From nobody Tue Oct 3 07:48:10 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A961134D2F; Tue, 3 Oct 2017 07:48:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.398 X-Spam-Level: X-Spam-Status: No, score=-5.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VX9qIwtLjQ_4; Tue, 3 Oct 2017 07:48:00 -0700 (PDT) Received: from relais-inet.orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B45C134DDF; Tue, 3 Oct 2017 07:39:32 -0700 (PDT) Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr23.francetelecom.fr (ESMTP service) with ESMTP id 3D420C02A4; Tue, 3 Oct 2017 16:39:31 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.34]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id 08462120074; Tue, 3 Oct 2017 16:39:31 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM6F.corporate.adroot.infra.ftgroup ([fe80::bd00:88f8:8552:3349%17]) with mapi id 14.03.0361.001; Tue, 3 Oct 2017 16:39:30 +0200 From: To: Ben Campbell CC: "Joel M. Halpern" , "draft-ietf-sfc-nsh@ietf.org" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Thread-Topic: [sfc] Ben Campbell's No Objection on draft-ietf-sfc-nsh-24: (with COMMENT) - Encrypted content Thread-Index: AQHTOWOaDWeIhZI3w0SuqPgM+DBkL6LSN9sA Date: Tue, 3 Oct 2017 14:39:30 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93300A04DA99@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <150656415366.13695.13637551894724173929.idtracker@ietfa.amsl.com> <393cb3d3-687f-f092-435c-b95f207236cd@joelhalpern.com> <787AE7BB302AE849A7480A190F8B93300A04B418@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <2D7C2C05-161E-40AC-8029-E04552B4B07C@nostrum.com> In-Reply-To: <2D7C2C05-161E-40AC-8029-E04552B4B07C@nostrum.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] Ben Campbell's No Objection on draft-ietf-sfc-nsh-24: (with COMMENT) - Encrypted content X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Oct 2017 14:48:03 -0000 SGkgQmVuLCANCg0KVGhpcyBtYWtlcyBhIGxvdCBvZiBzZW5zZS4gDQoNClRoYW5rIHlvdS4NCg0K Q2hlZXJzLA0KTWVkDQoNCj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IEJl biBDYW1wYmVsbCBbbWFpbHRvOmJlbkBub3N0cnVtLmNvbV0NCj4gRW52b3nDqcKgOiB2ZW5kcmVk aSAyOSBzZXB0ZW1icmUgMjAxNyAyMjo0Mw0KPiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQv T0xODQo+IENjwqA6IEpvZWwgTS4gSGFscGVybjsgZHJhZnQtaWV0Zi1zZmMtbnNoQGlldGYub3Jn OyBzZmMtY2hhaXJzQGlldGYub3JnOw0KPiBUaGUgSUVTRzsgc2ZjQGlldGYub3JnDQo+IE9iamV0 wqA6IFJlOiBbc2ZjXSBCZW4gQ2FtcGJlbGwncyBObyBPYmplY3Rpb24gb24gZHJhZnQtaWV0Zi1z ZmMtbnNoLTI0Og0KPiAod2l0aCBDT01NRU5UKSAtIEVuY3J5cHRlZCBjb250ZW50DQo+IA0KPiBU byBiZSBjbGVhciwgSSBhbSBub3QgYXNraW5nIGZvciB0aGUgTlNIIHRvIGNvbXBseSB3aXRoIHRo ZSBhZHZpY2UgaW4NCj4gODE2NS4gSSBhbSBhc2tpbmcgaXQgdG8gYWNrbm93bGVkZ2UgdGhhdCBh ZHZpY2UsIGFuZCBzYXkgaG93IHRoYXQgYWR2aWNlDQo+IGFwcGxpZXMuIElmIHRoZSBhbnN3ZXIg aXMg4oCcaXQgZG9lc27igJl0IGFwcGx5IGJlY2F1c2UuLi7igJ0sIHRoYXTigJlzIGZpbmUuIEJ1 dA0KPiBJIHRoaW5rIGl04oCZcyBhIHByb2JsZW0gZm9yIHRoaXMgZHJhZnQgdG8gaWdub3JlIHRo YXQgYWR2aWNlIGVudGlyZWx5Lg0KPiANCj4gSGVyZeKAmXMgYW4gZXhhbXBsZSBvZiBzb21lIHBv dGVudGlhbCB0ZXh0IHRvIGFkZCB0byB0aGUgc2VjdXJpdHkNCj4gY29uc2lkZXJhdGlvbnMgc2Vj dGlvbiwgb3IgZXZlbiBiZXR0ZXIsIGEgcHJpdmFjeSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uLg0K PiAoSeKAmW0gbm90IHNheWluZyB0aGlzIGlzIGNvcnJlY3TigJRpdOKAmXMganVzdCBhbiBleGFt cGxlIG9mIHdoYXQgSSBoYXZlIGluDQo+IG1pbmQuKQ0KPiANCj4g4oCcIFRoZSBOU0ggcHJvdmlk ZXMgYSBtZWNoYW5pc20gZm9yIG5ldHdvcmsgZWxlbWVudHMgdG8gYXR0YWNoIG1ldGFkYXRhIHRv DQo+IHVzZXIgZGF0YSBmbG93cy4gW1JGQyA4MTY1XSBkZXNjcmliZXMgc29tZSByaXNrcyBhbmQg YWR2aWNlIHJlbGF0ZWQgdG8NCj4gbWV0YWRhdGEgaW5zZXJ0aW9uIGJ5IG1pZGRsZWJveGVzLiBU aGUgYWR2aWNlIHRvIGxpbWl0IHN1Y2ggbWV0YWRhdGEgdG8NCj4gdGhhdCBpbmNsdWRlZCBieSB0 aGUgZW5kLXN5c3RlbSBpcyBub3QgZmVhc2libGUgZm9yIFNGQyBiZWNhdXNlIFtyZWFzb25zXS4N Cj4gVGhlIGltcGFjdCBvZiB0aGUgbWV0YWRhdGEgaXMgc29tZXdoYXQgbWl0aWdhdGVkIGJ5IHRo ZSBsaW1pdGF0aW9uIG9mIHRoZQ0KPiBOU0ggdG8gYSBzaW5nbGUgb3BlcmF0b3IgZW52aXJvbm1l bnQsIHNpbmNlIHN1Y2ggYW4gb3BlcmF0b3IgY2FuIGJlDQo+IGFzc3VtZWQgdG8gYWxyZWFkeSBo YXZlIGFjY2VzcyB0byB0aGUgaW5zZXJ0ZWQgaW5mb3JtYXRpb24uDQo+IA0KPiBIb3dldmVyLCBp bXBsZW1lbnRvcnMgYW5kIG9wZXJhdG9ycyBzaG91bGQgYmUgYXdhcmUgdGhhdCBtZXRhZGF0YSBv ZnRlbg0KPiBoYXMgcHJpdmFjeSBpbXBsaWNhdGlvbnMsIGFuZCB0aG9zZSBpbXBsaWNhdGlvbnMg YXJlIHNvbWV0aW1lcyBoYXJkIHRvDQo+IHByZWRpY3QuIFRoZXJlZm9yZSBhdHRhY2hlZCBtZXRh ZGF0YSBzaG91bGQgYmUgbGltaXRlZCB0byB0aGF0IG5lY2Vzc2FyeQ0KPiBmb3IgY29ycmVjdCBv cGVyYXRpb24gb2YgdGhlIFNGUC4g4oCcDQo+IA0KPiBUaGFua3MhDQo+IA0KPiBCZW4uDQo+IA0K PiA+IE9uIFNlcCAyOCwgMjAxNywgYXQgMToyNCBBTSwgbW9oYW1lZC5ib3VjYWRhaXJAb3Jhbmdl LmNvbSB3cm90ZToNCj4gPg0KPiA+IERlYXIgQmVuLA0KPiA+DQo+ID4gV2l0aCByZWdhcmRzIHRv IHlvdXIgY29tbWVudHMgdnMuIFJGQzgxNjUsIEkgZG9uJ3Qgc2VlIGhvdyB0aGUgYWR2aWNlIGlu DQo+IDgxNjUgY2FuIGJlIGZvbGxvd2VkIGhlcmUuDQo+ID4NCj4gPiBJIGhhdmUgcmFpc2VkIHRo ZSBzcGVjaWZpY3Mgb2Ygc2VydmljZSBjaGFpbmluZyBkdXJpbmcgdGhlIElFVEYgTEMgb2YNCj4g ZHJhZnQtaGFyZGllICg4MTY1KTogeW91IGNhbiBjaGVjayBhdCBodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsLQ0KPiBhcmNoaXZlL3dlYi9pZXRmL2N1cnJlbnQvbXNnMTAwOTA5Lmh0bWwgKHNlYXJj aCBmb3IgInNlcnZpY2UgZnVuY3Rpb24NCj4gY2hhaW5pbmciKS4NCj4gPg0KPiA+IENoZWVycywN Cj4gPiBNZWQNCj4gPg0KPiA+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPj4gRGUg OiBzZmMgW21haWx0bzpzZmMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBCZW4gQ2Ft cGJlbGwNCj4gPj4gRW52b3nDqSA6IGpldWRpIDI4IHNlcHRlbWJyZSAyMDE3IDA2OjE1DQo+ID4+ IMOAIDogSm9lbCBNLiBIYWxwZXJuDQo+ID4+IENjIDogZHJhZnQtaWV0Zi1zZmMtbnNoQGlldGYu b3JnOyBzZmMtY2hhaXJzQGlldGYub3JnOyBUaGUgSUVTRzsNCj4gPj4gc2ZjQGlldGYub3JnDQo+ ID4+IE9iamV0IDogUmU6IFtzZmNdIEJlbiBDYW1wYmVsbCdzIE5vIE9iamVjdGlvbiBvbiBkcmFm dC1pZXRmLXNmYy1uc2gtMjQ6DQo+ID4+ICh3aXRoIENPTU1FTlQpIC0gRW5jcnlwdGVkIGNvbnRl bnQNCj4gPj4NCj4gPj4gSGkgSm9lbCwNCj4gPj4NCj4gPj4gT24gcmVmbGVjdGlvbiwgdGhlIOKA nGVuY3J5cHRlZCBwYXlsb2Fk4oCdIHBhcnQgbWF5IGJlIGEgcmVkIGhlcnJpbmcuIExldA0KPiBt ZQ0KPiA+PiBnZW5lcmFsaXplIHRoYXQgdG8g4oCcd2l0aGhlbGQgaW5mb3JtYXRpb27igJ0uICBB cyB5b3UgbWVudGlvbiwgdGhlDQo+IG1ldGFkYXRhDQo+ID4+IG1hcmtzIHdoYXQgdGhlIG9wZXJh dG9yIHdhbnRzIHRvIGtub3cgYWJvdXQgYSBwYWNrZXQsIGJ1dCB0aGF0IG1heQ0KPiA+PiBzb21l dGltZXMgY29uZmxpY3Qgd2l0aCB3aGF0IHRoZSB1c2VyIGRvZXNu4oCZdCB3YW50IHRvIHRoZW0g dG8ga25vdy4NCj4gSGVyZeKAmXMNCj4gPj4gYW4gZXhhbXBsZToNCj4gPj4NCj4gPj4gTGV0cyBj b25zaWRlciBhbiBlbmQgdXNlciB0aGF0IGRvZXNuJ3Qgd2FudCB0byBiZSB0cmFja2VkIGZvcg0K PiBhZHZlcnRpc2luZw0KPiA+PiBwdXJwb3Nlcy4gVGhleSBibG9jayBjZXJ0YWluIHRyYWNraW5n IGNvb2tpZXMgYW5kIGFueXRoaW5nIGVsc2UgdGhhdA0KPiBzaG93cw0KPiA+PiBjb250aW51aXR5 IG9mIGlkZW50aXR5IHRvIHdlYiBzZXJ2ZXJzLiBCdXQgYXMgeW91IG1lbnRpb24sIHRoZSBvcGVy YXRvcg0KPiA+PiBuZWVkcyBvciB3YW50cyB0byBrbm93IHRoZSBzdWJzY3JpYmVyIElELCBzbyB0 aGUgY2xhc3NpZmllciBhZGRzIHRoYXQNCj4gdG8NCj4gPj4gdGhlIE5TSC4uIFRoZSB0ZXJtaW5h bCBlbGVtZW50IGluIHRoZSBjaGFpbiBoYXBwZW5zIHRvIGJlIGEgd2ViIHNlcnZpY2UNCj4gPj4g dGhhdCB1c2VzIHRoZSBOU0ggY29udGVudHMgdG8gdHJhY2sgdGhlIHVzZXIgZm9yIGFkdmVydGlz aW5nIHB1cnBvc2VzLg0KPiBZb3UNCj4gPj4gbWF5IHJlY2FsbCBhIGNvbnRyb3ZlcnN5IGEgd2hp bGUgYmFjayBhYm91dCBhIG1ham9yIG9wZXJhdG9yIGRvaW5nDQo+ID4+IHNvbWV0aGluZyBzaW1p bGFyIHVzaW5nIEhUVFAgaGVhZGVyIGVucmljaG1lbnQuDQo+ID4+DQo+ID4+IEkgdGhpbmsgdGhl IGFuc3dlciB0byB0aGlzIGZvciB0aGlzIHBhcnRpY3VsYXIgY2FzZSBpcyB0aGF0IHRoZSBOU0gg aXMNCj4gPj4gYXNzdW1lZCBub3QgdG8gZ28gb3V0c2lkZSBhIHNpbmdsZSBhZG1pbmlzdHJhdGl2 ZSBkb21haW4sIGFuZCB0aGF0IGFsbA0KPiA+PiBlbGVtZW50cyBpbiB0aGUgc2FtZSBkb21haW4g Y2FuIGJlIGFzc3VtZWQgdG8gaGF2ZSBhY2Nlc3MgdG8gdGhlIHNhbWUNCj4gPj4gaW5mb3JtYXRp b24uIFRoYXQgaXMsIHRoZSBOU0ggaXMganVzdCBhIGNvbnZlbmllbnQgd2F5IHRvIHRyYW5zZmVy DQo+ID4+IG1ldGFkYXRhIHRoZXkgY291bGQgcGFzcyBpbiBvdGhlciB3YXlzLiBXaGlsZSB0aGUg dXNlciBtYXkgbm90IGJlDQo+IGNvbnNvbGVkDQo+ID4+IGJ5IHRoZSBmYWN0IHRoYXQgdGhlIHdl YiBzZXJ2aWNlIHRyYWNraW5nIHRoZW0gYmVsb25ncyB0byB0aGUgc2FtZQ0KPiBjb21wYW55DQo+ ID4+IGFzIHRoZWlyIGFjY2VzcyBuZXR3b3JrLCB0aGUgdXNlIG9mIHRoZSBOU0ggZG9lc27igJl0 IGFkZCBhbiBpc3N1ZSB0aGF0DQo+ID4+IGNvdWxkbuKAmXQgYWxyZWFkeSBleGlzdC4gKFRoaXMg c3VnZ2VzdHMgdGhhdCB0aGUgaWRlYSBvZiBhIHNpbmdsZQ0KPiBvcGVyYXRvcg0KPiA+PiBlbnZp cm9ubWVudCBtYXkgYmUgY29uc2lkZXJhYmx5IG1vcmUgY29tcGxleCB0aGF0IHRoZSBkcmFmdCBt YWtlcyBpdA0KPiA+PiBzb3VuZCwgYnV0IEkgZG9u4oCZdCBzZWUgbXVjaCB0byBkbyBhYm91dCB0 aGF0LikNCj4gPj4NCj4gPj4gU28gSSBndWVzcyB3aGF0IEkgYW0gYXNraW5nIGZvciBpcyBzb21l IHRleHQgdGhhdCByZWNvZ25pemVzIHRoYXQgdXNlcnMNCj4gPj4gaGF2ZSBhbiBpbnRlcmVzdCBp biBtZXRhZGF0YSBtaW5pbWl6YXRpb24sIGFuZCBzb21lIHN1Z2dlc3Rpb24gdGhhdA0KPiA+PiBv cGVyYXRvcnMga2VlcCB0aGF0IGluIG1pbmQsIGFuZCBub3QgYWRkIG1ldGFkYXRhIGJleW9uZCB0 aGUgbWluaW11bQ0KPiA+PiBuZWVkZWQgdG8gbWFrZSB0aGUgU0ZQIGZ1bmN0aW9uIGNvcnJlY3Rs eS4NCj4gPj4NCj4gPj4gKFRvIGJyaW5nIGVuY3J5cHRpb24gYmFjayBpbnRvIHRoZSBwaWN0dXJl LCBvbmUgY2FuIHByb2JhYmx5IGNvbnN0cnVjdA0KPiA+PiBzaW1pbGFyIGNhc2VzIGludm9sdmlu ZyBWUE5z4oCUZm9yIGV4YW1wbGUgc2VydmljZXMgdGhhdCBhZGQgdGhlIG9yaWdpbmFsDQo+ID4+ IHNvdXJjZSBJUCBhZGRyZXNzIGFzIG1ldGFkYXRhIHRvIGEgVlBOIGZsb3cuKQ0KPiA+Pg0KPiA+ PiBUaGFua3MhDQo+ID4+DQo+ID4+IEJlbi4NCj4gPj4NCj4gPj4+IE9uIFNlcCAyNywgMjAxNywg YXQgOTo0NSBQTSwgSm9lbCBNLiBIYWxwZXJuIDxqbWhAam9lbGhhbHBlcm4uY29tPg0KPiA+PiB3 cm90ZToNCj4gPj4+DQo+ID4+PiBCZW4sIEkgYW0gIHJlYWxseSBub3QgY2xlYXIgb24gd2hhdCB0 byBkbyB3aXRoIHlvdXIgY29tbWVudCBhYm91dA0KPiA+PiBlbmNyeXB0ZWQgY29udGVudC4NCj4g Pj4+DQo+ID4+PiBOb3RoaW5nIGluIHRoaXMgd29yayBlbmFibGVzIG9yIHByb21vdGVzIG9wZXJh dG9ycyBicmVha2luZyBlbmNyeXB0aW9uDQo+ID4+IChhbiBlYXJsaWVyIHZlcnNpb24gaGFkIGEg bGluZSB0aGF0IGluY29ycmVjdGx5IHN1Z2dlc3RlZCBzdWNoLikNCj4gPj4+IFRoZSBtZXRhZGF0 YSBpcyB1c2VkIHRvIG1hcmsgd2hhdCB0aGUgb3BlcmF0b3Igd2FudHMgdG8ga25vdyBhYm91dCB0 aGUNCj4gPj4gcGFja2V0LiAgRXZlbiBmb3IgZW5jcnlwdGVkIGNvbnRlbnQsIHRoZSBvcGVyYXRv ciBtYXkgbmVlZCB0byBrbndvIHRoZQ0KPiA+PiBzc3Vic2NyaWJlciBJRC4gIEZvciBlbmNyeXB0 ZWQgY29udGVudCwgdGhlIG9wZXJhdG9yIG1pZ2h0IChvciBtaWdodA0KPiBub3QpDQo+ID4+IGNo b29zZSB0byBwdXQgbWV0YWRhdGEgaW5kaWNhdGluZyB0aGUgdGhlIGNvbnRlbnQgaXMgdW5pbnRl cnByZXRhYmxlDQo+IChpZg0KPiA+PiBoZSBkZWNpZGVzIGl0IGlzIHVuaW50ZXJwcmV0YWJsZS4p ICBDbGVhcmx5LCBoZSBjYW4gbm90IHB1dCBvbg0KPiBpbmZvbXJhdGlvbg0KPiA+PiBhYm91dCB0 aGUgZW5jcnlwdGVkIGluZm9ybWF0aW9uLCBhcyBoZSBkb2VzIG5vdCBzZWUgdGhhdC4NCj4gPj4+ IEkgY2FuIG5vdCBmaWd1cmUgb3V0IHdoZXJlIHdlIHdvdWxkIHNheSBzb21ldGhpbmcgbGlrZSB0 aGF0LCBvciB3aHkgd2UNCj4gPj4gd291bGQgc2F5IGl0Lg0KPiA+Pj4NCj4gPj4+IFlvdXJzLA0K PiA+Pj4gSm9lbA0KPiA+Pj4NCj4gPj4+IE9uIDkvMjcvMTcgMTA6MDIgUE0sIEJlbiBDYW1wYmVs bCB3cm90ZToNCj4gPj4+PiBCZW4gQ2FtcGJlbGwgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBi YWxsb3QgcG9zaXRpb24gZm9yDQo+ID4+Pj4gZHJhZnQtaWV0Zi1zZmMtbnNoLTI0OiBObyBPYmpl Y3Rpb24NCj4gPj4+PiBXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxp bmUgaW50YWN0IGFuZCByZXBseSB0byBhbGwNCj4gPj4+PiBlbWFpbCBhZGRyZXNzZXMgaW5jbHVk ZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQNCj4gdGhpcw0KPiA+ Pj4+IGludHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKQ0KPiA+Pj4+IFBsZWFzZSByZWZl ciB0byBodHRwczovL3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVudC9kaXNjdXNzLQ0KPiA+PiBj cml0ZXJpYS5odG1sDQo+ID4+Pj4gZm9yIG1vcmUgaW5mb3JtYXRpb24gYWJvdXQgSUVTRyBESVND VVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCj4gPj4+PiBUaGUgZG9jdW1lbnQsIGFsb25nIHdp dGggb3RoZXIgYmFsbG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQo+ID4+Pj4gaHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zZmMtbnNoLw0KPiA+Pj4+ IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQ0KPiAtDQo+ID4+Pj4gQ09NTUVOVDoNCj4gPj4+PiAtLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0N Cj4gLQ0KPiA+Pj4+IFN1YnN0YW50aXZlOg0KPiA+Pj4+IC0gR2VuZXJhbDogVGhpcyBpcyBhIG1l Y2hhbmlzbSB0byBhZGQgbWV0YWRhdGEgdG8gdXNlciBmbG93cy4gVGhlcmUNCj4gaXMNCj4gPj4g dmVyeQ0KPiA+Pj4+IGxpdHRsZSBkaXNjdXNzaW9uIGFib3V0IGhvdyB0aGF0IG1ldGFkYXRhIG1h eSByZWxhdGUgdG8gdGhlDQo+IGFwcGxpY2F0aW9uDQo+ID4+IGxheWVyDQo+ID4+Pj4gcGF5bG9h ZHMuIEl0J3MgbGlrZWx5IHRoYXQgc29tZSBvZiB0aG9zZSBwYXlsb2FkcyB3aWxsIGJlIGVuY3J5 cHRlZA0KPiBieQ0KPiA+PiB0aGUgdXNlcg0KPiA+Pj4+IGluIGFuIGF0dGVtcHQgdG8gY29udHJv bCB3aGF0IGluZm9ybWF0aW9uIGlzIHNoYXJlZCB3aXRoIG1pZGRsZWJveGVzLg0KPiA+PiBJJ2Qg bGlrZQ0KPiA+Pj4+IHRvIHNlZSBzb21lIGRpc2N1c3Npb24gYWJvdXQgaG93IHRoaXMgcmVsYXRl cyB0byB0aGUgZ3VpZGFuY2UgaW4gUkZDDQo+ID4+IDgxNjUuDQo+ID4+Pj4gKE5vdGU6IEkgYW0g b24gdGhlIGZlbmNlIGFib3V0IHdoZXRoZXIgdGhpcyBzaG91bGQgYmUgYSBESVNDVVNTLiBCdXQN Cj4gPj4gc2luY2UgIm9uDQo+ID4+Pj4gdGhlIGZlbmNlIiBpcyBwcm9iYWJseSBpbnN1ZmZpY2ll bnQgZ3JvdW5kcyBmb3IgYSBESVNDVVNTLCBJJ20NCj4gbGVhdmluZw0KPiA+PiBpdCBhcyBhDQo+ ID4+Pj4gY29tbWVudC4pDQo+ID4+Pj4gLSBHZW5lcmFsOiBJIHN1cHBvcnQgS2F0aGxlZW4ncyBE SVNDVVNTIHBvaW50cyBjb25jZXJuaW5nIGludGVncml0eQ0KPiA+PiBwcm90ZWN0aW9uLg0KPiA+ Pj4+IFRoZSBkb2N1bWVudCBsZWF2ZXMgdGhhdCB1cCB0byB0aGUgdHJhbnNwb3J0aW5nIHByb3Rv Y29sLiBJIHRoaW5rDQo+IGl0J3MNCj4gPj4+PiByZWFzb25hYmxlIHRvIHJlY29tbWVuZCB0aGF0 IHRoYXQgcHJvdG9jb2wgYXQgbGVhc3QgZGVmYXVsdCB0bw0KPiA+PiBwcm92aWRpbmcNCj4gPj4+ PiBpbnRlZ3JpdHkgcHJvdGVjdGlvbiB1bmxlc3MgdGhlcmUncyBhIGdvb2QgcmVhc29uIG5vdCB0 by4NCj4gPj4+PiAtMi4yLCAidmVyc2lvbiI6IEhvdyBpcyB0aGUgdmVyc2lvbiBmaWVsZCB0byBi ZSB1c2VkIGJ5IGNvbnN1bWVycz8NCj4gVGhhdA0KPiA+PiBpcywNCj4gPj4+PiB3aGF0IHNob3Vs ZCBhIHJlY2lwaWVudCBkbyBpZiB0aGUgZmllbGQgY29udGFpbnMgYSB2ZXJzaW9uIG51bWJlciBp dA0KPiA+PiBkb2Vzbid0DQo+ID4+Pj4gc3VwcG9ydC9yZWNvZ25pemU/DQo+ID4+Pj4gLTIuMiwg TUQgdHlwZSAweDA6ICJJbXBsZW1lbnRhdGlvbnMgU0hPVUxEIHNpbGVudGx5DQo+ID4+Pj4gICBk aXNjYXJkIHBhY2tldHMgd2l0aCBNRCBUeXBlIDB4MC4iDQo+ID4+Pj4gV2h5IG5vdCBNVVNUPw0K PiA+Pj4+IC0tIE1EIHR5cGUgMHhGOiAiSW1wbGVtZW50YXRpb25zIG5vdCBleHBsaWNpdGx5IGNv bmZpZ3VyZWQgdG8gYmUgcGFydA0KPiA+PiBvZg0KPiA+Pj4+ICAgYW4gZXhwZXJpbWVudCBTSE9V TEQgc2lsZW50bHkgZGlzY2FyZCBwYWNrZXRzIHdpdGggTUQgVHlwZSAweEYuIg0KPiA+Pj4+IFdo eSBub3QgTVVTVD8NCj4gPj4+PiAtMi4yLCBOZXh0IFByb3RvY29sIFZhbHVlczoNCj4gPj4+PiBX aHkgYXJlIHRoZXJlIDIgZXhwZXJpbWVudGFsIHZhbHVlcz8gKGFzIG9wcG9zZWQgdG8gMSwgb3Is IHdlbGwsIDMpLg0KPiA+Pj4+IC0yLjMsIGxhc3QgcGFyYWdyYXBoIChhbmQgc2V2ZXJhbCBvdGhl ciBwbGFjZXMpOg0KPiA+Pj4+IFRoaXMgZHJhZnQgc2VlbXMgdG8gdGFrZSBhIHBvc2l0aW9uIHRo YXQgYSBmYWlsZWQgU0ZQIG1lYW5zIHRoZQ0KPiBzZXJ2aWNlDQo+ID4+IGxldmVsDQo+ID4+Pj4g ZmxvdyBmYWlscy4gQXJlIHRoZXJlIG5vIHVzZSBjYXNlcyB3aGVyZSBkZWxpdmVyeSBvZiB0aGUg c2VydmljZSBmbG93DQo+ID4+IGlzDQo+ID4+Pj4gY3JpdGljYWwgYW5kIHNob3VsZCBoYXBwZW4g ZXZlbiBpZiB0aGUgY2hhaW4gb2YgbWlkZGxlYm94ZXMgZmFpbHM/DQo+ID4+Pj4gLTIuNCwgcGFy YWdyYXBoIHN0YXJ0aW5nIHdpdGggIkFuIFNGQy1hd2FyZSBTRiBNVVNUIHJlY2VpdmUgdGhlIGRh dGENCj4gPj4+PiBzZW1hbnRpY3MuLi4iIEknbSBub3Qgc3VyZSB3aGF0IHRoZSBpbnRlbnQgb2Yg dGhpcyBwYXJhZ3JhcGggaXMuIElzDQo+ID4+IHRoYXQgTVVTVA0KPiA+Pj4+IHJlYWxseSBhIHN0 YXRlbWVudCBvZiBmYWN0PyBPciBpcyB0aGVyZSByZWFsbHkgYW5kIGV4cGVjdGF0aW9uIG9mIGFu DQo+ID4+Pj4gb3V0LW9mLWJhbmQgZGVsaXZlcnkgb2Ygc29tZSBzZW1hbnRpYyBkZWZpbml0aW9u Pw0KPiA+Pj4+IC0zLCBsaXN0IGl0ZW0gMTogIkEgc2VydmljZSBjbGFzc2lmaWVyIE1VU1QgaW5z ZXJ0IGFuIE5TSCBhdCB0aGUNCj4gc3RhcnQNCj4gPj4gb2YgYW4NCj4gPj4+PiBTRlAuIiBXaGF0 IGlmIGFuIGluaXRpYWwgY2xhc3NpZmllciByZWNlaXZlcyBhIHBhY2tldCB0aGF0IGFscmVhZHkN Cj4gaGFzDQo+ID4+IGFuIE5TSD8NCj4gPj4+PiBDYW4gbXVsdGlwbGUgTlNIcyBiZSBzdGFja2Vk Pw0KPiA+Pj4+IC03LjEsIGxhc3QgcGFyYWdyYXBoOiAiRGVwZW5kaW5nIG9uIHRoZSBpbmZvcm1h dGlvbiBjYXJyaWVkIGluIHRoZQ0KPiA+PiBtZXRhZGF0YSwNCj4gPj4+PiBkYXRhIHByaXZhY3kN Cj4gPj4+PiAgIGNvbnNpZGVyYXRpb25zIG1heSBuZWVkIHRvIGJlIGNvbnNpZGVyZWQuICINCj4g Pj4+PiAibWF5IG5lZWQgdG8gYmUgY29uc2lkZXJlZCIgaXMgd2VhayBzYXVjZS4gRGF0YSBwcml2 YWN5IGFsd2F5cyBuZWVkcw0KPiB0bw0KPiA+PiBiZQ0KPiA+Pj4+IGNvbnNpZGVyZWQsIGV2ZW4g aWYgdGhlIF9vdXRwdXRfIG9mIHRoYXQgY29uc2lkZXJhdGlvbiBpcyB0aGF0IHRoZXJlDQo+IGlz DQo+ID4+IG5vdGhpbmcNCj4gPj4+PiBzZW5zaXRpdmUgYmVpbmcgY2FycmllZC4gUGxlYXNlIGNv bnNpZGVyIGRyb3BwaW5nIHRoZSAibWF5Ii4NCj4gPj4+PiBBbHNvLCB0aGlzIHNlZW1zIGxpa2Ug YW4gb2RkIHBsYWNlIHRvIGJ1cnkgYSBwcml2YWN5IGRpc2N1c3Npb24uDQo+IFBsZWFzZQ0KPiA+ Pj4+IGNvbnNpZGVyIG1vdmluZyB0aGlzIHRvIGEgIlByaXZhY3kgQ29uc2lkZXJhdGlvbnMiIHNl Y3Rpb24uDQo+ID4+Pj4gLTgsIGZpcnN0IHBhcmFncmFwaDoNCj4gPj4+PiBJdCBzZWVtcyBsaWtl IGluc2lkZXIgYXR0YWNrcyBhcmUgd29ydGggYXQgbGVhc3QgYSBtZW50aW9uIHdoZW4NCj4gPj4g ZGlzY3Vzc2luZyBhDQo+ID4+Pj4gc2luZ2xlIG9wZXJhdG9yIGVudmlyb25tZW50IGFzIGEgbWl0 aWdhdG9yIGFnYWluc3QgYXR0YWNrcy4NCj4gPj4+PiAtOC4xLCAybmQgcGFyYWdyYXBoOg0KPiA+ Pj4+IFRoaXMgZG9lc24ndCBzZWVtIGxpa2UgYSBzaW5nbGUgb3BlcmF0b3Igc2NlbmFyaW8sIGlu IHRoZSBzZW5zZSB0aGF0DQo+ID4+IHBhcnQgb2YNCj4gPj4+PiB0aGUgZmxvdyBjcm9zc2VzIGEg bmV0d29yayB0aGF0IGlzIG5vdCBjb250cm9sbGVkIGJ5IHRoYXQgb3BlcmF0b3IuDQo+ID4+Pj4g LTguMywgNHRoIHBhcmFncmFwaDogUGxlYXNlIGVsYWJvcmF0ZSBvbiB3aGF0IGlzIG1lYW50IGJ5 DQo+ICJvYmZ1c2NhdGluZyINCj4gPj4+PiBzdWJzY3JpYmVyIGlkZW50aWZ5aW5nIGluZm9ybWF0 aW9uIChhcyBvcHBvc2VkIHRvICJlbmNyeXB0aW5nIiBvcg0KPiA+PiAibGVhdmluZyBpdA0KPiA+ Pj4+IG91dCBpbiB0aGUgZmlyc3QgcGxhY2UiLikNCj4gPj4+PiBFZGl0b3JpYWw6DQo+ID4+Pj4g LTIuMiwgIk8gYml0IiwgbGFzdCBwYXJhZ3JhcGg6ICJUaGUgY29uZmlndXJhYmxlIHBhcmFtZXRl ciBNVVNUIGJlDQo+ID4+Pj4gICBkaXNhYmxlZCBieSBkZWZhdWx0LiINCj4gPj4+PiBEb2VzICJk aXNhYmxlZCIgbWVhbiAidW5zZXQiICAob3IgInNldCB0byB6ZXJvIik/DQo+ID4+Pj4gLTIuMiwg InVuYXNzaWduZWQgYml0cyI6ICJBdCByZWNlcHRpb24sIGFsbA0KPiA+Pj4+ICAgZWxlbWVudHMg TVVTVCBOT1QgbW9kaWZ5IHRoZWlyIGFjdGlvbnMgYmFzZWQgb24gdGhlc2UgdW5rbm93bg0KPiBi aXRzLiINCj4gPj4+PiBJc24ndCB0aGF0IE1VU1QgTk9UIGp1c3QgYSByZXN0YXRlbWVudCBvZiB0 aGUgIk1VU1QgaWdub3JlIiBmcm9tIHRoZQ0KPiA+PiBwcmV2aW91cw0KPiA+Pj4+IHNlbnRlbmNl PyBUaGVyZSdzIG5vIHByb2JsZW0gd2l0aCByZWluZm9yY2luZyBhIHBvaW50LCBidXQgdGhlcmUN Cj4gPj4gc2hvdWxkbid0IGJlDQo+ID4+Pj4gbXVsdGlwbGUgaW5zdGFuY2VzIG9mIHRoZSBzYW1l IDIxMTkgcmVxdWlyZW1lbnQuIEFsc28sIHdvdWxkIGxvZ2dpbmcNCj4gYQ0KPiA+PiB3YXJuaW5n DQo+ID4+Pj4gdmlvbGF0ZSB0aGUgIk1VU1QgTk9UIG1vZGlmeSB0aGVpciBhY3Rpb25zL01VU1Qg aWdub3JlIiByZXF1aXJlbWVudD8NCj4gPj4+PiAtOCwgZmlyc3QgcGFyYWdyYXBoOiAiTlNIIGlz IGRlc2lnbmVkIGZvciB1c2Ugd2l0aGluIG9wZXJhdG9yDQo+ID4+IGVudmlyb25tZW50cy4iDQo+ ID4+Pj4gSXMgdGhlcmUgYSBtaXNzaW5nICJzaW5nbGUiIGJlZm9yZSAib3BlcmF0b3IiPw0KPiA+ DQoNCg== From nobody Tue Oct 3 08:10:59 2017 Return-Path: X-Original-To: sfc@ietf.org Delivered-To: sfc@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 035CE134D7D; Tue, 3 Oct 2017 08:10:53 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Suresh Krishnan To: "The IESG" Cc: draft-ietf-sfc-nsh@ietf.org, "Joel M. Halpern" , sfc-chairs@ietf.org, jmh@joelhalpern.com, sfc@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.63.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150704345300.30637.18383332522475221570.idtracker@ietfa.amsl.com> Date: Tue, 03 Oct 2017 08:10:53 -0700 Archived-At: Subject: [sfc] Suresh Krishnan's No Objection on draft-ietf-sfc-nsh-25: (with COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Oct 2017 15:10:53 -0000 Suresh Krishnan has entered the following ballot position for draft-ietf-sfc-nsh-25: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks for quickly addressing my DISCUSS and COMMENT points. From nobody Tue Oct 3 09:34:08 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BD7B134F4E; Tue, 3 Oct 2017 09:34:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.52 X-Spam-Level: X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pXLYqpOzFzuW; Tue, 3 Oct 2017 09:33:58 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0A0E9134F25; Tue, 3 Oct 2017 09:33:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10700; q=dns/txt; s=iport; t=1507048438; x=1508258038; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=QPiLI4hILHp+N0kHb9wjhmtmnUGrNRjFu8hDMs+UURM=; b=BkfVnu44yji/Q4PYjJI0FMTyxYC1yc1QSHz0ImH2wY5nr1fGQPI5WtO1 igCvZDGDZeQPd8KnPUvb0vhUDa6dFzi6g1r5VrfmLzUVHaM7qqbJqzp/o 408xtK7iRt45fGeIW92UN2m+D1iGtdlHouY49GJL3ofgmrPQk+24XluWO g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AQAgBlu9NZ/5BdJa1eGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgzAtZG4nB4NymgKBdpg+CiOFGAIahDRXAQIBAQEBAQJrKIUYAQE?= =?us-ascii?q?BAQIBIwQNMxIFCwIBCBgCAiYCAgIwFRACBA4FiigIEKNzEYEjgW06iy4BAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEYBYEOgh+CAoFRgWorgn2IFy+CMgWKC4kehS+IWgK?= =?us-ascii?q?HXI0HghSFb4sGlScCERkBgTgBV4EOeBVbAYcKdgGIcoEQAQEB?= X-IronPort-AV: E=Sophos;i="5.42,474,1500940800"; d="scan'208";a="11553160" Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 03 Oct 2017 16:33:57 +0000 Received: from XCH-RTP-020.cisco.com (xch-rtp-020.cisco.com [64.101.220.160]) by rcdn-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v93GXudQ021547 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 3 Oct 2017 16:33:57 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-020.cisco.com (64.101.220.160) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Tue, 3 Oct 2017 12:33:55 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Tue, 3 Oct 2017 12:33:55 -0400 From: "Carlos Pignataro (cpignata)" To: Ben Campbell CC: The IESG , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , "sfc@ietf.org" Thread-Topic: Ben Campbell's No Objection on draft-ietf-sfc-nsh-24: (with COMMENT) Thread-Index: AQHTN/3co01n5FQz90uzvGjW5FYgxaLKkHmAgAIPNQCABf4ugA== Date: Tue, 3 Oct 2017 16:33:55 +0000 Message-ID: <7E591A3D-11F7-4CAA-A998-0E6EEB9DC2C9@cisco.com> References: <150656415366.13695.13637551894724173929.idtracker@ietfa.amsl.com> <41E4256A-C77E-4693-AB3C-798ADE7346EC@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.150.7.46] Content-Type: text/plain; charset="utf-8" Content-ID: <2F35C22B2FACA34983A82C48C3BFFDF6@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] Ben Campbell's No Objection on draft-ietf-sfc-nsh-24: (with COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Oct 2017 16:34:00 -0000 QmVuLA0KDQpUaGFua3MgZm9yIHRoZSBmb2xsb3ctdXAg4oCUIHBsZWFzZSBmaW5kIGFkZGl0aW9u YWwgY29tbWVudHMgYW5kIHJlc3BvbnNlcywgaW5saW5lLiBUd28gb2YgeW91ciBjb21tZW50cyBy ZXN1bHRlZCBpbiB0ZXh0IGNoYW5nZXMuDQoNCj4gT24gU2VwIDI5LCAyMDE3LCBhdCA1OjAyIFBN LCBCZW4gQ2FtcGJlbGwgPGJlbkBub3N0cnVtLmNvbT4gd3JvdGU6DQo+IA0KPiBUaGFua3MgZm9y IHRoZSByZXNwb25zZS4gQ29tbWVudHMgaW5saW5lLCB3aXRoIHNlY3Rpb25zIHRoYXQgZG8gbm90 IHNlZW0gdG8gbmVlZCBmdXJ0aGVyIGRpc2N1c3Npb24gZGVsZXRlZC4NCj4gDQo+IEJlbi4NCj4g DQo+PiBPbiBTZXAgMjgsIDIwMTcsIGF0IDg6MzUgQU0sIENhcmxvcyBQaWduYXRhcm8gKGNwaWdu YXRhKSA8Y3BpZ25hdGFAY2lzY28uY29tPiB3cm90ZToNCj4+PiANCj4gDQo+IFvigKZdDQo+PiAN Cj4+PiANCj4+PiAtMi4yLCBNRCB0eXBlIDB4MDogIkltcGxlbWVudGF0aW9ucyBTSE9VTEQgc2ls ZW50bHkNCj4+PiBkaXNjYXJkIHBhY2tldHMgd2l0aCBNRCBUeXBlIDB4MC4iDQo+Pj4gV2h5IG5v dCBNVVNUPw0KPj4gDQo+PiBCZWNhdXNlIHdlIGRvIG5vdCB3YW50IGEgaGFtbWVyIGxhcmdlciB0 aGFuIG5lZWRlZC4gU0hPVUxEIGFjaGlldmVzIG91ciBnb2FsIHdpdGhvdXQgbG9ja2luZyB0aGUg ZG9vciBmb3IgZ29vZCwgc2hvdWxkIHZhbGlkIHJlYXNvbnMgYmUgZm91bmQuDQo+PiANCj4gDQo+ IERvIHlvdSBlbnZpc2lvbiBzaXR1YXRpb25zIHdoZXJlIGl0IG1pZ2h0IG1ha2Ugc2Vuc2UgdG8g X25vdF8gZHJvcCBzdWNoIHBhY2tldHM/IElmIHNvLCBpdCB3b3VsZCBiZSBoZWxwZnVsIHRvIG1l bnRpb24gdGhhdCBpbiB0aGUgdGV4dC4NCj4gDQoNCkkgZG8gbm90LiBBbHRob3VnaCBJL3dlIGRv IG5vdCBlbnZpc2lvbiB0aGVtIG5vdywgc29tZW9uZSBtaWdodCBpbiB0aGUgZnV0dXJlIChkcm9w IGxvdWRseSwgZmluZCBzaXR1YXRpb25zIHRvIHF1YXJhbnRpbmUgdGhlbSwgdHVubmVsIHRoZW0g dG8gYSBzaW5rIGZvciBzb21ldGhpbmcgbm90IHNpbGVudGx5IGRyb3AsIGV0YykNCg0KPiANCj4+ PiANCj4+PiAtLSBNRCB0eXBlIDB4RjogIkltcGxlbWVudGF0aW9ucyBub3QgZXhwbGljaXRseSBj b25maWd1cmVkIHRvIGJlIHBhcnQgb2YNCj4+PiBhbiBleHBlcmltZW50IFNIT1VMRCBzaWxlbnRs eSBkaXNjYXJkIHBhY2tldHMgd2l0aCBNRCBUeXBlIDB4Ri4iDQo+Pj4gV2h5IG5vdCBNVVNUPw0K Pj4gDQo+PiBEaXR0by4NCj4gDQo+IEFsc28gZGl0dG8gOi0pDQoNCklkZW0uIDotKQ0KDQo+IA0K Pj4gDQo+Pj4gDQo+Pj4gLTIuMiwgTmV4dCBQcm90b2NvbCBWYWx1ZXM6DQo+Pj4gV2h5IGFyZSB0 aGVyZSAyIGV4cGVyaW1lbnRhbCB2YWx1ZXM/IChhcyBvcHBvc2VkIHRvIDEsIG9yLCB3ZWxsLCAz KS4NCj4+IA0KPj4gTm8gcGFydGljdWxhciByZWFzb24uIE9uZSBzZWVtcyBub3QgZW5vdWdoIHBv dGVudGlhbGx5IGZvciBjcmVhdGl2ZSBleHBlcmltZW50YXRpb24uDQo+PiANCj4+IE15IGZhdm9y aXRlIG51bWJlciBpcyAyNywgYnV0IHdlIGZlbHQgdGhhdCB3YXMgdG9vIG1hbnkgOi0pDQo+IA0K PiBPa2F5IDotKQ0KPiANCg0KR2l2ZW4gdGhlIGZpZWxkIGlzIGFuIG9jdGV0LCB3ZSBmZWx0IDIg d2FzIGVub3VnaCBidXQgbm90IHRvbyBtYW55LiAxIHNlZW1lZCB0b28gc21hbGwgb2YgYSBudW1i ZXIuIFRoaXMgYWxzbyBjb2luY2lkZXMgd2l0aCBob3cgRXhwZXJpbWVudGFsIHZhbHVlcyBhcmUg cmVzZXJ2ZWQgZm9yIG90aGVyIG9jdGV0IHZhbHVlcy4gRm9yIGV4YW1wbGUsIFJGQyA0NzI3LCBT ZWN0aW9ucyAyLjMgYW5kIDMuMywgYW5kIFJGQyAzNjkyIDxodHRwczovL3Rvb2xzLmlldGYub3Jn L2h0bWwvcmZjMzY5MiNzZWN0aW9uLTIuMT4NCg0KSXMgdGhlcmUgYSBwYXJ0aWN1bGFyIHJlYXNv biB3aHkgeW91IGFzaz8NCg0KPiANCj4+IA0KPj4+IA0KPj4+IC0yLjMsIGxhc3QgcGFyYWdyYXBo IChhbmQgc2V2ZXJhbCBvdGhlciBwbGFjZXMpOg0KPj4+IFRoaXMgZHJhZnQgc2VlbXMgdG8gdGFr ZSBhIHBvc2l0aW9uIHRoYXQgYSBmYWlsZWQgU0ZQIG1lYW5zIHRoZSBzZXJ2aWNlIGxldmVsDQo+ Pj4gZmxvdyBmYWlscy4gQXJlIHRoZXJlIG5vIHVzZSBjYXNlcyB3aGVyZSBkZWxpdmVyeSBvZiB0 aGUgc2VydmljZSBmbG93IGlzDQo+Pj4gY3JpdGljYWwgYW5kIHNob3VsZCBoYXBwZW4gZXZlbiBp ZiB0aGUgY2hhaW4gb2YgbWlkZGxlYm94ZXMgZmFpbHM/DQo+PiANCj4+IFRoZSBpc3N1ZSBpcyB0 aGF0IHdpdGggU0k9MCB0aGVyZSBpcyBubyBuZXh0IFNGIHRvIGRlbGl2ZXIuDQo+IA0KPiBNYXli ZSB0aGVyZeKAmXMgbm8gbmV4dCBTRiwgYnV0IG9uZSBhc3N1bWVzIHRoZSBlbmNhcHN1bGF0ZWQg cGFja2V0IGlzIGFkZHJlc3NlZCB0byBhbiBlbmQtc3lzdGVtIG9mIHNvbWUgc29ydCwgd2hpY2gg bWF5IG9yIG1heSBub3QgYmUgcGFydCBvZiB0aGUgU0ZQPyBBcmUgdGhlcmUgbmV2ZXIgc2l0dWF0 aW9ucyB3aGVyZSBpdCB3b3VsZCBtYWtlIHNlbnNlIHRvIGdpdmUgdXAgb24gdGhlIFNGUCBidXQg c3RpbGwgcm91dGUgdGhlIGNvbnRlbnQgdG8gaXRzIGRlc3RpbmF0aW9uPw0KPiANCg0KSSBjYW5u b3QgdGhpbmsgb2YgYW55LiBTZWVtcyBsaWtlIGEgcmlzayBvZiBsZWFrYWdlLg0KDQo+PiANCj4+ PiANCj4+PiAtMi40LCBwYXJhZ3JhcGggc3RhcnRpbmcgd2l0aCAiQW4gU0ZDLWF3YXJlIFNGIE1V U1QgcmVjZWl2ZSB0aGUgZGF0YQ0KPj4+IHNlbWFudGljcy4uLiIgSSdtIG5vdCBzdXJlIHdoYXQg dGhlIGludGVudCBvZiB0aGlzIHBhcmFncmFwaCBpcy4gSXMgdGhhdCBNVVNUDQo+Pj4gcmVhbGx5 IGEgc3RhdGVtZW50IG9mIGZhY3Q/IE9yIGlzIHRoZXJlIHJlYWxseSBhbmQgZXhwZWN0YXRpb24g b2YgYW4NCj4+PiBvdXQtb2YtYmFuZCBkZWxpdmVyeSBvZiBzb21lIHNlbWFudGljIGRlZmluaXRp b24/DQo+Pj4gDQo+PiANCj4+IFRoZXJlIGlzIHRoZSBleHBlY3RhdGlvbiBvZiBjb250cm9sIHBs YW5lIGRvd25sb2FkIG9mIGl0IHVwb24gU0ZQIHByb2dyYW1taW5nLg0KPiANCj4gSSBndWVzcyBt eSBxdWVzdGlvbiBpcywgYXJlIHlvdSBzdGF0aW5nIGEgbm9ybWF0aXZlIHJlcXVpcmVtZW50LCBv ciBqdXN0IGFja25vd2xlZGdpbmcgdGhlIGZhY3QgdGhhdCB0aGUgcmVjZWl2aW5nIFNGIG11c3Qg a25vdyB0aGUgc2VtYW50aWNzIHRvIGRvIGFueXRoaW5nIHVzZWZ1bCB3aXRoIHRoZSBOU0g/DQo+ IA0KDQpBaCwgSSBzZWUuIEFja25vd2xlZGdpbmcgdGhlIGZhY3QsIGV4cGxhaW5pbmcuIA0KDQpX aWxsIHMvTVVTVCByZWNlaXZlL25lZWRzIHRvIHJlY2VpdmUvLg0KDQpUaGUgc2VudGVuY2UgdGhh dCBmb2xsb3dzIGlzIGFjdHVhbGx5IGEgcmVxdWlyZW1lbnQ6DQoNCiAgIEFuIFNGIG9yIFNGQyBQ cm94eSB0aGF0IGRvZXMgbm90IGtub3cgdGhlIGZvcm1hdCBvciBzZW1hbnRpY3Mgb2YgdGhlDQog ICBDb250ZXh0IEhlYWRlciBmb3IgYW4gTlNIIHdpdGggTUQgVHlwZSAxIE1VU1QgZGlzY2FyZCBh bnkgcGFja2V0IHdpdGgNCiAgIHN1Y2ggYW4gTlNIDQoNCkFuZCBqdXN0IGZvciBjb21wbGV0ZW5l c3MsIHRoaXMgaXMgd2hlcmUgdGhlIGRvY3VtZW50IHN0YXRlcyBjb250cm9sIHBsYW5lIGlzIG91 dCBvZiBzY29wZS4NCg0KUzEuMjoNCg0KICAgQW4gTlNILWF3YXJlIGNvbnRyb2wgcGxhbmUgaXMg b3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC4NCg0KUzEuNToNCg0KICBUaGUgc2Vt YW50aWNzIG9mDQogICAgICAgdGhlIHNoYXJlZCBtZXRhZGF0YSBpcyBjb21tdW5pY2F0ZWQgdmlh IGEgY29udHJvbCBwbGFuZSwgd2hpY2ggaXMNCiAgICAgICBvdXRzaWRlIHRoZSBzY29wZSBvZiB0 aGlzIGRvY3VtZW50LCB0byBwYXJ0aWNpcGF0aW5nIG5vZGVzLg0KDQpBbmQgbmV3bHkgYWRkZWQs IFM2LjE6DQoNCiAgIFRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gVGFibGVzIDEtNCBtYXkg YmUgcmVjZWl2ZWQgZnJvbSB0aGUNCiAgIGNvbnRyb2wgcGxhbmUsIGJ1dCB0aGUgZXhhY3QgbWVj aGFuaXNtIGlzIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMNCiAgIGRvY3VtZW50Lg0KDQo+IFvi gKZdDQo+IA0KPj4+IC03LjEsIGxhc3QgcGFyYWdyYXBoOiAiRGVwZW5kaW5nIG9uIHRoZSBpbmZv cm1hdGlvbiBjYXJyaWVkIGluIHRoZSBtZXRhZGF0YSwNCj4+PiBkYXRhIHByaXZhY3kNCj4+PiBj b25zaWRlcmF0aW9ucyBtYXkgbmVlZCB0byBiZSBjb25zaWRlcmVkLiAiDQo+Pj4gIm1heSBuZWVk IHRvIGJlIGNvbnNpZGVyZWQiIGlzIHdlYWsgc2F1Y2UuIERhdGEgcHJpdmFjeSBhbHdheXMgbmVl ZHMgdG8gYmUNCj4+PiBjb25zaWRlcmVkLCBldmVuIGlmIHRoZSBfb3V0cHV0XyBvZiB0aGF0IGNv bnNpZGVyYXRpb24gaXMgdGhhdCB0aGVyZSBpcyBub3RoaW5nDQo+Pj4gc2Vuc2l0aXZlIGJlaW5n IGNhcnJpZWQuIFBsZWFzZSBjb25zaWRlciBkcm9wcGluZyB0aGUgIm1heeKAnS4NCj4+IA0KPj4g V2UgY291bGQgZHJvcCBpdC4gSG93ZXZlciwgdGhlcmUgYXJlIHZlcnkgdmFsaWQgY2FzZXMgb2Yg U0ZDIHdpdGggTk8gbWV0YWRhdGEsIGFuZCB0aGVuIHRoZSBjb25zaWRlcmF0aW9uIGlzIE5VTEwu IFRoYXTigJlzIHRoZSByZWFzb24sIG5vIE1ELCBubyBjb25zaWRlcmF0aW9uLg0KPiANCj4gRnJv bSB0aGUgZmlyc3Qgc2VudGVuY2UsIGl0IGRvZXNu4oCZdCBzZWVtIGxpa2UgdGhpcyB0ZXh0IGlz IHRhbGtpbmcgYWJvdXQgYSBudWxsIG1ldGFkYXRhIGNhc2UuIEJ1dCBJIHRoaW5rIHBlcmhhcHMg d2UgYXJlIGNvbmZsYXRpbmcgdGhlIGlkZWFzIOKAnHByaXZhY3kgY29uc2lkZXJhdGlvbuKAnSBh bmQg4oCccHJpdmFjeSBpbXBhY3TigJ0uIEEg4oCcY29uc2lkZXJhdGlvbuKAnSBpcyBzb21ldGhp bmcgdGhhdCBpbXBsZW1lbnRvcnMvb3BlcmF0b3JzIG5lZWRzIHRvIHRoaW5rIGFib3V0LiBUaGUg cmVzdWx0cyBvZiBzdWNoIHRob3VnaHQgbWlnaHQgYmUgdGhhdCB0aGUgc3BlY2lmaWMgbWV0YWRh dGEgaGFzIG5vIGltcGFjdCBvbiBwcml2YWN5Lg0KPiANCg0KR29vZCBwb2ludC4g4oCcZGF0YSBw cml2YWN5IGNvbnNpZGVyYXRpb25z4oCdIC0+IOKAnGRhdGEgcHJpdmFjeSBpbXBhY3TigJ0uIEFu ZCB3ZSBjYW4gZHJvcCB0aGUg4oCcbWF54oCdIGFzIHdlbGwuIEdvb2QgdG8gc3RyZW5ndGhlbiBv cGVyYXRvcnMgYW5kIGltcGxlbWVudG9ycyB0byBjb25zaWRlciBpdC4gDQoNCj4gW+KApl0NCj4g DQo+PiANCj4+PiAtOC4xLCAybmQgcGFyYWdyYXBoOg0KPj4+IFRoaXMgZG9lc24ndCBzZWVtIGxp a2UgYSBzaW5nbGUgb3BlcmF0b3Igc2NlbmFyaW8sIGluIHRoZSBzZW5zZSB0aGF0IHBhcnQgb2YN Cj4+PiB0aGUgZmxvdyBjcm9zc2VzIGEgbmV0d29yayB0aGF0IGlzIG5vdCBjb250cm9sbGVkIGJ5 IHRoYXQgb3BlcmF0b3IuDQo+Pj4gDQo+PiANCj4+IFdoeSBub3Q/IEl0IGlzIHZlcnkgY29tbW9u IHRvIGNvbm5lY3QgdHdvIHBhcnRzIG9mIGFuIG9wZXJhdGlvbiB3aXRoIHR1bm5lbHMgb2YgdmFy aW91cyBraW5kcy4NCj4gDQo+IFllcywgYnV0IHRob3NlIHR1bm5lbHMgY3Jvc3Mgb3V0c2lkZSBv ZiB0aGUgYWRtaW5pc3RyYXRpdmUgZG9tYWluLiBJIHJlY29nbml6ZSB0aGF0IGl0IGlzIGNvbW1v biB0byBkbyB0aGF0LiBNYXliZSBpdCBpcyB3b3J0aCBtZW50aW9uaW5nIHRoYXQgY3Jvc3Npbmcg YSB0aGlyZCBwYXJ0eSBuZXR3b3JrIF93aXRob3V0XyBzdWNoIGVuY2Fwc3VsYXRpb24gaXMgb3V0 IG9mIHNjb3BlPw0KPiANCg0KT0ssIHdpbGwgY29uc2lkZXIgdGhpcyBhcyBwYXJ0IG9mIGxvb2tp bmcgbW9yZSBob2xpc3RpY2FsbHkgYXQgU2VjdGlvbiA4Lg0KDQo+IFvigKZdDQo+IA0KPj4gDQo+ Pj4gDQo+Pj4gRWRpdG9yaWFsOg0KPj4+IA0KPj4+IC0yLjIsICJPIGJpdCIsIGxhc3QgcGFyYWdy YXBoOiAiVGhlIGNvbmZpZ3VyYWJsZSBwYXJhbWV0ZXIgTVVTVCBiZQ0KPj4+IGRpc2FibGVkIGJ5 IGRlZmF1bHQuIg0KPj4+IERvZXMgImRpc2FibGVkIiBtZWFuICJ1bnNldCIgIChvciAic2V0IHRv IHplcm/igJ0pPw0KPj4gDQo+PiBOby4gSXQgbWVhbnMgZGlzYWJsZWQuDQo+IA0KPiBJIGRvbuKA mXQgdW5kZXJzdGFuZCBob3cgeW91IGRpc2FibGUgYSBiaXQuIFRoZSBiaXQgaXMgc3RpbGwgdGhl cmUgYW5kIHJlYWRhYmxlIGVpdGhlciB3YXksIHJpZ2h0Pw0KPiANCg0KVGhlIGJpdCBpcyBzdGls bCB0aGVyZSwgcmVhZGFibGUsIGFuZCBpdCBjYW4gc3RpbGwgdGFrZSBlaXRoZXIgb2YgdHdvIHZh bHVlczogMCwgYW5kIDEsIGFzIGluIFNlY3Rpb24gMiBvZiBSRkMgMzUxNCA6LSkNCg0KQnV0LCB0 aGUgc2VudGVuY2UgeW91IGNvcGllZCBkb2VzIG5vdCBoYXZlIGFueSBtZW50aW9uIG9mIOKAnGRp c2FibGluZyBhIGJpdOKAnS4gSXQgaXMgdGFsa2luZyBhYm91dCDigJxkaXNhYmxpbmcgYSBjb25m aWd1cmF0aW9uIHBhcmFtZXRlcuKAnS4NCg0KVGhlIHNhbWUgcGFyYWdyYXBoLCBlYXJsaWVyLCBz YXlzIOKAnGEgY29uZmlndXJhYmxlIHBhcmFtZXRlciB0byBlbmFibGUgZm9yd2FyZGluZ+KAnS4g VGhhdCBwYXJhbWV0ZXIgTVVTVCBiZSBkaXNhYmxlZCBieSBkZWZhdWx0Lg0KDQo+PiANCj4+PiAN Cj4+PiAtMi4yLCAidW5hc3NpZ25lZCBiaXRzIjogIkF0IHJlY2VwdGlvbiwgYWxsDQo+Pj4gZWxl bWVudHMgTVVTVCBOT1QgbW9kaWZ5IHRoZWlyIGFjdGlvbnMgYmFzZWQgb24gdGhlc2UgdW5rbm93 biBiaXRzLiINCj4+PiBJc24ndCB0aGF0IE1VU1QgTk9UIGp1c3QgYSByZXN0YXRlbWVudCBvZiB0 aGUgIk1VU1QgaWdub3JlIiBmcm9tIHRoZSBwcmV2aW91cw0KPj4+IHNlbnRlbmNlPyBUaGVyZSdz IG5vIHByb2JsZW0gd2l0aCByZWluZm9yY2luZyBhIHBvaW50LCBidXQgdGhlcmUgc2hvdWxkbid0 IGJlDQo+Pj4gbXVsdGlwbGUgaW5zdGFuY2VzIG9mIHRoZSBzYW1lIDIxMTkgcmVxdWlyZW1lbnQu IEFsc28sIHdvdWxkIGxvZ2dpbmcgYSB3YXJuaW5nDQo+Pj4gdmlvbGF0ZSB0aGUgIk1VU1QgTk9U IG1vZGlmeSB0aGVpciBhY3Rpb25zL01VU1QgaWdub3JlIiByZXF1aXJlbWVudD8NCj4+IA0KPj4g SXQgaXMgc2xpZ2h0bHkgZGlmZmVyZW50Lg0KPiANCj4gSG93IGlzIGl0IGRpZmZlcmVudD8NCg0K VGhlIGZvcm1lciBzYXlzIOKAnGRvIG5vdCBjaGFuZ2UgdGhlIGJpdHMsIGlnbm9yZSB0aGVt4oCd LiBUaGUgbGF0dGVyIHNheXMg4oCcZG8gbm90IGNoYW5nZSB5b3VyIGFjdGlvbnMgYmFzZWQgb24g dGhlIHZhbHVlIG9mIHRob3NlIGJpdHMsIGlnbm9yZSB0aGVtLiBUaGUgaWdub3JlIHRoZW0gcGFy dCBpcyBjb21tb24sIGJ1dCB0aGV5IGFyZSBkaWZmZXJlbnQgYmVjYXVzZSBvbmUgcmVmZXJzIHRv IHRoZSBwYWNrZXQgYW5kIHRoZSBvdGhlciB0byB0aGUgYWN0aW9ucy4NCg0KPiANCj4gQW55IGNv bW1lbnQgb24gd2hldGhlciBsb2dnaW5nIHZpb2xhdGUgdGhlICJNVVNUIE5PVCBtb2RpZnkgYWN0 aW9ucyIgcmVxdWlyZW1lbnQ/Pw0KPiANCg0KU29ycnkgSSB0aG91Z2h0IEkgaGFkIGNvbW1lbnRl ZCBvbiB0aGF0Lg0KDQpMb2dnaW5nIHdvdWxkIG5vdCB2aW9sYXRlIHRoYXQgcmVxdWlyZW1lbnQg YmVjYXVzZSB0aGVyZSBpcyBubyBsb2dnaW5nIHRoYXQgaXMgYmFzZWQgb24gdGhlIHZhbHVlcyBv ZiB0aG9zZSBiaXRzLiBCYXNpY2FsbHksIGxvZ2dpbmcgZG9lcyBub3QgY2hhbmdlIHRoZSBiaXRz LCBhbmQgYW4gU0ZQIGVsZW1lbnQgZG9lcyBub3QgZGVjaWRlIHRvIGxvZyBvciBub3QgYmFzZWQg b24gdGhlIHZhbHVlIG9mIHRob3NlIGJpdHMuDQoNCg0KPiBb4oCmXQ0KDQpUaGFua3MhDQoNCuKA lCBDYXJsb3Mu From nobody Thu Oct 5 05:29:39 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B72DF124239 for ; Thu, 5 Oct 2017 05:29:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); domainkeys=pass (1024-bit key) header.from=ietf@kuehlewind.net header.d=kuehlewind.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id us4yf61BzczY for ; Thu, 5 Oct 2017 05:29:36 -0700 (PDT) Received: from kuehlewind.net (kuehlewind.net [83.169.45.111]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC0E3127005 for ; Thu, 5 Oct 2017 05:29:35 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=kuehlewind.net; b=kgzbV1/iLlfyAILMZRqXzVn3C6OItf73RCtApLocNhC8HIi09tB2oaijYr+dbPr2kVtiOWicYrYjGB4Z7Ud0KClaIWrLYiNwOj+dSftf/H3NA18H/9W27jMKCrZf361HatAnGyh6omFPccmymf2ZA/FcFzVIlhBOUPUsrVt891A=; h=Received:Received:Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:X-Mailer:X-PPP-Message-ID:X-PPP-Vhost; Received: (qmail 18405 invoked from network); 5 Oct 2017 14:29:34 +0200 Received: from pd9e119f3.dip0.t-ipconnect.de (HELO ?192.168.178.33?) (217.225.25.243) by kuehlewind.net with ESMTPSA (DHE-RSA-AES256-SHA encrypted, authenticated); 5 Oct 2017 14:29:34 +0200 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: "Mirja Kuehlewind (IETF)" In-Reply-To: <2BA88A4C-8083-44DC-82A6-7AB8DB616EB6@cisco.com> Date: Thu, 5 Oct 2017 14:29:32 +0200 Cc: "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <966599BB-D65B-4794-AD44-80CBD5092FEA@kuehlewind.net> References: <150653176579.25051.17983729650964908105.idtracker@ietfa.amsl.com> <2BA88A4C-8083-44DC-82A6-7AB8DB616EB6@cisco.com> To: "Carlos Pignataro (cpignata)" X-Mailer: Apple Mail (2.3273) X-PPP-Message-ID: <20171005122934.18396.67040@lvps83-169-45-111.dedicated.hosteurope.de> X-PPP-Vhost: kuehlewind.net Archived-At: Subject: Re: [sfc] =?utf-8?q?Mirja_K=C3=BChlewind=27s_Discuss_on_draft-ietf-s?= =?utf-8?q?fc-nsh-24=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Oct 2017 12:29:38 -0000 Hi Carlos, thanks for you reply. Please see inline. > Am 27.09.2017 um 21:13 schrieb Carlos Pignataro (cpignata) = : >=20 > Thank you, Mirja, for these questions and details. >=20 > Please find follow-ups inline. >=20 >> On Sep 27, 2017, at 1:02 PM, Mirja K=C3=BChlewind = wrote: >>=20 >> Mirja K=C3=BChlewind has entered the following ballot position for >> draft-ietf-sfc-nsh-24: Discuss >>=20 >> When responding, please keep the subject line intact and reply to all >> email addresses included in the To and CC lines. (Feel free to cut = this >> introductory paragraph, however.) >>=20 >>=20 >> Please refer to = https://www.ietf.org/iesg/statement/discuss-criteria.html >> for more information about IESG DISCUSS and COMMENT positions. >>=20 >>=20 >> The document, along with other ballot positions, can be found here: >> https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/ >>=20 >>=20 >>=20 >> = ---------------------------------------------------------------------- >> DISCUSS: >> = ---------------------------------------------------------------------- >>=20 >> I have a couple of comments on the design. I know, as always in IESG = review >> state, it's probably too late to make any changes to the actual = header format, >> therefore most of my comments are actually in the comment section = below. I >> still decided to note them so at least people can consider these = points. >> However, there are a few things that I need clarification for before >> publication, which I note in this section: >>=20 >> 1) Sec 2.2 >> "SF/SFF/SFC Proxy/Classifier implementations that do not support SFC >> OAM procedures SHOULD discard packets with O bit set, but MAY support >> a configurable parameter to enable forwarding received SFC OAM >> packets unmodified to the next element in the chain. Forwarding OAM >> packets unmodified by SFC elements that do not support SFC OAM >> procedures may be acceptable for a subset of OAM functions, but can >> result in unexpected outcomes for others; thus, it is recommended to >> analyze the impact of forwarding an OAM packet for all OAM functions >> prior to enabling this behavior. The configurable parameter MUST be >> disabled by default." >> This part is really unclear to me and I believe needs to be further = specified. >> Where should this configurable parameter be? In the Context header? = Why don't >> you just use one of the unassigned bit to indicate if an unknown = (OAM) packet >> should be forwarded or not? >=20 > The configurable parameter refers to a configuration state and device = operational state variable, and not a data plane packet field. >=20 > In other words, the default is drop. But if the setting `configure sff = forward oam` then it is forwarded. >=20 > I will say that this was a strong contentious point in the WG process = to keep this configuration option (although my personal preference was = not to have it, the WG was loud on it.) >=20 >> Moreover, I also disagree with this text. If there >> is a bit/a way to indicate if a not supported OAM packet should be = forwarded or >> not, it should just be defined like this, while any considerations if = that bit >> should be set or not depend on the OAM function itself and do not = need to be >> discussed here. >=20 > I think the disagreement comes from believing the config option is a = data plane bit. Yes, I misunderstood the intention here. For me the text was/is written = quite confusingly (which might be the result of the long wg discussion). = Let me try to make an attempt to rephrase. Feel free to use any of this = or not: =E2=80=9EBy default OAM support MUST be disabled. Therefore a SF/SFF/SFC = Proxy/Classifier, that is not explicitly configured to support OAM, MUST = discards packets with the O bit set. An implementation MAY provide a = configurable parameter to enable the forwarding of received SFC OAM = packets to the next element in the chain. If OAM support is enabled, OAM = packets MUST be forwarded unmodified. Forwarding OAM packets by SFC = elements that do not itself support SFC OAM procedures may be acceptable = for a subset of OAM functions, but can result in unexpected outcomes for = others; thus, it is recommended to analyze the impact of forwarding an = OAM packet for all OAM functions prior to enabling this behavior.=E2=80=9C= One part of my confusion was mixing up the fact that packet should not = be send unmodified with the configuration to forward or not. Splitting = that in a separate sentence as proposed above helps for my understanding = a lot. >=20 >> Finally, it is not well explained what an OAM packet is at all. >=20 > If it helps, although it seems redundant, we can add a pointer to RFC = 6291 or RFC 7276. Yes that would definitely help. > =20 >=20 >> Is that a 'fake' packet that is generated by the operator to actively = test the >> (potentially newly configured) SFP? If so, why does a SF need to know = if a >> packet is an OAM packet or not? >=20 > It is an OAM packet, which can include connectivity verification, = continuity check, performance management, etc. It could be a synthetic = packet, or, well, an OAM packet :-) >=20 >> Usually it's a bad idea to use different kind >> of traffic for testing compared to what will be used in operations. = Please >> provide more explanation here! >=20 > I am not sure how to address this, since the definition of OAM for SFP = is outside the scope.=20 >=20 > Data plane protocols use an 'interception marker=E2=80=99 to = differentiate them from actual traffic, in the context of Active or = Hybrid OAM (as opposed to Passive OAM). >=20 Okay. >>=20 >> 2) section 2.4 >> "An SFC-aware SF MUST receive the data semantics first in order to >> process the data placed in the mandatory context field. The data >> semantics include both the allocation schema and the meaning of the >> included data. How an SFC-aware SF gets the data semantics is >> outside the scope of this specification." >> This is really confusing to me. I think this is what you need an = actually data >> semantics aka type field for in the base header. Or is there an = actual reason >> to not put this information directly in the base header where it is = need but >> instead assuming some magical way this information may take to reach = the node? >=20 > Believe it or not, no magic involved. It=E2=80=99s called =E2=80=9Ccontr= ol plane=E2=80=9D which is out of scope. >=20 >> If the assumption is that the SF is configured to know based of the = SFI what >> the content of the context header has to be, >=20 > No, the assumption is not that an SF =E2=80=9Cis configured=E2=80=9D. = And the assumption is not that the SF knows what the content of the = context header is. >=20 > The assumption is that the SF needs to receive the data semantics = before processing the data plane packet. >=20 >> you a) need to say that in the >> draft, >=20 > The document says what it means and means what it says in this = regards. If you find the text confusing, we can try to clarify it = somehow. >=20 >> and b) that's really error-prone because it's really hard to tell if = the >> conext header actually holds the information that you need or just = random crap >=20 > Is =E2=80=9Ccrap=E2=80=9D a technical term here? >=20 >> (of course depending of the expected data type of this information). = In short, >> I think you really need a type field somewhere here. >=20 > Mirja, there=E2=80=99s self-describing data and non-self-descriving = data. Both have their place and can be used based on what a protocol is = optimizing. This text described a use of the latter. >=20 >> In any case, you really >> need to explain this more! Also, the text further says: "An SF or SFC = Proxy >> that does not know the format or semantics of the >> Context Header for an NSH with MD Type 1 MUST discard any packet with >> such an NSH=E2=80=A6" >=20 > I keep reading these couple of sentences and I understand what they = say. So I am not positive at this point how to help out. >=20 >> How does the SFC proxy know that it knows the format or not if there = is no type >> field or identifier that indicates what the format should be? >=20 > Same as the first sentence you included in this DISCUSS item #2:=20 >=20 > "An SFC-aware SF MUST receive the data semantics first in order to > process the data placed in the mandatory context field.=E2=80=9D >=20 > Since an SFC proxy acts as an SFC-aware SF. That is clear in the = document. >=20 > That said, I will add the following to make it unambiguously clear: >=20 >=20 > "An SFC-aware SF or SF Proxy MUST receive the data semantics first in = order to > process the data placed in the mandatory context field.=E2=80=9D >=20 > And=20 >=20 > OLD: > included data. How an SFC-aware SF gets the data semantics is > outside the scope of this specification.=E2=80=9D >=20 > NEW: > included data. How an SFC-aware SF or SFC Proxy gets the data = semantics is > outside the scope of this specification.=E2=80=9C The problem is, even if I have received some semantics how do I know = that I have the right semantics? >=20 >>=20 >> Also, a related question from me: why is the context header present = in all >> types of NSH if there is no use for it defined in this document yet? = Why is >> there no fixed length NSH without a context header then? >=20 > This document defines two Context Header Types: fixed size, and = TLV-based. There is not need, as far as the WG had concluded, for a = fixed size no metadata MD Type.=20 >=20 > What you describe can be achieved with MD Type 2 Length =3D 2. In this case I don=E2=80=99t really understand why Type 1 is needed for. = This is not a blocking point but maybe the draft could explain, what = kind of optimizations are expected with Type 1/why is it useful..? >=20 >>=20 >> 3) Section 2.5.1: >> "If multiple instances of the same metadata are included in an NSH >> packet, but the definition of that context header does not allow for >> it, the SFC-aware SF MUST process the first instance and ignore >> subsequent instances." >> This seems error prone to me. If the same metadata appears multiple = where it >> should not, that seems clearly like an error case for me. Just using = the first >> one and proceed normally might not be the right thing to do. In any = case I >> think such an occasion should at least be logged. >=20 > OK, will add optional logging and error counting of the potentially = error case event. >=20 >> If the multiple instances are >> just a copy of each other and carry the same information, it's = probably okay to >> use that information and proceed. If the different instances carry = different >> information, it maybe a bit dangerous to just use the first one and = ignore >> others silently. In this case I would rather recommend to drop the = packet=E2=80=A6 >>=20 >> 4) In line with the second comment from the tsv-art review (thanks = Wes!), I >> don't really understand why this documents says (sec 6) that there = can be >> multiple next hops for the same SFP or SFs can be traversed in a = different >> order. May understanding (from a quick look at RFC7665) would be = that, if those >> things are needed e.g. for load balancing, then one should define = different >> SFPs and the Classifier must have the knowledge that two SFP are = equivalent and >> select them respectively. >=20 > Not really. Like you said, for LB. >=20 >> The reason why I'm really concerned about this is >> that usually a number of packets below to a flow and all packets = belonging to >> the same flow just ideally take the same route. But usually only the = Classifier >> has a notion of what a flow is and respectively will assign the SFI = to the >> packets belonging to the same flow. If now any SF on the path can = more or less >> randomly decided to forward packet belong to the same flow to one or = another >> next nodes, I would assume that this is not only a problem for the = flow, e.g. >> reordering, but also for SF itself in many cases. >=20 > https://tools.ietf.org/html/rfc7665#section-5.5 That=E2=80=99s fine in theory. In reality, especially e.g. for the web = server case you need to make sure that all packets belonging to the same = flow go to the same element. I thought it would actually be easier to = use different SFPs such that only the Classifier must be flow-aware. If = that=E2=80=99s not the case other nodes also need to be flow-aware and = keep flow state. This must be mention in the document!=20 >=20 >=20 >>=20 >>=20 >> = ---------------------------------------------------------------------- >> COMMENT: >> = ---------------------------------------------------------------------- >>=20 >> Further considerations: >>=20 >> 1) I don't really see why a TTL in the base header is needed. I = mostly >> understand why there is the Service Index in service header, also I = think there >> should be better mean to validate that you SFP is correct and I = ideally you >> should really not need this. However, loop prevention can be provided = by both >> mechanism and moreover there is probably also often a TTL in the = encapsulation >> protocol and loop prevention should really be a function of that = forwarding >> protocol and not the NSH. >=20 > The WG had a strong voice on the need of this field. >=20 > (I do not disagree with you) >=20 > But there are cases where SI is not decremented, nor is the = encapsulation-level TTL. Which are these cases? >=20 >>=20 >> 2) I don't see why you need the type field in the base header. This = is fully >> redundant because because all you need is the length field. If the = length is >> 0x2 it is what you have defined as type 1 if the length field is = larger it is >> type 2. >=20 > Thanks for the attempt at overloading, but no. Length =3D 6? What? >=20 >> I also don't see the need for any other types in future because you >> also have the version field; >=20 > NO. >=20 > We do *not* want to bump up the Version field for the whole protocol = when potentially adding a new MD Type. Why? Using a new version does have to be something complicated/heavy. If = you don=E2=80=99t use it for such cases, when would you use it then? >=20 >> if you need anything else you should go or >> probably have to go for a new version. Note that the general probably = with >> unnecessary redundancy is that is add complexity. If you keep this = redundancy >> you have to separately handle and implement the case(s) where the = type is 1 but >> the length is larger than expected. If at all you could probably just = use one >> bit to indicate that the length field is present and if not the = length is 0x2. >> However, saving bits does not really seem to be a concern for you, so = that >> might not actually be an advantage. >=20 > I did not fully follow the train of branching pros and cons in your = statement, but like you said earlier, there=E2=80=99s running code on = this and would not be productive to define a different similar protocol. Yes, I know. This is why these are only comments. >=20 >>=20 >> 3) sec 2.5.1 >> "Unassigned bit: One unassigned bit is available for future use. = This >> bit MUST NOT be set, and MUST be ignored on receipt." >> Is there an actual reason to have an unassigned bit here? >=20 > I am not sure I understand the question. >=20 > The header is 32-bit aligned, and there=E2=80=99s less fields defined = that available bits in a 32-bit word=E2=80=A6=20 >=20 Why do you define this bit instead of just having one more bit for = length field (where this bit was =E2=80=9Astolen=E2=80=98 from). If = there is no use case for this bit, I don=E2=80=99t understand why this = was done... >> Because I would >> assume that the type already provided enough flexibility for way to = extend the >> metadata format in any way needed. >>=20 >=20 > ? >=20 >> 4) Also section 2.5.1: >> " Length: Indicates the length of the variable metadata, in bytes. = In >> case the metadata length is not an integer number of 4-byte words, >> the sender MUST add pad bytes immediately following the last metadata >> byte to extend the metadata to an integer number of 4-byte words. >> The receiver MUST round up the length field to the nearest 4-byte >> word boundary, to locate and process the next field in the packet." >> Your definition of the length field might be more error-prone than = needed. It >> would probably be easier to simply define the length as 4-byte words, = and the=20 >> type of course defines the content of the metadata field and as such = can simply >> define which part of the total metadata field holds certain data of a = certain >> type and with part is padding. >>=20 >=20 > Thank you. See above. >=20 >> 5) And finally I have to say it is unclear to me why the SFI and SI = field are >> described as a separate header. Given they have to be present in all = SFH, >=20 > What is =E2=80=9CSFH=E2=80=9D? meant NSH=E2=80=A6 too make three-letter acronym in my life=E2=80=A6=20 >=20 >> I >> would consider them as two fields of the base header. But it is after = all >> really just an editorial issue. However, all this together with my = previous >> comments makes the protocol spec actually much more complicated than = it needs >> to be=E2=80=A6 >=20 > Noted. >=20 >>=20 >> 6) I also have to agree to the last comment of the tsv-art review: I = think it >> would have been nicer to not only described the NSH but also define = mappings to >> a set of possible encapsulations because I would assume that for each >> encapsulation there are a couple specific considerations that need to = be made >> to make things work successfully. I don't think that all = encapsulations can be >> captured by general consideration and I cannot make up my mind to go = through >> all cases in my head to figure out if there are things that needs to = be noted. >>=20 >>=20 >=20 > OK. >=20 > Thanks again, >=20 > Carlos. >=20 From nobody Thu Oct 5 05:45:53 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A0C51342C5; Thu, 5 Oct 2017 05:45:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mqia__k-jVNE; Thu, 5 Oct 2017 05:45:39 -0700 (PDT) Received: from mail-wr0-x22c.google.com (mail-wr0-x22c.google.com [IPv6:2a00:1450:400c:c0c::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A02D7126BF0; Thu, 5 Oct 2017 05:45:37 -0700 (PDT) Received: by mail-wr0-x22c.google.com with SMTP id p10so8952821wrc.6; Thu, 05 Oct 2017 05:45:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=YD6gjWfs16wr57V+4yWvigNY8MR74hYnaAXBDaLnUB4=; b=nRsgfFc2bqUgJrWb3V+mfbSFZXunyMOjDgRoLA0sRXdd/BzIlc47ny0HTGH3EkTmoW E2j1aHuNVKbjZU7HyG2u4Hx56uef4G5Y8Ltt4i7BzaC4WUdZUvg1pKN0gbmuJS2sYqeb MVmwk7x2W5uCJWj0W+H5VE10gJLseQpCzFeZFysntLAHoan3TmrlkILEnFQ/Oe9ZKD/U mg6iG43hZfVRZJxGqViavOtEsi6rxlmhAy8UxnrlRyf/OqUjRODj++v5p9crsZNAnO/s XLR1tt3cQHO/XImx1wwF81PilssjbJ2ExsEA03lRqQ6UwlpivGNYFS9N2kU3kDkuCK1L O4pQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=YD6gjWfs16wr57V+4yWvigNY8MR74hYnaAXBDaLnUB4=; b=C/QKi2RL/XpJvDuLnP/3KHLMbFn5AJwvZCvjtKEk1o7BXF8OF4waLwk/FtepIRjJEJ D+fBRvQ9gvdWcZSc3VuYmW9UCnvfGPdWXb6bon5ByU/olOdd2yeNRe9JM7qb/jrZWyEa sXQL7KVeJnAz6eKh2oLVuzGdLNi0wSunykzNluBVOtHJRl1+CAi1FBRVumDZn2insu5K SKK9/KyH0ZXKlsT4JTO4/3W/6BHZt+4n/XinGwHtrG9+k2aE14bUBWwMLZ9wgq7WjHEl GXT8juS+AWyyrSlKrgPvtG1MLP5ll0g54RIlNXdR5wxh7tczv6ahbYY4IwDAf6mRm0jj bVJw== X-Gm-Message-State: AMCzsaUlp/WLLCEg57HaxRVqPer20dTofagRCsvaH3j1TWmxIuWM9NTc EU9ibaiW8E/rvjAQG4DW2lssYUpjAE70Zl3hCvg= X-Google-Smtp-Source: AOwi7QB3xuqP+sPk8o6IiOmteSSaJ7ulvFWRGSHWazyzLdS6NMe80DYaLC1lCUysjNhpFCgYVo+0xZtQTddsnuOy7JE= X-Received: by 10.223.173.148 with SMTP id w20mr10687568wrc.253.1507207535789; Thu, 05 Oct 2017 05:45:35 -0700 (PDT) MIME-Version: 1.0 Received: by 10.223.193.68 with HTTP; Thu, 5 Oct 2017 05:45:35 -0700 (PDT) In-Reply-To: <966599BB-D65B-4794-AD44-80CBD5092FEA@kuehlewind.net> References: <150653176579.25051.17983729650964908105.idtracker@ietfa.amsl.com> <2BA88A4C-8083-44DC-82A6-7AB8DB616EB6@cisco.com> <966599BB-D65B-4794-AD44-80CBD5092FEA@kuehlewind.net> From: Alia Atlas Date: Thu, 5 Oct 2017 08:45:35 -0400 Message-ID: To: "Mirja Kuehlewind (IETF)" Cc: "Carlos Pignataro (cpignata)" , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Content-Type: multipart/alternative; boundary="f403045cf0fac61104055acc19dd" Archived-At: Subject: Re: [sfc] =?utf-8?q?Mirja_K=C3=BChlewind=27s_Discuss_on_draft-ietf-s?= =?utf-8?q?fc-nsh-24=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Oct 2017 12:45:48 -0000 --f403045cf0fac61104055acc19dd Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Mirja, On Thu, Oct 5, 2017 at 8:29 AM, Mirja Kuehlewind (IETF) wrote: > Hi Carlos, > > thanks for you reply. Please see inline. > > > Am 27.09.2017 um 21:13 schrieb Carlos Pignataro (cpignata) < > cpignata@cisco.com>: > > > > Thank you, Mirja, for these questions and details. > > > > Please find follow-ups inline. > > > >> On Sep 27, 2017, at 1:02 PM, Mirja K=C3=BChlewind > wrote: > >> > >> Mirja K=C3=BChlewind has entered the following ballot position for > >> draft-ietf-sfc-nsh-24: Discuss > >> > >> When responding, please keep the subject line intact and reply to all > >> email addresses included in the To and CC lines. (Feel free to cut thi= s > >> introductory paragraph, however.) > >> > >> > >> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria. > html > >> for more information about IESG DISCUSS and COMMENT positions. > >> > >> > >> The document, along with other ballot positions, can be found here: > >> https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/ > >> > >> > >> > >> ---------------------------------------------------------------------- > >> DISCUSS: > >> ---------------------------------------------------------------------- > >> > >> I have a couple of comments on the design. I know, as always in IESG > review > >> state, it's probably too late to make any changes to the actual header > format, > >> therefore most of my comments are actually in the comment section > below. I > >> still decided to note them so at least people can consider these point= s. > >> However, there are a few things that I need clarification for before > >> publication, which I note in this section: > >> > >> 1) Sec 2.2 > >> "SF/SFF/SFC Proxy/Classifier implementations that do not support SFC > >> OAM procedures SHOULD discard packets with O bit set, but MAY support > >> a configurable parameter to enable forwarding received SFC OAM > >> packets unmodified to the next element in the chain. Forwarding OAM > >> packets unmodified by SFC elements that do not support SFC OAM > >> procedures may be acceptable for a subset of OAM functions, but can > >> result in unexpected outcomes for others; thus, it is recommended to > >> analyze the impact of forwarding an OAM packet for all OAM functions > >> prior to enabling this behavior. The configurable parameter MUST be > >> disabled by default." > >> This part is really unclear to me and I believe needs to be further > specified. > >> Where should this configurable parameter be? In the Context header? Wh= y > don't > >> you just use one of the unassigned bit to indicate if an unknown (OAM) > packet > >> should be forwarded or not? > > > > The configurable parameter refers to a configuration state and device > operational state variable, and not a data plane packet field. > > > > In other words, the default is drop. But if the setting `configure sff > forward oam` then it is forwarded. > > > > I will say that this was a strong contentious point in the WG process t= o > keep this configuration option (although my personal preference was not t= o > have it, the WG was loud on it.) > > > >> Moreover, I also disagree with this text. If there > >> is a bit/a way to indicate if a not supported OAM packet should be > forwarded or > >> not, it should just be defined like this, while any considerations if > that bit > >> should be set or not depend on the OAM function itself and do not need > to be > >> discussed here. > > > > I think the disagreement comes from believing the config option is a > data plane bit. > > Yes, I misunderstood the intention here. For me the text was/is written > quite confusingly (which might be the result of the long wg discussion). > Let me try to make an attempt to rephrase. Feel free to use any of this o= r > not: > > =E2=80=9EBy default OAM support MUST be disabled. Therefore a SF/SFF/SFC > Proxy/Classifier, that is not explicitly configured to support OAM, MUST > discards packets with the O bit set. An implementation MAY provide a > configurable parameter to enable the forwarding of received SFC OAM packe= ts > to the next element in the chain. If OAM support is enabled, OAM packets > MUST be forwarded unmodified. Forwarding OAM packets by SFC elements that > do not itself support SFC OAM procedures may be acceptable for a subset o= f > OAM functions, but can result in unexpected outcomes for others; thus, it > is recommended to analyze the impact of forwarding an OAM packet for all > OAM functions prior to enabling this behavior.=E2=80=9C > > One part of my confusion was mixing up the fact that packet should not be > send unmodified with the configuration to forward or not. Splitting that = in > a separate sentence as proposed above helps for my understanding a lot. > > > > >> Finally, it is not well explained what an OAM packet is at all. > > > > If it helps, although it seems redundant, we can add a pointer to RFC > 6291 or RFC 7276. > > Yes that would definitely help. > > > > > > >> Is that a 'fake' packet that is generated by the operator to actively > test the > >> (potentially newly configured) SFP? If so, why does a SF need to know > if a > >> packet is an OAM packet or not? > > > > It is an OAM packet, which can include connectivity verification, > continuity check, performance management, etc. It could be a synthetic > packet, or, well, an OAM packet :-) > > > >> Usually it's a bad idea to use different kind > >> of traffic for testing compared to what will be used in operations. > Please > >> provide more explanation here! > > > > I am not sure how to address this, since the definition of OAM for SFP > is outside the scope. > > > > Data plane protocols use an 'interception marker=E2=80=99 to differenti= ate them > from actual traffic, in the context of Active or Hybrid OAM (as opposed t= o > Passive OAM). > > > Okay. > > > >> > >> 2) section 2.4 > >> "An SFC-aware SF MUST receive the data semantics first in order to > >> process the data placed in the mandatory context field. The data > >> semantics include both the allocation schema and the meaning of the > >> included data. How an SFC-aware SF gets the data semantics is > >> outside the scope of this specification." > >> This is really confusing to me. I think this is what you need an > actually data > >> semantics aka type field for in the base header. Or is there an actual > reason > >> to not put this information directly in the base header where it is > need but > >> instead assuming some magical way this information may take to reach > the node? > > > > Believe it or not, no magic involved. It=E2=80=99s called =E2=80=9Ccont= rol plane=E2=80=9D which > is out of scope. > > > >> If the assumption is that the SF is configured to know based of the SF= I > what > >> the content of the context header has to be, > > > > No, the assumption is not that an SF =E2=80=9Cis configured=E2=80=9D. A= nd the assumption > is not that the SF knows what the content of the context header is. > > > > The assumption is that the SF needs to receive the data semantics befor= e > processing the data plane packet. > > > >> you a) need to say that in the > >> draft, > > > > The document says what it means and means what it says in this regards. > If you find the text confusing, we can try to clarify it somehow. > > > >> and b) that's really error-prone because it's really hard to tell if t= he > >> conext header actually holds the information that you need or just > random crap > > > > Is =E2=80=9Ccrap=E2=80=9D a technical term here? > > > >> (of course depending of the expected data type of this information). I= n > short, > >> I think you really need a type field somewhere here. > > > > Mirja, there=E2=80=99s self-describing data and non-self-descriving dat= a. Both > have their place and can be used based on what a protocol is optimizing. > This text described a use of the latter. > > > >> In any case, you really > >> need to explain this more! Also, the text further says: "An SF or SFC > Proxy > >> that does not know the format or semantics of the > >> Context Header for an NSH with MD Type 1 MUST discard any packet with > >> such an NSH=E2=80=A6" > > > > I keep reading these couple of sentences and I understand what they say= . > So I am not positive at this point how to help out. > > > >> How does the SFC proxy know that it knows the format or not if there i= s > no type > >> field or identifier that indicates what the format should be? > > > > Same as the first sentence you included in this DISCUSS item #2: > > > > "An SFC-aware SF MUST receive the data semantics first in order to > > process the data placed in the mandatory context field.=E2=80=9D > > > > Since an SFC proxy acts as an SFC-aware SF. That is clear in the > document. > > > > That said, I will add the following to make it unambiguously clear: > > > > > > "An SFC-aware SF or SF Proxy MUST receive the data semantics first in > order to > > process the data placed in the mandatory context field.=E2=80=9D > > > > And > > > > OLD: > > included data. How an SFC-aware SF gets the data semantics is > > outside the scope of this specification.=E2=80=9D > > > > NEW: > > included data. How an SFC-aware SF or SFC Proxy gets the data semantic= s > is > > outside the scope of this specification.=E2=80=9C > > The problem is, even if I have received some semantics how do I know that > I have the right semantics? > The control-plane would pass the semantic associated with the particular Service Function Path. > > > >> > >> Also, a related question from me: why is the context header present in > all > >> types of NSH if there is no use for it defined in this document yet? > Why is > >> there no fixed length NSH without a context header then? > > > > This document defines two Context Header Types: fixed size, and > TLV-based. There is not need, as far as the WG had concluded, for a fixed > size no metadata MD Type. > > > > What you describe can be achieved with MD Type 2 Length =3D 2. > > In this case I don=E2=80=99t really understand why Type 1 is needed for. = This is > not a blocking point but maybe the draft could explain, what kind of > optimizations are expected with Type 1/why is it useful..? > It is an optimization for some hardware processing. The two types are part of a compromise discussion that happened a number of years ago. > > > >> > >> 3) Section 2.5.1: > >> "If multiple instances of the same metadata are included in an NSH > >> packet, but the definition of that context header does not allow for > >> it, the SFC-aware SF MUST process the first instance and ignore > >> subsequent instances." > >> This seems error prone to me. If the same metadata appears multiple > where it > >> should not, that seems clearly like an error case for me. Just using > the first > >> one and proceed normally might not be the right thing to do. In any > case I > >> think such an occasion should at least be logged. > > > > OK, will add optional logging and error counting of the potentially > error case event. > > > >> If the multiple instances are > >> just a copy of each other and carry the same information, it's probabl= y > okay to > >> use that information and proceed. If the different instances carry > different > >> information, it maybe a bit dangerous to just use the first one and > ignore > >> others silently. In this case I would rather recommend to drop the > packet=E2=80=A6 > >> > >> 4) In line with the second comment from the tsv-art review (thanks > Wes!), I > >> don't really understand why this documents says (sec 6) that there can > be > >> multiple next hops for the same SFP or SFs can be traversed in a > different > >> order. May understanding (from a quick look at RFC7665) would be that, > if those > >> things are needed e.g. for load balancing, then one should define > different > >> SFPs and the Classifier must have the knowledge that two SFP are > equivalent and > >> select them respectively. > > > > Not really. Like you said, for LB. > > > >> The reason why I'm really concerned about this is > >> that usually a number of packets below to a flow and all packets > belonging to > >> the same flow just ideally take the same route. But usually only the > Classifier > >> has a notion of what a flow is and respectively will assign the SFI to > the > >> packets belonging to the same flow. If now any SF on the path can more > or less > >> randomly decided to forward packet belong to the same flow to one or > another > >> next nodes, I would assume that this is not only a problem for the > flow, e.g. > >> reordering, but also for SF itself in many cases. > > > > https://tools.ietf.org/html/rfc7665#section-5.5 > > That=E2=80=99s fine in theory. In reality, especially e.g. for the web se= rver case > you need to make sure that all packets belonging to the same flow go to t= he > same element. I thought it would actually be easier to use different SFPs > such that only the Classifier must be flow-aware. If that=E2=80=99s not t= he case > other nodes also need to be flow-aware and keep flow state. This must be > mention in the document! The architecture is clear that the assignment of flows to particular Service Functions can happen at a variety of different points. One of the motivations for carrying meta-data is to allow a classifier to insert information identifying a particular flow so that all its packets can be properly load-balanced to the same Service Function. If the Classifier does this, then there is not a need for every load-balancing element to do reclassification. > > >> ---------------------------------------------------------------------- > >> COMMENT: > >> ---------------------------------------------------------------------- > >> > >> Further considerations: > >> > >> 1) I don't really see why a TTL in the base header is needed. I mostly > >> understand why there is the Service Index in service header, also I > think there > >> should be better mean to validate that you SFP is correct and I ideall= y > you > >> should really not need this. However, loop prevention can be provided > by both > >> mechanism and moreover there is probably also often a TTL in the > encapsulation > >> protocol and loop prevention should really be a function of that > forwarding > >> protocol and not the NSH. > > > > The WG had a strong voice on the need of this field. > > > > (I do not disagree with you) > > > > But there are cases where SI is not decremented, nor is the > encapsulation-level TTL. > > Which are these cases? The Service Index is always decremented by the Service Function. Since a Classifier can overwrite with a new SFP and SI, it is possible, in theory, to get loops where a packet moves along the new SFP and then gets reclassified back into the loop. The Service Index terminates loops within a particular SFP. The TTL terminates loops within the service overlay plane - regardless of how many different SFPs that may involve. It is a subtle, but critical, technical necessity that was recognized and added about 10 months ago. > > > >> > >> 2) I don't see why you need the type field in the base header. This is > fully > >> redundant because because all you need is the length field. If the > length is > >> 0x2 it is what you have defined as type 1 if the length field is large= r > it is > >> type 2. > > > > Thanks for the attempt at overloading, but no. Length =3D 6? > > What? > An MD-type 2 packet might have a length of 6 because of 4 32-byte words of TLV meta-data value. It isn't possible to use the length to disambiguate. > > >> I also don't see the need for any other types in future because you > >> also have the version field; > > > > NO. > > > > We do *not* want to bump up the Version field for the whole protocol > when potentially adding a new MD Type. > > Why? Using a new version does have to be something complicated/heavy. If > you don=E2=80=99t use it for such cases, when would you use it then? > The flexibility in these fields and having a version number is for future-proofing. Once an encapsulation is burnt into silicon, it is extremely hard to go back and add such things in. Regards, Alia --f403045cf0fac61104055acc19dd Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Mirja,

On Thu, Oct 5, 2017 at 8:29 AM, Mirja Kuehlewind (IETF) <ietf@= kuehlewind.net> wrote:
Hi C= arlos,

thanks for you reply. Please see inline.

> Am 27.09.2017 um 21:13 schrieb Carlos Pignataro (cpignata) <cpignata@cisco.com>:
>
> Thank you, Mirja, for these questions and details.
>
> Please find follow-ups inline.
>
>> On Sep 27, 2017, at 1:02 PM, Mirja K=C3=BChlewind <ietf@kuehlewind.net> wrote:
>>
>> Mirja K=C3=BChlewind has entered the following ballot position for=
>> draft-ietf-sfc-nsh-24: Discuss
>>
>> When responding, please keep the subject line intact and reply to = all
>> email addresses included in the To and CC lines. (Feel free to cut= this
>> introductory paragraph, however.)
>>
>>
>> Please refer to https://www.ietf.o= rg/iesg/statement/discuss-criteria.html
>> for more information about IESG DISCUSS and COMMENT positions.
>>
>>
>> The document, along with other ballot positions, can be found here= :
>> https://datatracker.ietf.org/doc/d= raft-ietf-sfc-nsh/
>>
>>
>>
>> ------------------------------------------------------------<= wbr>----------
>> DISCUSS:
>> ------------------------------------------------------------<= wbr>----------
>>
>> I have a couple of comments on the design. I know, as always in IE= SG review
>> state, it's probably too late to make any changes to the actua= l header format,
>> therefore most of my comments are actually in the comment section = below. I
>> still decided to note them so at least people can consider these p= oints.
>> However, there are a few things that I need clarification for befo= re
>> publication, which I note in this section:
>>
>> 1) Sec 2.2
>> "SF/SFF/SFC Proxy/Classifier implementations that do not supp= ort SFC
>> OAM procedures SHOULD discard packets with O bit set, but MAY supp= ort
>> a configurable parameter to enable forwarding received SFC OAM
>> packets unmodified to the next element in the chain.=C2=A0 Forward= ing OAM
>> packets unmodified by SFC elements that do not support SFC OAM
>> procedures may be acceptable for a subset of OAM functions, but ca= n
>> result in unexpected outcomes for others; thus, it is recommended = to
>> analyze the impact of forwarding an OAM packet for all OAM functio= ns
>> prior to enabling this behavior.=C2=A0 The configurable parameter = MUST be
>> disabled by default."
>> This part is really unclear to me and I believe needs to be furthe= r specified.
>> Where should this configurable parameter be? In the Context header= ? Why don't
>> you just use one of the unassigned bit to indicate if an unknown (= OAM) packet
>> should be forwarded or not?
>
> The configurable parameter refers to a configuration state and device = operational state variable, and not a data plane packet field.
>
> In other words, the default is drop. But if the setting `configure sff= forward oam` then it is forwarded.
>
> I will say that this was a strong contentious point in the WG process = to keep this configuration option (although my personal preference was not = to have it, the WG was loud on it.)
>
>> Moreover, I also disagree with this text. If there
>> is a bit/a way to indicate if a not supported OAM packet should be= forwarded or
>> not, it should just be defined like this, while any considerations= if that bit
>> should be set or not depend on the OAM function itself and do not = need to be
>> discussed here.
>
> I think the disagreement comes from believing the config option is a d= ata plane bit.

Yes, I misunderstood the intention here. For me the text was/is= written quite confusingly (which might be the result of the long wg discus= sion). Let me try to make an attempt to rephrase. Feel free to use any of t= his or not:

=E2=80=9EBy default OAM support MUST be disabled. Therefore a SF/SFF/SFC Pr= oxy/Classifier, that is not explicitly configured to support OAM, MUST disc= ards packets with the O bit set. An implementation MAY provide a configurab= le parameter to enable the forwarding of received SFC OAM packets to the ne= xt element in the chain. If OAM support is enabled, OAM packets MUST be for= warded unmodified. Forwarding OAM packets by SFC elements that do not itsel= f support SFC OAM procedures may be acceptable for a subset of OAM function= s, but can result in unexpected outcomes for others; thus, it is recommende= d to analyze the impact of forwarding an OAM packet for all OAM functions p= rior to enabling this behavior.=E2=80=9C

One part of my confusion was mixing up the fact that packet should not be s= end unmodified with the configuration to forward or not. Splitting that in = a separate sentence as proposed above helps for my understanding a lot.

>
>> Finally, it is not well explained what an OAM packet is at all. >
> If it helps, although it seems redundant, we can add a pointer to RFC = 6291 or RFC 7276.

Yes that would definitely help.

>
>
>> Is that a 'fake' packet that is generated by the operator = to actively test the
>> (potentially newly configured) SFP? If so, why does a SF need to k= now if a
>> packet is an OAM packet or not?
>
> It is an OAM packet, which can include connectivity verification, cont= inuity check, performance management, etc. It could be a synthetic packet, = or, well, an OAM packet :-)
>
>> Usually it's a bad idea to use different kind
>> of traffic for testing compared to what will be used in operations= . Please
>> provide more explanation here!
>
> I am not sure how to address this, since the definition of OAM for SFP= is outside the scope.
>
> Data plane protocols use an 'interception marker=E2=80=99 to diffe= rentiate them from actual traffic, in the context of Active or Hybrid OAM (= as opposed to Passive OAM).
>
Okay.


>>
>> 2) section 2.4
>> "An SFC-aware SF MUST receive the data semantics first in ord= er to
>> process the data placed in the mandatory context field.=C2=A0 The = data
>> semantics include both the allocation schema and the meaning of th= e
>> included data.=C2=A0 How an SFC-aware SF gets the data semantics i= s
>> outside the scope of this specification."
>> This is really confusing to me. I think this is what you need an a= ctually data
>> semantics aka type field for in the base header. Or is there an ac= tual reason
>> to not put this information directly in the base header where it i= s need but
>> instead assuming some magical way this information may take to rea= ch the node?
>
> Believe it or not, no magic involved. It=E2=80=99s called =E2=80=9Ccon= trol plane=E2=80=9D which is out of scope.
>
>> If the assumption is that the SF is configured to know based of th= e SFI what
>> the content of the context header has to be,
>
> No, the assumption is not that an SF =E2=80=9Cis configured=E2=80=9D. = And the assumption is not that the SF knows what the content of the context= header is.
>
> The assumption is that the SF needs to receive the data semantics befo= re processing the data plane packet.
>
>> you a) need to say that in the
>> draft,
>
> The document says what it means and means what it says in this regards= . If you find the text confusing, we can try to clarify it somehow.
>
>> and b) that's really error-prone because it's really hard = to tell if the
>> conext header actually holds the information that you need or just= random crap
>
> Is =E2=80=9Ccrap=E2=80=9D a technical term here?
>
>> (of course depending of the expected data type of this information= ). In short,
>> I think you really need a type field somewhere here.
>
> Mirja, there=E2=80=99s self-describing data and non-self-descriving da= ta. Both have their place and can be used based on what a protocol is optim= izing. This text described a use of the latter.
>
>> In any case, you really
>> need to explain this more! Also, the text further says: "An S= F or SFC Proxy
>> that does not know the format or semantics of the
>> Context Header for an NSH with MD Type 1 MUST discard any packet w= ith
>> such an NSH=E2=80=A6"
>
> I keep reading these couple of sentences and I understand what they sa= y. So I am not positive at this point how to help out.
>
>> How does the SFC proxy know that it knows the format or not if the= re is no type
>> field or identifier that indicates what the format should be?
>
> Same as the first sentence you included in this DISCUSS item #2:
>
> "An SFC-aware SF MUST receive the data semantics first in order t= o
> process the data placed in the mandatory context field.=E2=80=9D
>
> Since an SFC proxy acts as an SFC-aware SF. That is clear in the docum= ent.
>
> That said, I will add the following to make it unambiguously clear: >
>
> "An SFC-aware SF or SF Proxy MUST receive the data semantics firs= t in order to
> process the data placed in the mandatory context field.=E2=80=9D
>
> And
>
> OLD:
> included data.=C2=A0 How an SFC-aware SF gets the data semantics is > outside the scope of this specification.=E2=80=9D
>
> NEW:
> included data.=C2=A0 How an SFC-aware SF or SFC Proxy gets the data se= mantics is
> outside the scope of this specification.=E2=80=9C

The problem is, even if I have received some semantics how do I know that I= have the right semantics?
The control-plane would pass the semantic associated with the p= articular Service Function Path.
=C2=A0
>
>>
>> Also, a related question from me: why is the context header presen= t in all
>> types of NSH if there is no use for it defined in this document ye= t? Why is
>> there no fixed length NSH without a context header then?
>
> This document defines two Context Header Types: fixed size, and TLV-ba= sed. There is not need, as far as the WG had concluded, for a fixed size no= metadata MD Type.
>
> What you describe can be achieved with MD Type 2 Length =3D 2.

In this case I don=E2=80=99t really understand why Type 1 is needed = for. This is not a blocking point but maybe the draft could explain, what k= ind of optimizations are expected with Type 1/why is it useful..?

It is an optimization for some hardware processi= ng. The two types are part of a compromise discussion that happened a numbe= r of years ago.
=C2=A0
>
>>
>> 3) Section 2.5.1:
>> "If multiple instances of the same metadata are included in a= n NSH
>> packet, but the definition of that context header does not allow f= or
>> it, the SFC-aware SF MUST process the first instance and ignore >> subsequent instances."
>> This seems error prone to me. If the same metadata appears multipl= e where it
>> should not, that seems clearly like an error case for me. Just usi= ng the first
>> one and proceed normally might not be the right thing to do. In an= y case I
>> think such an occasion should at least be logged.
>
> OK, will add optional logging and error counting of the potentially er= ror case event.
>
>> If the multiple instances are
>> just a copy of each other and carry the same information, it's= probably okay to
>> use that information and proceed. If the different instances carry= different
>> information, it maybe a bit dangerous to just use the first one an= d ignore
>> others silently. In this case I would rather recommend to drop the= packet=E2=80=A6
>>
>> 4) In line with the second comment from the tsv-art review (thanks= Wes!), I
>> don't really understand why this documents says (sec 6) that t= here can be
>> multiple next hops for the same SFP or SFs can be traversed in a d= ifferent
>> order. May understanding (from a quick look at RFC7665) would be t= hat, if those
>> things are needed e.g. for load balancing, then one should define = different
>> SFPs and the Classifier must have the knowledge that two SFP are e= quivalent and
>> select them respectively.
>
> Not really. Like you said, for LB.
>
>> The reason why I'm really concerned about this is
>> that usually a number of packets below to a flow and all packets b= elonging to
>> the same flow just ideally take the same route. But usually only t= he Classifier
>> has a notion of what a flow is and respectively will assign the SF= I to the
>> packets belonging to the same flow. If now any SF on the path can = more or less
>> randomly decided to forward packet belong to the same flow to one = or another
>> next nodes, I would assume that this is not only a problem for the= flow, e.g.
>> reordering, but also for SF itself in many cases.
>
> https://tools.ietf.org/html/rfc7665#section= -5.5

That=E2=80=99s fine in theory. In reality, especially e.g. for = the web server case you need to make sure that all packets belonging to the= same flow go to the same element. I thought it would actually be easier to= use different SFPs such that only the Classifier must be flow-aware. If th= at=E2=80=99s not the case other nodes also need to be flow-aware and keep f= low state. This must be mention in the document!

The architecture is clear that the assignment of flows to particular = Service Functions can happen at a variety of different points.=C2=A0 One of= the motivations for carrying meta-data is to allow a classifier to insert = information identifying a particular flow so that all its packets can be pr= operly load-balanced to the same Service Function.=C2=A0 If the Classifier = does this, then there is not a need for every load-balancing element to do = reclassification.=C2=A0
=C2=A0

>> ------------------------------------------------------------<= wbr>----------
>> COMMENT:
>> ------------------------------------------------------------<= wbr>----------
>>
>> Further considerations:
>>
>> 1) I don't really see why a TTL in the base header is needed. = I mostly
>> understand why there is the Service Index in service header, also = I think there
>> should be better mean to validate that you SFP is correct and I id= eally you
>> should really not need this. However, loop prevention can be provi= ded by both
>> mechanism and moreover there is probably also often a TTL in the e= ncapsulation
>> protocol and loop prevention should really be a function of that f= orwarding
>> protocol and not the NSH.
>
> The WG had a strong voice on the need of this field.
>
> (I do not disagree with you)
>
> But there are cases where SI is not decremented, nor is the encapsulat= ion-level TTL.

Which are these cases?

The Service I= ndex is always decremented by the Service Function.
Since a Class= ifier can overwrite with a new SFP and SI, it is possible, in theory, to ge= t loops
where a packet moves along the new SFP and then gets recl= assified back into the loop.
The Service Index terminates loops w= ithin a particular SFP.
The TTL terminates loops within the servi= ce overlay plane - regardless of how many different
SFPs that may= involve.

It is a subtle, but critical, technical = necessity that was recognized and added about 10 months ago.
=C2= =A0
>
>>
>> 2) I don't see why you need the type field in the base header.= This is fully
>> redundant because because all you need is the length field. If the= length is
>> 0x2 it is what you have defined as type 1 if the length field is l= arger it is
>> type 2.
>
> Thanks for the attempt at overloading, but no. Length =3D 6?

What?

An= MD-type 2 packet might have a length of 6 because of 4 32-byte words of TL= V
meta-data value.=C2=A0 It isn't possible to use the length = to disambiguate.=C2=A0

<= span class=3D""> >
>> I also don't see the need for any other types in future becaus= e you
>> also have the version field;
>
> NO.
>
> We do *not* want to bump up the Version field for the whole protocol w= hen potentially adding a new MD Type.

Why? Using a new version does have to be something complicated/heavy= . If you don=E2=80=99t use it for such cases, when would you use it then?

The flexibility = in these fields and having a version number is for future-proofing. Once an= encapsulation is burnt
into silicon, it is extremely hard to go = back and add such things in.=C2=A0

Regards,
<= div>Alia
=C2=A0
--f403045cf0fac61104055acc19dd-- From nobody Thu Oct 5 07:50:13 2017 Return-Path: X-Original-To: sfc@ietf.org Delivered-To: sfc@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 505151321BB; Thu, 5 Oct 2017 07:49:35 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: sfc@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.63.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150721497521.1417.11387712860872247890@ietfa.amsl.com> Date: Thu, 05 Oct 2017 07:49:35 -0700 Archived-At: Subject: [sfc] I-D Action: draft-ietf-sfc-nsh-26.txt X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Oct 2017 14:49:35 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Service Function Chaining WG of the IETF. Title : Network Service Header (NSH) Authors : Paul Quinn Uri Elzur Carlos Pignataro Filename : draft-ietf-sfc-nsh-26.txt Pages : 37 Date : 2017-10-05 Abstract: This document describes a Network Service Header (NSH) imposed on packets or frames to realize service function paths. The NSH also provides a mechanism for metadata exchange along the instantiated service paths. The NSH is the SFC encapsulation required to support the Service Function Chaining (SFC) architecture (defined in RFC7665). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-sfc-nsh-26 https://datatracker.ietf.org/doc/html/draft-ietf-sfc-nsh-26 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-sfc-nsh-26 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Oct 5 07:50:25 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29C381331D2; Thu, 5 Oct 2017 07:50:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.52 X-Spam-Level: X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k_9tP6DdJavf; Thu, 5 Oct 2017 07:50:14 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A8841342E1; Thu, 5 Oct 2017 07:49:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=60538; q=dns/txt; s=iport; t=1507214985; x=1508424585; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=TV9vAWOuGQCRTtNxqLC+7Tp/Glcei3H0Cqv8ttBPgqc=; b=mIIB32aHdFYzX5slREn0BlhHQ31m1bSE8AdGYtIzF6tUZSpg8hwwr22U veuwm1eHdjAN4+F1CSblI1gJt1/1aZwDqLhjQqGG/HMMXg6ACfYhcUHET lPEkPLhFVF5w1YksBp2HToMogLC7vMMPYguVRlUf/cMsFZN3qXQ43db8N 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CbAAAuRtZZ/40NJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgzAtZG4nB4Nzih+PZYF2iEWNag6CBAojhRgCGoQBPxgBAgEBAQE?= =?us-ascii?q?BAQFrKIUYAQEBAQIBGgEIQhQFCwIBCA4EBiABBgMCAgIfERQDAwsCBA4FiUxMA?= =?us-ascii?q?w0IEKZYgieHSQ2DXwEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgy2CAoFRgWorgn6?= =?us-ascii?q?CXoFzARIBCYMpL4IyBYoEDo5GiB88Aodcg1+EL4R5DIIIhW+LB4JOh2yCOYg5A?= =?us-ascii?q?hEZAYE4AR84gQMLeBVbAYROORwZgU52AYZ7AgUIGAeBBYEQAQEB?= X-IronPort-AV: E=Sophos;i="5.42,481,1500940800"; d="scan'208,217";a="302091681" Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 05 Oct 2017 14:49:43 +0000 Received: from XCH-RTP-018.cisco.com (xch-rtp-018.cisco.com [64.101.220.158]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v95Engda025654 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 5 Oct 2017 14:49:43 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-018.cisco.com (64.101.220.158) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Thu, 5 Oct 2017 10:49:42 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Thu, 5 Oct 2017 10:49:41 -0400 From: "Carlos Pignataro (cpignata)" To: Alia Atlas CC: "Mirja Kuehlewind (IETF)" , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Thread-Topic: =?utf-8?B?W3NmY10gTWlyamEgS8O8aGxld2luZCdzIERpc2N1c3Mgb24gZHJhZnQtaWV0?= =?utf-8?Q?f-sfc-nsh-24:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHTN7J1Oxxnh9G/fUSWyQ0CGGrMWKLJXQ6AgAwhzACAAAR8gIAAIqqA Date: Thu, 5 Oct 2017 14:49:41 +0000 Message-ID: References: <150653176579.25051.17983729650964908105.idtracker@ietfa.amsl.com> <2BA88A4C-8083-44DC-82A6-7AB8DB616EB6@cisco.com> <966599BB-D65B-4794-AD44-80CBD5092FEA@kuehlewind.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.150.7.61] Content-Type: multipart/alternative; boundary="_000_E1ED7F89CF3B482AAE3BE70A0FEC785Aciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] =?utf-8?q?Mirja_K=C3=BChlewind=27s_Discuss_on_draft-ietf-s?= =?utf-8?q?fc-nsh-24=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Oct 2017 14:50:18 -0000 --_000_E1ED7F89CF3B482AAE3BE70A0FEC785Aciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTWlyamEsDQoNClJldiAtMjYsIHdoaWNoIGp1c3QgcG9zdGVkLCBhZGRzIGEgcG9pbnRlciB0 byBSRkM2MjkxIGFzIHBlciB5b3VyIHJlc3BvbnNlIGJlbG93ICh0byBjbGVhciBESVNDVVNTIGl0 ZW0gIzEpLCBhbmQgZXZlcnl0aGluZyBlbHNlIGlzIGFkZHJlc3NlZCBiZWxvdyBieSBBbGlhIGFu ZCBtZSAoYWxsIG90aGVyIERJU0NVU1MgaXRlbXMgYW5kIGFsbCBDT01NRU5UcykuDQpSZXYgLTI2 IGFsc28gaW5jb3Jwb3JhdGVzIHRoZSBwZW5kaW5nIGNoYW5nZXMgZnJvbSBCZW5vaXQgYW5kIG1v c3Qgb2YgQmVu4oCZcy4NCg0KUGxlYXNlIHNlZSBpbmxpbmUuDQoNCk9uIE9jdCA1LCAyMDE3LCBh dCA4OjQ1IEFNLCBBbGlhIEF0bGFzIDxha2F0bGFzQGdtYWlsLmNvbTxtYWlsdG86YWthdGxhc0Bn bWFpbC5jb20+PiB3cm90ZToNCg0KSGkgTWlyamEsDQoNCk9uIFRodSwgT2N0IDUsIDIwMTcgYXQg ODoyOSBBTSwgTWlyamEgS3VlaGxld2luZCAoSUVURikgPGlldGZAa3VlaGxld2luZC5uZXQ8bWFp bHRvOmlldGZAa3VlaGxld2luZC5uZXQ+PiB3cm90ZToNCkhpIENhcmxvcywNCg0KdGhhbmtzIGZv ciB5b3UgcmVwbHkuIFBsZWFzZSBzZWUgaW5saW5lLg0KDQo+IEFtIDI3LjA5LjIwMTcgdW0gMjE6 MTMgc2NocmllYiBDYXJsb3MgUGlnbmF0YXJvIChjcGlnbmF0YSkgPGNwaWduYXRhQGNpc2NvLmNv bTxtYWlsdG86Y3BpZ25hdGFAY2lzY28uY29tPj46DQo+DQo+IFRoYW5rIHlvdSwgTWlyamEsIGZv ciB0aGVzZSBxdWVzdGlvbnMgYW5kIGRldGFpbHMuDQo+DQo+IFBsZWFzZSBmaW5kIGZvbGxvdy11 cHMgaW5saW5lLg0KPg0KPj4gT24gU2VwIDI3LCAyMDE3LCBhdCAxOjAyIFBNLCBNaXJqYSBLw7xo bGV3aW5kIDxpZXRmQGt1ZWhsZXdpbmQubmV0PG1haWx0bzppZXRmQGt1ZWhsZXdpbmQubmV0Pj4g d3JvdGU6DQo+Pg0KPj4gTWlyamEgS8O8aGxld2luZCBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5n IGJhbGxvdCBwb3NpdGlvbiBmb3INCj4+IGRyYWZ0LWlldGYtc2ZjLW5zaC0yNDogRGlzY3Vzcw0K Pj4NCj4+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRh Y3QgYW5kIHJlcGx5IHRvIGFsbA0KPj4gZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRoZSBU byBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0IHRoaXMNCj4+IGludHJvZHVjdG9yeSBw YXJhZ3JhcGgsIGhvd2V2ZXIuKQ0KPj4NCj4+DQo+PiBQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQo+PiBmb3Ig bW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJRVNHIERJU0NVU1MgYW5kIENPTU1FTlQgcG9zaXRpb25z Lg0KPj4NCj4+DQo+PiBUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFsbG90IHBvc2l0 aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQo+PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L2RvYy9kcmFmdC1pZXRmLXNmYy1uc2gvDQo+Pg0KPj4NCj4+DQo+PiAtLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ PiBESVNDVVNTOg0KPj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPj4NCj4+IEkgaGF2ZSBhIGNvdXBsZSBvZiBj b21tZW50cyBvbiB0aGUgZGVzaWduLiBJIGtub3csIGFzIGFsd2F5cyBpbiBJRVNHIHJldmlldw0K Pj4gc3RhdGUsIGl0J3MgcHJvYmFibHkgdG9vIGxhdGUgdG8gbWFrZSBhbnkgY2hhbmdlcyB0byB0 aGUgYWN0dWFsIGhlYWRlciBmb3JtYXQsDQo+PiB0aGVyZWZvcmUgbW9zdCBvZiBteSBjb21tZW50 cyBhcmUgYWN0dWFsbHkgaW4gdGhlIGNvbW1lbnQgc2VjdGlvbiBiZWxvdy4gSQ0KPj4gc3RpbGwg ZGVjaWRlZCB0byBub3RlIHRoZW0gc28gYXQgbGVhc3QgcGVvcGxlIGNhbiBjb25zaWRlciB0aGVz ZSBwb2ludHMuDQo+PiBIb3dldmVyLCB0aGVyZSBhcmUgYSBmZXcgdGhpbmdzIHRoYXQgSSBuZWVk IGNsYXJpZmljYXRpb24gZm9yIGJlZm9yZQ0KPj4gcHVibGljYXRpb24sIHdoaWNoIEkgbm90ZSBp biB0aGlzIHNlY3Rpb246DQo+Pg0KPj4gMSkgU2VjIDIuMg0KPj4gIlNGL1NGRi9TRkMgUHJveHkv Q2xhc3NpZmllciBpbXBsZW1lbnRhdGlvbnMgdGhhdCBkbyBub3Qgc3VwcG9ydCBTRkMNCj4+IE9B TSBwcm9jZWR1cmVzIFNIT1VMRCBkaXNjYXJkIHBhY2tldHMgd2l0aCBPIGJpdCBzZXQsIGJ1dCBN QVkgc3VwcG9ydA0KPj4gYSBjb25maWd1cmFibGUgcGFyYW1ldGVyIHRvIGVuYWJsZSBmb3J3YXJk aW5nIHJlY2VpdmVkIFNGQyBPQU0NCj4+IHBhY2tldHMgdW5tb2RpZmllZCB0byB0aGUgbmV4dCBl bGVtZW50IGluIHRoZSBjaGFpbi4gIEZvcndhcmRpbmcgT0FNDQo+PiBwYWNrZXRzIHVubW9kaWZp ZWQgYnkgU0ZDIGVsZW1lbnRzIHRoYXQgZG8gbm90IHN1cHBvcnQgU0ZDIE9BTQ0KPj4gcHJvY2Vk dXJlcyBtYXkgYmUgYWNjZXB0YWJsZSBmb3IgYSBzdWJzZXQgb2YgT0FNIGZ1bmN0aW9ucywgYnV0 IGNhbg0KPj4gcmVzdWx0IGluIHVuZXhwZWN0ZWQgb3V0Y29tZXMgZm9yIG90aGVyczsgdGh1cywg aXQgaXMgcmVjb21tZW5kZWQgdG8NCj4+IGFuYWx5emUgdGhlIGltcGFjdCBvZiBmb3J3YXJkaW5n IGFuIE9BTSBwYWNrZXQgZm9yIGFsbCBPQU0gZnVuY3Rpb25zDQo+PiBwcmlvciB0byBlbmFibGlu ZyB0aGlzIGJlaGF2aW9yLiAgVGhlIGNvbmZpZ3VyYWJsZSBwYXJhbWV0ZXIgTVVTVCBiZQ0KPj4g ZGlzYWJsZWQgYnkgZGVmYXVsdC4iDQo+PiBUaGlzIHBhcnQgaXMgcmVhbGx5IHVuY2xlYXIgdG8g bWUgYW5kIEkgYmVsaWV2ZSBuZWVkcyB0byBiZSBmdXJ0aGVyIHNwZWNpZmllZC4NCj4+IFdoZXJl IHNob3VsZCB0aGlzIGNvbmZpZ3VyYWJsZSBwYXJhbWV0ZXIgYmU/IEluIHRoZSBDb250ZXh0IGhl YWRlcj8gV2h5IGRvbid0DQo+PiB5b3UganVzdCB1c2Ugb25lIG9mIHRoZSB1bmFzc2lnbmVkIGJp dCB0byBpbmRpY2F0ZSBpZiBhbiB1bmtub3duIChPQU0pIHBhY2tldA0KPj4gc2hvdWxkIGJlIGZv cndhcmRlZCBvciBub3Q/DQo+DQo+IFRoZSBjb25maWd1cmFibGUgcGFyYW1ldGVyIHJlZmVycyB0 byBhIGNvbmZpZ3VyYXRpb24gc3RhdGUgYW5kIGRldmljZSBvcGVyYXRpb25hbCBzdGF0ZSB2YXJp YWJsZSwgYW5kIG5vdCBhIGRhdGEgcGxhbmUgcGFja2V0IGZpZWxkLg0KPg0KPiBJbiBvdGhlciB3 b3JkcywgdGhlIGRlZmF1bHQgaXMgZHJvcC4gQnV0IGlmIHRoZSBzZXR0aW5nIGBjb25maWd1cmUg c2ZmIGZvcndhcmQgb2FtYCB0aGVuIGl0IGlzIGZvcndhcmRlZC4NCj4NCj4gSSB3aWxsIHNheSB0 aGF0IHRoaXMgd2FzIGEgc3Ryb25nIGNvbnRlbnRpb3VzIHBvaW50IGluIHRoZSBXRyBwcm9jZXNz IHRvIGtlZXAgdGhpcyBjb25maWd1cmF0aW9uIG9wdGlvbiAoYWx0aG91Z2ggbXkgcGVyc29uYWwg cHJlZmVyZW5jZSB3YXMgbm90IHRvIGhhdmUgaXQsIHRoZSBXRyB3YXMgbG91ZCBvbiBpdC4pDQo+ DQo+PiBNb3Jlb3ZlciwgSSBhbHNvIGRpc2FncmVlIHdpdGggdGhpcyB0ZXh0LiBJZiB0aGVyZQ0K Pj4gaXMgYSBiaXQvYSB3YXkgdG8gaW5kaWNhdGUgaWYgYSBub3Qgc3VwcG9ydGVkIE9BTSBwYWNr ZXQgc2hvdWxkIGJlIGZvcndhcmRlZCBvcg0KPj4gbm90LCBpdCBzaG91bGQganVzdCBiZSBkZWZp bmVkIGxpa2UgdGhpcywgd2hpbGUgYW55IGNvbnNpZGVyYXRpb25zIGlmIHRoYXQgYml0DQo+PiBz aG91bGQgYmUgc2V0IG9yIG5vdCBkZXBlbmQgb24gdGhlIE9BTSBmdW5jdGlvbiBpdHNlbGYgYW5k IGRvIG5vdCBuZWVkIHRvIGJlDQo+PiBkaXNjdXNzZWQgaGVyZS4NCj4NCj4gSSB0aGluayB0aGUg ZGlzYWdyZWVtZW50IGNvbWVzIGZyb20gYmVsaWV2aW5nIHRoZSBjb25maWcgb3B0aW9uIGlzIGEg ZGF0YSBwbGFuZSBiaXQuDQoNClllcywgSSBtaXN1bmRlcnN0b29kIHRoZSBpbnRlbnRpb24gaGVy ZS4gRm9yIG1lIHRoZSB0ZXh0IHdhcy9pcyB3cml0dGVuIHF1aXRlIGNvbmZ1c2luZ2x5ICh3aGlj aCBtaWdodCBiZSB0aGUgcmVzdWx0IG9mIHRoZSBsb25nIHdnIGRpc2N1c3Npb24pLiBMZXQgbWUg dHJ5IHRvIG1ha2UgYW4gYXR0ZW1wdCB0byByZXBocmFzZS4gRmVlbCBmcmVlIHRvIHVzZSBhbnkg b2YgdGhpcyBvciBub3Q6DQoNCkkgYW0gZ2xhZCB0aGF0IG5vdyB5b3UgdW5kZXJzdGFuZCB0aGUg aW50ZW50aW9uLCBhbmQgdGhpcyBpc3N1ZSBpcyBhZGRyZXNzZWQuDQoNClRoYW5rcyBmb3IgdGhl IGF0dGVtcHQgYXQgcmV3cml0aW5nLg0KDQpUaGF0IHBhcmFncmFwaCBpcyBiYWxhbmNpbmcgaW4g cXVpdGUgYSBkZWxpY2F0ZSBlcXVpbGlicml1bS4gSXQgaXMsIGFzIHlvdSBnYXRoZXJlZCwgdGhl IHJlc3VsdCBvZiBsb25nIGFyZHVvdXMgV0cgZGlzY3Vzc2lvbnMuIENvbnNlcXVlbnRseSBJIGFt IG1vc3QgaGVzaXRhbnQgdG8gbWFrZSBhbnkgY2hhbmdlcyB0byBpdC4NCg0KDQoNCuKAnkJ5IGRl ZmF1bHQgT0FNIHN1cHBvcnQgTVVTVCBiZSBkaXNhYmxlZC4gVGhlcmVmb3JlIGEgU0YvU0ZGL1NG QyBQcm94eS9DbGFzc2lmaWVyLCB0aGF0IGlzIG5vdCBleHBsaWNpdGx5IGNvbmZpZ3VyZWQgdG8g c3VwcG9ydCBPQU0sIE1VU1QgZGlzY2FyZHMgcGFja2V0cyB3aXRoIHRoZSBPIGJpdCBzZXQuIEFu IGltcGxlbWVudGF0aW9uIE1BWSBwcm92aWRlIGEgY29uZmlndXJhYmxlIHBhcmFtZXRlciB0byBl bmFibGUgdGhlIGZvcndhcmRpbmcgb2YgcmVjZWl2ZWQgU0ZDIE9BTSBwYWNrZXRzIHRvIHRoZSBu ZXh0IGVsZW1lbnQgaW4gdGhlIGNoYWluLiBJZiBPQU0gc3VwcG9ydCBpcyBlbmFibGVkLCBPQU0g cGFja2V0cyBNVVNUIGJlIGZvcndhcmRlZCB1bm1vZGlmaWVkLiBGb3J3YXJkaW5nIE9BTSBwYWNr ZXRzIGJ5IFNGQyBlbGVtZW50cyB0aGF0IGRvIG5vdCBpdHNlbGYgc3VwcG9ydCBTRkMgT0FNIHBy b2NlZHVyZXMgbWF5IGJlIGFjY2VwdGFibGUgZm9yIGEgc3Vic2V0IG9mIE9BTSBmdW5jdGlvbnMs IGJ1dCBjYW4gcmVzdWx0IGluIHVuZXhwZWN0ZWQgb3V0Y29tZXMgZm9yIG90aGVyczsgdGh1cywg aXQgaXMgcmVjb21tZW5kZWQgdG8gYW5hbHl6ZSB0aGUgaW1wYWN0IG9mIGZvcndhcmRpbmcgYW4g T0FNIHBhY2tldCBmb3IgYWxsIE9BTSBmdW5jdGlvbnMgcHJpb3IgdG8gZW5hYmxpbmcgdGhpcyBi ZWhhdmlvci7igJwNCg0KT25lIHBhcnQgb2YgbXkgY29uZnVzaW9uIHdhcyBtaXhpbmcgdXAgdGhl IGZhY3QgdGhhdCBwYWNrZXQgc2hvdWxkIG5vdCBiZSBzZW5kIHVubW9kaWZpZWQgd2l0aCB0aGUg Y29uZmlndXJhdGlvbiB0byBmb3J3YXJkIG9yIG5vdC4gU3BsaXR0aW5nIHRoYXQgaW4gYSBzZXBh cmF0ZSBzZW50ZW5jZSBhcyBwcm9wb3NlZCBhYm92ZSBoZWxwcyBmb3IgbXkgdW5kZXJzdGFuZGlu ZyBhIGxvdC4NCg0KPg0KPj4gRmluYWxseSwgaXQgaXMgbm90IHdlbGwgZXhwbGFpbmVkIHdoYXQg YW4gT0FNIHBhY2tldCBpcyBhdCBhbGwuDQo+DQo+IElmIGl0IGhlbHBzLCBhbHRob3VnaCBpdCBz ZWVtcyByZWR1bmRhbnQsIHdlIGNhbiBhZGQgYSBwb2ludGVyIHRvIFJGQyA2MjkxIG9yIFJGQyA3 Mjc2Lg0KDQpZZXMgdGhhdCB3b3VsZCBkZWZpbml0ZWx5IGhlbHAuDQoNCg0KT0ssIGRvbmUuDQoN Cj4NCj4NCj4+IElzIHRoYXQgYSAnZmFrZScgcGFja2V0IHRoYXQgaXMgZ2VuZXJhdGVkIGJ5IHRo ZSBvcGVyYXRvciB0byBhY3RpdmVseSB0ZXN0IHRoZQ0KPj4gKHBvdGVudGlhbGx5IG5ld2x5IGNv bmZpZ3VyZWQpIFNGUD8gSWYgc28sIHdoeSBkb2VzIGEgU0YgbmVlZCB0byBrbm93IGlmIGENCj4+ IHBhY2tldCBpcyBhbiBPQU0gcGFja2V0IG9yIG5vdD8NCj4NCj4gSXQgaXMgYW4gT0FNIHBhY2tl dCwgd2hpY2ggY2FuIGluY2x1ZGUgY29ubmVjdGl2aXR5IHZlcmlmaWNhdGlvbiwgY29udGludWl0 eSBjaGVjaywgcGVyZm9ybWFuY2UgbWFuYWdlbWVudCwgZXRjLiBJdCBjb3VsZCBiZSBhIHN5bnRo ZXRpYyBwYWNrZXQsIG9yLCB3ZWxsLCBhbiBPQU0gcGFja2V0IDotKQ0KPg0KPj4gVXN1YWxseSBp dCdzIGEgYmFkIGlkZWEgdG8gdXNlIGRpZmZlcmVudCBraW5kDQo+PiBvZiB0cmFmZmljIGZvciB0 ZXN0aW5nIGNvbXBhcmVkIHRvIHdoYXQgd2lsbCBiZSB1c2VkIGluIG9wZXJhdGlvbnMuIFBsZWFz ZQ0KPj4gcHJvdmlkZSBtb3JlIGV4cGxhbmF0aW9uIGhlcmUhDQo+DQo+IEkgYW0gbm90IHN1cmUg aG93IHRvIGFkZHJlc3MgdGhpcywgc2luY2UgdGhlIGRlZmluaXRpb24gb2YgT0FNIGZvciBTRlAg aXMgb3V0c2lkZSB0aGUgc2NvcGUuDQo+DQo+IERhdGEgcGxhbmUgcHJvdG9jb2xzIHVzZSBhbiAn aW50ZXJjZXB0aW9uIG1hcmtlcuKAmSB0byBkaWZmZXJlbnRpYXRlIHRoZW0gZnJvbSBhY3R1YWwg dHJhZmZpYywgaW4gdGhlIGNvbnRleHQgb2YgQWN0aXZlIG9yIEh5YnJpZCBPQU0gKGFzIG9wcG9z ZWQgdG8gUGFzc2l2ZSBPQU0pLg0KPg0KT2theS4NCg0KDQoNClRoYW5rcy4NCg0KPj4NCj4+IDIp IHNlY3Rpb24gMi40DQo+PiAiQW4gU0ZDLWF3YXJlIFNGIE1VU1QgcmVjZWl2ZSB0aGUgZGF0YSBz ZW1hbnRpY3MgZmlyc3QgaW4gb3JkZXIgdG8NCj4+IHByb2Nlc3MgdGhlIGRhdGEgcGxhY2VkIGlu IHRoZSBtYW5kYXRvcnkgY29udGV4dCBmaWVsZC4gIFRoZSBkYXRhDQo+PiBzZW1hbnRpY3MgaW5j bHVkZSBib3RoIHRoZSBhbGxvY2F0aW9uIHNjaGVtYSBhbmQgdGhlIG1lYW5pbmcgb2YgdGhlDQo+ PiBpbmNsdWRlZCBkYXRhLiAgSG93IGFuIFNGQy1hd2FyZSBTRiBnZXRzIHRoZSBkYXRhIHNlbWFu dGljcyBpcw0KPj4gb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBzcGVjaWZpY2F0aW9uLiINCj4+ IFRoaXMgaXMgcmVhbGx5IGNvbmZ1c2luZyB0byBtZS4gSSB0aGluayB0aGlzIGlzIHdoYXQgeW91 IG5lZWQgYW4gYWN0dWFsbHkgZGF0YQ0KPj4gc2VtYW50aWNzIGFrYSB0eXBlIGZpZWxkIGZvciBp biB0aGUgYmFzZSBoZWFkZXIuIE9yIGlzIHRoZXJlIGFuIGFjdHVhbCByZWFzb24NCj4+IHRvIG5v dCBwdXQgdGhpcyBpbmZvcm1hdGlvbiBkaXJlY3RseSBpbiB0aGUgYmFzZSBoZWFkZXIgd2hlcmUg aXQgaXMgbmVlZCBidXQNCj4+IGluc3RlYWQgYXNzdW1pbmcgc29tZSBtYWdpY2FsIHdheSB0aGlz IGluZm9ybWF0aW9uIG1heSB0YWtlIHRvIHJlYWNoIHRoZSBub2RlPw0KPg0KPiBCZWxpZXZlIGl0 IG9yIG5vdCwgbm8gbWFnaWMgaW52b2x2ZWQuIEl04oCZcyBjYWxsZWQg4oCcY29udHJvbCBwbGFu ZeKAnSB3aGljaCBpcyBvdXQgb2Ygc2NvcGUuDQo+DQo+PiBJZiB0aGUgYXNzdW1wdGlvbiBpcyB0 aGF0IHRoZSBTRiBpcyBjb25maWd1cmVkIHRvIGtub3cgYmFzZWQgb2YgdGhlIFNGSSB3aGF0DQo+ PiB0aGUgY29udGVudCBvZiB0aGUgY29udGV4dCBoZWFkZXIgaGFzIHRvIGJlLA0KPg0KPiBObywg dGhlIGFzc3VtcHRpb24gaXMgbm90IHRoYXQgYW4gU0Yg4oCcaXMgY29uZmlndXJlZOKAnS4gQW5k IHRoZSBhc3N1bXB0aW9uIGlzIG5vdCB0aGF0IHRoZSBTRiBrbm93cyB3aGF0IHRoZSBjb250ZW50 IG9mIHRoZSBjb250ZXh0IGhlYWRlciBpcy4NCj4NCj4gVGhlIGFzc3VtcHRpb24gaXMgdGhhdCB0 aGUgU0YgbmVlZHMgdG8gcmVjZWl2ZSB0aGUgZGF0YSBzZW1hbnRpY3MgYmVmb3JlIHByb2Nlc3Np bmcgdGhlIGRhdGEgcGxhbmUgcGFja2V0Lg0KPg0KPj4geW91IGEpIG5lZWQgdG8gc2F5IHRoYXQg aW4gdGhlDQo+PiBkcmFmdCwNCj4NCj4gVGhlIGRvY3VtZW50IHNheXMgd2hhdCBpdCBtZWFucyBh bmQgbWVhbnMgd2hhdCBpdCBzYXlzIGluIHRoaXMgcmVnYXJkcy4gSWYgeW91IGZpbmQgdGhlIHRl eHQgY29uZnVzaW5nLCB3ZSBjYW4gdHJ5IHRvIGNsYXJpZnkgaXQgc29tZWhvdy4NCj4NCj4+IGFu ZCBiKSB0aGF0J3MgcmVhbGx5IGVycm9yLXByb25lIGJlY2F1c2UgaXQncyByZWFsbHkgaGFyZCB0 byB0ZWxsIGlmIHRoZQ0KPj4gY29uZXh0IGhlYWRlciBhY3R1YWxseSBob2xkcyB0aGUgaW5mb3Jt YXRpb24gdGhhdCB5b3UgbmVlZCBvciBqdXN0IHJhbmRvbSBjcmFwDQo+DQo+IElzIOKAnGNyYXDi gJ0gYSB0ZWNobmljYWwgdGVybSBoZXJlPw0KPg0KPj4gKG9mIGNvdXJzZSBkZXBlbmRpbmcgb2Yg dGhlIGV4cGVjdGVkIGRhdGEgdHlwZSBvZiB0aGlzIGluZm9ybWF0aW9uKS4gSW4gc2hvcnQsDQo+ PiBJIHRoaW5rIHlvdSByZWFsbHkgbmVlZCBhIHR5cGUgZmllbGQgc29tZXdoZXJlIGhlcmUuDQo+ DQo+IE1pcmphLCB0aGVyZeKAmXMgc2VsZi1kZXNjcmliaW5nIGRhdGEgYW5kIG5vbi1zZWxmLWRl c2NyaXZpbmcgZGF0YS4gQm90aCBoYXZlIHRoZWlyIHBsYWNlIGFuZCBjYW4gYmUgdXNlZCBiYXNl ZCBvbiB3aGF0IGEgcHJvdG9jb2wgaXMgb3B0aW1pemluZy4gVGhpcyB0ZXh0IGRlc2NyaWJlZCBh IHVzZSBvZiB0aGUgbGF0dGVyLg0KPg0KPj4gSW4gYW55IGNhc2UsIHlvdSByZWFsbHkNCj4+IG5l ZWQgdG8gZXhwbGFpbiB0aGlzIG1vcmUhIEFsc28sIHRoZSB0ZXh0IGZ1cnRoZXIgc2F5czogIkFu IFNGIG9yIFNGQyBQcm94eQ0KPj4gdGhhdCBkb2VzIG5vdCBrbm93IHRoZSBmb3JtYXQgb3Igc2Vt YW50aWNzIG9mIHRoZQ0KPj4gQ29udGV4dCBIZWFkZXIgZm9yIGFuIE5TSCB3aXRoIE1EIFR5cGUg MSBNVVNUIGRpc2NhcmQgYW55IHBhY2tldCB3aXRoDQo+PiBzdWNoIGFuIE5TSOKApiINCj4NCj4g SSBrZWVwIHJlYWRpbmcgdGhlc2UgY291cGxlIG9mIHNlbnRlbmNlcyBhbmQgSSB1bmRlcnN0YW5k IHdoYXQgdGhleSBzYXkuIFNvIEkgYW0gbm90IHBvc2l0aXZlIGF0IHRoaXMgcG9pbnQgaG93IHRv IGhlbHAgb3V0Lg0KPg0KPj4gSG93IGRvZXMgdGhlIFNGQyBwcm94eSBrbm93IHRoYXQgaXQga25v d3MgdGhlIGZvcm1hdCBvciBub3QgaWYgdGhlcmUgaXMgbm8gdHlwZQ0KPj4gZmllbGQgb3IgaWRl bnRpZmllciB0aGF0IGluZGljYXRlcyB3aGF0IHRoZSBmb3JtYXQgc2hvdWxkIGJlPw0KPg0KPiBT YW1lIGFzIHRoZSBmaXJzdCBzZW50ZW5jZSB5b3UgaW5jbHVkZWQgaW4gdGhpcyBESVNDVVNTIGl0 ZW0gIzI6DQo+DQo+ICJBbiBTRkMtYXdhcmUgU0YgTVVTVCByZWNlaXZlIHRoZSBkYXRhIHNlbWFu dGljcyBmaXJzdCBpbiBvcmRlciB0bw0KPiBwcm9jZXNzIHRoZSBkYXRhIHBsYWNlZCBpbiB0aGUg bWFuZGF0b3J5IGNvbnRleHQgZmllbGQu4oCdDQo+DQo+IFNpbmNlIGFuIFNGQyBwcm94eSBhY3Rz IGFzIGFuIFNGQy1hd2FyZSBTRi4gVGhhdCBpcyBjbGVhciBpbiB0aGUgZG9jdW1lbnQuDQo+DQo+ IFRoYXQgc2FpZCwgSSB3aWxsIGFkZCB0aGUgZm9sbG93aW5nIHRvIG1ha2UgaXQgdW5hbWJpZ3Vv dXNseSBjbGVhcjoNCj4NCj4NCj4gIkFuIFNGQy1hd2FyZSBTRiBvciBTRiBQcm94eSBNVVNUIHJl Y2VpdmUgdGhlIGRhdGEgc2VtYW50aWNzIGZpcnN0IGluIG9yZGVyIHRvDQo+IHByb2Nlc3MgdGhl IGRhdGEgcGxhY2VkIGluIHRoZSBtYW5kYXRvcnkgY29udGV4dCBmaWVsZC7igJ0NCj4NCj4gQW5k DQo+DQo+IE9MRDoNCj4gaW5jbHVkZWQgZGF0YS4gIEhvdyBhbiBTRkMtYXdhcmUgU0YgZ2V0cyB0 aGUgZGF0YSBzZW1hbnRpY3MgaXMNCj4gb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBzcGVjaWZp Y2F0aW9uLuKAnQ0KPg0KPiBORVc6DQo+IGluY2x1ZGVkIGRhdGEuICBIb3cgYW4gU0ZDLWF3YXJl IFNGIG9yIFNGQyBQcm94eSBnZXRzIHRoZSBkYXRhIHNlbWFudGljcyBpcw0KPiBvdXRzaWRlIHRo ZSBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24u4oCcDQoNClRoZSBwcm9ibGVtIGlzLCBldmVu IGlmIEkgaGF2ZSByZWNlaXZlZCBzb21lIHNlbWFudGljcyBob3cgZG8gSSBrbm93IHRoYXQgSSBo YXZlIHRoZSByaWdodCBzZW1hbnRpY3M/DQoNClRoZSBjb250cm9sLXBsYW5lIHdvdWxkIHBhc3Mg dGhlIHNlbWFudGljIGFzc29jaWF0ZWQgd2l0aCB0aGUgcGFydGljdWxhciBTZXJ2aWNlIEZ1bmN0 aW9uIFBhdGguDQoNCj4NCj4+DQo+PiBBbHNvLCBhIHJlbGF0ZWQgcXVlc3Rpb24gZnJvbSBtZTog d2h5IGlzIHRoZSBjb250ZXh0IGhlYWRlciBwcmVzZW50IGluIGFsbA0KPj4gdHlwZXMgb2YgTlNI IGlmIHRoZXJlIGlzIG5vIHVzZSBmb3IgaXQgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50IHlldD8g V2h5IGlzDQo+PiB0aGVyZSBubyBmaXhlZCBsZW5ndGggTlNIIHdpdGhvdXQgYSBjb250ZXh0IGhl YWRlciB0aGVuPw0KPg0KPiBUaGlzIGRvY3VtZW50IGRlZmluZXMgdHdvIENvbnRleHQgSGVhZGVy IFR5cGVzOiBmaXhlZCBzaXplLCBhbmQgVExWLWJhc2VkLiBUaGVyZSBpcyBub3QgbmVlZCwgYXMg ZmFyIGFzIHRoZSBXRyBoYWQgY29uY2x1ZGVkLCBmb3IgYSBmaXhlZCBzaXplIG5vIG1ldGFkYXRh IE1EIFR5cGUuDQo+DQo+IFdoYXQgeW91IGRlc2NyaWJlIGNhbiBiZSBhY2hpZXZlZCB3aXRoIE1E IFR5cGUgMiBMZW5ndGggPSAyLg0KDQpJbiB0aGlzIGNhc2UgSSBkb27igJl0IHJlYWxseSB1bmRl cnN0YW5kIHdoeSBUeXBlIDEgaXMgbmVlZGVkIGZvci4gVGhpcyBpcyBub3QgYSBibG9ja2luZyBw b2ludCBidXQgbWF5YmUgdGhlIGRyYWZ0IGNvdWxkIGV4cGxhaW4sIHdoYXQga2luZCBvZiBvcHRp bWl6YXRpb25zIGFyZSBleHBlY3RlZCB3aXRoIFR5cGUgMS93aHkgaXMgaXQgdXNlZnVsLi4/DQoN Ckl0IGlzIGFuIG9wdGltaXphdGlvbiBmb3Igc29tZSBoYXJkd2FyZSBwcm9jZXNzaW5nLiBUaGUg dHdvIHR5cGVzIGFyZSBwYXJ0IG9mIGEgY29tcHJvbWlzZSBkaXNjdXNzaW9uIHRoYXQgaGFwcGVu ZWQgYSBudW1iZXIgb2YgeWVhcnMgYWdvLg0KDQoNCldoYXQgQWxpYSBzYWlkLiAoV2l0aCB0aGFu a3MgdG8gQWxpYSkNCg0KPg0KPj4NCj4+IDMpIFNlY3Rpb24gMi41LjE6DQo+PiAiSWYgbXVsdGlw bGUgaW5zdGFuY2VzIG9mIHRoZSBzYW1lIG1ldGFkYXRhIGFyZSBpbmNsdWRlZCBpbiBhbiBOU0gN Cj4+IHBhY2tldCwgYnV0IHRoZSBkZWZpbml0aW9uIG9mIHRoYXQgY29udGV4dCBoZWFkZXIgZG9l cyBub3QgYWxsb3cgZm9yDQo+PiBpdCwgdGhlIFNGQy1hd2FyZSBTRiBNVVNUIHByb2Nlc3MgdGhl IGZpcnN0IGluc3RhbmNlIGFuZCBpZ25vcmUNCj4+IHN1YnNlcXVlbnQgaW5zdGFuY2VzLiINCj4+ IFRoaXMgc2VlbXMgZXJyb3IgcHJvbmUgdG8gbWUuIElmIHRoZSBzYW1lIG1ldGFkYXRhIGFwcGVh cnMgbXVsdGlwbGUgd2hlcmUgaXQNCj4+IHNob3VsZCBub3QsIHRoYXQgc2VlbXMgY2xlYXJseSBs aWtlIGFuIGVycm9yIGNhc2UgZm9yIG1lLiBKdXN0IHVzaW5nIHRoZSBmaXJzdA0KPj4gb25lIGFu ZCBwcm9jZWVkIG5vcm1hbGx5IG1pZ2h0IG5vdCBiZSB0aGUgcmlnaHQgdGhpbmcgdG8gZG8uIElu IGFueSBjYXNlIEkNCj4+IHRoaW5rIHN1Y2ggYW4gb2NjYXNpb24gc2hvdWxkIGF0IGxlYXN0IGJl IGxvZ2dlZC4NCj4NCj4gT0ssIHdpbGwgYWRkIG9wdGlvbmFsIGxvZ2dpbmcgYW5kIGVycm9yIGNv dW50aW5nIG9mIHRoZSBwb3RlbnRpYWxseSBlcnJvciBjYXNlIGV2ZW50Lg0KPg0KPj4gSWYgdGhl IG11bHRpcGxlIGluc3RhbmNlcyBhcmUNCj4+IGp1c3QgYSBjb3B5IG9mIGVhY2ggb3RoZXIgYW5k IGNhcnJ5IHRoZSBzYW1lIGluZm9ybWF0aW9uLCBpdCdzIHByb2JhYmx5IG9rYXkgdG8NCj4+IHVz ZSB0aGF0IGluZm9ybWF0aW9uIGFuZCBwcm9jZWVkLiBJZiB0aGUgZGlmZmVyZW50IGluc3RhbmNl cyBjYXJyeSBkaWZmZXJlbnQNCj4+IGluZm9ybWF0aW9uLCBpdCBtYXliZSBhIGJpdCBkYW5nZXJv dXMgdG8ganVzdCB1c2UgdGhlIGZpcnN0IG9uZSBhbmQgaWdub3JlDQo+PiBvdGhlcnMgc2lsZW50 bHkuIEluIHRoaXMgY2FzZSBJIHdvdWxkIHJhdGhlciByZWNvbW1lbmQgdG8gZHJvcCB0aGUgcGFj a2V04oCmDQo+Pg0KPj4gNCkgSW4gbGluZSB3aXRoIHRoZSBzZWNvbmQgY29tbWVudCBmcm9tIHRo ZSB0c3YtYXJ0IHJldmlldyAodGhhbmtzIFdlcyEpLCBJDQo+PiBkb24ndCByZWFsbHkgdW5kZXJz dGFuZCB3aHkgdGhpcyBkb2N1bWVudHMgc2F5cyAoc2VjIDYpIHRoYXQgdGhlcmUgY2FuIGJlDQo+ PiBtdWx0aXBsZSBuZXh0IGhvcHMgZm9yIHRoZSBzYW1lIFNGUCBvciBTRnMgY2FuIGJlIHRyYXZl cnNlZCBpbiBhIGRpZmZlcmVudA0KPj4gb3JkZXIuIE1heSB1bmRlcnN0YW5kaW5nIChmcm9tIGEg cXVpY2sgbG9vayBhdCBSRkM3NjY1KSB3b3VsZCBiZSB0aGF0LCBpZiB0aG9zZQ0KPj4gdGhpbmdz IGFyZSBuZWVkZWQgZS5nLiBmb3IgbG9hZCBiYWxhbmNpbmcsIHRoZW4gb25lIHNob3VsZCBkZWZp bmUgZGlmZmVyZW50DQo+PiBTRlBzIGFuZCB0aGUgQ2xhc3NpZmllciBtdXN0IGhhdmUgdGhlIGtu b3dsZWRnZSB0aGF0IHR3byBTRlAgYXJlIGVxdWl2YWxlbnQgYW5kDQo+PiBzZWxlY3QgdGhlbSBy ZXNwZWN0aXZlbHkuDQo+DQo+IE5vdCByZWFsbHkuIExpa2UgeW91IHNhaWQsIGZvciBMQi4NCj4N Cj4+IFRoZSByZWFzb24gd2h5IEknbSByZWFsbHkgY29uY2VybmVkIGFib3V0IHRoaXMgaXMNCj4+ IHRoYXQgdXN1YWxseSBhIG51bWJlciBvZiBwYWNrZXRzIGJlbG93IHRvIGEgZmxvdyBhbmQgYWxs IHBhY2tldHMgYmVsb25naW5nIHRvDQo+PiB0aGUgc2FtZSBmbG93IGp1c3QgaWRlYWxseSB0YWtl IHRoZSBzYW1lIHJvdXRlLiBCdXQgdXN1YWxseSBvbmx5IHRoZSBDbGFzc2lmaWVyDQo+PiBoYXMg YSBub3Rpb24gb2Ygd2hhdCBhIGZsb3cgaXMgYW5kIHJlc3BlY3RpdmVseSB3aWxsIGFzc2lnbiB0 aGUgU0ZJIHRvIHRoZQ0KPj4gcGFja2V0cyBiZWxvbmdpbmcgdG8gdGhlIHNhbWUgZmxvdy4gSWYg bm93IGFueSBTRiBvbiB0aGUgcGF0aCBjYW4gbW9yZSBvciBsZXNzDQo+PiByYW5kb21seSBkZWNp ZGVkIHRvIGZvcndhcmQgcGFja2V0IGJlbG9uZyB0byB0aGUgc2FtZSBmbG93IHRvIG9uZSBvciBh bm90aGVyDQo+PiBuZXh0IG5vZGVzLCBJIHdvdWxkIGFzc3VtZSB0aGF0IHRoaXMgaXMgbm90IG9u bHkgYSBwcm9ibGVtIGZvciB0aGUgZmxvdywgZS5nLg0KPj4gcmVvcmRlcmluZywgYnV0IGFsc28g Zm9yIFNGIGl0c2VsZiBpbiBtYW55IGNhc2VzLg0KPg0KPiBodHRwczovL3Rvb2xzLmlldGYub3Jn L2h0bWwvcmZjNzY2NSNzZWN0aW9uLTUuNQ0KDQpUaGF04oCZcyBmaW5lIGluIHRoZW9yeS4gSW4g cmVhbGl0eSwgZXNwZWNpYWxseSBlLmcuIGZvciB0aGUgd2ViIHNlcnZlciBjYXNlIHlvdSBuZWVk IHRvIG1ha2Ugc3VyZSB0aGF0IGFsbCBwYWNrZXRzIGJlbG9uZ2luZyB0byB0aGUgc2FtZSBmbG93 IGdvIHRvIHRoZSBzYW1lIGVsZW1lbnQuIEkgdGhvdWdodCBpdCB3b3VsZCBhY3R1YWxseSBiZSBl YXNpZXIgdG8gdXNlIGRpZmZlcmVudCBTRlBzIHN1Y2ggdGhhdCBvbmx5IHRoZSBDbGFzc2lmaWVy IG11c3QgYmUgZmxvdy1hd2FyZS4gSWYgdGhhdOKAmXMgbm90IHRoZSBjYXNlIG90aGVyIG5vZGVz IGFsc28gbmVlZCB0byBiZSBmbG93LWF3YXJlIGFuZCBrZWVwIGZsb3cgc3RhdGUuIFRoaXMgbXVz dCBiZSBtZW50aW9uIGluIHRoZSBkb2N1bWVudCENCg0KVGhlIGFyY2hpdGVjdHVyZSBpcyBjbGVh ciB0aGF0IHRoZSBhc3NpZ25tZW50IG9mIGZsb3dzIHRvIHBhcnRpY3VsYXIgU2VydmljZSBGdW5j dGlvbnMgY2FuIGhhcHBlbiBhdCBhIHZhcmlldHkgb2YgZGlmZmVyZW50IHBvaW50cy4gIE9uZSBv ZiB0aGUgbW90aXZhdGlvbnMgZm9yIGNhcnJ5aW5nIG1ldGEtZGF0YSBpcyB0byBhbGxvdyBhIGNs YXNzaWZpZXIgdG8gaW5zZXJ0IGluZm9ybWF0aW9uIGlkZW50aWZ5aW5nIGEgcGFydGljdWxhciBm bG93IHNvIHRoYXQgYWxsIGl0cyBwYWNrZXRzIGNhbiBiZSBwcm9wZXJseSBsb2FkLWJhbGFuY2Vk IHRvIHRoZSBzYW1lIFNlcnZpY2UgRnVuY3Rpb24uICBJZiB0aGUgQ2xhc3NpZmllciBkb2VzIHRo aXMsIHRoZW4gdGhlcmUgaXMgbm90IGEgbmVlZCBmb3IgZXZlcnkgbG9hZC1iYWxhbmNpbmcgZWxl bWVudCB0byBkbyByZWNsYXNzaWZpY2F0aW9uLg0KDQpBZ2Fpbiwgd2hhdCBBbGlhIHNhaWQuDQoN CkkgdHJ1c3QgdGhlc2UgYXJlIG5vdyBjbGVhciBmb3IgeW91IG5vdy4NCg0KDQoNCj4+IC0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCj4+IENPTU1FTlQ6DQo+PiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+Pg0KPj4gRnVydGhlciBj b25zaWRlcmF0aW9uczoNCj4+DQo+PiAxKSBJIGRvbid0IHJlYWxseSBzZWUgd2h5IGEgVFRMIGlu IHRoZSBiYXNlIGhlYWRlciBpcyBuZWVkZWQuIEkgbW9zdGx5DQo+PiB1bmRlcnN0YW5kIHdoeSB0 aGVyZSBpcyB0aGUgU2VydmljZSBJbmRleCBpbiBzZXJ2aWNlIGhlYWRlciwgYWxzbyBJIHRoaW5r IHRoZXJlDQo+PiBzaG91bGQgYmUgYmV0dGVyIG1lYW4gdG8gdmFsaWRhdGUgdGhhdCB5b3UgU0ZQ IGlzIGNvcnJlY3QgYW5kIEkgaWRlYWxseSB5b3UNCj4+IHNob3VsZCByZWFsbHkgbm90IG5lZWQg dGhpcy4gSG93ZXZlciwgbG9vcCBwcmV2ZW50aW9uIGNhbiBiZSBwcm92aWRlZCBieSBib3RoDQo+ PiBtZWNoYW5pc20gYW5kIG1vcmVvdmVyIHRoZXJlIGlzIHByb2JhYmx5IGFsc28gb2Z0ZW4gYSBU VEwgaW4gdGhlIGVuY2Fwc3VsYXRpb24NCj4+IHByb3RvY29sIGFuZCBsb29wIHByZXZlbnRpb24g c2hvdWxkIHJlYWxseSBiZSBhIGZ1bmN0aW9uIG9mIHRoYXQgZm9yd2FyZGluZw0KPj4gcHJvdG9j b2wgYW5kIG5vdCB0aGUgTlNILg0KPg0KPiBUaGUgV0cgaGFkIGEgc3Ryb25nIHZvaWNlIG9uIHRo ZSBuZWVkIG9mIHRoaXMgZmllbGQuDQo+DQo+IChJIGRvIG5vdCBkaXNhZ3JlZSB3aXRoIHlvdSkN Cj4NCj4gQnV0IHRoZXJlIGFyZSBjYXNlcyB3aGVyZSBTSSBpcyBub3QgZGVjcmVtZW50ZWQsIG5v ciBpcyB0aGUgZW5jYXBzdWxhdGlvbi1sZXZlbCBUVEwuDQoNCldoaWNoIGFyZSB0aGVzZSBjYXNl cz8NCg0KVGhlIFNlcnZpY2UgSW5kZXggaXMgYWx3YXlzIGRlY3JlbWVudGVkIGJ5IHRoZSBTZXJ2 aWNlIEZ1bmN0aW9uLg0KU2luY2UgYSBDbGFzc2lmaWVyIGNhbiBvdmVyd3JpdGUgd2l0aCBhIG5l dyBTRlAgYW5kIFNJLCBpdCBpcyBwb3NzaWJsZSwgaW4gdGhlb3J5LCB0byBnZXQgbG9vcHMNCndo ZXJlIGEgcGFja2V0IG1vdmVzIGFsb25nIHRoZSBuZXcgU0ZQIGFuZCB0aGVuIGdldHMgcmVjbGFz c2lmaWVkIGJhY2sgaW50byB0aGUgbG9vcC4NClRoZSBTZXJ2aWNlIEluZGV4IHRlcm1pbmF0ZXMg bG9vcHMgd2l0aGluIGEgcGFydGljdWxhciBTRlAuDQpUaGUgVFRMIHRlcm1pbmF0ZXMgbG9vcHMg d2l0aGluIHRoZSBzZXJ2aWNlIG92ZXJsYXkgcGxhbmUgLSByZWdhcmRsZXNzIG9mIGhvdyBtYW55 IGRpZmZlcmVudA0KU0ZQcyB0aGF0IG1heSBpbnZvbHZlLg0KDQpJdCBpcyBhIHN1YnRsZSwgYnV0 IGNyaXRpY2FsLCB0ZWNobmljYWwgbmVjZXNzaXR5IHRoYXQgd2FzIHJlY29nbml6ZWQgYW5kIGFk ZGVkIGFib3V0IDEwIG1vbnRocyBhZ28uDQoNCg0KRXhhY3RseS4NCg0KPg0KPj4NCj4+IDIpIEkg ZG9uJ3Qgc2VlIHdoeSB5b3UgbmVlZCB0aGUgdHlwZSBmaWVsZCBpbiB0aGUgYmFzZSBoZWFkZXIu IFRoaXMgaXMgZnVsbHkNCj4+IHJlZHVuZGFudCBiZWNhdXNlIGJlY2F1c2UgYWxsIHlvdSBuZWVk IGlzIHRoZSBsZW5ndGggZmllbGQuIElmIHRoZSBsZW5ndGggaXMNCj4+IDB4MiBpdCBpcyB3aGF0 IHlvdSBoYXZlIGRlZmluZWQgYXMgdHlwZSAxIGlmIHRoZSBsZW5ndGggZmllbGQgaXMgbGFyZ2Vy IGl0IGlzDQo+PiB0eXBlIDIuDQo+DQo+IFRoYW5rcyBmb3IgdGhlIGF0dGVtcHQgYXQgb3Zlcmxv YWRpbmcsIGJ1dCBuby4gTGVuZ3RoID0gNj8NCg0KV2hhdD8NCg0KQW4gTUQtdHlwZSAyIHBhY2tl dCBtaWdodCBoYXZlIGEgbGVuZ3RoIG9mIDYgYmVjYXVzZSBvZiA0IDMyLWJ5dGUgd29yZHMgb2Yg VExWDQptZXRhLWRhdGEgdmFsdWUuICBJdCBpc24ndCBwb3NzaWJsZSB0byB1c2UgdGhlIGxlbmd0 aCB0byBkaXNhbWJpZ3VhdGUuDQoNCkV4YWN0bHkuDQoNCkFuZCBldmVuIGlmIGl0IHdlcmUgcG9z c2libGUsIHdoeSBvdmVybG9hZD8gV2hhdCBpZiB3ZSBoYXZlIGFuIE1EIFR5cGUgMyBwcm9wb3Nh bD8NCg0KDQo+DQo+PiBJIGFsc28gZG9uJ3Qgc2VlIHRoZSBuZWVkIGZvciBhbnkgb3RoZXIgdHlw ZXMgaW4gZnV0dXJlIGJlY2F1c2UgeW91DQo+PiBhbHNvIGhhdmUgdGhlIHZlcnNpb24gZmllbGQ7 DQo+DQo+IE5PLg0KPg0KPiBXZSBkbyAqbm90KiB3YW50IHRvIGJ1bXAgdXAgdGhlIFZlcnNpb24g ZmllbGQgZm9yIHRoZSB3aG9sZSBwcm90b2NvbCB3aGVuIHBvdGVudGlhbGx5IGFkZGluZyBhIG5l dyBNRCBUeXBlLg0KDQpXaHk/IFVzaW5nIGEgbmV3IHZlcnNpb24gZG9lcyBoYXZlIHRvIGJlIHNv bWV0aGluZyBjb21wbGljYXRlZC9oZWF2eS4gSWYgeW91IGRvbuKAmXQgdXNlIGl0IGZvciBzdWNo IGNhc2VzLCB3aGVuIHdvdWxkIHlvdSB1c2UgaXQgdGhlbj8NCg0KVGhlIGZsZXhpYmlsaXR5IGlu IHRoZXNlIGZpZWxkcyBhbmQgaGF2aW5nIGEgdmVyc2lvbiBudW1iZXIgaXMgZm9yIGZ1dHVyZS1w cm9vZmluZy4gT25jZSBhbiBlbmNhcHN1bGF0aW9uIGlzIGJ1cm50DQppbnRvIHNpbGljb24sIGl0 IGlzIGV4dHJlbWVseSBoYXJkIHRvIGdvIGJhY2sgYW5kIGFkZCBzdWNoIHRoaW5ncyBpbi4NCg0K UmlnaHQuIEFuZCB0aGFua3MgYWdhaW4gQWxpYS4NCg0K4oCUIENhcmxvcy4NCg0KDQpSZWdhcmRz LA0KQWxpYQ0KDQoNCg== --_000_E1ED7F89CF3B482AAE3BE70A0FEC785Aciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgTWlyamEsDQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5SZXYgLTI2LCB3aGljaCBq dXN0IHBvc3RlZCwgYWRkcyBhIHBvaW50ZXIgdG8mbmJzcDtSRkM2MjkxIGFzIHBlciB5b3VyIHJl c3BvbnNlIGJlbG93ICh0byBjbGVhciBESVNDVVNTIGl0ZW0gIzEpLCBhbmQgZXZlcnl0aGluZyBl bHNlIGlzIGFkZHJlc3NlZCBiZWxvdyBieSBBbGlhIGFuZCBtZSAoYWxsIG90aGVyIERJU0NVU1Mg aXRlbXMgYW5kIGFsbCBDT01NRU5UcykuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlJldiAtMjYgYWxz byBpbmNvcnBvcmF0ZXMgdGhlIHBlbmRpbmcgY2hhbmdlcyBmcm9tIEJlbm9pdCBhbmQgbW9zdCBv ZiBCZW7igJlzLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+UGxlYXNlIHNlZSBpbmxpbmUuPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3At bW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUg dHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIE9jdCA1LCAyMDE3LCBhdCA4 OjQ1IEFNLCBBbGlhIEF0bGFzICZsdDs8YSBocmVmPSJtYWlsdG86YWthdGxhc0BnbWFpbC5jb20i IGNsYXNzPSIiPmFrYXRsYXNAZ21haWwuY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xh c3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGly PSJsdHIiIGNsYXNzPSIiPkhpIE1pcmphLA0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPjxiciBj bGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiBUaHUsIE9jdCA1LCAyMDE3IGF0 IDg6MjkgQU0sIE1pcmphIEt1ZWhsZXdpbmQgKElFVEYpIDxzcGFuIGRpcj0ibHRyIiBjbGFzcz0i Ij4NCiZsdDs8YSBocmVmPSJtYWlsdG86aWV0ZkBrdWVobGV3aW5kLm5ldCIgdGFyZ2V0PSJfYmxh bmsiIGNsYXNzPSIiPmlldGZAa3VlaGxld2luZC5uZXQ8L2E+Jmd0Ozwvc3Bhbj4gd3JvdGU6PGJy IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbjowIDAgMCAuOGV4O2JvcmRlci1s ZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDoxZXgiIGNsYXNzPSJnbWFpbF9xdW90ZSI+ DQpIaSBDYXJsb3MsPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KdGhhbmtzIGZvciB5b3Ug cmVwbHkuIFBsZWFzZSBzZWUgaW5saW5lLjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSJoNSI+PGJyIGNsYXNzPSIiPg0KJmd0OyBBbSAyNy4wOS4yMDE3IHVtIDIxOjEz IHNjaHJpZWIgQ2FybG9zIFBpZ25hdGFybyAoY3BpZ25hdGEpICZsdDs8YSBocmVmPSJtYWlsdG86 Y3BpZ25hdGFAY2lzY28uY29tIiBjbGFzcz0iIj5jcGlnbmF0YUBjaXNjby5jb208L2E+Jmd0Ozo8 YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBUaGFuayB5b3UsIE1pcmphLCBm b3IgdGhlc2UgcXVlc3Rpb25zIGFuZCBkZXRhaWxzLjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xh c3M9IiI+DQomZ3Q7IFBsZWFzZSBmaW5kIGZvbGxvdy11cHMgaW5saW5lLjxiciBjbGFzcz0iIj4N CiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBPbiBTZXAgMjcsIDIwMTcsIGF0IDE6MDIgUE0s IE1pcmphIEvDvGhsZXdpbmQgJmx0OzxhIGhyZWY9Im1haWx0bzppZXRmQGt1ZWhsZXdpbmQubmV0 IiBjbGFzcz0iIj5pZXRmQGt1ZWhsZXdpbmQubmV0PC9hPiZndDsgd3JvdGU6PGJyIGNsYXNzPSIi Pg0KJmd0OyZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBNaXJqYSBLw7xobGV3aW5kIGhhcyBl bnRlcmVkIHRoZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcjxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7IGRyYWZ0LWlldGYtc2ZjLW5zaC0yNDogRGlzY3VzczxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgV2hlbiByZXNwb25kaW5nLCBwbGVhc2Uga2VlcCB0 aGUgc3ViamVjdCBsaW5lIGludGFjdCBhbmQgcmVwbHkgdG8gYWxsPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsgZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGluZXMuIChG ZWVsIGZyZWUgdG8gY3V0IHRoaXM8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBpbnRyb2R1Y3Rvcnkg cGFyYWdyYXBoLCBob3dldmVyLik8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OzxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgUGxlYXNlIHJlZmVyIHRvIDxhIGhyZWY9 Imh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRt bCIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+DQpodHRwczovL3d3 dy5pZXRmLm9yZy9pZXNnLzx3YnIgY2xhc3M9IiI+c3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEu PHdiciBjbGFzcz0iIj5odG1sPC9hPjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IGZvciBtb3JlIGlu Zm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3NpdGlvbnMuPGJyIGNs YXNzPSIiPg0KJmd0OyZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7IFRoZSBkb2N1bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBj YW4gYmUgZm91bmQgaGVyZTo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyA8YSBocmVmPSJodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNmYy1uc2gvIiByZWw9Im5vcmVm ZXJyZXIiIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj4NCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0 Zi5vcmcvPHdiciBjbGFzcz0iIj5kb2MvZHJhZnQtaWV0Zi1zZmMtbnNoLzwvYT48YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZn dDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08 d2JyIGNsYXNzPSIiPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTx3YnIgY2xhc3M9IiI+ LS0tLS0tLS0tLTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IERJU0NVU1M6PGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPHdiciBjbGFzcz0iIj4tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08d2JyIGNsYXNzPSIiPi0tLS0tLS0tLS08YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IEkgaGF2ZSBhIGNvdXBsZSBv ZiBjb21tZW50cyBvbiB0aGUgZGVzaWduLiBJIGtub3csIGFzIGFsd2F5cyBpbiBJRVNHIHJldmll dzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IHN0YXRlLCBpdCdzIHByb2JhYmx5IHRvbyBsYXRlIHRv IG1ha2UgYW55IGNoYW5nZXMgdG8gdGhlIGFjdHVhbCBoZWFkZXIgZm9ybWF0LDxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7IHRoZXJlZm9yZSBtb3N0IG9mIG15IGNvbW1lbnRzIGFyZSBhY3R1YWxseSBp biB0aGUgY29tbWVudCBzZWN0aW9uIGJlbG93LiBJPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgc3Rp bGwgZGVjaWRlZCB0byBub3RlIHRoZW0gc28gYXQgbGVhc3QgcGVvcGxlIGNhbiBjb25zaWRlciB0 aGVzZSBwb2ludHMuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgSG93ZXZlciwgdGhlcmUgYXJlIGEg ZmV3IHRoaW5ncyB0aGF0IEkgbmVlZCBjbGFyaWZpY2F0aW9uIGZvciBiZWZvcmU8YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyBwdWJsaWNhdGlvbiwgd2hpY2ggSSBub3RlIGluIHRoaXMgc2VjdGlvbjo8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDEpIFNlYyAyLjI8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyAmcXVvdDtTRi9TRkYvU0ZDIFByb3h5L0NsYXNzaWZpZXIg aW1wbGVtZW50YXRpb25zIHRoYXQgZG8gbm90IHN1cHBvcnQgU0ZDPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsgT0FNIHByb2NlZHVyZXMgU0hPVUxEIGRpc2NhcmQgcGFja2V0cyB3aXRoIE8gYml0IHNl dCwgYnV0IE1BWSBzdXBwb3J0PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgYSBjb25maWd1cmFibGUg cGFyYW1ldGVyIHRvIGVuYWJsZSBmb3J3YXJkaW5nIHJlY2VpdmVkIFNGQyBPQU08YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyBwYWNrZXRzIHVubW9kaWZpZWQgdG8gdGhlIG5leHQgZWxlbWVudCBpbiB0 aGUgY2hhaW4uJm5ic3A7IEZvcndhcmRpbmcgT0FNPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgcGFj a2V0cyB1bm1vZGlmaWVkIGJ5IFNGQyBlbGVtZW50cyB0aGF0IGRvIG5vdCBzdXBwb3J0IFNGQyBP QU08YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBwcm9jZWR1cmVzIG1heSBiZSBhY2NlcHRhYmxlIGZv ciBhIHN1YnNldCBvZiBPQU0gZnVuY3Rpb25zLCBidXQgY2FuPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsgcmVzdWx0IGluIHVuZXhwZWN0ZWQgb3V0Y29tZXMgZm9yIG90aGVyczsgdGh1cywgaXQgaXMg cmVjb21tZW5kZWQgdG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBhbmFseXplIHRoZSBpbXBhY3Qg b2YgZm9yd2FyZGluZyBhbiBPQU0gcGFja2V0IGZvciBhbGwgT0FNIGZ1bmN0aW9uczxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7IHByaW9yIHRvIGVuYWJsaW5nIHRoaXMgYmVoYXZpb3IuJm5ic3A7IFRo ZSBjb25maWd1cmFibGUgcGFyYW1ldGVyIE1VU1QgYmU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBk aXNhYmxlZCBieSBkZWZhdWx0LiZxdW90OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IFRoaXMgcGFy dCBpcyByZWFsbHkgdW5jbGVhciB0byBtZSBhbmQgSSBiZWxpZXZlIG5lZWRzIHRvIGJlIGZ1cnRo ZXIgc3BlY2lmaWVkLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IFdoZXJlIHNob3VsZCB0aGlzIGNv bmZpZ3VyYWJsZSBwYXJhbWV0ZXIgYmU/IEluIHRoZSBDb250ZXh0IGhlYWRlcj8gV2h5IGRvbid0 PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgeW91IGp1c3QgdXNlIG9uZSBvZiB0aGUgdW5hc3NpZ25l ZCBiaXQgdG8gaW5kaWNhdGUgaWYgYW4gdW5rbm93biAoT0FNKSBwYWNrZXQ8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyBzaG91bGQgYmUgZm9yd2FyZGVkIG9yIG5vdD88YnIgY2xhc3M9IiI+DQomZ3Q7 PGJyIGNsYXNzPSIiPg0KJmd0OyBUaGUgY29uZmlndXJhYmxlIHBhcmFtZXRlciByZWZlcnMgdG8g YSBjb25maWd1cmF0aW9uIHN0YXRlIGFuZCBkZXZpY2Ugb3BlcmF0aW9uYWwgc3RhdGUgdmFyaWFi bGUsIGFuZCBub3QgYSBkYXRhIHBsYW5lIHBhY2tldCBmaWVsZC48YnIgY2xhc3M9IiI+DQomZ3Q7 PGJyIGNsYXNzPSIiPg0KJmd0OyBJbiBvdGhlciB3b3JkcywgdGhlIGRlZmF1bHQgaXMgZHJvcC4g QnV0IGlmIHRoZSBzZXR0aW5nIGBjb25maWd1cmUgc2ZmIGZvcndhcmQgb2FtYCB0aGVuIGl0IGlz IGZvcndhcmRlZC48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBJIHdpbGwg c2F5IHRoYXQgdGhpcyB3YXMgYSBzdHJvbmcgY29udGVudGlvdXMgcG9pbnQgaW4gdGhlIFdHIHBy b2Nlc3MgdG8ga2VlcCB0aGlzIGNvbmZpZ3VyYXRpb24gb3B0aW9uIChhbHRob3VnaCBteSBwZXJz b25hbCBwcmVmZXJlbmNlIHdhcyBub3QgdG8gaGF2ZSBpdCwgdGhlIFdHIHdhcyBsb3VkIG9uIGl0 Lik8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgTW9yZW92ZXIsIEkg YWxzbyBkaXNhZ3JlZSB3aXRoIHRoaXMgdGV4dC4gSWYgdGhlcmU8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyBpcyBhIGJpdC9hIHdheSB0byBpbmRpY2F0ZSBpZiBhIG5vdCBzdXBwb3J0ZWQgT0FNIHBh Y2tldCBzaG91bGQgYmUgZm9yd2FyZGVkIG9yPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgbm90LCBp dCBzaG91bGQganVzdCBiZSBkZWZpbmVkIGxpa2UgdGhpcywgd2hpbGUgYW55IGNvbnNpZGVyYXRp b25zIGlmIHRoYXQgYml0PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgc2hvdWxkIGJlIHNldCBvciBu b3QgZGVwZW5kIG9uIHRoZSBPQU0gZnVuY3Rpb24gaXRzZWxmIGFuZCBkbyBub3QgbmVlZCB0byBi ZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IGRpc2N1c3NlZCBoZXJlLjxiciBjbGFzcz0iIj4NCiZn dDs8YnIgY2xhc3M9IiI+DQomZ3Q7IEkgdGhpbmsgdGhlIGRpc2FncmVlbWVudCBjb21lcyBmcm9t IGJlbGlldmluZyB0aGUgY29uZmlnIG9wdGlvbiBpcyBhIGRhdGEgcGxhbmUgYml0LjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQpZZXMsIEkgbWlzdW5kZXJzdG9v ZCB0aGUgaW50ZW50aW9uIGhlcmUuIEZvciBtZSB0aGUgdGV4dCB3YXMvaXMgd3JpdHRlbiBxdWl0 ZSBjb25mdXNpbmdseSAod2hpY2ggbWlnaHQgYmUgdGhlIHJlc3VsdCBvZiB0aGUgbG9uZyB3ZyBk aXNjdXNzaW9uKS4gTGV0IG1lIHRyeSB0byBtYWtlIGFuIGF0dGVtcHQgdG8gcmVwaHJhc2UuIEZl ZWwgZnJlZSB0byB1c2UgYW55IG9mIHRoaXMgb3Igbm90OjxiciBjbGFzcz0iIj4NCjwvYmxvY2tx dW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRp dj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+SSBhbSBnbGFkIHRoYXQgbm93IHlvdSB1bmRl cnN0YW5kIHRoZSBpbnRlbnRpb24sIGFuZCB0aGlzIGlzc3VlIGlzIGFkZHJlc3NlZC48L2Rpdj4N CjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PlRoYW5rcyBmb3IgdGhlIGF0dGVtcHQg YXQgcmV3cml0aW5nLjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+VGhh dCBwYXJhZ3JhcGggaXMgYmFsYW5jaW5nIGluIHF1aXRlIGEgZGVsaWNhdGUgZXF1aWxpYnJpdW0u IEl0IGlzLCBhcyB5b3UgZ2F0aGVyZWQsIHRoZSByZXN1bHQgb2YgbG9uZyBhcmR1b3VzIFdHIGRp c2N1c3Npb25zLiBDb25zZXF1ZW50bHkgSSBhbSBtb3N0IGhlc2l0YW50IHRvIG1ha2UgYW55IGNo YW5nZXMgdG8gaXQuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBkaXI9Imx0ciIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+DQo8ZGl2 IGNsYXNzPSJnbWFpbF9xdW90ZSI+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luOjAgMCAwIC44 ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFleCIgY2xhc3M9Imdt YWlsX3F1b3RlIj4NCjxiciBjbGFzcz0iIj4NCuKAnkJ5IGRlZmF1bHQgT0FNIHN1cHBvcnQgTVVT VCBiZSBkaXNhYmxlZC4gVGhlcmVmb3JlIGEgU0YvU0ZGL1NGQyBQcm94eS9DbGFzc2lmaWVyLCB0 aGF0IGlzIG5vdCBleHBsaWNpdGx5IGNvbmZpZ3VyZWQgdG8gc3VwcG9ydCBPQU0sIE1VU1QgZGlz Y2FyZHMgcGFja2V0cyB3aXRoIHRoZSBPIGJpdCBzZXQuIEFuIGltcGxlbWVudGF0aW9uIE1BWSBw cm92aWRlIGEgY29uZmlndXJhYmxlIHBhcmFtZXRlciB0byBlbmFibGUgdGhlIGZvcndhcmRpbmcg b2YNCiByZWNlaXZlZCBTRkMgT0FNIHBhY2tldHMgdG8gdGhlIG5leHQgZWxlbWVudCBpbiB0aGUg Y2hhaW4uIElmIE9BTSBzdXBwb3J0IGlzIGVuYWJsZWQsIE9BTSBwYWNrZXRzIE1VU1QgYmUgZm9y d2FyZGVkIHVubW9kaWZpZWQuIEZvcndhcmRpbmcgT0FNIHBhY2tldHMgYnkgU0ZDIGVsZW1lbnRz IHRoYXQgZG8gbm90IGl0c2VsZiBzdXBwb3J0IFNGQyBPQU0gcHJvY2VkdXJlcyBtYXkgYmUgYWNj ZXB0YWJsZSBmb3IgYSBzdWJzZXQgb2YgT0FNIGZ1bmN0aW9ucywNCiBidXQgY2FuIHJlc3VsdCBp biB1bmV4cGVjdGVkIG91dGNvbWVzIGZvciBvdGhlcnM7IHRodXMsIGl0IGlzIHJlY29tbWVuZGVk IHRvIGFuYWx5emUgdGhlIGltcGFjdCBvZiBmb3J3YXJkaW5nIGFuIE9BTSBwYWNrZXQgZm9yIGFs bCBPQU0gZnVuY3Rpb25zIHByaW9yIHRvIGVuYWJsaW5nIHRoaXMgYmVoYXZpb3Iu4oCcPGJyIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KT25lIHBhcnQgb2YgbXkgY29uZnVzaW9uIHdhcyBtaXhp bmcgdXAgdGhlIGZhY3QgdGhhdCBwYWNrZXQgc2hvdWxkIG5vdCBiZSBzZW5kIHVubW9kaWZpZWQg d2l0aCB0aGUgY29uZmlndXJhdGlvbiB0byBmb3J3YXJkIG9yIG5vdC4gU3BsaXR0aW5nIHRoYXQg aW4gYSBzZXBhcmF0ZSBzZW50ZW5jZSBhcyBwcm9wb3NlZCBhYm92ZSBoZWxwcyBmb3IgbXkgdW5k ZXJzdGFuZGluZyBhIGxvdC48YnIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgRmluYWxseSwgaXQgaXMgbm90IHdlbGwg ZXhwbGFpbmVkIHdoYXQgYW4gT0FNIHBhY2tldCBpcyBhdCBhbGwuPGJyIGNsYXNzPSIiPg0KJmd0 OzxiciBjbGFzcz0iIj4NCiZndDsgSWYgaXQgaGVscHMsIGFsdGhvdWdoIGl0IHNlZW1zIHJlZHVu ZGFudCwgd2UgY2FuIGFkZCBhIHBvaW50ZXIgdG8gUkZDIDYyOTEgb3IgUkZDIDcyNzYuPGJyIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9zcGFuPlllcyB0aGF0IHdvdWxkIGRlZmluaXRlbHkg aGVscC48YnIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L3NwYW4+ PC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5PSywgZG9uZS48L2Rpdj4NCjxi ciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgZGlyPSJsdHIiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEi Pg0KPGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbjow IDAgMCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDoxZXgiIGNs YXNzPSJnbWFpbF9xdW90ZSI+DQo8c3BhbiBjbGFzcz0iIj4mZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0 OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IElzIHRoYXQgYSAnZmFrZScgcGFja2V0IHRoYXQgaXMg Z2VuZXJhdGVkIGJ5IHRoZSBvcGVyYXRvciB0byBhY3RpdmVseSB0ZXN0IHRoZTxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7IChwb3RlbnRpYWxseSBuZXdseSBjb25maWd1cmVkKSBTRlA/IElmIHNvLCB3 aHkgZG9lcyBhIFNGIG5lZWQgdG8ga25vdyBpZiBhPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgcGFj a2V0IGlzIGFuIE9BTSBwYWNrZXQgb3Igbm90PzxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9 IiI+DQomZ3Q7IEl0IGlzIGFuIE9BTSBwYWNrZXQsIHdoaWNoIGNhbiBpbmNsdWRlIGNvbm5lY3Rp dml0eSB2ZXJpZmljYXRpb24sIGNvbnRpbnVpdHkgY2hlY2ssIHBlcmZvcm1hbmNlIG1hbmFnZW1l bnQsIGV0Yy4gSXQgY291bGQgYmUgYSBzeW50aGV0aWMgcGFja2V0LCBvciwgd2VsbCwgYW4gT0FN IHBhY2tldCA6LSk8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgVXN1 YWxseSBpdCdzIGEgYmFkIGlkZWEgdG8gdXNlIGRpZmZlcmVudCBraW5kPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsgb2YgdHJhZmZpYyBmb3IgdGVzdGluZyBjb21wYXJlZCB0byB3aGF0IHdpbGwgYmUg dXNlZCBpbiBvcGVyYXRpb25zLiBQbGVhc2U8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBwcm92aWRl IG1vcmUgZXhwbGFuYXRpb24gaGVyZSE8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0K Jmd0OyBJIGFtIG5vdCBzdXJlIGhvdyB0byBhZGRyZXNzIHRoaXMsIHNpbmNlIHRoZSBkZWZpbml0 aW9uIG9mIE9BTSBmb3IgU0ZQIGlzIG91dHNpZGUgdGhlIHNjb3BlLjxiciBjbGFzcz0iIj4NCiZn dDs8YnIgY2xhc3M9IiI+DQomZ3Q7IERhdGEgcGxhbmUgcHJvdG9jb2xzIHVzZSBhbiAnaW50ZXJj ZXB0aW9uIG1hcmtlcuKAmSB0byBkaWZmZXJlbnRpYXRlIHRoZW0gZnJvbSBhY3R1YWwgdHJhZmZp YywgaW4gdGhlIGNvbnRleHQgb2YgQWN0aXZlIG9yIEh5YnJpZCBPQU0gKGFzIG9wcG9zZWQgdG8g UGFzc2l2ZSBPQU0pLjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQo8L3NwYW4+T2th eS48YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iaDUiPjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2PlRoYW5rcy48L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJsdHIi IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPg0KPGRpdiBjbGFzcz0iZ21haWxf cXVvdGUiPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbjowIDAgMCAuOGV4O2JvcmRlci1sZWZ0 OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDoxZXgiIGNsYXNzPSJnbWFpbF9xdW90ZSI+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iaDUiPiZndDsmZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsgMikgc2VjdGlvbiAyLjQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyAmcXVvdDtBbiBTRkMt YXdhcmUgU0YgTVVTVCByZWNlaXZlIHRoZSBkYXRhIHNlbWFudGljcyBmaXJzdCBpbiBvcmRlciB0 bzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IHByb2Nlc3MgdGhlIGRhdGEgcGxhY2VkIGluIHRoZSBt YW5kYXRvcnkgY29udGV4dCBmaWVsZC4mbmJzcDsgVGhlIGRhdGE8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyBzZW1hbnRpY3MgaW5jbHVkZSBib3RoIHRoZSBhbGxvY2F0aW9uIHNjaGVtYSBhbmQgdGhl IG1lYW5pbmcgb2YgdGhlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgaW5jbHVkZWQgZGF0YS4mbmJz cDsgSG93IGFuIFNGQy1hd2FyZSBTRiBnZXRzIHRoZSBkYXRhIHNlbWFudGljcyBpczxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7IG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMgc3BlY2lmaWNhdGlvbi4m cXVvdDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBUaGlzIGlzIHJlYWxseSBjb25mdXNpbmcgdG8g bWUuIEkgdGhpbmsgdGhpcyBpcyB3aGF0IHlvdSBuZWVkIGFuIGFjdHVhbGx5IGRhdGE8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyBzZW1hbnRpY3MgYWthIHR5cGUgZmllbGQgZm9yIGluIHRoZSBiYXNl IGhlYWRlci4gT3IgaXMgdGhlcmUgYW4gYWN0dWFsIHJlYXNvbjxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7IHRvIG5vdCBwdXQgdGhpcyBpbmZvcm1hdGlvbiBkaXJlY3RseSBpbiB0aGUgYmFzZSBoZWFk ZXIgd2hlcmUgaXQgaXMgbmVlZCBidXQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBpbnN0ZWFkIGFz c3VtaW5nIHNvbWUgbWFnaWNhbCB3YXkgdGhpcyBpbmZvcm1hdGlvbiBtYXkgdGFrZSB0byByZWFj aCB0aGUgbm9kZT88YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBCZWxpZXZl IGl0IG9yIG5vdCwgbm8gbWFnaWMgaW52b2x2ZWQuIEl04oCZcyBjYWxsZWQg4oCcY29udHJvbCBw bGFuZeKAnSB3aGljaCBpcyBvdXQgb2Ygc2NvcGUuPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7IElmIHRoZSBhc3N1bXB0aW9uIGlzIHRoYXQgdGhlIFNGIGlzIGNvbmZp Z3VyZWQgdG8ga25vdyBiYXNlZCBvZiB0aGUgU0ZJIHdoYXQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyB0aGUgY29udGVudCBvZiB0aGUgY29udGV4dCBoZWFkZXIgaGFzIHRvIGJlLDxiciBjbGFzcz0i Ij4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IE5vLCB0aGUgYXNzdW1wdGlvbiBpcyBub3QgdGhh dCBhbiBTRiDigJxpcyBjb25maWd1cmVk4oCdLiBBbmQgdGhlIGFzc3VtcHRpb24gaXMgbm90IHRo YXQgdGhlIFNGIGtub3dzIHdoYXQgdGhlIGNvbnRlbnQgb2YgdGhlIGNvbnRleHQgaGVhZGVyIGlz LjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IFRoZSBhc3N1bXB0aW9uIGlz IHRoYXQgdGhlIFNGIG5lZWRzIHRvIHJlY2VpdmUgdGhlIGRhdGEgc2VtYW50aWNzIGJlZm9yZSBw cm9jZXNzaW5nIHRoZSBkYXRhIHBsYW5lIHBhY2tldC48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNs YXNzPSIiPg0KJmd0OyZndDsgeW91IGEpIG5lZWQgdG8gc2F5IHRoYXQgaW4gdGhlPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsgZHJhZnQsPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZn dDsgVGhlIGRvY3VtZW50IHNheXMgd2hhdCBpdCBtZWFucyBhbmQgbWVhbnMgd2hhdCBpdCBzYXlz IGluIHRoaXMgcmVnYXJkcy4gSWYgeW91IGZpbmQgdGhlIHRleHQgY29uZnVzaW5nLCB3ZSBjYW4g dHJ5IHRvIGNsYXJpZnkgaXQgc29tZWhvdy48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsgYW5kIGIpIHRoYXQncyByZWFsbHkgZXJyb3ItcHJvbmUgYmVjYXVzZSBpdCdz IHJlYWxseSBoYXJkIHRvIHRlbGwgaWYgdGhlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgY29uZXh0 IGhlYWRlciBhY3R1YWxseSBob2xkcyB0aGUgaW5mb3JtYXRpb24gdGhhdCB5b3UgbmVlZCBvciBq dXN0IHJhbmRvbSBjcmFwPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgSXMg 4oCcY3JhcOKAnSBhIHRlY2huaWNhbCB0ZXJtIGhlcmU/PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7IChvZiBjb3Vyc2UgZGVwZW5kaW5nIG9mIHRoZSBleHBlY3RlZCBk YXRhIHR5cGUgb2YgdGhpcyBpbmZvcm1hdGlvbikuIEluIHNob3J0LDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7IEkgdGhpbmsgeW91IHJlYWxseSBuZWVkIGEgdHlwZSBmaWVsZCBzb21ld2hlcmUgaGVy ZS48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBNaXJqYSwgdGhlcmXigJlz IHNlbGYtZGVzY3JpYmluZyBkYXRhIGFuZCBub24tc2VsZi1kZXNjcml2aW5nIGRhdGEuIEJvdGgg aGF2ZSB0aGVpciBwbGFjZSBhbmQgY2FuIGJlIHVzZWQgYmFzZWQgb24gd2hhdCBhIHByb3RvY29s IGlzIG9wdGltaXppbmcuIFRoaXMgdGV4dCBkZXNjcmliZWQgYSB1c2Ugb2YgdGhlIGxhdHRlci48 YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgSW4gYW55IGNhc2UsIHlv dSByZWFsbHk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBuZWVkIHRvIGV4cGxhaW4gdGhpcyBtb3Jl ISBBbHNvLCB0aGUgdGV4dCBmdXJ0aGVyIHNheXM6ICZxdW90O0FuIFNGIG9yIFNGQyBQcm94eTxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7IHRoYXQgZG9lcyBub3Qga25vdyB0aGUgZm9ybWF0IG9yIHNl bWFudGljcyBvZiB0aGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBDb250ZXh0IEhlYWRlciBmb3Ig YW4gTlNIIHdpdGggTUQgVHlwZSAxIE1VU1QgZGlzY2FyZCBhbnkgcGFja2V0IHdpdGg8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyBzdWNoIGFuIE5TSOKApiZxdW90OzxiciBjbGFzcz0iIj4NCiZndDs8 YnIgY2xhc3M9IiI+DQomZ3Q7IEkga2VlcCByZWFkaW5nIHRoZXNlIGNvdXBsZSBvZiBzZW50ZW5j ZXMgYW5kIEkgdW5kZXJzdGFuZCB3aGF0IHRoZXkgc2F5LiBTbyBJIGFtIG5vdCBwb3NpdGl2ZSBh dCB0aGlzIHBvaW50IGhvdyB0byBoZWxwIG91dC48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNz PSIiPg0KJmd0OyZndDsgSG93IGRvZXMgdGhlIFNGQyBwcm94eSBrbm93IHRoYXQgaXQga25vd3Mg dGhlIGZvcm1hdCBvciBub3QgaWYgdGhlcmUgaXMgbm8gdHlwZTxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7IGZpZWxkIG9yIGlkZW50aWZpZXIgdGhhdCBpbmRpY2F0ZXMgd2hhdCB0aGUgZm9ybWF0IHNo b3VsZCBiZT88YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBTYW1lIGFzIHRo ZSBmaXJzdCBzZW50ZW5jZSB5b3UgaW5jbHVkZWQgaW4gdGhpcyBESVNDVVNTIGl0ZW0gIzI6PGJy IGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgJnF1b3Q7QW4gU0ZDLWF3YXJlIFNG IE1VU1QgcmVjZWl2ZSB0aGUgZGF0YSBzZW1hbnRpY3MgZmlyc3QgaW4gb3JkZXIgdG88YnIgY2xh c3M9IiI+DQomZ3Q7IHByb2Nlc3MgdGhlIGRhdGEgcGxhY2VkIGluIHRoZSBtYW5kYXRvcnkgY29u dGV4dCBmaWVsZC7igJ08YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBTaW5j ZSBhbiBTRkMgcHJveHkgYWN0cyBhcyBhbiBTRkMtYXdhcmUgU0YuIFRoYXQgaXMgY2xlYXIgaW4g dGhlIGRvY3VtZW50LjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IFRoYXQg c2FpZCwgSSB3aWxsIGFkZCB0aGUgZm9sbG93aW5nIHRvIG1ha2UgaXQgdW5hbWJpZ3VvdXNseSBj bGVhcjo8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4N CiZndDsgJnF1b3Q7QW4gU0ZDLWF3YXJlIFNGIG9yIFNGIFByb3h5IE1VU1QgcmVjZWl2ZSB0aGUg ZGF0YSBzZW1hbnRpY3MgZmlyc3QgaW4gb3JkZXIgdG88YnIgY2xhc3M9IiI+DQomZ3Q7IHByb2Nl c3MgdGhlIGRhdGEgcGxhY2VkIGluIHRoZSBtYW5kYXRvcnkgY29udGV4dCBmaWVsZC7igJ08YnIg Y2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBBbmQ8YnIgY2xhc3M9IiI+DQomZ3Q7 PGJyIGNsYXNzPSIiPg0KJmd0OyBPTEQ6PGJyIGNsYXNzPSIiPg0KJmd0OyBpbmNsdWRlZCBkYXRh LiZuYnNwOyBIb3cgYW4gU0ZDLWF3YXJlIFNGIGdldHMgdGhlIGRhdGEgc2VtYW50aWNzIGlzPGJy IGNsYXNzPSIiPg0KJmd0OyBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24u 4oCdPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgTkVXOjxiciBjbGFzcz0i Ij4NCiZndDsgaW5jbHVkZWQgZGF0YS4mbmJzcDsgSG93IGFuIFNGQy1hd2FyZSBTRiBvciBTRkMg UHJveHkgZ2V0cyB0aGUgZGF0YSBzZW1hbnRpY3MgaXM8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwv ZGl2Pg0KJmd0OyBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24u4oCcPGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhlIHByb2JsZW0gaXMsIGV2ZW4gaWYgSSBoYXZl IHJlY2VpdmVkIHNvbWUgc2VtYW50aWNzIGhvdyBkbyBJIGtub3cgdGhhdCBJIGhhdmUgdGhlIHJp Z2h0IHNlbWFudGljcz88c3BhbiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L3NwYW4+PC9ibG9j a3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+VGhlIGNvbnRyb2wtcGxhbmUgd291bGQgcGFzcyB0aGUgc2VtYW50aWMgYXNzb2NpYXRlZCB3 aXRoIHRoZSBwYXJ0aWN1bGFyIFNlcnZpY2UgRnVuY3Rpb24gUGF0aC48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+Jm5ic3A7PC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luOjAgMCAwIC44ZXg7 Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFleCIgY2xhc3M9ImdtYWls X3F1b3RlIj4NCjxzcGFuIGNsYXNzPSIiPiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OzxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7IEFsc28sIGEgcmVsYXRlZCBxdWVzdGlvbiBmcm9tIG1lOiB3aHkg aXMgdGhlIGNvbnRleHQgaGVhZGVyIHByZXNlbnQgaW4gYWxsPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsgdHlwZXMgb2YgTlNIIGlmIHRoZXJlIGlzIG5vIHVzZSBmb3IgaXQgZGVmaW5lZCBpbiB0aGlz IGRvY3VtZW50IHlldD8gV2h5IGlzPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgdGhlcmUgbm8gZml4 ZWQgbGVuZ3RoIE5TSCB3aXRob3V0IGEgY29udGV4dCBoZWFkZXIgdGhlbj88YnIgY2xhc3M9IiI+ DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBUaGlzIGRvY3VtZW50IGRlZmluZXMgdHdvIENvbnRl eHQgSGVhZGVyIFR5cGVzOiBmaXhlZCBzaXplLCBhbmQgVExWLWJhc2VkLiBUaGVyZSBpcyBub3Qg bmVlZCwgYXMgZmFyIGFzIHRoZSBXRyBoYWQgY29uY2x1ZGVkLCBmb3IgYSBmaXhlZCBzaXplIG5v IG1ldGFkYXRhIE1EIFR5cGUuPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsg V2hhdCB5b3UgZGVzY3JpYmUgY2FuIGJlIGFjaGlldmVkIHdpdGggTUQgVHlwZSAyIExlbmd0aCA9 IDIuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9zcGFuPkluIHRoaXMgY2FzZSBJIGRv buKAmXQgcmVhbGx5IHVuZGVyc3RhbmQgd2h5IFR5cGUgMSBpcyBuZWVkZWQgZm9yLiBUaGlzIGlz IG5vdCBhIGJsb2NraW5nIHBvaW50IGJ1dCBtYXliZSB0aGUgZHJhZnQgY291bGQgZXhwbGFpbiwg d2hhdCBraW5kIG9mIG9wdGltaXphdGlvbnMgYXJlIGV4cGVjdGVkIHdpdGggVHlwZSAxL3doeSBp cyBpdCB1c2VmdWwuLj88YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JdCBpcyBhbiBvcHRpbWl6YXRp b24gZm9yIHNvbWUgaGFyZHdhcmUgcHJvY2Vzc2luZy4gVGhlIHR3byB0eXBlcyBhcmUgcGFydCBv ZiBhIGNvbXByb21pc2UgZGlzY3Vzc2lvbiB0aGF0IGhhcHBlbmVkIGEgbnVtYmVyIG9mIHllYXJz IGFnby48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+ DQo8ZGl2PldoYXQgQWxpYSBzYWlkLiAoV2l0aCB0aGFua3MgdG8gQWxpYSk8L2Rpdj4NCjxiciBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgZGlyPSJsdHIiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPg0K PGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbjowIDAg MCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDoxZXgiIGNsYXNz PSJnbWFpbF9xdW90ZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iaDUiPiZndDs8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDMpIFNlY3Rpb24gMi41 LjE6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgJnF1b3Q7SWYgbXVsdGlwbGUgaW5zdGFuY2VzIG9m IHRoZSBzYW1lIG1ldGFkYXRhIGFyZSBpbmNsdWRlZCBpbiBhbiBOU0g8YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyBwYWNrZXQsIGJ1dCB0aGUgZGVmaW5pdGlvbiBvZiB0aGF0IGNvbnRleHQgaGVhZGVy IGRvZXMgbm90IGFsbG93IGZvcjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IGl0LCB0aGUgU0ZDLWF3 YXJlIFNGIE1VU1QgcHJvY2VzcyB0aGUgZmlyc3QgaW5zdGFuY2UgYW5kIGlnbm9yZTxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7IHN1YnNlcXVlbnQgaW5zdGFuY2VzLiZxdW90OzxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7IFRoaXMgc2VlbXMgZXJyb3IgcHJvbmUgdG8gbWUuIElmIHRoZSBzYW1lIG1ldGFk YXRhIGFwcGVhcnMgbXVsdGlwbGUgd2hlcmUgaXQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBzaG91 bGQgbm90LCB0aGF0IHNlZW1zIGNsZWFybHkgbGlrZSBhbiBlcnJvciBjYXNlIGZvciBtZS4gSnVz dCB1c2luZyB0aGUgZmlyc3Q8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBvbmUgYW5kIHByb2NlZWQg bm9ybWFsbHkgbWlnaHQgbm90IGJlIHRoZSByaWdodCB0aGluZyB0byBkby4gSW4gYW55IGNhc2Ug STxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IHRoaW5rIHN1Y2ggYW4gb2NjYXNpb24gc2hvdWxkIGF0 IGxlYXN0IGJlIGxvZ2dlZC48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBP Sywgd2lsbCBhZGQgb3B0aW9uYWwgbG9nZ2luZyBhbmQgZXJyb3IgY291bnRpbmcgb2YgdGhlIHBv dGVudGlhbGx5IGVycm9yIGNhc2UgZXZlbnQuPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7IElmIHRoZSBtdWx0aXBsZSBpbnN0YW5jZXMgYXJlPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsganVzdCBhIGNvcHkgb2YgZWFjaCBvdGhlciBhbmQgY2FycnkgdGhlIHNhbWUgaW5m b3JtYXRpb24sIGl0J3MgcHJvYmFibHkgb2theSB0bzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IHVz ZSB0aGF0IGluZm9ybWF0aW9uIGFuZCBwcm9jZWVkLiBJZiB0aGUgZGlmZmVyZW50IGluc3RhbmNl cyBjYXJyeSBkaWZmZXJlbnQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBpbmZvcm1hdGlvbiwgaXQg bWF5YmUgYSBiaXQgZGFuZ2Vyb3VzIHRvIGp1c3QgdXNlIHRoZSBmaXJzdCBvbmUgYW5kIGlnbm9y ZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IG90aGVycyBzaWxlbnRseS4gSW4gdGhpcyBjYXNlIEkg d291bGQgcmF0aGVyIHJlY29tbWVuZCB0byBkcm9wIHRoZSBwYWNrZXTigKY8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDQpIEluIGxpbmUgd2l0aCB0aGUgc2Vj b25kIGNvbW1lbnQgZnJvbSB0aGUgdHN2LWFydCByZXZpZXcgKHRoYW5rcyBXZXMhKSwgSTxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7IGRvbid0IHJlYWxseSB1bmRlcnN0YW5kIHdoeSB0aGlzIGRvY3Vt ZW50cyBzYXlzIChzZWMgNikgdGhhdCB0aGVyZSBjYW4gYmU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyBtdWx0aXBsZSBuZXh0IGhvcHMgZm9yIHRoZSBzYW1lIFNGUCBvciBTRnMgY2FuIGJlIHRyYXZl cnNlZCBpbiBhIGRpZmZlcmVudDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IG9yZGVyLiBNYXkgdW5k ZXJzdGFuZGluZyAoZnJvbSBhIHF1aWNrIGxvb2sgYXQgUkZDNzY2NSkgd291bGQgYmUgdGhhdCwg aWYgdGhvc2U8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyB0aGluZ3MgYXJlIG5lZWRlZCBlLmcuIGZv ciBsb2FkIGJhbGFuY2luZywgdGhlbiBvbmUgc2hvdWxkIGRlZmluZSBkaWZmZXJlbnQ8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyBTRlBzIGFuZCB0aGUgQ2xhc3NpZmllciBtdXN0IGhhdmUgdGhlIGtu b3dsZWRnZSB0aGF0IHR3byBTRlAgYXJlIGVxdWl2YWxlbnQgYW5kPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsgc2VsZWN0IHRoZW0gcmVzcGVjdGl2ZWx5LjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xh c3M9IiI+DQomZ3Q7IE5vdCByZWFsbHkuIExpa2UgeW91IHNhaWQsIGZvciBMQi48YnIgY2xhc3M9 IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgVGhlIHJlYXNvbiB3aHkgSSdtIHJlYWxs eSBjb25jZXJuZWQgYWJvdXQgdGhpcyBpczxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IHRoYXQgdXN1 YWxseSBhIG51bWJlciBvZiBwYWNrZXRzIGJlbG93IHRvIGEgZmxvdyBhbmQgYWxsIHBhY2tldHMg YmVsb25naW5nIHRvPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgdGhlIHNhbWUgZmxvdyBqdXN0IGlk ZWFsbHkgdGFrZSB0aGUgc2FtZSByb3V0ZS4gQnV0IHVzdWFsbHkgb25seSB0aGUgQ2xhc3NpZmll cjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IGhhcyBhIG5vdGlvbiBvZiB3aGF0IGEgZmxvdyBpcyBh bmQgcmVzcGVjdGl2ZWx5IHdpbGwgYXNzaWduIHRoZSBTRkkgdG8gdGhlPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsgcGFja2V0cyBiZWxvbmdpbmcgdG8gdGhlIHNhbWUgZmxvdy4gSWYgbm93IGFueSBT RiBvbiB0aGUgcGF0aCBjYW4gbW9yZSBvciBsZXNzPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgcmFu ZG9tbHkgZGVjaWRlZCB0byBmb3J3YXJkIHBhY2tldCBiZWxvbmcgdG8gdGhlIHNhbWUgZmxvdyB0 byBvbmUgb3IgYW5vdGhlcjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IG5leHQgbm9kZXMsIEkgd291 bGQgYXNzdW1lIHRoYXQgdGhpcyBpcyBub3Qgb25seSBhIHByb2JsZW0gZm9yIHRoZSBmbG93LCBl LmcuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgcmVvcmRlcmluZywgYnV0IGFsc28gZm9yIFNGIGl0 c2VsZiBpbiBtYW55IGNhc2VzLjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7 IDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3NjY1I3NlY3Rpb24tNS41 IiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj4NCmh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC88d2JyIGNsYXNzPSIiPnJmYzc2NjUjc2VjdGlvbi01LjU8L2E+PGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NClRoYXTigJlzIGZpbmUg aW4gdGhlb3J5LiBJbiByZWFsaXR5LCBlc3BlY2lhbGx5IGUuZy4gZm9yIHRoZSB3ZWIgc2VydmVy IGNhc2UgeW91IG5lZWQgdG8gbWFrZSBzdXJlIHRoYXQgYWxsIHBhY2tldHMgYmVsb25naW5nIHRv IHRoZSBzYW1lIGZsb3cgZ28gdG8gdGhlIHNhbWUgZWxlbWVudC4gSSB0aG91Z2h0IGl0IHdvdWxk IGFjdHVhbGx5IGJlIGVhc2llciB0byB1c2UgZGlmZmVyZW50IFNGUHMgc3VjaCB0aGF0IG9ubHkg dGhlIENsYXNzaWZpZXIgbXVzdA0KIGJlIGZsb3ctYXdhcmUuIElmIHRoYXTigJlzIG5vdCB0aGUg Y2FzZSBvdGhlciBub2RlcyBhbHNvIG5lZWQgdG8gYmUgZmxvdy1hd2FyZSBhbmQga2VlcCBmbG93 IHN0YXRlLiBUaGlzIG11c3QgYmUgbWVudGlvbiBpbiB0aGUgZG9jdW1lbnQhPC9ibG9ja3F1b3Rl Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhl IGFyY2hpdGVjdHVyZSBpcyBjbGVhciB0aGF0IHRoZSBhc3NpZ25tZW50IG9mIGZsb3dzIHRvIHBh cnRpY3VsYXIgU2VydmljZSBGdW5jdGlvbnMgY2FuIGhhcHBlbiBhdCBhIHZhcmlldHkgb2YgZGlm ZmVyZW50IHBvaW50cy4mbmJzcDsgT25lIG9mIHRoZSBtb3RpdmF0aW9ucyBmb3IgY2Fycnlpbmcg bWV0YS1kYXRhIGlzIHRvIGFsbG93IGEgY2xhc3NpZmllciB0byBpbnNlcnQgaW5mb3JtYXRpb24g aWRlbnRpZnlpbmcgYSBwYXJ0aWN1bGFyDQogZmxvdyBzbyB0aGF0IGFsbCBpdHMgcGFja2V0cyBj YW4gYmUgcHJvcGVybHkgbG9hZC1iYWxhbmNlZCB0byB0aGUgc2FtZSBTZXJ2aWNlIEZ1bmN0aW9u LiZuYnNwOyBJZiB0aGUgQ2xhc3NpZmllciBkb2VzIHRoaXMsIHRoZW4gdGhlcmUgaXMgbm90IGEg bmVlZCBmb3IgZXZlcnkgbG9hZC1iYWxhbmNpbmcgZWxlbWVudCB0byBkbyByZWNsYXNzaWZpY2F0 aW9uLiZuYnNwOzwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5BZ2Fpbiwgd2hhdCBBbGlh IHNhaWQuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5JIHRydXN0IHRo ZXNlIGFyZSBub3cgY2xlYXIgZm9yIHlvdSBub3cuPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8Ymxv Y2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0i bHRyIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj4NCjxkaXYgY2xhc3M9Imdt YWlsX3F1b3RlIj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luOjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mg c29saWQ7cGFkZGluZy1sZWZ0OjFleCIgY2xhc3M9ImdtYWlsX3F1b3RlIj4NCjxzcGFuIGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LTx3YnIgY2xhc3M9IiI+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPHdiciBjbGFzcz0i Ij4tLS0tLS0tLS0tPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgQ09NTUVOVDo8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08d2JyIGNsYXNzPSIiPi0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTx3YnIgY2xhc3M9IiI+LS0tLS0tLS0tLTxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgRnVydGhlciBjb25zaWRl cmF0aW9uczo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDEp IEkgZG9uJ3QgcmVhbGx5IHNlZSB3aHkgYSBUVEwgaW4gdGhlIGJhc2UgaGVhZGVyIGlzIG5lZWRl ZC4gSSBtb3N0bHk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyB1bmRlcnN0YW5kIHdoeSB0aGVyZSBp cyB0aGUgU2VydmljZSBJbmRleCBpbiBzZXJ2aWNlIGhlYWRlciwgYWxzbyBJIHRoaW5rIHRoZXJl PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgc2hvdWxkIGJlIGJldHRlciBtZWFuIHRvIHZhbGlkYXRl IHRoYXQgeW91IFNGUCBpcyBjb3JyZWN0IGFuZCBJIGlkZWFsbHkgeW91PGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsgc2hvdWxkIHJlYWxseSBub3QgbmVlZCB0aGlzLiBIb3dldmVyLCBsb29wIHByZXZl bnRpb24gY2FuIGJlIHByb3ZpZGVkIGJ5IGJvdGg8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBtZWNo YW5pc20gYW5kIG1vcmVvdmVyIHRoZXJlIGlzIHByb2JhYmx5IGFsc28gb2Z0ZW4gYSBUVEwgaW4g dGhlIGVuY2Fwc3VsYXRpb248YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBwcm90b2NvbCBhbmQgbG9v cCBwcmV2ZW50aW9uIHNob3VsZCByZWFsbHkgYmUgYSBmdW5jdGlvbiBvZiB0aGF0IGZvcndhcmRp bmc8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBwcm90b2NvbCBhbmQgbm90IHRoZSBOU0guPGJyIGNs YXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgVGhlIFdHIGhhZCBhIHN0cm9uZyB2b2lj ZSBvbiB0aGUgbmVlZCBvZiB0aGlzIGZpZWxkLjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9 IiI+DQomZ3Q7IChJIGRvIG5vdCBkaXNhZ3JlZSB3aXRoIHlvdSk8YnIgY2xhc3M9IiI+DQomZ3Q7 PGJyIGNsYXNzPSIiPg0KJmd0OyBCdXQgdGhlcmUgYXJlIGNhc2VzIHdoZXJlIFNJIGlzIG5vdCBk ZWNyZW1lbnRlZCwgbm9yIGlzIHRoZSBlbmNhcHN1bGF0aW9uLWxldmVsIFRUTC48YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQo8L3NwYW4+V2hpY2ggYXJlIHRoZXNlIGNhc2VzPzwvYmxvY2tx dW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PlRoZSBTZXJ2aWNlIEluZGV4IGlzIGFsd2F5cyBkZWNyZW1lbnRlZCBieSB0aGUgU2VydmljZSBG dW5jdGlvbi48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+U2luY2UgYSBDbGFzc2lmaWVyIGNhbiBvdmVy d3JpdGUgd2l0aCBhIG5ldyBTRlAgYW5kIFNJLCBpdCBpcyBwb3NzaWJsZSwgaW4gdGhlb3J5LCB0 byBnZXQgbG9vcHM8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+d2hlcmUgYSBwYWNrZXQgbW92ZXMgYWxv bmcgdGhlIG5ldyBTRlAgYW5kIHRoZW4gZ2V0cyByZWNsYXNzaWZpZWQgYmFjayBpbnRvIHRoZSBs b29wLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGUgU2VydmljZSBJbmRleCB0ZXJtaW5hdGVzIGxv b3BzIHdpdGhpbiBhIHBhcnRpY3VsYXIgU0ZQLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGUgVFRM IHRlcm1pbmF0ZXMgbG9vcHMgd2l0aGluIHRoZSBzZXJ2aWNlIG92ZXJsYXkgcGxhbmUgLSByZWdh cmRsZXNzIG9mIGhvdyBtYW55IGRpZmZlcmVudDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5TRlBzIHRo YXQgbWF5IGludm9sdmUuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj5JdCBpcyBhIHN1YnRsZSwgYnV0IGNyaXRpY2FsLCB0ZWNobmljYWwg bmVjZXNzaXR5IHRoYXQgd2FzIHJlY29nbml6ZWQgYW5kIGFkZGVkIGFib3V0IDEwIG1vbnRocyBh Z28uPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOzwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdj5FeGFjdGx5LjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0 ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+DQo8Ymxv Y2txdW90ZSBzdHlsZT0ibWFyZ2luOjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29s aWQ7cGFkZGluZy1sZWZ0OjFleCIgY2xhc3M9ImdtYWlsX3F1b3RlIj4NCjxzcGFuIGNsYXNzPSIi PiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDIpIEkg ZG9uJ3Qgc2VlIHdoeSB5b3UgbmVlZCB0aGUgdHlwZSBmaWVsZCBpbiB0aGUgYmFzZSBoZWFkZXIu IFRoaXMgaXMgZnVsbHk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyByZWR1bmRhbnQgYmVjYXVzZSBi ZWNhdXNlIGFsbCB5b3UgbmVlZCBpcyB0aGUgbGVuZ3RoIGZpZWxkLiBJZiB0aGUgbGVuZ3RoIGlz PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgMHgyIGl0IGlzIHdoYXQgeW91IGhhdmUgZGVmaW5lZCBh cyB0eXBlIDEgaWYgdGhlIGxlbmd0aCBmaWVsZCBpcyBsYXJnZXIgaXQgaXM8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyB0eXBlIDIuPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsg VGhhbmtzIGZvciB0aGUgYXR0ZW1wdCBhdCBvdmVybG9hZGluZywgYnV0IG5vLiBMZW5ndGggPSA2 PzxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvc3Bhbj5XaGF0PzxzcGFuIGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvc3Bhbj48L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5BbiBNRC10eXBlIDIgcGFja2V0IG1pZ2h0 IGhhdmUgYSBsZW5ndGggb2YgNiBiZWNhdXNlIG9mIDQgMzItYnl0ZSB3b3JkcyBvZiBUTFY8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+bWV0YS1kYXRhIHZhbHVlLiZuYnNwOyBJdCBpc24ndCBwb3NzaWJs ZSB0byB1c2UgdGhlIGxlbmd0aCB0byBkaXNhbWJpZ3VhdGUuJm5ic3A7PC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2PkV4YWN0bHkuJm5ic3A7PC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdj5BbmQgZXZlbiBpZiBpdCB3ZXJlIHBvc3NpYmxlLCB3aHkgb3ZlcmxvYWQ/ IFdoYXQgaWYgd2UgaGF2ZSBhbiBNRCBUeXBlIDMgcHJvcG9zYWw/PC9kaXY+DQo8YnIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj4NCjxkaXYg Y2xhc3M9ImdtYWlsX3F1b3RlIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+ DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luOjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNj Y2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFleCIgY2xhc3M9ImdtYWlsX3F1b3RlIj4NCjxzcGFuIGNs YXNzPSIiPiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBJIGFsc28gZG9uJ3Qgc2VlIHRoZSBu ZWVkIGZvciBhbnkgb3RoZXIgdHlwZXMgaW4gZnV0dXJlIGJlY2F1c2UgeW91PGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsgYWxzbyBoYXZlIHRoZSB2ZXJzaW9uIGZpZWxkOzxiciBjbGFzcz0iIj4NCiZn dDs8YnIgY2xhc3M9IiI+DQomZ3Q7IE5PLjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+ DQomZ3Q7IFdlIGRvICpub3QqIHdhbnQgdG8gYnVtcCB1cCB0aGUgVmVyc2lvbiBmaWVsZCBmb3Ig dGhlIHdob2xlIHByb3RvY29sIHdoZW4gcG90ZW50aWFsbHkgYWRkaW5nIGEgbmV3IE1EIFR5cGUu PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9zcGFuPldoeT8gVXNpbmcgYSBuZXcgdmVy c2lvbiBkb2VzIGhhdmUgdG8gYmUgc29tZXRoaW5nIGNvbXBsaWNhdGVkL2hlYXZ5LiBJZiB5b3Ug ZG9u4oCZdCB1c2UgaXQgZm9yIHN1Y2ggY2FzZXMsIHdoZW4gd291bGQgeW91IHVzZSBpdCB0aGVu PzxzcGFuIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvc3Bhbj48L2Jsb2NrcXVvdGU+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGUgZmxleGli aWxpdHkgaW4gdGhlc2UgZmllbGRzIGFuZCBoYXZpbmcgYSB2ZXJzaW9uIG51bWJlciBpcyBmb3Ig ZnV0dXJlLXByb29maW5nLiBPbmNlIGFuIGVuY2Fwc3VsYXRpb24gaXMgYnVybnQ8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+aW50byBzaWxpY29uLCBpdCBpcyBleHRyZW1lbHkgaGFyZCB0byBnbyBiYWNr IGFuZCBhZGQgc3VjaCB0aGluZ3MgaW4uJm5ic3A7PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 ZGl2PlJpZ2h0LiBBbmQgdGhhbmtzIGFnYWluIEFsaWEuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdj7igJQgQ2FybG9zLjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2Nr cXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0 ciIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+DQo8ZGl2IGNsYXNzPSJnbWFp bF9xdW90ZSI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj5SZWdhcmRzLDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5BbGlhPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPiZuYnNwOzwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_E1ED7F89CF3B482AAE3BE70A0FEC785Aciscocom_-- From nobody Fri Oct 6 14:40:57 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B240413319E; Fri, 6 Oct 2017 14:40:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.88 X-Spam-Level: X-Spam-Status: No, score=-1.88 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 10pkPyaJqCCm; Fri, 6 Oct 2017 14:40:53 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D09513307F; Fri, 6 Oct 2017 14:40:53 -0700 (PDT) Received: from [10.0.1.82] (cpe-66-25-7-22.tx.res.rr.com [66.25.7.22]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id v96LelrR019553 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Fri, 6 Oct 2017 16:40:47 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-66-25-7-22.tx.res.rr.com [66.25.7.22] claimed to be [10.0.1.82] Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.6\)) From: Ben Campbell In-Reply-To: <7E591A3D-11F7-4CAA-A998-0E6EEB9DC2C9@cisco.com> Date: Fri, 6 Oct 2017 16:40:46 -0500 Cc: The IESG , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , "sfc@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <150656415366.13695.13637551894724173929.idtracker@ietfa.amsl.com> <41E4256A-C77E-4693-AB3C-798ADE7346EC@cisco.com> <7E591A3D-11F7-4CAA-A998-0E6EEB9DC2C9@cisco.com> To: "Carlos Pignataro (cpignata)" X-Mailer: Apple Mail (2.3445.1.6) Archived-At: Subject: Re: [sfc] Ben Campbell's No Objection on draft-ietf-sfc-nsh-24: (with COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Oct 2017 21:40:56 -0000 Hi, comments inline: > On Oct 3, 2017, at 11:33 AM, Carlos Pignataro (cpignata) = wrote: >>=20 >> [=E2=80=A6] >>>=20 >>>>=20 >>>> -2.2, MD type 0x0: "Implementations SHOULD silently >>>> discard packets with MD Type 0x0." >>>> Why not MUST? >>>=20 >>> Because we do not want a hammer larger than needed. SHOULD achieves = our goal without locking the door for good, should valid reasons be = found. >>>=20 >>=20 >> Do you envision situations where it might make sense to _not_ drop = such packets? If so, it would be helpful to mention that in the text. >>=20 >=20 > I do not. Although I/we do not envision them now, someone might in the = future (drop loudly, find situations to quarantine them, tunnel them to = a sink for something not silently drop, etc) Okay. I think an example or two like that in the text would be helpful. = I=E2=80=99m not looking for anything constraining. (Keep in mind these = are all non-blocking comments :-) ) >=20 >>=20 >>>>=20 >>>> -- MD type 0xF: "Implementations not explicitly configured to be = part of >>>> an experiment SHOULD silently discard packets with MD Type 0xF." >>>> Why not MUST? >>>=20 >>> Ditto. >>=20 >> Also ditto :-) >=20 > Idem. :-) that :-) >=20 >>=20 >>>=20 >>>>=20 >>>> -2.2, Next Protocol Values: >>>> Why are there 2 experimental values? (as opposed to 1, or, well, = 3). >>>=20 >>> No particular reason. One seems not enough potentially for creative = experimentation. >>>=20 >>> My favorite number is 27, but we felt that was too many :-) >>=20 >> Okay :-) >>=20 >=20 > Given the field is an octet, we felt 2 was enough but not too many. 1 = seemed too small of a number. This also coincides with how Experimental = values are reserved for other octet values. For example, RFC 4727, = Sections 2.3 and 3.3, and RFC 3692 = >=20 > Is there a particular reason why you ask? Only that I usually see either one value or a range of values marked = =E2=80=9Cexperimental=E2=80=9D, so 2 seemed odd. >=20 >>=20 >>>=20 >>>>=20 >>>> -2.3, last paragraph (and several other places): >>>> This draft seems to take a position that a failed SFP means the = service level >>>> flow fails. Are there no use cases where delivery of the service = flow is >>>> critical and should happen even if the chain of middleboxes fails? >>>=20 >>> The issue is that with SI=3D0 there is no next SF to deliver. >>=20 >> Maybe there=E2=80=99s no next SF, but one assumes the encapsulated = packet is addressed to an end-system of some sort, which may or may not = be part of the SFP? Are there never situations where it would make sense = to give up on the SFP but still route the content to its destination? >>=20 >=20 > I cannot think of any. Seems like a risk of leakage. Okay, It might be worth a mention somewhere that this draft assumes that = a failure of the service path means a failure to deliver the packets to = the end-system. [=E2=80=A6] >=20 >> [=E2=80=A6] >>=20 >>>=20 >>>>=20 >>>> Editorial: >>>>=20 >>>> -2.2, "O bit", last paragraph: "The configurable parameter MUST be >>>> disabled by default." >>>> Does "disabled" mean "unset" (or "set to zero=E2=80=9D)? >>>=20 >>> No. It means disabled. >>=20 >> I don=E2=80=99t understand how you disable a bit. The bit is still = there and readable either way, right? >>=20 >=20 > The bit is still there, readable, and it can still take either of two = values: 0, and 1, as in Section 2 of RFC 3514 :-) >=20 > But, the sentence you copied does not have any mention of =E2=80=9Cdisab= ling a bit=E2=80=9D. It is talking about =E2=80=9Cdisabling a = configuration parameter=E2=80=9D. >=20 > The same paragraph, earlier, says =E2=80=9Ca configurable parameter to = enable forwarding=E2=80=9D. That parameter MUST be disabled by default. Ah, misread. I thought the =E2=80=9CO-bit=E2=80=9D was the parameter, = but we are talking about a configurable parameter about how you react to = the O-bit. I would argue that the behavior indicated by the parameter is = disabled, rather than the parameter itself, but that=E2=80=99s less = confusing than =E2=80=9Cdisabling the O-bit=E2=80=9D as I originally = read things. >=20 >>>=20 >>>>=20 >>>> -2.2, "unassigned bits": "At reception, all >>>> elements MUST NOT modify their actions based on these unknown = bits." >>>> Isn't that MUST NOT just a restatement of the "MUST ignore" from = the previous >>>> sentence? There's no problem with reinforcing a point, but there = shouldn't be >>>> multiple instances of the same 2119 requirement. Also, would = logging a warning >>>> violate the "MUST NOT modify their actions/MUST ignore" = requirement? >>>=20 >>> It is slightly different. >>=20 >> How is it different? >=20 > The former says =E2=80=9Cdo not change the bits, ignore them=E2=80=9D. = The latter says =E2=80=9Cdo not change your actions based on the value = of those bits, ignore them. The ignore them part is common, but they are = different because one refers to the packet and the other to the actions. I interpreted =E2=80=9Cignore=E2=80=9D to mean =E2=80=9Cdon=E2=80=99t = pay attention to them=E2=80=9D, in addition to =E2=80=9Cpreserved = unmodified=E2=80=9D meaning =E2=80=9Cdon=E2=80=99t change them." >=20 >>=20 >> Any comment on whether logging violate the "MUST NOT modify actions" = requirement?? >>=20 >=20 > Sorry I thought I had commented on that. >=20 > Logging would not violate that requirement because there is no logging = that is based on the values of those bits. Basically, logging does not = change the bits, and an SFP element does not decide to log or not based = on the value of those bits. I meant logging a warning that you received a packet with a non-zero = value. Thanks! Ben. From nobody Fri Oct 6 15:58:15 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C028C13306B; Fri, 6 Oct 2017 15:58:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d9aVTXE1Pbiy; Fri, 6 Oct 2017 15:58:11 -0700 (PDT) Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D0D9132F7C; Fri, 6 Oct 2017 15:58:11 -0700 (PDT) Received: by mail-wm0-x232.google.com with SMTP id q124so10289726wmb.0; Fri, 06 Oct 2017 15:58:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Rm7IMpUzw0M9W92GXA51JetbXYr4J2s9flvL8kBvges=; b=XqVkXs9EBsBMYVSJ3+Msp2ZLQiShlwE++OePWjh12ocNBCyKjyXKKKlFZNTMvZ3E4T 1wZkM+HOthk0auQPYi+OHx4gTWFdfNL8hF/YJ+kEBFnNLrXaT3b3ww0R+irmErBXYqhk GnKNZlM41n3T+LURLxW+ZOGbBNLsDXtvw8CeU9vyVPUL8Mvq9KDg+BwVvq8iWxU2x6aS ULkTt1YGjDra5TCMT+VyAZgx+9MJF1eqXovsRqt+BQTaSbC1cCWp/8Cn7WvcS0eNXTP+ cu3oMvDCleJZZoee0Ok6hhlSETc8vG3SFXOMsu4PsSj7UJxZIS2OJgfhhP0CZfdRSb2j QU0g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Rm7IMpUzw0M9W92GXA51JetbXYr4J2s9flvL8kBvges=; b=LbJ5BWICfFdFXaCMmAM3zTiznc46P7kCdvqMtFhKTyIGrpbR5wIaCJZ67U+zyzBasi 2TbpFZpeBoj6qNdL5L3eS1e2wbMM8gfXlt1snim1AuoNBc2w7SX5pKxM2GWsCP/OGSe7 sgiduUiQKfw9mJgjy/e4LOT+0ZgNmjZi3/X3gOEeUon9hadUeM2eRA3Ya0D4Gsw8LNxS tLo5H+FW358yghF4dqPBnS/3O09BItUd4O1voWsYYqCUg+FrPQiZU3UN1uYP/z8czWtw /7o9N6tIHfQ2ZL98rFCHkivOQoM4fxvkH7mBb4nKEVfyyaz/A+hXC2ARQiffZcZh3IyP aAbg== X-Gm-Message-State: AMCzsaW7x1JdhHbaVfTyv7smhONTWpn737tZq6AnwAJiABFWvG1DyMBa JaN1RZfghNnpt0+NFddMgq4xekXrBiDTB8UK2jA= X-Google-Smtp-Source: AOwi7QB/ji9bxClVDEBiDMSHwPArfjRBLxgM/v8nWh0DxfTcyQW8FEmxt1mR880/Sjhej+l+QRw2oYv4wI8wbv/nTlM= X-Received: by 10.28.109.29 with SMTP id i29mr2813937wmc.32.1507330689939; Fri, 06 Oct 2017 15:58:09 -0700 (PDT) MIME-Version: 1.0 Received: by 10.223.193.68 with HTTP; Fri, 6 Oct 2017 15:58:09 -0700 (PDT) In-Reply-To: References: <150656415366.13695.13637551894724173929.idtracker@ietfa.amsl.com> <41E4256A-C77E-4693-AB3C-798ADE7346EC@cisco.com> <7E591A3D-11F7-4CAA-A998-0E6EEB9DC2C9@cisco.com> From: Alia Atlas Date: Fri, 6 Oct 2017 18:58:09 -0400 Message-ID: To: Ben Campbell Cc: "Carlos Pignataro (cpignata)" , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Content-Type: multipart/alternative; boundary="001a114788665541e3055ae8c655" Archived-At: Subject: Re: [sfc] Ben Campbell's No Objection on draft-ietf-sfc-nsh-24: (with COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Oct 2017 22:58:14 -0000 --001a114788665541e3055ae8c655 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Ben, On Fri, Oct 6, 2017 at 5:40 PM, Ben Campbell wrote: > Hi, comments inline: > > > On Oct 3, 2017, at 11:33 AM, Carlos Pignataro (cpignata) < > cpignata@cisco.com> wrote: > > >>>> -2.2, Next Protocol Values: > >>>> Why are there 2 experimental values? (as opposed to 1, or, well, 3). > >>> > >>> No particular reason. One seems not enough potentially for creative > experimentation. > >>> > >>> My favorite number is 27, but we felt that was too many :-) > >> > >> Okay :-) > >> > > > > Given the field is an octet, we felt 2 was enough but not too many. 1 > seemed too small of a number. This also coincides with how Experimental > values are reserved for other octet values. For example, RFC 4727, Sectio= ns > 2.3 and 3.3, and RFC 3692 > > > > > Is there a particular reason why you ask? > > Only that I usually see either one value or a range of values marked > =E2=80=9Cexperimental=E2=80=9D, so 2 seemed odd. Bitter experience (reputedly since I don't have the example) talks of early implementations that squat on the 1 experimental value - which then becomes that first feature. In routing, we encourage allocating a small number - to allow for better flexibilty. Regards, Alia --001a114788665541e3055ae8c655 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Ben,

