Received: by 2002:a05:6a10:f347:0:0:0:0 with SMTP id d7csp3512111pxu; Mon, 30 Nov 2020 04:58:48 -0800 (PST) X-Google-Smtp-Source: ABdhPJyoZuI2SgndAd8n5vWexbHdj1PplFSRVrUoY07wHf32qBXZDD5o9CZkcjsO1WcMMnwUITpG X-Received: by 2002:a17:906:27d1:: with SMTP id k17mr20497742ejc.325.1606741128163; Mon, 30 Nov 2020 04:58:48 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1606741128; cv=none; d=google.com; s=arc-20160816; b=d8gOnLeyQUnyyZG/kIlHGEPKanDhZ4FME6a47HPy9/mbpw/sNew5GPAe7KV0hVIbD0 +cbqz0hRjtRhPYkdswiEZxzfz81r1GidN7JBb+LGK8hFoYAfhkiXtXre/KGn3KzGQxaI 1QY6eRcsBt463cUQ4pWqSe0sz6vlXDpdNf4jKAVtqBQQNa+Ht4IMQYRwM4isdWM1vFJn 4z1AjSnpCHQouWStomNH1moVOkCmQqZRbUI9tJaAx8dFQcUk7Vp9szW5KnzxIC83Q0nY pjTmqHLwTnXCR5H9dmJpn9kGfdn8nlVTKyFhNKOz45bXShjGUPZi+ZXFmEZ5b5KF3hq5 jxuw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:mime-version:references:in-reply-to:date:cc:to :from:subject:message-id:dkim-signature; bh=YluytUCNMj4hB0rn5ZJJqQr/Ajs1lxevxGE4cIG6BtQ=; b=xqCINzbjBMnRiRKjYSfgLAPk8+3lg4lzGOL0o/niIhGil84X+kf6q2JMsZ99PcPfUT uu69xGBvxXFYL7nOC6BXLz41pLykD9JAWFXoWlPAoT+svCk6MjC0yJbDnt/h4ia5mYeB gcWrvMle/Wj9k5vGK+8t3c/KMILi0RCp3q+wPbNRbmUtinQhCxV0fFfObwb13I4VEszf RTsaxxiHOhZdiqCh0EU7ssgM7vEuSI6rs3BSKJ+TcgIAI0LMw9TD39fwSf7B0X4L9W0I Vqalx4xD0gd7o7Gf6cVSnLD4nc4Wb0OmBCz5UX6yxDcp9SsUhA8h8gWYVG6rHo49+P1s 0RmQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@infradead.org header.s=merlin.20170209 header.b=C8ObFZyO; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id e26si210143ejx.576.2020.11.30.04.58.24; Mon, 30 Nov 2020 04:58:47 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@infradead.org header.s=merlin.20170209 header.b=C8ObFZyO; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726283AbgK3M4x (ORCPT + 99 others); Mon, 30 Nov 2020 07:56:53 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:32920 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725897AbgK3M4w (ORCPT ); Mon, 30 Nov 2020 07:56:52 -0500 Received: from merlin.infradead.org (merlin.infradead.org [IPv6:2001:8b0:10b:1231::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 61285C0613CF; Mon, 30 Nov 2020 04:56:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=merlin.20170209; h=Mime-Version:Content-Type:References: In-Reply-To:Date:Cc:To:From:Subject:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=YluytUCNMj4hB0rn5ZJJqQr/Ajs1lxevxGE4cIG6BtQ=; b=C8ObFZyOCxYqiUajpBvTiC9wEI befPFYbnGG1rNPZg/cWJRNu1GpXirTUMdqMibA1O/8DPEzchxBStoaab/5XYxwmaMV+ZHLovcVxi7 n5v105f+ZnGi7wLukT4+mJbJz6Pf68A1Fe35YBhbPufNMTE6E67EuVmBdJ/TP74gc+LYCjlAR/4OB s6Gte+Uek68gj1DAvtQCq9o53qu6fEuLYkXrhFM2BlLduIbzUWtgTtAAv28qwqFZ0MOncbLbNXSEW X8Qp2jCK4UP6QmwpZatD/T4rFW413+n+lbujGLqxejaXirHFsnEkZGUdEZIjx/cJEbdahzLPpXXM8 NmQTHZEQ==; Received: from [54.239.6.186] (helo=freeip.amazon.com) by merlin.infradead.org with esmtpsa (Exim 4.92.3 #3 (Red Hat Linux)) id 1kjiij-00030L-UU; Mon, 30 Nov 2020 12:55:58 +0000 Message-ID: <18e854e2a84750c2de2d32384710132b83d84286.camel@infradead.org> Subject: Re: [PATCH RFC 11/39] KVM: x86/xen: evtchn signaling via eventfd From: David Woodhouse To: Joao Martins , Ankur Arora Cc: Boris Ostrovsky , Paolo Bonzini , Radim =?UTF-8?Q?Kr=C4=8Dm=C3=A1=C5=99?