trust RAs, or you don't. If you do, all bets are off. ("sudo
>> apt-get install ipv6toolkit;man ra6" and you'll get examples of a bunch
>> of other DoS attacks that an attacker can perform).
> 
> As an end user, I don’t have this experience.   If someone is spamming
> my network with RAs, I can find out who and disconnect them.   A DoS
> attack based on massive quantities of RAs is a lot different than an
> attack that shuts my network off with one multicast. 

Meta:
The regular non-technical user has no clue about RAs or the like. So,
the network works, or it doesn't. Normally, if things do not work, thye
will unplug and re-plug the router, ironically triggering this problem
in many cases.

That said: There are plenty of one-plenty of one-packet DoS vectors in
SLAAC. e.g., sen an RA with a Cur Hop Limit of 0, send an RA that
advertises a default router with highes priority, or simply advertise
RIOs as ::/1 and 8000::/1, overriding default routers.

Any clueful attacker will use any that works, rather than sticking to a
specific one.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 20:13:44 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BEEA71200F4 for ; Thu, 31 Oct 2019 20:13:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zVdlZSE7ZSPD for ; Thu, 31 Oct 2019 20:13:41 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28D0B12013A for ; Thu, 31 Oct 2019 20:13:40 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 4F4B5868E3; Fri,  1 Nov 2019 04:13:37 +0100 (CET)
To: Ted Lemon , Owen DeLong 
Cc: v6ops list 
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com> <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com>  
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <02da678c-a30e-d161-df51-85da864728b4@si6networks.com>
Date: Fri, 1 Nov 2019 00:13:29 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 03:13:43 -0000

On 31/10/19 16:49, Ted Lemon wrote:
> On Oct 31, 2019, at 3:47 PM, Owen DeLong  > wrote:
>> RA Guard could be default configured on switches with particular
>> default “plug router in here” (uplink) ports, eliminating the need for
>> an active administrator. This could be a useful specification in the
>> HomeNet documents, perhaps.
> 
> This would be disastrous.   It pretty much makes permissionless
> networking impossible in exchange for solving a security problem no-one has.

Then, what's the big deal to honor PIOs that advertise a lifetime of 0? ;-)


-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 20:31:34 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78A511200C5 for ; Thu, 31 Oct 2019 20:31:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YHRtIGpa_VFS for ; Thu, 31 Oct 2019 20:31:31 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C77FC12006D for ; Thu, 31 Oct 2019 20:31:30 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id EC83186699; Fri,  1 Nov 2019 04:31:27 +0100 (CET)
To: Mark Smith , Ted Lemon 
Cc: v6ops list 
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com> <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com> 
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: 
Date: Fri, 1 Nov 2019 00:18:40 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 03:31:33 -0000

On 31/10/19 21:20, Mark Smith wrote:
> 
> 
> On Fri, 1 Nov 2019, 06:34 Ted Lemon,  > wrote:
> 
>     On Oct 31, 2019, at 3:21 PM, Fernando Gont      > wrote:
>>     On 27/10/19 09:02, Ted Lemon wrote:
>>>     Indeed, this would also not actually solve the problem.   At present,
>>>     the ISPs are doing something that is out of spec and causes problems.
>>>     If we “fix” this by accommodating what they do, does that help, or
>>>     does it just encourage them to continue doing it?
>>
>>     Did happy eyeballs encourage broken IPv6 connectivity, or did it
>>     actually help IPv6 deployment?
> 
>     Don’t get me wrong—I’m not saying we shouldn’t do things to improve
>     the situation.   I am saying that we should be strategic about it.
> 
>>>     What should be happening on the host with a prefix that’s deprecated
>>>     is that TCP connections should be timing out.   This doesn’t take
>>>     very long.  
>>
>>     ~9 minutes, IIRC.
> 
>     Should be 90 seconds.
> 
> 
> You've got no more than 10 seconds unless you want end users to actively
> try to do something to recover, which can include calling their ISP's
> helpdesk.

I'd argue the opposite. But, anyway, for the most part the user timeout
is not under the control of the user.