On Fri, Oct 6, 2017 at 5:40 PM, Ben Campbell <<= a href=3D"mailto:ben@nostrum.com" target=3D"_blank">ben@nostrum.com>= wrote:
Hi, comments inline:

> On Oct 3, 2017, at 11:33 AM, Carlos Pignataro (cpignata) <cpignata@cisco.com> wrote:
=
>>>> -2.2, Next Protocol Values:
>>>> Why are there 2 experimental values? (as opposed to 1, or,= well, 3).
>>>
>>> No particular reason. One seems not enough potentially for cre= ative experimentation.
>>>
>>> My favorite number is 27, but we felt that was too many :-) >>
>> Okay :-)
>>
>
> Given the field is an octet, we felt 2 was enough but not too many. 1 = seemed too small of a number. This also coincides with how Experimental val= ues are reserved for other octet values. For example, RFC 4727, Sections 2.= 3 and 3.3, and RFC 3692 <https://tools.ietf.org/ht= ml/rfc3692#section-2.1>
>
> Is there a particular reason why you ask?

Only that I usually see either one value or a range of values marked= =E2=80=9Cexperimental=E2=80=9D, so 2 seemed odd.

Bitter experience (reputedly since I don't have the example) tal= ks of early implementations that squat on the 1 experimental value - which = then becomes that first feature.
In routing, we encourage allocat= ing a small number - to allow for better flexibilty.

Regards,
Alia=C2=A0
--001a114788665541e3055ae8c655-- From nobody Sat Oct 7 02:27:43 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B16871346DD; Sat, 7 Oct 2017 02:27:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5gEBnpBgTAOo; Sat, 7 Oct 2017 02:27:33 -0700 (PDT) Received: from aer-iport-2.cisco.com (aer-iport-2.cisco.com [173.38.203.52]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C95271346D9; Sat, 7 Oct 2017 02:27:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5584; q=dns/txt; s=iport; t=1507368453; x=1508578053; h=subject:to:cc:references:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=l7EuCfA8rnqMZbZdvT2KRtF3od9SgvH11vQf87V8pzQ=; b=Xuqc/KUSfKam5Mt7kyhyYNFyg+uwxDHXeQmjweEkCNY2I9JCrparPdcH oc1yJHdWN37p1htKVeN5cNcaeQ2lcuuiwSmAT2gKJ0kZqLC07htV2cuT+ UrsDsc2CT0yUbHd/NwQY4eF00nqqoGY1ADLBfLRllYksnvjTkC3RYvqNU k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CxAQAIndhZ/xbLJq1SChkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYRBbieDeosTkE6WUQ6CBAoYC4UYAoRgFwECAQEBAQEBAWsohRk?= =?us-ascii?q?CAQMBASEPAQU2CxALEAIIAiMDAgInHwMOBgEMBgIBAYosEKVogieLNAEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBARgFgQ6CH4NTgWorC4JzhFEBBwsBgzKCYQWKEpchh16?= =?us-ascii?q?DX4koghSFb4Nahy2NfIddgTkhATWBAwsyIQgdFUmFFx+BaT42AYcIgjQBAQE?= X-IronPort-AV: E=Sophos;i="5.42,488,1500940800"; d="scan'208";a="655295738" Received: from aer-iport-nat.cisco.com (HELO aer-core-2.cisco.com) ([173.38.203.22]) by aer-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Oct 2017 09:27:30 +0000 Received: from [10.55.221.36] (ams-bclaise-nitro3.cisco.com [10.55.221.36]) by aer-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v979RUAH003964; Sat, 7 Oct 2017 09:27:30 GMT To: mohamed.boucadair@orange.com, The IESG Cc: "j.schoenwaelder@jacobs-university.de" , "draft-ietf-sfc-nsh@ietf.org" , "jmh@joelhalpern.com" , "sfc-chairs@ietf.org" , "sfc@ietf.org" References: <150660694562.13704.5074073969102470694.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93300A04B8EE@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: Benoit Claise Message-ID: <22a4ccbb-ee36-9001-b1aa-cc3564a6b5f2@cisco.com> Date: Sat, 7 Oct 2017 11:27:30 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A04B8EE@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [sfc] Benoit Claise's No Objection on draft-ietf-sfc-nsh-25: (with COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Oct 2017 09:27:36 -0000 Hi Med, > Hi Benoit, > > Please see inline. > > Cheers, > Med > >> -----Message d'origine----- >> De : sfc [mailto:sfc-bounces@ietf.org] De la part de Benoit Claise >> Envoyé : jeudi 28 septembre 2017 15:56 >> À : The IESG >> Cc : j.schoenwaelder@jacobs-university.de; draft-ietf-sfc-nsh@ietf.org; >> jmh@joelhalpern.com; sfc-chairs@ietf.org; sfc@ietf.org >> Objet : [sfc] Benoit Claise's No Objection on draft-ietf-sfc-nsh-25: (with >> COMMENT) >> >> Benoit Claise has entered the following ballot position for >> draft-ietf-sfc-nsh-25: No Objection >> >> When responding, please keep the subject line intact and reply to all >> email addresses included in the To and CC lines. (Feel free to cut this >> introductory paragraph, however.) >> >> >> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html >> for more information about IESG DISCUSS and COMMENT positions. >> >> >> The document, along with other ballot positions, can be found here: >> https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/ >> >> >> >> ---------------------------------------------------------------------- >> COMMENT: >> ---------------------------------------------------------------------- >> >> - Section 2.5.1., you might want to mention that no metadata are specified >> at >> this point in time. > [Med] Aren't these mentions sufficient? > > This specification does not make any assumption about Context Headers > that are mandatory-to-implement or those that are mandatory-to- > process. Now that you stress it, maybe. I was interested to understand whose responsibility it is to specify those. Some such as: This specification does not make any assumption about Context Headers that are mandatory-to-implement or those that are mandatory-to- process. These considerations are deployment-specific. Those optional variable metadata specifications will be specified by xxx for ... And then, is this for a new service, a new application, a new ...? I don't know the right terminology. > > And > > No initial values are assigned at the creation of the registry. > > Indeed, "New IETF Assigned Optional Variable Length >> Metadata Type Registry is specified in this doc., but empty >> >> - Section 2.3 >> OPS question: SPI must be unique per admin domain? Otherwise, you're >> looking >> for trouble, right? This would be typically addressed in an "Operational >> Considerations" section. Where is my "Operational Considerations" >> section...? > [Med] Already covered in the SFC architecture (RFC 7665): > > SFFs maintain the requisite SFP forwarding information. SFP > forwarding information is associated with a service path identifier > that is used to uniquely identify an SFP. I surely missed that when I reviewed the normative references before reviewing this document ..., as I always do ... Any issue to repeat it here? > >> - Section 2.4 >> Fixed length metadata. >> >> This specification does not make any assumptions about the content of >> the 16 byte Context Header that must be present when the MD Type >> field is set to 1, and does not describe the structure or meaning of >> the included metadata. >> >> An SFC-aware SF MUST receive the data semantics first in order to >> process the data placed in the mandatory context field. The data >> semantics include both the allocation schema and the meaning of the >> included data. >> >> I understand that the order of the metadata in the Fixed Length Context >> Header >> is important, right? > [Med] The notion of order in the opaque 16-byte block does not make in this spec. How that block is structured is really out of scope. This is a concept that I missed when reading this spec. I might not be the only one... > > Should it be mentioned? > > [Med] I don't think so. > > I understand that the fixed >> length >> metadata are specific per service, and that's the reason why there is no >> IANA >> for fixed length. Should this be mentioned? > [Med] The agreement in the WG is to publish documents specifying MD#1 as informational documents. IANA is not involved in this process, because there is no expected action with regards to MD#1 context headers. Regards, Benoit > >> - if you publish a new version, change the order of these two paragraphs: >> >> Unassigned bits: All other flag fields, marked U, are unassigned and >> available for future use, see Section 11.2.1. Unassigned bits MUST >> be set to zero upon origination, and MUST be ignored and preserved >> unmodified by other NSH supporting elements. At reception, all >> elements MUST NOT modify their actions based on these unknown bits. >> >> Length: The total length, in 4-byte words, of the NSH including the >> Base Header, the Service Path Header, the Fixed Length Context Header >> or Variable Length Context Header(s). The length MUST be 0x6 for MD >> Type equal to 0x1, and MUST be 0x2 or greater for MD Type equal to >> 0x2. The length of the NSH header MUST be an integer multiple of 4 >> bytes, thus variable length metadata is always padded out to a >> multiple of 4 bytes. >> >> Lacking some time before the telechat, but not worth deferring (there are >> enough DISCUSS'). FYI, I arrived at section 5. >> >> >> _______________________________________________ >> sfc mailing list >> sfc@ietf.org >> https://www.ietf.org/mailman/listinfo/sfc > . > From nobody Mon Oct 9 16:47:20 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2722133080; Mon, 9 Oct 2017 16:47:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.52 X-Spam-Level: X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gm2UxU-RMu3p; Mon, 9 Oct 2017 16:47:17 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 682D2132A89; Mon, 9 Oct 2017 16:47:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=22248; q=dns/txt; s=iport; t=1507592837; x=1508802437; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=6fEvCnXWS8rQLOQUCS2j59juidKmK6tTyrel4YJybB0=; b=BSpKViAKXfWVmz/HMDWfLD0t7q45k5SOUhmqTEZVk6av3WX/xBO+xjgi lvlKUDPSYuMcjLwSfRDAcwQJhXt8vRe7mMKqJ2HqkqrrcXVRmrRcawZlD vuo1OQqXo92QoJEjyZ7tKnWNy/9Bufgw2W1arixmWff/CoZIjAbPeIzma k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CfAAAnCdxZ/4wNJK1SChkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNdZG4UEweDc4ofkWqQcIU/DoIEChgBCoUYAhqEID8YAQIBAQE?= =?us-ascii?q?BAQEBayiFGQIBAwEBIUsLEAIBCBACLQMCAgIlCxQDDgIEDgWJTGQQp22CJ4snA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEBGAWDLYICgVGBaiuCfoRRAQcLAYMyL4IyBYo?= =?us-ascii?q?SjkaIXQKHXINhiSiCFIVviwiVLQIRGQGBOAEfOIEDC3gVSRIBhQQfgWd2AYVRg?= =?us-ascii?q?SSBEAEBAQ?= X-IronPort-AV: E=Sophos;i="5.42,502,1500940800"; d="scan'208,217";a="305639728" Received: from alln-core-7.cisco.com ([173.36.13.140]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 09 Oct 2017 23:47:15 +0000 Received: from XCH-RTP-007.cisco.com (xch-rtp-007.cisco.com [64.101.220.147]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id v99NlC9u013833 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 9 Oct 2017 23:47:15 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-007.cisco.com (64.101.220.147) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Mon, 9 Oct 2017 19:47:14 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Mon, 9 Oct 2017 19:47:14 -0400 From: "Carlos Pignataro (cpignata)" To: "Benoit Claise (bclaise)" CC: Med Boucadair , The IESG , "j.schoenwaelder@jacobs-university.de" , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , "sfc@ietf.org" Thread-Topic: [sfc] Benoit Claise's No Objection on draft-ietf-sfc-nsh-25: (with COMMENT) Thread-Index: AQHTOGF9KzlmGnAElku/rh4d1wFuUqLKnTsAgA3SDgCABBTaAA== Date: Mon, 9 Oct 2017 23:47:14 +0000 Message-ID: <1C78ADB8-0DA3-44F5-BA46-18C8F86527AE@cisco.com> References: <150660694562.13704.5074073969102470694.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93300A04B8EE@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <22a4ccbb-ee36-9001-b1aa-cc3564a6b5f2@cisco.com> In-Reply-To: <22a4ccbb-ee36-9001-b1aa-cc3564a6b5f2@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.116.133] Content-Type: multipart/alternative; boundary="_000_1C78ADB80DA344F5BA4618C8F86527AEciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] Benoit Claise's No Objection on draft-ietf-sfc-nsh-25: (with COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Oct 2017 23:47:20 -0000 --_000_1C78ADB80DA344F5BA4618C8F86527AEciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QmVub2l0LA0KDQpJ4oCZbGwgbGV0IE1lZCByZXNwb25kLCBidXQgZm9yIGNvbXBsZXRlbmVzcywg SSBhZGRlZCBhIGNvdXBsZSBlZGl0b3JpYWwgY2xhcmlmaWNhdGlvbnMgYmFzZWQgb24geW91ciBj b21tZW50cyBiZWxvdy4NCg0KVGhhbmtzLA0KDQrigJQNCkNhcmxvcyBQaWduYXRhcm8sIGNhcmxv c0BjaXNjby5jb208bWFpbHRvOmNhcmxvc0BjaXNjby5jb20+DQoNCuKAnFNvbWV0aW1lcyBJIHVz ZSBiaWcgd29yZHMgdGhhdCBJIGRvIG5vdCBmdWxseSB1bmRlcnN0YW5kLCB0byBtYWtlIG15c2Vs ZiBzb3VuZCBtb3JlIHBob3Rvc3ludGhlc2lzLiINCg0KT24gT2N0IDcsIDIwMTcsIGF0IDU6Mjcg QU0sIEJlbm9pdCBDbGFpc2UgKGJjbGFpc2UpIDxiY2xhaXNlQGNpc2NvLmNvbTxtYWlsdG86YmNs YWlzZUBjaXNjby5jb20+PiB3cm90ZToNCg0KSGkgTWVkLA0KSGkgQmVub2l0LA0KDQpQbGVhc2Ug c2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCi0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0t LQ0KRGUgOiBzZmMgW21haWx0bzpzZmMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBC ZW5vaXQgQ2xhaXNlDQpFbnZvecOpIDogamV1ZGkgMjggc2VwdGVtYnJlIDIwMTcgMTU6NTYNCsOA IDogVGhlIElFU0cNCkNjIDogai5zY2hvZW53YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRlPG1h aWx0bzpqLnNjaG9lbndhZWxkZXJAamFjb2JzLXVuaXZlcnNpdHkuZGU+OyBkcmFmdC1pZXRmLXNm Yy1uc2hAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtc2ZjLW5zaEBpZXRmLm9yZz47DQpqbWhA am9lbGhhbHBlcm4uY29tPG1haWx0bzpqbWhAam9lbGhhbHBlcm4uY29tPjsgc2ZjLWNoYWlyc0Bp ZXRmLm9yZzxtYWlsdG86c2ZjLWNoYWlyc0BpZXRmLm9yZz47IHNmY0BpZXRmLm9yZzxtYWlsdG86 c2ZjQGlldGYub3JnPg0KT2JqZXQgOiBbc2ZjXSBCZW5vaXQgQ2xhaXNlJ3MgTm8gT2JqZWN0aW9u IG9uIGRyYWZ0LWlldGYtc2ZjLW5zaC0yNTogKHdpdGgNCkNPTU1FTlQpDQoNCkJlbm9pdCBDbGFp c2UgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRpb24gZm9yDQpkcmFmdC1p ZXRmLXNmYy1uc2gtMjU6IE5vIE9iamVjdGlvbg0KDQpXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBr ZWVwIHRoZSBzdWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBseSB0byBhbGwNCmVtYWlsIGFkZHJl c3NlcyBpbmNsdWRlZCBpbiB0aGUgVG8gYW5kIENDIGxpbmVzLiAoRmVlbCBmcmVlIHRvIGN1dCB0 aGlzDQppbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVyLikNCg0KDQpQbGVhc2UgcmVmZXIg dG8gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5o dG1sDQpmb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJRVNHIERJU0NVU1MgYW5kIENPTU1FTlQg cG9zaXRpb25zLg0KDQoNClRoZSBkb2N1bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9z aXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZToNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2RyYWZ0LWlldGYtc2ZjLW5zaC8NCg0KDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkNPTU1FTlQ6DQot LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tDQoNCi0gU2VjdGlvbiAyLjUuMS4sIHlvdSBtaWdodCB3YW50IHRvIG1lbnRp b24gdGhhdCBubyBtZXRhZGF0YSBhcmUgc3BlY2lmaWVkDQphdA0KdGhpcyBwb2ludCBpbiB0aW1l Lg0KW01lZF0gQXJlbid0IHRoZXNlIG1lbnRpb25zIHN1ZmZpY2llbnQ/DQoNCiAgIFRoaXMgc3Bl Y2lmaWNhdGlvbiBkb2VzIG5vdCBtYWtlIGFueSBhc3N1bXB0aW9uIGFib3V0IENvbnRleHQgSGVh ZGVycw0KICAgdGhhdCBhcmUgbWFuZGF0b3J5LXRvLWltcGxlbWVudCBvciB0aG9zZSB0aGF0IGFy ZSBtYW5kYXRvcnktdG8tDQogICBwcm9jZXNzLg0KTm93IHRoYXQgeW91IHN0cmVzcyBpdCwgbWF5 YmUuDQpJIHdhcyBpbnRlcmVzdGVkIHRvIHVuZGVyc3RhbmQgd2hvc2UgcmVzcG9uc2liaWxpdHkg aXQgaXMgdG8gc3BlY2lmeSB0aG9zZS4NClNvbWUgc3VjaCBhczoNCg0KICBUaGlzIHNwZWNpZmlj YXRpb24gZG9lcyBub3QgbWFrZSBhbnkgYXNzdW1wdGlvbiBhYm91dCBDb250ZXh0IEhlYWRlcnMN CiAgdGhhdCBhcmUgbWFuZGF0b3J5LXRvLWltcGxlbWVudCBvciB0aG9zZSB0aGF0IGFyZSBtYW5k YXRvcnktdG8tDQogIHByb2Nlc3MuIFRoZXNlIGNvbnNpZGVyYXRpb25zIGFyZSBkZXBsb3ltZW50 LXNwZWNpZmljLg0KICBUaG9zZSBvcHRpb25hbCB2YXJpYWJsZSBtZXRhZGF0YSBzcGVjaWZpY2F0 aW9ucyB3aWxsIGJlIHNwZWNpZmllZCBieSB4eHgNCiAgZm9yIC4uLg0KDQpBbmQgdGhlbiwgaXMg dGhpcyBmb3IgYSBuZXcgc2VydmljZSwgYSBuZXcgYXBwbGljYXRpb24sIGEgbmV3IC4uLj8NCkkg ZG9uJ3Qga25vdyB0aGUgcmlnaHQgdGVybWlub2xvZ3kuDQoNCkFuZA0KDQogICBObyBpbml0aWFs IHZhbHVlcyBhcmUgYXNzaWduZWQgYXQgdGhlIGNyZWF0aW9uIG9mIHRoZSByZWdpc3RyeS4NCg0K IEluZGVlZCwgIk5ldyBJRVRGIEFzc2lnbmVkIE9wdGlvbmFsIFZhcmlhYmxlIExlbmd0aA0KTWV0 YWRhdGEgVHlwZSBSZWdpc3RyeSBpcyBzcGVjaWZpZWQgaW4gdGhpcyBkb2MuLCBidXQgZW1wdHkN Cg0KLSBTZWN0aW9uIDIuMw0KT1BTIHF1ZXN0aW9uOiBTUEkgbXVzdCBiZSB1bmlxdWUgcGVyIGFk bWluIGRvbWFpbj8gT3RoZXJ3aXNlLCB5b3UncmUNCmxvb2tpbmcNCmZvciB0cm91YmxlLCByaWdo dD8gVGhpcyB3b3VsZCBiZSB0eXBpY2FsbHkgYWRkcmVzc2VkIGluIGFuICJPcGVyYXRpb25hbA0K Q29uc2lkZXJhdGlvbnMiIHNlY3Rpb24uIFdoZXJlIGlzIG15ICJPcGVyYXRpb25hbCBDb25zaWRl cmF0aW9ucyINCnNlY3Rpb24uLi4/DQpbTWVkXSBBbHJlYWR5IGNvdmVyZWQgaW4gdGhlIFNGQyBh cmNoaXRlY3R1cmUgKFJGQyA3NjY1KToNCg0KICAgU0ZGcyBtYWludGFpbiB0aGUgcmVxdWlzaXRl IFNGUCBmb3J3YXJkaW5nIGluZm9ybWF0aW9uLiAgU0ZQDQogICBmb3J3YXJkaW5nIGluZm9ybWF0 aW9uIGlzIGFzc29jaWF0ZWQgd2l0aCBhIHNlcnZpY2UgcGF0aCBpZGVudGlmaWVyDQogICB0aGF0 IGlzIHVzZWQgdG8gdW5pcXVlbHkgaWRlbnRpZnkgYW4gU0ZQLg0KSSBzdXJlbHkgbWlzc2VkIHRo YXQgd2hlbiBJIHJldmlld2VkIHRoZSBub3JtYXRpdmUgcmVmZXJlbmNlcyBiZWZvcmUgcmV2aWV3 aW5nIHRoaXMgZG9jdW1lbnQgLi4uLCBhcyBJIGFsd2F5cyBkbyAuLi4NCkFueSBpc3N1ZSB0byBy ZXBlYXQgaXQgaGVyZT8NCg0KDQotIFNlY3Rpb24gMi40DQpGaXhlZCBsZW5ndGggbWV0YWRhdGEu DQoNCiAgIFRoaXMgc3BlY2lmaWNhdGlvbiBkb2VzIG5vdCBtYWtlIGFueSBhc3N1bXB0aW9ucyBh Ym91dCB0aGUgY29udGVudCBvZg0KICAgdGhlIDE2IGJ5dGUgQ29udGV4dCBIZWFkZXIgdGhhdCBt dXN0IGJlIHByZXNlbnQgd2hlbiB0aGUgTUQgVHlwZQ0KICAgZmllbGQgaXMgc2V0IHRvIDEsIGFu ZCBkb2VzIG5vdCBkZXNjcmliZSB0aGUgc3RydWN0dXJlIG9yIG1lYW5pbmcgb2YNCiAgIHRoZSBp bmNsdWRlZCBtZXRhZGF0YS4NCg0KICAgQW4gU0ZDLWF3YXJlIFNGIE1VU1QgcmVjZWl2ZSB0aGUg ZGF0YSBzZW1hbnRpY3MgZmlyc3QgaW4gb3JkZXIgdG8NCiAgIHByb2Nlc3MgdGhlIGRhdGEgcGxh Y2VkIGluIHRoZSBtYW5kYXRvcnkgY29udGV4dCBmaWVsZC4gIFRoZSBkYXRhDQogICBzZW1hbnRp Y3MgaW5jbHVkZSBib3RoIHRoZSBhbGxvY2F0aW9uIHNjaGVtYSBhbmQgdGhlIG1lYW5pbmcgb2Yg dGhlDQogICBpbmNsdWRlZCBkYXRhLg0KDQpJIHVuZGVyc3RhbmQgdGhhdCB0aGUgb3JkZXIgb2Yg dGhlIG1ldGFkYXRhIGluIHRoZSBGaXhlZCBMZW5ndGggQ29udGV4dA0KSGVhZGVyDQppcyBpbXBv cnRhbnQsIHJpZ2h0Pw0KW01lZF0gVGhlIG5vdGlvbiBvZiBvcmRlciBpbiB0aGUgb3BhcXVlIDE2 LWJ5dGUgYmxvY2sgZG9lcyBub3QgbWFrZSBpbiB0aGlzIHNwZWMuIEhvdyB0aGF0IGJsb2NrIGlz IHN0cnVjdHVyZWQgaXMgcmVhbGx5IG91dCBvZiBzY29wZS4NClRoaXMgaXMgYSBjb25jZXB0IHRo YXQgSSBtaXNzZWQgd2hlbiByZWFkaW5nIHRoaXMgc3BlYy4NCkkgbWlnaHQgbm90IGJlIHRoZSBv bmx5IG9uZS4uLg0KDQogU2hvdWxkIGl0IGJlIG1lbnRpb25lZD8NCg0KW01lZF0gSSBkb24ndCB0 aGluayBzby4NCg0KIEkgdW5kZXJzdGFuZCB0aGF0IHRoZSBmaXhlZA0KbGVuZ3RoDQptZXRhZGF0 YSBhcmUgc3BlY2lmaWMgcGVyIHNlcnZpY2UsIGFuZCB0aGF0J3MgdGhlIHJlYXNvbiB3aHkgdGhl cmUgaXMgbm8NCklBTkENCmZvciBmaXhlZCBsZW5ndGguIFNob3VsZCB0aGlzIGJlIG1lbnRpb25l ZD8NCltNZWRdIFRoZSBhZ3JlZW1lbnQgaW4gdGhlIFdHIGlzIHRvIHB1Ymxpc2ggZG9jdW1lbnRz IHNwZWNpZnlpbmcgTUQjMSBhcyBpbmZvcm1hdGlvbmFsIGRvY3VtZW50cy4gSUFOQSBpcyBub3Qg aW52b2x2ZWQgaW4gdGhpcyBwcm9jZXNzLCBiZWNhdXNlIHRoZXJlIGlzIG5vIGV4cGVjdGVkIGFj dGlvbiB3aXRoIHJlZ2FyZHMgdG8gTUQjMSBjb250ZXh0IGhlYWRlcnMuDQoNClJlZ2FyZHMsIEJl bm9pdA0KDQotIGlmIHlvdSBwdWJsaXNoIGEgbmV3IHZlcnNpb24sIGNoYW5nZSB0aGUgb3JkZXIg b2YgdGhlc2UgdHdvIHBhcmFncmFwaHM6DQoNCiAgIFVuYXNzaWduZWQgYml0czogQWxsIG90aGVy IGZsYWcgZmllbGRzLCBtYXJrZWQgVSwgYXJlIHVuYXNzaWduZWQgYW5kDQogICBhdmFpbGFibGUg Zm9yIGZ1dHVyZSB1c2UsIHNlZSBTZWN0aW9uIDExLjIuMS4gIFVuYXNzaWduZWQgYml0cyBNVVNU DQogICBiZSBzZXQgdG8gemVybyB1cG9uIG9yaWdpbmF0aW9uLCBhbmQgTVVTVCBiZSBpZ25vcmVk IGFuZCBwcmVzZXJ2ZWQNCiAgIHVubW9kaWZpZWQgYnkgb3RoZXIgTlNIIHN1cHBvcnRpbmcgZWxl bWVudHMuICBBdCByZWNlcHRpb24sIGFsbA0KICAgZWxlbWVudHMgTVVTVCBOT1QgbW9kaWZ5IHRo ZWlyIGFjdGlvbnMgYmFzZWQgb24gdGhlc2UgdW5rbm93biBiaXRzLg0KDQogICBMZW5ndGg6IFRo ZSB0b3RhbCBsZW5ndGgsIGluIDQtYnl0ZSB3b3Jkcywgb2YgdGhlIE5TSCBpbmNsdWRpbmcgdGhl DQogICBCYXNlIEhlYWRlciwgdGhlIFNlcnZpY2UgUGF0aCBIZWFkZXIsIHRoZSBGaXhlZCBMZW5n dGggQ29udGV4dCBIZWFkZXINCiAgIG9yIFZhcmlhYmxlIExlbmd0aCBDb250ZXh0IEhlYWRlcihz KS4gIFRoZSBsZW5ndGggTVVTVCBiZSAweDYgZm9yIE1EDQogICBUeXBlIGVxdWFsIHRvIDB4MSwg YW5kIE1VU1QgYmUgMHgyIG9yIGdyZWF0ZXIgZm9yIE1EIFR5cGUgZXF1YWwgdG8NCiAgIDB4Mi4g IFRoZSBsZW5ndGggb2YgdGhlIE5TSCBoZWFkZXIgTVVTVCBiZSBhbiBpbnRlZ2VyIG11bHRpcGxl IG9mIDQNCiAgIGJ5dGVzLCB0aHVzIHZhcmlhYmxlIGxlbmd0aCBtZXRhZGF0YSBpcyBhbHdheXMg cGFkZGVkIG91dCB0byBhDQogICBtdWx0aXBsZSBvZiA0IGJ5dGVzLg0KDQpMYWNraW5nIHNvbWUg dGltZSBiZWZvcmUgdGhlIHRlbGVjaGF0LCBidXQgbm90IHdvcnRoIGRlZmVycmluZyAodGhlcmUg YXJlDQplbm91Z2ggRElTQ1VTUycpLiBGWUksIEkgYXJyaXZlZCBhdCBzZWN0aW9uIDUuDQoNCg0K X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNmYyBtYWls aW5nIGxpc3QNCnNmY0BpZXRmLm9yZzxtYWlsdG86c2ZjQGlldGYub3JnPg0KaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmMNCi4NCg0KDQoNCg== --_000_1C78ADB80DA344F5BA4618C8F86527AEciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <40CDFBC9295E8A4D96130D39376C4A07@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KQmVub2l0LA0KPGRpdiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SeKAmWxsIGxldCBNZWQgcmVz cG9uZCwgYnV0IGZvciBjb21wbGV0ZW5lc3MsIEkgYWRkZWQgYSBjb3VwbGUgZWRpdG9yaWFsIGNs YXJpZmljYXRpb25zIGJhc2VkIG9uIHlvdXIgY29tbWVudHMgYmVsb3cuPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGFua3MsPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJjb2xvcjogcmdiKDAsIDAsIDApOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAt d2Via2l0LWxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+DQrigJQ8YnIg Y2xhc3M9IiI+DQpDYXJsb3MgUGlnbmF0YXJvLCZuYnNwOzxhIGhyZWY9Im1haWx0bzpjYXJsb3NA Y2lzY28uY29tIiBjbGFzcz0iIj5jYXJsb3NAY2lzY28uY29tPC9hPjxiciBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCjxpIGNsYXNzPSIiPuKAnFNvbWV0aW1lcyBJIHVzZSBiaWcgd29yZHMgdGhh dCBJIGRvIG5vdCBmdWxseSB1bmRlcnN0YW5kLCB0byBtYWtlIG15c2VsZiBzb3VuZCBtb3JlIHBo b3Rvc3ludGhlc2lzLiZxdW90OzwvaT48L2Rpdj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRp dj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBP Y3QgNywgMjAxNywgYXQgNToyNyBBTSwgQmVub2l0IENsYWlzZSAoYmNsYWlzZSkgJmx0OzxhIGhy ZWY9Im1haWx0bzpiY2xhaXNlQGNpc2NvLmNvbSIgY2xhc3M9IiI+YmNsYWlzZUBjaXNjby5jb208 L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGlu ZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5IaSBNZWQsPGJyIGNsYXNzPSIiPg0K PGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+SGkgQmVub2l0LDxiciBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NClBsZWFzZSBzZWUgaW5saW5lLjxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCkNoZWVycyw8YnIgY2xhc3M9IiI+DQpNZWQ8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4tLS0tLU1lc3NhZ2UgZCdvcmln aW5lLS0tLS08YnIgY2xhc3M9IiI+DQpEZSZuYnNwOzogc2ZjIFs8YSBocmVmPSJtYWlsdG86c2Zj LWJvdW5jZXNAaWV0Zi5vcmciIGNsYXNzPSIiPm1haWx0bzpzZmMtYm91bmNlc0BpZXRmLm9yZzwv YT5dIERlIGxhIHBhcnQgZGUgQmVub2l0IENsYWlzZTxiciBjbGFzcz0iIj4NCkVudm95w6kmbmJz cDs6IGpldWRpIDI4IHNlcHRlbWJyZSAyMDE3IDE1OjU2PGJyIGNsYXNzPSIiPg0Kw4AmbmJzcDs6 IFRoZSBJRVNHPGJyIGNsYXNzPSIiPg0KQ2MmbmJzcDs6IDxhIGhyZWY9Im1haWx0bzpqLnNjaG9l bndhZWxkZXJAamFjb2JzLXVuaXZlcnNpdHkuZGUiIGNsYXNzPSIiPmouc2Nob2Vud2FlbGRlckBq YWNvYnMtdW5pdmVyc2l0eS5kZTwvYT47DQo8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1zZmMt bnNoQGlldGYub3JnIiBjbGFzcz0iIj5kcmFmdC1pZXRmLXNmYy1uc2hAaWV0Zi5vcmc8L2E+Ozxi ciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpqbWhAam9lbGhhbHBlcm4uY29tIiBjbGFzcz0i Ij5qbWhAam9lbGhhbHBlcm4uY29tPC9hPjsgPGEgaHJlZj0ibWFpbHRvOnNmYy1jaGFpcnNAaWV0 Zi5vcmciIGNsYXNzPSIiPg0Kc2ZjLWNoYWlyc0BpZXRmLm9yZzwvYT47IDxhIGhyZWY9Im1haWx0 bzpzZmNAaWV0Zi5vcmciIGNsYXNzPSIiPnNmY0BpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQpP YmpldCZuYnNwOzogW3NmY10gQmVub2l0IENsYWlzZSdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1p ZXRmLXNmYy1uc2gtMjU6ICh3aXRoPGJyIGNsYXNzPSIiPg0KQ09NTUVOVCk8YnIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQpCZW5vaXQgQ2xhaXNlIGhhcyBlbnRlcmVkIHRoZSBmb2xsb3dpbmcg YmFsbG90IHBvc2l0aW9uIGZvcjxiciBjbGFzcz0iIj4NCmRyYWZ0LWlldGYtc2ZjLW5zaC0yNTog Tm8gT2JqZWN0aW9uPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KV2hlbiByZXNwb25kaW5n LCBwbGVhc2Uga2VlcCB0aGUgc3ViamVjdCBsaW5lIGludGFjdCBhbmQgcmVwbHkgdG8gYWxsPGJy IGNsYXNzPSIiPg0KZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGlu ZXMuIChGZWVsIGZyZWUgdG8gY3V0IHRoaXM8YnIgY2xhc3M9IiI+DQppbnRyb2R1Y3RvcnkgcGFy YWdyYXBoLCBob3dldmVyLik8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQpQbGVhc2UgcmVmZXIgdG8gPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9z dGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sIiBjbGFzcz0iIj4NCmh0dHBzOi8vd3d3Lmll dGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbDwvYT48YnIgY2xhc3M9 IiI+DQpmb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJRVNHIERJU0NVU1MgYW5kIENPTU1FTlQg cG9zaXRpb25zLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRo ZSBkb2N1bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91 bmQgaGVyZTo8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC1pZXRmLXNmYy1uc2gvIiBjbGFzcz0iIj5odHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNmYy1uc2gvPC9hPjxiciBjbGFzcz0iIj4NCjxiciBj bGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCi0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08YnIg Y2xhc3M9IiI+DQpDT01NRU5UOjxiciBjbGFzcz0iIj4NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQotIFNlY3Rpb24gMi41LjEuLCB5b3UgbWlnaHQgd2FudCB0byBt ZW50aW9uIHRoYXQgbm8gbWV0YWRhdGEgYXJlIHNwZWNpZmllZDxiciBjbGFzcz0iIj4NCmF0PGJy IGNsYXNzPSIiPg0KdGhpcyBwb2ludCBpbiB0aW1lLjxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90 ZT4NCltNZWRdIEFyZW4ndCB0aGVzZSBtZW50aW9ucyBzdWZmaWNpZW50PzxiciBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwO1RoaXMgc3BlY2lmaWNhdGlvbiBkb2Vz IG5vdCBtYWtlIGFueSBhc3N1bXB0aW9uIGFib3V0IENvbnRleHQgSGVhZGVyczxiciBjbGFzcz0i Ij4NCiZuYnNwOyZuYnNwOyZuYnNwO3RoYXQgYXJlIG1hbmRhdG9yeS10by1pbXBsZW1lbnQgb3Ig dGhvc2UgdGhhdCBhcmUgbWFuZGF0b3J5LXRvLTxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZu YnNwO3Byb2Nlc3MuPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KTm93IHRoYXQgeW91IHN0 cmVzcyBpdCwgbWF5YmUuPGJyIGNsYXNzPSIiPg0KSSB3YXMgaW50ZXJlc3RlZCB0byB1bmRlcnN0 YW5kIHdob3NlIHJlc3BvbnNpYmlsaXR5IGl0IGlzIHRvIHNwZWNpZnkgdGhvc2UuPGJyIGNsYXNz PSIiPg0KU29tZSBzdWNoIGFzOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNwOyZu YnNwO1RoaXMgc3BlY2lmaWNhdGlvbiBkb2VzIG5vdCBtYWtlIGFueSBhc3N1bXB0aW9uIGFib3V0 IENvbnRleHQgSGVhZGVyczxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO3RoYXQgYXJlIG1hbmRh dG9yeS10by1pbXBsZW1lbnQgb3IgdGhvc2UgdGhhdCBhcmUgbWFuZGF0b3J5LXRvLTxiciBjbGFz cz0iIj4NCiZuYnNwOyZuYnNwO3Byb2Nlc3MuIFRoZXNlIGNvbnNpZGVyYXRpb25zIGFyZSBkZXBs b3ltZW50LXNwZWNpZmljLjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO1Rob3NlIG9wdGlvbmFs IHZhcmlhYmxlIG1ldGFkYXRhIHNwZWNpZmljYXRpb25zIHdpbGwgYmUgc3BlY2lmaWVkIGJ5IHh4 eDxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO2ZvciAuLi48YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQpBbmQgdGhlbiwgaXMgdGhpcyBmb3IgYSBuZXcgc2VydmljZSwgYSBuZXcgYXBwbGlj YXRpb24sIGEgbmV3IC4uLj88YnIgY2xhc3M9IiI+DQpJIGRvbid0IGtub3cgdGhlIHJpZ2h0IHRl cm1pbm9sb2d5LjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCkFuZDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNwOyZu YnNwOyZuYnNwO05vIGluaXRpYWwgdmFsdWVzIGFyZSBhc3NpZ25lZCBhdCB0aGUgY3JlYXRpb24g b2YgdGhlIHJlZ2lzdHJ5LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNwO0luZGVl ZCwgJnF1b3Q7TmV3IElFVEYgQXNzaWduZWQgT3B0aW9uYWwgVmFyaWFibGUgTGVuZ3RoPGJyIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+TWV0YWRhdGEgVHlwZSBS ZWdpc3RyeSBpcyBzcGVjaWZpZWQgaW4gdGhpcyBkb2MuLCBidXQgZW1wdHk8YnIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQotIFNlY3Rpb24gMi4zPGJyIGNsYXNzPSIiPg0KT1BTIHF1ZXN0aW9u OiBTUEkgbXVzdCBiZSB1bmlxdWUgcGVyIGFkbWluIGRvbWFpbj8gT3RoZXJ3aXNlLCB5b3UncmU8 YnIgY2xhc3M9IiI+DQpsb29raW5nPGJyIGNsYXNzPSIiPg0KZm9yIHRyb3VibGUsIHJpZ2h0PyBU aGlzIHdvdWxkIGJlIHR5cGljYWxseSBhZGRyZXNzZWQgaW4gYW4gJnF1b3Q7T3BlcmF0aW9uYWw8 YnIgY2xhc3M9IiI+DQpDb25zaWRlcmF0aW9ucyZxdW90OyBzZWN0aW9uLiBXaGVyZSBpcyBteSAm cXVvdDtPcGVyYXRpb25hbCBDb25zaWRlcmF0aW9ucyZxdW90OzxiciBjbGFzcz0iIj4NCnNlY3Rp b24uLi4/PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KW01lZF0gQWxyZWFkeSBjb3ZlcmVk IGluIHRoZSBTRkMgYXJjaGl0ZWN0dXJlIChSRkMgNzY2NSk6PGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7U0ZGcyBtYWludGFpbiB0aGUgcmVxdWlzaXRlIFNG UCBmb3J3YXJkaW5nIGluZm9ybWF0aW9uLiAmbmJzcDtTRlA8YnIgY2xhc3M9IiI+DQombmJzcDsm bmJzcDsmbmJzcDtmb3J3YXJkaW5nIGluZm9ybWF0aW9uIGlzIGFzc29jaWF0ZWQgd2l0aCBhIHNl cnZpY2UgcGF0aCBpZGVudGlmaWVyPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7dGhh dCBpcyB1c2VkIHRvIHVuaXF1ZWx5IGlkZW50aWZ5IGFuIFNGUC48YnIgY2xhc3M9IiI+DQo8L2Js b2NrcXVvdGU+DQpJIHN1cmVseSBtaXNzZWQgdGhhdCB3aGVuIEkgcmV2aWV3ZWQgdGhlIG5vcm1h dGl2ZSByZWZlcmVuY2VzIGJlZm9yZSByZXZpZXdpbmcgdGhpcyBkb2N1bWVudCAuLi4sIGFzIEkg YWx3YXlzIGRvIC4uLjxiciBjbGFzcz0iIj4NCkFueSBpc3N1ZSB0byByZXBlYXQgaXQgaGVyZT88 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4tIFNl Y3Rpb24gMi40PGJyIGNsYXNzPSIiPg0KRml4ZWQgbGVuZ3RoIG1ldGFkYXRhLjxiciBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwO1RoaXMgc3BlY2lmaWNhdGlvbiBk b2VzIG5vdCBtYWtlIGFueSBhc3N1bXB0aW9ucyBhYm91dCB0aGUgY29udGVudCBvZjxiciBjbGFz cz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwO3RoZSAxNiBieXRlIENvbnRleHQgSGVhZGVyIHRoYXQg bXVzdCBiZSBwcmVzZW50IHdoZW4gdGhlIE1EIFR5cGU8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJz cDsmbmJzcDtmaWVsZCBpcyBzZXQgdG8gMSwgYW5kIGRvZXMgbm90IGRlc2NyaWJlIHRoZSBzdHJ1 Y3R1cmUgb3IgbWVhbmluZyBvZjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwO3RoZSBp bmNsdWRlZCBtZXRhZGF0YS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJz cDsmbmJzcDtBbiBTRkMtYXdhcmUgU0YgTVVTVCByZWNlaXZlIHRoZSBkYXRhIHNlbWFudGljcyBm aXJzdCBpbiBvcmRlciB0bzxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwO3Byb2Nlc3Mg dGhlIGRhdGEgcGxhY2VkIGluIHRoZSBtYW5kYXRvcnkgY29udGV4dCBmaWVsZC4gJm5ic3A7VGhl IGRhdGE8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsmbmJzcDtzZW1hbnRpY3MgaW5jbHVkZSBi b3RoIHRoZSBhbGxvY2F0aW9uIHNjaGVtYSBhbmQgdGhlIG1lYW5pbmcgb2YgdGhlPGJyIGNsYXNz PSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7aW5jbHVkZWQgZGF0YS48YnIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQpJIHVuZGVyc3RhbmQgdGhhdCB0aGUgb3JkZXIgb2YgdGhlIG1ldGFkYXRhIGlu IHRoZSBGaXhlZCBMZW5ndGggQ29udGV4dDxiciBjbGFzcz0iIj4NCkhlYWRlcjxiciBjbGFzcz0i Ij4NCmlzIGltcG9ydGFudCwgcmlnaHQ/PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KW01l ZF0gVGhlIG5vdGlvbiBvZiBvcmRlciBpbiB0aGUgb3BhcXVlIDE2LWJ5dGUgYmxvY2sgZG9lcyBu b3QgbWFrZSBpbiB0aGlzIHNwZWMuIEhvdyB0aGF0IGJsb2NrIGlzIHN0cnVjdHVyZWQgaXMgcmVh bGx5IG91dCBvZiBzY29wZS48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQpUaGlzIGlzIGEg Y29uY2VwdCB0aGF0IEkgbWlzc2VkIHdoZW4gcmVhZGluZyB0aGlzIHNwZWMuPGJyIGNsYXNzPSIi Pg0KSSBtaWdodCBub3QgYmUgdGhlIG9ubHkgb25lLi4uPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVv dGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KJm5ic3A7U2hvdWxkIGl0IGJl IG1lbnRpb25lZD88YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpbTWVkXSBJIGRvbid0IHRo aW5rIHNvLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNwO0kgdW5kZXJzdGFuZCB0 aGF0IHRoZSBmaXhlZDxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNz PSIiPmxlbmd0aDxiciBjbGFzcz0iIj4NCm1ldGFkYXRhIGFyZSBzcGVjaWZpYyBwZXIgc2Vydmlj ZSwgYW5kIHRoYXQncyB0aGUgcmVhc29uIHdoeSB0aGVyZSBpcyBubzxiciBjbGFzcz0iIj4NCklB TkE8YnIgY2xhc3M9IiI+DQpmb3IgZml4ZWQgbGVuZ3RoLiBTaG91bGQgdGhpcyBiZSBtZW50aW9u ZWQ/PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KW01lZF0gVGhlIGFncmVlbWVudCBpbiB0 aGUgV0cgaXMgdG8gcHVibGlzaCBkb2N1bWVudHMgc3BlY2lmeWluZyBNRCMxIGFzIGluZm9ybWF0 aW9uYWwgZG9jdW1lbnRzLiBJQU5BIGlzIG5vdCBpbnZvbHZlZCBpbiB0aGlzIHByb2Nlc3MsIGJl Y2F1c2UgdGhlcmUgaXMgbm8gZXhwZWN0ZWQgYWN0aW9uIHdpdGggcmVnYXJkcyB0byBNRCMxIGNv bnRleHQgaGVhZGVycy48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiI+ DQpSZWdhcmRzLCBCZW5vaXQ8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4t IGlmIHlvdSBwdWJsaXNoIGEgbmV3IHZlcnNpb24sIGNoYW5nZSB0aGUgb3JkZXIgb2YgdGhlc2Ug dHdvIHBhcmFncmFwaHM6PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7 Jm5ic3A7VW5hc3NpZ25lZCBiaXRzOiBBbGwgb3RoZXIgZmxhZyBmaWVsZHMsIG1hcmtlZCBVLCBh cmUgdW5hc3NpZ25lZCBhbmQ8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsmbmJzcDthdmFpbGFi bGUgZm9yIGZ1dHVyZSB1c2UsIHNlZSBTZWN0aW9uIDExLjIuMS4gJm5ic3A7VW5hc3NpZ25lZCBi aXRzIE1VU1Q8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsmbmJzcDtiZSBzZXQgdG8gemVybyB1 cG9uIG9yaWdpbmF0aW9uLCBhbmQgTVVTVCBiZSBpZ25vcmVkIGFuZCBwcmVzZXJ2ZWQ8YnIgY2xh c3M9IiI+DQombmJzcDsmbmJzcDsmbmJzcDt1bm1vZGlmaWVkIGJ5IG90aGVyIE5TSCBzdXBwb3J0 aW5nIGVsZW1lbnRzLiAmbmJzcDtBdCByZWNlcHRpb24sIGFsbDxiciBjbGFzcz0iIj4NCiZuYnNw OyZuYnNwOyZuYnNwO2VsZW1lbnRzIE1VU1QgTk9UIG1vZGlmeSB0aGVpciBhY3Rpb25zIGJhc2Vk IG9uIHRoZXNlIHVua25vd24gYml0cy48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQombmJz cDsmbmJzcDsmbmJzcDtMZW5ndGg6IFRoZSB0b3RhbCBsZW5ndGgsIGluIDQtYnl0ZSB3b3Jkcywg b2YgdGhlIE5TSCBpbmNsdWRpbmcgdGhlPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7 QmFzZSBIZWFkZXIsIHRoZSBTZXJ2aWNlIFBhdGggSGVhZGVyLCB0aGUgRml4ZWQgTGVuZ3RoIENv bnRleHQgSGVhZGVyPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7b3IgVmFyaWFibGUg TGVuZ3RoIENvbnRleHQgSGVhZGVyKHMpLiAmbmJzcDtUaGUgbGVuZ3RoIE1VU1QgYmUgMHg2IGZv ciBNRDxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwO1R5cGUgZXF1YWwgdG8gMHgxLCBh bmQgTVVTVCBiZSAweDIgb3IgZ3JlYXRlciBmb3IgTUQgVHlwZSBlcXVhbCB0bzxiciBjbGFzcz0i Ij4NCiZuYnNwOyZuYnNwOyZuYnNwOzB4Mi4gJm5ic3A7VGhlIGxlbmd0aCBvZiB0aGUgTlNIIGhl YWRlciBNVVNUIGJlIGFuIGludGVnZXIgbXVsdGlwbGUgb2YgNDxiciBjbGFzcz0iIj4NCiZuYnNw OyZuYnNwOyZuYnNwO2J5dGVzLCB0aHVzIHZhcmlhYmxlIGxlbmd0aCBtZXRhZGF0YSBpcyBhbHdh eXMgcGFkZGVkIG91dCB0byBhPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7bXVsdGlw bGUgb2YgNCBieXRlcy48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpMYWNraW5nIHNvbWUg dGltZSBiZWZvcmUgdGhlIHRlbGVjaGF0LCBidXQgbm90IHdvcnRoIGRlZmVycmluZyAodGhlcmUg YXJlPGJyIGNsYXNzPSIiPg0KZW5vdWdoIERJU0NVU1MnKS4gRllJLCBJIGFycml2ZWQgYXQgc2Vj dGlvbiA1LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0K c2ZjIG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpzZmNAaWV0Zi5v cmciIGNsYXNzPSIiPnNmY0BpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NmYyIgY2xhc3M9IiI+aHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmM8L2E+PGJyIGNsYXNzPSIiPg0KPC9ibG9j a3F1b3RlPg0KLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_1C78ADB80DA344F5BA4618C8F86527AEciscocom_-- From nobody Tue Oct 10 06:58:55 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A543F134293; Tue, 10 Oct 2017 06:58:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.618 X-Spam-Level: X-Spam-Status: No, score=-2.618 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MvvRVML5LzkH; Tue, 10 Oct 2017 06:58:45 -0700 (PDT) Received: from relais-inet.orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3659013453F; Tue, 10 Oct 2017 06:58:45 -0700 (PDT) Received: from opfednr07.francetelecom.fr (unknown [xx.xx.xx.71]) by opfednr23.francetelecom.fr (ESMTP service) with ESMTP id C1764C0525; Tue, 10 Oct 2017 15:58:43 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.69]) by opfednr07.francetelecom.fr (ESMTP service) with ESMTP id 9EBCE1C007A; Tue, 10 Oct 2017 15:58:43 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILMA2.corporate.adroot.infra.ftgroup ([fe80::bc1c:ad2f:eda3:8c3d%18]) with mapi id 14.03.0361.001; Tue, 10 Oct 2017 15:58:43 +0200 From: To: Benoit Claise , The IESG CC: "j.schoenwaelder@jacobs-university.de" , "draft-ietf-sfc-nsh@ietf.org" , "jmh@joelhalpern.com" , "sfc-chairs@ietf.org" , "sfc@ietf.org" Thread-Topic: [sfc] Benoit Claise's No Objection on draft-ietf-sfc-nsh-25: (with COMMENT) Thread-Index: AQHTP06BqhmUDeQdfEmuKbarg5pPZ6LdHdjQ Date: Tue, 10 Oct 2017 13:58:42 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93300A051CAF@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <150660694562.13704.5074073969102470694.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93300A04B8EE@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <22a4ccbb-ee36-9001-b1aa-cc3564a6b5f2@cisco.com> In-Reply-To: <22a4ccbb-ee36-9001-b1aa-cc3564a6b5f2@cisco.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] Benoit Claise's No Objection on draft-ietf-sfc-nsh-25: (with COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Oct 2017 13:58:48 -0000 SGkgQmVub2l0LCANCg0KUGxlYXNlIHNlZSBpbmxpbmUuIA0KDQpUaGFuayB5b3UuDQpDaGVlcnMs DQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gRGXCoDogQmVub2l0IENs YWlzZSBbbWFpbHRvOmJjbGFpc2VAY2lzY28uY29tXQ0KPiBFbnZvecOpwqA6IHNhbWVkaSA3IG9j dG9icmUgMjAxNyAxMToyNw0KPiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBUaGUg SUVTRw0KPiBDY8KgOiBqLnNjaG9lbndhZWxkZXJAamFjb2JzLXVuaXZlcnNpdHkuZGU7IGRyYWZ0 LWlldGYtc2ZjLW5zaEBpZXRmLm9yZzsNCj4gam1oQGpvZWxoYWxwZXJuLmNvbTsgc2ZjLWNoYWly c0BpZXRmLm9yZzsgc2ZjQGlldGYub3JnDQo+IE9iamV0wqA6IFJlOiBbc2ZjXSBCZW5vaXQgQ2xh aXNlJ3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtc2ZjLW5zaC0yNToNCj4gKHdpdGggQ09N TUVOVCkNCj4gDQo+IEhpIE1lZCwNCj4gPiBIaSBCZW5vaXQsDQo+ID4NCj4gPiBQbGVhc2Ugc2Vl IGlubGluZS4NCj4gPg0KPiA+IENoZWVycywNCj4gPiBNZWQNCj4gPg0KPiA+PiAtLS0tLU1lc3Nh Z2UgZCdvcmlnaW5lLS0tLS0NCj4gPj4gRGXCoDogc2ZjIFttYWlsdG86c2ZjLWJvdW5jZXNAaWV0 Zi5vcmddIERlIGxhIHBhcnQgZGUgQmVub2l0IENsYWlzZQ0KPiA+PiBFbnZvecOpwqA6IGpldWRp IDI4IHNlcHRlbWJyZSAyMDE3IDE1OjU2DQo+ID4+IMOAwqA6IFRoZSBJRVNHDQo+ID4+IENjwqA6 IGouc2Nob2Vud2FlbGRlckBqYWNvYnMtdW5pdmVyc2l0eS5kZTsgZHJhZnQtaWV0Zi1zZmMtbnNo QGlldGYub3JnOw0KPiA+PiBqbWhAam9lbGhhbHBlcm4uY29tOyBzZmMtY2hhaXJzQGlldGYub3Jn OyBzZmNAaWV0Zi5vcmcNCj4gPj4gT2JqZXTCoDogW3NmY10gQmVub2l0IENsYWlzZSdzIE5vIE9i amVjdGlvbiBvbiBkcmFmdC1pZXRmLXNmYy1uc2gtMjU6DQo+ICh3aXRoDQo+ID4+IENPTU1FTlQp DQo+ID4+DQo+ID4+IEJlbm9pdCBDbGFpc2UgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxs b3QgcG9zaXRpb24gZm9yDQo+ID4+IGRyYWZ0LWlldGYtc2ZjLW5zaC0yNTogTm8gT2JqZWN0aW9u DQo+ID4+DQo+ID4+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGlu ZSBpbnRhY3QgYW5kIHJlcGx5IHRvIGFsbA0KPiA+PiBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQg aW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQgdGhpcw0KPiA+PiBpbnRy b2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVyLikNCj4gPj4NCj4gPj4NCj4gPj4gUGxlYXNlIHJl ZmVyIHRvIGh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtDQo+IGNy aXRlcmlhLmh0bWwNCj4gPj4gZm9yIG1vcmUgaW5mb3JtYXRpb24gYWJvdXQgSUVTRyBESVNDVVNT IGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCj4gPj4NCj4gPj4NCj4gPj4gVGhlIGRvY3VtZW50LCBh bG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBoZXJlOg0KPiA+ PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNmYy1uc2gvDQo+ ID4+DQo+ID4+DQo+ID4+DQo+ID4+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gPj4gQ09NTUVOVDoNCj4gPj4g LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQ0KPiA+Pg0KPiA+PiAtIFNlY3Rpb24gMi41LjEuLCB5b3UgbWlnaHQgd2Fu dCB0byBtZW50aW9uIHRoYXQgbm8gbWV0YWRhdGEgYXJlDQo+IHNwZWNpZmllZA0KPiA+PiBhdA0K PiA+PiB0aGlzIHBvaW50IGluIHRpbWUuDQo+ID4gW01lZF0gQXJlbid0IHRoZXNlIG1lbnRpb25z IHN1ZmZpY2llbnQ/DQo+ID4NCj4gPiAgICAgVGhpcyBzcGVjaWZpY2F0aW9uIGRvZXMgbm90IG1h a2UgYW55IGFzc3VtcHRpb24gYWJvdXQgQ29udGV4dA0KPiBIZWFkZXJzDQo+ID4gICAgIHRoYXQg YXJlIG1hbmRhdG9yeS10by1pbXBsZW1lbnQgb3IgdGhvc2UgdGhhdCBhcmUgbWFuZGF0b3J5LXRv LQ0KPiA+ICAgICBwcm9jZXNzLg0KPiBOb3cgdGhhdCB5b3Ugc3RyZXNzIGl0LCBtYXliZS4NCj4g SSB3YXMgaW50ZXJlc3RlZCB0byB1bmRlcnN0YW5kIHdob3NlIHJlc3BvbnNpYmlsaXR5IGl0IGlz IHRvIHNwZWNpZnkNCj4gdGhvc2UuDQo+IFNvbWUgc3VjaCBhczoNCj4gDQo+ICAgICBUaGlzIHNw ZWNpZmljYXRpb24gZG9lcyBub3QgbWFrZSBhbnkgYXNzdW1wdGlvbiBhYm91dCBDb250ZXh0IEhl YWRlcnMNCj4gICAgIHRoYXQgYXJlIG1hbmRhdG9yeS10by1pbXBsZW1lbnQgb3IgdGhvc2UgdGhh dCBhcmUgbWFuZGF0b3J5LXRvLQ0KPiAgICAgcHJvY2Vzcy4gVGhlc2UgY29uc2lkZXJhdGlvbnMg YXJlIGRlcGxveW1lbnQtc3BlY2lmaWMuDQo+ICAgICBUaG9zZSBvcHRpb25hbCB2YXJpYWJsZSBt ZXRhZGF0YSBzcGVjaWZpY2F0aW9ucyB3aWxsIGJlIHNwZWNpZmllZCBieQ0KPiB4eHgNCj4gICAg IGZvciAuLi4NCj4gDQpbTWVkXSBObyBzdXJwcmlzZSBvdXQgdGhlcmUuIExpa2UgYW55IHByb3Rv Y29sIGV4dGVuc2lvbiwgZnV0dXJlIGRvY3VtZW50cyB3aWxsIGJlIGRldmVsb3BlZCB0byBzcGVj aWZ5IGtleSBjb250ZXh0IGluZm9ybWF0aW9uLiAgDQoNCj4gQW5kIHRoZW4sIGlzIHRoaXMgZm9y IGEgbmV3IHNlcnZpY2UsIGEgbmV3IGFwcGxpY2F0aW9uLCBhIG5ldyAuLi4/DQoNCltNZWRdIEZ1 dHVyZSBzcGVjaWZpY2F0aW9ucyB0aGF0IHNwZWNpZnkgY29udGV4dCBUTFZzIHdpbGwgc3BlY2lm eSB1bmRlciB3aGljaCBjb25kaXRpb24gYSBnaXZlbiBUTFYgY2FuIGJlIHVzZWQgYW5kIHNvLiBU aGVzZSBjb25zaWRlcmF0aW9ucyBhcmUgcmVhbGx5IG91dCBvZiBzY29wZSBvZiB0aGUgTlNIIHNw ZWMuDQoNCj4gSSBkb24ndCBrbm93IHRoZSByaWdodCB0ZXJtaW5vbG9neS4NCj4gPg0KPiA+IEFu ZA0KPiA+DQo+ID4gICAgIE5vIGluaXRpYWwgdmFsdWVzIGFyZSBhc3NpZ25lZCBhdCB0aGUgY3Jl YXRpb24gb2YgdGhlIHJlZ2lzdHJ5Lg0KPiA+DQo+ID4gICBJbmRlZWQsICJOZXcgSUVURiBBc3Np Z25lZCBPcHRpb25hbCBWYXJpYWJsZSBMZW5ndGgNCj4gPj4gTWV0YWRhdGEgVHlwZSBSZWdpc3Ry eSBpcyBzcGVjaWZpZWQgaW4gdGhpcyBkb2MuLCBidXQgZW1wdHkNCj4gPj4NCj4gPj4gLSBTZWN0 aW9uIDIuMw0KPiA+PiBPUFMgcXVlc3Rpb246IFNQSSBtdXN0IGJlIHVuaXF1ZSBwZXIgYWRtaW4g ZG9tYWluPyBPdGhlcndpc2UsIHlvdSdyZQ0KPiA+PiBsb29raW5nDQo+ID4+IGZvciB0cm91Ymxl LCByaWdodD8gVGhpcyB3b3VsZCBiZSB0eXBpY2FsbHkgYWRkcmVzc2VkIGluIGFuDQo+ICJPcGVy YXRpb25hbA0KPiA+PiBDb25zaWRlcmF0aW9ucyIgc2VjdGlvbi4gV2hlcmUgaXMgbXkgIk9wZXJh dGlvbmFsIENvbnNpZGVyYXRpb25zIg0KPiA+PiBzZWN0aW9uLi4uPw0KPiA+IFtNZWRdIEFscmVh ZHkgY292ZXJlZCBpbiB0aGUgU0ZDIGFyY2hpdGVjdHVyZSAoUkZDIDc2NjUpOg0KPiA+DQo+ID4g ICAgIFNGRnMgbWFpbnRhaW4gdGhlIHJlcXVpc2l0ZSBTRlAgZm9yd2FyZGluZyBpbmZvcm1hdGlv bi4gIFNGUA0KPiA+ICAgICBmb3J3YXJkaW5nIGluZm9ybWF0aW9uIGlzIGFzc29jaWF0ZWQgd2l0 aCBhIHNlcnZpY2UgcGF0aCBpZGVudGlmaWVyDQo+ID4gICAgIHRoYXQgaXMgdXNlZCB0byB1bmlx dWVseSBpZGVudGlmeSBhbiBTRlAuDQo+IEkgc3VyZWx5IG1pc3NlZCB0aGF0IHdoZW4gSSByZXZp ZXdlZCB0aGUgbm9ybWF0aXZlIHJlZmVyZW5jZXMgYmVmb3JlDQo+IHJldmlld2luZyB0aGlzIGRv Y3VtZW50IC4uLiwgYXMgSSBhbHdheXMgZG8gLi4uDQo+IEFueSBpc3N1ZSB0byByZXBlYXQgaXQg aGVyZT8NCj4gDQoNCltNZWRdIEkgZG8gcGVyc29uYWxseSBzZWUgaXQgYXMgcmVkdW5kYW50LCBi dXQgaWYgeW91IHRoaW5rIHRoaXMgaXMgaW1wb3J0YW50IHRvIGltcGxlbWVudCB0aGUgTlNIIHNw ZWMsIHRoZW4gaXQgc2hvdWxkIGJlIGFkZGVkLiANCg0KPiA+DQo+ID4+IC0gU2VjdGlvbiAyLjQN Cj4gPj4gRml4ZWQgbGVuZ3RoIG1ldGFkYXRhLg0KPiA+Pg0KPiA+PiAgICAgVGhpcyBzcGVjaWZp Y2F0aW9uIGRvZXMgbm90IG1ha2UgYW55IGFzc3VtcHRpb25zIGFib3V0IHRoZSBjb250ZW50DQo+ IG9mDQo+ID4+ICAgICB0aGUgMTYgYnl0ZSBDb250ZXh0IEhlYWRlciB0aGF0IG11c3QgYmUgcHJl c2VudCB3aGVuIHRoZSBNRCBUeXBlDQo+ID4+ICAgICBmaWVsZCBpcyBzZXQgdG8gMSwgYW5kIGRv ZXMgbm90IGRlc2NyaWJlIHRoZSBzdHJ1Y3R1cmUgb3IgbWVhbmluZw0KPiBvZg0KPiA+PiAgICAg dGhlIGluY2x1ZGVkIG1ldGFkYXRhLg0KPiA+Pg0KPiA+PiAgICAgQW4gU0ZDLWF3YXJlIFNGIE1V U1QgcmVjZWl2ZSB0aGUgZGF0YSBzZW1hbnRpY3MgZmlyc3QgaW4gb3JkZXIgdG8NCj4gPj4gICAg IHByb2Nlc3MgdGhlIGRhdGEgcGxhY2VkIGluIHRoZSBtYW5kYXRvcnkgY29udGV4dCBmaWVsZC4g IFRoZSBkYXRhDQo+ID4+ICAgICBzZW1hbnRpY3MgaW5jbHVkZSBib3RoIHRoZSBhbGxvY2F0aW9u IHNjaGVtYSBhbmQgdGhlIG1lYW5pbmcgb2YgdGhlDQo+ID4+ICAgICBpbmNsdWRlZCBkYXRhLg0K PiA+Pg0KPiA+PiBJIHVuZGVyc3RhbmQgdGhhdCB0aGUgb3JkZXIgb2YgdGhlIG1ldGFkYXRhIGlu IHRoZSBGaXhlZCBMZW5ndGggQ29udGV4dA0KPiA+PiBIZWFkZXINCj4gPj4gaXMgaW1wb3J0YW50 LCByaWdodD8NCj4gPiBbTWVkXSBUaGUgbm90aW9uIG9mIG9yZGVyIGluIHRoZSBvcGFxdWUgMTYt Ynl0ZSBibG9jayBkb2VzIG5vdCBtYWtlIGluDQo+IHRoaXMgc3BlYy4gSG93IHRoYXQgYmxvY2sg aXMgc3RydWN0dXJlZCBpcyByZWFsbHkgb3V0IG9mIHNjb3BlLg0KPiBUaGlzIGlzIGEgY29uY2Vw dCB0aGF0IEkgbWlzc2VkIHdoZW4gcmVhZGluZyB0aGlzIHNwZWMuDQo+IEkgbWlnaHQgbm90IGJl IHRoZSBvbmx5IG9uZS4uLg0KDQpbTWVkXSBJIGhlYXIgeW91LiBDYW4geW91IHBsZWFzZSBpbmRp Y2F0ZSB3aGV0aGVyIHRoaXMgdGV4dCBpcyBub3QgY2xlYXIgZW5vdWdoPyANCg0KPT09DQogICBU aGlzIHNwZWNpZmljYXRpb24gZG9lcyBub3QgbWFrZSBhbnkgYXNzdW1wdGlvbnMgYWJvdXQgdGhl IGNvbnRlbnQgb2YNCiAgIHRoZSAxNiBieXRlIENvbnRleHQgSGVhZGVyIHRoYXQgbXVzdCBiZSBw cmVzZW50IHdoZW4gdGhlIE1EIFR5cGUNCiAgIGZpZWxkIGlzIHNldCB0byAxLCBhbmQgZG9lcyBu b3QgZGVzY3JpYmUgdGhlIHN0cnVjdHVyZSBvciBtZWFuaW5nIG9mDQogICB0aGUgaW5jbHVkZWQg bWV0YWRhdGEuDQo9PT09DQoNCj4gPg0KPiA+ICAgU2hvdWxkIGl0IGJlIG1lbnRpb25lZD8NCj4g Pg0KPiA+IFtNZWRdIEkgZG9uJ3QgdGhpbmsgc28uDQo+ID4NCj4gPiAgIEkgdW5kZXJzdGFuZCB0 aGF0IHRoZSBmaXhlZA0KPiA+PiBsZW5ndGgNCj4gPj4gbWV0YWRhdGEgYXJlIHNwZWNpZmljIHBl ciBzZXJ2aWNlLCBhbmQgdGhhdCdzIHRoZSByZWFzb24gd2h5IHRoZXJlIGlzDQo+IG5vDQo+ID4+ IElBTkENCj4gPj4gZm9yIGZpeGVkIGxlbmd0aC4gU2hvdWxkIHRoaXMgYmUgbWVudGlvbmVkPw0K PiA+IFtNZWRdIFRoZSBhZ3JlZW1lbnQgaW4gdGhlIFdHIGlzIHRvIHB1Ymxpc2ggZG9jdW1lbnRz IHNwZWNpZnlpbmcgTUQjMSBhcw0KPiBpbmZvcm1hdGlvbmFsIGRvY3VtZW50cy4gSUFOQSBpcyBu b3QgaW52b2x2ZWQgaW4gdGhpcyBwcm9jZXNzLCBiZWNhdXNlDQo+IHRoZXJlIGlzIG5vIGV4cGVj dGVkIGFjdGlvbiB3aXRoIHJlZ2FyZHMgdG8gTUQjMSBjb250ZXh0IGhlYWRlcnMuDQo+IA0KPiBS ZWdhcmRzLCBCZW5vaXQNCj4gPg0KPiA+PiAtIGlmIHlvdSBwdWJsaXNoIGEgbmV3IHZlcnNpb24s IGNoYW5nZSB0aGUgb3JkZXIgb2YgdGhlc2UgdHdvDQo+IHBhcmFncmFwaHM6DQo+ID4+DQo+ID4+ ICAgICBVbmFzc2lnbmVkIGJpdHM6IEFsbCBvdGhlciBmbGFnIGZpZWxkcywgbWFya2VkIFUsIGFy ZSB1bmFzc2lnbmVkDQo+IGFuZA0KPiA+PiAgICAgYXZhaWxhYmxlIGZvciBmdXR1cmUgdXNlLCBz ZWUgU2VjdGlvbiAxMS4yLjEuICBVbmFzc2lnbmVkIGJpdHMgTVVTVA0KPiA+PiAgICAgYmUgc2V0 IHRvIHplcm8gdXBvbiBvcmlnaW5hdGlvbiwgYW5kIE1VU1QgYmUgaWdub3JlZCBhbmQgcHJlc2Vy dmVkDQo+ID4+ICAgICB1bm1vZGlmaWVkIGJ5IG90aGVyIE5TSCBzdXBwb3J0aW5nIGVsZW1lbnRz LiAgQXQgcmVjZXB0aW9uLCBhbGwNCj4gPj4gICAgIGVsZW1lbnRzIE1VU1QgTk9UIG1vZGlmeSB0 aGVpciBhY3Rpb25zIGJhc2VkIG9uIHRoZXNlIHVua25vd24gYml0cy4NCj4gPj4NCj4gPj4gICAg IExlbmd0aDogVGhlIHRvdGFsIGxlbmd0aCwgaW4gNC1ieXRlIHdvcmRzLCBvZiB0aGUgTlNIIGlu Y2x1ZGluZyB0aGUNCj4gPj4gICAgIEJhc2UgSGVhZGVyLCB0aGUgU2VydmljZSBQYXRoIEhlYWRl ciwgdGhlIEZpeGVkIExlbmd0aCBDb250ZXh0DQo+IEhlYWRlcg0KPiA+PiAgICAgb3IgVmFyaWFi bGUgTGVuZ3RoIENvbnRleHQgSGVhZGVyKHMpLiAgVGhlIGxlbmd0aCBNVVNUIGJlIDB4NiBmb3IN Cj4gTUQNCj4gPj4gICAgIFR5cGUgZXF1YWwgdG8gMHgxLCBhbmQgTVVTVCBiZSAweDIgb3IgZ3Jl YXRlciBmb3IgTUQgVHlwZSBlcXVhbCB0bw0KPiA+PiAgICAgMHgyLiAgVGhlIGxlbmd0aCBvZiB0 aGUgTlNIIGhlYWRlciBNVVNUIGJlIGFuIGludGVnZXIgbXVsdGlwbGUgb2YgNA0KPiA+PiAgICAg Ynl0ZXMsIHRodXMgdmFyaWFibGUgbGVuZ3RoIG1ldGFkYXRhIGlzIGFsd2F5cyBwYWRkZWQgb3V0 IHRvIGENCj4gPj4gICAgIG11bHRpcGxlIG9mIDQgYnl0ZXMuDQo+ID4+DQo+ID4+IExhY2tpbmcg c29tZSB0aW1lIGJlZm9yZSB0aGUgdGVsZWNoYXQsIGJ1dCBub3Qgd29ydGggZGVmZXJyaW5nICh0 aGVyZQ0KPiBhcmUNCj4gPj4gZW5vdWdoIERJU0NVU1MnKS4gRllJLCBJIGFycml2ZWQgYXQgc2Vj dGlvbiA1Lg0KPiA+Pg0KPiA+Pg0KPiA+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KPiA+PiBzZmMgbWFpbGluZyBsaXN0DQo+ID4+IHNmY0BpZXRmLm9y Zw0KPiA+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NmYw0KPiA+IC4N Cj4gPg0KDQo= From nobody Tue Oct 10 07:14:53 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F17B61330AE; Tue, 10 Oct 2017 07:14:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id utOMGiCPYX0V; Tue, 10 Oct 2017 07:14:44 -0700 (PDT) Received: from aer-iport-3.cisco.com (aer-iport-3.cisco.com [173.38.203.53]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 120D5132331; Tue, 10 Oct 2017 07:14:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7299; q=dns/txt; s=iport; t=1507644883; x=1508854483; h=subject:to:cc:references:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=leTyZCzbQ84egjxJJcOqEEl7WNinEk22/qdgzsVIb6c=; b=FBmZ4I6FmK8i+7myM5evptiy8M3hm6YaqHGWbo6AMW2N5YNOda9Yh7Ca GPEIwUYMtthE0P1UkYr+I6p+hqrLaqeljEYk4LgBtiVR/xYWkw7Yo8NvV BtAvUUeXInWbGDoV9NwkFb8cQ4E8bxXHMilmlkeGcHqfmE6WzM0q0nEnE 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CyAAAa1dxZ/xbLJq1RChkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYQ/bieDeoofdJBUIpYvDoIEChgLhRgChQsYAQIBAQEBAQEBayi?= =?us-ascii?q?FHgEBAwEBASEPAQU2CxALEAIIAiMDAgInHwMOBgEMBgIBAYoYCBCoHIIniyMBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEYBYEOgh+DU4FqKwuCc4RRAQcLAR+DE4JhBYo?= =?us-ascii?q?TlymHXoNiiSmCFIVzg1qHLo4Eh12BOR84gQMLMiEIHRVJhRcfgWk+NogMgjQBA?= =?us-ascii?q?QE?= X-IronPort-AV: E=Sophos;i="5.42,505,1500940800"; d="scan'208";a="656273037" Received: from aer-iport-nat.cisco.com (HELO aer-core-1.cisco.com) ([173.38.203.22]) by aer-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 10 Oct 2017 14:14:40 +0000 Received: from [10.55.221.36] (ams-bclaise-nitro3.cisco.com [10.55.221.36]) by aer-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id v9AEEeR1030317; Tue, 10 Oct 2017 14:14:40 GMT To: mohamed.boucadair@orange.com, The IESG Cc: "j.schoenwaelder@jacobs-university.de" , "draft-ietf-sfc-nsh@ietf.org" , "jmh@joelhalpern.com" , "sfc-chairs@ietf.org" , "sfc@ietf.org" References: <150660694562.13704.5074073969102470694.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93300A04B8EE@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <22a4ccbb-ee36-9001-b1aa-cc3564a6b5f2@cisco.com> <787AE7BB302AE849A7480A190F8B93300A051CAF@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: Benoit Claise Message-ID: <77e51072-74f5-def8-6983-df78fd3301eb@cisco.com> Date: Tue, 10 Oct 2017 16:14:39 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A051CAF@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [sfc] Benoit Claise's No Objection on draft-ietf-sfc-nsh-25: (with COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Oct 2017 14:14:46 -0000 Fine with me Regards, B. > Hi Benoit, > > Please see inline. > > Thank you. > Cheers, > Med > >> -----Message d'origine----- >> De : Benoit Claise [mailto:bclaise@cisco.com] >> Envoyé : samedi 7 octobre 2017 11:27 >> À : BOUCADAIR Mohamed IMT/OLN; The IESG >> Cc : j.schoenwaelder@jacobs-university.de; draft-ietf-sfc-nsh@ietf.org; >> jmh@joelhalpern.com; sfc-chairs@ietf.org; sfc@ietf.org >> Objet : Re: [sfc] Benoit Claise's No Objection on draft-ietf-sfc-nsh-25: >> (with COMMENT) >> >> Hi Med, >>> Hi Benoit, >>> >>> Please see inline. >>> >>> Cheers, >>> Med >>> >>>> -----Message d'origine----- >>>> De : sfc [mailto:sfc-bounces@ietf.org] De la part de Benoit Claise >>>> Envoyé : jeudi 28 septembre 2017 15:56 >>>> À : The IESG >>>> Cc : j.schoenwaelder@jacobs-university.de; draft-ietf-sfc-nsh@ietf.org; >>>> jmh@joelhalpern.com; sfc-chairs@ietf.org; sfc@ietf.org >>>> Objet : [sfc] Benoit Claise's No Objection on draft-ietf-sfc-nsh-25: >> (with >>>> COMMENT) >>>> >>>> Benoit Claise has entered the following ballot position for >>>> draft-ietf-sfc-nsh-25: No Objection >>>> >>>> When responding, please keep the subject line intact and reply to all >>>> email addresses included in the To and CC lines. (Feel free to cut this >>>> introductory paragraph, however.) >>>> >>>> >>>> Please refer to https://www.ietf.org/iesg/statement/discuss- >> criteria.html >>>> for more information about IESG DISCUSS and COMMENT positions. >>>> >>>> >>>> The document, along with other ballot positions, can be found here: >>>> https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/ >>>> >>>> >>>> >>>> ---------------------------------------------------------------------- >>>> COMMENT: >>>> ---------------------------------------------------------------------- >>>> >>>> - Section 2.5.1., you might want to mention that no metadata are >> specified >>>> at >>>> this point in time. >>> [Med] Aren't these mentions sufficient? >>> >>> This specification does not make any assumption about Context >> Headers >>> that are mandatory-to-implement or those that are mandatory-to- >>> process. >> Now that you stress it, maybe. >> I was interested to understand whose responsibility it is to specify >> those. >> Some such as: >> >> This specification does not make any assumption about Context Headers >> that are mandatory-to-implement or those that are mandatory-to- >> process. These considerations are deployment-specific. >> Those optional variable metadata specifications will be specified by >> xxx >> for ... >> > [Med] No surprise out there. Like any protocol extension, future documents will be developed to specify key context information. > >> And then, is this for a new service, a new application, a new ...? > [Med] Future specifications that specify context TLVs will specify under which condition a given TLV can be used and so. These considerations are really out of scope of the NSH spec. > >> I don't know the right terminology. >>> And >>> >>> No initial values are assigned at the creation of the registry. >>> >>> Indeed, "New IETF Assigned Optional Variable Length >>>> Metadata Type Registry is specified in this doc., but empty >>>> >>>> - Section 2.3 >>>> OPS question: SPI must be unique per admin domain? Otherwise, you're >>>> looking >>>> for trouble, right? This would be typically addressed in an >> "Operational >>>> Considerations" section. Where is my "Operational Considerations" >>>> section...? >>> [Med] Already covered in the SFC architecture (RFC 7665): >>> >>> SFFs maintain the requisite SFP forwarding information. SFP >>> forwarding information is associated with a service path identifier >>> that is used to uniquely identify an SFP. >> I surely missed that when I reviewed the normative references before >> reviewing this document ..., as I always do ... >> Any issue to repeat it here? >> > [Med] I do personally see it as redundant, but if you think this is important to implement the NSH spec, then it should be added. > >>>> - Section 2.4 >>>> Fixed length metadata. >>>> >>>> This specification does not make any assumptions about the content >> of >>>> the 16 byte Context Header that must be present when the MD Type >>>> field is set to 1, and does not describe the structure or meaning >> of >>>> the included metadata. >>>> >>>> An SFC-aware SF MUST receive the data semantics first in order to >>>> process the data placed in the mandatory context field. The data >>>> semantics include both the allocation schema and the meaning of the >>>> included data. >>>> >>>> I understand that the order of the metadata in the Fixed Length Context >>>> Header >>>> is important, right? >>> [Med] The notion of order in the opaque 16-byte block does not make in >> this spec. How that block is structured is really out of scope. >> This is a concept that I missed when reading this spec. >> I might not be the only one... > [Med] I hear you. Can you please indicate whether this text is not clear enough? > > === > This specification does not make any assumptions about the content of > the 16 byte Context Header that must be present when the MD Type > field is set to 1, and does not describe the structure or meaning of > the included metadata. > ==== > >>> Should it be mentioned? >>> >>> [Med] I don't think so. >>> >>> I understand that the fixed >>>> length >>>> metadata are specific per service, and that's the reason why there is >> no >>>> IANA >>>> for fixed length. Should this be mentioned? >>> [Med] The agreement in the WG is to publish documents specifying MD#1 as >> informational documents. IANA is not involved in this process, because >> there is no expected action with regards to MD#1 context headers. >> >> Regards, Benoit >>>> - if you publish a new version, change the order of these two >> paragraphs: >>>> Unassigned bits: All other flag fields, marked U, are unassigned >> and >>>> available for future use, see Section 11.2.1. Unassigned bits MUST >>>> be set to zero upon origination, and MUST be ignored and preserved >>>> unmodified by other NSH supporting elements. At reception, all >>>> elements MUST NOT modify their actions based on these unknown bits. >>>> >>>> Length: The total length, in 4-byte words, of the NSH including the >>>> Base Header, the Service Path Header, the Fixed Length Context >> Header >>>> or Variable Length Context Header(s). The length MUST be 0x6 for >> MD >>>> Type equal to 0x1, and MUST be 0x2 or greater for MD Type equal to >>>> 0x2. The length of the NSH header MUST be an integer multiple of 4 >>>> bytes, thus variable length metadata is always padded out to a >>>> multiple of 4 bytes. >>>> >>>> Lacking some time before the telechat, but not worth deferring (there >> are >>>> enough DISCUSS'). FYI, I arrived at section 5. >>>> >>>> >>>> _______________________________________________ >>>> sfc mailing list >>>> sfc@ietf.org >>>> https://www.ietf.org/mailman/listinfo/sfc >>> . >>> From nobody Thu Oct 12 09:19:30 2017 Return-Path: X-Original-To: sfc@ietf.org Delivered-To: sfc@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 614FE13452B; Thu, 12 Oct 2017 09:19:29 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Secretariat To: Cc: ipr-announce@ietf.org, sfc@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.63.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150782516939.16840.7498797932999802417@ietfa.amsl.com> Date: Thu, 12 Oct 2017 09:19:29 -0700 Archived-At: Subject: [sfc] IPR Disclosure Huawei Technologies Co., Ltd's Statement about IPR related to RFC 7665 X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Oct 2017 16:19:29 -0000 Dear Joel M. Halpern, Carlos Pignataro: An IPR disclosure that pertains to your RFC entitled "Service Function Chaining (SFC) Architecture" (RFC7665) was submitted to the IETF Secretariat on and has been posted on the "IETF Page of Intellectual Property Rights Disclosures" (https://datatracker.ietf.org/ipr/3080/). The title of the IPR disclosure is "Huawei Technologies Co.,Ltd's Statement about IPR related to RFC 7665" Thank you IETF Secretariat From nobody Mon Oct 16 02:33:56 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE3DE1344B4 for ; Mon, 16 Oct 2017 02:33:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); domainkeys=pass (1024-bit key) header.from=ietf@kuehlewind.net header.d=kuehlewind.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YNT4sN4neZBH for ; Mon, 16 Oct 2017 02:33:51 -0700 (PDT) Received: from kuehlewind.net (kuehlewind.net [83.169.45.111]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35678132944 for ; Mon, 16 Oct 2017 02:33:51 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=kuehlewind.net; b=MKndgmuaUQOhHuCFFgQp0HshmRo0Ajp3F55bY3jHz/2pWGhvIKlqMVHNvWiwhhaXPrrM7qpkflslc010n7gBNX90jc2uQjTfs4ikHiPIOr5quMYSMWOOLOxmHIuXJWmS3D+fQ4PYw5edd4BdesnXpyQX9yT3ulJvfZBGQxFyUaE=; h=Received:Received:Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:X-Mailer:X-PPP-Message-ID:X-PPP-Vhost; Received: (qmail 3722 invoked from network); 16 Oct 2017 11:33:48 +0200 Received: from p5dec287e.dip0.t-ipconnect.de (HELO ?192.168.178.33?) (93.236.40.126) by kuehlewind.net with ESMTPSA (DHE-RSA-AES256-SHA encrypted, authenticated); 16 Oct 2017 11:33:48 +0200 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: "Mirja Kuehlewind (IETF)" In-Reply-To: Date: Mon, 16 Oct 2017 11:33:47 +0200 Cc: Alia Atlas , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <1B63025A-9948-43FC-90CF-0025EE64E4D9@kuehlewind.net> References: <150653176579.25051.17983729650964908105.idtracker@ietfa.amsl.com> <2BA88A4C-8083-44DC-82A6-7AB8DB616EB6@cisco.com> <966599BB-D65B-4794-AD44-80CBD5092FEA@kuehlewind.net> To: "Carlos Pignataro (cpignata)" X-Mailer: Apple Mail (2.3273) X-PPP-Message-ID: <20171016093348.3712.63601@lvps83-169-45-111.dedicated.hosteurope.de> X-PPP-Vhost: kuehlewind.net Archived-At: Subject: Re: [sfc] =?utf-8?q?Mirja_K=C3=BChlewind=27s_Discuss_on_draft-ietf-s?= =?utf-8?q?fc-nsh-24=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 09:33:54 -0000 Hi Carlos, hi all, I will clear my discus now because the remaining point are more on the = clarification side then warrant a discuss. However, I would still like to further comment because I have to say = that I find some comments still not appropriately addressed.=20 [snip] >=20 >=20 > I am glad that now you understand the intention, and this issue is = addressed. >=20 > Thanks for the attempt at rewriting. >=20 > That paragraph is balancing in quite a delicate equilibrium. It is, as = you gathered, the result of long arduous WG discussions. Consequently I = am most hesitant to make any changes to it. >=20 >=20 >>=20 >> =E2=80=9EBy default OAM support MUST be disabled. Therefore a = SF/SFF/SFC Proxy/Classifier, that is not explicitly configured to = support OAM, MUST discards packets with the O bit set. An implementation = MAY provide a configurable parameter to enable the forwarding of = received SFC OAM packets to the next element in the chain. If OAM = support is enabled, OAM packets MUST be forwarded unmodified. Forwarding = OAM packets by SFC elements that do not itself support SFC OAM = procedures may be acceptable for a subset of OAM functions, but can = result in unexpected outcomes for others; thus, it is recommended to = analyze the impact of forwarding an OAM packet for all OAM functions = prior to enabling this behavior.=E2=80=9C >>=20 >> One part of my confusion was mixing up the fact that packet should = not be send unmodified with the configuration to forward or not. = Splitting that in a separate sentence as proposed above helps for my = understanding a lot. I still think the text in the draft is every unclear. I wouldn=E2=80=99t = want to require you at all to use my proposed wording but I wanted to = demonstrate with the proposed text what the unclear points are. The = difference in my text is a) that is clearly says MUST if configured = respectively (instead of using a very blurry SHOULD here). I guess the = alternative could actually be to not use any normative language. And b) = don=E2=80=99t mix up the fact that the data should not be changed with = the fact that they should forwarded or not. I think that was the part = where most of the confusing came from for me.=20 I understand that much discussion has happen about this. And I don=E2=80=99= t propose to change the statements your make here. But marking an = attempt to improve clarity, especially as this was so confusing that it = even let to a discuss from my side, can never hurt! [snip] >> > "An SFC-aware SF or SF Proxy MUST receive the data semantics first = in order to >> > process the data placed in the mandatory context field.=E2=80=9D >> > >> > And >> > >> > OLD: >> > included data. How an SFC-aware SF gets the data semantics is >> > outside the scope of this specification.=E2=80=9D >> > >> > NEW: >> > included data. How an SFC-aware SF or SFC Proxy gets the data = semantics is >> > outside the scope of this specification.=E2=80=9C >>=20 >> The problem is, even if I have received some semantics how do I know = that I have the right semantics? >>=20 >> The control-plane would pass the semantic associated with the = particular Service Function Path. My question was not at all, how a node would receive the information. = The question is how does the node know that these information actually = fits to the ones provided in the packet, and can confirm that these = information are not not outdated or provided wrongly. My thinking was = that is would be much more error-save to provide information about the = semantics in the packet itself. However, this is not the was the = protocol was designed right now. Maybe it is still worth to provide = further discussion on what to do if the semantics are not provided or do = not match the expected data in the packet (e.g. data has different size, = unexpected values -> these are at least cases that are easy to detect). [snip] >>=20 >> That=E2=80=99s fine in theory. In reality, especially e.g. for the = web server case you need to make sure that all packets belonging to the = same flow go to the same element. I thought it would actually be easier = to use different SFPs such that only the Classifier must be flow-aware. = If that=E2=80=99s not the case other nodes also need to be flow-aware = and keep flow state. This must be mention in the document! >>=20 >> The architecture is clear that the assignment of flows to particular = Service Functions can happen at a variety of different points. One of = the motivations for carrying meta-data is to allow a classifier to = insert information identifying a particular flow so that all its packets = can be properly load-balanced to the same Service Function. If the = Classifier does this, then there is not a need for every load-balancing = element to do reclassification.=20 >=20 > Again, what Alia said. >=20 > I trust these are now clear for you now. It was always clear but this seems just more complicated than needed. I = still think it would be much cleaner and less error-prone if you just = assign different paths for these cases; that would also save you a lot = of the problems with two different TTL fields. However, I guess it much = to late to change this now unfortunately. From nobody Mon Oct 16 02:37:32 2017 Return-Path: X-Original-To: sfc@ietf.org Delivered-To: sfc@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B56A132944; Mon, 16 Oct 2017 02:37:30 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?Mirja_K=C3=BChlewind?= To: "The IESG" Cc: draft-ietf-sfc-nsh@ietf.org, "Joel M. Halpern" , sfc-chairs@ietf.org, jmh@joelhalpern.com, sfc@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.63.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150814665016.438.8283935289429930923.idtracker@ietfa.amsl.com> Date: Mon, 16 Oct 2017 02:37:30 -0700 Archived-At: Subject: [sfc] =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_draft-ie?= =?utf-8?q?tf-sfc-nsh-26=3A_=28with_COMMENT=29?= X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 09:37:30 -0000 Mirja Kühlewind has entered the following ballot position for draft-ietf-sfc-nsh-26: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I'm clearing my discuss now, however, I don't think all of my comments have been adequately addressed. However, some points could be clarified such that these open points do not warrant to hold a discuss anymore. -------------------- Old discuss text: -------------------- I have a couple of comments on the design. I know, as always in IESG review state, it's probably too late to make any changes to the actual header format, therefore most of my comments are actually in the comment section below. I still decided to note them so at least people can consider these points. However, there are a few things that I need clarification for before publication, which I note in this section: 1) Sec 2.2 "SF/SFF/SFC Proxy/Classifier implementations that do not support SFC OAM procedures SHOULD discard packets with O bit set, but MAY support a configurable parameter to enable forwarding received SFC OAM packets unmodified to the next element in the chain. Forwarding OAM packets unmodified by SFC elements that do not support SFC OAM procedures may be acceptable for a subset of OAM functions, but can result in unexpected outcomes for others; thus, it is recommended to analyze the impact of forwarding an OAM packet for all OAM functions prior to enabling this behavior. The configurable parameter MUST be disabled by default." This part is really unclear to me and I believe needs to be further specified. Where should this configurable parameter be? In the Context header? Why don't you just use one of the unassigned bit to indicate if an unknown (OAM) packet should be forwarded or not? Moreover, I also disagree with this text. If there is a bit/a way to indicate if a not supported OAM packet should be forwarded or not, it should just be defined like this, while any considerations if that bit should be set or not depend on the OAM function itself and do not need to be discussed here. Finally, it is not well explained what an OAM packet is at all. Is that a 'fake' packet that is generated by the operator to actively test the (potentially newly configured) SFP? If so, why does a SF need to know if a packet is an OAM packet or not? Usually it's a bad idea to use different kind of traffic for testing compared to what will be used in operations. Please provide more explanation here! 2) section 2.4 "An SFC-aware SF MUST receive the data semantics first in order to process the data placed in the mandatory context field. The data semantics include both the allocation schema and the meaning of the included data. How an SFC-aware SF gets the data semantics is outside the scope of this specification." This is really confusing to me. I think this is what you need an actually data semantics aka type field for in the base header. Or is there an actual reason to not put this information directly in the base header where it is need but instead assuming some magical way this information may take to reach the node? If the assumption is that the SF is configured to know based of the SFI what the content of the context header has to be, you a) need to say that in the draft, and b) that's really error-prone because it's really hard to tell if the conext header actually holds the information that you need or just random crap (of course depending of the expected data type of this information). In short, I think you really need a type field somewhere here. In any case, you really need to explain this more! Also, the text further says: "An SF or SFC Proxy that does not know the format or semantics of the Context Header for an NSH with MD Type 1 MUST discard any packet with such an NSH..." How does the SFC proxy know that it knows the format or not if there is no type field or identifier that indicates what the format should be? Also, a related question from me: why is the context header present in all types of NSH if there is no use for it defined in this document yet? Why is there no fixed length NSH without a context header then? 3) Section 2.5.1: "If multiple instances of the same metadata are included in an NSH packet, but the definition of that context header does not allow for it, the SFC-aware SF MUST process the first instance and ignore subsequent instances." This seems error prone to me. If the same metadata appears multiple where it should not, that seems clearly like an error case for me. Just using the first one and proceed normally might not be the right thing to do. In any case I think such an occasion should at least be logged. If the multiple instances are just a copy of each other and carry the same information, it's probably okay to use that information and proceed. If the different instances carry different information, it maybe a bit dangerous to just use the first one and ignore others silently. In this case I would rather recommend to drop the packet... 4) In line with the second comment from the tsv-art review (thanks Wes!), I don't really understand why this documents says (sec 6) that there can be multiple next hops for the same SFP or SFs can be traversed in a different order. May understanding (from a quick look at RFC7665) would be that, if those things are needed e.g. for load balancing, then one should define different SFPs and the Classifier must have the knowledge that two SFP are equivalent and select them respectively. The reason why I'm really concerned about this is that usually a number of packets below to a flow and all packets belonging to the same flow just ideally take the same route. But usually only the Classifier has a notion of what a flow is and respectively will assign the SFI to the packets belonging to the same flow. If now any SF on the path can more or less randomly decided to forward packet belong to the same flow to one or another next nodes, I would assume that this is not only a problem for the flow, e.g. reordering, but also for SF itself in many cases. ------------------------ Old comment text: ------------------------ Further considerations: 1) I don't really see why a TTL in the base header is needed. I mostly understand why there is the Service Index in service header, also I think there should be better mean to validate that you SFP is correct and I ideally you should really not need this. However, loop prevention can be provided by both mechanism and moreover there is probably also often a TTL in the encapsulation protocol and loop prevention should really be a function of that forwarding protocol and not the NSH. 2) I don't see why you need the type field in the base header. This is fully redundant because because all you need is the length field. If the length is 0x2 it is what you have defined as type 1 if the length field is larger it is type 2. I also don't see the need for any other types in future because you also have the version field; if you need anything else you should go or probably have to go for a new version. Note that the general probably with unnecessary redundancy is that is add complexity. If you keep this redundancy you have to separately handle and implement the case(s) where the type is 1 but the length is larger than expected. If at all you could probably just use one bit to indicate that the length field is present and if not the length is 0x2. However, saving bits does not really seem to be a concern for you, so that might not actually be an advantage. 3) sec 2.5.1 "Unassigned bit: One unassigned bit is available for future use. This bit MUST NOT be set, and MUST be ignored on receipt." Is there an actual reason to have an unassigned bit here? Because I would assume that the type already provided enough flexibility for way to extend the metadata format in any way needed. 4) Also section 2.5.1: " Length: Indicates the length of the variable metadata, in bytes. In case the metadata length is not an integer number of 4-byte words, the sender MUST add pad bytes immediately following the last metadata byte to extend the metadata to an integer number of 4-byte words. The receiver MUST round up the length field to the nearest 4-byte word boundary, to locate and process the next field in the packet." Your definition of the length field might be more error-prone than needed. It would probably be easier to simply define the length as 4-byte words, and the type of course defines the content of the metadata field and as such can simply define which part of the total metadata field holds certain data of a certain type and with part is padding. 5) And finally I have to say it is unclear to me why the SFI and SI field are described as a separate header. Given they have to be present in all SFH, I would consider them as two fields of the base header. But it is after all really just an editorial issue. However, all this together with my previous comments makes the protocol spec actually much more complicated than it needs to be... 6) I also have to agree to the last comment of the tsv-art review: I think it would have been nicer to not only described the NSH but also define mappings to a set of possible encapsulations because I would assume that for each encapsulation there are a couple specific considerations that need to be made to make things work successfully. I don't think that all encapsulations can be captured by general consideration and I cannot make up my mind to go through all cases in my head to figure out if there are things that needs to be noted. From nobody Mon Oct 16 07:23:17 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A7411344FC; Mon, 16 Oct 2017 07:23:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.519 X-Spam-Level: X-Spam-Status: No, score=-14.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pI6259HiaHgv; Mon, 16 Oct 2017 07:22:55 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0A211344E6; Mon, 16 Oct 2017 07:22:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=46308; q=dns/txt; s=iport; t=1508163775; x=1509373375; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=6VrEDFPP+kapu+aC+vCjugDtq4dsn0RtgIjq77Rik9U=; b=Va/shiaAq6LjPhpRRuymAuh5MHEGddcpzqpFzN9GQetQI7LQ+EmKye3G Ow92NuYgWsxVHCLq1yg0g91P1O0fa4GEW0OggdXqQfL+8RfOJGF66bw6K 0IUKNCu50wSNX2Ky8KCF+3mJg4ep7GHOP2pGg9lVuOBooZPCRmcnXck4z c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CoAACsv+RZ/5ldJa1UCRkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNfZG4nB4Nzih+PMYF2li8QggQKI4UYAhqEPD8YAQIBAQEBAQE?= =?us-ascii?q?BayiFHgYjRBIQAgEIDioBBgMCAgIwFBECBAoEBYk5ZBCqRIInizIBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEYBYMtgWYhgVGBaiuCf4RNBQEIAwEFAgGDMS+CMgWKEAe?= =?us-ascii?q?JG4UzhyGBQgKHXY0MghSBcoQEiwyVQgIRGQGBOAEfOIEDRBJ6FUktAYI2gmEXG?= =?us-ascii?q?YFOdogRASaBDIERAQEB?= X-IronPort-AV: E=Sophos; i="5.43,387,1503360000"; d="scan'208,217"; a="17138588" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Oct 2017 14:22:53 +0000 Received: from XCH-RTP-016.cisco.com (xch-rtp-016.cisco.com [64.101.220.156]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v9GEMqIB026712 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 16 Oct 2017 14:22:53 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-016.cisco.com (64.101.220.156) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Mon, 16 Oct 2017 10:22:52 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Mon, 16 Oct 2017 10:22:52 -0400 From: "Carlos Pignataro (cpignata)" To: Med Boucadair CC: Ben Campbell , "Joel M. Halpern" , "draft-ietf-sfc-nsh@ietf.org" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Thread-Topic: [sfc] Ben Campbell's No Objection on draft-ietf-sfc-nsh-24: (with COMMENT) - Encrypted content Thread-Index: AQHTOBCDTgoC+lrqV0ufWx9QGKp/WKLKF/GAgAKCI4CABeOwAIAUaaOA Date: Mon, 16 Oct 2017 14:22:51 +0000 Message-ID: <17030B01-E0EF-413C-9D38-C1C54C4357A3@cisco.com> References: <150656415366.13695.13637551894724173929.idtracker@ietfa.amsl.com> <393cb3d3-687f-f092-435c-b95f207236cd@joelhalpern.com> <787AE7BB302AE849A7480A190F8B93300A04B418@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <2D7C2C05-161E-40AC-8029-E04552B4B07C@nostrum.com> <787AE7BB302AE849A7480A190F8B93300A04DA99@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A04DA99@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.116.133] Content-Type: multipart/alternative; boundary="_000_17030B01E0EF413C9D38C1C54C4357A3ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] Ben Campbell's No Objection on draft-ietf-sfc-nsh-24: (with COMMENT) - Encrypted content X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 14:23:08 -0000 --_000_17030B01E0EF413C9D38C1C54C4357A3ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QmVuLCBNZWQsDQoNCldlIHdpbGwgaW5kZWVkIGFkZCBzdWNoIGNvbnNpZGVyYXRpb25zIHdpdGhp biB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgd2UgYXJlIHJldmlzaW5nLg0KDQpUaGFua3Mh DQoNCuKAlA0KQ2FybG9zIFBpZ25hdGFybywgY2FybG9zQGNpc2NvLmNvbTxtYWlsdG86Y2FybG9z QGNpc2NvLmNvbT4NCg0KT24gT2N0IDMsIDIwMTcsIGF0IDEwOjM5IEFNLCBtb2hhbWVkLmJvdWNh ZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPiB3cm90 ZToNCg0KSGkgQmVuLA0KDQpUaGlzIG1ha2VzIGEgbG90IG9mIHNlbnNlLg0KDQpUaGFuayB5b3Uu DQoNCkNoZWVycywNCk1lZA0KDQotLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCkRlIDogQmVu IENhbXBiZWxsIFttYWlsdG86YmVuQG5vc3RydW0uY29tXQ0KRW52b3nDqSA6IHZlbmRyZWRpIDI5 IHNlcHRlbWJyZSAyMDE3IDIyOjQzDQrDgCA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE4NCkNj IDogSm9lbCBNLiBIYWxwZXJuOyBkcmFmdC1pZXRmLXNmYy1uc2hAaWV0Zi5vcmc8bWFpbHRvOmRy YWZ0LWlldGYtc2ZjLW5zaEBpZXRmLm9yZz47IHNmYy1jaGFpcnNAaWV0Zi5vcmc8bWFpbHRvOnNm Yy1jaGFpcnNAaWV0Zi5vcmc+Ow0KVGhlIElFU0c7IHNmY0BpZXRmLm9yZzxtYWlsdG86c2ZjQGll dGYub3JnPg0KT2JqZXQgOiBSZTogW3NmY10gQmVuIENhbXBiZWxsJ3MgTm8gT2JqZWN0aW9uIG9u IGRyYWZ0LWlldGYtc2ZjLW5zaC0yNDoNCih3aXRoIENPTU1FTlQpIC0gRW5jcnlwdGVkIGNvbnRl bnQNCg0KVG8gYmUgY2xlYXIsIEkgYW0gbm90IGFza2luZyBmb3IgdGhlIE5TSCB0byBjb21wbHkg d2l0aCB0aGUgYWR2aWNlIGluDQo4MTY1LiBJIGFtIGFza2luZyBpdCB0byBhY2tub3dsZWRnZSB0 aGF0IGFkdmljZSwgYW5kIHNheSBob3cgdGhhdCBhZHZpY2UNCmFwcGxpZXMuIElmIHRoZSBhbnN3 ZXIgaXMg4oCcaXQgZG9lc27igJl0IGFwcGx5IGJlY2F1c2UuLi7igJ0sIHRoYXTigJlzIGZpbmUu IEJ1dA0KSSB0aGluayBpdOKAmXMgYSBwcm9ibGVtIGZvciB0aGlzIGRyYWZ0IHRvIGlnbm9yZSB0 aGF0IGFkdmljZSBlbnRpcmVseS4NCg0KSGVyZeKAmXMgYW4gZXhhbXBsZSBvZiBzb21lIHBvdGVu dGlhbCB0ZXh0IHRvIGFkZCB0byB0aGUgc2VjdXJpdHkNCmNvbnNpZGVyYXRpb25zIHNlY3Rpb24s IG9yIGV2ZW4gYmV0dGVyLCBhIHByaXZhY3kgY29uc2lkZXJhdGlvbnMgc2VjdGlvbi4NCihJ4oCZ bSBub3Qgc2F5aW5nIHRoaXMgaXMgY29ycmVjdOKAlGl04oCZcyBqdXN0IGFuIGV4YW1wbGUgb2Yg d2hhdCBJIGhhdmUgaW4NCm1pbmQuKQ0KDQrigJwgVGhlIE5TSCBwcm92aWRlcyBhIG1lY2hhbmlz bSBmb3IgbmV0d29yayBlbGVtZW50cyB0byBhdHRhY2ggbWV0YWRhdGEgdG8NCnVzZXIgZGF0YSBm bG93cy4gW1JGQyA4MTY1XSBkZXNjcmliZXMgc29tZSByaXNrcyBhbmQgYWR2aWNlIHJlbGF0ZWQg dG8NCm1ldGFkYXRhIGluc2VydGlvbiBieSBtaWRkbGVib3hlcy4gVGhlIGFkdmljZSB0byBsaW1p dCBzdWNoIG1ldGFkYXRhIHRvDQp0aGF0IGluY2x1ZGVkIGJ5IHRoZSBlbmQtc3lzdGVtIGlzIG5v dCBmZWFzaWJsZSBmb3IgU0ZDIGJlY2F1c2UgW3JlYXNvbnNdLg0KVGhlIGltcGFjdCBvZiB0aGUg bWV0YWRhdGEgaXMgc29tZXdoYXQgbWl0aWdhdGVkIGJ5IHRoZSBsaW1pdGF0aW9uIG9mIHRoZQ0K TlNIIHRvIGEgc2luZ2xlIG9wZXJhdG9yIGVudmlyb25tZW50LCBzaW5jZSBzdWNoIGFuIG9wZXJh dG9yIGNhbiBiZQ0KYXNzdW1lZCB0byBhbHJlYWR5IGhhdmUgYWNjZXNzIHRvIHRoZSBpbnNlcnRl ZCBpbmZvcm1hdGlvbi4NCg0KSG93ZXZlciwgaW1wbGVtZW50b3JzIGFuZCBvcGVyYXRvcnMgc2hv dWxkIGJlIGF3YXJlIHRoYXQgbWV0YWRhdGEgb2Z0ZW4NCmhhcyBwcml2YWN5IGltcGxpY2F0aW9u cywgYW5kIHRob3NlIGltcGxpY2F0aW9ucyBhcmUgc29tZXRpbWVzIGhhcmQgdG8NCnByZWRpY3Qu IFRoZXJlZm9yZSBhdHRhY2hlZCBtZXRhZGF0YSBzaG91bGQgYmUgbGltaXRlZCB0byB0aGF0IG5l Y2Vzc2FyeQ0KZm9yIGNvcnJlY3Qgb3BlcmF0aW9uIG9mIHRoZSBTRlAuIOKAnA0KDQpUaGFua3Mh DQoNCkJlbi4NCg0KT24gU2VwIDI4LCAyMDE3LCBhdCAxOjI0IEFNLCBtb2hhbWVkLmJvdWNhZGFp ckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPiB3cm90ZToN Cg0KRGVhciBCZW4sDQoNCldpdGggcmVnYXJkcyB0byB5b3VyIGNvbW1lbnRzIHZzLiBSRkM4MTY1 LCBJIGRvbid0IHNlZSBob3cgdGhlIGFkdmljZSBpbg0KODE2NSBjYW4gYmUgZm9sbG93ZWQgaGVy ZS4NCg0KSSBoYXZlIHJhaXNlZCB0aGUgc3BlY2lmaWNzIG9mIHNlcnZpY2UgY2hhaW5pbmcgZHVy aW5nIHRoZSBJRVRGIExDIG9mDQpkcmFmdC1oYXJkaWUgKDgxNjUpOiB5b3UgY2FuIGNoZWNrIGF0 IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtDQphcmNoaXZlL3dlYi9pZXRmL2N1cnJlbnQvbXNn MTAwOTA5Lmh0bWwgKHNlYXJjaCBmb3IgInNlcnZpY2UgZnVuY3Rpb24NCmNoYWluaW5nIikuDQoN CkNoZWVycywNCk1lZA0KDQotLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCkRlIDogc2ZjIFtt YWlsdG86c2ZjLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQgZGUgQmVuIENhbXBiZWxsDQpF bnZvecOpIDogamV1ZGkgMjggc2VwdGVtYnJlIDIwMTcgMDY6MTUNCsOAIDogSm9lbCBNLiBIYWxw ZXJuDQpDYyA6IGRyYWZ0LWlldGYtc2ZjLW5zaEBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1z ZmMtbnNoQGlldGYub3JnPjsgc2ZjLWNoYWlyc0BpZXRmLm9yZzxtYWlsdG86c2ZjLWNoYWlyc0Bp ZXRmLm9yZz47IFRoZSBJRVNHOw0Kc2ZjQGlldGYub3JnPG1haWx0bzpzZmNAaWV0Zi5vcmc+DQpP YmpldCA6IFJlOiBbc2ZjXSBCZW4gQ2FtcGJlbGwncyBObyBPYmplY3Rpb24gb24gZHJhZnQtaWV0 Zi1zZmMtbnNoLTI0Og0KKHdpdGggQ09NTUVOVCkgLSBFbmNyeXB0ZWQgY29udGVudA0KDQpIaSBK b2VsLA0KDQpPbiByZWZsZWN0aW9uLCB0aGUg4oCcZW5jcnlwdGVkIHBheWxvYWTigJ0gcGFydCBt YXkgYmUgYSByZWQgaGVycmluZy4gTGV0DQptZQ0KZ2VuZXJhbGl6ZSB0aGF0IHRvIOKAnHdpdGho ZWxkIGluZm9ybWF0aW9u4oCdLiAgQXMgeW91IG1lbnRpb24sIHRoZQ0KbWV0YWRhdGENCm1hcmtz IHdoYXQgdGhlIG9wZXJhdG9yIHdhbnRzIHRvIGtub3cgYWJvdXQgYSBwYWNrZXQsIGJ1dCB0aGF0 IG1heQ0Kc29tZXRpbWVzIGNvbmZsaWN0IHdpdGggd2hhdCB0aGUgdXNlciBkb2VzbuKAmXQgd2Fu dCB0byB0aGVtIHRvIGtub3cuDQpIZXJl4oCZcw0KYW4gZXhhbXBsZToNCg0KTGV0cyBjb25zaWRl ciBhbiBlbmQgdXNlciB0aGF0IGRvZXNuJ3Qgd2FudCB0byBiZSB0cmFja2VkIGZvcg0KYWR2ZXJ0 aXNpbmcNCnB1cnBvc2VzLiBUaGV5IGJsb2NrIGNlcnRhaW4gdHJhY2tpbmcgY29va2llcyBhbmQg YW55dGhpbmcgZWxzZSB0aGF0DQpzaG93cw0KY29udGludWl0eSBvZiBpZGVudGl0eSB0byB3ZWIg c2VydmVycy4gQnV0IGFzIHlvdSBtZW50aW9uLCB0aGUgb3BlcmF0b3INCm5lZWRzIG9yIHdhbnRz IHRvIGtub3cgdGhlIHN1YnNjcmliZXIgSUQsIHNvIHRoZSBjbGFzc2lmaWVyIGFkZHMgdGhhdA0K dG8NCnRoZSBOU0guLiBUaGUgdGVybWluYWwgZWxlbWVudCBpbiB0aGUgY2hhaW4gaGFwcGVucyB0 byBiZSBhIHdlYiBzZXJ2aWNlDQp0aGF0IHVzZXMgdGhlIE5TSCBjb250ZW50cyB0byB0cmFjayB0 aGUgdXNlciBmb3IgYWR2ZXJ0aXNpbmcgcHVycG9zZXMuDQpZb3UNCm1heSByZWNhbGwgYSBjb250 cm92ZXJzeSBhIHdoaWxlIGJhY2sgYWJvdXQgYSBtYWpvciBvcGVyYXRvciBkb2luZw0Kc29tZXRo aW5nIHNpbWlsYXIgdXNpbmcgSFRUUCBoZWFkZXIgZW5yaWNobWVudC4NCg0KSSB0aGluayB0aGUg YW5zd2VyIHRvIHRoaXMgZm9yIHRoaXMgcGFydGljdWxhciBjYXNlIGlzIHRoYXQgdGhlIE5TSCBp cw0KYXNzdW1lZCBub3QgdG8gZ28gb3V0c2lkZSBhIHNpbmdsZSBhZG1pbmlzdHJhdGl2ZSBkb21h aW4sIGFuZCB0aGF0IGFsbA0KZWxlbWVudHMgaW4gdGhlIHNhbWUgZG9tYWluIGNhbiBiZSBhc3N1 bWVkIHRvIGhhdmUgYWNjZXNzIHRvIHRoZSBzYW1lDQppbmZvcm1hdGlvbi4gVGhhdCBpcywgdGhl IE5TSCBpcyBqdXN0IGEgY29udmVuaWVudCB3YXkgdG8gdHJhbnNmZXINCm1ldGFkYXRhIHRoZXkg Y291bGQgcGFzcyBpbiBvdGhlciB3YXlzLiBXaGlsZSB0aGUgdXNlciBtYXkgbm90IGJlDQpjb25z b2xlZA0KYnkgdGhlIGZhY3QgdGhhdCB0aGUgd2ViIHNlcnZpY2UgdHJhY2tpbmcgdGhlbSBiZWxv bmdzIHRvIHRoZSBzYW1lDQpjb21wYW55DQphcyB0aGVpciBhY2Nlc3MgbmV0d29yaywgdGhlIHVz ZSBvZiB0aGUgTlNIIGRvZXNu4oCZdCBhZGQgYW4gaXNzdWUgdGhhdA0KY291bGRu4oCZdCBhbHJl YWR5IGV4aXN0LiAoVGhpcyBzdWdnZXN0cyB0aGF0IHRoZSBpZGVhIG9mIGEgc2luZ2xlDQpvcGVy YXRvcg0KZW52aXJvbm1lbnQgbWF5IGJlIGNvbnNpZGVyYWJseSBtb3JlIGNvbXBsZXggdGhhdCB0 aGUgZHJhZnQgbWFrZXMgaXQNCnNvdW5kLCBidXQgSSBkb27igJl0IHNlZSBtdWNoIHRvIGRvIGFi b3V0IHRoYXQuKQ0KDQpTbyBJIGd1ZXNzIHdoYXQgSSBhbSBhc2tpbmcgZm9yIGlzIHNvbWUgdGV4 dCB0aGF0IHJlY29nbml6ZXMgdGhhdCB1c2Vycw0KaGF2ZSBhbiBpbnRlcmVzdCBpbiBtZXRhZGF0 YSBtaW5pbWl6YXRpb24sIGFuZCBzb21lIHN1Z2dlc3Rpb24gdGhhdA0Kb3BlcmF0b3JzIGtlZXAg dGhhdCBpbiBtaW5kLCBhbmQgbm90IGFkZCBtZXRhZGF0YSBiZXlvbmQgdGhlIG1pbmltdW0NCm5l ZWRlZCB0byBtYWtlIHRoZSBTRlAgZnVuY3Rpb24gY29ycmVjdGx5Lg0KDQooVG8gYnJpbmcgZW5j cnlwdGlvbiBiYWNrIGludG8gdGhlIHBpY3R1cmUsIG9uZSBjYW4gcHJvYmFibHkgY29uc3RydWN0 DQpzaW1pbGFyIGNhc2VzIGludm9sdmluZyBWUE5z4oCUZm9yIGV4YW1wbGUgc2VydmljZXMgdGhh dCBhZGQgdGhlIG9yaWdpbmFsDQpzb3VyY2UgSVAgYWRkcmVzcyBhcyBtZXRhZGF0YSB0byBhIFZQ TiBmbG93LikNCg0KVGhhbmtzIQ0KDQpCZW4uDQoNCk9uIFNlcCAyNywgMjAxNywgYXQgOTo0NSBQ TSwgSm9lbCBNLiBIYWxwZXJuIDxqbWhAam9lbGhhbHBlcm4uY29tPG1haWx0bzpqbWhAam9lbGhh bHBlcm4uY29tPj4NCndyb3RlOg0KDQpCZW4sIEkgYW0gIHJlYWxseSBub3QgY2xlYXIgb24gd2hh dCB0byBkbyB3aXRoIHlvdXIgY29tbWVudCBhYm91dA0KZW5jcnlwdGVkIGNvbnRlbnQuDQoNCk5v dGhpbmcgaW4gdGhpcyB3b3JrIGVuYWJsZXMgb3IgcHJvbW90ZXMgb3BlcmF0b3JzIGJyZWFraW5n IGVuY3J5cHRpb24NCihhbiBlYXJsaWVyIHZlcnNpb24gaGFkIGEgbGluZSB0aGF0IGluY29ycmVj dGx5IHN1Z2dlc3RlZCBzdWNoLikNClRoZSBtZXRhZGF0YSBpcyB1c2VkIHRvIG1hcmsgd2hhdCB0 aGUgb3BlcmF0b3Igd2FudHMgdG8ga25vdyBhYm91dCB0aGUNCnBhY2tldC4gIEV2ZW4gZm9yIGVu Y3J5cHRlZCBjb250ZW50LCB0aGUgb3BlcmF0b3IgbWF5IG5lZWQgdG8ga253byB0aGUNCnNzdWJz Y3JpYmVyIElELiAgRm9yIGVuY3J5cHRlZCBjb250ZW50LCB0aGUgb3BlcmF0b3IgbWlnaHQgKG9y IG1pZ2h0DQpub3QpDQpjaG9vc2UgdG8gcHV0IG1ldGFkYXRhIGluZGljYXRpbmcgdGhlIHRoZSBj b250ZW50IGlzIHVuaW50ZXJwcmV0YWJsZQ0KKGlmDQpoZSBkZWNpZGVzIGl0IGlzIHVuaW50ZXJw cmV0YWJsZS4pICBDbGVhcmx5LCBoZSBjYW4gbm90IHB1dCBvbg0KaW5mb21yYXRpb24NCmFib3V0 IHRoZSBlbmNyeXB0ZWQgaW5mb3JtYXRpb24sIGFzIGhlIGRvZXMgbm90IHNlZSB0aGF0Lg0KSSBj YW4gbm90IGZpZ3VyZSBvdXQgd2hlcmUgd2Ugd291bGQgc2F5IHNvbWV0aGluZyBsaWtlIHRoYXQs IG9yIHdoeSB3ZQ0Kd291bGQgc2F5IGl0Lg0KDQpZb3VycywNCkpvZWwNCg0KT24gOS8yNy8xNyAx MDowMiBQTSwgQmVuIENhbXBiZWxsIHdyb3RlOg0KQmVuIENhbXBiZWxsIGhhcyBlbnRlcmVkIHRo ZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KZHJhZnQtaWV0Zi1zZmMtbnNoLTI0OiBO byBPYmplY3Rpb24NCldoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGlu ZSBpbnRhY3QgYW5kIHJlcGx5IHRvIGFsbA0KZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRo ZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0DQp0aGlzDQppbnRyb2R1Y3Rvcnkg cGFyYWdyYXBoLCBob3dldmVyLikNClBsZWFzZSByZWZlciB0byBodHRwczovL3d3dy5pZXRmLm9y Zy9pZXNnL3N0YXRlbWVudC9kaXNjdXNzLQ0KY3JpdGVyaWEuaHRtbA0KZm9yIG1vcmUgaW5mb3Jt YXRpb24gYWJvdXQgSUVTRyBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NClRoZSBkb2N1 bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVy ZToNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc2ZjLW5zaC8N Ci0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQ0KLQ0KQ09NTUVOVDoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KLQ0KU3Vic3RhbnRpdmU6 DQotIEdlbmVyYWw6IFRoaXMgaXMgYSBtZWNoYW5pc20gdG8gYWRkIG1ldGFkYXRhIHRvIHVzZXIg Zmxvd3MuIFRoZXJlDQppcw0KdmVyeQ0KbGl0dGxlIGRpc2N1c3Npb24gYWJvdXQgaG93IHRoYXQg bWV0YWRhdGEgbWF5IHJlbGF0ZSB0byB0aGUNCmFwcGxpY2F0aW9uDQpsYXllcg0KcGF5bG9hZHMu IEl0J3MgbGlrZWx5IHRoYXQgc29tZSBvZiB0aG9zZSBwYXlsb2FkcyB3aWxsIGJlIGVuY3J5cHRl ZA0KYnkNCnRoZSB1c2VyDQppbiBhbiBhdHRlbXB0IHRvIGNvbnRyb2wgd2hhdCBpbmZvcm1hdGlv biBpcyBzaGFyZWQgd2l0aCBtaWRkbGVib3hlcy4NCkknZCBsaWtlDQp0byBzZWUgc29tZSBkaXNj dXNzaW9uIGFib3V0IGhvdyB0aGlzIHJlbGF0ZXMgdG8gdGhlIGd1aWRhbmNlIGluIFJGQw0KODE2 NS4NCihOb3RlOiBJIGFtIG9uIHRoZSBmZW5jZSBhYm91dCB3aGV0aGVyIHRoaXMgc2hvdWxkIGJl IGEgRElTQ1VTUy4gQnV0DQpzaW5jZSAib24NCnRoZSBmZW5jZSIgaXMgcHJvYmFibHkgaW5zdWZm aWNpZW50IGdyb3VuZHMgZm9yIGEgRElTQ1VTUywgSSdtDQpsZWF2aW5nDQppdCBhcyBhDQpjb21t ZW50LikNCi0gR2VuZXJhbDogSSBzdXBwb3J0IEthdGhsZWVuJ3MgRElTQ1VTUyBwb2ludHMgY29u Y2VybmluZyBpbnRlZ3JpdHkNCnByb3RlY3Rpb24uDQpUaGUgZG9jdW1lbnQgbGVhdmVzIHRoYXQg dXAgdG8gdGhlIHRyYW5zcG9ydGluZyBwcm90b2NvbC4gSSB0aGluaw0KaXQncw0KcmVhc29uYWJs ZSB0byByZWNvbW1lbmQgdGhhdCB0aGF0IHByb3RvY29sIGF0IGxlYXN0IGRlZmF1bHQgdG8NCnBy b3ZpZGluZw0KaW50ZWdyaXR5IHByb3RlY3Rpb24gdW5sZXNzIHRoZXJlJ3MgYSBnb29kIHJlYXNv biBub3QgdG8uDQotMi4yLCAidmVyc2lvbiI6IEhvdyBpcyB0aGUgdmVyc2lvbiBmaWVsZCB0byBi ZSB1c2VkIGJ5IGNvbnN1bWVycz8NClRoYXQNCmlzLA0Kd2hhdCBzaG91bGQgYSByZWNpcGllbnQg ZG8gaWYgdGhlIGZpZWxkIGNvbnRhaW5zIGEgdmVyc2lvbiBudW1iZXIgaXQNCmRvZXNuJ3QNCnN1 cHBvcnQvcmVjb2duaXplPw0KLTIuMiwgTUQgdHlwZSAweDA6ICJJbXBsZW1lbnRhdGlvbnMgU0hP VUxEIHNpbGVudGx5DQogZGlzY2FyZCBwYWNrZXRzIHdpdGggTUQgVHlwZSAweDAuIg0KV2h5IG5v dCBNVVNUPw0KLS0gTUQgdHlwZSAweEY6ICJJbXBsZW1lbnRhdGlvbnMgbm90IGV4cGxpY2l0bHkg Y29uZmlndXJlZCB0byBiZSBwYXJ0DQpvZg0KIGFuIGV4cGVyaW1lbnQgU0hPVUxEIHNpbGVudGx5 IGRpc2NhcmQgcGFja2V0cyB3aXRoIE1EIFR5cGUgMHhGLiINCldoeSBub3QgTVVTVD8NCi0yLjIs IE5leHQgUHJvdG9jb2wgVmFsdWVzOg0KV2h5IGFyZSB0aGVyZSAyIGV4cGVyaW1lbnRhbCB2YWx1 ZXM/IChhcyBvcHBvc2VkIHRvIDEsIG9yLCB3ZWxsLCAzKS4NCi0yLjMsIGxhc3QgcGFyYWdyYXBo IChhbmQgc2V2ZXJhbCBvdGhlciBwbGFjZXMpOg0KVGhpcyBkcmFmdCBzZWVtcyB0byB0YWtlIGEg cG9zaXRpb24gdGhhdCBhIGZhaWxlZCBTRlAgbWVhbnMgdGhlDQpzZXJ2aWNlDQpsZXZlbA0KZmxv dyBmYWlscy4gQXJlIHRoZXJlIG5vIHVzZSBjYXNlcyB3aGVyZSBkZWxpdmVyeSBvZiB0aGUgc2Vy dmljZSBmbG93DQppcw0KY3JpdGljYWwgYW5kIHNob3VsZCBoYXBwZW4gZXZlbiBpZiB0aGUgY2hh aW4gb2YgbWlkZGxlYm94ZXMgZmFpbHM/DQotMi40LCBwYXJhZ3JhcGggc3RhcnRpbmcgd2l0aCAi QW4gU0ZDLWF3YXJlIFNGIE1VU1QgcmVjZWl2ZSB0aGUgZGF0YQ0Kc2VtYW50aWNzLi4uIiBJJ20g bm90IHN1cmUgd2hhdCB0aGUgaW50ZW50IG9mIHRoaXMgcGFyYWdyYXBoIGlzLiBJcw0KdGhhdCBN VVNUDQpyZWFsbHkgYSBzdGF0ZW1lbnQgb2YgZmFjdD8gT3IgaXMgdGhlcmUgcmVhbGx5IGFuZCBl eHBlY3RhdGlvbiBvZiBhbg0Kb3V0LW9mLWJhbmQgZGVsaXZlcnkgb2Ygc29tZSBzZW1hbnRpYyBk ZWZpbml0aW9uPw0KLTMsIGxpc3QgaXRlbSAxOiAiQSBzZXJ2aWNlIGNsYXNzaWZpZXIgTVVTVCBp bnNlcnQgYW4gTlNIIGF0IHRoZQ0Kc3RhcnQNCm9mIGFuDQpTRlAuIiBXaGF0IGlmIGFuIGluaXRp YWwgY2xhc3NpZmllciByZWNlaXZlcyBhIHBhY2tldCB0aGF0IGFscmVhZHkNCmhhcw0KYW4gTlNI Pw0KQ2FuIG11bHRpcGxlIE5TSHMgYmUgc3RhY2tlZD8NCi03LjEsIGxhc3QgcGFyYWdyYXBoOiAi RGVwZW5kaW5nIG9uIHRoZSBpbmZvcm1hdGlvbiBjYXJyaWVkIGluIHRoZQ0KbWV0YWRhdGEsDQpk YXRhIHByaXZhY3kNCiBjb25zaWRlcmF0aW9ucyBtYXkgbmVlZCB0byBiZSBjb25zaWRlcmVkLiAi DQoibWF5IG5lZWQgdG8gYmUgY29uc2lkZXJlZCIgaXMgd2VhayBzYXVjZS4gRGF0YSBwcml2YWN5 IGFsd2F5cyBuZWVkcw0KdG8NCmJlDQpjb25zaWRlcmVkLCBldmVuIGlmIHRoZSBfb3V0cHV0XyBv ZiB0aGF0IGNvbnNpZGVyYXRpb24gaXMgdGhhdCB0aGVyZQ0KaXMNCm5vdGhpbmcNCnNlbnNpdGl2 ZSBiZWluZyBjYXJyaWVkLiBQbGVhc2UgY29uc2lkZXIgZHJvcHBpbmcgdGhlICJtYXkiLg0KQWxz bywgdGhpcyBzZWVtcyBsaWtlIGFuIG9kZCBwbGFjZSB0byBidXJ5IGEgcHJpdmFjeSBkaXNjdXNz aW9uLg0KUGxlYXNlDQpjb25zaWRlciBtb3ZpbmcgdGhpcyB0byBhICJQcml2YWN5IENvbnNpZGVy YXRpb25zIiBzZWN0aW9uLg0KLTgsIGZpcnN0IHBhcmFncmFwaDoNCkl0IHNlZW1zIGxpa2UgaW5z aWRlciBhdHRhY2tzIGFyZSB3b3J0aCBhdCBsZWFzdCBhIG1lbnRpb24gd2hlbg0KZGlzY3Vzc2lu ZyBhDQpzaW5nbGUgb3BlcmF0b3IgZW52aXJvbm1lbnQgYXMgYSBtaXRpZ2F0b3IgYWdhaW5zdCBh dHRhY2tzLg0KLTguMSwgMm5kIHBhcmFncmFwaDoNClRoaXMgZG9lc24ndCBzZWVtIGxpa2UgYSBz aW5nbGUgb3BlcmF0b3Igc2NlbmFyaW8sIGluIHRoZSBzZW5zZSB0aGF0DQpwYXJ0IG9mDQp0aGUg ZmxvdyBjcm9zc2VzIGEgbmV0d29yayB0aGF0IGlzIG5vdCBjb250cm9sbGVkIGJ5IHRoYXQgb3Bl cmF0b3IuDQotOC4zLCA0dGggcGFyYWdyYXBoOiBQbGVhc2UgZWxhYm9yYXRlIG9uIHdoYXQgaXMg bWVhbnQgYnkNCiJvYmZ1c2NhdGluZyINCnN1YnNjcmliZXIgaWRlbnRpZnlpbmcgaW5mb3JtYXRp b24gKGFzIG9wcG9zZWQgdG8gImVuY3J5cHRpbmciIG9yDQoibGVhdmluZyBpdA0Kb3V0IGluIHRo ZSBmaXJzdCBwbGFjZSIuKQ0KRWRpdG9yaWFsOg0KLTIuMiwgIk8gYml0IiwgbGFzdCBwYXJhZ3Jh cGg6ICJUaGUgY29uZmlndXJhYmxlIHBhcmFtZXRlciBNVVNUIGJlDQogZGlzYWJsZWQgYnkgZGVm YXVsdC4iDQpEb2VzICJkaXNhYmxlZCIgbWVhbiAidW5zZXQiICAob3IgInNldCB0byB6ZXJvIik/ DQotMi4yLCAidW5hc3NpZ25lZCBiaXRzIjogIkF0IHJlY2VwdGlvbiwgYWxsDQogZWxlbWVudHMg TVVTVCBOT1QgbW9kaWZ5IHRoZWlyIGFjdGlvbnMgYmFzZWQgb24gdGhlc2UgdW5rbm93bg0KYml0 cy4iDQpJc24ndCB0aGF0IE1VU1QgTk9UIGp1c3QgYSByZXN0YXRlbWVudCBvZiB0aGUgIk1VU1Qg aWdub3JlIiBmcm9tIHRoZQ0KcHJldmlvdXMNCnNlbnRlbmNlPyBUaGVyZSdzIG5vIHByb2JsZW0g d2l0aCByZWluZm9yY2luZyBhIHBvaW50LCBidXQgdGhlcmUNCnNob3VsZG4ndCBiZQ0KbXVsdGlw bGUgaW5zdGFuY2VzIG9mIHRoZSBzYW1lIDIxMTkgcmVxdWlyZW1lbnQuIEFsc28sIHdvdWxkIGxv Z2dpbmcNCmENCndhcm5pbmcNCnZpb2xhdGUgdGhlICJNVVNUIE5PVCBtb2RpZnkgdGhlaXIgYWN0 aW9ucy9NVVNUIGlnbm9yZSIgcmVxdWlyZW1lbnQ/DQotOCwgZmlyc3QgcGFyYWdyYXBoOiAiTlNI IGlzIGRlc2lnbmVkIGZvciB1c2Ugd2l0aGluIG9wZXJhdG9yDQplbnZpcm9ubWVudHMuIg0KSXMg dGhlcmUgYSBtaXNzaW5nICJzaW5nbGUiIGJlZm9yZSAib3BlcmF0b3IiPw0KDQoNCg0K --_000_17030B01E0EF413C9D38C1C54C4357A3ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <2D6389172A29BF41B47EA7D24D1F9DFE@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KQmVuLCBNZWQsDQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5XZSB3aWxsIGluZGVlZCBh ZGQgc3VjaCBjb25zaWRlcmF0aW9ucyB3aXRoaW4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25z IHdlIGFyZSByZXZpc2luZy4mbmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoYW5rcyE8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0id2Via2l0LWJsb2NrLXBsYWNlaG9sZGVyIj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0 LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7 IiBjbGFzcz0iIj4NCuKAlDxiciBjbGFzcz0iIj4NCkNhcmxvcyBQaWduYXRhcm8sJm5ic3A7PGEg aHJlZj0ibWFpbHRvOmNhcmxvc0BjaXNjby5jb20iIGNsYXNzPSIiPmNhcmxvc0BjaXNjby5jb208 L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gT2N0IDMs IDIwMTcsIGF0IDEwOjM5IEFNLCA8YSBocmVmPSJtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3Jh bmdlLmNvbSIgY2xhc3M9IiI+DQptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPiB3cm90 ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5IaSBCZW4sIDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0i Ij4NClRoaXMgbWFrZXMgYSBsb3Qgb2Ygc2Vuc2UuIDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0i Ij4NClRoYW5rIHlvdS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpDaGVlcnMsPGJyIGNs YXNzPSIiPg0KTWVkPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlw ZT0iY2l0ZSIgY2xhc3M9IiI+LS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tPGJyIGNsYXNzPSIi Pg0KRGUmbmJzcDs6IEJlbiBDYW1wYmVsbCBbPGEgaHJlZj0ibWFpbHRvOmJlbkBub3N0cnVtLmNv bSIgY2xhc3M9IiI+bWFpbHRvOmJlbkBub3N0cnVtLmNvbTwvYT5dPGJyIGNsYXNzPSIiPg0KRW52 b3nDqSZuYnNwOzogdmVuZHJlZGkgMjkgc2VwdGVtYnJlIDIwMTcgMjI6NDM8YnIgY2xhc3M9IiI+ DQrDgCZuYnNwOzogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTjxiciBjbGFzcz0iIj4NCkNjJm5i c3A7OiBKb2VsIE0uIEhhbHBlcm47IDxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLXNmYy1uc2hA aWV0Zi5vcmciIGNsYXNzPSIiPmRyYWZ0LWlldGYtc2ZjLW5zaEBpZXRmLm9yZzwvYT47DQo8YSBo cmVmPSJtYWlsdG86c2ZjLWNoYWlyc0BpZXRmLm9yZyIgY2xhc3M9IiI+c2ZjLWNoYWlyc0BpZXRm Lm9yZzwvYT47PGJyIGNsYXNzPSIiPg0KVGhlIElFU0c7IDxhIGhyZWY9Im1haWx0bzpzZmNAaWV0 Zi5vcmciIGNsYXNzPSIiPnNmY0BpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQpPYmpldCZuYnNw OzogUmU6IFtzZmNdIEJlbiBDYW1wYmVsbCdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLXNm Yy1uc2gtMjQ6PGJyIGNsYXNzPSIiPg0KKHdpdGggQ09NTUVOVCkgLSBFbmNyeXB0ZWQgY29udGVu dDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRvIGJlIGNsZWFyLCBJIGFtIG5vdCBhc2tp bmcgZm9yIHRoZSBOU0ggdG8gY29tcGx5IHdpdGggdGhlIGFkdmljZSBpbjxiciBjbGFzcz0iIj4N CjgxNjUuIEkgYW0gYXNraW5nIGl0IHRvIGFja25vd2xlZGdlIHRoYXQgYWR2aWNlLCBhbmQgc2F5 IGhvdyB0aGF0IGFkdmljZTxiciBjbGFzcz0iIj4NCmFwcGxpZXMuIElmIHRoZSBhbnN3ZXIgaXMg 4oCcaXQgZG9lc27igJl0IGFwcGx5IGJlY2F1c2UuLi7igJ0sIHRoYXTigJlzIGZpbmUuIEJ1dDxi ciBjbGFzcz0iIj4NCkkgdGhpbmsgaXTigJlzIGEgcHJvYmxlbSBmb3IgdGhpcyBkcmFmdCB0byBp Z25vcmUgdGhhdCBhZHZpY2UgZW50aXJlbHkuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0K SGVyZeKAmXMgYW4gZXhhbXBsZSBvZiBzb21lIHBvdGVudGlhbCB0ZXh0IHRvIGFkZCB0byB0aGUg c2VjdXJpdHk8YnIgY2xhc3M9IiI+DQpjb25zaWRlcmF0aW9ucyBzZWN0aW9uLCBvciBldmVuIGJl dHRlciwgYSBwcml2YWN5IGNvbnNpZGVyYXRpb25zIHNlY3Rpb24uPGJyIGNsYXNzPSIiPg0KKEni gJltIG5vdCBzYXlpbmcgdGhpcyBpcyBjb3JyZWN04oCUaXTigJlzIGp1c3QgYW4gZXhhbXBsZSBv ZiB3aGF0IEkgaGF2ZSBpbjxiciBjbGFzcz0iIj4NCm1pbmQuKTxiciBjbGFzcz0iIj4NCjxiciBj bGFzcz0iIj4NCuKAnCBUaGUgTlNIIHByb3ZpZGVzIGEgbWVjaGFuaXNtIGZvciBuZXR3b3JrIGVs ZW1lbnRzIHRvIGF0dGFjaCBtZXRhZGF0YSB0bzxiciBjbGFzcz0iIj4NCnVzZXIgZGF0YSBmbG93 cy4gW1JGQyA4MTY1XSBkZXNjcmliZXMgc29tZSByaXNrcyBhbmQgYWR2aWNlIHJlbGF0ZWQgdG88 YnIgY2xhc3M9IiI+DQptZXRhZGF0YSBpbnNlcnRpb24gYnkgbWlkZGxlYm94ZXMuIFRoZSBhZHZp Y2UgdG8gbGltaXQgc3VjaCBtZXRhZGF0YSB0bzxiciBjbGFzcz0iIj4NCnRoYXQgaW5jbHVkZWQg YnkgdGhlIGVuZC1zeXN0ZW0gaXMgbm90IGZlYXNpYmxlIGZvciBTRkMgYmVjYXVzZSBbcmVhc29u c10uPGJyIGNsYXNzPSIiPg0KVGhlIGltcGFjdCBvZiB0aGUgbWV0YWRhdGEgaXMgc29tZXdoYXQg bWl0aWdhdGVkIGJ5IHRoZSBsaW1pdGF0aW9uIG9mIHRoZTxiciBjbGFzcz0iIj4NCk5TSCB0byBh IHNpbmdsZSBvcGVyYXRvciBlbnZpcm9ubWVudCwgc2luY2Ugc3VjaCBhbiBvcGVyYXRvciBjYW4g YmU8YnIgY2xhc3M9IiI+DQphc3N1bWVkIHRvIGFscmVhZHkgaGF2ZSBhY2Nlc3MgdG8gdGhlIGlu c2VydGVkIGluZm9ybWF0aW9uLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkhvd2V2ZXIs IGltcGxlbWVudG9ycyBhbmQgb3BlcmF0b3JzIHNob3VsZCBiZSBhd2FyZSB0aGF0IG1ldGFkYXRh IG9mdGVuPGJyIGNsYXNzPSIiPg0KaGFzIHByaXZhY3kgaW1wbGljYXRpb25zLCBhbmQgdGhvc2Ug aW1wbGljYXRpb25zIGFyZSBzb21ldGltZXMgaGFyZCB0bzxiciBjbGFzcz0iIj4NCnByZWRpY3Qu IFRoZXJlZm9yZSBhdHRhY2hlZCBtZXRhZGF0YSBzaG91bGQgYmUgbGltaXRlZCB0byB0aGF0IG5l Y2Vzc2FyeTxiciBjbGFzcz0iIj4NCmZvciBjb3JyZWN0IG9wZXJhdGlvbiBvZiB0aGUgU0ZQLiDi gJw8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGFua3MhPGJyIGNsYXNzPSIiPg0KPGJy IGNsYXNzPSIiPg0KQmVuLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3Rl IHR5cGU9ImNpdGUiIGNsYXNzPSIiPk9uIFNlcCAyOCwgMjAxNywgYXQgMToyNCBBTSwgPGEgaHJl Zj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iIGNsYXNzPSIiPg0KbW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT4gd3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KRGVhciBCZW4sPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KV2l0aCByZWdhcmRz IHRvIHlvdXIgY29tbWVudHMgdnMuIFJGQzgxNjUsIEkgZG9uJ3Qgc2VlIGhvdyB0aGUgYWR2aWNl IGluPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KODE2NSBjYW4gYmUgZm9sbG93ZWQgaGVy ZS48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQpJIGhhdmUgcmFpc2VkIHRoZSBzcGVjaWZpY3Mgb2Ygc2VydmljZSBjaGFpbmluZyBk dXJpbmcgdGhlIElFVEYgTEMgb2Y8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQpkcmFmdC1o YXJkaWUgKDgxNjUpOiB5b3UgY2FuIGNoZWNrIGF0IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYu b3JnL21haWwtIiBjbGFzcz0iIj4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtPC9hPjxiciBj bGFzcz0iIj4NCmFyY2hpdmUvd2ViL2lldGYvY3VycmVudC9tc2cxMDA5MDkuaHRtbCAoc2VhcmNo IGZvciAmcXVvdDtzZXJ2aWNlIGZ1bmN0aW9uPGJyIGNsYXNzPSIiPg0KY2hhaW5pbmcmcXVvdDsp LjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCkNoZWVycyw8YnIgY2xhc3M9IiI+DQpNZWQ8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4tLS0tLU1lc3NhZ2UgZCdvcmln aW5lLS0tLS08YnIgY2xhc3M9IiI+DQpEZSA6IHNmYyBbPGEgaHJlZj0ibWFpbHRvOnNmYy1ib3Vu Y2VzQGlldGYub3JnIiBjbGFzcz0iIj5tYWlsdG86c2ZjLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBE ZSBsYSBwYXJ0IGRlIEJlbiBDYW1wYmVsbDxiciBjbGFzcz0iIj4NCkVudm95w6kgOiBqZXVkaSAy OCBzZXB0ZW1icmUgMjAxNyAwNjoxNTxiciBjbGFzcz0iIj4NCsOAIDogSm9lbCBNLiBIYWxwZXJu PGJyIGNsYXNzPSIiPg0KQ2MgOiA8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1zZmMtbnNoQGll dGYub3JnIiBjbGFzcz0iIj5kcmFmdC1pZXRmLXNmYy1uc2hAaWV0Zi5vcmc8L2E+Ow0KPGEgaHJl Zj0ibWFpbHRvOnNmYy1jaGFpcnNAaWV0Zi5vcmciIGNsYXNzPSIiPnNmYy1jaGFpcnNAaWV0Zi5v cmc8L2E+OyBUaGUgSUVTRzs8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJtYWlsdG86c2ZjQGlldGYu b3JnIiBjbGFzcz0iIj5zZmNAaWV0Zi5vcmc8L2E+PGJyIGNsYXNzPSIiPg0KT2JqZXQgOiBSZTog W3NmY10gQmVuIENhbXBiZWxsJ3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtc2ZjLW5zaC0y NDo8YnIgY2xhc3M9IiI+DQood2l0aCBDT01NRU5UKSAtIEVuY3J5cHRlZCBjb250ZW50PGJyIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KSGkgSm9lbCw8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQpPbiByZWZsZWN0aW9uLCB0aGUg4oCcZW5jcnlwdGVkIHBheWxvYWTigJ0gcGFydCBtYXkg YmUgYSByZWQgaGVycmluZy4gTGV0PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9j a3F1b3RlPg0KbWU8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPmdlbmVyYWxpemUgdGhhdCB0byDi gJx3aXRoaGVsZCBpbmZvcm1hdGlvbuKAnS4gJm5ic3A7QXMgeW91IG1lbnRpb24sIHRoZTxiciBj bGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCm1ldGFkYXRhPGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBl PSJjaXRlIiBjbGFzcz0iIj5tYXJrcyB3aGF0IHRoZSBvcGVyYXRvciB3YW50cyB0byBrbm93IGFi b3V0IGEgcGFja2V0LCBidXQgdGhhdCBtYXk8YnIgY2xhc3M9IiI+DQpzb21ldGltZXMgY29uZmxp Y3Qgd2l0aCB3aGF0IHRoZSB1c2VyIGRvZXNu4oCZdCB3YW50IHRvIHRoZW0gdG8ga25vdy48YnIg Y2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQpIZXJl4oCZczxiciBjbGFz cz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlw ZT0iY2l0ZSIgY2xhc3M9IiI+YW4gZXhhbXBsZTo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+ DQpMZXRzIGNvbnNpZGVyIGFuIGVuZCB1c2VyIHRoYXQgZG9lc24ndCB3YW50IHRvIGJlIHRyYWNr ZWQgZm9yPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KYWR2ZXJ0 aXNpbmc8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxi bG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPnB1cnBvc2VzLiBUaGV5IGJsb2NrIGNlcnRh aW4gdHJhY2tpbmcgY29va2llcyBhbmQgYW55dGhpbmcgZWxzZSB0aGF0PGJyIGNsYXNzPSIiPg0K PC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0Kc2hvd3M8YnIgY2xhc3M9IiI+DQo8YmxvY2tx dW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNz PSIiPmNvbnRpbnVpdHkgb2YgaWRlbnRpdHkgdG8gd2ViIHNlcnZlcnMuIEJ1dCBhcyB5b3UgbWVu dGlvbiwgdGhlIG9wZXJhdG9yPGJyIGNsYXNzPSIiPg0KbmVlZHMgb3Igd2FudHMgdG8ga25vdyB0 aGUgc3Vic2NyaWJlciBJRCwgc28gdGhlIGNsYXNzaWZpZXIgYWRkcyB0aGF0PGJyIGNsYXNzPSIi Pg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KdG88YnIgY2xhc3M9IiI+DQo8YmxvY2tx dW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNz PSIiPnRoZSBOU0guLiBUaGUgdGVybWluYWwgZWxlbWVudCBpbiB0aGUgY2hhaW4gaGFwcGVucyB0 byBiZSBhIHdlYiBzZXJ2aWNlPGJyIGNsYXNzPSIiPg0KdGhhdCB1c2VzIHRoZSBOU0ggY29udGVu dHMgdG8gdHJhY2sgdGhlIHVzZXIgZm9yIGFkdmVydGlzaW5nIHB1cnBvc2VzLjxiciBjbGFzcz0i Ij4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCllvdTxiciBjbGFzcz0iIj4NCjxibG9j a3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xh c3M9IiI+bWF5IHJlY2FsbCBhIGNvbnRyb3ZlcnN5IGEgd2hpbGUgYmFjayBhYm91dCBhIG1ham9y IG9wZXJhdG9yIGRvaW5nPGJyIGNsYXNzPSIiPg0Kc29tZXRoaW5nIHNpbWlsYXIgdXNpbmcgSFRU UCBoZWFkZXIgZW5yaWNobWVudC48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpJIHRoaW5r IHRoZSBhbnN3ZXIgdG8gdGhpcyBmb3IgdGhpcyBwYXJ0aWN1bGFyIGNhc2UgaXMgdGhhdCB0aGUg TlNIIGlzPGJyIGNsYXNzPSIiPg0KYXNzdW1lZCBub3QgdG8gZ28gb3V0c2lkZSBhIHNpbmdsZSBh ZG1pbmlzdHJhdGl2ZSBkb21haW4sIGFuZCB0aGF0IGFsbDxiciBjbGFzcz0iIj4NCmVsZW1lbnRz IGluIHRoZSBzYW1lIGRvbWFpbiBjYW4gYmUgYXNzdW1lZCB0byBoYXZlIGFjY2VzcyB0byB0aGUg c2FtZTxiciBjbGFzcz0iIj4NCmluZm9ybWF0aW9uLiBUaGF0IGlzLCB0aGUgTlNIIGlzIGp1c3Qg YSBjb252ZW5pZW50IHdheSB0byB0cmFuc2ZlcjxiciBjbGFzcz0iIj4NCm1ldGFkYXRhIHRoZXkg Y291bGQgcGFzcyBpbiBvdGhlciB3YXlzLiBXaGlsZSB0aGUgdXNlciBtYXkgbm90IGJlPGJyIGNs YXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KY29uc29sZWQ8YnIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9 ImNpdGUiIGNsYXNzPSIiPmJ5IHRoZSBmYWN0IHRoYXQgdGhlIHdlYiBzZXJ2aWNlIHRyYWNraW5n IHRoZW0gYmVsb25ncyB0byB0aGUgc2FtZTxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjwv YmxvY2txdW90ZT4NCmNvbXBhbnk8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPmFzIHRoZWlyIGFj Y2VzcyBuZXR3b3JrLCB0aGUgdXNlIG9mIHRoZSBOU0ggZG9lc27igJl0IGFkZCBhbiBpc3N1ZSB0 aGF0PGJyIGNsYXNzPSIiPg0KY291bGRu4oCZdCBhbHJlYWR5IGV4aXN0LiAoVGhpcyBzdWdnZXN0 cyB0aGF0IHRoZSBpZGVhIG9mIGEgc2luZ2xlPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0K PC9ibG9ja3F1b3RlPg0Kb3BlcmF0b3I8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPmVudmlyb25t ZW50IG1heSBiZSBjb25zaWRlcmFibHkgbW9yZSBjb21wbGV4IHRoYXQgdGhlIGRyYWZ0IG1ha2Vz IGl0PGJyIGNsYXNzPSIiPg0Kc291bmQsIGJ1dCBJIGRvbuKAmXQgc2VlIG11Y2ggdG8gZG8gYWJv dXQgdGhhdC4pPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KU28gSSBndWVzcyB3aGF0IEkg YW0gYXNraW5nIGZvciBpcyBzb21lIHRleHQgdGhhdCByZWNvZ25pemVzIHRoYXQgdXNlcnM8YnIg Y2xhc3M9IiI+DQpoYXZlIGFuIGludGVyZXN0IGluIG1ldGFkYXRhIG1pbmltaXphdGlvbiwgYW5k IHNvbWUgc3VnZ2VzdGlvbiB0aGF0PGJyIGNsYXNzPSIiPg0Kb3BlcmF0b3JzIGtlZXAgdGhhdCBp biBtaW5kLCBhbmQgbm90IGFkZCBtZXRhZGF0YSBiZXlvbmQgdGhlIG1pbmltdW08YnIgY2xhc3M9 IiI+DQpuZWVkZWQgdG8gbWFrZSB0aGUgU0ZQIGZ1bmN0aW9uIGNvcnJlY3RseS48YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQooVG8gYnJpbmcgZW5jcnlwdGlvbiBiYWNrIGludG8gdGhlIHBp Y3R1cmUsIG9uZSBjYW4gcHJvYmFibHkgY29uc3RydWN0PGJyIGNsYXNzPSIiPg0Kc2ltaWxhciBj YXNlcyBpbnZvbHZpbmcgVlBOc+KAlGZvciBleGFtcGxlIHNlcnZpY2VzIHRoYXQgYWRkIHRoZSBv cmlnaW5hbDxiciBjbGFzcz0iIj4NCnNvdXJjZSBJUCBhZGRyZXNzIGFzIG1ldGFkYXRhIHRvIGEg VlBOIGZsb3cuKTxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoYW5rcyE8YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQpCZW4uPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPGJs b2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+T24gU2VwIDI3LCAyMDE3LCBhdCA5OjQ1IFBN LCBKb2VsIE0uIEhhbHBlcm4gJmx0OzxhIGhyZWY9Im1haWx0bzpqbWhAam9lbGhhbHBlcm4uY29t IiBjbGFzcz0iIj5qbWhAam9lbGhhbHBlcm4uY29tPC9hPiZndDs8YnIgY2xhc3M9IiI+DQo8L2Js b2NrcXVvdGU+DQp3cm90ZTo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQpCZW4sIEkgYW0gJm5ic3A7cmVhbGx5IG5vdCBjbGVhciBv biB3aGF0IHRvIGRvIHdpdGggeW91ciBjb21tZW50IGFib3V0PGJyIGNsYXNzPSIiPg0KPC9ibG9j a3F1b3RlPg0KZW5jcnlwdGVkIGNvbnRlbnQuPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlw ZT0iY2l0ZSIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KTm90aGluZyBpbiB0aGlzIHdvcmsgZW5h YmxlcyBvciBwcm9tb3RlcyBvcGVyYXRvcnMgYnJlYWtpbmcgZW5jcnlwdGlvbjxiciBjbGFzcz0i Ij4NCjwvYmxvY2txdW90ZT4NCihhbiBlYXJsaWVyIHZlcnNpb24gaGFkIGEgbGluZSB0aGF0IGlu Y29ycmVjdGx5IHN1Z2dlc3RlZCBzdWNoLik8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBl PSJjaXRlIiBjbGFzcz0iIj5UaGUgbWV0YWRhdGEgaXMgdXNlZCB0byBtYXJrIHdoYXQgdGhlIG9w ZXJhdG9yIHdhbnRzIHRvIGtub3cgYWJvdXQgdGhlPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3Rl Pg0KcGFja2V0LiAmbmJzcDtFdmVuIGZvciBlbmNyeXB0ZWQgY29udGVudCwgdGhlIG9wZXJhdG9y IG1heSBuZWVkIHRvIGtud28gdGhlPGJyIGNsYXNzPSIiPg0Kc3N1YnNjcmliZXIgSUQuICZuYnNw O0ZvciBlbmNyeXB0ZWQgY29udGVudCwgdGhlIG9wZXJhdG9yIG1pZ2h0IChvciBtaWdodDxiciBj bGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCm5vdCk8YnIgY2xhc3M9IiI+ DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNp dGUiIGNsYXNzPSIiPmNob29zZSB0byBwdXQgbWV0YWRhdGEgaW5kaWNhdGluZyB0aGUgdGhlIGNv bnRlbnQgaXMgdW5pbnRlcnByZXRhYmxlPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9i bG9ja3F1b3RlPg0KKGlmPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5oZSBkZWNpZGVzIGl0IGlz IHVuaW50ZXJwcmV0YWJsZS4pICZuYnNwO0NsZWFybHksIGhlIGNhbiBub3QgcHV0IG9uPGJyIGNs YXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KaW5mb21yYXRpb248YnIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPmFib3V0IHRoZSBlbmNyeXB0ZWQgaW5mb3JtYXRpb24sIGFzIGhl IGRvZXMgbm90IHNlZSB0aGF0LjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPkkgY2FuIG5vdCBmaWd1cmUgb3V0IHdoZXJlIHdlIHdvdWxkIHNheSBzb21ldGhp bmcgbGlrZSB0aGF0LCBvciB3aHkgd2U8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQp3b3Vs ZCBzYXkgaXQuPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KWW91cnMsPGJyIGNsYXNzPSIiPg0KSm9lbDxiciBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCk9uIDkvMjcvMTcgMTA6MDIgUE0sIEJlbiBDYW1wYmVsbCB3cm90ZTo8YnIg Y2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5CZW4gQ2FtcGJlbGwg aGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRpb24gZm9yPGJyIGNsYXNzPSIi Pg0KZHJhZnQtaWV0Zi1zZmMtbnNoLTI0OiBObyBPYmplY3Rpb248YnIgY2xhc3M9IiI+DQpXaGVu IHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBs eSB0byBhbGw8YnIgY2xhc3M9IiI+DQplbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRv IGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQ8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVv dGU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQp0aGlzPGJy IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIi Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+aW50cm9kdWN0b3J5IHBhcmFncmFw aCwgaG93ZXZlci4pPGJyIGNsYXNzPSIiPg0KUGxlYXNlIHJlZmVyIHRvIDxhIGhyZWY9Imh0dHBz Oi8vd3d3LmlldGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtIiBjbGFzcz0iIj5odHRwczov L3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVudC9kaXNjdXNzLTwvYT48YnIgY2xhc3M9IiI+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQpjcml0ZXJpYS5odG1sPGJyIGNsYXNzPSIiPg0K PGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iIj5mb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJRVNHIERJU0NVU1MgYW5kIENP TU1FTlQgcG9zaXRpb25zLjxiciBjbGFzcz0iIj4NClRoZSBkb2N1bWVudCwgYWxvbmcgd2l0aCBv dGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZTo8YnIgY2xhc3M9IiI+DQo8 YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNmYy1u c2gvIiBjbGFzcz0iIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRm LXNmYy1uc2gvPC9hPjxiciBjbGFzcz0iIj4NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxiciBjbGFzcz0iIj4NCjwv YmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4N Ci08YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9j a3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5DT01NRU5UOjxiciBjbGFz cz0iIj4NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLTxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2tx dW90ZT4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCi08YnIgY2xhc3M9IiI+DQo8Ymxv Y2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0 eXBlPSJjaXRlIiBjbGFzcz0iIj5TdWJzdGFudGl2ZTo8YnIgY2xhc3M9IiI+DQotIEdlbmVyYWw6 IFRoaXMgaXMgYSBtZWNoYW5pc20gdG8gYWRkIG1ldGFkYXRhIHRvIHVzZXIgZmxvd3MuIFRoZXJl PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3Rl Pg0KPC9ibG9ja3F1b3RlPg0KaXM8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPnZlcnk8YnIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPmxpdHRsZSBkaXNjdXNzaW9uIGFib3V0IGhvdyB0aGF0IG1ldGFk YXRhIG1heSByZWxhdGUgdG8gdGhlPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9j a3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KYXBwbGljYXRpb248YnIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPmxheWVyPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5wYXlsb2Fk cy4gSXQncyBsaWtlbHkgdGhhdCBzb21lIG9mIHRob3NlIHBheWxvYWRzIHdpbGwgYmUgZW5jcnlw dGVkPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1 b3RlPg0KPC9ibG9ja3F1b3RlPg0KYnk8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPnRoZSB1c2Vy PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2tx dW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5pbiBhbiBhdHRlbXB0IHRvIGNvbnRyb2wgd2hhdCBp bmZvcm1hdGlvbiBpcyBzaGFyZWQgd2l0aCBtaWRkbGVib3hlcy48YnIgY2xhc3M9IiI+DQo8L2Js b2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQpJJ2QgbGlrZTxiciBjbGFzcz0iIj4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9 IiI+dG8gc2VlIHNvbWUgZGlzY3Vzc2lvbiBhYm91dCBob3cgdGhpcyByZWxhdGVzIHRvIHRoZSBn dWlkYW5jZSBpbiBSRkM8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+ DQo4MTY1LjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0K PGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+KE5vdGU6IEkgYW0gb24gdGhlIGZlbmNl IGFib3V0IHdoZXRoZXIgdGhpcyBzaG91bGQgYmUgYSBESVNDVVNTLiBCdXQ8YnIgY2xhc3M9IiI+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQpzaW5jZSAmcXVvdDtvbjxiciBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSIgY2xhc3M9IiI+dGhlIGZlbmNlJnF1b3Q7IGlzIHByb2JhYmx5IGluc3VmZmljaWVudCBn cm91bmRzIGZvciBhIERJU0NVU1MsIEknbTxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjwv YmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCmxlYXZpbmc8YnIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPml0IGFzIGE8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBl PSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPmNvbW1l bnQuKTxiciBjbGFzcz0iIj4NCi0gR2VuZXJhbDogSSBzdXBwb3J0IEthdGhsZWVuJ3MgRElTQ1VT UyBwb2ludHMgY29uY2VybmluZyBpbnRlZ3JpdHk8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+ DQo8L2Jsb2NrcXVvdGU+DQpwcm90ZWN0aW9uLjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+VGhl IGRvY3VtZW50IGxlYXZlcyB0aGF0IHVwIHRvIHRoZSB0cmFuc3BvcnRpbmcgcHJvdG9jb2wuIEkg dGhpbms8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQppdCdzPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlw ZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxi bG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIg Y2xhc3M9IiI+cmVhc29uYWJsZSB0byByZWNvbW1lbmQgdGhhdCB0aGF0IHByb3RvY29sIGF0IGxl YXN0IGRlZmF1bHQgdG88YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+ DQpwcm92aWRpbmc8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPmludGVncml0eSBwcm90ZWN0aW9u IHVubGVzcyB0aGVyZSdzIGEgZ29vZCByZWFzb24gbm90IHRvLjxiciBjbGFzcz0iIj4NCi0yLjIs ICZxdW90O3ZlcnNpb24mcXVvdDs6IEhvdyBpcyB0aGUgdmVyc2lvbiBmaWVsZCB0byBiZSB1c2Vk IGJ5IGNvbnN1bWVycz88YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQpUaGF0PGJyIGNsYXNzPSIiPg0KPGJsb2Nr cXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFz cz0iIj5pcyw8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4N CjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPndoYXQgc2hvdWxkIGEgcmVjaXBpZW50 IGRvIGlmIHRoZSBmaWVsZCBjb250YWlucyBhIHZlcnNpb24gbnVtYmVyIGl0PGJyIGNsYXNzPSIi Pg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KZG9lc24ndDxiciBjbGFzcz0iIj4NCjxi bG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIg Y2xhc3M9IiI+c3VwcG9ydC9yZWNvZ25pemU/PGJyIGNsYXNzPSIiPg0KLTIuMiwgTUQgdHlwZSAw eDA6ICZxdW90O0ltcGxlbWVudGF0aW9ucyBTSE9VTEQgc2lsZW50bHk8YnIgY2xhc3M9IiI+DQom bmJzcDtkaXNjYXJkIHBhY2tldHMgd2l0aCBNRCBUeXBlIDB4MC4mcXVvdDs8YnIgY2xhc3M9IiI+ DQpXaHkgbm90IE1VU1Q/PGJyIGNsYXNzPSIiPg0KLS0gTUQgdHlwZSAweEY6ICZxdW90O0ltcGxl bWVudGF0aW9ucyBub3QgZXhwbGljaXRseSBjb25maWd1cmVkIHRvIGJlIHBhcnQ8YnIgY2xhc3M9 IiI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQpvZjxiciBjbGFzcz0iIj4NCjxibG9j a3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xh c3M9IiI+Jm5ic3A7YW4gZXhwZXJpbWVudCBTSE9VTEQgc2lsZW50bHkgZGlzY2FyZCBwYWNrZXRz IHdpdGggTUQgVHlwZSAweEYuJnF1b3Q7PGJyIGNsYXNzPSIiPg0KV2h5IG5vdCBNVVNUPzxiciBj bGFzcz0iIj4NCi0yLjIsIE5leHQgUHJvdG9jb2wgVmFsdWVzOjxiciBjbGFzcz0iIj4NCldoeSBh cmUgdGhlcmUgMiBleHBlcmltZW50YWwgdmFsdWVzPyAoYXMgb3Bwb3NlZCB0byAxLCBvciwgd2Vs bCwgMykuPGJyIGNsYXNzPSIiPg0KLTIuMywgbGFzdCBwYXJhZ3JhcGggKGFuZCBzZXZlcmFsIG90 aGVyIHBsYWNlcyk6PGJyIGNsYXNzPSIiPg0KVGhpcyBkcmFmdCBzZWVtcyB0byB0YWtlIGEgcG9z aXRpb24gdGhhdCBhIGZhaWxlZCBTRlAgbWVhbnMgdGhlPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1 b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0Kc2Vydmlj ZTxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2Nr cXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+bGV2ZWw8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIi PmZsb3cgZmFpbHMuIEFyZSB0aGVyZSBubyB1c2UgY2FzZXMgd2hlcmUgZGVsaXZlcnkgb2YgdGhl IHNlcnZpY2UgZmxvdzxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4N CmlzPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8Ymxv Y2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5jcml0aWNhbCBhbmQgc2hvdWxkIGhhcHBlbiBl dmVuIGlmIHRoZSBjaGFpbiBvZiBtaWRkbGVib3hlcyBmYWlscz88YnIgY2xhc3M9IiI+DQotMi40 LCBwYXJhZ3JhcGggc3RhcnRpbmcgd2l0aCAmcXVvdDtBbiBTRkMtYXdhcmUgU0YgTVVTVCByZWNl aXZlIHRoZSBkYXRhPGJyIGNsYXNzPSIiPg0Kc2VtYW50aWNzLi4uJnF1b3Q7IEknbSBub3Qgc3Vy ZSB3aGF0IHRoZSBpbnRlbnQgb2YgdGhpcyBwYXJhZ3JhcGggaXMuIElzPGJyIGNsYXNzPSIiPg0K PC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KdGhhdCBNVVNUPGJyIGNsYXNzPSIiPg0KPGJs b2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBj bGFzcz0iIj5yZWFsbHkgYSBzdGF0ZW1lbnQgb2YgZmFjdD8gT3IgaXMgdGhlcmUgcmVhbGx5IGFu ZCBleHBlY3RhdGlvbiBvZiBhbjxiciBjbGFzcz0iIj4NCm91dC1vZi1iYW5kIGRlbGl2ZXJ5IG9m IHNvbWUgc2VtYW50aWMgZGVmaW5pdGlvbj88YnIgY2xhc3M9IiI+DQotMywgbGlzdCBpdGVtIDE6 ICZxdW90O0Egc2VydmljZSBjbGFzc2lmaWVyIE1VU1QgaW5zZXJ0IGFuIE5TSCBhdCB0aGU8YnIg Y2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8 L2Jsb2NrcXVvdGU+DQpzdGFydDxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+b2YgYW48YnIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPlNGUC4mcXVvdDsgV2hhdCBpZiBhbiBpbml0aWFsIGNsYXNzaWZp ZXIgcmVjZWl2ZXMgYSBwYWNrZXQgdGhhdCBhbHJlYWR5PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1 b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KaGFzPGJy IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5hbiBOU0g/PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUg dHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5D YW4gbXVsdGlwbGUgTlNIcyBiZSBzdGFja2VkPzxiciBjbGFzcz0iIj4NCi03LjEsIGxhc3QgcGFy YWdyYXBoOiAmcXVvdDtEZXBlbmRpbmcgb24gdGhlIGluZm9ybWF0aW9uIGNhcnJpZWQgaW4gdGhl PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KbWV0YWRhdGEsPGJy IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5kYXRhIHByaXZhY3k8YnIgY2xhc3M9IiI+DQombmJzcDtj b25zaWRlcmF0aW9ucyBtYXkgbmVlZCB0byBiZSBjb25zaWRlcmVkLiAmcXVvdDs8YnIgY2xhc3M9 IiI+DQomcXVvdDttYXkgbmVlZCB0byBiZSBjb25zaWRlcmVkJnF1b3Q7IGlzIHdlYWsgc2F1Y2Uu IERhdGEgcHJpdmFjeSBhbHdheXMgbmVlZHM8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQp0bzxiciBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSIgY2xhc3M9IiI+YmU8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPmNvbnNpZGVyZWQsIGV2 ZW4gaWYgdGhlIF9vdXRwdXRfIG9mIHRoYXQgY29uc2lkZXJhdGlvbiBpcyB0aGF0IHRoZXJlPGJy IGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0K PC9ibG9ja3F1b3RlPg0KaXM8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPm5vdGhpbmc8YnIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPnNlbnNpdGl2ZSBiZWluZyBjYXJyaWVkLiBQbGVhc2UgY29uc2lk ZXIgZHJvcHBpbmcgdGhlICZxdW90O21heSZxdW90Oy48YnIgY2xhc3M9IiI+DQpBbHNvLCB0aGlz IHNlZW1zIGxpa2UgYW4gb2RkIHBsYWNlIHRvIGJ1cnkgYSBwcml2YWN5IGRpc2N1c3Npb24uPGJy IGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0K PC9ibG9ja3F1b3RlPg0KUGxlYXNlPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0 ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9 IiI+Y29uc2lkZXIgbW92aW5nIHRoaXMgdG8gYSAmcXVvdDtQcml2YWN5IENvbnNpZGVyYXRpb25z JnF1b3Q7IHNlY3Rpb24uPGJyIGNsYXNzPSIiPg0KLTgsIGZpcnN0IHBhcmFncmFwaDo8YnIgY2xh c3M9IiI+DQpJdCBzZWVtcyBsaWtlIGluc2lkZXIgYXR0YWNrcyBhcmUgd29ydGggYXQgbGVhc3Qg YSBtZW50aW9uIHdoZW48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+ DQpkaXNjdXNzaW5nIGE8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFz cz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPnNpbmdsZSBvcGVyYXRvciBl bnZpcm9ubWVudCBhcyBhIG1pdGlnYXRvciBhZ2FpbnN0IGF0dGFja3MuPGJyIGNsYXNzPSIiPg0K LTguMSwgMm5kIHBhcmFncmFwaDo8YnIgY2xhc3M9IiI+DQpUaGlzIGRvZXNuJ3Qgc2VlbSBsaWtl IGEgc2luZ2xlIG9wZXJhdG9yIHNjZW5hcmlvLCBpbiB0aGUgc2Vuc2UgdGhhdDxiciBjbGFzcz0i Ij4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCnBhcnQgb2Y8YnIgY2xhc3M9IiI+DQo8 YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPnRoZSBmbG93IGNyb3NzZXMgYSBuZXR3b3JrIHRoYXQgaXMgbm90IGNvbnRyb2xs ZWQgYnkgdGhhdCBvcGVyYXRvci48YnIgY2xhc3M9IiI+DQotOC4zLCA0dGggcGFyYWdyYXBoOiBQ bGVhc2UgZWxhYm9yYXRlIG9uIHdoYXQgaXMgbWVhbnQgYnk8YnIgY2xhc3M9IiI+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQomcXVv dDtvYmZ1c2NhdGluZyZxdW90OzxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIi PnN1YnNjcmliZXIgaWRlbnRpZnlpbmcgaW5mb3JtYXRpb24gKGFzIG9wcG9zZWQgdG8gJnF1b3Q7 ZW5jcnlwdGluZyZxdW90OyBvcjxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2tx dW90ZT4NCiZxdW90O2xlYXZpbmcgaXQ8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPm91dCBpbiB0 aGUgZmlyc3QgcGxhY2UmcXVvdDsuKTxiciBjbGFzcz0iIj4NCkVkaXRvcmlhbDo8YnIgY2xhc3M9 IiI+DQotMi4yLCAmcXVvdDtPIGJpdCZxdW90OywgbGFzdCBwYXJhZ3JhcGg6ICZxdW90O1RoZSBj b25maWd1cmFibGUgcGFyYW1ldGVyIE1VU1QgYmU8YnIgY2xhc3M9IiI+DQombmJzcDtkaXNhYmxl ZCBieSBkZWZhdWx0LiZxdW90OzxiciBjbGFzcz0iIj4NCkRvZXMgJnF1b3Q7ZGlzYWJsZWQmcXVv dDsgbWVhbiAmcXVvdDt1bnNldCZxdW90OyAmbmJzcDsob3IgJnF1b3Q7c2V0IHRvIHplcm8mcXVv dDspPzxiciBjbGFzcz0iIj4NCi0yLjIsICZxdW90O3VuYXNzaWduZWQgYml0cyZxdW90OzogJnF1 b3Q7QXQgcmVjZXB0aW9uLCBhbGw8YnIgY2xhc3M9IiI+DQombmJzcDtlbGVtZW50cyBNVVNUIE5P VCBtb2RpZnkgdGhlaXIgYWN0aW9ucyBiYXNlZCBvbiB0aGVzZSB1bmtub3duPGJyIGNsYXNzPSIi Pg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1 b3RlPg0KYml0cy4mcXVvdDs8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUg dHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5J c24ndCB0aGF0IE1VU1QgTk9UIGp1c3QgYSByZXN0YXRlbWVudCBvZiB0aGUgJnF1b3Q7TVVTVCBp Z25vcmUmcXVvdDsgZnJvbSB0aGU8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2Nr cXVvdGU+DQpwcmV2aW91czxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+c2VudGVuY2U/IFRoZXJl J3Mgbm8gcHJvYmxlbSB3aXRoIHJlaW5mb3JjaW5nIGEgcG9pbnQsIGJ1dCB0aGVyZTxiciBjbGFz cz0iIj4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCnNob3VsZG4ndCBiZTxiciBjbGFz cz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlw ZT0iY2l0ZSIgY2xhc3M9IiI+bXVsdGlwbGUgaW5zdGFuY2VzIG9mIHRoZSBzYW1lIDIxMTkgcmVx dWlyZW1lbnQuIEFsc28sIHdvdWxkIGxvZ2dpbmc8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQphPGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBl PSJjaXRlIiBjbGFzcz0iIj53YXJuaW5nPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj52aW9sYXRl IHRoZSAmcXVvdDtNVVNUIE5PVCBtb2RpZnkgdGhlaXIgYWN0aW9ucy9NVVNUIGlnbm9yZSZxdW90 OyByZXF1aXJlbWVudD88YnIgY2xhc3M9IiI+DQotOCwgZmlyc3QgcGFyYWdyYXBoOiAmcXVvdDtO U0ggaXMgZGVzaWduZWQgZm9yIHVzZSB3aXRoaW4gb3BlcmF0b3I8YnIgY2xhc3M9IiI+DQo8L2Js b2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQplbnZpcm9ubWVudHMuJnF1b3Q7PGJyIGNsYXNzPSIi Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBjbGFzcz0iIj5JcyB0aGVyZSBhIG1pc3NpbmcgJnF1b3Q7c2luZ2xlJnF1b3Q7IGJlZm9y ZSAmcXVvdDtvcGVyYXRvciZxdW90Oz88YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Js b2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8 L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl Pg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_17030B01E0EF413C9D38C1C54C4357A3ciscocom_-- From nobody Mon Oct 16 07:32:04 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC14D133032; Mon, 16 Oct 2017 07:31:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.52 X-Spam-Level: X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QK8xUkT3G2oU; Mon, 16 Oct 2017 07:31:54 -0700 (PDT) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF0E413301C; Mon, 16 Oct 2017 07:31:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=9526; q=dns/txt; s=iport; t=1508164314; x=1509373914; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=XPCDUxqfqJd5TIrc1e0hNTsozwjs5OKgbOYCSsxKWQs=; b=M9H8LVdpVAd8AVoPYbzAwRGQ3J4S6uWreK/X81NNtq2wK8egF6VPt5RU Rh5imSJFt3uqmU1uK1YGTzoOOjd1V5XHjOKIpCe8lXU11VuKzSgtBSVz0 5ggsTmg1fQ2n++XdjdRel6msulyaJKI9iNe7ZQFW+jRe63YHYMijRMLGM U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CjAgB3wuRZ/5FdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgzEugR01JweDc5lQgVQili8QggQKhTsCGoQ8QBcBAgEBAQEBAQF?= =?us-ascii?q?rKIUdAQEBAwEOFQQNMRQFCwIBCBIGAgImAgICMBUCAwsCBA4FihUIqlOBbTqLM?= =?us-ascii?q?gEBAQEBAQEBAQEBAQEBAQEBAQEfgQ6CH4IHgVGBaisLgnSEUgESAQkWgxMvgjI?= =?us-ascii?q?FmGWIYwKLP4kqghSFdosMgk6SdAIRGQGBOAEhAjSBA1Z6FXYBgjaCXBwZgU52i?= =?us-ascii?q?BEFAggYgQyBEQEBAQ?= X-IronPort-AV: E=Sophos;i="5.43,387,1503360000"; d="scan'208";a="17150897" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Oct 2017 14:31:35 +0000 Received: from XCH-RTP-020.cisco.com (xch-rtp-020.cisco.com [64.101.220.160]) by rcdn-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id v9GEVY8m002550 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 16 Oct 2017 14:31:35 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-020.cisco.com (64.101.220.160) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Mon, 16 Oct 2017 10:31:33 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Mon, 16 Oct 2017 10:31:33 -0400 From: "Carlos Pignataro (cpignata)" To: "Mirja Kuehlewind (IETF)" CC: Alia Atlas , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Thread-Topic: =?utf-8?B?W3NmY10gTWlyamEgS8O8aGxld2luZCdzIERpc2N1c3Mgb24gZHJhZnQtaWV0?= =?utf-8?Q?f-sfc-nsh-24:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHTN7J1Oxxnh9G/fUSWyQ0CGGrMWKLJXQ6AgAwhzACAAAR8gIAAIqqAgBDxZICAAFMsAA== Date: Mon, 16 Oct 2017 14:31:33 +0000 Message-ID: <2D356DF9-36A0-4699-A51D-03165B474B49@cisco.com> References: <150653176579.25051.17983729650964908105.idtracker@ietfa.amsl.com> <2BA88A4C-8083-44DC-82A6-7AB8DB616EB6@cisco.com> <966599BB-D65B-4794-AD44-80CBD5092FEA@kuehlewind.net> <1B63025A-9948-43FC-90CF-0025EE64E4D9@kuehlewind.net> In-Reply-To: <1B63025A-9948-43FC-90CF-0025EE64E4D9@kuehlewind.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.116.133] Content-Type: text/plain; charset="utf-8" Content-ID: <7C78AEE18CBC0543B234A1F298FDEBC1@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] =?utf-8?q?Mirja_K=C3=BChlewind=27s_Discuss_on_draft-ietf-s?= =?utf-8?q?fc-nsh-24=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 14:31:56 -0000 SGksIE1pcmphLA0KDQpUaGFua3MgZm9yIHlvdXIgcmVzcG9uc2UsIHBsZWFzZSBzZWUgaW5saW5l Lg0KDQo+IE9uIE9jdCAxNiwgMjAxNywgYXQgNTozMyBBTSwgTWlyamEgS3VlaGxld2luZCAoSUVU RikgPGlldGZAa3VlaGxld2luZC5uZXQ+IHdyb3RlOg0KPiANCj4gSGkgQ2FybG9zLCBoaSBhbGws DQo+IA0KPiBJIHdpbGwgY2xlYXIgbXkgZGlzY3VzIG5vdw0KDQpPSy4gVGhhbmtzLg0KDQo+IGJl Y2F1c2UgdGhlIHJlbWFpbmluZyBwb2ludCBhcmUgbW9yZSBvbiB0aGUgY2xhcmlmaWNhdGlvbiBz aWRlIHRoZW4gd2FycmFudCBhIGRpc2N1c3MuDQo+IA0KPiBIb3dldmVyLCBJIHdvdWxkIHN0aWxs IGxpa2UgdG8gZnVydGhlciBjb21tZW50IGJlY2F1c2UgSSBoYXZlIHRvIHNheSB0aGF0IEkgZmlu ZCBzb21lIGNvbW1lbnRzIHN0aWxsIG5vdCBhcHByb3ByaWF0ZWx5IGFkZHJlc3NlZC4gDQo+IA0K DQpXZWxsLCBpdCBpcyB2ZXJ5IGRpZmZpY3VsdCBtYWludGFpbmluZyBhIHByb2R1Y3RpdmUgRElT Q1VTU2lvbiBvdmVyIGVtYWlsIHdoZW4geW91ciByZXNwb25zZSBjb21lcyB3aXRoIGFuIDExLWRh eSBSVFQgZGVsYXksIGFmdGVyIHR3byB1bmljYXN0IEtBIG51ZGdlc+KApg0KDQpUaGF0IHNhaWQs IA0KDQo+IFtzbmlwXQ0KPj4gDQo+PiANCj4+IEkgYW0gZ2xhZCB0aGF0IG5vdyB5b3UgdW5kZXJz dGFuZCB0aGUgaW50ZW50aW9uLCBhbmQgdGhpcyBpc3N1ZSBpcyBhZGRyZXNzZWQuDQo+PiANCj4+ IFRoYW5rcyBmb3IgdGhlIGF0dGVtcHQgYXQgcmV3cml0aW5nLg0KPj4gDQo+PiBUaGF0IHBhcmFn cmFwaCBpcyBiYWxhbmNpbmcgaW4gcXVpdGUgYSBkZWxpY2F0ZSBlcXVpbGlicml1bS4gSXQgaXMs IGFzIHlvdSBnYXRoZXJlZCwgdGhlIHJlc3VsdCBvZiBsb25nIGFyZHVvdXMgV0cgZGlzY3Vzc2lv bnMuIENvbnNlcXVlbnRseSBJIGFtIG1vc3QgaGVzaXRhbnQgdG8gbWFrZSBhbnkgY2hhbmdlcyB0 byBpdC4NCj4+IA0KPj4gDQo+Pj4gDQo+Pj4g4oCeQnkgZGVmYXVsdCBPQU0gc3VwcG9ydCBNVVNU IGJlIGRpc2FibGVkLiBUaGVyZWZvcmUgYSBTRi9TRkYvU0ZDIFByb3h5L0NsYXNzaWZpZXIsIHRo YXQgaXMgbm90IGV4cGxpY2l0bHkgY29uZmlndXJlZCB0byBzdXBwb3J0IE9BTSwgTVVTVCBkaXNj YXJkcyBwYWNrZXRzIHdpdGggdGhlIE8gYml0IHNldC4gQW4gaW1wbGVtZW50YXRpb24gTUFZIHBy b3ZpZGUgYSBjb25maWd1cmFibGUgcGFyYW1ldGVyIHRvIGVuYWJsZSB0aGUgZm9yd2FyZGluZyBv ZiByZWNlaXZlZCBTRkMgT0FNIHBhY2tldHMgdG8gdGhlIG5leHQgZWxlbWVudCBpbiB0aGUgY2hh aW4uIElmIE9BTSBzdXBwb3J0IGlzIGVuYWJsZWQsIE9BTSBwYWNrZXRzIE1VU1QgYmUgZm9yd2Fy ZGVkIHVubW9kaWZpZWQuIEZvcndhcmRpbmcgT0FNIHBhY2tldHMgYnkgU0ZDIGVsZW1lbnRzIHRo YXQgZG8gbm90IGl0c2VsZiBzdXBwb3J0IFNGQyBPQU0gcHJvY2VkdXJlcyBtYXkgYmUgYWNjZXB0 YWJsZSBmb3IgYSBzdWJzZXQgb2YgT0FNIGZ1bmN0aW9ucywgYnV0IGNhbiByZXN1bHQgaW4gdW5l eHBlY3RlZCBvdXRjb21lcyBmb3Igb3RoZXJzOyB0aHVzLCBpdCBpcyByZWNvbW1lbmRlZCB0byBh bmFseXplIHRoZSBpbXBhY3Qgb2YgZm9yd2FyZGluZyBhbiBPQU0gcGFja2V0IGZvciBhbGwgT0FN IGZ1bmN0aW9ucyBwcmlvciB0byBlbmFibGluZyB0aGlzIGJlaGF2aW9yLuKAnA0KPj4+IA0KPj4+ IE9uZSBwYXJ0IG9mIG15IGNvbmZ1c2lvbiB3YXMgbWl4aW5nIHVwIHRoZSBmYWN0IHRoYXQgcGFj a2V0IHNob3VsZCBub3QgYmUgc2VuZCB1bm1vZGlmaWVkIHdpdGggdGhlIGNvbmZpZ3VyYXRpb24g dG8gZm9yd2FyZCBvciBub3QuIFNwbGl0dGluZyB0aGF0IGluIGEgc2VwYXJhdGUgc2VudGVuY2Ug YXMgcHJvcG9zZWQgYWJvdmUgaGVscHMgZm9yIG15IHVuZGVyc3RhbmRpbmcgYSBsb3QuDQo+IA0K PiBJIHN0aWxsIHRoaW5rIHRoZSB0ZXh0IGluIHRoZSBkcmFmdCBpcyBldmVyeSB1bmNsZWFyLiBJ IHdvdWxkbuKAmXQgd2FudCB0byByZXF1aXJlIHlvdSBhdCBhbGwgdG8gdXNlIG15IHByb3Bvc2Vk IHdvcmRpbmcgYnV0IEkgd2FudGVkIHRvIGRlbW9uc3RyYXRlIHdpdGggdGhlIHByb3Bvc2VkIHRl eHQgd2hhdCB0aGUgdW5jbGVhciBwb2ludHMgYXJlLiBUaGUgZGlmZmVyZW5jZSBpbiBteSB0ZXh0 IGlzIGEpIHRoYXQgaXMgY2xlYXJseSBzYXlzIE1VU1QgaWYgY29uZmlndXJlZCByZXNwZWN0aXZl bHkgKGluc3RlYWQgb2YgdXNpbmcgYSB2ZXJ5IGJsdXJyeSBTSE9VTEQgaGVyZSkuIEkgZ3Vlc3Mg dGhlIGFsdGVybmF0aXZlIGNvdWxkIGFjdHVhbGx5IGJlIHRvIG5vdCB1c2UgYW55IG5vcm1hdGl2 ZSBsYW5ndWFnZS4gQW5kIGIpIGRvbuKAmXQgbWl4IHVwIHRoZSBmYWN0IHRoYXQgdGhlIGRhdGEg c2hvdWxkIG5vdCBiZSBjaGFuZ2VkIHdpdGggdGhlIGZhY3QgdGhhdCB0aGV5IHNob3VsZCBmb3J3 YXJkZWQgb3Igbm90LiBJIHRoaW5rIHRoYXQgd2FzIHRoZSBwYXJ0IHdoZXJlIG1vc3Qgb2YgdGhl IGNvbmZ1c2luZyBjYW1lIGZyb20gZm9yIG1lLiANCj4gDQoNCldoYXQgaXMgY29uZnVzaW5nIHRv IG1lIGlzIHlvdXIgZXhwbGFuYXRpb24gYWJvdmUuIFlvdXIgcHJvcG9zZWQgdGV4dCBjaGFuZ2Vk IG1lYW5pbmcgYWN0dWFsbHkuIEJ1dCByZWdhcmRsZXNzLCB0aG9zZSB0d28gdGhpbmdzIGFyZSBu b3QgbWl4ZWQgdXAuIEkgZG8gdW5kZXJzdGFuZCBldmVyeW9uZSBoYXMgYSBwcmVmZXJlbmNlLiBJ IGRvIHRvLiBCdXQgdGhlcmUgcmVhbGx5IGlzIG5vdGhpbmcgdGVjaG5pY2FsbHkgaW5jb3JyZWN0 IHdpdGggdGhhdCB0ZXh0LCBiZXlvbmQg4oCYaXQgY29uZnVzZXMgTWlyamHigJksIGV2ZW4gd2hl biB0aGUgcHJvc2UgbWlnaHQgbm90IGJlIFB1bGl0emVyIFByaXplIHF1YWxpdHkuDQoNCj4gSSB1 bmRlcnN0YW5kIHRoYXQgbXVjaCBkaXNjdXNzaW9uIGhhcyBoYXBwZW4gYWJvdXQgdGhpcy4gQW5k IEkgZG9u4oCZdCBwcm9wb3NlIHRvIGNoYW5nZSB0aGUgc3RhdGVtZW50cyB5b3VyIG1ha2UgaGVy ZS4NCg0KT0suIFRoYW5rcy4gQXMgSSBzYWlkLCB0aGlzIHNwZWNpZmljIHBhcmFncmFwaCBjYXB0 dXJlcyBhbmQgaG9sZHMgYSBkZWxpY2F0ZSBiYWxhbmNlIG9mIGRlc2lnbi1ieS1jb21taXR0ZWUu IFRoZXJl4oCZcyBvbmx5IHR3byBzdWNoIHBhcmFncmFwaHMgaW4gdGhpcyB3aG9sZSBkb2N1bWVu dCwgSSBiZWxpZXZlLCBhbmQgdGhpcyBpcyBvbmUuIA0KDQo+IEJ1dCBtYXJraW5nIGFuIGF0dGVt cHQgdG8gaW1wcm92ZSBjbGFyaXR5LCBlc3BlY2lhbGx5IGFzIHRoaXMgd2FzIHNvIGNvbmZ1c2lu ZyB0aGF0IGl0IGV2ZW4gbGV0IHRvIGEgZGlzY3VzcyBmcm9tIG15IHNpZGUsIGNhbiBuZXZlciBo dXJ0IQ0KPiANCg0KQWN0dWFsbHksIGl0IGNhbiBzdWJzdGFudGlhbGx5IGh1cnQuIFRoYXTigJlz IHRoZSByZWFzb24gd2h5IEkgYW0gaGVzaXRhbnQgdG8gY2hhbmdlIGl0Lg0KDQo+IFtzbmlwXQ0K PiANCj4+Pj4gIkFuIFNGQy1hd2FyZSBTRiBvciBTRiBQcm94eSBNVVNUIHJlY2VpdmUgdGhlIGRh dGEgc2VtYW50aWNzIGZpcnN0IGluIG9yZGVyIHRvDQo+Pj4+IHByb2Nlc3MgdGhlIGRhdGEgcGxh Y2VkIGluIHRoZSBtYW5kYXRvcnkgY29udGV4dCBmaWVsZC7igJ0NCj4+Pj4gDQo+Pj4+IEFuZA0K Pj4+PiANCj4+Pj4gT0xEOg0KPj4+PiBpbmNsdWRlZCBkYXRhLiAgSG93IGFuIFNGQy1hd2FyZSBT RiBnZXRzIHRoZSBkYXRhIHNlbWFudGljcyBpcw0KPj4+PiBvdXRzaWRlIHRoZSBzY29wZSBvZiB0 aGlzIHNwZWNpZmljYXRpb24u4oCdDQo+Pj4+IA0KPj4+PiBORVc6DQo+Pj4+IGluY2x1ZGVkIGRh dGEuICBIb3cgYW4gU0ZDLWF3YXJlIFNGIG9yIFNGQyBQcm94eSBnZXRzIHRoZSBkYXRhIHNlbWFu dGljcyBpcw0KPj4+PiBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24u4oCc DQo+Pj4gDQo+Pj4gVGhlIHByb2JsZW0gaXMsIGV2ZW4gaWYgSSBoYXZlIHJlY2VpdmVkIHNvbWUg c2VtYW50aWNzIGhvdyBkbyBJIGtub3cgdGhhdCBJIGhhdmUgdGhlIHJpZ2h0IHNlbWFudGljcz8N Cj4+PiANCj4+PiBUaGUgY29udHJvbC1wbGFuZSB3b3VsZCBwYXNzIHRoZSBzZW1hbnRpYyBhc3Nv Y2lhdGVkIHdpdGggdGhlIHBhcnRpY3VsYXIgU2VydmljZSBGdW5jdGlvbiBQYXRoLg0KPiANCj4g TXkgcXVlc3Rpb24gd2FzIG5vdCBhdCBhbGwsIGhvdyBhIG5vZGUgd291bGQgcmVjZWl2ZSB0aGUg aW5mb3JtYXRpb24uIFRoZSBxdWVzdGlvbiBpcyBob3cgZG9lcyB0aGUgbm9kZSBrbm93IHRoYXQg dGhlc2UgaW5mb3JtYXRpb24gYWN0dWFsbHkgZml0cyB0byB0aGUgb25lcyBwcm92aWRlZCBpbiB0 aGUgcGFja2V0LCBhbmQgY2FuIGNvbmZpcm0gdGhhdCB0aGVzZSBpbmZvcm1hdGlvbiBhcmUgbm90 IG5vdCBvdXRkYXRlZCBvciBwcm92aWRlZCB3cm9uZ2x5LiBNeSB0aGlua2luZyB3YXMgdGhhdCBp cyB3b3VsZCBiZSBtdWNoIG1vcmUgZXJyb3Itc2F2ZSB0byBwcm92aWRlIGluZm9ybWF0aW9uIGFi b3V0IHRoZSBzZW1hbnRpY3MgaW4gdGhlIHBhY2tldCBpdHNlbGYuDQoNCkFnYWluLCBJIHVuZGVy c3RhbmQgeW91IGFyZSBzdWdnZXN0aW5nIGEgc2VsZi1kZXNjcmliaW5nIHBhY2tldC4gWW91IGNh biBkbyB0aGF0IHdpdGggTUQgVHlwZSAyLiBNRCBUeXBlIDEgY2Fubm90IGFmZm9yZCBpdC4NCg0K PiBIb3dldmVyLCB0aGlzIGlzIG5vdCB0aGUgd2FzIHRoZSBwcm90b2NvbCB3YXMgZGVzaWduZWQg cmlnaHQgbm93LiBNYXliZSBpdCBpcyBzdGlsbCB3b3J0aCB0byBwcm92aWRlIGZ1cnRoZXIgZGlz Y3Vzc2lvbiBvbiB3aGF0IHRvIGRvIGlmIHRoZSBzZW1hbnRpY3MgYXJlIG5vdCBwcm92aWRlZCBv ciBkbyBub3QgbWF0Y2ggdGhlIGV4cGVjdGVkIGRhdGEgaW4gdGhlIHBhY2tldCAoZS5nLiBkYXRh IGhhcyBkaWZmZXJlbnQgc2l6ZQ0KDQpNaXJqYSwgdGhlIGRhdGEgc2l6ZSBpcyBmaXhlZC4NCg0K PiAsIHVuZXhwZWN0ZWQgdmFsdWVzIC0+IHRoZXNlIGFyZSBhdCBsZWFzdCBjYXNlcyB0aGF0IGFy ZSBlYXN5IHRvIGRldGVjdCkuDQoNClNpbmNlIHRoZSBkb2N1bWVudCBkb2VzIG5vdCBjb25jZXJu IGl0c2VsZiB3aXRoIHRoZSBjb250ZW50IG9mIHRoYXQgZGF0YSwgYXMgY2xlYXJseSB3cml0dGVu IGRvd24sIEkgZ3Vlc3MgdGhpcyBkaXNjdXNzaW9uIGlzIGludGVyZXN0aW5nIGJ1dCBvdXQgb2Yg c2NvcGUuDQoNCj4gDQo+IFtzbmlwXQ0KPiANCj4+PiANCj4+PiBUaGF04oCZcyBmaW5lIGluIHRo ZW9yeS4gSW4gcmVhbGl0eSwgZXNwZWNpYWxseSBlLmcuIGZvciB0aGUgd2ViIHNlcnZlciBjYXNl IHlvdSBuZWVkIHRvIG1ha2Ugc3VyZSB0aGF0IGFsbCBwYWNrZXRzIGJlbG9uZ2luZyB0byB0aGUg c2FtZSBmbG93IGdvIHRvIHRoZSBzYW1lIGVsZW1lbnQuIEkgdGhvdWdodCBpdCB3b3VsZCBhY3R1 YWxseSBiZSBlYXNpZXIgdG8gdXNlIGRpZmZlcmVudCBTRlBzIHN1Y2ggdGhhdCBvbmx5IHRoZSBD bGFzc2lmaWVyIG11c3QgYmUgZmxvdy1hd2FyZS4gSWYgdGhhdOKAmXMgbm90IHRoZSBjYXNlIG90 aGVyIG5vZGVzIGFsc28gbmVlZCB0byBiZSBmbG93LWF3YXJlIGFuZCBrZWVwIGZsb3cgc3RhdGUu IFRoaXMgbXVzdCBiZSBtZW50aW9uIGluIHRoZSBkb2N1bWVudCENCj4+PiANCj4+PiBUaGUgYXJj aGl0ZWN0dXJlIGlzIGNsZWFyIHRoYXQgdGhlIGFzc2lnbm1lbnQgb2YgZmxvd3MgdG8gcGFydGlj dWxhciBTZXJ2aWNlIEZ1bmN0aW9ucyBjYW4gaGFwcGVuIGF0IGEgdmFyaWV0eSBvZiBkaWZmZXJl bnQgcG9pbnRzLiAgT25lIG9mIHRoZSBtb3RpdmF0aW9ucyBmb3IgY2FycnlpbmcgbWV0YS1kYXRh IGlzIHRvIGFsbG93IGEgY2xhc3NpZmllciB0byBpbnNlcnQgaW5mb3JtYXRpb24gaWRlbnRpZnlp bmcgYSBwYXJ0aWN1bGFyIGZsb3cgc28gdGhhdCBhbGwgaXRzIHBhY2tldHMgY2FuIGJlIHByb3Bl cmx5IGxvYWQtYmFsYW5jZWQgdG8gdGhlIHNhbWUgU2VydmljZSBGdW5jdGlvbi4gIElmIHRoZSBD bGFzc2lmaWVyIGRvZXMgdGhpcywgdGhlbiB0aGVyZSBpcyBub3QgYSBuZWVkIGZvciBldmVyeSBs b2FkLWJhbGFuY2luZyBlbGVtZW50IHRvIGRvIHJlY2xhc3NpZmljYXRpb24uIA0KPj4gDQo+PiBB Z2Fpbiwgd2hhdCBBbGlhIHNhaWQuDQo+PiANCj4+IEkgdHJ1c3QgdGhlc2UgYXJlIG5vdyBjbGVh ciBmb3IgeW91IG5vdy4NCj4gDQo+IEl0IHdhcyBhbHdheXMgY2xlYXIgYnV0IHRoaXMgc2VlbXMg anVzdCBtb3JlIGNvbXBsaWNhdGVkIHRoYW4gbmVlZGVkLiBJIHN0aWxsIHRoaW5rIGl0IHdvdWxk IGJlIG11Y2ggY2xlYW5lciBhbmQgbGVzcyBlcnJvci1wcm9uZSBpZiB5b3UganVzdCBhc3NpZ24g ZGlmZmVyZW50IHBhdGhzIGZvciB0aGVzZSBjYXNlczsgdGhhdCB3b3VsZCBhbHNvIHNhdmUgeW91 IGEgbG90IG9mIHRoZSBwcm9ibGVtcyB3aXRoIHR3byBkaWZmZXJlbnQgVFRMIGZpZWxkcy4gSG93 ZXZlciwgSSBndWVzcyBpdCBtdWNoIHRvIGxhdGUgdG8gY2hhbmdlIHRoaXMgbm93IHVuZm9ydHVu YXRlbHkuDQoNClllcy4NCg0KIkVhcmx5IENyb3NzLUZ1bmN0aW9uYWwgRW5nYWdlbWVudCBhbmQg SW5wdXQiIGlzLCBpbiBteSBtb3N0IGh1bWJsZSBvcGluaW9uLCBvbmUgb2YgdGhlIHR3byBvciB0 aHJlZSBsYXJnZXN0IG1pc3NlZCBvcHBvcnR1bml0aWVzIGluIHRoZSBJRVRGIGFzIGEgd2hvbGUu IEFuZCBpdCBzZWVtcyB0byBtZSB0aGF0IGl04oCZcyBtb3ZpbmcgdG93YXJkcyBtb3JlIGRpdmlz aW9uIGluc3RlYWQgb2YgbW9yZSBpbnRlZ3JhdGlvbi4gVGhhdCBpcywgYWxzbywgb3V0c2lkZSB0 aGUgc2NvcGUgb2YgdGhpcyBwYXJ0aWN1bGFyIGRvY3VtZW50Lg0KDQpCdXQgc29tZW9uZSBpbiB0 aGUgSUVTRyBtaWdodCB3YW50IHRvIGRvIHNvbWV0aGluZyBpbnN0ZWFkIG9mIHB1dHRpbmcgYSBs YXRlIERJU0NVU1MgOi0pDQoNClRoYW5rcyBhZ2FpbiENCg0K4oCUIENhcmxvcy4NCg0KPiANCj4g DQoNCg== From nobody Mon Oct 16 09:24:16 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 555D2126B6E; Mon, 16 Oct 2017 09:24:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.521 X-Spam-Level: X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2WyNn0ZhskT6; Mon, 16 Oct 2017 09:24:06 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B62F132D4E; Mon, 16 Oct 2017 09:24:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2296; q=dns/txt; s=iport; t=1508171046; x=1509380646; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=07Ild1GJ4QZnXifW650PIvq4D5/Qu4Manzo623cpy64=; b=DIO1odTlOw4G26Gu85CXaR5HvtYlDjlfQpAN/4vRHdkWHqyl8HTs7Zy/ xzFxEg5mYCtzATipXScm+PvNCIL8x49Aq4pgqrhWGCHiePhX/mbxeJIbV F1PNvaGTsk2W/vN3DPk2PPaMEde2X6HokBVqy8019JHXnU+0bhWz1mPUN s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CdAADr2+RZ/5JdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1+BUicHg3OKH48zgXaIRY1qghQKhTsCGoQ8PxgBAgEBAQEBAQF?= =?us-ascii?q?rKIUdAQEBAwEjEUUFCwIBCBgCAiYCAgIfERUQAgQOBYoFAw0IqmaCJ4dCDYNoA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEBHYEOgh+CB4FRgWorgn+CXoInOoJZL4IyBaE?= =?us-ascii?q?MPAKPcIR5ghSJdIcOjQOIPwIRGQGBOAEfOIFZehV2AYI2gxGBTnYBihCBEQEBA?= =?us-ascii?q?Q?= X-IronPort-AV: E=Sophos;i="5.43,387,1503360000"; d="scan'208";a="17732891" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Oct 2017 16:24:05 +0000 Received: from XCH-RTP-019.cisco.com (xch-rtp-019.cisco.com [64.101.220.159]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id v9GGO5G6017626 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 16 Oct 2017 16:24:05 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-019.cisco.com (64.101.220.159) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Mon, 16 Oct 2017 12:24:04 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Mon, 16 Oct 2017 12:24:04 -0400 From: "Carlos Pignataro (cpignata)" To: Kathleen Moriarty CC: Eric Rescorla , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Thread-Topic: Eric Rescorla's Discuss on draft-ietf-sfc-nsh-24: (with DISCUSS and COMMENT) Thread-Index: AQHTOAYHYSdlQhRLx0q1fm9NlsjUoKLKl8uAgAACZ4CAHG8mAA== Date: Mon, 16 Oct 2017 16:24:04 +0000 Message-ID: References: <150656766105.13740.10127057899137745873.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.116.133] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] Eric Rescorla's Discuss on draft-ietf-sfc-nsh-24: (with DISCUSS and COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 16:24:08 -0000 TWFueSB0aGFua3MgZm9yIHRoZSBjb250aW51ZWQgZGlhbG9ndWUsIEthdGhsZWVuISEhDQoNCkth dGhsZWVuLCBFcmljLA0KDQpKdXN0IGEgaGVhZHMgdXAgdGhhdCB3ZSBhcmUgYWxtb3N0IGZpbmlz aGVkIHdpdGggYSBwcm9wb3NhbCBmb3IgdGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHRoYXQg d2UgYXJlIHRhcmdldGluZyB0byBhZGRyZXNzIHRoZSBjb25jZXJucy4gTW9yZSBzb29uLCBhbmQg d2hpbGUgd2UgbG9vayBmb3J3YXJkIHRvIHlvdXIgY29tbWVudHMgb24gdGhhdCBwcm9wb3NhbCwg aW4gdGhlIG1lYW4gdGltZToNCg0KRXJpYywgd2UgaGF2ZSBub3QgaGVhcmQgZnJvbSB5b3Ugb24g YW55IG9mIHRoZSB0d28gbWVzc2FnZXMgd2Ugc2VudCBhZGRyZXNzZWQgdG8geW91Lg0KDQpLYXRo bGVlbiwgb25lIGNvbW1lbnQgYW5kIG9uZSBxdWVzdGlvbiBpbmxpbmUuDQoNCj4gS2F0aGxlZW4g TW9yaWFydHkgPEthdGhsZWVuLk1vcmlhcnR5LmlldGZAZ21haWwuY29tPiB3cm90ZToNCj4gIA0K PiBXaGlsZQ0KPiB0aGUgZXhwcmVzc2lvbnMgRUtSIGluY2x1ZGVzIGJlbG93IGFyZSBub3QgZGly ZWN0bHkgaW4gdGhlIGRyYWZ0LCB0aGlzDQo+IGlzIGhvdyB3ZSByZWFkIGl0LCANCg0KVGhpcyBz dGF0ZW1lbnQgc2VlbXMgdG8gY2hhcmFjdGVyaXplIHRoZSByZXZpZXcgLyByZXZpZXdlcnMsIG1v cmUgdGhhbiB0aGUgZG9jdW1lbnQgaXRzZWxmLg0KDQo+ICAgSWYgTVBMUyBpcyB1c2VkIHNpbWls YXJseSBpbnN0ZWFkLCB5ZXMsIGl0DQo+IHdpbGwgaGF2ZSB0aGUgc2FtZSBpc3N1ZXMsIGJ1dCB5 b3UgYWxzbyB3b24ndCBoYXZlIGEgc2VjdXJlIG9wdGlvbiBpZg0KPiB0aGlzIGlzIGRvbmUgd2l0 aCB0aGUgc2FtZSBzZWN1cml0eSAob3IgbGFjayB0aGVyZW9mKSBhcyBNUExTLg0KDQpJIGFtIG5v dCBzdXJlIEkgZnVsbHkgdW5kZXJzdGFuZCB0aGUgc291cmNlLCBwcm92ZW5hbmNlLCBhbmQgaW1w bGljYXRpb25zIG9mIHRoaXMgY29tbWVudC4gSSBkbyBub3QgcmVjYWxsIE1QTFMgYmVpbmcgZGlz Y3Vzc2VkIGJlZm9yZSBpbiB0aGUgY29udGV4dCBvZiB0aGlzIGRvY3VtZW50Lg0KDQpSRkMgNzM2 NSBkZXNjcmliZXMgdGhlIHVzZSBvZiBib3RoIE1QTFMgYW5kIElQIGluIERhdGEgQ2VudGVyIChE QykgTmV0d29yayBWaXJ0dWFsaXphdGlvbi4gVG9kYXksIHNvbWUgb2YgdGhlc2UgcGFja2V0cyBm bG93IGFscmVhZHkgaW4gZXhpc3RpbmcgRENzLCBhbmQgc2VydmljZSBjaGFpbmluZyBleGlzdHMg aW4gdGhvc2UgRENzLiBJcyB0aGVyZSBzb21lIGFkZGl0aW9uYWwgcmVxdWlyZW1lbnQgZm9yIERD IGRhdGEgcGxhbmVzLCBvciBmb3IgTlZPMywgdGhhdCBpcyBub3QgY2FwdHVyZWQgZWxzZXdoZXJl Pw0KDQpNb3JlIGltcG9ydGFudGx5OiBhIGNvcm9sbGFyeSBvZiB3aGF0IHlvdSBhcmUgc2F5aW5n IGlzIHRoYXQsIHByb3ZpZGluZyBhIHNlY3VyaXR5IG9wdGlvbiB1bmRlcm5lYXRoIGluIHRoZSB0 dW5uZWxpbmcgYWRkcyB0byB0aGUgb3ZlcmFsbCBzZWN1cml0eSBwb3N0dXJlLCBhbmQgdGhhdCBN UExTIGlzIGRpZmZlcmVudCB0aGFuIElQIGluIHRoaXMgY29udGV4dC4gRG9lcyB0aGF0IGNhcHR1 cmUgeW91ciBpbnRlbnQ/DQoNCj4gDQo+IEJlc3QgcmVnYXJkcywNCj4gS2F0aGxlZW4NCg0KQmVz dCwNCg0K4oCUIENhcmxvcyBQLg0KDQo= From nobody Mon Oct 16 09:28:02 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F8191323B4 for ; Mon, 16 Oct 2017 09:28:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hwDGfD14LB_g for ; Mon, 16 Oct 2017 09:27:58 -0700 (PDT) Received: from mail-qt0-x22b.google.com (mail-qt0-x22b.google.com [IPv6:2607:f8b0:400d:c0d::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6F04133061 for ; Mon, 16 Oct 2017 09:27:58 -0700 (PDT) Received: by mail-qt0-x22b.google.com with SMTP id z28so30394659qtz.13 for ; Mon, 16 Oct 2017 09:27:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Ik1REv6GSY+kfNFGOfZtKSRRzil1ERNUACX0y6vDzAw=; b=rXHOz7gis3zR/N99Cim09/kaY3w0pmg5fBX/FNUU0aRrWbv4ZBhwLeRBZGJ/pJzvaW f9JOUGpYWZfybEHllx3ulrmgQ8cWEMh78/va/LVjukMxXINx2vxys1WNTcC1bsY/MTZn +Ud/dDjE2azDkf0vsfDfJOhgNfExdlbHD5LEl4nELLnhWwAe4Um8nqgviUaYifUJRBqK ZwAyWVGJp44ClIwY/pyxE2fMcHfDQBreMltNQJ/xV9uPkAXxY6VqG9kj0DIZhL+cSxR0 TbzesOkOiJ0D5BiQrUYMLmBRWSsbqd9IkJCdaO6U8QOn+4AZeZSGI+R+F9urYayTrlti W2/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Ik1REv6GSY+kfNFGOfZtKSRRzil1ERNUACX0y6vDzAw=; b=kNHcEF23DZ1ty8xT0D5t3bOBoqbGyaRLuVMKr2NGjEpZsbnQi6ZlegJK9ADfUATnXP JKH2wylPGD4NI4VdwOQ8kD8ffItYBkNNvILosthxAnWLKb76KS8bo1DAa63laOQRc9rg jAQUPL/wyl6QiwtSa8qZvk9jpV0T9TQ4VMjYBWxFj/lePbj6ekkZ5JF2HZ3MF1jU8wYK pRm6n574yGpcZNCeXsDwHrxCicSTBHLV8bXLoyhG6n+ZEvYsh0MbqfdHdvnhFZyTnXrC IXqYAiHY96isuYozTjbRT35/pta3znO7ztORR372+9LSfF39sCt44o3BS0V78tI6qf4/ o6Vg== X-Gm-Message-State: AMCzsaU5FhsrXoF4x+EVbX9xz9xacV+sL6DPpokGp4fJZ2xwWm8ZnNp3 4H1gAYt1hbkfF+mv05adxoR+yWkAgWrK/5kAI9A6Ww== X-Google-Smtp-Source: ABhQp+SV9BWwdQ+DNy9eO+gv44tLckD8sY03yiibzr4JiZ6FAFgFeqR4Et8b4k+ofCwHMukvXCC5v3HuvI/wbiCAbHw= X-Received: by 10.37.45.83 with SMTP id s19mr753871ybe.400.1508171277544; Mon, 16 Oct 2017 09:27:57 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Mon, 16 Oct 2017 09:27:17 -0700 (PDT) In-Reply-To: References: <150656766105.13740.10127057899137745873.idtracker@ietfa.amsl.com> From: Eric Rescorla Date: Mon, 16 Oct 2017 09:27:17 -0700 Message-ID: To: "Carlos Pignataro (cpignata)" Cc: Kathleen Moriarty , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Content-Type: multipart/alternative; boundary="f4030435b01042448f055bac7dc7" Archived-At: Subject: Re: [sfc] Eric Rescorla's Discuss on draft-ietf-sfc-nsh-24: (with DISCUSS and COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 16:28:00 -0000 --f4030435b01042448f055bac7dc7 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Mon, Oct 16, 2017 at 9:24 AM, Carlos Pignataro (cpignata) < cpignata@cisco.com> wrote: > Many thanks for the continued dialogue, Kathleen!!! > > Kathleen, Eric, > > Just a heads up that we are almost finished with a proposal for the > Security Considerations that we are targeting to address the concerns. Mo= re > soon, and while we look forward to your comments on that proposal, in the > mean time: > > Eric, we have not heard from you on any of the two messages we sent > addressed to you. > Yeah, these got back-burnered because I had understood you were going to make substantive changes to actually add an integrity feature and I was intending to review the draft at that time. Is your plan not to do that? -Ekr > Kathleen, one comment and one question inline. > > > Kathleen Moriarty wrote: > > > > While > > the expressions EKR includes below are not directly in the draft, this > > is how we read it, > > This statement seems to characterize the review / reviewers, more than th= e > document itself. > > > If MPLS is used similarly instead, yes, it > > will have the same issues, but you also won't have a secure option if > > this is done with the same security (or lack thereof) as MPLS. > > I am not sure I fully understand the source, provenance, and implications > of this comment. I do not recall MPLS being discussed before in the conte= xt > of this document. > > RFC 7365 describes the use of both MPLS and IP in Data Center (DC) Networ= k > Virtualization. Today, some of these packets flow already in existing DCs= , > and service chaining exists in those DCs. Is there some additional > requirement for DC data planes, or for NVO3, that is not captured elsewhe= re? > > More importantly: a corollary of what you are saying is that, providing a > security option underneath in the tunneling adds to the overall security > posture, and that MPLS is different than IP in this context. Does that > capture your intent? > > > > > Best regards, > > Kathleen > > Best, > > =E2=80=94 Carlos P. > > --f4030435b01042448f055bac7dc7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Mon, Oct 16, 2017 at 9:24 AM, Carlos Pignataro (cpignata) <cpigna= ta@cisco.com> wrote:
Many t= hanks for the continued dialogue, Kathleen!!!