= , Thomas Gleixner , Ingo Molnar , Borislav Petkov , "H. Peter Anvin" , x86@kernel.org, kvm@vger.kernel.org, linux-kernel@vger.kernel.org Date: Mon, 30 Nov 2020 12:55:54 +0000 In-Reply-To: References: <20190220201609.28290-1-joao.m.martins@oracle.com> <20190220201609.28290-12-joao.m.martins@oracle.com> <874d1fa922cb56238676b90bbeeba930d0706500.camel@infradead.org> Content-Type: multipart/signed; micalg="sha-256"; protocol="application/x-pkcs7-signature"; boundary="=-5uPFF1GHOHExIWWj5wcm" X-Mailer: Evolution 3.28.5-0ubuntu0.18.04.2 Mime-Version: 1.0 X-SRS-Rewrite: SMTP reverse-path rewritten from by merlin.infradead.org. See http://www.infradead.org/rpr.html Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org --=-5uPFF1GHOHExIWWj5wcm Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Mon, 2020-11-30 at 12:17 +0000, Joao Martins wrote: > On 11/30/20 9:41 AM, David Woodhouse wrote: > > On Wed, 2019-02-20 at 20:15 +0000, Joao Martins wrote: > > > userspace registers a @port to an @eventfd, that is bound to a > > > @vcpu. This information is then used when the guest does an > > > EVTCHNOP_send with a port registered with the kernel. > >=20 > > Why do I want this part? > >=20 >=20 > It is unnecessary churn to support eventfd at this point. >=20 > The patch subject/name is also a tad misleading, as > it implements the event channel port offloading with the optional fd > being just a small detail in addition. Right, I'd got that the commit title overstated its importance, but was wondering why the optional fd existed at all. I looked through the later xen_shim parts, half expecting it to be used there... but no, they add their own special case next to the place where eventfd_signal() gets called, instead of hooking the shim up via an eventfd. > > > EVTCHNOP_send short-circuiting happens by marking the event as pendin= g > > > in the shared info and vcpu info pages and doing the upcall. For IPIs > > > and interdomain event channels, we do the upcall on the assigned vcpu= . > >=20 > > This part I understand, 'peeking' at the EVTCHNOP_send hypercall so > > that we can short-circuit IPI delivery without it having to bounce > > through userspace. > >=20 > > But why would I then want then short-circuit the short-circuit, > > providing an eventfd for it to signal... so that I can then just > > receive the event in userspace in a *different* form to the original > > hypercall exit I would have got? > >=20 >=20 > One thing I didn't quite do at the time, is the whitelisting of unregiste= red > ports to userspace. Right now, it's a blacklist i.e. if it's not handled = in > the kernel (IPIs, timer vIRQ, etc) it goes back to userspace. When the on= ly > ones which go to userspace should be explicitly