-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 20:31:42 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A771512089A for ; Thu, 31 Oct 2019 20:31:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8eQHMZp1CSXQ for ; Thu, 31 Oct 2019 20:31:35 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01E3B120827 for ; Thu, 31 Oct 2019 20:31:34 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 2882686699; Fri,  1 Nov 2019 04:31:31 +0100 (CET)
To: Ole Troan , Philip Homburg 
Cc: v6ops@ietf.org
References:  <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org>    <21E28E8F-8E91-47D6-8337-9FF0359D67B8@employees.org>  <1E99599F-0A56-4A53-AD7C-499BC87AA7D3@employees.org>
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <74305ad0-282c-a7aa-5406-418c85c6f5b5@si6networks.com>
Date: Fri, 1 Nov 2019 00:28:30 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <1E99599F-0A56-4A53-AD7C-499BC87AA7D3@employees.org>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 03:31:41 -0000

On 28/10/19 06:58, Ole Troan wrote:
> Philip,
> 
>>> I didn't see your answer to:  "I dont know of a single server which
>>> operates that way currently. Can you point to a working example?"
>>>
>>> I take it the answer is: "currently none"?
>>
>> Is the question whether people are running services on home networks where
>> the ISP uses flash renumbering?
>>
>> If so, the answer is yes. There are a number of 'dynamic DNS' providers.
>> People use those to keep DNS up-to-date when their public IPv4 address changes.
>>
>> All of this is small scale hobbyist usage (and most likely only IPv4) but
>> it does exist.
> 
> No, the question is if there is any host stack + server software that deals with flash renumbering deployed.
> And that is deployable without coding.
> 
> It's the same question Owen posed for the ISP side, when challenged with how DHCP behaves.
> The point here is that we as the IETF must also consider the end-user here. Not that I don't think ISPs do that too, but so far this debate has largely been on the premise of the opertor with little concern of the consequences for the user.

No, that's in correct. This document was, in fact, triggered by an
operator that does care.

And both here and on the ipv6-ops there have been statements noting that
they have these scenarios in their networks. And not because they don't
care about their users.

-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 20:31:51 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDFFD1208CF for ; Thu, 31 Oct 2019 20:31:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hP3EZqwQM3mO for ; Thu, 31 Oct 2019 20:31:39 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46FBD120877 for ; Thu, 31 Oct 2019 20:31:39 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 338CF866C6; Fri,  1 Nov 2019 04:31:35 +0100 (CET)
To: Ole Troan , Philip Homburg 
Cc: v6ops@ietf.org
References:  <44F39DE2-E142-4ED0-853E-2F3AAC6F4ADE@employees.org>    <21E28E8F-8E91-47D6-8337-9FF0359D67B8@employees.org>  <1E99599F-0A56-4A53-AD7C-499BC87AA7D3@employees.org>  
From: Fernando Gont 
Openpgp: preference=signencrypt
Message-ID: <303db654-2d34-695a-9f9d-8747d94f6a89@si6networks.com>
Date: Fri, 1 Nov 2019 00:31:10 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 03:31:44 -0000

On 28/10/19 11:10, Ole Troan wrote:
> Philip,
> 
>>> No, the question is if there is any host stack + server software
>>> that deals with flash renumbering deployed.  And that is deployable
>>> without coding.
>>
>> Flash renumbering is by and large not a server problem. If a request
>> reaches the server, then the server typically can reply. Any flow that
>> spans the renumbering event will be affected, but there are lots of 
>> other issues that also affect established flows.
>>
>> If you renumber the network that contains mail servers, web servers,
>> xmpp servers, etc., then the servers don't really notice.
>>
>> Of course, a renumbering event requires DNS to be updated, possibly changes
>> to firewalls, etc. But that is no different from a proper renumbering event.
> 
> And this is something you have tested and verified works?
> For a set of typical open source packages?
> See Bjørn's message as well.
> And try to see what happens when you do this for a hidden primary DNS server...
> 
> The world just isn't ready for flash renumbering of networks, likely not graceful renumbering either.
> There are not many sensible responses the end-users can come up with to a service provider with a network behaving this way, apart from isolating addressing. Aka NAT.

We did in fact propose several. (draft-gont-6man-slaac-renum).

It would be amusing for v6ops' response to this case that folks should
be doing NAT.