Kathleen, Eric,

Just a heads up that we are almost finished with a proposal for the Securit= y Considerations that we are targeting to address the concerns. More soon, = and while we look forward to your comments on that proposal, in the mean ti= me:

Eric, we have not heard from you on any of the two messages we sent address= ed to you.

Yeah, these got back-burnere= d because I had understood you were going to make substantive changes to ac= tually add an integrity feature and I was intending to review the draft at = that time. Is your plan not to do that?

-Ekr


Kathleen, one comment and one question inline.

> Kathleen Moriarty <Kathleen.Moriarty.ietf@gmail.com> wrote:
>
> While
> the expressions EKR includes below are not directly in the draft, this=
> is how we read it,

This statement seems to characterize the review / reviewers, more th= an the document itself.

>=C2=A0 =C2=A0If MPLS is used similarly instead, yes, it
> will have the same issues, but you also won't have a secure option= if
> this is done with the same security (or lack thereof) as MPLS.

I am not sure I fully understand the source, provenance, and implica= tions of this comment. I do not recall MPLS being discussed before in the c= ontext of this document.

RFC 7365 describes the use of both MPLS and IP in Data Center (DC) Network = Virtualization. Today, some of these packets flow already in existing DCs, = and service chaining exists in those DCs. Is there some additional requirem= ent for DC data planes, or for NVO3, that is not captured elsewhere?

More importantly: a corollary of what you are saying is that, providing a s= ecurity option underneath in the tunneling adds to the overall security pos= ture, and that MPLS is different than IP in this context. Does that capture= your intent?

>
> Best regards,
> Kathleen

Best,

=E2=80=94 Carlos P.


--f4030435b01042448f055bac7dc7-- From nobody Mon Oct 16 10:12:42 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D18E1331B0; Mon, 16 Oct 2017 10:12:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.519 X-Spam-Level: X-Spam-Status: No, score=-14.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XRR077nlEW_n; Mon, 16 Oct 2017 10:12:33 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B7E8F13301B; Mon, 16 Oct 2017 10:12:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11888; q=dns/txt; s=iport; t=1508173952; x=1509383552; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=pQ06lqpyGAqAb5/RmHfByH0XdkFs79lxBMTOsfVfeoU=; b=fy36SnyItemQxZP2SoKVmY2YAmxk6zvvtT3dRwMk5DGGIj8kgiNOfE3f r+saCCJ0kG7wgBP79Q+AjfOOecZWu/ESyRU3FdaclGDNY6LDUqQRs2Q9w 8AFpmguEWkPSKQ5qgjwdzWFEAXZpE2QHh3mlsqbd5+tBXxsdeKABJPzeG k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CdAACj5+RZ/40NJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1+BUicHg3OKH48zgXaIRYgrhT+CFAqFOwIahDw/GAECAQEBAQE?= =?us-ascii?q?BAWsohR0BAQEDASNWBQsCAQgOCicDAgICHxEUEQIEDgUbiR5MAw0IqwiCJ4dED?= =?us-ascii?q?YNoAQEBAQEBAQEBAQEBAQEBAQEBAQEBHYMtggeBUYFqK4J/gl6FOi+CMgWYZYg?= =?us-ascii?q?nPAKPcIR5ghSFdoN+hw6NA4g/AhEZAYE4AR84gVl6FXYBgjaCXBwZgU52AYoQg?= =?us-ascii?q?REBAQE?= X-IronPort-AV: E=Sophos;i="5.43,387,1503360000"; d="scan'208,217";a="306617721" Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 16 Oct 2017 17:12:31 +0000 Received: from XCH-RTP-019.cisco.com (xch-rtp-019.cisco.com [64.101.220.159]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v9GHCVC9005411 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 16 Oct 2017 17:12:31 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-019.cisco.com (64.101.220.159) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Mon, 16 Oct 2017 13:12:30 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Mon, 16 Oct 2017 13:12:30 -0400 From: "Carlos Pignataro (cpignata)" To: Eric Rescorla CC: Kathleen Moriarty , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Thread-Topic: Eric Rescorla's Discuss on draft-ietf-sfc-nsh-24: (with DISCUSS and COMMENT) Thread-Index: AQHTOAYHYSdlQhRLx0q1fm9NlsjUoKLKl8uAgAACZ4CAHG8mAIAAAO2AgAAMnIA= Date: Mon, 16 Oct 2017 17:12:30 +0000 Message-ID: References: <150656766105.13740.10127057899137745873.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.116.133] Content-Type: multipart/alternative; boundary="_000_B97FF12913D247A08E8BE90033961D17ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] Eric Rescorla's Discuss on draft-ietf-sfc-nsh-24: (with DISCUSS and COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 17:12:34 -0000 --_000_B97FF12913D247A08E8BE90033961D17ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpPbiBPY3QgMTYsIDIwMTcsIGF0IDEyOjI3IFBNLCBFcmljIFJlc2NvcmxhIDxla3JAcnRmbS5j b208bWFpbHRvOmVrckBydGZtLmNvbT4+IHdyb3RlOg0KDQoNCg0KT24gTW9uLCBPY3QgMTYsIDIw MTcgYXQgOToyNCBBTSwgQ2FybG9zIFBpZ25hdGFybyAoY3BpZ25hdGEpIDxjcGlnbmF0YUBjaXNj by5jb208bWFpbHRvOmNwaWduYXRhQGNpc2NvLmNvbT4+IHdyb3RlOg0KTWFueSB0aGFua3MgZm9y IHRoZSBjb250aW51ZWQgZGlhbG9ndWUsIEthdGhsZWVuISEhDQoNCkthdGhsZWVuLCBFcmljLA0K DQpKdXN0IGEgaGVhZHMgdXAgdGhhdCB3ZSBhcmUgYWxtb3N0IGZpbmlzaGVkIHdpdGggYSBwcm9w b3NhbCBmb3IgdGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHRoYXQgd2UgYXJlIHRhcmdldGlu ZyB0byBhZGRyZXNzIHRoZSBjb25jZXJucy4gTW9yZSBzb29uLCBhbmQgd2hpbGUgd2UgbG9vayBm b3J3YXJkIHRvIHlvdXIgY29tbWVudHMgb24gdGhhdCBwcm9wb3NhbCwgaW4gdGhlIG1lYW4gdGlt ZToNCg0KRXJpYywgd2UgaGF2ZSBub3QgaGVhcmQgZnJvbSB5b3Ugb24gYW55IG9mIHRoZSB0d28g bWVzc2FnZXMgd2Ugc2VudCBhZGRyZXNzZWQgdG8geW91Lg0KDQpZZWFoLCB0aGVzZSBnb3QgYmFj ay1idXJuZXJlZA0KDQpXZSB1bmRlcnN0YW5kIHRoaXMgRElTQ1VTU2lvbiBoYXBwZW5zIHRocm91 Z2ggZGlhbG9ndWUg4oCUIG5vdCBndWVzc2luZyBvciBtYW5kYXRlLg0KDQpiZWNhdXNlIEkgaGFk IHVuZGVyc3Rvb2QgeW91IHdlcmUgZ29pbmcgdG8gbWFrZSBzdWJzdGFudGl2ZSBjaGFuZ2VzIHRv IGFjdHVhbGx5IGFkZCBhbiBpbnRlZ3JpdHkgZmVhdHVyZQ0KDQpTb3JyeSBpZiB3ZSB3ZXJlIG5v dCBjbGVhci4NCg0KV2UgYXJlIGluZGVlZCB3b3JraW5nIG9uIGNoYW5nZXMsIHNvbWUgcG90ZW50 aWFsbHkgc3Vic3RhbnRpdmUg4oCUIGJ1dCBzb21laG93IEkgbWlzc2VkIHRoaXM6IGNhbiB5b3Ug cGxlYXNlIHBvaW50IG1lIHRvIHRoZSByZWNvcmQgd2hlcmUgdGhlcmXigJlzIGEgZGVjaXNpb24g b3IgZGlzY3Vzc2lvbiB0byDigJxhZGQgYW4gaW50ZWdyaXR5IGZlYXR1cmXigJ0/DQoNCldlIGFy ZSB3b3JraW5nIHRocm91Z2ggYSBtb3JlIHRob3JvdWdoIHRocmVhdCBhbmFseXNpcyBhbmQgZGVz Y3JpYmluZyB0aGUgaW1wbGljYXRpb25zIGFuZCBzb2x1dGlvbnMgZm9yIGVhY2ggb2YgdGhvc2Ug Y2FzZXMuDQoNCmFuZCBJIHdhcyBpbnRlbmRpbmcgdG8gcmV2aWV3IHRoZSBkcmFmdCBhdCB0aGF0 IHRpbWUuIElzIHlvdXIgcGxhbiBub3QgdG8gZG8gdGhhdD8NCg0KV2Ugd291bGQgaGF2ZSBsaWtl ZCB0byBoYXZlIHJlc3BvbnNlcyB0byBvdXIgY29tbWVudHMgb3IgcXVlc3Rpb25zLCBkaXNjdXNz aW9uIHZpYSBkaWFsb2d1ZSwgdG8gaW5jb3Jwb3JhdGUgaW4gdGhlIHVwZGF0ZXMgYW5kIHBvdGVu dGlhbGx5IHN1YnN0YW50aXZlIHNldCBvZiBjaGFuZ2VzLiBUaGUgcGxhbiBpcyAobm93KSBwcm92 aWRlIGEgdGV4dHVhbCBwcm9wb3NhbC4NCg0KVGhhdCBzYWlkLCBzdXJlOiB5b3UgY2FuIHJldmll dyB0aGUgZm9ydGhjb21pbmcgc2V0IG9mIGNoYW5nZXMuDQoNCuKAlCBDYXJsb3MuDQoNCg0KLUVr cg0KDQoNCkthdGhsZWVuLCBvbmUgY29tbWVudCBhbmQgb25lIHF1ZXN0aW9uIGlubGluZS4NCg0K PiBLYXRobGVlbiBNb3JpYXJ0eSA8S2F0aGxlZW4uTW9yaWFydHkuaWV0ZkBnbWFpbC5jb208bWFp bHRvOkthdGhsZWVuLk1vcmlhcnR5LmlldGZAZ21haWwuY29tPj4gd3JvdGU6DQo+DQo+IFdoaWxl DQo+IHRoZSBleHByZXNzaW9ucyBFS1IgaW5jbHVkZXMgYmVsb3cgYXJlIG5vdCBkaXJlY3RseSBp biB0aGUgZHJhZnQsIHRoaXMNCj4gaXMgaG93IHdlIHJlYWQgaXQsDQoNClRoaXMgc3RhdGVtZW50 IHNlZW1zIHRvIGNoYXJhY3Rlcml6ZSB0aGUgcmV2aWV3IC8gcmV2aWV3ZXJzLCBtb3JlIHRoYW4g dGhlIGRvY3VtZW50IGl0c2VsZi4NCg0KPiAgIElmIE1QTFMgaXMgdXNlZCBzaW1pbGFybHkgaW5z dGVhZCwgeWVzLCBpdA0KPiB3aWxsIGhhdmUgdGhlIHNhbWUgaXNzdWVzLCBidXQgeW91IGFsc28g d29uJ3QgaGF2ZSBhIHNlY3VyZSBvcHRpb24gaWYNCj4gdGhpcyBpcyBkb25lIHdpdGggdGhlIHNh bWUgc2VjdXJpdHkgKG9yIGxhY2sgdGhlcmVvZikgYXMgTVBMUy4NCg0KSSBhbSBub3Qgc3VyZSBJ IGZ1bGx5IHVuZGVyc3RhbmQgdGhlIHNvdXJjZSwgcHJvdmVuYW5jZSwgYW5kIGltcGxpY2F0aW9u cyBvZiB0aGlzIGNvbW1lbnQuIEkgZG8gbm90IHJlY2FsbCBNUExTIGJlaW5nIGRpc2N1c3NlZCBi ZWZvcmUgaW4gdGhlIGNvbnRleHQgb2YgdGhpcyBkb2N1bWVudC4NCg0KUkZDIDczNjUgZGVzY3Jp YmVzIHRoZSB1c2Ugb2YgYm90aCBNUExTIGFuZCBJUCBpbiBEYXRhIENlbnRlciAoREMpIE5ldHdv cmsgVmlydHVhbGl6YXRpb24uIFRvZGF5LCBzb21lIG9mIHRoZXNlIHBhY2tldHMgZmxvdyBhbHJl YWR5IGluIGV4aXN0aW5nIERDcywgYW5kIHNlcnZpY2UgY2hhaW5pbmcgZXhpc3RzIGluIHRob3Nl IERDcy4gSXMgdGhlcmUgc29tZSBhZGRpdGlvbmFsIHJlcXVpcmVtZW50IGZvciBEQyBkYXRhIHBs YW5lcywgb3IgZm9yIE5WTzMsIHRoYXQgaXMgbm90IGNhcHR1cmVkIGVsc2V3aGVyZT8NCg0KTW9y ZSBpbXBvcnRhbnRseTogYSBjb3JvbGxhcnkgb2Ygd2hhdCB5b3UgYXJlIHNheWluZyBpcyB0aGF0 LCBwcm92aWRpbmcgYSBzZWN1cml0eSBvcHRpb24gdW5kZXJuZWF0aCBpbiB0aGUgdHVubmVsaW5n IGFkZHMgdG8gdGhlIG92ZXJhbGwgc2VjdXJpdHkgcG9zdHVyZSwgYW5kIHRoYXQgTVBMUyBpcyBk aWZmZXJlbnQgdGhhbiBJUCBpbiB0aGlzIGNvbnRleHQuIERvZXMgdGhhdCBjYXB0dXJlIHlvdXIg aW50ZW50Pw0KDQo+DQo+IEJlc3QgcmVnYXJkcywNCj4gS2F0aGxlZW4NCg0KQmVzdCwNCg0K4oCU IENhcmxvcyBQLg0KDQoNCg0K --_000_B97FF12913D247A08E8BE90033961D17ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <4F0C9AD0DD4ED44BB4838EF247CBF4A3@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+T24gT2N0IDE2LCAyMDE3LCBhdCAxMjoyNyBQTSwgRXJpYyBSZXNjb3Js YSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIgY2xhc3M9IiI+ZWtyQHJ0Zm0uY29t PC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xp bmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJsdHIiIGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj48YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJn bWFpbF9xdW90ZSI+T24gTW9uLCBPY3QgMTYsIDIwMTcgYXQgOToyNCBBTSwgQ2FybG9zIFBpZ25h dGFybyAoY3BpZ25hdGEpDQo8c3BhbiBkaXI9Imx0ciIgY2xhc3M9IiI+Jmx0OzxhIGhyZWY9Im1h aWx0bzpjcGlnbmF0YUBjaXNjby5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5jcGlnbmF0 YUBjaXNjby5jb208L2E+Jmd0Ozwvc3Bhbj4gd3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVv dGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2luOjAgMCAwIC44ZXg7Ym9yZGVyLWxl ZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFleCI+DQpNYW55IHRoYW5rcyBmb3IgdGhl IGNvbnRpbnVlZCBkaWFsb2d1ZSwgS2F0aGxlZW4hISE8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQpLYXRobGVlbiwgRXJpYyw8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpKdXN0IGEg aGVhZHMgdXAgdGhhdCB3ZSBhcmUgYWxtb3N0IGZpbmlzaGVkIHdpdGggYSBwcm9wb3NhbCBmb3Ig dGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHRoYXQgd2UgYXJlIHRhcmdldGluZyB0byBhZGRy ZXNzIHRoZSBjb25jZXJucy4gTW9yZSBzb29uLCBhbmQgd2hpbGUgd2UgbG9vayBmb3J3YXJkIHRv IHlvdXIgY29tbWVudHMgb24gdGhhdCBwcm9wb3NhbCwgaW4gdGhlIG1lYW4gdGltZTo8YnIgY2xh c3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpFcmljLCB3ZSBoYXZlIG5vdCBoZWFyZCBmcm9tIHlvdSBv biBhbnkgb2YgdGhlIHR3byBtZXNzYWdlcyB3ZSBzZW50IGFkZHJlc3NlZCB0byB5b3UuPGJyIGNs YXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+WWVhaCwgdGhlc2UgZ290IGJhY2stYnVybmVyZWQgPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2PldlIHVuZGVyc3RhbmQgdGhpcyBESVNDVVNTaW9uIGhhcHBl bnMgdGhyb3VnaCBkaWFsb2d1ZSDigJQgbm90IGd1ZXNzaW5nIG9yIG1hbmRhdGUuPC9kaXY+DQo8 YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJh Ij4NCjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj4NCjxkaXYgY2xhc3M9IiI+YmVjYXVzZSBJIGhh ZCB1bmRlcnN0b29kIHlvdSB3ZXJlIGdvaW5nIHRvIG1ha2Ugc3Vic3RhbnRpdmUgY2hhbmdlcyB0 byBhY3R1YWxseSBhZGQgYW4gaW50ZWdyaXR5IGZlYXR1cmU8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXY+U29ycnkgaWYgd2Ugd2VyZSBub3QgY2xlYXIuPC9kaXY+DQo8ZGl2PjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPGRpdj5XZSBhcmUgaW5kZWVkIHdvcmtpbmcgb24gY2hhbmdlcywgc29t ZSBwb3RlbnRpYWxseSBzdWJzdGFudGl2ZSDigJQgYnV0IHNvbWVob3cgSSBtaXNzZWQgdGhpczog Y2FuIHlvdSBwbGVhc2UgcG9pbnQgbWUgdG8gdGhlIHJlY29yZCB3aGVyZSB0aGVyZeKAmXMgYSBk ZWNpc2lvbiBvciBkaXNjdXNzaW9uIHRvIOKAnGFkZCBhbiBpbnRlZ3JpdHkgZmVhdHVyZeKAnT8m bmJzcDs8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PldlIGFyZSB3b3Jr aW5nIHRocm91Z2ggYSBtb3JlIHRob3JvdWdoIHRocmVhdCBhbmFseXNpcyBhbmQgZGVzY3JpYmlu ZyB0aGUgaW1wbGljYXRpb25zIGFuZCBzb2x1dGlvbnMgZm9yIGVhY2ggb2YgdGhvc2UgY2FzZXMu Jm5ic3A7PC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9ImdtYWlsX2V4dHJhIj4NCjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj4NCjxkaXYgY2xhc3M9 IiI+YW5kIEkgd2FzIGludGVuZGluZyB0byByZXZpZXcgdGhlIGRyYWZ0IGF0IHRoYXQgdGltZS4g SXMgeW91ciBwbGFuIG5vdCB0byBkbyB0aGF0PzwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRp dj5XZSB3b3VsZCBoYXZlIGxpa2VkIHRvIGhhdmUgcmVzcG9uc2VzIHRvIG91ciBjb21tZW50cyBv ciBxdWVzdGlvbnMsIGRpc2N1c3Npb24gdmlhIGRpYWxvZ3VlLCB0byBpbmNvcnBvcmF0ZSBpbiB0 aGUgdXBkYXRlcyBhbmQgcG90ZW50aWFsbHkgc3Vic3RhbnRpdmUgc2V0IG9mIGNoYW5nZXMuIFRo ZSBwbGFuIGlzIChub3cpIHByb3ZpZGUgYSB0ZXh0dWFsIHByb3Bvc2FsLjwvZGl2Pg0KPGRpdj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+VGhhdCBzYWlkLCBzdXJlOiB5b3UgY2FuIHJldmll dyB0aGUgZm9ydGhjb21pbmcgc2V0IG9mIGNoYW5nZXMuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdj7igJQgQ2FybG9zLjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2Nr cXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0 ciIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+DQo8ZGl2IGNsYXNzPSJnbWFp bF9xdW90ZSI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4tRWtyPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2lu OjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFleCI+ DQo8YnIgY2xhc3M9IiI+DQpLYXRobGVlbiwgb25lIGNvbW1lbnQgYW5kIG9uZSBxdWVzdGlvbiBp bmxpbmUuPGJyIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KJmd0OyBL YXRobGVlbiBNb3JpYXJ0eSAmbHQ7PGEgaHJlZj0ibWFpbHRvOkthdGhsZWVuLk1vcmlhcnR5Lmll dGZAZ21haWwuY29tIiBjbGFzcz0iIj5LYXRobGVlbi5Nb3JpYXJ0eS5pZXRmQGdtYWlsLjx3YnIg Y2xhc3M9IiI+Y29tPC9hPiZndDsgd3JvdGU6PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0i Ij4NCiZndDsgV2hpbGU8YnIgY2xhc3M9IiI+DQomZ3Q7IHRoZSBleHByZXNzaW9ucyBFS1IgaW5j bHVkZXMgYmVsb3cgYXJlIG5vdCBkaXJlY3RseSBpbiB0aGUgZHJhZnQsIHRoaXM8YnIgY2xhc3M9 IiI+DQomZ3Q7IGlzIGhvdyB3ZSByZWFkIGl0LDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N Cjwvc3Bhbj5UaGlzIHN0YXRlbWVudCBzZWVtcyB0byBjaGFyYWN0ZXJpemUgdGhlIHJldmlldyAv IHJldmlld2VycywgbW9yZSB0aGFuIHRoZSBkb2N1bWVudCBpdHNlbGYuPGJyIGNsYXNzPSIiPg0K PHNwYW4gY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KJmd0OyZuYnNwOyAmbmJzcDtJZiBNUExTIGlz IHVzZWQgc2ltaWxhcmx5IGluc3RlYWQsIHllcywgaXQ8YnIgY2xhc3M9IiI+DQomZ3Q7IHdpbGwg aGF2ZSB0aGUgc2FtZSBpc3N1ZXMsIGJ1dCB5b3UgYWxzbyB3b24ndCBoYXZlIGEgc2VjdXJlIG9w dGlvbiBpZjxiciBjbGFzcz0iIj4NCiZndDsgdGhpcyBpcyBkb25lIHdpdGggdGhlIHNhbWUgc2Vj dXJpdHkgKG9yIGxhY2sgdGhlcmVvZikgYXMgTVBMUy48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8L3NwYW4+SSBhbSBub3Qgc3VyZSBJIGZ1bGx5IHVuZGVyc3RhbmQgdGhlIHNvdXJjZSwg cHJvdmVuYW5jZSwgYW5kIGltcGxpY2F0aW9ucyBvZiB0aGlzIGNvbW1lbnQuIEkgZG8gbm90IHJl Y2FsbCBNUExTIGJlaW5nIGRpc2N1c3NlZCBiZWZvcmUgaW4gdGhlIGNvbnRleHQgb2YgdGhpcyBk b2N1bWVudC48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpSRkMgNzM2NSBkZXNjcmliZXMg dGhlIHVzZSBvZiBib3RoIE1QTFMgYW5kIElQIGluIERhdGEgQ2VudGVyIChEQykgTmV0d29yayBW aXJ0dWFsaXphdGlvbi4gVG9kYXksIHNvbWUgb2YgdGhlc2UgcGFja2V0cyBmbG93IGFscmVhZHkg aW4gZXhpc3RpbmcgRENzLCBhbmQgc2VydmljZSBjaGFpbmluZyBleGlzdHMgaW4gdGhvc2UgRENz LiBJcyB0aGVyZSBzb21lIGFkZGl0aW9uYWwgcmVxdWlyZW1lbnQgZm9yIERDIGRhdGEgcGxhbmVz LCBvciBmb3IgTlZPMywNCiB0aGF0IGlzIG5vdCBjYXB0dXJlZCBlbHNld2hlcmU/PGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KTW9yZSBpbXBvcnRhbnRseTogYSBjb3JvbGxhcnkgb2Ygd2hh dCB5b3UgYXJlIHNheWluZyBpcyB0aGF0LCBwcm92aWRpbmcgYSBzZWN1cml0eSBvcHRpb24gdW5k ZXJuZWF0aCBpbiB0aGUgdHVubmVsaW5nIGFkZHMgdG8gdGhlIG92ZXJhbGwgc2VjdXJpdHkgcG9z dHVyZSwgYW5kIHRoYXQgTVBMUyBpcyBkaWZmZXJlbnQgdGhhbiBJUCBpbiB0aGlzIGNvbnRleHQu IERvZXMgdGhhdCBjYXB0dXJlIHlvdXIgaW50ZW50PzxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0i Ij4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IEJlc3QgcmVnYXJkcyw8YnIgY2xhc3M9IiI+DQom Z3Q7IEthdGhsZWVuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KQmVzdCw8YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQrigJQgQ2FybG9zIFAuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_B97FF12913D247A08E8BE90033961D17ciscocom_-- From nobody Mon Oct 16 10:17:16 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9595E133061 for ; Mon, 16 Oct 2017 10:17:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BehMy78jFvRN for ; Mon, 16 Oct 2017 10:17:13 -0700 (PDT) Received: from mail-qt0-x234.google.com (mail-qt0-x234.google.com [IPv6:2607:f8b0:400d:c0d::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 15E6E13304D for ; Mon, 16 Oct 2017 10:17:13 -0700 (PDT) Received: by mail-qt0-x234.google.com with SMTP id 1so33239388qtn.3 for ; Mon, 16 Oct 2017 10:17:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=+ZT/pngEU1FNC2l2j5VSu8SBiD4TVclviUnkFrFZ3k0=; b=HcXWQp1jYnZEXF5e04oKlj+PJQ+eYhS+CgPkcPuECnWr1rhuEgHbhjZ4f67+E+pzw5 tbURIXTFyaouuJmlJqKFcY7oz6M0uq2VozJ6dRZ1rw8Pss8x5pMOWEAvZrTvNWxlD4ve HOwHZgCEJoWscmMk/SpVduO5IP/OpMkASclL+Jb/Hz53BPxDjxWK4pbkfyc/MZe2hXpN NQ1xMwvUwJg6gJsG+p7jp16PpQVFjM24apQ/V8cj1XDP0ySwE+ay1vhkdGRw6hnrFIlZ 8IrskP1JIBb2itC2BqeAUO4IlBBkIv+l+XEKNPPQo/bGBHqveqG5URroitXO7O7zh2L8 ZEkA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=+ZT/pngEU1FNC2l2j5VSu8SBiD4TVclviUnkFrFZ3k0=; b=t4XOMe9ThJ66HTR2oF537I7BCUiZSFK5lqmQVE6LaEpi3g/NOHd+1DftHmnFpYj5rL GH8wwDqC8GWZYTSzJB0ADMJL1qOf5Mg7ERyMt2+W3qNcrmwil6GH5Q1ddXW5V1JMfwuF BdQsF7idezVtAKGxbmA+m9ZuFFdt9p1X1eXbli7NkOvTlEclALhysReEEWJK1ASKf7BG lloacPR70Aq8K2e/187goVkwYMXnTPTE3JO38BxZRwkwiU7uWztlwN/oLJm4MTPFFyqS 84riHoN7YWXO4eKKFWzbFuB2zj7CbgrqvjDajmjRls/G4PvHoJxDrLqH3adZ4CAJfTST VXNQ== X-Gm-Message-State: AMCzsaXe5CmFrhAUFMDzB5gZRDMGtsQqwbKJGxnIn/m5Wp82usYaAxUM m9k92/8InCNhEdU12Kh+vhCFZ2ammIle4/0rgDNRWQ== X-Google-Smtp-Source: ABhQp+QKT/Tc6/38G5PVneEKhGCEttVzZW5Yo7IObcj3hFXGdy1mzcAov6r5LwGL+9nkXFN9bO91i2osDZERo2qlVXs= X-Received: by 10.129.167.66 with SMTP id e63mr887910ywh.294.1508174232188; Mon, 16 Oct 2017 10:17:12 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Mon, 16 Oct 2017 10:16:31 -0700 (PDT) In-Reply-To: References: <150656766105.13740.10127057899137745873.idtracker@ietfa.amsl.com> From: Eric Rescorla Date: Mon, 16 Oct 2017 10:16:31 -0700 Message-ID: To: "Carlos Pignataro (cpignata)" Cc: Kathleen Moriarty , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" , "sfc-chairs@ietf.org" , The IESG , "sfc@ietf.org" Content-Type: multipart/alternative; boundary="94eb2c0790265e94bc055bad2d28" Archived-At: Subject: Re: [sfc] Eric Rescorla's Discuss on draft-ietf-sfc-nsh-24: (with DISCUSS and COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 17:17:14 -0000 --94eb2c0790265e94bc055bad2d28 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Mon, Oct 16, 2017 at 10:12 AM, Carlos Pignataro (cpignata) < cpignata@cisco.com> wrote: > > On Oct 16, 2017, at 12:27 PM, Eric Rescorla wrote: > > > > On Mon, Oct 16, 2017 at 9:24 AM, Carlos Pignataro (cpignata) < > cpignata@cisco.com> wrote: > >> Many thanks for the continued dialogue, Kathleen!!! >> >> Kathleen, Eric, >> >> Just a heads up that we are almost finished with a proposal for the >> Security Considerations that we are targeting to address the concerns. M= ore >> soon, and while we look forward to your comments on that proposal, in th= e >> mean time: >> >> Eric, we have not heard from you on any of the two messages we sent >> addressed to you. >> > > Yeah, these got back-burnered > > > We understand this DISCUSSion happens through dialogue =E2=80=94 not gues= sing or > mandate. > > because I had understood you were going to make substantive changes to > actually add an integrity feature > > > Sorry if we were not clear. > > We are indeed working on changes, some potentially substantive =E2=80=94 = but > somehow I missed this: can you please point me to the record where there= =E2=80=99s > a decision or discussion to =E2=80=9Cadd an integrity feature=E2=80=9D? > That was my take-home from the telechat where this was discussed, but maybe Alia would like to say what her understanding was. -Ekr > We are working through a more thorough threat analysis and describing the > implications and solutions for each of those cases. > > and I was intending to review the draft at that time. Is your plan not to > do that? > > > We would have liked to have responses to our comments or questions, > discussion via dialogue, to incorporate in the updates and potentially > substantive set of changes. The plan is (now) provide a textual proposal. > > That said, sure: you can review the forthcoming set of changes. > > =E2=80=94 Carlos. > > > -Ekr > > >> Kathleen, one comment and one question inline. >> >> > Kathleen Moriarty wrote: >> > >> > While >> > the expressions EKR includes below are not directly in the draft, this >> > is how we read it, >> >> This statement seems to characterize the review / reviewers, more than >> the document itself. >> >> > If MPLS is used similarly instead, yes, it >> > will have the same issues, but you also won't have a secure option if >> > this is done with the same security (or lack thereof) as MPLS. >> >> I am not sure I fully understand the source, provenance, and implication= s >> of this comment. I do not recall MPLS being discussed before in the cont= ext >> of this document. >> >> RFC 7365 describes the use of both MPLS and IP in Data Center (DC) >> Network Virtualization. Today, some of these packets flow already in >> existing DCs, and service chaining exists in those DCs. Is there some >> additional requirement for DC data planes, or for NVO3, that is not >> captured elsewhere? >> >> More importantly: a corollary of what you are saying is that, providing = a >> security option underneath in the tunneling adds to the overall security >> posture, and that MPLS is different than IP in this context. Does that >> capture your intent? >> >> > >> > Best regards, >> > Kathleen >> >> Best, >> >> =E2=80=94 Carlos P. >> >> > > --94eb2c0790265e94bc055bad2d28 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Mon, Oct 16, 2017 at 10:12 AM, Carlos Pignataro (cpignata) <cpigna= ta@cisco.com> wrote:

On Oct 16, 2017, at 12:27 PM, Eric Rescorla <ekr@rtfm.com> wrote:



On Mon, Oct 16, 2017 at 9:24 AM, Carlos Pignatar= o (cpignata) <cpignata@cisco.com> wrote:
Many thanks for the continued dialogue, Kathleen!!!

Kathleen, Eric,

Just a heads up that we are almost finished with a proposal for the Securit= y Considerations that we are targeting to address the concerns. More soon, = and while we look forward to your comments on that proposal, in the mean ti= me:

Eric, we have not heard from you on any of the two messages we sent address= ed to you.

Yeah, these got back-burnered

We understand this DISCUSSion happens through dialogue =E2=80= =94 not guessing or mandate.

because I had understood you were going to make substantive changes to= actually add an integrity feature

Sorry if we were not clear.

We are indeed working on changes, some potentially substantive =E2=80= =94 but somehow I missed this: can you please point me to the record where = there=E2=80=99s a decision or discussion to =E2=80=9Cadd an integrity featu= re=E2=80=9D?=C2=A0

That w= as my take-home from the telechat where this was discussed, but maybe Alia = would like to say what her understanding was.

-Ekr=


We are working through a more thorough threat analysis and describing = the implications and solutions for each of those cases.=C2=A0

and I was intending to review the draft at that time. Is your plan not= to do that?

We would have liked to have responses to our comments or questi= ons, discussion via dialogue, to incorporate in the updates and potentially= substantive set of changes. The plan is (now) provide a textual proposal.<= /div>

That said, sure: you can review the forthcoming set of changes.
<= span class=3D"HOEnZb">

=E2=80=94 Carlos.

-Ekr


Kathleen, one comment and one question inline.

> Kathleen Moriarty <Kathleen.Moriarty.ietf@gmail.com> wrote:<= br> >
> While
> the expressions EKR includes below are not directly in the draft, this=
> is how we read it,

This statement seems to characterize the review / reviewers, more th= an the document itself.

>=C2=A0 =C2=A0If MPLS is used similarly instead, yes, it
> will have the same issues, but you also won't have a secure option= if
> this is done with the same security (or lack thereof) as MPLS.

I am not sure I fully understand the source, provenance, and implica= tions of this comment. I do not recall MPLS being discussed before in the c= ontext of this document.

RFC 7365 describes the use of both MPLS and IP in Data Center (DC) Network = Virtualization. Today, some of these packets flow already in existing DCs, = and service chaining exists in those DCs. Is there some additional requirem= ent for DC data planes, or for NVO3, that is not captured elsewhere?

More importantly: a corollary of what you are saying is that, providing a s= ecurity option underneath in the tunneling adds to the overall security pos= ture, and that MPLS is different than IP in this context. Does that capture= your intent?

>
> Best regards,
> Kathleen

Best,

=E2=80=94 Carlos P.




--94eb2c0790265e94bc055bad2d28-- From nobody Wed Oct 18 08:33:03 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 530B6132CE7 for ; Wed, 18 Oct 2017 08:33:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.001 X-Spam-Level: X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 72hMq0TKed2P for ; Wed, 18 Oct 2017 08:33:01 -0700 (PDT) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99CE0132153 for ; Wed, 18 Oct 2017 08:33:01 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 7FE1F66010E; Wed, 18 Oct 2017 08:33:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=1.tigertech; t=1508340781; bh=vNrisesn5lzVuegMxOZApgQPfD7LqVNy/1Wfxz2jAtA=; h=To:Cc:From:Subject:Date:From; b=KVGjOUxErn7LwwiPJ2vZ5JDQYxekJX8WFiiEV/FdGKWayrXyeLQrxk+YUb4P3s4r0 W2tDGGFy/x/r1uWr6n+5ZbxB111Lr6O/m114kJS8Gv6mdWT+rc0S12mH7DpZNpuhdp 47AkQz2qD9f26X9motaZnviuPhztiby7Mbytt580= X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from Joels-MacBook-Pro.local (unknown [50.225.209.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 91E7566010C; Wed, 18 Oct 2017 08:33:00 -0700 (PDT) To: "sfc@ietf.org" Cc: Tal Mizrahi , James N Guichard From: "Joel M. Halpern" Message-ID: Date: Wed, 18 Oct 2017 11:32:59 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: [sfc] SFC Meeting work items X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Oct 2017 15:33:02 -0000 While we continue working on getting NSH published, we do have an upcoming IETF meeting where we have a working group session scheduled. Please let us know if you would like agenda time. Please copy Tal on your request so he can help us make sure we track properly. Thank you, Joel From nobody Thu Oct 19 01:49:24 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96C5F1347B5 for ; Thu, 19 Oct 2017 01:49:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.618 X-Spam-Level: X-Spam-Status: No, score=-2.618 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1kqdgbh4bZkn for ; Thu, 19 Oct 2017 01:49:15 -0700 (PDT) Received: from relais-inet.orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C5CD1347CC for ; Thu, 19 Oct 2017 01:49:14 -0700 (PDT) Received: from opfedar05.francetelecom.fr (unknown [xx.xx.xx.7]) by opfedar20.francetelecom.fr (ESMTP service) with ESMTP id E271C120516; Thu, 19 Oct 2017 10:49:12 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.62]) by opfedar05.francetelecom.fr (ESMTP service) with ESMTP id BAD8160062; Thu, 19 Oct 2017 10:49:12 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM5E.corporate.adroot.infra.ftgroup ([fe80::2912:bfa5:91d3:bf63%18]) with mapi id 14.03.0361.001; Thu, 19 Oct 2017 10:49:12 +0200 From: To: "Alia Atlas (akatlas@gmail.com)" CC: "sfc@ietf.org" , Kathleen Moriarty Thread-Topic: NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0w== Date: Thu, 19 Oct 2017 08:49:12 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.6] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93300A056E39OPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Oct 2017 08:49:21 -0000 --_000_787AE7BB302AE849A7480A190F8B93300A056E39OPEXCLILMA3corp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Alia, Can you please share with us the current status of the document and the lis= t of pending blocking points? I went through all public email exchanges, especially the ones related to s= ecurity, but it is not that easy to understand what are the remaining issue= s that need fixes. In particular, is there a concern with assuming the current NSH threat mode= l? 1. NSH is secure against attacks induced by nodes that inject (spoofed) NS= H before entering an SFC-enabled domain. Indeed, SFC ingress nodes MUST dis= card packets carrying NSH. 2. NSH is secure against attacks from within the SFC-enabled domain to inj= ect non-authorized context headers. From a service perspective, the guard i= s the CP which is responsible for instructing the SFC-aware nodes about the= mandatory-to-process and optional-to-process context headers. Furthermore,= whatever the origin of a supplied context header, the last SFF of a chain = (and egress nodes) MUST remove the NSH before forwarding upstream. 3. NSH is secure against leaking privacy information outside an SFC enable= d domain. The last SFF of a chain (and egress nodes) MUST remove the NSH be= fore forwarding upstream. 4. NSH is secure against indefinite SF/SFF loops by means of SI and TTL fi= elds. 5. Control plane specific threats are out of scope, but the document cites= I-D.ietf-sfc-control-plane for the expected behavior when instructing SFC = nodes. BTW, the secdir review of the CP requirements can be retrieved here = (https://datatracker.ietf.org/doc/review-ietf-sfc-control-plane-02-secdir-e= arly-meadows-2015-12-10/). 6. NSH does not share privacy data with non-authorized parties. Indeed, da= ta carried in context headers are derived from the original packet (e.g., s= ource IP address) or are already known to the operator (e.g., subscriber id= entifier, policy identifier, service identifier). The context information i= s shared with nodes that are within the same administrative domain. 7. Like other communication protocols, attacks from within the network are= possible, but those are soften by relying on the procedures put in place b= y operators for testing and validating nodes/features before actual activat= ion. NSH does not provide a built-in feature to prevent misbehaving nodes, = but recommends to rely on the security features provided by the underlying = transport encapsulation schemes. Let's now focus on the typical "attacks" that can be issued from within the= network: 1. A misbehaving node redirect the traffic to non-authorized nodes outside= a domain: This is not NSH-specific. 2. A misbehaving SFC-unware node alters the content of a packet: This is n= ot NSH-specific. 3. A misbehaving SFC-aware node alters the content of NSH: i. It removes the NSH header from all packets it sees: This= will imply that the packets, the misbehaving node intercepts, will be forw= arded upstream without invoking the required SFs (which may be seen as a fe= ature, not a bug if one dislikes "middleboxes" :)). More seriously, the OAM= NSH feature will allow an operator to detect whether NSH packets are trave= lling in accordance with SFC instructions of that domain. Running that feat= ure will help detecting the misbehaving node. ii. It modifies the content of SPI: This will imply that thes= e packets will be forwarded over a wrong path. Again, running OAM NSH will = allow the operator to detect whether a packet is travelling in accordance w= ith SFC instructions. Running that feature regularly will help identifying = the misbehaving node and whether the SFC configuration of a domain is align= ed with the expected behavior. iii. It modifies the content of SI/TTL: This will increase the = authorized maximum SFF/SF hops. Not sure if there is a security problem out= there. iv. The misbehaving node is a classifier: The implications wi= ll be severe from a service standpoint. NSH relies on OAM and control-plane= to detect such case. v. The misbehaving node is an SFF: Examples of misbehaviors= are: strip NSH, forward to a non-authorized SF, redirect the traffic to a = non-authorized nodes, etc. Like for the classifier case, NSH relies on OAM = and control-plane to detect such case. Are there specific attacks that are not listed above and that need more att= ention from the WG? Thank you. Cheers, Med --_000_787AE7BB302AE849A7480A190F8B93300A056E39OPEXCLILMA3corp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Alia,

 

Can you please share with us the current st= atus of the document and the list of pending blocking points?

 

I went through all public email exchanges, = especially the ones related to security, but it is not that easy to underst= and what are the remaining issues that need fixes.

 

In particular, is there a concern with assu= ming the current NSH threat model?

 

1.  NSH is secure against attacks induc= ed by nodes that inject (spoofed) NSH before entering an SFC-enabled domain= . Indeed, SFC ingress nodes MUST discard packets carrying NSH.

2.  NSH is secure against attacks from = within the SFC-enabled domain to inject non-authorized context headers. Fro= m a service perspective, the guard is the CP which is responsible for instructing the SFC-aware nodes about the mandatory-to-= process and optional-to-process context headers. Furthermore, whatever the = origin of a supplied context header, the last SFF of a chain (and egress no= des) MUST remove the NSH before forwarding upstream.

3.  NSH is secure against leaking priva= cy information outside an SFC enabled domain. The last SFF of a chain (and = egress nodes) MUST remove the NSH before forwarding upstream.

4.  NSH is secure against indefinite SF= /SFF loops by means of SI and TTL fields.

5.  Control plane specific threats are = out of scope, but the document cites I-D.ietf-sfc-control-plane for the exp= ected behavior when instructing SFC nodes. BTW, the secdir review of the CP requirements can be retrieved here (https://datatracker.ietf.org/doc/review-ietf-sfc-= control-plane-02-secdir-early-meadows-2015-12-10/).

6.  NSH does not share privacy data wit= h non-authorized parties. Indeed, data carried in context headers are deriv= ed from the original packet (e.g., source IP address) or are already known to the operator (e.g., subscriber identifier, policy = identifier, service identifier). The context information is shared with nod= es that are within the same administrative domain.  =

7.  Like other communication protocols,= attacks from within the network are possible, but those are soften by rely= ing on the procedures put in place by operators for testing and validating nodes/features before actual activation. NSH do= es not provide a built-in feature to prevent misbehaving nodes, but recomme= nds to rely on the security features provided by the underlying transport e= ncapsulation schemes.

 

Let’s now focus on the typical “= ;attacks” that can be issued from within the network:

1.  A misbehaving node redirect the tra= ffic to non-authorized nodes outside a domain: This is not NSH-specific.

2.  A misbehaving SFC-unware node alter= s the content of a packet: This is not NSH-specific.

3.  A misbehaving SFC-aware node alters= the content of NSH:

     &= nbsp;      i.  = ;   It removes the NSH he= ader from all packets it sees: This will imply that the packets, the misbeh= aving node intercepts, will be forwarded upstream without invoking the required = SFs (which may be seen as a feature, not a bug if one dislikes “middl= eboxes” :)). More seriously, the OAM NSH feature will allow an operat= or to detect whether NSH packets are travelling in accordance with SFC instructions of that domain. Running that feature w= ill help detecting the misbehaving node.

     &= nbsp;    ii. &nbs= p;   It modifies the cont= ent of SPI: This will imply that these packets will be forwarded over a wro= ng path. Again, running OAM NSH will allow the operator to detect whether a p= acket is travelling in accordance with SFC instructions. Running that featu= re regularly will help identifying the misbehaving node and whether the SFC= configuration of a domain is aligned with the expected behavior.

     &= nbsp;  iii. &nb= sp;   It modifies the c= ontent of SI/TTL: This will increase the authorized maximum SFF/SF hops. No= t sure if there is a security problem out there.

     &= nbsp;    iv. &nbs= p;   The misbehaving node= is a classifier: The implications will be severe from a service standpoint= . NSH relies on OAM and control-plane to detect such case.   

     &= nbsp;      v.  = ;   The misbehaving node = is an SFF: Examples of misbehaviors are: strip NSH, forward to a non-author= ized SF, redirect the traffic to a non-authorized nodes, etc. Like for the clas= sifier case, NSH relies on OAM and control-plane to detect such case.  = ;     

 

Are there specific attacks that are not lis= ted above and that need more attention from the WG?

 

Thank you.

 

Cheers,

Med

--_000_787AE7BB302AE849A7480A190F8B93300A056E39OPEXCLILMA3corp_-- From nobody Thu Oct 19 10:41:50 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 739841329B5 for ; Thu, 19 Oct 2017 10:41:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.52 X-Spam-Level: X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AZ2LS1IOl91P for ; Thu, 19 Oct 2017 10:41:46 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 032C1132031 for ; Thu, 19 Oct 2017 10:41:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=38920; q=dns/txt; s=iport; t=1508434906; x=1509644506; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=x60fE5VEa9+wSDu3rXorKn7WqKtZ3bZnR4yzhyptayI=; b=kGNWxAyv/s3sqhSNTbLAOrOpRZJya6uATPST37x/5hcx/2hTkKd5Ev/d VH+MVml5s/LcqNpgq1yRkjkNRsizbeCtqMtIaxpMFAghwrn2N5qSbRX7N bGnN66tgYA8afE9r0MyZloGXCK2f2gTG8A1+Ulpk0HuUBfZMJ8j1cxkPZ M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AUAQCe4uhZ/4gNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9wZG4nB4Nzih+PPoFUllkQggEDChgBDIUWAhqEcT8YAQIBAQE?= =?us-ascii?q?BAQEBax0LhR4CBAEBIUQHCxACAQg4AQYDAgICJQsUEQEBBA4FiTxkEKsYgieLI?= =?us-ascii?q?AEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgy+CB4FRgWorC4J4hEkJARIBgzMvgjI?= =?us-ascii?q?Fh0qCPBuOSIhqAodfh0WFSYIUhXaLD5VHAhEZAYE4AR84gQNYehVJLQGCNoRfd?= =?us-ascii?q?ogkDRgHgQWBEQEBAQ?= X-IronPort-AV: E=Sophos; i="5.43,402,1503360000"; d="scan'208,217"; a="19313174" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 19 Oct 2017 17:41:45 +0000 Received: from XCH-ALN-008.cisco.com (xch-aln-008.cisco.com [173.36.7.18]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id v9JHfiB2002832 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 19 Oct 2017 17:41:44 GMT Received: from xch-rcd-008.cisco.com (173.37.102.18) by XCH-ALN-008.cisco.com (173.36.7.18) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Thu, 19 Oct 2017 12:41:44 -0500 Received: from xch-rcd-008.cisco.com ([173.37.102.18]) by XCH-RCD-008.cisco.com ([173.37.102.18]) with mapi id 15.00.1320.000; Thu, 19 Oct 2017 12:41:44 -0500 From: "Paul Quinn (paulq)" To: "mohamed.boucadair@orange.com" CC: "Alia Atlas (akatlas@gmail.com)" , Kathleen Moriarty , "sfc@ietf.org" Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wAdE8SA Date: Thu, 19 Oct 2017 17:41:44 +0000 Message-ID: <4CCD3B8A-8FE2-4579-B94A-F5611A38FB01@cisco.com> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.131.118.64] Content-Type: multipart/alternative; boundary="_000_4CCD3B8A8FE24579B94AF5611A38FB01ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Oct 2017 17:41:49 -0000 --_000_4CCD3B8A8FE24579B94AF5611A38FB01ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TWVkLA0KDQpJIHdob2xlaGVhcnRlZGx5IGFncmVlIHdpdGggeW91ciBhbmFseXNpcywgdGhhbmtz IGZvciBzZW5kaW5nIHRoaXMgb3V0LiAgSeKAmWQgYWxzbyBhZGQgdGhhdCBtdWNoIG9mIHRoaXMg aXMgYWxzbyBhcHBsaWNhYmxlIHRvIGV4aXN0aW5nIGFuZCBmb3J0aGNvbWluZyBuZXR3b3JrLWNl bnRyaWMgcHJvdG9jb2xzIChvZiBjb3Vyc2Ugd2l0aCBkb21haW4gc3BlY2lmaWMgdGVybWlub2xv Z3kgc3Vic3RpdHV0ZWQgYXMgbmVlZGVkKS4NCg0KUGF1bA0KDQoNCk9uIE9jdCAxOSwgMjAxNywg YXQgNDo0OSBBTSwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5i b3VjYWRhaXJAb3JhbmdlLmNvbT4gd3JvdGU6DQoNCkhpIEFsaWEsDQoNCkNhbiB5b3UgcGxlYXNl IHNoYXJlIHdpdGggdXMgdGhlIGN1cnJlbnQgc3RhdHVzIG9mIHRoZSBkb2N1bWVudCBhbmQgdGhl IGxpc3Qgb2YgcGVuZGluZyBibG9ja2luZyBwb2ludHM/DQoNCkkgd2VudCB0aHJvdWdoIGFsbCBw dWJsaWMgZW1haWwgZXhjaGFuZ2VzLCBlc3BlY2lhbGx5IHRoZSBvbmVzIHJlbGF0ZWQgdG8gc2Vj dXJpdHksIGJ1dCBpdCBpcyBub3QgdGhhdCBlYXN5IHRvIHVuZGVyc3RhbmQgd2hhdCBhcmUgdGhl IHJlbWFpbmluZyBpc3N1ZXMgdGhhdCBuZWVkIGZpeGVzLg0KDQpJbiBwYXJ0aWN1bGFyLCBpcyB0 aGVyZSBhIGNvbmNlcm4gd2l0aCBhc3N1bWluZyB0aGUgY3VycmVudCBOU0ggdGhyZWF0IG1vZGVs Pw0KDQoxLiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGF0dGFja3MgaW5kdWNlZCBieSBub2RlcyB0 aGF0IGluamVjdCAoc3Bvb2ZlZCkgTlNIIGJlZm9yZSBlbnRlcmluZyBhbiBTRkMtZW5hYmxlZCBk b21haW4uIEluZGVlZCwgU0ZDIGluZ3Jlc3Mgbm9kZXMgTVVTVCBkaXNjYXJkIHBhY2tldHMgY2Fy cnlpbmcgTlNILg0KMi4gIE5TSCBpcyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGZyb20gd2l0aGlu IHRoZSBTRkMtZW5hYmxlZCBkb21haW4gdG8gaW5qZWN0IG5vbi1hdXRob3JpemVkIGNvbnRleHQg aGVhZGVycy4gRnJvbSBhIHNlcnZpY2UgcGVyc3BlY3RpdmUsIHRoZSBndWFyZCBpcyB0aGUgQ1Ag d2hpY2ggaXMgcmVzcG9uc2libGUgZm9yIGluc3RydWN0aW5nIHRoZSBTRkMtYXdhcmUgbm9kZXMg YWJvdXQgdGhlIG1hbmRhdG9yeS10by1wcm9jZXNzIGFuZCBvcHRpb25hbC10by1wcm9jZXNzIGNv bnRleHQgaGVhZGVycy4gRnVydGhlcm1vcmUsIHdoYXRldmVyIHRoZSBvcmlnaW4gb2YgYSBzdXBw bGllZCBjb250ZXh0IGhlYWRlciwgdGhlIGxhc3QgU0ZGIG9mIGEgY2hhaW4gKGFuZCBlZ3Jlc3Mg bm9kZXMpIE1VU1QgcmVtb3ZlIHRoZSBOU0ggYmVmb3JlIGZvcndhcmRpbmcgdXBzdHJlYW0uDQoz LiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGxlYWtpbmcgcHJpdmFjeSBpbmZvcm1hdGlvbiBvdXRz aWRlIGFuIFNGQyBlbmFibGVkIGRvbWFpbi4gVGhlIGxhc3QgU0ZGIG9mIGEgY2hhaW4gKGFuZCBl Z3Jlc3Mgbm9kZXMpIE1VU1QgcmVtb3ZlIHRoZSBOU0ggYmVmb3JlIGZvcndhcmRpbmcgdXBzdHJl YW0uDQo0LiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGluZGVmaW5pdGUgU0YvU0ZGIGxvb3BzIGJ5 IG1lYW5zIG9mIFNJIGFuZCBUVEwgZmllbGRzLg0KNS4gIENvbnRyb2wgcGxhbmUgc3BlY2lmaWMg dGhyZWF0cyBhcmUgb3V0IG9mIHNjb3BlLCBidXQgdGhlIGRvY3VtZW50IGNpdGVzIEktRC5pZXRm LXNmYy1jb250cm9sLXBsYW5lIGZvciB0aGUgZXhwZWN0ZWQgYmVoYXZpb3Igd2hlbiBpbnN0cnVj dGluZyBTRkMgbm9kZXMuIEJUVywgdGhlIHNlY2RpciByZXZpZXcgb2YgdGhlIENQIHJlcXVpcmVt ZW50cyBjYW4gYmUgcmV0cmlldmVkIGhlcmUgKGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL3Jldmlldy1pZXRmLXNmYy1jb250cm9sLXBsYW5lLTAyLXNlY2Rpci1lYXJseS1tZWFkb3dz LTIwMTUtMTItMTAvKS4NCjYuICBOU0ggZG9lcyBub3Qgc2hhcmUgcHJpdmFjeSBkYXRhIHdpdGgg bm9uLWF1dGhvcml6ZWQgcGFydGllcy4gSW5kZWVkLCBkYXRhIGNhcnJpZWQgaW4gY29udGV4dCBo ZWFkZXJzIGFyZSBkZXJpdmVkIGZyb20gdGhlIG9yaWdpbmFsIHBhY2tldCAoZS5nLiwgc291cmNl IElQIGFkZHJlc3MpIG9yIGFyZSBhbHJlYWR5IGtub3duIHRvIHRoZSBvcGVyYXRvciAoZS5nLiwg c3Vic2NyaWJlciBpZGVudGlmaWVyLCBwb2xpY3kgaWRlbnRpZmllciwgc2VydmljZSBpZGVudGlm aWVyKS4gVGhlIGNvbnRleHQgaW5mb3JtYXRpb24gaXMgc2hhcmVkIHdpdGggbm9kZXMgdGhhdCBh cmUgd2l0aGluIHRoZSBzYW1lIGFkbWluaXN0cmF0aXZlIGRvbWFpbi4NCjcuICBMaWtlIG90aGVy IGNvbW11bmljYXRpb24gcHJvdG9jb2xzLCBhdHRhY2tzIGZyb20gd2l0aGluIHRoZSBuZXR3b3Jr IGFyZSBwb3NzaWJsZSwgYnV0IHRob3NlIGFyZSBzb2Z0ZW4gYnkgcmVseWluZyBvbiB0aGUgcHJv Y2VkdXJlcyBwdXQgaW4gcGxhY2UgYnkgb3BlcmF0b3JzIGZvciB0ZXN0aW5nIGFuZCB2YWxpZGF0 aW5nIG5vZGVzL2ZlYXR1cmVzIGJlZm9yZSBhY3R1YWwgYWN0aXZhdGlvbi4gTlNIIGRvZXMgbm90 IHByb3ZpZGUgYSBidWlsdC1pbiBmZWF0dXJlIHRvIHByZXZlbnQgbWlzYmVoYXZpbmcgbm9kZXMs IGJ1dCByZWNvbW1lbmRzIHRvIHJlbHkgb24gdGhlIHNlY3VyaXR5IGZlYXR1cmVzIHByb3ZpZGVk IGJ5IHRoZSB1bmRlcmx5aW5nIHRyYW5zcG9ydCBlbmNhcHN1bGF0aW9uIHNjaGVtZXMuDQoNCkxl dOKAmXMgbm93IGZvY3VzIG9uIHRoZSB0eXBpY2FsIOKAnGF0dGFja3PigJ0gdGhhdCBjYW4gYmUg aXNzdWVkIGZyb20gd2l0aGluIHRoZSBuZXR3b3JrOg0KMS4gIEEgbWlzYmVoYXZpbmcgbm9kZSBy ZWRpcmVjdCB0aGUgdHJhZmZpYyB0byBub24tYXV0aG9yaXplZCBub2RlcyBvdXRzaWRlIGEgZG9t YWluOiBUaGlzIGlzIG5vdCBOU0gtc3BlY2lmaWMuDQoyLiAgQSBtaXNiZWhhdmluZyBTRkMtdW53 YXJlIG5vZGUgYWx0ZXJzIHRoZSBjb250ZW50IG9mIGEgcGFja2V0OiBUaGlzIGlzIG5vdCBOU0gt c3BlY2lmaWMuDQozLiAgQSBtaXNiZWhhdmluZyBTRkMtYXdhcmUgbm9kZSBhbHRlcnMgdGhlIGNv bnRlbnQgb2YgTlNIOg0KICAgICAgICAgICAgaS4gICAgIEl0IHJlbW92ZXMgdGhlIE5TSCBoZWFk ZXIgZnJvbSBhbGwgcGFja2V0cyBpdCBzZWVzOiBUaGlzIHdpbGwgaW1wbHkgdGhhdCB0aGUgcGFj a2V0cywgdGhlIG1pc2JlaGF2aW5nIG5vZGUgaW50ZXJjZXB0cywgd2lsbCBiZSBmb3J3YXJkZWQg dXBzdHJlYW0gd2l0aG91dCBpbnZva2luZyB0aGUgcmVxdWlyZWQgU0ZzICh3aGljaCBtYXkgYmUg c2VlbiBhcyBhIGZlYXR1cmUsIG5vdCBhIGJ1ZyBpZiBvbmUgZGlzbGlrZXMg4oCcbWlkZGxlYm94 ZXPigJ0gOikpLiBNb3JlIHNlcmlvdXNseSwgdGhlIE9BTSBOU0ggZmVhdHVyZSB3aWxsIGFsbG93 IGFuIG9wZXJhdG9yIHRvIGRldGVjdCB3aGV0aGVyIE5TSCBwYWNrZXRzIGFyZSB0cmF2ZWxsaW5n IGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5zdHJ1Y3Rpb25zIG9mIHRoYXQgZG9tYWluLiBSdW5u aW5nIHRoYXQgZmVhdHVyZSB3aWxsIGhlbHAgZGV0ZWN0aW5nIHRoZSBtaXNiZWhhdmluZyBub2Rl Lg0KICAgICAgICAgIGlpLiAgICAgSXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQgb2YgU1BJOiBUaGlz IHdpbGwgaW1wbHkgdGhhdCB0aGVzZSBwYWNrZXRzIHdpbGwgYmUgZm9yd2FyZGVkIG92ZXIgYSB3 cm9uZyBwYXRoLiBBZ2FpbiwgcnVubmluZyBPQU0gTlNIIHdpbGwgYWxsb3cgdGhlIG9wZXJhdG9y IHRvIGRldGVjdCB3aGV0aGVyIGEgcGFja2V0IGlzIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3 aXRoIFNGQyBpbnN0cnVjdGlvbnMuIFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHJlZ3VsYXJseSB3aWxs IGhlbHAgaWRlbnRpZnlpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUgYW5kIHdoZXRoZXIgdGhlIFNG QyBjb25maWd1cmF0aW9uIG9mIGEgZG9tYWluIGlzIGFsaWduZWQgd2l0aCB0aGUgZXhwZWN0ZWQg YmVoYXZpb3IuDQogICAgICAgIGlpaS4gICAgIEl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNJ L1RUTDogVGhpcyB3aWxsIGluY3JlYXNlIHRoZSBhdXRob3JpemVkIG1heGltdW0gU0ZGL1NGIGhv cHMuIE5vdCBzdXJlIGlmIHRoZXJlIGlzIGEgc2VjdXJpdHkgcHJvYmxlbSBvdXQgdGhlcmUuDQog ICAgICAgICAgaXYuICAgICBUaGUgbWlzYmVoYXZpbmcgbm9kZSBpcyBhIGNsYXNzaWZpZXI6IFRo ZSBpbXBsaWNhdGlvbnMgd2lsbCBiZSBzZXZlcmUgZnJvbSBhIHNlcnZpY2Ugc3RhbmRwb2ludC4g TlNIIHJlbGllcyBvbiBPQU0gYW5kIGNvbnRyb2wtcGxhbmUgdG8gZGV0ZWN0IHN1Y2ggY2FzZS4N CiAgICAgICAgICAgIHYuICAgICBUaGUgbWlzYmVoYXZpbmcgbm9kZSBpcyBhbiBTRkY6IEV4YW1w bGVzIG9mIG1pc2JlaGF2aW9ycyBhcmU6IHN0cmlwIE5TSCwgZm9yd2FyZCB0byBhIG5vbi1hdXRo b3JpemVkIFNGLCByZWRpcmVjdCB0aGUgdHJhZmZpYyB0byBhIG5vbi1hdXRob3JpemVkIG5vZGVz LCBldGMuIExpa2UgZm9yIHRoZSBjbGFzc2lmaWVyIGNhc2UsIE5TSCByZWxpZXMgb24gT0FNIGFu ZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNoIGNhc2UuDQoNCkFyZSB0aGVyZSBzcGVjaWZp YyBhdHRhY2tzIHRoYXQgYXJlIG5vdCBsaXN0ZWQgYWJvdmUgYW5kIHRoYXQgbmVlZCBtb3JlIGF0 dGVudGlvbiBmcm9tIHRoZSBXRz8NCg0KVGhhbmsgeW91Lg0KDQpDaGVlcnMsDQpNZWQNCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpzZmMgbWFpbGluZyBs aXN0DQpzZmNAaWV0Zi5vcmc8bWFpbHRvOnNmY0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vc2ZjDQoNCg== --_000_4CCD3B8A8FE24579B94AF5611A38FB01ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9IndvcmQtd3JhcDogYnJlYWst d29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1z cGFjZTsiIGNsYXNzPSIiPg0KTWVkLA0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+SSB3aG9sZWhlYXJ0ZWRseSBhZ3JlZSB3aXRoIHlvdXIgYW5hbHlz aXMsIHRoYW5rcyBmb3Igc2VuZGluZyB0aGlzIG91dC4gJm5ic3A7SeKAmWQgYWxzbyBhZGQgdGhh dCBtdWNoIG9mIHRoaXMgaXMgYWxzbyBhcHBsaWNhYmxlIHRvIGV4aXN0aW5nIGFuZCBmb3J0aGNv bWluZyBuZXR3b3JrLWNlbnRyaWMgcHJvdG9jb2xzIChvZiBjb3Vyc2Ugd2l0aCBkb21haW4gc3Bl Y2lmaWMgdGVybWlub2xvZ3kgc3Vic3RpdHV0ZWQgYXMgbmVlZGVkKS48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlBhdWw8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gT2N0IDE5 LCAyMDE3LCBhdCA0OjQ5IEFNLCA8YSBocmVmPSJtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3Jh bmdlLmNvbSIgY2xhc3M9IiI+DQptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPiB3cm90 ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIiBzdHlsZT0icGFnZTogV29yZFNlY3Rp b24xOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEw cHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPkhpIEFs aWEsPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46 IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmks IHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZv bnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9 IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNt IDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNl cmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBw dDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+Q2FuIHlv dSBwbGVhc2Ugc2hhcmUgd2l0aCB1cyB0aGUgY3VycmVudCBzdGF0dXMgb2YgdGhlIGRvY3VtZW50 IGFuZCB0aGUgbGlzdCBvZiBwZW5kaW5nIGJsb2NraW5nIHBvaW50cz88bzpwIGNsYXNzPSIiPjwv bzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsg Zm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNz PSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFt aWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAw MXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIg Y2xhc3M9IiI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9u dC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+SSB3ZW50IHRocm91 Z2ggYWxsIHB1YmxpYyBlbWFpbCBleGNoYW5nZXMsIGVzcGVjaWFsbHkgdGhlIG9uZXMgcmVsYXRl ZCB0byBzZWN1cml0eSwgYnV0IGl0IGlzIG5vdCB0aGF0IGVhc3kgdG8gdW5kZXJzdGFuZCB3aGF0 IGFyZSB0aGUgcmVtYWluaW5nIGlzc3VlcyB0aGF0IG5lZWQgZml4ZXMuPG86cCBjbGFzcz0iIj48 L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFz cz0iIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZh bWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPiZu YnNwOzwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAw MDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsi IGNsYXNzPSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZv bnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPkluIHBhcnRpY3Vs YXIsIGlzIHRoZXJlIGEgY29uY2VybiB3aXRoIGFzc3VtaW5nIHRoZSBjdXJyZW50IE5TSCB0aHJl YXQgbW9kZWw/PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBj bGFzcz0iIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdCAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVudDogLTE4cHQ7IiBjbGFzcz0i Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWls eTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj4xLjxz cGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdw dDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OzsiIGNsYXNzPSIiPiZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7OyIgY2xhc3M9IiI+TlNIDQogaXMgc2VjdXJlIGFnYWluc3QgYXR0YWNrcyBpbmR1Y2VkIGJ5 IG5vZGVzIHRoYXQgaW5qZWN0IChzcG9vZmVkKSBOU0ggYmVmb3JlIGVudGVyaW5nIGFuIFNGQy1l bmFibGVkIGRvbWFpbi4gSW5kZWVkLCBTRkMgaW5ncmVzcyBub2RlcyBNVVNUIGRpc2NhcmQgcGFj a2V0cyBjYXJyeWluZyBOU0guPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQgMzZwdDsgZm9udC1zaXplOiAxMXB0OyBm b250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgdGV4dC1pbmRlbnQ6IC0xOHB0OyIgY2xh c3M9IiI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1m YW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+ Mi48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsgZm9udC1zaXpl OiA3cHQ7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDs7IiBjbGFzcz0iIj4mbmJzcDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5l dyZxdW90OzsiIGNsYXNzPSIiPk5TSA0KIGlzIHNlY3VyZSBhZ2FpbnN0IGF0dGFja3MgZnJvbSB3 aXRoaW4gdGhlIFNGQy1lbmFibGVkIGRvbWFpbiB0byBpbmplY3Qgbm9uLWF1dGhvcml6ZWQgY29u dGV4dCBoZWFkZXJzLiBGcm9tIGEgc2VydmljZSBwZXJzcGVjdGl2ZSwgdGhlIGd1YXJkIGlzIHRo ZSBDUCB3aGljaCBpcyByZXNwb25zaWJsZSBmb3IgaW5zdHJ1Y3RpbmcgdGhlIFNGQy1hd2FyZSBu b2RlcyBhYm91dCB0aGUgbWFuZGF0b3J5LXRvLXByb2Nlc3MgYW5kIG9wdGlvbmFsLXRvLXByb2Nl c3MNCiBjb250ZXh0IGhlYWRlcnMuIEZ1cnRoZXJtb3JlLCB3aGF0ZXZlciB0aGUgb3JpZ2luIG9m IGEgc3VwcGxpZWQgY29udGV4dCBoZWFkZXIsIHRoZSBsYXN0IFNGRiBvZiBhIGNoYWluIChhbmQg ZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNIIGJlZm9yZSBmb3J3YXJkaW5nIHVwc3Ry ZWFtLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2lu OiAwY20gMGNtIDAuMDAwMXB0IDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IHRleHQtaW5kZW50OiAtMThwdDsiIGNsYXNzPSIiPg0KPHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtD b3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjMuPHNwYW4gc3R5bGU9 ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhl aWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7OyIg Y2xhc3M9IiI+Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFz cz0iIj5OU0gNCiBpcyBzZWN1cmUgYWdhaW5zdCBsZWFraW5nIHByaXZhY3kgaW5mb3JtYXRpb24g b3V0c2lkZSBhbiBTRkMgZW5hYmxlZCBkb21haW4uIFRoZSBsYXN0IFNGRiBvZiBhIGNoYWluIChh bmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNIIGJlZm9yZSBmb3J3YXJkaW5nIHVw c3RyZWFtLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwY20gMGNtIDAuMDAwMXB0IDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IHRleHQtaW5kZW50OiAtMThwdDsiIGNsYXNzPSIiPg0KPHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAmcXVv dDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjQuPHNwYW4gc3R5 bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5l LWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 OyIgY2xhc3M9IiI+Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBj bGFzcz0iIj5OU0gNCiBpcyBzZWN1cmUgYWdhaW5zdCBpbmRlZmluaXRlIFNGL1NGRiBsb29wcyBi eSBtZWFucyBvZiBTSSBhbmQgVFRMIGZpZWxkcy48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48 L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdCAzNnB0OyBmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVudDog LTE4cHQ7IiBjbGFzcz0iIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAx MHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj48c3Bh biBjbGFzcz0iIj41LjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFs OyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICZxdW90 O1RpbWVzIE5ldyBSb21hbiZxdW90OzsiIGNsYXNzPSIiPiZuYnNwOzxzcGFuIGNsYXNzPSJBcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+Q29udHJvbA0KIHBsYW5lIHNwZWNpZmljIHRo cmVhdHMgYXJlIG91dCBvZiBzY29wZSwgYnV0IHRoZSBkb2N1bWVudCBjaXRlcyBJLUQuaWV0Zi1z ZmMtY29udHJvbC1wbGFuZSBmb3IgdGhlIGV4cGVjdGVkIGJlaGF2aW9yIHdoZW4gaW5zdHJ1Y3Rp bmcgU0ZDIG5vZGVzLiBCVFcsIHRoZSBzZWNkaXIgcmV2aWV3IG9mIHRoZSBDUCByZXF1aXJlbWVu dHMgY2FuIGJlIHJldHJpZXZlZCBoZXJlICg8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9yZXZpZXctaWV0Zi1zZmMtY29udHJvbC1wbGFuZS0wMi1zZWNkaXItZWFybHkt bWVhZG93cy0yMDE1LTEyLTEwLyIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlv bjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mv cmV2aWV3LWlldGYtc2ZjLWNvbnRyb2wtcGxhbmUtMDItc2VjZGlyLWVhcmx5LW1lYWRvd3MtMjAx NS0xMi0xMC88L2E+KS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdCAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVudDogLTE4cHQ7IiBjbGFzcz0i Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWls eTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj42Ljxz cGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdw dDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OzsiIGNsYXNzPSIiPiZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7OyIgY2xhc3M9IiI+TlNIDQogZG9lcyBub3Qgc2hhcmUgcHJpdmFjeSBkYXRhIHdpdGggbm9u LWF1dGhvcml6ZWQgcGFydGllcy4gSW5kZWVkLCBkYXRhIGNhcnJpZWQgaW4gY29udGV4dCBoZWFk ZXJzIGFyZSBkZXJpdmVkIGZyb20gdGhlIG9yaWdpbmFsIHBhY2tldCAoZS5nLiwgc291cmNlIElQ IGFkZHJlc3MpIG9yIGFyZSBhbHJlYWR5IGtub3duIHRvIHRoZSBvcGVyYXRvciAoZS5nLiwgc3Vi c2NyaWJlciBpZGVudGlmaWVyLCBwb2xpY3kgaWRlbnRpZmllciwgc2VydmljZSBpZGVudGlmaWVy KS4NCiBUaGUgY29udGV4dCBpbmZvcm1hdGlvbiBpcyBzaGFyZWQgd2l0aCBub2RlcyB0aGF0IGFy ZSB3aXRoaW4gdGhlIHNhbWUgYWRtaW5pc3RyYXRpdmUgZG9tYWluLiAmbmJzcDs8bzpwIGNsYXNz PSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAw MDFwdCAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNl cmlmOyB0ZXh0LWluZGVudDogLTE4cHQ7IiBjbGFzcz0iIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVv dDs7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj43LjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZv bnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsg Zm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OzsiIGNsYXNzPSIiPiZuYnNw OzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+ PC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsg Zm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+TGlrZQ0KIG90 aGVyIGNvbW11bmljYXRpb24gcHJvdG9jb2xzLCBhdHRhY2tzIGZyb20gd2l0aGluIHRoZSBuZXR3 b3JrIGFyZSBwb3NzaWJsZSwgYnV0IHRob3NlIGFyZSBzb2Z0ZW4gYnkgcmVseWluZyBvbiB0aGUg cHJvY2VkdXJlcyBwdXQgaW4gcGxhY2UgYnkgb3BlcmF0b3JzIGZvciB0ZXN0aW5nIGFuZCB2YWxp ZGF0aW5nIG5vZGVzL2ZlYXR1cmVzIGJlZm9yZSBhY3R1YWwgYWN0aXZhdGlvbi4gTlNIIGRvZXMg bm90IHByb3ZpZGUgYSBidWlsdC1pbiBmZWF0dXJlDQogdG8gcHJldmVudCBtaXNiZWhhdmluZyBu b2RlcywgYnV0IHJlY29tbWVuZHMgdG8gcmVseSBvbiB0aGUgc2VjdXJpdHkgZmVhdHVyZXMgcHJv dmlkZWQgYnkgdGhlIHVuZGVybHlpbmcgdHJhbnNwb3J0IGVuY2Fwc3VsYXRpb24gc2NoZW1lcy48 bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNt IDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 IDEwcHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPjxv OnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2lu OiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9 IiI+TGV04oCZcyBub3cgZm9jdXMgb24gdGhlIHR5cGljYWwg4oCcYXR0YWNrc+KAnSB0aGF0IGNh biBiZSBpc3N1ZWQgZnJvbSB3aXRoaW4gdGhlIG5ldHdvcms6PG86cCBjbGFzcz0iIj48L286cD48 L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQgMzZwdDsg Zm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgdGV4dC1p bmRlbnQ6IC0xOHB0OyIgY2xhc3M9IiI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9 IiI+PHNwYW4gY2xhc3M9IiI+MS48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXN0cmV0Y2g6 IG5vcm1hbDsgZm9udC1zaXplOiA3cHQ7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5 OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDs7IiBjbGFzcz0iIj4mbmJzcDs8c3BhbiBjbGFz cz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3Nw YW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5 OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPkENCiBtaXNiZWhhdmluZyBub2Rl IHJlZGlyZWN0IHRoZSB0cmFmZmljIHRvIG5vbi1hdXRob3JpemVkIG5vZGVzIG91dHNpZGUgYSBk b21haW46IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bh bj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdCAzNnB0OyBmb250 LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVu dDogLTE4cHQ7IiBjbGFzcz0iIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj48 c3BhbiBjbGFzcz0iIj4yLjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9y bWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OzsiIGNsYXNzPSIiPiZuYnNwOzxzcGFuIGNsYXNzPSJB cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+QQ0KIG1pc2JlaGF2aW5nIFNGQy11bndh cmUgbm9kZSBhbHRlcnMgdGhlIGNvbnRlbnQgb2YgYSBwYWNrZXQ6IFRoaXMgaXMgbm90IE5TSC1z cGVjaWZpYy48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGNtIDBjbSAwLjAwMDFwdCAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5 OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVudDogLTE4cHQ7IiBjbGFzcz0iIj4NCjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj4zLjxzcGFuIHN0 eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGlu ZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OzsiIGNsYXNzPSIiPiZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIg Y2xhc3M9IiI+QQ0KIG1pc2JlaGF2aW5nIFNGQy1hd2FyZSBub2RlIGFsdGVycyB0aGUgY29udGVu dCBvZiBOU0g6PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBjbSAwY20gMC4wMDAxcHQgNzJwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWls eTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgdGV4dC1pbmRlbnQ6IC03MnB0OyIgY2xhc3M9IiI+DQo8 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+PHNwYW4gc3R5 bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5l LWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjwvc3Bhbj5pLjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRj aDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1p bHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OzsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+ SXQNCiByZW1vdmVzIHRoZSBOU0ggaGVhZGVyIGZyb20gYWxsIHBhY2tldHMgaXQgc2VlczogVGhp cyB3aWxsIGltcGx5IHRoYXQgdGhlIHBhY2tldHMsIHRoZSBtaXNiZWhhdmluZyBub2RlIGludGVy Y2VwdHMsIHdpbGwgYmUgZm9yd2FyZGVkIHVwc3RyZWFtIHdpdGhvdXQgaW52b2tpbmcgdGhlIHJl cXVpcmVkIFNGcyAod2hpY2ggbWF5IGJlIHNlZW4gYXMgYSBmZWF0dXJlLCBub3QgYSBidWcgaWYg b25lIGRpc2xpa2VzIOKAnG1pZGRsZWJveGVz4oCdIDopKS4gTW9yZQ0KIHNlcmlvdXNseSwgdGhl IE9BTSBOU0ggZmVhdHVyZSB3aWxsIGFsbG93IGFuIG9wZXJhdG9yIHRvIGRldGVjdCB3aGV0aGVy IE5TSCBwYWNrZXRzIGFyZSB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5zdHJ1 Y3Rpb25zIG9mIHRoYXQgZG9tYWluLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSB3aWxsIGhlbHAgZGV0 ZWN0aW5nIHRoZSBtaXNiZWhhdmluZyBub2RlLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwv ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0IDcycHQ7IGZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IHRleHQtaW5kZW50OiAt NzJwdDsiIGNsYXNzPSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEw cHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPjxzcGFu IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBm b250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OzsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+aWkuPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9u dC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBm b250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7OyIgY2xhc3M9IiI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBj bGFzcz0iIj5JdA0KIG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNQSTogVGhpcyB3aWxsIGltcGx5 IHRoYXQgdGhlc2UgcGFja2V0cyB3aWxsIGJlIGZvcndhcmRlZCBvdmVyIGEgd3JvbmcgcGF0aC4g QWdhaW4sIHJ1bm5pbmcgT0FNIE5TSCB3aWxsIGFsbG93IHRoZSBvcGVyYXRvciB0byBkZXRlY3Qg d2hldGhlciBhIHBhY2tldCBpcyB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5z dHJ1Y3Rpb25zLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSByZWd1bGFybHkNCiB3aWxsIGhlbHAgaWRl bnRpZnlpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUgYW5kIHdoZXRoZXIgdGhlIFNGQyBjb25maWd1 cmF0aW9uIG9mIGEgZG9tYWluIGlzIGFsaWduZWQgd2l0aCB0aGUgZXhwZWN0ZWQgYmVoYXZpb3Iu PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBj bSAwY20gMC4wMDAxcHQgNzJwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJy aSwgc2Fucy1zZXJpZjsgdGV4dC1pbmRlbnQ6IC03MnB0OyIgY2xhc3M9IiI+DQo8c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDog bm9ybWFsOyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7OyIgY2xhc3M9 IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9 IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj5paWkuPHNwYW4gc3R5 bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5l LWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj5JdA0KIG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNJ L1RUTDogVGhpcyB3aWxsIGluY3JlYXNlIHRoZSBhdXRob3JpemVkIG1heGltdW0gU0ZGL1NGIGhv cHMuIE5vdCBzdXJlIGlmIHRoZXJlIGlzIGEgc2VjdXJpdHkgcHJvYmxlbSBvdXQgdGhlcmUuPHNw YW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAw MXB0IDcycHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IHRleHQtaW5kZW50OiAtNzJwdDsiIGNsYXNzPSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90 OzsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQt c3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9u dC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OzsiIGNsYXNzPSIiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNz PSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+aXYuPHNwYW4gc3R5 bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5l LWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj5UaGUNCiBtaXNiZWhhdmluZyBub2RlIGlzIGEgY2xh c3NpZmllcjogVGhlIGltcGxpY2F0aW9ucyB3aWxsIGJlIHNldmVyZSBmcm9tIGEgc2VydmljZSBz dGFuZHBvaW50LiBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0byBkZXRlY3Qg c3VjaCBjYXNlLiAmbmJzcDsmbmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4N CjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdCA3MnB0OyBmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVudDogLTcycHQ7 IiBjbGFzcz0iIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBm b250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj48c3BhbiBjbGFz cz0iIj48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsgZm9udC1z aXplOiA3cHQ7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDs7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iQXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPnYuPHNwYW4gc3R5bGU9ImZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9y bWFsOyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7OyIgY2xhc3M9IiI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVv dDs7IiBjbGFzcz0iIj5UaGUNCiBtaXNiZWhhdmluZyBub2RlIGlzIGFuIFNGRjogRXhhbXBsZXMg b2YgbWlzYmVoYXZpb3JzIGFyZTogc3RyaXAgTlNILCBmb3J3YXJkIHRvIGEgbm9uLWF1dGhvcml6 ZWQgU0YsIHJlZGlyZWN0IHRoZSB0cmFmZmljIHRvIGEgbm9uLWF1dGhvcml6ZWQgbm9kZXMsIGV0 Yy4gTGlrZSBmb3IgdGhlIGNsYXNzaWZpZXIgY2FzZSwgTlNIIHJlbGllcyBvbiBPQU0gYW5kIGNv bnRyb2wtcGxhbmUgdG8gZGV0ZWN0IHN1Y2ggY2FzZS4gJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZx dW90OzsiIGNsYXNzPSIiPkFyZSB0aGVyZSBzcGVjaWZpYyBhdHRhY2tzIHRoYXQgYXJlIG5vdCBs aXN0ZWQgYWJvdmUgYW5kIHRoYXQgbmVlZCBtb3JlIGF0dGVudGlvbiBmcm9tIHRoZSBXRz88bzpw IGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBj bSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEw cHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPjxvOnAg Y2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw Y20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+ VGhhbmsgeW91LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0i bWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBD YWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIg Y2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVv dDs7IiBjbGFzcz0iIj5DaGVlcnMsPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7IiBjbGFzcz0iIj5NZWQ8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4N CjwvZGl2Pg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPC9zcGFuPjxiciBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPnNmYw0KIG1haWxpbmcgbGlzdDwv c3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFz cz0iIj4NCjxhIGhyZWY9Im1haWx0bzpzZmNAaWV0Zi5vcmciIHN0eWxlPSJjb2xvcjogcHVycGxl OyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6 IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IiBjbGFzcz0iIj5zZmNAaWV0Zi5vcmc8L2E+PGJyIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NmYyIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7 IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczog YXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiIGNsYXNzPSIiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc2ZjPC9hPjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_4CCD3B8A8FE24579B94AF5611A38FB01ciscocom_-- From nobody Thu Oct 19 11:49:58 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EC2C134313 for ; Thu, 19 Oct 2017 11:49:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AApY6PVxmyKF for ; Thu, 19 Oct 2017 11:49:55 -0700 (PDT) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D101E132D89 for ; Thu, 19 Oct 2017 11:49:54 -0700 (PDT) Received: by mail-wm0-x22f.google.com with SMTP id f4so18250788wme.0 for ; Thu, 19 Oct 2017 11:49:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=D4IbpWATQjvPhdA5VYiwi1D1ruZAv2xpfXc2sgi3agI=; b=IwX5o7DqDVlEJEmUIMRmyfDYRDIMsVbzHlGc0JRlMIfcnUMuTpEg1VMCW4IcP+HA49 IklywPYPqavRdpTqnTWmcbra33t8feymtSBJqTNOx9G4XSszz4xULNMxQv1Vaullq7D8 1KMQpeP6PZaB4YZRskpO5O9KVXcYIXgGpFhY+1+fqHCTsYtbGh7ILTge9iiX6bLJp5T8 x4rDuQcyS94FJqHQ9t5FpsdpR57Y/f8rycA0nSl0fTuTEhP/91r9LQ6ZLBJMzegIla7n U/QrhXqVJohTvdKFDzog/pmHpguPhLWsgqMDorx/TEnKyS6E2anLzcXp+EFtSxuY8Uo1 l/4A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=D4IbpWATQjvPhdA5VYiwi1D1ruZAv2xpfXc2sgi3agI=; b=Cd9AZ/Q8yYLlSILfyECAZqEsgb8ele5NrLzxizFRPu2acasE/cF8EWEc+4T30nWG6h R3Qaa6L++9fHGpXKzO/v8cOTpWj8aQSL0sqAyM26zCNEewBRnlgrLy0WH2iUNK0zAb+Q eosCLpPJAHfrYs78tBJJcd3gtab4Uw5lTP5D0UM2ea6xsEJD7rhFouVXQ1aJxtMO0hyW O3lYw0Qn4imAVTYCXHPcFlgalVNAsS4rkrROD4jMNDaWFq/ymrA7GB8dSM4mRHGaOqXa EuK7viNHbZCwnh+RFKjjfcdyCw2mipxMe8HyMtwM7C136wpeWpv3EanWvHDgWD1QOPAG bkhA== X-Gm-Message-State: AMCzsaWkmQr37MQpwtehGikUTi2u+GaqAlesbzAiuhQrAFnVu2UmvgYk n7Ijem6SixRzSIP307fN8jJ+R4nvqSI+nyfQIBo= X-Google-Smtp-Source: ABhQp+S3dGEaMaNdNsI7zjrlDwFT88aZG6tidwxUsxBAhPV5UetDXZgY/jr0oEa/e+kaM0EMs2KgnTAUQtXO1QbaLN4= X-Received: by 10.28.109.23 with SMTP id i23mr2414620wmc.32.1508438993110; Thu, 19 Oct 2017 11:49:53 -0700 (PDT) MIME-Version: 1.0 Received: by 10.223.183.202 with HTTP; Thu, 19 Oct 2017 11:49:52 -0700 (PDT) In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: Alia Atlas Date: Thu, 19 Oct 2017 14:49:52 -0400 Message-ID: To: mohamed.boucadair@orange.com Cc: "sfc@ietf.org" , Kathleen Moriarty , Eric Rescorla Content-Type: multipart/alternative; boundary="001a114699dc598d13055bead257" Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Oct 2017 18:49:57 -0000 --001a114699dc598d13055bead257 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Med, Since you directed this at me, there are efforts to have some discussions and understand better the particular threats. Currently, there is no transport with integrity protection that is even a SHOULD to implement, much less a MUST. There is no control-plane defined (beyond the BGP work) that describes detecting issues. There is no OAM defined and adopted by the WG that detects or handles these types of attacks. I see the structure that you are presuming, but none of these are available as normative references to NSH today. I had recommended having a focused interim meeting to make sure that everyone concerned understood the issues and worked through the threat analysis and possible solutions together. At this point, clearly the most that could happen is a virtual interim. There are some background discussions going on. I do not want to assume what mixture will be acceptable to handle the security concerns expressed by Kathleen and Eric and supported by a number of other ADs. I do greatly appreciate your attention and efforts to clarify and try to move this work forward. I have been expressing concerns about the security aspects of this work since RFC 7665 went through the publication process - and strongly encouraging serious WG focus to prevent precisely what has now happened. Regards, Alia On Thu, Oct 19, 2017 at 4:49 AM, wrote: > Hi Alia, > > > > Can you please share with us the current status of the document and the > list of pending blocking points? > > > > I went through all public email exchanges, especially the ones related to > security, but it is not that easy to understand what are the remaining > issues that need fixes. > > > > In particular, is there a concern with assuming the current NSH threat > model? > > > > 1. NSH is secure against attacks induced by nodes that inject (spoofed) > NSH before entering an SFC-enabled domain. Indeed, SFC ingress nodes MUST > discard packets carrying NSH. > > 2. NSH is secure against attacks from within the SFC-enabled domain to > inject non-authorized context headers. From a service perspective, the > guard is the CP which is responsible for instructing the SFC-aware nodes > about the mandatory-to-process and optional-to-process context headers. > Furthermore, whatever the origin of a supplied context header, the last S= FF > of a chain (and egress nodes) MUST remove the NSH before forwarding > upstream. > > 3. NSH is secure against leaking privacy information outside an SFC > enabled domain. The last SFF of a chain (and egress nodes) MUST remove th= e > NSH before forwarding upstream. > > 4. NSH is secure against indefinite SF/SFF loops by means of SI and TTL > fields. > > 5. Control plane specific threats are out of scope, but the document > cites I-D.ietf-sfc-control-plane for the expected behavior when instructi= ng > SFC nodes. BTW, the secdir review of the CP requirements can be retrieved > here (https://datatracker.ietf.org/doc/review-ietf-sfc-control- > plane-02-secdir-early-meadows-2015-12-10/). > > 6. NSH does not share privacy data with non-authorized parties. Indeed, > data carried in context headers are derived from the original packet (e.g= ., > source IP address) or are already known to the operator (e.g., subscriber > identifier, policy identifier, service identifier). The context informati= on > is shared with nodes that are within the same administrative domain. > > 7. Like other communication protocols, attacks from within the network > are possible, but those are soften by relying on the procedures put in > place by operators for testing and validating nodes/features before actua= l > activation. NSH does not provide a built-in feature to prevent misbehavin= g > nodes, but recommends to rely on the security features provided by the > underlying transport encapsulation schemes. > > > > Let=E2=80=99s now focus on the typical =E2=80=9Cattacks=E2=80=9D that can= be issued from within > the network: > > 1. A misbehaving node redirect the traffic to non-authorized nodes > outside a domain: This is not NSH-specific. > > 2. A misbehaving SFC-unware node alters the content of a packet: This is > not NSH-specific. > > 3. A misbehaving SFC-aware node alters the content of NSH: > > i. It removes the NSH header from all packets it sees: > This will imply that the packets, the misbehaving node intercepts, will b= e > forwarded upstream without invoking the required SFs (which may be seen a= s > a feature, not a bug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)). M= ore seriously, the > OAM NSH feature will allow an operator to detect whether NSH packets are > travelling in accordance with SFC instructions of that domain. Running th= at > feature will help detecting the misbehaving node. > > ii. It modifies the content of SPI: This will imply that > these packets will be forwarded over a wrong path. Again, running OAM NSH > will allow the operator to detect whether a packet is travelling in > accordance with SFC instructions. Running that feature regularly will hel= p > identifying the misbehaving node and whether the SFC configuration of a > domain is aligned with the expected behavior. > > iii. It modifies the content of SI/TTL: This will increase > the authorized maximum SFF/SF hops. Not sure if there is a security probl= em > out there. > > iv. The misbehaving node is a classifier: The implications > will be severe from a service standpoint. NSH relies on OAM and > control-plane to detect such case. > > v. The misbehaving node is an SFF: Examples of > misbehaviors are: strip NSH, forward to a non-authorized SF, redirect the > traffic to a non-authorized nodes, etc. Like for the classifier case, NSH > relies on OAM and control-plane to detect such case. > > > > Are there specific attacks that are not listed above and that need more > attention from the WG? > > > > Thank you. > > > > Cheers, > > Med > --001a114699dc598d13055bead257 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Med,

Since you directed this at me, = there are efforts to have some discussions and understand better the partic= ular threats.
Currently, there is no transport with integrity pro= tection that is even a SHOULD to implement, much less a MUST.=C2=A0 There
is no control-plane defined (beyond the BGP work) that describes d= etecting issues.=C2=A0 There is no OAM defined and adopted
by the= WG that detects or handles these types of attacks. I see the structure tha= t you are presuming, but none of these are
available as normative= references to NSH today.