requested as such > and otherwise return -ENOENT in the hypercall. Hm, why would -ENOENT be a fast path which needs to be handled in the kernel? > Perhaps eventfd could be a way to express this? Like if you register > without an eventfd it's offloaded, otherwise it's assigned to userspace, > or if neither it's then returned an error without bothering the VMM. I much prefer the simple model where the *only* event channels that the kernel knows about are the ones it's expected to handle. For any others, the bypass doesn't kick in, and userspace gets the KVM_EXIT_HYPERCALL exit. > But still, eventfd is probably unnecessary complexity when another @type > (XEN_EVTCHN_TYPE_USER) would serve, and then just exiting to userspace > and let it route its evtchn port handling to the its own I/O handling thr= ead. Hmm... so the benefit of the eventfd is that we can wake the I/O thread directly instead of bouncing out to userspace on the vCPU thread only for it to send a signal and return to the guest? Did you ever use that, and it is worth the additional in-kernel code? Is there any reason we'd want that for IPI or VIRQ event channels, or can it be only for INTERDOM/UNBOUND event channels which come later? I'm tempted to leave it out of the first patch, and *maybe* add it back in a later patch, putting it in the union alongside .virq.type. struct kvm_xen_eventfd { =20 #define XEN_EVTCHN_TYPE_VIRQ 0 #define XEN_EVTCHN_TYPE_IPI 1 __u32 type; __u32 port; __u32 vcpu; - __s32 fd; =20 #define KVM_XEN_EVENTFD_DEASSIGN (1 << 0) #define KVM_XEN_EVENTFD_UPDATE (1 << 1) __u32 flags; union { struct { __u8 type; } virq; + struct { + __s32 eventfd; + } interdom; /* including unbound */ __u32 padding[2]; }; } evtchn; Does that make sense to you? --=-5uPFF1GHOHExIWWj5wcm Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCECow ggUcMIIEBKADAgECAhEA4rtJSHkq7AnpxKUY8ZlYZjANBgkqhkiG9w0BAQsFADCBlzELMAkGA1UE BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgG A1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhl bnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwHhcNMTkwMTAyMDAwMDAwWhcNMjIwMTAxMjM1 OTU5WjAkMSIwIAYJKoZIhvcNAQkBFhNkd213MkBpbmZyYWRlYWQub3JnMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAsv3wObLTCbUA7GJqKj9vHGf+Fa+tpkO+ZRVve9EpNsMsfXhvFpb8 RgL8vD+L133wK6csYoDU7zKiAo92FMUWaY1Hy6HqvVr9oevfTV3xhB5rQO1RHJoAfkvhy+wpjo7Q cXuzkOpibq2YurVStHAiGqAOMGMXhcVGqPuGhcVcVzVUjsvEzAV9Po9K2rpZ52FE4rDkpDK1pBK+ uOAyOkgIg/cD8Kugav5tyapydeWMZRJQH1vMQ6OVT24CyAn2yXm2NgTQMS1mpzStP2ioPtTnszIQ Ih7ASVzhV6csHb8Yrkx8mgllOyrt9Y2kWRRJFm/FPRNEurOeNV6lnYAXOymVJwIDAQABo4IB0zCC Ac8wHwYDVR0jBBgwFoAUgq9sjPjF/pZhfOgfPStxSF7Ei8AwHQYDVR0OBBYEFLfuNf820LvaT4AK xrGK3EKx1DE7MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUF BwMEBggrBgEFBQcDAjBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEDBTArMCkGCCsGAQUFBwIBFh1o dHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3Js LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVtYWls Q0EuY3JsMIGLBggrBgEFBQcBAQR/MH0wVQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQuY29tb2RvY2Eu Y29tL0NPTU9ET1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5jcnQwJAYI KwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAeBgNVHREEFzAVgRNkd213MkBpbmZy YWRlYWQub3JnMA0GCSqGSIb3DQEBCwUAA4IBAQALbSykFusvvVkSIWttcEeifOGGKs7Wx2f5f45b nv2ghcxK5URjUvCnJhg+soxOMoQLG6+nbhzzb2rLTdRVGbvjZH0fOOzq0LShq0EXsqnJbbuwJhK+ PnBtqX5O23PMHutP1l88AtVN+Rb72oSvnD+dK6708JqqUx2MAFLMevrhJRXLjKb2Mm+/8XBpEw+B 7DisN4TMlLB/d55WnT9UPNHmQ+3KFL7QrTO8hYExkU849g58Dn3Nw3oCbMUgny81ocrLlB2Z5fFG Qu1AdNiBA+kg/UxzyJZpFbKfCITd5yX49bOriL692aMVDyqUvh8fP+T99PqorH4cIJP6OxSTdxKM MIIFHDCCBASgAwIBAgIRAOK7SUh5KuwJ6cSlGPGZWGYwDQYJKoZIhvcNAQELBQAwgZcxCzAJBgNV BAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAY BgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMT0wOwYDVQQDEzRDT01PRE8gUlNBIENsaWVudCBBdXRo ZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMB4XDTE5MDEwMjAwMDAwMFoXDTIyMDEwMTIz NTk1OVowJDEiMCAGCSqGSIb3DQEJARYTZHdtdzJAaW5mcmFkZWFkLm9yZzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALL98Dmy0wm1AOxiaio/bxxn/hWvraZDvmUVb3vRKTbDLH14bxaW /EYC/Lw/i9d98CunLGKA1O8yogKPdhTFFmmNR8uh6r1a/aHr301d8YQea0DtURyaAH5L4cvsKY6O 0HF7s5DqYm6tmLq1UrRwIhqgDjBjF4XFRqj7hoXFXFc1VI7LxMwFfT6PStq6WedhROKw5KQytaQS vrjgMjpICIP3A/CroGr+bcmqcnXljGUSUB9bzEOjlU9uAsgJ9sl5tjYE0DEtZqc0rT9oqD7U57My ECIewElc4VenLB2/GK5MfJoJZTsq7fWNpFkUSRZvxT0TRLqznjVepZ2AFzsplScCAwEAAaOCAdMw ggHPMB8GA1UdIwQYMBaAFIKvbIz4xf6WYXzoHz0rcUhexIvAMB0GA1UdDgQWBBS37jX/NtC72k+A CsaxitxCsdQxOzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDBAYIKwYBBQUHAwIwRgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAwUwKzApBggrBgEFBQcCARYd aHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny bC5jb21vZG9jYS5jb20vQ09NT0RPUlNBQ2xpZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFp bENBLmNybDCBiwYIKwYBBQUHAQEEfzB9MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LmNvbW9kb2Nh LmNvbS9DT01PRE9SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVtYWlsQ0EuY3J0MCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wHgYDVR0RBBcwFYETZHdtdzJAaW5m cmFkZWFkLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAC20spBbrL71ZEiFrbXBHonzhhirO1sdn+X+O W579oIXMSuVEY1LwpyYYPrKMTjKECxuvp24c829qy03UVRm742R9Hzjs6tC0oatBF7KpyW27sCYS vj5wbal+TttzzB7rT9ZfPALVTfkW+9qEr5w/nSuu9PCaqlMdjABSzHr64SUVy4ym9jJvv/FwaRMP gew4rDeEzJSwf3eeVp0/VDzR5kPtyhS+0K0zvIWBMZFPOPYOfA59zcN6AmzFIJ8vNaHKy5QdmeXx RkLtQHTYgQPpIP1Mc8iWaRWynwiE3ecl+PWzq4i+vdmjFQ8qlL4fHz/k/fT6qKx+HCCT+jsUk3cS jDCCBeYwggPOoAMCAQICEGqb4Tg7/ytrnwHV2binUlYwDQYJKoZIhvcNAQEMBQAwgYUxCzAJBgNV BAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAY BgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMSswKQYDVQQDEyJDT01PRE8gUlNBIENlcnRpZmljYXRp b24gQXV0aG9yaXR5MB4XDTEzMDExMDAwMDAwMFoXDTI4MDEwOTIzNTk1OVowgZcxCzAJBgNVBAYT AkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNV BAoTEUNPTU9ETyBDQSBMaW1pdGVkMT0wOwYDVQQDEzRDT01PRE8gUlNBIENsaWVudCBBdXRoZW50 aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrOeV6wodnVAFsc4A5jTxhh2IVDzJXkLTLWg0X06WD6cpzEup/Y0dtmEatrQPTRI5Or1u6zf +bGBSyD9aH95dDSmeny1nxdlYCeXIoymMv6pQHJGNcIDpFDIMypVpVSRsivlJTRENf+RKwrB6vcf WlP8dSsE3Rfywq09N0ZfxcBa39V0wsGtkGWC+eQKiz4pBZYKjrc5NOpG9qrxpZxyb4o4yNNwTqza aPpGRqXB7IMjtf7tTmU2jqPMLxFNe1VXj9XB1rHvbRikw8lBoNoSWY66nJN/VCJv5ym6Q0mdCbDK CMPybTjoNCQuelc0IAaO4nLUXk0BOSxSxt8kCvsUtQIDAQABo4IBPDCCATgwHwYDVR0jBBgwFoAU u69+Aj36pvE8hI6t7jiY7NkyMtQwHQYDVR0OBBYEFIKvbIz4xf6WYXzoHz0rcUhexIvAMA4GA1Ud DwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMBEGA1UdIAQKMAgwBgYEVR0gADBMBgNVHR8E RTBDMEGgP6A9hjtodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDZXJ0aWZpY2F0aW9u QXV0aG9yaXR5LmNybDBxBggrBgEFBQcBAQRlMGMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuY29t b2RvY2EuY29tL0NPTU9ET1JTQUFkZFRydXN0Q0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz cC5jb21vZG9jYS5jb20wDQYJKoZIhvcNAQEMBQADggIBAHhcsoEoNE887l9Wzp+XVuyPomsX9vP2 SQgG1NgvNc3fQP7TcePo7EIMERoh42awGGsma65u/ITse2hKZHzT0CBxhuhb6txM1n/y78e/4ZOs 0j8CGpfb+SJA3GaBQ+394k+z3ZByWPQedXLL1OdK8aRINTsjk/H5Ns77zwbjOKkDamxlpZ4TKSDM KVmU/PUWNMKSTvtlenlxBhh7ETrN543j/Q6qqgCWgWuMAXijnRglp9fyadqGOncjZjaaSOGTTFB+ E2pvOUtY+hPebuPtTbq7vODqzCM6ryEhNhzf+enm0zlpXK7q332nXttNtjv7VFNYG+I31gnMrwfH M5tdhYF/8v5UY5g2xANPECTQdu9vWPoqNSGDt87b3gXb1AiGGaI06vzgkejL580ul+9hz9D0S0U4 jkhJiA7EuTecP/CFtR72uYRBcunwwH3fciPjviDDAI9SnC/2aPY8ydehzuZutLbZdRJ5PDEJM/1t yZR2niOYihZ+FCbtf3D9mB12D4ln9icgc7CwaxpNSCPt8i/GqK2HsOgkL3VYnwtx7cJUmpvVdZ4o gnzgXtgtdk3ShrtOS1iAN2ZBXFiRmjVzmehoMof06r1xub+85hFQzVxZx5/bRaTKTlL8YXLI8nAb R9HWdFqzcOoB/hxfEyIQpx9/s81rgzdEZOofSlZHynoSMYIDyjCCA8YCAQEwga0wgZcxCzAJBgNV BAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAY BgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMT0wOwYDVQQDEzRDT01PRE8gUlNBIENsaWVudCBBdXRo ZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA4rtJSHkq7AnpxKUY8ZlYZjANBglghkgB ZQMEAgEFAKCCAe0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAx MTMwMTI1NTU0WjAvBgkqhkiG9w0BCQQxIgQgmtp/0PNBSoGeOyVji4+u4ec7bG1MlQZunkwlnBV5 ZwMwgb4GCSsGAQQBgjcQBDGBsDCBrTCBlzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIg TWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQx PTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1h aWwgQ0ECEQDiu0lIeSrsCenEpRjxmVhmMIHABgsqhkiG9w0BCRACCzGBsKCBrTCBlzELMAkGA1UE BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgG A1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhl bnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQDiu0lIeSrsCenEpRjxmVhmMA0GCSqGSIb3 DQEBAQUABIIBACxhzwQHPu6aFjWK93p3z0Wgagj3UrarGfGLhYOTT1rZWZ9nSG56KY3TfILn1LEL RV6jnzo7RD9nR1f2AY5Bc9vIB6xLcoH55rdD7I0TRutMe6abRMU2dAyjC3q7GDA4nlCDOWs09DCm suw12rHdSaqeD7UJwXmUMDmnwPAhgZScgBDQskLCQVOajIe1pU501EAmVaA3EUhSMLtqf3rKOUQZ sABULCpSSyTUkICdzOpwXwMcR1CBUpva/ujkfmEMQ7YfCw9viMxj3Qt8brO0B2cF8rqpmRuKoZJE Tp6ewHXzv/ZN5vgVwY+ETe9dveE1rAxwWUvbxNEq1StxjZKeWCQAAAAAAAA= --=-5uPFF1GHOHExIWWj5wcm--