-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Thu Oct 31 23:49:31 2019
Return-Path: 
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3DA612002E for ; Thu, 31 Oct 2019 23:49:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.496
X-Spam-Level: 
X-Spam-Status: No, score=-0.496 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aQeVJSPZNcdC for ; Thu, 31 Oct 2019 23:49:29 -0700 (PDT)
Received: from mail-oi1-x22b.google.com (mail-oi1-x22b.google.com [IPv6:2607:f8b0:4864:20::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2A4712001E for ; Thu, 31 Oct 2019 23:49:28 -0700 (PDT)
Received: by mail-oi1-x22b.google.com with SMTP id v186so7395387oie.5 for ; Thu, 31 Oct 2019 23:49:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=MTU2RZEndXNXGJt46QX4cXwQs4998Kg0Qhd3iVflsMM=; b=dxNZCC2i/Ct1p+8Z9KP5ZRCDUA69it+On2Tv4M8fIUX4mFPAPENLW1TUr/JkqRd5aJ grB7qjzwKDg901oUMHewlqwiAg/CJbjGQ84c7rrpnlBOi1lNgCOe3UV2msn6Wy+0Oq+X FhcmqOE4I8ql8sl9ox2WaVYFJCjvHVU+yJr2VE7fFlq0vZ/BT0V3Nqj07ODZzDJmh1cx /gN0g02q//QfFLirXqWAXd/XMmLJKh+KhiKMDNha1rjiY9NhW6R5gl3m/DPivUIyxQID IC8dhVt6+fq4qCyF9P+3BgxuB+3R8kGJTpfCDtzYWQqVNEJevuisHFKHF83UDqMUSowN LSkw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=MTU2RZEndXNXGJt46QX4cXwQs4998Kg0Qhd3iVflsMM=; b=pZ3YybU8ll44oVCa1qKaYc6OxZEvvmZtpmWkftgY15/MoZEy38hK1tVaVV9et5bnBb 1NQQu+cUN7nfoCPvz1Zrpl3T17aN+WbwPDc5lUhmyFLMQLIqdchHEBkhQGa9qWhtqFks iVJU1GnhKYESV1xdZLNe/M+sTd3CvAMU2mNMMueEriCe/VQ+6M+eL6efmXhNsbJ7OHRC VivAieduxmcXEcaAJEu2evqKfI8VQd8eMsWCGPcnivteYm1JRmDMdm8cy2D2W9s/9Bc4 39XpbpcxJOtubxLC+HQy0uIFmyyKR8PCEBvzB9z8RTlWIEHiqohZ9/ti1sbDE8UKsKYD OkBg==
X-Gm-Message-State: APjAAAX2Blw++kSAXze+ru9Fnsx8Vws/xABwksAKLuhimyjCGqnIH103 KizZrJ5X4kB12yEqSsjE1k+VAO2HyujAMmCkx8Mjqg==
X-Google-Smtp-Source: APXvYqyrPHcSKqARiYPt6eyWFbxsf/ZkVwf/AxvccyVjS0AbpEjluDo7fkk2SOxTCXeoLNhfSXcjRQazuVnvl08tMrI=
X-Received: by 2002:a54:4198:: with SMTP id 24mr4037393oiy.164.1572590968223;  Thu, 31 Oct 2019 23:49:28 -0700 (PDT)
MIME-Version: 1.0
References:   <325e84aa-1703-e1ce-55a6-8790ceb7aff0@si6networks.com> <4C6471D4-0F5B-49EE-A38A-22AB2B87DA7E@fugue.com>  
In-Reply-To: 
From: Mark Smith 
Date: Fri, 1 Nov 2019 17:49:17 +1100
Message-ID: 
To: Fernando Gont 
Cc: Ted Lemon , v6ops list 
Content-Type: multipart/alternative; boundary="00000000000009bd4d0596435e2a"
Archived-At: 
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 01 Nov 2019 06:49:31 -0000

--00000000000009bd4d0596435e2a
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, 1 Nov 2019, 14:31 Fernando Gont,  wrote:

> On 31/10/19 21:20, Mark Smith wrote:
> >
> >
> > On Fri, 1 Nov 2019, 06:34 Ted Lemon,  > > wrote:
> >
> >     On Oct 31, 2019, at 3:21 PM, Fernando Gont  >     > wrote:
> >>     On 27/10/19 09:02, Ted Lemon wrote:
> >>>     Indeed, this would also not actually solve the problem.   At
> present,
> >>>     the ISPs are doing something that is out of spec and causes
> problems.
> >>>     If we =E2=80=9Cfix=E2=80=9D this by accommodating what they do, d=
oes that help, or
> >>>     does it just encourage them to continue doing it?
> >>
> >>     Did happy eyeballs encourage broken IPv6 connectivity, or did it
> >>     actually help IPv6 deployment?
> >
> >     Don=E2=80=99t get me wrong=E2=80=94I=E2=80=99m not saying we should=
n=E2=80=99t do things to improve
> >     the situation.   I am saying that we should be strategic about it.
> >
> >>>     What should be happening on the host with a prefix that=E2=80=99s
> deprecated
> >>>     is that TCP connections should be timing out.   This doesn=E2=80=
=99t take
> >>>     very long.
> >>
> >>     ~9 minutes, IIRC.
> >
> >     Should be 90 seconds.
> >
> >
> > You've got no more than 10 seconds unless you want end users to activel=
y
> > try to do something to recover, which can include calling their ISP's
> > helpdesk.
>
> I'd argue the opposite..