I had recommended having= a focused interim meeting to make sure that everyone concerned understood = the issues and
worked through the threat analysis and possible so= lutions together. At this point, clearly the most that could happen is a
virtual interim.=C2=A0 There are some background discussions going = on.

I do not want to assume what mixture will be a= cceptable to handle the security concerns expressed by Kathleen and Eric
and supported by a number of other ADs.

I do greatly appreciate your attent= ion and efforts to clarify and try to move this work forward. I have been e= xpressing concerns
about the security aspec= ts of this work since RFC 7665 went through the publication process - and s= trongly encouraging serious
WG focus to pre= vent precisely what has now happened.

<= /div>
Regards,
Al= ia

On Thu, Oct 19, 2017 at 4:49 AM, <= mohamed.boucadair@orange.com> wrote:

Hi Alia,

=C2=A0

Can you please share with us the current stat= us of the document and the list of pending blocking points?

=C2=A0

I went through all public email exchanges, es= pecially the ones related to security, but it is not that easy to understan= d what are the remaining issues that need fixes.

=C2=A0

In particular, is there a concern with assumi= ng the current NSH threat model?

=C2=A0

1.=C2=A0 NSH is secure against attacks induced by= nodes that inject (spoofed) NSH before entering an SFC-enabled domain. Ind= eed, SFC ingress nodes MUST discard packets carrying NSH.

2.=C2=A0 NSH is secure against attacks from withi= n the SFC-enabled domain to inject non-authorized context headers. From a s= ervice perspective, the guard is the CP which is responsible for instructing the SFC-aware nodes about the mandatory-to-= process and optional-to-process context headers. Furthermore, whatever the = origin of a supplied context header, the last SFF of a chain (and egress no= des) MUST remove the NSH before forwarding upstream.

3.=C2=A0 NSH is secure against leaking privacy in= formation outside an SFC enabled domain. The last SFF of a chain (and egres= s nodes) MUST remove the NSH before forwarding upstream.

4.=C2=A0 NSH is secure against indefinite SF/SFF = loops by means of SI and TTL fields.

5.=C2=A0 Control plane specific threats are out o= f scope, but the document cites I-D.ietf-sfc-control-plane for the expected= behavior when instructing SFC nodes. BTW, the secdir review of the CP requirements can be retrieved here (https://datatracker.ietf.org/doc/review-ietf-sfc-control-plane-02-secdir-early-meadows-2015= -12-10/).

6.=C2=A0 NSH does not share privacy data with non= -authorized parties. Indeed, data carried in context headers are derived fr= om the original packet (e.g., source IP address) or are already known to the operator (e.g., subscriber identifier, policy = identifier, service identifier). The context information is shared with nod= es that are within the same administrative domain. =C2=A0

7.=C2=A0 Like other communication protocols, atta= cks from within the network are possible, but those are soften by relying o= n the procedures put in place by operators for testing and validating nodes/features before actual activation. NSH do= es not provide a built-in feature to prevent misbehaving nodes, but recomme= nds to rely on the security features provided by the underlying transport e= ncapsulation schemes.

=C2=A0

Let=E2=80=99s now focus on the typical =E2=80= =9Cattacks=E2=80=9D that can be issued from within the network:

1.=C2=A0 A misbehaving node redirect the traffic = to non-authorized nodes outside a domain: This is not NSH-specific.<= u>

2.=C2=A0 A misbehaving SFC-unware node alters the= content of a packet: This is not NSH-specific.

3.=C2=A0 A misbehaving SFC-aware node alters the = content of NSH:

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 i.=C2=A0=C2=A0=C2=A0=C2=A0 <= /u>It removes the NSH header from all packets it sees: This will imp= ly that the packets, the misbehaving node intercepts, will be forwarded upstream without invoking the required = SFs (which may be seen as a feature, not a bug if one dislikes =E2=80=9Cmid= dleboxes=E2=80=9D :)). More seriously, the OAM NSH feature will allow an op= erator to detect whether NSH packets are travelling in accordance with SFC instructions of that domain. Running that feature w= ill help detecting the misbehaving node.

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 ii.=C2=A0=C2=A0=C2=A0=C2=A0 = It modifies the content of SPI: This will imply that these packe= ts will be forwarded over a wrong path. Again, running OAM NSH will allow the operator to detect whether a p= acket is travelling in accordance with SFC instructions. Running that featu= re regularly will help identifying the misbehaving node and whether the SFC= configuration of a domain is aligned with the expected behavior.

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 iii.=C2=A0=C2=A0=C2=A0=C2=A0 It modifies the content of SI/TTL: This will increase the autho= rized maximum SFF/SF hops. Not sure if there is a security problem out there.

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 iv.=C2=A0=C2=A0=C2=A0=C2=A0 = The misbehaving node is a classifier: The implications will be s= evere from a service standpoint. NSH relies on OAM and control-plane to detect such case. =C2=A0=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 v.=C2=A0=C2=A0=C2=A0=C2=A0 <= /u>The misbehaving node is an SFF: Examples of misbehaviors are: str= ip NSH, forward to a non-authorized SF, redirect the traffic to a non-authorized nodes, etc. Like for the clas= sifier case, NSH relies on OAM and control-plane to detect such case. =C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0

Are there specific attacks that are not liste= d above and that need more attention from the WG?

=C2=A0

Thank you.

=C2=A0

Cheers,

Med


--001a114699dc598d13055bead257-- From nobody Thu Oct 19 11:51:19 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A98D13307F; Thu, 19 Oct 2017 11:51:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3rrfWdKUfGv1; Thu, 19 Oct 2017 11:51:09 -0700 (PDT) Received: from mail-wr0-x231.google.com (mail-wr0-x231.google.com [IPv6:2a00:1450:400c:c0c::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6DE67132D89; Thu, 19 Oct 2017 11:51:09 -0700 (PDT) Received: by mail-wr0-x231.google.com with SMTP id q42so9305980wrb.7; Thu, 19 Oct 2017 11:51:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=ic8i6Tge+ILpaRPFxVw8g4R1RRwBCMcB9VLXNbmdqjQ=; b=RfbUjTvi1rtoO3TMWyhRA4HztvuWaQbTazlRWMqa8Efy+cU8QSuz9J+umMvFMofUHB lKO+pHOMIgL0lLbRNPGC0UHMtTbY8kQ0aWmyBC1XPFWErPDGsFr/hRtg7LeggZnSeFbI bwV6/CJ6zezYCFzoXGTRps3GMZmz0J0MVXglKf4AJGj+lm3FKllQ/DTGagN+8WNRsNOI 0hAoKtYYCyUQYYv+J510roqg9xayAQuJXfQ9HCssI58Z//GOPJmTvjoZ+nlR8T7enL/B wQJ7sRwkgyXwpDHujaCHCoihfAVDzUABWaTv9Qx6Oxyab/xkS8h9V/G0NozUQSl6mikw 9/Bg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=ic8i6Tge+ILpaRPFxVw8g4R1RRwBCMcB9VLXNbmdqjQ=; b=XTAZlBJlnMoTmqDZ9KLuYuoET27KlLqJ+YIN4wkDbBxV4xx42B4YB+fjDsa31xBz6t dFIDLlIWGY40gcIUexr8gVeERiiVfAoNy968IgA00RMLdpaToZqKU5TPwPTAdsOwjnM5 IY4nxbNMWNKQq2jgSS6h2m1YNm+6H+wVGnvGI34iosAnP+YInxIAgNP926QWTqUcVDrd xHabqwIpkH06+5ym8K1V9NwZPzuRo4hvrmIY728u8pfsmkr+xvY6bptP5Rm61AEzlisT 7yqeNGfXKiU1oHTOgPOBEYhecp4yuCZ97Apwyt3IpNeQ7EdhiBPKdQfxULCeCg5TbN27 MBBQ== X-Gm-Message-State: AMCzsaUqZvtijOAY2p8c8y7TjaWOUoCp1cL9G5M2Xc8eLOIBUpmz7eu3 gY3R0G7JAqpbiJBB3kxvMITPXh852IvzWqHmvHg= X-Google-Smtp-Source: ABhQp+QTSa8PzzjMC7tG78Htj7Eq9HjkAOZ2FPRZofXciwKVQSkc72+bAJn/ijtHTy6bmHUwi3D7Ouj1wXApGbi+rJ8= X-Received: by 10.223.187.1 with SMTP id r1mr2424883wrg.253.1508439067749; Thu, 19 Oct 2017 11:51:07 -0700 (PDT) MIME-Version: 1.0 Received: by 10.223.183.202 with HTTP; Thu, 19 Oct 2017 11:51:07 -0700 (PDT) In-Reply-To: References: <150656766105.13740.10127057899137745873.idtracker@ietfa.amsl.com> From: Alia Atlas Date: Thu, 19 Oct 2017 14:51:07 -0400 Message-ID: To: Eric Rescorla Cc: "Carlos Pignataro (cpignata)" , "sfc-chairs@ietf.org" , "sfc@ietf.org" , Kathleen Moriarty , The IESG , "draft-ietf-sfc-nsh@ietf.org" , "Joel M. Halpern" Content-Type: multipart/alternative; boundary="089e0820f738cc92a8055bead64f" Archived-At: Subject: Re: [sfc] Eric Rescorla's Discuss on draft-ietf-sfc-nsh-24: (with DISCUSS and COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Oct 2017 18:51:12 -0000 --089e0820f738cc92a8055bead64f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Eric, The concern in the Discusses from Kathleen & you is around integrity protection. There are no encapsulations from the Routing Area that require integrity protection that I am aware of; when privacy is required IPsec or MAC sec are used. I am continuing to encourage discussion on what is the threat model and what technology are possible. While I have been primarily engaging with Kathleen, given that you have a separate Discuss, I would strongly encourage your responsive participation. There is certainly not consensus to add integrity protection from the authors or WG. The ramifications of doing so are quite severe and understanding of the actual threat models that would force that direction Regards, Alia On Mon, Oct 16, 2017 at 1:16 PM, Eric Rescorla wrote: > > > On Mon, Oct 16, 2017 at 10:12 AM, Carlos Pignataro (cpignata) < > cpignata@cisco.com> wrote: > >> >> On Oct 16, 2017, at 12:27 PM, Eric Rescorla wrote: >> >> >> >> On Mon, Oct 16, 2017 at 9:24 AM, Carlos Pignataro (cpignata) < >> cpignata@cisco.com> wrote: >> >>> Many thanks for the continued dialogue, Kathleen!!! >>> >>> Kathleen, Eric, >>> >>> Just a heads up that we are almost finished with a proposal for the >>> Security Considerations that we are targeting to address the concerns. = More >>> soon, and while we look forward to your comments on that proposal, in t= he >>> mean time: >>> >>> Eric, we have not heard from you on any of the two messages we sent >>> addressed to you. >>> >> >> Yeah, these got back-burnered >> >> >> We understand this DISCUSSion happens through dialogue =E2=80=94 not gue= ssing or >> mandate. >> >> because I had understood you were going to make substantive changes to >> actually add an integrity feature >> >> >> Sorry if we were not clear. >> >> We are indeed working on changes, some potentially substantive =E2=80=94= but >> somehow I missed this: can you please point me to the record where there= =E2=80=99s >> a decision or discussion to =E2=80=9Cadd an integrity feature=E2=80=9D? >> > > That was my take-home from the telechat where this was discussed, but > maybe Alia would like to say what her understanding was. > > -Ekr > > >> We are working through a more thorough threat analysis and describing th= e >> implications and solutions for each of those cases. >> >> and I was intending to review the draft at that time. Is your plan not t= o >> do that? >> >> >> We would have liked to have responses to our comments or questions, >> discussion via dialogue, to incorporate in the updates and potentially >> substantive set of changes. The plan is (now) provide a textual proposal= . >> >> That said, sure: you can review the forthcoming set of changes. >> >> =E2=80=94 Carlos. >> >> >> -Ekr >> >> >>> Kathleen, one comment and one question inline. >>> >>> > Kathleen Moriarty wrote: >>> > >>> > While >>> > the expressions EKR includes below are not directly in the draft, thi= s >>> > is how we read it, >>> >>> This statement seems to characterize the review / reviewers, more than >>> the document itself. >>> >>> > If MPLS is used similarly instead, yes, it >>> > will have the same issues, but you also won't have a secure option if >>> > this is done with the same security (or lack thereof) as MPLS. >>> >>> I am not sure I fully understand the source, provenance, and >>> implications of this comment. I do not recall MPLS being discussed befo= re >>> in the context of this document. >>> >>> RFC 7365 describes the use of both MPLS and IP in Data Center (DC) >>> Network Virtualization. Today, some of these packets flow already in >>> existing DCs, and service chaining exists in those DCs. Is there some >>> additional requirement for DC data planes, or for NVO3, that is not >>> captured elsewhere? >>> >>> More importantly: a corollary of what you are saying is that, providing >>> a security option underneath in the tunneling adds to the overall secur= ity >>> posture, and that MPLS is different than IP in this context. Does that >>> capture your intent? >>> >>> > >>> > Best regards, >>> > Kathleen >>> >>> Best, >>> >>> =E2=80=94 Carlos P. >>> >>> >> >> > > _______________________________________________ > sfc mailing list > sfc@ietf.org > https://www.ietf.org/mailman/listinfo/sfc > > --089e0820f738cc92a8055bead64f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Eric,

The concern in the Discusses from= Kathleen & you is around integrity protection.=C2=A0=C2=A0
T= here are no encapsulations from the Routing Area that require integrity pro= tection that I am aware of;
when privacy is required IPsec or MAC= sec are used.
I am continuing to encourage discussion on what is= the threat model and what technology are possible.
While I have = been primarily engaging with Kathleen, given that you have a separate Discu= ss, I would strongly
encourage your responsive participation.

There is certainly not consensus to add integrity pro= tection from the authors or WG.
The ramifications of doing so are= quite severe and understanding of the actual threat models that would=C2= =A0
force that direction=C2=A0

Regards,<= /div>
Alia


On Mon, Oct 16, 2017 at 1:16 PM, Eric Rescorla <ekr@rtf= m.com> wrote:


On Mon, Oct 16, 2017 at 10:12 AM, Carlos Pignataro (cpignata) <cp= ignata@cisco.com> wrote:

On Oct 16, 2017, at 12:27 PM, Eric Rescorla <ekr@rtfm.com> wrote:



On Mon, Oct 16, 2017 at 9:24 AM, Carlos Pignatar= o (cpignata) <cpignata@cisco.com> wrote:
Many thanks for the continued dialogue, Kathleen!!!

Kathleen, Eric,

Just a heads up that we are almost finished with a proposal for the Securit= y Considerations that we are targeting to address the concerns. More soon, = and while we look forward to your comments on that proposal, in the mean ti= me:

Eric, we have not heard from you on any of the two messages we sent address= ed to you.

Yeah, these got back-burnered

We understand this DISCUSSion happens through dialogue =E2=80= =94 not guessing or mandate.

because I had understood you were going to make substantive changes to= actually add an integrity feature

Sorry if we were not clear.

We are indeed working on changes, some potentially substantive =E2=80= =94 but somehow I missed this: can you please point me to the record where = there=E2=80=99s a decision or discussion to =E2=80=9Cadd an integrity featu= re=E2=80=9D?=C2=A0

That was my take-home from the telechat where this was discussed, but mayb= e Alia would like to say what her understanding was.

-Ekr


We are working through a more thorough threat analysis and describing = the implications and solutions for each of those cases.=C2=A0

and I was intending to review the draft at that time. Is your plan not= to do that?

We would have liked to have responses to our comments or questi= ons, discussion via dialogue, to incorporate in the updates and potentially= substantive set of changes. The plan is (now) provide a textual proposal.<= /div>

That said, sure: you can review the forthcoming set of changes.
<= span class=3D"m_-8192061677859159064HOEnZb">

=E2=80=94 Carlos.

-Ekr


Kathleen, one comment and one question inline.

> Kathleen Moriarty <Kathleen.Moriarty.ietf@gmail.com> wrote:<= br> >
> While
> the expressions EKR includes below are not directly in the draft, this=
> is how we read it,

This statement seems to characterize the review / reviewers, more th= an the document itself.

>=C2=A0 =C2=A0If MPLS is used similarly instead, yes, it
> will have the same issues, but you also won't have a secure option= if
> this is done with the same security (or lack thereof) as MPLS.

I am not sure I fully understand the source, provenance, and implica= tions of this comment. I do not recall MPLS being discussed before in the c= ontext of this document.

RFC 7365 describes the use of both MPLS and IP in Data Center (DC) Network = Virtualization. Today, some of these packets flow already in existing DCs, = and service chaining exists in those DCs. Is there some additional requirem= ent for DC data planes, or for NVO3, that is not captured elsewhere?

More importantly: a corollary of what you are saying is that, providing a s= ecurity option underneath in the tunneling adds to the overall security pos= ture, and that MPLS is different than IP in this context. Does that capture= your intent?

>
> Best regards,
> Kathleen

Best,

=E2=80=94 Carlos P.





_______________________________________________
sfc mailing list
sfc@ietf.org
https://www.ietf.org/mailman/listinfo/sfc


--089e0820f738cc92a8055bead64f-- From nobody Thu Oct 19 23:35:33 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DF04132EDA for ; Thu, 19 Oct 2017 23:35:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.617 X-Spam-Level: X-Spam-Status: No, score=-1.617 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2fkNhHR3QMWt for ; Thu, 19 Oct 2017 23:35:29 -0700 (PDT) Received: from relais-inet.orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99C3A124F57 for ; Thu, 19 Oct 2017 23:35:28 -0700 (PDT) Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) by opfedar27.francetelecom.fr (ESMTP service) with ESMTP id 106EC6066E; Fri, 20 Oct 2017 08:35:27 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.17]) by opfedar06.francetelecom.fr (ESMTP service) with ESMTP id DE62380062; Fri, 20 Oct 2017 08:35:26 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM24.corporate.adroot.infra.ftgroup ([fe80::a1e6:3e6a:1f68:5f7e%18]) with mapi id 14.03.0361.001; Fri, 20 Oct 2017 08:35:26 +0200 From: To: Alia Atlas CC: "sfc@ietf.org" , Kathleen Moriarty , Eric Rescorla Thread-Topic: NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wAQykcAABtvLRA= Date: Fri, 20 Oct 2017 06:35:25 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93300A057786@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93300A057786OPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 06:35:31 -0000 --_000_787AE7BB302AE849A7480A190F8B93300A057786OPEXCLILMA3corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWxpYSwNCg0KVGhhbmsgeW91IGZvciB0aGUgZmVlZGJhY2suDQoNClBsZWFzZSBzZWUgaW5s aW5lLg0KDQpDaGVlcnMsDQpNZWQNCg0KRGUgOiBBbGlhIEF0bGFzIFttYWlsdG86YWthdGxhc0Bn bWFpbC5jb21dDQpFbnZvecOpIDogamV1ZGkgMTkgb2N0b2JyZSAyMDE3IDIwOjUwDQrDgCA6IEJP VUNBREFJUiBNb2hhbWVkIElNVC9PTE4NCkNjIDogc2ZjQGlldGYub3JnOyBLYXRobGVlbiBNb3Jp YXJ0eTsgRXJpYyBSZXNjb3JsYQ0KT2JqZXQgOiBSZTogTlNIIERJU0NVU1MgU3RhdHVzDQoNCkhp IE1lZCwNCg0KU2luY2UgeW91IGRpcmVjdGVkIHRoaXMgYXQgbWUNCltNZWRdIEkgc2VudCBpdCB0 byB5b3UgYmVjYXVzZSB5b3UgYXJlIG91ciBBRCBhbmQgSSB3YXMgc3VyZSB5b3UgaGF2ZSBhIGZ1 bGwgdmlzaWJpbGl0eSBvbiBvbmdvaW5nIGRpc2N1c3Npb25zIGFuZCBwZW5kaW5nIGlzc3Vlcy4N Cg0KLCB0aGVyZSBhcmUgZWZmb3J0cyB0byBoYXZlIHNvbWUgZGlzY3Vzc2lvbnMgYW5kIHVuZGVy c3RhbmQgYmV0dGVyIHRoZSBwYXJ0aWN1bGFyIHRocmVhdHMuDQpDdXJyZW50bHksIHRoZXJlIGlz IG5vIHRyYW5zcG9ydCB3aXRoIGludGVncml0eSBwcm90ZWN0aW9uIHRoYXQgaXMgZXZlbiBhIFNI T1VMRCB0byBpbXBsZW1lbnQsIG11Y2ggbGVzcyBhIE1VU1QuDQoNCltNZWRdIEFncmVlLiBCdXQu LiB0aGUgcXVlc3Rpb24gQWxpYSBpcyB0byB1bmRlcnN0YW5kIHdoYXQgYXR0YWNrcyBidWlsdC1p biBpbnRlZ3JpdHkgcHJvdGVjdGlvbiB3aWxsIHByZXZlbnQvc29sdmUuIElzIHRoZXJlIGEgcG9p bnRlciB3aGVyZSB3ZSBjYW4gZmluZCBhIGRlc2NyaXB0aW9uIG9mIHN1Y2ggYXR0YWNrcz8NCg0K ICBUaGVyZQ0KaXMgbm8gY29udHJvbC1wbGFuZSBkZWZpbmVkIChiZXlvbmQgdGhlIEJHUCB3b3Jr KSB0aGF0IGRlc2NyaWJlcyBkZXRlY3RpbmcgaXNzdWVzLg0KDQpbTWVkXSBUaGUgV0cgcHJvZHVj ZWQgYSBzZXQgb2Ygc2VjdXJpdHkgcmVxdWlyZW1lbnRzIHRoYXQgbmVlZCB0byBiZSBtZXQgYnkg YW55IFNGQyBDUCBzb2x1dGlvbi4gVGhlIHNlY3VyaXR5IHJldmlldyBvZiB0aG9zZSByZXF1aXJl bWVudHMgc2FpZDog4oCcSXQgaXMgdmVyeSB3ZWxsLXRob3VnaHQgb3V0IGFuZCBjb21wcmVoZW5z aXZl4oCdLiBJTUhPLCB3ZSBkb27igJl0IG5lZWQgQ1Agc29sdXRpb25zIHRvIGJlIGxpc3RlZCBh cyBub3JtYXRpdmUgYmVjYXVzZSB0aGUgTlNIIGlzIGEgZGF0YS1wbGFuZSBzb2x1dGlvbjsgQ1At cmVsYXRlZCBhc3BlY3RzIGFyZSBvdXQgb2Ygc2NvcGUuDQoNCiAgVGhlcmUgaXMgbm8gT0FNIGRl ZmluZWQgYW5kIGFkb3B0ZWQNCmJ5IHRoZSBXRyB0aGF0IGRldGVjdHMgb3IgaGFuZGxlcyB0aGVz ZSB0eXBlcyBvZiBhdHRhY2tzLg0KDQpbTWVkXSBUaGUgV0cgaGFzIGFscmVhZHkgYSBmcmFtZXdv cmsgZG9jdW1lbnQgdG8gZGVzY3JpYmUgcmVxdWlyZWQgZmVhdHVyZXMgKGUuZy4sIHRyYWNlKSB0 byBhc3Nlc3Mgd2hldGhlciB0aGUgYmVoYXZpb3Igb2YgYW4gdW5kZXJseWluZyBTRkMtZW5hYmxl ZCBkb21haW4gaXMgYWxpZ25lZCB3aXRoIHRoZSBleHBlY3RlZCBTRkMgYmVoYXZpb3IgKGRyYWZ0 LWlldGYtc2ZjLW9hbS1mcmFtZXdvcmspLiBBZGRpbmcgYW4gaW5mb3JtYXRpdmUgcG9pbnRlciB0 byB0aGF0IGRvY3VtZW50IGlzIHN1ZmZpY2llbnQgZm9yIHRoZSBjdXJyZW50IE5TSCBkaXNjdXNz aW9uLg0KDQpJIHNlZSB0aGUgc3RydWN0dXJlIHRoYXQgeW91IGFyZSBwcmVzdW1pbmcsIGJ1dCBu b25lIG9mIHRoZXNlIGFyZQ0KYXZhaWxhYmxlIGFzIG5vcm1hdGl2ZSByZWZlcmVuY2VzIHRvIE5T SCB0b2RheS4NCg0KW01lZF0gVHdvIGNvbW1lbnRzIGhlcmU6DQoNCsK3ICAgICAgICAgVGhlc2Ug cmVmZXJlbmNlcyBkbyBub3QgbmVlZCB0byBiZSDigJxub3JtYXRpdmXigJ0gZm9yIE5TSCBmb3Ig dGhlIHNpbXBsZSByZWFzb24gdGhhdCBhbiDigJxpbXBsZW1lbnRlcuKAnSBvZiBOU0ggc3BlYyBk b2VzIG5vdCBuZWVkIHRvIHJlYWQgdGhvc2UgZG9jdW1lbnRzLiBUaGlzIGlzIHRoZSBkZWZpbml0 aW9uIG9mIOKAnG5vcm1hdGl2ZeKAnSB2cyDigJxpbmZvcm1hdGl2ZeKAnS4NCg0KwrcgICAgICAg ICBJIGFncmVlIHRob3NlIGFyZSBpbXBvcnRhbnQgZm9yIHRoZSBlbnRpdHkgdGhhdCB3aWxsIG9w ZXJhdGUgYW4g4oCcU0ZDIGRvbWFpbuKAnSB0aGF0IGlzIGEgY29sbGVjdGlvbiBvZiBTRkMgZGF0 YS1wbGFuZSBzb2x1dGlvbiAoaS5lLiwgTlNIKSwgU0ZDIGNvbnRyb2wtcGxhbmUgcHJvdG9jb2wo cyksIGFuZCBTRkMgT0FNIHByb3RvY29scy4gTlNIIGlzIG5vdCBkZWZpbmluZyBzdWNoIGNvbGxl Y3Rpb24uDQoNCkkgaGFkIHJlY29tbWVuZGVkIGhhdmluZyBhIGZvY3VzZWQgaW50ZXJpbSBtZWV0 aW5nIHRvIG1ha2Ugc3VyZSB0aGF0IGV2ZXJ5b25lIGNvbmNlcm5lZCB1bmRlcnN0b29kIHRoZSBp c3N1ZXMgYW5kDQp3b3JrZWQgdGhyb3VnaCB0aGUgdGhyZWF0IGFuYWx5c2lzIGFuZCBwb3NzaWJs ZSBzb2x1dGlvbnMgdG9nZXRoZXIuIEF0IHRoaXMgcG9pbnQsIGNsZWFybHkgdGhlIG1vc3QgdGhh dCBjb3VsZCBoYXBwZW4gaXMgYQ0KdmlydHVhbCBpbnRlcmltLiAgVGhlcmUgYXJlIHNvbWUgYmFj a2dyb3VuZCBkaXNjdXNzaW9ucyBnb2luZyBvbi4NCg0KSSBkbyBub3Qgd2FudCB0byBhc3N1bWUg d2hhdCBtaXh0dXJlIHdpbGwgYmUgYWNjZXB0YWJsZSB0byBoYW5kbGUgdGhlIHNlY3VyaXR5IGNv bmNlcm5zIGV4cHJlc3NlZCBieSBLYXRobGVlbiBhbmQgRXJpYw0KDQpbTWVkXSBXaGF0IHdvdWxk IGJlIHJlYWxseSB2YWx1YWJsZSBhbmQgaGVscGZ1bCBmb3IgdGhlIFdHIGlzIHRvIHVuZGVyc3Rh bmQgYXR0YWNrIHZlY3RvcnMgdGhhdCBhcmUgbm90IGNvdmVyZWQgaW4gdGhlIHRocmVhdCBtb2Rl bCBJIGRlc2NyaWJlZC4gSeKAmW0gc3VyZSBLYXRobGVlbiBhbmQgRXJpYyBjYW4gaGVscCB1cyB3 aXRoIHNrZXRjaGluZyBzb21lIGF0dGFjayBleGFtcGxlcyB0aGF0IHRyaWdnZXJlZCB0aGVpciBj b21tZW50cy4NCg0KYW5kIHN1cHBvcnRlZCBieSBhIG51bWJlciBvZiBvdGhlciBBRHMuDQoNCkkg ZG8gZ3JlYXRseSBhcHByZWNpYXRlIHlvdXIgYXR0ZW50aW9uIGFuZCBlZmZvcnRzIHRvIGNsYXJp ZnkgYW5kIHRyeSB0byBtb3ZlIHRoaXMgd29yayBmb3J3YXJkLiBJIGhhdmUgYmVlbiBleHByZXNz aW5nIGNvbmNlcm5zDQphYm91dCB0aGUgc2VjdXJpdHkgYXNwZWN0cyBvZiB0aGlzIHdvcmsgc2lu Y2UgUkZDIDc2NjUgd2VudCB0aHJvdWdoIHRoZSBwdWJsaWNhdGlvbiBwcm9jZXNzIC0gYW5kIHN0 cm9uZ2x5IGVuY291cmFnaW5nIHNlcmlvdXMNCldHIGZvY3VzIHRvIHByZXZlbnQgcHJlY2lzZWx5 IHdoYXQgaGFzIG5vdyBoYXBwZW5lZC4NCg0KW01lZF0gVGhhbmsgeW91Lg0KDQpSZWdhcmRzLA0K QWxpYQ0KDQoNCk9uIFRodSwgT2N0IDE5LCAyMDE3IGF0IDQ6NDkgQU0sIDxtb2hhbWVkLmJvdWNh ZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPj4gd3Jv dGU6DQpIaSBBbGlhLA0KDQpDYW4geW91IHBsZWFzZSBzaGFyZSB3aXRoIHVzIHRoZSBjdXJyZW50 IHN0YXR1cyBvZiB0aGUgZG9jdW1lbnQgYW5kIHRoZSBsaXN0IG9mIHBlbmRpbmcgYmxvY2tpbmcg cG9pbnRzPw0KDQpJIHdlbnQgdGhyb3VnaCBhbGwgcHVibGljIGVtYWlsIGV4Y2hhbmdlcywgZXNw ZWNpYWxseSB0aGUgb25lcyByZWxhdGVkIHRvIHNlY3VyaXR5LCBidXQgaXQgaXMgbm90IHRoYXQg ZWFzeSB0byB1bmRlcnN0YW5kIHdoYXQgYXJlIHRoZSByZW1haW5pbmcgaXNzdWVzIHRoYXQgbmVl ZCBmaXhlcy4NCg0KSW4gcGFydGljdWxhciwgaXMgdGhlcmUgYSBjb25jZXJuIHdpdGggYXNzdW1p bmcgdGhlIGN1cnJlbnQgTlNIIHRocmVhdCBtb2RlbD8NCg0KDQoxLiAgTlNIIGlzIHNlY3VyZSBh Z2FpbnN0IGF0dGFja3MgaW5kdWNlZCBieSBub2RlcyB0aGF0IGluamVjdCAoc3Bvb2ZlZCkgTlNI IGJlZm9yZSBlbnRlcmluZyBhbiBTRkMtZW5hYmxlZCBkb21haW4uIEluZGVlZCwgU0ZDIGluZ3Jl c3Mgbm9kZXMgTVVTVCBkaXNjYXJkIHBhY2tldHMgY2FycnlpbmcgTlNILg0KDQoyLiAgTlNIIGlz IHNlY3VyZSBhZ2FpbnN0IGF0dGFja3MgZnJvbSB3aXRoaW4gdGhlIFNGQy1lbmFibGVkIGRvbWFp biB0byBpbmplY3Qgbm9uLWF1dGhvcml6ZWQgY29udGV4dCBoZWFkZXJzLiBGcm9tIGEgc2Vydmlj ZSBwZXJzcGVjdGl2ZSwgdGhlIGd1YXJkIGlzIHRoZSBDUCB3aGljaCBpcyByZXNwb25zaWJsZSBm b3IgaW5zdHJ1Y3RpbmcgdGhlIFNGQy1hd2FyZSBub2RlcyBhYm91dCB0aGUgbWFuZGF0b3J5LXRv LXByb2Nlc3MgYW5kIG9wdGlvbmFsLXRvLXByb2Nlc3MgY29udGV4dCBoZWFkZXJzLiBGdXJ0aGVy bW9yZSwgd2hhdGV2ZXIgdGhlIG9yaWdpbiBvZiBhIHN1cHBsaWVkIGNvbnRleHQgaGVhZGVyLCB0 aGUgbGFzdCBTRkYgb2YgYSBjaGFpbiAoYW5kIGVncmVzcyBub2RlcykgTVVTVCByZW1vdmUgdGhl IE5TSCBiZWZvcmUgZm9yd2FyZGluZyB1cHN0cmVhbS4NCg0KMy4gIE5TSCBpcyBzZWN1cmUgYWdh aW5zdCBsZWFraW5nIHByaXZhY3kgaW5mb3JtYXRpb24gb3V0c2lkZSBhbiBTRkMgZW5hYmxlZCBk b21haW4uIFRoZSBsYXN0IFNGRiBvZiBhIGNoYWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJl bW92ZSB0aGUgTlNIIGJlZm9yZSBmb3J3YXJkaW5nIHVwc3RyZWFtLg0KDQo0LiAgTlNIIGlzIHNl Y3VyZSBhZ2FpbnN0IGluZGVmaW5pdGUgU0YvU0ZGIGxvb3BzIGJ5IG1lYW5zIG9mIFNJIGFuZCBU VEwgZmllbGRzLg0KDQo1LiAgQ29udHJvbCBwbGFuZSBzcGVjaWZpYyB0aHJlYXRzIGFyZSBvdXQg b2Ygc2NvcGUsIGJ1dCB0aGUgZG9jdW1lbnQgY2l0ZXMgSS1ELmlldGYtc2ZjLWNvbnRyb2wtcGxh bmUgZm9yIHRoZSBleHBlY3RlZCBiZWhhdmlvciB3aGVuIGluc3RydWN0aW5nIFNGQyBub2Rlcy4g QlRXLCB0aGUgc2VjZGlyIHJldmlldyBvZiB0aGUgQ1AgcmVxdWlyZW1lbnRzIGNhbiBiZSByZXRy aWV2ZWQgaGVyZSAoaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvcmV2aWV3LWlldGYt c2ZjLWNvbnRyb2wtcGxhbmUtMDItc2VjZGlyLWVhcmx5LW1lYWRvd3MtMjAxNS0xMi0xMC8pLg0K DQo2LiAgTlNIIGRvZXMgbm90IHNoYXJlIHByaXZhY3kgZGF0YSB3aXRoIG5vbi1hdXRob3JpemVk IHBhcnRpZXMuIEluZGVlZCwgZGF0YSBjYXJyaWVkIGluIGNvbnRleHQgaGVhZGVycyBhcmUgZGVy aXZlZCBmcm9tIHRoZSBvcmlnaW5hbCBwYWNrZXQgKGUuZy4sIHNvdXJjZSBJUCBhZGRyZXNzKSBv ciBhcmUgYWxyZWFkeSBrbm93biB0byB0aGUgb3BlcmF0b3IgKGUuZy4sIHN1YnNjcmliZXIgaWRl bnRpZmllciwgcG9saWN5IGlkZW50aWZpZXIsIHNlcnZpY2UgaWRlbnRpZmllcikuIFRoZSBjb250 ZXh0IGluZm9ybWF0aW9uIGlzIHNoYXJlZCB3aXRoIG5vZGVzIHRoYXQgYXJlIHdpdGhpbiB0aGUg c2FtZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4uDQoNCjcuICBMaWtlIG90aGVyIGNvbW11bmljYXRp b24gcHJvdG9jb2xzLCBhdHRhY2tzIGZyb20gd2l0aGluIHRoZSBuZXR3b3JrIGFyZSBwb3NzaWJs ZSwgYnV0IHRob3NlIGFyZSBzb2Z0ZW4gYnkgcmVseWluZyBvbiB0aGUgcHJvY2VkdXJlcyBwdXQg aW4gcGxhY2UgYnkgb3BlcmF0b3JzIGZvciB0ZXN0aW5nIGFuZCB2YWxpZGF0aW5nIG5vZGVzL2Zl YXR1cmVzIGJlZm9yZSBhY3R1YWwgYWN0aXZhdGlvbi4gTlNIIGRvZXMgbm90IHByb3ZpZGUgYSBi dWlsdC1pbiBmZWF0dXJlIHRvIHByZXZlbnQgbWlzYmVoYXZpbmcgbm9kZXMsIGJ1dCByZWNvbW1l bmRzIHRvIHJlbHkgb24gdGhlIHNlY3VyaXR5IGZlYXR1cmVzIHByb3ZpZGVkIGJ5IHRoZSB1bmRl cmx5aW5nIHRyYW5zcG9ydCBlbmNhcHN1bGF0aW9uIHNjaGVtZXMuDQoNCkxldOKAmXMgbm93IGZv Y3VzIG9uIHRoZSB0eXBpY2FsIOKAnGF0dGFja3PigJ0gdGhhdCBjYW4gYmUgaXNzdWVkIGZyb20g d2l0aGluIHRoZSBuZXR3b3JrOg0KDQoxLiAgQSBtaXNiZWhhdmluZyBub2RlIHJlZGlyZWN0IHRo ZSB0cmFmZmljIHRvIG5vbi1hdXRob3JpemVkIG5vZGVzIG91dHNpZGUgYSBkb21haW46IFRoaXMg aXMgbm90IE5TSC1zcGVjaWZpYy4NCg0KMi4gIEEgbWlzYmVoYXZpbmcgU0ZDLXVud2FyZSBub2Rl IGFsdGVycyB0aGUgY29udGVudCBvZiBhIHBhY2tldDogVGhpcyBpcyBub3QgTlNILXNwZWNpZmlj Lg0KDQozLiAgQSBtaXNiZWhhdmluZyBTRkMtYXdhcmUgbm9kZSBhbHRlcnMgdGhlIGNvbnRlbnQg b2YgTlNIOg0KDQogICAgICAgICAgICBpLiAgICAgSXQgcmVtb3ZlcyB0aGUgTlNIIGhlYWRlciBm cm9tIGFsbCBwYWNrZXRzIGl0IHNlZXM6IFRoaXMgd2lsbCBpbXBseSB0aGF0IHRoZSBwYWNrZXRz LCB0aGUgbWlzYmVoYXZpbmcgbm9kZSBpbnRlcmNlcHRzLCB3aWxsIGJlIGZvcndhcmRlZCB1cHN0 cmVhbSB3aXRob3V0IGludm9raW5nIHRoZSByZXF1aXJlZCBTRnMgKHdoaWNoIG1heSBiZSBzZWVu IGFzIGEgZmVhdHVyZSwgbm90IGEgYnVnIGlmIG9uZSBkaXNsaWtlcyDigJxtaWRkbGVib3hlc+KA nSA6KSkuIE1vcmUgc2VyaW91c2x5LCB0aGUgT0FNIE5TSCBmZWF0dXJlIHdpbGwgYWxsb3cgYW4g b3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRoZXIgTlNIIHBhY2tldHMgYXJlIHRyYXZlbGxpbmcgaW4g YWNjb3JkYW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMgb2YgdGhhdCBkb21haW4uIFJ1bm5pbmcg dGhhdCBmZWF0dXJlIHdpbGwgaGVscCBkZXRlY3RpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUuDQoN CiAgICAgICAgICBpaS4gICAgIEl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNQSTogVGhpcyB3 aWxsIGltcGx5IHRoYXQgdGhlc2UgcGFja2V0cyB3aWxsIGJlIGZvcndhcmRlZCBvdmVyIGEgd3Jv bmcgcGF0aC4gQWdhaW4sIHJ1bm5pbmcgT0FNIE5TSCB3aWxsIGFsbG93IHRoZSBvcGVyYXRvciB0 byBkZXRlY3Qgd2hldGhlciBhIHBhY2tldCBpcyB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0 aCBTRkMgaW5zdHJ1Y3Rpb25zLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSByZWd1bGFybHkgd2lsbCBo ZWxwIGlkZW50aWZ5aW5nIHRoZSBtaXNiZWhhdmluZyBub2RlIGFuZCB3aGV0aGVyIHRoZSBTRkMg Y29uZmlndXJhdGlvbiBvZiBhIGRvbWFpbiBpcyBhbGlnbmVkIHdpdGggdGhlIGV4cGVjdGVkIGJl aGF2aW9yLg0KDQogICAgICAgIGlpaS4gICAgIEl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNJ L1RUTDogVGhpcyB3aWxsIGluY3JlYXNlIHRoZSBhdXRob3JpemVkIG1heGltdW0gU0ZGL1NGIGhv cHMuIE5vdCBzdXJlIGlmIHRoZXJlIGlzIGEgc2VjdXJpdHkgcHJvYmxlbSBvdXQgdGhlcmUuDQoN CiAgICAgICAgICBpdi4gICAgIFRoZSBtaXNiZWhhdmluZyBub2RlIGlzIGEgY2xhc3NpZmllcjog VGhlIGltcGxpY2F0aW9ucyB3aWxsIGJlIHNldmVyZSBmcm9tIGEgc2VydmljZSBzdGFuZHBvaW50 LiBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0byBkZXRlY3Qgc3VjaCBjYXNl Lg0KDQogICAgICAgICAgICB2LiAgICAgVGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMgYW4gU0ZGOiBF eGFtcGxlcyBvZiBtaXNiZWhhdmlvcnMgYXJlOiBzdHJpcCBOU0gsIGZvcndhcmQgdG8gYSBub24t YXV0aG9yaXplZCBTRiwgcmVkaXJlY3QgdGhlIHRyYWZmaWMgdG8gYSBub24tYXV0aG9yaXplZCBu b2RlcywgZXRjLiBMaWtlIGZvciB0aGUgY2xhc3NpZmllciBjYXNlLCBOU0ggcmVsaWVzIG9uIE9B TSBhbmQgY29udHJvbC1wbGFuZSB0byBkZXRlY3Qgc3VjaCBjYXNlLg0KDQpBcmUgdGhlcmUgc3Bl Y2lmaWMgYXR0YWNrcyB0aGF0IGFyZSBub3QgbGlzdGVkIGFib3ZlIGFuZCB0aGF0IG5lZWQgbW9y ZSBhdHRlbnRpb24gZnJvbSB0aGUgV0c/DQoNClRoYW5rIHlvdS4NCg0KQ2hlZXJzLA0KTWVkDQoN Cg== --_000_787AE7BB302AE849A7480A190F8B93300A057786OPEXCLILMA3corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAgMDt9 DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIg MiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3Nl LTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNv Tm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJn aW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGlt ZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5l O30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQ YXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGNtOw0KCW1h cmdpbi1yaWdodDowY207DQoJbWFyZ2luLWJvdHRvbTowY207DQoJbWFyZ2luLWxlZnQ6MzYuMHB0 Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KcC5nbWFpbC1tLTEzNjk0ODUzODA5Njk3 NTg2NzVtc29saXN0cGFyYWdyYXBoLCBsaS5nbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29s aXN0cGFyYWdyYXBoLCBkaXYuZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFn cmFwaA0KCXttc28tc3R5bGUtbmFtZTpnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlz dHBhcmFncmFwaDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGNt Ow0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBjbTsNCglmb250 LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0K c3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjpibGFjazsNCglmb250LXdlaWdodDpub3Jt YWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KQHBhZ2UgV29y ZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3MC44NXB0IDcwLjg1 cHQgNzAuODVwdCA3MC44NXB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MTAw MTQ3MjI4OTsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6 NTk0OTg3MzI4IC0xOTQwNzM2ODEwIDY3ODk1Mjk5IDY3ODk1MzAxIDY3ODk1Mjk3IDY3ODk1Mjk5 IDY3ODk1MzAxIDY3ODk1Mjk3IDY3ODk1Mjk5IDY3ODk1MzAxO30NCkBsaXN0IGwwOmxldmVsMQ0K CXttc28tbGV2ZWwtc3RhcnQtYXQ6MDsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7 DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQt ZmFtaWx5OlN5bWJvbDsNCgltc28tZmFyZWFzdC1mb250LWZhbWlseTpDYWxpYnJpOw0KCW1zby1i aWRpLWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iO30NCkBsaXN0IGwwOmxldmVsMg0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0 IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5Oldpbmdk aW5nczt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250 LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0 Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxl dmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpA bGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s ZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsN Cglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KdWwN Cgl7bWFyZ2luLWJvdHRvbTowY207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3ht bD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6 ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBl bGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRlIiIGxpbms9 ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+SGkgQWxp YSwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5U aGFuayB5b3UgZm9yIHRoZSBmZWVkYmFjay4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5QbGVhc2Ugc2VlIGlubGluZS4NCjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5DaGVlcnMsPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj5NZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUg MS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNt IDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IEFsaWEgQXRsYXMgW21haWx0bzpha2F0bGFzQGdtYWls LmNvbV0NCjxicj4NCjxiPkVudm95w6kmbmJzcDs6PC9iPiBqZXVkaSAxOSBvY3RvYnJlIDIwMTcg MjA6NTA8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IEJPVUNBREFJUiBNb2g8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDsiPmFtZWQgSU1UL09MTjxicj4NCjxiPkNjJm5ic3A7OjwvYj4gc2Zj QGlldGYub3JnOyBLYXRobGVlbiBNb3JpYXJ0eTsgRXJpYyBSZXNjb3JsYTxicj4NCjxiPk9iamV0 Jm5ic3A7OjwvYj4gUmU6IE5TSCBESVNDVVNTIFN0YXR1czxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBNZWQsPG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TaW5jZSB5b3UgZGlyZWN0ZWQgdGhpcyBhdCBt ZTxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBJ IHNlbnQgaXQgdG8geW91IGJlY2F1c2UgeW91IGFyZSBvdXIgQUQgYW5kIEkgd2FzIHN1cmUgeW91 IGhhdmUgYSBmdWxsIHZpc2liaWxpdHkgb24gb25nb2luZyBkaXNjdXNzaW9ucyBhbmQgcGVuZGlu ZyBpc3N1ZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+LCB0aGVyZSBhcmUg ZWZmb3J0cyB0byBoYXZlIHNvbWUgZGlzY3Vzc2lvbnMgYW5kIHVuZGVyc3RhbmQgYmV0dGVyIHRo ZSBwYXJ0aWN1bGFyIHRocmVhdHMuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkN1cnJlbnRseSwgdGhlcmUgaXMgbm8gdHJhbnNw b3J0IHdpdGggaW50ZWdyaXR5IHByb3RlY3Rpb24gdGhhdCBpcyBldmVuIGEgU0hPVUxEIHRvIGlt cGxlbWVudCwgbXVjaCBsZXNzIGEgTVVTVC48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+ PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01l ZF0gQWdyZWUuIEJ1dC4uIHRoZSBxdWVzdGlvbiBBbGlhIGlzIHRvIHVuZGVyc3RhbmQgd2hhdCBh dHRhY2tzIGJ1aWx0LWluIGludGVncml0eSBwcm90ZWN0aW9uIHdpbGwgcHJldmVudC9zb2x2ZS4g SXMgdGhlcmUgYSBwb2ludGVyIHdoZXJlIHdlIGNhbiBmaW5kDQogYSBkZXNjcmlwdGlvbiBvZiBz dWNoIGF0dGFja3M/ICZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZu YnNwOyBUaGVyZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5pcyBubyBjb250cm9sLXBsYW5lIGRlZmlu ZWQgKGJleW9uZCB0aGUgQkdQIHdvcmspIHRoYXQgZGVzY3JpYmVzIGRldGVjdGluZyBpc3N1ZXMu PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIFRoZSBXRyBwcm9kdWNlZCBhIHNldCBv ZiBzZWN1cml0eSByZXF1aXJlbWVudHMgdGhhdCBuZWVkIHRvIGJlIG1ldCBieSBhbnkgU0ZDIENQ IHNvbHV0aW9uLiBUaGUgc2VjdXJpdHkgcmV2aWV3IG9mIHRob3NlIHJlcXVpcmVtZW50cyBzYWlk OiDigJxJdCBpcyB2ZXJ5DQogd2VsbC10aG91Z2h0IG91dCBhbmQgY29tcHJlaGVuc2l2ZeKAnS4g SU1ITywgd2UgZG9u4oCZdCBuZWVkIENQIHNvbHV0aW9ucyB0byBiZSBsaXN0ZWQgYXMgbm9ybWF0 aXZlIGJlY2F1c2UgdGhlIE5TSCBpcyBhIGRhdGEtcGxhbmUgc29sdXRpb247IENQLXJlbGF0ZWQg YXNwZWN0cyBhcmUgb3V0IG9mIHNjb3BlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiPiZuYnNwOyBUaGVyZSBpcyBubyBPQU0gZGVmaW5lZCBhbmQgYWRvcHRlZDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIj5iPC9zcGFuPnkgdGhlIFdHIHRoYXQgZGV0ZWN0cyBvciBoYW5kbGVzIHRoZXNl IHR5cGVzIG9mIGF0dGFja3MuPHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gVGhlIFdHIGhhcyBh bHJlYWR5IGEgZnJhbWV3b3JrIGRvY3VtZW50IHRvIGRlc2NyaWJlIHJlcXVpcmVkIGZlYXR1cmVz IChlLmcuLCB0cmFjZSkgdG8gYXNzZXNzIHdoZXRoZXIgdGhlIGJlaGF2aW9yIG9mIGFuIHVuZGVy bHlpbmcgU0ZDLWVuYWJsZWQgZG9tYWluDQogaXMgYWxpZ25lZCB3aXRoIHRoZSBleHBlY3RlZCBT RkMgYmVoYXZpb3IgKGRyYWZ0LWlldGYtc2ZjLW9hbS1mcmFtZXdvcmspLiBBZGRpbmcgYW4gaW5m b3JtYXRpdmUgcG9pbnRlciB0byB0aGF0IGRvY3VtZW50IGlzIHN1ZmZpY2llbnQgZm9yIHRoZSBj dXJyZW50IE5TSCBkaXNjdXNzaW9uLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyI+SSBzZWUgdGhlIHN0cnVjdHVyZSB0aGF0IHlvdSBhcmUgcHJlc3VtaW5nLCBidXQgbm9uZSBv ZiB0aGVzZSBhcmU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5hdmFpbGFibGUgYXMgbm9ybWF0aXZlIHJlZmVyZW5jZXMgdG8gTlNIIHRv ZGF5LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gVHdvIGNvbW1lbnRzIGhl cmU6DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIg c3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjwhW2lm ICFzdXBwb3J0TGlzdHNdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpTeW1ib2w7Y29sb3I6YmxhY2siPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJ Z25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwv c3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPlRoZXNlIHJlZmVyZW5jZXMgZG8gbm90IG5lZWQgdG8gYmUg4oCcbm9ybWF0aXZl4oCd IGZvciBOU0ggZm9yIHRoZSBzaW1wbGUgcmVhc29uIHRoYXQgYW4g4oCcaW1wbGVtZW50ZXLigJ0g b2YgTlNIIHNwZWMgZG9lcyBub3QgbmVlZCB0byByZWFkIHRob3NlIGRvY3VtZW50cy4NCiBUaGlz IGlzIHRoZSBkZWZpbml0aW9uIG9mIOKAnG5vcm1hdGl2ZeKAnSB2cyDigJxpbmZvcm1hdGl2ZeKA nS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5 bGU9InRleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjwhW2lmICFz dXBwb3J0TGlzdHNdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTpTeW1ib2w7Y29sb3I6YmxhY2siPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25v cmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bh bj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6Ymxh Y2siPkkgYWdyZWUgdGhvc2UgYXJlIGltcG9ydGFudCBmb3IgdGhlIGVudGl0eSB0aGF0IHdpbGwg b3BlcmF0ZSBhbiDigJxTRkMgZG9tYWlu4oCdIHRoYXQgaXMgYSBjb2xsZWN0aW9uIG9mIFNGQyBk YXRhLXBsYW5lIHNvbHV0aW9uIChpLmUuLCBOU0gpLCBTRkMgY29udHJvbC1wbGFuZQ0KIHByb3Rv Y29sKHMpLCBhbmQgU0ZDIE9BTSBwcm90b2NvbHMuIE5TSCBpcyBub3QgZGVmaW5pbmcgc3VjaCBj b2xsZWN0aW9uLiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiPkkgaGFkIHJlY29tbWVuZGVkIGhhdmluZyBhIGZvY3VzZWQgaW50ZXJpbSBtZWV0aW5nIHRv IG1ha2Ugc3VyZSB0aGF0IGV2ZXJ5b25lIGNvbmNlcm5lZCB1bmRlcnN0b29kIHRoZSBpc3N1ZXMg YW5kPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPndvcjwvc3Bhbj5rZWQgdGhyb3VnaCB0aGUgdGhyZWF0 IGFuYWx5c2lzIGFuZCBwb3NzaWJsZSBzb2x1dGlvbnMgdG9nZXRoZXIuIEF0IHRoaXMgcG9pbnQs IGNsZWFybHkgdGhlIG1vc3QgdGhhdCBjb3VsZCBoYXBwZW4gaXMgYTxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+dmlydHVhbCBpbnRlcmltLiZuYnNw OyBUaGVyZSBhcmUgc29tZSBiYWNrZ3JvdW5kIGRpc2N1c3Npb25zIGdvaW5nIG9uLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGRvIG5vdCB3 YW50IHRvIGFzc3VtZSB3aGF0IG1peHR1cmUgd2lsbCBiZSBhY2NlcHRhYmxlIHRvIGhhbmRsZSB0 aGUgc2VjdXJpdHkgY29uY2VybnMgZXhwcmVzc2VkIGJ5IEthdGhsZWVuIGFuZCBFcmljPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBXaGF0IHdvdWxkIGJlIHJlYWxseSB2YWx1 YWJsZSBhbmQgaGVscGZ1bCBmb3IgdGhlIFdHIGlzIHRvIHVuZGVyc3RhbmQgYXR0YWNrIHZlY3Rv cnMgdGhhdCBhcmUgbm90IGNvdmVyZWQgaW4gdGhlIHRocmVhdCBtb2RlbCBJIGRlc2NyaWJlZC4g SeKAmW0gc3VyZQ0KIEthdGhsZWVuIGFuZCBFcmljIGNhbiBoZWxwIHVzIHdpdGggc2tldGNoaW5n IHNvbWUgYXR0YWNrIGV4YW1wbGVzIHRoYXQgdHJpZ2dlcmVkIHRoZWlyIGNvbW1lbnRzLiAmbmJz cDsmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmFuZCBzdXBwb3J0ZWQgYnkg YSBudW1iZXIgb2Ygb3RoZXIgQURzLjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+SSBkbyBncmVhdGx5IGFwcHJlY2lhdGUgeW91ciBhdHRlbnRpb24gYW5kIGVm Zm9ydHMgdG8gY2xhcmlmeSBhbmQgdHJ5IHRvIG1vdmUgdGhpcyB3b3JrIGZvcndhcmQuIEkgaGF2 ZSBiZWVuIGV4cHJlc3NpbmcgY29uY2VybnM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPmFib3V0IHRoZSBzZWN1cml0eSBhc3BlY3RzIG9mIHRoaXMg d29yayBzaW5jZSBSRkMgNzY2NSB3ZW50IHRocm91Z2ggdGhlIHB1YmxpY2F0aW9uIHByb2Nlc3Mg LSBhbmQgc3Ryb25nbHkgZW5jb3VyYWdpbmcgc2VyaW91czxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V0cgZm9jdXMgdG8gcHJldmVudCBwcmVjaXNl bHkgd2hhdCBoYXMgbm93IGhhcHBlbmVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBUaGFuayB5 b3UuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5BbGlhPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPk9uIFRodSwgT2N0IDE5LCAyMDE3IGF0IDQ6NDkgQU0sICZsdDs8YSBocmVmPSJt YWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPm1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+SGkgQWxpYSwNCjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij5DYW4geW91IHBsZWFzZSBzaGFyZSB3aXRoIHVzIHRoZSBjdXJyZW50 IHN0YXR1cyBvZiB0aGUgZG9jdW1lbnQgYW5kIHRoZSBsaXN0IG9mIHBlbmRpbmcgYmxvY2tpbmcg cG9pbnRzPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+SSB3ZW50IHRocm91Z2ggYWxs IHB1YmxpYyBlbWFpbCBleGNoYW5nZXMsIGVzcGVjaWFsbHkgdGhlIG9uZXMgcmVsYXRlZCB0byBz ZWN1cml0eSwgYnV0IGl0IGlzIG5vdCB0aGF0IGVhc3kNCiB0byB1bmRlcnN0YW5kIHdoYXQgYXJl IHRoZSByZW1haW5pbmcgaXNzdWVzIHRoYXQgbmVlZCBmaXhlcy48L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPkluIHBhcnRpY3VsYXIsIGlzIHRoZXJlIGEgY29uY2VybiB3aXRoIGFzc3Vt aW5nIHRoZSBjdXJyZW50IE5TSCB0aHJlYXQgbW9kZWw/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVt c29saXN0cGFyYWdyYXBoIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjEuPC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPk5TSCBpcyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGluZHVjZWQgYnkg bm9kZXMgdGhhdCBpbmplY3QgKHNwb29mZWQpIE5TSCBiZWZvcmUgZW50ZXJpbmcgYW4gU0ZDLWVu YWJsZWQgZG9tYWluLiBJbmRlZWQsIFNGQyBpbmdyZXNzIG5vZGVzIE1VU1QgZGlzY2FyZCBwYWNr ZXRzIGNhcnJ5aW5nIE5TSC48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iZ21haWwt bS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij4yLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+ Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5OU0ggaXMgc2VjdXJlIGFnYWlu c3QgYXR0YWNrcyBmcm9tIHdpdGhpbiB0aGUgU0ZDLWVuYWJsZWQgZG9tYWluIHRvIGluamVjdCBu b24tYXV0aG9yaXplZCBjb250ZXh0IGhlYWRlcnMuIEZyb20gYSBzZXJ2aWNlIHBlcnNwZWN0aXZl LCB0aGUgZ3VhcmQgaXMgdGhlIENQIHdoaWNoIGlzIHJlc3BvbnNpYmxlIGZvcg0KIGluc3RydWN0 aW5nIHRoZSBTRkMtYXdhcmUgbm9kZXMgYWJvdXQgdGhlIG1hbmRhdG9yeS10by1wcm9jZXNzIGFu ZCBvcHRpb25hbC10by1wcm9jZXNzIGNvbnRleHQgaGVhZGVycy4gRnVydGhlcm1vcmUsIHdoYXRl dmVyIHRoZSBvcmlnaW4gb2YgYSBzdXBwbGllZCBjb250ZXh0IGhlYWRlciwgdGhlIGxhc3QgU0ZG IG9mIGEgY2hhaW4gKGFuZCBlZ3Jlc3Mgbm9kZXMpIE1VU1QgcmVtb3ZlIHRoZSBOU0ggYmVmb3Jl IGZvcndhcmRpbmcgdXBzdHJlYW0uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Imdt YWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+My48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4w cHQiPiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+TlNIIGlzIHNlY3VyZSBh Z2FpbnN0IGxlYWtpbmcgcHJpdmFjeSBpbmZvcm1hdGlvbiBvdXRzaWRlIGFuIFNGQyBlbmFibGVk IGRvbWFpbi4gVGhlIGxhc3QgU0ZGIG9mIGEgY2hhaW4gKGFuZCBlZ3Jlc3Mgbm9kZXMpIE1VU1Qg cmVtb3ZlIHRoZSBOU0ggYmVmb3JlIGZvcndhcmRpbmcgdXBzdHJlYW0uPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJh Z3JhcGgiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+NC48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+TlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGluZGVmaW5pdGUgU0YvU0ZGIGxvb3BzIGJ5IG1l YW5zIG9mIFNJIGFuZCBUVEwgZmllbGRzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPjUuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkNvbnRyb2wgcGxh bmUgc3BlY2lmaWMgdGhyZWF0cyBhcmUgb3V0IG9mIHNjb3BlLCBidXQgdGhlIGRvY3VtZW50IGNp dGVzIEktRC5pZXRmLXNmYy1jb250cm9sLXBsYW5lIGZvciB0aGUgZXhwZWN0ZWQgYmVoYXZpb3Ig d2hlbiBpbnN0cnVjdGluZyBTRkMgbm9kZXMuIEJUVywgdGhlIHNlY2RpciByZXZpZXcgb2YgdGhl DQogQ1AgcmVxdWlyZW1lbnRzIGNhbiBiZSByZXRyaWV2ZWQgaGVyZSAoPGEgaHJlZj0iaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvcmV2aWV3LWlldGYtc2ZjLWNvbnRyb2wtcGxhbmUt MDItc2VjZGlyLWVhcmx5LW1lYWRvd3MtMjAxNS0xMi0xMC8iIHRhcmdldD0iX2JsYW5rIj5odHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9yZXZpZXctaWV0Zi1zZmMtY29udHJvbC1wbGFu ZS0wMi1zZWNkaXItZWFybHktbWVhZG93cy0yMDE1LTEyLTEwLzwvYT4pLg0KPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3Rw YXJhZ3JhcGgiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Ni48L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+TlNIIGRvZXMgbm90IHNoYXJlIHByaXZhY3kgZGF0YSB3aXRoIG5vbi1hdXRob3Jp emVkIHBhcnRpZXMuIEluZGVlZCwgZGF0YSBjYXJyaWVkIGluIGNvbnRleHQgaGVhZGVycyBhcmUg ZGVyaXZlZCBmcm9tIHRoZSBvcmlnaW5hbCBwYWNrZXQgKGUuZy4sIHNvdXJjZSBJUCBhZGRyZXNz KSBvciBhcmUgYWxyZWFkeSBrbm93bg0KIHRvIHRoZSBvcGVyYXRvciAoZS5nLiwgc3Vic2NyaWJl ciBpZGVudGlmaWVyLCBwb2xpY3kgaWRlbnRpZmllciwgc2VydmljZSBpZGVudGlmaWVyKS4gVGhl IGNvbnRleHQgaW5mb3JtYXRpb24gaXMgc2hhcmVkIHdpdGggbm9kZXMgdGhhdCBhcmUgd2l0aGlu IHRoZSBzYW1lIGFkbWluaXN0cmF0aXZlIGRvbWFpbi4gJm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3Jh cGgiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Ny48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+TGlrZSBvdGhlciBjb21tdW5pY2F0aW9uIHByb3RvY29scywgYXR0YWNrcyBmcm9tIHdpdGhp biB0aGUgbmV0d29yayBhcmUgcG9zc2libGUsIGJ1dCB0aG9zZSBhcmUgc29mdGVuIGJ5IHJlbHlp bmcgb24gdGhlIHByb2NlZHVyZXMgcHV0IGluIHBsYWNlIGJ5IG9wZXJhdG9ycyBmb3IgdGVzdGlu ZyBhbmQgdmFsaWRhdGluZw0KIG5vZGVzL2ZlYXR1cmVzIGJlZm9yZSBhY3R1YWwgYWN0aXZhdGlv bi4gTlNIIGRvZXMgbm90IHByb3ZpZGUgYSBidWlsdC1pbiBmZWF0dXJlIHRvIHByZXZlbnQgbWlz YmVoYXZpbmcgbm9kZXMsIGJ1dCByZWNvbW1lbmRzIHRvIHJlbHkgb24gdGhlIHNlY3VyaXR5IGZl YXR1cmVzIHByb3ZpZGVkIGJ5IHRoZSB1bmRlcmx5aW5nIHRyYW5zcG9ydCBlbmNhcHN1bGF0aW9u IHNjaGVtZXMuDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkxldOKAmXMgbm93IGZv Y3VzIG9uIHRoZSB0eXBpY2FsIOKAnGF0dGFja3PigJ0gdGhhdCBjYW4gYmUgaXNzdWVkIGZyb20g d2l0aGluIHRoZSBuZXR3b3JrOg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Imdt YWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+MS48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4w cHQiPiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+QSBtaXNiZWhhdmluZyBu b2RlIHJlZGlyZWN0IHRoZSB0cmFmZmljIHRvIG5vbi1hdXRob3JpemVkIG5vZGVzIG91dHNpZGUg YSBkb21haW46IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy48L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4yLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5B IG1pc2JlaGF2aW5nIFNGQy11bndhcmUgbm9kZSBhbHRlcnMgdGhlIGNvbnRlbnQgb2YgYSBwYWNr ZXQ6IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4zLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5BIG1pc2Jl aGF2aW5nIFNGQy1hd2FyZSBub2RlIGFsdGVycyB0aGUgY29udGVudCBvZiBOU0g6PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xp c3RwYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPg0KPHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3NwYW4+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij5pLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3 LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij5JdCByZW1vdmVzIHRoZSBOU0ggaGVhZGVyIGZyb20gYWxsIHBhY2tldHMgaXQgc2Vlczog VGhpcyB3aWxsIGltcGx5IHRoYXQgdGhlIHBhY2tldHMsIHRoZSBtaXNiZWhhdmluZyBub2RlIGlu dGVyY2VwdHMsIHdpbGwgYmUgZm9yd2FyZGVkIHVwc3RyZWFtIHdpdGhvdXQgaW52b2tpbmcgdGhl IHJlcXVpcmVkIFNGcw0KICh3aGljaCBtYXkgYmUgc2VlbiBhcyBhIGZlYXR1cmUsIG5vdCBhIGJ1 ZyBpZiBvbmUgZGlzbGlrZXMg4oCcbWlkZGxlYm94ZXPigJ0gOikpLiBNb3JlIHNlcmlvdXNseSwg dGhlIE9BTSBOU0ggZmVhdHVyZSB3aWxsIGFsbG93IGFuIG9wZXJhdG9yIHRvIGRldGVjdCB3aGV0 aGVyIE5TSCBwYWNrZXRzIGFyZSB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5z dHJ1Y3Rpb25zIG9mIHRoYXQgZG9tYWluLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSB3aWxsDQogaGVs cCBkZXRlY3RpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUuIDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIiBz dHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+aWkuPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkl0IG1vZGlmaWVzIHRoZSBjb250 ZW50IG9mIFNQSTogVGhpcyB3aWxsIGltcGx5IHRoYXQgdGhlc2UgcGFja2V0cyB3aWxsIGJlIGZv cndhcmRlZCBvdmVyIGEgd3JvbmcgcGF0aC4gQWdhaW4sIHJ1bm5pbmcgT0FNIE5TSCB3aWxsIGFs bG93IHRoZSBvcGVyYXRvciB0byBkZXRlY3Qgd2hldGhlciBhIHBhY2tldCBpcw0KIHRyYXZlbGxp bmcgaW4gYWNjb3JkYW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMuIFJ1bm5pbmcgdGhhdCBmZWF0 dXJlIHJlZ3VsYXJseSB3aWxsIGhlbHAgaWRlbnRpZnlpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUg YW5kIHdoZXRoZXIgdGhlIFNGQyBjb25maWd1cmF0aW9uIG9mIGEgZG9tYWluIGlzIGFsaWduZWQg d2l0aCB0aGUgZXhwZWN0ZWQgYmVoYXZpb3IuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9ImdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiIHN0eWxlPSJt YXJnaW4tbGVmdDo3Mi4wcHQiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 Ny4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5paWkuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPkl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNJL1RUTDogVGhp cyB3aWxsIGluY3JlYXNlIHRoZSBhdXRob3JpemVkIG1heGltdW0gU0ZGL1NGIGhvcHMuIE5vdCBz dXJlIGlmIHRoZXJlIGlzIGEgc2VjdXJpdHkgcHJvYmxlbSBvdXQgdGhlcmUuDQo8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlz dHBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+DQo8c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPml2 Ljwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5UaGUgbWlz YmVoYXZpbmcgbm9kZSBpcyBhIGNsYXNzaWZpZXI6IFRoZSBpbXBsaWNhdGlvbnMgd2lsbCBiZSBz ZXZlcmUgZnJvbSBhIHNlcnZpY2Ugc3RhbmRwb2ludC4gTlNIIHJlbGllcyBvbiBPQU0gYW5kIGNv bnRyb2wtcGxhbmUgdG8gZGV0ZWN0IHN1Y2ggY2FzZS4gJm5ic3A7Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3Rw YXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPg0KPHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij52Ljwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBw dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij5UaGUgbWlzYmVoYXZpbmcgbm9kZSBpcyBhbiBTRkY6IEV4YW1wbGVzIG9mIG1pc2JlaGF2aW9y cyBhcmU6IHN0cmlwIE5TSCwgZm9yd2FyZCB0byBhIG5vbi1hdXRob3JpemVkIFNGLCByZWRpcmVj dCB0aGUgdHJhZmZpYyB0byBhIG5vbi1hdXRob3JpemVkIG5vZGVzLCBldGMuIExpa2UgZm9yIHRo ZSBjbGFzc2lmaWVyDQogY2FzZSwgTlNIIHJlbGllcyBvbiBPQU0gYW5kIGNvbnRyb2wtcGxhbmUg dG8gZGV0ZWN0IHN1Y2ggY2FzZS4gJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5BcmUgdGhlcmUgc3BlY2lmaWMgYXR0YWNr cyB0aGF0IGFyZSBub3QgbGlzdGVkIGFib3ZlIGFuZCB0aGF0IG5lZWQgbW9yZSBhdHRlbnRpb24g ZnJvbSB0aGUgV0c/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5UaGFuayB5b3UuPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5DaGVlcnMsPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPk1lZDwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_787AE7BB302AE849A7480A190F8B93300A057786OPEXCLILMA3corp_-- From nobody Fri Oct 20 06:31:18 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 913C21320D8 for ; Fri, 20 Oct 2017 06:31:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.519 X-Spam-Level: X-Spam-Status: No, score=-14.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zLvC4WM15O5J for ; Fri, 20 Oct 2017 06:31:15 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5D8D1331D9 for ; Fri, 20 Oct 2017 06:31:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=38272; q=dns/txt; s=iport; t=1508506274; x=1509715874; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=QaJGReN8buwA8mjpFpQ3XZs21O5FAuTcuWerlT6TasI=; b=eXOMdEIuHj9lW7TECgYrvo7KPrZApW/kNniEkW7dR2IyZhF4LtsDqMSw kqpLg6sC5NJo6u+7uDg1CviaZXfXiLwEhnzrh0YPxeeLBRRvtEk1XDYAx jEVeXRrR3rj77Nv/bH9KbY2QlGrvVJ0rgj2tvrZZm/iZMmjM4tAnFQlKO s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DuAABz+elZ/4YNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9wZG4nB4Nzih+PP4FUiHCNbRCBfgMKGAEMhRYCGoQfPxgBAgE?= =?us-ascii?q?BAQEBAQFrKIUeAgEDAQEhRAcLEAIBCA4qAQYDAgICHwYLFBEBAQQOBRQHiSFMA?= =?us-ascii?q?xUQqgKCJ4c6DYNZAQEBAQEBAQEBAQEBAQEBAQEBAQEBGAWDLoIHgVCBaSkLgna?= =?us-ascii?q?CXoFrCQESAYMzL4IyBYdNgjyOZog0PAKHYYdFUIR5ghWFeYsRjQqIQwIRGQGBO?= =?us-ascii?q?AEfOIEDWHoVSS0BgjaCI4I8dogeDRgHgQWBEQEBAQ?= X-IronPort-AV: E=Sophos;i="5.43,405,1503360000"; d="scan'208,217";a="299800954" Received: from alln-core-12.cisco.com ([173.36.13.134]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Oct 2017 13:31:13 +0000 Received: from XCH-ALN-010.cisco.com (xch-aln-010.cisco.com [173.36.7.20]) by alln-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id v9KDVDgL026852 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 20 Oct 2017 13:31:13 GMT Received: from xch-rcd-008.cisco.com (173.37.102.18) by XCH-ALN-010.cisco.com (173.36.7.20) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 20 Oct 2017 08:31:13 -0500 Received: from xch-rcd-008.cisco.com ([173.37.102.18]) by XCH-RCD-008.cisco.com ([173.37.102.18]) with mapi id 15.00.1320.000; Fri, 20 Oct 2017 08:31:12 -0500 From: "Paul Quinn (paulq)" To: Alia Atlas CC: "mohamed.boucadair@orange.com" , "Kathleen Moriarty" , Eric Rescorla , "sfc@ietf.org" Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wAfdV8AACco6AA= Date: Fri, 20 Oct 2017 13:31:12 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.19.17.229] Content-Type: multipart/alternative; boundary="_000_BC3952F395444E03B73C78AFFD870446ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 13:31:17 -0000 --_000_BC3952F395444E03B73C78AFFD870446ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWxpYSwNCg0KDQoNCk9uIE9jdCAxOSwgMjAxNywgYXQgMjo0OSBQTSwgQWxpYSBBdGxhcyA8 YWthdGxhc0BnbWFpbC5jb208bWFpbHRvOmFrYXRsYXNAZ21haWwuY29tPj4gd3JvdGU6DQoNCkhp IE1lZCwNCg0KU2luY2UgeW91IGRpcmVjdGVkIHRoaXMgYXQgbWUsIHRoZXJlIGFyZSBlZmZvcnRz IHRvIGhhdmUgc29tZSBkaXNjdXNzaW9ucyBhbmQgdW5kZXJzdGFuZCBiZXR0ZXIgdGhlIHBhcnRp Y3VsYXIgdGhyZWF0cy4NCkN1cnJlbnRseSwgdGhlcmUgaXMgbm8gdHJhbnNwb3J0IHdpdGggaW50 ZWdyaXR5IHByb3RlY3Rpb24gdGhhdCBpcyBldmVuIGEgU0hPVUxEIHRvIGltcGxlbWVudCwgbXVj aCBsZXNzIGEgTVVTVC4gIFRoZXJlDQppcyBubyBjb250cm9sLXBsYW5lIGRlZmluZWQgKGJleW9u ZCB0aGUgQkdQIHdvcmspIHRoYXQgZGVzY3JpYmVzIGRldGVjdGluZyBpc3N1ZXMuICBUaGVyZSBp cyBubyBPQU0gZGVmaW5lZCBhbmQgYWRvcHRlZA0KYnkgdGhlIFdHIHRoYXQgZGV0ZWN0cyBvciBo YW5kbGVzIHRoZXNlIHR5cGVzIG9mIGF0dGFja3MuIEkgc2VlIHRoZSBzdHJ1Y3R1cmUgdGhhdCB5 b3UgYXJlIHByZXN1bWluZywgYnV0IG5vbmUgb2YgdGhlc2UgYXJlDQphdmFpbGFibGUgYXMgbm9y bWF0aXZlIHJlZmVyZW5jZXMgdG8gTlNIIHRvZGF5Lg0KDQoNCk9BTSBkb2VzIG5vdCBhZGRyZXNz IHRoZSBzZWN1cml0eSBjb25jZXJuIGFyb3VuZCBpbnRlZ3JpdHkgYW5kIGRldmljZXMuICBJZiB5 b3UgYW5kIHRoZSBXRyBiZWxpZXZlIE9BTSBpcyB0aGUgbmV4dCDigJx0byBkb+KAnSBmb3IgdGhl IFdHLCB0aGF04oCZcyBmaW5lLCBidXQgaXTigJlzIG9ydGhvZ29uYWwgdG8gdGhlIHNlY3VyaXR5 IHBvaW50cyByYWlzZWQuDQoNCg0KSSBoYWQgcmVjb21tZW5kZWQgaGF2aW5nIGEgZm9jdXNlZCBp bnRlcmltIG1lZXRpbmcgdG8gbWFrZSBzdXJlIHRoYXQgZXZlcnlvbmUgY29uY2VybmVkIHVuZGVy c3Rvb2QgdGhlIGlzc3VlcyBhbmQNCndvcmtlZCB0aHJvdWdoIHRoZSB0aHJlYXQgYW5hbHlzaXMg YW5kIHBvc3NpYmxlIHNvbHV0aW9ucyB0b2dldGhlci4NCg0KTGV04oCZcyBwbGVhc2Ugbm90IGNv bmZsYXRlIHRoZSBvbmdvaW5nIHNlY3VyaXR5IGRpc2N1c3Npb24gd2l0aCBPQU0sIG9yIG90aGVy IHRvcGljcy4gIFRoZSBzZWN1cml0eSByZWFsaXR5LCBhcyB5b3UgcG9pbnRlZCBvdXQgaW4geW91 ciBlbWFpbCB0byBFcmljLCBpcyB0aGF0IHdlLCBhcyBhIGNvbW11bml0eSBhbmQgaW5kdXN0cnks IGFjY2VwdCBhIGxldmVsIG9mIHRydXN0IHdydCBuZXR3b3JrIGRldmljZXMuICBUaGUgb25nb2lu ZyBlZGl0cyBhbmQgZGlhbG9ndWUgd2l0aCBLYXRobGVlbiBhbmQgRXJpYyBhcmUgd29ya2luZyB0 aHJvdWdoIHRoZWlyIGNvbmNlcm5zLiAgQW4gaW50ZXJpbSB0byB0YWxrIGFib3V0IG5leHQgU0ZD IHN0ZXBzLCBwb3N0IE5TSCwgaXMgYSBkaWZmZXJlbnQgbWF0dGVyLg0KDQoNCg0KQXQgdGhpcyBw b2ludCwgY2xlYXJseSB0aGUgbW9zdCB0aGF0IGNvdWxkIGhhcHBlbiBpcyBhDQp2aXJ0dWFsIGlu dGVyaW0uICBUaGVyZSBhcmUgc29tZSBiYWNrZ3JvdW5kIGRpc2N1c3Npb25zIGdvaW5nIG9uLg0K DQpJIGRvIG5vdCB3YW50IHRvIGFzc3VtZSB3aGF0IG1peHR1cmUgd2lsbCBiZSBhY2NlcHRhYmxl IHRvIGhhbmRsZSB0aGUgc2VjdXJpdHkgY29uY2VybnMgZXhwcmVzc2VkIGJ5IEthdGhsZWVuIGFu ZCBFcmljDQphbmQgc3VwcG9ydGVkIGJ5IGEgbnVtYmVyIG9mIG90aGVyIEFEcy4NCg0KSSBkbyBn cmVhdGx5IGFwcHJlY2lhdGUgeW91ciBhdHRlbnRpb24gYW5kIGVmZm9ydHMgdG8gY2xhcmlmeSBh bmQgdHJ5IHRvIG1vdmUgdGhpcyB3b3JrIGZvcndhcmQuIEkgaGF2ZSBiZWVuIGV4cHJlc3Npbmcg Y29uY2VybnMNCmFib3V0IHRoZSBzZWN1cml0eSBhc3BlY3RzIG9mIHRoaXMgd29yayBzaW5jZSBS RkMgNzY2NSB3ZW50IHRocm91Z2ggdGhlIHB1YmxpY2F0aW9uIHByb2Nlc3MgLSBhbmQgc3Ryb25n bHkgZW5jb3VyYWdpbmcgc2VyaW91cw0KV0cgZm9jdXMgdG8gcHJldmVudCBwcmVjaXNlbHkgd2hh dCBoYXMgbm93IGhhcHBlbmVkLg0KDQpSZWdhcmRzLA0KQWxpYQ0KDQoNCk9uIFRodSwgT2N0IDE5 LCAyMDE3IGF0IDQ6NDkgQU0sIDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzpt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPj4gd3JvdGU6DQpIaSBBbGlhLA0KDQpDYW4geW91 IHBsZWFzZSBzaGFyZSB3aXRoIHVzIHRoZSBjdXJyZW50IHN0YXR1cyBvZiB0aGUgZG9jdW1lbnQg YW5kIHRoZSBsaXN0IG9mIHBlbmRpbmcgYmxvY2tpbmcgcG9pbnRzPw0KDQpJIHdlbnQgdGhyb3Vn aCBhbGwgcHVibGljIGVtYWlsIGV4Y2hhbmdlcywgZXNwZWNpYWxseSB0aGUgb25lcyByZWxhdGVk IHRvIHNlY3VyaXR5LCBidXQgaXQgaXMgbm90IHRoYXQgZWFzeSB0byB1bmRlcnN0YW5kIHdoYXQg YXJlIHRoZSByZW1haW5pbmcgaXNzdWVzIHRoYXQgbmVlZCBmaXhlcy4NCg0KSW4gcGFydGljdWxh ciwgaXMgdGhlcmUgYSBjb25jZXJuIHdpdGggYXNzdW1pbmcgdGhlIGN1cnJlbnQgTlNIIHRocmVh dCBtb2RlbD8NCg0KDQoxLiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGF0dGFja3MgaW5kdWNlZCBi eSBub2RlcyB0aGF0IGluamVjdCAoc3Bvb2ZlZCkgTlNIIGJlZm9yZSBlbnRlcmluZyBhbiBTRkMt ZW5hYmxlZCBkb21haW4uIEluZGVlZCwgU0ZDIGluZ3Jlc3Mgbm9kZXMgTVVTVCBkaXNjYXJkIHBh Y2tldHMgY2FycnlpbmcgTlNILg0KDQoyLiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGF0dGFja3Mg ZnJvbSB3aXRoaW4gdGhlIFNGQy1lbmFibGVkIGRvbWFpbiB0byBpbmplY3Qgbm9uLWF1dGhvcml6 ZWQgY29udGV4dCBoZWFkZXJzLiBGcm9tIGEgc2VydmljZSBwZXJzcGVjdGl2ZSwgdGhlIGd1YXJk IGlzIHRoZSBDUCB3aGljaCBpcyByZXNwb25zaWJsZSBmb3IgaW5zdHJ1Y3RpbmcgdGhlIFNGQy1h d2FyZSBub2RlcyBhYm91dCB0aGUgbWFuZGF0b3J5LXRvLXByb2Nlc3MgYW5kIG9wdGlvbmFsLXRv LXByb2Nlc3MgY29udGV4dCBoZWFkZXJzLiBGdXJ0aGVybW9yZSwgd2hhdGV2ZXIgdGhlIG9yaWdp biBvZiBhIHN1cHBsaWVkIGNvbnRleHQgaGVhZGVyLCB0aGUgbGFzdCBTRkYgb2YgYSBjaGFpbiAo YW5kIGVncmVzcyBub2RlcykgTVVTVCByZW1vdmUgdGhlIE5TSCBiZWZvcmUgZm9yd2FyZGluZyB1 cHN0cmVhbS4NCg0KMy4gIE5TSCBpcyBzZWN1cmUgYWdhaW5zdCBsZWFraW5nIHByaXZhY3kgaW5m b3JtYXRpb24gb3V0c2lkZSBhbiBTRkMgZW5hYmxlZCBkb21haW4uIFRoZSBsYXN0IFNGRiBvZiBh IGNoYWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNIIGJlZm9yZSBmb3J3 YXJkaW5nIHVwc3RyZWFtLg0KDQo0LiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGluZGVmaW5pdGUg U0YvU0ZGIGxvb3BzIGJ5IG1lYW5zIG9mIFNJIGFuZCBUVEwgZmllbGRzLg0KDQo1LiAgQ29udHJv bCBwbGFuZSBzcGVjaWZpYyB0aHJlYXRzIGFyZSBvdXQgb2Ygc2NvcGUsIGJ1dCB0aGUgZG9jdW1l bnQgY2l0ZXMgSS1ELmlldGYtc2ZjLWNvbnRyb2wtcGxhbmUgZm9yIHRoZSBleHBlY3RlZCBiZWhh dmlvciB3aGVuIGluc3RydWN0aW5nIFNGQyBub2Rlcy4gQlRXLCB0aGUgc2VjZGlyIHJldmlldyBv ZiB0aGUgQ1AgcmVxdWlyZW1lbnRzIGNhbiBiZSByZXRyaWV2ZWQgaGVyZSAoaHR0cHM6Ly9kYXRh dHJhY2tlci5pZXRmLm9yZy9kb2MvcmV2aWV3LWlldGYtc2ZjLWNvbnRyb2wtcGxhbmUtMDItc2Vj ZGlyLWVhcmx5LW1lYWRvd3MtMjAxNS0xMi0xMC8pLg0KDQo2LiAgTlNIIGRvZXMgbm90IHNoYXJl IHByaXZhY3kgZGF0YSB3aXRoIG5vbi1hdXRob3JpemVkIHBhcnRpZXMuIEluZGVlZCwgZGF0YSBj YXJyaWVkIGluIGNvbnRleHQgaGVhZGVycyBhcmUgZGVyaXZlZCBmcm9tIHRoZSBvcmlnaW5hbCBw YWNrZXQgKGUuZy4sIHNvdXJjZSBJUCBhZGRyZXNzKSBvciBhcmUgYWxyZWFkeSBrbm93biB0byB0 aGUgb3BlcmF0b3IgKGUuZy4sIHN1YnNjcmliZXIgaWRlbnRpZmllciwgcG9saWN5IGlkZW50aWZp ZXIsIHNlcnZpY2UgaWRlbnRpZmllcikuIFRoZSBjb250ZXh0IGluZm9ybWF0aW9uIGlzIHNoYXJl ZCB3aXRoIG5vZGVzIHRoYXQgYXJlIHdpdGhpbiB0aGUgc2FtZSBhZG1pbmlzdHJhdGl2ZSBkb21h aW4uDQoNCjcuICBMaWtlIG90aGVyIGNvbW11bmljYXRpb24gcHJvdG9jb2xzLCBhdHRhY2tzIGZy b20gd2l0aGluIHRoZSBuZXR3b3JrIGFyZSBwb3NzaWJsZSwgYnV0IHRob3NlIGFyZSBzb2Z0ZW4g YnkgcmVseWluZyBvbiB0aGUgcHJvY2VkdXJlcyBwdXQgaW4gcGxhY2UgYnkgb3BlcmF0b3JzIGZv ciB0ZXN0aW5nIGFuZCB2YWxpZGF0aW5nIG5vZGVzL2ZlYXR1cmVzIGJlZm9yZSBhY3R1YWwgYWN0 aXZhdGlvbi4gTlNIIGRvZXMgbm90IHByb3ZpZGUgYSBidWlsdC1pbiBmZWF0dXJlIHRvIHByZXZl bnQgbWlzYmVoYXZpbmcgbm9kZXMsIGJ1dCByZWNvbW1lbmRzIHRvIHJlbHkgb24gdGhlIHNlY3Vy aXR5IGZlYXR1cmVzIHByb3ZpZGVkIGJ5IHRoZSB1bmRlcmx5aW5nIHRyYW5zcG9ydCBlbmNhcHN1 bGF0aW9uIHNjaGVtZXMuDQoNCkxldOKAmXMgbm93IGZvY3VzIG9uIHRoZSB0eXBpY2FsIOKAnGF0 dGFja3PigJ0gdGhhdCBjYW4gYmUgaXNzdWVkIGZyb20gd2l0aGluIHRoZSBuZXR3b3JrOg0KDQox LiAgQSBtaXNiZWhhdmluZyBub2RlIHJlZGlyZWN0IHRoZSB0cmFmZmljIHRvIG5vbi1hdXRob3Jp emVkIG5vZGVzIG91dHNpZGUgYSBkb21haW46IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy4NCg0K Mi4gIEEgbWlzYmVoYXZpbmcgU0ZDLXVud2FyZSBub2RlIGFsdGVycyB0aGUgY29udGVudCBvZiBh IHBhY2tldDogVGhpcyBpcyBub3QgTlNILXNwZWNpZmljLg0KDQozLiAgQSBtaXNiZWhhdmluZyBT RkMtYXdhcmUgbm9kZSBhbHRlcnMgdGhlIGNvbnRlbnQgb2YgTlNIOg0KDQogICAgICAgICAgICBp LiAgICAgSXQgcmVtb3ZlcyB0aGUgTlNIIGhlYWRlciBmcm9tIGFsbCBwYWNrZXRzIGl0IHNlZXM6 IFRoaXMgd2lsbCBpbXBseSB0aGF0IHRoZSBwYWNrZXRzLCB0aGUgbWlzYmVoYXZpbmcgbm9kZSBp bnRlcmNlcHRzLCB3aWxsIGJlIGZvcndhcmRlZCB1cHN0cmVhbSB3aXRob3V0IGludm9raW5nIHRo ZSByZXF1aXJlZCBTRnMgKHdoaWNoIG1heSBiZSBzZWVuIGFzIGEgZmVhdHVyZSwgbm90IGEgYnVn IGlmIG9uZSBkaXNsaWtlcyDigJxtaWRkbGVib3hlc+KAnSA6KSkuIE1vcmUgc2VyaW91c2x5LCB0 aGUgT0FNIE5TSCBmZWF0dXJlIHdpbGwgYWxsb3cgYW4gb3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRo ZXIgTlNIIHBhY2tldHMgYXJlIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRoIFNGQyBpbnN0 cnVjdGlvbnMgb2YgdGhhdCBkb21haW4uIFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHdpbGwgaGVscCBk ZXRlY3RpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUuDQoNCiAgICAgICAgICBpaS4gICAgIEl0IG1v ZGlmaWVzIHRoZSBjb250ZW50IG9mIFNQSTogVGhpcyB3aWxsIGltcGx5IHRoYXQgdGhlc2UgcGFj a2V0cyB3aWxsIGJlIGZvcndhcmRlZCBvdmVyIGEgd3JvbmcgcGF0aC4gQWdhaW4sIHJ1bm5pbmcg T0FNIE5TSCB3aWxsIGFsbG93IHRoZSBvcGVyYXRvciB0byBkZXRlY3Qgd2hldGhlciBhIHBhY2tl dCBpcyB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5zdHJ1Y3Rpb25zLiBSdW5u aW5nIHRoYXQgZmVhdHVyZSByZWd1bGFybHkgd2lsbCBoZWxwIGlkZW50aWZ5aW5nIHRoZSBtaXNi ZWhhdmluZyBub2RlIGFuZCB3aGV0aGVyIHRoZSBTRkMgY29uZmlndXJhdGlvbiBvZiBhIGRvbWFp biBpcyBhbGlnbmVkIHdpdGggdGhlIGV4cGVjdGVkIGJlaGF2aW9yLg0KDQogICAgICAgIGlpaS4g ICAgIEl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNJL1RUTDogVGhpcyB3aWxsIGluY3JlYXNl IHRoZSBhdXRob3JpemVkIG1heGltdW0gU0ZGL1NGIGhvcHMuIE5vdCBzdXJlIGlmIHRoZXJlIGlz IGEgc2VjdXJpdHkgcHJvYmxlbSBvdXQgdGhlcmUuDQoNCiAgICAgICAgICBpdi4gICAgIFRoZSBt aXNiZWhhdmluZyBub2RlIGlzIGEgY2xhc3NpZmllcjogVGhlIGltcGxpY2F0aW9ucyB3aWxsIGJl IHNldmVyZSBmcm9tIGEgc2VydmljZSBzdGFuZHBvaW50LiBOU0ggcmVsaWVzIG9uIE9BTSBhbmQg Y29udHJvbC1wbGFuZSB0byBkZXRlY3Qgc3VjaCBjYXNlLg0KDQogICAgICAgICAgICB2LiAgICAg VGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMgYW4gU0ZGOiBFeGFtcGxlcyBvZiBtaXNiZWhhdmlvcnMg YXJlOiBzdHJpcCBOU0gsIGZvcndhcmQgdG8gYSBub24tYXV0aG9yaXplZCBTRiwgcmVkaXJlY3Qg dGhlIHRyYWZmaWMgdG8gYSBub24tYXV0aG9yaXplZCBub2RlcywgZXRjLiBMaWtlIGZvciB0aGUg Y2xhc3NpZmllciBjYXNlLCBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0byBk ZXRlY3Qgc3VjaCBjYXNlLg0KDQpBcmUgdGhlcmUgc3BlY2lmaWMgYXR0YWNrcyB0aGF0IGFyZSBu b3QgbGlzdGVkIGFib3ZlIGFuZCB0aGF0IG5lZWQgbW9yZSBhdHRlbnRpb24gZnJvbSB0aGUgV0c/ DQoNClRoYW5rIHlvdS4NCg0KQ2hlZXJzLA0KTWVkDQoNCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQpzZmMgbWFpbGluZyBsaXN0DQpzZmNAaWV0Zi5vcmc8 bWFpbHRvOnNmY0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc2ZjDQoNCg== --_000_BC3952F395444E03B73C78AFFD870446ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <9EB00B333DB99D47B26DB52A8D942057@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJhdXRvIiBzdHlsZT0id29yZC13 cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IGxpbmUtYnJlYWs6IGFm dGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+DQpIaSBBbGlhLA0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gT2N0IDE5LCAyMDE3LCBhdCAyOjQ5IFBNLCBB bGlhIEF0bGFzICZsdDs8YSBocmVmPSJtYWlsdG86YWthdGxhc0BnbWFpbC5jb20iIGNsYXNzPSIi PmFrYXRsYXNAZ21haWwuY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxl LWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJsdHIiIGNs YXNzPSIiPkhpIE1lZCwNCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPlNpbmNlIHlvdSBkaXJlY3RlZCB0aGlzIGF0IG1lLCB0aGVyZSBhcmUgZWZmb3J0 cyB0byBoYXZlIHNvbWUgZGlzY3Vzc2lvbnMgYW5kIHVuZGVyc3RhbmQgYmV0dGVyIHRoZSBwYXJ0 aWN1bGFyIHRocmVhdHMuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkN1cnJlbnRseSwgdGhlcmUgaXMg bm8gdHJhbnNwb3J0IHdpdGggaW50ZWdyaXR5IHByb3RlY3Rpb24gdGhhdCBpcyBldmVuIGEgU0hP VUxEIHRvIGltcGxlbWVudCwgbXVjaCBsZXNzIGEgTVVTVC4mbmJzcDsgVGhlcmU8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+aXMgbm8gY29udHJvbC1wbGFuZSBkZWZpbmVkIChiZXlvbmQgdGhlIEJHUCB3 b3JrKSB0aGF0IGRlc2NyaWJlcyBkZXRlY3RpbmcgaXNzdWVzLiZuYnNwOyBUaGVyZSBpcyBubyBP QU0gZGVmaW5lZCBhbmQgYWRvcHRlZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5ieSB0aGUgV0cgdGhh dCBkZXRlY3RzIG9yIGhhbmRsZXMgdGhlc2UgdHlwZXMgb2YgYXR0YWNrcy4gSSBzZWUgdGhlIHN0 cnVjdHVyZSB0aGF0IHlvdSBhcmUgcHJlc3VtaW5nLCBidXQgbm9uZSBvZiB0aGVzZSBhcmU8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+YXZhaWxhYmxlIGFzIG5vcm1hdGl2ZSByZWZlcmVuY2VzIHRvIE5T SCB0b2RheS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXY+T0FNIGRvZXMgbm90IGFkZHJlc3MgdGhlIHNlY3VyaXR5IGNvbmNlcm4gYXJvdW5kIGludGVn cml0eSBhbmQgZGV2aWNlcy4gJm5ic3A7SWYgeW91IGFuZCB0aGUgV0cgYmVsaWV2ZSBPQU0gaXMg dGhlIG5leHQg4oCcdG8gZG/igJ0gZm9yIHRoZSBXRywgdGhhdOKAmXMgZmluZSwgYnV0IGl04oCZ cyBvcnRob2dvbmFsIHRvIHRoZSBzZWN1cml0eSBwb2ludHMgcmFpc2VkLjwvZGl2Pg0KPGRpdj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNp dGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJsdHIiIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj5JIGhhZCByZWNvbW1lbmRlZCBoYXZpbmcgYSBmb2N1c2VkIGludGVyaW0g bWVldGluZyB0byBtYWtlIHN1cmUgdGhhdCBldmVyeW9uZSBjb25jZXJuZWQgdW5kZXJzdG9vZCB0 aGUgaXNzdWVzIGFuZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj53b3JrZWQgdGhyb3VnaCB0aGUgdGhy ZWF0IGFuYWx5c2lzIGFuZCBwb3NzaWJsZSBzb2x1dGlvbnMgdG9nZXRoZXIuPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXY+TGV04oCZcyBwbGVhc2Ugbm90IGNvbmZsYXRlIHRoZSBvbmdvaW5nIHNlY3VyaXR5IGRpc2N1 c3Npb24gd2l0aCBPQU0sIG9yIG90aGVyIHRvcGljcy4gJm5ic3A7VGhlIHNlY3VyaXR5IHJlYWxp dHksIGFzIHlvdSBwb2ludGVkIG91dCBpbiB5b3VyIGVtYWlsIHRvIEVyaWMsIGlzIHRoYXQgd2Us IGFzIGEgY29tbXVuaXR5IGFuZCBpbmR1c3RyeSwgYWNjZXB0IGEgbGV2ZWwgb2YgdHJ1c3Qgd3J0 IG5ldHdvcmsgZGV2aWNlcy4gJm5ic3A7VGhlIG9uZ29pbmcgZWRpdHMNCiBhbmQgZGlhbG9ndWUg d2l0aCBLYXRobGVlbiBhbmQgRXJpYyBhcmUgd29ya2luZyB0aHJvdWdoIHRoZWlyIGNvbmNlcm5z LiAmbmJzcDtBbiBpbnRlcmltIHRvIHRhbGsgYWJvdXQgbmV4dCBTRkMgc3RlcHMsIHBvc3QgTlNI LCBpcyBhIGRpZmZlcmVudCBtYXR0ZXIuICZuYnNwOzwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8Ymxv Y2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0i bHRyIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+QXQgdGhpcyBwb2ludCwgY2xlYXJseSB0aGUg bW9zdCB0aGF0IGNvdWxkIGhhcHBlbiBpcyBhPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnZpcnR1YWwg aW50ZXJpbS4mbmJzcDsgVGhlcmUgYXJlIHNvbWUgYmFja2dyb3VuZCBkaXNjdXNzaW9ucyBnb2lu ZyBvbi48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPkkgZG8gbm90IHdhbnQgdG8gYXNzdW1lIHdoYXQgbWl4dHVyZSB3aWxsIGJlIGFjY2Vw dGFibGUgdG8gaGFuZGxlIHRoZSBzZWN1cml0eSBjb25jZXJucyBleHByZXNzZWQgYnkgS2F0aGxl ZW4gYW5kIEVyaWM8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+YW5kIHN1cHBvcnRlZCBieSBhIG51bWJl ciBvZiBvdGhlciBBRHMuPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPkkgZG8gZ3JlYXRs eSBhcHByZWNpYXRlIHlvdXIgYXR0ZW50aW9uIGFuZCBlZmZvcnRzIHRvIGNsYXJpZnkgYW5kIHRy eSB0byBtb3ZlIHRoaXMgd29yayBmb3J3YXJkLiBJIGhhdmUgYmVlbiBleHByZXNzaW5nIGNvbmNl cm5zPC9kaXY+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+YWJvdXQgdGhlIHNlY3VyaXR5IGFz cGVjdHMgb2YgdGhpcyB3b3JrIHNpbmNlIFJGQyA3NjY1IHdlbnQgdGhyb3VnaCB0aGUgcHVibGlj YXRpb24gcHJvY2VzcyAtIGFuZCBzdHJvbmdseSBlbmNvdXJhZ2luZyBzZXJpb3VzPC9kaXY+DQo8 ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+V0cgZm9jdXMgdG8gcHJldmVudCBwcmVjaXNlbHkgd2hh dCBoYXMgbm93IGhhcHBlbmVkLjwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPlJlZ2FyZHMsPC9kaXY+ DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+QWxpYTwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21haWxf ZXh0cmEiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPjxi ciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiBUaHUsIE9jdCAxOSwgMjAx NyBhdCA0OjQ5IEFNLCA8c3BhbiBkaXI9Imx0ciIgY2xhc3M9IiI+DQombHQ7PGEgaHJlZj0ibWFp bHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0i Ij5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPiZndDs8L3NwYW4+IHdyb3RlOjxiciBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1hcmdpbjow cHggMHB4IDBweCAwLjhleDtib3JkZXItbGVmdDoxcHggc29saWQgcmdiKDIwNCwyMDQsMjA0KTtw YWRkaW5nLWxlZnQ6MWV4Ij4NCjxkaXYgbGFuZz0iRlIiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Z21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NVdvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPkhpIEFsaWEsDQo8dSBjbGFzcz0iIj48L3U+PHUgY2xh c3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNz PSIiPjx1IGNsYXNzPSIiPjwvdT4mbmJzcDs8dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPkNhbiB5b3Ug cGxlYXNlIHNoYXJlIHdpdGggdXMgdGhlIGN1cnJlbnQgc3RhdHVzIG9mIHRoZSBkb2N1bWVudCBh bmQgdGhlIGxpc3Qgb2YgcGVuZGluZyBibG9ja2luZyBwb2ludHM/PHUgY2xhc3M9IiI+PC91Pjx1 IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyIgY2xhc3M9IiI+PHUgY2xhc3M9IiI+PC91PiZuYnNwOzx1IGNsYXNzPSIiPjwv dT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIg Y2xhc3M9IiI+SSB3ZW50IHRocm91Z2ggYWxsIHB1YmxpYyBlbWFpbCBleGNoYW5nZXMsIGVzcGVj aWFsbHkgdGhlIG9uZXMgcmVsYXRlZCB0byBzZWN1cml0eSwgYnV0IGl0IGlzIG5vdCB0aGF0IGVh c3kgdG8gdW5kZXJzdGFuZCB3aGF0IGFyZSB0aGUgcmVtYWluaW5nIGlzc3VlcyB0aGF0IG5lZWQN CiBmaXhlcy48dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48dSBjbGFzcz0i Ij48L3U+Jm5ic3A7PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5JbiBwYXJ0aWN1bGFyLCBpcyB0aGVy ZSBhIGNvbmNlcm4gd2l0aCBhc3N1bWluZyB0aGUgY3VycmVudCBOU0ggdGhyZWF0IG1vZGVsPzx1 IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjx1IGNsYXNzPSIiPjwvdT4mbmJz cDs8dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tXy0xMzY5NDg1 MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjEuPHNwYW4gc3R5bGU9ImZvbnQtc3R5 bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3Ry ZXRjaDpub3JtYWw7Zm9udC1zaXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsNCjwvc3Bhbj48L3Nw YW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5O U0ggaXMgc2VjdXJlIGFnYWluc3QgYXR0YWNrcyBpbmR1Y2VkIGJ5IG5vZGVzIHRoYXQgaW5qZWN0 IChzcG9vZmVkKSBOU0ggYmVmb3JlIGVudGVyaW5nIGFuIFNGQy1lbmFibGVkIGRvbWFpbi4gSW5k ZWVkLCBTRkMgaW5ncmVzcyBub2RlcyBNVVNUDQogZGlzY2FyZCBwYWNrZXRzIGNhcnJ5aW5nIE5T SC48dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i Z21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiPjx1IGNsYXNzPSIi PjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj4yLjxzcGFu IHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0 Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9y bWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5i c3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyIgY2xhc3M9IiI+TlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGF0dGFja3MgZnJvbSB3aXRoaW4g dGhlIFNGQy1lbmFibGVkIGRvbWFpbiB0byBpbmplY3Qgbm9uLWF1dGhvcml6ZWQgY29udGV4dCBo ZWFkZXJzLiBGcm9tIGEgc2VydmljZSBwZXJzcGVjdGl2ZSwgdGhlIGd1YXJkDQogaXMgdGhlIENQ IHdoaWNoIGlzIHJlc3BvbnNpYmxlIGZvciBpbnN0cnVjdGluZyB0aGUgU0ZDLWF3YXJlIG5vZGVz IGFib3V0IHRoZSBtYW5kYXRvcnktdG8tcHJvY2VzcyBhbmQgb3B0aW9uYWwtdG8tcHJvY2VzcyBj b250ZXh0IGhlYWRlcnMuIEZ1cnRoZXJtb3JlLCB3aGF0ZXZlciB0aGUgb3JpZ2luIG9mIGEgc3Vw cGxpZWQgY29udGV4dCBoZWFkZXIsIHRoZSBsYXN0IFNGRiBvZiBhIGNoYWluIChhbmQgZWdyZXNz IG5vZGVzKSBNVVNUIHJlbW92ZQ0KIHRoZSBOU0ggYmVmb3JlIGZvcndhcmRpbmcgdXBzdHJlYW0u PHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Imdt YWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIj48dSBjbGFzcz0iIj48 L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+My48c3BhbiBz dHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpu b3JtYWw7Zm9udC1zdHJldGNoOm5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1h bDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNw Ow0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiIGNsYXNzPSIiPk5TSCBpcyBzZWN1cmUgYWdhaW5zdCBsZWFraW5nIHByaXZhY3kgaW5mb3Jt YXRpb24gb3V0c2lkZSBhbiBTRkMgZW5hYmxlZCBkb21haW4uIFRoZSBsYXN0IFNGRiBvZiBhIGNo YWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNIDQogYmVmb3JlIGZvcndh cmRpbmcgdXBzdHJlYW0uPHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9ImdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBo Ij48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHNwYW4gY2xh c3M9IiI+NC48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1h bDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJldGNoOm5vcm1hbDtmb250LXNpemU6N3B0O2xp bmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsi IGNsYXNzPSIiPiZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PHUgY2xhc3M9IiI+PC91Pjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPk5TSCBpcyBzZWN1cmUgYWdhaW5zdCBpbmRlZmlu aXRlIFNGL1NGRiBsb29wcyBieSBtZWFucyBvZiBTSSBhbmQgVFRMIGZpZWxkcy48dSBjbGFzcz0i Ij48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbV8tMTM2 OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj41LjxzcGFuIHN0eWxlPSJmb250 LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250 LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFt aWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7DQo8L3NwYW4+ PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9 IiI+Q29udHJvbCBwbGFuZSBzcGVjaWZpYyB0aHJlYXRzIGFyZSBvdXQgb2Ygc2NvcGUsIGJ1dCB0 aGUgZG9jdW1lbnQgY2l0ZXMgSS1ELmlldGYtc2ZjLWNvbnRyb2wtcGxhbmUgZm9yIHRoZSBleHBl Y3RlZCBiZWhhdmlvciB3aGVuIGluc3RydWN0aW5nIFNGQw0KIG5vZGVzLiBCVFcsIHRoZSBzZWNk aXIgcmV2aWV3IG9mIHRoZSBDUCByZXF1aXJlbWVudHMgY2FuIGJlIHJldHJpZXZlZCBoZXJlICg8 YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9yZXZpZXctaWV0Zi1zZmMt Y29udHJvbC1wbGFuZS0wMi1zZWNkaXItZWFybHktbWVhZG93cy0yMDE1LTEyLTEwLyIgdGFyZ2V0 PSJfYmxhbmsiIGNsYXNzPSIiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvPHdiciBjbGFz cz0iIj5kb2MvcmV2aWV3LWlldGYtc2ZjLWNvbnRyb2wtPHdiciBjbGFzcz0iIj5wbGFuZS0wMi1z ZWNkaXItZWFybHktbWVhZG93cy08d2JyIGNsYXNzPSIiPjIwMTUtMTItMTAvPC9hPikuDQo8dSBj bGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwt bV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiPjx1IGNsYXNzPSIiPjwvdT48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj42LjxzcGFuIHN0eWxl PSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1h bDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2Zv bnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7DQo8 L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIg Y2xhc3M9IiI+TlNIIGRvZXMgbm90IHNoYXJlIHByaXZhY3kgZGF0YSB3aXRoIG5vbi1hdXRob3Jp emVkIHBhcnRpZXMuIEluZGVlZCwgZGF0YSBjYXJyaWVkIGluIGNvbnRleHQgaGVhZGVycyBhcmUg ZGVyaXZlZCBmcm9tIHRoZSBvcmlnaW5hbCBwYWNrZXQgKGUuZy4sDQogc291cmNlIElQIGFkZHJl c3MpIG9yIGFyZSBhbHJlYWR5IGtub3duIHRvIHRoZSBvcGVyYXRvciAoZS5nLiwgc3Vic2NyaWJl ciBpZGVudGlmaWVyLCBwb2xpY3kgaWRlbnRpZmllciwgc2VydmljZSBpZGVudGlmaWVyKS4gVGhl IGNvbnRleHQgaW5mb3JtYXRpb24gaXMgc2hhcmVkIHdpdGggbm9kZXMgdGhhdCBhcmUgd2l0aGlu IHRoZSBzYW1lIGFkbWluaXN0cmF0aXZlIGRvbWFpbi4gJm5ic3A7PHUgY2xhc3M9IiI+PC91Pjx1 IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1fLTEzNjk0ODUzODA5 Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+Ny48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpu b3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJldGNo Om5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTomcXVv dDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48 L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPkxpa2Ug b3RoZXIgY29tbXVuaWNhdGlvbiBwcm90b2NvbHMsIGF0dGFja3MgZnJvbSB3aXRoaW4gdGhlIG5l dHdvcmsgYXJlIHBvc3NpYmxlLCBidXQgdGhvc2UgYXJlIHNvZnRlbiBieSByZWx5aW5nIG9uIHRo ZSBwcm9jZWR1cmVzIHB1dCBpbiBwbGFjZQ0KIGJ5IG9wZXJhdG9ycyBmb3IgdGVzdGluZyBhbmQg dmFsaWRhdGluZyBub2Rlcy9mZWF0dXJlcyBiZWZvcmUgYWN0dWFsIGFjdGl2YXRpb24uIE5TSCBk b2VzIG5vdCBwcm92aWRlIGEgYnVpbHQtaW4gZmVhdHVyZSB0byBwcmV2ZW50IG1pc2JlaGF2aW5n IG5vZGVzLCBidXQgcmVjb21tZW5kcyB0byByZWx5IG9uIHRoZSBzZWN1cml0eSBmZWF0dXJlcyBw cm92aWRlZCBieSB0aGUgdW5kZXJseWluZyB0cmFuc3BvcnQgZW5jYXBzdWxhdGlvbiBzY2hlbWVz Lg0KPHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHUgY2xhc3M9IiI+PC91 PiZuYnNwOzx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+TGV04oCZcyBub3cgZm9jdXMgb24gdGhlIHR5 cGljYWwg4oCcYXR0YWNrc+KAnSB0aGF0IGNhbiBiZSBpc3N1ZWQgZnJvbSB3aXRoaW4gdGhlIG5l dHdvcms6DQo8dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiPjx1IGNs YXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj4x LjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQt d2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWln aHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9 IiI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyIgY2xhc3M9IiI+QSBtaXNiZWhhdmluZyBub2RlIHJlZGlyZWN0IHRoZSB0cmFm ZmljIHRvIG5vbi1hdXRob3JpemVkIG5vZGVzIG91dHNpZGUgYSBkb21haW46IFRoaXMgaXMgbm90 IE5TSC1zcGVjaWZpYy48dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgi Pjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFz cz0iIj4yLjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFs O2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGlu ZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIg Y2xhc3M9IiI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+QSBtaXNiZWhhdmluZyBTRkMtdW53YXJlIG5vZGUg YWx0ZXJzIHRoZSBjb250ZW50IG9mIGEgcGFja2V0OiBUaGlzIGlzIG5vdCBOU0gtc3BlY2lmaWMu PHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Imdt YWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIj48dSBjbGFzcz0iIj48 L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+My48c3BhbiBz dHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpu b3JtYWw7Zm9udC1zdHJldGNoOm5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1h bDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNw Ow0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiIGNsYXNzPSIiPkEgbWlzYmVoYXZpbmcgU0ZDLWF3YXJlIG5vZGUgYWx0ZXJzIHRoZSBjb250 ZW50IG9mIE5TSDo8dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiIHN0 eWxlPSJtYXJnaW4tbGVmdDo3MnB0Ij4NCjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3Jt YWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJldGNoOm5v cm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTomcXVvdDtU aW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPmkuPHNwYW4g c3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6 bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXplOjdwdDtsaW5lLWhlaWdodDpub3Jt YWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwv dT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5JdCByZW1vdmVzIHRoZSBOU0ggaGVhZGVy IGZyb20gYWxsIHBhY2tldHMgaXQgc2VlczogVGhpcyB3aWxsIGltcGx5IHRoYXQgdGhlIHBhY2tl dHMsIHRoZSBtaXNiZWhhdmluZyBub2RlIGludGVyY2VwdHMsIHdpbGwgYmUgZm9yd2FyZGVkIHVw c3RyZWFtDQogd2l0aG91dCBpbnZva2luZyB0aGUgcmVxdWlyZWQgU0ZzICh3aGljaCBtYXkgYmUg c2VlbiBhcyBhIGZlYXR1cmUsIG5vdCBhIGJ1ZyBpZiBvbmUgZGlzbGlrZXMg4oCcbWlkZGxlYm94 ZXPigJ0gOikpLiBNb3JlIHNlcmlvdXNseSwgdGhlIE9BTSBOU0ggZmVhdHVyZSB3aWxsIGFsbG93 IGFuIG9wZXJhdG9yIHRvIGRldGVjdCB3aGV0aGVyIE5TSCBwYWNrZXRzIGFyZSB0cmF2ZWxsaW5n IGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5zdHJ1Y3Rpb25zIG9mIHRoYXQNCiBkb21haW4uIFJ1 bm5pbmcgdGhhdCBmZWF0dXJlIHdpbGwgaGVscCBkZXRlY3RpbmcgdGhlIG1pc2JlaGF2aW5nIG5v ZGUuIDx1IGNsYXNzPSIiPg0KPC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xh c3M9ImdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0i bWFyZ2luLWxlZnQ6NzJwdCI+DQo8dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIg Y2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2Zv bnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7 Zm9udC1zaXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj5paS48c3BhbiBzdHlsZT0iZm9udC1zdHls ZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJl dGNoOm5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTom cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiIGNsYXNzPSIiPkl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNQSTogVGhpcyB3aWxs IGltcGx5IHRoYXQgdGhlc2UgcGFja2V0cyB3aWxsIGJlIGZvcndhcmRlZCBvdmVyIGEgd3Jvbmcg cGF0aC4gQWdhaW4sIHJ1bm5pbmcgT0FNIE5TSCB3aWxsIGFsbG93IHRoZSBvcGVyYXRvcg0KIHRv IGRldGVjdCB3aGV0aGVyIGEgcGFja2V0IGlzIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRo IFNGQyBpbnN0cnVjdGlvbnMuIFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHJlZ3VsYXJseSB3aWxsIGhl bHAgaWRlbnRpZnlpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUgYW5kIHdoZXRoZXIgdGhlIFNGQyBj b25maWd1cmF0aW9uIG9mIGEgZG9tYWluIGlzIGFsaWduZWQgd2l0aCB0aGUgZXhwZWN0ZWQgYmVo YXZpb3IuPHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xh c3M9ImdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0i bWFyZ2luLWxlZnQ6NzJwdCI+DQo8dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIg Y2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2Zv bnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7 Zm9udC1zaXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsNCjwvc3Bhbj5paWkuPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2Zv bnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7 Zm9udC1zaXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bh bj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFz cz0iIj5JdCBtb2RpZmllcyB0aGUgY29udGVudCBvZiBTSS9UVEw6IFRoaXMgd2lsbCBpbmNyZWFz ZSB0aGUgYXV0aG9yaXplZCBtYXhpbXVtIFNGRi9TRiBob3BzLiBOb3Qgc3VyZSBpZiB0aGVyZSBp cyBhIHNlY3VyaXR5IHByb2JsZW0gb3V0IHRoZXJlLg0KPHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNz PSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2 NzVNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzJwdCI+DQo8dSBjbGFzcz0i Ij48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+PHNwYW4g c3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6 bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXplOjdwdDtsaW5lLWhlaWdodDpub3Jt YWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bh bj5pdi48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtm b250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJldGNoOm5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUt aGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNs YXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PHUg Y2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPlRoZSBtaXNiZWhhdmlu ZyBub2RlIGlzIGEgY2xhc3NpZmllcjogVGhlIGltcGxpY2F0aW9ucyB3aWxsIGJlIHNldmVyZSBm cm9tIGEgc2VydmljZSBzdGFuZHBvaW50LiBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1w bGFuZSB0byBkZXRlY3QNCiBzdWNoIGNhc2UuICZuYnNwOyZuYnNwOzx1IGNsYXNzPSIiPjwvdT48 dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tXy0xMzY5NDg1Mzgw OTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcycHQiPg0KPHUg Y2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIi PjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQt d2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWln aHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9 IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+di48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9u dC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJldGNoOm5vcm1hbDtm b250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFu Pjwvc3Bhbj48L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNz PSIiPlRoZSBtaXNiZWhhdmluZyBub2RlIGlzIGFuIFNGRjogRXhhbXBsZXMgb2YgbWlzYmVoYXZp b3JzIGFyZTogc3RyaXAgTlNILCBmb3J3YXJkIHRvIGEgbm9uLWF1dGhvcml6ZWQgU0YsIHJlZGly ZWN0IHRoZSB0cmFmZmljIHRvIGEgbm9uLWF1dGhvcml6ZWQNCiBub2RlcywgZXRjLiBMaWtlIGZv ciB0aGUgY2xhc3NpZmllciBjYXNlLCBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFu ZSB0byBkZXRlY3Qgc3VjaCBjYXNlLiAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDs8dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48dSBjbGFzcz0iIj48L3U+ Jm5ic3A7PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5BcmUgdGhlcmUgc3BlY2lmaWMgYXR0YWNrcyB0 aGF0IGFyZSBub3QgbGlzdGVkIGFib3ZlIGFuZCB0aGF0IG5lZWQgbW9yZSBhdHRlbnRpb24gZnJv bSB0aGUgV0c/PHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHUgY2xhc3M9 IiI+PC91PiZuYnNwOzx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+VGhhbmsgeW91Ljx1IGNsYXNzPSIi PjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjx1IGNsYXNzPSIiPjwvdT4mbmJzcDs8dSBjbGFz cz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiIGNsYXNzPSIiPkNoZWVycyw8dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFz cz0iIj5NZWQ8dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXzxiciBjbGFzcz0iIj4NCnNmYyBtYWlsaW5nIGxpc3Q8YnIgY2xhc3M9IiI+DQo8YSBo cmVmPSJtYWlsdG86c2ZjQGlldGYub3JnIiBjbGFzcz0iIj5zZmNAaWV0Zi5vcmc8L2E+PGJyIGNs YXNzPSIiPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmM8YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BC3952F395444E03B73C78AFFD870446ciscocom_-- From nobody Fri Oct 20 06:46:10 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D6E6132C2A for ; Fri, 20 Oct 2017 06:46:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t8s0-sC_TR21 for ; Fri, 20 Oct 2017 06:46:06 -0700 (PDT) Received: from mail-yw0-x22f.google.com (mail-yw0-x22f.google.com [IPv6:2607:f8b0:4002:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F3301286C7 for ; Fri, 20 Oct 2017 06:46:06 -0700 (PDT) Received: by mail-yw0-x22f.google.com with SMTP id i198so6395351ywe.7 for ; Fri, 20 Oct 2017 06:46:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=LDoDfW7SHQbmT8fkDyBGUOkxdFGoVdi81BlYU5mSub0=; b=T0v4u6EQBLI7rYKjo1QcZiRX/uQH2a7zpCmuVRFEAv7tYurMnJb/O2q8cqgBlkJFD8 yi3C0h+AS3MbzfBIzq12zNCI9T++CttBcopNOTDJms2NQ1JujpVM6iurU2Dgr76b80YW W7otyNDGFnhAOIF5qObPaoHfYKKJkwJ0XxCsD7Pt6zSfQQCjgcOSan79IfGtByNLcZg8 WjqE9XzMCHa7vNvlS3jOJmgTcmkBtUYdByWfkrDBMKsCKg35O7A4/lrQKwGyRXfW/uNq cFJhCgvbY9m6uC8fHxe2eIsyRTMucdHAoIJvj0G3vj7+ARW/3H3yjuTSNZ1t1tO7NhOm 2dVw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=LDoDfW7SHQbmT8fkDyBGUOkxdFGoVdi81BlYU5mSub0=; b=WH2dvApVCD5T5yAXA1h/K6xy5mNi1D/bJvHwe3AukdF5u9qb5Hj5lp0OBCOcdL1ggo qlAozkWFuQicDpywNdVmfl3w/oAhez79C+4PmyxNl6YPrMkFWaB6bJL0ivhxurfbt5Ex 4EfPqnnBfDb152MhCR5rzkj5zYE2IwAE5KcD1/yrXfrjq5lPZ0DvK2YnJeZgNAknL03S R1PYDaPbO337Y7RU5MBwuqBr6qUx3vEQCg3cbR0YuIQ2r5PDhZ8R3df6JWg0xfTLfQDp KbC16yLZGAQQ1uLOeNLrZDrpz4SfOLTAcVaoewcyyAEdbcrXaX3euT2oQpY/AUWKX7af n7rw== X-Gm-Message-State: AMCzsaV2Z5UWLUkgJzLAvv05RINck94olDM8TJYcakqeD9tMZY3d21c4 Y7D8HparnPDfuWf4U2gQmc1zYnld2lerHCzKa5GEkcx0 X-Google-Smtp-Source: ABhQp+TzhisrCrN/I1tPHv1fNwuID7AvD6bFoq18o2DaBnsbpwEtAixo4BBMxFQhQkz+6ILMLh9A0wsucKA6ZeUDdII= X-Received: by 10.13.192.196 with SMTP id b187mr3377038ywd.416.1508507165892; Fri, 20 Oct 2017 06:46:05 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Fri, 20 Oct 2017 06:45:25 -0700 (PDT) In-Reply-To: References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: Eric Rescorla Date: Fri, 20 Oct 2017 06:45:25 -0700 Message-ID: To: "Paul Quinn (paulq)" Cc: Alia Atlas , "mohamed.boucadair@orange.com" , Kathleen Moriarty , "sfc@ietf.org" Content-Type: multipart/alternative; boundary="001a114edd48c3e242055bfab100" Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 13:46:09 -0000 --001a114edd48c3e242055bfab100 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) wrote= : > Hi Alia, > > > > On Oct 19, 2017, at 2:49 PM, Alia Atlas wrote: > > Hi Med, > > Since you directed this at me, there are efforts to have some discussions > and understand better the particular threats. > Currently, there is no transport with integrity protection that is even a > SHOULD to implement, much less a MUST. There > is no control-plane defined (beyond the BGP work) that describes detectin= g > issues. There is no OAM defined and adopted > by the WG that detects or handles these types of attacks. I see the > structure that you are presuming, but none of these are > available as normative references to NSH today. > > > OAM does not address the security concern around integrity and devices. > If you and the WG believe OAM is the next =E2=80=9Cto do=E2=80=9D for the= WG, that=E2=80=99s fine, > but it=E2=80=99s orthogonal to the security points raised. > > > I had recommended having a focused interim meeting to make sure that > everyone concerned understood the issues and > worked through the threat analysis and possible solutions together. > > > Let=E2=80=99s please not conflate the ongoing security discussion with OA= M, or > other topics. The security reality, as you pointed out in your email to > Eric, is that we, as a community and industry, accept a level of trust wr= t > network devices. > I don't actually think that's the point of contention, at least from my perspective. Rather it's about the level of trust to be placed in the networking path through which that data flows. -Ekr > The ongoing edits and dialogue with Kathleen and Eric are working throug= h > their concerns. An interim to talk about next SFC steps, post NSH, is a > different matter. > > > > At this point, clearly the most that could happen is a > virtual interim. There are some background discussions going on. > > I do not want to assume what mixture will be acceptable to handle the > security concerns expressed by Kathleen and Eric > and supported by a number of other ADs. > > I do greatly appreciate your attention and efforts to clarify and try to > move this work forward. I have been expressing concerns > about the security aspects of this work since RFC 7665 went through the > publication process - and strongly encouraging serious > WG focus to prevent precisely what has now happened. > > Regards, > Alia > > > On Thu, Oct 19, 2017 at 4:49 AM, wrote: > >> Hi Alia, >> >> >> >> Can you please share with us the current status of the document and the >> list of pending blocking points? >> >> >> >> I went through all public email exchanges, especially the ones related t= o >> security, but it is not that easy to understand what are the remaining >> issues that need fixes. >> >> >> >> In particular, is there a concern with assuming the current NSH threat >> model? >> >> >> >> 1. NSH is secure against attacks induced by nodes that inject (spoofed) >> NSH before entering an SFC-enabled domain. Indeed, SFC ingress nodes MUS= T >> discard packets carrying NSH. >> >> 2. NSH is secure against attacks from within the SFC-enabled domain to >> inject non-authorized context headers. From a service perspective, the >> guard is the CP which is responsible for instructing the SFC-aware nodes >> about the mandatory-to-process and optional-to-process context headers. >> Furthermore, whatever the origin of a supplied context header, the last = SFF >> of a chain (and egress nodes) MUST remove the NSH before forwarding >> upstream. >> >> 3. NSH is secure against leaking privacy information outside an SFC >> enabled domain. The last SFF of a chain (and egress nodes) MUST remove t= he >> NSH before forwarding upstream. >> >> 4. NSH is secure against indefinite SF/SFF loops by means of SI and TTL >> fields. >> >> 5. Control plane specific threats are out of scope, but the document >> cites I-D.ietf-sfc-control-plane for the expected behavior when instruct= ing >> SFC nodes. BTW, the secdir review of the CP requirements can be retrieve= d >> here (https://datatracker.ietf.org/doc/review-ietf-sfc-control-pl >> ane-02-secdir-early-meadows-2015-12-10/). >> >> 6. NSH does not share privacy data with non-authorized parties. Indeed, >> data carried in context headers are derived from the original packet (e.= g., >> source IP address) or are already known to the operator (e.g., subscribe= r >> identifier, policy identifier, service identifier). The context informat= ion >> is shared with nodes that are within the same administrative domain. >> >> 7. Like other communication protocols, attacks from within the network >> are possible, but those are soften by relying on the procedures put in >> place by operators for testing and validating nodes/features before actu= al >> activation. NSH does not provide a built-in feature to prevent misbehavi= ng >> nodes, but recommends to rely on the security features provided by the >> underlying transport encapsulation schemes. >> >> >> >> Let=E2=80=99s now focus on the typical =E2=80=9Cattacks=E2=80=9D that ca= n be issued from within >> the network: >> >> 1. A misbehaving node redirect the traffic to non-authorized nodes >> outside a domain: This is not NSH-specific. >> >> 2. A misbehaving SFC-unware node alters the content of a packet: This >> is not NSH-specific. >> >> 3. A misbehaving SFC-aware node alters the content of NSH: >> >> i. It removes the NSH header from all packets it sees: >> This will imply that the packets, the misbehaving node intercepts, will = be >> forwarded upstream without invoking the required SFs (which may be seen = as >> a feature, not a bug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)). = More seriously, the >> OAM NSH feature will allow an operator to detect whether NSH packets are >> travelling in accordance with SFC instructions of that domain. Running t= hat >> feature will help detecting the misbehaving node. >> >> ii. It modifies the content of SPI: This will imply that >> these packets will be forwarded over a wrong path. Again, running OAM NS= H >> will allow the operator to detect whether a packet is travelling in >> accordance with SFC instructions. Running that feature regularly will he= lp >> identifying the misbehaving node and whether the SFC configuration of a >> domain is aligned with the expected behavior. >> >> iii. It modifies the content of SI/TTL: This will increase >> the authorized maximum SFF/SF hops. Not sure if there is a security prob= lem >> out there. >> >> iv. The misbehaving node is a classifier: The implications >> will be severe from a service standpoint. NSH relies on OAM and >> control-plane to detect such case. >> >> v. The misbehaving node is an SFF: Examples of >> misbehaviors are: strip NSH, forward to a non-authorized SF, redirect th= e >> traffic to a non-authorized nodes, etc. Like for the classifier case, NS= H >> relies on OAM and control-plane to detect such case. >> >> >> >> Are there specific attacks that are not listed above and that need more >> attention from the WG? >> >> >> >> Thank you. >> >> >> >> Cheers, >> >> Med >> > > _______________________________________________ > sfc mailing list > sfc@ietf.org > https://www.ietf.org/mailman/listinfo/sfc > > > --001a114edd48c3e242055bfab100 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) &= lt;paulq@cisco.com= > wrote:
Hi Alia,



On Oct 19, 2017, at 2:49 PM, Alia Atlas <akatlas@gmail.com> wrote:

Hi Med,

Since you directed this at me, there are efforts to have some discussi= ons and understand better the particular threats.
Currently, there is no transport with integrity protection that is eve= n a SHOULD to implement, much less a MUST.=C2=A0 There
is no control-plane defined (beyond the BGP work) that describes detec= ting issues.=C2=A0 There is no OAM defined and adopted
by the WG that detects or handles these types of attacks. I see the st= ructure that you are presuming, but none of these are
available as normative references to NSH today.


OAM does not address the security concern around integrity and = devices.=C2=A0 If you and the WG believe OAM is the next =E2=80=9Cto do=E2= =80=9D for the WG, that=E2=80=99s fine, but it=E2=80=99s orthogonal to the = security points raised.


I had recommended having a focused interim meeting to make sure that e= veryone concerned understood the issues and
worked through the threat analysis and possible solutions together.

Let=E2=80=99s please not conflate the ongoing security discussi= on with OAM, or other topics.=C2=A0 The security reality, as you pointed ou= t in your email to Eric, is that we, as a community and industry, accept a = level of trust wrt network devices.

I don't actually think that's the point of = contention, at least from my perspective. Rather it's about the level o= f trust to be placed in the networking path through which that data flows.<= /div>

-Ekr

=C2=A0
=C2=A0The ongoing edits and dialogue with Kathleen and Eric are working through their concerns.=C2= =A0 An interim to talk about next SFC steps, post NSH, is a different matte= r. =C2=A0



At this point, clearly the most that could happen is a
virtual interim.=C2=A0 There are some background discussions going on.=

I do not want to assume what mixture will be acceptable to handle the = security concerns expressed by Kathleen and Eric
and supported by a number of other ADs.

I do greatly appreciate your attention and effor= ts to clarify and try to move this work forward. I have been expressing con= cerns
about the security aspects of this work since RF= C 7665 went through the publication process - and strongly encouraging seri= ous
WG focus to prevent precisely what has now happe= ned.

Regards,
Alia


On Thu, Oct 19, 2017 at 4:49 AM, <moham= ed.boucadair@orange.com> wrote:

Hi Alia,

=C2=A0

Can you please share with us the current stat= us of the document and the list of pending blocking points?

=C2=A0

I went through all public email exchanges, es= pecially the ones related to security, but it is not that easy to understan= d what are the remaining issues that need fixes.

=C2=A0

In particular, is there a concern with assumi= ng the current NSH threat model?

=C2=A0

1.=C2=A0 NSH is secure against attacks induced by= nodes that inject (spoofed) NSH before entering an SFC-enabled domain. Ind= eed, SFC ingress nodes MUST discard packets carrying NSH.

2.=C2=A0 NSH is secure against attacks from withi= n the SFC-enabled domain to inject non-authorized context headers. From a s= ervice perspective, the guard is the CP which is responsible for instructing the SFC-aware nodes about t= he mandatory-to-process and optional-to-process context headers. Furthermor= e, whatever the origin of a supplied context header, the last SFF of a chai= n (and egress nodes) MUST remove the NSH before forwarding upstream.

3.=C2=A0 NSH is secure against leaking privacy in= formation outside an SFC enabled domain. The last SFF of a chain (and egres= s nodes) MUST remove the NSH before forwarding upstream.

4.=C2=A0 NSH is secure against indefinite SF/SFF = loops by means of SI and TTL fields.

5.=C2=A0 Control plane specific threats are out o= f scope, but the document cites I-D.ietf-sfc-control-plane for the expected= behavior when instructing SFC nodes. BTW, the secdir review of the CP requirements can be retrieved here= (https://datatracker= .ietf.org/doc/review-ietf-sfc-control-plane-02-secdir-early-meado= ws-2015-12-10/).

6.=C2=A0 NSH does not share privacy data with non= -authorized parties. Indeed, data carried in context headers are derived fr= om the original packet (e.g., source IP address) or are already known to the operator (e.g., subscriber = identifier, policy identifier, service identifier). The context information= is shared with nodes that are within the same administrative domain. =C2= =A0

7.=C2=A0 Like other communication protocols, atta= cks from within the network are possible, but those are soften by relying o= n the procedures put in place by operators for testing and validating nodes/features before actual activ= ation. NSH does not provide a built-in feature to prevent misbehaving nodes= , but recommends to rely on the security features provided by the underlyin= g transport encapsulation schemes.

=C2=A0

Let=E2=80=99s now focus on the typical =E2=80= =9Cattacks=E2=80=9D that can be issued from within the network:

1.=C2=A0 A misbehaving node redirect the traffic = to non-authorized nodes outside a domain: This is not NSH-specific.<= u>

2.=C2=A0 A misbehaving SFC-unware node alters the= content of a packet: This is not NSH-specific.

3.=C2=A0 A misbehaving SFC-aware node alters the = content of NSH:

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 i.=C2=A0=C2=A0=C2=A0=C2=A0 It removes the NSH header from all packe= ts it sees: This will imply that the packets, the misbehaving node intercep= ts, will be forwarded upstream without invoking the required SFs (which may be seen as a feature, not a b= ug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)). More seriously, the O= AM NSH feature will allow an operator to detect whether NSH packets are tra= velling in accordance with SFC instructions of that domain. Running that feature will help detecting the misbehaving node.

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 ii.=C2=A0=C2=A0=C2=A0=C2=A0 It modifies the content of SPI: This wil= l imply that these packets will be forwarded over a wrong path. Again, runn= ing OAM NSH will allow the operator to detect whether a packet is travelling in accordance with SFC instructio= ns. Running that feature regularly will help identifying the misbehaving no= de and whether the SFC configuration of a domain is aligned with the expect= ed behavior.

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 iii.=C2=A0=C2=A0=C2=A0=C2=A0 It modifies the content of SI/TTL: This = will increase the authorized maximum SFF/SF hops. Not sure if there is a se= curity problem out there.

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 iv.=C2=A0=C2=A0=C2=A0=C2=A0 The misbehaving node is a classifier: Th= e implications will be severe from a service standpoint. NSH relies on OAM = and control-plane to detect such case. =C2=A0=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 v.=C2=A0=C2=A0=C2=A0=C2=A0 The misbehaving node is an SFF: Examples= of misbehaviors are: strip NSH, forward to a non-authorized SF, redirect t= he traffic to a non-authorized nodes, etc. Like for the classifier case, NSH relies on OAM and control-pl= ane to detect such case. =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0

Are there specific attacks that are not liste= d above and that need more attention from the WG?

=C2=A0

Thank you.

=C2=A0

Cheers,

Med


_______________________________________________
sfc mailing list
sfc@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/sfc


--001a114edd48c3e242055bfab100-- From nobody Fri Oct 20 06:51:55 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F73D1270AE for ; Fri, 20 Oct 2017 06:51:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.617 X-Spam-Level: X-Spam-Status: No, score=-2.617 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OLINlU0kY_K8 for ; Fri, 20 Oct 2017 06:51:52 -0700 (PDT) Received: from relais-inet.orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA3921286C7 for ; Fri, 20 Oct 2017 06:51:51 -0700 (PDT) Received: from opfednr06.francetelecom.fr (unknown [xx.xx.xx.70]) by opfednr23.francetelecom.fr (ESMTP service) with ESMTP id E32C7C01D7; Fri, 20 Oct 2017 15:51:49 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.75]) by opfednr06.francetelecom.fr (ESMTP service) with ESMTP id C0C8F1A0051; Fri, 20 Oct 2017 15:51:49 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILMA4.corporate.adroot.infra.ftgroup ([fe80::65de:2f08:41e6:ebbe%18]) with mapi id 14.03.0361.001; Fri, 20 Oct 2017 15:51:49 +0200 From: To: Eric Rescorla , "Paul Quinn (paulq)" CC: Alia Atlas , Kathleen Moriarty , "sfc@ietf.org" Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wA8qnTrAAAbaMA= Date: Fri, 20 Oct 2017 13:51:49 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93300A057BA4@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93300A057BA4OPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 13:51:55 -0000 --_000_787AE7BB302AE849A7480A190F8B93300A057BA4OPEXCLILMA3corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBFcmljLA0KDQpDYW4geW91IHBsZWFzZSBjbGFyaWZ5IHRoaXMgcG9pbnQ6IOKAnFJhdGhl ciBpdCdzIGFib3V0IHRoZSBsZXZlbCBvZiB0cnVzdCB0byBiZSBwbGFjZWQgaW4gdGhlIG5ldHdv cmtpbmcgcGF0aCB0aHJvdWdoIHdoaWNoIHRoYXQgZGF0YSBmbG93cy7igJ0/DQoNClNvcnJ5IGlm IHlvdSBoYXZlIGFscmVhZHkgZXhwbGFpbmVkIGl0IHRvIHRoZSBlZGl0b3JzLCBidXQgYXMgYSBX RyBwYXJ0aWNpcGFudCBJIGRvbuKAmXQgaGF2ZSBhY2Nlc3MgdG8gYSByZWNvcmQgb2Ygc3VjaCBk aXNjdXNzaW9uLg0KDQpUaGFuayB5b3UuDQoNCkNoZWVycywNCk1lZA0KDQpEZSA6IEVyaWMgUmVz Y29ybGEgW21haWx0bzpla3JAcnRmbS5jb21dDQpFbnZvecOpIDogdmVuZHJlZGkgMjAgb2N0b2Jy ZSAyMDE3IDE1OjQ1DQrDgCA6IFBhdWwgUXVpbm4gKHBhdWxxKQ0KQ2MgOiBBbGlhIEF0bGFzOyBC T1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBLYXRobGVlbiBNb3JpYXJ0eTsgc2ZjQGlldGYub3Jn DQpPYmpldCA6IFJlOiBbc2ZjXSBOU0ggRElTQ1VTUyBTdGF0dXMNCg0KDQoNCk9uIEZyaSwgT2N0 IDIwLCAyMDE3IGF0IDY6MzEgQU0sIFBhdWwgUXVpbm4gKHBhdWxxKSA8cGF1bHFAY2lzY28uY29t PG1haWx0bzpwYXVscUBjaXNjby5jb20+PiB3cm90ZToNCkhpIEFsaWEsDQoNCg0KDQoNCk9uIE9j dCAxOSwgMjAxNywgYXQgMjo0OSBQTSwgQWxpYSBBdGxhcyA8YWthdGxhc0BnbWFpbC5jb208bWFp bHRvOmFrYXRsYXNAZ21haWwuY29tPj4gd3JvdGU6DQoNCkhpIE1lZCwNCg0KU2luY2UgeW91IGRp cmVjdGVkIHRoaXMgYXQgbWUsIHRoZXJlIGFyZSBlZmZvcnRzIHRvIGhhdmUgc29tZSBkaXNjdXNz aW9ucyBhbmQgdW5kZXJzdGFuZCBiZXR0ZXIgdGhlIHBhcnRpY3VsYXIgdGhyZWF0cy4NCkN1cnJl bnRseSwgdGhlcmUgaXMgbm8gdHJhbnNwb3J0IHdpdGggaW50ZWdyaXR5IHByb3RlY3Rpb24gdGhh dCBpcyBldmVuIGEgU0hPVUxEIHRvIGltcGxlbWVudCwgbXVjaCBsZXNzIGEgTVVTVC4gIFRoZXJl DQppcyBubyBjb250cm9sLXBsYW5lIGRlZmluZWQgKGJleW9uZCB0aGUgQkdQIHdvcmspIHRoYXQg ZGVzY3JpYmVzIGRldGVjdGluZyBpc3N1ZXMuICBUaGVyZSBpcyBubyBPQU0gZGVmaW5lZCBhbmQg YWRvcHRlZA0KYnkgdGhlIFdHIHRoYXQgZGV0ZWN0cyBvciBoYW5kbGVzIHRoZXNlIHR5cGVzIG9m IGF0dGFja3MuIEkgc2VlIHRoZSBzdHJ1Y3R1cmUgdGhhdCB5b3UgYXJlIHByZXN1bWluZywgYnV0 IG5vbmUgb2YgdGhlc2UgYXJlDQphdmFpbGFibGUgYXMgbm9ybWF0aXZlIHJlZmVyZW5jZXMgdG8g TlNIIHRvZGF5Lg0KDQoNCk9BTSBkb2VzIG5vdCBhZGRyZXNzIHRoZSBzZWN1cml0eSBjb25jZXJu IGFyb3VuZCBpbnRlZ3JpdHkgYW5kIGRldmljZXMuICBJZiB5b3UgYW5kIHRoZSBXRyBiZWxpZXZl IE9BTSBpcyB0aGUgbmV4dCDigJx0byBkb+KAnSBmb3IgdGhlIFdHLCB0aGF04oCZcyBmaW5lLCBi dXQgaXTigJlzIG9ydGhvZ29uYWwgdG8gdGhlIHNlY3VyaXR5IHBvaW50cyByYWlzZWQuDQoNCg0K DQpJIGhhZCByZWNvbW1lbmRlZCBoYXZpbmcgYSBmb2N1c2VkIGludGVyaW0gbWVldGluZyB0byBt YWtlIHN1cmUgdGhhdCBldmVyeW9uZSBjb25jZXJuZWQgdW5kZXJzdG9vZCB0aGUgaXNzdWVzIGFu ZA0Kd29ya2VkIHRocm91Z2ggdGhlIHRocmVhdCBhbmFseXNpcyBhbmQgcG9zc2libGUgc29sdXRp b25zIHRvZ2V0aGVyLg0KDQpMZXTigJlzIHBsZWFzZSBub3QgY29uZmxhdGUgdGhlIG9uZ29pbmcg c2VjdXJpdHkgZGlzY3Vzc2lvbiB3aXRoIE9BTSwgb3Igb3RoZXIgdG9waWNzLiAgVGhlIHNlY3Vy aXR5IHJlYWxpdHksIGFzIHlvdSBwb2ludGVkIG91dCBpbiB5b3VyIGVtYWlsIHRvIEVyaWMsIGlz IHRoYXQgd2UsIGFzIGEgY29tbXVuaXR5IGFuZCBpbmR1c3RyeSwgYWNjZXB0IGEgbGV2ZWwgb2Yg dHJ1c3Qgd3J0IG5ldHdvcmsgZGV2aWNlcy4NCg0KSSBkb24ndCBhY3R1YWxseSB0aGluayB0aGF0 J3MgdGhlIHBvaW50IG9mIGNvbnRlbnRpb24sIGF0IGxlYXN0IGZyb20gbXkgcGVyc3BlY3RpdmUu IFJhdGhlciBpdCdzIGFib3V0IHRoZSBsZXZlbCBvZiB0cnVzdCB0byBiZSBwbGFjZWQgaW4gdGhl IG5ldHdvcmtpbmcgcGF0aCB0aHJvdWdoIHdoaWNoIHRoYXQgZGF0YSBmbG93cy4NCg0KLUVrcg0K DQoNCiBUaGUgb25nb2luZyBlZGl0cyBhbmQgZGlhbG9ndWUgd2l0aCBLYXRobGVlbiBhbmQgRXJp YyBhcmUgd29ya2luZyB0aHJvdWdoIHRoZWlyIGNvbmNlcm5zLiAgQW4gaW50ZXJpbSB0byB0YWxr IGFib3V0IG5leHQgU0ZDIHN0ZXBzLCBwb3N0IE5TSCwgaXMgYSBkaWZmZXJlbnQgbWF0dGVyLg0K DQoNCg0KDQpBdCB0aGlzIHBvaW50LCBjbGVhcmx5IHRoZSBtb3N0IHRoYXQgY291bGQgaGFwcGVu IGlzIGENCnZpcnR1YWwgaW50ZXJpbS4gIFRoZXJlIGFyZSBzb21lIGJhY2tncm91bmQgZGlzY3Vz c2lvbnMgZ29pbmcgb24uDQoNCkkgZG8gbm90IHdhbnQgdG8gYXNzdW1lIHdoYXQgbWl4dHVyZSB3 aWxsIGJlIGFjY2VwdGFibGUgdG8gaGFuZGxlIHRoZSBzZWN1cml0eSBjb25jZXJucyBleHByZXNz ZWQgYnkgS2F0aGxlZW4gYW5kIEVyaWMNCmFuZCBzdXBwb3J0ZWQgYnkgYSBudW1iZXIgb2Ygb3Ro ZXIgQURzLg0KDQpJIGRvIGdyZWF0bHkgYXBwcmVjaWF0ZSB5b3VyIGF0dGVudGlvbiBhbmQgZWZm b3J0cyB0byBjbGFyaWZ5IGFuZCB0cnkgdG8gbW92ZSB0aGlzIHdvcmsgZm9yd2FyZC4gSSBoYXZl IGJlZW4gZXhwcmVzc2luZyBjb25jZXJucw0KYWJvdXQgdGhlIHNlY3VyaXR5IGFzcGVjdHMgb2Yg dGhpcyB3b3JrIHNpbmNlIFJGQyA3NjY1IHdlbnQgdGhyb3VnaCB0aGUgcHVibGljYXRpb24gcHJv Y2VzcyAtIGFuZCBzdHJvbmdseSBlbmNvdXJhZ2luZyBzZXJpb3VzDQpXRyBmb2N1cyB0byBwcmV2 ZW50IHByZWNpc2VseSB3aGF0IGhhcyBub3cgaGFwcGVuZWQuDQoNClJlZ2FyZHMsDQpBbGlhDQoN Cg0KT24gVGh1LCBPY3QgMTksIDIwMTcgYXQgNDo0OSBBTSwgPG1vaGFtZWQuYm91Y2FkYWlyQG9y YW5nZS5jb208bWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+PiB3cm90ZToNCkhp IEFsaWEsDQoNCkNhbiB5b3UgcGxlYXNlIHNoYXJlIHdpdGggdXMgdGhlIGN1cnJlbnQgc3RhdHVz IG9mIHRoZSBkb2N1bWVudCBhbmQgdGhlIGxpc3Qgb2YgcGVuZGluZyBibG9ja2luZyBwb2ludHM/ DQoNCkkgd2VudCB0aHJvdWdoIGFsbCBwdWJsaWMgZW1haWwgZXhjaGFuZ2VzLCBlc3BlY2lhbGx5 IHRoZSBvbmVzIHJlbGF0ZWQgdG8gc2VjdXJpdHksIGJ1dCBpdCBpcyBub3QgdGhhdCBlYXN5IHRv IHVuZGVyc3RhbmQgd2hhdCBhcmUgdGhlIHJlbWFpbmluZyBpc3N1ZXMgdGhhdCBuZWVkIGZpeGVz Lg0KDQpJbiBwYXJ0aWN1bGFyLCBpcyB0aGVyZSBhIGNvbmNlcm4gd2l0aCBhc3N1bWluZyB0aGUg Y3VycmVudCBOU0ggdGhyZWF0IG1vZGVsPw0KDQoNCjEuICBOU0ggaXMgc2VjdXJlIGFnYWluc3Qg YXR0YWNrcyBpbmR1Y2VkIGJ5IG5vZGVzIHRoYXQgaW5qZWN0IChzcG9vZmVkKSBOU0ggYmVmb3Jl IGVudGVyaW5nIGFuIFNGQy1lbmFibGVkIGRvbWFpbi4gSW5kZWVkLCBTRkMgaW5ncmVzcyBub2Rl cyBNVVNUIGRpc2NhcmQgcGFja2V0cyBjYXJyeWluZyBOU0guDQoNCjIuICBOU0ggaXMgc2VjdXJl IGFnYWluc3QgYXR0YWNrcyBmcm9tIHdpdGhpbiB0aGUgU0ZDLWVuYWJsZWQgZG9tYWluIHRvIGlu amVjdCBub24tYXV0aG9yaXplZCBjb250ZXh0IGhlYWRlcnMuIEZyb20gYSBzZXJ2aWNlIHBlcnNw ZWN0aXZlLCB0aGUgZ3VhcmQgaXMgdGhlIENQIHdoaWNoIGlzIHJlc3BvbnNpYmxlIGZvciBpbnN0 cnVjdGluZyB0aGUgU0ZDLWF3YXJlIG5vZGVzIGFib3V0IHRoZSBtYW5kYXRvcnktdG8tcHJvY2Vz cyBhbmQgb3B0aW9uYWwtdG8tcHJvY2VzcyBjb250ZXh0IGhlYWRlcnMuIEZ1cnRoZXJtb3JlLCB3 aGF0ZXZlciB0aGUgb3JpZ2luIG9mIGEgc3VwcGxpZWQgY29udGV4dCBoZWFkZXIsIHRoZSBsYXN0 IFNGRiBvZiBhIGNoYWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNIIGJl Zm9yZSBmb3J3YXJkaW5nIHVwc3RyZWFtLg0KDQozLiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGxl YWtpbmcgcHJpdmFjeSBpbmZvcm1hdGlvbiBvdXRzaWRlIGFuIFNGQyBlbmFibGVkIGRvbWFpbi4g VGhlIGxhc3QgU0ZGIG9mIGEgY2hhaW4gKGFuZCBlZ3Jlc3Mgbm9kZXMpIE1VU1QgcmVtb3ZlIHRo ZSBOU0ggYmVmb3JlIGZvcndhcmRpbmcgdXBzdHJlYW0uDQoNCjQuICBOU0ggaXMgc2VjdXJlIGFn YWluc3QgaW5kZWZpbml0ZSBTRi9TRkYgbG9vcHMgYnkgbWVhbnMgb2YgU0kgYW5kIFRUTCBmaWVs ZHMuDQoNCjUuICBDb250cm9sIHBsYW5lIHNwZWNpZmljIHRocmVhdHMgYXJlIG91dCBvZiBzY29w ZSwgYnV0IHRoZSBkb2N1bWVudCBjaXRlcyBJLUQuaWV0Zi1zZmMtY29udHJvbC1wbGFuZSBmb3Ig dGhlIGV4cGVjdGVkIGJlaGF2aW9yIHdoZW4gaW5zdHJ1Y3RpbmcgU0ZDIG5vZGVzLiBCVFcsIHRo ZSBzZWNkaXIgcmV2aWV3IG9mIHRoZSBDUCByZXF1aXJlbWVudHMgY2FuIGJlIHJldHJpZXZlZCBo ZXJlIChodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9yZXZpZXctaWV0Zi1zZmMtY29u dHJvbC1wbGFuZS0wMi1zZWNkaXItZWFybHktbWVhZG93cy0yMDE1LTEyLTEwLykuDQoNCjYuICBO U0ggZG9lcyBub3Qgc2hhcmUgcHJpdmFjeSBkYXRhIHdpdGggbm9uLWF1dGhvcml6ZWQgcGFydGll cy4gSW5kZWVkLCBkYXRhIGNhcnJpZWQgaW4gY29udGV4dCBoZWFkZXJzIGFyZSBkZXJpdmVkIGZy b20gdGhlIG9yaWdpbmFsIHBhY2tldCAoZS5nLiwgc291cmNlIElQIGFkZHJlc3MpIG9yIGFyZSBh bHJlYWR5IGtub3duIHRvIHRoZSBvcGVyYXRvciAoZS5nLiwgc3Vic2NyaWJlciBpZGVudGlmaWVy LCBwb2xpY3kgaWRlbnRpZmllciwgc2VydmljZSBpZGVudGlmaWVyKS4gVGhlIGNvbnRleHQgaW5m b3JtYXRpb24gaXMgc2hhcmVkIHdpdGggbm9kZXMgdGhhdCBhcmUgd2l0aGluIHRoZSBzYW1lIGFk bWluaXN0cmF0aXZlIGRvbWFpbi4NCg0KNy4gIExpa2Ugb3RoZXIgY29tbXVuaWNhdGlvbiBwcm90 b2NvbHMsIGF0dGFja3MgZnJvbSB3aXRoaW4gdGhlIG5ldHdvcmsgYXJlIHBvc3NpYmxlLCBidXQg dGhvc2UgYXJlIHNvZnRlbiBieSByZWx5aW5nIG9uIHRoZSBwcm9jZWR1cmVzIHB1dCBpbiBwbGFj ZSBieSBvcGVyYXRvcnMgZm9yIHRlc3RpbmcgYW5kIHZhbGlkYXRpbmcgbm9kZXMvZmVhdHVyZXMg YmVmb3JlIGFjdHVhbCBhY3RpdmF0aW9uLiBOU0ggZG9lcyBub3QgcHJvdmlkZSBhIGJ1aWx0LWlu IGZlYXR1cmUgdG8gcHJldmVudCBtaXNiZWhhdmluZyBub2RlcywgYnV0IHJlY29tbWVuZHMgdG8g cmVseSBvbiB0aGUgc2VjdXJpdHkgZmVhdHVyZXMgcHJvdmlkZWQgYnkgdGhlIHVuZGVybHlpbmcg dHJhbnNwb3J0IGVuY2Fwc3VsYXRpb24gc2NoZW1lcy4NCg0KTGV04oCZcyBub3cgZm9jdXMgb24g dGhlIHR5cGljYWwg4oCcYXR0YWNrc+KAnSB0aGF0IGNhbiBiZSBpc3N1ZWQgZnJvbSB3aXRoaW4g dGhlIG5ldHdvcms6DQoNCjEuICBBIG1pc2JlaGF2aW5nIG5vZGUgcmVkaXJlY3QgdGhlIHRyYWZm aWMgdG8gbm9uLWF1dGhvcml6ZWQgbm9kZXMgb3V0c2lkZSBhIGRvbWFpbjogVGhpcyBpcyBub3Qg TlNILXNwZWNpZmljLg0KDQoyLiAgQSBtaXNiZWhhdmluZyBTRkMtdW53YXJlIG5vZGUgYWx0ZXJz IHRoZSBjb250ZW50IG9mIGEgcGFja2V0OiBUaGlzIGlzIG5vdCBOU0gtc3BlY2lmaWMuDQoNCjMu ICBBIG1pc2JlaGF2aW5nIFNGQy1hd2FyZSBub2RlIGFsdGVycyB0aGUgY29udGVudCBvZiBOU0g6 DQoNCiAgICAgICAgICAgIGkuICAgICBJdCByZW1vdmVzIHRoZSBOU0ggaGVhZGVyIGZyb20gYWxs IHBhY2tldHMgaXQgc2VlczogVGhpcyB3aWxsIGltcGx5IHRoYXQgdGhlIHBhY2tldHMsIHRoZSBt aXNiZWhhdmluZyBub2RlIGludGVyY2VwdHMsIHdpbGwgYmUgZm9yd2FyZGVkIHVwc3RyZWFtIHdp dGhvdXQgaW52b2tpbmcgdGhlIHJlcXVpcmVkIFNGcyAod2hpY2ggbWF5IGJlIHNlZW4gYXMgYSBm ZWF0dXJlLCBub3QgYSBidWcgaWYgb25lIGRpc2xpa2VzIOKAnG1pZGRsZWJveGVz4oCdIDopKS4g TW9yZSBzZXJpb3VzbHksIHRoZSBPQU0gTlNIIGZlYXR1cmUgd2lsbCBhbGxvdyBhbiBvcGVyYXRv ciB0byBkZXRlY3Qgd2hldGhlciBOU0ggcGFja2V0cyBhcmUgdHJhdmVsbGluZyBpbiBhY2NvcmRh bmNlIHdpdGggU0ZDIGluc3RydWN0aW9ucyBvZiB0aGF0IGRvbWFpbi4gUnVubmluZyB0aGF0IGZl YXR1cmUgd2lsbCBoZWxwIGRldGVjdGluZyB0aGUgbWlzYmVoYXZpbmcgbm9kZS4NCg0KICAgICAg ICAgIGlpLiAgICAgSXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQgb2YgU1BJOiBUaGlzIHdpbGwgaW1w bHkgdGhhdCB0aGVzZSBwYWNrZXRzIHdpbGwgYmUgZm9yd2FyZGVkIG92ZXIgYSB3cm9uZyBwYXRo LiBBZ2FpbiwgcnVubmluZyBPQU0gTlNIIHdpbGwgYWxsb3cgdGhlIG9wZXJhdG9yIHRvIGRldGVj dCB3aGV0aGVyIGEgcGFja2V0IGlzIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRoIFNGQyBp bnN0cnVjdGlvbnMuIFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHJlZ3VsYXJseSB3aWxsIGhlbHAgaWRl bnRpZnlpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUgYW5kIHdoZXRoZXIgdGhlIFNGQyBjb25maWd1 cmF0aW9uIG9mIGEgZG9tYWluIGlzIGFsaWduZWQgd2l0aCB0aGUgZXhwZWN0ZWQgYmVoYXZpb3Iu DQoNCiAgICAgICAgaWlpLiAgICAgSXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQgb2YgU0kvVFRMOiBU aGlzIHdpbGwgaW5jcmVhc2UgdGhlIGF1dGhvcml6ZWQgbWF4aW11bSBTRkYvU0YgaG9wcy4gTm90 IHN1cmUgaWYgdGhlcmUgaXMgYSBzZWN1cml0eSBwcm9ibGVtIG91dCB0aGVyZS4NCg0KICAgICAg ICAgIGl2LiAgICAgVGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMgYSBjbGFzc2lmaWVyOiBUaGUgaW1w bGljYXRpb25zIHdpbGwgYmUgc2V2ZXJlIGZyb20gYSBzZXJ2aWNlIHN0YW5kcG9pbnQuIE5TSCBy ZWxpZXMgb24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNoIGNhc2UuDQoNCiAg ICAgICAgICAgIHYuICAgICBUaGUgbWlzYmVoYXZpbmcgbm9kZSBpcyBhbiBTRkY6IEV4YW1wbGVz IG9mIG1pc2JlaGF2aW9ycyBhcmU6IHN0cmlwIE5TSCwgZm9yd2FyZCB0byBhIG5vbi1hdXRob3Jp emVkIFNGLCByZWRpcmVjdCB0aGUgdHJhZmZpYyB0byBhIG5vbi1hdXRob3JpemVkIG5vZGVzLCBl dGMuIExpa2UgZm9yIHRoZSBjbGFzc2lmaWVyIGNhc2UsIE5TSCByZWxpZXMgb24gT0FNIGFuZCBj b250cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNoIGNhc2UuDQoNCkFyZSB0aGVyZSBzcGVjaWZpYyBh dHRhY2tzIHRoYXQgYXJlIG5vdCBsaXN0ZWQgYWJvdmUgYW5kIHRoYXQgbmVlZCBtb3JlIGF0dGVu dGlvbiBmcm9tIHRoZSBXRz8NCg0KVGhhbmsgeW91Lg0KDQpDaGVlcnMsDQpNZWQNCg0KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNmYyBtYWlsaW5nIGxp c3QNCnNmY0BpZXRmLm9yZzxtYWlsdG86c2ZjQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9zZmMNCg0KDQo= --_000_787AE7BB302AE849A7480A190F8B93300A057BA4OPEXCLILMA3corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tNzUwMzkzMDE0MTYyMDAxMjQzMWdt YWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgsIGxpLm03NTAzOTMwMTQx NjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCwgZGl2 Lm03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBh cmFncmFwaA0KCXttc28tc3R5bGUtbmFtZTptXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0x MzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0K CW1hcmdpbi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1l cyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjpi bGFjazsNCglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0KLk1zb0No cERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLWZhcmVhc3QtbGFu Z3VhZ2U6RU4tVVM7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0 Ow0KCW1hcmdpbjo3MC44NXB0IDcwLjg1cHQgNzAuODVwdCA3MC44NXB0O30NCmRpdi5Xb3JkU2Vj dGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+ DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5 b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9v OnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRlIi IGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5EZWFyIEVyaWMsDQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5DYW4geW91IHBsZWFzZSBjbGFy aWZ5IHRoaXMgcG9pbnQ6IOKAnFJhdGhlciBpdCdzIGFib3V0IHRoZSBsZXZlbCBvZiB0cnVzdCB0 byBiZSBwbGFjZWQgaW4gdGhlIG5ldHdvcmtpbmcgcGF0aCB0aHJvdWdoIHdoaWNoIHRoYXQgZGF0 YSBmbG93cy7igJ0/DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjpibGFjayI+U29ycnkgaWYgeW91IGhhdmUgYWxyZWFkeSBleHBsYWluZWQgaXQgdG8gdGhlIGVk aXRvcnMsIGJ1dCBhcyBhIFdHIHBhcnRpY2lwYW50IEkgZG9u4oCZdCBoYXZlIGFjY2VzcyB0byBh IHJlY29yZCBvZiBzdWNoIGRpc2N1c3Npb24uDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjpibGFjayI+VGhhbmsgeW91LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij5NZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFk ZGluZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20i Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkRl Jm5ic3A7Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBFcmljIFJlc2Nv cmxhIFttYWlsdG86ZWtyQHJ0Zm0uY29tXQ0KPGJyPg0KPGI+RW52b3nDqSZuYnNwOzo8L2I+IHZl bmRyZWRpIDIwIG9jdG9icmUgMjAxNyAxNTo0NTxicj4NCjxiPsOAJm5ic3A7OjwvYj4gUGF1bCBR dWlubiAocGF1bHEpPGJyPg0KPGI+Q2MmbmJzcDs6PC9iPiBBbGlhIEF0bGFzOyBCT1VDQURBSVIg TW9oYW1lZCBJTVQvT0xOOyBLYXRobGVlbiBNb3JpYXJ0eTsgc2ZjQGlldGYub3JnPGJyPg0KPGI+ T2JqZXQmbmJzcDs6PC9iPiBSZTogW3NmY10gTlNIIERJU0NVU1MgU3RhdHVzPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0IDY6 MzEgQU0sIFBhdWwgUXVpbm4gKHBhdWxxKSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnBhdWxxQGNpc2Nv LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnBhdWxxQGNpc2NvLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBBbGlhLCA8 bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi cj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9u IE9jdCAxOSwgMjAxNywgYXQgMjo0OSBQTSwgQWxpYSBBdGxhcyAmbHQ7PGEgaHJlZj0ibWFpbHRv OmFrYXRsYXNAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+YWthdGxhc0BnbWFpbC5jb208L2E+ Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkhpIE1lZCwgPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5T aW5jZSB5b3UgZGlyZWN0ZWQgdGhpcyBhdCBtZSwgdGhlcmUgYXJlIGVmZm9ydHMgdG8gaGF2ZSBz b21lIGRpc2N1c3Npb25zIGFuZCB1bmRlcnN0YW5kIGJldHRlciB0aGUgcGFydGljdWxhciB0aHJl YXRzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Q3VycmVudGx5LCB0aGVyZSBpcyBubyB0cmFuc3BvcnQgd2l0aCBpbnRlZ3JpdHkgcHJvdGVjdGlv biB0aGF0IGlzIGV2ZW4gYSBTSE9VTEQgdG8gaW1wbGVtZW50LCBtdWNoIGxlc3MgYSBNVVNULiZu YnNwOyBUaGVyZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+aXMgbm8gY29udHJvbC1wbGFuZSBkZWZpbmVkIChiZXlvbmQgdGhlIEJHUCB3b3JrKSB0 aGF0IGRlc2NyaWJlcyBkZXRlY3RpbmcgaXNzdWVzLiZuYnNwOyBUaGVyZSBpcyBubyBPQU0gZGVm aW5lZCBhbmQgYWRvcHRlZDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+YnkgdGhlIFdHIHRoYXQgZGV0ZWN0cyBvciBoYW5kbGVzIHRoZXNlIHR5cGVz IG9mIGF0dGFja3MuIEkgc2VlIHRoZSBzdHJ1Y3R1cmUgdGhhdCB5b3UgYXJlIHByZXN1bWluZywg YnV0IG5vbmUgb2YgdGhlc2UgYXJlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5hdmFpbGFibGUgYXMgbm9ybWF0aXZlIHJlZmVyZW5jZXMgdG8gTlNI IHRvZGF5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PQU0gZG9lcyBub3QgYWRkcmVzcyB0aGUgc2VjdXJpdHkg Y29uY2VybiBhcm91bmQgaW50ZWdyaXR5IGFuZCBkZXZpY2VzLiZuYnNwOyBJZiB5b3UgYW5kIHRo ZSBXRyBiZWxpZXZlIE9BTSBpcyB0aGUgbmV4dCDigJx0byBkb+KAnSBmb3IgdGhlIFdHLCB0aGF0 4oCZcyBmaW5lLCBidXQgaXTigJlzIG9ydGhvZ29uYWwgdG8gdGhlIHNlY3VyaXR5IHBvaW50cyBy YWlzZWQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJy Pg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5JIGhhZCByZWNvbW1lbmRlZCBoYXZpbmcgYSBmb2N1c2VkIGludGVyaW0gbWVl dGluZyB0byBtYWtlIHN1cmUgdGhhdCBldmVyeW9uZSBjb25jZXJuZWQgdW5kZXJzdG9vZCB0aGUg aXNzdWVzIGFuZDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+d29ya2VkIHRocm91Z2ggdGhlIHRocmVhdCBhbmFseXNpcyBhbmQgcG9zc2libGUgc29s dXRpb25zIHRvZ2V0aGVyLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TGV04oCZcyBwbGVhc2Ugbm90IGNvbmZsYXRl IHRoZSBvbmdvaW5nIHNlY3VyaXR5IGRpc2N1c3Npb24gd2l0aCBPQU0sIG9yIG90aGVyIHRvcGlj cy4mbmJzcDsgVGhlIHNlY3VyaXR5IHJlYWxpdHksIGFzIHlvdSBwb2ludGVkIG91dCBpbiB5b3Vy IGVtYWlsIHRvIEVyaWMsIGlzIHRoYXQgd2UsIGFzIGEgY29tbXVuaXR5IGFuZCBpbmR1c3RyeSwg YWNjZXB0IGEgbGV2ZWwgb2YgdHJ1c3Qgd3J0IG5ldHdvcmsgZGV2aWNlcy4NCjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkkgZG9uJ3QgYWN0dWFsbHkgdGhpbmsgdGhhdCdzIHRoZSBwb2lu dCBvZiBjb250ZW50aW9uLCBhdCBsZWFzdCBmcm9tIG15IHBlcnNwZWN0aXZlLiBSYXRoZXIgaXQn cyBhYm91dCB0aGUgbGV2ZWwgb2YgdHJ1c3QgdG8gYmUgcGxhY2VkIGluIHRoZSBuZXR3b3JraW5n IHBhdGggdGhyb3VnaCB3aGljaCB0aGF0IGRhdGEgZmxvd3MuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi1Fa3I8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44 cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwO1RoZSBvbmdvaW5nIGVkaXRzIGFuZCBkaWFsb2d1 ZSB3aXRoIEthdGhsZWVuIGFuZCBFcmljIGFyZSB3b3JraW5nIHRocm91Z2ggdGhlaXIgY29uY2Vy bnMuJm5ic3A7IEFuIGludGVyaW0gdG8gdGFsayBhYm91dCBuZXh0IFNGQyBzdGVwcywgcG9zdCBO U0gsIGlzIGEgZGlmZmVyZW50IG1hdHRlci4gJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QXQg dGhpcyBwb2ludCwgY2xlYXJseSB0aGUgbW9zdCB0aGF0IGNvdWxkIGhhcHBlbiBpcyBhPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj52aXJ0dWFsIGlu dGVyaW0uJm5ic3A7IFRoZXJlIGFyZSBzb21lIGJhY2tncm91bmQgZGlzY3Vzc2lvbnMgZ29pbmcg b24uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkkgZG8gbm90IHdhbnQgdG8gYXNzdW1lIHdoYXQgbWl4dHVyZSB3aWxsIGJlIGFjY2VwdGFibGUg dG8gaGFuZGxlIHRoZSBzZWN1cml0eSBjb25jZXJucyBleHByZXNzZWQgYnkgS2F0aGxlZW4gYW5k IEVyaWM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PmFuZCBzdXBwb3J0ZWQgYnkgYSBudW1iZXIgb2Ygb3RoZXIgQURzLjxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBkbyBncmVhdGx5IGFwcHJlY2lhdGUgeW91 ciBhdHRlbnRpb24gYW5kIGVmZm9ydHMgdG8gY2xhcmlmeSBhbmQgdHJ5IHRvIG1vdmUgdGhpcyB3 b3JrIGZvcndhcmQuIEkgaGF2ZSBiZWVuIGV4cHJlc3NpbmcgY29uY2VybnM8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmFib3V0IHRoZSBzZWN1cml0 eSBhc3BlY3RzIG9mIHRoaXMgd29yayBzaW5jZSBSRkMgNzY2NSB3ZW50IHRocm91Z2ggdGhlIHB1 YmxpY2F0aW9uIHByb2Nlc3MgLSBhbmQgc3Ryb25nbHkgZW5jb3VyYWdpbmcgc2VyaW91czxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V0cgZm9jdXMg dG8gcHJldmVudCBwcmVjaXNlbHkgd2hhdCBoYXMgbm93IGhhcHBlbmVkLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5SZWdhcmRzLDxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWxpYTxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBUaHUsIE9jdCAxOSwg MjAxNyBhdCA0OjQ5IEFNLCAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9y YW5nZS5jb20iIHRhcmdldD0iX2JsYW5rIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9h PiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPkhpIEFsaWEsDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Q2FuIHlvdSBw bGVhc2Ugc2hhcmUgd2l0aCB1cyB0aGUgY3VycmVudCBzdGF0dXMgb2YgdGhlIGRvY3VtZW50IGFu ZCB0aGUgbGlzdCBvZiBwZW5kaW5nIGJsb2NraW5nIHBvaW50cz88L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPkkgd2VudCB0aHJvdWdoIGFsbCBwdWJsaWMgZW1haWwgZXhjaGFuZ2VzLCBl c3BlY2lhbGx5IHRoZSBvbmVzIHJlbGF0ZWQgdG8gc2VjdXJpdHksIGJ1dCBpdCBpcyBub3QgdGhh dCBlYXN5DQogdG8gdW5kZXJzdGFuZCB3aGF0IGFyZSB0aGUgcmVtYWluaW5nIGlzc3VlcyB0aGF0 IG5lZWQgZml4ZXMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5JbiBwYXJ0aWN1bGFy LCBpcyB0aGVyZSBhIGNvbmNlcm4gd2l0aCBhc3N1bWluZyB0aGUgY3VycmVudCBOU0ggdGhyZWF0 IG1vZGVsPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0ibTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0 cGFyYWdyYXBoIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjEuPC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPk5TSCBpcyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGluZHVjZWQgYnkgbm9kZXMg dGhhdCBpbmplY3QgKHNwb29mZWQpIE5TSCBiZWZvcmUgZW50ZXJpbmcgYW4gU0ZDLWVuYWJsZWQg ZG9tYWluLiBJbmRlZWQsIFNGQyBpbmdyZXNzIG5vZGVzIE1VU1QgZGlzY2FyZCBwYWNrZXRzIGNh cnJ5aW5nIE5TSC48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0ibTc1MDM5MzAxNDE2 MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPjIuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPk5TSCBp cyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGZyb20gd2l0aGluIHRoZSBTRkMtZW5hYmxlZCBkb21h aW4gdG8gaW5qZWN0IG5vbi1hdXRob3JpemVkIGNvbnRleHQgaGVhZGVycy4gRnJvbSBhIHNlcnZp Y2UgcGVyc3BlY3RpdmUsIHRoZSBndWFyZCBpcyB0aGUgQ1Agd2hpY2ggaXMgcmVzcG9uc2libGUg Zm9yDQogaW5zdHJ1Y3RpbmcgdGhlIFNGQy1hd2FyZSBub2RlcyBhYm91dCB0aGUgbWFuZGF0b3J5 LXRvLXByb2Nlc3MgYW5kIG9wdGlvbmFsLXRvLXByb2Nlc3MgY29udGV4dCBoZWFkZXJzLiBGdXJ0 aGVybW9yZSwgd2hhdGV2ZXIgdGhlIG9yaWdpbiBvZiBhIHN1cHBsaWVkIGNvbnRleHQgaGVhZGVy LCB0aGUgbGFzdCBTRkYgb2YgYSBjaGFpbiAoYW5kIGVncmVzcyBub2RlcykgTVVTVCByZW1vdmUg dGhlIE5TSCBiZWZvcmUgZm9yd2FyZGluZyB1cHN0cmVhbS48L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0ibTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2 NzVtc29saXN0cGFyYWdyYXBoIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjMuPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPk5TSCBpcyBzZWN1cmUgYWdhaW5zdCBsZWFraW5nIHByaXZhY3kg aW5mb3JtYXRpb24gb3V0c2lkZSBhbiBTRkMgZW5hYmxlZCBkb21haW4uIFRoZSBsYXN0IFNGRiBv ZiBhIGNoYWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNIIGJlZm9yZSBm b3J3YXJkaW5nIHVwc3RyZWFtLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtNzUw MzkzMDE0MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3Jh cGgiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+NC48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+TlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGluZGVmaW5pdGUgU0YvU0ZGIGxvb3BzIGJ5IG1lYW5z IG9mIFNJIGFuZCBUVEwgZmllbGRzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJt NzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJh Z3JhcGgiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+NS48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+Q29udHJvbCBwbGFuZSBzcGVjaWZpYyB0aHJlYXRzIGFyZSBvdXQgb2Ygc2NvcGUsIGJ1 dCB0aGUgZG9jdW1lbnQgY2l0ZXMgSS1ELmlldGYtc2ZjLWNvbnRyb2wtcGxhbmUgZm9yIHRoZSBl eHBlY3RlZCBiZWhhdmlvciB3aGVuIGluc3RydWN0aW5nIFNGQyBub2Rlcy4gQlRXLCB0aGUgc2Vj ZGlyIHJldmlldyBvZiB0aGUNCiBDUCByZXF1aXJlbWVudHMgY2FuIGJlIHJldHJpZXZlZCBoZXJl ICg8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9yZXZpZXctaWV0Zi1z ZmMtY29udHJvbC1wbGFuZS0wMi1zZWNkaXItZWFybHktbWVhZG93cy0yMDE1LTEyLTEwLyIgdGFy Z2V0PSJfYmxhbmsiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL3Jldmlldy1pZXRm LXNmYy1jb250cm9sLXBsYW5lLTAyLXNlY2Rpci1lYXJseS1tZWFkb3dzLTIwMTUtMTItMTAvPC9h PikuDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0ibTc1MDM5MzAxNDE2MjAwMTI0 MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPjYuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPk5TSCBkb2VzIG5v dCBzaGFyZSBwcml2YWN5IGRhdGEgd2l0aCBub24tYXV0aG9yaXplZCBwYXJ0aWVzLiBJbmRlZWQs IGRhdGEgY2FycmllZCBpbiBjb250ZXh0IGhlYWRlcnMgYXJlIGRlcml2ZWQgZnJvbSB0aGUgb3Jp Z2luYWwgcGFja2V0IChlLmcuLCBzb3VyY2UgSVAgYWRkcmVzcykgb3IgYXJlIGFscmVhZHkga25v d24NCiB0byB0aGUgb3BlcmF0b3IgKGUuZy4sIHN1YnNjcmliZXIgaWRlbnRpZmllciwgcG9saWN5 IGlkZW50aWZpZXIsIHNlcnZpY2UgaWRlbnRpZmllcikuIFRoZSBjb250ZXh0IGluZm9ybWF0aW9u IGlzIHNoYXJlZCB3aXRoIG5vZGVzIHRoYXQgYXJlIHdpdGhpbiB0aGUgc2FtZSBhZG1pbmlzdHJh dGl2ZSBkb21haW4uICZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtNzUw MzkzMDE0MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3Jh cGgiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Ny48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+TGlrZSBvdGhlciBjb21tdW5pY2F0aW9uIHByb3RvY29scywgYXR0YWNrcyBmcm9tIHdpdGhp biB0aGUgbmV0d29yayBhcmUgcG9zc2libGUsIGJ1dCB0aG9zZSBhcmUgc29mdGVuIGJ5IHJlbHlp bmcgb24gdGhlIHByb2NlZHVyZXMgcHV0IGluIHBsYWNlIGJ5IG9wZXJhdG9ycyBmb3IgdGVzdGlu ZyBhbmQgdmFsaWRhdGluZw0KIG5vZGVzL2ZlYXR1cmVzIGJlZm9yZSBhY3R1YWwgYWN0aXZhdGlv bi4gTlNIIGRvZXMgbm90IHByb3ZpZGUgYSBidWlsdC1pbiBmZWF0dXJlIHRvIHByZXZlbnQgbWlz YmVoYXZpbmcgbm9kZXMsIGJ1dCByZWNvbW1lbmRzIHRvIHJlbHkgb24gdGhlIHNlY3VyaXR5IGZl YXR1cmVzIHByb3ZpZGVkIGJ5IHRoZSB1bmRlcmx5aW5nIHRyYW5zcG9ydCBlbmNhcHN1bGF0aW9u IHNjaGVtZXMuDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkxldOKAmXMgbm93IGZv Y3VzIG9uIHRoZSB0eXBpY2FsIOKAnGF0dGFja3PigJ0gdGhhdCBjYW4gYmUgaXNzdWVkIGZyb20g d2l0aGluIHRoZSBuZXR3b3JrOg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im03 NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFn cmFwaCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4xLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij5BIG1pc2JlaGF2aW5nIG5vZGUgcmVkaXJlY3QgdGhlIHRyYWZmaWMgdG8gbm9uLWF1dGhv cml6ZWQgbm9kZXMgb3V0c2lkZSBhIGRvbWFpbjogVGhpcyBpcyBub3QgTlNILXNwZWNpZmljLjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWls LW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+Mi48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQi PiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+QSBtaXNiZWhhdmluZyBTRkMt dW53YXJlIG5vZGUgYWx0ZXJzIHRoZSBjb250ZW50IG9mIGEgcGFja2V0OiBUaGlzIGlzIG5vdCBO U0gtc3BlY2lmaWMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im03NTAzOTMwMTQx NjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4zLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5BIG1p c2JlaGF2aW5nIFNGQy1hd2FyZSBub2RlIGFsdGVycyB0aGUgY29udGVudCBvZiBOU0g6PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0x MzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0Ojcy LjBwdCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPmkuPC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkl0IHJlbW92ZXMgdGhlIE5TSCBoZWFkZXIgZnJv bSBhbGwgcGFja2V0cyBpdCBzZWVzOiBUaGlzIHdpbGwgaW1wbHkgdGhhdCB0aGUgcGFja2V0cywg dGhlIG1pc2JlaGF2aW5nIG5vZGUgaW50ZXJjZXB0cywgd2lsbCBiZSBmb3J3YXJkZWQgdXBzdHJl YW0gd2l0aG91dCBpbnZva2luZyB0aGUgcmVxdWlyZWQgU0ZzDQogKHdoaWNoIG1heSBiZSBzZWVu IGFzIGEgZmVhdHVyZSwgbm90IGEgYnVnIGlmIG9uZSBkaXNsaWtlcyDigJxtaWRkbGVib3hlc+KA nSA6KSkuIE1vcmUgc2VyaW91c2x5LCB0aGUgT0FNIE5TSCBmZWF0dXJlIHdpbGwgYWxsb3cgYW4g b3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRoZXIgTlNIIHBhY2tldHMgYXJlIHRyYXZlbGxpbmcgaW4g YWNjb3JkYW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMgb2YgdGhhdCBkb21haW4uIFJ1bm5pbmcg dGhhdCBmZWF0dXJlIHdpbGwNCiBoZWxwIGRldGVjdGluZyB0aGUgbWlzYmVoYXZpbmcgbm9kZS4g PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im03NTAzOTMwMTQxNjIwMDEyNDMxZ21h aWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjcyLjBwdCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPmlpLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5JdCBtb2RpZmllcyB0aGUgY29udGVudCBvZiBTUEk6IFRo aXMgd2lsbCBpbXBseSB0aGF0IHRoZXNlIHBhY2tldHMgd2lsbCBiZSBmb3J3YXJkZWQgb3ZlciBh IHdyb25nIHBhdGguIEFnYWluLCBydW5uaW5nIE9BTSBOU0ggd2lsbCBhbGxvdyB0aGUgb3BlcmF0 b3IgdG8gZGV0ZWN0IHdoZXRoZXIgYSBwYWNrZXQgaXMNCiB0cmF2ZWxsaW5nIGluIGFjY29yZGFu Y2Ugd2l0aCBTRkMgaW5zdHJ1Y3Rpb25zLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSByZWd1bGFybHkg d2lsbCBoZWxwIGlkZW50aWZ5aW5nIHRoZSBtaXNiZWhhdmluZyBub2RlIGFuZCB3aGV0aGVyIHRo ZSBTRkMgY29uZmlndXJhdGlvbiBvZiBhIGRvbWFpbiBpcyBhbGlnbmVkIHdpdGggdGhlIGV4cGVj dGVkIGJlaGF2aW9yLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtNzUwMzkzMDE0 MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiIHN0 eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6Ny4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8 L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5paWkuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bh bj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNJL1RU TDogVGhpcyB3aWxsIGluY3JlYXNlIHRoZSBhdXRob3JpemVkIG1heGltdW0gU0ZGL1NGIGhvcHMu IE5vdCBzdXJlIGlmIHRoZXJlIGlzIGEgc2VjdXJpdHkgcHJvYmxlbSBvdXQgdGhlcmUuDQo8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0ibTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1t LTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 NzIuMHB0Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9zcGFu PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+aXYuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPlRoZSBtaXNiZWhhdmluZyBub2RlIGlzIGEgY2xhc3NpZmllcjog VGhlIGltcGxpY2F0aW9ucyB3aWxsIGJlIHNldmVyZSBmcm9tIGEgc2VydmljZSBzdGFuZHBvaW50 LiBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0byBkZXRlY3Qgc3VjaCBjYXNl LiAmbmJzcDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0ibTc1MDM5MzAx NDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIiBz dHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+di48 L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+VGhlIG1pc2Jl aGF2aW5nIG5vZGUgaXMgYW4gU0ZGOiBFeGFtcGxlcyBvZiBtaXNiZWhhdmlvcnMgYXJlOiBzdHJp cCBOU0gsIGZvcndhcmQgdG8gYSBub24tYXV0aG9yaXplZCBTRiwgcmVkaXJlY3QgdGhlIHRyYWZm aWMgdG8gYSBub24tYXV0aG9yaXplZCBub2RlcywgZXRjLiBMaWtlIGZvciB0aGUgY2xhc3NpZmll cg0KIGNhc2UsIE5TSCByZWxpZXMgb24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBz dWNoIGNhc2UuICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+QXJlIHRoZXJlIHNwZWNpZmljIGF0dGFja3MgdGhhdCBhcmUg bm90IGxpc3RlZCBhYm92ZSBhbmQgdGhhdCBuZWVkIG1vcmUgYXR0ZW50aW9uIGZyb20gdGhlIFdH Pzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+VGhhbmsgeW91Ljwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+Q2hlZXJzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5NZWQ8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXzxicj4NCnNmYyBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86 c2ZjQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+c2ZjQGlldGYub3JnPC9hPjxicj4NCjxhIGhy ZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2ZjIiB0YXJnZXQ9Il9i bGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmM8L2E+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_787AE7BB302AE849A7480A190F8B93300A057BA4OPEXCLILMA3corp_-- From nobody Fri Oct 20 06:56:20 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C080F13337F for ; Fri, 20 Oct 2017 06:56:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x4pWfRJOJyQg for ; Fri, 20 Oct 2017 06:56:16 -0700 (PDT) Received: from mail-yw0-x232.google.com (mail-yw0-x232.google.com [IPv6:2607:f8b0:4002:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71DC81332D7 for ; Fri, 20 Oct 2017 06:56:16 -0700 (PDT) Received: by mail-yw0-x232.google.com with SMTP id t71so6413479ywc.3 for ; Fri, 20 Oct 2017 06:56:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=5AoLSh7SyinzPQ5tSL7kJ9mx9nfhtGYB0OC5zWNNJ6k=; b=VwGtihLvupxpZMRf0pB6ztxpJcJF5DxFUWLNsd6siauIoQKDHABe0xgk0WKkmSKrjP JS61pOexPgtvH2yjSQV7SKeE0nhPaDWYHljmQutmH/2YN95HPlN8p3TQNQTrkJ1OBIG3 orFawMP5N67b+pT7BJKpzLLbUzp+ow3+xYJNxoXve6El624miPOW+VLVwdPy5twcBaIg IX2itfjaGedcRSv9AqYugYhdr6jPItz0mbjQwl1/xeWG+uk4/U4HrJi3Fbi9fKcHOCaN NF7/UiZdu1czV3SHhSebPYoEC1wO4bakP1GJessd32ovp8EouAVqjuXgb1AAP8CpWc5G 63kg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=5AoLSh7SyinzPQ5tSL7kJ9mx9nfhtGYB0OC5zWNNJ6k=; b=Ed7LWoAdHjPO4vbbVYIuG+DMmHbt712KeEOi2Ynqef+d/dU/fBP8IiFVM8OBri+J92 IfbKZxbaCaBShkvv2ICFRvjALBte9oUeJpLx3ovqhvWnPnMLWBe9pdfFekkoyzuFp1kz 5avHEp3nYsDv5CULP2/ircLFBlnZ9mKvSztpPquJZYkYksK1soyIIrdIMH8QiQH0jSWn svcbkUAiHRJPp4IgBEI5QGepwX8elFPR3PJQtZU2Chj4/O5MIbWxgMJ94j6NKfr7021L k/0yylefdw4/KD04cUE1c7lLkgNcZZBCFaGwNF7p+nDAE4Lq7FBJ6GrCqMvpKcc+L8hP 1U+g== X-Gm-Message-State: AMCzsaXsclaofbfIsVmahc3EC5B68jucQlTKze0c2G3vDGl8QnYqOeKB iIyENJTcicqeassl+MmIpUYKCpQPcQEugixGEI1FEQ== X-Google-Smtp-Source: ABhQp+RdT4godYsUlfB0o1nLO0gwUo8U/pUa3B8dYjM/knvI2UOyDKohk9vE3IlgYHH5+hR+uqbNallp6vaVM7KDHMA= X-Received: by 10.129.36.1 with SMTP id k1mr3255994ywk.485.1508507775670; Fri, 20 Oct 2017 06:56:15 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Fri, 20 Oct 2017 06:55:35 -0700 (PDT) In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A057BA4@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BA4@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: Eric Rescorla Date: Fri, 20 Oct 2017 06:55:35 -0700 Message-ID: To: mohamed.boucadair@orange.com Cc: "Paul Quinn (paulq)" , Alia Atlas , Kathleen Moriarty , "sfc@ietf.org" Content-Type: multipart/alternative; boundary="001a1142e4cc1c3063055bfad6ff" Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 13:56:19 -0000 --001a1142e4cc1c3063055bfad6ff Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable It's explained in detail in my DISCUSS: "1. The assumption that the datacenter is a secure environment is not a reasonable one. As Kathleen and Adam both observer, datacenter breaches are common and that is why people are moving towards encryption inside the data center. I see that this draft has text claiming that this is only to be deployed in safe environments, but we know that technologies like this get deployed outside the locations for which we claim they are to be deployed, and there's nothing here to stop that. Moreover, the whole trend towards cloud computing pushes us away from designs in which you can safely talk about single secure zones." -Ekr On Fri, Oct 20, 2017 at 6:51 AM, wrote: > Dear Eric, > > > > Can you please clarify this point: =E2=80=9CRather it's about the level o= f trust > to be placed in the networking path through which that data flows.=E2=80= =9D? > > > > Sorry if you have already explained it to the editors, but as a WG > participant I don=E2=80=99t have access to a record of such discussion. > > > > Thank you. > > > > Cheers, > > Med > > > > *De :* Eric Rescorla [mailto:ekr@rtfm.com] > *Envoy=C3=A9 :* vendredi 20 octobre 2017 15:45 > *=C3=80 :* Paul Quinn (paulq) > *Cc :* Alia Atlas; BOUCADAIR Mohamed IMT/OLN; Kathleen Moriarty; > sfc@ietf.org > *Objet :* Re: [sfc] NSH DISCUSS Status > > > > > > > > On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) > wrote: > > Hi Alia, > > > > > > > > On Oct 19, 2017, at 2:49 PM, Alia Atlas wrote: > > > > Hi Med, > > > > Since you directed this at me, there are efforts to have some discussions > and understand better the particular threats. > > Currently, there is no transport with integrity protection that is even a > SHOULD to implement, much less a MUST. There > > is no control-plane defined (beyond the BGP work) that describes detectin= g > issues. There is no OAM defined and adopted > > by the WG that detects or handles these types of attacks. I see the > structure that you are presuming, but none of these are > > available as normative references to NSH today. > > > > > > OAM does not address the security concern around integrity and devices. > If you and the WG believe OAM is the next =E2=80=9Cto do=E2=80=9D for the= WG, that=E2=80=99s fine, > but it=E2=80=99s orthogonal to the security points raised. > > > > > > I had recommended having a focused interim meeting to make sure that > everyone concerned understood the issues and > > worked through the threat analysis and possible solutions together. > > > > Let=E2=80=99s please not conflate the ongoing security discussion with OA= M, or > other topics. The security reality, as you pointed out in your email to > Eric, is that we, as a community and industry, accept a level of trust wr= t > network devices. > > > > I don't actually think that's the point of contention, at least from my > perspective. Rather it's about the level of trust to be placed in the > networking path through which that data flows. > > > > -Ekr > > > > > > The ongoing edits and dialogue with Kathleen and Eric are working throug= h > their concerns. An interim to talk about next SFC steps, post NSH, is a > different matter. > > > > > > > > At this point, clearly the most that could happen is a > > virtual interim. There are some background discussions going on. > > > > I do not want to assume what mixture will be acceptable to handle the > security concerns expressed by Kathleen and Eric > > and supported by a number of other ADs. > > > > I do greatly appreciate your attention and efforts to clarify and try to > move this work forward. I have been expressing concerns > > about the security aspects of this work since RFC 7665 went through the > publication process - and strongly encouraging serious > > WG focus to prevent precisely what has now happened. > > > > Regards, > > Alia > > > > > > On Thu, Oct 19, 2017 at 4:49 AM, wrote: > > Hi Alia, > > > > Can you please share with us the current status of the document and the > list of pending blocking points? > > > > I went through all public email exchanges, especially the ones related to > security, but it is not that easy to understand what are the remaining > issues that need fixes. > > > > In particular, is there a concern with assuming the current NSH threat > model? > > > > 1. NSH is secure against attacks induced by nodes that inject (spoofed) > NSH before entering an SFC-enabled domain. Indeed, SFC ingress nodes MUST > discard packets carrying NSH. > > 2. NSH is secure against attacks from within the SFC-enabled domain to > inject non-authorized context headers. From a service perspective, the > guard is the CP which is responsible for instructing the SFC-aware nodes > about the mandatory-to-process and optional-to-process context headers. > Furthermore, whatever the origin of a supplied context header, the last S= FF > of a chain (and egress nodes) MUST remove the NSH before forwarding > upstream. > > 3. NSH is secure against leaking privacy information outside an SFC > enabled domain. The last SFF of a chain (and egress nodes) MUST remove th= e > NSH before forwarding upstream. > > 4. NSH is secure against indefinite SF/SFF loops by means of SI and TTL > fields. > > 5. Control plane specific threats are out of scope, but the document > cites I-D.ietf-sfc-control-plane for the expected behavior when instructi= ng > SFC nodes. BTW, the secdir review of the CP requirements can be retrieved > here (https://datatracker.ietf.org/doc/review-ietf-sfc-control- > plane-02-secdir-early-meadows-2015-12-10/). > > 6. NSH does not share privacy data with non-authorized parties. Indeed, > data carried in context headers are derived from the original packet (e.g= ., > source IP address) or are already known to the operator (e.g., subscriber > identifier, policy identifier, service identifier). The context informati= on > is shared with nodes that are within the same administrative domain. > > 7. Like other communication protocols, attacks from within the network > are possible, but those are soften by relying on the procedures put in > place by operators for testing and validating nodes/features before actua= l > activation. NSH does not provide a built-in feature to prevent misbehavin= g > nodes, but recommends to rely on the security features provided by the > underlying transport encapsulation schemes. > > > > Let=E2=80=99s now focus on the typical =E2=80=9Cattacks=E2=80=9D that can= be issued from within > the network: > > 1. A misbehaving node redirect the traffic to non-authorized nodes > outside a domain: This is not NSH-specific. > > 2. A misbehaving SFC-unware node alters the content of a packet: This is > not NSH-specific. > > 3. A misbehaving SFC-aware node alters the content of NSH: > > i. It removes the NSH header from all packets it sees: > This will imply that the packets, the misbehaving node intercepts, will b= e > forwarded upstream without invoking the required SFs (which may be seen a= s > a feature, not a bug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)). M= ore seriously, the > OAM NSH feature will allow an operator to detect whether NSH packets are > travelling in accordance with SFC instructions of that domain. Running th= at > feature will help detecting the misbehaving node. > > ii. It modifies the content of SPI: This will imply that > these packets will be forwarded over a wrong path. Again, running OAM NSH > will allow the operator to detect whether a packet is travelling in > accordance with SFC instructions. Running that feature regularly will hel= p > identifying the misbehaving node and whether the SFC configuration of a > domain is aligned with the expected behavior. > > iii. It modifies the content of SI/TTL: This will increase > the authorized maximum SFF/SF hops. Not sure if there is a security probl= em > out there. > > iv. The misbehaving node is a classifier: The implications > will be severe from a service standpoint. NSH relies on OAM and > control-plane to detect such case. > > v. The misbehaving node is an SFF: Examples of > misbehaviors are: strip NSH, forward to a non-authorized SF, redirect the > traffic to a non-authorized nodes, etc. Like for the classifier case, NSH > relies on OAM and control-plane to detect such case. > > > > Are there specific attacks that are not listed above and that need more > attention from the WG? > > > > Thank you. > > > > Cheers, > > Med > > > > _______________________________________________ > sfc mailing list > sfc@ietf.org > https://www.ietf.org/mailman/listinfo/sfc > > > > > --001a1142e4cc1c3063055bfad6ff Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
It's explained in detail in my DISCUSS:=C2=A0

=
"1. The assumption that the datacenter is a secure environm= ent is not a
reasonable one. As Kathleen and Adam both obser=
ver, datacenter
breaches are common and that is why people are moving towards
encryption inside the data center. I see that this draft has text
claiming that this is only to be deployed in safe environments, but we
know that technologies like this get deployed outside the locations
for which we claim they are to be deployed, and there's nothing here
to stop that. Moreover, the whole trend towards cloud computing pushes
us away from designs in which you can safely talk about single secure
zones."


-Ekr



On Fri, Oct 20, 2017 at 6:51 AM, <mohamed.boucadair@or= ange.com> wrote:

Dear Eric,

=C2=A0

Can you please clarify this poi= nt: =E2=80=9CRather it's about the level of trust to be placed in the n= etworking path through which that data flows.=E2=80=9D?

=C2=A0

Sorry if you have already expla= ined it to the editors, but as a WG participant I don=E2=80=99t have access= to a record of such discussion.

=C2=A0

Thank you.=

=C2=A0

Cheers,

Med

=C2=A0

De=C2=A0: Eric= Rescorla [mailto:ekr@rtf= m.com]
Envoy=C3=A9=C2=A0: vendredi 20 octobre 2017 15:45
=C3=80=C2=A0: Paul Quinn (paulq)
Cc=C2=A0: Alia Atlas; BOUCADAIR Mohamed IMT/OLN; Kathleen Moriarty; = sfc@ietf.org
Objet=C2=A0: Re: [sfc] NSH DISCUSS Status

=C2=A0

=C2=A0

=C2=A0

On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) = <paulq@cisco.com> wrote:

Hi Alia,

=C2=A0

=C2=A0

=C2=A0

Hi Med,

=C2=A0

Since you directed this at me, there are efforts to = have some discussions and understand better the particular threats.<= u>

Currently, there is no transport with integrity prot= ection that is even a SHOULD to implement, much less a MUST.=C2=A0 There=

is no control-plane defined (beyond the BGP work) th= at describes detecting issues.=C2=A0 There is no OAM defined and adopted=

by the WG that detects or handles these types of att= acks. I see the structure that you are presuming, but none of these are<= /u>

available as normative references to NSH today.

=C2=A0

=C2=A0

OAM does not address the security concern around int= egrity and devices.=C2=A0 If you and the WG believe OAM is the next =E2=80= =9Cto do=E2=80=9D for the WG, that=E2=80=99s fine, but it=E2=80=99s orthogo= nal to the security points raised.

=C2=A0



I had recommended having a focused interim meeting t= o make sure that everyone concerned understood the issues and=

worked through the threat analysis and possible solu= tions together.

=C2=A0

Let=E2=80=99s please not conflate the ongoing securi= ty discussion with OAM, or other topics.=C2=A0 The security reality, as you= pointed out in your email to Eric, is that we, as a community and industry= , accept a level of trust wrt network devices.

=C2=A0

I don't actually think that's the point of c= ontention, at least from my perspective. Rather it's about the level of= trust to be placed in the networking path through which that data flows.

=C2=A0

-Ekr

=C2=A0

=C2=A0

=C2=A0The ongoing edits and dialogue with Kathleen a= nd Eric are working through their concerns.=C2=A0 An interim to talk about = next SFC steps, post NSH, is a different matter. =C2=A0

=C2=A0

=C2=A0



At this point, clearly the most that could happen is= a

virtual interim.=C2=A0 There are some background dis= cussions going on.

=C2=A0

I do not want to assume what mixture will be accepta= ble to handle the security concerns expressed by Kathleen and Eric

and supported by a number of other ADs.

=C2=A0

I do greatly appreciate your attention and efforts t= o clarify and try to move this work forward. I have been expressing concern= s

about the security aspects of this work since RFC 76= 65 went through the publication process - and strongly encouraging serious<= u>

WG focus to prevent precisely what has now happened.=

=C2=A0

Regards,

Alia

=C2=A0

=C2=A0

On Thu, Oct 19, 2017 at 4:49 AM, <mohamed.boucadair@orange= .com> wrote:

Hi Alia,

=C2=A0

Can you please share with us the current st= atus of the document and the list of pending blocking points?=

=C2=A0

I went through all public email exchanges, = especially the ones related to security, but it is not that easy to understand what are the remaining issues that need fixes.=

=C2=A0

In particular, is there a concern with assu= ming the current NSH threat model?

=C2=A0

1.=C2=A0 NSH is secure against attacks induced by nodes that inject = (spoofed) NSH before entering an SFC-enabled domain. Indeed, SFC ingress no= des MUST discard packets carrying NSH.

2.=C2=A0 NSH is secure against attacks from within the SFC-enabled d= omain to inject non-authorized context headers. From a service perspective,= the guard is the CP which is responsible for instructing the SFC-aware nodes about the mandatory-to-process and optiona= l-to-process context headers. Furthermore, whatever the origin of a supplie= d context header, the last SFF of a chain (and egress nodes) MUST remove th= e NSH before forwarding upstream.

3.=C2=A0 NSH is secure against leaking privacy information outside a= n SFC enabled domain. The last SFF of a chain (and egress nodes) MUST remov= e the NSH before forwarding upstream.

4.=C2=A0 NSH is secure against indefinite SF/SFF loops by means of S= I and TTL fields.

5.=C2=A0 Control plane specific threats are out of scope, but the do= cument cites I-D.ietf-sfc-control-plane for the expected behavior when inst= ructing SFC nodes. BTW, the secdir review of the CP requirements can be retrieved here (https://datatracker.ietf.org/doc/review-ietf-sfc-co= ntrol-plane-02-secdir-early-meadows-2015-12-10/).

6.=C2=A0 NSH does not share privacy data with non-authorized parties= . Indeed, data carried in context headers are derived from the original pac= ket (e.g., source IP address) or are already known to the operator (e.g., subscriber identifier, policy identifier, service i= dentifier). The context information is shared with nodes that are within th= e same administrative domain. =C2=A0

7.=C2=A0 Like other communication protocols, attacks from within the= network are possible, but those are soften by relying on the procedures pu= t in place by operators for testing and validating nodes/features before actual activation. NSH does not provide a built-in f= eature to prevent misbehaving nodes, but recommends to rely on the security= features provided by the underlying transport encapsulation schemes.

=C2=A0

Let=E2=80=99s now focus on the typical =E2= =80=9Cattacks=E2=80=9D that can be issued from within the network:

1.=C2=A0 A misbehaving node redirect the traffic to non-authorized n= odes outside a domain: This is not NSH-specific.

2.=C2=A0 A misbehaving SFC-unware node alters the content of a packe= t: This is not NSH-specific.

3.=C2=A0 A misbehaving SFC-aware node alters the content of NSH:

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 i.=C2=A0=C2=A0=C2=A0=C2=A0 It removes the NSH header from all packets it sees: This wi= ll imply that the packets, the misbehaving node intercepts, will be forward= ed upstream without invoking the required SFs (which may be seen as a feature, not a bug if one dislikes =E2=80=9Cmiddle= boxes=E2=80=9D :)). More seriously, the OAM NSH feature will allow an opera= tor to detect whether NSH packets are travelling in accordance with SFC ins= tructions of that domain. Running that feature will help detecting the misbehaving node.

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 ii.=C2=A0=C2=A0=C2=A0=C2=A0 It modifies the content of SPI: This will imply that these = packets will be forwarded over a wrong path. Again, running OAM NSH will al= low the operator to detect whether a packet is travelling in accordance with SFC instructions. Running that feature regul= arly will help identifying the misbehaving node and whether the SFC configu= ration of a domain is aligned with the expected behavior.<= /u>

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 iii.=C2=A0=C2=A0=C2=A0=C2=A0 It modifies the content of SI/TTL: This will increase the a= uthorized maximum SFF/SF hops. Not sure if there is a security problem out = there.

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 iv.=C2=A0=C2=A0=C2=A0=C2=A0 The misbehaving node is a classifier: The implications will= be severe from a service standpoint. NSH relies on OAM and control-plane t= o detect such case. =C2=A0=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 v.=C2=A0=C2=A0=C2=A0=C2=A0 The misbehaving node is an SFF: Examples of misbehaviors ar= e: strip NSH, forward to a non-authorized SF, redirect the traffic to a non= -authorized nodes, etc. Like for the classifier case, NSH relies on OAM and control-plane to detect such case. =C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0

Are there specific attacks that are not lis= ted above and that need more attention from the WG?

=C2=A0

Thank you.

=C2=A0

Cheers,

Med

=C2=A0

_______________________________________________=
sfc mailing list
sfc@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/sfc

=C2=A0

=C2=A0


--001a1142e4cc1c3063055bfad6ff-- From nobody Fri Oct 20 07:01:21 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BB1D133083 for ; Fri, 20 Oct 2017 07:01:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.519 X-Spam-Level: X-Spam-Status: No, score=-14.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id orRk6BkiCUjd for ; Fri, 20 Oct 2017 07:01:10 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11304132125 for ; Fri, 20 Oct 2017 07:01:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=45464; q=dns/txt; s=iport; t=1508508070; x=1509717670; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=7NkNrHJUNPv14dnNv3T+Az73B8LEyLRp+kHljTigK3Y=; b=CVTK7f/IxxZ6+xkHDwOn721XA0e0gZBmhUFkVPY8vovLn/TSbKIgZ/v4 6E5mptHhTDzk0m9uXwFDECgITnTBrtiW2DmK0Y1j+dGo1yl9roLeqGLfC kK/GvyG4avw8bwQkqiWRnZZZa9ALLmwc1c9C7cpEqc44y9Ja2j+z4z5XZ E=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DuAAD+AOpZ/4YNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9wZG4nB4Nzih+PP4FUiHCNbRCBfgMKGAEMhRYCGoQgPxgBAgE?= =?us-ascii?q?BAQEBAQFrKIUeAgEDAQEhRAcLEAIBCA4qAQYDAgICHwYLFBEBAQQOBRQHiSFMA?= =?us-ascii?q?xUQqgiCJ4c6DYNZAQEBAQEBAQEBAQEBAQEBAQEBAQEBGAWDLoIHgVCBaSkLgna?= =?us-ascii?q?CXoFrCQESAYMzL4IyBYdNgjyOZog0PAKHYYdFUIR5ghWFeYsRjQqIQwIRGQGBO?= =?us-ascii?q?AEfOIEDWHoVSS0BgjaCI4I8dogeDRgHgQWBEQEBAQ?= X-IronPort-AV: E=Sophos; i="5.43,405,1503360000"; d="scan'208,217"; a="19721305" Received: from alln-core-12.cisco.com ([173.36.13.134]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Oct 2017 14:01:09 +0000 Received: from XCH-RTP-007.cisco.com (xch-rtp-007.cisco.com [64.101.220.147]) by alln-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id v9KE18i3022212 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 20 Oct 2017 14:01:08 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-007.cisco.com (64.101.220.147) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 20 Oct 2017 10:01:07 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Fri, 20 Oct 2017 10:01:07 -0400 From: "Carlos Pignataro (cpignata)" To: Eric Rescorla CC: "Paul Quinn (paulq)" , Kathleen Moriarty , Med Boucadair , "sfc@ietf.org" , Alia Atlas Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wAdXO4AACcpgAAAAH8cgAAAiuGA Date: Fri, 20 Oct 2017 14:01:07 +0000 Message-ID: <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.116.133] Content-Type: multipart/alternative; boundary="_000_4A8DB6C528CC41D69163611A58BEC383ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:01:17 -0000 --_000_4A8DB6C528CC41D69163611A58BEC383ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RXJpYywNCg0KT24gT2N0IDIwLCAyMDE3LCBhdCA5OjQ1IEFNLCBFcmljIFJlc2NvcmxhIDxla3JA cnRmbS5jb208bWFpbHRvOmVrckBydGZtLmNvbT4+IHdyb3RlOg0KDQoNCg0KT24gRnJpLCBPY3Qg MjAsIDIwMTcgYXQgNjozMSBBTSwgUGF1bCBRdWlubiAocGF1bHEpIDxwYXVscUBjaXNjby5jb208 bWFpbHRvOnBhdWxxQGNpc2NvLmNvbT4+IHdyb3RlOg0KSGkgQWxpYSwNCg0KDQoNCk9uIE9jdCAx OSwgMjAxNywgYXQgMjo0OSBQTSwgQWxpYSBBdGxhcyA8YWthdGxhc0BnbWFpbC5jb208bWFpbHRv OmFrYXRsYXNAZ21haWwuY29tPj4gd3JvdGU6DQoNCkhpIE1lZCwNCg0KU2luY2UgeW91IGRpcmVj dGVkIHRoaXMgYXQgbWUsIHRoZXJlIGFyZSBlZmZvcnRzIHRvIGhhdmUgc29tZSBkaXNjdXNzaW9u cyBhbmQgdW5kZXJzdGFuZCBiZXR0ZXIgdGhlIHBhcnRpY3VsYXIgdGhyZWF0cy4NCkN1cnJlbnRs eSwgdGhlcmUgaXMgbm8gdHJhbnNwb3J0IHdpdGggaW50ZWdyaXR5IHByb3RlY3Rpb24gdGhhdCBp cyBldmVuIGEgU0hPVUxEIHRvIGltcGxlbWVudCwgbXVjaCBsZXNzIGEgTVVTVC4gIFRoZXJlDQpp cyBubyBjb250cm9sLXBsYW5lIGRlZmluZWQgKGJleW9uZCB0aGUgQkdQIHdvcmspIHRoYXQgZGVz Y3JpYmVzIGRldGVjdGluZyBpc3N1ZXMuICBUaGVyZSBpcyBubyBPQU0gZGVmaW5lZCBhbmQgYWRv cHRlZA0KYnkgdGhlIFdHIHRoYXQgZGV0ZWN0cyBvciBoYW5kbGVzIHRoZXNlIHR5cGVzIG9mIGF0 dGFja3MuIEkgc2VlIHRoZSBzdHJ1Y3R1cmUgdGhhdCB5b3UgYXJlIHByZXN1bWluZywgYnV0IG5v bmUgb2YgdGhlc2UgYXJlDQphdmFpbGFibGUgYXMgbm9ybWF0aXZlIHJlZmVyZW5jZXMgdG8gTlNI IHRvZGF5Lg0KDQoNCk9BTSBkb2VzIG5vdCBhZGRyZXNzIHRoZSBzZWN1cml0eSBjb25jZXJuIGFy b3VuZCBpbnRlZ3JpdHkgYW5kIGRldmljZXMuICBJZiB5b3UgYW5kIHRoZSBXRyBiZWxpZXZlIE9B TSBpcyB0aGUgbmV4dCDigJx0byBkb+KAnSBmb3IgdGhlIFdHLCB0aGF04oCZcyBmaW5lLCBidXQg aXTigJlzIG9ydGhvZ29uYWwgdG8gdGhlIHNlY3VyaXR5IHBvaW50cyByYWlzZWQuDQoNCg0KSSBo YWQgcmVjb21tZW5kZWQgaGF2aW5nIGEgZm9jdXNlZCBpbnRlcmltIG1lZXRpbmcgdG8gbWFrZSBz dXJlIHRoYXQgZXZlcnlvbmUgY29uY2VybmVkIHVuZGVyc3Rvb2QgdGhlIGlzc3VlcyBhbmQNCndv cmtlZCB0aHJvdWdoIHRoZSB0aHJlYXQgYW5hbHlzaXMgYW5kIHBvc3NpYmxlIHNvbHV0aW9ucyB0 b2dldGhlci4NCg0KTGV04oCZcyBwbGVhc2Ugbm90IGNvbmZsYXRlIHRoZSBvbmdvaW5nIHNlY3Vy aXR5IGRpc2N1c3Npb24gd2l0aCBPQU0sIG9yIG90aGVyIHRvcGljcy4gIFRoZSBzZWN1cml0eSBy ZWFsaXR5LCBhcyB5b3UgcG9pbnRlZCBvdXQgaW4geW91ciBlbWFpbCB0byBFcmljLCBpcyB0aGF0 IHdlLCBhcyBhIGNvbW11bml0eSBhbmQgaW5kdXN0cnksIGFjY2VwdCBhIGxldmVsIG9mIHRydXN0 IHdydCBuZXR3b3JrIGRldmljZXMuDQoNCkkgZG9uJ3QgYWN0dWFsbHkgdGhpbmsgdGhhdCdzIHRo ZSBwb2ludCBvZiBjb250ZW50aW9uLCBhdCBsZWFzdCBmcm9tIG15IHBlcnNwZWN0aXZlLiBSYXRo ZXIgaXQncyBhYm91dCB0aGUgbGV2ZWwgb2YgdHJ1c3QgdG8gYmUgcGxhY2VkIGluIHRoZSBuZXR3 b3JraW5nIHBhdGggdGhyb3VnaCB3aGljaCB0aGF0IGRhdGEgZmxvd3MuDQoNCg0KVW5kZXJzdG9v ZC4gSG93IGFib3V0IHRoaXM/DQoNCiAgICAgICAgICAgICAgWC4yLiAgVHJhbnNwb3J0IEVuY2Fw c3VsYXRpb24gU2VjdXJpdHkNCg0KICAgICAgICAgICAgICAgICAgICAgICAgTlNIIGlzIGFsd2F5 cyBlbmNhcHN1bGF0ZWQgYnkgYW4gb3V0ZXIgdHJhbnNwb3J0DQogICAgICAgICAgICAgICAgICAg ICAgICBlbmNhcHN1bGF0aW9uIGFzIGRldGFpbGVkIGluIFNlY3Rpb24gNCBvZiB0aGlzDQogICAg ICAgICAgICAgICAgICAgICAgICBzcGVjaWZpY2F0aW9uLCBhbmQgYXMgZGVwaWN0ZWQgaW4gRmln dXJlIDEuICBJZiBhbiBvcGVyYXRvcg0KICAgICAgICAgICAgICAgICAgICAgICAgZGVlbXMgY3J5 cHRvZ3JhcGhpYyBpbnRlZ3JpdHkgcHJvdGVjdGlvbiBuZWNlc3NhcnkgZHVlIHRvDQogICAgICAg ICAgICAgICAgICAgICAgICB0aGVpciByaXNrIGFuYWx5c2lzLCB0aGVuIGFuIG91dGVyIHRyYW5z cG9ydCBlbmNhcHN1bGF0aW9uDQogICAgICAgICAgICAgICAgICAgICAgICB0aGF0IHByb3ZpZGVz IHN1Y2ggcHJvdGVjdGlvbiBbUkZDNjA3MV0sIHN1Y2ggYXMgSVBzZWMsIE1VU1QNCiAgICAgICAg ICAgICAgICAgICAgICAgIGJlIHVzZWQuDQoNCuKAlCBDYXJsb3MuDQoNCi1Fa3INCg0KDQogVGhl IG9uZ29pbmcgZWRpdHMgYW5kIGRpYWxvZ3VlIHdpdGggS2F0aGxlZW4gYW5kIEVyaWMgYXJlIHdv cmtpbmcgdGhyb3VnaCB0aGVpciBjb25jZXJucy4gIEFuIGludGVyaW0gdG8gdGFsayBhYm91dCBu ZXh0IFNGQyBzdGVwcywgcG9zdCBOU0gsIGlzIGEgZGlmZmVyZW50IG1hdHRlci4NCg0KDQoNCkF0 IHRoaXMgcG9pbnQsIGNsZWFybHkgdGhlIG1vc3QgdGhhdCBjb3VsZCBoYXBwZW4gaXMgYQ0Kdmly dHVhbCBpbnRlcmltLiAgVGhlcmUgYXJlIHNvbWUgYmFja2dyb3VuZCBkaXNjdXNzaW9ucyBnb2lu ZyBvbi4NCg0KSSBkbyBub3Qgd2FudCB0byBhc3N1bWUgd2hhdCBtaXh0dXJlIHdpbGwgYmUgYWNj ZXB0YWJsZSB0byBoYW5kbGUgdGhlIHNlY3VyaXR5IGNvbmNlcm5zIGV4cHJlc3NlZCBieSBLYXRo bGVlbiBhbmQgRXJpYw0KYW5kIHN1cHBvcnRlZCBieSBhIG51bWJlciBvZiBvdGhlciBBRHMuDQoN CkkgZG8gZ3JlYXRseSBhcHByZWNpYXRlIHlvdXIgYXR0ZW50aW9uIGFuZCBlZmZvcnRzIHRvIGNs YXJpZnkgYW5kIHRyeSB0byBtb3ZlIHRoaXMgd29yayBmb3J3YXJkLiBJIGhhdmUgYmVlbiBleHBy ZXNzaW5nIGNvbmNlcm5zDQphYm91dCB0aGUgc2VjdXJpdHkgYXNwZWN0cyBvZiB0aGlzIHdvcmsg c2luY2UgUkZDIDc2NjUgd2VudCB0aHJvdWdoIHRoZSBwdWJsaWNhdGlvbiBwcm9jZXNzIC0gYW5k IHN0cm9uZ2x5IGVuY291cmFnaW5nIHNlcmlvdXMNCldHIGZvY3VzIHRvIHByZXZlbnQgcHJlY2lz ZWx5IHdoYXQgaGFzIG5vdyBoYXBwZW5lZC4NCg0KUmVnYXJkcywNCkFsaWENCg0KDQpPbiBUaHUs IE9jdCAxOSwgMjAxNyBhdCA0OjQ5IEFNLCA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxt YWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4+IHdyb3RlOg0KSGkgQWxpYSwNCg0K Q2FuIHlvdSBwbGVhc2Ugc2hhcmUgd2l0aCB1cyB0aGUgY3VycmVudCBzdGF0dXMgb2YgdGhlIGRv Y3VtZW50IGFuZCB0aGUgbGlzdCBvZiBwZW5kaW5nIGJsb2NraW5nIHBvaW50cz8NCg0KSSB3ZW50 IHRocm91Z2ggYWxsIHB1YmxpYyBlbWFpbCBleGNoYW5nZXMsIGVzcGVjaWFsbHkgdGhlIG9uZXMg cmVsYXRlZCB0byBzZWN1cml0eSwgYnV0IGl0IGlzIG5vdCB0aGF0IGVhc3kgdG8gdW5kZXJzdGFu ZCB3aGF0IGFyZSB0aGUgcmVtYWluaW5nIGlzc3VlcyB0aGF0IG5lZWQgZml4ZXMuDQoNCkluIHBh cnRpY3VsYXIsIGlzIHRoZXJlIGEgY29uY2VybiB3aXRoIGFzc3VtaW5nIHRoZSBjdXJyZW50IE5T SCB0aHJlYXQgbW9kZWw/DQoNCg0KMS4gIE5TSCBpcyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGlu ZHVjZWQgYnkgbm9kZXMgdGhhdCBpbmplY3QgKHNwb29mZWQpIE5TSCBiZWZvcmUgZW50ZXJpbmcg YW4gU0ZDLWVuYWJsZWQgZG9tYWluLiBJbmRlZWQsIFNGQyBpbmdyZXNzIG5vZGVzIE1VU1QgZGlz Y2FyZCBwYWNrZXRzIGNhcnJ5aW5nIE5TSC4NCg0KMi4gIE5TSCBpcyBzZWN1cmUgYWdhaW5zdCBh dHRhY2tzIGZyb20gd2l0aGluIHRoZSBTRkMtZW5hYmxlZCBkb21haW4gdG8gaW5qZWN0IG5vbi1h dXRob3JpemVkIGNvbnRleHQgaGVhZGVycy4gRnJvbSBhIHNlcnZpY2UgcGVyc3BlY3RpdmUsIHRo ZSBndWFyZCBpcyB0aGUgQ1Agd2hpY2ggaXMgcmVzcG9uc2libGUgZm9yIGluc3RydWN0aW5nIHRo ZSBTRkMtYXdhcmUgbm9kZXMgYWJvdXQgdGhlIG1hbmRhdG9yeS10by1wcm9jZXNzIGFuZCBvcHRp b25hbC10by1wcm9jZXNzIGNvbnRleHQgaGVhZGVycy4gRnVydGhlcm1vcmUsIHdoYXRldmVyIHRo ZSBvcmlnaW4gb2YgYSBzdXBwbGllZCBjb250ZXh0IGhlYWRlciwgdGhlIGxhc3QgU0ZGIG9mIGEg Y2hhaW4gKGFuZCBlZ3Jlc3Mgbm9kZXMpIE1VU1QgcmVtb3ZlIHRoZSBOU0ggYmVmb3JlIGZvcndh cmRpbmcgdXBzdHJlYW0uDQoNCjMuICBOU0ggaXMgc2VjdXJlIGFnYWluc3QgbGVha2luZyBwcml2 YWN5IGluZm9ybWF0aW9uIG91dHNpZGUgYW4gU0ZDIGVuYWJsZWQgZG9tYWluLiBUaGUgbGFzdCBT RkYgb2YgYSBjaGFpbiAoYW5kIGVncmVzcyBub2RlcykgTVVTVCByZW1vdmUgdGhlIE5TSCBiZWZv cmUgZm9yd2FyZGluZyB1cHN0cmVhbS4NCg0KNC4gIE5TSCBpcyBzZWN1cmUgYWdhaW5zdCBpbmRl ZmluaXRlIFNGL1NGRiBsb29wcyBieSBtZWFucyBvZiBTSSBhbmQgVFRMIGZpZWxkcy4NCg0KNS4g IENvbnRyb2wgcGxhbmUgc3BlY2lmaWMgdGhyZWF0cyBhcmUgb3V0IG9mIHNjb3BlLCBidXQgdGhl IGRvY3VtZW50IGNpdGVzIEktRC5pZXRmLXNmYy1jb250cm9sLXBsYW5lIGZvciB0aGUgZXhwZWN0 ZWQgYmVoYXZpb3Igd2hlbiBpbnN0cnVjdGluZyBTRkMgbm9kZXMuIEJUVywgdGhlIHNlY2RpciBy ZXZpZXcgb2YgdGhlIENQIHJlcXVpcmVtZW50cyBjYW4gYmUgcmV0cmlldmVkIGhlcmUgKGh0dHBz Oi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL3Jldmlldy1pZXRmLXNmYy1jb250cm9sLXBsYW5l LTAyLXNlY2Rpci1lYXJseS1tZWFkb3dzLTIwMTUtMTItMTAvKS4NCg0KNi4gIE5TSCBkb2VzIG5v dCBzaGFyZSBwcml2YWN5IGRhdGEgd2l0aCBub24tYXV0aG9yaXplZCBwYXJ0aWVzLiBJbmRlZWQs IGRhdGEgY2FycmllZCBpbiBjb250ZXh0IGhlYWRlcnMgYXJlIGRlcml2ZWQgZnJvbSB0aGUgb3Jp Z2luYWwgcGFja2V0IChlLmcuLCBzb3VyY2UgSVAgYWRkcmVzcykgb3IgYXJlIGFscmVhZHkga25v d24gdG8gdGhlIG9wZXJhdG9yIChlLmcuLCBzdWJzY3JpYmVyIGlkZW50aWZpZXIsIHBvbGljeSBp ZGVudGlmaWVyLCBzZXJ2aWNlIGlkZW50aWZpZXIpLiBUaGUgY29udGV4dCBpbmZvcm1hdGlvbiBp cyBzaGFyZWQgd2l0aCBub2RlcyB0aGF0IGFyZSB3aXRoaW4gdGhlIHNhbWUgYWRtaW5pc3RyYXRp dmUgZG9tYWluLg0KDQo3LiAgTGlrZSBvdGhlciBjb21tdW5pY2F0aW9uIHByb3RvY29scywgYXR0 YWNrcyBmcm9tIHdpdGhpbiB0aGUgbmV0d29yayBhcmUgcG9zc2libGUsIGJ1dCB0aG9zZSBhcmUg c29mdGVuIGJ5IHJlbHlpbmcgb24gdGhlIHByb2NlZHVyZXMgcHV0IGluIHBsYWNlIGJ5IG9wZXJh dG9ycyBmb3IgdGVzdGluZyBhbmQgdmFsaWRhdGluZyBub2Rlcy9mZWF0dXJlcyBiZWZvcmUgYWN0 dWFsIGFjdGl2YXRpb24uIE5TSCBkb2VzIG5vdCBwcm92aWRlIGEgYnVpbHQtaW4gZmVhdHVyZSB0 byBwcmV2ZW50IG1pc2JlaGF2aW5nIG5vZGVzLCBidXQgcmVjb21tZW5kcyB0byByZWx5IG9uIHRo ZSBzZWN1cml0eSBmZWF0dXJlcyBwcm92aWRlZCBieSB0aGUgdW5kZXJseWluZyB0cmFuc3BvcnQg ZW5jYXBzdWxhdGlvbiBzY2hlbWVzLg0KDQpMZXTigJlzIG5vdyBmb2N1cyBvbiB0aGUgdHlwaWNh bCDigJxhdHRhY2tz4oCdIHRoYXQgY2FuIGJlIGlzc3VlZCBmcm9tIHdpdGhpbiB0aGUgbmV0d29y azoNCg0KMS4gIEEgbWlzYmVoYXZpbmcgbm9kZSByZWRpcmVjdCB0aGUgdHJhZmZpYyB0byBub24t YXV0aG9yaXplZCBub2RlcyBvdXRzaWRlIGEgZG9tYWluOiBUaGlzIGlzIG5vdCBOU0gtc3BlY2lm aWMuDQoNCjIuICBBIG1pc2JlaGF2aW5nIFNGQy11bndhcmUgbm9kZSBhbHRlcnMgdGhlIGNvbnRl bnQgb2YgYSBwYWNrZXQ6IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy4NCg0KMy4gIEEgbWlzYmVo YXZpbmcgU0ZDLWF3YXJlIG5vZGUgYWx0ZXJzIHRoZSBjb250ZW50IG9mIE5TSDoNCg0KICAgICAg ICAgICAgaS4gICAgIEl0IHJlbW92ZXMgdGhlIE5TSCBoZWFkZXIgZnJvbSBhbGwgcGFja2V0cyBp dCBzZWVzOiBUaGlzIHdpbGwgaW1wbHkgdGhhdCB0aGUgcGFja2V0cywgdGhlIG1pc2JlaGF2aW5n IG5vZGUgaW50ZXJjZXB0cywgd2lsbCBiZSBmb3J3YXJkZWQgdXBzdHJlYW0gd2l0aG91dCBpbnZv a2luZyB0aGUgcmVxdWlyZWQgU0ZzICh3aGljaCBtYXkgYmUgc2VlbiBhcyBhIGZlYXR1cmUsIG5v dCBhIGJ1ZyBpZiBvbmUgZGlzbGlrZXMg4oCcbWlkZGxlYm94ZXPigJ0gOikpLiBNb3JlIHNlcmlv dXNseSwgdGhlIE9BTSBOU0ggZmVhdHVyZSB3aWxsIGFsbG93IGFuIG9wZXJhdG9yIHRvIGRldGVj dCB3aGV0aGVyIE5TSCBwYWNrZXRzIGFyZSB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0aCBT RkMgaW5zdHJ1Y3Rpb25zIG9mIHRoYXQgZG9tYWluLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSB3aWxs IGhlbHAgZGV0ZWN0aW5nIHRoZSBtaXNiZWhhdmluZyBub2RlLg0KDQogICAgICAgICAgaWkuICAg ICBJdCBtb2RpZmllcyB0aGUgY29udGVudCBvZiBTUEk6IFRoaXMgd2lsbCBpbXBseSB0aGF0IHRo ZXNlIHBhY2tldHMgd2lsbCBiZSBmb3J3YXJkZWQgb3ZlciBhIHdyb25nIHBhdGguIEFnYWluLCBy dW5uaW5nIE9BTSBOU0ggd2lsbCBhbGxvdyB0aGUgb3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRoZXIg YSBwYWNrZXQgaXMgdHJhdmVsbGluZyBpbiBhY2NvcmRhbmNlIHdpdGggU0ZDIGluc3RydWN0aW9u cy4gUnVubmluZyB0aGF0IGZlYXR1cmUgcmVndWxhcmx5IHdpbGwgaGVscCBpZGVudGlmeWluZyB0 aGUgbWlzYmVoYXZpbmcgbm9kZSBhbmQgd2hldGhlciB0aGUgU0ZDIGNvbmZpZ3VyYXRpb24gb2Yg YSBkb21haW4gaXMgYWxpZ25lZCB3aXRoIHRoZSBleHBlY3RlZCBiZWhhdmlvci4NCg0KICAgICAg ICBpaWkuICAgICBJdCBtb2RpZmllcyB0aGUgY29udGVudCBvZiBTSS9UVEw6IFRoaXMgd2lsbCBp bmNyZWFzZSB0aGUgYXV0aG9yaXplZCBtYXhpbXVtIFNGRi9TRiBob3BzLiBOb3Qgc3VyZSBpZiB0 aGVyZSBpcyBhIHNlY3VyaXR5IHByb2JsZW0gb3V0IHRoZXJlLg0KDQogICAgICAgICAgaXYuICAg ICBUaGUgbWlzYmVoYXZpbmcgbm9kZSBpcyBhIGNsYXNzaWZpZXI6IFRoZSBpbXBsaWNhdGlvbnMg d2lsbCBiZSBzZXZlcmUgZnJvbSBhIHNlcnZpY2Ugc3RhbmRwb2ludC4gTlNIIHJlbGllcyBvbiBP QU0gYW5kIGNvbnRyb2wtcGxhbmUgdG8gZGV0ZWN0IHN1Y2ggY2FzZS4NCg0KICAgICAgICAgICAg di4gICAgIFRoZSBtaXNiZWhhdmluZyBub2RlIGlzIGFuIFNGRjogRXhhbXBsZXMgb2YgbWlzYmVo YXZpb3JzIGFyZTogc3RyaXAgTlNILCBmb3J3YXJkIHRvIGEgbm9uLWF1dGhvcml6ZWQgU0YsIHJl ZGlyZWN0IHRoZSB0cmFmZmljIHRvIGEgbm9uLWF1dGhvcml6ZWQgbm9kZXMsIGV0Yy4gTGlrZSBm b3IgdGhlIGNsYXNzaWZpZXIgY2FzZSwgTlNIIHJlbGllcyBvbiBPQU0gYW5kIGNvbnRyb2wtcGxh bmUgdG8gZGV0ZWN0IHN1Y2ggY2FzZS4NCg0KQXJlIHRoZXJlIHNwZWNpZmljIGF0dGFja3MgdGhh dCBhcmUgbm90IGxpc3RlZCBhYm92ZSBhbmQgdGhhdCBuZWVkIG1vcmUgYXR0ZW50aW9uIGZyb20g dGhlIFdHPw0KDQpUaGFuayB5b3UuDQoNCkNoZWVycywNCk1lZA0KDQpfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kc2ZjIG1haWxpbmcgbGlzdA0Kc2ZjQGll dGYub3JnPG1haWx0bzpzZmNAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL3NmYw0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQpzZmMgbWFpbGluZyBsaXN0DQpzZmNAaWV0Zi5vcmc8bWFpbHRvOnNmY0BpZXRm Lm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2ZjDQoNCg== --_000_4A8DB6C528CC41D69163611A58BEC383ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <06069192B4796D48B0553D909A8E5A76@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5FcmljLDwv ZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNz PSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBPY3QgMjAsIDIwMTcsIGF0IDk6NDUgQU0sIEVyaWMgUmVz Y29ybGEgJmx0OzxhIGhyZWY9Im1haWx0bzpla3JAcnRmbS5jb20iIGNsYXNzPSIiPmVrckBydGZt LmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1u ZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iZ21haWxfcXVvdGUiPk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0IDY6MzEgQU0sIFBhdWwgUXVp bm4gKHBhdWxxKSA8c3BhbiBkaXI9Imx0ciIgY2xhc3M9IiI+DQombHQ7PGEgaHJlZj0ibWFpbHRv OnBhdWxxQGNpc2NvLmNvbSIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBhdWxxQGNpc2NvLmNv bTwvYT4mZ3Q7PC9zcGFuPiB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSBjbGFzcz0i Z21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAgLjhleDtib3JkZXItbGVmdDoxcHggI2Nj YyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij4NCjxkaXYgc3R5bGU9IndvcmQtd3JhcDpicmVhay13 b3JkO2xpbmUtYnJlYWs6YWZ0ZXItd2hpdGUtc3BhY2UiIGNsYXNzPSIiPg0KPGRpdiBkaXI9ImF1 dG8iIHN0eWxlPSJ3b3JkLXdyYXA6YnJlYWstd29yZDtsaW5lLWJyZWFrOmFmdGVyLXdoaXRlLXNw YWNlIiBjbGFzcz0iIj4NCkhpIEFsaWEsDQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3Rl IHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBPY3QgMTksIDIwMTcsIGF0 IDI6NDkgUE0sIEFsaWEgQXRsYXMgJmx0OzxhIGhyZWY9Im1haWx0bzpha2F0bGFzQGdtYWlsLmNv bSIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPmFrYXRsYXNAZ21haWwuY29tPC9hPiZndDsgd3Jv dGU6PC9kaXY+DQo8YnIgY2xhc3M9Im1fNzUwMzkzMDE0MTYyMDAxMjQzMUFwcGxlLWludGVyY2hh bmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJsdHIiIGNsYXNzPSIiPkhp IE1lZCwNCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PlNpbmNlIHlvdSBkaXJlY3RlZCB0aGlzIGF0IG1lLCB0aGVyZSBhcmUgZWZmb3J0cyB0byBoYXZl IHNvbWUgZGlzY3Vzc2lvbnMgYW5kIHVuZGVyc3RhbmQgYmV0dGVyIHRoZSBwYXJ0aWN1bGFyIHRo cmVhdHMuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkN1cnJlbnRseSwgdGhlcmUgaXMgbm8gdHJhbnNw b3J0IHdpdGggaW50ZWdyaXR5IHByb3RlY3Rpb24gdGhhdCBpcyBldmVuIGEgU0hPVUxEIHRvIGlt cGxlbWVudCwgbXVjaCBsZXNzIGEgTVVTVC4mbmJzcDsgVGhlcmU8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+aXMgbm8gY29udHJvbC1wbGFuZSBkZWZpbmVkIChiZXlvbmQgdGhlIEJHUCB3b3JrKSB0aGF0 IGRlc2NyaWJlcyBkZXRlY3RpbmcgaXNzdWVzLiZuYnNwOyBUaGVyZSBpcyBubyBPQU0gZGVmaW5l ZCBhbmQgYWRvcHRlZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5ieSB0aGUgV0cgdGhhdCBkZXRlY3Rz IG9yIGhhbmRsZXMgdGhlc2UgdHlwZXMgb2YgYXR0YWNrcy4gSSBzZWUgdGhlIHN0cnVjdHVyZSB0 aGF0IHlvdSBhcmUgcHJlc3VtaW5nLCBidXQgbm9uZSBvZiB0aGVzZSBhcmU8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+YXZhaWxhYmxlIGFzIG5vcm1hdGl2ZSByZWZlcmVuY2VzIHRvIE5TSCB0b2RheS48 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwv c3Bhbj4NCjxkaXYgY2xhc3M9IiI+T0FNIGRvZXMgbm90IGFkZHJlc3MgdGhlIHNlY3VyaXR5IGNv bmNlcm4gYXJvdW5kIGludGVncml0eSBhbmQgZGV2aWNlcy4mbmJzcDsgSWYgeW91IGFuZCB0aGUg V0cgYmVsaWV2ZSBPQU0gaXMgdGhlIG5leHQg4oCcdG8gZG/igJ0gZm9yIHRoZSBXRywgdGhhdOKA mXMgZmluZSwgYnV0IGl04oCZcyBvcnRob2dvbmFsIHRvIHRoZSBzZWN1cml0eSBwb2ludHMgcmFp c2VkLjwvZGl2Pg0KPHNwYW4gY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi PkkgaGFkIHJlY29tbWVuZGVkIGhhdmluZyBhIGZvY3VzZWQgaW50ZXJpbSBtZWV0aW5nIHRvIG1h a2Ugc3VyZSB0aGF0IGV2ZXJ5b25lIGNvbmNlcm5lZCB1bmRlcnN0b29kIHRoZSBpc3N1ZXMgYW5k PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPndvcmtlZCB0aHJvdWdoIHRoZSB0aHJlYXQgYW5hbHlzaXMg YW5kIHBvc3NpYmxlIHNvbHV0aW9ucyB0b2dldGhlci48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9zcGFu Pg0KPGRpdiBjbGFzcz0iIj5MZXTigJlzIHBsZWFzZSBub3QgY29uZmxhdGUgdGhlIG9uZ29pbmcg c2VjdXJpdHkgZGlzY3Vzc2lvbiB3aXRoIE9BTSwgb3Igb3RoZXIgdG9waWNzLiZuYnNwOyBUaGUg c2VjdXJpdHkgcmVhbGl0eSwgYXMgeW91IHBvaW50ZWQgb3V0IGluIHlvdXIgZW1haWwgdG8gRXJp YywgaXMgdGhhdCB3ZSwgYXMgYSBjb21tdW5pdHkgYW5kIGluZHVzdHJ5LCBhY2NlcHQgYSBsZXZl bCBvZiB0cnVzdCB3cnQgbmV0d29yayBkZXZpY2VzLg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkkgZG9uJ3QgYWN0dWFsbHkgdGhpbmsgdGhhdCdzIHRo ZSBwb2ludCBvZiBjb250ZW50aW9uLCBhdCBsZWFzdCBmcm9tIG15IHBlcnNwZWN0aXZlLiBSYXRo ZXIgaXQncyBhYm91dCB0aGUgbGV2ZWwgb2YgdHJ1c3QgdG8gYmUgcGxhY2VkIGluIHRoZSBuZXR3 b3JraW5nIHBhdGggdGhyb3VnaCB3aGljaCB0aGF0IGRhdGEgZmxvd3MuPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5VbmRl cnN0b29kLiBIb3cgYWJvdXQgdGhpcz88L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+ DQo8ZGl2PiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBY LjIuJm5ic3A7Jm5ic3A7VHJhbnNwb3J0IEVuY2Fwc3VsYXRpb24gU2VjdXJpdHk8YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO05TSCBp cyBhbHdheXMgZW5jYXBzdWxhdGVkIGJ5IGFuIG91dGVyIHRyYW5zcG9ydDxiciBjbGFzcz0iIj4N CiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jm5ic3A7ZW5jYXBzdWxhdGlvbiBhcyBkZXRhaWxl ZCBpbiBTZWN0aW9uIDQgb2YgdGhpczxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7Jm5ic3A7c3BlY2lmaWNhdGlvbiwgYW5kIGFzIGRlcGljdGVkIGluIEZpZ3VyZSAxLiZu YnNwOyZuYnNwO0lmIGFuIG9wZXJhdG9yPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsmbmJzcDtkZWVtcyBjcnlwdG9ncmFwaGljIGludGVncml0eSBwcm90ZWN0aW9uIG5l Y2Vzc2FyeSBkdWUgdG88YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZu YnNwO3RoZWlyIHJpc2sgYW5hbHlzaXMsIHRoZW4gYW4gb3V0ZXIgdHJhbnNwb3J0IGVuY2Fwc3Vs YXRpb248YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO3RoYXQg cHJvdmlkZXMgc3VjaCBwcm90ZWN0aW9uIFtSRkM2MDcxXSwgc3VjaCBhcyZuYnNwO0lQc2VjLCBN VVNUPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDtiZSB1c2Vk LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj7igJQgQ2FybG9zLjwv ZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFp bF9leHRyYSI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+DQo8ZGl2IGNsYXNzPSIiPi1Fa3I8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PiZuYnNwOzwvZGl2Pg0KPGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFy Z2luOjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFl eCI+DQo8ZGl2IHN0eWxlPSJ3b3JkLXdyYXA6YnJlYWstd29yZDtsaW5lLWJyZWFrOmFmdGVyLXdo aXRlLXNwYWNlIiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJhdXRvIiBzdHlsZT0id29yZC13cmFwOmJy ZWFrLXdvcmQ7bGluZS1icmVhazphZnRlci13aGl0ZS1zcGFjZSIgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7VGhlIG9uZ29pbmcg ZWRpdHMgYW5kIGRpYWxvZ3VlIHdpdGggS2F0aGxlZW4gYW5kIEVyaWMgYXJlIHdvcmtpbmcgdGhy b3VnaCB0aGVpciBjb25jZXJucy4mbmJzcDsgQW4gaW50ZXJpbSB0byB0YWxrIGFib3V0IG5leHQg U0ZDIHN0ZXBzLCBwb3N0IE5TSCwgaXMgYSBkaWZmZXJlbnQgbWF0dGVyLiAmbmJzcDs8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9Img1 Ij4NCjxkaXYgZGlyPSJsdHIiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5BdCB0aGlzIHBvaW50 LCBjbGVhcmx5IHRoZSBtb3N0IHRoYXQgY291bGQgaGFwcGVuIGlzIGE8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+dmlydHVhbCBpbnRlcmltLiZuYnNwOyBUaGVyZSBhcmUgc29tZSBiYWNrZ3JvdW5kIGRp c2N1c3Npb25zIGdvaW5nIG9uLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SSBkbyBub3Qgd2FudCB0byBhc3N1bWUgd2hhdCBtaXh0dXJl IHdpbGwgYmUgYWNjZXB0YWJsZSB0byBoYW5kbGUgdGhlIHNlY3VyaXR5IGNvbmNlcm5zIGV4cHJl c3NlZCBieSBLYXRobGVlbiBhbmQgRXJpYzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5hbmQgc3VwcG9y dGVkIGJ5IGEgbnVtYmVyIG9mIG90aGVyIEFEcy48YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJn bWFpbF9leHRyYSI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRy YSI+SSBkbyBncmVhdGx5IGFwcHJlY2lhdGUgeW91ciBhdHRlbnRpb24gYW5kIGVmZm9ydHMgdG8g Y2xhcmlmeSBhbmQgdHJ5IHRvIG1vdmUgdGhpcyB3b3JrIGZvcndhcmQuIEkgaGF2ZSBiZWVuIGV4 cHJlc3NpbmcgY29uY2VybnM8L2Rpdj4NCjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj5hYm91dCB0 aGUgc2VjdXJpdHkgYXNwZWN0cyBvZiB0aGlzIHdvcmsgc2luY2UgUkZDIDc2NjUgd2VudCB0aHJv dWdoIHRoZSBwdWJsaWNhdGlvbiBwcm9jZXNzIC0gYW5kIHN0cm9uZ2x5IGVuY291cmFnaW5nIHNl cmlvdXM8L2Rpdj4NCjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj5XRyBmb2N1cyB0byBwcmV2ZW50 IHByZWNpc2VseSB3aGF0IGhhcyBub3cgaGFwcGVuZWQuPC9kaXY+DQo8ZGl2IGNsYXNzPSJnbWFp bF9leHRyYSI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+ UmVnYXJkcyw8L2Rpdj4NCjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj5BbGlhPC9kaXY+DQo8ZGl2 IGNsYXNzPSJnbWFpbF9leHRyYSI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSJn bWFpbF9leHRyYSI+PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIFRo dSwgT2N0IDE5LCAyMDE3IGF0IDQ6NDkgQU0sIDxzcGFuIGRpcj0ibHRyIiBjbGFzcz0iIj4NCiZs dDs8YSBocmVmPSJtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSIgdGFyZ2V0PSJf YmxhbmsiIGNsYXNzPSIiPm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208L2E+Jmd0Ozwvc3Bh bj4gd3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBz dHlsZT0ibWFyZ2luOjBweCAwcHggMHB4IDAuOGV4O2JvcmRlci1sZWZ0OjFweCBzb2xpZCByZ2Io MjA0LDIwNCwyMDQpO3BhZGRpbmctbGVmdDoxZXgiPg0KPGRpdiBsYW5nPSJGUiIgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSJtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5 NzU4Njc1V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9 IiI+SGkgQWxpYSwNCjx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHUgY2xhc3M9IiI+PC91PiZu YnNwOzx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Q2FuIHlvdSBwbGVhc2Ugc2hhcmUgd2l0aCB1cyB0 aGUgY3VycmVudCBzdGF0dXMgb2YgdGhlIGRvY3VtZW50IGFuZCB0aGUgbGlzdCBvZiBwZW5kaW5n IGJsb2NraW5nIHBvaW50cz88dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48 dSBjbGFzcz0iIj48L3U+Jm5ic3A7PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5JIHdlbnQgdGhyb3Vn aCBhbGwgcHVibGljIGVtYWlsIGV4Y2hhbmdlcywgZXNwZWNpYWxseSB0aGUgb25lcyByZWxhdGVk IHRvIHNlY3VyaXR5LCBidXQgaXQgaXMgbm90IHRoYXQgZWFzeSB0byB1bmRlcnN0YW5kIHdoYXQg YXJlIHRoZSByZW1haW5pbmcgaXNzdWVzIHRoYXQgbmVlZA0KIGZpeGVzLjx1IGNsYXNzPSIiPjwv dT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjx1IGNsYXNzPSIiPjwvdT4mbmJzcDs8dSBjbGFzcz0i Ij48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiIGNsYXNzPSIiPkluIHBhcnRpY3VsYXIsIGlzIHRoZXJlIGEgY29uY2VybiB3aXRoIGFzc3Vt aW5nIHRoZSBjdXJyZW50IE5TSCB0aHJlYXQgbW9kZWw/PHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNz PSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyIgY2xhc3M9IiI+PHUgY2xhc3M9IiI+PC91PiZuYnNwOzx1IGNsYXNzPSIiPjwvdT48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Im1fNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW1fLTEzNjk0ODUz ODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+MS48c3BhbiBzdHlsZT0iZm9udC1zdHls ZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJl dGNoOm5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTom cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOw0KPC9zcGFuPjwvc3Bh bj48L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPk5T SCBpcyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGluZHVjZWQgYnkgbm9kZXMgdGhhdCBpbmplY3Qg KHNwb29mZWQpIE5TSCBiZWZvcmUgZW50ZXJpbmcgYW4gU0ZDLWVuYWJsZWQgZG9tYWluLiBJbmRl ZWQsIFNGQyBpbmdyZXNzIG5vZGVzIE1VU1QNCiBkaXNjYXJkIHBhY2tldHMgY2FycnlpbmcgTlNI Ljx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJt Xzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBh cmFncmFwaCI+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjxz cGFuIGNsYXNzPSIiPjIuPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFu dDpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXpl OjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIi PjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5OU0ggaXMgc2VjdXJlIGFnYWluc3Qg YXR0YWNrcyBmcm9tIHdpdGhpbiB0aGUgU0ZDLWVuYWJsZWQgZG9tYWluIHRvIGluamVjdCBub24t YXV0aG9yaXplZCBjb250ZXh0IGhlYWRlcnMuIEZyb20gYSBzZXJ2aWNlIHBlcnNwZWN0aXZlLCB0 aGUgZ3VhcmQNCiBpcyB0aGUgQ1Agd2hpY2ggaXMgcmVzcG9uc2libGUgZm9yIGluc3RydWN0aW5n IHRoZSBTRkMtYXdhcmUgbm9kZXMgYWJvdXQgdGhlIG1hbmRhdG9yeS10by1wcm9jZXNzIGFuZCBv cHRpb25hbC10by1wcm9jZXNzIGNvbnRleHQgaGVhZGVycy4gRnVydGhlcm1vcmUsIHdoYXRldmVy IHRoZSBvcmlnaW4gb2YgYSBzdXBwbGllZCBjb250ZXh0IGhlYWRlciwgdGhlIGxhc3QgU0ZGIG9m IGEgY2hhaW4gKGFuZCBlZ3Jlc3Mgbm9kZXMpIE1VU1QgcmVtb3ZlDQogdGhlIE5TSCBiZWZvcmUg Zm9yd2FyZGluZyB1cHN0cmVhbS48dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0ibV83NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4 MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj4zLjxzcGFuIHN0eWxlPSJmb250LXN0eWxl Om5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0 Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFu Pjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+TlNI IGlzIHNlY3VyZSBhZ2FpbnN0IGxlYWtpbmcgcHJpdmFjeSBpbmZvcm1hdGlvbiBvdXRzaWRlIGFu IFNGQyBlbmFibGVkIGRvbWFpbi4gVGhlIGxhc3QgU0ZGIG9mIGEgY2hhaW4gKGFuZCBlZ3Jlc3Mg bm9kZXMpIE1VU1QgcmVtb3ZlIHRoZSBOU0gNCiBiZWZvcmUgZm9yd2FyZGluZyB1cHN0cmVhbS48 dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0ibV83 NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJh Z3JhcGgiPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3Bh biBjbGFzcz0iIj40LjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6 bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3 cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OyIgY2xhc3M9IiI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48 L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+TlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGlu ZGVmaW5pdGUgU0YvU0ZGIGxvb3BzIGJ5IG1lYW5zIG9mIFNJIGFuZCBUVEwgZmllbGRzLjx1IGNs YXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJtXzc1MDM5 MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFw aCI+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjxzcGFuIGNs YXNzPSIiPjUuPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3Jt YWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXplOjdwdDts aW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 IiBjbGFzcz0iIj4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5Db250cm9sIHBsYW5lIHNwZWNpZmljIHRocmVh dHMgYXJlIG91dCBvZiBzY29wZSwgYnV0IHRoZSBkb2N1bWVudCBjaXRlcyBJLUQuaWV0Zi1zZmMt Y29udHJvbC1wbGFuZSBmb3IgdGhlIGV4cGVjdGVkIGJlaGF2aW9yIHdoZW4gaW5zdHJ1Y3Rpbmcg U0ZDDQogbm9kZXMuIEJUVywgdGhlIHNlY2RpciByZXZpZXcgb2YgdGhlIENQIHJlcXVpcmVtZW50 cyBjYW4gYmUgcmV0cmlldmVkIGhlcmUgKDxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0 Zi5vcmcvZG9jL3Jldmlldy1pZXRmLXNmYy1jb250cm9sLXBsYW5lLTAyLXNlY2Rpci1lYXJseS1t ZWFkb3dzLTIwMTUtMTItMTAvIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+aHR0cHM6Ly9kYXRh dHJhY2tlci5pZXRmLm9yZy88d2JyIGNsYXNzPSIiPmRvYy9yZXZpZXctaWV0Zi1zZmMtY29udHJv bC1wbDx3YnIgY2xhc3M9IiI+YW5lLTAyLXNlY2Rpci1lYXJseS1tZWFkb3dzLTIwPHdiciBjbGFz cz0iIj4xNS0xMi0xMC88L2E+KS4NCjx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1 MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjYuPHNwYW4gc3R5bGU9ImZvbnQtc3R5 bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3Ry ZXRjaDpub3JtYWw7Zm9udC1zaXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsNCjwvc3Bhbj48L3Nw YW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5O U0ggZG9lcyBub3Qgc2hhcmUgcHJpdmFjeSBkYXRhIHdpdGggbm9uLWF1dGhvcml6ZWQgcGFydGll cy4gSW5kZWVkLCBkYXRhIGNhcnJpZWQgaW4gY29udGV4dCBoZWFkZXJzIGFyZSBkZXJpdmVkIGZy b20gdGhlIG9yaWdpbmFsIHBhY2tldCAoZS5nLiwNCiBzb3VyY2UgSVAgYWRkcmVzcykgb3IgYXJl IGFscmVhZHkga25vd24gdG8gdGhlIG9wZXJhdG9yIChlLmcuLCBzdWJzY3JpYmVyIGlkZW50aWZp ZXIsIHBvbGljeSBpZGVudGlmaWVyLCBzZXJ2aWNlIGlkZW50aWZpZXIpLiBUaGUgY29udGV4dCBp bmZvcm1hdGlvbiBpcyBzaGFyZWQgd2l0aCBub2RlcyB0aGF0IGFyZSB3aXRoaW4gdGhlIHNhbWUg YWRtaW5pc3RyYXRpdmUgZG9tYWluLiAmbmJzcDs8dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+ PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0ibV83NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbV8t MTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiPjx1IGNsYXNzPSIiPjwvdT48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj43LjxzcGFuIHN0eWxlPSJm b250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtm b250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQt ZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7DQo8L3Nw YW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xh c3M9IiI+TGlrZSBvdGhlciBjb21tdW5pY2F0aW9uIHByb3RvY29scywgYXR0YWNrcyBmcm9tIHdp dGhpbiB0aGUgbmV0d29yayBhcmUgcG9zc2libGUsIGJ1dCB0aG9zZSBhcmUgc29mdGVuIGJ5IHJl bHlpbmcgb24gdGhlIHByb2NlZHVyZXMgcHV0IGluIHBsYWNlDQogYnkgb3BlcmF0b3JzIGZvciB0 ZXN0aW5nIGFuZCB2YWxpZGF0aW5nIG5vZGVzL2ZlYXR1cmVzIGJlZm9yZSBhY3R1YWwgYWN0aXZh dGlvbi4gTlNIIGRvZXMgbm90IHByb3ZpZGUgYSBidWlsdC1pbiBmZWF0dXJlIHRvIHByZXZlbnQg bWlzYmVoYXZpbmcgbm9kZXMsIGJ1dCByZWNvbW1lbmRzIHRvIHJlbHkgb24gdGhlIHNlY3VyaXR5 IGZlYXR1cmVzIHByb3ZpZGVkIGJ5IHRoZSB1bmRlcmx5aW5nIHRyYW5zcG9ydCBlbmNhcHN1bGF0 aW9uIHNjaGVtZXMuDQo8dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48dSBj bGFzcz0iIj48L3U+Jm5ic3A7PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5MZXTigJlzIG5vdyBmb2N1 cyBvbiB0aGUgdHlwaWNhbCDigJxhdHRhY2tz4oCdIHRoYXQgY2FuIGJlIGlzc3VlZCBmcm9tIHdp dGhpbiB0aGUgbmV0d29yazoNCjx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1Mzgw OTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjEuPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6 bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRj aDpub3JtYWw7Zm9udC1zaXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+ PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5BIG1p c2JlaGF2aW5nIG5vZGUgcmVkaXJlY3QgdGhlIHRyYWZmaWMgdG8gbm9uLWF1dGhvcml6ZWQgbm9k ZXMgb3V0c2lkZSBhIGRvbWFpbjogVGhpcyBpcyBub3QgTlNILXNwZWNpZmljLjx1IGNsYXNzPSIi PjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJtXzc1MDM5MzAxNDE2 MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+PHUg Y2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIi PjIuPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9u dC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXplOjdwdDtsaW5lLWhl aWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7IiBjbGFz cz0iIj4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5BIG1pc2JlaGF2aW5nIFNGQy11bndhcmUgbm9kZSBhbHRl cnMgdGhlIGNvbnRlbnQgb2YgYSBwYWNrZXQ6IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy48dSBj bGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0ibV83NTAz OTMwMTQxNjIwMDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3Jh cGgiPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBj bGFzcz0iIj4zLjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9y bWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7 bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyIgY2xhc3M9IiI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+QSBtaXNiZWhhdmluZyBTRkMtYXdhcmUgbm9k ZSBhbHRlcnMgdGhlIGNvbnRlbnQgb2YgTlNIOjx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48 L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0x MzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0Ojcy cHQiPg0KPHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjxzcGFu IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9y bWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7 bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+aS48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpu b3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJldGNo Om5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTomcXVv dDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw Ow0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiIGNsYXNzPSIiPkl0IHJlbW92ZXMgdGhlIE5TSCBoZWFkZXIgZnJvbSBhbGwgcGFja2V0cyBp dCBzZWVzOiBUaGlzIHdpbGwgaW1wbHkgdGhhdCB0aGUgcGFja2V0cywgdGhlIG1pc2JlaGF2aW5n IG5vZGUgaW50ZXJjZXB0cywgd2lsbCBiZSBmb3J3YXJkZWQgdXBzdHJlYW0NCiB3aXRob3V0IGlu dm9raW5nIHRoZSByZXF1aXJlZCBTRnMgKHdoaWNoIG1heSBiZSBzZWVuIGFzIGEgZmVhdHVyZSwg bm90IGEgYnVnIGlmIG9uZSBkaXNsaWtlcyDigJxtaWRkbGVib3hlc+KAnSA6KSkuIE1vcmUgc2Vy aW91c2x5LCB0aGUgT0FNIE5TSCBmZWF0dXJlIHdpbGwgYWxsb3cgYW4gb3BlcmF0b3IgdG8gZGV0 ZWN0IHdoZXRoZXIgTlNIIHBhY2tldHMgYXJlIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRo IFNGQyBpbnN0cnVjdGlvbnMgb2YgdGhhdA0KIGRvbWFpbi4gUnVubmluZyB0aGF0IGZlYXR1cmUg d2lsbCBoZWxwIGRldGVjdGluZyB0aGUgbWlzYmVoYXZpbmcgbm9kZS4gPHUgY2xhc3M9IiI+DQo8 L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0ibV83NTAzOTMwMTQxNjIw MDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxl PSJtYXJnaW4tbGVmdDo3MnB0Ij4NCjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3JtYWw7 Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJldGNoOm5vcm1h bDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTomcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPmlpLjxzcGFuIHN0eWxlPSJmb250LXN0 eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0 cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5 OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyIgY2xhc3M9IiI+SXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQgb2YgU1BJOiBUaGlzIHdp bGwgaW1wbHkgdGhhdCB0aGVzZSBwYWNrZXRzIHdpbGwgYmUgZm9yd2FyZGVkIG92ZXIgYSB3cm9u ZyBwYXRoLiBBZ2FpbiwgcnVubmluZyBPQU0gTlNIIHdpbGwgYWxsb3cgdGhlIG9wZXJhdG9yDQog dG8gZGV0ZWN0IHdoZXRoZXIgYSBwYWNrZXQgaXMgdHJhdmVsbGluZyBpbiBhY2NvcmRhbmNlIHdp dGggU0ZDIGluc3RydWN0aW9ucy4gUnVubmluZyB0aGF0IGZlYXR1cmUgcmVndWxhcmx5IHdpbGwg aGVscCBpZGVudGlmeWluZyB0aGUgbWlzYmVoYXZpbmcgbm9kZSBhbmQgd2hldGhlciB0aGUgU0ZD IGNvbmZpZ3VyYXRpb24gb2YgYSBkb21haW4gaXMgYWxpZ25lZCB3aXRoIHRoZSBleHBlY3RlZCBi ZWhhdmlvci48dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0ibV83NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1z b0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDo3MnB0Ij4NCjx1IGNsYXNzPSIiPjwv dT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj48c3BhbiBzdHls ZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3Jt YWw7Zm9udC1zdHJldGNoOm5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPmlpaS48c3BhbiBzdHls ZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3Jt YWw7Zm9udC1zdHJldGNoOm5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PHUgY2xhc3M9IiI+PC91Pjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPkl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNJ L1RUTDogVGhpcyB3aWxsIGluY3JlYXNlIHRoZSBhdXRob3JpemVkIG1heGltdW0gU0ZGL1NGIGhv cHMuIE5vdCBzdXJlIGlmIHRoZXJlIGlzIGEgc2VjdXJpdHkgcHJvYmxlbSBvdXQgdGhlcmUuDQo8 dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0ibV83 NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJh Z3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDo3MnB0Ij4NCjx1IGNsYXNzPSIiPjwvdT48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1z dHlsZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1z dHJldGNoOm5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWls eTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPml2LjxzcGFuIHN0 eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5v cm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFs O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+VGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMgYSBj bGFzc2lmaWVyOiBUaGUgaW1wbGljYXRpb25zIHdpbGwgYmUgc2V2ZXJlIGZyb20gYSBzZXJ2aWNl IHN0YW5kcG9pbnQuIE5TSCByZWxpZXMgb24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVj dA0KIHN1Y2ggY2FzZS4gJm5ic3A7Jm5ic3A7PHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwv dT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Im1fNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW1fLTEz Njk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzJw dCI+DQo8dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHNwYW4g Y2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3Jt YWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXplOjdwdDts aW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj52LjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5v cm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6 bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90 O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyIgY2xhc3M9IiI+VGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMgYW4gU0ZGOiBFeGFtcGxlcyBvZiBt aXNiZWhhdmlvcnMgYXJlOiBzdHJpcCBOU0gsIGZvcndhcmQgdG8gYSBub24tYXV0aG9yaXplZCBT RiwgcmVkaXJlY3QgdGhlIHRyYWZmaWMgdG8gYSBub24tYXV0aG9yaXplZA0KIG5vZGVzLCBldGMu IExpa2UgZm9yIHRoZSBjbGFzc2lmaWVyIGNhc2UsIE5TSCByZWxpZXMgb24gT0FNIGFuZCBjb250 cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNoIGNhc2UuICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOzx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjx1IGNsYXNz PSIiPjwvdT4mbmJzcDs8dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPkFyZSB0aGVyZSBzcGVjaWZpYyBh dHRhY2tzIHRoYXQgYXJlIG5vdCBsaXN0ZWQgYWJvdmUgYW5kIHRoYXQgbmVlZCBtb3JlIGF0dGVu dGlvbiBmcm9tIHRoZSBXRz88dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48 dSBjbGFzcz0iIj48L3U+Jm5ic3A7PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5UaGFuayB5b3UuPHUg Y2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHUgY2xhc3M9IiI+PC91PiZuYnNw Ozx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Q2hlZXJzLDx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0i Ij48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiIGNsYXNzPSIiPk1lZDx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQpfX19fX19fX19fX19fX19f X19fX19fX19fX19fX188d2JyIGNsYXNzPSIiPl9fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIi Pg0Kc2ZjIG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpzZmNAaWV0 Zi5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5zZmNAaWV0Zi5vcmc8L2E+PGJyIGNsYXNz PSIiPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmMi IHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuLzx3 YnIgY2xhc3M9IiI+bGlzdGluZm8vc2ZjPC9hPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxiciBjbGFzcz0iIj4N CnNmYyBtYWlsaW5nIGxpc3Q8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJtYWlsdG86c2ZjQGlldGYu b3JnIiBjbGFzcz0iIj5zZmNAaWV0Zi5vcmc8L2E+PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmMiIGNsYXNzPSIiPmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2ZjPC9hPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2JvZHk+DQo8L2h0bWw+ DQo= --_000_4A8DB6C528CC41D69163611A58BEC383ciscocom_-- From nobody Fri Oct 20 07:08:49 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E3D3133083 for ; Fri, 20 Oct 2017 07:08:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fR5cOhI8nhbI for ; Fri, 20 Oct 2017 07:08:44 -0700 (PDT) Received: from mail-yw0-x236.google.com (mail-yw0-x236.google.com [IPv6:2607:f8b0:4002:c05::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A1FB132C3F for ; Fri, 20 Oct 2017 07:08:44 -0700 (PDT) Received: by mail-yw0-x236.google.com with SMTP id w5so6449213ywg.11 for ; Fri, 20 Oct 2017 07:08:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=+/NFh65IPrIz420WcSL/ABh6KWitw2FsCFxitEAw/Ic=; b=DMrwinjzv1fSD2+mGmfb+kU3exqMMW+tPwuZcUaq8fsnyCYZEOhM3uhcKAOuhpneoH wIxA1O+FU1ZMdWM6G39ll837sDGKlQ9UsVOiDlyOW2kRkli6qyMNP3X8c5kbewsNgJ09 no5qRIHYMIRRehW2siIjoqh6BFNdmwLVpD54t2bc+k3FvdW8JLfjfph0V8z4U0gEbSvr IIvVM/ODqABXxrRRC03mo5zwhw/5R/Dffyg6XhX07+lZUua7dU1cfBDM1divxxeU4sQp xC50bwA+blLyGpZVWx3IZQzYQmC2KDHivn3j84az+2E66fMgNpBmWCnt46euBNyeeHin HXdQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=+/NFh65IPrIz420WcSL/ABh6KWitw2FsCFxitEAw/Ic=; b=jcjpmvbnk0BrbAjSJqEAonsAAu5bd5sco4USlT+vqSkHG3kISwSiVNf88kLk3t3IW5 tdsQ/3EPDjaSjnS5oMNhjZF7e2w/wWV/8uKF/tX2id7GVURd3wPoehuZiMyRR35jOlqs Kfm4UtP+bHgznvLGfAl4j/pxTJe0JkAFp46bPBsgVbdx4UvJVgF2Ii/KbWTL50+gKgoj j0WFd5mlbQTifIWSW7s00igxhUD+dZaKBmIl7dcdHTS60lxEo26fHmpS55flv5EEpKgh r3QPvB3tYFllnhzf0sBM/jGGoEHHh6DrkyA/kSnHPv7eGp8Lx6RGXQqza3W9D4QcApZ7 hslA== X-Gm-Message-State: AMCzsaVjv1RCjARIw0X0Lj3vy0R025imXcZm9Vhx1YRxDCe2SLl0jamg z4/aXIlVcU1O3x3PxYHrvphqSVhnPMVOiM66fCVwlg== X-Google-Smtp-Source: ABhQp+S1qcJq36V+2iFDwaVZTCSCdv9Tf7IuumUE4WNA4ut7ekYf0ZADo/CleJXFP1ZfOV7BYoxvAzI+U+sIJ6k855A= X-Received: by 10.37.40.198 with SMTP id o189mr3405365ybo.353.1508508523670; Fri, 20 Oct 2017 07:08:43 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Fri, 20 Oct 2017 07:08:03 -0700 (PDT) In-Reply-To: <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> From: Eric Rescorla Date: Fri, 20 Oct 2017 07:08:03 -0700 Message-ID: To: "Carlos Pignataro (cpignata)" Cc: "Paul Quinn (paulq)" , Kathleen Moriarty , Med Boucadair , "sfc@ietf.org" , Alia Atlas Content-Type: multipart/alternative; boundary="94eb2c14e298b1d168055bfb028a" Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:08:47 -0000 --94eb2c14e298b1d168055bfb028a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Oct 20, 2017 at 7:01 AM, Carlos Pignataro (cpignata) < cpignata@cisco.com> wrote: > Eric, > > On Oct 20, 2017, at 9:45 AM, Eric Rescorla wrote: > > > > On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) > wrote: > >> Hi Alia, >> >> >> >> On Oct 19, 2017, at 2:49 PM, Alia Atlas wrote: >> >> Hi Med, >> >> Since you directed this at me, there are efforts to have some discussion= s >> and understand better the particular threats. >> Currently, there is no transport with integrity protection that is even = a >> SHOULD to implement, much less a MUST. There >> is no control-plane defined (beyond the BGP work) that describes >> detecting issues. There is no OAM defined and adopted >> by the WG that detects or handles these types of attacks. I see the >> structure that you are presuming, but none of these are >> available as normative references to NSH today. >> >> >> OAM does not address the security concern around integrity and devices. >> If you and the WG believe OAM is the next =E2=80=9Cto do=E2=80=9D for th= e WG, that=E2=80=99s fine, >> but it=E2=80=99s orthogonal to the security points raised. >> >> >> I had recommended having a focused interim meeting to make sure that >> everyone concerned understood the issues and >> worked through the threat analysis and possible solutions together. >> >> >> Let=E2=80=99s please not conflate the ongoing security discussion with O= AM, or >> other topics. The security reality, as you pointed out in your email to >> Eric, is that we, as a community and industry, accept a level of trust w= rt >> network devices. >> > > I don't actually think that's the point of contention, at least from my > perspective. Rather it's about the level of trust to be placed in the > networking path through which that data flows. > > > Understood. How about this? > > X.2. Transport Encapsulation Security > > NSH is always encapsulated by an outer transport > encapsulation as detailed in Section 4 of this > specification, and as depicted in Figure 1. If a= n > operator > deems cryptographic integrity protection necessar= y > due to > their risk analysis, then an outer transport > encapsulation > that provides such protection [RFC6071], such > as IPsec, MUST > be used. > I can't speak for Kathleen, but I don't really think this gets the job done= . As described in RFC 3552 (https://tools.ietf.org/html/rfc3552#section-3) our threat model is that the Internet is untrusted. That means we should be designing protocols that are safe to operate in that environment, which in this case means that the protocol should either (a) come with a built-in security mechanism or (b) be run over a secure transport. I don't think telling operators "you figure it out" reflects best current practice. -Ekr > > > =E2=80=94 Carlos. > > -Ekr > > > >> The ongoing edits and dialogue with Kathleen and Eric are working >> through their concerns. An interim to talk about next SFC steps, post N= SH, >> is a different matter. >> >> >> >> At this point, clearly the most that could happen is a >> virtual interim. There are some background discussions going on. >> >> I do not want to assume what mixture will be acceptable to handle the >> security concerns expressed by Kathleen and Eric >> and supported by a number of other ADs. >> >> I do greatly appreciate your attention and efforts to clarify and try to >> move this work forward. I have been expressing concerns >> about the security aspects of this work since RFC 7665 went through the >> publication process - and strongly encouraging serious >> WG focus to prevent precisely what has now happened. >> >> Regards, >> Alia >> >> >> On Thu, Oct 19, 2017 at 4:49 AM, wrote: >> >>> Hi Alia, >>> >>> >>> >>> Can you please share with us the current status of the document and the >>> list of pending blocking points? >>> >>> >>> >>> I went through all public email exchanges, especially the ones related >>> to security, but it is not that easy to understand what are the remaini= ng >>> issues that need fixes. >>> >>> >>> >>> In particular, is there a concern with assuming the current NSH threat >>> model? >>> >>> >>> >>> 1. NSH is secure against attacks induced by nodes that inject >>> (spoofed) NSH before entering an SFC-enabled domain. Indeed, SFC ingres= s >>> nodes MUST discard packets carrying NSH. >>> >>> 2. NSH is secure against attacks from within the SFC-enabled domain to >>> inject non-authorized context headers. From a service perspective, the >>> guard is the CP which is responsible for instructing the SFC-aware node= s >>> about the mandatory-to-process and optional-to-process context headers. >>> Furthermore, whatever the origin of a supplied context header, the last= SFF >>> of a chain (and egress nodes) MUST remove the NSH before forwarding >>> upstream. >>> >>> 3. NSH is secure against leaking privacy information outside an SFC >>> enabled domain. The last SFF of a chain (and egress nodes) MUST remove = the >>> NSH before forwarding upstream. >>> >>> 4. NSH is secure against indefinite SF/SFF loops by means of SI and >>> TTL fields. >>> >>> 5. Control plane specific threats are out of scope, but the document >>> cites I-D.ietf-sfc-control-plane for the expected behavior when instruc= ting >>> SFC nodes. BTW, the secdir review of the CP requirements can be retriev= ed >>> here (https://datatracker.ietf.org/doc/review-ietf-sfc-control-pl >>> ane-02-secdir-early-meadows-2015-12-10/). >>> >>> 6. NSH does not share privacy data with non-authorized parties. >>> Indeed, data carried in context headers are derived from the original >>> packet (e.g., source IP address) or are already known to the operator >>> (e.g., subscriber identifier, policy identifier, service identifier). T= he >>> context information is shared with nodes that are within the same >>> administrative domain. >>> >>> 7. Like other communication protocols, attacks from within the network >>> are possible, but those are soften by relying on the procedures put in >>> place by operators for testing and validating nodes/features before act= ual >>> activation. NSH does not provide a built-in feature to prevent misbehav= ing >>> nodes, but recommends to rely on the security features provided by the >>> underlying transport encapsulation schemes. >>> >>> >>> >>> Let=E2=80=99s now focus on the typical =E2=80=9Cattacks=E2=80=9D that c= an be issued from within >>> the network: >>> >>> 1. A misbehaving node redirect the traffic to non-authorized nodes >>> outside a domain: This is not NSH-specific. >>> >>> 2. A misbehaving SFC-unware node alters the content of a packet: This >>> is not NSH-specific. >>> >>> 3. A misbehaving SFC-aware node alters the content of NSH: >>> >>> i. It removes the NSH header from all packets it sees: >>> This will imply that the packets, the misbehaving node intercepts, will= be >>> forwarded upstream without invoking the required SFs (which may be seen= as >>> a feature, not a bug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)).= More seriously, the >>> OAM NSH feature will allow an operator to detect whether NSH packets ar= e >>> travelling in accordance with SFC instructions of that domain. Running = that >>> feature will help detecting the misbehaving node. >>> >>> ii. It modifies the content of SPI: This will imply that >>> these packets will be forwarded over a wrong path. Again, running OAM N= SH >>> will allow the operator to detect whether a packet is travelling in >>> accordance with SFC instructions. Running that feature regularly will h= elp >>> identifying the misbehaving node and whether the SFC configuration of a >>> domain is aligned with the expected behavior. >>> >>> iii. It modifies the content of SI/TTL: This will increase >>> the authorized maximum SFF/SF hops. Not sure if there is a security pro= blem >>> out there. >>> >>> iv. The misbehaving node is a classifier: The >>> implications will be severe from a service standpoint. NSH relies on OA= M >>> and control-plane to detect such case. >>> >>> v. The misbehaving node is an SFF: Examples of >>> misbehaviors are: strip NSH, forward to a non-authorized SF, redirect t= he >>> traffic to a non-authorized nodes, etc. Like for the classifier case, N= SH >>> relies on OAM and control-plane to detect such case. >>> >>> >>> >>> Are there specific attacks that are not listed above and that need more >>> attention from the WG? >>> >>> >>> >>> Thank you. >>> >>> >>> >>> Cheers, >>> >>> Med >>> >> >> _______________________________________________ >> sfc mailing list >> sfc@ietf.org >> https://www.ietf.org/mailman/listinfo/sfc >> >> >> > _______________________________________________ > sfc mailing list > sfc@ietf.org > https://www.ietf.org/mailman/listinfo/sfc > > > --94eb2c14e298b1d168055bfb028a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

= On Fri, Oct 20, 2017 at 7:01 AM, Carlos Pignataro (cpignata) <cpignata@ci= sco.com> wrote:
Eric,

On Oct 20, 2017, at 9:45 AM, Eric Rescorla <ekr@rtfm.com> wrote:



On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (pau= lq) <paulq@cisco.com> wrote:
Hi Alia,




Hi Med,

Since you directed this at me, there are efforts to have some discussi= ons and understand better the particular threats.
Currently, there is no transport with integrity protection that is eve= n a SHOULD to implement, much less a MUST.=C2=A0 There
is no control-plane defined (beyond the BGP work) that describes detec= ting issues.=C2=A0 There is no OAM defined and adopted
by the WG that detects or handles these types of attacks. I see the st= ructure that you are presuming, but none of these are
available as normative references to NSH today.


OAM does not address the security concern around integrity and devices= .=C2=A0 If you and the WG believe OAM is the next =E2=80=9Cto do=E2=80=9D f= or the WG, that=E2=80=99s fine, but it=E2=80=99s orthogonal to the security= points raised.


I had recommended having a focused interim meeting to make sure that e= veryone concerned understood the issues and
worked through the threat analysis and possible solutions together.

Let=E2=80=99s please not conflate the ongoing security discussion with= OAM, or other topics.=C2=A0 The security reality, as you pointed out in yo= ur email to Eric, is that we, as a community and industry, accept a level o= f trust wrt network devices.

I don't actually think that's the point of contention, at leas= t from my perspective. Rather it's about the level of trust to be place= d in the networking path through which that data flows.


Understood. How about this?

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 X.2.=C2=A0=C2=A0Trans= port Encapsulation Security

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0NSH is always encapsulated by an outer transport
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0encapsulation as detailed in Section 4 of this
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0specification, and as depicted in Figure 1.=C2=A0=C2=A0If a= n operator
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0deems cryptographic integrity protection necessary due to =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0their risk analysis, then an outer transport encapsulation<= br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0that provides such protection [RFC6071], such as=C2=A0IPsec= , MUST
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0be used.

= I can't speak for Kathleen, but I don't really think this gets the = job done.

As described in RFC 3552 (https://tools.ietf.org/html/rfc= 3552#section-3) our threat model is that the Internet is untrusted. Tha= t means we should be designing protocols that are safe to operate in that e= nvironment, which in this case means that the protocol should either (a) co= me with a built-in security mechanism or (b) be run over a secure transport= . I don't think telling operators "you figure it out" reflect= s best current practice.

-Ekr
=C2=A0=


=E2=80=94 Carlos.

-Ekr

=C2=A0
=C2=A0The ongoing edits and dialogue with Kathleen and Eric are workin= g through their concerns.=C2=A0 An interim to talk about next SFC steps, po= st NSH, is a different matter. =C2=A0



At this point, clearly the most that could happen is a
virtual interim.=C2=A0 There are some background discussions going on.=

I do not want to assume what mixture will be acceptable to handle the = security concerns expressed by Kathleen and Eric
and supported by a number of other ADs.

I do greatly appreciate your attention and effor= ts to clarify and try to move this work forward. I have been expressing con= cerns
about the security aspects of this work since RF= C 7665 went through the publication process - and strongly encouraging seri= ous
WG focus to prevent precisely what has now happe= ned.

Regards,
Alia


On Thu, Oct 19, 2017 at 4:49 AM, <moham= ed.boucadair@orange.com> wrote:

Hi Alia,

=C2=A0

Can you please share with us the current stat= us of the document and the list of pending blocking points?

=C2=A0

I went through all public email exchanges, es= pecially the ones related to security, but it is not that easy to understan= d what are the remaining issues that need fixes.

=C2=A0

In particular, is there a concern with assumi= ng the current NSH threat model?

=C2=A0

1.=C2=A0 NSH is secure against attacks induced by= nodes that inject (spoofed) NSH before entering an SFC-enabled domain. Ind= eed, SFC ingress nodes MUST discard packets carrying NSH.

2.=C2=A0 NSH is secure against attacks from withi= n the SFC-enabled domain to inject non-authorized context headers. From a s= ervice perspective, the guard is the CP which is responsible for instructing the SFC-aware nodes about t= he mandatory-to-process and optional-to-process context headers. Furthermor= e, whatever the origin of a supplied context header, the last SFF of a chai= n (and egress nodes) MUST remove the NSH before forwarding upstream.

3.=C2=A0 NSH is secure against leaking privacy in= formation outside an SFC enabled domain. The last SFF of a chain (and egres= s nodes) MUST remove the NSH before forwarding upstream.

4.=C2=A0 NSH is secure against indefinite SF/SFF = loops by means of SI and TTL fields.

5.=C2=A0 Control plane specific threats are out o= f scope, but the document cites I-D.ietf-sfc-control-plane for the expected= behavior when instructing SFC nodes. BTW, the secdir review of the CP requirements can be retrieved here= (https://datatracker= .ietf.org/doc/review-ietf-sfc-control-plane-02-secdir-early-meado= ws-2015-12-10/).

6.=C2=A0 NSH does not share privacy data with non= -authorized parties. Indeed, data carried in context headers are derived fr= om the original packet (e.g., source IP address) or are already known to the operator (e.g., subscriber = identifier, policy identifier, service identifier). The context information= is shared with nodes that are within the same administrative domain. =C2= =A0

7.=C2=A0 Like other communication protocols, atta= cks from within the network are possible, but those are soften by relying o= n the procedures put in place by operators for testing and validating nodes/features before actual activ= ation. NSH does not provide a built-in feature to prevent misbehaving nodes= , but recommends to rely on the security features provided by the underlyin= g transport encapsulation schemes.

=C2=A0

Let=E2=80=99s now focus on the typical =E2=80= =9Cattacks=E2=80=9D that can be issued from within the network:

1.=C2=A0 A misbehaving node redirect the traffic = to non-authorized nodes outside a domain: This is not NSH-specific.<= u>

2.=C2=A0 A misbehaving SFC-unware node alters the= content of a packet: This is not NSH-specific.

3.=C2=A0 A misbehaving SFC-aware node alters the = content of NSH:

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 i.=C2=A0=C2=A0=C2= =A0=C2=A0 It removes the NSH header from all packe= ts it sees: This will imply that the packets, the misbehaving node intercep= ts, will be forwarded upstream without invoking the required SFs (which may be seen as a feature, not a b= ug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)). More seriously, the O= AM NSH feature will allow an operator to detect whether NSH packets are tra= velling in accordance with SFC instructions of that domain. Running that feature will help detecting the misbehaving node.

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ii.=C2=A0=C2=A0= =C2=A0=C2=A0 It modifies the content of SPI: This wil= l imply that these packets will be forwarded over a wrong path. Again, runn= ing OAM NSH will allow the operator to detect whether a packet is travelling in accordance with SFC instructio= ns. Running that feature regularly will help identifying the misbehaving no= de and whether the SFC configuration of a domain is aligned with the expect= ed behavior.

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 iii.=C2=A0=C2=A0= =C2=A0=C2=A0 It modifies the content of SI/TTL: This = will increase the authorized maximum SFF/SF hops. Not sure if there is a se= curity problem out there.

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 iv.=C2=A0=C2=A0= =C2=A0=C2=A0 The misbehaving node is a classifier: Th= e implications will be severe from a service standpoint. NSH relies on OAM = and control-plane to detect such case. =C2=A0=C2=A0

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 v.=C2=A0=C2=A0=C2= =A0=C2=A0 The misbehaving node is an SFF: Examples= of misbehaviors are: strip NSH, forward to a non-authorized SF, redirect t= he traffic to a non-authorized nodes, etc. Like for the classifier case, NSH relies on OAM and control-pl= ane to detect such case. =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0

Are there specific attacks that are not liste= d above and that need more attention from the WG?

=C2=A0

Thank you.

=C2=A0

Cheers,

Med


_______________________________________________
sfc mailing list
sfc@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/sfc


_______________________________________________
sfc mailing list
sfc@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/sfc