I wouldn't argue with research from 1968, referenced in an article from
1993, by an expert in usability, cited in my slides.

Response Times: The 3 Important Limits
https://www.nngroup.com/articles/response-times-3-important-limits/



But, anyway, for the most part the user timeout
> is not under the control of the user.
>


I don't understand this.

It not being in control of the user is the point of knowing UX/HCI factors
so the good default response times can be chosen.

TCP's default timeouts are way too large for a good end user experience. I
don't know what criteria were used to select them, but it certainly wasn't
human usability factors.





>
> --
> Fernando Gont
> SI6 Networks
> e-mail: fgont@si6networks.com
> PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492
>
>
>
>
>

--00000000000009bd4d0596435e2a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable




On Fri, 1 Nov 2019, 14:31 Fernando Gont, <fgont@si6networks.com> wrote:
On 31/10/19 21:20, Mark Smith wrote:

> 

> 

> On Fri, 1 Nov 2019, 06:34 Ted Lemon, <mellon@fugue.com

> <mailto:mellon@fugue.co=
m>> wrote:

> 

>=C2=A0 =C2=A0 =C2=A0On Oct 31, 2019, at 3:21 PM, Fernando Gont <fgont@si6networks.com

>=C2=A0 =C2=A0 =C2=A0<mailto:fgont@si6networks.com>> wrote:

>>=C2=A0 =C2=A0 =C2=A0On 27/10/19 09:02, Ted Lemon wrote:

>>>=C2=A0 =C2=A0 =C2=A0Indeed, this would also not actually solve =
the problem. =C2=A0=C2=A0At present,

>>>=C2=A0 =C2=A0 =C2=A0the ISPs are doing something that is out of=
 spec and causes problems.

>>>=C2=A0 =C2=A0 =C2=A0If we =E2=80=9Cfix=E2=80=9D this by accommo=
dating what they do, does that help, or

>>>=C2=A0 =C2=A0 =C2=A0does it just encourage them to continue doi=
ng it?

>>

>>=C2=A0 =C2=A0 =C2=A0Did happy eyeballs encourage broken IPv6 connec=
tivity, or did it

>>=C2=A0 =C2=A0 =C2=A0actually help IPv6 deployment?

> 

>=C2=A0 =C2=A0 =C2=A0Don=E2=80=99t get me wrong=E2=80=94I=E2=80=99m not =
saying we shouldn=E2=80=99t do things to improve

>=C2=A0 =C2=A0 =C2=A0the situation. =C2=A0 I am saying that we should be=
 strategic about it.

> 

>>>=C2=A0 =C2=A0 =C2=A0What should be happening on the host with a=
 prefix that=E2=80=99s deprecated

>>>=C2=A0 =C2=A0 =C2=A0is that TCP connections should be timing ou=
t. =C2=A0=C2=A0This doesn=E2=80=99t take

>>>=C2=A0 =C2=A0 =C2=A0very long. =C2=A0

>>

>>=C2=A0 =C2=A0 =C2=A0~9 minutes, IIRC.

> 

>=C2=A0 =C2=A0 =C2=A0Should be 90 seconds.

> 

> 

> You've got no more than 10 seconds unless you want end users to ac=
tively

> try to do something to recover, which can include calling their ISP=
9;s

> helpdesk.



I'd argue the opposite..

=


I wouldn't argue wi=
th research from 1968, referenced in an article from 1993, by an expert in =
usability, cited in my slides.

Response Times: The 3 Important Li=
mits





I don'=
;t understand this.

It n=
ot being in control of the user is the point of knowing UX/HCI factors so t=
he good default response times can be chosen.

TCP's default timeouts are way too large for a go=
od end user experience. I don't know what criteria were used to select =
them, but it certainly wasn't human usability factors.









-- 

Fernando Gont

SI6 Networks

e-mail: fgont@si6networks.=
com

PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492












--00000000000009bd4d0596435e2a--