--94eb2c14e298b1d168055bfb028a-- From nobody Fri Oct 20 07:13:03 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10AEF13339A for ; Fri, 20 Oct 2017 07:13:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.617 X-Spam-Level: X-Spam-Status: No, score=-2.617 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d9w20mjIXqPr for ; Fri, 20 Oct 2017 07:12:58 -0700 (PDT) Received: from relais-inet.orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 601A0133083 for ; Fri, 20 Oct 2017 07:12:58 -0700 (PDT) Received: from opfedar01.francetelecom.fr (unknown [xx.xx.xx.2]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id A96FC100320; Fri, 20 Oct 2017 16:12:56 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.60]) by opfedar01.francetelecom.fr (ESMTP service) with ESMTP id 81C1316005E; Fri, 20 Oct 2017 16:12:56 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM7F.corporate.adroot.infra.ftgroup ([fe80::c1d7:e278:e357:11ad%19]) with mapi id 14.03.0361.001; Fri, 20 Oct 2017 16:12:56 +0200 From: To: Eric Rescorla CC: "Paul Quinn (paulq)" , Alia Atlas , Kathleen Moriarty , "sfc@ietf.org" Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wA9BTCYAAAHfJA= Date: Fri, 20 Oct 2017 14:12:55 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93300A057BFB@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BA4@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93300A057BFBOPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:13:01 -0000 --_000_787AE7BB302AE849A7480A190F8B93300A057BFBOPEXCLILMA3corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmUtLA0KDQpUaGFuayB5b3UsIEVyaWMuDQoNClRoZXJlIGlzIGEgbWlzdW5kZXJzdGFuZGluZyBo ZXJlLiBUaGUgZG9jdW1lbnQgZG9lcyBub3QgY2xhaW0gRENzIGFyZSBzYWZlIGFuZCBzZWN1cmUg ZW52aXJvbm1lbnRzLiBXaGF0IGl0IHNheXMgaXMgdGhhdCB0aGUgTlNIIHNwZWNpZmljYXRpb24g aXMgc2NvcGVkIHRvIGJlIGRlcGxveWVkIGluIGEgc2luZ2xlIGFkbWluaXN0cmF0aXZlIGRvbWFp biB3aXRoIG1lYXN1cmVzIHRvLCBlLmcuLDoNCg0KLSAgICBQcm90ZWN0IGFnYWluc3Qgc3Bvb2Zl ZCBkYXRhDQoNCi0gICAgTGVha2luZyBkYXRhIG91dHNpZGUgYSBkb21haW4NCg0KLSAgICBEZXRl Y3QgYW5kIHByZXZlbnQgaW5kZWZpbml0ZSBmb3J3YXJkaW5nIGxvb3BzDQoNCkEgc2luZ2xlIGFk bWluaXN0cmF0aXZlIGRvbWFpbiBpcyBub3QgbmVjZXNzYXJpbHkgYSBzZWN1cmUgb3IgYSBzYWZl IG9uZS4gVGhhdOKAmXMgZXZpZGVudC4gQXR0YWNrcyBmcm9tIHdpdGhpbiBhbiBhZG1pbmlzdHJh dGl2ZSBkb21haW4gYXJlIHBvc3NpYmxlIHdpdGggb3Igd2l0aG91dCBOU0guDQoNCknigJltIHJl aXRlcmF0aW5nIG15IHF1ZXN0aW9uOiB3aGF0IHNwZWNpZmljIGF0dGFja3MgYnVpbHQtaW4vbWFu ZGF0b3J5IGludGVncml0eSBtZWNoYW5pc21zIHdpbGwgc29sdmUgZm9yIHRoZSBwYXJ0aWN1bGFy IGNhc2Ugb2YgTlNIPyBUaGFuayB5b3UuDQoNCkNoZWVycywNCk1lZA0KDQpEZSA6IEVyaWMgUmVz Y29ybGEgW21haWx0bzpla3JAcnRmbS5jb21dDQpFbnZvecOpIDogdmVuZHJlZGkgMjAgb2N0b2Jy ZSAyMDE3IDE1OjU2DQrDgCA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE4NCkNjIDogUGF1bCBR dWlubiAocGF1bHEpOyBBbGlhIEF0bGFzOyBLYXRobGVlbiBNb3JpYXJ0eTsgc2ZjQGlldGYub3Jn DQpPYmpldCA6IFJlOiBbc2ZjXSBOU0ggRElTQ1VTUyBTdGF0dXMNCg0KSXQncyBleHBsYWluZWQg aW4gZGV0YWlsIGluIG15IERJU0NVU1M6DQoNCiIxLiBUaGUgYXNzdW1wdGlvbiB0aGF0IHRoZSBk YXRhY2VudGVyIGlzIGEgc2VjdXJlIGVudmlyb25tZW50IGlzIG5vdCBhDQoNCnJlYXNvbmFibGUg b25lLiBBcyBLYXRobGVlbiBhbmQgQWRhbSBib3RoIG9ic2VydmVyLCBkYXRhY2VudGVyDQoNCmJy ZWFjaGVzIGFyZSBjb21tb24gYW5kIHRoYXQgaXMgd2h5IHBlb3BsZSBhcmUgbW92aW5nIHRvd2Fy ZHMNCg0KZW5jcnlwdGlvbiBpbnNpZGUgdGhlIGRhdGEgY2VudGVyLiBJIHNlZSB0aGF0IHRoaXMg ZHJhZnQgaGFzIHRleHQNCg0KY2xhaW1pbmcgdGhhdCB0aGlzIGlzIG9ubHkgdG8gYmUgZGVwbG95 ZWQgaW4gc2FmZSBlbnZpcm9ubWVudHMsIGJ1dCB3ZQ0KDQprbm93IHRoYXQgdGVjaG5vbG9naWVz IGxpa2UgdGhpcyBnZXQgZGVwbG95ZWQgb3V0c2lkZSB0aGUgbG9jYXRpb25zDQoNCmZvciB3aGlj aCB3ZSBjbGFpbSB0aGV5IGFyZSB0byBiZSBkZXBsb3llZCwgYW5kIHRoZXJlJ3Mgbm90aGluZyBo ZXJlDQoNCnRvIHN0b3AgdGhhdC4gTW9yZW92ZXIsIHRoZSB3aG9sZSB0cmVuZCB0b3dhcmRzIGNs b3VkIGNvbXB1dGluZyBwdXNoZXMNCg0KdXMgYXdheSBmcm9tIGRlc2lnbnMgaW4gd2hpY2ggeW91 IGNhbiBzYWZlbHkgdGFsayBhYm91dCBzaW5nbGUgc2VjdXJlDQoNCnpvbmVzLiINCg0KDQoNCi1F a3INCg0KDQoNCg0KDQpPbiBGcmksIE9jdCAyMCwgMjAxNyBhdCA2OjUxIEFNLCA8bW9oYW1lZC5i b3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4+ IHdyb3RlOg0KRGVhciBFcmljLA0KDQpDYW4geW91IHBsZWFzZSBjbGFyaWZ5IHRoaXMgcG9pbnQ6 IOKAnFJhdGhlciBpdCdzIGFib3V0IHRoZSBsZXZlbCBvZiB0cnVzdCB0byBiZSBwbGFjZWQgaW4g dGhlIG5ldHdvcmtpbmcgcGF0aCB0aHJvdWdoIHdoaWNoIHRoYXQgZGF0YSBmbG93cy7igJ0/DQoN ClNvcnJ5IGlmIHlvdSBoYXZlIGFscmVhZHkgZXhwbGFpbmVkIGl0IHRvIHRoZSBlZGl0b3JzLCBi dXQgYXMgYSBXRyBwYXJ0aWNpcGFudCBJIGRvbuKAmXQgaGF2ZSBhY2Nlc3MgdG8gYSByZWNvcmQg b2Ygc3VjaCBkaXNjdXNzaW9uLg0KDQpUaGFuayB5b3UuDQoNCkNoZWVycywNCk1lZA0KDQpEZSA6 IEVyaWMgUmVzY29ybGEgW21haWx0bzpla3JAcnRmbS5jb208bWFpbHRvOmVrckBydGZtLmNvbT5d DQpFbnZvecOpIDogdmVuZHJlZGkgMjAgb2N0b2JyZSAyMDE3IDE1OjQ1DQrDgCA6IFBhdWwgUXVp bm4gKHBhdWxxKQ0KQ2MgOiBBbGlhIEF0bGFzOyBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBL YXRobGVlbiBNb3JpYXJ0eTsgc2ZjQGlldGYub3JnPG1haWx0bzpzZmNAaWV0Zi5vcmc+DQpPYmpl dCA6IFJlOiBbc2ZjXSBOU0ggRElTQ1VTUyBTdGF0dXMNCg0KDQoNCk9uIEZyaSwgT2N0IDIwLCAy MDE3IGF0IDY6MzEgQU0sIFBhdWwgUXVpbm4gKHBhdWxxKSA8cGF1bHFAY2lzY28uY29tPG1haWx0 bzpwYXVscUBjaXNjby5jb20+PiB3cm90ZToNCkhpIEFsaWEsDQoNCg0KDQpPbiBPY3QgMTksIDIw MTcsIGF0IDI6NDkgUE0sIEFsaWEgQXRsYXMgPGFrYXRsYXNAZ21haWwuY29tPG1haWx0bzpha2F0 bGFzQGdtYWlsLmNvbT4+IHdyb3RlOg0KDQpIaSBNZWQsDQoNClNpbmNlIHlvdSBkaXJlY3RlZCB0 aGlzIGF0IG1lLCB0aGVyZSBhcmUgZWZmb3J0cyB0byBoYXZlIHNvbWUgZGlzY3Vzc2lvbnMgYW5k IHVuZGVyc3RhbmQgYmV0dGVyIHRoZSBwYXJ0aWN1bGFyIHRocmVhdHMuDQpDdXJyZW50bHksIHRo ZXJlIGlzIG5vIHRyYW5zcG9ydCB3aXRoIGludGVncml0eSBwcm90ZWN0aW9uIHRoYXQgaXMgZXZl biBhIFNIT1VMRCB0byBpbXBsZW1lbnQsIG11Y2ggbGVzcyBhIE1VU1QuICBUaGVyZQ0KaXMgbm8g Y29udHJvbC1wbGFuZSBkZWZpbmVkIChiZXlvbmQgdGhlIEJHUCB3b3JrKSB0aGF0IGRlc2NyaWJl cyBkZXRlY3RpbmcgaXNzdWVzLiAgVGhlcmUgaXMgbm8gT0FNIGRlZmluZWQgYW5kIGFkb3B0ZWQN CmJ5IHRoZSBXRyB0aGF0IGRldGVjdHMgb3IgaGFuZGxlcyB0aGVzZSB0eXBlcyBvZiBhdHRhY2tz LiBJIHNlZSB0aGUgc3RydWN0dXJlIHRoYXQgeW91IGFyZSBwcmVzdW1pbmcsIGJ1dCBub25lIG9m IHRoZXNlIGFyZQ0KYXZhaWxhYmxlIGFzIG5vcm1hdGl2ZSByZWZlcmVuY2VzIHRvIE5TSCB0b2Rh eS4NCg0KDQpPQU0gZG9lcyBub3QgYWRkcmVzcyB0aGUgc2VjdXJpdHkgY29uY2VybiBhcm91bmQg aW50ZWdyaXR5IGFuZCBkZXZpY2VzLiAgSWYgeW91IGFuZCB0aGUgV0cgYmVsaWV2ZSBPQU0gaXMg dGhlIG5leHQg4oCcdG8gZG/igJ0gZm9yIHRoZSBXRywgdGhhdOKAmXMgZmluZSwgYnV0IGl04oCZ cyBvcnRob2dvbmFsIHRvIHRoZSBzZWN1cml0eSBwb2ludHMgcmFpc2VkLg0KDQoNCkkgaGFkIHJl Y29tbWVuZGVkIGhhdmluZyBhIGZvY3VzZWQgaW50ZXJpbSBtZWV0aW5nIHRvIG1ha2Ugc3VyZSB0 aGF0IGV2ZXJ5b25lIGNvbmNlcm5lZCB1bmRlcnN0b29kIHRoZSBpc3N1ZXMgYW5kDQp3b3JrZWQg dGhyb3VnaCB0aGUgdGhyZWF0IGFuYWx5c2lzIGFuZCBwb3NzaWJsZSBzb2x1dGlvbnMgdG9nZXRo ZXIuDQoNCkxldOKAmXMgcGxlYXNlIG5vdCBjb25mbGF0ZSB0aGUgb25nb2luZyBzZWN1cml0eSBk aXNjdXNzaW9uIHdpdGggT0FNLCBvciBvdGhlciB0b3BpY3MuICBUaGUgc2VjdXJpdHkgcmVhbGl0 eSwgYXMgeW91IHBvaW50ZWQgb3V0IGluIHlvdXIgZW1haWwgdG8gRXJpYywgaXMgdGhhdCB3ZSwg YXMgYSBjb21tdW5pdHkgYW5kIGluZHVzdHJ5LCBhY2NlcHQgYSBsZXZlbCBvZiB0cnVzdCB3cnQg bmV0d29yayBkZXZpY2VzLg0KDQpJIGRvbid0IGFjdHVhbGx5IHRoaW5rIHRoYXQncyB0aGUgcG9p bnQgb2YgY29udGVudGlvbiwgYXQgbGVhc3QgZnJvbSBteSBwZXJzcGVjdGl2ZS4gUmF0aGVyIGl0 J3MgYWJvdXQgdGhlIGxldmVsIG9mIHRydXN0IHRvIGJlIHBsYWNlZCBpbiB0aGUgbmV0d29ya2lu ZyBwYXRoIHRocm91Z2ggd2hpY2ggdGhhdCBkYXRhIGZsb3dzLg0KDQotRWtyDQoNCg0KIFRoZSBv bmdvaW5nIGVkaXRzIGFuZCBkaWFsb2d1ZSB3aXRoIEthdGhsZWVuIGFuZCBFcmljIGFyZSB3b3Jr aW5nIHRocm91Z2ggdGhlaXIgY29uY2VybnMuICBBbiBpbnRlcmltIHRvIHRhbGsgYWJvdXQgbmV4 dCBTRkMgc3RlcHMsIHBvc3QgTlNILCBpcyBhIGRpZmZlcmVudCBtYXR0ZXIuDQoNCg0KDQpBdCB0 aGlzIHBvaW50LCBjbGVhcmx5IHRoZSBtb3N0IHRoYXQgY291bGQgaGFwcGVuIGlzIGENCnZpcnR1 YWwgaW50ZXJpbS4gIFRoZXJlIGFyZSBzb21lIGJhY2tncm91bmQgZGlzY3Vzc2lvbnMgZ29pbmcg b24uDQoNCkkgZG8gbm90IHdhbnQgdG8gYXNzdW1lIHdoYXQgbWl4dHVyZSB3aWxsIGJlIGFjY2Vw dGFibGUgdG8gaGFuZGxlIHRoZSBzZWN1cml0eSBjb25jZXJucyBleHByZXNzZWQgYnkgS2F0aGxl ZW4gYW5kIEVyaWMNCmFuZCBzdXBwb3J0ZWQgYnkgYSBudW1iZXIgb2Ygb3RoZXIgQURzLg0KDQpJ IGRvIGdyZWF0bHkgYXBwcmVjaWF0ZSB5b3VyIGF0dGVudGlvbiBhbmQgZWZmb3J0cyB0byBjbGFy aWZ5IGFuZCB0cnkgdG8gbW92ZSB0aGlzIHdvcmsgZm9yd2FyZC4gSSBoYXZlIGJlZW4gZXhwcmVz c2luZyBjb25jZXJucw0KYWJvdXQgdGhlIHNlY3VyaXR5IGFzcGVjdHMgb2YgdGhpcyB3b3JrIHNp bmNlIFJGQyA3NjY1IHdlbnQgdGhyb3VnaCB0aGUgcHVibGljYXRpb24gcHJvY2VzcyAtIGFuZCBz dHJvbmdseSBlbmNvdXJhZ2luZyBzZXJpb3VzDQpXRyBmb2N1cyB0byBwcmV2ZW50IHByZWNpc2Vs eSB3aGF0IGhhcyBub3cgaGFwcGVuZWQuDQoNClJlZ2FyZHMsDQpBbGlhDQoNCg0KT24gVGh1LCBP Y3QgMTksIDIwMTcgYXQgNDo0OSBBTSwgPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFp bHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+PiB3cm90ZToNCkhpIEFsaWEsDQoNCkNh biB5b3UgcGxlYXNlIHNoYXJlIHdpdGggdXMgdGhlIGN1cnJlbnQgc3RhdHVzIG9mIHRoZSBkb2N1 bWVudCBhbmQgdGhlIGxpc3Qgb2YgcGVuZGluZyBibG9ja2luZyBwb2ludHM/DQoNCkkgd2VudCB0 aHJvdWdoIGFsbCBwdWJsaWMgZW1haWwgZXhjaGFuZ2VzLCBlc3BlY2lhbGx5IHRoZSBvbmVzIHJl bGF0ZWQgdG8gc2VjdXJpdHksIGJ1dCBpdCBpcyBub3QgdGhhdCBlYXN5IHRvIHVuZGVyc3RhbmQg d2hhdCBhcmUgdGhlIHJlbWFpbmluZyBpc3N1ZXMgdGhhdCBuZWVkIGZpeGVzLg0KDQpJbiBwYXJ0 aWN1bGFyLCBpcyB0aGVyZSBhIGNvbmNlcm4gd2l0aCBhc3N1bWluZyB0aGUgY3VycmVudCBOU0gg dGhyZWF0IG1vZGVsPw0KDQoNCjEuICBOU0ggaXMgc2VjdXJlIGFnYWluc3QgYXR0YWNrcyBpbmR1 Y2VkIGJ5IG5vZGVzIHRoYXQgaW5qZWN0IChzcG9vZmVkKSBOU0ggYmVmb3JlIGVudGVyaW5nIGFu IFNGQy1lbmFibGVkIGRvbWFpbi4gSW5kZWVkLCBTRkMgaW5ncmVzcyBub2RlcyBNVVNUIGRpc2Nh cmQgcGFja2V0cyBjYXJyeWluZyBOU0guDQoNCjIuICBOU0ggaXMgc2VjdXJlIGFnYWluc3QgYXR0 YWNrcyBmcm9tIHdpdGhpbiB0aGUgU0ZDLWVuYWJsZWQgZG9tYWluIHRvIGluamVjdCBub24tYXV0 aG9yaXplZCBjb250ZXh0IGhlYWRlcnMuIEZyb20gYSBzZXJ2aWNlIHBlcnNwZWN0aXZlLCB0aGUg Z3VhcmQgaXMgdGhlIENQIHdoaWNoIGlzIHJlc3BvbnNpYmxlIGZvciBpbnN0cnVjdGluZyB0aGUg U0ZDLWF3YXJlIG5vZGVzIGFib3V0IHRoZSBtYW5kYXRvcnktdG8tcHJvY2VzcyBhbmQgb3B0aW9u YWwtdG8tcHJvY2VzcyBjb250ZXh0IGhlYWRlcnMuIEZ1cnRoZXJtb3JlLCB3aGF0ZXZlciB0aGUg b3JpZ2luIG9mIGEgc3VwcGxpZWQgY29udGV4dCBoZWFkZXIsIHRoZSBsYXN0IFNGRiBvZiBhIGNo YWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNIIGJlZm9yZSBmb3J3YXJk aW5nIHVwc3RyZWFtLg0KDQozLiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGxlYWtpbmcgcHJpdmFj eSBpbmZvcm1hdGlvbiBvdXRzaWRlIGFuIFNGQyBlbmFibGVkIGRvbWFpbi4gVGhlIGxhc3QgU0ZG IG9mIGEgY2hhaW4gKGFuZCBlZ3Jlc3Mgbm9kZXMpIE1VU1QgcmVtb3ZlIHRoZSBOU0ggYmVmb3Jl IGZvcndhcmRpbmcgdXBzdHJlYW0uDQoNCjQuICBOU0ggaXMgc2VjdXJlIGFnYWluc3QgaW5kZWZp bml0ZSBTRi9TRkYgbG9vcHMgYnkgbWVhbnMgb2YgU0kgYW5kIFRUTCBmaWVsZHMuDQoNCjUuICBD b250cm9sIHBsYW5lIHNwZWNpZmljIHRocmVhdHMgYXJlIG91dCBvZiBzY29wZSwgYnV0IHRoZSBk b2N1bWVudCBjaXRlcyBJLUQuaWV0Zi1zZmMtY29udHJvbC1wbGFuZSBmb3IgdGhlIGV4cGVjdGVk IGJlaGF2aW9yIHdoZW4gaW5zdHJ1Y3RpbmcgU0ZDIG5vZGVzLiBCVFcsIHRoZSBzZWNkaXIgcmV2 aWV3IG9mIHRoZSBDUCByZXF1aXJlbWVudHMgY2FuIGJlIHJldHJpZXZlZCBoZXJlIChodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9yZXZpZXctaWV0Zi1zZmMtY29udHJvbC1wbGFuZS0w Mi1zZWNkaXItZWFybHktbWVhZG93cy0yMDE1LTEyLTEwLykuDQoNCjYuICBOU0ggZG9lcyBub3Qg c2hhcmUgcHJpdmFjeSBkYXRhIHdpdGggbm9uLWF1dGhvcml6ZWQgcGFydGllcy4gSW5kZWVkLCBk YXRhIGNhcnJpZWQgaW4gY29udGV4dCBoZWFkZXJzIGFyZSBkZXJpdmVkIGZyb20gdGhlIG9yaWdp bmFsIHBhY2tldCAoZS5nLiwgc291cmNlIElQIGFkZHJlc3MpIG9yIGFyZSBhbHJlYWR5IGtub3du IHRvIHRoZSBvcGVyYXRvciAoZS5nLiwgc3Vic2NyaWJlciBpZGVudGlmaWVyLCBwb2xpY3kgaWRl bnRpZmllciwgc2VydmljZSBpZGVudGlmaWVyKS4gVGhlIGNvbnRleHQgaW5mb3JtYXRpb24gaXMg c2hhcmVkIHdpdGggbm9kZXMgdGhhdCBhcmUgd2l0aGluIHRoZSBzYW1lIGFkbWluaXN0cmF0aXZl IGRvbWFpbi4NCg0KNy4gIExpa2Ugb3RoZXIgY29tbXVuaWNhdGlvbiBwcm90b2NvbHMsIGF0dGFj a3MgZnJvbSB3aXRoaW4gdGhlIG5ldHdvcmsgYXJlIHBvc3NpYmxlLCBidXQgdGhvc2UgYXJlIHNv ZnRlbiBieSByZWx5aW5nIG9uIHRoZSBwcm9jZWR1cmVzIHB1dCBpbiBwbGFjZSBieSBvcGVyYXRv cnMgZm9yIHRlc3RpbmcgYW5kIHZhbGlkYXRpbmcgbm9kZXMvZmVhdHVyZXMgYmVmb3JlIGFjdHVh bCBhY3RpdmF0aW9uLiBOU0ggZG9lcyBub3QgcHJvdmlkZSBhIGJ1aWx0LWluIGZlYXR1cmUgdG8g cHJldmVudCBtaXNiZWhhdmluZyBub2RlcywgYnV0IHJlY29tbWVuZHMgdG8gcmVseSBvbiB0aGUg c2VjdXJpdHkgZmVhdHVyZXMgcHJvdmlkZWQgYnkgdGhlIHVuZGVybHlpbmcgdHJhbnNwb3J0IGVu Y2Fwc3VsYXRpb24gc2NoZW1lcy4NCg0KTGV04oCZcyBub3cgZm9jdXMgb24gdGhlIHR5cGljYWwg 4oCcYXR0YWNrc+KAnSB0aGF0IGNhbiBiZSBpc3N1ZWQgZnJvbSB3aXRoaW4gdGhlIG5ldHdvcms6 DQoNCjEuICBBIG1pc2JlaGF2aW5nIG5vZGUgcmVkaXJlY3QgdGhlIHRyYWZmaWMgdG8gbm9uLWF1 dGhvcml6ZWQgbm9kZXMgb3V0c2lkZSBhIGRvbWFpbjogVGhpcyBpcyBub3QgTlNILXNwZWNpZmlj Lg0KDQoyLiAgQSBtaXNiZWhhdmluZyBTRkMtdW53YXJlIG5vZGUgYWx0ZXJzIHRoZSBjb250ZW50 IG9mIGEgcGFja2V0OiBUaGlzIGlzIG5vdCBOU0gtc3BlY2lmaWMuDQoNCjMuICBBIG1pc2JlaGF2 aW5nIFNGQy1hd2FyZSBub2RlIGFsdGVycyB0aGUgY29udGVudCBvZiBOU0g6DQoNCiAgICAgICAg ICAgIGkuICAgICBJdCByZW1vdmVzIHRoZSBOU0ggaGVhZGVyIGZyb20gYWxsIHBhY2tldHMgaXQg c2VlczogVGhpcyB3aWxsIGltcGx5IHRoYXQgdGhlIHBhY2tldHMsIHRoZSBtaXNiZWhhdmluZyBu b2RlIGludGVyY2VwdHMsIHdpbGwgYmUgZm9yd2FyZGVkIHVwc3RyZWFtIHdpdGhvdXQgaW52b2tp bmcgdGhlIHJlcXVpcmVkIFNGcyAod2hpY2ggbWF5IGJlIHNlZW4gYXMgYSBmZWF0dXJlLCBub3Qg YSBidWcgaWYgb25lIGRpc2xpa2VzIOKAnG1pZGRsZWJveGVz4oCdIDopKS4gTW9yZSBzZXJpb3Vz bHksIHRoZSBPQU0gTlNIIGZlYXR1cmUgd2lsbCBhbGxvdyBhbiBvcGVyYXRvciB0byBkZXRlY3Qg d2hldGhlciBOU0ggcGFja2V0cyBhcmUgdHJhdmVsbGluZyBpbiBhY2NvcmRhbmNlIHdpdGggU0ZD IGluc3RydWN0aW9ucyBvZiB0aGF0IGRvbWFpbi4gUnVubmluZyB0aGF0IGZlYXR1cmUgd2lsbCBo ZWxwIGRldGVjdGluZyB0aGUgbWlzYmVoYXZpbmcgbm9kZS4NCg0KICAgICAgICAgIGlpLiAgICAg SXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQgb2YgU1BJOiBUaGlzIHdpbGwgaW1wbHkgdGhhdCB0aGVz ZSBwYWNrZXRzIHdpbGwgYmUgZm9yd2FyZGVkIG92ZXIgYSB3cm9uZyBwYXRoLiBBZ2FpbiwgcnVu bmluZyBPQU0gTlNIIHdpbGwgYWxsb3cgdGhlIG9wZXJhdG9yIHRvIGRldGVjdCB3aGV0aGVyIGEg cGFja2V0IGlzIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMu IFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHJlZ3VsYXJseSB3aWxsIGhlbHAgaWRlbnRpZnlpbmcgdGhl IG1pc2JlaGF2aW5nIG5vZGUgYW5kIHdoZXRoZXIgdGhlIFNGQyBjb25maWd1cmF0aW9uIG9mIGEg ZG9tYWluIGlzIGFsaWduZWQgd2l0aCB0aGUgZXhwZWN0ZWQgYmVoYXZpb3IuDQoNCiAgICAgICAg aWlpLiAgICAgSXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQgb2YgU0kvVFRMOiBUaGlzIHdpbGwgaW5j cmVhc2UgdGhlIGF1dGhvcml6ZWQgbWF4aW11bSBTRkYvU0YgaG9wcy4gTm90IHN1cmUgaWYgdGhl cmUgaXMgYSBzZWN1cml0eSBwcm9ibGVtIG91dCB0aGVyZS4NCg0KICAgICAgICAgIGl2LiAgICAg VGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMgYSBjbGFzc2lmaWVyOiBUaGUgaW1wbGljYXRpb25zIHdp bGwgYmUgc2V2ZXJlIGZyb20gYSBzZXJ2aWNlIHN0YW5kcG9pbnQuIE5TSCByZWxpZXMgb24gT0FN IGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNoIGNhc2UuDQoNCiAgICAgICAgICAgIHYu ICAgICBUaGUgbWlzYmVoYXZpbmcgbm9kZSBpcyBhbiBTRkY6IEV4YW1wbGVzIG9mIG1pc2JlaGF2 aW9ycyBhcmU6IHN0cmlwIE5TSCwgZm9yd2FyZCB0byBhIG5vbi1hdXRob3JpemVkIFNGLCByZWRp cmVjdCB0aGUgdHJhZmZpYyB0byBhIG5vbi1hdXRob3JpemVkIG5vZGVzLCBldGMuIExpa2UgZm9y IHRoZSBjbGFzc2lmaWVyIGNhc2UsIE5TSCByZWxpZXMgb24gT0FNIGFuZCBjb250cm9sLXBsYW5l IHRvIGRldGVjdCBzdWNoIGNhc2UuDQoNCkFyZSB0aGVyZSBzcGVjaWZpYyBhdHRhY2tzIHRoYXQg YXJlIG5vdCBsaXN0ZWQgYWJvdmUgYW5kIHRoYXQgbmVlZCBtb3JlIGF0dGVudGlvbiBmcm9tIHRo ZSBXRz8NCg0KVGhhbmsgeW91Lg0KDQpDaGVlcnMsDQpNZWQNCg0KX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNmYyBtYWlsaW5nIGxpc3QNCnNmY0BpZXRm Lm9yZzxtYWlsdG86c2ZjQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9zZmMNCg0KDQoNCg== --_000_787AE7BB302AE849A7480A190F8B93300A057BFBOPEXCLILMA3corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAgMDt9 DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIg MiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3Nl LTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25z b2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0 aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJn aW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZv bnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5 cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dl ZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3Jh dGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5 bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyI7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNvQWNldGF0ZQ0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IlRleHRlIGRlIGJ1bGxlcyBD YXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo4 LjBwdDsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7fQ0KcC5Nc29MaXN0UGFy YWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28t c3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowY207DQoJbWFyZ2luLXJpZ2h0OjBjbTsN CgltYXJnaW4tYm90dG9tOjBjbTsNCgltYXJnaW4tbGVmdDozNi4wcHQ7DQoJbWFyZ2luLWJvdHRv bTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBS b21hbiIsInNlcmlmIjt9DQpzcGFuLlByZm9ybWF0SFRNTENhcg0KCXttc28tc3R5bGUtbmFtZToi UHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0 eWxlLWxpbms6IlByw6lmb3JtYXTDqSBIVE1MIjsNCglmb250LWZhbWlseTpDb25zb2xhczsNCglt c28tZmFyZWFzdC1sYW5ndWFnZTpGUjt9DQpwLm0tNzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAzOTMw MTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCwg bGkubS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0 ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoLCBkaXYubS03MzcwNjc1MjcyODUwMDc1Mzc4 bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFy YWdyYXBoDQoJe21zby1zdHlsZS1uYW1lOm1fLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0 MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGg7DQoJ bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowY207DQoJZm9udC1zaXplOjEyLjBwdDsN Cglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCnNwYW4uVGV4dGVkZWJ1 bGxlc0Nhcg0KCXttc28tc3R5bGUtbmFtZToiVGV4dGUgZGUgYnVsbGVzIENhciI7DQoJbXNvLXN0 eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJUZXh0ZSBkZSBidWxsZXMiOw0KCWZv bnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpG Ujt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsN Cglmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtd2VpZ2h0 Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5 bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYi Ow0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtz aXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzAuODVwdCA3MC44NXB0IDcwLjg1cHQgNzAu ODVwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3Qg RGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjEyODUyMzM4NzU7DQoJbXNv LWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjIwMjM3Nzk3NCAxNTY3 MTUzMTQ4IDY3ODk1Mjk5IDY3ODk1MzAxIDY3ODk1Mjk3IDY3ODk1Mjk5IDY3ODk1MzAxIDY3ODk1 Mjk3IDY3ODk1Mjk5IDY3ODk1MzAxO30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtc3Rh cnQtYXQ6MDsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ6LTsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBO ZXciOw0KCW1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KQGxpc3QgbDA6bGV2ZWwy DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0K CW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0K QGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6 V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpi dWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9w Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0x OC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3Qg bDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWls eToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTgu MHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBjbTt9 DQp1bA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5 XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4N CjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlv dXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286 c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJGUiIg bGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlJlLSw8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPlRoYW5rIHlvdSwgRXJpYy4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPlRoZXJlIGlzIGEgbWlzdW5kZXJzdGFuZGluZyBoZXJlLiBUaGUgZG9j dW1lbnQgZG9lcyBub3QgY2xhaW0gRENzIGFyZSBzYWZlIGFuZCBzZWN1cmUgZW52aXJvbm1lbnRz LiBXaGF0IGl0IHNheXMgaXMgdGhhdCB0aGUgTlNIIHNwZWNpZmljYXRpb24gaXMgc2NvcGVkIHRv DQogYmUgZGVwbG95ZWQgaW4gYSBzaW5nbGUgYWRtaW5pc3RyYXRpdmUgZG9tYWluIHdpdGggbWVh c3VyZXMgdG8sIGUuZy4sOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0 UGFyYWdyYXBoIiBzdHlsZT0idGV4dC1pbmRlbnQ6LTE4LjBwdDttc28tbGlzdDpsMCBsZXZlbDEg bGZvMSI+PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj4tPHNwYW4gc3R5bGU9ImZvbnQ6Ny4w cHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bh bj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6Ymxh Y2siPlByb3RlY3QgYWdhaW5zdCBzcG9vZmVkIGRhdGE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQ7bXNv LWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+LTxzcGFu IHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5i c3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj5MZWFraW5nIGRhdGEgb3V0c2lkZSBhIGRvbWFpbjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0idGV4dC1p bmRlbnQ6LTE4LjBwdDttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+PCFbaWYgIXN1cHBvcnRMaXN0 c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48c3BhbiBzdHlsZT0ibXNvLWxp c3Q6SWdub3JlIj4tPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlm XT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkRldGVjdCBhbmQgcHJldmVudCBp bmRlZmluaXRlIGZvcndhcmRpbmcgbG9vcHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+QSBzaW5nbGUgYWRtaW5pc3RyYXRpdmUgZG9tYWluIGlzIG5v dCBuZWNlc3NhcmlseSBhIHNlY3VyZSBvciBhIHNhZmUgb25lLiBUaGF04oCZcyBldmlkZW50LiBB dHRhY2tzIGZyb20gd2l0aGluIGFuIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBhcmUgcG9zc2libGUg d2l0aCBvcg0KIHdpdGhvdXQgTlNILjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7O2NvbG9yOmJsYWNrIj5J4oCZbSByZWl0ZXJhdGluZyBteSBxdWVzdGlvbjogd2hhdCBzcGVj aWZpYyBhdHRhY2tzIGJ1aWx0LWluL21hbmRhdG9yeSBpbnRlZ3JpdHkgbWVjaGFuaXNtcyB3aWxs IHNvbHZlIGZvciB0aGUgcGFydGljdWxhciBjYXNlIG9mIE5TSD8gVGhhbmsgeW91LjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5DaGVlcnMsPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7O2NvbG9yOmJsYWNrIj5NZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk IGJsdWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4w cHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDsiPkRlJm5ic3A7Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDsiPiBFcmljIFJlc2NvcmxhIFttYWlsdG86ZWtyQHJ0Zm0uY29tXQ0KPGJyPg0KPGI+RW52b3nD qSZuYnNwOzo8L2I+IHZlbmRyZWRpIDIwIG9jdG9icmUgMjAxNyAxNTo1Njxicj4NCjxiPsOAJm5i c3A7OjwvYj4gQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTjxicj4NCjxiPkNjJm5ic3A7OjwvYj4g UGF1bCBRdWlubiAocGF1bHEpOyBBbGlhIEF0bGFzOyBLYXRobGVlbiBNb3JpYXJ0eTsgc2ZjQGll dGYub3JnPGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBSZTogW3NmY10gTlNIIERJU0NVU1MgU3Rh dHVzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pkl0J3MgZXhwbGFpbmVkIGluIGRldGFpbCBpbiBteSBESVNDVVNTOiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+JnF1b3Q7MS4gVGhlIGFzc3VtcHRp b24gdGhhdCB0aGUgZGF0YWNlbnRlciBpcyBhIHNlY3VyZSBlbnZpcm9ubWVudCBpcyBub3QgYTxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5yZWFzb25hYmxlIG9uZS4gQXMg S2F0aGxlZW4gYW5kIEFkYW0gYm90aCBvYnNlcnZlciwgZGF0YWNlbnRlcjxvOnA+PC9vOnA+PC9z cGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+YnJlYWNoZXMgYXJlIGNvbW1vbiBhbmQgdGhhdCBp cyB3aHkgcGVvcGxlIGFyZSBtb3ZpbmcgdG93YXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0K PHByZT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90OyI+ZW5jcnlwdGlvbiBpbnNpZGUgdGhlIGRhdGEgY2VudGVyLiBJIHNlZSB0 aGF0IHRoaXMgZHJhZnQgaGFzIHRleHQ8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPmNsYWltaW5nIHRoYXQgdGhpcyBpcyBvbmx5IHRvIGJlIGRlcGxveWVkIGluIHNhZmUg ZW52aXJvbm1lbnRzLCBidXQgd2U8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDsiPmtub3cgdGhhdCB0ZWNobm9sb2dpZXMgbGlrZSB0aGlzIGdldCBkZXBsb3llZCBvdXRzaWRl IHRoZSBsb2NhdGlvbnM8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPmZv ciB3aGljaCB3ZSBjbGFpbSB0aGV5IGFyZSB0byBiZSBkZXBsb3llZCwgYW5kIHRoZXJlJ3Mgbm90 aGluZyBoZXJlPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij50byBzdG9w IHRoYXQuIE1vcmVvdmVyLCB0aGUgd2hvbGUgdHJlbmQgdG93YXJkcyBjbG91ZCBjb21wdXRpbmcg cHVzaGVzPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij51cyBhd2F5IGZy b20gZGVzaWducyBpbiB3aGljaCB5b3UgY2FuIHNhZmVseSB0YWxrIGFib3V0IHNpbmdsZSBzZWN1 cmU8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPnpvbmVzLiZxdW90Ozxv OnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPHBy ZT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+LUVrcjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48bzpwPiZuYnNw OzwvbzpwPjwvcHJlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+T24gRnJpLCBPY3QgMjAsIDIwMTcgYXQgNjo1MSBBTSwgJmx0Ozxh IGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIiB0YXJnZXQ9Il9ibGFu ayI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+ PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9y OmJsYWNrIj5EZWFyIEVyaWMsDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+Q2FuIHlvdSBwbGVhc2UgY2xhcmlmeSB0aGlzIHBvaW50OiDigJxSYXRoZXIgaXQncyBh Ym91dCB0aGUgbGV2ZWwgb2YgdHJ1c3QgdG8gYmUgcGxhY2VkIGluIHRoZSBuZXR3b3JraW5nDQog cGF0aCB0aHJvdWdoIHdoaWNoIHRoYXQgZGF0YSBmbG93cy7igJ0/IDwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9y OmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+U29ycnkgaWYgeW91IGhhdmUg YWxyZWFkeSBleHBsYWluZWQgaXQgdG8gdGhlIGVkaXRvcnMsIGJ1dCBhcyBhIFdHIHBhcnRpY2lw YW50IEkgZG9u4oCZdCBoYXZlIGFjY2Vzcw0KIHRvIGEgcmVjb3JkIG9mIHN1Y2ggZGlzY3Vzc2lv bi4gPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij5UaGFuayB5b3UuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj5DaGVlcnMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk1lZDwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAw Y20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkRlJm5ic3A7Ojwvc3Bh bj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFo b21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBFcmljIFJlc2NvcmxhIFttYWlsdG86 PGEgaHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmVrckBydGZtLmNv bTwvYT5dDQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gdmVuZHJlZGkgMjAgb2N0b2JyZSAy MDE3IDE1OjQ1PGJyPg0KPGI+w4AmbmJzcDs6PC9iPiBQYXVsIFF1aW5uIChwYXVscSk8YnI+DQo8 Yj5DYyZuYnNwOzo8L2I+IEFsaWEgQXRsYXM7IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IEth dGhsZWVuIE1vcmlhcnR5OyA8YSBocmVmPSJtYWlsdG86c2ZjQGlldGYub3JnIiB0YXJnZXQ9Il9i bGFuayI+DQpzZmNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBSZTogW3Nm Y10gTlNIIERJU0NVU1MgU3RhdHVzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBGcmksIE9jdCAyMCwgMjAxNyBhdCA2OjMx IEFNLCBQYXVsIFF1aW5uIChwYXVscSkgJmx0OzxhIGhyZWY9Im1haWx0bzpwYXVscUBjaXNjby5j b20iIHRhcmdldD0iX2JsYW5rIj5wYXVscUBjaXNjby5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5IaSBBbGlhLA0K PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk9uIE9j dCAxOSwgMjAxNywgYXQgMjo0OSBQTSwgQWxpYSBBdGxhcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFr YXRsYXNAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+YWthdGxhc0BnbWFpbC5jb208L2E+Jmd0 OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij5IaSBNZWQsDQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj5TaW5jZSB5b3UgZGlyZWN0ZWQgdGhpcyBhdCBtZSwgdGhlcmUgYXJlIGVmZm9ydHMgdG8g aGF2ZSBzb21lIGRpc2N1c3Npb25zIGFuZCB1bmRlcnN0YW5kIGJldHRlciB0aGUgcGFydGljdWxh ciB0aHJlYXRzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj5DdXJyZW50bHksIHRoZXJlIGlzIG5vIHRyYW5zcG9ydCB3aXRoIGludGVncml0eSBw cm90ZWN0aW9uIHRoYXQgaXMgZXZlbiBhIFNIT1VMRCB0byBpbXBsZW1lbnQsIG11Y2ggbGVzcyBh IE1VU1QuJm5ic3A7IFRoZXJlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPmlzIG5vIGNvbnRyb2wtcGxhbmUgZGVmaW5lZCAoYmV5b25kIHRoZSBC R1Agd29yaykgdGhhdCBkZXNjcmliZXMgZGV0ZWN0aW5nIGlzc3Vlcy4mbmJzcDsgVGhlcmUgaXMg bm8gT0FNIGRlZmluZWQgYW5kIGFkb3B0ZWQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+YnkgdGhlIFdHIHRoYXQgZGV0ZWN0cyBvciBoYW5kbGVz IHRoZXNlIHR5cGVzIG9mIGF0dGFja3MuIEkgc2VlIHRoZSBzdHJ1Y3R1cmUgdGhhdCB5b3UgYXJl IHByZXN1bWluZywgYnV0IG5vbmUgb2YgdGhlc2UgYXJlPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPmF2YWlsYWJsZSBhcyBub3JtYXRpdmUgcmVm ZXJlbmNlcyB0byBOU0ggdG9kYXkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk9BTSBkb2VzIG5vdCBh ZGRyZXNzIHRoZSBzZWN1cml0eSBjb25jZXJuIGFyb3VuZCBpbnRlZ3JpdHkgYW5kIGRldmljZXMu Jm5ic3A7IElmIHlvdSBhbmQgdGhlIFdHIGJlbGlldmUgT0FNIGlzIHRoZSBuZXh0IOKAnHRvIGRv 4oCdIGZvciB0aGUgV0csIHRoYXTigJlzIGZpbmUsIGJ1dCBpdOKAmXMgb3J0aG9nb25hbCB0byB0 aGUgc2VjdXJpdHkNCiBwb2ludHMgcmFpc2VkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdp bi1ib3R0b206MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SSBoYWQgcmVjb21tZW5kZWQgaGF2aW5nIGEgZm9j dXNlZCBpbnRlcmltIG1lZXRpbmcgdG8gbWFrZSBzdXJlIHRoYXQgZXZlcnlvbmUgY29uY2VybmVk IHVuZGVyc3Rvb2QgdGhlIGlzc3VlcyBhbmQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+d29ya2VkIHRocm91Z2ggdGhlIHRocmVhdCBhbmFseXNp cyBhbmQgcG9zc2libGUgc29sdXRpb25zIHRvZ2V0aGVyLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkxldOKA mXMgcGxlYXNlIG5vdCBjb25mbGF0ZSB0aGUgb25nb2luZyBzZWN1cml0eSBkaXNjdXNzaW9uIHdp dGggT0FNLCBvciBvdGhlciB0b3BpY3MuJm5ic3A7IFRoZSBzZWN1cml0eSByZWFsaXR5LCBhcyB5 b3UgcG9pbnRlZCBvdXQgaW4geW91ciBlbWFpbCB0byBFcmljLCBpcyB0aGF0IHdlLCBhcyBhIGNv bW11bml0eQ0KIGFuZCBpbmR1c3RyeSwgYWNjZXB0IGEgbGV2ZWwgb2YgdHJ1c3Qgd3J0IG5ldHdv cmsgZGV2aWNlcy4gPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkkgZG9uJ3QgYWN0 dWFsbHkgdGhpbmsgdGhhdCdzIHRoZSBwb2ludCBvZiBjb250ZW50aW9uLCBhdCBsZWFzdCBmcm9t IG15IHBlcnNwZWN0aXZlLiBSYXRoZXIgaXQncyBhYm91dCB0aGUgbGV2ZWwgb2YgdHJ1c3QgdG8g YmUgcGxhY2VkIGluIHRoZSBuZXR3b3JraW5nIHBhdGggdGhyb3VnaCB3aGljaCB0aGF0DQogZGF0 YSBmbG93cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPi1Fa3I8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90 ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRk aW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDtUaGUgb25nb2lu ZyBlZGl0cyBhbmQgZGlhbG9ndWUgd2l0aCBLYXRobGVlbiBhbmQgRXJpYyBhcmUgd29ya2luZyB0 aHJvdWdoIHRoZWlyIGNvbmNlcm5zLiZuYnNwOyBBbiBpbnRlcmltIHRvIHRhbGsgYWJvdXQgbmV4 dCBTRkMgc3RlcHMsIHBvc3QgTlNILCBpcyBhIGRpZmZlcmVudCBtYXR0ZXIuICZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+QXQgdGhpcyBwb2ludCwgY2xlYXJseSB0aGUgbW9zdCB0aGF0IGNvdWxkIGhh cHBlbiBpcyBhPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPnZpcnR1YWwgaW50ZXJpbS4mbmJzcDsgVGhlcmUgYXJlIHNvbWUgYmFja2dyb3VuZCBk aXNjdXNzaW9ucyBnb2luZyBvbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPkkgZG8gbm90IHdhbnQgdG8gYXNzdW1lIHdoYXQgbWl4dHVy ZSB3aWxsIGJlIGFjY2VwdGFibGUgdG8gaGFuZGxlIHRoZSBzZWN1cml0eSBjb25jZXJucyBleHBy ZXNzZWQgYnkgS2F0aGxlZW4gYW5kIEVyaWM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+YW5kIHN1cHBvcnRlZCBieSBhIG51bWJlciBvZiBvdGhl ciBBRHMuPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ SSBkbyBncmVhdGx5IGFwcHJlY2lhdGUgeW91ciBhdHRlbnRpb24gYW5kIGVmZm9ydHMgdG8gY2xh cmlmeSBhbmQgdHJ5IHRvIG1vdmUgdGhpcyB3b3JrIGZvcndhcmQuIEkgaGF2ZSBiZWVuIGV4cHJl c3NpbmcgY29uY2VybnM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+YWJvdXQgdGhlIHNlY3VyaXR5IGFzcGVjdHMgb2YgdGhpcyB3b3JrIHNpbmNl IFJGQyA3NjY1IHdlbnQgdGhyb3VnaCB0aGUgcHVibGljYXRpb24gcHJvY2VzcyAtIGFuZCBzdHJv bmdseSBlbmNvdXJhZ2luZyBzZXJpb3VzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPldHIGZvY3VzIHRvIHByZXZlbnQgcHJlY2lzZWx5IHdoYXQg aGFzIG5vdyBoYXBwZW5lZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkFsaWE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+T24gVGh1LCBPY3QgMTksIDIwMTcgYXQgNDo0OSBB TSwgJmx0OzxhIGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIiB0YXJn ZXQ9Il9ibGFuayI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxv OnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij5IaSBBbGlhLA0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkNhbiB5b3UgcGxlYXNlIHNoYXJlIHdp dGggdXMgdGhlIGN1cnJlbnQgc3RhdHVzIG9mIHRoZSBkb2N1bWVudCBhbmQgdGhlIGxpc3Qgb2Yg cGVuZGluZyBibG9ja2luZyBwb2ludHM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5J IHdlbnQgdGhyb3VnaCBhbGwgcHVibGljIGVtYWlsIGV4Y2hhbmdlcywgZXNwZWNpYWxseSB0aGUg b25lcyByZWxhdGVkIHRvIHNlY3VyaXR5LCBidXQgaXQgaXMgbm90IHRoYXQgZWFzeQ0KIHRvIHVu ZGVyc3RhbmQgd2hhdCBhcmUgdGhlIHJlbWFpbmluZyBpc3N1ZXMgdGhhdCBuZWVkIGZpeGVzLjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+SW4gcGFydGljdWxhciwgaXMgdGhlcmUgYSBj b25jZXJuIHdpdGggYXNzdW1pbmcgdGhlIGN1cnJlbnQgTlNIIHRocmVhdCBtb2RlbD88L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0tNzM3MDY3NTI3 Mjg1MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1 bXNvbGlzdHBhcmFncmFwaCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjEuPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPk5TSCBpcyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGluZHVjZWQg Ynkgbm9kZXMgdGhhdCBpbmplY3QgKHNwb29mZWQpIE5TSCBiZWZvcmUgZW50ZXJpbmcgYW4gU0ZD LWVuYWJsZWQgZG9tYWluLiBJbmRlZWQsIFNGQyBpbmdyZXNzIG5vZGVzIE1VU1QgZGlzY2FyZCBw YWNrZXRzIGNhcnJ5aW5nIE5TSC48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0ibS03 MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5 Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Mi48L3Nw YW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+TlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGF0dGFja3Mg ZnJvbSB3aXRoaW4gdGhlIFNGQy1lbmFibGVkIGRvbWFpbiB0byBpbmplY3Qgbm9uLWF1dGhvcml6 ZWQgY29udGV4dCBoZWFkZXJzLiBGcm9tIGEgc2VydmljZSBwZXJzcGVjdGl2ZSwgdGhlIGd1YXJk IGlzIHRoZSBDUCB3aGljaCBpcyByZXNwb25zaWJsZSBmb3INCiBpbnN0cnVjdGluZyB0aGUgU0ZD LWF3YXJlIG5vZGVzIGFib3V0IHRoZSBtYW5kYXRvcnktdG8tcHJvY2VzcyBhbmQgb3B0aW9uYWwt dG8tcHJvY2VzcyBjb250ZXh0IGhlYWRlcnMuIEZ1cnRoZXJtb3JlLCB3aGF0ZXZlciB0aGUgb3Jp Z2luIG9mIGEgc3VwcGxpZWQgY29udGV4dCBoZWFkZXIsIHRoZSBsYXN0IFNGRiBvZiBhIGNoYWlu IChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNIIGJlZm9yZSBmb3J3YXJkaW5n IHVwc3RyZWFtLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtLTczNzA2NzUyNzI4 NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1z b2xpc3RwYXJhZ3JhcGgiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4zLjwvc3Bhbj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij5OU0ggaXMgc2VjdXJlIGFnYWluc3QgbGVha2luZyBwcml2YWN5IGlu Zm9ybWF0aW9uIG91dHNpZGUgYW4gU0ZDIGVuYWJsZWQgZG9tYWluLiBUaGUgbGFzdCBTRkYgb2Yg YSBjaGFpbiAoYW5kIGVncmVzcyBub2RlcykgTVVTVCByZW1vdmUgdGhlIE5TSCBiZWZvcmUgZm9y d2FyZGluZyB1cHN0cmVhbS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0ibS03Mzcw Njc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3 NTg2NzVtc29saXN0cGFyYWdyYXBoIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+NC48L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9zcGFu PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+TlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGluZGVmaW5pdGUg U0YvU0ZGIGxvb3BzIGJ5IG1lYW5zIG9mIFNJIGFuZCBUVEwgZmllbGRzLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJtLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAx MjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiPg0KPHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij41Ljwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5Db250cm9s IHBsYW5lIHNwZWNpZmljIHRocmVhdHMgYXJlIG91dCBvZiBzY29wZSwgYnV0IHRoZSBkb2N1bWVu dCBjaXRlcyBJLUQuaWV0Zi1zZmMtY29udHJvbC1wbGFuZSBmb3IgdGhlIGV4cGVjdGVkIGJlaGF2 aW9yIHdoZW4gaW5zdHJ1Y3RpbmcgU0ZDIG5vZGVzLiBCVFcsIHRoZSBzZWNkaXIgcmV2aWV3IG9m IHRoZQ0KIENQIHJlcXVpcmVtZW50cyBjYW4gYmUgcmV0cmlldmVkIGhlcmUgKDxhIGhyZWY9Imh0 dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL3Jldmlldy1pZXRmLXNmYy1jb250cm9sLXBs YW5lLTAyLXNlY2Rpci1lYXJseS1tZWFkb3dzLTIwMTUtMTItMTAvIiB0YXJnZXQ9Il9ibGFuayI+ aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvcmV2aWV3LWlldGYtc2ZjLWNvbnRyb2wt cGxhbmUtMDItc2VjZGlyLWVhcmx5LW1lYWRvd3MtMjAxNS0xMi0xMC88L2E+KS4NCjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0 MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiPg0K PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij42Ljwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5O U0ggZG9lcyBub3Qgc2hhcmUgcHJpdmFjeSBkYXRhIHdpdGggbm9uLWF1dGhvcml6ZWQgcGFydGll cy4gSW5kZWVkLCBkYXRhIGNhcnJpZWQgaW4gY29udGV4dCBoZWFkZXJzIGFyZSBkZXJpdmVkIGZy b20gdGhlIG9yaWdpbmFsIHBhY2tldCAoZS5nLiwgc291cmNlIElQIGFkZHJlc3MpIG9yIGFyZSBh bHJlYWR5IGtub3duDQogdG8gdGhlIG9wZXJhdG9yIChlLmcuLCBzdWJzY3JpYmVyIGlkZW50aWZp ZXIsIHBvbGljeSBpZGVudGlmaWVyLCBzZXJ2aWNlIGlkZW50aWZpZXIpLiBUaGUgY29udGV4dCBp bmZvcm1hdGlvbiBpcyBzaGFyZWQgd2l0aCBub2RlcyB0aGF0IGFyZSB3aXRoaW4gdGhlIHNhbWUg YWRtaW5pc3RyYXRpdmUgZG9tYWluLiAmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0ibS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEz Njk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Ny48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZu YnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+TGlrZSBvdGhlciBjb21tdW5pY2F0 aW9uIHByb3RvY29scywgYXR0YWNrcyBmcm9tIHdpdGhpbiB0aGUgbmV0d29yayBhcmUgcG9zc2li bGUsIGJ1dCB0aG9zZSBhcmUgc29mdGVuIGJ5IHJlbHlpbmcgb24gdGhlIHByb2NlZHVyZXMgcHV0 IGluIHBsYWNlIGJ5IG9wZXJhdG9ycyBmb3IgdGVzdGluZyBhbmQgdmFsaWRhdGluZw0KIG5vZGVz L2ZlYXR1cmVzIGJlZm9yZSBhY3R1YWwgYWN0aXZhdGlvbi4gTlNIIGRvZXMgbm90IHByb3ZpZGUg YSBidWlsdC1pbiBmZWF0dXJlIHRvIHByZXZlbnQgbWlzYmVoYXZpbmcgbm9kZXMsIGJ1dCByZWNv bW1lbmRzIHRvIHJlbHkgb24gdGhlIHNlY3VyaXR5IGZlYXR1cmVzIHByb3ZpZGVkIGJ5IHRoZSB1 bmRlcmx5aW5nIHRyYW5zcG9ydCBlbmNhcHN1bGF0aW9uIHNjaGVtZXMuDQo8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPkxldOKAmXMgbm93IGZvY3VzIG9uIHRoZSB0eXBpY2FsIOKAnGF0 dGFja3PigJ0gdGhhdCBjYW4gYmUgaXNzdWVkIGZyb20gd2l0aGluIHRoZSBuZXR3b3JrOg0KPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0tNzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAz OTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFw aCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjEuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPkEgbWlzYmVoYXZpbmcgbm9kZSByZWRpcmVjdCB0aGUgdHJhZmZpYyB0byBub24tYXV0aG9y aXplZCBub2RlcyBvdXRzaWRlIGEgZG9tYWluOiBUaGlzIGlzIG5vdCBOU0gtc3BlY2lmaWMuPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0tNzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAz OTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFw aCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjIuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPkEgbWlzYmVoYXZpbmcgU0ZDLXVud2FyZSBub2RlIGFsdGVycyB0aGUgY29udGVudCBvZiBh IHBhY2tldDogVGhpcyBpcyBub3QgTlNILXNwZWNpZmljLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJtLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWls LW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiPg0KPHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4zLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBw dCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5BIG1pc2JlaGF2aW5nIFNG Qy1hd2FyZSBub2RlIGFsdGVycyB0aGUgY29udGVudCBvZiBOU0g6PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Im0tNzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMx Z21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjcyLjBwdCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBw dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPmkuPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkl0IHJlbW92ZXMgdGhlIE5TSCBo ZWFkZXIgZnJvbSBhbGwgcGFja2V0cyBpdCBzZWVzOiBUaGlzIHdpbGwgaW1wbHkgdGhhdCB0aGUg cGFja2V0cywgdGhlIG1pc2JlaGF2aW5nIG5vZGUgaW50ZXJjZXB0cywgd2lsbCBiZSBmb3J3YXJk ZWQgdXBzdHJlYW0gd2l0aG91dCBpbnZva2luZyB0aGUgcmVxdWlyZWQgU0ZzDQogKHdoaWNoIG1h eSBiZSBzZWVuIGFzIGEgZmVhdHVyZSwgbm90IGEgYnVnIGlmIG9uZSBkaXNsaWtlcyDigJxtaWRk bGVib3hlc+KAnSA6KSkuIE1vcmUgc2VyaW91c2x5LCB0aGUgT0FNIE5TSCBmZWF0dXJlIHdpbGwg YWxsb3cgYW4gb3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRoZXIgTlNIIHBhY2tldHMgYXJlIHRyYXZl bGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMgb2YgdGhhdCBkb21haW4u IFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHdpbGwNCiBoZWxwIGRldGVjdGluZyB0aGUgbWlzYmVoYXZp bmcgbm9kZS4gPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0tNzM3MDY3NTI3Mjg1 MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNv bGlzdHBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+DQo8c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PmlpLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5JdCBt b2RpZmllcyB0aGUgY29udGVudCBvZiBTUEk6IFRoaXMgd2lsbCBpbXBseSB0aGF0IHRoZXNlIHBh Y2tldHMgd2lsbCBiZSBmb3J3YXJkZWQgb3ZlciBhIHdyb25nIHBhdGguIEFnYWluLCBydW5uaW5n IE9BTSBOU0ggd2lsbCBhbGxvdyB0aGUgb3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRoZXIgYSBwYWNr ZXQgaXMNCiB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5zdHJ1Y3Rpb25zLiBS dW5uaW5nIHRoYXQgZmVhdHVyZSByZWd1bGFybHkgd2lsbCBoZWxwIGlkZW50aWZ5aW5nIHRoZSBt aXNiZWhhdmluZyBub2RlIGFuZCB3aGV0aGVyIHRoZSBTRkMgY29uZmlndXJhdGlvbiBvZiBhIGRv bWFpbiBpcyBhbGlnbmVkIHdpdGggdGhlIGV4cGVjdGVkIGJlaGF2aW9yLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJtLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAx MjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiIHN0eWxlPSJt YXJnaW4tbGVmdDo3Mi4wcHQiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 Ny4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5paWkuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPkl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNJL1RUTDogVGhp cyB3aWxsIGluY3JlYXNlIHRoZSBhdXRob3JpemVkIG1heGltdW0gU0ZGL1NGIGhvcHMuIE5vdCBz dXJlIGlmIHRoZXJlIGlzIGEgc2VjdXJpdHkgcHJvYmxlbSBvdXQgdGhlcmUuDQo8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0ibS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2 MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIiBzdHls ZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+aXYuPC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPlRoZSBtaXNiZWhhdmluZyBub2RlIGlz IGEgY2xhc3NpZmllcjogVGhlIGltcGxpY2F0aW9ucyB3aWxsIGJlIHNldmVyZSBmcm9tIGEgc2Vy dmljZSBzdGFuZHBvaW50LiBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0byBk ZXRlY3Qgc3VjaCBjYXNlLiAmbmJzcDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0ibS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEz Njk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIu MHB0Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+di48L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+VGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMgYW4gU0ZG OiBFeGFtcGxlcyBvZiBtaXNiZWhhdmlvcnMgYXJlOiBzdHJpcCBOU0gsIGZvcndhcmQgdG8gYSBu b24tYXV0aG9yaXplZCBTRiwgcmVkaXJlY3QgdGhlIHRyYWZmaWMgdG8gYSBub24tYXV0aG9yaXpl ZCBub2RlcywgZXRjLiBMaWtlIGZvciB0aGUgY2xhc3NpZmllcg0KIGNhc2UsIE5TSCByZWxpZXMg b24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNoIGNhc2UuICZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ QXJlIHRoZXJlIHNwZWNpZmljIGF0dGFja3MgdGhhdCBhcmUgbm90IGxpc3RlZCBhYm92ZSBhbmQg dGhhdCBuZWVkIG1vcmUgYXR0ZW50aW9uIGZyb20gdGhlIFdHPzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+VGhhbmsgeW91Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Q2hl ZXJzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij5NZWQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+ DQpzZmMgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOnNmY0BpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPnNmY0BpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NmYyIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2ZjPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jv ZHk+DQo8L2h0bWw+DQo= --_000_787AE7BB302AE849A7480A190F8B93300A057BFBOPEXCLILMA3corp_-- From nobody Fri Oct 20 07:18:39 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80AF413339A for ; Fri, 20 Oct 2017 07:18:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.519 X-Spam-Level: X-Spam-Status: No, score=-14.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hc7oSpX8oM62 for ; Fri, 20 Oct 2017 07:18:36 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AAA96132D18 for ; Fri, 20 Oct 2017 07:18:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=53694; q=dns/txt; s=iport; t=1508509115; x=1509718715; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=rlxUTeL3DJKUa4Y/3c2zWUG+E/u9MG+SI8v2CPr3xjw=; b=aGv53KDr56juLrQxU4uUHCe5LPGTGG/vIfcs55wduAfixPz5HrOorV5+ yjPaxdru3bler3/IGCRdLnrCBeKgwaib4cDyeWvNtTpzADi8RHbyKlUv9 iMvvcXF68LJs6ASHkBVtfzJP6mrE9wrw1trI7H234YU+DwrZNuo/G58xN U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CrAAB9BepZ/4gNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9wZG4nB4Nzih+PP4pEjW0QgX4DChgBDIUWAhqEIT8YAQIBAQE?= =?us-ascii?q?BAQEBayiFHgIBAwEBIUQHCxACAQgOKgEGAwICAh8GCxQRAgQOBRQHiSFMAxUQq?= =?us-ascii?q?hGCJ4c7DYNZAQEBAQEBAQEBAQEBAQEBAQEBAQEBGAWDLoIHgVCBaSmBdIENgl6?= =?us-ascii?q?BawkBEgEJgyovgjIFh02CPI5miDQ8Aodhh0VQhHmCFYV5ixGNCohDAhEZAYE4A?= =?us-ascii?q?R84gQNYehVJLQGCNoIjgjx2iB4NGAeBBYERAQEB?= X-IronPort-AV: E=Sophos; i="5.43,405,1503360000"; d="scan'208,217"; a="19195160" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Oct 2017 14:18:25 +0000 Received: from XCH-RTP-009.cisco.com (xch-rtp-009.cisco.com [64.101.220.149]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id v9KEIPmj031444 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 20 Oct 2017 14:18:25 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-009.cisco.com (64.101.220.149) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 20 Oct 2017 10:18:24 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Fri, 20 Oct 2017 10:18:24 -0400 From: "Carlos Pignataro (cpignata)" To: Eric Rescorla CC: "Paul Quinn (paulq)" , Kathleen Moriarty , Med Boucadair , "sfc@ietf.org" , Alia Atlas Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wAdXO4AACcpgAAAAH8cgAAAiuGAAAA/eoAAAFsMAA== Date: Fri, 20 Oct 2017 14:18:24 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.116.133] Content-Type: multipart/alternative; boundary="_000_C614C3FEAFDC417EA8CE5E47C016DA4Dciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:18:38 -0000 --_000_C614C3FEAFDC417EA8CE5E47C016DA4Dciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpPbiBPY3QgMjAsIDIwMTcsIGF0IDEwOjA4IEFNLCBFcmljIFJlc2NvcmxhIDxla3JAcnRmbS5j b208bWFpbHRvOmVrckBydGZtLmNvbT4+IHdyb3RlOg0KDQoNCk9uIEZyaSwgT2N0IDIwLCAyMDE3 IGF0IDc6MDEgQU0sIENhcmxvcyBQaWduYXRhcm8gKGNwaWduYXRhKSA8Y3BpZ25hdGFAY2lzY28u Y29tPG1haWx0bzpjcGlnbmF0YUBjaXNjby5jb20+PiB3cm90ZToNCkVyaWMsDQoNCk9uIE9jdCAy MCwgMjAxNywgYXQgOTo0NSBBTSwgRXJpYyBSZXNjb3JsYSA8ZWtyQHJ0Zm0uY29tPG1haWx0bzpl a3JAcnRmbS5jb20+PiB3cm90ZToNCg0KDQoNCk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0IDY6MzEg QU0sIFBhdWwgUXVpbm4gKHBhdWxxKSA8cGF1bHFAY2lzY28uY29tPG1haWx0bzpwYXVscUBjaXNj by5jb20+PiB3cm90ZToNCkhpIEFsaWEsDQoNCg0KDQpPbiBPY3QgMTksIDIwMTcsIGF0IDI6NDkg UE0sIEFsaWEgQXRsYXMgPGFrYXRsYXNAZ21haWwuY29tPG1haWx0bzpha2F0bGFzQGdtYWlsLmNv bT4+IHdyb3RlOg0KDQpIaSBNZWQsDQoNClNpbmNlIHlvdSBkaXJlY3RlZCB0aGlzIGF0IG1lLCB0 aGVyZSBhcmUgZWZmb3J0cyB0byBoYXZlIHNvbWUgZGlzY3Vzc2lvbnMgYW5kIHVuZGVyc3RhbmQg YmV0dGVyIHRoZSBwYXJ0aWN1bGFyIHRocmVhdHMuDQpDdXJyZW50bHksIHRoZXJlIGlzIG5vIHRy YW5zcG9ydCB3aXRoIGludGVncml0eSBwcm90ZWN0aW9uIHRoYXQgaXMgZXZlbiBhIFNIT1VMRCB0 byBpbXBsZW1lbnQsIG11Y2ggbGVzcyBhIE1VU1QuICBUaGVyZQ0KaXMgbm8gY29udHJvbC1wbGFu ZSBkZWZpbmVkIChiZXlvbmQgdGhlIEJHUCB3b3JrKSB0aGF0IGRlc2NyaWJlcyBkZXRlY3Rpbmcg aXNzdWVzLiAgVGhlcmUgaXMgbm8gT0FNIGRlZmluZWQgYW5kIGFkb3B0ZWQNCmJ5IHRoZSBXRyB0 aGF0IGRldGVjdHMgb3IgaGFuZGxlcyB0aGVzZSB0eXBlcyBvZiBhdHRhY2tzLiBJIHNlZSB0aGUg c3RydWN0dXJlIHRoYXQgeW91IGFyZSBwcmVzdW1pbmcsIGJ1dCBub25lIG9mIHRoZXNlIGFyZQ0K YXZhaWxhYmxlIGFzIG5vcm1hdGl2ZSByZWZlcmVuY2VzIHRvIE5TSCB0b2RheS4NCg0KDQpPQU0g ZG9lcyBub3QgYWRkcmVzcyB0aGUgc2VjdXJpdHkgY29uY2VybiBhcm91bmQgaW50ZWdyaXR5IGFu ZCBkZXZpY2VzLiAgSWYgeW91IGFuZCB0aGUgV0cgYmVsaWV2ZSBPQU0gaXMgdGhlIG5leHQg4oCc dG8gZG/igJ0gZm9yIHRoZSBXRywgdGhhdOKAmXMgZmluZSwgYnV0IGl04oCZcyBvcnRob2dvbmFs IHRvIHRoZSBzZWN1cml0eSBwb2ludHMgcmFpc2VkLg0KDQoNCkkgaGFkIHJlY29tbWVuZGVkIGhh dmluZyBhIGZvY3VzZWQgaW50ZXJpbSBtZWV0aW5nIHRvIG1ha2Ugc3VyZSB0aGF0IGV2ZXJ5b25l IGNvbmNlcm5lZCB1bmRlcnN0b29kIHRoZSBpc3N1ZXMgYW5kDQp3b3JrZWQgdGhyb3VnaCB0aGUg dGhyZWF0IGFuYWx5c2lzIGFuZCBwb3NzaWJsZSBzb2x1dGlvbnMgdG9nZXRoZXIuDQoNCkxldOKA mXMgcGxlYXNlIG5vdCBjb25mbGF0ZSB0aGUgb25nb2luZyBzZWN1cml0eSBkaXNjdXNzaW9uIHdp dGggT0FNLCBvciBvdGhlciB0b3BpY3MuICBUaGUgc2VjdXJpdHkgcmVhbGl0eSwgYXMgeW91IHBv aW50ZWQgb3V0IGluIHlvdXIgZW1haWwgdG8gRXJpYywgaXMgdGhhdCB3ZSwgYXMgYSBjb21tdW5p dHkgYW5kIGluZHVzdHJ5LCBhY2NlcHQgYSBsZXZlbCBvZiB0cnVzdCB3cnQgbmV0d29yayBkZXZp Y2VzLg0KDQpJIGRvbid0IGFjdHVhbGx5IHRoaW5rIHRoYXQncyB0aGUgcG9pbnQgb2YgY29udGVu dGlvbiwgYXQgbGVhc3QgZnJvbSBteSBwZXJzcGVjdGl2ZS4gUmF0aGVyIGl0J3MgYWJvdXQgdGhl IGxldmVsIG9mIHRydXN0IHRvIGJlIHBsYWNlZCBpbiB0aGUgbmV0d29ya2luZyBwYXRoIHRocm91 Z2ggd2hpY2ggdGhhdCBkYXRhIGZsb3dzLg0KDQoNClVuZGVyc3Rvb2QuIEhvdyBhYm91dCB0aGlz Pw0KDQogICAgICAgICAgICAgIFguMi4gIFRyYW5zcG9ydCBFbmNhcHN1bGF0aW9uIFNlY3VyaXR5 DQoNCiAgICAgICAgICAgICAgICAgICAgICAgIE5TSCBpcyBhbHdheXMgZW5jYXBzdWxhdGVkIGJ5 IGFuIG91dGVyIHRyYW5zcG9ydA0KICAgICAgICAgICAgICAgICAgICAgICAgZW5jYXBzdWxhdGlv biBhcyBkZXRhaWxlZCBpbiBTZWN0aW9uIDQgb2YgdGhpcw0KICAgICAgICAgICAgICAgICAgICAg ICAgc3BlY2lmaWNhdGlvbiwgYW5kIGFzIGRlcGljdGVkIGluIEZpZ3VyZSAxLiAgSWYgYW4gb3Bl cmF0b3INCiAgICAgICAgICAgICAgICAgICAgICAgIGRlZW1zIGNyeXB0b2dyYXBoaWMgaW50ZWdy aXR5IHByb3RlY3Rpb24gbmVjZXNzYXJ5IGR1ZSB0bw0KICAgICAgICAgICAgICAgICAgICAgICAg dGhlaXIgcmlzayBhbmFseXNpcywgdGhlbiBhbiBvdXRlciB0cmFuc3BvcnQgZW5jYXBzdWxhdGlv bg0KICAgICAgICAgICAgICAgICAgICAgICAgdGhhdCBwcm92aWRlcyBzdWNoIHByb3RlY3Rpb24g W1JGQzYwNzFdLCBzdWNoIGFzIElQc2VjLCBNVVNUDQogICAgICAgICAgICAgICAgICAgICAgICBi ZSB1c2VkLg0KDQpJIGNhbid0IHNwZWFrIGZvciBLYXRobGVlbiwgYnV0IEkgZG9uJ3QgcmVhbGx5 IHRoaW5rIHRoaXMgZ2V0cyB0aGUgam9iIGRvbmUuDQoNCkFzIGRlc2NyaWJlZCBpbiBSRkMgMzU1 MiAoaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzM1NTIjc2VjdGlvbi0zKSBvdXIgdGhy ZWF0IG1vZGVsIGlzIHRoYXQgdGhlIEludGVybmV0IGlzIHVudHJ1c3RlZC4NCg0KWWVzLiBKdXN0 IHRvIGNsYXJpZnksIHRob3VnaCwgTlNIIGlzIG5vdCBhbiBlbmQtdG8tZW5kIHByb3RvY29sLiBJ dCBkb2VzbuKAmXQg4oCcc3RhcnTigJ0gaW4gYSBob3N0IGFuZCDigJxlbmTigJ0gaW4gYSBob3N0 L3NlcnZlci4gSXTigJlzIGEgbmV0d29yay1jZW50cmljIGxpa2UgUHJvdmlzaW9uZWQgVmlydHVh bCBQcml2YXRlIE5ldHdvcmtzLCBUcmFmZmljIEVuZ2luZWVyaW5nLCBNUExTLg0KDQpUaGF0IG1l YW5zIHdlIHNob3VsZCBiZSBkZXNpZ25pbmcgcHJvdG9jb2xzIHRoYXQgYXJlIHNhZmUgdG8gb3Bl cmF0ZSBpbiB0aGF0IGVudmlyb25tZW50LCB3aGljaCBpbiB0aGlzIGNhc2UgbWVhbnMgdGhhdCB0 aGUgcHJvdG9jb2wgc2hvdWxkIGVpdGhlciAoYSkgY29tZSB3aXRoIGEgYnVpbHQtaW4gc2VjdXJp dHkgbWVjaGFuaXNtIG9yIChiKSBiZSBydW4gb3ZlciBhIHNlY3VyZSB0cmFuc3BvcnQuIEkgZG9u J3QgdGhpbmsgdGVsbGluZyBvcGVyYXRvcnMgInlvdSBmaWd1cmUgaXQgb3V0IiByZWZsZWN0cyBi ZXN0IGN1cnJlbnQgcHJhY3RpY2UuDQoNCg0KQnV04oCmIHdlIGFyZSBzYXlpbmcg4oCccnVuIG92 ZXIgYSBzZWN1cmUgdHJhbnNwb3J04oCdLg0KDQpUaGlzIHdhcyBiZXN0IGNhcHR1cmVkIGluIEFs aWHigJlzIG1lc3NhZ2UgdG8geW91LCBjb3BpZWQgb24gdGhpcyBsaXN0Og0KDQoiVGhlcmUgYXJl IG5vIGVuY2Fwc3VsYXRpb25zIGZyb20gdGhlIFJvdXRpbmcgQXJlYSB0aGF0IHJlcXVpcmUgaW50 ZWdyaXR5IHByb3RlY3Rpb24gdGhhdCBJIGFtIGF3YXJlIG9mOw0Kd2hlbiBwcml2YWN5IGlzIHJl cXVpcmVkIElQc2VjIG9yIE1BQyBzZWMgYXJlIHVzZWQu4oCdDQoNClRoYW5rcyBmb3IgZW5nYWdp bmcgaW4gZGlhbG9ndWUgbm93LCBjYW4geW91IGNsYXJpZnk/DQoNCkNhcmxvcy4NCg0KLUVrcg0K DQoNCg0K4oCUIENhcmxvcy4NCg0KLUVrcg0KDQoNCiBUaGUgb25nb2luZyBlZGl0cyBhbmQgZGlh bG9ndWUgd2l0aCBLYXRobGVlbiBhbmQgRXJpYyBhcmUgd29ya2luZyB0aHJvdWdoIHRoZWlyIGNv bmNlcm5zLiAgQW4gaW50ZXJpbSB0byB0YWxrIGFib3V0IG5leHQgU0ZDIHN0ZXBzLCBwb3N0IE5T SCwgaXMgYSBkaWZmZXJlbnQgbWF0dGVyLg0KDQoNCg0KQXQgdGhpcyBwb2ludCwgY2xlYXJseSB0 aGUgbW9zdCB0aGF0IGNvdWxkIGhhcHBlbiBpcyBhDQp2aXJ0dWFsIGludGVyaW0uICBUaGVyZSBh cmUgc29tZSBiYWNrZ3JvdW5kIGRpc2N1c3Npb25zIGdvaW5nIG9uLg0KDQpJIGRvIG5vdCB3YW50 IHRvIGFzc3VtZSB3aGF0IG1peHR1cmUgd2lsbCBiZSBhY2NlcHRhYmxlIHRvIGhhbmRsZSB0aGUg c2VjdXJpdHkgY29uY2VybnMgZXhwcmVzc2VkIGJ5IEthdGhsZWVuIGFuZCBFcmljDQphbmQgc3Vw cG9ydGVkIGJ5IGEgbnVtYmVyIG9mIG90aGVyIEFEcy4NCg0KSSBkbyBncmVhdGx5IGFwcHJlY2lh dGUgeW91ciBhdHRlbnRpb24gYW5kIGVmZm9ydHMgdG8gY2xhcmlmeSBhbmQgdHJ5IHRvIG1vdmUg dGhpcyB3b3JrIGZvcndhcmQuIEkgaGF2ZSBiZWVuIGV4cHJlc3NpbmcgY29uY2VybnMNCmFib3V0 IHRoZSBzZWN1cml0eSBhc3BlY3RzIG9mIHRoaXMgd29yayBzaW5jZSBSRkMgNzY2NSB3ZW50IHRo cm91Z2ggdGhlIHB1YmxpY2F0aW9uIHByb2Nlc3MgLSBhbmQgc3Ryb25nbHkgZW5jb3VyYWdpbmcg c2VyaW91cw0KV0cgZm9jdXMgdG8gcHJldmVudCBwcmVjaXNlbHkgd2hhdCBoYXMgbm93IGhhcHBl bmVkLg0KDQpSZWdhcmRzLA0KQWxpYQ0KDQoNCk9uIFRodSwgT2N0IDE5LCAyMDE3IGF0IDQ6NDkg QU0sIDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFp ckBvcmFuZ2UuY29tPj4gd3JvdGU6DQpIaSBBbGlhLA0KDQpDYW4geW91IHBsZWFzZSBzaGFyZSB3 aXRoIHVzIHRoZSBjdXJyZW50IHN0YXR1cyBvZiB0aGUgZG9jdW1lbnQgYW5kIHRoZSBsaXN0IG9m IHBlbmRpbmcgYmxvY2tpbmcgcG9pbnRzPw0KDQpJIHdlbnQgdGhyb3VnaCBhbGwgcHVibGljIGVt YWlsIGV4Y2hhbmdlcywgZXNwZWNpYWxseSB0aGUgb25lcyByZWxhdGVkIHRvIHNlY3VyaXR5LCBi dXQgaXQgaXMgbm90IHRoYXQgZWFzeSB0byB1bmRlcnN0YW5kIHdoYXQgYXJlIHRoZSByZW1haW5p bmcgaXNzdWVzIHRoYXQgbmVlZCBmaXhlcy4NCg0KSW4gcGFydGljdWxhciwgaXMgdGhlcmUgYSBj b25jZXJuIHdpdGggYXNzdW1pbmcgdGhlIGN1cnJlbnQgTlNIIHRocmVhdCBtb2RlbD8NCg0KDQox LiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGF0dGFja3MgaW5kdWNlZCBieSBub2RlcyB0aGF0IGlu amVjdCAoc3Bvb2ZlZCkgTlNIIGJlZm9yZSBlbnRlcmluZyBhbiBTRkMtZW5hYmxlZCBkb21haW4u IEluZGVlZCwgU0ZDIGluZ3Jlc3Mgbm9kZXMgTVVTVCBkaXNjYXJkIHBhY2tldHMgY2Fycnlpbmcg TlNILg0KDQoyLiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGF0dGFja3MgZnJvbSB3aXRoaW4gdGhl IFNGQy1lbmFibGVkIGRvbWFpbiB0byBpbmplY3Qgbm9uLWF1dGhvcml6ZWQgY29udGV4dCBoZWFk ZXJzLiBGcm9tIGEgc2VydmljZSBwZXJzcGVjdGl2ZSwgdGhlIGd1YXJkIGlzIHRoZSBDUCB3aGlj aCBpcyByZXNwb25zaWJsZSBmb3IgaW5zdHJ1Y3RpbmcgdGhlIFNGQy1hd2FyZSBub2RlcyBhYm91 dCB0aGUgbWFuZGF0b3J5LXRvLXByb2Nlc3MgYW5kIG9wdGlvbmFsLXRvLXByb2Nlc3MgY29udGV4 dCBoZWFkZXJzLiBGdXJ0aGVybW9yZSwgd2hhdGV2ZXIgdGhlIG9yaWdpbiBvZiBhIHN1cHBsaWVk IGNvbnRleHQgaGVhZGVyLCB0aGUgbGFzdCBTRkYgb2YgYSBjaGFpbiAoYW5kIGVncmVzcyBub2Rl cykgTVVTVCByZW1vdmUgdGhlIE5TSCBiZWZvcmUgZm9yd2FyZGluZyB1cHN0cmVhbS4NCg0KMy4g IE5TSCBpcyBzZWN1cmUgYWdhaW5zdCBsZWFraW5nIHByaXZhY3kgaW5mb3JtYXRpb24gb3V0c2lk ZSBhbiBTRkMgZW5hYmxlZCBkb21haW4uIFRoZSBsYXN0IFNGRiBvZiBhIGNoYWluIChhbmQgZWdy ZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNIIGJlZm9yZSBmb3J3YXJkaW5nIHVwc3RyZWFt Lg0KDQo0LiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGluZGVmaW5pdGUgU0YvU0ZGIGxvb3BzIGJ5 IG1lYW5zIG9mIFNJIGFuZCBUVEwgZmllbGRzLg0KDQo1LiAgQ29udHJvbCBwbGFuZSBzcGVjaWZp YyB0aHJlYXRzIGFyZSBvdXQgb2Ygc2NvcGUsIGJ1dCB0aGUgZG9jdW1lbnQgY2l0ZXMgSS1ELmll dGYtc2ZjLWNvbnRyb2wtcGxhbmUgZm9yIHRoZSBleHBlY3RlZCBiZWhhdmlvciB3aGVuIGluc3Ry dWN0aW5nIFNGQyBub2Rlcy4gQlRXLCB0aGUgc2VjZGlyIHJldmlldyBvZiB0aGUgQ1AgcmVxdWly ZW1lbnRzIGNhbiBiZSByZXRyaWV2ZWQgaGVyZSAoaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy9kb2MvcmV2aWV3LWlldGYtc2ZjLWNvbnRyb2wtcGxhbmUtMDItc2VjZGlyLWVhcmx5LW1lYWRv d3MtMjAxNS0xMi0xMC8pLg0KDQo2LiAgTlNIIGRvZXMgbm90IHNoYXJlIHByaXZhY3kgZGF0YSB3 aXRoIG5vbi1hdXRob3JpemVkIHBhcnRpZXMuIEluZGVlZCwgZGF0YSBjYXJyaWVkIGluIGNvbnRl eHQgaGVhZGVycyBhcmUgZGVyaXZlZCBmcm9tIHRoZSBvcmlnaW5hbCBwYWNrZXQgKGUuZy4sIHNv dXJjZSBJUCBhZGRyZXNzKSBvciBhcmUgYWxyZWFkeSBrbm93biB0byB0aGUgb3BlcmF0b3IgKGUu Zy4sIHN1YnNjcmliZXIgaWRlbnRpZmllciwgcG9saWN5IGlkZW50aWZpZXIsIHNlcnZpY2UgaWRl bnRpZmllcikuIFRoZSBjb250ZXh0IGluZm9ybWF0aW9uIGlzIHNoYXJlZCB3aXRoIG5vZGVzIHRo YXQgYXJlIHdpdGhpbiB0aGUgc2FtZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4uDQoNCjcuICBMaWtl IG90aGVyIGNvbW11bmljYXRpb24gcHJvdG9jb2xzLCBhdHRhY2tzIGZyb20gd2l0aGluIHRoZSBu ZXR3b3JrIGFyZSBwb3NzaWJsZSwgYnV0IHRob3NlIGFyZSBzb2Z0ZW4gYnkgcmVseWluZyBvbiB0 aGUgcHJvY2VkdXJlcyBwdXQgaW4gcGxhY2UgYnkgb3BlcmF0b3JzIGZvciB0ZXN0aW5nIGFuZCB2 YWxpZGF0aW5nIG5vZGVzL2ZlYXR1cmVzIGJlZm9yZSBhY3R1YWwgYWN0aXZhdGlvbi4gTlNIIGRv ZXMgbm90IHByb3ZpZGUgYSBidWlsdC1pbiBmZWF0dXJlIHRvIHByZXZlbnQgbWlzYmVoYXZpbmcg bm9kZXMsIGJ1dCByZWNvbW1lbmRzIHRvIHJlbHkgb24gdGhlIHNlY3VyaXR5IGZlYXR1cmVzIHBy b3ZpZGVkIGJ5IHRoZSB1bmRlcmx5aW5nIHRyYW5zcG9ydCBlbmNhcHN1bGF0aW9uIHNjaGVtZXMu DQoNCkxldOKAmXMgbm93IGZvY3VzIG9uIHRoZSB0eXBpY2FsIOKAnGF0dGFja3PigJ0gdGhhdCBj YW4gYmUgaXNzdWVkIGZyb20gd2l0aGluIHRoZSBuZXR3b3JrOg0KDQoxLiAgQSBtaXNiZWhhdmlu ZyBub2RlIHJlZGlyZWN0IHRoZSB0cmFmZmljIHRvIG5vbi1hdXRob3JpemVkIG5vZGVzIG91dHNp ZGUgYSBkb21haW46IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy4NCg0KMi4gIEEgbWlzYmVoYXZp bmcgU0ZDLXVud2FyZSBub2RlIGFsdGVycyB0aGUgY29udGVudCBvZiBhIHBhY2tldDogVGhpcyBp cyBub3QgTlNILXNwZWNpZmljLg0KDQozLiAgQSBtaXNiZWhhdmluZyBTRkMtYXdhcmUgbm9kZSBh bHRlcnMgdGhlIGNvbnRlbnQgb2YgTlNIOg0KDQogICAgICAgICAgICBpLiAgICAgSXQgcmVtb3Zl cyB0aGUgTlNIIGhlYWRlciBmcm9tIGFsbCBwYWNrZXRzIGl0IHNlZXM6IFRoaXMgd2lsbCBpbXBs eSB0aGF0IHRoZSBwYWNrZXRzLCB0aGUgbWlzYmVoYXZpbmcgbm9kZSBpbnRlcmNlcHRzLCB3aWxs IGJlIGZvcndhcmRlZCB1cHN0cmVhbSB3aXRob3V0IGludm9raW5nIHRoZSByZXF1aXJlZCBTRnMg KHdoaWNoIG1heSBiZSBzZWVuIGFzIGEgZmVhdHVyZSwgbm90IGEgYnVnIGlmIG9uZSBkaXNsaWtl cyDigJxtaWRkbGVib3hlc+KAnSA6KSkuIE1vcmUgc2VyaW91c2x5LCB0aGUgT0FNIE5TSCBmZWF0 dXJlIHdpbGwgYWxsb3cgYW4gb3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRoZXIgTlNIIHBhY2tldHMg YXJlIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMgb2YgdGhh dCBkb21haW4uIFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHdpbGwgaGVscCBkZXRlY3RpbmcgdGhlIG1p c2JlaGF2aW5nIG5vZGUuDQoNCiAgICAgICAgICBpaS4gICAgIEl0IG1vZGlmaWVzIHRoZSBjb250 ZW50IG9mIFNQSTogVGhpcyB3aWxsIGltcGx5IHRoYXQgdGhlc2UgcGFja2V0cyB3aWxsIGJlIGZv cndhcmRlZCBvdmVyIGEgd3JvbmcgcGF0aC4gQWdhaW4sIHJ1bm5pbmcgT0FNIE5TSCB3aWxsIGFs bG93IHRoZSBvcGVyYXRvciB0byBkZXRlY3Qgd2hldGhlciBhIHBhY2tldCBpcyB0cmF2ZWxsaW5n IGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5zdHJ1Y3Rpb25zLiBSdW5uaW5nIHRoYXQgZmVhdHVy ZSByZWd1bGFybHkgd2lsbCBoZWxwIGlkZW50aWZ5aW5nIHRoZSBtaXNiZWhhdmluZyBub2RlIGFu ZCB3aGV0aGVyIHRoZSBTRkMgY29uZmlndXJhdGlvbiBvZiBhIGRvbWFpbiBpcyBhbGlnbmVkIHdp dGggdGhlIGV4cGVjdGVkIGJlaGF2aW9yLg0KDQogICAgICAgIGlpaS4gICAgIEl0IG1vZGlmaWVz IHRoZSBjb250ZW50IG9mIFNJL1RUTDogVGhpcyB3aWxsIGluY3JlYXNlIHRoZSBhdXRob3JpemVk IG1heGltdW0gU0ZGL1NGIGhvcHMuIE5vdCBzdXJlIGlmIHRoZXJlIGlzIGEgc2VjdXJpdHkgcHJv YmxlbSBvdXQgdGhlcmUuDQoNCiAgICAgICAgICBpdi4gICAgIFRoZSBtaXNiZWhhdmluZyBub2Rl IGlzIGEgY2xhc3NpZmllcjogVGhlIGltcGxpY2F0aW9ucyB3aWxsIGJlIHNldmVyZSBmcm9tIGEg c2VydmljZSBzdGFuZHBvaW50LiBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0 byBkZXRlY3Qgc3VjaCBjYXNlLg0KDQogICAgICAgICAgICB2LiAgICAgVGhlIG1pc2JlaGF2aW5n IG5vZGUgaXMgYW4gU0ZGOiBFeGFtcGxlcyBvZiBtaXNiZWhhdmlvcnMgYXJlOiBzdHJpcCBOU0gs IGZvcndhcmQgdG8gYSBub24tYXV0aG9yaXplZCBTRiwgcmVkaXJlY3QgdGhlIHRyYWZmaWMgdG8g YSBub24tYXV0aG9yaXplZCBub2RlcywgZXRjLiBMaWtlIGZvciB0aGUgY2xhc3NpZmllciBjYXNl LCBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0byBkZXRlY3Qgc3VjaCBjYXNl Lg0KDQpBcmUgdGhlcmUgc3BlY2lmaWMgYXR0YWNrcyB0aGF0IGFyZSBub3QgbGlzdGVkIGFib3Zl IGFuZCB0aGF0IG5lZWQgbW9yZSBhdHRlbnRpb24gZnJvbSB0aGUgV0c/DQoNClRoYW5rIHlvdS4N Cg0KQ2hlZXJzLA0KTWVkDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQpzZmMgbWFpbGluZyBsaXN0DQpzZmNAaWV0Zi5vcmc8bWFpbHRvOnNmY0BpZXRm Lm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2ZjDQoNCg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNmYyBtYWlsaW5n IGxpc3QNCnNmY0BpZXRmLm9yZzxtYWlsdG86c2ZjQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmMNCg0KDQoNCg== --_000_C614C3FEAFDC417EA8CE5E47C016DA4Dciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <0456465C65586648986F07899683D126@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPGRpdj4N CjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBPY3Qg MjAsIDIwMTcsIGF0IDEwOjA4IEFNLCBFcmljIFJlc2NvcmxhICZsdDs8YSBocmVmPSJtYWlsdG86 ZWtyQHJ0Zm0uY29tIiBjbGFzcz0iIj5la3JAcnRmbS5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4N CjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBkaXI9Imx0ciIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+PGJyIGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0 IDc6MDEgQU0sIENhcmxvcyBQaWduYXRhcm8gKGNwaWduYXRhKQ0KPHNwYW4gZGlyPSJsdHIiIGNs YXNzPSIiPiZsdDs8YSBocmVmPSJtYWlsdG86Y3BpZ25hdGFAY2lzY28uY29tIiB0YXJnZXQ9Il9i bGFuayIgY2xhc3M9IiI+Y3BpZ25hdGFAY2lzY28uY29tPC9hPiZndDs8L3NwYW4+IHdyb3RlOjxi ciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1hcmdp bjowcHggMHB4IDBweCAwLjhleDtib3JkZXItbGVmdDoxcHggc29saWQgcmdiKDIwNCwyMDQsMjA0 KTtwYWRkaW5nLWxlZnQ6MWV4Ij4NCjxkaXYgc3R5bGU9IndvcmQtd3JhcDpicmVhay13b3JkIiBj bGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+RXJpYyw8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+PHNwYW4gY2xhc3M9ImdtYWlsLSI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBj bGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gT2N0IDIwLCAyMDE3LCBhdCA5OjQ1IEFNLCBFcmlj IFJlc2NvcmxhICZsdDs8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJnZXQ9Il9ibGFu ayIgY2xhc3M9IiI+ZWtyQHJ0Zm0uY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9 ImdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxf cXVvdGUiPk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0IDY6MzEgQU0sIFBhdWwgUXVpbm4gKHBhdWxx KSA8c3BhbiBkaXI9Imx0ciIgY2xhc3M9IiI+DQombHQ7PGEgaHJlZj0ibWFpbHRvOnBhdWxxQGNp c2NvLmNvbSIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBhdWxxQGNpc2NvLmNvbTwvYT4mZ3Q7 PC9zcGFuPiB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVv dGUiIHN0eWxlPSJtYXJnaW46MHB4IDBweCAwcHggMC44ZXg7Ym9yZGVyLWxlZnQ6MXB4IHNvbGlk IHJnYigyMDQsMjA0LDIwNCk7cGFkZGluZy1sZWZ0OjFleCI+DQo8ZGl2IHN0eWxlPSJ3b3JkLXdy YXA6YnJlYWstd29yZCIgY2xhc3M9IiI+DQo8ZGl2IGRpcj0iYXV0byIgc3R5bGU9IndvcmQtd3Jh cDpicmVhay13b3JkIiBjbGFzcz0iIj5IaSBBbGlhLA0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8Ymxv Y2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gT2N0IDE5LCAy MDE3LCBhdCAyOjQ5IFBNLCBBbGlhIEF0bGFzICZsdDs8YSBocmVmPSJtYWlsdG86YWthdGxhc0Bn bWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5ha2F0bGFzQGdtYWlsLmNvbTwvYT4m Z3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJnbWFpbC1tXy02ODA5NzkzOTUyMTY4NDQ2NjYw bV83NTAzOTMwMTQxNjIwMDEyNDMxQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9IiI+SGkgTWVkLA0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+U2luY2UgeW91IGRpcmVjdGVkIHRo aXMgYXQgbWUsIHRoZXJlIGFyZSBlZmZvcnRzIHRvIGhhdmUgc29tZSBkaXNjdXNzaW9ucyBhbmQg dW5kZXJzdGFuZCBiZXR0ZXIgdGhlIHBhcnRpY3VsYXIgdGhyZWF0cy48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+Q3VycmVudGx5LCB0aGVyZSBpcyBubyB0cmFuc3BvcnQgd2l0aCBpbnRlZ3JpdHkgcHJv dGVjdGlvbiB0aGF0IGlzIGV2ZW4gYSBTSE9VTEQgdG8gaW1wbGVtZW50LCBtdWNoIGxlc3MgYSBN VVNULiZuYnNwOyBUaGVyZTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5pcyBubyBjb250cm9sLXBsYW5l IGRlZmluZWQgKGJleW9uZCB0aGUgQkdQIHdvcmspIHRoYXQgZGVzY3JpYmVzIGRldGVjdGluZyBp c3N1ZXMuJm5ic3A7IFRoZXJlIGlzIG5vIE9BTSBkZWZpbmVkIGFuZCBhZG9wdGVkPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPmJ5IHRoZSBXRyB0aGF0IGRldGVjdHMgb3IgaGFuZGxlcyB0aGVzZSB0eXBl cyBvZiBhdHRhY2tzLiBJIHNlZSB0aGUgc3RydWN0dXJlIHRoYXQgeW91IGFyZSBwcmVzdW1pbmcs IGJ1dCBub25lIG9mIHRoZXNlIGFyZTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5hdmFpbGFibGUgYXMg bm9ybWF0aXZlIHJlZmVyZW5jZXMgdG8gTlNIIHRvZGF5LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9zcGFuPg0KPGRpdiBjbGFzcz0iIj5P QU0gZG9lcyBub3QgYWRkcmVzcyB0aGUgc2VjdXJpdHkgY29uY2VybiBhcm91bmQgaW50ZWdyaXR5 IGFuZCBkZXZpY2VzLiZuYnNwOyBJZiB5b3UgYW5kIHRoZSBXRyBiZWxpZXZlIE9BTSBpcyB0aGUg bmV4dCDigJx0byBkb+KAnSBmb3IgdGhlIFdHLCB0aGF04oCZcyBmaW5lLCBidXQgaXTigJlzIG9y dGhvZ29uYWwgdG8gdGhlIHNlY3VyaXR5IHBvaW50cyByYWlzZWQuPC9kaXY+DQo8c3BhbiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+ DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2 IGRpcj0ibHRyIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+SSBoYWQgcmVjb21tZW5kZWQgaGF2 aW5nIGEgZm9jdXNlZCBpbnRlcmltIG1lZXRpbmcgdG8gbWFrZSBzdXJlIHRoYXQgZXZlcnlvbmUg Y29uY2VybmVkIHVuZGVyc3Rvb2QgdGhlIGlzc3VlcyBhbmQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ d29ya2VkIHRocm91Z2ggdGhlIHRocmVhdCBhbmFseXNpcyBhbmQgcG9zc2libGUgc29sdXRpb25z IHRvZ2V0aGVyLjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L3NwYW4+DQo8ZGl2IGNsYXNzPSIiPkxldOKA mXMgcGxlYXNlIG5vdCBjb25mbGF0ZSB0aGUgb25nb2luZyBzZWN1cml0eSBkaXNjdXNzaW9uIHdp dGggT0FNLCBvciBvdGhlciB0b3BpY3MuJm5ic3A7IFRoZSBzZWN1cml0eSByZWFsaXR5LCBhcyB5 b3UgcG9pbnRlZCBvdXQgaW4geW91ciBlbWFpbCB0byBFcmljLCBpcyB0aGF0IHdlLCBhcyBhIGNv bW11bml0eSBhbmQgaW5kdXN0cnksIGFjY2VwdCBhIGxldmVsIG9mIHRydXN0IHdydCBuZXR3b3Jr IGRldmljZXMuDQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+SSBkb24ndCBhY3R1YWxseSB0aGluayB0aGF0J3MgdGhlIHBvaW50IG9mIGNvbnRlbnRpb24s IGF0IGxlYXN0IGZyb20gbXkgcGVyc3BlY3RpdmUuIFJhdGhlciBpdCdzIGFib3V0IHRoZSBsZXZl bCBvZiB0cnVzdCB0byBiZSBwbGFjZWQgaW4gdGhlIG5ldHdvcmtpbmcgcGF0aCB0aHJvdWdoIHdo aWNoIHRoYXQgZGF0YSBmbG93cy48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L3NwYW4+DQo8ZGl2IGNsYXNzPSIi PlVuZGVyc3Rvb2QuIEhvdyBhYm91dCB0aGlzPzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7IFguMi4mbmJzcDsmbmJzcDtUcmFuc3BvcnQgRW5jYXBzdWxh dGlvbiBTZWN1cml0eTxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7Jm5ic3A7TlNIIGlzIGFsd2F5cyBlbmNhcHN1bGF0ZWQgYnkgYW4gb3V0ZXIg dHJhbnNwb3J0PGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDtl bmNhcHN1bGF0aW9uIGFzIGRldGFpbGVkIGluIFNlY3Rpb24gNCBvZiB0aGlzPGJyIGNsYXNzPSIi Pg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDtzcGVjaWZpY2F0aW9uLCBhbmQgYXMg ZGVwaWN0ZWQgaW4gRmlndXJlIDEuJm5ic3A7Jm5ic3A7SWYgYW4gb3BlcmF0b3I8YnIgY2xhc3M9 IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO2RlZW1zIGNyeXB0b2dyYXBoaWMg aW50ZWdyaXR5IHByb3RlY3Rpb24gbmVjZXNzYXJ5IGR1ZSB0bzxiciBjbGFzcz0iIj4NCiZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jm5ic3A7dGhlaXIgcmlzayBhbmFseXNpcywgdGhlbiBhbiBv dXRlciB0cmFuc3BvcnQgZW5jYXBzdWxhdGlvbjxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7Jm5ic3A7dGhhdCBwcm92aWRlcyBzdWNoIHByb3RlY3Rpb24gW1JGQzYwNzFd LCBzdWNoIGFzJm5ic3A7SVBzZWMsIE1VU1Q8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyZuYnNwO2JlIHVzZWQuPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ SSBjYW4ndCBzcGVhayBmb3IgS2F0aGxlZW4sIGJ1dCBJIGRvbid0IHJlYWxseSB0aGluayB0aGlz IGdldHMgdGhlIGpvYiBkb25lLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+QXMgZGVzY3JpYmVkIGluIFJGQyAzNTUyICg8YSBocmVmPSJo dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjMzU1MiNzZWN0aW9uLTMiIGNsYXNzPSIiPmh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmMzNTUyI3NlY3Rpb24tMzwvYT4pIG91ciB0aHJl YXQgbW9kZWwgaXMgdGhhdCB0aGUgSW50ZXJuZXQgaXMgdW50cnVzdGVkLjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdj5ZZXMuIEp1c3QgdG8gY2xhcmlmeSwgdGhvdWdoLCBOU0ggaXMgbm90 IGFuIGVuZC10by1lbmQgcHJvdG9jb2wuIEl0IGRvZXNu4oCZdCDigJxzdGFydOKAnSBpbiBhIGhv c3QgYW5kIOKAnGVuZOKAnSBpbiBhIGhvc3Qvc2VydmVyLiBJdOKAmXMgYSZuYnNwO25ldHdvcmst Y2VudHJpYyBsaWtlJm5ic3A7UHJvdmlzaW9uZWQgVmlydHVhbCBQcml2YXRlIE5ldHdvcmtzLCBU cmFmZmljIEVuZ2luZWVyaW5nLCBNUExTLjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVv dGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0ciIg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9x dW90ZSI+DQo8ZGl2IGNsYXNzPSIiPlRoYXQgbWVhbnMgd2Ugc2hvdWxkIGJlIGRlc2lnbmluZyBw cm90b2NvbHMgdGhhdCBhcmUgc2FmZSB0byBvcGVyYXRlIGluIHRoYXQgZW52aXJvbm1lbnQsIHdo aWNoIGluIHRoaXMgY2FzZSBtZWFucyB0aGF0IHRoZSBwcm90b2NvbCBzaG91bGQgZWl0aGVyIChh KSBjb21lIHdpdGggYSBidWlsdC1pbiBzZWN1cml0eSBtZWNoYW5pc20gb3IgKGIpIGJlIHJ1biBv dmVyIGEgc2VjdXJlIHRyYW5zcG9ydC4gSSBkb24ndCB0aGluaw0KIHRlbGxpbmcgb3BlcmF0b3Jz ICZxdW90O3lvdSBmaWd1cmUgaXQgb3V0JnF1b3Q7IHJlZmxlY3RzIGJlc3QgY3VycmVudCBwcmFj dGljZS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2PkJ1dOKApiB3ZSBhcmUgc2F5aW5nIOKAnHJ1biBvdmVyIGEgc2VjdXJl IHRyYW5zcG9ydOKAnS48L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PlRo aXMgd2FzIGJlc3QgY2FwdHVyZWQgaW4gQWxpYeKAmXMgbWVzc2FnZSB0byB5b3UsIGNvcGllZCBv biB0aGlzIGxpc3Q6PC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj4mcXVv dDtUaGVyZSBhcmUgbm8gZW5jYXBzdWxhdGlvbnMgZnJvbSB0aGUgUm91dGluZyBBcmVhIHRoYXQg cmVxdWlyZSBpbnRlZ3JpdHkgcHJvdGVjdGlvbiB0aGF0IEkgYW0gYXdhcmUgb2Y7PGJyIGNsYXNz PSIiPg0Kd2hlbiBwcml2YWN5IGlzIHJlcXVpcmVkIElQc2VjIG9yIE1BQyBzZWMgYXJlIHVzZWQu 4oCdPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5UaGFua3MgZm9yIGVu Z2FnaW5nIGluIGRpYWxvZ3VlIG5vdywgY2FuIHlvdSBjbGFyaWZ5PzwvZGl2Pg0KPGRpdj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+Q2FybG9zLjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJs b2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9 Imx0ciIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+DQo8ZGl2IGNsYXNzPSJn bWFpbF9xdW90ZSI+DQo8ZGl2IGNsYXNzPSIiPi1Fa3I8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+Jm5ic3A7PC9kaXY+DQo8YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUi IHN0eWxlPSJtYXJnaW46MHB4IDBweCAwcHggMC44ZXg7Ym9yZGVyLWxlZnQ6MXB4IHNvbGlkIHJn YigyMDQsMjA0LDIwNCk7cGFkZGluZy1sZWZ0OjFleCI+DQo8ZGl2IHN0eWxlPSJ3b3JkLXdyYXA6 YnJlYWstd29yZCIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48c3Bh biBjbGFzcz0iZ21haWwtSE9FblpiIj48Zm9udCBjb2xvcj0iIzg4ODg4OCIgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9mb250Pjwvc3Bhbj48L2Rpdj4NCjxzcGFuIGNs YXNzPSJnbWFpbC1IT0VuWmIiPjxmb250IGNvbG9yPSIjODg4ODg4IiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+4oCUIENhcmxvcy48L2Rpdj4NCjwvZm9udD48L3NwYW4+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iZ21haWwtaDUiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9 ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJsdHIiIGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPg0KPGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPg0K PGRpdiBjbGFzcz0iIj4tRWtyPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDs8L2Rpdj4NCjxibG9ja3F1b3RlIGNsYXNzPSJnbWFp bF9xdW90ZSIgc3R5bGU9Im1hcmdpbjowcHggMHB4IDBweCAwLjhleDtib3JkZXItbGVmdDoxcHgg c29saWQgcmdiKDIwNCwyMDQsMjA0KTtwYWRkaW5nLWxlZnQ6MWV4Ij4NCjxkaXYgc3R5bGU9Indv cmQtd3JhcDpicmVhay13b3JkIiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJhdXRvIiBzdHlsZT0id29y ZC13cmFwOmJyZWFrLXdvcmQiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwO1RoZSBvbmdvaW5nIGVkaXRzIGFuZCBkaWFsb2d1ZSB3 aXRoIEthdGhsZWVuIGFuZCBFcmljIGFyZSB3b3JraW5nIHRocm91Z2ggdGhlaXIgY29uY2VybnMu Jm5ic3A7IEFuIGludGVyaW0gdG8gdGFsayBhYm91dCBuZXh0IFNGQyBzdGVwcywgcG9zdCBOU0gs IGlzIGEgZGlmZmVyZW50IG1hdHRlci4gJm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxi ciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbC1tXy02ODA5NzkzOTUyMTY4 NDQ2NjYwaDUiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPkF0IHRo aXMgcG9pbnQsIGNsZWFybHkgdGhlIG1vc3QgdGhhdCBjb3VsZCBoYXBwZW4gaXMgYTwvZGl2Pg0K PGRpdiBjbGFzcz0iIj52aXJ0dWFsIGludGVyaW0uJm5ic3A7IFRoZXJlIGFyZSBzb21lIGJhY2tn cm91bmQgZGlzY3Vzc2lvbnMgZ29pbmcgb24uPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JIGRvIG5vdCB3YW50IHRvIGFzc3VtZSB3aGF0 IG1peHR1cmUgd2lsbCBiZSBhY2NlcHRhYmxlIHRvIGhhbmRsZSB0aGUgc2VjdXJpdHkgY29uY2Vy bnMgZXhwcmVzc2VkIGJ5IEthdGhsZWVuIGFuZCBFcmljPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPmFu ZCBzdXBwb3J0ZWQgYnkgYSBudW1iZXIgb2Ygb3RoZXIgQURzLjxiciBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9ImdtYWlsX2V4dHJhIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9Imdt YWlsX2V4dHJhIj5JIGRvIGdyZWF0bHkgYXBwcmVjaWF0ZSB5b3VyIGF0dGVudGlvbiBhbmQgZWZm b3J0cyB0byBjbGFyaWZ5IGFuZCB0cnkgdG8gbW92ZSB0aGlzIHdvcmsgZm9yd2FyZC4gSSBoYXZl IGJlZW4gZXhwcmVzc2luZyBjb25jZXJuczwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEi PmFib3V0IHRoZSBzZWN1cml0eSBhc3BlY3RzIG9mIHRoaXMgd29yayBzaW5jZSBSRkMgNzY2NSB3 ZW50IHRocm91Z2ggdGhlIHB1YmxpY2F0aW9uIHByb2Nlc3MgLSBhbmQgc3Ryb25nbHkgZW5jb3Vy YWdpbmcgc2VyaW91czwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPldHIGZvY3VzIHRv IHByZXZlbnQgcHJlY2lzZWx5IHdoYXQgaGFzIG5vdyBoYXBwZW5lZC48L2Rpdj4NCjxkaXYgY2xh c3M9ImdtYWlsX2V4dHJhIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9ImdtYWls X2V4dHJhIj5SZWdhcmRzLDwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPkFsaWE8L2Rp dj4NCjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9ImdtYWlsX2V4dHJhIj48YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9xdW90 ZSI+T24gVGh1LCBPY3QgMTksIDIwMTcgYXQgNDo0OSBBTSwgPHNwYW4gZGlyPSJsdHIiIGNsYXNz PSIiPg0KJmx0OzxhIGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIiB0 YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT4m Z3Q7PC9zcGFuPiB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSBjbGFzcz0iZ21haWxf cXVvdGUiIHN0eWxlPSJtYXJnaW46MHB4IDBweCAwcHggMC44ZXg7Ym9yZGVyLWxlZnQ6MXB4IHNv bGlkIHJnYigyMDQsMjA0LDIwNCk7cGFkZGluZy1sZWZ0OjFleCI+DQo8ZGl2IGxhbmc9IkZSIiBj bGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBtXzc1MDM5 MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1V29yZFNlY3Rpb24xIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+SGkgQWxpYSwNCjx1IGNsYXNz PSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyIgY2xhc3M9IiI+PHUgY2xhc3M9IiI+PC91PiZuYnNwOzx1IGNsYXNzPSIiPjwvdT48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xh c3M9IiI+Q2FuIHlvdSBwbGVhc2Ugc2hhcmUgd2l0aCB1cyB0aGUgY3VycmVudCBzdGF0dXMgb2Yg dGhlIGRvY3VtZW50IGFuZCB0aGUgbGlzdCBvZiBwZW5kaW5nIGJsb2NraW5nIHBvaW50cz88dSBj bGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48dSBjbGFzcz0iIj48L3U+Jm5ic3A7 PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5JIHdlbnQgdGhyb3VnaCBhbGwgcHVibGljIGVtYWlsIGV4 Y2hhbmdlcywgZXNwZWNpYWxseSB0aGUgb25lcyByZWxhdGVkIHRvIHNlY3VyaXR5LCBidXQgaXQg aXMgbm90IHRoYXQgZWFzeSB0byB1bmRlcnN0YW5kIHdoYXQgYXJlIHRoZSByZW1haW5pbmcgaXNz dWVzIHRoYXQgbmVlZA0KIGZpeGVzLjx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNz PSIiPjx1IGNsYXNzPSIiPjwvdT4mbmJzcDs8dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPkluIHBhcnRp Y3VsYXIsIGlzIHRoZXJlIGEgY29uY2VybiB3aXRoIGFzc3VtaW5nIHRoZSBjdXJyZW50IE5TSCB0 aHJlYXQgbW9kZWw/PHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHUgY2xh c3M9IiI+PC91PiZuYnNwOzx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Imdt YWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0x MzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+DQo8dSBjbGFzcz0iIj48L3U+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+MS48c3BhbiBzdHlsZT0i Zm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50LWxpZ2F0dXJlczpub3JtYWw7Zm9udC12YXJp YW50LWNhcHM6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2Zv bnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBj bGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+TlNIIGlzIHNlY3VyZSBh Z2FpbnN0IGF0dGFja3MgaW5kdWNlZCBieSBub2RlcyB0aGF0IGluamVjdCAoc3Bvb2ZlZCkgTlNI IGJlZm9yZSBlbnRlcmluZyBhbiBTRkMtZW5hYmxlZCBkb21haW4uIEluZGVlZCwgU0ZDIGluZ3Jl c3Mgbm9kZXMgTVVTVA0KIGRpc2NhcmQgcGFja2V0cyBjYXJyeWluZyBOU0guPHUgY2xhc3M9IiI+ PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1fLTY4MDk3 OTM5NTIxNjg0NDY2NjBtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5 NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+DQo8dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+Mi48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpu b3JtYWw7Zm9udC12YXJpYW50LWxpZ2F0dXJlczpub3JtYWw7Zm9udC12YXJpYW50LWNhcHM6bm9y bWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7 bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyIgY2xhc3M9IiI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+TlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGF0dGFj a3MgZnJvbSB3aXRoaW4gdGhlIFNGQy1lbmFibGVkIGRvbWFpbiB0byBpbmplY3Qgbm9uLWF1dGhv cml6ZWQgY29udGV4dCBoZWFkZXJzLiBGcm9tIGEgc2VydmljZSBwZXJzcGVjdGl2ZSwgdGhlIGd1 YXJkDQogaXMgdGhlIENQIHdoaWNoIGlzIHJlc3BvbnNpYmxlIGZvciBpbnN0cnVjdGluZyB0aGUg U0ZDLWF3YXJlIG5vZGVzIGFib3V0IHRoZSBtYW5kYXRvcnktdG8tcHJvY2VzcyBhbmQgb3B0aW9u YWwtdG8tcHJvY2VzcyBjb250ZXh0IGhlYWRlcnMuIEZ1cnRoZXJtb3JlLCB3aGF0ZXZlciB0aGUg b3JpZ2luIG9mIGEgc3VwcGxpZWQgY29udGV4dCBoZWFkZXIsIHRoZSBsYXN0IFNGRiBvZiBhIGNo YWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZQ0KIHRoZSBOU0ggYmVmb3JlIGZvcndh cmRpbmcgdXBzdHJlYW0uPHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9ImdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBtXzc1MDM5MzAxNDE2MjAw MTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+DQo8dSBj bGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+ My48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50LWxpZ2F0dXJlczpu b3JtYWw7Zm9udC12YXJpYW50LWNhcHM6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0 cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5 OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7DQo8L3NwYW4+PC9z cGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+ TlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGxlYWtpbmcgcHJpdmFjeSBpbmZvcm1hdGlvbiBvdXRzaWRl IGFuIFNGQyBlbmFibGVkIGRvbWFpbi4gVGhlIGxhc3QgU0ZGIG9mIGEgY2hhaW4gKGFuZCBlZ3Jl c3Mgbm9kZXMpIE1VU1QgcmVtb3ZlIHRoZSBOU0gNCiBiZWZvcmUgZm9yd2FyZGluZyB1cHN0cmVh bS48dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i Z21haWwtbV8tNjgwOTc5Mzk1MjE2ODQ0NjY2MG1fNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW1f LTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIj4NCjx1IGNsYXNzPSIiPjwvdT48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj40LjxzcGFuIHN0eWxl PSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQtbGlnYXR1cmVzOm5vcm1hbDtmb250LXZh cmlhbnQtY2Fwczpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7 Zm9udC1zaXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1 IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5OU0ggaXMgc2VjdXJl IGFnYWluc3QgaW5kZWZpbml0ZSBTRi9TRkYgbG9vcHMgYnkgbWVhbnMgb2YgU0kgYW5kIFRUTCBm aWVsZHMuPHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xh c3M9ImdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFp bC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+DQo8dSBjbGFzcz0iIj48 L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+NS48c3BhbiBz dHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50LWxpZ2F0dXJlczpub3JtYWw7Zm9u dC12YXJpYW50LWNhcHM6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9y bWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bh bj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Q29udHJvbCBw bGFuZSBzcGVjaWZpYyB0aHJlYXRzIGFyZSBvdXQgb2Ygc2NvcGUsIGJ1dCB0aGUgZG9jdW1lbnQg Y2l0ZXMgSS1ELmlldGYtc2ZjLWNvbnRyb2wtcGxhbmUgZm9yIHRoZSBleHBlY3RlZCBiZWhhdmlv ciB3aGVuIGluc3RydWN0aW5nIFNGQw0KIG5vZGVzLiBCVFcsIHRoZSBzZWNkaXIgcmV2aWV3IG9m IHRoZSBDUCByZXF1aXJlbWVudHMgY2FuIGJlIHJldHJpZXZlZCBoZXJlICg8YSBocmVmPSJodHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9yZXZpZXctaWV0Zi1zZmMtY29udHJvbC1wbGFu ZS0wMi1zZWNkaXItZWFybHktbWVhZG93cy0yMDE1LTEyLTEwLyIgdGFyZ2V0PSJfYmxhbmsiIGNs YXNzPSIiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvPHdiciBjbGFzcz0iIj5kb2MvcmV2 aWV3LWlldGYtc2ZjLWNvbnRyb2wtcGw8d2JyIGNsYXNzPSIiPmFuZS0wMi1zZWNkaXItZWFybHkt bWVhZG93cy0yMDx3YnIgY2xhc3M9IiI+MTUtMTItMTAvPC9hPikuDQo8dSBjbGFzcz0iIj48L3U+ PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbV8tNjgwOTc5Mzk1 MjE2ODQ0NjY2MG1fNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2 NzVNc29MaXN0UGFyYWdyYXBoIj4NCjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj42LjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1h bDtmb250LXZhcmlhbnQtbGlnYXR1cmVzOm5vcm1hbDtmb250LXZhcmlhbnQtY2Fwczpub3JtYWw7 Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXplOjdwdDtsaW5l LWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7IiBj bGFzcz0iIj4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5OU0ggZG9lcyBub3Qgc2hhcmUgcHJpdmFjeSBkYXRh IHdpdGggbm9uLWF1dGhvcml6ZWQgcGFydGllcy4gSW5kZWVkLCBkYXRhIGNhcnJpZWQgaW4gY29u dGV4dCBoZWFkZXJzIGFyZSBkZXJpdmVkIGZyb20gdGhlIG9yaWdpbmFsIHBhY2tldCAoZS5nLiwN CiBzb3VyY2UgSVAgYWRkcmVzcykgb3IgYXJlIGFscmVhZHkga25vd24gdG8gdGhlIG9wZXJhdG9y IChlLmcuLCBzdWJzY3JpYmVyIGlkZW50aWZpZXIsIHBvbGljeSBpZGVudGlmaWVyLCBzZXJ2aWNl IGlkZW50aWZpZXIpLiBUaGUgY29udGV4dCBpbmZvcm1hdGlvbiBpcyBzaGFyZWQgd2l0aCBub2Rl cyB0aGF0IGFyZSB3aXRoaW4gdGhlIHNhbWUgYWRtaW5pc3RyYXRpdmUgZG9tYWluLiAmbmJzcDs8 dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21h aWwtbV8tNjgwOTc5Mzk1MjE2ODQ0NjY2MG1fNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW1fLTEz Njk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIj4NCjx1IGNsYXNzPSIiPjwvdT48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj43LjxzcGFuIHN0eWxlPSJm b250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQtbGlnYXR1cmVzOm5vcm1hbDtmb250LXZhcmlh bnQtY2Fwczpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9u dC1zaXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNs YXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5MaWtlIG90aGVyIGNvbW11 bmljYXRpb24gcHJvdG9jb2xzLCBhdHRhY2tzIGZyb20gd2l0aGluIHRoZSBuZXR3b3JrIGFyZSBw b3NzaWJsZSwgYnV0IHRob3NlIGFyZSBzb2Z0ZW4gYnkgcmVseWluZyBvbiB0aGUgcHJvY2VkdXJl cyBwdXQgaW4gcGxhY2UNCiBieSBvcGVyYXRvcnMgZm9yIHRlc3RpbmcgYW5kIHZhbGlkYXRpbmcg bm9kZXMvZmVhdHVyZXMgYmVmb3JlIGFjdHVhbCBhY3RpdmF0aW9uLiBOU0ggZG9lcyBub3QgcHJv dmlkZSBhIGJ1aWx0LWluIGZlYXR1cmUgdG8gcHJldmVudCBtaXNiZWhhdmluZyBub2RlcywgYnV0 IHJlY29tbWVuZHMgdG8gcmVseSBvbiB0aGUgc2VjdXJpdHkgZmVhdHVyZXMgcHJvdmlkZWQgYnkg dGhlIHVuZGVybHlpbmcgdHJhbnNwb3J0IGVuY2Fwc3VsYXRpb24gc2NoZW1lcy4NCjx1IGNsYXNz PSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjx1IGNsYXNzPSIiPjwvdT4mbmJzcDs8dSBj bGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiIGNsYXNzPSIiPkxldOKAmXMgbm93IGZvY3VzIG9uIHRoZSB0eXBpY2FsIOKAnGF0 dGFja3PigJ0gdGhhdCBjYW4gYmUgaXNzdWVkIGZyb20gd2l0aGluIHRoZSBuZXR3b3JrOg0KPHUg Y2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWls LW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5 NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+DQo8dSBjbGFzcz0iIj48L3U+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+MS48c3BhbiBzdHlsZT0iZm9u dC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50LWxpZ2F0dXJlczpub3JtYWw7Zm9udC12YXJpYW50 LWNhcHM6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQt c2l6ZTo3cHQ7bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFz cz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+QSBtaXNiZWhhdmluZyBub2Rl IHJlZGlyZWN0IHRoZSB0cmFmZmljIHRvIG5vbi1hdXRob3JpemVkIG5vZGVzIG91dHNpZGUgYSBk b21haW46IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy48dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9 IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbV8tNjgwOTc5Mzk1MjE2ODQ0NjY2 MG1fNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0 UGFyYWdyYXBoIj4NCjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0i Ij48c3BhbiBjbGFzcz0iIj4yLjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZh cmlhbnQtbGlnYXR1cmVzOm5vcm1hbDtmb250LXZhcmlhbnQtY2Fwczpub3JtYWw7Zm9udC13ZWln aHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXplOjdwdDtsaW5lLWhlaWdodDpu b3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7IiBjbGFzcz0iIj4m bmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7IiBjbGFzcz0iIj5BIG1pc2JlaGF2aW5nIFNGQy11bndhcmUgbm9kZSBhbHRlcnMgdGhl IGNvbnRlbnQgb2YgYSBwYWNrZXQ6IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy48dSBjbGFzcz0i Ij48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbV8tNjgw OTc5Mzk1MjE2ODQ0NjY2MG1fNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW1fLTEzNjk0ODUzODA5 Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIj4NCjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj4zLjxzcGFuIHN0eWxlPSJmb250LXN0eWxl Om5vcm1hbDtmb250LXZhcmlhbnQtbGlnYXR1cmVzOm5vcm1hbDtmb250LXZhcmlhbnQtY2Fwczpu b3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXplOjdw dDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7IiBjbGFzcz0iIj4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwv dT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5BIG1pc2JlaGF2aW5nIFNGQy1hd2FyZSBu b2RlIGFsdGVycyB0aGUgY29udGVudCBvZiBOU0g6PHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIi PjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBt Xzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBh cmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcycHQiPg0KPHUgY2xhc3M9IiI+PC91PjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250 LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQtbGlnYXR1cmVzOm5vcm1hbDtmb250LXZhcmlhbnQt Y2Fwczpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1z aXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj5pLjxzcGFuIHN0eWxlPSJmb250 LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQtbGlnYXR1cmVzOm5vcm1hbDtmb250LXZhcmlhbnQt Y2Fwczpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1z aXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3Nw YW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5J dCByZW1vdmVzIHRoZSBOU0ggaGVhZGVyIGZyb20gYWxsIHBhY2tldHMgaXQgc2VlczogVGhpcyB3 aWxsIGltcGx5IHRoYXQgdGhlIHBhY2tldHMsIHRoZSBtaXNiZWhhdmluZyBub2RlIGludGVyY2Vw dHMsIHdpbGwgYmUgZm9yd2FyZGVkIHVwc3RyZWFtDQogd2l0aG91dCBpbnZva2luZyB0aGUgcmVx dWlyZWQgU0ZzICh3aGljaCBtYXkgYmUgc2VlbiBhcyBhIGZlYXR1cmUsIG5vdCBhIGJ1ZyBpZiBv bmUgZGlzbGlrZXMg4oCcbWlkZGxlYm94ZXPigJ0gOikpLiBNb3JlIHNlcmlvdXNseSwgdGhlIE9B TSBOU0ggZmVhdHVyZSB3aWxsIGFsbG93IGFuIG9wZXJhdG9yIHRvIGRldGVjdCB3aGV0aGVyIE5T SCBwYWNrZXRzIGFyZSB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5zdHJ1Y3Rp b25zIG9mIHRoYXQNCiBkb21haW4uIFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHdpbGwgaGVscCBkZXRl Y3RpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUuIDx1IGNsYXNzPSIiPg0KPC91Pjx1IGNsYXNzPSIi PjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBt Xzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBh cmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcycHQiPg0KPHUgY2xhc3M9IiI+PC91PjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250 LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQtbGlnYXR1cmVzOm5vcm1hbDtmb250LXZhcmlhbnQt Y2Fwczpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1z aXplOjdwdDtsaW5lLWhlaWdodDpub3JtYWw7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj5paS48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3Jt YWw7Zm9udC12YXJpYW50LWxpZ2F0dXJlczpub3JtYWw7Zm9udC12YXJpYW50LWNhcHM6bm9ybWFs O2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGlu ZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIg Y2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48 dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+SXQgbW9kaWZpZXMg dGhlIGNvbnRlbnQgb2YgU1BJOiBUaGlzIHdpbGwgaW1wbHkgdGhhdCB0aGVzZSBwYWNrZXRzIHdp bGwgYmUgZm9yd2FyZGVkIG92ZXIgYSB3cm9uZyBwYXRoLiBBZ2FpbiwgcnVubmluZyBPQU0gTlNI IHdpbGwgYWxsb3cgdGhlIG9wZXJhdG9yDQogdG8gZGV0ZWN0IHdoZXRoZXIgYSBwYWNrZXQgaXMg dHJhdmVsbGluZyBpbiBhY2NvcmRhbmNlIHdpdGggU0ZDIGluc3RydWN0aW9ucy4gUnVubmluZyB0 aGF0IGZlYXR1cmUgcmVndWxhcmx5IHdpbGwgaGVscCBpZGVudGlmeWluZyB0aGUgbWlzYmVoYXZp bmcgbm9kZSBhbmQgd2hldGhlciB0aGUgU0ZDIGNvbmZpZ3VyYXRpb24gb2YgYSBkb21haW4gaXMg YWxpZ25lZCB3aXRoIHRoZSBleHBlY3RlZCBiZWhhdmlvci48dSBjbGFzcz0iIj48L3U+PHUgY2xh c3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbV8tNjgwOTc5Mzk1MjE2ODQ0 NjY2MG1fNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29M aXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzJwdCI+DQo8dSBjbGFzcz0iIj48L3U+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+PHNwYW4gc3R5bGU9 ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudC1saWdhdHVyZXM6bm9ybWFsO2ZvbnQtdmFy aWFudC1jYXBzOm5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJldGNoOm5vcm1hbDtm b250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOw0KPC9zcGFuPmlpaS48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9u dC12YXJpYW50LWxpZ2F0dXJlczpub3JtYWw7Zm9udC12YXJpYW50LWNhcHM6bm9ybWFsO2ZvbnQt d2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWln aHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9 IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFz cz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+SXQgbW9kaWZpZXMgdGhlIGNv bnRlbnQgb2YgU0kvVFRMOiBUaGlzIHdpbGwgaW5jcmVhc2UgdGhlIGF1dGhvcml6ZWQgbWF4aW11 bSBTRkYvU0YgaG9wcy4gTm90IHN1cmUgaWYgdGhlcmUgaXMgYSBzZWN1cml0eSBwcm9ibGVtIG91 dCB0aGVyZS4NCjx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJnbWFpbC1tXy02ODA5NzkzOTUyMTY4NDQ2NjYwbV83NTAzOTMwMTQxNjIwMDEyNDMx Z21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJn aW4tbGVmdDo3MnB0Ij4NCjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFz cz0iIj48c3BhbiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12 YXJpYW50LWxpZ2F0dXJlczpub3JtYWw7Zm9udC12YXJpYW50LWNhcHM6bm9ybWFsO2ZvbnQtd2Vp Z2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7bGluZS1oZWlnaHQ6 bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyIgY2xhc3M9IiI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8 L3NwYW4+aXYuPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudC1saWdh dHVyZXM6bm9ybWFsO2ZvbnQtdmFyaWFudC1jYXBzOm5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7 Zm9udC1zdHJldGNoOm5vcm1hbDtmb250LXNpemU6N3B0O2xpbmUtaGVpZ2h0Om5vcm1hbDtmb250 LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPlRoZSBtaXNiZWhhdmluZyBub2RlIGlzIGEgY2xhc3Np ZmllcjogVGhlIGltcGxpY2F0aW9ucyB3aWxsIGJlIHNldmVyZSBmcm9tIGEgc2VydmljZSBzdGFu ZHBvaW50LiBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0byBkZXRlY3QNCiBz dWNoIGNhc2UuICZuYnNwOyZuYnNwOzx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tXy02ODA5NzkzOTUyMTY4NDQ2NjYwbV83NTAzOTMw MTQxNjIwMDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgi IHN0eWxlPSJtYXJnaW4tbGVmdDo3MnB0Ij4NCjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpu b3JtYWw7Zm9udC12YXJpYW50LWxpZ2F0dXJlczpub3JtYWw7Zm9udC12YXJpYW50LWNhcHM6bm9y bWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7 bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+di48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpu b3JtYWw7Zm9udC12YXJpYW50LWxpZ2F0dXJlczpub3JtYWw7Zm9udC12YXJpYW50LWNhcHM6bm9y bWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTo3cHQ7 bGluZS1oZWlnaHQ6bm9ybWFsO2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bh bj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+VGhlIG1pc2Jl aGF2aW5nIG5vZGUgaXMgYW4gU0ZGOiBFeGFtcGxlcyBvZiBtaXNiZWhhdmlvcnMgYXJlOiBzdHJp cCBOU0gsIGZvcndhcmQgdG8gYSBub24tYXV0aG9yaXplZCBTRiwgcmVkaXJlY3QgdGhlIHRyYWZm aWMgdG8gYSBub24tYXV0aG9yaXplZA0KIG5vZGVzLCBldGMuIExpa2UgZm9yIHRoZSBjbGFzc2lm aWVyIGNhc2UsIE5TSCByZWxpZXMgb24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBz dWNoIGNhc2UuICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzx1IGNsYXNzPSIi PjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPjx1IGNsYXNzPSIiPjwvdT4mbmJzcDs8dSBjbGFz cz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiIGNsYXNzPSIiPkFyZSB0aGVyZSBzcGVjaWZpYyBhdHRhY2tzIHRoYXQgYXJlIG5vdCBs aXN0ZWQgYWJvdmUgYW5kIHRoYXQgbmVlZCBtb3JlIGF0dGVudGlvbiBmcm9tIHRoZSBXRz88dSBj bGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj48dSBjbGFzcz0iIj48L3U+Jm5ic3A7 PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5UaGFuayB5b3UuPHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNz PSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyIgY2xhc3M9IiI+PHUgY2xhc3M9IiI+PC91PiZuYnNwOzx1IGNsYXNzPSIiPjwvdT48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9 IiI+Q2hlZXJzLDx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPk1lZDx1IGNs YXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX188d2JyIGNs YXNzPSIiPl9fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0Kc2ZjIG1haWxpbmcgbGlzdDxi ciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpzZmNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5r IiBjbGFzcz0iIj5zZmNAaWV0Zi5vcmc8L2E+PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmMiIHRhcmdldD0iX2JsYW5rIiBjbGFz cz0iIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2w8d2JyIGNsYXNzPSIiPmlzdGluZm8v c2ZjPC9hPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX188d2JyIGNsYXNzPSIiPl9fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0Kc2ZjIG1h aWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpzZmNAaWV0Zi5vcmciIHRh cmdldD0iX2JsYW5rIiBjbGFzcz0iIj5zZmNAaWV0Zi5vcmc8L2E+PGJyIGNsYXNzPSIiPg0KPGEg aHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmMiIHRhcmdldD0i X2JsYW5rIiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuLzx3YnIgY2xhc3M9 IiI+bGlzdGluZm8vc2ZjPC9hPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_C614C3FEAFDC417EA8CE5E47C016DA4Dciscocom_-- From nobody Fri Oct 20 07:22:38 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D881913337F for ; Fri, 20 Oct 2017 07:22:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5AjSG5l46-gc for ; Fri, 20 Oct 2017 07:22:34 -0700 (PDT) Received: from mail-yw0-x22c.google.com (mail-yw0-x22c.google.com [IPv6:2607:f8b0:4002:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F5E6132D18 for ; Fri, 20 Oct 2017 07:22:33 -0700 (PDT) Received: by mail-yw0-x22c.google.com with SMTP id t71so6486708ywc.3 for ; Fri, 20 Oct 2017 07:22:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=dkTd7+fa6lxYqV27Vh92cM+2mRu+yctTJXKIljjrt90=; b=2EK2RMFce36vm0S9SgaIGbSE8yA2lJih90iS3FwgVa2gsOjjsSXml9oWAWLzGly8wn YFtK/4uZaRNrjvDYA9Dxjxa5dqS6oJD4gXrq5Ut6greEw/x/ktUMCkT3IbrumnSCBFJi N395D0GGjaQe9bHjVcnO//gKlGdcjg+8ex80jgWUA4eyIkFBn5vTD3RdhkhFL3ns3jCR MSuU4mGBU6G9BJgGmI869d7R5KTvgr0wcWg7WRCshyGV7G3kTU1z5IS30ebTJgnRnqro BuWrOW4RPCGIZQPRsuWaQhWH1a5frVXoXyd8NX+URIsB9xduzSyI4kiDI/HQSx4DfyYg mojA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=dkTd7+fa6lxYqV27Vh92cM+2mRu+yctTJXKIljjrt90=; b=kvg7mIv5hV2LO1RgFmne6m4M7+E0nl5FURLlWF2+/Oi/SNWqQVgSQdTbP3DA1Gjp57 y/bg+u84mty3xY7Ue6bguEbd1CX1RzcDkDeOpQUD2kfuaILLropge8RQ2+zhWj3vnKRN aS5OtKPblnPkb2V/UIkXiMc6qRZziRNdt47qMR3QnSEb/FeVqLA+5eMJtHsXiQRLiCTz vsvQOoUzhNUuvSBm0L49v4JoRYXN12bfcMq3j9RcTIE21z6R8mVcfOcJPbyUpeSEeYtm wO3Ydxn9M5vOrId4HAk+sEOjPnH8xJZCHZHJ+QISmq9BHumK3jLf1tzBUhi853IEjczJ lIJg== X-Gm-Message-State: AMCzsaUu4VRUOSs03711TwKG62FvPWs/w0Z486npEEpcNDrOrFUGGjm2 T0Dbn9/EdRtxXhFg/7286p0cw3lkAv6at4LuYPPiSw== X-Google-Smtp-Source: ABhQp+T3j32u1j0uvBYK6yDkFu937KOAw1/v8HZ71B5SDLkqEPCJRhCUaSdsG+LZQ7m348g21dmUuxRXIaz4t1MlC/w= X-Received: by 10.37.45.83 with SMTP id s19mr3158097ybe.400.1508509352730; Fri, 20 Oct 2017 07:22:32 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Fri, 20 Oct 2017 07:21:52 -0700 (PDT) In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A057BFB@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BA4@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BFB@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: Eric Rescorla Date: Fri, 20 Oct 2017 07:21:52 -0700 Message-ID: To: Med Boucadair Cc: "Paul Quinn (paulq)" , Alia Atlas , Kathleen Moriarty , "sfc@ietf.org" Content-Type: multipart/alternative; boundary="f4030435b0101c37e8055bfb3403" Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:22:37 -0000 --f4030435b0101c37e8055bfb3403 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Oct 20, 2017 at 7:12 AM, wrote: > Re-, > > > > Thank you, Eric. > > > > There is a misunderstanding here. The document does not claim DCs are saf= e > and secure environments. What it says is that the NSH specification is > scoped to be deployed in a single administrative domain with measures to, > e.g.,: > > - Protect against spoofed data > > - Leaking data outside a domain > > - Detect and prevent indefinite forwarding loop > Yes, and my point (and I believe Kathleen's) is that this is not a realistic operating model given the actual state of the world. > > A single administrative domain is not necessarily a secure or a safe one. > That=E2=80=99s evident. Attacks from within an administrative domain are = possible > with or without NSH. > > > > I=E2=80=99m reiterating my question: what specific attacks built-in/manda= tory > integrity mechanisms will solve for the particular case of NSH? Thank you= . > Tampering with the path packets take through the NFC. -Ekr > > Cheers, > > Med > > > > *De :* Eric Rescorla [mailto:ekr@rtfm.com] > *Envoy=C3=A9 :* vendredi 20 octobre 2017 15:56 > *=C3=80 :* BOUCADAIR Mohamed IMT/OLN > *Cc :* Paul Quinn (paulq); Alia Atlas; Kathleen Moriarty; sfc@ietf.org > > *Objet :* Re: [sfc] NSH DISCUSS Status > > > > It's explained in detail in my DISCUSS: > > > > "1. The assumption that the datacenter is a secure environment is not a > > reasonable one. As Kathleen and Adam both observer, datacenter > > breaches are common and that is why people are moving towards > > encryption inside the data center. I see that this draft has text > > claiming that this is only to be deployed in safe environments, but we > > know that technologies like this get deployed outside the locations > > for which we claim they are to be deployed, and there's nothing here > > to stop that. Moreover, the whole trend towards cloud computing pushes > > us away from designs in which you can safely talk about single secure > > zones." > > > > -Ekr > > > > > > > > On Fri, Oct 20, 2017 at 6:51 AM, wrote: > > Dear Eric, > > > > Can you please clarify this point: =E2=80=9CRather it's about the level o= f trust > to be placed in the networking path through which that data flows.=E2=80= =9D? > > > > Sorry if you have already explained it to the editors, but as a WG > participant I don=E2=80=99t have access to a record of such discussion. > > > > Thank you. > > > > Cheers, > > Med > > > > *De :* Eric Rescorla [mailto:ekr@rtfm.com] > *Envoy=C3=A9 :* vendredi 20 octobre 2017 15:45 > *=C3=80 :* Paul Quinn (paulq) > *Cc :* Alia Atlas; BOUCADAIR Mohamed IMT/OLN; Kathleen Moriarty; > sfc@ietf.org > *Objet :* Re: [sfc] NSH DISCUSS Status > > > > > > > > On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) > wrote: > > Hi Alia, > > > > > > > > On Oct 19, 2017, at 2:49 PM, Alia Atlas wrote: > > > > Hi Med, > > > > Since you directed this at me, there are efforts to have some discussions > and understand better the particular threats. > > Currently, there is no transport with integrity protection that is even a > SHOULD to implement, much less a MUST. There > > is no control-plane defined (beyond the BGP work) that describes detectin= g > issues. There is no OAM defined and adopted > > by the WG that detects or handles these types of attacks. I see the > structure that you are presuming, but none of these are > > available as normative references to NSH today. > > > > > > OAM does not address the security concern around integrity and devices. > If you and the WG believe OAM is the next =E2=80=9Cto do=E2=80=9D for the= WG, that=E2=80=99s fine, > but it=E2=80=99s orthogonal to the security points raised. > > > > > > I had recommended having a focused interim meeting to make sure that > everyone concerned understood the issues and > > worked through the threat analysis and possible solutions together. > > > > Let=E2=80=99s please not conflate the ongoing security discussion with OA= M, or > other topics. The security reality, as you pointed out in your email to > Eric, is that we, as a community and industry, accept a level of trust wr= t > network devices. > > > > I don't actually think that's the point of contention, at least from my > perspective. Rather it's about the level of trust to be placed in the > networking path through which that data flows. > > > > -Ekr > > > > > > The ongoing edits and dialogue with Kathleen and Eric are working throug= h > their concerns. An interim to talk about next SFC steps, post NSH, is a > different matter. > > > > > > > > At this point, clearly the most that could happen is a > > virtual interim. There are some background discussions going on. > > > > I do not want to assume what mixture will be acceptable to handle the > security concerns expressed by Kathleen and Eric > > and supported by a number of other ADs. > > > > I do greatly appreciate your attention and efforts to clarify and try to > move this work forward. I have been expressing concerns > > about the security aspects of this work since RFC 7665 went through the > publication process - and strongly encouraging serious > > WG focus to prevent precisely what has now happened. > > > > Regards, > > Alia > > > > > > On Thu, Oct 19, 2017 at 4:49 AM, wrote: > > Hi Alia, > > > > Can you please share with us the current status of the document and the > list of pending blocking points? > > > > I went through all public email exchanges, especially the ones related to > security, but it is not that easy to understand what are the remaining > issues that need fixes. > > > > In particular, is there a concern with assuming the current NSH threat > model? > > > > 1. NSH is secure against attacks induced by nodes that inject (spoofed) > NSH before entering an SFC-enabled domain. Indeed, SFC ingress nodes MUST > discard packets carrying NSH. > > 2. NSH is secure against attacks from within the SFC-enabled domain to > inject non-authorized context headers. From a service perspective, the > guard is the CP which is responsible for instructing the SFC-aware nodes > about the mandatory-to-process and optional-to-process context headers. > Furthermore, whatever the origin of a supplied context header, the last S= FF > of a chain (and egress nodes) MUST remove the NSH before forwarding > upstream. > > 3. NSH is secure against leaking privacy information outside an SFC > enabled domain. The last SFF of a chain (and egress nodes) MUST remove th= e > NSH before forwarding upstream. > > 4. NSH is secure against indefinite SF/SFF loops by means of SI and TTL > fields. > > 5. Control plane specific threats are out of scope, but the document > cites I-D.ietf-sfc-control-plane for the expected behavior when instructi= ng > SFC nodes. BTW, the secdir review of the CP requirements can be retrieved > here (https://datatracker.ietf.org/doc/review-ietf-sfc-control- > plane-02-secdir-early-meadows-2015-12-10/). > > 6. NSH does not share privacy data with non-authorized parties. Indeed, > data carried in context headers are derived from the original packet (e.g= ., > source IP address) or are already known to the operator (e.g., subscriber > identifier, policy identifier, service identifier). The context informati= on > is shared with nodes that are within the same administrative domain. > > 7. Like other communication protocols, attacks from within the network > are possible, but those are soften by relying on the procedures put in > place by operators for testing and validating nodes/features before actua= l > activation. NSH does not provide a built-in feature to prevent misbehavin= g > nodes, but recommends to rely on the security features provided by the > underlying transport encapsulation schemes. > > > > Let=E2=80=99s now focus on the typical =E2=80=9Cattacks=E2=80=9D that can= be issued from within > the network: > > 1. A misbehaving node redirect the traffic to non-authorized nodes > outside a domain: This is not NSH-specific. > > 2. A misbehaving SFC-unware node alters the content of a packet: This is > not NSH-specific. > > 3. A misbehaving SFC-aware node alters the content of NSH: > > i. It removes the NSH header from all packets it sees: > This will imply that the packets, the misbehaving node intercepts, will b= e > forwarded upstream without invoking the required SFs (which may be seen a= s > a feature, not a bug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)). M= ore seriously, the > OAM NSH feature will allow an operator to detect whether NSH packets are > travelling in accordance with SFC instructions of that domain. Running th= at > feature will help detecting the misbehaving node. > > ii. It modifies the content of SPI: This will imply that > these packets will be forwarded over a wrong path. Again, running OAM NSH > will allow the operator to detect whether a packet is travelling in > accordance with SFC instructions. Running that feature regularly will hel= p > identifying the misbehaving node and whether the SFC configuration of a > domain is aligned with the expected behavior. > > iii. It modifies the content of SI/TTL: This will increase > the authorized maximum SFF/SF hops. Not sure if there is a security probl= em > out there. > > iv. The misbehaving node is a classifier: The implications > will be severe from a service standpoint. NSH relies on OAM and > control-plane to detect such case. > > v. The misbehaving node is an SFF: Examples of > misbehaviors are: strip NSH, forward to a non-authorized SF, redirect the > traffic to a non-authorized nodes, etc. Like for the classifier case, NSH > relies on OAM and control-plane to detect such case. > > > > Are there specific attacks that are not listed above and that need more > attention from the WG? > > > > Thank you. > > > > Cheers, > > Med > > > > _______________________________________________ > sfc mailing list > sfc@ietf.org > https://www.ietf.org/mailman/listinfo/sfc > > > > > > > --f4030435b0101c37e8055bfb3403 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Fri, Oct 20, 2017 at 7:12 AM, <mohamed.boucadair@orange= .com> wrote:

Re-,

=C2=A0

Thank you, Eric.

=C2=A0

There is a misunderstanding her= e. The document does not claim DCs are safe and secure environments. What i= t says is that the NSH specification is scoped to be deployed in a single administrative domain with measures to, e.g.,:<= /u>

-=C2=A0=C2= =A0=C2=A0 Protect against spoofed da= ta

-=C2=A0=C2= =A0=C2=A0 Leaking data outside a dom= ain

-=C2=A0=C2= =A0=C2=A0 Detect and prevent indefin= ite forwarding loop

Yes, and my poi= nt (and I believe Kathleen's) is that this is not a realistic operating= model given the actual state of the world.
=C2=A0

=C2=A0

A single administrative domain = is not necessarily a secure or a safe one. That=E2=80=99s evident. Attacks = from within an administrative domain are possible with or without NSH.

=C2=A0

I=E2=80=99m reiterating my ques= tion: what specific attacks built-in/mandatory integrity mechanisms will so= lve for the particular case of NSH? Thank you.


Tampering with the path packets take through the= NFC.

-Ekr

=C2=A0

Cheers,

Med

=C2=A0

De=C2=A0: Eric= Rescorla [mailto:ekr@rtf= m.com]
Envoy=C3=A9=C2=A0: vendredi 20 octobre 2017 15:56
=C3=80=C2=A0: BOUCADAIR Mohamed IMT/OLN
Cc=C2=A0: Paul Quinn (paulq); Alia Atlas; Kathleen Moriarty; sfc@ietf.org

=

Objet=C2=A0: Re: [sfc] NSH DISCUSS Status
<= p>

=C2=A0

It's explained in detail in my DISCUSS:=C2=A0=

=C2=A0

"1. The assumption that the datacenter is a sec= ure environment is not a

r=
easonable one. As Kathleen and Adam both observer, datacenter=

b=
reaches are common and that is why people are moving towards<=
/span>
e=
ncryption inside the data center. I see that this draft has text<=
/u>
c=
laiming that this is only to be deployed in safe environments, but we
k=
now that technologies like this get deployed outside the locations
f=
or which we claim they are to be deployed, and there's nothing here<=
/u>
t=
o stop that. Moreover, the whole trend towards cloud computing pushes
u=
s away from designs in which you can safely talk about single secure=

z=
ones."
=C2=A0
-=
Ekr
=C2=A0
=C2=A0

=C2=A0

On Fri, Oct 20, 2017 at 6:51 AM, <mohamed.boucadair@orange= .com> wrote:

Dear Eric,

=C2=A0

Can you please clarify this poi= nt: =E2=80=9CRather it's about the level of trust to be placed in the n= etworking path through which that data flows.=E2=80=9D?

=C2=A0

Sorry if you have already expla= ined it to the editors, but as a WG participant I don=E2=80=99t have access to a record of such discussion.

=C2=A0

Thank you.=

=C2=A0

Cheers,

Med

=C2=A0

De=C2=A0: Eric= Rescorla [mailto:ekr@rtf= m.com]
Envoy=C3=A9=C2=A0: vendredi 20 octobre 2017 15:45
=C3=80=C2=A0: Paul Quinn (paulq)
Cc=C2=A0: Alia Atlas; BOUCADAIR Mohamed IMT/OLN; Kathleen Moriarty; = sfc@ietf.org
Objet=C2=A0: Re: [sfc] NSH DISCUSS Status

=C2=A0

=C2=A0

=C2=A0

On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) = <paulq@cisco.com> wrote:

Hi Alia,

=C2=A0

=C2=A0

=C2=A0<= /p>

=C2=A0

Hi Med,

=C2=A0

Since you directed this at me, there are efforts to = have some discussions and understand better the particular threats.<= u>

Currently, there is no transport with integrity prot= ection that is even a SHOULD to implement, much less a MUST.=C2=A0 There=

is no control-plane defined (beyond the BGP work) th= at describes detecting issues.=C2=A0 There is no OAM defined and adopted=

by the WG that detects or handles these types of att= acks. I see the structure that you are presuming, but none of these are<= /u>

available as normative references to NSH today.

=C2=A0

=C2=A0

OAM does not address the security concern around int= egrity and devices.=C2=A0 If you and the WG believe OAM is the next =E2=80= =9Cto do=E2=80=9D for the WG, that=E2=80=99s fine, but it=E2=80=99s orthogo= nal to the security points raised.

=C2=A0

=C2=A0<= /p>

I had recommended having a focused interim meeting t= o make sure that everyone concerned understood the issues and=

worked through the threat analysis and possible solu= tions together.

=C2=A0

Let=E2=80=99s please not conflate the ongoing securi= ty discussion with OAM, or other topics.=C2=A0 The security reality, as you= pointed out in your email to Eric, is that we, as a community and industry, accept a level of trust wrt network devices. <= /p>

=C2=A0

I don't actually think that's the point of c= ontention, at least from my perspective. Rather it's about the level of= trust to be placed in the networking path through which that data flows.

=C2=A0

-Ekr

=C2=A0

=C2=A0

=C2=A0The ongoing edits and dialogue with Kathleen a= nd Eric are working through their concerns.=C2=A0 An interim to talk about = next SFC steps, post NSH, is a different matter. =C2=A0

=C2=A0

=C2=A0

=C2=A0<= /p>

At this point, clearly the most that could happen is= a

virtual interim.=C2=A0 There are some background dis= cussions going on.

=C2=A0

I do not want to assume what mixture will be accepta= ble to handle the security concerns expressed by Kathleen and Eric

and supported by a number of other ADs.

=C2=A0

I do greatly appreciate your attention and efforts t= o clarify and try to move this work forward. I have been expressing concern= s

about the security aspects of this work since RFC 76= 65 went through the publication process - and strongly encouraging serious<= u>

WG focus to prevent precisely what has now happened.=

=C2=A0

Regards,

Alia

=C2=A0

=C2=A0

On Thu, Oct 19, 2017 at 4:49 AM, <mohamed.boucadair@orange= .com> wrote:

Hi Alia,

=C2=A0

Can you please share with us the current st= atus of the document and the list of pending blocking points?=

=C2=A0

I went through all public email exchanges, = especially the ones related to security, but it is not that easy to understand what are the remaining issues that need fixes.=

=C2=A0

In particular, is there a concern with assu= ming the current NSH threat model?

=C2=A0

1.=C2=A0 NSH is secure against attacks induced by nodes that inject = (spoofed) NSH before entering an SFC-enabled domain. Indeed, SFC ingress no= des MUST discard packets carrying NSH.

2.=C2=A0 NSH is secure against attacks from within the SFC-enabled d= omain to inject non-authorized context headers. From a service perspective,= the guard is the CP which is responsible for instructing the SFC-aware nodes about the mandatory-to-process and optiona= l-to-process context headers. Furthermore, whatever the origin of a supplie= d context header, the last SFF of a chain (and egress nodes) MUST remove th= e NSH before forwarding upstream.

3.=C2=A0 NSH is secure against leaking privacy information outside a= n SFC enabled domain. The last SFF of a chain (and egress nodes) MUST remov= e the NSH before forwarding upstream.

4.=C2=A0 NSH is secure against indefinite SF/SFF loops by means of S= I and TTL fields.

5.=C2=A0 Control plane specific threats are out of scope, but the do= cument cites I-D.ietf-sfc-control-plane for the expected behavior when inst= ructing SFC nodes. BTW, the secdir review of the CP requirements can be retrieved here (https://datatracker.ietf.org/doc/review-ietf-sfc-co= ntrol-plane-02-secdir-early-meadows-2015-12-10/).

6.=C2=A0 NSH does not share privacy data with non-authorized parties= . Indeed, data carried in context headers are derived from the original pac= ket (e.g., source IP address) or are already known to the operator (e.g., subscriber identifier, policy identifier, service i= dentifier). The context information is shared with nodes that are within th= e same administrative domain. =C2=A0

7.=C2=A0 Like other communication protocols, attacks from within the= network are possible, but those are soften by relying on the procedures pu= t in place by operators for testing and validating nodes/features before actual activation. NSH does not provide a built-in f= eature to prevent misbehaving nodes, but recommends to rely on the security= features provided by the underlying transport encapsulation schemes.

=C2=A0

Let=E2=80=99s now focus on the typical =E2= =80=9Cattacks=E2=80=9D that can be issued from within the network:

1.=C2=A0 A misbehaving node redirect the traffic to non-authorized n= odes outside a domain: This is not NSH-specific.

2.=C2=A0 A misbehaving SFC-unware node alters the content of a packe= t: This is not NSH-specific.

3.=C2=A0 A misbehaving SFC-aware node alters the content of NSH:

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 i.=C2=A0=C2=A0=C2=A0=C2=A0 It removes the NSH header from all packets it sees: This wi= ll imply that the packets, the misbehaving node intercepts, will be forward= ed upstream without invoking the required SFs (which may be seen as a feature, not a bug if one dislikes =E2=80=9Cmiddle= boxes=E2=80=9D :)). More seriously, the OAM NSH feature will allow an opera= tor to detect whether NSH packets are travelling in accordance with SFC ins= tructions of that domain. Running that feature will help detecting the misbehaving node.

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 ii.=C2=A0=C2=A0=C2=A0=C2=A0 It modifies the content of SPI: This will imply that these = packets will be forwarded over a wrong path. Again, running OAM NSH will al= low the operator to detect whether a packet is travelling in accordance with SFC instructions. Running that feature regul= arly will help identifying the misbehaving node and whether the SFC configu= ration of a domain is aligned with the expected behavior.<= /u>

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 iii.=C2=A0=C2=A0=C2=A0=C2=A0 It modifies the content of SI/TTL: This will increase the a= uthorized maximum SFF/SF hops. Not sure if there is a security problem out = there.

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 iv.=C2=A0=C2=A0=C2=A0=C2=A0 The misbehaving node is a classifier: The implications will= be severe from a service standpoint. NSH relies on OAM and control-plane t= o detect such case. =C2=A0=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 v.=C2=A0=C2=A0=C2=A0=C2=A0 The misbehaving node is an SFF: Examples of misbehaviors ar= e: strip NSH, forward to a non-authorized SF, redirect the traffic to a non= -authorized nodes, etc. Like for the classifier case, NSH relies on OAM and control-plane to detect such case. =C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0

Are there specific attacks that are not lis= ted above and that need more attention from the WG?

=C2=A0

Thank you.

=C2=A0

Cheers,

Med

=C2=A0

_______________________________________________=
sfc mailing list
sfc@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/sfc

=C2=A0

=C2=A0

=C2=A0


--f4030435b0101c37e8055bfb3403-- From nobody Fri Oct 20 07:26:51 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2711D1331D9 for ; Fri, 20 Oct 2017 07:26:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ux2KCSe-0ae1 for ; Fri, 20 Oct 2017 07:26:46 -0700 (PDT) Received: from mail-yw0-x22b.google.com (mail-yw0-x22b.google.com [IPv6:2607:f8b0:4002:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8853C1241F3 for ; Fri, 20 Oct 2017 07:26:46 -0700 (PDT) Received: by mail-yw0-x22b.google.com with SMTP id j4so6502072ywb.2 for ; Fri, 20 Oct 2017 07:26:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=aMEShmuYEwLmv2NBpksC2ww1mIdXTFeaezbMcYXGoYo=; b=IdFUocuYHmv7ynd8y1n0Ze3df+aLOQe7jh1RxD7PE2+RnxEkG3YBs3TUVzIK38TiFj XLOKGkJiE4ZEpDEgpy2UIaoBKY+qGY4xh9leTbnOPI6Q91OH0s1m2Y3wqfXygpKTcR2K nKBTz1RAPMvmLruFPH65anBAhrHuN5HO11EiI2wQRxbGRMG/t+xd4bSnJNYqZY60JTK2 /Os0ASBB8llUPPEv7ELDuSmz/JEKVrdq35CXs4GbmWosSSriHf5BMRxFFV3iF87fCq0Z opKddA+mIrp/Zkfy83M+PZ1+gi4OKGTm6D/eSbu5EsCWkvS3/sZSXXPFQkKZOo6s1z/k vwNg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=aMEShmuYEwLmv2NBpksC2ww1mIdXTFeaezbMcYXGoYo=; b=O3vB5iXsJ9kdv4QvpuEVPMnZ2z5T6J/w8n1BMclm/XYnnaQ/L9haUclHWVHdl7XGu2 1tg3MPibeGDlA25uGDIud/I/1TnegXmUYTY4i6WwYVX0t60bPgcah8im6Re3smt7E1EX Yu4JcQgihu2lE2R9cYNzPta4UNu0jkzT9cDUWzr7lrzSCm51QxXRsDYHDxXq9ewl008B eSyhxDiY8itK81I0i2rwCJQowxxlFiSWK4rKvxdcPxTGE+60R+4U03WyrT10bVt4RSzd rBkEKlO8TBym6gctHJfKs3bD0jpluDoBiF3hk6Y7KisFyqqYRQKbXDs3eTrJBQiv1KHZ KdtQ== X-Gm-Message-State: AMCzsaVlocIYbIWKplX6fvqQeQ/YkH0FpzUMz3pODg73AD1DWerbU4Px INg7ZATwDREiH0LLUIX7gLUhOV79QZTq1N8rf1Kfcg== X-Google-Smtp-Source: ABhQp+RPEN42+Rgk8Gdqzibf5EZeuTj3qBzlGvz37zyVm8OYbiGYnHagE0zE6a3JQdXPwsSNiPKHz1VRZ5yhRFC3PAI= X-Received: by 10.129.108.3 with SMTP id h3mr3342641ywc.327.1508509605756; Fri, 20 Oct 2017 07:26:45 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Fri, 20 Oct 2017 07:26:04 -0700 (PDT) In-Reply-To: References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> From: Eric Rescorla Date: Fri, 20 Oct 2017 07:26:04 -0700 Message-ID: To: "Carlos Pignataro (cpignata)" Cc: "Paul Quinn (paulq)" , Kathleen Moriarty , Med Boucadair , "sfc@ietf.org" , Alia Atlas Content-Type: multipart/alternative; boundary="001a114d9a28310f61055bfb4391" Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:26:50 -0000 --001a114d9a28310f61055bfb4391 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Oct 20, 2017 at 7:18 AM, Carlos Pignataro (cpignata) < cpignata@cisco.com> wrote: > > On Oct 20, 2017, at 10:08 AM, Eric Rescorla wrote: > > > On Fri, Oct 20, 2017 at 7:01 AM, Carlos Pignataro (cpignata) < > cpignata@cisco.com> wrote: > >> Eric, >> >> On Oct 20, 2017, at 9:45 AM, Eric Rescorla wrote: >> >> >> >> On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) >> wrote: >> >>> Hi Alia, >>> >>> >>> >>> On Oct 19, 2017, at 2:49 PM, Alia Atlas wrote: >>> >>> Hi Med, >>> >>> Since you directed this at me, there are efforts to have some >>> discussions and understand better the particular threats. >>> Currently, there is no transport with integrity protection that is even >>> a SHOULD to implement, much less a MUST. There >>> is no control-plane defined (beyond the BGP work) that describes >>> detecting issues. There is no OAM defined and adopted >>> by the WG that detects or handles these types of attacks. I see the >>> structure that you are presuming, but none of these are >>> available as normative references to NSH today. >>> >>> >>> OAM does not address the security concern around integrity and devices. >>> If you and the WG believe OAM is the next =E2=80=9Cto do=E2=80=9D for t= he WG, that=E2=80=99s fine, >>> but it=E2=80=99s orthogonal to the security points raised. >>> >>> >>> I had recommended having a focused interim meeting to make sure that >>> everyone concerned understood the issues and >>> worked through the threat analysis and possible solutions together. >>> >>> >>> Let=E2=80=99s please not conflate the ongoing security discussion with = OAM, or >>> other topics. The security reality, as you pointed out in your email t= o >>> Eric, is that we, as a community and industry, accept a level of trust = wrt >>> network devices. >>> >> >> I don't actually think that's the point of contention, at least from my >> perspective. Rather it's about the level of trust to be placed in the >> networking path through which that data flows. >> >> >> Understood. How about this? >> >> X.2. Transport Encapsulation Security >> >> NSH is always encapsulated by an outer transport >> encapsulation as detailed in Section 4 of this >> specification, and as depicted in Figure 1. If >> an operator >> deems cryptographic integrity protection >> necessary due to >> their risk analysis, then an outer transport >> encapsulation >> that provides such protection [RFC6071], such >> as IPsec, MUST >> be used. >> > > I can't speak for Kathleen, but I don't really think this gets the job > done. > > As described in RFC 3552 (https://tools.ietf.org/html/rfc3552#section-3) > our threat model is that the Internet is untrusted. > > > Yes. Just to clarify, though, NSH is not an end-to-end protocol. It > doesn=E2=80=99t =E2=80=9Cstart=E2=80=9D in a host and =E2=80=9Cend=E2=80= =9D in a host/server. It=E2=80=99s > a network-centric like Provisioned Virtual Private Networks, Traffic > Engineering, MPLS. > Sure, and in this case it's the network between the nodes that is relevant here. That means we should be designing protocols that are safe to operate in > that environment, which in this case means that the protocol should eithe= r > (a) come with a built-in security mechanism or (b) be run over a secure > transport. I don't think telling operators "you figure it out" reflects > best current practice. > > > But=E2=80=A6 we are saying =E2=80=9Crun over a secure transport=E2=80=9D. > Well, that's not what your proposed text says you should do it "If an operator deems cryptographic integrity protection necessary due to their risk analysis". If you want to say "this is only specified to run over a secure transport" then fine, but that's not what this says. -Ekr > -Ekr > > >> >> >> =E2=80=94 Carlos. >> >> -Ekr >> >> >> >>> The ongoing edits and dialogue with Kathleen and Eric are working >>> through their concerns. An interim to talk about next SFC steps, post = NSH, >>> is a different matter. >>> >>> >>> >>> At this point, clearly the most that could happen is a >>> virtual interim. There are some background discussions going on. >>> >>> I do not want to assume what mixture will be acceptable to handle the >>> security concerns expressed by Kathleen and Eric >>> and supported by a number of other ADs. >>> >>> I do greatly appreciate your attention and efforts to clarify and try t= o >>> move this work forward. I have been expressing concerns >>> about the security aspects of this work since RFC 7665 went through the >>> publication process - and strongly encouraging serious >>> WG focus to prevent precisely what has now happened. >>> >>> Regards, >>> Alia >>> >>> >>> On Thu, Oct 19, 2017 at 4:49 AM, wrote: >>> >>>> Hi Alia, >>>> >>>> >>>> >>>> Can you please share with us the current status of the document and th= e >>>> list of pending blocking points? >>>> >>>> >>>> >>>> I went through all public email exchanges, especially the ones related >>>> to security, but it is not that easy to understand what are the remain= ing >>>> issues that need fixes. >>>> >>>> >>>> >>>> In particular, is there a concern with assuming the current NSH threat >>>> model? >>>> >>>> >>>> >>>> 1. NSH is secure against attacks induced by nodes that inject >>>> (spoofed) NSH before entering an SFC-enabled domain. Indeed, SFC ingre= ss >>>> nodes MUST discard packets carrying NSH. >>>> >>>> 2. NSH is secure against attacks from within the SFC-enabled domain >>>> to inject non-authorized context headers. From a service perspective, = the >>>> guard is the CP which is responsible for instructing the SFC-aware nod= es >>>> about the mandatory-to-process and optional-to-process context headers= . >>>> Furthermore, whatever the origin of a supplied context header, the las= t SFF >>>> of a chain (and egress nodes) MUST remove the NSH before forwarding >>>> upstream. >>>> >>>> 3. NSH is secure against leaking privacy information outside an SFC >>>> enabled domain. The last SFF of a chain (and egress nodes) MUST remove= the >>>> NSH before forwarding upstream. >>>> >>>> 4. NSH is secure against indefinite SF/SFF loops by means of SI and >>>> TTL fields. >>>> >>>> 5. Control plane specific threats are out of scope, but the document >>>> cites I-D.ietf-sfc-control-plane for the expected behavior when instru= cting >>>> SFC nodes. BTW, the secdir review of the CP requirements can be retrie= ved >>>> here (https://datatracker.ietf.org/doc/review-ietf-sfc-control-pl >>>> ane-02-secdir-early-meadows-2015-12-10/). >>>> >>>> 6. NSH does not share privacy data with non-authorized parties. >>>> Indeed, data carried in context headers are derived from the original >>>> packet (e.g., source IP address) or are already known to the operator >>>> (e.g., subscriber identifier, policy identifier, service identifier). = The >>>> context information is shared with nodes that are within the same >>>> administrative domain. >>>> >>>> 7. Like other communication protocols, attacks from within the >>>> network are possible, but those are soften by relying on the procedure= s put >>>> in place by operators for testing and validating nodes/features before >>>> actual activation. NSH does not provide a built-in feature to prevent >>>> misbehaving nodes, but recommends to rely on the security features pro= vided >>>> by the underlying transport encapsulation schemes. >>>> >>>> >>>> >>>> Let=E2=80=99s now focus on the typical =E2=80=9Cattacks=E2=80=9D that = can be issued from within >>>> the network: >>>> >>>> 1. A misbehaving node redirect the traffic to non-authorized nodes >>>> outside a domain: This is not NSH-specific. >>>> >>>> 2. A misbehaving SFC-unware node alters the content of a packet: This >>>> is not NSH-specific. >>>> >>>> 3. A misbehaving SFC-aware node alters the content of NSH: >>>> >>>> i. It removes the NSH header from all packets it sees: >>>> This will imply that the packets, the misbehaving node intercepts, wil= l be >>>> forwarded upstream without invoking the required SFs (which may be see= n as >>>> a feature, not a bug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :))= . More seriously, the >>>> OAM NSH feature will allow an operator to detect whether NSH packets a= re >>>> travelling in accordance with SFC instructions of that domain. Running= that >>>> feature will help detecting the misbehaving node. >>>> >>>> ii. It modifies the content of SPI: This will imply that >>>> these packets will be forwarded over a wrong path. Again, running OAM = NSH >>>> will allow the operator to detect whether a packet is travelling in >>>> accordance with SFC instructions. Running that feature regularly will = help >>>> identifying the misbehaving node and whether the SFC configuration of = a >>>> domain is aligned with the expected behavior. >>>> >>>> iii. It modifies the content of SI/TTL: This will increase >>>> the authorized maximum SFF/SF hops. Not sure if there is a security pr= oblem >>>> out there. >>>> >>>> iv. The misbehaving node is a classifier: The >>>> implications will be severe from a service standpoint. NSH relies on O= AM >>>> and control-plane to detect such case. >>>> >>>> v. The misbehaving node is an SFF: Examples of >>>> misbehaviors are: strip NSH, forward to a non-authorized SF, redirect = the >>>> traffic to a non-authorized nodes, etc. Like for the classifier case, = NSH >>>> relies on OAM and control-plane to detect such case. >>>> >>>> >>>> >>>> Are there specific attacks that are not listed above and that need mor= e >>>> attention from the WG? >>>> >>>> >>>> >>>> Thank you. >>>> >>>> >>>> >>>> Cheers, >>>> >>>> Med >>>> >>> >>> _______________________________________________ >>> sfc mailing list >>> sfc@ietf.org >>> https://www.ietf.org/mailman/listinfo/sfc >>> >>> >>> >> _______________________________________________ >> sfc mailing list >> sfc@ietf.org >> https://www.ietf.org/mailman/listinfo/sfc >> >> >> > > --001a114d9a28310f61055bfb4391 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Fri, Oct 20, 2017 at 7:18 AM, Carlos Pignataro (cpignata) <cpigna= ta@cisco.com> wrote:

On Oct 20, 2017, at 10:08 AM, Eric Rescorla <ekr@rtfm.com> wrote:


On Fri, Oct 20, 2017 at 7:01 AM, Carlos Pignatar= o (cpignata) <cpignata@cisco.com> wrote:
Eric,

On Oct 20, 2017, at 9:45 AM, Eric Rescorla <ekr@rtfm.com> wrote:



On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (pau= lq) <paulq@cisco.com> wrote:
Hi Alia,




Hi Med,

Since you directed this at me, there are efforts to have some discussi= ons and understand better the particular threats.
Currently, there is no transport with integrity protection that is eve= n a SHOULD to implement, much less a MUST.=C2=A0 There
is no control-plane defined (beyond the BGP work) that describes detec= ting issues.=C2=A0 There is no OAM defined and adopted
by the WG that detects or handles these types of attacks. I see the st= ructure that you are presuming, but none of these are
available as normative references to NSH today.


OAM does not address the security concern around integrity and devices= .=C2=A0 If you and the WG believe OAM is the next =E2=80=9Cto do=E2=80=9D f= or the WG, that=E2=80=99s fine, but it=E2=80=99s orthogonal to the security= points raised.


I had recommended having a focused interim meeting to make sure that e= veryone concerned understood the issues and
worked through the threat analysis and possible solutions together.

Let=E2=80=99s please not conflate the ongoing security discussion with= OAM, or other topics.=C2=A0 The security reality, as you pointed out in yo= ur email to Eric, is that we, as a community and industry, accept a level o= f trust wrt network devices.

I don't actually think that's the point of contention, at leas= t from my perspective. Rather it's about the level of trust to be place= d in the networking path through which that data flows.
Understood. How about this?

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 X.2.=C2=A0=C2=A0Trans= port Encapsulation Security

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0NSH is always encapsulated by an outer transport
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0encapsulation as detailed in Section 4 of this
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0specification, and as depicted in Figure 1.=C2=A0=C2=A0If a= n operator
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0deems cryptographic integrity protection necessary due to =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0their risk analysis, then an outer transport encapsulation<= br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0that provides such protection [RFC6071], such as=C2=A0IPsec= , MUST
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0be used.

I can't speak for Kathleen, but I don't really think this gets= the job done.

As described in RFC 3552 (https://tools.ietf.org/html/rfc3552#se= ction-3) our threat model is that the Internet is untrusted.

Yes. Just to clarify, though, NSH is not an end-to-end pro= tocol. It doesn=E2=80=99t =E2=80=9Cstart=E2=80=9D in a host and =E2=80=9Cen= d=E2=80=9D in a host/server. It=E2=80=99s a=C2=A0network-centric like=C2=A0= Provisioned Virtual Private Networks, Traffic Engineering, MPLS.

Sure, and in this case it's the= network between the nodes that is relevant here.

That means we should be designing protocols that are safe to operate i= n that environment, which in this case means that the protocol should eithe= r (a) come with a built-in security mechanism or (b) be run over a secure t= ransport. I don't think telling operators "you figure it out" reflects best current prac= tice.


But=E2=80=A6 we are saying =E2=80=9Crun over a secure transport= =E2=80=9D.

Well, that'= ;s not what your proposed text says you should do it "If an operator d= eems cryptographic integrity protection necessary due to their risk analysi= s". If you want to say "this is only specified to run over a secu= re transport" then fine, but that's not what this says.
=
-Ekr



-Ekr
=C2=A0


=E2=80=94 Carlos.

-Ekr

=C2=A0
=C2=A0The ongoing edits and dialogue with Kathleen and Eric are workin= g through their concerns.=C2=A0 An interim to talk about next SFC steps, po= st NSH, is a different matter. =C2=A0



At this point, clearly the most that could happen is a
virtual interim.=C2=A0 There are some background discussions going on.=

I do not want to assume what mixture will be acceptable to handle the = security concerns expressed by Kathleen and Eric
and supported by a number of other ADs.

I do greatly appreciate your attention and effor= ts to clarify and try to move this work forward. I have been expressing con= cerns
about the security aspects of this work since RF= C 7665 went through the publication process - and strongly encouraging seri= ous
WG focus to prevent precisely what has now happe= ned.

Regards,
Alia


On Thu, Oct 19, 2017 at 4:49 AM, <moham= ed.boucadair@orange.com> wrote:

Hi Alia,

=C2=A0

Can you please share with us the current stat= us of the document and the list of pending blocking points?

=C2=A0

I went through all public email exchanges, es= pecially the ones related to security, but it is not that easy to understan= d what are the remaining issues that need fixes.

=C2=A0

In particular, is there a concern with assumi= ng the current NSH threat model?

=C2=A0

1.= =C2=A0 NSH is secure against attacks induced by= nodes that inject (spoofed) NSH before entering an SFC-enabled domain. Ind= eed, SFC ingress nodes MUST discard packets carrying NSH.

2.= =C2=A0 NSH is secure against attacks from withi= n the SFC-enabled domain to inject non-authorized context headers. From a s= ervice perspective, the guard is the CP which is responsible for instructing the SFC-aware nodes about t= he mandatory-to-process and optional-to-process context headers. Furthermor= e, whatever the origin of a supplied context header, the last SFF of a chai= n (and egress nodes) MUST remove the NSH before forwarding upstream.

3.= =C2=A0 NSH is secure against leaking privacy in= formation outside an SFC enabled domain. The last SFF of a chain (and egres= s nodes) MUST remove the NSH before forwarding upstream.

4.= =C2=A0 NSH is secure against indefinite SF/SFF = loops by means of SI and TTL fields.

5.= =C2=A0 Control plane specific threats are out o= f scope, but the document cites I-D.ietf-sfc-control-plane for the expected= behavior when instructing SFC nodes. BTW, the secdir review of the CP requirements can be retrieved here= (https://datatracker= .ietf.org/doc/review-ietf-sfc-control-plane-02-secdir-early-meado= ws-2015-12-10/).

6.= =C2=A0 NSH does not share privacy data with non= -authorized parties. Indeed, data carried in context headers are derived fr= om the original packet (e.g., source IP address) or are already known to the operator (e.g., subscriber = identifier, policy identifier, service identifier). The context information= is shared with nodes that are within the same administrative domain. =C2= =A0

7.= =C2=A0 Like other communication protocols, atta= cks from within the network are possible, but those are soften by relying o= n the procedures put in place by operators for testing and validating nodes/features before actual activ= ation. NSH does not provide a built-in feature to prevent misbehaving nodes= , but recommends to rely on the security features provided by the underlyin= g transport encapsulation schemes.

=C2=A0

Let=E2=80=99s now focus on the typical =E2=80= =9Cattacks=E2=80=9D that can be issued from within the network:

1.= =C2=A0 A misbehaving node redirect the traffic = to non-authorized nodes outside a domain: This is not NSH-specific.<= u>

2.= =C2=A0 A misbehaving SFC-unware node alters the= content of a packet: This is not NSH-specific.

3.= =C2=A0 A misbehaving SFC-aware node alters the = content of NSH:

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 i.=C2=A0=C2=A0=C2= =A0=C2=A0 It removes the NSH header from all packe= ts it sees: This will imply that the packets, the misbehaving node intercep= ts, will be forwarded upstream without invoking the required SFs (which may be seen as a feature, not a b= ug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)). More seriously, the O= AM NSH feature will allow an operator to detect whether NSH packets are tra= velling in accordance with SFC instructions of that domain. Running that feature will help detecting the misbehaving node.

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ii.=C2=A0=C2=A0= =C2=A0=C2=A0 It modifies the content of SPI: This wil= l imply that these packets will be forwarded over a wrong path. Again, runn= ing OAM NSH will allow the operator to detect whether a packet is travelling in accordance with SFC instructio= ns. Running that feature regularly will help identifying the misbehaving no= de and whether the SFC configuration of a domain is aligned with the expect= ed behavior.

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 iii.=C2=A0=C2=A0= =C2=A0=C2=A0 It modifies the content of SI/TTL: This = will increase the authorized maximum SFF/SF hops. Not sure if there is a se= curity problem out there.

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 iv.=C2=A0=C2=A0= =C2=A0=C2=A0 The misbehaving node is a classifier: Th= e implications will be severe from a service standpoint. NSH relies on OAM = and control-plane to detect such case. =C2=A0=C2=A0

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 v.=C2=A0=C2=A0=C2= =A0=C2=A0 The misbehaving node is an SFF: Examples= of misbehaviors are: strip NSH, forward to a non-authorized SF, redirect t= he traffic to a non-authorized nodes, etc. Like for the classifier case, NSH relies on OAM and control-pl= ane to detect such case. =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0

Are there specific attacks that are not liste= d above and that need more attention from the WG?

=C2=A0

Thank you.

=C2=A0

Cheers,

Med


_______________________________________________
sfc mailing list
sfc@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/sfc


_______________________________________________
sfc mailing list
sfc@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/sfc




--001a114d9a28310f61055bfb4391-- From nobody Fri Oct 20 07:37:42 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33F771331D9 for ; Fri, 20 Oct 2017 07:37:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.519 X-Spam-Level: X-Spam-Status: No, score=-14.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZK4rWeagP3w1 for ; Fri, 20 Oct 2017 07:37:38 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A672A132697 for ; Fri, 20 Oct 2017 07:37:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=20306; q=dns/txt; s=iport; t=1508510258; x=1509719858; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=ir0dzD0a0RCmxzUi7aaE6oLogcE6aVDkJXUeC/PMJi8=; b=ZsqsGPBi6xxFLjLlXtB+s7tCH7wjtq0G2zDdoknWyzwritBQudqABZcD VeD0acpEfUuL1/6ikA5u4k8pq/3+oLdksM08t+onPfAzoMUpbbxS1uz7J KeHE7ha6YJt0SQBCLY9+pHs5g7EoaMLu36CdoLsz1AjGWn99CC0eCcP5X k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DzAAC+CepZ/4QNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg19kbicHg3OKH48/gVSIcIgshUEQggEKJ4UUAhqEIT8YAQIBAQE?= =?us-ascii?q?BAQEBayiFHgYjVhACAQgOMQMCAgIfERQRAgQOBRQHiSFMAxUQqhiCJ4c7DYNZA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEBGAWDLoIHgVCBaSkLgWmBDYJegXQBEgEJgyo?= =?us-ascii?q?vgjIFoSM8AodhiBWEeYIVhXmLEY0KiEMCERkBgTgBHziBA1h6FXYBgjaCI4I8d?= =?us-ascii?q?ogrgSSBEQEBAQ?= X-IronPort-AV: E=Sophos; i="5.43,405,1503360000"; d="scan'208,217"; a="19203800" Received: from alln-core-10.cisco.com ([173.36.13.132]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Oct 2017 14:37:37 +0000 Received: from XCH-RCD-020.cisco.com (xch-rcd-020.cisco.com [173.37.102.30]) by alln-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id v9KEbbmw013028 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 20 Oct 2017 14:37:37 GMT Received: from xch-rcd-008.cisco.com (173.37.102.18) by XCH-RCD-020.cisco.com (173.37.102.30) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 20 Oct 2017 09:37:36 -0500 Received: from xch-rcd-008.cisco.com ([173.37.102.18]) by XCH-RCD-008.cisco.com ([173.37.102.18]) with mapi id 15.00.1320.000; Fri, 20 Oct 2017 09:37:36 -0500 From: "Paul Quinn (paulq)" To: Eric Rescorla CC: "Carlos Pignataro (cpignata)" , Kathleen Moriarty , Med Boucadair , "sfc@ietf.org" , Alia Atlas Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wAfdV8AACco6AAAAH+0gAAAjF6AAAA9/YAAAFyKAAAARIsAAABmhQA= Date: Fri, 20 Oct 2017 14:37:36 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.19.17.229] Content-Type: multipart/alternative; boundary="_000_B6F0BF70266942DEA1933CAA38926DB6ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:37:41 -0000 --_000_B6F0BF70266942DEA1933CAA38926DB6ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIE9jdCAyMCwgMjAxNywgYXQgMTA6MjYgQU0sIEVyaWMgUmVzY29ybGEgPGVrckBydGZt LmNvbTxtYWlsdG86ZWtyQHJ0Zm0uY29tPj4gd3JvdGU6DQoNCg0KDQpPbiBGcmksIE9jdCAyMCwg MjAxNyBhdCA3OjE4IEFNLCBDYXJsb3MgUGlnbmF0YXJvIChjcGlnbmF0YSkgPGNwaWduYXRhQGNp c2NvLmNvbTxtYWlsdG86Y3BpZ25hdGFAY2lzY28uY29tPj4gd3JvdGU6DQoNCk9uIE9jdCAyMCwg MjAxNywgYXQgMTA6MDggQU0sIEVyaWMgUmVzY29ybGEgPGVrckBydGZtLmNvbTxtYWlsdG86ZWty QHJ0Zm0uY29tPj4gd3JvdGU6DQoNCg0KT24gRnJpLCBPY3QgMjAsIDIwMTcgYXQgNzowMSBBTSwg Q2FybG9zIFBpZ25hdGFybyAoY3BpZ25hdGEpIDxjcGlnbmF0YUBjaXNjby5jb208bWFpbHRvOmNw aWduYXRhQGNpc2NvLmNvbT4+IHdyb3RlOg0KRXJpYywNCg0KT24gT2N0IDIwLCAyMDE3LCBhdCA5 OjQ1IEFNLCBFcmljIFJlc2NvcmxhIDxla3JAcnRmbS5jb208bWFpbHRvOmVrckBydGZtLmNvbT4+ IHdyb3RlOg0KDQoNCg0KT24gRnJpLCBPY3QgMjAsIDIwMTcgYXQgNjozMSBBTSwgUGF1bCBRdWlu biAocGF1bHEpIDxwYXVscUBjaXNjby5jb208bWFpbHRvOnBhdWxxQGNpc2NvLmNvbT4+IHdyb3Rl Og0KSGkgQWxpYSwNCg0KDQoNCk9uIE9jdCAxOSwgMjAxNywgYXQgMjo0OSBQTSwgQWxpYSBBdGxh cyA8YWthdGxhc0BnbWFpbC5jb208bWFpbHRvOmFrYXRsYXNAZ21haWwuY29tPj4gd3JvdGU6DQoN CkhpIE1lZCwNCg0KU2luY2UgeW91IGRpcmVjdGVkIHRoaXMgYXQgbWUsIHRoZXJlIGFyZSBlZmZv cnRzIHRvIGhhdmUgc29tZSBkaXNjdXNzaW9ucyBhbmQgdW5kZXJzdGFuZCBiZXR0ZXIgdGhlIHBh cnRpY3VsYXIgdGhyZWF0cy4NCkN1cnJlbnRseSwgdGhlcmUgaXMgbm8gdHJhbnNwb3J0IHdpdGgg aW50ZWdyaXR5IHByb3RlY3Rpb24gdGhhdCBpcyBldmVuIGEgU0hPVUxEIHRvIGltcGxlbWVudCwg bXVjaCBsZXNzIGEgTVVTVC4gIFRoZXJlDQppcyBubyBjb250cm9sLXBsYW5lIGRlZmluZWQgKGJl eW9uZCB0aGUgQkdQIHdvcmspIHRoYXQgZGVzY3JpYmVzIGRldGVjdGluZyBpc3N1ZXMuICBUaGVy ZSBpcyBubyBPQU0gZGVmaW5lZCBhbmQgYWRvcHRlZA0KYnkgdGhlIFdHIHRoYXQgZGV0ZWN0cyBv ciBoYW5kbGVzIHRoZXNlIHR5cGVzIG9mIGF0dGFja3MuIEkgc2VlIHRoZSBzdHJ1Y3R1cmUgdGhh dCB5b3UgYXJlIHByZXN1bWluZywgYnV0IG5vbmUgb2YgdGhlc2UgYXJlDQphdmFpbGFibGUgYXMg bm9ybWF0aXZlIHJlZmVyZW5jZXMgdG8gTlNIIHRvZGF5Lg0KDQoNCk9BTSBkb2VzIG5vdCBhZGRy ZXNzIHRoZSBzZWN1cml0eSBjb25jZXJuIGFyb3VuZCBpbnRlZ3JpdHkgYW5kIGRldmljZXMuICBJ ZiB5b3UgYW5kIHRoZSBXRyBiZWxpZXZlIE9BTSBpcyB0aGUgbmV4dCDigJx0byBkb+KAnSBmb3Ig dGhlIFdHLCB0aGF04oCZcyBmaW5lLCBidXQgaXTigJlzIG9ydGhvZ29uYWwgdG8gdGhlIHNlY3Vy aXR5IHBvaW50cyByYWlzZWQuDQoNCg0KSSBoYWQgcmVjb21tZW5kZWQgaGF2aW5nIGEgZm9jdXNl ZCBpbnRlcmltIG1lZXRpbmcgdG8gbWFrZSBzdXJlIHRoYXQgZXZlcnlvbmUgY29uY2VybmVkIHVu ZGVyc3Rvb2QgdGhlIGlzc3VlcyBhbmQNCndvcmtlZCB0aHJvdWdoIHRoZSB0aHJlYXQgYW5hbHlz aXMgYW5kIHBvc3NpYmxlIHNvbHV0aW9ucyB0b2dldGhlci4NCg0KTGV04oCZcyBwbGVhc2Ugbm90 IGNvbmZsYXRlIHRoZSBvbmdvaW5nIHNlY3VyaXR5IGRpc2N1c3Npb24gd2l0aCBPQU0sIG9yIG90 aGVyIHRvcGljcy4gIFRoZSBzZWN1cml0eSByZWFsaXR5LCBhcyB5b3UgcG9pbnRlZCBvdXQgaW4g eW91ciBlbWFpbCB0byBFcmljLCBpcyB0aGF0IHdlLCBhcyBhIGNvbW11bml0eSBhbmQgaW5kdXN0 cnksIGFjY2VwdCBhIGxldmVsIG9mIHRydXN0IHdydCBuZXR3b3JrIGRldmljZXMuDQoNCkkgZG9u J3QgYWN0dWFsbHkgdGhpbmsgdGhhdCdzIHRoZSBwb2ludCBvZiBjb250ZW50aW9uLCBhdCBsZWFz dCBmcm9tIG15IHBlcnNwZWN0aXZlLiBSYXRoZXIgaXQncyBhYm91dCB0aGUgbGV2ZWwgb2YgdHJ1 c3QgdG8gYmUgcGxhY2VkIGluIHRoZSBuZXR3b3JraW5nIHBhdGggdGhyb3VnaCB3aGljaCB0aGF0 IGRhdGEgZmxvd3MuDQoNCg0KVW5kZXJzdG9vZC4gSG93IGFib3V0IHRoaXM/DQoNCiAgICAgICAg ICAgICAgWC4yLiAgVHJhbnNwb3J0IEVuY2Fwc3VsYXRpb24gU2VjdXJpdHkNCg0KICAgICAgICAg ICAgICAgICAgICAgICAgTlNIIGlzIGFsd2F5cyBlbmNhcHN1bGF0ZWQgYnkgYW4gb3V0ZXIgdHJh bnNwb3J0DQogICAgICAgICAgICAgICAgICAgICAgICBlbmNhcHN1bGF0aW9uIGFzIGRldGFpbGVk IGluIFNlY3Rpb24gNCBvZiB0aGlzDQogICAgICAgICAgICAgICAgICAgICAgICBzcGVjaWZpY2F0 aW9uLCBhbmQgYXMgZGVwaWN0ZWQgaW4gRmlndXJlIDEuICBJZiBhbiBvcGVyYXRvcg0KICAgICAg ICAgICAgICAgICAgICAgICAgZGVlbXMgY3J5cHRvZ3JhcGhpYyBpbnRlZ3JpdHkgcHJvdGVjdGlv biBuZWNlc3NhcnkgZHVlIHRvDQogICAgICAgICAgICAgICAgICAgICAgICB0aGVpciByaXNrIGFu YWx5c2lzLCB0aGVuIGFuIG91dGVyIHRyYW5zcG9ydCBlbmNhcHN1bGF0aW9uDQogICAgICAgICAg ICAgICAgICAgICAgICB0aGF0IHByb3ZpZGVzIHN1Y2ggcHJvdGVjdGlvbiBbUkZDNjA3MV0sIHN1 Y2ggYXMgSVBzZWMsIE1VU1QNCiAgICAgICAgICAgICAgICAgICAgICAgIGJlIHVzZWQuDQoNCkkg Y2FuJ3Qgc3BlYWsgZm9yIEthdGhsZWVuLCBidXQgSSBkb24ndCByZWFsbHkgdGhpbmsgdGhpcyBn ZXRzIHRoZSBqb2IgZG9uZS4NCg0KQXMgZGVzY3JpYmVkIGluIFJGQyAzNTUyIChodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvcmZjMzU1MiNzZWN0aW9uLTMpIG91ciB0aHJlYXQgbW9kZWwgaXMg dGhhdCB0aGUgSW50ZXJuZXQgaXMgdW50cnVzdGVkLg0KDQpZZXMuIEp1c3QgdG8gY2xhcmlmeSwg dGhvdWdoLCBOU0ggaXMgbm90IGFuIGVuZC10by1lbmQgcHJvdG9jb2wuIEl0IGRvZXNu4oCZdCDi gJxzdGFydOKAnSBpbiBhIGhvc3QgYW5kIOKAnGVuZOKAnSBpbiBhIGhvc3Qvc2VydmVyLiBJdOKA mXMgYSBuZXR3b3JrLWNlbnRyaWMgbGlrZSBQcm92aXNpb25lZCBWaXJ0dWFsIFByaXZhdGUgTmV0 d29ya3MsIFRyYWZmaWMgRW5naW5lZXJpbmcsIE1QTFMuDQoNClN1cmUsIGFuZCBpbiB0aGlzIGNh c2UgaXQncyB0aGUgbmV0d29yayBiZXR3ZWVuIHRoZSBub2RlcyB0aGF0IGlzIHJlbGV2YW50IGhl cmUuDQoNClRoYXQgbWVhbnMgd2Ugc2hvdWxkIGJlIGRlc2lnbmluZyBwcm90b2NvbHMgdGhhdCBh cmUgc2FmZSB0byBvcGVyYXRlIGluIHRoYXQgZW52aXJvbm1lbnQsIHdoaWNoIGluIHRoaXMgY2Fz ZSBtZWFucyB0aGF0IHRoZSBwcm90b2NvbCBzaG91bGQgZWl0aGVyIChhKSBjb21lIHdpdGggYSBi dWlsdC1pbiBzZWN1cml0eSBtZWNoYW5pc20gb3IgKGIpIGJlIHJ1biBvdmVyIGEgc2VjdXJlIHRy YW5zcG9ydC4gSSBkb24ndCB0aGluayB0ZWxsaW5nIG9wZXJhdG9ycyAieW91IGZpZ3VyZSBpdCBv dXQiIHJlZmxlY3RzIGJlc3QgY3VycmVudCBwcmFjdGljZS4NCg0KDQpCdXTigKYgd2UgYXJlIHNh eWluZyDigJxydW4gb3ZlciBhIHNlY3VyZSB0cmFuc3BvcnTigJ0uDQoNCldlbGwsIHRoYXQncyBu b3Qgd2hhdCB5b3VyIHByb3Bvc2VkIHRleHQgc2F5cyB5b3Ugc2hvdWxkIGRvIGl0ICJJZiBhbiBv cGVyYXRvciBkZWVtcyBjcnlwdG9ncmFwaGljIGludGVncml0eSBwcm90ZWN0aW9uIG5lY2Vzc2Fy eSBkdWUgdG8gdGhlaXIgcmlzayBhbmFseXNpcyIuIElmIHlvdSB3YW50IHRvIHNheSAidGhpcyBp cyBvbmx5IHNwZWNpZmllZCB0byBydW4gb3ZlciBhIHNlY3VyZSB0cmFuc3BvcnQiIHRoZW4gZmlu ZSwgYnV0IHRoYXQncyBub3Qgd2hhdCB0aGlzIHNheXMuDQoNCg0KVGhpcyBpZ25vcmUgdGhlIHJl YWxpdHkgb2YgcnVubmluZyBhIG5ldHdvcms6IGNyZWF0aW5nIGxhcmdlbHkgdW5yZWFsaXphYmxl IHNlY3VyaXR5IHJlcXVpcmVtZW50cyBzaW1wbHkgcmVzdWx0cyByZWxlZ2F0aW5nIHNlY3VyaXR5 IHRvIHNvbWV0aGluZyBpZ25vcmVkLiAgSU1PLCB3ZSDigJQgdGhlIElFVEYg4oCUIGFyZSBmYXIg YmV0dGVyIG9mZiB3aXRoIGEgcHJhZ21hdGljIGFwcHJvYWNoOiBkb2N1bWVudCB0aGUgcmlzayBh bmQgcHJvdmlkZSBwb3NzaWJsZSBtaXRpZ2F0aW9ucy4gIEZyb20gdGhlcmUsIGlmIHRoZSByaXNr cyBhcmUgZGVlbWVkIHN1ZmZpY2llbnQsIGFuIG9wZXJhdG9yIGhhcyBndWlkYW5jZS4gIEZyYW5r bHksIHRoaXMgaXMgdGhlIG9ubHkgd2F5IG5ldHdvcmsgcHJvdG9jb2xzIChlLmcuIE1QTFMsIFNQ UklORywgU0ZDLCBldGMuKSB3aWxsIGJlIHZpYWJsZS4gIEluIGZhY3QsIHRoZSBCSUVSIHNlY2Rp ciByZXZpZXdlciB0b29rIGV4YWN0bHkgdGhpcyBzdGFuY2U6DQoNCmh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL3Jldmlldy1pZXRmLWJpZXItbXBscy1lbmNhcHN1bGF0aW9uLTA5LXNl Y2Rpci10ZWxlY2hhdC1hdGtpbnMtMjAxNy0xMC0xOS8NCg0KDQo8dHJpbW1lZD4NCg0KDQo= --_000_B6F0BF70266942DEA1933CAA38926DB6ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <8CBAFBB552F05940A47678F8BECEFBA3@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IE9jdCAyMCwgMjAxNywgYXQgMTA6MjYgQU0sIEVyaWMgUmVzY29ybGEgJmx0OzxhIGhyZWY9Im1h aWx0bzpla3JAcnRmbS5jb20iIGNsYXNzPSIiPmVrckBydGZtLmNvbTwvYT4mZ3Q7IHdyb3RlOjwv ZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJn bWFpbF9leHRyYSI+PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIEZy aSwgT2N0IDIwLCAyMDE3IGF0IDc6MTggQU0sIENhcmxvcyBQaWduYXRhcm8gKGNwaWduYXRhKQ0K PHNwYW4gZGlyPSJsdHIiIGNsYXNzPSIiPiZsdDs8YSBocmVmPSJtYWlsdG86Y3BpZ25hdGFAY2lz Y28uY29tIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+Y3BpZ25hdGFAY2lzY28uY29tPC9hPiZn dDs8L3NwYW4+IHdyb3RlOjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9x dW90ZSIgc3R5bGU9Im1hcmdpbjowcHggMHB4IDBweCAwLjhleDtib3JkZXItbGVmdDoxcHggc29s aWQgcmdiKDIwNCwyMDQsMjA0KTtwYWRkaW5nLWxlZnQ6MWV4Ij4NCjxkaXYgc3R5bGU9IndvcmQt d3JhcDpicmVhay13b3JkIiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsLWg1Ij4NCjxibG9ja3F1b3RlIHR5cGU9 ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBPY3QgMjAsIDIwMTcsIGF0IDEwOjA4 IEFNLCBFcmljIFJlc2NvcmxhICZsdDs8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJn ZXQ9Il9ibGFuayIgY2xhc3M9IiI+ZWtyQHJ0Zm0uY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8 YnIgY2xhc3M9ImdtYWlsLW1fLTM4MjU0ODgwODk2NjA0OTU5MTFBcHBsZS1pbnRlcmNoYW5nZS1u ZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9ImdtYWlsX2V4dHJhIj48YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9xdW90 ZSI+T24gRnJpLCBPY3QgMjAsIDIwMTcgYXQgNzowMSBBTSwgQ2FybG9zIFBpZ25hdGFybyAoY3Bp Z25hdGEpDQo8c3BhbiBkaXI9Imx0ciIgY2xhc3M9IiI+Jmx0OzxhIGhyZWY9Im1haWx0bzpjcGln bmF0YUBjaXNjby5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5jcGlnbmF0YUBjaXNjby5j b208L2E+Jmd0Ozwvc3Bhbj4gd3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgY2xhc3M9 ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2luOjBweCAwcHggMHB4IDAuOGV4O2JvcmRlci1sZWZ0 OjFweCBzb2xpZCByZ2IoMjA0LDIwNCwyMDQpO3BhZGRpbmctbGVmdDoxZXgiPg0KPGRpdiBzdHls ZT0id29yZC13cmFwOmJyZWFrLXdvcmQiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5FcmljLDwv ZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iZ21haWwtbV8t MzgyNTQ4ODA4OTY2MDQ5NTkxMWdtYWlsLSI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gT2N0IDIwLCAyMDE3LCBhdCA5OjQ1IEFNLCBFcmljIFJl c2NvcmxhICZsdDs8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJnZXQ9Il9ibGFuayIg Y2xhc3M9IiI+ZWtyQHJ0Zm0uY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9Imdt YWlsLW1fLTM4MjU0ODgwODk2NjA0OTU5MTFnbWFpbC1tXy02ODA5NzkzOTUyMTY4NDQ2NjYwQXBw bGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0ciIg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPjxiciBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiBGcmksIE9jdCAyMCwgMjAxNyBhdCA2 OjMxIEFNLCBQYXVsIFF1aW5uIChwYXVscSkgPHNwYW4gZGlyPSJsdHIiIGNsYXNzPSIiPg0KJmx0 OzxhIGhyZWY9Im1haWx0bzpwYXVscUBjaXNjby5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0i Ij5wYXVscUBjaXNjby5jb208L2E+Jmd0Ozwvc3Bhbj4gd3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJs b2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2luOjBweCAwcHggMHB4IDAu OGV4O2JvcmRlci1sZWZ0OjFweCBzb2xpZCByZ2IoMjA0LDIwNCwyMDQpO3BhZGRpbmctbGVmdDox ZXgiPg0KPGRpdiBzdHlsZT0id29yZC13cmFwOmJyZWFrLXdvcmQiIGNsYXNzPSIiPg0KPGRpdiBk aXI9ImF1dG8iIHN0eWxlPSJ3b3JkLXdyYXA6YnJlYWstd29yZCIgY2xhc3M9IiI+SGkgQWxpYSwN CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPk9uIE9jdCAxOSwgMjAxNywgYXQgMjo0OSBQTSwgQWxpYSBBdGxhcyAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmFrYXRsYXNAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9 IiI+YWthdGxhc0BnbWFpbC5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iZ21h aWwtbV8tMzgyNTQ4ODA4OTY2MDQ5NTkxMWdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBtXzc1 MDM5MzAxNDE2MjAwMTI0MzFBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj5IaSBNZWQsDQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5TaW5jZSB5b3UgZGlyZWN0ZWQgdGhpcyBh dCBtZSwgdGhlcmUgYXJlIGVmZm9ydHMgdG8gaGF2ZSBzb21lIGRpc2N1c3Npb25zIGFuZCB1bmRl cnN0YW5kIGJldHRlciB0aGUgcGFydGljdWxhciB0aHJlYXRzLjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij5DdXJyZW50bHksIHRoZXJlIGlzIG5vIHRyYW5zcG9ydCB3aXRoIGludGVncml0eSBwcm90ZWN0 aW9uIHRoYXQgaXMgZXZlbiBhIFNIT1VMRCB0byBpbXBsZW1lbnQsIG11Y2ggbGVzcyBhIE1VU1Qu Jm5ic3A7IFRoZXJlPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPmlzIG5vIGNvbnRyb2wtcGxhbmUgZGVm aW5lZCAoYmV5b25kIHRoZSBCR1Agd29yaykgdGhhdCBkZXNjcmliZXMgZGV0ZWN0aW5nIGlzc3Vl cy4mbmJzcDsgVGhlcmUgaXMgbm8gT0FNIGRlZmluZWQgYW5kIGFkb3B0ZWQ8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+YnkgdGhlIFdHIHRoYXQgZGV0ZWN0cyBvciBoYW5kbGVzIHRoZXNlIHR5cGVzIG9m IGF0dGFja3MuIEkgc2VlIHRoZSBzdHJ1Y3R1cmUgdGhhdCB5b3UgYXJlIHByZXN1bWluZywgYnV0 IG5vbmUgb2YgdGhlc2UgYXJlPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPmF2YWlsYWJsZSBhcyBub3Jt YXRpdmUgcmVmZXJlbmNlcyB0byBOU0ggdG9kYXkuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L3NwYW4+DQo8ZGl2IGNsYXNzPSIiPk9BTSBk b2VzIG5vdCBhZGRyZXNzIHRoZSBzZWN1cml0eSBjb25jZXJuIGFyb3VuZCBpbnRlZ3JpdHkgYW5k IGRldmljZXMuJm5ic3A7IElmIHlvdSBhbmQgdGhlIFdHIGJlbGlldmUgT0FNIGlzIHRoZSBuZXh0 IOKAnHRvIGRv4oCdIGZvciB0aGUgV0csIHRoYXTigJlzIGZpbmUsIGJ1dCBpdOKAmXMgb3J0aG9n b25hbCB0byB0aGUgc2VjdXJpdHkgcG9pbnRzIHJhaXNlZC48L2Rpdj4NCjxzcGFuIGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxi bG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGly PSJsdHIiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5JIGhhZCByZWNvbW1lbmRlZCBoYXZpbmcg YSBmb2N1c2VkIGludGVyaW0gbWVldGluZyB0byBtYWtlIHN1cmUgdGhhdCBldmVyeW9uZSBjb25j ZXJuZWQgdW5kZXJzdG9vZCB0aGUgaXNzdWVzIGFuZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj53b3Jr ZWQgdGhyb3VnaCB0aGUgdGhyZWF0IGFuYWx5c2lzIGFuZCBwb3NzaWJsZSBzb2x1dGlvbnMgdG9n ZXRoZXIuPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvc3Bhbj4NCjxkaXYgY2xhc3M9IiI+TGV04oCZcyBw bGVhc2Ugbm90IGNvbmZsYXRlIHRoZSBvbmdvaW5nIHNlY3VyaXR5IGRpc2N1c3Npb24gd2l0aCBP QU0sIG9yIG90aGVyIHRvcGljcy4mbmJzcDsgVGhlIHNlY3VyaXR5IHJlYWxpdHksIGFzIHlvdSBw b2ludGVkIG91dCBpbiB5b3VyIGVtYWlsIHRvIEVyaWMsIGlzIHRoYXQgd2UsIGFzIGEgY29tbXVu aXR5IGFuZCBpbmR1c3RyeSwgYWNjZXB0IGEgbGV2ZWwgb2YgdHJ1c3Qgd3J0IG5ldHdvcmsgZGV2 aWNlcy4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5J IGRvbid0IGFjdHVhbGx5IHRoaW5rIHRoYXQncyB0aGUgcG9pbnQgb2YgY29udGVudGlvbiwgYXQg bGVhc3QgZnJvbSBteSBwZXJzcGVjdGl2ZS4gUmF0aGVyIGl0J3MgYWJvdXQgdGhlIGxldmVsIG9m IHRydXN0IHRvIGJlIHBsYWNlZCBpbiB0aGUgbmV0d29ya2luZyBwYXRoIHRocm91Z2ggd2hpY2gg dGhhdCBkYXRhIGZsb3dzLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvc3Bhbj4NCjxkaXYgY2xhc3M9IiI+VW5k ZXJzdG9vZC4gSG93IGFib3V0IHRoaXM/PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgWC4yLiZuYnNwOyZuYnNwO1RyYW5zcG9ydCBFbmNhcHN1bGF0aW9u IFNlY3VyaXR5PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsmbmJzcDtOU0ggaXMgYWx3YXlzIGVuY2Fwc3VsYXRlZCBieSBhbiBvdXRlciB0cmFu c3BvcnQ8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO2VuY2Fw c3VsYXRpb24gYXMgZGV0YWlsZWQgaW4gU2VjdGlvbiA0IG9mIHRoaXM8YnIgY2xhc3M9IiI+DQom bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO3NwZWNpZmljYXRpb24sIGFuZCBhcyBkZXBp Y3RlZCBpbiBGaWd1cmUgMS4mbmJzcDsmbmJzcDtJZiBhbiBvcGVyYXRvcjxiciBjbGFzcz0iIj4N CiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jm5ic3A7ZGVlbXMgY3J5cHRvZ3JhcGhpYyBpbnRl Z3JpdHkgcHJvdGVjdGlvbiBuZWNlc3NhcnkgZHVlIHRvPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsmbmJzcDt0aGVpciByaXNrIGFuYWx5c2lzLCB0aGVuIGFuIG91dGVy IHRyYW5zcG9ydCBlbmNhcHN1bGF0aW9uPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsmbmJzcDt0aGF0IHByb3ZpZGVzIHN1Y2ggcHJvdGVjdGlvbiBbUkZDNjA3MV0sIHN1 Y2ggYXMmbmJzcDtJUHNlYywgTVVTVDxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7Jm5ic3A7YmUgdXNlZC48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+ DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JIGNh bid0IHNwZWFrIGZvciBLYXRobGVlbiwgYnV0IEkgZG9uJ3QgcmVhbGx5IHRoaW5rIHRoaXMgZ2V0 cyB0aGUgam9iIGRvbmUuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj5BcyBkZXNjcmliZWQgaW4gUkZDIDM1NTIgKDxhIGhyZWY9Imh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmMzNTUyI3NlY3Rpb24tMyIgdGFyZ2V0PSJfYmxhbmsi IGNsYXNzPSIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC88d2JyIGNsYXNzPSIiPnJmYzM1 NTIjc2VjdGlvbi0zPC9hPikgb3VyIHRocmVhdCBtb2RlbCBpcyB0aGF0IHRoZSBJbnRlcm5ldCBp cyB1bnRydXN0ZWQuPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5ZZXMuIEp1c3QgdG8gY2xhcmlmeSwgdGhvdWdoLCBOU0ggaXMg bm90IGFuIGVuZC10by1lbmQgcHJvdG9jb2wuIEl0IGRvZXNu4oCZdCDigJxzdGFydOKAnSBpbiBh IGhvc3QgYW5kIOKAnGVuZOKAnSBpbiBhIGhvc3Qvc2VydmVyLiBJdOKAmXMgYSZuYnNwO25ldHdv cmstY2VudHJpYyBsaWtlJm5ic3A7UHJvdmlzaW9uZWQgVmlydHVhbCBQcml2YXRlIE5ldHdvcmtz LCBUcmFmZmljIEVuZ2luZWVyaW5nLCBNUExTLjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPlN1cmUsIGFuZCBpbiB0aGlzIGNhc2UgaXQncyB0aGUgbmV0d29yayBiZXR3ZWVuIHRoZSBu b2RlcyB0aGF0IGlzIHJlbGV2YW50IGhlcmUuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFy Z2luOjBweCAwcHggMHB4IDAuOGV4O2JvcmRlci1sZWZ0OjFweCBzb2xpZCByZ2IoMjA0LDIwNCwy MDQpO3BhZGRpbmctbGVmdDoxZXgiPg0KPGRpdiBzdHlsZT0id29yZC13cmFwOmJyZWFrLXdvcmQi IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iZ21haWwtIj4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJsdHIi IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPg0KPGRpdiBjbGFzcz0iZ21haWxf cXVvdGUiPg0KPGRpdiBjbGFzcz0iIj5UaGF0IG1lYW5zIHdlIHNob3VsZCBiZSBkZXNpZ25pbmcg cHJvdG9jb2xzIHRoYXQgYXJlIHNhZmUgdG8gb3BlcmF0ZSBpbiB0aGF0IGVudmlyb25tZW50LCB3 aGljaCBpbiB0aGlzIGNhc2UgbWVhbnMgdGhhdCB0aGUgcHJvdG9jb2wgc2hvdWxkIGVpdGhlciAo YSkgY29tZSB3aXRoIGEgYnVpbHQtaW4gc2VjdXJpdHkgbWVjaGFuaXNtIG9yIChiKSBiZSBydW4g b3ZlciBhIHNlY3VyZSB0cmFuc3BvcnQuIEkgZG9uJ3QgdGhpbmsNCiB0ZWxsaW5nIG9wZXJhdG9y cyAmcXVvdDt5b3UgZmlndXJlIGl0IG91dCZxdW90OyByZWZsZWN0cyBiZXN0IGN1cnJlbnQgcHJh Y3RpY2UuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9zcGFuPg0KPGRpdiBjbGFzcz0iIj5CdXTigKYgd2UgYXJl IHNheWluZyDigJxydW4gb3ZlciBhIHNlY3VyZSB0cmFuc3BvcnTigJ0uPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+V2VsbCwgdGhhdCdzIG5vdCB3aGF0IHlvdXIgcHJvcG9zZWQgdGV4 dCBzYXlzIHlvdSBzaG91bGQgZG8gaXQgJnF1b3Q7SWYgYW4gb3BlcmF0b3IgZGVlbXMgY3J5cHRv Z3JhcGhpYyBpbnRlZ3JpdHkgcHJvdGVjdGlvbiBuZWNlc3NhcnkgZHVlIHRvIHRoZWlyIHJpc2sg YW5hbHlzaXMmcXVvdDsuIElmIHlvdSB3YW50IHRvIHNheSAmcXVvdDt0aGlzIGlzIG9ubHkgc3Bl Y2lmaWVkIHRvIHJ1biBvdmVyIGEgc2VjdXJlIHRyYW5zcG9ydCZxdW90OyB0aGVuIGZpbmUsDQog YnV0IHRoYXQncyBub3Qgd2hhdCB0aGlzIHNheXMuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+VGhpcyBpZ25vcmUgdGhlIHJlYWxp dHkgb2YgcnVubmluZyBhIG5ldHdvcms6IGNyZWF0aW5nIGxhcmdlbHkgdW5yZWFsaXphYmxlIHNl Y3VyaXR5IHJlcXVpcmVtZW50cyBzaW1wbHkgcmVzdWx0cyByZWxlZ2F0aW5nIHNlY3VyaXR5IHRv IHNvbWV0aGluZyBpZ25vcmVkLiAmbmJzcDtJTU8sIHdlIOKAlCB0aGUgSUVURiDigJQgYXJlIGZh ciBiZXR0ZXIgb2ZmIHdpdGggYSBwcmFnbWF0aWMgYXBwcm9hY2g6IGRvY3VtZW50IHRoZSByaXNr IGFuZCBwcm92aWRlDQogcG9zc2libGUgbWl0aWdhdGlvbnMuICZuYnNwO0Zyb20gdGhlcmUsIGlm IHRoZSByaXNrcyBhcmUgZGVlbWVkIHN1ZmZpY2llbnQsIGFuIG9wZXJhdG9yIGhhcyBndWlkYW5j ZS4gJm5ic3A7RnJhbmtseSwgdGhpcyBpcyB0aGUgb25seSB3YXkgbmV0d29yayBwcm90b2NvbHMg KGUuZy4gTVBMUywgU1BSSU5HLCBTRkMsIGV0Yy4pIHdpbGwgYmUgdmlhYmxlLiAmbmJzcDtJbiBm YWN0LCB0aGUgQklFUiBzZWNkaXIgcmV2aWV3ZXIgdG9vayBleGFjdGx5IHRoaXMgc3RhbmNlOjwv ZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+PGEgaHJlZj0iaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvcmV2aWV3LWlldGYtYmllci1tcGxzLWVuY2Fwc3VsYXRp b24tMDktc2VjZGlyLXRlbGVjaGF0LWF0a2lucy0yMDE3LTEwLTE5LyIgY2xhc3M9IiI+aHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvcmV2aWV3LWlldGYtYmllci1tcGxzLWVuY2Fwc3Vs YXRpb24tMDktc2VjZGlyLXRlbGVjaGF0LWF0a2lucy0yMDE3LTEwLTE5LzwvYT48L2Rpdj4NCjxk aXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRp dj4mbHQ7dHJpbW1lZCZndDs8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YnIg Y2xhc3M9IiI+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_B6F0BF70266942DEA1933CAA38926DB6ciscocom_-- From nobody Fri Oct 20 07:38:51 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD9F51331D9 for ; Fri, 20 Oct 2017 07:38:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.617 X-Spam-Level: X-Spam-Status: No, score=-2.617 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xZS1S3R5QQMj for ; Fri, 20 Oct 2017 07:38:46 -0700 (PDT) Received: from relais-inet.orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B6AA132697 for ; Fri, 20 Oct 2017 07:38:46 -0700 (PDT) Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) by opfednr20.francetelecom.fr (ESMTP service) with ESMTP id 082414054B; Fri, 20 Oct 2017 16:38:45 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.31]) by opfednr00.francetelecom.fr (ESMTP service) with ESMTP id C3BDC1A0069; Fri, 20 Oct 2017 16:38:44 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM22.corporate.adroot.infra.ftgroup ([fe80::8c90:f4e9:be28:2a1%19]) with mapi id 14.03.0361.001; Fri, 20 Oct 2017 16:38:44 +0200 From: To: Eric Rescorla CC: "Paul Quinn (paulq)" , Alia Atlas , Kathleen Moriarty , "sfc@ietf.org" Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wA98DjAAABAINA= Date: Fri, 20 Oct 2017 14:38:44 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93300A057C92@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BA4@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BFB@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93300A057C92OPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:38:50 -0000 --_000_787AE7BB302AE849A7480A190F8B93300A057C92OPEXCLILMA3corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogRXJpYyBS ZXNjb3JsYSBbbWFpbHRvOmVrckBydGZtLmNvbV0NCkVudm95w6kgOiB2ZW5kcmVkaSAyMCBvY3Rv YnJlIDIwMTcgMTY6MjINCsOAIDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTg0KQ2MgOiBQYXVs IFF1aW5uIChwYXVscSk7IEFsaWEgQXRsYXM7IEthdGhsZWVuIE1vcmlhcnR5OyBzZmNAaWV0Zi5v cmcNCk9iamV0IDogUmU6IFtzZmNdIE5TSCBESVNDVVNTIFN0YXR1cw0KDQoNCg0KT24gRnJpLCBP Y3QgMjAsIDIwMTcgYXQgNzoxMiBBTSwgPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFp bHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+PiB3cm90ZToNClJlLSwNCg0KVGhhbmsg eW91LCBFcmljLg0KDQpUaGVyZSBpcyBhIG1pc3VuZGVyc3RhbmRpbmcgaGVyZS4gVGhlIGRvY3Vt ZW50IGRvZXMgbm90IGNsYWltIERDcyBhcmUgc2FmZSBhbmQgc2VjdXJlIGVudmlyb25tZW50cy4g V2hhdCBpdCBzYXlzIGlzIHRoYXQgdGhlIE5TSCBzcGVjaWZpY2F0aW9uIGlzIHNjb3BlZCB0byBi ZSBkZXBsb3llZCBpbiBhIHNpbmdsZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gd2l0aCBtZWFzdXJl cyB0bywgZS5nLiw6DQoNCi0gICAgUHJvdGVjdCBhZ2FpbnN0IHNwb29mZWQgZGF0YQ0KDQotICAg IExlYWtpbmcgZGF0YSBvdXRzaWRlIGEgZG9tYWluDQoNCi0gICAgRGV0ZWN0IGFuZCBwcmV2ZW50 IGluZGVmaW5pdGUgZm9yd2FyZGluZyBsb29wDQpZZXMsIGFuZCBteSBwb2ludCAoYW5kIEkgYmVs aWV2ZSBLYXRobGVlbidzKSBpcyB0aGF0IHRoaXMgaXMgbm90IGEgcmVhbGlzdGljIG9wZXJhdGlu ZyBtb2RlbCBnaXZlbiB0aGUgYWN0dWFsIHN0YXRlIG9mIHRoZSB3b3JsZC4NCg0KDQpBIHNpbmds ZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gaXMgbm90IG5lY2Vzc2FyaWx5IGEgc2VjdXJlIG9yIGEg c2FmZSBvbmUuIFRoYXTigJlzIGV2aWRlbnQuIEF0dGFja3MgZnJvbSB3aXRoaW4gYW4gYWRtaW5p c3RyYXRpdmUgZG9tYWluIGFyZSBwb3NzaWJsZSB3aXRoIG9yIHdpdGhvdXQgTlNILg0KDQpJ4oCZ bSByZWl0ZXJhdGluZyBteSBxdWVzdGlvbjogd2hhdCBzcGVjaWZpYyBhdHRhY2tzIGJ1aWx0LWlu L21hbmRhdG9yeSBpbnRlZ3JpdHkgbWVjaGFuaXNtcyB3aWxsIHNvbHZlIGZvciB0aGUgcGFydGlj dWxhciBjYXNlIG9mIE5TSD8gVGhhbmsgeW91Lg0KDQpUYW1wZXJpbmcgd2l0aCB0aGUgcGF0aCBw YWNrZXRzIHRha2UgdGhyb3VnaCB0aGUgTkZDLg0KW01lZF0gVGhhbmsgeW91LiBJIGhhdmUgdHdv IGNvbW1lbnRzOg0KDQotICAgIFN1Y2ggYmVoYXZpb3IgY2FuIGFsc28gYmUgZGV0ZWN0ZWQgYnkg bWVhbnMgb2YgU0ZDIE9BTSBpbiBhbiBTRkMgZG9tYWluLiBTZWUgbXkgZmlyc3QgbWVzc2FnZS4N Cg0KLSAgICBTdWNoIG1pc2JlaGF2aW5nIG5vZGUgd2lsbCBhY3Qgb24gQUxMIHRoZSB0cmFmZmlj LCBub3Qgb25seSBOU0guIFRoZSBxdWVzdGlvbiBpcyB3aHkgdGhlIE5TSCBzdGFtcGVkIHRyYWZm aWMgbXVzdCBiZSBwcm92aWRlZCB3aXRoIGJ1aWx0LWluIGludGVncml0eSBmZWF0dXJlIHdoaWxl IHRoZSB0cmFmZmljIG5vdCBlbGVjdGVkIHRvIGJlIGZvcndhcmRlZCB2aWEgYSBzZXJ2aWNlIGNo YWluIHdpbGwgYmUgbGVmdCBzdWJqZWN0IHRvIHRhbXBlcmluZyBhdHRhY2tzPyBXb3VsZG7igJl0 IGJlIGNvbnNpc3RlbnQgZ2VuZXJhbGl6ZSB0aGF0IGZlYXR1cmUgKGlmIHByb3ZpZGVkKSB0byBh bGwgdHJhZmZpYyB0aGF0IGlzIHRyYW5zaXRpbmcgZm9yIGEgZ2l2ZW4gZG9tYWluPw0KDQoNCi1F a3INCg0KDQpDaGVlcnMsDQpNZWQNCg0KRGUgOiBFcmljIFJlc2NvcmxhIFttYWlsdG86ZWtyQHJ0 Zm0uY29tPG1haWx0bzpla3JAcnRmbS5jb20+XQ0KRW52b3nDqSA6IHZlbmRyZWRpIDIwIG9jdG9i cmUgMjAxNyAxNTo1Ng0Kw4AgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xODQpDYyA6IFBhdWwg UXVpbm4gKHBhdWxxKTsgQWxpYSBBdGxhczsgS2F0aGxlZW4gTW9yaWFydHk7IHNmY0BpZXRmLm9y ZzxtYWlsdG86c2ZjQGlldGYub3JnPg0KDQpPYmpldCA6IFJlOiBbc2ZjXSBOU0ggRElTQ1VTUyBT dGF0dXMNCg0KSXQncyBleHBsYWluZWQgaW4gZGV0YWlsIGluIG15IERJU0NVU1M6DQoNCiIxLiBU aGUgYXNzdW1wdGlvbiB0aGF0IHRoZSBkYXRhY2VudGVyIGlzIGEgc2VjdXJlIGVudmlyb25tZW50 IGlzIG5vdCBhDQoNCnJlYXNvbmFibGUgb25lLiBBcyBLYXRobGVlbiBhbmQgQWRhbSBib3RoIG9i c2VydmVyLCBkYXRhY2VudGVyDQoNCmJyZWFjaGVzIGFyZSBjb21tb24gYW5kIHRoYXQgaXMgd2h5 IHBlb3BsZSBhcmUgbW92aW5nIHRvd2FyZHMNCg0KZW5jcnlwdGlvbiBpbnNpZGUgdGhlIGRhdGEg Y2VudGVyLiBJIHNlZSB0aGF0IHRoaXMgZHJhZnQgaGFzIHRleHQNCg0KY2xhaW1pbmcgdGhhdCB0 aGlzIGlzIG9ubHkgdG8gYmUgZGVwbG95ZWQgaW4gc2FmZSBlbnZpcm9ubWVudHMsIGJ1dCB3ZQ0K DQprbm93IHRoYXQgdGVjaG5vbG9naWVzIGxpa2UgdGhpcyBnZXQgZGVwbG95ZWQgb3V0c2lkZSB0 aGUgbG9jYXRpb25zDQoNCmZvciB3aGljaCB3ZSBjbGFpbSB0aGV5IGFyZSB0byBiZSBkZXBsb3ll ZCwgYW5kIHRoZXJlJ3Mgbm90aGluZyBoZXJlDQoNCnRvIHN0b3AgdGhhdC4gTW9yZW92ZXIsIHRo ZSB3aG9sZSB0cmVuZCB0b3dhcmRzIGNsb3VkIGNvbXB1dGluZyBwdXNoZXMNCg0KdXMgYXdheSBm cm9tIGRlc2lnbnMgaW4gd2hpY2ggeW91IGNhbiBzYWZlbHkgdGFsayBhYm91dCBzaW5nbGUgc2Vj dXJlDQoNCnpvbmVzLiINCg0KDQoNCi1Fa3INCg0KDQoNCg0KDQpPbiBGcmksIE9jdCAyMCwgMjAx NyBhdCA2OjUxIEFNLCA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4+IHdyb3RlOg0KRGVhciBFcmljLA0KDQpDYW4geW91IHBs ZWFzZSBjbGFyaWZ5IHRoaXMgcG9pbnQ6IOKAnFJhdGhlciBpdCdzIGFib3V0IHRoZSBsZXZlbCBv ZiB0cnVzdCB0byBiZSBwbGFjZWQgaW4gdGhlIG5ldHdvcmtpbmcgcGF0aCB0aHJvdWdoIHdoaWNo IHRoYXQgZGF0YSBmbG93cy7igJ0/DQoNClNvcnJ5IGlmIHlvdSBoYXZlIGFscmVhZHkgZXhwbGFp bmVkIGl0IHRvIHRoZSBlZGl0b3JzLCBidXQgYXMgYSBXRyBwYXJ0aWNpcGFudCBJIGRvbuKAmXQg aGF2ZSBhY2Nlc3MgdG8gYSByZWNvcmQgb2Ygc3VjaCBkaXNjdXNzaW9uLg0KDQpUaGFuayB5b3Uu DQoNCkNoZWVycywNCk1lZA0KDQpEZSA6IEVyaWMgUmVzY29ybGEgW21haWx0bzpla3JAcnRmbS5j b208bWFpbHRvOmVrckBydGZtLmNvbT5dDQpFbnZvecOpIDogdmVuZHJlZGkgMjAgb2N0b2JyZSAy MDE3IDE1OjQ1DQrDgCA6IFBhdWwgUXVpbm4gKHBhdWxxKQ0KQ2MgOiBBbGlhIEF0bGFzOyBCT1VD QURBSVIgTW9oYW1lZCBJTVQvT0xOOyBLYXRobGVlbiBNb3JpYXJ0eTsgc2ZjQGlldGYub3JnPG1h aWx0bzpzZmNAaWV0Zi5vcmc+DQpPYmpldCA6IFJlOiBbc2ZjXSBOU0ggRElTQ1VTUyBTdGF0dXMN Cg0KDQoNCk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0IDY6MzEgQU0sIFBhdWwgUXVpbm4gKHBhdWxx KSA8cGF1bHFAY2lzY28uY29tPG1haWx0bzpwYXVscUBjaXNjby5jb20+PiB3cm90ZToNCkhpIEFs aWEsDQoNCg0KDQpPbiBPY3QgMTksIDIwMTcsIGF0IDI6NDkgUE0sIEFsaWEgQXRsYXMgPGFrYXRs YXNAZ21haWwuY29tPG1haWx0bzpha2F0bGFzQGdtYWlsLmNvbT4+IHdyb3RlOg0KDQpIaSBNZWQs DQoNClNpbmNlIHlvdSBkaXJlY3RlZCB0aGlzIGF0IG1lLCB0aGVyZSBhcmUgZWZmb3J0cyB0byBo YXZlIHNvbWUgZGlzY3Vzc2lvbnMgYW5kIHVuZGVyc3RhbmQgYmV0dGVyIHRoZSBwYXJ0aWN1bGFy IHRocmVhdHMuDQpDdXJyZW50bHksIHRoZXJlIGlzIG5vIHRyYW5zcG9ydCB3aXRoIGludGVncml0 eSBwcm90ZWN0aW9uIHRoYXQgaXMgZXZlbiBhIFNIT1VMRCB0byBpbXBsZW1lbnQsIG11Y2ggbGVz cyBhIE1VU1QuICBUaGVyZQ0KaXMgbm8gY29udHJvbC1wbGFuZSBkZWZpbmVkIChiZXlvbmQgdGhl IEJHUCB3b3JrKSB0aGF0IGRlc2NyaWJlcyBkZXRlY3RpbmcgaXNzdWVzLiAgVGhlcmUgaXMgbm8g T0FNIGRlZmluZWQgYW5kIGFkb3B0ZWQNCmJ5IHRoZSBXRyB0aGF0IGRldGVjdHMgb3IgaGFuZGxl cyB0aGVzZSB0eXBlcyBvZiBhdHRhY2tzLiBJIHNlZSB0aGUgc3RydWN0dXJlIHRoYXQgeW91IGFy ZSBwcmVzdW1pbmcsIGJ1dCBub25lIG9mIHRoZXNlIGFyZQ0KYXZhaWxhYmxlIGFzIG5vcm1hdGl2 ZSByZWZlcmVuY2VzIHRvIE5TSCB0b2RheS4NCg0KDQpPQU0gZG9lcyBub3QgYWRkcmVzcyB0aGUg c2VjdXJpdHkgY29uY2VybiBhcm91bmQgaW50ZWdyaXR5IGFuZCBkZXZpY2VzLiAgSWYgeW91IGFu ZCB0aGUgV0cgYmVsaWV2ZSBPQU0gaXMgdGhlIG5leHQg4oCcdG8gZG/igJ0gZm9yIHRoZSBXRywg dGhhdOKAmXMgZmluZSwgYnV0IGl04oCZcyBvcnRob2dvbmFsIHRvIHRoZSBzZWN1cml0eSBwb2lu dHMgcmFpc2VkLg0KDQoNCkkgaGFkIHJlY29tbWVuZGVkIGhhdmluZyBhIGZvY3VzZWQgaW50ZXJp bSBtZWV0aW5nIHRvIG1ha2Ugc3VyZSB0aGF0IGV2ZXJ5b25lIGNvbmNlcm5lZCB1bmRlcnN0b29k IHRoZSBpc3N1ZXMgYW5kDQp3b3JrZWQgdGhyb3VnaCB0aGUgdGhyZWF0IGFuYWx5c2lzIGFuZCBw b3NzaWJsZSBzb2x1dGlvbnMgdG9nZXRoZXIuDQoNCkxldOKAmXMgcGxlYXNlIG5vdCBjb25mbGF0 ZSB0aGUgb25nb2luZyBzZWN1cml0eSBkaXNjdXNzaW9uIHdpdGggT0FNLCBvciBvdGhlciB0b3Bp Y3MuICBUaGUgc2VjdXJpdHkgcmVhbGl0eSwgYXMgeW91IHBvaW50ZWQgb3V0IGluIHlvdXIgZW1h aWwgdG8gRXJpYywgaXMgdGhhdCB3ZSwgYXMgYSBjb21tdW5pdHkgYW5kIGluZHVzdHJ5LCBhY2Nl cHQgYSBsZXZlbCBvZiB0cnVzdCB3cnQgbmV0d29yayBkZXZpY2VzLg0KDQpJIGRvbid0IGFjdHVh bGx5IHRoaW5rIHRoYXQncyB0aGUgcG9pbnQgb2YgY29udGVudGlvbiwgYXQgbGVhc3QgZnJvbSBt eSBwZXJzcGVjdGl2ZS4gUmF0aGVyIGl0J3MgYWJvdXQgdGhlIGxldmVsIG9mIHRydXN0IHRvIGJl IHBsYWNlZCBpbiB0aGUgbmV0d29ya2luZyBwYXRoIHRocm91Z2ggd2hpY2ggdGhhdCBkYXRhIGZs b3dzLg0KDQotRWtyDQoNCg0KIFRoZSBvbmdvaW5nIGVkaXRzIGFuZCBkaWFsb2d1ZSB3aXRoIEth dGhsZWVuIGFuZCBFcmljIGFyZSB3b3JraW5nIHRocm91Z2ggdGhlaXIgY29uY2VybnMuICBBbiBp bnRlcmltIHRvIHRhbGsgYWJvdXQgbmV4dCBTRkMgc3RlcHMsIHBvc3QgTlNILCBpcyBhIGRpZmZl cmVudCBtYXR0ZXIuDQoNCg0KDQpBdCB0aGlzIHBvaW50LCBjbGVhcmx5IHRoZSBtb3N0IHRoYXQg Y291bGQgaGFwcGVuIGlzIGENCnZpcnR1YWwgaW50ZXJpbS4gIFRoZXJlIGFyZSBzb21lIGJhY2tn cm91bmQgZGlzY3Vzc2lvbnMgZ29pbmcgb24uDQoNCkkgZG8gbm90IHdhbnQgdG8gYXNzdW1lIHdo YXQgbWl4dHVyZSB3aWxsIGJlIGFjY2VwdGFibGUgdG8gaGFuZGxlIHRoZSBzZWN1cml0eSBjb25j ZXJucyBleHByZXNzZWQgYnkgS2F0aGxlZW4gYW5kIEVyaWMNCmFuZCBzdXBwb3J0ZWQgYnkgYSBu dW1iZXIgb2Ygb3RoZXIgQURzLg0KDQpJIGRvIGdyZWF0bHkgYXBwcmVjaWF0ZSB5b3VyIGF0dGVu dGlvbiBhbmQgZWZmb3J0cyB0byBjbGFyaWZ5IGFuZCB0cnkgdG8gbW92ZSB0aGlzIHdvcmsgZm9y d2FyZC4gSSBoYXZlIGJlZW4gZXhwcmVzc2luZyBjb25jZXJucw0KYWJvdXQgdGhlIHNlY3VyaXR5 IGFzcGVjdHMgb2YgdGhpcyB3b3JrIHNpbmNlIFJGQyA3NjY1IHdlbnQgdGhyb3VnaCB0aGUgcHVi bGljYXRpb24gcHJvY2VzcyAtIGFuZCBzdHJvbmdseSBlbmNvdXJhZ2luZyBzZXJpb3VzDQpXRyBm b2N1cyB0byBwcmV2ZW50IHByZWNpc2VseSB3aGF0IGhhcyBub3cgaGFwcGVuZWQuDQoNClJlZ2Fy ZHMsDQpBbGlhDQoNCg0KT24gVGh1LCBPY3QgMTksIDIwMTcgYXQgNDo0OSBBTSwgPG1vaGFtZWQu Ym91Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+ PiB3cm90ZToNCkhpIEFsaWEsDQoNCkNhbiB5b3UgcGxlYXNlIHNoYXJlIHdpdGggdXMgdGhlIGN1 cnJlbnQgc3RhdHVzIG9mIHRoZSBkb2N1bWVudCBhbmQgdGhlIGxpc3Qgb2YgcGVuZGluZyBibG9j a2luZyBwb2ludHM/DQoNCkkgd2VudCB0aHJvdWdoIGFsbCBwdWJsaWMgZW1haWwgZXhjaGFuZ2Vz LCBlc3BlY2lhbGx5IHRoZSBvbmVzIHJlbGF0ZWQgdG8gc2VjdXJpdHksIGJ1dCBpdCBpcyBub3Qg dGhhdCBlYXN5IHRvIHVuZGVyc3RhbmQgd2hhdCBhcmUgdGhlIHJlbWFpbmluZyBpc3N1ZXMgdGhh dCBuZWVkIGZpeGVzLg0KDQpJbiBwYXJ0aWN1bGFyLCBpcyB0aGVyZSBhIGNvbmNlcm4gd2l0aCBh c3N1bWluZyB0aGUgY3VycmVudCBOU0ggdGhyZWF0IG1vZGVsPw0KDQoNCjEuICBOU0ggaXMgc2Vj dXJlIGFnYWluc3QgYXR0YWNrcyBpbmR1Y2VkIGJ5IG5vZGVzIHRoYXQgaW5qZWN0IChzcG9vZmVk KSBOU0ggYmVmb3JlIGVudGVyaW5nIGFuIFNGQy1lbmFibGVkIGRvbWFpbi4gSW5kZWVkLCBTRkMg aW5ncmVzcyBub2RlcyBNVVNUIGRpc2NhcmQgcGFja2V0cyBjYXJyeWluZyBOU0guDQoNCjIuICBO U0ggaXMgc2VjdXJlIGFnYWluc3QgYXR0YWNrcyBmcm9tIHdpdGhpbiB0aGUgU0ZDLWVuYWJsZWQg ZG9tYWluIHRvIGluamVjdCBub24tYXV0aG9yaXplZCBjb250ZXh0IGhlYWRlcnMuIEZyb20gYSBz ZXJ2aWNlIHBlcnNwZWN0aXZlLCB0aGUgZ3VhcmQgaXMgdGhlIENQIHdoaWNoIGlzIHJlc3BvbnNp YmxlIGZvciBpbnN0cnVjdGluZyB0aGUgU0ZDLWF3YXJlIG5vZGVzIGFib3V0IHRoZSBtYW5kYXRv cnktdG8tcHJvY2VzcyBhbmQgb3B0aW9uYWwtdG8tcHJvY2VzcyBjb250ZXh0IGhlYWRlcnMuIEZ1 cnRoZXJtb3JlLCB3aGF0ZXZlciB0aGUgb3JpZ2luIG9mIGEgc3VwcGxpZWQgY29udGV4dCBoZWFk ZXIsIHRoZSBsYXN0IFNGRiBvZiBhIGNoYWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92 ZSB0aGUgTlNIIGJlZm9yZSBmb3J3YXJkaW5nIHVwc3RyZWFtLg0KDQozLiAgTlNIIGlzIHNlY3Vy ZSBhZ2FpbnN0IGxlYWtpbmcgcHJpdmFjeSBpbmZvcm1hdGlvbiBvdXRzaWRlIGFuIFNGQyBlbmFi bGVkIGRvbWFpbi4gVGhlIGxhc3QgU0ZGIG9mIGEgY2hhaW4gKGFuZCBlZ3Jlc3Mgbm9kZXMpIE1V U1QgcmVtb3ZlIHRoZSBOU0ggYmVmb3JlIGZvcndhcmRpbmcgdXBzdHJlYW0uDQoNCjQuICBOU0gg aXMgc2VjdXJlIGFnYWluc3QgaW5kZWZpbml0ZSBTRi9TRkYgbG9vcHMgYnkgbWVhbnMgb2YgU0kg YW5kIFRUTCBmaWVsZHMuDQoNCjUuICBDb250cm9sIHBsYW5lIHNwZWNpZmljIHRocmVhdHMgYXJl IG91dCBvZiBzY29wZSwgYnV0IHRoZSBkb2N1bWVudCBjaXRlcyBJLUQuaWV0Zi1zZmMtY29udHJv bC1wbGFuZSBmb3IgdGhlIGV4cGVjdGVkIGJlaGF2aW9yIHdoZW4gaW5zdHJ1Y3RpbmcgU0ZDIG5v ZGVzLiBCVFcsIHRoZSBzZWNkaXIgcmV2aWV3IG9mIHRoZSBDUCByZXF1aXJlbWVudHMgY2FuIGJl IHJldHJpZXZlZCBoZXJlIChodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9yZXZpZXct aWV0Zi1zZmMtY29udHJvbC1wbGFuZS0wMi1zZWNkaXItZWFybHktbWVhZG93cy0yMDE1LTEyLTEw LykuDQoNCjYuICBOU0ggZG9lcyBub3Qgc2hhcmUgcHJpdmFjeSBkYXRhIHdpdGggbm9uLWF1dGhv cml6ZWQgcGFydGllcy4gSW5kZWVkLCBkYXRhIGNhcnJpZWQgaW4gY29udGV4dCBoZWFkZXJzIGFy ZSBkZXJpdmVkIGZyb20gdGhlIG9yaWdpbmFsIHBhY2tldCAoZS5nLiwgc291cmNlIElQIGFkZHJl c3MpIG9yIGFyZSBhbHJlYWR5IGtub3duIHRvIHRoZSBvcGVyYXRvciAoZS5nLiwgc3Vic2NyaWJl ciBpZGVudGlmaWVyLCBwb2xpY3kgaWRlbnRpZmllciwgc2VydmljZSBpZGVudGlmaWVyKS4gVGhl IGNvbnRleHQgaW5mb3JtYXRpb24gaXMgc2hhcmVkIHdpdGggbm9kZXMgdGhhdCBhcmUgd2l0aGlu IHRoZSBzYW1lIGFkbWluaXN0cmF0aXZlIGRvbWFpbi4NCg0KNy4gIExpa2Ugb3RoZXIgY29tbXVu aWNhdGlvbiBwcm90b2NvbHMsIGF0dGFja3MgZnJvbSB3aXRoaW4gdGhlIG5ldHdvcmsgYXJlIHBv c3NpYmxlLCBidXQgdGhvc2UgYXJlIHNvZnRlbiBieSByZWx5aW5nIG9uIHRoZSBwcm9jZWR1cmVz IHB1dCBpbiBwbGFjZSBieSBvcGVyYXRvcnMgZm9yIHRlc3RpbmcgYW5kIHZhbGlkYXRpbmcgbm9k ZXMvZmVhdHVyZXMgYmVmb3JlIGFjdHVhbCBhY3RpdmF0aW9uLiBOU0ggZG9lcyBub3QgcHJvdmlk ZSBhIGJ1aWx0LWluIGZlYXR1cmUgdG8gcHJldmVudCBtaXNiZWhhdmluZyBub2RlcywgYnV0IHJl Y29tbWVuZHMgdG8gcmVseSBvbiB0aGUgc2VjdXJpdHkgZmVhdHVyZXMgcHJvdmlkZWQgYnkgdGhl IHVuZGVybHlpbmcgdHJhbnNwb3J0IGVuY2Fwc3VsYXRpb24gc2NoZW1lcy4NCg0KTGV04oCZcyBu b3cgZm9jdXMgb24gdGhlIHR5cGljYWwg4oCcYXR0YWNrc+KAnSB0aGF0IGNhbiBiZSBpc3N1ZWQg ZnJvbSB3aXRoaW4gdGhlIG5ldHdvcms6DQoNCjEuICBBIG1pc2JlaGF2aW5nIG5vZGUgcmVkaXJl Y3QgdGhlIHRyYWZmaWMgdG8gbm9uLWF1dGhvcml6ZWQgbm9kZXMgb3V0c2lkZSBhIGRvbWFpbjog VGhpcyBpcyBub3QgTlNILXNwZWNpZmljLg0KDQoyLiAgQSBtaXNiZWhhdmluZyBTRkMtdW53YXJl IG5vZGUgYWx0ZXJzIHRoZSBjb250ZW50IG9mIGEgcGFja2V0OiBUaGlzIGlzIG5vdCBOU0gtc3Bl Y2lmaWMuDQoNCjMuICBBIG1pc2JlaGF2aW5nIFNGQy1hd2FyZSBub2RlIGFsdGVycyB0aGUgY29u dGVudCBvZiBOU0g6DQoNCiAgICAgICAgICAgIGkuICAgICBJdCByZW1vdmVzIHRoZSBOU0ggaGVh ZGVyIGZyb20gYWxsIHBhY2tldHMgaXQgc2VlczogVGhpcyB3aWxsIGltcGx5IHRoYXQgdGhlIHBh Y2tldHMsIHRoZSBtaXNiZWhhdmluZyBub2RlIGludGVyY2VwdHMsIHdpbGwgYmUgZm9yd2FyZGVk IHVwc3RyZWFtIHdpdGhvdXQgaW52b2tpbmcgdGhlIHJlcXVpcmVkIFNGcyAod2hpY2ggbWF5IGJl IHNlZW4gYXMgYSBmZWF0dXJlLCBub3QgYSBidWcgaWYgb25lIGRpc2xpa2VzIOKAnG1pZGRsZWJv eGVz4oCdIDopKS4gTW9yZSBzZXJpb3VzbHksIHRoZSBPQU0gTlNIIGZlYXR1cmUgd2lsbCBhbGxv dyBhbiBvcGVyYXRvciB0byBkZXRlY3Qgd2hldGhlciBOU0ggcGFja2V0cyBhcmUgdHJhdmVsbGlu ZyBpbiBhY2NvcmRhbmNlIHdpdGggU0ZDIGluc3RydWN0aW9ucyBvZiB0aGF0IGRvbWFpbi4gUnVu bmluZyB0aGF0IGZlYXR1cmUgd2lsbCBoZWxwIGRldGVjdGluZyB0aGUgbWlzYmVoYXZpbmcgbm9k ZS4NCg0KICAgICAgICAgIGlpLiAgICAgSXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQgb2YgU1BJOiBU aGlzIHdpbGwgaW1wbHkgdGhhdCB0aGVzZSBwYWNrZXRzIHdpbGwgYmUgZm9yd2FyZGVkIG92ZXIg YSB3cm9uZyBwYXRoLiBBZ2FpbiwgcnVubmluZyBPQU0gTlNIIHdpbGwgYWxsb3cgdGhlIG9wZXJh dG9yIHRvIGRldGVjdCB3aGV0aGVyIGEgcGFja2V0IGlzIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5j ZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMuIFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHJlZ3VsYXJseSB3 aWxsIGhlbHAgaWRlbnRpZnlpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUgYW5kIHdoZXRoZXIgdGhl IFNGQyBjb25maWd1cmF0aW9uIG9mIGEgZG9tYWluIGlzIGFsaWduZWQgd2l0aCB0aGUgZXhwZWN0 ZWQgYmVoYXZpb3IuDQoNCiAgICAgICAgaWlpLiAgICAgSXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQg b2YgU0kvVFRMOiBUaGlzIHdpbGwgaW5jcmVhc2UgdGhlIGF1dGhvcml6ZWQgbWF4aW11bSBTRkYv U0YgaG9wcy4gTm90IHN1cmUgaWYgdGhlcmUgaXMgYSBzZWN1cml0eSBwcm9ibGVtIG91dCB0aGVy ZS4NCg0KICAgICAgICAgIGl2LiAgICAgVGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMgYSBjbGFzc2lm aWVyOiBUaGUgaW1wbGljYXRpb25zIHdpbGwgYmUgc2V2ZXJlIGZyb20gYSBzZXJ2aWNlIHN0YW5k cG9pbnQuIE5TSCByZWxpZXMgb24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNo IGNhc2UuDQoNCiAgICAgICAgICAgIHYuICAgICBUaGUgbWlzYmVoYXZpbmcgbm9kZSBpcyBhbiBT RkY6IEV4YW1wbGVzIG9mIG1pc2JlaGF2aW9ycyBhcmU6IHN0cmlwIE5TSCwgZm9yd2FyZCB0byBh IG5vbi1hdXRob3JpemVkIFNGLCByZWRpcmVjdCB0aGUgdHJhZmZpYyB0byBhIG5vbi1hdXRob3Jp emVkIG5vZGVzLCBldGMuIExpa2UgZm9yIHRoZSBjbGFzc2lmaWVyIGNhc2UsIE5TSCByZWxpZXMg b24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNoIGNhc2UuDQoNCkFyZSB0aGVy ZSBzcGVjaWZpYyBhdHRhY2tzIHRoYXQgYXJlIG5vdCBsaXN0ZWQgYWJvdmUgYW5kIHRoYXQgbmVl ZCBtb3JlIGF0dGVudGlvbiBmcm9tIHRoZSBXRz8NCg0KVGhhbmsgeW91Lg0KDQpDaGVlcnMsDQpN ZWQNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNm YyBtYWlsaW5nIGxpc3QNCnNmY0BpZXRmLm9yZzxtYWlsdG86c2ZjQGlldGYub3JnPg0KaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmMNCg0KDQoNCg0K --_000_787AE7BB302AE849A7480A190F8B93300A057C92OPEXCLILMA3corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAgMDt9 DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIg MiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3Nl LTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25z b2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0 aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJn aW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZv bnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5 cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dl ZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3Jh dGlvbjp1bmRlcmxpbmU7fQ0KcA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowY207DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZh bWlseToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IlByw6lmb3JtYXTDqSBIVE1MIENhciI7DQoJbWFyZ2lu OjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250 LWZhbWlseToiQ291cmllciBOZXciO30NCnAuTXNvQWNldGF0ZSwgbGkuTXNvQWNldGF0ZSwgZGl2 Lk1zb0FjZXRhdGUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJU ZXh0ZSBkZSBidWxsZXMgQ2FyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFw dDsNCglmb250LXNpemU6OC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYi O30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQ YXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGNtOw0KCW1h cmdpbi1yaWdodDowY207DQoJbWFyZ2luLWJvdHRvbTowY207DQoJbWFyZ2luLWxlZnQ6MzYuMHB0 Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KcC5tMTY1NDYyOTMxNTUyOTAxMDc2OW1z b2xpc3RwYXJhZ3JhcGgsIGxpLm0xNjU0NjI5MzE1NTI5MDEwNzY5bXNvbGlzdHBhcmFncmFwaCwg ZGl2Lm0xNjU0NjI5MzE1NTI5MDEwNzY5bXNvbGlzdHBhcmFncmFwaA0KCXttc28tc3R5bGUtbmFt ZTptXzE2NTQ2MjkzMTU1MjkwMTA3Njltc29saXN0cGFyYWdyYXBoOw0KCW1zby1tYXJnaW4tdG9w LWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowY207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87DQoJbWFyZ2luLWxlZnQ6MGNtOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6 IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjt9DQpzcGFuLlByZm9ybWF0SFRNTENhcg0KCXttc28t c3R5bGUtbmFtZToiUHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJbXNvLXN0eWxlLWxpbms6IlByw6lmb3JtYXTDqSBIVE1MIjsNCglmb250LWZhbWlseTpD b25zb2xhczsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpGUjt9DQpwLm0xNjU0NjI5MzE1NTI5MDEw NzY5bS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0 ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoLCBsaS5tMTY1NDYyOTMxNTUyOTAxMDc2OW0t NzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1Mzgw OTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCwgZGl2Lm0xNjU0NjI5MzE1NTI5MDEwNzY5bS03Mzcw Njc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3 NTg2NzVtc29saXN0cGFyYWdyYXBoDQoJe21zby1zdHlsZS1uYW1lOm1fMTY1NDYyOTMxNTUyOTAx MDc2OW0tNzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5 NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1h cmdpbi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBO ZXcgUm9tYW4iLCJzZXJpZiI7fQ0Kc3Bhbi5UZXh0ZWRlYnVsbGVzQ2FyDQoJe21zby1zdHlsZS1u YW1lOiJUZXh0ZSBkZSBidWxsZXMgQ2FyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNv LXN0eWxlLWxpbms6IlRleHRlIGRlIGJ1bGxlcyI7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNh bnMtc2VyaWYiOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkZSO30NCnNwYW4uRW1haWxTdHlsZTI0 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyI7DQoJY29sb3I6YmxhY2s7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6 bm9ybWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJbXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6RU4tVVM7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0K CW1hcmdpbjo3MC44NXB0IDcwLjg1cHQgNzAuODVwdCA3MC44NXB0O30NCmRpdi5Xb3JkU2VjdGlv bjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3Qg bDANCgl7bXNvLWxpc3QtaWQ6NzYzNjUwMjM0Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1z by1saXN0LXRlbXBsYXRlLWlkczotMTcyOTM0OTk5OCAzMzc1MTczNzQgNjc4OTUyOTkgNjc4OTUz MDEgNjc4OTUyOTcgNjc4OTUyOTkgNjc4OTUzMDEgNjc4OTUyOTcgNjc4OTUyOTkgNjc4OTUzMDE7 fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFydC1hdDowOw0KCW1zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDotOw0KCW1zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJbXNvLWZhcmVhc3QtZm9u dC1mYW1pbHk6Q2FsaWJyaTt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4w cHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6 bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0 Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxp c3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2lu Z2RpbmdzO30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjEyOTk5OTEzOTU7DQoJbXNvLWxpc3Qt dHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi02OTI0Mjk1MDYgLTE5MTA5Nzky NDQgNjc4OTUyOTkgNjc4OTUzMDEgNjc4OTUyOTcgNjc4OTUyOTkgNjc4OTUzMDEgNjc4OTUyOTcg Njc4OTUyOTkgNjc4OTUzMDE7fQ0KQGxpc3QgbDE6bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFydC1h dDowOw0KCW1zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDot Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7 DQoJbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk6Q2FsaWJyaTt9DQpAbGlzdCBsMTpsZXZlbDINCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlz dCBsMTpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5n ZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBw dDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwxOmxldmVsNg0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMTps ZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDE6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7 DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCm9sDQoJe21hcmdpbi1ib3R0b206MGNtO30NCnVs DQoJe21hcmdpbi1ib3R0b206MGNtO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4 bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94 bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2 OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFw ZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkZSIiBsaW5r PSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlJlLSw8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+UGxlYXNl IHNlZSBpbmxpbmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPkNoZWVycyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk1lZDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5v bmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDQuMHB0 Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0 REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhv bWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RGUmbmJzcDs6PC9zcGFuPjwvYj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IEVyaWMgUmVzY29ybGEgW21haWx0bzpla3JAcnRmbS5j b21dDQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gdmVuZHJlZGkgMjAgb2N0b2JyZSAyMDE3 IDE2OjIyPGJyPg0KPGI+w4AmbmJzcDs6PC9iPiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOPGJy Pg0KPGI+Q2MmbmJzcDs6PC9iPiBQYXVsIFF1aW5uIChwYXVscSk7IEFsaWEgQXRsYXM7IEthdGhs ZWVuIE1vcmlhcnR5OyBzZmNAaWV0Zi5vcmc8YnI+DQo8Yj5PYmpldCZuYnNwOzo8L2I+IFJlOiBb c2ZjXSBOU0ggRElTQ1VTUyBTdGF0dXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+T24gRnJpLCBPY3QgMjAsIDIwMTcgYXQgNzoxMiBBTSwgJmx0OzxhIGhyZWY9Im1h aWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIiB0YXJnZXQ9Il9ibGFuayI+bW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5S ZS0sPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+VGhhbmsgeW91LCBFcmljLg0KPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlRoZXJlIGlzIGEgbWlzdW5kZXJz dGFuZGluZyBoZXJlLiBUaGUgZG9jdW1lbnQgZG9lcyBub3QgY2xhaW0gRENzIGFyZSBzYWZlIGFu ZCBzZWN1cmUgZW52aXJvbm1lbnRzLg0KIFdoYXQgaXQgc2F5cyBpcyB0aGF0IHRoZSBOU0ggc3Bl Y2lmaWNhdGlvbiBpcyBzY29wZWQgdG8gYmUgZGVwbG95ZWQgaW4gYSBzaW5nbGUgYWRtaW5pc3Ry YXRpdmUgZG9tYWluIHdpdGggbWVhc3VyZXMgdG8sIGUuZy4sOjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJtMTY1NDYyOTMxNTUyOTAxMDc2OW1zb2xpc3RwYXJhZ3JhcGgiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+LTwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8 L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5Qcm90ZWN0IGFnYWluc3Qg c3Bvb2ZlZCBkYXRhPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0xNjU0NjI5MzE1 NTI5MDEwNzY5bXNvbGlzdHBhcmFncmFwaCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj4tPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2Nv bG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPkxlYWtpbmcgZGF0YSBvdXRzaWRlIGEgZG9tYWluPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0xNjU0NjI5MzE1NTI5MDEwNzY5bXNvbGlzdHBhcmFncmFw aCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4tPC9zcGFuPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsm bmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkRldGVjdCBh bmQgcHJldmVudCBpbmRlZmluaXRlIGZvcndhcmRpbmcgbG9vcDwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiPlllcywgYW5kIG15IHBvaW50IChhbmQgSSBiZWxpZXZlIEthdGhsZWVuJ3MpIGlz IHRoYXQgdGhpcyBpcyBub3QgYSByZWFsaXN0aWMgb3BlcmF0aW5nIG1vZGVsIGdpdmVuIHRoZSBh Y3R1YWwgc3RhdGUgb2YgdGhlIHdvcmxkLiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICND Q0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDtt YXJnaW4tcmlnaHQ6MGNtIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Im0xNjU0NjI5MzE1NTI5 MDEwNzY5bXNvbGlzdHBhcmFncmFwaCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNt IDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowY20iPg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFj ayI+QSBzaW5nbGUgYWRtaW5pc3RyYXRpdmUgZG9tYWluIGlzIG5vdCBuZWNlc3NhcmlseSBhIHNl Y3VyZSBvciBhIHNhZmUgb25lLiBUaGF04oCZcyBldmlkZW50LiBBdHRhY2tzDQogZnJvbSB3aXRo aW4gYW4gYWRtaW5pc3RyYXRpdmUgZG9tYWluIGFyZSBwb3NzaWJsZSB3aXRoIG9yIHdpdGhvdXQg TlNILjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFj ayI+SeKAmW0gcmVpdGVyYXRpbmcgbXkgcXVlc3Rpb246IHdoYXQgc3BlY2lmaWMgYXR0YWNrcyBi dWlsdC1pbi9tYW5kYXRvcnkgaW50ZWdyaXR5IG1lY2hhbmlzbXMgd2lsbA0KIHNvbHZlIGZvciB0 aGUgcGFydGljdWxhciBjYXNlIG9mIE5TSD8gVGhhbmsgeW91Ljwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5UYW1wZXJpbmcgd2l0aCB0aGUgcGF0aCBwYWNrZXRzIHRha2UgdGhyb3VnaCB0aGUg TkZDLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBUaGFuayB5b3UuIEkgaGF2ZSB0d28gY29tbWVudHM6 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxl PSJ0ZXh0LWluZGVudDotMTguMHB0O21zby1saXN0OmwxIGxldmVsMSBsZm8yIj48IVtpZiAhc3Vw cG9ydExpc3RzXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxzcGFuIHN0eWxl PSJtc28tbGlzdDpJZ25vcmUiPi08c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+ PCFbZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+U3VjaCBiZWhhdmlv ciBjYW4gYWxzbyBiZSBkZXRlY3RlZCBieSBtZWFucyBvZiBTRkMgT0FNIGluIGFuIFNGQyBkb21h aW4uIFNlZSBteSBmaXJzdCBtZXNzYWdlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0idGV4dC1pbmRlbnQ6LTE4LjBwdDttc28tbGlzdDps MSBsZXZlbDEgbGZvMiI+PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj4tPHNwYW4gc3R5bGU9 ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJz cDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPlN1Y2ggbWlzYmVoYXZpbmcgbm9kZSB3aWxsIGFjdCBvbiBBTEwgdGhlIHRy YWZmaWMsIG5vdCBvbmx5IE5TSC4gVGhlIHF1ZXN0aW9uIGlzIHdoeSB0aGUgTlNIIHN0YW1wZWQg dHJhZmZpYyBtdXN0IGJlIHByb3ZpZGVkIHdpdGggYnVpbHQtaW4gaW50ZWdyaXR5DQogZmVhdHVy ZSB3aGlsZSB0aGUgdHJhZmZpYyBub3QgZWxlY3RlZCB0byBiZSBmb3J3YXJkZWQgdmlhIGEgc2Vy dmljZSBjaGFpbiB3aWxsIGJlIGxlZnQgc3ViamVjdCB0byB0YW1wZXJpbmcgYXR0YWNrcz8gV291 bGRu4oCZdCBiZSBjb25zaXN0ZW50IGdlbmVyYWxpemUgdGhhdCBmZWF0dXJlIChpZiBwcm92aWRl ZCkgdG8gYWxsIHRyYWZmaWMgdGhhdCBpcyB0cmFuc2l0aW5nIGZvciBhIGdpdmVuIGRvbWFpbj88 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyI+LUVrcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4w cHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4m bmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5D aGVlcnMsPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ TWVkPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5i c3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6 MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+IEVyaWMNCiBSZXNjb3JsYSBbbWFpbHRvOjwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90OyI+PGEgaHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIgdGFyZ2V0PSJfYmxh bmsiPjxzcGFuIGxhbmc9IkVOLVVTIj5la3JAcnRmbS5jb208L3NwYW4+PC9hPjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPl0NCjxicj4NCjxiPkVudm95w6km bmJzcDs6PC9iPiB2ZW5kcjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+ZWRpIDIw IG9jdG9icmUgMjAxNyAxNTo1Njxicj4NCjxiPsOAJm5ic3A7OjwvYj4gQk9VQ0FEQUlSIE1vaGFt ZWQgSU1UL09MTjxicj4NCjxiPkNjJm5ic3A7OjwvYj4gUGF1bCBRdWlubiAocGF1bHEpOyBBbGlh IEF0bGFzOyBLYXRobGVlbiBNb3JpYXJ0eTsgPGEgaHJlZj0ibWFpbHRvOnNmY0BpZXRmLm9yZyIg dGFyZ2V0PSJfYmxhbmsiPg0Kc2ZjQGlldGYub3JnPC9hPjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGI+T2JqZXQmbmJzcDs6 PC9iPiBSZTogW3NmY10gTlNIIERJU0NVU1MgU3RhdHVzPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i Pkl0J3MgZXhwbGFpbmVkIGluIGRldGFpbCBpbiBteSBESVNDVVNTOiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZxdW90OzEuIFRoZSBhc3N1 bXB0aW9uIHRoYXQgdGhlIGRhdGFjZW50ZXIgaXMgYSBzZWN1cmUgZW52aXJvbm1lbnQgaXMgbm90 IGE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+cmVhc29uYWJsZSBvbmUu IEFzIEthdGhsZWVuIGFuZCBBZGFtIGJvdGggb2JzZXJ2ZXIsIGRhdGFjZW50ZXI8L3NwYW4+PG86 cD48L286cD48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPmJyZWFjaGVzIGFyZSBjb21tb24gYW5kIHRo YXQgaXMgd2h5IHBlb3BsZSBhcmUgbW92aW5nIHRvd2FyZHM8L3NwYW4+PG86cD48L286cD48L3By ZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDsiPmVuY3J5cHRpb24gaW5zaWRlIHRoZSBkYXRhIGNlbnRlci4gSSBz ZWUgdGhhdCB0aGlzIGRyYWZ0IGhhcyB0ZXh0PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJl PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij5jbGFpbWluZyB0aGF0IHRoaXMgaXMgb25seSB0byBiZSBkZXBsb3llZCBpbiBz YWZlIGVudmlyb25tZW50cywgYnV0IHdlPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij5rbm93IHRoYXQgdGVjaG5vbG9naWVzIGxpa2UgdGhpcyBnZXQgZGVwbG95ZWQgb3V0 c2lkZSB0aGUgbG9jYXRpb25zPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij5mb3Igd2hpY2ggd2UgY2xhaW0gdGhleSBhcmUgdG8gYmUgZGVwbG95ZWQsIGFuZCB0aGVyZSdz IG5vdGhpbmcgaGVyZTwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+dG8g c3RvcCB0aGF0LiBNb3Jlb3ZlciwgdGhlIHdob2xlIHRyZW5kIHRvd2FyZHMgY2xvdWQgY29tcHV0 aW5nIHB1c2hlczwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+dXMgYXdh eSBmcm9tIGRlc2lnbnMgaW4gd2hpY2ggeW91IGNhbiBzYWZlbHkgdGFsayBhYm91dCBzaW5nbGUg c2VjdXJlPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij56b25lcy4mcXVv dDs8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7PG86cD48L286cD48L3ByZT4N CjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDsiPi1Fa3I8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7 PG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7PG86cD48L286cD48L3ByZT4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBGcmksIE9jdCAyMCwgMjAxNyBhdCA2OjUxIEFN LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iIHRhcmdl dD0iX2JsYW5rIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPiZndDsgd3JvdGU6PG86 cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPkRlYXIgRXJpYywNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj5DYW4geW91IHBsZWFzZSBjbGFyaWZ5IHRoaXMgcG9pbnQ6IOKAnFJhdGhl ciBpdCdzIGFib3V0IHRoZSBsZXZlbCBvZiB0cnVzdCB0byBiZSBwbGFjZWQgaW4gdGhlIG5ldHdv cmtpbmcNCiBwYXRoIHRocm91Z2ggd2hpY2ggdGhhdCBkYXRhIGZsb3dzLuKAnT8gPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5Tb3JyeSBpZiB5 b3UgaGF2ZSBhbHJlYWR5IGV4cGxhaW5lZCBpdCB0byB0aGUgZWRpdG9ycywgYnV0IGFzIGEgV0cg cGFydGljaXBhbnQgSSBkb27igJl0IGhhdmUgYWNjZXNzDQogdG8gYSByZWNvcmQgb2Ygc3VjaCBk aXNjdXNzaW9uLiA8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPlRoYW5rIHlvdS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDs7Y29sb3I6YmxhY2siPkNoZWVycyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+TWVkPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzow Y20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RGUmbmJz cDs6PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IEVyaWMgUmVzY29ybGEg W21haWx0bzo8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJnZXQ9Il9ibGFuayI+ZWty QHJ0Zm0uY29tPC9hPl0NCjxicj4NCjxiPkVudm95w6kmbmJzcDs6PC9iPiB2ZW5kcmVkaSAyMCBv Y3RvYnJlIDIwMTcgMTU6NDU8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IFBhdWwgUXVpbm4gKHBhdWxx KTxicj4NCjxiPkNjJm5ic3A7OjwvYj4gQWxpYSBBdGxhczsgQk9VQ0FEQUlSIE1vaGFtZWQgSU1U L09MTjsgS2F0aGxlZW4gTW9yaWFydHk7IDxhIGhyZWY9Im1haWx0bzpzZmNAaWV0Zi5vcmciIHRh cmdldD0iX2JsYW5rIj4NCnNmY0BpZXRmLm9yZzwvYT48YnI+DQo8Yj5PYmpldCZuYnNwOzo8L2I+ IFJlOiBbc2ZjXSBOU0ggRElTQ1VTUyBTdGF0dXM8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk9uIEZyaSwgT2N0IDIwLCAyMDE3 IGF0IDY6MzEgQU0sIFBhdWwgUXVpbm4gKHBhdWxxKSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnBhdWxx QGNpc2NvLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnBhdWxxQGNpc2NvLmNvbTwvYT4mZ3Q7IHdyb3Rl OjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkhp IEFsaWEsDQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbTox Mi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+T24gT2N0IDE5LCAyMDE3LCBhdCAyOjQ5IFBNLCBBbGlhIEF0bGFzICZsdDs8YSBocmVmPSJt YWlsdG86YWthdGxhc0BnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5ha2F0bGFzQGdtYWlsLmNv bTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPkhpIE1lZCwNCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPlNpbmNlIHlvdSBkaXJlY3RlZCB0aGlzIGF0IG1lLCB0aGVyZSBhcmUgZWZm b3J0cyB0byBoYXZlIHNvbWUgZGlzY3Vzc2lvbnMgYW5kIHVuZGVyc3RhbmQgYmV0dGVyIHRoZSBw YXJ0aWN1bGFyIHRocmVhdHMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPkN1cnJlbnRseSwgdGhlcmUgaXMgbm8gdHJhbnNwb3J0IHdpdGggaW50 ZWdyaXR5IHByb3RlY3Rpb24gdGhhdCBpcyBldmVuIGEgU0hPVUxEIHRvIGltcGxlbWVudCwgbXVj aCBsZXNzIGEgTVVTVC4mbmJzcDsgVGhlcmU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+aXMgbm8gY29udHJvbC1wbGFuZSBkZWZpbmVkIChiZXlv bmQgdGhlIEJHUCB3b3JrKSB0aGF0IGRlc2NyaWJlcyBkZXRlY3RpbmcgaXNzdWVzLiZuYnNwOyBU aGVyZSBpcyBubyBPQU0gZGVmaW5lZCBhbmQgYWRvcHRlZDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5ieSB0aGUgV0cgdGhhdCBkZXRlY3RzIG9y IGhhbmRsZXMgdGhlc2UgdHlwZXMgb2YgYXR0YWNrcy4gSSBzZWUgdGhlIHN0cnVjdHVyZSB0aGF0 IHlvdSBhcmUgcHJlc3VtaW5nLCBidXQgbm9uZSBvZiB0aGVzZSBhcmU8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+YXZhaWxhYmxlIGFzIG5vcm1h dGl2ZSByZWZlcmVuY2VzIHRvIE5TSCB0b2RheS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+T0FNIGRv ZXMgbm90IGFkZHJlc3MgdGhlIHNlY3VyaXR5IGNvbmNlcm4gYXJvdW5kIGludGVncml0eSBhbmQg ZGV2aWNlcy4mbmJzcDsgSWYgeW91IGFuZCB0aGUgV0cgYmVsaWV2ZSBPQU0gaXMgdGhlIG5leHQg 4oCcdG8gZG/igJ0gZm9yIHRoZSBXRywgdGhhdOKAmXMgZmluZSwgYnV0IGl04oCZcyBvcnRob2dv bmFsIHRvIHRoZSBzZWN1cml0eQ0KIHBvaW50cyByYWlzZWQuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5JIGhhZCByZWNvbW1lbmRlZCBoYXZp bmcgYSBmb2N1c2VkIGludGVyaW0gbWVldGluZyB0byBtYWtlIHN1cmUgdGhhdCBldmVyeW9uZSBj b25jZXJuZWQgdW5kZXJzdG9vZCB0aGUgaXNzdWVzIGFuZDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj53b3JrZWQgdGhyb3VnaCB0aGUgdGhyZWF0 IGFuYWx5c2lzIGFuZCBwb3NzaWJsZSBzb2x1dGlvbnMgdG9nZXRoZXIuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+TGV04oCZcyBwbGVhc2Ugbm90IGNvbmZsYXRlIHRoZSBvbmdvaW5nIHNlY3VyaXR5IGRpc2N1 c3Npb24gd2l0aCBPQU0sIG9yIG90aGVyIHRvcGljcy4mbmJzcDsgVGhlIHNlY3VyaXR5IHJlYWxp dHksIGFzIHlvdSBwb2ludGVkIG91dCBpbiB5b3VyIGVtYWlsIHRvIEVyaWMsIGlzIHRoYXQgd2Us IGFzIGEgY29tbXVuaXR5DQogYW5kIGluZHVzdHJ5LCBhY2NlcHQgYSBsZXZlbCBvZiB0cnVzdCB3 cnQgbmV0d29yayBkZXZpY2VzLiA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SSBk b24ndCBhY3R1YWxseSB0aGluayB0aGF0J3MgdGhlIHBvaW50IG9mIGNvbnRlbnRpb24sIGF0IGxl YXN0IGZyb20gbXkgcGVyc3BlY3RpdmUuIFJhdGhlciBpdCdzIGFib3V0IHRoZSBsZXZlbCBvZiB0 cnVzdCB0byBiZSBwbGFjZWQgaW4gdGhlIG5ldHdvcmtpbmcgcGF0aCB0aHJvdWdoIHdoaWNoIHRo YXQNCiBkYXRhIGZsb3dzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+LUVrcjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxi bG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEu MHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRv cDo1LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwO1Ro ZSBvbmdvaW5nIGVkaXRzIGFuZCBkaWFsb2d1ZSB3aXRoIEthdGhsZWVuIGFuZCBFcmljIGFyZSB3 b3JraW5nIHRocm91Z2ggdGhlaXIgY29uY2VybnMuJm5ic3A7IEFuIGludGVyaW0gdG8gdGFsayBh Ym91dCBuZXh0IFNGQyBzdGVwcywgcG9zdCBOU0gsIGlzIGEgZGlmZmVyZW50IG1hdHRlci4gJm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj5BdCB0aGlzIHBvaW50LCBjbGVhcmx5IHRoZSBtb3N0IHRoYXQg Y291bGQgaGFwcGVuIGlzIGE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+dmlydHVhbCBpbnRlcmltLiZuYnNwOyBUaGVyZSBhcmUgc29tZSBiYWNr Z3JvdW5kIGRpc2N1c3Npb25zIGdvaW5nIG9uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SSBkbyBub3Qgd2FudCB0byBhc3N1bWUgd2hh dCBtaXh0dXJlIHdpbGwgYmUgYWNjZXB0YWJsZSB0byBoYW5kbGUgdGhlIHNlY3VyaXR5IGNvbmNl cm5zIGV4cHJlc3NlZCBieSBLYXRobGVlbiBhbmQgRXJpYzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5hbmQgc3VwcG9ydGVkIGJ5IGEgbnVtYmVy IG9mIG90aGVyIEFEcy48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj5JIGRvIGdyZWF0bHkgYXBwcmVjaWF0ZSB5b3VyIGF0dGVudGlvbiBhbmQgZWZmb3J0 cyB0byBjbGFyaWZ5IGFuZCB0cnkgdG8gbW92ZSB0aGlzIHdvcmsgZm9yd2FyZC4gSSBoYXZlIGJl ZW4gZXhwcmVzc2luZyBjb25jZXJuczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj5hYm91dCB0aGUgc2VjdXJpdHkgYXNwZWN0cyBvZiB0aGlzIHdv cmsgc2luY2UgUkZDIDc2NjUgd2VudCB0aHJvdWdoIHRoZSBwdWJsaWNhdGlvbiBwcm9jZXNzIC0g YW5kIHN0cm9uZ2x5IGVuY291cmFnaW5nIHNlcmlvdXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+V0cgZm9jdXMgdG8gcHJldmVudCBwcmVjaXNl bHkgd2hhdCBoYXMgbm93IGhhcHBlbmVkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+QWxpYTxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBUaHUsIE9jdCAxOSwgMjAxNyBh dCA0OjQ5IEFNLCAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5j b20iIHRhcmdldD0iX2JsYW5rIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPiZndDsg d3JvdGU6PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPkhpIEFsaWEsDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Q2FuIHlvdSBwbGVhc2Ug c2hhcmUgd2l0aCB1cyB0aGUgY3VycmVudCBzdGF0dXMgb2YgdGhlIGRvY3VtZW50IGFuZCB0aGUg bGlzdCBvZiBwZW5kaW5nIGJsb2NraW5nIHBvaW50cz88L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPkkgd2VudCB0aHJvdWdoIGFsbCBwdWJsaWMgZW1haWwgZXhjaGFuZ2VzLCBlc3BlY2lh bGx5IHRoZSBvbmVzIHJlbGF0ZWQgdG8gc2VjdXJpdHksIGJ1dCBpdCBpcyBub3QgdGhhdCBlYXN5 DQogdG8gdW5kZXJzdGFuZCB3aGF0IGFyZSB0aGUgcmVtYWluaW5nIGlzc3VlcyB0aGF0IG5lZWQg Zml4ZXMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5JbiBwYXJ0aWN1bGFyLCBpcyB0 aGVyZSBhIGNvbmNlcm4gd2l0aCBhc3N1bWluZyB0aGUgY3VycmVudCBOU0ggdGhyZWF0IG1vZGVs Pzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0ibTE2 NTQ2MjkzMTU1MjkwMTA3NjltLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAxMjQz MWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiPg0KPHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4xLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5OU0ggaXMgc2Vj dXJlIGFnYWluc3QgYXR0YWNrcyBpbmR1Y2VkIGJ5IG5vZGVzIHRoYXQgaW5qZWN0IChzcG9vZmVk KSBOU0ggYmVmb3JlIGVudGVyaW5nIGFuIFNGQy1lbmFibGVkIGRvbWFpbi4gSW5kZWVkLCBTRkMg aW5ncmVzcyBub2RlcyBNVVNUIGRpc2NhcmQgcGFja2V0cyBjYXJyeWluZyBOU0guPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0xNjU0NjI5MzE1NTI5MDEwNzY5bS03MzcwNjc1Mjcy ODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVt c29saXN0cGFyYWdyYXBoIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Mi48L3NwYW4+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+TlNIIGlzIHNlY3VyZSBhZ2FpbnN0IGF0dGFja3MgZnJvbSB3aXRo aW4gdGhlIFNGQy1lbmFibGVkIGRvbWFpbiB0byBpbmplY3Qgbm9uLWF1dGhvcml6ZWQgY29udGV4 dCBoZWFkZXJzLiBGcm9tIGEgc2VydmljZSBwZXJzcGVjdGl2ZSwgdGhlIGd1YXJkIGlzIHRoZSBD UCB3aGljaCBpcyByZXNwb25zaWJsZSBmb3INCiBpbnN0cnVjdGluZyB0aGUgU0ZDLWF3YXJlIG5v ZGVzIGFib3V0IHRoZSBtYW5kYXRvcnktdG8tcHJvY2VzcyBhbmQgb3B0aW9uYWwtdG8tcHJvY2Vz cyBjb250ZXh0IGhlYWRlcnMuIEZ1cnRoZXJtb3JlLCB3aGF0ZXZlciB0aGUgb3JpZ2luIG9mIGEg c3VwcGxpZWQgY29udGV4dCBoZWFkZXIsIHRoZSBsYXN0IFNGRiBvZiBhIGNoYWluIChhbmQgZWdy ZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNIIGJlZm9yZSBmb3J3YXJkaW5nIHVwc3RyZWFt Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtMTY1NDYyOTMxNTUyOTAxMDc2OW0t NzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1Mzgw OTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjMuPC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPk5TSCBpcyBzZWN1cmUgYWdhaW5zdCBsZWFraW5n IHByaXZhY3kgaW5mb3JtYXRpb24gb3V0c2lkZSBhbiBTRkMgZW5hYmxlZCBkb21haW4uIFRoZSBs YXN0IFNGRiBvZiBhIGNoYWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0aGUgTlNI IGJlZm9yZSBmb3J3YXJkaW5nIHVwc3RyZWFtLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJtMTY1NDYyOTMxNTUyOTAxMDc2OW0tNzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAzOTMwMTQx NjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCI+DQo8 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPjQuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPk5T SCBpcyBzZWN1cmUgYWdhaW5zdCBpbmRlZmluaXRlIFNGL1NGRiBsb29wcyBieSBtZWFucyBvZiBT SSBhbmQgVFRMIGZpZWxkcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0ibTE2NTQ2 MjkzMTU1MjkwMTA3NjltLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAxMjQzMWdt YWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiPg0KPHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij41Ljwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3 LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5Db250cm9sIHBsYW5l IHNwZWNpZmljIHRocmVhdHMgYXJlIG91dCBvZiBzY29wZSwgYnV0IHRoZSBkb2N1bWVudCBjaXRl cyBJLUQuaWV0Zi1zZmMtY29udHJvbC1wbGFuZSBmb3IgdGhlIGV4cGVjdGVkIGJlaGF2aW9yIHdo ZW4gaW5zdHJ1Y3RpbmcgU0ZDIG5vZGVzLiBCVFcsIHRoZSBzZWNkaXIgcmV2aWV3IG9mIHRoZQ0K IENQIHJlcXVpcmVtZW50cyBjYW4gYmUgcmV0cmlldmVkIGhlcmUgKDxhIGhyZWY9Imh0dHBzOi8v ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL3Jldmlldy1pZXRmLXNmYy1jb250cm9sLXBsYW5lLTAy LXNlY2Rpci1lYXJseS1tZWFkb3dzLTIwMTUtMTItMTAvIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvcmV2aWV3LWlldGYtc2ZjLWNvbnRyb2wtcGxhbmUt MDItc2VjZGlyLWVhcmx5LW1lYWRvd3MtMjAxNS0xMi0xMC88L2E+KS4NCjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJtMTY1NDYyOTMxNTUyOTAxMDc2OW0tNzM3MDY3NTI3Mjg1MDA3 NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlz dHBhcmFncmFwaCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjYuPC9zcGFuPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPk5TSCBkb2VzIG5vdCBzaGFyZSBwcml2YWN5IGRhdGEgd2l0aCBub24tYXV0 aG9yaXplZCBwYXJ0aWVzLiBJbmRlZWQsIGRhdGEgY2FycmllZCBpbiBjb250ZXh0IGhlYWRlcnMg YXJlIGRlcml2ZWQgZnJvbSB0aGUgb3JpZ2luYWwgcGFja2V0IChlLmcuLCBzb3VyY2UgSVAgYWRk cmVzcykgb3IgYXJlIGFscmVhZHkga25vd24NCiB0byB0aGUgb3BlcmF0b3IgKGUuZy4sIHN1YnNj cmliZXIgaWRlbnRpZmllciwgcG9saWN5IGlkZW50aWZpZXIsIHNlcnZpY2UgaWRlbnRpZmllciku IFRoZSBjb250ZXh0IGluZm9ybWF0aW9uIGlzIHNoYXJlZCB3aXRoIG5vZGVzIHRoYXQgYXJlIHdp dGhpbiB0aGUgc2FtZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4uICZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJtMTY1NDYyOTMxNTUyOTAxMDc2OW0tNzM3MDY3NTI3Mjg1MDA3 NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlz dHBhcmFncmFwaCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjcuPC9zcGFuPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPkxpa2Ugb3RoZXIgY29tbXVuaWNhdGlvbiBwcm90b2NvbHMsIGF0dGFja3Mg ZnJvbSB3aXRoaW4gdGhlIG5ldHdvcmsgYXJlIHBvc3NpYmxlLCBidXQgdGhvc2UgYXJlIHNvZnRl biBieSByZWx5aW5nIG9uIHRoZSBwcm9jZWR1cmVzIHB1dCBpbiBwbGFjZSBieSBvcGVyYXRvcnMg Zm9yIHRlc3RpbmcgYW5kIHZhbGlkYXRpbmcNCiBub2Rlcy9mZWF0dXJlcyBiZWZvcmUgYWN0dWFs IGFjdGl2YXRpb24uIE5TSCBkb2VzIG5vdCBwcm92aWRlIGEgYnVpbHQtaW4gZmVhdHVyZSB0byBw cmV2ZW50IG1pc2JlaGF2aW5nIG5vZGVzLCBidXQgcmVjb21tZW5kcyB0byByZWx5IG9uIHRoZSBz ZWN1cml0eSBmZWF0dXJlcyBwcm92aWRlZCBieSB0aGUgdW5kZXJseWluZyB0cmFuc3BvcnQgZW5j YXBzdWxhdGlvbiBzY2hlbWVzLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5MZXTi gJlzIG5vdyBmb2N1cyBvbiB0aGUgdHlwaWNhbCDigJxhdHRhY2tz4oCdIHRoYXQgY2FuIGJlIGlz c3VlZCBmcm9tIHdpdGhpbiB0aGUgbmV0d29yazoNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJtMTY1NDYyOTMxNTUyOTAxMDc2OW0tNzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAzOTMw MTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCI+ DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjEuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PkEgbWlzYmVoYXZpbmcgbm9kZSByZWRpcmVjdCB0aGUgdHJhZmZpYyB0byBub24tYXV0aG9yaXpl ZCBub2RlcyBvdXRzaWRlIGEgZG9tYWluOiBUaGlzIGlzIG5vdCBOU0gtc3BlY2lmaWMuPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0xNjU0NjI5MzE1NTI5MDEwNzY5bS03MzcwNjc1 MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2 NzVtc29saXN0cGFyYWdyYXBoIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Mi48L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9zcGFuPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+QSBtaXNiZWhhdmluZyBTRkMtdW53YXJlIG5vZGUgYWx0ZXJz IHRoZSBjb250ZW50IG9mIGEgcGFja2V0OiBUaGlzIGlzIG5vdCBOU0gtc3BlY2lmaWMuPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0xNjU0NjI5MzE1NTI5MDEwNzY5bS03MzcwNjc1 MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2 NzVtc29saXN0cGFyYWdyYXBoIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+My48L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOw0KPC9zcGFuPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+QSBtaXNiZWhhdmluZyBTRkMtYXdhcmUgbm9kZSBhbHRlcnMg dGhlIGNvbnRlbnQgb2YgTlNIOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtMTY1 NDYyOTMxNTUyOTAxMDc2OW0tNzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMx Z21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjcyLjBwdCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBw dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPmkuPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkl0IHJlbW92ZXMgdGhlIE5TSCBo ZWFkZXIgZnJvbSBhbGwgcGFja2V0cyBpdCBzZWVzOiBUaGlzIHdpbGwgaW1wbHkgdGhhdCB0aGUg cGFja2V0cywgdGhlIG1pc2JlaGF2aW5nIG5vZGUgaW50ZXJjZXB0cywgd2lsbCBiZSBmb3J3YXJk ZWQgdXBzdHJlYW0gd2l0aG91dCBpbnZva2luZyB0aGUgcmVxdWlyZWQgU0ZzDQogKHdoaWNoIG1h eSBiZSBzZWVuIGFzIGEgZmVhdHVyZSwgbm90IGEgYnVnIGlmIG9uZSBkaXNsaWtlcyDigJxtaWRk bGVib3hlc+KAnSA6KSkuIE1vcmUgc2VyaW91c2x5LCB0aGUgT0FNIE5TSCBmZWF0dXJlIHdpbGwg YWxsb3cgYW4gb3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRoZXIgTlNIIHBhY2tldHMgYXJlIHRyYXZl bGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMgb2YgdGhhdCBkb21haW4u IFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHdpbGwNCiBoZWxwIGRldGVjdGluZyB0aGUgbWlzYmVoYXZp bmcgbm9kZS4gPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0xNjU0NjI5MzE1NTI5 MDEwNzY5bS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEz Njk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIu MHB0Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9zcGFuPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+aWkuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPkl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNQSTogVGhpcyB3aWxs IGltcGx5IHRoYXQgdGhlc2UgcGFja2V0cyB3aWxsIGJlIGZvcndhcmRlZCBvdmVyIGEgd3Jvbmcg cGF0aC4gQWdhaW4sIHJ1bm5pbmcgT0FNIE5TSCB3aWxsIGFsbG93IHRoZSBvcGVyYXRvciB0byBk ZXRlY3Qgd2hldGhlciBhIHBhY2tldCBpcw0KIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRo IFNGQyBpbnN0cnVjdGlvbnMuIFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHJlZ3VsYXJseSB3aWxsIGhl bHAgaWRlbnRpZnlpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUgYW5kIHdoZXRoZXIgdGhlIFNGQyBj b25maWd1cmF0aW9uIG9mIGEgZG9tYWluIGlzIGFsaWduZWQgd2l0aCB0aGUgZXhwZWN0ZWQgYmVo YXZpb3IuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0xNjU0NjI5MzE1NTI5MDEw NzY5bS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0 ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0 Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+aWlpLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBw dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij5JdCBtb2RpZmllcyB0aGUgY29udGVudCBvZiBTSS9UVEw6IFRoaXMgd2lsbCBpbmNyZWFzZSB0 aGUgYXV0aG9yaXplZCBtYXhpbXVtIFNGRi9TRiBob3BzLiBOb3Qgc3VyZSBpZiB0aGVyZSBpcyBh IHNlY3VyaXR5IHByb2JsZW0gb3V0IHRoZXJlLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Im0xNjU0NjI5MzE1NTI5MDEwNzY5bS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAx NDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIiBz dHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+aXYuPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPlRoZSBtaXNiZWhhdmluZyBub2Rl IGlzIGEgY2xhc3NpZmllcjogVGhlIGltcGxpY2F0aW9ucyB3aWxsIGJlIHNldmVyZSBmcm9tIGEg c2VydmljZSBzdGFuZHBvaW50LiBOU0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0 byBkZXRlY3Qgc3VjaCBjYXNlLiAmbmJzcDsmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0ibTE2NTQ2MjkzMTU1MjkwMTA3NjltLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkz MDE0MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgi IHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6Ny4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij52 Ljwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5UaGUgbWlz YmVoYXZpbmcgbm9kZSBpcyBhbiBTRkY6IEV4YW1wbGVzIG9mIG1pc2JlaGF2aW9ycyBhcmU6IHN0 cmlwIE5TSCwgZm9yd2FyZCB0byBhIG5vbi1hdXRob3JpemVkIFNGLCByZWRpcmVjdCB0aGUgdHJh ZmZpYyB0byBhIG5vbi1hdXRob3JpemVkIG5vZGVzLCBldGMuIExpa2UgZm9yIHRoZSBjbGFzc2lm aWVyDQogY2FzZSwgTlNIIHJlbGllcyBvbiBPQU0gYW5kIGNvbnRyb2wtcGxhbmUgdG8gZGV0ZWN0 IHN1Y2ggY2FzZS4gJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5BcmUgdGhlcmUgc3BlY2lmaWMgYXR0YWNrcyB0aGF0IGFy ZSBub3QgbGlzdGVkIGFib3ZlIGFuZCB0aGF0IG5lZWQgbW9yZSBhdHRlbnRpb24gZnJvbSB0aGUg V0c/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5UaGFuayB5b3UuPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij5DaGVlcnMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPk1lZDwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXzxicj4NCnNmYyBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJt YWlsdG86c2ZjQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+c2ZjQGlldGYub3JnPC9hPjxicj4N CjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2ZjIiB0YXJn ZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmM8L2E+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_787AE7BB302AE849A7480A190F8B93300A057C92OPEXCLILMA3corp_-- From nobody Fri Oct 20 07:41:11 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9A501241F3 for ; Fri, 20 Oct 2017 07:41:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.519 X-Spam-Level: X-Spam-Status: No, score=-14.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jLhwP60h_743 for ; Fri, 20 Oct 2017 07:41:06 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05A49128D0D for ; Fri, 20 Oct 2017 07:41:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=67738; q=dns/txt; s=iport; t=1508510466; x=1509720066; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=Z27F73rqaeks886Uea1USm7GEccms6o6JedBVvV7nFE=; b=kWN2FJE6xGBmlNEqamTzaBLKVdvHMUIp+k2nBx+ixaEcsrLUqN5bH3lD lerGFXh38u7V00XD2501ozCEc2h6DM/jgyREi6i5GS6L5H0+49YN1UpeG NW7czMGfVyQDHk7dVgDuNCDpdZAchecezQViv+N8Hnl5dJOeFGRth/cm5 o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CrAAC+CepZ/5RdJa1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9wZG4nB4Nzih+PP4pEjW0QgX4DChgBDIUWAhqEIT8YAQIBAQE?= =?us-ascii?q?BAQEBayiFHgIBAwEBIUQHCxACAQYCDioBBgMCAgIfBgsUEQIEDgUUB4khTAMVE?= =?us-ascii?q?IwxnWeCJ4c7DYNZAQEBAQEBAQEBAQEBAQEBAQEBAQEBGAWDLoIHgVCBaSmBdIE?= =?us-ascii?q?Ngl6BawkBEgEJgyovgjIFh02CPI5miDQ8Aodhh0VQhHmCFYV5ixGNCohDAhEZA?= =?us-ascii?q?YE4AR84gQNYehVJLQGCNoIjgjx2iB4NGAeBBYERAQEB?= X-IronPort-AV: E=Sophos; i="5.43,405,1503360000"; d="scan'208,217"; a="19206271" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Oct 2017 14:41:04 +0000 Received: from XCH-RTP-010.cisco.com (xch-rtp-010.cisco.com [64.101.220.150]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id v9KEf44h020094 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 20 Oct 2017 14:41:04 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-010.cisco.com (64.101.220.150) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 20 Oct 2017 10:41:03 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Fri, 20 Oct 2017 10:41:03 -0400 From: "Carlos Pignataro (cpignata)" To: Eric Rescorla CC: Med Boucadair , Kathleen Moriarty , "Paul Quinn (paulq)" , "sfc@ietf.org" , Alia Atlas Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wAdXO4AACcpgAAAAH8cgAAAiuGAAAA/eoAAAFsMAAAARgkAAACEeYA= Date: Fri, 20 Oct 2017 14:41:03 +0000 Message-ID: <39BE4BC4-FEC1-4A3A-A946-30E8523DFED1@cisco.com> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.116.133] Content-Type: multipart/alternative; boundary="_000_39BE4BC4FEC14A3AA94630E8523DFED1ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:41:09 -0000 --_000_39BE4BC4FEC14A3AA94630E8523DFED1ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RXJpYywNCg0KT24gT2N0IDIwLCAyMDE3LCBhdCAxMDoyNiBBTSwgRXJpYyBSZXNjb3JsYSA8ZWty QHJ0Zm0uY29tPG1haWx0bzpla3JAcnRmbS5jb20+PiB3cm90ZToNCg0KDQoNCk9uIEZyaSwgT2N0 IDIwLCAyMDE3IGF0IDc6MTggQU0sIENhcmxvcyBQaWduYXRhcm8gKGNwaWduYXRhKSA8Y3BpZ25h dGFAY2lzY28uY29tPG1haWx0bzpjcGlnbmF0YUBjaXNjby5jb20+PiB3cm90ZToNCg0KT24gT2N0 IDIwLCAyMDE3LCBhdCAxMDowOCBBTSwgRXJpYyBSZXNjb3JsYSA8ZWtyQHJ0Zm0uY29tPG1haWx0 bzpla3JAcnRmbS5jb20+PiB3cm90ZToNCg0KDQpPbiBGcmksIE9jdCAyMCwgMjAxNyBhdCA3OjAx IEFNLCBDYXJsb3MgUGlnbmF0YXJvIChjcGlnbmF0YSkgPGNwaWduYXRhQGNpc2NvLmNvbTxtYWls dG86Y3BpZ25hdGFAY2lzY28uY29tPj4gd3JvdGU6DQpFcmljLA0KDQpPbiBPY3QgMjAsIDIwMTcs IGF0IDk6NDUgQU0sIEVyaWMgUmVzY29ybGEgPGVrckBydGZtLmNvbTxtYWlsdG86ZWtyQHJ0Zm0u Y29tPj4gd3JvdGU6DQoNCg0KDQpPbiBGcmksIE9jdCAyMCwgMjAxNyBhdCA2OjMxIEFNLCBQYXVs IFF1aW5uIChwYXVscSkgPHBhdWxxQGNpc2NvLmNvbTxtYWlsdG86cGF1bHFAY2lzY28uY29tPj4g d3JvdGU6DQpIaSBBbGlhLA0KDQoNCg0KT24gT2N0IDE5LCAyMDE3LCBhdCAyOjQ5IFBNLCBBbGlh IEF0bGFzIDxha2F0bGFzQGdtYWlsLmNvbTxtYWlsdG86YWthdGxhc0BnbWFpbC5jb20+PiB3cm90 ZToNCg0KSGkgTWVkLA0KDQpTaW5jZSB5b3UgZGlyZWN0ZWQgdGhpcyBhdCBtZSwgdGhlcmUgYXJl IGVmZm9ydHMgdG8gaGF2ZSBzb21lIGRpc2N1c3Npb25zIGFuZCB1bmRlcnN0YW5kIGJldHRlciB0 aGUgcGFydGljdWxhciB0aHJlYXRzLg0KQ3VycmVudGx5LCB0aGVyZSBpcyBubyB0cmFuc3BvcnQg d2l0aCBpbnRlZ3JpdHkgcHJvdGVjdGlvbiB0aGF0IGlzIGV2ZW4gYSBTSE9VTEQgdG8gaW1wbGVt ZW50LCBtdWNoIGxlc3MgYSBNVVNULiAgVGhlcmUNCmlzIG5vIGNvbnRyb2wtcGxhbmUgZGVmaW5l ZCAoYmV5b25kIHRoZSBCR1Agd29yaykgdGhhdCBkZXNjcmliZXMgZGV0ZWN0aW5nIGlzc3Vlcy4g IFRoZXJlIGlzIG5vIE9BTSBkZWZpbmVkIGFuZCBhZG9wdGVkDQpieSB0aGUgV0cgdGhhdCBkZXRl Y3RzIG9yIGhhbmRsZXMgdGhlc2UgdHlwZXMgb2YgYXR0YWNrcy4gSSBzZWUgdGhlIHN0cnVjdHVy ZSB0aGF0IHlvdSBhcmUgcHJlc3VtaW5nLCBidXQgbm9uZSBvZiB0aGVzZSBhcmUNCmF2YWlsYWJs ZSBhcyBub3JtYXRpdmUgcmVmZXJlbmNlcyB0byBOU0ggdG9kYXkuDQoNCg0KT0FNIGRvZXMgbm90 IGFkZHJlc3MgdGhlIHNlY3VyaXR5IGNvbmNlcm4gYXJvdW5kIGludGVncml0eSBhbmQgZGV2aWNl cy4gIElmIHlvdSBhbmQgdGhlIFdHIGJlbGlldmUgT0FNIGlzIHRoZSBuZXh0IOKAnHRvIGRv4oCd IGZvciB0aGUgV0csIHRoYXTigJlzIGZpbmUsIGJ1dCBpdOKAmXMgb3J0aG9nb25hbCB0byB0aGUg c2VjdXJpdHkgcG9pbnRzIHJhaXNlZC4NCg0KDQpJIGhhZCByZWNvbW1lbmRlZCBoYXZpbmcgYSBm b2N1c2VkIGludGVyaW0gbWVldGluZyB0byBtYWtlIHN1cmUgdGhhdCBldmVyeW9uZSBjb25jZXJu ZWQgdW5kZXJzdG9vZCB0aGUgaXNzdWVzIGFuZA0Kd29ya2VkIHRocm91Z2ggdGhlIHRocmVhdCBh bmFseXNpcyBhbmQgcG9zc2libGUgc29sdXRpb25zIHRvZ2V0aGVyLg0KDQpMZXTigJlzIHBsZWFz ZSBub3QgY29uZmxhdGUgdGhlIG9uZ29pbmcgc2VjdXJpdHkgZGlzY3Vzc2lvbiB3aXRoIE9BTSwg b3Igb3RoZXIgdG9waWNzLiAgVGhlIHNlY3VyaXR5IHJlYWxpdHksIGFzIHlvdSBwb2ludGVkIG91 dCBpbiB5b3VyIGVtYWlsIHRvIEVyaWMsIGlzIHRoYXQgd2UsIGFzIGEgY29tbXVuaXR5IGFuZCBp bmR1c3RyeSwgYWNjZXB0IGEgbGV2ZWwgb2YgdHJ1c3Qgd3J0IG5ldHdvcmsgZGV2aWNlcy4NCg0K SSBkb24ndCBhY3R1YWxseSB0aGluayB0aGF0J3MgdGhlIHBvaW50IG9mIGNvbnRlbnRpb24sIGF0 IGxlYXN0IGZyb20gbXkgcGVyc3BlY3RpdmUuIFJhdGhlciBpdCdzIGFib3V0IHRoZSBsZXZlbCBv ZiB0cnVzdCB0byBiZSBwbGFjZWQgaW4gdGhlIG5ldHdvcmtpbmcgcGF0aCB0aHJvdWdoIHdoaWNo IHRoYXQgZGF0YSBmbG93cy4NCg0KDQpVbmRlcnN0b29kLiBIb3cgYWJvdXQgdGhpcz8NCg0KICAg ICAgICAgICAgICBYLjIuICBUcmFuc3BvcnQgRW5jYXBzdWxhdGlvbiBTZWN1cml0eQ0KDQogICAg ICAgICAgICAgICAgICAgICAgICBOU0ggaXMgYWx3YXlzIGVuY2Fwc3VsYXRlZCBieSBhbiBvdXRl ciB0cmFuc3BvcnQNCiAgICAgICAgICAgICAgICAgICAgICAgIGVuY2Fwc3VsYXRpb24gYXMgZGV0 YWlsZWQgaW4gU2VjdGlvbiA0IG9mIHRoaXMNCiAgICAgICAgICAgICAgICAgICAgICAgIHNwZWNp ZmljYXRpb24sIGFuZCBhcyBkZXBpY3RlZCBpbiBGaWd1cmUgMS4gIElmIGFuIG9wZXJhdG9yDQog ICAgICAgICAgICAgICAgICAgICAgICBkZWVtcyBjcnlwdG9ncmFwaGljIGludGVncml0eSBwcm90 ZWN0aW9uIG5lY2Vzc2FyeSBkdWUgdG8NCiAgICAgICAgICAgICAgICAgICAgICAgIHRoZWlyIHJp c2sgYW5hbHlzaXMsIHRoZW4gYW4gb3V0ZXIgdHJhbnNwb3J0IGVuY2Fwc3VsYXRpb24NCiAgICAg ICAgICAgICAgICAgICAgICAgIHRoYXQgcHJvdmlkZXMgc3VjaCBwcm90ZWN0aW9uIFtSRkM2MDcx XSwgc3VjaCBhcyBJUHNlYywgTVVTVA0KICAgICAgICAgICAgICAgICAgICAgICAgYmUgdXNlZC4N Cg0KSSBjYW4ndCBzcGVhayBmb3IgS2F0aGxlZW4sIGJ1dCBJIGRvbid0IHJlYWxseSB0aGluayB0 aGlzIGdldHMgdGhlIGpvYiBkb25lLg0KDQpBcyBkZXNjcmliZWQgaW4gUkZDIDM1NTIgKGh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmMzNTUyI3NlY3Rpb24tMykgb3VyIHRocmVhdCBtb2Rl bCBpcyB0aGF0IHRoZSBJbnRlcm5ldCBpcyB1bnRydXN0ZWQuDQoNClllcy4gSnVzdCB0byBjbGFy aWZ5LCB0aG91Z2gsIE5TSCBpcyBub3QgYW4gZW5kLXRvLWVuZCBwcm90b2NvbC4gSXQgZG9lc27i gJl0IOKAnHN0YXJ04oCdIGluIGEgaG9zdCBhbmQg4oCcZW5k4oCdIGluIGEgaG9zdC9zZXJ2ZXIu IEl04oCZcyBhIG5ldHdvcmstY2VudHJpYyBsaWtlIFByb3Zpc2lvbmVkIFZpcnR1YWwgUHJpdmF0 ZSBOZXR3b3JrcywgVHJhZmZpYyBFbmdpbmVlcmluZywgTVBMUy4NCg0KU3VyZSwgYW5kIGluIHRo aXMgY2FzZSBpdCdzIHRoZSBuZXR3b3JrIGJldHdlZW4gdGhlIG5vZGVzIHRoYXQgaXMgcmVsZXZh bnQgaGVyZS4NCg0KUmlnaHQuIE5vdCBhbiBhcHBsaWNhdGlvbiBsYXllciBjb25zdHJ1Y3QsIG5v dCB0aGUgZW5kLXRvLWVuZCBJbnRlcm5ldC4NCg0KDQpUaGF0IG1lYW5zIHdlIHNob3VsZCBiZSBk ZXNpZ25pbmcgcHJvdG9jb2xzIHRoYXQgYXJlIHNhZmUgdG8gb3BlcmF0ZSBpbiB0aGF0IGVudmly b25tZW50LCB3aGljaCBpbiB0aGlzIGNhc2UgbWVhbnMgdGhhdCB0aGUgcHJvdG9jb2wgc2hvdWxk IGVpdGhlciAoYSkgY29tZSB3aXRoIGEgYnVpbHQtaW4gc2VjdXJpdHkgbWVjaGFuaXNtIG9yIChi KSBiZSBydW4gb3ZlciBhIHNlY3VyZSB0cmFuc3BvcnQuIEkgZG9uJ3QgdGhpbmsgdGVsbGluZyBv cGVyYXRvcnMgInlvdSBmaWd1cmUgaXQgb3V0IiByZWZsZWN0cyBiZXN0IGN1cnJlbnQgcHJhY3Rp Y2UuDQoNCg0KQnV04oCmIHdlIGFyZSBzYXlpbmcg4oCccnVuIG92ZXIgYSBzZWN1cmUgdHJhbnNw b3J04oCdLg0KDQpXZWxsLCB0aGF0J3Mgbm90IHdoYXQgeW91ciBwcm9wb3NlZCB0ZXh0IHNheXMg eW91IHNob3VsZCBkbyBpdCAiSWYgYW4gb3BlcmF0b3IgZGVlbXMgY3J5cHRvZ3JhcGhpYyBpbnRl Z3JpdHkgcHJvdGVjdGlvbiBuZWNlc3NhcnkgZHVlIHRvIHRoZWlyIHJpc2sgYW5hbHlzaXMiLiBJ ZiB5b3Ugd2FudCB0byBzYXkgInRoaXMgaXMgb25seSBzcGVjaWZpZWQgdG8gcnVuIG92ZXIgYSBz ZWN1cmUgdHJhbnNwb3J0IiB0aGVuIGZpbmUsIGJ1dCB0aGF0J3Mgbm90IHdoYXQgdGhpcyBzYXlz Lg0KDQpXZWxsLCB5b3Ugc29tZWhvdyBlZGl0ZWQgb3V0IHRleHQgdGhhdCBJIGluY2x1ZGVkIGZy b20gQWxpYSDigJQgbGV0IG1lIGNvcHkgaXQgYmFjayBhZ2FpbjoNCg0K4oCUPjjigJQNClRoaXMg d2FzIGJlc3QgY2FwdHVyZWQgaW4gQWxpYeKAmXMgbWVzc2FnZSB0byB5b3UsIGNvcGllZCBvbiB0 aGlzIGxpc3Q6DQoNCiJUaGVyZSBhcmUgbm8gZW5jYXBzdWxhdGlvbnMgZnJvbSB0aGUgUm91dGlu ZyBBcmVhIHRoYXQgcmVxdWlyZSBpbnRlZ3JpdHkgcHJvdGVjdGlvbiB0aGF0IEkgYW0gYXdhcmUg b2Y7DQp3aGVuIHByaXZhY3kgaXMgcmVxdWlyZWQgSVBzZWMgb3IgTUFDIHNlYyBhcmUgdXNlZC7i gJ0NCuKAlD444oCUDQoNClRoYXQgc2F5cyDigJx3aGVuIHByaXZhY3kgaXMgcmVxdWlyZWTigJ0g YXMgYSBxdWFsaWZpZXIuDQoNClRvIHVuZGVyc3RhbmQsIGFyZSB5b3Ugc3VnZ2VzdGluZyAob3Ig c3RhdGluZykgdGhhdCBhbGwgUlRHLUFyZWEgZW5jYXBzdWxhdGlvbnMgYWx3YXlzIG5lZWQgdG8g dW5jb25kaXRpb25hbGx5IHJ1biBvdmVyIGEgc2VjdXJlIHRyYW5zcG9ydD8NCg0KSW4gb3RoZXIg d29yZHMsIHdlIGNhbiBtYW5kYXRlIHRoYXQgdGhvc2UgbWVjaGFuaXNtcyBleGlzdCBhbmQgbWFu ZGF0ZSB0aGF0IHRoZXkgYXJlIHVzZWQgd2hlbiByZXF1aXJlZC4NCg0KVGhhbmtzLA0KDQrigJQg Q2FybG9zLg0KDQoNCg0KLUVrcg0KDQoNCg0KLUVrcg0KDQoNCg0K4oCUIENhcmxvcy4NCg0KLUVr cg0KDQoNCiBUaGUgb25nb2luZyBlZGl0cyBhbmQgZGlhbG9ndWUgd2l0aCBLYXRobGVlbiBhbmQg RXJpYyBhcmUgd29ya2luZyB0aHJvdWdoIHRoZWlyIGNvbmNlcm5zLiAgQW4gaW50ZXJpbSB0byB0 YWxrIGFib3V0IG5leHQgU0ZDIHN0ZXBzLCBwb3N0IE5TSCwgaXMgYSBkaWZmZXJlbnQgbWF0dGVy Lg0KDQoNCg0KQXQgdGhpcyBwb2ludCwgY2xlYXJseSB0aGUgbW9zdCB0aGF0IGNvdWxkIGhhcHBl biBpcyBhDQp2aXJ0dWFsIGludGVyaW0uICBUaGVyZSBhcmUgc29tZSBiYWNrZ3JvdW5kIGRpc2N1 c3Npb25zIGdvaW5nIG9uLg0KDQpJIGRvIG5vdCB3YW50IHRvIGFzc3VtZSB3aGF0IG1peHR1cmUg d2lsbCBiZSBhY2NlcHRhYmxlIHRvIGhhbmRsZSB0aGUgc2VjdXJpdHkgY29uY2VybnMgZXhwcmVz c2VkIGJ5IEthdGhsZWVuIGFuZCBFcmljDQphbmQgc3VwcG9ydGVkIGJ5IGEgbnVtYmVyIG9mIG90 aGVyIEFEcy4NCg0KSSBkbyBncmVhdGx5IGFwcHJlY2lhdGUgeW91ciBhdHRlbnRpb24gYW5kIGVm Zm9ydHMgdG8gY2xhcmlmeSBhbmQgdHJ5IHRvIG1vdmUgdGhpcyB3b3JrIGZvcndhcmQuIEkgaGF2 ZSBiZWVuIGV4cHJlc3NpbmcgY29uY2VybnMNCmFib3V0IHRoZSBzZWN1cml0eSBhc3BlY3RzIG9m IHRoaXMgd29yayBzaW5jZSBSRkMgNzY2NSB3ZW50IHRocm91Z2ggdGhlIHB1YmxpY2F0aW9uIHBy b2Nlc3MgLSBhbmQgc3Ryb25nbHkgZW5jb3VyYWdpbmcgc2VyaW91cw0KV0cgZm9jdXMgdG8gcHJl dmVudCBwcmVjaXNlbHkgd2hhdCBoYXMgbm93IGhhcHBlbmVkLg0KDQpSZWdhcmRzLA0KQWxpYQ0K DQoNCk9uIFRodSwgT2N0IDE5LCAyMDE3IGF0IDQ6NDkgQU0sIDxtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPj4gd3JvdGU6DQpI aSBBbGlhLA0KDQpDYW4geW91IHBsZWFzZSBzaGFyZSB3aXRoIHVzIHRoZSBjdXJyZW50IHN0YXR1 cyBvZiB0aGUgZG9jdW1lbnQgYW5kIHRoZSBsaXN0IG9mIHBlbmRpbmcgYmxvY2tpbmcgcG9pbnRz Pw0KDQpJIHdlbnQgdGhyb3VnaCBhbGwgcHVibGljIGVtYWlsIGV4Y2hhbmdlcywgZXNwZWNpYWxs eSB0aGUgb25lcyByZWxhdGVkIHRvIHNlY3VyaXR5LCBidXQgaXQgaXMgbm90IHRoYXQgZWFzeSB0 byB1bmRlcnN0YW5kIHdoYXQgYXJlIHRoZSByZW1haW5pbmcgaXNzdWVzIHRoYXQgbmVlZCBmaXhl cy4NCg0KSW4gcGFydGljdWxhciwgaXMgdGhlcmUgYSBjb25jZXJuIHdpdGggYXNzdW1pbmcgdGhl IGN1cnJlbnQgTlNIIHRocmVhdCBtb2RlbD8NCg0KDQoxLiAgTlNIIGlzIHNlY3VyZSBhZ2FpbnN0 IGF0dGFja3MgaW5kdWNlZCBieSBub2RlcyB0aGF0IGluamVjdCAoc3Bvb2ZlZCkgTlNIIGJlZm9y ZSBlbnRlcmluZyBhbiBTRkMtZW5hYmxlZCBkb21haW4uIEluZGVlZCwgU0ZDIGluZ3Jlc3Mgbm9k ZXMgTVVTVCBkaXNjYXJkIHBhY2tldHMgY2FycnlpbmcgTlNILg0KDQoyLiAgTlNIIGlzIHNlY3Vy ZSBhZ2FpbnN0IGF0dGFja3MgZnJvbSB3aXRoaW4gdGhlIFNGQy1lbmFibGVkIGRvbWFpbiB0byBp bmplY3Qgbm9uLWF1dGhvcml6ZWQgY29udGV4dCBoZWFkZXJzLiBGcm9tIGEgc2VydmljZSBwZXJz cGVjdGl2ZSwgdGhlIGd1YXJkIGlzIHRoZSBDUCB3aGljaCBpcyByZXNwb25zaWJsZSBmb3IgaW5z dHJ1Y3RpbmcgdGhlIFNGQy1hd2FyZSBub2RlcyBhYm91dCB0aGUgbWFuZGF0b3J5LXRvLXByb2Nl c3MgYW5kIG9wdGlvbmFsLXRvLXByb2Nlc3MgY29udGV4dCBoZWFkZXJzLiBGdXJ0aGVybW9yZSwg d2hhdGV2ZXIgdGhlIG9yaWdpbiBvZiBhIHN1cHBsaWVkIGNvbnRleHQgaGVhZGVyLCB0aGUgbGFz dCBTRkYgb2YgYSBjaGFpbiAoYW5kIGVncmVzcyBub2RlcykgTVVTVCByZW1vdmUgdGhlIE5TSCBi ZWZvcmUgZm9yd2FyZGluZyB1cHN0cmVhbS4NCg0KMy4gIE5TSCBpcyBzZWN1cmUgYWdhaW5zdCBs ZWFraW5nIHByaXZhY3kgaW5mb3JtYXRpb24gb3V0c2lkZSBhbiBTRkMgZW5hYmxlZCBkb21haW4u IFRoZSBsYXN0IFNGRiBvZiBhIGNoYWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNUIHJlbW92ZSB0 aGUgTlNIIGJlZm9yZSBmb3J3YXJkaW5nIHVwc3RyZWFtLg0KDQo0LiAgTlNIIGlzIHNlY3VyZSBh Z2FpbnN0IGluZGVmaW5pdGUgU0YvU0ZGIGxvb3BzIGJ5IG1lYW5zIG9mIFNJIGFuZCBUVEwgZmll bGRzLg0KDQo1LiAgQ29udHJvbCBwbGFuZSBzcGVjaWZpYyB0aHJlYXRzIGFyZSBvdXQgb2Ygc2Nv cGUsIGJ1dCB0aGUgZG9jdW1lbnQgY2l0ZXMgSS1ELmlldGYtc2ZjLWNvbnRyb2wtcGxhbmUgZm9y IHRoZSBleHBlY3RlZCBiZWhhdmlvciB3aGVuIGluc3RydWN0aW5nIFNGQyBub2Rlcy4gQlRXLCB0 aGUgc2VjZGlyIHJldmlldyBvZiB0aGUgQ1AgcmVxdWlyZW1lbnRzIGNhbiBiZSByZXRyaWV2ZWQg aGVyZSAoaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvcmV2aWV3LWlldGYtc2ZjLWNv bnRyb2wtcGxhbmUtMDItc2VjZGlyLWVhcmx5LW1lYWRvd3MtMjAxNS0xMi0xMC8pLg0KDQo2LiAg TlNIIGRvZXMgbm90IHNoYXJlIHByaXZhY3kgZGF0YSB3aXRoIG5vbi1hdXRob3JpemVkIHBhcnRp ZXMuIEluZGVlZCwgZGF0YSBjYXJyaWVkIGluIGNvbnRleHQgaGVhZGVycyBhcmUgZGVyaXZlZCBm cm9tIHRoZSBvcmlnaW5hbCBwYWNrZXQgKGUuZy4sIHNvdXJjZSBJUCBhZGRyZXNzKSBvciBhcmUg YWxyZWFkeSBrbm93biB0byB0aGUgb3BlcmF0b3IgKGUuZy4sIHN1YnNjcmliZXIgaWRlbnRpZmll ciwgcG9saWN5IGlkZW50aWZpZXIsIHNlcnZpY2UgaWRlbnRpZmllcikuIFRoZSBjb250ZXh0IGlu Zm9ybWF0aW9uIGlzIHNoYXJlZCB3aXRoIG5vZGVzIHRoYXQgYXJlIHdpdGhpbiB0aGUgc2FtZSBh ZG1pbmlzdHJhdGl2ZSBkb21haW4uDQoNCjcuICBMaWtlIG90aGVyIGNvbW11bmljYXRpb24gcHJv dG9jb2xzLCBhdHRhY2tzIGZyb20gd2l0aGluIHRoZSBuZXR3b3JrIGFyZSBwb3NzaWJsZSwgYnV0 IHRob3NlIGFyZSBzb2Z0ZW4gYnkgcmVseWluZyBvbiB0aGUgcHJvY2VkdXJlcyBwdXQgaW4gcGxh Y2UgYnkgb3BlcmF0b3JzIGZvciB0ZXN0aW5nIGFuZCB2YWxpZGF0aW5nIG5vZGVzL2ZlYXR1cmVz IGJlZm9yZSBhY3R1YWwgYWN0aXZhdGlvbi4gTlNIIGRvZXMgbm90IHByb3ZpZGUgYSBidWlsdC1p biBmZWF0dXJlIHRvIHByZXZlbnQgbWlzYmVoYXZpbmcgbm9kZXMsIGJ1dCByZWNvbW1lbmRzIHRv IHJlbHkgb24gdGhlIHNlY3VyaXR5IGZlYXR1cmVzIHByb3ZpZGVkIGJ5IHRoZSB1bmRlcmx5aW5n IHRyYW5zcG9ydCBlbmNhcHN1bGF0aW9uIHNjaGVtZXMuDQoNCkxldOKAmXMgbm93IGZvY3VzIG9u IHRoZSB0eXBpY2FsIOKAnGF0dGFja3PigJ0gdGhhdCBjYW4gYmUgaXNzdWVkIGZyb20gd2l0aGlu IHRoZSBuZXR3b3JrOg0KDQoxLiAgQSBtaXNiZWhhdmluZyBub2RlIHJlZGlyZWN0IHRoZSB0cmFm ZmljIHRvIG5vbi1hdXRob3JpemVkIG5vZGVzIG91dHNpZGUgYSBkb21haW46IFRoaXMgaXMgbm90 IE5TSC1zcGVjaWZpYy4NCg0KMi4gIEEgbWlzYmVoYXZpbmcgU0ZDLXVud2FyZSBub2RlIGFsdGVy cyB0aGUgY29udGVudCBvZiBhIHBhY2tldDogVGhpcyBpcyBub3QgTlNILXNwZWNpZmljLg0KDQoz LiAgQSBtaXNiZWhhdmluZyBTRkMtYXdhcmUgbm9kZSBhbHRlcnMgdGhlIGNvbnRlbnQgb2YgTlNI Og0KDQogICAgICAgICAgICBpLiAgICAgSXQgcmVtb3ZlcyB0aGUgTlNIIGhlYWRlciBmcm9tIGFs bCBwYWNrZXRzIGl0IHNlZXM6IFRoaXMgd2lsbCBpbXBseSB0aGF0IHRoZSBwYWNrZXRzLCB0aGUg bWlzYmVoYXZpbmcgbm9kZSBpbnRlcmNlcHRzLCB3aWxsIGJlIGZvcndhcmRlZCB1cHN0cmVhbSB3 aXRob3V0IGludm9raW5nIHRoZSByZXF1aXJlZCBTRnMgKHdoaWNoIG1heSBiZSBzZWVuIGFzIGEg ZmVhdHVyZSwgbm90IGEgYnVnIGlmIG9uZSBkaXNsaWtlcyDigJxtaWRkbGVib3hlc+KAnSA6KSku IE1vcmUgc2VyaW91c2x5LCB0aGUgT0FNIE5TSCBmZWF0dXJlIHdpbGwgYWxsb3cgYW4gb3BlcmF0 b3IgdG8gZGV0ZWN0IHdoZXRoZXIgTlNIIHBhY2tldHMgYXJlIHRyYXZlbGxpbmcgaW4gYWNjb3Jk YW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMgb2YgdGhhdCBkb21haW4uIFJ1bm5pbmcgdGhhdCBm ZWF0dXJlIHdpbGwgaGVscCBkZXRlY3RpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUuDQoNCiAgICAg ICAgICBpaS4gICAgIEl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNQSTogVGhpcyB3aWxsIGlt cGx5IHRoYXQgdGhlc2UgcGFja2V0cyB3aWxsIGJlIGZvcndhcmRlZCBvdmVyIGEgd3JvbmcgcGF0 aC4gQWdhaW4sIHJ1bm5pbmcgT0FNIE5TSCB3aWxsIGFsbG93IHRoZSBvcGVyYXRvciB0byBkZXRl Y3Qgd2hldGhlciBhIHBhY2tldCBpcyB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0aCBTRkMg aW5zdHJ1Y3Rpb25zLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSByZWd1bGFybHkgd2lsbCBoZWxwIGlk ZW50aWZ5aW5nIHRoZSBtaXNiZWhhdmluZyBub2RlIGFuZCB3aGV0aGVyIHRoZSBTRkMgY29uZmln dXJhdGlvbiBvZiBhIGRvbWFpbiBpcyBhbGlnbmVkIHdpdGggdGhlIGV4cGVjdGVkIGJlaGF2aW9y Lg0KDQogICAgICAgIGlpaS4gICAgIEl0IG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNJL1RUTDog VGhpcyB3aWxsIGluY3JlYXNlIHRoZSBhdXRob3JpemVkIG1heGltdW0gU0ZGL1NGIGhvcHMuIE5v dCBzdXJlIGlmIHRoZXJlIGlzIGEgc2VjdXJpdHkgcHJvYmxlbSBvdXQgdGhlcmUuDQoNCiAgICAg ICAgICBpdi4gICAgIFRoZSBtaXNiZWhhdmluZyBub2RlIGlzIGEgY2xhc3NpZmllcjogVGhlIGlt cGxpY2F0aW9ucyB3aWxsIGJlIHNldmVyZSBmcm9tIGEgc2VydmljZSBzdGFuZHBvaW50LiBOU0gg cmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0byBkZXRlY3Qgc3VjaCBjYXNlLg0KDQog ICAgICAgICAgICB2LiAgICAgVGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMgYW4gU0ZGOiBFeGFtcGxl cyBvZiBtaXNiZWhhdmlvcnMgYXJlOiBzdHJpcCBOU0gsIGZvcndhcmQgdG8gYSBub24tYXV0aG9y aXplZCBTRiwgcmVkaXJlY3QgdGhlIHRyYWZmaWMgdG8gYSBub24tYXV0aG9yaXplZCBub2Rlcywg ZXRjLiBMaWtlIGZvciB0aGUgY2xhc3NpZmllciBjYXNlLCBOU0ggcmVsaWVzIG9uIE9BTSBhbmQg Y29udHJvbC1wbGFuZSB0byBkZXRlY3Qgc3VjaCBjYXNlLg0KDQpBcmUgdGhlcmUgc3BlY2lmaWMg YXR0YWNrcyB0aGF0IGFyZSBub3QgbGlzdGVkIGFib3ZlIGFuZCB0aGF0IG5lZWQgbW9yZSBhdHRl bnRpb24gZnJvbSB0aGUgV0c/DQoNClRoYW5rIHlvdS4NCg0KQ2hlZXJzLA0KTWVkDQoNCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpzZmMgbWFpbGluZyBs aXN0DQpzZmNAaWV0Zi5vcmc8bWFpbHRvOnNmY0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vc2ZjDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCnNmYyBtYWlsaW5nIGxpc3QNCnNmY0BpZXRmLm9yZzxtYWls dG86c2ZjQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9z ZmMNCg0KDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NCnNmYyBtYWlsaW5nIGxpc3QNCnNmY0BpZXRmLm9yZzxtYWlsdG86c2ZjQGlldGYub3JnPg0K aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmMNCg0K --_000_39BE4BC4FEC14A3AA94630E8523DFED1ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <131B4FDA2B7D314F95870989169F2F5D@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KRXJpYywNCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPGRpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj5PbiBPY3QgMjAsIDIwMTcsIGF0IDEwOjI2IEFNLCBFcmljIFJlc2Nvcmxh ICZsdDs8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiBjbGFzcz0iIj5la3JAcnRmbS5jb208 L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGlu ZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0ciIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJh Ij48YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGJyIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0IDc6MTggQU0s IENhcmxvcyBQaWduYXRhcm8gKGNwaWduYXRhKTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48c3BhbiBkaXI9Imx0ciIgY2xhc3M9IiI+Jmx0OzxhIGhyZWY9 Im1haWx0bzpjcGlnbmF0YUBjaXNjby5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5jcGln bmF0YUBjaXNjby5jb208L2E+Jmd0Ozwvc3Bhbj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+d3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgY2xh c3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2luOiAwcHggMHB4IDBweCAwLjhleDsgYm9yZGVy LWxlZnQtd2lkdGg6IDFweDsgYm9yZGVyLWxlZnQtc3R5bGU6IHNvbGlkOyBib3JkZXItbGVmdC1j b2xvcjogcmdiKDIwNCwgMjA0LCAyMDQpOyBwYWRkaW5nLWxlZnQ6IDFleDsiPg0KPGRpdiBzdHls ZT0id29yZC13cmFwOiBicmVhay13b3JkOyIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbC1oNSI+DQo8YmxvY2tx dW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gT2N0IDIwLCAyMDE3 LCBhdCAxMDowOCBBTSwgRXJpYyBSZXNjb3JsYSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVrckBydGZt LmNvbSIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPmVrckBydGZtLmNvbTwvYT4mZ3Q7IHdyb3Rl OjwvZGl2Pg0KPGJyIGNsYXNzPSJnbWFpbC1tXy0zODI1NDg4MDg5NjYwNDk1OTExQXBwbGUtaW50 ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Z21haWxfcXVvdGUiPk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0IDc6MDEgQU0sIENhcmxvcyBQaWdu YXRhcm8gKGNwaWduYXRhKTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48c3BhbiBkaXI9Imx0ciIgY2xhc3M9IiI+Jmx0OzxhIGhyZWY9Im1haWx0bzpjcGln bmF0YUBjaXNjby5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5jcGlnbmF0YUBjaXNjby5j b208L2E+Jmd0Ozwvc3Bhbj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+d3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1 b3RlIiBzdHlsZT0ibWFyZ2luOiAwcHggMHB4IDBweCAwLjhleDsgYm9yZGVyLWxlZnQtd2lkdGg6 IDFweDsgYm9yZGVyLWxlZnQtc3R5bGU6IHNvbGlkOyBib3JkZXItbGVmdC1jb2xvcjogcmdiKDIw NCwgMjA0LCAyMDQpOyBwYWRkaW5nLWxlZnQ6IDFleDsiPg0KPGRpdiBzdHlsZT0id29yZC13cmFw OiBicmVhay13b3JkOyIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPkVyaWMsPC9kaXY+DQo8YnIg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIGNsYXNzPSJnbWFpbC1tXy0zODI1NDg4MDg5 NjYwNDk1OTExZ21haWwtIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRp diBjbGFzcz0iIj5PbiBPY3QgMjAsIDIwMTcsIGF0IDk6NDUgQU0sIEVyaWMgUmVzY29ybGEgJmx0 OzxhIGhyZWY9Im1haWx0bzpla3JAcnRmbS5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5l a3JAcnRmbS5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iZ21haWwtbV8tMzgy NTQ4ODA4OTY2MDQ5NTkxMWdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBBcHBsZS1pbnRlcmNo YW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+PGJyIGNsYXNzPSIiPg0KPGRp diBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0IDY6MzEgQU0sIFBh dWwgUXVpbm4gKHBhdWxxKTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48c3BhbiBkaXI9Imx0ciIgY2xhc3M9IiI+Jmx0OzxhIGhyZWY9Im1haWx0bzpwYXVs cUBjaXNjby5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wYXVscUBjaXNjby5jb208L2E+ Jmd0Ozwvc3Bhbj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+d3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBz dHlsZT0ibWFyZ2luOiAwcHggMHB4IDBweCAwLjhleDsgYm9yZGVyLWxlZnQtd2lkdGg6IDFweDsg Ym9yZGVyLWxlZnQtc3R5bGU6IHNvbGlkOyBib3JkZXItbGVmdC1jb2xvcjogcmdiKDIwNCwgMjA0 LCAyMDQpOyBwYWRkaW5nLWxlZnQ6IDFleDsiPg0KPGRpdiBzdHlsZT0id29yZC13cmFwOiBicmVh ay13b3JkOyIgY2xhc3M9IiI+DQo8ZGl2IGRpcj0iYXV0byIgc3R5bGU9IndvcmQtd3JhcDogYnJl YWstd29yZDsiIGNsYXNzPSIiPkhpIEFsaWEsDQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBPY3QgMTksIDIwMTcs IGF0IDI6NDkgUE0sIEFsaWEgQXRsYXMgJmx0OzxhIGhyZWY9Im1haWx0bzpha2F0bGFzQGdtYWls LmNvbSIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPmFrYXRsYXNAZ21haWwuY29tPC9hPiZndDsg d3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9ImdtYWlsLW1fLTM4MjU0ODgwODk2NjA0OTU5MTFnbWFp bC1tXy02ODA5NzkzOTUyMTY4NDQ2NjYwbV83NTAzOTMwMTQxNjIwMDEyNDMxQXBwbGUtaW50ZXJj aGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9IiI+ SGkgTWVkLA0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+U2luY2UgeW91IGRpcmVjdGVkIHRoaXMgYXQgbWUsIHRoZXJlIGFyZSBlZmZvcnRzIHRvIGhh dmUgc29tZSBkaXNjdXNzaW9ucyBhbmQgdW5kZXJzdGFuZCBiZXR0ZXIgdGhlIHBhcnRpY3VsYXIg dGhyZWF0cy48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Q3VycmVudGx5LCB0aGVyZSBpcyBubyB0cmFu c3BvcnQgd2l0aCBpbnRlZ3JpdHkgcHJvdGVjdGlvbiB0aGF0IGlzIGV2ZW4gYSBTSE9VTEQgdG8g aW1wbGVtZW50LCBtdWNoIGxlc3MgYSBNVVNULiZuYnNwOyBUaGVyZTwvZGl2Pg0KPGRpdiBjbGFz cz0iIj5pcyBubyBjb250cm9sLXBsYW5lIGRlZmluZWQgKGJleW9uZCB0aGUgQkdQIHdvcmspIHRo YXQgZGVzY3JpYmVzIGRldGVjdGluZyBpc3N1ZXMuJm5ic3A7IFRoZXJlIGlzIG5vIE9BTSBkZWZp bmVkIGFuZCBhZG9wdGVkPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPmJ5IHRoZSBXRyB0aGF0IGRldGVj dHMgb3IgaGFuZGxlcyB0aGVzZSB0eXBlcyBvZiBhdHRhY2tzLiBJIHNlZSB0aGUgc3RydWN0dXJl IHRoYXQgeW91IGFyZSBwcmVzdW1pbmcsIGJ1dCBub25lIG9mIHRoZXNlIGFyZTwvZGl2Pg0KPGRp diBjbGFzcz0iIj5hdmFpbGFibGUgYXMgbm9ybWF0aXZlIHJlZmVyZW5jZXMgdG8gTlNIIHRvZGF5 LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PC9zcGFuPg0KPGRpdiBjbGFzcz0iIj5PQU0gZG9lcyBub3QgYWRkcmVzcyB0aGUgc2VjdXJpdHkg Y29uY2VybiBhcm91bmQgaW50ZWdyaXR5IGFuZCBkZXZpY2VzLiZuYnNwOyBJZiB5b3UgYW5kIHRo ZSBXRyBiZWxpZXZlIE9BTSBpcyB0aGUgbmV4dCDigJx0byBkb+KAnSBmb3IgdGhlIFdHLCB0aGF0 4oCZcyBmaW5lLCBidXQgaXTigJlzIG9ydGhvZ29uYWwgdG8gdGhlIHNlY3VyaXR5IHBvaW50cyBy YWlzZWQuPC9kaXY+DQo8c3BhbiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+SSBoYWQgcmVjb21tZW5kZWQgaGF2aW5nIGEgZm9jdXNlZCBpbnRlcmltIG1lZXRpbmcgdG8g bWFrZSBzdXJlIHRoYXQgZXZlcnlvbmUgY29uY2VybmVkIHVuZGVyc3Rvb2QgdGhlIGlzc3VlcyBh bmQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+d29ya2VkIHRocm91Z2ggdGhlIHRocmVhdCBhbmFseXNp cyBhbmQgcG9zc2libGUgc29sdXRpb25zIHRvZ2V0aGVyLjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L3Nw YW4+DQo8ZGl2IGNsYXNzPSIiPkxldOKAmXMgcGxlYXNlIG5vdCBjb25mbGF0ZSB0aGUgb25nb2lu ZyBzZWN1cml0eSBkaXNjdXNzaW9uIHdpdGggT0FNLCBvciBvdGhlciB0b3BpY3MuJm5ic3A7IFRo ZSBzZWN1cml0eSByZWFsaXR5LCBhcyB5b3UgcG9pbnRlZCBvdXQgaW4geW91ciBlbWFpbCB0byBF cmljLCBpcyB0aGF0IHdlLCBhcyBhIGNvbW11bml0eSBhbmQgaW5kdXN0cnksIGFjY2VwdCBhIGxl dmVsIG9mIHRydXN0IHdydCBuZXR3b3JrIGRldmljZXMuPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkkgZG9uJ3QgYWN0dWFsbHkgdGhpbmsgdGhhdCdzIHRo ZSBwb2ludCBvZiBjb250ZW50aW9uLCBhdCBsZWFzdCBmcm9tIG15IHBlcnNwZWN0aXZlLiBSYXRo ZXIgaXQncyBhYm91dCB0aGUgbGV2ZWwgb2YgdHJ1c3QgdG8gYmUgcGxhY2VkIGluIHRoZSBuZXR3 b3JraW5nIHBhdGggdGhyb3VnaCB3aGljaCB0aGF0IGRhdGEgZmxvd3MuPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PC9zcGFuPg0KPGRpdiBjbGFzcz0iIj5VbmRlcnN0b29kLiBIb3cgYWJvdXQgdGhpcz88L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBYLjIuJm5ic3A7Jm5i c3A7VHJhbnNwb3J0IEVuY2Fwc3VsYXRpb24gU2VjdXJpdHk8YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO05TSCBpcyBhbHdheXMgZW5j YXBzdWxhdGVkIGJ5IGFuIG91dGVyIHRyYW5zcG9ydDxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7Jm5ic3A7ZW5jYXBzdWxhdGlvbiBhcyBkZXRhaWxlZCBpbiBTZWN0aW9u IDQgb2YgdGhpczxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jm5ic3A7 c3BlY2lmaWNhdGlvbiwgYW5kIGFzIGRlcGljdGVkIGluIEZpZ3VyZSAxLiZuYnNwOyZuYnNwO0lm IGFuIG9wZXJhdG9yPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJz cDtkZWVtcyBjcnlwdG9ncmFwaGljIGludGVncml0eSBwcm90ZWN0aW9uIG5lY2Vzc2FyeSBkdWUg dG88YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO3RoZWlyIHJp c2sgYW5hbHlzaXMsIHRoZW4gYW4gb3V0ZXIgdHJhbnNwb3J0IGVuY2Fwc3VsYXRpb248YnIgY2xh c3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO3RoYXQgcHJvdmlkZXMgc3Vj aCBwcm90ZWN0aW9uIFtSRkM2MDcxXSwgc3VjaCBhcyZuYnNwO0lQc2VjLCBNVVNUPGJyIGNsYXNz PSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDtiZSB1c2VkLjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkkgY2FuJ3Qgc3BlYWsgZm9yIEthdGhsZWVuLCBidXQgSSBk b24ndCByZWFsbHkgdGhpbmsgdGhpcyBnZXRzIHRoZSBqb2IgZG9uZS48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkFzIGRlc2NyaWJlZCBp biBSRkMgMzU1MiAoPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzM1NTIj c2VjdGlvbi0zIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+aHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sLzx3YnIgY2xhc3M9IiI+cmZjMzU1MiNzZWN0aW9uLTM8L2E+KSBvdXIgdGhyZWF0IG1v ZGVsIGlzIHRoYXQgdGhlIEludGVybmV0IGlzIHVudHJ1c3RlZC48L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlllcy4gSnVzdCB0 byBjbGFyaWZ5LCB0aG91Z2gsIE5TSCBpcyBub3QgYW4gZW5kLXRvLWVuZCBwcm90b2NvbC4gSXQg ZG9lc27igJl0IOKAnHN0YXJ04oCdIGluIGEgaG9zdCBhbmQg4oCcZW5k4oCdIGluIGEgaG9zdC9z ZXJ2ZXIuIEl04oCZcyBhJm5ic3A7bmV0d29yay1jZW50cmljIGxpa2UmbmJzcDtQcm92aXNpb25l ZCBWaXJ0dWFsIFByaXZhdGUgTmV0d29ya3MsIFRyYWZmaWMgRW5naW5lZXJpbmcsIE1QTFMuPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+U3VyZSwgYW5kIGluIHRoaXMgY2FzZSBpdCdz IHRoZSBuZXR3b3JrIGJldHdlZW4gdGhlIG5vZGVzIHRoYXQgaXMgcmVsZXZhbnQgaGVyZS48L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+UmlnaHQuIE5vdCBhbiBhcHBsaWNhdGlvbiBsYXll ciBjb25zdHJ1Y3QsIG5vdCB0aGUgZW5kLXRvLWVuZCBJbnRlcm5ldC48L2Rpdj4NCjxiciBjbGFz cz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4N CjxkaXYgZGlyPSJsdHIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+DQo8ZGl2IGNsYXNzPSJnbWFp bF9xdW90ZSI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGJsb2NrcXVv dGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2luOiAwcHggMHB4IDBweCAwLjhleDsg Ym9yZGVyLWxlZnQtd2lkdGg6IDFweDsgYm9yZGVyLWxlZnQtc3R5bGU6IHNvbGlkOyBib3JkZXIt bGVmdC1jb2xvcjogcmdiKDIwNCwgMjA0LCAyMDQpOyBwYWRkaW5nLWxlZnQ6IDFleDsiPg0KPGRp diBzdHlsZT0id29yZC13cmFwOiBicmVhay13b3JkOyIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi PjxzcGFuIGNsYXNzPSJnbWFpbC0iPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJn bWFpbF9leHRyYSI+DQo8ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+DQo8ZGl2IGNsYXNzPSIiPlRo YXQgbWVhbnMgd2Ugc2hvdWxkIGJlIGRlc2lnbmluZyBwcm90b2NvbHMgdGhhdCBhcmUgc2FmZSB0 byBvcGVyYXRlIGluIHRoYXQgZW52aXJvbm1lbnQsIHdoaWNoIGluIHRoaXMgY2FzZSBtZWFucyB0 aGF0IHRoZSBwcm90b2NvbCBzaG91bGQgZWl0aGVyIChhKSBjb21lIHdpdGggYSBidWlsdC1pbiBz ZWN1cml0eSBtZWNoYW5pc20gb3IgKGIpIGJlIHJ1biBvdmVyIGEgc2VjdXJlIHRyYW5zcG9ydC4g SSBkb24ndCB0aGluaw0KIHRlbGxpbmcgb3BlcmF0b3JzICZxdW90O3lvdSBmaWd1cmUgaXQgb3V0 JnF1b3Q7IHJlZmxlY3RzIGJlc3QgY3VycmVudCBwcmFjdGljZS48L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L3Nw YW4+DQo8ZGl2IGNsYXNzPSIiPkJ1dOKApiB3ZSBhcmUgc2F5aW5nIOKAnHJ1biBvdmVyIGEgc2Vj dXJlIHRyYW5zcG9ydOKAnS48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8 ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5XZWxsLCB0 aGF0J3Mgbm90IHdoYXQgeW91ciBwcm9wb3NlZCB0ZXh0IHNheXMgeW91IHNob3VsZCBkbyBpdCAm cXVvdDtJZiBhbiBvcGVyYXRvciBkZWVtcyBjcnlwdG9ncmFwaGljIGludGVncml0eSBwcm90ZWN0 aW9uIG5lY2Vzc2FyeSBkdWUgdG8gdGhlaXIgcmlzayBhbmFseXNpcyZxdW90Oy4gSWYgeW91IHdh bnQgdG8gc2F5ICZxdW90O3RoaXMgaXMgb25seSBzcGVjaWZpZWQgdG8gcnVuIG92ZXIgYSBzZWN1 cmUgdHJhbnNwb3J0JnF1b3Q7IHRoZW4gZmluZSwNCiBidXQgdGhhdCdzIG5vdCB3aGF0IHRoaXMg c2F5cy48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+V2VsbCwgeW91IHNvbWVob3cgZWRp dGVkIG91dCB0ZXh0IHRoYXQgSSBpbmNsdWRlZCBmcm9tIEFsaWEg4oCUIGxldCBtZSBjb3B5IGl0 IGJhY2sgYWdhaW46PC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj7igJQm Z3Q7OOKAlCZuYnNwOzwvZGl2Pg0KPGRpdj4NCjxkaXYgY2xhc3M9IiI+VGhpcyB3YXMgYmVzdCBj YXB0dXJlZCBpbiBBbGlh4oCZcyBtZXNzYWdlIHRvIHlvdSwgY29waWVkIG9uIHRoaXMgbGlzdDo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PiZxdW90O1RoZXJlIGFyZSBubyBlbmNhcHN1bGF0aW9ucyBmcm9tIHRoZSBSb3V0aW5nIEFyZWEg dGhhdCByZXF1aXJlIGludGVncml0eSBwcm90ZWN0aW9uIHRoYXQgSSBhbSBhd2FyZSBvZjs8YnIg Y2xhc3M9IiI+DQp3aGVuIHByaXZhY3kgaXMgcmVxdWlyZWQgSVBzZWMgb3IgTUFDIHNlYyBhcmUg dXNlZC7igJ08L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2PuKAlCZndDs44oCUJm5ic3A7PC9k aXY+DQo8ZGl2PjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGF0IHNheXMg4oCcd2hlbiBwcml2YWN5IGlzIHJlcXVpcmVk 4oCdIGFzIGEgcXVhbGlmaWVyLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VG8gdW5kZXJzdGFuZCwgYXJlIHlvdSBzdWdnZXN0aW5nIChv ciBzdGF0aW5nKSB0aGF0IGFsbCBSVEctQXJlYSBlbmNhcHN1bGF0aW9ucyBhbHdheXMgbmVlZCB0 byB1bmNvbmRpdGlvbmFsbHkgcnVuIG92ZXIgYSBzZWN1cmUgdHJhbnNwb3J0PzwvZGl2Pg0KPGRp diBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SW4gb3RoZXIg d29yZHMsIHdlIGNhbiBtYW5kYXRlIHRoYXQgdGhvc2UgbWVjaGFuaXNtcyBleGlzdCBhbmQgbWFu ZGF0ZSB0aGF0IHRoZXkgYXJlIHVzZWQgd2hlbiByZXF1aXJlZC48L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoYW5rcyw8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPuKAlCBDYXJs b3MuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8 YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPg0KPGRpdiBjbGFz cz0iZ21haWxfcXVvdGUiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+LUVrcjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBjbGFz cz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46IDBweCAwcHggMHB4IDAuOGV4OyBib3JkZXIt bGVmdC13aWR0aDogMXB4OyBib3JkZXItbGVmdC1zdHlsZTogc29saWQ7IGJvcmRlci1sZWZ0LWNv bG9yOiByZ2IoMjA0LCAyMDQsIDIwNCk7IHBhZGRpbmctbGVmdDogMWV4OyI+DQo8ZGl2IHN0eWxl PSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWwtaDUiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJsdHIi IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPg0KPGRpdiBjbGFzcz0iZ21haWxf cXVvdGUiPg0KPGRpdiBjbGFzcz0iIj4tRWtyPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPiZuYnNwOzwvZGl2Pg0KPGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHls ZT0ibWFyZ2luOiAwcHggMHB4IDBweCAwLjhleDsgYm9yZGVyLWxlZnQtd2lkdGg6IDFweDsgYm9y ZGVyLWxlZnQtc3R5bGU6IHNvbGlkOyBib3JkZXItbGVmdC1jb2xvcjogcmdiKDIwNCwgMjA0LCAy MDQpOyBwYWRkaW5nLWxlZnQ6IDFleDsiPg0KPGRpdiBzdHlsZT0id29yZC13cmFwOiBicmVhay13 b3JkOyIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48c3BhbiBjbGFz cz0iZ21haWwtbV8tMzgyNTQ4ODA4OTY2MDQ5NTkxMWdtYWlsLUhPRW5aYiI+PGZvbnQgY29sb3I9 IiM4ODg4ODgiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZm9udD48 L3NwYW4+PC9kaXY+DQo8c3BhbiBjbGFzcz0iZ21haWwtbV8tMzgyNTQ4ODA4OTY2MDQ5NTkxMWdt YWlsLUhPRW5aYiI+PGZvbnQgY29sb3I9IiM4ODg4ODgiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij7igJQgQ2FybG9zLjwvZGl2Pg0KPC9mb250Pjwvc3Bhbj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2 IGNsYXNzPSJnbWFpbC1tXy0zODI1NDg4MDg5NjYwNDk1OTExZ21haWwtaDUiPjxiciBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgZGlyPSJsdHIiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPg0KPGRpdiBj bGFzcz0iZ21haWxfcXVvdGUiPg0KPGRpdiBjbGFzcz0iIj4tRWtyPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDs8L2Rpdj4NCjxi bG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1hcmdpbjogMHB4IDBweCAwcHgg MC44ZXg7IGJvcmRlci1sZWZ0LXdpZHRoOiAxcHg7IGJvcmRlci1sZWZ0LXN0eWxlOiBzb2xpZDsg Ym9yZGVyLWxlZnQtY29sb3I6IHJnYigyMDQsIDIwNCwgMjA0KTsgcGFkZGluZy1sZWZ0OiAxZXg7 Ij4NCjxkaXYgc3R5bGU9IndvcmQtd3JhcDogYnJlYWstd29yZDsiIGNsYXNzPSIiPg0KPGRpdiBk aXI9ImF1dG8iIHN0eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4mbmJzcDtUaGUgb25nb2lu ZyBlZGl0cyBhbmQgZGlhbG9ndWUgd2l0aCBLYXRobGVlbiBhbmQgRXJpYyBhcmUgd29ya2luZyB0 aHJvdWdoIHRoZWlyIGNvbmNlcm5zLiZuYnNwOyBBbiBpbnRlcmltIHRvIHRhbGsgYWJvdXQgbmV4 dCBTRkMgc3RlcHMsIHBvc3QgTlNILCBpcyBhIGRpZmZlcmVudCBtYXR0ZXIuICZuYnNwOzwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Z21haWwtbV8tMzgyNTQ4ODA4OTY2MDQ5NTkxMWdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBo NSI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+QXQgdGhpcyBwb2lu dCwgY2xlYXJseSB0aGUgbW9zdCB0aGF0IGNvdWxkIGhhcHBlbiBpcyBhPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPnZpcnR1YWwgaW50ZXJpbS4mbmJzcDsgVGhlcmUgYXJlIHNvbWUgYmFja2dyb3VuZCBk aXNjdXNzaW9ucyBnb2luZyBvbi48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkkgZG8gbm90IHdhbnQgdG8gYXNzdW1lIHdoYXQgbWl4dHVy ZSB3aWxsIGJlIGFjY2VwdGFibGUgdG8gaGFuZGxlIHRoZSBzZWN1cml0eSBjb25jZXJucyBleHBy ZXNzZWQgYnkgS2F0aGxlZW4gYW5kIEVyaWM8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+YW5kIHN1cHBv cnRlZCBieSBhIG51bWJlciBvZiBvdGhlciBBRHMuPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Z21haWxfZXh0cmEiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0 cmEiPkkgZG8gZ3JlYXRseSBhcHByZWNpYXRlIHlvdXIgYXR0ZW50aW9uIGFuZCBlZmZvcnRzIHRv IGNsYXJpZnkgYW5kIHRyeSB0byBtb3ZlIHRoaXMgd29yayBmb3J3YXJkLiBJIGhhdmUgYmVlbiBl eHByZXNzaW5nIGNvbmNlcm5zPC9kaXY+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+YWJvdXQg dGhlIHNlY3VyaXR5IGFzcGVjdHMgb2YgdGhpcyB3b3JrIHNpbmNlIFJGQyA3NjY1IHdlbnQgdGhy b3VnaCB0aGUgcHVibGljYXRpb24gcHJvY2VzcyAtIGFuZCBzdHJvbmdseSBlbmNvdXJhZ2luZyBz ZXJpb3VzPC9kaXY+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+V0cgZm9jdXMgdG8gcHJldmVu dCBwcmVjaXNlbHkgd2hhdCBoYXMgbm93IGhhcHBlbmVkLjwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21h aWxfZXh0cmEiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iZ21haWxfZXh0cmEi PlJlZ2FyZHMsPC9kaXY+DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+QWxpYTwvZGl2Pg0KPGRp diBjbGFzcz0iZ21haWxfZXh0cmEiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Z21haWxfZXh0cmEiPjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiBU aHUsIE9jdCAxOSwgMjAxNyBhdCA0OjQ5IEFNLDxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48c3BhbiBkaXI9Imx0ciIgY2xhc3M9IiI+Jmx0OzxhIGhyZWY9 Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIiB0YXJnZXQ9Il9ibGFuayIgY2xh c3M9IiI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT4mZ3Q7PC9zcGFuPjxzcGFuIGNs YXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj53cm90ZTo8YnIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46IDBweCAw cHggMHB4IDAuOGV4OyBib3JkZXItbGVmdC13aWR0aDogMXB4OyBib3JkZXItbGVmdC1zdHlsZTog c29saWQ7IGJvcmRlci1sZWZ0LWNvbG9yOiByZ2IoMjA0LCAyMDQsIDIwNCk7IHBhZGRpbmctbGVm dDogMWV4OyI+DQo8ZGl2IGxhbmc9IkZSIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsLW1f LTM4MjU0ODgwODk2NjA0OTU5MTFnbWFpbC1tXy02ODA5NzkzOTUyMTY4NDQ2NjYwbV83NTAzOTMw MTQxNjIwMDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NVdvcmRTZWN0aW9uMSI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZh bWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPkhpIEFsaWEsPHUgY2xhc3M9IiI+PC91Pjx1 IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0i Ij48dSBjbGFzcz0iIj48L3U+Jm5ic3A7PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBw dDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj5DYW4geW91IHBsZWFzZSBz aGFyZSB3aXRoIHVzIHRoZSBjdXJyZW50IHN0YXR1cyBvZiB0aGUgZG9jdW1lbnQgYW5kIHRoZSBs aXN0IG9mIHBlbmRpbmcgYmxvY2tpbmcgcG9pbnRzPzx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0i Ij48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNs YXNzPSIiPjx1IGNsYXNzPSIiPjwvdT4mbmJzcDs8dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPkkgd2VudCB0aHJv dWdoIGFsbCBwdWJsaWMgZW1haWwgZXhjaGFuZ2VzLCBlc3BlY2lhbGx5IHRoZSBvbmVzIHJlbGF0 ZWQgdG8gc2VjdXJpdHksIGJ1dCBpdCBpcyBub3QgdGhhdCBlYXN5IHRvIHVuZGVyc3RhbmQgd2hh dCBhcmUgdGhlIHJlbWFpbmluZyBpc3N1ZXMgdGhhdA0KIG5lZWQgZml4ZXMuPHUgY2xhc3M9IiI+ PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291 cmllciBOZXcnOyIgY2xhc3M9IiI+PHUgY2xhc3M9IiI+PC91PiZuYnNwOzx1IGNsYXNzPSIiPjwv dT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyIgY2xhc3M9 IiI+SW4gcGFydGljdWxhciwgaXMgdGhlcmUgYSBjb25jZXJuIHdpdGggYXNzdW1pbmcgdGhlIGN1 cnJlbnQgTlNIIHRocmVhdCBtb2RlbD88dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj48 dSBjbGFzcz0iIj48L3U+Jm5ic3A7PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iZ21haWwtbV8tMzgyNTQ4ODA4OTY2MDQ5NTkxMWdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2 NjBtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlz dFBhcmFncmFwaCI+DQo8dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyIgY2xhc3M9IiI+PHNw YW4gY2xhc3M9IiI+MS48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtbGlnYXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1o ZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyIgY2xhc3M9IiI+ Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwv c3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0i Ij5OU0gNCiBpcyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGluZHVjZWQgYnkgbm9kZXMgdGhhdCBp bmplY3QgKHNwb29mZWQpIE5TSCBiZWZvcmUgZW50ZXJpbmcgYW4gU0ZDLWVuYWJsZWQgZG9tYWlu LiBJbmRlZWQsIFNGQyBpbmdyZXNzIG5vZGVzIE1VU1QgZGlzY2FyZCBwYWNrZXRzIGNhcnJ5aW5n IE5TSC48dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iZ21haWwtbV8tMzgyNTQ4ODA4OTY2MDQ5NTkxMWdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2 NjBtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlz dFBhcmFncmFwaCI+DQo8dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyIgY2xhc3M9IiI+PHNw YW4gY2xhc3M9IiI+Mi48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtbGlnYXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1o ZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyIgY2xhc3M9IiI+ Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwv c3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0i Ij5OU0gNCiBpcyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGZyb20gd2l0aGluIHRoZSBTRkMtZW5h YmxlZCBkb21haW4gdG8gaW5qZWN0IG5vbi1hdXRob3JpemVkIGNvbnRleHQgaGVhZGVycy4gRnJv bSBhIHNlcnZpY2UgcGVyc3BlY3RpdmUsIHRoZSBndWFyZCBpcyB0aGUgQ1Agd2hpY2ggaXMgcmVz cG9uc2libGUgZm9yIGluc3RydWN0aW5nIHRoZSBTRkMtYXdhcmUgbm9kZXMgYWJvdXQgdGhlIG1h bmRhdG9yeS10by1wcm9jZXNzIGFuZCBvcHRpb25hbC10by1wcm9jZXNzDQogY29udGV4dCBoZWFk ZXJzLiBGdXJ0aGVybW9yZSwgd2hhdGV2ZXIgdGhlIG9yaWdpbiBvZiBhIHN1cHBsaWVkIGNvbnRl eHQgaGVhZGVyLCB0aGUgbGFzdCBTRkYgb2YgYSBjaGFpbiAoYW5kIGVncmVzcyBub2RlcykgTVVT VCByZW1vdmUgdGhlIE5TSCBiZWZvcmUgZm9yd2FyZGluZyB1cHN0cmVhbS48dSBjbGFzcz0iIj48 L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbV8tMzgyNTQ4 ODA4OTY2MDQ5NTkxMWdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBtXzc1MDM5MzAxNDE2MjAw MTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+DQo8dSBj bGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZv bnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+My48c3Bh biBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQt c3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9u dC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyIgY2xhc3M9IiI+Jm5ic3A7PHNwYW4gY2xhc3M9 IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFu Pjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBw dDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj5OU0gNCiBpcyBzZWN1cmUg YWdhaW5zdCBsZWFraW5nIHByaXZhY3kgaW5mb3JtYXRpb24gb3V0c2lkZSBhbiBTRkMgZW5hYmxl ZCBkb21haW4uIFRoZSBsYXN0IFNGRiBvZiBhIGNoYWluIChhbmQgZWdyZXNzIG5vZGVzKSBNVVNU IHJlbW92ZSB0aGUgTlNIIGJlZm9yZSBmb3J3YXJkaW5nIHVwc3RyZWFtLjx1IGNsYXNzPSIiPjwv dT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tXy0zODI1NDg4 MDg5NjYwNDk1OTExZ21haWwtbV8tNjgwOTc5Mzk1MjE2ODQ0NjY2MG1fNzUwMzkzMDE0MTYyMDAx MjQzMWdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIj4NCjx1IGNs YXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9u dC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj40LjxzcGFu IHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9udC1z dHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBmb250 LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbic7IiBjbGFzcz0iIj4mbmJzcDs8c3BhbiBjbGFzcz0i QXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+ PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0 OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPk5TSA0KIGlzIHNlY3VyZSBh Z2FpbnN0IGluZGVmaW5pdGUgU0YvU0ZGIGxvb3BzIGJ5IG1lYW5zIG9mIFNJIGFuZCBUVEwgZmll bGRzLjx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJnbWFpbC1tXy0zODI1NDg4MDg5NjYwNDk1OTExZ21haWwtbV8tNjgwOTc5Mzk1MjE2ODQ0NjY2 MG1fNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0 UGFyYWdyYXBoIj4NCjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj48c3Bh biBjbGFzcz0iIj41LjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhl aWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbic7IiBjbGFzcz0iIj4m bmJzcDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9z cGFuPjwvc3Bhbj48L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIi PkNvbnRyb2wNCiBwbGFuZSBzcGVjaWZpYyB0aHJlYXRzIGFyZSBvdXQgb2Ygc2NvcGUsIGJ1dCB0 aGUgZG9jdW1lbnQgY2l0ZXMgSS1ELmlldGYtc2ZjLWNvbnRyb2wtcGxhbmUgZm9yIHRoZSBleHBl Y3RlZCBiZWhhdmlvciB3aGVuIGluc3RydWN0aW5nIFNGQyBub2Rlcy4gQlRXLCB0aGUgc2VjZGly IHJldmlldyBvZiB0aGUgQ1AgcmVxdWlyZW1lbnRzIGNhbiBiZSByZXRyaWV2ZWQgaGVyZSAoPGEg aHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvcmV2aWV3LWlldGYtc2ZjLWNv bnRyb2wtcGxhbmUtMDItc2VjZGlyLWVhcmx5LW1lYWRvd3MtMjAxNS0xMi0xMC8iIHRhcmdldD0i X2JsYW5rIiBjbGFzcz0iIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnLzx3YnIgY2xhc3M9 IiI+ZG9jL3Jldmlldy1pZXRmLXNmYy1jb250cm9sLXBsPHdiciBjbGFzcz0iIj5hbmUtMDItc2Vj ZGlyLWVhcmx5LW1lYWRvd3MtMjA8d2JyIGNsYXNzPSIiPjE1LTEyLTEwLzwvYT4pLjx1IGNsYXNz PSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tXy0z ODI1NDg4MDg5NjYwNDk1OTExZ21haWwtbV8tNjgwOTc5Mzk1MjE2ODQ0NjY2MG1fNzUwMzkzMDE0 MTYyMDAxMjQzMWdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIj4N Cjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBw dDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj42 LjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg Zm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFs OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbic7IiBjbGFzcz0iIj4mbmJzcDs8c3BhbiBj bGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwvc3Bhbj48 L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPk5TSA0KIGRvZXMg bm90IHNoYXJlIHByaXZhY3kgZGF0YSB3aXRoIG5vbi1hdXRob3JpemVkIHBhcnRpZXMuIEluZGVl ZCwgZGF0YSBjYXJyaWVkIGluIGNvbnRleHQgaGVhZGVycyBhcmUgZGVyaXZlZCBmcm9tIHRoZSBv cmlnaW5hbCBwYWNrZXQgKGUuZy4sIHNvdXJjZSBJUCBhZGRyZXNzKSBvciBhcmUgYWxyZWFkeSBr bm93biB0byB0aGUgb3BlcmF0b3IgKGUuZy4sIHN1YnNjcmliZXIgaWRlbnRpZmllciwgcG9saWN5 IGlkZW50aWZpZXIsIHNlcnZpY2UgaWRlbnRpZmllcikuDQogVGhlIGNvbnRleHQgaW5mb3JtYXRp b24gaXMgc2hhcmVkIHdpdGggbm9kZXMgdGhhdCBhcmUgd2l0aGluIHRoZSBzYW1lIGFkbWluaXN0 cmF0aXZlIGRvbWFpbi4gJm5ic3A7PHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1fLTM4MjU0ODgwODk2NjA0OTU5MTFnbWFpbC1tXy02 ODA5NzkzOTUyMTY4NDQ2NjYwbV83NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4 MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiPg0KPHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3 JzsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjcuPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWxpZ2F0dXJlczogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsgZm9udC1z aXplOiA3cHQ7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJv bWFuJzsiIGNsYXNzPSIiPiZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmll ciBOZXcnOyIgY2xhc3M9IiI+TGlrZQ0KIG90aGVyIGNvbW11bmljYXRpb24gcHJvdG9jb2xzLCBh dHRhY2tzIGZyb20gd2l0aGluIHRoZSBuZXR3b3JrIGFyZSBwb3NzaWJsZSwgYnV0IHRob3NlIGFy ZSBzb2Z0ZW4gYnkgcmVseWluZyBvbiB0aGUgcHJvY2VkdXJlcyBwdXQgaW4gcGxhY2UgYnkgb3Bl cmF0b3JzIGZvciB0ZXN0aW5nIGFuZCB2YWxpZGF0aW5nIG5vZGVzL2ZlYXR1cmVzIGJlZm9yZSBh Y3R1YWwgYWN0aXZhdGlvbi4gTlNIIGRvZXMgbm90IHByb3ZpZGUgYSBidWlsdC1pbiBmZWF0dXJl DQogdG8gcHJldmVudCBtaXNiZWhhdmluZyBub2RlcywgYnV0IHJlY29tbWVuZHMgdG8gcmVseSBv biB0aGUgc2VjdXJpdHkgZmVhdHVyZXMgcHJvdmlkZWQgYnkgdGhlIHVuZGVybHlpbmcgdHJhbnNw b3J0IGVuY2Fwc3VsYXRpb24gc2NoZW1lcy48dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91 Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0i Ij48dSBjbGFzcz0iIj48L3U+Jm5ic3A7PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBw dDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj5MZXTigJlzIG5vdyBmb2N1 cyBvbiB0aGUgdHlwaWNhbCDigJxhdHRhY2tz4oCdIHRoYXQgY2FuIGJlIGlzc3VlZCBmcm9tIHdp dGhpbiB0aGUgbmV0d29yazo8dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iZ21haWwtbV8tMzgyNTQ4ODA4OTY2MDQ5NTkxMWdtYWlsLW1fLTY4MDk3 OTM5NTIxNjg0NDY2NjBtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tXy0xMzY5NDg1MzgwOTY5 NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+DQo8dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyIg Y2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+MS48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6 IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4n OyIgY2xhc3M9IiI+Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5l dyc7IiBjbGFzcz0iIj5BDQogbWlzYmVoYXZpbmcgbm9kZSByZWRpcmVjdCB0aGUgdHJhZmZpYyB0 byBub24tYXV0aG9yaXplZCBub2RlcyBvdXRzaWRlIGEgZG9tYWluOiBUaGlzIGlzIG5vdCBOU0gt c3BlY2lmaWMuPHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9ImdtYWlsLW1fLTM4MjU0ODgwODk2NjA0OTU5MTFnbWFpbC1tXy02ODA5NzkzOTUyMTY4 NDQ2NjYwbV83NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1z b0xpc3RQYXJhZ3JhcGgiPg0KPHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIi PjxzcGFuIGNsYXNzPSIiPjIuPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWxpZ2F0dXJlczogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsgZm9udC1zaXplOiA3cHQ7IGxp bmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJzsiIGNsYXNz PSIiPiZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyIgY2xh c3M9IiI+QQ0KIG1pc2JlaGF2aW5nIFNGQy11bndhcmUgbm9kZSBhbHRlcnMgdGhlIGNvbnRlbnQg b2YgYSBwYWNrZXQ6IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy48dSBjbGFzcz0iIj48L3U+PHUg Y2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbV8tMzgyNTQ4ODA4OTY2 MDQ5NTkxMWdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBtXzc1MDM5MzAxNDE2MjAwMTI0MzFn bWFpbC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCI+DQo8dSBjbGFzcz0i Ij48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFt aWx5OiAnQ291cmllciBOZXcnOyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+My48c3BhbiBzdHls ZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRj aDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1p bHk6ICdUaW1lcyBOZXcgUm9tYW4nOyIgY2xhc3M9IiI+Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNs YXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9u dC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj5BDQogbWlzYmVoYXZpbmcgU0ZDLWF3 YXJlIG5vZGUgYWx0ZXJzIHRoZSBjb250ZW50IG9mIE5TSDo8dSBjbGFzcz0iIj48L3U+PHUgY2xh c3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbV8tMzgyNTQ4ODA4OTY2MDQ5 NTkxMWdtYWlsLW1fLTY4MDk3OTM5NTIxNjg0NDY2NjBtXzc1MDM5MzAxNDE2MjAwMTI0MzFnbWFp bC1tXy0xMzY5NDg1MzgwOTY5NzU4Njc1TXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OiA3MnB0OyI+DQo8dSBjbGFzcz0iIj48L3U+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyIgY2xhc3M9IiI+PHNw YW4gY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWxpZ2F0dXJlczogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsgZm9udC1zaXplOiA3cHQ7IGxpbmUtaGVp Z2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJzsiIGNsYXNzPSIiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L3NwYW4+aS48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtbGln YXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6 IG5vcm1hbDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyIgY2xhc3M9IiI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5l dyc7IiBjbGFzcz0iIj5JdA0KIHJlbW92ZXMgdGhlIE5TSCBoZWFkZXIgZnJvbSBhbGwgcGFja2V0 cyBpdCBzZWVzOiBUaGlzIHdpbGwgaW1wbHkgdGhhdCB0aGUgcGFja2V0cywgdGhlIG1pc2JlaGF2 aW5nIG5vZGUgaW50ZXJjZXB0cywgd2lsbCBiZSBmb3J3YXJkZWQgdXBzdHJlYW0gd2l0aG91dCBp bnZva2luZyB0aGUgcmVxdWlyZWQgU0ZzICh3aGljaCBtYXkgYmUgc2VlbiBhcyBhIGZlYXR1cmUs IG5vdCBhIGJ1ZyBpZiBvbmUgZGlzbGlrZXMg4oCcbWlkZGxlYm94ZXPigJ0gOikpLiBNb3JlDQog c2VyaW91c2x5LCB0aGUgT0FNIE5TSCBmZWF0dXJlIHdpbGwgYWxsb3cgYW4gb3BlcmF0b3IgdG8g ZGV0ZWN0IHdoZXRoZXIgTlNIIHBhY2tldHMgYXJlIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3 aXRoIFNGQyBpbnN0cnVjdGlvbnMgb2YgdGhhdCBkb21haW4uIFJ1bm5pbmcgdGhhdCBmZWF0dXJl IHdpbGwgaGVscCBkZXRlY3RpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUuPHNwYW4gY2xhc3M9IkFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48dSBjbGFz cz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tXy0zODI1NDg4MDg5NjYwNDk1 OTExZ21haWwtbV8tNjgwOTc5Mzk1MjE2ODQ0NjY2MG1fNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWls LW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6IDcycHQ7Ij4NCjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj48c3Bh biBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt bGlnYXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWln aHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyIgY2xhc3M9IiI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4g Y2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj5paS48c3Bh biBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQt c3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9u dC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwv c3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0i Ij5JdA0KIG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNQSTogVGhpcyB3aWxsIGltcGx5IHRoYXQg dGhlc2UgcGFja2V0cyB3aWxsIGJlIGZvcndhcmRlZCBvdmVyIGEgd3JvbmcgcGF0aC4gQWdhaW4s IHJ1bm5pbmcgT0FNIE5TSCB3aWxsIGFsbG93IHRoZSBvcGVyYXRvciB0byBkZXRlY3Qgd2hldGhl ciBhIHBhY2tldCBpcyB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5zdHJ1Y3Rp b25zLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSByZWd1bGFybHkNCiB3aWxsIGhlbHAgaWRlbnRpZnlp bmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUgYW5kIHdoZXRoZXIgdGhlIFNGQyBjb25maWd1cmF0aW9u IG9mIGEgZG9tYWluIGlzIGFsaWduZWQgd2l0aCB0aGUgZXhwZWN0ZWQgYmVoYXZpb3IuPHUgY2xh c3M9IiI+PC91Pjx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1f LTM4MjU0ODgwODk2NjA0OTU5MTFnbWFpbC1tXy02ODA5NzkzOTUyMTY4NDQ2NjYwbV83NTAzOTMw MTQxNjIwMDEyNDMxZ21haWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgi IHN0eWxlPSJtYXJnaW4tbGVmdDogNzJwdDsiPg0KPHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3 JzsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6 ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21h bic7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8 c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPmlp aS48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtbGlnYXR1cmVz OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1h bDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1IGNsYXNzPSIiPjwvdT48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBj bGFzcz0iIj5JdA0KIG1vZGlmaWVzIHRoZSBjb250ZW50IG9mIFNJL1RUTDogVGhpcyB3aWxsIGlu Y3JlYXNlIHRoZSBhdXRob3JpemVkIG1heGltdW0gU0ZGL1NGIGhvcHMuIE5vdCBzdXJlIGlmIHRo ZXJlIGlzIGEgc2VjdXJpdHkgcHJvYmxlbSBvdXQgdGhlcmUuPHUgY2xhc3M9IiI+PC91Pjx1IGNs YXNzPSIiPjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1fLTM4MjU0ODgwODk2NjA0 OTU5MTFnbWFpbC1tXy02ODA5NzkzOTUyMTY4NDQ2NjYwbV83NTAzOTMwMTQxNjIwMDEyNDMxZ21h aWwtbV8tMTM2OTQ4NTM4MDk2OTc1ODY3NU1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4t bGVmdDogNzJwdDsiPg0KPHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPjxz cGFuIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhl aWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbic7IiBjbGFzcz0iIj4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3Bh biBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPml2Ljxz cGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9u dC1zdHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBm b250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbic7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PC9zcGFuPjwvc3Bhbj48L3NwYW4+PHUgY2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNz PSIiPlRoZQ0KIG1pc2JlaGF2aW5nIG5vZGUgaXMgYSBjbGFzc2lmaWVyOiBUaGUgaW1wbGljYXRp b25zIHdpbGwgYmUgc2V2ZXJlIGZyb20gYSBzZXJ2aWNlIHN0YW5kcG9pbnQuIE5TSCByZWxpZXMg b24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNoIGNhc2UuICZuYnNwOyZuYnNw Ozx1IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJn bWFpbC1tXy0zODI1NDg4MDg5NjYwNDk1OTExZ21haWwtbV8tNjgwOTc5Mzk1MjE2ODQ0NjY2MG1f NzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW1fLTEzNjk0ODUzODA5Njk3NTg2NzVNc29MaXN0UGFy YWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6IDcycHQ7Ij4NCjx1IGNsYXNzPSIiPjwvdT48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3Vy aWVyIE5ldyc7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBm b250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICdUaW1lcyBO ZXcgUm9tYW4nOyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj52LjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWw7IGZvbnQt c2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBS b21hbic7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iQXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PHUg Y2xhc3M9IiI+PC91PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBm b250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPlRoZQ0KIG1pc2JlaGF2aW5nIG5v ZGUgaXMgYW4gU0ZGOiBFeGFtcGxlcyBvZiBtaXNiZWhhdmlvcnMgYXJlOiBzdHJpcCBOU0gsIGZv cndhcmQgdG8gYSBub24tYXV0aG9yaXplZCBTRiwgcmVkaXJlY3QgdGhlIHRyYWZmaWMgdG8gYSBu b24tYXV0aG9yaXplZCBub2RlcywgZXRjLiBMaWtlIGZvciB0aGUgY2xhc3NpZmllciBjYXNlLCBO U0ggcmVsaWVzIG9uIE9BTSBhbmQgY29udHJvbC1wbGFuZSB0byBkZXRlY3Qgc3VjaCBjYXNlLiAm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8dSBjbGFzcz0iIj48L3U+PHUgY2xh c3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7 IiBjbGFzcz0iIj48dSBjbGFzcz0iIj48L3U+Jm5ic3A7PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj5BcmUgdGhl cmUgc3BlY2lmaWMgYXR0YWNrcyB0aGF0IGFyZSBub3QgbGlzdGVkIGFib3ZlIGFuZCB0aGF0IG5l ZWQgbW9yZSBhdHRlbnRpb24gZnJvbSB0aGUgV0c/PHUgY2xhc3M9IiI+PC91Pjx1IGNsYXNzPSIi PjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyIgY2xh c3M9IiI+PHUgY2xhc3M9IiI+PC91PiZuYnNwOzx1IGNsYXNzPSIiPjwvdT48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyIgY2xhc3M9IiI+VGhhbmsgeW91Ljx1 IGNsYXNzPSIiPjwvdT48dSBjbGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZh bWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPjx1IGNsYXNzPSIiPjwvdT4mbmJzcDs8dSBj bGFzcz0iIj48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3 JzsiIGNsYXNzPSIiPkNoZWVycyw8dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IiBjbGFzcz0iIj5NZWQ8 dSBjbGFzcz0iIj48L3U+PHUgY2xhc3M9IiI+PC91Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPHdi ciBjbGFzcz0iIj5fX19fX19fX19fX19fX19fXzxiciBjbGFzcz0iIj4NCnNmYyBtYWlsaW5nIGxp c3Q8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJtYWlsdG86c2ZjQGlldGYub3JnIiB0YXJnZXQ9Il9i bGFuayIgY2xhc3M9IiI+c2ZjQGlldGYub3JnPC9hPjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2ZjIiB0YXJnZXQ9Il9ibGFuayIg Y2xhc3M9IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9sPHdiciBjbGFzcz0iIj5pc3Rp bmZvL3NmYzwvYT48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0K PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9k aXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fPHdiciBjbGFzcz0iIj5fX19fX19fX19fX19fX19fXzxiciBjbGFzcz0iIj4NCnNm YyBtYWlsaW5nIGxpc3Q8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJtYWlsdG86c2ZjQGlldGYub3Jn IiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+c2ZjQGlldGYub3JnPC9hPjxiciBjbGFzcz0iIj4N CjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2ZjIiB0YXJn ZXQ9Il9ibGFuayIgY2xhc3M9IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9sPHdiciBj bGFzcz0iIj5pc3RpbmZvL3NmYzwvYT48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4N CjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDog bm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzwvc3Bhbj48YnIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTog aW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5zZmMNCiBtYWlsaW5nIGxpc3Q8L3NwYW4+PGJy IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8 YSBocmVmPSJtYWlsdG86c2ZjQGlldGYub3JnIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9y cGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj5zZmNAaWV0Zi5vcmc8L2E+PGJyIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YSBocmVmPSJo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NmYyIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czog YXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+aHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZmM8L2E+PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rp dj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_39BE4BC4FEC14A3AA94630E8523DFED1ciscocom_-- From nobody Fri Oct 20 07:46:19 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8321513420F for ; Fri, 20 Oct 2017 07:46:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dGNBphS6Ku2x for ; Fri, 20 Oct 2017 07:46:13 -0700 (PDT) Received: from mail-yw0-x233.google.com (mail-yw0-x233.google.com [IPv6:2607:f8b0:4002:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80C931241F3 for ; Fri, 20 Oct 2017 07:46:13 -0700 (PDT) Received: by mail-yw0-x233.google.com with SMTP id y75so6552871ywg.0 for ; Fri, 20 Oct 2017 07:46:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=pogCTFYNURtKWbgCrrHIVE/aWZwnKZHg3GCLyF9fvzs=; b=m0q4PHc6ucE6rhkyih6sZrnECldKXNPo7wDKP6es9tmO5yv4uX/L0Jp2lj4AclLcee g1mEp4mbo/IFHiZtTQPGKi2flmIJiEhwI2QzNx1cmLAyh7yADOUtBFPXVP1rBVw5CPzh iaeEPOPEjHSb1aMuZVBbBoeBao31LzFMg8Dk5iMdmn5OMQv9tqFnq5RwMUsJYwpvN/is aCtKjOime8Mo52CVt6l9uTAZ4OW1ii4127h1wcZjs6EQn5GP0LWBV2cEz/pIiwkQQR23 i8e3/lqA1q5kVt3pQwuVXwyJwPwR1TYXdpy5B9jkA2Z0N0oq2KSzmn7o39Zr8DR4jE6v zm5g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=pogCTFYNURtKWbgCrrHIVE/aWZwnKZHg3GCLyF9fvzs=; b=k4c3vr5bEhdgaD1CiZD3cDRrnREzwbJv53xoUl/jjbvAqt/9uyuCfVd3kjePS8nYlf zidqlqGxevVUY3cqdwiiZxrDSSQYVpsa0S9hzuERJ84ag8HVF7UtR6RJ/Rwi8cOxA6rj IfViBTbi38eNYIOCWaMbhi1w+n0/n9NOFX2AWgKe9h0GH6s8dqCkztrrkwDonz6NfV6u bn6+cTOHIO5eZjVQ+phTxUSSOizPzECMjR+xVEVf9yj54k/biO2TuXwr2JE+GlHgI7EC h6zUvBHPfHHGfkif4gNgZSek69jfQ5aBVJ/zynKaV73rZXdPFHnoYB8tswGf5MsN4P3b xvoQ== X-Gm-Message-State: AMCzsaVHOSZ5jK9gs2M8Jif8NLhxQ8aM8oHJhpMjfQDjcKcc71vyd5x9 RZCYZAKtj/YdJuooT4sexJczYdg7qdI4gTkNPtdcRw== X-Google-Smtp-Source: ABhQp+RIgUgObP0iZVVQkz5MRRcekXmxLgphA+yO3VP3ucbMK4zszHCBXrrySCyvqACYN9tdi5l1PVyeZuKbykm1g2A= X-Received: by 10.37.212.12 with SMTP id m12mr3138528ybf.348.1508510772685; Fri, 20 Oct 2017 07:46:12 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Fri, 20 Oct 2017 07:45:31 -0700 (PDT) In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A057C92@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BA4@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BFB@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057C92@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: Eric Rescorla Date: Fri, 20 Oct 2017 07:45:31 -0700 Message-ID: To: Med Boucadair Cc: "Paul Quinn (paulq)" , Alia Atlas , Kathleen Moriarty , "sfc@ietf.org" Content-Type: multipart/alternative; boundary="94eb2c07cd7cbf075a055bfb8836" Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:46:17 -0000 --94eb2c07cd7cbf075a055bfb8836 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Oct 20, 2017 at 7:38 AM, wrote: > Re-, > > > > Please see inline. > > > > Cheers, > > Med > > > > *De :* Eric Rescorla [mailto:ekr@rtfm.com] > *Envoy=C3=A9 :* vendredi 20 octobre 2017 16:22 > *=C3=80 :* BOUCADAIR Mohamed IMT/OLN > *Cc :* Paul Quinn (paulq); Alia Atlas; Kathleen Moriarty; sfc@ietf.org > *Objet :* Re: [sfc] NSH DISCUSS Status > > > > > > > > On Fri, Oct 20, 2017 at 7:12 AM, wrote: > > Re-, > > > > Thank you, Eric. > > > > There is a misunderstanding here. The document does not claim DCs are saf= e > and secure environments. What it says is that the NSH specification is > scoped to be deployed in a single administrative domain with measures to, > e.g.,: > > - Protect against spoofed data > > - Leaking data outside a domain > > - Detect and prevent indefinite forwarding loop > > Yes, and my point (and I believe Kathleen's) is that this is not a > realistic operating model given the actual state of the world. > > > > A single administrative domain is not necessarily a secure or a safe one. > That=E2=80=99s evident. Attacks from within an administrative domain are = possible > with or without NSH. > > > > I=E2=80=99m reiterating my question: what specific attacks built-in/manda= tory > integrity mechanisms will solve for the particular case of NSH? Thank you= . > > > > Tampering with the path packets take through the NFC. > > [Med] Thank you. I have two comments: > > - Such behavior can also be detected by means of SFC OAM in an SFC > domain. See my first message. > > - Such misbehaving node will act on ALL the traffic, not only NSH. The > question is why the NSH stamped traffic must be provided with built-in > integrity feature while the traffic not elected to be forwarded via a > service chain will be left subject to tampering attacks? Wouldn=E2=80=99t= be > consistent generalize that feature (if provided) to all traffic that is > transiting for a given domain? > The issue here is attacks on the network function itself (e.g., bypassing or rerouting traffic). Generally, we look to protect the traffic itself via other mechanisms, preferably end-to-end. -Ekr > > > > -Ekr > > > > > > Cheers, > > Med > > > > *De :* Eric Rescorla [mailto:ekr@rtfm.com] > *Envoy=C3=A9 :* vendredi 20 octobre 2017 15:56 > *=C3=80 :* BOUCADAIR Mohamed IMT/OLN > *Cc :* Paul Quinn (paulq); Alia Atlas; Kathleen Moriarty; sfc@ietf.org > > > *Objet :* Re: [sfc] NSH DISCUSS Status > > > > It's explained in detail in my DISCUSS: > > > > "1. The assumption that the datacenter is a secure environment is not a > > reasonable one. As Kathleen and Adam both observer, datacenter > > breaches are common and that is why people are moving towards > > encryption inside the data center. I see that this draft has text > > claiming that this is only to be deployed in safe environments, but we > > know that technologies like this get deployed outside the locations > > for which we claim they are to be deployed, and there's nothing here > > to stop that. Moreover, the whole trend towards cloud computing pushes > > us away from designs in which you can safely talk about single secure > > zones." > > > > -Ekr > > > > > > > > On Fri, Oct 20, 2017 at 6:51 AM, wrote: > > Dear Eric, > > > > Can you please clarify this point: =E2=80=9CRather it's about the level o= f trust > to be placed in the networking path through which that data flows.=E2=80= =9D? > > > > Sorry if you have already explained it to the editors, but as a WG > participant I don=E2=80=99t have access to a record of such discussion. > > > > Thank you. > > > > Cheers, > > Med > > > > *De :* Eric Rescorla [mailto:ekr@rtfm.com] > *Envoy=C3=A9 :* vendredi 20 octobre 2017 15:45 > *=C3=80 :* Paul Quinn (paulq) > *Cc :* Alia Atlas; BOUCADAIR Mohamed IMT/OLN; Kathleen Moriarty; > sfc@ietf.org > *Objet :* Re: [sfc] NSH DISCUSS Status > > > > > > > > On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) > wrote: > > Hi Alia, > > > > > > > > On Oct 19, 2017, at 2:49 PM, Alia Atlas wrote: > > > > Hi Med, > > > > Since you directed this at me, there are efforts to have some discussions > and understand better the particular threats. > > Currently, there is no transport with integrity protection that is even a > SHOULD to implement, much less a MUST. There > > is no control-plane defined (beyond the BGP work) that describes detectin= g > issues. There is no OAM defined and adopted > > by the WG that detects or handles these types of attacks. I see the > structure that you are presuming, but none of these are > > available as normative references to NSH today. > > > > > > OAM does not address the security concern around integrity and devices. > If you and the WG believe OAM is the next =E2=80=9Cto do=E2=80=9D for the= WG, that=E2=80=99s fine, > but it=E2=80=99s orthogonal to the security points raised. > > > > > > I had recommended having a focused interim meeting to make sure that > everyone concerned understood the issues and > > worked through the threat analysis and possible solutions together. > > > > Let=E2=80=99s please not conflate the ongoing security discussion with OA= M, or > other topics. The security reality, as you pointed out in your email to > Eric, is that we, as a community and industry, accept a level of trust wr= t > network devices. > > > > I don't actually think that's the point of contention, at least from my > perspective. Rather it's about the level of trust to be placed in the > networking path through which that data flows. > > > > -Ekr > > > > > > The ongoing edits and dialogue with Kathleen and Eric are working throug= h > their concerns. An interim to talk about next SFC steps, post NSH, is a > different matter. > > > > > > > > At this point, clearly the most that could happen is a > > virtual interim. There are some background discussions going on. > > > > I do not want to assume what mixture will be acceptable to handle the > security concerns expressed by Kathleen and Eric > > and supported by a number of other ADs. > > > > I do greatly appreciate your attention and efforts to clarify and try to > move this work forward. I have been expressing concerns > > about the security aspects of this work since RFC 7665 went through the > publication process - and strongly encouraging serious > > WG focus to prevent precisely what has now happened. > > > > Regards, > > Alia > > > > > > On Thu, Oct 19, 2017 at 4:49 AM, wrote: > > Hi Alia, > > > > Can you please share with us the current status of the document and the > list of pending blocking points? > > > > I went through all public email exchanges, especially the ones related to > security, but it is not that easy to understand what are the remaining > issues that need fixes. > > > > In particular, is there a concern with assuming the current NSH threat > model? > > > > 1. NSH is secure against attacks induced by nodes that inject (spoofed) > NSH before entering an SFC-enabled domain. Indeed, SFC ingress nodes MUST > discard packets carrying NSH. > > 2. NSH is secure against attacks from within the SFC-enabled domain to > inject non-authorized context headers. From a service perspective, the > guard is the CP which is responsible for instructing the SFC-aware nodes > about the mandatory-to-process and optional-to-process context headers. > Furthermore, whatever the origin of a supplied context header, the last S= FF > of a chain (and egress nodes) MUST remove the NSH before forwarding > upstream. > > 3. NSH is secure against leaking privacy information outside an SFC > enabled domain. The last SFF of a chain (and egress nodes) MUST remove th= e > NSH before forwarding upstream. > > 4. NSH is secure against indefinite SF/SFF loops by means of SI and TTL > fields. > > 5. Control plane specific threats are out of scope, but the document > cites I-D.ietf-sfc-control-plane for the expected behavior when instructi= ng > SFC nodes. BTW, the secdir review of the CP requirements can be retrieved > here (https://datatracker.ietf.org/doc/review-ietf-sfc-control- > plane-02-secdir-early-meadows-2015-12-10/). > > 6. NSH does not share privacy data with non-authorized parties. Indeed, > data carried in context headers are derived from the original packet (e.g= ., > source IP address) or are already known to the operator (e.g., subscriber > identifier, policy identifier, service identifier). The context informati= on > is shared with nodes that are within the same administrative domain. > > 7. Like other communication protocols, attacks from within the network > are possible, but those are soften by relying on the procedures put in > place by operators for testing and validating nodes/features before actua= l > activation. NSH does not provide a built-in feature to prevent misbehavin= g > nodes, but recommends to rely on the security features provided by the > underlying transport encapsulation schemes. > > > > Let=E2=80=99s now focus on the typical =E2=80=9Cattacks=E2=80=9D that can= be issued from within > the network: > > 1. A misbehaving node redirect the traffic to non-authorized nodes > outside a domain: This is not NSH-specific. > > 2. A misbehaving SFC-unware node alters the content of a packet: This is > not NSH-specific. > > 3. A misbehaving SFC-aware node alters the content of NSH: > > i. It removes the NSH header from all packets it sees: > This will imply that the packets, the misbehaving node intercepts, will b= e > forwarded upstream without invoking the required SFs (which may be seen a= s > a feature, not a bug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)). M= ore seriously, the > OAM NSH feature will allow an operator to detect whether NSH packets are > travelling in accordance with SFC instructions of that domain. Running th= at > feature will help detecting the misbehaving node. > > ii. It modifies the content of SPI: This will imply that > these packets will be forwarded over a wrong path. Again, running OAM NSH > will allow the operator to detect whether a packet is travelling in > accordance with SFC instructions. Running that feature regularly will hel= p > identifying the misbehaving node and whether the SFC configuration of a > domain is aligned with the expected behavior. > > iii. It modifies the content of SI/TTL: This will increase > the authorized maximum SFF/SF hops. Not sure if there is a security probl= em > out there. > > iv. The misbehaving node is a classifier: The implications > will be severe from a service standpoint. NSH relies on OAM and > control-plane to detect such case. > > v. The misbehaving node is an SFF: Examples of > misbehaviors are: strip NSH, forward to a non-authorized SF, redirect the > traffic to a non-authorized nodes, etc. Like for the classifier case, NSH > relies on OAM and control-plane to detect such case. > > > > Are there specific attacks that are not listed above and that need more > attention from the WG? > > > > Thank you. > > > > Cheers, > > Med > > > > _______________________________________________ > sfc mailing list > sfc@ietf.org > https://www.ietf.org/mailman/listinfo/sfc > > > > > > > > > --94eb2c07cd7cbf075a055bfb8836 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Fri, Oct 20, 2017 at 7:38 AM, <mohamed.boucadair@orange= .com> wrote:

Re-,

=C2=A0

Please see inline.

=C2=A0

Cheers,

Med

=C2=A0

De=C2=A0: Eric= Rescorla [mailto:ekr@rtf= m.com]
Envoy=C3=A9=C2=A0: vendredi 20 octobre 2017 16:22 =C3=80=C2=A0: BOUCADAIR Mohamed IMT/OLN
Cc=C2=A0: Paul Quinn (paulq); Alia Atlas; Kathleen Moriarty; sfc@ietf.org
Objet=C2=A0: Re: [sfc] NSH DISCUSS Status

=C2=A0

=C2=A0

=C2=A0

On Fri, Oct 20, 2017 at 7:12 AM, <mohamed.boucadair@orange= .com> wrote:

Re-,

=C2=A0

Thank you, Eric.

=C2=A0

There is a misunderstanding her= e. The document does not claim DCs are safe and secure environments. What it says is that the NSH specification is scoped to be deployed in a s= ingle administrative domain with measures to, e.g.,:

-=C2=A0=C2=A0=C2=A0 Protect against spoofed data

-=C2=A0=C2=A0=C2=A0 Leaking data outside a domain<= /u>

-=C2=A0=C2=A0=C2=A0 Detect and prevent indefinite forwarding loop

Yes, and my point (and I believ= e Kathleen's) is that this is not a realistic operating model given the= actual state of the world.=C2=A0

=C2=A0

A single administrative domain = is not necessarily a secure or a safe one. That=E2=80=99s evident. Attacks from within an administrative domain are possible with or without NSH.

=C2=A0

I=E2=80=99m reiterating my ques= tion: what specific attacks built-in/mandatory integrity mechanisms will solve for the particular case of NSH? Thank you.

=C2=A0

Tampering with the path packets take through the NFC= .

[Med] Thank you. I have = two comments:

-=C2=A0=C2= =A0=C2=A0 Such behavior can also be = detected by means of SFC OAM in an SFC domain. See my first message.=

-=C2=A0=C2= =A0=C2=A0 Such misbehaving node will= act on ALL the traffic, not only NSH. The question is why the NSH stamped = traffic must be provided with built-in integrity feature while the traffic not elected to be forwarded via a service chain = will be left subject to tampering attacks?=C2=A0Wouldn=E2=80=99t= be consistent generalize that feature (if provided) to all traffic that is= transiting for a given domain?


The issue here is attacks on the = network function itself (e.g., bypassing or rerouting traffic). Generally, = we look to protect the traffic itself via other mechanisms, preferably end-= to-end.

-Ekr

<= /span>

=C2=A0

=C2=A0

-Ekr

=C2=A0

=C2=A0

Cheers,

Med=

=C2=A0

De=C2=A0: Eric Rescorla [mailto:ekr@rtfm.com]
Envoy=C3=A9=C2=A0: vendredi 20 octobre 2017 15:56=
=C3=80=C2=A0: BOUCADAIR Mohamed IMT/OLN
Cc=C2=A0: Paul Quinn (paulq); Alia Atlas; Kathleen Moriarty; sfc@ietf.org


Objet=C2=A0: Re: [sfc] NSH DISCUSS Status

=C2=A0

It's explained in detail in my DISCUSS:=C2=A0=

=C2=A0

"1. The assumption that the datacenter is a sec= ure environment is not a

r=
easonable one. As Kathleen and Adam both observer, datacenter=

b=
reaches are common and that is why people are moving towards<=
u>
e=
ncryption inside the data center. I see that this draft has text<=
/u>
c=
laiming that this is only to be deployed in safe environments, but we
k=
now that technologies like this get deployed outside the locations
f=
or which we claim they are to be deployed, and there's nothing here
t=
o stop that. Moreover, the whole trend towards cloud computing pushes
u=
s away from designs in which you can safely talk about single secure=

z=
ones."
=C2=A0
-=
Ekr
=C2=A0
=C2=A0

=C2=A0

On Fri, Oct 20, 2017 at 6:51 AM, <mohamed.boucadair@orange= .com> wrote:

Dear Eric,

=C2=A0

Can you please clarify this poi= nt: =E2=80=9CRather it's about the level of trust to be placed in the n= etworking path through which that data flows.=E2=80=9D?

=C2=A0

Sorry if you have already expla= ined it to the editors, but as a WG participant I don=E2=80=99t have access to a record of such discussion.

=C2=A0

Thank you.=

=C2=A0

Cheers,

Med

=C2=A0

De=C2=A0: Eric= Rescorla [mailto:ekr@rtf= m.com]
Envoy=C3=A9=C2=A0: vendredi 20 octobre 2017 15:45
=C3=80=C2=A0: Paul Quinn (paulq)
Cc=C2=A0: Alia Atlas; BOUCADAIR Mohamed IMT/OLN; Kathleen Moriarty; = sfc@ietf.org
Objet=C2=A0: Re: [sfc] NSH DISCUSS Status

=C2=A0

=C2=A0

=C2=A0

On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) = <paulq@cisco.com> wrote:

Hi Alia,

=C2=A0

=C2=A0

=C2=A0<= /p>

=C2=A0

Hi Med,

=C2=A0

Since you directed this at me, there are efforts to = have some discussions and understand better the particular threats.<= u>

Currently, there is no transport with integrity prot= ection that is even a SHOULD to implement, much less a MUST.=C2=A0 There=

is no control-plane defined (beyond the BGP work) th= at describes detecting issues.=C2=A0 There is no OAM defined and adopted=

by the WG that detects or handles these types of att= acks. I see the structure that you are presuming, but none of these are<= /u>

available as normative references to NSH today.

=C2=A0

=C2=A0

OAM does not address the security concern around int= egrity and devices.=C2=A0 If you and the WG believe OAM is the next =E2=80= =9Cto do=E2=80=9D for the WG, that=E2=80=99s fine, but it=E2=80=99s orthogo= nal to the security points raised.

=C2=A0

=C2=A0<= /p>

I had recommended having a focused interim meeting t= o make sure that everyone concerned understood the issues and=

worked through the threat analysis and possible solu= tions together.

=C2=A0

Let=E2=80=99s please not conflate the ongoing securi= ty discussion with OAM, or other topics.=C2=A0 The security reality, as you= pointed out in your email to Eric, is that we, as a community and industry, accept a level of trust wrt network devices. <= /p>

=C2=A0

I don't actually think that's the point of c= ontention, at least from my perspective. Rather it's about the level of= trust to be placed in the networking path through which that data flows.

=C2=A0

-Ekr

=C2=A0

=C2=A0

=C2=A0The ongoing edits and dialogue with Kathleen a= nd Eric are working through their concerns.=C2=A0 An interim to talk about = next SFC steps, post NSH, is a different matter. =C2=A0

=C2=A0

=C2=A0

=C2=A0<= /p>

At this point, clearly the most that could happen is= a

virtual interim.=C2=A0 There are some background dis= cussions going on.

=C2=A0

I do not want to assume what mixture will be accepta= ble to handle the security concerns expressed by Kathleen and Eric

and supported by a number of other ADs.

=C2=A0

I do greatly appreciate your attention and efforts t= o clarify and try to move this work forward. I have been expressing concern= s

about the security aspects of this work since RFC 76= 65 went through the publication process - and strongly encouraging serious<= u>

WG focus to prevent precisely what has now happened.=

=C2=A0

Regards,

Alia

=C2=A0

=C2=A0

On Thu, Oct 19, 2017 at 4:49 AM, <mohamed.boucadair@orange= .com> wrote:

Hi Alia,

=C2=A0

Can you please share with us the current st= atus of the document and the list of pending blocking points?=

=C2=A0

I went through all public email exchanges, = especially the ones related to security, but it is not that easy to understand what are the remaining issues that need fixes.=

=C2=A0

In particular, is there a concern with assu= ming the current NSH threat model?

=C2=A0

1.=C2=A0 NSH is secure against attacks induced by nodes that inject = (spoofed) NSH before entering an SFC-enabled domain. Indeed, SFC ingress no= des MUST discard packets carrying NSH.

2.=C2=A0 NSH is secure against attacks from within the SFC-enabled d= omain to inject non-authorized context headers. From a service perspective,= the guard is the CP which is responsible for instructing the SFC-aware nodes about the mandatory-to-process and optiona= l-to-process context headers. Furthermore, whatever the origin of a supplie= d context header, the last SFF of a chain (and egress nodes) MUST remove th= e NSH before forwarding upstream.

3.=C2=A0 NSH is secure against leaking privacy information outside a= n SFC enabled domain. The last SFF of a chain (and egress nodes) MUST remov= e the NSH before forwarding upstream.

4.=C2=A0 NSH is secure against indefinite SF/SFF loops by means of S= I and TTL fields.

5.=C2=A0 Control plane specific threats are out of scope, but the do= cument cites I-D.ietf-sfc-control-plane for the expected behavior when inst= ructing SFC nodes. BTW, the secdir review of the CP requirements can be retrieved here (https://datatracker.ietf.org/doc/review-ietf-sfc-co= ntrol-plane-02-secdir-early-meadows-2015-12-10/).

6.=C2=A0 NSH does not share privacy data with non-authorized parties= . Indeed, data carried in context headers are derived from the original pac= ket (e.g., source IP address) or are already known to the operator (e.g., subscriber identifier, policy identifier, service i= dentifier). The context information is shared with nodes that are within th= e same administrative domain. =C2=A0

7.=C2=A0 Like other communication protocols, attacks from within the= network are possible, but those are soften by relying on the procedures pu= t in place by operators for testing and validating nodes/features before actual activation. NSH does not provide a built-in f= eature to prevent misbehaving nodes, but recommends to rely on the security= features provided by the underlying transport encapsulation schemes.

=C2=A0

Let=E2=80=99s now focus on the typical =E2= =80=9Cattacks=E2=80=9D that can be issued from within the network:

1.=C2=A0 A misbehaving node redirect the traffic to non-authorized n= odes outside a domain: This is not NSH-specific.

2.=C2=A0 A misbehaving SFC-unware node alters the content of a packe= t: This is not NSH-specific.

3.=C2=A0 A misbehaving SFC-aware node alters the content of NSH:

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 i.=C2=A0=C2=A0=C2=A0=C2=A0 It removes the NSH header from all packets it sees: This wi= ll imply that the packets, the misbehaving node intercepts, will be forward= ed upstream without invoking the required SFs (which may be seen as a feature, not a bug if one dislikes =E2=80=9Cmiddle= boxes=E2=80=9D :)). More seriously, the OAM NSH feature will allow an opera= tor to detect whether NSH packets are travelling in accordance with SFC ins= tructions of that domain. Running that feature will help detecting the misbehaving node.

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 ii.=C2=A0=C2=A0=C2=A0=C2=A0 It modifies the content of SPI: This will imply that these = packets will be forwarded over a wrong path. Again, running OAM NSH will al= low the operator to detect whether a packet is travelling in accordance with SFC instructions. Running that feature regul= arly will help identifying the misbehaving node and whether the SFC configu= ration of a domain is aligned with the expected behavior.<= /u>

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 iii.=C2=A0=C2=A0=C2=A0=C2=A0 It modifies the content of SI/TTL: This will increase the a= uthorized maximum SFF/SF hops. Not sure if there is a security problem out = there.

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 iv.=C2=A0=C2=A0=C2=A0=C2=A0 The misbehaving node is a classifier: The implications will= be severe from a service standpoint. NSH relies on OAM and control-plane t= o detect such case. =C2=A0=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 v.=C2=A0=C2=A0=C2=A0=C2=A0 The misbehaving node is an SFF: Examples of misbehaviors ar= e: strip NSH, forward to a non-authorized SF, redirect the traffic to a non= -authorized nodes, etc. Like for the classifier case, NSH relies on OAM and control-plane to detect such case. =C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0

Are there specific attacks that are not lis= ted above and that need more attention from the WG?

=C2=A0

Thank you.

=C2=A0

Cheers,

Med

=C2=A0

_______________________________________________=
sfc mailing list
sfc@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/sfc

=C2=A0

=C2=A0

=C2=A0

=C2=A0


--94eb2c07cd7cbf075a055bfb8836-- From nobody Fri Oct 20 07:49:50 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 572AA1332E1 for ; Fri, 20 Oct 2017 07:49:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.519 X-Spam-Level: X-Spam-Status: No, score=-14.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id upcsPhUPflf0 for ; Fri, 20 Oct 2017 07:49:48 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4E731241F3 for ; Fri, 20 Oct 2017 07:49:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=12328; q=dns/txt; s=iport; t=1508510987; x=1509720587; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=LnhTOPChT0AWy9xliawSr6j3l72iIpNHb4z7z+w/OP8=; b=XhYG+tbSwjiss8IoRE6zUSOe8NYJM8RZxNsmIQ9/iQUZ0dqp6xiSDK6o ekjzWHoltwwH2fgHN7scvYnUxJeK7u3j67EVWl52sRHW/2RQMZBQJ+gIl Kg193KyAkSnlMIu5Jlc70rsrdNqUgAFoW4SITMYAuUivorFYpJF1j6oKE A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CuAAAaDOpZ/4UNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9wgVInB4Nzih+PP5JwhUGCEQqFOwIahCE/GAECAQEBAQEBAWs?= =?us-ascii?q?ohR4GI1YQAgEIDjEDAgICMBQRAgQOBYk8ZKotgieLIQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAR2DLoIHgVCBaSmDAYgZL4IyBZhviHAClG+TH5VNAhEZAYE4AR84gVt?= =?us-ascii?q?6FXYBgjaEX3aJT4ERAQEB?= X-IronPort-AV: E=Sophos; i="5.43,405,1503360000"; d="scan'208,217"; a="19209683" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Oct 2017 14:49:47 +0000 Received: from XCH-RTP-007.cisco.com (xch-rtp-007.cisco.com [64.101.220.147]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v9KEnk4M024988 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 20 Oct 2017 14:49:47 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-007.cisco.com (64.101.220.147) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 20 Oct 2017 10:49:46 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Fri, 20 Oct 2017 10:49:46 -0400 From: "Carlos Pignataro (cpignata)" To: Eric Rescorla CC: Med Boucadair , Kathleen Moriarty , "Paul Quinn (paulq)" , "sfc@ietf.org" , Alia Atlas Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wAdXO4AACcpgAAAAH8cgAAAOTiAAAAhrYAAAJr5gAAAUAUAAAD39QA= Date: Fri, 20 Oct 2017 14:49:45 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BA4@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BFB@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.116.133] Content-Type: multipart/alternative; boundary="_000_AD07ABFF1C864BE1B5A53B9C8DD32852ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:49:49 -0000 --_000_AD07ABFF1C864BE1B5A53B9C8DD32852ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIE9jdCAyMCwgMjAxNywgYXQgMTA6MjEgQU0sIEVyaWMgUmVzY29ybGEgPGVrckBydGZt LmNvbTxtYWlsdG86ZWtyQHJ0Zm0uY29tPj4gd3JvdGU6DQoNCknigJltIHJlaXRlcmF0aW5nIG15 IHF1ZXN0aW9uOiB3aGF0IHNwZWNpZmljIGF0dGFja3MgYnVpbHQtaW4vbWFuZGF0b3J5IGludGVn cml0eSBtZWNoYW5pc21zIHdpbGwgc29sdmUgZm9yIHRoZSBwYXJ0aWN1bGFyIGNhc2Ugb2YgTlNI PyBUaGFuayB5b3UuDQoNClRhbXBlcmluZyB3aXRoIHRoZSBwYXRoIHBhY2tldHMgdGFrZSB0aHJv dWdoIHRoZSBORkMuDQoNCltBc3N1bWluZyB5b3UgbWVhbiBTRlAgKG9yIG1heWJlIGV2ZW4gU0ZD KSBpbnN0ZWFkIG9mIE5GQy4gSWYgeW91IGFyZSByZWZlcnJpbmcgdG8gc29tZXRoaW5nIGVsc2Us IEkgbWlzc2VkIHRoZSBhY3JvbnltLl0NCg0KVG8geW91ciBwb2ludCwgdGhlcmUgYXJlIG90aGVy IGltcHJvdmVtZW50cyB3ZSBjYW4gbWFrZSB0byB0aGUgdGV4dCwgaW5kZWVkLiBGb3IgZXhhbXBs ZSwgaGVyZeKAmXMgYSBzdWdnZXN0aW9uIHJlIEludGVncml0eToNCg0K4oCUPjjigJQNClNGQyBE ZXZpY2VzDQoNCiAgICAgICAgICAgICAgICBTRkMgZGV2aWNlcyBNQVkNCiAgICAgICAgICAgICAg ICBwZXJmb3JtIHZhcmlvdXMgZm9ybXMgb2YgdmVyaWZpY2F0aW9uIG9uIHJlY2VpdmVkIE5TSCBw YWNrZXRzDQogICAgICAgICAgICAgICAgc3VjaCBhcyBvbmx5IGFjY2VwdGluZyBOU0ggcGFja2V0 cyBmcm9tIGV4cGVjdGVkIGRldmljZXMsDQogICAgICAgICAgICAgICAgY2hlY2tpbmcgdGhhdCBO U0ggU1BJIGFuZCBTSSB2YWx1ZXMgcmVjZWl2ZWQgZnJvbSBleHBlY3RlZA0KICAgICAgICAgICAg ICAgIGRldmljZXMgY29uZm9ybSB0byBleHBlY3RlZCB2YWx1ZXMgYW5kIHNvIG9uLiBJbXBsZW1l bnRhdGlvbiBvZg0KICAgICAgICAgICAgICAgIHRoZXNlIGFkZGl0aW9uYWwgY2hlY2tzIGFyZSBh IGxvY2FsIG1hdHRlciBhbmQgdGh1cyBvdXQgb2Ygc2NvcGUNCiAgICAgICAgICAgICAgICBvZiB0 aGlzIGRvY3VtZW50Lg0KDQpOU0ggQmFzZSBhbmQgU2VydmljZSBQYXRoIEhlYWRlcnMNCg0KICAg ICAgICAgICAgICAgIDEuICBTRkYvU0YgTlNIIHZlcmlmaWNhdGlvbg0KDQogICAgICAgICAgICAg ICAgICAgICAgICBBbHRob3VnaCBzdHJpY3RseSBzcGVha2luZyBub3QgaW50ZWdyaXR5IHByb3Rl Y3Rpb24sIHNvbWUgb2YNCiAgICAgICAgICAgICAgICAgICAgICAgIHRoZSB0ZWNobmlxdWVzIG1l bnRpb25lZCBhYm92ZSBzdWNoIGFzIGNoZWNraW5nIGV4cGVjdGVkIE5TSA0KICAgICAgICAgICAg ICAgICAgICAgICAgdmFsdWVzIGFyZSByZWNlaXZlZCBmcm9tIGV4cGVjdGVkIFNGQyBkZXZpY2Uo cykgY2FuIHByb3ZpZGUNCiAgICAgICAgICAgICAgICAgICAgICAgIGEgZm9ybSBvZiB2ZXJpZmlj YXRpb24gd2l0aG91dCBpbmN1cnJpbmcgdGhlIGJ1cmRlbiBvZiBhDQogICAgICAgICAgICAgICAg ICAgICAgICBmdWxsLWZsZWRnZWQgaW50ZWdyaXR5IHByb3RlY3Rpb24gZGVwbG95bWVudC4NCg0K ICAgICAgICAgICAgICAgIDIuICBUcmFuc3BvcnQgU2VjdXJpdHkNCg0KICAgICAgICAgICAgICAg ICAgICAgICAgTlNIIGlzIGFsd2F5cyBlbmNhcHN1bGF0ZWQgYnkgYW4gb3V0ZXIgdHJhbnNwb3J0 DQogICAgICAgICAgICAgICAgICAgICAgICBlbmNhcHN1bGF0aW9uIGFzIGRldGFpbGVkIGluIFNl Y3Rpb24gNCBvZiB0aGlzDQogICAgICAgICAgICAgICAgICAgICAgICBzcGVjaWZpY2F0aW9uLCBh bmQgYXMgZGVwaWN0ZWQgaW4gRmlndXJlIDEuICBJZiBhbiBvcGVyYXRvcg0KICAgICAgICAgICAg ICAgICAgICAgICAgZGVlbXMgY3J5cHRvZ3JhcGhpYyBpbnRlZ3JpdHkgcHJvdGVjdGlvbiBuZWNl c3NhcnkgZHVlIHRvDQogICAgICAgICAgICAgICAgICAgICAgICB0aGVpciByaXNrIGFuYWx5c2lz LCB0aGVuIGFuIG91dGVyIHRyYW5zcG9ydCBlbmNhcHN1bGF0aW9uDQogICAgICAgICAgICAgICAg ICAgICAgICB0aGF0IHByb3ZpZGVzIHN1Y2ggcHJvdGVjdGlvbiBbUkZDNjA3MV0sIHN1Y2ggYXMg SVBzZWMsIE1VU1QNCiAgICAgICAgICAgICAgICAgICAgICAgIGJlIHVzZWQuDQrigJQ+OOKAlA0K DQpXaGF0IGRvIHlvdSB0aGluaz8NCg0KVGhhbmtzLA0KDQpDYXJsb3MuDQoNCg0KDQotRWtyDQoN Cg0K --_000_AD07ABFF1C864BE1B5A53B9C8DD32852ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <44FA588B92B82A45B6585D3648555D26@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gT2N0IDIwLCAyMDE3LCBhdCAxMDoyMSBB TSwgRXJpYyBSZXNjb3JsYSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIgY2xhc3M9 IiI+ZWtyQHJ0Zm0uY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWlu dGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIGNsYXNzPSJn bWFpbF9xdW90ZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IG1h cmdpbjogMHB4IDBweCAwcHggMC44ZXg7IGJvcmRlci1sZWZ0LXdpZHRoOiAxcHg7IGJvcmRlci1s ZWZ0LXN0eWxlOiBzb2xpZDsgYm9yZGVyLWxlZnQtY29sb3I6IHJnYigyMDQsIDIwNCwgMjA0KTsg cGFkZGluZy1sZWZ0OiAxZXg7Ij4NCjxkaXYgbGFuZz0iRlIiIGxpbms9ImJsdWUiIHZsaW5rPSJw dXJwbGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0ibV8xNjU0NjI5MzE1NTI5MDEwNzY5V29yZFNl Y3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPkni gJltIHJlaXRlcmF0aW5nIG15IHF1ZXN0aW9uOiB3aGF0IHNwZWNpZmljIGF0dGFja3MgYnVpbHQt aW4vbWFuZGF0b3J5IGludGVncml0eSBtZWNoYW5pc21zIHdpbGwgc29sdmUgZm9yIHRoZSBwYXJ0 aWN1bGFyIGNhc2Ugb2YgTlNIPyBUaGFuayB5b3UuPC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NClRhbXBlcmluZyB3 aXRoIHRoZSBwYXRoIHBhY2tldHMgdGFrZSB0aHJvdWdoIHRoZSBORkMuPC9kaXY+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PltBc3N1bWlu ZyB5b3UgbWVhbiBTRlAgKG9yIG1heWJlIGV2ZW4gU0ZDKSBpbnN0ZWFkIG9mIE5GQy4gSWYgeW91 IGFyZSByZWZlcnJpbmcgdG8gc29tZXRoaW5nIGVsc2UsIEkgbWlzc2VkIHRoZSBhY3JvbnltLl08 L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PlRvIHlvdXIgcG9pbnQsIHRo ZXJlIGFyZSBvdGhlciBpbXByb3ZlbWVudHMgd2UgY2FuIG1ha2UgdG8gdGhlIHRleHQsIGluZGVl ZC4gRm9yIGV4YW1wbGUsIGhlcmXigJlzIGEgc3VnZ2VzdGlvbiByZSBJbnRlZ3JpdHk6PC9kaXY+ DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj7igJQmZ3Q7OOKAlCZuYnNwOzwvZGl2 Pg0KPGRpdj5TRkMgRGV2aWNlczwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXY+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyZuYnNwO1NGQyBkZXZpY2VzIE1BWTxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDtwZXJmb3JtIHZhcmlvdXMg Zm9ybXMgb2YgdmVyaWZpY2F0aW9uIG9uIHJlY2VpdmVkIE5TSCBwYWNrZXRzPGJyIGNsYXNzPSIi Pg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyZuYnNwO3N1Y2ggYXMgb25seSBhY2NlcHRpbmcgTlNIIHBhY2tldHMgZnJvbSBleHBlY3RlZCBk ZXZpY2VzLDxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDtjaGVja2luZyB0aGF0IE5TSCBTUEkgYW5kIFNJIHZh bHVlcyByZWNlaXZlZCBmcm9tIGV4cGVjdGVkPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO2RldmljZXMgY29u Zm9ybSB0byBleHBlY3RlZCB2YWx1ZXMgYW5kIHNvIG9uLiBJbXBsZW1lbnRhdGlvbiBvZjxiciBj bGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsmbmJzcDt0aGVzZSBhZGRpdGlvbmFsIGNoZWNrcyBhcmUgYSBsb2NhbCBtYXR0ZXIg YW5kIHRodXMgb3V0IG9mIHNjb3BlPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO29mIHRoaXMgZG9jdW1lbnQu PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2Pk5TSCBCYXNlIGFuZCBT ZXJ2aWNlIFBhdGggSGVhZGVyczwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXY+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyZuYnNwOzEuJm5ic3A7Jm5ic3A7U0ZGL1NGIE5TSCB2ZXJpZmljYXRpb248YnIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO0FsdGhvdWdo IHN0cmljdGx5IHNwZWFraW5nIG5vdCBpbnRlZ3JpdHkgcHJvdGVjdGlvbiwgc29tZSBvZjxiciBj bGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jm5ic3A7dGhlIHRlY2huaXF1ZXMg bWVudGlvbmVkIGFib3ZlIHN1Y2ggYXMgY2hlY2tpbmcgZXhwZWN0ZWQgTlNIPGJyIGNsYXNzPSIi Pg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDt2YWx1ZXMgYXJlIHJlY2VpdmVkIGZy b20gZXhwZWN0ZWQgU0ZDIGRldmljZShzKSBjYW4gcHJvdmlkZTxiciBjbGFzcz0iIj4NCiZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jm5ic3A7YSBmb3JtIG9mIHZlcmlmaWNhdGlvbiB3aXRob3V0 IGluY3VycmluZyB0aGUgYnVyZGVuIG9mIGE8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyZuYnNwO2Z1bGwtZmxlZGdlZCBpbnRlZ3JpdHkgcHJvdGVjdGlvbiBkZXBsb3lt ZW50LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDsyLiZuYnNwOyZuYnNwO1RyYW5z cG9ydCBTZWN1cml0eTxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7Jm5ic3A7TlNIIGlzIGFsd2F5cyBlbmNhcHN1bGF0ZWQgYnkgYW4gb3V0ZXIg dHJhbnNwb3J0PGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDtl bmNhcHN1bGF0aW9uIGFzIGRldGFpbGVkIGluIFNlY3Rpb24gNCBvZiB0aGlzPGJyIGNsYXNzPSIi Pg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDtzcGVjaWZpY2F0aW9uLCBhbmQgYXMg ZGVwaWN0ZWQgaW4gRmlndXJlIDEuJm5ic3A7Jm5ic3A7SWYgYW4gb3BlcmF0b3I8YnIgY2xhc3M9 IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwO2RlZW1zIGNyeXB0b2dyYXBoaWMg aW50ZWdyaXR5IHByb3RlY3Rpb24gbmVjZXNzYXJ5IGR1ZSB0bzxiciBjbGFzcz0iIj4NCiZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jm5ic3A7dGhlaXIgcmlzayBhbmFseXNpcywgdGhlbiBhbiBv dXRlciB0cmFuc3BvcnQgZW5jYXBzdWxhdGlvbjxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7Jm5ic3A7dGhhdCBwcm92aWRlcyBzdWNoIHByb3RlY3Rpb24gW1JGQzYwNzFd LCBzdWNoIGFzIElQc2VjLCBNVVNUPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsmbmJzcDtiZSB1c2VkLjxiciBjbGFzcz0iIj4NCjxkaXY+4oCUJmd0OzjigJQmbmJzcDs8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQpXaGF0IGRvIHlvdSB0 aGluaz88L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PlRoYW5rcyw8L2Rp dj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PkNhcmxvcy48L2Rpdj4NCjxkaXY+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0i Ij4NCi1Fa3I8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_AD07ABFF1C864BE1B5A53B9C8DD32852ciscocom_-- From nobody Fri Oct 20 07:51:45 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDD011241F3 for ; Fri, 20 Oct 2017 07:51:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Edf1Ee9ZTsiG for ; Fri, 20 Oct 2017 07:51:41 -0700 (PDT) Received: from mail-yw0-x233.google.com (mail-yw0-x233.google.com [IPv6:2607:f8b0:4002:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB5DA132198 for ; Fri, 20 Oct 2017 07:51:40 -0700 (PDT) Received: by mail-yw0-x233.google.com with SMTP id i198so6571087ywe.7 for ; Fri, 20 Oct 2017 07:51:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=zbEQVUM9FEOhfBARxR2rCY+QbmI+2iX/qRFXpsmn+Qk=; b=V92gymI2mzNPNGHJH1Ylco3hSWgRUIc/dC1wJ5P8bSQxevMfDRcwS8bWcoQkyKsOE0 mROj/rMxcgLewR25mrTjUuxeUF9lGQm+3Ut8OW5/k251gG7RbfXZmh6ogimH7e9WT+7h 66tzSZ6ka4o3WfMHXNTUYiIn9y66MQ4hGzXGLrSf3ZcvpPmUO+tJvpwzXJuzx/UfjvKk PnOhRbPg12zfwfQfZg5vSNLT9DcdwL/xRQGNozO1T3k+D67KK4I5i09miHqhp9yk/wgx qNp6WtjwtGwRvMKb0CitJVOM8KxYR33ZN/Ydpc/4Rd4sX6sOnooC1a67LjTbuxegxdIh 1x4A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=zbEQVUM9FEOhfBARxR2rCY+QbmI+2iX/qRFXpsmn+Qk=; b=Ga+UMM5DoO8xyAQje5ITud/+Oz5xejq9Ttmu8Hvs2ure7RRiIiHPOZzi+R4ViNSv2N kWl1wlBQ7ou3RPYRGJrFG3NfLwjiBELRV/uCT5R8qNW38WDzezl1y0n1NMqFxlPMHna3 PxaLmx0IDV4zmMV1te32DJFsLLLQWGizJj/kes7GkEaOXgzlqc6m0hFMLoZMZAFmLn+V Wz1rrBHuvfWHnTOPCEzuvSWNb+hEePrIujt81TJyPm3IpphDb0h/Y18xQXfPTGMXoYls C+Krplho9YUJTGgsgkFW0lmRqUTamzkTapoqFmeSSK4xa3GIoOvr9m3HfAcxy55LRSNF AhAA== X-Gm-Message-State: AMCzsaVDcbAmT0nh+NfAii5lFyAgstLPrjHVZh7clvbnlSYiHVL9OT51 UOOiSqivtmzxAp/P7wJyA3xmNMqIiVa00EoWhybAIg== X-Google-Smtp-Source: ABhQp+RngTH6sxJNlKG0j1SCXJjUPVPwW1egEpouNsFIOg+vObV3d2d32KnoGp1UJ04ry4lfpQHXtvWS+75dJDEZ63M= X-Received: by 10.37.40.198 with SMTP id o189mr3495178ybo.353.1508511099947; Fri, 20 Oct 2017 07:51:39 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Fri, 20 Oct 2017 07:50:59 -0700 (PDT) In-Reply-To: References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> From: Eric Rescorla Date: Fri, 20 Oct 2017 07:50:59 -0700 Message-ID: To: "Paul Quinn (paulq)" Cc: "Carlos Pignataro (cpignata)" , Kathleen Moriarty , Med Boucadair , "sfc@ietf.org" , Alia Atlas Content-Type: multipart/alternative; boundary="94eb2c14e29840a4b4055bfb9c22" Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:51:44 -0000 --94eb2c14e29840a4b4055bfb9c22 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Well, I see how you can feel that way, but on the other hand, Proposed Standard is supposed to be for documents which, to quote RFC 2026 "A Proposed Standard should have no known technical omissions with respect to the requirements placed upon it." and a number of IETF documents memorializing a threat model in which NSH is not a safe design. I appreciate that you feel that that threat model is not applicable here, but I don't agree, and I think the number of DISCUSSes on this document suggests I'm not the only one. In any case, I don't think going back and forth in email is productive here. I'm happy to do this live in Singapore or on a phone call where the other people who filed DISCUSSes can also attend. -Ekr On Fri, Oct 20, 2017 at 7:37 AM, Paul Quinn (paulq) wrote= : > > > On Oct 20, 2017, at 10:26 AM, Eric Rescorla wrote: > > > > On Fri, Oct 20, 2017 at 7:18 AM, Carlos Pignataro (cpignata) < > cpignata@cisco.com> wrote: > >> >> On Oct 20, 2017, at 10:08 AM, Eric Rescorla wrote: >> >> >> On Fri, Oct 20, 2017 at 7:01 AM, Carlos Pignataro (cpignata) < >> cpignata@cisco.com> wrote: >> >>> Eric, >>> >>> On Oct 20, 2017, at 9:45 AM, Eric Rescorla wrote: >>> >>> >>> >>> On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) >>> wrote: >>> >>>> Hi Alia, >>>> >>>> >>>> >>>> On Oct 19, 2017, at 2:49 PM, Alia Atlas wrote: >>>> >>>> Hi Med, >>>> >>>> Since you directed this at me, there are efforts to have some >>>> discussions and understand better the particular threats. >>>> Currently, there is no transport with integrity protection that is eve= n >>>> a SHOULD to implement, much less a MUST. There >>>> is no control-plane defined (beyond the BGP work) that describes >>>> detecting issues. There is no OAM defined and adopted >>>> by the WG that detects or handles these types of attacks. I see the >>>> structure that you are presuming, but none of these are >>>> available as normative references to NSH today. >>>> >>>> >>>> OAM does not address the security concern around integrity and >>>> devices. If you and the WG believe OAM is the next =E2=80=9Cto do=E2= =80=9D for the WG, >>>> that=E2=80=99s fine, but it=E2=80=99s orthogonal to the security point= s raised. >>>> >>>> >>>> I had recommended having a focused interim meeting to make sure that >>>> everyone concerned understood the issues and >>>> worked through the threat analysis and possible solutions together. >>>> >>>> >>>> Let=E2=80=99s please not conflate the ongoing security discussion with= OAM, or >>>> other topics. The security reality, as you pointed out in your email = to >>>> Eric, is that we, as a community and industry, accept a level of trust= wrt >>>> network devices. >>>> >>> >>> I don't actually think that's the point of contention, at least from my >>> perspective. Rather it's about the level of trust to be placed in the >>> networking path through which that data flows. >>> >>> >>> Understood. How about this? >>> >>> X.2. Transport Encapsulation Security >>> >>> NSH is always encapsulated by an outer transpor= t >>> encapsulation as detailed in Section 4 of this >>> specification, and as depicted in Figure 1. If >>> an operator >>> deems cryptographic integrity protection >>> necessary due to >>> their risk analysis, then an outer transport >>> encapsulation >>> that provides such protection [RFC6071], such >>> as IPsec, MUST >>> be used. >>> >> >> I can't speak for Kathleen, but I don't really think this gets the job >> done. >> >> As described in RFC 3552 (https://tools.ietf.org/html/rfc3552#section-3) >> our threat model is that the Internet is untrusted. >> >> >> Yes. Just to clarify, though, NSH is not an end-to-end protocol. It >> doesn=E2=80=99t =E2=80=9Cstart=E2=80=9D in a host and =E2=80=9Cend=E2=80= =9D in a host/server. It=E2=80=99s >> a network-centric like Provisioned Virtual Private Networks, Traffic >> Engineering, MPLS. >> > > Sure, and in this case it's the network between the nodes that is relevan= t > here. > > That means we should be designing protocols that are safe to operate in >> that environment, which in this case means that the protocol should eith= er >> (a) come with a built-in security mechanism or (b) be run over a secure >> transport. I don't think telling operators "you figure it out" reflects >> best current practice. >> >> >> But=E2=80=A6 we are saying =E2=80=9Crun over a secure transport=E2=80=9D= . >> > > Well, that's not what your proposed text says you should do it "If an > operator deems cryptographic integrity protection necessary due to their > risk analysis". If you want to say "this is only specified to run over a > secure transport" then fine, but that's not what this says. > > > This ignore the reality of running a network: creating largely > unrealizable security requirements simply results relegating security to > something ignored. IMO, we =E2=80=94 the IETF =E2=80=94 are far better o= ff with a > pragmatic approach: document the risk and provide possible mitigations. > From there, if the risks are deemed sufficient, an operator has guidance. > Frankly, this is the only way network protocols (e.g. MPLS, SPRING, SFC, > etc.) will be viable. In fact, the BIER secdir reviewer took exactly thi= s > stance: > > https://datatracker.ietf.org/doc/review-ietf-bier-mpls- > encapsulation-09-secdir-telechat-atkins-2017-10-19/ > > > > > > --94eb2c14e29840a4b4055bfb9c22 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Well, I see how you can feel that way, but on the other ha= nd, Proposed Standard is supposed to be for documents which, to quote RFC 2= 026=C2=A0 "A Proposed Standard should have no known technical omission= s with respect to the requirements placed upon it." and a number of IE= TF documents memorializing a threat model in which NSH is not a safe design= . I appreciate that you feel that that threat model is not applicable here,= but I don't agree, and I think the number of DISCUSSes on this documen= t suggests I'm not the only one.

In any case, I don&= #39;t think going back and forth in email is productive here. I'm happy= to do this live in Singapore or on a phone call where the other people who= filed DISCUSSes can also attend.

-Ekr
<= br>

On= Fri, Oct 20, 2017 at 7:37 AM, Paul Quinn (paulq) <paulq@cisco.com> wrote:


On Oct 20, 2017, at 10:26 AM, Eric Rescorla <ekr@rtfm.com> wrote:



On Fri, Oct 20, 2017 at 7:18 AM, Carlos Pignatar= o (cpignata) <cpignata@cisco.com> wrote:

On Oct 20, 2017, at 10:08 AM, Eric Rescorla <ekr@rtfm.com> wrote:


On Fri, Oct 20, 2017 at 7:01 AM, Carlos Pignatar= o (cpignata) <cpignata@cisco.com> wrote:
Eric,

On Oct 20, 2017, at 9:45 AM, Eric Rescorla <ekr@rtfm.com> wrote:



On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (pau= lq) <paulq@cisco.com> wrote:
Hi Alia,




Hi Med,

Since you directed this at me, there are efforts to have some discussi= ons and understand better the particular threats.
Currently, there is no transport with integrity protection that is eve= n a SHOULD to implement, much less a MUST.=C2=A0 There
is no control-plane defined (beyond the BGP work) that describes detec= ting issues.=C2=A0 There is no OAM defined and adopted
by the WG that detects or handles these types of attacks. I see the st= ructure that you are presuming, but none of these are
available as normative references to NSH today.


OAM does not address the security concern around integrity and devices= .=C2=A0 If you and the WG believe OAM is the next =E2=80=9Cto do=E2=80=9D f= or the WG, that=E2=80=99s fine, but it=E2=80=99s orthogonal to the security= points raised.


I had recommended having a focused interim meeting to make sure that e= veryone concerned understood the issues and
worked through the threat analysis and possible solutions together.

Let=E2=80=99s please not conflate the ongoing security discussion with= OAM, or other topics.=C2=A0 The security reality, as you pointed out in yo= ur email to Eric, is that we, as a community and industry, accept a level o= f trust wrt network devices.

I don't actually think that's the point of contention, at leas= t from my perspective. Rather it's about the level of trust to be place= d in the networking path through which that data flows.
Understood. How about this?

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 X.2.=C2=A0=C2=A0Trans= port Encapsulation Security

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0NSH is always encapsulated by an outer transport
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0encapsulation as detailed in Section 4 of this
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0specification, and as depicted in Figure 1.=C2=A0=C2=A0If a= n operator
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0deems cryptographic integrity protection necessary due to =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0their risk analysis, then an outer transport encapsulation<= br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0that provides such protection [RFC6071], such as=C2=A0IPsec= , MUST
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0be used.

I can't speak for Kathleen, but I don't really think this gets= the job done.

As described in RFC 3552 (https://tools.ietf.org/html/rfc3552#se= ction-3) our threat model is that the Internet is untrusted.

Yes. Just to clarify, though, NSH is not an end-to-end protocol. It do= esn=E2=80=99t =E2=80=9Cstart=E2=80=9D in a host and =E2=80=9Cend=E2=80=9D i= n a host/server. It=E2=80=99s a=C2=A0network-centric like=C2=A0Provisioned = Virtual Private Networks, Traffic Engineering, MPLS.

Sure, and in this case it's the network between the nodes that is = relevant here.

That means we should be designing protocols that are safe to operate i= n that environment, which in this case means that the protocol should eithe= r (a) come with a built-in security mechanism or (b) be run over a secure t= ransport. I don't think telling operators "you figure it out" reflects best current prac= tice.
But=E2=80=A6 we are saying =E2=80=9Crun over a secure transport=E2=80= =9D.

Well, that's not what your proposed text says you should do it &qu= ot;If an operator deems cryptographic integrity protection necessary due to= their risk analysis". If you want to say "this is only specified= to run over a secure transport" then fine, but that's not what this says.


This ignore the reality of running a network: creating lar= gely unrealizable security requirements simply results relegating security = to something ignored.=C2=A0 IMO, we =E2=80=94 the IETF =E2=80=94 are far be= tter off with a pragmatic approach: document the risk and provide possible mitigations.=C2=A0 From there, if the risks are deemed sufficient= , an operator has guidance.=C2=A0 Frankly, this is the only way network pro= tocols (e.g. MPLS, SPRING, SFC, etc.) will be viable.=C2=A0 In fact, the BI= ER secdir reviewer took exactly this stance:



<trimmed>



--94eb2c14e29840a4b4055bfb9c22-- From nobody Fri Oct 20 07:54:26 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8283C13420F for ; Fri, 20 Oct 2017 07:54:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.617 X-Spam-Level: X-Spam-Status: No, score=-2.617 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3F5zO1IgGeXb for ; Fri, 20 Oct 2017 07:54:22 -0700 (PDT) Received: from relais-inet.orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6AD711241F3 for ; Fri, 20 Oct 2017 07:54:21 -0700 (PDT) Received: from opfedar03.francetelecom.fr (unknown [xx.xx.xx.5]) by opfedar25.francetelecom.fr (ESMTP service) with ESMTP id DA1BF1204BF; Fri, 20 Oct 2017 16:54:19 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.2]) by opfedar03.francetelecom.fr (ESMTP service) with ESMTP id AEDB718006E; Fri, 20 Oct 2017 16:54:19 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06%19]) with mapi id 14.03.0361.001; Fri, 20 Oct 2017 16:54:19 +0200 From: To: Eric Rescorla CC: "Paul Quinn (paulq)" , Alia Atlas , Kathleen Moriarty , "sfc@ietf.org" Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wA+w9M/AAAFmRA= Date: Fri, 20 Oct 2017 14:54:18 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93300A057CEC@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BA4@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BFB@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057C92@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93300A057CECOPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 14:54:24 -0000 --_000_787AE7BB302AE849A7480A190F8B93300A057CECOPEXCLILMA3corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogRXJpYyBS ZXNjb3JsYSBbbWFpbHRvOmVrckBydGZtLmNvbV0NCkVudm95w6kgOiB2ZW5kcmVkaSAyMCBvY3Rv YnJlIDIwMTcgMTY6NDYNCsOAIDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTg0KQ2MgOiBQYXVs IFF1aW5uIChwYXVscSk7IEFsaWEgQXRsYXM7IEthdGhsZWVuIE1vcmlhcnR5OyBzZmNAaWV0Zi5v cmcNCk9iamV0IDogUmU6IFtzZmNdIE5TSCBESVNDVVNTIFN0YXR1cw0KDQoNCg0KT24gRnJpLCBP Y3QgMjAsIDIwMTcgYXQgNzozOCBBTSwgPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFp bHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+PiB3cm90ZToNClJlLSwNCg0KUGxlYXNl IHNlZSBpbmxpbmUuDQoNCkNoZWVycywNCk1lZA0KDQpEZSA6IEVyaWMgUmVzY29ybGEgW21haWx0 bzpla3JAcnRmbS5jb208bWFpbHRvOmVrckBydGZtLmNvbT5dDQpFbnZvecOpIDogdmVuZHJlZGkg MjAgb2N0b2JyZSAyMDE3IDE2OjIyDQrDgCA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE4NCkNj IDogUGF1bCBRdWlubiAocGF1bHEpOyBBbGlhIEF0bGFzOyBLYXRobGVlbiBNb3JpYXJ0eTsgc2Zj QGlldGYub3JnPG1haWx0bzpzZmNAaWV0Zi5vcmc+DQpPYmpldCA6IFJlOiBbc2ZjXSBOU0ggRElT Q1VTUyBTdGF0dXMNCg0KDQoNCk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0IDc6MTIgQU0sIDxtb2hh bWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2Uu Y29tPj4gd3JvdGU6DQpSZS0sDQoNClRoYW5rIHlvdSwgRXJpYy4NCg0KVGhlcmUgaXMgYSBtaXN1 bmRlcnN0YW5kaW5nIGhlcmUuIFRoZSBkb2N1bWVudCBkb2VzIG5vdCBjbGFpbSBEQ3MgYXJlIHNh ZmUgYW5kIHNlY3VyZSBlbnZpcm9ubWVudHMuIFdoYXQgaXQgc2F5cyBpcyB0aGF0IHRoZSBOU0gg c3BlY2lmaWNhdGlvbiBpcyBzY29wZWQgdG8gYmUgZGVwbG95ZWQgaW4gYSBzaW5nbGUgYWRtaW5p c3RyYXRpdmUgZG9tYWluIHdpdGggbWVhc3VyZXMgdG8sIGUuZy4sOg0KDQotICAgIFByb3RlY3Qg YWdhaW5zdCBzcG9vZmVkIGRhdGENCg0KLSAgICBMZWFraW5nIGRhdGEgb3V0c2lkZSBhIGRvbWFp bg0KDQotICAgIERldGVjdCBhbmQgcHJldmVudCBpbmRlZmluaXRlIGZvcndhcmRpbmcgbG9vcA0K WWVzLCBhbmQgbXkgcG9pbnQgKGFuZCBJIGJlbGlldmUgS2F0aGxlZW4ncykgaXMgdGhhdCB0aGlz IGlzIG5vdCBhIHJlYWxpc3RpYyBvcGVyYXRpbmcgbW9kZWwgZ2l2ZW4gdGhlIGFjdHVhbCBzdGF0 ZSBvZiB0aGUgd29ybGQuDQoNCg0KQSBzaW5nbGUgYWRtaW5pc3RyYXRpdmUgZG9tYWluIGlzIG5v dCBuZWNlc3NhcmlseSBhIHNlY3VyZSBvciBhIHNhZmUgb25lLiBUaGF04oCZcyBldmlkZW50LiBB dHRhY2tzIGZyb20gd2l0aGluIGFuIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBhcmUgcG9zc2libGUg d2l0aCBvciB3aXRob3V0IE5TSC4NCg0KSeKAmW0gcmVpdGVyYXRpbmcgbXkgcXVlc3Rpb246IHdo YXQgc3BlY2lmaWMgYXR0YWNrcyBidWlsdC1pbi9tYW5kYXRvcnkgaW50ZWdyaXR5IG1lY2hhbmlz bXMgd2lsbCBzb2x2ZSBmb3IgdGhlIHBhcnRpY3VsYXIgY2FzZSBvZiBOU0g/IFRoYW5rIHlvdS4N Cg0KVGFtcGVyaW5nIHdpdGggdGhlIHBhdGggcGFja2V0cyB0YWtlIHRocm91Z2ggdGhlIE5GQy4N CltNZWRdIFRoYW5rIHlvdS4gSSBoYXZlIHR3byBjb21tZW50czoNCg0KLSAgICBTdWNoIGJlaGF2 aW9yIGNhbiBhbHNvIGJlIGRldGVjdGVkIGJ5IG1lYW5zIG9mIFNGQyBPQU0gaW4gYW4gU0ZDIGRv bWFpbi4gU2VlIG15IGZpcnN0IG1lc3NhZ2UuDQoNCi0gICAgU3VjaCBtaXNiZWhhdmluZyBub2Rl IHdpbGwgYWN0IG9uIEFMTCB0aGUgdHJhZmZpYywgbm90IG9ubHkgTlNILiBUaGUgcXVlc3Rpb24g aXMgd2h5IHRoZSBOU0ggc3RhbXBlZCB0cmFmZmljIG11c3QgYmUgcHJvdmlkZWQgd2l0aCBidWls dC1pbiBpbnRlZ3JpdHkgZmVhdHVyZSB3aGlsZSB0aGUgdHJhZmZpYyBub3QgZWxlY3RlZCB0byBi ZSBmb3J3YXJkZWQgdmlhIGEgc2VydmljZSBjaGFpbiB3aWxsIGJlIGxlZnQgc3ViamVjdCB0byB0 YW1wZXJpbmcgYXR0YWNrcz8gV291bGRu4oCZdCBiZSBjb25zaXN0ZW50IGdlbmVyYWxpemUgdGhh dCBmZWF0dXJlIChpZiBwcm92aWRlZCkgdG8gYWxsIHRyYWZmaWMgdGhhdCBpcyB0cmFuc2l0aW5n IGZvciBhIGdpdmVuIGRvbWFpbj8NCg0KVGhlIGlzc3VlIGhlcmUgaXMgYXR0YWNrcyBvbiB0aGUg bmV0d29yayBmdW5jdGlvbiBpdHNlbGYgKGUuZy4sIGJ5cGFzc2luZyBvciByZXJvdXRpbmcgdHJh ZmZpYykuDQpbTWVkXSBZZXMsIEkgZ290IHRoYXQuIEl0IGNvcnJlc3BvbmRzIHRvIHdoYXQgSSBo YXZlIGRlc2NyaWJlZCBlYXJsaWVyOg0KDQoNCjEuICBBIG1pc2JlaGF2aW5nIFNGQy1hd2FyZSBu b2RlIGFsdGVycyB0aGUgY29udGVudCBvZiBOU0g6DQoNCsK3ICAgICAgICAgSXQgcmVtb3ZlcyB0 aGUgTlNIIGhlYWRlciBmcm9tIGFsbCBwYWNrZXRzIGl0IHNlZXM6IFRoaXMgd2lsbCBpbXBseSB0 aGF0IHRoZSBwYWNrZXRzLCB0aGUgbWlzYmVoYXZpbmcgbm9kZSBpbnRlcmNlcHRzLCB3aWxsIGJl IGZvcndhcmRlZCB1cHN0cmVhbSB3aXRob3V0IGludm9raW5nIHRoZSByZXF1aXJlZCBTRnMgKHdo aWNoIG1heSBiZSBzZWVuIGFzIGEgZmVhdHVyZSwgbm90IGEgYnVnIGlmIG9uZSBkaXNsaWtlcyDi gJxtaWRkbGVib3hlc+KAnSA6KSkuIE1vcmUgc2VyaW91c2x5LCB0aGUgT0FNIE5TSCBmZWF0dXJl IHdpbGwgYWxsb3cgYW4gb3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRoZXIgTlNIIHBhY2tldHMgYXJl IHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMgb2YgdGhhdCBk b21haW4uIFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHdpbGwgaGVscCBkZXRlY3RpbmcgdGhlIG1pc2Jl aGF2aW5nIG5vZGUuDQoNCsK3ICAgICAgICAgSXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQgb2YgU1BJ OiBUaGlzIHdpbGwgaW1wbHkgdGhhdCB0aGVzZSBwYWNrZXRzIHdpbGwgYmUgZm9yd2FyZGVkIG92 ZXIgYSB3cm9uZyBwYXRoLiBBZ2FpbiwgcnVubmluZyBPQU0gTlNIIHdpbGwgYWxsb3cgdGhlIG9w ZXJhdG9yIHRvIGRldGVjdCB3aGV0aGVyIGEgcGFja2V0IGlzIHRyYXZlbGxpbmcgaW4gYWNjb3Jk YW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMuIFJ1bm5pbmcgdGhhdCBmZWF0dXJlIHJlZ3VsYXJs eSB3aWxsIGhlbHAgaWRlbnRpZnlpbmcgdGhlIG1pc2JlaGF2aW5nIG5vZGUgYW5kIHdoZXRoZXIg dGhlIFNGQyBjb25maWd1cmF0aW9uIG9mIGEgZG9tYWluIGlzIGFsaWduZWQgd2l0aCB0aGUgZXhw ZWN0ZWQgYmVoYXZpb3IuDQoNCsK3ICAgICAgICAgSXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQgb2Yg U0kvVFRMOiBUaGlzIHdpbGwgaW5jcmVhc2UgdGhlIGF1dGhvcml6ZWQgbWF4aW11bSBTRkYvU0Yg aG9wcy4gTm90IHN1cmUgaWYgdGhlcmUgaXMgYSBzZWN1cml0eSBwcm9ibGVtIG91dCB0aGVyZS4N Cg0KwrcgICAgICAgICBUaGUgbWlzYmVoYXZpbmcgbm9kZSBpcyBhIGNsYXNzaWZpZXI6IFRoZSBp bXBsaWNhdGlvbnMgd2lsbCBiZSBzZXZlcmUgZnJvbSBhIHNlcnZpY2Ugc3RhbmRwb2ludC4gTlNI IHJlbGllcyBvbiBPQU0gYW5kIGNvbnRyb2wtcGxhbmUgdG8gZGV0ZWN0IHN1Y2ggY2FzZS4NCg0K wrcgICAgICAgICBUaGUgbWlzYmVoYXZpbmcgbm9kZSBpcyBhbiBTRkY6IEV4YW1wbGVzIG9mIG1p c2JlaGF2aW9ycyBhcmU6IHN0cmlwIE5TSCwgZm9yd2FyZCB0byBhIG5vbi1hdXRob3JpemVkIFNG LCByZWRpcmVjdCB0aGUgdHJhZmZpYyB0byBhIG5vbi1hdXRob3JpemVkIG5vZGVzLCBldGMuIExp a2UgZm9yIHRoZSBjbGFzc2lmaWVyIGNhc2UsIE5TSCByZWxpZXMgb24gT0FNIGFuZCBjb250cm9s LXBsYW5lIHRvIGRldGVjdCBzdWNoIGNhc2UuDQoNCkRvIHlvdSB0aGluayB0aGF0IGN1cnJlbnQg c2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgbmVlZCBjYWxsIG91dCB0aGVzZSBpdGVtcyBleHBsaWNp dGx5Pw0KDQpHZW5lcmFsbHksIHdlIGxvb2sgdG8gcHJvdGVjdCB0aGUgdHJhZmZpYyBpdHNlbGYg dmlhIG90aGVyIG1lY2hhbmlzbXMsIHByZWZlcmFibHkgZW5kLXRvLWVuZC4NCltNZWRdIE5TSCBk b2VzIG5vdCBpbnRlcmZlcmUgd2l0aCBlbmQtdG8tZW5kIHNlY3VyaXR5IG1lY2hhbmlzbXMuIE5T SCB3aWxsIHN1cHBseSBzb21lIGRhdGEgZm9yIHNlcnZpY2UtZGVyaXZlZCBmb3J3YXJkaW5nIGFu ZCB0aGVuIHN0cmlwIHRoYXQgZGF0YSBiZWZvcmUgZm9yd2FyZGluZyBvdXRzaWRlIHRoZSBkb21h aW4uDQoNCg0KLUVrcg0KDQoNCg0KLUVrcg0KDQoNCkNoZWVycywNCk1lZA0KDQpEZSA6IEVyaWMg UmVzY29ybGEgW21haWx0bzpla3JAcnRmbS5jb208bWFpbHRvOmVrckBydGZtLmNvbT5dDQpFbnZv ecOpIDogdmVuZHJlZGkgMjAgb2N0b2JyZSAyMDE3IDE1OjU2DQrDgCA6IEJPVUNBREFJUiBNb2hh bWVkIElNVC9PTE4NCkNjIDogUGF1bCBRdWlubiAocGF1bHEpOyBBbGlhIEF0bGFzOyBLYXRobGVl biBNb3JpYXJ0eTsgc2ZjQGlldGYub3JnPG1haWx0bzpzZmNAaWV0Zi5vcmc+DQoNCk9iamV0IDog UmU6IFtzZmNdIE5TSCBESVNDVVNTIFN0YXR1cw0KDQpJdCdzIGV4cGxhaW5lZCBpbiBkZXRhaWwg aW4gbXkgRElTQ1VTUzoNCg0KIjEuIFRoZSBhc3N1bXB0aW9uIHRoYXQgdGhlIGRhdGFjZW50ZXIg aXMgYSBzZWN1cmUgZW52aXJvbm1lbnQgaXMgbm90IGENCg0KcmVhc29uYWJsZSBvbmUuIEFzIEth dGhsZWVuIGFuZCBBZGFtIGJvdGggb2JzZXJ2ZXIsIGRhdGFjZW50ZXINCg0KYnJlYWNoZXMgYXJl IGNvbW1vbiBhbmQgdGhhdCBpcyB3aHkgcGVvcGxlIGFyZSBtb3ZpbmcgdG93YXJkcw0KDQplbmNy eXB0aW9uIGluc2lkZSB0aGUgZGF0YSBjZW50ZXIuIEkgc2VlIHRoYXQgdGhpcyBkcmFmdCBoYXMg dGV4dA0KDQpjbGFpbWluZyB0aGF0IHRoaXMgaXMgb25seSB0byBiZSBkZXBsb3llZCBpbiBzYWZl IGVudmlyb25tZW50cywgYnV0IHdlDQoNCmtub3cgdGhhdCB0ZWNobm9sb2dpZXMgbGlrZSB0aGlz IGdldCBkZXBsb3llZCBvdXRzaWRlIHRoZSBsb2NhdGlvbnMNCg0KZm9yIHdoaWNoIHdlIGNsYWlt IHRoZXkgYXJlIHRvIGJlIGRlcGxveWVkLCBhbmQgdGhlcmUncyBub3RoaW5nIGhlcmUNCg0KdG8g c3RvcCB0aGF0LiBNb3Jlb3ZlciwgdGhlIHdob2xlIHRyZW5kIHRvd2FyZHMgY2xvdWQgY29tcHV0 aW5nIHB1c2hlcw0KDQp1cyBhd2F5IGZyb20gZGVzaWducyBpbiB3aGljaCB5b3UgY2FuIHNhZmVs eSB0YWxrIGFib3V0IHNpbmdsZSBzZWN1cmUNCg0Kem9uZXMuIg0KDQoNCg0KLUVrcg0KDQoNCg0K DQoNCk9uIEZyaSwgT2N0IDIwLCAyMDE3IGF0IDY6NTEgQU0sIDxtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPj4gd3JvdGU6DQpE ZWFyIEVyaWMsDQoNCkNhbiB5b3UgcGxlYXNlIGNsYXJpZnkgdGhpcyBwb2ludDog4oCcUmF0aGVy IGl0J3MgYWJvdXQgdGhlIGxldmVsIG9mIHRydXN0IHRvIGJlIHBsYWNlZCBpbiB0aGUgbmV0d29y a2luZyBwYXRoIHRocm91Z2ggd2hpY2ggdGhhdCBkYXRhIGZsb3dzLuKAnT8NCg0KU29ycnkgaWYg eW91IGhhdmUgYWxyZWFkeSBleHBsYWluZWQgaXQgdG8gdGhlIGVkaXRvcnMsIGJ1dCBhcyBhIFdH IHBhcnRpY2lwYW50IEkgZG9u4oCZdCBoYXZlIGFjY2VzcyB0byBhIHJlY29yZCBvZiBzdWNoIGRp c2N1c3Npb24uDQoNClRoYW5rIHlvdS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogRXJpYyBSZXNj b3JsYSBbbWFpbHRvOmVrckBydGZtLmNvbTxtYWlsdG86ZWtyQHJ0Zm0uY29tPl0NCkVudm95w6kg OiB2ZW5kcmVkaSAyMCBvY3RvYnJlIDIwMTcgMTU6NDUNCsOAIDogUGF1bCBRdWlubiAocGF1bHEp DQpDYyA6IEFsaWEgQXRsYXM7IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IEthdGhsZWVuIE1v cmlhcnR5OyBzZmNAaWV0Zi5vcmc8bWFpbHRvOnNmY0BpZXRmLm9yZz4NCk9iamV0IDogUmU6IFtz ZmNdIE5TSCBESVNDVVNTIFN0YXR1cw0KDQoNCg0KT24gRnJpLCBPY3QgMjAsIDIwMTcgYXQgNjoz MSBBTSwgUGF1bCBRdWlubiAocGF1bHEpIDxwYXVscUBjaXNjby5jb208bWFpbHRvOnBhdWxxQGNp c2NvLmNvbT4+IHdyb3RlOg0KSGkgQWxpYSwNCg0KDQoNCk9uIE9jdCAxOSwgMjAxNywgYXQgMjo0 OSBQTSwgQWxpYSBBdGxhcyA8YWthdGxhc0BnbWFpbC5jb208bWFpbHRvOmFrYXRsYXNAZ21haWwu Y29tPj4gd3JvdGU6DQoNCkhpIE1lZCwNCg0KU2luY2UgeW91IGRpcmVjdGVkIHRoaXMgYXQgbWUs IHRoZXJlIGFyZSBlZmZvcnRzIHRvIGhhdmUgc29tZSBkaXNjdXNzaW9ucyBhbmQgdW5kZXJzdGFu ZCBiZXR0ZXIgdGhlIHBhcnRpY3VsYXIgdGhyZWF0cy4NCkN1cnJlbnRseSwgdGhlcmUgaXMgbm8g dHJhbnNwb3J0IHdpdGggaW50ZWdyaXR5IHByb3RlY3Rpb24gdGhhdCBpcyBldmVuIGEgU0hPVUxE IHRvIGltcGxlbWVudCwgbXVjaCBsZXNzIGEgTVVTVC4gIFRoZXJlDQppcyBubyBjb250cm9sLXBs YW5lIGRlZmluZWQgKGJleW9uZCB0aGUgQkdQIHdvcmspIHRoYXQgZGVzY3JpYmVzIGRldGVjdGlu ZyBpc3N1ZXMuICBUaGVyZSBpcyBubyBPQU0gZGVmaW5lZCBhbmQgYWRvcHRlZA0KYnkgdGhlIFdH IHRoYXQgZGV0ZWN0cyBvciBoYW5kbGVzIHRoZXNlIHR5cGVzIG9mIGF0dGFja3MuIEkgc2VlIHRo ZSBzdHJ1Y3R1cmUgdGhhdCB5b3UgYXJlIHByZXN1bWluZywgYnV0IG5vbmUgb2YgdGhlc2UgYXJl DQphdmFpbGFibGUgYXMgbm9ybWF0aXZlIHJlZmVyZW5jZXMgdG8gTlNIIHRvZGF5Lg0KDQoNCk9B TSBkb2VzIG5vdCBhZGRyZXNzIHRoZSBzZWN1cml0eSBjb25jZXJuIGFyb3VuZCBpbnRlZ3JpdHkg YW5kIGRldmljZXMuICBJZiB5b3UgYW5kIHRoZSBXRyBiZWxpZXZlIE9BTSBpcyB0aGUgbmV4dCDi gJx0byBkb+KAnSBmb3IgdGhlIFdHLCB0aGF04oCZcyBmaW5lLCBidXQgaXTigJlzIG9ydGhvZ29u YWwgdG8gdGhlIHNlY3VyaXR5IHBvaW50cyByYWlzZWQuDQoNCg0KSSBoYWQgcmVjb21tZW5kZWQg aGF2aW5nIGEgZm9jdXNlZCBpbnRlcmltIG1lZXRpbmcgdG8gbWFrZSBzdXJlIHRoYXQgZXZlcnlv bmUgY29uY2VybmVkIHVuZGVyc3Rvb2QgdGhlIGlzc3VlcyBhbmQNCndvcmtlZCB0aHJvdWdoIHRo ZSB0aHJlYXQgYW5hbHlzaXMgYW5kIHBvc3NpYmxlIHNvbHV0aW9ucyB0b2dldGhlci4NCg0KTGV0 4oCZcyBwbGVhc2Ugbm90IGNvbmZsYXRlIHRoZSBvbmdvaW5nIHNlY3VyaXR5IGRpc2N1c3Npb24g d2l0aCBPQU0sIG9yIG90aGVyIHRvcGljcy4gIFRoZSBzZWN1cml0eSByZWFsaXR5LCBhcyB5b3Ug cG9pbnRlZCBvdXQgaW4geW91ciBlbWFpbCB0byBFcmljLCBpcyB0aGF0IHdlLCBhcyBhIGNvbW11 bml0eSBhbmQgaW5kdXN0cnksIGFjY2VwdCBhIGxldmVsIG9mIHRydXN0IHdydCBuZXR3b3JrIGRl dmljZXMuDQoNCkkgZG9uJ3QgYWN0dWFsbHkgdGhpbmsgdGhhdCdzIHRoZSBwb2ludCBvZiBjb250 ZW50aW9uLCBhdCBsZWFzdCBmcm9tIG15IHBlcnNwZWN0aXZlLiBSYXRoZXIgaXQncyBhYm91dCB0 aGUgbGV2ZWwgb2YgdHJ1c3QgdG8gYmUgcGxhY2VkIGluIHRoZSBuZXR3b3JraW5nIHBhdGggdGhy b3VnaCB3aGljaCB0aGF0IGRhdGEgZmxvd3MuDQoNCi1Fa3INCg0KDQogVGhlIG9uZ29pbmcgZWRp dHMgYW5kIGRpYWxvZ3VlIHdpdGggS2F0aGxlZW4gYW5kIEVyaWMgYXJlIHdvcmtpbmcgdGhyb3Vn aCB0aGVpciBjb25jZXJucy4gIEFuIGludGVyaW0gdG8gdGFsayBhYm91dCBuZXh0IFNGQyBzdGVw cywgcG9zdCBOU0gsIGlzIGEgZGlmZmVyZW50IG1hdHRlci4NCg0KDQoNCkF0IHRoaXMgcG9pbnQs IGNsZWFybHkgdGhlIG1vc3QgdGhhdCBjb3VsZCBoYXBwZW4gaXMgYQ0KdmlydHVhbCBpbnRlcmlt LiAgVGhlcmUgYXJlIHNvbWUgYmFja2dyb3VuZCBkaXNjdXNzaW9ucyBnb2luZyBvbi4NCg0KSSBk byBub3Qgd2FudCB0byBhc3N1bWUgd2hhdCBtaXh0dXJlIHdpbGwgYmUgYWNjZXB0YWJsZSB0byBo YW5kbGUgdGhlIHNlY3VyaXR5IGNvbmNlcm5zIGV4cHJlc3NlZCBieSBLYXRobGVlbiBhbmQgRXJp Yw0KYW5kIHN1cHBvcnRlZCBieSBhIG51bWJlciBvZiBvdGhlciBBRHMuDQoNCkkgZG8gZ3JlYXRs eSBhcHByZWNpYXRlIHlvdXIgYXR0ZW50aW9uIGFuZCBlZmZvcnRzIHRvIGNsYXJpZnkgYW5kIHRy eSB0byBtb3ZlIHRoaXMgd29yayBmb3J3YXJkLiBJIGhhdmUgYmVlbiBleHByZXNzaW5nIGNvbmNl cm5zDQphYm91dCB0aGUgc2VjdXJpdHkgYXNwZWN0cyBvZiB0aGlzIHdvcmsgc2luY2UgUkZDIDc2 NjUgd2VudCB0aHJvdWdoIHRoZSBwdWJsaWNhdGlvbiBwcm9jZXNzIC0gYW5kIHN0cm9uZ2x5IGVu Y291cmFnaW5nIHNlcmlvdXMNCldHIGZvY3VzIHRvIHByZXZlbnQgcHJlY2lzZWx5IHdoYXQgaGFz IG5vdyBoYXBwZW5lZC4NCg0KUmVnYXJkcywNCkFsaWENCg0KDQpPbiBUaHUsIE9jdCAxOSwgMjAx NyBhdCA0OjQ5IEFNLCA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4+IHdyb3RlOg0KSGkgQWxpYSwNCg0KQ2FuIHlvdSBwbGVh c2Ugc2hhcmUgd2l0aCB1cyB0aGUgY3VycmVudCBzdGF0dXMgb2YgdGhlIGRvY3VtZW50IGFuZCB0 aGUgbGlzdCBvZiBwZW5kaW5nIGJsb2NraW5nIHBvaW50cz8NCg0KSSB3ZW50IHRocm91Z2ggYWxs IHB1YmxpYyBlbWFpbCBleGNoYW5nZXMsIGVzcGVjaWFsbHkgdGhlIG9uZXMgcmVsYXRlZCB0byBz ZWN1cml0eSwgYnV0IGl0IGlzIG5vdCB0aGF0IGVhc3kgdG8gdW5kZXJzdGFuZCB3aGF0IGFyZSB0 aGUgcmVtYWluaW5nIGlzc3VlcyB0aGF0IG5lZWQgZml4ZXMuDQoNCkluIHBhcnRpY3VsYXIsIGlz IHRoZXJlIGEgY29uY2VybiB3aXRoIGFzc3VtaW5nIHRoZSBjdXJyZW50IE5TSCB0aHJlYXQgbW9k ZWw/DQoNCg0KMS4gIE5TSCBpcyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGluZHVjZWQgYnkgbm9k ZXMgdGhhdCBpbmplY3QgKHNwb29mZWQpIE5TSCBiZWZvcmUgZW50ZXJpbmcgYW4gU0ZDLWVuYWJs ZWQgZG9tYWluLiBJbmRlZWQsIFNGQyBpbmdyZXNzIG5vZGVzIE1VU1QgZGlzY2FyZCBwYWNrZXRz IGNhcnJ5aW5nIE5TSC4NCg0KMi4gIE5TSCBpcyBzZWN1cmUgYWdhaW5zdCBhdHRhY2tzIGZyb20g d2l0aGluIHRoZSBTRkMtZW5hYmxlZCBkb21haW4gdG8gaW5qZWN0IG5vbi1hdXRob3JpemVkIGNv bnRleHQgaGVhZGVycy4gRnJvbSBhIHNlcnZpY2UgcGVyc3BlY3RpdmUsIHRoZSBndWFyZCBpcyB0 aGUgQ1Agd2hpY2ggaXMgcmVzcG9uc2libGUgZm9yIGluc3RydWN0aW5nIHRoZSBTRkMtYXdhcmUg bm9kZXMgYWJvdXQgdGhlIG1hbmRhdG9yeS10by1wcm9jZXNzIGFuZCBvcHRpb25hbC10by1wcm9j ZXNzIGNvbnRleHQgaGVhZGVycy4gRnVydGhlcm1vcmUsIHdoYXRldmVyIHRoZSBvcmlnaW4gb2Yg YSBzdXBwbGllZCBjb250ZXh0IGhlYWRlciwgdGhlIGxhc3QgU0ZGIG9mIGEgY2hhaW4gKGFuZCBl Z3Jlc3Mgbm9kZXMpIE1VU1QgcmVtb3ZlIHRoZSBOU0ggYmVmb3JlIGZvcndhcmRpbmcgdXBzdHJl YW0uDQoNCjMuICBOU0ggaXMgc2VjdXJlIGFnYWluc3QgbGVha2luZyBwcml2YWN5IGluZm9ybWF0 aW9uIG91dHNpZGUgYW4gU0ZDIGVuYWJsZWQgZG9tYWluLiBUaGUgbGFzdCBTRkYgb2YgYSBjaGFp biAoYW5kIGVncmVzcyBub2RlcykgTVVTVCByZW1vdmUgdGhlIE5TSCBiZWZvcmUgZm9yd2FyZGlu ZyB1cHN0cmVhbS4NCg0KNC4gIE5TSCBpcyBzZWN1cmUgYWdhaW5zdCBpbmRlZmluaXRlIFNGL1NG RiBsb29wcyBieSBtZWFucyBvZiBTSSBhbmQgVFRMIGZpZWxkcy4NCg0KNS4gIENvbnRyb2wgcGxh bmUgc3BlY2lmaWMgdGhyZWF0cyBhcmUgb3V0IG9mIHNjb3BlLCBidXQgdGhlIGRvY3VtZW50IGNp dGVzIEktRC5pZXRmLXNmYy1jb250cm9sLXBsYW5lIGZvciB0aGUgZXhwZWN0ZWQgYmVoYXZpb3Ig d2hlbiBpbnN0cnVjdGluZyBTRkMgbm9kZXMuIEJUVywgdGhlIHNlY2RpciByZXZpZXcgb2YgdGhl IENQIHJlcXVpcmVtZW50cyBjYW4gYmUgcmV0cmlldmVkIGhlcmUgKGh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL3Jldmlldy1pZXRmLXNmYy1jb250cm9sLXBsYW5lLTAyLXNlY2Rpci1l YXJseS1tZWFkb3dzLTIwMTUtMTItMTAvKS4NCg0KNi4gIE5TSCBkb2VzIG5vdCBzaGFyZSBwcml2 YWN5IGRhdGEgd2l0aCBub24tYXV0aG9yaXplZCBwYXJ0aWVzLiBJbmRlZWQsIGRhdGEgY2Fycmll ZCBpbiBjb250ZXh0IGhlYWRlcnMgYXJlIGRlcml2ZWQgZnJvbSB0aGUgb3JpZ2luYWwgcGFja2V0 IChlLmcuLCBzb3VyY2UgSVAgYWRkcmVzcykgb3IgYXJlIGFscmVhZHkga25vd24gdG8gdGhlIG9w ZXJhdG9yIChlLmcuLCBzdWJzY3JpYmVyIGlkZW50aWZpZXIsIHBvbGljeSBpZGVudGlmaWVyLCBz ZXJ2aWNlIGlkZW50aWZpZXIpLiBUaGUgY29udGV4dCBpbmZvcm1hdGlvbiBpcyBzaGFyZWQgd2l0 aCBub2RlcyB0aGF0IGFyZSB3aXRoaW4gdGhlIHNhbWUgYWRtaW5pc3RyYXRpdmUgZG9tYWluLg0K DQo3LiAgTGlrZSBvdGhlciBjb21tdW5pY2F0aW9uIHByb3RvY29scywgYXR0YWNrcyBmcm9tIHdp dGhpbiB0aGUgbmV0d29yayBhcmUgcG9zc2libGUsIGJ1dCB0aG9zZSBhcmUgc29mdGVuIGJ5IHJl bHlpbmcgb24gdGhlIHByb2NlZHVyZXMgcHV0IGluIHBsYWNlIGJ5IG9wZXJhdG9ycyBmb3IgdGVz dGluZyBhbmQgdmFsaWRhdGluZyBub2Rlcy9mZWF0dXJlcyBiZWZvcmUgYWN0dWFsIGFjdGl2YXRp b24uIE5TSCBkb2VzIG5vdCBwcm92aWRlIGEgYnVpbHQtaW4gZmVhdHVyZSB0byBwcmV2ZW50IG1p c2JlaGF2aW5nIG5vZGVzLCBidXQgcmVjb21tZW5kcyB0byByZWx5IG9uIHRoZSBzZWN1cml0eSBm ZWF0dXJlcyBwcm92aWRlZCBieSB0aGUgdW5kZXJseWluZyB0cmFuc3BvcnQgZW5jYXBzdWxhdGlv biBzY2hlbWVzLg0KDQpMZXTigJlzIG5vdyBmb2N1cyBvbiB0aGUgdHlwaWNhbCDigJxhdHRhY2tz 4oCdIHRoYXQgY2FuIGJlIGlzc3VlZCBmcm9tIHdpdGhpbiB0aGUgbmV0d29yazoNCg0KMS4gIEEg bWlzYmVoYXZpbmcgbm9kZSByZWRpcmVjdCB0aGUgdHJhZmZpYyB0byBub24tYXV0aG9yaXplZCBu b2RlcyBvdXRzaWRlIGEgZG9tYWluOiBUaGlzIGlzIG5vdCBOU0gtc3BlY2lmaWMuDQoNCjIuICBB IG1pc2JlaGF2aW5nIFNGQy11bndhcmUgbm9kZSBhbHRlcnMgdGhlIGNvbnRlbnQgb2YgYSBwYWNr ZXQ6IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy4NCg0KMy4gIEEgbWlzYmVoYXZpbmcgU0ZDLWF3 YXJlIG5vZGUgYWx0ZXJzIHRoZSBjb250ZW50IG9mIE5TSDoNCg0KICAgICAgICAgICAgaS4gICAg IEl0IHJlbW92ZXMgdGhlIE5TSCBoZWFkZXIgZnJvbSBhbGwgcGFja2V0cyBpdCBzZWVzOiBUaGlz IHdpbGwgaW1wbHkgdGhhdCB0aGUgcGFja2V0cywgdGhlIG1pc2JlaGF2aW5nIG5vZGUgaW50ZXJj ZXB0cywgd2lsbCBiZSBmb3J3YXJkZWQgdXBzdHJlYW0gd2l0aG91dCBpbnZva2luZyB0aGUgcmVx dWlyZWQgU0ZzICh3aGljaCBtYXkgYmUgc2VlbiBhcyBhIGZlYXR1cmUsIG5vdCBhIGJ1ZyBpZiBv bmUgZGlzbGlrZXMg4oCcbWlkZGxlYm94ZXPigJ0gOikpLiBNb3JlIHNlcmlvdXNseSwgdGhlIE9B TSBOU0ggZmVhdHVyZSB3aWxsIGFsbG93IGFuIG9wZXJhdG9yIHRvIGRldGVjdCB3aGV0aGVyIE5T SCBwYWNrZXRzIGFyZSB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0aCBTRkMgaW5zdHJ1Y3Rp b25zIG9mIHRoYXQgZG9tYWluLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSB3aWxsIGhlbHAgZGV0ZWN0 aW5nIHRoZSBtaXNiZWhhdmluZyBub2RlLg0KDQogICAgICAgICAgaWkuICAgICBJdCBtb2RpZmll cyB0aGUgY29udGVudCBvZiBTUEk6IFRoaXMgd2lsbCBpbXBseSB0aGF0IHRoZXNlIHBhY2tldHMg d2lsbCBiZSBmb3J3YXJkZWQgb3ZlciBhIHdyb25nIHBhdGguIEFnYWluLCBydW5uaW5nIE9BTSBO U0ggd2lsbCBhbGxvdyB0aGUgb3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRoZXIgYSBwYWNrZXQgaXMg dHJhdmVsbGluZyBpbiBhY2NvcmRhbmNlIHdpdGggU0ZDIGluc3RydWN0aW9ucy4gUnVubmluZyB0 aGF0IGZlYXR1cmUgcmVndWxhcmx5IHdpbGwgaGVscCBpZGVudGlmeWluZyB0aGUgbWlzYmVoYXZp bmcgbm9kZSBhbmQgd2hldGhlciB0aGUgU0ZDIGNvbmZpZ3VyYXRpb24gb2YgYSBkb21haW4gaXMg YWxpZ25lZCB3aXRoIHRoZSBleHBlY3RlZCBiZWhhdmlvci4NCg0KICAgICAgICBpaWkuICAgICBJ dCBtb2RpZmllcyB0aGUgY29udGVudCBvZiBTSS9UVEw6IFRoaXMgd2lsbCBpbmNyZWFzZSB0aGUg YXV0aG9yaXplZCBtYXhpbXVtIFNGRi9TRiBob3BzLiBOb3Qgc3VyZSBpZiB0aGVyZSBpcyBhIHNl Y3VyaXR5IHByb2JsZW0gb3V0IHRoZXJlLg0KDQogICAgICAgICAgaXYuICAgICBUaGUgbWlzYmVo YXZpbmcgbm9kZSBpcyBhIGNsYXNzaWZpZXI6IFRoZSBpbXBsaWNhdGlvbnMgd2lsbCBiZSBzZXZl cmUgZnJvbSBhIHNlcnZpY2Ugc3RhbmRwb2ludC4gTlNIIHJlbGllcyBvbiBPQU0gYW5kIGNvbnRy b2wtcGxhbmUgdG8gZGV0ZWN0IHN1Y2ggY2FzZS4NCg0KICAgICAgICAgICAgdi4gICAgIFRoZSBt aXNiZWhhdmluZyBub2RlIGlzIGFuIFNGRjogRXhhbXBsZXMgb2YgbWlzYmVoYXZpb3JzIGFyZTog c3RyaXAgTlNILCBmb3J3YXJkIHRvIGEgbm9uLWF1dGhvcml6ZWQgU0YsIHJlZGlyZWN0IHRoZSB0 cmFmZmljIHRvIGEgbm9uLWF1dGhvcml6ZWQgbm9kZXMsIGV0Yy4gTGlrZSBmb3IgdGhlIGNsYXNz aWZpZXIgY2FzZSwgTlNIIHJlbGllcyBvbiBPQU0gYW5kIGNvbnRyb2wtcGxhbmUgdG8gZGV0ZWN0 IHN1Y2ggY2FzZS4NCg0KQXJlIHRoZXJlIHNwZWNpZmljIGF0dGFja3MgdGhhdCBhcmUgbm90IGxp c3RlZCBhYm92ZSBhbmQgdGhhdCBuZWVkIG1vcmUgYXR0ZW50aW9uIGZyb20gdGhlIFdHPw0KDQpU aGFuayB5b3UuDQoNCkNoZWVycywNCk1lZA0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0Kc2ZjIG1haWxpbmcgbGlzdA0Kc2ZjQGlldGYub3JnPG1haWx0 bzpzZmNAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Nm Yw0KDQoNCg0KDQoNCg== --_000_787AE7BB302AE849A7480A190F8B93300A057CECOPEXCLILMA3corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAgMDt9 DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIg MiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3Nl LTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25z b2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0 aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJn aW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZv bnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5 cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dl ZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3Jh dGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5 bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyI7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNvQWNldGF0ZQ0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IlRleHRlIGRlIGJ1bGxlcyBD YXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo4 LjBwdDsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7fQ0KcC5Nc29MaXN0UGFy YWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28t c3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowY207DQoJbWFyZ2luLXJpZ2h0OjBjbTsN CgltYXJnaW4tYm90dG9tOjBjbTsNCgltYXJnaW4tbGVmdDozNi4wcHQ7DQoJbWFyZ2luLWJvdHRv bTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQpwLm0yMTQwODEwMjMy Njc1MDUzODE0bTE2NTQ2MjkzMTU1MjkwMTA3Njltc29saXN0cGFyYWdyYXBoLCBsaS5tMjE0MDgx MDIzMjY3NTA1MzgxNG0xNjU0NjI5MzE1NTI5MDEwNzY5bXNvbGlzdHBhcmFncmFwaCwgZGl2Lm0y MTQwODEwMjMyNjc1MDUzODE0bTE2NTQ2MjkzMTU1MjkwMTA3Njltc29saXN0cGFyYWdyYXBoDQoJ e21zby1zdHlsZS1uYW1lOm1fMjE0MDgxMDIzMjY3NTA1MzgxNG0xNjU0NjI5MzE1NTI5MDEwNzY5 bXNvbGlzdHBhcmFncmFwaDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmln aHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBjbTsN Cglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJp ZiI7fQ0KcC5tMjE0MDgxMDIzMjY3NTA1MzgxNG1zb2xpc3RwYXJhZ3JhcGgsIGxpLm0yMTQwODEw MjMyNjc1MDUzODE0bXNvbGlzdHBhcmFncmFwaCwgZGl2Lm0yMTQwODEwMjMyNjc1MDUzODE0bXNv bGlzdHBhcmFncmFwaA0KCXttc28tc3R5bGUtbmFtZTptXzIxNDA4MTAyMzI2NzUwNTM4MTRtc29s aXN0cGFyYWdyYXBoOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDow Y207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGNtOw0KCWZv bnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjt9 DQpzcGFuLlByZm9ybWF0SFRNTENhcg0KCXttc28tc3R5bGUtbmFtZToiUHLDqWZvcm1hdMOpIEhU TUwgQ2FyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IlByw6lm b3JtYXTDqSBIVE1MIjsNCglmb250LWZhbWlseTpDb25zb2xhczsNCgltc28tZmFyZWFzdC1sYW5n dWFnZTpGUjt9DQpwLm0yMTQwODEwMjMyNjc1MDUzODE0bTE2NTQ2MjkzMTU1MjkwMTA3NjltLTcz NzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2 OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgsIGxpLm0yMTQwODEwMjMyNjc1MDUzODE0bTE2NTQ2Mjkz MTU1MjkwMTA3NjltLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWls LW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgsIGRpdi5tMjE0MDgxMDIzMjY3 NTA1MzgxNG0xNjU0NjI5MzE1NTI5MDEwNzY5bS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAx NDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoDQoJ e21zby1zdHlsZS1uYW1lOm1fMjE0MDgxMDIzMjY3NTA1MzgxNG0xNjU0NjI5MzE1NTI5MDEwNzY5 bS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUz ODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0K CW1hcmdpbi1yaWdodDowY207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2lu LWxlZnQ6MGNtOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBS b21hbiIsInNlcmlmIjt9DQpzcGFuLlRleHRlZGVidWxsZXNDYXINCgl7bXNvLXN0eWxlLW5hbWU6 IlRleHRlIGRlIGJ1bGxlcyBDYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5 bGUtbGluazoiVGV4dGUgZGUgYnVsbGVzIjsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1z ZXJpZiI7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjQNCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3 IjsNCgljb2xvcjpibGFjazsNCglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3Jt YWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9u dC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpF Ti1VUzt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFy Z2luOjcwLjg1cHQgNzAuODVwdCA3MC44NXB0IDcwLjg1cHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0K CXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICovDQpAbGlzdCBsMA0K CXttc28tbGlzdC1pZDo4MzQzNDQ2MTE7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxp c3QtdGVtcGxhdGUtaWRzOjU0MDE4MTMwNiA2Nzg5NTMxMSA2Nzg5NTI5NyA2Nzg5NTMwMSA2Nzg5 NTI5NyA2Nzg5NTI5OSA2Nzg5NTMwMSA2Nzg5NTI5NyA2Nzg5NTI5OSA2Nzg5NTMwMTt9DQpAbGlz dCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWwy DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0 IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5Oldpbmdk aW5nczt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250 LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0 Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxl dmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpA bGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s ZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsN Cglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6MTM2NTk4 NjU0NzsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTE0 MDcyODI1MzIgNjc4OTUzMTEgNjc4OTUzMjMgNjc4OTUzMDEgNjc4OTUyOTcgNjc4OTUyOTkgNjc4 OTUzMDEgNjc4OTUyOTcgNjc4OTUyOTkgNjc4OTUzMDE7fQ0KQGxpc3QgbDE6bGV2ZWwxDQoJe21z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotMTguMHB0O30NCkBsaXN0IGwxOmxldmVsMg0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7fQ0KQGxp c3QgbDE6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2lu Z2RpbmdzO30NCkBsaXN0IGwxOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZv bnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4w cHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMTpsZXZlbDYNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6 bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwxOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCkBsaXN0IGwxOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0 Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQp1 bA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48 eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwv eG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQg djpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hh cGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJGUiIgbGlu az0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlJlLSw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPlBsZWFzZSBzZWUgaW5saW5lLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDs7Y29sb3I6YmxhY2siPk1lZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0 O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20g MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gRXJpYyBS ZXNjb3JsYSBbbWFpbHRvOmVrckBydGZtLmNvbV0NCjxicj4NCjxiPkVudm95w6kmbmJzcDs6PC9i PiB2ZW5kcmVkaSAyMCBvY3RvYnJlIDIwMTcgMTY6NDY8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IEJP VUNBREFJUiBNb2hhbWVkIElNVC9PTE48YnI+DQo8Yj5DYyZuYnNwOzo8L2I+IFBhdWwgUXVpbm4g KHBhdWxxKTsgQWxpYSBBdGxhczsgS2F0aGxlZW4gTW9yaWFydHk7IHNmY0BpZXRmLm9yZzxicj4N CjxiPk9iamV0Jm5ic3A7OjwvYj4gUmU6IFtzZmNdIE5TSCBESVNDVVNTIFN0YXR1czxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBGcmksIE9jdCAyMCwgMjAxNyBh dCA3OjM4IEFNLCAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5j b20iIHRhcmdldD0iX2JsYW5rIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPiZndDsg d3JvdGU6PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5SZS0sPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5QbGVhc2Ugc2VlIGlubGlu ZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2si PkNoZWVycyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+TWVkPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6Ymxh Y2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERG IDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhv bWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RGUmbmJzcDs6PC9zcGFuPjwvYj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IEVyaWMgUmVzY29ybGEgW21haWx0bzo8YSBocmVmPSJt YWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJnZXQ9Il9ibGFuayI+ZWtyQHJ0Zm0uY29tPC9hPl0NCjxi cj4NCjxiPkVudm95w6kmbmJzcDs6PC9iPiB2ZW5kcmVkaSAyMCBvY3RvYnJlIDIwMTcgMTY6MjI8 YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE48YnI+DQo8Yj5D YyZuYnNwOzo8L2I+IFBhdWwgUXVpbm4gKHBhdWxxKTsgQWxpYSBBdGxhczsgS2F0aGxlZW4gTW9y aWFydHk7IDxhIGhyZWY9Im1haWx0bzpzZmNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj4NCnNm Y0BpZXRmLm9yZzwvYT48YnI+DQo8Yj5PYmpldCZuYnNwOzo8L2I+IFJlOiBbc2ZjXSBOU0ggRElT Q1VTUyBTdGF0dXM8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj5PbiBGcmksIE9jdCAyMCwgMjAxNyBhdCA3OjEyIEFNLCAmbHQ7PGEgaHJlZj0ibWFpbHRv Om1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iIHRhcmdldD0iX2JsYW5rIj5tb2hhbWVkLmJv dWNhZGFpckBvcmFuZ2UuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlJlLSw8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5UaGFuayB5b3UsIEVyaWMuDQo8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+VGhlcmUgaXMgYSBtaXN1bmRlcnN0YW5k aW5nIGhlcmUuIFRoZSBkb2N1bWVudCBkb2VzIG5vdCBjbGFpbSBEQ3MgYXJlIHNhZmUgYW5kIHNl Y3VyZSBlbnZpcm9ubWVudHMuDQogV2hhdCBpdCBzYXlzIGlzIHRoYXQgdGhlIE5TSCBzcGVjaWZp Y2F0aW9uIGlzIHNjb3BlZCB0byBiZSBkZXBsb3llZCBpbiBhIHNpbmdsZSBhZG1pbmlzdHJhdGl2 ZSBkb21haW4gd2l0aCBtZWFzdXJlcyB0bywgZS5nLiw6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Im0yMTQwODEwMjMyNjc1MDUzODE0bTE2NTQ2MjkzMTU1MjkwMTA3Njltc29saXN0 cGFyYWdyYXBoIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPi08L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Y29sb3I6YmxhY2siPiZuYnNw OyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ UHJvdGVjdCBhZ2FpbnN0IHNwb29mZWQgZGF0YTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJtMjE0MDgxMDIzMjY3NTA1MzgxNG0xNjU0NjI5MzE1NTI5MDEwNzY5bXNvbGlzdHBhcmFn cmFwaCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4tPC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJz cDsmbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkxlYWtp bmcgZGF0YSBvdXRzaWRlIGEgZG9tYWluPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Im0yMTQwODEwMjMyNjc1MDUzODE0bTE2NTQ2MjkzMTU1MjkwMTA3Njltc29saXN0cGFyYWdyYXBo Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPi08L3NwYW4+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyZu YnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+RGV0ZWN0IGFu ZCBwcmV2ZW50IGluZGVmaW5pdGUgZm9yd2FyZGluZyBsb29wPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIj5ZZXMsIGFuZCBteSBwb2ludCAoYW5kIEkgYmVsaWV2ZSBLYXRobGVlbidzKSBp cyB0aGF0IHRoaXMgaXMgbm90IGEgcmVhbGlzdGljIG9wZXJhdGluZyBtb2RlbCBnaXZlbiB0aGUg YWN0dWFsIHN0YXRlIG9mIHRoZSB3b3JsZC4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAj Q0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7 bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206NS4wcHQiPg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0ibTIxNDA4MTAyMzI2NzUwNTM4MTRtMTY1NDYyOTMxNTUy OTAxMDc2OW1zb2xpc3RwYXJhZ3JhcGgiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFj ayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAj Q0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7 bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206NS4wcHQiPg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+QSBzaW5nbGUgYWRtaW5pc3RyYXRpdmUgZG9tYWluIGlzIG5vdCBuZWNl c3NhcmlseSBhIHNlY3VyZSBvciBhIHNhZmUgb25lLiBUaGF04oCZcyBldmlkZW50LiBBdHRhY2tz DQogZnJvbSB3aXRoaW4gYW4gYWRtaW5pc3RyYXRpdmUgZG9tYWluIGFyZSBwb3NzaWJsZSB3aXRo IG9yIHdpdGhvdXQgTlNILjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+SeKAmW0gcmVpdGVyYXRpbmcgbXkgcXVlc3Rpb246IHdoYXQgc3BlY2lm aWMgYXR0YWNrcyBidWlsdC1pbi9tYW5kYXRvcnkgaW50ZWdyaXR5IG1lY2hhbmlzbXMgd2lsbA0K IHNvbHZlIGZvciB0aGUgcGFydGljdWxhciBjYXNlIG9mIE5TSD8gVGhhbmsgeW91Ljwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+VGFtcGVyaW5nIHdpdGggdGhlIHBhdGggcGFja2V0cyB0 YWtlIHRocm91Z2ggdGhlIE5GQy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBUaGFuayB5b3UuIEkg aGF2ZSB0d28gY29tbWVudHM6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0yMTQw ODEwMjMyNjc1MDUzODE0bXNvbGlzdHBhcmFncmFwaCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj4tPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcu MHB0O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6YmxhY2siPlN1Y2ggYmVoYXZpb3IgY2FuIGFsc28gYmUgZGV0ZWN0ZWQg YnkgbWVhbnMgb2YgU0ZDIE9BTSBpbiBhbiBTRkMgZG9tYWluLiBTZWUgbXkgZmlyc3QgbWVzc2Fn ZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0ibTIxNDA4MTAyMzI2NzUwNTM4MTRt c29saXN0cGFyYWdyYXBoIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPi08L3Nw YW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Y29sb3I6YmxhY2si PiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+U3VjaCBtaXNiZWhhdmluZyBub2RlIHdpbGwgYWN0IG9uIEFMTCB0aGUgdHJhZmZpYywg bm90IG9ubHkgTlNILiBUaGUgcXVlc3Rpb24gaXMgd2h5IHRoZSBOU0ggc3RhbXBlZCB0cmFmZmlj IG11c3QgYmUgcHJvdmlkZWQgd2l0aCBidWlsdC1pbiBpbnRlZ3JpdHkgZmVhdHVyZSB3aGlsZSB0 aGUNCiB0cmFmZmljIG5vdCBlbGVjdGVkIHRvIGJlIGZvcndhcmRlZCB2aWEgYSBzZXJ2aWNlIGNo YWluIHdpbGwgYmUgbGVmdCBzdWJqZWN0IHRvIHRhbXBlcmluZyBhdHRhY2tzPyZuYnNwOzwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjpibGFjayI+V291bGRu4oCZdCBiZSBjb25zaXN0ZW50IGdlbmVyYWxp emUgdGhhdCBmZWF0dXJlIChpZiBwcm92aWRlZCkgdG8gYWxsIHRyYWZmaWMgdGhhdA0KIGlzIHRy YW5zaXRpbmcgZm9yIGEgZ2l2ZW4gZG9tYWluPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIGlzc3VlIGhlcmUgaXMgYXR0YWNrcyBvbiB0aGUg bmV0d29yayBmdW5jdGlvbiBpdHNlbGYgKGUuZy4sIGJ5cGFzc2luZyBvciByZXJvdXRpbmcgdHJh ZmZpYykuDQo8c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ W01lZF0gWWVzLCBJIGdvdCB0aGF0LiBJdCBjb3JyZXNwb25kcyB0byB3aGF0IEkgaGF2ZSBkZXNj cmliZWQgZWFybGllcjoNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJ0ZXh0LWluZGVu dDotMTguMHB0O21zby1saXN0OmwxIGxldmVsMSBsZm8xIj48IVtpZiAhc3VwcG9ydExpc3RzXT48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPjEuPHNw YW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsN Cjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkEg bWlzYmVoYXZpbmcgU0ZDLWF3YXJlIG5vZGUgYWx0ZXJzIHRoZSBjb250ZW50IG9mIE5TSDo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjcyLjBwdDt0ZXh0LWluZGVudDotMTguMHB0O21zby1saXN0OmwwIGxldmVsMiBs Zm8zIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJ Z25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwv c3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkl0IHJl bW92ZXMgdGhlIE5TSCBoZWFkZXIgZnJvbSBhbGwgcGFja2V0cyBpdCBzZWVzOiBUaGlzIHdpbGwg aW1wbHkgdGhhdCB0aGUgcGFja2V0cywgdGhlIG1pc2JlaGF2aW5nIG5vZGUgaW50ZXJjZXB0cywg d2lsbCBiZSBmb3J3YXJkZWQgdXBzdHJlYW0gd2l0aG91dCBpbnZva2luZw0KIHRoZSByZXF1aXJl ZCBTRnMgKHdoaWNoIG1heSBiZSBzZWVuIGFzIGEgZmVhdHVyZSwgbm90IGEgYnVnIGlmIG9uZSBk aXNsaWtlcyDigJxtaWRkbGVib3hlc+KAnSA6KSkuIE1vcmUgc2VyaW91c2x5LCB0aGUgT0FNIE5T SCBmZWF0dXJlIHdpbGwgYWxsb3cgYW4gb3BlcmF0b3IgdG8gZGV0ZWN0IHdoZXRoZXIgTlNIIHBh Y2tldHMgYXJlIHRyYXZlbGxpbmcgaW4gYWNjb3JkYW5jZSB3aXRoIFNGQyBpbnN0cnVjdGlvbnMg b2YgdGhhdCBkb21haW4uIFJ1bm5pbmcNCiB0aGF0IGZlYXR1cmUgd2lsbCBoZWxwIGRldGVjdGlu ZyB0aGUgbWlzYmVoYXZpbmcgbm9kZS4gPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQ7dGV4dC1pbmRlbnQ6 LTE4LjBwdDttc28tbGlzdDpsMCBsZXZlbDIgbGZvMyI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3lt Ym9sIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250Ojcu MHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5JdCBtb2RpZmllcyB0aGUgY29udGVudCBvZiBTUEk6IFRo aXMgd2lsbCBpbXBseSB0aGF0IHRoZXNlIHBhY2tldHMgd2lsbCBiZSBmb3J3YXJkZWQgb3ZlciBh IHdyb25nIHBhdGguIEFnYWluLCBydW5uaW5nIE9BTSBOU0ggd2lsbCBhbGxvdyB0aGUgb3BlcmF0 b3IgdG8gZGV0ZWN0DQogd2hldGhlciBhIHBhY2tldCBpcyB0cmF2ZWxsaW5nIGluIGFjY29yZGFu Y2Ugd2l0aCBTRkMgaW5zdHJ1Y3Rpb25zLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSByZWd1bGFybHkg d2lsbCBoZWxwIGlkZW50aWZ5aW5nIHRoZSBtaXNiZWhhdmluZyBub2RlIGFuZCB3aGV0aGVyIHRo ZSBTRkMgY29uZmlndXJhdGlvbiBvZiBhIGRvbWFpbiBpcyBhbGlnbmVkIHdpdGggdGhlIGV4cGVj dGVkIGJlaGF2aW9yLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFy YWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0O3RleHQtaW5kZW50Oi0xOC4wcHQ7bXNv LWxpc3Q6bDAgbGV2ZWwyIGxmbzMiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4g c3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtU aW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+SXQgbW9kaWZpZXMgdGhlIGNvbnRlbnQgb2YgU0kvVFRMOiBUaGlzIHdpbGwg aW5jcmVhc2UgdGhlIGF1dGhvcml6ZWQgbWF4aW11bSBTRkYvU0YgaG9wcy4gTm90IHN1cmUgaWYg dGhlcmUgaXMgYSBzZWN1cml0eSBwcm9ibGVtIG91dCB0aGVyZS4NCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIu MHB0O3RleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwyIGxmbzMiPg0KPCFbaWYg IXN1cHBvcnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3Bh biBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48 L3NwYW4+PCFbZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+VGhlIG1pc2JlaGF2aW5nIG5v ZGUgaXMgYSBjbGFzc2lmaWVyOiBUaGUgaW1wbGljYXRpb25zIHdpbGwgYmUgc2V2ZXJlIGZyb20g YSBzZXJ2aWNlIHN0YW5kcG9pbnQuIE5TSCByZWxpZXMgb24gT0FNIGFuZCBjb250cm9sLXBsYW5l IHRvIGRldGVjdCBzdWNoIGNhc2UuICZuYnNwOyZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0O3Rl eHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwyIGxmbzMiPg0KPCFbaWYgIXN1cHBv cnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHls ZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+ PCFbZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+VGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMg YW4gU0ZGOiBFeGFtcGxlcyBvZiBtaXNiZWhhdmlvcnMgYXJlOiBzdHJpcCBOU0gsIGZvcndhcmQg dG8gYSBub24tYXV0aG9yaXplZCBTRiwgcmVkaXJlY3QgdGhlIHRyYWZmaWMgdG8gYSBub24tYXV0 aG9yaXplZCBub2RlcywgZXRjLg0KIExpa2UgZm9yIHRoZSBjbGFzc2lmaWVyIGNhc2UsIE5TSCBy ZWxpZXMgb24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNoIGNhc2UuICZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5EbyB5b3UgdGhpbmsgdGhhdCBjdXJyZW50IHNlY3Vy aXR5IGNvbnNpZGVyYXRpb25zIG5lZWQgY2FsbCBvdXQgdGhlc2UgaXRlbXMgZXhwbGljaXRseT8N CjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkdlbmVyYWxseSwgd2UgbG9vayB0 byBwcm90ZWN0IHRoZSB0cmFmZmljIGl0c2VsZiB2aWEgb3RoZXIgbWVjaGFuaXNtcywgcHJlZmVy YWJseSBlbmQtdG8tZW5kLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gTlNIIGRvZXMgbm90 IGludGVyZmVyZSB3aXRoIGVuZC10by1lbmQgc2VjdXJpdHkgbWVjaGFuaXNtcy4gTlNIIHdpbGwg c3VwcGx5IHNvbWUgZGF0YSBmb3Igc2VydmljZS1kZXJpdmVkIGZvcndhcmRpbmcgYW5kIHRoZW4g c3RyaXAgdGhhdCBkYXRhIGJlZm9yZQ0KIGZvcndhcmRpbmcgb3V0c2lkZSB0aGUgZG9tYWluLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pi1Fa3I8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNt IDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowY20iPg0KPGRpdj4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3Bh ZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiPi1Fa3I8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7 bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdp bi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPkNoZWVycyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+TWVkPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0 LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAj QjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkRlJm5i c3A7Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4g RXJpYw0KIFJlc2NvcmxhIFttYWlsdG86PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij48YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gbGFu Zz0iRU4tVVMiPmVrckBydGZtLmNvbTwvc3Bhbj48L2E+PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+XQ0KPGJyPg0KPGI+RW52b3nDqSZuYnNwOzo8L2I+IHZl bmRyPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5lZGkgMjAgb2N0b2JyZSAyMDE3 IDE1OjU2PGJyPg0KPGI+w4AmbmJzcDs6PC9iPiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOPGJy Pg0KPGI+Q2MmbmJzcDs6PC9iPiBQYXVsIFF1aW5uIChwYXVscSk7IEFsaWEgQXRsYXM7IEthdGhs ZWVuIE1vcmlhcnR5OyA8YSBocmVmPSJtYWlsdG86c2ZjQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFu ayI+DQpzZmNAaWV0Zi5vcmc8L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gUmU6IFtz ZmNdIE5TSCBESVNDVVNTIFN0YXR1czxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5JdCdzIGV4cGxh aW5lZCBpbiBkZXRhaWwgaW4gbXkgRElTQ1VTUzombmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mcXVvdDsxLiBUaGUgYXNzdW1wdGlvbiB0aGF0 IHRoZSBkYXRhY2VudGVyIGlzIGEgc2VjdXJlIGVudmlyb25tZW50IGlzIG5vdCBhPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPnJlYXNvbmFibGUgb25lLiBBcyBLYXRobGVl biBhbmQgQWRhbSBib3RoIG9ic2VydmVyLCBkYXRhY2VudGVyPC9zcGFuPjxvOnA+PC9vOnA+PC9w cmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij5icmVhY2hlcyBhcmUgY29tbW9uIGFuZCB0aGF0IGlzIHdoeSBw ZW9wbGUgYXJlIG1vdmluZyB0b3dhcmRzPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij5lbmNyeXB0aW9uIGluc2lkZSB0aGUgZGF0YSBjZW50ZXIuIEkgc2VlIHRoYXQgdGhp cyBkcmFmdCBoYXMgdGV4dDwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+ Y2xhaW1pbmcgdGhhdCB0aGlzIGlzIG9ubHkgdG8gYmUgZGVwbG95ZWQgaW4gc2FmZSBlbnZpcm9u bWVudHMsIGJ1dCB3ZTwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+a25v dyB0aGF0IHRlY2hub2xvZ2llcyBsaWtlIHRoaXMgZ2V0IGRlcGxveWVkIG91dHNpZGUgdGhlIGxv Y2F0aW9uczwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Zm9yIHdoaWNo IHdlIGNsYWltIHRoZXkgYXJlIHRvIGJlIGRlcGxveWVkLCBhbmQgdGhlcmUncyBub3RoaW5nIGhl cmU8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPnRvIHN0b3AgdGhhdC4g TW9yZW92ZXIsIHRoZSB3aG9sZSB0cmVuZCB0b3dhcmRzIGNsb3VkIGNvbXB1dGluZyBwdXNoZXM8 L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPnVzIGF3YXkgZnJvbSBkZXNp Z25zIGluIHdoaWNoIHlvdSBjYW4gc2FmZWx5IHRhbGsgYWJvdXQgc2luZ2xlIHNlY3VyZTwvc3Bh bj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+em9uZXMuJnF1b3Q7PC9zcGFuPjxv OnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOzxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij4tRWtyPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOzxvOnA+PC9vOnA+ PC9wcmU+DQo8cHJlPiZuYnNwOzxvOnA+PC9vOnA+PC9wcmU+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+T24gRnJpLCBPY3QgMjAsIDIwMTcgYXQgNjo1MSBBTSwgJmx0OzxhIGhy ZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIiB0YXJnZXQ9Il9ibGFuayI+ bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9w Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj5EZWFyIEVyaWMsDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFj ayI+Q2FuIHlvdSBwbGVhc2UgY2xhcmlmeSB0aGlzIHBvaW50OiDigJxSYXRoZXIgaXQncyBhYm91 dCB0aGUgbGV2ZWwgb2YgdHJ1c3QgdG8gYmUgcGxhY2VkIGluIHRoZSBuZXR3b3JraW5nDQogcGF0 aCB0aHJvdWdoIHdoaWNoIHRoYXQgZGF0YSBmbG93cy7igJ0/IDwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+U29ycnkgaWYgeW91IGhhdmUgYWxy ZWFkeSBleHBsYWluZWQgaXQgdG8gdGhlIGVkaXRvcnMsIGJ1dCBhcyBhIFdHIHBhcnRpY2lwYW50 IEkgZG9u4oCZdCBoYXZlIGFjY2Vzcw0KIHRvIGEgcmVjb3JkIG9mIHN1Y2ggZGlzY3Vzc2lvbi4g PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5U aGFuayB5b3UuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9y OmJsYWNrIj5DaGVlcnMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk1lZDwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20g NC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkRlJm5ic3A7Ojwvc3Bhbj48 L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21h JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBFcmljIFJlc2NvcmxhIFttYWlsdG86PGEg aHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmVrckBydGZtLmNvbTwv YT5dDQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gdmVuZHJlZGkgMjAgb2N0b2JyZSAyMDE3 IDE1OjQ1PGJyPg0KPGI+w4AmbmJzcDs6PC9iPiBQYXVsIFF1aW5uIChwYXVscSk8YnI+DQo8Yj5D YyZuYnNwOzo8L2I+IEFsaWEgQXRsYXM7IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IEthdGhs ZWVuIE1vcmlhcnR5OyA8YSBocmVmPSJtYWlsdG86c2ZjQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFu ayI+DQpzZmNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBSZTogW3NmY10g TlNIIERJU0NVU1MgU3RhdHVzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBGcmksIE9jdCAyMCwgMjAxNyBhdCA2OjMxIEFN LCBQYXVsIFF1aW5uIChwYXVscSkgJmx0OzxhIGhyZWY9Im1haWx0bzpwYXVscUBjaXNjby5jb20i IHRhcmdldD0iX2JsYW5rIj5wYXVscUBjaXNjby5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5IaSBBbGlhLA0KPG86 cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk9uIE9jdCAx OSwgMjAxNywgYXQgMjo0OSBQTSwgQWxpYSBBdGxhcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFrYXRs YXNAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+YWthdGxhc0BnbWFpbC5jb208L2E+Jmd0OyB3 cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5I aSBNZWQsDQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij5TaW5jZSB5b3UgZGlyZWN0ZWQgdGhpcyBhdCBtZSwgdGhlcmUgYXJlIGVmZm9ydHMgdG8gaGF2 ZSBzb21lIGRpc2N1c3Npb25zIGFuZCB1bmRlcnN0YW5kIGJldHRlciB0aGUgcGFydGljdWxhciB0 aHJlYXRzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj5DdXJyZW50bHksIHRoZXJlIGlzIG5vIHRyYW5zcG9ydCB3aXRoIGludGVncml0eSBwcm90 ZWN0aW9uIHRoYXQgaXMgZXZlbiBhIFNIT1VMRCB0byBpbXBsZW1lbnQsIG11Y2ggbGVzcyBhIE1V U1QuJm5ic3A7IFRoZXJlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPmlzIG5vIGNvbnRyb2wtcGxhbmUgZGVmaW5lZCAoYmV5b25kIHRoZSBCR1Ag d29yaykgdGhhdCBkZXNjcmliZXMgZGV0ZWN0aW5nIGlzc3Vlcy4mbmJzcDsgVGhlcmUgaXMgbm8g T0FNIGRlZmluZWQgYW5kIGFkb3B0ZWQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+YnkgdGhlIFdHIHRoYXQgZGV0ZWN0cyBvciBoYW5kbGVzIHRo ZXNlIHR5cGVzIG9mIGF0dGFja3MuIEkgc2VlIHRoZSBzdHJ1Y3R1cmUgdGhhdCB5b3UgYXJlIHBy ZXN1bWluZywgYnV0IG5vbmUgb2YgdGhlc2UgYXJlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPmF2YWlsYWJsZSBhcyBub3JtYXRpdmUgcmVmZXJl bmNlcyB0byBOU0ggdG9kYXkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk9BTSBkb2VzIG5vdCBhZGRy ZXNzIHRoZSBzZWN1cml0eSBjb25jZXJuIGFyb3VuZCBpbnRlZ3JpdHkgYW5kIGRldmljZXMuJm5i c3A7IElmIHlvdSBhbmQgdGhlIFdHIGJlbGlldmUgT0FNIGlzIHRoZSBuZXh0IOKAnHRvIGRv4oCd IGZvciB0aGUgV0csIHRoYXTigJlzIGZpbmUsIGJ1dCBpdOKAmXMgb3J0aG9nb25hbCB0byB0aGUg c2VjdXJpdHkNCiBwb2ludHMgcmFpc2VkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1i b3R0b206MTIuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SSBoYWQgcmVjb21tZW5kZWQgaGF2aW5nIGEgZm9jdXNl ZCBpbnRlcmltIG1lZXRpbmcgdG8gbWFrZSBzdXJlIHRoYXQgZXZlcnlvbmUgY29uY2VybmVkIHVu ZGVyc3Rvb2QgdGhlIGlzc3VlcyBhbmQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+d29ya2VkIHRocm91Z2ggdGhlIHRocmVhdCBhbmFseXNpcyBh bmQgcG9zc2libGUgc29sdXRpb25zIHRvZ2V0aGVyLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkxldOKAmXMg cGxlYXNlIG5vdCBjb25mbGF0ZSB0aGUgb25nb2luZyBzZWN1cml0eSBkaXNjdXNzaW9uIHdpdGgg T0FNLCBvciBvdGhlciB0b3BpY3MuJm5ic3A7IFRoZSBzZWN1cml0eSByZWFsaXR5LCBhcyB5b3Ug cG9pbnRlZCBvdXQgaW4geW91ciBlbWFpbCB0byBFcmljLCBpcyB0aGF0IHdlLCBhcyBhIGNvbW11 bml0eQ0KIGFuZCBpbmR1c3RyeSwgYWNjZXB0IGEgbGV2ZWwgb2YgdHJ1c3Qgd3J0IG5ldHdvcmsg ZGV2aWNlcy4gPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkkgZG9uJ3QgYWN0dWFs bHkgdGhpbmsgdGhhdCdzIHRoZSBwb2ludCBvZiBjb250ZW50aW9uLCBhdCBsZWFzdCBmcm9tIG15 IHBlcnNwZWN0aXZlLiBSYXRoZXIgaXQncyBhYm91dCB0aGUgbGV2ZWwgb2YgdHJ1c3QgdG8gYmUg cGxhY2VkIGluIHRoZSBuZXR3b3JraW5nIHBhdGggdGhyb3VnaCB3aGljaCB0aGF0DQogZGF0YSBm bG93cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPi1Fa3I8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5n OjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDtUaGUgb25nb2luZyBl ZGl0cyBhbmQgZGlhbG9ndWUgd2l0aCBLYXRobGVlbiBhbmQgRXJpYyBhcmUgd29ya2luZyB0aHJv dWdoIHRoZWlyIGNvbmNlcm5zLiZuYnNwOyBBbiBpbnRlcmltIHRvIHRhbGsgYWJvdXQgbmV4dCBT RkMgc3RlcHMsIHBvc3QgTlNILCBpcyBhIGRpZmZlcmVudCBtYXR0ZXIuICZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+QXQgdGhpcyBwb2ludCwgY2xlYXJseSB0aGUgbW9zdCB0aGF0IGNvdWxkIGhhcHBl biBpcyBhPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPnZpcnR1YWwgaW50ZXJpbS4mbmJzcDsgVGhlcmUgYXJlIHNvbWUgYmFja2dyb3VuZCBkaXNj dXNzaW9ucyBnb2luZyBvbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPkkgZG8gbm90IHdhbnQgdG8gYXNzdW1lIHdoYXQgbWl4dHVyZSB3 aWxsIGJlIGFjY2VwdGFibGUgdG8gaGFuZGxlIHRoZSBzZWN1cml0eSBjb25jZXJucyBleHByZXNz ZWQgYnkgS2F0aGxlZW4gYW5kIEVyaWM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+YW5kIHN1cHBvcnRlZCBieSBhIG51bWJlciBvZiBvdGhlciBB RHMuPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SSBk byBncmVhdGx5IGFwcHJlY2lhdGUgeW91ciBhdHRlbnRpb24gYW5kIGVmZm9ydHMgdG8gY2xhcmlm eSBhbmQgdHJ5IHRvIG1vdmUgdGhpcyB3b3JrIGZvcndhcmQuIEkgaGF2ZSBiZWVuIGV4cHJlc3Np bmcgY29uY2VybnM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+YWJvdXQgdGhlIHNlY3VyaXR5IGFzcGVjdHMgb2YgdGhpcyB3b3JrIHNpbmNlIFJG QyA3NjY1IHdlbnQgdGhyb3VnaCB0aGUgcHVibGljYXRpb24gcHJvY2VzcyAtIGFuZCBzdHJvbmds eSBlbmNvdXJhZ2luZyBzZXJpb3VzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPldHIGZvY3VzIHRvIHByZXZlbnQgcHJlY2lzZWx5IHdoYXQgaGFz IG5vdyBoYXBwZW5lZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPkFsaWE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+T24gVGh1LCBPY3QgMTksIDIwMTcgYXQgNDo0OSBBTSwg Jmx0OzxhIGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIiB0YXJnZXQ9 Il9ibGFuayI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij5IaSBBbGlhLA0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkNhbiB5b3UgcGxlYXNlIHNoYXJlIHdpdGgg dXMgdGhlIGN1cnJlbnQgc3RhdHVzIG9mIHRoZSBkb2N1bWVudCBhbmQgdGhlIGxpc3Qgb2YgcGVu ZGluZyBibG9ja2luZyBwb2ludHM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5JIHdl bnQgdGhyb3VnaCBhbGwgcHVibGljIGVtYWlsIGV4Y2hhbmdlcywgZXNwZWNpYWxseSB0aGUgb25l cyByZWxhdGVkIHRvIHNlY3VyaXR5LCBidXQgaXQgaXMgbm90IHRoYXQgZWFzeQ0KIHRvIHVuZGVy c3RhbmQgd2hhdCBhcmUgdGhlIHJlbWFpbmluZyBpc3N1ZXMgdGhhdCBuZWVkIGZpeGVzLjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+SW4gcGFydGljdWxhciwgaXMgdGhlcmUgYSBjb25j ZXJuIHdpdGggYXNzdW1pbmcgdGhlIGN1cnJlbnQgTlNIIHRocmVhdCBtb2RlbD88L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0yMTQwODEwMjMyNjc1 MDUzODE0bTE2NTQ2MjkzMTU1MjkwMTA3NjltLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0 MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiPg0K PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4xLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5O U0ggaXMgc2VjdXJlIGFnYWluc3QgYXR0YWNrcyBpbmR1Y2VkIGJ5IG5vZGVzIHRoYXQgaW5qZWN0 IChzcG9vZmVkKSBOU0ggYmVmb3JlIGVudGVyaW5nIGFuIFNGQy1lbmFibGVkIGRvbWFpbi4gSW5k ZWVkLCBTRkMgaW5ncmVzcyBub2RlcyBNVVNUIGRpc2NhcmQgcGFja2V0cyBjYXJyeWluZyBOU0gu PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0yMTQwODEwMjMyNjc1MDUzODE0bTE2 NTQ2MjkzMTU1MjkwMTA3NjltLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAxMjQz MWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiPg0KPHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4yLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5OU0ggaXMgc2Vj dXJlIGFnYWluc3QgYXR0YWNrcyBmcm9tIHdpdGhpbiB0aGUgU0ZDLWVuYWJsZWQgZG9tYWluIHRv IGluamVjdCBub24tYXV0aG9yaXplZCBjb250ZXh0IGhlYWRlcnMuIEZyb20gYSBzZXJ2aWNlIHBl cnNwZWN0aXZlLCB0aGUgZ3VhcmQgaXMgdGhlIENQIHdoaWNoIGlzIHJlc3BvbnNpYmxlIGZvcg0K IGluc3RydWN0aW5nIHRoZSBTRkMtYXdhcmUgbm9kZXMgYWJvdXQgdGhlIG1hbmRhdG9yeS10by1w cm9jZXNzIGFuZCBvcHRpb25hbC10by1wcm9jZXNzIGNvbnRleHQgaGVhZGVycy4gRnVydGhlcm1v cmUsIHdoYXRldmVyIHRoZSBvcmlnaW4gb2YgYSBzdXBwbGllZCBjb250ZXh0IGhlYWRlciwgdGhl IGxhc3QgU0ZGIG9mIGEgY2hhaW4gKGFuZCBlZ3Jlc3Mgbm9kZXMpIE1VU1QgcmVtb3ZlIHRoZSBO U0ggYmVmb3JlIGZvcndhcmRpbmcgdXBzdHJlYW0uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Im0yMTQwODEwMjMyNjc1MDUzODE0bTE2NTQ2MjkzMTU1MjkwMTA3NjltLTczNzA2NzUy NzI4NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3 NW1zb2xpc3RwYXJhZ3JhcGgiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4zLjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij5OU0ggaXMgc2VjdXJlIGFnYWluc3QgbGVha2luZyBwcml2YWN5 IGluZm9ybWF0aW9uIG91dHNpZGUgYW4gU0ZDIGVuYWJsZWQgZG9tYWluLiBUaGUgbGFzdCBTRkYg b2YgYSBjaGFpbiAoYW5kIGVncmVzcyBub2RlcykgTVVTVCByZW1vdmUgdGhlIE5TSCBiZWZvcmUg Zm9yd2FyZGluZyB1cHN0cmVhbS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0ibTIx NDA4MTAyMzI2NzUwNTM4MTRtMTY1NDYyOTMxNTUyOTAxMDc2OW0tNzM3MDY3NTI3Mjg1MDA3NTM3 OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBh cmFncmFwaCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjQuPC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPk5TSCBpcyBzZWN1cmUgYWdhaW5zdCBpbmRlZmluaXRlIFNGL1NGRiBsb29wcyBi eSBtZWFucyBvZiBTSSBhbmQgVFRMIGZpZWxkcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0ibTIxNDA4MTAyMzI2NzUwNTM4MTRtMTY1NDYyOTMxNTUyOTAxMDc2OW0tNzM3MDY3NTI3 Mjg1MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1 bXNvbGlzdHBhcmFncmFwaCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjUuPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPkNvbnRyb2wgcGxhbmUgc3BlY2lmaWMgdGhyZWF0cyBhcmUgb3V0 IG9mIHNjb3BlLCBidXQgdGhlIGRvY3VtZW50IGNpdGVzIEktRC5pZXRmLXNmYy1jb250cm9sLXBs YW5lIGZvciB0aGUgZXhwZWN0ZWQgYmVoYXZpb3Igd2hlbiBpbnN0cnVjdGluZyBTRkMgbm9kZXMu IEJUVywgdGhlIHNlY2RpciByZXZpZXcgb2YgdGhlDQogQ1AgcmVxdWlyZW1lbnRzIGNhbiBiZSBy ZXRyaWV2ZWQgaGVyZSAoPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mv cmV2aWV3LWlldGYtc2ZjLWNvbnRyb2wtcGxhbmUtMDItc2VjZGlyLWVhcmx5LW1lYWRvd3MtMjAx NS0xMi0xMC8iIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9yZXZpZXctaWV0Zi1zZmMtY29udHJvbC1wbGFuZS0wMi1zZWNkaXItZWFybHktbWVhZG93cy0y MDE1LTEyLTEwLzwvYT4pLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0yMTQw ODEwMjMyNjc1MDUzODE0bTE2NTQ2MjkzMTU1MjkwMTA3NjltLTczNzA2NzUyNzI4NTAwNzUzNzht NzUwMzkzMDE0MTYyMDAxMjQzMWdtYWlsLW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJh Z3JhcGgiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij42Ljwvc3Bhbj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij5OU0ggZG9lcyBub3Qgc2hhcmUgcHJpdmFjeSBkYXRhIHdpdGggbm9uLWF1dGhvcml6 ZWQgcGFydGllcy4gSW5kZWVkLCBkYXRhIGNhcnJpZWQgaW4gY29udGV4dCBoZWFkZXJzIGFyZSBk ZXJpdmVkIGZyb20gdGhlIG9yaWdpbmFsIHBhY2tldCAoZS5nLiwgc291cmNlIElQIGFkZHJlc3Mp IG9yIGFyZSBhbHJlYWR5IGtub3duDQogdG8gdGhlIG9wZXJhdG9yIChlLmcuLCBzdWJzY3JpYmVy IGlkZW50aWZpZXIsIHBvbGljeSBpZGVudGlmaWVyLCBzZXJ2aWNlIGlkZW50aWZpZXIpLiBUaGUg Y29udGV4dCBpbmZvcm1hdGlvbiBpcyBzaGFyZWQgd2l0aCBub2RlcyB0aGF0IGFyZSB3aXRoaW4g dGhlIHNhbWUgYWRtaW5pc3RyYXRpdmUgZG9tYWluLiAmbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0ibTIxNDA4MTAyMzI2NzUwNTM4MTRtMTY1NDYyOTMxNTUyOTAxMDc2OW0t NzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1Mzgw OTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjcuPC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkxpa2Ugb3RoZXIgY29tbXVuaWNhdGlvbiBwcm90 b2NvbHMsIGF0dGFja3MgZnJvbSB3aXRoaW4gdGhlIG5ldHdvcmsgYXJlIHBvc3NpYmxlLCBidXQg dGhvc2UgYXJlIHNvZnRlbiBieSByZWx5aW5nIG9uIHRoZSBwcm9jZWR1cmVzIHB1dCBpbiBwbGFj ZSBieSBvcGVyYXRvcnMgZm9yIHRlc3RpbmcgYW5kIHZhbGlkYXRpbmcNCiBub2Rlcy9mZWF0dXJl cyBiZWZvcmUgYWN0dWFsIGFjdGl2YXRpb24uIE5TSCBkb2VzIG5vdCBwcm92aWRlIGEgYnVpbHQt aW4gZmVhdHVyZSB0byBwcmV2ZW50IG1pc2JlaGF2aW5nIG5vZGVzLCBidXQgcmVjb21tZW5kcyB0 byByZWx5IG9uIHRoZSBzZWN1cml0eSBmZWF0dXJlcyBwcm92aWRlZCBieSB0aGUgdW5kZXJseWlu ZyB0cmFuc3BvcnQgZW5jYXBzdWxhdGlvbiBzY2hlbWVzLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij5MZXTigJlzIG5vdyBmb2N1cyBvbiB0aGUgdHlwaWNhbCDigJxhdHRhY2tz4oCd IHRoYXQgY2FuIGJlIGlzc3VlZCBmcm9tIHdpdGhpbiB0aGUgbmV0d29yazoNCjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtMjE0MDgxMDIzMjY3NTA1MzgxNG0xNjU0NjI5MzE1NTI5 MDEwNzY5bS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEz Njk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+MS48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZu YnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+QSBtaXNiZWhhdmluZyBub2RlIHJl ZGlyZWN0IHRoZSB0cmFmZmljIHRvIG5vbi1hdXRob3JpemVkIG5vZGVzIG91dHNpZGUgYSBkb21h aW46IFRoaXMgaXMgbm90IE5TSC1zcGVjaWZpYy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0ibTIxNDA4MTAyMzI2NzUwNTM4MTRtMTY1NDYyOTMxNTUyOTAxMDc2OW0tNzM3MDY3NTI3 Mjg1MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0xMzY5NDg1MzgwOTY5NzU4Njc1 bXNvbGlzdHBhcmFncmFwaCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjIuPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsNCjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPkEgbWlzYmVoYXZpbmcgU0ZDLXVud2FyZSBub2RlIGFsdGVycyB0 aGUgY29udGVudCBvZiBhIHBhY2tldDogVGhpcyBpcyBub3QgTlNILXNwZWNpZmljLjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtMjE0MDgxMDIzMjY3NTA1MzgxNG0xNjU0NjI5MzE1 NTI5MDEwNzY5bS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1t LTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIj4NCjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+My48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQi PiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+QSBtaXNiZWhhdmluZyBTRkMt YXdhcmUgbm9kZSBhbHRlcnMgdGhlIGNvbnRlbnQgb2YgTlNIOjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJtMjE0MDgxMDIzMjY3NTA1MzgxNG0xNjU0NjI5MzE1NTI5MDEwNzY5bS03 MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5 Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4NCjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9zcGFu PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+aS48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+SXQgcmVtb3ZlcyB0aGUgTlNIIGhlYWRlciBmcm9tIGFsbCBwYWNr ZXRzIGl0IHNlZXM6IFRoaXMgd2lsbCBpbXBseSB0aGF0IHRoZSBwYWNrZXRzLCB0aGUgbWlzYmVo YXZpbmcgbm9kZSBpbnRlcmNlcHRzLCB3aWxsIGJlIGZvcndhcmRlZCB1cHN0cmVhbSB3aXRob3V0 IGludm9raW5nIHRoZSByZXF1aXJlZCBTRnMNCiAod2hpY2ggbWF5IGJlIHNlZW4gYXMgYSBmZWF0 dXJlLCBub3QgYSBidWcgaWYgb25lIGRpc2xpa2VzIOKAnG1pZGRsZWJveGVz4oCdIDopKS4gTW9y ZSBzZXJpb3VzbHksIHRoZSBPQU0gTlNIIGZlYXR1cmUgd2lsbCBhbGxvdyBhbiBvcGVyYXRvciB0 byBkZXRlY3Qgd2hldGhlciBOU0ggcGFja2V0cyBhcmUgdHJhdmVsbGluZyBpbiBhY2NvcmRhbmNl IHdpdGggU0ZDIGluc3RydWN0aW9ucyBvZiB0aGF0IGRvbWFpbi4gUnVubmluZyB0aGF0IGZlYXR1 cmUgd2lsbA0KIGhlbHAgZGV0ZWN0aW5nIHRoZSBtaXNiZWhhdmluZyBub2RlLiA8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0ibTIxNDA4MTAyMzI2NzUwNTM4MTRtMTY1NDYyOTMxNTUy OTAxMDc2OW0tNzM3MDY3NTI3Mjg1MDA3NTM3OG03NTAzOTMwMTQxNjIwMDEyNDMxZ21haWwtbS0x MzY5NDg1MzgwOTY5NzU4Njc1bXNvbGlzdHBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0Ojcy LjBwdCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPmlpLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij5JdCBtb2RpZmllcyB0aGUgY29udGVudCBvZiBTUEk6IFRoaXMgd2ls bCBpbXBseSB0aGF0IHRoZXNlIHBhY2tldHMgd2lsbCBiZSBmb3J3YXJkZWQgb3ZlciBhIHdyb25n IHBhdGguIEFnYWluLCBydW5uaW5nIE9BTSBOU0ggd2lsbCBhbGxvdyB0aGUgb3BlcmF0b3IgdG8g ZGV0ZWN0IHdoZXRoZXIgYSBwYWNrZXQgaXMNCiB0cmF2ZWxsaW5nIGluIGFjY29yZGFuY2Ugd2l0 aCBTRkMgaW5zdHJ1Y3Rpb25zLiBSdW5uaW5nIHRoYXQgZmVhdHVyZSByZWd1bGFybHkgd2lsbCBo ZWxwIGlkZW50aWZ5aW5nIHRoZSBtaXNiZWhhdmluZyBub2RlIGFuZCB3aGV0aGVyIHRoZSBTRkMg Y29uZmlndXJhdGlvbiBvZiBhIGRvbWFpbiBpcyBhbGlnbmVkIHdpdGggdGhlIGV4cGVjdGVkIGJl aGF2aW9yLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtMjE0MDgxMDIzMjY3NTA1 MzgxNG0xNjU0NjI5MzE1NTI5MDEwNzY5bS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1MDM5MzAxNDE2 MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdyYXBoIiBzdHls ZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+aWlpLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5JdCBtb2RpZmllcyB0aGUgY29udGVudCBvZiBTSS9UVEw6 IFRoaXMgd2lsbCBpbmNyZWFzZSB0aGUgYXV0aG9yaXplZCBtYXhpbXVtIFNGRi9TRiBob3BzLiBO b3Qgc3VyZSBpZiB0aGVyZSBpcyBhIHNlY3VyaXR5IHByb2JsZW0gb3V0IHRoZXJlLg0KPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Im0yMTQwODEwMjMyNjc1MDUzODE0bTE2NTQ2Mjkz MTU1MjkwMTA3NjltLTczNzA2NzUyNzI4NTAwNzUzNzhtNzUwMzkzMDE0MTYyMDAxMjQzMWdtYWls LW0tMTM2OTQ4NTM4MDk2OTc1ODY3NW1zb2xpc3RwYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVm dDo3Mi4wcHQiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3Nw YW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5pdi48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+VGhlIG1pc2JlaGF2aW5nIG5vZGUgaXMgYSBjbGFzc2lmaWVy OiBUaGUgaW1wbGljYXRpb25zIHdpbGwgYmUgc2V2ZXJlIGZyb20gYSBzZXJ2aWNlIHN0YW5kcG9p bnQuIE5TSCByZWxpZXMgb24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRldGVjdCBzdWNoIGNh c2UuICZuYnNwOyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJtMjE0MDgx MDIzMjY3NTA1MzgxNG0xNjU0NjI5MzE1NTI5MDEwNzY5bS03MzcwNjc1MjcyODUwMDc1Mzc4bTc1 MDM5MzAxNDE2MjAwMTI0MzFnbWFpbC1tLTEzNjk0ODUzODA5Njk3NTg2NzVtc29saXN0cGFyYWdy YXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+di48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+VGhl IG1pc2JlaGF2aW5nIG5vZGUgaXMgYW4gU0ZGOiBFeGFtcGxlcyBvZiBtaXNiZWhhdmlvcnMgYXJl OiBzdHJpcCBOU0gsIGZvcndhcmQgdG8gYSBub24tYXV0aG9yaXplZCBTRiwgcmVkaXJlY3QgdGhl IHRyYWZmaWMgdG8gYSBub24tYXV0aG9yaXplZCBub2RlcywgZXRjLiBMaWtlIGZvciB0aGUgY2xh c3NpZmllcg0KIGNhc2UsIE5TSCByZWxpZXMgb24gT0FNIGFuZCBjb250cm9sLXBsYW5lIHRvIGRl dGVjdCBzdWNoIGNhc2UuICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+QXJlIHRoZXJlIHNwZWNpZmljIGF0dGFja3MgdGhh dCBhcmUgbm90IGxpc3RlZCBhYm92ZSBhbmQgdGhhdCBuZWVkIG1vcmUgYXR0ZW50aW9uIGZyb20g dGhlIFdHPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+VGhhbmsgeW91Ljwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Q2hlZXJzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5NZWQ8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+X19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX188YnI+DQpzZmMgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJl Zj0ibWFpbHRvOnNmY0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNmY0BpZXRmLm9yZzwvYT48 YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NmYyIg dGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2Zj PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_787AE7BB302AE849A7480A190F8B93300A057CECOPEXCLILMA3corp_-- From nobody Fri Oct 20 08:03:35 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE0D6134239 for ; Fri, 20 Oct 2017 08:03:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J13gN0rktNUd for ; Fri, 20 Oct 2017 08:03:31 -0700 (PDT) Received: from mail-pf0-x234.google.com (mail-pf0-x234.google.com [IPv6:2607:f8b0:400e:c00::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74277134293 for ; Fri, 20 Oct 2017 08:03:13 -0700 (PDT) Received: by mail-pf0-x234.google.com with SMTP id p87so11445794pfj.3 for ; Fri, 20 Oct 2017 08:03:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=8tc4UFj9RI9GOwRCm0nDUnrIDSWC8E7c1ci2+9wF9+Y=; b=EdZGN6B91WkbaNSI4dkv8HoCRpwK5CRVDfywMbKb3L13YMedmAlJJ8/MlCWgurJHNC kVNIbr2sMpBofKLMX1gKmP+YrUjMu/wWz8QUKg69Xx9WhNcMxGOVVXU92TUjNXVdJzGu kTrENgJrdCfesYuk+Oi0cEDsYakgkiDTKqgSBgUo2EdFU4PAj97JUNzHY0MhKKtl/2Qi oDxExUBaywmRRuEmRYjt2siZJJZOCV/VL1mlI6YOFgjqxbkGolEMTW4yyEyjS0RIMS8J z416c9y/n2L9uyseqDsgPHO9GcfSMJMM5I/2pRawd83F4nL2QKLgbwcRdzfeK62LQgeA 5O3w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=8tc4UFj9RI9GOwRCm0nDUnrIDSWC8E7c1ci2+9wF9+Y=; b=PoUQen4eL00xwArXXAp8jb7KXESMUWVBsrV8qypjnXt2tyFp9cIKqtEI8SiV/UQz6G XrPnA6Bm5FBGMwifcRURTEzOW8QRtxHs7re3s0eWUtguKzQSOF8KCyptz5V5eGZOlaVG 9sD3V14TWHAjA1zKIT++LfktGOs0DGrTg0FMZOSLsBp6MwyCdfsOy/oz1XSQJkl1xjpw Pe3dWsJgCxZzfbORQcpzD9YH6C1QO3zlXmsCX2rzlSCHA0uzChk+yc5lutVxcdIp2q3J No5yC1s85teqARs8ekPADHQzfSf7RqA6iqp3fIOBdw9e6dYmiLnWe/8Z7LvCfJDxamQP wVlw== X-Gm-Message-State: AMCzsaW9qZE61XQ98x5vdLOg2xocz3FrfFTS7bxQb7djcUhNQmSEvgB4 UMIqx+yZkGn0Oa5OTdQD0RA5dn4HYPLnD510iJE= X-Google-Smtp-Source: ABhQp+To0w92S6uP/mviSMbs5Pvrne5wzZtQEWNtgz096yE4prMm7CmYQkokU/8OS8y7ff4lWobCCljEcpN3X6eqBj8= X-Received: by 10.84.171.195 with SMTP id l61mr4357126plb.64.1508511792762; Fri, 20 Oct 2017 08:03:12 -0700 (PDT) MIME-Version: 1.0 Received: by 10.100.186.194 with HTTP; Fri, 20 Oct 2017 08:02:32 -0700 (PDT) In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A057CEC@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BA4@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057BFB@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057C92@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93300A057CEC@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: Kathleen Moriarty Date: Fri, 20 Oct 2017 11:02:32 -0400 Message-ID: To: "" Cc: Eric Rescorla , "Paul Quinn (paulq)" , Alia Atlas , "sfc@ietf.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 15:03:34 -0000 Hi, I think one of the important points to note is that adding E2E encryption doesn't make sense here. You would only have on the wire protection and not on the boxes that might be compromised. The NSH is modified at many points along the path as well, so providing integrity protection of the NSH is also a hard problem. In a separate thread, I worked through some suggestions that should appear in the next revision. They will be making the security considerations more clear on options and pit falls. There is a possibility to do path assurance (but, I'm told it's hard). Language will also be added to suggest the use of continuous audits - essentially that term means regular verification of the security controls that assure the security posture of devices. They also agreed to note the typical assumption of a zero trust model and the reliance in routing on distributed computing and therefore 'trust'. Let's see how that evolves and we're getting closer. I'd like to see routing protocols include more security, but minimally that the considerations are fully listed with mitigations. Best regards, Kathleen On Fri, Oct 20, 2017 at 10:54 AM, wrote: > Re-, > > > > Please see inline. > > > > Cheers, > > Med > > > > De : Eric Rescorla [mailto:ekr@rtfm.com] > Envoy=C3=A9 : vendredi 20 octobre 2017 16:46 > > > =C3=80 : BOUCADAIR Mohamed IMT/OLN > Cc : Paul Quinn (paulq); Alia Atlas; Kathleen Moriarty; sfc@ietf.org > Objet : Re: [sfc] NSH DISCUSS Status > > > > > > > > On Fri, Oct 20, 2017 at 7:38 AM, wrote: > > Re-, > > > > Please see inline. > > > > Cheers, > > Med > > > > De : Eric Rescorla [mailto:ekr@rtfm.com] > Envoy=C3=A9 : vendredi 20 octobre 2017 16:22 > =C3=80 : BOUCADAIR Mohamed IMT/OLN > Cc : Paul Quinn (paulq); Alia Atlas; Kathleen Moriarty; sfc@ietf.org > Objet : Re: [sfc] NSH DISCUSS Status > > > > > > > > On Fri, Oct 20, 2017 at 7:12 AM, wrote: > > Re-, > > > > Thank you, Eric. > > > > There is a misunderstanding here. The document does not claim DCs are saf= e > and secure environments. What it says is that the NSH specification is > scoped to be deployed in a single administrative domain with measures to, > e.g.,: > > - Protect against spoofed data > > - Leaking data outside a domain > > - Detect and prevent indefinite forwarding loop > > Yes, and my point (and I believe Kathleen's) is that this is not a realis= tic > operating model given the actual state of the world. > > > > A single administrative domain is not necessarily a secure or a safe one. > That=E2=80=99s evident. Attacks from within an administrative domain are = possible > with or without NSH. > > > > I=E2=80=99m reiterating my question: what specific attacks built-in/manda= tory > integrity mechanisms will solve for the particular case of NSH? Thank you= . > > > > Tampering with the path packets take through the NFC. > > [Med] Thank you. I have two comments: > > - Such behavior can also be detected by means of SFC OAM in an SFC > domain. See my first message. > > - Such misbehaving node will act on ALL the traffic, not only NSH. The > question is why the NSH stamped traffic must be provided with built-in > integrity feature while the traffic not elected to be forwarded via a > service chain will be left subject to tampering attacks? Wouldn=E2=80=99t= be > consistent generalize that feature (if provided) to all traffic that is > transiting for a given domain? > > > > The issue here is attacks on the network function itself (e.g., bypassing= or > rerouting traffic). > > [Med] Yes, I got that. It corresponds to what I have described earlier: > > > > 1. A misbehaving SFC-aware node alters the content of NSH: > > =C2=B7 It removes the NSH header from all packets it sees: This w= ill > imply that the packets, the misbehaving node intercepts, will be forwarde= d > upstream without invoking the required SFs (which may be seen as a featur= e, > not a bug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)). More serious= ly, the OAM NSH > feature will allow an operator to detect whether NSH packets are travelli= ng > in accordance with SFC instructions of that domain. Running that feature > will help detecting the misbehaving node. > > =C2=B7 It modifies the content of SPI: This will imply that these= packets > will be forwarded over a wrong path. Again, running OAM NSH will allow th= e > operator to detect whether a packet is travelling in accordance with SFC > instructions. Running that feature regularly will help identifying the > misbehaving node and whether the SFC configuration of a domain is aligned > with the expected behavior. > > =C2=B7 It modifies the content of SI/TTL: This will increase the > authorized maximum SFF/SF hops. Not sure if there is a security problem o= ut > there. > > =C2=B7 The misbehaving node is a classifier: The implications wil= l be > severe from a service standpoint. NSH relies on OAM and control-plane to > detect such case. > > =C2=B7 The misbehaving node is an SFF: Examples of misbehaviors a= re: > strip NSH, forward to a non-authorized SF, redirect the traffic to a > non-authorized nodes, etc. Like for the classifier case, NSH relies on OA= M > and control-plane to detect such case. > > > > Do you think that current security considerations need call out these ite= ms > explicitly? > > > > Generally, we look to protect the traffic itself via other mechanisms, > preferably end-to-end. > > [Med] NSH does not interfere with end-to-end security mechanisms. NSH wil= l > supply some data for service-derived forwarding and then strip that data > before forwarding outside the domain. > > > > > > -Ekr > > > > > > > > -Ekr > > > > > > Cheers, > > Med > > > > De : Eric Rescorla [mailto:ekr@rtfm.com] > Envoy=C3=A9 : vendredi 20 octobre 2017 15:56 > =C3=80 : BOUCADAIR Mohamed IMT/OLN > Cc : Paul Quinn (paulq); Alia Atlas; Kathleen Moriarty; sfc@ietf.org > > > Objet : Re: [sfc] NSH DISCUSS Status > > > > It's explained in detail in my DISCUSS: > > > > "1. The assumption that the datacenter is a secure environment is not a > > reasonable one. As Kathleen and Adam both observer, datacenter > > breaches are common and that is why people are moving towards > > encryption inside the data center. I see that this draft has text > > claiming that this is only to be deployed in safe environments, but we > > know that technologies like this get deployed outside the locations > > for which we claim they are to be deployed, and there's nothing here > > to stop that. Moreover, the whole trend towards cloud computing pushes > > us away from designs in which you can safely talk about single secure > > zones." > > > > -Ekr > > > > > > > > On Fri, Oct 20, 2017 at 6:51 AM, wrote: > > Dear Eric, > > > > Can you please clarify this point: =E2=80=9CRather it's about the level o= f trust to > be placed in the networking path through which that data flows.=E2=80=9D? > > > > Sorry if you have already explained it to the editors, but as a WG > participant I don=E2=80=99t have access to a record of such discussion. > > > > Thank you. > > > > Cheers, > > Med > > > > De : Eric Rescorla [mailto:ekr@rtfm.com] > Envoy=C3=A9 : vendredi 20 octobre 2017 15:45 > =C3=80 : Paul Quinn (paulq) > Cc : Alia Atlas; BOUCADAIR Mohamed IMT/OLN; Kathleen Moriarty; sfc@ietf.o= rg > Objet : Re: [sfc] NSH DISCUSS Status > > > > > > > > On Fri, Oct 20, 2017 at 6:31 AM, Paul Quinn (paulq) wro= te: > > Hi Alia, > > > > > > > > On Oct 19, 2017, at 2:49 PM, Alia Atlas wrote: > > > > Hi Med, > > > > Since you directed this at me, there are efforts to have some discussions > and understand better the particular threats. > > Currently, there is no transport with integrity protection that is even a > SHOULD to implement, much less a MUST. There > > is no control-plane defined (beyond the BGP work) that describes detectin= g > issues. There is no OAM defined and adopted > > by the WG that detects or handles these types of attacks. I see the > structure that you are presuming, but none of these are > > available as normative references to NSH today. > > > > > > OAM does not address the security concern around integrity and devices. = If > you and the WG believe OAM is the next =E2=80=9Cto do=E2=80=9D for the WG= , that=E2=80=99s fine, but > it=E2=80=99s orthogonal to the security points raised. > > > > > > I had recommended having a focused interim meeting to make sure that > everyone concerned understood the issues and > > worked through the threat analysis and possible solutions together. > > > > Let=E2=80=99s please not conflate the ongoing security discussion with OA= M, or other > topics. The security reality, as you pointed out in your email to Eric, = is > that we, as a community and industry, accept a level of trust wrt network > devices. > > > > I don't actually think that's the point of contention, at least from my > perspective. Rather it's about the level of trust to be placed in the > networking path through which that data flows. > > > > -Ekr > > > > > > The ongoing edits and dialogue with Kathleen and Eric are working throug= h > their concerns. An interim to talk about next SFC steps, post NSH, is a > different matter. > > > > > > > > At this point, clearly the most that could happen is a > > virtual interim. There are some background discussions going on. > > > > I do not want to assume what mixture will be acceptable to handle the > security concerns expressed by Kathleen and Eric > > and supported by a number of other ADs. > > > > I do greatly appreciate your attention and efforts to clarify and try to > move this work forward. I have been expressing concerns > > about the security aspects of this work since RFC 7665 went through the > publication process - and strongly encouraging serious > > WG focus to prevent precisely what has now happened. > > > > Regards, > > Alia > > > > > > On Thu, Oct 19, 2017 at 4:49 AM, wrote: > > Hi Alia, > > > > Can you please share with us the current status of the document and the l= ist > of pending blocking points? > > > > I went through all public email exchanges, especially the ones related to > security, but it is not that easy to understand what are the remaining > issues that need fixes. > > > > In particular, is there a concern with assuming the current NSH threat > model? > > > > 1. NSH is secure against attacks induced by nodes that inject (spoofed) = NSH > before entering an SFC-enabled domain. Indeed, SFC ingress nodes MUST > discard packets carrying NSH. > > 2. NSH is secure against attacks from within the SFC-enabled domain to > inject non-authorized context headers. From a service perspective, the gu= ard > is the CP which is responsible for instructing the SFC-aware nodes about = the > mandatory-to-process and optional-to-process context headers. Furthermore= , > whatever the origin of a supplied context header, the last SFF of a chain > (and egress nodes) MUST remove the NSH before forwarding upstream. > > 3. NSH is secure against leaking privacy information outside an SFC enab= led > domain. The last SFF of a chain (and egress nodes) MUST remove the NSH > before forwarding upstream. > > 4. NSH is secure against indefinite SF/SFF loops by means of SI and TTL > fields. > > 5. Control plane specific threats are out of scope, but the document cit= es > I-D.ietf-sfc-control-plane for the expected behavior when instructing SFC > nodes. BTW, the secdir review of the CP requirements can be retrieved her= e > (https://datatracker.ietf.org/doc/review-ietf-sfc-control-plane-02-secdir= -early-meadows-2015-12-10/). > > 6. NSH does not share privacy data with non-authorized parties. Indeed, > data carried in context headers are derived from the original packet (e.g= ., > source IP address) or are already known to the operator (e.g., subscriber > identifier, policy identifier, service identifier). The context informati= on > is shared with nodes that are within the same administrative domain. > > 7. Like other communication protocols, attacks from within the network a= re > possible, but those are soften by relying on the procedures put in place = by > operators for testing and validating nodes/features before actual > activation. NSH does not provide a built-in feature to prevent misbehavin= g > nodes, but recommends to rely on the security features provided by the > underlying transport encapsulation schemes. > > > > Let=E2=80=99s now focus on the typical =E2=80=9Cattacks=E2=80=9D that can= be issued from within the > network: > > 1. A misbehaving node redirect the traffic to non-authorized nodes outsi= de > a domain: This is not NSH-specific. > > 2. A misbehaving SFC-unware node alters the content of a packet: This is > not NSH-specific. > > 3. A misbehaving SFC-aware node alters the content of NSH: > > i. It removes the NSH header from all packets it sees: Th= is > will imply that the packets, the misbehaving node intercepts, will be > forwarded upstream without invoking the required SFs (which may be seen a= s a > feature, not a bug if one dislikes =E2=80=9Cmiddleboxes=E2=80=9D :)). Mor= e seriously, the > OAM NSH feature will allow an operator to detect whether NSH packets are > travelling in accordance with SFC instructions of that domain. Running th= at > feature will help detecting the misbehaving node. > > ii. It modifies the content of SPI: This will imply that th= ese > packets will be forwarded over a wrong path. Again, running OAM NSH will > allow the operator to detect whether a packet is travelling in accordance > with SFC instructions. Running that feature regularly will help identifyi= ng > the misbehaving node and whether the SFC configuration of a domain is > aligned with the expected behavior. > > iii. It modifies the content of SI/TTL: This will increase th= e > authorized maximum SFF/SF hops. Not sure if there is a security problem o= ut > there. > > iv. The misbehaving node is a classifier: The implications > will be severe from a service standpoint. NSH relies on OAM and > control-plane to detect such case. > > v. The misbehaving node is an SFF: Examples of misbehavio= rs > are: strip NSH, forward to a non-authorized SF, redirect the traffic to a > non-authorized nodes, etc. Like for the classifier case, NSH relies on OA= M > and control-plane to detect such case. > > > > Are there specific attacks that are not listed above and that need more > attention from the WG? > > > > Thank you. > > > > Cheers, > > Med > > > > _______________________________________________ > sfc mailing list > sfc@ietf.org > https://www.ietf.org/mailman/listinfo/sfc > > > > > > > > > > --=20 Best regards, Kathleen From nobody Fri Oct 20 12:49:28 2017 Return-Path: X-Original-To: sfc@ietf.org Delivered-To: sfc@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9548713235C; Fri, 20 Oct 2017 12:49:26 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: sfc@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.63.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150852896655.15477.7048820070760599575@ietfa.amsl.com> Date: Fri, 20 Oct 2017 12:49:26 -0700 Archived-At: Subject: [sfc] I-D Action: draft-ietf-sfc-nsh-27.txt X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 19:49:27 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Service Function Chaining WG of the IETF. Title : Network Service Header (NSH) Authors : Paul Quinn Uri Elzur Carlos Pignataro Filename : draft-ietf-sfc-nsh-27.txt Pages : 39 Date : 2017-10-20 Abstract: This document describes a Network Service Header (NSH) imposed on packets or frames to realize service function paths. The NSH also provides a mechanism for metadata exchange along the instantiated service paths. The NSH is the SFC encapsulation required to support the Service Function Chaining (SFC) architecture (defined in RFC7665). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-sfc-nsh-27 https://datatracker.ietf.org/doc/html/draft-ietf-sfc-nsh-27 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-sfc-nsh-27 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Oct 20 13:04:43 2017 Return-Path: X-Original-To: sfc@ietf.org Delivered-To: sfc@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A00D013217D; Fri, 20 Oct 2017 13:04:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Kathleen Moriarty To: "The IESG" Cc: draft-ietf-sfc-nsh@ietf.org, "Joel M. Halpern" , sfc-chairs@ietf.org, jmh@joelhalpern.com, sfc@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.63.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150852988164.15402.11945739511521466211.idtracker@ietfa.amsl.com> Date: Fri, 20 Oct 2017 13:04:41 -0700 Archived-At: Subject: [sfc] Kathleen Moriarty's Abstain on draft-ietf-sfc-nsh-27: (with COMMENT) X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 20:04:42 -0000 Kathleen Moriarty has entered the following ballot position for draft-ietf-sfc-nsh-27: Abstain When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thank you very much for the new security considerations section. The added text to fully explain the current state as well as the pitfalls of the solution is quite helpful. The work put into understanding the issues (both from the security side as well as from the architecture/solution limitations) and documenting them was substantial and I hope it helps improve future work. I do understand that the WG has hurdles to provide integrity protection, but also don't see immediate solutions. I do appreciate the text that acknowledges this problem and that offers some mitigating options. While I appreciate the changes, I'd like to see better options going forward in routing area protocols and as such, I will abstain since the security property of integrity is not addressed in this solution. From nobody Fri Oct 20 15:12:15 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1682A1342E6 for ; Fri, 20 Oct 2017 15:12:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.519 X-Spam-Level: X-Spam-Status: No, score=-14.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iesc6b8cISiJ for ; Fri, 20 Oct 2017 15:12:12 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6966B13305F for ; Fri, 20 Oct 2017 15:12:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6604; q=dns/txt; s=iport; t=1508537532; x=1509747132; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=DXv6LFmeN14k9tyMwRci2rYrXXmxlx5sHi9RkM5auTY=; b=LdCfTm298lubFntq05vurfdfHfI3n96qEx9bJ1JvFxWAiSBTyBIIkNOU 3mPlsAy07ihEiiQV4YVPEZH5wNPtmpFmoW66SmowBXl8bd6A99oJ53rjP 9Tv3r+0qHMH8HAg2jKgFNHcQ4XbFYH3v2KFqnazfIP6FEi3CP4vJYNgBi k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DMAABtdOpZ/4kNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9wgVInB4Nzih+PQJJwhUEQggEKhTsCGoQhPxgBAgEBAQEBAQF?= =?us-ascii?q?rKIUeBiNWEAIBCAQKMQMCAgIwFBECBA4FiTxkqxuCJ4sjAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBHYMuggeBUIISgXSBDYRJCQESAYMzL4IyBaFfApRvkx+VTQIRGQG?= =?us-ascii?q?BOAEfOIEDWHoVdgGCNoRfdogpgSSBEQEBAQ?= X-IronPort-AV: E=Sophos;i="5.43,408,1503360000"; d="scan'208,217";a="308528916" Received: from alln-core-4.cisco.com ([173.36.13.137]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Oct 2017 22:12:11 +0000 Received: from XCH-RTP-010.cisco.com (xch-rtp-010.cisco.com [64.101.220.150]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id v9KMCB0K013248 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 20 Oct 2017 22:12:11 GMT Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-010.cisco.com (64.101.220.150) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 20 Oct 2017 18:12:10 -0400 Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1320.000; Fri, 20 Oct 2017 18:12:10 -0400 From: "Carlos Pignataro (cpignata)" To: Eric Rescorla CC: "Paul Quinn (paulq)" , Kathleen Moriarty , Med Boucadair , "sfc@ietf.org" , Alia Atlas Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wAdXO4AACcpgAAAAH8cgAAAiuGAAAA/eoAAAFsMAAAARgkAAABnHgAAAHeogAAPaFaA Date: Fri, 20 Oct 2017 22:12:10 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.116.133] Content-Type: multipart/alternative; boundary="_000_D16F0D1402ED465A93AAB258573A8AFCciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 22:12:14 -0000 --_000_D16F0D1402ED465A93AAB258573A8AFCciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RXJpYywNCg0KSSBhbSBqdXN0IHRyeWluZyB0byB1bmRlcnN0YW5k4oCmDQoNCk9uIE9jdCAyMCwg MjAxNywgYXQgMTA6NTAgQU0sIEVyaWMgUmVzY29ybGEgPGVrckBydGZtLmNvbTxtYWlsdG86ZWty QHJ0Zm0uY29tPj4gd3JvdGU6DQoNCkluIGFueSBjYXNlLCBJIGRvbid0IHRoaW5rIGdvaW5nIGJh Y2sgYW5kIGZvcnRoIGluIGVtYWlsIGlzIHByb2R1Y3RpdmUgaGVyZS4gSSdtIGhhcHB5IHRvIGRv IHRoaXMgbGl2ZSBpbiBTaW5nYXBvcmUgb3Igb24gYSBwaG9uZSBjYWxsIHdoZXJlIHRoZSBvdGhl ciBwZW9wbGUgd2hvIGZpbGVkIERJU0NVU1NlcyBjYW4gYWxzbyBhdHRlbmQuDQoNCkFyZSB5b3Ug c2F5aW5nIHRoYXQgd2lsbCBub3QgcmVzcG9uZCBhbnltb3JlIG9uIHRoaXMgc3BlY2lmaWMgdGhy ZWFkIChsaWtlIHRvIGFuIGVtYWlsIHJlc3BvbnNlIEkgc2VudCBlYXJsaWVyIGFkZHJlc3NlZCB0 byB5b3UpLCBvbiBmb3JrcyBvZiB0aGlzIHRocmVhZCwgb3Igb24gdGhpcyB0b3BpYyBhdCBhbGw/ DQoNCkkgYW0gbm90IHN1cmUgd2h5IHNvIGFicnVwdGx5IHlvdSBkbyBub3QgcmVzcG9uZCB3aGls ZSBob2xkaW5nIGEgRElTQ1VTUy4NCg0KRm9yIG1lLCB0aGlzIGJhY2sgYW5kIGZvcnRoIGluIGVt YWlsIChhbHNvIHJlZmVycmVkIHRvIGFzIOKAnGNvbW11bmljYXRpb27igJ0gYW5kIOKAnGRpYWxv Z3Vl4oCdKSwgaGFzIGJlZW4gaW1tZW5zZWx5IHByb2R1Y3RpdmUuIEkgdGhhbmsgeW91IGZvciBp dC4gSSB1bmRlcnN0YW5kIGJldHRlciB5b3VyIHBvc2l0aW9uIG5vdyDigJQgYXQgbGVhc3QgYmV0 dGVyIHRoYW4gd2l0aCB0aGUgc2lsZW5jZSAoYWxzbyBrbm93biBhcyBhYnNlbmNlIG9mIGJhY2st YW5kLWZvcnRoLWluLWVtYWlsKSBvZiBiZWZvcmUuDQoNClNvLCB3b3VsZCBpdCBiZSBwb3NzaWJs ZSBmb3IgeW91IHRvIGNoZWNrIHRoZSBuZXcgdGV4dCBhbmQgc2VlIGhvdyBpdCBhZGRyZXNzZXMg eW91ciBESVNDVVNTPyBJIHRydXN0IHlvdSB3aWxsIGZpbmQgYXJlYXMgaW4gd2hpY2ggaXQgY2Fu IGJlIGltcHJvdmVkLg0KDQpBZGRpdGlvbmFsbHksIGl0IHdvdWxkIGJlIHN1cGVyIGlmIHlvdSBj b3VsZCBmdXJ0aGVyIG1ha2UgdGltZSBmb3IgYSBwaG9uZS92aWRlbyBjb252ZXJzYXRpb24gdGhp cyBjb21pbmcgd2VlayEgVGhhbmtzIGluIGFkdmFuY2UgZm9yIHRoYXQgc3VnZ2VzdGlvbiENCg0K QnV0IHJlYWxseSwgaWYgeW91IGNvdWxkIGFydGljdWxhdGUgaW4gd3JpdGluZyBob3cgdGhlIG5l dyBzZWN0aW9uIGZpdHMgd2hlbiB5b3UgdHJ5IGl0IG9uIGZvciBzaXplLCBpdCB3b3VsZCBiZSBv ZiBncmVhdCBoZWxwLg0KDQpCZXN0LA0KDQrigJQNCkNhcmxvcyBQaWduYXRhcm8sIGNhcmxvc0Bj aXNjby5jb208bWFpbHRvOmNhcmxvc0BjaXNjby5jb20+DQoNCuKAnFNvbWV0aW1lcyBJIHVzZSBi aWcgd29yZHMgdGhhdCBJIGRvIG5vdCBmdWxseSB1bmRlcnN0YW5kLCB0byBtYWtlIG15c2VsZiBz b3VuZCBtb3JlIHBob3Rvc3ludGhlc2lzLiINCg0K --_000_D16F0D1402ED465A93AAB258573A8AFCciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KRXJpYywNCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkkgYW0ganVzdCB0cnlpbmcgdG8g dW5kZXJzdGFuZOKApiZuYnNwOzxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPGRpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iIj5PbiBPY3QgMjAsIDIwMTcsIGF0IDEwOjUwIEFNLCBFcmljIFJlc2NvcmxhICZsdDs8YSBo cmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiBjbGFzcz0iIj5la3JAcnRmbS5jb208L2E+Jmd0OyB3 cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiIGNsYXNzPSIiPg0KSW4gYW55IGNhc2UsIEkgZG9uJ3QgdGhpbmsgZ29pbmcgYmFjayBhbmQg Zm9ydGggaW4gZW1haWwgaXMgcHJvZHVjdGl2ZSBoZXJlLiBJJ20gaGFwcHkgdG8gZG8gdGhpcyBs aXZlIGluIFNpbmdhcG9yZSBvciBvbiBhIHBob25lIGNhbGwgd2hlcmUgdGhlIG90aGVyIHBlb3Bs ZSB3aG8gZmlsZWQgRElTQ1VTU2VzIGNhbiBhbHNvIGF0dGVuZC48L2Rpdj4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K QXJlIHlvdSBzYXlpbmcgdGhhdCB3aWxsIG5vdCByZXNwb25kIGFueW1vcmUgb24gdGhpcyBzcGVj aWZpYyB0aHJlYWQgKGxpa2UgdG8gYW4gZW1haWwgcmVzcG9uc2UgSSBzZW50IGVhcmxpZXIgYWRk cmVzc2VkIHRvIHlvdSksIG9uIGZvcmtzIG9mIHRoaXMgdGhyZWFkLCBvciBvbiB0aGlzIHRvcGlj IGF0IGFsbD88L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPkkgYW0gbm90IHN1cmUgd2h5IHNvIGFicnVwdGx5IHlvdSBkbyBub3QgcmVzcG9u ZCB3aGlsZSBob2xkaW5nIGEgRElTQ1VTUy48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkZvciBtZSwgdGhpcyBiYWNrIGFuZCBmb3J0aCBp biBlbWFpbCAoYWxzbyByZWZlcnJlZCB0byBhcyDigJxjb21tdW5pY2F0aW9u4oCdIGFuZCDigJxk aWFsb2d1ZeKAnSksIGhhcyBiZWVuIGltbWVuc2VseSBwcm9kdWN0aXZlLiBJIHRoYW5rIHlvdSBm b3IgaXQuIEkgdW5kZXJzdGFuZCBiZXR0ZXIgeW91ciBwb3NpdGlvbiBub3cg4oCUIGF0IGxlYXN0 IGJldHRlciB0aGFuIHdpdGggdGhlIHNpbGVuY2UgKGFsc28ga25vd24gYXMgYWJzZW5jZQ0KIG9m IGJhY2stYW5kLWZvcnRoLWluLWVtYWlsKSBvZiBiZWZvcmUuPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5Tbywgd291bGQgaXQgYmUgcG9z c2libGUgZm9yIHlvdSB0byBjaGVjayB0aGUgbmV3IHRleHQgYW5kIHNlZSBob3cgaXQgYWRkcmVz c2VzIHlvdXIgRElTQ1VTUz8gSSB0cnVzdCB5b3Ugd2lsbCBmaW5kIGFyZWFzIGluIHdoaWNoIGl0 IGNhbiBiZSBpbXByb3ZlZC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPkFkZGl0aW9uYWxseSwgaXQgd291bGQgYmUgc3VwZXIgaWYgeW91 IGNvdWxkIGZ1cnRoZXIgbWFrZSB0aW1lIGZvciBhIHBob25lL3ZpZGVvIGNvbnZlcnNhdGlvbiB0 aGlzIGNvbWluZyB3ZWVrISBUaGFua3MgaW4gYWR2YW5jZSBmb3IgdGhhdCBzdWdnZXN0aW9uITwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ QnV0IHJlYWxseSwgaWYgeW91IGNvdWxkIGFydGljdWxhdGUgaW4gd3JpdGluZyBob3cgdGhlIG5l dyBzZWN0aW9uIGZpdHMgd2hlbiB5b3UgdHJ5IGl0IG9uIGZvciBzaXplLCBpdCB3b3VsZCBiZSBv ZiBncmVhdCBoZWxwLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+QmVzdCw8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtp dC1saW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0K4oCUPGJyIGNsYXNz PSIiPg0KQ2FybG9zIFBpZ25hdGFybywmbmJzcDs8YSBocmVmPSJtYWlsdG86Y2FybG9zQGNpc2Nv LmNvbSIgY2xhc3M9IiI+Y2FybG9zQGNpc2NvLmNvbTwvYT48YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQo8aSBjbGFzcz0iIj7igJxTb21ldGltZXMgSSB1c2UgYmlnIHdvcmRzIHRoYXQgSSBk byBub3QgZnVsbHkgdW5kZXJzdGFuZCwgdG8gbWFrZSBteXNlbGYgc291bmQgbW9yZSBwaG90b3N5 bnRoZXNpcy4mcXVvdDs8L2k+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxpIGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvaT48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_D16F0D1402ED465A93AAB258573A8AFCciscocom_-- From nobody Fri Oct 20 15:19:38 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B321E1329B5 for ; Fri, 20 Oct 2017 15:19:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HRIwjEl4PG-F for ; Fri, 20 Oct 2017 15:19:29 -0700 (PDT) Received: from mail-yw0-x236.google.com (mail-yw0-x236.google.com [IPv6:2607:f8b0:4002:c05::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E8681321B6 for ; Fri, 20 Oct 2017 15:19:29 -0700 (PDT) Received: by mail-yw0-x236.google.com with SMTP id z195so1158708ywz.6 for ; Fri, 20 Oct 2017 15:19:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=a7FI0Nkwv35qzqsbDrGE0lvjBx3NzzFnCAXEFJSskVo=; b=r59JYEELrrGkvP9QP9464oSugzNcA44Q2WzKvx+h3SYeYJ5dwEO9yUBQIpIDV+BWLk 3ag65UNg72IDhTEyxrZxrdvYeXfRF57a3Hm4pAq8RlKM5LP/uAo0TWUwqEjN8s0+Wk6T 38iOccNS6Dw3HXmdRZQVVlylHggglAEU/3ADHGpcdOd1FsReH0mQK7Yo2sA5ccnIvUCZ 0zb4vTKXJGBziPuc2eIrBGQanduREJdLw0ITHbvUZ9XhQ2L1yNoEKKiE7eK00qi7LtnS 3TjKn5oCh2SvQZ0/7hPrG6Wc06eGHvkJfDkFXfC5R5StvcrBnfEHIy/+lcjuQwCpYl+f t71A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=a7FI0Nkwv35qzqsbDrGE0lvjBx3NzzFnCAXEFJSskVo=; b=dzZpWDIwapmc3Cw/vpTvMFcaOvKKb9AcjEkxXMsoJmvUhIzFt3ZGG7b1JUnK71um1K TCQ50b6ib+1UUzUIjHYG2PXA8xxWl1OavJ1Vv2d93r8lJ6I78kmyN6zogw/Ugnxui9kQ RmqzcjHfVzjMCaQCLrl32aBgqJxhgaeukK/sqnr4jN//AQdii0HSSzvq2uBbP5jPyy6V J+D/DHWAhOeebMhbGvhKAs+aUsyweCoym6v/FhARp9viJdjPNbS/PjVD5ijOynxoJYEw IljoiSrS14W+/Fr48dkhSe0MqjqBv634jbbppwmDW58t6AsStYalepuG7Y8GWs2IDyaA IusQ== X-Gm-Message-State: AMCzsaUYxPQW4Jyllkm9RGwQ5UyEt6/YLtVXZ1f3GrGJJ/o6Gx2KJOWY lCINVjSThYcOtrpmlPrddrqouXB10u70VB8BaeFSxw== X-Google-Smtp-Source: ABhQp+SBPJo+G1s+w3PLmJ7EGpSQkko5PD8xtgMykRyltexrZaEFgnHYOGUgjKS0pye7kGyNy22+ZN5VZOL8hEPITt4= X-Received: by 10.37.83.66 with SMTP id h63mr3984321ybb.397.1508537968712; Fri, 20 Oct 2017 15:19:28 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Fri, 20 Oct 2017 15:18:48 -0700 (PDT) In-Reply-To: References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> From: Eric Rescorla Date: Fri, 20 Oct 2017 15:18:48 -0700 Message-ID: To: "Carlos Pignataro (cpignata)" , Catherine Groswird Cc: "Paul Quinn (paulq)" , Kathleen Moriarty , Med Boucadair , "sfc@ietf.org" , Alia Atlas Content-Type: multipart/alternative; boundary="001a113e688ec163b4055c01ddac" Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2017 22:19:35 -0000 --001a113e688ec163b4055c01ddac Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Oct 20, 2017 at 3:12 PM, Carlos Pignataro (cpignata) < cpignata@cisco.com> wrote: > Eric, > > I am just trying to understand=E2=80=A6 > > On Oct 20, 2017, at 10:50 AM, Eric Rescorla wrote: > > In any case, I don't think going back and forth in email is productive > here. I'm happy to do this live in Singapore or on a phone call where the > other people who filed DISCUSSes can also attend. > > > Are you saying that will not respond anymore on this specific thread (lik= e > to an email response I sent earlier addressed to you), on forks of this > thread, or on this topic at all? > I'm saying I'm not finding this productive and we should do it live. I've CCed my EA, Cate, who can help us find a time next week. -Ekr > I am not sure why so abruptly you do not respond while holding a DISCUSS. > > For me, this back and forth in email (also referred to as =E2=80=9Ccommun= ication=E2=80=9D > and =E2=80=9Cdialogue=E2=80=9D), has been immensely productive. I thank y= ou for it. I > understand better your position now =E2=80=94 at least better than with t= he silence > (also known as absence of back-and-forth-in-email) of before. > > So, would it be possible for you to check the new text and see how it > addresses your DISCUSS? I trust you will find areas in which it can be > improved. > > Additionally, it would be super if you could further make time for a > phone/video conversation this coming week! Thanks in advance for that > suggestion! > > But really, if you could articulate in writing how the new section fits > when you try it on for size, it would be of great help. > > Best, > > =E2=80=94 > Carlos Pignataro, carlos@cisco.com > > *=E2=80=9CSometimes I use big words that I do not fully understand, to ma= ke myself > sound more photosynthesis."* > > --001a113e688ec163b4055c01ddac Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Fri, Oct 20, 2017 at 3:12 PM, Carlos Pignataro (cpignata) <cpigna= ta@cisco.com> wrote:
Eric,

I am just trying to understand=E2=80=A6=C2=A0

On Oct 20, 2017, at 10:50 AM, Eric Rescorla <ekr@rtfm.com> wrote:

In any case, I don't think going back and forth in email is productive = here. I'm happy to do this live in Singapore or on a phone call where t= he other people who filed DISCUSSes can also attend.

 Are you saying that will not respond anymore on this specific thread (like = to an email response I sent earlier addressed to you), on forks of this thr= ead, or on this topic at all?

=
I'm saying I'm not finding this productive and we should do it= live. I've CCed my EA, Cate, who can help us find a time next week.

-Ekr
=C2=A0
I am not sure why so abruptly you do not respond while holding a DISCU= SS.

For me, this back and forth in email (also referred to as =E2=80=9Ccom= munication=E2=80=9D and =E2=80=9Cdialogue=E2=80=9D), has been immensely pro= ductive. I thank you for it. I understand better your position now =E2=80= =94 at least better than with the silence (also known as absence of back-and-forth-in-email) of before.

So, would it be possible for you to check the new text and see how it = addresses your DISCUSS? I trust you will find areas in which it can be impr= oved.

Additionally, it would be super if you could further make time for a p= hone/video conversation this coming week! Thanks in advance for that sugges= tion!

But really, if you could articulate in writing how the new section fit= s when you try it on for size, it would be of great help.

Best,

=E2=80=94
Carlos Pignataro,=C2=A0carlos@cisco.com

=E2=80=9CSometimes I use big words that I do not fully understand, to ma= ke myself sound more photosynthesis."


--001a113e688ec163b4055c01ddac-- From nobody Fri Oct 20 17:31:00 2017 Return-Path: X-Original-To: sfc@ietf.org Delivered-To: sfc@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 421291344C2; Fri, 20 Oct 2017 17:24:29 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: sfc@ietf.org, akatlas@gmail.com X-Test-IDTracker: no X-IETF-IDTracker: 6.63.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150854546926.20809.12556748739562902982.idtracker@ietfa.amsl.com> Date: Fri, 20 Oct 2017 17:24:29 -0700 Archived-At: Subject: [sfc] sfc - Requested session has been scheduled for IETF 100 X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Oct 2017 00:24:29 -0000 Dear Jim Guichard, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. sfc Session 1 (2:00:00) Tuesday, Morning Session I 0930-1200 Room Name: Padang size: 300 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Service Function Chaining Area Name: Routing Area Session Requester: Jim Guichard Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 150 Conflicts to Avoid: First Priority: bess idr i2nsf ippm mpls nvo3 rtgwg spring People who must be present: Joel M. Halpern Jim Guichard Alia Atlas Resources Requested: Special Requests: --------------------------------------------------------- From nobody Fri Oct 27 10:38:52 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED20C13915C for ; Fri, 27 Oct 2017 10:38:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ILxJsKlg8AAZ for ; Fri, 27 Oct 2017 10:38:48 -0700 (PDT) Received: from asmtp2.iomartmail.com (asmtp2.iomartmail.com [62.128.201.249]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E95D8139478 for ; Fri, 27 Oct 2017 10:38:47 -0700 (PDT) Received: from asmtp2.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp2.iomartmail.com (8.13.8/8.13.8) with ESMTP id v9RHcjUQ028253 for ; Fri, 27 Oct 2017 18:38:45 +0100 Received: from 950129200 (105.76.115.87.dyn.plus.net [87.115.76.105]) (authenticated bits=0) by asmtp2.iomartmail.com (8.13.8/8.13.8) with ESMTP id v9RHciWb028244 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Fri, 27 Oct 2017 18:38:45 +0100 Reply-To: From: "Adrian Farrel" To: Date: Fri, 27 Oct 2017 18:38:38 +0100 Message-ID: <002d01d34f4a$6d0ba410$4722ec30$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdNPSmJuF7/Qt2XcRvuTqyTB81rwmw== Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.1.0.1062-23422.002 X-TM-AS-Result: No--17.370-10.0-31-10 X-imss-scan-details: No--17.370-10.0-31-10 X-TMASE-MatchedRID: CjCvKeSuT46uyr/sGF0bILu9iqQJLR0vnJ4I+NS+sw4QkqtjmHrU4Q1U 4SKH6t6vu4DJu5fhM0iGK8iXg/zqdQZeiTtfFXQ5SEQN/D/3cG5u/Xr6CKXiN9UykPK1RFAo0TY N4q6hXjD5+DKUoFyipdZ64ZkTjUHFZtaV6oGFpg7pnOP6QxEGtrd2noO4P7rALraGNlLRahhL1T uxHEKnWyZi6irtsqnZIXJzPKgnRGr3gr9T3KhP3gizXxlOHX34lnrMq7Sriu0L/50zj0KL7NCEm yQUqAjDxV8FErGe3RXInBeseqdTkqLCTO1UKypvBEfU2vugRF27atxTbKDEIIFN4EqoFGbyQptl y3MDgQ8bEspLaPr7vCqFp1Ty1ywBmuFF+57DxF4dxBAG5/hkW/ioIsi7Sa0gXcrx57pzoqMsgdk HScxUMbKdSEPa2dISKzovdsVk88F/joQtSekNLOqq/TX+iM8TUVruDsLy3YSbKItl61J/ycnjLT A/UDoApPKClyoUSzyNo+PRbWqfRJBlLa6MK1y4 Archived-At: Subject: [sfc] New version of draft-farrel-sfc-convent-03.txt X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2017 17:38:51 -0000 Hi WG, You may recall this draft: it introduces the "None" value for the NSH "Next Protocol" field. With this revision we have cleaned up the text a little and reduced section 4 ("Backward Compatibility") to remove the text/discussion that was moved into draft-ietf-sfc-nsh. At this point we need to ask: does the WG think that the idea of "Next Protocol" = "None" is something we should pursue? If there is general support for the idea, is this document the right way to go? And if yes to both questions: would the chairs like to consider adopting this as a WG draft so we can move it forward with consensus? We're not asking to present this work in Singapore (although we would be happy to do so if asked). The draft is very simple and doesn't need a marketing pitch. Cheers, Adrian > -----Original Message----- > From: I-D-Announce [mailto:i-d-announce-bounces@ietf.org] On Behalf Of > internet-drafts@ietf.org > Sent: 27 October 2017 18:23 > To: i-d-announce@ietf.org > Subject: I-D Action: draft-farrel-sfc-convent-03.txt > > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > > > Title : Operating the Network Service Header (NSH) with Next Protocol > "None" > Authors : Adrian Farrel > John Drake > Filename : draft-farrel-sfc-convent-03.txt > Pages : 10 > Date : 2017-10-27 > > Abstract: > This document describes the use of the Network Service Header (NSH) > in a Service Function Chaining (SFC) enabled network with no payload > data and carrying only metadata. This is achieved by defining a new > NSH "Next Protocol" type value of "None". > > This document illustrates some of the functions that may be achieved > or enhanced by this mechanism, but it does not provide an exhaustive > list of use cases, nor is it intended to be definitive about the > functions it describes. It is expected that other documents will > describe specific use cases in more detail and will define the > protocol mechanics for each use case. > > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-farrel-sfc-convent/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-farrel-sfc-convent-03 > https://datatracker.ietf.org/doc/html/draft-farrel-sfc-convent-03 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-farrel-sfc-convent-03 > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt From nobody Mon Oct 30 06:04:48 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47DB813F89F for ; Mon, 30 Oct 2017 06:04:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.081 X-Spam-Level: X-Spam-Status: No, score=0.081 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r_Dc6jWQzMep for ; Mon, 30 Oct 2017 06:04:37 -0700 (PDT) Received: from asmtp5.iomartmail.com (asmtp5.iomartmail.com [62.128.201.176]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C65EF13F89B for ; Mon, 30 Oct 2017 06:04:36 -0700 (PDT) Received: from asmtp5.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp5.iomartmail.com (8.13.8/8.13.8) with ESMTP id v9UD4Xrt016832 for ; Mon, 30 Oct 2017 13:04:34 GMT Received: from 950129200 (105.76.115.87.dyn.plus.net [87.115.76.105]) (authenticated bits=0) by asmtp5.iomartmail.com (8.13.8/8.13.8) with ESMTP id v9UD4Wuh016819 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 30 Oct 2017 13:04:33 GMT Reply-To: From: "Adrian Farrel" To: Date: Mon, 30 Oct 2017 13:04:32 -0000 Message-ID: <02c901d3517f$a18598e0$e490caa0$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdNRffXCY1zYpZu4RSWKSxDfDBrTLw== Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.1.0.1062-23426.006 X-TM-AS-Result: No--1.889-10.0-31-10 X-imss-scan-details: No--1.889-10.0-31-10 X-TMASE-MatchedRID: 6pbNFWS8cDslHrWFxb39OFVN8laWo90M+KgiyLtJrSApBT+/Hcb+0WeM ZiYJGeMB+fgylKBcoqWOgnQZW2/0vRgHZ8655DOPOX/V8P8ail1bCjvvWZW+SUf4Jcwf9/jZUEh Wy9W70AEnRE+fI6etknzZEvZte3QUMySOhdRH/m+CI/Ukngy23TahQ6ojG7mpFzbqy4FuxGdrMu zvUmJWYCYNB5jrF2LHXT64q8BiiEoHokVF9JPktU3+9BzFCkVzNAW83zYDw/v1OlCIPxKfizngM RAgrdeEyfkWaeG5p9A= Archived-At: Subject: [sfc] New revision draft-farrel-mpls-sfc X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Oct 2017 13:04:38 -0000 Hi, We have a new revision of "An MPLS-Based Forwarding Plane for Service Function Chaining" https://datatracker.ietf.org/doc/draft-farrel-mpls-sfc/ We know that there is a range of opinions about this work, so we would be happy to talk about it in Singapore if there is space on the agenda. Thanks, Adrian From nobody Mon Oct 30 16:21:34 2017 Return-Path: X-Original-To: sfc@ietfa.amsl.com Delivered-To: sfc@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CF9CC918 for ; Mon, 30 Oct 2017 16:21:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.299 X-Spam-Level: X-Spam-Status: No, score=-4.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=f5.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OohI1pJ5tIJU for ; Mon, 30 Oct 2017 16:21:30 -0700 (PDT) Received: from mail13.f5.com (mail13.f5.com [104.219.105.14]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5DF0213FBF8 for ; Mon, 30 Oct 2017 16:21:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=f5.com; i=@f5.com; q=dns/txt; s=f5; t=1509405691; x=1540941691; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=EXQ9NwPcda/7s2Xgz7tbePCht//+ITK7Nd6FELpdLo4=; b=QYahVLjYaHf4Q6SKVMIxCW9vHTvYLSVqerUWTI5hbNfkUc6WLQLSsXIg J0bK7yGM765Ljv9vVkNcvSceZ8AZP5Zde+JPgMtUKQKmzhSv+UNYbablP R2EgGuO6Brgl//UTdtWSPo81XFp0j5NVCjnGBb2nLnHJX7NCwKO6/Pg3i KuFZ11GqzhK7Wvt/rR5XTJa6Wh+Vh+UNHQ+TYXZLsLaazRBV7cePstlL/ Le299k4P4yZdERM4rh3AJ3Qb6Fx4ndyJqfe7bWr7WMzLse3vadAZTJ6yU 0jbQ+thgsBV7MKPU8adOuRB/JVfWdtdr258I+99Ndw//9MvJpQMZzPiS0 g==; X-IronPort-AV: E=McAfee;i="5900,7806,8700"; a="26428171" X-IronPort-AV: E=Sophos; i="5.44,321,1505804400"; d="scan'208,217"; a="26428171" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from sv5ccpems04.olympus.f5net.com (HELO owa.f5.com) ([172.23.209.15]) by mail.f5net.com with ESMTP/TLS/AES256-GCM-SHA384; 30 Oct 2017 16:21:29 -0700 Received: from SV5CCPEMS01.olympus.F5Net.com (172.23.209.12) by SV5CCPEMS04.olympus.F5Net.com (172.23.209.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Mon, 30 Oct 2017 16:21:28 -0700 Received: from SV5CCPEMS01.olympus.F5Net.com ([fe80::8cea:a209:8eb7:c2ab]) by SV5CCPEMS01.olympus.F5Net.com ([fe80::8cea:a209:8eb7:c2ab%19]) with mapi id 15.01.1261.035; Mon, 30 Oct 2017 16:21:28 -0700 From: Sumandra Majee To: "sfc@ietf.org" CC: Med Boucadair , Kathleen Moriarty , "Paul Quinn (paulq)" , "sfc@ietf.org" , Alia Atlas , Eric Rescorla , "Carlos Pignataro (cpignata)" Thread-Topic: [sfc] NSH DISCUSS Status Thread-Index: AdNItx9sdKdz8ojQTU2+zkDzM6Au0wAjpkEAACcpgQAAAH8bgAAAjF6AAAA9/oAAAFyJAAAARIsAAABnHgAAAHeogAAPaH0AAAA7TgAB+RpRAA== Date: Mon, 30 Oct 2017 23:21:28 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93300A056E39@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <4A8DB6C5-28CC-41D6-9163-611A58BEC383@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.27.0.171010 x-originating-ip: [172.23.251.194] Content-Type: multipart/alternative; boundary="_000_DD81570A61FD4E04AB2F8EFE11F70080f5com_" MIME-Version: 1.0 Archived-At: Subject: Re: [sfc] NSH DISCUSS Status X-BeenThere: sfc@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Network Service Chaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Oct 2017 23:21:32 -0000 --_000_DD81570A61FD4E04AB2F8EFE11F70080f5com_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8sDQoNCkp1bXBpbmcgaW50byB0aGlzIGEgYml0IGxhdGUgaW50byB0aGlzIGRpc2N1c3Np b24gYW5kIGl0IHNlZW1zIG5vdCBtdWNoIHByb2dyZXNzIGhhcyBiZWVuIG1hZGUuDQoNCkkgaGF2 ZSBzb21lIHF1ZXN0aW9ucywgb2JzZXJ2YXRpb25zIGV0Yy4NCg0KICAxLiAgVGhpcyBncm91cCBp cyBjb25jZXJuZWQgYWJvdXQgc2VjdXJpdHkgYW5kIGF1dGhlbnRpY2l0eSBvZiBOU0ggZW5jYXBz dWxhdGlvbiBvbmx5LiBJbiB0aGF0IGNhc2UgYSB0cmFuc3BvcnQgbGV2ZWwgc2VjdXJpdHkgc2hv dWxkIGJlIGFibGUgdG8gYXQgbGVhc3QgcHJvdmlkZSB0aGF0IGZ1bmN0aW9uYWxpdHksIHNvIHdo eSBpcyB0aGF0IG5vdCBhbiBvcHRpb24/DQogIDIuICBQQVRIIGFzc3VyYW5jZSBvciBpbnRlZ3Jp dHk/IEZldyB0aGluZ3MgY29tZSB0byBtaW5kLA0KICAgICAqICAgU0ZGIGd1YXJhbnRlZXMgdGhh dCBOU0gtPlNQSSBhbmQgU0kgY29tYm8gdGhhdCBpdCBwdXRzIG9uIHRoZSB3aXJlLiBEb2VzIGl0 IG1lYW4gc2lnbmluZyB0aGVzZSBpbmZv4oCmDQogICAgICogICBQYXRoIGNhbiBjaGFuZ2Ugc29t ZXdoZXJlIGluIHRoZSBncmFwaC4gTGV04oCZcyBzYXkgb25seSBhIGNsYXNzaWZpZXIgbm9kZSBj YW4gY2hhbmdlIFBhdGhJRCwgc28gZXZlcnkgY2xhc3NpZmllciBub3cgc2lnbnMgdGhlc2UgaW5m by4NClN1bWFuZHJhDQoNCkZyb206IHNmYyA8c2ZjLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFs ZiBvZiBFcmljIFJlc2NvcmxhIDxla3JAcnRmbS5jb20+DQpEYXRlOiBGcmlkYXksIE9jdG9iZXIg MjAsIDIwMTcgYXQgMzoxOSBQTQ0KVG86ICJDYXJsb3MgUGlnbmF0YXJvIChjcGlnbmF0YSkiIDxj cGlnbmF0YUBjaXNjby5jb20+LCBDYXRoZXJpbmUgR3Jvc3dpcmQgPGNhdGVAbW96aWxsYS5jb20+ DQpDYzogTWVkIEJvdWNhZGFpciA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4sIEthdGhs ZWVuIE1vcmlhcnR5IDxrYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbT4sICJQYXVsIFF1 aW5uIChwYXVscSkiIDxwYXVscUBjaXNjby5jb20+LCAic2ZjQGlldGYub3JnIiA8c2ZjQGlldGYu b3JnPiwgQWxpYSBBdGxhcyA8YWthdGxhc0BnbWFpbC5jb20+DQpTdWJqZWN0OiBSZTogW3NmY10g TlNIIERJU0NVU1MgU3RhdHVzDQoNCg0KRVhURVJOQUwgTUFJTDogc2ZjLWJvdW5jZXNAaWV0Zi5v cmcNCg0KDQpPbiBGcmksIE9jdCAyMCwgMjAxNyBhdCAzOjEyIFBNLCBDYXJsb3MgUGlnbmF0YXJv IChjcGlnbmF0YSkgPGNwaWduYXRhQGNpc2NvLmNvbTxtYWlsdG86Y3BpZ25hdGFAY2lzY28uY29t Pj4gd3JvdGU6DQpFcmljLA0KDQpJIGFtIGp1c3QgdHJ5aW5nIHRvIHVuZGVyc3RhbmTigKYNCg0K T24gT2N0IDIwLCAyMDE3LCBhdCAxMDo1MCBBTSwgRXJpYyBSZXNjb3JsYSA8ZWtyQHJ0Zm0uY29t PG1haWx0bzpla3JAcnRmbS5jb20+PiB3cm90ZToNCg0KSW4gYW55IGNhc2UsIEkgZG9uJ3QgdGhp bmsgZ29pbmcgYmFjayBhbmQgZm9ydGggaW4gZW1haWwgaXMgcHJvZHVjdGl2ZSBoZXJlLiBJJ20g aGFwcHkgdG8gZG8gdGhpcyBsaXZlIGluIFNpbmdhcG9yZSBvciBvbiBhIHBob25lIGNhbGwgd2hl cmUgdGhlIG90aGVyIHBlb3BsZSB3aG8gZmlsZWQgRElTQ1VTU2VzIGNhbiBhbHNvIGF0dGVuZC4N Cg0KQXJlIHlvdSBzYXlpbmcgdGhhdCB3aWxsIG5vdCByZXNwb25kIGFueW1vcmUgb24gdGhpcyBz cGVjaWZpYyB0aHJlYWQgKGxpa2UgdG8gYW4gZW1haWwgcmVzcG9uc2UgSSBzZW50IGVhcmxpZXIg YWRkcmVzc2VkIHRvIHlvdSksIG9uIGZvcmtzIG9mIHRoaXMgdGhyZWFkLCBvciBvbiB0aGlzIHRv cGljIGF0IGFsbD8NCg0KSSdtIHNheWluZyBJJ20gbm90IGZpbmRpbmcgdGhpcyBwcm9kdWN0aXZl IGFuZCB3ZSBzaG91bGQgZG8gaXQgbGl2ZS4gSSd2ZSBDQ2VkIG15IEVBLCBDYXRlLCB3aG8gY2Fu IGhlbHAgdXMgZmluZCBhIHRpbWUgbmV4dCB3ZWVrLg0KDQotRWtyDQoNCkkgYW0gbm90IHN1cmUg d2h5IHNvIGFicnVwdGx5IHlvdSBkbyBub3QgcmVzcG9uZCB3aGlsZSBob2xkaW5nIGEgRElTQ1VT Uy4NCg0KRm9yIG1lLCB0aGlzIGJhY2sgYW5kIGZvcnRoIGluIGVtYWlsIChhbHNvIHJlZmVycmVk IHRvIGFzIOKAnGNvbW11bmljYXRpb27igJ0gYW5kIOKAnGRpYWxvZ3Vl4oCdKSwgaGFzIGJlZW4g aW1tZW5zZWx5IHByb2R1Y3RpdmUuIEkgdGhhbmsgeW91IGZvciBpdC4gSSB1bmRlcnN0YW5kIGJl dHRlciB5b3VyIHBvc2l0aW9uIG5vdyDigJQgYXQgbGVhc3QgYmV0dGVyIHRoYW4gd2l0aCB0aGUg c2lsZW5jZSAoYWxzbyBrbm93biBhcyBhYnNlbmNlIG9mIGJhY2stYW5kLWZvcnRoLWluLWVtYWls KSBvZiBiZWZvcmUuDQoNClNvLCB3b3VsZCBpdCBiZSBwb3NzaWJsZSBmb3IgeW91IHRvIGNoZWNr IHRoZSBuZXcgdGV4dCBhbmQgc2VlIGhvdyBpdCBhZGRyZXNzZXMgeW91ciBESVNDVVNTPyBJIHRy dXN0IHlvdSB3aWxsIGZpbmQgYXJlYXMgaW4gd2hpY2ggaXQgY2FuIGJlIGltcHJvdmVkLg0KDQpB ZGRpdGlvbmFsbHksIGl0IHdvdWxkIGJlIHN1cGVyIGlmIHlvdSBjb3VsZCBmdXJ0aGVyIG1ha2Ug dGltZSBmb3IgYSBwaG9uZS92aWRlbyBjb252ZXJzYXRpb24gdGhpcyBjb21pbmcgd2VlayEgVGhh bmtzIGluIGFkdmFuY2UgZm9yIHRoYXQgc3VnZ2VzdGlvbiENCg0KQnV0IHJlYWxseSwgaWYgeW91 IGNvdWxkIGFydGljdWxhdGUgaW4gd3JpdGluZyBob3cgdGhlIG5ldyBzZWN0aW9uIGZpdHMgd2hl biB5b3UgdHJ5IGl0IG9uIGZvciBzaXplLCBpdCB3b3VsZCBiZSBvZiBncmVhdCBoZWxwLg0KDQpC ZXN0LA0KDQrigJQNCkNhcmxvcyBQaWduYXRhcm8sIGNhcmxvc0BjaXNjby5jb208bWFpbHRvOmNh cmxvc0BjaXNjby5jb20+DQoNCuKAnFNvbWV0aW1lcyBJIHVzZSBiaWcgd29yZHMgdGhhdCBJIGRv IG5vdCBmdWxseSB1bmRlcnN0YW5kLCB0byBtYWtlIG15c2VsZiBzb3VuZCBtb3JlIHBob3Rvc3lu dGhlc2lzLiINCg0KDQo= --_000_DD81570A61FD4E04AB2F8EFE11F70080f5com_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpQTWluZ0xpVTsNCglwYW5vc2UtMToyIDIgNSAwIDAgMCAwIDAgMCAwO30NCi8qIFN0eWxlIERl ZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJ e21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7 DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5 cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dl ZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3Jh dGlvbjp1bmRlcmxpbmU7fQ0KcA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xp c3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eToz NDsNCgltYXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206 MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5F bWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLm1zb0lu cw0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQN Cgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFn ZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGlu IDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0K LyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MjA3NjQ5NTk2 Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxODEyNzY2 MDAyIDY3Njk4NzExIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1 IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGV4dDoiJTFcKSI7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsN Cgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFs cGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6 LTkuMHB0O30NCkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpAbGlz dCBsMQ0KCXttc28tbGlzdC1pZDoyMDQ0MDE0NDcwOw0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0K CW1zby1saXN0LXRlbXBsYXRlLWlkczotMTk2ODAxNzQ4NCA2NzY5ODcxMSA2NzY5ODcxMyA2NzY5 ODcxNSA2NzY5ODcwMyA2NzY5ODcxMyA2NzY5ODcxNSA2NzY5ODcwMyA2NzY5ODcxMyA2NzY5ODcx NTt9DQpAbGlzdCBsMTpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93 ZXI7DQoJbXNvLWxldmVsLXRleHQ6IiUxXCkiOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0K QGxpc3QgbDE6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0K CW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWwzDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCkBs aXN0IGwxOmxldmVsNA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVs NQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFi LXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpy b21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpAbGlzdCBsMTpsZXZlbDcN Cgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDgNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA bGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdo dDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwN Cgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGJnY29s b3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2 IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGVsbG8sPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkp1bXBpbmcgaW50byB0aGlzIGEgYml0IGxhdGUgaW50byB0aGlz IGRpc2N1c3Npb24gYW5kIGl0IHNlZW1zIG5vdCBtdWNoIHByb2dyZXNzIGhhcyBiZWVuIG1hZGUu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgaGF2ZSBzb21lIHF1ZXN0aW9ucywgb2JzZXJ2YXRp b25zIGV0Yy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+PC9vOnA+ PC9wPg0KPG9sIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgc3RhcnQ9IjEiIHR5cGU9ImEiPg0KPGxp IGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0 OmwwIGxldmVsMSBsZm8yIj5UaGlzIGdyb3VwIGlzIGNvbmNlcm5lZCBhYm91dCBzZWN1cml0eSBh bmQgYXV0aGVudGljaXR5IG9mIE5TSCBlbmNhcHN1bGF0aW9uIG9ubHkuIEluIHRoYXQgY2FzZSBh IHRyYW5zcG9ydCBsZXZlbCBzZWN1cml0eSBzaG91bGQgYmUgYWJsZSB0byBhdCBsZWFzdCBwcm92 aWRlIHRoYXQgZnVuY3Rpb25hbGl0eSwgc28NCiB3aHkgaXMgdGhhdCBub3QgYW4gb3B0aW9uPzxv OnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4t bGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzIiPlBBVEggYXNzdXJhbmNlIG9yIGludGVn cml0eT8gRmV3IHRoaW5ncyBjb21lIHRvIG1pbmQsJm5ic3A7DQo8bzpwPjwvbzpwPg0KPG9sIHN0 eWxlPSJtYXJnaW4tdG9wOjBpbiIgc3RhcnQ9IjEiIHR5cGU9ImEiPg0KPGxpIGNsYXNzPSJNc29M aXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMiBs Zm8yIj5TRkYgZ3VhcmFudGVlcyB0aGF0IE5TSC0mZ3Q7U1BJIGFuZCBTSSBjb21ibyB0aGF0IGl0 IHB1dHMgb24gdGhlIHdpcmUuIERvZXMgaXQgbWVhbiBzaWduaW5nIHRoZXNlIGluZm/igKY8bzpw PjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MGluO21zby1saXN0OmwwIGxldmVsMiBsZm8yIj5QYXRoIGNhbiBjaGFuZ2Ugc29tZXdoZXJl IGluIHRoZSBncmFwaC4gTGV04oCZcyBzYXkgb25seSBhIGNsYXNzaWZpZXIgbm9kZSBjYW4gY2hh bmdlIFBhdGhJRCwgc28gZXZlcnkgY2xhc3NpZmllciBub3cgc2lnbnMgdGhlc2UgaW5mby48bzpw PjwvbzpwPjwvbGk+PC9vbD4NCjwvbGk+PC9vbD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlN1bWFu ZHJhPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAx LjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+ PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5zZmMgJmx0O3Nm Yy1ib3VuY2VzQGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgRXJpYyBSZXNjb3JsYSAmbHQ7ZWty QHJ0Zm0uY29tJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5GcmlkYXksIE9jdG9iZXIgMjAsIDIwMTcg YXQgMzoxOSBQTTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7Q2FybG9zIFBpZ25hdGFybyAoY3BpZ25h dGEpJnF1b3Q7ICZsdDtjcGlnbmF0YUBjaXNjby5jb20mZ3Q7LCBDYXRoZXJpbmUgR3Jvc3dpcmQg Jmx0O2NhdGVAbW96aWxsYS5jb20mZ3Q7PGJyPg0KPGI+Q2M6IDwvYj5NZWQgQm91Y2FkYWlyICZs dDttb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tJmd0OywgS2F0aGxlZW4gTW9yaWFydHkgJmx0 O2thdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tJmd0OywgJnF1b3Q7UGF1bCBRdWlubiAo cGF1bHEpJnF1b3Q7ICZsdDtwYXVscUBjaXNjby5jb20mZ3Q7LCAmcXVvdDtzZmNAaWV0Zi5vcmcm cXVvdDsgJmx0O3NmY0BpZXRmLm9yZyZndDssIEFsaWEgQXRsYXMgJmx0O2FrYXRsYXNAZ21haWwu Y29tJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW3NmY10gTlNIIERJU0NVU1MgU3RhdHVz PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIHN0eWxlPSJtYXJnaW4tYm90dG9t OjEyLjBwdCI+PHN0cm9uZz48c3BhbiBsYW5nPSJFTiIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RVhURVJOQUwgTUFJTDogc2ZjLWJvdW5jZXNAaWV0 Zi5vcmc8L3NwYW4+PC9zdHJvbmc+PHNwYW4gbGFuZz0iRU4iPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBGcmksIE9jdCAyMCwgMjAxNyBhdCAzOjEyIFBNLCBDYXJs b3MgUGlnbmF0YXJvIChjcGlnbmF0YSkgJmx0OzxhIGhyZWY9Im1haWx0bzpjcGlnbmF0YUBjaXNj by5jb20iIHRhcmdldD0iX2JsYW5rIj5jcGlnbmF0YUBjaXNjby5jb208L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVm dDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxl ZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ RXJpYywgPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGFt IGp1c3QgdHJ5aW5nIHRvIHVuZGVyc3RhbmTigKYmbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8Ymxv Y2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBPY3QgMjAsIDIwMTcsIGF0IDEwOjUwIEFNLCBF cmljIFJlc2NvcmxhICZsdDs8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJnZXQ9Il9i bGFuayI+ZWtyQHJ0Zm0uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5JbiBhbnkgY2FzZSwgSSBk b24ndCB0aGluayBnb2luZyBiYWNrIGFuZCBmb3J0aCBpbiBlbWFpbCBpcyBwcm9kdWN0aXZlIGhl cmUuIEknbSBoYXBweSB0byBkbyB0aGlzIGxpdmUgaW4gU2luZ2Fwb3JlIG9yIG9uIGEgcGhvbmUg Y2FsbCB3aGVyZSB0aGUgb3RoZXIgcGVvcGxlIHdobyBmaWxlZCBESVNDVVNTZXMNCiBjYW4gYWxz byBhdHRlbmQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BcmUgeW91IHNheWluZyB0aGF0 IHdpbGwgbm90IHJlc3BvbmQgYW55bW9yZSBvbiB0aGlzIHNwZWNpZmljIHRocmVhZCAobGlrZSB0 byBhbiBlbWFpbCByZXNwb25zZSBJIHNlbnQgZWFybGllciBhZGRyZXNzZWQgdG8geW91KSwgb24g Zm9ya3Mgb2YgdGhpcyB0aHJlYWQsIG9yIG9uIHRoaXMgdG9waWMgYXQgYWxsPzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+SSdtIHNheWluZyBJJ20gbm90IGZpbmRpbmcgdGhpcyBwcm9kdWN0 aXZlIGFuZCB3ZSBzaG91bGQgZG8gaXQgbGl2ZS4gSSd2ZSBDQ2VkIG15IEVBLCBDYXRlLCB3aG8g Y2FuIGhlbHAgdXMgZmluZCBhIHRpbWUgbmV4dCB3ZWVrLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tRWtyPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICND Q0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDtt YXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkkgYW0gbm90IHN1cmUgd2h5IHNvIGFicnVwdGx5IHlvdSBkbyBub3QgcmVzcG9uZCB3aGls ZSBob2xkaW5nIGEgRElTQ1VTUy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Rm9yIG1lLCB0aGlzIGJhY2sgYW5kIGZvcnRoIGluIGVtYWlsIChh bHNvIHJlZmVycmVkIHRvIGFzIOKAnGNvbW11bmljYXRpb27igJ0gYW5kIOKAnGRpYWxvZ3Vl4oCd KSwgaGFzIGJlZW4gaW1tZW5zZWx5IHByb2R1Y3RpdmUuIEkgdGhhbmsgeW91IGZvciBpdC4gSSB1 bmRlcnN0YW5kIGJldHRlciB5b3VyIHBvc2l0aW9uIG5vdyDigJQgYXQgbGVhc3QgYmV0dGVyIHRo YW4gd2l0aCB0aGUgc2lsZW5jZSAoYWxzbyBrbm93biBhcyBhYnNlbmNlDQogb2YgYmFjay1hbmQt Zm9ydGgtaW4tZW1haWwpIG9mIGJlZm9yZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U28sIHdvdWxkIGl0IGJlIHBvc3NpYmxlIGZvciB5b3Ug dG8gY2hlY2sgdGhlIG5ldyB0ZXh0IGFuZCBzZWUgaG93IGl0IGFkZHJlc3NlcyB5b3VyIERJU0NV U1M/IEkgdHJ1c3QgeW91IHdpbGwgZmluZCBhcmVhcyBpbiB3aGljaCBpdCBjYW4gYmUgaW1wcm92 ZWQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkFkZGl0aW9uYWxseSwgaXQgd291bGQgYmUgc3VwZXIgaWYgeW91IGNvdWxkIGZ1cnRoZXIgbWFr ZSB0aW1lIGZvciBhIHBob25lL3ZpZGVvIGNvbnZlcnNhdGlvbiB0aGlzIGNvbWluZyB3ZWVrISBU aGFua3MgaW4gYWR2YW5jZSBmb3IgdGhhdCBzdWdnZXN0aW9uITxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CdXQgcmVhbGx5LCBpZiB5b3UgY291 bGQgYXJ0aWN1bGF0ZSBpbiB3cml0aW5nIGhvdyB0aGUgbmV3IHNlY3Rpb24gZml0cyB3aGVuIHlv dSB0cnkgaXQgb24gZm9yIHNpemUsIGl0IHdvdWxkIGJlIG9mIGdyZWF0IGhlbHAuPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJlc3QsPG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPuKA lDxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtQTWluZ0xpVSZxdW90OyxzZXJpZiI+PGJy Pg0KPC9zcGFuPkNhcmxvcyBQaWduYXRhcm8sJm5ic3A7PGEgaHJlZj0ibWFpbHRvOmNhcmxvc0Bj aXNjby5jb20iIHRhcmdldD0iX2JsYW5rIj5jYXJsb3NAY2lzY28uY29tPC9hPjxicj4NCjxicj4N CjxpPuKAnFNvbWV0aW1lcyBJIHVzZSBiaWcgd29yZHMgdGhhdCBJIGRvIG5vdCBmdWxseSB1bmRl cnN0YW5kLCB0byBtYWtlIG15c2VsZiBzb3VuZCBtb3JlIHBob3Rvc3ludGhlc2lzLiZxdW90Ozwv aT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_DD81570A61FD4E04AB2F8EFE11F70080f5com_--